FORUM D’ENTRAIDE INFORMATIQUE (FEI)Site d’assistance et de sécurité informatique

[WaldenGlob]

Bonjour à tous,

   Voilà, j'ai découvert ce forum en me baladant par ci par là sur internet, à la recherche d'informations et d'aides. Après plusieurs soucis sur différents PC, j'ai envie de comprendre plus profondément l'informatique. Je me suis inscris car je souhaite avoir un minimum de connaissances en informatique, au vu  de me former professionnellement d'ici quelques temps.
   Je suis complètement néophyte sur les forums, ça doit être une de mes seules inscription sur un forum. Je ne connais pas trop le déroulement et le fonctionnement de ceux-ci, je recherche donc un peu d'aide pour mes débuts.

   J'espère pouvoir communiquer rapidement,

  Cordialement,

[g3n-h@ckm@n]

hello ^^

https://www.google.fr/search?q=formatio ... 7AaklYCYCg

[nergens]

Bonjour, WaldenGlob,

Si tu as des questions : poste dans ce topic

http://www.forum-entraide-informatique. ... utes-betes

Désolé g3n, je sais que je n'ai pas intervenir en désinfect, mais il me semble que c'est un tout petit peu justifié.

Mi.

[g3n-h@ckm@n]

tu peux

à bientôt

ce n'est pas une désinfection à proprement parler

[WaldenGlob]

Voilà, on y arrive ^^"

Bonjour bonjour, (encore ^^)

Donc voilà je suis sur un ordinateur portable, que je trouve un peu lent, pour.. un peu tout -_-"
Je souhaite savoir s'il est infecté de quelques manières que ce soient, et aussi savoir si c'est possible de booster des petits pc comme ça pour qu'ils soient un peu plus performants en multitâches et/ou jeux.
C'est un ordinateur que j'ai en dépannage d'un ami, car mon ancienne tour est foutue.

Le PC portable :

- Aspire 5250
- AMD Dual Core Processor E300 1.30GHz
- AMD Radeon HD 6310
- 4GB DDR3

[g3n-h@ckm@n]

• Copie le script ci dessous :
  
  HKCU\Software
      HKLM\Software
      HKCU\Software\Microsoft\Command Processor /s
      HKLM\Software\Microsoft\Command Processor /s
      %Homedrive%\*
      %Homedrive%\*.
      %Userprofile%\*
      %Userprofile%\*.
      %Allusersprofile%\*
      %Allusersprofile%\*.
      %LocalAppData%\*
      %LocalAppData%\*.
      %Userprofile%\Local Settings\Application Data\*
      %Userprofile%\Local Settings\Application Data\*.
      %Userprofile%\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\*
      %Userprofile%\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\*.
      %programFiles%\*
      %programfiles%\Google\Desktop\Install /s
      %programFiles%\*.
      %Systemroot%\Installer\*.
      %Systemroot%\Temp\*.exe /s
      %systemroot%\system32\*.dll /lockedfiles
      %systemroot%\system32\*.exe /lockedfiles
      %systemroot%\system32\*.in*
      %systemroot%\Tasks\*
      %systemroot%\Tasks\*.
      %systemroot%\system32\Tasks\*
      %systemroot%\system32\Tasks\*.
      %systemroot%\system32\drivers\*.sy* /lockedfiles
      %systemroot%\system32\config\*.exe /s
      %Systemroot%\ServiceProfiles\*.exe /s
      %systemroot%\system32\*.sys
      dir %Homedrive%\* /S /A:L /C
      msconfig
      activex
      /md5start
      explorer.exe
      winlogon.exe
      wininit.exe
      volsnap.sys
      atapi.sys
      ndis.sys
      cdrom.sys
      i8042prt.sys
      iastor.sys
      tdx.sys
      netbt.sys
      afd.sys
      /md5stop
      netsvcs
      safebootminimal
      safebootnetwork
      CREATERESTOREPOINT
• Télécharge OTL (by OldTimer) sur ton bureau.
• Lance OTL, exécuter en tant qu'administrateur sous Windows : 7/8 et Vista
• Coche/Sélectionne les cases comme l'image ci dessous
• Colle le Script copié plus haut dans la partie inférieure d'OTL "Personnalisation"
• Clique sur Analyse
  
