Auteur Sujet: Traffic Exchange  (Lu 12137 fois)

0 Membres et 1 Invité sur ce sujet

Hors ligne chantal11

  • Admin Formation
  • Mega Power Members
  • ****
  • Messages: 25130
    • Windows 10 - Windows 8 - Windows 7 - Windows Vista
Traffic Exchange
« le: novembre 01, 2016, 09:35:05 »
Contenu republié avec la permission de Malwarebytes

Traffic Exchange est un adware (logiciel publicitaire), qui affiche des publicités intempestives indépendantes des sites visités.


  •   S'installe en tant que programme, à l'insu de l'utilisateur ou parce qu'il n'a pas décoché les sponsors proposés lors de l'installation d'un logiciel gratuit légitime

  • Affiche ces alertes pendant l'installation

  • Crée ces tâches planifiées

  • Vend votre adresse e-mail à des tiers





**********

Détection de Traffic Exchange dans des rapports FRST :

Citer
Traffic Exchange (HKLM-x32\...\{438465C5-D78D-4958-B31D-60374B5042F4}) (Version: 1.11.0 - Microleaves)
Task: {280ADBDE-5EB6-49BE-838F-A0CA5EA6B0B1} - System32\Tasks\Traffic Exchange v2 OnGuard => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian-v2.exe [2016-10-25] (Microleaves LTD)
Task: {3EAF1F94-47E4-4719-BC2D-447E32F6BFA1} - System32\Tasks\Traffic Exchange => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian.exe [2016-08-17] (Microleaves LTD)
Task: {77AB9E48-F35B-4195-A085-5879719CBA12} - System32\Tasks\Online Application v2 Guard => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe [2016-10-24] (Microleaves LTD)
Task: {98AE2747-A69D-4404-9E30-36E74499D834} - System32\Tasks\Online Application Guard => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian.exe [2016-08-17] (Microleaves LTD)
Task: {9B774ABE-6D05-4493-9E05-A512CFC422BB} - System32\Tasks\Traffic Exchange v2 On Guard => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian-v2.exe [2016-10-25] (Microleaves LTD)
Task: {9F5595DB-DE9E-4DB0-B843-4CB5D34FE97E} - System32\Tasks\Traffic Exchange v2 OG => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian-v2.exe [2016-10-25] (Microleaves LTD)
Task: {A0C2DCD7-A3D6-4B68-BD57-7D6775D68AC8} - System32\Tasks\Traffic Exchange v2 Guard => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian-v2.exe [2016-10-25] (Microleaves LTD)
Task: {A2D255C7-F985-4441-99D3-5B9C7BB1BFB9} - System32\Tasks\Online Application => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian.exe [2016-08-17] (Microleaves LTD)
Task: {A88003DA-BFF1-45FF-B029-A75777DEE14F} - System32\Tasks\Online Application Guardian => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian.exe [2016-08-17] (Microleaves LTD)
Task: {AC6A091C-C748-4143-99E6-9A934C14CA48} - System32\Tasks\Online Application v2 => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe [2016-10-24] (Microleaves LTD)
Task: {BE88876E-498A-4786-809A-A96690564747} - System32\Tasks\Online Application v2 On Guard => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe [2016-10-24] (Microleaves LTD)
Task: {C091D867-24CA-4BF3-8812-1B327F3A4C69} - System32\Tasks\Traffic Exchange Guardian => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian.exe [2016-08-17] (Microleaves LTD)
Task: {C9579E4A-9A6F-4ED7-AFE9-F67205B1DF80} - System32\Tasks\Online Application v2 OG => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe [2016-10-24] (Microleaves LTD)
Task: {CBFAFC59-F2DB-4FB0-973F-81371F9985AD} - System32\Tasks\Traffic Exchange Updater => C:\Program Files (x86)\Microleaves\Traffic Exchange\Traffic Exchange Updater.exe [2016-10-25] (Microleaves)
Task: {CF53734E-18C8-4AE1-935C-D70D74304642} - System32\Tasks\Online Application Updater => C:\Program Files (x86)\Microleaves\Online.io Application\Online Application Updater.exe [2016-10-24] (Microleaves)
Task: {D83FF368-E450-4BAC-A436-02EF44E73CB1} - System32\Tasks\Traffic Exchange v2 Guardian => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian-v2.exe [2016-10-25] (Microleaves LTD)
Task: {E171F716-188D-443B-8535-D8FC141C3A8A} - System32\Tasks\Online Application v2 Guardian => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe [2016-10-24] (Microleaves LTD)
Task: {E6896CF2-42C6-4D0D-A01E-13390D6F4D3A} - System32\Tasks\Traffic Exchange v2 => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian-v2.exe [2016-10-25] (Microleaves LTD)
Task: {F93FBCD2-6ED2-4E83-B47C-1BB2ABC4E0E1} - System32\Tasks\Online Application v2 OnGuard => C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian-v2.exe [2016-10-24] (Microleaves LTD)
Task: {FB8A97BE-744C-48AA-8DC9-C2CE609F5F80} - System32\Tasks\Traffic Exchange Guard => C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian.exe [2016-08-17] (Microleaves LTD)

(Microleaves LTD) C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian-v2.exe
(Microleaves) C:\Microleaves\Online Application Installer\prerequisites\aipackagechainer.exe
(Microleaves) C:\Microleaves\Online Application Installer\prerequisites\Traffic Exchange.exe
(Microleaves LTD) C:\Program Files (x86)\Microleaves\Online.io Application\Online-Guardian.exe
C:\Windows\System32\Tasks\Online Application Updater
C:\Windows\System32\Tasks\Online Application v2 OnGuard
C:\Windows\System32\Tasks\Online Application v2 On Guard
C:\Windows\System32\Tasks\Online Application v2 OG
C:\Windows\System32\Tasks\Online Application v2 Guardian
C:\Windows\System32\Tasks\Online Application v2 Guard
C:\Windows\System32\Tasks\Online Application v2
C:\Windows\System32\Tasks\Online Application Guardian
C:\Windows\System32\Tasks\Online Application Guard
C:\Windows\System32\Tasks\Online Application
C:\Microleaves
C:\ProgramData\Microleaves
C:\Program Files (x86)\Microleaves
C:\Windows\System32\Tasks\Traffic Exchange Updater
C:\Windows\System32\Tasks\Traffic Exchange v2 OnGuard
C:\Windows\System32\Tasks\Traffic Exchange v2 On Guard
C:\Windows\System32\Tasks\Traffic Exchange v2 OG
C:\Windows\System32\Tasks\Traffic Exchange v2 Guardian
C:\Windows\System32\Tasks\Traffic Exchange v2 Guard
C:\Windows\System32\Tasks\Traffic Exchange v2
C:\Windows\System32\Tasks\Traffic Exchange Guardian
C:\Windows\System32\Tasks\Traffic Exchange Guard
C:\Windows\System32\Tasks\Traffic Exchange


**********

Détecté et traité par Malwarebytes en tant que PUP/LPI (Programme potentiellement Indésirable)

Citer
PUP.Optional.OnlineIO


Tutoriel d'utilisation Malwarebytes en images


Source : Removal instructions for Traffic Exchange de Metallica - Malwarebytes Forums



Toujours infecté ? Une question avant de faire des manipulations ?

Venez poster un nouveau sujet dans ce forum : http://forum.security-x.fr/desinfections/  en prenant soin de suivre la procédure http://forum.security-x.fr/desinfections/procedure-preliminaire/