Votre question

spyware-secure, voyance, pop-up

Tags :
  • Spyware
  • Sécurité
Dernière réponse : dans Sécurité et virus
28 Mars 2007 21:42:28

Bonjour à tous,
j'ai des pop-up dés que je me connecte à internet:voyance, spyware secure, ...
Mon Pc tourne sous windowsXP avec IE et Firefox.
Zone-Alarm, Avast 4.7, AVG Anti spyware.
J'ai lancé hijackthis et voici le rapport:

Logfile of HijackThis v1.99.1
Scan saved at 17:18:24, on 28/03/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\CmWatch.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\FotoStation Easy\FotoStation Easy AutoLaunch.exe
C:\Program Files\Nikon\NkView4\NkVwMon.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\devldr32.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\PROGRA~1\INCRED~1\bin\IncMail.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Pierrot\Bureau\BLABLA.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.fr/spbasic.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.incredimail.com/page.asp?page=reg_success&la...
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [RecoverFromReboot] C:\WINDOWS\Temp\RecoverFromReboot.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [CmCardRun] C:\WINDOWS\system32\CmWatch.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: FotoStation Easy AutoLaunch.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: NkVwMon.exe.lnk = C:\Program Files\Nikon\NkView4\NkVwMon.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O16 - DPF: {127698E4-E730-4E5C-A2B1-21490A70C8A1} (CEnroll Class) - https://static.impots.gouv.fr/abos/securite/xenroll.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111401/housecall...
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

puis j'ai lancé Navilog1 avec l'option 1 et voici le rapport, que dois-je faire mainteant pour arreter ces foutus pop-up.

Search Navipromo version 1.0.8 commencé le 28/03/2007 à 17:32:49,38

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Poster ce rapport sur le forum pour le faire analyser !!!
!!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

Fix lancé depuis C:\Documents and Settings\Pierrot\Bureau
Mise a jour le 26.03.2007 a 08h00 by IL-MAFIOSO

Executé en mode normal

*** Recherche Programmes installes ***




*** Recherche dossiers dans C:\WINDOWS ***




*** Recherche dossiers dans C:\Program Files ***




*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




*** Recherche dossiers dans C:\Documents and Settings\Pierrot\Application Data ***



*** Recherche avec BlackLight Engine/F-secure ***
BlackLight Engine est un produit de F-secure, pour + d'infos :
http://www.f-secure.com/blacklight/blacklight_help.html

Fichier(s) caché(s) dans C:\WINDOWS\system32 :

c:\WINDOWS\system32\wuodbecilg.dat
C:\windows\system32\wuodbecilg.exe
c:\WINDOWS\system32\wuodbecilg_nav.dat
c:\WINDOWS\system32\wuodbecilg_navps.dat

Processus caché(s) dans C:\WINDOWS\system32 :

C:\windows\system32\wuodbecilg.exe


*** Recherche fichiers ***


C:\WINDOWS\pack.epk trouvé !
C:\WINDOWS\system32\nvs2.inf trouvé !


*** Recherche cles registre ***


Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs]



Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage]



Recherche Clé Magic Control

HKEY_CURRENT_USER\Software\Lanconfig trouvé !


*** Module de recherche complémentaire ***
(recherche fichiers spécifiques)

1)Recherche fichiers connus:


2)Recherche Heuristique :
*
C:\WINDOWS\system32\wuodbecilg.dat trouvé !
**
C:\WINDOWS\system32\wuodbecilg.dat trouvé !
***
****
C:\WINDOWS\system32\wuodbecilg_navps.dat trouvé !
*****
******
*******
********
C:\WINDOWS\system32\wuodbecilg.exe trouvé !


*** Analyse Terminé le 28/03/2007 à 17:48:04,88 ***


Merci de votre aide à venir
Pierrot

Autres pages sur : spyware secure voyance pop

a b 8 Sécurité
28 Mars 2007 21:44:00

Bonsoir,

Redémarre en mode sans échec

Double clique sur Navilog1.bat.
Suis les instructions. Choisis ensuite l'option 2 puis valide.
Laisse toi guider et réponds aux questions éventuelles.

Ton bureau va disparaître, c'est normal !

