Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

[Résolu] BrowseBurst

bohemes52

Par bohemes52
dans Analyses et éradication malwares

 Partager

Messages recommandés

pear Devil Member !

pear

Posté(e)
Posté(e)

Double-clic sur OTM.exe pour le lancer.
Sous Vista,Clic droit sur le fichier ->Choisir Exécuter en tant qu' Administrateur
Dans le cadre gauche, "Paste Instructions...."
101114025920292076.jpg
* Copiez /Collez les lignes ci dessous) en vert:
:Reg
[-HKCU\Software\BrowseBurst]
[-HKLM\Software\Wow6432Node\BrowseBurst]
[-HKLM\Software\Microsoft\Tracing\1396421883_BrowseBurstSetup_RASAPI32]
[-HKLM\Software\Microsoft\Tracing\1396421883_BrowseBurstSetup_RASMANCS]
[-HKLM\Software\Microsoft\Tracing\BrowseBurst_RASAPI32]
[-HKLM\Software\Microsoft\Tracing\BrowseBurst_RASMANCS]
[-HKLM\Software\Microsoft\Tracing\BrowseBurst_Setup_RASAPI32]
[-HKLM\Software\Microsoft\Tracing\BrowseBurst_Setup_RASMANCS]
[-HKLM\Software\Microsoft\Tracing\updateBrowseBurst_RASAPI32]
[-HKLM\Software\Microsoft\Tracing\updateBrowseBurst_RASMANCS]
[-HKLM\Software\Microsoft\Tracing\utilBrowseBurst_RASAPI32]
[-HKLM\Software\Microsoft\Tracing\utilBrowseBurst_RASMANCS]
[-HKLM\System\ControlSet001\services\eventlog\Application\Update BrowseBurst]
[-HKLM\System\ControlSet001\services\eventlog\Application\Util BrowseBurst]
[-HKLM\System\ControlSet001\services\Update BrowseBurst]
[-HKLM\System\ControlSet001\services\Util BrowseBurst]
[-HKLM\System\ControlSet002\services\eventlog\Application\Update BrowseBurst]
[-HKLM\System\ControlSet002\services\eventlog\Application\Util BrowseBurst]
[-HKLM\System\ControlSet002\services\Update BrowseBurst]
[-HKLM\System\ControlSet002\services\Util BrowseBurst]
[-HKLM\System\CurrentControlSet\services\eventlog\Application\Update BrowseBurst]
[-HKLM\System\CurrentControlSet\services\eventlog\Application\Util BrowseBurst]
[-HKLM\System\CurrentControlSet\services\Update BrowseBurst]
[-HKLM\System\CurrentControlSet\services\Util BrowseBurst]
[HKLM\System\Software\COMODO\Firewall Pro\Configurations\2\Firewall\Policy\5]
"Filename"=-
[HKLM\System\Software\COMODO\Firewall Pro\Configurations\2\Firewall\Policy\5]
"DeviceName"=-
[HKLM\System\Software\COMODO\Firewall Pro\Configurations\2\Firewall\Policy\6]
"Filename"=-
[HKLM\System\Software\COMODO\Firewall Pro\Configurations\2\Firewall\Policy\6]
"DeviceName"=-
[HKLM\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\15]
. "Filename"=-
[HKLM\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\15]
"DeviceName"=-
[HKLM\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\18]
"Filename"=-
[HKLM\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\18]
"DeviceName"=-
[HKLM\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\18\Rules\0\Allowed\0]
"Filename"=-
[HKLM\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\18\Rules\0\Allowed\0]
"DeviceName"=-
[HKLM\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\19]
"Filename"=-
[HKLM\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\19]
. "DeviceName"=-
[HKLM\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\25]
"Filename"=-
[HKLM\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\25]
"DeviceName"=-
[HKLM\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\26\Rules\0\Allowed\0]
1 "Filename"=-
[HKLM\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\26\Rules\0\Allowed\0]
"DeviceName"=-

:Commands
[purity]
[emptytemp]
[Reboot]

Revenez dans OTM,
Clic droit sur la fenêtre "Paste Instructions for Items to be Moved" sous la barre jaune et choisir Coller(Paste).
Click le bouton rouge Moveit!
Fermez OTM
Votre Pc va redémarrer.
Rendez vous dans le dossier C:\_OTM\MovedFiles ,
ouvrez le dernier fichier .log
Copiez/collez en le contenu dans votre prochaine réponse
[/color]

bohemes52 Member

bohemes52

Posté(e)
  • Auteur
Posté(e)

