Malwarebytes Anti-Malware www.malwarebytes.org Date de l'analyse: 26/09/2016 Heure de l'analyse: 23:14 Fichier journal: scan log.txt Administrateur: Oui Version: 2.2.1.1043 Base de données de programmes malveillants: v2016.09.26.11 Base de données de rootkits: v2016.09.26.02 Licence: Gratuit Protection contre les programmes malveillants: Désactivé Protection contre les sites Web malveillants: Désactivé Autoprotection: Désactivé Système d'exploitation: Windows 10 Processeur: x64 Système de fichiers: NTFS Utilisateur: Pascal BASTIEN Type d'analyse: Analyse des menaces Résultat: Terminé Objets analysés: 326340 Temps écoulé: 11 min, 25 s Mémoire: Activé Démarrage: Activé Système de fichiers: Activé Archives: Activé Rootkits: Désactivé Heuristique: Activé PUP: Activé PUM: Activé Processus: 8 PUP.Optional.Elex.Generic, C:\Program Files (x86)\TCPnp3\TCPnP3.exe, 2232, Supprimer au redémarrage, [f7cc6412dcbe40f6b48b4da9719353ad] PUP.Optional.Elex.Generic, C:\Program Files (x86)\TCPnp4\TCPnP4.exe, 2240, Supprimer au redémarrage, [31926d0957438ea82e116492fa0a6c94] PUP.Optional.Elex.Generic, C:\Program Files (x86)\TCPnp5\TCPnP5.exe, 2348, Supprimer au redémarrage, [ecd7cbabf0aa2313ae91e412788c9070] PUP.Optional.Elex.Generic, C:\Program Files (x86)\TCPnp6\TCPnP6.exe, 2256, Supprimer au redémarrage, [b2116c0a1b7fb284fd420ceab94b19e7] PUP.Optional.Elex.Generic, D:\Program Files\UDPdp\UDPnp3\UDPdp33.exe, 2472, Supprimer au redémarrage, [7d464f27ecae57dfc678e21445bf30d0] PUP.Optional.Elex.Generic, D:\Program Files\UDPdp\UDPnp4\UDPdp44.exe, 2392, Supprimer au redémarrage, [10b334421684d85ec47a96609d6738c8] PUP.Optional.Elex.Generic, D:\Program Files\UDPdp\UDPnp5\UDPdp55.exe, 2408, Supprimer au redémarrage, [6261c9ad3664a98daf8fe3137d87f20e] PUP.Optional.Elex.Generic, D:\Program Files\UDPdp\UDPnp6\UDPdp66.exe, 2400, Supprimer au redémarrage, [3c87ff77e2b8b6805fdf66909371a060] Modules: 0 (Aucun élément malveillant détecté) Clés du Registre: 10 PUP.Optional.Elex, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{2A80B664-3DD4-4C71-BB96-37116E991A6F}, Supprimer au redémarrage, [eed587ef5644340225d0892b63a1d42c], PUP.Optional.Elex, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Rotockclajent Core, Supprimer au redémarrage, [01c26214603a84b255a3e3d122e2cb35], PUP.Optional.Elex.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPNP3, En quarantaine, [f7cc6412dcbe40f6b48b4da9719353ad], PUP.Optional.Elex.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPNP4, En quarantaine, [31926d0957438ea82e116492fa0a6c94], PUP.Optional.Elex.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPNP5, En quarantaine, [ecd7cbabf0aa2313ae91e412788c9070], PUP.Optional.Elex.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPNP6, En quarantaine, [b2116c0a1b7fb284fd420ceab94b19e7], PUP.Optional.Elex.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UDPNP33, En quarantaine, [7d464f27ecae57dfc678e21445bf30d0], PUP.Optional.Elex.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UDPNP44, En quarantaine, [10b334421684d85ec47a96609d6738c8], PUP.Optional.Elex.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UDPNP55, En quarantaine, [6261c9ad3664a98daf8fe3137d87f20e], PUP.Optional.Elex.