Publicité
Publicité
Format du document : text/plain
Prévisualisation
Malwarebytes Anti-Malware
www.malwarebytes.org
Date de l'examen: 17/09/2014
Heure de l'examen: 08:27:53
Fichier journal:
Administrateur: Oui
Version: 2.00.2.1012
Base de donn�es Malveillants: v2014.09.17.02
Base de donn�es Rootkits: v2014.09.15.01
Licence: Gratuite
Protection contre les malveillants: D�sactiv�(e)
Protection contre les sites Web malveillants: D�sactiv�(e)
Self-protection: D�sactiv�(e)
Syst�me d'exploitation: Windows 7 Service Pack 1
Processeur: x64
Syst�me de fichiers: NTFS
Utilisateur: ACER
Type d'examen: Examen "Menaces"
R�sultat: Termin�
Objets analys�s: 319059
Temps �coul�: 16 min, 26 sec
M�moire: Activ�(e)
D�marrage: Activ�(e)
Syst�me de fichiers: Activ�(e)
Archives: Activ�(e)
Rootkits: D�sactiv�(e)
Heuristics: Activ�(e)
PUP: Avertir
PUM: Activ�(e)
Processus: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Cl�s du Registre: 56
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Mis en quarantaine, [60567b732b500036e92426990ff3e41c],
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\CLASSES\IESmartBar.BHO, Mis en quarantaine, [60567b732b500036e92426990ff3e41c],
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Mis en quarantaine, [60567b732b500036e92426990ff3e41c],
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Mis en quarantaine, [60567b732b500036e92426990ff3e41c],
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IESmartBar.BHO, Mis en quarantaine, [60567b732b500036e92426990ff3e41c],
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Mis en quarantaine, [60567b732b500036e92426990ff3e41c],
PUP.Optional.QuickShare.A, HKU\S-1-5-21-2657179059-1983806374-3649987409-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Mis en quarantaine, [60567b732b500036e92426990ff3e41c],
PUP.Optional.QuickShare.A, HKU\S-1-5-21-2657179059-1983806374-3649987409-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Mis en quarantaine, [60567b732b500036e92426990ff3e41c],
PUP.Optional.GetNow.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{F126C9FC-9299-40F2-BD42-C59023AD1E7F}, Mis en quarantaine, [9c1a4ca2dd9e231359403953b74b7b85],
PUP.Optional.GetNow.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{237FDFDB-3722-470E-8BA8-90196DABE967}, Mis en quarantaine, [9c1a4ca2dd9e231359403953b74b7b85],
PUP.Optional.GetNow.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{237FDFDB-3722-470E-8BA8-90196DABE967}, Mis en quarantaine, [9c1a4ca2dd9e231359403953b74b7b85],
PUP.Optional.GetNow.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{F126C9FC-9299-40F2-BD42-C59023AD1E7F}, Mis en quarantaine, [9c1a4ca2dd9e231359403953b74b7b85],
PUP.Optional.Snapdo.T, HKU\S-1-5-21-2657179059-1983806374-3649987409-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, Mis en quarantaine, [397d757973085dd9f1061ea430d242be],
PUP.Optional.Snapdo.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}, Mis en quarantaine, [397d757973085dd9f1061ea430d242be],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\bitguard.exe, Mis en quarantaine, [4571a945611ae84e57ff6a0258aca060],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\bprotect.exe, Mis en quarantaine, [4175db136219cc6af85fa0cc966e1be5],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\bpsvc.exe, Mis en quarantaine, [1d9932bccdae91a55efaabc1b94b946c],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\browserdefender.exe, Mis en quarantaine, [c6f01bd3116a12244d0c115b808449b7],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\browserprotect.exe, Mis en quarantaine, [f6c0529c66153cfa15451b513dc73cc4],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\browsersafeguard.exe, Mis en quarantaine, [8234d31b611abf777ddef577aa5ac13f],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\dprotectsvc.exe, Mis en quarantaine, [c9ede509d8a392a4302cdc90758ff60a],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\protectedsearch.exe, Mis en quarantaine, [ecca8b639dde36006af43636e51f649c],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchinstaller.exe, Mis en quarantaine, [b10589657cfff0461a45ee7ee222ff01],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchprotection.exe, Mis en quarantaine, [eec85d91532892a4b7a94e1ea55fb848],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchprotector.exe, Mis en quarantaine, [6056fbf35328023497cacd9fc93bb54b],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchsettings.exe, Mis en quarantaine, [af070de134478da9540e66069074738d],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchsettings64.exe, Mis en quarantaine, [8234638b6615280e263d91db47bdf20e],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\snapdo.exe, Mis en quarantaine, [4472b03e8cef0b2be08458144fb512ee],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\stinst32.exe, Mis en quarantaine, [e7cfc12d304be74fe382fe6ee81cd52b],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\stinst64.exe, Mis en quarantaine, [486e8a64394237ff7ce91d4f22e2d030],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\umbrella.exe, Mis en quarantaine, [fdb905e997e4be785c0a86e63cc8817f],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\utiljumpflip.exe, Mis en quarantaine, [33834ba31467b4821453cd9fe024de22],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\websteroids.exe, Mis en quarantaine, [d1e511ddf38881b5a9c13933b74d9769],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\websteroidsservice.exe, Mis en quarantaine, [4274aa4494e73df9fe6d2e3e986ce21e],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\bitguard.exe, Mis en quarantaine, [6e4814da8eedcb6b94c246265da731cf],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\bprotect.exe, Mis en quarantaine, [5e5816d898e33bfbdf782448ff05d42c],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\bpsvc.exe, Mis en quarantaine, [f8becb235e1d72c47cdcc0acdd275fa1],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\browserdefender.exe, Mis en quarantaine, [9125618d433835011c3da7c5d3312dd3],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\browserprotect.exe, Mis en quarantaine, [526407e7552679bd1f3b89e30cf8fd03],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\browsersafeguard.exe, Mis en quarantaine, [377fa34b4b30c96d1447cd9f7490aa56],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\dprotectsvc.exe, Mis en quarantaine, [3a7c648a106bf046124af478f60e15eb],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\protectedsearch.exe, Mis en quarantaine, [2b8b12dcd8a33204f26c3933e91bde22],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchinstaller.exe, Mis en quarantaine, [ddd9dd110576340262fd2d3f14f02dd3],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchprotection.exe, Mis en quarantaine, [5f57856976051f171c4480ec9e6615eb],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchprotector.exe, Mis en quarantaine, [dadca04e641789ad7de41f4de3219868],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchsettings.exe, Mis en quarantaine, [496d5d91e4977fb7cb97cf9d669e60a0],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchsettings64.exe, Mis en quarantaine, [269017d73c3fca6c7de65f0db84c2ad6],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\snapdo.exe, Mis en quarantaine, [e1d5e806394203333b2985e715ef5ba5],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\stinst32.exe, Mis en quarantaine, [fabc618d255683b34c19cf9dd52fbe42],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\stinst64.exe, Mis en quarantaine, [efc7fcf2ee8ded4968fdcd9fc044b54b],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\umbrella.exe, Mis en quarantaine, [338306e82b503ff7bda91b51fb096997],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\utiljumpflip.exe, Mis en quarantaine, [6452bb332c4fc76f7aed84e862a258a8],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\websteroids.exe, Mis en quarantaine, [4a6cdf0ff388211541298ae2e0240bf5],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\websteroidsservice.exe, Mis en quarantaine, [33836886730844f2cba06507b94b7c84],
