cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ComboFix 15-08-20.01 - KHALED 23/08/2015 22:58:57.1.2 - x86
Microsoft Windows 7 Professionnel 6.1.7600.0.1252.33.1036.18.1970.813 [GMT 1:00]
Lancé depuis: c:\windows\system32\config\systemprofile\Desktop\ComboFix.exe
AV: AVG Internet Security 2015 *Disabled/Updated* {4D41356F-32AD-7C42-C820-63775EE4F413}
FW: AVG Internet Security 2015 *Enabled* {757AB44A-78C2-7D1A-E37F-CA42A037B368}
SP: AVG Internet Security 2015 *Disabled/Updated* {F620D48B-1497-73CC-F290-58052563BEAE}
* Un nouveau point de restauration a été créé
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Movies App\Datamngr
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2015-07-23 au 2015-08-23 ))))))))))))))))))))))))))))))))))))
.
.
2015-08-23 22:08 . 2015-08-23 22:10 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\temp
2015-08-23 21:36 . 2015-08-23 21:36 -------- d-----w- C:\TDSSKiller_Quarantine
2015-08-16 21:21 . 2015-08-16 21:21 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\Unity
2015-08-16 21:15 . 2015-08-16 21:15 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\Apple Computer
2015-08-15 21:57 . 2010-05-26 10:41 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2015-08-15 21:57 . 2010-05-26 10:41 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll
2015-08-15 21:52 . 2015-08-15 21:52 -------- d-----w- c:\programdata\Package Cache
2015-08-15 21:47 . 2015-08-22 21:52 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Roaming\Kodi
2015-08-15 21:43 . 2015-08-15 21:47 -------- d-----w- c:\program files\Kodi
2015-08-15 19:36 . 2015-08-15 19:37 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\Viber
2015-08-15 11:49 . 2015-08-16 14:32 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Roaming\Nitro PDF
2015-08-14 20:22 . 2015-08-14 20:22 -------- dc-h--w- c:\programdata\{651038AD-E038-410A-BD90-28FB006FD850}
2015-08-14 20:22 . 2015-08-23 22:08 -------- d-----w- c:\program files\ITbrain Agent
2015-08-14 20:22 . 2015-08-14 20:22 -------- d-----w- c:\users\Default\AppData\Local\PackageAware
2015-08-14 15:25 . 2015-08-14 15:25 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Roaming\GenuineRegistryDoctor
2015-08-14 15:17 . 2015-08-14 15:17 -------- d-----w- c:\users\Default\AppData\Roaming\dll-files.com
2015-08-13 23:36 . 2015-08-13 23:36 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\TeamViewer
2015-08-13 23:31 . 2015-08-13 23:31 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Roaming\TeamViewer
2015-08-13 23:31 . 2015-08-15 19:13 -------- d-----w- c:\program files\TeamViewer
2015-08-13 22:39 . 2015-08-13 22:39 -------- d-----w- C:\Spacekace
2015-08-04 22:34 . 2015-08-04 22:34 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\Adobe
2015-08-04 22:22 . 2015-08-04 22:41 -------- d-----w- c:\program files\Recuva
2015-08-03 22:56 . 2015-08-03 22:58 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Roaming\Wise Data Recovery
2015-08-03 22:56 . 2015-08-03 22:56 -------- d-----w- c:\program files\Wise
2015-08-03 22:56 . 2015-08-03 22:56 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\Programs
2015-08-03 22:28 . 2015-08-03 22:28 -------- d-----w- c:\users\KHALED\AppData\Local\Avg
2015-08-03 22:18 . 2015-08-03 22:18 -------- d-sh--w- c:\windows\system32\%APPDATA%
2015-08-02 22:59 . 2015-08-03 21:14 -------- d-----w- c:\programdata\BlueStacksSetup
2015-08-02 22:59 . 2015-08-02 22:59 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\Bluestacks
