Publicité
Publicité
Format du document : text/plain
Prévisualisation
ÿþR o g u e K i l l e r V 1 2 . 0 . 3 . 0 [ M a r 2 1 2 0 1 6 ] ( F r e e ) (H'37) (1F'E, A d l i c e
'D(1J/ 'D%DC*1HFJ : h t t p : / / w w w . a d l i c e . c o m / c o n t a c t /
F e e d b a c k : h t t p : / / f o r u m . a d l i c e . c o m
'DEHB9 : h t t p : / / w w w . a d l i c e . c o m / s o f t w a r e / r o g u e k i l l e r /
B l o g : h t t p : / / w w w . a d l i c e . c o m
F8'E 'D*4:JD : W i n d o w s 8 . 1 ( 6 . 3 . 9 6 0 0 ) 6 4 b i t s v e r s i o n
J(/# AJ : 'DH69 'D7(J9J
'DE3*./E : M o u i M o u _ 2 [ E3$HD]
S t a r t e d f r o m : C : \ U s e r s \ M o u i M o u _ 2 \ D e s k t o p \ R o g u e K i l l e r . e x e
'DH69 : -0A - - 'DJHE : 0 3 / 2 8 / 2 0 1 6 0 1 : 5 7 : 1 3
¤ ¤ ¤ 'D9EDJ) : 2 ¤ ¤ ¤
[ S u s p i c i o u s . P a t h | V T . H a c k T o o l : W i n 3 2 / A u t o K M S ] K M S S S . e x e ( 1 7 6 0 ) - - C : \ P r o g r a m D a t a \ K M S A u t o S \ b i n \ K M S S S . e x e [ - ] - > *E -0A) [ T e r m P r o c ]
[ S u s p i c i o u s . P a t h | V T . H a c k T o o l : W i n 3 2 / A u t o K M S ] ( S V C ) K M S E m u l a t o r - - " C : \ P r o g r a m D a t a \ K M S A u t o S \ b i n \ K M S S S . e x e " - P o r t 1 6 8 8 - P W i n R a n d o m K M S P I D - P O 1 4 R a n d o m K M S P I D - P O 1 5 R a n d o m K M S P I D - A I 4 3 2 0 0 - R I 4 3 2 0 0 K i l l P r o c e s s O n P o r t - L o g - I P [ - ] - > E*HBA
¤ ¤ ¤ 'DE3,D : 1 7 ¤ ¤ ¤
[ P U P ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ E x p l o r e r \ S h e l l I c o n O v e r l a y I d e n t i f i e r s \ . Q M D e s k T o p G C I c o n | ( d e f a u l t ) : { B 7 6 6 7 9 1 9 - 3 7 6 5 - 4 8 1 5 - A 6 6 D - 9 8 A 0 9 B E 6 6 2 D 6 } - > E-0HA
[ S u s p i c i o u s . P a t h | V T . H a c k T o o l : W i n 3 2 / A u t o K M S ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ K M S E m u l a t o r ( " C : \ P r o g r a m D a t a \ K M S A u t o S \ b i n \ K M S S S . e x e " - P o r t 1 6 8 8 - P W i n R a n d o m K M S P I D - P O 1 4 R a n d o m K M S P I D - P O 1 5 R a n d o m K M S P I D - A I 4 3 2 0 0 - R I 4 3 2 0 0 K i l l P r o c e s s O n P o r t - L o g - I P ) - > E-0HA
[ P U P ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ T S D e f e n s e B t ( \ ? ? \ C : \ P r o g r a m F i l e s ( x 8 6 ) \ T e n c e n t \ Q Q P C M g r \ 1 1 . 4 . 1 7 3 3 9 . 2 1 7 \ T S D e f e n s e B T 6 4 . s y s ) - > E-0HA
[ S u s p i c i o u s . P a t h | V T . H a c k T o o l : W i n 3 2 / A u t o K M S ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C o n t r o l S e t 0 0 1 \ S e r v i c e s \ K M S E m u l a t o r ( " C : \ P r o g r a m D a t a \ K M S A u t o S \ b i n \ K M S S S . e x e " - P o r t 1 6 8 8 - P W i n R a n d o m K M S P I D - P O 1 4 R a n d o m K M S P I D - P O 1 5 R a n d o m K M S P I D - A I 4 3 2 0 0 - R I 4 3 2 0 0 K i l l P r o c e s s O n P o r t - L o g - I P ) - > E-0HA
