ComboFix 17-10-17.01 - David 08/11/2017 13:55:53.3.4 - x64
Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.7602.6184 [GMT 1:00]
Lancé depuis: e:\desktop\ComboFix.exe
Commutateurs utilisés :: e:\desktop\CFScript.txt
AV: Avira Antivirus *Disabled/Updated* {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Emsisoft Anti-Malware *Disabled/Outdated* {2F44E1F9-850B-1C7A-0E56-EB2E0A3E20C9}
AV: Microsoft Security Essentials *Disabled/Updated* {71A27EC9-3DA6-45FC-60A7-004F623C6189}
SP: Avira Antivirus *Disabled/Updated* {0897D159-75B7-14C4-2E4A-2FC449B26D32}
SP: Emsisoft Anti-Malware *Disabled/Outdated* {9425001D-A331-13F4-34E6-D05C71B96A74}
SP: Microsoft Security Essentials *Disabled/Updated* {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
Une copie infectée de c:\windows\SysWow64\Version.dll a été trouvée et désinfectée
Copie restaurée à partir de - c:\windows\erdnt\cache86\version.dll
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2017-10-08 au 2017-11-08 ))))))))))))))))))))))))))))))))))))
.
.
2017-11-08 13:45 . 2017-11-08 13:47 -------- d-----w- c:\users\David\AppData\Local\temp
2017-11-08 13:45 . 2017-11-08 13:45 -------- d-----w- c:\users\Default\AppData\Local\temp
2017-11-08 11:21 . 2017-10-30 09:27 13771264 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F37ECA84-D09D-4CA1-839F-B3E2D698A91F}\mpengine.dll
2017-11-07 11:10 . 2017-10-30 09:27 13771264 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2017-11-02 17:47 . 2017-11-02 17:47 -------- d-----w- c:\users\David\AppData\Local\Avira Operations Gmbh & Co. KG
2017-11-02 17:47 . 2017-11-02 17:47 -------- d-----w- c:\users\David\AppData\Local\Avira_Operations_Gmbh_&_C
2017-10-26 10:31 . 2017-10-26 10:31 -------- d-----w- c:\users\David\AppData\Local\Performix_LLC
2017-10-26 10:31 . 2017-03-22 00:50 63728 ----a-w- c:\windows\system32\drivers\adgnetworktdidrv.sys
2017-10-26 10:31 . 2017-10-26 10:31 260 ----a-w- c:\windows\SysWow64\drivers\vwifikerneldrv.sys
2017-10-26 10:31 . 2017-10-26 10:31 260 ----a-w- c:\windows\SysWow64\d3dx9_11.dll.tmp
2017-10-26 10:31 . 2017-11-08 13:47 -------- d-----w- c:\programdata\Adguard
2017-10-26 10:31 . 2017-10-26 10:31 -------- d-----w- c:\users\David\AppData\Roaming\Performix LLC
2017-10-26 10:31 . 2017-11-08 13:46 -------- d-----w- c:\program files (x86)\Adguard
2017-10-18 20:05 . 2017-10-18 20:05 -------- d-----w- c:\users\David\AppData\Local\Chromium
2017-10-18 19:57 . 2017-10-18 19:57 -------- d-----w- c:\users\David\AppData\Local\VS Revo Group
2017-10-18 19:57 . 2017-10-18 19:57 -------- d-----w- c:\programdata\VS Revo Group
2017-10-18 19:57 . 2016-12-21 12:52 40240 ----a-w- c:\windows\system32\drivers\revoflt.sys
2017-10-12 23:16 . 2017-10-12 23:16 126925120 -c--a-w- c:\windows\system32\MRT-KB890830.exe
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2017-11-08 13:45 . 2015-04-14 17:22 65536 ----a-w- c:\windows\system32\spu_storage.bin
2017-10-25 11:05 . 2016-09-29 10:16 803328 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2017-10-25 11:05 . 2016-09-29 10:16 144896 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2017-10-14 13:56 . 2017-03-03 22:24 194272 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2017-10-12 23:15 . 2016-02-03 20:15 126925120 -c--a-w- c:\windows\system32\MRT.exe
2017-10-03 09:38 . 2015-10-21 13:01 192216 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2017-09-29 19:35 . 2017-09-29 19:35 1057976 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F2636A6D-4ECF-4C81-93F8-9C448D344C4B}\gapaengine.dll
2017-09-14 20:25 . 2017-03-03 22:24 151128 ----a-w- c:\windows\system32\drivers\avipbb.sys
2017-09-13 15:08 . 2017-10-12 14:28 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2017-08-19 15:28 . 2017-09-14 20:27 197120 ----a-w- c:\windows\system32\shdocvw.dll
