RootKit Revealer

Similar Questions

• 'Rootkit revealer? for windows7

  Is there a 'Rootkit revealer' for windows7?

  Hello

  Rootkit Revealer is an advanced rootkit detection utility. It works on Windows XP (32-bit) and Windows Server 2003 (32-bit.

  For more information, see this link:

  http://TechNet.Microsoft.com/en-us/Sysinternals/bb897445

  It will be useful.

• Rootkit Revealer does nothing

  I tried running Rootkit Revealer - I enter the Admin password when asked, but nothing happens on my machine. I also tried 'Run as administrator' but nothing happened.

  Makes me a bit suspicious that I was hacked and diagnostic tools are prevented from running. What is normal under Windows 7 (the last time I fell it was XP)?

  Any ideas/suggestions, anyone?

  I tried running Rootkit Revealer - I enter the Admin password when asked, but nothing happens on my machine. I also tried 'Run as administrator' but nothing happened.

  Makes me a bit suspicious that I was hacked and diagnostic tools are prevented from running. What is normal under Windows 7 (the last time I fell it was XP)?

  Any ideas/suggestions, anyone?

  This tool is obsolete, and it was initially designed for widows XP and server 2003. If you are interested, you can see the latest version of the software to remove Rootkit.

  As

  http://USA.Kaspersky.com/downloads/TDSSKiller http://www.Malwarebytes.org/AntiRootkit/
  http://www.McAfee.com/us/downloads/free-tools/rootkitremover.aspx

  http://www.pandasecurity.com/USA/enterprise/solutions/AntiRootkit/ http://Downloadcenter.trendmicro.com/index.php?regs=NABU&CLK=latest&clkval=355&lang_loc=1 http://public.avast.com/~Gmerek/aswMBR.htm

  http://www.Microsoft.com/security/scanner/en-us/default.aspx

• Alureon Rootkit bar me bad. HELP Please!

  Hello dear users of Windows. This is my first post here, because the problem is so serious that even I could not remove it (or I don't know I did).

  Problem: 

  I was infected by the famous Alureon rootkit.

  Reason:

  I think it has been updated for Windows. I updated Windows 2 months ago, and after it had to restart windows. I restarted windows and it loads perfectly, but when I click on Internet Explorer to make sure that no new updates, my computer was attacked by at least 10-13 virus/worms. My AV-> Avast! Internet Security is crazy, it was like: a thread has been detected,was detected a thread, a thread has been detected, a thread has been detected so I did not wait for him to remove them I was very shocked so I emidietly restart the computer. It's my BIGGEST mistake. After reboot avast cleaned a few worms in the temporary folders, but these verses have been just a small fry. The real deal is that Alureon that injected somewhere

  Symptoms: 

  -L' massive attack on Internet Explorer.

  -Blue screens of death at startup pointing to important system files, windows will load after reboot of the 5th.

  -Sometimes I get Restrictions folders-> your security current settings do not allow you... blah blah (change of the configuration)

  What I used to optimize the pc and remove the errors & virus (Optimizors):

  -Win XP Optimizer: 4 times 

  -Error Repair Professional: 4 times

  -Speed UP My PC: 4 times

  -PC Health Advisor: 4 times

  -Driver Scanner: 4 times

  -CCleaner: 4 times

  -Registry Mechanic: 4 times

  -Advanced System Optimizer: 4 times

  -Your Uninstaller: 4 times

  -HiJackThis: 2 times

  -Malicious Microsoft Software Removal Tool: 2 times

  - Avast! Internet Security: 1 all the discs, normal, max and 1 System Boot Scan 

  I tried stuff even more (they are my usual optimizers)... nothing

  I want to add:

  It is a lot worse then it sounds at first. He even tried some of my ACC, even now, all that remains are the blue screens at startup. Avast! Security is one of the best AV out there it scans everything that happens and I have no notification of rootkits since it happened. I know he's hiding it's self, but I can't even see it running in the Task Manager... I guess it runs only until windows loads... PLEASE HELP ME!

  P.S.:

  -Formatting the drives, reinstall Windows, updated for Windows Vista/7 or Linux or any other operating system are not an option.

  @joelj1964 - Yah... Thanks for nothing...

  @ GTS - NJ - UM, um, that I realized, he could not be Alureon, BUT DID I had put it to day in-depth Windows and Yes, I did managed to remove it.

  Here's how I did it:

  I turned on Avast! Shields of Internet Security to the MAX

  I Ran Kaspersky Lab tool for rootkits, it finds only c:\windows\system32\drivers\sptd.sys locked

  Other rootkit removal tools I ran were Buster of Sopshos Anti-Rootkit, Gmer, Rootkit, Rootkit Revealer.

  They found a large number of infected files sys I removed and restered with those in SafeMode (sfc/scannow) clean (I have not found in a big box store so the stuff above... I am my only computer scientist, sorry = /)

  A ran my default optimizers and updated many drivers restore those infected

  Results: System running faster, faster start-up, there wasn't No 10/05/20 system restarts before loading windows-online WINDOWS 10 LATEST UPDATES ACT AS THEY have not been INSTALLED.

  My Question: When the windows updates will be safe for users of Windows XP new :((

  I thank very you much for the replies!

• Rootkit found!

  What is c?

