Publicité
Publicité
Format du document : text/plain
Prévisualisation
Malwarebytes Anti-Malware
www.malwarebytes.org
Date de l'analyse: 25/04/2016
Heure de l'analyse: 07:24
Fichier journal: malwarebytes.txt
Administrateur: Oui
Version: 2.2.1.1043
Base de données de programmes malveillants: v2016.04.25.01
Base de données de rootkits: v2016.04.17.01
Licence: Essai
Protection contre les programmes malveillants: Activé
Protection contre les sites Web malveillants: Activé
Autoprotection: Désactivé
Système d'exploitation: Windows 10
Processeur: x64
Système de fichiers: NTFS
Utilisateur: admin
Type d'analyse: Analyse des menaces
Résultat: Terminé
Objets analysés: 408178
Temps écoulé: 28 min, 57 s
Mémoire: Activé
Démarrage: Activé
Système de fichiers: Activé
Archives: Activé
Rootkits: Désactivé
Heuristique: Activé
PUP: Activé
PUM: Activé
Processus: 1
PUP.Optional.BreakingNewsAlert, C:\ProgramData\RfiJgeK\bIlpAWEl.exe, 2924, , [c63fe0d387124aec8467ec61d1302bd5]
Modules: 0
(Aucun élément malveillant détecté)
Clés du Registre: 28
PUP.Optional.BreakingNewsAlert, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\bIlpAWEl, , [c63fe0d387124aec8467ec61d1302bd5],
PUP.Optional.PhraseProfessor, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ppfd_vw_1_10_0_21, , [2dd8dbd8c8d1e551b73f412843c217e9],
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\APPID\{1860bdd6-e56e-4269-8b99-78f8bf1ab343}, , [788dded5346587af8ccf1baa5ea4ee12],
PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{1860BDD6-E56E-4269-8B99-78F8BF1AB343}, , [788dded5346587af8ccf1baa5ea4ee12],
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{1860BDD6-E56E-4269-8B99-78F8BF1AB343}, , [788dded5346587af8ccf1baa5ea4ee12],
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\APPID\{c40e9865-cbbf-490a-9f51-697ff271d3a5}, , [39cc9f14ecad15212d3084418b774cb4],
PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C40E9865-CBBF-490A-9F51-697FF271D3A5}, , [39cc9f14ecad15212d3084418b774cb4],
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{C40E9865-CBBF-490A-9F51-697FF271D3A5}, , [39cc9f14ecad15212d3084418b774cb4],
PUP.Optional.WebSteroids, HKLM\SOFTWARE\CLASSES\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, , [e61f239074259a9ccc97f2fd47bbeb15],
PUP.Optional.WebSteroids, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, , [e61f239074259a9ccc97f2fd47bbeb15],
PUP.Optional.WebSteroids, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, , [e61f239074259a9ccc97f2fd47bbeb15],
PUP.Optional.DynConIE, HKLM\SOFTWARE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, , [0df81f948e0b01354093ca1e6a98aa56],
PUP.Optional.DynConIE, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, , [0df81f948e0b01354093ca1e6a98aa56],
PUP.Optional.DynConIE, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, , [0df81f948e0b01354093ca1e6a98aa56],
PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}, , [ed18862df3a67eb8cf24349152b0e020],
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}, , [ed18862df3a67eb8cf24349152b0e020],
PUP.Optional.PullUpdate, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BreakingNewsAlert, , [976e0da6b2e7ea4cbc4d71f97392ba46],
PUP.Optional.IDSCProduct, HKLM\SOFTWARE\SpaceSoundPro, , [5baacce72a6f2511ebf0545c3fc5768a],
PUP.Optional.Yontoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, , [c73e8f249efbc5714947a2be798b0cf4],
PUP.Optional.PhraseProfessor, HKLM\SOFTWARE\WOW6432NODE\PhraseProfessor_1.10.0.21, , [7a8bd1e2b4e50d29eb673a08bb4933cd],
PUP.Optional.IDSCProduct, HKLM\SOFTWARE\WOW6432NODE\SpaceSondPro, , [c441892ae6b36bcb7e5c218fca3a7987],
PUP.Optional.PhraseProfessor, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\PhraseProfessorAutoUpdateClient_RASAPI32, , [64a13e75aaefe254df44aeb462a2ce32],
PUP.Optional.PhraseProfessor, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\PhraseProfessorAutoUpdateClient_RASMANCS, , [70956152adec80b62af92d356e9632ce],
PUP.Optional.SpeedBrowser, HKLM\SOFTWARE\WOW6432NODE\SPEEDBROWSER, , [a65f4d662574a492b398810f04007e82],
