Virus win kavos, cheval de troie

bonjour, merci pour vos reponse, j'ai telechargé RSIT, comme vous me lavez conseillé, j'ai un compte rendu "log bloc note qui s'affiche, mais je ne sais pas quoi en faire?????

voici le rapport
merci

j'ai fait les opration jusqu'a faire glisser cfscrip sur combofix, mais la fenetre bleu ne s'affiche pas???

lorsque je fusionne cfsript et combofix, je n'ai pas de fenetre bleu qui me propose de continuer ou abandonner.

combofix me dit qu'il y a frein a cause d'avast et que c'est a mes risque est peril de continuer.
Est ce que je dois supprimer avast????

ok j'essaie

je pense que c'est bon, j'ai redemarrer l'ordi et plus de trace du virus.
Est ce que je supprime tous les logiciel que j'ai installer??? combofix, cf scrip ou je dois les laisser???
merci pour votre aide.

voici le rapport:


ComboFix 09-02-21.01 - Sandra 2009-02-22 14:29:27.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.1.1036.18.2009.1538 [GMT 1:00]
Lancé depuis: c:\documents and settings\Sandra\Bureau\ComboFix.exe
AV: avast! antivirus 4.8.1296 [VPS 090221-0] *On-access scanning disabled* (Updated)
.

((((((((((((((((((((((((((((( Fichiers créés du 2009-01-22 au 2009-02-22 ))))))))))))))))))))))))))))))))))))
.

2009-02-22 13:19 . 2009-02-22 13:19 <REP> d-------- C:\rsit
2009-02-22 13:19 . 2009-02-22 13:34 <REP> d-------- c:\program files\trend micro
2009-02-04 18:33 . 2009-02-04 18:33 8,192 --ahs---- c:\windows\Thumbs.db
2009-02-01 21:23 . 2007-08-21 15:21 794,624 --a------ c:\windows\system32\spr32d35.dll
2009-02-01 13:31 . 2009-02-01 13:32 <REP> d-------- c:\documents and settings\Sandra\Application Data\dvdcss
2009-01-25 18:51 . 2009-01-28 11:39 <REP> d-------- c:\program files\IKEA HomePlanner
2009-01-25 18:50 . 2009-01-25 18:50 <REP> d-------- c:\program files\Fichiers communs\Wise Installation Wizard

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-22 10:54 --------- d-----w c:\program files\EasyGuide PC Portal
2009-02-06 22:13 --------- d-----w c:\program files\eMule
2009-02-04 17:33 --------- d-----w c:\program files\Windows Media Connect 2
2009-02-04 17:33 --------- d-----w c:\program files\DivX
2009-02-01 12:25 --------- d-----w c:\program files\PhotoFiltre
2009-01-18 13:27 --------- d-----w c:\documents and settings\Sandra\Application Data\Destinator
2009-01-18 13:20 --------- d-----w c:\program files\Microsoft ActiveSync
2008-12-12 17:02 3,088,896 ----a-w c:\windows\system32\dllcache\mshtml.dll
2008-12-11 10:57 333,952 ----a-w c:\windows\system32\dllcache\srv.sys
2008-11-24 21:39 410,976 ----a-w c:\windows\system32\deploytk.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-13 1695232]
"H/PC Connection Agent"="c:\program files\Microsoft ActiveSync\wcescomm.exe" [2006-06-26 1211176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-07-17 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-07-17 178712]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-07-17 150040]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-10-23 815104]
"HotkeyApp"="c:\program files\Launch Manager\HotkeyApp.exe" [2007-07-26 192512]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-24 136600]
"EPSON Stylus DX4200 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE" [2005-03-08 98304]
"ITSecMng"="c:\program files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe" [2007-09-28 75136]
"OM_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master\FirstStart.exe" [2005-11-29 40960]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-11-04 413696]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 81000]
"RealTray"="c:\program files\Real\RealPlayer\RealPlay.exe" [2008-11-27 26112]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 c:\windows\system32\bthprops.cpl]
"RTHDCPL"="RTHDCPL.EXE" [2008-03-26 c:\windows\RTHDCPL.EXE]
"SoundMan"="SOUNDMAN.EXE" [2006-07-21 c:\windows\SOUNDMAN.EXE]
"AlcWzrd"="ALCWZRD.EXE" [2006-05-04 c:\windows\ALCWZRD.EXE]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2008-03-14 2938184]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.dvacm"= dvacm.acm
"VIDC.DVSD"= miroDV2avi.DLL
"VIDC.PIM1"= pclepim1.dll
"VIDC.MJPG"= pvmjpg21.dll

