rapport reguekiller:
RogueKiller V6.2.4 [12/01/2012] par Tigzy
mail: tigzyRK<at>gmail<dot>com
Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Blog: http://tigzyrk.blogspot.com
Systeme d'exploitation: Windows Vista (6.0.6001 Service Pack 1) 32 bits version
Demarrage : Mode normal
Utilisateur: Céline [Droits d'admin]
Mode: Suppression -- Date : 15/01/2012 21:51:02
¤¤¤ Processus malicieux: 0 ¤¤¤
¤¤¤ Entrees de registre: 4 ¤¤¤
[SUSP PATH] HKUS\S-1-5-21-3584076442-3181646435-4122893421-501[...]\Run : kkakiei ("c:\users\céline\appdata\local\kkakiei.exe" kkakiei) -> DELETED
[WallPP] HKCU\[...]\Desktop : Wallpaper () -> REPLACED (C:\Users\Céline\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg)
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤
[FILE] mmc224579.txt : c:\users\céline\appdata\roaming\adobe\plugs\mmc224579.txt --> REMOVED
[FOLDER] plugs : c:\users\céline\appdata\roaming\adobe\plugs --> REMOVED
[FILE] thr1.chm : c:\users\céline\appdata\roaming\adobe\shed\thr1.chm --> REMOVED
[FOLDER] shed : c:\users\céline\appdata\roaming\adobe\shed --> REMOVED
¤¤¤ Driver: [LOADED] ¤¤¤
¤¤¤ Infection : ¤¤¤
¤¤¤ Fichier HOSTS: ¤¤¤
127.0.0.1 localhost
::1 localhost
¤¤¤ MBR Verif: ¤¤¤
+++++ PhysicalDrive0: +++++
--- User ---
[MBR] 68fa56299b355de34ea4e541d7e26e2d
[BSP] 12363dafc8b1110c9583683a9ba0f769 : Windows Vista MBR Code
Partition table:
0 - [XXXXXX] FAT16 [HIDDEN!] Offset (sectors): 63 | Size: 123 Mo
1 - [XXXXXX] NTFS [VISIBLE] Offset (sectors): 241664 | Size: 10737 Mo
2 - [ACTIVE] NTFS [VISIBLE] Offset (sectors): 21213184 | Size: 236512 Mo
3 - [XXXXXX] UNKNW [VISIBLE] Offset (sectors): 483151872 | Size: 2684 Mo
User = LL1 ... OK!
User = LL2 ... OK!
+++++ PhysicalDrive1: +++++
--- User ---
[MBR] 22ad8eb083bceb67ab62c8c80189fb24
[BSP] 648ab90c3bb328c7c45f4f96593a128a : Windows Vista MBR Code
Partition table:
0 - [XXXXXX] NTFS [VISIBLE] Offset (sectors): 2048 | Size: 250057 Mo
