Live Security Platinum - Malwarebytes meldet Löschung von 3 infizierten Dateien, sind aber wieder da

GMER Logfile:

	
Code: 

Alles auswählenAufklappen 
ATTFilter

  
	
GMER 1.0.15.14966 - hxxp://www.gmer.net
Rootkit scan 2012-06-14 20:16:38
Windows 6.1.7601 Service Pack 1


---- System - GMER 1.0.15 ----

INT 0x1F        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                83438AF8
INT 0x37        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                83438104
INT 0xC1        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                834383F4
INT 0xD1        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                83420634
INT 0xD2        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                83420898
INT 0xDF        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                834381DC
INT 0xE1        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                83438958
INT 0xE3        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                834386F8
INT 0xFD        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                83438F2C
INT 0xFE        \SystemRoot\system32\halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)                                834391A8

---- Kernel code sections - GMER 1.0.15 ----

.text           ntoskrnl.exe!ZwRollbackEnlistment + 1409                                                                                83050989 1 Byte  [06]
.text           ntoskrnl.exe!KiDispatchInterrupt + 5A2                                                                                  830704E2 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
?               System32\Drivers\spph.sys                                                                                               Das System kann den angegebenen Pfad nicht finden. !
.text           USBPORT.SYS!DllUnload                                                                                                   94263D81 5 Bytes  JMP 871381D8 
.text           am0ugcsc.SYS                                                                                                            91C01000 12 Bytes  [44, 38, 42, 83, EE, 36, 42, ...]
.text           am0ugcsc.SYS                                                                                                            91C0100D 9 Bytes  [17, 42, 83, 48, 3B, 42, 83, ...] {POP SS; INC EDX; OR DWORD [EAX+0x3b], 0x42; ADD DWORD [EAX], 0x0}
.text           am0ugcsc.SYS                                                                                                            91C01017 20 Bytes  [00, DE, 27, B1, 8B, E6, 25, ...]
.text           am0ugcsc.SYS                                                                                                            91C0102C 149 Bytes  [00, 00, 00, 00, D0, B7, 04, ...]
.text           am0ugcsc.SYS                                                                                                            91C010C3 8 Bytes  [00, 00, 00, 00, 00, 00, 00, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL}
.text           ...                                                                                                                     
.text           peauth.sys                                                                                                              AF4B5C9E 27 Bytes  [18, 82, 0D, 11, 20, AE, 61, ...]
.text           peauth.sys                                                                                                              AF4B5CC2 27 Bytes  [18, 82, 0D, 11, 20, AE, 61, ...]

