cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ComboFix 16-04-01.01 - g3-h@ckm@n 02/04/2016 22:24:27.1.1 - x64
Microsoft Windows 7 Édition Intégrale 6.1.7601.1.1252.33.1036.18.1536.998 [GMT 2:00]
Lancé depuis: c:\users\g3-h@ckm@n\Desktop\ComboFix.exe
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\g3-h@ckm@n\AppData\Roaming\FolderName
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2016-03-02 au 2016-04-02 ))))))))))))))))))))))))))))))))))))
.
.
2016-04-02 20:54 . 2016-04-02 20:54 -------- d-----w- c:\users\Default\AppData\Local\temp
2016-04-02 19:09 . 2016-04-02 19:09 -------- d---a-w- C:\DrWeb Quarantine
2016-03-30 22:29 . 2016-03-31 06:03 -------- d-----w- c:\users\g3-h@ckm@n\Doctor Web
2016-03-30 17:18 . 2016-03-30 17:30 -------- d-----w- C:\Pre_Scan
2016-03-30 09:26 . 2016-03-30 09:26 -------- d-----w- c:\users\g3-h@ckm@n\AppData\Local\GWX
2016-03-30 08:11 . 2016-04-02 19:09 -------- d-sh--w- c:\programdata\fiza6qgz63a
2016-03-30 07:57 . 2016-04-02 19:09 -------- d-----w- c:\users\g3-h@ckm@n\AppData\Roaming\dmvduota
2016-03-30 07:34 . 2016-03-30 08:18 -------- d-----w- c:\users\g3-h@ckm@n\AppData\Roaming\069D3B7E-7F89-4FB0-B497-F196A8294D40
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-02-28 15:35 . 2016-02-28 15:35 146614896 ----a-w- c:\windows\system32\MRT.exe
2016-02-28 14:41 . 2016-02-28 14:41 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2016-02-28 14:41 . 2016-02-28 14:41 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2016-02-28 14:41 . 2016-02-28 14:41 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2016-02-28 14:41 . 2016-02-28 14:41 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2016-02-28 14:41 . 2016-02-28 14:41 235008 ----a-w- c:\windows\system32\elshyph.dll
2016-02-28 14:41 . 2016-02-28 14:41 1950720 ----a-w- c:\windows\SysWow64\wininet.dll
2016-02-28 14:41 . 2016-02-28 14:41 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2016-02-28 14:41 . 2016-02-28 14:41 60416 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2016-02-28 14:41 . 2016-02-28 14:41 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2016-02-28 14:41 . 2016-02-28 14:41 62464 ----a-w- c:\windows\SysWow64\iesetup.dll
2016-02-28 14:41 . 2016-02-28 14:41 341504 ----a-w- c:\windows\SysWow64\html.iec
2016-02-28 14:41 . 2016-02-28 14:41 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2016-02-28 14:41 . 2016-02-28 14:41 2052608 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2016-02-28 14:41 . 2016-02-28 14:41 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2016-02-28 14:41 . 2016-02-28 14:41 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2016-02-28 14:41 . 2016-02-28 14:41 1155072 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2016-02-28 14:41 . 2016-02-28 14:41 503808 ----a-w- c:\windows\SysWow64\vbscript.dll
2016-02-28 14:41 . 2016-02-28 14:41 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb
2016-02-28 14:41 . 2016-02-28 14:41 115712 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2016-02-28 14:41 . 2016-02-28 14:41 64000 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2016-02-28 14:41 . 2016-02-28 14:41 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2016-02-28 14:41 . 2016-02-28 14:41 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2016-02-28 14:41 . 2016-02-28 14:41 47616 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll
2016-02-28 14:41 . 2016-02-28 14:41 942592 ----a-w- c:\windows\system32\jsIntl.dll
2016-02-28 14:41 . 2016-02-28 14:41 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2016-02-28 14:41 . 2016-02-28 14:41 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2016-02-28 14:41 . 2016-02-28 14:41 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2016-02-28 14:41 . 2016-02-28 14:41 814080 ----a-w- c:\windows\system32\jscript9diag.dll
2016-02-28 14:41 . 2016-02-28 14:41 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2016-02-28 14:41 . 2016-02-28 14:41 633856 ----a-w- c:\windows\system32\ieui.dll
