Otomatik ayar

Résolu
FUSHIA -  
 gen-hackman -
Bonjour,

Depuis plusieurs jours j'ai une fenêtre de téléchargement OTOMATIK AYAR, impossible à fermer, qui reste au milieu de mon écran. Je pense qu'il s'agit d'un SPAM. Hier j'ai débranché la prise de courant qui alimente tout le système et ai cru en être débarassé. Hélas, ce matin je rallume mon ordinateur et cette fenêtre est toujours là. De plus cette fenêtre m'empêche d'éteindre mon écran et ralentit le sysytème.
Je travaille sous windows XP et ai Avast comme antivirus

Merci à celui ou à celle qui pourra m'aider à m'en débarasser
Configuration: Windows XP
Firefox 3.5

46 réponses

  • 1
  • 2
  • 3
Résumé de la discussion

La problématique porte sur une fenêtre de téléchargement nommée OTOMATIK AYAR qui persiste au milieu de l’écran sous Windows XP, avec Avast activé, et empêche l’extinction de l’écran et ralenti le système. Plusieurs réponses suggèrent des outils de désinfection comme OTL (OldTimer) pour analyser le système et générer des rapports (OTL.txt), puis partager ces rapports via un service de dépôt de fichiers. D’autres pistes évoquent OAD, des utilitaires comme fushia-zip et Malwarebytes pour nettoyer les éléments résiduels et les entrées de registre, puis relancer l’ordinateur et vérifier l’absence d’objets malveillants. Certaines interventions préconisent enfin de surveiller les processus et de nettoyer les fichiers temporaires, rappelant que des rapports détaillés et des vérifications post-nettoyage facilitent la traçabilité des infections.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. gen-hackman
     
    salut :

    Télécharge OTL de OLDTimer

    et enregistre le sur ton Bureau.

    Double clic sur OTL.exe pour le lancer.

    Coche les 2 cases Lop et Purity

    Coche la case devant scan all users

    Clic sur Run Scan.

    A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).

    Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)

    NE LE POSTE PAS SUR LE FORUM

    Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/

    Clique sur Parcourir et cherche le fichier ci-dessus.

    Clique sur Ouvrir.

    Clique sur "Cliquez ici pour déposer le fichier".

    Un lien de cette forme :

    http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

    est ajouté dans la page.

    Copie ce lien dans ta réponse.

    Tu feras la meme chose avec le "Extra.txt" s'il t'est demandé
    1
  2. fushia
     
    merco gen-hackman pour ton aide. Ai-je bien réussi à tenvoyer le dossier? merci de me le faire savoir
    0
  3. gen-hackman
     
    non il faut que tu renvoies le lien obtenu sur le site
    0
    1. fushia
       
      excuse-moi gen-hackman mais je suis un peu perdue et ne comprends pas ce que je dois faire. Je débute dans le métier. Peux-tu m'expliquer plus en détail la procédure à effectuer.
      J'ai bien réussi à télécharger ce que tu me demandais à exécuter le programme et à obtenir le bloc-notes, mais
      ne comprends pas ce que je dois t'envoyer et surtout comment.

      Excuse la débutante

      Merci pour ton aide
      0
  4. gen-hackman
     
    Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/

    Clique sur Parcourir et cherche le fichier ci-dessus.

    Clique sur Ouvrir.

    Clique sur "Cliquez ici pour déposer le fichier".

    Un lien de cette forme :

    http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

    est ajouté dans la page.

    Copie ce lien dans ta réponse.
    0
    1. FUSHIA
       
      Alors, cette fois-ci est-ce que j'y suis arrivée avec tes explications particulièrement claires dont je te remercie infiniment.
      0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. gen-hackman
     
    Clique sur "Cliquez ici pour déposer le fichier".

    Un lien de cette forme :

    http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

    est ajouté dans la page.

    Copie ce lien dans ta réponse.
    0
    1. fushia
       
      http://www.cijoint.fr/cjlink.php?file=cj200907/cijFAb08FZ.txt

      ça y est j'y suis enfin arrivée et non sans mal. Il suffisait de faire un clic droit puis un clic gauche. Encore fallait-il le savoir ? L'encyclopédie de l'informatique est inaccessible ! Normal, c'est le 14/07

      Est-t-il possible de devenir membre de commentçamarche sans que cela pose des problèmes de sécurité informatiques ?

      mille mercis
      0
  7. gen-hackman
     
    ok ca c'est le Extra il me faudrait OTL.txt
    0
    1. fushia
       
      http://www.cijoint.fr/cjlink.php?file=cj200907/cijOPSAiNM.txt

      Est-ce bien ce fichier ?