2017-08-17 16:35 . 2010-11-21 03:27 544424 ------w- c:\windows\system32\MpSigStub.exe
2017-08-16 15:29 . 2017-09-14 20:27 806912 ----a-w- c:\windows\system32\usp10.dll
2017-08-16 15:10 . 2017-09-14 20:27 629760 ----a-w- c:\windows\SysWow64\usp10.dll
2017-08-15 15:29 . 2017-09-14 20:27 14182400 ----a-w- c:\windows\system32\shell32.dll
2017-08-15 15:29 . 2017-09-14 20:27 1867264 ----a-w- c:\windows\system32\ExplorerFrame.dll
2017-08-15 15:10 . 2017-09-14 20:27 1499648 ----a-w- c:\windows\SysWow64\ExplorerFrame.dll
2017-08-14 17:35 . 2017-09-14 20:27 2150912 ----a-w- c:\windows\SysWow64\mmcndmgr.dll
2017-08-14 17:35 . 2017-09-14 20:27 303104 ----a-w- c:\windows\SysWow64\mmcbase.dll
2017-08-14 17:35 . 2017-09-14 20:27 128512 ----a-w- c:\windows\SysWow64\mmcshext.dll
2017-08-14 17:35 . 2017-09-14 20:27 172544 ----a-w- c:\windows\SysWow64\cic.dll
2017-08-14 17:35 . 2017-09-14 20:27 3203584 ----a-w- c:\windows\system32\mmcndmgr.dll
2017-08-14 17:35 . 2017-09-14 20:27 355328 ----a-w- c:\windows\system32\mmcbase.dll
2017-08-14 17:35 . 2017-09-14 20:27 131072 ----a-w- c:\windows\system32\mmcshext.dll
2017-08-14 17:34 . 2017-09-14 20:27 211968 ----a-w- c:\windows\system32\cic.dll
2017-08-13 21:37 . 2017-09-14 20:27 2144256 ----a-w- c:\windows\system32\mmc.exe
2017-08-13 21:30 . 2017-09-14 20:27 1401344 ----a-w- c:\windows\SysWow64\mmc.exe
2017-08-11 17:49 . 2017-01-29 19:12 110144 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2017-08-11 06:35 . 2017-09-14 20:27 757248 ----a-w- c:\windows\system32\win32spl.dll
2017-08-11 06:35 . 2017-09-14 20:27 313856 ----a-w- c:\windows\system32\Wldap32.dll
2017-08-11 06:35 . 2017-09-14 20:27 25600 ----a-w- c:\windows\system32\winnsi.dll
2017-08-11 06:35 . 2017-09-14 20:27 512000 ----a-w- c:\windows\system32\rpcss.dll
2017-08-11 06:35 . 2017-09-14 20:27 346112 ----a-w- c:\windows\system32\ntprint.dll
2017-08-11 06:35 . 2017-09-14 20:27 26112 ----a-w- c:\windows\system32\nsisvc.dll
2017-08-11 06:35 . 2017-09-14 20:27 2065408 ----a-w- c:\windows\system32\ole32.dll
2017-08-11 06:35 . 2017-09-14 20:27 13312 ----a-w- c:\windows\system32\nsi.dll
2017-08-11 06:35 . 2017-09-14 20:27 26112 ----a-w- c:\windows\system32\oleres.dll
2017-08-11 06:34 . 2017-09-14 20:27 971776 ----a-w- c:\windows\system32\localspl.dll
2017-08-11 06:34 . 2017-09-14 20:27 8704 ----a-w- c:\windows\system32\comcat.dll
2017-08-11 06:20 . 2017-09-14 20:27 61952 ----a-w- c:\windows\system32\ntprint.exe
2017-08-11 06:19 . 2017-09-14 20:27 497664 ----a-w- c:\windows\SysWow64\win32spl.dll
2017-08-11 06:19 . 2017-09-14 20:27 271360 ----a-w- c:\windows\SysWow64\Wldap32.dll
2017-08-11 06:19 . 2017-09-14 20:27 16384 ----a-w- c:\windows\SysWow64\winnsi.dll
2017-08-11 06:19 . 2017-09-14 20:27 8704 ----a-w- c:\windows\SysWow64\nsi.dll
2017-08-11 06:19 . 2017-09-14 20:27 299008 ----a-w- c:\windows\SysWow64\ntprint.dll
2017-08-11 06:19 . 2017-09-14 20:27 1417728 ----a-w- c:\windows\SysWow64\ole32.dll
2017-08-11 06:19 . 2017-09-14 20:27 26112 ----a-w- c:\windows\SysWow64\oleres.dll
2017-08-11 06:12 . 2017-09-14 20:27 25088 ----a-w- c:\windows\system32\netbtugc.exe
2017-08-11 06:09 . 2017-09-14 20:27 61952 ----a-w- c:\windows\SysWow64\ntprint.exe
2017-08-11 06:03 . 2017-09-14 20:27 26624 ----a-w- c:\windows\SysWow64\netbtugc.exe
2017-08-11 06:01 . 2017-09-14 20:27 7168 ----a-w- c:\windows\SysWow64\comcat.dll
2017-08-11 06:00 . 2017-09-14 20:27 262656 ----a-w- c:\windows\system32\drivers\netbt.sys
2017-08-11 05:58 . 2017-09-14 20:27 26112 ----a-w- c:\windows\system32\drivers\nsiproxy.sys
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2015-02-26 5583120]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2017-09-20 9856176]
