Malwarebytes Anti-Malware
www.malwarebytes.org

Date de l'analyse: 21/03/2016
Heure de l'analyse: 19:51
Fichier journal: mbam.txt
Administrateur: Oui

Version: 2.1.8.1057
Base de données de programmes malveillants: v2016.03.21.05
Base de données de rootkits: v2016.03.12.01
Licence: Gratuit
Protection contre les programmes malveillants: Désactivé
Protection contre les sites Web malveillants: Désactivé
Autoprotection: Désactivé

Système d'exploitation: Windows 8.1
Processeur: x64
Système de fichiers: NTFS
Utilisateur: USER-HP

Type d'analyse: Analyse des menaces
Résultat: Terminé
Objets analysés: 493252
Temps écoulé: 48 min, 45 s

Mémoire: Activé
Démarrage: Activé
Système de fichiers: Activé
Archives: Activé
Rootkits: Activé
Heuristique: Activé
PUP: Activé
PUM: Activé

Processus: 0
(Aucun élément malveillant détecté)

Modules: 0
(Aucun élément malveillant détecté)

Clés du registre: 5
PUP.Optional.SecureWeb, HKU\S-1-5-21-3905468546-2106592361-564293017-501\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{D3C24E2B-C820-4492-9B69-11BF7163F998}, En quarantaine, [c8a16c1eb3e6ae88b5ccd5f313ef54ac],
PUP.Optional.SecureWeb, HKU\S-1-5-21-3905468546-2106592361-564293017-501\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{D3C24E2B-C820-4492-9B69-11BF7163F998}, En quarantaine, [c8a16c1eb3e6ae88b5ccd5f313ef54ac],
PUP.Optional.GoHD, HKU\S-1-5-21-3905468546-2106592361-564293017-1002\SOFTWARE\-, En quarantaine, [85e4acdeff9a74c27d40d241f50f4db3],
PUP.Optional.MultiPlug, HKU\S-1-5-21-3905468546-2106592361-564293017-1002_Classes\TYPELIB\{157B1AA6-3E5C-404A-9118-C1D91F537040}, En quarantaine, [25442f5be9b0ab8b7cb4d771ff05d828],
PUP.Optional.MultiPlug, HKU\S-1-5-21-3905468546-2106592361-564293017-1002_Classes\INTERFACE\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}, En quarantaine, [25442f5be9b0ab8b7cb4d771ff05d828],

Valeurs du registre: 1
PUP.Optional.GoSearchMe, HKU\S-1-5-21-3905468546-2106592361-564293017-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|Tabs, https://gosearch.me/?u=34d67718b95afb9c23d46c0daed415db&c=gpupdater&src=hp&inst=1445120729, En quarantaine, [fd6ce6a45c3ddf57250539db788c946c]

Données du registre: 0
(Aucun élément malveillant détecté)

Dossiers: 13
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\7b@m.net\content, En quarantaine, [4920701a6534f046c8178602ec18c739],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\7b@m.net, En quarantaine, [4920701a6534f046c8178602ec18c739],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\EOT@Z.com\content, En quarantaine, [8edbd4b6d1c88caa31ae7612d133df21],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\EOT@Z.com, En quarantaine, [8edbd4b6d1c88caa31ae7612d133df21],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\ld@nDobm.org\content, En quarantaine, [38316228e4b5e74f4996bbcd0ff5b24e],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\ld@nDobm.org, En quarantaine, [38316228e4b5e74f4996bbcd0ff5b24e],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\ZD@noA.com\content, En quarantaine, [94d5c0cabddc63d322bdbbcdab5926da],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\ZD@noA.com, En quarantaine, [94d5c0cabddc63d322bdbbcdab5926da],
PUP.Optional.Privoxy, C:\Users\USER-HP\AppData\Roaming\Windows Cleaner, En quarantaine, [42275f2bebaee4522a98c4c5a95bc53b],
PUP.Optional.Helper, C:\Users\USER-HP\AppData\Roaming\Mozilla\Firefox\Profiles\9nm5h55w.default-1438282240751\extensions\firefox@helper2, En quarantaine, [5d0c4d3d6e2b12248a00c852ff047f81],
PUP.Optional.Helper, C:\Users\USER-HP\AppData\Roaming\Mozilla\Firefox\Profiles\9nm5h55w.default-1438282240751\extensions\firefox@helper2\content, En quarantaine, [5d0c4d3d6e2b12248a00c852ff047f81],
PUP.Optional.SecureWeb, C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\882acb6c0dae4f6cf90f2e88aed415db\content, En quarantaine, [c6a3fd8d495037ff9e88ca7c8481ad53],
PUP.Optional.SecureWeb, C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\882acb6c0dae4f6cf90f2e88aed415db, En quarantaine, [c6a3fd8d495037ff9e88ca7c8481ad53],

