cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ComboFix 13-06-08.02 - bernard 10/06/2013 6:38.2.4 - x64
Microsoft Windows�7 �dition Familiale Premium 6.1.7601.1.1252.33.1036.18.4013.2434 [GMT 2:00]
Lanc� depuis: c:\users\bernard\Desktop\ComboFix.exe
AV: Bitdefender Antivirus *Enabled/Updated* {9B5F5313-CAF9-DD97-C460-E778420237B4}
FW: Bitdefender Pare-feu *Disabled* {A364D236-8096-DCCF-EF3F-4E4DBCD170CF}
SP: Bitdefender Antispyware *Enabled/Updated* {203EB2F7-ECC3-D219-FED0-DC0A39857D09}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((( Fichiers cr��s du 2013-05-10 au 2013-06-10 ))))))))))))))))))))))))))))))))))))
.
.
2013-06-10 04:47 . 2013-06-10 04:47 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-06-10 04:47 . 2013-06-10 04:47 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-06-06 15:10 . 2013-06-06 15:22 -------- d-----w- c:\users\bernard\Bureau
2013-06-06 12:29 . 2012-04-17 12:34 76944 ----a-w- c:\windows\system32\drivers\bdvedisk.sys
2013-06-06 12:29 . 2013-02-22 17:46 93600 ----a-w- c:\windows\system32\drivers\BdfNdisf6.sys
2013-06-06 12:29 . 2012-11-12 16:11 82384 ----a-w- c:\windows\system32\drivers\bdsandbox.sys
2013-06-06 12:29 . 2013-04-17 12:59 593144 ----a-w- c:\windows\system32\drivers\avckf.sys
2013-06-06 12:29 . 2013-04-17 12:59 718840 ----a-w- c:\windows\system32\drivers\avc3.sys
2013-06-06 12:29 . 2012-11-02 12:17 261056 ----a-w- c:\windows\system32\drivers\avchv.sys
2013-06-06 12:23 . 2013-06-06 12:41 -------- d-----w- c:\users\bernard\AppData\Roaming\Bitdefender
2013-06-06 12:23 . 2013-06-06 12:30 -------- d-----w- c:\programdata\Bitdefender
2013-06-06 12:20 . 2012-10-04 12:30 147232 ----a-w- c:\windows\system32\drivers\gzflt.sys
2013-06-06 12:20 . 2012-10-31 11:13 350160 ----a-w- c:\windows\system32\drivers\trufos.sys
2013-06-06 12:18 . 2013-06-06 12:23 -------- d-----w- c:\program files\Bitdefender
2013-06-06 12:17 . 2013-06-06 12:20 -------- d-----w- c:\program files\Common Files\Bitdefender
2013-06-06 07:12 . 2013-06-06 07:12 -------- d-----w- c:\program files\iPod
2013-06-06 07:12 . 2013-06-06 07:13 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-06 07:12 . 2013-06-06 07:13 -------- d-----w- c:\program files\iTunes
2013-06-06 07:12 . 2013-06-06 07:13 -------- d-----w- c:\program files (x86)\iTunes
2013-06-05 08:35 . 2013-06-05 13:09 -------- d-----w- c:\program files (x86)\Hide My IP
2013-06-04 07:34 . 2013-06-09 07:05 512 ----a-w- C:\PhysicalDisk0_MBR.bin
2013-06-04 07:19 . 2013-06-09 07:05 -------- d-----w- c:\program files (x86)\ZHPDiag
2013-06-04 07:16 . 2013-06-09 07:36 -------- d-----w- C:\ZHP
2013-06-04 06:02 . 2013-05-13 23:48 9460464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BB52B024-0D3E-432E-AD77-5719CE4EC1BE}\mpengine.dll
2013-06-03 07:34 . 2013-06-03 07:34 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2013-06-03 07:34 . 2013-04-04 12:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-06-02 17:01 . 2013-06-02 17:01 -------- d-----w- C:\archive_db
2013-06-02 16:53 . 2013-06-02 16:53 -------- d-----w- c:\programdata\backup
2013-06-02 16:52 . 2013-06-02 16:52 -------- d-----w- c:\programdata\explauncher
2013-06-02 16:52 . 2013-06-02 16:52 -------- d-----w- c:\programdata\launcher
2013-06-02 16:51 . 2013-06-02 16:51 -------- d-----w- c:\program files (x86)\Paragon Software
2013-06-01 15:06 . 2013-06-01 15:06 -------- d-----w- c:\users\bernard\AppData\Roaming\ComodoGroup
2013-05-31 13:42 . 2013-05-31 13:42 -------- d-----w- c:\users\bernard\AppData\Local\Geckofx
2013-05-31 13:14 . 2013-05-31 13:14 -------- d-----w- c:\windows\Sun
2013-05-31 13:04 . 2013-05-31 13:04 -------- d-----w- c:\program files (x86)\Common Files\Java
2013-05-31 13:04 . 2013-05-31 13:03 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-05-31 13:01 . 2013-05-31 13:01 -------- d-----w- c:\program files (x86)\enginesysTPL
