cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Malwarebytes Anti-Malware
www.malwarebytes.org

Date de l'examen: 04/09/2014
Heure de l'examen: 12:09:34 PM
Fichier journal: malwarebytes1.txt
Administrateur: Oui

Version: 2.00.2.1012
Base de donn�es Malveillants: v2014.09.04.05
Base de donn�es Rootkits: v2014.08.21.01
Licence: Essai
Protection contre les malveillants: Activ�(e)
Protection contre les sites Web malveillants: Activ�(e)
Self-protection: D�sactiv�(e)

Syst�me d'exploitation: Windows 7 Service Pack 1
Processeur: x64
Syst�me de fichiers: NTFS
Utilisateur: Josee

Type d'examen: Examen "Personnalis�"
R�sultat: Termin�
Objets analys�s: 611552
Temps �coul�: 7 h, 23 min, 3 sec

M�moire: Activ�(e)
D�marrage: Activ�(e)
Syst�me de fichiers: Activ�(e)
Archives: Activ�(e)
Rootkits: Activ�(e)
Heuristics: Activ�(e)
PUP: Activ�(e)
PUM: Activ�(e)

Processus: 1
PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda\BRS\brs.exe, 5284, Supprim�-au-red�marrage, [fe9b9039a6d596a0e93720cd38ca06fa]

Modules: 0
(No malicious items detected)

