Malwarebytes
www.malwarebytes.com

-Détails du journal-
Date de l'analyse: 10/12/2017
Heure de l'analyse: 17:41
Fichier journal: e7f68638-ddc8-11e7-83c3-80ee731475a9.json
Administrateur: Oui

-Informations du logiciel-
Version: 3.3.1.2183
Version de composants: 1.0.262
Version de pack de mise à jour: 1.0.3457
Licence: Essai

-Informations système-
Système d'exploitation: Windows 7 Service Pack 1
Processeur: x64
Système de fichiers: NTFS
Utilisateur: Sandrine-PC\Sandrine

-Résumé de l'analyse-
Type d'analyse: Analyse des menaces
Résultat: Terminé
Objets analysés: 323385
Menaces détectées: 65
Menaces mises en quarantaine: 63
Temps écoulé: 18 min, 18 s

-Options d'analyse-
Mémoire: Activé
Démarrage: Activé
Système de fichiers: Activé
Archives: Activé
Rootkits: Activé
Heuristique: Activé
PUP: Détection
PUM: Détection

-Détails de l'analyse-
Processus: 0
(Aucun élément malveillant détecté)

Module: 0
(Aucun élément malveillant détecté)

Clé du registre: 9
PUP.Optional.Salus.PrxySvrRST, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NLASVC\PARAMETERS\INTERNET\MANUALPROXIES, En quarantaine, [10514], [-1],0.0.0
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\REI_AxControl.DLL, En quarantaine, [1070], [327193],1.0.3457
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\APPID\REI_AxControl.DLL, En quarantaine, [1070], [327193],1.0.3457
PUP.Optional.Reimage, HKU\S-1-5-21-4288577704-1328453045-1679060148-1000\SOFTWARE\LOCAL APPWIZARD-GENERATED APPLICATIONS\Reimage - Windows Problem Relief., En quarantaine, [1070], [327203],1.0.3457
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\REI_AxControl.DLL, En quarantaine, [1070], [327193],1.0.3457
PUP.Optional.Reimage, HKU\S-1-5-21-4288577704-1328453045-1679060148-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{10ECCE17-29B5-4880-A8F5-EAD298611484}, En quarantaine, [1070], [327205],1.0.3457
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}, En quarantaine, [1070], [332494],1.0.3457
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}, En quarantaine, [1070], [332494],1.0.3457
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\APPID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}, En quarantaine, [1070], [332494],1.0.3457

Valeur du registre: 5
PUP.Optional.Salus.PrxySvrRST, HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, Échec de la suppression, [10514], [-1],0.0.0
PUP.Optional.Salus.PrxySvrRST, HKU\S-1-5-21-4288577704-1328453045-1679060148-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, En quarantaine, [10514], [-1],0.0.0
PUP.Optional.Salus.PrxySvrRST, HKU\S-1-5-21-4288577704-1328453045-1679060148-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYOVERRIDE, En quarantaine, [10514], [-1],0.0.0
PUP.Optional.Salus.PrxySvrRST, HKU\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, Échec de la suppression, [10514], [-1],0.0.0
PUP.Optional.Salus.PrxySvrRST, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, En quarantaine, [10514], [-1],0.0.0

Données du registre: 0
(Aucun élément malveillant détecté)

Flux de données: 0
(Aucun élément malveillant détecté)

Dossier: 16
PUP.Optional.Amonetize, C:\USERS\SANDRINE\APPDATA\LOCAL\20287, En quarantaine, [6], [186702],1.0.3457
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\f552dd4c52e3\b786bdb3c67d\SSL, En quarantaine, [10514], [174795],1.0.3457
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\f552dd4c52e3\b786bdb3c67d, En quarantaine, [10514], [174795],1.0.3457
PUP.Optional.Salus.PrxySvrRST, C:\PROGRAM FILES (X86)\F552DD4C52E3, En quarantaine, [10514], [174795],1.0.3457
PUP.Optional.TrustedShopper, C:\Users\Sandrine\AppData\Roaming\Mozilla\Firefox\Profiles\nxybsrf2.default\jetpack\jid1-bKSXgRwy1UQeRA@jetpack\simple-storage, En quarantaine, [10017], [180131],1.0.3457
PUP.Optional.TrustedShopper, C:\USERS\SANDRINE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NXYBSRF2.DEFAULT\JETPACK\JID1-BKSXGRWY1UQERA@JETPACK, En quarantaine, [10017], [180131],1.0.3457
PUP.Optional.UniversalUpdater, C:\PROGRAM FILES (X86)\0CA45C95134D, En quarantaine, [3240], [180174],1.0.3457
PUP.Optional.Reimage, C:\rei\Results\EXE1.8.0.1\RUN20141123_1952, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\Temp\20141123_1952\DownloaderTemp, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\AV\Microsoft.VC90.CRT, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\Results\EXE1.8.0.1, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\Temp\20141123_1952, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\Results, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\Temp, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\AV, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\REI, En quarantaine, [1070], [327187],1.0.3457

