Malwarebytes
www.malwarebytes.com

-Détails du journal-
Date de l'analyse: 02/09/2021
Durée d'analyse: 16:41
Fichier journal: cd01b374-0bfb-11ec-ab06-a4ae12313e87.json

-Informations du logiciel-
Version: 4.4.5.130
Version de composants: 1.0.1430
Version de pack de mise à jour: 1.0.44523
Licence: Essai

-Informations système-
Système d'exploitation: Windows 10 (Build 19043.1165)
Processeur: x64
Système de fichiers: NTFS
Utilisateur: DESKTOP-914SCS1\pierr

-Résumé de l'analyse-
Type d'analyse: Analyse des menaces
Analyse lancée par: Manuel
Résultat: Terminé
Objets analysés: 293711
Menaces détectées: 27
Menaces mises en quarantaine: 27
Temps écoulé: 3 min, 57 s

-Options d'analyse-
Mémoire: Activé
Démarrage: Activé
Système de fichiers: Activé
Archives: Activé
Rootkits: Désactivé
Heuristique: Activé
PUP: Détection
PUM: Détection

-Détails de l'analyse-
Processus: 0
(Aucun élément malveillant détecté)

Module: 0
(Aucun élément malveillant détecté)

Clé du registre: 3
Trojan.BitCoinMiner.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Microsoft\Windows\Google\GoogleUpdateTaskMachineTN, En quarantaine, 3879, 698508, , , , , ,
Trojan.BitCoinMiner.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{9F061FEE-9096-430E-AA48-0ACAAF56C3D6}, En quarantaine, 3879, 698508, , , , , ,
Trojan.BitCoinMiner.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{9F061FEE-9096-430E-AA48-0ACAAF56C3D6}, En quarantaine, 3879, 698508, , , , , ,

Valeur du registre: 2
Trojan.BitCoinMiner.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{9F061FEE-9096-430E-AA48-0ACAAF56C3D6}|PATH, En quarantaine, 3879, 698506, 1.0.44523, , ame, , ,
PUP.Optional.MindSpark.Generic, HKU\S-1-5-21-3714002902-2875989704-3032242889-1001\SOFTWARE\GOOGLE\CHROME\PREFERENCEMACS\Default\extensions.settings|foaoaiinkbjpminknkedhgimdfkjekie, En quarantaine, 1896, 867816, , , , , ,

Données du registre: 0
(Aucun élément malveillant détecté)

Flux de données: 0
(Aucun élément malveillant détecté)

Dossier: 2
PUP.Optional.MindSpark.Generic, C:\USERS\PIERR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, En quarantaine, 1896, 867816, , , , , ,
PUP.Optional.MindSpark.Generic, C:\USERS\PIERR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FOAOAIINKBJPMINKNKEDHGIMDFKJEKIE, En quarantaine, 1896, 867816, 1.0.44523, , ame, , ,