  
• Une fois le scan terminé 1 ou 2 rapports vont s'ouvrir OTL.txt et Extras.txt.
• Héberge les rapports OTL.txt et Extras.txt sur SosUpload, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum
  
  Note : Au cas où, tu peux les retrouver dans le dossier C:\OTL ou sur ton bureau en fonction des cas rencontrés
  
  En cas de problème avec SOSUpload, utiliser Cjoint

[WaldenGlob]

Voici le rapport OTL.txt => http://upload.sosvirus.net/www/?a=di=TiCPFRoQQb

Et le Rapport Extras.txt = http://upload.sosvirus.net/www/?a=di=FJMXJWmDql

[g3n-h@ckm@n]

• Désactive ton antivirus sinon l'outil ne pourra pas travailler convenablement.
• Télécharge Shortcut_Module sur ton bureau.
  
  Note : Enregistrer votre travail avant de continuer !
• Lance Shortcut_Module,
• Clic sur Nettoyer
  
  
  
  Note : Patiente le temps du scan
• Laisse travailler l'outil même s'il te parait bloqué
• Si l'outil détecte un proxy que tu ne connais pas clic sur : "Supprimer le proxy"
• Héberge le rapport C:\Shortcut_Module_date_heure.txt sur http://upload.sosvirus.net/ puis donne le lien obtenu

[WaldenGlob]

Après à peu près deux heure d'analyse Shortucut Module, voici le rapport => http://upload.sosvirus.net/www/?a=di=QPmvW79QkU

Je constate que sur mon navigateur (Chrome) je n'ai plus adblock mais que SiteAdvisor a été ajouté, est-ce normal?

[g3n-h@ckm@n]

advisor , ca ne vient pas de shortcut_module, il n'ajoute rien.
pour adblock réinstalle-le

deux heure d'analyse , normal t'as pas desactivé AVG pourtant demandé par deux fois

[WaldenGlob]

Voilà j'ai réinstallé adblock. Site advisor semble avoir disparu

[WaldenGlob]

Mais sinon bien sur que si j'avais désactivé avg j'en suis certain.

[WaldenGlob]

J'avais bien fait clic droit > désactiver AVG jusqu'au redémarrage..
Après l'analyse, le pc a redémarré

[g3n-h@ckm@n]

bizarre qu'il soit affiché en route dans le rapport dans ce cas...

• Télécharge MalwareBytes
• Procède à l'installation de celui çi Décocher "Activer l'essai gratuit de Malwarebytes Anti-Malware Premium"
• Clic sur Mettre à jour (à droite, au centre)
• Clic sur Examen (en haut)
• Sélectionne Examen "Menaces"
• Clic sur Examiner maintenant
  
  
• A la fin du scan clic sur Tout mettre en quarantaine !
• Clic sur Copier dans le Presse-papiers
• Un rapport va s'ouvrir. Copie/Colle son contenue dans ta prochaine réponse.

[WaldenGlob]

Je viens de lancer un examen Malwarebytes, chose que je fais régulièrement, à peu près tout les mois)

De plus, régulièrement; je lance un examen CCleaner, qu'en est il de ce logiciel?

[WaldenGlob]

Voici le rapport Malwarebytes

Malwarebytes Anti-Malware
http://www.malwarebytes.org

Date de l'examen: 05/06/2014
Heure de l'examen: 20:28:05
Fichier journal: malwb.txt
Administrateur: Oui

Version: 2.00.2.1012
Base de données Malveillants: v2014.06.05.11
Base de données Rootkits: v2014.06.02.01
Licence: Gratuite
Protection contre les malveillants: Désactivé(e)
Protection contre les sites Web malveillants: Désactivé(e)
Self-protection: Désactivé(e)

Système d'exploitation: Windows 7 Service Pack 1
Processeur: x64
Système de fichiers: NTFS
Utilisateur: delphine

Type d'examen: Examen "Menaces"
Résultat: Terminé
Objets analysés: 263297
Temps écoulé: 37 min, 48 sec

Mémoire: Activé(e)
Démarrage: Activé(e)
Système de fichiers: Activé(e)
Archives: Activé(e)
Rootkits: Désactivé(e)
Heuristics: Activé(e)
PUP: Activé(e)
PUM: Activé(e)

Processus: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Clés du Registre: 0
(No malicious items detected)

Valeurs du Registre: 0
(No malicious items detected)

Données du Registre: 0
(No malicious items detected)

Dossiers: 0
(No malicious items detected)

Fichiers: 0
(No malicious items detected)

Secteurs physiques: 0
(No malicious items detected)


(end)

[g3n-h@ckm@n]

hello

ccleaner ? juste pour nettoyer les fichier temporaires

refais OTL sous les mêmes consignes que précédemment stp

[WaldenGlob]

Je viens de lancer l'analyse OTL, je reverrai les rapports.

Sinon j'ai aussi remarqué que des fichiers sont apparus sur mon bureau, je ne sais plus si c'est après l'analyse OTL ou après l'analyse Shortcut, ce sont 3 fichiers "desktop.ini", que sont ces fichiers?

[g3n-h@ckm@n]

normalement c'est deux et non trois qu'il doit y en avoir et ils sont en caché , ce sont des fichiers de configuration qu'on remettra en caché à la fin de la desinfection

donne leur contenu tout de même ?

[WaldenGlob]

Ils sont en caché oui, mais comment voir leurs contenu? je les ouvre avec quoi?

[WaldenGlob]

Voici le rapport OTL Extra.txt => http://upload.sosvirus.net/www/?a=di=g4tnhPkP80

Et le rapport OTL.txt = http://upload.sosvirus.net/www/?a=di=yfcgBwKjfV

[g3n-h@ckm@n]

tu double clic dessus ils s'ouvriront

[WaldenGlob]

[.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21799
[LocalizedFileNames]
WildTangent Games App - acer.lnk=@C:\PROGRA~2\WILDTA~1\TOUCHP~1\acer\MUILink.exe,-105
Acer Registration.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Enregistrement Acer.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Registrazione Acer.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Registro de Acer.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Acer Registratie.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Acer Registrierung.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Registo Acer.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Registrering af Acer.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Acer Rekisteröinti.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Acer-registrering.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Registrace Acer.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Acer Εγγραφή.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Acer Regisztráció.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Rejestracja — Acer.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Acer Kayıt.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Înregistrare Acer.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Регистрация Acer.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Acer ユーザー登録.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Acer 注册.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Acer 註冊.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Acer Registreerimine.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Acer Registracija.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Acer Reģistrācija.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Acer Регистрация.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
การลงทะเบียน Acer.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Acer تسجيل.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Acer - Registrácia.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Registracija Acer.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101
Acer 등록.lnk=@C:\Program Files (x86)\Acer\Registration\GlobalRegistrationMUI.dll,-101

[WaldenGlob]

[.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21769
IconResource=%SystemRoot%\system32\imageres.dll,-183

[g3n-h@ckm@n]

et le troisieme ?

[WaldenGlob]

une copie du 2ème

[g3n-h@ckm@n]

rien de dangereux

des soucis persistent ?

[WaldenGlob]

Bah il reste toujours très lent, et galère vraiment quand je met une vidéo en plein écran ou alors quand j'ai plusieurs onglets d'ouvert... Et il est très lent au démarrage aussi
Je constate aussi beaucoup de processus en fonctionnement.

Sinon pas d'autres soucis lié à une infection, on dirait.

