ComboFix 14-06-03.01 - Normand 2014-06-03 15:48:09.1.4 - x64 Microsoft Windows 7 Édition Familiale Premium 6.1.7601.1.1252.1.1036.18.8064.6384 [GMT -4:00] Lancé depuis: c:\users\Normand\Desktop\ComboFix.exe AV: Kaspersky Internet Security *Disabled/Updated* {179979E8-273D-D14E-0543-2861940E4886} FW: Kaspersky Internet Security *Disabled* {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD} SP: Kaspersky Internet Security *Disabled/Updated* {ACF8980C-0107-DEC0-3FF3-1313EF89023B} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Un nouveau point de restauration a été créé . . ((((((((((((((((((((((((((((( Fichiers créés du 2014-05-03 au 2014-06-03 )))))))))))))))))))))))))))))))))))) . . 2014-06-03 19:57 . 2014-06-03 19:57 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-06-03 14:23 . 2014-06-03 14:33 -------- d-----w- C:\FRST 2014-06-03 14:16 . 2014-04-30 23:20 10702536 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{01E95D83-AB66-4A36-AA58-65D532614E5A}\mpengine.dll 2014-06-03 04:06 . 2014-06-03 04:06 512 ----a-w- C:\PhysicalDisk0_MBR.bin 2014-06-03 04:04 . 2014-06-03 04:07 -------- d-----w- c:\users\Normand\AppData\Roaming\ZHP 2014-06-03 04:04 . 2014-06-03 04:04 -------- d-----w- c:\program files (x86)\ZHPDiag 2014-05-14 14:22 . 2014-05-06 04:40 23544320 ----a-w- c:\windows\system32\mshtml.dll 2014-05-14 14:22 . 2014-05-06 03:00 84992 ----a-w- c:\windows\system32\mshtmled.dll 2014-05-14 14:22 . 2014-05-06 04:17 2724864 ----a-w- c:\windows\system32\mshtml.tlb 2014-05-14 14:22 . 2014-05-06 03:07 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb 2014-05-14 14:20 . 2014-03-25 02:43 14175744 ----a-w- c:\windows\system32\shell32.dll 2014-05-14 14:20 . 2014-05-09 06:14 477184 ----a-w- c:\windows\system32\aepdu.dll 2014-05-14 14:20 . 2014-05-09 06:11 424448 ----a-w- c:\windows\system32\aeinv.dll . . . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2014-06-03 04:25 . 2014-03-27 19:59 122584 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys 2014-05-14 14:38 . 2014-04-11 14:06 70832 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2014-05-14 14:38 . 2014-04-11 14:06 692400 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2014-05-14 14:21 . 2014-03-24 22:54 93223848 ----a-w- c:\windows\system32\MRT.exe 2014-05-12 11:26 . 2014-04-06 14:34 63704 ----a-w- c:\windows\system32\drivers\mwac.sys 2014-05-12 11:26 . 2014-04-06 14:34 91352 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys 2014-05-12 11:25 . 2014-04-06 14:34 25816 ----a-w- c:\windows\system32\drivers\mbam.sys 2014-05-04 02:55 . 2014-03-28 18:43 358552 ----a-w- c:\windows\system32\drivers\RapportKE64.sys 2014-05-03 14:08 . 2010-11-21 03:24 25602 ----a-w- c:\windows\SysWow64\lthhkic.dll 2014-04-01 02:46 . 2014-04-01 02:46 130712 ----a-w- c:\windows\SysWow64\MSSTDFMT.DLL 2014-04-01 02:46 . 2014-04-01 02:46 1070232 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX 2014-03-31 13:35 . 2010-11-21 03:27 270496 ------w- c:\windows\system32\MpSigStub.exe 2014-03-27 19:17 . 2014-03-27 19:07 625248 ----a-w- c:\windows\system32\drivers\klif.sys 2014-03-27 19:17 . 2014-03-27 19:07 115296 ----a-w- c:\windows\system32\drivers\klflt.sys 2014-03-27 19:17 . 2014-01-22 04:22 29280 ----a-w- c:\windows\system32\drivers\klkbdflt.sys 2014-03-25 14:04 . 2012-07-17 18:37 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2014-03-25 13:45 . 2014-03-25 13:45 194048 ----a-w- c:\windows\SysWow64\elshyph.dll 2014-03-25 13:45 . 2014-03-25 13:45 942592 ----a-w- c:\windows\system32\jsIntl.dll 2014-03-25 13:45 . 2014-03-25 13:45 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2014-03-25 13:45 . 2014-03-25 13:45 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll 2014-03-25 13:45 . 2014-03-25 13:45 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe 2014-03-25 13:45 . 