2013-05-31 13:00 . 2013-06-07 16:19 -------- d-----w- c:\program files (x86)\sysTPL
2013-05-31 12:56 . 2013-05-31 12:56 -------- d-----w- c:\program files (x86)\COMODO
2013-05-29 14:47 . 2013-05-29 14:47 108448 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2013-05-29 14:46 . 2013-05-29 14:47 1092512 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-05-29 06:16 . 2013-05-29 07:14 -------- d-----w- c:\programdata\Doctor Web
2013-05-29 06:16 . 2013-05-29 07:14 -------- d-----w- c:\program files (x86)\DrWeb
2013-05-28 16:24 . 2013-05-28 16:25 -------- d-----w- c:\users\bernard\AppData\Roaming\vlc
2013-05-26 06:37 . 2013-02-21 17:11 22752 ----a-w- c:\windows\system32\PCloudBroom64.exe
2013-05-25 16:23 . 2013-05-31 13:03 -------- d-----w- c:\users\bernard\AppData\Roaming\Tlapia
2013-05-24 15:52 . 2013-05-24 16:07 -------- d-----w- c:\programdata\HitmanPro
2013-05-23 07:52 . 2013-05-23 07:52 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2013-05-23 07:52 . 2013-05-23 07:52 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2013-05-23 07:52 . 2013-05-23 07:52 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2013-05-23 07:52 . 2013-05-23 07:52 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2013-05-23 07:52 . 2013-05-23 07:52 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2013-05-23 07:52 . 2013-05-26 06:37 -------- d-----w- c:\program files (x86)\QuickTime
2013-05-15 05:01 . 2013-04-10 06:01 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2013-05-12 20:01 . 2013-05-12 20:02 -------- d-----w- c:\users\administrateur 2\AppData\Local\Microsoft Games
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-05-31 13:03 . 2012-04-30 13:14 866720 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
2013-05-31 13:03 . 2010-12-02 03:07 788896 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-05-29 14:47 . 2010-12-02 03:08 971680 ----a-w- c:\windows\system32\deployJava1.dll
2013-05-29 14:47 . 2010-12-02 03:08 311200 ----a-w- c:\windows\system32\javaws.exe
2013-05-29 14:47 . 2010-12-02 03:08 188832 ----a-w- c:\windows\system32\javaw.exe
2013-05-29 14:47 . 2010-12-02 03:08 188320 ----a-w- c:\windows\system32\java.exe
2013-05-27 05:20 . 2012-06-06 04:35 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-05-27 05:20 . 2011-08-19 06:51 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-05-15 16:42 . 2011-07-12 15:52 75016696 ----a-w- c:\windows\system32\MRT.exe
2013-05-08 14:13 . 2012-07-17 12:37 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-05-02 00:06 . 2011-07-13 07:04 278800 ------w- c:\windows\system32\MpSigStub.exe
2013-05-01 01:59 . 2013-05-01 01:59 94208 ----a-w- c:\windows\SysWow64\QuickTimeVR.qtx
2013-05-01 01:59 . 2013-05-01 01:59 69632 ----a-w- c:\windows\SysWow64\QuickTime.qts
2013-04-13 05:49 . 2013-05-15 05:01 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-04-13 05:49 . 2013-05-15 05:01 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-04-13 05:49 . 2013-05-15 05:01 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-04-13 05:49 . 2013-05-15 05:01 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-04-13 04:45 . 2013-05-15 05:01 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-04-13 04:45 . 2013-05-15 05:01 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-04-12 14:45 . 2013-04-24 06:00 1656680 ----a-w- c:\windows\system32\drivers\ntfs.sys
2013-04-11 14:22 . 2011-06-10 23:58 770384 ----a-w- c:\windows\SysWow64\msvcr100.dll
2013-04-11 14:22 . 2011-06-10 23:58 421200 ----a-w- c:\windows\SysWow64\msvcp100.dll
2013-04-02 14:09 . 2013-04-02 14:09 4550656 ----a-w- c:\windows\SysWow64\GPhotos.scr
2013-04-01 16:35 . 2013-03-14 07:58 12872 ----a-w- c:\windows\system32\bootdelete.exe
