Had a little bit of an issue running it. It was running and showed below that there were two suspicious paths, got to about 80% done then computer froze.
Left it alone for a long time but it didn't continue so finally had to restart computer.
Running it the second time it didn't show the two items again.
Here's the log.
RogueKiller V10.0.2.0 [Oct 16 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.co...es/roguekiller/
Blog : http://www.adlice.com
Operating System : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User : MIKE [Administrator]
Mode : Scan -- Date : 10/21/2014 05:02:54
¤¤¤ Processes : 0 ¤¤¤
¤¤¤ Registry : 22 ¤¤¤
[Suspicious.Path] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | tsnp2std : C:\WINDOWS\tsnp2std.exe -> Found
[Suspicious.Path] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | snp2std : C:\WINDOWS\vsnp2std.exe -> Found
[Suspicious.Path] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\etdrv (\??\C:\WINDOWS\etdrv.sys) -> Found
[Suspicious.Path] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\gdrv (\??\C:\WINDOWS\gdrv.sys) -> Found
[Suspicious.Path] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\etdrv (\??\C:\WINDOWS\etdrv.sys) -> Found
[Suspicious.Path] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\gdrv (\??\C:\WINDOWS\gdrv.sys) -> Found
[Suspicious.Path] HKEY_LOCAL_MACHINE\System\ControlSet002\Services\catchme (\??\C:\DOCUME~1\MIKE\LOCALS~1\Temp\catchme.sys) -> Found
[Suspicious.Path] HKEY_LOCAL_MACHINE\System\ControlSet002\Services\etdrv (\??\C:\WINDOWS\etdrv.sys) -> Found
[Suspicious.Path] HKEY_LOCAL_MACHINE\System\ControlSet002\Services\gdrv (\??\C:\WINDOWS\gdrv.sys) -> Found
[PUM.Proxy] HKEY_USERS\S-1-5-21-1085031214-2000478354-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings | ProxyServer : localhost:8080 -> Found
[PUM.HomePage] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main | Start Page : -> Found
[PUM.HomePage] HKEY_USERS\RK_Default User_ON_F_26E8\Software\Microsoft\Internet Explorer\Main | Start Page : -> Found
[PUM.HomePage] HKEY_USERS\RK_MIKE_ON_F_B271\Software\Microsoft\Internet Explorer\Main | Start Page : -> Found
[PUM.HomePage] HKEY_USERS\S-1-5-21-1085031214-2000478354-839522115-1003\Software\Microsoft\Internet Explorer\Main | Start Page : -> Found
[PUM.HomePage] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main | Start Page : -> Found
[PUM.SearchPage] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main | Search Page : -> Found
[PUM.SearchPage] HKEY_USERS\RK_Default User_ON_F_26E8\Software\Microsoft\Internet Explorer\Main | Search Page : http://red.clientapp...lts/sp/sbcydsl/*http://www.yahoo.com -> Found
[PUM.SearchPage] HKEY_USERS\RK_MIKE_ON_F_B271\Software\Microsoft\Internet Explorer\Main | Search Page : http://red.clientapp...lts/sp/sbcydsl/*http://www.yahoo.com -> Found
[PUM.SearchPage] HKEY_USERS\S-1-5-21-1085031214-2000478354-839522115-1003\Software\Microsoft\Internet Explorer\Main | Search Page : -> Found
[PUM.SearchPage] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main | Search Page : -> Found
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\RK_Software_ON_F_F9DC\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Found
[PUM.DesktopIcons] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Found
¤¤¤ Tasks : 0 ¤¤¤
¤¤¤ Files : 0 ¤¤¤
¤¤¤ Hosts File : 1 ¤¤¤
[C:\WINDOWS\System32\drivers\etc\hosts] 127.0.0.1 localhost
¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤
¤¤¤ Web browsers : 0 ¤¤¤
¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: WDC WD1001FALS-00J7B0 +++++
--- User ---
[MBR] e9b4d134dd6a6610e40cb5a8d1537184
[BSP] 02ae98ea33bf83528dbb24639397e7d2 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 63 | Size: 953851 MB
User = LL1 ... OK
User = LL2 ... OK
+++++ PhysicalDrive1: WDC WD2500JD-00HBC0 +++++
--- User ---
[MBR] 5f08d3772a36b6bd4d978b5210336fad
[BSP] 4244acf70854e288c1f8611f5c98298b : Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 63 | Size: 238472 MB
User = LL1 ... OK
User = LL2 ... OK
+++++ PhysicalDrive2: WDC WD740GD-00FLC0 +++++
--- User ---
[MBR] 55638f850a9c0ca90da6d7ea3428384a
[BSP] 76f70b3c16605ceff4cc33041231b05b : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 63 | Size: 70896 MB
User = LL1 ... OK
User = LL2 ... OK