Pc freeze apres ouverture session windows

Bonjour,
Depuis 2 jours mon PC freeze durant une session windows. J'ai fait 2 restaurations systemes. Apres chacune d'elles le PC a fonctionne normalement. Apres l'avoir éteint puis rallume, il freeze a nouveau. En mode sans echec il fonctionne. Mais lorsque je le redemarre normalement, il freeze apres que j'ai saisi mon mot de passe pour l'ouverture de session. Pour etre plus precis il a l'air de demarrer correctement les 30 premieres secondes avant de se bloquer.

J'ai effectue les tests preconises et vous trouverez les rapports ci-dessous:

rapport ZHP: https://www.cjoint.com/?0Hyp7iKFKPv
rapport mbam: https://www.cjoint.com/?0HyqaSkLFMi
rapport OTL: https://www.cjoint.com/?0Hyqb6HMBv0

Je vous remercie pour l'aide que vous pourrez m'apporter.

Bien a vous
Michael

65 réponses

Résumé de la discussion

Le souci porte sur un PC sous Windows 7 qui se bloque après quelques dizaines de secondes sur l’écran de connexion, en démarrage normal alors que le mode sans échec fonctionne. Des tests et rapports de diagnostic (ZHPDiag, MBAM, OTL) ont été fournis et des nettoyages effectués, montrant des éléments liés à Avast/AVG SafeGuard toolbar et à des entrées de registre suspectes. Pour l’instant, il est préconisé de vérifier les fichiers systèmes via sfc /scannow, d’effectuer un nouveau diagnostic ZHPDiag et d’examiner les rapports RogueKiller lorsque nécessaire. En dernier élément utile, le rapport ZHPFix signale des suppressions de clés et des restes de barres d’outils, ce qui peut influencer le démarrage normal et justifier une surveillance renforcée.

Bobot (l’IA à votre service)
  1. Contributeur sécurité
    Bonjour,

    Je t'en prie.
    Ta version d'AdwCleaner n'est pas à jour. Supprime-le de ton PC et retélécharge-le, puis tu recommenceras la procédure en suivant le tutoriel. :)

    Gabriel.
    1. Contributeur sécurité
      Re,

      Ok, passe le en mode Nettoyer et poste moi le rapport.

      Gabriel.
      1. Contributeur sécurité
        Re,

        D'accord, fais moi un nouveau rapport ZHPDiag.

        Gabriel.
        1. Contributeur sécurité
          Re,

          Souhaits-tu conserver la barre d'outil Avast ?

          Gabriel.
          1. Re,
            non je souhaiterais supprimer toutes ces barres d'outils.

            Merci
            Michael
            1. Re,

              voici le rapport:

              Rapport de ZHPFix 2013.7.20.5 par Nicolas Coolman, Update du 20/07/2013
              Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-8-24-2013-6-50-53 PM.txt
              Run by urocha at 8/24/2013 6:50:45 PM
              High Elevated Privileges : OK
              Windows 7 Ultimate Edition, 32-bit Service Pack 1 (Build 7601)

              Recycle Files Deleted

              ========== Software ==========
              DELETED pdfforge Toolbar v6.2
              NOT FOUND Uninstall Process: c:\program files\avg safeguard toolbar\uninstall.exe

              ========== Memory Process ==========
              DELETED Memory Process: C:\Windows\Installer\{2511D82C-2688-41C2-ABF8-AF237795989B}\ARPPRODUCTICON.exe
              DELETED Memory Process: C:\Users\urocha\AppData\Local\Temp\Quarantine.exe

