ComboFix 14-01-04.03 - Hub et Christiane 08/01/2014 10:49:50.2.1 - x64 Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.2815.1337 [GMT 1:00] Lancé depuis: c:\users\Hub et Christiane\Downloads\ComboFix.exe AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((((((( Fichiers créés du 2013-12-08 au 2014-01-08 )))))))))))))))))))))))))))))))))))) . . 2014-01-08 09:59 . 2014-01-08 09:59 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp 2014-01-08 09:59 . 2014-01-08 09:59 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-01-07 22:45 . 2014-01-07 23:12 -------- d-----w- c:\users\Hub et Christiane\AppData\Roaming\ZHP 2014-01-07 22:45 . 2014-01-07 22:45 -------- d-----w- c:\program files (x86)\ZHPDiag 2014-01-07 19:25 . 2014-01-07 19:25 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service 2014-01-07 18:58 . 2014-01-08 09:45 -------- d-----w- C:\AdwCleaner 2014-01-07 09:05 . 2014-01-07 09:05 -------- d-----w- c:\program files (x86)\Ad-Remover 2014-01-07 09:00 . 2014-01-07 09:03 -------- d-----w- C:\UsbFix 2014-01-06 23:07 . 2014-01-06 23:07 -------- d-----w- c:\program files\CCleaner 2014-01-06 22:54 . 2014-01-06 22:54 388096 ----a-r- c:\users\Hub et Christiane\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2014-01-06 22:54 . 2014-01-06 22:54 -------- d-----w- c:\program files (x86)\Trend Micro 2014-01-06 22:38 . 2014-01-06 22:40 -------- d-----w- c:\program files (x86)\CPU Stress MT 2014-01-06 21:03 . 2014-01-06 21:03 -------- d-----w- c:\users\Hub et Christiane\AppData\Local\OCCT_-_Ocbase_-_Adrien_Me 2014-01-06 19:43 . 2007-03-12 15:42 4494184 ----a-w- c:\windows\system32\d3dx9_33.dll 2014-01-06 12:57 . 2014-01-06 12:57 -------- d-----w- c:\program files (x86)\VS Revo Group 2013-12-15 19:47 . 2013-12-15 19:47 -------- d-----w- c:\program files\CPUID 2013-12-15 19:37 . 2013-12-15 19:37 -------- d-----w- c:\program files (x86)\Common Files\Skype 2013-12-15 19:37 . 2013-12-15 19:37 -------- d-----r- c:\program files (x86)\Skype 2013-12-15 18:18 . 2013-12-15 18:18 -------- d-----w- c:\users\Hub et Christiane\AppData\Roaming\Malwarebytes 2013-12-15 18:18 . 2013-12-15 18:18 -------- d-----w- c:\programdata\Malwarebytes 2013-12-15 18:18 . 2013-12-15 18:18 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2013-12-15 18:18 . 2013-04-04 13:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys 2013-12-15 18:17 . 2013-12-15 18:17 -------- d-----w- c:\users\Hub et Christiane\AppData\Local\Programs 2013-12-12 19:29 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe 2013-12-12 19:29 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe 2013-12-12 19:29 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL 2013-12-12 19:29 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL 2013-12-12 19:29 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll 2013-12-12 19:20 . 2013-10-12 02:32 150016 ----a-w- c:\windows\system32\wshom.ocx 2013-12-12 19:20 . 2013-10-12 02:31 202752 ----a-w- c:\windows\system32\scrrun.dll 2013-12-12 19:20 . 2013-10-12 02:04 121856 ----a-w- c:\windows\SysWow64\wshom.ocx 2013-12-12 19:20 . 2013-10-12 02:03 163840 ----a-w- c:\windows\SysWow64\scrrun.dll 2013-12-12 19:20 . 2013-10-12 01:33 156160 ----a-w- c:\windows\system32\cscript.exe 2013-12-12 19:20 . 2013-10-12 01:33 168960 ----a-w- c:\windows\system32\wscript.exe 2013-12-12 19:20 . 2013-10-12 01:15 141824 ----a-w- c:\windows\SysWow64\wscript.exe 2013-12-12 19:20 . 