Messages

1

RogueKiller / Re: Need help on report please

« on: January 25, 2015, 04:57:30 PM »

Thank you for your answer Curson !

2

RogueKiller / Need help on report please

« on: January 25, 2015, 01:00:54 PM »

Hello,

Could someone please tell me what/if I should do something regarding the following report ?

RogueKiller V10.2.0.0 [Jan 19 2015] par Adlice Software
email : http://www.adlice.com/contact/
Remontées : http://forum.adlice.com
Site web : http://www.adlice.com/fr/logiciels/roguekiller/
Blog : http://www.adlice.com

Système d'exploitation : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Démarré en  : Mode normal
Utilisateur : gj [Administrateur]
Mode : Scan -- Date : 01/25/2015  12:21:26

¤¤¤ Processus : 0 ¤¤¤

¤¤¤ Registre : 8 ¤¤¤
[Suspicious.Path] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BRDriver (\??\c:\Documents and Settings\All Users\Application Data\BitRaider\BRDriver.sys) -> Trouvé(e)
[Suspicious.Path] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BRSptSvc ("C:\Documents and Settings\All Users\Application Data\BitRaider\BRSptSvc.exe") -> Trouvé(e)
[Suspicious.Path] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\BRDriver (\??\c:\Documents and Settings\All Users\Application Data\BitRaider\BRDriver.sys) -> Trouvé(e)
[Suspicious.Path] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\BRSptSvc ("C:\Documents and Settings\All Users\Application Data\BitRaider\BRSptSvc.exe") -> Trouvé(e)
[Suspicious.Path] HKEY_LOCAL_MACHINE\System\ControlSet002\Services\BRDriver (\??\c:\Documents and Settings\All Users\Application Data\BitRaider\BRDriver.sys) -> Trouvé(e)
[Suspicious.Path] HKEY_LOCAL_MACHINE\System\ControlSet002\Services\BRSptSvc ("C:\Documents and Settings\All Users\Application Data\BitRaider\BRSptSvc.exe") -> Trouvé(e)
[PUM.SearchPage] HKEY_USERS\S-1-5-21-1085031214-1214440339-725345543-1004\Software\Microsoft\Internet Explorer\Main | Search Page : http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch  -> Trouvé(e)
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1  -> Trouvé(e)

¤¤¤ Tâches : 0 ¤¤¤

¤¤¤ Fichiers : 0 ¤¤¤

¤¤¤ Fichier Hosts : 1 ¤¤¤
[C:\WINDOWS\System32\drivers\etc\hosts] 127.0.0.1   localhost

¤¤¤ Antirootkit : 0 (Driver: Chargé) ¤¤¤

¤¤¤ Navigateurs web : 1 ¤¤¤
[PUM.HomePage][FIREFX:Config] tbt74np2.default : user_pref("browser.startup.homepage", "www.google.fr"); -> Trouvé(e)

¤¤¤ Vérification MBR : ¤¤¤
+++++ PhysicalDrive0: ST3160815AS +++++
--- User ---
[MBR] 54622973a72f2c3b856e7764c9047aa3
[BSP] 289b47c2657a6951da1a088cea98db7d : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 63 | Size: 152625 MB [Windows XP Bootstrap | Windows XP Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: USB DISK MODULE USB Device +++++
--- User ---
[MBR] e9a61568ffac316a1d8c9215fd32be2f
[BSP] ef3177ea6997481f5647d45aa222b26f : Unknown MBR Code
Partition table:
0 - [XXXXXX] FAT32-LBA (0xc) [VISIBLE] Offset (sectors): 32 | Size: 983 MB
User = LL1 ... OK
Error reading LL2 MBR! ([32] Cette demande n'est pas prise en charge. )


============================================
RKreport_SCN_01242015_161018.log

Thanks in advance

Anshka