Jump to content

Found Possible PUM


Vala

Recommended Posts

I run Malwarebytes and RogueKiller occasionally to check out my system.  RogueKiller picked up a possible PUM, Malwarebyes does not detect it.  Not sure if it's an issue or not, I have had no symptoms that I noticed.

 

I've attached my FRST logs.

 

Here is the RogueKiller Report text:

 

RogueKiller V10.10.9.0 (x64) [Oct  5 2015] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/software/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Tom [Administrator]
Started from : C:\Users\Tom\Desktop\RogueKillerX64.exe
Mode : Scan -- Date : 10/07/2015 21:17:26

¤¤¤ Processes : 0 ¤¤¤

¤¤¤ Registry : 2 ¤¤¤
[PUM.SearchPage] (X64) HKEY_USERS\S-1-5-21-2169158387-592479802-290800130-1000\Software\Microsoft\Internet Explorer\Main | Search Bar : Preserve  -> Found
[PUM.SearchPage] (X86) HKEY_USERS\S-1-5-21-2169158387-592479802-290800130-1000\Software\Microsoft\Internet Explorer\Main | Search Bar : Preserve  -> Found

¤¤¤ Tasks : 0 ¤¤¤

¤¤¤ Files : 0 ¤¤¤

¤¤¤ Hosts File : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: ST1000DM 005 HD103SJ SCSI Disk Device +++++
--- User ---
[MBR] 7d2cce83dd184b78ac56c6931440f95a
[bSP] 37931dd1dc2c64c6362cd8923421afbb : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 953867 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: Intel Raid 1 Volume SCSI Disk Device +++++
--- User ---
[MBR] 4355c8fddee6f248341edc49006ea593
[bSP] 5b2a9398d9c11d7428fefb412ba02283 : Windows XP|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 63 | Size: 953867 MB [Windows XP Bootstrap | Windows XP Bootloader]
User = LL1 ... OK
Error reading LL2 MBR! ([1] Incorrect function. )

 

Addition.txt

FRST.txt

Link to post
Share on other sites

Thanks for the reply TwinHeadedEagle!

 

Nothing unusual.  I've occasionally ended up on a website which puts one of those "are you sure you want to close this page" popups, I always kill IE through Task Manager if this happens.  That's the only thing I can think of, and don't consider it "unusual" really.

 

Since RogueKiller saw it as a "potential" issue I thought it was worth asking about!

 

Also, love the avatar.

Link to post
Share on other sites

  • 2 weeks later...
  • Root Admin

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.