ComboFix 16-11-13.01 - Administrateur 23/11/2016 8:31.1.2 - x86 Microsoft Windows 7 Professionnel 6.1.7601.1.1252.33.1036.18.1014.221 [GMT 1:00] Lancé depuis: c:\users\administrateur.NAWEL-PC\Desktop\Firmo.exe AV: Avast Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B} SP: Avast Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . [i] ADS - Windows: deleted 192 bytes in 1 streams. [/i] . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\trc1\AppData\Local\Microsoft\Windows\Temporary Internet Files\{00D10D70-34D1-477C-9EBF-C39D269F75DA}.xps c:\users\trc1\AppData\Local\Microsoft\Windows\Temporary Internet Files\{5EBC5CB9-43AE-4A6B-B864-739658D09907}.xps c:\users\trc1\AppData\Local\Microsoft\Windows\Temporary Internet Files\{9190FF66-B28C-4C67-9619-BF03DA7EF7DA}.xps c:\users\trc1\AppData\Local\Microsoft\Windows\Temporary Internet Files\{CCCEEA59-DD3D-4572-A4BA-BE2B7554519C}.xps . . ((((((((((((((((((((((((((((( Fichiers créés du 2016-10-23 au 2016-11-23 )))))))))))))))))))))))))))))))))))) . . 2017-01-06 02:39 . 2017-01-06 02:39 62576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{655030F9-01CA-4A5B-9CFA-11C107A4E007}\offreg.1372.dll 2017-01-05 20:39 . 2010-11-20 12:17 302592 ----a-w- C:\sethc.exe 2016-11-23 07:41 . 2016-11-23 07:43 -------- d-----w- c:\users\administrateur.NAWEL-PC\AppData\Local\temp 2016-11-23 07:41 . 2016-11-23 07:41 -------- d-----w- c:\users\trc1\AppData\Local\temp 2016-11-23 07:41 . 2016-11-23 07:41 -------- d-----w- c:\users\Default\AppData\Local\temp 2016-11-23 07:41 . 2016-11-23 07:41 -------- d-----w- c:\users\NAWEL\AppData\Local\temp 2016-11-23 07:41 . 2016-11-23 07:41 -------- d-----w- c:\users\administrateur\AppData\Local\temp 2016-11-23 07:19 . 2016-11-23 07:19 -------- d-----w- c:\users\administrateur.NAWEL-PC\Tracing 2016-11-22 09:58 . 2016-11-22 09:58 -------- d-----w- c:\program files\ESET 2016-11-21 16:28 . 2016-11-21 16:28 2744320 ----a-w- c:\windows\system32\rdpcorets.dll 2016-11-21 16:14 . 2016-11-21 16:14 13824 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll 2016-11-21 16:14 . 2016-11-21 16:14 5694464 ----a-w- c:\windows\system32\mstscax.dll 2016-11-21 16:09 . 2016-11-21 16:09 76288 ----a-w- c:\windows\system32\TSWbPrxy.exe 2016-11-21 16:09 . 2016-11-21 16:09 50176 ----a-w- c:\windows\system32\MsRdpWebAccess.dll 2016-11-21 16:09 . 2016-11-21 16:09 17920 ----a-w- c:\windows\system32\wksprtPS.dll 2016-11-21 16:09 . 2016-11-21 16:09 14336 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2016-11-21 16:09 . 2016-11-21 16:09 12800 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2016-11-21 16:09 . 2016-11-21 16:09 1068544 ----a-w- c:\windows\system32\mstsc.exe 2016-11-21 16:09 . 2016-11-21 16:09 855552 ----a-w- c:\windows\system32\rdvidcrl.dll 2016-11-21 16:09 . 2016-11-21 16:09 53248 ----a-w- c:\windows\system32\tsgqec.dll 2016-11-21 16:09 . 2016-11-21 16:09 49152 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys 2016-11-21 16:09 . 2016-11-21 16:09 350208 ----a-w- c:\windows\system32\wksprt.exe 2016-11-21 16:09 . 2016-11-21 16:09 32256 ----a-w- c:\windows\system32\TsUsbGDCoInstaller.dll 2016-11-21 15:29 . 2016-11-21 15:29 221184 ----a-w- c:\windows\system32\rdpudd.dll 2016-11-21 15:29 . 2016-11-21 15:29 192000 ----a-w- c:\windows\system32\rdpendp_winip.dll 2016-11-21 15:29 . 2016-11-21 15:29 14848 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys 2016-11-21 15:22 . 