Patiente jusqu'à l'apparition de ce message :
"*** Nettoyage Termine le ..... ***"

Appuie sur une touche comme demandé, le Bloc-notes va s'ouvrir.
Sauvegarde le rapport de manière à le retrouver en mode normal.
Referme le Bloc-notes. Ton bureau va maintenant réapparaître.
Redémarre normalement puis poste le rapport sauvegardé auparavant (C:\cleannavi.txt)
Ainsi qu'un nouveau rapport Hijackthis.

Ferme Internet Explorer puis Démarrer/Panneau de Configuration/Options Internet.
Choisis l'onglet Contenu puis onglet Certificats.
Si tu trouves les programmes suivant (en particulier dans Editeurs approuvés), supprime-les :
electronic-group
egroup
Montorgueil
VIP
"Sunny Day Design Ltd"
28 Mars 2007 21:45:37

j'imprime ce qu'il faut faire, et je le fais puis je reviens
Contenus similaires
28 Mars 2007 22:00:59

fait

Rapport Navilog1 option 2:

Clean Navipromo version 1.0.8 commencé le 28/03/2007 à 21:53:57,91

Fix lancé depuis C:\Documents and Settings\Pierrot\Bureau
Mise a jour le 26.03.2007 a 08h00 by IL-MAFIOSO

Executé en mode sans echec

Mode suppression automatique avec prise en charge résultats Blacklight

*** Creation backups fichiers scan Blbeta ***

Copie vers "C:\Documents and Settings\Pierrot\Bureau\Backupnavi"


*** Suppression des fichiers trouvés avec Blbeta ***

c:\WINDOWS\system32\wuodbecilg.dat supprimé !
C:\windows\system32\wuodbecilg.exe supprimé !
c:\WINDOWS\system32\wuodbecilg_nav.dat supprimé !
c:\WINDOWS\system32\wuodbecilg_navps.dat supprimé !

** 2ème passage **

C:\WINDOWS\system32\wuodbecilg.exe absent !
C:\WINDOWS\system32\wuodbecilg.dat absent !
C:\WINDOWS\system32\wuodbecilg_nav.dat absent !
C:\WINDOWS\system32\wuodbecilg_navps.dat absent !
C:\WINDOWS\system32\wuodbecilg_navup.dat absent !
C:\WINDOWS\system32\wuodbecilg_navtmp.dat absent !
C:\WINDOWS\system32\wuodbecilg_m2s.xml absent !


C:\WINDOWS\prefetch\wuodbecilg*.pf trouvé !
Copie C:\WINDOWS\prefetch\wuodbecilg*.pf réalisé avec succès !
C:\WINDOWS\prefetch\wuodbecilg*.pf supprimé !

*** Suppression dossiers dans C:\WINDOWS ***


*** Suppression dossiers dans C:\Program Files ***


*** Suppression dossiers dans C:\Documents and Settings\All Users\Application Data ***


*** Suppression dossiers dans C:\Documents and Settings\Pierrot\Application Data ***



*** Suppression fichiers ***

C:\WINDOWS\pack.epk supprimé !
C:\WINDOWS\system32\nvs2.inf supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Pierrot\Local Settings\Temp effectué !


*** Sauvegarde du registre vers dossier Backupnavi***


sauvegarde du registre réalisée avec succès !


*** Nettoyage registre ***


Nettoyage registre Ok

*** Traitement Recherche complémentaire ***

1)Recherche fichiers connus:


2)Recherche et Suppression Heuristique :

*
**
***
****
*****
******
*******
********

*** Nettoyage termine le 28/03/2007 à 21:54:37,28 ***





Rapport Hijackthis:

Logfile of HijackThis v1.99.1
Scan saved at 21:58:48, on 28/03/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\CmWatch.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\FotoStation Easy\FotoStation Easy AutoLaunch.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\Nikon\NkView4\NkVwMon.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\devldr32.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\IncrediMail\bin\IncMail.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Pierrot\Bureau\BLABLA.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.fr/spbasic.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.incredimail.com/page.asp?page=reg_success&la...
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [RecoverFromReboot] C:\WINDOWS\Temp\RecoverFromReboot.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [CmCardRun] C:\WINDOWS\system32\CmWatch.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: FotoStation Easy AutoLaunch.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: NkVwMon.exe.lnk = C:\Program Files\Nikon\NkView4\NkVwMon.exe
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O16 - DPF: {127698E4-E730-4E5C-A2B1-21490A70C8A1} (CEnroll Class) - https://static.impots.gouv.fr/abos/securite/xenroll.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111401/housecall...
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe


Maintenant je referme ma fenetre explorer, supprime les certificats foireux et je reviens.
Merci
28 Mars 2007 22:04:55

j'ai supprimé un certificat de electronic-group
Merci

Maintenant le PC est désinfesté?
@+
Pierrot
a b 8 Sécurité
28 Mars 2007 22:08:16

On n'a pas terminé.

