FORUM D’ENTRAIDE INFORMATIQUE (FEI)Site d’assistance et de sécurité informatique

[xav9425]

Re,

si je ne me trompe pas, je l'ai pris sur: http://support.microsoft.com/

[g3n-h@ckm@n]

ah ben si c'est sur microsoft même...

Fais analyser le(s) fichier(s) suivants sur Virustotal :

http://www.virustotal.com/index.html

clique sur "Parcourir" et trouve puis selectionne ce(s) fichier(s) :

C:\WINDOWS\jumpshot.com

* Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
* Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
* Lorsque l'analyse est terminée colle le lien de(s)( la) page(s) dans ta prochaine réponse.

[xav9425]

Re,

j'ai le dossier "jumpshot.com" mais celui ci est vide ...

(Pour le téléchargement, j’espère ne pas m'être trompé dans le liens, même si théoriquement, j'évite de dl sur n'importe quel site, sur les conseils des helpeurs)

[g3n-h@ckm@n]

ok refais OTL stp voir.....

[xav9425]

Rapport OTL:

http://upload.sosvirus.net/www/?a=di=CtcHNV4JEL

http://upload.sosvirus.net/www/?a=di=NKV0AhPxQw

[g3n-h@ckm@n]

un question , ton Avast c'est la version pro ? payante ?

[xav9425]

Non, c'est la version gratuite.

[g3n-h@ckm@n]

tu n'as pas collé le texte dans OTL

[xav9425]

Il me semblait l'avoir fait, je refais la manip et je t'envois les liens

[xav9425]

Voila les rapports, avec le texte copié:

http://upload.sosvirus.net/www/?a=di=ywpaSR3Tu9

http://upload.sosvirus.net/www/?a=di=mU9gjDmBoP

[xav9425]

Voila les rapports, avec le texte copié:

http://upload.sosvirus.net/www/?a=di=ywpaSR3Tu9

http://upload.sosvirus.net/www/?a=di=mU9gjDmBoP

[g3n-h@ckm@n]

t'as pas tout copié c'est pas complet

[xav9425]

Salut,

en effet je n'ai pas tout copié -_-'

Voila les rapports qui cette fois-ci devrait être les bons:

http://upload.sosvirus.net/www/?a=di=4knLyak5mv

http://upload.sosvirus.net/www/?a=di=dHHdc9oxnd



(Au démarrage j'ai un fichier "desktop.ini" qui s'ouvre avec ce texte "[.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21787")

[g3n-h@ckm@n]

Bonsoir désinstalle tuneUP utilities si tu l'as pas fait , puis colle ca en bas d'OTL puis clique sur correction et poste le nouveau rapport qui s'ouvrira :

:OTL
IE - HKU\S-1-5-21-789336058-1801674531-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://dts.search.ask.com/sidebar.html? ... systemid=2
IE - HKU\S-1-5-21-789336058-1801674531-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://dts.search.ask.com/sidebar.html? ... systemid=2
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
[2014/07/13 18:02:42 | 000,000,000 | ---D | C] -- C:\56aacd259d89b6aba8f7ad7089876a
[2014/07/05 16:35:43 | 000,000,000 | ---D | C] -- C:\98a61db3e46ed6f881
[2 C:\Program Files\*.tmp files - C:\Program Files\*.tmp - ]
[1 C:\WINDOWS\*.tmp files - C:\WINDOWS\*.tmp - ]
[2013/05/19 14:16:29 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Application Data\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}    
[2013/07/06 13:25:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\admin\Local Settings\Application Data\Software    
[2013/08/28 11:17:26 | 000,000,000 | ---D | M] -- C:\Program Files\BearShare Applications
[2014/06/26 14:02:06 | 000,000,000 | ---D | M] -- C:\Program Files\GUM2.tmp
[2014/07/03 14:42:10 | 000,000,000 | ---D | M] -- C:\Program Files\TuneUp Utilities 2013
[2013/07/06 13:40:52 | 000,000,000 | ---D | M] -- C:\WINDOWS\Installer\{EBE677C0-CBCB-4EBF-8098-E27E1B5271CF}    