[ P U P ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C o n t r o l S e t 0 0 1 \ S e r v i c e s \ T S D e f e n s e B t ( \ ? ? \ C : \ P r o g r a m F i l e s ( x 8 6 ) \ T e n c e n t \ Q Q P C M g r \ 1 1 . 4 . 1 7 3 3 9 . 2 1 7 \ T S D e f e n s e B T 6 4 . s y s ) - > E-0HA
[ P U M . S e a r c h P a g e ] ( X 6 4 ) H K E Y _ U S E R S \ S - 1 - 5 - 2 1 - 2 2 3 1 6 7 6 3 5 6 - 6 8 0 8 0 5 6 8 1 - 2 8 5 5 5 6 7 4 9 0 - 1 0 0 2 \ S o f t w a r e \ M i c r o s o f t \ I n t e r n e t E x p l o r e r \ M a i n | S e a r c h P a g e : h t t p : / / w w w . b i n g . c o m / s e a r c h ? q = { s e a r c h T e r m s } - > %3*(/'D ( h t t p : / / g o . m i c r o s o f t . c o m / f w l i n k / ? L i n k I d = 5 4 8 9 6 )
[ P U M . S e a r c h P a g e ] ( X 8 6 ) H K E Y _ U S E R S \ S - 1 - 5 - 2 1 - 2 2 3 1 6 7 6 3 5 6 - 6 8 0 8 0 5 6 8 1 - 2 8 5 5 5 6 7 4 9 0 - 1 0 0 2 \ S o f t w a r e \ M i c r o s o f t \ I n t e r n e t E x p l o r e r \ M a i n | S e a r c h P a g e : h t t p : / / w w w . b i n g . c o m / s e a r c h ? q = { s e a r c h T e r m s } - > %3*(/'D ( h t t p : / / g o . m i c r o s o f t . c o m / f w l i n k / ? L i n k I d = 5 4 8 9 6 )
[ P U M . S e a r c h P a g e ] ( X 6 4 ) H K E Y _ U S E R S \ S - 1 - 5 - 2 1 - 2 2 3 1 6 7 6 3 5 6 - 6 8 0 8 0 5 6 8 1 - 2 8 5 5 5 6 7 4 9 0 - 1 0 0 2 \ S o f t w a r e \ M i c r o s o f t \ I n t e r n e t E x p l o r e r \ M a i n | S e a r c h B a r : h t t p : / / w w w . b i n g . c o m / s e a r c h ? q = { s e a r c h T e r m s } - > %3*(/'D ( h t t p : / / s e a r c h . m s n . c o m / s p b a s i c . h t m )
[ P U M . S e a r c h P a g e ] ( X 8 6 ) H K E Y _ U S E R S \ S - 1 - 5 - 2 1 - 2 2 3 1 6 7 6 3 5 6 - 6 8 0 8 0 5 6 8 1 - 2 8 5 5 5 6 7 4 9 0 - 1 0 0 2 \ S o f t w a r e \ M i c r o s o f t \ I n t e r n e t E x p l o r e r \ M a i n | S e a r c h B a r : h t t p : / / w w w . b i n g . c o m / s e a r c h ? q = { s e a r c h T e r m s } - > %3*(/'D ( h t t p : / / s e a r c h . m s n . c o m / s p b a s i c . h t m )
[ P U M . D n s ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ T c p i p \ P a r a m e t e r s | D h c p N a m e S e r v e r : 1 9 2 . 1 6 8 . 1 . 1 0 . 0 . 0 . 0 ( [ - ] [ X ] ) - > %3*(/'D ( )
[ P U M . D n s ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C o n t r o l S e t 0 0 1 \ S e r v i c e s \ T c p i p \ P a r a m e t e r s | D h c p N a m e S e r v e r : 1 9 2 . 1 6 8 . 1 . 1 0 . 0 . 0 . 0 ( [ - ] [ X ] ) - > %3*(/'D ( )
[ P U M . D n s ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ T c p i p \ P a r a m e t e r s \ I n t e r f a c e s \ { 1 A C 9 3 C 4 4 - C E B 1 - 4 7 6 D - 9 6 1 3 - 9 4 F 2 9 F 8 D 7 3 0 2 } | D h c p N a m e S e r v e r : 4 3 . 2 4 9 . 3 8 . 6 8 4 3 . 2 4 9 . 3 8 . 7 0 ( [ X ] [ - ] ) - > %3*(/'D ( )
[ P U M . D n s ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ T c p i p \ P a r a m e t e r s \ I n t e r f a c e s \ { B 1 1 3 B C 2 5 - F F B 8 - 4 8 6 A - 8 F 6 2 - 6 F B D 9 9 C 3 B F 4 7 } | D h c p N a m e S e r v e r : 1 9 2 . 1 6 8 . 1 . 1 0 . 0 . 0 . 0 ( [ - ] [ X ] ) - > %3*(/'D ( )
[ P U M . D n s ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ T c p i p \ P a r a m e t e r s \ I n t e r f a c e s \ { B 9 8 2 7 9 C 9 - 2 9 3 9 - 4 C 7 E - A 4 D 6 - 1 A D 2 6 0 5 9 F 2 A 2 } | D h c p N a m e S e r v e r : 1 9 2 . 1 6 8 . 1 . 1 0 . 0 . 0 . 0 ( [ - ] [ X ] ) - > %3*(/'D ( )
[ P U M . D n s ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C o n t r o l S e t 0 0 1 \ S e r v i c e s \ T c p i p \ P a r a m e t e r s \ I n t e r f a c e s \ { 1 A C 9 3 C 4 4 - C E B 1 - 4 7 6 D - 9 6 1 3 - 9 4 F 2 9 F 8 D 7 3 0 2 } | D h c p N a m e S e r v e r : 4 3 . 2 4 9 . 3 8 . 6 8 4 3 . 2 4 9 . 3 8 . 7 0 ( [ X ] [ - ] ) - > %3*(/'D ( )
[ P U M . D n s ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C o n t r o l S e t 0 0 1 \ S e r v i c e s \ T c p i p \ P a r a m e t e r s \ I n t e r f a c e s \ { B 1 1 3 B C 2 5 - F F B 8 - 4 8 6 A - 8 F 6 2 - 6 F B D 9 9 C 3 B F 4 7 } | D h c p N a m e S e r v e r : 1 9 2 . 1 6 8 . 1 . 1 0 . 0 . 0 . 0 ( [ - ] [ X ] ) - > %3*(/'D ( )
[ P U M . D n s ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C o n t r o l S e t 0 0 1 \ S e r v i c e s \ T c p i p \ P a r a m e t e r s \ I n t e r f a c e s \ { B 9 8 2 7 9 C 9 - 2 9 3 9 - 4 C 7 E - A 4 D 6 - 1 A D 2 6 0 5 9 F 2 A 2 } | D h c p N a m e S e r v e r : 1 9 2 . 1 6 8 . 1 . 1 0 . 0 . 0 . 0 ( [ - ] [ X ] ) - > %3*(/'D ( )
¤ ¤ ¤ 'DEG'E : 2 ¤ ¤ ¤
[ S u s p i c i o u s . P a t h ] % W I N D I R % \ T a s k s \ G o o g l e U p d a t e T a s k M a c h i n e U A . j o b - - C : \ P r o g r a m F i l e s ( x 8 6 ) \ G o o g l e \ U p d a t e \ G o o g l e U p d a t e . e x e ( / u a / i n s t a l l s o u r c e s c h e d u l e r ) - > E-0HA
[ S u s p i c i o u s . P a t h ] \ G o o g l e U p d a t e T a s k M a c h i n e U A - - C : \ P r o g r a m F i l e s ( x 8 6 ) \ G o o g l e \ U p d a t e \ G o o g l e U p d a t e . e x e ( / u a / i n s t a l l s o u r c e s c h e d u l e r ) - > E-0HA
¤ ¤ ¤ 'DEDA'* : 9 ¤ ¤ ¤
[ P U P ] [ EDA] C : \ U s e r s \ M o u i M o u _ 2 \ A p p D a t a \ R o a m i n g \ M i c r o s o f t \ W i n d o w s \ S t a r t M e n u \ P r o g r a m s \ S t a r t u p \ O n l i n e S o c c e r M a n a g e r H a c k v 4 . 0 . 0 . l n k [ L N K @ ] C : \ P r o g r a m D a t a \ { 7 6 0 4 2 0 8 6 - 6 b 5 d - 6 8 7 4 - 7 6 0 4 - 4 2 0 8 6 6 b 5 8 2 1 9 } \ O n l i n e S o c c e r M a n a g e r H a c k v 4 . 0 . 0 . e x e - - s t a r t u p = 1 - > E-0HA
[ P U P ] [ EDA] C : \ U s e r s \ M o u i M o u _ 2 \ A p p D a t a \ R o a m i n g \ M i c r o s o f t \ W i n d o w s \ S t a r t M e n u \ P r o g r a m s \ S t a r t u p \ O n l i n e S o c c e r M a n a g e r H a c k . l n k [ L N K @ ] C : \ P r o g r a m D a t a \ { 0 9 b e 4 c 1 6 - 4 1 f 7 - c e f c - 0 9 b e - e 4 c 1 6 4 1 f 3 0 5 9 } \ O n l i n e S o c c e r M a n a g e r H a c k . e x e - - s t a r t u p = 1 - > E-0HA
[ H i d d e n . A D S ] [ S t r e a m ] C : \ U s e r s \ M o u i M o u _ 2 \ A p p D a t a \ R o a m i n g : N T - > E-0HA
[ H i d d e n . A D S ] [ S t r e a m ] C : \ U s e r s \ M o u i M o u _ 2 \ A p p D a t a \ R o a m i n g : N T 2 - > E-0HA
