Contenu republié avec la permission de Malwarebytes (https://forums.malwarebytes.org/index.php?showforum=39)
Traffic Exchange est un adware (logiciel publicitaire), qui affiche des publicités intempestives indépendantes des sites visités.
- S'installe en tant que programme, à l'insu de l'utilisateur ou parce qu'il n'a pas décoché les sponsors proposés lors de l'installation d'un logiciel gratuit légitime
(https://forums.malwarebytes.org/applications/core/interface/imageproxy/imageproxy.php?img=http://static-cdn.malwarebytes.org/pub_images/TrafficExchange/warning4.png&key=f98aad438368298bd7d27bf70c02b5d7b2443f10de1688c541672bdf033c6d6e)
- Affiche ces alertes pendant l'installation
(https://forums.malwarebytes.org/applications/core/interface/imageproxy/imageproxy.php?img=http://static-cdn.malwarebytes.org/pub_images/TrafficExchange/warning1.png&key=e2bd1544af0213fd896c601c7be07f4866cadb9f5126b67c670f563a89b88fc0)
- Crée ces tâches planifiées
(https://forums.malwarebytes.org/applications/core/interface/imageproxy/imageproxy.php?img=http://static-cdn.malwarebytes.org/pub_images/TrafficExchange/warning3.png&key=17392be601659514a89df9b22ded5faa601543908ce634ac325e9ba23097ac3f)
- Vend votre adresse e-mail à des tiers
(https://forums.malwarebytes.org/applications/core/interface/imageproxy/imageproxy.php?img=http://static-cdn.malwarebytes.org/pub_images/TrafficExchange/warning2.png&key=3eb92bf16873349495ce50e7fecabb9cf63d238fa1a3d35e8ad6d6ad0363548c)
**********
Détection de Traffic Exchange dans des rapports FRST :
Traffic Exchange (HKLM-x32\...\{438465C5-D78D-4958-B31D-60374B5042F4}) (Version: 1.11.0 - Microleaves)
Task: {280ADBDE-5EB6-49BE-838F-A0CA5EA6B0B1} - System32\Tasks\Traffic Exchange v2 OnGuard => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian-v2.exe [2016-10-25] (Microleaves LTD)
Task: {3EAF1F94-47E4-4719-BC2D-447E32F6BFA1} - System32\Tasks\Traffic Exchange => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian.exe [2016-08-17] (Microleaves LTD)
Task: {77AB9E48-F35B-4195-A085-5879719CBA12} - System32\Tasks\Online Application v2 Guard => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe [2016-10-24] (Microleaves LTD)
Task: {98AE2747-A69D-4404-9E30-36E74499D834} - System32\Tasks\Online Application Guard => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian.exe [2016-08-17] (Microleaves LTD)
Task: {9B774ABE-6D05-4493-9E05-A512CFC422BB} - System32\Tasks\Traffic Exchange v2 On Guard => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian-v2.exe [2016-10-25] (Microleaves LTD)
Task: {9F5595DB-DE9E-4DB0-B843-4CB5D34FE97E} - System32\Tasks\Traffic Exchange v2 OG => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian-v2.exe [2016-10-25] (Microleaves LTD)
Task: {A0C2DCD7-A3D6-4B68-BD57-7D6775D68AC8} - System32\Tasks\Traffic Exchange v2 Guard => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian-v2.exe [2016-10-25] (Microleaves LTD)
Task: {A2D255C7-F985-4441-99D3-5B9C7BB1BFB9} - System32\Tasks\Online Application => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian.exe [2016-08-17] (Microleaves LTD)
Task: {A88003DA-BFF1-45FF-B029-A75777DEE14F} - System32\Tasks\Online Application Guardian => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian.exe [2016-08-17] (Microleaves LTD)
Task: {AC6A091C-C748-4143-99E6-9A934C14CA48} - System32\Tasks\Online Application v2 => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe [2016-10-24] (Microleaves LTD)
Task: {BE88876E-498A-4786-809A-A96690564747} - System32\Tasks\Online Application v2 On Guard => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe [2016-10-24] (Microleaves LTD)
Task: {C091D867-24CA-4BF3-8812-1B327F3A4C69} - System32\Tasks\Traffic Exchange Guardian => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian.exe [2016-08-17] (Microleaves LTD)
Task: {C9579E4A-9A6F-4ED7-AFE9-F67205B1DF80} - System32\Tasks\Online Application v2 OG => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe [2016-10-24] (Microleaves LTD)
Task: {CBFAFC59-F2DB-4FB0-973F-81371F9985AD} - System32\Tasks\Traffic Exchange Updater => C:\Program Files (x86)\Microleaves\Traffic Exchange\Traffic Exchange Updater.exe [2016-10-25] (Microleaves)
Task: {CF53734E-18C8-4AE1-935C-D70D74304642} - System32\Tasks\Online Application Updater => C:\Program Files (x86)\Microleaves\Online.io Application\Online Application Updater.exe [2016-10-24] (Microleaves)
Task: {D83FF368-E450-4BAC-A436-02EF44E73CB1} - System32\Tasks\Traffic Exchange v2 Guardian => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian-v2.exe [2016-10-25] (Microleaves LTD)
Task: {E171F716-188D-443B-8535-D8FC141C3A8A} - System32\Tasks\Online Application v2 Guardian => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe [2016-10-24] (Microleaves LTD)
Task: {E6896CF2-42C6-4D0D-A01E-13390D6F4D3A} - System32\Tasks\Traffic Exchange v2 => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian-v2.exe [2016-10-25] (Microleaves LTD)
Task: {F93FBCD2-6ED2-4E83-B47C-1BB2ABC4E0E1} - System32\Tasks\Online Application v2 OnGuard => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe [2016-10-24] (Microleaves LTD)
Task: {FB8A97BE-744C-48AA-8DC9-C2CE609F5F80} - System32\Tasks\Traffic Exchange Guard => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian.exe [2016-08-17] (Microleaves LTD)
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian-v2.exe
(Microleaves) C:\Microleaves\Online Application Installer\prerequisites\aipackagechainer.exe
(Microleaves) C:\Microleaves\Online Application Installer\prerequisites\Traffic Exchange.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian.exe
C:\Windows\System32\Tasks\Online Application Updater
C:\Windows\System32\Tasks\Online Application v2 OnGuard
C:\Windows\System32\Tasks\Online Application v2 On Guard
C:\Windows\System32\Tasks\Online Application v2 OG
C:\Windows\System32\Tasks\Online Application v2 Guardian
C:\Windows\System32\Tasks\Online Application v2 Guard
C:\Windows\System32\Tasks\Online Application v2
C:\Windows\System32\Tasks\Online Application Guardian
C:\Windows\System32\Tasks\Online Application Guard
C:\Windows\System32\Tasks\Online Application
C:\Microleaves
C:\ProgramData\Microleaves
C:\Program Files (x86)\Microleaves
C:\Windows\System32\Tasks\Traffic Exchange Updater
C:\Windows\System32\Tasks\Traffic Exchange v2 OnGuard
C:\Windows\System32\Tasks\Traffic Exchange v2 On Guard
C:\Windows\System32\Tasks\Traffic Exchange v2 OG
C:\Windows\System32\Tasks\Traffic Exchange v2 Guardian
C:\Windows\System32\Tasks\Traffic Exchange v2 Guard
C:\Windows\System32\Tasks\Traffic Exchange v2
C:\Windows\System32\Tasks\Traffic Exchange Guardian
C:\Windows\System32\Tasks\Traffic Exchange Guard
C:\Windows\System32\Tasks\Traffic Exchange
**********
Détecté et traité par Malwarebytes en tant que PUP/LPI (Programme potentiellement Indésirable)
PUP.Optional.OnlineIO
Tutoriel d'utilisation Malwarebytes en images (http://forum.security-x.fr/tutoriels-317/tutoriel-malwarebytes-anti-malware-version-2/)
Source : Removal instructions for Traffic Exchange de Metallica - Malwarebytes Forums (https://forums.malwarebytes.org/topic/189988-removal-instructions-for-traffic-exchange/)
Toujours infecté ? Une question avant de faire des manipulations ?
Venez poster un nouveau sujet dans ce forum : http://forum.security-x.fr/desinfections/ en prenant soin de suivre la procédure http://forum.security-x.fr/desinfections/procedure-preliminaire/