:reg
[-HKEY_CURRENT_USER\Software\(null)]
[-HKEY_CURRENT_USER\Software\APN DTX]    
[-HKEY_CURRENT_USER\Software\BearShare]
[-HKEY_CURRENT_USER\Software\Boxore]
[-HKEY_CURRENT_USER\Software\Conduit]    
[-HKEY_CURRENT_USER\Software\DSiteProducts]    
[-HKEY_CURRENT_USER\Software\iMesh]    
[-HKEY_CURRENT_USER\Software\lollipop]
[-HKEY_CURRENT_USER\Software\Optimizer Pro]    
[-HKEY_CURRENT_USER\Software\systweak]    
[-HKEY_CURRENT_USER\Software\Torch]    
[-HKEY_CURRENT_USER\Software\Tuguu SL]    
[-HKEY_CURRENT_USER\Software\Vittalia]    
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP"=-
"2869:TCP"=-
"139:TCP"=-
"445:TCP"=-
"137:UDP"=-
"138:UDP"=-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall"=DWORD:0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall"=DWORD:0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall"=DWORD:0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\BearShare Applications\BearShare\BearShare.exe"=-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\BearShare Applications\BearShare\BearShare.exe"=-
"C:\Documents and Settings\admin\Local Settings\Temp\Répertoire temporaire 1 pour PortableEmule-049c-r01.zip\PortableEmule-049c-r01\PortableeMule\emule\emule.exe"=-

:commands
[emptytemp]

[xav9425]

Re,

voila le rapport:

All processes killed
Error: Unable to interpret :OTL in the current context!
Error: Unable to interpret http://dts.search.ask.com/sidebar.html? ... systemid=2 in the current context!
Error: Unable to interpret http://dts.search.ask.com/sidebar.html? ... systemid=2 in the current context!
Error: Unable to interpret in the current context!
Error: Unable to interpret in the current context!
Error: Unable to interpret in the current context!
Error: Unable to interpret C:\Program Files\*.tmp - ] in the current context!
Error: Unable to interpret C:\WINDOWS\*.tmp - ] in the current context!
Error: Unable to interpret in the current context!
Error: Unable to interpret in the current context!
Error: Unable to interpret in the current context!
Error: Unable to interpret in the current context!
Error: Unable to interpret in the current context!
Error: Unable to interpret in the current context!
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\Software\(null)\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\APN DTX\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\BearShare\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Boxore\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Conduit\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\DSiteProducts\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\iMesh\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\lollipop\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Optimizer Pro\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\systweak\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Torch\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Tuguu SL\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Vittalia\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\1900:UDP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\2869:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\139:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\445:TCP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\137:UDP deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\138:UDP deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\\"EnableFirewall"|DWORD:0 /E : value set successfully!
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\\"EnableFirewall"|DWORD:0 /E : value set successfully!
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\\"EnableFirewall"|DWORD:0 /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\BearShare Applications\BearShare\BearShare.exe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\BearShare Applications\BearShare\BearShare.exe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Documents and Settings\admin\Local Settings\Temp\Répertoire temporaire 1 pour PortableEmule-049c-r01.zip\PortableEmule-049c-r01\PortableeMule\emule\emule.exe deleted successfully.
========== COMMANDS ==========
Error: Unable to interpret in the current context!

OTL by OldTimer - Version 3.2.69.0 log created on 07272014_133025

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

[g3n-h@ckm@n]

re

pas tout a fonctionné j'ai mis des caractères en trop

refais avec juste ca :

:OTL
IE - HKU\S-1-5-21-789336058-1801674531-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://dts.search.ask.com/sidebar.html? ... systemid=2
IE - HKU\S-1-5-21-789336058-1801674531-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://dts.search.ask.com/sidebar.html? ... systemid=2
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
[2014/07/13 18:02:42 | 000,000,000 | ---D | C] -- C:\56aacd259d89b6aba8f7ad7089876a
[2014/07/05 16:35:43 | 000,000,000 | ---D | C] -- C:\98a61db3e46ed6f881
[2 C:\Program Files\*.tmp files - C:\Program Files\*.tmp - ]
[1 C:\WINDOWS\*.tmp files - C:\WINDOWS\*.tmp - ]
[2013/05/19 14:16:29 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Application Data\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}    
[2013/07/06 13:25:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\admin\Local Settings\Application Data\Software    
[2013/08/28 11:17:26 | 000,000,000 | ---D | M] -- C:\Program Files\BearShare Applications
[2014/06/26 14:02:06 | 000,000,000 | ---D | M] -- C:\Program Files\GUM2.tmp
[2014/07/03 14:42:10 | 000,000,000 | ---D | M] -- C:\Program Files\TuneUp Utilities 2013
[2013/07/06 13:40:52 | 000,000,000 | ---D | M] -- C:\WINDOWS\Installer\{EBE677C0-CBCB-4EBF-8098-E27E1B5271CF}    

:commands
[emptytemp]

[xav9425]

