Publicité
Publicité
Format du document : text/plain
Prévisualisation
Malwarebytes Anti-Malware
www.malwarebytes.org
Date de l'analyse: 28/07/2016
Heure de l'analyse: 16:48
Fichier journal: rapport malwarbytes.txt
Administrateur: Oui
Version: 2.2.1.1043
Base de données de programmes malveillants: v2016.02.16.06
Base de données de rootkits: v2016.02.08.01
Licence: Gratuit
Protection contre les programmes malveillants: Désactivé
Protection contre les sites Web malveillants: Désactivé
Autoprotection: Désactivé
Système d'exploitation: Windows 10
Processeur: x64
Système de fichiers: NTFS
Utilisateur: Lea
Type d'analyse: Analyse des menaces
Résultat: Terminé
Objets analysés: 470851
Temps écoulé: 38 min, 45 s
Mémoire: Activé
Démarrage: Activé
Système de fichiers: Activé
Archives: Activé
Rootkits: Désactivé
Heuristique: Activé
PUP: Activé
PUM: Activé
Processus: 0
(Aucun élément malveillant détecté)
Modules: 0
(Aucun élément malveillant détecté)
Clés du Registre: 29
PUP.Optional.VBates, HKLM\SOFTWARE\CLASSES\CLSID\{08ACFB57-8187-47f0-AF93-56360D03634A}, En quarantaine, [8fd7a8b93762b77f2b8aedbde41e9070],
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\LAYERS\SPVC32LDR, En quarantaine, [f6707fe252477abc1f0841c925df867a],
PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}, En quarantaine, [53131b461c7d6dc98793de6f1ce87e82],
PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{cf2797aa-b7ec-e311-8ed9-005056c00008}, En quarantaine, [3c2aa4bdcecb0531ee2dada0bd476799],
PUP.Optional.MovieDea, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\MovieDea, En quarantaine, [1e48e97808915fd71660d321e320c937],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{4abaf598}, En quarantaine, [40268cd5fd9c01352fa7be36887bbb45],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{cae99edb}, En quarantaine, [4c1a70f13d5c85b18650b24242c1cf31],
PUP.Optional.Yontoo, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\Update Edu App, En quarantaine, [71f566fb2e6b0c2a709b0c430afa659b],
PUP.Optional.Yontoo, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\Util Edu App, En quarantaine, [60064e13eeabd36315f637183aca3bc5],
PUP.Optional.WinZipMalwareProtector, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WinZip Malware Protector, En quarantaine, [eb7b90d1afea1c1a8d54064e45bfb24e],
PUP.Optional.Shopperz.BrwsrFlsh, HKU\.DEFAULT\SOFTWARE\MICROSOFT\INTERNET EXPLORER\INTERNETREGISTRY\REGISTRY\USER\S-1-5-18\SOFTWARE\shopperz04082015, En quarantaine, [4323c69ba1f8e15540f5fc57778d36ca],
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-18\SOFTWARE\{599BDCE5-E3A1-4B2A-83A7-DDAFA1C42D9C}, En quarantaine, [6bfbf66bbadf92a4b7315d70a55e20e0],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{161C5881-1F78-40B3-A450-A65275F51FDA}, En quarantaine, [283e0c555742c86ed378ebf3c53e43bd],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1A4A1F7D-4B5B-48C5-8B38-F620A226219B}, En quarantaine, [3d29431e39603204a6a42fafb74c3ec2],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{558A5995-8C73-4433-A480-D4A3EFB147DD}, En quarantaine, [184e5a07adec53e3b99121bd4ab9b050],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6A54B21C-6566-476F-83D4-76706CE3B494}, En quarantaine, [93d3e47db2e768ce3a10697551b25ea2],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6BFD8F74-23B0-452B-981F-C4CB98EAD770}, En quarantaine, [e680431eb6e35dd91a30736b2fd4c33d],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{895B81D1-FAE0-4A4F-9AFD-119BB07BB443}, En quarantaine, [c5a166fba6f3191dc58524bad3307c84],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8F2E6B74-CBD1-4EB4-A263-B4D9B388D22F}, En