Advanced system Care 9 and IAT hooks?

[wab]

Hi,

in a period of several months I experienced that Roguekiller noticed  IAT hooks.I couldnt find the source of it.Yesterday I did a clean install Win 10 64 ,and after installing Advanced System Care 9 Roguekiller detected the IAT Hooks in explorer and more(see attachment).Also my wifes laptop on wich asc is installed has the same hooks. May it is harmless,but I dont know. I did send today also  the rappoort tot ASC. Help!

Wabbie

[Curson]

Hi wav,

Welcome to Adlice.com Forum.
Could you please attach the JSON report in your next reply ?

We are going to perform an extended analysis on the hooks.
Please follow the following process :

• Download Process Explorer and save it to your desktop.
  
• Click on the setup file (procexp.exe) and select Run as Administrator to start the tool.
  
• Locate the process named explorer.exe, do a right click on it and select Create Dump > Create Full Dump...
  
• Save the dump on your desktop and compress it.
• Upload it to Dropbox, Google Drive or similar services and share the link in your next reply.

Regards.

Note : This thread has been moved to the "RogueKiller" section for clarity.

[wab]

Hi

thank you for your comment, energy and time,;Here is the link:https://www.dropbox.com/s/bentf6x786mp5fq/rogueinstructie.odt.rar?dl=0

I hope it  is a harmless hook. I wish you(dont know how long the analyse takes) a ver good Christmas.

Wabbie

[Curson]

Hi Wabbie,

I'm sorry, but you didn't upload the right files.
These hooks are certainly harmless but we need the dump and JSON report in order to whitelist them.

Good Christmas to you too.
Regards.

[wab]

ouch very sorry .I hope this is the right one;I also include the answer from ASC(send them also mail about this question)
https://www.dropbox.com/s/io8jrhmevqr1o9j/Roguekillerrapport.rar?dl=0

greetings Wabbie

[Curson]

Hi Wabbie,

You uploaded RogueKiller TXT report this time, not the dump nor the JSON report.
Could you please try it again ?

Regards.

[wab]

same player (at age 67)shoots again .so in the end the dump   https://www.dropbox.com/s/wdq716m1se2ovjf/explorer.rar?dl=0

greetings  wabbie

[Curson]

Hi wabbie,

Player wins. 
Could you please attatch the JSON report as well ? We really need it in order to whitelist those hooks.
Thanks for your patience.

Regards.

[wab]

 Here it is in the end: https://www.dropbox.com/s/h15dkse79hc34k2/roguerapport.rar?dl=0

greetings and many thanks

[Curson]

Hi wabbie,

Thanks.
We will analyze it as soon as possible and get back to you.

Regards.