Oracle Amérique Solved

Question

Hello,

I am sending this message to seek help.
I searched the forum for questions regarding "oracle america", but all concerns the spam that appears and requests the installation of the software.
However, I foolishly accepted this installation, having seen Java and thinking it was an update. Indeed, I realized it was a virus; my PC is about to fail me, experiencing major slowdowns and it's almost impossible to perform any action.

Can you help me and tell me how I can get rid of this virus?

Thank you.

Anonymous user · Answer

Hello,

* Download ZHPDiag to your desktop:

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
or
http://www.premiumorange.com/zeb-help-process/zhpdiag.html

* Follow the installation instructions, it will launch automatically at the end.

/!\Users of Vista, Seven and W8:

* Right click on the ZHPdiag logo, « run as Administrator »

* Click on the screwdriver icon, select all modules.

* Click on the magnifying glass icon (« Start the diagnosis »)
* Save the report to your Desktop using the diskette icon
* Upload the ZHPDiag.txt report to Cjoint, then copy/paste the link provided in your next response on the forum:

https://www.cjoint.com/ => https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

--
O.o°*Member, Security Contributor CCM o°.Oø¤º°'°º¤ø
=>> Breathe deeply, write your message in proper French and clearly. It will be fine, you'll see, we’re trying!!! o°Oø

KENOUILLE · Answer

Hello,  Thank you for your response, I will try to do that, hoping it works.  See you soon.

Anonymous user · Answer

Take your time, but don't linger too much on the way :P

Besides, you're from Lyon, between you and me, it should go much faster :lol:

O.o°*Member, CCM security contributor o°.Oø¤º°'°º¤ø
=>> Breathe deeply, write your message in proper French and clearly. It's going to be fine, you'll see, well, we're trying!!! o°Oø

KENOUILLE · Answer

Hello,

pfff complicated to do all this with a machine that won't move forward and only linked to a desktop PC that blocks all sites due to the group policy.

Anyway, to keep it short, I downloaded the ZHPDIAG software, installed it, checked all the modules, and started the diagnosis.
However, four times I got stuck at 39% of the process, and the software froze and became unresponsive, so I started the PC in safe mode and was finally able to complete the diag. But now I don’t know if it is viable and usable.

Moreover, I couldn't send it from my personal PC. So I copied the report onto a USB stick to send it from my desktop PC. Two problems:
1: In the report, there were lines displayed in color, whereas the copy is all black.
2: Since I couldn't send it via cjoint, I used the attachment from Malekal, here is the link: https://pjjoint.malekal.com/files.php?id=ZHPDiag_20130228_o10i14w5z13m6
I hope it will still be usable given your skills in the field, and also, hopefully, there will be a solution to my troubles.

Thanks again, and I hope to hear from you soon.

Anonymous user · Answer

I'm surprised that your computer can't take it anymore!!!

You have two antivirus programs, Avast and AVG, you need to uninstall one!!!

You're risking a conflict and crashing your PC!!!

Otherwise, your PC is loaded with adware!!!

/!\ Attention:
More and more programs offer the installation of toolbars (Toolbar, pre-checked box), so don't forget to uncheck the corresponding boxes during installation.

In addition to this, strongly avoid sites like 01@net (on the road to recovery!) and Softonic, free and open-source software is repackaged with their toolbars!

? Download and save ADWcleaner on your desktop (Thanks to Xplode):

http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner

Run it,

click on search and post its report.

--
O.o°*Member, Security Contributor CCM o°.Oø¤º°'°º¤ø
=>>Breathe deeply, write your message in good French and clearly. It'll be fine, you'll see, at least we try!!! o°Oø

KENOUILLE · Answer

Your message confirms that I'm not skilled in IT. For the two antivirus programs, I have tried several times to uninstall AVG; the procedure starts and completes, but it does not disappear from the programs.
Here is the report from AdwCleaner,
https://www.cjoint.com/?CBCtTuZgsb1
hoping there will be a solution.
Just a quick question: at this stage, can you tell me if you'll be able to repair my PC and help me recover my data, or is it too early to say?

