Malwarebytes
www.malwarebytes.com

-Détails du journal-
Date de l'analyse: 17/06/2017
Heure de l'analyse: 22:08
Fichier journal: malerbytes.txt
Administrateur: Oui

-Informations du logiciel-
Version: 3.1.2.1733
Version de composants: 1.0.141
Version de pack de mise à jour: 1.0.2172
Licence: Gratuit

-Informations système-
Système d'exploitation: Windows 10
Processeur: x64
Système de fichiers: NTFS
Utilisateur: LAPTOP-3A3SPR0B\Fran\u00c3\u00a7oise

-Résumé de l'analyse-
Type d'analyse: Analyse des menaces
Résultat: Terminé
Objets analysés: 375811
Menaces détectées: 68
Menaces mises en quarantaine: 68
Temps écoulé: 10 min, 41 s

-Options d'analyse-
Mémoire: Activé
Démarrage: Activé
Système de fichiers: Activé
Archives: Activé
Rootkits: Désactivé
Heuristique: Activé
PUP: Activé
PUM: Activé

-Détails de l'analyse-
Processus: 0
(Aucun élément malveillant détecté)

Module: 0
(Aucun élément malveillant détecté)

Clé du registre: 1
PUP.Optional.WinYahoo, HKU\S-1-5-21-4130353950-957179577-1987626603-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BFREPORT, En quarantaine, [91], [262014],1.0.2172

Valeur du registre: 1
PUP.Optional.WinYahoo, HKU\S-1-5-21-4130353950-957179577-1987626603-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BFREPORT|FILENAME, En quarantaine, [91], [262014],1.0.2172

Données du registre: 0
(Aucun élément malveillant détecté)

Flux de données: 0
(Aucun élément malveillant détecté)

Dossier: 15
PUP.Optional.WinYahoo.Generic, C:\PROGRAMDATA\{629AA7F9-E8D8-2D3F-6E1E-B37DF45C38B3}, En quarantaine, [1196], [341897],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\defaults\preferences, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome\locale\de-DE, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome\locale\en-US, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome\locale\es-ES, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome\locale\fr-FR, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome\content, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome\locale, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome\skin, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\defaults, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\USERS\FDERO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\B63UKLSR.DEFAULT\EXTENSIONS\CACAOWEB@CACAOWEB.ORG, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.SynHelper, C:\USERS\FDERO\APPDATA\LOCAL\{0B853D3E-2ED7-5048-45E1-779A99338AA4}, En quarantaine, [1994], [343987],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\HowToRemove, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\USERS\FDERO\APPDATA\LOCAL\{0BD83D84-2F70-513C-42E8-74D46680884C}, En quarantaine, [91], [302717],1.0.2172

