# AdwCleaner v6.046 - Rapport créé le 11/05/2017 à 08:47:06 # Mis à jour le 24/04/2017 par Malwarebytes # Base de données : 2017-05-08.1 [Locale] # Système d'exploitation : Windows 10 Home (X64) # Nom d'utilisateur : pro - SYLVAIN # Exécuté depuis : C:\Users\pro\Desktop\adwcleaner_6.046.exe # Mode: Scan # Support : https://www.malwarebytes.com/support ***** [ Services ] ***** Aucun service malveillant trouvé. ***** [ Dossiers ] ***** Dossier trouvé: C:\ProgramData\157f284c Dossier trouvé: C:\ProgramData\24f7e318-2195-1 Dossier trouvé: C:\ProgramData\24f7e318-4743-0 Dossier trouvé: C:\ProgramData\7775cdac-36a3-1 Dossier trouvé: C:\ProgramData\7775cdac-49f7-0 Dossier trouvé: C:\ProgramData\7775cdac-6715-0 Dossier trouvé: C:\ProgramData\{471e0fc5-312c-1} Dossier trouvé: C:\ProgramData\{5bdf3a39-212c-1} Dossier trouvé: C:\ProgramData\{5be02f3a-712c-0} Dossier trouvé: C:\Users\pro\AppData\Roaming\cacaoweb Dossier trouvé: C:\Users\pro\AppData\Roaming\SafetyBrowsing Dossier trouvé: C:\Users\pro\AppData\Roaming\Microsoft\Windows\Start Menu\ByteFence Dossier trouvé: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Cleaner llc Dossier trouvé: C:\Program Files (x86)\Security Cleaner llc ***** [ Fichiers ] ***** Fichier trouvé: C:\WINDOWS\Reimage.ini ***** [ DLL ] ***** Aucune DLL patchée trouvée. ***** [ WMI ] ***** Aucune clé malveillante trouvée. ***** [ Raccourcis ] ***** Aucun raccourci infecté trouvé. ***** [ Tâches planifiées ] ***** Aucune tâche malveillante trouvée. ***** [ Registre ] ***** Clé trouvée: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\SafetyBrowsingService Clé trouvée: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\SafetyBrowsingService Clé trouvée: HKLM\SOFTWARE\Classes\protector_dll.Protector Clé trouvée: HKLM\SOFTWARE\Classes\protector_dll.Protector.1 Clé trouvée: HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib Clé trouvée: HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1 Clé trouvée: [x64] HKLM\SOFTWARE\Classes\protector_dll.Protector Clé trouvée: [x64] HKLM\SOFTWARE\Classes\protector_dll.Protector.1 Clé trouvée: [x64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib Clé trouvée: [x64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1 Clé trouvée: HKU\.DEFAULT\Software\ByteFence Clé trouvée: HKU\S-1-5-21-1817580383-1317029755-1127610557-1001\Software\cacaoweb Clé trouvée: HKU\S-1-5-21-1817580383-1317029755-1127610557-1001\Software\CoinisRevShare Clé trouvée: HKU\S-1-5-21-1817580383-1317029755-1127610557-1001\Software\PRODUCTSETUP Clé trouvée: HKU\S-1-5-21-1817580383-1317029755-1127610557-1001\Software\Safety Browsing Clé trouvée: HKU\S-1-5-21-1817580383-1317029755-1127610557-1001\Software\csastats Clé trouvée: HKU\S-1-5-18\Software\ByteFence Clé trouvée: HKCU\Software\cacaoweb Clé trouvée: HKCU\Software\CoinisRevShare Clé trouvée: HKCU\Software\PRODUCTSETUP Clé trouvée: HKCU\Software\Safety Browsing Clé trouvée: HKCU\Software\csastats Clé trouvée: [x64] HKCU\Software\cacaoweb Clé trouvée: [x64] HKCU\Software\CoinisRevShare Clé trouvée: [x64] HKCU\Software\PRODUCTSETUP Clé trouvée: [x64] HKCU\Software\Safety Browsing Clé trouvée: [x64] HKCU\Software\csastats Clé trouvée: [x64] HKLM\SOFTWARE\Safety Browsing Clé trouvée: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564 Clé trouvée: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Safety Browsing Clé trouvée: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Security Cleaner llc System Optimizer Donnée trouvée: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://fr-recherche.com/?q= Donnée trouvée: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://fr-recherche.com/?q= Clé trouvée: HKU\S-1-5-21-1817580383-1317029755-1127610557-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Donnée trouvée: HKU\S-1-5-21-1817580383-1317029755-1127610557-1001\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - Clé trouvée: HKU\S-1-5-21-1817580383-1317029755-1127610557-1001\Software\Microsoft\Internet Explorer\SearchScopes\{6586d803-df30-46d3-a89a-4136c8571d45} Clé trouvée: HKU\S-1-5-21-1817580383-1317029755-1127610557-1001\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Clé trouvée: HKU\S-1-5-21-1817580383-1317029755-1127610557-1001\Software\Microsoft\Internet Explorer\SearchScopes\{DEDDEE94-6A63-4F71-82D9-96B379CB641B} Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Donnée trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6586d803-df30-46d3-a89a-4136c8571d45} Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{DEDDEE94-6A63-4F71-82D9-96B379CB641B} Clé trouvée: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Donnée trouvée: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - Clé trouvée: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6586d803-df30-46d3-a89a-4136c8571d45} Clé trouvée: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Clé trouvée: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{DEDDEE94-6A63-4F71-82D9-96B379CB641B} Clé trouvée: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2f23ab71-4ac6-41f2-a955-ea576e553146} Clé trouvée: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6586d803-df30-46d3-a89a-4136c8571d45} Clé trouvée: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Donnée trouvée: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - Clé trouvée: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\cmptch.com Clé trouvée: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.cmptch.com Clé trouvée: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\utop.it Clé trouvée: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\cmptch.com Clé trouvée: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\static.cmptch.com Clé trouvée: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\utop.it Clé trouvée: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\cmptch.com Clé trouvée: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.cmptch.c Clé trouvée: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\utop.it Clé trouvée: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\cmptch.com Clé trouvée: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\static.cmptch.com Clé trouvée: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\utop.it Valeur trouvée: HKU\S-1-5-21-1817580383-1317029755-1127610557-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [cacaoweb] Clé trouvée: HKLM\SOFTWARE\MICROSOFT\SYSTEMCERTIFICATES\ROOT\CERTIFICATES\26D9E607FFF0C58C7844B47FF8B6E079E5A2220E ***** [ Navigateurs web ] ***** Aucune préférence Firefox malveillante trouvée. Aucune préférence Chromium malveillante trouvée. ************************* C:\AdwCleaner\AdwCleaner[C0].txt - [13391 octets] - [09/05/2017 20:19:04] C:\AdwCleaner\AdwCleaner[C2].txt - [1224 octets] - [10/05/2017 14:09:30] C:\AdwCleaner\AdwCleaner[C3].txt - [1715 octets] - [10/05/2017 14:45:41] C:\AdwCleaner\AdwCleaner[S0].txt - [12761 octets] - [09/05/2017 20:16:31] C:\AdwCleaner\AdwCleaner[S1].txt - [1414 octets] - [10/05/2017 14:09:15] C:\AdwCleaner\AdwCleaner[S2].txt - [1562 octets] - [10/05/2017 14:43:02] C:\AdwCleaner\AdwCleaner[S3].txt - [9685 octets] - [11/05/2017 08:47:06] ########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [9759 octets] ##########