Rapport RogueKiller

[MORTYMER]

bonsoir,

 

voici mon rapport Roguekiller...

 

est-il bon ?

 

c quoi HOOKED ?

 

merci d'avance

 

 

RogueKiller V7.3.1 [10/03/2012] par Tigzy

mail: tigzyRK<at>gmail<dot>com

Remontees: [RogueKiller] Remontées (1/47)

Blog: tigzy-RK

 

Systeme d'exploitation: Windows Vista (6.0.6002 Service Pack 2) 32 bits version

Demarrage : Mode normal

Utilisateur: R2-D2 [Droits d'admin]

Mode: Recherche -- Date: 11/03/2012 21:16:33

 

¤¤¤ Processus malicieux: 0 ¤¤¤

 

¤¤¤ Entrees de registre: 0 ¤¤¤

 

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

 

¤¤¤ Driver: [CHARGE] ¤¤¤

SSDT[358] : NtWriteVirtualMemory @ 0x8264892D -> HOOKED (Unknown @ 0x8D3B83B2)

SSDT[334] : NtTerminateProcess @ 0x8262C143 -> HOOKED (Unknown @ 0x8D3B83B7)

SSDT[332] : NtSystemDebugControl @ 0x82633EC1 -> HOOKED (Unknown @ 0x8D3B842A)

SSDT[317] : NtSetSystemInformation @ 0x82621EEB -> HOOKED (Unknown @ 0x8D3B83F8)

SSDT[314] : NtSetSecurityObject @ 0x825FB038 -> HOOKED (Unknown @ 0x8D3B8425)

SSDT[289] : NtSetContextThread @ 0x826CD883 -> HOOKED (Unknown @ 0x8D3B841B)

SSDT[276] : NtRequestWaitReplyPort @ 0x8267EF90 -> HOOKED (Unknown @ 0x8D3B8420)

SSDT[197] : NtOpenSection @ 0x8264C66D -> HOOKED (Unknown @ 0x8D3B83E9)

SSDT[165] : NtLoadDriver @ 0x825A6DEE -> HOOKED (Unknown @ 0x8D3B83F3)

SSDT[77] : NtCreateSymbolicLinkObject @ 0x825FB35A -> HOOKED (Unknown @ 0x8D3B83EE)

SSDT[75] : NtCreateSection @ 0x8266CDE5 -> HOOKED (Unknown @ 0x8D3B8416)

S_SSDT[576] : Unknown -> HOOKED (Unknown @ 0x8D3B8443)

S_SSDT[573] : Unknown -> HOOKED (Unknown @ 0x8D3B843E)

 

¤¤¤ Infection : ¤¤¤

 

¤¤¤ Fichier HOSTS: ¤¤¤

127.0.0.1 localhost

::1 localhost

 

 

¤¤¤ MBR Verif: ¤¤¤

 

+++++ PhysicalDrive0: WDC WD64 00AAKS-22A7B SCSI Disk Device +++++

--- User ---

[MBR] 536591a27e2c2eb87e024e3c73582ca3

[bSP] 5d7387a6f8209d287e33e25452c4b8b6 : Windows Vista MBR Code

Partition table:

0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 2048 | Size: 13312 Mo

1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 27265024 | Size: 597166 Mo

User = LL1 ... OK!

Error reading LL2 MBR!

 

+++++ PhysicalDrive1: SanDisk Cruzer Blade USB Device +++++

--- User ---

[MBR] 1f3290177adcaa2f8d45e3d5add26133

[bSP] df4f83c1f72e36823a12b0dfc7617313 : MBR Code unknown

Partition table:

0 - [XXXXXX] FAT32 (0x0b) [VISIBLE] Offset (sectors): 32 | Size: 3826 Mo

User = LL1 ... OK!

Error reading LL2 MBR!

 

Termine : << RKreport[4].txt >>

RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt ; RKreport[4].txt