ComboFix 16-03-07.01 - Evilious 13/03/2016 16:49:09.1.4 - x64 Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.8173.6447 [GMT 1:00] Lancé depuis: c:\users\Evilious\Desktop\ComboFix.exe AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B} SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Evilious\AppData\Localtransition_e37ea623e540861f557d7855a1c5cf9e.ini c:\users\Evilious\AppData\Roaming\app c:\users\Evilious\AppData\Roaming\app\Jerakine_lang.dat c:\users\Evilious\AppData\Roaming\app\Jerakine_lang_vesrion.dat c:\windows\msdownld.tmp c:\windows\wininit.ini . . ((((((((((((((((((((((((((((( Fichiers créés du 2016-02-13 au 2016-03-13 )))))))))))))))))))))))))))))))))))) . . 2016-03-13 15:55 . 2016-03-13 15:55 -------- d-----w- c:\users\Default\AppData\Local\temp 2016-03-13 15:55 . 2016-03-13 15:55 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E881751B-F836-4D6A-8666-218A80215B3A}\offreg.1236.dll 2016-03-13 11:40 . 2016-03-13 11:40 -------- d-----w- C:\found.001 2016-03-13 09:08 . 2016-03-13 12:29 -------- d-----w- C:\FRST 2016-03-12 19:59 . 2016-03-13 12:19 -------- d-----w- c:\users\Evilious\AppData\Roaming\ZHP 2016-03-12 19:59 . 2016-03-13 08:51 -------- d-----w- c:\programdata\Auslogics 2016-03-12 19:58 . 2016-03-13 11:59 -------- d-----w- c:\program files (x86)\Auslogics 2016-03-12 15:45 . 2016-03-12 15:45 -------- d-----w- c:\users\Evilious\AppData\Local\ElevatedDiagnostics 2016-03-12 14:52 . 2016-03-13 09:08 -------- d-----w- c:\programdata\Spybot - Search & Destroy 2016-03-12 14:52 . 2016-03-13 11:59 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2 2016-03-12 14:31 . 2016-03-12 14:31 -------- d-----w- C:\found.000 2016-03-12 13:28 . 2016-03-12 13:28 -------- d-----w- c:\program files\CCleaner 2016-03-11 16:06 . 2016-03-11 16:06 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E881751B-F836-4D6A-8666-218A80215B3A}\offreg.3380.dll 2016-03-11 10:07 . 2016-02-19 01:53 11249080 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E881751B-F836-4D6A-8666-218A80215B3A}\mpengine.dll 2016-03-09 09:03 . 2016-02-11 18:56 5572032 ----a-w- c:\windows\system32\ntoskrnl.exe 2016-03-02 10:09 . 2016-03-02 10:15 -------- d-----w- C:\AdwCleaner 2016-03-02 10:03 . 2016-03-02 10:03 -------- d-----w- c:\windows\system32\%LOCALAPPDATA% 2016-02-23 10:20 . 2016-02-23 10:20 -------- d-----w- c:\users\Evilious\AppData\Roaming\Dofus-4 2016-02-22 17:53 . 2016-02-22 18:00 -------- d-----w- c:\program files (x86)\CamStudio 2.7 2016-02-15 17:58 . 2016-02-15 17:58 -------- d-----w- c:\program files (x86)\NetRatingsNetSight 2016-02-13 17:16 . 2010-05-26 10:41 2106216 ----a-w- c:\windows\SysWow64\D3DCompiler_43.dll 2016-02-13 17:16 . 2010-05-26 10:41 1998168 ----a-w- c:\windows\SysWow64\D3DX9_43.dll 2016-02-13 17:15 . 2016-02-15 16:32 -------- d-----w- c:\programdata\ManiaPlanet 2016-02-13 17:15 . 2016-02-13 17:21 -------- d-----w- c:\program files (x86)\ManiaPlanet . . . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2016-03-10 19:36 . 2016-01-09 14:20 797376 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2016-03-10 19:36 . 2016-01-09 14:20 142528 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2016-02-11 18:30 . 2016-03-09 09:03 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2016-02-06 09:09 . 2015-09-07 09:04 97888 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2016-02-04 22:13 . 2016-02-04 22:13 875720 ----a-w- c:\windows\SysWow64\msvcr120_clr0400.dll 2016-02-04 22:13 . 