RogueKiller V10.0.2.0 (x64) [Oct 16 2014] par Adlice Software
email : http://www.adlice.com/contact/
Remontées : http://forum.adlice.com
Site web : https://www.surlatoile.org/RogueKiller/
Blog : http://www.adlice.com

Système d'exploitation : Windows 8.1 (6.3.9200 ) 64 bits version
Démarré en : Mode normal
Utilisateur : Serge [Administrateur]
Mode : Scan -- Date : 10/18/2014 14:26:01

¤¤¤ Processus : 0 ¤¤¤

¤¤¤ Registre : 2 ¤¤¤
[PUM.Proxy] (X64) HKEY_USERS\S-1-5-21-1264832004-2453320898-2615020690-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : http://127.0.0.1:8080 -> Trouvé(e)
[PUM.Proxy] (X86) HKEY_USERS\S-1-5-21-1264832004-2453320898-2615020690-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : http://127.0.0.1:8080 -> Trouvé(e)

¤¤¤ Tâches : 0 ¤¤¤

¤¤¤ Fichiers : 0 ¤¤¤

¤¤¤ Fichier Hosts : 0 [Too big!] ¤¤¤

¤¤¤ Antirootkit : 61 (Driver: Chargé) ¤¤¤
[IAT:Addr] (explorer.exe @ Bcp47Langs.dll) api-ms-win-appmodel-runtime-l1-1-0.dll - GetCurrentPackageFamilyName : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead12604
[IAT:Addr] (explorer.exe @ DEVOBJ.dll) api-ms-win-devices-config-l1-1-1.dll - CM_Set_Class_Registry_PropertyW : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec16f470
[IAT:Addr] (explorer.exe @ DEVOBJ.dll) api-ms-win-devices-config-l1-1-1.dll - CM_Get_Class_Registry_PropertyW : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec16e350
[IAT:Addr] (explorer.exe @ DEVOBJ.dll) api-ms-win-devices-config-l1-1-1.dll - CM_Get_Device_IDW : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec143c7c
[IAT:Addr] (explorer.exe @ DEVOBJ.dll) api-ms-win-devices-query-l1-1-1.dll - DevCreateObjectQuery : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec14a060
[IAT:Addr] (explorer.exe @ DEVOBJ.dll) api-ms-win-devices-query-l1-1-1.dll - DevCloseObjectQuery : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec148848
[IAT:Addr] (explorer.exe @ twinui.dll) api-ms-win-core-biplmapi-l1-1-1.dll - BiUpdateLockScreenApplications : C:\Windows\SYSTEM32\twinapi.appcore.dll @ 0x7ffadde0c3c4
[IAT:Addr] (explorer.exe @ twinui.dll) api-ms-win-core-biplmapi-l1-1-1.dll - BiChangeSessionState : C:\Windows\SYSTEM32\twinapi.appcore.dll @ 0x7ffadddf2b90
[IAT:Addr] (explorer.exe @ twinui.dll) api-ms-win-appmodel-runtime-internal-l1-1-0.dll - GetAppModelVersion : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead125bc
[IAT:Addr] (explorer.exe @ twinui.dll) api-ms-win-core-biptcltapi-l1-1-1.dll - BiPtAssociateActivationProxy : C:\Windows\SYSTEM32\twinapi.appcore.dll @ 0x7ffadddf6bac
[IAT:Addr] (explorer.exe @ twinui.dll) api-ms-win-core-biptcltapi-l1-1-1.dll - BiPtDisassociateWorkItem : C:\Windows\SYSTEM32\twinapi.appcore.dll @ 0x7ffadde0c94c
[IAT:Addr] (explorer.exe @ twinui.appcore.dll) api-ms-win-core-biptcltapi-l1-1-1.dll - BiPtActivateWorkItem : C:\Windows\SYSTEM32\twinapi.appcore.dll @ 0x7ffadde0c718
[IAT:Addr] (explorer.exe @ twinui.appcore.dll) api-ms-win-core-biptcltapi-l1-1-1.dll - BiPtFreeMemory : C:\Windows\SYSTEM32\twinapi.appcore.dll @ 0x7ffadddf8cc8
[IAT:Addr] (explorer.exe @ twinui.appcore.dll) api-ms-win-core-biptcltapi-l1-1-1.dll - BiPtQueryWorkItem : C:\Windows\SYSTEM32\twinapi.appcore.dll @ 0x7ffadde0cae0
[IAT:Addr] (explorer.exe @ twinui.appcore.dll) api-ms-win-core-biptcltapi-l1-1-1.dll - BiPtEnumerateWorkItemsForPackageName : C:\Windows\SYSTEM32\twinapi.appcore.dll @ 0x7ffadde0c9f0
[IAT:Addr] (explorer.exe @ wpncore.dll) api-ms-win-appmodel-runtime-l1-1-1.dll - PackageFamilyNameFromFullName : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead1282c
[IAT:Addr] (explorer.exe @ SettingSyncCore.dll) api-ms-win-appmodel-state-l1-1-0.dll - GetSystemAppDataKey : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead127d8
