cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþRogueKiller V12.1.0.0 (x64) [Mar 29 2016] (Gratuit) par Adlice Software
email : http://www.adlice.com/contact/
Remontées : http://forum.adlice.com
Site web : http://www.adlice.com/fr/logiciels/roguekiller/
Blog : http://www.adlice.com

Système d'exploitation : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Démarré en : Mode normal
Utilisateur : Administrateur [Administrateur]
Démarré depuis : C:\Program Files\RogueKiller\RogueKiller64.exe
Mode : Scan -- Date : 03/29/2016 21:31:38

¤¤¤ Processus : 1 ¤¤¤
[VT.PUP.Optional.BrowserCompanion.A] BCHelper.exe(4000) -- C:\Program Files (x86)\BrowserCompanion\BCHelper.exe[x] -> Trouvé(e)

¤¤¤ Registre : 32 ¤¤¤
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Babylon -> Trouvé(e)
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\BasicScan -> Trouvé(e)
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\BrowserCompanion -> Trouvé(e)
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Conduit -> Trouvé(e)
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\DataMngr -> Trouvé(e)
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\DriverTuner -> Trouvé(e)
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\DriverTuner_Init -> Trouvé(e)
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Freesofttoday -> Trouvé(e)
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\ShopperReports3 -> Trouvé(e)
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Tutorials -> Trouvé(e)
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Wajam -> Trouvé(e)
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00cbb66b-1d3b-46d3-9577-323a336acb50} -> Trouvé(e)
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531} -> Trouvé(e)
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} -> Trouvé(e)
[PUP] (X64) HKEY_USERS\S-1-5-21-1797243781-876809514-2209090972-500\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser | {EF79F67A-6AD7-4715-A0F8-932FCA442023} : -> Trouvé(e)
[PUP] (X64) HKEY_USERS\S-1-5-21-1797243781-876809514-2209090972-500\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser | {D4027C7F-154A-4066-A1AD-4243D8127440} : -> Trouvé(e)
[PUP] (X86) HKEY_USERS\S-1-5-21-1797243781-876809514-2209090972-500\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser | {EF79F67A-6AD7-4715-A0F8-932FCA442023} : -> Trouvé(e)
[PUP] (X86) HKEY_USERS\S-1-5-21-1797243781-876809514-2209090972-500\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser | {D4027C7F-154A-4066-A1AD-4243D8127440} : -> Trouvé(e)
[PUP] (X64) HKEY_USERS\S-1-5-21-1797243781-876809514-2209090972-500\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks | {3f1fbbdd-1444-4838-b1b7-726d9bcf32ab} : -> Trouvé(e)
[PUP] (X64) HKEY_USERS\S-1-5-21-1797243781-876809514-2209090972-500\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks | {ef79f67a-6ad7-4715-a0f8-932fca442023} : -> Trouvé(e)
[PUP] (X86) HKEY_USERS\S-1-5-21-1797243781-876809514-2209090972-500\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks | {3f1fbbdd-1444-4838-b1b7-726d9bcf32ab} : -> Trouvé(e)
[PUP] (X86) HKEY_USERS\S-1-5-21-1797243781-876809514-2209090972-500\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks | {ef79f67a-6ad7-4715-a0f8-932fca442023} : -> Trouvé(e)
[PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | Browser companion helper : C:\Program Files (x86)\BrowserCompanion\BCHelper.exe /T=3 [7][x] -> Trouvé(e)
[PUP] (X64) HKEY_USERS\S-1-5-21-1797243781-876809514-2209090972-500\Software\Microsoft\Windows\CurrentVersion\RunOnce | Application Restart #1 : C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --new-window --flag-switches-begin --flag-switches-end --restore-last-session http://static.ravixewavil.com/bg/?d=00238B86FEBC38DD___z=1___rd=679bb7996fd544a5a0d685806c8cae32___cd=DS___instgrp=___channel=___partner=___InstallId=___uninstalled= [7][x][x][x][x][x] -> Trouvé(e)
[PUP] (X86) HKEY_USERS\S-1-5-21-1797243781-876809514-2209090972-500\Software\Microsoft\Windows\CurrentVersion\RunOnce | Application Restart #1 : C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --new-window --flag-switches-begin --flag-switches-end --restore-last-session http://static.ravixewavil.com/bg/?d=00238B86FEBC38DD___z=1___rd=679bb7996fd544a5a0d685806c8cae32___cd=DS___instgrp=___channel=___partner=___InstallId=___uninstalled= [7][x][x][x][x][x] -> Trouvé(e)
[PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WajamUpdater ("C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe") -> Trouvé(e)
[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\WajamUpdater ("C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe") -> Trouvé(e)
[PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\WajamUpdater ("C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe") -> Trouvé(e)
[PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-1797243781-876809514-2209090972-500\Software\Microsoft\Internet Explorer\Main | Start Page : http://wwww.google.fr/ -> Trouvé(e)
[PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-1797243781-876809514-2209090972-500\Software\Microsoft\Internet Explorer\Main | Start Page : http://wwww.google.fr/ -> Trouvé(e)
[PUM.StartMenu] (X64) HKEY_USERS\S-1-5-21-1797243781-876809514-2209090972-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Trouvé(e)
[PUM.StartMenu] (X86) HKEY_USERS\S-1-5-21-1797243781-876809514-2209090972-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> Trouvé(e)

¤¤¤ Tâches : 4 ¤¤¤
[Suspicious.Path|VT.PUP.Optional.DigitalSites] %WINDIR%\Tasks\DigitalSite.job -- C:\Users\ADMINI~1\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE (/Check) -> Trouvé(e)
[Suspicious.Path|VT.DealApp.BRAN] %WINDIR%\Tasks\UpdateTask.job -- C:\Users\ADMINI~1\AppData\Local\{8C09B~1\UNINST~1.EXE (/Check) -> Trouvé(e)
[Suspicious.Path|VT.PUP.Optional.DigitalSites] \DigitalSite -- C:\Users\ADMINI~1\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE (/Check) -> Trouvé(e)
[Suspicious.Path|VT.DealApp.BRAN] \UpdateTask -- C:\Users\ADMINI~1\AppData\Local\{8C09B~1\UNINST~1.EXE (/Check) -> Trouvé(e)

¤¤¤ Fichiers : 1 ¤¤¤
[PUP][Répertoire] C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001} -> Trouvé(e)

¤¤¤ Fichier Hosts : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Chargé) ¤¤¤

¤¤¤ Navigateurs web : 0 ¤¤¤

¤¤¤ Vérification MBR : ¤¤¤
+++++ PhysicalDrive0: Hitachi HTS543232L9A300 ATA Device +++++
--- User ---
[MBR] fb93151e4430fcce185ffb46e8be855c
[BSP] 1612a17507cbe003d83478f1cb7e39e1 : Windows XP|VT.Unknown MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 13412 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 27469824 | Size: 53100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 136218624 | Size: 238731 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: USB DISK 3.0 USB Device +++++
--- User ---
[MBR] 72caa24c11ead10a80816d1535e8a3f2
[BSP] 92278ab93e2acb5ff71b926e3b827b30 : Windows XP|VT.Unknown MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0xc) [VISIBLE] Offset (sectors): 8064 | Size: 14792 MB
User = LL1 ... OK
Error reading LL2 MBR! ([32] Cette demande n?est pas prise en charge. )


Publicité


Signaler le contenu de ce document

Publicité