Iminent: ist er wirklich weg wenn ich es deinstalliert hab?

Lucia0349 · 04.07.2013, 16:46

Gmer:
GMER Logfile:

Code:

ATTFilter

GMER 2.1.19163 - GMER - Rootkit Detector and Remover
Rootkit scan 2013-07-04 17:11:51
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 Hitachi_ rev.JE3O 465,76GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Lucia\AppData\Local\Temp\uwtcypoc.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 560                                                                                                     fffff80002faf000 45 bytes [00, 00, 00, 00, 00, 00, 00, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 607                                                                                                     fffff80002faf02f 16 bytes [00, 00, 00, 00, 00, 00, 00, ...]

---- User code sections - GMER 2.1 ----

.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                    0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!free                                               0000000074be9894 5 bytes JMP 000000010a90d2d0
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!malloc                                             0000000074be9cee 5 bytes JMP 000000010a90d230
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!??3@YAXPAX@Z                                       0000000074beb0b9 5 bytes JMP 000000010a90d2d0
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!??2@YAPAXI@Z                                       0000000074beb0c9 5 bytes JMP 000000010a90d480
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!realloc                                            0000000074beb10d 5 bytes JMP 000000010a90d2b0
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!calloc                                             0000000074bec456 5 bytes JMP 000000010a90d270
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!_msize                                             0000000074bef43b 5 bytes JMP 000000010a90d2e0
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!_aligned_free                                      0000000074c05942 5 bytes JMP 000000010a90d2d0
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!_aligned_malloc                                    0000000074c1028d 5 bytes JMP 000000010a90d3c0
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!_aligned_offset_malloc                             0000000074c102a9 5 bytes JMP 000000010a90d3e0
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!?set_new_handler@@YAP6AXXZP6AXXZ@Z                 0000000074c3bfd1 5 bytes JMP 000000010a90d500
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!_aligned_offset_realloc                            0000000074c3bfe1 5 bytes JMP 000000010a90d420
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!_aligned_realloc                                   0000000074c3c16b 5 bytes JMP 000000010a90d400
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!_expand                                            0000000074c3c18a 5 bytes JMP 000000010a90d3a0
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!_heapadd                                           0000000074c3dd03 5 bytes JMP 000000010a90d550
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!_heapchk                                           0000000074c3dd17 5 bytes JMP 000000010a90d560
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!_heapset + 1                                       0000000074c3de16 4 bytes {JMP 0xffffffff95ccf76b}
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!_heapmin                                           0000000074c3de1f 5 bytes JMP 000000010a90d650
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!_heapused                                          0000000074c3df05 5 bytes JMP 000000010a90d620
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\msvcrt.dll!_heapwalk                                          0000000074c3df18 5 bytes JMP 000000010a90d590
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                           0000000075b61465 2 bytes [B6, 75]
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\bin\VersionCueCS2.exe[1720] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                          0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1768] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                      0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1768] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                             0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe[1768] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                            0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[1824] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                      0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[1824] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69             0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[1824] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155            0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe[1896] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                              0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe[1896] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                     0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe[1896] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                    0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe[2044] C:\Windows\syswow64\USER32.dll!DialogBoxParamW            0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe[2044] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000075b61465 2 bytes [B6, 75]
.text     C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe[2044] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Search Results Toolbar\Datamngr\DatamngrCoordinator.exe[1780] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                    0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\Search Results Toolbar\Datamngr\DatamngrCoordinator.exe[1780] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                           0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\Search Results Toolbar\Datamngr\DatamngrCoordinator.exe[1780] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                          0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Windows\SysWOW64\schtasks.exe[1892] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                                                  0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Windows\SysWOW64\schtasks.exe[1892] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                         0000000075b61465 2 bytes [B6, 75]
.text     C:\Windows\SysWOW64\schtasks.exe[1892] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                        0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe[2444] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                            0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe[2444] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                   0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe[2444] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                  0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe[2612] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                          0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe[2612] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                 0000000075b61465 2 bytes [B6, 75]
.text     c:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe[2612] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe[2772] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                   0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe[2772] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                          0000000075b61465 2 bytes [B6, 75]
.text     C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe[2772] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                         0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe[2380] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                                0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe[2380] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                       0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe[2380] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                      0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe[3744] C:\Windows\syswow64\USER32.dll!DialogBoxParamW            0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe[3744] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000075b61465 2 bytes [B6, 75]
.text     C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe[3744] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[3776] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                               0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[3776] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                      0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe[3776] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                     0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Search Results Toolbar\Datamngr\DatamngrUI.exe[4764] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                             0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\Search Results Toolbar\Datamngr\DatamngrUI.exe[4764] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                    0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\Search Results Toolbar\Datamngr\DatamngrUI.exe[4764] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                   0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Windows\vsnp2uvc.exe[1296] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                                                           0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Windows\vsnp2uvc.exe[1296] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                  0000000075b61465 2 bytes [B6, 75]
