Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

RKILL shows "Missing Services"


  • Please log in to reply
1 reply to this topic

#1 Purrington666

Purrington666

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Local time:01:38 AM

Posted 06 June 2017 - 01:32 PM

When running “RKILL” what does “Checking Windows Service Integrity: Missing Services” mean?

Do the need to be restored and if so how?

Thank you

Rkill 2.8.4 by Lawrence Abrams (Grinler)

http://www.bleepingcomputer.com/

Copyright 2008-2017 BleepingComputer.com

More Information about Rkill can be found at this link:

http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 06/06/2017 01:08:51 PM in x64 mode.

Windows Version: Windows 10 Home

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* Windows Defender Disabled

   [HKLM\SOFTWARE\Microsoft\Windows Defender]

   "DisableAntiSpyware" = dword:00000001

Checking Windows Service Integrity:

* agp440 [Missing Service]

* DcpSvc [Missing Service]

* gagp30kx [Missing Service]

* IEEtwCollectorService [Missing Service]

* IoQos [Missing Service]

* NetTcpPortSharing [Missing Service]

* nv_agp [Missing Service]

* TimeBroker [Missing Service]

* uagp35 [Missing Service]

* uliagpkx [Missing Service]

* WcsPlugInService [Missing Service]

* workfolderssvc [Missing Service]

* wpcfltr [Missing Service]

* WSService [Missing Service]

* AJRouter => %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted [Incorrect ImagePath]

* RetailDemo => %SystemRoot%\System32\svchost.exe -k rdxgroup [Incorrect ImagePath]

* WpnService => %systemroot%\system32\svchost.exe -k netsvcs [Incorrect ImagePath]

* vmicrdv => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]

* vmicvss => %SystemRoot%\System32\icsvcext.dll [Incorrect ServiceDLL]

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* HOSTS file entries found:

  127.0.0.1       localhost

Program finished at: 06/06/2017 01:11:51 PM

Execution time: 0 hours(s), 2 minute(s), and 59 seconds(s) 



BC AdBot (Login to Remove)

 


#2 garioch7

garioch7

    RCMP Veteran


  • Malware Response Instructor
  • 3,893 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Port Hood, Nova Scotia, Canada
  • Local time:02:38 AM

Posted 07 June 2017 - 10:47 AM

Purrington666:

 

RKill is not yet fully Windows 10 compatible.  That is a normal RKill scan report for Windows 10.  You can ignore those "Missing Service" entries.  They are "false positives."

 

Have a great day.

 

Regards,

-Phil


Graduate of the Bleeping Computer Malware Removal Study Hall





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users