Hi - Laptop has been acting funny...I am almost positive my new router got infected after I forgot to change the default PW for a few days. I run Avast and MBAM actively and shut Defender off. TDSSKiller is coming up clean.
Please note, first time I ran RK today, the initial scan turned off a MBAM process (a bit odd). Then the next one found some PUM Reg. entries that I deleted (in addition to all the rootkit stuff). This was the latest. Thanks!
RogueKiller V10.1.0.0 (x64) [Dec 11 2014] by Adlice Software
mail :
http://www.adlice.com/contact/Feedback :
http://forum.adlice.comWebsite :
http://www.adlice.com/softwares/roguekiller/Blog :
http://www.adlice.comOperating System : Windows 8.1 (6.3.9200 ) 64 bits version
Started in : Normal mode
User : Derek [Administrator]
Mode : Scan -- Date : 12/14/2014 20:04:19
¤¤¤ Processes : 0 ¤¤¤
¤¤¤ Registry : 0 ¤¤¤
¤¤¤ Tasks : 0 ¤¤¤
¤¤¤ Files : 0 ¤¤¤
¤¤¤ Hosts File : 0 ¤¤¤
¤¤¤ Antirootkit : 8 (Driver: Loaded) ¤¤¤
[IAT:Inl] (chrome.exe) ntdll.dll - LdrUnloadDll : Unknown @ 0x7ffd55df075c (jmp 0xffffffff8018f41c)
[IAT:Inl] (chrome.exe) ntdll.dll - LdrLoadDll : Unknown @ 0x7ffd55df03a4 (jmp 0xffffffff80169654)
[IAT:Inl] (chrome.exe) ntdll.dll - LdrUnloadDll : Unknown @ 0x7ffd55df075c (jmp 0xffffffff8018f41c)
[IAT:Inl] (chrome.exe) ntdll.dll - LdrLoadDll : Unknown @ 0x7ffd55df03a4 (jmp 0xffffffff80169654)
[IAT:Inl] (chrome.exe) ntdll.dll - LdrUnloadDll : Unknown @ 0x7ffd55df075c (jmp 0xffffffff8018f41c)
[IAT:Inl] (chrome.exe) ntdll.dll - LdrLoadDll : Unknown @ 0x7ffd55df03a4 (jmp 0xffffffff80169654)
[IAT:Inl] (chrome.exe) ntdll.dll - LdrUnloadDll : Unknown @ 0x7ffd55df075c (jmp 0xffffffff8018f41c)
[IAT:Inl] (chrome.exe) ntdll.dll - LdrLoadDll : Unknown @ 0x7ffd55df03a4 (jmp 0xffffffff80169654)
¤¤¤ Web browsers : 0 ¤¤¤
¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: HGST HTS541010A9E680 +++++
--- User ---
[MBR] ab09653465709269358ca86c4345e29e
[BSP] 7ee15af64f1544c7ab9f5888cf56cf4c : Empty MBR Code
Partition table:
0 - [XXXXXX] UNKNOWN (0x0) [VISIBLE] Offset (sectors): 1 | Size: 2097152 MB
User = LL1 ... OK
User = LL2 ... OK
============================================
RKreport_DEL_10102014_212827.log - RKreport_DEL_11112014_010526.log - RKreport_DEL_11112014_010741.log - RKreport_DEL_11282014_052614.log
RKreport_DEL_12142014_192540.log - RKreport_SCN_10102014_212517.log - RKreport_SCN_11112014_010301.log - RKreport_SCN_11112014_010726.log
RKreport_SCN_11282014_052344.log - RKreport_SCN_11282014_052847.log - RKreport_SCN_12142014_192425.log - RKreport_SCN_12142014_195416.log
RKreport_DEL_12142014_195656.log - RKreport_DEL_12142014_195720.log - RKreport_DEL_12142014_195722.log - RKreport_SCN_12142014_200014.log
RKreport_DEL_12142014_200110.log