PUP.Optional.MultiIE, HKU\S-1-5-21-1365161019-1298562674-3330477929-1001\SOFTWARE\APPDATALOW\SOFTWARE\DynConIE, , [1de804afc9d08fa793615ae3a95b24dc],
PUP.Optional.Yontoo, HKU\S-1-5-21-1365161019-1298562674-3330477929-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, , [8b7a1e95ebae1e18f798c49c956f38c8],
PUP.Optional.ProductSetup, HKU\S-1-5-21-1365161019-1298562674-3330477929-1001\SOFTWARE\PRODUCTSETUP, , [34d11a9936634ee81aaf6ed631d3857b],
PUP.Optional.IDSCProduct, HKU\S-1-5-21-1365161019-1298562674-3330477929-1001\SOFTWARE\SPACESOUNDPRO, , [83825261b9e084b2447c812f5da705fb],
Valeurs du Registre: 12
PUP.Optional.Yontoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DoNotAskAgain, searchinterneat-a.akamaihd.net, , [887defc41485f73f84dd570b907435cb]
PUP.Optional.Yontoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQpbWQBEFwIWbQAPUQhcFVZCcBRZVQBBDAUbdgFbAg9ARQNFcB9aFQQTSEcFME0FCFwEURNNfX9ZAk0Cc1xEKE0=&q={searchTerms}, , [c73e8f249efbc5714947a2be798b0cf4]
PUP.Optional.IDSCProduct, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SpaceSoundPro, "C:\Program Files\SpaceSoundPro\SpaceSoundPro.exe", , [8f76357eb4e5072f8843bdf306fe3ac6]
PUP.Optional.SpeedBrowser, HKLM\SOFTWARE\WOW6432NODE\SPEEDBROWSER|homePageURL, http://www.trovi.com/?gd=&ctid=CT3334275&ISID=6CA279FD-2B95-4BDF-AE57-5565BBB09B2C&SearchSource=55&UM=8&D=073115, , [a65f4d662574a492b398810f04007e82]
PUP.Optional.SpeedBrowser, HKLM\SOFTWARE\WOW6432NODE\SPEEDBROWSER|newTabURL, http://www.trovi.com/?gd=&ctid=CT3334275&ISID=6CA279FD-2B95-4BDF-AE57-5565BBB09B2C&SearchSource=69&SSPV=EB_SSPV&Lay=1&UM=8&D=073115, , [8c795e55ff9a1f17c784a7e9a85c0ef2]
PUP.Optional.SpeedBrowser, HKLM\SOFTWARE\WOW6432NODE\SPEEDBROWSER|notfoundURL, http://www.trovi.com/corse/?gd=&ctid=CT3334275&ISID=6CA279FD-2B95-4BDF-AE57-5565BBB09B2C&SearchSource=70&SSPV=EB_SSPV&Lay=0&UM=8&fq=FQ_TERM&D=073115, , [64a17a394554f244fc4f0d833bc9ff01]
PUP.Optional.SpeedBrowser, HKLM\SOFTWARE\WOW6432NODE\SPEEDBROWSER|defaultSearchURL, http://www.trovi.com/Results.aspx?gd=&ctid=CT3334275&ISID=6CA279FD-2B95-4BDF-AE57-5565BBB09B2C&SearchSource=58&UM=8&D=073115&q=, , [24e1cee54d4c340285c6efa1ab59d42c]
PUP.Optional.Vitruvian, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ppfd_vw_1_10_0_21|ImagePath, system32\drivers\ppfd_vw_1_10_0_21.sys, , [c2431c97732672c4801a1c39c83ced13]
PUP.Optional.Yontoo, HKU\S-1-5-21-1365161019-1298562674-3330477929-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DoNotAskAgain, searchinterneat-a.akamaihd.net, , [18ed8033405939fd40649ac7d034bc44]
PUP.Optional.Yontoo, HKU\S-1-5-21-1365161019-1298562674-3330477929-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQpbWQBEFwIWbQAPUQhcFVZCcBRZVQBBDAUbdgFbAg9ARQNFcB9aFQQTSEcFME0FCFwEURNNfX9ZAk0Cc1xEKE0=&q={searchTerms}, , [8b7a1e95ebae1e18f798c49c956f38c8]
PUP.Optional.ProductSetup, HKU\S-1-5-21-1365161019-1298562674-3330477929-1001\SOFTWARE\PRODUCTSETUP|tb, 0N0U0L1F, , [34d11a9936634ee81aaf6ed631d3857b]
PUP.Optional.IDSCProduct, HKU\S-1-5-21-1365161019-1298562674-3330477929-1001\SOFTWARE\SPACESOUNDPRO|mj, 15.08.08.0, , [83825261b9e084b2447c812f5da705fb]
Données du Registre: 1
PUP.Optional.Yontoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggQIwEBVA9GFBgadwkJTA0SQAUOIQ0BURRBGQMbI1oOUF1HRwUFIk0FA1ADB0VXfVBdFElXTwhlIVpMEmsYRl1X, Bon : (www.google.com), Mauvais : (http://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggQIwEBVA9GFBgadwkJTA0SQAUOIQ0BURRBGQMbI1oOUF1HRwUFIk0FA1ADB0VXfVBdFElXTwhlIVpMEmsYRl1X),,[a65fe2d1b9e0270f09e057efd2336c94]
Dossiers: 17
PUP.Optional.BreakingNewsAlert, C:\ProgramData\BreakingNewsAlert, , [877efbb88a0f67cfd75327f7f50f1be5],
PUP.Optional.BreakingNewsAlert, C:\Users\admin\AppData\Local\BreakingNewsAlert, , [976e842fcecb3afc46e5c85653b119e7],
PUP.Optional.PullUpdate, C:\ProgramData\Radio, , [0302e8cb0198aa8c4ad8dd689371aa56],
PUP.Optional.BreakingNewsAlert, C:\BreakingNewsAlert, , [2bda4a698811e056976b21f163a033cd],
