optimizer pro

Question

bonjour,jai récemment constaté que javais sur mon laptop optimizer pro. souvent, il ouvre seul et me dit que mon laptop est infecté. je suis allée lire sur wikipedia et jai vu quil sagit en fait dun virus. jai tout lu les trucs que vous avez conseillé afin de sen débarasser mais étant donné que je ne suis pas super bonne en informatique,pour moi cétait du chinois :( ma soeur est venue lautre soir m'installer avast. jai fait un scan ce matin et il na pas détecté optimizer. pouvez-vous sil vous plait mexpliquer le plus clairement possible (pas dabréviation svp) commet retirer ce maudit virus.
p.s. javais dailleurs constaté voila de ca 2-3semaines que mon laptop etait plus slow que dhabitude.il ya aussi une fenetre qui souvre régulierement me disant que je nai pas sauvegardé mon ordi. est-ce que cela fait parti aussi de optimizer ?je possede windows7 et a coté de cet icone sur le laptop jai intel inside core i3(quest-ce que cest???) 
merci davance pour votre aide !

g3n-h@ckm@n · Answer

salut

 Télécharge et enregistre ADWCleaner sur ton bureau :

(la grosse flèche verte en milieu de page)

Lance le,(Pour vista/7/8 => clic droit "executer en tant qu'administrateur")

clique sur suppression et poste C:\Adwcleaner[Sx].txt

nicéphore31 · Answer

bonjour a vous, merci de votre réponse rapide. bon alors jai cliqué sur la fleche,ensuite jai ouvert adwcleaner jai fait supprimer ensuite on ma dit que je devais redémarrer lordi, cest ce que jai fait,quand ma session sest ouverte jai eu un message disant de vouloir executer ou annuler adw car mon ordi le reconnaissait pas.evidemment jai cliqué sur exécuter mais ca ne fonctionnait pas jai donc fermée la fenetre,mon bureau sest ouvert et la jai eu un raport que je vous envoie. mais avant,que voulez vous dire par poste C:\Adwcleaner[Sx].txt  ?? je nai pas vu dendroit ou le copier coller. jattends encore votre aide sil vous plait

AdwCleaner v2.301 - Rapport créé le 02/06/2013 à 11:30:36
# Mis à jour le 16/05/2013 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Josyane - JOSYANE-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\Josyane\Downloads\adwcleaner.exe
# Option [Suppression]


***** [Services] *****

Arrêté & Supprimé : BrowserProtect
Arrêté & Supprimé : CltMngSvc

***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Program Files (x86)\Delta
Dossier Supprimé : C:\Program Files (x86)\Optimizer Pro
Dossier Supprimé : C:\Program Files (x86)\SearchProtect
Dossier Supprimé : C:\ProgramData\Ask
Dossier Supprimé : C:\ProgramData\Babylon
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro
Dossier Supprimé : C:\ProgramData\Tarma Installer
Dossier Supprimé : C:\Users\Josyane\AppData\Local\Giant Savings Extension
Dossier Supprimé : C:\Users\Josyane\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl
Dossier Supprimé : C:\Users\Josyane\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Dossier Supprimé : C:\Users\Josyane\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi
Dossier Supprimé : C:\Users\Josyane\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Dossier Supprimé : C:\Users\Josyane\AppData\Local\Smartbar
Dossier Supprimé : C:\Users\Josyane\AppData\Local\SwvUpdater
Dossier Supprimé : C:\Users\Josyane\AppData\Local\Temp\Smartbar
Dossier Supprimé : C:\Users\Josyane\AppData\LocalLow\Delta
Dossier Supprimé : C:\Users\Josyane\AppData\LocalLow\Smartbar
Dossier Supprimé : C:\Users\Josyane\AppData\Roaming\Babylon
Dossier Supprimé : C:\Users\Josyane\AppData\Roaming\Delta
Dossier Supprimé : C:\Users\Josyane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect
Dossier Supprimé : C:\Users\Josyane\AppData\Roaming\Optimizer Pro
Dossier Supprimé : C:\Users\Josyane\AppData\Roaming\SearchProtect
Dossier Supprimé : C:\windows\Installer\{EBE677C0-CBCB-4EBF-8098-E27E1B5271CF}
Fichier Supprimé : C:\END
Fichier Supprimé : C:\Users\Josyane\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Fichier Supprimé : C:\Users\Josyane\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Fichier Supprimé : C:\windows\Tasks\AmiUpdXp.job
Supprimé au redémarrage : C:\ProgramData\BrowserProtect
Supprimé au redémarrage : C:\Users\Josyane\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi

***** [Registre] *****

Clé Supprimée : HKCU\Software\AppDataLow\Software\Conduit
Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider
Clé Supprimée : HKCU\Software\AppDataLow\Software\Giant Savings Extension
Clé Supprimée : HKCU\Software\AppDataLow\Software\SmartBar
Clé Supprimée : HKCU\Software\Conduit
Clé Supprimée : HKCU\Software\Cr_Installer
Clé Supprimée : HKCU\Software\DataMngr
Clé Supprimée : HKCU\Software\DataMngr_Toolbar
Clé Supprimée : HKCU\Software\Delta
Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl
Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi
Clé Supprimée : HKCU\Software\InstallCore
Clé Supprimée : HKCU\Software\InstalledBrowserExtensions
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Clé Supprimée : HKCU\Software\Optimizer Pro
Clé Supprimée : HKCU\Software\SearchProtect
Clé Supprimée : HKCU\Software\SmartBar
Clé Supprimée : HKCU\Software\SmartbarBackup
Clé Supprimée : HKCU\Software\SmartbarLog
Clé Supprimée : HKCU\Software\5a558b88e63cea46
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Supprimée : HKLM\Software\Babylon
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0021810.BHO
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0021810.BHO.1
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0021810.Sandbox
Clé Supprimée : HKLM\SOFTWARE\Classes\CrossriderApp0021810.Sandbox.1
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaappCore
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltadskBnd
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaHlpr
Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane
Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.BandObjectAttribute
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.BHO
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.DockingPanel
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBar
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBarBandObject
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarDisplayState
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarMenuForm
Clé Supprimée : HKLM\Software\Classes\Installer\Features\7E685771E24E83F4381D1DB5A45F7B41
Clé Supprimée : HKLM\Software\Classes\Installer\Products\7E685771E24E83F4381D1DB5A45F7B41
Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Clé Supprimée : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Clé Supprimée : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1
Clé Supprimée : HKLM\Software\DataMngr
Clé Supprimée : HKLM\Software\Delta
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Giant Savings Extension_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Giant Savings Extension_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Giant Savings Extension-InternalInstaller_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Giant Savings Extension-InternalInstaller_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Clé Supprimée : HKLM\Software\SearchProtect
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\5a558b88e63cea46
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{177586E7-E42E-4F38-83D1-D15B4AF5B714}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EBE677C0-CBCB-4EBF-8098-E27E1B5271CF}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Delta
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKLM\SOFTWARE\Tarma Installer
Clé Supprimée : HKU\S-1-5-21-2011991932-2341434188-910287483-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Donnée Supprimée : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\261095~1.52\{c16c1~1\browse~1.dll
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Optimizer Pro]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [searchprotect]
Valeur Supprimée : HKCU\Software\Mozilla\Firefox\extensions [{58BD07EB-0EE0-4DF0-8121-DC9B693373DF}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchProtectAll]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

***** [Navigateurs] *****

-\ Internet Explorer v10.0.9200.16576

[OK] Le registre ne contient aucune entrée illégitime.

-\ Google Chrome v27.0.1453.94

Fichier : C:\Users\Josyane\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[S1].txt - [17049 octets] - [02/06/2013 11:30:36]

nicéphore31 · Answer

encore une chose, je nai pas fait clique droit ? je ne sais meme pas ou je devais faire cela. excusez mon ignorance mais linfo cest pas ma branche !

g3n-h@ckm@n · Answer

c'est bon l'outil a bossé

on fait un diag voir ce qu il reste , et certainement un scan généraliste suivra , suivant ce résultat :

 Télécharge ici :OTL

&#9654 enregistre le sur ton Bureau.

si tu as XP => double clique
si tu as Vista ou windows 7 / 8 => clic droit "executer en tant que...." 

sur OTL.exe pour le lancer.

&#9654 => Clique ici pour voir la Configuration

&#9654 Copie et colle le contenu de ce qui suit en gras dans la partie inférieure d'OTL "Personnalisation"


HKCU\Software
HKLM\Software
%Homedrive%\*
%Homedrive%\*.
%Userprofile%\*
%Userprofile%\*. 
%Allusersprofile%\*
%Allusersprofile%\*.
%LocalAppData%\*
%LocalAppData%\*.
%Userprofile%\Local Settings\Application Data\*
%Userprofile%\Local Settings\Application Data\*.
%programFiles%\*
%programFiles%\*.
%Systemroot%\Temp\*.exe /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\*.exe /lockedfiles
%systemroot%\system32\*.in*
%systemroot%\Tasks\*
%systemroot%\Tasks\*.
%systemroot%\system32\Tasks\*
%systemroot%\system32\Tasks\*.
%systemroot%\system32\drivers\*.sy* /lockedfiles
%systemroot%\system32\config\*.exe /s
%Systemroot%\ServiceProfiles\*.exe /s
%systemroot%\system32\*.sys 
msconfig 
activex 
/md5start
explorer.exe
winlogon.exe
wininit.exe
volsnap.sys
atapi.sys
ndisuio.sys
ndis.sys
cdrom.sys
i8042prt.sys
iastor.sys
tdx.sys
netbt.sys
afd.sys
/md5stop 
netsvcs
safebootminimal
safebootnetwork 
CREATERESTOREPOINT 

&#9654 Clic sur Analyse.

A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).

Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\<Bureau ou Desktop>\OTL.txt)

&#9654&#9654&#9654 NE LE POSTE PAS SUR LE FORUM (il est trop long)

heberge OTL.txt et extra.txt sur https://www.cjoint.com/ et donne les liens

nicéphore31 · Answer

je nai pas été capable de le mettre en gras alors jai simplement copier coller...? quand vous dites heberger otl et extra sur le site et donner les liens que voulez vous dire ?

g3n-h@ckm@n · Answer

clique sur mon lien bleu

parcours ton pc jusqu'aux rapports donnés par OTL et selectionne-les un par un puis clique sur "crééer le lien" et donne chaque lien obtenu pour chaque rapport dans ta réponse 
 
¤¤¤¤¤¤¤¤¤¤_Pre_Scan_Concept_¤¤¤¤¤¤¤¤¤¤
Windows 8 => meme flop que Vista X 10

nicéphore31 · Answer

oups je viens de comprendre pourquoi il netait pas en gras jai lu votre message a partir de ma boite hotmail donc il netait pas en gras quand jai copié est ce que cela dérange?

g3n-h@ckm@n · Answer

non :)

mais il est mieux de revenir lire ici des fois que j'y aie apporté une modification entre temps 
 
¤¤¤¤¤¤¤¤¤¤_Pre_Scan_Concept_¤¤¤¤¤¤¤¤¤¤
Windows 8 => meme flop que Vista X 10

nicéphore31 · Answer

le rapport vient dapparaitre je suis arrivée a   cela:

restore point Set: OTL Restore Point
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

ya plus de 40lignes la dedans :( excusez encore mon ignorance mais que dois-je copier un a la fois ? et pourquoi pas tout dun coup?

nicéphore31 · Answer

voulez vous dire copier et coller les deux bloc notes mais séparés?

g3n-h@ckm@n · Answer

heberge OTL.txt et extra.txt sur https://www.cjoint.com/ et donne les liens

nicéphore31 · Answer

https://www.cjoint.com/?CFcsKwuAOX1  et le 2e   https://www.cjoint.com/?CFcsL6rSZsy

g3n-h@ckm@n · Answer

désinstalle Google Toolbar for Internet Explorer  

===

 ATTENTION !!! : Script personnalisé pour cette machine uniquement , ne pas reproduire !! 

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...." 

sur OTL.exe pour le lancer.


?Copie la liste qui se trouve en gras ci-dessous,

? colle-la dans la zone sous "Personnalisation" :


:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe
safari.exe
opera.exe
rundll32.exe

:OTL
SRV - [2012-10-12 12:48:08 | 000,255,880 | ---- | M] (Inuvo Inc.) [Auto | Running] -- C:\Users\Josyane\AppData\LocalLow\alotservice\alotservice.exe -- (AlotService)     
IE - HKU\S-1-5-21-2011991932-2341434188-910287483-1001\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} 
IE - HKU\S-1-5-21-2011991932-2341434188-910287483-1001\..\SearchScopes\{A531D99C-5A22-449b-83DA-872725C6D0ED}: "URL" = https://search.alot.com/Error/?id=404{searchTerms}     
CHR - default_search_provider: search_url = http://search.conduit.com/?q={searchTerms}&SearchSource=49&CUI=UN11422375732508944&ctid=CT3289847&UM=2 
CHR - default_search_provider: suggest_url = http://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}&CUI=UN11422375732508944&UM=2 
O2 - BHO: (ALOT Appbar Helper) - {85F5CF95-EC8F-49fc-BB3F-38C79455CBA2} - C:\Program Files (x86)\alotappbar\bin\BHO\ALOTHelperBHO.dll (Inuvo, Inc)     
O3 - HKLM\..\Toolbar: (ALOT Appbar) - {A531D99C-5A22-449b-83DA-872725C6D0ED} - C:\Program Files (x86)\alotappbar\bin\alothelper.dll (Inuvo, Inc)     
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-2011991932-2341434188-910287483-1001\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O4 - HKU\S-1-5-21-2011991932-2341434188-910287483-1001\..\Run: [WorkForce 630 Series] C:\windows\system32\spool\DRIVERS\x64\3\E_IATIGBA.EXE /FU "C:\windows\TEMP\E_S3D8C.tmp" /EF "HKCU" File not found
O4 - HKU\S-1-5-21-2011991932-2341434188-910287483-1001\..\Run: [WorkForce 630series] C:\windows\system32\spool\DRIVERS\x64\3\E_IATIGBA.EXE /FU "C:\windows\TEMP\E_SA746.tmp" /EF "HKCU" File not found
O4 - Startup: C:\Users\Josyane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk = C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com) 
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1     
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1     
O20 - AppInit_DLLs: (c:\progra~3\browse~1\261095~1.52\{c16c1~1\browse~1.dll) - c:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll () 
[2013-06-02 11:31:02 | 000,000,219 | ---- | M] () -- C:\windows\DeleteOnReboot.bat     
[2013-05-26 17:46:13 | 000,001,087 | ---- | M] () -- C:\Users\Josyane\Desktop\MyPC Backup.lnk 
[2013-05-26 17:42:36 | 000,001,062 | ---- | M] () -- C:\Users\Josyane\Desktop\Optimizer Pro.lnk 
[2013-06-02 11:32:20 | 002,334,140 | ---- | M] () -- C:\alotserviceruntime.log     
[2012-11-16 00:15:39 | 000,000,000 | ---D | M] -- C:\f8ec7015a7af500384 
[2013-02-18 18:50:16 | 000,000,000 | ---D | M] -- C:\ProgramData\BrowserProtect 
[2013-02-18 18:50:18 | 000,000,000 | ---D | M] -- C:\Users\Josyane\AppData\Local\Updater21810     
[2013-01-05 17:52:16 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\alotappbar     
[2013-03-30 22:29:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WinZip Registry Optimizer 

:Reg
[-HKEY_CURRENT_USER\Software\alotservice]     
[-HKEY_CURRENT_USER\Software\(null)] 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{62BC7EFB-47F5-4619-9B74-7DDA72D5AF7E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\alotAppbar]

:Files
C:\Users\Josyane\AppData\LocalLow\alotservice
C:\Users\Josyane\AppData\Local\{*} 

:commands
[emptytemp]


? Clique sur "Correction" pour lancer la suppression.


? Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.

 
¤¤¤¤¤¤¤¤¤¤_Pre_Scan_Concept_¤¤¤¤¤¤¤¤¤¤
Windows 8 => meme flop que Vista X 10

nicéphore31 · Answer

quand je clique droit dans suppression et desinstallation sur google toolbar ca dis seulement desinstaller?

g3n-h@ckm@n · Answer

ben oui je te demande de le desinstaller....

nicéphore31 · Answer

une page sest ouverte disant que google toolbar a été désinstaller mais ils veulent savoir pour quelles raisons. suis je sur la bonne page?

g3n-h@ckm@n · Answer

tu peux fermer la page

nicéphore31 · Answer

daccord jai appuyé sur correction,mais je nai pas coché tous et cest coché sur liste blanche cest correct ca?

g3n-h@ckm@n · Answer

non ne fais rien d'autre que coller le texte en bas et "correction"

nicéphore31 · Answer

voila,je vais dans la douche et je vous reviens tout de suite apres

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named iexplore.exe was found!
No active process named firefox.exe was found!
No active process named msnmsgr.exe was found!
No active process named Teatimer.exe was found!
No active process named safari.exe was found!
No active process named opera.exe was found!
No active process named rundll32.exe was found!
========== OTL ==========
Service AlotService stopped successfully!
Service AlotService deleted successfully!
C:\Users\Josyane\AppData\LocalLow\alotservice\alotservice.exe moved successfully.
HKEY_USERS\S-1-5-21-2011991932-2341434188-910287483-1001\Software\Microsoft\Internet Explorer\SearchScopes\DefaultScope| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-2011991932-2341434188-910287483-1001\Software\Microsoft\Internet Explorer\SearchScopes\{A531D99C-5A22-449b-83DA-872725C6D0ED}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A531D99C-5A22-449b-83DA-872725C6D0ED}\ deleted successfully.
Use Chrome's Settings page to remove the default_search_provider items.
Use Chrome's Settings page to remove the default_search_provider items.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{85F5CF95-EC8F-49fc-BB3F-38C79455CBA2}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{85F5CF95-EC8F-49fc-BB3F-38C79455CBA2}\ deleted successfully.
C:\Program Files (x86)\alotappbar\bin\BHO\ALOTHelperBHO.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{A531D99C-5A22-449b-83DA-872725C6D0ED} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A531D99C-5A22-449b-83DA-872725C6D0ED}\ not found.
C:\Program Files (x86)\alotappbar\bin\alothelper.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\Locked deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2011991932-2341434188-910287483-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\ not found.
Registry value HKEY_USERS\S-1-5-21-2011991932-2341434188-910287483-1001\Software\Microsoft\Windows\CurrentVersion\Run\WorkForce 630 Series deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2011991932-2341434188-910287483-1001\Software\Microsoft\Windows\CurrentVersion\Run\WorkForce 630series deleted successfully.
C:\Users\Josyane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk moved successfully.
C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\NoActiveDesktopChanges deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_Dlls:c:\progra~3\browse~1\261095~1.52\{c16c1~1\browse~1.dll deleted successfully.
File move failed. c:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll scheduled to be moved on reboot.
C:\Windows\DeleteOnReboot.bat moved successfully.
C:\Users\Josyane\Desktop\MyPC Backup.lnk moved successfully.
C:\Users\Josyane\Desktop\Optimizer Pro.lnk moved successfully.
C:\alotserviceruntime.log moved successfully.
C:\f8ec7015a7af500384 folder moved successfully.
C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings folder moved successfully.
C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension\content folder moved successfully.
C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension\components folder moved successfully.
C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension folder moved successfully.
C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8} folder moved successfully.
C:\ProgramData\BrowserProtect\2.6.1095.52 folder moved successfully.
C:\ProgramData\BrowserProtect folder moved successfully.
C:\Users\Josyane\AppData\Local\Updater21810 folder moved successfully.
C:\Program Files (x86)\alotappbar\bin\BHO folder moved successfully.
C:\Program Files (x86)\alotappbar\bin folder moved successfully.
C:\Program Files (x86)\alotappbar folder moved successfully.
C:\Program Files (x86)\WinZip Registry Optimizer folder moved successfully.
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\Software\alotservice\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\(null)\ deleted successfully.
========== FILES ==========
C:\Users\Josyane\AppData\LocalLow\alotservice folder moved successfully.
C:\Users\Josyane\AppData\Local\{005042F1-84BC-44C8-8525-78A2A6E76E4C} folder moved successfully.
C:\Users\Josyane\AppData\Local\{007DCA77-5F99-41D3-B3BC-90DBECF5BC49} folder moved successfully.
C:\Users\Josyane\AppData\Local\{0264084D-2652-4446-BD72-FC4B13C6EB65} folder moved successfully.
C:\Users\Josyane\AppData\Local\{02D39411-522F-4794-953A-49A79D320FAC} folder moved successfully.
C:\Users\Josyane\AppData\Local\{031C1E33-BAE2-4142-AFBF-3C1356741014} folder moved successfully.
C:\Users\Josyane\AppData\Local\{0717054B-7318-4BE2-A571-00539C988B50} folder moved successfully.
C:\Users\Josyane\AppData\Local\{07669D7D-730E-4DAA-9C41-D059269FA148} folder moved successfully.
C:\Users\Josyane\AppData\Local\{08FFECEC-074B-41DE-939B-2F351F3AC558} folder moved successfully.
C:\Users\Josyane\AppData\Local\{0BDEAA38-FF6F-473E-A8B7-9F99370DF3F7} folder moved successfully.
C:\Users\Josyane\AppData\Local\{0D4B3E6B-BC4D-439C-BCF7-520F6C9D31BE} folder moved successfully.
C:\Users\Josyane\AppData\Local\{0F202B2C-455F-43C3-9BEB-F62E61B29472} folder moved successfully.
C:\Users\Josyane\AppData\Local\{0F2FEA5F-783F-48FB-8671-0F2C196672A4} folder moved successfully.
C:\Users\Josyane\AppData\Local\{0F530B1E-4D16-45FA-A7B1-42BF90ECBF33} folder moved successfully.
C:\Users\Josyane\AppData\Local\{109795DA-F16B-4AC0-A67F-222247D3ED27} folder moved successfully.
C:\Users\Josyane\AppData\Local\{116612EA-A5FA-43BA-8B2D-A1842CC5F8F1} folder moved successfully.
C:\Users\Josyane\AppData\Local\{1185FBEB-3B25-43D1-B632-C3419067D3B1} folder moved successfully.
C:\Users\Josyane\AppData\Local\{11A163BF-C80F-4D17-A520-CFB5B2847B11} folder moved successfully.
C:\Users\Josyane\AppData\Local\{13466C64-D8DD-456E-9F56-4BF29AA74EB9} folder moved successfully.
C:\Users\Josyane\AppData\Local\{159DF61C-051E-4901-86F1-AB89F71AA26B} folder moved successfully.
C:\Users\Josyane\AppData\Local\{16547077-B5E5-4F58-BF1E-06508390C549} folder moved successfully.
C:\Users\Josyane\AppData\Local\{177DAA1A-83A6-4E5A-A808-C218A96A8C30} folder moved successfully.
C:\Users\Josyane\AppData\Local\{1B79E8D7-4B5A-4BED-BB6D-1CCE01E69BCE} folder moved successfully.
C:\Users\Josyane\AppData\Local\{1BEC6A47-A1F4-4178-8FE2-92EBF6739BE6} folder moved successfully.
C:\Users\Josyane\AppData\Local\{1D46D5BE-7C03-4C94-867A-5433332710F6} folder moved successfully.
C:\Users\Josyane\AppData\Local\{1FD87A72-B85B-4472-85C4-96FBDC83D07A} folder moved successfully.
C:\Users\Josyane\AppData\Local\{220E3115-DDB6-4016-B0F8-85607257DFD6} folder moved successfully.
C:\Users\Josyane\AppData\Local\{2351CA6F-AC2D-49BA-9017-883B485BB952} folder moved successfully.
C:\Users\Josyane\AppData\Local\{273C6B3E-E6F9-4015-B183-FEEF4713F5C8} folder moved successfully.
C:\Users\Josyane\AppData\Local\{2792092F-CF66-4208-A821-6C64613EC6B8} folder moved successfully.
C:\Users\Josyane\AppData\Local\{28228F1B-BE1C-4D10-9257-E1F0F55891A3} folder moved successfully.
C:\Users\Josyane\AppData\Local\{28D0C587-D3C1-47E9-93C7-1E99374DE199} folder moved successfully.
C:\Users\Josyane\AppData\Local\{2ABCB3A7-A9D7-471B-A741-DEF9D18CE22F} folder moved successfully.
C:\Users\Josyane\AppData\Local\{2B3F1B76-FA45-4BE6-9BCB-95D0D14A7B95} folder moved successfully.
C:\Users\Josyane\AppData\Local\{2B946E7E-F91D-493E-9E65-E961815BEC49} folder moved successfully.
C:\Users\Josyane\AppData\Local\{2C5ACC0C-CEA1-4771-934F-C4DF5FD3FAC5} folder moved successfully.
C:\Users\Josyane\AppData\Local\{2C99097A-54B7-4D48-9A77-DB4C82B1A679} folder moved successfully.
C:\Users\Josyane\AppData\Local\{2CBBB1C0-FC7E-44F6-B8F7-9166FABB7A09} folder moved successfully.
C:\Users\Josyane\AppData\Local\{2D04F585-6512-4BC5-827E-F495F2351FE7} folder moved successfully.
C:\Users\Josyane\AppData\Local\{2DA43FC6-B18D-4891-A828-FA9280201194} folder moved successfully.
C:\Users\Josyane\AppData\Local\{2DEC17C4-8C4B-41EB-A951-D51D05493A4A} folder moved successfully.
C:\Users\Josyane\AppData\Local\{2DF2B568-1D2D-4206-846F-33D12D10404F} folder moved successfully.
C:\Users\Josyane\AppData\Local\{2FE96579-E5D5-46FD-B62D-E2B94D6C3BFD} folder moved successfully.
C:\Users\Josyane\AppData\Local\{306DFB28-309D-4B68-A985-F2AB233F31C2} folder moved successfully.
C:\Users\Josyane\AppData\Local\{3122BAA7-3A91-44DE-8864-46AB1A124921} folder moved successfully.
C:\Users\Josyane\AppData\Local\{3153E524-45D0-4BCB-8E05-BACF51F70FD3} folder moved successfully.
C:\Users\Josyane\AppData\Local\{321D53A9-29C4-47CD-8853-914DB5E0A2A8} folder moved successfully.
C:\Users\Josyane\AppData\Local\{33D2A537-BE89-4703-951D-A39A5FDB6F13} folder moved successfully.
C:\Users\Josyane\AppData\Local\{35575C8B-D078-4BFB-85DD-BA2A2F5A62CF} folder moved successfully.
C:\Users\Josyane\AppData\Local\{35CE2DF9-97AD-4E28-A837-6799E0AFBB6F} folder moved successfully.
C:\Users\Josyane\AppData\Local\{361CF664-CF65-41AB-AA7C-1FE33A576585} folder moved successfully.
C:\Users\Josyane\AppData\Local\{36DBB51A-E29C-4DEC-8A76-C4614B4D89A3} folder moved successfully.
C:\Users\Josyane\AppData\Local\{3783CD1D-DC4D-440C-91D6-75CCF7E28F31} folder moved successfully.
C:\Users\Josyane\AppData\Local\{386F61F0-BBCF-42B2-8A1C-85B99CF20B3E} folder moved successfully.
C:\Users\Josyane\AppData\Local\{38B31152-2EDC-4A32-AC44-76175F9376C3} folder moved successfully.
C:\Users\Josyane\AppData\Local\{391B1C33-32CD-4C59-A436-2381B1AFABD1} folder moved successfully.
C:\Users\Josyane\AppData\Local\{3B0958BC-B2DB-42A0-B660-08FCD0B70503} folder moved successfully.
C:\Users\Josyane\AppData\Local\{3BC9DF95-33E2-446F-AD4A-6156AF5E5279} folder moved successfully.
C:\Users\Josyane\AppData\Local\{3BE05A57-C971-49BF-A481-DCF0FC62F273} folder moved successfully.
C:\Users\Josyane\AppData\Local\{3C2DB2AE-6E4C-48CD-9DD7-9CC0F1764026} folder moved successfully.
C:\Users\Josyane\AppData\Local\{3D82CC67-F643-4E32-AEB6-E2D36DA39AF7} folder moved successfully.
C:\Users\Josyane\AppData\Local\{4088E0A5-316F-4D90-8899-ACF70C7BBEA9} folder moved successfully.
C:\Users\Josyane\AppData\Local\{42C453EE-56AF-44C2-BD08-3793A881B949} folder moved successfully.
C:\Users\Josyane\AppData\Local\{45BB022D-648E-46EE-88E4-095173EBBC04} folder moved successfully.
C:\Users\Josyane\AppData\Local\{48B6EBD5-64D2-4398-8D9B-786C42774A98} folder moved successfully.
C:\Users\Josyane\AppData\Local\{493AA03B-9136-4079-9245-7E24415E53FF} folder moved successfully.
C:\Users\Josyane\AppData\Local\{49BA9547-7556-4C61-AD05-7DF36331B427} folder moved successfully.
C:\Users\Josyane\AppData\Local\{4A6F9DFB-2739-40DB-999E-065940EE0E64} folder moved successfully.
C:\Users\Josyane\AppData\Local\{4BB6B42F-3880-4536-9BF9-F0DF66EEF705} folder moved successfully.
C:\Users\Josyane\AppData\Local\{4F2BCE6F-DD92-4737-A76E-CC51633BFFCD} folder moved successfully.
C:\Users\Josyane\AppData\Local\{517D5471-D73E-4F2C-852C-A9E4F4B1B8BB} folder moved successfully.
C:\Users\Josyane\AppData\Local\{55186B4E-A0F2-4390-A3BF-7CC9A9E4F64F} folder moved successfully.
C:\Users\Josyane\AppData\Local\{56FDB808-9EF9-4E7B-8C5D-4C8729216280} folder moved successfully.
C:\Users\Josyane\AppData\Local\{58331D02-E5CD-4599-A31C-077D56543B85} folder moved successfully.
C:\Users\Josyane\AppData\Local\{597BF016-73B3-40C1-BE96-75C49217461C} folder moved successfully.
C:\Users\Josyane\AppData\Local\{5B1074AE-4015-4057-B34A-516535797569} folder moved successfully.
C:\Users\Josyane\AppData\Local\{5F0C20EE-C36C-44A6-94F7-1A3720929CBC} folder moved successfully.
C:\Users\Josyane\AppData\Local\{617F0865-19CA-4E27-807A-E8EB1947BCB9} folder moved successfully.
C:\Users\Josyane\AppData\Local\{629B1168-07AB-4C29-A544-9A79692D6FB9} folder moved successfully.
C:\Users\Josyane\AppData\Local\{62CFDBAA-1C47-468A-8F9E-5E3F26827DCF} folder moved successfully.
C:\Users\Josyane\AppData\Local\{6521D901-A90F-446C-9784-680ECFC908A1} folder moved successfully.
C:\Users\Josyane\AppData\Local\{65BD2FEF-ED4A-4E16-B70F-95AE8E67FE17} folder moved successfully.
C:\Users\Josyane\AppData\Local\{66174A05-42C5-4F24-BF37-B70B19A219E3} folder moved successfully.
C:\Users\Josyane\AppData\Local\{689A81C4-844F-4162-B821-46CED777E5AC} folder moved successfully.
C:\Users\Josyane\AppData\Local\{68E8A8A0-FDC1-4D32-9786-CE49EA05037B} folder moved successfully.
C:\Users\Josyane\AppData\Local\{691DC5A1-6F97-447E-86CD-6FF169FFCD8F} folder moved successfully.
C:\Users\Josyane\AppData\Local\{6BABE0E0-B697-42F7-BAF5-50E4D2C7527E} folder moved successfully.
