Fehlermeldung: Generic Host for Win32 Services + Spooler SubSystem App

GMER 1.0.15.15281 - hxxp://www.gmer.net
Rootkit scan 2010-10-09 02:20:31
Windows 5.1.2600 Service Pack 3
Running: rmsw2llf.exe; Driver: C:\DOKUME~1\***.san\LOKALE~1\Temp\ugtdapow.sys


---- System - GMER 1.0.15 ----

SSDT            F7D553DE                                                                                                             ZwCreateKey
SSDT            F7D553D4                                                                                                             ZwCreateThread
SSDT            F7D553E3                                                                                                             ZwDeleteKey
SSDT            F7D553ED                                                                                                             ZwDeleteValueKey
SSDT            F7D553F2                                                                                                             ZwLoadKey
SSDT            F7D553C0                                                                                                             ZwOpenProcess
SSDT            F7D553C5                                                                                                             ZwOpenThread
SSDT            F7D553FC                                                                                                             ZwReplaceKey
SSDT            F7D553F7                                                                                                             ZwRestoreKey
SSDT            F7D553E8                                                                                                             ZwSetValueKey
SSDT            F7D553CF                                                                                                             ZwTerminateProcess

---- Kernel code sections - GMER 1.0.15 ----

.text           ntkrnlpa.exe!ZwCallbackReturn + 2FC0                                                                                 8050485C 4 Bytes  CALL 75481DB4 
.text           C:\WINDOWS\system32\drivers\ACEDRV06.sys                                                                             section is writeable [0xA9D23000, 0x319AA, 0xE8000020]
.pklstb         C:\WINDOWS\system32\drivers\ACEDRV06.sys                                                                             entry point in ".pklstb" section [0xA9D66000]
.relo2          C:\WINDOWS\system32\drivers\ACEDRV06.sys                                                                             unknown last section [0xA9D81000, 0x8E, 0x42000040]

---- Devices - GMER 1.0.15 ----

AttachedDevice  \Driver\Kbdclass \Device\KeyboardClass0                                                                              SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice  \Driver\Kbdclass \Device\KeyboardClass1                                                                              SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)

---- Registry - GMER 1.0.15 ----

Reg             HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\00158315a310                                          
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4                                     
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0                                  C:\Programme\DAEMON Tools Lite\
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0                                  0
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh                               0xE8 0x11 0x81 0x2F ...
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001                            
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0                         0x20 0x01 0x00 0x00 ...
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh                      0x27 0xFD 0xFF 0x14 ...
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40                      
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh                0xB8 0xC8 0x57 0xE6 ...
Reg             HKLM\SYSTEM\ControlSet003\Services\BTHPORT\Parameters\Keys\00158315a310 (not active ControlSet)                      
Reg             HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)                 
Reg             HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0                                      C:\Programme\DAEMON Tools Lite\
Reg             HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0                                      0
Reg             HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh                                   0xE8 0x11 0x81 0x2F ...
Reg             HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)        
Reg             HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0                             0x20 0x01 0x00 0x00 ...
Reg             HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh                          0x27 0xFD 0xFF 0x14 ...
Reg             HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)  
Reg             HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh                    0xB8 0xC8 0x57 0xE6 ...

---- EOF - GMER 1.0.15 ----