Imprimer la page - WindowService

Forum Security-X => Sécurité Générale => Malwares => Discussion démarrée par: chantal11 le juillet 07, 2017, 14:41:39

Titre: WindowService
Posté par: chantal11 le juillet 07, 2017, 14:41:39

Contenu republié avec la permission de Malwarebytes (https://forums.malwarebytes.org/index.php?showforum=39)

WindowService est un Browser Hijacker NewTab (https://blog.malwarebytes.com/glossary/NewTab/) (pirate de navigateur nouvel onglet) qui modifie les paramètres du navigateur (page d’accueil , page de recherche, nouvel onglet ....) afin de forcer la consultation du site ciblé et affiche aussi des publicités.

S'installe en tant que programme, soit à l'insu de l'utilisateur ou parce qu'il n'a pas décoché les sponsors proposés lors de l'installation d'un logiciel gratuit légitime, soit depuis le site de l'éditeur

(https://forums.malwarebytes.com/applications/core/interface/imageproxy/imageproxy.php?img=https://static-cdn.malwarebytes.org/pub_images/WindowService/warning4.png&key=ada8bf59be106aa60ec0928f737e6348a2e1baf26b0189ba067f1e1bbfb37643)

Affiche cette alerte après l'installation

(https://forums.malwarebytes.com/applications/core/interface/imageproxy/imageproxy.php?img=https://static-cdn.malwarebytes.org/pub_images/WindowService/warning2.png&key=ba9949480d967dcb7c4573ba524742d0168fdd1e790286e09468e30771a95723)

Affiche la page search.mysearch.com comme nouvel onglet dans Google Chrome

(https://forums.malwarebytes.com/applications/core/interface/imageproxy/imageproxy.php?img=https://static-cdn.malwarebytes.org/pub_images/WindowService/warning1.png&key=bee3afd1818e6ae82af256c82eb814cad00750e54175700d58d4cc9b873faa8b)

**********

Détection de WindowService dans des rapports FRST :

Citer

MeOptimum_x86 (HKLM-x32\...\MeOptimum_x86) (Version: - )
() C:\Users\{Nom_Utilisateur}\AppData\Local\Temp\WS\mediatek_86.exe

CHR DefaultSearchURL: Default -> hxxp://search.mysearch.com/web?q={searchTerms}
CHR DefaultSearchKeyword: Default -> http://search.mysearch.com
CHR DefaultSuggestURL: Default -> hxxp://search.mysearch.com/ss?sstype=prefix&li=ff&q={searchTerms}
CHR Extension: (Screen Addict) - C:\Users\{Nom_Utilisateur}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh [2017-06-14]
CHR Extension: (Default) - C:\Users\{Nom_Utilisateur}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo [2017-06-14]
R2 mediatek_86; C:\Users\{Nom_Utilisateur}\AppData\Local\Temp\WS\mediatek_86.exe [51712 2017-06-14] () [File not signed]
C:\Users\{Nom_Utilisateur}\AppData\Local\Temp\FullVersion.exe

**********

Détecté et traité par Malwarebytes en tant que PUP/LPI (Programme potentiellement Indésirable)
Sous la version Premium, Malwarebytes bloque le domaine technows.ws et l'IP 104.27.172.74

Citer

PUP.Optional.WindowService
PUP.Optional.WebOptimum
PUP.Optional.MySearch

Citer

-Scan Details-
Process: 0
(No malicious items detected)

Module: 1
PUP.Optional.WindowService, C:\Users\{username}\AppData\Local\Temp\WS\mediatek_86.exe, Quarantined, [666], [407225],1.0.2148

Registry Key: 3
PUP.Optional.WindowService, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\mediatek_86, Delete-on-Reboot, [666], [407225],1.0.2148
PUP.Optional.WebOptimum, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{0187837F-FA61-437D-9647-EE1E86233276}, Delete-on-Reboot, [1535], [253742],1.0.2148
PUP.Optional.WebOptimum, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{CBB7A1EB-D3C4-45A9-A5C9-EFB40A22BF7E}, Delete-on-Reboot, [1535], [261889],1.0.2148

Registry Value: 1
PUP.Optional.WindowService, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\MEDIATEK_86|IMAGEPATH, Delete-on-Reboot, [666], [407227],1.0.2148

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 21
PUP.Optional.WindowService, C:\USERS\{username}\APPDATA\LOCAL\TEMP\WS, Delete-on-Reboot, [666], [407225],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\settings\partner, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\settings\common, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\content_script, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\_metadata, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\settings, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\common, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\newtab, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\revert, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\logo, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\HEIJCJDMCHJKFBEECKNPLHKCCLLDMNFH, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\settings\partner, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\settings\common, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\_metadata, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\settings, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\common, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\revert, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\logo, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\MPIGMNPGCADAFDJJLHABKKKACBHDENMO, Delete-on-Reboot, [522], [302503],1.0.2148