Talk to you soon... and thanks again.

Anonymous user · Answer

The PC will be cleaned, but it takes time :D

We will uninstall AVG, but first, we need to clean the PC!

Restart ADWC, click on Delete,

post its report after restarting the PC

You will see that things will get better right away :-)

--
O.o°*Member, Security Contributor CCM o°.Oø¤º°'°º¤ø
=>>Breathe deeply, write your message in good French and clearly. Everything will be fine, you’ll see, well, we’ll try!!! o°Oø

KENOUILLE · Answer

Well,

indeed it is already better, but it still crashes...
and then Oracle still asks to be installed.
a big thank you to you for your help
attached is the report following the restart
https://www.cjoint.com/c/CBCwgMpFjFp

Anonymous user · Answer

it's going to happen, we'll try to fix everything :D

restart ADWC, click on Uninstall,

restart Zhpdiag,

/!\ Users of Vista, Seven, and W8:

* Right-click on the ZHPdiag logo, "run as Administrator"

* Click on the screwdriver, select all modules.

* Click on the icon that represents a magnifying glass (“Launch the diagnosis”)
* Save the report to your Desktop using the icon that represents a floppy disk
* Host the ZHPDiag.txt report on Cjoint, then copy/paste the provided link in your next response on the forum:

https://www.cjoint.com/ => https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

wait for my reply, @ ++

--
O.o°*Member, Security Contributor CCM o°.Oø¤º°'°º¤ø
=>> Breathe deeply, write your message clearly and in proper French. It will be fine, you'll see, we'll try!!! o°Oø

KENOUILLE · Answer

Hello,

indeed things are getting much better ;-)

I am at the office and couldn't send the report via cjoint. Sorry.

Here is the link to the report: https://pjjoint.malekal.com/files.php?id=ZHPDiag_20130301_k8k14o14c12e9

Anonymous user · Answer

We will first remove AVG and the remaining infections, then make some updates

uninstall Spybot, it is useless!

* /!\ Warning /!\,
* this script is only valid for this PC, during cleaning, do not use it on another PC, risk of crashing!

* Launch ZHPFix via the shortcut on your Desktop

/!\ Users of Vista, Seven and W8:

* Right-click on the ZHPFix logo, “run as Administrator”

* * Copy ( Ctrl + C ) and paste ( Ctrl + V ) the following lines in bold into ZHPFix:
---------------------------------------------------------