[ P U P ] [ EDA] C : \ U s e r s \ M o u i M o u _ 2 \ A p p D a t a \ R o a m i n g \ M i c r o s o f t \ W i n d o w s \ S t a r t M e n u \ P r o g r a m s \ S t a r t u p \ O n l i n e S o c c e r M a n a g e r H a c k v 4 . 0 . 0 . l n k [ L N K @ ] C : \ P r o g r a m D a t a \ { 7 6 0 4 2 0 8 6 - 6 b 5 d - 6 8 7 4 - 7 6 0 4 - 4 2 0 8 6 6 b 5 8 2 1 9 } \ O n l i n e S o c c e r M a n a g e r H a c k v 4 . 0 . 0 . e x e - - s t a r t u p = 1 - > %2'D) EF 'D*B1J1 [ 2 ]
[ P U P ] [ EDA] C : \ U s e r s \ M o u i M o u _ 2 \ A p p D a t a \ R o a m i n g \ M i c r o s o f t \ W i n d o w s \ S t a r t M e n u \ P r o g r a m s \ S t a r t u p \ O n l i n e S o c c e r M a n a g e r H a c k . l n k [ L N K @ ] C : \ P r o g r a m D a t a \ { 0 9 b e 4 c 1 6 - 4 1 f 7 - c e f c - 0 9 b e - e 4 c 1 6 4 1 f 3 0 5 9 } \ O n l i n e S o c c e r M a n a g e r H a c k . e x e - - s t a r t u p = 1 - > %2'D) EF 'D*B1J1 [ 2 ]
[ H i d d e n . A D S ] [ S t r e a m ] C : \ P r o g r a m D a t a : N T - > %2'D) EF 'D*B1J1 [ 5 ]
[ H i d d e n . A D S ] [ S t r e a m ] C : \ P r o g r a m D a t a : N T 2 - > %2'D) EF 'D*B1J1 [ 5 ]
[ H j . N a m e ] [ EDA] C : \ $ R e c y c l e . B i n \ S - 1 - 5 - 2 1 - 2 2 3 1 6 7 6 3 5 6 - 6 8 0 8 0 5 6 8 1 - 2 8 5 5 5 6 7 4 9 0 - 1 0 0 2 \ $ R 2 V J I Z 2 \ I 3 8 6 \ S Y S T E M 3 2 \ S M S S . E X E - > E-0HA
¤ ¤ ¤ EDA 'DGH3* : 0 ¤ ¤ ¤
¤ ¤ ¤ A n t i r o o t k i t : 0 ( D r i v e r : DE J*E 'D*-EJD [ 0 x c 0 0 0 0 3 6 b ] ) ¤ ¤ ¤
¤ ¤ ¤ 'DE*5A- : 1 ¤ ¤ ¤
[ P U M . H o m e P a g e ] [ F I R E F X : C o n f i g ] C C A C C B F 1 - 7 A B 4 - 4 C F 5 - B 3 2 D - 6 6 8 C 6 8 6 A 5 3 9 F : u s e r _ p r e f ( " b r o w s e r . s t a r t u p . h o m e p a g e " , " h t t p : / / w w w . h o h o s e a r c h . c o m / ? t s = A H E p C H 4 l A n 4 n A U . . & v = 2 0 1 6 0 3 2 3 & u i d = B 7 D B 4 5 E 9 1 8 6 9 F A E D 2 A B 4 0 3 D 1 6 6 1 6 3 8 F 7 & p t i d = a m z & m o d e = f f s e n g " ) ; - > %3*(/'D ( a b o u t : h o m e )
¤ ¤ ¤ A-5 'D M B R : ¤ ¤ ¤
+ + + + + P h y s i c a l D r i v e 0 : S T 5 0 0 L M 0 1 2 H N - M 5 0 0 M B B + + + + +
- - - U s e r - - -
[ M B R ] 7 a d 2 2 9 4 8 d 6 8 f e 8 5 0 0 7 0 9 c 0 6 b 8 3 4 e 5 b 5 b
[ B S P ] 3 0 7 f 7 9 e c d 0 b 9 f 0 d 1 8 d a b f d 6 f c 9 a 2 9 3 b 6 : W i n d o w s V i s t a / 7 / 8 | V T . U n k n o w n M B R C o d e
P a r t i t i o n t a b l e :
0 - [ A C T I V E ] N T F S ( 0 x 7 ) [ V I S I B L E ] O f f s e t ( s e c t o r s ) : 2 0 4 8 | S i z e : 1 0 0 M B [ W i n d o w s V i s t a / 7 / 8 B o o t s t r a p | W i n d o w s V i s t a / 7 / 8 B o o t l o a d e r ]
1 - [ X X X X X X ] E X T E N ( 0 x 5 ) [ V I S I B L E ] O f f s e t ( s e c t o r s ) : 5 2 4 4 9 4 8 4 8 | S i z e : 2 2 0 8 3 9 M B
2 - [ X X X X X X ] N T F S ( 0 x 7 ) [ V I S I B L E ] O f f s e t ( s e c t o r s ) : 2 0 6 8 4 8 | S i z e : 2 5 6 0 0 0 M B [ W i n d o w s V i s t a / 7 / 8 B o o t s t r a p | W i n d o w s V i s t a / 7 / 8 B o o t l o a d e r ]
U s e r = L L 1 . . . O K
U s e r = L L 2 . . . O K
