ComboFix 17-10-17.01 - David 07/11/2017 16:32:00.1.4 - x64 Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.33.1036.18.7602.5783 [GMT 1:00] Lancé depuis: e:\desktop\ComboFix.exe AV: Avira Antivirus *Disabled/Updated* {B3F630BD-538D-1B4A-14FA-14B63235278F} AV: Emsisoft Anti-Malware *Disabled/Outdated* {2F44E1F9-850B-1C7A-0E56-EB2E0A3E20C9} AV: Microsoft Security Essentials *Disabled/Updated* {71A27EC9-3DA6-45FC-60A7-004F623C6189} SP: Avira Antivirus *Disabled/Updated* {0897D159-75B7-14C4-2E4A-2FC449B26D32} SP: Emsisoft Anti-Malware *Disabled/Outdated* {9425001D-A331-13F4-34E6-D05C71B96A74} SP: Microsoft Security Essentials *Disabled/Updated* {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34} SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files\TrueKey\McAfeeTrueKeyPasswordFilter.dll c:\programdata\ntuser.pol c:\windows\SysWow64\DEBUG.log E:\uninstall.exe F:\Autorun.inf G:\Autorun.inf . . ((((((((((((((((((((((((((((( Fichiers créés du 2017-10-07 au 2017-11-07 )))))))))))))))))))))))))))))))))))) . . 2017-11-07 15:37 . 2017-11-07 15:38 -------- d-----w- c:\users\David\AppData\Local\temp 2017-11-07 15:37 . 2017-11-07 15:37 -------- d-----w- c:\users\Default\AppData\Local\temp 2017-11-07 11:10 . 2017-10-30 09:27 13771264 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BBB73F0A-83CD-4286-9734-8593A3F20FE4}\mpengine.dll 2017-11-06 10:48 . 2017-10-30 09:27 13771264 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll 2017-11-02 17:47 . 2017-11-02 17:47 -------- d-----w- c:\users\David\AppData\Local\Avira Operations Gmbh & Co. KG 2017-11-02 17:47 . 2017-11-02 17:47 -------- d-----w- c:\users\David\AppData\Local\Avira_Operations_Gmbh_&_C 2017-10-26 10:31 . 2017-10-26 10:31 -------- d-----w- c:\users\David\AppData\Local\Performix_LLC 2017-10-26 10:31 . 2017-03-22 00:50 63728 ----a-w- c:\windows\system32\drivers\adgnetworktdidrv.sys 2017-10-26 10:31 . 2017-10-26 10:31 260 ----a-w- c:\windows\SysWow64\drivers\vwifikerneldrv.sys 2017-10-26 10:31 . 2017-10-26 10:31 260 ----a-w- c:\windows\SysWow64\d3dx9_11.dll.tmp 2017-10-26 10:31 . 2017-11-07 15:37 -------- d-----w- c:\programdata\Adguard 2017-10-26 10:31 . 2017-10-26 10:31 -------- d-----w- c:\users\David\AppData\Roaming\Performix LLC 2017-10-26 10:31 . 2017-11-07 15:10 -------- d-----w- c:\program files (x86)\Adguard 2017-10-18 20:05 . 2017-10-18 20:05 -------- d-----w- c:\users\David\AppData\Local\Chromium 2017-10-18 19:57 . 2017-10-18 19:57 -------- d-----w- c:\users\David\AppData\Local\VS Revo Group 2017-10-18 19:57 . 2017-10-18 19:57 -------- d-----w- c:\programdata\VS Revo Group 2017-10-18 19:57 . 2016-12-21 12:52 40240 ----a-w- c:\windows\system32\drivers\revoflt.sys 2017-10-12 23:16 . 2017-10-12 23:16 126925120 -c--a-w- c:\windows\system32\MRT-KB890830.exe . . . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2017-11-06 22:20 . 2015-04-14 17:22 65536 ----a-w- c:\windows\system32\spu_storage.bin 2017-10-25 11:05 . 2016-09-29 10:16 803328 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2017-10-25 11:05 . 2016-09-29 10:16 144896 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2017-10-14 13:56 . 2017-03-03 22:24 194272 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2017-10-12 23:15 . 2016-02-03 20:15 126925120 -c--a-w- c:\windows\system32\MRT.exe 2017-10-03 09:38 . 2015-10-21 13:01 192216 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys 2017-09-29 19:35 . 2017-09-29 19:35 1057976 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F2636A6D-4ECF-4C81-93F8-9C448D344C4B}\gapaengine.dll 2017-09-14 20:25 . 2017-03-03 22:24 151128 ----a-w- c:\windows\system32\drivers\avipbb.sys 2017-09-13 15:08 . 2017-10-12 14:28 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2017-08-19 15:28 . 2017-09-14 20:27 197120 ----a-w- c:\windows\system32\shdocvw.dll 2017-08-17 16:35 . 