Cl�s du Registre: 36
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4A7C84E2-E95C-43C6-8DD3-03ABCD0EB60E}, Mis en quarantaine, [5a3f7059b9c2ea4ce93eddbe758dc13f],
Adware.SmartShopper, HKLM\SOFTWARE\CLASSES\Smart-Shopper.Smrt-ShprCtrl.1, Mis en quarantaine, [5a3f7059b9c2ea4ce93eddbe758dc13f],
Adware.SmartShopper, HKLM\SOFTWARE\CLASSES\Smart-Shopper.Smrt-ShprCtrl, Mis en quarantaine, [5a3f7059b9c2ea4ce93eddbe758dc13f],
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Smart-Shopper.Smrt-ShprCtrl, Mis en quarantaine, [5a3f7059b9c2ea4ce93eddbe758dc13f],
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Smart-Shopper.Smrt-ShprCtrl.1, Mis en quarantaine, [5a3f7059b9c2ea4ce93eddbe758dc13f],
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4CF088BD-BE95-40A5-BE9B-677F8683EDEA}, Mis en quarantaine, [1e7be4e5c8b33df9b0786e2d946eab55],
Adware.SmartShopper, HKLM\SOFTWARE\CLASSES\Smart-Shopper.IEButtonA.1, Mis en quarantaine, [1e7be4e5c8b33df9b0786e2d946eab55],
Adware.SmartShopper, HKLM\SOFTWARE\CLASSES\Smart-Shopper.IEButtonA, Mis en quarantaine, [1e7be4e5c8b33df9b0786e2d946eab55],
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Smart-Shopper.IEButtonA, Mis en quarantaine, [1e7be4e5c8b33df9b0786e2d946eab55],
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Smart-Shopper.IEButtonA.1, Mis en quarantaine, [1e7be4e5c8b33df9b0786e2d946eab55],
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6FAC4823-815E-4361-836E-46D65ED2550B}, Mis en quarantaine, [18813396463550e6bf6c6932857d29d7],
Adware.SmartShopper, HKLM\SOFTWARE\CLASSES\Smart-Shopper.IEButton.1, Mis en quarantaine, [18813396463550e6bf6c6932857d29d7],
Adware.SmartShopper, HKLM\SOFTWARE\CLASSES\Smart-Shopper.IEButton, Mis en quarantaine, [18813396463550e6bf6c6932857d29d7],
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Smart-Shopper.IEButton, Mis en quarantaine, [18813396463550e6bf6c6932857d29d7],
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Smart-Shopper.IEButton.1, Mis en quarantaine, [18813396463550e6bf6c6932857d29d7],
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{8BCB5337-EC01-4E38-840C-A964F174255B}, Mis en quarantaine, [4752ebdecbb08ea85ad5217a47bb55ab],
Adware.SmartShopper, HKLM\SOFTWARE\CLASSES\Smart-Shopper.HbInfoBand.1, Mis en quarantaine, [4752ebdecbb08ea85ad5217a47bb55ab],
Adware.SmartShopper, HKLM\SOFTWARE\CLASSES\Smart-Shopper.HbInfoBand, Mis en quarantaine, [4752ebdecbb08ea85ad5217a47bb55ab],
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Smart-Shopper.HbInfoBand, Mis en quarantaine, [4752ebdecbb08ea85ad5217a47bb55ab],
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Smart-Shopper.HbInfoBand.1, Mis en quarantaine, [4752ebdecbb08ea85ad5217a47bb55ab],
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{911F251E-34FD-465E-B6CE-DF00FF49A6BE}, Mis en quarantaine, [0990ccfdd7a4a98d062a7a21a65c24dc],
Adware.SmartShopper, HKLM\SOFTWARE\CLASSES\Smart-Shopper.HbAx.1, Mis en quarantaine, [0990ccfdd7a4a98d062a7a21a65c24dc],
Adware.SmartShopper, HKLM\SOFTWARE\CLASSES\Smart-Shopper.HbAx, Mis en quarantaine, [0990ccfdd7a4a98d062a7a21a65c24dc],
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Smart-Shopper.HbAx, Mis en quarantaine, [0990ccfdd7a4a98d062a7a21a65c24dc],
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Smart-Shopper.HbAx.1, Mis en quarantaine, [0990ccfdd7a4a98d062a7a21a65c24dc],
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{FE4F1649-8909-49C0-87BA-24D65120DB46}, Mis en quarantaine, [3564e5e484f7181e2312a1fa04feb44c],
Adware.SmartShopper, HKLM\SOFTWARE\CLASSES\Smart-Shopper.IEButtonB.1, Mis en quarantaine, [3564e5e484f7181e2312a1fa04feb44c],
Adware.SmartShopper, HKLM\SOFTWARE\CLASSES\Smart-Shopper.IEButtonB, Mis en quarantaine, [3564e5e484f7181e2312a1fa04feb44c],
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Smart-Shopper.IEButtonB, Mis en quarantaine, [3564e5e484f7181e2312a1fa04feb44c],
Adware.SmartShopper, HKLM\SOFTWARE\WOW6432NODE\CLASSES\Smart-Shopper.IEButtonB.1, Mis en quarantaine, [3564e5e484f7181e2312a1fa04feb44c],
PUP.Optional.Astromenda, HKU\S-1-5-21-2209107327-2679236738-3054507437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}, Mis en quarantaine, [adec13b62f4c3ef8cd63ef8be91926da],
PUP.Optional.Astromenda, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}, Mis en quarantaine, [adec13b62f4c3ef8cd63ef8be91926da],
PUP.Optional.Astromenda.A, HKU\S-1-5-21-2209107327-2679236738-3054507437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\wse_astromenda, Mis en quarantaine, [4752fecbb9c2e353a28520d4d2307b85],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2209107327-2679236738-3054507437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, Mis en quarantaine, [3f5affcac2b91f170819c55f9b689070],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2209107327-2679236738-3054507437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, Mis en quarantaine, [7b1ec801aad102347b03360403012bd5],
PUP.Optional.Astromenda, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\WSE_Astromenda, Mis en quarantaine, [fe9b9039a6d596a0e93720cd38ca06fa],

Valeurs du Registre: 3
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2209107327-2679236738-3054507437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, zr2Y1E2Z1G1J1T1M, Mis en quarantaine, [7b1ec801aad102347b03360403012bd5]
PUP.Optional.Astromenda.A, HKU\S-1-5-21-2209107327-2679236738-3054507437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE|WSE_Astromenda, wscript /E:vbscript /B "C:\Users\Josee\AppData\Roaming\WSE_Astromenda\UpdateProc\bkup.dat", Mis en quarantaine, [ecad7950017af6400b1ba54f6a986f91]
PUP.Optional.Astromenda, HKU\S-1-5-21-2209107327-2679236738-3054507437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|BRS, C:\Program Files (x86)\WSE_Astromenda\BRS\brs.exe -runBRS, Mis en quarantaine, [fe9b9039a6d596a0e93720cd38ca06fa]