O4 - HKLM\..\Wow6432Node\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG2012\avgtray.exe (.not file.)
O23 - Service: AVG Firewall (avgfws) . (.AVG Technologies CZ, s.r.o. - AVG Firewall Service.) - C:\Program Files (x86)\AVG\AVG2013\avgfws.exe
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {00BCC0AD-0699-48B6-9900-3C53BBCD4DAC}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {17118574-A5FD-4323-B005-311326F748B3}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {2393F144-F88F-4FB3-8B57-9D6F8B4E8F9E}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {34C5BC15-2401-4980-9D95-ABD2CE8DD08A}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {38D1C189-B133-401C-A729-3C47ED984B31}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {61A3F855-4587-4187-9D77-2EF8CD825A47}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {78DC83C7-7E9D-4518-8DFE-C8BBF69173D9}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {BB4F0BE4-3DCB-4C5C-8B2B-C07CC916A6B5}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {EB505EA6-2D5E-4920-A3BD-89C28EEFA5FA}
O42 - Software: AVG 2011 - (.AVG Technologies.) [HKLM][64Bits] -- {FA109F0F-122E-4D48-9DBF-14DC02EE85E4}
O42 - Software: AVG 2012 - (.AVG Technologies.) [HKLM][64Bits] -- {49A4F76E-4285-4AEE-9D5D-9CCE5E86AA8F}
O42 - Software: AVG 2012 - (.AVG Technologies.) [HKLM][64Bits] -- {857B32C1-7C87-40B5-B2A5-D06F49B80002}
O42 - Software: AVG 2012 - (.AVG Technologies.) [HKLM][64Bits] -- {BF46C84D-1AC3-4CC3-A45C-EF6257B80984}
O42 - Software: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- AVG
O42 - Software: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {1FB1AA7C-9ECD-4350-AE3D-3CB3698C5CEB}
O42 - Software: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {4E04DB4D-CBE9-40C3-9906-723308D48EB0}
O42 - Software: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {825ECBB1-2BCD-4BA5-BB46-63DB8D9ABF45}
O42 - Software: AVG 2013 - (.AVG Technologies.) [HKLM][64Bits] -- {9F0D08A0-5623-4EF6-A513-40048E20C4E0}
O43 - CFD: 26/02/2013 - 07:21:22 - [140,875] ----D C:\ProgramData\AVG2013
O43 - CFD: 24/02/2013 - 17:20:03 - [0,057] ----D C:\Users\manue\AppData\Roaming\AVG2013
O43 - CFD: 24/02/2013 - 16:43:03 - [11,216] ----D C:\Users\manue\AppData\Local\Avg2013
SS - | Auto 02/10/2012 1314720 | (avgfws) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgfws.exe
O23 - Service: (vToolbarUpdater14.2.0) . (.No owner - ToolbarU Application.) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
O43 - CFD: 28/02/2013 - 20:49:18 - [1,742] ----D C:\Program Files (x86)\Common Files\AVG Secure Search => Toolbar.AVGSearch
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS]
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
C:\Program Files (x86)\Common Files\AVG Secure Search
SS - | Auto 968880 | (vToolbarUpdater14.2.0) . (...) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.rpidity.com
[HKCU\Software\Grand Virtual]
Emptytemp
EmptyClsid
Firewallraz

----------------------------------------------------------
* Click on the icon representing the clipboard (the icon between the camera and the parchment, at the top right of the tool page)

- Click the “GO” button to start the cleaning,
- confirm the cleaning
- Copy/paste the entire report into your next reply
Tutorial:

http://www.premiumorange.com/zeb-help-process/zhpfix.html

--
O.o°*Member, Security Contributor CCM o°.Oø¤º°'°º¤ø
=>> Breathe deeply, write your message in good French and clearly. It will be fine, you will see, we hope so!!! o°Oø

KENOUILLE · Answer

Here is the report generated while waiting for the follow-up.....

ZHPFix Report 1.3.20 by Nicolas Coolman, Update of 02/25/2013
Registry export file: C:\ZHP\ZHPExportRegistry-01-03-2013-19-34-42.txt
Run by manue at 03/01/2013 19:34:32
High Elevated Privileges: OK
Windows Vista Home Premium Edition, 64-bit (Build 6000)

Recycle Bin emptied

========== Software(s) ==========
ABSENT Software Key: {00BCC0AD-0699-48B6-9900-3C53BBCD4DAC}
ABSENT Software Key: {17118574-A5FD-4323-B005-311326F748B3}
ABSENT Software Key: {2393F144-F88F-4FB3-8B57-9D6F8B4E8F9E}
ABSENT Software Key: {34C5BC15-2401-4980-9D95-ABD2CE8DD08A}
ABSENT Software Key: {38D1C189-B133-401C-A729-3C47ED984B31}
ABSENT Software Key: {61A3F855-4587-4187-9D77-2EF8CD825A47}
ABSENT Software Key: {78DC83C7-7E9D-4518-8DFE-C8BBF69173D9}
ABSENT Software Key: {BB4F0BE4-3DCB-4C5C-8B2B-C07CC916A6B5}
ABSENT Software Key: {EB505EA6-2D5E-4920-A3BD-89C28EEFA5FA}
ABSENT Software Key: {FA109F0F-122E-4D48-9DBF-14DC02EE85E4}
ABSENT Software Key: {49A4F76E-4285-4AEE-9D5D-9CCE5E86AA8F}
ABSENT Software Key: {857B32C1-7C87-40B5-B2A5-D06F49B80002}
ABSENT Software Key: {BF46C84D-1AC3-4CC3-A45C-EF6257B80984}
ABSENT Software Key: AVG
ABSENT Software Key: {1FB1AA7C-9ECD-4350-AE3D-3CB3698C5CEB}
ABSENT Software Key: {4E04DB4D-CBE9-40C3-9906-723308D48EB0}
ABSENT Software Key: {825ECBB1-2BCD-4BA5-BB46-63DB8D9ABF45}
ABSENT Software Key: {9F0D08A0-5623-4EF6-A513-40048E20C4E0}