  • Fais un scan en ligne Kaspersky avec Internet Explorer :
  • Clique sur
  • Clique maintenant sur J'accepte.
  • Valide l'installation d'un ou de plusieurs ActiveX si c'est nécessaire.
  • Patiente pendant l'installation des Mises à jour.
  • Choisis par la suite l'analyse du Poste de travail
  • Sauvegarde puis colle le rapport généré en fin d'analyse.

    AIDE : Tuto sur le scan en ligne

    NOTE : Si tu reçois le message "La licence de Kaspersky On-line Scanner est périmée", va dans Ajout/Suppression de programmes puis désinstalle On-Line Scanner, reconnecte toi sur le site de Kaspersky pour retenter le scan en ligne.
    28 Mars 2007 22:09:58

    c'est parti pour le scan en ligne
    28 Mars 2007 22:23:04

    la c'est parti pour un scan assez long apres y'aura quoi a faire?
    Tu crois qu'on peut faire la suite demain?
    29 Mars 2007 07:13:16

    KASPERSKY ON-LINE SCANNER REPORT
    Thursday, March 29, 2007 7:06:22 AM
    Système d'exploitation : Microsoft Windows XP Professional, (Build 2600)
    Kaspersky On-line Scanner version : 5.0.83.0
    Dernière mise à jour de la base antivirus Kaspersky : 28/03/2007
    Enregistrements dans la base antivirus Kaspersky : 271949
    Paramètres d'analyse
    Analyser avec la base antivirus suivante standard
    Analyser les archives vrai
    Analyser les bases de messagerie vrai
    Cible de l'analyse Poste de travail
    A:\
    C:\
    D:\
    E:\
    F:\
    G:\
    H:\
    I:\
    J:\
    K:\
    Statistiques de l'analyse
    Total d'objets analysés 67943
    Nombre de virus trouvés 2
    Nombre d'objets infectés 85 / 0
    Nombre d'objets suspects 12
    Durée de l'analyse 02:59:23

