Malwarebytes
www.malwarebytes.com

-Détails du journal-
Date de l'analyse: 02/03/2017
Heure de l'analyse: 23:29
Fichier journal: MBAM.txt
Administrateur: Oui

-Informations du logiciel-
Version: 3.0.6.1469
Version de composants: 1.0.75
Version de pack de mise à jour: 1.0.1408
Licence: Gratuit

-Informations système-
Système d'exploitation: Windows 8.1
Processeur: x64
Système de fichiers: NTFS
Utilisateur: Lysanova\Lisa

-Résumé de l'analyse-
Type d'analyse: Analyse des menaces
Résultat: Terminé
Objets analysés: 455274
Temps écoulé: 31 min, 34 s

-Options d'analyse-
Mémoire: Activé
Démarrage: Activé
Système de fichiers: Activé
Archives: Activé
Rootkits: Activé
Heuristique: Activé
PUP: Activé
PUM: Activé

-Détails de l'analyse-
Processus: 0
(Aucun élément malveillant détecté)

Module: 0
(Aucun élément malveillant détecté)

Clé du registre: 12
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\TYPELIB\{63C4AC80-F164-466B-85E8-B444B02D9A09}, En quarantaine, [71], [160068],1.0.1408
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\INTERFACE\{463AB33C-BE3A-45F3-A63F-23603A2D3498}, En quarantaine, [71], [160068],1.0.1408
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{463AB33C-BE3A-45F3-A63F-23603A2D3498}, En quarantaine, [71], [160068],1.0.1408
PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{463AB33C-BE3A-45F3-A63F-23603A2D3498}, En quarantaine, [71], [160068],1.0.1408
PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{63C4AC80-F164-466B-85E8-B444B02D9A09}, En quarantaine, [71], [160068],1.0.1408
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{63C4AC80-F164-466B-85E8-B444B02D9A09}, En quarantaine, [71], [160068],1.0.1408
PUP.Optional.Yontoo, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{A5BFD1D3-18B6-4FC3-B3F9-262AE3552DBE}, En quarantaine, [71], [160068],1.0.1408
PUP.Optional.Yontoo, HKU\S-1-5-21-2751028067-3957659525-2020027720-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{A5BFD1D3-18B6-4FC3-B3F9-262AE3552DBE}, En quarantaine, [71], [160068],1.0.1408
PUP.Optional.Yontoo, HKU\S-1-5-21-2751028067-3957659525-2020027720-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A5BFD1D3-18B6-4FC3-B3F9-262AE3552DBE}, En quarantaine, [71], [160068],1.0.1408
PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{a5bfd1d3-18b6-4fc3-b3f9-262ae3552dbe}, En quarantaine, [71], [160068],1.0.1408
PUP.Optional.Yontoo, HKLM\SOFTWARE\POLICIES\GOOGLE\CHROME, En quarantaine, [71], [-1],0.0.0
PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\POLICIES\GOOGLE\CHROME, En quarantaine, [71], [-1],0.0.0

Valeur du registre: 0
(Aucun élément malveillant détecté)

Données du registre: 0
(Aucun élément malveillant détecté)

Flux de données: 0
(Aucun élément malveillant détecté)

Dossier: 6
PUP.Optional.RelevantKnowledge, C:\Users\Lisa\AppData\Local\Chromium\User Data\Default\Extensions\mkndcbhcgphcfkkddanakjiepeknbgle\1.3.337.3_0, En quarantaine, [1477], [180833],1.0.1408
PUP.Optional.RelevantKnowledge, C:\USERS\LISA\APPDATA\LOCAL\CHROMIUM\USER DATA\DEFAULT\EXTENSIONS\MKNDCBHCGPHCFKKDDANAKJIEPEKNBGLE, En quarantaine, [1477], [180833],1.0.1408
PUP.Optional.DesktopTool, C:\USERS\PUBLIC\DOCUMENTS\BAIDU\COMMON\I18N\IPCSUPDATECACHE\DesktopToolMini_global__5_, En quarantaine, [15145], [182058],1.0.1408
PUP.Optional.Pakilan, C:\Users\Lisa\AppData\Local\Chromium\User Data\Default\Extensions\ljibkigjccbegnbeojkoafejpoiachej\0.0.2_0\_metadata, En quarantaine, [15347], [301950],1.0.1408
PUP.Optional.Pakilan, C:\Users\Lisa\AppData\Local\Chromium\User Data\Default\Extensions\ljibkigjccbegnbeojkoafejpoiachej\0.0.2_0, En quarantaine, [15347], [301950],1.0.1408
PUP.Optional.Pakilan, C:\USERS\LISA\APPDATA\LOCAL\CHROMIUM\USER DATA\DEFAULT\EXTENSIONS\LJIBKIGJCCBEGNBEOJKOAFEJPOIACHEJ, En quarantaine, [15347], [301950],1.0.1408