[IAT:Addr] (explorer.exe @ SettingSyncCore.dll) api-ms-win-appmodel-state-l1-1-0.dll - CloseState : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead124d8
[IAT:Addr] (explorer.exe @ SettingSyncCore.dll) api-ms-win-appmodel-state-l1-1-0.dll - OpenStateExplicit : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead12814
[IAT:Addr] (explorer.exe @ PackageStateRoaming.dll) api-ms-win-appmodel-runtime-l1-1-1.dll - OpenPackageInfoByFullName : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead127f0
[IAT:Addr] (explorer.exe @ PackageStateRoaming.dll) api-ms-win-appmodel-runtime-l1-1-1.dll - GetPackagesByPackageFamily : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead12754
[IAT:Addr] (explorer.exe @ PackageStateRoaming.dll) api-ms-win-appmodel-runtime-l1-1-1.dll - GetStagedPackageOrigin : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead12778
[IAT:Addr] (explorer.exe @ PackageStateRoaming.dll) api-ms-win-appmodel-runtime-l1-1-1.dll - ClosePackageInfo : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead124cc
[IAT:Addr] (explorer.exe @ PackageStateRoaming.dll) api-ms-win-appmodel-runtime-l1-1-1.dll - GetApplicationUserModelId : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead125c8
[IAT:Addr] (explorer.exe @ PackageStateRoaming.dll) api-ms-win-core-biplmapi-l1-1-1.dll - BiGetActiveBackgroundTasksEvent : C:\Windows\SYSTEM32\twinapi.appcore.dll @ 0x7ffadde0c180
[IAT:Addr] (explorer.exe @ PackageStateRoaming.dll) api-ms-win-appmodel-runtime-internal-l1-1-0.dll - GetPackagePropertyString : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead12718
[IAT:Addr] (explorer.exe @ PackageStateRoaming.dll) api-ms-win-appmodel-runtime-internal-l1-1-0.dll - GetPackageContext : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead126a0
[IAT:Addr] (explorer.exe @ PackageStateRoaming.dll) api-ms-win-appmodel-runtime-internal-l1-1-0.dll - GetPackageProperty : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead1270c
[IAT:Addr] (explorer.exe @ ondemandconnroutehelper.dll) api-ms-win-appmodel-runtime-l1-1-1.dll - GetCurrentApplicationUserModelId : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead125d4
[IAT:Addr] (explorer.exe @ MrmCoreR.dll) api-ms-win-appmodel-identity-l1-1-0.dll - AppXGetOSMaxVersionTested : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead12460
[IAT:Addr] (explorer.exe @ WSShared.dll) api-ms-win-appmodel-runtime-internal-l1-1-0.dll - GetAppModelVersion : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead125bc
[IAT:Addr] (explorer.exe @ WSShared.dll) api-ms-win-appmodel-runtime-internal-l1-1-0.dll - GetPackageInstallTime : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead126dc
[IAT:Addr] (explorer.exe @ WSShared.dll) api-ms-win-devices-query-l1-1-1.dll - DevGetObjectProperties : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec1494c4
[IAT:Addr] (explorer.exe @ WSShared.dll) api-ms-win-devices-query-l1-1-1.dll - DevFreeObjectProperties : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec149200
[IAT:Addr] (explorer.exe @ WSShared.dll) SLC.dll - SLClose : C:\Windows\SYSTEM32\sppc.dll @ 0x7ffae7d5566c
[IAT:Addr] (explorer.exe @ WSShared.dll) SLC.dll - SLOpen : C:\Windows\SYSTEM32\sppc.dll @ 0x7ffae7d578e8
[IAT:Addr] (explorer.exe @ WSSync.dll) api-ms-win-appmodel-runtime-l1-1-1.dll - PackageFamilyNameFromFullName : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead1282c
[IAT:Addr] (explorer.exe @ Windows.UI.Xaml.dll) api-ms-win-appmodel-runtime-internal-l1-1-0.dll - GetAppModelVersion : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead125bc
[IAT:Addr] (explorer.exe @ Windows.UI.Xaml.dll) api-ms-win-appmodel-runtime-internal-l1-1-0.dll - GetCurrentPackageApplicationContext : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead125e0