[HKLM\~\startupfolder\C:^Documents and Settings^Sandra^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 3.0.lnk]
path=c:\documents and settings\Sandra\Menu Démarrer\Programmes\Démarrage\OpenOffice.org 3.0.lnk
backup=c:\windows\pss\OpenOffice.org 3.0.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2008-11-20 13:20 290088 c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
--a------ 2008-04-29 11:36 2221352 c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2008-03-25 14:33 570664 c:\program files\Fichiers communs\Nero\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2008-11-04 10:30 413696 c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
--a------ 2008-11-27 17:00 26112 c:\program files\Real\RealPlayer\realplay.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-01-16 111184]
R1 Hotkey;Hotkey;c:\windows\system32\drivers\HOTKEY.sys [2008-11-24 9867]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-01-16 20560]
R3 JMCR;JMCR;c:\windows\system32\drivers\jmcr.sys [2008-11-24 84240]
R3 WisLMSvc;WisLMSvc;c:\program files\Launch Manager\WisLMSvc.exe [2008-11-24 118784]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2e09ac39-c470-11dd-a503-000df05717c9}]
\Shell\Auto\command - Start.exe
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Start.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{651a5ec1-fe5c-11dd-a586-000df05717c9}]
\Shell\AutoRun\command - E:\EmDesk.exe
\Shell\EmDesk\command - E:\EmDesk.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6d52468c-fe76-11dd-a587-000df05717c9}]
\Shell\AutoRun\command - E:\cv22.cmd
\Shell\open\Command - E:\cv22.cmd
.
Contenu du dossier 'Tâches planifiées'

2009-02-02 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.yahoo.fr/
uInternet Settings,ProxyOverride = *.local
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} - hxxp://photoservice.fujicolor.de/ips-opdata/objects/jordan-canvasx.cab
FF - ProfilePath - c:\documents and settings\Sandra\Application Data\Mozilla\Firefox\Profiles\otzvd10i.default\
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-22 14:30:04
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
Heure de fin: 2009-02-22 14:30:50
ComboFix-quarantined-files.txt 2009-02-22 13:30:48
ComboFix2.txt 2009-02-22 13:26:56

Avant-CF: 163 486 375 936 octets libres
Après-CF: 163,477,000,192 octets libres

131 --- E O F --- 2009-02-11 17:58:38

et la je suis en train de telecharger https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

bjr . je suis nvellement inscris parce que j'ai remarqué que ceux qui vous soumettent leur probleme trouve l presque tjrs satisfaction. excusez moi de vous envoyer ceci sans vous avoir consulté d'avance. j'ai suivi la meme procédure indiqué à sandra mais la notification de contrefacon n'a tjrs pas disparu( mon system xp est original par ailleurs). j'ai besoin de ton aide.je peux recommencer tout le processus si vous le trouvez inadapté a mon probleme. voici le rapport que j'ai obtenu apres avoir redemarré mon pc. merci d'avance

ComboFix 09-03-14.01 - Administrateur 2009-03-15 18:15:11.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.503.203 [GMT 1:00]
Lancé depuis: c:\documents and settings\Administrateur\Bureau\ComboFix.exe
Commutateurs utilisés :: c:\documents and settings\Administrateur\Bureau\CFscript.txt
AV: ESET NOD32 Antivirus 3.0 *On-access scanning enabled* (Outdated)
* Un nouveau point de restauration a été créé

FILE ::
c:\windows\system32\olhrwef.exe
E:\cv22.cmd
E:\EmDesk.exe
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\(Read Me)Pendekar Blank.txt
C:\pook.com
C:\uxkl0apt.bat
c:\windows\system32\dllchache
c:\windows\system32\dllchache\msvbvm60.dll
c:\windows\system32\dllchache\Zero.txt
c:\windows\system32\nmdfgds0.dll
c:\windows\system32\nmdfgds1.dll

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-02-15 au 2009-03-15 ))))))))))))))))))))))))))))))))))))
.

