Malwarebytes
www.malwarebytes.com

-Détails du journal-
Date de l'analyse: 21/09/2019
Heure de l'analyse: 12:49
Fichier journal: 829770b4-dc5d-11e9-a4ee-50465d309410.json

-Informations du logiciel-
Version: 3.8.3.2965
Version de composants: 1.0.625
Version de pack de mise à jour: 1.0.12587
Licence: Gratuit

-Informations système-
Système d'exploitation: Windows 8.1
Processeur: x64
Système de fichiers: NTFS
Utilisateur: DIDIER\Didier

-Résumé de l'analyse-
Type d'analyse: Analyse des menaces
Analyse lancée par: Manuel
Résultat: Terminé
Objets analysés: 454044
Menaces détectées: 63
Menaces mises en quarantaine: 63
Temps écoulé: 38 min, 25 s

-Options d'analyse-
Mémoire: Activé
Démarrage: Activé
Système de fichiers: Activé
Archives: Activé
Rootkits: Désactivé
Heuristique: Activé
PUP: Détection
PUM: Détection

-Détails de l'analyse-
Processus: 0
(Aucun élément malveillant détecté)

Module: 0
(Aucun élément malveillant détecté)

Clé du registre: 17
PUP.Optional.PCVARK, HKLM\SOFTWARE\ZHJpdmVyZGV0YWlscy5jb20=, En quarantaine, [475], [706567],1.0.12587
PUP.Optional.Segurazo, HKLM\SOFTWARE\MICROSOFT\TRACING\segurazoclient_RASAPI32, En quarantaine, [1532], [709099],1.0.12587
PUP.Optional.Segurazo, HKLM\SOFTWARE\MICROSOFT\TRACING\segurazoclient_RASMANCS, En quarantaine, [1532], [709099],1.0.12587
PUP.Optional.Segurazo, HKLM\SOFTWARE\MICROSOFT\TRACING\SegurazoService_RASAPI32, En quarantaine, [1532], [709099],1.0.12587
PUP.Optional.DriverPack, HKU\S-1-5-21-2731385879-58174941-3277747152-1002\SOFTWARE\DRPSU, En quarantaine, [572], [472301],1.0.12587
PUP.Optional.Segurazo, HKLM\SOFTWARE\MICROSOFT\TRACING\SegurazoService_RASMANCS, En quarantaine, [1532], [709099],1.0.12587
PUP.Optional.Segurazo, HKLM\SOFTWARE\MICROSOFT\TRACING\SegurazoUninstaller_RASAPI32, En quarantaine, [1532], [709099],1.0.12587
PUP.Optional.Segurazo, HKLM\SOFTWARE\MICROSOFT\TRACING\SegurazoUninstaller_RASMANCS, En quarantaine, [1532], [709099],1.0.12587
PUP.Optional.Segurazo, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\SegurazoSvc, En quarantaine, [1532], [713771],1.0.12587
PUP.Optional.DriverPack, HKU\S-1-5-21-2731385879-58174941-3277747152-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS\ZONEMAP\DOMAINS\drp.su, En quarantaine, [572], [472299],1.0.12587
PUP.Optional.GoodGame, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Goodgame Empire0, En quarantaine, [3895], [597957],1.0.12587
PUP.Optional.GoodGame, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Goodgame Empire1, En quarantaine, [3895], [597957],1.0.12587
PUP.Optional.GoodGame, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Goodgame Empire2, En quarantaine, [3895], [597957],1.0.12587
PUP.Optional.Segurazo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\Segurazo, En quarantaine, [1532], [730655],1.0.12587
PUP.Optional.WebDiscoverBrowser, HKU\S-1-5-18\SOFTWARE\WebDiscoverBrowser, En quarantaine, [1675], [253912],1.0.12587
PUP.Optional.DriverPack, HKLM\SOFTWARE\WOW6432NODE\DRPSU, En quarantaine, [572], [472300],1.0.12587
PUP.Optional.Segurazo, HKLM\SOFTWARE\MICROSOFT\WINDOWS\Segurazo, En quarantaine, [1532], [730655],1.0.12587