  I'm running Windows 7 Ultimate, my guarded system slows down. I have Norton Internet Security 2010 is installed and nothing showed up. I then ran Sysinternals Rootkit Revealer and it finds the following:

  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN 22/04/2009 03:14 0 incompatible security bytes.
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\CertMapping 22/04/2009 03:14 0 incompatible security bytes.
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Client 22/04/2009 03:14 0 incompatible security bytes.
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Listener 22/04/2009 03:14 0 incompatible security bytes.
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin 22/04/2009 03:14 0 incompatible security bytes.
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Service 22/04/2009 03:14 0 incompatible security bytes.
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\WinRS 22/04/2009 03:14 0 incompatible security bytes.
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\WinRS\CustomRemoteShell 22/04/2009 03:14 0 incompatible security bytes.
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\Perflib\009 22/04/2009 12:59 AM 0 bytes security incompatible.
  HKLM\SOFTWARE\Norton\ {0C55C096-0F1D-4F28-AAA2-85EF591126E7} \NUM\LastCompletedRun 2010-01-05 10:20 8 data bytes that are incompatible between Windows API and raw hive data.

  My question is: how to get it there?  How can I get rid of him?

  Also when my rootkit revealer is run, it does not work on my desk: here is the message I received:

  "A program on this computer tries to display a message."

  It gives me two options:

  Display the message
     
  Ask me later

  When I view the message, it goes from the screens and shows me the progress of the rootkit revealer

  A SOLUTION WOULD BE GREAT!  ANY HELP IS REALLY APPRECIATED

  Thank you

  Karim Mifflin
  A +, MCP

  I get exactly the same results on my computer, Karim.  I think that Rootkit Revealer is giving false positives and none of us has a rootkit.  You can find more information in the Forums of Windows Sysinternals .

  Owner, Boulder computer Maven
  Most Microsoft Valuable Professional

• Download junk in the background every time that I run Firefox (and I do not have installed AVG)

  I am aware of this: https://support.mozilla.org/en-US/questions/997796 - but I haven't installed AVG. Every time I run Firefox, even in an empty tab page, a few seconds later my bandwidth starts used. I got Cucusoft Net installed guard and TCPEye, and both show that Firefox is connected to the internet and download - even if I have not loaded any page, there's always on 'new tab '...

  I too FDM, but this happens with or without its execution (ditto with my XAMMP localhost installation.)

  I have disabled all add-ons, and run Firefox in safe mode, still the same thing happens: when I start a new tab, my bandwidth is murdered (parenthesis: my normal surfing via Telkom Mobile internet is sloooow between 60 Kbps and 250 Kbps if I'm lucky, but the download of this background is off-the-charts more than 1 200 Kbps and a few seconds) (, I lost more than 20 MB of mobile internet really really expensive, I just can't afford to waste, that's why I have all these monitors TCP and network graphics running all the time.)

  I also ran a Kaspersky rootkit revealer and reported no threat. I have ZoneAlarm antivirus and firewall that does report also no infection (ditto ClamWin)

  I found the problem... it's Firefox.

  How bloody rude of Firefox... I put my browsers NOT auto-Update (because my bandwidth is so bloody expensive) but you choose to override my settings and auto-update anyway... WITHOUT MY CONSENT.

  How bloody rude.

  There's a reason why we put 'no' to the updates, and I expect that respect you this shit.

• How can I get rid of the Starburn browser hijacker

  Amazing thing, I saw this on a forum legitimate anywhere, I can't find answers unless I want to pay for a tool of suppression of sites that I don't trust. My computer is infected with "Starburn" pirate of browser. No Antivirus tool detects and removes. Tried Malware Bytes, Ad Aware and AVG Antivirus. I can't find anything in the modules or extensions indicating that it's there at all, but my computer is 50% slower and my CPU usage is shockingly high even with a single open tab. I welcomed the upload of my information the module below.

  I checked the Task Manager and, of course, normally have several windows open. There are many processes that are running, but when I search the Web for what they are, they all seem to be legitimate. I also used Rootkit Revealer, looking for a couple of registry files that I saw displayed commonly people «SAY» are associated with Starburn, but they do not appear in my registry I see. There is nothing to uninstall in Control Panel, "add and remove. There is no visible ons or extensions relating to this browser hijacker.

  If anyone has ANY help or suggestions please post them. This hijacker affects all browsers. So if I switch to IE or Chrome, it's the same thing, that tells me that this is not a Firefox problem but possible something deeply embedded in the system. Then reset Firefox with its default values (which I did not) almost certainly would not solve the problem. Thanks for your time.

  Giedrius... I can't find the words to thank you for your time and help! Adwcleaner 'DID' detect the hijacker, but unfortunately was not able to remove it. He tried and said it succeeded twice, but the hijacker was extremely sneaky and nasty. While I was waiting on Hitman Pro, I visited your blog you me bound and followed the subject: config steps and it worked. The pirate air may still be in the system somewhere, but is no longer redirects me. And Adwcleaner, accelerated considerably the computer.

  Again, I can't thank you enough. Again, I can use my computer with no problems. I'm not very spiritual, but I always thought that what goes around, comes around... karma, in other words. And I hope that your help is refunded to you a thousand times. I am extremely grateful! Thanks again for your time and your answer to my problem.