2014-03-25 13:45 83968 ----a-w- c:\windows\system32\MshtmlDac.dll 2014-03-25 13:45 . 2014-03-25 13:45 81408 ----a-w- c:\windows\system32\icardie.dll 2014-03-25 13:45 . 2014-03-25 13:45 774144 ----a-w- c:\windows\system32\jscript.dll 2014-03-25 13:45 . 2014-03-25 13:45 77312 ----a-w- c:\windows\system32\tdc.ocx 2014-03-25 13:45 . 2014-03-25 13:45 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe 2014-03-25 13:45 . 2014-03-25 13:45 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe 2014-03-25 13:45 . 2014-03-25 13:45 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll 2014-03-25 13:45 . 2014-03-25 13:45 62464 ----a-w- c:\windows\SysWow64\tdc.ocx 2014-03-25 13:45 . 2014-03-25 13:45 62464 ----a-w- c:\windows\system32\pngfilt.dll 2014-03-25 13:45 . 2014-03-25 13:45 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll 2014-03-25 13:45 . 2014-03-25 13:45 616104 ----a-w- c:\windows\system32\ieapfltr.dat 2014-03-25 13:45 . 2014-03-25 13:45 52224 ----a-w- c:\windows\system32\msfeedsbs.dll 2014-03-25 13:45 . 2014-03-25 13:45 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll 2014-03-25 13:45 . 2014-03-25 13:45 48640 ----a-w- c:\windows\system32\mshtmler.dll 2014-03-25 13:45 . 2014-03-25 13:45 48128 ----a-w- c:\windows\system32\imgutil.dll 2014-03-25 13:45 . 2014-03-25 13:45 413696 ----a-w- c:\windows\system32\html.iec 2014-03-25 13:45 . 2014-03-25 13:45 36352 ----a-w- c:\windows\SysWow64\imgutil.dll 2014-03-25 13:45 . 2014-03-25 13:45 337408 ----a-w- c:\windows\SysWow64\html.iec 2014-03-25 13:45 . 2014-03-25 13:45 30208 ----a-w- c:\windows\system32\licmgr10.dll 2014-03-25 13:45 . 2014-03-25 13:45 263376 ----a-w- c:\windows\system32\iedkcs32.dll 2014-03-25 13:45 . 2014-03-25 13:45 247808 ----a-w- c:\windows\system32\msls31.dll 2014-03-25 13:45 . 2014-03-25 13:45 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll 2014-03-25 13:45 . 2014-03-25 13:45 243200 ----a-w- c:\windows\system32\webcheck.dll 2014-03-25 13:45 . 2014-03-25 13:45 235520 ----a-w- c:\windows\system32\url.dll 2014-03-25 13:45 . 2014-03-25 13:45 235008 ----a-w- c:\windows\system32\elshyph.dll 2014-03-25 13:45 . 2014-03-25 13:45 182272 ----a-w- c:\windows\SysWow64\msls31.dll 2014-03-25 13:45 . 2014-03-25 13:45 167424 ----a-w- c:\windows\system32\iexpress.exe 2014-03-25 13:45 . 2014-03-25 13:45 151552 ----a-w- c:\windows\SysWow64\iexpress.exe 2014-03-25 13:45 . 2014-03-25 13:45 147968 ----a-w- c:\windows\system32\occache.dll 2014-03-25 13:45 . 2014-03-25 13:45 143872 ----a-w- c:\windows\system32\wextract.exe 2014-03-25 13:45 . 2014-03-25 13:45 139264 ----a-w- c:\windows\SysWow64\wextract.exe 2014-03-25 13:45 . 2014-03-25 13:45 13824 ----a-w- c:\windows\system32\mshta.exe 2014-03-25 13:45 . 2014-03-25 13:45 135680 ----a-w- c:\windows\system32\iepeers.dll 2014-03-25 13:45 . 2014-03-25 13:45 13312 ----a-w- c:\windows\SysWow64\mshta.exe 2014-03-25 13:45 . 2014-03-25 13:45 13312 ----a-w- c:\windows\system32\msfeedssync.exe 2014-03-25 13:45 . 2014-03-25 13:45 131072 ----a-w- c:\windows\system32\IEAdvpack.dll 2014-03-25 13:45 . 2014-03-25 13:45 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll 2014-03-25 13:45 . 2014-03-25 13:45 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll 2014-03-25 13:45 . 2014-03-25 13:45 105984 ----a-w- c:\windows\system32\iesysprep.dll 2014-03-25 13:45 . 2014-03-25 13:45 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll 2014-03-25 13:45 . 2014-03-25 13:45 101376 ----a-w- c:\windows\system32\inseng.dll 2014-03-18 02:11 . 2014-03-25 14:01 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2014-03-06 09:31 . 2014-04-09 18:38 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll 2014-03-06 08:59 . 2014-04-09 18:38 66048 ----a-w- c:\windows\system32\iesetup.dll 2014-03-06 08:57 . 