API tools faq
paste
Guest User

GMER output

a guest
Jul 11th, 2012
93
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.98 KB | None | 0 0
raw download clone embed print report
  1. GMER 1.0.15.15641 - http://www.gmer.net
  2. Rootkit scan 2012-07-11 20:59:29
  3. Windows 6.1.7601 Service Pack 1
  4. Running: xg97yeki.exe
  5.  
  6.  
  7. ---- Registry - GMER 1.0.15 ----
  8.  
  9. Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\60fb428457c8
  10. Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\60fb428457c8@001edc4f36a0 0x20 0x28 0x24 0xB3 ...
  11. Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s1 771343423
  12. Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s2 285507792
  13. Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@h0 1
  14. Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04
  15. Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@p0 C:\Program Files (x86)\Alcohol Soft\Alcohol 120\
  16. Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 0
  17. Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0xCF 0x42 0xDD 0x7B ...
  18. Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001
  19. Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@a0 0x20 0x01 0x00 0x00 ...
  20. Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@ujdew 0x59 0xC0 0xEF 0x6F ...
  21. Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001\jdgg40
  22. Reg HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001\jdgg40@ujdew 0xEA 0x30 0xA9 0xF6 ...
  23. Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\60fb428457c8 (not active ControlSet)
  24. Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\60fb428457c8@001edc4f36a0 0x20 0x28 0x24 0xB3 ...
  25. Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet)
  26. Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@p0 C:\Program Files (x86)\Alcohol Soft\Alcohol 120\
  27. Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 0
  28. Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0xCF 0x42 0xDD 0x7B ...
  29. Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001 (not active ControlSet)
  30. Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@a0 0x20 0x01 0x00 0x00 ...
  31. Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@ujdew 0x59 0xC0 0xEF 0x6F ...
  32. Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001\jdgg40 (not active ControlSet)
  33. Reg HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001\jdgg40@ujdew 0xEA 0x30 0xA9 0xF6 ...
  34. Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{49BE948F-B6F7-8CDF-30CB-D758FB0ECFDD}
  35. Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{49BE948F-B6F7-8CDF-30CB-D758FB0ECFDD}@oaaoeahdifbajohfegpmdfapakdabg 0x6B 0x61 0x67 0x67 ...
  36. Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{49BE948F-B6F7-8CDF-30CB-D758FB0ECFDD}@pacbkeaemiidemppmpcfahllpencfjep 0x6B 0x61 0x67 0x67 ...
  37.  
  38. ---- Files - GMER 1.0.15 ----
  39.  
  40. File C:\Windows\Temp\NODC90D.tmp 0 bytes
  41.  
  42. ---- EOF - GMER 1.0.15 ----
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!