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UDPNP66, En quarantaine, [3c87ff77e2b8b6805fdf66909371a060], Valeurs du Registre: 11 PUP.Optional.Elex, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{2A80B664-3DD4-4C71-BB96-37116E991A6F}|Path, \Rotockclajent Core, Supprimer au redémarrage, [eed587ef5644340225d0892b63a1d42c] PUP.Optional.Elex.Generic, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGIN, C:\Program Files (x86)\004b0xoo\sv8ss.js, En quarantaine, [744fc4b2d6c4df574b4015dfa65e16ea] PUP.Optional.Elex.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPnP3|ImagePath, "C:\Program Files (x86)\TCPnp3\TCPnP3.exe" c54102ea829e4d458c86147e71427a8f, En quarantaine, [f7cc6412dcbe40f6b48b4da9719353ad] PUP.Optional.Elex.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPnP4|ImagePath, "C:\Program Files (x86)\TCPnp4\TCPnP4.exe" 420f678469254505a655a4b567f7c9a0, En quarantaine, [31926d0957438ea82e116492fa0a6c94] PUP.Optional.Elex.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPnP5|ImagePath, "C:\Program Files (x86)\TCPnp5\TCPnP5.exe" ae2ce54ab1294744903dca4a5f8539bf, En quarantaine, [ecd7cbabf0aa2313ae91e412788c9070] PUP.Optional.Elex.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPnP6|ImagePath, "C:\Program Files (x86)\TCPnp6\TCPnP6.exe" e47b5abf08794d6b8b774f94eeb062f4, En quarantaine, [b2116c0a1b7fb284fd420ceab94b19e7] PUP.Optional.Elex.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UDPnP33|ImagePath, "D:\Program Files\UDPdp\UDPnp3\UDPdp33.exe" 3e19779b2974487e881c2174c0562504, En quarantaine, [7d464f27ecae57dfc678e21445bf30d0] PUP.Optional.Elex.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UDPnP44|ImagePath, "D:\Program Files\UDPdp\UDPnp4\UDPdp44.exe" b48f42ba07304dd38f2ef02dfd46c678, En quarantaine, [10b334421684d85ec47a96609d6738c8] PUP.Optional.Elex.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UDPnP55|ImagePath, "D:\Program Files\UDPdp\UDPnp5\UDPdp55.exe" 388837891c4f496ea6203a5f71b2a421, En quarantaine, [6261c9ad3664a98daf8fe3137d87f20e] PUP.Optional.Elex.Generic, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\UDPnP66|ImagePath, "D:\Program Files\UDPdp\UDPnp6\UDPdp66.exe" affe6dc7e5264e7e8e5695737342bee0, En quarantaine, [3c87ff77e2b8b6805fdf66909371a060] PUM.Optional.ProxyHijacker, HKU\S-1-5-21-2956164877-2974894146-3845520675-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, 127.0.0.1:8118, En quarantaine, [2b98d5a1841681b55e57a42d48bbe41c] Données du Registre: 0 (Aucun élément malveillant détecté) Dossiers: 6 PUP.Optional.Elex.Generic, C:\Program Files (x86)\TCPnp3, Supprimer au redémarrage, [03c0c1b5e4b69f971328ba3c3fc5936d], PUP.Optional.Elex.Generic, C:\Program Files (x86)\TCPnp4, Supprimer au redémarrage, [962db9bd1d7de74fb98249ad1fe5de22], PUP.Optional.Elex.Generic, C:\Program Files (x86)\TCPnp5, Supprimer au redémarrage, [13b04e285b3fc0761a21cc2a6c98e11f], PUP.Optional.Elex.Generic, C:\Program Files (x86)\TCPnp6, Supprimer au redémarrage, [c8fb89ed0397cb6b58e3a84eca3a22de], PUP.Optional.ProxyGate.ShrtCln, C:\Program Files (x86)\004b0xoo, En quarantaine, [9c274135c2d8a78fea2828d27e8637c9], PUP.Optional.Privoxy, C:\Windows\desktop-qepmb8r_020716, En quarantaine, [f9cadf97a2f823138409228611f33cc4], Fichiers: 42 Adware.PremierOpinion, C:\Windows\System32\pmls64.dll, En