ComboFix 18-03-14.01 - abderazzak 01/05/2018 23:37:17.3.4 - x64 Microsoft Windows 7 Edition Intégrale 6.1.7601.1.1256.213.1036.18.3990.2318 [GMT 2:00] Running from: c:\users\abderazzak\Desktop\ComboFix.exe AV: ESET Internet Security *Disabled/Updated* {EC1D6F37-E411-475A-DF50-12FF7FE4AC70} FW: ESET ÌÏÇÑ ÍãÇíÉ *Enabled* {D426EE12-AE7E-4602-F40F-BBCA8137EB0B} SP: ESET Internet Security *Disabled/Updated* {577C8ED3-C22B-48D4-E5E0-298D0463E6CD} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((( Files Created from 2018-04-01 to 2018-05-01 ))))))))))))))))))))))))))))))) . . 2018-05-01 21:45 . 2018-05-01 21:45 -------- d-----w- c:\users\Public\AppData\Local\temp 2018-05-01 21:45 . 2018-05-01 21:45 -------- d-----w- c:\users\Default\AppData\Local\temp 2018-05-01 20:48 . 2018-04-13 19:08 14575456 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E27C6561-59AE-4329-B85E-E01A971710AC}\mpengine.dll 2018-04-30 13:55 . 2018-04-30 13:56 -------- d-----w- c:\program files\ProgDVB x64 2018-04-29 08:12 . 2018-05-01 16:50 253664 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2018-04-24 11:00 . 2018-04-24 11:09 -------- d-sh--w- c:\users\abderazzak\AppData\Local\12369 2018-04-24 11:00 . 2018-04-29 12:57 -------- d-----w- c:\users\abderazzak\AppData\Local\Kristans 2018-04-11 17:39 . 2018-03-31 01:09 5120 ----a-w- c:\windows\SysWow64\wow32.dll 2018-04-11 08:40 . 2018-03-14 17:09 656384 ----a-w- c:\windows\system32\aeinv.dll 2018-04-11 08:40 . 2018-03-14 13:05 1559552 ----a-w- c:\windows\system32\appraiser.dll 2018-04-11 08:40 . 2018-03-14 13:05 291840 ----a-w- c:\windows\system32\acmigration.dll 2018-04-11 08:40 . 2018-03-14 17:14 135360 ----a-w- c:\windows\system32\CompatTelRunner.exe 2018-04-11 08:40 . 2018-03-14 13:05 739840 ----a-w- c:\windows\system32\generaltel.dll 2018-04-11 08:40 . 2018-03-14 13:05 599552 ----a-w- c:\windows\system32\devinv.dll 2018-04-11 08:40 . 2018-03-14 13:05 450048 ----a-w- c:\windows\system32\centel.dll 2018-04-11 08:40 . 2018-03-14 13:05 414720 ----a-w- c:\windows\system32\invagent.dll 2018-04-11 08:40 . 2018-03-14 13:05 237056 ----a-w- c:\windows\system32\aepic.dll 2018-04-11 08:40 . 2018-03-14 13:05 1993728 ----a-w- c:\windows\system32\aitstatic.exe 2018-04-03 13:41 . 2018-03-19 10:57 76192 ----a-w- c:\windows\system32\drivers\mbae64.sys . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2018-04-03 14:51 . 2016-12-02 16:09 50136 ----a-w- c:\windows\system32\drivers\ekbdflt.sys 2018-04-03 14:51 . 2016-12-02 16:09 61520 ----a-w- c:\windows\system32\drivers\EpfwLWF.sys 2018-04-03 14:51 . 2015-09-23 07:30 82816 ----a-w- c:\windows\system32\drivers\epfw.sys 2018-04-03 14:51 . 2015-09-23 07:30 108320 ----a-w- c:\windows\system32\drivers\epfwwfp.sys 2018-04-03 14:51 . 2017-05-04 11:18 110432 ----a-w- c:\windows\system32\drivers\edevmon.sys 2018-04-03 14:51 . 2015-09-23 07:30 196112 ----a-w- c:\windows\system32\drivers\ehdrv.sys 2018-04-03 14:51 . 2015-09-23 07:30 137928 ----a-w- c:\windows\system32\drivers\eamonm.sys 2018-03-31 01:09 . 2018-04-11 17:40 44544 ----a-w- c:\windows\apppatch\acwow64.dll 2018-03-11 14:24 . 2017-01-17 13:23 28272 ----a-w- c:\windows\system32\drivers\TrueSight.sys 2018-02-22 03:28 . 2018-03-14 09:44 217600 ----a-w- c:\windows\system32\WinSCard.dll 2018-02-22 03:06 . 2018-03-14 09:44 134656 ----a-w- c:\windows\SysWow64\WinSCard.dll 2018-02-18 21:34 . 