Malwarebytes Anti-Malware
Malwarebytes | Free Anti-Malware & Internet Security Software
Data scansione: 31/01/2016
Ora scansione: 18:39:43
File di log: prova.txt
Amministratore: Si
Versione: 2.00.2.1012
Database malware: v2016.01.31.04
Database rootkit: v2016.01.20.01
Licenza: Premium
Protezione da malware: Disattivata
Protezione da siti web nocivi: Disattivata
Self-protection: Disattivata
SO: Windows 7 Service Pack 1
CPU: x64
File system: NTFS
Utente: Paloppa
Tipo di scansione: Scansione elementi nocivi
Risultati: Completata
Elementi analizzati: 334557
Tempo impiegato: 13 min, 55 sec
Memoria: Attivata
Esecuzioni automatiche: Attivata
File system: Attivata
Archivi compressi: Attivata
Rootkit: Disattivata
Heuristics: Attivata
PUP: Attivata
PUM: Attivata
Processi: 0
(No malicious items detected)
Moduli: 0
(No malicious items detected)
Chiavi di registro: 14
PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}, Spostato in quarantena, [47e9f24edabff145c52e1722a45e7888],
PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\INTERFACE\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}, Spostato in quarantena, [47e9f24edabff145c52e1722a45e7888],
PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}, Spostato in quarantena, [47e9f24edabff145c52e1722a45e7888],
PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{B9D64D3B-BE75-4FA2-B94A-C4AE772A0146}, Spostato in quarantena, [47e9f24edabff145c52e1722a45e7888],
PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\TYPELIB\{1112F282-7099-4624-A439-DB29D6551552}, Spostato in quarantena, [47e9f24edabff145c52e1722a45e7888],
PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\INTERFACE\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}, Spostato in quarantena, [47e9f24edabff145c52e1722a45e7888],
PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}, Spostato in quarantena, [47e9f24edabff145c52e1722a45e7888],
PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{1112F282-7099-4624-A439-DB29D6551552}, Spostato in quarantena, [47e9f24edabff145c52e1722a45e7888],
PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\OCComSDK.ComSDK.1, Spostato in quarantena, [47e9f24edabff145c52e1722a45e7888],
PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\OCComSDK.ComSDK, Spostato in quarantena, [47e9f24edabff145c52e1722a45e7888],
PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\OCComSDK.ComSDK, Spostato in quarantena, [47e9f24edabff145c52e1722a45e7888],
PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\OCComSDK.ComSDK.1, Spostato in quarantena, [47e9f24edabff145c52e1722a45e7888],
PUP.Optional.InstallCore, HKU\S-1-5-21-2570103691-57665734-1531355536-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\ICSW1.14, Spostato in quarantena, [49e7cb753861f54188dcedebc43f0ef2],
PUP.Optional.ProductSetup, HKU\S-1-5-21-2570103691-57665734-1531355536-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\PRODUCTSETUP, Spostato in quarantena, [8ea2ee526039fb3b1d2e5c8c1be88f71],
Valori di registro: 2
Trojan.Agent, HKU\S-1-5-21-2570103691-57665734-1531355536-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|tsiVideo, C:\Windows\SysWOW64\rundll32.exe C:\Users\Paloppa\AppData\Local\Temp\mdi064.dll,dalmat, Spostato in quarantena, [f040c57bdabfe650757086c0f50eed13]
PUP.Optional.ProductSetup, HKU\S-1-5-21-2570103691-57665734-1531355536-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\PRODUCTSETUP|tb, 0U1J2Q2Z1T2Q, Spostato in quarantena, [8ea2ee526039fb3b1d2e5c8c1be88f71]
Dati di registro: 0
(No malicious items detected)
Cartelle: 0
(No malicious items detected)
File: 10
PUP.Optional.Amonetize, C:\$Recycle.Bin\S-1-5-21-2570103691-57665734-1531355536-1000\$RBOQ1VR.exe, Spostato in quarantena, [77b9f9474356e3535389d50f738e05fb],
PUP.Optional.InstallCore, C:\Users\Paloppa\AppData\Local\Temp\13091276293082957338.exe, Spostato in quarantena, [d858142c059437ff9fbba6969869df21],
PUP.Optional.OpenCandy, C:\Users\Paloppa\AppData\Local\Temp\HYDD682.tmp.1446637427\HTA\install.1446637427.zip, Spostato in quarantena, [e848221ebedb4ee8c42ff24762a08080],
PUP.Optional.OpenCandy, C:\Users\Paloppa\AppData\Local\Temp\HYDD682.tmp.1446637427\HTA\3rdparty\OCComSDK.dll, Spostato in quarantena, [47e9f24edabff145c52e1722a45e7888],
PUP.Optional.PricePeep, C:\Users\Paloppa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.pricepeep00.pricepeep.net_0.localstorage, Spostato in quarantena, [10201d234950a98dab2cfceb4bb83cc4],
PUP.Optional.PricePeep, C:\Users\Paloppa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.pricepeep00.pricepeep.net_0.localstorage-journal, Spostato in quarantena, [54dcff4181181422f0e7b23539ca49b7],
PUP.Optional.ReMarkit.PrxySvrRST, C:\Users\Paloppa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.re-markit00.re-markit.co_0.localstorage, Spostato in quarantena, [ab85a39d1584999de01ea85edf2518e8],
PUP.Optional.ReMarkit.PrxySvrRST, C:\Users\Paloppa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.re-markit00.re-markit.co_0.localstorage-journal, Spostato in quarantena, [56dad86806934beb4bb3d23442c2be42],
PUP.Optional.ReMarkit.PrxySvrRST, C:\Users\Paloppa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markit00.re-markit.co_0.localstorage, Spostato in quarantena, [90a0e65ac0d99e9889756c9af90b4eb2],
PUP.Optional.ReMarkit.PrxySvrRST, C:\Users\Paloppa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.re-markit00.re-markit.co_0.localstorage-journal, Spostato in quarantena, [052b2d138b0e83b3906e5ea8976da45c],
Settori fisici: 0
(No malicious items detected)
(end)