2013-03-19 06:04 . 2013-04-10 08:59 5550424 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-03-19 05:46 . 2013-04-10 08:59 43520 ----a-w- c:\windows\system32\csrsrv.dll
2013-03-19 05:04 . 2013-04-10 08:59 3968856 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-03-19 05:04 . 2013-04-10 08:59 3913560 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-03-19 04:47 . 2013-04-10 08:59 6656 ----a-w- c:\windows\SysWow64\apisetschema.dll
2013-03-19 03:06 . 2013-04-10 08:59 112640 ----a-w- c:\windows\system32\smss.exe
2013-03-16 07:49 . 2013-03-16 07:49 97280 ----a-w- c:\windows\system32\mshtmled.dll
2013-03-16 07:49 . 2013-03-16 07:49 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-03-16 07:49 . 2013-03-16 07:49 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-03-16 07:49 . 2013-03-16 07:49 81408 ----a-w- c:\windows\system32\icardie.dll
2013-03-16 07:49 . 2013-03-16 07:49 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-03-16 07:49 . 2013-03-16 07:49 762368 ----a-w- c:\windows\system32\ieapfltr.dll
2013-03-16 07:49 . 2013-03-16 07:49 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-03-16 07:49 . 2013-03-16 07:49 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-03-16 07:49 . 2013-03-16 07:49 62976 ----a-w- c:\windows\system32\pngfilt.dll
2013-03-16 07:49 . 2013-03-16 07:49 61952 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-03-16 07:49 . 2013-03-16 07:49 599552 ----a-w- c:\windows\system32\vbscript.dll
2013-03-16 07:49 . 2013-03-16 07:49 523264 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-03-16 07:49 . 2013-03-16 07:49 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-03-16 07:49 . 2013-03-16 07:49 51200 ----a-w- c:\windows\system32\imgutil.dll
2013-03-16 07:49 . 2013-03-16 07:49 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-03-16 07:49 . 2013-03-16 07:49 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-03-16 07:49 . 2013-03-16 07:49 452096 ----a-w- c:\windows\system32\dxtmsft.dll
2013-03-16 07:49 . 2013-03-16 07:49 441856 ----a-w- c:\windows\system32\html.iec
2013-03-16 07:49 . 2013-03-16 07:49 38400 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-03-16 07:49 . 2013-03-16 07:49 361984 ----a-w- c:\windows\SysWow64\html.iec
2013-03-16 07:49 . 2013-03-16 07:49 281600 ----a-w- c:\windows\system32\dxtrans.dll
2013-03-16 07:49 . 2013-03-16 07:49 27648 ----a-w- c:\windows\system32\licmgr10.dll
2013-03-16 07:49 . 2013-03-16 07:49 270848 ----a-w- c:\windows\system32\iedkcs32.dll
2013-03-16 07:49 . 2013-03-16 07:49 247296 ----a-w- c:\windows\system32\webcheck.dll
2013-03-16 07:49 . 2013-03-16 07:49 235008 ----a-w- c:\windows\system32\url.dll
2013-03-16 07:49 . 2013-03-16 07:49 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-03-16 07:49 . 2013-03-16 07:49 226304 ----a-w- c:\windows\system32\elshyph.dll
2013-03-16 07:49 . 2013-03-16 07:49 216064 ----a-w- c:\windows\system32\msls31.dll
2013-03-16 07:49 . 2013-03-16 07:49 197120 ----a-w- c:\windows\system32\msrating.dll
2013-03-16 07:49 . 2013-03-16 07:49 185344 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-03-16 07:49 . 2013-03-16 07:49 173568 ----a-w- c:\windows\system32\ieUnatt.exe
2013-03-16 07:49 . 2013-03-16 07:49 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-03-16 07:49 . 2013-03-16 07:49 158720 ----a-w- c:\windows\SysWow64\msls31.dll
2013-03-16 07:49 . 2013-03-16 07:49 1509376 ----a-w- c:\windows\system32\inetcpl.cpl
2013-03-16 07:49 . 2013-03-16 07:49 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-03-16 07:49 . 2013-03-16 07:49 149504 ----a-w- c:\windows\system32\occache.dll
2013-03-16 07:49 . 2013-03-16 07:49 144896 ----a-w- c:\windows\system32\wextract.exe
2013-03-16 07:49 . 2013-03-16 07:49 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-03-16 07:49 . 2013-03-16 07:49 1400416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-03-16 07:49 . 2013-03-16 07:49 138752 ----a-w- c:\windows\SysWow64\wextract.exe