2016-11-21 15:22 293376 ----a-w- c:\windows\system32\browserchoice.exe 2016-11-21 13:35 . 2016-11-21 16:41 -------- d-----w- C:\Win7-SP2-x86 2016-11-21 10:39 . 2016-11-21 16:22 -------- d-----w- c:\windows\system32\catroot2 2016-11-21 07:39 . 2016-11-21 07:43 170200 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys 2016-11-21 07:38 . 2016-03-10 13:09 53120 ----a-w- c:\windows\system32\drivers\mwac.sys 2016-11-21 07:38 . 2016-03-10 13:08 126336 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys 2016-11-21 07:38 . 2016-03-10 13:08 24448 ----a-w- c:\windows\system32\drivers\mbam.sys 2016-11-21 07:38 . 2016-11-21 07:38 -------- d-----w- c:\program files\Malwarebytes Anti-Malware 2016-11-21 07:38 . 2016-11-21 07:38 -------- d-----w- c:\programdata\Malwarebytes 2016-11-17 14:38 . 2016-11-17 14:38 -------- d-----w- c:\users\administrateur.NAWEL-PC\AppData\Local\NitroSpoolDir 2016-11-16 15:27 . 2016-11-16 15:36 -------- d-----w- c:\users\administrateur.NAWEL-PC\AppData\Roaming\ZHP 2016-11-16 10:32 . 2016-11-17 12:14 -------- d-----w- c:\program files\nLite 2016-11-16 08:34 . 2016-09-08 14:47 29376 ----a-w- c:\windows\system32\nitrolocalmon11.dll 2016-11-16 08:34 . 2016-09-08 14:47 20672 ----a-w- c:\windows\system32\nitrolocalui11.dll 2016-11-15 16:22 . 2016-11-15 16:22 -------- d-----w- C:\02f5fd0f21fa8e5ff4e3e2 2016-11-15 16:07 . 2016-11-15 16:07 -------- d-----w- C:\6d423a173003211f7efa6ad95486 2016-11-15 15:51 . 2016-11-17 14:38 -------- d-----w- c:\users\administrateur.NAWEL-PC\AppData\Roaming\Nitro 2016-11-15 15:49 . 2016-08-02 18:09 29344 ----a-w- c:\windows\system32\nitrolocalmon10.dll 2016-11-15 15:49 . 2016-08-02 18:09 20640 ----a-w- c:\windows\system32\nitrolocalui10.dll 2016-11-15 15:49 . 2016-11-16 08:33 -------- d-----w- c:\programdata\Nitro 2016-11-15 15:49 . 2016-11-16 08:33 -------- d-----w- c:\program files\Nitro 2016-11-15 15:49 . 2016-11-16 08:33 -------- d-----w- c:\program files\Common Files\Nitro 2016-11-15 15:45 . 2016-11-16 08:32 -------- d-----w- c:\users\administrateur.NAWEL-PC\AppData\Roaming\Downloaded Installations 2016-11-15 15:23 . 2016-11-15 15:23 -------- d-----w- C:\5ec2bc679d2a038998b8bb51fe1df0 2016-11-15 13:43 . 2016-11-15 13:43 -------- d-----w- c:\users\administrateur.NAWEL-PC\AppData\Local\Supremus Corporation 2016-11-10 09:11 . 2016-11-10 09:11 -------- d-----r- c:\users\administrateur.NAWEL-PC\AppData\Roaming\Brother 2016-11-07 12:57 . 2016-11-07 12:57 -------- d-----w- c:\programdata\ABBYY 2016-11-07 12:46 . 2013-11-01 04:37 45056 ----a-w- c:\windows\system32\BRTCPCON.DLL 2016-11-07 12:46 . 2013-11-01 04:37 180224 ----a-w- c:\windows\system32\BROSNMP.DLL 2016-11-07 12:46 . 2013-11-01 04:37 133744 ----a-w- c:\windows\system32\BRRBI13A.EXE 2016-11-07 12:46 . 2013-11-01 04:37 77824 ----a-w- c:\windows\system32\BRLMW03A.DLL 2016-11-07 12:46 . 2013-11-01 04:37 50688 ----a-w- c:\windows\system32\BRPRTINK.DLL 2016-11-07 12:46 . 2013-11-01 04:37 25299 ----a-w- c:\windows\system32\BRLM03A.DLL 2016-11-07 12:46 . 2013-10-31 16:01 179200 ----a-w- c:\windows\system32\BRCOI13I.DLL 2016-11-07 12:39 . 2016-11-07 12:39 -------- d-----w- c:\program files\ControlCenter4 2016-11-07 12:38 . 2016-11-07 12:38 -------- d-----w- c:\programdata\PCFaxTx 2016-11-07 12:27 . 2016-11-07 14:22 -------- d-----w- c:\programdata\Brother 2016-11-07 12:23 . 2016-11-07 12:23 -------- d-----w- c:\users\administrateur.NAWEL-PC\AppData\Roaming\EncryptStick 2016-11-07 10:42 . 