    Nom de l'objet infecté Nom du virus Dernière action
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 + .. ... /html Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 + ... /UNNAMED Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20: ... /message.scr Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET ... /html Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET)]/UNNAMED Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[ ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET)]/message.scr Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" ][Date Tue, 23 Mar 2004 18:07:20 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" ][Date Tue, 23 Mar 2004 17:55:41 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From processed: message from valid local sender)][Date Mon, 22 Mar 2004 19:56:50 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "Alexandra Blas" ][Date Mon, 22 Mar 2004 15:55:23 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... / ... /[From "queva sylvie" ][Date Sun, 21 Mar 2004 21:55:22 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... / ... /[From La Redoute ][Date Sat, 20 Mar 2004 20:33:01 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "IncrediMail" Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "IncrediMail" ][Date Tue, 16 Mar 2004 19:05:24 +0200]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "Alexandra Blas" ][Date Fri, 19 Mar 2004 12:29:00 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... /[From ... /[From "queva sylvie" ][Date Thu, 18 Mar 2004 23:23:28 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... /[From "Catherine Beaulant" ][Date Thu, 18 Mar 2004 18:28:50 +0100]/text Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?iso-8859-1?q?pruvot=20virginie? ... /[From alexandra.blas@free.fr][Date Thu, 18 Mar 2004 17:41:28 +0100]/text Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?iso-8859-1?q?pruvot=20virginie?= ][Date Wed, 17 Mar 2004 22:55:09 +0100 (CET)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... ... /[From "queva sylvie" ][Date Wed, 17 Mar 2004 21:01:37 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... / ... /[From La Redoute ][Date Mon, 9 Feb 2004 20:18:15 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... /[From "GWENAELLE LEPETIT" ][Date Fri, 06 Feb 2004 10:08:21 +0100]/html Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8859-1?q?Lea=20dautriche?= ][Date Thu, 5 Feb 2004 15:49:20 +0100 (CET)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "queva sylvie" ][Date Wed, 4 Feb 2004 19:41:24 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "queva sylvie" ][Date Thu, 8 Jan 2004 21:07:16 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm Mail: infecté - 27, suspect - 4 ignoré
    C:\Documents and Settings\LocalService\Cookies\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Cookies\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 + .. ... /html Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 + ... /UNNAMED Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20: ... /message.scr Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET ... /html Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET)]/UNNAMED Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[ ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET)]/message.scr Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" ][Date Tue, 23 Mar 2004 18:07:20 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" ][Date Tue, 23 Mar 2004 17:55:41 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From processed: message from valid local sender)][Date Mon, 22 Mar 2004 19:56:50 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "Alexandra Blas" ][Date Mon, 22 Mar 2004 15:55:23 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... / ... /[From "queva sylvie" ][Date Sun, 21 Mar 2004 21:55:22 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... / ... /[From La Redoute ][Date Sat, 20 Mar 2004 20:33:01 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "IncrediMail" Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "IncrediMail" ][Date Tue, 16 Mar 2004 19:05:24 +0200]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "Alexandra Blas" ][Date Fri, 19 Mar 2004 12:29:00 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... /[From ... /[From "queva sylvie" ][Date Thu, 18 Mar 2004 23:23:28 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... /[From "Catherine Beaulant" ][Date Thu, 18 Mar 2004 18:28:50 +0100]/text Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?iso-8859-1?q?pruvot=20virginie? ... /[From alexandra.blas@free.fr][Date Thu, 18 Mar 2004 17:41:28 +0100]/text Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?iso-8859-1?q?pruvot=20virginie?= ][Date Wed, 17 Mar 2004 22:55:09 +0100 (CET)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... ... /[From "queva sylvie" ][Date Wed, 17 Mar 2004 21:01:37 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... / ... /[From La Redoute ][Date Mon, 9 Feb 2004 20:18:15 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... /[From "GWENAELLE LEPETIT" ][Date Fri, 06 Feb 2004 10:08:21 +0100]/html Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8859-1?q?Lea=20dautriche?= ][Date Thu, 5 Feb 2004 15:49:20 +0100 (CET)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "queva sylvie" ][Date Wed, 4 Feb 2004 19:41:24 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "queva sylvie" ][Date Thu, 8 Jan 2004 21:07:16 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm Mail: infecté - 27, suspect - 4 ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Logs\Dfsr00005.log L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\pending.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Working\database_5A6C_CDF3_6CCD_CA49\dfsr.db L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Working\database_5A6C_CDF3_6CCD_CA49\fsr.log L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Working\database_5A6C_CDF3_6CCD_CA49\fsrtmp.log L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Working\database_5A6C_CDF3_6CCD_CA49\tmp.edb L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Windows Live Contacts\dukefleed59@hotmail.com\real\members.stg L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temp\~DFC13B.tmp L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temp\~DFC180.tmp L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\NTUSER.DAT L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\ntuser.dat.LOG L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\report\Protection résidente.txt L'objet est verrouillé ignoré
    C:\System Volume Information\_restore{5AB9F318-1C88-429B-975C-50D301CDB543}\RP135\change.log L'objet est verrouillé ignoré
    C:\WINDOWS\Debug\oakley.log L'objet est verrouillé ignoré
    C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\fwdbglog.txt L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\fwpktlog.txt L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\IAMDB.RDB L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\PIERROT-ZMYHH79.ldb L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\tvDebug.log L'objet est verrouillé ignoré
    C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré
    C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré
    C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\Antivirus.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\default L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\software L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\system L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
    C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\Perflib_Perfdata_3c0.dat L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\ZLT0643f.TMP L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\ZLT07093.TMP L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\_avast4_\Webshlock.txt L'objet est verrouillé ignoré
    C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré
    C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré
    C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 + .. ... /html Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 + ... /UNNAMED Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20: ... /message.scr Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET ... /html Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET)]/UNNAMED Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[ ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET)]/message.scr Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =? ... /[From "Florence Sury" Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =? ... /[From "Florence Sury" ][Date Tue, 23 Mar 2004 18:07:20 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =? ... /[From "Florence Sury" ][Date Tue, 23 Mar 2004 17:55:41 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =?i ... / ... /[From processed: message from valid local sender)][Date Mon, 22 Mar 2004 19:56:50 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =?i ... / ... /[From "Alexandra Blas" ][Date Mon, 22 Mar 2004 15:55:23 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =?i ... / ... / ... /[From "queva sylvie" ][Date Sun, 21 Mar 2004 21:55:22 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =?i ... / ... / ... /[From La Redoute ][Date Sat, 20 Mar 2004 20:33:01 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =?i ... / ... /[From "IncrediMail" Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =?i ... / ... /[From "IncrediMail" ][Date Tue, 16 Mar 2004 19:05:24 +0200]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =?i ... / ... /[From "Alexandra Blas" ][Date Fri, 19 Mar 2004 12:29:00 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =?i ... /[From ... /[From "queva sylvie" ][Date Thu, 18 Mar 2004 23:23:28 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =?i ... /[From "Catherine Beaulant" ][Date Thu, 18 Mar 2004 18:28:50 +0100]/text Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =?iso-8859-1?q?pruvot=20virginie? ... /[From alexandra.blas@free.fr][Date Thu, 18 Mar 2004 17:41:28 +0100]/text Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FL ... /[From =?iso-8859-1?q?pruvot=20virginie?= ][Date Wed, 17 Mar 2004 22:55:09 +0100 (CET)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYTh ... /[From =?iso-8 ... ... /[From "queva sylvie" ][Date Wed, 17 Mar 2004 21:01:37 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYTh ... /[From =?iso-8 ... / ... /[From La Redoute ][Date Mon, 9 Feb 2004 20:18:15 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYTh ... /[From =?iso-8 ... /[From "GWENAELLE LEPETIT" ][Date Fri, 06 Feb 2004 10:08:21 +0100]/html Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYTh ... /[From =?iso-8859-1?q?Lea=20dautriche?= ][Date Thu, 5 Feb 2004 15:49:20 +0100 (CET)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 J ... /[From "queva sylvie" ][Date Wed, 4 Feb 2004 19:41:24 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 J ... /[From "queva sylvie" ][Date Thu, 8 Jan 2004 21:07:16 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab/{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}/Message Store/Inbox.imm Infecté : Email-Worm.Win32.NetSky.q ignoré
    E:\SAUVEGARDE Nov06\Sauvegarde disque C\sauvegarde mail du 16 avril 2004.cab CAB: infecté - 28, suspect - 4 ignoré
    Analyse terminée.
    a b 8 Sécurité
    29 Mars 2007 18:33:46

