Auteur Sujet: Privacy Search Plus  (Lu 508 fois)

0 Membres et 1 Invité sur ce sujet

Hors ligne chantal11

  • Admin Formation
  • Mega Power Members
  • ****
  • Messages: 22623
    • Windows 10 - Windows 8 - Windows 7 - Windows Vista
Privacy Search Plus
« le: septembre 29, 2017, 16:17:47 »
Contenu republié avec la permission de Malwarebytes

Privacy Search Plus est une extension Chrome imposée sur certains sites (forced extension)


  •   S'installe en tant qu'extension Chrome

  • Affiche ces alertes pendant l'installation




  • Affiche ces alertes après l'installation










**********

Détection de Privacy Search Plus dans des rapports FRST :

Citer
CHR Extension: (Privacy Search Plus) - C:\Users\{Nom_Utilisateur}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl [2017-08-10]



**********


Détecté et traité par Malwarebytes en tant que PUP/LPI (Programme potentiellement Indésirable)
Sous la version Premium, Malwarebytes bloque le domaine quickprivacycheck.com et l'IP 209.87.144.33

Citer
-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 9
PUP.Optional.PrivateSearch, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL EXTENSION SETTINGS\KHMHEDBBLHEJONLHEDMEJHFCDJEJCODL, Delete-on-Reboot, [466], [389265],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\about\css, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\about\img, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\_metadata, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\scripts, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\images, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\about, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KHMHEDBBLHEJONLHEDMEJHFCDJEJCODL, Delete-on-Reboot, [466], [389262],1.0.2551

File: 20
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\khmhedbblhejonlhedmejhfcdjejcodl\000003.log, Delete-on-Reboot, [466], [389265],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\khmhedbblhejonlhedmejhfcdjejcodl\CURRENT, Delete-on-Reboot, [466], [389265],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\khmhedbblhejonlhedmejhfcdjejcodl\LOCK, Delete-on-Reboot, [466], [389265],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\khmhedbblhejonlhedmejhfcdjejcodl\LOG, Delete-on-Reboot, [466], [389265],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\khmhedbblhejonlhedmejhfcdjejcodl\MANIFEST-000001, Delete-on-Reboot, [466], [389265],1.0.2551
PUP.Optional.PrivateSearch, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KHMHEDBBLHEJONLHEDMEJHFCDJEJCODL\1.0_0\MANIFEST.JSON, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\about\css\style.css, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\about\img\close.png, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\about\img\setting.png, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\about\index.html, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\images\icon128.png, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\images\icon38.png, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\images\icon48.png, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\images\logo_disable.png, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\images\logo_enable.png, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\scripts\background.js, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\scripts\foreground.js, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\_metadata\computed_hashes.json, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\_metadata\verified_contents.json, Delete-on-Reboot, [466], [389262],1.0.2551
PUP.Optional.PrivateSearch, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\khmhedbblhejonlhedmejhfcdjejcodl\1.0_0\options.js, Delete-on-Reboot, [466], [389262],1.0.2551

Physical Sector: 0
(No malicious items detected)



Tutoriel d'utilisation Malwarebytes en images


Source : Removal instructions for Privacy Search Plus de Metallica - Malwarebytes Forums



Toujours infecté ? Une question avant de faire des manipulations ?

Venez poster un nouveau sujet dans ce forum : http://forum.security-x.fr/desinfections/  en prenant soin de suivre la procédure http://forum.security-x.fr/desinfections/procedure-preliminaire/
 

Security-X

Privacy Search Plus
« le: septembre 29, 2017, 16:17:47 »