Oracle Amérique

Hello,

Thank you for your response, I will try to do that, hoping it works.

See you soon.

Take your time, but don't linger too much on the way :P

Besides, you're from Lyon, between you and me, it should go much faster :lol:

O.o°*Member, CCM security contributor o°.Oø¤º°'°º¤ø
=>> Breathe deeply, write your message in proper French and clearly. It's going to be fine, you'll see, well, we're trying!!! o°Oø

Hello,

pfff complicated to do all this with a machine that won't move forward and only linked to a desktop PC that blocks all sites due to the group policy.

Anyway, to keep it short, I downloaded the ZHPDIAG software, installed it, checked all the modules, and started the diagnosis.
However, four times I got stuck at 39% of the process, and the software froze and became unresponsive, so I started the PC in safe mode and was finally able to complete the diag. But now I don’t know if it is viable and usable.

Moreover, I couldn't send it from my personal PC. So I copied the report onto a USB stick to send it from my desktop PC. Two problems:
1: In the report, there were lines displayed in color, whereas the copy is all black.
2: Since I couldn't send it via cjoint, I used the attachment from Malekal, here is the link: https://pjjoint.malekal.com/files.php?id=ZHPDiag_20130228_o10i14w5z13m6
I hope it will still be usable given your skills in the field, and also, hopefully, there will be a solution to my troubles.

Thanks again, and I hope to hear from you soon.

I'm surprised that your computer can't take it anymore!!!

You have two antivirus programs, Avast and AVG, you need to uninstall one!!!

You're risking a conflict and crashing your PC!!!

Otherwise, your PC is loaded with adware!!!

/!\ Attention:
More and more programs offer the installation of toolbars (Toolbar, pre-checked box), so don't forget to uncheck the corresponding boxes during installation.

In addition to this, strongly avoid sites like 01@net (on the road to recovery!) and Softonic, free and open-source software is repackaged with their toolbars!

? Download and save ADWcleaner on your desktop (Thanks to Xplode):

http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner

Run it,

click on search and post its report.

--
O.o°*Member, Security Contributor CCM o°.Oø¤º°'°º¤ø
=>>Breathe deeply, write your message in good French and clearly. It'll be fine, you'll see, at least we try!!! o°Oø

Your message confirms that I'm not skilled in IT. For the two antivirus programs, I have tried several times to uninstall AVG; the procedure starts and completes, but it does not disappear from the programs.
Here is the report from AdwCleaner,
https://www.cjoint.com/?CBCtTuZgsb1
hoping there will be a solution.
Just a quick question: at this stage, can you tell me if you'll be able to repair my PC and help me recover my data, or is it too early to say?

Talk to you soon... and thanks again.

The PC will be cleaned, but it takes time :D

We will uninstall AVG, but first, we need to clean the PC!

Restart ADWC, click on Delete,

post its report after restarting the PC

You will see that things will get better right away :-)

--
O.o°*Member, Security Contributor CCM o°.Oø¤º°'°º¤ø
=>>Breathe deeply, write your message in good French and clearly. Everything will be fine, you’ll see, well, we’ll try!!! o°Oø

Well,

indeed it is already better, but it still crashes...
and then Oracle still asks to be installed.
a big thank you to you for your help
attached is the report following the restart
https://www.cjoint.com/c/CBCwgMpFjFp

it's going to happen, we'll try to fix everything :D

restart ADWC, click on Uninstall,

restart Zhpdiag,

/!\ Users of Vista, Seven, and W8:

* Right-click on the ZHPdiag logo, "run as Administrator"

* Click on the screwdriver, select all modules.

* Click on the icon that represents a magnifying glass (“Launch the diagnosis”)
* Save the report to your Desktop using the icon that represents a floppy disk
* Host the ZHPDiag.txt report on Cjoint, then copy/paste the provided link in your next response on the forum:

https://www.cjoint.com/ => https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

wait for my reply, @ ++

--
O.o°*Member, Security Contributor CCM o°.Oø¤º°'°º¤ø
=>> Breathe deeply, write your message clearly and in proper French. It will be fine, you'll see, we'll try!!! o°Oø

Hello,

indeed things are getting much better ;-)

I am at the office and couldn't send the report via cjoint. Sorry.

Here is the link to the report: https://pjjoint.malekal.com/files.php?id=ZHPDiag_20130301_k8k14o14c12e9

We will first remove AVG and the remaining infections, then make some updates

uninstall Spybot, it is useless!

* /!\ Warning /!\,
* this script is only valid for this PC, during cleaning, do not use it on another PC, risk of crashing!

* Launch ZHPFix via the shortcut on your Desktop

/!\ Users of Vista, Seven and W8:

* Right-click on the ZHPFix logo, “run as Administrator”

* * Copy ( Ctrl + C ) and paste ( Ctrl + V ) the following lines in bold into ZHPFix:
---------------------------------------------------------

O4 - HKLM\..\Wow6432Node\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG2012\avgtray.exe (.not file.)
O23 - Service: AVG Firewall (avgfws) . (.AVG Technologies CZ, s.r.o. - AVG Firewall Service.) - C:\Program Files (x86)\AVG\AVG2013\avgfws.exe
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {00BCC0AD-0699-48B6-9900-3C53BBCD4DAC}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {17118574-A5FD-4323-B005-311326F748B3}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {2393F144-F88F-4FB3-8B57-9D6F8B4E8F9E}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {34C5BC15-2401-4980-9D95-ABD2CE8DD08A}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {38D1C189-B133-401C-A729-3C47ED984B31}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {61A3F855-4587-4187-9D77-2EF8CD825A47}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {78DC83C7-7E9D-4518-8DFE-C8BBF69173D9}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {BB4F0BE4-3DCB-4C5C-8B2B-C07CC916A6B5}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {EB505EA6-2D5E-4920-A3BD-89C28EEFA5FA}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {FA109F0F-122E-4D48-9DBF-14DC02EE85E4}
O42 - Software: AVG 2012 - (.AVG Technologies.) [HKLM][64Bits] -- {49A4F76E-4285-4AEE-9D5D-9CCE5E86AA8F}
O42 - Software: AVG 2012 - (.AVG Technologies.) [HKLM][64Bits] -- {857B32C1-7C87-40B5-B2A5-D06F49B80002}
O42 - Software: AVG 2012 - (.AVG Technologies.) [HKLM][64Bits] -- {BF46C84D-1AC3-4CC3-A45C-EF6257B80984}
O42 - Software: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- AVG
O42 - Software: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {1FB1AA7C-9ECD-4350-AE3D-3CB3698C5CEB}
O42 - Software: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {4E04DB4D-CBE9-40C3-9906-723308D48EB0}
O42 - Software: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {825ECBB1-2BCD-4BA5-BB46-63DB8D9ABF45}
O42 - Software: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {9F0D08A0-5623-4EF6-A513-40048E20C4E0}
O43 - CFD: 26/02/2013 - 07:21:22 - [140,875] ----D C:\ProgramData\AVG2013
O43 - CFD: 24/02/2013 - 17:20:03 - [0,057] ----D C:\Users\manue\AppData\Roaming\AVG2013
O43 - CFD: 24/02/2013 - 16:43:03 - [11,216] ----D C:\Users\manue\AppData\Local\Avg2013
SS - | Auto 02/10/2012 1314720 | (avgfws) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgfws.exe
O23 - Service: (vToolbarUpdater14.2.0) . (.No owner - ToolbarU Application.) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
O43 - CFD: 28/02/2013 - 20:49:18 - [1,742] ----D C:\Program Files (x86)\Common Files\AVG Secure Search => Toolbar.AVGSearch
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS]
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
C:\Program Files (x86)\Common Files\AVG Secure Search
SS - | Auto 968880 | (vToolbarUpdater14.2.0) . (...) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.rpidity.com
[HKCU\Software\Grand Virtual]
Emptytemp
EmptyClsid
Firewallraz


----------------------------------------------------------
* Click on the icon representing the clipboard (the icon between the camera and the parchment, at the top right of the tool page)

- Click the “GO” button to start the cleaning,
- confirm the cleaning
- Copy/paste the entire report into your next reply
Tutorial:

http://www.premiumorange.com/zeb-help-process/zhpfix.html

--
O.o°*Member, Security Contributor CCM o°.Oø¤º°'°º¤ø
=>> Breathe deeply, write your message in good French and clearly. It will be fine, you will see, we hope so!!! o°Oø

Here is the report generated while waiting for the follow-up.....

