Publicité
Publicité
Format du document : text/plain
Prévisualisation
Malwarebytes Anti-Malware
www.malwarebytes.org
Date de l'analyse: 07/11/2015
Heure de l'analyse: 18:08
Fichier journal: malwere.txt
Administrateur: Oui
Version: 2.2.0.1024
Base de données de programmes malveillants: v2015.11.07.04
Base de données de rootkits: v2015.11.04.02
Licence: Essai
Protection contre les programmes malveillants: Activé
Protection contre les sites Web malveillants: Activé
Autoprotection: Désactivé
Système d'exploitation: Windows 7
Processeur: x86
Système de fichiers: NTFS
Utilisateur: simophone
Type d'analyse: Analyse des menaces
Résultat: Terminé
Objets analysés: 291699
Temps écoulé: 12 min, 46 s
Mémoire: Activé
Démarrage: Activé
Système de fichiers: Activé
Archives: Activé
Rootkits: Activé
Heuristique: Activé
PUP: Activé
PUM: Activé
Processus: 0
(Aucun élément malveillant détecté)
Modules: 0
(Aucun élément malveillant détecté)
Clés du Registre: 24
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\TYPELIB\{E2343056-CC08-46AC-B898-BFC7ACF4E755}, En quarantaine, [81af6e0d395243f34c86a48f69999c64],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\INTERFACE\{7041156A-0D2B-4DCD-A8EE-D0608BFCB2D0}, En quarantaine, [81af6e0d395243f34c86a48f69999c64],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\INTERFACE\{9B41579A-1996-42F9-8F84-7B7786818CEF}, En quarantaine, [81af6e0d395243f34c86a48f69999c64],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\INTERFACE\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}, En quarantaine, [81af6e0d395243f34c86a48f69999c64],
PUP.Optional.BrowseStudio, HKLM\SOFTWARE\BrowseStudio, En quarantaine, [a48c5922741702344a2986d629da6e92],
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\mystartsearchSoftware, En quarantaine, [31ff43388308e254aa364a3ef80a8779],
PUP.Optional.FastSearchings, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, En quarantaine, [7eb29edd503b9b9b181ba99cce3507f9],
PUP.Optional.Vosteran, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, En quarantaine, [6cc4176491fac0761dd46f25f013a25e],
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, En quarantaine, [042cf5860685e353bac1a2aab1524eb2],
PUP.Optional.YahooSearch, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Yahoo! Search Updater, Supprimer au redémarrage, [0e22a3d89bf02412bc889dfb57acbd43],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{24c54e38}, En quarantaine, [939d5d1e107b152173e92e4ed231dd23],
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, En quarantaine, [0a265823454685b1646b3798de2512ee],
PUP.Optional.Sanbreel, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{da0b130f-7ef7-4a5c-97ff-4239bbc3502d}Gw, En quarantaine, [3cf46219fe8d2b0b99cac1c548bb7f81],
PUP.Optional.APNToolBar.Gen, HKU\S-1-5-18\SOFTWARE\AskPartnerNetwork, En quarantaine, [de52d3a8454616207c430d7452b060a0],
PUP.Optional.BrowseStudio, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\BrowseStudio, En quarantaine, [87a9ea919eedfa3cd2a0c3993cc78b75],
PUP.Optional.InstallCore, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\InstallCore, En quarantaine, [84acb8c3b5d6171fc206c1b1f70cab55],
PUP.Optional.Vosteran, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\Vosteran, En quarantaine, [69c7314a8b00d85e17d2771d649f42be],
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, En quarantaine, [042c7efd4249191d42f682bb18eb38c8],
PUP.Optional.SearchBetter, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9A1B6B35-3BE3-40C2-A6FA-A41828AED560}, En quarantaine, [52dea1da4d3e0e28ff9bbc1417ec2ad6],
PUP.Optional.Vosteran, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, En quarantaine, [42eed6a5018a4ceaae3d7024758ec63a],
PUP.Optional.MyStartSearch.ShrtCln, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, En quarantaine, [7cb45a215b30de583c3ef45862a10df3],
PUP.Optional.SearchSimple, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3DBD117A-EBB7-4C2F-A491-6074745D8D6B}, En quarantaine, [85abe09bd8b3d363fa4d097f57acfd03],
PUP.Optional.SearchSimple, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}, En quarantaine, [8ea2e596137861d5f0569aeeba4947b9],
PUP.Optional.KeepMySearch, HKU\S-1-5-21-3138740471-560822203-1806279631-1000_Classes\keepmysearch, En quarantaine, [de52d2a99fec2c0aa2460073f013d52b],
Valeurs du Registre: 21
PUP.Optional.Vosteran, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|AppPath, C:\Program Files\WSE_Vosteran\\, En quarantaine, [34fc4536800b5dd929123e0bcf34827e]
