VIRUS ALERTE A COTE DE L'HORLOGE

Résolu
manolo70 -  
 InfernO.vir -
Bonjour,

Comme j'ai pu le voir sur d'autres discussions, j'ai également été infecté par un virus qui à l'effet de me signaler un message d'alerte virus à côté de l'horloge, ainsi que la disparition de mon disque dur dans le poste de travail et l'incapacité de mettre à jour windows qui n'est plus reconnu par le site. Certains autres soucis ont été résolus mais ceux-ci persistent.

J'ai besoin de votre aide, étant un utilisateur novice, je suis largué...

Merci d'avance.
Configuration: Windows XP
Internet Explorer 7.0

17 réponses

  1. Utilisateur anonyme
     
    salut manolo70

    le virus te propose t'il d'acheter un anti-virus payant ?
    0
    1. manolo70 Messages postés 17 Statut Membre
       
      Bonjour.

      Oui au début de l'infection, ensuite grâce à une analyse spybot le lien internet n'apparait plus...
      0
  2. InfernO.vir
     
    Bonjour,

    -Telecharges MBAM--> http://www.malwarebytes.org/mbam/program/mbam-setup.exe

    -Suis ce tuto--> https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

    -Fait un scan complet en mode sans echec et poste le rapport
    0
    1. manolo70 Messages postés 17 Statut Membre
       
      Bonjour.

      Ok je fais ça, mais par contre je vous préviens d'avance que je devrais m'abscenter jusqu'à 14h mais que pour tout l'après midi je suis dispo. Je vous remercie beaucoup pour l'aide et pour votre patience.
      0
  4. manolo70
     
    Et voilà le rapport de malwarebytes après un scan de 3h, est-ce normal ?

    Malwarebytes' Anti-Malware 1.25
    Database version: 1097
    Windows 5.1.2600 Service Pack 3

    14:28:51 30/08/2008
    mbam-log-08-30-2008 (14-28-51).txt

    Scan type: Full Scan (C:\|H:\|)
    Objects scanned: 220068
    Time elapsed: 2 hour(s), 57 minute(s), 45 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 3
    Registry Values Infected: 1
    Registry Data Items Infected: 1
    Folders Infected: 1
    Files Infected: 12

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VSPlugin (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\qalkfxor.bapg (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\qalkfxor.toolbar.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.

    Registry Values Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\rqbmvpso (Trojan.FakeAlert) -> Quarantined and deleted successfully.

    Registry Data Items Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId (Trojan.FakeAlert) -> Bad: (VIRUS ALERT!) Good: (55711-640-4347764-23510) -> Quarantined and deleted successfully.

    Folders Infected:
    C:\Program Files\PCHealthCenter (Trojan.Fakealert) -> Quarantined and deleted successfully.

    Files Infected:
    C:\Documents and Settings\utilisateur\Local Settings\Application Data\kmssc_navps.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\Documents and Settings\utilisateur\Local Settings\Application Data\kmssc_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\Documents and Settings\utilisateur\Local Settings\Application Data\kmssc.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\Documents and Settings\utilisateur\Local Settings\Application Data\kmssc.exe (Adware.Navipromo.H) -> Quarantined and deleted successfully.
    C:\Program Files\PCHealthCenter\2.exe (Trojan.Fakealert) -> Quarantined and deleted successfully.
    C:\System Volume Information\_restore{94AF07D5-130D-4D35-B0DF-C246A0E49174}\RP258\A0025662.exe (Trojan.Fakealert) -> Quarantined and deleted successfully.
    C:\WINDOWS\emwl.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    C:\Program Files\PCHealthCenter\0.gif (Trojan.Fakealert) -> Quarantined and deleted successfully.
    C:\Program Files\PCHealthCenter\2.gif (Trojan.Fakealert) -> Quarantined and deleted successfully.
    C:\Program Files\PCHealthCenter\3.gif (Trojan.Fakealert) -> Quarantined and deleted successfully.
    C:\Program Files\PCHealthCenter\sc.html (Trojan.Fakealert) -> Quarantined and deleted successfully.
    C:\Documents and Settings\utilisateur\RUNDLL32.EXE (Heuristics.Reserved.Word.Exploit) -> Quarantined and deleted successfully.
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. InfernO.vir
     
    Re,

    Oui c'est normal qu'il mette longtemps pas mal de choses ont étés trouvées et supprimées comment va le pc ?
    0
  7. manolo70 Messages postés 17 Statut Membre
     
    Il a redémarré correctement, du moins comme avant...
    Tjs les même problèmes ...
    Au chargement du bureau Spybot m'a demandé plusieurs actions que j'ai refusé ne sachant pas ce qu'il en retourne.
    Je ne comprend pas ces messages d'autorisation de modification.
    0
  8. InfernO.vir
     
    Re,

    Tjrs pas acces au disque dur et tjrs le message d'alerte a coter de l'horloge ?