[IAT:Addr] (explorer.exe @ Windows.UI.Xaml.dll) api-ms-win-appmodel-runtime-internal-l1-1-0.dll - GetPackageOSMaxVersionTested : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead126e8
[IAT:Addr] (explorer.exe @ Windows.UI.Xaml.dll) api-ms-win-appmodel-runtime-internal-l1-1-0.dll - GetCurrentPackageContext : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead125f8
[IAT:Addr] (explorer.exe @ Windows.UI.Xaml.dll) api-ms-win-appmodel-runtime-internal-l1-1-0.dll - GetPackageApplicationPropertyString : C:\Windows\SYSTEM32\kernel.appcore.dll @ 0x7ffaead12688
[IAT:Addr] (explorer.exe @ Windows.UI.Xaml.dll) api-ms-win-core-winrt-robuffer-l1-1-0.dll - RoGetBufferMarshaler : C:\Windows\System32\WinTypes.dll @ 0x7ffadd8fbf60
[IAT:Addr] (explorer.exe @ bthprops.cpl) api-ms-win-devices-query-l1-1-1.dll - DevCreateObjectQuery : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec14a060
[IAT:Addr] (explorer.exe @ bthprops.cpl) api-ms-win-devices-query-l1-1-1.dll - DevCloseObjectQuery : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec148848
[IAT:Addr] (explorer.exe @ nvapi64.dll) SETUPAPI.dll - CM_Get_DevNode_Status_Ex : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec1440f0
[IAT:Addr] (explorer.exe @ nvapi64.dll) SETUPAPI.dll - CM_Reenumerate_DevNode : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec16a558
[IAT:Addr] (explorer.exe @ nvapi64.dll) SETUPAPI.dll - CM_Get_Device_ID_ExW : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec1439f8
[IAT:Addr] (explorer.exe @ DevDispItemProvider.dll) api-ms-win-devices-query-l1-1-1.dll - DevCreateObjectQueryFromIdEx : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec14b384
[IAT:Addr] (explorer.exe @ DevDispItemProvider.dll) api-ms-win-devices-query-l1-1-1.dll - DevCloseObjectQuery : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec148848
[IAT:Addr] (explorer.exe @ DevDispItemProvider.dll) api-ms-win-devices-query-l1-1-1.dll - DevFreeObjects : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec149730
[IAT:Addr] (explorer.exe @ DevDispItemProvider.dll) api-ms-win-devices-query-l1-1-1.dll - DevGetObjects : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec1497e8
[IAT:Addr] (explorer.exe @ DevDispItemProvider.dll) api-ms-win-devices-query-l1-1-1.dll - DevFreeObjectProperties : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec149200
[IAT:Addr] (explorer.exe @ DevDispItemProvider.dll) api-ms-win-devices-query-l1-1-1.dll - DevGetObjectProperties : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec1494c4
[IAT:Addr] (explorer.exe @ DevDispItemProvider.dll) api-ms-win-devices-query-l1-1-1.dll - DevSetObjectProperties : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec14b074
[IAT:Addr] (explorer.exe @ DevDispItemProvider.dll) api-ms-win-devices-query-l1-1-1.dll - DevFindProperty : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec14c434
[IAT:Addr] (explorer.exe @ DevDispItemProvider.dll) api-ms-win-devices-query-l1-1-1.dll - DevCreateObjectQueryFromIdsEx : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec1793d4
[IAT:Addr] (explorer.exe @ DevDispItemProvider.dll) api-ms-win-devices-query-l1-1-1.dll - DevCreateObjectQueryEx : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec149d20
[IAT:Addr] (explorer.exe @ DevDispItemProvider.dll) api-ms-win-devices-query-l1-1-1.dll - DevCreateObjectQuery : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec14a060
[IAT:Addr] (explorer.exe @ WINMMBASE.dll) api-ms-win-devices-config-l1-1-1.dll - CM_Get_DevNode_Status : C:\Windows\SYSTEM32\cfgmgr32.dll @ 0x7ffaec143d80
[IAT:Addr] (explorer.exe @ acppage.dll) sfc.dll - SfcIsFileProtected : C:\Windows\system32\sfc_os.DLL @ 0x7ffae3da14c0

