Security-X

Forum Security-X => Sécurité Générale => Malwares => Discussion démarrée par: chantal11 le juillet 20, 2017, 15:16:11

Titre: Photor
Posté par: chantal11 le juillet 20, 2017, 15:16:11

Contenu republié avec la permission de Malwarebytes (https://forums.malwarebytes.org/index.php?showforum=39)

Photor est un Browser Hijacker (pirate de navigateur) qui modifie les paramètres du navigateur (page d’accueil , page de recherche, ....) afin de forcer la consultation du site ciblé et affiche aussi des publicités.
Photor s'installe depuis le Google Play Store.

• Affiche ces alertes pendant l'installation

(https://forums.malwarebytes.com/applications/core/interface/imageproxy/imageproxy.php?img=https://static-cdn.malwarebytes.org/pub_images/PhotorChrExt/warning1.png&key=fb71f172d8c24bffd7ccf8cc7011b83fa9b1fec69c0569d03660fe9b46f7dedc)

(https://forums.malwarebytes.com/applications/core/interface/imageproxy/imageproxy.php?img=https://static-cdn.malwarebytes.org/pub_images/PhotorChrExt/warning2.png&key=ae5bb0d9cb4c68147bc9d38d28c33d7b9c123d796767e56050f811bda90b2b62)

• S'installe en tant qu'extension/add-on du navigateur Chrome

(https://forums.malwarebytes.com/applications/core/interface/imageproxy/imageproxy.php?img=https://static-cdn.malwarebytes.org/pub_images/PhotorChrExt/warning5.png&key=7da1b149c6ca93f2f514a56340547594dece8657df43edbbe943b0a17c6007d6)

• Modifie le fond d'écran

(https://forums.malwarebytes.com/applications/core/interface/imageproxy/imageproxy.php?img=https://static-cdn.malwarebytes.org/pub_images/PhotorChrExt/website.png&key=e3a8f8ffdd89d192d4d02e637e341632264f03480cc070d75be537ca572e2bbf)

• Affiche cette page de démarrage en nouvel onglet

(https://forums.malwarebytes.com/applications/core/interface/imageproxy/imageproxy.php?img=https://static-cdn.malwarebytes.org/pub_images/PhotorChrExt/newtab.png&key=5e32384356157b443604e84c2d2aa7526f9b4ec0b55f4f24721d9d39d212e347)

**********

Détection de Photor dans des rapports FRST :

Citer

CHR DefaultSearchURL: Default -> hxxp://search.photorext.net/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> keyword.photor
CHR Extension: (Photor) - C:\Users\{Nom_Utilisateur}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago [2017-07-14]

**********

Détecté et traité par Malwarebytes en tant que PUP/LPI (Programme potentiellement Indésirable)
Sous la version Premium, Malwarebytes bloque le domaine photorext.net et l'IP 163.172.60.109

Citer

PUP.Optional.Photor

Citer

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 14
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images\weather-widget, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images\apps, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\icons, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\_metadata, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\fonts, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\data, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\html, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\css, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\js, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JNDEGKABFMFEAIDDOINFCMBDNDCDAAGO, Quarantined, [9532], [416193],1.0.2359

File: 78
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\css\font-awesome.min.css, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\css\newTab.css, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\css\weather.css, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\data\background.jpg, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\fonts\fontawesome-webfont.eot, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\fonts\fontawesome-webfont.svg, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\fonts\fontawesome-webfont.ttf, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\fonts\fontawesome-webfont.woff, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\fonts\fontawesome-webfont.woff2, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\fonts\FontAwesome.otf, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\fonts\OpenSans-Bold.ttf, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\fonts\OpenSans-Light.ttf, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\fonts\OpenSans-Regular.ttf, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\html\newTab.html, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\js\background.js, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\js\ga.js, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\js\jquery.min.js, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\js\newTab.js, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\js\tmpl.min.js, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\js\weatherDataParsers.js, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\icons\128.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\icons\16.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\icons\32.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\icons\48.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images\apps\facebook.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images\apps\google-drive.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images\apps\instagram.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images\apps\linkedin.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images\apps\pinterest.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images\apps\twitter.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images\apps\youtube.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images\weather-widget\humidity@2x.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images\weather-widget\pressure@2x.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images\weather-widget\sunrise@2x.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images\weather-widget\sunset@2x.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images\weather-widget\wind-sock.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images\arrow-bottom.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images\arrow-top.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\images\search-frst.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\09d-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\01d-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\01d-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\01n-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\01n-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\02d-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\02d-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\02n-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\02n-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\03d-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\03d-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\03n-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\03n-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\04d-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\04d-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\04n-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\04n-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\09d-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\09n-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\09n-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\10d-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\10d-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\10n-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\10n-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\11d-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\11d-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\11n-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\11n-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\13d-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\13d-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\13n-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\13n-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\50d-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\50d-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\50n-32px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\resources\w\50n-48px.png, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\_metadata\computed_hashes.json, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\_metadata\verified_contents.json, Quarantined, [9532], [416193],1.0.2359
PUP.Optional.Photor, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndegkabfmfeaiddoinfcmbdndcdaago\1.0.7_0\manifest.json, Quarantined, [9532], [416193],1.0.2359

Physical Sector: 0
(No malicious items detected)

Tutoriel d'utilisation Malwarebytes en images (https://forum.security-x.fr/tutoriels-317/tutoriel-malwarebytes-anti-malware-22723/)


Source : Removal instructions for Photor de Metallica - Malwarebytes Forums (https://forums.malwarebytes.com/topic/204351-removal-instructions-for-photor/)

---

Toujours infecté ? Une question avant de faire des manipulations ?

Venez poster un nouveau sujet dans ce forum : http://forum.security-x.fr/desinfections/  en prenant soin de suivre la procédure http://forum.security-x.fr/desinfections/procedure-preliminaire/