2013-03-16 07:49 . 2013-03-16 07:49 13824 ----a-w- c:\windows\system32\mshta.exe
2013-03-16 07:49 . 2013-03-16 07:49 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-03-16 07:49 . 2013-03-16 07:49 136192 ----a-w- c:\windows\system32\iepeers.dll
2013-03-16 07:49 . 2013-03-16 07:49 135680 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-03-16 07:49 . 2013-03-16 07:49 12800 ----a-w- c:\windows\SysWow64\mshta.exe
2013-03-16 07:49 . 2013-03-16 07:49 12800 ----a-w- c:\windows\system32\msfeedssync.exe
2013-03-16 07:49 . 2013-03-16 07:49 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-03-16 07:49 . 2013-03-16 07:49 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-03-16 07:49 . 2013-03-16 07:49 102912 ----a-w- c:\windows\system32\inseng.dll
2013-02-01 16:32 . 2013-02-01 16:31 3993600 ----a-w- c:\program files (x86)\GUTF4CA.tmp
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les �l�ments vides & les �l�ments initiaux l�gitimes ne sont pas list�s
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2012-12-09 13:57 222712 ----a-w- c:\users\bernard\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2012-12-09 13:57 222712 ----a-w- c:\users\bernard\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2012-12-09 13:57 222712 ----a-w- c:\users\bernard\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\SkyDriveShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-12-02 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2013-06-09 1226928]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0PCloudBroom64.exe \systemroot\system32\BroomData.bit
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe"
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
.
R0 CFRMD;CFRMD; [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 BDSandBox;BDSandBox;c:\windows\system32\drivers\bdsandbox.sys;c:\windows\SYSNATIVE\drivers\bdsandbox.sys [x]
R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 cymfltrService;Cypress Trackpad Filter Driver;c:\windows\system32\DRIVERS\cymfltr.sys;c:\windows\SYSNATIVE\DRIVERS\cymfltr.sys [x]
R3 HideMyIpSRV;HideMyIpSRV;c:\program files (x86)\Hide My IP\HideMyIpSrv.exe;c:\program files (x86)\Hide My IP\HideMyIpSrv.exe [x]
R3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys;c:\windows\SYSNATIVE\drivers\Impcd.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys;c:\windows\SYSNATIVE\Drivers\TFsExDisk.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [x]
R4 BdDesktopParental;Bitdefender Desktop Parental Control;c:\program files\Bitdefender\Bitdefender 2013\bdparentalservice.exe;c:\program files\Bitdefender\Bitdefender 2013\bdparentalservice.exe [x]
R4 McComponentHostServiceSony;McAfee Security Scan Component Host Service for Sony;c:\program files (x86)\Sony\MSS\3.0.271\McCHSvc.exe;c:\program files (x86)\Sony\MSS\3.0.271\McCHSvc.exe [x]
R4 PDFProFiltSrv;PDFProFiltSrv;c:\program files (x86)\Nuance\PDF Professional 5\PDFProFiltSrv.exe;c:\program files (x86)\Nuance\PDF Professional 5\PDFProFiltSrv.exe [x]
R4 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [x]
R4 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x]
R4 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [x]
R4 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [x]
R4 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [x]
R4 SpfService;VAIO Entertainment Common Service;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [x]
R4 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [x]
R4 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe;c:\program files\Sony\VAIO Power Management\SPMService.exe [x]
R4 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [x]
R4 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [x]