              ========== Registry Key ==========
              DELETED [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2511D82C-2688-41C2-ABF8-AF237795989B}]
              DELETED [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar]
              DELETED Key: \Software\Classes\Installer\Products\\C28D115288622C14BA8FFA32775989B9
              DELETED Key: \Software\Classes\Installer\Features\C28D115288622C14BA8FFA32775989B9
              NOT FOUND Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2511D82C-2688-41C2-ABF8-AF237795989B}
              DELETED Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9
              \53F55AF3F4049ED3FA6EA6F88E414E24
              \68E4BF4B11615E03C97732FD581AB607
              \8CE3DDAB2D152683FBCEB4866BCD2B0F
              \AF6CE16AFEA5C9A39B766468A8B35C21
              \FB1E44269B58F433A8C8E671E37CFDCF
              DELETED Key: CLSID BHO: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
              DELETED Key: CLSID: [HKLM\SOFTWARE\Classes\CLSID\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
              DELETED Key: Service: vToolbarUpdater15.3.0
              DELETED Key: Service: vToolbarUpdater15.4.0
              DELETED Key: HKCU\Software\AVG SafeGuard toolbar
              DELETED Key: HKCU\Software\Yahoo! Connector
              NOT FOUND Key: Service: vToolbarUpdater15.3.0
              NOT FOUND Key: Service: vToolbarUpdater15.4.0
              NOT FOUND Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48BF-AC2D-D17F00898D06}
              NOT FOUND Key: HKLM\SYSTEM\CurrentControlSet\Services\vToolbarUpdater15.3.0
              NOT FOUND Key: HKLM\SYSTEM\CurrentControlSet\Services\vToolbarUpdater15.4.0
              NOT FOUND Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar
              NOT FOUND Key: HKCU\Software\AVG SafeGuard toolbar
              DELETED Key: HKLM\Software\AVG SafeGuard toolbar
              DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95525BD9-6136-4A26-8263-9CEE295D442D}
              DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95525BD9-6136-4A26-8263-9CEE295D442D}
              DELETED Key: HKLM\Software\Classes\CLSID\{95525BD9-6136-4A26-8263-9CEE295D442D}
              DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
              DELETED Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
              NOT FOUND Key: HKLM\Software\Classes\CLSID\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
              NOT FOUND Key: HKCU\Software\Yahoo! Connector
              DELETED Key: Mozilla Plugin: @Skype Limited.com/Facebook Video Calling Plugin

              ========== Registry Value ==========
              DELETED {FCB7B2E0-0AEB-457B-AC8F-E89B15B25FAC}
              DELETED {8C7D35F6-6F67-4129-BC67-B292FCA393A4}
              DELETED Toolbar: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
              NOT FOUND [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}
              DELETED {D898F996-33AA-4900-80F5-C42B85672DFC}

              ========== Browser Profiles ==========
              DELETED Mozilla Pref: user_pref("avg.install.newtab", true);