    -Telecharge hijackthis--> http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe

    -Cliqe sur le .exe puis sur "Do a system scan and save a logfile"

    -Poste moi le rapport.
    0
    1. manolo70 Messages postés 17 Statut Membre
       
      c'est bien ça. Je m'execute de suite. Pouvez vous me diriger sur un tutorial pour ne pas faire de boulettes il me semble avoir lu qu'il fallait modifier le nom du fichier.

      Merci
      0
    2. manolo70 Messages postés 17 Statut Membre
       
      Le rapport hijachthis lancé directement :


      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 15:29: VIRUS ALERT!, on 30/08/2008
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16705)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
      C:\Program Files\a-squared Free\a2service.exe
      C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
      C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\SearchIndexer.exe
      C:\PROGRA~1\AVG\AVG8\avgrsx.exe
      C:\PROGRA~1\AVG\AVG8\avgemc.exe
      C:\WINDOWS\RTHDCPL.EXE
      C:\Program Files\Orange\Systray\SystrayApp.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE
      C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe
      C:\Program Files\Orange\Launcher\Launcher.exe
      C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe
      C:\Program Files\D-Tools\daemon.exe
      C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
      C:\PROGRA~1\AVG\AVG8\avgtray.exe
      C:\WINDOWS\system32\RUNDLL32.EXE
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\RALINK\Common\RaUI.exe
      C:\Program Files\Windows Desktop Search\WindowsSearch.exe
      C:\Program Files\Orange\Deskboard\deskboard.exe
      C:\Program Files\Orange\connectivity\connectivitymanager.exe
      C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
      C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
      C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
      C:\Program Files\Windows Live\Messenger\usnsvc.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
      C:\Documents and Settings\utilisateur\Local Settings\Temporary Internet Files\Content.IE5\ZBL7FVY9\HiJackThis[1].exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
      R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
      O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
      O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
      O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
      O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
      O4 - HKLM\..\Run: [EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /O6 "USB001" /M "Stylus D68"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe"
      O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
      O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\RunOnce: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKCU\..\Run: [WINSOS VERIFY] "C:\Program Files\Winsos\WINSOS.EXE" MINI
      O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [wogaw] "c:\documents and settings\utilisateur\local settings\application data\wogaw.exe" wogaw
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
      O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
      O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O15 - Trusted Zone: https://www.orange.fr/portail
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
      O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - https://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
      O17 - HKLM\System\CCS\Services\Tcpip\..\{076FDD32-BA6B-4A94-A1EE-76344B6DC3AF}: NameServer = 194.2.0.20
      O18 - Protocol: bw+0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
      O18 - Protocol: offline-8876480 - {79C70175-AFAD-4103-9B34-C57CEA1FF5DD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O20 - AppInit_DLLs: avgrsstx.dll
      O21 - SSODL: rqbmvpso - {9D3D6BA1-7900-4B05-96D0-277402F05397} - C:\WINDOWS\rqbmvpso.dll (file missing)
      O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
      O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
      O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
      O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
      O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      0
  9. InfernO.vir
     
    Re, desolé je vien a l'instant de voir le message concernant le tuto =S

    -Telecharges Toolbar s&d--> https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

    -Suis e tuto--> https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/

    -Poste moi le rapport de l'option 1 avant de continuer !
    0
    1. manolo70 Messages postés 17 Statut Membre
       
      Voici le rapport de Toolbar :


      -----------\\ ToolBar S&D 1.1.6 XP/Vista

      Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
      X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz )
      BIOS : Default System BIOS
      USER : utilisateur ( Administrator )
      BOOT : Normal boot
      Antivirus : AVG Anti-Virus Free 8.0 (Activated)

      "C:\ToolBar SD" ( MAJ : 30-08-2008|00:19 )
      Option : [1] ( 30/08/2008|16:16 )

      -----------\\ Recherche de Fichiers / Dossiers ...


      -----------\\ [..\Internet Explorer\Main]

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
      "Start Page"="https://www.google.com/?gws_rd=ssl"
      "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
      "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
      "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
      "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
      "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"


      --------------------\\ Recherche d'autres infections

      --------------------\\ Cracks & Keygens ..

