API tools faq
paste
xExekut3x

RogueKiller

xExekut3x
Jan 13th, 2015
318
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.34 KB | None | 0 0
raw download clone embed print report
  1. RogueKiller V10.1.2.0 (x64) [Jan 7 2015] by Adlice Software
  2. mail : http://www.adlice.com/contact/
  3. Feedback : http://forum.adlice.com
  4. Website : http://www.adlice.com/softwares/roguekiller/
  5. Blog : http://www.adlice.com
  6.  
  7. Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
  8. Started in : Normal mode
  9. User : Byron [Administrator]
  10. Mode : Scan -- Date : 01/13/2015 21:08:33
  11.  
  12. ¤¤¤ Processes : 0 ¤¤¤
  13.  
  14. ¤¤¤ Registry : 20 ¤¤¤
  15. [PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209} -> Found
  16. [PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E} -> Found
  17. [PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} -> Found
  18. [PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358} -> Found
  19. [PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7} -> Found
  20. [PUP] (X64) HKEY_CLASSES_ROOT\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301} -> Found
  21. [PUP] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vToolbarUpdater17.2.0 (C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exe) -> Found
  22. [PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\vToolbarUpdater17.2.0 (C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exe) -> Found
  23. [PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\BackupStack -> Found
  24. [PUP] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\vToolbarUpdater17.2.0 (C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exe) -> Found
  25. [PUM.SearchPage] (X64) HKEY_USERS\S-1-5-21-601943651-2993229849-1481644127-1000\Software\Microsoft\Internet Explorer\Main | Search Page : www.google.com -> Found
  26. [PUM.SearchPage] (X86) HKEY_USERS\S-1-5-21-601943651-2993229849-1481644127-1000\Software\Microsoft\Internet Explorer\Main | Search Page : www.google.com -> Found
  27. [PUM.DesktopIcons] (X64) HKEY_USERS\S-1-5-21-601943651-2993229849-1481644127-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Found
  28. [PUM.DesktopIcons] (X86) HKEY_USERS\S-1-5-21-601943651-2993229849-1481644127-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Found
  29. [PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Found
  30. [PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Found
  31. [PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Found
  32. [PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Found
  33. [PUM.DesktopIcons] (X64) HKEY_USERS\S-1-5-21-601943651-2993229849-1481644127-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Found
  34. [PUM.DesktopIcons] (X86) HKEY_USERS\S-1-5-21-601943651-2993229849-1481644127-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Found
  35.  
  36. ¤¤¤ Tasks : 2 ¤¤¤
  37. [Suspicious.Path] DSite.job -- C:\Users\Byron\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE (/Check) -> Found
  38. [Suspicious.Path] \\DSite -- C:\Users\Byron\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE (/Check) -> Found
  39.  
  40. ¤¤¤ Files : 0 ¤¤¤
  41.  
  42. ¤¤¤ Hosts File : 0 ¤¤¤
  43.  
  44. ¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤
  45.  
  46. ¤¤¤ Web browsers : 0 ¤¤¤
  47.  
  48. ¤¤¤ MBR Check : ¤¤¤
  49. +++++ PhysicalDrive0: Hitachi HTS725050A9A364 ATA Device +++++
  50. --- User ---
  51. [MBR] c95f3838904bb079c094b41b5fec635e
  52. [BSP] 1f2fe4cab813ca0ce788b0ddd18ea71a : HP MBR Code
  53. Partition table:
  54. 0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 39 MB
  55. 1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 80325 | Size: 15000 MB
  56. 2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 30800325 | Size: 461899 MB
  57. User = LL1 ... OK
  58. User = LL2 ... OK
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!