Fichier: 30
PUP.Optional.Yontoo, C:\PROGRAMDATA\NTUSER.POL, Échec de la suppression, [71], [-1],0.0.0
PUP.Optional.Yontoo, C:\WINDOWS\SYSTEM32\GROUPPOLICY\MACHINE\REGISTRY.POL, En quarantaine, [71], [-1],0.0.0
PUP.Optional.SofTonic, C:\USERS\LISA\APPDATA\ROAMING\ZHP\QUARANTINE\SOFTONICDOWNLOADER_POUR_BLUETOOTH-DRIVER-INSTALLER.EXE, En quarantaine, [4189], [8262],1.0.1408
PUP.Optional.BrowseFox, C:\USERS\LISA\APPDATA\ROAMING\ZHP\QUARANTINE\{F40CC14B-0F67-44B4-A17E-03E43DF8E712}GW64.SYS, En quarantaine, [2087], [299543],1.0.1408
PUP.Optional.SofTonic, C:\USERS\LISA\APPDATA\ROAMING\ZHP\QUARANTINE\SOFTONICDOWNLOADER_POUR_AVIRA-FREE-ANTIVIRUS-2013.EXE, En quarantaine, [4189], [76195],1.0.1408
PUP.Optional.ChinAd, C:\USERS\LISA\APPDATA\ROAMING\ZHP\QUARANTINE\INSTALLHELPER.EXE, En quarantaine, [710], [91554],1.0.1408
PUP.Optional.Yontoo, C:\USERS\LISA\APPDATA\LOCAL\TEMP\{589BAF47-7E13-4DFB-A81F-88FEAC47FF9D}.DLL, En quarantaine, [71], [92845],1.0.1408
PUP.Optional.Yontoo, C:\USERS\LISA\APPDATA\LOCAL\TEMP\{54829F3F-3BCA-481D-B1DC-AF7B0DD3DC98}.DLL, En quarantaine, [71], [92845],1.0.1408
PUP.Optional.InstallCore, C:\USERS\LISA\APPDATA\LOCAL\TEMP\ICREINSTALL_SIGMAPLOT.EXE, En quarantaine, [8], [312237],1.0.1408
PUP.Optional.InstallCore, C:\USERS\LISA\APPDATA\LOCAL\TEMP\UNINSTALLER.EXE.1068694968, En quarantaine, [8], [76743],1.0.1408
PUP.Optional.Yontoo, C:\USERS\LISA\APPDATA\LOCAL\TEMP\{53642826-3468-4E74-877D-FD192120285A}.DLL, En quarantaine, [71], [92845],1.0.1408
PUP.Optional.InstallCore, C:\USERS\LISA\APPDATA\LOCAL\TEMP\TEMP1_SPSS.ZIP\SPSS.EXE, En quarantaine, [8], [301065],1.0.1408
PUP.Optional.InstallCore, C:\USERS\LISA\DOWNLOADS\SIGMAPLOT.EXE, En quarantaine, [8], [312237],1.0.1408
PUP.Optional.Somoto, C:\USERS\LISA\DOWNLOADS\7ZIP-ASFEG6C.EXE, En quarantaine, [456], [297618],1.0.1408
PUP.Optional.Palikan, C:\USERS\LISA\APPDATA\LOCALLOW\MICROSOFT\INTERNET EXPLORER\SERVICES\PALIKAN.ICO, En quarantaine, [2047], [255721],1.0.1408
PUP.Optional.RelevantKnowledge, C:\Users\Lisa\AppData\Local\Chromium\User Data\Default\Extensions\mkndcbhcgphcfkkddanakjiepeknbgle\1.3.337.3_0\background.js, En quarantaine, [1477], [180833],1.0.1408
PUP.Optional.RelevantKnowledge, C:\Users\Lisa\AppData\Local\Chromium\User Data\Default\Extensions\mkndcbhcgphcfkkddanakjiepeknbgle\1.3.337.3_0\contentscript.js, En quarantaine, [1477], [180833],1.0.1408