2018-03-14 09:44 634272 ----a-w- c:\windows\system32\winload.exe 2018-02-10 18:35 . 2018-03-14 09:44 68288 ----a-w- c:\windows\system32\drivers\volmgr.sys 2018-02-10 18:35 . 2018-03-14 09:44 64192 ----a-w- c:\windows\system32\drivers\ULIAGPKX.SYS 2018-02-10 18:35 . 2018-03-14 09:44 63168 ----a-w- c:\windows\system32\drivers\termdd.sys 2018-02-10 18:35 . 2018-03-14 09:44 12096 ----a-w- c:\windows\system32\drivers\swenum.sys 2018-02-10 18:35 . 2018-03-14 09:44 36032 ----a-w- c:\windows\system32\drivers\vdrvroot.sys 2018-02-10 18:35 . 2018-03-14 09:44 23744 ----a-w- c:\windows\system32\streamci.dll 2018-02-10 18:35 . 2018-03-14 09:44 367296 ----a-w- c:\windows\system32\drivers\msrpc.sys 2018-02-10 18:35 . 2018-03-14 09:44 185024 ----a-w- c:\windows\system32\drivers\pci.sys 2018-02-10 18:35 . 2018-03-14 09:44 31936 ----a-w- c:\windows\system32\drivers\mssmbios.sys 2018-02-10 18:35 . 2018-03-14 09:44 122560 ----a-w- c:\windows\system32\drivers\NV_AGP.SYS 2018-02-10 18:35 . 2018-03-14 09:44 15040 ----a-w- c:\windows\system32\drivers\msisadrv.sys 2018-02-10 18:35 . 2018-03-14 09:44 20160 ----a-w- c:\windows\system32\drivers\isapnp.sys 2018-02-10 18:35 . 2018-03-14 09:44 334528 ----a-w- c:\windows\system32\drivers\acpi.sys 2018-02-10 18:35 . 2018-03-14 09:44 60608 ----a-w- c:\windows\system32\drivers\AGP440.sys 2018-02-10 18:23 . 2018-03-14 09:44 330240 ----a-w- c:\windows\SysWow64\zipfldr.dll 2018-02-10 18:23 . 2018-03-14 09:44 111616 ----a-w- c:\windows\SysWow64\racpldlg.dll 2018-02-10 18:23 . 2018-03-14 09:44 2292224 ----a-w- c:\windows\SysWow64\MSVidCtl.dll 2018-02-10 18:11 . 2018-03-14 09:44 369664 ----a-w- c:\windows\system32\zipfldr.dll 2018-02-10 18:11 . 2018-03-14 09:44 119296 ----a-w- c:\windows\system32\racpldlg.dll 2018-02-10 18:11 . 2018-03-14 09:44 3665920 ----a-w- c:\windows\system32\MSVidCtl.dll 2018-02-10 18:11 . 2018-03-14 09:44 133120 ----a-w- c:\windows\system32\msrahc.dll 2018-02-10 17:36 . 2018-03-14 09:44 40960 ----a-w- c:\windows\SysWow64\sdchange.exe 2018-02-10 17:36 . 2018-03-14 09:44 108032 ----a-w- c:\windows\SysWow64\msra.exe 2018-02-10 17:36 . 2018-03-14 09:44 7168 ----a-w- c:\windows\SysWow64\MsraLegacy.tlb 2018-02-10 17:26 . 2018-03-14 09:44 653312 ----a-w- c:\windows\system32\msra.exe 2018-02-10 17:26 . 2018-03-14 09:44 51712 ----a-w- c:\windows\system32\sdchange.exe 2018-02-10 17:25 . 2018-03-14 09:44 7168 ----a-w- c:\windows\system32\MsraLegacy.tlb 2018-02-10 17:25 . 2018-03-14 09:44 14336 ----a-w- c:\windows\system32\drivers\wmiacpi.sys 2018-02-10 17:25 . 2018-03-14 09:44 9728 ----a-w- c:\windows\system32\drivers\errdev.sys 2018-02-02 18:40 . 2018-03-14 09:44 114368 ----a-w- c:\windows\system32\consent.exe 2018-02-02 18:29 . 2018-03-14 09:44 2365952 ----a-w- c:\windows\SysWow64\msi.dll 2018-02-02 18:29 . 2018-03-14 09:44 337408 ----a-w- c:\windows\SysWow64\msihnd.dll 2018-02-02 18:29 . 2018-03-14 09:44 25088 ----a-w- c:\windows\SysWow64\msimsg.dll 2018-02-02 18:28 . 2018-03-14 09:44 1806848 ----a-w- c:\windows\SysWow64\authui.dll 2018-02-02 18:16 . 2018-03-14 09:44 3246080 ----a-w- c:\windows\system32\msi.dll 2018-02-02 18:16 . 2018-03-14 09:44 504320 ----a-w- c:\windows\system32\msihnd.dll 2018-02-02 18:16 . 2018-03-14 09:44 25088 ----a-w- c:\windows\system32\msimsg.dll 2018-02-02 18:14 . 2018-03-14 09:44 1942016 ----a-w- c:\windows\system32\authui.dll 2018-02-02 18:14 . 