Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Messages - coldi

Pages: [1] 2
RogueKiller PREMIUM / Proc.Hidden
« on: May 10, 2019, 04:30:46 am »
Hi there,
I am having a couple recurring detections with the proc.hidden tag. I had the winprvse detection for a while as I have posted a few months ago. Now I occasionally seemingly have additional proc.hidden detections as well. Any idea what these might be?
Thanks a lot in advance

RogueKiller / Re: ===> False Positives <===
« on: November 03, 2018, 09:51:47 pm »
Sure thing

RogueKiller / Re: ===> False Positives <===
« on: November 03, 2018, 12:16:04 am »
Hi there, I may have stumbled upon a false positive again or at least an oddity. Version seems to report the wmrprvse.exe as malware. is the file in question - I add an archive with the report and the file. Strangely enough on a scan shortly afterwards it stopped detecting it.

Best regards

RogueKiller / Re: ===> False Positives <===
« on: September 16, 2018, 03:09:02 pm »
Sorry took a moment but here is the file.


RogueKiller / Re: ===> False Positives <===
« on: September 15, 2018, 05:20:00 pm »
Hi there, I think I stumbled on a false positive. Latest scan detected the  world of warcraft .exe as something seemingly harmful. I add the report.
best regards

RogueKiller / Re: Pup detection
« on: November 02, 2017, 04:26:29 am »
Thanks for the explanation I couldn't make sense of it.  :)

RogueKiller / Pup detection
« on: October 28, 2017, 06:18:20 am »
Hi there,

after scanning today an odd pup showed up anyone knows what this might be about ?

Thanks a lot in advance.

RogueKiller / Re: ===> False Positives <===
« on: November 14, 2016, 03:56:21 am »
Hi there,
not sure if it's the case but I might have stumbled about something again.
The latest version shows [PUM.HomePage][Chrome:Config] Default : homepage [] -> Found but no additional information is given and as far as I can tell the browser is functioning as it should. I'll add the report but there doesn't seem to be anything more about it. The previous version doesn't detect it.

RogueKiller / Re: ===> False Positives <===
« on: October 12, 2016, 04:42:57 am »
Hi there,
I have a potential false positive. A scan with the latest version showed 15 detections and I think all of them are related to drivers of an older asus xonar audio card and the cmi chip on it I still have.
Obviously not sure if that's the case so I added the detected files and the report.

RogueKiller / Re: ===> False Positives <===
« on: December 01, 2015, 05:06:47 pm »
Mhh ok I'll remove the key but it's a bit odd I can't observe any strange behaviour related to the description of the adware. Funnily I asked around a bit and that particular key seems to exist on a couple of windows10 systems without showing symptoms. Anyways interesting thanks for the information.

RogueKiller / Re: ===> False Positives <===
« on: December 01, 2015, 06:40:03 am »
Hi there I happened to stumble onto something again and I kinda think it's a false positive - a check with the latest rk11 found
Registry : 1
[PUP] (X64) HKEY_LOCAL_MACHINE\Software\Partner -> Found
The registry folder looks like this (not my screenshot)
best regards

RogueKiller / Re: ==> Proc.Injected <==
« on: December 01, 2015, 06:26:00 am »
ah a bit late but thanks a lot again for checking I guessed the app was fine.

RogueKiller / Re: ==> Proc.Injected <==
« on: November 25, 2015, 05:16:24 am »
Hi there,  found myself another one of those testing out the beta version this time it's the SkypeHost.exe .
Thought I might report it again hopefully it's another "false positive".
Best regards

RogueKiller / Re: Iat Hooks
« on: October 08, 2015, 03:50:29 pm »
Ah thanks a lot again I was really surprised about the huge number of those.

RogueKiller / Iat Hooks
« on: October 07, 2015, 11:31:48 am »
hi there,
I have once again a question concerning iat hooks. I just downloaded the latest version of roguekiller and it showed a seriously huge amount of those and I am not sure if there are some I should be concerned about so I'd really appreciate some advice there once again. On a side note I also ran the beta which went through perfectly fine but showed similar results.
Thanks a lot in advance.

Pages: [1] 2