2015-08-02 22:17 . 2015-08-02 22:17 -------- d-----w- c:\program files\CCcamUser
2015-08-01 21:40 . 2015-08-06 13:48 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Roaming\vlc
2015-08-01 21:02 . 2015-08-01 21:02 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\Macromedia
2015-08-01 21:00 . 2015-08-01 21:06 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\Mozilla
2015-08-01 10:53 . 2012-10-12 18:09 22912 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2015-08-01 10:47 . 2015-08-01 10:47 -------- d-----w- c:\programdata\IObit
2015-08-01 10:47 . 2015-08-01 10:47 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Roaming\IObit
2015-08-01 10:47 . 2015-08-01 10:47 -------- d-----w- c:\program files\IObit
2015-07-31 22:03 . 2015-07-31 22:03 -------- d-----w- c:\windows\system32\config\systemprofile\Tracing
2015-07-31 22:01 . 2015-07-31 22:01 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\Skype
2015-07-31 22:01 . 2015-08-23 21:57 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Roaming\Skype
2015-07-31 13:58 . 2015-07-31 13:58 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Roaming\TuneUp Software
2015-07-31 13:54 . 2015-07-31 13:54 -------- d-----w- c:\windows\system32\%LOCALAPPDATA%
2015-07-31 13:27 . 2015-07-31 13:27 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\Opera
2015-07-31 13:18 . 2015-07-31 13:18 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Roaming\dll-files.com
2015-07-31 13:14 . 2015-07-31 13:14 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\Vitalwerks
2015-07-31 13:10 . 2015-07-31 13:10 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\CyberLink
2015-07-31 13:10 . 2015-08-15 17:39 351 ----a-w- C:\prefs.js
2015-07-31 13:10 . 2015-07-31 14:08 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\AVG Web TuneUp
2015-07-31 13:10 . 2015-07-31 13:10 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Roaming\Zbshareware Lab
2015-07-31 13:09 . 2015-07-31 13:09 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\Google
2015-07-31 13:08 . 2015-08-14 18:52 -------- d-----w- c:\users\TEMP
2015-07-31 00:15 . 2015-07-31 13:50 -------- d-----w- c:\program files\7-Zip
2015-07-29 18:06 . 2015-07-29 18:06 -------- d-----w- C:\drivers
2015-07-29 17:19 . 2015-03-10 18:19 25768 ----a-w- c:\windows\system32\drivers\Smb_driver_Intel.sys
2015-07-29 17:19 . 2015-01-23 13:29 177320 ----a-w- c:\windows\system32\SynTPCo20.dll
2015-07-29 17:19 . 2015-01-23 13:29 205992 ----a-w- c:\windows\system32\SynTPAPI.dll
2015-07-29 17:19 . 2015-01-23 13:29 408744 ----a-w- c:\windows\system32\SynCOM.dll
2015-07-29 17:19 . 2015-01-23 13:28 434344 ----a-w- c:\windows\system32\drivers\SynTP.sys
2015-07-29 17:17 . 2005-08-03 15:05 35892 ----a-w- c:\windows\system32\SER9PL.sys
2015-07-29 17:17 . 2005-08-03 15:04 26719 ----a-w- c:\windows\system32\SERSPL.VXD
2015-07-29 17:15 . 2015-07-29 17:15 -------- d-----w- c:\program files\Cypress
2015-07-29 17:15 . 2012-06-15 11:53 13824 ----a-w- c:\windows\system32\drivers\cykbfltr.sys
2015-07-29 17:14 . 2013-10-17 19:02 139776 ----a-w- c:\windows\system32\drivers\ser2pl.sys
2015-07-29 17:14 . 2013-10-28 10:13 363480 ----a-w- c:\windows\system32\drivers\IntcDAud.sys
2015-07-29 16:51 . 2015-08-23 21:11 -------- d-sh--w- c:\users\KHALED\IntelGraphicsProfiles
2015-07-29 16:28 . 2015-03-30 00:09 813840 ----a-w- c:\windows\system32\drivers\iusb3xhc.sys
2015-07-29 16:27 . 2013-11-01 10:04 3237888 ----a-w- c:\windows\system32\drivers\athr.sys