Fichier: 20
Trojan.BitCoinMiner.Generic, C:\WINDOWS\SYSTEM32\TASKS\MICROSOFT\WINDOWS\GOOGLE\GoogleUpdateTaskMachineTN, En quarantaine, 3879, 698508, 1.0.44523, , ame, , 355238114BC87B0B0BAF86F64DEC6358, 22D67B0666670D7CF9969F78104E92008A7E37551A827AD572F38EC93F22C748
PUP.Optional.MindSpark.Generic, C:\USERS\PIERR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Remplacé, 1896, 867816, , , , , CECA8CFB4C98F6D9E44ABF8EAD03ED6E, 5849F527A1F2F44AD5FEACF9F1438E8DC3392984CC607496BE3F2BEDC1853820
PUP.Optional.MindSpark.Generic, C:\USERS\PIERR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Remplacé, 1896, 867816, , , , , FA27113D55221E4366B83724A7609F17, 9F045D67D323BF2ED99FE04DAE4E5BCC2D52D1A0CD310062175FE3523E56881E
PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000005.ldb, En quarantaine, 1896, 867816, , , , , 45E3C50A83DF327FA7F58A7D47735E99, 84AC0F6D642FB3C8A0C648051B4555797C87B12FAAB7DBCC9904846E1EDBB2DA
PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\001085.ldb, En quarantaine, 1896, 867816, , , , , 7E9765410E8BA15093CCFF14BB5D286C, B7F499E70FFF98055489FAC86573604F0F1FE7B780BF503624FEE6115C71CF41
PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\001088.ldb, En quarantaine, 1896, 867816, , , , , C1E1FBDF0D12B01559C3664E191F515E, 04DBED4A15FB6CDF9CD9ADDA07B79889CD8B3679866D0BAE8233684561A6625F
PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\001090.log, En quarantaine, 1896, 867816, , , , , A58EEF3ACBB7FA0EDCF1CBB338A15402, AE2844706AC31808F30A7F726627021365609DAF6B041EA8F4BE43ADAA7E863C
PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\001091.ldb, En quarantaine, 1896, 867816, , , , , 465EA3B78BEE876D8D05B3240B51CB9C, B647C4288B06DBCDD3456A4BF5F6EBC52D2DB84E1F9D635AA74CE7D32750D9D9
PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT, En quarantaine, 1896, 867816, , , , , 46295CAC801E5D4857D09837238A6394, 0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOCK, En quarantaine, 1896, 867816, , , , , ,
PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG, En quarantaine, 1896, 867816, , , , , 9A966EE5F86FD18F82B1BA7BE00FE122, FD84C627454A61B0F7EC2F82FACAD07206896BB65FC847C775EB568E016C2D07
PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old, En quarantaine, 1896, 867816, , , , , 4728B2CC64E628DCCD5C8B9E45099504, A3907AE5E18594F7AADE2C29CDF2FA3BC0222B4D4CC29BC015DD70DB81F1B412
PUP.Optional.MindSpark.Generic, C:\Users\pierr\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000001, En quarantaine, 1896, 867816, , , , , 42E7301FE568A12509685D3DD12B335D, 2F5E454ED8FD787C11B074A024DCDCFD4B4468339982CD29A334ED7EE4CDD581
PUP.Optional.MindSpark.Generic, C:\USERS\PIERR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FOAOAIINKBJPMINKNKEDHGIMDFKJEKIE\13.986.19.63525_0\MANIFEST.JSON, En quarantaine, 1896, 867816, 1.0.44523, , ame, , E212BAABF64CDFCEAAED276172B39CEF, 1D899309FD8B381463C8F0D49D0C36FC40C249851019793660E9C57723E5AD46
Malware.Heuristic.1003, C:\USERS\PIERR\APPDATA\LOCAL\TEMP\RAR$EXB11856.17320\N47460\MSIMG32.DLL, En quarantaine, 1000001, 0, 1.0.44523, 0000000000000000000003EB, dds, 01404724, B39044EB36611EAB2B3828AF4727063A, B000452EA5BAC095BC9DE4CE78C5E7CA08B657ADB94AE24CEFF7C927602684C9
Malware.Heuristic.1003, C:\USERS\PIERR\APPDATA\LOCAL\TEMP\RAR$EXB7572.48765\N47460\MSIMG32.DLL, En quarantaine, 1000001, 0, 1.0.44523, 0000000000000000000003EB, dds, 01404724, B39044EB36611EAB2B3828AF4727063A, B000452EA5BAC095BC9DE4CE78C5E7CA08B657ADB94AE24CEFF7C927602684C9
Malware.Heuristic.1003, C:\USERS\PIERR\APPDATA\LOCAL\TEMP\RAR$EXB16216.37030\N47460\MSIMG32.DLL, En quarantaine, 1000001, 0, 1.0.44523, 0000000000000000000003EB, dds, 01404724, B39044EB36611EAB2B3828AF4727063A, B000452EA5BAC095BC9DE4CE78C5E7CA08B657ADB94AE24CEFF7C927602684C9
Malware.Heuristic.1003, C:\USERS\PIERR\APPDATA\LOCAL\TEMP\RAR$EXB7572.39569\N47460\MSIMG32.DLL, En quarantaine, 1000001, 0, 1.0.44523, 0000000000000000000003EB, dds, 01404724, B39044EB36611EAB2B3828AF4727063A, B000452EA5BAC095BC9DE4CE78C5E7CA08B657ADB94AE24CEFF7C927602684C9
RiskWare.KMS, C:\USERS\PIERR\DOWNLOADS\OFFICE 2019 + CRACK.RAR, En quarantaine, 928, 632069, 1.0.44523, FB469301D4FBBC48F273A6EA, dds, 01404724, FB709954B9DB76FC6F1EBE2EF49B3FFE, B00828A4A0C827B221B2B52878463AFCD343A5DAD3A10815D5A377C4C49091DD
Trojan.TechSupportScam, C:\USERS\PIERR\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Remplacé, 302, 929122, 1.0.44523, , ame, , FA27113D55221E4366B83724A7609F17, 9F045D67D323BF2ED99FE04DAE4E5BCC2D52D1A0CD310062175FE3523E56881E

Secteur physique: 0
(Aucun élément malveillant détecté)

WMI: 0
(Aucun élément malveillant détecté)


(end)