              ========== Repertory ==========
              No Empty CLSID Directories

              ========== File ==========
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\datamngr_del.reg
              DELETED File: C:\Windows\Installer\4ad8b59.msi
              DELETED File: C:\Windows\Installer\55b88.msi
              NOT FOUND Folder/File: c:\users\urocha\appdata\local\temp\jrt\datamngr_del.reg
              DELETED File: c:\windows\installer\{2511d82c-2688-41c2-abf8-af237795989b}\arpproducticon.exe
              NOT FOUND Folder/File: c:\windows\installer\4ad8b59.msi
              NOT FOUND Folder/File: c:\windows\installer\55b88.msi
              DELETED File: c:\program files\avast software\avast\aswwebrepie.dll
              NOT FOUND File: c:\program files\avast software\avast\aswwebrepie.dll
              NOT FOUND File: c:\program files\common files\avg secure search\vtoolbarupdater\15.3.0\toolbarupdater.exe
              NOT FOUND File: c:\program files\common files\avg secure search\vtoolbarupdater\15.4.0\toolbarupdater.exe
              DELETED File: c:\windows\tasks\avg-secure-search-update_june2013_tb_rmv.job
              NOT FOUND File: c:\users\urocha\appdata\local\avg safeguard toolbar\sitesafety\l_2013_08_24_04_47_31.db
              NOT FOUND File: c:\users\urocha\appdata\local\avg safeguard toolbar\dnt\dt.dat
              NOT FOUND Folder/File: c:\program files\avast software\avast\aswwebrepie.dll
              NOT FOUND Folder/File: c:\program files\common files\avg secure search\vtoolbarupdater\15.3.0\toolbarupdater.exe
              NOT FOUND Folder/File: c:\program files\common files\avg secure search\vtoolbarupdater\15.4.0\toolbarupdater.exe
              NOT FOUND File: c:\users\urocha\appdata\local\facebook\video\skype\npfacebookvideocalling.dll
              DELETED File: c:\users\urocha\desktop\continue image editor installation.lnk
              NOT FOUND File: c:\users\urocha\appdata\local\temp\icreinstall_imageeditorsetup(1).exe
              DELETED File: c:\windows\prefetch\ntosboot-b00dfaad.pf
              DELETED File: c:\windows\prefetch\aggluad_p_s-1-5-21-2187474104-2476906254-3309086671-1000.db
              DELETED File: c:\windows\prefetch\aggluad_s-1-5-21-2187474104-2476906254-3309086671-1000.db
              DELETED File: c:\windows\prefetch\flashplayerplugin_11_8_800_94-d0cd0c2f.pf
              DELETED File: c:\windows\prefetch\bubbles.scr-7b603539.pf
              DELETED File: c:\windows\prefetch\spotifywebhelper.exe-4e51ae0f.pf
              DELETED File: c:\windows\prefetch\mediacenter.exe-f0d8a874.pf
              DELETED File: c:\windows\prefetch\mpas-d_bd_1.155.2386.0.exe-a06dd3ab.pf
              DELETED File: c:\windows\prefetch\rapportmgmtservice.exe-ac9d7e97.pf
              DELETED File: c:\windows\prefetch\facebookupdate.exe-00d67463.pf
              DELETED File: c:\windows\prefetch\spotimote.exe-f8e7798e.pf
              DELETED File: c:\windows\prefetch\msi80f6.tmp-7d549660.pf
              DELETED File: c:\windows\prefetch\mpas-fe_bd.exe-bb62fd5e.pf
              DELETED File: c:\windows\prefetch\wotlauncher.exe-beb2a61b.pf
              DELETED File: c:\windows\prefetch\sdcleaner.exe-5b0a0089.pf
              DELETED File: c:\windows\prefetch\toolbarupdater.exe-df6e23c9.pf
              DELETED File: c:\windows\prefetch\sdupdsvc.exe-16ba2bd0.pf
              DELETED File: c:\windows\prefetch\sddelfile.exe-5e2dd218.pf
              DELETED File: c:\windows\prefetch\rimbblaunchagent.exe-92a0721f.pf
              DELETED File: c:\windows\prefetch\pocketcloudservice.exe-dbf67bb4.pf
              DELETED File: c:\windows\prefetch\wyseremoteaccess.exe-7504a95c.pf
              DELETED File: c:\windows\prefetch\hkcmd.exe-ae1dff3b.pf
              DELETED File: c:\windows\prefetch\mutesync.exe-ad270f88.pf
              DELETED File: c:\windows\prefetch\avast.setup-b1d66586.pf
              DELETED File: c:\users\urocha\appdata\local\spotify\storage\05\053f24364afe5c2a529891475eff4b91bb86ee40.file
              DELETED File: c:\users\urocha\appdata\local\spotify\storage\c9\c9f0146842b12c3f1e0c50dec7957bf5636a4cb3.file
              DELETED File: c:\users\urocha\appdata\local\spotify\storage\index.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\reghklm_software_classes.cfg
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\stats_clsid.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\settings_clsid.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\ifeo.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\elevationpolicy_clsid.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\runvalues.bat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\ffpluginreg.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\ffprefs.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\uninstall.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\chr_extensions.cfg
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\badfolders.cfg
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\misc.bat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\reghkcu_software_appdatalow.cfg
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\currentmd5.txt
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\wow6432node.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\bho_clsid.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\badfoldersstart.cfg
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\get.bat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\modules.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\jrt.bat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\clsid_clsid.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\typelib_clsid.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\tracing.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\bho_name.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\services.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\badvalues.cfg
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\ffxpi.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\appid_files.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\newmd5.txt
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\reghkcu_and_hklm_software.cfg
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\interface_clsid.dat
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\ffextensions.dat
              DELETED File: c:\users\urocha\downloads\spybotsd2.exe
              DELETED File: c:\users\urocha\appdata\local\temp\ichcop
              DELETED File: c:\users\urocha\appdata\local\temp\qtsingleapp-google-875a-1-lockfile
              DELETED File: c:\users\urocha\appdata\local\temp\scoped_dir4000_26787\cookies
              DELETED File: c:\users\urocha\appdata\local\temp\scoped_dir4000_26787\cookies-journal
              DELETED File: c:\users\urocha\appdata\local\temp\scoped_dir4000_26787\data_1
              DELETED File: c:\users\urocha\appdata\local\temp\scoped_dir4000_26787\data_3
              DELETED File: c:\users\urocha\appdata\local\temp\scoped_dir4000_26787\index
              DELETED File: c:\users\urocha\appdata\local\temp\scoped_dir4000_26787\data_0
              DELETED File: c:\users\urocha\appdata\local\temp\scoped_dir4000_26787\data_2
              DELETED File: c:\users\urocha\appdata\local\temp\~df710f501985bf9ea5.tmp
              DELETED File: c:\users\urocha\appdata\local\temp\preferences
              DELETED File: c:\users\urocha\appdata\local\temp\urocha.bmp
              DELETED File: c:\users\urocha\appdata\local\temp\jrt.txt
              DELETED File: c:\users\urocha\appdata\local\temp\jrt\temp\null.txt
              DELETED File*: c:\users\urocha\appdata\local\temp\quarantine.exe
              DELETED Window Temporary
              DELETED Flash Cookies