C:\Users\Josyane\AppData\Local\{6C05100F-DA16-4E5B-8564-2183BAE02ECF} folder moved successfully.
C:\Users\Josyane\AppData\Local\{6E76B174-75EB-43D8-93C9-0C98B5C6181D} folder moved successfully.
C:\Users\Josyane\AppData\Local\{6E834467-648F-4283-B5D7-37B9A7B18194} folder moved successfully.
C:\Users\Josyane\AppData\Local\{6F595CE6-0563-44E8-97A7-1B69165987F5} folder moved successfully.
C:\Users\Josyane\AppData\Local\{70D04B06-DCBB-4F87-9B15-4A4E83A6EE53} folder moved successfully.
C:\Users\Josyane\AppData\Local\{712D6DC4-3453-4AE4-A5F9-52F77BF6B98C} folder moved successfully.
C:\Users\Josyane\AppData\Local\{7178D709-7C7B-4E9E-BA0F-7FBC678EEFD9} folder moved successfully.
C:\Users\Josyane\AppData\Local\{71E4EF14-EF7E-48C2-B4B6-E77D85A26FC3} folder moved successfully.
C:\Users\Josyane\AppData\Local\{7288372D-74CA-493A-8A50-B4D96117B96F} folder moved successfully.
C:\Users\Josyane\AppData\Local\{7326DFC1-7C83-43C4-9F08-D93C31E4B8BA} folder moved successfully.
C:\Users\Josyane\AppData\Local\{73783634-1719-41B5-83C4-F8342DE8995E} folder moved successfully.
C:\Users\Josyane\AppData\Local\{74F6389B-006F-44B1-B7F7-8CE4B15CB592} folder moved successfully.
C:\Users\Josyane\AppData\Local\{765E2310-7D97-48D2-8F21-980E8B74F624} folder moved successfully.
C:\Users\Josyane\AppData\Local\{772F6FD8-F2EE-4EB9-A206-71E01C4ECB04} folder moved successfully.
C:\Users\Josyane\AppData\Local\{780295B5-933E-4038-BAB5-500D575CBFC2} folder moved successfully.
C:\Users\Josyane\AppData\Local\{7AAD30D5-B263-4E01-A822-C9624B777EB4} folder moved successfully.
C:\Users\Josyane\AppData\Local\{7B17063D-1479-4632-9246-D8D3A0120612} folder moved successfully.
C:\Users\Josyane\AppData\Local\{7DABE71A-9BD1-4E0B-999E-18D3CA5B2EA7} folder moved successfully.
C:\Users\Josyane\AppData\Local\{84C0F07E-2F3F-41CD-8569-82DB6B1AD4F9} folder moved successfully.
C:\Users\Josyane\AppData\Local\{88811A91-3495-4E87-8E76-7961C3DFD04F} folder moved successfully.
C:\Users\Josyane\AppData\Local\{8B9C8724-7598-43EA-BC73-45BDCFAB6182} folder moved successfully.
C:\Users\Josyane\AppData\Local\{8C59C876-7DCE-4614-A43F-C549E6B48543} folder moved successfully.
C:\Users\Josyane\AppData\Local\{8E032B55-BADB-409F-A04A-65505E72B99B} folder moved successfully.
C:\Users\Josyane\AppData\Local\{8E8DE833-7357-4A2F-A9D1-9490B0CB8A4B} folder moved successfully.
C:\Users\Josyane\AppData\Local\{8EF87D6F-E7D6-4161-8850-549E387267E3} folder moved successfully.
C:\Users\Josyane\AppData\Local\{8FD6F4D3-C776-4A79-9572-85720210D9F4} folder moved successfully.
C:\Users\Josyane\AppData\Local\{94EE6261-EF47-4E56-93AB-A40CC7BDD0D1} folder moved successfully.
C:\Users\Josyane\AppData\Local\{9752A184-3622-42ED-A8AD-A692CB32EA79} folder moved successfully.
C:\Users\Josyane\AppData\Local\{9790A9A6-46B7-4FF7-8669-ED792E1329AC} folder moved successfully.
C:\Users\Josyane\AppData\Local\{98722804-8883-436A-B153-857A15EB5C81} folder moved successfully.
C:\Users\Josyane\AppData\Local\{99235A2A-C158-48F2-B3E1-F503E774D3BD} folder moved successfully.
C:\Users\Josyane\AppData\Local\{9AD98396-4310-486A-815F-9FF47F4473B6} folder moved successfully.
C:\Users\Josyane\AppData\Local\{9BB9DD12-73B1-49D8-A302-7CA1164C8D6B} folder moved successfully.
C:\Users\Josyane\AppData\Local\{9C6A2CFF-CA2E-4A52-8DBB-6A48741F6F6F} folder moved successfully.
C:\Users\Josyane\AppData\Local\{9D3E5844-8F6A-4148-9990-361DBA62221B} folder moved successfully.
C:\Users\Josyane\AppData\Local\{9D8FC04A-8F59-4DA7-975E-F91DE0B92596} folder moved successfully.
C:\Users\Josyane\AppData\Local\{9DA50BBE-6286-4AEC-9319-2204E7D0562F} folder moved successfully.
C:\Users\Josyane\AppData\Local\{9DC60110-271E-42E7-8C4B-8FDA45C6D289} folder moved successfully.
C:\Users\Josyane\AppData\Local\{9F6B2F95-894A-4A42-B854-3D227BCDD624} folder moved successfully.
C:\Users\Josyane\AppData\Local\{9FB6C54D-5EDA-40D6-B71D-02AAC37667F2} folder moved successfully.
C:\Users\Josyane\AppData\Local\{A366ACD3-BD60-40A2-BC1E-991B103A5A5C} folder moved successfully.
C:\Users\Josyane\AppData\Local\{A404FAB9-782D-4470-A2BC-44721B4B2CA0} folder moved successfully.
C:\Users\Josyane\AppData\Local\{A43F3A69-4D9F-4BD2-8EBD-F1695D552FCD} folder moved successfully.
C:\Users\Josyane\AppData\Local\{A4C7443E-24AE-4220-ABDC-665B10935CB3} folder moved successfully.
C:\Users\Josyane\AppData\Local\{A82A9470-245C-4D72-93A4-B3262D8D494D} folder moved successfully.
C:\Users\Josyane\AppData\Local\{ACFD3A6F-9DE5-4F6E-A7E6-737303B8EC09} folder moved successfully.
C:\Users\Josyane\AppData\Local\{ADD781E0-7A5F-48FF-90D6-11D29D830C50} folder moved successfully.
C:\Users\Josyane\AppData\Local\{AE94090A-7F11-406C-9C59-97717C1DFAF8} folder moved successfully.
C:\Users\Josyane\AppData\Local\{B0FB352B-5D23-491B-8FF4-E9F503F980D0} folder moved successfully.
C:\Users\Josyane\AppData\Local\{B1ACAB13-D56D-429F-9AD3-FA6B565048A5} folder moved successfully.
C:\Users\Josyane\AppData\Local\{B34E9ABC-EA25-4D64-B950-65E3DC79A78E} folder moved successfully.
C:\Users\Josyane\AppData\Local\{B4D6C9B3-D605-43E5-B6AA-61E3EEBE3F7D} folder moved successfully.
C:\Users\Josyane\AppData\Local\{B539718F-9FBB-4D96-8E53-C15B8B75042F} folder moved successfully.
C:\Users\Josyane\AppData\Local\{B5A8D46B-A2E5-41A1-B8A3-2F7FECA73A17} folder moved successfully.
C:\Users\Josyane\AppData\Local\{B5CE1002-0F57-413E-A393-D5BA46922CF7} folder moved successfully.
C:\Users\Josyane\AppData\Local\{B5EA033C-E498-48DA-A018-C4BC5B7EAE93} folder moved successfully.
C:\Users\Josyane\AppData\Local\{B67FFDC9-ABE6-41F6-9CFB-DDE84C57D53F} folder moved successfully.
C:\Users\Josyane\AppData\Local\{B77D4530-59CF-4605-A240-19008195D3A8} folder moved successfully.
C:\Users\Josyane\AppData\Local\{BB4F841C-9485-49A2-8FCF-C30903E56D5C} folder moved successfully.
C:\Users\Josyane\AppData\Local\{BB5AB40E-FD3B-47B3-9ACC-D34F3DA5B43D} folder moved successfully.
C:\Users\Josyane\AppData\Local\{BD3C0857-32FA-4882-9164-24768569AA0F} folder moved successfully.
C:\Users\Josyane\AppData\Local\{BE3CFABC-B754-4630-AE86-DC4EAF014BB1} folder moved successfully.
C:\Users\Josyane\AppData\Local\{BE4E6B0C-DF97-4C1C-B487-D3A6A8E80BE9} folder moved successfully.
C:\Users\Josyane\AppData\Local\{BE95BD94-1BD0-4D3B-97F2-74257DF32E45} folder moved successfully.
C:\Users\Josyane\AppData\Local\{BF59596D-2218-4DB6-93F3-35CD1B876899} folder moved successfully.
C:\Users\Josyane\AppData\Local\{C0A1BB2B-AD64-44A7-B4E7-122F1A049EFA} folder moved successfully.
C:\Users\Josyane\AppData\Local\{C22861E9-7FBE-43CE-B2E5-B0627D3DA80C} folder moved successfully.
C:\Users\Josyane\AppData\Local\{C2E435A1-8C02-48D6-9144-A9DAF26C4C62} folder moved successfully.
C:\Users\Josyane\AppData\Local\{C3FC6D2A-A65C-4AB7-8208-1639FA423EF2} folder moved successfully.
C:\Users\Josyane\AppData\Local\{C41DBA2D-4AFD-4165-AE87-60570565E6D8} folder moved successfully.
C:\Users\Josyane\AppData\Local\{C4B931D0-279D-45D9-B97C-B9264FFFD617} folder moved successfully.
C:\Users\Josyane\AppData\Local\{C865CADD-938D-4A62-B0DA-973A559159D6} folder moved successfully.
C:\Users\Josyane\AppData\Local\{C89D3132-4AFC-4928-8EE3-0F00B0562E3F} folder moved successfully.
C:\Users\Josyane\AppData\Local\{C9674FD5-30EC-4F88-9079-B724B829755C} folder moved successfully.
C:\Users\Josyane\AppData\Local\{CA6B7688-AB6F-4965-A1EA-C999924ED762} folder moved successfully.
C:\Users\Josyane\AppData\Local\{CC4C153C-4999-4BCE-A94A-09F45FB942A9} folder moved successfully.
C:\Users\Josyane\AppData\Local\{CC8FB32A-F49C-47C0-8D5B-F46D27F55674} folder moved successfully.
C:\Users\Josyane\AppData\Local\{CD895BFF-A01A-4481-9262-288375EB8584} folder moved successfully.
C:\Users\Josyane\AppData\Local\{CFAE64E3-529A-4302-BAE3-C05A1831082E} folder moved successfully.
C:\Users\Josyane\AppData\Local\{D024B408-1844-46A7-89CE-6775A8E988F3} folder moved successfully.
C:\Users\Josyane\AppData\Local\{D0891FB0-2D25-4B5A-8788-5B1004724482} folder moved successfully.
C:\Users\Josyane\AppData\Local\{D29D679D-BB95-4C1F-8EFB-E42F4A72FBE1} folder moved successfully.
C:\Users\Josyane\AppData\Local\{D460AD44-C35B-430C-BA87-C71C55185F24} folder moved successfully.
C:\Users\Josyane\AppData\Local\{D461790C-74C2-449A-877E-13FD35B6B06F} folder moved successfully.
C:\Users\Josyane\AppData\Local\{D51A8281-1993-4977-AFAB-A012CBA26CED} folder moved successfully.
C:\Users\Josyane\AppData\Local\{D6592A0F-31BA-47CE-94ED-6150EF9AC0FD} folder moved successfully.
C:\Users\Josyane\AppData\Local\{D7E3829E-01B0-41F9-B85D-7C7292EB1146} folder moved successfully.
C:\Users\Josyane\AppData\Local\{D82E22DE-9857-48C7-A854-CC47D64D572B} folder moved successfully.
C:\Users\Josyane\AppData\Local\{D85BE4AA-B09D-45AA-80D7-53FE582D4280} folder moved successfully.
C:\Users\Josyane\AppData\Local\{DBA7C229-B083-4EAA-80BB-CB4F179DE193} folder moved successfully.
C:\Users\Josyane\AppData\Local\{DE5657E0-27F1-4166-9296-F7DD9DDBAE24} folder moved successfully.
C:\Users\Josyane\AppData\Local\{DF48F396-DBC8-4BDF-BEE9-65D1A18E98B7} folder moved successfully.
C:\Users\Josyane\AppData\Local\{DFE14D3F-C576-4FDF-9C5B-4A4919327C78} folder moved successfully.
C:\Users\Josyane\AppData\Local\{E4917E27-FAF4-4767-B04E-ECA4C35AE0C2} folder moved successfully.
C:\Users\Josyane\AppData\Local\{E4A1DC82-3ADD-4D93-B3A3-A474FE75ED1A} folder moved successfully.
C:\Users\Josyane\AppData\Local\{E4CB1187-191B-44DC-8C8B-D388313D0AB7} folder moved successfully.
C:\Users\Josyane\AppData\Local\{E5D6257E-6B6F-4F6E-B120-E59DFBBE542A} folder moved successfully.
C:\Users\Josyane\AppData\Local\{E69960A7-2A37-4AF3-B757-C2C8C27260CC} folder moved successfully.
C:\Users\Josyane\AppData\Local\{E6EB63F5-A3FA-40DE-9CFF-1A2CA2729738} folder moved successfully.
C:\Users\Josyane\AppData\Local\{E7E773E9-2CAD-42D4-AB0D-1730557591DE} folder moved successfully.
C:\Users\Josyane\AppData\Local\{EA64FF55-DB32-4CB3-93CE-926D377D9983} folder moved successfully.
C:\Users\Josyane\AppData\Local\{EAEF92FE-4AFE-4CF4-90F6-BD36A4A5FB01} folder moved successfully.
C:\Users\Josyane\AppData\Local\{EB9978A4-A174-4552-99DB-3506ADE40E87} folder moved successfully.
C:\Users\Josyane\AppData\Local\{EBD6A6D6-131D-43D8-8E32-03933357EA5A} folder moved successfully.
C:\Users\Josyane\AppData\Local\{EC303E57-90B4-4C2F-8776-A449E2A01F1A} folder moved successfully.
C:\Users\Josyane\AppData\Local\{ED6284F2-8AD1-4049-918D-CFECDE44B390} folder moved successfully.
C:\Users\Josyane\AppData\Local\{EE09150C-1DE1-4D80-B4EF-AEF24D81A123} folder moved successfully.
C:\Users\Josyane\AppData\Local\{EFBBE473-21AC-4E37-BA5D-28EED2CC1219} folder moved successfully.
C:\Users\Josyane\AppData\Local\{F20653CB-3458-49A5-ADD4-489F970707DD} folder moved successfully.
C:\Users\Josyane\AppData\Local\{F2884681-3AE8-46A0-95DA-3989BF4096F0} folder moved successfully.
C:\Users\Josyane\AppData\Local\{F3DCC9AB-6742-48C1-8D7A-48C81BD0E8DA} folder moved successfully.
C:\Users\Josyane\AppData\Local\{F4DFC16E-DE0C-4505-B829-2BC6DEE8C042} folder moved successfully.
C:\Users\Josyane\AppData\Local\{F4F4DA06-FBB9-4A73-BEBE-D1FA676E275C} folder moved successfully.
C:\Users\Josyane\AppData\Local\{F50B8617-6044-4452-B292-8CAA4CC23BC2} folder moved successfully.
C:\Users\Josyane\AppData\Local\{F58E1CFA-7D76-421B-A2F4-AB6E06027532} folder moved successfully.
C:\Users\Josyane\AppData\Local\{F58EDDDE-B0C4-48FC-861E-01DDD5ADF028} folder moved successfully.
C:\Users\Josyane\AppData\Local\{F5AA8754-7519-4BC0-AEE8-06AC0D4C9073} folder moved successfully.
C:\Users\Josyane\AppData\Local\{F5F8ABF6-96DC-44AC-AF87-078A293A00BF} folder moved successfully.
C:\Users\Josyane\AppData\Local\{F890E3BF-27F0-4F06-95FC-2B375BA5ED8A} folder moved successfully.
C:\Users\Josyane\AppData\Local\{F9C3071A-DDB6-404F-8873-01CDCF24F127} folder moved successfully.
C:\Users\Josyane\AppData\Local\{FC21B773-159A-46BB-8DEB-1B21A7426E75} folder moved successfully.
C:\Users\Josyane\AppData\Local\{FC2D2A9B-A9EC-4171-8A3D-9E7D6F4A78FB} folder moved successfully.
C:\Users\Josyane\AppData\Local\{FCC16087-7ECB-4EE5-9810-80A21DBD9815} folder moved successfully.
C:\Users\Josyane\AppData\Local\{FD7608CB-EEA8-46C0-9A36-328632FF3D8B} folder moved successfully.
C:\Users\Josyane\AppData\Local\{FE79E67C-D4A9-4D77-8D92-18AD27D674B8} folder moved successfully.
C:\Users\Josyane\AppData\Local\{FFBC3C94-9574-4FA2-9498-775AEA1E0405} folder moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Josyane
->Temp folder emptied: 43769238 bytes
->Temporary Internet Files folder emptied: 15848597 bytes
->Java cache emptied: 171410 bytes
->Google Chrome cache emptied: 455177162 bytes
->Flash cache emptied: 46275 bytes
 