Fichiers: 48
Backdoor.Agent.WD, C:\Users\USER-HP\AppData\Roaming\ZHP\Quarantine\66BB.tmp.exe, En quarantaine, [86e35b2fdcbd30066c14b16dd7291ae6],
Trojan.Downloader, C:\Users\USER-HP\AppData\Roaming\ZHP\Quarantine\7465.tmp.exe, En quarantaine, [f5745733d7c245f11e89db79aa580ef2],
Backdoor.Agent.WD, C:\Users\USER-HP\AppData\Roaming\ZHP\Quarantine\hp_238583.exe, En quarantaine, [b4b5791152471f17542ccf4fbb456898],
Backdoor.Agent.WD, C:\Users\USER-HP\AppData\Roaming\ZHP\Quarantine\hp_u_823824.exe, En quarantaine, [6ffa4c3ea3f643f3562a5dc1f10fef11],
PUP.Optional.MultiPlug.UNS, C:\Users\USER-HP\AppData\Roaming\ZHP\Quarantine\Browser AdBlocker\Browser AdBlocker.exe, En quarantaine, [d49542486f2aa195c6cd6333d32fa35d],
PUP.Optional.MultiPlug, C:\Windows\Temp\tmp7lnkjr\dbghelp.dll, En quarantaine, [b1b83555a4f54ee8ed0468ddd22f35cb],
PUP.Optional.MultiPlug, C:\Windows\Temp\tmpo_o0fs\LoC6NLkJME9n4KN.exe, En quarantaine, [ec7dc3c78d0c5ed8d1297ec733ce9b65],
PUP.Optional.MultiPlug, C:\Windows\Temp\tmppzbwo8\dbghelp.dll, En quarantaine, [a3c63951fe9b95a143ae3213758c629e],
PUP.Optional.MultiPlug.BHO, C:\Windows\Temp\tmpy2jy4s\8SjjO23M4gLXYh.dll, En quarantaine, [69008901712866d07ba0083e5aa7e818],
PUP.Optional.MultiPlug.BHO64, C:\Windows\Temp\tmpy2jy4s\8SjjO23M4gLXYh.x64.dll, En quarantaine, [2e3b1f6bfb9ebb7bf825c87e4bb6bd43],
PUP.Optional.MultiPlug, C:\Windows\Temp\tmpy2jy4s\jnhBi6GZRJ3UT6l.exe, En quarantaine, [6405197189108ea87d7df253d32ea858],
PUP.Optional.APNToolBar, C:\Users\USER-HP\Downloads\Setup-SopCast-4.0.0-2015-8-21.exe, En quarantaine, [e8818dfd5c3d7bbbead9c67b42bff709],
PUP.Optional.APNToolBar, C:\Users\USER-HP\Downloads\SopCast.zip, En quarantaine, [27426f1b7920340212b158e98a775ca4],
PUP.Optional.MultiPlug, C:\Users\USER-HP\Downloads\XeMu360_Setup.exe, En quarantaine, [a6c336545841c571c7d34e88e1207a86],
PUP.Optional.InstallCore, C:\Users\USER-HP\Desktop\Torrents\Téléchargés\[R.G. Mechanics] SimCity\setup.exe, En quarantaine, [5f0a5c2e3762f93d99a1d19745bc0000],
PUP.Optional.Jelbrus, C:\Users\USER-HP\Desktop\Vidéos\Films\Secondaires\Batman Begins.exe, En quarantaine, [b0b957334455b28441b7a59f3acb41bf],
PUP.Optional.ShopperDealsWay, C:\Users\USER-HP\AppData\Roaming\Opera Software\Opera Stable\Local Storage\http_shopper.deals-way.com_83.localstorage, En quarantaine, [e980cfbb72271a1c2541a89fa55fea16],
PUP.Optional.ShopperDealsWay, C:\Users\USER-HP\AppData\Roaming\Opera Software\Opera Stable\Local Storage\http_shopper.deals-way.com_83.localstorage-journal, En quarantaine, [3b2edfabe1b8d2646402ff48b64e7e82],
PUP.Optional.CrossRider, C:\Users\USER-HP\AppData\Roaming\Opera Software\Opera Stable\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage, En quarantaine, [77f25f2b98012f075bbc6c1af80c1be5],
PUP.Optional.CrossRider, C:\Users\USER-HP\AppData\Roaming\Opera Software\Opera Stable\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal, En quarantaine, [99d03852f0a93cfa1ef9127450b4ba46],
PUP.Optional.CrossRider, C:\Users\USER-HP\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage, En quarantaine, [83e68a00c7d2a0964fced2b49272cf31],
PUP.Optional.CrossRider, C:\Users\USER-HP\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage-journal, En quarantaine, [0366404a2a6f3ef8e835e79f9f659967],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\7b@m.net\content\bg.js, En quarantaine, [4920701a6534f046c8178602ec18c739],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\7b@m.net\bootstrap.js, En quarantaine, [4920701a6534f046c8178602ec18c739],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\7b@m.net\chrome.manifest, En quarantaine, [4920701a6534f046c8178602ec18c739],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\7b@m.net\install.rdf, En