• I got the Conficker virus and now I can't get Windows Update to work

  I got the Conficker Virus/worm infected my system, but have now got rid of him (I think).

  I noticed yesterday that Windows Update has just stopped working, it has a red symbol X and said 'windows update cannot currently check updates because the service is not running'. Then, I figured that it could be a virus and tried to download AVG anti-virus, but the virus stopped me to access a website or a program to do with protection against viruses (including all Microsoft sites). Finally, I used a separate laptop and negative to download AVG and some other anti-virus/malware programs and down them mode without failure. I then ran Windows malware removal tool. That seems to have gotten rid of the virus (which has been identified as Conficker), I can now go to any Web site, so it seems that the virus is gone or disabled.

  However I can not even access Windows Update. My guess is the virus disabled some component of it, but how now operate again? Is it possible to re-enable it manually? Or y at - it something that I can download to fix?

  Hello

  Conficker often comes with other malware, so once you think that you're rid of him real problems then begin run through
  They are 100% sure that everything is clear and get it fixed.

  For those who think they might have Conficker:

  You can access Microsoft.com, McAffee.com, Symatec.com? Thinking you have a conficker.

  Check with this site
  http://www.confickerworkinggroup.org/infection_test/cfeyechart.html

  Alert on the Win32/conficker virus
  http://support.Microsoft.com/kb/962007

  Protect yourself from Conficker
  http://www.Microsoft.com/security/worms/Conficker.aspx

  How to remove the worm Downadup Conficker (Uninstall Instructions)
  http://www.bleepingcomputer.com/virus-removal/remove-Downadup-Conficker

  How to manually remove the Conficker worm
  http://www.411-spyware.com/Conficker-worm-removal#how-to-remove

  BDTool to remove
  http://www.bdtools.NET/

  -----------------------------------------------

  Run the removal tool malicious Microsoft, Scan with Malwarebytes and run Prevx to be sure he's gone. (If necessary
  use UnHackMe below).

  Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.

  You should get this tool and its updates via Windows Update - if necessary, you can download it here.

  Download - SAVE - go where go out you there - top - right click RUN AS ADMIN
  (Then run MRT as shown above.)

  Malicious removal tool from Microsoft
  http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

  --------------
  Run these:

  Malwarebytes - a scanner at the request - update on the updates tab and run whenever you think malware.
  http://www.Malwarebytes.org/

  also install Prevx to be sure that it is all gone.

  Prevx - Home - free - small, fast, exceptional CLOUD protection, working with other security programs. It comes
  a scan only, VERY EFFICIENT, if it finds something to come back here or use Google to see how to remove.
  http://www.prevx.com/

  Choice of PCmag editor - Prevx-
  http://www.PCMag.com/Article2/0, 2817,2346862,00.asp

  --------------------------------------------

  Here are some free scanners online help if needed (skip if not):

  http://www.eset.com/onlinescan/

  http://www.Kaspersky.com/virusscanner

  Other tests free online
  http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1

  --------------------------------------------

  Also do to the General corruption of cleaning and repair/replace damaged/missing system files.

  Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup

  Start - type this in the search box-> find COMMAND at the top and RIGHT CLICK – RUN AS ADMIN

  Enter this at the command prompt - sfc/scannow

  How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
  generates in Windows Vista cbs.log
  http://support.Microsoft.com/kb/928228

  Run checkdisk - schedule it to run at the next startup, then apply OK then restart your way.

  How to run the check disk at startup in Vista
  http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html

  -------------------------------------------------

  Run Malwarebytes when you can.

  IE - Tools - Internet Options - Advanced - tab click on restore, and then click Reset - apply / OK

  IE - Tools - Internet Options - Security - reset all Zones by default level - apply / OK

  Close IE

  IE - tools - manage Addons (for sure disable SSV2 if it is there, it is no longer necessary but Java always install
  "(and it causes problems - you never update Java to go back in and turn it off again)." Search for other possible problems.

  Windows Defender - tools - software explore - look for problems with programs that do not look right. Permit
  are usually OK and "unauthorized" are not always bad. If in doubt about a program to ask about it here.

  Could be that a BHO - BHOremover - free - standalone program, needs no installation, download and run - not all
  are bad, but some can cause your question. (Toolbars are BHO)
  http://securityxploded.com/bhoremover.php

  Startup programs
  http://www.Vistax64.com/tutorials/79612-startup-programs-enable-disable.html

  Don't forget to do:

  Logon as administrator

  Start - type in the search box-> COMMAND - find on the list above - CLICK RIGHT - RUN AS ADMIN

  Enter each of these one at a time and press ENTER after each

  ipconfig/flushdns

  nbtstat-r

  nbtstat - RR

  netsh int Reinitialis

  netsh int ip reset

  netsh winsock reset

  Reset
  ------------------------------------------------------

  Here are a few rootkits if it were a question:

  SpyDLL Remover - free
  http://securityxploded.com/spydllremover.php

  Advanced Windows Service Manager
  http://securityxploded.com/winservicemanager.php

  Run the Rootkit Revealer - free
  http://TechNet.Microsoft.com/en-us/Sysinternals/bb897445.aspx

  UnHackme - trial 5.5 or later version
  http://www.Greatis.com/UnHackMe/

  This tells you how to use UnHackme and has a link to the version 2.5 - use in good standing with
  the current version available as above is 5.5 or later
  http://safecomputing.umn.edu/guides/scan_unhackme.html

  IceSword - free
  http://www.AntiRootkit.com/software/IceSword.htm
  Instructions and pictorial
  http://securityxploded.com/IceSword.php
  Tutorial for use of IceSword
  http://translate.Google.com/translate?hl=en&SL=zh-CN&u=http://soft.zol.com.CN/2004/0803/145163.shtml&prev=/search%3Fq%3Dicesword%26hl%3Den%26lr%3D

  Revo Uninstaller - free
  http://www.revouninstaller.com/

  I hope this helps.