User: Public
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 195382227 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 42321791 bytes
RecycleBin emptied: 149419325 bytes
 
Total Files Cleaned = 860,00 mb
 
 
OTL by OldTimer - Version 3.2.69.0 log created on 06022013_131255

Files\Folders moved on Reboot...
File\Folder c:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll not found!
File\Folder C:\Users\Josyane\AppData\Local\Temp\etilqs_btDQjNcm1Z4ccre not found!
C:\Users\Josyane\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Josyane\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
C:\Users\Josyane\AppData\Local\Google\Chrome\User Data\Default\Cache\data_0 moved successfully.
C:\Users\Josyane\AppData\Local\Google\Chrome\User Data\Default\Cache\data_1 moved successfully.
C:\Users\Josyane\AppData\Local\Google\Chrome\User Data\Default\Cache\data_2 moved successfully.
C:\Users\Josyane\AppData\Local\Google\Chrome\User Data\Default\Cache\data_3 moved successfully.
C:\Users\Josyane\AppData\Local\Google\Chrome\User Data\Default\Cache\data_4 moved successfully.
C:\Users\Josyane\AppData\Local\Google\Chrome\User Data\Default\Cache\index moved successfully.
File move failed. C:\windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

g3n-h@ckm@n · Answer

fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.


&#9654 Télécharge ici :

Malwarebytes  

&#9654 Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

relance malwarebytes en suivant scrupuleusement ces consignes :

! Déconnecte toi et ferme toutes applications en cours !

&#9654 Lance Malwarebyte's .

Fais un examen dit "Complet" .

&#9654 Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
&#9654 à la fin tu cliques sur "résultat" .
&#9654 Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

&#9654 Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !


&#9654 Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)

nicéphore31 · Answer

quand je clique sur activer ca me dit de saisir mon ID produit et la clé

nicéphore31 · Answer

ok je lai c beau

g3n-h@ckm@n · Answer

qui te dit de cliquer sur activer ?

nicéphore31 · Answer

écoute japprécie ton aide mais sois patient et comprends le fait que je ne suis pas bonne en info. je suis allée faire un tour et me revoila. donc si jai bien compris quand jouvre malwarebites je supprime les deux éléments que je vois (des genre de liens)... dois-je double cliquer sur ces liens ? je suis dans log jattends ton avis

nicéphore31 · Answer

de plus les deux éléments contiennent la meme date entre parenthese

g3n-h@ckm@n · Answer

ouvre le log et colle son contenu ici :D

nicéphore31 · Answer

voila

Malwarebytes Anti-Malware (Essai) 1.75.0.1300
www.malwarebytes.org

Version de la base de données: v2013.06.02.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16576
Josyane :: JOSYANE-PC [administrateur]

Protection: Activé

2013-06-02 14:28:03
mbam-log-2013-06-02 (14-28-03).txt

Type d'examen: Examen complet (C:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 375735
Temps écoulé: 41 minute(s), 44 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 0
(Aucun élément nuisible détecté)

(fin)

nicéphore31 · Answer

selon vous est-ce normal que les pages internet que ce soit sur chrome ou explorer sont tres longue a ouvrir ou parfois meme ne souvre jamais apres une actualisation de la page?

g3n-h@ckm@n · Answer

fais ce ménage et dis quoi ensuite :

https://forums-fec.be/entraide/viewtopic.php?f=11&t=229

nicéphore31 · Answer

pour flash player ca me dit ceci 

Votre navigateur Google Chrome inclut déjà Adobe® Flash® Player. Google Chrome lancera automatiquement les mises à jour lorsque de nouvelles versions de Flash Player seront disponibles.

je ne vois pas la version que vous mavez mentionné je fais quoi?

nicéphore31 · Answer

jai la version 11.7.700.202

nicéphore31 · Answer

# DelFix v10.2 - Rapport créé le 02/06/2013 à 17:41:18
# Mis à jour le 02/04/2013 par Xplode
# Nom d'utilisateur : Josyane - JOSYANE-PC
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Activation de l'UAC ... OK

~ Suppression des outils de désinfection ...

Supprimé : C:\_OTL
Supprimé : C:\AdwCleaner[S1].txt
Supprimé : C:\Users\Josyane\Downloads\adwcleaner.exe
Supprimé : C:\Users\Josyane\Downloads\Extras.Txt
Supprimé : C:\Users\Josyane\Downloads\OTL.Txt
Supprimé : C:\Users\Josyane\Downloads\OTL.exe
Supprimée : HKLM\SOFTWARE\OldTimer Tools
Supprimée : HKLM\SOFTWARE\AdwCleaner

~ Sauvegarde de la base de registre ... OK

~ Purge de la restauration système ...

Supprimé : RP #159 [Windows Update | 05/21/2013 23:15:37]
Supprimé : RP #160 [Uniblue SpeedUpMyPC installation | 05/26/2013 21:45:40]
Supprimé : RP #161 [Windows Update | 05/26/2013 21:49:58]
Supprimé : RP #162 [Sauvegarde Windows | 05/26/2013 23:00:01]
Supprimé : RP #163 [Windows Update | 05/29/2013 21:15:34]
Supprimé : RP #164 [Windows Update | 05/30/2013 01:53:21]
Supprimé : RP #165 [Programme d'installation pour les modules Windows | 05/30/2013 10:39:27]
Supprimé : RP #166 [Installation avast! Free Antivirus | 05/31/2013 00:40:55]
Supprimé : RP #167 [Removed Norton Online Backup | 05/31/2013 02:10:06]
Supprimé : RP #168 [Windows Update | 06/02/2013 12:56:43]
Supprimé : RP #169 [OTL Restore Point - 2013-06-02 11:58:55 | 06/02/2013 15:59:00]
Supprimé : RP #170 [Removed Adobe Reader X (10.1.7) - Français. | 06/02/2013 21:15:33]

Nouveau point de restauration créé !

~ Réinitialisation des paramètres système ... OK

########## - EOF - ##########

g3n-h@ckm@n · Answer

c'est ok :)

nicéphore31 · Answer

# DelFix v10.2 - Rapport créé le 02/06/2013 à 17:53:23
# Mis à jour le 02/04/2013 par Xplode
# Nom d'utilisateur : Josyane - JOSYANE-PC
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Activation de l'UAC ... OK

~ Suppression des outils de désinfection ...


~ Sauvegarde de la base de registre ... OK

~ Purge de la restauration système ...

Supprimé : RP #171 [Fin de désinfection | 06/02/2013 21:41:50]

Nouveau point de restauration créé !

~ Réinitialisation des paramètres système ... OK

########## - EOF - ##########

g3n-h@ckm@n · Answer

:)