quarantaine, [4323e18020792313a3a816c8847fba46],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A06CED1D-BD45-4629-8095-73D9E685F9A4}, En quarantaine, [9fc7332ee7b239fd73d8647aa55e31cf],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BCBDB86E-E81D-42F2-AD9E-E730FC9CAB86}, En quarantaine, [6ff7f968514881b512393da18e75718f],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BEFA1304-67FB-41A8-96E8-6ECC3FCC13DB}, En quarantaine, [86e07de4603996a094b6a43ae81bba46],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C011D42E-725E-4220-BC43-21C92EB366CD}, En quarantaine, [9fc73c258b0ece68e961a6386e95cb35],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C8FDEF3F-40B8-4FCB-B29F-6AAC5DC13DB6}, En quarantaine, [3036115039600f2793b737a73fc4b24e],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CBAC3E87-489B-4F7D-8557-5A4DDD8DB1AB}, En quarantaine, [7ee8d68bcecb241262e95d8144bf6898],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E048E429-7F6A-458D-ACC6-E0FF179EA310}, En quarantaine, [d98d99c84554e15579d1409e966d619f],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EB40344F-3147-473D-9AF5-E916DA561248}, En quarantaine, [471fda872e6b7fb76edc09d58c77b54b],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F5D06A4D-BC61-4224-A4C7-6B14F12F6271}, En quarantaine, [c99d0c55aced73c39ab12ab4877ce917],
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\{599BDCE5-E3A1-4B2A-83A7-DDAFA1C42D9C}, En quarantaine, [5c0a4a17990058de76722aa3bc47966a],
Valeurs du Registre: 23
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\chrome.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130575815366695844, En quarantaine, [570f7ae79cfd8fa7f333cc3e8d7746ba]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\explorer.xxx|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130575815366695844, En quarantaine, [c89e0859f6a30c2a9690a86214f0b34d]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\firefox.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130575815366695844, En quarantaine, [9ec86cf5a3f6171f4dd9ea20c63eb749]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\iexplore.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130575815366695844, En quarantaine, [00666cf56f2a63d32df9af5b3fc5847c]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\LAYERS\SPVC32Ldr|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130575815366695844, En quarantaine, [f6707fe252477abc1f0841c925df867a]
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-18\SOFTWARE\{599bdce5-e3a1-4b2a-83a7-ddafa1c42d9c}|Name, C:\Program Files\shopperz04082015\Sfval.exe, En quarantaine, [6bfbf66bbadf92a4b7315d70a55e20e0]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{161C5881-1F78-40B3-A450-A65275F51FDA}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-codedownloader.exe, En quarantaine, [283e0c555742c86ed378ebf3c53e43bd]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1A4A1F7D-4B5B-48C5-8B38-F620A226219B}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [3d29431e39603204a6a42fafb74c3ec2]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{558A5995-8C73-4433-A480-D4A3EFB147DD}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [184e5a07adec53e3b99121bd4ab9b050]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6A54B21C-6566-476F-83D4-76706CE3B494}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [93d3e47db2e768ce3a10697551b25ea2]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6BFD8F74-23B0-452B-981F-C4CB98EAD770}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [e680431eb6e35dd91a30736b2fd4c33d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{895B81D1-FAE0-4A4F-9AFD-119BB07BB443}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [c5a166fba6f3191dc58524bad3307c84]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8F2E6B74-CBD1-4EB4-A263-B4D9B388D22F}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-codedownloader.exe, En