  Rob - bicycle - Mark Twain said it is good.

• Unable to connect to the Web sites security and microsoft, but internet is not working properly

  Can anyone help?
  Now, this is getting very frustrating.
  I can connect to the internet and browse most Web sites. My email works fine but I can't connect to websites www.microsoft , Norton is 'unable to connect to the Live Update server, check the internet connection' and my media center can't find my internet connection.
  What is going on?
  I have a subscription to Norton who can't find any problems. I also downloaded onecare and trojan remover, returning with a clean report.
  Please help before I go out what remains of my hair.
  What about Frank

  Hello

  You can access Microsoft.com, McAffee.com, Symatec.com? Thinking you have a conficker.

  Check with this site
  http://www.confickerworkinggroup.org/infection_test/cfeyechart.html

  Alert on the Win32/conficker virus
  http://support.Microsoft.com/kb/962007

  Protect yourself from Conficker
  http://www.Microsoft.com/security/worms/Conficker.aspx

  How to remove the worm Downadup Conficker (Uninstall Instructions)
  http://www.bleepingcomputer.com/virus-removal/remove-Downadup-Conficker

  How to manually remove the Conficker worm
  http://www.411-spyware.com/Conficker-worm-removal#how-to-remove

  BDTool to remove
  http://www.bdtools.NET/

  -----------------------------------------------

  Run the malicious Microsoft removal tool, scan with Malwarebytes, Prevx to be sure you know all the
  malware involved and if necessary use UnHackMe.

  Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.

  You should get this tool and its updates via Windows Update - if necessary, you can download it here.

  Download - SAVE - go where go out you there - top - right click RUN AS ADMIN
  (Then run MRT as shown above.)

  Malicious removal tool from Microsoft
  http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

  Malwarebytes - a scanner at the request - update on the updates tab and run whenever you think malware.
  http://www.Malwarebytes.org/

  Here are some free online scanners to help the

  http://www.eset.com/onlinescan/

  http://www.Kaspersky.com/virusscanner

  Other tests free online
  http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1

  also install Prevx to be sure that it is all gone.

  Prevx - Home - free - small, fast, exceptional CLOUD protection, working with other security programs. It comes
  a scan only, VERY EFFICIENT, if it finds something to come back here or use Google to see how to remove.
  http://www.prevx.com/

  Choice of PCmag editor - Prevx-
  http://www.PCMag.com/Article2/0, 2817,2346862,00.asp

  --------------------------------------------

  Also do to the General corruption of cleaning.

  Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup

  Start - type this in the search box-> find COMMAND at the top and RIGHT CLICK – RUN AS ADMIN

  Enter this at the command prompt - sfc/scannow

  How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
  generates in Windows Vista cbs.log
  http://support.Microsoft.com/kb/928228

  Run checkdisk - schedule it to run at the next startup, then apply OK then restart your way.

  How to run the check disk at startup in Vista
  http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html

  -------------------------------------------------

  Run Malwarebytes when you can.

  IE - Tools - Internet Options - Advanced - tab click on restore, and then click Reset - apply / OK

  IE - Tools - Internet Options - Security - reset all Zones by default level - apply / OK

  Close IE

  IE - tools - manage Addons (for sure disable SSV2 if it is there, it is no longer necessary but Java always install
  "(and it causes problems - you never update Java to go back in and turn it off again)." Search for other possible problems.

  Windows Defender - tools - software explore - look for problems with programs that do not look right. Permit
  are usually OK and "unauthorized" are not always bad. If in doubt about a program to ask about it here.

  Could be that a BHO - BHOremover - free - standalone program, needs no installation, download and run - not all
  are bad, but some can cause your question. (Toolbars are BHO)
  http://securityxploded.com/bhoremover.php

  Startup programs
  http://www.Vistax64.com/tutorials/79612-startup-programs-enable-disable.html

  Don't forget to do:

  Logon as administrator

  Start - type in the search box-> COMMAND - find on the list above - CLICK RIGHT - RUN AS ADMIN

  Enter each of these one at a time and press ENTER after each

  ipconfig/flushdns

  nbtstat-r

  nbtstat - RR

  netsh int Reinitialis

  netsh int ip reset

  netsh winsock reset

  Reset
  ------------------------------------------------------

  Here are a few rootkits if it were a question:

  SpyDLL Remover - free
  http://securityxploded.com/spydllremover.php

  Advanced Windows Service Manager
  http://securityxploded.com/winservicemanager.php

  Run the Rootkit Revealer - free
  http://TechNet.Microsoft.com/en-us/Sysinternals/bb897445.aspx

  UnHackme - trial
  http://www.Greatis.com/UnHackMe/

  This shows how to use UnHackme and includes a link to version 2.5 – use it as a guideline and current
  available as version above is 5.5
  http://safecomputing.umn.edu/guides/scan_unhackme.html

  IceSword - free
  http://www.AntiRootkit.com/software/IceSword.htm
  Instructions and pictorial
  http://securityxploded.com/IceSword.php
  Tutorial for use of IceSword
  http://translate.Google.com/translate?hl=en&SL=zh-CN&u=http://soft.zol.com.CN/2004/0803/145163.shtml&prev=/search%3Fq%3Dicesword%26hl%3Den%26lr%3D

  Revo Uninstaller - free
  http://www.revouninstaller.com/

  I hope this helps.