"BingSvc"="c:\users\David\AppData\Local\Microsoft\BingSvc\BingSvc.exe" [2015-11-05 144008]
"Adguard"="c:\program files (x86)\Adguard\Adguard.exe" [2017-10-25 5717264]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2017-07-21 587288]
"Avira System Speedup User Starter"="c:\program files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe" [2017-10-05 65120]
"Avira Safe Shopping"="c:\program files (x86)\Avira\Safe Shopping\Avira Safe Shopping.exe" [2017-10-30 546960]
.
c:\users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
zSpeedup.lnk - c:\program files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe -systemready [2017-10-5 65120]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"DisablePersonalDirChange"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 AMD FUEL Service;AMD FUEL Service;c:\program files\AMD\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [x]
R2 AntiVirMailService;Avira Protection e-mail;c:\program files (x86)\Avira\Antivirus\avmailc7.exe;c:\program files (x86)\Avira\Antivirus\avmailc7.exe [x]
R2 AntiVirWebService;Avira Protection Web;c:\program files (x86)\Avira\Antivirus\avwebg7.exe;c:\program files (x86)\Avira\Antivirus\avwebg7.exe [x]
R2 APXACC;AppEx Networks Accelerator LWF;c:\windows\system32\DRIVERS\appexDrv.sys;c:\windows\SYSNATIVE\DRIVERS\appexDrv.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 PaceLicenseDServices;PACE License Services;c:\program files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe;c:\program files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe [x]
R2 TrueKey;Intel Security True Key;c:\program files\TrueKey\McAfee.TrueKey.Service.exe;c:\program files\TrueKey\McAfee.TrueKey.Service.exe [x]
R3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service;c:\program files\DAEMON Tools Lite\DiscSoftBusService.exe;c:\program files\DAEMON Tools Lite\DiscSoftBusService.exe [x]
R3 DrvAgent64;DrvAgent64;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Inspection du réseau Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x]
R3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver;c:\windows\system32\DRIVERS\silabenm.sys;c:\windows\SYSNATIVE\DRIVERS\silabenm.sys [x]
R3 silabser;Silicon Labs CP210x USB to UART Bridge Driver;c:\windows\system32\DRIVERS\silabser.sys;c:\windows\SYSNATIVE\DRIVERS\silabser.sys [x]
R3 TrueKeyServiceHelper;TrueKeyServiceHelper;c:\program files\TrueKey\McAfee.TrueKey.ServiceHelper.exe;c:\program files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 amd_sata;amd_sata;c:\windows\system32\drivers\amd_sata.sys;c:\windows\SYSNATIVE\drivers\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\drivers\amd_xata.sys;c:\windows\SYSNATIVE\drivers\amd_xata.sys [x]
S0 amdide64;amdide64;c:\windows\system32\drivers\amdide64.sys;c:\windows\SYSNATIVE\drivers\amdide64.sys [x]
S0 avdevprot;avdevprot;c:\windows\system32\DRIVERS\avdevprot.sys;c:\windows\SYSNATIVE\DRIVERS\avdevprot.sys [x]
S0 avusbflt;avusbflt;c:\windows\System32\Drivers\avusbflt.sys;c:\windows\SYSNATIVE\Drivers\avusbflt.sys [x]
S1 adgnetworktdidrv;adgnetworktdidrv;c:\windows\system32\drivers\adgnetworktdidrv.sys;c:\windows\SYSNATIVE\drivers\adgnetworktdidrv.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 epp64;epp64;c:\windows\system32\DRIVERS\epp64.sys;c:\windows\SYSNATIVE\DRIVERS\epp64.sys [x]
S2 a2AntiMalware;Emsisoft Protection Service;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe [x]
S2 Adguard Service;Adguard Service;c:\program files (x86)\Adguard\AdguardSvc.exe;c:\program files (x86)\Adguard\AdguardSvc.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AntiVirSchedulerService;Avira Planificateur;c:\program files (x86)\Avira\Antivirus\sched.exe;c:\program files (x86)\Avira\Antivirus\sched.exe [x]