              ========== Restoration ==========
              Restore System Point not created

              ========== Summary ==========
              2 : Memory Process
              33 : Registry Key
              5 : Registry Value
              1 : Repertory
              97 : File
              2 : Software
              1 : Browser Profiles
              1 : Restoration

              End of clean in 42mn AMs

              ========== Report File ==========
              C:\ZHP\ZHPFix[R1].txt - 8/24/2013 6:50:53 PM [11479]
              1. Contributeur sécurité
                Re,

                Ok. Comment se comporte le PC ?
                Fais moi un nouveau ZHPDiag pour voir si tout est ok.
                Il nous restera encore à finaliser.

                Gabriel.
                1. Re,
                  je suis en mode sans echec et n'ai pas redemarre le PC apres les dernieres actions.

                  Est-ce que je dois le redemarrer avant de faire le nouveau ZHPDiag ou n'est-ce pas necessaire?

                  Merci
                  Michael
                  1. Contributeur sécurité
                    Re,

                    Pourquoi en mode sans échec ?
                    Redémarre, c'est mieux.

                    Gabriel.
                    1. Re,
                      Je viens de redemarrer le PC. Il mouline sans arret alors qu'avant d'avoir ces problemes il y a 2 jours je pouvais commencer a l'utiliser relativement rapidement apres l'ouverture de la session.
                      Lorsque j'essaie de demarrer Chrome, ce dernier ne s'ouvre pas. Ensuite j'ai essaye d'ouvrir un fichier word mais rien ne se passe. A cote du pointeur de la souris il y a le cercle qui tourne sans arret montrant que le pc mouline sans parvenir a demarer l'action que je lui demande.

                      Comme plus rien n'est possible a ce stade, je reset le PC et demarre en mode sans echec. C'est pour les meme raisons que j'etais en mode sans echec durant toute la procedure que tu m'as fait suivre.

                      Que preconises-tu?

                      Merci
                      Michael
                      • 1
                      • 2
                      • 3
                      • 4