    Commence par faire un message dans tes mails IncreditMail.
    29 Mars 2007 18:58:30

    qu'est-ce qu'il faut que je fasse?
    Un tri dans mes mails c'est ça?
    a b 8 Sécurité
    29 Mars 2007 19:02:53

    C'est bien ça.
    30 Mars 2007 15:36:57

    même en triant mais mail, le rapport me trouve enore desvirus quel logiciel utiliser
    30 Mars 2007 15:39:06

    Bonjour,

    Peux tu poster ton nouveau rapport Kaspersky STP.
    30 Mars 2007 22:37:00

    KASPERSKY ON-LINE SCANNER REPORT
    Friday, March 30, 2007 10:35:11 PM
    Système d'exploitation : Microsoft Windows XP Professional, (Build 2600)
    Kaspersky On-line Scanner version : 5.0.83.0
    Dernière mise à jour de la base antivirus Kaspersky : 30/03/2007
    Enregistrements dans la base antivirus Kaspersky : 272721
    Paramètres d'analyse
    Analyser avec la base antivirus suivante standard
    Analyser les archives vrai
    Analyser les bases de messagerie vrai
    Cible de l'analyse Poste de travail
    A:\
    C:\
    D:\
    E:\
    F:\
    G:\
    H:\
    I:\
    J:\
    K:\
    Statistiques de l'analyse
    Total d'objets analysés 68624
    Nombre de virus trouvés 2
    Nombre d'objets infectés 56 / 0
    Nombre d'objets suspects 8
    Durée de l'analyse 02:54:58