.text     C:\Windows\vsnp2uvc.exe[1296] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                 0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4372] C:\Windows\syswow64\USER32.dll!GetMenu + 412                                                       0000000074b051dd 7 bytes JMP 0000000110053ac0
.text     C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4372] C:\Windows\syswow64\USER32.dll!PeekMessageA + 407                                                  0000000074b0610b 7 bytes JMP 0000000110053c10
.text     C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4372] C:\Windows\syswow64\USER32.dll!CreateDialogIndirectParamW + 131                                    0000000074b0c6c1 7 bytes JMP 0000000110053bf0
.text     C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4372] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                     0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4372] C:\Windows\syswow64\USER32.dll!MessageBoxIndirectA + 199                                           0000000074b4fc98 7 bytes JMP 0000000110053c60
.text     C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4372] C:\Windows\syswow64\USER32.dll!MessageBoxIndirectW + 52                                            0000000074b4fcd1 7 bytes JMP 0000000110053d30
.text     C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4372] C:\Windows\syswow64\USER32.dll!MessageBoxExA + 31                                                  0000000074b4fcf5 7 bytes JMP 0000000110053ce0
.text     C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4372] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                            0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe[4372] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                           0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Skype\Phone\Skype.exe[708] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                                       0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\Skype\Phone\Skype.exe[708] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                              0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\Skype\Phone\Skype.exe[708] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                             0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Skype\Phone\Skype.exe[708] C:\Windows\SysWOW64\ksuser.dll!KsCreatePin + 35                                                                      00000000700c11a8 2 bytes [0C, 70]
.text     C:\Program Files (x86)\Skype\Phone\Skype.exe[708] C:\Windows\SysWOW64\ksuser.dll!KsCreateAllocator + 21                                                                00000000700c13a8 2 bytes [0C, 70]
.text     C:\Program Files (x86)\Skype\Phone\Skype.exe[708] C:\Windows\SysWOW64\ksuser.dll!KsCreateClock + 21                                                                    00000000700c1422 2 bytes [0C, 70]
.text     C:\Program Files (x86)\Skype\Phone\Skype.exe[708] C:\Windows\SysWOW64\ksuser.dll!KsCreateTopologyNode + 19                                                             00000000700c1498 2 bytes [0C, 70]
.text     C:\Users\Lucia\AppData\Roaming\Dropbox\bin\Dropbox.exe[4680] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                            0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Users\Lucia\AppData\Roaming\Dropbox\bin\Dropbox.exe[4680] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                   0000000075b61465 2 bytes [B6, 75]
.text     C:\Users\Lucia\AppData\Roaming\Dropbox\bin\Dropbox.exe[4680] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                  0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe[4756] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                           0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe[4756] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                  0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe[4756] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                 0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe[4956] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                            0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe[4956] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                   0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe[4956] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                  0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Fujitsu\Programs\DeskUpdate\DeskUpdateNotifier.exe[516] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                              0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Fujitsu\Programs\DeskUpdate\DeskUpdateNotifier.exe[516] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                     0000000075b61465 2 bytes [B6, 75]
.text     C:\Fujitsu\Programs\DeskUpdate\DeskUpdateNotifier.exe[516] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                    0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe[5172] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                            0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe[5172] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                   0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe[5172] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                  0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Ask.com\Updater\Updater.exe[5240] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                                0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\Ask.com\Updater\Updater.exe[5240] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                       0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\Ask.com\Updater\Updater.exe[5240] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                      0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe[5352] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                       0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe[5352] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69              0000000075b61465 2 bytes [B6, 75]
.text     C:\Users\Lucia\Adobe Photoshop CS6\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe[5352] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155             0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\iTunes\iTunesHelper.exe[5432] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                                    0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\iTunes\iTunesHelper.exe[5432] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                           0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\iTunes\iTunesHelper.exe[5432] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                          0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[5480] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                  0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[5480] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                         0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe[5480] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                        0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe[5500] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                 0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe[5500] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                        0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe[5500] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                       0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[6828] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                    0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[6828] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                           0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe[6828] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                          0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe[6976] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                    0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe[6976] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                           0000000075b61465 2 bytes [B6, 75]
.text     C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe[6976] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                          0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2
.text     C:\Users\Lucia\Desktop\gmer_2.1.19163.exe[5608] C:\Windows\syswow64\USER32.dll!DialogBoxParamW                                                                         0000000074b1cfca 5 bytes JMP 0000000173fd4970
.text     C:\Users\Lucia\Desktop\gmer_2.1.19163.exe[5608] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                0000000075b61465 2 bytes [B6, 75]
.text     C:\Users\Lucia\Desktop\gmer_2.1.19163.exe[5608] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                               0000000075b614bb 2 bytes [B6, 75]
.text     ...                                                                                                                                                                    * 2