PUP.Optional.Vosteran, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ast_aw_14_47_ch&cd=2XzuyEtN2Y1L1QzuyDzztB0CzztDtCtAzytByCtAyByD0E0EtN0D0Tzu0StCtDyDtAtN1L2XzutAtFyCtFtBtFtDtN1L1Czu0C0I0S0V0E0R1V1StN1L1G1B1V1N2Y1L1Qzu2StDtD0Fzz0EyD0E0EtG0F0D0B0DtGyBtB0BtDtG0FzzyC0BtGyD0FyDyB0C0FzytAzzzz0CyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzzyB0C0BtB0EtB0FtGtAyBtA0EtGyEtAyDzztGzzyByB0BtGyB0DyEtC0A0E0F0FtAtC0DtD2QtN1B1L1H1Ezu1O2U1M1B&cr=373616959&ir=, En quarantaine, [6cc4176491fac0761dd46f25f013a25e]
PUP.Optional.Vosteran, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|TopResultURLFallback, http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ast_aw_14_47_ch&cd=2XzuyEtN2Y1L1QzuyDzztB0CzztDtCtAzytByCtAyByD0E0EtN0D0Tzu0StCtDyDtAtN1L2XzutAtFyCtFtBtFtDtN1L1Czu0C0I0S0V0E0R1V1StN1L1G1B1V1N2Y1L1Qzu2StDtD0Fzz0EyD0E0EtG0F0D0B0DtGyBtB0BtDtG0FzzyC0BtGyD0FyDyB0C0FzytAzzzz0CyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzzyB0C0BtB0EtB0FtGtAyBtA0EtGyEtAyDzztGzzyByB0BtGyB0DyEtC0A0E0F0FtAtC0DtD2QtN1B1L1H1Ezu1O2U1M1B&cr=373616959&ir=, En quarantaine, [2b053d3e3a510135747d7a1ae51ead53]
PUP.Optional.Vosteran, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|FaviconPath, C:\Program Files\WSE_Vosteran\\FavIcon.ico, En quarantaine, [4ae62853dcaff93d02efd5bfaa5918e8]
PUP.Optional.Vosteran, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}, Vosteran, En quarantaine, [62cec4b79fecbe78b53c445026dd24dc]
PUP.Optional.Vosteran, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|DisplayName, Vosteran, En quarantaine, [44ec18634d3e5ed8c22f5341f60d9e62]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, mystartsearch, En quarantaine, [042cf5860685e353bac1a2aab1524eb2]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, http://www.mystartsearch.com/web/?type=ds&ts=1416342021&from=wpc&uid=ST320LM001XHN-M320MBB_S2TJJ9KD401443&q={searchTerms}, En quarantaine, [e44c3249870443f3027678097f83d42c]
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, En quarantaine, [0a265823454685b1646b3798de2512ee]
PUP.Optional.SearchBetter, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9A1B6B35-3BE3-40C2-A6FA-A41828AED560}|URL, http://www.searchbetter.com/web?tpid=REAL5-Y&o=Y10016&pf=V7&p2=^BNS^default^YY^US&gct=sb&itbv=12.18.0.86&apn_uid=1386B599-6AAD-4418-8A62-5C07F7209233&apn_ptnrs=BNS&apn_dtid=^default^YY^US&apn_dbr=ff_33.1.1.5430&doi=2014-11-18&trgb=IE,FF,CR&q={searchTerms}&psv=&pt=tb, En quarantaine, [52dea1da4d3e0e28ff9bbc1417ec2ad6]
PUP.Optional.Vosteran, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ast_aw_14_47_ch&cd=2XzuyEtN2Y1L1QzuyDzztB0CzztDtCtAzytByCtAyByD0E0EtN0D0Tzu0StCtDyDtAtN1L2XzutAtFyCtFtBtFtDtN1L1Czu0C0I0S0V0E0R1V1StN1L1G1B1V1N2Y1L1Qzu2StDtD0Fzz0EyD0E0EtG0F0D0B0DtGyBtB0BtDtG0FzzyC0BtGyD0FyDyB0C0FzytAzzzz0CyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzzyB0C0BtB0EtB0FtGtAyBtA0EtGyEtAyDzztGzzyByB0BtGyB0DyEtC0A0E0F0FtAtC0DtD2QtN1B1L1H1Ezu1O2U1M1B&cr=373616959&ir=, En quarantaine, [42eed6a5018a4ceaae3d7024758ec63a]
PUP.Optional.Vosteran, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|TopResultURLFallback, http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ast_aw_14_47_ch&cd=2XzuyEtN2Y1L1QzuyDzztB0CzztDtCtAzytByCtAyByD0E0EtN0D0Tzu0StCtDyDtAtN1L2XzutAtFyCtFtBtFtDtN1L1Czu0C0I0S0V0E0R1V1StN1L1G1B1V1N2Y1L1Qzu2StDtD0Fzz0EyD0E0EtG0F0D0B0DtGyBtB0BtDtG0FzzyC0BtGyD0FyDyB0C0FzytAzzzz0CyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzzyB0C0BtB0EtB0FtGtAyBtA0EtGyEtAyDzztGzzyByB0BtGyB0DyEtC0A0E0F0FtAtC0DtD2QtN1B1L1H1Ezu1O2U1M1B&cr=373616959&ir=, En quarantaine, [79b7077493f8ed49c5260a8a59aa59a7]
PUP.Optional.Vosteran, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|FaviconPath, C:\Program Files\WSE_Vosteran\\FavIcon.ico, En quarantaine, [9f91b5c67d0ef343b03b2f6518eb41bf]
PUP.Optional.Vosteran, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}, Vosteran, En quarantaine, [1c141c5fb8d3053195569cf86f9407f9]
PUP.Optional.Vosteran, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|DisplayName, Vosteran, En quarantaine, [d15fbac10e7d0b2b9655177df60d4db3]
PUP.Optional.MyStartSearch.ShrtCln, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, mystartsearch, En quarantaine, [7cb45a215b30de583c3ef45862a10df3]
PUP.Optional.MyStartSearch.ShrtCln, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, http://www.mystartsearch.com/web/?type=ds&ts=1416342021&from=wpc&uid=ST320LM001XHN-M320MBB_S2TJJ9KD401443&q={searchTerms}, En quarantaine, [7eb24e2df893c86ea3d42c55887a2ad6]
