Author Topic: log of roguekiller  (Read 6527 times)

0 Members and 1 Guest are viewing this topic.

June 23, 2014, 06:47:32 PM

frantkurina

  • Guest
log of roguekiller
« on: June 23, 2014, 06:47:32 PM »
please check the log of roguekiller

RogueKiller V9.1.0.0 (x64) [Jun 23 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
 : http://www.adlice.com

Operační systém : Windows 8.1 (6.3.9200 ) 64 bits version
Spuštěno v : Normální režim
Uživatel : františek [Práva správce]
Mód : Kontrola -- Datum : 06/23/2014  17:21:26

¤¤¤ Škodlivé procesy:  : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů:  : 8 ¤¤¤
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters | DhcpNameServer : 172.16.2.222  -> NALEZENO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters | DhcpNameServer : 172.16.2.222  -> NALEZENO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A79D757C-DDED-4C37-A8CF-2F7BF90433FE} | DhcpNameServer : 172.16.2.222  -> NALEZENO
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{A79D757C-DDED-4C37-A8CF-2F7BF90433FE} | DhcpNameServer : 172.16.2.222  -> NALEZENO
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1  -> NALEZENO
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1  -> NALEZENO
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1  -> NALEZENO
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1  -> NALEZENO

¤¤¤ naplánované úlohy : 2 ¤¤¤
[Suspicious.Path] ASC7_SkipUac_františek.job -- D:\advanced system care portable\ASC.exe (/SkipUac) -> NALEZENO
[Suspicious.Path] \\ASC7_SkipUac_františek -- D:\advanced system care portable\ASC.exe (/SkipUac) -> NALEZENO

¤¤¤ Soubory : 0 ¤¤¤

¤¤¤ Soubor HOSTS : 0 ¤¤¤

¤¤¤ Antirootkit : 8 ¤¤¤
[IAT:Addr] (explorer.exe) GDI32.dll - DeleteDC : Unknown @ 0x7ffdfaf30000
[EAT:Addr] (explorer.exe) Windows.Security.Authentication.OnlineId.dll - CscNetApiGetInterface : C:\WINDOWS\SYSTEM32\cscapi.dll @ 0x7ffdeddc1530
[EAT:Addr] (explorer.exe) Windows.Security.Authentication.OnlineId.dll - CscSearchApiGetInterface : C:\WINDOWS\SYSTEM32\cscapi.dll @ 0x7ffdeddc3cb8
[EAT:Addr] (explorer.exe) Windows.Security.Authentication.OnlineId.dll - OfflineFilesEnable : C:\WINDOWS\SYSTEM32\cscapi.dll @ 0x7ffdeddc6fa0
[EAT:Addr] (explorer.exe) Windows.Security.Authentication.OnlineId.dll - OfflineFilesGetShareCachingMode : C:\WINDOWS\SYSTEM32\cscapi.dll @ 0x7ffdeddc7434
[EAT:Addr] (explorer.exe) Windows.Security.Authentication.OnlineId.dll - OfflineFilesQueryStatus : C:\WINDOWS\SYSTEM32\cscapi.dll @ 0x7ffdeddc2f50
[EAT:Addr] (explorer.exe) Windows.Security.Authentication.OnlineId.dll - OfflineFilesQueryStatusEx : C:\WINDOWS\SYSTEM32\cscapi.dll @ 0x7ffdeddc2d50
[EAT:Addr] (explorer.exe) Windows.Security.Authentication.OnlineId.dll - OfflineFilesStart : C:\WINDOWS\SYSTEM32\cscapi.dll @ 0x7ffdeddc74f0

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Kontrola MBR : ¤¤¤
+++++ PhysicalDrive0: ST1000DM003-1CH162 +++++
--- User ---
[MBR] 066f10fed3f75f593eaa695f311f9e67
[BSP] 25e792008cfd462a7f658d5ed86abf9a : Unknown MBR Code
Partition table:
0 - [XXXXXX] UNKNOWN (0x0) [VISIBLE] Offset (sectors): 1 | Size: 2097152 MB
User = LL1 ... OK
User = LL2 ... OK


============================================
RKreport_SCN_06232014_165132.log - RKreport_SCN_06232014_171139.log

I can delete findings?
thank you-Franta

Reply #1June 24, 2014, 09:17:34 AM

Tigzy

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 957
  • Reputation:
    91
  • Personal Text
    Owner, Adlice Software
    • View Profile
    • Adlice Software
Re: log of roguekiller
« Reply #1 on: June 24, 2014, 09:17:34 AM »
Hello
It's not needed, only PUMs

Reply #2June 24, 2014, 06:23:15 PM

frantkurina

  • Guest
Re: log of roguekiller
« Reply #2 on: June 24, 2014, 06:23:15 PM »
díky mnohokrát za radu

Reply #3June 25, 2014, 08:12:22 AM

Tigzy

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 957
  • Reputation:
    91
  • Personal Text
    Owner, Adlice Software
    • View Profile
    • Adlice Software
Re: log of roguekiller
« Reply #3 on: June 25, 2014, 08:12:22 AM »
Není zač!