quarantaine, [4323e18020792313a3a816c8847fba46]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A06CED1D-BD45-4629-8095-73D9E685F9A4}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-codedownloader.exe, En quarantaine, [9fc7332ee7b239fd73d8647aa55e31cf]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BCBDB86E-E81D-42F2-AD9E-E730FC9CAB86}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-codedownloader.exe, En quarantaine, [6ff7f968514881b512393da18e75718f]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BEFA1304-67FB-41A8-96E8-6ECC3FCC13DB}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [86e07de4603996a094b6a43ae81bba46]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C011D42E-725E-4220-BC43-21C92EB366CD}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [9fc73c258b0ece68e961a6386e95cb35]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C8FDEF3F-40B8-4FCB-B29F-6AAC5DC13DB6}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [3036115039600f2793b737a73fc4b24e]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CBAC3E87-489B-4F7D-8557-5A4DDD8DB1AB}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-codedownloader.exe, En quarantaine, [7ee8d68bcecb241262e95d8144bf6898]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E048E429-7F6A-458D-ACC6-E0FF179EA310}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [d98d99c84554e15579d1409e966d619f]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EB40344F-3147-473D-9AF5-E916DA561248}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [471fda872e6b7fb76edc09d58c77b54b]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F5D06A4D-BC61-4224-A4C7-6B14F12F6271}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-codedownloader.exe, En quarantaine, [c99d0c55aced73c39ab12ab4877ce917]
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\{599bdce5-e3a1-4b2a-83a7-ddafa1c42d9c}|Name, C:\Program Files\shopperz04082015\Sfval.exe, En quarantaine, [5c0a4a17990058de76722aa3bc47966a]
Données du Registre: 1
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{b3e83ade-ee2d-4fee-9cf1-e664cf64b639}|NameServer, 52.18.92.32,8.8.8.8, Bon : (), Mauvais : (52.18.92.32,8.8.8.8),Remplacé,[0d5965fc8b0e44f2d83c9556cb399f61]
Dossiers: 4
PUP.Optional.VBates, C:\Users\Lea\AppData\LocalLow\Company\Product\1.0, En quarantaine, [b3b38ed3920786b0baa24ad1fb09758b],
PUP.Optional.VBates, C:\Users\Lea\AppData\LocalLow\Company\Product, En quarantaine, [b3b38ed3920786b0baa24ad1fb09758b],
PUP.Optional.PullUpdate, C:\ProgramData\ZAvCKfPBeQ\dat, En quarantaine, [fc6a8cd5dabfbd79e90f19f832d3619f],
PUP.Optional.PullUpdate, C:\ProgramData\ZAvCKfPBeQ, En quarantaine, [fc6a8cd5dabfbd79e90f19f832d3619f],
Fichiers: 19
PUP.Optional.Cherimoya, C:\Users\Lea\AppData\Roaming\ZHP\Quarantine\bsdriver.sys, En quarantaine, [075fbda45247ed4997d7ce3dd1346997],
PUP.Optional.Cherimoya, C:\Users\Lea\AppData\Roaming\ZHP\Quarantine\cherimoya.sys, En quarantaine, [224420414752ca6c303e2cdf07feeb15],
PUP.Optional.AnyProtect, C:\Users\Lea\AppData\Roaming\ZHP\Quarantine\nss4FDA.tmp, En quarantaine, [3a2c590884158caacd8e4de9e41ed729],
PUP.Optional.Perion, C:\Users\Lea\AppData\Roaming\ZHP\Quarantine\shopperz04082015\Hcehp64.dll, En quarantaine, [fb6bef729405d85e26c7ff33857c7b85],
PUP.Optional.Perion, C:\Users\Lea\AppData\Roaming\ZHP\Quarantine\shopperz04082015\csrcc.exe, En quarantaine, [adb9de83267368ced1f477bb877a3bc5],
PUP.Optional.Perion, C:\Users\Lea\AppData\Roaming\ZHP\Quarantine\shopperz04082015\Hcehp.dll, En quarantaine, [de88d48df7a240f6923435fd37ca0ef2],