  Rob - bicycle - Mark Twain said it is good.

• Windows Vista computer HP 2007 crashes after startup

  It comes up with a dll file problem, icipuduy.dll, but will go in all areas, excluding the internet and when I try to do something it will freeze.  He also tried in safe mode and same problem.  I got a trojen virus and thought I had fixed the problems with Norton, it worked until a week ago.

  THERE ARE MANY WORMS AND TROJANS CLASSIFIED AS "ROOTKITS," THAT OPERATE UNDER THE WINDOWS SUBSYSTEM, WHICH MEANS THAT THEY ARE INVISIBLE TO ANY WHAT WORKS (ANTI-ANTI-VIRUS-WISE) TO THE INSIDE OF WINDOWS ITSELF.  Try ROOTKIT REVEALER available as a stand-alone installer in the technet under security tools and utilities. "THE BEST THING TO DO IN THIS WORLD IS A WRONG ANSWER! "I"DON'T"WINDOWS...". »

• Virus, Malware, Spyware, etc. prgrams withdrawal will not update google redirects me to random Web sites; Windows update cannot find the updates and will not install ect.

  These problems have been going on a month now and I can't get rid of them

  Logfile of IObit HijackScan v1.0.0.0
  Scan saved at 23:1:41, 2009-10-3

  Ongoing process:
  C:\Windows\System32\smss.exe
  C:\Windows\system32\csrss.exe
  C:\Windows\system32\wininit.exe
  C:\Windows\system32\csrss.exe
  C:\Windows\system32\services.exe
  C:\Windows\system32\lsass.exe
  C:\Windows\system32\lsm.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\nvvsvc.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\System32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\svchost.exe
  C:\Windows\system32\SLsvc.exe
  C:\Windows\system32\winlogon.exe
  C:\Windows\system32\rundll32.exe
  C:\Windows\system32\WLANExt.exe
  C:\Windows\System32\spoolsv.exe
  C:\Windows\system32\svchost.exe
  C:\Program Files\Fichiers Apple Mobile Device Support\bin\AppleMobileDeviceService.exe
  C:\Program Files\Bonjour\mDNSResponder.exe
  C:\Program Files\Fichiers Files\LightScribe\LSSrvc.exe
  c:\Program Files\Microsoft SQL Server\MSSQL10. SQLEXPRESS\MSSQL\Binn\sqlservr.exe
  C:\Program NetworkAccessManager Corporation\nTune\nTuneService.exe
  C:\Windows\system32\PnkBstrA.exe
  C:\Windows\SMINST\BLService.exe
  C:\Program CyberLink Files\RichVideo.exe
  c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
  C:\Program Alcohol Soft 120\StarWind\StarWindServiceAE.exe
  C:\Windows\system32\svchost.exe
  C:\Program Files\Viewpoint\Common\ViewpointService.exe
  C:\Program Files\Common Files\Microsoft Shared Live\WLIDSVC. EXE
  C:\Windows\system32\DRIVERS\xaudio.exe
  C:\Program Files\Common Files\Microsoft Shared Live\WLIDSvcM.exe
  C:\Windows\system32\taskeng.exe
  C:\Windows\system32\Dwm.exe
  C:\Windows\Explorer.exe
  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  C:\Program Files\Java\jre6\bin\jusched.exe
  C:\Program Files\HP\QuickPlay\QPService.exe
  C:\Program Hewlett-Packard HP Quick Launch Buttons\QLBCTRL.exe
  C:\Windows\System32\rundll32.exe
  C:\Program Files\iTunes\iTunesHelper.exe
  C:\Program Hewlett - Packard HP wireless Assistant\HPWAMain.exe
  C:\Program HP Imaging\bin\HpqSRmon.exe
  C:\Program HP HP Software Update\hpwuSchd2.exe
  C:\Program Files\Windows Media Player\wmpnscfg.exe
  C:\Windows\ehome\ehtray.exe
  C:\Windows\ehome\ehmsas.exe
  C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
  C:\Windows\system32\wbem\wmiprvse.exe
  C:\Program Files\Windows Media Player\wmpnetwk.exe
  C:\Program Hewlett - Packard HP wireless Assistant\WiFiMsg.EXE
  C:\Users\Zach\AppData\Local\Google\Update\1.2.183.7\GoogleCrashHandler.exe
  C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
  C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
  C:\Program Hewlett-Packard HP Quick Launch Buttons\Com4QLBEx.exe
  C:\Windows\system32\wuauclt.exe
  c:\Program Hewlett-Packard HP health Check\hphc_service.exe
  C:\Windows\system32\taskeng.exe
  C:\Program Files\iPod\bin\iPodService.exe
  C:\Program Files\iPod\bin\iPodService.exe
  C:\Windows\system32\PnkBstrB.exe
  C:\Program Files\IObit\IObit security 360\is360.exe
  C:\Program Files\IObit\IObit security 360\is360tray.exe
  C:\Program Files\IObit\IObit security 360\IS360srv.exe
  C:\Program Files\iTunes\iTunes.exe
  C:\Program Files\Mozilla Firefox\firefox.exe
  C:\Program Files\IObit\IObit security 360\a_hijackscan.exe

