Malwarebytes www.malwarebytes.com -Détails du journal- Date de l'analyse: 23/07/2019 Heure de l'analyse: 17:20 Fichier journal: 69e4da4a-ad5d-11e9-9137-b888e34f2b2e.json -Informations du logiciel- Version: 3.8.3.2965 Version de composants: 1.0.613 Version de pack de mise à jour: 1.0.11686 Licence: Gratuit -Informations système- Système d'exploitation: Windows 10 (Build 18362.239) Processeur: x64 Système de fichiers: NTFS Utilisateur: DESKTOP-6N4RTIV\Acer -Résumé de l'analyse- Type d'analyse: Analyse des menaces Analyse lancée par: Manuel Résultat: Terminé Objets analysés: 275583 Menaces détectées: 39 Menaces mises en quarantaine: 39 Temps écoulé: 4 min, 0 s -Options d'analyse- Mémoire: Activé Démarrage: Activé Système de fichiers: Activé Archives: Activé Rootkits: Désactivé Heuristique: Activé PUP: Détection PUM: Détection -Détails de l'analyse- Processus: 0 (Aucun élément malveillant détecté) Module: 0 (Aucun élément malveillant détecté) Clé du registre: 4 PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, En quarantaine, [241], [254683],1.0.11686 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}, En quarantaine, [241], [254683],1.0.11686 PUP.Optional.GoodGame, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Goodgame Empire0, En quarantaine, [3893], [597957],1.0.11686 PUP.Optional.PCVARK, HKLM\SOFTWARE\ZHJpdmVydG9uaWNzLmNvbQ==, En quarantaine, [468], [706567],1.0.11686 Valeur du registre: 4 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, En quarantaine, [241], [254683],1.0.11686 PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, En quarantaine, [241], [254683],1.0.11686 Adware.SearchEngineHijack, HKU\S-1-5-21-1788168121-4240513500-3771779065-1001\SOFTWARE\GOOGLE\CHROME\PREFERENCEMACS\Default\extensions.settings|cgnhhaeibaikooonokhpmolpnddcmngl, En quarantaine, [373], [460701],1.0.11686 Adware.SearchEngineHijack, HKU\S-1-5-21-1788168121-4240513500-3771779065-1001\SOFTWARE\GOOGLE\CHROME\PREFERENCEMACS\Default\extensions.settings|lofbbniamlfkiaokmndjecfhmnekgmfl, En quarantaine, [373], [460701],1.0.11686 Données du registre: 2 PUP.Optional.WinYahoo, HKU\S-1-5-21-1788168121-4240513500-3771779065-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Remplacé, [241], [707485],1.0.11686 PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Remplacé, [241], [707490],1.0.11686 Flux de données: 0 (Aucun élément malveillant détecté) Dossier: 3 PUP.Optional.Segurazo, C:\USERS\ACER\APPDATA\ROAMING\SEGURAZOUNINSTALLER, En quarantaine, [1511], [711380],1.0.11686 Adware.SearchEngineHijack, C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Extension Settings\cgnhhaeibaikooonokhpmolpnddcmngl, En quarantaine, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Extension Settings\lofbbniamlfkiaokmndjecfhmnekgmfl, En quarantaine, [373], [460701],1.0.11686 Fichier: 26 PUP.Optional.InstallCore.Generic, C:\$RECYCLE.BIN\S-1-5-21-1788168121-4240513500-3771779065-1001\$RFZTNSP.EXE, En quarantaine, [563], [512142],1.0.11686 PUP.Optional.OneSafePCCleaner, C:\USERS\ACER\DOWNLOADS\ONESAFE_PC_CLEANER (3).EXE, En quarantaine, [2761], [122326],1.0.11686 PUP.Optional.OneSafePCCleaner, C:\USERS\ACER\DOWNLOADS\ONESAFE_PC_CLEANER (1).EXE, En quarantaine, [2761], [122326],1.0.11686 PUP.Optional.OneSafePCCleaner, C:\USERS\ACER\DOWNLOADS\ONESAFE_PC_CLEANER (2).EXE, En quarantaine, [2761], [122326],1.0.11686 PUP.Optional.OneSafePCCleaner, C:\USERS\ACER\DOWNLOADS\ONESAFE_PC_CLEANER.EXE, En quarantaine, [2761], [122326],1.0.11686 PUP.Optional.OneSafePCCleaner, C:\USERS\ACER\DOWNLOADS\ONESAFE_PC_CLEANER (5).EXE, En quarantaine, [2761], [122326],1.0.11686 PUP.Optional.OneSafePCCleaner, C:\USERS\ACER\DOWNLOADS\ONESAFE_PC_CLEANER (4).EXE, En quarantaine, [2761], [122326],1.0.11686 Adware.SearchEngineHijack, C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\cgnhhaeibaikooonokhpmolpnddcmngl\000003.log, En quarantaine, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\cgnhhaeibaikooonokhpmolpnddcmngl\CURRENT, En quarantaine, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\cgnhhaeibaikooonokhpmolpnddcmngl\LOCK, En quarantaine, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\cgnhhaeibaikooonokhpmolpnddcmngl\LOG, En quarantaine, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\cgnhhaeibaikooonokhpmolpnddcmngl\LOG.old, En quarantaine, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\cgnhhaeibaikooonokhpmolpnddcmngl\MANIFEST-000001, En quarantaine, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Remplacé, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Remplacé, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Remplacé, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\lofbbniamlfkiaokmndjecfhmnekgmfl\000003.log, En quarantaine, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\lofbbniamlfkiaokmndjecfhmnekgmfl\CURRENT, En quarantaine, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\lofbbniamlfkiaokmndjecfhmnekgmfl\LOCK, En quarantaine, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\lofbbniamlfkiaokmndjecfhmnekgmfl\LOG, En quarantaine, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\lofbbniamlfkiaokmndjecfhmnekgmfl\LOG.old, En quarantaine, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\lofbbniamlfkiaokmndjecfhmnekgmfl\MANIFEST-000001, En quarantaine, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Remplacé, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Remplacé, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Remplacé, [373], [460701],1.0.11686 Adware.SearchEngineHijack, C:\USERS\ACER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Remplacé, [373], [460701],1.0.11686 Secteur physique: 0 (Aucun élément malveillant détecté) WMI: 0 (Aucun élément malveillant détecté) (end)