---- User code sections - GMER 1.0.15 ----

.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtCreateFile + 6                  76E155CE 4 Bytes  [28, 00, 1F, 00]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtCreateFile + B                  76E155D3 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtCreateKey + 6                   76E1560E 4 Bytes  [68, 01, 1F, 00]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtCreateKey + B                   76E15613 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtCreateMutant + 6                76E1564E 4 Bytes  [68, 02, 1F, 00]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtCreateMutant + B                76E15653 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtCreateSection + 6               76E156EE 4 Bytes  [A8, 02, 1F, 00]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtCreateSection + B               76E156F3 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtMapViewOfSection + 6            76E15C2E 4 Bytes  CALL 75E17B37 C:\windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtMapViewOfSection + B            76E15C33 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenFile + 6                    76E15CDE 4 Bytes  [68, 00, 1F, 00]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenFile + B                    76E15CE3 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenKey + 6                     76E15D0E 4 Bytes  [A8, 01, 1F, 00]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenKey + B                     76E15D13 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenKeyEx + 6                   76E15D1E 4 Bytes  CALL 75E17C24 C:\windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenKeyEx + B                   76E15D23 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenMutant + 6                  76E15D5E 4 Bytes  [28, 02, 1F, 00]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenMutant + B                  76E15D63 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenProcess + 6                 76E15D8E 1 Byte  [68]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenProcess + 6                 76E15D8E 4 Bytes  [68, 03, 1F, 00]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenProcess + B                 76E15D93 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenProcessToken + 6            76E15D9E 1 Byte  [A8]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenProcessToken + 6            76E15D9E 4 Bytes  [A8, 03, 1F, 00]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenProcessToken + B            76E15DA3 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenProcessTokenEx + 6          76E15DAE 4 Bytes  [68, 04, 1F, 00]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenProcessTokenEx + B          76E15DB3 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenSection + 6                 76E15DCE 4 Bytes  CALL 75E17CD5 C:\windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenSection + B                 76E15DD3 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenThread + 6                  76E15E0E 1 Byte  [28]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenThread + 6                  76E15E0E 4 Bytes  [28, 03, 1F, 00]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenThread + B                  76E15E13 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenThreadToken + 6             76E15E1E 4 Bytes  [28, 04, 1F, 00]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenThreadToken + B             76E15E23 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenThreadTokenEx + 6           76E15E2E 4 Bytes  [A8, 04, 1F, 00]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtOpenThreadTokenEx + B           76E15E33 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtQueryAttributesFile + 6         76E15F3E 4 Bytes  [A8, 00, 1F, 00]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtQueryAttributesFile + B         76E15F43 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtQueryFullAttributesFile + 6     76E15FEE 4 Bytes  CALL 75E17EF3 C:\windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtQueryFullAttributesFile + B     76E15FF3 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtSetInformationFile + 6          76E1663E 4 Bytes  [28, 01, 1F, 00]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtSetInformationFile + B          76E16643 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtSetInformationThread + 6        76E1669E 1 Byte  [E8]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtSetInformationThread + 6        76E1669E 4 Bytes  CALL 75E185A6 C:\windows\system32\SHELL32.dll (Allgemeine Windows-Shell-DLL/Microsoft Corporation)
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtSetInformationThread + B        76E166A3 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtUnmapViewOfSection + 6          76E169BE 4 Bytes  [28, 05, 1F, 00]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ntdll.dll!NtUnmapViewOfSection + B          76E169C3 1 Byte  [E2]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] kernel32.dll!CreateProcessW                 763D204D 5 Bytes  JMP 00010030 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] kernel32.dll!CreateProcessA                 763D2082 5 Bytes  JMP 00010070 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!DeleteObject                      764B5F14 5 Bytes  JMP 004901B0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!SelectObject                      764B6640 5 Bytes  JMP 004905F0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!SetTextColor                      764B6906 5 Bytes  JMP 004909F0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!SetBkMode                         764B69B1 5 Bytes  JMP 004908B0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!DeleteDC                          764B6EAA 5 Bytes  JMP 00490170 