¤¤¤ Navigateurs web : 0 ¤¤¤

¤¤¤ Vérification MBR : ¤¤¤
+++++ PhysicalDrive0: ST2000DM001-1CH164 +++++
--- User ---
[MBR] 0764a01cb13dc825be9ef5c2b8739767
[BSP] 1eb2cc36cc063ed8923469ccc7465c22 : Empty MBR Code
Partition table:
0 - [XXXXXX] UNKNOWN (0x0) [VISIBLE] Offset (sectors): 1 | Size: 2097152 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: Seagate IEEE 1394 Disk IEEE 1394 SBP2 Device +++++
--- User ---
[MBR] fc13f0a800d54973b3dc9620e084c757
[BSP] 784427a4dfece4beec51d26300ef8eff : Windows Vista/7/8 MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0xc) [VISIBLE] Offset (sectors): 2048 | Size: 32768 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 67119570 | Size: 154264 MB
2 - [XXXXXX] FAT32 (0xb) [VISIBLE] Offset (sectors): 383053923 | Size: 494 MB
3 - [XXXXXX] EXTEN-LBA (0xf) [VISIBLE] Offset (sectors): 384065955 | Size: 3246 MB
User = LL1 ... OK
Error reading LL2 MBR! ([32] Cette demande n?est pas prise en charge. )

+++++ PhysicalDrive2: Generic- SD/MMC USB Device +++++
Error reading User MBR! ([15] Le périphérique n?est pas prêt. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Cette demande n?est pas prise en charge. )

+++++ PhysicalDrive3: Generic- Compact Flash USB Device +++++
Error reading User MBR! ([15] Le périphérique n?est pas prêt. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Cette demande n?est pas prise en charge. )

+++++ PhysicalDrive4: Generic- SM/xD-Picture USB Device +++++
Error reading User MBR! ([15] Le périphérique n?est pas prêt. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Cette demande n?est pas prise en charge. )

+++++ PhysicalDrive5: Generic- MS/MS-Pro USB Device +++++
Error reading User MBR! ([15] Le périphérique n?est pas prêt. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Cette demande n?est pas prise en charge. )


============================================
RKreport_DEL_10162014_181409.log - RKreport_SCN_10162014_181110.log