      Que j'ai eu du mal !

      Dois-je garder ces fichiers par la suite ?

      Tu es membre je crois de comment ça marche. Crois-tu que celà me rendrait service d'y être ?

      Merci pour tout
      0
    2. fushia
       
      http://www.cijoint.fr/cjlink.php?file=cj200907/cijOPSAiNM.txt

      Vais-je enfin y arriver ?

      Dois-je garder par la suite les fichiers que tu m'as demandé de télécharger ?

      Crois-tu que cela me rendrait service d'être membre de commentçamarche ?

      Merci pour ta patience et surtout pour toute ton aide
      0
  8. gen-hackman
     
    Double clic sur OTL.exe pour le lancer.

    Copie la liste qui se trouve en gras ci-dessous,

    et colle-la dans la zone sous Customs Scans/Fixes

    :processes
    explorer.exe
    iexplore.exe
    firefox.exe
    msnmsgr.exe
    TeaTimer.exe

    :services

    :OTL
    O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
    O18 - Protocol\Handler\msdaipp - No CLSID value found
    O18 - Protocol\Handler\ipp - No CLSID value found
    O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
    O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
    O4 - HKLM..\Run: [DXDllRegExe] File not found
    :reg
    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "Adobe Reader Speed Launcher"=-
    "HP Component Manager"=-

    :files
    C:\WINDOWS\WMSysPrx.prx

    :commands
    [emptytemp]
    [start explorer]
    [reboot]


    Clique sur RunFix pour lancer la suppression.

    Poste le rapport.

    ==========
    ensuite :

    Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

    Télécharges :

    Malwarebytes

    ou :

    Malwarebytes

    * Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

    (NB : Si tu as un message d'erreur t'indiquant qu'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : COMCTL32.OCX

    * Potasses le Tuto pour te familiariser avec le prg :

    ( cela dit, il est très simple d'utilisation ).

    relance malwarebytes en suivant scrupuleusement ces consignes :

    ! Déconnecte toi et ferme toutes applications en cours !

    * Lance Malwarebyte's .

    Fais un examen dit "Complet" .

    --> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
    --> à la fin tu cliques sur "résultat" .
    --> Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

    Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

    Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)

    0
    1. FUSHIA
       
      Je viens d'exécuter OTL.exe. Al'issu du processus j'ai eu le message suivant : the system requires a reboot to finish removing files Click sur ok to reboot the system ce que j'ai fait. L'ordinateur a donc redémarré avec la présent d'otomatik ayar et j'ai trouvé sur le bureau une icone DESKTOP.INI que j'ai ouverte et dans laquelle il y avait ceci : [LocalizedFileNames]
      Lecteur Windows Media.lnk=@C:\WINDOWS\inf\unregmp2.exe,-4
      Il ne m'a pas été demandé de poster un message d'erreur.
      0
    2. fushia
       
      Est-ce celà que tu attends ?


      All processes killed
      ========== PROCESSES ==========
      No active process named explorer.exe was found!
      No active process named iexplore.exe was found!
      No active process named firefox.exe was found!
      No active process named msnmsgr.exe was found!
      No active process named TeaTimer.exe was found!
      ========== SERVICES/DRIVERS ==========
      ========== OTL ==========
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui\ deleted successfully.
      C:\WINDOWS\System32\igfxsrvc.dll unregistered successfully.
      C:\WINDOWS\System32\igfxsrvc.dll moved successfully.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaip­p\ deleted successfully.
      File Protocol\Handler\msdaipp - No CLSID value found not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ipp\ deleted successfully.
      File Protocol\Handler\ipp - No CLSID value found not found.
      File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found.
      Starting removal of ActiveX control DirectAnimation Java Classes
      Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java
      0
  9. gen-hackman
     
    Crois-tu que cela me rendrait service d'être membre de commentçamarche ?

    toi seule peut le savoir :)

    http://www.commentcamarche.net/forum/affich 13348545 otomatik ayar?#11
    0
    1. FUSHIA
       
      Je viens d'exécuter OTL.exe. Al'issu du processus j'ai eu le message suivant : the system requires a reboot to finish removing files Click sur ok to reboot the system ce que j'ai fait. L'ordinateur a donc redémarré avec la présent d'otomatik ayar et j'ai trouvé sur le bureau une icone DESKTOP.INI que j'ai ouverte et dans laquelle il y avait ceci : [LocalizedFileNames]
      Lecteur Windows Media.lnk=@C:\WINDOWS\inf\unregmp2.exe,-4
      Il ne m'a pas été demandé de poster un message d'erreur.

      Si je te demande si cela me rendrait service de m'inscrire sur le site c'est précisément parce que je ne le connais pas et ne sais s'il est réservé aux personnes particulièrement et à ceux et celles qui comme moi n'y connaissent rien.
      0
  10. gen-hackman
     
    ok ce qui m'interesse c'est C:\_OTL\ et le rapport de suppression
    0
    1. fushia
       
      All processes killed
      ========== PROCESSES ==========
      No active process named explorer.exe was found!
      No active process named iexplore.exe was found!
      No active process named firefox.exe was found!
      No active process named msnmsgr.exe was found!
      No active process named TeaTimer.exe was found!
      ========== SERVICES/DRIVERS ==========
      ========== OTL ==========
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui\ deleted successfully.
      C:\WINDOWS\System32\igfxsrvc.dll unregistered successfully.
      C:\WINDOWS\System32\igfxsrvc.dll moved successfully.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaipp\ deleted successfully.
      File Protocol\Handler\msdaipp - No CLSID value found not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ipp\ deleted successfully.
      File Protocol\Handler\ipp - No CLSID value found not found.
      File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found.
      Starting removal of ActiveX control DirectAnimation Java Classes
      Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\DownloadInformation\\INF .
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\ deleted successfully.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\DirectAnimation Java Classes\ not found.
      File oft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab not found.
      Starting removal of ActiveX control Microsoft XML Parser for Java
      Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\DownloadInformation\\INF .
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\ deleted successfully.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Microsoft XML Parser for Java\ not found.
      Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\DXDllRegExe deleted successfully.
      ========== REGISTRY ==========
      Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersio­n\Run not found.
      Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersio­n\Run not found.
      ========== FILES ==========
      C:\WINDOWS\WMSysPrx.prx moved successfully.
      ========== COMMANDS ==========

      [EMPTYTEMP]

      User: All Users

      User: Default User
      ->Temp folder emptied: 0 bytes
      ->Temporary Internet Files folder emptied: 33170 bytes

      User: LocalService
      File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
      File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
      File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
      ->Temp folder emptied: 115616 bytes
      ->Temporary Internet Files folder emptied: 33170 bytes

      User: NetworkService
      ->Temp folder emptied: 0 bytes
      File delete failed. C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
      ->Temporary Internet Files folder emptied: 33237 bytes
      Est-ce celà que tu veux ?

      User: Propriétaire
      ->Temp folder emptied: 89560499 bytes
      ->Temporary Internet Files folder emptied: 37856265 bytes
      ->FireFox cache emptied: 43139075 bytes

      %systemdrive% .tmp files removed: 0 bytes
      %systemroot% .tmp files removed: 1185468 bytes
      %systemroot%\System32 .tmp files removed: 3072 bytes
      File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5e4.dat scheduled to be deleted on reboot.
      Windows Temp folder emptied: 1147229 bytes
      RecycleBin emptied: 10937893 bytes

      Total Files Cleaned = 175,52 mb


      OTL by OldTimer - Version 3.0.7.1 log created on 07142009_153036
      0
    2. fushia
       
      Est-ce celà que tu attends

      All processes killed
      ========== PROCESSES ==========
      No active process named explorer.exe was found!
      No active process named iexplore.exe was found!
      No active process named firefox.exe was found!
      No active process named msnmsgr.exe was found!
      No active process named TeaTimer.exe was found!
      ========== SERVICES/DRIVERS ==========
      ========== OTL ==========
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui\ deleted successfully.
      C:\WINDOWS\System32\igfxsrvc.dll unregistered successfully.
      C:\WINDOWS\System32\igfxsrvc.dll moved successfully.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaip­p\ deleted successfully.
      File Protocol\Handler\msdaipp - No CLSID value found not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ipp\ deleted successfully.
      File Protocol\Handler\ipp - No CLSID value found not found.
      File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found.
      Starting removal of ActiveX control DirectAnimation Java Classes
      Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java
      0
  11. gen-hackman
     
    n'importe qui peut s'inscrire :)
    0
    1. fushia
       
      All processes killed

      est-ce celà que tu attends ?

      ========== PROCESSES ==========es


      No active process named explorer.exe was found!
      No active process named iexplore.exe was found!
      No active process named firefox.exe was found!
      No active process named msnmsgr.exe was found!
      No active process named TeaTimer.exe was found!
      ========== SERVICES/DRIVERS ==========
      ========== OTL ==========
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui\ deleted successfully.
      C:\WINDOWS\System32\igfxsrvc.dll unregistered successfully.
      C:\WINDOWS\System32\igfxsrvc.dll moved successfully.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaip­p\ deleted successfully.
      File Protocol\Handler\msdaipp - No CLSID value found not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ipp\ deleted successfully.
      File Protocol\Handler\ipp - No CLSID value found not found.
      File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found.
      Starting removal of ActiveX control DirectAnimation Java Classes
      Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java
      0
    2. fushia
       
      Est-celà que tu attends ?

      All processes killed
      ========== PROCESSES ==========
      No active process named explorer.exe was found!
      No active process named iexplore.exe was found!
      No active process named firefox.exe was found!
      No active process named msnmsgr.exe was found!
      No active process named TeaTimer.exe was found!
      ========== SERVICES/DRIVERS ==========
      ========== OTL ==========
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui\ deleted successfully.
      C:\WINDOWS\System32\igfxsrvc.dll unregistered successfully.
      C:\WINDOWS\System32\igfxsrvc.dll moved successfully.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaip­p\ deleted successfully.
      File Protocol\Handler\msdaipp - No CLSID value found not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ipp\ deleted successfully.
      File Protocol\Handler\ipp - No CLSID value found not found.
      File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found.
      Starting removal of ActiveX control DirectAnimation Java Classes
      Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java
      0
    3. fushia
       
      est-ce celà que tu attends ?

      All processes killed
      ========== PROCESSES ==========
      No active process named explorer.exe was found!
      No active process named iexplore.exe was found!
      No active process named firefox.exe was found!
      No active process named msnmsgr.exe was found!
      No active process named TeaTimer.exe was found!
      ========== SERVICES/DRIVERS ==========
      ========== OTL ==========
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui\ deleted successfully.
      C:\WINDOWS\System32\igfxsrvc.dll unregistered successfully.
      C:\WINDOWS\System32\igfxsrvc.dll moved successfully.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaip­p\ deleted successfully.
      File Protocol\Handler\msdaipp - No CLSID value found not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ipp\ deleted successfully.
      File Protocol\Handler\ipp - No CLSID value found not found.
      File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found.
      Starting removal of ActiveX control DirectAnimation Java Classes
      Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java
      0
    4. fushia
       
      As-tu reçu mon dernier mail avec le document que je pense que tu attends ?

      All processes killed
      ========== PROCESSES ==========
      No active process named explorer.exe was found!
      No active process named iexplore.exe was found!
      No active process named firefox.exe was found!
      No active process named msnmsgr.exe was found!
      No active process named TeaTimer.exe was found!
      ========== SERVICES/DRIVERS ==========
      ========== OTL ==========
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui\ deleted successfully.
      C:\WINDOWS\System32\igfxsrvc.dll unregistered successfully.
      C:\WINDOWS\System32\igfxsrvc.dll moved successfully.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaip­p\ deleted successfully.
      File Protocol\Handler\msdaipp - No CLSID value found not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ipp\ deleted successfully.
      File Protocol\Handler\ipp - No CLSID value found not found.
      File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found.
      Starting removal of ActiveX control DirectAnimation Java Classes
      Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java
      0
  14. fushia
     
    Je commence à m'inquiéter parce que je n'arrive plus à te joindre

    Est-ce celà que tu attends ?

    All processes killed
    ========== PROCESSES ==========
    No active process named explorer.exe was found!
    No active process named iexplore.exe was found!
    No active process named firefox.exe was found!
    No active process named msnmsgr.exe was found!
    No active process named TeaTimer.exe was found!
    ========== SERVICES/DRIVERS ==========
    ========== OTL ==========
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui\ deleted successfully.
    C:\WINDOWS\System32\igfxsrvc.dll unregistered successfully.
    C:\WINDOWS\System32\igfxsrvc.dll moved successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaip­p\ deleted successfully.
    File Protocol\Handler\msdaipp - No CLSID value found not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ipp\ deleted successfully.
    File Protocol\Handler\ipp - No CLSID value found not found.
    File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found.
    Starting removal of ActiveX control DirectAnimation Java Classes
    Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java
    0
  15. fushia
     
    Est-ce celà que tu attends ?

    All processes killed
    ========== PROCESSES ==========
    No active process named explorer.exe was found!
    No active process named iexplore.exe was found!
    No active process named firefox.exe was found!
    No active process named msnmsgr.exe was found!
    No active process named TeaTimer.exe was found!
    ========== SERVICES/DRIVERS ==========
    ========== OTL ==========
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui\ deleted successfully.
    C:\WINDOWS\System32\igfxsrvc.dll unregistered successfully.
    C:\WINDOWS\System32\igfxsrvc.dll moved successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaip­p\ deleted successfully.
    File Protocol\Handler\msdaipp - No CLSID value found not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ipp\ deleted successfully.
    File Protocol\Handler\ipp - No CLSID value found not found.
    File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found.
    Starting removal of ActiveX control DirectAnimation Java Classes
    Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java
    0
  17. fushia
     
    J'ai télécharger Malwarebytes en français, mais quand j'ai voulu l'ouvrir un message m'a indiqué que si je l'exécutais, cela présenterait des risques pour mon ordinateur
    0
  18. gen-hackman
     
    execute comme c'est indiqué
    0
    1. fushia
       
      Je te renvoie le message d'erreur qui était incomplet.

      All processes killed
      ========== PROCESSES ==========
      No active process named explorer.exe was found!
      No active process named iexplore.exe was found!
      No active process named firefox.exe was found!
      No active process named msnmsgr.exe was found!
      No active process named TeaTimer.exe was found!
      ========== SERVICES/DRIVERS ==========
      ========== OTL ==========
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui\ deleted successfully.
      C:\WINDOWS\System32\igfxsrvc.dll unregistered successfully.
      C:\WINDOWS\System32\igfxsrvc.dll moved successfully.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaip­p\ deleted successfully.
      File Protocol\Handler\msdaipp - No CLSID value found not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ipp\ deleted successfully.
      File Protocol\Handler\ipp - No CLSID value found not found.
      File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found.
      Starting removal of ActiveX control DirectAnimation Java Classes
      Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\DownloadInformation\\INF .
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\ deleted successfully.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\DirectAnimation Java Classes\ not found.
      File oft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab not found.
      Starting removal of ActiveX control Microsoft XML Parser for Java
      Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\DownloadInformation\\INF .
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\ deleted successfully.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Microsoft XML Parser for Java\ not found.
      Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion­\Run\\DXDllRegExe deleted successfully.
      ========== REGISTRY ==========
      Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersio­­n\Run not found.
      Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersio­­n\Run not found.
      ========== FILES ==========
      C:\WINDOWS\WMSysPrx.prx moved successfully.
      ========== COMMANDS ==========

      [EMPTYTEMP]

      User: All Users

      User: Default User
      ->Temp folder emptied: 0 bytes
      ->Temporary Internet Files folder emptied: 33170 bytes

      User: LocalService
      File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
      File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
      File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
      ->Temp folder emptied: 115616 bytes
      ->Temporary Internet Files folder emptied: 33170 bytes

      User: NetworkService
      ->Temp folder emptied: 0 bytes
      File delete failed. C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
      ->Temporary Internet Files folder emptied: 33237 bytes

      User: Propriétaire
      ->Temp folder emptied: 89560499 bytes
      ->Temporary Internet Files folder emptied: 37856265 bytes
      ->FireFox cache emptied: 43139075 bytes

      %systemdrive% .tmp files removed: 0 bytes
      %systemroot% .tmp files removed: 1185468 bytes
      %systemroot%\System32 .tmp files removed: 3072 bytes
      File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5e4.dat scheduled to be deleted on reboot.
      Windows Temp folder emptied: 1147229 bytes
      RecycleBin emptied: 10937893 bytes

      Total Files Cleaned = 175,52 mb


      OTL by OldTimer - Version 3.0.7.1 log created on 07142009_153036

      Files\Folders moved on Reboot...
      File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
      C:\WINDOWS\temp\Perflib_Perfdata_5e4.dat moved successfully.