2009-03-15 13:16 . 2009-03-15 13:17 <REP> d-------- C:\rsit
2009-03-15 13:16 . 2009-03-15 17:22 <REP> d-------- c:\program files\trend micro
2009-03-15 13:15 . 2009-03-15 13:15 <REP> d-------- c:\documents and settings\Administrateur\Application Data\Simply Super Software
2009-03-15 13:15 . 2006-05-25 14:52 162,304 --a------ c:\windows\system32\ztvunrar36.dll
2009-03-15 10:47 . 2009-03-15 11:22 52,355,448 --a------ c:\program files\AntiMalwareSetup.exe
2009-03-14 22:25 . 2009-03-15 08:40 <REP> d-------- c:\documents and settings\Administrateur\Application Data\Lavasoft
2009-03-14 22:08 . 2009-03-14 22:23 2,855,080 --a------ c:\program files\aawsepersonal.exe
2009-03-14 22:03 . 2009-03-14 22:06 <REP> d-------- C:\bd0b24a1c3ea46eeaeccbd50cc20
2009-03-14 21:41 . 2009-03-14 21:57 11,295,216 --a------ c:\program files\desktop-sidebar_desktop_sidebar_1.05_build_116_francais_12595.exe
2009-03-04 08:51 . 2009-03-04 08:51 <REP> d-------- c:\program files\Alwil Software
2009-02-27 17:27 . 2009-02-27 17:27 <REP> d--hs---- C:\found.000
2009-02-26 17:53 . 2002-03-10 18:32 528,039,936 --a------ c:\windows\MEMORY.DMP
2009-02-21 02:52 . 2009-02-21 02:52 <REP> d-------- c:\program files\Microsoft Office Outlook Connector
2009-02-21 02:00 . 2009-02-21 02:00 <REP> d-------- c:\documents and settings\LocalService\Bureau
2009-02-20 19:51 . 2009-02-20 19:51 106,970 -r-hs---- C:\w2.com
2009-02-17 22:24 . 2009-02-17 22:24 <REP> d-------- c:\documents and settings\Administrateur\Application Data\TuneUp Software
2009-02-17 22:24 . 2009-02-17 22:24 603,904 --a------ c:\windows\system32\TUProgSt.exe
2009-02-17 22:24 . 2009-02-17 22:24 362,240 --a------ c:\windows\system32\TuneUpDefragService.exe
2009-02-17 22:24 . 2008-11-12 16:44 27,904 --a------ c:\windows\system32\uxtuneup.dll
2009-02-17 22:23 . 2009-02-17 22:23 <REP> d-------- c:\documents and settings\All Users\Application Data\TuneUp Software
2009-02-17 22:22 . 2009-02-17 22:23 <REP> d-------- c:\program files\TuneUp Utilities 2009
2009-02-17 22:21 . 2009-02-17 22:21 <REP> d--hs---- c:\documents and settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
2009-02-16 23:28 . 2009-02-16 23:27 106,803 -r-hs---- C:\qphdin.com