========== Registry Key(s) ==========
ABSENT Key: Service: avgfws
ABSENT Key: Service: vToolbarUpdater14.2.0
ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS
ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
ABSENT Key: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
ABSENT Key: HKCU\Software\Grand Virtual

Anonymous user · Answer

Your report is incomplete, but given its state, I believe you launched it twice!

Download Malwarebytes' Anti-Malware and save it to your desktop:

https://fr.malwarebytes.com/mwb-download/
or:

https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

/!\ Users of Vista, Windows 7, and Windows 8: Right-click on the Malwarebytes' Anti-Malware logo, “run as Administrator”

. Double-click on the downloaded file to start the installation process.
. In the "update" tab, click on the "Check for updates" button
. If the firewall asks for permission to connect for Malwarebytes, accept
. Once the update is complete
. go to the "Scan" tab
. Select "Run a full scan"
. Click on "Scan"
. The scan starts.
. At the end of the scan, a message appears: The scan completed normally. Click on 'Show results' to display all found items.
. Click on OK to proceed.
. If malware has been detected, click on Show results
. Select all (or leave checked) and click on Remove the selection Malwarebytes will delete the files and registry keys and put a copy in quarantine.
. Malwarebytes will open Notepad and copy the scan report there.
. go to the report/log tab
. click on it to display, once displayed
. click on edit at the top of Notepad, then on select all
. click on edit again and then click on copy and return to the forum and in your reply
. Right-click in the reply box and paste
. At the end of the scan, MBAM may need to restart the PC to complete the removal, so don't panic, restart your PC !!!

If you need help, look at this tutorial:
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

--
O.o°*Member, Security Contributor CCM o°.Oø¤º°'°º¤ø
=>> Breathe deeply, write your message in good French and clearly. It'll be fine, you'll see, well, we're trying!!! o°Oø

KENOUILLE · Answer

Hello,

Here is the report from Malwarebytes, however I still had to do it in safe mode because in normal mode it crashed.

Malwarebytes Anti-Malware (Trial) 1.70.0.1100
www.malwarebytes.org

Database version: v2013.03.03.05

Windows 7 x64 NTFS (Safe mode)
Internet Explorer 8.0.7600.16385
manue :: MANUE-PC [administrator]

Protection: Disabled

03/03/2013 16:25:43
mbam-log-2013-03-03 (16-25-43).txt

Scan type: Full scan (C:\|D:\|)
Scan options enabled: Memory | Startup | Registry | File system | Heuristic/Extra | Heuristic/Shuriken | PUP | PUM
Scan options disabled: P2P
Item(s) scanned: 360042
Elapsed time: 44 minute(s), 27 second(s)

Memory processes detected: 0
(No harmful items detected)

Memory modules detected: 0
(No harmful items detected)

Registry key(s) detected: 0
(No harmful items detected)

Registry value(s) detected: 0
(No harmful items detected)

Registry data item(s) detected: 0
(No harmful items detected)

Folder(s) detected: 0
(No harmful items detected)

File(s) detected: 1
C:\Users\manue\Downloads\Everest Poker.exe (PUP.Casino) -> Quarantined and successfully deleted.

(end)

Anonymous user · Answer

Hello,

restart your PC and let me know how it’s functioning before we continue

O.o°*Member, Security Contributor CCM o°.Oø¤º°'°º¤ø
=>> Breathe deeply, write your message in good French and clearly. It will go well, you’ll see, well we’ll try!!! o°Oø

KENOUILLE · Answer

It's already much better, the web pages load quite quickly. However, Oracle still keeps asking me to install it.  Thanks for everything you've done so far....  See you!