PUP.Optional.GamesDesktop, C:\Program Files (x86)\gmsd_fr_002030045, , [867f01b243563303b1b5a4782dd6c23e],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GUPlayer, , [35d0397ae0b92d09f0508a93db2837c9],
PUP.Optional.PhraseProfessor, C:\Program Files (x86)\PhraseProfessor_1.10.0.21, , [b74ee0d320799c9a5dbd0d18de2549b7],
PUP.Optional.PhraseProfessor, C:\Program Files (x86)\PhraseProfessor_1.10.0.21\Update, , [b74ee0d320799c9a5dbd0d18de2549b7],
PUP.Optional.SpeedBrowser, C:\Users\admin\AppData\Local\speed browser, , [46bf05ae5544d363f0562113bd46fc04],
PUP.Optional.SpeedBrowser, C:\Users\admin\AppData\Local\speed browser\User Data, , [46bf05ae5544d363f0562113bd46fc04],
PUP.Optional.SpeedBrowser, C:\Users\admin\AppData\Local\speed browser\User Data\Default, , [46bf05ae5544d363f0562113bd46fc04],
PUP.Optional.SpeedBrowser, C:\Users\admin\AppData\Local\speed browser\User Data\Default\Local Storage, , [46bf05ae5544d363f0562113bd46fc04],
PUP.Optional.PullUpdate, C:\ProgramData\RfiJgeK\dat, , [75907e352d6c261042885f1019ec4ab6],
PUP.Optional.PullUpdate, C:\ProgramData\RfiJgeK, , [75907e352d6c261042885f1019ec4ab6],
PUP.Optional.Yontoo, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecfcbmjnbjmamfcmhefamekeilngfjce\1.0.5889.36698_0, , [35d0a3100099ed490d6dea887c89a55b],
PUP.Optional.Yontoo, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecfcbmjnbjmamfcmhefamekeilngfjce, , [35d0a3100099ed490d6dea887c89a55b],
Fichiers: 49
PUP.Optional.BreakingNewsAlert, C:\ProgramData\RfiJgeK\bIlpAWEl.exe, , [c63fe0d387124aec8467ec61d1302bd5],
PUP.Optional.PhraseProfessor, C:\Windows\System32\drivers\ppfd_vw_1_10_0_21.sys, , [2dd8dbd8c8d1e551b73f412843c217e9],
PUP.Optional.PullUpdate, C:\ProgramData\BreakingNewsAlert\Uninstall.exe, , [976e0da6b2e7ea4cbc4d71f97392ba46],
PUP.Optional.PullUpdate, C:\ProgramData\Browser\prompt.exe, , [0bfa8b286336fa3cd145d9a9f40d04fc],
PUP.Optional.PullUpdate, C:\ProgramData\Radio\prompt.exe, , [84811d9669309f973e8a5002b74abb45],
PUP.Optional.BreakingNewsAlert, C:\ProgramData\RfiJgeK\dat\epuHzZJqcFk.exe, , [45c0fab9079290a6c7246ce1e918f30d],
PUP.Optional.BreakingNewsAlert, C:\ProgramData\RfiJgeK\dat\tePSkRcSR.exe, , [cb3aa90a5e3b62d4ecffe6670ef3d62a],
PUP.Optional.ZombieInvasion, C:\ProgramData\RfiJgeK\dat\VNNzLvSHz.dll, , [986da90a5049ab8b1fa00bf015efde22],
Adware.PullUpdate, C:\ProgramData\RfiJgeK\dat\yTBhrDD.dll, , [30d509aa732638fec748f650ff02b848],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\GuPlayer.exe, , [59ac03b087122f07a23693cfa164867a],
PUP.Optional.BreakingNewsAlert, C:\ProgramData\BreakingNewsAlert\app.dat, , [877efbb88a0f67cfd75327f7f50f1be5],
PUP.Optional.BreakingNewsAlert, C:\ProgramData\BreakingNewsAlert\BreakingNewsAlert.ico, , [877efbb88a0f67cfd75327f7f50f1be5],
PUP.Optional.BreakingNewsAlert, C:\ProgramData\BreakingNewsAlert\data.dat, , [877efbb88a0f67cfd75327f7f50f1be5],
PUP.Optional.BreakingNewsAlert, C:\Users\admin\AppData\Local\BreakingNewsAlert\data2.dat, , [976e842fcecb3afc46e5c85653b119e7],
PUP.Optional.PullUpdate, C:\ProgramData\Radio\prompt.exe.config, , [0302e8cb0198aa8c4ad8dd689371aa56],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\avcodec-54.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\avdevice-54.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\avformat-54.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\avutil-51.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\libfreetype-6.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\libpng15-15.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\postproc-52.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\SDL.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\SDL_image.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\SDL_ttf.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\swresample-0.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\swscale-2.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\Uninstaller.exe, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\zlib1.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GUPlayer\GUPlayer.lnk, , [35d0397ae0b92d09f0508a93db2837c9],