2016-11-07 10:42 -------- d-----w- c:\users\administrateur.NAWEL-PC\AppData\Local\PDFConverter.com 2016-11-07 10:41 . 2015-05-20 12:26 77488 ----a-w- c:\windows\system32\PDFConverter.PCR.3.PortMon.x32.dll 2016-11-07 10:41 . 2016-11-07 10:41 -------- d-----w- c:\program files\PDFConverter.com 2016-11-04 13:04 . 2016-11-21 11:43 -------- d-----w- c:\program files\CCleaner 2016-11-02 15:47 . 2016-11-15 16:18 -------- d-----w- c:\program files\Common Files\Adobe 2016-11-01 09:51 . 2016-11-01 09:57 -------- d-----w- c:\windows\system32\MRT 2016-11-01 09:35 . 2016-11-01 09:41 -------- d-----w- c:\program files\KMSpico 2016-11-01 09:35 . 2016-11-23 07:19 -------- d-----w- c:\users\administrateur.NAWEL-PC\AppData\Roaming\Skype 2016-11-01 09:35 . 2016-11-01 09:35 -------- d-----w- c:\users\administrateur.NAWEL-PC\AppData\Local\Programs 2016-11-01 09:33 . 2016-11-01 09:33 -------- d-----w- c:\program files\Common Files\Skype . . . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2016-11-21 16:09 . 2016-11-21 16:09 3584 ----a-w- c:\windows\system32\drivers\fr-FR\tsusbflt.sys.mui 2016-11-01 09:25 . 2002-01-01 00:25 224752 ----a-w- c:\windows\system32\drivers\aswvmm.sys 2016-11-01 09:25 . 2002-01-01 00:25 433768 ----a-w- c:\windows\system32\drivers\aswsp.sys 2016-11-01 09:25 . 2002-01-01 00:25 735488 ----a-w- c:\windows\system32\drivers\aswsnx.sys 2016-09-08 14:47 . 2016-09-08 14:47 71872 ----a-w- c:\windows\system32\NLSSRV32.EXE . . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)] @="{8BA85C75-763B-4103-94EB-9470F12FE0F7}" [HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}] 2015-07-14 11:57 1729752 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)] @="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}" [HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}] 2015-07-14 11:57 1729752 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)] @="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}" [HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}] 2015-07-14 11:57 1729752 ----a-w- c:\progra~1\MICROS~1\Office15\GROOVEEX.DLL . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2002-01-01 00:24 832488 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CCleaner Monitoring"="c:\program files\CCleaner\CCleaner.exe" [2016-09-28 6889176] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-23 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-23 173592] "Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-23 150552] "HPUsageTrackingLEDM"="c:\program files\HP\HP UT LEDM\bin\hppusg.exe" [2009-10-15 30264] "AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2016-11-15 9080768] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2014-04-15 280576] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Mediatek Wireless Utility.lnk - c:\program files\MediatekWiFi\Common\RaUI.exe -s [2002-1-1 15611024] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys [2002-01-01 118664] R2 RTLDHCPService;Realtek DHCP Service;c:\program files\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe [2014-04-23 262360] R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2016-09-20 324224] R3 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys [2002-01-01 34008] R3 eapihdrv;eapihdrv;c:\users\ADMINI~1.NAW\AppData\Local\Temp\ehdrv.sys [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2015-07-16 102912] R3 NitroUpdateService;NitroUpdateService;c:\program files\Nitro\Pro 