PUP.Optional.Komodia, C:\Users\Lea\AppData\Roaming\ZHP\Quarantine\shopperz04082015\mimhapoho.exe, En quarantaine, [ec7aec758c0d44f2f40777b752af758b],
PUP.Optional.Winsock.WnskRST, C:\Users\Lea\AppData\Roaming\ZHP\Quarantine\shopperz04082015\Peakoar.dll, En quarantaine, [c2a4124fc3d647efa4cdf3755ba6e61a],
Rootkit.Komodia.PUA, C:\Windows\System32\drivers\bsdriver.sys, Supprimer au redémarrage, [da8ccf92b2e76ccaa8dba6151be60af6],
PUP.Optional.Boxore.WnskRST, C:\Windows\Installer\aa0cf16.msi, En quarantaine, [5e0899c86e2b03332aa5c04833d2ac54],
PUP.Optional.WebInstr, C:\Windows\System32\drivers\Msft_Kernel_webinstrNew_01009.Wdf, En quarantaine, [f3732140e9b085b13a919677818313ed],
PUP.Optional.VBates, C:\Users\Lea\AppData\LocalLow\Company\Product\1.0\localStorageIE.txt, En quarantaine, [b3b38ed3920786b0baa24ad1fb09758b],
PUP.Optional.VBates, C:\Users\Lea\AppData\LocalLow\Company\Product\1.0\localStorageIE_backup.txt, En quarantaine, [b3b38ed3920786b0baa24ad1fb09758b],
PUP.Optional.PullUpdate, C:\ProgramData\ZAvCKfPBeQ\dat\nwxiunLL.exe.config, En quarantaine, [fc6a8cd5dabfbd79e90f19f832d3619f],
PUP.Optional.PullUpdate, C:\ProgramData\ZAvCKfPBeQ\dat\XvbJxnO.exe.config, En quarantaine, [fc6a8cd5dabfbd79e90f19f832d3619f],
PUP.Optional.PullUpdate, C:\ProgramData\ZAvCKfPBeQ\info.dat, En quarantaine, [fc6a8cd5dabfbd79e90f19f832d3619f],
PUP.Optional.PullUpdate, C:\ProgramData\ZAvCKfPBeQ\KranpVkkHm.dat, En quarantaine, [fc6a8cd5dabfbd79e90f19f832d3619f],
PUP.Optional.PullUpdate, C:\ProgramData\ZAvCKfPBeQ\KranpVkkHm.exe.config, En quarantaine, [fc6a8cd5dabfbd79e90f19f832d3619f],
PUP.Optional.HijackHosts.Gen, C:\Windows\System32\uva\mis\hukjy.dat, En quarantaine, [83e3c39e3a5f7eb870566ba47b8a4ab6],
Secteurs physiques: 0
(Aucun élément malveillant détecté)
(end)
www.malwarebytes.org
Date de l'analyse: 28/07/2016
Heure de l'analyse: 16:48
Fichier journal: rapport malwarbytes.txt
Administrateur: Oui
Version: 2.2.1.1043
Base de données de programmes malveillants: v2016.02.16.06
Base de données de rootkits: v2016.02.08.01
Licence: Gratuit
Protection contre les programmes malveillants: Désactivé
Protection contre les sites Web malveillants: Désactivé
Autoprotection: Désactivé
Système d'exploitation: Windows 10
Processeur: x64
Système de fichiers: NTFS
Utilisateur: Lea
Type d'analyse: Analyse des menaces
Résultat: Terminé
Objets analysés: 470851
Temps écoulé: 38 min, 45 s
Mémoire: Activé
Démarrage: Activé
Système de fichiers: Activé
Archives: Activé
Rootkits: Désactivé
Heuristique: Activé
PUP: Activé
PUM: Activé
Processus: 0
(Aucun élément malveillant détecté)
Modules: 0
(Aucun élément malveillant détecté)
Clés du Registre: 29
PUP.Optional.VBates, HKLM\SOFTWARE\CLASSES\CLSID\{08ACFB57-8187-47f0-AF93-56360D03634A}, En quarantaine, [8fd7a8b93762b77f2b8aedbde41e9070],
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\LAYERS\SPVC32LDR, En quarantaine, [f6707fe252477abc1f0841c925df867a],
PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}, En quarantaine, [53131b461c7d6dc98793de6f1ce87e82],
PUP.Optional.SearchProtect.AppFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{cf2797aa-b7ec-e311-8ed9-005056c00008}, En quarantaine, [3c2aa4bdcecb0531ee2dada0bd476799],
PUP.Optional.MovieDea, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\MovieDea, En quarantaine, [1e48e97808915fd71660d321e320c937],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{4abaf598}, En quarantaine, [40268cd5fd9c01352fa7be36887bbb45],
PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{1146AC44-2F03-4431-B4FD-889BC837521F}{cae99edb}, En quarantaine, [4c1a70f13d5c85b18650b24242c1cf31],