nicéphore31 · Answer

ERUNT - The Emergency Recovery Utility NT ========================================= Registry Backup and Restore for Windows NT/2000/2003/XP v1.1j, 10/20/2005, Freeware Written by Lars Hederer e-mail: lars.hederer@t-online.de Look for the latest version here: http://www.larshederer.homepage.t-online.de/erunt To find out what's new in this version, please see the "Version history" section later in this file. Introduction ------------ With the invention of Windows 95 Microsoft made the wise decision to organize all computer- and application-specific data which was spread over countless INI files before in a centralized Windows database, called the system "registry". The registry is one of the most important parts in every Windows system today, without which the OS would not even boot. And since the registry is quite sensitive to corruption, it is very advisable to backup its according files from time to time. In MS-DOS based Windows versions (95, 98, Me) the registry consists of the files SYSTEM.DAT and USER.DAT (and CLASSES.DAT in Windows Me). To backup these files, one can easily go to the Windows folder in Explorer and copy the files to a safe location, for example another folder on the hard disk. Microsoft even supplies a utility called ERU which can be used to backup these and a few other critical system files to a safe location. Also, Windows 9x/Me automatically create backups of the registry at startup, with Windows 95 always backing up the registry from the previous Windows session, and Windows 98/Me maintaining up to five registry copies from the last five days where Windows was running. Unfortunately, this is not the case with Windows versions based on the NT kernel. In Windows NT and 2000, the registry is never backed up automatically, and in XP it is backed up only as part of the bloated and resource hogging System Restore program which cannot even be used for a "restore" should a corrupted registry prevent Windows from booting. It has also become impossible to copy the necessary files, now called "hives" and usually named DEFAULT, SAM, SECURITY, SOFTWARE, SYSTEM in the SYSTEM32\CONFIG folder, to another location because they are all in use by the OS. And though the registry in an NT-based Windows is less likely to become corrupted than in other versions, it can still happen, and for these cases NT is simply missing an option for easy registry backup and restore as there is in Windows 9x/Me, to get the system up and running again in no time. In 2001, as Windows XP began to come pre-installed on many new home user PCs and was likely to become the new Windows standard over the next years, I decided to write a program which offers the ease-of-use of Windows 9x/Me ERU by Microsoft (hence the name ERUNT) to backup the registry, as well as providing an auto-backup capability, for example at Windows startup. Or, before installing a new program for testing purposes one could save the registry with ERUNT, install and test the program, uninstall it and restore the registry to be 100% sure that no debris is left. Note: The "Export registry" function in Regedit is USELESS (!) for making a complete backup of the registry. Neither does it export the whole registry (for example, no information from the "SECURITY" hive is saved), nor can the exported file be used later to replace the current registry with the old one. Instead, if you re-import the file, it is merged with the current registry without deleting anything that has been added since the export, leaving you with an absolute mess of old and new entries. Features -------- - Backup the Windows NT/2000/2003/XP registry to a folder of your choice - System and current user registries selectable - Command line switches for automated registry backup and restoration - Restore the registry in Windows 9x/Me/NT/2000/2003/XP and MS-DOS (all-in-one restore program) or the Windows Recovery Console - Included in this package: NTREGOPT program for optimizing the registry - All programs in this package are completely localizable (translate them into your language), German version included Supported operating systems --------------------------- - Windows NT 3.51 - Windows NT 4.0 - Windows 2000 - Windows 2003 - Windows XP - most likely, all future Windows versions based on the NT kernel Additionally supported by the ERDNT restore program: - MS-DOS - Windows 95 - Windows 98 - Windows Me Installation ------------ Use the Setup program to install ERUNT on your computer. Or, if you downloaded the zipped version: Unzip all files into a folder of your choice, and if you want, create shortcuts on your desktop to the ERUNT.EXE and NTREGOPT.EXE files. Uninstallation -------------- Use "Add/Remove Programs" in Windows' control panel to remove ERUNT from your computer. Or, if you downloaded the zipped version: Delete the ERUNT folder, delete the appropriate desktop icons. (You may also want to delete all restore folders you have previously created with the program.) Backing up the registry with ERUNT ---------------------------------- Note: To ensure proper operation of ERUNT, you should be logged in as a system administrator. Start ERUNT, confirm the Welcome message. Type in the name of a restore folder where the backed up registry files should be saved, or click "..." to browse your computer's drives and select a folder. You can also simply leave the default, which is a folder named ERDNT inside your Windows folder, the advantage being that you have access to this folder from the Windows Recovery Console in case Windows does not boot anymore. Note that in the folder edit field, ERUNT by default appends a folder named the current date to the restore folder, which allows you to keep as many registry backups as you wish in the same restore folder, separated into the different creation dates. This feature, as well as the appearance of the date string, can be configured via the ERUNT.INI file, described later in this document. If you want the registry backup to be created directly in the folder you select, you can also simply remove the date from the folder edit field before clicking "OK". Next, select the backup options: - System registry: The current system registry, usually consisting of the files DEFAULT, SAM, SECURITY, SOFTWARE, and SYSTEM. - Current user registy: The registry files for the currently logged-on user, usually NTUSER.DAT and USRCLASS.DAT. - Other open user registries: Sometimes Windows has a few other user registries in memory. Examples for this are "generic" registries, e.g. for user "EVERYONE", or registries of other users if you use Fast Task Switching in Windows XP. Check this option to backup all these additional user registries (if found) as well. Click "OK" and wait until the backup process is complete. (Note that depending on your system configuration this may take some time, and that the first bar is NOT a progress bar, just an indicator that the program is still running.) The ERDNT program for later restoration of the registry is automatically copied to the restore folder. (Technical information: ERUNT saves only registry files which are in use by the system. It obtains information about these files from registry key HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ hivelist. Registry hives not listed there, for example those of other users of the computer, cannot be saved by ERUNT.) ERUNT command line switches --------------------------- ERUNT supports command line switches with which you can perform an automated registry backup, without user interaction. The syntax for the ERUNT command line is as follows: ERUNT DestinationFolder [sysreg] [curuser] [otherusers] /noconfirmdelete /noprogresswindow DestinationFolder is required for command line operation of ERUNT, all other switches are optional. If you specify a destination folder on the command line, ERUNT automatically runs in "silent" mode and with default backup options (system and current user registry). No user interaction is required, EXCEPT the confirmation of the restore folder deletion if it exists, or any error messages. The confirmation question can be suppressed by using /noconfirmdelete (see below). Description of the command line switches: DestinationFolder The name of the folder where the registry backup should be saved. Example: C:\WINDOWS\ERDNT You can use the strings #Date# and #Time# anywhere in the folder name to have ERUNT insert the current date/time at that position. Example: C:\WINDOWS\ERDNT\#Date# Windows' %SystemRoot% environment variable can be used on the command line as a substitute for the name of the Windows folder. Example: %SystemRoot%\ERDNT\#Date# sysreg Backup the system registry curuser Backup the current user registry otherusers Backup other open user registries (Note: If none of the three above options is given on the command line, ERUNT automatically uses the default backup options, system and current user registry.) /noconfirmdelete Automatically deletes the contents of the destination folder if it exists, without asking the user. BE CAREFUL and only use this option if you are sure that the contents of that folder may really be deleted! /noprogresswindow Hides the progress window during backup. So, to backup the system registry to folder C:\ERDNT each day of the week using subfolders with the name of the current day you could use the integrated scheduler in Windows to schedule seven different ERUNT calls for each day: For Monday you would use the command line C:\ERUNT\ERUNT.EXE C:\ERDNT\Monday sysreg /noconfirmdelete For Tuesday you would use the command line C:\ERUNT\ERUNT.EXE C:\ERDNT\Tuesday sysreg /noconfirmdelete ... well, you get the idea. Or, to have ERUNT automatically backup the registry on each Windows startup to a folder named "ERDNT" inside the Windows folder, including a folder named the current date, you could place a shortcut like the following in your Start Menu/Programs/Startup folder: C:\ERUNT\ERUNT.EXE %SystemRoot%\ERDNT\#Date# /noconfirmdelete If you want old restore folders created this way to be deleted automatically from time to time, you can use AUTOBACK.EXE instead of ERUNT.EXE. The AUTOBACK tool is described later in this document. Also, ERUNT Setup offers the choice to add an AutoBackup shortcut to the Startup folder automatically during the installation process. The ERUNT.INI file ------------------ You can configure various ERUNT settings with this file, for example change the default destination folder displayed in ERUNT's folder edit field, or disable automatic appendation of the current date there. Use Notepad to create a file named ERUNT.INI in your ERUNT folder, and add the following line: [ERUNT] Below this line, enter one or more of the following configuration options: DefaultDestinationFolder The name of the default folder displayed in ERUNT's folder edit field. You may also use environment variables here, for example %SystemRoot% as a substitute for the name of the Windows folder. Default: %SystemRoot%\ERDNT Example: DefaultDestinationFolder=C:\ERDNT AppendDateToFolderEditField Enable or disable automatic appendation of the current date to ERUNT's folder edit field. 0=disable, 1=enable, default: 1 Example: AppendDateToFolderEditField=0 AppendTimeToFolderEditField Enable or disable automatic appendation of the current time to ERUNT's folder edit field. This function can only be enabled in conjunction with AppendDateToFolderEditField also set to 1. 0=disable, 1=enable, default: 0 Example: AppendTimeToFolderEditField=1 DateFormat DateSeparator These settings configure the appearance of the date string in ERUNT's folder edit field, or when #Date# is used on the command line. By default, ERUNT uses Windows' regional settings for the short date format. Note that only "." and "-" are allowed as date separators. Example: DateFormat=mm/dd/yyyy DateSeparator=- TimeFormat TimeSeparator These settings configure the appearance of the time string in ERUNT's folder edit field, or when #Time# is used on the command line. By default, ERUNT uses Windows' regional settings for the short time format. Note that only "." and "-" are allowed as time separators. Example: TimeFormat=hh:mm:ss TimeSeparator=. DisableFastBackup On supported operating systems (including Windows XP and Server 2003) ERUNT by default uses a very fast backup algorithm. If you experience any problems during registry backup, you can try to disable this function and revert back to the conventional (but slow) method. This setting has no effect on unsupported operating systems, where the conventional algorithm is always used. 0=fast method, 1=conventional method, default: 0 Example: DisableFastBackup=1 The AUTOBACK.EXE tool --------------------- The command line tool AUTOBACK.EXE uses the same syntax as ERUNT but performs the additional task of deleting old restore folders after the new backup has been created. For this to work properly, the name of the last folder in the command line option DestinationFolder must begin with the current date, or the #Date# string, respectively. If this is the case AUTOBACK automatically searches the parent folder of the newly created backup for folder names of the same date format and deletes all folders except from the last 30 days where backups have been created. The number of restore folders to keep can be changed using the /days:n command line switch, e.g. /days:7 would only keep the folders from the last 7 backup days. By default AUTOBACK does not create a new backup if one already exists for the current day. Use the /alwayscreate switch to change this behavior and have the program always create a new backup. AUTOBACK is dependent on ERUNT and therefore needs to be executed from the same folder. It uses the same settings for the date format as ERUNT does, so if you specified a new format in ERUNT.INI it will also be used automatically by AUTOBACK. Restoring the registry with ERDNT --------------------------------- Situation: Windows is running normally. To restore a previous registry backup, open Windows Explorer, navigate to the folder where you saved the backup to, and double-click the ERDNT.EXE file to start the restoration program. (Each restore folder has its own copy of ERDNT.EXE in it.) Select which registry components to restore, then click "OK" to start restoration. When the process is complete, click "OK" to restart the computer and activate the restored registry. Note: If you experience any problems restoring the registry, please read "ERDNT technical information" later in this document to learn what ERDNT is actually doing during the process, or simply read on through the following emergency scenarios for other ways of restoring the registry. What to do if Windows does not boot anymore? -------------------------------------------- If Windows refuses to boot normally it can be for a variety of reasons, not the least of which is that the registry is damaged, or you installed a program or driver which is somewhat incompatible with the system or buggy, in which case restoring a registry backup from a point where everything was running smoothly should also help. The first thing to try is to reboot and press the F8 key immediately before the first Windows screen appears, then select the "Last Known Good" option from the menu and see if Windows boots up with this option. If it does, you're all set. If it does not, reboot again with F8, and select the option "Safe Mode". If Windows boots up in safe mode, you can restore a registry backup just as you would in normal mode, as described above. If safe mode also fails, read on... Restoring the registry with ERDNT - Emergency Scenario I -------------------------------------------------------- Situation: Windows fails to boot up in normal and safe mode, but you have a DOS boot disk or another (working) operating system installed on your PC which is supported by the ERDNT restoration program, and from which you have full access to the drive(s) containing the corrupt Windows installation and the registry backup. Boot up to the working OS, and open the folder containing the registry backup you want to restore. If the drive letters are different to as they were in the Windows where you created the registry backup, you need to edit the ERDNT.INF file now to reflect the new drive letters, before trying to restore the registry backup. For example, if the drive with the corrupt Windows installation is now available as D: instead of C:, then you would change all C:\... references in the INF file to D:\... . Editing the file can be done in Windows with the Notepad program, and in DOS with the EDIT command. Now run the ERDNT.EXE file to start the restoration program. Select which registry components to restore (just the system registry will do in most cases), then start restoration. When the process is complete, reboot the computer and check if the other Windows installation is repaired now. Restoring the registry with ERDNT - Emergency Scenario II --------------------------------------------------------- Situation: Windows fails to boot up in normal and safe mode, and you have no other working operating system installed on your PC. The following two rescue methods require that your PC is configured so that it can boot from CD. See your BIOS documentation for more information. 1. Bart's PE Builder Use another computer with Internet access and CD burning capabilities to download this free program from the Internet (do a Google search for it), which will create a bootable Windows CD with full access to all drives (including NTFS). Boot from this CD, open the File Management Utility and follow the directions in "Emergency Scenario I" to run ERDNT and restore the registry. 2. The Windows Recovery Console (Windows 2000 and higher) Note that you can use this method only if you saved the registry backup inside the Windows folder, and that using this procedure only the system registry is restored. This should however get you back into Windows, from where you can run the ERDNT program to restore user registries, if necessary. - Boot your system from the Windows 2000/2003/XP CD-ROM. - At the welcome screen, press "R" (Windows 2000: "R" then "C"). - Type in the number of the Windows installation you want to repair (usually 1), then press ENTER. - Type in the Administrator password (leave blank if you are unsure what it is) and press ENTER. - At the command prompt type cd erdnt or whatever you named your restore folder, then press ENTER. - If you enabled automatic registry backup on system boot during ERUNT installation and want to restore one of these backups, type cd autobackup - If you created subfolders for different registry backups (for example, with the different creation dates), type dir to see a list of available folders, then type cd foldername where foldername is the name of a folder listed by the dir command, to open that folder. - Now type batch erdnt.con to restore the system registry from that folder. - Type exit and remove the CD from the CD-ROM drive. The system will now reboot with the restored registry. ERDNT technical information --------------------------- ERDNT knows two restoration modes. The right mode is usually auto- detected each time ERDNT is run, but read on if you are experiencing problems restoring the registry. "NT" mode is used if you run the ERDNT program from within the same system where you made the backup. This is determined by looking at the [SystemRoot] entry in the ERDNT.INF file and comparing it to the actual %SystemRoot% environment variable. Using "NT" mode is the only way to successfully restore the active registry of the currently running OS. "File copy" mode is used if the currently running OS is NOT NT-based, or if the [SystemRoot] entry does not match the %SystemRoot% environment variable. In this mode the backed up registry files are simply copied back to their original location. MS-DOS based ERDNT only supports "File copy" mode. Note: In restoration mode "NT" backups of the current registry files are automatically created, so that option is grayed out. In restoration mode "File copy" all saved user registries are automatically restored, so you cannot choose between "current user" and "other user" registries. The backups of the current registry files are placed in the same location as the original and are given the extension ".bak". Experienced users don't even need to use the ERDNT program in other operating systems to restore a registry backup. Given access to the appropriate files and folders, the backed up files can simply be copied back to their original location, as that is all ERDNT does in "File copy" mode anyway. Have a look at the ERDNT.INF file to find out what the original file locations are. ERDNT command line switches --------------------------- The ERDNT program also supports command line switches for "silent" operation. The syntax for the ERDNT command line is: ERDNT silent [sysreg] [curuser] [otherusers] /mode:nt|filecopy /nobackup /noprogresswindow /reboot (Switches in brackets are optional.) Description of the command line switches: silent Puts ERDNT into "silent" mode and enables all other switches. sysreg Restore the system registry curuser * Restore the current user registry (This option is ignored in "File copy" restoration mode.) otherusers Restore other saved user registries (Note: If none of the three above options is given on the command line, ERDNT automatically uses the default restoration options, system and current user registry.) /mode:nt or /mode:filecopy * Disables automatic detection of the correct restoration mode and uses mode "NT" or "File copy" instead. /nobackup Don't make backups of the current registry files during restoration. (This switch is ignored in "NT" restoration mode.) /noprogresswindow Hides the progress window during restoration. /reboot * Automatically reboots the computer when restoration of the registry is complete. * = Not supported in the DOS version of ERDNT. Optimizing the registry with NTREGOPT ------------------------------------- Similar to Windows 9x/Me, the registry files in an NT-based system can become fragmented over time, occupying more space on your hard disk than necessary and decreasing overall performance. You should use the NTREGOPT utility regularly, but especially after installing or uninstalling a program, to minimize the size of the registry files and optimize registry access. The program works by recreating each registry hive "from scratch", thus removing any slack space that may be left from previously modified or deleted keys. Note that the program does NOT change the contents of the registry in any way, nor does it physically defrag the registry files on the drive (as the PageDefrag program from SysInternals does). The optimization done by NTREGOPT is simply compacting the registry hives to the minimum size possible. To optimize your registry, simply run NTREGOPT, click "OK", and when the process is complete click "OK" to reboot the computer. You should do so immediately because any changes made to the registry after NTREGOPT has been run are lost after the reboot. NTREGOPT command line switches ------------------------------ The syntax for the NTREGOPT command line is: NTREGOPT silent /noprogresswindow /reboot (Switches in brackets are optional.) Description of the command line switches: silent Puts NTREGOPT into "silent" mode and enables the other switches. /noprogresswindow Hides the progress window during optimization. /reboot Automatically reboots the computer when optimization of the registry is complete. Known problems -------------- ERUNT and NTREGOPT sometimes fail with error 1450 - "Insufficient system resources exist to complete the requested service" - when trying to save a registry hive. I have not yet been able to reproduce this error on any PC, and reports from affected users indicate that it also pops up when trying to back up the critical hive using Microsoft's REGBACK program. This makes it unlikely that there is anything I can do on my (the programmer's) side. Some users reported however that they were able to work around the problem by running ERUNT/NTREGOPT in Windows' safe mode, and in one case uninstalling a Symantec software suite solved it permanently. One user reported that increasing the "IRPStackSize" value as described in Microsoft Knowledge Base article 177078 fixed the problem on his system. When the system is rebooted after a restoration of the registry with ERDNT or optimization with NTREGOPT, Windows Server 2003 will by default display the shutdown event tracker during logon asking why the system has been shut down unexpectedly. This is because the info that the shutdown was in fact an expected one is written to the "old" registry during shutdown of the system which is replaced by the restored/optimized registry next time the system is booted, and therefore the shutdown info is discarded and shutdown event tracker thinks the system crashed. You may want to disable the tracker to avoid this message in the future (see the Windows help for information on how to do this). If you experience any other problems, please email me at lars.hederer@t-online.de with a detailed description and I will see if I can help you. Localization ------------ You can translate all programs from this package into your language by editing the appropriate .LOC file. Keep in mind that the LOC files of the three Windows programs (ERUNT, ERDNTWIN, NTREGOPT) should be edited using a Windows based editor (Notepad), and ERDNTDOS.LOC using an MS-DOS based editor (EDIT.COM). This is to ensure that any OEM characters are displayed correctly in the program. If your language is not yet present on my homepage and you want your localization to be available to the general public, you are welcome to send the four translated files to me. I will then make them available for download, with credits of course. I have included a German language pack. If you want to use the program in German, simply unzip LOC_GER.ZIP into your ERUNT folder. Version history --------------- v1.1j, 10/20/2005 - Fixed compatibility issues with 64-bit Windows (many thanks to Ian Smith and Hajo for all testing) - Enhanced error messages - AutoBackup now supports all date formats - ERUNT.INI: "TimeSeparator" fixed; "DefaultDestinationFolder" now supports all environment variables (previously only %SystemRoot% could be used) - ERDNT now displays the source Windows folder in addition to the backup's creation date v1.1i, 08/17/2005 - AutoBackup: Improved support for complex date formats - NTREGOPT: Optimization results are now calculated correctly when optimization failed on one or more hives v1.1h, 03/06/2005 - Updated homepage address - New ERUNT.INI option: AppendTimeToFolderEditField - Fixed a problem where the current user registry could not be identified on some systems - Changed behavior of AutoBackup's /days:n switch v1.1g, 11/02/2004 - ERUNT is now MUCH faster on Windows XP and Server 2003 - Added time string support on the command line - AutoBackup now by default skips creating a backup for the current day if one already exists v1.1f, 08/26/2004 - Added AUTOBACK.EXE command line tool for automated registry backup and deletion of old restore folders created prior to a specific number of days - Window position is now screen center instead of desktop center, fixing display problem when using multiple monitors (thanks John :) v1.1e, 07/31/2004 - Appearance of the date string can be configured via ERUNT.INI - NTREGOPT: Optimization results: use thousand separator v1.1d, 07/07/2004 - Optimized error handling - Combined DOS and Windows ERDNT into a single Win32 executable, fixing problems with the previous 16-bit exe stub on some systems and with BartPE - Added Windows Recovery Console support with ERDNT batch file - Default destination folder can now be configured via file ERUNT.INI, replacing #DestinationFolder command line option - Changed the default destination folder to be inside the Windows folder, for easy recovery console access - New folder named the current date is automatically appended to destination folder (can be disabled in ERUNT.INI) - Rewrote major parts of the documentation v1.1c, 05/10/2004 - Fixed problems with dynamic disks - Added browse function for destination folder, as well as the option to change the default name (use #DestinationFolder on the command line) - Re-added support for Windows NT 3.51 (got lost with v1.1) except browse function v1.1b, 04/23/2004 - ERUNT and NTREGOPT are now compatible with Windows Server 2003 and Windows XP Service Pack 2 - Fixed a problem where the registry hives could not be saved/restored/optimized on some systems - Changed naming convention for user subfolders in the ERDNT folder v1.1a, 10/03/2002 - Fixed a problem where the registry hives could not be saved/restored/optimized on some systems v1.1, 09/25/2002 - Fixed "Invalid pointer operation" message which occurred on some systems (many thanks to Russ Cordner for his assistance in isolating the problem) - Fixed "Error opening localization file" message when ERUNT.EXE was called from outside the ERUNT folder - Fixed some problems with UNC path names - Added command line support for ERDNT and NTREGOPT - NTREGOPT: show optimization results (initial and new registry size) v1.0, 11/24/2001 - Initial release Distribution ------------ The ERUNT package (including the programs ERUNT, AUTOBACK, ERDNT and NTREGOPT) is freeware. Please pass it to anyone who you think may find it useful. I explicitly allow this package to be included in any file archive, CD-ROM or other media collection as well as usage in your own programs provided that all files are kept and remain unchanged. A quick note via e-mail where my program has been included is appreciated. Donations --------- Though I chose to make my programs freeware so that no one is required to pay for using them, I accept and appreciate donations. So, if you find my programs helpful and want to support further development, simply visit my homepage and click one of the "PayPal" buttons, or donate directly to my e-mail address via PayPal. Thanks in advance! If you live in Germany and want to make a donation, you may also transfer money directly to my bank account. Contact me for more information. Disclaimer ---------- Use this software at your own risk. I do not take responsibility for anything that might happen to you or the PC upon use of my programs, including but not limited to: registry destruction, hard disk crash, heart attack... Comments and suggestions via e-mail, however, are always welcome!