  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll, ShowWelcomeCenter
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe/autorun
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [RAM Medic] C:\Program Files\Iomatic\RAM Medic\RAMMedic.exe
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [Octoshape Streaming Services] "C:\Users\Zach\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" - inv: bootrun
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [NVIDIA nTune] "C:\Program NetworkAccessManager Corporation\nTune\nTuneCmd.exe' clear
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [nclauncher] C:\Program Files\NCSoft\Launcher\NCLauncher.exe / reduced
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" / background
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [Google Update] "C:\Users\Zach\AppData\Local\Google\Update\GoogleUpdate.exe" / c.
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [ehTray.exe] C:\Windows\ehome\ehTray.exe
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [AlcoholAutomount] "C:\Program Alcohol Soft 120\axcmd.exe" / automount
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [amd_dc_opt] C:\Program AMD Dual-Core Optimizer\amd_dc_opt.exe
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe - hide
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" 'C:\Program CyberLink YouCam' updated 'Software\CyberLink\YouCam\2.0 '.
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" - atboottime
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe".
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [QlbCtrl.exe] C:\Program Hewlett-Packard HP Quick Launch Buttons\QlbCtrl.exe/Start
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [NvMediaCenter] RUNDLL32. EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [NvCplDaemon] RUNDLL32. EXE C:\Windows\system32\NvCpl.dll,NvStartup
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [TkBellExe] "C:\Program Files\iTunes\iTunesHelper.exe"
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [hpWirelessAssistant] C:\Program Hewlett-Packard HP Wireless Assistant\HPWAMain.exe
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [hpqSRMon] C:\Program HP Imaging\bin\hpqSRMon.exe
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [HP Software Update] C:\Program HP HP Software Update\HPWuSchd2.exe
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [HP Health Check Scheduler] c:\Program Hewlett-Packard HP health Check\HPHC_Scheduler.exe
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe".
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [AppleSyncNotifier] C:\Program Files\Fichiers Apple Support\bin\AppleSyncNotifier.exe
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [adobe Reader Speed Launcher] "C:\Program 8.0\Reader\Reader_sl.exe Adobe."
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\Run\: [IObit Security 360] C:\Program Files\IObit\IObit security 360\IS360tray.exe
  O4 - HKLM. \Software\Microsoft\Windows\CurrentVersion\RunOnce\: [Malwarebytes' Anti-Malware] C:\Program Malwarebytes Anti-Malware\mbamgui.exe/install/silent
  O8 - Extra context menu item: E & xport to Microsoft Excel - res: / / C:\PROGRA~1\MICROS~3\Office12\EXCEL. EXE/3000
  O9 - Extra button: send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} -.
  O9 - Extra button: research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR. DLL
  O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR. DLL
  Ø16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} Java plug-in 1.6.0_15 - http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
  Ø16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} Java 1.6.0_05 plugin - http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
  Ø16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} Java plug-in 1.6.0_07 - http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
  Ø16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} Java plug-in 1.6.0_15 - http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
  Ø16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} Java plug-in 1.6.0_15 - http://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
  O23 - Service: Apple Mobile Device (Apple Mobile Device) - Apple Inc. - C:\Program Files Apple Mobile Device Support\bin\AppleMobileDeviceService.exe
  O23 - Service: BitDefender Arrakis Server (Arrakis3) - BitDefender S.R.L. http://www.bitdefender.com - C:\Program Files\Common Files\BitDefender\BitDefender Server\bin\arrakis3.exe Arrakis
  O23 - Service: Bonjour Service (morning Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
  O23 - Service: Com4QLBEx (Com4QLBEx) - Hewlett-Packard Development Company, L.P. - C:\Program Hewlett-Packard HP Quick Launch Buttons\Com4QLBEx.exe
  O23 - Service: Server DCOM (DcomLaunch) - unknown process Launcher.
  O23 - Service: political diagnosis Service (DPS) - unknown -.
  O23 - Service: Windows Media Center Service Launcher (ehstart) - unknown - %windir%\system32\svchost.exe
  O23 - Service: GameConsoleService - WildTangent, Inc. - (GameConsoleService) C:\Program HP Games My game console HP Console\GameConsoleService.exe
  O23 - Service: Group Policy Client (gpsvc) - Unknown -.
  O23 - Service: HP Health Check (HP Health Check Service) Service - Hewlett-Packard - c:\Program health Hewlett-Packard HP
  O23 - Service: hpqwmiex (hpqwmiex) - Hewlett - Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
  O23 - Service: Windows CardSpace (idsvc) - Unknown - %systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
  O23 - Service: iPod Service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
  O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers Files\LightScribe\LSSrvc.exe
  O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender S.R.L. - C:\Program Files\Common Files\BitDefender\BitDefender update Service\livesrv.exe
  O23 - Service: Net.Tcp Port Sharing Service (NetTcpPortSharing) - Unknown - %systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
  O23 - Service: Service nProtect GameGuard (npggsvc) - INCA Internet Co., Ltd. - C:\Windows\system32\GameMon.des
  O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program NVIDIA Corporation\nTune\nTuneService.exe
  O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
  O23 - Service: PnkBstrA (PnkBstrA) - unknown - C:\Windows\system32\PnkBstrA.exe
  O23 - Service: Video Audio quality Windows (QWAVE) - Unknown - %windir%\system32\svchost.exe experience
  O23 - Service: recovery for Windows Service (Service recovery for Windows) - unknown - C:\Windows\SMINST\BLService.exe
  O23 - Service: Cyberlink RichVideo service (RichVideo) - Unknown - C:\Program CyberLink Files\RichVideo.exe
  O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown - %ProgramFiles%\WinPcap\rpcapd.exe
  O23 - Service: remote procedure (RPC) call (RpcSs) - unknown -.
  O23 - Service: Manager of security accounts (SamSs) - unknown -.
  O23 - Service: secondary (seclogon) - Unknown - %windir%\system32\svchost.exe to logon
  O23 - Service: Service AE StarWind (StarWindServiceAE) - Rocket Division Software - C:\Program Alcohol Soft 120\StarWind\StarWindServiceAE.exe
  O23 - Service: Distributed Link Tracking Client (TrkWks) - unknown -.
  O23 - Service: installer of Modules of Windows (TrustedInstaller) - unknown -
  O23 - Service: Service Manager Viewpoint (Service Manager Viewpoint) - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
  O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe
  O23 - Service: Service host (WdiServiceHost) - Unknown diagnosis.
  O23 - Service: Diagnostic system host (WdiSystemHost) - unknown -.
  O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe
  O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown - %ProgramFiles%\Windows Media Player\wmpnetwk.exe
  O23 - Service: XAudioService (XAudioService) - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
  O23 - Service: PnkBstrB (PnkBstrB) - unknown - C:\Windows\system32\PnkBstrB.exe
  O23 - Service: IS360service (IS360service) - IObit - C:\Program Files\IObit\IObit security 360\IS360srv.exe