'D(1J/ 'D%DC*1HFJ : h t t p : / / w w w . a d l i c e . c o m / c o n t a c t /
F e e d b a c k : h t t p : / / f o r u m . a d l i c e . c o m
'DEHB9 : h t t p : / / w w w . a d l i c e . c o m / s o f t w a r e / r o g u e k i l l e r /
B l o g : h t t p : / / w w w . a d l i c e . c o m
F8'E 'D*4:JD : W i n d o w s 8 . 1 ( 6 . 3 . 9 6 0 0 ) 6 4 b i t s v e r s i o n
J(/# AJ : 'DH69 'D7(J9J
'DE3*./E : M o u i M o u _ 2 [ E3$HD]
S t a r t e d f r o m : C : \ U s e r s \ M o u i M o u _ 2 \ D e s k t o p \ R o g u e K i l l e r . e x e
'DH69 : -0A - - 'DJHE : 0 3 / 2 8 / 2 0 1 6 0 1 : 5 7 : 1 3
¤ ¤ ¤ 'D9EDJ) : 2 ¤ ¤ ¤
[ S u s p i c i o u s . P a t h | V T . H a c k T o o l : W i n 3 2 / A u t o K M S ] K M S S S . e x e ( 1 7 6 0 ) - - C : \ P r o g r a m D a t a \ K M S A u t o S \ b i n \ K M S S S . e x e [ - ] - > *E -0A) [ T e r m P r o c ]
[ S u s p i c i o u s . P a t h | V T . H a c k T o o l : W i n 3 2 / A u t o K M S ] ( S V C ) K M S E m u l a t o r - - " C : \ P r o g r a m D a t a \ K M S A u t o S \ b i n \ K M S S S . e x e " - P o r t 1 6 8 8 - P W i n R a n d o m K M S P I D - P O 1 4 R a n d o m K M S P I D - P O 1 5 R a n d o m K M S P I D - A I 4 3 2 0 0 - R I 4 3 2 0 0 K i l l P r o c e s s O n P o r t - L o g - I P [ - ] - > E*HBA
¤ ¤ ¤ 'DE3,D : 1 7 ¤ ¤ ¤
[ P U P ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S o f t w a r e \ M i c r o s o f t \ W i n d o w s \ C u r r e n t V e r s i o n \ E x p l o r e r \ S h e l l I c o n O v e r l a y I d e n t i f i e r s \ . Q M D e s k T o p G C I c o n | ( d e f a u l t ) : { B 7 6 6 7 9 1 9 - 3 7 6 5 - 4 8 1 5 - A 6 6 D - 9 8 A 0 9 B E 6 6 2 D 6 } - > E-0HA
[ S u s p i c i o u s . P a t h | V T . H a c k T o o l : W i n 3 2 / A u t o K M S ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ K M S E m u l a t o r ( " C : \ P r o g r a m D a t a \ K M S A u t o S \ b i n \ K M S S S . e x e " - P o r t 1 6 8 8 - P W i n R a n d o m K M S P I D - P O 1 4 R a n d o m K M S P I D - P O 1 5 R a n d o m K M S P I D - A I 4 3 2 0 0 - R I 4 3 2 0 0 K i l l P r o c e s s O n P o r t - L o g - I P ) - > E-0HA
[ P U P ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ T S D e f e n s e B t ( \ ? ? \ C : \ P r o g r a m F i l e s ( x 8 6 ) \ T e n c e n t \ Q Q P C M g r \ 1 1 . 4 . 1 7 3 3 9 . 2 1 7 \ T S D e f e n s e B T 6 4 . s y s ) - > E-0HA
[ S u s p i c i o u s . P a t h | V T . H a c k T o o l : W i n 3 2 / A u t o K M S ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C o n t r o l S e t 0 0 1 \ S e r v i c e s \ K M S E m u l a t o r ( " C : \ P r o g r a m D a t a \ K M S A u t o S \ b i n \ K M S S S . e x e " - P o r t 1 6 8 8 - P W i n R a n d o m K M S P I D - P O 1 4 R a n d o m K M S P I D - P O 1 5 R a n d o m K M S P I D - A I 4 3 2 0 0 - R I 4 3 2 0 0 K i l l P r o c e s s O n P o r t - L o g - I P ) - > E-0HA
[ P U P ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C o n t r o l S e t 0 0 1 \ S e r v i c e s \ T S D e f e n s e B t ( \ ? ? \ C : \ P r o g r a m F i l e s ( x 8 6 ) \ T e n c e n t \ Q Q P C M g r \ 1 1 . 4 . 1 7 3 3 9 . 2 1 7 \ T S D e f e n s e B T 6 4 . s y s ) - > E-0HA