    Nom de l'objet infecté Nom du virus Dernière action
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 + .. ... /html Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 + ... /UNNAMED Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20: ... /message.scr Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET ... /html Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET)]/UNNAMED Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[ ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET)]/message.scr Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" ][Date Tue, 23 Mar 2004 18:07:20 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" ][Date Tue, 23 Mar 2004 17:55:41 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From processed: message from valid local sender)][Date Mon, 22 Mar 2004 19:56:50 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "Alexandra Blas" ][Date Mon, 22 Mar 2004 15:55:23 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... / ... /[From "queva sylvie" ][Date Sun, 21 Mar 2004 21:55:22 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... / ... /[From La Redoute ][Date Sat, 20 Mar 2004 20:33:01 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "IncrediMail" Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "IncrediMail" ][Date Tue, 16 Mar 2004 19:05:24 +0200]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "Alexandra Blas" ][Date Fri, 19 Mar 2004 12:29:00 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... /[From ... /[From "queva sylvie" ][Date Thu, 18 Mar 2004 23:23:28 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... /[From "Catherine Beaulant" ][Date Thu, 18 Mar 2004 18:28:50 +0100]/text Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?iso-8859-1?q?pruvot=20virginie? ... /[From alexandra.blas@free.fr][Date Thu, 18 Mar 2004 17:41:28 +0100]/text Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?iso-8859-1?q?pruvot=20virginie?= ][Date Wed, 17 Mar 2004 22:55:09 +0100 (CET)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... ... /[From "queva sylvie" ][Date Wed, 17 Mar 2004 21:01:37 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... / ... /[From La Redoute ][Date Mon, 9 Feb 2004 20:18:15 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... /[From "GWENAELLE LEPETIT" ][Date Fri, 06 Feb 2004 10:08:21 +0100]/html Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8859-1?q?Lea=20dautriche?= ][Date Thu, 5 Feb 2004 15:49:20 +0100 (CET)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "queva sylvie" ][Date Wed, 4 Feb 2004 19:41:24 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "queva sylvie" ][Date Thu, 8 Jan 2004 21:07:16 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm Mail: infecté - 27, suspect - 4 ignoré
    C:\Documents and Settings\LocalService\Cookies\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Cookies\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 + .. ... /html Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 + ... /UNNAMED Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20: ... /message.scr Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET ... /html Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET)]/UNNAMED Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[ ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET)]/message.scr Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" ][Date Tue, 23 Mar 2004 18:07:20 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" ][Date Tue, 23 Mar 2004 17:55:41 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From processed: message from valid local sender)][Date Mon, 22 Mar 2004 19:56:50 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "Alexandra Blas" ][Date Mon, 22 Mar 2004 15:55:23 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... / ... /[From "queva sylvie" ][Date Sun, 21 Mar 2004 21:55:22 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... / ... /[From La Redoute ][Date Sat, 20 Mar 2004 20:33:01 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "IncrediMail" Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "IncrediMail" ][Date Tue, 16 Mar 2004 19:05:24 +0200]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "Alexandra Blas" ][Date Fri, 19 Mar 2004 12:29:00 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... /[From ... /[From "queva sylvie" ][Date Thu, 18 Mar 2004 23:23:28 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... /[From "Catherine Beaulant" ][Date Thu, 18 Mar 2004 18:28:50 +0100]/text Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?iso-8859-1?q?pruvot=20virginie? ... /[From alexandra.blas@free.fr][Date Thu, 18 Mar 2004 17:41:28 +0100]/text Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?iso-8859-1?q?pruvot=20virginie?= ][Date Wed, 17 Mar 2004 22:55:09 +0100 (CET)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... ... /[From "queva sylvie" ][Date Wed, 17 Mar 2004 21:01:37 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... / ... /[From La Redoute ][Date Mon, 9 Feb 2004 20:18:15 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... /[From "GWENAELLE LEPETIT" ][Date Fri, 06 Feb 2004 10:08:21 +0100]/html Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8859-1?q?Lea=20dautriche?= ][Date Thu, 5 Feb 2004 15:49:20 +0100 (CET)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "queva sylvie" ][Date Wed, 4 Feb 2004 19:41:24 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "queva sylvie" ][Date Thu, 8 Jan 2004 21:07:16 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm Mail: infecté - 27, suspect - 4 ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Logs\Dfsr00005.log L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\pending.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Working\database_5A6C_CDF3_6CCD_CA49\dfsr.db L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Working\database_5A6C_CDF3_6CCD_CA49\fsr.log L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Working\database_5A6C_CDF3_6CCD_CA49\fsrtmp.log L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Working\database_5A6C_CDF3_6CCD_CA49\tmp.edb L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Windows Live Contacts\dukefleed59@hotmail.com\real\members.stg L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Windows Live Contacts\dukefleed59@hotmail.com\shadow\members.stg L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Historique\History.IE5\MSHist012007033020070331\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temp\~DF2B3D.tmp L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temp\~DF2C53.tmp L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temp\~DFB2BA.tmp L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temp\~DFB7DC.tmp L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\NTUSER.DAT L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\ntuser.dat.LOG L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\report\Protection résidente.txt L'objet est verrouillé ignoré
    C:\WINDOWS\Debug\oakley.log L'objet est verrouillé ignoré
    C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\fwdbglog.txt L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\fwpktlog.txt L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\IAMDB.RDB L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\PIERROT-ZMYHH79.ldb L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\tvDebug.log L'objet est verrouillé ignoré
    C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré
    C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré
    C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\Antivirus.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\default L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\software L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\system L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
    C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\Perflib_Perfdata_414.dat L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\ZLT0369e.TMP L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\ZLT0370f.TMP L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\_avast4_\Webshlock.txt L'objet est verrouillé ignoré
    C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré
    C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré
    C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré
    Analyse terminée.
    a b 8 Sécurité
    30 Mars 2007 23:31:45

