Guest User

asdasd

a guest
Oct 24th, 2017
306
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.55 KB | None | 0 0
  1. RogueKiller V12.11.21.0 (x64) [Oct 23 2017] (Free) by Adlice Software
  2. mail : http://www.adlice.com/contact/
  3. Feedback : https://forum.adlice.com
  4. Website : http://www.adlice.com/download/roguekiller/
  5. Blog : http://www.adlice.com
  6.  
  7. Operating System : Windows 10 (10.0.15063) 64 bits version
  8. Started in : Normal mode
  9. User : justi [Administrator]
  10. Started from : C:\Program Files\RogueKiller\RogueKiller64.exe
  11. Mode : Scan -- Date : 10/24/2017 20:44:15 (Duration : 00:23:48)
  12.  
  13. ¤¤¤ Processes : 0 ¤¤¤
  14.  
  15. ¤¤¤ Registry : 4 ¤¤¤
  16. [PUM.HomePage] (X64) HKEY_USERS\S-1-5-21-3695887035-1542476804-3675477037-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.np.edu.sg/ -> Found
  17. [PUM.HomePage] (X86) HKEY_USERS\S-1-5-21-3695887035-1542476804-3675477037-1001\Software\Microsoft\Internet Explorer\Main | Start Page : http://www.np.edu.sg/ -> Found
  18. [VT.Trojan.Generic.22087699] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | TCP Query User{9529C29A-1A38-4F04-A4A9-CED0EA4FE014}D:\program files\nexon launcher\maplestory\appdata\aries.exe : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=D:\program files\nexon launcher\maplestory\appdata\aries.exe|Name=AriesMS|Desc=AriesMS|Defer=User| [-] -> Found
  19. [VT.Trojan.Generic.22087699] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules | UDP Query User{4157EB61-A96C-4B4C-8D3D-30FB23D43088}D:\program files\nexon launcher\maplestory\appdata\aries.exe : v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=D:\program files\nexon launcher\maplestory\appdata\aries.exe|Name=AriesMS|Desc=AriesMS|Defer=User| [-] -> Found
  20.  
  21. ¤¤¤ Tasks : 0 ¤¤¤
  22.  
  23. ¤¤¤ Files : 3 ¤¤¤
  24. [PUP.HackTool][Folder] C:\ProgramData\KMSAutoS -> Found
  25. [PUP.Gen0][File] C:\Windows\SECOH-QAD.exe -> Found
  26. [PUP.HackTool][Folder] C:\ProgramData\KMSAutoS -> Found
  27.  
  28. ¤¤¤ WMI : 0 ¤¤¤
  29.  
  30. ¤¤¤ Hosts File : 0 ¤¤¤
  31.  
  32. ¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤
  33.  
  34. ¤¤¤ Web browsers : 1 ¤¤¤
  35. [PUM.HomePage][Chrome:Config] Default [SecurePrefs] : session.startup_urls [http://web.whatsapp.com/|http://hackforums.net/|http://youtube.com/] -> Found
  36.  
  37. ¤¤¤ MBR Check : ¤¤¤
  38. +++++ PhysicalDrive0: WDC WD10EZEX-60ZF5A0 +++++
  39. --- User ---
  40. [MBR] 72d802927eba00916c896a4d2a5b29a4
  41. [BSP] 9e3b3c473b1db0daa516427cdae6e1cc : Windows Vista/7/8 MBR Code
  42. Partition table:
  43. 0 - Microsoft reserved partition | Offset (sectors): 34 | Size: 128 MB
  44. 1 - Basic data partition | Offset (sectors): 264192 | Size: 953740 MB
  45. User = LL1 ... OK
  46. User = LL2 ... OK
  47.  
  48. +++++ PhysicalDrive1: Samsung SSD 850 EVO 250GB +++++
  49. --- User ---
  50. [MBR] 61767e74a4e279debf19ba7525f8ca37
  51. [BSP] 9e3b3c473b1db0daa516427cdae6e1cc : Windows Vista/7/8 MBR Code
  52. Partition table:
  53. 0 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 2048 | Size: 450 MB
  54. 1 - [MAN-MOUNT] EFI system partition | Offset (sectors): 923648 | Size: 99 MB
  55. 2 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 1126400 | Size: 16 MB
  56. 3 - Basic data partition | Offset (sectors): 1159168 | Size: 237909 MB
  57. User = LL1 ... OK
  58. User = LL2 ... OK
  59.  
  60. +++++ PhysicalDrive2: Sony Storage Media USB Device +++++
  61. --- User ---
  62. [MBR] af4459ee194608401f27c2476668d9f1
  63. [BSP] 577875af78323be43d581d9c43d8ac87 : Legit.Unknown MBR Code
  64. Partition table:
  65. 0 - [ACTIVE] MemTest86 | Offset (sectors): 2048 | Size: 49 MB
  66. 1 - EFI System Partition | Offset (sectors): 104448 | Size: 98 MB
  67. User = LL1 ... OK
  68. Error reading LL2 MBR! ([32] The request is not supported. )
Advertisement
Add Comment
Please, Sign In to add comment