Easy PC Optimizer - Malwares

Forum Security-X > Malwares

Easy PC Optimizer

(1/1)

chantal11:
Contenu republié avec la permission de Malwarebytes
Easy PC Optimizer est un faux nettoyeur/optimiseur, affiche intentionnellement des faux-positifs pour convaincre l'utilisateur que son système a des problèmes et lui faire acheter le logiciel.
Plus d'infos : Registry Cleaners: Digital Snake Oil | Malwarebytes Labs

[*] S'installe en tant que programme, soit à l'insu de l'utilisateur ou parce qu'il n'a pas décoché les sponsors proposés lors de l'installation d'un logiciel gratuit légitime, soit depuis le site de l'éditeur

[*] Affiche ces alertes pendant l'installation

[*] Affiche ces écrans pendant les opérations

[*] Crée cette icône dans la Barre des tâches, sur le Bureau et dans le Menu Démarrer

[*] Crée ces tâches planifiées
[/list]

**********

Détection de Easy PC Optimizer dans des rapports FRST :

--- Citer ---Easy PC Optimizer (HKLM-x32\...\Easy PC Optimizer_is1) (Version: 1.6.1.207 - WebMinds, Inc.)
Task: {80EBACE7-F5E2-4384-B5EB-E2A09E9E45D2} - System32\Tasks\Easy PC Optimizer - Run without UAC => C:\Program Files (x86)\Easy PC Optimizer\EPIC.exe [2017-03-28] (WebMinds, Inc)
Task: {81DDD0D7-BB32-4EE7-A7E5-915C3EFFF87D} - System32\Tasks\Easy PC Optimizer Scheduled Scan - {Nom_Utilisateur} => C:\Program Files (x86)\Easy PC Optimizer\EPIC.exe [2017-03-28] (WebMinds, Inc)
Task: {FB616293-533A-43D8-823D-BC4B35174601} - System32\Tasks\Easy PC Optimizer - Background Scanning => C:\Program Files (x86)\Easy PC Optimizer\EPIC.exe [2017-03-28] (WebMinds, Inc)
Task: C:\Windows\Tasks\Easy PC Optimizer Scheduled Scan - {Nom_Utilisateur}.job => C:\Program Files (x86)\Easy PC Optimizer\EPIC.exe

(WebMinds, Inc) C:\Program Files (x86)\Easy PC Optimizer\EPIC.exe
C:\Windows\System32\Tasks\Easy PC Optimizer Scheduled Scan - {Nom_Utilisateur}
C:\Windows\Tasks\Easy PC Optimizer Scheduled Scan - {Nom_Utilisateur}.job
C:\Windows\System32\Tasks\Easy PC Optimizer - Background Scanning
C:\Windows\System32\Tasks\Easy PC Optimizer - Run without UAC
C:\Users\{Nom_Utilisateur}\Desktop\Easy PC Optimizer.lnk
C:\Users\{Nom_Utilisateur}\AppData\Roaming\Easy PC Optimizer
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Easy PC Optimizer
C:\Program Files (x86)\Easy PC Optimizer
--- Fin de citation ---

**********

Détecté et traité par Malwarebytes en tant que PUP/LPI (Programme potentiellement Indésirable)
Sous la version Premium, Malwarebytes bloque l'accès au domaine easypcoptimizer.com et l'IP 65.60.40.44

--- Citer ----Scan Details-
Process: 1
PUP.Optional.EasyPCOptimizer, C:\Program Files (x86)\Easy PC Optimizer\EPIC.exe, Quarantined, [8968], [442097],1.0.3029

Module: 2
PUP.Optional.EasyPCOptimizer, C:\Program Files (x86)\Easy PC Optimizer\engine.dll, Quarantined, [8968], [442097],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\Program Files (x86)\Easy PC Optimizer\EPIC.exe, Quarantined, [8968], [442097],1.0.3029

Registry Key: 7
PUP.Optional.EasyPCOptimizer, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Easy PC Optimizer_is1, Delete-on-Reboot, [8968], [442097],1.0.3029
PUP.Optional.EasyPCOptimizer, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Easy PC Optimizer - Background Scanning, Delete-on-Reboot, [8968], [442110],1.0.3029
PUP.Optional.EasyPCOptimizer, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Easy PC Optimizer - Run without UAC, Delete-on-Reboot, [8968], [442114],1.0.3029
PUP.Optional.RegistryPowerCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Easy PC Optimizer Scheduled Scan - {username}, Delete-on-Reboot, [8966], [442107],1.0.3029
PUP.Optional.EasyPCOptimizer, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{80EBACE7-F5E2-4384-B5EB-E2A09E9E45D2}, Delete-on-Reboot, [8968], [442115],1.0.3029
PUP.Optional.RegistryPowerCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{81DDD0D7-BB32-4EE7-A7E5-915C3EFFF87D}, Delete-on-Reboot, [8966], [442106],1.0.3029
PUP.Optional.EasyPCOptimizer, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{FB616293-533A-43D8-823D-BC4B35174601}, Delete-on-Reboot, [8968], [442111],1.0.3029

