ComboFix 13-02-26.01 - toto 27/02/2013 13:27:20.1.4 - x64 Microsoft Windows 7 Professionnel 6.1.7601.1.1252.33.1036.18.2924.1618 [GMT 1:00] Lancé depuis: c:\users\toto\Downloads\ComboFix.exe FW: Firewall personnel FortiClient *Enabled* {006D9983-6839-71D6-14E6-D7AD47ECD682} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\esupport\eDriver\Software\ASUS\MultiFrame\XP32_Vista32_Vista64_Win7_32_Win7_64_1.0.0021\Desktop_.ini c:\programdata\FullRemove.exe c:\users\toto\AppData\Local\uninst.tmp c:\windows\msvcr71.dll . . ((((((((((((((((((((((((((((( Fichiers créés du 2013-01-27 au 2013-02-27 )))))))))))))))))))))))))))))))))))) . . 2013-02-27 12:56 . 2013-02-27 12:56 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-02-27 12:56 . 2013-02-27 12:56 -------- d-----w- c:\users\administrateur\AppData\Local\temp 2013-02-27 12:56 . 2013-02-27 12:56 -------- d-----w- c:\users\sroux\AppData\Local\temp 2013-02-27 12:56 . 2013-02-27 12:56 -------- d-----w- c:\users\claude\AppData\Local\temp 2013-02-27 12:56 . 2013-02-27 12:56 -------- d-----w- c:\users\cgeiler\AppData\Local\temp 2013-02-27 12:56 . 2013-02-27 12:56 -------- d-----w- c:\users\adminirsl\AppData\Local\temp 2013-02-27 12:56 . 2013-02-27 12:56 -------- d-----w- c:\users\Admin\AppData\Local\temp 2013-02-26 08:27 . 2013-02-08 00:28 9162192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{EF445A92-97B4-4656-85CD-F0891AE0C6A7}\mpengine.dll 2013-02-25 15:35 . 2013-02-25 15:35 -------- d-----w- c:\program files (x86)\Common Files\Skype 2013-02-25 15:35 . 2013-02-25 15:35 -------- d-----r- c:\program files (x86)\Skype 2013-02-23 23:59 . 2013-02-23 23:59 -------- d-----w- c:\users\toto\AppData\Local\PCTV Systems 2013-02-23 23:30 . 2013-02-23 23:32 -------- d-----w- c:\program files (x86)\Common Files\PCTV Systems 2013-02-23 23:30 . 2013-02-23 23:30 -------- d-----w- c:\program files (x86)\PCTV Systems 2013-02-23 23:28 . 2013-02-24 10:39 -------- d-----w- c:\programdata\PCTV Systems 2013-02-23 23:27 . 2013-02-23 23:27 -------- d-----w- c:\program files (x86)\DivX 2013-02-15 22:04 . 2013-02-15 22:04 208448 ----a-w- c:\program files (x86)\Mozilla Firefox\plugins\nppdf32.dll 2013-02-14 01:03 . 2013-01-08 22:01 768000 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll 2013-02-14 01:03 . 2013-01-09 01:10 996352 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll 2013-02-13 08:46 . 2013-01-05 05:53 5553512 ----a-w- c:\windows\system32\ntoskrnl.exe 2013-02-13 08:46 . 2013-01-05 05:00 3967848 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe 2013-02-13 08:46 . 2013-01-05 05:00 3913064 ----a-w- c:\windows\SysWow64\ntoskrnl.exe 2013-02-13 08:46 . 2013-01-04 03:26 3153408 ----a-w- c:\windows\system32\win32k.sys 2013-02-13 08:45 . 2013-01-04 05:46 215040 ----a-w- c:\windows\system32\winsrv.dll 2013-02-13 08:45 . 2013-01-04 02:47 25600 ----a-w- c:\windows\SysWow64\setup16.exe 2013-02-13 08:45 . 2013-01-04 02:47 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll 2013-02-13 08:45 . 2013-01-04 04:51 5120 ----a-w- c:\windows\SysWow64\wow32.dll 2013-02-13 08:45 . 2013-01-04 02:47 7680 ----a-w- c:\windows\SysWow64\instnm.exe 2013-02-13 08:44 . 2013-01-04 02:47 2048 ----a-w- c:\windows\SysWow64\user.exe 2013-02-13 08:44 . 2013-01-03 06:00 1913192 ----a-w- c:\windows\system32\drivers\tcpip.sys 2013-02-13 08:44 . 2013-01-03 06:00 288088 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS 2013-02-06 17:06 . 