Lecture rapport rogue killer svp merci

Bonjour,

RogueKiller V8.8.15 [Mar 27 2014] par Adlice Software
mail : https://www.adlice.com/contact/
Remontees : https://forum.adlice.com/
Site Web : http://www.surlatoile.org/RogueKiller/
Blog : https://www.adlice.com/

Systeme d'exploitation : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Demarrage : Mode normal
Utilisateur : LOT [Droits d'admin]
Mode : Recherche -- Date : 04/04/2014 18:08:23
| ARK || FAK || MBR |

¤¤¤ Processus malicieux : 0 ¤¤¤

¤¤¤ Entrees de registre : 5 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> TROUVÉ
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> TROUVÉ
[HJ POL][PUM] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> TROUVÉ
[HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> TROUVÉ
[WALLPAPER][PUM] HKCU\[...]\Desktop : Wallpaper (C:\Documents and Settings\LOT\Local Settings\Application Data\Microsoft\Wallpaper1.bmp) -> TROUVÉ

¤¤¤ Tâches planifiées : 0 ¤¤¤

¤¤¤ Entrées Startup : 0 ¤¤¤

¤¤¤ Navigateurs web : 0 ¤¤¤

¤¤¤ Addons navigateur : 0 ¤¤¤

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

¤¤¤ Driver : [CHARGE] ¤¤¤
[Address] SSDT[25] : NtClose @ 0x8056F8D7 -> HOOKED (Unknown @ 0xB9515A94)
[Address] SSDT[41] : NtCreateKey @ 0x80578AB4 -> HOOKED (Unknown @ 0xB9515A4E)
[Address] SSDT[50] : NtCreateSection @ 0x8056DB66 -> HOOKED (Unknown @ 0xB9515A9E)
[Address] SSDT[53] : NtCreateThread @ 0x80584D39 -> HOOKED (Unknown @ 0xB9515A44)
[Address] SSDT[63] : NtDeleteKey @ 0x8059A5C9 -> HOOKED (Unknown @ 0xB9515A53)
[Address] SSDT[65] : NtDeleteValueKey @ 0x805991E8 -> HOOKED (Unknown @ 0xB9515A5D)
[Address] SSDT[68] : NtDuplicateObject @ 0x8057F18D -> HOOKED (Unknown @ 0xB9515A8F)
[Address] SSDT[98] : NtLoadKey @ 0x805B8287 -> HOOKED (Unknown @ 0xB9515A62)
[Address] SSDT[122] : NtOpenProcess @ 0x8057F93A -> HOOKED (Unknown @ 0xB9515A30)
[Address] SSDT[128] : NtOpenThread @ 0x80596743 -> HOOKED (Unknown @ 0xB9515A35)
[Address] SSDT[177] : NtQueryValueKey @ 0x80572F19 -> HOOKED (Unknown @ 0xB9515AB7)
[Address] SSDT[193] : NtReplaceKey @ 0x806571A8 -> HOOKED (Unknown @ 0xB9515A6C)
[Address] SSDT[200] : NtRequestWaitReplyPort @ 0x8057D13B -> HOOKED (Unknown @ 0xB9515AA8)
[Address] SSDT[204] : NtRestoreKey @ 0x80656D3D -> HOOKED (Unknown @ 0xB9515A67)
[Address] SSDT[213] : NtSetContextThread @ 0x80635EFB -> HOOKED (Unknown @ 0xB9515AA3)
[Address] SSDT[237] : NtSetSecurityObject @ 0x805E8694 -> HOOKED (Unknown @ 0xB9515AAD)
[Address] SSDT[247] : NtSetValueKey @ 0x80580088 -> HOOKED (Unknown @ 0xB9515A58)
[Address] SSDT[255] : NtSystemDebugControl @ 0x80651A75 -> HOOKED (Unknown @ 0xB9515AB2)
[Address] SSDT[257] : NtTerminateProcess @ 0x8058E8B1 -> HOOKED (Unknown @ 0xB9515A3F)
[Address] Shadow SSDT[549] : NtUserSetWindowsHookEx -> HOOKED (Unknown @ 0xB9515AC6)
[Address] Shadow SSDT[552] : NtUserSetWinEventHook -> HOOKED (Unknown @ 0xB9515ACB)

¤¤¤ Ruches Externes: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost
::1 localhost