All processes killed
========== OTL ==========
HKU\S-1-5-21-789336058-1801674531-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Bar| /E : value set successfully!
HKU\S-1-5-21-789336058-1801674531-839522115-1004\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully.
C:\56aacd259d89b6aba8f7ad7089876a\x86 folder moved successfully.
C:\56aacd259d89b6aba8f7ad7089876a\FR-FR folder moved successfully.
C:\56aacd259d89b6aba8f7ad7089876a\EN-US folder moved successfully.
C:\56aacd259d89b6aba8f7ad7089876a folder moved successfully.
C:\98a61db3e46ed6f881\i386 folder moved successfully.
C:\98a61db3e46ed6f881\amd64 folder moved successfully.
C:\98a61db3e46ed6f881 folder moved successfully.
C:\Program Files\GUM2.tmp\GoogleCrashHandler.exe deleted successfully.
C:\Program Files\GUM2.tmp\GoogleCrashHandler64.exe deleted successfully.
C:\Program Files\GUM2.tmp\GoogleUpdate.exe deleted successfully.
C:\Program Files\GUM2.tmp\GoogleUpdateBroker.exe deleted successfully.
C:\Program Files\GUM2.tmp\GoogleUpdateComRegisterShell64.exe deleted successfully.
C:\Program Files\GUM2.tmp\GoogleUpdateHelper.msi deleted successfully.
C:\Program Files\GUM2.tmp\GoogleUpdateOnDemand.exe deleted successfully.
C:\Program Files\GUM2.tmp\GoogleUpdateSetup.exe deleted successfully.
C:\Program Files\GUM2.tmp\goopdate.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_am.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_ar.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_bg.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_bn.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_ca.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_cs.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_da.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_de.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_el.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_en-GB.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_en.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_es-419.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_es.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_et.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_fa.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_fi.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_fil.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_fr.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_gu.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_hi.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_hr.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_hu.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_id.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_is.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_it.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_iw.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_ja.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_kn.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_ko.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_lt.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_lv.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_ml.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_mr.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_ms.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_nl.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_no.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_pl.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_pt-BR.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_pt-PT.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_ro.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_ru.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_sk.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_sl.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_sr.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_sv.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_sw.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_ta.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_te.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_th.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_tr.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_uk.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_ur.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_vi.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_zh-CN.dll deleted successfully.
C:\Program Files\GUM2.tmp\goopdateres_zh-TW.dll deleted successfully.
C:\Program Files\GUM2.tmp\npGoogleUpdate3.dll deleted successfully.
C:\Program Files\GUM2.tmp\psmachine.dll deleted successfully.
C:\Program Files\GUM2.tmp\psmachine_64.dll deleted successfully.
C:\Program Files\GUM2.tmp\psuser.dll deleted successfully.
C:\Program Files\GUM2.tmp\psuser_64.dll deleted successfully.
C:\Program Files\GUM2.tmp folder deleted successfully.
C:\Program Files\GUT3.tmp deleted successfully.
C:\WINDOWS\msdownld.tmp folder deleted successfully.
C:\Documents and Settings\All Users\Application Data\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} folder moved successfully.
C:\Documents and Settings\admin\Local Settings\Application Data\Software\CrashReports folder moved successfully.
C:\Documents and Settings\admin\Local Settings\Application Data\Software folder moved successfully.
C:\Program Files\BearShare Applications\BearShare folder moved successfully.
C:\Program Files\BearShare Applications folder moved successfully.
Folder C:\Program Files\GUM2.tmp\ not found.
C:\Program Files\TuneUp Utilities 2013\UpdateWizard\fr-FR folder moved successfully.
C:\Program Files\TuneUp Utilities 2013\UpdateWizard folder moved successfully.
C:\Program Files\TuneUp Utilities 2013 folder moved successfully.
C:\WINDOWS\Installer\{EBE677C0-CBCB-4EBF-8098-E27E1B5271CF} folder moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: admin
-Temp folder emptied: 2188316 bytes
-Temporary Internet Files folder emptied: 295314 bytes
-Google Chrome cache emptied: 50936814 bytes
-Flash cache emptied: 506 bytes

User: Administrateur
-Temp folder emptied: 1083 bytes
-Temporary Internet Files folder emptied: 2671006 bytes
-Google Chrome cache emptied: 63336061 bytes

User: All Users

User: Default User
-Temp folder emptied: 0 bytes
-Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
-Temp folder emptied: 0 bytes
-Temporary Internet Files folder emptied: 34034 bytes

User: NetworkService
-Temp folder emptied: 0 bytes
-Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 315300 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 24991288 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 138,00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 07292014_161215

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

[g3n-h@ckm@n]

re ok nickel , des soucis persistent ?

