Contenu republié avec la permission de Malwarebytes (https://forums.malwarebytes.org/index.php?showforum=39)
dazzled est un Browser Hijacker (pirate de navigateur) qui modifie les paramètres du navigateur (page d’accueil , page de recherche, ....) afin de forcer la consultation du site ciblé et affiche aussi des publicités.
dazzled est une extension imposée de Chrome.
**********
Détection de dazzled dans des rapports FRST :
CHR Extension: (dazzled) - C:\Users\{Nom_Utilisateur}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab [2017-07-20]
**********
Détecté et traité par Malwarebytes en tant que Rogue
Rogue.ForcedExtension
-Scan Details-
Process: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registry Key: 0
(No malicious items detected)
Registry Value: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Data Stream: 0
(No malicious items detected)
Folder: 5
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\_metadata, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\css, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\js, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\AKACAAHOHFBBDGGLKAHHNOBEIGDECIAB, Quarantined, [812], [418002],1.0.2402
File: 11
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\css\srchoff.png, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\css\srchon.png, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\css\style.css, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\js\jq.js, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\js\script.js, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\_metadata\computed_hashes.json, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\_metadata\verified_contents.json, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\bgixder.png, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\bgixder.src.min.js, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\manifest.json, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\options.html, Quarantined, [812], [418002],1.0.2402
Physical Sector: 0
(No malicious items detected)
Tutoriel d'utilisation Malwarebytes en images (https://forum.security-x.fr/tutoriels-317/tutoriel-malwarebytes-anti-malware-22723/)
Source : Removal instructions for dazzled de Metallica - Malwarebytes Forums (https://forums.malwarebytes.com/topic/205115-removal-instructions-for-dazzled/)
Toujours infecté ? Une question avant de faire des manipulations ?
Venez poster un nouveau sujet dans ce forum : http://forum.security-x.fr/desinfections/ en prenant soin de suivre la procédure http://forum.security-x.fr/desinfections/procedure-preliminaire/