GMER 2.2.19882 - http://www.gmer.net
Rootkit scan 2016-12-02 16:18:15
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-4 WDC_WD2500AAKX-753CA1 rev.19.01H19 232,89GB
Running: r7of4n4j.exe; Driver: C:\Users\DG_OCH~1\AppData\Local\Temp\fwdyapog.sys


---- User code sections - GMER 2.2 ----

.text  C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[2364] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17      0000000075de1401 2 bytes JMP 7598b233 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[2364] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17        0000000075de1419 2 bytes JMP 7598b35e C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[2364] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17      0000000075de1431 2 bytes JMP 75a09149 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[2364] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42      0000000075de144a 2 bytes CALL 75964885 C:\Windows\syswow64\kernel32.dll
.text  ...                                                                                                                  * 9
.text  C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[2364] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17         0000000075de14dd 2 bytes JMP 75a08a42 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[2364] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17  0000000075de14f5 2 bytes JMP 75a08c18 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[2364] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17         0000000075de150d 2 bytes JMP 75a08938 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[2364] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17  0000000075de1525 2 bytes JMP 75a08d02 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[2364] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17        0000000075de153d 2 bytes JMP 7597fcc0 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[2364] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17             0000000075de1555 2 bytes JMP 75986907 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[2364] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17      0000000075de156d 2 bytes JMP 75a09201 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[2364] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17        0000000075de1585 2 bytes JMP 75a08d62 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[2364] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17           0000000075de159d 2 bytes JMP 75a088fc C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[2364] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17        0000000075de15b5 2 bytes JMP 7597fd59 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[2364] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17      0000000075de15cd 2 bytes JMP 7598b2f4 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[2364] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20  0000000075de16b2 2 bytes JMP 75a090c4 C:\Windows\syswow64\kernel32.dll
.text  C:\Program Files (x86)\Dropbox\Client\Dropbox.exe[2364] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31  0000000075de16bd 2 bytes JMP 75a08891 C:\Windows\syswow64\kernel32.dll

---- EOF - GMER 2.2 ----