[xav9425]

Re,

le PC tourne déjà beaucoup mieux.

J'ai toujours le fichier "destktop" qui s'ouvre au démarrage avec ce message: "[.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21787"

J'ai aussi au démarrage le choix de booter sur XP familiale ou pro. Si je choisis Pro, il ne boot pas, est ce que je peux dégager ça?

A part ça il me reste l'icône de Bearshare sur le bureau, est ce qu'un simple clique-droit supprimer suffit ?

[g3n-h@ckm@n]

salut pour l 'icone tu peux le supprimer

colle le contenu de C:\Boot.ini

[xav9425]

Re,

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP dition familiale" /noexecute=optin /fastdetect
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect /noexecute=alwaysoff

[g3n-h@ckm@n]

ok et t'aimerais qu'il n'y ait que le choix de demarrer sur édition familiale c'est ca ?

==

pour le desktop qui s'ouvre au demarrage

faut supprimer :

c:\Documents and settings\ta session\menu démarrer\Programmes\démarrage\Desktop.ini

C:\All Users\menu démarrer\Programmes\démarrage\Desktop.ini

[xav9425]

Re,

oui ce serait pour booter directement sur l'édition familiale.

[g3n-h@ckm@n]

re

alors supprime cette ligne :

multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect /noexecute=alwaysoff

et change cette ligne :

timeout=30

par

timeout=03

(tu attendras moins longtemps pour xp demarre, 3 sec au lieu de 30 ^^ )

ensuite :

touche windows + R

dans la fenetre noire tape :

%windir%\System32\attrib.exe +h +r +s %Homedrive%\Boot.ini

puis valide , ensuite tu peux redemarrer le pc

[xav9425]

Ou faut-il que je supprime la ligne ?

[g3n-h@ckm@n]

dans le fichier boot.ini


lol

[xav9425]

Re,

Dsl de ma question, un peu conne.

Le PC est toujours un peu lent. Est ce qu'il faut que je fasse encore des manips?

[g3n-h@ckm@n]

re

dis-moi déjà si ce que j'ai dit de faire a fonctionné ou pas

[xav9425]

Oui oui ça a fonctionné

[g3n-h@ckm@n]

ok fais ce ménage et dis quoi : http://gen-hackman.purforum.com/t50-fin-de-desinfection

[xav9425]

Salut,

désolé de ne pas avoir posté plus tôt,

j'ai mis a jours les différents driver et aux démarrage "lcnb_main.exe" dans une fenêtre d'avertissement Windows.

voila rapport Delfix:

# DelFix v10.7 - Rapport créé le 09/08/2014 à 12:13:21
# Mis à jour le 27/04/2014 par Xplode
# Nom d'utilisateur : admin - PRODUCY-917E908
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)

~ Suppression des outils de désinfection ...

Supprimé : C:\_OTL
Supprimé : C:\Shortcut_Module
Supprimé : C:\Program Files\SEAF
Supprimé : C:\JavaRa.log
Supprimé : C:\Shortcut_Module_12_07_2014_20_46_41.txt
Supprimé : C:\Shortcut_Module_26_06_2014_13_58_01.txt
Supprimé : C:\Shortcut_Module_26_06_2014_19_47_45.txt
Supprimé : C:\Shortcut_Module_28_06_2014_16_01_44.txt
Supprimé : C:\Shortcut_Module_30_06_2014_11_05_47.txt
Supprimé : C:\Documents and Settings\admin\Bureau\Extras.Txt
Supprimé : C:\Documents and Settings\admin\Bureau\OTL.Txt
Supprimé : C:\Documents and Settings\admin\Bureau\SeafLog.txt
Supprimé : C:\Documents and Settings\admin\Bureau\Shortcut_Module.exe
Supprimé : C:\Documents and Settings\admin\Mes documents\Downloads\Extras.Txt
Supprimé : C:\Documents and Settings\admin\Mes documents\Downloads\JavaRa.zip
Supprimé : C:\Documents and Settings\admin\Mes documents\Downloads\OTL.Txt
Supprimé : C:\Documents and Settings\admin\Mes documents\Downloads\OTL.exe
Supprimé : C:\Documents and Settings\admin\Mes documents\Downloads\seaf.exe
Supprimé : C:\Documents and Settings\admin\Mes documents\Downloads\Shortcut_Module.exe
Supprimée : HKCU\Software\Shortcut_Module
Supprimée : HKLM\SOFTWARE\OldTimer Tools
Supprimée : HKLM\SOFTWARE\Shortcut_Module
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SEAF

~ Sauvegarde de la base de registre ... OK

~ Purge de la restauration système ...