[g3n-h@ckm@n]

colle tout ca en bas d'OTL et clique sur correction puis poste le nouveau rapport

:OTL
SRV - File not found [Auto | Stopped] -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe /McCoreSvc -- (McAfee SiteAdvisor Service)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files (x86)\McAfee\SiteAdvisor [2013/10/09 09:59:54 | 000,000,000 | ---D | M]
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" File not found
O4 - HKLM\..\Run: [SuiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O9 - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 File not found
O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 File not found
[1 C:\Windows\*.tmp files - C:\Windows\*.tmp - ]
[2014/05/11 14:54:04 | 000,006,244 | -HS- | C] () -- C:\Users\delphine\Documents\Folder.jpg
[2013/10/31 20:01:08 | 000,000,032 | ---- | M] () -- C:\ProgramData\Temp.log
[2013/10/08 10:18:00 | 000,000,000 | ---D | M] -- C:\ProgramData\AVAST Software
[2013/10/13 15:52:47 | 000,000,000 | ---D | M] -- C:\ProgramData\McAfee
[2013/10/09 10:00:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\McAfee
[2011/10/19 05:18:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mcafee.com

:reg
[-HKEY_CURRENT_USER\Software\McAfee]

:files
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\*

:commands
[emptytemp]

[WaldenGlob]

En cochant tout précédement?

[g3n-h@ckm@n]

ben non sinon je te l aurais demandé

[WaldenGlob]

