cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþRogueKiller V10.10.4.0 [Sep 4 2015] par Adlice Software
email : http://www.adlice.com/contact/
Remontées : http://forum.adlice.com
Site web : http://www.adlice.com/fr/logiciels/roguekiller/
Blog : http://www.adlice.com

Système d'exploitation : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Démarré en : Mode normal
Utilisateur : DENIS [Administrateur]
Démarré depuis : C:\Users\DENIS\Downloads\RogueKiller.exe
Mode : Suppression -- Date : 09/04/2015 12:31:49

¤¤¤ Processus : 0 ¤¤¤

¤¤¤ Registre : 20 ¤¤¤
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\QeZubLDxbcR ("C:\ProgramData\OWCyLxh\QeZubLDxbcR.exe") -> Supprimé(e)
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\QeZubLDxbcR ("C:\ProgramData\OWCyLxh\QeZubLDxbcR.exe") -> Supprimé(e)
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\QeZubLDxbcR ("C:\ProgramData\OWCyLxh\QeZubLDxbcR.exe") -> Supprimé(e)
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-4153576558-1498881284-979280278-1000\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.bing.com -> Remplacé(e) (http://go.microsoft.com/fwlink/p/?LinkId=255141)
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-4153576558-1498881284-979280278-1000\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.bing.com -> Remplacé(e) (http://go.microsoft.com/fwlink/p/?LinkId=255141)
[PUM.SearchPage] (X64) HKEY_USERS\S-1-5-21-4153576558-1498881284-979280278-1000\Software\Microsoft\Internet Explorer\Main | Search Bar : http://www.bing.com -> Remplacé(e) (http://search.msn.com/spbasic.htm)
[PUM.SearchPage] (X86) HKEY_USERS\S-1-5-21-4153576558-1498881284-979280278-1000\Software\Microsoft\Internet Explorer\Main | Search Bar : http://www.bing.com -> Remplacé(e) (http://search.msn.com/spbasic.htm)
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 192.168.1.254 0.0.0.0 ([-][X]) -> Remplacé(e) ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 192.168.1.254 0.0.0.0 ([-][X]) -> Remplacé(e) ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 192.168.1.254 0.0.0.0 ([-][X]) -> Remplacé(e) ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{201FE01C-187D-41AD-B714-E283CF34BE33} | DhcpNameServer : 192.168.1.254 0.0.0.0 ([-][X]) -> Remplacé(e) ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{201FE01C-187D-41AD-B714-E283CF34BE33} | DhcpNameServer : 192.168.1.254 0.0.0.0 ([-][X]) -> Remplacé(e) ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{201FE01C-187D-41AD-B714-E283CF34BE33} | DhcpNameServer : 192.168.1.254 0.0.0.0 ([-][X]) -> Remplacé(e) ()
[PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Remplacé(e) (2)
[PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Remplacé(e) (2)
[PUM.SecurityCenter] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Security Center | AntiVirusDisableNotify : 1 -> Supprimé(e)
[PUM.SecurityCenter] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Security Center | FirewallDisableNotify : 1 -> Supprimé(e)
[PUM.SecurityCenter] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Security Center | UpdatesDisableNotify : 1 -> Supprimé(e)
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-4153576558-1498881284-979280278-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Remplacé(e) (1)
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-4153576558-1498881284-979280278-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Remplacé(e) (1)

¤¤¤ Tâches : 0 ¤¤¤

¤¤¤ Fichiers : 0 ¤¤¤

¤¤¤ Fichier Hosts : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Non chargé [0xc000036b]) ¤¤¤

¤¤¤ Navigateurs web : 0 ¤¤¤

¤¤¤ Vérification MBR : ¤¤¤
+++++ PhysicalDrive0: WDC WD3200BEKT-75PVMT1 +++++
--- User ---
[MBR] 6e59fb62ca6101ddf0472e5937146c2a
[BSP] 939f0dc671cc6096e787f1fa9eb664e5 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 20000 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 41166848 | Size: 285143 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK


Publicité


Signaler le contenu de ce document

Publicité