Donn�es du Registre: 1
PUP.Optional.Astromenda.A, HKU\S-1-5-21-2209107327-2679236738-3054507437-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://astromenda.com/?f=1&a=ast_tgraduit_14_36_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDtCtCyC0E0EyE0DzzyEzy0EtDtN0D0Tzu0SzyyBzztN1L2XzutAtFtBtFtCtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyDzztAyEyDtCyB0EtGyByCtD0EtGtCyCyDtAtG0F0FzyzytGtA0CyCtDtA0CzyyD0B0BzytA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCyE0DzztCyDtC0BtGtD0DyBzztGyEyC0F0AtG0ByEyDyBtGtAyC0FtDyE0AyCzy0EtAyCyE2Q&cr=91314331&ir=, Bon: (www.google.com), Mauvais: (http://astromenda.com/?f=1&a=ast_tgraduit_14_36_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDtCtCyC0E0EyE0DzzyEzy0EtDtN0D0Tzu0SzyyBzztN1L2XzutAtFtBtFtCtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyDzztAyEyDtCyB0EtGyByCtD0EtGtCyCyDtAtG0F0FzyzytGtA0CyCtDtA0CzyyD0B0BzytA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCyE0DzztCyDtC0BtGtD0DyBzztGyEyC0F0AtG0ByEyDyBtGtAyC0FtDyE0AyCzy0EtAyCyE2Q&cr=91314331&ir=),Remplac�,[f5a46861c4b7d363abe4ae41f113da26]

Dossiers: 6
PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda, Supprim�-au-red�marrage, [fe9b9039a6d596a0e93720cd38ca06fa],
PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda\bh, Mis en quarantaine, [fe9b9039a6d596a0e93720cd38ca06fa],
PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda\BRS, Supprim�-au-red�marrage, [fe9b9039a6d596a0e93720cd38ca06fa],
PUP.Optional.Astromenda.A, C:\Users\Josee\AppData\Roaming\WSE_Astromenda, Mis en quarantaine, [0e8b7950e8936cca3b05519caa58bc44],
PUP.Optional.Astromenda.A, C:\Users\Josee\AppData\Roaming\WSE_Astromenda\icons_3.2.1.2, Mis en quarantaine, [0e8b7950e8936cca3b05519caa58bc44],
PUP.Optional.Astromenda.A, C:\Users\Josee\AppData\Roaming\WSE_Astromenda\UpdateProc, Mis en quarantaine, [0e8b7950e8936cca3b05519caa58bc44],