PUP.Optional.SearchSimple, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3DBD117A-EBB7-4C2F-A491-6074745D8D6B}|URL, http://searchsimple-a.akamaihd.net/?affID=mt-is&q={searchTerms}&r=700, En quarantaine, [85abe09bd8b3d363fa4d097f57acfd03]
PUP.Optional.SearchSimple, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3DBD117A-EBB7-4C2F-A491-6074745D8D6B}|FaviconURL, http://searchsimple-a.akamaihd.net/favicon.ico, En quarantaine, [c96734475f2ced490d3af29660a37987]
PUP.Optional.SearchSimple, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}|URL, http://q.search-simple.com/?affID=pr_b1020c36-b801-400c-bace-e0901781f2a1&q={searchTerms}, En quarantaine, [8ea2e596137861d5f0569aeeba4947b9]
PUP.Optional.SearchSimple, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}|URL, http://q.search-simple.com/?affID=pr_b1020c36-b801-400c-bace-e0901781f2a1&q={searchTerms}, En quarantaine, [66ca6f0c0388a195d6707e0a59aa38c8]
Données du Registre: 0
(Aucun élément malveillant détecté)
Dossiers: 11
PUP.Optional.MultiPlug, C:\ProgramData\delmkhdbkmlpjglcmobfchpfanofnfag, En quarantaine, [c66a2e4d2d5e42f4cb90cc805ca79c64],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\16979010648224602894, En quarantaine, [4ae6a3d82a61e74fe2fb68e8c83b916f],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\APN\APN-Stub, En quarantaine, [151b8bf0e3a8d85e5191ca84f40e30d0],
PUP.Optional.Booster, C:\ProgramData\Trusted Publisher\GS_Booster, En quarantaine, [2e02fc7f810a84b234c32b273ec4b947],
PUP.Optional.Booster, C:\ProgramData\Trusted Publisher\GS_Booster\576482620, En quarantaine, [2e02fc7f810a84b234c32b273ec4b947],
PUP.Optional.BrowseStudio, C:\ProgramData\ddc24aa9-6c5d-44d0-8c40-9bed83bb2ab7, En quarantaine, [b080c6b5d2b9fb3bca5d53017092d828],
PUP.Optional.ASK.Gen, C:\Users\simophone\AppData\Local\Temp\APN-Stub, En quarantaine, [5dd32655058656e07515d8a51ee4629e],
PUP.Optional.ASK.Gen, C:\Users\simophone\AppData\Local\Temp\APN-Stub\REAL1-SP, En quarantaine, [5dd32655058656e07515d8a51ee4629e],
PUP.Optional.ASK.Gen, C:\Users\simophone\AppData\Local\Temp\APN-Stub\REAL5-Y, En quarantaine, [5dd32655058656e07515d8a51ee4629e],
PUP.Optional.BrowseStudio, C:\Users\simophone\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopkldoembhleihlknjnmppilpckfila\1.0.1_0, En quarantaine, [3cf4d4a7fc8f8ea8afb81e513ec69c64],
PUP.Optional.BrowseStudio, C:\Users\simophone\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopkldoembhleihlknjnmppilpckfila, En quarantaine, [3cf4d4a7fc8f8ea8afb81e513ec69c64],
Fichiers: 41
PUP.Optional.BrowseFox, C:\WINDOWS\SYSTEM32\drivers\{da0b130f-7ef7-4a5c-97ff-4239bbc3502d}Gw.sys, Supprimer au redémarrage, [f3a5de695cc567aedf2a580835d9867d],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\0F39443B05CC752F.vir, En quarantaine, [18182c4fa9e20432453af74724e07789],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\7B20BF2B3C7B1B17.vir, En quarantaine, [131d88f3711aaa8c14bc6900ed1733cd],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\9DE9308ADBF8E115.vir, En quarantaine, [a58b483369225fd7409426736e93dd23],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\EC3EDB3C9C6118D4.vir, En quarantaine, [68c85229afdc979fa8447c1ec14056aa],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\24BD7479DA9923DF.vir, En quarantaine, [5ed288f30f7c96a02893920738c9926e],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\34F00847A238B00B.vir, En quarantaine, [71bf88f38209e74f42accdcd0af738c8],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\4010862822C2AA47.vir, En quarantaine, [c769df9c93f89e983981f2a7887949b7],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\4BC320A862B2FD56.vir, En quarantaine, [4ae6304b5d2efb3b6d5143566a979868],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\C873BC763CFDAF27.vir, En quarantaine, [c66a0774226931055e727bee61a3a15f],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\D8155FF19E5EFBFC.vir, En quarantaine, [5ed2f4874c3f38feaa297f1ae41d8080],
PUP.Optional.OpenCandy, C:\Users\simophone\AppData\Local\Temp\rninst~0\ui_data\stubinst_pkg_en-us.cab, En quarantaine, [2709e893d2b939fd059aec7201036a96],
PUP.Optional.APNToolBar, C:\Users\simophone\AppData\Local\Temp\rninst~0\ui_data\ask\ASKInstaller.exe, En quarantaine, [d25e4338e1aaf34355d61411b44d2ed2],
PUP.Optional.APNToolBar, C:\Users\simophone\AppData\Local\Temp\rninst~0\ui_data\ask\ask_en.cab, En quarantaine, [a987bdbe9bf062d4b477ed38fd04eb15],
