Pc freeze apres ouverture session windows

Bonjour,
Depuis 2 jours mon PC freeze durant une session windows. J'ai fait 2 restaurations systemes. Apres chacune d'elles le PC a fonctionne normalement. Apres l'avoir éteint puis rallume, il freeze a nouveau. En mode sans echec il fonctionne. Mais lorsque je le redemarre normalement, il freeze apres que j'ai saisi mon mot de passe pour l'ouverture de session. Pour etre plus precis il a l'air de demarrer correctement les 30 premieres secondes avant de se bloquer.

J'ai effectue les tests preconises et vous trouverez les rapports ci-dessous:

rapport ZHP: https://www.cjoint.com/?0Hyp7iKFKPv
rapport mbam: https://www.cjoint.com/?0HyqaSkLFMi
rapport OTL: https://www.cjoint.com/?0Hyqb6HMBv0

Je vous remercie pour l'aide que vous pourrez m'apporter.

Bien a vous
Michael

65 réponses

Résumé de la discussion

Le souci porte sur un PC sous Windows 7 qui se bloque après quelques dizaines de secondes sur l’écran de connexion, en démarrage normal alors que le mode sans échec fonctionne. Des tests et rapports de diagnostic (ZHPDiag, MBAM, OTL) ont été fournis et des nettoyages effectués, montrant des éléments liés à Avast/AVG SafeGuard toolbar et à des entrées de registre suspectes. Pour l’instant, il est préconisé de vérifier les fichiers systèmes via sfc /scannow, d’effectuer un nouveau diagnostic ZHPDiag et d’examiner les rapports RogueKiller lorsque nécessaire. En dernier élément utile, le rapport ZHPFix signale des suppressions de clés et des restes de barres d’outils, ce qui peut influencer le démarrage normal et justifier une surveillance renforcée.

Bobot (l’IA à votre service)
  1. Contributeur sécurité
    Bonjour,

    Je t'en prie.
    Ta version d'AdwCleaner n'est pas à jour. Supprime-le de ton PC et retélécharge-le, puis tu recommenceras la procédure en suivant le tutoriel. :)

    Gabriel.
    0
    1. Contributeur sécurité
      Re,

      Ok, passe le en mode Nettoyer et poste moi le rapport.

      Gabriel.
      0
      1. Contributeur sécurité
        Re,

        D'accord, fais moi un nouveau rapport ZHPDiag.

        Gabriel.
        0
        1. Contributeur sécurité
          Re,

          Souhaits-tu conserver la barre d'outil Avast ?

          Gabriel.
          0
          1. Re,
            non je souhaiterais supprimer toutes ces barres d'outils.

            Merci
            Michael
            0
            1. Contributeur sécurité
              Re,

              Ok, fais ZHPFix comme ceci avec ces lignes.

              Gabriel.
              0
              1. Re,

                voici le rapport:

                Rapport de ZHPFix 2013.7.20.5 par Nicolas Coolman, Update du 20/07/2013
                Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-8-24-2013-6-50-53 PM.txt
                Run by urocha at 8/24/2013 6:50:45 PM
                High Elevated Privileges : OK
                Windows 7 Ultimate Edition, 32-bit Service Pack 1 (Build 7601)

                Recycle Files Deleted

                ========== Software ==========
                DELETED pdfforge Toolbar v6.2
                NOT FOUND Uninstall Process: c:\program files\avg safeguard toolbar\uninstall.exe

                ========== Memory Process ==========
                DELETED Memory Process: C:\Windows\Installer\{2511D82C-2688-41C2-ABF8-AF237795989B}\ARPPRODUCTICON.exe
                DELETED Memory Process: C:\Users\urocha\AppData\Local\Temp\Quarantine.exe