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!GetDeviceCaps                     764B6F7F 5 Bytes  JMP 004903B0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!ExtSelectClipRgn                  764B7114 5 Bytes  JMP 004902F0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!SelectClipRgn                     764B7242 5 Bytes  JMP 004905B0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!SetStretchBltMode                 764B7705 5 Bytes  JMP 00490670 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!GetCurrentObject                  764B7917 5 Bytes  JMP 00490370 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!GetTextMetricsW                   764B7B8F 5 Bytes  JMP 00490DF0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!GetTextAlign                      764B7DAF 5 Bytes  JMP 00490D30 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!IntersectClipRect                 764B7DFE 5 Bytes  JMP 004903F0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!ExtTextOutW                       764B8192 5 Bytes  JMP 00490930 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!SetTextAlign                      764B828E 5 Bytes  JMP 004909B0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!GetClipBox                        764B8525 5 Bytes  JMP 00490330 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!MoveToEx                          764B8C21 5 Bytes  JMP 00490470 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!StretchDIBits                     764BA53E 5 Bytes  JMP 00490730 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!RestoreDC                         764BA67B 5 Bytes  JMP 00490530 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!SaveDC                            764BA74B 5 Bytes  JMP 00490570 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!GetTextExtentPoint32W             764BB4B5 5 Bytes  JMP 00490630 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!GetTextFaceW                      764BB73A 2 Bytes  JMP 00490CF0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!GetTextFaceW + 3                  764BB73D 2 Bytes  [FD, 89]
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!GetFontData                       764BBCC4 5 Bytes  JMP 00490C30 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!SetWorldTransform                 764BC90A 5 Bytes  JMP 004906B0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!CreateDCA                         764BCCA9 5 Bytes  JMP 004900B0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!CreateDCW                         764BCF79 5 Bytes  JMP 004900F0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!CreateICW                         764BCFD0 5 Bytes  JMP 00490130 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!GetTextMetricsA                   764BD0F2 5 Bytes  JMP 00490DB0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!Rectangle                         764BF1FF 5 Bytes  JMP 00490970 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!LineTo                            764BF59B 5 Bytes  JMP 00490430 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!SetICMMode                        764BFAA4 5 Bytes  JMP 00490D70 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!ExtTextOutA                       764C03F9 5 Bytes  JMP 004908F0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!ExtEscape                         764C2949 5 Bytes  JMP 004902B0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!Escape                            764C3939 5 Bytes  JMP 00490270 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!GetTextFaceA                      764C3E6A 5 Bytes  JMP 00490CB0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!SetPolyFillMode                   764CD851 5 Bytes  JMP 00490AF0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!SetMiterLimit                     764CDA0D 5 Bytes  JMP 00490B30 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!EndPage                           764D00D7 5 Bytes  JMP 00490230 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!ResetDCW                          764D050D 5 Bytes  JMP 00490A70 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!GetGlyphOutlineW                  764DC1BA 5 Bytes  JMP 00490C70 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!CreateScalableFontResourceW       764DE817 5 Bytes  JMP 00490B70 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!AddFontResourceW                  764DEC13 5 Bytes  JMP 00490BB0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!RemoveFontResourceW               764DF109 5 Bytes  JMP 00490BF0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!AbortDoc                          764E4C63 5 Bytes  JMP 00490030 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!EndDoc                            764E50AA 5 Bytes  JMP 004901F0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!StartPage                         764E5195 5 Bytes  JMP 004906F0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!StartDocW                         764E5BB0 5 Bytes  JMP 004907B0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!BeginPath                         764E635D 5 Bytes  JMP 004907F0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!SelectClipPath                    764E63B4 5 Bytes  JMP 00490AB0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!CloseFigure                       764E640F 5 Bytes  JMP 00490070 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!EndPath                           764E6466 5 Bytes  JMP 00490A30 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!StrokePath                        764E6699 5 Bytes  JMP 00490770 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!FillPath                          764E6726 5 Bytes  JMP 00490830 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!PolylineTo                        764E6B94 5 Bytes  JMP 