      Registry entries deleted on Reboot...


      j'ai téléchargé et mis à jour Malwarebytes

      Je vais donc fermer mon ordinateur et le relancer après.
      Lire la suite

      Répondre à fushia
      0
    2. fushia
       
      Je te renvoie le message d'erreur qui était incomplet.

      All processes killed
      ========== PROCESSES ==========
      No active process named explorer.exe was found!
      No active process named iexplore.exe was found!
      No active process named firefox.exe was found!
      No active process named msnmsgr.exe was found!
      No active process named TeaTimer.exe was found!
      ========== SERVICES/DRIVERS ==========
      ========== OTL ==========
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui\ deleted successfully.
      C:\WINDOWS\System32\igfxsrvc.dll unregistered successfully.
      C:\WINDOWS\System32\igfxsrvc.dll moved successfully.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaip­p\ deleted successfully.
      File Protocol\Handler\msdaipp - No CLSID value found not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ipp\ deleted successfully.
      File Protocol\Handler\ipp - No CLSID value found not found.
      File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found.
      Starting removal of ActiveX control DirectAnimation Java Classes
      Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\DownloadInformation\\INF .
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\ deleted successfully.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\DirectAnimation Java Classes\ not found.
      File oft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab not found.
      Starting removal of ActiveX control Microsoft XML Parser for Java
      Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\DownloadInformation\\INF .
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\ deleted successfully.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Microsoft XML Parser for Java\ not found.
      Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion­\Run\\DXDllRegExe deleted successfully.
      ========== REGISTRY ==========
      Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersio­­n\Run not found.
      Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersio­­n\Run not found.
      ========== FILES ==========
      C:\WINDOWS\WMSysPrx.prx moved successfully.
      ========== COMMANDS ==========

      [EMPTYTEMP]

      User: All Users

      User: Default User
      ->Temp folder emptied: 0 bytes
      ->Temporary Internet Files folder emptied: 33170 bytes

      User: LocalService
      File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
      File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
      File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
      ->Temp folder emptied: 115616 bytes
      ->Temporary Internet Files folder emptied: 33170 bytes

      User: NetworkService
      ->Temp folder emptied: 0 bytes
      File delete failed. C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
      ->Temporary Internet Files folder emptied: 33237 bytes

      User: Propriétaire
      ->Temp folder emptied: 89560499 bytes
      ->Temporary Internet Files folder emptied: 37856265 bytes
      ->FireFox cache emptied: 43139075 bytes

      %systemdrive% .tmp files removed: 0 bytes
      %systemroot% .tmp files removed: 1185468 bytes
      %systemroot%\System32 .tmp files removed: 3072 bytes
      File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
      File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5e4.dat scheduled to be deleted on reboot.
      Windows Temp folder emptied: 1147229 bytes
      RecycleBin emptied: 10937893 bytes

      Total Files Cleaned = 175,52 mb


      OTL by OldTimer - Version 3.0.7.1 log created on 07142009_153036

      Files\Folders moved on Reboot...
      File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
      C:\WINDOWS\temp\Perflib_Perfdata_5e4.dat moved successfully.

      Registry entries deleted on Reboot...


      j'ai téléchargé et mis à jour Malwarebytes

      Je vais donc fermer mon ordinateur et le relancer après.
      Lire la suite
      0
    3. FUSHIA
       
      J'essaie de reprendre dans la conversation mais tu sais c'est la 1ere que je me lance dans un forum de discutions. Un peu de tolérance s'il te plait et toutes mes excuses pour toutes mes bêtises.
      J'espère que ce mail t'arrivera car je voudrai éteindre mon système et surtout mon écran avant que tu me guides vers d'autres horizons.
      Merci pour tout le temps que tu auras consacré à mon souci.
      0
  19. fushia
     
    Je te renvoie le message d'erreur qui était incomplet.

