Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- RogueKiller V8.8.15 _x64_ [Mar 27 2014] by Adlice Software
- mail : http://www.adlice.com/contact/
- Feedback : http://forum.adlice.com
- Website : http://www.adlice.com/softwares/roguekiller/
- Blog : http://www.adlice.com
- Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
- Started in : Normal mode
- User : April Bowers Agency [Admin rights]
- Mode : Scan -- Date : 04/17/2014 16:16:50
- | ARK || FAK || MBR |
- ¤¤¤ Bad processes : 0 ¤¤¤
- ¤¤¤ Registry Entries : 13 ¤¤¤
- [RUN][SUSP PATH] HKCU\[...]\RunOnce : 414_1410224460086 ("C:\Users\April Bowers Agency\AppData\Local\LMIR0001.tmp_r.bat" [-]) -> FOUND
- [RUN][SUSP PATH] HKCU\[...]\RunOnce : 414_1639508460086 ("C:\Users\April Bowers Agency\AppData\Local\LMIR0002.tmp_r.bat" [-]) -> FOUND
- [RUN][SUSP PATH] HKUS\S-1-5-21-4234849188-1163541568-2843079188-1000\[...]\RunOnce : 414_1410224460086 ("C:\Users\April Bowers Agency\AppData\Local\LMIR0001.tmp_r.bat" [-]) -> FOUND
- [RUN][SUSP PATH] HKUS\S-1-5-21-4234849188-1163541568-2843079188-1000\[...]\RunOnce : 414_1639508460086 ("C:\Users\April Bowers Agency\AppData\Local\LMIR0002.tmp_r.bat" [-]) -> FOUND
- [HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> FOUND
- [HJ POL][PUM] HKLM\[...]\System : DisableRegistryTools (0) -> FOUND
- [HJ POL][PUM] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> FOUND
- [HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> FOUND
- [HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : DisableRegistryTools (0) -> FOUND
- [HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : ConsentPromptBehaviorAdmin (0) -> FOUND
- [HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> FOUND
- [HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
- [HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND
- ¤¤¤ Scheduled tasks : 0 ¤¤¤
- ¤¤¤ Startup Entries : 0 ¤¤¤
- ¤¤¤ Web browsers : 0 ¤¤¤
- ¤¤¤ Browser Addons : 0 ¤¤¤
- ¤¤¤ Particular Files / Folders: ¤¤¤
- ¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤
- ¤¤¤ External Hives: ¤¤¤
- ¤¤¤ Infection : ¤¤¤
- ¤¤¤ HOSTS File: ¤¤¤
- --> %SystemRoot%\System32\drivers\etc\hosts
- 127.0.0.1 localhost
- ¤¤¤ MBR Check: ¤¤¤
- +++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) WDC WD64 00AAKS-65Z7B0 SATA Disk Device +++++
- --- User ---
- [MBR] 7146ac023b590120d324c2054f930238
- [BSP] ed9188adb6df21e42c95ae8751f547c0 : Windows Vista/7/8 MBR Code
- Partition table:
- 0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB
- 1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 598025 MB
- 2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 1224962048 | Size: 12353 MB
- User = LL1 ... OK!
- User != LL2 ... KO!
- --- LL2 ---
- [MBR] 543e07ee5ab191f51c451df8fb780f08
- [BSP] 2125549b3c828837a59d43cb76e30c23 : Windows 7/8 MBR Code
- Partition table:
- 0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 264071168 | Size: 300 MB
- +++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ USB) Multi Flash Reader USB Device +++++
- Error reading User MBR! ([0x15] The device is not ready. )
- User = LL1 ... OK!
- Error reading LL2 MBR! ([0x32] The request is not supported. )
- Finished : << RKreport[0]_S_04172014_161650.txt >>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement