Results 1 to 3 of 3

Thread: RootAlyzer results, help needed

  1. #1
    Junior Member
    Join Date
    May 2014

    Default RootAlyzer results, help needed

    Hi, I need some help interpreting the results of a RootAlyzer scan. This is the first time I've used it and the scan has identified files and a registry key as possible malware.

    // info: Rootkit removal help file
    // copyright: (c) 2008-2014 Safer-Networking Ltd. All rights reserved.

    :: RootAlyzer Results
    File:"Unknown ADS","C:\Windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.0.6002.18005_none_b5c807ab2d93d829\System Diagnostics.xml:0v1ieca3Feahez0jAwxjjk5uRh:$DATA"
    File:"Unknown ADS","C:\Windows\winsxs\x86_microsoft-windows-p..rastructureconsumer_31bf3856ad364e35_6.0.6001.18000_none_b3dc8e9f30720cdd\System Diagnostics.xml:0v1ieca3Feahez0jAwxjjk5uRh:$DATA"
    File:"Unknown ADS","C:\Windows\PLA\System\System Diagnostics.xml:0v1ieca3Feahez0jAwxjjk5uRh:$DATA"
    File:"Unknown ADS","C:\Users\User\Pictures\PHONE Nok 2009-13 6303 Classic\2013-05-03 PHONE Nokia 6303 classic\PHONE Nokia 6303 classic 001.mp4:TOC.WMV:$DATA"
    File:"Unknown ADS","C:\PerfLogs\System\Diagnostics\20140408-0011\report.xml:Qgrg2rf1Znaluncm1kfl1xla5h:$DATA"
    File:"Unknown ADS","C:\PerfLogs\System\Diagnostics\20140301-0010\report.xml:Qgrg2rf1Znaluncm1kfl1xla5h:$DATA"
    File:"Unknown ADS","C:\PerfLogs\System\Diagnostics\20140301-0009\report.xml:Qgrg2rf1Znaluncm1kfl1xla5h:$DATA"
    File:"Unknown ADS","C:\PerfLogs\System\Diagnostics\20140213-0008\report.xml:Qgrg2rf1Znaluncm1kfl1xla5h:$DATA"
    File:"Unknown ADS","C:\PerfLogs\System\Diagnostics\20131220-0007\report.xml:Qgrg2rf1Znaluncm1kfl1xla5h:$DATA"
    RegyKey:"No admin in ACL","HKEY_LOCAL_MACHINE","\SOFTWARE\Microsoft\Security Center\Svc\","Vol"

    I have fairly basic computer know how and am not sure what to make of these results. I am particularly concerned about the Registry key as this seems to be associated with Microsoft Security center and is flagged red. I am not sure what most of the files refer to apart from pictures downloaded from a mobile.

    Help and advice appreciated.

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005


    Hello Palmer,

    Those entries do not look bad, mostly diagnostic files.

    How is your computer running?

    Best regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  3. #3
    Junior Member
    Join Date
    May 2014

    Default RootAlyzer results, help needed

    Hello Tashi,

    Thanks for your advice. My computer is glitchy and temperamental at the moment which is why I ran the RootAlyzer. However I think the behaviour is mainly due to a lack of RAM. It is fairly old and needs a memory boost.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts