cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Malwarebytes Anti-Malware
www.malwarebytes.org

Date de l'examen: 02/06/2015
Heure de l'examen: 19:44:08
Fichier journal: Malwarebytes.txt
Administrateur: Oui

Version: 2.01.6.1022
Base de donn�es Malveillants: v2015.06.02.04
Base de donn�es Rootkits: v2015.06.02.01
Licence: Gratuit
Protection contre les malveillants: D�sactiv�(e)
Protection contre les sites Web malveillants: D�sactiv�(e)
Auto-protection: D�sactiv�(e)

Syst�me d'exploitation: Windows 7 Service Pack 1
Processeur: x64
Syst�me de fichiers: NTFS
Utilisateur: Trotobas

Type d'examen: Examen "Menaces"
R�sultat: Termin�
Objets analys�s: 360413
Temps �coul�: 27 min, 37 sec

M�moire: Activ�(e)
D�marrage: Activ�(e)
Syst�me de fichiers: Activ�(e)
Archives: Activ�(e)
Rootkits: D�sactiv�(e)
Heuristique: Activ�(e)
PUP: Activ�(e)
PUM: Activ�(e)

Processus: 1
PUP.Optional.BreakingNewsAlert.A, C:\ProgramData\pUkwAjNvC\TolCJq.exe, 3212, Supprim�-au-red�marrage, [c527b500b0da043204f6240f6c96827e]

Modules: 0
(Aucun �l�ment malicieux d�tect�)

Cl�s du Registre: 5
PUP.Optional.BreakingNewsAlert.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TolCJq, Mis en quarantaine, [c527b500b0da043204f6240f6c96827e],
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE, Mis en quarantaine, [38b4c4f19af00a2c03692060c144cb35],
PUP.Optional.MultiPlug.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{cae99edb}, Mis en quarantaine, [1ad22095602a85b1fcc119659174619f],
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE, Mis en quarantaine, [9a52466f0c7ef83e4626f28e669fae52],
PUP.Optional.SuperClick.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\scfd_1_10_0_16, Mis en quarantaine, [b636981d3951f24412ffaed04abba15f],

Valeurs du Registre: 2
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, Mis en quarantaine, [38b4c4f19af00a2c03692060c144cb35]
PUM.Security.Hijack.DisableChromeUpdates, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\UPDATE|DisableAutoUpdateChecksCheckboxValue, 1, Mis en quarantaine, [9a52466f0c7ef83e4626f28e669fae52]

Donn�es du Registre: 0
(Aucun �l�ment malicieux d�tect�)

Dossiers: 9
PUP.Optional.WebBar.A, C:\Windows\System32\config\systemprofile\AppData\Local\WebBar, Mis en quarantaine, [de0ea2130a80de582ca504e2c73c4bb5],
PUP.Optional.BreakingNewsAlert.A, C:\Users\Trotobas\AppData\Local\BreakingNewsAlert, Mis en quarantaine, [5b91a114c4c659dd53e97e7f847faf51],
PUP.Optional.MultiPlug.Gen, C:\Users\Trotobas\AppData\Roaming\D48B3300-1433184283-81E1-3575-3085A907CC2C, Mis en quarantaine, [a24a4075f59544f205e73c3bb1545aa6],
PUP.Optional.MultiPlug.Gen, C:\Users\Trotobas\AppData\Roaming\D48B3300-1433184284-81E1-3575-3085A907CC2C, Mis en quarantaine, [6a82d2e37416a492e7057dfaef1657a9],
PUP.Optional.MultiPlug.Gen, C:\Users\Trotobas\AppData\Roaming\D48B3300-1433186782-81E1-3575-3085A907CC2C, Mis en quarantaine, [bc305560f298ad897a73babdea1bb050],
PUP.Optional.Amonetize.A, C:\ProgramData\Sraanoti\1.0.1.0, Mis en quarantaine, [c5277b3a07830531f6176d1214f142be],
PUP.Optional.Amonetize.A, C:\ProgramData\Sraanoti, Mis en quarantaine, [c5277b3a07830531f6176d1214f142be],
PUP.Optional.PullUpdate.A, C:\ProgramData\pUkwAjNvC\dat, Supprim�-au-red�marrage, [5e8e278eff8b999d1998e888ab5b7987],
PUP.Optional.PullUpdate.A, C:\ProgramData\pUkwAjNvC, Supprim�-au-red�marrage, [5e8e278eff8b999d1998e888ab5b7987],

