RogueKiller V6.2.0 [12/12/2011] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo.com/forum/files/file/413-roguekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows XP (5.1.2600 Service Pack 2) 32 bits version
Started in : Normal mode
User: Korisnik [Admin rights]
Mode: Scan -- Date : 12/17/2011 12:48:23

¤¤¤ Bad processes: 0 ¤¤¤

¤¤¤ Registry Entries: 10 ¤¤¤
[SUSP PATH] HKLM\[...]\Run : wKgaGVYnyvop.exe (C:\Documents and Settings\All Users\Application Data\wKgaGVYnyvop.exe) -> FOUND
[PROXY IE] HKCU\[...]\Internet Settings : ProxyServer (isa01.carin.local:8080) -> FOUND
[DNS] HKLM\[...]\ControlSet001\Parameters\Interfaces\{2B230622-306E-421D-9EFC-7AA3BE9295E0} : NameServer (66.90.65.89,4.2.2.1) -> FOUND
[DNS] HKLM\[...]\ControlSet003\Parameters\Interfaces\{2B230622-306E-421D-9EFC-7AA3BE9295E0} : NameServer (66.90.65.89,4.2.2.1) -> FOUND
[HJPOL] HKCU\[...]\Explorer : NoDesktop (1) -> FOUND
[HJ] HKLM\[...]\SystemRestore : DisableSR (1) -> FOUND
[WallPP] HKCU\[...]\Desktop : Wallpaper () -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowMyComputer (0) -> FOUND
[HJ] HKCU\[...]\Advanced : Start_ShowSearch (0) -> FOUND
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver: [LOADED] ¤¤¤

¤¤¤ Infection : Root.MBR ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
127.0.0.1       localhost
127.0.0.1 activate.adobe.com
127.0.0.1 adobeereg.com
127.0.0.1 practivate.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 2dns-2.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns2.adobe.com
127.0.0.1 adobe-dns3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate-sjc0.adobe.com


¤¤¤ MBR Check: ¤¤¤
--- User ---
[MBR] 3381c40a2c2d004e75b0f67ebbfbdcd9
[BSP] a119c8d710f9745fe2cdc3642b711f00 : MBR Code unknown
Partition table:
0 - [ACTIVE] NTFS [VISIBLE] Offset (sectors): 2048 | Size: 120031 Mo
User = LL1 ... OK!
User != LL2 ... KO!
--- LL2 ---
[MBR] b4e00a2f66c8bd1751d3a7b43d8a588a
[BSP] a119c8d710f9745fe2cdc3642b711f00 : MBR Code unknown
Partition table:
0 - [XXXXXX] NTFS [VISIBLE] Offset (sectors): 2048 | Size: 120031 Mo
1 - [ACTIVE] NTFS [HIDDEN!] Offset (sectors): 234438656 | Size: 1 Mo

Finished : << RKreport[1].txt >>
RKreport[1].txt