2013-10-12 01:15 126976 ----a-w- c:\windows\SysWow64\cscript.exe 2013-12-12 19:18 . 2013-10-30 02:32 335360 ----a-w- c:\windows\system32\msieftp.dll 2013-12-12 19:18 . 2013-10-30 02:19 301568 ----a-w- c:\windows\SysWow64\msieftp.dll 2013-12-12 19:18 . 2013-10-30 01:24 3155968 ----a-w- c:\windows\system32\win32k.sys 2013-12-12 19:18 . 2013-10-19 02:18 81408 ----a-w- c:\windows\system32\imagehlp.dll 2013-12-12 19:18 . 2013-10-19 01:36 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll 2013-12-12 19:18 . 2013-11-23 18:26 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll 2013-12-12 19:18 . 2013-11-23 17:47 465920 ----a-w- c:\windows\system32\WMPhoto.dll 2013-12-12 19:18 . 2013-11-12 02:23 2048 ----a-w- c:\windows\system32\tzres.dll 2013-12-12 19:18 . 2013-11-12 02:07 2048 ----a-w- c:\windows\SysWow64\tzres.dll 2013-12-12 19:18 . 2013-10-04 02:16 116736 ----a-w- c:\windows\system32\drivers\drmk.sys 2013-12-12 19:18 . 2013-10-04 01:36 230400 ----a-w- c:\windows\system32\drivers\portcls.sys . . . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2013-12-19 10:19 . 2013-05-13 15:00 84720 ----a-w- c:\windows\system32\drivers\avnetflt.sys 2013-12-19 10:19 . 2013-03-30 15:07 131576 ----a-w- c:\windows\system32\drivers\avipbb.sys 2013-12-19 10:19 . 2013-03-30 15:07 108440 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2013-12-15 17:48 . 2010-09-13 19:04 90708896 ----a-w- c:\windows\system32\MRT.exe 2013-12-15 16:30 . 2013-02-24 16:03 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-12-15 16:30 . 2011-10-29 18:53 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-12-04 19:27 . 2013-12-04 19:27 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2013-12-04 19:27 . 2013-12-04 19:27 194048 ----a-w- c:\windows\SysWow64\elshyph.dll 2013-12-04 19:27 . 2013-12-04 19:27 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe 2013-12-04 19:27 . 2013-12-04 19:27 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll 2013-12-04 19:27 . 2013-12-04 19:27 235008 ----a-w- c:\windows\system32\elshyph.dll 2013-12-04 19:27 . 2013-12-04 19:27 34816 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll 2013-12-04 19:27 . 2013-12-04 19:27 182272 ----a-w- c:\windows\SysWow64\msls31.dll 2013-12-04 19:27 . 2013-12-04 19:27 62464 ----a-w- c:\windows\SysWow64\tdc.ocx 2013-12-04 19:27 . 2013-12-04 19:27 61952 ----a-w- c:\windows\SysWow64\iesetup.dll 2013-12-04 19:27 . 2013-12-04 19:27 337408 ----a-w- c:\windows\SysWow64\html.iec 2013-12-04 19:27 . 2013-12-04 19:27 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll 2013-12-04 19:27 . 2013-12-04 19:27 151552 ----a-w- c:\windows\SysWow64\iexpress.exe 2013-12-04 19:27 . 2013-12-04 19:27 139264 ----a-w- c:\windows\SysWow64\wextract.exe 2013-12-04 19:27 . 2013-12-04 19:27 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll 2013-12-04 19:27 . 2013-12-04 19:27 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll 2013-12-04 19:27 . 2013-12-04 19:27 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe 2013-12-04 19:27 . 2013-12-04 19:27 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll 2013-12-04 19:27 . 2013-12-04 19:27 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll 2013-12-04 19:27 . 2013-12-04 19:27 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll 2013-12-04 19:27 . 2013-12-04 19:27 454656 ----a-w- c:\windows\SysWow64\vbscript.dll 2013-12-04 19:27 . 