Rkill 2.6.5 by Lawrence Abrams (Grinler) http://www.bleepingcomputer.com/ Copyright 2008-2014 BleepingComputer.

com More Information about Rkill can be found at this link: http://www.bleepingcomputer.com/forums/topic308364.html Program started at: 02/10/2014 10:41:51 AM in x86 mode. Windows Version: Microsoft Windows XP Service Pack 3 Checking for Windows services to stop: * No malware services found to stop. Checking for processes to terminate: * C:\WINDOWS\system32\dmwu.exe (PID: 504) [Sweetpacks-Adware] 1 proccess terminated! Checking Registry for malware related settings: * No issues found in the Registry. Resetting .EXE, .COM, & .BAT associations in the Windows Registry. Performing miscellaneous checks: * Reparse Point/Junctions Found (Most likely legitimate)! * C:\WINDOWS\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4 .0.0.0__b03f5f7f11d50a3a => C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f 5f7f11d50a3a_4.0.0.0_x-ww_29b51492 [Dir] Checking Windows Service Integrity: * No issues found. Searching for Missing Digital Signatures: * C:\WINDOWS\System32\drivers\mqac.sys : 91.776 : 06/22/2009 05:48 AM : eee50bf 24caeedb515a8f3b22756d3bb [NoSig] +-> C:\WINDOWS\$hf_mig$\KB971032\SP2QFE\mqac.sys : 91.776 : 06/22/2009 05:30 AM : 9229e191fe206628be17d1e67a5faed9 [Pos Repl] +-> C:\WINDOWS\ServicePackFiles\i386\mqac.sys : 92.544 : 04/13/2008 12:39 AM : 70c14f5cca5cf73f8a645c73a01d8726 [Pos Repl] +-> C:\WINDOWS\system32\dllcache\mqac.sys : 91.776 : 06/22/2009 05:48 AM : eee5 0bf24caeedb515a8f3b22756d3bb [Pos Repl] Checking HOSTS File: * HOSTS file entries found: 127.0.0.1 127.0.0.1 localhost secure.tune-up.com

0.0.0.0 mpa.one.microsoft.com genuine.microsoft.com sls.microsoft.com Program finished at: 02/10/2014 10:50:27 AM Execution time: 0 hours(s), 8 minute(s), and 35 seconds(s)