---- Threads - GMER 2.1 ----

Thread    C:\Windows\System32\svchost.exe [3952:6488]                                                                                                                            000007feee349688

---- Registry - GMER 2.1 ----

Reg       HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\{097CA6C8-762A-41B3-B196-B38B6EBB0812}\Connection@Name                            isatap.{C21655E6-E161-41EB-ABB6-BE8D1856DF66}
Reg       HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\{7B48D33E-3A1C-44DA-8E1A-1A8C25C566A6}\Connection@Name                            isatap.{5DE40016-76B0-4C48-A70E-57C328D588DA}
Reg       HKLM\SYSTEM\CurrentControlSet\Control\Network\{4d36e975-e325-11ce-bfc1-08002be10318}\{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}\Linkage@Bind                               \Device\{BAC19539-84CD-456B-AFBD-AB283425B63B}?\Device\{7B48D33E-3A1C-44DA-8E1A-1A8C25C566A6}?\Device\{097CA6C8-762A-41B3-B196-B38B6EBB0812}?\Device\{6AF73DF7-FB3E-4504-8BA5-C311A36B977D}?\Device\{9A209A89-FC4B-4E86-85F8-DC83E792FD41}?
Reg       HKLM\SYSTEM\CurrentControlSet\Control\Network\{4d36e975-e325-11ce-bfc1-08002be10318}\{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}\Linkage@Route                              "{BAC19539-84CD-456B-AFBD-AB283425B63B}"?"{7B48D33E-3A1C-44DA-8E1A-1A8C25C566A6}"?"{097CA6C8-762A-41B3-B196-B38B6EBB0812}"?"{6AF73DF7-FB3E-4504-8BA5-C311A36B977D}"?"{9A209A89-FC4B-4E86-85F8-DC83E792FD41}"?
Reg       HKLM\SYSTEM\CurrentControlSet\Control\Network\{4d36e975-e325-11ce-bfc1-08002be10318}\{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}\Linkage@Export                             \Device\TCPIP6TUNNEL_{BAC19539-84CD-456B-AFBD-AB283425B63B}?\Device\TCPIP6TUNNEL_{7B48D33E-3A1C-44DA-8E1A-1A8C25C566A6}?\Device\TCPIP6TUNNEL_{097CA6C8-762A-41B3-B196-B38B6EBB0812}?\Device\TCPIP6TUNNEL_{6AF73DF7-FB3E-4504-8BA5-C311A36B977D}?\Device\TCPIP6TUNNEL_{9A209A89-FC4B-4E86-85F8-DC83E792FD41}?
Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00150079fe36                                                                                            
Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\bc773723262e                                                                                            
Reg       HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\bc773723262e@205476a663b4                                                                               0x0C 0xB9 0xBC 0xA1 ...
Reg       HKLM\SYSTEM\CurrentControlSet\services\iphlpsvc\Parameters\Isatap\{097CA6C8-762A-41B3-B196-B38B6EBB0812}@InterfaceName                                                 isatap.{C21655E6-E161-41EB-ABB6-BE8D1856DF66}
Reg       HKLM\SYSTEM\CurrentControlSet\services\iphlpsvc\Parameters\Isatap\{097CA6C8-762A-41B3-B196-B38B6EBB0812}@ReusableType                                                  0
Reg       HKLM\SYSTEM\CurrentControlSet\services\iphlpsvc\Parameters\Isatap\{7B48D33E-3A1C-44DA-8E1A-1A8C25C566A6}@InterfaceName                                                 isatap.{5DE40016-76B0-4C48-A70E-57C328D588DA}
Reg       HKLM\SYSTEM\CurrentControlSet\services\iphlpsvc\Parameters\Isatap\{7B48D33E-3A1C-44DA-8E1A-1A8C25C566A6}@ReusableType                                                  0
Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00150079fe36 (not active ControlSet)                                                                        
Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\bc773723262e (not active ControlSet)                                                                        
Reg       HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\bc773723262e@205476a663b4                                                                                   0x0C 0xB9 0xBC 0xA1 ...

---- EOF - GMER 2.1 ----

--- --- ---

Iminent: ist er wirklich weg wenn ich es deinstalliert hab?

Log-Analyse und Auswertung: Iminent: ist er wirklich weg wenn ich es deinstalliert hab?

Iminent: ist er wirklich weg wenn ich es deinstalliert hab?

Ähnliche Themen: Iminent: ist er wirklich weg wenn ich es deinstalliert hab?