R4 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [x]
R4 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [x]
R4 VCService;VCService;c:\program files\Sony\VAIO Care\VCService.exe;c:\program files\Sony\VAIO Care\VCService.exe [x]
S0 avc3;avc3;c:\windows\system32\DRIVERS\avc3.sys;c:\windows\SYSNATIVE\DRIVERS\avc3.sys [x]
S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys;c:\windows\SYSNATIVE\DRIVERS\fltsrv.sys [x]
S0 gzflt;gzflt;c:\windows\system32\DRIVERS\gzflt.sys;c:\windows\SYSNATIVE\DRIVERS\gzflt.sys [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 vidsflt61;Acronis Disk Storage Filter (61);c:\windows\system32\DRIVERS\vsflt61.sys;c:\windows\SYSNATIVE\DRIVERS\vsflt61.sys [x]
S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys;c:\windows\SYSNATIVE\drivers\avgtpx64.sys [x]
S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys;c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [x]
S1 bdfwfpf;bdfwfpf;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [x]
S1 BDVEDISK;BDVEDISK;c:\windows\system32\DRIVERS\bdvedisk.sys;c:\windows\SYSNATIVE\DRIVERS\bdvedisk.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 Uim_VIM;UIM Virtual Image Plugin;c:\windows\system32\Drivers\uim_vimx64.sys;c:\windows\SYSNATIVE\Drivers\uim_vimx64.sys [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 regi;regi;c:\windows\system32\drivers\regi.sys;c:\windows\SYSNATIVE\drivers\regi.sys [x]
S2 rimspci;rimspci;c:\windows\system32\DRIVERS\rimspe64.sys;c:\windows\SYSNATIVE\DRIVERS\rimspe64.sys [x]
S2 risdpcie;risdpcie;c:\windows\system32\DRIVERS\risdpe64.sys;c:\windows\SYSNATIVE\DRIVERS\risdpe64.sys [x]
S2 risdsnpe;risdsnpe;c:\windows\system32\DRIVERS\risdsne64.sys;c:\windows\SYSNATIVE\DRIVERS\risdsne64.sys [x]
S2 SafeBox;SafeBox;c:\program files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe;c:\program files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 sysTPLMonitor.exe;sysTPLMonitor;c:\program files (x86)\sysTPL\sysTPLMonitor.exe;c:\program files (x86)\sysTPL\sysTPLMonitor.exe [x]
S2 sysTPLService.exe;sysTPLService;c:\program files (x86)\sysTPL\sysTPLService.exe;c:\program files (x86)\sysTPL\sysTPLService.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [x]
S2 UPDATESRV;Bitdefender Desktop Update Service;c:\program files\Bitdefender\Bitdefender 2013\updatesrv.exe;c:\program files\Bitdefender\Bitdefender 2013\updatesrv.exe [x]
S2 vToolbarUpdater15.2.0;vToolbarUpdater15.2.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe [x]
S3 5U876UVC;Sony Visual Communication Camera;c:\windows\system32\DRIVERS\5U876.sys;c:\windows\SYSNATIVE\DRIVERS\5U876.sys [x]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys;c:\windows\SYSNATIVE\DRIVERS\ArcSoftKsUFilter.sys [x]
S3 avchv;avchv Function Driver;c:\windows\system32\DRIVERS\avchv.sys;c:\windows\SYSNATIVE\DRIVERS\avchv.sys [x]
S3 avckf;avckf;c:\windows\system32\DRIVERS\avckf.sys;c:\windows\SYSNATIVE\DRIVERS\avckf.sys [x]
S3 cyhid;Cypress Input Device;c:\windows\system32\DRIVERS\cyhid.sys;c:\windows\SYSNATIVE\DRIVERS\cyhid.sys [x]
S3 cykbfltrService;Cypress Keyboard Filter Driver;c:\windows\system32\DRIVERS\cykbfltr.sys;c:\windows\SYSNATIVE\DRIVERS\cykbfltr.sys [x]
S3 ManyCam;ManyCam Virtual Webcam;c:\windows\system32\DRIVERS\mcvidrv_x64.sys;c:\windows\SYSNATIVE\DRIVERS\mcvidrv_x64.sys [x]
S3 mcaudrv_simple;ManyCam Virtual Microphone;c:\windows\system32\drivers\mcaudrv_x64.sys;c:\windows\SYSNATIVE\drivers\mcaudrv_x64.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\drivers\SFEP.sys;c:\windows\SYSNATIVE\drivers\SFEP.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [x]
S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update\VUAgent.exe;c:\program files\Sony\VAIO Update\VUAgent.exe [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
.