ZHPFix Report 1.3.20 by Nicolas Coolman, Update of 02/25/2013
Registry export file: C:\ZHP\ZHPExportRegistry-01-03-2013-19-34-42.txt
Run by manue at 03/01/2013 19:34:32
High Elevated Privileges: OK
Windows Vista Home Premium Edition, 64-bit (Build 6000)

Recycle Bin emptied

========== Software(s) ==========
ABSENT Software Key: {00BCC0AD-0699-48B6-9900-3C53BBCD4DAC}
ABSENT Software Key: {17118574-A5FD-4323-B005-311326F748B3}
ABSENT Software Key: {2393F144-F88F-4FB3-8B57-9D6F8B4E8F9E}
ABSENT Software Key: {34C5BC15-2401-4980-9D95-ABD2CE8DD08A}
ABSENT Software Key: {38D1C189-B133-401C-A729-3C47ED984B31}
ABSENT Software Key: {61A3F855-4587-4187-9D77-2EF8CD825A47}
ABSENT Software Key: {78DC83C7-7E9D-4518-8DFE-C8BBF69173D9}
ABSENT Software Key: {BB4F0BE4-3DCB-4C5C-8B2B-C07CC916A6B5}
ABSENT Software Key: {EB505EA6-2D5E-4920-A3BD-89C28EEFA5FA}
ABSENT Software Key: {FA109F0F-122E-4D48-9DBF-14DC02EE85E4}
ABSENT Software Key: {49A4F76E-4285-4AEE-9D5D-9CCE5E86AA8F}
ABSENT Software Key: {857B32C1-7C87-40B5-B2A5-D06F49B80002}
ABSENT Software Key: {BF46C84D-1AC3-4CC3-A45C-EF6257B80984}
ABSENT Software Key: AVG
ABSENT Software Key: {1FB1AA7C-9ECD-4350-AE3D-3CB3698C5CEB}
ABSENT Software Key: {4E04DB4D-CBE9-40C3-9906-723308D48EB0}
ABSENT Software Key: {825ECBB1-2BCD-4BA5-BB46-63DB8D9ABF45}
ABSENT Software Key: {9F0D08A0-5623-4EF6-A513-40048E20C4E0}

========== Registry Key(s) ==========
ABSENT Key: Service: avgfws
ABSENT Key: Service: vToolbarUpdater14.2.0
ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS
ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
ABSENT Key: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
ABSENT Key: HKCU\Software\Grand Virtual

Your report is incomplete, but given its state, I believe you launched it twice!

Download Malwarebytes' Anti-Malware and save it to your desktop:

https://fr.malwarebytes.com/mwb-download/
or:

https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

/!\ Users of Vista, Windows 7, and Windows 8: Right-click on the Malwarebytes' Anti-Malware logo, “run as Administrator”

. Double-click on the downloaded file to start the installation process.
. In the "update" tab, click on the "Check for updates" button
. If the firewall asks for permission to connect for Malwarebytes, accept
. Once the update is complete
. go to the "Scan" tab
. Select "Run a full scan"
. Click on "Scan"
. The scan starts.
. At the end of the scan, a message appears: The scan completed normally. Click on 'Show results' to display all found items.
. Click on OK to proceed.
. If malware has been detected, click on Show results
. Select all (or leave checked) and click on Remove the selection Malwarebytes will delete the files and registry keys and put a copy in quarantine.
. Malwarebytes will open Notepad and copy the scan report there.
. go to the report/log tab
. click on it to display, once displayed
. click on edit at the top of Notepad, then on select all
. click on edit again and then click on copy and return to the forum and in your reply
. Right-click in the reply box and paste
. At the end of the scan, MBAM may need to restart the PC to complete the removal, so don't panic, restart your PC !!!

