cjoint

Publicité


Publicité

Format du document : text/x-log

Prévisualisation

RogueKiller V9.2.8.0 [Jul 11 2014] par Adlice Software
Mail : http://www.adlice.com/contact/
Remontées : http://forum.adlice.com
Site Web : http://www.surlatoile.org/RogueKiller/
Blog : http://www.adlice.com

Système d'exploitation : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Démarrage : Mode normal
Utilisateur : ACTURUS 21 [Droits d'admin]
Mode : Recherche -- Date : 08/31/2014 10:33:21

¤¤¤ Processus malicieux : 0 ¤¤¤

¤¤¤ Entrées de registre : 8 ¤¤¤
[PUM.Proxy] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : 127.0.0.1:8080 -> TROUVÉ
[PUM.Proxy] HKEY_USERS\S-1-5-21-673034128-819310699-2553702523-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : 127.0.0.1:8080 -> TROUVÉ
[PUM.StartMenu] HKEY_USERS\S-1-5-21-673034128-819310699-2553702523-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> TROUVÉ
[PUM.DesktopIcons] HKEY_USERS\S-1-5-21-673034128-819310699-2553702523-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> TROUVÉ
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> TROUVÉ
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> TROUVÉ
[PUM.HomePage] HKEY_USERS\S-1-5-21-673034128-819310699-2553702523-1000\Software\Microsoft\Internet Explorer\Main | Start Page : http://google.com -> TROUVÉ
[PUM.SearchPage] HKEY_USERS\S-1-5-21-673034128-819310699-2553702523-1000\Software\Microsoft\Internet Explorer\Main | Search Page : http://google.com -> TROUVÉ

¤¤¤ Tâches planifiées : 1 ¤¤¤
[Suspicious.Path] \Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan -- C:\Program Files\Microsoft Security Client\MpCmdRun.exe (Scan -ScheduleJob -RestrictPrivileges) -> TROUVÉ

¤¤¤ Fichiers : 0 ¤¤¤

¤¤¤ Fichier HOSTS : 1 ¤¤¤
[C:\Windows\System32\drivers\etc\hosts] 127.0.0.1 localhost

¤¤¤ Antirootkit : 7 (Driver: CHARGE) ¤¤¤
[IRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_CREATE[0] : Unknown @ 0x862391f8
[IRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_CLOSE[2] : Unknown @ 0x862391f8
[IRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_DEVICE_CONTROL[14] : Unknown @ 0x862391f8
[IRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_INTERNAL_DEVICE_CONTROL[15] : Unknown @ 0x862391f8
[IRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_POWER[22] : Unknown @ 0x862391f8
[IRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_SYSTEM_CONTROL[23] : Unknown @ 0x862391f8
[IRP:Addr(Hook.IRP)] \SystemRoot\system32\drivers\winhv.sys - IRP_MJ_PNP[27] : Unknown @ 0x862391f8

¤¤¤ Navigateurs web : 1 ¤¤¤
[PUM.HomePage][FIREFX:Config] 02yp9lp7.default-1407219169543 : user_pref("browser.startup.homepage", "http://fr.yahoo.com/"); -> TROUVÉ

¤¤¤ MBR Verif : ¤¤¤
+++++ PhysicalDrive0: ST980811AS ATA Device +++++
--- User ---
[MBR] d2dfcee96403fc3d5f4ad8ff5c1454ec
[BSP] 63af7be9c7cc2ec6c936177952ee2661 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 56000 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 114690048 | Size: 20316 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: Freecom Hard Drive XS USB Device +++++
--- User ---
[MBR] 8f6c094e90a14f76fe1fb760b171a116
[BSP] 9831940bc481a673a0e9538af6a263fe : Windows XP MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0xc) [VISIBLE] Offset (sectors): 63 | Size: 953867 MB
User = LL1 ... OK
Error reading LL2 MBR! ([32] Cette demande n?est pas prise en charge. )

+++++ PhysicalDrive2: SAMSUNG HD103SI USB Device +++++
--- User ---
[MBR] 429fcc8b73fa1f8c5a729101a2fa625e
[BSP] a111a81730026b57eabad6ac8de33d0a : Empty MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0xc) [VISIBLE] Offset (sectors): 2048 | Size: 953866 MB
User = LL1 ... OK
Error reading LL2 MBR! ([32] Cette demande n?est pas prise en charge. )


============================================
RKreport_DEL_07052014_100512.log - RKreport_DEL_07052014_103050.log - RKreport_SCN_07052014_095946.log - RKreport_SCN_07052014_101945.log

Publicité


Signaler le contenu de ce document

Publicité