    All processes killed
    ========== PROCESSES ==========
    No active process named explorer.exe was found!
    No active process named iexplore.exe was found!
    No active process named firefox.exe was found!
    No active process named msnmsgr.exe was found!
    No active process named TeaTimer.exe was found!
    ========== SERVICES/DRIVERS ==========
    ========== OTL ==========
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui\ deleted successfully.
    C:\WINDOWS\System32\igfxsrvc.dll unregistered successfully.
    C:\WINDOWS\System32\igfxsrvc.dll moved successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaipp\ deleted successfully.
    File Protocol\Handler\msdaipp - No CLSID value found not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ipp\ deleted successfully.
    File Protocol\Handler\ipp - No CLSID value found not found.
    File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found.
    Starting removal of ActiveX control DirectAnimation Java Classes
    Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\DownloadInformation\\INF .
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\DirectAnimation Java Classes\ not found.
    File oft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab not found.
    Starting removal of ActiveX control Microsoft XML Parser for Java
    Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\DownloadInformation\\INF .
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Microsoft XML Parser for Java\ not found.
    Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\DXDllRegExe deleted successfully.
    ========== REGISTRY ==========
    Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersio­n\Run not found.
    Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersio­n\Run not found.
    ========== FILES ==========
    C:\WINDOWS\WMSysPrx.prx moved successfully.
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: All Users

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 33170 bytes

    User: LocalService
    File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
    File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
    ->Temp folder emptied: 115616 bytes
    ->Temporary Internet Files folder emptied: 33170 bytes

    User: NetworkService
    ->Temp folder emptied: 0 bytes
    File delete failed. C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
    ->Temporary Internet Files folder emptied: 33237 bytes

    User: Propriétaire
    ->Temp folder emptied: 89560499 bytes
    ->Temporary Internet Files folder emptied: 37856265 bytes
    ->FireFox cache emptied: 43139075 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 1185468 bytes
    %systemroot%\System32 .tmp files removed: 3072 bytes
    File delete failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
    File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_5e4.dat scheduled to be deleted on reboot.
    Windows Temp folder emptied: 1147229 bytes
    RecycleBin emptied: 10937893 bytes

    Total Files Cleaned = 175,52 mb

    OTL by OldTimer - Version 3.0.7.1 log created on 07142009_153036

    Files\Folders moved on Reboot...
    File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
    C:\WINDOWS\temp\Perflib_Perfdata_5e4.dat moved successfully.

    Registry entries deleted on Reboot...

    j'ai téléchargé et mis à jour Malwarebytes

    Je vais donc fermer mon ordinateur et le relancer après.
    0
  20. gen-hackman
     
    inscris-toi sur le site ca sera plus facile pour toi :)

    pour ton ecran si tu le debranches il s'eteind non quand même
    0
    1. fushia
       
      Bonjour,

      Je viens de m'inscrire
      0
    2. fushias Messages postés 82 Statut Membre 4
       
      Il est joujours là ce cher ami ! Que dois-je faire comme dit la chanson ?
      0
    3. FUSHIAS
       
      voilà le rapport


      15/07/2009 ---- 14:29:39,60

      ----------------------------------
      §§§§§§ [otomatik ayar] §§§§§§
      ----------------------------------
      [X] Registre

      -------------- [ ] rapide
      -- Fichier --- [ ] disque systeme
      ------------- [X] complete


      ********************
      [Registre]
      ********************


      [HKEY_USERS\S-1-5-21-839522115-562591055-2147116355-1003\Software\Microsoft\Search Assistant\ACMru\5603]
      "011"="otomatik ayar"

      [HKEY_USERS\S-1-5-21-839522115-562591055-2147116355-1003\Software\Microsoft\Search Assistant\ACMru\5604]
      "002"="otomatik ayar"

      *******************
      [Fichier]
      *******************



      *********************
      [Même date]
      *********************

      Aucun fichier créé à la même date détecté


      Outil Aide Diagnostic By !aur3n7 Version 1.1
      ----------------------------------
      §§§§§ Fin Rapport §§§§§
      ----------------------------------
      0
  21. fushias Messages postés 82 Statut Membre 4
     
    C'est un très grand sport pour mois, celà a le mérite de faire travailler mes neurones....OTOMATIK AYAR fait toujours partie de mon quotidien......
    0
  • 1
  • 2
  • 3