S2 AODDriver4.3;AODDriver4.3;c:\program files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 Apple Mobile Device Service;Apple Mobile Device Service;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [x]
S2 Avira.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe [x]
S2 AviraPhantomVPN;Avira Phantom VPN;c:\program files (x86)\Avira\VPN\Avira.VpnService.exe;c:\program files (x86)\Avira\VPN\Avira.VpnService.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 RtkAudioService;Realtek Audio Service;c:\program files\Realtek\Audio\HDA\RtkAudioService64.exe;c:\program files\Realtek\Audio\HDA\RtkAudioService64.exe [x]
S2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
S2 SpeedupService;Avira System Speedup;c:\program files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe;c:\program files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [x]
S2 TrueKeyScheduler;Intel Security True Key Scheduler;c:\program files\TrueKey\McTkSchedulerService.exe;c:\program files\TrueKey\McTkSchedulerService.exe [x]
S3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\amdhub30.sys;c:\windows\SYSNATIVE\DRIVERS\amdhub30.sys [x]
S3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\amdxhc.sys;c:\windows\SYSNATIVE\DRIVERS\amdxhc.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus;c:\windows\system32\DRIVERS\dtlitescsibus.sys;c:\windows\SYSNATIVE\DRIVERS\dtlitescsibus.sys [x]
S3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
--- Autres Services/Pilotes en mémoire ---
.
*Deregistered* - aswHwid
*Deregistered* - aswMonFlt
*Deregistered* - aswRdr
*Deregistered* - aswRvrt
*Deregistered* - aswSnx
*Deregistered* - aswSP
*Deregistered* - aswStm
*Deregistered* - aswVmm
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr QWAVE wcncsvc
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-03-29 13513288]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2016-11-14 1353680]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2017-07-14 303928]
.
------- Examen supplémentaire -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 212.27.40.241 212.27.40.240
FF - ProfilePath - c:\users\David\AppData\Roaming\Mozilla\Firefox\Profiles\68dj33pw.default-1508928585493\
FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/
.
- - - - ORPHELINS SUPPRIMES - - - -
.
AddRemove-Bleep VSTi - e:\native instruments\Plugs - VST\uninstall.exe
AddRemove-{4771539a-931b-4378-8d4a-721ba62effca} - c:\programdata\Package Cache\{4771539a-931b-4378-8d4a-721ba62effca}\Avira.OE.Setup.Bundle.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\PaceLicenseDServices]
"ImagePath"="\"c:\program files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe\" -u https://activation.paceap.com/InitiateActivation"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Autres processus actifs ------------------------
.
c:\program files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe
c:\program files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe
c:\program files (x86)\Avira\Antivirus\avguard.exe
c:\program files (x86)\Avira\Antivirus\avgnt.exe
c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
c:\program files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe
c:\users\David\AppData\Local\FluxSoftware\Flux\flux.exe
.
**************************************************************************
.
Heure de fin: 2017-11-08 14:49:43 - La machine a redémarré
ComboFix-quarantined-files.txt 2017-11-08 13:49
ComboFix2.txt 2017-11-07 15:40
.
Avant-CF: 16 455 278 592 octets libres
Après-CF: 15 905 181 696 octets libres
.
- - End Of File - - 7F2C73B0D4E280BD63B47ACB45ECA00E
A36C5E4F47E84449FF07ED3517B43A31