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-15 17:08 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2009-03-15 16:31 110 ----a-w C:\autorun.inf.vir
2009-03-14 22:38 --------- d-----w c:\documents and settings\Administrateur\Application Data\uTorrent
2009-03-14 20:31 --------- d-----w c:\program files\Wallpaper
2009-03-14 02:47 --------- d-----w c:\program files\Fichiers communs\Adobe
2009-03-09 11:39 --------- d-----w c:\program files\EoRezo
2009-02-28 16:09 --------- d-----w c:\program files\Luxor 3
2009-02-27 22:35 --------- d-----w c:\program files\Microsoft Silverlight
2009-02-21 01:52 --------- d-----w c:\program files\Microsoft
2009-02-21 01:51 --------- d-----w c:\program files\Windows Live
2009-02-14 19:17 107,898 --sh--r C:\ur0.com
2009-02-11 20:33 108,067 --sh--r C:\opgde.exe
2009-02-11 06:06 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
2009-02-06 18:39 308,600 ----a-w c:\windows\WLXPGSS.SCR
2009-02-06 18:07 --------- d-----w c:\program files\Mc Afee fichiers
2009-01-31 15:05 --------- d-----w c:\program files\Microsoft SQL Server Compact Edition
2009-01-31 14:35 --------- d-----w c:\program files\Windows Live SkyDrive
2009-01-31 13:01 --------- d-----w c:\program files\Fichiers communs\Windows Live
2009-01-30 18:56 109,127 --sh--r C:\hl80c6b1.com
2009-01-27 22:19 --------- d-----w c:\documents and settings\All Users\Application Data\Yahoo! Companion
2009-01-27 19:59 --------- d-----w c:\program files\Yahoo!
2009-01-27 19:56 --------- d--h--r c:\documents and settings\All Users\Application Data\yahoo!
2009-01-25 16:19 --------- d-----w c:\documents and settings\Administrateur\Application Data\DivX
2009-01-25 13:48 --------- d-----w c:\program files\Fichiers communs\snpstd
2009-01-24 23:07 --------- d-----w c:\program files\Fichiers communs\xing shared
2009-01-24 23:07 --------- d-----w c:\program files\Fichiers communs\Real
2009-01-23 18:12 --------- d-----w c:\documents and settings\Administrateur\Application Data\Yahoo! Messenger
2009-01-23 16:49 --------- d-----w c:\program files\Google
2009-01-17 11:16 --------- d-----w c:\program files\MSECache
2009-01-17 11:12 --------- d-----w c:\program files\Real
2009-01-17 11:12 --------- d-----w c:\program files\Quintessential Player
2009-01-13 18:49 29,017,528 ----a-w c:\program files\FileFormatConverters.exe
2005-06-23 20:04 19,560 ----a-w c:\documents and settings\Administrateur\Application Data\GDIPFONTCACHEV1.DAT
2004-07-01 18:06 19,560 ----a-w c:\documents and settings\FORM3\Application Data\GDIPFONTCACHEV1.DAT
2004-06-12 22:45 245 ----a-w c:\program files\mafosav.INI
2004-06-12 20:23 1,208,826 ----a-w c:\program files\Info MF.exe
2004-06-06 23:37 13,762,037 ----a-w c:\program files\Mario Forever.exe
2004-05-20 13:02 40,792 ----a-w c:\program files\ktkm4.dll
2004-05-16 22:00 2,645,872 ----a-w c:\program files\ktkm39.dll
2004-01-01 22:12 13,506 ----a-w c:\program files\icoinst.bmp
2004-01-01 21:57 132,342 ----a-w c:\program files\leftinst.bmp
2003-10-26 18:58 524,537 ----a-w c:\program files\ktkm18.dll
2003-10-03 00:04 307,617 ----a-w c:\program files\ktkm15.dll
2002-09-15 13:59 47,104 ----a-w c:\program files\rubberovine.dll
2002-03-10 18:48 9,216 --sha-w c:\program files\Thumbs.db
2002-03-10 16:37 117 ----a-w c:\program files\forevermopt.INI
2002-03-10 16:34 75,699 ----a-w c:\program files\UnMario.exe
2002-03-03 13:34 538,410 ----a-w c:\program files\ktkm20.dll