PUP.Optional.Yontoo, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\Update Edu App, En quarantaine, [71f566fb2e6b0c2a709b0c430afa659b],
PUP.Optional.Yontoo, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\Util Edu App, En quarantaine, [60064e13eeabd36315f637183aca3bc5],
PUP.Optional.WinZipMalwareProtector, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WinZip Malware Protector, En quarantaine, [eb7b90d1afea1c1a8d54064e45bfb24e],
PUP.Optional.Shopperz.BrwsrFlsh, HKU\.DEFAULT\SOFTWARE\MICROSOFT\INTERNET EXPLORER\INTERNETREGISTRY\REGISTRY\USER\S-1-5-18\SOFTWARE\shopperz04082015, En quarantaine, [4323c69ba1f8e15540f5fc57778d36ca],
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-18\SOFTWARE\{599BDCE5-E3A1-4B2A-83A7-DDAFA1C42D9C}, En quarantaine, [6bfbf66bbadf92a4b7315d70a55e20e0],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{161C5881-1F78-40B3-A450-A65275F51FDA}, En quarantaine, [283e0c555742c86ed378ebf3c53e43bd],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1A4A1F7D-4B5B-48C5-8B38-F620A226219B}, En quarantaine, [3d29431e39603204a6a42fafb74c3ec2],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{558A5995-8C73-4433-A480-D4A3EFB147DD}, En quarantaine, [184e5a07adec53e3b99121bd4ab9b050],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6A54B21C-6566-476F-83D4-76706CE3B494}, En quarantaine, [93d3e47db2e768ce3a10697551b25ea2],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6BFD8F74-23B0-452B-981F-C4CB98EAD770}, En quarantaine, [e680431eb6e35dd91a30736b2fd4c33d],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{895B81D1-FAE0-4A4F-9AFD-119BB07BB443}, En quarantaine, [c5a166fba6f3191dc58524bad3307c84],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8F2E6B74-CBD1-4EB4-A263-B4D9B388D22F}, En quarantaine, [4323e18020792313a3a816c8847fba46],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A06CED1D-BD45-4629-8095-73D9E685F9A4}, En quarantaine, [9fc7332ee7b239fd73d8647aa55e31cf],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BCBDB86E-E81D-42F2-AD9E-E730FC9CAB86}, En quarantaine, [6ff7f968514881b512393da18e75718f],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BEFA1304-67FB-41A8-96E8-6ECC3FCC13DB}, En quarantaine, [86e07de4603996a094b6a43ae81bba46],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C011D42E-725E-4220-BC43-21C92EB366CD}, En quarantaine, [9fc73c258b0ece68e961a6386e95cb35],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C8FDEF3F-40B8-4FCB-B29F-6AAC5DC13DB6}, En quarantaine, [3036115039600f2793b737a73fc4b24e],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CBAC3E87-489B-4F7D-8557-5A4DDD8DB1AB}, En quarantaine, [7ee8d68bcecb241262e95d8144bf6898],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E048E429-7F6A-458D-ACC6-E0FF179EA310}, En quarantaine, [d98d99c84554e15579d1409e966d619f],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EB40344F-3147-473D-9AF5-E916DA561248}, En quarantaine, [471fda872e6b7fb76edc09d58c77b54b],
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F5D06A4D-BC61-4224-A4C7-6B14F12F6271}, En quarantaine, [c99d0c55aced73c39ab12ab4877ce917],
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\{599BDCE5-E3A1-4B2A-83A7-DDAFA1C42D9C}, En quarantaine, [5c0a4a17990058de76722aa3bc47966a],
Valeurs du Registre: 23
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\chrome.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130575815366695844, En quarantaine, [570f7ae79cfd8fa7f333cc3e8d7746ba]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\explorer.xxx|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130575815366695844, En quarantaine, [c89e0859f6a30c2a9690a86214f0b34d]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\firefox.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130575815366695844, En quarantaine, [9ec86cf5a3f6171f4dd9ea20c63eb749]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\iexplore.exe|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130575815366695844, En quarantaine, [00666cf56f2a63d32df9af5b3fc5847c]