All processes killed
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\Software\BrowseBurst\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Wow6432Node\BrowseBurst\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\1396421883_BrowseBurstSetup_RASAPI32\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\1396421883_BrowseBurstSetup_RASMANCS\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\BrowseBurst_RASAPI32\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\BrowseBurst_RASMANCS\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\BrowseBurst_Setup_RASAPI32\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\BrowseBurst_Setup_RASMANCS\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\updateBrowseBurst_RASAPI32\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\updateBrowseBurst_RASMANCS\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\utilBrowseBurst_RASAPI32\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\utilBrowseBurst_RASMANCS\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\System\ControlSet001\services\eventlog\Application\Update BrowseBurst\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\System\ControlSet001\services\eventlog\Application\Util BrowseBurst\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\System\ControlSet001\services\Update BrowseBurst\ not found.
Registry key HKEY_LOCAL_MACHINE\System\ControlSet001\services\Util BrowseBurst\ not found.
Registry key HKEY_LOCAL_MACHINE\System\ControlSet002\services\eventlog\Application\Update BrowseBurst\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\System\ControlSet002\services\eventlog\Application\Util BrowseBurst\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\System\ControlSet002\services\Update BrowseBurst\ not found.
Registry key HKEY_LOCAL_MACHINE\System\ControlSet002\services\Util BrowseBurst\ not found.
Registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\eventlog\Application\Update BrowseBurst\ not found.
Registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\eventlog\Application\Util BrowseBurst\ not found.
Registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\Update BrowseBurst\ not found.
Registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\Util BrowseBurst\ not found.
Registry value HKEY_LOCAL_MACHINE\System\Software\COMODO\Firewall Pro\Configurations\2\Firewall\Policy\5\\Filename deleted successfully.
Registry value HKEY_LOCAL_MACHINE\System\Software\COMODO\Firewall Pro\Configurations\2\Firewall\Policy\5\\DeviceName deleted successfully.
Registry value HKEY_LOCAL_MACHINE\System\Software\COMODO\Firewall Pro\Configurations\2\Firewall\Policy\6\\Filename deleted successfully.
Registry value HKEY_LOCAL_MACHINE\System\Software\COMODO\Firewall Pro\Configurations\2\Firewall\Policy\6\\DeviceName deleted successfully.
Registry value HKEY_LOCAL_MACHINE\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\15\\. "Filename" not found.
Registry value HKEY_LOCAL_MACHINE\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\15\\DeviceName deleted successfully.
Registry value HKEY_LOCAL_MACHINE\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\18\\Filename deleted successfully.
Registry value HKEY_LOCAL_MACHINE\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\18\\DeviceName deleted successfully.
Registry value HKEY_LOCAL_MACHINE\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\18\Rules\0\Allowed\0\\Filename deleted successfully.
Registry value HKEY_LOCAL_MACHINE\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\18\Rules\0\Allowed\0\\DeviceName deleted successfully.
Registry value HKEY_LOCAL_MACHINE\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\19\\Filename deleted successfully.
Registry value HKEY_LOCAL_MACHINE\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\19\\. "DeviceName" not found.
Registry value HKEY_LOCAL_MACHINE\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\25\\Filename deleted successfully.
Registry value HKEY_LOCAL_MACHINE\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\25\\DeviceName deleted successfully.
Registry value HKEY_LOCAL_MACHINE\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\26\Rules\0\Allowed\0\\1 "Filename" not found.
Registry value HKEY_LOCAL_MACHINE\System\Software\COMODO\Firewall Pro\Configurations\2\HIPS\Policy\26\Rules\0\Allowed\0\\DeviceName deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

User: Serge
->Temp folder emptied: 48074 bytes
->Temporary Internet Files folder emptied: 3193 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 20530150 bytes
->Flash cache emptied: 492 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 944 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 750625828 bytes

Total Files Cleaned = 735,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 04132014_142634

Files moved on Reboot...
C:\Users\Serge\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Serge\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File move failed. C:\Windows\temp\_avast_\AvastLock.txt scheduled to be moved on reboot.
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

Registry entries deleted on Reboot...

  • Modérateurs
Dylav Devil Member !

Dylav

Posté(e)
  • Modérateurs
Posté(e)

Le problème semble avoir trouvé sa solution. icon_Super.gif
Ainsi, afin de signaler clairement à ceux qui ont un problème similaire qu'ils ont peut-être une solution toute trouvée (s'ils pensent à utiliser la fonction Recherche en indiquant le mot-clé "résolu" auparavant), et afin de signaler aux autres contributeurs qu'il est inutile de continuer à se creuser la tête sur le problème (à moins d'avoir des suppléments d'informations à apporter pour mieux comprendre ce qui posait problème), un modérateur a préfixé le titre du topic avec la mention [Résolu].
Merci, à l'avenir, de bien vouloir prendre à votre charge cette mise à jour quand vous estimez que votre problème a été résolu de manière satisfaisante (et parallèlement, si le problème a disparu "mystérieusement", inutile d'induire les gens en erreur icon_wink.gif) Pour cela, modifier.gif votre premier message icon_smile.gif

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...