ComboFix 17-01-13.01 - Bruno 22/01/2017  16:13:36.1.4 - x64
Microsoft Windows 7 Édition Intégrale   6.1.7601.1.1252.33.1036.18.8120.6760 [GMT 1:00]
Lancé depuis: c:\users\Bruno\Desktop\ComboFix.exe
AV: Avast Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Avast Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Public\Documents\rundll32.exe
c:\windows\7Loader.TAG
c:\windows\wininit.ini
.
.
(((((((((((((((((((((((((((((   Fichiers créés du 2016-12-22 au 2017-01-22  ))))))))))))))))))))))))))))))))))))
.
.
2017-01-22 15:20 . 2017-01-22 15:20	--------	d-----w-	c:\users\Default\AppData\Local\temp
2017-01-18 19:18 . 2017-01-18 19:25	--------	d-----w-	c:\users\Bruno\AppData\Roaming\QuickScan
2017-01-18 10:04 . 2017-01-18 10:04	--------	d-----w-	c:\program files (x86)\Common Files\Java
2017-01-18 10:03 . 2017-01-18 10:03	97856	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2017-01-18 10:03 . 2017-01-18 10:03	--------	d-----w-	c:\program files (x86)\Java
2017-01-17 20:33 . 2017-01-18 09:37	--------	d-----w-	C:\FRST
2017-01-07 21:33 . 2017-01-07 21:33	--------	d-----w-	c:\users\Bruno\AppData\Roaming\Sony Creative Software Inc
2017-01-07 08:54 . 2016-12-18 13:55	859136	----a-w-	c:\users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Anti_AdAnti.exe
2017-01-05 11:10 . 2017-01-05 11:38	--------	d-----w-	C:\KVRT_Data
2017-01-04 14:01 . 2017-01-04 16:55	--------	d-----w-	c:\users\Bruno\Doctor Web
2017-01-02 12:30 . 2017-01-02 12:30	--------	d-----w-	c:\users\Default\AppData\Roaming\AVAST Software
2017-01-01 18:24 . 2017-01-01 18:24	24544	----a-w-	C:\Look_my_hardware.tmp
2016-12-31 12:50 . 2016-12-31 12:50	--------	d-----w-	c:\users\Bruno\.android
2016-12-31 12:26 . 2016-12-31 12:26	--------	d-----w-	c:\users\Bruno\AppData\Roaming\LG Electronics
2016-12-31 12:23 . 2016-12-31 12:23	--------	d-----w-	c:\users\Bruno\AppData\Local\LG Electronics
2016-12-29 09:20 . 2016-12-29 09:20	--------	d-----w-	C:\_OTL
.
.
.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2017-01-15 09:11 . 2016-09-08 16:03	802904	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2017-01-15 09:11 . 2016-09-08 16:03	144472	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2017-01-11 09:48 . 2016-09-09 10:55	135657872	-c--a-w-	c:\windows\system32\MRT.exe
2017-01-10 09:50 . 2016-09-10 12:30	192216	----a-w-	c:\windows\system32\drivers\MBAMSwissArmy.sys
2017-01-07 08:58 . 2016-10-29 08:06	2	--shatw-	c:\windows\winstart.bat
2016-11-22 00:52 . 2016-11-22 00:52	54344	----a-w-	c:\windows\system32\drivers\XtuAcpiDriver.sys
2016-11-22 00:51 . 2016-11-22 00:51	1805064	----a-w-	c:\windows\system32\WdfCoInstaller01011.dll
2016-11-21 18:12 . 2016-12-14 08:59	109568	----a-w-	c:\windows\system32\hlink.dll
2016-11-20 16:19 . 2016-12-14 08:59	84992	----a-w-	c:\windows\SysWow64\hlink.dll
2016-11-20 14:07 . 2016-12-14 08:59	467392	----a-w-	c:\windows\system32\drivers\cng.sys
2016-11-17 16:41 . 2016-12-14 08:59	370920	----a-w-	c:\windows\system32\clfs.sys
2016-11-14 23:27 . 2016-12-14 08:59	394448	----a-w-	c:\windows\system32\iedkcs32.dll
2016-11-12 19:48 . 2016-12-14 08:59	2724864	----a-w-	c:\windows\system32\mshtml.tlb