2002-02-25 18:45 66,908 ----a-w c:\program files\ktkm17.dll
2002-02-25 18:44 209,936 ----a-w c:\program files\ktkm14.dll
2002-02-25 18:43 99,867 ----a-w c:\program files\ktkm13.dll
2002-02-25 18:42 62,631 ----a-w c:\program files\ktkm11.dll
2002-02-25 18:42 116,841 ----a-w c:\program files\ktkm26.dll
2002-02-25 18:38 81,427 ----a-w c:\program files\ktkm31.dll
2002-02-25 18:37 326,441 ----a-w c:\program files\ktkm32.dll
2002-02-25 18:35 92,400 ----a-w c:\program files\ktkm7.dll
2002-02-25 18:33 268,621 ----a-w c:\program files\ktkm33.dll
2002-02-25 18:31 197,408 ----a-w c:\program files\ktkm29.dll
2002-02-25 18:02 70,888 ----a-w c:\program files\ktkm19.dll
2002-02-25 17:57 58,192 ----a-w c:\program files\ktkm6.dll
2002-02-25 17:55 96,166 ----a-w c:\program files\ktkm1.dll
2002-02-25 17:49 55,186 ----a-w c:\program files\ktkm5.dll
2002-02-25 17:44 22,657 ----a-w c:\program files\ktkm3.dll
2002-02-25 17:37 20,926 ----a-w c:\program files\ktkm36.dll
2002-02-25 17:36 58,015 ----a-w c:\program files\ktkm10.dll
2002-02-25 17:32 20,974 ----a-w c:\program files\ktkm2.dll
2002-02-25 17:32 169,789 ----a-w c:\program files\ktkm38.dll
2002-02-25 17:31 128,042 ----a-w c:\program files\ktkm30.dll
2001-11-27 13:47 73,728 ----a-w c:\program files\CCTrans.dll
2001-11-27 13:46 285,696 ----a-w c:\program files\cncs232.dll
2000-11-05 16:56 81,920 ----a-w c:\program files\STrans.dll
2000-06-20 22:04 113,152 ----a-w c:\program files\SFTrans.dll
2000-02-28 16:26 92,660 ----a-w c:\program files\bass.dll
1999-03-25 09:55 56,992 ----a-w c:\program files\ktkm24.dll
1998-08-11 14:08 64,070 ----a-w c:\program files\ktkm21.dll
1998-07-01 10:29 30,166 ----a-w c:\program files\ktkm9.dll
1998-06-29 03:16 10,240 ----a-w c:\program files\ktkm34.dll
1998-04-22 23:27 23,364 ----a-w c:\program files\ktkm8.dll
1997-10-09 18:27 98,442 ----a-w c:\program files\ktkm35.dll
1997-05-09 13:14 370,880 ----a-w c:\program files\ktkm22.dll
1997-03-18 08:13 803,601 ----a-w c:\program files\ktkm16.dll
1997-01-18 13:45 524,164 ----a-w c:\program files\ktkm12.dll
1996-04-02 13:02 65,092 ----a-w c:\program files\ktkm27.dll
1996-04-02 13:02 49,094 ----a-w c:\program files\ktkm25.dll
1996-04-02 13:01 126,720 ----a-w c:\program files\ktkm23.dll
1994-10-06 10:14 82,542 ----a-w c:\program files\ktkm37.dll
1994-04-01 21:26 100,786 ----a-w c:\program files\ktkm28.dll
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2009-01-08 4363504]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-19 15360]
"Wallpaper"="c:\program files\Wallpaper\Wallpaper.exe" [2007-08-21 233472]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoftwareHelper"="c:\documents and settings\Administrateur\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe" [2008-12-09 368224]
"IgfxTray"="c:\windows\System32\igfxtray.exe" [2002-05-14 155648]
"HotKeysCmds"="c:\windows\System32\hkcmd.exe" [2002-05-14 114688]
"snpstd"="c:\windows\vsnpstd.exe" [2004-06-10 286720]
"Smapp"="c:\program files\Analog Devices\SoundMAX\Smtray.exe" [2002-06-26 90112]
"DrvLsnr"="c:\program files\Analog Devices\SoundMAX\DrvLsnr.exe" [2002-04-20 69632]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-01-25 185872]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2004-08-19 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.ffds"= c:\progra~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

