ComboFix 17-03-28.01 - Web 31/03/2017 9:29.2.4 - x64 MINIMAL
Microsoft Windows 7 Professionnel 6.1.7601.1.1252.33.1036.18.8066.6534 [GMT 2:00]
Lancé depuis: c:\users\Web\Downloads\ComboFix.exe
AV: AVG Antivirus *Enabled/Updated* {4D41356F-32AD-7C42-C820-63775EE4F413}
SP: AVG Antivirus *Enabled/Updated* {F620D48B-1497-73CC-F290-58052563BEAE}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Un nouveau point de restauration a été créé
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Exécution préalable -------
.
c:\users\Web\AppData\Local\Temp\b0494a1f-4bd3-4QlMWbVEg9J4ekRhBMTeLQ==\FriendlyFilterPlatform.dll
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2017-02-28 au 2017-03-31 ))))))))))))))))))))))))))))))))))))
.
.
2017-03-31 07:32 . 2017-03-31 07:32 -------- d-----w- c:\users\Default\AppData\Local\temp
2017-03-31 07:20 . 2017-03-31 07:20 -------- d-----w- C:\$AV_AVG
2017-03-31 06:47 . 2017-03-31 06:47 -------- d-----w- C:\Quarantine
2017-03-30 15:02 . 2017-03-30 15:02 -------- d-----r- C:\Sandbox
2017-03-30 14:47 . 2017-03-30 14:45 400928 ----a-w- c:\windows\system32\avgBoot.exe
2017-03-30 14:20 . 2017-03-30 14:20 250672 ----a-w- c:\windows\system32\mfevtps.exe
2017-03-30 14:20 . 2017-03-30 14:20 864072 ----a-w- c:\windows\system32\drivers\mfehidk.sys
2017-03-30 14:20 . 2017-03-30 14:20 106120 ----a-w- c:\windows\system32\drivers\mferkdet.sys
2017-03-30 14:19 . 2017-03-30 14:19 -------- d-----w- c:\program files\McAfee
2017-03-30 14:19 . 2017-03-31 06:47 -------- d-----w- c:\program files\stinger
2017-03-30 12:52 . 2014-07-09 02:03 7168 ----a-w- c:\windows\system32\KBDTAT.DLL
2017-03-30 12:52 . 2014-07-09 01:31 7168 ----a-w- c:\windows\SysWow64\KBDYAK.DLL
2017-03-30 12:52 . 2014-07-09 01:31 6656 ----a-w- c:\windows\SysWow64\KBDBASH.DLL
2017-03-30 12:52 . 2014-07-09 02:03 7168 ----a-w- c:\windows\system32\KBDYAK.DLL
2017-03-30 12:52 . 2014-07-09 02:03 7168 ----a-w- c:\windows\system32\KBDRU1.DLL
2017-03-30 12:52 . 2014-07-09 02:03 6656 ----a-w- c:\windows\system32\KBDRU.DLL
2017-03-30 12:52 . 2014-07-09 02:03 7168 ----a-w- c:\windows\system32\KBDBASH.DLL
2017-03-30 12:49 . 2016-05-13 22:07 91136 ----a-w- c:\windows\system32\WinSetupUI.dll
2017-03-30 12:49 . 2016-05-13 21:53 37888 ----a-w- c:\windows\system32\wuapp.exe
2017-03-30 12:49 . 2016-05-13 21:52 140288 ----a-w- c:\windows\system32\wuauclt.exe
2017-03-30 12:49 . 2016-05-13 22:09 3156480 ----a-w- c:\windows\system32\wucltux.dll
2017-03-30 12:49 . 2016-05-13 21:50 174080 ----a-w- c:\windows\SysWow64\wuwebv.dll
2017-03-30 12:49 . 2016-05-13 21:38 35328 ----a-w- c:\windows\SysWow64\wuapp.exe
2017-03-30 12:49 . 2016-05-13 21:38 93696 ----a-w- c:\windows\SysWow64\wudriver.dll
2017-03-30 12:49 . 2016-05-13 22:09 98816 ----a-w- c:\windows\system32\wudriver.dll
2017-03-30 12:49 . 2016-05-13 22:09 192512 ----a-w- c:\windows\system32\wuwebv.dll
2017-03-30 12:49 . 2016-05-13 21:55 2607104 ----a-w- c:\windows\system32\wuaueng.dll
2017-03-30 12:49 . 2016-05-13 21:53 709120 ----a-w- c:\windows\system32\wuapi.dll
2017-03-30 12:49 . 2016-05-13 21:38 573440 ----a-w- c:\windows\SysWow64\wuapi.dll
2017-03-30 12:48 . 2016-05-13 21:38 30208 ----a-w- c:\windows\SysWow64\wups.dll
2017-03-30 12:48 . 2016-05-13 21:52 36864 ----a-w- c:\windows\system32\wups.dll
2017-03-30 12:48 . 2016-05-13 21:52 37888 ----a-w- c:\windows\system32\wups2.dll
2017-03-30 12:48 . 2016-05-13 21:52 12288 ----a-w- c:\windows\system32\wu.upgrade.ps.dll
2017-03-30 12:48 . 2016-05-12 15:18 90624 ----a-w- c:\windows\SysWow64\olepro32.dll
2017-03-30 12:45 . 2013-11-22 22:48 3928064 ----a-w- c:\windows\system32\d2d1.dll
2017-03-30 12:45 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2017-03-30 08:25 . 2017-03-30 08:32 -------- d-----w- c:\program files (x86)\Deluge
2017-03-30 07:16 . 2017-03-30 07:16 -------- d-----w- c:\program files\Sandboxie
2017-03-30 06:22 . 2017-03-30 06:23 -------- d-----w- c:\program files (x86)\Mailbird
2017-03-29 22:47 . 2017-03-29 12:56 -------- d-----w- c:\windows\Panther
2017-03-29 22:47 . 2017-03-29 22:47 -------- d-----w- c:\windows\system32\OEM
2017-03-29 15:53 . 2015-07-30 13:13 103120 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2017-03-29 15:53 . 2015-07-30 13:13 124624 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2017-03-29 15:50 . 2016-04-14 13:49 603648 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2017-03-29 15:50 . 2016-04-14 13:21 647680 ----a-w- c:\windows\system32\d3d10level9.dll
2017-03-29 15:50 . 2015-12-08 21:54 2285056 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2017-03-29 15:50 . 2015-12-08 19:07 2777088 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2017-03-29 15:50 . 2015-02-03 03:31 1424896 ----a-w- c:\windows\system32\WindowsCodecs.dll
2017-03-29 15:50 . 2015-02-03 03:12 1230848 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2017-03-29 15:50 . 2015-02-04 03:16 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2017-03-29 15:50 . 2015-02-04 02:54 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2017-03-29 15:46 . 2017-03-29 15:46 451 ----a-w- c:\windows\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2017-03-29 15:36 . 2017-03-29 15:36 -------- d-----w- c:\windows\SysWow64\Wat
2017-03-29 15:36 . 2017-03-29 15:36 -------- d-----w- c:\windows\system32\Wat
2017-03-29 15:29 . 2017-03-29 15:29 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2017-03-29 15:20 . 2017-03-31 07:20 -------- d-----w- c:\programdata\NVIDIA
2017-03-29 15:20 . 2013-05-14 13:53 6411552 ----a-w- c:\windows\system32\nvcpl.dll
2017-03-29 15:20 . 2013-05-14 13:53 3462432 ----a-w- c:\windows\system32\nvsvc64.dll
2017-03-29 15:20 . 2013-05-14 13:53 3165737 ----a-w- c:\windows\system32\nvcoproc.bin
2017-03-29 15:20 . 2013-05-14 13:53 884512 ----a-w- c:\windows\system32\nvvsvc.exe
2017-03-29 15:20 . 2013-05-14 13:53 76064 ----a-w- c:\windows\system32\nv3dappshextr.dll
2017-03-29 15:20 . 2013-05-14 13:53 63776 ----a-w- c:\windows\system32\nvshext.dll
2017-03-29 15:20 . 2013-05-14 13:53 2558240 ----a-w- c:\windows\system32\nvsvcr.dll
2017-03-29 15:20 . 2013-05-14 13:53 118560 ----a-w- c:\windows\system32\nvmctray.dll
2017-03-29 15:20 . 2013-05-14 13:53 1001760 ----a-w- c:\windows\system32\nv3dappshext.dll
2017-03-29 15:19 . 2017-03-29 15:20 -------- d-----w- c:\programdata\NVIDIA Corporation
2017-03-29 15:19 . 2017-03-29 15:20 -------- d-----w- c:\program files (x86)\NVIDIA Corporation
2017-03-29 15:19 . 2017-03-29 15:20 -------- d-----w- c:\program files\NVIDIA Corporation
2017-03-29 15:14 . 2017-03-29 15:14 -------- d-----w- c:\program files (x86)\Intel
2017-03-29 15:14 . 2015-08-27 16:20 72704 ----a-w- c:\windows\system32\OpenCL.DLL
2017-03-29 15:14 . 2015-08-27 16:20 69120 ----a-w- c:\windows\SysWow64\OpenCL.DLL
2017-03-29 15:14 . 2017-03-29 15:14 -------- d-----w- C:\Intel
2017-03-29 15:14 . 2017-03-29 15:14 -------- d-----w- c:\program files\Intel
2017-03-29 15:14 . 2017-03-29 15:14 -------- d-----w- c:\program files (x86)\Common Files\Intel
2017-03-29 15:05 . 2017-03-29 15:05 -------- d-----w- c:\windows\system32\MRT
2017-03-29 14:54 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2017-03-29 14:54 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2017-03-29 14:54 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2017-03-29 14:54 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2017-03-29 14:54 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2017-03-29 14:54 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2017-03-29 14:54 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2017-03-29 14:49 . 2017-03-29 14:49 -------- d-----w- c:\programdata\MapControl
2017-03-29 14:38 . 2017-03-29 14:38 -------- d-s---w- c:\windows\system32\CompatTel
2017-03-29 14:38 . 2017-03-29 14:38 -------- d-----w- c:\windows\system32\appraiser
2017-03-29 14:37 . 2017-03-29 14:37 -------- d-----w- c:\programdata\Package Cache
2017-03-29 14:36 . 2017-03-29 14:36 -------- d-----w- c:\windows\Migration
2017-03-29 14:36 . 2017-03-29 14:36 -------- d-----w- c:\program files (x86)\Microsoft.NET
2017-03-29 14:35 . 2016-09-22 13:26 34520 ----a-w- c:\windows\system32\drivers\tapipvanish.sys
2017-03-29 14:35 . 2017-03-31 06:06 -------- d-----w- c:\program files\IPVanish
2017-03-29 14:35 . 2017-03-31 07:26 -------- d-----w- c:\programdata\TinyWall
2017-03-29 14:35 . 2017-03-29 14:35 -------- d-----w- c:\program files (x86)\TinyWall
2017-03-29 14:16 . 2014-06-30 22:24 8856 ----a-w- c:\windows\system32\icardres.dll
2017-03-29 14:16 . 2014-06-30 22:14 8856 ----a-w- c:\windows\SysWow64\icardres.dll
2017-03-29 14:16 . 2014-03-09 21:48 171160 ----a-w- c:\windows\system32\infocardapi.dll
2017-03-29 14:16 . 2014-03-09 21:48 1389208 ----a-w- c:\windows\system32\icardagt.exe
2017-03-29 14:16 . 2014-03-09 21:47 99480 ----a-w- c:\windows\SysWow64\infocardapi.dll
2017-03-29 14:16 . 2014-03-09 21:47 619672 ----a-w- c:\windows\SysWow64\icardagt.exe
2017-03-29 14:16 . 2014-06-06 06:16 35480 ----a-w- c:\windows\SysWow64\TsWpfWrp.exe
2017-03-29 14:16 . 2014-06-06 06:12 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
2017-03-29 14:12 . 2016-03-16 18:50 156672 ----a-w- c:\windows\system32\mtxoci.dll
2017-03-29 14:11 . 2015-07-10 17:51 44032 ----a-w- c:\windows\system32\tsgqec.dll
2017-03-29 14:10 . 2016-02-05 01:19 381440 ----a-w- c:\windows\system32\mfds.dll
2017-03-29 14:04 . 2015-07-23 00:02 879104 ----a-w- c:\windows\system32\tdh.dll
2017-03-29 14:04 . 2015-07-22 17:53 635392 ----a-w- c:\windows\SysWow64\tdh.dll
2017-03-29 13:59 . 2016-05-11 17:02 483840 ----a-w- c:\windows\system32\StructuredQuery.dll
2017-03-29 13:59 . 2016-05-11 15:19 363520 ----a-w- c:\windows\SysWow64\StructuredQuery.dll
2017-03-29 13:59 . 2015-12-08 21:53 509952 ----a-w- c:\windows\SysWow64\qedit.dll
2017-03-29 13:59 . 2015-12-08 19:07 624640 ----a-w- c:\windows\system32\qedit.dll
2017-03-29 13:59 . 2016-02-09 09:55 30720 ----a-w- c:\windows\system32\seclogon.dll
2017-03-29 13:59 . 2015-02-25 03:18 754688 ----a-w- c:\windows\system32\drivers\http.sys
2017-03-29 13:59 . 2016-01-22 06:18 961024 ----a-w- c:\windows\system32\CPFilters.dll
2017-03-29 13:59 . 2016-01-22 06:18 723968 ----a-w- c:\windows\system32\EncDec.dll
2017-03-29 13:59 . 2016-01-22 06:04 642048 ----a-w- c:\windows\SysWow64\CPFilters.dll
2017-03-29 13:59 . 2016-01-22 06:04 535040 ----a-w- c:\windows\SysWow64\EncDec.dll
2017-03-29 13:46 . 2017-03-29 14:34 -------- d-----w- c:\program files (x86)\Google
2017-03-29 13:45 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll
2017-03-29 13:45 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll
2017-03-29 13:45 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2017-03-29 13:44 . 2017-03-31 06:10 -------- d-sh--w- c:\windows\Installer
2017-03-29 13:44 . 2017-03-29 13:45 -------- d-----w- c:\program files (x86)\AVG
2017-03-29 13:43 . 2017-03-30 08:16 -------- d-----w- c:\programdata\Avg
2017-03-29 13:43 . 2017-03-29 13:43 -------- d--h--w- c:\programdata\Common Files
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2017-02-09 16:14 . 2017-03-29 14:10 44032 ----a-w- c:\windows\apppatch\acwow64.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Mailbird"="c:\program files (x86)\Mailbird\Mailbird.exe" [2017-03-28 6771584]
"SandboxieControl"="c:\program files\Sandboxie\SbieCtrl.exe" [2016-12-14 799376]
"Spotify Web Helper"="c:\users\Web\AppData\Roaming\Spotify\SpotifyWebHelper.exe" [2017-03-30 1446000]
"Spotify"="c:\users\Web\AppData\Roaming\Spotify\Spotify.exe" [2017-03-30 7089776]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R0 avgbidsh;avgbidsh;c:\windows\\SystemRoot\system32\drivers\avgbidsha.sys;c:\windows\\SystemRoot\system32\drivers\avgbidsha.sys [x]
R0 avgblog;avgblog;c:\windows\\SystemRoot\system32\drivers\avgbloga.sys;c:\windows\\SystemRoot\system32\drivers\avgbloga.sys [x]
R0 avgbuniv;avgbuniv;c:\windows\\SystemRoot\system32\drivers\avgbuniva.sys;c:\windows\\SystemRoot\system32\drivers\avgbuniva.sys [x]
R0 avgRvrt;avgRvrt;c:\windows\\SystemRoot\system32\drivers\avgRvrt.sys;c:\windows\\SystemRoot\system32\drivers\avgRvrt.sys [x]
R0 avgVmm;avgVmm;c:\windows\\SystemRoot\system32\drivers\avgVmm.sys;c:\windows\\SystemRoot\system32\drivers\avgVmm.sys [x]
R1 avgbdisk;avgbdisk;c:\windows\system32\drivers\avgbdiska.sys;c:\windows\SYSNATIVE\drivers\avgbdiska.sys [x]
R1 avgbidsdriver;avgbidsdriver;c:\windows\system32\drivers\avgbidsdrivera.sys;c:\windows\SYSNATIVE\drivers\avgbidsdrivera.sys [x]
R1 avgRdr;avgRdr;c:\windows\system32\drivers\avgRdr2.sys;c:\windows\SYSNATIVE\drivers\avgRdr2.sys [x]
R1 avgSnx;avgSnx;c:\windows\system32\drivers\avgSnx.sys;c:\windows\SYSNATIVE\drivers\avgSnx.sys [x]
R1 avgSP;avgSP;c:\windows\system32\drivers\avgSP.sys;c:\windows\SYSNATIVE\drivers\avgSP.sys [x]
R2 AVG Antivirus;AVG Antivirus;c:\program files (x86)\AVG\Antivirus\AVGSvc.exe;c:\program files (x86)\AVG\Antivirus\AVGSvc.exe [x]
R2 avgMonFlt;avgMonFlt;c:\windows\system32\drivers\avgMonFlt.sys;c:\windows\SYSNATIVE\drivers\avgMonFlt.sys [x]
R2 avgStm;avgStm;c:\windows\system32\drivers\avgStm.sys;c:\windows\SYSNATIVE\drivers\avgStm.sys [x]
R2 avgsvc;AVG Service;c:\program files (x86)\AVG\Framework\Common\avgsvca.exe;c:\program files (x86)\AVG\Framework\Common\avgsvca.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
R2 igfxCUIService1.0.0.0;Intel(R) HD Graphics Control Panel Service;c:\windows\system32\igfxCUIService.exe;c:\windows\SYSNATIVE\igfxCUIService.exe [x]
R2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe;c:\windows\SYSNATIVE\mfevtps.exe [x]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
R2 TinyWall;TinyWall Service;c:\program files (x86)\TinyWall\TinyWall.exe;c:\program files (x86)\TinyWall\TinyWall.exe [x]
R3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\drivers\amdhub30.sys;c:\windows\SYSNATIVE\drivers\amdhub30.sys [x]
R3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\drivers\amdxhc.sys;c:\windows\SYSNATIVE\drivers\amdxhc.sys [x]
R3 avgbIDSAgent;avgbIDSAgent;c:\program files (x86)\AVG\Antivirus\x64\aswidsagenta.exe;c:\program files (x86)\AVG\Antivirus\x64\aswidsagenta.exe [x]
R3 avgHwid;avgHwid;c:\windows\system32\drivers\avgHwid.sys;c:\windows\SYSNATIVE\drivers\avgHwid.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 iaStorB;iaStorB;c:\windows\system32\drivers\iaStorB.sys;c:\windows\SYSNATIVE\drivers\iaStorB.sys [x]
R3 iaStorS;iaStorS;c:\windows\system32\drivers\iaStorS.sys;c:\windows\SYSNATIVE\drivers\iaStorS.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 IntcDAud;Son Intel(R) pour écrans;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
R3 iusb3hub;Intel(R) USB 3.0 Hub Driver;c:\windows\system32\drivers\iusb3hub.sys;c:\windows\SYSNATIVE\drivers\iusb3hub.sys [x]
R3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\drivers\iusb3xhc.sys;c:\windows\SYSNATIVE\drivers\iusb3xhc.sys [x]
R3 MailbirdUpdater.exe;Mailbird Updater;c:\program files (x86)\Mailbird\MailbirdUpdater.exe;c:\program files (x86)\Mailbird\MailbirdUpdater.exe [x]
R3 megasas2;megasas2;c:\windows\system32\drivers\megasas2.sys;c:\windows\SYSNATIVE\drivers\megasas2.sys [x]
R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys;c:\windows\SYSNATIVE\drivers\mferkdet.sys [x]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\drivers\nusb3hub.sys;c:\windows\SYSNATIVE\drivers\nusb3hub.sys [x]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\drivers\nusb3xhc.sys;c:\windows\SYSNATIVE\drivers\nusb3xhc.sys [x]
R3 tapipvanish;IPVanish Adapter;c:\windows\system32\DRIVERS\tapipvanish.sys;c:\windows\SYSNATIVE\DRIVERS\tapipvanish.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 iaStorA;iaStorA;c:\windows\system32\drivers\iaStorA.sys;c:\windows\SYSNATIVE\drivers\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\drivers\iaStorF.sys;c:\windows\SYSNATIVE\drivers\iaStorF.sys [x]
S0 iusb3hcs;Pilote de commutateur de contrôleur d'hôte Intel(R) USB 3.0;c:\windows\system32\drivers\iusb3hcs.sys;c:\windows\SYSNATIVE\drivers\iusb3hcs.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\drivers\usbfilter.sys;c:\windows\SYSNATIVE\drivers\usbfilter.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr QWAVE wcncsvc
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AvgUi"="c:\program files (x86)\AVG\Framework\Common\avguirna.exe" [2017-03-23 239104]
"AVGUI.exe"="c:\program files (x86)\AVG\Antivirus\AvLaunch.exe" [2017-03-30 263088]
"TinyWall Controller"="c:\program files (x86)\TinyWall\TinyWall.exe" [2016-03-10 698296]
"nwiz"="c:\program files\NVIDIA Corporation\nview\nwiz.exe" [2013-06-05 2716960]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"RealProtect"="c:\program files\McAfee\Real Protect\RealProtect.exe" [2017-03-30 6876320]
.
------- Examen supplémentaire -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 198.18.0.1 198.18.0.2
TCP: Interfaces\{0178D835-96D3-4919-B386-1D145CB8FFE2}: NameServer = 8.8.8.8,8.8.4.4
.
- - - - ORPHELINS SUPPRIMES - - - -
.
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
.
.
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Heure de fin: 2017-03-31 09:33:12
ComboFix-quarantined-files.txt 2017-03-31 07:33
.
Avant-CF: 196 568 944 640 octets libres
Après-CF: 196 054 192 128 octets libres
.
- - End Of File - - D06B30448446E4A3E3CDAF56312CAB7B
A36C5E4F47E84449FF07ED3517B43A31