Voici le rapport OTL après correction =>

All processes killed
========== OTL ==========
Service McAfee SiteAdvisor Service stopped successfully!
Service McAfee SiteAdvisor Service deleted successfully!
File C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe /McCoreSvc not found.
Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}\ not found.
C:\Program Files (x86)\McAfee\SiteAdvisor\x64 folder moved successfully.
C:\Program Files (x86)\McAfee\SiteAdvisor\Scripts folder moved successfully.
C:\Program Files (x86)\McAfee\SiteAdvisor\Download folder moved successfully.
C:\Program Files (x86)\McAfee\SiteAdvisor\Components folder moved successfully.
C:\Program Files (x86)\McAfee\SiteAdvisor folder moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{A95fe080-8f5d-11d2-a20b-00aa003c157a}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A95fe080-8f5d-11d2-a20b-00aa003c157a}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{A95fe080-8f5d-11d2-a20b-00aa003c157a}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A95fe080-8f5d-11d2-a20b-00aa003c157a}\ not found.
C:\Windows\msdownld.tmp folder deleted successfully.
C:\Users\delphine\Documents\Folder.jpg moved successfully.
C:\ProgramData\Temp.log moved successfully.
C:\ProgramData\AVAST Software folder moved successfully.
C:\ProgramData\McAfee\WinCore folder moved successfully.
C:\ProgramData\McAfee\SiteAdvisor\saupkeep.dll folder moved successfully.
C:\ProgramData\McAfee\SiteAdvisor\saui.exe folder moved successfully.
C:\ProgramData\McAfee\SiteAdvisor\sasubmgr.dll folder moved successfully.
C:\ProgramData\McAfee\SiteAdvisor\sasshmod.dll folder moved successfully.
C:\ProgramData\McAfee\SiteAdvisor\saInst.exe folder moved successfully.
C:\ProgramData\McAfee\SiteAdvisor\SACore folder moved successfully.
C:\ProgramData\McAfee\SiteAdvisor\mcsacore.exe folder moved successfully.
C:\ProgramData\McAfee\SiteAdvisor\mcbrwctl.dll folder moved successfully.
C:\ProgramData\McAfee\SiteAdvisor folder moved successfully.
C:\ProgramData\McAfee\msc\Updates folder moved successfully.
C:\ProgramData\McAfee\msc\RegWiz\RegApp folder moved successfully.
C:\ProgramData\McAfee\msc\RegWiz folder moved successfully.
C:\ProgramData\McAfee\msc\logs folder moved successfully.
C:\ProgramData\McAfee\msc folder moved successfully.
C:\ProgramData\McAfee\MNM folder moved successfully.
C:\ProgramData\McAfee\MNA folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\VSCore\rundll32 folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\VSCore folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\Pearl\mchost folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\Pearl\mcagent folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\Pearl folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\PartnerCustom\mcfpdtct folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\PartnerCustom folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MQS\Explorer folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MQS\CompMgmtLauncher folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MQS folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\Mpsmispap\mcupdmgr folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\Mpsmispap folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MpsMISP\mcagent folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MpsMISP folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MpsEventHandler\McSvHost folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MpsEventHandler folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MpsConfig\mcagent folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MpsConfig folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\Mps\McSvHost folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\Mps folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MPF\regsvr32 folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MPF\mpfalert folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MPF\mcupdmgr folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MPF\mcuihost folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MPF\McSvHost folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MPF\McSmtFwk folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MPF folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MispReg\mispreg folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MispReg folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\rundll32 folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\regsvr32 folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\OOBESVC\McSvHost folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\OOBESVC folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\mispreg folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\mcupdmgr folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\mcupdate folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\mcuihost folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\mcsync folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\mcsvrcnt folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\McSvHost folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\McSmtFwk folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\mcods folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\mcinsspt folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\McInfo folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\mchost folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\McHlp32 folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\mcawfwk folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\mcappcfg folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP\mcagent folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MISP folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McUninst\mcuihost folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McUninst folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McUICnt\mcuicnt folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McUICnt folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McSync\mcsync folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McSync folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\mcsvrcnt folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McSvcHost\McSvHost folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McSvcHost folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\mcsmttsk\McUpdate folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\mcsmttsk folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McProxy\McSvHost folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McProxy folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\mcoemmgr\McOEMMGr folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\mcoemmgr folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McOCAW\mcuicnt folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McOCAW folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McMSCIns\rundll32 folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McMSCIns\mcupdate folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McMSCIns\mcagent folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McMSCIns\install folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McMSCIns folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McInstru\mcocrollback folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McInstru\McInstru folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McInstru folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McInst folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\mcinsspt\mcinsspt folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\mcinsspt folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McInfo folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\mcdspwrp\McUICnt folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\mcdspwrp folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McContextUst\mcuihost folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\McContextUst folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\mcappcfg\mcappcfg folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\mcappcfg folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MasterInstaller\install folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\MasterInstaller folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\HWAPI\regsvr32 folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\HWAPI folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\HomeNet\McSvHost folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\HomeNet folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\DetectMPSdll\mcinst folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\DetectMPSdll folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\CoreTech\regsvr32 folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\CoreTech\McUpdate folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\CoreTech\mcinsspt folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\CoreTech\mcalert folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\CoreTech\mcagent folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\CoreTech folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\Common\mcuihost folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\Common\mcuicnt folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\Common\mcagent folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\Common\install folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\Common folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\Anti-Spam\Mskxagnt folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\Anti-Spam\McSvHost folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\Anti-Spam\mcinst folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\Anti-Spam folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\ActWiz\mcuicnt folder moved successfully.
C:\ProgramData\McAfee\MCLOGS\ActWiz folder moved successfully.
C:\ProgramData\McAfee\MCLOGS folder moved successfully.
C:\ProgramData\McAfee\hackerwatch\data folder moved successfully.
C:\ProgramData\McAfee\hackerwatch folder moved successfully.
C:\ProgramData\McAfee\dspwrp folder moved successfully.
C:\ProgramData\McAfee folder moved successfully.
C:\Program Files (x86)\McAfee\msc folder moved successfully.
C:\Program Files (x86)\McAfee folder moved successfully.
C:\Program Files (x86)\mcafee.com\agent folder moved successfully.
C:\Program Files (x86)\mcafee.com folder moved successfully.
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\Software\McAfee\ deleted successfully.
========== FILES ==========
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M folder moved successfully.
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 folder moved successfully.
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini moved successfully.
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 folder moved successfully.
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat moved successfully.
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA folder moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
-Temp folder emptied: 0 bytes
-Temporary Internet Files folder emptied: 0 bytes
-Flash cache emptied: 56468 bytes