2014-04-09 18:38 548352 ----a-w- c:\windows\system32\vbscript.dll 2014-03-06 08:57 . 2014-04-09 18:38 48640 ----a-w- c:\windows\system32\ieetwproxystub.dll 2014-03-06 08:53 . 2014-04-09 18:38 2767360 ----a-w- c:\windows\system32\iertutil.dll 2014-03-06 08:40 . 2014-04-09 18:38 51200 ----a-w- c:\windows\system32\jsproxy.dll 2014-03-06 08:39 . 2014-04-09 18:38 33792 ----a-w- c:\windows\system32\iernonce.dll 2014-03-06 08:32 . 2014-04-09 18:38 574976 ----a-w- c:\windows\system32\ieui.dll 2014-03-06 08:29 . 2014-04-09 18:38 139264 ----a-w- c:\windows\system32\ieUnatt.exe 2014-03-06 08:29 . 2014-04-09 18:38 111616 ----a-w- c:\windows\system32\ieetwcollector.exe 2014-03-06 08:28 . 2014-04-09 18:38 752640 ----a-w- c:\windows\system32\jscript9diag.dll 2014-03-06 08:15 . 2014-04-09 18:38 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2014-03-06 08:11 . 2014-04-09 18:38 5784064 ----a-w- c:\windows\system32\jscript9.dll 2014-03-06 08:09 . 2014-04-09 18:38 453120 ----a-w- c:\windows\system32\dxtmsft.dll 2014-03-06 08:03 . 2014-04-09 18:38 586240 ----a-w- c:\windows\system32\ie4uinit.exe 2014-03-06 08:02 . 2014-04-09 18:38 61952 ----a-w- c:\windows\SysWow64\iesetup.dll 2014-03-06 08:02 . 2014-04-09 18:38 455168 ----a-w- c:\windows\SysWow64\vbscript.dll 2014-03-06 08:01 . 2014-04-09 18:38 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll 2014-03-06 07:56 . 2014-04-09 18:38 38400 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll 2014-03-06 07:48 . 2014-04-09 18:38 195584 ----a-w- c:\windows\system32\msrating.dll 2014-03-06 07:46 . 2014-04-09 18:38 4254720 ----a-w- c:\windows\SysWow64\jscript9.dll 2014-03-06 07:42 . 2014-04-09 18:38 296960 ----a-w- c:\windows\system32\dxtrans.dll 2014-03-06 07:38 . 2014-04-09 18:38 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2014-03-06 07:36 . 2014-04-09 18:38 592896 ----a-w- c:\windows\SysWow64\jscript9diag.dll 2014-03-06 07:21 . 2014-04-09 18:38 628736 ----a-w- c:\windows\system32\msfeeds.dll 2014-03-06 07:13 . 2014-04-09 18:38 32256 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll 2014-03-06 07:11 . 2014-04-09 18:38 2043904 ----a-w- c:\windows\system32\inetcpl.cpl 2014-03-06 06:53 . 2014-04-09 18:38 13551104 ----a-w- c:\windows\system32\ieframe.dll 2014-03-06 06:40 . 2014-04-09 18:38 1967104 ----a-w- c:\windows\SysWow64\inetcpl.cpl 2014-03-06 06:22 . 2014-04-09 18:38 2260480 ----a-w- c:\windows\system32\wininet.dll 2014-03-06 05:58 . 2014-04-09 18:38 1400832 ----a-w- c:\windows\system32\urlmon.dll 2014-03-06 05:50 . 2014-04-09 18:38 846336 ----a-w- c:\windows\system32\ieapfltr.dll 2014-03-06 05:41 . 2014-04-09 18:38 1789440 ----a-w- c:\windows\SysWow64\wininet.dll . . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2013-04-26 292848] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336] "Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\SSMMgr.exe" [2011-08-01 688128] "GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-12-21 959904] . c:\users\Normand\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OneNote 2007 - Capture d'écran et lancement.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2009-2-26 97680] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Secunia PSI Tray.lnk - c:\program files (x86)\Secunia\PSI\psi_tray.exe [2013-12-6 565464] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe;c:\program files (x86)\Secunia\PSI\sua.