Malwarebytes Anti-Malware
www.malwarebytes.org

Date de l'examen: 01/06/2015
Heure de l'examen: 20:26:04
Fichier journal: mbam.txt
Administrateur: Oui

Version: 2.01.6.1022
Base de données Malveillants: v2015.06.01.05
Base de données Rootkits: v2015.05.31.01
Licence: Gratuit
Protection contre les malveillants: Désactivé(e)
Protection contre les sites Web malveillants: Désactivé(e)
Auto-protection: Désactivé(e)

Système d'exploitation: Windows 8.1
Processeur: x64
Système de fichiers: NTFS
Utilisateur: adopi

Type d'examen: Examen "Menaces"
Résultat: Terminé
Objets analysés: 361029
Temps écoulé: 5 min, 46 sec

Mémoire: Activé(e)
Démarrage: Activé(e)
Système de fichiers: Activé(e)
Archives: Activé(e)
Rootkits: Activé(e)
Heuristique: Activé(e)
PUP: Activé(e)
PUM: Activé(e)

Processus: 0
(Aucun élément malicieux détecté)

Modules: 0
(Aucun élément malicieux détecté)

Clés du Registre: 26
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{65CE308E-25AB-4E00-92E0-9734F21CFCCD}, Mis en quarantaine, [3752cfe69cee12249611a1db3dc8d828],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E7C7D223-46E7-44D2-9EB9-7A42E7B275EE}, Mis en quarantaine, [19700baa216957df178eff7d9b6af30d],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{65CE308E-25AB-4E00-92E0-9734F21CFCCD}, Mis en quarantaine, [5534318492f8ad89773082faca3b0ff1],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E7C7D223-46E7-44D2-9EB9-7A42E7B275EE}, Mis en quarantaine, [3b4e9223a8e24beb4263413bbb4a20e0],
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Mis en quarantaine, [fc8d2a8b8a0085b14330392339cc7789],
PUP.Optional.WinService86.A, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\winservice86, Mis en quarantaine, [4d3c9124d5b579bd6a892ed522e2da26],
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2562B9C1-1E82-44C2-A583-2750272839EF}, Mis en quarantaine, [aedb2d88206ae84ef2b237458a7b52ae],
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F850D0E-4A9C-45EC-927B-1A494D37CC34}, Mis en quarantaine, [e1a8d3e26a206dc9e0c33d3fd53009f7],
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{65CE308E-25AB-4E00-92E0-9734F21CFCCD}, Mis en quarantaine, [6c1d32839bef61d533710676d82da759],
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{90F33B9A-AB71-4A39-8577-E4BB50BF9AA5}, Mis en quarantaine, [d5b451642d5de0569e0627552cd97b85],
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C66F1004-D2F4-4C27-A34E-726B2A41E1A9}, Mis en quarantaine, [c1c8dadb8cfe83b3faaa1369ec19e31d],
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7F7BF0A-8DE7-4F45-BC44-65D1FD5233F4}, Mis en quarantaine, [6e1bcee73d4d40f6b1f33547de2732ce],
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D60FCB68-1611-4BFA-B673-F78F7CF32313}, Mis en quarantaine, [4544e2d31f6b171fd8cb7606b4514ab6],
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E7C7D223-46E7-44D2-9EB9-7A42E7B275EE}, Mis en quarantaine, [6128c5f0b3d722140f93c9b382838c74],
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F041AB69-88D0-493A-BAE8-8F731DA1EBC1}, Mis en quarantaine, [7118b10491f955e1287c91eb778e12ee],
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F7794E69-FF3E-4544-8375-15BE14A7E7D7}, Mis en quarantaine, [3b4e298ce4a6af87d2d19ce0d332d828],
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F9911231-552B-4ECC-B2A7-1AE776F3F452}, Mis en quarantaine, [fc8dc6ef4842d165f1b20b71e025c13f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2562B9C1-1E82-44C2-A583-2750272839EF}, Mis en quarantaine, [e6a311a4a5e57fb70b99e399da2b46ba],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F850D0E-4A9C-45EC-927B-1A494D37CC34}, Mis en quarantaine, [a5e4961ff496e74f861d205c5fa6ff01],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{90F33B9A-AB71-4A39-8577-E4BB50BF9AA5}, Mis en quarantaine, [91f84a6bd0ba9f970d97126ae520b64a],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C66F1004-D2F4-4C27-A34E-726B2A41E1A9}, Mis en quarantaine, [b7d25c59dcaec96d812387f5ff06718f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7F7BF0A-8DE7-4F45-BC44-65D1FD5233F4}, Mis en quarantaine, [48419d1899f1c175cfd5304c9c6912ee],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D60FCB68-1611-4BFA-B673-F78F7CF32313}, Mis en quarantaine, [1c6de2d342487bbba6fd4735e91c30d0],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F041AB69-88D0-493A-BAE8-8F731DA1EBC1}, Mis en quarantaine, [4d3cb40151390f27f9ab384458ad7c84],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F7794E69-FF3E-4544-8375-15BE14A7E7D7}, Mis en quarantaine, [0782ad082862f046257e4a32bf46bf41],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F9911231-552B-4ECC-B2A7-1AE776F3F452}, Mis en quarantaine, [ef9ad6df1b6ff4420a99bac2877eeb15],