2015-07-29 16:26 . 2015-05-19 10:29 1941248 ----a-w- c:\windows\system32\drivers\rtsuvc.sys
2015-07-29 16:26 . 2012-08-03 10:49 34800 ----a-w- c:\windows\system32\drivers\clwvd.sys
2015-07-29 16:26 . 2015-05-19 10:29 495360 ----a-w- c:\windows\system32\RtCamX.dll
2015-07-29 16:26 . 2015-05-19 10:29 1980672 ----a-w- c:\windows\system32\RsDecode.dll
2015-07-29 16:25 . 2015-05-19 10:29 1917696 ----a-w- c:\windows\RtCamU.exe
2015-07-29 16:24 . 2015-05-06 14:39 232960 ----a-w- c:\windows\system32\igfxCPL.cpl
2015-07-29 16:24 . 2015-05-06 14:39 4093880 ----a-w- c:\windows\system32\drivers\igdkmd32.sys
2015-07-29 16:22 . 2015-05-06 14:39 373760 ----a-w- c:\windows\system32\igdbcl32.dll
2015-07-29 16:21 . 2015-07-29 16:21 -------- d-----w- c:\program files\Synaptics
2015-07-29 16:17 . 2015-07-29 16:17 -------- d-----w- c:\program files\Apoint2K
2015-07-29 16:17 . 2013-07-13 15:13 417584 ----a-w- c:\windows\system32\drivers\Apfiltr.sys
2015-07-29 16:17 . 2013-02-28 17:29 122688 ----a-w- c:\windows\system32\Vxdif.dll
2015-07-29 16:15 . 2014-09-24 08:31 7044952 ----a-w- c:\windows\system32\DDPP32A.dll
2015-07-29 16:15 . 2014-09-24 08:31 274264 ----a-w- c:\windows\system32\DDPO32A.dll
2015-07-29 16:15 . 2014-09-24 08:31 1490264 ----a-w- c:\windows\system32\DDPD32A.dll
2015-07-29 16:15 . 2014-09-24 08:31 221528 ----a-w- c:\windows\system32\DDPA32.dll
2015-07-29 16:14 . 2015-05-26 13:59 2072039 ----a-w- c:\windows\system32\drivers\RTAIODAT.DAT
2015-07-29 16:14 . 2014-08-14 16:16 5804772 ----a-w- c:\windows\system32\drivers\rtvienna.dat
2015-07-29 16:14 . 2015-05-18 11:47 2637528 ----a-w- c:\windows\system32\RTSndMgr.cpl
2015-07-29 16:14 . 2015-01-19 15:10 72113152 ----a-w- c:\windows\system32\RCoRes.dat
2015-07-29 16:14 . 2015-05-26 15:55 3500248 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2015-07-29 16:14 . 2015-05-15 16:27 2630872 ----a-w- c:\windows\system32\RtkPgExt.dll
2015-07-29 16:14 . 2015-05-26 14:26 1706712 ----a-w- c:\windows\system32\RtkCoInstII.dll
2015-07-29 16:14 . 2015-05-26 10:42 2531544 ----a-w- c:\windows\system32\RltkAPO.dll
2015-07-29 16:14 . 2015-05-20 13:14 2393816 ----a-w- c:\windows\system32\RtkApoApi.dll
2015-07-29 16:14 . 2014-04-10 09:19 1940056 ----a-w- c:\windows\system32\MaxxAudioEQ.dll
2015-07-29 16:14 . 2015-03-08 09:21 2806808 ----a-w- c:\windows\system32\FMAPO.dll
2015-07-29 16:14 . 2014-06-06 21:00 519368 ----a-w- c:\windows\system32\AERTACap.dll
2015-07-29 16:13 . 2015-03-26 19:01 27376 ----a-w- c:\windows\system32\drivers\iaStorF.sys
2015-07-29 16:13 . 2015-03-26 19:01 1935600 ----a-w- c:\windows\system32\drivers\iaStorA.sys
2015-07-29 16:12 . 2015-01-15 11:42 76872 ----a-w- c:\windows\system32\RtNicProp32.dll
2015-07-29 16:12 . 2015-01-15 11:42 723160 ----a-w- c:\windows\system32\drivers\Rt86win7.sys
2015-07-29 16:12 . 2013-12-10 06:27 86488 ----a-w- c:\windows\system32\drivers\TeeDriver.sys
2015-07-29 16:12 . 2010-08-17 22:28 22040 ----a-w- c:\windows\system32\drivers\ICCWDT.sys
2015-07-29 16:12 . 2009-09-09 09:23 42496 ----a-w- c:\windows\system32\drivers\flashud.sys
2015-07-29 16:12 . 2013-12-10 06:27 1629040 ----a-w- c:\windows\system32\WdfCoInstaller01011.dll
2015-07-29 16:11 . 2015-01-21 21:51 230104 ----a-w- c:\windows\system32\drivers\RtsP2Stor.sys
2015-07-29 16:11 . 2014-10-20 01:50 73432 ----a-w- c:\windows\system32\RtCRX.dll
2015-07-29 16:11 . 2014-01-26 21:39 9889496 ----a-w- c:\windows\system32\RsCRIcon.dll
2015-07-29 16:11 . 2015-03-02 07:22 501376 ----a-w- c:\windows\system32\drivers\btfilter.sys