PUP.Optional.RelevantKnowledge, C:\Users\Lisa\AppData\Local\Chromium\User Data\Default\Extensions\mkndcbhcgphcfkkddanakjiepeknbgle\1.3.337.3_0\manifest.json, En quarantaine, [1477], [180833],1.0.1408
PUP.Optional.eShopComp, C:\USERS\LISA\APPDATA\LOCAL\CHROMIUM\USER DATA\DEFAULT\LOCAL STORAGE\http_pstatic.eshopcomp.com_0.localstorage, En quarantaine, [18180], [256007],1.0.1408
PUP.Optional.eShopComp, C:\USERS\LISA\APPDATA\LOCAL\CHROMIUM\USER DATA\DEFAULT\LOCAL STORAGE\http_pstatic.eshopcomp.com_0.localstorage-journal, En quarantaine, [18180], [256007],1.0.1408
PUP.Optional.HDApp, C:\USERS\LISA\APPDATA\LOCAL\CHROMIUM\USER DATA\DEFAULT\LOCAL STORAGE\https_hdapp1008-a.akamaihd.net_0.localstorage, En quarantaine, [18204], [256893],1.0.1408
PUP.Optional.HDApp, C:\USERS\LISA\APPDATA\LOCAL\CHROMIUM\USER DATA\DEFAULT\LOCAL STORAGE\https_hdapp1008-a.akamaihd.net_0.localstorage-journal, En quarantaine, [18204], [256893],1.0.1408
PUP.Optional.Pakilan, C:\USERS\LISA\APPDATA\LOCAL\CHROMIUM\USER DATA\DEFAULT\EXTENSIONS\LJIBKIGJCCBEGNBEOJKOAFEJPOIACHEJ\0.0.2_0\MANIFEST.JSON, En quarantaine, [15347], [301950],1.0.1408
PUP.Optional.Pakilan, C:\Users\Lisa\AppData\Local\Chromium\User Data\Default\Extensions\ljibkigjccbegnbeojkoafejpoiachej\0.0.2_0\_metadata\verified_contents.json, En quarantaine, [15347], [301950],1.0.1408
PUP.Optional.Pakilan, C:\Users\Lisa\AppData\Local\Chromium\User Data\Default\Extensions\ljibkigjccbegnbeojkoafejpoiachej\0.0.2_0\content_script.js, En quarantaine, [15347], [301950],1.0.1408
PUP.Optional.Pakilan, C:\Users\Lisa\AppData\Local\Chromium\User Data\Default\Extensions\ljibkigjccbegnbeojkoafejpoiachej\0.0.2_0\Icon128.png, En quarantaine, [15347], [301950],1.0.1408
PUP.Optional.Pakilan, C:\Users\Lisa\AppData\Local\Chromium\User Data\Default\Extensions\ljibkigjccbegnbeojkoafejpoiachej\0.0.2_0\Icon16.png, En quarantaine, [15347], [301950],1.0.1408
PUP.Optional.Pakilan, C:\Users\Lisa\AppData\Local\Chromium\User Data\Default\Extensions\ljibkigjccbegnbeojkoafejpoiachej\0.0.2_0\Icon48.png, En quarantaine, [15347], [301950],1.0.1408
PUP.Optional.Pakilan, C:\Users\Lisa\AppData\Local\Chromium\User Data\Default\Extensions\ljibkigjccbegnbeojkoafejpoiachej\0.0.2_0\newtab.html, En quarantaine, [15347], [301950],1.0.1408
PUP.Optional.Pakilan, C:\Users\Lisa\AppData\Local\Chromium\User Data\Default\Extensions\ljibkigjccbegnbeojkoafejpoiachej\0.0.2_0\newtab.js, En quarantaine, [15347], [301950],1.0.1408

Secteur physique: 0
(Aucun élément malveillant détecté)


(end)