Fichier: 51
PUP.Optional.WinYahoo.Generic, C:\PROGRAMDATA\{629AA7F9-E8D8-2D3F-6E1E-B37DF45C38B3}\DANA.TXT, En quarantaine, [1196], [341897],1.0.2172
PUP.Optional.WinYahoo.Generic, C:\ProgramData\{629AA7F9-E8D8-2D3F-6E1E-B37DF45C38B3}\aowLC, En quarantaine, [1196], [341897],1.0.2172
PUP.Optional.WinYahoo.Generic, C:\ProgramData\{629AA7F9-E8D8-2D3F-6E1E-B37DF45C38B3}\cite, En quarantaine, [1196], [341897],1.0.2172
PUP.Optional.WinYahoo.Generic, C:\ProgramData\{629AA7F9-E8D8-2D3F-6E1E-B37DF45C38B3}\hdat1, En quarantaine, [1196], [341897],1.0.2172
PUP.Optional.WinYahoo.Generic, C:\ProgramData\{629AA7F9-E8D8-2D3F-6E1E-B37DF45C38B3}\hdat2, En quarantaine, [1196], [341897],1.0.2172
PUP.Optional.WinYahoo.Generic, C:\ProgramData\{629AA7F9-E8D8-2D3F-6E1E-B37DF45C38B3}\merifo, En quarantaine, [1196], [341897],1.0.2172
PUP.Optional.WinYahoo.Generic, C:\ProgramData\{629AA7F9-E8D8-2D3F-6E1E-B37DF45C38B3}\midatis, En quarantaine, [1196], [341897],1.0.2172
PUP.Optional.WinYahoo.Generic, C:\ProgramData\{629AA7F9-E8D8-2D3F-6E1E-B37DF45C38B3}\yjUzk, En quarantaine, [1196], [341897],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome\content\cacaoweb.js, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome\content\cacaoweb.xul, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome\locale\de-DE\cacaoweb.properties, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome\locale\en-US\cacaoweb.properties, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome\locale\es-ES\cacaoweb.properties, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome\locale\fr-FR\cacaoweb.properties, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome\skin\cacaoweb-64.png, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome\skin\cacaoweb.css, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome\skin\cacaoweb.png, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\defaults\preferences\prefs.js, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\chrome.manifest, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.CacaoWeb, C:\Users\fdero\AppData\Roaming\Mozilla\Firefox\Profiles\b63uklsr.default\extensions\cacaoweb@cacaoweb.org\install.rdf, En quarantaine, [11979], [175972],1.0.2172
PUP.Optional.InstallCore, C:\USERS\FDERO\APPDATA\ROAMING\ZHP\QUARANTINE\ICREINSTALL_FIREFOX_DOWNLOAD.EXE, En quarantaine, [3], [312671],1.0.2172
HackTool.AutoKMS, C:\USERS\FDERO\APPDATA\ROAMING\ZHP\QUARANTINE\KMSSS.EXE, En quarantaine, [2130], [370307],1.0.2172
PUP.Optional.SynHelper, C:\USERS\FDERO\APPDATA\LOCAL\{0B853D3E-2ED7-5048-45E1-779A99338AA4}\SYNHELPER.EXE, En quarantaine, [1994], [343987],1.0.2172
PUP.Optional.SynHelper, C:\Users\fdero\AppData\Local\{0B853D3E-2ED7-5048-45E1-779A99338AA4}\adat1, En quarantaine, [1994], [343987],1.0.2172
PUP.Optional.SynHelper, C:\Users\fdero\AppData\Local\{0B853D3E-2ED7-5048-45E1-779A99338AA4}\info.dat, En quarantaine, [1994], [343987],1.0.2172
PUP.Optional.SynHelper, C:\Users\fdero\AppData\Local\{0B853D3E-2ED7-5048-45E1-779A99338AA4}\_synhelper.exepa, En quarantaine, [1994], [343987],1.0.2172
PUP.Optional.SynHelper, C:\Users\fdero\AppData\Local\{0B853D3E-2ED7-5048-45E1-779A99338AA4}\_synhelper.exepb, En quarantaine, [1994], [343987],1.0.2172
PUP.Optional.WinYahoo, C:\USERS\FDERO\APPDATA\LOCAL\{0BD83D84-2F70-513C-42E8-74D46680884C}\HOWTOREMOVE\HOWTOREMOVE.HTML, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\HowToRemove\chromium-min.jpg, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\HowToRemove\control panel-min-min.JPG, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\HowToRemove\down.png, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\HowToRemove\ff menu.JPG, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\HowToRemove\ff search engine-min.png, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\HowToRemove\hp-min ff.png, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\HowToRemove\hp-min ie.png, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\HowToRemove\search engine.gif, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\HowToRemove\setup pages.gif, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\HowToRemove\sp-min.png, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\HowToRemove\start-min.jpg, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\HowToRemove\up.png, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\bapi16.dat, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\bapi17.dat, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\dico, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\fafi, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\install.log, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\Sqlite3.dll, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\toto, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\uninst.dat, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.WinYahoo, C:\Users\fdero\AppData\Local\{0BD83D84-2F70-513C-42E8-74D46680884C}\uninst.exe, En quarantaine, [91], [302717],1.0.2172
PUP.Optional.MindSpark, C:\USERS\FDERO\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_pconverter.dl.myway.com_0.localstorage, En quarantaine, [276], [240305],1.0.2172
PUP.Optional.MindSpark, C:\USERS\FDERO\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_pconverter.dl.myway.com_0.localstorage-journal, En quarantaine, [276], [240305],1.0.2172

Secteur physique: 0
(Aucun élément malveillant détecté)


(end)