Supprimé : RP #179 [Point de vérification système | 06/26/2014 21:12:50]
Supprimé : RP #180 [Point de vérification système | 06/28/2014 12:55:18]
Supprimé : RP #181 [Supprimé Grand Theft Auto Vice City | 06/30/2014 12:21:57]
Supprimé : RP #182 [Point de vérification système | 07/02/2014 14:19:07]
Supprimé : RP #183 [Supprimé TuneUp Utilities 2013 | 07/03/2014 12:41:56]
Supprimé : RP #184 [Supprimé TuneUp Utilities Language Pack (fr-FR) | 07/03/2014 12:42:27]
Supprimé : RP #185 [Ma-Config.com supprimé | 07/04/2014 08:28:03]
Supprimé : RP #186 [Ma-Config.com installé | 07/04/2014 08:28:15]
Supprimé : RP #187 [Le Service Pack 3 pour Windows XP a été installé. | 07/04/2014 08:57:39]
Supprimé : RP #188 [Point de vérification système | 07/05/2014 09:58:41]
Supprimé : RP #189 [Software Distribution Service 3.0 | 07/05/2014 11:32:18]
Supprimé : RP #190 [Software Distribution Service 3.0 | 07/05/2014 12:12:35]
Supprimé : RP #191 [Software Distribution Service 3.0 | 07/05/2014 12:43:21]
Supprimé : RP #192 [Software Distribution Service 3.0 | 07/05/2014 14:34:37]
Supprimé : RP #193 [Software Distribution Service 3.0 | 07/06/2014 10:54:36]
Supprimé : RP #194 [Software Distribution Service 3.0 | 07/06/2014 11:12:07]
Supprimé : RP #195 [Point de vérification système | 07/07/2014 11:51:19]
Supprimé : RP #196 [Point de vérification système | 07/08/2014 12:10:16]
Supprimé : RP #197 [Software Distribution Service 3.0 | 07/09/2014 10:56:45]
Supprimé : RP #198 [Point de vérification système | 07/10/2014 13:01:28]
Supprimé : RP #199 [Point de vérification système | 07/11/2014 13:49:44]
Supprimé : RP #200 [Point de vérification système | 07/12/2014 22:02:36]
Supprimé : RP #201 [avast! antivirus system restore point | 07/15/2014 14:42:29]
Supprimé : RP #202 [Installé Conseiller de mise à niveau vers Windows 7 | 07/17/2014 12:10:39]
Supprimé : RP #203 [avast! antivirus system restore point | 07/18/2014 08:24:14]
Supprimé : RP #204 [Removed Un voisin d'enfer! | 07/18/2014 08:26:15]
Supprimé : RP #205 [Point de vérification système | 07/19/2014 10:38:27]
Supprimé : RP #206 [Point de vérification système | 07/22/2014 17:34:53]
Supprimé : RP #207 [Point de vérification système | 07/24/2014 09:37:00]
Supprimé : RP #208 [Point de vérification système | 07/25/2014 09:40:46]
Supprimé : RP #209 [OTL Restore Point - 26/07/2014 13:38:28 | 07/26/2014 11:38:31]
Supprimé : RP #210 [Point de vérification système | 07/29/2014 13:13:04]
Supprimé : RP #211 [Point de vérification système | 07/31/2014 09:16:53]
Supprimé : RP #212 [Point de vérification système | 08/04/2014 07:57:48]
Supprimé : RP #213 [Point de vérification système | 08/05/2014 10:33:56]
Supprimé : RP #214 [Installé REALTEK GbE FE Ethernet PCI-E NIC Driver | 08/06/2014 08:29:47]
Supprimé : RP #215 [Configuré REALTEK GbE FE Ethernet PCI-E NIC Driver | 08/07/2014 07:36:29]
Supprimé : RP #216 [Installé Realtek High Definition Audio Driver | 08/07/2014 07:38:53]
Supprimé : RP #217 [Installed Ralink Wireless LAN | 08/07/2014 07:41:59]
Supprimé : RP #218 [Point de vérification système | 08/08/2014 09:10:55]
Supprimé : RP #219 [Installé Java 7 Update 67 | 08/09/2014 10:07:55]

Nouveau point de restauration créé !

~ Réinitialisation des paramètres système ... OK

########## - EOF - ##########

[g3n-h@ckm@n]

salut

vu