PUP.Optional.Trovi, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\CUSTOM\LAYERS\SPVC32Ldr|{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb, 130575815366695844, En quarantaine, [f6707fe252477abc1f0841c925df867a]
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-18\SOFTWARE\{599bdce5-e3a1-4b2a-83a7-ddafa1c42d9c}|Name, C:\Program Files\shopperz04082015\Sfval.exe, En quarantaine, [6bfbf66bbadf92a4b7315d70a55e20e0]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{161C5881-1F78-40B3-A450-A65275F51FDA}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-codedownloader.exe, En quarantaine, [283e0c555742c86ed378ebf3c53e43bd]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1A4A1F7D-4B5B-48C5-8B38-F620A226219B}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [3d29431e39603204a6a42fafb74c3ec2]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{558A5995-8C73-4433-A480-D4A3EFB147DD}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [184e5a07adec53e3b99121bd4ab9b050]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6A54B21C-6566-476F-83D4-76706CE3B494}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [93d3e47db2e768ce3a10697551b25ea2]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6BFD8F74-23B0-452B-981F-C4CB98EAD770}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [e680431eb6e35dd91a30736b2fd4c33d]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{895B81D1-FAE0-4A4F-9AFD-119BB07BB443}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [c5a166fba6f3191dc58524bad3307c84]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8F2E6B74-CBD1-4EB4-A263-B4D9B388D22F}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-codedownloader.exe, En quarantaine, [4323e18020792313a3a816c8847fba46]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{A06CED1D-BD45-4629-8095-73D9E685F9A4}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-codedownloader.exe, En quarantaine, [9fc7332ee7b239fd73d8647aa55e31cf]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BCBDB86E-E81D-42F2-AD9E-E730FC9CAB86}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-codedownloader.exe, En quarantaine, [6ff7f968514881b512393da18e75718f]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BEFA1304-67FB-41A8-96E8-6ECC3FCC13DB}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [86e07de4603996a094b6a43ae81bba46]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C011D42E-725E-4220-BC43-21C92EB366CD}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [9fc73c258b0ece68e961a6386e95cb35]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C8FDEF3F-40B8-4FCB-B29F-6AAC5DC13DB6}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [3036115039600f2793b737a73fc4b24e]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CBAC3E87-489B-4F7D-8557-5A4DDD8DB1AB}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-codedownloader.exe, En quarantaine, [7ee8d68bcecb241262e95d8144bf6898]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E048E429-7F6A-458D-ACC6-E0FF179EA310}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [d98d99c84554e15579d1409e966d619f]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{EB40344F-3147-473D-9AF5-E916DA561248}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-buttonutil.exe, En quarantaine, [471fda872e6b7fb76edc09d58c77b54b]