2013-02-06 17:06 -------- d-----w- c:\programdata\PDF Architect 2013-02-06 15:45 . 2013-02-06 15:45 -------- d-----w- c:\users\toto\AppData\Roaming\pdfforge 2013-02-06 15:44 . 2013-01-11 10:39 103936 ----a-w- c:\windows\system32\pdfcmon.dll 2013-02-06 15:44 . 2012-05-05 09:54 662288 ----a-w- c:\windows\SysWow64\MSCOMCT2.OCX 2013-02-06 15:44 . 2012-05-05 09:54 137000 ----a-w- c:\windows\SysWow64\MSMAPI32.OCX 2013-02-06 15:44 . 1998-07-13 00:08 119568 ----a-w- c:\windows\SysWow64\VB6FR.DLL 2013-02-06 15:44 . 1998-07-13 00:08 59904 ----a-w- c:\windows\SysWow64\MSCC2FR.DLL 2013-02-06 15:44 . 1998-07-13 00:08 141312 ----a-w- c:\windows\SysWow64\MSCMCFR.DLL 2013-02-06 15:44 . 2012-05-05 09:54 23552 ----a-w- c:\windows\SysWow64\MSMPIDE.DLL 2013-02-06 15:44 . 2013-02-06 15:58 -------- d-----w- c:\program files (x86)\PDFCreator 2013-02-06 14:40 . 2012-08-22 18:12 950128 ----a-w- c:\windows\system32\drivers\ndis.sys 2013-02-06 14:40 . 2012-07-04 20:26 41472 ----a-w- c:\windows\system32\drivers\RNDISMP.sys 2013-02-06 14:40 . 2012-10-09 18:17 226816 ----a-w- c:\windows\system32\dhcpcore6.dll 2013-02-06 14:40 . 2012-10-09 17:40 193536 ----a-w- c:\windows\SysWow64\dhcpcore6.dll 2013-02-06 14:40 . 2012-10-09 18:17 55296 ----a-w- c:\windows\system32\dhcpcsvc6.dll 2013-02-06 14:40 . 2012-10-09 17:40 44032 ----a-w- c:\windows\SysWow64\dhcpcsvc6.dll 2013-02-06 14:28 . 2012-11-23 03:13 68608 ----a-w- c:\windows\system32\taskhost.exe 2013-02-05 22:52 . 2013-02-05 22:52 -------- d-----w- c:\windows\system32\SPReview 2013-02-05 22:49 . 2013-02-05 22:49 -------- d-----w- c:\windows\system32\EventProviders 2013-02-04 16:56 . 2013-02-04 16:57 -------- d-----w- c:\program files (x86)\BurnAware Free 2013-02-04 16:41 . 2013-02-04 22:24 -------- d-----w- c:\users\toto\AppData\Roaming\uTorrent 2013-02-04 15:57 . 2013-02-04 15:58 -------- d-----w- c:\program files\Elantech 2013-02-04 15:56 . 2010-10-12 15:44 4674952 ----a-w- c:\windows\system32\ETDUI.cpl 2013-02-04 12:41 . 2013-01-17 00:28 273840 ------w- c:\windows\system32\MpSigStub.exe 2013-02-04 12:32 . 2009-03-16 13:18 235352 ----a-w- c:\windows\SysWow64\xactengine3_4.dll 2013-02-04 12:31 . 2007-07-19 23:57 411496 ----a-w- c:\windows\system32\xactengine2_9.dll 2013-02-04 12:30 . 2006-02-03 07:43 3830992 ----a-w- c:\windows\system32\d3dx9_29.dll 2013-02-04 12:30 . 2005-12-05 17:09 3815120 ----a-w- c:\windows\system32\d3dx9_28.dll 2013-02-04 12:30 . 2005-07-22 18:59 3807440 ----a-w- c:\windows\system32\d3dx9_27.dll 2013-02-04 12:30 . 2005-05-26 14:34 3767504 ----a-w- c:\windows\system32\d3dx9_26.dll 2013-02-04 12:30 . 2005-05-26 14:34 2297552 ----a-w- c:\windows\SysWow64\d3dx9_26.dll 2013-02-04 12:30 . 2005-03-18 16:19 3823312 ----a-w- c:\windows\system32\d3dx9_25.dll 2013-02-04 12:30 . 2005-02-05 18:45 3544272 ----a-w- c:\windows\system32\d3dx9_24.dll 2013-02-04 11:30 . 2013-02-04 11:30 -------- d-----w- c:\program files (x86)\Common Files\Intel Corporation 2013-02-04 04:38 . 2013-02-04 04:38 -------- d-----w- c:\windows\SysWow64\wbem\en-US 2013-02-04 04:38 . 2013-02-04 04:38 -------- d-----w- c:\windows\system32\wbem\en-US 2013-02-04 02:04 . 2013-02-04 02:04 89088 ----a-w- c:\windows\system32\ie4uinit.exe 2013-02-04 02:04 . 2013-02-04 02:04 82432 ----a-w- c:\windows\system32\icardie.dll 2013-02-04 02:04 . 2013-02-04 02:04 534528 ----a-w- c:\windows\system32\ieapfltr.dll 2013-02-04 02:04 . 2013-02-04 02:04 39936 ----a-w- c:\windows\system32\iernonce.dll 2013-02-04 02:04 . 2013-02-04 02:04 85504 ----a-w- c:\windows\system32\iesetup.dll 2013-02-04 02:04 . 2013-02-04 02:04 455680 ----a-w- c:\program files\Internet Explorer\networkinspection.dll 2013-02-04 02:04 . 2013-02-04 02:04 403248 ----a-w- c:\windows\system32\iedkcs32.dll 2013-02-04 02:04 . 2013-02-04 02:04 30720 ----a-w- c:\windows\system32\licmgr10.dll 2013-02-04 02:04 . 2013-02-04 02:04 249344 ----a-w- c:\windows\system32\webcheck.dll 2013-02-04 02:04 . 2013-02-04 02:04 103936 ----a-w- c:\windows\system32\inseng.dll 2013-02-04 02:04 . 2013-02-04 02:04 165888 ----a-w- c:\windows\system32\iexpress.exe 2013-02-04 02:04 . 2013-02-04 02:04 160256 ----a-w- c:\windows\system32\wextract.exe 2013-02-04 02:04 . 2013-02-04 02:04 66048 ----a-w- c:\program files\Internet Explorer\JSProfilerCore.dll 2013-02-03 15:26 . 2011-02-19 12:04 902656 ----a-w- c:\windows\system32\d2d1.dll 2013-02-03 15:26 . 2011-02-19 06:30 739840 ----a-w- c:\windows\SysWow64\d2d1.dll 2013-02-03 15:26 . 2011-02-19 12:05 1139200 ----a-w- c:\windows\system32\FntCache.dll 2013-02-03 13:34 . 2010-11-05 01:57 48976 ----a-w- c:\windows\system32\netfxperf.dll 2013-02-03 13:34 . 2010-11-05 01:57 1942856 ----a-w- c:\windows\system32\dfshim.dll 2013-02-03 13:34 . 2010-11-05 01:58 1130824 ----a-w- c:\windows\SysWow64\dfshim.dll 2013-02-03 13:32 . 2010-11-20 13:25 3957760 ----a-w- c:\windows\system32\WinSAT.exe 2013-02-03 13:31 . 2010-11-20 13:26 584192 ----a-w- c:\windows\system32\ipsmsnap.dll 2013-02-03 13:30 . 2010-11-20 13:25 726528 ----a-w- c:\windows\system32\AuxiliaryDisplayCpl.dll 2013-02-03 13:29 . 2010-11-20 13:34 46464 ----a-w- c:\windows\system32\drivers\vmstorfl.sys 2013-02-03 13:28 . 2010-11-20 13:27 24064 ----a-w- c:\windows\system32\schedcli.dll 2013-02-03 13:27 . 2010-11-20 12:21 189952 ----a-w- c:\windows\SysWow64\sqmapi.dll 2013-02-03 13:27 . 2010-11-20 12:21 363008 ----a-w- c:\windows\SysWow64\wbemcomn.dll 2013-02-03 13:27 . 2010-11-20 12:21 189952 ----a-w- c:\program files (x86)\Windows Portable Devices\sqmapi.dll 2013-02-03 13:27 . 2010-11-20 12:19 606208 ----a-w- c:\windows\SysWow64\wbem\fastprox.dll 2013-02-03 13:21 . 2010-11-20 13:27 244736 ----a-w- c:\program files\Windows Portable Devices\sqmapi.dll 2013-02-03 13:21 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll 2013-02-03 13:21 . 2010-11-20 13:27 244736 ----a-w- c:\windows\system32\sqmapi.dll 2013-02-03 02:36 . 2013-02-03 02:36 -------- d-----w- c:\users\toto\AppData\Roaming\Intel Corporation 2013-02-03 02:15 . 2013-02-03 02:15 -------- d-----w- c:\program files\DIFX 2013-02-03 02:15 . 2010-02-03 06:03 249736 ----a-w- c:\windows\ETDUninst.dll 2013-02-03 02:12 . 2012-09-01 17:01 647736 ----a-w- c:\windows\system32\drivers\iaStorA.sys 2013-02-03 02:12 . 2012-09-01 17:01 28216 ----a-w- c:\windows\system32\drivers\iaStorF.sys 2013-02-03 02:12 . 2013-02-03 02:12 -------- d-----w- c:\users\toto\AppData\Roaming\InstallShield 2013-02-03 01:32 . 2013-02-03 01:32 -------- d-----w- c:\programdata\Intel 2013-02-03 01:11 . 2013-02-03 01:11 -------- d-----w- c:\program files (x86)\Qualcomm Atheros 2013-02-03 01:09 . 2013-02-03 01:09 -------- d-----w- c:\windows\Options 2013-02-03 01:09 . 2012-11-22 19:51 3831808 ----a-w- c:\windows\system32\drivers\athrx.sys 2013-02-03 01:09 . 2012-11-22 19:51 3831808 ------w- c:\windows\system32\athrx.sys 2013-02-03 01:09 . 2013-02-03 01:11 -------- d-----w- c:\programdata\Qualcomm Atheros 2013-02-03 01:05 . 2013-02-03 01:05 -------- d-----w- c:\windows\SysWow64\SDA 2013-02-03 01:05 . 2012-10-15 15:32 175928 ----a-w- c:\windows\system32\drivers\jmcr.sys 2013-02-03 01:05 . 2010-07-27 09:08 203352 ----a-w- c:\windows\SysWow64\jmcricon.dll 2013-02-03 01:05 . 2010-07-27 09:08 203352 ----a-w- c:\windows\system32\jmcricon.dll 2013-02-03 01:02 . 2011-11-17 16:11 145424 ----a-w- c:\windows\system32\drivers\JME.sys 2013-02-03 00:56 . 2013-02-03 00:56 -------- d-----w- c:\program files (x86)\SystemRequirementsLab 2013-02-03 00:56 . 2013-02-03 00:56 -------- d-----w- c:\users\toto\AppData\Roaming\SystemRequirementsLab 2013-02-03 00:56 . 2013-02-03 00:56 -------- d-----w- c:\windows\Sun 2013-02-03 00:56 . 2013-02-03 00:55 861088 ----a-w- c:\windows\SysWow64\npDeployJava1.dll 2013-02-03 00:56 . 2013-02-03 00:55 782240 ----a-w- c:\windows\SysWow64\deployJava1.dll 2013-02-03 00:48 . 2013-02-03 00:48 -------- d-----w- C:\QUARANTINE 2013-02-02 18:18 . 2013-02-03 01:48 -------- d-----w- c:\programdata\DriverGenius 2013-02-02 18:16 . 2013-02-02 18:16 -------- d-----w- c:\program files\CCleaner 2013-02-01 10:12 . 2013-02-01 14:41 -------- d-----w- c:\programdata\Spybot - Search & Destroy 2013-02-01 10:11 . 2013-02-01 10:11 -------- d-----w- c:\users\toto\AppData\Local\Programs . . . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2013-02-14 01:11 . 2012-10-25 11:59 70004024 ----a-w- c:\windows\system32\MRT.exe 2013-02-05 23:41 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll 2013-02-05 23:40 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll 2013-01-09 13:52 . 2011-11-13 16:29 1070152 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX 2013-01-07 22:46 . 2013-01-07 22:46 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-01-07 22:46 . 2013-01-07 22:46 697272 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-01-04 04:43 . 2013-02-13 08:45 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2012-12-16 17:11 . 2012-12-21 12:14 46080 ----a-w- c:\windows\system32\atmlib.dll 2012-12-16 14:45 . 2012-12-21 12:14 367616 ----a-w- c:\windows\system32\atmfd.dll 2012-12-16 14:13 . 2012-12-21 12:14 295424 ----a-w- c:\windows\SysWow64\atmfd.dll 2012-12-16 14:13 . 2012-12-21 12:14 34304 ----a-w- c:\windows\SysWow64\atmlib.dll 2012-12-12 21:37 . 2012-12-12 21:37 4472832 ----a-w- c:\windows\SysWow64\GPhotos.scr 2012-12-07 13:20 . 2013-01-09 08:44 441856 ----a-w- c:\windows\system32\Wpc.dll 2012-12-07 13:15 . 2013-01-09 08:44 2746368 ----a-w- c:\windows\system32\gameux.dll 2012-12-07 12:26 . 2013-01-09 08:44 308736 ----a-w- c:\windows\SysWow64\Wpc.dll 2012-12-07 12:20 . 2013-01-09 08:44 2576384 ----a-w- c:\windows\SysWow64\gameux.dll 2012-12-07 11:20 . 2013-01-09 08:44 30720 ----a-w- c:\windows\system32\usk.rs 2012-12-07 11:20 . 2013-01-09 08:44 43520 ----a-w- c:\windows\system32\csrr.rs 2012-12-07 11:20 . 2013-01-09 08:44 23552 ----a-w- c:\windows\system32\oflc.rs 2012-12-07 11:20 . 2013-01-09 08:44 45568 ----a-w- c:\windows\system32\oflc-nz.rs 2012-12-07 11:20 . 2013-01-09 08:44 44544 ----a-w- c:\windows\system32\pegibbfc.rs 2012-12-07 11:20 . 2013-01-09 08:44 20480 ----a-w- c:\windows\system32\pegi-fi.rs 2012-12-07 11:20 . 2013-01-09 08:44 20480 ----a-w- c:\windows\system32\pegi-pt.rs 2012-12-07 11:19 . 2013-01-09 08:44 20480 ----a-w- c:\windows\system32\pegi.rs 2012-12-07 11:19 . 2013-01-09 08:44 46592 ----a-w- c:\windows\system32\fpb.rs 2012-12-07 11:19 . 2013-01-09 08:44 40960 ----a-w- c:\windows\system32\cob-au.rs 2012-12-07 11:19 . 2013-01-09 08:44 21504 ----a-w- c:\windows\system32\grb.rs 2012-12-07 11:19 . 2013-01-09 08:44 15360 ----a-w- c:\windows\system32\djctq.rs 2012-12-07 11:19 . 2013-01-09 08:44 55296 ----a-w- c:\windows\system32\cero.rs 2012-12-07 11:19 . 2013-01-09 08:44 51712 ----a-w- c:\windows\system32\esrb.rs 2012-12-07 10:46 . 2013-01-09 08:44 43520 ----a-w- c:\windows\SysWow64\csrr.rs 2012-12-07 10:46 . 2013-01-09 08:44 30720 ----a-w- c:\windows\SysWow64\usk.rs 2012-12-07 10:46 . 2013-01-09 08:44 45568 ----a-w- c:\windows\SysWow64\oflc-nz.rs 2012-12-07 10:46 . 2013-01-09 08:44 44544 ----a-w- c:\windows\SysWow64\pegibbfc.rs 2012-12-07 10:46 . 2013-01-09 08:44 20480 ----a-w- c:\windows\SysWow64\pegi-pt.rs 2012-12-07 10:46 . 2013-01-09 08:44 23552 ----a-w- c:\windows\SysWow64\oflc.rs 2012-12-07 10:46 . 2013-01-09 08:44 20480 ----a-w- c:\windows\SysWow64\pegi-fi.rs 2012-12-07 10:46 . 2013-01-09 08:44 46592 ----a-w- c:\windows\SysWow64\fpb.rs 2012-12-07 10:46 . 2013-01-09 08:44 20480 ----a-w- c:\windows\SysWow64\pegi.rs 2012-12-07 10:46 . 2013-01-09 08:44 21504 ----a-w- c:\windows\SysWow64\grb.rs 2012-12-07 10:46 . 2013-01-09 08:44 40960 ----a-w- c:\windows\SysWow64\cob-au.rs 2012-12-07 10:46 . 2013-01-09 08:44 15360 ----a-w- c:\windows\SysWow64\djctq.rs 2012-12-07 10:46 . 2013-01-09 08:44 55296 ----a-w- c:\windows\SysWow64\cero.rs 2012-12-07 10:46 . 2013-01-09 08:44 51712 ----a-w- c:\windows\SysWow64\esrb.rs 2012-11-30 05:45 . 2013-01-09 08:41 362496 ----a-w- c:\windows\system32\wow64win.dll 2012-11-30 05:45 . 2013-01-09 08:41 243200 ----a-w- c:\windows\system32\wow64.dll 2012-11-30 05:45 . 2013-01-09 08:41 13312 ----a-w- c:\windows\system32\wow64cpu.dll 2012-11-30 05:43 . 2013-01-09 08:41 16384 ----a-w- c:\windows\system32\ntvdm64.dll 2012-11-30 05:41 . 2013-01-09 08:41 424448 ----a-w- c:\windows\system32\KernelBase.dll 2012-11-30 05:41 . 2013-01-09 08:41 1161216 ----a-w- c:\windows\system32\kernel32.dll 2012-11-30 05:38 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-string-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 4096 ---ha-w- c:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 4096 ---ha-w- c:\windows\system32\api-ms-win-core-synch-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3584 ---ha-w- c:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-profile-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 4608 ---ha-w- c:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3584 ---ha-w- c:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3584 ---ha-w- c:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3584 ---ha-w- c:\windows\system32\api-ms-win-core-misc-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 5120 ---ha-w- c:\windows\system32\api-ms-win-core-file-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3584 ---ha-w- c:\windows\system32\api-ms-win-core-memory-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3584 ---ha-w- c:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3584 ---ha-w- c:\windows\system32\api-ms-win-core-heap-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-io-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-handle-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-debug-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 4096 ---ha-w- c:\windows\system32\api-ms-win-core-localization-l1-1-0.dll 2012-11-30 05:38 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\system32\api-ms-win-core-console-l1-1-0.dll 2012-11-30 04:53 . 2013-01-09 08:41 274944 ----a-w- c:\windows\SysWow64\KernelBase.dll 2012-11-30 04:45 . 2013-01-09 08:41 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-string-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 4608 ---ha-w- c:\windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-io-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 5120 ---ha-w- c:\windows\SysWow64\api-ms-win-core-file-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll 2012-11-30 04:45 . 2013-01-09 08:41 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll . . ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RemoTerm.exe"="c:\program files (x86)\Common Files\PCTV Systems\RemoTerm\RemoTerm.exe" [2010-02-24 220944] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2010-02-04 7350912] "ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-05-03 170624] "HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016] "McAfeeUpdaterUI"="c:\program files (x86)\McAfee\Common Framework\udaterui.exe" [2009-03-10 136512] "ShStatEXE"="c:\program files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE" [2008-09-29 124240] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352] "RIMBBLaunchAgent.exe"="c:\program files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe" [2011-11-02 90448] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-12-12 152544] "ASUS Screen Saver Protector"="c:\windows\AsScrPro.exe" [2010-11-01 3058304] "IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2012-09-12 56128] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Adobe Gamma Loader.lnk - c:\program files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2013-1-7 110592] Microsoft Office.lnk - c:\program files (x86)\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] Rechercher les mises à jour.lnk - c:\program files (x86)\Common Files\PCTV Systems\WebUpdater\WebUpdater.exe [2009-4-17 238864] SRS Premium Sound.lnk - c:\windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe [2010-11-1 156952] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux1"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\McAfeeEngineService] @="Service" . R1 Fortips;Fortips;c:\windows\system32\drivers\fortips.sys [2010-05-11 128104] R1 FortiRdr;FortiRdr;c:\windows\system32\drivers\FortiRdr2.sys [2010-05-11 43624] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536] R3 cpudrv64;cpudrv64;c:\program files (x86)\SystemRequirementsLab\cpudrv64.sys [2011-06-02 17864] R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2008-09-29 75800] R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392] R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2012-10-25 1255736] S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys [2012-09-01 647736] S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys [2012-09-01 28216] S1 fortiapd;fortiapd;c:\windows\system32\drivers\fortiapd.sys [2010-05-11 14952] S1 FortiPFW;FortiPFW;c:\windows\system32\drivers\FortiPFW2.sys [2010-05-11 113256] S1 FortiShield;FortiShield;c:\windows\system32\drivers\FortiShield.sys [2010-05-11 42088] S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416] S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-09-01 14904] S2 McAfeeEngineService;McAfee Engine Service;c:\program files (x86)\McAfee\VirusScan Enterprise\x64\engineserver.exe [2008-09-29 17920] S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2008-09-29 75656] S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-10-01 2314240] S3 azvusb;Virtual USB Hub;c:\windows\system32\DRIVERS\azvusb.sys [2009-08-24 54784] S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-09-08 129024] S3 Fortidrv2;Fortinet Fortinet Packet Filter Service;c:\windows\system32\DRIVERS\fortidrv.sys [2010-01-04 28264] S3 ft_vnic;Fortinet network virtual adapter;c:\windows\system32\DRIVERS\ftvnic.sys [2009-02-16 16928] S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344] S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [2010-02-26 158976] S3 IntcDAud;Son Intel(R) pour écrans;c:\windows\system32\DRIVERS\IntcDAud.sys [2011-08-23 317440] S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [2012-10-15 175928] S3 JME;JMicron Ethernet Adapter NDIS6.20 Driver (Amd64 Bits);c:\windows\system32\DRIVERS\JME.sys [2011-11-17 145424] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2013-02-23 19:32 1629648 ----a-w- c:\program files (x86)\Google\Chrome\Application\25.0.1364.97\Installer\chrmstp.exe . Contenu du dossier 'Tâches planifiées' . 2013-02-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-01 00:17] . 2013-02-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-11-01 00:17] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2009-11-19 307768] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-08-09 167744] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-08-09 392512] "Persistence"="c:\windows\system32\igfxpers.exe" [2012-08-09 417088] . ------- Examen supplémentaire ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://asus.msn.com uDefault_Search_URL = hxxp://www.google.com/ie uInternet Settings,ProxyServer = proxy.blabla:80 uInternet Settings,ProxyOverride = *.local uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: E&xporter vers Microsoft Excel - c:\progra~2\MICROS~1\Office10\EXCEL.EXE/3000 TCP: DhcpNameServer = 89.2.0.1 89.2.0.2 FF - ProfilePath - c:\users\toto\AppData\Roaming\Mozilla\Firefox\Profiles\qjyllwhm.default\ FF - ExtSQL: 2013-01-07 23:43; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\toto\AppData\Roaming\Mozilla\Firefox\Profiles\qjyllwhm.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi . - - - - ORPHELINS SUPPRIMES - - - - . Toolbar-Locked - (no file) Wow6432Node-HKLM-Run-CLMLServer - c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe Toolbar-Locked - (no file) HKLM-Run-ASUS WebStorage - c:\program files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe HKLM-Run-Setwallpaper - c:\programdata\SetWallpaper.cmd HKLM-Run-ETDWare - c:\program files (x86)\Elantech\ETDCtrl.exe AddRemove-Adobe Shockwave Player - c:\windows\system32\adobe\SHOCKW~1\UNWISE.EXE . . . --------------------- CLES DE REGISTRE BLOQUEES --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10d.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10d.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10d.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}] @Denied: (A 2) (Everyone) @="IFlashBroker3" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Heure de fin: 2013-02-27 21:45:21 ComboFix-quarantined-files.txt 2013-02-27 20:45 . Avant-CF: 11 752 656 896 octets libres Après-CF: 11 777 404 928 octets libres . - - End Of File - - 758EAC34952B00DE6AF596256B15DD9F