004904F0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!PolyBezierTo                      764E6C25 5 Bytes  JMP 004904B0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] GDI32.dll!PolyDraw                          764E6CD7 5 Bytes  JMP 00490870 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!ActivateKeyboardLayout           76508203 5 Bytes  JMP 004A04F0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!ScreenToClient                   7650A506 7 Bytes  JMP 004A0670 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!RegisterClipboardFormatA         7650C091 5 Bytes  JMP 004A02F0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!RegisterClipboardFormatW         7650DF8D 5 Bytes  JMP 004A02B0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!SetCursor                        76513075 5 Bytes  JMP 004A0530 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!MonitorFromWindow                76513622 7 Bytes  JMP 004A0630 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!PostMessageW                     7651447B 5 Bytes  JMP 004A05F0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!IsWindowVisible                  76514D69 7 Bytes  JMP 004A06B0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!GetClientRect                    765154DD 7 Bytes  JMP 004A05B0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!MapWindowPoints                  76515CAA 5 Bytes  JMP 004A0570 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!GetParent                        76516029 7 Bytes  JMP 004A06F0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!EmptyClipboard                   7652290C 5 Bytes  JMP 004A0130 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!SetClipboardData                 76522962 5 Bytes  JMP 004A0170 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!GetClipboardData                 76522BA7 5 Bytes  JMP 004A0030 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!GetClipboardFormatNameW          76525FD2 5 Bytes  JMP 004A0230 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!SetClipboardViewer               76526FF6 5 Bytes  JMP 004A04B0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!GetClipboardFormatNameA          7652700A 5 Bytes  JMP 004A0270 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!ChangeClipboardChain             7653147C 5 Bytes  JMP 004A0430 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!GetTopWindow                     765324D9 7 Bytes  JMP 004A0730 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!CloseClipboard                   7653446C 5 Bytes  JMP 004A00B0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!OpenClipboard                    7653447E 5 Bytes  JMP 004A0070 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!IsClipboardFormatAvailable       765344FF 5 Bytes  JMP 004A00F0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!GetClipboardSequenceNumber       76534513 5 Bytes  JMP 004A0330 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!GetClipboardOwner                76534525 5 Bytes  JMP 004A0370 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!CountClipboardFormats            7653470A 5 Bytes  JMP 004A01F0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!EnumClipboardFormats             765347EC 5 Bytes  JMP 004A01B0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!GetOpenClipboardWindow           7653480B 5 Bytes  JMP 004A03F0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!SetCursorPos                     7654C1B0 5 Bytes  JMP 004A0770 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!GetClipboardViewer               76564AF7 5 Bytes  JMP 004A0470 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] USER32.dll!GetPriorityClipboardFormat       76564BF9 5 Bytes  JMP 004A03B0 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ole32.dll!OleSetClipboard                   762D0045 5 Bytes  JMP 004B0030 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ole32.dll!OleIsCurrentClipboard             762D36B2 5 Bytes  JMP 004B0070 
.text           C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe[4128] ole32.dll!OleGetClipboard                   762FFDCD 5 Bytes  JMP 004B00B0 
.text           C:\Program Files\Mozilla Firefox\plugin-container.exe[4136] USER32.dll!SetWindowLongA                                   76508BA3 5 Bytes  JMP 663CFB5F C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           C:\Program Files\Mozilla Firefox\plugin-container.exe[4136] USER32.dll!SetWindowLongW                                   76514449 5 Bytes  JMP 663CFAEE C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           C:\Program Files\Mozilla Firefox\plugin-container.exe[4136] USER32.dll!GetWindowInfo                                    76514B5E 5 Bytes  JMP 661AA76C C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           C:\Program Files\Mozilla Firefox\plugin-container.exe[4136] USER32.dll!TrackPopupMenu                                   76522228 5 Bytes  JMP 661AAD79 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           C:\Program Files\Mozilla Firefox\firefox.exe[4720] ntdll.dll!LdrLoadDll                                                 76E3223E 5 Bytes  JMP 6602696F C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           C:\Program Files\Mozilla Firefox\firefox.exe[4720] kernel32.dll!MapViewOfFile                                           764193DB 5 Bytes  JMP 662D0219 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           C:\Program Files\Mozilla Firefox\firefox.exe[4720] kernel32.dll!VirtualAlloc                                            7641C43A 5 Bytes  JMP 662D0240 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           C:\Program Files\Mozilla Firefox\firefox.exe[4720] GDI32.dll!CreateDIBSection                                           764B8850 5 Bytes  JMP 662D01A3 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)