quarantaine, [626171056b2f6ccabef84645d12f5aa6], PUP.Optional.NetworkProtector, C:\Users\Pascal BASTIEN\AppData\Local\Temp\nst807E.tmp, En quarantaine, [873cd1a5514943f375351cb7798bdd23], Adware.FileTour, C:\Users\Pascal BASTIEN\AppData\Local\Temp\pps-qq-19.exe, En quarantaine, [a81b9cda148661d52e6718e2689c50b0], Trojan.Agent, C:\Users\Pascal BASTIEN\AppData\Local\Temp\bundle.exe, En quarantaine, [3a894f27b1e92d0986430ebebd47837d], PUP.Optional.Amonetize, C:\Users\Pascal BASTIEN\AppData\Local\Temp\sdf912B.exe, En quarantaine, [5b681c5a5545a6904ba0daf2c041d32d], PUP.Optional.NetSecure, C:\Users\Pascal BASTIEN\AppData\Local\Temp\setup.exe, En quarantaine, [30938fe76535ca6c98f1327639cb827e], PUP.Optional.YesSearches, C:\Users\Pascal BASTIEN\AppData\Local\Temp\trotux.exe, En quarantaine, [8241f77fdebcd363ee4a4e8329d89f61], Adware.FileTour, C:\Users\Pascal BASTIEN\AppData\Local\Temp\ucbrabs.exe, En quarantaine, [fec5185eb5e57eb8593cdb1f1ce818e8], PUP.Optional.Elex, C:\Windows\System32\Tasks\Rotockclajent Core, En quarantaine, [14afd4a25d3dd95da655caeaed17bd43], PUP.Optional.Elex.Generic, C:\Program Files (x86)\TCPnp3\TCPnP3.exe, Supprimer au redémarrage, [f7cc6412dcbe40f6b48b4da9719353ad], PUP.Optional.Elex.Generic, C:\Program Files (x86)\TCPnp4\TCPnP4.exe, Supprimer au redémarrage, [31926d0957438ea82e116492fa0a6c94], PUP.Optional.Elex.Generic, C:\Program Files (x86)\TCPnp5\TCPnP5.exe, Supprimer au redémarrage, [ecd7cbabf0aa2313ae91e412788c9070], PUP.Optional.Elex.Generic, C:\Program Files (x86)\TCPnp6\TCPnP6.exe, Supprimer au redémarrage, [b2116c0a1b7fb284fd420ceab94b19e7], PUP.Optional.Elex.Generic, D:\Program Files\UDPdp\UDPnp3\UDPdp33.exe, Supprimer au redémarrage, [7d464f27ecae57dfc678e21445bf30d0], PUP.Optional.Elex.Generic, D:\Program Files\UDPdp\UDPnp4\UDPdp44.exe, Supprimer au redémarrage, [10b334421684d85ec47a96609d6738c8], PUP.Optional.Elex.Generic, D:\Program Files\UDPdp\UDPnp5\UDPdp55.exe, Supprimer au redémarrage, [6261c9ad3664a98daf8fe3137d87f20e], PUP.Optional.Elex.Generic, D:\Program Files\UDPdp\UDPnp6\UDPdp66.exe, Supprimer au redémarrage, [3c87ff77e2b8b6805fdf66909371a060], PUP.Optional.ProxyGate.ShrtCln, C:\Program Files (x86)\004b0xoo\sv8ss.js, En quarantaine, [9c274135c2d8a78fea2828d27e8637c9], PUP.Optional.Trotux, C:\Users\Pascal BASTIEN\AppData\Roaming\Profiles\Nernegh.default\prefs.js, Bon : (), Mauvais : (user_pref("browser.newtab.url", "http://www.trotux.com/?z=9399fd4b1761460d19e4387gez0m2z4bezfc0o9c8g&from=icb&uid=TOSHIBAXMQ01ABD075_73IYC2BGTXX73IYC2BGT&type=hp");), Remplacé,[10b331457b1fcf67713d08e446bebe42] PUP.Optional.Trotux, C:\Users\Pascal BASTIEN\AppData\Roaming\Profiles\Nernegh.default\prefs.js, Bon : (), Mauvais : (cation", 1474835203); user_pref("browser.bookmarks.rest), Remplacé,[2c9775015941e35300ae84680bf927d9] PUP.Optional.Trotux, C:\Users\Pascal BASTIEN\AppData\Roaming\Profiles\Nernegh.default\prefs.js, Bon : (), Mauvais : (s file. * * If you make changes to this file while the application is running, * the changes will be overwritten when the application exits. * * To make a manual chan), Remplacé,[2f9413630298a2949d118c60cb39669a] PUP.Optional.Trotux, C:\Users\Pascal BASTIEN\AppData\Roaming\Profiles\Nernegh.default\prefs.js, Bon : (), Mauvais : (on is running, * the changes will be overwritten when the application exits. * * To make a manual change to preferences, you can visit the URL about:config */ user_pref("accessibility.type), Remplacé,[4182f87ed4c683b34f5fa9438282f40c] PUP.Optional.Trotux, C:\Users\Pascal BASTIEN\AppData\Roaming\Profiles\Nernegh.default\prefs.js, Bon : (), Mauvais : ( preferences, you can visit the URL about:config */ user_pref("accessibility.typeaheadfind", true); user_pref("app.update.auto", false); user_pref("app.update.enabled", false); user_pref("app.), Remplacé,[13b0dd994b4f77bf347afbf1d72dc13f] PUP.Optional.Trotux, C:\Users\Pascal BASTIEN\AppData\Roaming\Profiles\Nernegh.default\prefs.js, Bon : (), Mauvais : (changes will be overwritten when the application exit), Remplacé,[23a0db9b7d1d70c646680be1a95b2bd5] PUP.Optional.Trotux, C:\Users\Pascal BASTIEN\AppData\Roaming\Profiles\Nernegh.default\prefs.js, Bon : (), Mauvais : (("app.update.lastUpdateTime.addon-background-update-timer", 1474834963); user_pref("app.update.lastUpdateTime.background-update-timer", 1474800121); user_pref("app.upda), Remplacé,[279c2e4804966bcb535bb13b000431cf] PUP.Optional.Trotux, C:\Users\Pascal BASTIEN\AppData\Roaming\Profiles\Nernegh.default\searchplugins\7awx6w0k.xml, En quarantaine, [1fa46d097c1e4cea654637b5cb39e818], PUP.Optional.Privoxy, C:\Windows\desktop-qepmb8r_020716\config.txt, En quarantaine, [f9cadf97a2f823138409228611f33cc4], PUP.Optional.Privoxy, C:\Windows\desktop-qepmb8r_020716\default.action, En quarantaine, [f9cadf97a2f823138409228611f33cc4], PUP.Optional.Privoxy, C:\Windows\desktop-qepmb8r_020716\default.filter, En quarantaine, [f9cadf97a2f823138409228611f33cc4], PUP.Optional.Privoxy, C:\Windows\desktop-qepmb8r_020716\Interop.SHDocVw.dll, En quarantaine, [f9cadf97a2f823138409228611f33cc4], PUP.Optional.Privoxy, C:\Windows\desktop-qepmb8r_020716\mgwz.dll, En quarantaine, [f9cadf97a2f823138409228611f33cc4], PUP.Optional.Privoxy, C:\Windows\desktop-qepmb8r_020716\netsafe.exe, En quarantaine, [f9cadf97a2f823138409228611f33cc4], PUP.Optional.Privoxy, C:\Windows\desktop-qepmb8r_020716\netsafe.exe.config, En quarantaine, [f9cadf97a2f823138409228611f33cc4], PUP.Optional.Privoxy, C:\Windows\desktop-qepmb8r_020716\oxy.exe, En quarantaine, [f9cadf97a2f823138409228611f33cc4], PUP.Optional.Privoxy, C:\Windows\desktop-qepmb8r_020716\oxy.log, En quarantaine, [f9cadf97a2f823138409228611f33cc4], PUP.Optional.Privoxy, C:\Windows\desktop-qepmb8r_020716\tbconfig.xml, En quarantaine, [f9cadf97a2f823138409228611f33cc4], PUP.Optional.Privoxy, C:\Windows\desktop-qepmb8r_020716\tbinfo.xml, En quarantaine, [f9cadf97a2f823138409228611f33cc4], PUP.Optional.Privoxy, C:\Windows\desktop-qepmb8r_020716\tblog.log, En quarantaine, [f9cadf97a2f823138409228611f33cc4], PUP.Optional.Privoxy, C:\Windows\desktop-qepmb8r_020716\Trackerbird.Tracker.dll, En quarantaine, [f9cadf97a2f823138409228611f33cc4], PUP.Optional.Privoxy, C:\Windows\desktop-qepmb8r_020716\Trackerbird.Tracker.xml, En quarantaine, [f9cadf97a2f823138409228611f33cc4], PUP.Optional.Privoxy, C:\Windows\desktop-qepmb8r_020716\Trackerbird.x64.dll, En quarantaine, [f9cadf97a2f823138409228611f33cc4], PUP.Optional.Privoxy, C:\Windows\desktop-qepmb8r_020716\Trackerbird.x86.dll, En quarantaine, [f9cadf97a2f823138409228611f33cc4], Secteurs physiques: 0 (Aucun élément malveillant détecté) (end)