PUP.Optional.GUPlayer, C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GUPlayer\Uninstall GUPlayer.lnk, , [35d0397ae0b92d09f0508a93db2837c9],
PUP.Optional.SpeedBrowser, C:\Users\admin\AppData\Local\speed browser\User Data\Default\Local Storage\chrome-extension_igjjkeeamkpihpncmmbgdkhdnjpcfmfb_0.localstorage, , [46bf05ae5544d363f0562113bd46fc04],
PUP.Optional.PullUpdate, C:\ProgramData\RfiJgeK\dat\epuHzZJqcFk.exe.config, , [75907e352d6c261042885f1019ec4ab6],
PUP.Optional.PullUpdate, C:\ProgramData\RfiJgeK\dat\tePSkRcSR.exe.config, , [75907e352d6c261042885f1019ec4ab6],
PUP.Optional.PullUpdate, C:\ProgramData\RfiJgeK\dat\yTBhrDD.dll, , [75907e352d6c261042885f1019ec4ab6],
PUP.Optional.PullUpdate, C:\ProgramData\RfiJgeK\bIlpAWEl.dat, , [75907e352d6c261042885f1019ec4ab6],
PUP.Optional.PullUpdate, C:\ProgramData\RfiJgeK\bIlpAWEl.exe.config, , [75907e352d6c261042885f1019ec4ab6],
PUP.Optional.PullUpdate, C:\ProgramData\RfiJgeK\info.dat, , [75907e352d6c261042885f1019ec4ab6],
PUP.Optional.Yontoo, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecfcbmjnbjmamfcmhefamekeilngfjce\1.0.5889.36698_0\manifest.json, , [35d0a3100099ed490d6dea887c89a55b],
PUP.Optional.Yontoo, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecfcbmjnbjmamfcmhefamekeilngfjce\1.0.5889.36698_0\background.js, , [35d0a3100099ed490d6dea887c89a55b],
PUP.Optional.Yontoo, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecfcbmjnbjmamfcmhefamekeilngfjce\1.0.5889.36698_0\content.js, , [35d0a3100099ed490d6dea887c89a55b],
PUP.Optional.Yontoo, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecfcbmjnbjmamfcmhefamekeilngfjce\1.0.5889.36698_0\icon.png, , [35d0a3100099ed490d6dea887c89a55b],
PUP.Optional.Yontoo, C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\djg9faxv.default\prefs.js, Bon : (), Mauvais : (user_pref("browser.newtab.url", "http://searchinterneat-a.akamaihd.net/t?eq=U0EeFFhaR1oWHAZAeAANVw5EDAwUcAgVVVoQERhCdAAITAlJFw1AIw8JBQ8XERNBNARaB0tXUUEeGGlxR1dMZ1RANEpqCF4ZVQ==");), ,[28dda013fe9bd264d397c0b3b0552dd3]
PUP.Optional.Yontoo, C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\djg9faxv.default\prefs.js, Bon : (), Mauvais : (1,\"m8TMKNcGBZRtg8qju6AFjA==\":1,\"Uy3KSY/eKD6NIwiZcdjhwg==\":1}");
user_pref("browser.newtabpage.enhanced", true);
user_pref("browser.newtabpage.introShown", true);
user_pref("browse), ,[17ee714257420d29d09a1162fa0b7090]
PUP.Optional.Yontoo, C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\djg9faxv.default\prefs.js, Bon : (), Mauvais : (A==\":1,\"SD7ceaFpAm9hmnCQWXnwBw==\":1,\"TBtxPw5jP7U32omrXpx1qg==\":1,\"Ag7BrqlC1MreBui1hE2iZQ==\":1,\"eivyOB8JMx/OKG+CDZdCFw==\":1,\"L6TVcfaJWNUZZipTEVcL5w==\":1,\"4rmppQDgIOLJ71RTtGKe2g==\":), ,[e5204b681980f046b9b10271d2339a66]
PUP.Optional.Yontoo, C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\djg9faxv.default\prefs.js, Bon : (), Mauvais : (user_pref("keyword.URL", "http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQpbWQBEFwIWbQAPUQhcFVZCcBRZVQBBDAUbdgFbAg9ARQNFcB9aFQQTR0cFME0FB18EURNNfX9ZAk0Cc1xEKE0=&q={searchTerms}");), ,[a75e10a3089181b53536e588aa5b20e0]
PUP.Optional.Yontoo, C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\djg9faxv.default\prefs.js, Bon : (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Mauvais : (user_pref("browser.startup.homepage", "http://searchinterneat-a.akamaihd.net/hm?eq=U0EeCFZVBB8SRggQIwEBVA9GFBgadwkJTA0SQAUOIQ0BURRBGQMbI1oOUF1HRwUFIk0FA18DB0VXfWFoKB8fHHNCI01LM1AWSUE=");), ,[3acb5162b5e4043284e378fdc63fa55b]
PUP.Optional.Yontoo, C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\djg9faxv.default\searchplugins\default.xml, , [b84dfcb7b7e261d5824c8fe2c73e966a],
PUP.Optional.Yontoo, C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\djg9faxv.default\searchplugins\yahoo.xml, , [d82d0aa95c3d7fb75e7240310005ba46],
Secteurs physiques: 0
(Aucun élément malveillant détecté)
(end)