quarantaine, [4920701a6534f046c8178602ec18c739],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\EOT@Z.com\content\bg.js, En quarantaine, [8edbd4b6d1c88caa31ae7612d133df21],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\EOT@Z.com\bootstrap.js, En quarantaine, [8edbd4b6d1c88caa31ae7612d133df21],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\EOT@Z.com\chrome.manifest, En quarantaine, [8edbd4b6d1c88caa31ae7612d133df21],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\EOT@Z.com\install.rdf, En quarantaine, [8edbd4b6d1c88caa31ae7612d133df21],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\ld@nDobm.org\content\bg.js, En quarantaine, [38316228e4b5e74f4996bbcd0ff5b24e],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\ld@nDobm.org\bootstrap.js, En quarantaine, [38316228e4b5e74f4996bbcd0ff5b24e],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\ld@nDobm.org\chrome.manifest, En quarantaine, [38316228e4b5e74f4996bbcd0ff5b24e],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\ld@nDobm.org\install.rdf, En quarantaine, [38316228e4b5e74f4996bbcd0ff5b24e],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\ZD@noA.com\content\bg.js, En quarantaine, [94d5c0cabddc63d322bdbbcdab5926da],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\ZD@noA.com\bootstrap.js, En quarantaine, [94d5c0cabddc63d322bdbbcdab5926da],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\ZD@noA.com\chrome.manifest, En quarantaine, [94d5c0cabddc63d322bdbbcdab5926da],
PUP.Optional.MultiPlug, C:\Users\Invité\AppData\Roaming\Mozilla\Firefox\Profiles\j2jfv40c.default\extensions\staged\ZD@noA.com\install.rdf, En quarantaine, [94d5c0cabddc63d322bdbbcdab5926da],
PUP.Optional.Privoxy, C:\Users\USER-HP\AppData\Roaming\Windows Cleaner\Windows Cleaner.exe, En quarantaine, [42275f2bebaee4522a98c4c5a95bc53b],
PUP.Optional.Helper, C:\Users\USER-HP\AppData\Roaming\Mozilla\Firefox\Profiles\9nm5h55w.default-1438282240751\extensions\firefox@helper2\chrome.manifest, En quarantaine, [5d0c4d3d6e2b12248a00c852ff047f81],
PUP.Optional.Helper, C:\Users\USER-HP\AppData\Roaming\Mozilla\Firefox\Profiles\9nm5h55w.default-1438282240751\extensions\firefox@helper2\install.rdf, En quarantaine, [5d0c4d3d6e2b12248a00c852ff047f81],
PUP.Optional.Helper, C:\Users\USER-HP\AppData\Roaming\Mozilla\Firefox\Profiles\9nm5h55w.default-1438282240751\extensions\firefox@helper2\content\load.js, En quarantaine, [5d0c4d3d6e2b12248a00c852ff047f81],
PUP.Optional.Helper, C:\Users\USER-HP\AppData\Roaming\Mozilla\Firefox\Profiles\9nm5h55w.default-1438282240751\extensions\firefox@helper2\content\overlay.xul, En quarantaine, [5d0c4d3d6e2b12248a00c852ff047f81],
PUP.Optional.Helper, C:\Users\USER-HP\AppData\Roaming\Mozilla\Firefox\Profiles\9nm5h55w.default-1438282240751\extensions\firefox@helper2\content\style.css, En quarantaine, [5d0c4d3d6e2b12248a00c852ff047f81],
PUP.Optional.SecureWeb, C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\882acb6c0dae4f6cf90f2e88aed415db\content\load.js, En quarantaine, [c6a3fd8d495037ff9e88ca7c8481ad53],
PUP.Optional.SecureWeb, C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\882acb6c0dae4f6cf90f2e88aed415db\content\overlay.xul, En quarantaine, [c6a3fd8d495037ff9e88ca7c8481ad53],
PUP.Optional.SecureWeb, C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\882acb6c0dae4f6cf90f2e88aed415db\chrome.manifest, En quarantaine, [c6a3fd8d495037ff9e88ca7c8481ad53],
PUP.Optional.SecureWeb, C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\882acb6c0dae4f6cf90f2e88aed415db\install.rdf, En quarantaine, [c6a3fd8d495037ff9e88ca7c8481ad53],

Secteurs physiques: 0
(Aucun élément malveillant détecté)


(end)