ComboFix 16-03-07.01 - Jean-Marie 12/03/2016 17:39:29.1.2 - x64 NETWORK Microsoft Windows 8 6.2.9200.0.1252.33.1036.18.3660.2719 [GMT 1:00] Lancé depuis: c:\users\Jean-Marie\Desktop\ComboFix.exe AV: Advanced SystemCare Ultimate *Enabled/Updated* {91A1210C-78DD-A71C-E865-63DB27C767EE} AV: Emsisoft Anti-Malware *Disabled/Outdated* {2F44E1F9-850B-1C7A-0E56-EB2E0A3E20C9} AV: IObit Malware Fighter *Enabled/Outdated* {4D381C57-3C7A-6F22-07EB-639F49E836D4} AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} SP: Emsisoft Anti-Malware *Disabled/Outdated* {9425001D-A331-13F4-34E6-D05C71B96A74} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Un nouveau point de restauration a été créé . . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . . C:\prefs.js c:\programdata\ntuser.pol c:\users\Jean-Marie\AppData\Local\assembly\tmp . . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Service_WiseBootAssistant . . ((((((((((((((((((((((((((((( Fichiers créés du 2016-02-12 au 2016-03-12 )))))))))))))))))))))))))))))))))))) . . 2016-03-12 17:20 . 2016-03-12 17:20 -------- d-----w- c:\users\Default\AppData\Local\temp 2016-03-12 16:33 . 2016-03-12 16:33 -------- d-----w- c:\programdata\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705} 2016-03-12 15:21 . 2016-03-12 15:21 -------- d-----w- c:\program files (x86)\Remo Repair ZIP 2.0 2016-03-12 15:06 . 2016-03-12 15:06 -------- d-----w- c:\program files (x86)\Remo Repair Word 2.0 2016-03-12 15:05 . 2016-03-12 15:05 -------- d-----w- c:\program files (x86)\Remo Repair AVI 2.0 2016-03-12 13:10 . 2015-11-05 14:00 143904 ----a-w- c:\windows\system32\drivers\KeyCrypt64.sys 2016-03-12 13:10 . 2016-03-12 13:10 -------- d-----w- c:\program files (x86)\KeyCryptSDK 2016-03-12 13:10 . 2016-03-12 13:10 -------- d-----w- c:\program files (x86)\Zemana AntiLogger Free 2016-03-12 12:26 . 2016-03-12 12:26 28272 ----a-w- c:\windows\system32\drivers\TrueSight.sys 2016-03-12 12:23 . 2015-01-10 14:32 128288 ----a-w- c:\windows\system32\IObitSmartDefragExtension.dll 2016-03-12 12:23 . 2014-06-04 14:17 34080 ----a-w- c:\windows\system32\SmartDefragBootTime.exe 2016-03-12 12:23 . 2014-06-04 14:17 21184 ----a-w- c:\windows\system32\drivers\SmartDefragDriver.sys 2016-03-12 12:19 . 2016-03-12 12:20 -------- d-----w- c:\program files\DAEMON Tools Lite 2016-03-12 12:18 . 2016-03-12 12:19 -------- d-----w- c:\programdata\DAEMON Tools Lite 2016-03-12 12:16 . 2016-03-12 12:55 -------- d-----w- c:\program files\ByteFence 2016-03-12 10:32 . 2016-03-12 10:32 -------- d-----w- c:\program files (x86)\Common Files\CyberLink 2016-03-12 10:14 . 2016-03-12 10:32 -------- d-----w- c:\program files (x86)\NSIS Uninstall Information 2016-03-12 08:26 . 2016-03-12 13:35 -------- d-----w- c:\program files (x86)\RCP 2016-03-12 08:22 . 2016-03-12 08:22 -------- d-----w- C:\searchplugins 2016-03-12 08:14 . 2016-03-12 08:14 -------- d-----w- c:\program files (x86)\Opera 2016-03-12 08:13 . 2016-02-15 09:36 45992 ----a-w- c:\windows\system32\TURegOpt.exe 2016-03-12 08:13 . 2016-02-15 09:30 37288 ----a-w- c:\windows\system32\authuitu.dll 2016-03-12 08:13 . 2016-02-15 09:30 32680 ----a-w- c:\windows\SysWow64\authuitu.dll 2016-03-12 08:11 . 2016-03-12 08:13 -------- d-----w- c:\program files (x86)\AVG 2016-03-12 08:11 . 2016-03-12 08:13 -------- d-----w- c:\programdata\Avg 2016-03-12 08:09 . 2016-03-12 08:08 425744 ----a-w- c:\windows\system32\LavasoftTcpService64.dll 2016-03-12 08:08 . 2016-03-12 08:08 345360 ----a-w- c:\windows\SysWow64\LavasoftTcpService.dll 2016-03-12 08:08 . 2016-03-12 08:08 -------- d-----w- c:\program files (x86)\Lavasoft 2016-03-12 08:08 . 2016-03-12 08:08 -------- d-----w- c:\program files (x86)\FreeCodecPack 2016-03-12 08:08 . 2016-03-12 08:09 -------- d-----w- c:\program files (x86)\DVDVideoSoft 2016-03-12 08:08 . 2016-03-12 08:09 -------- d-----w- c:\program files (x86)\Common Files\DVDVideoSoft 2016-03-12 08:08 . 2016-03-12 08:08 -------- d-----w- c:\programdata\Lavasoft 2016-03-12 08:04 . 2016-03-12 08:04 -------- d-----w- C:\IDriveLocal 2016-03-12 08:01 . 2016-03-10 15:55 533776 ----a-w- c:\windows\SysWow64\msxml.dll 2016-03-12 08:01 . 2016-03-12 12:07 -------- d-----w- c:\program files (x86)\IDriveWindows 2016-03-12 08:01 . 2016-03-12 08:04 -------- d-----w- c:\programdata\IDrive 2016-03-12 07:27 . 2016-02-23 17:38 21072 ----a-w- c:\windows\system32\drivers\vsscanner.sys 2016-03-11 13:47 . 2016-03-11 13:47 -------- d-----w- c:\programdata\Solvusoft 2016-03-11 13:40 . 2016-03-11 13:40 -------- d-----w- c:\program files (x86)\SupersonicPC 2016-03-11 13:35 . 2016-03-12 12:05 -------- d-----w- C:\UsbFix 2016-03-11 13:17 . 2015-07-02 13:14 20248 ----a-w- c:\windows\system32\roboot64.exe 2016-03-11 13:17 . 2011-02-08 12:29 16896 ----a-w- c:\windows\system32\sasnative64.exe 2016-03-11 13:17 . 2016-03-12 07:20 -------- d-----w- c:\program files (x86)\Advanced System Optimizer 3 2016-03-11 13:17 . 