www.malwarebytes.org
Date de l'analyse: 25/04/2016
Heure de l'analyse: 07:24
Fichier journal: malwarebytes.txt
Administrateur: Oui
Version: 2.2.1.1043
Base de données de programmes malveillants: v2016.04.25.01
Base de données de rootkits: v2016.04.17.01
Licence: Essai
Protection contre les programmes malveillants: Activé
Protection contre les sites Web malveillants: Activé
Autoprotection: Désactivé
Système d'exploitation: Windows 10
Processeur: x64
Système de fichiers: NTFS
Utilisateur: admin
Type d'analyse: Analyse des menaces
Résultat: Terminé
Objets analysés: 408178
Temps écoulé: 28 min, 57 s
Mémoire: Activé
Démarrage: Activé
Système de fichiers: Activé
Archives: Activé
Rootkits: Désactivé
Heuristique: Activé
PUP: Activé
PUM: Activé
Processus: 1
PUP.Optional.BreakingNewsAlert, C:\ProgramData\RfiJgeK\bIlpAWEl.exe, 2924, , [c63fe0d387124aec8467ec61d1302bd5]
Modules: 0
(Aucun élément malveillant détecté)
Clés du Registre: 28
PUP.Optional.BreakingNewsAlert, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\bIlpAWEl, , [c63fe0d387124aec8467ec61d1302bd5],
PUP.Optional.PhraseProfessor, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ppfd_vw_1_10_0_21, , [2dd8dbd8c8d1e551b73f412843c217e9],
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\APPID\{1860bdd6-e56e-4269-8b99-78f8bf1ab343}, , [788dded5346587af8ccf1baa5ea4ee12],
PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{1860BDD6-E56E-4269-8B99-78F8BF1AB343}, , [788dded5346587af8ccf1baa5ea4ee12],
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{1860BDD6-E56E-4269-8B99-78F8BF1AB343}, , [788dded5346587af8ccf1baa5ea4ee12],
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\APPID\{c40e9865-cbbf-490a-9f51-697ff271d3a5}, , [39cc9f14ecad15212d3084418b774cb4],
PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{C40E9865-CBBF-490A-9F51-697FF271D3A5}, , [39cc9f14ecad15212d3084418b774cb4],
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\{C40E9865-CBBF-490A-9F51-697FF271D3A5}, , [39cc9f14ecad15212d3084418b774cb4],
PUP.Optional.WebSteroids, HKLM\SOFTWARE\CLASSES\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, , [e61f239074259a9ccc97f2fd47bbeb15],
PUP.Optional.WebSteroids, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, , [e61f239074259a9ccc97f2fd47bbeb15],
PUP.Optional.WebSteroids, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}, , [e61f239074259a9ccc97f2fd47bbeb15],
PUP.Optional.DynConIE, HKLM\SOFTWARE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, , [0df81f948e0b01354093ca1e6a98aa56],
PUP.Optional.DynConIE, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, , [0df81f948e0b01354093ca1e6a98aa56],
PUP.Optional.DynConIE, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, , [0df81f948e0b01354093ca1e6a98aa56],
PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}, , [ed18862df3a67eb8cf24349152b0e020],
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}, , [ed18862df3a67eb8cf24349152b0e020],
PUP.Optional.PullUpdate, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BreakingNewsAlert, , [976e0da6b2e7ea4cbc4d71f97392ba46],
PUP.Optional.IDSCProduct, HKLM\SOFTWARE\SpaceSoundPro, , [5baacce72a6f2511ebf0545c3fc5768a],
PUP.Optional.Yontoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, , [c73e8f249efbc5714947a2be798b0cf4],
PUP.Optional.PhraseProfessor, HKLM\SOFTWARE\WOW6432NODE\PhraseProfessor_1.10.0.21, , [7a8bd1e2b4e50d29eb673a08bb4933cd],
PUP.Optional.IDSCProduct, HKLM\SOFTWARE\WOW6432NODE\SpaceSondPro, , [c441892ae6b36bcb7e5c218fca3a7987],
PUP.Optional.PhraseProfessor, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\PhraseProfessorAutoUpdateClient_RASAPI32, , [64a13e75aaefe254df44aeb462a2ce32],
PUP.Optional.PhraseProfessor, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\PhraseProfessorAutoUpdateClient_RASMANCS, , [70956152adec80b62af92d356e9632ce],
PUP.Optional.SpeedBrowser, HKLM\SOFTWARE\WOW6432NODE\SPEEDBROWSER, , [a65f4d662574a492b398810f04007e82],