[HKLM\~\startupfolder\C:^Documents and Settings^Administrateur^Menu Démarrer^Programmes^Démarrage^Outil de notification Live Search.lnk]
path=c:\documents and settings\Administrateur\Menu Démarrer\Programmes\Démarrage\Outil de notification Live Search.lnk
backup=c:\windows\pss\Outil de notification Live Search.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk
backup=c:\windows\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CPQEASYACC]
--a------ 2001-12-14 15:01 32768 c:\program files\COMPAQ\Easy Access Button Support\STARTEAK.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 2004-08-19 16:09 15360 c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EoEngine]
--a------ 2009-02-23 14:19 472872 c:\program files\EoRezo\EoEngine.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
--a------ 2002-05-14 14:20 114688 c:\windows\system32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
--a------ 2005-02-16 22:11 49152 c:\program files\HP\HP Software Update\hpwuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPUsageTracking]
--a------ 2006-06-09 10:23 36864 c:\program files\HP\HP UT\bin\hppusg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
--a------ 2002-05-14 14:29 155648 c:\windows\system32\igfxtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
--a------ 2009-02-06 18:51 3885408 c:\progra~1\WINDOW~4\MESSEN~1\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
--a------ 2001-07-09 11:50 155648 c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snpstd]
--a------ 2004-06-10 13:48 286720 c:\windows\vsnpstd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoftwareHelper]
--a------ 2008-12-09 10:13 368224 c:\documents and settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
--a------ 2009-01-25 00:06 185872 c:\program files\Fichiers communs\Real\Update_OB\realsched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ToolBoxFX]
--a------ 2006-06-15 07:43 49152 c:\program files\HP\ToolBoxFX\bin\HPTLBXFX.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WCOLOREAL]
--a------ 2002-02-20 12:40 143360 c:\program files\COMPAQ\Coloreal\COLOREAL.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]
--a------ 2009-01-08 19:38 4363504 c:\progra~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]
--a------ 2000-11-22 04:40 462848 c:\windows\sm56hlpr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"xmlprov"=3 (0x3)
"WZCSVC"=2 (0x2)
"wuauserv"=2 (0x2)
"wscsvc"=2 (0x2)
"WmiApSrv"=3 (0x3)
"Wmi"=3 (0x3)
"WmdmPmSN"=3 (0x3)
"winmgmt"=2 (0x2)
"WebClient"=2 (0x2)
"W32Time"=2 (0x2)
"VSS"=3 (0x3)
"UPS"=3 (0x3)
"upnphost"=3 (0x3)
"TrkWks"=2 (0x2)
"TlntSvr"=3 (0x3)
"Themes"=2 (0x2)
"TermService"=3 (0x3)
"TapiSrv"=3 (0x3)
"SysmonLog"=3 (0x3)
"SwPrv"=3 (0x3)
"stisvc"=2 (0x2)
"SSDPSRV"=3 (0x3)
"srservice"=2 (0x2)
"Spooler"=2 (0x2)
"ShellHWDetection"=2 (0x2)
"SharedAccess"=2 (0x2)
"SENS"=2 (0x2)
"seclogon"=2 (0x2)
"Schedule"=2 (0x2)
"SCardSvr"=3 (0x3)
"SCardDrv"=3 (0x3)
"SamSs"=2 (0x2)
"RSVP"=3 (0x3)
"RemoteRegistry"=2 (0x2)
"RDSessMgr"=3 (0x3)
"RasMan"=3 (0x3)
"RasAuto"=3 (0x3)
"ProtectedStorage"=2 (0x2)
"PolicyAgent"=2 (0x2)
"PlugPlay"=2 (0x2)
"ose"=3 (0x3)
"odserv"=3 (0x3)
"NtmsSvc"=3 (0x3)
"NtLmSsp"=3 (0x3)
"NMSSvc"=3 (0x3)
"Nla"=3 (0x3)
"Netman"=3 (0x3)
"Netlogon"=3 (0x3)
"MSIServer"=3 (0x3)
"MSDTC"=3 (0x3)
"mnmsrvc"=3 (0x3)
"MDM"=2 (0x2)
"LogWatch"=2 (0x2)
"LmHosts"=2 (0x2)
"lanmanworkstation"=2 (0x2)
"lanmanserver"=2 (0x2)
"ImapiService"=3 (0x3)
"HTTPFilter"=3 (0x3)
"helpsvc"=2 (0x2)
"gusvc"=3 (0x3)
"FastUserSwitchingCompatibility"=3 (0x3)
"EventSystem"=3 (0x3)
"Eventlog"=2 (0x2)
"ERSvc"=2 (0x2)
"ekrn"=2 (0x2)
"EhttpSrv"=3 (0x3)
"Dnscache"=2 (0x2)
"dmserver"=2 (0x2)
"dmadmin"=3 (0x3)
"Dhcp"=2 (0x2)
"CryptSvc"=2 (0x2)
"COMSysApp"=3 (0x3)
"cisvc"=3 (0x3)
"CA_LIC_SRVR"=3 (0x3)
"CA_LIC_CLNT"=2 (0x2)
"Browser"=2 (0x2)
"BITS"=2 (0x2)
"AudioSrv"=2 (0x2)
"aspnet_state"=3 (0x3)
"AppMgmt"=3 (0x3)
"ALG"=3 (0x3)
"McTaskManager"=2 (0x2)
"McShield"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015
"1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016
"500:UDP"= 500:UDP:@xpsp2res.dll,-22017