[ P U M . S e a r c h P a g e ] ( X 6 4 ) H K E Y _ U S E R S \ S - 1 - 5 - 2 1 - 2 2 3 1 6 7 6 3 5 6 - 6 8 0 8 0 5 6 8 1 - 2 8 5 5 5 6 7 4 9 0 - 1 0 0 2 \ S o f t w a r e \ M i c r o s o f t \ I n t e r n e t E x p l o r e r \ M a i n | S e a r c h P a g e : h t t p : / / w w w . b i n g . c o m / s e a r c h ? q = { s e a r c h T e r m s } - > %3*(/'D ( h t t p : / / g o . m i c r o s o f t . c o m / f w l i n k / ? L i n k I d = 5 4 8 9 6 )
[ P U M . S e a r c h P a g e ] ( X 8 6 ) H K E Y _ U S E R S \ S - 1 - 5 - 2 1 - 2 2 3 1 6 7 6 3 5 6 - 6 8 0 8 0 5 6 8 1 - 2 8 5 5 5 6 7 4 9 0 - 1 0 0 2 \ S o f t w a r e \ M i c r o s o f t \ I n t e r n e t E x p l o r e r \ M a i n | S e a r c h P a g e : h t t p : / / w w w . b i n g . c o m / s e a r c h ? q = { s e a r c h T e r m s } - > %3*(/'D ( h t t p : / / g o . m i c r o s o f t . c o m / f w l i n k / ? L i n k I d = 5 4 8 9 6 )
[ P U M . S e a r c h P a g e ] ( X 6 4 ) H K E Y _ U S E R S \ S - 1 - 5 - 2 1 - 2 2 3 1 6 7 6 3 5 6 - 6 8 0 8 0 5 6 8 1 - 2 8 5 5 5 6 7 4 9 0 - 1 0 0 2 \ S o f t w a r e \ M i c r o s o f t \ I n t e r n e t E x p l o r e r \ M a i n | S e a r c h B a r : h t t p : / / w w w . b i n g . c o m / s e a r c h ? q = { s e a r c h T e r m s } - > %3*(/'D ( h t t p : / / s e a r c h . m s n . c o m / s p b a s i c . h t m )
[ P U M . S e a r c h P a g e ] ( X 8 6 ) H K E Y _ U S E R S \ S - 1 - 5 - 2 1 - 2 2 3 1 6 7 6 3 5 6 - 6 8 0 8 0 5 6 8 1 - 2 8 5 5 5 6 7 4 9 0 - 1 0 0 2 \ S o f t w a r e \ M i c r o s o f t \ I n t e r n e t E x p l o r e r \ M a i n | S e a r c h B a r : h t t p : / / w w w . b i n g . c o m / s e a r c h ? q = { s e a r c h T e r m s } - > %3*(/'D ( h t t p : / / s e a r c h . m s n . c o m / s p b a s i c . h t m )
[ P U M . D n s ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ T c p i p \ P a r a m e t e r s | D h c p N a m e S e r v e r : 1 9 2 . 1 6 8 . 1 . 1 0 . 0 . 0 . 0 ( [ - ] [ X ] ) - > %3*(/'D ( )
[ P U M . D n s ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C o n t r o l S e t 0 0 1 \ S e r v i c e s \ T c p i p \ P a r a m e t e r s | D h c p N a m e S e r v e r : 1 9 2 . 1 6 8 . 1 . 1 0 . 0 . 0 . 0 ( [ - ] [ X ] ) - > %3*(/'D ( )
[ P U M . D n s ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ T c p i p \ P a r a m e t e r s \ I n t e r f a c e s \ { 1 A C 9 3 C 4 4 - C E B 1 - 4 7 6 D - 9 6 1 3 - 9 4 F 2 9 F 8 D 7 3 0 2 } | D h c p N a m e S e r v e r : 4 3 . 2 4 9 . 3 8 . 6 8 4 3 . 2 4 9 . 3 8 . 7 0 ( [ X ] [ - ] ) - > %3*(/'D ( )
[ P U M . D n s ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ T c p i p \ P a r a m e t e r s \ I n t e r f a c e s \ { B 1 1 3 B C 2 5 - F F B 8 - 4 8 6 A - 8 F 6 2 - 6 F B D 9 9 C 3 B F 4 7 } | D h c p N a m e S e r v e r : 1 9 2 . 1 6 8 . 1 . 1 0 . 0 . 0 . 0 ( [ - ] [ X ] ) - > %3*(/'D ( )
