Messages

796

RogueKiller / Re: scan log

« on: April 14, 2014, 04:49:43 pm »

Pay attention to those generic tutorials with specifics search tags pasted on their titles. I'd be suspicious.
Anyway, those tools are all legits, of course. Do you have the name of the culprit? That's maybe something I'll investigate into.

797

RogueKiller / Re: scan log

« on: April 14, 2014, 08:38:14 am »

Hello
Have you tried Gmer or Malwarebytes Antirootkit?

798

RogueKiller / Re: RK ANALYSE

« on: April 14, 2014, 08:37:10 am »

Yep, that's already taken in account.
For next release.

799

RogueKiller / Re: Rogue Killer Report Analysis

« on: April 14, 2014, 08:36:39 am »

Hello
You can remove the lines tagged 'PUM'

800

RogueKiller / Re: RogueKiller Scan Report

« on: April 14, 2014, 08:33:35 am »

Hello
Lightspot looks legit, I'll whitelist it.

That's all good.

801

RogueKiller / Re: advice please

« on: April 14, 2014, 08:32:43 am »

Hello
Could you please provide the text report instead? Detection labels aren't enough to tell.

802

RogueKiller / Re: MBR results.

« on: April 05, 2014, 06:51:24 pm »

Nope, that's fine
BTW, everything is explained in the doc, in MBR section: http://www.adlice.com/softwares/roguekiller/roguekiller-official-tutorial/

803

RogueKiller / Re: MBR results.

« on: April 05, 2014, 02:29:10 pm »

Hello (that's a good start, isn't it?)

Please ask your question, we're not robots.

804

RogueKiller / Known issues

« on: April 05, 2014, 02:26:45 pm »

Hello.

This topic concerns know issues of RogueKiller.
They will be listed here, waiting for the version 9, because we can't release a 8.X version for now.

So please look at this issues before asking regarding a new bug.
All these bugs will be fixed within version 9.

1- Search is looking in reparse points. Because of that bug, some report can look like this:


[username][SUSP PATH]  : C:\Users\Franck\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temp\Quarantine.exe -> TROUVÉ


2- Hidden processes found
This is 99% a false detection, hidden process detection has still some issues.

[Proc.Hidden]  -- -> KILLED [TermThr]

3- ZeroAccess/Whatever found in Antivirus process
This is a false detection, due to database loaded in clear in the antivirus process. Please open a new thread on the forum and DUMP the process memory with process explorer to confirm and whitelist.

805

RogueKiller / Re: Faux positif?

« on: April 05, 2014, 01:46:35 pm »

Oula oui :/
Merci du retour.

806

RogueKiller / Re: rougekiller settings file

« on: April 04, 2014, 08:57:00 am »

Hello.
This is not possible for now.
However, in the next major release (9), we are moving all the created files into a better place.
You can remove them, they are not necessary.

807

RogueKiller / Re: Need Help To Verfiy

« on: April 03, 2014, 05:54:14 pm »

Hello
Looks like those DLLs are legit.
They will be whitelisted in the next release, which will be the version.... 9! (well, in some months)
Please be patient, I don't forget you

808

RogueKiller / Re: Roguekiller Report

« on: April 03, 2014, 09:25:45 am »

Bonjour
Tout va bien. Les hooks sont légitimes

809

RogueKiller / Re: Roguekiller stuck

« on: April 02, 2014, 06:32:03 pm »

What was it?

810

RogueKiller / Re: help

« on: April 02, 2014, 06:01:38 pm »

We do speak French

UxTheme.dll est une DLL légitime, elle sera whitelistée dans la prochaine version.
Aucun souci.