User: Default User
-Temp folder emptied: 0 bytes
-Temporary Internet Files folder emptied: 0 bytes
-Flash cache emptied: 0 bytes

User: delphine
-Temp folder emptied: 2388390 bytes
-Temporary Internet Files folder emptied: 220398524 bytes
-Google Chrome cache emptied: 351280904 bytes
-Flash cache emptied: 71335 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 3012154 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 43262640 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 592,00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 06062014_191609

Files\Folders moved on Reboot...
C:\Users\delphine\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\delphine\AppData\Local\Temp\MMDUtl.log moved successfully.
File move failed. C:\Windows\temp\dsiwmis.log scheduled to be moved on reboot.
File move failed. C:\Windows\temp\LMutilps32.log scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

[g3n-h@ckm@n]

fais ce menage final et dis quoi ensuite

http://gen-hackman.purforum.com/t50-fin-de-desinfection

[WaldenGlob]

Voici le rapport DelFix =>

# DelFix v10.7 - Rapport créé le 06/06/2014 à 20:28:55
# Mis à jour le 27/04/2014 par Xplode
# Nom d'utilisateur : delphine - DELPHINE-PC
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Activation de l'UAC ... OK

~ Suppression des outils de désinfection ...

Supprimé : C:\_OTL
Supprimé : C:\Shortcut_Module
Supprimé : C:\Shortcut_Module_04_06_2014_20_28_46.txt
Supprimé : C:\Users\delphine\Desktop\Extras.Txt
Supprimé : C:\Users\delphine\Desktop\OTL.Txt
Supprimé : C:\Users\delphine\Downloads\Shortcut_Module.exe
Supprimée : HKLM\SOFTWARE\OldTimer Tools
Supprimée : HKLM\SOFTWARE\Shortcut_Module

~ Sauvegarde de la base de registre ... OK

~ Purge de la restauration système ...

Supprimé : RP #67 [Sauvegarde Windows | 06/01/2014 18:28:41]
Supprimé : RP #68 [DirectX est installé | 06/02/2014 17:39:30]
Supprimé : RP #69 [Removed Evernote v. 4.5.1 | 06/04/2014 13:27:31]
Supprimé : RP #70 [OTL Restore Point - 04/06/2014 17:45:49 | 06/04/2014 15:45:55]
Supprimé : RP #71 [OTL Restore Point - 06/06/2014 12:58:31 | 06/06/2014 10:58:35]
Supprimé : RP #72 [Removed Adobe Reader X (10.1.8) MUI. | 06/06/2014 18:22:54]

Nouveau point de restauration créé !

~ Réinitialisation des paramètres système ... OK

########## - EOF - ##########

[WaldenGlob]

J'ai terminé la fi, de désinfection par CCleaner, en analysant et nottyant dans le nettoyeur t dans le registre plusieurs fois.

[g3n-h@ckm@n]

ok lis les liens informatifs ca peut servir

la machine va mieux ?

[WaldenGlob]

Les actions sont légèrement plus fluides oui, j'ai gagné aussi un peu d'espace.

La processus de désinfection a été utile, je vous en remercie! =)

Sinon, pour le moment j'ai un antivirus (AVG) que j'ai réussi à trouver avec un licence d'un an. Que pensez vous de cet antivirus? Est-il efficace? Fiable? M'en conseilleriez vous un en particulier?

[g3n-h@ckm@n]

si tu fais attention à ce que tu fais il est assez efficace

bonne continuation