Malwarebytes www.malwarebytes.com -Détails du journal- Date de l'analyse: 02/09/2021 Durée d'analyse: 16:41 Fichier journal: cd01b374-0bfb-11ec-ab06-a4ae12313e87.json -Informations du logiciel- Version: 4.4.5.130 Version de composants: 1.0.1430 Version de pack de mise à jour: 1.0.44523 Licence: Essai -Informations système- Système d'exploitation: Windows 10 (Build 19043.1165) Processeur: x64 Système de fichiers: NTFS Utilisateur: DESKTOP-914SCS1\pierr -Résumé de l'analyse- Type d'analyse: Analyse des menaces Analyse lancée par: Manuel Résultat: Terminé Objets analysés: 293711 Menaces détectées: 27 Menaces mises en quarantaine: 27 Temps écoulé: 3 min, 57 s -Options d'analyse- Mémoire: Activé Démarrage: Activé Système de fichiers: Activé Archives: Activé Rootkits: Désactivé Heuristique: Activé PUP: Détection PUM: Détection -Détails de l'analyse- Processus: 0 (Aucun élément malveillant détecté) Module: 0 (Aucun élément malveillant détecté) Clé du registre: 3 Trojan.BitCoinMiner.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\Google\GoogleUpdateTaskMachineTN, En quarantaine, 3879, 698508, , , , , , Trojan.BitCoinMiner.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{9F061FEE-9096-430E-AA48-0ACAAF56C3D6}, En quarantaine, 3879, 698508, , , , , , Trojan.BitCoinMiner.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{9F061FEE-9096-430E-AA48-0ACAAF56C3D6}, En quarantaine, 3879, 698508, , , , , , Valeur du registre: 2 Trojan.BitCoinMiner.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{9F061FEE-9096-430E-AA48-0ACAAF56C3D6}|PATH, En quarantaine, 3879, 698506, 1.0.44523, , ame, , , PUP.Optional.MindSpark.Generic, HKU\S-1-5-21-3714002902-2875989704-3032242889-1001\SOFTWARE\GOOGLE\CHROME\PREFERENCEMACS\Default\extensions.settings|foaoaiinkbjpminknkedhgimdfkjekie, En quarantaine, 1896, 867816, , , , , , Données du registre: 0 (Aucun élément malveillant détecté) Flux de données: 0 (Aucun élément malveillant détecté) Dossier: 2 PUP.Optional.MindSpark.Generic, C:\USERS\PIERR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, En quarantaine, 1896, 867816, , , , , , PUP.Optional.MindSpark.Generic, C:\USERS\PIERR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FOAOAIINKBJPMINKNKEDHGIMDFKJEKIE, En quarantaine, 1896, 867816, 1.0.44523, , ame, , , Fichier: 20 Trojan.BitCoinMiner.Generic, C:\WINDOWS\SYSTEM32\TASKS\MICROSOFT\WINDOWS\GOOGLE\GoogleUpdateTaskMachineTN, En quarantaine, 3879, 698508, 1.0.44523, , ame, , 355238114BC87B0B0BAF86F64DEC6358, 22D67B0666670D7CF9969F78104E92008A7E37551A827AD572F38EC93F22C748 PUP.Optional.MindSpark.Generic, C:\USERS\PIERR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Remplacé, 1896, 867816, , , , , CECA8CFB4C98F6D9E44ABF8EAD03ED6E, 5849F527A1F2F44AD5FEACF9F1438E8DC3392984CC607496BE3F2BEDC1853820 PUP.Optional.MindSpark.Generic, C:\USERS\PIERR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Remplacé, 1896, 867816, , , , , FA27113D55221E4366B83724A7609F17, 9F045D67D323BF2ED99FE04DAE4E5BCC2D52D1A0CD310062175FE3523E56881E PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000005.ldb, En quarantaine, 1896, 867816, , , , , 45E3C50A83DF327FA7F58A7D47735E99, 84AC0F6D642FB3C8A0C648051B4555797C87B12FAAB7DBCC9904846E1EDBB2DA PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\001085.ldb, En quarantaine, 1896, 867816, , , , , 7E9765410E8BA15093CCFF14BB5D286C, B7F499E70FFF98055489FAC86573604F0F1FE7B780BF503624FEE6115C71CF41 PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\001088.ldb, En quarantaine, 1896, 867816, , , , , C1E1FBDF0D12B01559C3664E191F515E, 04DBED4A15FB6CDF9CD9ADDA07B79889CD8B3679866D0BAE8233684561A6625F PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\001090.log, En quarantaine, 1896, 867816, , , , , A58EEF3ACBB7FA0EDCF1CBB338A15402, AE2844706AC31808F30A7F726627021365609DAF6B041EA8F4BE43ADAA7E863C PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\001091.ldb, En quarantaine, 1896, 867816, , , , , 465EA3B78BEE876D8D05B3240B51CB9C, B647C4288B06DBCDD3456A4BF5F6EBC52D2DB84E1F9D635AA74CE7D32750D9D9 PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT, En quarantaine, 1896, 867816, , , , , 46295CAC801E5D4857D09837238A6394, 0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443 PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOCK, En quarantaine, 1896, 867816, , , , , , PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG, En quarantaine, 1896, 867816, , , , , 9A966EE5F86FD18F82B1BA7BE00FE122, FD84C627454A61B0F7EC2F82FACAD07206896BB65FC847C775EB568E016C2D07 PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old, En quarantaine, 1896, 867816, , , , , 4728B2CC64E628DCCD5C8B9E45099504, A3907AE5E18594F7AADE2C29CDF2FA3BC0222B4D4CC29BC015DD70DB81F1B412 PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000001, En quarantaine, 1896, 867816, , , , , 42E7301FE568A12509685D3DD12B335D, 2F5E454ED8FD787C11B074A024DCDCFD4B4468339982CD29A334ED7EE4CDD581 PUP.Optional.MindSpark.Generic, C:\USERS\PIERR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FOAOAIINKBJPMINKNKEDHGIMDFKJEKIE\13.986.19.63525_0\MANIFEST.JSON, En quarantaine, 1896, 867816, 1.0.44523, , ame, , E212BAABF64CDFCEAAED276172B39CEF, 1D899309FD8B381463C8F0D49D0C36FC40C249851019793660E9C57723E5AD46 Malware.Heuristic.1003, C:\USERS\PIERR\APPDATA\LOCAL\TEMP\RAR$EXB11856.17320\N47460\MSIMG32.DLL, En quarantaine, 1000001, 0, 1.0.44523, 0000000000000000000003EB, dds, 01404724, B39044EB36611EAB2B3828AF4727063A, B000452EA5BAC095BC9DE4CE78C5E7CA08B657ADB94AE24CEFF7C927602684C9 Malware.Heuristic.1003, C:\USERS\PIERR\APPDATA\LOCAL\TEMP\RAR$EXB7572.48765\N47460\MSIMG32.DLL, En quarantaine, 1000001, 0, 1.0.44523, 0000000000000000000003EB, dds, 01404724, B39044EB36611EAB2B3828AF4727063A, B000452EA5BAC095BC9DE4CE78C5E7CA08B657ADB94AE24CEFF7C927602684C9 Malware.Heuristic.1003, C:\USERS\PIERR\APPDATA\LOCAL\TEMP\RAR$EXB16216.37030\N47460\MSIMG32.DLL, En quarantaine, 1000001, 0, 1.0.44523, 0000000000000000000003EB, dds, 01404724, B39044EB36611EAB2B3828AF4727063A, B000452EA5BAC095BC9DE4CE78C5E7CA08B657ADB94AE24CEFF7C927602684C9 Malware.Heuristic.1003, C:\USERS\PIERR\APPDATA\LOCAL\TEMP\RAR$EXB7572.39569\N47460\MSIMG32.DLL, En quarantaine, 1000001, 0, 1.0.44523, 0000000000000000000003EB, dds, 01404724, B39044EB36611EAB2B3828AF4727063A, B000452EA5BAC095BC9DE4CE78C5E7CA08B657ADB94AE24CEFF7C927602684C9 RiskWare.KMS, C:\USERS\PIERR\DOWNLOADS\OFFICE 2019 + CRACK.RAR, En quarantaine, 928, 632069, 1.0.44523, FB469301D4FBBC48F273A6EA, dds, 01404724, FB709954B9DB76FC6F1EBE2EF49B3FFE, B00828A4A0C827B221B2B52878463AFCD343A5DAD3A10815D5A377C4C49091DD Trojan.TechSupportScam, C:\USERS\PIERR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Remplacé, 302, 929122, 1.0.44523, , ame, , FA27113D55221E4366B83724A7609F17, 9F045D67D323BF2ED99FE04DAE4E5BCC2D52D1A0CD310062175FE3523E56881E Secteur physique: 0 (Aucun élément malveillant détecté) WMI: 0 (Aucun élément malveillant détecté) (end)