Valeur du registre: 4
PUP.Optional.DriverPack, HKU\S-1-5-21-2731385879-58174941-3277747152-1002\SOFTWARE\DRPSU|CLIENTID, En quarantaine, [572], [472301],1.0.12587
PUP.Optional.DriverPack, HKLM\SOFTWARE\WOW6432NODE\DRPSU|CLIENTID, En quarantaine, [572], [472300],1.0.12587
PUP.Optional.SearchManager.BITSRST, HKU\S-1-5-21-2731385879-58174941-3277747152-1002\SOFTWARE\GOOGLE\CHROME\PREFERENCEMACS\Default\extensions.settings|nahhmpbckpgdidfnmfkfgiflpjijilce, En quarantaine, [270], [626729],1.0.12587
PUP.Optional.SearchManager.BITSRST, HKU\S-1-5-21-2731385879-58174941-3277747152-1002\SOFTWARE\GOOGLE\CHROME\PREFERENCEMACS\Default\extensions.settings|pilplloabdedfmialnfchjomjmpjcoej, En quarantaine, [270], [626729],1.0.12587

Données du registre: 0
(Aucun élément malveillant détecté)

Flux de données: 0
(Aucun élément malveillant détecté)

Dossier: 1
PUP.Optional.Segurazo, C:\USERS\DIDIER\APPDATA\ROAMING\SEGURAZOCLIENT, En quarantaine, [1532], [709094],1.0.12587