2013-12-04 19:27 36352 ----a-w- c:\windows\SysWow64\imgutil.dll 2013-12-04 19:27 . 2013-12-04 19:27 13312 ----a-w- c:\windows\SysWow64\mshta.exe 2013-12-04 19:27 . 2013-12-04 19:27 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2013-12-04 19:27 . 2013-12-04 19:27 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll 2013-12-04 19:27 . 2013-12-04 19:27 942592 ----a-w- c:\windows\system32\jsIntl.dll 2013-12-04 19:27 . 2013-12-04 19:27 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2013-12-04 19:27 . 2013-12-04 19:27 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe 2013-12-04 19:27 . 2013-12-04 19:27 52224 ----a-w- c:\windows\system32\msfeedsbs.dll 2013-12-04 19:27 . 2013-12-04 19:27 48640 ----a-w- c:\windows\system32\mshtmler.dll 2013-12-04 19:27 . 2013-12-04 19:27 247808 ----a-w- c:\windows\system32\msls31.dll 2013-12-04 19:27 . 2013-12-04 19:27 195584 ----a-w- c:\windows\system32\msrating.dll 2013-12-04 19:27 . 2013-12-04 19:27 13312 ----a-w- c:\windows\system32\msfeedssync.exe 2013-12-04 19:27 . 2013-12-04 19:27 131072 ----a-w- c:\windows\system32\IEAdvpack.dll 2013-12-04 19:27 . 2013-12-04 19:27 105984 ----a-w- c:\windows\system32\iesysprep.dll 2013-12-04 19:27 . 2013-12-04 19:27 84992 ----a-w- c:\windows\system32\mshtmled.dll 2013-12-04 19:27 . 2013-12-04 19:27 81408 ----a-w- c:\windows\system32\icardie.dll 2013-12-04 19:27 . 2013-12-04 19:27 77312 ----a-w- c:\windows\system32\tdc.ocx 2013-12-04 19:27 . 2013-12-04 19:27 616104 ----a-w- c:\windows\system32\ieapfltr.dat 2013-12-04 19:27 . 2013-12-04 19:27 453120 ----a-w- c:\windows\system32\dxtmsft.dll 2013-12-04 19:27 . 2013-12-04 19:27 413696 ----a-w- c:\windows\system32\html.iec 2013-12-04 19:27 . 2013-12-04 19:27 40448 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll 2013-12-04 19:27 . 2013-12-04 19:27 30208 ----a-w- c:\windows\system32\licmgr10.dll 2013-12-04 19:27 . 2013-12-04 19:27 296960 ----a-w- c:\windows\system32\dxtrans.dll 2013-12-04 19:27 . 2013-12-04 19:27 263376 ----a-w- c:\windows\system32\iedkcs32.dll 2013-12-04 19:27 . 2013-12-04 19:27 243200 ----a-w- c:\windows\system32\webcheck.dll 2013-12-04 19:27 . 2013-12-04 19:27 235520 ----a-w- c:\windows\system32\url.dll 2013-12-04 19:27 . 2013-12-04 19:27 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll 2013-12-04 19:27 . 2013-12-04 19:27 101376 ----a-w- c:\windows\system32\inseng.dll 2013-12-04 19:27 . 2013-12-04 19:27 626176 ----a-w- c:\windows\system32\msfeeds.dll 2013-12-04 19:27 . 2013-12-04 19:27 62464 ----a-w- c:\windows\system32\pngfilt.dll 2013-12-04 19:27 . 2013-12-04 19:27 548352 ----a-w- c:\windows\system32\vbscript.dll 2013-12-04 19:27 . 2013-12-04 19:27 167424 ----a-w- c:\windows\system32\iexpress.exe 2013-12-04 19:27 . 2013-12-04 19:27 147968 ----a-w- c:\windows\system32\occache.dll 2013-12-04 19:27 . 2013-12-04 19:27 143872 ----a-w- c:\windows\system32\wextract.exe 2013-12-04 19:26 . 2013-12-04 19:26 83968 ----a-w- c:\windows\system32\MshtmlDac.dll 2013-12-04 19:26 . 2013-12-04 19:26 774144 ----a-w- c:\windows\system32\jscript.dll 2013-12-04 19:26 . 2013-12-04 19:26 48128 ----a-w- c:\windows\system32\imgutil.dll 2013-12-04 19:26 . 2013-12-04 19:26 13824 ----a-w- c:\windows\system32\mshta.exe 2013-12-04 19:26 . 2013-12-04 19:26 135680 ----a-w- c:\windows\system32\iepeers.dll 2013-11-29 15:09 . 2013-03-30 15:07 28600 ----a-w- c:\windows\system32\drivers\avkmgr.sys 2013-10-14 17:00 . 