2016-11-12 19:48 . 2016-12-14 08:59	4096	----a-w-	c:\windows\system32\ieetwcollectorres.dll
2016-11-12 19:28 . 2016-12-14 08:59	66560	----a-w-	c:\windows\system32\iesetup.dll
2016-11-12 19:26 . 2016-12-14 08:59	48640	----a-w-	c:\windows\system32\ieetwproxystub.dll
2016-11-12 19:26 . 2016-12-14 08:59	417792	----a-w-	c:\windows\system32\html.iec
2016-11-12 19:25 . 2016-12-14 08:59	88064	----a-w-	c:\windows\system32\MshtmlDac.dll
2016-11-12 19:25 . 2016-12-14 08:59	576000	----a-w-	c:\windows\system32\vbscript.dll
2016-11-12 19:21 . 2016-12-14 08:59	2896384	----a-w-	c:\windows\system32\iertutil.dll
2016-11-12 19:15 . 2016-12-14 08:59	54784	----a-w-	c:\windows\system32\jsproxy.dll
2016-11-12 19:14 . 2016-12-14 08:59	34304	----a-w-	c:\windows\system32\iernonce.dll
2016-11-12 19:09 . 2016-12-14 08:59	615936	----a-w-	c:\windows\system32\ieui.dll
2016-11-12 19:08 . 2016-12-14 08:59	114688	----a-w-	c:\windows\system32\ieetwcollector.exe
2016-11-12 19:08 . 2016-12-14 08:59	144384	----a-w-	c:\windows\system32\ieUnatt.exe
2016-11-12 19:08 . 2016-12-14 08:59	25759744	----a-w-	c:\windows\system32\mshtml.dll
2016-11-12 19:07 . 2016-12-14 08:59	814080	----a-w-	c:\windows\system32\jscript9diag.dll
2016-11-12 19:07 . 2016-12-14 08:59	817664	----a-w-	c:\windows\system32\jscript.dll
2016-11-12 18:56 . 2016-12-14 08:59	968704	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2016-11-12 18:53 . 2016-12-14 08:59	6049280	----a-w-	c:\windows\system32\jscript9.dll
2016-11-12 18:52 . 2016-12-14 08:59	489984	----a-w-	c:\windows\system32\dxtmsft.dll
2016-11-12 18:47 . 2016-12-14 08:59	2724864	----a-w-	c:\windows\SysWow64\mshtml.tlb
2016-11-12 18:41 . 2016-12-14 08:59	77824	----a-w-	c:\windows\system32\JavaScriptCollectionAgent.dll
2016-11-12 18:40 . 2016-12-14 08:59	107520	----a-w-	c:\windows\system32\inseng.dll
2016-11-12 18:35 . 2016-12-14 08:59	199680	----a-w-	c:\windows\system32\msrating.dll
2016-11-12 18:34 . 2016-12-14 08:59	92160	----a-w-	c:\windows\system32\mshtmled.dll
2016-11-12 18:31 . 2016-12-14 08:59	315392	----a-w-	c:\windows\system32\dxtrans.dll
2016-11-12 18:30 . 2016-12-14 08:59	62464	----a-w-	c:\windows\SysWow64\iesetup.dll
2016-11-12 18:29 . 2016-12-14 08:59	47616	----a-w-	c:\windows\SysWow64\ieetwproxystub.dll
2016-11-12 18:29 . 2016-12-14 08:59	498688	----a-w-	c:\windows\SysWow64\vbscript.dll
2016-11-12 18:29 . 2016-12-14 08:59	341504	----a-w-	c:\windows\SysWow64\html.iec
2016-11-12 18:28 . 2016-12-14 08:59	152064	----a-w-	c:\windows\system32\occache.dll
2016-11-12 18:27 . 2016-12-14 08:59	64000	----a-w-	c:\windows\SysWow64\MshtmlDac.dll
2016-11-12 18:14 . 2016-12-14 08:59	115712	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2016-11-12 18:14 . 2016-12-14 08:59	262144	----a-w-	c:\windows\system32\webcheck.dll
2016-11-12 18:14 . 2016-12-14 08:59	620032	----a-w-	c:\windows\SysWow64\jscript9diag.dll
2016-11-12 18:11 . 2016-12-14 08:59	725504	----a-w-	c:\windows\system32\ie4uinit.exe
2016-11-12 18:10 . 2016-12-14 08:59	806912	----a-w-	c:\windows\system32\msfeeds.dll
2016-11-12 18:08 . 2016-12-14 08:59	1359360	----a-w-	c:\windows\system32\mshtmlmedia.dll
2016-11-12 18:08 . 2016-12-14 08:59	2131456	----a-w-	c:\windows\system32\inetcpl.cpl
