Vundo !!! Résolu

Question

Bonjour,
J'ai parcouru vos conseils a propos du virus vundo...comme je suis néophyte en la matière j'ai grandement besoin de votre aide! J'ai installé Hijackthis et voici le rapport...De plus j,ai téléchargé vundofix et il n'a rien trouvé mais avast me dit que je suis infecté... Merci de m'aider si vous le pouvez :)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:02:12, on 2008-05-29
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Hewlett-Packard\HP Software Update\hpwuSchd2.exe
C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\System32undll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\System32undll32.exe
C:\Program Files\HP Connections\6811507\Program\HP Connections.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Logitech\QuickCam10\COCIManager.exe
C:\hp\kbd\kbd.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32	askeng.exe
C:\Windows\system32\Macromed\Flash\FlashUtil9e.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Théo\Downloads\scanner.exe.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fsympatico.msn.ca%2fdefaultf.aspx%3flang%3dfr-ca
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp-consumer.my.aol.qc.ca/?icid=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hp-consumer.my.aol.qc.ca/?icid=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: Yahoo! Barre d'outils - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [DriverMagicLogon] "C:\Program Files\SymplisIT\DriverMagic\dmschedule.exe" /boot
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [zzz_ImInstaller_Magentic] C:\Users\Théo\AppData\Local\Temp\ImInstaller\Magentic\magentic_install[1].exe -startup -product Magentic
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32
vsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\THO~1\AppData\Local\Temp\ssqnOGax.dll,#1
O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\THO~1\AppData\Local\Temp	uvVMgdd.dll,c
O4 - HKCU\..\Run: [041723fe] rundll32.exe "C:\Users\THO~1\AppData\Local\Temp\joldmxye.dll",b
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Connexions HP.lnk = C:\Program Files\HP Connections\6811507\Program\HP Connections.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O13 - Gopher Prefix: 
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

Utilisateur anonyme · Answer

1) Télécharge Malwarebytes' Anti-Malware.

*Télécharge et installe Malwarebyte's Anti-Malware
*http://www.malwarebytes.org/mbam/program/mbam-setup.exe
*A la fin de l'installation, veille à ce que l'option « mettre a jour Malwarebyte's Anti-Malware » soit cochée. >>> clique sur OK
*Lance Malwarebyte's Anti-Malware en double-cliquant sur l'icône sur ton Bureau.
*Au premier lancement, une fenêtre t'annonce que la version est Free >>> clique sur OK
*Laisse les Mises à jour se télécharger

*** Referme le programme ***

2) Redémarre en "Mode sans échec"

Au redémarrage de l'ordinateur, une fois le chargement du BIOS terminé, il y a un écran noir qui apparaît rapidement, appuie sur la touche [F8] (ou [F5] sur certains pc) jusqu'à l'affichage du menu des options avancées de Windows.
Sélectionner "Mode sans échec" et appuie sur [Entrée]
Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou une autre.
Regarde ici si besoin : http://pageperso.aol.fr/loraline60/mode_sans_echec.htm

Ouvre le fichier texte sauvegardé sur le Bureau afin de suivre les instructions comme il faut.

3) Scan avec Malwarebyte's Anti-Malware

*Lance Malwarebyte's Anti-Malware
*Puis vs dans l'onglet "Recherche" puis coche "Exécuter un examen complet" puis "Rechercher sélectionne tes disques durs" puis clique sur "Lancer l’examen"
*A la fin du scan >>> clique sur Afficher les résultats puis sur Enregistrer le rapport
*Suppression des éléments détectés >>>> clique sur Supprimer la sélection
*S'il t'es demandé de redémarrer >>> clique sur "Yes"

*--> Un rapport de scan s'ouvre, enregistre sur ton Bureau et poste ce rapport en réponse.

lacoquine · Answer

Voila, j'ai suivi vos instructions, voici  ce que ça m'a donné :


Malwarebytes' Anti-Malware 1.12
Version de la base de données: 799

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 137690
Temps écoulé: 21 minute(s), 10 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 3
Valeur(s) du Registre infectée(s): 3
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 30

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\Software\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\affltid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoftdfa (Trojan.Vundo) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MSServer (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cmds (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\041723fe (Trojan.Vundo) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Users\Théo\AppData\Local\Temp
nnmjjJB.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0EYD6UMW\css4[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0EYD6UMW\css4[2] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0EYD6UMW\css4[3] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P9UTLCW9\css4[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TD7PQ77G\css4[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZO9F3PN9\css4[6] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp\byXRjihe.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp\hgGvwtsp.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp\printsrv32.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp\qwwejpft.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp\stdcons.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp	mp0000bdb3 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp	mp0000ce84 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp	mp0000cec3 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp	mp0000cfad (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp	mp0000d4cb (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp	mp0000d6af (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp	mp0000d779 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp	mp0000d825 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp	mp0000db31 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp	mp0000e12a (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp	mp0000f111 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp	mp0000fcd4 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp	mp00010952 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp	mp00010aaa (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp	mp000117f2 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp	mp00019e70 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Windows\System32\drivers\lvuvc.hs (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\Users\Théo\AppData\Local\Temp\bx18dxv.dat (Trojan.Agent) -> Quarantined and deleted successfully.

lacoquine · Answer

J'ai mis avast édition familiale...en fait c'est l'ordinateur de mon beau père...me conseilles tu autre chose? Merci :)

Kristopher · Answer

Bonsoir,

Oui, on te conseille aussi un firewall du style Kerio :

http://www.commentcamarche.net/telecharger/telecharger 206 kerio

Ainsi qu'un antispywares du style Spybot :

http://www.commentcamarche.net/telecharger/telecharger 122 spybot

a+

lacoquine · Answer

Merci, penses tu que mon problème de vundo est résolu selon le rapport que je t'ai envoyé?

lacoquine · Answer

Merci je vais essayer cela :) À vaincre sans péril on triomphe sans gloire!!! :)

lacoquine · Answer

Merci infiniment, tout semble être rentré dans l'ordre, tu es un pro!!!

lacoquine · Answer

Ok alors j'attends tes indications :) merci

lacoquine · Answer

Voici le résultat du scan avec antivir Avira AntiVir Personal Report file date: 31 mai 2008 13:16 Scanning for 1302528 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows Vista Windows version: (Service Pack 1) [6.0.6001] Boot mode: Save mode Username: Théo Computer name: PC-DE-THÉO Version information: BUILD.DAT : 8.1.00.295 16479 Bytes 2008-04-09 16:24:00 AVSCAN.EXE : 8.1.2.12 311553 Bytes 2008-03-18 15:02:56 AVSCAN.DLL : 8.1.1.0 53505 Bytes 2008-02-07 14:43:37 LUKE.DLL : 8.1.2.9 151809 Bytes 2008-02-28 14:41:23 LUKERES.DLL : 8.1.2.1 12033 Bytes 2008-02-21 14:28:40 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 2007-07-18 16:33:34 ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 2008-03-07 19:08:58 ANTIVIR2.VDF : 7.0.4.53 1848832 Bytes 2008-05-17 15:51:10 ANTIVIR3.VDF : 7.0.4.118 376832 Bytes 2008-05-30 15:51:13 Engineversion : 8.1.0.51 AEVDF.DLL : 8.1.0.5 102772 Bytes 2008-02-25 15:58:21 AESCRIPT.DLL : 8.1.0.37 270715 Bytes 2008-05-31 15:51:28 AESCN.DLL : 8.1.0.20 119157 Bytes 2008-05-31 15:51:26 AERDL.DLL : 8.1.0.20 418165 Bytes 2008-05-31 15:51:25 AEPACK.DLL : 8.1.1.5 364918 Bytes 2008-05-31 15:51:24 AEOFFICE.DLL : 8.1.0.18 192890 Bytes 2008-05-31 15:51:22 AEHEUR.DLL : 8.1.0.29 1253750 Bytes 2008-05-31 15:51:20 AEHELP.DLL : 8.1.0.15 115063 Bytes 2008-05-31 15:51:18 AEGEN.DLL : 8.1.0.25 307573 Bytes 2008-05-31 15:51:17 AEEMU.DLL : 8.1.0.6 430451 Bytes 2008-05-31 15:51:15 AECORE.DLL : 8.1.0.30 168311 Bytes 2008-05-31 15:51:14 AVWINLL.DLL : 1.0.0.7 14593 Bytes 2008-01-23 23:07:53 AVPREF.DLL : 8.0.0.1 25857 Bytes 2008-02-18 16:37:50 AVREP.DLL : 7.0.0.1 155688 Bytes 2007-04-16 19:26:47 AVREG.DLL : 8.0.0.0 30977 Bytes 2008-01-23 23:07:49 AVARKT.DLL : 1.0.0.23 307457 Bytes 2008-02-12 14:29:23 AVEVTLOG.DLL : 8.0.0.11 114945 Bytes 2008-02-28 14:31:31 SQLITE3.DLL : 3.3.17.1 339968 Bytes 2008-01-22 23:28:02 SMTPLIB.DLL : 1.2.0.19 28929 Bytes 2008-01-23 23:08:39 NETNT.DLL : 8.0.0.1 7937 Bytes 2008-01-25 18:05:10 RCIMAGE.DLL : 8.0.0.35 2371841 Bytes 2008-03-10 20:37:25 RCTEXT.DLL : 8.0.32.0 86273 Bytes 2008-03-06 18:02:11 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: on Scan boot sector.................: on Boot sectors.....................: C:, D:, Scan memory......................: on Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: Intelligent file selection Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Macro heuristic..................: on File heuristic...................: medium Start of the scan: 31 mai 2008 13:16 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsm.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'wininit.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 17 processes with 17 modules were scanned Starting master boot sector scan: Master boot sector HD0 [INFO] No virus was found! Master boot sector HD1 [INFO] No virus was found! [WARNING] Le périphérique n'est pas prêt. [INFO] Please restart the search with Administrator rights Master boot sector HD2 [INFO] No virus was found! [WARNING] Le périphérique n'est pas prêt. [INFO] Please restart the search with Administrator rights Master boot sector HD3 [INFO] No virus was found! [WARNING] Le périphérique n'est pas prêt. [INFO] Please restart the search with Administrator rights Master boot sector HD4 [INFO] No virus was found! [WARNING] Le périphérique n'est pas prêt. [INFO] Please restart the search with Administrator rights Start scanning boot sectors: Boot sector 'C:\' [INFO] No virus was found! Boot sector 'D:\' [INFO] No virus was found! Starting to scan the registry. The registry was scanned ( '25' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0EYD6UMW\css4[4] [DETECTION] Is the Trojan horse TR/Vundo.Gen [NOTE] The file was deleted! C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NX0TWAXH\css4[7] [DETECTION] Is the Trojan horse TR/Vundo.Gen [NOTE] The file was deleted! C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P9UTLCW9\css4[2] [DETECTION] Is the Trojan horse TR/Vundo.Gen [NOTE] The file was deleted! C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TD7PQ77G\css4[2] [DETECTION] Is the Trojan horse TR/Vundo.Gen [NOTE] The file was deleted! C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TD7PQ77G\css4[3] [DETECTION] Contains detection pattern of the worm WORM/Autorun.dwi [NOTE] The file was deleted! C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZO9F3PN9\css4[3] [DETECTION] Is the Trojan horse TR/Vundo.Gen [NOTE] The file was deleted! C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZO9F3PN9\css4[4] [DETECTION] Is the Trojan horse TR/Vundo.Gen [NOTE] The file was deleted! C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZO9F3PN9\css4[5] [DETECTION] Is the Trojan horse TR/Vundo.Gen [NOTE] The file was deleted! C:\Users\Théo\AppData\Local\Temp\6ew5tbma-s.dat [DETECTION] Contains detection pattern of the dropper DR/Vapsup.ffv.1 [NOTE] The file was deleted! C:\Users\Théo\AppData\Local\Temp\wvUkLEtU.dll [DETECTION] Is the Trojan horse TR/Vundo.Gen [NOTE] The file was deleted! Begin scan in 'D:\' End of the scan: 31 mai 2008 13:48 Used time: 32:07 min The scan has been done completely. 15250 Scanning directories 296388 Files were scanned 10 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 10 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 296378 Files not concerned 3419 Archives were scanned 5 Warnings 10 Notes

