dazzled

[chantal11]

Contenu republié avec la permission de Malwarebytes

dazzled est un Browser Hijacker (pirate de navigateur) qui modifie les paramètres du navigateur (page d’accueil , page de recherche, ....) afin de forcer la consultation du site ciblé et affiche aussi des publicités.
dazzled est une extension imposée de Chrome.







**********

Détection de dazzled dans des rapports FRST :

CHR Extension: (dazzled) - C:\Users\{Nom_Utilisateur}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab [2017-07-20]

**********

Détecté et traité par Malwarebytes en tant que Rogue

Rogue.ForcedExtension

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 5
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\_metadata, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\css, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\js, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\AKACAAHOHFBBDGGLKAHHNOBEIGDECIAB, Quarantined, [812], [418002],1.0.2402

File: 11
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\css\srchoff.png, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\css\srchon.png, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\css\style.css, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\js\jq.js, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\js\script.js, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\_metadata\computed_hashes.json, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\_metadata\verified_contents.json, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\bgixder.png, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\bgixder.src.min.js, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\manifest.json, Quarantined, [812], [418002],1.0.2402
Rogue.ForcedExtension, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\akacaahohfbbdgglkahhnobeigdeciab\0.3.0_0\options.html, Quarantined, [812], [418002],1.0.2402

Physical Sector: 0
(No malicious items detected)

Tutoriel d'utilisation Malwarebytes en images


Source : Removal instructions for dazzled de Metallica - Malwarebytes Forums

Toujours infecté ? Une question avant de faire des manipulations ?

Venez poster un nouveau sujet dans ce forum : http://forum.security-x.fr/desinfections/  en prenant soin de suivre la procédure http://forum.security-x.fr/desinfections/procedure-preliminaire/