ordi rame rame

[Thanos]

salut

 

Ok le rapport ne montre rien d'inquiétant. On va s'assurer que certains fichiers sont bien absents >>

 

Télécharge OTM par OldTimer et enregistre ce fichier sur le Bureau.

• Fais un double clic sur OTM.exe pour lancer l'exécution de l'outil. (Note: Si tu utilises Vista, fais un clic droit sur le fichier puis choisir Exécuter en tant qu'administrateur).
  
• Copie les lignes de la zone "Code" ci-dessous dans le Presse-papiers en les sélectionnant toutes puis en appuyant simultanément sur les touches CTRL et C (ou, après les avoir sélectionnées, en faisant un clic droit puis en choisissant Copier):
  

  :first
  :files
  C:\Documents and Settings\Maelle\ihmrrw.exe
  C:\Documents and Settings\Maëlle\diwgqe.exe 
  C:\DOCUME~1\Maelle\LOCALS~1\Temp\services.exe
  C:\bhij.exe
  C:\Program Files\F-Secure
  C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\F-Secure Automatic Update.lnk
  C:\Documents and Settings\Tavares Anna\Menu Démarrer\Programmes\Démarrage\Notification de cadeaux MSN.lnk C:\Documents and Settings\Tavares Anna\Application Data\Microsoft\Notification de cadeaux MSN
  
  :reg
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  "Sonic RecordNow!"=-
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\F-Secure Manager]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\F-Secure TNB]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ihmrrw]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Service]
  [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^F-Secure Automatic Update.lnk]
  [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
  "C:\WINDOWS\Temp\NavBrowser.exe"=-
  "C:\DOCUME~1\Maelle\LOCALS~1\Temp\services.exe"=-
  "C:\Documents and Settings\Maëlle\diwgqe.exe"=-
  "C:\bhij.exe"=-
  
  :commands
  [emptytemp]
  [start explorer]

  
  

• Retourne dans la fenêtre de OTMoveIt3, fais un clic droit dans la zone de gauche intitulée puis choisis Coller.
  
• Clique sur le bouton rouge
  
• Ferme OTM
  
• Poste dans ta prochaine réponse le rapport de OTM (contenu du fichier C:\_OTM\MovedFiles\********_******.log - les *** sont des chiffres représentant la date [moisjourannée] et l'heure)
  

Note: Si un fichier ou un dossier ne peut pas être déplacé immédiatement, un redémarrage sera peut-être nécessaire pour permettre de terminer le processus de déplacement. Si le redémarrage de la machine vous est demandé, choisir Oui/Yes.

[isa95]

Salut, instructions suivies mais qu'il était long l'ordinateur lorsqu'il a dû redémarrer. Voici le post

All processes killed

Error: Unable to interpret <:first> in the current context!

========== FILES ==========

File/Folder C:\Documents and Settings\Maelle\ihmrrw.exe not found.

File/Folder C:\Documents and Settings\Maëlle\diwgqe.exe not found.

File/Folder C:\DOCUME~1\Maelle\LOCALS~1\Temp\services.exe not found.

File/Folder C:\bhij.exe not found.

C:\Program Files\F-Secure\FWES\program moved successfully.

C:\Program Files\F-Secure\FWES moved successfully.

C:\Program Files\F-Secure\common\commdir\policies moved successfully.

C:\Program Files\F-Secure\common\commdir moved successfully.

C:\Program Files\F-Secure\common moved successfully.

C:\Program Files\F-Secure\BackWeb moved successfully.

C:\Program Files\F-Secure\Anti-Virus moved successfully.

C:\Program Files\F-Secure moved successfully.

File/Folder C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\F-Secure Automatic Update.lnk not found.

File/Folder C:\Documents and Settings\Tavares Anna\Menu Démarrer\Programmes\Démarrage\Notification de cadeaux MSN.lnk C:\Documents and Settings\Tavares Anna\Application Data\Microsoft\Notification de cadeaux MSN not found.

========== REGISTRY ==========

Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Sonic RecordNow! deleted successfully.

Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\F-Secure Manager\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\F-Secure TNB\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ihmrrw\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Service\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^F-Secure Automatic Update.lnk\ deleted successfully.

Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\WINDOWS\Temp\NavBrowser.exe deleted successfully.

Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\DOCUME~1\Maelle\LOCALS~1\Temp\services.exe deleted successfully.

Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\Documents and Settings\Maëlle\diwgqe.exe deleted successfully.

Registry value HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\\C:\bhij.exe deleted successfully.

========== COMMANDS ==========

 

[EMPTYTEMP]

 

User: Administrateur

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 134 bytes

 

User: All Users

 

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 32902 bytes

 

User: Invité

->Temp folder emptied: 6069173 bytes

->Temporary Internet Files folder emptied: 98513744 bytes

->FireFox cache emptied: 4253133 bytes

 

User: Karen

 

User: LocalService

File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.

File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.

File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.

->Temp folder emptied: 66016 bytes

->Temporary Internet Files folder emptied: 10547984 bytes

 

User: Maelle

 

User: Maman

 

User: Maëlle

->Temp folder emptied: 380822903 bytes

->Temporary Internet Files folder emptied: 131418981 bytes

->Java cache emptied: 40914844 bytes

->FireFox cache emptied: 77802234 bytes

->Google Chrome cache emptied: 6331023 bytes

 

User: NetworkService

->Temp folder emptied: 96508 bytes

->Temporary Internet Files folder emptied: 33170 bytes

 

User: Tavares Anna

->Temp folder emptied: 1390268 bytes

->Temporary Internet Files folder emptied: 45978 bytes

->Java cache emptied: 13425388 bytes

->FireFox cache emptied: 39166534 bytes

 

C:\~QTWTMP.TMP folder deleted successfully.

%systemdrive% .tmp files removed: 14648 bytes

C:\WINDOWS\msdownld.tmp folder deleted successfully.

%systemroot% .tmp files removed: 135961 bytes

%systemroot%\System32 .tmp files removed: 3101 bytes

File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.

File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5a8.dat scheduled to be deleted on reboot.

Windows Temp folder emptied: 98968 bytes

RecycleBin emptied: 921772 bytes

 

Total Files Cleaned = 774,48 mb

 

 

OTM by OldTimer - Version 3.0.0.6 log created on 09022009_221145

 

Files moved on Reboot...

File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.

C:\WINDOWS\temp\Perflib_Perfdata_5a8.dat moved successfully.

 

Registry entries deleted on Reboot...

 

Voilà, une petite occupation de plus

Merci beaucoup