2010-11-21 03:27 544424 ------w- c:\windows\system32\MpSigStub.exe 2017-08-16 15:29 . 2017-09-14 20:27 806912 ----a-w- c:\windows\system32\usp10.dll 2017-08-16 15:10 . 2017-09-14 20:27 629760 ----a-w- c:\windows\SysWow64\usp10.dll 2017-08-15 15:29 . 2017-09-14 20:27 14182400 ----a-w- c:\windows\system32\shell32.dll 2017-08-15 15:29 . 2017-09-14 20:27 1867264 ----a-w- c:\windows\system32\ExplorerFrame.dll 2017-08-15 15:10 . 2017-09-14 20:27 1499648 ----a-w- c:\windows\SysWow64\ExplorerFrame.dll 2017-08-14 17:35 . 2017-09-14 20:27 2150912 ----a-w- c:\windows\SysWow64\mmcndmgr.dll 2017-08-14 17:35 . 2017-09-14 20:27 303104 ----a-w- c:\windows\SysWow64\mmcbase.dll 2017-08-14 17:35 . 2017-09-14 20:27 128512 ----a-w- c:\windows\SysWow64\mmcshext.dll 2017-08-14 17:35 . 2017-09-14 20:27 172544 ----a-w- c:\windows\SysWow64\cic.dll 2017-08-14 17:35 . 2017-09-14 20:27 3203584 ----a-w- c:\windows\system32\mmcndmgr.dll 2017-08-14 17:35 . 2017-09-14 20:27 355328 ----a-w- c:\windows\system32\mmcbase.dll 2017-08-14 17:35 . 2017-09-14 20:27 131072 ----a-w- c:\windows\system32\mmcshext.dll 2017-08-14 17:34 . 2017-09-14 20:27 211968 ----a-w- c:\windows\system32\cic.dll 2017-08-13 21:37 . 2017-09-14 20:27 2144256 ----a-w- c:\windows\system32\mmc.exe 2017-08-13 21:30 . 2017-09-14 20:27 1401344 ----a-w- c:\windows\SysWow64\mmc.exe 2017-08-11 17:49 . 2017-01-29 19:12 110144 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll 2017-08-11 06:35 . 2017-09-14 20:27 757248 ----a-w- c:\windows\system32\win32spl.dll 2017-08-11 06:35 . 2017-09-14 20:27 313856 ----a-w- c:\windows\system32\Wldap32.dll 2017-08-11 06:35 . 2017-09-14 20:27 25600 ----a-w- c:\windows\system32\winnsi.dll 2017-08-11 06:35 . 2017-09-14 20:27 512000 ----a-w- c:\windows\system32\rpcss.dll 2017-08-11 06:35 . 2017-09-14 20:27 346112 ----a-w- c:\windows\system32\ntprint.dll 2017-08-11 06:35 . 2017-09-14 20:27 26112 ----a-w- c:\windows\system32\nsisvc.dll 2017-08-11 06:35 . 2017-09-14 20:27 2065408 ----a-w- c:\windows\system32\ole32.dll 2017-08-11 06:35 . 2017-09-14 20:27 13312 ----a-w- c:\windows\system32\nsi.dll 2017-08-11 06:35 . 2017-09-14 20:27 26112 ----a-w- c:\windows\system32\oleres.dll 2017-08-11 06:34 . 2017-09-14 20:27 971776 ----a-w- c:\windows\system32\localspl.dll 2017-08-11 06:34 . 2017-09-14 20:27 8704 ----a-w- c:\windows\system32\comcat.dll 2017-08-11 06:20 . 2017-09-14 20:27 61952 ----a-w- c:\windows\system32\ntprint.exe 2017-08-11 06:19 . 2017-09-14 20:27 497664 ----a-w- c:\windows\SysWow64\win32spl.dll 2017-08-11 06:19 . 2017-09-14 20:27 271360 ----a-w- c:\windows\SysWow64\Wldap32.dll 2017-08-11 06:19 . 2017-09-14 20:27 16384 ----a-w- c:\windows\SysWow64\winnsi.dll 2017-08-11 06:19 . 2017-09-14 20:27 8704 ----a-w- c:\windows\SysWow64\nsi.dll 2017-08-11 06:19 . 2017-09-14 20:27 299008 ----a-w- c:\windows\SysWow64\ntprint.dll 2017-08-11 06:19 . 2017-09-14 20:27 1417728 ----a-w- c:\windows\SysWow64\ole32.dll 2017-08-11 06:19 . 2017-09-14 20:27 26112 ----a-w- c:\windows\SysWow64\oleres.dll 2017-08-11 06:12 . 2017-09-14 20:27 25088 ----a-w- c:\windows\system32\netbtugc.exe 2017-08-11 06:09 . 2017-09-14 20:27 61952 ----a-w- c:\windows\SysWow64\ntprint.exe 2017-08-11 06:03 . 2017-09-14 20:27 26624 ----a-w- c:\windows\SysWow64\netbtugc.exe 2017-08-11 06:01 . 2017-09-14 20:27 7168 ----a-w- c:\windows\SysWow64\comcat.dll 2017-08-11 06:00 . 2017-09-14 20:27 262656 ----a-w- c:\windows\system32\drivers\netbt.sys 2017-08-11 05:58 . 2017-09-14 20:27 26112 ----a-w- c:\windows\system32\drivers\nsiproxy.sys . . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2015-02-26 5583120] "CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2017-09-20 9856176] "BingSvc"="c:\users\David\AppData\Local\Microsoft\BingSvc\BingSvc.exe" [2015-11-05 144008] "Adguard"="c:\program files (x86)\Adguard\Adguard.exe" [2017-10-25 5717264] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2017-07-21 587288] "Avira System Speedup User Starter"="c:\program files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe" [2017-10-05 65120] "Avira Safe Shopping"="c:\program files (x86)\Avira\Safe Shopping\Avira Safe Shopping.exe" [2017-10-30 546960] . c:\users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ zSpeedup.lnk - c:\program files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe -systemready [2017-10-5 65120] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) "SoftwareSASGeneration"= 1 (0x1) . [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "DisablePersonalDirChange"= 1 (0x1) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] @="Service" . R2 AntiVirMailService;Avira Protection e-mail;c:\program files (x86)\Avira\Antivirus\avmailc7.exe;c:\program files (x86)\Avira\Antivirus\avmailc7.exe [x] R2 AntiVirWebService;Avira Protection Web;c:\program files (x86)\Avira\Antivirus\avwebg7.exe;c:\program files (x86)\Avira\Antivirus\avwebg7.exe [x] R2 APXACC;AppEx Networks Accelerator LWF;c:\windows\system32\DRIVERS\appexDrv.sys;c:\windows\SYSNATIVE\DRIVERS\appexDrv.sys [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R3 DrvAgent64;DrvAgent64;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS;c:\windows\SysWOW64\Drivers\DrvAgent64.SYS [x] R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x] R3 NisSrv;Inspection du réseau Microsoft;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x] R3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver;c:\windows\system32\DRIVERS\silabenm.sys;c:\windows\SYSNATIVE\DRIVERS\silabenm.sys [x] R3 silabser;Silicon Labs CP210x USB to UART Bridge Driver;c:\windows\system32\DRIVERS\silabser.sys;c:\windows\SYSNATIVE\DRIVERS\silabser.sys [x] R3 TrueKeyServiceHelper;TrueKeyServiceHelper;c:\program files\TrueKey\McAfee.TrueKey.ServiceHelper.exe;c:\program files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x] R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] S0 amd_sata;amd_sata;c:\windows\system32\drivers\amd_sata.sys;c:\windows\SYSNATIVE\drivers\amd_sata.sys [x] S0 amd_xata;amd_xata;c:\windows\system32\drivers\amd_xata.sys;c:\windows\SYSNATIVE\drivers\amd_xata.sys [x] S0 amdide64;amdide64;c:\windows\system32\drivers\amdide64.sys;c:\windows\SYSNATIVE\drivers\amdide64.sys [x] S0 avdevprot;avdevprot;c:\windows\system32\DRIVERS\avdevprot.sys;c:\windows\SYSNATIVE\DRIVERS\avdevprot.sys [x] S0 avusbflt;avusbflt;c:\windows\System32\Drivers\avusbflt.sys;c:\windows\SYSNATIVE\Drivers\avusbflt.sys [x] S1 adgnetworktdidrv;adgnetworktdidrv;c:\windows\system32\drivers\adgnetworktdidrv.sys;c:\windows\SYSNATIVE\drivers\adgnetworktdidrv.sys [x] S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x] S1 epp64;epp64;c:\windows\system32\DRIVERS\epp64.sys;c:\windows\SYSNATIVE\DRIVERS\epp64.sys [x] S2 a2AntiMalware;Emsisoft Protection Service;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe [x] S2 Adguard Service;Adguard Service;c:\program files (x86)\Adguard\AdguardSvc.exe;c:\program files (x86)\Adguard\AdguardSvc.exe [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x] S2 AMD FUEL Service;AMD FUEL Service;c:\program files\AMD\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [x] S2 AntiVirSchedulerService;Avira Planificateur;c:\program files (x86)\Avira\Antivirus\sched.exe;c:\program files (x86)\Avira\Antivirus\sched.exe [x] S2 AODDriver4.3;AODDriver4.3;c:\program files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [x] S2 Apple Mobile Device Service;Apple Mobile Device Service;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [x] S2 Avira.