RogueKiller V7.3.2 [03/20/2012] by Tigzy mail: tigzyRK<at>gmail<dot>com Feedback: http://www.geekstogo.com/forum/files/file/413-roguekiller/ Blog: http://tigzyrk.blogspot.com Operating System: Windows XP (5.1.

2600 Service Pack 3) 32 bits version Started in : Normal mode User: luis.souza [Restricted rights] Mode: Remove -- Date: 04/05/2012 16:54:17 Bad processes: 1 [RESIDUE] firefox.exe -- C:\Documents and Settings\luis.souza\Configuraes locais\D ados de aplicativos\Mozilla Firefox\firefox.exe -> KILLED [TermProc] Registry Entries: 64 [] HKCR\[...]CLSID : () -> ACCESS DENIED [] HKLM\[...]\Run : () -> ACCESS DENIED [] HKLM\[...]\RunOnce : () -> ACCESS DENIED [] HKLM\[...]\RunOnceEx : () -> ACCESS DENIED [] HKLM\[...]\Winlogon : () -> ACCESS DENIED [] HKLM\[...]\Windows : () -> ACCESS DENIED [] HKLM\[...]\services : () -> ACCESS DENIED [] HKLM\[...]\services : () -> ACCESS DENIED [] HKLM\[...]\Root : () -> ACCESS DENIED [] HKLM\[...]\Root : () -> ACCESS DENIED [SUSP PATH] videopadSevenDays.job @ : C:\Documents and Settings\luis.souza\Dados -> ERROR [SUSP PATH] photostageShakeIcon.job @ : C:\Documents and Settings\luis.souza\Dad os -> ERROR [SUSP PATH] photostageSevenDays.job @ : C:\Documents and Settings\luis.souza\Dad os -> ERROR [SUSP PATH] mixpadShakeIcon.job @ : C:\Documents and Settings\luis.souza\Dados > ERROR [SUSP PATH] mixpadSevenDays.job @ : C:\Documents and Settings\luis.souza\Dados > ERROR [SUSP PATH] wavepadShakeIcon.job @ : C:\Documents and Settings\luis.souza\Dados -> ERROR [SUSP PATH] wavepadSevenDays.job @ : C:\Documents and Settings\luis.souza\Dados -> ERROR [SUSP PATH] videopadShakeIcon.job @ : C:\Documents and Settings\luis.souza\Dados -> ERROR [PROXY IE] HKCU\[...]\Internet Settings : ProxyEnable (1) -> NOT REMOVED, USE PR OXYFIX [PROXY IE] HKCU\[...]\Internet Settings : ProxyServer (192.168.114.1:80) -> NOT REMOVED, USE PROXYFIX [] HKLM\[...]\Internet Settings : () -> ACCESS DENIED [PROXY FF] j6dybt4n.default\ 192.168.114.1:80 -> NOT REMOVED, USE PROXYFIX [] HKLM\[...]\Parameters : () -> ACCESS DENIED [] HKLM\[...]\Parameters : () -> ACCESS DENIED [] HKLM\[...]\Image File Execution Options : () -> ACCESS DENIED [] HKCU\[...]\System : () -> ACCESS DENIED [] HKCU\[...]\System : () -> ACCESS DENIED [] HKCU\[...]\System : () -> ACCESS DENIED [] HKCU\[...]\Explorer : () -> ACCESS DENIED [] HKCU\[...]\Explorer : () -> ACCESS DENIED [] HKLM\[...]\System : () -> ACCESS DENIED [] HKLM\[...]\System : () -> ACCESS DENIED [] HKLM\[...]\System : () -> ACCESS DENIED [] HKLM\[...]\Explorer : () -> ACCESS DENIED [] HKLM\[...]\Explorer : () -> ACCESS DENIED

[] [] [] [] [] [] [] [] [] [] [] [] [] [] [] [] [] [] [] [] [] [] [] [] [] [] [] [] []

HKCU\[...]\Explorer : () -> ACCESS DENIED HKLM\[...]\SystemRestore : () -> ACCESS DENIED HKLM\[...]\System : () -> ACCESS DENIED HKLM\[...]\System : () -> ACCESS DENIED HKLM\[...]\System : () -> ACCESS DENIED HKLM\[...]\Security Center : () -> ACCESS DENIED HKLM\[...]\Security Center : () -> ACCESS DENIED HKLM\[...]\Security Center : () -> ACCESS DENIED HKLM\[...]\ClassicStartMenu : () -> ACCESS DENIED HKLM\[...]\NewStartPanel : () -> ACCESS DENIED HKLM\[...]\ClassicStartMenu : () -> ACCESS DENIED HKLM\[...]\NewStartPanel : () -> ACCESS DENIED HKLM\[...]\ClassicStartMenu : () -> ACCESS DENIED HKLM\[...]\NewStartPanel : () -> ACCESS DENIED HKLM\[...]\command : () -> ACCESS DENIED HKCR\[...]\command : () -> ACCESS DENIED HKCR\[...].exe : () -> ACCESS DENIED HKLM\[...]\command : () -> ACCESS DENIED HKLM\[...]\command : () -> ACCESS DENIED HKLM\[...]\command : () -> ACCESS DENIED HKCR\[...]\command : () -> ACCESS DENIED HKCR\[...]\InprocServer32 : () -> ACCESS DENIED HKLM\[...]\Windows : () -> ACCESS DENIED HKLM\[...]\ShellServiceObjectDelayLoad : () -> ACCESS DENIED HKLM\[...]\SharedTaskScheduler : () -> ACCESS DENIED HKLM\[...]\Browser Helper Objects : () -> ACCESS DENIED HKLM\[...]\Run : () -> ACCESS DENIED HKLM\[...]\services : () -> ACCESS DENIED HKLM\[...]\services : () -> ACCESS DENIED

Particular Files / Folders: Driver: [NOT LOADED] Infection : HOSTS File: 127.0.0.1 localhost MBR Check: Finished : << RKreport[3].txt >> RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt