GMER 1.0.12.11889 -
http://www.gmer.netRootkit scan 2006-11-20 17:27:59
Windows 5.1.2600 Service Pack 2
---- System - GMER 1.0.12 ----
SSDT 82D419D8 ZwConnectPort
---- User code sections - GMER 1.0.12 ----
.text C:\Program Files\MSN Messenger\msnmsgr.exe[2580] kernel32.dll!SetUnhandledExceptionFilter 7C84479D 5 Bytes JMP 004E12D0 C:\Program Files\MSN Messenger\MsnMsgr.Exe
---- Files - GMER 1.0.12 ----
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\01\10-{E8FD259D-4931-53B0-3126-E19825C9FE0A}-v1-{97F2669A-B411-43D8-892E-41976798F5D2}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\04\504-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v504-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v504-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\04\504-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v504-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v504-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\22\622-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v622-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v622-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\23\623-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v623-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v623-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\24\624-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v624-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v624-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\25\625-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v625-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v625-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\26\626-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v626-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v626-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\27\627-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v627-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v627-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\51\459-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v451-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v459-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\52\460-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v452-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v460-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\52\460-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v452-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v460-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\53\461-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v453-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v461-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\54\462-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v454-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v462-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\54\462-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v454-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v462-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\54\554-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v554-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v554-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\55\463-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v455-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v463-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\55\555-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v555-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v555-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\56\464-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v456-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v464-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\56\556-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v556-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v556-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\57\557-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v557-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v557-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\58\558-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v558-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v558-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\59\559-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v559-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v559-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\60\560-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v560-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v560-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\61\561-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v561-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v561-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\62\562-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v562-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v562-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\63\563-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v563-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v563-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\64\564-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v564-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v564-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\64\564-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v564-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v564-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\65\565-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v565-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v565-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\66\566-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v566-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v566-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\67\467-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v467-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v467-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\68\468-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v468-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v468-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\68\468-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v468-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v468-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\69\469-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v469-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v469-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\70\470-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v470-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v470-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\70\470-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v470-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v470-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\71\471-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v471-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v471-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\74\474-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v474-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v474-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Messenger\
[email protected]\SharingMetadata\
[email protected]\DFSR\Staging\CS{E8FD259D-4931-53B0-3126-E19825C9FE0A}\75\475-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v475-{6909A916-826A-4A6F-88F0-AC03F5C22049}-v475-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
---- EOF - GMER 1.0.12 ----