PUP.Optional.SmartBar, HKU\S-1-5-21-2657179059-1983806374-3649987409-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SmartbarBackup, Mis en quarantaine, [7a3c5599b0cb73c31600c59ec440fe02],
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-2657179059-1983806374-3649987409-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SEARCHPROTECTINT, Mis en quarantaine, [e4d21ad4f08ba6909837d65dbe45f808],
Valeurs du Registre: 5
PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, Mis en quarantaine, [8f2788664a310c2a8ab63fc47e85e11f]
PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, Mis en quarantaine, [d4e2c7271962f145b48cac57ca39c23e]
PUP.Optional.Snapdo.T, HKU\S-1-5-21-2657179059-1983806374-3649987409-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {006ee092-9658-4fd6-bd8e-a21a348e59f5}, Mis en quarantaine, [a412effff08b72c427edff0ed42f1fe1]
PUP.Optional.SmartBar.A, HKU\S-1-5-21-2657179059-1983806374-3649987409-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Browser Infrastructure Helper, C:\Users\ACER\AppData\Local\Smartbar\Application\Smartbar.exe startup, Mis en quarantaine, [526498560675be78880d074206fec838]
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-2657179059-1983806374-3649987409-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SEARCHPROTECTINT|Install, 1, Mis en quarantaine, [e4d21ad4f08ba6909837d65dbe45f808]
Donn�es du Registre: 0
(No malicious items detected)
Dossiers: 1
PUP.Optional.MusicBoxToolBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\imeshmusicboxtoolbar181, Mis en quarantaine, [486efbf37a01d46297f78e4a738f9e62],
Fichiers: 17
Hacktool.Agent, C:\Users\ACER\Desktop\Windows.Loader.v2.2.2-Daz.rar, Mis en quarantaine, [6452f5f94b30072f41bab4a5827f9b65],
PUP.Optional.OpenCandy, C:\Users\ACER\Downloads\photoscape_3-6-5_fr_41582.exe, Mis en quarantaine, [9125f3fbfb80221496b22ef8fb0afa06],
PUP.Optional.Babylon.A, C:\Users\ACER\Downloads\Unlocker1.9.2.exe, Mis en quarantaine, [bdf985691368280e898f75a144bdfd03],
PUP.Optional.InstallCore, C:\Users\ACER\Downloads\ImageEditorSetup.exe, Mis en quarantaine, [674fc32b7a0196a08a83562be51fae52],
PUP.Optional.SnapDo.A, C:\Windows\Installer\932b2b.msi, Mis en quarantaine, [00b69757d7a4c175df0a0e85669bc23e],
PUP.Optional.WebSearch.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\searchplugins\Web Search.xml, Mis en quarantaine, [d5e16d8186f51a1c0baafc2e000329d7],
PUP.Optional.MusicBoxToolBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\imeshmusicboxtoolbar181\apnuserid.dat, Mis en quarantaine, [486efbf37a01d46297f78e4a738f9e62],
PUP.Optional.MusicBoxToolBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\imeshmusicboxtoolbar181\appid.dat, Mis en quarantaine, [486efbf37a01d46297f78e4a738f9e62],
PUP.Optional.MusicBoxToolBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\imeshmusicboxtoolbar181\geodata.xml, Mis en quarantaine, [486efbf37a01d46297f78e4a738f9e62],
PUP.Optional.MusicBoxToolBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\imeshmusicboxtoolbar181\setupCfg.xml, Mis en quarantaine, [486efbf37a01d46297f78e4a738f9e62],
PUP.Optional.MusicBoxToolBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\imeshmusicboxtoolbar181\sysid.dat, Mis en quarantaine, [486efbf37a01d46297f78e4a738f9e62],
PUP.Optional.MusicBoxToolBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\imeshmusicboxtoolbar181\trackid.dat, Mis en quarantaine, [486efbf37a01d46297f78e4a738f9e62],
PUP.Optional.HelperBar.A, C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\Preferences, Bon: (), Mauvais: ( "homepage": "http://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6YBCFyuyOThLNwyLfsNUJpVBK-GKF_YoyW9wbAniggrtNOkue8b_c09tcL79uQUqYzVqew4j8QkR4ljaZ7R0QHIRtx5EUJi7eQ3HQk2BFiE7rxI1_XvOHCFZ8RpVT1N9-QvQNMGYVJb8w2gkGsQ1PUEGmubwqeoe5LOLdk41_kZSA,,",), Remplac�,[308618d61c5f67cfef8c50e439cc2fd1]