PUP.Optional.OpenCandy, C:\Users\simophone\AppData\Local\Temp\rninst~0\ui_data\inst_config\OCSetupHlp.dll, En quarantaine, [a789b5c695f61f176837fb639d677f81],
PUP.Optional.APNToolBar, C:\Users\simophone\AppData\Local\Temp\rninst~1\ui_data\ask\ASKInstaller.exe, En quarantaine, [e54b542746454aec1813b075ed146b95],
PUP.Optional.APNToolBar, C:\Users\simophone\AppData\Local\Temp\rninst~1\ui_data\ask\ask_en.cab, En quarantaine, [7fb1ef8c8b00fb3b909b8c9954ad718f],
PUP.Optional.APNToolBar, C:\Users\simophone\Downloads\OffercastInstaller.exe, En quarantaine, [3bf5c1babfcc30062b00f82d2dd4f20e],
PUP.Optional.APNToolBar, C:\Users\simophone\Downloads\SopCast.zip, En quarantaine, [ea467a010b8016201e0dee37fb0626da],
PUP.Optional.MSW, C:\Users\simophone\Downloads\winrar_v-5-1_fr_9632.exe, En quarantaine, [230dd6a5b1da0c2a016d8b42d7294db3],
PUP.Optional.MyStartSearch.ShrtCln, C:\Program Files\Mozilla Firefox\browser\searchplugins\mystartsearch.xml, En quarantaine, [f53b7dfeb1daaa8cc816d2b6fe04ba46],
PUP.Optional.MultiPlug, C:\ProgramData\delmkhdbkmlpjglcmobfchpfanofnfag\lsdb.js, En quarantaine, [c66a2e4d2d5e42f4cb90cc805ca79c64],
PUP.Optional.MultiPlug, C:\ProgramData\delmkhdbkmlpjglcmobfchpfanofnfag\background.html, En quarantaine, [c66a2e4d2d5e42f4cb90cc805ca79c64],
PUP.Optional.MultiPlug, C:\ProgramData\delmkhdbkmlpjglcmobfchpfanofnfag\content.js, En quarantaine, [c66a2e4d2d5e42f4cb90cc805ca79c64],
PUP.Optional.MultiPlug, C:\ProgramData\delmkhdbkmlpjglcmobfchpfanofnfag\manifest.json, En quarantaine, [c66a2e4d2d5e42f4cb90cc805ca79c64],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\16979010648224602894\cd5b15e575e1c3d0e3ff4fc7a18c3ce6.ini, En quarantaine, [4ae6a3d82a61e74fe2fb68e8c83b916f],
PUP.Optional.BrowseStudio, C:\Users\simophone\AppData\Roaming\Mozilla\Firefox\Profiles\ricogmz5.default-1425558060117\extensions\{da0b130f-7ef7-4a5c-97ff-4239bbc3502d}.xpi, En quarantaine, [34fc5b207c0f092d214b7ede22e105fb],
PUP.Optional.BrowseStudio, C:\Users\simophone\AppData\Roaming\Mozilla\Firefox\Profiles\srym67uq.default\extensions\{da0b130f-7ef7-4a5c-97ff-4239bbc3502d}.xpi, En quarantaine, [6cc40b706a211521ee7e87d5e71cd22e],
PUP.Optional.Dsrlte, C:\Users\simophone\AppData\Roaming\Mozilla\Firefox\Profiles\srym67uq.default\searchplugins\dsrlte.xml, En quarantaine, [8ca472097a1150e659a1442342c1b64a],
PUP.Optional.Dsrlte, C:\Users\simophone\AppData\Roaming\Mozilla\Firefox\Profiles\srym67uq.default\searchplugins\dsrlte1.xml, En quarantaine, [c66a106b1477f442c832de89976ca45c],
PUP.Optional.YahooSearch, C:\Windows\System32\Tasks\Yahoo! Search Updater, En quarantaine, [d15f83f8e9a2a393b78b5e3a927141bf],
PUP.Optional.Yontoo, C:\Users\simophone\AppData\Roaming\Mozilla\Firefox\Profiles\srym67uq.default\searchplugins\search-simple.xml, En quarantaine, [042c0e6d84072d09a691dbf68b7858a8],
PUP.Optional.Booster, C:\ProgramData\Trusted Publisher\GS_Booster\576482620.ini, En quarantaine, [2e02fc7f810a84b234c32b273ec4b947],
PUP.Optional.ASK.Gen, C:\Users\simophone\AppData\Local\Temp\APN-Stub\REAL1-SP\Msi662944d3-9581-4ce7-97d0-c3305ec2d167.log, En quarantaine, [5dd32655058656e07515d8a51ee4629e],
PUP.Optional.ASK.Gen, C:\Users\simophone\AppData\Local\Temp\APN-Stub\REAL1-SP\Stb662944d3-9581-4ce7-97d0-c3305ec2d167.log, En quarantaine, [5dd32655058656e07515d8a51ee4629e],
PUP.Optional.ASK.Gen, C:\Users\simophone\AppData\Local\Temp\APN-Stub\REAL5-Y\Msi25224b0a-48ff-4de7-861b-19f958e457a5.log, En quarantaine, [5dd32655058656e07515d8a51ee4629e],
PUP.Optional.ASK.Gen, C:\Users\simophone\AppData\Local\Temp\APN-Stub\REAL5-Y\Stb25224b0a-48ff-4de7-861b-19f958e457a5.log, En quarantaine, [5dd32655058656e07515d8a51ee4629e],
PUP.Optional.BrowseStudio, C:\Users\simophone\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopkldoembhleihlknjnmppilpckfila\1.0.1_0\manifest.json, En quarantaine, [3cf4d4a7fc8f8ea8afb81e513ec69c64],
PUP.Optional.BrowseStudio, C:\Users\simophone\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopkldoembhleihlknjnmppilpckfila\1.0.1_0\background.js, En quarantaine, [3cf4d4a7fc8f8ea8afb81e513ec69c64],
PUP.Optional.BrowseStudio, C:\Users\simophone\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopkldoembhleihlknjnmppilpckfila\1.0.1_0\content.js, En quarantaine, [3cf4d4a7fc8f8ea8afb81e513ec69c64],
PUP.Optional.BrowseStudio, C:\Users\simophone\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopkldoembhleihlknjnmppilpckfila\1.0.1_0\icon.png, En quarantaine, [3cf4d4a7fc8f8ea8afb81e513ec69c64],
Secteurs physiques: 0
(Aucun élément malveillant détecté)
(end)