2016-11-12 17:57 . 2016-12-14 08:59	60416	----a-w-	c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2016-11-12 17:41 . 2016-12-14 08:59	15257088	----a-w-	c:\windows\system32\ieframe.dll
2016-11-12 17:37 . 2016-12-14 08:59	4608000	----a-w-	c:\windows\SysWow64\jscript9.dll
2016-11-12 17:36 . 2016-12-14 08:59	2055680	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2016-11-12 17:36 . 2016-12-14 08:59	1155072	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2016-11-12 17:35 . 2016-12-14 08:59	2920960	----a-w-	c:\windows\system32\wininet.dll
2016-11-12 17:20 . 2016-12-14 08:59	1543680	----a-w-	c:\windows\system32\urlmon.dll
2016-11-12 17:11 . 2016-12-14 08:59	800768	----a-w-	c:\windows\system32\ieapfltr.dll
2016-11-12 17:05 . 2016-12-14 08:59	2444800	----a-w-	c:\windows\SysWow64\wininet.dll
2016-11-10 16:32 . 2016-12-14 08:59	1009152	----a-w-	c:\windows\system32\user32.dll
2016-11-10 16:19 . 2016-12-14 08:59	833024	----a-w-	c:\windows\SysWow64\user32.dll
2016-11-09 16:41 . 2016-12-14 08:59	114408	----a-w-	c:\windows\system32\consent.exe
2016-11-09 16:33 . 2016-12-14 08:59	2048	----a-w-	c:\windows\system32\tzres.dll
2016-11-09 16:33 . 2016-12-14 08:59	3244032	----a-w-	c:\windows\system32\msi.dll
2016-11-09 16:33 . 2016-12-14 08:59	504320	----a-w-	c:\windows\system32\msihnd.dll
2016-11-09 16:33 . 2016-12-14 08:59	25088	----a-w-	c:\windows\system32\msimsg.dll
2016-11-09 16:33 . 2016-12-14 08:59	1941504	----a-w-	c:\windows\system32\authui.dll
2016-11-09 16:33 . 2016-12-14 08:59	70144	----a-w-	c:\windows\system32\appinfo.dll
2016-11-09 16:17 . 2016-12-14 08:59	2048	----a-w-	c:\windows\SysWow64\tzres.dll
2016-11-09 16:17 . 2016-12-14 08:59	2365440	----a-w-	c:\windows\SysWow64\msi.dll
2016-11-09 16:17 . 2016-12-14 08:59	337408	----a-w-	c:\windows\SysWow64\msihnd.dll
2016-11-09 16:17 . 2016-12-14 08:59	25088	----a-w-	c:\windows\SysWow64\msimsg.dll
2016-11-09 16:17 . 2016-12-14 08:59	1806848	----a-w-	c:\windows\SysWow64\authui.dll
2016-11-09 16:02 . 2016-12-14 08:59	128512	----a-w-	c:\windows\system32\msiexec.exe
2016-11-09 15:55 . 2016-12-14 08:59	73216	----a-w-	c:\windows\SysWow64\msiexec.exe
2016-11-06 16:33 . 2016-12-14 08:59	404992	----a-w-	c:\windows\system32\gdi32.dll
2016-11-06 16:16 . 2016-12-14 08:59	312832	----a-w-	c:\windows\SysWow64\gdi32.dll
2016-11-06 16:01 . 2016-12-14 08:59	3219456	----a-w-	c:\windows\system32\win32k.sys
2016-11-02 15:36 . 2016-11-09 13:38	382696	----a-w-	c:\windows\system32\atmfd.dll
2016-11-02 15:32 . 2016-11-09 13:38	41472	----a-w-	c:\windows\system32\lpk.dll
2016-11-02 15:32 . 2016-11-09 13:38	100864	----a-w-	c:\windows\system32\fontsub.dll
2016-11-02 15:32 . 2016-11-09 13:38	14336	----a-w-	c:\windows\system32\dciman32.dll
2016-11-02 15:32 . 2016-11-09 13:38	46080	----a-w-	c:\windows\system32\atmlib.dll
2016-11-02 15:22 . 2016-11-09 13:38	308456	----a-w-	c:\windows\SysWow64\atmfd.dll
2016-11-02 15:16 . 2016-11-09 13:38	25600	----a-w-	c:\windows\SysWow64\lpk.dll
2016-11-02 15:16 . 2016-11-09 13:38	70656	----a-w-	c:\windows\SysWow64\fontsub.dll
2016-11-02 15:16 . 2016-11-09 13:38	10240	----a-w-	c:\windows\SysWow64\dciman32.dll