PUP.Optional.MultiIE, HKU\S-1-5-21-1365161019-1298562674-3330477929-1001\SOFTWARE\APPDATALOW\SOFTWARE\DynConIE, , [1de804afc9d08fa793615ae3a95b24dc],
PUP.Optional.Yontoo, HKU\S-1-5-21-1365161019-1298562674-3330477929-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, , [8b7a1e95ebae1e18f798c49c956f38c8],
PUP.Optional.ProductSetup, HKU\S-1-5-21-1365161019-1298562674-3330477929-1001\SOFTWARE\PRODUCTSETUP, , [34d11a9936634ee81aaf6ed631d3857b],
PUP.Optional.IDSCProduct, HKU\S-1-5-21-1365161019-1298562674-3330477929-1001\SOFTWARE\SPACESOUNDPRO, , [83825261b9e084b2447c812f5da705fb],
Valeurs du Registre: 12
PUP.Optional.Yontoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DoNotAskAgain, searchinterneat-a.akamaihd.net, , [887defc41485f73f84dd570b907435cb]
PUP.Optional.Yontoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQpbWQBEFwIWbQAPUQhcFVZCcBRZVQBBDAUbdgFbAg9ARQNFcB9aFQQTSEcFME0FCFwEURNNfX9ZAk0Cc1xEKE0=&q={searchTerms}, , [c73e8f249efbc5714947a2be798b0cf4]
PUP.Optional.IDSCProduct, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SpaceSoundPro, "C:\Program Files\SpaceSoundPro\SpaceSoundPro.exe", , [8f76357eb4e5072f8843bdf306fe3ac6]
PUP.Optional.SpeedBrowser, HKLM\SOFTWARE\WOW6432NODE\SPEEDBROWSER|homePageURL, http://www.trovi.com/?gd=&ctid=CT3334275&ISID=6CA279FD-2B95-4BDF-AE57-5565BBB09B2C&SearchSource=55&UM=8&D=073115, , [a65f4d662574a492b398810f04007e82]
PUP.Optional.SpeedBrowser, HKLM\SOFTWARE\WOW6432NODE\SPEEDBROWSER|newTabURL, http://www.trovi.com/?gd=&ctid=CT3334275&ISID=6CA279FD-2B95-4BDF-AE57-5565BBB09B2C&SearchSource=69&SSPV=EB_SSPV&Lay=1&UM=8&D=073115, , [8c795e55ff9a1f17c784a7e9a85c0ef2]
PUP.Optional.SpeedBrowser, HKLM\SOFTWARE\WOW6432NODE\SPEEDBROWSER|notfoundURL, http://www.trovi.com/corse/?gd=&ctid=CT3334275&ISID=6CA279FD-2B95-4BDF-AE57-5565BBB09B2C&SearchSource=70&SSPV=EB_SSPV&Lay=0&UM=8&fq=FQ_TERM&D=073115, , [64a17a394554f244fc4f0d833bc9ff01]
PUP.Optional.SpeedBrowser, HKLM\SOFTWARE\WOW6432NODE\SPEEDBROWSER|defaultSearchURL, http://www.trovi.com/Results.aspx?gd=&ctid=CT3334275&ISID=6CA279FD-2B95-4BDF-AE57-5565BBB09B2C&SearchSource=58&UM=8&D=073115&q=, , [24e1cee54d4c340285c6efa1ab59d42c]
PUP.Optional.Vitruvian, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ppfd_vw_1_10_0_21|ImagePath, system32\drivers\ppfd_vw_1_10_0_21.sys, , [c2431c97732672c4801a1c39c83ced13]
PUP.Optional.Yontoo, HKU\S-1-5-21-1365161019-1298562674-3330477929-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DoNotAskAgain, searchinterneat-a.akamaihd.net, , [18ed8033405939fd40649ac7d034bc44]
PUP.Optional.Yontoo, HKU\S-1-5-21-1365161019-1298562674-3330477929-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQpbWQBEFwIWbQAPUQhcFVZCcBRZVQBBDAUbdgFbAg9ARQNFcB9aFQQTSEcFME0FCFwEURNNfX9ZAk0Cc1xEKE0=&q={searchTerms}, , [8b7a1e95ebae1e18f798c49c956f38c8]
PUP.Optional.ProductSetup, HKU\S-1-5-21-1365161019-1298562674-3330477929-1001\SOFTWARE\PRODUCTSETUP|tb, 0N0U0L1F, , [34d11a9936634ee81aaf6ed631d3857b]
PUP.Optional.IDSCProduct, HKU\S-1-5-21-1365161019-1298562674-3330477929-1001\SOFTWARE\SPACESOUNDPRO|mj, 15.08.08.0, , [83825261b9e084b2447c812f5da705fb]
Données du Registre: 1
PUP.Optional.Yontoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggQIwEBVA9GFBgadwkJTA0SQAUOIQ0BURRBGQMbI1oOUF1HRwUFIk0FA1ADB0VXfVBdFElXTwhlIVpMEmsYRl1X, Bon : (www.google.com), Mauvais : (http://searchinterneat-a.akamaihd.net/h?eq=U0EeCFZVBB8SRggQIwEBVA9GFBgadwkJTA0SQAUOIQ0BURRBGQMbI1oOUF1HRwUFIk0FA1ADB0VXfVBdFElXTwhlIVpMEmsYRl1X),,[a65fe2d1b9e0270f09e057efd2336c94]
Dossiers: 17
PUP.Optional.BreakingNewsAlert, C:\ProgramData\BreakingNewsAlert, , [877efbb88a0f67cfd75327f7f50f1be5],
PUP.Optional.BreakingNewsAlert, C:\Users\admin\AppData\Local\BreakingNewsAlert, , [976e842fcecb3afc46e5c85653b119e7],
PUP.Optional.PullUpdate, C:\ProgramData\Radio, , [0302e8cb0198aa8c4ad8dd689371aa56],
PUP.Optional.BreakingNewsAlert, C:\BreakingNewsAlert, , [2bda4a698811e056976b21f163a033cd],
PUP.Optional.GamesDesktop, C:\Program Files (x86)\gmsd_fr_002030045, , [867f01b243563303b1b5a4782dd6c23e],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GUPlayer, , [35d0397ae0b92d09f0508a93db2837c9],
