RogueKiller V10.8.1.0 [Jun 3 2015] par Adlice Software email : http://www.adlice.com/contact/ Remontées : http://forum.adlice.com Site web : http://www.adlice.com/fr/logiciels/roguekiller/ Blog : http://www.adlice.com Système d'exploitation : Windows 7 (6.1.7601 Service Pack 1) 64 bits version Démarré en : Mode normal Utilisateur : hp [Administrateur] Démarré depuis : C:\Users\hp\Desktop\RogueKiller.exe Mode : Suppression -- Date : 06/07/2015 10:42:58 ¤¤¤ Processus : 0 ¤¤¤ ¤¤¤ Registre : 9 ¤¤¤ [PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> Supprimé(e) [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 192.168.1.1 0.0.0.0 [-][(Private Address) (XX)] -> Remplacé(e) () [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 192.168.1.1 0.0.0.0 [-][(Private Address) (XX)] -> Remplacé(e) () [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters | DhcpNameServer : 192.168.1.1 0.0.0.0 [-][(Private Address) (XX)] -> Remplacé(e) () [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{66439100-3D04-468F-90CC-448D2F0DBCA5} | DhcpNameServer : 192.168.1.1 0.0.0.0 [-][(Private Address) (XX)] -> Remplacé(e) () [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{66439100-3D04-468F-90CC-448D2F0DBCA5} | DhcpNameServer : 192.168.1.1 0.0.0.0 [-][(Private Address) (XX)] -> Remplacé(e) () [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{66439100-3D04-468F-90CC-448D2F0DBCA5} | DhcpNameServer : 192.168.1.1 0.0.0.0 [-][(Private Address) (XX)] -> Remplacé(e) () [PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Remplacé(e) (2) [PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Remplacé(e) (2) ¤¤¤ Tâches : 0 ¤¤¤ ¤¤¤ Fichiers : 0 ¤¤¤ ¤¤¤ Fichier Hosts : 1 ¤¤¤ [C:\Windows\System32\drivers\etc\hosts] 127.0.0.1 localhost ¤¤¤ Antirootkit : 14 (Driver: Non chargé [0xc000036b]) ¤¤¤ [IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NlsAnsiCodePage : Unknown @ 0x509d3f19 (call 0xd9003f09) [IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NlsAnsiCodePage : Unknown @ 0x249d3f19 (call 0xad003f09) [IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NlsAnsiCodePage : Unknown @ 0xffffffff869d3f19 (call 0xf003f09) [IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NlsAnsiCodePage : Unknown @ 0x189d3f19 (call 0xa1003f09) [IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NlsAnsiCodePage : Unknown @ 0x379d3f19 (call 0xc0003f09) [IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NlsAnsiCodePage : Unknown @ 0xfffffffff99d3f19 (call 0x82003f09) [IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NlsAnsiCodePage : Unknown @ 0xffffffffe99d3f19 (call 0x72003f09) [IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NlsAnsiCodePage : Unknown @ 0xffffffffbb9d3f19 (call 0x44003f09) [IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NlsAnsiCodePage : Unknown @ 0xffffffff8c9d3f19 (call 0x15003f09) [IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NlsAnsiCodePage : Unknown @ 0x2c9d3f19 (call 0xb5003f09) [IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NlsAnsiCodePage : Unknown @ 0x1f9d3f19 (call 0xa8003f09) [IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NlsAnsiCodePage : Unknown @ 0xffffffff8b9d3f19 (call 0x14003f09) [IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NlsAnsiCodePage : Unknown @ 0xffffffffd39d3f19 (call 0x5c003f09) [IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NlsAnsiCodePage : Unknown @ 0xffffffffca9d3f19 (call 0x53003f09) ¤¤¤ Navigateurs web : 1 ¤¤¤ [PUP][FIREFX:Addon] ir8xr7q9.default : Hotspot Shield Helper (Please allow this installation) [afurladvisor@anchorfree.com] -> Non sélectionné ¤¤¤ Vérification MBR : ¤¤¤ +++++ PhysicalDrive0: TOSHIBA MK6476GSX ATA Device +++++ --- User --- [MBR] 1a6b26332c0fa7ce902e04bbc3d709f7 [BSP] cd27ed3eb96aab5c994ff939e1f9cca6 : Windows Vista/7/8 MBR Code Partition table: 0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader] 1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 316722 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8|VT.Unknown Bootloader] 2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 648853504 | Size: 293656 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader] User = LL1 ... OK User = LL2 ... OK ============================================ RKreport_SCN_07242014_013035.log - RKreport_DEL_07242014_013119.log - RKreport_SCN_07252014_000152.log - RKreport_DEL_07252014_000223.log RKreport_SCN_06072015_102352.log - RKreport_SCN_06072015_103905.log