Fichier: 35
PUP.Optional.Amonetize, C:\USERS\SANDRINE\APPDATA\LOCAL\20287\Updater.xml, En quarantaine, [6], [186702],1.0.3457
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\f552dd4c52e3\b786bdb3c67d\SSL\Salus CA-www.boxore.com-37743757db9eeaabccf3eac138383bd359a4b913#child.cer, En quarantaine, [10514], [174795],1.0.3457
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\f552dd4c52e3\b786bdb3c67d\SSL\Salus CA-www.boxore.com-37743757db9eeaabccf3eac138383bd359a4b913#child.pvk, En quarantaine, [10514], [174795],1.0.3457
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\f552dd4c52e3\b786bdb3c67d\SSL\Salus CA.cer, En quarantaine, [10514], [174795],1.0.3457
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\f552dd4c52e3\b786bdb3c67d\SSL\Salus CA.pvk, En quarantaine, [10514], [174795],1.0.3457
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\f552dd4c52e3\b786bdb3c67d\SSL\test.cer, En quarantaine, [10514], [174795],1.0.3457
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\f552dd4c52e3\b786bdb3c67d\SSL\test.pvk, En quarantaine, [10514], [174795],1.0.3457
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\f552dd4c52e3\a7d12b5975b4.log, En quarantaine, [10514], [174795],1.0.3457
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\f552dd4c52e3\b786bdb3c67d.log, En quarantaine, [10514], [174795],1.0.3457
PUP.Optional.Salus.PrxySvrRST, C:\Program Files (x86)\f552dd4c52e3\settings.txt, En quarantaine, [10514], [174795],1.0.3457
PUP.Optional.TrustedShopper, C:\Users\Sandrine\AppData\Roaming\Mozilla\Firefox\Profiles\nxybsrf2.default\jetpack\jid1-bKSXgRwy1UQeRA@jetpack\simple-storage\store.json, En quarantaine, [10017], [180131],1.0.3457
PUP.Optional.UniversalUpdater, C:\Program Files (x86)\0ca45c95134d\bde9a3642b8c.json, En quarantaine, [3240], [180174],1.0.3457
PUP.Optional.UniversalUpdater, C:\Program Files (x86)\0ca45c95134d\cf3e08d747e4.log, En quarantaine, [3240], [180174],1.0.3457
PUP.Optional.Reimage, C:\REI\AV\HBEDV.KEY, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\AV\Microsoft.VC90.CRT\Microsoft.VC90.CRT.manifest, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\AV\Microsoft.VC90.CRT\msvcr90.dll, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\AV\avupdate.conf, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\AV\avupdate.exe, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\AV\avupdate_msg.avr, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\AV\savapi3_restart.exe, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\AV\savapi3_start.exe, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\AV\savapi3_stop.exe, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\Results\EXE1.8.0.1\RUN20141123_1952\Compress.res, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\Results\EXE1.8.0.1\RUN20141123_1952\debug-repair-2.log, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\Results\EXE1.8.0.1\RUN20141123_1952\debug-repair.log, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\Results\EXE1.8.0.1\RUN20141123_1952\Info_EnvironmentVars.res, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\Results\EXE1.8.0.1\RUN20141123_1952\Info_Installed.rec, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\Results\EXE1.8.0.1\RUN20141123_1952\out.log, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\Temp\20141123_1952\ApplicationList.ini, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\cfl.rei, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\cpuidsdk.dll, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\rei1801.ini, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\reimage.qsr, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.Reimage, C:\rei\SupportInfoTool.ini, En quarantaine, [1070], [327187],1.0.3457
PUP.Optional.TrustedShopper, C:\USERS\SANDRINE\APPDATA\ROAMING\APPLE COMPUTER\SAFARI\EXTENSIONS\trustedshopper.safariextz, En quarantaine, [10017], [244215],1.0.3457

Secteur physique: 0
(Aucun élément malveillant détecté)


(end)