lacoquine · Answer

Bitdefender ne fonctionne pas sous vista

lacoquine · Answer

quand je télécharge bitdefender ça me dit que le nom de repertoire est incorrect

lacoquine · Answer

Allo, je n'ai pu faire l'analyse avec le lien que tu m'avais fourni mais j'ai téléchargé le logiciel Bitdefender et voici les résultats de l'analyse:  


Fichier journal de BitDefender
Produit : BitDefender Total Security 2008 
Version : BitDefender UIScanner V.11 
Date du journal : 16:25:27 31/05/2008 
Chemin du journal : C:\ProgramData\BitDefender\Desktop\Profiles\Logs\deep_scan\1212265527_1_00.xml 

Analyse des chemins :Chemin0000: C:\ 
Chemin0001: D:\ 


Options d’analyse :Analyse contre les virus : Oui 
Détecter les adwares : Oui 
Analyse contre les spywares : Oui 
Analyse des applications : Oui 
Détecter les numéroteurs : Oui 
Analyse contre les Rootkits : Oui 


Options de sélection de cible :Analyse les clés du registre : Oui 
Analyse des cookies : Oui 
Analyser le secteur de boot : Oui 
Analyse des processus mémoire : Oui 
Analyser les archives : Oui 
Analyser les fichiers enpaquetés : Oui 
Analyser les emails : Oui 
Analyser tous les fichiers : Oui 
Analyse heuristique : Oui 
Extensions analysées :  
Extensions exclues  :  


Traitement cibleAction par défaut pour les objets infectés : Désinfecter 
Action par défaut pour les objets suspects : Aucun 
Action par défaut pour les objets camouflés : Aucun 


Résumé de l'analyseNombre de signatures de virus : 1255425 
Plugins archives : 42 
Plug-ins messagerie : 6 
Plugins d'analyse : 12 
Plugins archives : 42 
Plug-ins système : 4 
Plug-ins décompression : 7 