Fichiers: 25
PUP.Optional.Astromenda.A, C:\Windows\Tasks\WSE_Astromenda.job, Mis en quarantaine, [6e2bd5f43f3c40f6f13493614cb618e8],
PUP.Optional.Astromenda, C:\Users\Josee\AppData\Roaming\Mozilla\Firefox\Profiles\bzo3mb5i.default-1385042734723\searchplugins\Astromenda.xml, Mis en quarantaine, [78214287f685b18576685a9a6a9842be],
PUP.Optional.Astromenda, C:\Users\Josee\AppData\Roaming\Mozilla\Firefox\Profiles\eioh6jcj.default-1400945059411\searchplugins\Astromenda.xml, Mis en quarantaine, [f4a55772b5c60e2877670aea1ee450b0],
PUP.Optional.Astromenda, C:\Users\Josee\AppData\Roaming\Mozilla\Firefox\Profiles\ns0mp19r.default-1394160532603\searchplugins\Astromenda.xml, Mis en quarantaine, [6237a524ff7ccb6bb12dd91b3bc7b54b],
PUP.Optional.Astromenda, C:\Users\Josee\AppData\Roaming\Mozilla\Firefox\Profiles\r7h2t6i6.default-1395580640353\searchplugins\Astromenda.xml, Mis en quarantaine, [9affc0091368e94d508e748006fca957],
PUP.Optional.Astromenda, C:\Users\Josee\AppData\Roaming\Mozilla\Firefox\Profiles\t3pchvm2.default-1409677792671\searchplugins\Astromenda.xml, Mis en quarantaine, [0c8d1baebdbeb6801dc149ab18ea33cd],
PUP.Optional.Astromenda, C:\Users\Josee\AppData\Roaming\Mozilla\Firefox\Profiles\uaqhw5nw.default-1396022307207\searchplugins\Astromenda.xml, Mis en quarantaine, [564344851e5d0a2c20be7b79f11134cc],
PUP.Optional.Astromenda, C:\Users\Josee\AppData\Roaming\Mozilla\Firefox\Profiles\wcaxiclp.default-1409665365107\searchplugins\Astromenda.xml, Mis en quarantaine, [f5a4af1a3f3c0d29904ebc38738f7b85],
PUP.Optional.Astromenda.A, C:\Users\Josee\AppData\Roaming\WSE_Astromenda\UpdateProc\bkup.dat, Mis en quarantaine, [ecad7950017af6400b1ba54f6a986f91],
PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda\FavIcon.ico, Mis en quarantaine, [fe9b9039a6d596a0e93720cd38ca06fa],
PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda\Sqlite3.dll, Mis en quarantaine, [fe9b9039a6d596a0e93720cd38ca06fa],
PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda\uninst.dat, Mis en quarantaine, [fe9b9039a6d596a0e93720cd38ca06fa],
PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda\uninstall.exe, Mis en quarantaine, [fe9b9039a6d596a0e93720cd38ca06fa],
PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda\BRS\brs.exe, Supprim�-au-red�marrage, [fe9b9039a6d596a0e93720cd38ca06fa],
PUP.Optional.Astromenda, C:\Program Files (x86)\WSE_Astromenda\BRS\Sqlite3.dll, Mis en quarantaine, [fe9b9039a6d596a0e93720cd38ca06fa],
PUP.Optional.Astromenda.A, C:\Users\Josee\AppData\Roaming\WSE_Astromenda\icons_3.2.1.2\ctr.ico, Mis en quarantaine, [0e8b7950e8936cca3b05519caa58bc44],
PUP.Optional.Astromenda.A, C:\Users\Josee\AppData\Roaming\WSE_Astromenda\UpdateProc\config.dat, Mis en quarantaine, [0e8b7950e8936cca3b05519caa58bc44],
PUP.Optional.Astromenda.A, C:\Users\Josee\AppData\Roaming\WSE_Astromenda\UpdateProc\info.dat, Mis en quarantaine, [0e8b7950e8936cca3b05519caa58bc44],
PUP.Optional.Astromenda.A, C:\Users\Josee\AppData\Roaming\Mozilla\Firefox\Profiles\bzo3mb5i.default-1385042734723\prefs.js, Bon: (), Mauvais: (user_pref("browser.startup.homepage", "http://astromenda.com/?f=1&a=ast_tgraduit_14_36_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDtCtCyC0E0EyE0DzzyEzy0EtDtN0D0Tzu0SzyyBzztN1L2XzutAtFtBtFtCtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyDzztAyEyDtCyB0EtGyByCtD0EtGtCyCyDtAtG0F0FzyzytGtA0CyCtDtA0CzyyD0B0BzytA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCyE0DzztCyDtC0BtGtD0DyBzztGyEyC0F0AtG0ByEyDyBtGtAyC0FtDyE0AyCzy0EtAyCyE2Q&cr=91314331&ir=");), Remplac�,[4f4a70597ffcd2646b90de407590a35d]
