GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-04-18 23:32:03
Windows 6.0.6002 Service Pack 2
Running: 7ivpys51.exe; Driver: C:\Users\admin\AppData\Local\Temp\uxldypob.sys


---- System - GMER 1.0.15 ----

SSDT            \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys                                                                                                                  ZwTerminateProcess [0x805E3320]

---- Kernel code sections - GMER 1.0.15 ----

.text           ntkrnlpa.exe!KeSetEvent + 621                                                                                                                                       822E7D84 4 Bytes  [20, 33, 5E, 80]
.text           C:\Windows\system32\DRIVERS\nvlddmkm.sys                                                                                                                            section is writeable [0x8AA08340, 0x3ED9C7, 0xE8000020]

---- Devices - GMER 1.0.15 ----

AttachedDevice  \Driver\kbdclass \Device\KeyboardClass0                                                                                                                             Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
AttachedDevice  \Driver\tdx \Device\Tcp                                                                                                                                             avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice  \Driver\tdx \Device\Udp                                                                                                                                             avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice  \Driver\tdx \Device\RawIp                                                                                                                                           avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

Device          \Driver\BTHUSB \Device\0000007a                                                                                                                                     bthport.sys (Bluetooth Bus Driver/Microsoft Corporation)
Device          \Driver\BTHUSB \Device\0000007a                                                                                                                                     bthport.sys (Bluetooth Bus Driver/Microsoft Corporation)
Device          \Driver\BTHUSB \Device\0000007c                                                                                                                                     bthport.sys (Bluetooth Bus Driver/Microsoft Corporation)
Device          \Driver\BTHUSB \Device\0000007c                                                                                                                                     bthport.sys (Bluetooth Bus Driver/Microsoft Corporation)

---- Registry - GMER 1.0.15 ----

Reg             HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001a6b290f43                                                                                         
Reg             HKLM\SYSTEM\ControlSet003\Services\BTHPORT\Parameters\Keys\001a6b290f43 (not active ControlSet)                                                                     
Reg             HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures@User_Feed_Synchronization-{20BC02A1-511C-4A55-8E7C-D8454281F7A2}.job.fp  -2024909144

---- EOF - GMER 1.0.15 ----