R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [2009-02-17 603904]
S3 AVPsys;AVPsys;c:\windows\system32\drivers\cdaudio.sys [2001-08-17 18688]
S4 CA_LIC_CLNT;Client de licence CA;c:\program files\CA\SharedComponents\CA_LIC\lic98rmt.exe [2002-09-19 77824]
S4 CA_LIC_SRVR;Serveur de licence CA;c:\program files\CA\SharedComponents\CA_LIC\lic98rmtd.exe [2002-09-19 77824]
S4 LogWatch;Event Log Watch;c:\program files\CA\SharedComponents\CA_LIC\LogWatNT.exe [2002-09-19 53248]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\C]
\Shell\AutoRun\command - C:\2.bat
\Shell\open\Command - C:\2.bat

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0d9a8038-ab15-11dd-b09e-000bcd3c4aca}]
\Shell\AutoRun\command - F:\xih9.cmd
\Shell\explore\Command - F:\xih9.cmd
\Shell\open\Command - F:\xih9.cmd

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0d9a8039-ab15-11dd-b09e-000bcd3c4aca}]
\Shell\AutoRun\command - G:\nq0cq.cmd
\Shell\explore\Command - G:\nq0cq.cmd
\Shell\open\Command - G:\nq0cq.cmd

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{22815000-a00a-11dd-b08d-000bcd3c4aca}]
\Shell\AutoRun\command - F:\xih9.cmd
\Shell\explore\Command - F:\xih9.cmd
\Shell\open\Command - F:\xih9.cmd

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{23507a65-c51a-11dd-b0dd-000bcd3c4aca}]
\Shell\AutoRun\command - F:\ij.bat
\Shell\explore\Command - F:\ij.bat
\Shell\open\Command - F:\ij.bat

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{25c5525a-a22e-11dc-afaa-000bcd3c4aca}]
\Shell\Autoexec\command - wscript "The_Cars.vbs"
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL wscript "The_Cars.vbs"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{37d269e2-3605-11d6-b17b-000bcd3c4aca}]
\Shell\AutoRun\command - F:\uxkl0apt.bat
\Shell\open\Command - F:\uxkl0apt.bat

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{37d269e3-3605-11d6-b17b-000bcd3c4aca}]
\Shell\AutoRun\command - G:\uxkl0apt.bat
\Shell\open\Command - G:\uxkl0apt.bat

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6639a116-386e-11dd-b037-000bcd3c4aca}]
\Shell\AutoRun\command - 2.bat
\Shell\explore\Command - 2.bat
\Shell\open\Command - 2.bat

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6708e3c7-0240-11dd-affc-000bcd3c4aca}]
\Shell\1\Command - RUNAUT~1\autorun.pif
\Shell\2\Command - RUNAUT~1\autorun.pif
\Shell\Auto\command - F:\auto.exe
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL auto.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6b797c52-ab0d-11dd-b09c-000bcd3c4aca}]
\Shell\AutoRun\command - G:\xih9.cmd
\Shell\explore\Command - G:\xih9.cmd
\Shell\open\Command - G:\xih9.cmd

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7555f5a8-e96e-11dd-b10a-000bcd3c4aca}]
\Shell\AutoRun\command - F:\uvsqfgwd.cmd
\Shell\open\Command - F:\uvsqfgwd.cmd

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{76dbca42-fd23-11dd-b13f-000bcd3c4aca}]
\Shell\AutOplAy\cOmmaNd - hbdqgt.pif
\Shell\AutoRun\command - hbdqgt.pif
\Shell\eXploRE\CommaND - hbdqgt.pif
\Shell\OPen\coMMand - hbdqgt.pif

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{809f6792-c087-11dd-b0ca-000bcd3c4aca}]
\Shell\AutoRun\command - F:\abk.bat
\Shell\explore\Command - F:\
\Shell\open\Command - F:\abk.bat

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8ec72186-0ca2-11de-b16b-000bcd3c4aca}]
\Shell\Auto\command - F:\explorer.exe
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL explorer.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ad3c0edc-c83d-11dd-b0e1-00e0a66641e1}]
\Shell\AutoRun\command - F:\w2.com
\Shell\open\Command - F:\w2.com