  Hello

  You can access Microsoft.com, McAffee.com, Symatec.com? Thinking you have a conficker.

  Check with this site
  http://www.confickerworkinggroup.org/infection_test/cfeyechart.html

  Alert on the Win32/conficker virus
  http://support.Microsoft.com/kb/962007

  Protect yourself from Conficker
  http://www.Microsoft.com/security/worms/Conficker.aspx

  How to remove the worm Downadup Conficker (Uninstall Instructions)
  http://www.bleepingcomputer.com/virus-removal/remove-Downadup-Conficker

  How to manually remove the Conficker worm
  http://www.411-spyware.com/Conficker-worm-removal#how-to-remove

  BDTool to remove
  http://www.bdtools.NET/

  -----------------------------------------------

  Run the malware removal tool from Microsoft, add Prevx to detect any malware you have
  the system and execution UnHackMe - then do the rest for you.

  Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.

  You should get this tool and its updates via Windows Update - if necessary, you can download it here.

  Download - SAVE - go where go out you there - top - right click RUN AS ADMIN
  (Then run MRT as shown above.)

  Malicious removal tool from Microsoft
  http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

  Malwarebytes - a scanner at the request - update on the updates tab and run whenever you think malware.
  http://www.Malwarebytes.org/

  Here are some free online scanners to help the

  http://www.eset.com/onlinescan/

  http://www.Kaspersky.com/virusscanner

  Other tests free online
  http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1

  also install Prevx to be sure that it is all gone.

  Prevx - Home - free - small, fast, exceptional CLOUD protection, working with other security programs. It comes
  a scan only, VERY EFFICIENT, if it finds something to come back here or use Google to see how to remove.
  http://www.prevx.com/

  Choice of PCmag editor - Prevx-
  http://www.PCMag.com/Article2/0, 2817,2346862,00.asp

  --------------------------------------------

  Also do to the General corruption of cleaning.

  Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup

  Start - type this in the search box-> find COMMAND at the top and RIGHT CLICK – RUN AS ADMIN

  Enter this at the command prompt - sfc/scannow

  How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
  generates in Windows Vista cbs.log
  http://support.Microsoft.com/kb/928228

  Run checkdisk - schedule it to run at the next startup, then apply OK then restart your way.

  How to run the check disk at startup in Vista
  http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html

  -------------------------------------------------

  Run Malwarebytes when you can.

  IE - Tools - Internet Options - Advanced - tab click on restore, and then click Reset - apply / OK

  IE - Tools - Internet Options - Security - reset all Zones by default level - apply / OK

  Close IE

  IE - tools - manage Addons (for sure disable SSV2 if it is there, it is no longer necessary but Java always install
  "(and it causes problems - you never update Java to go back in and turn it off again)." Search for other possible problems.

  Windows Defender - tools - software explore - look for problems with programs that do not look right. Permit
  are usually OK and "unauthorized" are not always bad. If in doubt about a program to ask about it here.

