Malwarebytes Anti-Malware
www.malwarebytes.org

Date de l'analyse: 26/02/2017
Heure de l'analyse: 12:32
Fichier journal: diag.txt
Administrateur: Oui

Version: 2.2.0.1024
Base de données de programmes malveillants: v2016.12.12.13
Base de données de rootkits: v2016.11.20.01
Licence: Gratuit
Protection contre les programmes malveillants: Désactivé
Protection contre les sites Web malveillants: Désactivé
Autoprotection: Désactivé

Système d'exploitation: Windows 7
Processeur: x64
Système de fichiers: NTFS
Utilisateur: soukaina

Type d'analyse: Analyse des menaces
Résultat: Terminé
Objets analysés: 325588
Temps écoulé: 27 min, 36 s

Mémoire: Activé
Démarrage: Activé
Système de fichiers: Activé
Archives: Activé
Rootkits: Désactivé
Heuristique: Activé
PUP: Activé
PUM: Activé

Processus: 0
(Aucun élément malveillant détecté)

Modules: 0
(Aucun élément malveillant détecté)

Clés du Registre: 2
PUP.Optional.Ludashi, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ComputerZLock, En quarantaine, [c3bad90da3f744f2dc2bcac09c64cc34],
PUP.Optional.Ludashi, HKU\S-1-5-21-3829267294-2102208263-1934626409-1000\SOFTWARE\LUDASHI, En quarantaine, [b1cc0dd91f7b61d57c2aed9e1ae6af51],

Valeurs du Registre: 3
PUP.Optional.Hao123, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://www.hao123.com/?tn=97634001_hao_pg, En quarantaine, [9fdee0069406a591ea53b5c6ec178f71]
PUP.Optional.Ludashi, HKU\S-1-5-21-3829267294-2102208263-1934626409-1000\SOFTWARE\LUDASHI|360lock, 0, En quarantaine, [b1cc0dd91f7b61d57c2aed9e1ae6af51]
PUP.Optional.Hao123, HKU\S-1-5-21-3829267294-2102208263-1934626409-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://www.hao123.com/?tn=97634001_hao_pg, En quarantaine, [e79638ae7d1df541eb51e09b9e655fa1]

Données du Registre: 0
(Aucun élément malveillant détecté)

Dossiers: 8
PUP.Optional.LockHomepage, C:\Users\soukaina\AppData\Roaming\lockhomepage, En quarantaine, [522b35b1b2e8ad89f737bf4141bf966a],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\Ludashi, Supprimer au redémarrage, [1b6219cd7e1c181e1cdfdcad748c46ba],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\Ludashi\apk, En quarantaine, [1b6219cd7e1c181e1cdfdcad748c46ba],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\Ludashi\mobile, En quarantaine, [1b6219cd7e1c181e1cdfdcad748c46ba],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant, Supprimer au redémarrage, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\softmgr, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\UI, Supprimer au redémarrage, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\UI\Download, En quarantaine, [621bfde9415947ef494c8c1622de23dd],

Fichiers: 35
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\360bizhi\wallpaperhelper\ComputerZLock_x64.sys, En quarantaine, [c3bad90da3f744f2dc2bcac09c64cc34],
PUP.Optional.LockHomepage, C:\Users\soukaina\AppData\Roaming\lockhomepage\game.json, En quarantaine, [522b35b1b2e8ad89f737bf4141bf966a],
PUP.Optional.LockHomepage, C:\Users\soukaina\AppData\Roaming\lockhomepage\LockHomePage.ini, En quarantaine, [522b35b1b2e8ad89f737bf4141bf966a],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\Ludashi\ComputerZ.set, En quarantaine, [1b6219cd7e1c181e1cdfdcad748c46ba],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\Ludashi\deviceid.ini, En quarantaine, [1b6219cd7e1c181e1cdfdcad748c46ba],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\Ludashi\deviceidcache.ini, En quarantaine, [1b6219cd7e1c181e1cdfdcad748c46ba],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\Ludashi\invalidhp.dat, En quarantaine, [1b6219cd7e1c181e1cdfdcad748c46ba],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\Ludashi\wlist.db, En quarantaine, [1b6219cd7e1c181e1cdfdcad748c46ba],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\Ludashi\apk\mobiledevicesrvcache_bizhi.dat, En quarantaine, [1b6219cd7e1c181e1cdfdcad748c46ba],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\360Base.dll, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\360Base64.dll, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\360emu.dll, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\aapt.exe, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\LDSGameAssistant.exe, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\softmgr\360net.dll, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\softmgr\360NetBase.dll, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\softmgr\360P2SP.dll, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\softmgr\LiveUpd360.dll, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\softmgr\PDown.dll, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\softmgr\SoftMgrInst.exe, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\UI\DownloadUI.xml, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\UI\Download\close.png, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\UI\Download\iconshadow.png, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\UI\Download\installing.gif, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\UI\Download\logo.png, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\UI\Download\minimize.png, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\UI\Download\pause.png, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\UI\Download\progress.png, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\UI\Download\resume.png, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\UI\Download\retry.png, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Ludashi, C:\Users\soukaina\AppData\Roaming\LDSGameAssistant\UI\Download\shadow.png, En quarantaine, [621bfde9415947ef494c8c1622de23dd],
PUP.Optional.Trotux, C:\Users\soukaina\AppData\Roaming\Profiles\Vabuph.default\prefs.js, Bon : (), Mauvais : (user_pref("browser.search.searchengine.sp", "http://www.trotux.com/search/?from=icb&q={searchTerms}&type=sp&uid=WDCXWD10JPCX-24UE4T0_WD-WX81E73FKFM4FKFM4&z=d33f95e033c008bc33a8964g3z0m2mct8g8tdw5b5t");), Remplacé,[89f43aac8515ed49e50fa49545bb14ec]
PUP.Optional.Trotux, C:\Users\soukaina\AppData\Roaming\Profiles\Vabuph.default\prefs.js, Bon : (), Mauvais : (e);
user_pref("browser.cache.disk.smart_size.use_old_max", false);
user_pref("browser.cache.frecency_experiment", 2);
user_pref("browser.customizemode.tip0.shown", true);
user_pref("browser.download), Remplacé,[760708de8812171fb73d59e0639d35cb]
PUP.Optional.Trotux, C:\Users\soukaina\AppData\Roaming\Profiles\Vabuph.default\prefs.js, Bon : (), Mauvais : (he.disk.filesystem_reported", 1);
user_pref("browser), Remplacé,[6617d90d1b7fab8b44b01c1d926e8a76]
PUP.Optional.Trotux, C:\Users\soukaina\AppData\Roaming\Profiles\Vabuph.default\prefs.js, Bon : (), Mauvais : (pref("browser.cache.disk.smart_size.use_old_max", false);
user_pref("browser.cache.frecency_experiment", 2);
user_pref("browser.customizemode.tip0.shown", true);
user_pr), Remplacé,[3d4020c6e2b8be785d9757e2aa56758b]

Secteurs physiques: 0
(Aucun élément malveillant détecté)


(end)