[ P U M . D n s ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C u r r e n t C o n t r o l S e t \ S e r v i c e s \ T c p i p \ P a r a m e t e r s \ I n t e r f a c e s \ { B 9 8 2 7 9 C 9 - 2 9 3 9 - 4 C 7 E - A 4 D 6 - 1 A D 2 6 0 5 9 F 2 A 2 } | D h c p N a m e S e r v e r : 1 9 2 . 1 6 8 . 1 . 1 0 . 0 . 0 . 0 ( [ - ] [ X ] ) - > %3*(/'D ( )
[ P U M . D n s ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C o n t r o l S e t 0 0 1 \ S e r v i c e s \ T c p i p \ P a r a m e t e r s \ I n t e r f a c e s \ { 1 A C 9 3 C 4 4 - C E B 1 - 4 7 6 D - 9 6 1 3 - 9 4 F 2 9 F 8 D 7 3 0 2 } | D h c p N a m e S e r v e r : 4 3 . 2 4 9 . 3 8 . 6 8 4 3 . 2 4 9 . 3 8 . 7 0 ( [ X ] [ - ] ) - > %3*(/'D ( )
[ P U M . D n s ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C o n t r o l S e t 0 0 1 \ S e r v i c e s \ T c p i p \ P a r a m e t e r s \ I n t e r f a c e s \ { B 1 1 3 B C 2 5 - F F B 8 - 4 8 6 A - 8 F 6 2 - 6 F B D 9 9 C 3 B F 4 7 } | D h c p N a m e S e r v e r : 1 9 2 . 1 6 8 . 1 . 1 0 . 0 . 0 . 0 ( [ - ] [ X ] ) - > %3*(/'D ( )
[ P U M . D n s ] ( X 6 4 ) H K E Y _ L O C A L _ M A C H I N E \ S y s t e m \ C o n t r o l S e t 0 0 1 \ S e r v i c e s \ T c p i p \ P a r a m e t e r s \ I n t e r f a c e s \ { B 9 8 2 7 9 C 9 - 2 9 3 9 - 4 C 7 E - A 4 D 6 - 1 A D 2 6 0 5 9 F 2 A 2 } | D h c p N a m e S e r v e r : 1 9 2 . 1 6 8 . 1 . 1 0 . 0 . 0 . 0 ( [ - ] [ X ] ) - > %3*(/'D ( )
¤ ¤ ¤ 'DEG'E : 2 ¤ ¤ ¤
[ S u s p i c i o u s . P a t h ] % W I N D I R % \ T a s k s \ G o o g l e U p d a t e T a s k M a c h i n e U A . j o b - - C : \ P r o g r a m F i l e s ( x 8 6 ) \ G o o g l e \ U p d a t e \ G o o g l e U p d a t e . e x e ( / u a / i n s t a l l s o u r c e s c h e d u l e r ) - > E-0HA
[ S u s p i c i o u s . P a t h ] \ G o o g l e U p d a t e T a s k M a c h i n e U A - - C : \ P r o g r a m F i l e s ( x 8 6 ) \ G o o g l e \ U p d a t e \ G o o g l e U p d a t e . e x e ( / u a / i n s t a l l s o u r c e s c h e d u l e r ) - > E-0HA
¤ ¤ ¤ 'DEDA'* : 9 ¤ ¤ ¤
[ P U P ] [ EDA] C : \ U s e r s \ M o u i M o u _ 2 \ A p p D a t a \ R o a m i n g \ M i c r o s o f t \ W i n d o w s \ S t a r t M e n u \ P r o g r a m s \ S t a r t u p \ O n l i n e S o c c e r M a n a g e r H a c k v 4 . 0 . 0 . l n k [ L N K @ ] C : \ P r o g r a m D a t a \ { 7 6 0 4 2 0 8 6 - 6 b 5 d - 6 8 7 4 - 7 6 0 4 - 4 2 0 8 6 6 b 5 8 2 1 9 } \ O n l i n e S o c c e r M a n a g e r H a c k v 4 . 0 . 0 . e x e - - s t a r t u p = 1 - > E-0HA
[ P U P ] [ EDA] C : \ U s e r s \ M o u i M o u _ 2 \ A p p D a t a \ R o a m i n g \ M i c r o s o f t \ W i n d o w s \ S t a r t M e n u \ P r o g r a m s \ S t a r t u p \ O n l i n e S o c c e r M a n a g e r H a c k . l n k [ L N K @ ] C : \ P r o g r a m D a t a \ { 0 9 b e 4 c 1 6 - 4 1 f 7 - c e f c - 0 9 b e - e 4 c 1 6 4 1 f 3 0 5 9 } \ O n l i n e S o c c e r M a n a g e r H a c k . e x e - - s t a r t u p = 1 - > E-0HA
[ H i d d e n . A D S ] [ S t r e a m ] C : \ U s e r s \ M o u i M o u _ 2 \ A p p D a t a \ R o a m i n g : N T - > E-0HA
[ H i d d e n . A D S ] [ S t r e a m ] C : \ U s e r s \ M o u i M o u _ 2 \ A p p D a t a \ R o a m i n g : N T 2 - > E-0HA
