Malwarebytes www.malwarebytes.com -Détails du journal- Date de l'analyse: 21/02/2018 Heure de l'analyse: 22:40 Fichier journal: ce72dc0a-174f-11e8-8d65-e89a8ff8aa50.json Administrateur: Non -Informations du logiciel- Version: 3.3.1.2183 Version de composants: 1.0.262 Version de pack de mise à jour: 1.0.4036 Licence: Gratuit -Informations système- Système d'exploitation: Windows 7 Service Pack 1 Processeur: x64 Système de fichiers: NTFS Utilisateur: Christiane-PC\Mon compte -Résumé de l'analyse- Type d'analyse: Analyse des menaces Résultat: Terminé Objets analysés: 332862 Menaces détectées: 51 Menaces mises en quarantaine: 51 Temps écoulé: 8 min, 46 s -Options d'analyse- Mémoire: Activé Démarrage: Activé Système de fichiers: Activé Archives: Activé Rootkits: Désactivé Heuristique: Activé PUP: Détection PUM: Détection -Détails de l'analyse- Processus: 0 (Aucun élément malveillant détecté) Module: 0 (Aucun élément malveillant détecté) Clé du registre: 15 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Yahoo! Powered datar, En quarantaine, [57], [308969],1.0.4036 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{3B1DA38B-7EEC-48AD-96B5-078BD9B79F35}, En quarantaine, [57], [308969],1.0.4036 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{3B1DA38B-7EEC-48AD-96B5-078BD9B79F35}, En quarantaine, [57], [308969],1.0.4036 PUP.Optional.WinYahoo.TskLnk, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Yahoo! Powered datar, En quarantaine, [483], [-1],0.0.0 PUP.Optional.WinYahoo.TskLnk, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3B1DA38B-7EEC-48AD-96B5-078BD9B79F35}, En quarantaine, [483], [-1],0.0.0 PUP.Optional.WinYahoo.TskLnk, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3B1DA38B-7EEC-48AD-96B5-078BD9B79F35}, En quarantaine, [483], [-1],0.0.0 PUP.Optional.WinYahoo, HKU\S-1-5-21-1667121263-4263940445-3353855160-1286\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, En quarantaine, [57], [182757],1.0.4036 PUP.Optional.WinYahoo, HKU\S-1-5-21-1667121263-4263940445-3353855160-1000\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, En quarantaine, [57], [182757],1.0.4036 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, En quarantaine, [57], [182757],1.0.4036 PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, En quarantaine, [57], [182757],1.0.4036 PUP.Optional.WinYahoo, HKU\S-1-5-21-1667121263-4263940445-3353855160-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}, En quarantaine, [57], [182757],1.0.4036 PUP.Optional.WinYahoo, HKU\S-1-5-21-1667121263-4263940445-3353855160-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2F23AB71-4AC6-41F2-A955-EA576E553146}, En quarantaine, [57], [182758],1.0.4036 PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2F23AB71-4AC6-41F2-A955-EA576E553146}, En quarantaine, [57], [182758],1.0.4036 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2f23ab71-4ac6-41f2-a955-ea576e553146}, En quarantaine, [57], [182758],1.0.4036 PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{97CF7F0F-C74F-AE8F-76CF-DE0FA64F0D8F}, En quarantaine, [57], [302717],1.0.4036 Valeur du registre: 4 PUP.Optional.WinYahoo, HKU\S-1-5-21-1667121263-4263940445-3353855160-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, En quarantaine, [57], [182757],1.0.4036 PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, En quarantaine, [57], [182758],1.0.4036 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2f23ab71-4ac6-41f2-a955-ea576e553146}|URL, En quarantaine, [57], [182758],1.0.4036 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{3B1DA38B-7EEC-48AD-96B5-078BD9B79F35}|PATH, En quarantaine, [57], [308967],1.0.4036 Données du registre: 3 PUP.Optional.WinYahoo, HKU\S-1-5-21-1667121263-4263940445-3353855160-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Remplacé, [57], [293459],1.0.4036 PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Remplacé, [57], [293461],1.0.4036 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Remplacé, [57], [293461],1.0.4036 Flux de données: 0 (Aucun élément malveillant détecté) Dossier: 3 PUP.Optional.WinYahoo.TskLnk, C:\PROGRAMDATA\{4A188F7B-C05A-05BD-469C-9BFFDCDE1031}, En quarantaine, [483], [453921],1.0.4036 PUP.Optional.WinYahoo, C:\Users\Mon compte\AppData\Local\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\HowToRemove, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.WinYahoo, C:\USERS\MON COMPTE\APPDATA\LOCAL\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}, En quarantaine, [57], [302717],1.0.4036 Fichier: 26 PUP.Optional.WinYahoo, C:\WINDOWS\TASKS\Yahoo! Powered datar.job, En quarantaine, [57], [308966],1.0.4036 PUP.Optional.WinYahoo, C:\WINDOWS\SYSTEM32\TASKS\Yahoo! Powered datar, En quarantaine, [57], [308969],1.0.4036 PUP.Optional.WinYahoo.TskLnk, C:\PROGRAMDATA\{4A188F7B-C05A-05BD-469C-9BFFDCDE1031}\ladi.txt, En quarantaine, [483], [453921],1.0.4036 PUP.Optional.WinYahoo.TskLnk, C:\ProgramData\{4A188F7B-C05A-05BD-469C-9BFFDCDE1031}\hdat1, En quarantaine, [483], [453921],1.0.4036 PUP.Optional.WinYahoo.TskLnk, C:\ProgramData\{4A188F7B-C05A-05BD-469C-9BFFDCDE1031}\hdat2, En quarantaine, [483], [453921],1.0.4036 PUP.Optional.WinYahoo.TskLnk, C:\WINDOWS\SYSTEM32\TASKS\Yahoo! Powered datar, En quarantaine, [483], [-1],0.0.0 PUP.Optional.WinYahoo, C:\USERS\CHRISTIANE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\XP7Y20IA.DEFAULT\PREFS.JS, Remplacé, [57], [303324],1.0.4036 PUP.Optional.WinYahoo, C:\USERS\MON COMPTE\APPDATA\LOCAL\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\HOWTOREMOVE\HOWTOREMOVE.HTML, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.WinYahoo, C:\Users\Mon compte\AppData\Local\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\HowToRemove\chromium-min.jpg, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.WinYahoo, C:\Users\Mon compte\AppData\Local\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\HowToRemove\control panel-min-min.JPG, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.WinYahoo, C:\Users\Mon compte\AppData\Local\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\HowToRemove\down.png, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.WinYahoo, C:\Users\Mon compte\AppData\Local\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\HowToRemove\ff menu.JPG, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.WinYahoo, C:\Users\Mon compte\AppData\Local\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\HowToRemove\ff search engine-min.png, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.WinYahoo, C:\Users\Mon compte\AppData\Local\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\HowToRemove\hp-min ff.png, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.WinYahoo, C:\Users\Mon compte\AppData\Local\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\HowToRemove\hp-min ie.png, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.WinYahoo, C:\Users\Mon compte\AppData\Local\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\HowToRemove\search engine.gif, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.WinYahoo, C:\Users\Mon compte\AppData\Local\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\HowToRemove\setup pages.gif, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.WinYahoo, C:\Users\Mon compte\AppData\Local\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\HowToRemove\sp-min.png, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.WinYahoo, C:\Users\Mon compte\AppData\Local\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\HowToRemove\start-min.jpg, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.WinYahoo, C:\Users\Mon compte\AppData\Local\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\HowToRemove\up.png, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.WinYahoo, C:\Users\Mon compte\AppData\Local\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\cimedicat, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.WinYahoo, C:\Users\Mon compte\AppData\Local\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\nacaroci, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.WinYahoo, C:\Users\Mon compte\AppData\Local\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\uninst.exe, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.WinYahoo, C:\Users\Mon compte\AppData\Local\{235A1506-07F2-79BE-6A6A-5C564E02A0CE}\uninstp.dat, En quarantaine, [57], [302717],1.0.4036 PUP.Optional.InstallCore, C:\$RECYCLE.BIN\S-1-5-21-1667121263-4263940445-3353855160-1003\$RXSSPNY.EXE, En quarantaine, [2], [472720],1.0.4036 PUP.Optional.ByteFence, C:\USERS\CHRISTIANE\APPDATA\LOCAL\TEMP\TMPSEC8192684\BYTEFENCE-INSTALLER-3.18.0.0.EXE, En quarantaine, [585], [389016],1.0.4036 Secteur physique: 0 (Aucun élément malveillant détecté) (end)