---- Kernel IAT/EAT - GMER 1.0.15 ----

IAT             \SystemRoot\system32\drivers\pci.sys[ntoskrnl.exe!IoDetachDevice]                                                       [8BA40DDC] \SystemRoot\System32\Drivers\spph.sys
IAT             \SystemRoot\system32\drivers\pci.sys[ntoskrnl.exe!IoAttachDeviceToDeviceStack]                                          [8BA40E30] \SystemRoot\System32\Drivers\spph.sys
IAT             \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortReadPortUchar]                                                [8BA16042] \SystemRoot\System32\Drivers\spph.sys
IAT             \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortWritePortUchar]                                               [8BA166D6] \SystemRoot\System32\Drivers\spph.sys
IAT             \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortWritePortBufferUshort]                                        [8BA16800] \SystemRoot\System32\Drivers\spph.sys
IAT             \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortReadPortBufferUshort]                                         [8BA1613E] \SystemRoot\System32\Drivers\spph.sys
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortNotification]                                              00147880
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortQuerySystemTime]                                           78800C75
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortReadPortUchar]                                             06750015
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortStallExecution]                                            C25DC033
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortWritePortUchar]                                            458B0008
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortWritePortUlong]                                            6A006A08
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortGetPhysicalAddress]                                        50056A24
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortConvertPhysicalAddressToUlong]                             005AB7E8
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortGetScatterGatherList]                                      0001B800
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortGetParentBusType]                                          C25D0000
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortRequestCallback]                                           CCCC0008
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortWritePortBufferUshort]                                     CCCCCCCC
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortGetUnCachedExtension]                                      CCCCCCCC
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortCompleteRequest]                                           CCCCCCCC
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortCopyMemory]                                                53EC8B55
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortEtwTraceLog]                                               800C5D8B
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortCompleteAllActiveRequests]                                 [7500117B] \Windows\System32\KernelBase.dll (Client-DLL für Windows NT-Basis-API/Microsoft Corporation)
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortReleaseRequestSenseIrb]                                    127B806A
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortBuildRequestSenseIrb]                                      80647500
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortReadPortBufferUshort]                                      [7500137B] \Windows\System32\KernelBase.dll (Client-DLL für Windows NT-Basis-API/Microsoft Corporation)
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortInitialize]                                                157B805E
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortGetDeviceBase]                                             56587500
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[ataport.SYS!AtaPortDeviceStateChange]                                         8008758B
IAT             \SystemRoot\System32\Drivers\am0ugcsc.SYS[NTOSKRNL.exe!KeTickCount]                                                     78801875

---- User IAT/EAT - GMER 1.0.15 ----

IAT             C:\windows\System32\rundll32.exe[3792] @ C:\windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress]                   [74E9FFF6] C:\windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)
IAT             C:\windows\System32\rundll32.exe[3792] @ C:\windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress]                    [74E9FFF6] C:\windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)
IAT             C:\windows\System32\rundll32.exe[3792] @ C:\windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress]                 [74E9FFF6] C:\windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)
IAT             C:\windows\System32\rundll32.exe[3792] @ C:\windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress]                  [74E9FFF6] C:\windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)

---- Devices - GMER 1.0.15 ----

Device          \FileSystem\Ntfs \Ntfs                                                                                                  856211F8
Device          \FileSystem\fastfat \FatCdrom                                                                                           8875B1F8
Device          \Driver\USBSTOR \Device\0000008e                                                                                        870061F8
Device          \Driver\USBSTOR \Device\0000008f                                                                                        870061F8

AttachedDevice  \Driver\kbdclass \Device\KeyboardClass0                                                                                 Wdf01000.sys (Kernelmodustreiber-Frameworklaufzeit/Microsoft Corporation)
AttachedDevice  \Driver\kbdclass \Device\KeyboardClass1                                                                                 Wdf01000.sys (Kernelmodustreiber-Frameworklaufzeit/Microsoft Corporation)

Device          \Driver\sptd \Device\3919484750                                                                                         spph.sys
Device          \Driver\usbuhci \Device\USBPDO-0                                                                                        871371F8
Device          \Driver\usbuhci \Device\USBPDO-1                                                                                        871371F8
Device          \Driver\usbuhci \Device\USBPDO-2                                                                                        871371F8
Device          \Driver\usbehci \Device\USBPDO-3                                                                                        87122500
Device          \Driver\usbuhci \Device\USBPDO-4                                                                                        871371F8
Device          \Driver\usbuhci \Device\USBPDO-5                                                                                        871371F8
Device          \Driver\NetBT \Device\NetBT_Tcpip_{E366DA8A-EC55-4CAC-9A1B-0C76A4645162}                                                870AC1F8
Device          \Driver\usbuhci \Device\USBPDO-6                                                                                        871371F8
Device          \Driver\NetBT \Device\NetBT_Tcpip_{EEEEF2AB-EDE4-4BD2-A76D-15A1B293ADDA}                                                870AC1F8
Device          \Driver\volmgr \Device\HarddiskVolume1                                                                                  8561B1F8

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume1                                                                                  fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