                ========== Registry Key ==========
                DELETED [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2511D82C-2688-41C2-ABF8-AF237795989B}]
                DELETED [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar]
                DELETED Key: \Software\Classes\Installer\Products\\C28D115288622C14BA8FFA32775989B9
                DELETED Key: \Software\Classes\Installer\Features\C28D115288622C14BA8FFA32775989B9
                NOT FOUND Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2511D82C-2688-41C2-ABF8-AF237795989B}
                DELETED Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9
                \53F55AF3F4049ED3FA6EA6F88E414E24
                \68E4BF4B11615E03C97732FD581AB607
                \8CE3DDAB2D152683FBCEB4866BCD2B0F
                \AF6CE16AFEA5C9A39B766468A8B35C21
                \FB1E44269B58F433A8C8E671E37CFDCF
                DELETED Key: CLSID BHO: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
                DELETED Key: CLSID: [HKLM\SOFTWARE\Classes\CLSID\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
                DELETED Key: Service: vToolbarUpdater15.3.0
                DELETED Key: Service: vToolbarUpdater15.4.0
                DELETED Key: HKCU\Software\AVG SafeGuard toolbar
                DELETED Key: HKCU\Software\Yahoo! Connector
                NOT FOUND Key: Service: vToolbarUpdater15.3.0
                NOT FOUND Key: Service: vToolbarUpdater15.4.0
                NOT FOUND Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48BF-AC2D-D17F00898D06}
                NOT FOUND Key: HKLM\SYSTEM\CurrentControlSet\Services\vToolbarUpdater15.3.0
                NOT FOUND Key: HKLM\SYSTEM\CurrentControlSet\Services\vToolbarUpdater15.4.0
                NOT FOUND Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar
                NOT FOUND Key: HKCU\Software\AVG SafeGuard toolbar
                DELETED Key: HKLM\Software\AVG SafeGuard toolbar
                DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95525BD9-6136-4A26-8263-9CEE295D442D}
                DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95525BD9-6136-4A26-8263-9CEE295D442D}
                DELETED Key: HKLM\Software\Classes\CLSID\{95525BD9-6136-4A26-8263-9CEE295D442D}
                DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
                DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
                NOT FOUND Key: HKLM\Software\Classes\CLSID\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
                NOT FOUND Key: HKCU\Software\Yahoo! Connector
                DELETED Key: Mozilla Plugin: @Skype Limited.com/Facebook Video Calling Plugin

                ========== Registry Value ==========
                DELETED {FCB7B2E0-0AEB-457B-AC8F-E89B15B25FAC}
                DELETED {8C7D35F6-6F67-4129-BC67-B292FCA393A4}
                DELETED Toolbar: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
                NOT FOUND [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
                DELETED {D898F996-33AA-4900-80F5-C42B85672DFC}

                ========== Browser Profiles ==========
                DELETED Mozilla Pref: user_pref("avg.install.newtab", true);