2016-11-02 14:53 . 2016-11-09 13:38	34304	----a-w-	c:\windows\SysWow64\atmlib.dll
2016-11-02 06:15 . 2016-11-02 06:15	1730304	----a-w-	c:\windows\system32\wdfcoinstaller01009.dll
2016-11-02 06:15 . 2016-11-02 06:15	38680	----a-w-	c:\windows\system32\drivers\ICCWDT.sys
2016-10-27 15:33 . 2016-12-14 08:59	802304	----a-w-	c:\windows\system32\usp10.dll
2016-10-27 15:20 . 2016-12-14 08:59	627712	----a-w-	c:\windows\SysWow64\usp10.dll
2009-07-13 23:19	64512	--sha-w-	c:\windows\System32\drivers\alifide.sys
2008-12-09 14:03	364688	--sha-w-	c:\windows\System32\drivers\qrlygr.sys
2008-12-09 14:03	364688	--sha-w-	c:\windows\System32\drivers\qskyes.sys
.
.
(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2016-11-15 9080768]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2016-12-12 587288]
.
c:\users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Anti_AdAnti.exe [2016-12-18 859136]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
"DisableStartupSound"= 1 (0x1)
"DisableStatusMessages"= 1 (0x1)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoThumbnailCache"= 1 (0x1)
"DisableThumbnailsOnNetworkFolders"= 1 (0x1)
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 AndNetDiag;LGE AndroidNet USB Serial Port;c:\windows\system32\DRIVERS\lgandnetdiag64.sys;c:\windows\SYSNATIVE\DRIVERS\lgandnetdiag64.sys [x]
R3 ANDNetModem;LGE AndroidNet USB Modem;c:\windows\system32\DRIVERS\lgandnetmodem64.sys;c:\windows\SYSNATIVE\DRIVERS\lgandnetmodem64.sys [x]
R3 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
R3 hitmanpro37;HitmanPro 3.7 Support Driver;c:\windows\system32\drivers\hitmanpro37.sys;c:\windows\SYSNATIVE\drivers\hitmanpro37.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 iusb3hub;Pilote de concentrateur Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
R3 iusb3xhc;Pilote du contrôleur d'hôte extensible Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
R3 LVUVC64;Logitech HD Webcam C270(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
R3 MSICDSetup;MSICDSetup;g:\cdriver64.sys;g:\CDriver64.sys [x]
R3 NTIOLib_1_0_C;NTIOLib_1_0_C;g:\ntiolib_x64.sys;g:\NTIOLib_X64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 semav6msr64;semav6msr64;c:\windows\system32\drivers\semav6msr64.sys;c:\windows\SYSNATIVE\drivers\semav6msr64.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WiaRpc;Événements d’acquisition d’images fixes;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
R4 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
R4 NIHardwareService;NIHardwareService;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [x]
R4 Process Blocker;Process Blocker;c:\program files\Softros Systems\Process Blocker\Process Blocker.exe;c:\program files\Softros Systems\Process Blocker\Process Blocker.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 iusb3hcs;Pilote de commutateur de contrôleur d'hôte Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys;c:\windows\SYSNATIVE\drivers\aswKbd.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 qrlygr;qrlygr; [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT);c:\windows\system32\DRIVERS\ICCWDT.sys;c:\windows\SYSNATIVE\DRIVERS\ICCWDT.sys [x]