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] R4 klflt;klflt;c:\windows\system32\DRIVERS\klflt.sys;c:\windows\SYSNATIVE\DRIVERS\klflt.sys [x] S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x] S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x] S0 iusb3hcs;Pilote de commutateur de contrôleur d'hôte Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x] S0 RapportKE64;RapportKE64;c:\windows\System32\Drivers\RapportKE64.sys;c:\windows\SYSNATIVE\Drivers\RapportKE64.sys [x] S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x] S1 klpd;klpd;c:\windows\system32\DRIVERS\klpd.sys;c:\windows\SYSNATIVE\DRIVERS\klpd.sys [x] S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x] S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x] S1 RapportCerberus_68261;RapportCerberus_68261;c:\programdata\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_68261.sys;c:\programdata\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_68261.sys [x] S1 RapportEI64;RapportEI64;c:\program files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys;c:\program files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [x] S1 RapportPG64;RapportPG64;c:\program files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys;c:\program files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [x] S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe;c:\program files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [x] S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x] S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x] S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x] S2 RapportMgmtService;Rapport Management Service;c:\program files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe;c:\program files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [x] S2 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe;c:\program files (x86)\Secunia\PSI\PSIA.exe [x] S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x] S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x] S3 IntcDAud;Son Intel(R) pour écrans;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x] S3 iusb3hub;Pilote de concentrateur Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x] S3 iusb3xhc;Pilote du contrôleur d'hôte extensible Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x] S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x] S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x] S3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf_amd64.sys;c:\windows\SYSNATIVE\DRIVERS\psi_mf_amd64.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] . . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2013-10-22 7203032] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-05-24 165872] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-05-24 407536] "Persistence"="c:\windows\system32\igfxpers.exe" [2013-05-24 444400] "IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2013-08-07 36352] . ------- Examen supplémentaire ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.com/ mStart Page = hxxp://www.google.com mLocal Page = c:\windows\SysWOW64\blank.htm IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 96.22.246.145 24.200.228.113 24.200.210.241 Handler: intu-ir2013 - {B275FD97-299B-40A2-BC39-B96DFA40E50D} - c:\program files (x86)\ImpotRapide 2013\ic2013pp.dll FF - ProfilePath - c:\users\Normand\AppData\Roaming\Mozilla\Firefox\Profiles\wax5o045.default\ FF - prefs.js: browser.startup.homepage - hxxps://www.google.ca/ . - - - - ORPHELINS SUPPRIMES - - - - . HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start . . . --------------------- CLES DE REGISTRE BLOQUEES --------------------- . [HKEY_USERS\S-1-5-21-3626782416-1055994793-4011354015-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.Email.1" . [HKEY_USERS\S-1-5-21-3626782416-1055994793-4011354015-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.VCard.1" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Heure de fin: 2014-06-03 16:00:49 ComboFix-quarantined-files.txt 2014-06-03 20:00 . Avant-CF: 75 704 475 648 octets libres Après-CF: 75 336 839 168 octets libres . - - End Of File - - 3D897162641D55EDA9F793F107A9EC1E A36C5E4F47E84449FF07ED3517B43A31