PUP.Optional.HelperBar.A, C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\Preferences, Bon: (), Mauvais: ( "startup_urls": [ "http://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6YBCFyuyOThLNwyLfsNUJpVBK-GKF_YoyW9wbAniggrtNOkue8b_c09tcL79uQUqYzVqew4j8QkR4ljaZ7R0QHIRtx5EUJi7eQ3HQk2BFiE7rxI1_XvOHCFZ8RpVT1N9-QvQNMGYVJb8w2gkGsQ1PUEGmubwqeoe5LOLdk41_kZSA,," ],), Remplac�,[575fe6083942191dcfddbd7760a511ef]
PUP.Optional.HelperBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\prefs.js, Bon: (), Mauvais: (user_pref("browser.newtab.url", "http://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6YBCFyuyOThLNwyLfsNUJpVBK-GKF_YoyW9wbAniggrtNOkue8b_c09tcL79uQUqYzVqew4j8QkR4llyP6JhI3VIj3HxdlFDnoJ4nNnPXS-qQiT4rOCbLiZclImKksR0fA5N_55kni1YSqtPgB5fqnFe5GfS1p19HXdIjF24JTMKg,,");), Remplac�,[a313ee009ae10135aaf68ca719ecf60a]
PUP.Optional.HelperBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\prefs.js, Bon: (), Mauvais: (user_pref("keyword.URL", "http://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6YBCFyuyOThLNwyLfsNUJpVBK-GKF_YoyW9wbAniggrtNOkue8b_c09tcL79uQUqYzVqew4j8QkR4lv4kEqUpdje_6Pt5fkOSq0l4BihlRzKO6q9xiiubOkT9dX7gsO2DL9zWU8cTa4d3FOfkKP_K408BmrIGVm4xdnQySRpgI4Cw,,&q=");), Remplac�,[0da946a8abd083b3bae71f14d431b749]
PUP.Optional.HelperBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\prefs.js, Bon: (), Mauvais: (user_pref("browser.startup.homepage", "http://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6YBCFyuyOThLNwyLfsNUJpVBK-GKF_YoyW9wbAniggrtNOkue8b_c09tcL79uQUqYzVqew4j8QkR4ljaZ7R0QHIRtx5EUJi7eQ3HQk2BFiE7rxI1_XvOHCFZ8RpVT1N9-QvQNMGYVJb8w2gkGsQ1PUEGmubwZ0cGCatDd7LmYCrog,,");), Remplac�,[1b9b32bc39428bab140151e3aa5bac54]
Secteurs physiques: 0
(No malicious items detected)
(end)
www.malwarebytes.org
Date de l'examen: 17/09/2014
Heure de l'examen: 08:27:53
Fichier journal:
Administrateur: Oui
Version: 2.00.2.1012
Base de donn�es Malveillants: v2014.09.17.02
Base de donn�es Rootkits: v2014.09.15.01
Licence: Gratuite
Protection contre les malveillants: D�sactiv�(e)
Protection contre les sites Web malveillants: D�sactiv�(e)
Self-protection: D�sactiv�(e)
Syst�me d'exploitation: Windows 7 Service Pack 1
Processeur: x64
Syst�me de fichiers: NTFS
Utilisateur: ACER
Type d'examen: Examen "Menaces"
R�sultat: Termin�
Objets analys�s: 319059
Temps �coul�: 16 min, 26 sec
M�moire: Activ�(e)
D�marrage: Activ�(e)
Syst�me de fichiers: Activ�(e)
Archives: Activ�(e)
Rootkits: D�sactiv�(e)
Heuristics: Activ�(e)
PUP: Avertir
PUM: Activ�(e)
Processus: 0
(No malicious items detected)
Modules: 0
(No malicious items detected)
Cl�s du Registre: 56
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Mis en quarantaine, [60567b732b500036e92426990ff3e41c],
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\CLASSES\IESmartBar.BHO, Mis en quarantaine, [60567b732b500036e92426990ff3e41c],
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Mis en quarantaine, [60567b732b500036e92426990ff3e41c],
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Mis en quarantaine, [60567b732b500036e92426990ff3e41c],
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\IESmartBar.BHO, Mis en quarantaine, [60567b732b500036e92426990ff3e41c],
PUP.Optional.QuickShare.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Mis en quarantaine, [60567b732b500036e92426990ff3e41c],
PUP.Optional.QuickShare.A, HKU\S-1-5-21-2657179059-1983806374-3649987409-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Mis en quarantaine, [60567b732b500036e92426990ff3e41c],
PUP.Optional.QuickShare.A, HKU\S-1-5-21-2657179059-1983806374-3649987409-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}, Mis en quarantaine, [60567b732b500036e92426990ff3e41c],