www.malwarebytes.org
Date de l'analyse: 07/11/2015
Heure de l'analyse: 18:08
Fichier journal: malwere.txt
Administrateur: Oui
Version: 2.2.0.1024
Base de données de programmes malveillants: v2015.11.07.04
Base de données de rootkits: v2015.11.04.02
Licence: Essai
Protection contre les programmes malveillants: Activé
Protection contre les sites Web malveillants: Activé
Autoprotection: Désactivé
Système d'exploitation: Windows 7
Processeur: x86
Système de fichiers: NTFS
Utilisateur: simophone
Type d'analyse: Analyse des menaces
Résultat: Terminé
Objets analysés: 291699
Temps écoulé: 12 min, 46 s
Mémoire: Activé
Démarrage: Activé
Système de fichiers: Activé
Archives: Activé
Rootkits: Activé
Heuristique: Activé
PUP: Activé
PUM: Activé
Processus: 0
(Aucun élément malveillant détecté)
Modules: 0
(Aucun élément malveillant détecté)
Clés du Registre: 24
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\TYPELIB\{E2343056-CC08-46AC-B898-BFC7ACF4E755}, En quarantaine, [81af6e0d395243f34c86a48f69999c64],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\INTERFACE\{7041156A-0D2B-4DCD-A8EE-D0608BFCB2D0}, En quarantaine, [81af6e0d395243f34c86a48f69999c64],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\INTERFACE\{9B41579A-1996-42F9-8F84-7B7786818CEF}, En quarantaine, [81af6e0d395243f34c86a48f69999c64],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\INTERFACE\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}, En quarantaine, [81af6e0d395243f34c86a48f69999c64],
PUP.Optional.BrowseStudio, HKLM\SOFTWARE\BrowseStudio, En quarantaine, [a48c5922741702344a2986d629da6e92],
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\mystartsearchSoftware, En quarantaine, [31ff43388308e254aa364a3ef80a8779],
PUP.Optional.FastSearchings, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, En quarantaine, [7eb29edd503b9b9b181ba99cce3507f9],
PUP.Optional.Vosteran, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, En quarantaine, [6cc4176491fac0761dd46f25f013a25e],
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, En quarantaine, [042cf5860685e353bac1a2aab1524eb2],
PUP.Optional.YahooSearch, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Yahoo! Search Updater, Supprimer au redémarrage, [0e22a3d89bf02412bc889dfb57acbd43],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{24c54e38}, En quarantaine, [939d5d1e107b152173e92e4ed231dd23],
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, En quarantaine, [0a265823454685b1646b3798de2512ee],
PUP.Optional.Sanbreel, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{da0b130f-7ef7-4a5c-97ff-4239bbc3502d}Gw, En quarantaine, [3cf46219fe8d2b0b99cac1c548bb7f81],
PUP.Optional.APNToolBar.Gen, HKU\S-1-5-18\SOFTWARE\AskPartnerNetwork, En quarantaine, [de52d3a8454616207c430d7452b060a0],
PUP.Optional.BrowseStudio, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\BrowseStudio, En quarantaine, [87a9ea919eedfa3cd2a0c3993cc78b75],
PUP.Optional.InstallCore, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\InstallCore, En quarantaine, [84acb8c3b5d6171fc206c1b1f70cab55],
PUP.Optional.Vosteran, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\Vosteran, En quarantaine, [69c7314a8b00d85e17d2771d649f42be],
PUP.Optional.WebSearchInfo, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}, En quarantaine, [042c7efd4249191d42f682bb18eb38c8],
PUP.Optional.SearchBetter, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9A1B6B35-3BE3-40C2-A6FA-A41828AED560}, En quarantaine, [52dea1da4d3e0e28ff9bbc1417ec2ad6],
PUP.Optional.Vosteran, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, En quarantaine, [42eed6a5018a4ceaae3d7024758ec63a],
PUP.Optional.MyStartSearch.ShrtCln, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, En quarantaine, [7cb45a215b30de583c3ef45862a10df3],
PUP.Optional.SearchSimple, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3DBD117A-EBB7-4C2F-A491-6074745D8D6B}, En quarantaine, [85abe09bd8b3d363fa4d097f57acfd03],
PUP.Optional.SearchSimple, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}, En quarantaine, [8ea2e596137861d5f0569aeeba4947b9],
PUP.Optional.KeepMySearch, HKU\S-1-5-21-3138740471-560822203-1806279631-1000_Classes\keepmysearch, En quarantaine, [de52d2a99fec2c0aa2460073f013d52b],
Valeurs du Registre: 21
PUP.Optional.Vosteran, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|AppPath, C:\Program Files\WSE_Vosteran\\, En quarantaine, [34fc4536800b5dd929123e0bcf34827e]