.
Contenu du dossier 'T�ches planifi�es'
.
2013-06-10 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-06 05:20]
.
2013-06-02 c:\windows\Tasks\COMODO System Cleaner Update.job
- c:\program files (x86)\COMODO\COMODO System-Cleaner\UpdateApplications.exe [2010-03-09 13:41]
.
2013-06-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3179023005-3890681670-4049502869-1001Core.job
- c:\users\bernard\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-05 15:17]
.
2013-06-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3179023005-3890681670-4049502869-1001UA.job
- c:\users\bernard\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-05 15:17]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2012-12-09 13:56 261624 ----a-w- c:\users\bernard\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2012-12-09 13:56 261624 ----a-w- c:\users\bernard\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2012-12-09 13:56 261624 ----a-w- c:\users\bernard\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2012-12-17 18:50 755816 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2012-12-17 18:50 755816 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2012-12-17 18:50 755816 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2012-12-17 18:50 755816 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\__SafeBox1]
@="{152C96EB-288E-4EDC-B7C6-D21F8250ADF3}"
[HKEY_CLASSES_ROOT\CLSID\{152C96EB-288E-4EDC-B7C6-D21F8250ADF3}]
2013-02-27 13:43 269200 ----a-w- c:\program files\Bitdefender\Bitdefender Safebox\safeboxshell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\__SafeBox2]
@="{342DAA0B-D796-460D-8566-901E08A1CCAD}"
[HKEY_CLASSES_ROOT\CLSID\{342DAA0B-D796-460D-8566-901E08A1CCAD}]
2013-02-27 13:43 269200 ----a-w- c:\program files\Bitdefender\Bitdefender Safebox\safeboxshell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\__SafeBox3]
@="{57595DAE-1AE1-4D97-A49E-67CBB53B52DF}"
[HKEY_CLASSES_ROOT\CLSID\{57595DAE-1AE1-4D97-A49E-67CBB53B52DF}]
2013-02-27 13:43 269200 ----a-w- c:\program files\Bitdefender\Bitdefender Safebox\safeboxshell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\__SafeBox4]
@="{33816773-98AE-4723-ADE0-EBE54C8B5A67}"
[HKEY_CLASSES_ROOT\CLSID\{33816773-98AE-4723-ADE0-EBE54C8B5A67}]
2013-02-27 13:43 269200 ----a-w- c:\program files\Bitdefender\Bitdefender Safebox\safeboxshell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Bdagent"="c:\program files\Bitdefender\Bitdefender 2013\bdagent.exe" [2013-04-24 1569536]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Examen suppl�mentaire -------
.
uLocal Page = c:\windows\system32\blank.htm
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyServer = http=127.0.0.1:8877;https=127.0.0.1:8877
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Ouvrir avec Nuance PDF Converter 5.0 - c:\program files (x86)\Nuance\PDF Professional 5\cnvres_fre.dll /100
TCP: DhcpNameServer = 192.168.1.1
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.2.0\ViProtocol.dll
FF - ProfilePath - c:\users\bernard\AppData\Roaming\Mozilla\Firefox\Profiles\ejd2yfws.default\
.
- - - - ORPHELINS SUPPRIMES - - - -
.