Résumé de l'analyse généraleEléments analysés : 272206 
Eléments infectés  : 0 
Eléments suspects : 0 
Eléments résolus : 0 
Virus individuels trouvés : 0 
Répertoires analysés : 14883 
Secteur de boot analysés : 3 
Archives analysés : 4537 
Erreurs I/O : 110 
Temps d'analyse : 00:01:04:55 
Fichiers par seconde : 69 


Résumé des processus analysésAnalysé(s) : 70 
Infecté(s) : 0 


Résumé des clés de registre analyséesAnalysé(s) : 392 
Infecté(s) : 0 


Résumé des cookies analysésAnalysé(s) : 0 
Infecté(s) : 0 


Problèmes non résolus :Nom de l'objet Nom de la menace Etat final 


Problèmes résolusNom de l'objet Nom de la menace Etat final 


Objets non scannés :Nom de l'objet Raison Etat final

lacoquine · Answer

C'est fait :) J'ai désinstallé bitdefender.

lacoquine · Answer

Allo, j'ai fait la défragmentation et je ne suis pas arrivée à trouver le rapport (sous vista) ... ce que je peux dire c'est que tout s'est déroulé comme il faut, je n'ai eu aucun message d'erreur. Il n'y a plus de pop up, tout semble aller.  Est ce que tu penses que mon problème est règlé ou il peut y avoir autres dommages...que je ne vois pas. Merci encore mille fois de m'aider.

lacoquine · Answer

C'est fait :)

lacoquine · Answer

Accompli :)

lacoquine · Answer

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:59:15, on 2008-06-02
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Hewlett-Packard\HP Software Update\hpwuSchd2.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Windows\System32undll32.exe
C:\Windows\System32undll32.exe
C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe
C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\HP Connections\6811507\Program\HP Connections.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Logitech\QuickCam10\COCIManager.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\hp\kbd\kbd.exe
C:\Windows\system32\Dwm.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32	askeng.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fsympatico.msn.ca%2fdefaultf.aspx%3flang%3dfr-ca
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hp-consumer.my.aol.qc.ca/?icid=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hp-consumer.my.aol.qc.ca/?icid=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: Yahoo! Barre d'outils - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [OsdMaestro] "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [DriverMagicLogon] "C:\Program Files\SymplisIT\DriverMagic\dmschedule.exe" /boot
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [zzz_ImInstaller_Magentic] C:\Users\Théo\AppData\Local\Temp\ImInstaller\Magentic\magentic_install[1].exe -startup -product Magentic
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32
vsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Connexions HP.lnk = C:\Program Files\HP Connections\6811507\Program\HP Connections.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O13 - Gopher Prefix: 
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

lacoquine · Answer

Ok C'est fait, voici les logiciels de sécurité installés sur l'ordi:

ccleaner
malwarebytes
antivirPE Classic
hijackthis

lacoquine · Answer

dans l'onglet nettoyeur de quel programme? (defragmentation?)

lacoquine · Answer

Fait :)

lacoquine · Answer

Exécuté :)

lacoquine · Answer

toolscleaner ne fonctionne pas... je l'ai désinstallé réinstallé mais ça ne fonctionne pas...

lacoquine · Answer

J Ai réussi à le faire fonctionner mais apres la suppression, on m'envoie le message impossible de créer le fichier TCleaner.txt acces refusé....

lacoquine · Answer

C est ce que me donnait le rapport

-->- Recherche: 

C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !

---------------------------------
-->- Suppression: 

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: ERREUR DE SUPPRESSION !!
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: ERREUR DE SUPPRESSION !!
C:\Program Files\Trend Micro\HijackThis: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\HijackThis: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis: ERREUR DE SUPPRESSION !!
C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\HijackThis: ERREUR DE SUPPRESSION !!
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis: ERREUR DE SUPPRESSION !!

lacoquine · Answer

J ai essayé de l'enlever et je ne suis plus capable

lacoquine · Answer

-je l'ai refermé et reouvert d'une autre façon, voici le résultat :)


->- Recherche: 

C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !

---------------------------------
-->- Suppression: 

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !
C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\HijackThis: ERREUR DE SUPPRESSION !!
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis: supprimé !

lacoquine · Answer

Je l'ai refait mais il ne trouve rien <à supprimer

lacoquine · Answer

Est ce que je désinstalle Toolscleaner?

lacoquine · Answer

Fait

lacoquine · Answer

je te remercie du plus profond de mon coeur!! Si tu as besoin de n'importe quoi dans un autre domaine, demande peut etre pourrai-je à mon tour t'aider :) Bonne fin de soirée. La coquine qui apprécie vraiment ton aide :)

Vundo !!! - Page 2

Discussions similaires

Newsletters