File: 57
PUP.Optional.WindowService, C:\USERS\{username}\APPDATA\LOCAL\TEMP\FULLVERSION.EXE, Delete-on-Reboot, [666], [407229],1.0.2148
PUP.Optional.WindowService, C:\USERS\{username}\APPDATA\LOCAL\TEMP\WS\ATI.EXE, Delete-on-Reboot, [666], [407225],1.0.2148
PUP.Optional.WindowService, C:\Users\{username}\AppData\Local\Temp\WS\128x128.png, Delete-on-Reboot, [666], [407225],1.0.2148
PUP.Optional.WindowService, C:\Users\{username}\AppData\Local\Temp\WS\amd64_86.exe, Delete-on-Reboot, [666], [407225],1.0.2148
PUP.Optional.WindowService, C:\Users\{username}\AppData\Local\Temp\WS\ati_upd.dll, Delete-on-Reboot, [666], [407225],1.0.2148
PUP.Optional.WindowService, C:\Users\{username}\AppData\Local\Temp\WS\mediatek_86.exe, Delete-on-Reboot, [666], [407225],1.0.2148
PUP.Optional.WindowService, C:\Users\{username}\AppData\Local\Temp\WS\mediatek_86.InstallLog, Delete-on-Reboot, [666], [407225],1.0.2148
PUP.Optional.WindowService, C:\Users\{username}\AppData\Local\Temp\WS\mediatek_86.InstallState, Delete-on-Reboot, [666], [407225],1.0.2148
PUP.Optional.WindowService, C:\Users\{username}\AppData\Local\Temp\WS\mediatek_86.lib.dll, Delete-on-Reboot, [666], [407225],1.0.2148
PUP.Optional.WindowService, C:\Users\{username}\AppData\Local\Temp\WS\Newtonsoft.Json.dll, Delete-on-Reboot, [666], [407225],1.0.2148
PUP.Optional.WindowService, C:\Users\{username}\AppData\Local\Temp\WS\Newtonsoft.Json.xml, Delete-on-Reboot, [666], [407225],1.0.2148
PUP.Optional.WindowService, C:\Users\{username}\AppData\Local\Temp\WS\NLog.config, Delete-on-Reboot, [666], [407225],1.0.2148
PUP.Optional.WindowService, C:\Users\{username}\AppData\Local\Temp\WS\NLog.dll, Delete-on-Reboot, [666], [407225],1.0.2148
PUP.Optional.WindowService, C:\Users\{username}\AppData\Local\Temp\WS\NLog.xml, Delete-on-Reboot, [666], [407225],1.0.2148
PUP.Optional.WindowService, C:\Users\{username}\AppData\Local\Temp\WS\state, Delete-on-Reboot, [666], [407225],1.0.2148
PUP.Optional.MySearch, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_search.mysearch.com_0.localstorage, Delete-on-Reboot, [522], [258608],1.0.2148
PUP.Optional.MySearch, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\HEIJCJDMCHJKFBEECKNPLHKCCLLDMNFH\29.7_0\MANIFEST.JSON, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\common\browseraction.js, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\common\config.js, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\common\feed.js, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\common\utils.js, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\common\winner.js, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\content_script\overlayer.js, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\logo\logo_128x.png, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\logo\logo_16x.png, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\logo\logo_19x.png, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\logo\logo_48x.png, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\newtab\newtab.html, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\revert\index.css, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\revert\index.html, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\revert\index.js, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\settings\common\redirect.js, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\settings\partner\Reporting.js, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\_metadata\computed_hashes.json, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\heijcjdmchjkfbeecknplhkcclldmnfh\29.7_0\_metadata\verified_contents.json, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\MPIGMNPGCADAFDJJLHABKKKACBHDENMO\28.4_0\MANIFEST.JSON, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\common\browseraction.js, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\common\config.js, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\common\feed.js, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\common\utils.js, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\common\winner.js, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\logo\logo_128x.png, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\logo\logo_16x.png, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\logo\logo_19x.png, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\logo\logo_24x.png, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\logo\logo_32x.png, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\logo\logo_48x.png, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\logo\newtablogo.png, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\logo\toolbar-icon-ask.ico, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\logo\toolbar-icons.png, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\revert\index.css, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\revert\index.html, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\revert\index.js, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\settings\common\redirect.js, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\settings\partner\Reporting.js, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\_metadata\computed_hashes.json, Delete-on-Reboot, [522], [302503],1.0.2148
PUP.Optional.MySearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpigmnpgcadafdjjlhabkkkacbhdenmo\28.4_0\_metadata\verified_contents.json, Delete-on-Reboot, [522], [302503],1.0.2148

Physical Sector: 0
(No malicious items detected)

Tutoriel d'utilisation Malwarebytes en images (https://forum.security-x.fr/tutoriels-317/tutoriel-malwarebytes-anti-malware-22723/)

Source : Removal instructions for WindowService de Metallica - Malwarebytes Forums (https://forums.malwarebytes.com/topic/202657-removal-instructions-for-windowservice/)

Toujours infecté ? Une question avant de faire des manipulations ?

Venez poster un nouveau sujet dans ce forum : http://forum.security-x.fr/desinfections/ en prenant soin de suivre la procédure http://forum.security-x.fr/desinfections/procedure-preliminaire/