Author Topic: Roguekiller Report [Résolu]  (Read 5939 times)

0 Members and 1 Guest are viewing this topic.

April 03, 2014, 07:57:41 AM

Xstof25

  • Guest
Roguekiller Report [Résolu]
« on: April 03, 2014, 07:57:41 AM »
Bonjour,
Voici le rapport que j ai eu après analyse; Je suis un nouvel utilisateur.
J'ai un windows 8.1 64 bits.

Pouvez vous me guider?
merci d avance

Je pense que tout est légitime mais on ne sait jamais.

RogueKiller V8.8.15 _x64_ [Mar 27 2014] par Adlice Software
mail : http://www.adlice.com/contact/
Remontees : http://forum.adlice.com
Site Web : http://www.surlatoile.org/RogueKiller/
Blog : http://www.adlice.com

Systeme d'exploitation : Windows 8.1 (6.3.9200 ) 64 bits version
Demarrage : Mode normal
Utilisateur : XXXXX [Droits d'admin]
Mode : Recherche -- Date : 04/03/2014 07:10:58
| ARK || FAK || MBR |

¤¤¤ Processus malicieux : 0 ¤¤¤

¤¤¤ Entrees de registre : 0 ¤¤¤

¤¤¤ Tâches planifiées : 0 ¤¤¤

¤¤¤ Entrées Startup : 0 ¤¤¤

¤¤¤ Navigateurs web : 0 ¤¤¤

¤¤¤ Addons navigateur : 0 ¤¤¤

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

¤¤¤ Driver : [NON CHARGE 0x0] ¤¤¤
[Address] IAT @explorer.exe (DeleteDC) : GDI32.dll -> HOOKED (Unknown @ 0x33A00000)
[Address] EAT @firefox.exe (DllMain) : pnrpnsp.dll -> HOOKED (C:\WINDOWS\SysWOW64\napinsp.dll @ 0x082B1B4C)
[Address] EAT @firefox.exe (NSPStartup) : pnrpnsp.dll -> HOOKED (C:\WINDOWS\SysWOW64\napinsp.dll @ 0x082B1675)

¤¤¤ Ruches Externes: ¤¤¤

¤¤¤ Infection :  ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




127.0.0.1   localhost

::1      localhost



¤¤¤ MBR Verif: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) ST31000340NS ATA Device +++++
--- User ---
[MBR] eb8556b5dfefca88e051ab1c08c4e405
[BSP] 40407284828aef8f182de4b5f6e22c05 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 350 MB
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 718848 | Size: 553984 MB
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ IDE) WDC WD20EARX-00PASB0 ATA Device +++++
--- User ---
[MBR] 22d448ccb82cb677fd6c33faedb1262c
[BSP] 385f57848282735d4586b5e0c17c6a6f : Empty MBR Code
Partition table:
0 - [XXXXXX] UNKNOWN (0x00) [VISIBLE] Offset (sectors): 1 | Size: 2097152 MB
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive2: (\\.\PHYSICALDRIVE2 @ IDE) ST31500341AS ATA Device +++++
--- User ---
[MBR] ae6e12a29341674e3173e1190661353f
[BSP] d0dbd5e5803312b82b18bcdd9dc9aeea : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1430797 MB
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive3: (\\.\PHYSICALDRIVE3 @ IDE) ST2000DL003-9VT166 ATA Device +++++
--- User ---
[MBR] ce574b3156e0f681ab38842a8fb42528
[BSP] 55cce7c1145b657da65e54405c8b5156 : Empty MBR Code
Partition table:
0 - [XXXXXX] UNKNOWN (0x00) [VISIBLE] Offset (sectors): 1 | Size: 2097152 MB
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive4: (\\.\PHYSICALDRIVE4 @ USB) Generic STORAGE DEVICE-A USB Device +++++
Error reading User MBR! ([0x15] Le périphérique n?est pas prêt. )
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] Cette demande n?est pas prise en charge. )

+++++ PhysicalDrive5: (\\.\PHYSICALDRIVE5 @ USB) Generic STORAGE DEVICE-A USB Device +++++
Error reading User MBR! ([0x15] Le périphérique n?est pas prêt. )
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] Cette demande n?est pas prise en charge. )

+++++ PhysicalDrive6: (\\.\PHYSICALDRIVE6 @ USB) Generic STORAGE DEVICE-A USB Device +++++
Error reading User MBR! ([0x15] Le périphérique n?est pas prêt. )
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] Cette demande n?est pas prise en charge. )

+++++ PhysicalDrive7: (\\.\PHYSICALDRIVE7 @ USB) Generic STORAGE DEVICE-A USB Device +++++
Error reading User MBR! ([0x15] Le périphérique n?est pas prêt. )
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] Cette demande n?est pas prise en charge. )

+++++ PhysicalDrive8: (\\.\PHYSICALDRIVE8 @ USB) Generic STORAGE DEVICE-A USB Device +++++
Error reading User MBR! ([0x15] Le périphérique n?est pas prêt. )
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] Cette demande n?est pas prise en charge. )

+++++ PhysicalDrive9: (\\.\PHYSICALDRIVE9 @ USB) Generic Ultra HS-SD/MMC USB Device +++++
Error reading User MBR! ([0x15] Le périphérique n?est pas prêt. )
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] Cette demande n?est pas prise en charge. )

Termine : << RKreport[0]_S_04032014_071058.txt >>




« Last Edit: April 03, 2014, 09:59:02 AM by Xstof25 »

Reply #1April 03, 2014, 09:25:45 AM

Tigzy

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 956
  • Reputation:
    91
  • Personal Text
    Owner, Adlice Software
    • View Profile
    • Adlice Software
Re: Roguekiller Report
« Reply #1 on: April 03, 2014, 09:25:45 AM »
Bonjour :)
Tout va bien. Les hooks sont légitimes

Reply #2April 03, 2014, 09:58:41 AM

Xstof25

  • Guest
Re: Roguekiller Report
« Reply #2 on: April 03, 2014, 09:58:41 AM »
Merci beaucoup pour la rapidité de la réponse.