    Euh...tu as fait ce que j'ai dit avec tes mails.
    4 Avril 2007 06:56:24

    J'ai trier mes mails, je n'ai plus de mail de 2004 ni dans ma boite de reception, ni dans mas mails envoyés ni dans mes archives.Ce que je ne comprend pas c'est qu'ils apparraissent dans la nouvelle analyse de Kaspersky.Que faire?

    KASPERSKY ON-LINE SCANNER REPORT
    Wednesday, April 04, 2007 6:53:52 AM
    Système d'exploitation : Microsoft Windows XP Professional, (Build 2600)
    Kaspersky On-line Scanner version : 5.0.83.0
    Dernière mise à jour de la base antivirus Kaspersky : 3/04/2007
    Enregistrements dans la base antivirus Kaspersky : 274152
    Paramètres d'analyse
    Analyser avec la base antivirus suivante standard
    Analyser les archives vrai
    Analyser les bases de messagerie vrai
    Cible de l'analyse Poste de travail
    A:\
    C:\
    D:\
    E:\
    F:\
    G:\
    H:\
    I:\
    J:\
    K:\
    Statistiques de l'analyse
    Total d'objets analysés 70509
    Nombre de virus trouvés 2
    Nombre d'objets infectés 56 / 0
    Nombre d'objets suspects 8
    Durée de l'analyse 02:21:50