PUP.Optional.Vosteran, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ast_aw_14_47_ch&cd=2XzuyEtN2Y1L1QzuyDzztB0CzztDtCtAzytByCtAyByD0E0EtN0D0Tzu0StCtDyDtAtN1L2XzutAtFyCtFtBtFtDtN1L1Czu0C0I0S0V0E0R1V1StN1L1G1B1V1N2Y1L1Qzu2StDtD0Fzz0EyD0E0EtG0F0D0B0DtGyBtB0BtDtG0FzzyC0BtGyD0FyDyB0C0FzytAzzzz0CyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzzyB0C0BtB0EtB0FtGtAyBtA0EtGyEtAyDzztGzzyByB0BtGyB0DyEtC0A0E0F0FtAtC0DtD2QtN1B1L1H1Ezu1O2U1M1B&cr=373616959&ir=, En quarantaine, [6cc4176491fac0761dd46f25f013a25e]
PUP.Optional.Vosteran, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|TopResultURLFallback, http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ast_aw_14_47_ch&cd=2XzuyEtN2Y1L1QzuyDzztB0CzztDtCtAzytByCtAyByD0E0EtN0D0Tzu0StCtDyDtAtN1L2XzutAtFyCtFtBtFtDtN1L1Czu0C0I0S0V0E0R1V1StN1L1G1B1V1N2Y1L1Qzu2StDtD0Fzz0EyD0E0EtG0F0D0B0DtGyBtB0BtDtG0FzzyC0BtGyD0FyDyB0C0FzytAzzzz0CyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzzyB0C0BtB0EtB0FtGtAyBtA0EtGyEtAyDzztGzzyByB0BtGyB0DyEtC0A0E0F0FtAtC0DtD2QtN1B1L1H1Ezu1O2U1M1B&cr=373616959&ir=, En quarantaine, [2b053d3e3a510135747d7a1ae51ead53]
PUP.Optional.Vosteran, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|FaviconPath, C:\Program Files\WSE_Vosteran\\FavIcon.ico, En quarantaine, [4ae62853dcaff93d02efd5bfaa5918e8]
PUP.Optional.Vosteran, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}, Vosteran, En quarantaine, [62cec4b79fecbe78b53c445026dd24dc]
PUP.Optional.Vosteran, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|DisplayName, Vosteran, En quarantaine, [44ec18634d3e5ed8c22f5341f60d9e62]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, mystartsearch, En quarantaine, [042cf5860685e353bac1a2aab1524eb2]
PUP.Optional.MyStartSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, http://www.mystartsearch.com/web/?type=ds&ts=1416342021&from=wpc&uid=ST320LM001XHN-M320MBB_S2TJJ9KD401443&q={searchTerms}, En quarantaine, [e44c3249870443f3027678097f83d42c]
PUM.Optional.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, En quarantaine, [0a265823454685b1646b3798de2512ee]
PUP.Optional.SearchBetter, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9A1B6B35-3BE3-40C2-A6FA-A41828AED560}|URL, http://www.searchbetter.com/web?tpid=REAL5-Y&o=Y10016&pf=V7&p2=^BNS^default^YY^US&gct=sb&itbv=12.18.0.86&apn_uid=1386B599-6AAD-4418-8A62-5C07F7209233&apn_ptnrs=BNS&apn_dtid=^default^YY^US&apn_dbr=ff_33.1.1.5430&doi=2014-11-18&trgb=IE,FF,CR&q={searchTerms}&psv=&pt=tb, En quarantaine, [52dea1da4d3e0e28ff9bbc1417ec2ad6]
PUP.Optional.Vosteran, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ast_aw_14_47_ch&cd=2XzuyEtN2Y1L1QzuyDzztB0CzztDtCtAzytByCtAyByD0E0EtN0D0Tzu0StCtDyDtAtN1L2XzutAtFyCtFtBtFtDtN1L1Czu0C0I0S0V0E0R1V1StN1L1G1B1V1N2Y1L1Qzu2StDtD0Fzz0EyD0E0EtG0F0D0B0DtGyBtB0BtDtG0FzzyC0BtGyD0FyDyB0C0FzytAzzzz0CyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzzyB0C0BtB0EtB0FtGtAyBtA0EtGyEtAyDzztGzzyByB0BtGyB0DyEtC0A0E0F0FtAtC0DtD2QtN1B1L1H1Ezu1O2U1M1B&cr=373616959&ir=, En quarantaine, [42eed6a5018a4ceaae3d7024758ec63a]
PUP.Optional.Vosteran, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|TopResultURLFallback, http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ast_aw_14_47_ch&cd=2XzuyEtN2Y1L1QzuyDzztB0CzztDtCtAzytByCtAyByD0E0EtN0D0Tzu0StCtDyDtAtN1L2XzutAtFyCtFtBtFtDtN1L1Czu0C0I0S0V0E0R1V1StN1L1G1B1V1N2Y1L1Qzu2StDtD0Fzz0EyD0E0EtG0F0D0B0DtGyBtB0BtDtG0FzzyC0BtGyD0FyDyB0C0FzytAzzzz0CyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzzyB0C0BtB0EtB0FtGtAyBtA0EtGyEtAyDzztGzzyByB0BtGyB0DyEtC0A0E0F0FtAtC0DtD2QtN1B1L1H1Ezu1O2U1M1B&cr=373616959&ir=, En quarantaine, [79b7077493f8ed49c5260a8a59aa59a7]
PUP.Optional.Vosteran, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|FaviconPath, C:\Program Files\WSE_Vosteran\\FavIcon.ico, En quarantaine, [9f91b5c67d0ef343b03b2f6518eb41bf]
PUP.Optional.Vosteran, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}, Vosteran, En quarantaine, [1c141c5fb8d3053195569cf86f9407f9]
PUP.Optional.Vosteran, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|DisplayName, Vosteran, En quarantaine, [d15fbac10e7d0b2b9655177df60d4db3]
PUP.Optional.MyStartSearch.ShrtCln, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DisplayName, mystartsearch, En quarantaine, [7cb45a215b30de583c3ef45862a10df3]
PUP.Optional.MyStartSearch.ShrtCln, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, http://www.mystartsearch.com/web/?type=ds&ts=1416342021&from=wpc&uid=ST320LM001XHN-M320MBB_S2TJJ9KD401443&q={searchTerms}, En quarantaine, [7eb24e2df893c86ea3d42c55887a2ad6]