Device          \Driver\usbehci \Device\USBPDO-7                                                                                        87122500
Device          \Driver\volmgr \Device\HarddiskVolume2                                                                                  8561B1F8

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume2                                                                                  fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

Device          \Driver\cdrom \Device\CdRom0                                                                                            86FFA388
Device          \Driver\ACPI_HAL \Device\00000059                                                                                       halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)
Device          \Driver\volmgr \Device\HarddiskVolume3                                                                                  8561B1F8

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume3                                                                                  fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

Device          \Driver\cdrom \Device\CdRom1                                                                                            86FFA388
Device          \Driver\volmgr \Device\HarddiskVolume4                                                                                  8561B1F8

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume4                                                                                  fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

Device          \Driver\PCI_PNP8748 \Device\00000067                                                                                    spph.sys
Device          \Driver\volmgr \Device\HarddiskVolume5                                                                                  8561B1F8

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume5                                                                                  fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

Device          \Driver\volmgr \Device\HarddiskVolume6                                                                                  8561B1F8

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume6                                                                                  fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

Device          \Driver\USBSTOR \Device\00000090                                                                                        870061F8
Device          \Driver\NetBT \Device\NetBt_Wins_Export                                                                                 870AC1F8
Device          \Driver\usbuhci \Device\USBFDO-0                                                                                        871371F8
Device          \Driver\usbuhci \Device\USBFDO-1                                                                                        871371F8
Device          \Driver\usbuhci \Device\USBFDO-2                                                                                        871371F8
Device          \Driver\usbehci \Device\USBFDO-3                                                                                        87122500
Device          \Driver\usbuhci \Device\USBFDO-4                                                                                        871371F8
Device          \Driver\usbuhci \Device\USBFDO-5                                                                                        871371F8
Device          \Driver\usbuhci \Device\USBFDO-6                                                                                        871371F8
Device          \Driver\usbehci \Device\USBFDO-7                                                                                        87122500
Device          \Driver\am0ugcsc \Device\Scsi\am0ugcsc1Port1Path0Target0Lun0                                                            871CE1F8
Device          \Driver\am0ugcsc \Device\Scsi\am0ugcsc1                                                                                 871CE1F8
Device          \Driver\USBSTOR \Device\0000008d                                                                                        870061F8
Device          \FileSystem\fastfat \Fat                                                                                                8875B1F8

AttachedDevice  \FileSystem\fastfat \Fat                                                                                                fltmgr.sys (Microsoft Dateisystem-Filter-Manager/Microsoft Corporation)

---- Registry - GMER 1.0.15 ----

Reg             HKLM\SYSTEM\CurrentControlSet\services\iphlpsvc\Parameters\Isatap\{4A5CA166-60F7-4DCA-8306-8EB9C8AA11E3}@InterfaceName  isatap.{8BDC05D5-E6EA-4AAE-91E5-21E400887E5D}
Reg             HKLM\SYSTEM\CurrentControlSet\services\iphlpsvc\Parameters\Isatap\{4A5CA166-60F7-4DCA-8306-8EB9C8AA11E3}@ReusableType   0
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s1                                                                      771343423
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s2                                                                      285507792
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@h0                                                                      1
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                                        
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                     C:\Program Files\DAEMON Tools Lite\
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                     0x00 0x00 0x00 0x00 ...
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                     0
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                  0xBA 0xF6 0x7D 0x63 ...
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001                               
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                            0x20 0x01 0x00 0x00 ...
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                         0xC3 0xA3 0x88 0xC9 ...
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0                          
Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                    0xE6 0xF3 0x54 0x28 ...
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                                            
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                         C:\Program Files\DAEMON Tools Lite\
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                         0x00 0x00 0x00 0x00 ...
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                         0
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                      0xBA 0xF6 0x7D 0x63 ...
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001                                   
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                                0x20 0x01 0x00 0x00 ...
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                             0xC3 0xA3 0x88 0xC9 ...
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0                              
Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                        0xE6 0xF3 0x54 0x28 ...

---- EOF - GMER 1.0.15 ----
         
 
--- --- ---