RogueKiller V9.2.8.0 [Jul 11 2014] par Adlice Software
Mail : http://www.adlice.com/contact/
Remont�es : http://forum.adlice.com
Site Web : http://www.surlatoile.org/RogueKiller/
Blog : http://www.adlice.com

Syst�me d'exploitation : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
D�marrage : Mode normal
Utilisateur : utilisateur [Droits d'admin]
Mode : Suppression -- Date : 08/23/2014 07:07:21

��� Processus malicieux : 1 ���
[Proc.Svchost] svchost.exe -- [x] -> TU� [TermThr]

��� Entr�es de registre : 6 ���
[Suspicious.Path] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mbr -> SUPPRIM�
[Suspicious.Path] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mbr -> SUPPRIM�
[PUM.StartMenu] HKEY_USERS\S-1-5-21-4105504371-693162205-3391040533-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowMyGames : 0 -> REMPLAC� (1)
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> REMPLAC� (0)
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> REMPLAC� (0)
[PUM.HomePage] HKEY_USERS\S-1-5-21-4105504371-693162205-3391040533-1000\Software\Microsoft\Internet Explorer\Main | Start Page : http://googole.ca/ -> REMPLAC� (http://go.microsoft.com/fwlink/p/?LinkId=255141)

��� T�ches planifi�es : 0 ���

��� Fichiers : 0 ���

��� Fichier HOSTS : 0 [Too big!] ���

��� Antirootkit : 1 (Driver: CHARGE) ���
[Filter(Kernel.Filter)] \Driver\atapi @ \Device\CdRom0 : \Driver\GEARAspiWDM @ Unknown (\SystemRoot\system32\DRIVERS\fdc.sys)

��� Navigateurs web : 9 ���
[FIREFX:Addon] 6krr9c64.default-1408721399352 : Mozilla Firefox hotfix [firefox-hotfix@mozilla.org] -> SUPPRIM�
[FIREFX:Addon] 6krr9c64.default-1408721399352 : Adblock Plus [{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}] -> SUPPRIM�
[CHROME:Addon] Default : Google Drive [apdfllckaahabafndbhieahigkjlhalf] -> SUPPRIM�
[CHROME:Addon] Default : YouTube [blpcfgokakmgnkcojhhkbfbldkacnbeo] -> ERROR [2]
[CHROME:Addon] Default : Google Search [coobgpohoikkiipiblmjeljniedjpjpf] -> ERROR [2]
[CHROME:Addon] Default : Dark Vibe [dkckeanhmkjaechlhllmapjaaglgpcbj] -> ERROR [2]
[CHROME:Addon] Default : AdBlock [gighmmpiobklfepjocnamgkkbiglidom] -> ERROR [2]
[CHROME:Addon] Default : Google Wallet [nmmhkkegccagdldgiimedpiccmgmieda] -> ERROR [2]
[CHROME:Addon] Default : Gmail [pjkljhegncpnkpknbcohdijeoejaedia] -> ERROR [2]

��� MBR Verif : ���
+++++ PhysicalDrive0: WDC WD5000AAKX-22ERMA0 ATA Device +++++
--- User ---
[MBR] 7414a28d5b9f06bf0b0981dee8989647
[BSP] da359a1c000fb7da0f9c1cda88b0ddd6 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 868 MB
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 1779712 | Size: 476070 MB
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: SanDisk Cruzer Pattern USB Device +++++
--- User ---
[MBR] 71f5d6402e17e19c8a44c8eb40ff513f
[BSP] 788470fe12ec57aabe933cfdd9c84885 : Legit.Unknown MBR Code
Partition table:
0 - [XXXXXX] FAT16 (0x6) [VISIBLE] Offset (sectors): 129 | Size: 955 MB
User = LL1 ... OK
Error reading LL2 MBR! ([32] Cette demande n?est pas prise en charge. )

+++++ PhysicalDrive2: Staples Relay UFD USB Device +++++
--- User ---
[MBR] 448e6004cd954c9e240f5cdd9ab917e6
[BSP] 35c983a059084f27992aeb1280e9d74f : Empty MBR Code
Partition table:
0 - [XXXXXX] FAT32 (0xb) [VISIBLE] Offset (sectors): 32 | Size: 7633 MB
User = LL1 ... OK
Error reading LL2 MBR! ([32] Cette demande n?est pas prise en charge. )


============================================
RKreport_SCN_08232014_070413.log