Registry Value: 3
PUP.Optional.EasyPCOptimizer, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{80EBACE7-F5E2-4384-B5EB-E2A09E9E45D2}|PATH, Delete-on-Reboot, [8968], [442115],1.0.3029
PUP.Optional.RegistryPowerCleaner, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{81DDD0D7-BB32-4EE7-A7E5-915C3EFFF87D}|PATH, Delete-on-Reboot, [8966], [442106],1.0.3029
PUP.Optional.EasyPCOptimizer, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{FB616293-533A-43D8-823D-BC4B35174601}|PATH, Delete-on-Reboot, [8968], [442111],1.0.3029

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 2
PUP.Optional.EasyPCOptimizer, C:\PROGRAM FILES (X86)\EASY PC OPTIMIZER, Delete-on-Reboot, [8968], [442097],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\USERS\{username}\APPDATA\ROAMING\EASY PC OPTIMIZER, Delete-on-Reboot, [8968], [442100],1.0.3029

File: 21
PUP.Optional.EasyPCOptimizer, C:\WINDOWS\SYSTEM32\TASKS\EASY PC OPTIMIZER - BACKGROUND SCANNING, Delete-on-Reboot, [8968], [442109],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\PROGRAM FILES (X86)\EASY PC OPTIMIZER\UNINS000.DAT, Delete-on-Reboot, [8968], [442097],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\Program Files (x86)\Easy PC Optimizer\engine.dll, Delete-on-Reboot, [8968], [442097],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\Program Files (x86)\Easy PC Optimizer\EpcoUninstaller.exe, Delete-on-Reboot, [8968], [442097],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\Program Files (x86)\Easy PC Optimizer\EPIC.exe, Delete-on-Reboot, [8968], [442097],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\Program Files (x86)\Easy PC Optimizer\Homepage.url, Delete-on-Reboot, [8968], [442097],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\Program Files (x86)\Easy PC Optimizer\IgnoreList.dat, Delete-on-Reboot, [8968], [442097],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\Program Files (x86)\Easy PC Optimizer\license.txt, Delete-on-Reboot, [8968], [442097],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\Program Files (x86)\Easy PC Optimizer\Res_English.xml, Delete-on-Reboot, [8968], [442097],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\Program Files (x86)\Easy PC Optimizer\Res_French.xml, Delete-on-Reboot, [8968], [442097],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\Program Files (x86)\Easy PC Optimizer\Res_Spanish.xml, Delete-on-Reboot, [8968], [442097],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\Program Files (x86)\Easy PC Optimizer\Support.url, Delete-on-Reboot, [8968], [442097],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\Program Files (x86)\Easy PC Optimizer\unins000.exe, Delete-on-Reboot, [8968], [442097],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\Program Files (x86)\Easy PC Optimizer\unins000.msg, Delete-on-Reboot, [8968], [442097],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\USERS\{username}\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\EASY PC OPTIMIZER.LNK, Delete-on-Reboot, [8968], [442101],1.0.3029
PUP.Optional.RegistryPowerCleaner, C:\WINDOWS\SYSTEM32\TASKS\Easy PC Optimizer Scheduled Scan - {username}, Delete-on-Reboot, [8966], [442105],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\WINDOWS\SYSTEM32\TASKS\EASY PC OPTIMIZER - RUN WITHOUT UAC, Delete-on-Reboot, [8968], [442113],1.0.3029
PUP.Optional.RegistryPowerCleaner, C:\WINDOWS\TASKS\Easy PC Optimizer Scheduled Scan - {username}.job, Delete-on-Reboot, [8966], [442104],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\USERS\{username}\APPDATA\ROAMING\EASY PC OPTIMIZER\EPCO.LOG, Delete-on-Reboot, [8968], [442100],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\USERS\{username}\DESKTOP\EASY PC OPTIMIZER.LNK, Delete-on-Reboot, [8968], [442102],1.0.3029
PUP.Optional.EasyPCOptimizer, C:\USERS\{username}\DESKTOP\EASYPCOPTIMIZERSETUP.EXE, Delete-on-Reboot, [8968], [442117],1.0.3029

Physical Sector: 0
(No malicious items detected)

--- Fin de citation ---

Tutoriel d'utilisation Malwarebytes en images

Source : Removal instructions for Easy PC Optimizer de Metallica - Malwarebytes Forums

Toujours infecté ? Une question avant de faire des manipulations ?
Venez poster un nouveau sujet dans ce forum : http://forum.security-x.fr/desinfections/ en prenant soin de suivre la procédure http://forum.security-x.fr/desinfections/procedure-preliminaire/

Navigation

[0] Index des messages

Sortir du mode mobile