11\Nitro_UpdateService.exe [2016-09-08 405696] R3 RaMediaServer;Ralink UPnP Media Server;c:\program files\MediatekWiFi\Common\RaMediaServer.exe [2012-07-06 1863680] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2016-11-21 14848] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2016-11-21 49152] R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2014-04-09 1343400] S0 aswRvrt;avast! Revert; [x] S0 aswVmm;avast! VM Monitor; [x] S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [2002-01-01 35096] S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2016-11-01 735488] S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2016-11-01 433768] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2002-01-01 92256] S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176] S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520] S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe [2009-07-14 20992] S2 HP LaserJet Service;HP LaserJet Service;c:\program files\HP\HPLaserJetService\HPLaserJetService.exe [2009-10-15 136192] S2 HPM1210RcvFaxSrvc;HP LaserJet Professional M1210 MFP Series Receive Fax Service;c:\program files\HP\HP LaserJet M1210 MFP Series\ReceiveFaxUtility.exe [2012-07-25 247712] S2 HPSIService;HP SI Service;c:\windows\system32\HPSIsvc.exe [2012-11-08 100232] S2 MediatekRegistryWriter;MediatekRegistryWriter;c:\program files\MediatekWiFi\Common\RaRegistry.exe [2014-07-31 401040] S2 NitroDriverReadSpool11;NitroPDFDriverCreatorReadSpool11;c:\program files\Nitro\Pro 11\NitroPDFDriverService11.exe [2016-09-08 281280] S2 NitroReaderDriverReadSpool5;NitroPDFReaderDriverCreatorReadSpool5;c:\program files\Nitro\Reader 5\NitroPDFReaderDriverService5.exe [2016-08-02 281248] S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\system32\NLSSRV32.EXE [2016-09-08 71872] S2 RealtekWlanU;RealtekWlanU;c:\program files\REALTEK\USB Wireless LAN Utility\RtlService.exe [2014-05-19 48856] S2 RunSwUSB;RunSwUSB;c:\windows\runSW.exe [2014-04-15 36864] S2 ss_conn_service;SAMSUNG Mobile Connectivity Service;c:\program files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [2015-05-21 743688] S3 netr28u;RT2870 USB Extensible Wireless LAN Card Driver;c:\windows\system32\DRIVERS\netr28u.sys [2014-07-04 1702032] S3 RTL8167;Pilote Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776] . . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] utcsvc REG_MULTI_SZ DiagTrack . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2016-11-15 09:45 1364072 ----a-w- c:\program files\Google\Chrome\Application\54.0.2840.99\Installer\chrmstp.exe . Contenu du dossier 'Tâches planifiées' . 2016-11-23 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-08 12:11] . 2016-11-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2016-11-02 12:38] . 2016-11-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2016-11-02 12:38] . . ------- Examen supplémentaire ------- . IE: &Envoyer à OneNote - c:\progra~1\MICROS~1\Office15\ONBttnIE.dll/105 IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~1\Office15\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.1 192.168.1.1 TCP: Interfaces\{2021C39F-46F9-4A16-85F2-2022EED1F73A}: NameServer = 192.168.1.5 Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL FF - ProfilePath - c:\users\administrateur.NAWEL-PC\AppData\Roaming\Mozilla\Firefox\Profiles\lhfmeh3b.default-1478089942958\ . - - - - ORPHELINS SUPPRIMES - - - - . AddRemove-01_Simmental - c:\program files\SAMSUNG\USB Drivers\01_Simmental\Uninstall.exe AddRemove-02_Siberian - c:\program files\SAMSUNG\USB Drivers\02_Siberian\Uninstall.exe AddRemove-03_Swallowtail - c:\program files\SAMSUNG\USB Drivers\03_Swallowtail\Uninstall.exe AddRemove-04_semseyite - c:\program files\SAMSUNG\USB Drivers\04_semseyite\Uninstall.exe AddRemove-05_Sloan - c:\program files\SAMSUNG\USB Drivers\05_Sloan\Uninstall.exe AddRemove-06_Spencer - c:\program files\SAMSUNG\USB Drivers\06_Spencer\Uninstall.exe AddRemove-07_Schorl - c:\program files\SAMSUNG\USB Drivers\07_Schorl\Uninstall.exe AddRemove-08_EMPChipset - c:\program files\SAMSUNG\USB Drivers\08_EMPChipset\Uninstall.exe AddRemove-09_Hsp - c:\program files\SAMSUNG\USB Drivers\09_Hsp\Uninstall.exe AddRemove-11_HSP_Plus_Default - c:\program files\SAMSUNG\USB Drivers\11_HSP_Plus_Default\Uninstall.exe AddRemove-16_Shrewsbury - c:\program files\SAMSUNG\USB Drivers\16_Shrewsbury\Uninstall.exe AddRemove-17_EMP_Chipset2 - c:\program files\SAMSUNG\USB Drivers\17_EMP_Chipset2\Uninstall.exe AddRemove-18_Zinia_Serial_Driver - c:\program files\SAMSUNG\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe AddRemove-19_VIA_driver - c:\program files\SAMSUNG\USB Drivers\19_VIA_driver\Uninstall.exe AddRemove-20_NXP_Driver - c:\program files\SAMSUNG\USB Drivers\20_NXP_Driver\Uninstall.exe AddRemove-21_Searsburg - c:\program files\SAMSUNG\USB Drivers\21_Searsburg\Uninstall.exe AddRemove-22_WiBro_WiMAX - c:\program files\SAMSUNG\USB Drivers\22_WiBro_WiMAX\Uninstall.exe AddRemove-24_flashusbdriver - c:\program files\SAMSUNG\USB Drivers\24_flashusbdriver\Uninstall.exe AddRemove-25_escape - c:\program files\SAMSUNG\USB Drivers\25_escape\Uninstall.exe . . . --------------------- CLES DE REGISTRE BLOQUEES --------------------- . [HKEY_USERS\S-1-5-21-2159041285-1511956248-2211599006-500\Software\Microsoft\Internet Explorer\User Preferences] @Denied: (2) (Administrator) "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,e8,ca,18,df,22,ae,42,4a,93,a2,52,\ "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,e8,ca,18,df,22,ae,42,4a,93,a2,52,\ . [HKEY_USERS\S-1-5-21-2159041285-1511956248-2211599006-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice] @Denied: (2) (Administrator) "Progid"="ChromeHTML" . [HKEY_USERS\S-1-5-21-2159041285-1511956248-2211599006-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice] @Denied: (2) (Administrator) "Progid"="ChromeHTML" . [HKEY_USERS\S-1-5-21-2159041285-1511956248-2211599006-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\UserChoice] @Denied: (2) (Administrator) "Progid"="NitroPDF.Document.11" . [HKEY_USERS\S-1-5-21-2159041285-1511956248-2211599006-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice] @Denied: (2) (Administrator) "Progid"="ChromeHTML" . [HKEY_USERS\S-1-5-21-2159041285-1511956248-2211599006-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice] @Denied: (2) (Administrator) "Progid"="ChromeHTML" . [HKEY_USERS\S-1-5-21-2159041285-1511956248-2211599006-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice] @Denied: (2) (Administrator) "Progid"="ChromeHTML" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Heure de fin: 2016-11-23 08:47:08 ComboFix-quarantined-files.txt 2016-11-23 07:47 . Avant-CF: 16 644 141 056 octets libres Après-CF: 16 902 750 208 octets libres . - - End Of File - - A1FF2CF08D5288B253991584C017E196 A36C5E4F47E84449FF07ED3517B43A31