nicéphore31 · Answer

si jai bien saisi,apres avoir installé errunt je fais le nettoyage sur ccleaner?

g3n-h@ckm@n · Answer

lol

nicéphore31 · Answer

hihihi je ne sais pas pourquoi vous riez mais en tk cest de louvrage enlever cette cochonnerie la :)

g3n-h@ckm@n · Answer

oui tu suis le tuto

nicéphore31 · Answer

je suis rendue a desactiver java mais si je vais sur des sites ou jai besoin de cela je fais quoi?

nicéphore31 · Answer

quand le nettoyage est terminé a 100% je ferme tout ou je vais dans un autre onglet sur ccleaner?

g3n-h@ckm@n · Answer

tu peux faire un nettoyage de registre avec ca fait pas de mal et ca mange pas de pain ^^

nicéphore31 · Answer

nettoyage avec ccleaner est mais mais parlez vous de java a nettoyer avec ccleaner ? si oui je fais quoi apres avoir été dans longlet registre a gauche ? je ne vois pas java et ya pas le mot nettoyage
p.s. coudonc me voyez vous chez moi, je suis en train de manger du macaroni avec 2 tranches de pain hahaha

nicéphore31 · Answer

ensuite je fais corriger les erreurs sélectionnées ?
lol oui mais ici il est tot en soirée il est 18h37 :P et vous probablement debut de nuit

g3n-h@ckm@n · Answer

oui :)

et il est 1h du mat' ^^

nicéphore31 · Answer

ajoutez moi sur skype ca va aller plus vite svp !

nicéphore31 · Answer

josyepunk@hotmail.com

g3n-h@ckm@n · Answer

non l'aide se fait uniquement sur le forum et tu devrais enlever ton mail d'ici, tu vas te faire spammer de tous les cotés
 
¤¤¤¤¤¤¤¤¤¤_Pre_Scan_Concept_¤¤¤¤¤¤¤¤¤¤
Windows 8 => meme flop que Vista X 10

nicéphore31 · Answer

daccord je ne savais pas....ensuite je clique sur oui???

g3n-h@ckm@n · Answer

à quelle question ?

nicéphore31 · Answer

voulez vous créer une sauvegarde des clés du registre qui vont etre supprimées

g3n-h@ckm@n · Answer

ah !! non ca sert à rien

nicéphore31 · Answer

ensuite je fais corriger toutes les erreurs quand jai dit non pour la sauvegarde?

nicéphore31 · Answer

merci jai fermé le ccleaner tout est ok pas derreurs....me reste til dautres étapes ? je commence a etre fatiguée jme leve tot demain ! :/

g3n-h@ckm@n · Answer

ben si t'as fait tout le tuto non :)

nicéphore31 · Answer

pour java il se passe quoi si je dois lutiliser sur des sites ? car fallait que je lefface ? je suis en train de telecharger comodo

nicéphore31 · Answer

quand tu parles de tuto cest toutes les etapes quon me disait de faire? adobe,ccleaner ?

g3n-h@ckm@n · Answer

normalement t'en as pas besoin de java

nicéphore31 · Answer

alors je dois le suprimer java dans ajout/supprimé dans les programmes?

nicéphore31 · Answer

je crois que jai tout fait chef, je vais redémarrer mon ordi :) un gros gros gros merci pour votre patience,vos conseils,votre temps merci encore ! en espérant que cela fonctionne comme du monde asteur

g3n-h@ckm@n · Answer

oui :)

si plus de soucis tu peux mettre en résolu:)

Optimizer pro - Page 4

Discussions similaires

Newsletters