2016-02-28 14:41 . 2016-02-28 14:41 620032 ----a-w- c:\windows\SysWow64\jscript9diag.dll
2016-02-28 14:41 . 2016-02-28 14:41 6026240 ----a-w- c:\windows\system32\jscript9.dll
2016-02-28 14:41 . 2016-02-28 14:41 54784 ----a-w- c:\windows\system32\jsproxy.dll
2016-02-28 14:41 . 2016-02-28 14:41 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2016-02-28 14:41 . 2016-02-28 14:41 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2016-02-28 14:41 . 2016-02-28 14:41 48640 ----a-w- c:\windows\system32\mshtmler.dll
2016-02-28 14:41 . 2016-02-28 14:41 4305920 ----a-w- c:\windows\SysWow64\jscript9.dll
2016-02-28 14:41 . 2016-02-28 14:41 2885632 ----a-w- c:\windows\system32\iertutil.dll
2016-02-28 14:41 . 2016-02-28 14:41 247808 ----a-w- c:\windows\system32\msls31.dll
2016-02-28 14:41 . 2016-02-28 14:41 2426880 ----a-w- c:\windows\system32\wininet.dll
2016-02-28 14:41 . 2016-02-28 14:41 199680 ----a-w- c:\windows\system32\msrating.dll
2016-02-28 14:41 . 2016-02-28 14:41 1545728 ----a-w- c:\windows\system32\urlmon.dll
2016-02-28 14:41 . 2016-02-28 14:41 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2016-02-28 14:41 . 2016-02-28 14:41 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2016-02-28 14:41 . 2016-02-28 14:41 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2016-02-28 14:41 . 2016-02-28 14:41 105984 ----a-w- c:\windows\system32\iesysprep.dll
2016-02-28 14:41 . 2016-02-28 14:41 14404096 ----a-w- c:\windows\system32\ieframe.dll
2016-02-28 14:41 . 2016-02-28 14:41 92160 ----a-w- c:\windows\system32\mshtmled.dll
2016-02-28 14:41 . 2016-02-28 14:41 88064 ----a-w- c:\windows\system32\MshtmlDac.dll
2016-02-28 14:41 . 2016-02-28 14:41 816640 ----a-w- c:\windows\system32\jscript.dll
2016-02-28 14:41 . 2016-02-28 14:41 81408 ----a-w- c:\windows\system32\icardie.dll
2016-02-28 14:41 . 2016-02-28 14:41 801280 ----a-w- c:\windows\system32\msfeeds.dll
2016-02-28 14:41 . 2016-02-28 14:41 800768 ----a-w- c:\windows\system32\ieapfltr.dll
2016-02-28 14:41 . 2016-02-28 14:41 77824 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2016-02-28 14:41 . 2016-02-28 14:41 77312 ----a-w- c:\windows\system32\tdc.ocx
2016-02-28 14:41 . 2016-02-28 14:41 720384 ----a-w- c:\windows\system32\ie4uinit.exe
2016-02-28 14:41 . 2016-02-28 14:41 66560 ----a-w- c:\windows\system32\iesetup.dll
2016-02-28 14:41 . 2016-02-28 14:41 62464 ----a-w- c:\windows\system32\pngfilt.dll
2016-02-28 14:41 . 2016-02-28 14:41 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2016-02-28 14:41 . 2016-02-28 14:41 584192 ----a-w- c:\windows\system32\vbscript.dll
2016-02-28 14:41 . 2016-02-28 14:41 490496 ----a-w- c:\windows\system32\dxtmsft.dll
2016-02-28 14:41 . 2016-02-28 14:41 48640 ----a-w- c:\windows\system32\ieetwproxystub.dll
2016-02-28 14:41 . 2016-02-28 14:41 48128 ----a-w- c:\windows\system32\imgutil.dll
2016-02-28 14:41 . 2016-02-28 14:41 417792 ----a-w- c:\windows\system32\html.iec
2016-02-28 14:41 . 2016-02-28 14:41 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2016-02-28 14:41 . 2016-02-28 14:41 389840 ----a-w- c:\windows\system32\iedkcs32.dll
2016-02-28 14:41 . 2016-02-28 14:41 34304 ----a-w- c:\windows\system32\iernonce.dll
2016-02-28 14:41 . 2016-02-28 14:41 316928 ----a-w- c:\windows\system32\dxtrans.dll
2016-02-28 14:41 . 2016-02-28 14:41 30208 ----a-w- c:\windows\system32\licmgr10.dll
2016-02-28 14:41 . 2016-02-28 14:41 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2016-02-28 14:41 . 2016-02-28 14:41 24917504 ----a-w- c:\windows\system32\mshtml.dll
2016-02-28 14:41 . 2016-02-28 14:41 243200 ----a-w- c:\windows\system32\webcheck.dll
2016-02-28 14:41 . 2016-02-28 14:41 235520 ----a-w- c:\windows\system32\url.dll
2016-02-28 14:41 . 2016-02-28 14:41 2125824 ----a-w- c:\windows\system32\inetcpl.cpl
2016-02-28 14:41 . 2016-02-28 14:41 167424 ----a-w- c:\windows\system32\iexpress.exe
2016-02-28 14:41 . 2016-02-28 14:41 147968 ----a-w- c:\windows\system32\occache.dll
2016-02-28 14:41 . 2016-02-28 14:41 144384 ----a-w- c:\windows\system32\ieUnatt.exe