      C:\DOCUME~1\UTILIS~1\Mes documents\jeux pc\Call of Duty 4\Call of Duty 4 - Modern Warfare\#readme#\rzr-cod4-keygen.exe
      C:\DOCUME~1\UTILIS~1\Mes documents\jeux pc\Call of Duty 4\Call of Duty 4 - Modern Warfare\main\iw_02\images\me_cracks01_col.iwi
      C:\DOCUME~1\UTILIS~1\Mes documents\jeux pc\Call of Duty 4\Call of Duty 4 - Modern Warfare\main\iw_02\images\me_cracks01_nml.iwi
      C:\DOCUME~1\UTILIS~1\Mes documents\jeux pc\CV4\Crack
      C:\DOCUME~1\UTILIS~1\Mes documents\jeux pc\CV4\Crack\Civilization4.exe
      C:\DOCUME~1\UTILIS~1\Mes documents\jeux pc\Formula 1\crack
      C:\DOCUME~1\UTILIS~1\Mes documents\jeux pc\Formula 1\crack\leeme.txt
      C:\DOCUME~1\UTILIS~1\Mes documents\Logiciels securit‚ et gravure\Power ISO\Keygen.exe
      C:\DOCUME~1\UTILIS~1\Mes documents\Ma musique\Bruce Springsteen-1973-1998-28 cd\Bruce Springsteen-1998-Tracks-1998-cd 1\Bruce Springsteen - 1998 Tracks #1 - 10 - Thundercrack.mp3


      -----------\\ Fin du rapport a 16:18:05,50
      0
    2. manolo70 Messages postés 17 Statut Membre
       
      Toujours là ?
      0
    3. manolo70 Messages postés 17 Statut Membre
       
      Quelqu'un d'autre peut m'aider ???
      0
  10. manolo70 Messages postés 17 Statut Membre
     
    Y a un souci ou bien ? Merci de me tenir au courant svp ...
    0
  11. InfernO.vir
     
    Re,

    Dsl mais j'ai une vie a coter de CCM ! (benevole!)

    -Supprime tous tes cracks !
    0
  12. manolo70 Messages postés 17 Statut Membre
     
    Je comprend bien.

    Par l'option 2 ça va marcher ?
    0
  13. InfernO.vir
     
    Oui vas-y mais tu peux aussi le faire manuellement !
    0
    1. manolo70 Messages postés 17 Statut Membre
       
      C'est fait.
      J'ai relancé un nouveau rapport :


      -----------\\ ToolBar S&D 1.1.6 XP/Vista

      Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
      X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz )
      BIOS : Default System BIOS
      USER : utilisateur ( Administrator )
      BOOT : Normal boot
      Antivirus : AVG Anti-Virus Free 8.0 (Activated)

      "C:\ToolBar SD" ( MAJ : 30-08-2008|00:19 )
      Option : [1] ( 30/08/2008|18:48 )

      -----------\\ Recherche de Fichiers / Dossiers ...


      -----------\\ [..\Internet Explorer\Main]

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
      "Start Page"="https://www.google.com/?gws_rd=ssl"
      "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
      "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
      "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
      "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
      "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"


      --------------------\\ Recherche d'autres infections


      Aucune autre infection trouvée !

      -----------\\ Fin du rapport a 18:48:42,89
      0
  15. manolo70 Messages postés 17 Statut Membre
     
    J'ai réalisé le netteyage de windows et du registre.

    Rien de mieux, tjs le message et le DD disparu...
    0
  17. manolo70 Messages postés 17 Statut Membre
     
    Bon j'ai réussit a résoudre le problème. Finalement j'ai relancé une analyse avec malwayrebytes en mode normal, corrigé les divers erreurs trouvées et le message à côté de l'horloge à disparu ainsi que le DD est réapparu dans le poste de travail. Mon windows est de nouveau reconnu par windows update.

    J'ai pas compris comment ça n'avait pas marché avant mais bon. En tout cas merci à Inferno.vir pour sa patience et son intéret pour aider les pauvres petits utilisateurs comme moi qui se retrouvent dans des situations qui les dépassent totalement.

    Encore merci.
    0
  18. InfernO.vir
     
    Re,

    Bon alors tant mieux MBAM est tres utile garde-le

    -Telecharge toolscleaner--> http://pc-system.fr/

    -regarde ce petit tuto--> http://www.commentcamarche.net/faq/sujet 8341 toolscleaner suppression des fix de force brute

    C'est un outils qui permet de supprimer proprement les autres utilitaire telechargés precedemment !

    Poste moi les rapports et ensuite met resolu stp.
    0

Discussions similaires

J’ai des horloges devant mes recherches
Memel -
bazfile -

1 réponse
Heure à coté d'un contact Facebook :
Nervadaa -
piquesous -

2 réponses
Comment savoir qui consulte mon profil sur facebook
Mara25 -
philou -

65 réponses
Aligner 2 photos côte à côte...
Dri80 -
tkyt -

10 réponses
se debarasser de fausses alerte virus
Evka -
fabul -

1 réponse