BHO-{95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
Toolbar-{95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
SafeBoot-17939322.sys
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-3179023005-3890681670-4049502869-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-3179023005-3890681670-4049502869-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_202.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System*]
"OOSE05.00.00.01PRO"="E3ED81D95D290620B23534C543D74A24F8AF8BCA5662560D619B19E687C1E91A434194B92ACDFCEA1C0B249CBE71988296E0C2053D37BB8C2ADCA9397E1FD10244C7D15229C8BA8D006C7D9637695F4D7437DE980A97D9DF0AA53F2C89E1AAB96D0A3F30D7B7815C0017A89B94A110C96BC449E72D4A745434FDE2C143D62BBEFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74C5D575E7D6A3B98088EDD5E5BE2F6E667A6171C11EC38DE3D9DB7CE019D40AA5C0A1A713CF49BA8E605D387E8FADAF5BB2DC6B8BBB46456D5161DEDCCE158B11C3BCA7E7B3C04C00CA2401BA5D43405D982EA51278C63D15A7A06943590AB5EC06339E27BF1976E2BA58B6D97C2B10A7CA22059D94CF2C18D35CB1158D07B8626357120D661178F4A16B51E79B617D158127A34C9AE7F8471E037298B49F6B93A8510FADEB89785E526D095B70B81AE947A220A22D6467E78C0A4625580220F5D4EC8FC170A8135EC27057C74F95BF8CCA454C3C1C75A178EB8860B7165D49DE62FE0F3B9CC910AC00F0FC10522688A928361133A6A23BA8E5162B1504AB901A1E7336FB159D8F0B9FABB97F1073EC16828ACE9D20ADAD84BB6D0AB946251DB49DFAD46A0EFBC5A22286E737B114581C64D2E7E05588F6308BB001015C9EFD191A05210DAB2F4BC3A7AA08F8F8BBD309ACCF3CC80E82655FED4303CDFFABD8C20D7B72BE8A70E13B3F7DBEBD626B6B843A69C14A73453275C99B6CFB1D935B68FD508B786B8E9D836CBC047297218891480DCD7111723594248FCAE7FA92603EC93821CA5B5BC91DB4501AB93699A9555A07DDE06517371C4420180F01635253AA9780169CF0FC1B5D76460D9E5CB54447359348608F6F3ED0A53B3E02B59D56E554FD22B9C3E72C49846F3EF288EBE8F8863A7C444B6EF394A9875DEDADFD1F1F804C276197B33814396B9005297D4DC141D4BA7EF0A7198500CBCAEF9E65AA59A22C78DA1CA945538D74765EB7118C26F2076485E228F728B79BF484262B258E44D98E379042C21772176B4E17910CC9319C4F54101DF9C92427A56D09B24D224BAB4A2C65614372B9EE5B282E146FB22C616B2B3FD7DE61C5C2EB9A7AC7CCCCAB65B251540695D1B8FF65780AF4B455E7F0CB6B0420A91074F5F842B060A75EF1D12FCD0184ED0B8C551D174BDAF8EB1A98EEB174EA8D0D23BD47EA56A24EE4BE1236DCC8467BE15AADC82D9B88C35A542C86F2E7480CE264F9BA34574A04F3D0B9AF0BF85DFCB68B7C9800FA2F989EC5AA9151D5B3DA7C85103A3998C5F9F45334AB2C569E48D0DFC0A93575297CE589464E2EFFD0E6DA71BA0E199753E5F8B87C693D955A78F821ED23A5B6F09BC622B7014972BA724D319CAF49CC0A20057CAE828E1435ED16AD01F25267A7380"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000001
"MSCurrentCountry"=dword:0000003d
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:0000003d
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Heure de fin: 2013-06-10 06:52:09
ComboFix-quarantined-files.txt 2013-06-10 04:52
ComboFix2.txt 2013-06-07 12:22
.
Avant-CF: 105�385�844�736 octets libres
Apr�s-CF: 104�716�623�872 octets libres
.
- - End Of File - - 4CBF7E54A323BC5C08EDF5F8755BFE99
D41D8CD98F00B204E9800998ECF8427E

Publicité


Signaler le contenu de ce document

Publicité