2016-02-28 14:41 . 2016-02-28 14:41 143872 ----a-w- c:\windows\system32\wextract.exe
2016-02-28 14:41 . 2016-02-28 14:41 13824 ----a-w- c:\windows\system32\mshta.exe
2016-02-28 14:41 . 2016-02-28 14:41 1359360 ----a-w- c:\windows\system32\mshtmlmedia.dll
2016-02-28 14:41 . 2016-02-28 14:41 135680 ----a-w- c:\windows\system32\iepeers.dll
2016-02-28 14:41 . 2016-02-28 14:41 114688 ----a-w- c:\windows\system32\ieetwcollector.exe
2016-02-28 14:41 . 2016-02-28 14:41 101376 ----a-w- c:\windows\system32\inseng.dll
2016-01-22 06:27 . 2016-02-26 10:25 5573056 ----a-w- c:\windows\system32\ntoskrnl.exe
2016-01-22 06:27 . 2016-02-26 10:25 154560 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2016-01-22 06:27 . 2016-02-26 10:25 95680 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2016-01-22 06:24 . 2016-02-26 10:25 1733592 ----a-w- c:\windows\system32\ntdll.dll
2016-01-22 06:20 . 2016-02-26 10:25 362496 ----a-w- c:\windows\system32\wow64win.dll
2016-01-22 06:20 . 2016-02-26 10:25 243712 ----a-w- c:\windows\system32\wow64.dll
2016-01-22 06:20 . 2016-02-26 10:25 13312 ----a-w- c:\windows\system32\wow64cpu.dll
2016-01-22 06:20 . 2016-02-26 10:25 215040 ----a-w- c:\windows\system32\winsrv.dll
2016-01-22 06:20 . 2016-02-26 10:25 210432 ----a-w- c:\windows\system32\wdigest.dll
2016-01-22 06:20 . 2016-02-26 10:25 86528 ----a-w- c:\windows\system32\TSpkg.dll
2016-01-22 06:20 . 2016-02-26 10:25 28672 ----a-w- c:\windows\system32\sspisrv.dll
2016-01-22 06:20 . 2016-02-26 10:25 135680 ----a-w- c:\windows\system32\sspicli.dll
2016-01-22 06:20 . 2016-02-26 10:25 503808 ----a-w- c:\windows\system32\srcore.dll
2016-01-22 06:20 . 2016-02-26 10:25 50176 ----a-w- c:\windows\system32\srclient.dll
2016-01-22 06:19 . 2016-02-26 10:13 14179840 ----a-w- c:\windows\system32\shell32.dll
2016-01-22 06:19 . 2016-02-26 10:25 28160 ----a-w- c:\windows\system32\secur32.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2012-10-01 19:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-10-01 19:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-10-01 19:38 1720976 ----a-w- c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 VBoxGuest;VirtualBox Guest Driver;c:\windows\system32\DRIVERS\VBoxGuest.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxGuest.sys [x]
S1 VBoxSF;VirtualBox Shared Folders;c:\windows\system32\drivers\VBoxSF.sys;c:\windows\SYSNATIVE\drivers\VBoxSF.sys [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 VBoxService;VirtualBox Guest Additions Service;c:\windows\system32\VBoxService.exe;c:\windows\SYSNATIVE\VBoxService.exe [x]
S3 VBoxMouse;VirtualBox Guest Mouse Service;c:\windows\system32\DRIVERS\VBoxMouse.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxMouse.sys [x]
S3 VBoxVideo;VBoxVideo;c:\windows\system32\DRIVERS\VBoxVideo.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxVideo.sys [x]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2012-10-01 19:37 2322576 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2012-10-01 19:37 2322576 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2012-10-01 19:37 2322576 ----a-w- c:\progra~1\MICROS~2\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VBoxTray"="c:\windows\system32\VBoxTray.exe" [2016-01-19 1746704]
.
------- Examen supplémentaire -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = https://www.google.com/
mLocal Page = c:\windows\System32\blank.htm
uInternet Settings,ProxyOverride = *.local
TCP: DhcpNameServer = 8.8.8.4 8.8.8.8
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
.
- - - - ORPHELINS SUPPRIMES - - - -
.
AddRemove-AutoItv3 - c:\program files (x86)\AutoIt3\Uninstall.exe
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Heure de fin: 2016-04-02 23:28:30
ComboFix-quarantined-files.txt 2016-04-02 21:28
.
Avant-CF: 2 503 057 408 octets libres
Après-CF: 2 568 884 224 octets libres
.
- - End Of File - - D29B66C8557A8D5966FDC31A1B094447
A36C5E4F47E84449FF07ED3517B43A31

Publicité


Signaler le contenu de ce document

Publicité