If you need help, look at this tutorial:
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

--
O.o°*Member, Security Contributor CCM o°.Oø¤º°'°º¤ø
=>> Breathe deeply, write your message in good French and clearly. It'll be fine, you'll see, well, we're trying!!! o°Oø

Hello,

Here is the report from Malwarebytes, however I still had to do it in safe mode because in normal mode it crashed.

Malwarebytes Anti-Malware (Trial) 1.70.0.1100
www.malwarebytes.org

Database version: v2013.03.03.05

Windows 7 x64 NTFS (Safe mode)
Internet Explorer 8.0.7600.16385
manue :: MANUE-PC [administrator]

Protection: Disabled

03/03/2013 16:25:43
mbam-log-2013-03-03 (16-25-43).txt

Scan type: Full scan (C:\|D:\|)
Scan options enabled: Memory | Startup | Registry | File system | Heuristic/Extra | Heuristic/Shuriken | PUP | PUM
Scan options disabled: P2P
Item(s) scanned: 360042
Elapsed time: 44 minute(s), 27 second(s)

Memory processes detected: 0
(No harmful items detected)

Memory modules detected: 0
(No harmful items detected)

Registry key(s) detected: 0
(No harmful items detected)

Registry value(s) detected: 0
(No harmful items detected)

Registry data item(s) detected: 0
(No harmful items detected)

Folder(s) detected: 0
(No harmful items detected)

File(s) detected: 1
C:\Users\manue\Downloads\Everest Poker.exe (PUP.Casino) -> Quarantined and successfully deleted.

(end)

Hello,

restart your PC and let me know how it’s functioning before we continue

O.o°*Member, Security Contributor CCM o°.Oø¤º°'°º¤ø
=>> Breathe deeply, write your message in good French and clearly. It will go well, you’ll see, well we’ll try!!! o°Oø

It's already much better, the web pages load quite quickly. However, Oracle still keeps asking me to install it.

Thanks for everything you've done so far....

See you!

What exactly does Oracle ask you to install?

If it's for JAVA, that's normal, it's the Java update :D

--
O.o°*Member, CCM security contributor o°.Oø¤º°'°º¤ø
=>>Breathe deeply, write your message in proper French and clearly. It will be okay, you'll see, well we're trying!!! o°Oø

Well, I installed the latest version of Java and indeed no more message from my famous Oracle. HI HI.
However, AVG wants to analyze and make changes to my computer??
How do I uninstall it?
I think there are still things to do since Google Chrome opens almost a minute after I clicked on the shortcut.
But well, you have already helped me quite a bit.

See you soon.

Do you see AVG in the list of programs in the control panel, programs and features?

If yes, uninstall it!

If not, use this to remove it:
http://www.forum-vista.net/forum/

--
O.o°*Member, Security Contributor CCM o°.Oø¤º°'°º¤ø
=>>Breathe deeply, write your message in proper French and clearly. It'll be fine, you'll see, well we try!!! o°Oø

I'm sorry for replying only now, but I haven't had much time to take care of it these past few days.
I couldn't remove AVG through the control panel, but the little program did its job well. I took the opportunity to remove one or two programs that seemed unnecessary, but I think there are still many left that aren't useful; maybe you could guide me?

Another issue is that I wanted to copy my photos to an external hard drive, but the USB ports only work in safe mode; it might be a driver issue?

And finally, every time I turn off the PC, Windows tells me that there is a program that hasn't closed and asks if I want to force it to close??

Overall, there are still a few little problems, but things are much better overall. I was able to save my data, and that's already great. Thank you, thank you, and thank you again.
PS: I initially wanted to make a small donation to help the kings of bugs assist other novices like me, but now there's no doubt.

See you soon!!