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe [x] S2 AviraPhantomVPN;Avira Phantom VPN;c:\program files (x86)\Avira\VPN\Avira.VpnService.exe;c:\program files (x86)\Avira\VPN\Avira.VpnService.exe [x] S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x] S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x] S2 PaceLicenseDServices;PACE License Services;c:\program files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe;c:\program files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe [x] S2 RtkAudioService;Realtek Audio Service;c:\program files\Realtek\Audio\HDA\RtkAudioService64.exe;c:\program files\Realtek\Audio\HDA\RtkAudioService64.exe [x] S2 SpeedupService;Avira System Speedup;c:\program files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe;c:\program files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [x] S2 TrueKey;Intel Security True Key;c:\program files\TrueKey\McAfee.TrueKey.Service.exe;c:\program files\TrueKey\McAfee.TrueKey.Service.exe [x] S2 TrueKeyScheduler;Intel Security True Key Scheduler;c:\program files\TrueKey\McTkSchedulerService.exe;c:\program files\TrueKey\McTkSchedulerService.exe [x] S3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\amdhub30.sys;c:\windows\SYSNATIVE\DRIVERS\amdhub30.sys [x] S3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\amdxhc.sys;c:\windows\SYSNATIVE\DRIVERS\amdxhc.sys [x] S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x] S3 Disc Soft Lite Bus Service;Disc Soft Lite Bus Service;c:\program files\DAEMON Tools Lite\DiscSoftBusService.exe;c:\program files\DAEMON Tools Lite\DiscSoftBusService.exe [x] S3 dtlitescsibus;DAEMON Tools Lite Virtual SCSI Bus;c:\windows\system32\DRIVERS\dtlitescsibus.sys;c:\windows\SYSNATIVE\DRIVERS\dtlitescsibus.sys [x] S3 L1C;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x] S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x] . . --- Autres Services/Pilotes en mémoire --- . *Deregistered* - aswHwid *Deregistered* - aswMonFlt *Deregistered* - aswRdr *Deregistered* - aswRvrt *Deregistered* - aswSnx *Deregistered* - aswSP *Deregistered* - aswStm *Deregistered* - aswVmm . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr QWAVE wcncsvc . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2013-03-29 13513288] "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2016-11-14 1353680] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2017-07-14 303928] . ------- Examen supplémentaire ------- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm TCP: DhcpNameServer = 212.27.40.241 212.27.40.240 FF - ProfilePath - c:\users\David\AppData\Roaming\Mozilla\Firefox\Profiles\68dj33pw.default-1508928585493\ FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/ . - - - - ORPHELINS SUPPRIMES - - - - . HKLM_Wow6432Node-ActiveSetup-{8A69D345-D564-463c-AFF1-A69D9E530F96} - c:\program files (x86)\Google\Chrome\Application\58.0.3029.81\Installer\chrmstp.exe AddRemove-Bleep VSTi - e:\native instruments\Plugs - VST\uninstall.exe AddRemove-{4771539a-931b-4378-8d4a-721ba62effca} - c:\programdata\Package Cache\{4771539a-931b-4378-8d4a-721ba62effca}\Avira.OE.Setup.Bundle.exe . . . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\PaceLicenseDServices] "ImagePath"="\"c:\program files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe\" -u https://activation.paceap.com/InitiateActivation" . --------------------- CLES DE REGISTRE BLOQUEES --------------------- . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10b.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10b.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}] @Denied: (A 2) (Everyone) @="IFlashBroker2" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Heure de fin: 2017-11-07 16:40:19 ComboFix-quarantined-files.txt 2017-11-07 15:40 . Avant-CF: 15 206 174 720 octets libres Après-CF: 15 081 226 240 octets libres . - - End Of File - - CF90ED25117EF69725814FB1E469A687 A36C5E4F47E84449FF07ED3517B43A31