enzol91 Posted February 13, 2014 ID:790701 Share Posted February 13, 2014 Can anyone helps me with this problem?attach.txtdds.txt Link to post Share on other sites More sharing options...
MrCharlie Posted February 13, 2014 ID:790708 Share Posted February 13, 2014 Welcome to the forum. What seems to be the problem???Please download and run RogueKiller 32 Bit to your desktop.RogueKiller 64 Bit <---use this one for 64 bit systemsWhich system am I using?Quit all running programs.For Windows XP, double-click to start.For Vista or Windows 7-8, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.Click Scan to scan the system.When the scan completes > Close out the program > Don't Fix anything!Don't run any other options, they're not all bad!!!!!!!Post back the report which should be located on your desktop.(please don't put logs in code or quotes and use the default font)General Forum P2P/Piracy Warning:1. If you're using Peer 2 Peer software such uTorrent, BitTorrent or similar you must either fully uninstall it or completely disable it from running while being assisted here.Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.2. If you have illegal/cracked software, cracks, keygens, custom (Adobe) host file, etc. on the system, please remove or uninstall them now and read the policy on Piracy.Failure to remove such software will result in your topic being closed and no further assistance being provided.MrCNote:Please read all of my instructions completely including these.Make sure system restore is turned on and running, please create a new restore pointMake sure you're subscribed to this topic: Click on the Follow This Topic Button (at the top right of this page), make sure that the Receive notification box is checked and that it is set to InstantlyRemoving malware can be unpredictable...unlikely but things can go very wrong! Backup any files that cannot be replaced. You can copy them to a CD/DVD, external drive or a pen drive<+>Please don't run any other scans, download, install or uninstall any programs while I'm working with you.<+>The removal of malware isn't instantaneous, please be patient.<+>When we are done, I'll give to instructions on how to cleanup all the tools and logs<+>Please stick with me until I give you the "all clear" and Please don't waste my time by leaving before that.------->Your topic will be closed if you haven't replied within 3 days!<--------(If I don't respond within 24 hours, please send me a PM) Link to post Share on other sites More sharing options...
enzol91 Posted February 13, 2014 Author ID:790733 Share Posted February 13, 2014 RogueKiller V8.8.7 [Feb 11 2014] by Tigzymail : tigzyRK<at>gmail<dot>comFeedback : http://forum.adlice.comWebsite : http://www.adlice.com/softwares/roguekiller/Blog : http://www.adlice.com Operating System : Windows XP (5.1.2600 Service Pack 3) 32 bits versionStarted in : Normal modeUser : elucatelli [Admin rights]Mode : Scan -- Date : 02/13/2014 17:32:13| ARK || FAK || MBR | ¤¤¤ Bad processes : 1 ¤¤¤[sUSP PATH][DLL] rundll32.exe -- C:\Documents and Settings\elucatelli.PC34\Datos de programa\newnext.me\nengine.dll [-] -> rundll32.exe KILLED [TermProc] ¤¤¤ Registry Entries : 3 ¤¤¤[RUN][sUSP PATH] HKCU\[...]\Run : NextLive (C:\WINDOWS\system32\rundll32.exe "C:\Documents and Settings\elucatelli.PC34\Datos de programa\newnext.me\nengine.dll",EntryPoint -m l [7][-][x]) -> FOUND[RUN][sUSP PATH] HKUS\S-1-5-21-1614895754-926492609-839522115-1003\[...]\Run : NextLive (C:\WINDOWS\system32\rundll32.exe "C:\Documents and Settings\elucatelli.PC34\Datos de programa\newnext.me\nengine.dll",EntryPoint -m l [7][-][x]) -> FOUND[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND ¤¤¤ Scheduled tasks : 0 ¤¤¤ ¤¤¤ Startup Entries : 0 ¤¤¤ ¤¤¤ Web browsers : 0 ¤¤¤ ¤¤¤ Browser Addons : 0 ¤¤¤ ¤¤¤ Particular Files / Folders: ¤¤¤ ¤¤¤ Driver : [LOADED] ¤¤¤ ¤¤¤ External Hives: ¤¤¤ ¤¤¤ Infection : ¤¤¤ ¤¤¤ HOSTS File: ¤¤¤--> %SystemRoot%\System32\drivers\etc\hosts 127.0.0.1 localhost127.0.0.1 adobeereg.com127.0.0.1 www.adobeereg.com127.0.0.1 activate.adobe.com127.0.0.1 activate-sea.adobe.com127.0.0.1 activate-sjc0.adobe.com127.0.0.1 wwis-dubc1-vip60.adobe.com ¤¤¤ MBR Check: ¤¤¤ +++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) WDC WD50 00AAKX-22ERM SCSI Disk Device +++++--- User ---[MBR] 74791e4bc8f96c32dcf229f2b9eaf08e[bSP] 39a28665bd6ec694eaa28c3c6f4f0197 : Windows XP MBR CodePartition table:0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 476937 MoUser = LL1 ... OK!Error reading LL2 MBR! ([0x1] Función incorrecta. ) +++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ USB) WD Elements 1023 USB Device +++++--- User ---[MBR] 21fc82f4b7efe97c36727e6a35cf9d26[bSP] 876ddeddcf12abcaca42540c77623854 : Windows XP MBR CodePartition table:0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 476937 MoUser = LL1 ... OK!Error reading LL2 MBR! ([0x32] Solicitud no compatible. ) Finished : << RKreport[0]_S_02132014_173213.txt >> Link to post Share on other sites More sharing options...
MrCharlie Posted February 13, 2014 ID:790738 Share Posted February 13, 2014 You have a cracked version of Adobe Photoshop CS4 on the system.Did you read the warning in my first reply to you??????General Forum P2P/Piracy Warning:1. If you're using Peer 2 Peer software such uTorrent, BitTorrent or similar you must either fully uninstall it or completely disable it from running while being assisted here.Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.2. If you have illegal/cracked software, cracks, keygens, custom (Adobe) host file, etc. on the system, please remove or uninstall them now and read the policy on Piracy.Failure to remove such software will result in your topic being closed and no further assistance being provided. Link to post Share on other sites More sharing options...
enzol91 Posted February 13, 2014 Author ID:790742 Share Posted February 13, 2014 Sorry, my english is bad. This PC is one of the computers that we use to work. Link to post Share on other sites More sharing options...
MrCharlie Posted February 13, 2014 ID:790771 Share Posted February 13, 2014 Well you tell them to clean take all of the cracked software and cracks off the system. When that's done, come back and maybe we can help you. MrC Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted February 19, 2014 Root Admin ID:793486 Share Posted February 19, 2014 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts