Assistance a distance

Bonjour,
voila, j'ai un gros virus, le quel empèche mon D/D externe de se connecter et "FIRFOX", ainsi que, "THUNDERBIRD" de se lancer, en gros, je suis dans un gros caca...
je vous sollicite donc a propos d'un dépanage a distance, je sais que c'est possible, j'ai juste besoin de trouver une personne acceptant de me rendre ce service..

je compte donc sur vous, parce que, ayant un site commercial, ce virus m'empèche de travailler, c'est tres grave

Ps - spybot, antivir et adaware ne marchent plus, je ne peux plus les utiliser, la situation est grave.;

merci a tous par avance

GV
Configuration: Windows XP
Internet Explorer 7.0

49 réponses

Résumé de la discussion

Un problème de sécurité informatique se manifeste par un virus qui empêche le disque dur externe de se connecter et bloque le lancement de Firefox et Thunderbird. Plusieurs participants évoquent des solutions techniques et des dépannages à distance, en citant Windows XP et Internet Explorer 7.0, ainsi que des outils comme HijackThis et les rapports système. Des échanges décrivent des obstacles rencontrés par les utilisateurs, y compris des plantages lors de l’installation d’antivirus et la nécessité de partager des rapports copiables entre eux. D'autres éléments évoquent la nature des rapports et la préparation d’un dépistage, comme les extraits de HijackThis, qui peuvent guider une intervention ultérieure sans trancher sur l’issue.

Bobot (l’IA à votre service)
  1. Contributeur sécurité
    Salut !!

    Fais un rapport hijackthis pour que je puisse vérifier les infections de ton pc stp

    ▶ Télécharge hijackthis à cette adresse, tout est expliqué pour bien l installer et pour savoir s'en servir :

    https://www.androidworld.fr/

    Comment copier/coller le rapport :

    Quand tu as le rapport à l écran, tu fais ctrl A pour "sélectionner tout" puis ctrl C pour "copier".

    ensuite tu viens sur le forum pour me répondre et tu fais ctrl V pour "coller" le rapport.

    Une explication des raccourcis clavier sont illustrés sur mon site web à cette adresse :

    https://www.androidworld.fr/
    1. salut geoffrey5,
      merci pour ta reponse, je vais donc suivre tes conseils, on verra bien.

      merci, a tout de suite....

      GV
      1. j'ai donc telechargé le truc, mais, crois tu qu'il soit indispensable de renomer comme indiqué?
        1. Contributeur sécurité
          oui car si tu as des infections vundo, il se peut que certaines ne soit pas visibles au rapport hijackthis
          1. ben figure toi que je ne peux pas ouvris "programe file"....quand je clique droit sur le disc (C), on me demande de choisir un programme pour l'ouvrir, j'y comprends rien
            1. Contributeur sécurité
              est ce que tu as bien le raccourci de hijackthis sur ton bureau ??

              Si oui, fais d abord un rapport hijackthis sans le renommer stp
              1. ca y est, j'aidonc obtenu une grande liste, que dois je faire maintenant?
                1. Contributeur sécurité
                  tu fais un copié/collé du rapport dans ta réponse

                  le copié/collé est expliqué dans le message que je t ai envoyé avec le téléchargement de hijackthis ;-)
                  1. Logfile of Trend Micro HijackThis v2.0.2
                    Scan saved at 11:46:40, on 22/09/2008
                    Platform: Windows XP SP2 (WinNT 5.01.2600)
                    MSIE: Internet Explorer v7.00 (7.00.6000.16705)
                    Boot mode: Normal

                    Running processes:
                    C:\WINDOWS\System32\smss.exe
                    C:\WINDOWS\system32\csrss.exe
                    C:\WINDOWS\system32\winlogon.exe
                    C:\WINDOWS\system32\services.exe
                    C:\WINDOWS\system32\lsass.exe
                    C:\WINDOWS\system32\Ati2evxx.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\WINDOWS\System32\svchost.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\WINDOWS\system32\Ati2evxx.exe
                    C:\WINDOWS\system32\spoolsv.exe
                    C:\WINDOWS\Explorer.EXE
                    C:\WINDOWS\system32\DVDRAMSV.exe
                    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                    C:\WINDOWS\system32\HPZipm12.exe
                    C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\Program Files\RealVNC\VNC4\WinVNC4.exe
                    C:\WINDOWS\System32\alg.exe
                    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                    C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
                    C:\WINDOWS\AGRSMMSG.exe
                    C:\Program Files\Apoint2K\Apoint.exe
                    C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
                    C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
                    C:\WINDOWS\system32\TCtrlIOHook.exe
                    C:\WINDOWS\system32\TPSMain.exe
                    C:\Program Files\Apoint2K\Apntex.exe
                    C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
                    C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
                    C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
                    C:\Program Files\Winamp\winampa.exe
                    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                    C:\WINDOWS\system32\TPSBattM.exe
                    C:\WINDOWS\system32\atwtusb.exe
                    C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
                    C:\Program Files\QuickTime\qttask.exe
                    C:\WINDOWS\system32\ctfmon.exe
                    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe
                    C:\Program Files\Logitech\SetPoint\SetPoint.exe
                    C:\Program Files\Fichiers communs\Real\Update_OB\RealOneMessageCenter.exe
                    C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                    C:\WINDOWS\system32\RAMASST.exe
                    C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
                    C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
                    C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
                    C:\Documents and Settings\gilles\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
                    C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
                    C:\Program Files\YesMessenger\YesMessenger.exe
                    C:\Documents and Settings\gilles\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
                    C:\Program Files\Internet Explorer\iexplore.exe
                    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
                    C:\WINDOWS\system32\wuauclt.exe
                    C:\Program Files\Windows Live Toolbar\msn_sl.exe
                    C:\WINDOWS\system32\wbem\wmiprvse.exe

                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fwww.msn.fr%2fimg%2ffr%2ffr-fr%2fdivertissement%2fcelebrites%2fgalery%2fwentworth02.jpg%3f
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                    O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
                    O2 - BHO: Windows Live Call HoverToCall class - {7E853D72-626A-48EC-A868-BA8D5E23E045} - C:\Program Files\MSN Messenger\htc.8.1.0178.00.dll
                    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
                    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                    O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
                    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                    O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
                    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
                    O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
                    O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
                    O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
                    O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
                    O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
                    O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
                    O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
                    O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP
                    O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
                    O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
                    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb12.exe
                    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
                    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                    O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
                    O4 - HKLM\..\Run: [Regen] "C:\Program Files\OnSpec\All Users\Regen\Regen.exe" /STARTUP
                    O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
                    O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta
                    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
                    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
                    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                    O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
                    O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
                    O4 - Startup: Outil de notification Live Search.lnk = Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
                    O4 - Startup: YesMessenger.lnk = C:\Program Files\YesMessenger\YesMessenger.exe
                    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
                    O4 - Global Startup: Kaspersky Anti-Hacker.lnk = ?
                    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
                    O4 - Global Startup: Logitech SetPoint.lnk = ?
                    O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                    O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
                    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                    O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
                    O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
                    O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
                    O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
                    O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
                    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
                    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
                    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
                    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                    O18 - Protocol: bw+0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw+0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw-0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw-0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw00 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw00s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw10 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw10s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw20 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw20s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw30 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw30s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw40 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw40s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw50 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw50s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw60 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw60s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw70 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw70s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw80 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw80s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw90 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw90s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwa0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwa0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwb0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwb0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwc0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwc0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwd0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwd0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwe0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwe0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwf0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwf0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                    O18 - Protocol: bwg0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwg0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwh0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwh0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwi0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwi0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwj0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwj0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwk0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwk0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwl0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwl0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwm0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwm0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwn0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwn0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwo0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwo0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwp0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwp0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwq0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwq0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwr0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwr0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bws0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bws0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwt0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwt0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwu0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwu0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwv0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwv0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bww0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bww0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwx0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwx0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwy0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwy0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwz0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwz0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: offline-8876480 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                    O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
                    O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                    O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                    O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
                    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - NetGroup - Politecnico di Torino - C:\Program Files\WinPcap\rpcapd.exe
                    O23 - Service: ScsiAccess - Unknown owner - C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
                    O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.8\bin\httpd.exe
                    O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.0.51a\bin\mysqld-nt.exe
                    O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe
                    1. Logfile of Trend Micro HijackThis v2.0.2
                      Scan saved at 11:46:40, on 22/09/2008
                      Platform: Windows XP SP2 (WinNT 5.01.2600)
                      MSIE: Internet Explorer v7.00 (7.00.6000.16705)
                      Boot mode: Normal

                      Running processes:
                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\csrss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\Ati2evxx.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\Ati2evxx.exe
                      C:\WINDOWS\system32\spoolsv.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\WINDOWS\system32\DVDRAMSV.exe
                      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      C:\WINDOWS\system32\HPZipm12.exe
                      C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\Program Files\RealVNC\VNC4\WinVNC4.exe
                      C:\WINDOWS\System32\alg.exe
                      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                      C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
                      C:\WINDOWS\AGRSMMSG.exe
                      C:\Program Files\Apoint2K\Apoint.exe
                      C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
                      C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
                      C:\WINDOWS\system32\TCtrlIOHook.exe
                      C:\WINDOWS\system32\TPSMain.exe
                      C:\Program Files\Apoint2K\Apntex.exe
                      C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
                      C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
                      C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
                      C:\Program Files\Winamp\winampa.exe
                      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                      C:\WINDOWS\system32\TPSBattM.exe
                      C:\WINDOWS\system32\atwtusb.exe
                      C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
                      C:\Program Files\QuickTime\qttask.exe
                      C:\WINDOWS\system32\ctfmon.exe
                      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                      C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe
                      C:\Program Files\Logitech\SetPoint\SetPoint.exe
                      C:\Program Files\Fichiers communs\Real\Update_OB\RealOneMessageCenter.exe
                      C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                      C:\WINDOWS\system32\RAMASST.exe
                      C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
                      C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
                      C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
                      C:\Documents and Settings\gilles\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
                      C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
                      C:\Program Files\YesMessenger\YesMessenger.exe
                      C:\Documents and Settings\gilles\Application Data\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
                      C:\Program Files\Internet Explorer\iexplore.exe
                      C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
                      C:\WINDOWS\system32\wuauclt.exe
                      C:\Program Files\Windows Live Toolbar\msn_sl.exe
                      C:\WINDOWS\system32\wbem\wmiprvse.exe

                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fwww.msn.fr%2fimg%2ffr%2ffr-fr%2fdivertissement%2fcelebrites%2fgalery%2fwentworth02.jpg%3f
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
                      O2 - BHO: Windows Live Call HoverToCall class - {7E853D72-626A-48EC-A868-BA8D5E23E045} - C:\Program Files\MSN Messenger\htc.8.1.0178.00.dll
                      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
                      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                      O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
                      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                      O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
                      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
                      O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
                      O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
                      O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
                      O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
                      O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
                      O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
                      O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
                      O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP
                      O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
                      O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
                      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb12.exe
                      O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
                      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                      O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
                      O4 - HKLM\..\Run: [Regen] "C:\Program Files\OnSpec\All Users\Regen\Regen.exe" /STARTUP
                      O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
                      O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta
                      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
                      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                      O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
                      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                      O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
                      O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
                      O4 - Startup: Outil de notification Live Search.lnk = Application Data\Microsoft\Live Search\Notification-LiveSearch.exe
                      O4 - Startup: YesMessenger.lnk = C:\Program Files\YesMessenger\YesMessenger.exe
                      O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
                      O4 - Global Startup: Kaspersky Anti-Hacker.lnk = ?
                      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
                      O4 - Global Startup: Logitech SetPoint.lnk = ?
                      O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
                      O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
                      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                      O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
                      O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
                      O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
                      O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
                      O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
                      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
                      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                      O18 - Protocol: bw+0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw+0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw-0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw-0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw00 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw00s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw10 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw10s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw20 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw20s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw30 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw30s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw40 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw40s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw50 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw50s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw60 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw60s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw70 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw70s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw80 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw80s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw90 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw90s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwa0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwa0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwb0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwb0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwc0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwc0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwd0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwd0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwe0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwe0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwf0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwf0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                      O18 - Protocol: bwg0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwg0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwh0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwh0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwi0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwi0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwj0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwj0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwk0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwk0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwl0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwl0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwm0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwm0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwn0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwn0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwo0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwo0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwp0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwp0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwq0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwq0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwr0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwr0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bws0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bws0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwt0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwt0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwu0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwu0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwv0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwv0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bww0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bww0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwx0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwx0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwy0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwy0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwz0 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwz0s - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: offline-8876480 - {2AC199BB-E604-461E-80C8-804B4D89F8CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                      O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
                      O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                      O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                      O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                      O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
                      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                      O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - NetGroup - Politecnico di Torino - C:\Program Files\WinPcap\rpcapd.exe
                      O23 - Service: ScsiAccess - Unknown owner - C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
                      O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.8\bin\httpd.exe
                      O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.0.51a\bin\mysqld-nt.exe
                      O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe
                      1. voila donc le bazard, j'espere que t'y trouvera quelque chose d'interessant
                        1. malheureusement, je ne peux pas telecharger le programe que tu dis, ça m plante internet explorer....on dirait que je suis dans une belle merde...
                          1. Contributeur sécurité
                            ok...essais ceci stp :

                            ▶ Télécharge combofix (par sUBs) à cette adresse :

                            (c est le numéro 5 en bas de la page) : https://www.androidworld.fr/

                            ▶ et enregistre le sur le Bureau.

                            ▶ désactive tes protections et ferme toutes tes applications(antivirus, parefeu, garde en temps réel de l'antispyware)

                            Voici le tutoriel officiel de Bleeping Computer pour savoir l utiliser :

                            https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

                            ensuite envois le rapport et refais un nouveau rapport hijackthis stp
                            1. ça a pas été facile, car, au moment d'établir le rapport, ça m'a fait un plantage et j'ai du éteindre l'ordi par le bouton M/A, mais, apres redemarage, tout s'est bien passé, voici le rapport....

                              ensuite, que dois je faire?

                              omboFix 08-09-20.05 - gilles 2008-09-22 12:36:48.2 - NTFSx86
                              Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.1095 [GMT 5:00]
                              Lancé depuis: C:\Documents and Settings\gilles\Bureau\ComboFix.exe

                              [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
                              .

                              (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                              .
                              .
                              ---- Previous Run -------
                              .
                              C:\autorun.inf
                              C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
                              C:\Documents and Settings\gilles\AUTORUN.INF
                              C:\Documents and Settings\gilles\Menu D‚marrer\NOCREDITCARD.lnk
                              C:\WINDOWS\system32\drivers\npf.sys
                              C:\WINDOWS\system32\kdspk.exe
                              C:\WINDOWS\system32\packet.dll
                              C:\WINDOWS\system32\pthreadVC.dll
                              C:\WINDOWS\system32\wanpacket.dll
                              C:\WINDOWS\system32\wpcap.dll

                              .
                              ((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
                              .

                              -------\Service_NPF

                              ((((((((((((((((((((((((((((( Fichiers créés du 2008-08-22 au 2008-09-22 ))))))))))))))))))))))))))))))))))))
                              .

                              2008-09-22 11:30 . 2008-09-22 11:30 <REP> d-------- C:\Program Files\Trend Micro
                              2008-09-22 10:54 . 2008-09-22 10:54 <REP> d-------- C:\Program Files\Lavasoft
                              2008-09-22 10:53 . 2008-09-22 10:53 <REP> d-------- C:\Program Files\Securitoo
                              2008-09-22 10:53 . 2008-09-22 10:53 <REP> d-------- C:\Program Files\SAGEM
                              2008-09-22 10:53 . 2008-09-22 10:53 <REP> d-------- C:\Documents and Settings\gilles\Application Data\InstallShield
                              2008-09-22 10:13 . 2008-09-22 10:13 <REP> d-------- C:\Program Files\Avira
                              2008-09-22 10:13 . 2008-09-22 10:13 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
                              2008-09-22 02:22 . 2008-09-22 10:13 <REP> d-------- C:\Program Files\Avira(2)
                              2008-09-22 02:22 . 2008-09-22 10:13 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira(2)
                              2008-09-19 16:20 . 2008-09-21 21:05 <REP> d-------- C:\WINDOWS\system32\NtmsData
                              2008-09-19 11:53 . 2008-09-22 10:37 <REP> d-------- C:\Program Files\Lavasoft(3)
                              2008-09-14 22:33 . 2008-09-14 22:33 <REP> d-------- C:\Documents and Settings\gilles\Application Data\Malwarebytes
                              2008-09-14 22:32 . 2008-09-22 10:54 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
                              2008-09-14 22:32 . 2008-09-14 22:32 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
                              2008-09-14 19:52 . 2008-09-14 19:52 <REP> d-------- C:\Program Files\Lavasoft(2)
                              2008-09-14 19:52 . 2008-09-22 10:54 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
                              2008-09-07 12:45 . 2008-09-07 12:45 56 --ah----- C:\WINDOWS\system32\ezsidmv.dat
                              2008-09-07 12:43 . 2008-09-07 12:43 <REP> d-------- C:\Program Files\Skype

                              .
                              (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                              .
                              2008-09-22 07:35 --------- d-----w C:\Documents and Settings\gilles\Application Data\OpenOffice.org2
                              2008-09-22 06:08 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater
                              2008-09-22 06:07 --------- d-----w C:\Program Files\Mozilla Thunderbird
                              2008-09-22 05:55 --------- d-----w C:\Program Files\YesMessenger
                              2008-09-22 05:53 --------- d-----w C:\Program Files\Spybot - Search & Destroy
                              2008-09-22 05:53 --------- d-----w C:\Program Files\RegCleaner
                              2008-09-22 05:53 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
                              2008-09-22 05:49 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
                              2008-09-22 05:37 --------- d-----w C:\Documents and Settings\gilles\Application Data\Lavasoft
                              2008-09-22 05:30 --------- d-----w C:\Program Files\SuperCopier
                              2008-09-22 05:17 --------- d-----w C:\Documents and Settings\gilles\Application Data\Skype
                              2008-09-22 04:52 --------- d-----w C:\Documents and Settings\gilles\Application Data\skypePM
                              2008-09-20 20:48 --------- d-----w C:\Program Files\TrackMania Nations ESWC
                              2008-09-15 13:20 3,166 ----a-w C:\Documents and Settings\gilles\Application Data\wklnhst.dat
                              2008-09-14 19:48 49,973 -c--a-w C:\report.zip
                              2008-09-14 18:17 --------- d--h--w C:\Program Files\InstallShield Installation Information
                              2008-09-07 07:42 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skype
                              2008-08-30 04:27 --------- d-----w C:\Documents and Settings\gilles\Application Data\gtk-2.0
                              2008-08-02 18:05 --------- d-----w C:\Program Files\Photo Viewer(2)
                              2008-07-18 17:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll
                              2008-07-18 17:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe
                              2008-07-18 17:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll
                              2008-07-18 17:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll
                              2008-07-18 17:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll
                              2008-07-18 17:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll
                              2008-07-18 17:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll
                              2008-07-18 17:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll
                              2008-07-18 17:07 270,880 ----a-w C:\WINDOWS\system32\mucltui.dll
                              2008-07-18 17:07 210,976 ----a-w C:\WINDOWS\system32\muweb.dll
                              2008-07-07 20:18 253,952 ----a-w C:\WINDOWS\system32\es.dll
                              2008-06-24 16:23 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
                              2008-06-23 16:28 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
                              2008-04-21 18:35 682,075,481 ----a-w C:\Program Files\nfs_carbon_demo_eu_JeuxVideo.com_13004.zip
                              2007-11-26 17:19 32 ----a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat
                              2006-10-25 09:17 720,896 ----a-w C:\Documents and Settings\gilles\EAInstall.dll
                              2006-10-25 09:17 7,577,600 ----a-w C:\Documents and Settings\gilles\nfsc_demo.exe
                              2006-10-25 09:17 625,035,295 ----a-w C:\Documents and Settings\gilles\[u]0[/u]compressed.zip
                              2006-10-25 09:17 569,344 ----a-w C:\Documents and Settings\gilles\AutoRun.exe
                              2006-10-25 09:17 53,248 ----a-w C:\Documents and Settings\gilles\nfs_inst.exe
                              2006-10-25 09:17 528,384 ----a-w C:\Documents and Settings\gilles\AutoRunGUI.dll
                              2006-10-25 09:17 499,712 ----a-w C:\Documents and Settings\gilles\msvcp71.dll
                              2006-10-25 09:17 380,928 ----a-w C:\Documents and Settings\gilles\server.dll
                              2006-10-25 09:17 348,160 ----a-w C:\Documents and Settings\gilles\msvcr71.dll
                              2006-10-25 09:17 258 ----a-w C:\Documents and Settings\gilles\dat.bin
                              2006-10-25 09:17 253,952 ----a-w C:\Documents and Settings\gilles\eauninstall.exe
                              2006-10-25 09:17 22,016 ----a-w C:\Documents and Settings\gilles\setup.exe
                              2006-07-09 14:28 14,912 ----a-w C:\Documents and Settings\gilles\Application Data\ViewerApp.dat
                              .

                              ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
                              .
                              .
                              *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
                              REGEDIT4

                              [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                              "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 15360]
                              "LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-03-23 32768]

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                              "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-03-22 339968]
                              "Tvs"="C:\Program Files\TOSHIBA\Tvs\TvsTray.exe" [2005-04-05 73728]
                              "Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2003-10-30 192512]
                              "CeEKEY"="C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe" [2005-04-28 675840]
                              "TPNF"="C:\Program Files\TOSHIBA\TouchPad\TPTray.exe" [2004-11-30 53248]
                              "SmoothView"="C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe" [2005-05-17 118784]
                              "HWSetup"="C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe" [2004-12-24 28672]
                              "SVPWUTIL"="C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe" [2005-02-26 65536]
                              "AdobeVersionCue"="C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe" [2003-10-22 1732608]
                              "HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb12.exe" [2005-03-08 176128]
                              "WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2006-08-22 35328]
                              "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-11-06 185896]
                              "Regen"="C:\Program Files\OnSpec\All Users\Regen\Regen.exe" [2006-09-09 8216576]
                              "Easy-PrintToolBox"="C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE" [2004-01-14 409600]
                              "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-05-02 155648]
                              "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
                              "AGRSMMSG"="AGRSMMSG.exe" [2005-04-12 C:\WINDOWS\agrsmmsg.exe]
                              "TCtryIOHook"="TCtrlIOHook.exe" [2005-04-20 C:\WINDOWS\system32\TCtrlIOHook.exe]
                              "TPSMain"="TPSMain.exe" [2005-01-21 C:\WINDOWS\system32\TPSMain.exe]
                              "TFncKy"="TFncKy.exe" [BU]
                              "Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-01-23 C:\WINDOWS\KHALMNPR.Exe]
                              "atwtusb"="atwtusb.exe" [2005-09-21 C:\WINDOWS\system32\ATWTUSB.EXE]

                              [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
                              "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 15360]
                              "Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2008-02-26 443968]

                              C:\Documents and Settings\gilles\Menu D‚marrer\Programmes\D‚marrage\
                              OpenOffice.org 2.0.lnk - C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe [2006-07-14 393216]
                              Outil de d‚tection de support Picture Motion Browser.lnk - C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe [2007-06-13 200704]
                              Outil de notification Live Search.lnk - C:\Documents and Settings\gilles\Application Data\Microsoft\Live Search\Notification-LiveSearch.exe [2008-04-26 152616]
                              YesMessenger.lnk - C:\Program Files\YesMessenger\YesMessenger.exe [2008-04-27 2736128]

                              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
                              @=""

                              [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk]
                              path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk
                              backup=C:\WINDOWS\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup

                              [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^WinZip Quick Pick.lnk]
                              path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\WinZip Quick Pick.lnk
                              backup=C:\WINDOWS\pss\WinZip Quick Pick.lnkCommon Startup

                              [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility]
                              --a------ 2002-03-28 14:19 188416 C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe

                              [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
                              --a------ 2001-07-09 09:50 155648 C:\WINDOWS\system32\NeroCheck.exe

                              [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PadTouch]
                              --a------ 2004-11-17 13:56 1077327 C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe

                              [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
                              --a------ 2006-05-02 22:59 155648 C:\Program Files\QuickTime\qttask.exe

                              [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TOSHIBA Accessibility]
                              --a------ 2005-03-08 18:27 24576 C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe

                              [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Hardware Abstraction Layer]
                              --a------ 2007-01-23 15:44 101136 C:\WINDOWS\KHALMNPR.Exe

                              [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zooming]
                              --a------ 2004-07-14 19:07 24576 C:\WINDOWS\system32\ZoomingHook.exe

                              [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                              "%windir%\\system32\\sessmgr.exe"=
                              "C:\\Program Files\\TrackMania Nations ESWC\\TmNationsESWC.exe"=
                              "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
                              "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
                              "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
                              "C:\\Program Files\\MSN Messenger\\livecall.exe"=
                              "C:\\wamp\\bin\\apache\\apache2.2.8\\bin\\httpd.exe"=

                              [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
                              "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

                              R0 Klpf;Klpf;C:\WINDOWS\system32\Drivers\Klpf.sys [2003-08-19 27731]
                              R0 Klpid;Klpid;C:\WINDOWS\system32\Drivers\klpid.sys [2003-08-19 32758]
                              R2 RGFILERW;RGFILERW;C:\WINDOWS\system32\Drivers\RGFILERW.SYS [2005-10-15 3984]
                              S1 aiptektp;HyperPen;C:\WINDOWS\system32\DRIVERS\aiptektp.sys [2004-07-07 22272]
                              S2 P1C1394;Phase One 1394 Camera Driver;C:\WINDOWS\system32\Drivers\p1c1394.sys [ ]
                              S3 Boonty Games;Boonty Games;C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe [2007-01-28 69120]
                              S3 wampapache;wampapache;c:\wamp\bin\apache\apache2.2.8\bin\httpd.exe [2008-01-18 24635]
                              S3 wampmysqld;wampmysqld;c:\wamp\bin\mysql\mysql5.0.51a\bin\mysqld-nt.exe wampmysqld [ ]

                              [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
                              \Shell\AutoRun\command - E:\OnSpcLCK.exe

                              [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
                              \Shell\AutoRun\command - aub0wb8.cmd
                              \Shell\explore\Command - aub0wb8.cmd
                              \Shell\open\Command - aub0wb8.cmd

                              [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{089b91c8-060a-11dc-a761-00166f28183c}]
                              \Shell\AutoRun\command - E:\OnSpcLCK.exe

                              [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{089b91c9-060a-11dc-a761-00166f28183c}]
                              \Shell\AutoRun\command - aub0wb8.cmd
                              \Shell\explore\Command - aub0wb8.cmd
                              \Shell\open\Command - aub0wb8.cmd

                              [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{4de7e98a-396a-11dd-a8ee-00166f28183c}]
                              \Shell\AutoRun\command - G:\aub0wb8.cmd
                              \Shell\explore\Command - G:\aub0wb8.cmd
                              \Shell\open\Command - G:\aub0wb8.cmd

                              [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{844c41e4-19a8-11dc-a781-00166f28183c}]
                              \Shell\AutoRun\command - G:\aub0wb8.cmd
                              \Shell\explore\Command - G:\aub0wb8.cmd
                              \Shell\open\Command - G:\aub0wb8.cmd
                              .
                              Contenu du dossier 'Tâches planifiées'
                              .
                              - - - - ORPHELINS SUPPRIMES - - - -

                              HKLM-Run-Adobe Photo Downloader - C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
                              MSConfigStartUp-Phase One Media Reader - C:\PROGRA~1\PHASEO~1\CAPTUR~1\DCIMImp.exe

                              .
                              ------- Examen supplémentaire -------
                              .
                              FireFox -: Profile - C:\Documents and Settings\gilles\Application Data\Mozilla\Firefox\Profiles\7cvwl2m8.default\
                              FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.msn.fr/
                              FF -: plugin - C:\Documents and Settings\gilles\Application Data\Mozilla\plugins\npPxPlay.dll
                              FF -: plugin - C:\Program Files\Adobe\Acrobat 7.0\Reader\browser\nppdf32.dll
                              FF -: plugin - C:\Program Files\DivX\DivX Content Uploader\npUpload.dll
                              FF -: plugin - C:\Program Files\Google\Google Updater\2.2.1111.1511\npCIDetect11.dll
                              FF -: plugin - C:\Program Files\Java\jre1.5.0_01\bin\NPJava11.dll
                              FF -: plugin - C:\Program Files\Java\jre1.5.0_01\bin\NPJava12.dll
                              FF -: plugin - C:\Program Files\Java\jre1.5.0_01\bin\NPJava13.dll
                              FF -: plugin - C:\Program Files\Java\jre1.5.0_01\bin\NPJava14.dll
                              FF -: plugin - C:\Program Files\Java\jre1.5.0_01\bin\NPJava32.dll
                              FF -: plugin - C:\Program Files\Java\jre1.5.0_01\bin\NPJPI150_01.dll
                              FF -: plugin - C:\Program Files\Java\jre1.5.0_01\bin\NPOJI610.dll
                              .

                              **************************************************************************

                              catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                              Rootkit scan 2008-09-22 12:40:15
                              Windows 5.1.2600 Service Pack 2 NTFS

                              Recherche de processus cachés ...

                              Recherche d'éléments en démarrage automatique cachés ...

                              Recherche de fichiers cachés ...

                              Scan terminé avec succès
                              Fichiers cachés: 0

                              **************************************************************************
                              .
                              Heure de fin: 2008-09-22 12:41:51
                              ComboFix-quarantined-files.txt 2008-09-22 07:41:28

                              Avant-CF: 21,617,356,800 octets libres
                              Après-CF: 21,608,374,272 octets libres

                              232
                              • 1
                              • 2
                              • 3