  Could be that a BHO - BHOremover - free - standalone program, needs no installation, download and run - not all
  are bad, but some can cause your question. (Toolbars are BHO)
  http://securityxploded.com/bhoremover.php

  Startup programs
  http://www.Vistax64.com/tutorials/79612-startup-programs-enable-disable.html

  Don't forget to do:

  Logon as administrator

  Start - type in the search box-> COMMAND - find on the list above - CLICK RIGHT - RUN AS ADMIN

  Enter each of these one at a time and press ENTER after each

  ipconfig/flushdns

  nbtstat-r

  nbtstat - RR

  netsh int Reinitialis

  netsh int ip reset

  netsh winsock reset

  Reset
  ------------------------------------------------------

  Here are a few rootkits if it were a question:

  SpyDLL Remover - free
  http://securityxploded.com/spydllremover.php

  Advanced Windows Service Manager
  http://securityxploded.com/winservicemanager.php

  Run the Rootkit Revealer - free
  http://TechNet.Microsoft.com/en-us/Sysinternals/bb897445.aspx

  UnHackme - trial
  http://www.Greatis.com/UnHackMe/

  This shows how to use UnHackme and includes a link to version 2.5 – use it as a guideline and current
  available as version above is 5.5
  http://safecomputing.umn.edu/guides/scan_unhackme.html

  IceSword - free
  http://www.AntiRootkit.com/software/IceSword.htm
  Instructions and pictorial
  http://securityxploded.com/IceSword.php
  Tutorial for use of IceSword
  http://translate.Google.com/translate?hl=en&SL=zh-CN&u=http://soft.zol.com.CN/2004/0803/145163.shtml&prev=/search%3Fq%3Dicesword%26hl%3Den%26lr%3D

  I hope this helps.

  Rob - bicycle - Mark Twain said it is good.

• Sound is squeaky, he cannot know. Need help, please

  Hi, I had a problem with getting a blue screen a few times and it turned back a few months ago to be because I had AVG and Norton, both installed on my computer and he didn't like that. I ended up finding it fixed thanks to the presentation of a report from here and get help, but I think I got him too late and there could be residual effects, I'm not sure.

  My sound is real grinding, it has been progressively worse for a little while now that I tried to figure it out so now I'm here asking for help. It's almost a kind of sounds like the sound of transformers they do in the movies and it is true irritating because I'm watching videos of lectures for an online class so I really need the sound. All sound icons down in the report of the bar of tasks, everything is fine but I run CCleaner, Spybot, I have a paid subscription to Norton, I ran a rootkit revealer, memtest. The resource monitor, as far as I know, is not displayed nothing extraordinary, but I'm far from being positive on that. Uninstalled and reinstalled drivers, restarted the PC. Device Manager says all drivers were very well, but I did it just to make sure they were the most up-to-date. It is ok for a little while, but then the problems come back. All that is found malware-wise has been fixed. Video got to a point where it was sometimes a little slow, so it is not just the sound card and I watched a movie on VLC Media Player and it was still scratchy and nervous, which excludes from the internet connection. Fix? Tried to answer as much as I can so I can come here and give everyone as much information that they need to help you.
  I wanted a little just to see how I could have missed before accepting that some cards inside is dying or something that I need to replace. Any help would be appreciated. Thank you! Here are the specifications of the computer and if someone who can help the needs nothing else from me, please do not hesitate. Thanks again
  It's an s5-1060 HP w / 64-bit Windows 7 SP1, 6 GB of RAM and an Intel i-5 2.90 GHz CPU

  Hello Jeff,.

  Thanks for posting your question on the Forum of the Microsoft community.

  I'm sorry for the late reply.

  I suggest you try after checking and Microsoft Help article if this can help.

  Tips for solving common audio problems
  http://Windows.Microsoft.com/en-us/Windows/tips-fixing-common-sound-problems#tips-fixing-common-sound-problems=Windows-7

  Please also download and install the audio drivers from this link:
  http://h10025.www1.HP.com/ewfrf/wc/softwareCategory?OS=4063&LC=en&cc=us&DLC=en&sw_lang=&product=5097984

  I hope this information helps.

  Please let us know if you need more help.

  Thank you

• is there a for windows 7 64 bit rookit Revealer

  is it reveal a rootkit for 64-bit windows 7 Home Edition

  http://www.gmer.NET/

  I'm sure you know that a potential rootkit on your operating system is not a good situation for you.

  Why do you think you have a rootkit?

• I'm currently developing the feature keys on my MacBook. In the process, he asked that I enter a code sent by message to a phone number (only the 2 last digits are revealed) that I do not have access to.   How can I fill the activation?

  I'm currently developing the feature keys on my MacBook. In the process, he asked that I enter a code sent by message to a phone number (only the 2 last digits are revealed) that I do not have access to.   How can I fill the activation?

  See "change how the new features can be approved" here:

  OS X Yosemite: Configure iCloud keychain

  As you can see, this allows you to change the phone number.

• Bread brush Reveal Effect

  I'm new to FCP and I'm running FCP X on El Capitan. I would be grateful if someone could give advice or point me in the right direction on how to get the paint brush effect reveals in this video;

  https://www.YouTube.com/watch?v=5lYdrhYYWpg

  Thank you very much!

  You have Motion?