2015-07-29 10:10 . 2015-07-29 10:10 -------- d---a-r- C:\$RECYCLEBIN
2015-07-28 22:28 . 2015-07-28 22:28 -------- d-----w- c:\program files\DIFX
2015-07-28 22:28 . 2015-07-28 22:28 -------- d-----w- c:\program files\GZ_Utek
2015-07-28 10:02 . 2015-07-28 10:02 250288 ----a-w- c:\windows\system32\drivers\avgidsdriverx.sys
2015-07-28 10:02 . 2015-07-28 10:02 186800 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2015-07-24 22:39 . 2015-07-24 22:39 -------- d-----w- C:\SocketeQ
2015-07-24 22:14 . 2015-07-24 23:15 -------- d-----w- c:\programdata\DWinManProD
2015-07-24 22:11 . 2015-07-24 22:11 -------- d-----w- c:\users\KHALED\AppData\Roaming\istartsurf
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-08-13 16:27 . 2015-04-07 19:37 780488 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2015-08-13 16:27 . 2015-04-07 19:37 142536 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2015-07-23 15:44 . 2015-07-23 15:44 31664 ----a-w- c:\windows\system32\drivers\avgidsshimx.sys
2015-07-15 00:12 . 2015-07-13 18:12 96352 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2015-07-09 06:05 . 2015-07-09 06:05 68032 ----a-w- c:\windows\system32\drivers\avgfwd6x.sys
2015-06-16 13:54 . 2015-06-16 13:54 207328 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2015-06-10 21:08 . 2015-06-10 21:08 6112072 ----a-w- c:\windows\system32\usbaaplrc.dll
2015-06-10 21:08 . 2015-06-10 21:08 45056 ----a-w- c:\windows\system32\drivers\usbaapl.sys
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
2015-07-22 19:16 2426256 ----a-w- c:\program files\AVG Web TuneUp\4.1.5.143\AVG Web TuneUp.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2012-10-01 18:33 1720976 ----a-w- c:\progra~1\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-10-01 18:33 1720976 ----a-w- c:\progra~1\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-10-01 18:33 1720976 ----a-w- c:\progra~1\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2015-05-20 12205784]
"RtHDVBg_LENOVO_MICPKEY"="c:\program files\Realtek\Audio\HDA\RtHDVBg.exe" [2015-04-28 1015512]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2015-05-06 412776]
"USB Security"="c:\program files\USB Disk Security\USBGuard.exe" [2013-05-29 670920]
"YouCam Service"="c:\program files\CyberLink\YouCam\YouCamService.exe" [2011-09-09 247016]
"CancelAutoPlay_byt"="c:\program files\Mobiconnect\CancelAutoPlay_byt.exe" [2012-12-03 431432]
"UIExec"="c:\program files\Mobiconnect\UIExec.exe" [2012-12-03 157000]
"AVG_UI"="c:\program files\AVG\AVG2015\avgui.exe" [2015-07-31 3780520]
"vProt"="c:\program files\AVG Web TuneUp\vprot.exe" [2015-07-22 3175312]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2015-05-15 60712]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2015-07-11 157992]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2015-06-08 334896]
"VideoLAN"="c:\windows\system32\wscript.exe" [2009-07-14 141824]
"C-cleaner"="c:\windows\system32\wscript.exe" [2009-07-14 141824]
"RtHDVBg_Dolby"="c:\program files\Realtek\Audio\HDA\RtHDVBg.exe" [2015-04-28 1015512]
"RtHDVBg_LENOVO_DOLBYDRAGON"="c:\program files\Realtek\Audio\HDA\RtHDVBg.exe" [2015-04-28 1015512]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2013-07-13 522584]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"SynchronousMachineGroupPolicy"= 0 (0x0)
"SynchronousUserGroupPolicy"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
"AntiSpyWareDisableNotify"=dword:00000001
.