PUP.Optional.GetNow.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{F126C9FC-9299-40F2-BD42-C59023AD1E7F}, Mis en quarantaine, [9c1a4ca2dd9e231359403953b74b7b85],
PUP.Optional.GetNow.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{237FDFDB-3722-470E-8BA8-90196DABE967}, Mis en quarantaine, [9c1a4ca2dd9e231359403953b74b7b85],
PUP.Optional.GetNow.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{237FDFDB-3722-470E-8BA8-90196DABE967}, Mis en quarantaine, [9c1a4ca2dd9e231359403953b74b7b85],
PUP.Optional.GetNow.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{F126C9FC-9299-40F2-BD42-C59023AD1E7F}, Mis en quarantaine, [9c1a4ca2dd9e231359403953b74b7b85],
PUP.Optional.Snapdo.T, HKU\S-1-5-21-2657179059-1983806374-3649987409-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, Mis en quarantaine, [397d757973085dd9f1061ea430d242be],
PUP.Optional.Snapdo.T, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006EE092-9658-4FD6-BD8E-A21A348E59F5}, Mis en quarantaine, [397d757973085dd9f1061ea430d242be],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\bitguard.exe, Mis en quarantaine, [4571a945611ae84e57ff6a0258aca060],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\bprotect.exe, Mis en quarantaine, [4175db136219cc6af85fa0cc966e1be5],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\bpsvc.exe, Mis en quarantaine, [1d9932bccdae91a55efaabc1b94b946c],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\browserdefender.exe, Mis en quarantaine, [c6f01bd3116a12244d0c115b808449b7],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\browserprotect.exe, Mis en quarantaine, [f6c0529c66153cfa15451b513dc73cc4],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\browsersafeguard.exe, Mis en quarantaine, [8234d31b611abf777ddef577aa5ac13f],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\dprotectsvc.exe, Mis en quarantaine, [c9ede509d8a392a4302cdc90758ff60a],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\protectedsearch.exe, Mis en quarantaine, [ecca8b639dde36006af43636e51f649c],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchinstaller.exe, Mis en quarantaine, [b10589657cfff0461a45ee7ee222ff01],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchprotection.exe, Mis en quarantaine, [eec85d91532892a4b7a94e1ea55fb848],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchprotector.exe, Mis en quarantaine, [6056fbf35328023497cacd9fc93bb54b],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchsettings.exe, Mis en quarantaine, [af070de134478da9540e66069074738d],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchsettings64.exe, Mis en quarantaine, [8234638b6615280e263d91db47bdf20e],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\snapdo.exe, Mis en quarantaine, [4472b03e8cef0b2be08458144fb512ee],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\stinst32.exe, Mis en quarantaine, [e7cfc12d304be74fe382fe6ee81cd52b],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\stinst64.exe, Mis en quarantaine, [486e8a64394237ff7ce91d4f22e2d030],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\umbrella.exe, Mis en quarantaine, [fdb905e997e4be785c0a86e63cc8817f],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\utiljumpflip.exe, Mis en quarantaine, [33834ba31467b4821453cd9fe024de22],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\websteroids.exe, Mis en quarantaine, [d1e511ddf38881b5a9c13933b74d9769],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\websteroidsservice.exe, Mis en quarantaine, [4274aa4494e73df9fe6d2e3e986ce21e],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\bitguard.exe, Mis en quarantaine, [6e4814da8eedcb6b94c246265da731cf],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\bprotect.exe, Mis en quarantaine, [5e5816d898e33bfbdf782448ff05d42c],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\bpsvc.exe, Mis en quarantaine, [f8becb235e1d72c47cdcc0acdd275fa1],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\browserdefender.exe, Mis