2016-03-11 13:17 -------- d-----w- c:\programdata\Systweak 2016-03-11 13:15 . 2001-09-05 03:18 77824 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ctor.dll 2016-03-11 13:15 . 2001-09-05 03:18 225280 ----a-w- c:\program files (x86)\Common Files\InstallShield\IScript\iscript.dll 2016-03-11 13:15 . 2001-09-05 03:14 176128 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\iuser.dll 2016-03-11 13:15 . 2001-09-05 03:13 32768 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\objectps.dll 2016-03-11 13:15 . 2007-03-13 19:54 610436 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe 2016-03-11 10:43 . 2016-03-11 11:30 1024 ------w- C:\AMTAG.BIN 2016-03-11 10:43 . 2015-12-11 08:57 1920624 ----a-w- c:\windows\ampa.exe 2016-03-11 10:43 . 2015-11-10 08:36 19568 ----a-w- c:\windows\SysWow64\ampa.sys 2016-03-11 10:43 . 2015-11-10 08:36 19568 ----a-w- c:\windows\system32\ampa.sys 2016-03-11 10:42 . 2016-03-11 11:30 -------- d-----w- c:\program files (x86)\AOMEI Partition Assistant Standard Edition 6.0 2016-03-11 10:38 . 2016-03-11 10:38 -------- d-----w- C:\TsTemp 2016-03-11 07:47 . 2016-03-11 07:47 -------- d-----w- c:\program files (x86)\Avanquest update 2016-03-11 07:46 . 2016-03-11 12:56 -------- d-----w- c:\program files (x86)\Common Files\AntiVirus 2016-03-11 07:41 . 2016-03-11 07:41 -------- d-----w- C:\Log 2016-03-11 07:16 . 2016-03-11 12:51 -------- d-----w- c:\program files (x86)\Stellar Phoenix Windows Data Recovery - Professional 2016-03-10 17:35 . 2016-03-10 17:35 -------- d-----w- c:\programdata\BDLogging 2016-03-10 17:35 . 2014-10-15 21:14 452040 ----a-w- c:\windows\system32\drivers\trufos.sys 2016-03-10 17:34 . 2016-03-12 12:47 -------- d-----w- c:\programdata\ProductData 2016-03-10 17:09 . 2016-03-10 17:09 -------- d-s---w- c:\windows\SysWow64\AI_RecycleBin 2016-03-10 16:54 . 2016-03-10 16:54 -------- d-----w- c:\windows\ERUNT 2016-03-10 14:25 . 2016-03-12 10:31 -------- d-----w- c:\program files (x86)\CyberLink 2016-03-10 12:32 . 2016-03-12 13:34 -------- d-----w- C:\UnZacMe 2016-03-09 05:05 . 2015-05-11 14:43 12240 ----a-w- c:\windows\WiseUnlock64.sys 2016-03-09 05:04 . 2016-03-09 05:04 12208 ----a-w- c:\windows\WiseFs64.sys 2016-03-08 18:08 . 2016-03-08 18:54 -------- d-----w- C:\CCE_Quarantine 2016-03-08 17:03 . 2016-03-12 13:43 -------- d-----w- c:\programdata\VoodooShield 2016-03-08 17:03 . 2016-03-12 07:27 -------- d-----w- c:\program files\VoodooShield 2016-03-06 18:56 . 2016-03-06 18:56 -------- d-----w- c:\program files (x86)\ESET 2016-03-06 18:13 . 2016-03-06 18:13 -------- d-----w- c:\program files (x86)\e-Carte Bleue LCL 2016-03-06 16:37 . 2016-03-10 13:33 -------- d-----w- c:\program files (x86)\AdwCleaner 2016-03-06 15:52 . 2016-03-07 12:38 -------- d-----w- C:\SysLogs 2016-03-06 13:57 . 2016-03-12 08:16 -------- d-----w- c:\programdata\Package Cache 2016-03-06 13:56 . 2016-03-12 10:30 -------- d-----w- c:\programdata\SUPPORTDIR 2016-03-06 13:49 . 2016-03-06 13:49 -------- d-----w- c:\programdata\Baidu Cleaner 2016-03-06 06:26 . 2006-11-29 12:06 469264 ----a-w- c:\windows\system32\d3dx10.dll 2016-03-06 06:25 . 2006-03-31 11:41 3927248 ----a-w- c:\windows\system32\d3dx9_30.dll 2016-03-06 06:19 . 2016-03-06 06:19 -------- d-----w- c:\program files (x86)\Micro Application 2016-03-06 06:18 . 2016-03-06 06:18 -------- d-----w- c:\program files (x86)\File Identifier 2016-03-06 06:15 . 2016-03-06 06:15 -------- d-----w- c:\program files (x86)\IMSIDesign 2016-03-06 06:01 . 2016-03-06 06:01 -------- d-----w- c:\program files (x86)\Tenorshare Data Recovery WinPE 2016-03-06 05:59 . 2016-03-07 12:37 -------- d-----w- c:\program files (x86)\Android Data Recovery 2016-03-06 05:57 . 2016-03-07 12:37 -------- d-----w- c:\program files (x86)\Android Data Recovery Pro 2016-03-06 05:56 . 2016-03-09 05:04 -------- d-----w- c:\program files (x86)\Any Data Recovery Pro 2016-03-05 16:07 . 2016-03-08 19:09 -------- d-----w- c:\program files\RogueKiller 2016-03-05 16:07 . 2016-03-05 17:14 -------- d-----w- c:\programdata\RogueKiller 2016-03-05 07:39 . 2016-03-05 07:39 -------- d-----w- c:\program files\Zemana AntiMalware 2016-03-05 07:39 . 2016-03-05 07:52 -------- d-----w- c:\programdata\Zemana AntiMalware 2016-03-05 07:19 . 2016-03-11 07:57 -------- d-----w- c:\program files (x86)\Emsisoft Anti-Malware 2016-03-04 14:38 . 2016-03-04 14:39 -------- d-----w- c:\program files\Reason 2016-03-04 13:21 . 2016-03-04 13:21 -------- d-----w- c:\program files (x86)\Auslogics 2016-03-04 13:10 . 2015-09-15 14:51 149184 ----a-w- c:\windows\system32\drivers\K7Sentry.sys 2016-03-04 13:10 . 2015-01-22 05:39 110544 ----a-w- c:\windows\system32\drivers\K7FWHlpr.sys 2016-03-04 13:10 . 2011-12-29 04:38 22624 ----a-w- c:\windows\system32\K7TSDbg.exe 2016-03-04 13:10 . 2009-04-18 15:31 15904 ----a-w- c:\windows\system32\drivers\K7TdiHlp.sys 2016-03-04 13:09 . 2016-03-12 07:18 -------- d-----w- c:\programdata\K7 Computing 2016-03-04 13:09 . 2016-03-04 13:09 -------- d-----w- c:\program files (x86)\K7 Computing 2016-03-04 07:40 . 2016-03-04 07:40 -------- d-----w- c:\programdata\VS Revo Group 2016-03-04 07:39 . 2009-12-30 09:21 31800 ----a-w- c:\windows\system32\drivers\revoflt.sys 2016-03-04 07:38 . 2016-03-04 07:38 -------- d-----w- c:\program files\VS Revo Group 2016-03-03 09:44 . 2016-03-03 09:44 -------- d-----w- c:\programdata\Panda Security 2016-03-03 09:40 . 2016-02-22 02:03 176096 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2016-03-03 09:40 . 2016-02-22 02:03 826328 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2016-03-03 08:52 . 2014-06-14 14:03 260696 ----a-w- c:\windows\system32\unrar64.dll 2016-03-03 08:42 . 2016-03-12 12:55 -------- d-----w- c:\program files (x86)\MP3jam 2016-03-03 08:20 . 2013-04-29 08:17 47632 ----a-w- c:\windows\system32\drivers\PSKMAD.sys 2016-03-03 08:19 . 2016-03-03 08:19 -------- d-----w- c:\windows\SysWow64\DASBOOT 2016-03-03 08:15 . 2016-03-04 09:27 -------- d-----w- c:\program files\Lavasoft 2016-03-03 08:13 . 2016-03-03 08:13 -------- d-----w- c:\program files (x86)\Panda Security 2016-03-03 07:58 . 2016-03-03 07:58 -------- d-----w- c:\program files (x86)\Panda USB Vaccine 2016-03-03 07:50 . 2015-03-05 05:12 421784 ----a-w- c:\windows\system32\BdSandboxDll64.dll 2016-03-03 07:50 . 2015-03-05 05:12 332320 ----a-w- c:\windows\SysWow64\BdSandboxDll32.dll 2016-03-03 07:34 . 2014-10-23 03:52 89920 ----a-w- c:\windows\system32\drivers\AppProtectEx.sys 2016-03-03 06:55 . 2016-03-07 12:37 -------- d-----w- c:\programdata\RpData 2016-03-03 06:53 . 2016-03-04 09:43 -------- d-----w- c:\programdata\Baidu 2016-03-03 06:41 . 2016-03-03 09:09 -------- d-----w- C:\AVG_Remover 2016-03-01 09:23 . 2016-03-01 09:23 -------- d-----w- C:\sources 2016-02-29 17:16 . 2016-02-29 17:16 -------- d-----w- c:\users\Default\AppData\Roaming\Avanquest 2016-02-29 13:54 . 2013-05-15 17:34 490208 ----a-w- c:\windows\SysWow64\GSService.exe 2016-02-29 13:54 . 2016-02-29 13:54 -------- d-----w- c:\program files (x86)\Online Video Recorder 2016-02-29 13:43 . 2016-02-29 13:43 -------- d-----w- c:\program files (x86)\XviD 2016-02-29 13:43 . 2002-11-08 14:18 51712 ----a-w- c:\windows\SysWow64\MMSwitch.ax . . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2016-02-22 13:14 . 2013-08-22 12:40 40664 ----a-w- c:\windows\system32\drivers\tap0901.sys 2016-02-22 12:33 . 2014-10-07 11:14 826040 ----a-w- c:\windows\system32\drivers\vdbus.sys 2016-02-22 12:33 . 2014-10-07 10:56 1720192 ----a-w- c:\windows\system32\WdfCoInstaller01009.dll 2016-02-21 14:19 . 2014-07-09 12:04 25992 ----a-w- c:\windows\system32\drivers\uim_devim.sys 2016-02-21 14:18 . 2014-07-09 12:04 700296 ----a-w- c:\windows\system32\drivers\uim_im.sys 2016-02-21 14:18 . 2014-07-09 12:04 556296 ----a-w- c:\windows\system32\drivers\UimFIO.sys 2016-02-21 14:18 . 2014-07-09 12:04 102664 ----a-w- c:\windows\system32\drivers\UimBus.sys 2016-02-21 14:17 . 2014-07-09 12:03 1720072 ----a-w- c:\windows\system32\vimsdk.dll 2016-02-21 14:17 . 2014-07-09 12:03 2152176 ----a-w- c:\windows\system32\WudfUpdate_01009.dll 2016-02-21 14:17 . 2014-07-09 12:03 937224 ----a-w- c:\windows\system32\Vim.RWBlock.dll 2016-02-21 14:17 . 2014-07-09 12:03 401672 ----a-w- c:\windows\system32\drivers\UMDF\blockmounter.dll 2016-02-21 14:17 . 2014-07-09 12:03 79112 ----a-w- c:\windows\system32\vimbase.dll 2016-02-18 15:25 . 2012-07-26 08:13 24288 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll . . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Advanced SystemCare Ultimate"="c:\program files (x86)\IObit\Advanced SystemCare Ultimate\ASCTray.exe" [2016-01-15 2427168] "CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2016-02-12 8641240] "ZoneAlarm Backup Startup"="c:\zonealarmbackup\ZABackupStartup.exe" [2010-03-11 177680] "Web Companion"="c:\program files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe" [2016-03-12 1474320] "Power2GoExpress10"="c:\program files (x86)\CyberLink\Power2Go10\Power2GoExpress10.exe" [2016-01-28 3065272] "Chromium"="c:\users\jean-marie\appdata\local\chromium\application\chrome.exe" [2016-01-26 1043456] "DAEMON Tools Lite Automount"="c:\program files\DAEMON Tools Lite\DTAgent.exe" [2016-03-01 4290240] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "AvgUi"="c:\program files (x86)\AVG\Framework\Common\avguirnx.exe" [2016-02-18 179624] "VideoMeetingPlusService"="c:\program files (x86)\CyberLink\VideoMeetingPlus\VideoMeetingPlusService.exe" [2016-02-15 343480] "YouCam Service7"="c:\program files (x86)\CyberLink\YouCam7\YouCamService7.exe" [2015-09-16 458168] "CLMLServer_For_P2G10"="c:\program files (x86)\CyberLink\Power2Go10\CLMLSvc_P2G10.exe" [2016-01-28 110008] "ZALFree"="c:\program files (x86)\Zemana AntiLogger Free\AntiLogger Free.exe" [2015-11-05 8980016] . c:\users\Jean-Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ ZoneAlarm Backup Tray.lnk - c:\zonealarmbackup\ZABackupReg2ini.exe 2 [2016-3-12 280080] . c:\programdata\Microsoft\Windows\Start Menu\Programs\StartUp\ Malwarebytes Anti-Ransomware.lnk - c:\program files\Malwarebytes\Anti-Ransomware\mbarw.exe [2016-2-25 650208] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "EnableUIADesktopToggle"= 0 (0x0) "EnableCursorSuppression"= 1 (0x1) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableSecureUIAPath"= 1 (0x1) . [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoSimpleNetIDList"= 1 (0x1) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) "AppInit_DLLs"=c:\progra~2\KeyCryptSDK\KeyCrypt32(2).dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0bootdelete . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc] @="Service" . R0 AvanquestFltr;AvanquestFltr; [x] R1 epp;epp;f:\bin64\epp.sys;f:\bin64\epp.sys [x] R1 Uim_DEVIM;UIM Direct Device Image Plugin;c:\windows\System32\drivers\uim_devim.sys;c:\windows\SYSNATIVE\drivers\uim_devim.sys [x] R2 K7EmlPxy;K7Computng - EMail Proxy Server;c:\program files (x86)\K7 Computing\K7TSecurity\K7EmlPxy.exe;c:\program files (x86)\K7 Computing\K7TSecurity\K7EmlPxy.exe [x] R2 K7FWSrvc;K7Firewall Services;c:\program files (x86)\K7 Computing\K7TSecurity\K7FWSrvc.exe;c:\program files (x86)\K7 Computing\K7TSecurity\K7FWSrvc.exe [x] R2 K7PSSrvc;K7Privacy Services;c:\program files (x86)\K7 Computing\K7TSecurity\K7PSSrvc.exe;c:\program files (x86)\K7 Computing\K7TSecurity\K7PSSrvc.exe [x] R2 K7RTScan;K7RealTime AntiVirus Services;c:\program files (x86)\K7 Computing\K7TSecurity\K7RTScan.exe;c:\program files (x86)\K7 Computing\K7TSecurity\K7RTScan.exe [x] R3 a2AntiMalware;Emsisoft Protection Service;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe [x] R3 ACT2_Service;Ashampoo Core Tuner 2 Service;c:\program files (x86)\Ashampoo\Ashampoo Core Tuner 2\ACT2Service.exe;c:\program files (x86)\Ashampoo\Ashampoo Core Tuner 2\ACT2Service.exe [x] R3 ampa;ampa;c:\windows\system32\ampa.sys;c:\windows\SYSNATIVE\ampa.sys [x] R3 avchv;avchv Function Driver; [x] R3 BingDesktopUpdate;Bing Desktop Update service;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe;c:\program files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [x] R3 DfSdkS;Service de Défragmentation;c:\program files (x86)\Ashampoo\Ashampoo UnInstaller 6\DfSdkS64.exe;c:\program files (x86)\Ashampoo\Ashampoo UnInstaller 6\DfSdkS64.exe [x] R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x] R3 dtproscsibus;DAEMON Tools Pro Virtual SCSI Bus;c:\windows\System32\drivers\dtproscsibus.sys;c:\windows\SYSNATIVE\drivers\dtproscsibus.sys [x] R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys;c:\windows\SYSNATIVE\epmntdrv.sys [x] R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys;c:\windows\SYSNATIVE\EuGdiDrv.sys [x] R3 GSService;GSService;c:\windows\SysWOW64\GSService.exe;c:\windows\SysWOW64\GSService.exe [x] R3 HitmanProScheduler;HitmanPro Scheduler;c:\program files\HitmanPro\hmpsched.exe;c:\program files\HitmanPro\hmpsched.exe [x] R3 K7RKScan;K7RKScan;c:\program files (x86)\K7 Computing\K7TSecurity\64Bit\K7RKScan.sys;c:\program files (x86)\K7 Computing\K7TSecurity\64Bit\K7RKScan.sys [x] R3 K7SpmSrc;K7SpmSrc;c:\program files (x86)\K7 Computing\K7TSecurity\K7SpmSrc.exe;c:\program files (x86)\K7 Computing\K7TSecurity\K7SpmSrc.exe [x] R3 PDF Architect 4 CrashHandler;PDF Architect 4 CrashHandler;c:\program files\PDF Architect 4\crash-handler-ws.exe;c:\program files\PDF Architect 4\crash-handler-ws.exe [x] R3 PDF Architect 4 Creator;PDF Architect 4 Creator;c:\program files\PDF Architect 4\creator-ws.exe;c:\program files\PDF Architect 4\creator-ws.exe [x] R3 PDF Architect 4;PDF Architect 4;c:\program files\PDF Architect 4\ws.exe;c:\program files\PDF Architect 4\ws.exe [x] R3 PSKMAD;PSKMAD;c:\windows\system32\DRIVERS\PSKMAD.sys;c:\windows\SYSNATIVE\DRIVERS\PSKMAD.sys [x] R3 Rebit-Pro-Svc;Rebit Pro Backup Service;c:\program files\Rebit\Rebit Pro\Rebit-Pro-Svc.exe;c:\program files\Rebit\Rebit Pro\Rebit-Pro-Svc.exe [x] R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x] R3 rsEngineSvc;Reason Core Security Engine Service;c:\program files\Reason\Security\rsEngineSvc.exe;c:\program files\Reason\Security\rsEngineSvc.exe [x] R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x] R3 VoodooShieldService;VoodooShieldService;c:\program files\VoodooShield\VoodooShieldService.exe;c:\program files\VoodooShield\VoodooShieldService.exe [x] R3 VSScanner;VSScanner;c:\windows\system32\DRIVERS\vsscanner.sys;c:\windows\SYSNATIVE\DRIVERS\vsscanner.sys [x] R3 WCGBootAssistant;Windows Care Genius Service;c:\program files (x86)\Windows Care Genius\BootTime.exe;c:\program files (x86)\Windows Care Genius\BootTime.exe [x] R3 WiseHDInfo;WiseHDInfo;c:\windows\WiseHDInfo64.dll;c:\windows\WiseHDInfo64.dll [x] R3 WUDFWpdMtp;WUDFWpdMtp;c:\windows\system32\DRIVERS\WUDFRd.sys;c:\windows\SYSNATIVE\DRIVERS\WUDFRd.sys [x] R3 ZemanaAntiMalwareScheduler;Zemana AntiMalware Scheduler;c:\program files\Zemana AntiMalware\zemsched.exe;c:\program files\Zemana AntiMalware\zemsched.exe [x] R4 sptd;sptd; [x] S0 bdisk;COMODO Disk Raw Access Filter;c:\windows\system32\drivers\bdisk.sys;c:\windows\SYSNATIVE\drivers\bdisk.sys [x] S0 CBUfs;CBUfs;c:\windows\system32\drivers\CBUFS.sys;c:\windows\SYSNATIVE\drivers\CBUFS.sys [x] S0 cbvd;COMODO Encrypted Virtual Disk;c:\windows\system32\DRIVERS\cbvd.sys;c:\windows\SYSNATIVE\DRIVERS\cbvd.sys [x] S0 K7FWHlpr;K7FWHlpr;c:\windows\system32\drivers\K7FWHlpr.sys;c:\windows\SYSNATIVE\drivers\K7FWHlpr.sys [x] S0 K7Sentry;K7AntiVirus MiniFilter Driver;c:\windows\system32\drivers\K7Sentry.sys;c:\windows\SYSNATIVE\drivers\K7Sentry.sys [x] S0 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x] S0 reparse;reparse;c:\windows\system32\DRIVERS\cbreparse.sys;c:\windows\SYSNATIVE\DRIVERS\cbreparse.sys [x] S0 SmartDefragDriver;SmartDefragDriver;c:\windows\System32\Drivers\SmartDefragDriver.sys;c:\windows\SYSNATIVE\Drivers\SmartDefragDriver.sys [x] S1 AppProtectEx;AppProtectEx;c:\windows\System32\drivers\AppProtectEx.sys;c:\windows\SYSNATIVE\drivers\AppProtectEx.sys [x] S1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\DRIVERS\cmderd.sys;c:\windows\SYSNATIVE\DRIVERS\cmderd.sys [x] S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys;c:\windows\SYSNATIVE\DRIVERS\cmdguard.sys [x] S1 cmdhlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys;c:\windows\SYSNATIVE\DRIVERS\cmdhlp.sys [x] S1 epp64;epp64;c:\program files (x86)\EMSISOFT ANTI-MALWARE\epp64.sys;c:\program files (x86)\EMSISOFT ANTI-MALWARE\epp64.sys [x] S1 mbamchameleon;mbamchameleon;c:\windows\system32\drivers\mbamchameleon.sys;c:\windows\SYSNATIVE\drivers\mbamchameleon.sys [x] S1 sbtis;sbtis;c:\windows\system32\drivers\sbtis.sys;c:\windows\SYSNATIVE\drivers\sbtis.sys [x] S1 WiseUnlock;WiseUnlock;c:\windows\WiseUnlock64.sys;c:\windows\WiseUnlock64.sys [x] S2 ACT2PM;Ashampoo CoreTuner 2 ProcessMonitor Driver;c:\program files (x86)\Ashampoo\Ashampoo Core Tuner 2\ACT2ProcessMonitor64.sys;c:\program files (x86)\Ashampoo\Ashampoo Core Tuner 2\ACT2ProcessMonitor64.sys [x] S2 AdvancedSystemCareService9;Advanced SystemCare Service 9;c:\program files (x86)\IObit\Advanced SystemCare Ultimate\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare Ultimate\ASCService.exe [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x] S2 ASCAntivirusSrv;AdvancedSystemCareAntivirus;c:\program files (x86)\IObit\Advanced SystemCare Ultimate\ascavsvc.exe;c:\program files (x86)\IObit\Advanced SystemCare Ultimate\ascavsvc.exe [x] S2 avgsvc;AVG Service;c:\program files (x86)\AVG\Framework\Common\avgsvca.exe;c:\program files (x86)\AVG\Framework\Common\avgsvca.exe [x] S2 COSService.exe;COMODO Online Storage Service;c:\program files\COMODO\COMMON\COSService.exe;c:\program files\COMODO\COMMON\COSService.exe [x] S2 DigitalWave.Update.Service;Digital Wave Update Service;c:\program files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe;c:\program files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [x] S2 IDriveService;IDriveService;c:\program files (x86)\IDriveWindows\id_service.exe;c:\program files (x86)\IDriveWindows\id_service.exe [x] S2 K7CrvSvc;K7Carnivore Service;c:\program files (x86)\K7 Computing\K7TSecurity\K7CrvSvc.exe;c:\program files (x86)\K7 Computing\K7TSecurity\K7CrvSvc.exe [x] S2 LavasoftTcpService;LavasoftTcpService;c:\program files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe;c:\program files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe [x] S2 LiveUpdateSvc;LiveUpdate;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe [x] S2 MB3Service;MB3Service;c:\program files\Malwarebytes\Anti-Ransomware\MBAMService.exe;c:\program files\Malwarebytes\Anti-Ransomware\MBAMService.exe [x] S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [x] S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x] S2 SBAMSvc;Fix-It;c:\program files (x86)\Common Files\AntiVirus\SBAMSvc.exe;c:\program files (x86)\Common Files\AntiVirus\SBAMSvc.exe [x] S2 SMService;SMService;c:\program files (x86)\IObit\Classic Start\SMService.exe;c:\program files (x86)\IObit\Classic Start\SMService.exe [x] S2 SolvusoftWMDiskOptimizer;SolvusoftWMDiskOptimizer;c:\program files (x86)\SupersonicPC\SolvusoftWMDefragSrv64.exe;c:\program files (x86)\SupersonicPC\SolvusoftWMDefragSrv64.exe [x] S2 SynchronizationService.exe;COMODO BackUp Service;c:\program files\COMODO\COMMON\SynchronizationService.exe;c:\program files\COMODO\COMMON\SynchronizationService.exe [x] S2 TuneUp.UtilitiesSvc;AVG PC TuneUp Service;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [x] S2 UI5IFS;Ashampoo Uninstaller FileSystemChanges Driver;c:\program files (x86)\Ashampoo\Ashampoo UnInstaller 6\IFS64.sys;c:\program files (x86)\Ashampoo\Ashampoo UnInstaller 6\IFS64.sys [x] S2 WCAssistantService;WC Assistant;c:\program files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe;c:\program files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [x] S2 WiseFs;WiseFs;c:\windows\WiseFs64.sys;c:\windows\WiseFs64.sys [x] S2 ZoneAlarmBackup Service;ZoneAlarmBackup Service;c:\zonealarmbackup\ZABackup Service.exe;c:\zonealarmbackup\ZABackup Service.exe [x] S3 farflt;farflt;c:\windows\system32\drivers\farflt.sys;c:\windows\SYSNATIVE\drivers\farflt.sys [x] S3 keycrypt;keycrypt;c:\windows\system32\DRIVERS\KeyCrypt64.sys;c:\windows\SYSNATIVE\DRIVERS\KeyCrypt64.sys [x] S3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C63x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C63x64.sys [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x] S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x] S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [x] S3 usbfilter;AMD USB Filter Driver;c:\windows\System32\drivers\usbfilter.sys;c:\windows\SYSNATIVE\drivers\usbfilter.sys [x] S3 vdbus;Virtual Disk Bus Enumerator;c:\windows\System32\drivers\vdbus.sys;c:\windows\SYSNATIVE\drivers\vdbus.sys [x] S3 WSDScan;Prise en charge de la numérisation WSD;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] apphost REG_MULTI_SZ apphostsvc iissvcs REG_MULTI_SZ w3svc was . Contenu du dossier 'Tâches planifiées' . 2016-03-11 c:\windows\Tasks\ASCU9_SkipUac_Jean-Marie.job - c:\program files (x86)\IObit\Advanced SystemCare Ultimate\ASC.exe [2016-03-10 18:57] . 2016-03-12 c:\windows\Tasks\Driver Booster Scheduler.job - c:\program files (x86)\IObit\Driver Booster\Scheduler.exe [2016-03-12 09:05] . 2016-03-12 c:\windows\Tasks\Driver Booster SkipUAC (Jean-Marie).job - c:\program files (x86)\IObit\Driver Booster\DriverBooster.exe [2016-03-12 16:42] . 2016-03-12 c:\windows\Tasks\Opera scheduled Autoupdate 1457770486.job - c:\program files (x86)\Opera\launcher.exe [2016-03-12 07:09] . 2016-03-12 c:\windows\Tasks\Scan de ByteFence.job - c:\program files\ByteFence\ByteFence.exe [2015-12-31 18:19] . 2016-03-11 c:\windows\Tasks\SupersonicPC.job - c:\program files (x86)\SupersonicPC\SolvusoftWM.exe [2016-03-11 17:54] . 2016-03-11 c:\windows\Tasks\Uninstaller_SkipUac_Jean-Marie.job - c:\program files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2016-03-10 12:49] . 2016-03-12 c:\windows\Tasks\VideoMeetingPlus.exe_20160312_111515_0009.job - c:\program files (x86)\CyberLink\VideoMeetingPlus\VideoMeetingPlus.exe [2016-03-12 01:26] . 2016-03-04 c:\windows\Tasks\Windows Care Genius.job - c:\program files (x86)\Windows Care Genius\WCGTray.exe [2016-02-29 13:43] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ 0001IDSIcon1] @="{0FA6DCC0-CF0B-427D-A8AF-97C466AB5769}" [HKEY_CLASSES_ROOT\CLSID\{0FA6DCC0-CF0B-427D-A8AF-97C466AB5769}] 2016-03-10 15:54 874496 ----a-w- c:\program files (x86)\IDriveWindows\IDSyncIntIcon64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ 0001IDSIcon2] @="{66357BBE-D2E5-453C-95FF-8102EB32419D}" [HKEY_CLASSES_ROOT\CLSID\{66357BBE-D2E5-453C-95FF-8102EB32419D}] 2016-03-10 15:54 874496 ----a-w- c:\program files (x86)\IDriveWindows\IDSyncIntIcon64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ 0001IDSIcon3] @="{904E6336-8B13-43FA-B4C3-5B62C1C91971}" [HKEY_CLASSES_ROOT\CLSID\{904E6336-8B13-43FA-B4C3-5B62C1C91971}] 2016-03-10 15:54 874496 ----a-w- c:\program files (x86)\IDriveWindows\IDSyncIntIcon64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\COSDriveIconOverlay] @="{5FDACB62-6B7B-4116-9403-C5E0D3852A57}" [HKEY_CLASSES_ROOT\CLSID\{5FDACB62-6B7B-4116-9403-C5E0D3852A57}] \\?\c:\program files\COMODO\COMMON\ShellExtension.dll [?] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\COSSyncItemInSyncIconOverlay] @="{68F287EF-DA6D-4595-AF52-90FF6CE52AFE}" [HKEY_CLASSES_ROOT\CLSID\{68F287EF-DA6D-4595-AF52-90FF6CE52AFE}] \\?\c:\program files\COMODO\COMMON\ShellExtension.dll [?] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\COSSyncItemModifiedIconOverlay] @="{AE67D273-7253-4236-B55E-D40055B305D6}" [HKEY_CLASSES_ROOT\CLSID\{AE67D273-7253-4236-B55E-D40055B305D6}] \\?\c:\program files\COMODO\COMMON\ShellExtension.dll [?] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\COSSyncItemNewIconOverlay] @="{022F23E9-DA0F-4A86-A728-CAF6150C0B63}" [HKEY_CLASSES_ROOT\CLSID\{022F23E9-DA0F-4A86-A728-CAF6150C0B63}] \\?\c:\program files\COMODO\COMMON\ShellExtension.dll [?] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\COSSyncItemUnsynchronizedIconOverlay] @="{4D7EE7CF-E7A1-45FE-8F80-3A37574918D7}" [HKEY_CLASSES_ROOT\CLSID\{4D7EE7CF-E7A1-45FE-8F80-3A37574918D7}] \\?\c:\program files\COMODO\COMMON\ShellExtension.dll [?] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "VoodooShield"="c:\program files\VoodooShield\VoodooShield.exe" [2016-02-23 1889800] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=c:\progra~2\KeyCryptSDK\KeyCrypt64(2).dll . ------- Examen supplémentaire ------- . uStart Page = https://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_16_10¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyE0CyBtB0Bzy0FzyyDyC0AtB0FtC0EyBtN0D0Tzu0StCyDtAtBtN1L2XzutAtFtCzytFtBtFtDtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StAtD0C0CyC0CyB0DtGyBzy0DtBtGzyzy0CzztGyBtByE0EtGzzyC0B0ByDtB0EyD0DtA0A0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtDtAzyyE0FtByCtGyByB0E0AtGyE0FyCyEtG0B0DyE0EtGtB0F0Ezz0DyDyE0DtCtByE0F2QtN0A0LzutB%26cr%3D1622531168%26a%3Dwbf_ir_16_10%26os_ver%3D6.2%26os%3DWindows%2B8 mStart Page = https://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_16_10¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyE0CyBtB0Bzy0FzyyDyC0AtB0FtC0EyBtN0D0Tzu0StCyDtAtBtN1L2XzutAtFtCzytFtBtFtDtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StAtD0C0CyC0CyB0DtGyBzy0DtBtGzyzy0CzztGyBtByE0EtGzzyC0B0ByDtB0EyD0DtA0A0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtDtAzyyE0FtByCtGyByB0E0AtGyE0FyCyEtG0B0DyE0EtGtB0F0Ezz0DyDyE0DtCtByE0F2QtN0A0LzutB%26cr%3D1622531168%26a%3Dwbf_ir_16_10%26os_ver%3D6.2%26os%3DWindows%2B8 IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll Trusted Zone: localhost Trusted Zone: webcompanion.com TCP: DhcpNameServer = 192.168.1.1 192.168.1.1 TCP: Interfaces\{B389AB24-C362-4FAB-B29C-601C91B5A911}: NameServer = 8.8.8.8,8.8.4.4 FF - ProfilePath - c:\users\Jean-Marie\AppData\Roaming\Mozilla\Firefox\Profiles\gl1x1oq0.default\ FF - prefs.js: browser.search.selectedEngine - Search Provided by Yahoo FF - prefs.js: browser.startup.homepage - hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_ir_16_10¶m1=1¶m2=f%3D1%26b%3DFirefox%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1QzuyE0CyBtB0Bzy0FzyyDyC0AtB0FtC0EyBtN0D0Tzu0StCyDtAtBtN1L2XzutAtFtCzytFtBtFtDtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StAtD0C0CyC0CyB0DtGyBzy0DtBtGzyzy0CzztGyBtByE0EtGzzyC0B0ByDtB0EyD0DtA0A0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtDtAzyyE0FtByCtGyByB0E0AtGyE0FyCyEtG0B0DyE0EtGtB0F0Ezz0DyDyE0DtCtByE0F2QtN0A0LzutB%26cr%3D1622531168%26a%3Dwbf_ir_16_10%26os_ver%3D6.2%26os%3DWindows%2B8 . - - - - ORPHELINS SUPPRIMES - - - - . ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file) ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file) ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file) Wow6432Node-HKU-Default-Run-ZoneAlarm Windows 10 Upgrader - c:\programdata\CheckPoint\ZoneAlarm\Data\Updates\unpacked==win10=update_win10.zip\upgrade.exe SafeBoot-mbamchameleon SafeBoot-vga.sys SafeBoot-vgasave.sys SafeBoot-BasicDisplay.sys SafeBoot-BasicRender.sys SafeBoot-dxgkrnl.sys SafeBoot-FsDepends.sys ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file) ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file) ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file) . . . --------------------- CLES DE REGISTRE BLOQUEES --------------------- . [HKEY_USERS\S-1-5-21-3331589601-751847041-4288644589-1001_Classes\Wow6432Node\CLSID\{130F8154-E804-4BD5-A07B-35BE69039715}\{A730F6F3-255C-417C-8986-2C578500547E}*Hidden] "{6D31FCD2-64F7-4E43-8E18-5A2BBA7D13C9}"="AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAqxqw4EoULUa6b4Anl5VSmAAAAAACAAAAAAAQZgAAAAEAACAAAADot+b32H6SxRZd1ad9qF2dpd9E34PM6/WNbRkwWnntTwAAAAAOgAAAAAIAACAAAABlBetCxPawXBxdkzBBPyR3z8JojNJNpyyzAbWxrNHfUxAAAADYKmDX18mF39DjCeIrurnAQAAAAGIGQd833N0537YniP7My6Vl9HNAS3hAi2WaB6YN7anr9ISh5OHSRlKtYY0pzA29Sw/MUGe0MzDfFU1xtqumqG8=" "{2338F5D5-2437-4FC3-9005-A01804321264}"="AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAqxqw4EoULUa6b4Anl5VSmAAAAAACAAAAAAAQZgAAAAEAACAAAAAmSDiRpDZotPxO8I5J9quwV6KmE9IotbhdP1hHd0zrqwAAAAAOgAAAAAIAACAAAAB9HXCkyWbECyKZGJunMkpbKEuPJd5nlpuTFEnrd6spZCAAAAAcGJ2GaC8SDMg6QTBOsYuPDzg9L9IhthrEqxgpMqM1XkAAAAB72CzM2bCI6q+ONvtehCfOZkGKlzjXgOfBDb1UZ0uXJzBPgmTl88aC6+QAniNXwdJz0eF4j+i6pf9J9oz5gUa6" . [HKEY_USERS\S-1-5-21-3331589601-751847041-4288644589-1001_Classes\Wow6432Node\CLSID\{130F8154-E804-4BD5-A07B-35BE69039715}\{A730F6F3-255C-417C-8986-2C578500547E}*Hidden\DeltaClock] "LastSynchronizationClock"=hex(b):a0,2b,6d,b2,75,4a,d3,08 "DeltaClock"=hex(b):62,3d,53,fa,ff,ff,ff,ff "LastNtpServer"="time.nist.gov" . [HKEY_LOCAL_MACHINE\SOFTWARE\COMODO\CIS\Installer\Sym_Cam\CIS] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System*] "OOSE06.00.00.01PRO"="A75F2ADC91BE785E1CD35BFAF92052DFD53B8316DB18F52CBCC268F58B944AF68FA002DE45E2704EC86F70A5552B41A38F5185225443631EB7ED59EB6FCC603ED7B96C62482AD9D26A89670DD63BC53F8184D945EA6EBB8C855192B8B62154D10BA9092DE2D3996636A94F2340A382E6A97E1E40FDA103888B5BE40C75702BC097C577FB06B1533642273BD1FA4DDE86E73EF7460DFC825B1351A685E72C2F50CFB6DC7C432D74A30AB1407513B485BB7F980D823E2FC6814BC92FBD695BEC79EA7AE4D2514028C4EBCAF95CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CC038D530D6EB3452BA7FD869164D67945D575E7D6A3B98088EDD5E5BE2F6E66798867F4B037AA27FA78482BDCFE72B17EC2CB6F1ED6BE3171FFA3E0DB69D8D1A57D0F79D96F4A118715822132ADA123F744B26FC781785210D0359A42F0535AC18D9E66F779DCE03BA573913D951EF8793B57799ABB0A6D8ED2F15B81BE00C850F2073F1B5686C9713768C8B94C4F5F853F2B05209D68896E2BB5AAEE316866519B40609C21E3DA72EBCA57EF5035A0E5F219EE5737CF4A130F8542356DC1E04B2BF4B4DF45C8EF4E0C3D4A0FD2DDA3707EE4FC6B367B5B7BF4FF36525C0CC097E79B38B0693AB36A7BD2ADC113AB1D8BEA1161A77B31C889DB4EC7965211694C0B1F6441688E718216B7DCDF472A44B1E900A3CCC4FF9B97A39389610B0FC39644A8BAB275317388FA5E748D5F4F95A61A707BB2A7D2965AC7C112782F90A7BF6B9B0A99FE193A9DAD6C65042327C46E8E82CD8E6D40317ABB2F7CB7ED64C552B09E5DCC8F33C748CFEBE1F2FF1F84137E65B8C403F6A509428B158AAF6D0B4D6D8F093D19F711255AF34A273CB43F5F5CB3D00D5FDBE0729B745D38DDD2FFC72D85BD3CCCC98F20613517CC92FB200EED13B13AC21EA224DD4007A1665FD831E5172D530B89CF997E10582D0DCA1EC944A8657AC90D9020A82F0B99537DB91191B4685D7726AFCA3EC01BD0E6BED43F719919221067AF30DDAEC37C255E766CB252D847FE07348E9963BEB68C4FA7AD33792413D13413FA60B8B4A3411C6333F723F254CBBAC99CCD56D7D2A25AE7E0230848F1397A59C4C552A7D6A12221E20975A72429092A5D2B7971A831F742F82A428E29DCB2339168DE71145D626C042401FA8CDBE1F92A759799909193AE0FAC880CEB53A38B5419D29F888AC83AA9A2A73363CFC577B996F1C0B2FCCF35BB16553201EC16AA6AF8315DAE0B9EE5CC22780C1BFD23EEE9B41C6AE53C797DA13562D54F915419564CF9A94D9F2A04D791FB2A26E1DDE7046A988F934EA1F8E2F0BDB1DD33A4700892866B3E426D566200BBA66C48C46F7D117B416F6ED8A1BB909F363950D0DD5EAC4EFFDD7714F853CF810CC" "OOSE10.00.00.01PRO"="1EA3FBA40C218DDA2E68199FE8D46289A94482D8331C0214604B584CD9786F5F713F08231A9680D92D58655F6D7B48550C67D3E20712842EB63C05B8E1F7A2C19DE2BF3FE226503C9936B98E8163212DABB3863C8C8BBC70BA2F8D71729FA4E7ED4A9544A5AD07029446646A06861E16989ADDBB65BDA5078BE4CC7F8D815B4133A4FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CC038D530D6EB3452BA7FD869164D67945D575E7D6A3B9808A6171C11EC38DE3D878DC659C3D543F096304CD70BCA2A727474D8CCE309577D2156FCF63850FCBDE9FBA0219FF5554D267F90F8D9DE3D6DFC999C32E448D998C18AC3F99EDE51DAE15FFABE772A0EFED97DF042B241148DC208747C3FD3EE17EC0D5DD492869ECE8A0611A19E18257D66AD8A80555999B735967F77B978CF6A6927076D83960FBBA3CFE06BCEB35737A5A23D3262623944E5301D1EFED53BF923BA43DCC4B5D1B410B02EF2A349640C13082C8A5D6EE2830AD2F3209B637220263957718D5E19C259B181411D778E51D1994172B2DE0D367B116D630467B92E27A9CEAA795D1BE02B6EA396A0301E4FA3A9A6832E6CAE13398FB47F8D7FDCE4FCA977BF0954137ED416A4E5773CDFC4731D4E1081234544E30B3C42F29CA8FB23E6E21B9DB940014BEE58544B3422E1CDEBEA184262D166C14F3A2BD2826E9FB62466D800D66440A4CFD4BC2F8738CA64257556695DD70D3DC0A46EAE4C046D7B391FC9DA4AC6879D26762D15797B1A8AE9A934549CDFBDE453BCF4EDE44278D912E7F4BE85329816F1DB68D720C55BBAEE88D2C4FBF8726814015C5A0D89C85BADE5121D4EF22413C6E766B2E7F790117DD504DF2BB0981F1F3673225AB8D8AD1EFC914F3D5FD5BACC4251C40D75AECD7219502F2E9E93042867C0D9B5B517A60D57131041CB48D9C155859424A59ED6BF9F7421DCD7B83274E0F9745AEB67BA3364EB7E1C930AE074D0180A9374BC35EAF7DD0561FC516E5F338D4E5BC6A0066156261EE31521634A28CDF09651DA150D77B0113D2C1D9B56B41DA69BBA8D46F922FE56013306973B12A2F93B303EC753B54460440ACCC6DA7DF99D543A6C5F758169F233D3A15CD20944B9E3091F427F8F25ED1D40069C056BAFBB124172D8DEF508A20AE257AFB14D9428C7562B9CE425119CC4FB646EFD9EF96937CCC45C543DB7F86D4E79B58CE1AA2272978315EED9FDB10AEBF3B2847DC777F6DE003A0AE083ED9588D0362B8D5267C1D13C0B1AD591D490C6B903EA313F965A7CB163C6A92E5D9089199DE9DB881E680DDE05F7862896D043281D962638DD3FAEDC6FE525AC84C14A817B3A1B7F4C6ED2E8ABAC1AD0E5179F2C63830DC0C65484F899D7A62888DC49AE831E5F9F602DB4CA4A7307CF1982" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e96d-e325-11ce-bfc1-08002be10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) @SACL=(02 0000) . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CmdAgent\Mode\Configurations] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,59,00,53,00,\ . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CmdAgent\Mode\Data] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CmdAgent\Mode\Options] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . [HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\Cam] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . [HKEY_LOCAL_MACHINE\SYSTEM\Software\COMODO\Firewall Pro] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,59,00,53,00,\ . ------------------------ Autres processus actifs ------------------------ . c:\progra~2\AVANQU~1\Fix-It\mxtask.exe c:\program files (x86)\Malwarebytes Anti-Malware\mbam.exe c:\program files (x86)\IObit\Classic Start\ClassicStart.exe c:\progra~2\AVANQU~1\Fix-It\mxtask.exe c:\program files (x86)\IObit\Classic Start\StartMenu_Hook.exe c:\program files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe c:\zonealarmbackup\ZABackupTray.exe c:\zonealarmbackup\ZABackupBackground.exe . ************************************************************************** . Heure de fin: 2016-03-12 18:46:18 - La machine a redémarré ComboFix-quarantined-files.txt 2016-03-12 17:46 . Avant-CF: 897 973 309 440 octets libres Après-CF: 898 510 970 880 octets libres . - - End Of File - - 6D130AB161DF6732734B5846890EDE6A 5FB38429D5D77768867C76DCBDB35194