PUP.Optional.PhraseProfessor, C:\Program Files (x86)\PhraseProfessor_1.10.0.21, , [b74ee0d320799c9a5dbd0d18de2549b7],
PUP.Optional.PhraseProfessor, C:\Program Files (x86)\PhraseProfessor_1.10.0.21\Update, , [b74ee0d320799c9a5dbd0d18de2549b7],
PUP.Optional.SpeedBrowser, C:\Users\admin\AppData\Local\speed browser, , [46bf05ae5544d363f0562113bd46fc04],
PUP.Optional.SpeedBrowser, C:\Users\admin\AppData\Local\speed browser\User Data, , [46bf05ae5544d363f0562113bd46fc04],
PUP.Optional.SpeedBrowser, C:\Users\admin\AppData\Local\speed browser\User Data\Default, , [46bf05ae5544d363f0562113bd46fc04],
PUP.Optional.SpeedBrowser, C:\Users\admin\AppData\Local\speed browser\User Data\Default\Local Storage, , [46bf05ae5544d363f0562113bd46fc04],
PUP.Optional.PullUpdate, C:\ProgramData\RfiJgeK\dat, , [75907e352d6c261042885f1019ec4ab6],
PUP.Optional.PullUpdate, C:\ProgramData\RfiJgeK, , [75907e352d6c261042885f1019ec4ab6],
PUP.Optional.Yontoo, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecfcbmjnbjmamfcmhefamekeilngfjce\1.0.5889.36698_0, , [35d0a3100099ed490d6dea887c89a55b],
PUP.Optional.Yontoo, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecfcbmjnbjmamfcmhefamekeilngfjce, , [35d0a3100099ed490d6dea887c89a55b],
Fichiers: 49
PUP.Optional.BreakingNewsAlert, C:\ProgramData\RfiJgeK\bIlpAWEl.exe, , [c63fe0d387124aec8467ec61d1302bd5],
PUP.Optional.PhraseProfessor, C:\Windows\System32\drivers\ppfd_vw_1_10_0_21.sys, , [2dd8dbd8c8d1e551b73f412843c217e9],
PUP.Optional.PullUpdate, C:\ProgramData\BreakingNewsAlert\Uninstall.exe, , [976e0da6b2e7ea4cbc4d71f97392ba46],
PUP.Optional.PullUpdate, C:\ProgramData\Browser\prompt.exe, , [0bfa8b286336fa3cd145d9a9f40d04fc],
PUP.Optional.PullUpdate, C:\ProgramData\Radio\prompt.exe, , [84811d9669309f973e8a5002b74abb45],
PUP.Optional.BreakingNewsAlert, C:\ProgramData\RfiJgeK\dat\epuHzZJqcFk.exe, , [45c0fab9079290a6c7246ce1e918f30d],
PUP.Optional.BreakingNewsAlert, C:\ProgramData\RfiJgeK\dat\tePSkRcSR.exe, , [cb3aa90a5e3b62d4ecffe6670ef3d62a],
PUP.Optional.ZombieInvasion, C:\ProgramData\RfiJgeK\dat\VNNzLvSHz.dll, , [986da90a5049ab8b1fa00bf015efde22],
Adware.PullUpdate, C:\ProgramData\RfiJgeK\dat\yTBhrDD.dll, , [30d509aa732638fec748f650ff02b848],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\GuPlayer.exe, , [59ac03b087122f07a23693cfa164867a],
PUP.Optional.BreakingNewsAlert, C:\ProgramData\BreakingNewsAlert\app.dat, , [877efbb88a0f67cfd75327f7f50f1be5],
PUP.Optional.BreakingNewsAlert, C:\ProgramData\BreakingNewsAlert\BreakingNewsAlert.ico, , [877efbb88a0f67cfd75327f7f50f1be5],
PUP.Optional.BreakingNewsAlert, C:\ProgramData\BreakingNewsAlert\data.dat, , [877efbb88a0f67cfd75327f7f50f1be5],
PUP.Optional.BreakingNewsAlert, C:\Users\admin\AppData\Local\BreakingNewsAlert\data2.dat, , [976e842fcecb3afc46e5c85653b119e7],
PUP.Optional.PullUpdate, C:\ProgramData\Radio\prompt.exe.config, , [0302e8cb0198aa8c4ad8dd689371aa56],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\avcodec-54.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\avdevice-54.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\avformat-54.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\avutil-51.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\libfreetype-6.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\libpng15-15.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\postproc-52.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\SDL.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\SDL_image.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\SDL_ttf.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\swresample-0.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\swscale-2.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\Uninstaller.exe, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Program Files (x86)\GUPlayer\zlib1.dll, , [2fd691229ffac0769aa4aa73857e7090],
