Possible Rootkit detected

[Shug Ninx]

Hello there,

First thanks a lot for providing Roguekiller for free, that nice piece of software was recommended through a malware removal help forum (forum.malekal.org) for PUM.DNS removal.

In a recent case of malware removal, Roguekiller reported possible rootkit. As I'm new to Roguekiller, I'm having difficulties to tell if I'm facing a real rootkit infection or a false positive. I've read that some antivirus components can produce false positive, and indeed Avast is installed on this computer, but I'm still unable to decide based on the FAQ, tutorial, and known issues (reading and knowing is one thing, knowing how to... is another ;-).

The Roguekiller report is accessible here, as well as an FRST report.

Thanks a lot for your help and expertise.

[Shug Ninx]

Hello again !

No one to help analyzing the RogueKiller report ?   

[Tigzy]

Hello
This is hard to say, most of the time it's an antivirus that does this.
We'll soon working on this issue (once the uploader website is ready to accept the process dumps), so I'd skip it for now. Doesn't look malware, just a false alarm.

[Shug Ninx]

Thanks for your input. I'll perform another RogueKiller scan after removing the antivirus and give you the report.

My best wishes for this new year 

[Shug Ninx]

Hello !

No more suspected rootkit after removing Avast 2015 (free edition). I guess you made some change to RogueKiller since the current version didn't report this false positive after antivirus reinstallation.

Thanks anyway !