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b9e48876-d058-11da-ae1d-000bcd3c4aca}]
\Shell\AutoRun\command - F:\xih9.cmd
\Shell\explore\Command - F:\xih9.cmd
\Shell\open\Command - F:\xih9.cmd

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c6bab4cc-0b19-11de-b163-000bcd3c4aca}]
\sHELl\autOpLay\coMmaNd - F:\wltjw.exe
\sHELl\AutoRun\command - F:\wltjw.exe
\sHELl\eXPlOre\COmmanD - F:\wltjw.exe
\sHELl\open\commAnd - F:\wltjw.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cab02862-9f3f-11dd-b08c-000bcd3c4aca}]
\Shell\AutoRun\command - F:\o1.com
\Shell\explore\Command - F:\o1.com
\Shell\open\Command - F:\o1.com

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fd84ffeb-c0a7-11dd-b0cb-000bcd3c4aca}]
\Shell\AutoRun\command - F:\abk.bat
\Shell\explore\Command - F:\abk.bat
\Shell\open\Command - F:\abk.bat

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fe00a041-9b91-11dd-b088-000bcd3c4aca}]
\Shell\AutoRun\command - F:\ph.com
\Shell\explore\Command - F:\ph.com
\Shell\open\Command - F:\ph.com
.
Contenu du dossier 'Tâches planifiées'

2009-03-09 c:\windows\Tasks\Maintenance en 1 clic.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-04 11:13]
.
- - - - ORPHELINS SUPPRIMES - - - -

MSConfigStartUp-Blank AntiViri - C:\AUT0EXEC.BAT
MSConfigStartUp-Client Server Runtime Process - c:\windows\System32\csrs.exe
MSConfigStartUp-egui - c:\program files\ESET\ESET NOD32 Antivirus\egui.exe
MSConfigStartUp-Secure32 - c:\windows\system32\dllcache\Shell32.com
MSConfigStartUp-Secure64 - c:\windows\system32\dllcache\Regedit32.com
MSConfigStartUp-Skype - c:\program files\Skype\Phone\Skype.exe
MSConfigStartUp-swg - c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
MSConfigStartUp-System12 - c:\windows\system32\ne0kS.exe
MSConfigStartUp-Tok-Cirrhatus - c:\documents and settings\Administrateur\Local Settings\Application Data\smss.exe
MSConfigStartUp-updateMgr - c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe
MSConfigStartUp-YSearchProtection - c:\program files\Yahoo!\Search Protection\SearchProtection.exe
MSConfigStartUp-PROMon - PROMon.exe


.
------- Examen supplémentaire -------
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://www.yahoo.com/ext/search/search.html
uInternet Settings,ProxyServer = ftp=81.91.228.113:8080;gopher=81.91.228.126:8080;http=81.91.228.113:8080;https=81.91.228.113:8080
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: {2987CE22-CF18-4742-9632-3C583ECE5331} = 81.91.225.18,81.91.225.1
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\74vrc5v6.default\
FF - prefs.js: browser.search.selectedEngine - Live Search
FF - prefs.js: browser.startup.homepage - google.fr
FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?mkt=fr-FR&FORM=MIMWA1&q=
FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-15 18:23:11
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\TelnetServer\1.0\ReadConfig]
@DACL=(02 0000)
"Defaults"=dword:00000000
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Analog Devices\SoundMAX\SMAgent.exe
c:\windows\system32\WgaTray.exe
c:\program files\Yahoo!\Messenger\Ymsgr_tray.exe
.
**************************************************************************
.
Heure de fin: 2009-03-15 18:28:26 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-03-15 17:28:23

Avant-CF: 17 450 184 704 octets libres
Après-CF: 17,549,426,688 octets libres

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /noexecute=optin /fastdetect

456 --- E O F --- 2009-02-27 21:25:41

Bonjour,
Je viens de trouver votre forum au sein duquel tu expliques comment supprimer un cheval de troie.
J'ai le meme probleme que la demoiselle et j'aimerais savoir si tu pouvais m'aider dans ces démarches poru que je puisse l'enlever définitivement?

Merci beaucoup

abcdefgh

pas de news?