Anonymous user · Answer

What exactly does Oracle ask you to install?

If it's for JAVA, that's normal, it's the Java update :D

--
O.o°*Member, CCM security contributor o°.Oø¤º°'°º¤ø
=>>Breathe deeply, write your message in proper French and clearly. It will be okay, you'll see, well we're trying!!! o°Oø

KENOUILLE · Answer

Well, I installed the latest version of Java and indeed no more message from my famous Oracle. HI HI.
However, AVG wants to analyze and make changes to my computer??
How do I uninstall it?
I think there are still things to do since Google Chrome opens almost a minute after I clicked on the shortcut.
But well, you have already helped me quite a bit.

See you soon.

Anonymous user · Answer

Do you see AVG in the list of programs in the control panel, programs and features?

If yes, uninstall it!

If not, use this to remove it:
http://www.forum-vista.net/forum/

--
O.o°*Member, Security Contributor CCM o°.Oø¤º°'°º¤ø
=>>Breathe deeply, write your message in proper French and clearly. It'll be fine, you'll see, well we try!!! o°Oø

KENOUILLE · Answer

I'm sorry for replying only now, but I haven't had much time to take care of it these past few days.
I couldn't remove AVG through the control panel, but the little program did its job well. I took the opportunity to remove one or two programs that seemed unnecessary, but I think there are still many left that aren't useful; maybe you could guide me?

Another issue is that I wanted to copy my photos to an external hard drive, but the USB ports only work in safe mode; it might be a driver issue?

And finally, every time I turn off the PC, Windows tells me that there is a program that hasn't closed and asks if I want to force it to close??

Overall, there are still a few little problems, but things are much better overall. I was able to save my data, and that's already great. Thank you, thank you, and thank you again.
PS: I initially wanted to make a small donation to help the kings of bugs assist other novices like me, but now there's no doubt.

See you soon!!

Anonymous user · Answer

For the program to force close, there’s one that doesn’t close and thus Windows forces its closure, its name appears at the same time as the appearance of this window!    Be careful not to uninstall vital programs for your PC!   What are the small issues that remain?   For donation, I know plenty, just need to see to whom?      -- O.o°*Member, Security Contributor CCM o°.Oø¤º°'°º¤ø =>> Breathe deeply, write your message clearly in proper French. It will be fine, you'll see, well we will try!!! o°Oø

veroro · Answer

Good evening, I have a similar problem as Quenouille. Like an idiot, I accepted the Oracle Java update and now my PC is slow. So, I followed your advice by downloading the software you recommended, but upon restarting, the little authorization window from Oracle America reappeared. Is that normal? Thank you in advance.

Marybou · Answer

Hello everyone! So I read the topic, I have the same problem but I don't really understand all the steps to follow like Cjoint for example, I downloaded ZHPDiag and it gave me a diagnosis that I don't understand either, in short, I don't understand much in fact and I would like someone to help me better understand and find a solution to this problem :)

Marie · Answer

Hello everyone, I just read the topic and I think I have this problem on my computer: when I watch videos on YouTube or Dailymotion, the video stops and the page changes to show me a Java ad saying that my version is out of date (even though I had downloaded Java some time ago but then uninstalled it). I also noticed that I have many more ads and sometimes (especially when I'm watching a video on Dailymotion) the page changes to a Firefox page telling me that there is a potential danger. I have already done a cleanup with CCleaner, I now have fewer ads, and I also did a quick scan with my antivirus and nothing was detected, I am currently doing a complete scan to be sure. I would like to know if it is indeed this virus that is on my computer. Thank you in advance for your help.

Oracle Amérique

24 answers

Reinstallation of w11 impossible after pc crash...

Download impossible for visual petanque

Connect external dvd player to samsung tablet

Phone not receiving certain sms

Images from videos - retrieval

Chkdsk /f and sfc /scannow okay, but startup impossible.

Recover deleted messages

How to change your phone number on le bon coin

Lost tnt channels (via antenna)

Taskbar that hides