2013-12-04 19:32 28368 ----a-w- c:\windows\system32\IEUDINIT.EXE 2013-10-12 02:30 . 2013-11-16 15:06 830464 ----a-w- c:\windows\system32\nshwfp.dll 2013-10-12 02:29 . 2013-11-16 15:06 859648 ----a-w- c:\windows\system32\IKEEXT.DLL 2013-10-12 02:29 . 2013-11-16 15:06 324096 ----a-w- c:\windows\system32\FWPUCLNT.DLL 2013-10-12 02:03 . 2013-11-16 15:06 656896 ----a-w- c:\windows\SysWow64\nshwfp.dll 2013-10-12 02:01 . 2013-11-16 15:06 216576 ----a-w- c:\windows\SysWow64\FWPUCLNT.DLL . . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-03-01 18643560] "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-10-28 39408] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "LWS"="c:\program files (x86)\Logitech\LWS\Webcam Software\LWS.exe" [2011-08-12 205336] "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-12-19 684600] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "Userinit"="userinit.exe" . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 lvpopf64;Logitech POP Suppression Filter;c:\windows\system32\DRIVERS\lvpopf64.sys;c:\windows\SYSNATIVE\DRIVERS\lvpopf64.sys [x] R3 LVPr2M64;Logitech LVPr2M64 Driver;c:\windows\system32\DRIVERS\LVPr2M64.sys;c:\windows\SYSNATIVE\DRIVERS\LVPr2M64.sys [x] R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x] R3 LVUVC64;Logitech HD Webcam C310(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x] R3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8187B.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8187B.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x] S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x] S2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [x] S2 AntiVirSchedulerService;Avira Planificateur;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x] S2 Greg_Service;GRegService;c:\program files (x86)\Packard Bell\Registration\GregHSRW.exe;c:\program files (x86)\Packard Bell\Registration\GregHSRW.exe [x] S2 OberonGameConsoleService;Oberon Media Game Console service;c:\program files (x86)\Packard Bell GameZone\GameConsole\OberonGameConsoleService.exe;c:\program files (x86)\Packard Bell GameZone\GameConsole\OberonGameConsoleService.exe [x] S2 UMVPFSrv;UMVPFSrv;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe;c:\program files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [x] S2 Updater Service;Updater Service;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe [x] . . Contenu du dossier 'Tâches planifiées' . 2014-01-07 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-02-24 16:30] . 2014-01-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-18 16:17] . 2014-01-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-09-18 16:17] . . --------- X64 Entries ----------- . . ------- Examen supplémentaire ------- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.1 192.168.1.1 FF - ProfilePath - c:\users\Hub et Christiane\AppData\Roaming\Mozilla\Firefox\Profiles\9katdj5y.default\ FF - prefs.js: browser.startup.homepage - www.orange.fr . - - - - ORPHELINS SUPPRIMES - - - - . Toolbar-Locked - (no file) SafeBoot-98455143.sys . . . --------------------- CLES DE REGISTRE BLOQUEES --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Heure de fin: 2014-01-08 11:02:48 ComboFix-quarantined-files.txt 2014-01-08 10:02 . Avant-CF: 101 244 096 512 octets libres Après-CF: 100 963 160 064 octets libres . - - End Of File - - 3B0074643F5399CC075AE2C44326E563 A36C5E4F47E84449FF07ED3517B43A31