Author Topic: Examine my RogueKiller logs please!  (Read 6525 times)

0 Members and 1 Guest are viewing this topic.

January 05, 2015, 12:44:39 pm

GreatAntiMalwareTool

  • Newbie

  • Offline
  • *

  • 7
  • Reputation:
    0
  • Personal Text
    malware free computer
    • View Profile
    • Easiest & fastest way to get paid with make money online
Examine my RogueKiller logs please!
« on: January 05, 2015, 12:44:39 pm »
Hi admin,

This is my 1st time here & I just register for your forum.

I had been using RogueKiller since last year. I think it is amazing because it can remove some malware which other anti malware programs couldn't remove. Some of the malware had been deleted in the past. Some I kept it until today because I am not really sure about it. I didn't removed it because it is in the registry.

Today, I scan using RogueKiller. I found out my computer is pretty much clean. Only with some registry keys or value that I kept and not selected for deletion. I am not sure about it, so I want to ask you about it. Is it safe? Or should I delete them.

MBR Check : Error reading LL2 MBR! ([1] Incorrect function. )
What does it mean? Is anything wrong?

I had attach the logs in the attachment. Can you examine it for me and tell me which one should be deleted. Thank You!  :) Anything I should concern about, please tell me!

Reply #1January 05, 2015, 02:51:04 pm

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2557
  • Reputation:
    92
    • View Profile
Re: Examine my RogueKiller logs please!
« Reply #1 on: January 05, 2015, 02:51:04 pm »
Hi GreatAntiMalwareTool,
Welcome to Adlice.com Forum.

Did you ran RogueKiller because you believe your computer to be infected ?
Are you using a proxy on purpose ? If that's not the case, you can remove the following entries :
Quote
[PUM.Proxy] HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : 192.168.24.2:8080  -> Not selected
[PUM.Proxy] HKEY_USERS\S-1-5-21-682003330-484763869-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : 192.168.24.2:8080  -> Not selected
[PUM.Proxy] HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : 192.168.24.2:8080  -> Not selected

Quote from: GreatAntiMalwareTool
MBR Check : Error reading LL2 MBR! ([1] Incorrect function. )
What does it mean? Is anything wrong?
This line indicates that RogueKiller was unable to read the MBR within your hardrive because of some reason.
In my opinion, there is nothing to worry about.

Regards.

Reply #2January 06, 2015, 07:24:55 am

GreatAntiMalwareTool

  • Newbie

  • Offline
  • *

  • 7
  • Reputation:
    0
  • Personal Text
    malware free computer
    • View Profile
    • Easiest & fastest way to get paid with make money online
Re: Examine my RogueKiller logs please!
« Reply #2 on: January 06, 2015, 07:24:55 am »
Hi Curson,  :)

Yes of course. My computer was infected by malware last year. I use anti malware programs to scan & quarantine malware. RogueKiller is 1 of the anti malware programs. I use it to get rid of the remaining malware.

I don't use proxy. So I deleted it. But there seems to be a problem. 1 of the PUM.proxy can not be deleted. It written as "ERROR [2]".

[PUM.Proxy] HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : 192.168.24.2:8080  -> ERROR [2]

I will try to log out, close my web browser and then try to scan & delete it again.

Thank You for your help!  :D

Reply #3January 06, 2015, 07:53:23 am

GreatAntiMalwareTool

  • Newbie

  • Offline
  • *

  • 7
  • Reputation:
    0
  • Personal Text
    malware free computer
    • View Profile
    • Easiest & fastest way to get paid with make money online
Re: Examine my RogueKiller logs please!
« Reply #3 on: January 06, 2015, 07:53:23 am »
Haha ;D It works.

The PUM.Proxy seems to be deleted. After I rescan using RogueKiller, the PUM.Proxy is not detected & not listed any longer. It doesn't show up in the RogueKiller registry tab any longer after I scan it. I rescan 2 times just now. Once after I close my web browser. 1 more time after I open my web browser & login here on adlice forum.

Haha :) :D ;D I think my computer is fix & clean now for good! Thank You very much for your help!  ;)

Reply #4January 06, 2015, 04:18:11 pm

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2557
  • Reputation:
    92
    • View Profile
Re: Examine my RogueKiller logs please!
« Reply #4 on: January 06, 2015, 04:18:11 pm »
Hi GreatAntiMalwareTool,

Glad to hear your problems are now solved.
The error you encontered is not very serious but will surely be adressed. If the registry entry is gone after a rescan
this means that it has clearly been removed.

Regards.

Reply #5January 07, 2015, 08:10:21 am

Tigzy

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 946
  • Reputation:
    91
  • Personal Text
    Owner, Adlice Software
    • View Profile
    • Adlice Software
Re: Examine my RogueKiller logs please!
« Reply #5 on: January 07, 2015, 08:10:21 am »
Just a FYI:

Quote
-> ERROR [2]
0x2 in Win32 status = ERROR_FILE_NOT_FOUND

That means the registry value hasn't been found because it's removed by another line. Some registry keys are mirrored, it's quite hard to determine which ones so we prefer having 'errors' like that than missing non mirrored values by mistake :)