PUP.Optional.GUPlayer, C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GUPlayer\GUPlayer.lnk, , [35d0397ae0b92d09f0508a93db2837c9],
PUP.Optional.GUPlayer, C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GUPlayer\Uninstall GUPlayer.lnk, , [35d0397ae0b92d09f0508a93db2837c9],
PUP.Optional.SpeedBrowser, C:\Users\admin\AppData\Local\speed browser\User Data\Default\Local Storage\chrome-extension_igjjkeeamkpihpncmmbgdkhdnjpcfmfb_0.localstorage, , [46bf05ae5544d363f0562113bd46fc04],
PUP.Optional.PullUpdate, C:\ProgramData\RfiJgeK\dat\epuHzZJqcFk.exe.config, , [75907e352d6c261042885f1019ec4ab6],
PUP.Optional.PullUpdate, C:\ProgramData\RfiJgeK\dat\tePSkRcSR.exe.config, , [75907e352d6c261042885f1019ec4ab6],
PUP.Optional.PullUpdate, C:\ProgramData\RfiJgeK\dat\yTBhrDD.dll, , [75907e352d6c261042885f1019ec4ab6],
PUP.Optional.PullUpdate, C:\ProgramData\RfiJgeK\bIlpAWEl.dat, , [75907e352d6c261042885f1019ec4ab6],
PUP.Optional.PullUpdate, C:\ProgramData\RfiJgeK\bIlpAWEl.exe.config, , [75907e352d6c261042885f1019ec4ab6],
PUP.Optional.PullUpdate, C:\ProgramData\RfiJgeK\info.dat, , [75907e352d6c261042885f1019ec4ab6],
PUP.Optional.Yontoo, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecfcbmjnbjmamfcmhefamekeilngfjce\1.0.5889.36698_0\manifest.json, , [35d0a3100099ed490d6dea887c89a55b],
PUP.Optional.Yontoo, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecfcbmjnbjmamfcmhefamekeilngfjce\1.0.5889.36698_0\background.js, , [35d0a3100099ed490d6dea887c89a55b],
PUP.Optional.Yontoo, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecfcbmjnbjmamfcmhefamekeilngfjce\1.0.5889.36698_0\content.js, , [35d0a3100099ed490d6dea887c89a55b],
PUP.Optional.Yontoo, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecfcbmjnbjmamfcmhefamekeilngfjce\1.0.5889.36698_0\icon.png, , [35d0a3100099ed490d6dea887c89a55b],
PUP.Optional.Yontoo, C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\djg9faxv.default\prefs.js, Bon : (), Mauvais : (user_pref("browser.newtab.url", "http://searchinterneat-a.akamaihd.net/t?eq=U0EeFFhaR1oWHAZAeAANVw5EDAwUcAgVVVoQERhCdAAITAlJFw1AIw8JBQ8XERNBNARaB0tXUUEeGGlxR1dMZ1RANEpqCF4ZVQ==");), ,[28dda013fe9bd264d397c0b3b0552dd3]
PUP.Optional.Yontoo, C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\djg9faxv.default\prefs.js, Bon : (), Mauvais : (1,\"m8TMKNcGBZRtg8qju6AFjA==\":1,\"Uy3KSY/eKD6NIwiZcdjhwg==\":1}");
user_pref("browser.newtabpage.enhanced", true);
user_pref("browser.newtabpage.introShown", true);
user_pref("browse), ,[17ee714257420d29d09a1162fa0b7090]
PUP.Optional.Yontoo, C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\djg9faxv.default\prefs.js, Bon : (), Mauvais : (A==\":1,\"SD7ceaFpAm9hmnCQWXnwBw==\":1,\"TBtxPw5jP7U32omrXpx1qg==\":1,\"Ag7BrqlC1MreBui1hE2iZQ==\":1,\"eivyOB8JMx/OKG+CDZdCFw==\":1,\"L6TVcfaJWNUZZipTEVcL5w==\":1,\"4rmppQDgIOLJ71RTtGKe2g==\":), ,[e5204b681980f046b9b10271d2339a66]
PUP.Optional.Yontoo, C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\djg9faxv.default\prefs.js, Bon : (), Mauvais : (user_pref("keyword.URL", "http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQpbWQBEFwIWbQAPUQhcFVZCcBRZVQBBDAUbdgFbAg9ARQNFcB9aFQQTR0cFME0FB18EURNNfX9ZAk0Cc1xEKE0=&q={searchTerms}");), ,[a75e10a3089181b53536e588aa5b20e0]
PUP.Optional.Yontoo, C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\djg9faxv.default\prefs.js, Bon : (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Mauvais : (user_pref("browser.startup.homepage", "http://searchinterneat-a.akamaihd.net/hm?eq=U0EeCFZVBB8SRggQIwEBVA9GFBgadwkJTA0SQAUOIQ0BURRBGQMbI1oOUF1HRwUFIk0FA18DB0VXfWFoKB8fHHNCI01LM1AWSUE=");), ,[3acb5162b5e4043284e378fdc63fa55b]
PUP.Optional.Yontoo, C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\djg9faxv.default\searchplugins\default.xml, , [b84dfcb7b7e261d5824c8fe2c73e966a],
PUP.Optional.Yontoo, C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\djg9faxv.default\searchplugins\yahoo.xml, , [d82d0aa95c3d7fb75e7240310005ba46],
Secteurs physiques: 0
(Aucun élément malveillant détecté)
(end)