2018-03-14 09:44 70144 ----a-w- c:\windows\system32\appinfo.dll 2018-02-02 17:46 . 2018-03-14 09:44 73216 ----a-w- c:\windows\SysWow64\msiexec.exe 2018-02-02 17:36 . 2018-03-14 09:44 128512 ----a-w- c:\windows\system32\msiexec.exe . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584] "ProgLauncher"="c:\program files\ProgDVB x64\ProgLauncher.exe" [2018-04-20 659184] . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService] @="Service" . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 MxService;MxService;c:\program files (x86)\Maxthon5\Bin\MxService.exe;c:\program files (x86)\Maxthon5\Bin\MxService.exe [x] R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe;c:\windows\SYSNATIVE\AppleChargerSrv.exe [x] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x] R3 fcvsc;fcvsc;c:\windows\system32\drivers\fcvsc.sys;c:\windows\SYSNATIVE\drivers\fcvsc.sys [x] R3 gencounter;Microsoft Hyper-V Generation Counter;c:\windows\system32\drivers\vmgencounter.sys;c:\windows\SYSNATIVE\drivers\vmgencounter.sys [x] R3 hyperkbd;hyperkbd;c:\windows\system32\drivers\hyperkbd.sys;c:\windows\SYSNATIVE\drivers\hyperkbd.sys [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x] R3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys;c:\windows\SYSNATIVE\pwdspio.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 Synth3dVsc;Microsoft Virtual 3D Video Transport Driver;c:\windows\system32\drivers\Synth3dVsc.sys;c:\windows\SYSNATIVE\drivers\Synth3dVsc.sys [x] R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x] R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] R3 wdm_usb;wdm_usb;c:\windows\system32\DRIVERS\usb2ser.sys;c:\windows\SYSNATIVE\DRIVERS\usb2ser.sys [x] S0 edevmon;edevmon;c:\windows\system32\DRIVERS\edevmon.sys;c:\windows\SYSNATIVE\DRIVERS\edevmon.sys [x] S0 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys;c:\windows\SYSNATIVE\pwdrvio.sys [x] S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AppleCharger.sys [x] S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x] S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x] S1 EpfwLWF;ESET Personal Firewall;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x] S1 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x] S2 AGSService;Adobe Genuine Software Integrity Service;c:\program files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe;c:\program files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [x] S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x] S2 ekbdflt;ekbdflt;c:\windows\system32\DRIVERS\ekbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\ekbdflt.sys [x] S2 ekrn;ESET Service;c:\program files\ESET\ESET Security\ekrn.exe;c:\program files\ESET\ESET Security\ekrn.exe [x] S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys;c:\windows\SYSNATIVE\DRIVERS\idmwfp.sys [x] S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x] S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x] S2 MaxthonUpdateSvc;Maxthon Core Update Service;c:\program files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe;c:\program files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe [x] S2 MBAMService;Malwarebytes Service;c:\program files\Malwarebytes\Anti-Malware\mbamservice.exe;c:\program files\Malwarebytes\Anti-Malware\mbamservice.exe [x] S2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys;c:\windows\SYSNATIVE\drivers\npf.sys [x] S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x] S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x] S3 IUFileFilter;IUFileFilter;c:\program files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IUFileFilter.sys;c:\program files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IUFileFilter.sys [x] S3 IURegProcessFilter;IURegProcessFilter;c:\program files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IURegProcessFilter.sys;c:\program files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IURegProcessFilter.sys [x] S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\System32\Drivers\mbamswissarmy.sys;c:\windows\SYSNATIVE\Drivers\mbamswissarmy.sys [x] S3 SKYNET;TechniSat DVB-PC TV Star PCI;c:\windows\system32\DRIVERS\SkyNET_AMD64.SYS;c:\windows\SYSNATIVE\DRIVERS\SkyNET_AMD64.SYS [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr QWAVE wcncsvc . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}] 2017-05-22 09:16 2478880 ----a-w- c:\program files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-01-12 170264] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-01-12 398104] "Persistence"="c:\windows\system32\igfxpers.exe" [2012-01-12 440600] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-01-16 12445288] "egui"="c:\program files\ESET\ESET Security\ecmds.exe" [2018-04-03 178496] . ------- Supplementary Scan ------- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyServer = 149.56.36.54:80 IE: E&xporter vers Microsoft Excel - c:\program files (x86)\MICROS~1\Office12\EXCEL.EXE/3000 IE: ÊÍãíá Çáßá ÈæÇÓØÉ Internet Download Manager - c:\program files (x86)\Internet Download Manager\IEGetAll.htm IE: ÊÍãíá ÈæÇÓØÉ Internet Download Manager - c:\program files (x86)\Internet Download Manager\IEExt.htm Trusted Zone: eset.com\help TCP: DhcpNameServer = 0.0.0.0 FF - ProfilePath - c:\users\abderazzak\AppData\Roaming\Mozilla\Firefox\Profiles\fuaajkzx.default\ . - - - - ORPHANS REMOVED - - - - . {CDC95B92-E27C-4745-A8C5-64A52A78855D}"-IDM Shell Extension - ShellIconOverlayIdentifiers . . . --------------------- LOCKED REGISTRY KEYS --------------------- . [HKEY_USERS\S-1-5-21-155762465-3415061182-3351304667-1000_Classes\Wow6432Node\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}] @Denied: (Full) (Everyone) "scansk"=hex(0):2b,15,00,62,f9,15,b8,db,0d,82,3d,56,80,c8,89,23,42,66,7e,c0,ec, 56,2d,2d,5c,ad,c5,35,3c,e3,2a,e4,57,58,5d,e4,17,21,30,0f,00,00,00,00,00,00,\ . [HKEY_USERS\S-1-5-21-155762465-3415061182-3351304667-1000_Classes\Wow6432Node\CLSID\{e86b1dcf-ee8e-446a-9e80-b2e7c43a9af4}] @Denied: (Full) (Everyone) @Allowed: (Read) (RestrictedCode) "Model"=dword:00000160 "Therad"=dword:0000000f . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Program Files (x86)\\GIGABYTE\\ET6\\Flash11e.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Program Files (x86)\\GIGABYTE\\ET6\\Flash11e.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Program Files (x86)\\GIGABYTE\\ET6\\Flash11e.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Program Files (x86)\\GIGABYTE\\ET6\\Flash11e.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2018-05-01 23:58:50 ComboFix-quarantined-files.txt 2018-05-01 21:58 . Pre-Run: 35 406 520 320 octets libres Post-Run: 35 062 157 312 octets libres . - - End Of File - - CA2732218CAF0AF34F9A322881422E0D A36C5E4F47E84449FF07ED3517B43A31