PUP.Optional.SearchSimple, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3DBD117A-EBB7-4C2F-A491-6074745D8D6B}|URL, http://searchsimple-a.akamaihd.net/?affID=mt-is&q={searchTerms}&r=700, En quarantaine, [85abe09bd8b3d363fa4d097f57acfd03]
PUP.Optional.SearchSimple, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3DBD117A-EBB7-4C2F-A491-6074745D8D6B}|FaviconURL, http://searchsimple-a.akamaihd.net/favicon.ico, En quarantaine, [c96734475f2ced490d3af29660a37987]
PUP.Optional.SearchSimple, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}|URL, http://q.search-simple.com/?affID=pr_b1020c36-b801-400c-bace-e0901781f2a1&q={searchTerms}, En quarantaine, [8ea2e596137861d5f0569aeeba4947b9]
PUP.Optional.SearchSimple, HKU\S-1-5-21-3138740471-560822203-1806279631-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}|URL, http://q.search-simple.com/?affID=pr_b1020c36-b801-400c-bace-e0901781f2a1&q={searchTerms}, En quarantaine, [66ca6f0c0388a195d6707e0a59aa38c8]
Données du Registre: 0
(Aucun élément malveillant détecté)
Dossiers: 11
PUP.Optional.MultiPlug, C:\ProgramData\delmkhdbkmlpjglcmobfchpfanofnfag, En quarantaine, [c66a2e4d2d5e42f4cb90cc805ca79c64],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\16979010648224602894, En quarantaine, [4ae6a3d82a61e74fe2fb68e8c83b916f],
PUP.Optional.APNToolBar.Gen, C:\ProgramData\APN\APN-Stub, En quarantaine, [151b8bf0e3a8d85e5191ca84f40e30d0],
PUP.Optional.Booster, C:\ProgramData\Trusted Publisher\GS_Booster, En quarantaine, [2e02fc7f810a84b234c32b273ec4b947],
PUP.Optional.Booster, C:\ProgramData\Trusted Publisher\GS_Booster\576482620, En quarantaine, [2e02fc7f810a84b234c32b273ec4b947],
PUP.Optional.BrowseStudio, C:\ProgramData\ddc24aa9-6c5d-44d0-8c40-9bed83bb2ab7, En quarantaine, [b080c6b5d2b9fb3bca5d53017092d828],
PUP.Optional.ASK.Gen, C:\Users\simophone\AppData\Local\Temp\APN-Stub, En quarantaine, [5dd32655058656e07515d8a51ee4629e],
PUP.Optional.ASK.Gen, C:\Users\simophone\AppData\Local\Temp\APN-Stub\REAL1-SP, En quarantaine, [5dd32655058656e07515d8a51ee4629e],
PUP.Optional.ASK.Gen, C:\Users\simophone\AppData\Local\Temp\APN-Stub\REAL5-Y, En quarantaine, [5dd32655058656e07515d8a51ee4629e],
PUP.Optional.BrowseStudio, C:\Users\simophone\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopkldoembhleihlknjnmppilpckfila\1.0.1_0, En quarantaine, [3cf4d4a7fc8f8ea8afb81e513ec69c64],
PUP.Optional.BrowseStudio, C:\Users\simophone\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopkldoembhleihlknjnmppilpckfila, En quarantaine, [3cf4d4a7fc8f8ea8afb81e513ec69c64],
Fichiers: 41
PUP.Optional.BrowseFox, C:\WINDOWS\SYSTEM32\drivers\{da0b130f-7ef7-4a5c-97ff-4239bbc3502d}Gw.sys, Supprimer au redémarrage, [f3a5de695cc567aedf2a580835d9867d],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\0F39443B05CC752F.vir, En quarantaine, [18182c4fa9e20432453af74724e07789],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\7B20BF2B3C7B1B17.vir, En quarantaine, [131d88f3711aaa8c14bc6900ed1733cd],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\9DE9308ADBF8E115.vir, En quarantaine, [a58b483369225fd7409426736e93dd23],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\EC3EDB3C9C6118D4.vir, En quarantaine, [68c85229afdc979fa8447c1ec14056aa],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\24BD7479DA9923DF.vir, En quarantaine, [5ed288f30f7c96a02893920738c9926e],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\34F00847A238B00B.vir, En quarantaine, [71bf88f38209e74f42accdcd0af738c8],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\4010862822C2AA47.vir, En quarantaine, [c769df9c93f89e983981f2a7887949b7],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\4BC320A862B2FD56.vir, En quarantaine, [4ae6304b5d2efb3b6d5143566a979868],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\C873BC763CFDAF27.vir, En quarantaine, [c66a0774226931055e727bee61a3a15f],
PUP.Optional.BrowseFox, C:\ProgramData\RogueKiller\Quarantine\D8155FF19E5EFBFC.vir, En quarantaine, [5ed2f4874c3f38feaa297f1ae41d8080],
PUP.Optional.OpenCandy, C:\Users\simophone\AppData\Local\Temp\rninst~0\ui_data\stubinst_pkg_en-us.cab, En quarantaine, [2709e893d2b939fd059aec7201036a96],
PUP.Optional.APNToolBar, C:\Users\simophone\AppData\Local\Temp\rninst~0\ui_data\ask\ASKInstaller.exe, En quarantaine, [d25e4338e1aaf34355d61411b44d2ed2],
PUP.Optional.APNToolBar, C:\Users\simophone\AppData\Local\Temp\rninst~0\ui_data\ask\ask_en.cab, En quarantaine, [a987bdbe9bf062d4b477ed38fd04eb15],