PUP.Optional.Astromenda.A, C:\Users\Josee\AppData\Roaming\Mozilla\Firefox\Profiles\eioh6jcj.default-1400945059411\prefs.js, Bon: (), Mauvais: (user_pref("browser.startup.homepage", "http://astromenda.com/?f=1&a=ast_tgraduit_14_36_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDtCtCyC0E0EyE0DzzyEzy0EtDtN0D0Tzu0SzyyBzztN1L2XzutAtFtBtFtCtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyDzztAyEyDtCyB0EtGyByCtD0EtGtCyCyDtAtG0F0FzyzytGtA0CyCtDtA0CzyyD0B0BzytA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCyE0DzztCyDtC0BtGtD0DyBzztGyEyC0F0AtG0ByEyDyBtGtAyC0FtDyE0AyCzy0EtAyCyE2Q&cr=91314331&ir=");), Remplac�,[81183198a9d2cd6916e5d549bb4a05fb]
PUP.Optional.Astromenda.A, C:\Users\Josee\AppData\Roaming\Mozilla\Firefox\Profiles\ns0mp19r.default-1394160532603\prefs.js, Bon: (), Mauvais: (user_pref("browser.startup.homepage", "http://astromenda.com/?f=1&a=ast_tgraduit_14_36_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDtCtCyC0E0EyE0DzzyEzy0EtDtN0D0Tzu0SzyyBzztN1L2XzutAtFtBtFtCtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyDzztAyEyDtCyB0EtGyByCtD0EtGtCyCyDtAtG0F0FzyzytGtA0CyCtDtA0CzyyD0B0BzytA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCyE0DzztCyDtC0BtGtD0DyBzztGyEyC0F0AtG0ByEyDyBtGtAyC0FtDyE0AyCzy0EtAyCyE2Q&cr=91314331&ir=");), Remplac�,[b8e112b7f68539fdcb3077a7fe07867a]
PUP.Optional.Astromenda.A, C:\Users\Josee\AppData\Roaming\Mozilla\Firefox\Profiles\r7h2t6i6.default-1395580640353\prefs.js, Bon: (), Mauvais: (user_pref("browser.startup.homepage", "http://astromenda.com/?f=1&a=ast_tgraduit_14_36_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDtCtCyC0E0EyE0DzzyEzy0EtDtN0D0Tzu0SzyyBzztN1L2XzutAtFtBtFtCtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyDzztAyEyDtCyB0EtGyByCtD0EtGtCyCyDtAtG0F0FzyzytGtA0CyCtDtA0CzyyD0B0BzytA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCyE0DzztCyDtC0BtGtD0DyBzztGyEyC0F0AtG0ByEyDyBtGtAyC0FtDyE0AyCzy0EtAyCyE2Q&cr=91314331&ir=");), Remplac�,[5a3f26a3e893d0669c5f0816d530fd03]
PUP.Optional.Astromenda.A, C:\Users\Josee\AppData\Roaming\Mozilla\Firefox\Profiles\t3pchvm2.default-1409677792671\prefs.js, Bon: (), Mauvais: (user_pref("browser.startup.homepage", "http://astromenda.com/?f=1&a=ast_tgraduit_14_36_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDtCtCyC0E0EyE0DzzyEzy0EtDtN0D0Tzu0SzyyBzztN1L2XzutAtFtBtFtCtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyDzztAyEyDtCyB0EtGyByCtD0EtGtCyCyDtAtG0F0FzyzytGtA0CyCtDtA0CzyyD0B0BzytA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCyE0DzztCyDtC0BtGtD0DyBzztGyEyC0F0AtG0ByEyDyBtGtAyC0FtDyE0AyCzy0EtAyCyE2Q&cr=91314331&ir=");), Remplac�,[f9a01bae2556da5c68931c026c99a45c]
PUP.Optional.Astromenda.A, C:\Users\Josee\AppData\Roaming\Mozilla\Firefox\Profiles\uaqhw5nw.default-1396022307207\prefs.js, Bon: (), Mauvais: (user_pref("browser.startup.homepage", "http://astromenda.com/?f=1&a=ast_tgraduit_14_36_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDtCtCyC0E0EyE0DzzyEzy0EtDtN0D0Tzu0SzyyBzztN1L2XzutAtFtBtFtCtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyDzztAyEyDtCyB0EtGyByCtD0EtGtCyCyDtAtG0F0FzyzytGtA0CyCtDtA0CzyyD0B0BzytA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCyE0DzztCyDtC0BtGtD0DyBzztGyEyC0F0AtG0ByEyDyBtGtAyC0FtDyE0AyCzy0EtAyCyE2Q&cr=91314331&ir=");), Remplac�,[dabfcdfc4932df57e714001e6c99cb35]
PUP.Optional.Astromenda.A, C:\Users\Josee\AppData\Roaming\Mozilla\Firefox\Profiles\wcaxiclp.default-1409665365107\prefs.js, Bon: (), Mauvais: (user_pref("browser.startup.homepage", "http://astromenda.com/?f=1&a=ast_tgraduit_14_36_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDtCtCyC0E0EyE0DzzyEzy0EtDtN0D0Tzu0SzyyBzztN1L2XzutAtFtBtFtCtFtBtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2SyDzztAyEyDtCyB0EtGyByCtD0EtGtCyCyDtAtG0F0FzyzytGtA0CyCtDtA0CzyyD0B0BzytA2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCyE0DzztCyDtC0BtGtD0DyBzztGyEyC0F0AtG0ByEyDyBtGtAyC0FtDyE0AyCzy0EtAyCyE2Q&cr=91314331&ir=");), Remplac�,[6534e8e1601bd16511ea021c828314ec]

Secteurs physiques: 0
(No malicious items detected)


(end)

Publicité


Signaler le contenu de ce document

Publicité