                ========== Repertory ==========
                No Empty CLSID Directories

                ========== File ==========
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\datamngr_del.reg
                DELETED File: C:\Windows\Installer\4ad8b59.msi
                DELETED File: C:\Windows\Installer\55b88.msi
                NOT FOUND Folder/File: c:\users\urocha\appdata\local\temp\jrt\datamngr_del.reg
                DELETED File: c:\windows\installer\{2511d82c-2688-41c2-abf8-af237795989b}\arpproducticon.exe
                NOT FOUND Folder/File: c:\windows\installer\4ad8b59.msi
                NOT FOUND Folder/File: c:\windows\installer\55b88.msi
                DELETED File: c:\program files\avast software\avast\aswwebrepie.dll
                NOT FOUND File: c:\program files\avast software\avast\aswwebrepie.dll
                NOT FOUND File: c:\program files\common files\avg secure search\vtoolbarupdater\15.3.0\toolbarupdater.exe
                NOT FOUND File: c:\program files\common files\avg secure search\vtoolbarupdater\15.4.0\toolbarupdater.exe
                DELETED File: c:\windows\tasks\avg-secure-search-update_june2013_tb_rmv.job
                NOT FOUND File: c:\users\urocha\appdata\local\avg safeguard toolbar\sitesafety\l_2013_08_24_04_47_31.db
                NOT FOUND File: c:\users\urocha\appdata\local\avg safeguard toolbar\dnt\dt.dat
                NOT FOUND Folder/File: c:\program files\avast software\avast\aswwebrepie.dll
                NOT FOUND Folder/File: c:\program files\common files\avg secure search\vtoolbarupdater\15.3.0\toolbarupdater.exe
                NOT FOUND Folder/File: c:\program files\common files\avg secure search\vtoolbarupdater\15.4.0\toolbarupdater.exe
                NOT FOUND File: c:\users\urocha\appdata\local\facebook\video\skype\npfacebookvideocalling.dll
                DELETED File: c:\users\urocha\desktop\continue image editor installation.lnk
                NOT FOUND File: c:\users\urocha\appdata\local\temp\icreinstall_imageeditorsetup(1).exe
                DELETED File: c:\windows\prefetch\ntosboot-b00dfaad.pf
                DELETED File: c:\windows\prefetch\aggluad_p_s-1-5-21-2187474104-2476906254-3309086671-1000.db
                DELETED File: c:\windows\prefetch\aggluad_s-1-5-21-2187474104-2476906254-3309086671-1000.db
                DELETED File: c:\windows\prefetch\flashplayerplugin_11_8_800_94-d0cd0c2f.pf
                DELETED File: c:\windows\prefetch\bubbles.scr-7b603539.pf
                DELETED File: c:\windows\prefetch\spotifywebhelper.exe-4e51ae0f.pf
                DELETED File: c:\windows\prefetch\mediacenter.exe-f0d8a874.pf
                DELETED File: c:\windows\prefetch\mpas-d_bd_1.155.2386.0.exe-a06dd3ab.pf
                DELETED File: c:\windows\prefetch\rapportmgmtservice.exe-ac9d7e97.pf
                DELETED File: c:\windows\prefetch\facebookupdate.exe-00d67463.pf
                DELETED File: c:\windows\prefetch\spotimote.exe-f8e7798e.pf
                DELETED File: c:\windows\prefetch\msi80f6.tmp-7d549660.pf
                DELETED File: c:\windows\prefetch\mpas-fe_bd.exe-bb62fd5e.pf
                DELETED File: c:\windows\prefetch\wotlauncher.exe-beb2a61b.pf
                DELETED File: c:\windows\prefetch\sdcleaner.exe-5b0a0089.pf
                DELETED File: c:\windows\prefetch\toolbarupdater.exe-df6e23c9.pf
                DELETED File: c:\windows\prefetch\sdupdsvc.exe-16ba2bd0.pf
                DELETED File: c:\windows\prefetch\sddelfile.exe-5e2dd218.pf
                DELETED File: c:\windows\prefetch\rimbblaunchagent.exe-92a0721f.pf
                DELETED File: c:\windows\prefetch\pocketcloudservice.exe-dbf67bb4.pf
                DELETED File: c:\windows\prefetch\wyseremoteaccess.exe-7504a95c.pf
                DELETED File: c:\windows\prefetch\hkcmd.exe-ae1dff3b.pf
                DELETED File: c:\windows\prefetch\mutesync.exe-ad270f88.pf
                DELETED File: c:\windows\prefetch\avast.setup-b1d66586.pf
                DELETED File: c:\users\urocha\appdata\local\spotify\storage\05\053f24364afe5c2a529891475eff4b91bb86ee40.file
                DELETED File: c:\users\urocha\appdata\local\spotify\storage\c9\c9f0146842b12c3f1e0c50dec7957bf5636a4cb3.file
                DELETED File: c:\users\urocha\appdata\local\spotify\storage\index.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\reghklm_software_classes.cfg
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\stats_clsid.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\settings_clsid.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\ifeo.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\elevationpolicy_clsid.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\runvalues.bat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\ffpluginreg.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\ffprefs.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\uninstall.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\chr_extensions.cfg
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\badfolders.cfg
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\misc.bat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\reghkcu_software_appdatalow.cfg
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\currentmd5.txt
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\wow6432node.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\bho_clsid.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\badfoldersstart.cfg
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\get.bat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\modules.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\jrt.bat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\clsid_clsid.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\typelib_clsid.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\tracing.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\bho_name.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\services.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\badvalues.cfg
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\ffxpi.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\appid_files.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\newmd5.txt
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\reghkcu_and_hklm_software.cfg
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\interface_clsid.dat
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\ffextensions.dat
                DELETED File: c:\users\urocha\downloads\spybotsd2.exe
                DELETED File: c:\users\urocha\appdata\local\temp\ichcop
                DELETED File: c:\users\urocha\appdata\local\temp\qtsingleapp-google-875a-1-lockfile
                DELETED File: c:\users\urocha\appdata\local\temp\scoped_dir4000_26787\cookies
                DELETED File: c:\users\urocha\appdata\local\temp\scoped_dir4000_26787\cookies-journal
                DELETED File: c:\users\urocha\appdata\local\temp\scoped_dir4000_26787\data_1
                DELETED File: c:\users\urocha\appdata\local\temp\scoped_dir4000_26787\data_3
                DELETED File: c:\users\urocha\appdata\local\temp\scoped_dir4000_26787\index
                DELETED File: c:\users\urocha\appdata\local\temp\scoped_dir4000_26787\data_0
                DELETED File: c:\users\urocha\appdata\local\temp\scoped_dir4000_26787\data_2
                DELETED File: c:\users\urocha\appdata\local\temp\~df710f501985bf9ea5.tmp
                DELETED File: c:\users\urocha\appdata\local\temp\preferences
                DELETED File: c:\users\urocha\appdata\local\temp\urocha.bmp
                DELETED File: c:\users\urocha\appdata\local\temp\jrt.txt
                DELETED File: c:\users\urocha\appdata\local\temp\jrt\temp\null.txt
                DELETED File*: c:\users\urocha\appdata\local\temp\quarantine.exe
                DELETED Window Temporary
                DELETED Flash Cookies