Fichier: 41
PUP.Optional.PCVARK.Generic, C:\USERS\DIDIER\APPDATA\ROAMING\ACC.TXT, En quarantaine, [763], [421587],1.0.12587
PUP.Optional.Segurazo, C:\Users\Didier\AppData\Roaming\segurazoclient\segurazoclientConfig.xml, En quarantaine, [1532], [709094],1.0.12587
PUP.Optional.DriverPack, C:\USERS\DIDIER\APPDATA\ROAMING\DRPSU\ALICE\NODE.DLL, En quarantaine, [572], [542228],1.0.12587
PUP.Optional.DriverPack, C:\USERS\DIDIER\APPDATA\ROAMING\DRPSU\ALICE\CLOUD.EXE, En quarantaine, [572], [542228],1.0.12587
PUP.Optional.DriverPack, C:\USERS\DIDIER\APPDATA\ROAMING\DRPSU\ALICE\LIBGLESV2.DLL, En quarantaine, [572], [542228],1.0.12587
PUP.Optional.DriverPack, C:\USERS\DIDIER\APPDATA\ROAMING\DRPSU\ALICE\NW_ELF.DLL, En quarantaine, [572], [542228],1.0.12587
PUP.Optional.DriverPack, C:\USERS\DIDIER\APPDATA\ROAMING\DRPSU\ALICE\LIBEGL.DLL, En quarantaine, [572], [542228],1.0.12587
PUP.Optional.DriverPack, C:\USERS\DIDIER\APPDATA\ROAMING\DRPSU\ALICE\FFMPEG.DLL, En quarantaine, [572], [542228],1.0.12587
PUP.Optional.Segurazo, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\SEGURAZO.DIR\SEGURAZOENGINE.DLL, En quarantaine, [1532], [714174],1.0.12587
PUP.Optional.Segurazo, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\SEGURAZO.DIR\SEGURAZOKD.SYS, En quarantaine, [1532], [709102],1.0.12587
PUP.Optional.Segurazo, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\SEGURAZO.DIR\SEGURAZOSHELL64_V10149.DLL, En quarantaine, [1532], [709102],1.0.12587
PUP.Optional.Segurazo, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\SEGURAZO.DIR\SEGURAZOIC.EXE, En quarantaine, [1532], [714543],1.0.12587
PUP.Optional.Segurazo, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\SEGURAZO.DIR\SEGURAZOTOOLS.DLL, En quarantaine, [1532], [709102],1.0.12587
PUP.Optional.Segurazo, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\SEGURAZO.DIR\SEGURAZOSHELL86_V10149.DLL, En quarantaine, [1532], [709102],1.0.12587
PUP.Optional.DriverUpdater.TskLnk, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\ZHPCLEANER\DRIVER UPDATER\APTDU.EXE, En quarantaine, [12660], [474617],1.0.12587
PUP.Optional.AdvancedSystemRepair, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\ZHPCLEANER\ASR_BLUE_INSTALLER_M7_FR.EXE, En quarantaine, [485], [708572],1.0.12587
PUP.Optional.AdvancedSystemRepair, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\ZHPCLEANER\ASR_BLUE_INSTALLER_7GA-INAPP-1G (1).EXE, En quarantaine, [485], [724287],1.0.12587
PUP.Optional.WinTonic, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\ZHPCLEANER\WINTONIC.EXE, En quarantaine, [681], [672009],1.0.12587
PUP.Optional.WinTonic, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\ZHPCLEANER\WNTSETUP[1].EXE, En quarantaine, [681], [672009],1.0.12587
PUP.Optional.Segurazo, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\SEGURAZOSHELL64_V10149.DLL, En quarantaine, [1532], [709102],1.0.12587
PUP.Optional.Segurazo, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\SEGURAZOENGINE.DLL, En quarantaine, [1532], [714174],1.0.12587
PUP.Optional.Segurazo, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\SEGURAZOSERVICE.EXE, En quarantaine, [1532], [709102],1.0.12587
PUP.Optional.Segurazo, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\SEGURAZO.DIR\SEGURAZOSERVICE.EXE, En quarantaine, [1532], [709102],1.0.12587
PUP.Optional.WinTonic, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\ZHPCLEANER\WINTONIC (1).EXE, En quarantaine, [681], [672009],1.0.12587
PUP.Optional.Segurazo, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\SEGURAZOCLIENT.EXE, En quarantaine, [1532], [709102],1.0.12587
PUP.Optional.Segurazo, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\SEGURAZOTOOLS.DLL, En quarantaine, [1532], [709102],1.0.12587
PUP.Optional.Segurazo, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\SEGURAZO.DIR\SEGURAZOCLIENT.EXE, En quarantaine, [1532], [709102],1.0.12587
PUP.Optional.Segurazo, C:\USERS\DIDIER\APPDATA\ROAMING\ZHP\QUARANTINE\SEGURAZOSHELL86_V10149.DLL, En quarantaine, [1532], [709102],1.0.12587
PUP.Optional.InstallCore.Generic, C:\USERS\DIDIER\DOWNLOADS\BLUESTACKS_2695588044.EXE, En quarantaine, [574], [512142],1.0.12587
PUP.Optional.DriverReviver, C:\USERS\DIDIER\DOWNLOADS\DRIVERREVIVERSETUP_PPC.EXE, En quarantaine, [4225], [462815],1.0.12587
PUP.Optional.DriverPack, C:\USERS\DIDIER\DOWNLOADS\DRIVERPACK-17-ONLINE_1920024730.1568729499.EXE, En quarantaine, [572], [714326],1.0.12587
PUP.Optional.BundleInstaller, C:\USERS\DIDIER\DOWNLOADS\MICROSOFT-OFFICE-PUBLISHER-2013_3572498345.EXE, En quarantaine, [467], [543666],1.0.12587
PUP.Optional.BundleInstaller, C:\USERS\DIDIER\DOWNLOADS\MICROSOFT-OFFICE-PUBLISHER-2013_2896665971.EXE, En quarantaine, [467], [543666],1.0.12587
PUP.Optional.BundleInstaller, C:\USERS\DIDIER\DOWNLOADS\OUTLOOK DUPLICATE ITEMS REMOVER – ODIR_0291284708.EXE, En quarantaine, [467], [543673],1.0.12587
PUP.Optional.DriverUpdate, C:\WINDOWS\INSTALLER\11823F18.MSI, En quarantaine, [2960], [533640],1.0.12587
PUP.Optional.SearchManager.BITSRST, C:\USERS\DIDIER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Remplacé, [270], [626729],1.0.12587
PUP.Optional.SearchManager.BITSRST, C:\USERS\DIDIER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Remplacé, [270], [626729],1.0.12587
PUP.Optional.SearchManager.BITSRST, C:\USERS\DIDIER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Remplacé, [270], [626729],1.0.12587
PUP.Optional.SearchManager.BITSRST, C:\USERS\DIDIER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Remplacé, [270], [626729],1.0.12587
PUP.Optional.SearchManager.BITSRST, C:\USERS\DIDIER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Remplacé, [270], [626729],1.0.12587
PUP.Optional.SearchManager.BITSRST, C:\USERS\DIDIER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Remplacé, [270], [628563],1.0.12587

Secteur physique: 0
(Aucun élément malveillant détecté)

WMI: 0
(Aucun élément malveillant détecté)


(end)