Fichiers: 25
PUP.Optional.BreakingNewsAlert.A, C:\ProgramData\pUkwAjNvC\TolCJq.exe, Supprim�-au-red�marrage, [c527b500b0da043204f6240f6c96827e],
PUP.Optional.BreakingNewsAlert.A, C:\ProgramData\pUkwAjNvC\dat\JRNMoM.exe, Supprim�-au-red�marrage, [608c11a47f0bf83eb248c1724cb6bd43],
PUP.Optional.PullUpdate.A, C:\ProgramData\pUkwAjNvC\dat\NvCwTmAtexE.dll, Supprim�-au-red�marrage, [12dab2038dfda3932fd8d996ea1caa56],
PUP.Optional.BreakingNewsAlert.A, C:\ProgramData\pUkwAjNvC\dat\QZGTCcfGZLi.exe, Supprim�-au-red�marrage, [cf1dd4e1117975c16f8b86ad6999a15f],
PUP.Optional.ZombieInvasion.A, C:\ProgramData\pUkwAjNvC\dat\zbHjGXxPuQ.dll, Supprim�-au-red�marrage, [9656ac099beff73fcba488928185e61a],
PUP.Optional.SuperOptimizer.A, C:\Users\Trotobas\AppData\Roaming\ZHP\Quarantine\hqghumeaylnlf.exe, Mis en quarantaine, [40ac773e6921e94dc1609dc4af538c74],
PUP.Optional.PricePeep.A, C:\Users\Trotobas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.pricepeep00.pricepeep.net_0.localstorage, Mis en quarantaine, [45a7476ed7b33bfb52a38d57d62df808],
PUP.Optional.PricePeep.A, C:\Users\Trotobas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.pricepeep00.pricepeep.net_0.localstorage-journal, Mis en quarantaine, [89638b2a4644c6704aab2fb53ac98d73],
PUP.Optional.WebBar.A, C:\Windows\System32\config\systemprofile\AppData\Local\WebBar\wb.log, Mis en quarantaine, [de0ea2130a80de582ca504e2c73c4bb5],
PUP.Optional.BreakingNewsAlert.A, C:\Users\Trotobas\AppData\Local\BreakingNewsAlert\data2.dat, Mis en quarantaine, [5b91a114c4c659dd53e97e7f847faf51],
PUP.Optional.ReMarkable.A, C:\Users\Trotobas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage, Mis en quarantaine, [04e8d9dc73176ec82ed76f085fa6f907],
PUP.Optional.ReMarkable.A, C:\Users\Trotobas\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markable00.re-markable.net_0.localstorage-journal, Mis en quarantaine, [7874e9cc2b5f241240c5512635d06799],
PUP.Optional.MultiPlug.Gen, C:\Users\Trotobas\AppData\Roaming\D48B3300-1433184283-81E1-3575-3085A907CC2C\vnsc256.tmp, Mis en quarantaine, [a24a4075f59544f205e73c3bb1545aa6],
PUP.Optional.MultiPlug.Gen, C:\Users\Trotobas\AppData\Roaming\D48B3300-1433184283-81E1-3575-3085A907CC2C\Uninstall.exe, Mis en quarantaine, [a24a4075f59544f205e73c3bb1545aa6],
PUP.Optional.MultiPlug.Gen, C:\Users\Trotobas\AppData\Roaming\D48B3300-1433184284-81E1-3575-3085A907CC2C\vnsh7F3.tmp, Mis en quarantaine, [6a82d2e37416a492e7057dfaef1657a9],
PUP.Optional.MultiPlug.Gen, C:\Users\Trotobas\AppData\Roaming\D48B3300-1433184284-81E1-3575-3085A907CC2C\Uninstall.exe, Mis en quarantaine, [6a82d2e37416a492e7057dfaef1657a9],
PUP.Optional.MultiPlug.Gen, C:\Users\Trotobas\AppData\Roaming\D48B3300-1433186782-81E1-3575-3085A907CC2C\vnsx4F19.tmp, Mis en quarantaine, [bc305560f298ad897a73babdea1bb050],
PUP.Optional.MultiPlug.Gen, C:\Users\Trotobas\AppData\Roaming\D48B3300-1433186782-81E1-3575-3085A907CC2C\Uninstall.exe, Mis en quarantaine, [bc305560f298ad897a73babdea1bb050],
PUP.Optional.Amonetize.A, C:\ProgramData\Sraanoti\1.0.1.0\vrivemla.exe.config, Mis en quarantaine, [c5277b3a07830531f6176d1214f142be],
PUP.Optional.Amonetize.A, C:\ProgramData\Sraanoti\1.0.1.0\sqlite3.dll, Mis en quarantaine, [c5277b3a07830531f6176d1214f142be],
PUP.Optional.Amonetize.A, C:\ProgramData\Sraanoti\dat.dat, Mis en quarantaine, [c5277b3a07830531f6176d1214f142be],
PUP.Optional.PullUpdate.A, C:\ProgramData\pUkwAjNvC\dat\JRNMoM.exe.config, Supprim�-au-red�marrage, [5e8e278eff8b999d1998e888ab5b7987],
PUP.Optional.PullUpdate.A, C:\ProgramData\pUkwAjNvC\dat\QZGTCcfGZLi.exe.config, Supprim�-au-red�marrage, [5e8e278eff8b999d1998e888ab5b7987],
PUP.Optional.PullUpdate.A, C:\ProgramData\pUkwAjNvC\info.dat, Supprim�-au-red�marrage, [5e8e278eff8b999d1998e888ab5b7987],
PUP.Optional.PullUpdate.A, C:\ProgramData\pUkwAjNvC\TolCJq.dat, Supprim�-au-red�marrage, [5e8e278eff8b999d1998e888ab5b7987],

Secteurs physiques: 0
(Aucun �l�ment malicieux d�tect�)


(end)

Publicité


Signaler le contenu de ce document

Publicité