en quarantaine, [9125618d433835011c3da7c5d3312dd3],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\browserprotect.exe, Mis en quarantaine, [526407e7552679bd1f3b89e30cf8fd03],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\browsersafeguard.exe, Mis en quarantaine, [377fa34b4b30c96d1447cd9f7490aa56],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\dprotectsvc.exe, Mis en quarantaine, [3a7c648a106bf046124af478f60e15eb],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\protectedsearch.exe, Mis en quarantaine, [2b8b12dcd8a33204f26c3933e91bde22],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchinstaller.exe, Mis en quarantaine, [ddd9dd110576340262fd2d3f14f02dd3],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchprotection.exe, Mis en quarantaine, [5f57856976051f171c4480ec9e6615eb],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchprotector.exe, Mis en quarantaine, [dadca04e641789ad7de41f4de3219868],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchsettings.exe, Mis en quarantaine, [496d5d91e4977fb7cb97cf9d669e60a0],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\searchsettings64.exe, Mis en quarantaine, [269017d73c3fca6c7de65f0db84c2ad6],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\snapdo.exe, Mis en quarantaine, [e1d5e806394203333b2985e715ef5ba5],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\stinst32.exe, Mis en quarantaine, [fabc618d255683b34c19cf9dd52fbe42],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\stinst64.exe, Mis en quarantaine, [efc7fcf2ee8ded4968fdcd9fc044b54b],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\umbrella.exe, Mis en quarantaine, [338306e82b503ff7bda91b51fb096997],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\utiljumpflip.exe, Mis en quarantaine, [6452bb332c4fc76f7aed84e862a258a8],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\websteroids.exe, Mis en quarantaine, [4a6cdf0ff388211541298ae2e0240bf5],
PUP.Optional.IFEO.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\websteroidsservice.exe, Mis en quarantaine, [33836886730844f2cba06507b94b7c84],
PUP.Optional.SmartBar, HKU\S-1-5-21-2657179059-1983806374-3649987409-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SmartbarBackup, Mis en quarantaine, [7a3c5599b0cb73c31600c59ec440fe02],
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-2657179059-1983806374-3649987409-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SEARCHPROTECTINT, Mis en quarantaine, [e4d21ad4f08ba6909837d65dbe45f808],
Valeurs du Registre: 5
PUP.Optional.SmartBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, Mis en quarantaine, [8f2788664a310c2a8ab63fc47e85e11f]
PUP.Optional.SmartBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{ae07101b-46d4-4a98-af68-0333ea26e113}, Smartbar, Mis en quarantaine, [d4e2c7271962f145b48cac57ca39c23e]
PUP.Optional.Snapdo.T, HKU\S-1-5-21-2657179059-1983806374-3649987409-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {006ee092-9658-4fd6-bd8e-a21a348e59f5}, Mis en quarantaine, [a412effff08b72c427edff0ed42f1fe1]
PUP.Optional.SmartBar.A, HKU\S-1-5-21-2657179059-1983806374-3649987409-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Browser Infrastructure Helper, C:\Users\ACER\AppData\Local\Smartbar\Application\Smartbar.exe startup, Mis en quarantaine, [526498560675be78880d074206fec838]
PUP.Optional.SearchProtect.A, HKU\S-1-5-21-2657179059-1983806374-3649987409-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SEARCHPROTECTINT|Install, 1, Mis en quarantaine, [e4d21ad4f08ba6909837d65dbe45f808]
Donn�es du Registre: 0
(No malicious items detected)
Dossiers: 1
PUP.Optional.MusicBoxToolBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\imeshmusicboxtoolbar181, Mis en quarantaine, [486efbf37a01d46297f78e4a738f9e62],
Fichiers: 17
Hacktool.Agent, C:\Users\ACER\Desktop\Windows.Loader.v2.2.2-Daz.rar, Mis en quarantaine, [6452f5f94b30072f41bab4a5827f9b65],