2016-02-04 22:13 536776 ----a-w- c:\windows\SysWow64\msvcp120_clr0400.dll 2016-02-04 22:03 . 2016-02-04 22:03 869568 ----a-w- c:\windows\system32\msvcr120_clr0400.dll 2016-02-04 22:03 . 2016-02-04 22:03 678600 ----a-w- c:\windows\system32\msvcp120_clr0400.dll 2016-01-22 06:19 . 2016-02-10 10:49 14179840 ----a-w- c:\windows\system32\shell32.dll 2016-01-22 06:18 . 2016-02-10 10:52 961024 ----a-w- c:\windows\system32\CPFilters.dll 2016-01-22 06:18 . 2016-02-10 10:52 723968 ----a-w- c:\windows\system32\EncDec.dll 2016-01-22 06:17 . 2016-02-10 10:52 159744 ----a-w- c:\windows\system32\mtxoci.dll 2016-01-22 06:15 . 2016-02-10 10:49 1866752 ----a-w- c:\windows\system32\ExplorerFrame.dll 2016-01-22 06:12 . 2016-02-10 10:49 1940992 ----a-w- c:\windows\system32\authui.dll 2016-01-22 06:04 . 2016-02-10 10:52 642048 ----a-w- c:\windows\SysWow64\CPFilters.dll 2016-01-22 06:04 . 2016-02-10 10:52 535040 ----a-w- c:\windows\SysWow64\EncDec.dll 2016-01-22 06:02 . 2016-02-10 10:52 114176 ----a-w- c:\windows\SysWow64\mtxoci.dll 2016-01-22 06:02 . 2016-02-10 10:52 176128 ----a-w- c:\windows\SysWow64\msorcl32.dll 2016-01-22 06:00 . 2016-02-10 10:49 1498624 ----a-w- c:\windows\SysWow64\ExplorerFrame.dll 2016-01-22 05:59 . 2016-02-10 10:49 1805824 ----a-w- c:\windows\SysWow64\authui.dll 2016-01-22 05:19 . 2016-02-10 10:49 3231232 ----a-w- c:\windows\explorer.exe 2016-01-22 05:12 . 2016-02-10 10:49 2973184 ----a-w- c:\windows\SysWow64\explorer.exe 2016-01-16 19:01 . 2016-02-10 10:52 2085888 ----a-w- c:\windows\system32\ole32.dll 2016-01-16 18:36 . 2016-02-10 10:52 1413632 ----a-w- c:\windows\SysWow64\ole32.dll 2016-01-10 17:23 . 2016-01-10 17:19 11376 ----a-w- c:\windows\SysWow64\drivers\SECDRV.SYS 2016-01-09 15:39 . 2016-01-21 08:50 3916368 ----a-w- c:\windows\SysWow64\GameMon.des 2016-01-09 14:26 . 2016-01-09 14:26 46392 ----a-w- c:\windows\system32\drivers\dtliteusbbus.sys 2016-01-09 14:26 . 2016-01-09 14:26 30264 ----a-w- c:\windows\system32\drivers\dtlitescsibus.sys 2016-01-07 17:42 . 2016-02-10 10:53 141312 ----a-w- c:\windows\system32\drivers\mrxdav.sys 2016-01-06 19:02 . 2016-02-10 10:55 24576 ----a-w- c:\windows\system32\jnwmon.dll 2016-01-06 19:02 . 2016-02-10 10:55 275456 ----a-w- c:\windows\system32\InkEd.dll 2016-01-06 18:41 . 2016-02-10 10:55 216064 ----a-w- c:\windows\SysWow64\InkEd.dll . . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtPending] @="{056D528D-CE28-4194-9BA3-BA2E9197FF8C}" [HKEY_CLASSES_ROOT\CLSID\{056D528D-CE28-4194-9BA3-BA2E9197FF8C}] 2014-05-01 14:15 463360 ----a-w- c:\users\Evilious\AppData\Local\MEGAsync\ShellExtX32.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtSynced] @="{05B38830-F4E9-4329-978B-1DD28605D202}" [HKEY_CLASSES_ROOT\CLSID\{05B38830-F4E9-4329-978B-1DD28605D202}] 2014-05-01 14:15 463360 ----a-w- c:\users\Evilious\AppData\Local\MEGAsync\ShellExtX32.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtSyncing] @="{0596C850-7BDD-4C9D-AFDF-873BE6890637}" [HKEY_CLASSES_ROOT\CLSID\{0596C850-7BDD-4C9D-AFDF-873BE6890637}] 2014-05-01 14:15 463360 ----a-w- c:\users\Evilious\AppData\Local\MEGAsync\ShellExtX32.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2015-09-07 115048] "AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-11-07 6133520] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2016-01-29 594992] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) "SoftwareSASGeneration"= 1 (0x1) "DisableCAD"= 1 (0x1) . R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 Mobizen plugin;Mobizen plugin;c:\program files (x86)\RSUPPORT\MobizenService\MobizenService.exe;c:\program files (x86)\RSUPPORT\MobizenService\MobizenService.exe [x] R3 AppObserver;Application creation observer;c:\program files (x86)\NetRatingsNetSight\NetSight\meter1\appobserver64.sys;c:\program files (x86)\NetRatingsNetSight\NetSight\meter1\appobserver64.sys [x] R3 BRDriver64_1_3_3_E02B25FC;BRDriver64_1_3_3_E02B25FC;c:\programdata\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys;c:\programdata\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [x] R3 EasyAntiCheat;EasyAntiCheat;c:\windows\system32\EasyAntiCheat.exe;c:\windows\SYSNATIVE\EasyAntiCheat.exe [x] R3 EvolveVirtualAdapter;Evolve Virtual Miniport Driver;c:\windows\system32\DRIVERS\evolve.sys;c:\windows\SYSNATIVE\DRIVERS\evolve.sys [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des;c:\windows\SYSNATIVE\GameMon.des [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] R4 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service;c:\program files\DAEMON Tools Lite\DiscSoftBusService.exe;c:\program files\DAEMON Tools Lite\DiscSoftBusService.exe [x] R4 Ds3Service;SCP DS3 Service;c:\program files (x86)\Manette Ps3\ScpServer\bin\ScpService.exe;c:\program files (x86)\Manette Ps3\ScpServer\bin\ScpService.exe [x] R4 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R4 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [x] S0 aswRvrt;avast! Revert; [x] S0 aswVmm;avast! VM Monitor; [x] S0 ngvss;ngvss; [x] S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x] S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x] S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxDrv.sys [x] S1 VBoxNetAdp;VirtualBox NDIS 6.0 Miniport Service;c:\windows\system32\DRIVERS\VBoxNetAdp6.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetAdp6.sys [x] S1 VBoxNetLwf;VirtualBox NDIS6 Bridged Networking Service;c:\windows\system32\DRIVERS\VBoxNetLwf.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxNetLwf.sys [x] S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys;c:\windows\SYSNATIVE\DRIVERS\VBoxUSBMon.sys [x] S1 XQHDrv;BigNox Service;c:\windows\system32\DRIVERS\XQHDrv.sys;c:\windows\SYSNATIVE\DRIVERS\XQHDrv.sys [x] S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x] S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x] S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x] S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x] S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x] S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [x] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] S2 VBoxAswDrv;VBoxAsw Support Driver;c:\program files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys;c:\program files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [x] S2 ZAtheros Bt and Wlan Coex Agent;ZAtheros Bt and Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [x] S3 AthBTPort;Qualcomm Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_flt.sys [x] S3 AvastVBoxSvc;AvastVBox COM Service;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [x] S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys;c:\windows\SYSNATIVE\drivers\btath_a2dp.sys [x] S3 btath_avdt;Qualcomm Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys;c:\windows\SYSNATIVE\drivers\btath_avdt.sys [x] S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x] S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_hcrp.sys [x] S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys;c:\windows\SYSNATIVE\DRIVERS\btath_lwflt.sys [x] S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys;c:\windows\SYSNATIVE\DRIVERS\btath_rcp.sys [x] S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys;c:\windows\SYSNATIVE\DRIVERS\btfilter.sys [x] S3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus;c:\windows\system32\DRIVERS\dtlitescsibus.sys;c:\windows\SYSNATIVE\DRIVERS\dtlitescsibus.sys [x] S3 dtliteusbbus;DAEMON Tools Lite Virtual USB Bus;c:\windows\system32\DRIVERS\dtliteusbbus.sys;c:\windows\SYSNATIVE\DRIVERS\dtliteusbbus.sys [x] S3 frzway;FrozenWay Adapter;c:\windows\system32\DRIVERS\frzway.sys;c:\windows\SYSNATIVE\DRIVERS\frzway.sys [x] S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x] S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x] S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x] S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] S3 ScpVBus;Scp Virtual Bus Driver;c:\windows\system32\DRIVERS\ScpVBus.sys;c:\windows\SYSNATIVE\DRIVERS\ScpVBus.sys [x] S3 ScreamBAudioSvc;ScreamBee Audio;c:\windows\system32\drivers\ScreamingBAudio64.sys;c:\windows\SYSNATIVE\drivers\ScreamingBAudio64.sys [x] S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys;c:\windows\SYSNATIVE\DRIVERS\SFEP.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2016-03-09 08:24 1106072 ----a-w- c:\program files (x86)\Google\Chrome\Application\49.0.2623.87\Installer\chrmstp.exe . Contenu du dossier 'Tâches planifiées' . 2016-03-13 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-09 19:37] . 2016-03-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-09-07 08:21] . 2016-03-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-09-07 08:21] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtPending] @="{056D528D-CE28-4194-9BA3-BA2E9197FF8C}" [HKEY_CLASSES_ROOT\CLSID\{056D528D-CE28-4194-9BA3-BA2E9197FF8C}] 2014-05-01 14:13 470016 ----a-w- c:\users\Evilious\AppData\Local\MEGAsync\ShellExtX64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtSynced] @="{05B38830-F4E9-4329-978B-1DD28605D202}" [HKEY_CLASSES_ROOT\CLSID\{05B38830-F4E9-4329-978B-1DD28605D202}] 2014-05-01 14:13 470016 ----a-w- c:\users\Evilious\AppData\Local\MEGAsync\ShellExtX64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\###MegaShellExtSyncing] @="{0596C850-7BDD-4C9D-AFDF-873BE6890637}" [HKEY_CLASSES_ROOT\CLSID\{0596C850-7BDD-4C9D-AFDF-873BE6890637}] 2014-05-01 14:13 470016 ----a-w- c:\users\Evilious\AppData\Local\MEGAsync\ShellExtX64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2015-10-10 13:41 780616 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2015-08-27 2634872] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2015-06-18 14021336] "XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-09-30 825184] "AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2015-01-04 134784] "AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-04-29 657568] . ------- Examen supplémentaire ------- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local Trusted Zone: aeriagames.com TCP: DhcpNameServer = 192.168.1.1 . - - - - ORPHELINS SUPPRIMES - - - - . Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\npggsvc] "ImagePath"="c:\windows\system32\GameMon.des -service" . --------------------- CLES DE REGISTRE BLOQUEES --------------------- . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Heure de fin: 2016-03-13 16:58:09 ComboFix-quarantined-files.txt 2016-03-13 15:58 . Avant-CF: 688 962 805 760 octets libres Après-CF: 688 781 680 640 octets libres . - - End Of File - - 8F03DA552B945D89803560C8207990B1 A36C5E4F47E84449FF07ED3517B43A31