                ========== Restoration ==========
                Restore System Point not created

                ========== Summary ==========
                2 : Memory Process
                33 : Registry Key
                5 : Registry Value
                1 : Repertory
                97 : File
                2 : Software
                1 : Browser Profiles
                1 : Restoration

                End of clean in 42mn AMs

                ========== Report File ==========
                C:\ZHP\ZHPFix[R1].txt - 8/24/2013 6:50:53 PM [11479]
                0
                1. Contributeur sécurité
                  Re,

                  Ok. Comment se comporte le PC ?
                  Fais moi un nouveau ZHPDiag pour voir si tout est ok.
                  Il nous restera encore à finaliser.

                  Gabriel.
                  0
                  1. Re,
                    je suis en mode sans echec et n'ai pas redemarre le PC apres les dernieres actions.

                    Est-ce que je dois le redemarrer avant de faire le nouveau ZHPDiag ou n'est-ce pas necessaire?

                    Merci
                    Michael
                    0
                    1. Contributeur sécurité
                      Re,

                      Pourquoi en mode sans échec ?
                      Redémarre, c'est mieux.

                      Gabriel.
                      0
                      1. Re,
                        Je viens de redemarrer le PC. Il mouline sans arret alors qu'avant d'avoir ces problemes il y a 2 jours je pouvais commencer a l'utiliser relativement rapidement apres l'ouverture de la session.
                        Lorsque j'essaie de demarrer Chrome, ce dernier ne s'ouvre pas. Ensuite j'ai essaye d'ouvrir un fichier word mais rien ne se passe. A cote du pointeur de la souris il y a le cercle qui tourne sans arret montrant que le pc mouline sans parvenir a demarer l'action que je lui demande.

                        Comme plus rien n'est possible a ce stade, je reset le PC et demarre en mode sans echec. C'est pour les meme raisons que j'etais en mode sans echec durant toute la procedure que tu m'as fait suivre.

                        Que preconises-tu?

                        Merci
                        Michael
                        0
                        • 1
                        • 2
                        • 3
                        • 4