PUP.Optional.OpenCandy, C:\Users\simophone\AppData\Local\Temp\rninst~0\ui_data\inst_config\OCSetupHlp.dll, En quarantaine, [a789b5c695f61f176837fb639d677f81],
PUP.Optional.APNToolBar, C:\Users\simophone\AppData\Local\Temp\rninst~1\ui_data\ask\ASKInstaller.exe, En quarantaine, [e54b542746454aec1813b075ed146b95],
PUP.Optional.APNToolBar, C:\Users\simophone\AppData\Local\Temp\rninst~1\ui_data\ask\ask_en.cab, En quarantaine, [7fb1ef8c8b00fb3b909b8c9954ad718f],
PUP.Optional.APNToolBar, C:\Users\simophone\Downloads\OffercastInstaller.exe, En quarantaine, [3bf5c1babfcc30062b00f82d2dd4f20e],
PUP.Optional.APNToolBar, C:\Users\simophone\Downloads\SopCast.zip, En quarantaine, [ea467a010b8016201e0dee37fb0626da],
PUP.Optional.MSW, C:\Users\simophone\Downloads\winrar_v-5-1_fr_9632.exe, En quarantaine, [230dd6a5b1da0c2a016d8b42d7294db3],
PUP.Optional.MyStartSearch.ShrtCln, C:\Program Files\Mozilla Firefox\browser\searchplugins\mystartsearch.xml, En quarantaine, [f53b7dfeb1daaa8cc816d2b6fe04ba46],
PUP.Optional.MultiPlug, C:\ProgramData\delmkhdbkmlpjglcmobfchpfanofnfag\lsdb.js, En quarantaine, [c66a2e4d2d5e42f4cb90cc805ca79c64],
PUP.Optional.MultiPlug, C:\ProgramData\delmkhdbkmlpjglcmobfchpfanofnfag\background.html, En quarantaine, [c66a2e4d2d5e42f4cb90cc805ca79c64],
PUP.Optional.MultiPlug, C:\ProgramData\delmkhdbkmlpjglcmobfchpfanofnfag\content.js, En quarantaine, [c66a2e4d2d5e42f4cb90cc805ca79c64],
PUP.Optional.MultiPlug, C:\ProgramData\delmkhdbkmlpjglcmobfchpfanofnfag\manifest.json, En quarantaine, [c66a2e4d2d5e42f4cb90cc805ca79c64],
PUP.Optional.MultiPlug.Gen, C:\ProgramData\16979010648224602894\cd5b15e575e1c3d0e3ff4fc7a18c3ce6.ini, En quarantaine, [4ae6a3d82a61e74fe2fb68e8c83b916f],
PUP.Optional.BrowseStudio, C:\Users\simophone\AppData\Roaming\Mozilla\Firefox\Profiles\ricogmz5.default-1425558060117\extensions\{da0b130f-7ef7-4a5c-97ff-4239bbc3502d}.xpi, En quarantaine, [34fc5b207c0f092d214b7ede22e105fb],
PUP.Optional.BrowseStudio, C:\Users\simophone\AppData\Roaming\Mozilla\Firefox\Profiles\srym67uq.default\extensions\{da0b130f-7ef7-4a5c-97ff-4239bbc3502d}.xpi, En quarantaine, [6cc40b706a211521ee7e87d5e71cd22e],
PUP.Optional.Dsrlte, C:\Users\simophone\AppData\Roaming\Mozilla\Firefox\Profiles\srym67uq.default\searchplugins\dsrlte.xml, En quarantaine, [8ca472097a1150e659a1442342c1b64a],
PUP.Optional.Dsrlte, C:\Users\simophone\AppData\Roaming\Mozilla\Firefox\Profiles\srym67uq.default\searchplugins\dsrlte1.xml, En quarantaine, [c66a106b1477f442c832de89976ca45c],
PUP.Optional.YahooSearch, C:\Windows\System32\Tasks\Yahoo! Search Updater, En quarantaine, [d15f83f8e9a2a393b78b5e3a927141bf],
PUP.Optional.Yontoo, C:\Users\simophone\AppData\Roaming\Mozilla\Firefox\Profiles\srym67uq.default\searchplugins\search-simple.xml, En quarantaine, [042c0e6d84072d09a691dbf68b7858a8],
PUP.Optional.Booster, C:\ProgramData\Trusted Publisher\GS_Booster\576482620.ini, En quarantaine, [2e02fc7f810a84b234c32b273ec4b947],
PUP.Optional.ASK.Gen, C:\Users\simophone\AppData\Local\Temp\APN-Stub\REAL1-SP\Msi662944d3-9581-4ce7-97d0-c3305ec2d167.log, En quarantaine, [5dd32655058656e07515d8a51ee4629e],
PUP.Optional.ASK.Gen, C:\Users\simophone\AppData\Local\Temp\APN-Stub\REAL1-SP\Stb662944d3-9581-4ce7-97d0-c3305ec2d167.log, En quarantaine, [5dd32655058656e07515d8a51ee4629e],
PUP.Optional.ASK.Gen, C:\Users\simophone\AppData\Local\Temp\APN-Stub\REAL5-Y\Msi25224b0a-48ff-4de7-861b-19f958e457a5.log, En quarantaine, [5dd32655058656e07515d8a51ee4629e],
PUP.Optional.ASK.Gen, C:\Users\simophone\AppData\Local\Temp\APN-Stub\REAL5-Y\Stb25224b0a-48ff-4de7-861b-19f958e457a5.log, En quarantaine, [5dd32655058656e07515d8a51ee4629e],
PUP.Optional.BrowseStudio, C:\Users\simophone\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopkldoembhleihlknjnmppilpckfila\1.0.1_0\manifest.json, En quarantaine, [3cf4d4a7fc8f8ea8afb81e513ec69c64],
PUP.Optional.BrowseStudio, C:\Users\simophone\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopkldoembhleihlknjnmppilpckfila\1.0.1_0\background.js, En quarantaine, [3cf4d4a7fc8f8ea8afb81e513ec69c64],
PUP.Optional.BrowseStudio, C:\Users\simophone\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopkldoembhleihlknjnmppilpckfila\1.0.1_0\content.js, En quarantaine, [3cf4d4a7fc8f8ea8afb81e513ec69c64],
PUP.Optional.BrowseStudio, C:\Users\simophone\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopkldoembhleihlknjnmppilpckfila\1.0.1_0\icon.png, En quarantaine, [3cf4d4a7fc8f8ea8afb81e513ec69c64],
Secteurs physiques: 0
(Aucun élément malveillant détecté)
(end)