PUP.Optional.OpenCandy, C:\Users\ACER\Downloads\photoscape_3-6-5_fr_41582.exe, Mis en quarantaine, [9125f3fbfb80221496b22ef8fb0afa06],
PUP.Optional.Babylon.A, C:\Users\ACER\Downloads\Unlocker1.9.2.exe, Mis en quarantaine, [bdf985691368280e898f75a144bdfd03],
PUP.Optional.InstallCore, C:\Users\ACER\Downloads\ImageEditorSetup.exe, Mis en quarantaine, [674fc32b7a0196a08a83562be51fae52],
PUP.Optional.SnapDo.A, C:\Windows\Installer\932b2b.msi, Mis en quarantaine, [00b69757d7a4c175df0a0e85669bc23e],
PUP.Optional.WebSearch.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\searchplugins\Web Search.xml, Mis en quarantaine, [d5e16d8186f51a1c0baafc2e000329d7],
PUP.Optional.MusicBoxToolBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\imeshmusicboxtoolbar181\apnuserid.dat, Mis en quarantaine, [486efbf37a01d46297f78e4a738f9e62],
PUP.Optional.MusicBoxToolBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\imeshmusicboxtoolbar181\appid.dat, Mis en quarantaine, [486efbf37a01d46297f78e4a738f9e62],
PUP.Optional.MusicBoxToolBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\imeshmusicboxtoolbar181\geodata.xml, Mis en quarantaine, [486efbf37a01d46297f78e4a738f9e62],
PUP.Optional.MusicBoxToolBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\imeshmusicboxtoolbar181\setupCfg.xml, Mis en quarantaine, [486efbf37a01d46297f78e4a738f9e62],
PUP.Optional.MusicBoxToolBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\imeshmusicboxtoolbar181\sysid.dat, Mis en quarantaine, [486efbf37a01d46297f78e4a738f9e62],
PUP.Optional.MusicBoxToolBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\imeshmusicboxtoolbar181\trackid.dat, Mis en quarantaine, [486efbf37a01d46297f78e4a738f9e62],
PUP.Optional.HelperBar.A, C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\Preferences, Bon: (), Mauvais: ( "homepage": "http://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6YBCFyuyOThLNwyLfsNUJpVBK-GKF_YoyW9wbAniggrtNOkue8b_c09tcL79uQUqYzVqew4j8QkR4ljaZ7R0QHIRtx5EUJi7eQ3HQk2BFiE7rxI1_XvOHCFZ8RpVT1N9-QvQNMGYVJb8w2gkGsQ1PUEGmubwqeoe5LOLdk41_kZSA,,",), Remplac�,[308618d61c5f67cfef8c50e439cc2fd1]
PUP.Optional.HelperBar.A, C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\Preferences, Bon: (), Mauvais: ( "startup_urls": [ "http://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6YBCFyuyOThLNwyLfsNUJpVBK-GKF_YoyW9wbAniggrtNOkue8b_c09tcL79uQUqYzVqew4j8QkR4ljaZ7R0QHIRtx5EUJi7eQ3HQk2BFiE7rxI1_XvOHCFZ8RpVT1N9-QvQNMGYVJb8w2gkGsQ1PUEGmubwqeoe5LOLdk41_kZSA,," ],), Remplac�,[575fe6083942191dcfddbd7760a511ef]
PUP.Optional.HelperBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\prefs.js, Bon: (), Mauvais: (user_pref("browser.newtab.url", "http://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6YBCFyuyOThLNwyLfsNUJpVBK-GKF_YoyW9wbAniggrtNOkue8b_c09tcL79uQUqYzVqew4j8QkR4llyP6JhI3VIj3HxdlFDnoJ4nNnPXS-qQiT4rOCbLiZclImKksR0fA5N_55kni1YSqtPgB5fqnFe5GfS1p19HXdIjF24JTMKg,,");), Remplac�,[a313ee009ae10135aaf68ca719ecf60a]
PUP.Optional.HelperBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\prefs.js, Bon: (), Mauvais: (user_pref("keyword.URL", "http://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6YBCFyuyOThLNwyLfsNUJpVBK-GKF_YoyW9wbAniggrtNOkue8b_c09tcL79uQUqYzVqew4j8QkR4lv4kEqUpdje_6Pt5fkOSq0l4BihlRzKO6q9xiiubOkT9dX7gsO2DL9zWU8cTa4d3FOfkKP_K408BmrIGVm4xdnQySRpgI4Cw,,&q=");), Remplac�,[0da946a8abd083b3bae71f14d431b749]
PUP.Optional.HelperBar.A, C:\Users\ACER\AppData\Roaming\Mozilla\Firefox\Profiles\ysvmdu9w.default\prefs.js, Bon: (), Mauvais: (user_pref("browser.startup.homepage", "http://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StMBGUhCtXlT7G1muS_BRDXuH_N6YBCFyuyOThLNwyLfsNUJpVBK-GKF_YoyW9wbAniggrtNOkue8b_c09tcL79uQUqYzVqew4j8QkR4ljaZ7R0QHIRtx5EUJi7eQ3HQk2BFiE7rxI1_XvOHCFZ8RpVT1N9-QvQNMGYVJb8w2gkGsQ1PUEGmubwZ0cGCatDd7LmYCrog,,");), Remplac�,[1b9b32bc39428bab140151e3aa5bac54]
Secteurs physiques: 0
(No malicious items detected)
(end)