PUP.Optional.CrossRider, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{F5D06A4D-BC61-4224-A4C7-6B14F12F6271}|AppName, 1cb02359-33f5-4cde-bed9-bee8193b72ed-2.exe-codedownloader.exe, En quarantaine, [c99d0c55aced73c39ab12ab4877ce917]
PUP.Optional.Shopperz.BrwsrFlsh, HKU\S-1-5-21-1759209700-2904807195-3043021573-1001\SOFTWARE\{599bdce5-e3a1-4b2a-83a7-ddafa1c42d9c}|Name, C:\Program Files\shopperz04082015\Sfval.exe, En quarantaine, [5c0a4a17990058de76722aa3bc47966a]
Données du Registre: 1
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{b3e83ade-ee2d-4fee-9cf1-e664cf64b639}|NameServer, 52.18.92.32,8.8.8.8, Bon : (), Mauvais : (52.18.92.32,8.8.8.8),Remplacé,[0d5965fc8b0e44f2d83c9556cb399f61]
Dossiers: 4
PUP.Optional.VBates, C:\Users\Lea\AppData\LocalLow\Company\Product\1.0, En quarantaine, [b3b38ed3920786b0baa24ad1fb09758b],
PUP.Optional.VBates, C:\Users\Lea\AppData\LocalLow\Company\Product, En quarantaine, [b3b38ed3920786b0baa24ad1fb09758b],
PUP.Optional.PullUpdate, C:\ProgramData\ZAvCKfPBeQ\dat, En quarantaine, [fc6a8cd5dabfbd79e90f19f832d3619f],
PUP.Optional.PullUpdate, C:\ProgramData\ZAvCKfPBeQ, En quarantaine, [fc6a8cd5dabfbd79e90f19f832d3619f],
Fichiers: 19
PUP.Optional.Cherimoya, C:\Users\Lea\AppData\Roaming\ZHP\Quarantine\bsdriver.sys, En quarantaine, [075fbda45247ed4997d7ce3dd1346997],
PUP.Optional.Cherimoya, C:\Users\Lea\AppData\Roaming\ZHP\Quarantine\cherimoya.sys, En quarantaine, [224420414752ca6c303e2cdf07feeb15],
PUP.Optional.AnyProtect, C:\Users\Lea\AppData\Roaming\ZHP\Quarantine\nss4FDA.tmp, En quarantaine, [3a2c590884158caacd8e4de9e41ed729],
PUP.Optional.Perion, C:\Users\Lea\AppData\Roaming\ZHP\Quarantine\shopperz04082015\Hcehp64.dll, En quarantaine, [fb6bef729405d85e26c7ff33857c7b85],
PUP.Optional.Perion, C:\Users\Lea\AppData\Roaming\ZHP\Quarantine\shopperz04082015\csrcc.exe, En quarantaine, [adb9de83267368ced1f477bb877a3bc5],
PUP.Optional.Perion, C:\Users\Lea\AppData\Roaming\ZHP\Quarantine\shopperz04082015\Hcehp.dll, En quarantaine, [de88d48df7a240f6923435fd37ca0ef2],
PUP.Optional.Komodia, C:\Users\Lea\AppData\Roaming\ZHP\Quarantine\shopperz04082015\mimhapoho.exe, En quarantaine, [ec7aec758c0d44f2f40777b752af758b],
PUP.Optional.Winsock.WnskRST, C:\Users\Lea\AppData\Roaming\ZHP\Quarantine\shopperz04082015\Peakoar.dll, En quarantaine, [c2a4124fc3d647efa4cdf3755ba6e61a],
Rootkit.Komodia.PUA, C:\Windows\System32\drivers\bsdriver.sys, Supprimer au redémarrage, [da8ccf92b2e76ccaa8dba6151be60af6],
PUP.Optional.Boxore.WnskRST, C:\Windows\Installer\aa0cf16.msi, En quarantaine, [5e0899c86e2b03332aa5c04833d2ac54],
PUP.Optional.WebInstr, C:\Windows\System32\drivers\Msft_Kernel_webinstrNew_01009.Wdf, En quarantaine, [f3732140e9b085b13a919677818313ed],
PUP.Optional.VBates, C:\Users\Lea\AppData\LocalLow\Company\Product\1.0\localStorageIE.txt, En quarantaine, [b3b38ed3920786b0baa24ad1fb09758b],
PUP.Optional.VBates, C:\Users\Lea\AppData\LocalLow\Company\Product\1.0\localStorageIE_backup.txt, En quarantaine, [b3b38ed3920786b0baa24ad1fb09758b],
PUP.Optional.PullUpdate, C:\ProgramData\ZAvCKfPBeQ\dat\nwxiunLL.exe.config, En quarantaine, [fc6a8cd5dabfbd79e90f19f832d3619f],
PUP.Optional.PullUpdate, C:\ProgramData\ZAvCKfPBeQ\dat\XvbJxnO.exe.config, En quarantaine, [fc6a8cd5dabfbd79e90f19f832d3619f],
PUP.Optional.PullUpdate, C:\ProgramData\ZAvCKfPBeQ\info.dat, En quarantaine, [fc6a8cd5dabfbd79e90f19f832d3619f],
PUP.Optional.PullUpdate, C:\ProgramData\ZAvCKfPBeQ\KranpVkkHm.dat, En quarantaine, [fc6a8cd5dabfbd79e90f19f832d3619f],
PUP.Optional.PullUpdate, C:\ProgramData\ZAvCKfPBeQ\KranpVkkHm.exe.config, En quarantaine, [fc6a8cd5dabfbd79e90f19f832d3619f],
PUP.Optional.HijackHosts.Gen, C:\Windows\System32\uva\mis\hukjy.dat, En quarantaine, [83e3c39e3a5f7eb870566ba47b8a4ab6],
Secteurs physiques: 0
(Aucun élément malveillant détecté)
(end)