S3 L6UX2;Service - Line 6 UX2;c:\windows\system32\Drivers\L6UX264.sys;c:\windows\SYSNATIVE\Drivers\L6UX264.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 XtuAcpiDriver;Intel(R) Extreme Tuning Utility Device Service;c:\windows\system32\DRIVERS\XtuAcpiDriver.sys;c:\windows\SYSNATIVE\DRIVERS\XtuAcpiDriver.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation	REG_MULTI_SZ   	SSDPSRV upnphost SCardSvr QWAVE wcncsvc
MuroghfibchCloud	REG_MULTI_SZ   	MuroghfibchCloud
zipsvcs	REG_MULTI_SZ   	ziphost
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
HpSvc
.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost  - LocalSystemNetworkRestricted
WiaRpc
.
.
Contenu du dossier 'Tâches planifiées'
.
2016-10-21 c:\windows\Tasks\Adobe Flash Player PPAPI Notifier.job
- c:\windows\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_185_pepper.exe [2016-10-15 15:27]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2016-09-18 11:56	1031520	----a-w-	c:\program files\AVAST Software\Avast\ashShA64.dll
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - LocalSystemNetworkRestricted
WiaRpc
.
------- Examen supplémentaire -------
.
uLocal Page = c:\windows\system32\blank.htm
uInternet Settings,ProxyOverride = *.local
Trusted Zone: line6.net
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\Bruno\AppData\Roaming\Mozilla\Firefox\Profiles\ai2e8xqs.default-1473587225518\
FF - prefs.js: browser.search.defaulturl - hxxps://www.google.com/search?bcutc=sp-006
FF - prefs.js: browser.search.selectedEngine - Yahoo! Powered
FF - prefs.js: browser.startup.homepage - hxxps://www.google.fr/search?q=Jeu+de+m%C3%A9canique+%C3%A0+blocage&ie=utf-8&oe=utf-8&channel=fs&gws_rd=cr,ssl&ei=lK97WLXHPMy5aobyIw
FF - prefs.js: keyword.URL - true
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-Locked - (no file)
SafeBoot-17000312.sys
SafeBoot-89075640.sys
Toolbar-Locked - (no file)
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crx\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mht\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtm\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.webp\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_24_0_0_186_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_24_0_0_186_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_24_0_0_186_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_24_0_0_186_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_24_0_0_186.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.24"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_24_0_0_186.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_24_0_0_186.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_24_0_0_186.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Anti_AdAnti.exe
.
**************************************************************************
.
Heure de fin: 2017-01-22  16:26:52 - La machine a redémarré
ComboFix-quarantined-files.txt  2017-01-22 15:26
.
Avant-CF: 46 127 710 208 octets libres
Après-CF: 45 537 398 784 octets libres
.
- - End Of File - - 2291387CF36D5E894D916CC78A78E003
8F558EB6672622401DA993E1E865C861