[ P U P ] [ EDA] C : \ U s e r s \ M o u i M o u _ 2 \ A p p D a t a \ R o a m i n g \ M i c r o s o f t \ W i n d o w s \ S t a r t M e n u \ P r o g r a m s \ S t a r t u p \ O n l i n e S o c c e r M a n a g e r H a c k v 4 . 0 . 0 . l n k [ L N K @ ] C : \ P r o g r a m D a t a \ { 7 6 0 4 2 0 8 6 - 6 b 5 d - 6 8 7 4 - 7 6 0 4 - 4 2 0 8 6 6 b 5 8 2 1 9 } \ O n l i n e S o c c e r M a n a g e r H a c k v 4 . 0 . 0 . e x e - - s t a r t u p = 1 - > %2'D) EF 'D*B1J1 [ 2 ]
[ P U P ] [ EDA] C : \ U s e r s \ M o u i M o u _ 2 \ A p p D a t a \ R o a m i n g \ M i c r o s o f t \ W i n d o w s \ S t a r t M e n u \ P r o g r a m s \ S t a r t u p \ O n l i n e S o c c e r M a n a g e r H a c k . l n k [ L N K @ ] C : \ P r o g r a m D a t a \ { 0 9 b e 4 c 1 6 - 4 1 f 7 - c e f c - 0 9 b e - e 4 c 1 6 4 1 f 3 0 5 9 } \ O n l i n e S o c c e r M a n a g e r H a c k . e x e - - s t a r t u p = 1 - > %2'D) EF 'D*B1J1 [ 2 ]
[ H i d d e n . A D S ] [ S t r e a m ] C : \ P r o g r a m D a t a : N T - > %2'D) EF 'D*B1J1 [ 5 ]
[ H i d d e n . A D S ] [ S t r e a m ] C : \ P r o g r a m D a t a : N T 2 - > %2'D) EF 'D*B1J1 [ 5 ]
[ H j . N a m e ] [ EDA] C : \ $ R e c y c l e . B i n \ S - 1 - 5 - 2 1 - 2 2 3 1 6 7 6 3 5 6 - 6 8 0 8 0 5 6 8 1 - 2 8 5 5 5 6 7 4 9 0 - 1 0 0 2 \ $ R 2 V J I Z 2 \ I 3 8 6 \ S Y S T E M 3 2 \ S M S S . E X E - > E-0HA
¤ ¤ ¤ EDA 'DGH3* : 0 ¤ ¤ ¤
¤ ¤ ¤ A n t i r o o t k i t : 0 ( D r i v e r : DE J*E 'D*-EJD [ 0 x c 0 0 0 0 3 6 b ] ) ¤ ¤ ¤
¤ ¤ ¤ 'DE*5A- : 1 ¤ ¤ ¤
[ P U M . H o m e P a g e ] [ F I R E F X : C o n f i g ] C C A C C B F 1 - 7 A B 4 - 4 C F 5 - B 3 2 D - 6 6 8 C 6 8 6 A 5 3 9 F : u s e r _ p r e f ( " b r o w s e r . s t a r t u p . h o m e p a g e " , " h t t p : / / w w w . h o h o s e a r c h . c o m / ? t s = A H E p C H 4 l A n 4 n A U . . & v = 2 0 1 6 0 3 2 3 & u i d = B 7 D B 4 5 E 9 1 8 6 9 F A E D 2 A B 4 0 3 D 1 6 6 1 6 3 8 F 7 & p t i d = a m z & m o d e = f f s e n g " ) ; - > %3*(/'D ( a b o u t : h o m e )
¤ ¤ ¤ A-5 'D M B R : ¤ ¤ ¤
+ + + + + P h y s i c a l D r i v e 0 : S T 5 0 0 L M 0 1 2 H N - M 5 0 0 M B B + + + + +
- - - U s e r - - -
[ M B R ] 7 a d 2 2 9 4 8 d 6 8 f e 8 5 0 0 7 0 9 c 0 6 b 8 3 4 e 5 b 5 b
[ B S P ] 3 0 7 f 7 9 e c d 0 b 9 f 0 d 1 8 d a b f d 6 f c 9 a 2 9 3 b 6 : W i n d o w s V i s t a / 7 / 8 | V T . U n k n o w n M B R C o d e
P a r t i t i o n t a b l e :
0 - [ A C T I V E ] N T F S ( 0 x 7 ) [ V I S I B L E ] O f f s e t ( s e c t o r s ) : 2 0 4 8 | S i z e : 1 0 0 M B [ W i n d o w s V i s t a / 7 / 8 B o o t s t r a p | W i n d o w s V i s t a / 7 / 8 B o o t l o a d e r ]
1 - [ X X X X X X ] E X T E N ( 0 x 5 ) [ V I S I B L E ] O f f s e t ( s e c t o r s ) : 5 2 4 4 9 4 8 4 8 | S i z e : 2 2 0 8 3 9 M B
2 - [ X X X X X X ] N T F S ( 0 x 7 ) [ V I S I B L E ] O f f s e t ( s e c t o r s ) : 2 0 6 8 4 8 | S i z e : 2 5 6 0 0 0 M B [ W i n d o w s V i s t a / 7 / 8 B o o t s t r a p | W i n d o w s V i s t a / 7 / 8 B o o t l o a d e r ]
U s e r = L L 1 . . . O K
U s e r = L L 2 . . . O K