GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-07-03 11:24:03
Windows 6.0.6002 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 ST980811AS rev.3.ALD
Running: 4di0vy5j.exe; Driver: C:\Users\Rupert\AppData\Local\Temp\fwdyypob.sys


---- User code sections - GMER 1.0.15 ----

.text           C:\Program Files\Real\RealPlayer\Update\realsched.exe[2800] kernel32.dll!SetUnhandledExceptionFilter                    7644A8C5 5 Bytes  [33, C0, C2, 04, 00] {XOR EAX, EAX; RET 0x4}
.text           C:\Program Files\Newspiper\newspiper.exe[2824] user32.dll!SetScrollRange                                                7650D185 8 Bytes  JMP 01FD00D9 
.text           C:\Program Files\Newspiper\newspiper.exe[2824] user32.dll!SetScrollInfo                                                 765171D8 8 Bytes  JMP 01FD0000 
.text           C:\Program Files\Newspiper\newspiper.exe[2824] user32.dll!SetScrollPos                                                  76533602 8 Bytes  JMP 01FD01CA 

---- User IAT/EAT - GMER 1.0.15 ----

IAT             C:\Program Files\Newspiper\newspiper.exe[2824] @ C:\Windows\system32\ole32.dll [USER32.dll!GetSysColor]                 01F50000
IAT             C:\Program Files\Newspiper\newspiper.exe[2824] @ C:\Windows\system32\shell32.dll [USER32.dll!GetSysColorBrush]          01F50007
IAT             C:\Program Files\Newspiper\newspiper.exe[2824] @ C:\Windows\system32\shell32.dll [USER32.dll!GetSysColor]               01F50000
IAT             C:\Program Files\Newspiper\newspiper.exe[2824] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!GetSysColor]               01F50000
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW]    [61347917] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA]      [61347849] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress]    [613470AD] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW]      [61347889] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW]   [61347917] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA]     [61347849] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW]     [61347889] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress]   [613470AD] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\USER32.dll [GDI32.dll!GetStockObject]      [6134649C] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW]    [61347889] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW]  [61347917] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA]    [61347849] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress]  [613470AD] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHLWAPI.dll [GDI32.dll!GetStockObject]     [6134649C] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!GetSysColor]       [613463D7] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!DefWindowProcW]    [61346CC4] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!DefWindowProcA]    [61346CC4] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW]  [61347917] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress]  [613470AD] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW]    [61347889] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA]    [61347849] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHELL32.dll [GDI32.dll!GetStockObject]     [6134649C] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TrackPopupMenuEx]  [61346344] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TrackPopupMenu]    [61346306] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetSysColorBrush]  [613464A2] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetSysColor]       [613463D7] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHELL32.dll [USER32.dll!DefWindowProcW]    [61346CC4] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\SHELL32.dll [USER32.dll!AnimateWindow]     [61346537] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!CreateFileA]     [61346622] C:\Program Files\Yahoo!\Messenger\yui.dll
IAT             C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe[3064] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!CreateFileW]     [6134657C] C:\Program Files\Yahoo!\Messenger\yui.dll

---- Devices - GMER 1.0.15 ----

AttachedDevice  \Driver\kbdclass \Device\KeyboardClass0                                                                                 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
AttachedDevice  \Driver\kbdclass \Device\KeyboardClass1                                                                                 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)

---- EOF - GMER 1.0.15 ----