Show Posts
1
Malware removal help / I don't know what to do??
« on: January 13, 2015, 10:29:36 PM »
Please help me!RogueKiller V10.1.2.0 [Jan 7 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com
Operating System : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Started in : Normal mode
User : gina [Administrator]
Mode : Scan -- Date : 01/13/2015 15:50:26
¤¤¤ Processes : 0 ¤¤¤
¤¤¤ Registry : 13 ¤¤¤
[PUP] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} -> Found
[PUP] HKEY_CLASSES_ROOT\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52} -> Found
[PUP] HKEY_CLASSES_ROOT\CLSID\{80922ee0-8a76-46ae-95d5-bd3c3fe0708d} -> Found
[PUP] HKEY_CLASSES_ROOT\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} -> Found
[PUM.Proxy] HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> Found
[PUM.Proxy] HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> Found
[PUM.Proxy] HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : http=127.0.0.1:49697;https=127.0.0.1:49697 -> Found
[PUM.Proxy] HKEY_USERS\S-1-5-21-4022955421-1960687269-592621448-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : http=127.0.0.1:10497 -> Found
[PUM.Proxy] HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : http=127.0.0.1:49697;https=127.0.0.1:49697 -> Found
[PUM.HomePage] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Start Page : https://qc.yahoo.com/?fr=hp-avast&type=avastbcl -> Found
[PUM.HomePage] HKEY_USERS\S-1-5-21-4022955421-1960687269-592621448-1000\Software\Microsoft\Internet Explorer\Main | Start Page : https://qc.yahoo.com/?fr=hp-avast&type=avastbcl -> Found
[PUM.SearchPage] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Search Page : https://qc.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} -> Found
[PUM.SearchPage] HKEY_USERS\S-1-5-21-4022955421-1960687269-592621448-1000\Software\Microsoft\Internet Explorer\Main | Search Page : https://qc.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} -> Found
¤¤¤ Tasks : 0 ¤¤¤
¤¤¤ Files : 0 ¤¤¤
¤¤¤ Hosts File : 0 ¤¤¤
¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤
¤¤¤ Web browsers : 0 ¤¤¤
¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: FUJITSU MJA2160BH G2 +++++
--- User ---
[MBR] 177ebcdacbc1b0beba51f7b6ef55cdbd
[BSP] 41fce8f0ceed749d64adfd8bf9d6f830 : Unknown MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 140646 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 288045056 | Size: 11777 MB
2 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 312164352 | Size: 201 MB
User = LL1 ... OK
User = LL2 ... OK
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com
Operating System : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Started in : Normal mode
User : gina [Administrator]
Mode : Scan -- Date : 01/13/2015 15:50:26
¤¤¤ Processes : 0 ¤¤¤
¤¤¤ Registry : 13 ¤¤¤
[PUP] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} -> Found
[PUP] HKEY_CLASSES_ROOT\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52} -> Found
[PUP] HKEY_CLASSES_ROOT\CLSID\{80922ee0-8a76-46ae-95d5-bd3c3fe0708d} -> Found
[PUP] HKEY_CLASSES_ROOT\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} -> Found
[PUM.Proxy] HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> Found
[PUM.Proxy] HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyEnable : 1 -> Found
[PUM.Proxy] HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : http=127.0.0.1:49697;https=127.0.0.1:49697 -> Found
[PUM.Proxy] HKEY_USERS\S-1-5-21-4022955421-1960687269-592621448-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : http=127.0.0.1:10497 -> Found
[PUM.Proxy] HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : http=127.0.0.1:49697;https=127.0.0.1:49697 -> Found
[PUM.HomePage] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Start Page : https://qc.yahoo.com/?fr=hp-avast&type=avastbcl -> Found
[PUM.HomePage] HKEY_USERS\S-1-5-21-4022955421-1960687269-592621448-1000\Software\Microsoft\Internet Explorer\Main | Start Page : https://qc.yahoo.com/?fr=hp-avast&type=avastbcl -> Found
[PUM.SearchPage] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Search Page : https://qc.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} -> Found
[PUM.SearchPage] HKEY_USERS\S-1-5-21-4022955421-1960687269-592621448-1000\Software\Microsoft\Internet Explorer\Main | Search Page : https://qc.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} -> Found
¤¤¤ Tasks : 0 ¤¤¤
¤¤¤ Files : 0 ¤¤¤
¤¤¤ Hosts File : 0 ¤¤¤
¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤
¤¤¤ Web browsers : 0 ¤¤¤
¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: FUJITSU MJA2160BH G2 +++++
--- User ---
[MBR] 177ebcdacbc1b0beba51f7b6ef55cdbd
[BSP] 41fce8f0ceed749d64adfd8bf9d6f830 : Unknown MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 140646 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 288045056 | Size: 11777 MB
2 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 312164352 | Size: 201 MB
User = LL1 ... OK
User = LL2 ... OK