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2015\avgidsagent.exe [2015-07-31 3633576]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2015-06-25 327296]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2013-05-02 83864]
R3 gzu_tek;gzu_tek-win32 - Kernel Driver 01/01/2013 1.0.0.0;c:\windows\system32\DRIVERS\gzu_tek.sys [2012-02-09 42592]
R3 IntcDAud;Son Intel(R) pour écrans;c:\windows\system32\DRIVERS\IntcDAud.sys [2013-10-28 363480]
R3 massfilter;Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [2011-08-29 9216]
R3 Ser2plx86;Prolific Serial port WDF driver;c:\windows\system32\DRIVERS\ser2pl.sys [2013-10-17 139776]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2013-05-02 181912]
S0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys [2015-05-12 190944]
S0 Avglogx;AVG Logging Driver;c:\windows\system32\DRIVERS\avglogx.sys [2015-05-07 290272]
S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [2015-03-20 35808]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys [2015-03-26 1935600]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys [2015-03-26 27376]
S0 iusb3hcs;Pilote de commutateur de contrôleur d'hôte Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys [2013-07-17 16880]
S1 Avgdiskx;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiskx.sys [2015-03-11 132576]
S1 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwd6x.sys [2015-07-09 68032]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [2015-07-28 250288]
S1 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [2015-07-23 31664]
S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [2015-06-16 207328]
S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [2015-05-12 213984]
S2 avgfws;Pare-feu AVG;c:\program files\AVG\AVG2015\avgfws.exe [2015-07-31 1560592]
S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2015\avgwdsvc.exe [2015-07-31 335656]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2015-05-01 1394816]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2015-05-01 1772672]
S2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service;c:\windows\system32\igfxCUIService.exe [2015-05-06 291432]
S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2010-05-04 503080]
S2 NitroDriverReadSpool8;NitroPDFDriverCreatorReadSpool8;c:\program files\Nitro\Pro 8\NitroPDFDriverService8.exe [2012-12-13 196616]
S2 NoIPDUCService4;NO-IP DUC v4.1.0;c:\program files\No-IP\ducservice.exe [2014-05-02 11776]
S2 UI Assistant Service;UI Assistant Service;c:\program files\Mobiconnect\AssistantServices.exe [2012-12-03 275784]
S2 vToolbarUpdater18.8.0;vToolbarUpdater18.8.0;c:\program files\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\ToolbarUpdater.exe [2015-07-22 1874320]
S2 WindowsMangerProtect;WindowsMangerProtect Service;c:\programdata\DWinManProD\ProtectWindowsManager.exe [2015-07-24 435880]
S2 WtuSystemSupport;WtuSystemSupport;c:\program files\AVG Web TuneUp\WtuSystemSupport.exe [2015-07-22 1195920]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys [2014-04-27 27896]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [2015-03-02 501376]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [2012-08-03 34800]
S3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT);c:\windows\system32\DRIVERS\ICCWDT.sys [2010-08-17 22040]
S3 int0800;Intel 28F320C3 Flash Update Device Driver v6.4;c:\windows\system32\DRIVERS\flashud.sys [2009-09-09 42496]
S3 iusb3xhc;Pilote du contrôleur d'hôte extensible Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys [2015-03-30 813840]
S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys [2015-01-21 230104]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2015-01-15 723160]
S3 rtsuvc;Lenovo EasyCamera;c:\windows\system32\DRIVERS\rtsuvc.sys [2015-05-19 1941248]
.
.
--- Autres Services/Pilotes en mémoire ---
.
*NewlyCreated* - 83282261
*NewlyCreated* - WS2IFSL
*Deregistered* - 83282261
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-08-22 09:40 993608 ----a-w- c:\program files\Google\Chrome\Application\44.0.2403.157\Installer\chrmstp.exe
.
Contenu du dossier 'Tâches planifiées'
.
2015-08-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-07 16:27]
.
2015-08-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2015-04-10 11:22]
.
2015-08-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2015-04-10 11:22]
.
.
------- Examen supplémentaire -------
.
mStart Page = hxxp://www.istartsurf.com/?type=hp&ts=1437775837&z=ae18e91d0d04f42c5c58f9fgezccdmfmem4wbmetco&from=cor&uid=TOSHIBAXMQ01ABF050_94BVT3BOTXX94BVT3BOT
TCP: DhcpNameServer = 192.168.1.1 192.168.1.1
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
FF - ProfilePath - c:\windows\System32\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\nkbjz569.default\
.
- - - - ORPHELINS SUPPRIMES - - - -
.
HKLM-Run-BlueStacks Agent - c:\program files\BlueStacks\HD-Agent.exe
SafeBoot-83282261.sys
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_19_0_0_142_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_19_0_0_142_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\TeamViewer\TeamViewer_Service.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
c:\program files\Realtek\Audio\HDA\FMAPP.exe
c:\program files\iPod\bin\iPodService.exe
c:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
c:\windows\system32\igfxEM.exe
c:\windows\system32\igfxHK.exe
c:\windows\system32\sppsvc.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
.
**************************************************************************
.
Heure de fin: 2015-08-23 23:15:02 - La machine a redémarré
ComboFix-quarantined-files.txt 2015-08-23 22:15
.
Avant-CF: 165 054 779 392 octets libres
Après-CF: 164 729 233 408 octets libres
.
- - End Of File - - 444A5A581BED8E7C2AA91115322A0BF5
A36C5E4F47E84449FF07ED3517B43A31

Publicité


Signaler le contenu de ce document

Publicité