Valeurs du Registre: 25
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{65ce308e-25ab-4e00-92e0-9734f21cfccd}|AppName, winservice86-codedownloader.exe, Mis en quarantaine, [3752cfe69cee12249611a1db3dc8d828]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{e7c7d223-46e7-44d2-9eb9-7a42e7b275ee}|AppName, winservice86-bg.exe, Mis en quarantaine, [19700baa216957df178eff7d9b6af30d]
PUP.Optional.Astromenda.C, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|AppPath, C:\Program Files (x86)\WSE_Astromenda\\, Mis en quarantaine, [22674f662a60003692216b79758ec53b]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{65ce308e-25ab-4e00-92e0-9734f21cfccd}|AppName, winservice86-codedownloader.exe, Mis en quarantaine, [5534318492f8ad89773082faca3b0ff1]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{e7c7d223-46e7-44d2-9eb9-7a42e7b275ee}|AppName, winservice86-bg.exe, Mis en quarantaine, [3b4e9223a8e24beb4263413bbb4a20e0]
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2562B9C1-1E82-44C2-A583-2750272839EF}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-codedownloader.exe, Mis en quarantaine, [aedb2d88206ae84ef2b237458a7b52ae]
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F850D0E-4A9C-45EC-927B-1A494D37CC34}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-buttonutil.exe, Mis en quarantaine, [e1a8d3e26a206dc9e0c33d3fd53009f7]
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{65ce308e-25ab-4e00-92e0-9734f21cfccd}|AppName, winservice86-codedownloader.exe, Mis en quarantaine, [6c1d32839bef61d533710676d82da759]
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{90F33B9A-AB71-4A39-8577-E4BB50BF9AA5}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-codedownloader.exe, Mis en quarantaine, [d5b451642d5de0569e0627552cd97b85]
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C66F1004-D2F4-4C27-A34E-726B2A41E1A9}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-codedownloader.exe, Mis en quarantaine, [c1c8dadb8cfe83b3faaa1369ec19e31d]
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7F7BF0A-8DE7-4F45-BC44-65D1FD5233F4}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-codedownloader.exe, Mis en quarantaine, [6e1bcee73d4d40f6b1f33547de2732ce]
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D60FCB68-1611-4BFA-B673-F78F7CF32313}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-buttonutil.exe, Mis en quarantaine, [4544e2d31f6b171fd8cb7606b4514ab6]
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{e7c7d223-46e7-44d2-9eb9-7a42e7b275ee}|AppName, winservice86-bg.exe, Mis en quarantaine, [6128c5f0b3d722140f93c9b382838c74]
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F041AB69-88D0-493A-BAE8-8F731DA1EBC1}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-codedownloader.exe, Mis en quarantaine, [7118b10491f955e1287c91eb778e12ee]
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F7794E69-FF3E-4544-8375-15BE14A7E7D7}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-buttonutil.exe, Mis en quarantaine, [3b4e298ce4a6af87d2d19ce0d332d828]
PUP.Optional.CrossRider.A, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F9911231-552B-4ECC-B2A7-1AE776F3F452}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-buttonutil.exe, Mis en quarantaine, [fc8dc6ef4842d165f1b20b71e025c13f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{2562B9C1-1E82-44C2-A583-2750272839EF}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-codedownloader.exe, Mis en quarantaine, [e6a311a4a5e57fb70b99e399da2b46ba]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5F850D0E-4A9C-45EC-927B-1A494D37CC34}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-buttonutil.exe, Mis en quarantaine, [a5e4961ff496e74f861d205c5fa6ff01]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{90F33B9A-AB71-4A39-8577-E4BB50BF9AA5}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-codedownloader.exe, Mis en quarantaine, [91f84a6bd0ba9f970d97126ae520b64a]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C66F1004-D2F4-4C27-A34E-726B2A41E1A9}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-codedownloader.exe, Mis en quarantaine, [b7d25c59dcaec96d812387f5ff06718f]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7F7BF0A-8DE7-4F45-BC44-65D1FD5233F4}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-codedownloader.exe, Mis en quarantaine, [48419d1899f1c175cfd5304c9c6912ee]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D60FCB68-1611-4BFA-B673-F78F7CF32313}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-buttonutil.exe, Mis en quarantaine, [1c6de2d342487bbba6fd4735e91c30d0]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F041AB69-88D0-493A-BAE8-8F731DA1EBC1}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-codedownloader.exe, Mis en quarantaine, [4d3cb40151390f27f9ab384458ad7c84]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F7794E69-FF3E-4544-8375-15BE14A7E7D7}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-buttonutil.exe, Mis en quarantaine, [0782ad082862f046257e4a32bf46bf41]
PUP.Optional.CrossRider.A, HKU\S-1-5-21-3227559671-3124400362-31802557-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F9911231-552B-4ECC-B2A7-1AE776F3F452}|AppName, a8d80158-8a89-4bce-b3c5-45be4ebf96dd-2.exe-buttonutil.exe, Mis en quarantaine, [ef9ad6df1b6ff4420a99bac2877eeb15]

Données du Registre: 0
(Aucun élément malicieux détecté)

Dossiers: 1
PUP.Optional.OptimizerPro.A, C:\Users\adopi\Documents\Optimizer Pro, Mis en quarantaine, [1a6fb7fe9cee9c9a5cb8c4bba85dda26],

Fichiers: 1
PUP.Optional.OptimizerPro.A, C:\Users\adopi\Documents\Optimizer Pro\CookiesException.txt, Mis en quarantaine, [1a6fb7fe9cee9c9a5cb8c4bba85dda26],

Secteurs physiques: 0
(Aucun élément malicieux détecté)


(end)