    Nom de l'objet infecté Nom du virus Dernière action
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 + .. ... /html Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 + ... /UNNAMED Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20: ... /message.scr Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET ... /html Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET)]/UNNAMED Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[ ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET)]/message.scr Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" ][Date Tue, 23 Mar 2004 18:07:20 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" ][Date Tue, 23 Mar 2004 17:55:41 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From processed: message from valid local sender)][Date Mon, 22 Mar 2004 19:56:50 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "Alexandra Blas" ][Date Mon, 22 Mar 2004 15:55:23 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... / ... /[From "queva sylvie" ][Date Sun, 21 Mar 2004 21:55:22 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... / ... /[From La Redoute ][Date Sat, 20 Mar 2004 20:33:01 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "IncrediMail" Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "IncrediMail" ][Date Tue, 16 Mar 2004 19:05:24 +0200]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "Alexandra Blas" ][Date Fri, 19 Mar 2004 12:29:00 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... /[From ... /[From "queva sylvie" ][Date Thu, 18 Mar 2004 23:23:28 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... /[From "Catherine Beaulant" ][Date Thu, 18 Mar 2004 18:28:50 +0100]/text Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?iso-8859-1?q?pruvot=20virginie? ... /[From alexandra.blas@free.fr][Date Thu, 18 Mar 2004 17:41:28 +0100]/text Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?iso-8859-1?q?pruvot=20virginie?= ][Date Wed, 17 Mar 2004 22:55:09 +0100 (CET)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... ... /[From "queva sylvie" ][Date Wed, 17 Mar 2004 21:01:37 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... / ... /[From La Redoute ][Date Mon, 9 Feb 2004 20:18:15 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... /[From "GWENAELLE LEPETIT" ][Date Fri, 06 Feb 2004 10:08:21 +0100]/html Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8859-1?q?Lea=20dautriche?= ][Date Thu, 5 Feb 2004 15:49:20 +0100 (CET)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "queva sylvie" ][Date Wed, 4 Feb 2004 19:41:24 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "queva sylvie" ][Date Thu, 8 Jan 2004 21:07:16 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm Mail: infecté - 27, suspect - 4 ignoré
    C:\Documents and Settings\LocalService\Cookies\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Cookies\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 + .. ... /html Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 + ... /UNNAMED Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20: ... /message.scr Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET ... /html Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET)]/UNNAMED Suspect : Exploit.HTML.Iframe.FileDownload ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[ ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Tue, 23 Mar 2004 22:16:16 +0100 (CET)]/message.scr Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florenc ... /[From caroline.edonperez@ifrance.com][Date Tue, 23 Mar 2004 22:20:20 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" ][Date Tue, 23 Mar 2004 18:07:20 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =? ... /[From "Florence Sury" ][Date Tue, 23 Mar 2004 17:55:41 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From processed: message from valid local sender)][Date Mon, 22 Mar 2004 19:56:50 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "Alexandra Blas" ][Date Mon, 22 Mar 2004 15:55:23 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... / ... /[From "queva sylvie" ][Date Sun, 21 Mar 2004 21:55:22 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... / ... /[From La Redoute ][Date Sat, 20 Mar 2004 20:33:01 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "IncrediMail" Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "IncrediMail" ][Date Tue, 16 Mar 2004 19:05:24 +0200]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... / ... /[From "Alexandra Blas" ][Date Fri, 19 Mar 2004 12:29:00 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... /[From ... /[From "queva sylvie" ][Date Thu, 18 Mar 2004 23:23:28 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?i ... /[From "Catherine Beaulant" ][Date Thu, 18 Mar 2004 18:28:50 +0100]/text Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?iso-8859-1?q?pruvot=20virginie? ... /[From alexandra.blas@free.fr][Date Thu, 18 Mar 2004 17:41:28 +0100]/text Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From ... /[From =?iso-8859-1?q?pruvot=20virginie?= ][Date Wed, 17 Mar 2004 22:55:09 +0100 (CET)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... ... /[From "queva sylvie" ][Date Wed, 17 Mar 2004 21:01:37 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... / ... /[From La Redoute ][Date Mon, 9 Feb 2004 20:18:15 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8 ... /[From "GWENAELLE LEPETIT" ][Date Fri, 06 Feb 2004 10:08:21 +0100]/html Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "q ... /[From =?iso-8859-1?q?Lea=20dautriche?= ][Date Thu, 5 Feb 2004 15:49:20 +0100 (CET)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "queva sylvie" ][Date Wed, 4 Feb 2004 19:41:24 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED/[From "queva sylvie" ][Date Thu, 8 Jan 2004 21:07:16 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED/[From FLYThom@aol.com][Date Fri, 9 Jan 2004 11:01:02 EST]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED/[From "IncrediMail" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED/[From "Alexandra Blas" ][Date Wed, 7 Jan 2004 11:48:16 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm/[From "Florence Sury" ][Date Fri, 16 Jan 2004 10:59:55 +0100 (Paris, Madrid)]/UNNAMED Infecté : Email-Worm.Win32.NetSky.q ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\IM\Identities\{75ECD774-52ED-4F2A-A69B-FC5CDF137D21}\Message Store\Inbox.imm Mail: infecté - 27, suspect - 4 ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Logs\Dfsr00005.log L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\pending.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Working\database_5A6C_CDF3_6CCD_CA49\dfsr.db L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Working\database_5A6C_CDF3_6CCD_CA49\fsr.log L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Working\database_5A6C_CDF3_6CCD_CA49\fsrtmp.log L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Working\database_5A6C_CDF3_6CCD_CA49\tmp.edb L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Windows Live Contacts\dukefleed59@hotmail.com\real\members.stg L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Windows Live Contacts\dukefleed59@hotmail.com\shadow\members.stg L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Historique\History.IE5\MSHist012007040320070404\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temp\~DF1458.tmp L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temp\~DF1477.tmp L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temp\~DFEFAA.tmp L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temp\~DFEFC7.tmp L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\NTUSER.DAT L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\ntuser.dat.LOG L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\report\Protection résidente.txt L'objet est verrouillé ignoré
    C:\System Volume Information\_restore{5AB9F318-1C88-429B-975C-50D301CDB543}\RP140\change.log L'objet est verrouillé ignoré
    C:\WINDOWS\Debug\oakley.log L'objet est verrouillé ignoré
    C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\fwdbglog.txt L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\fwpktlog.txt L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\IAMDB.RDB L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\PIERROT-ZMYHH79.ldb L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\tvDebug.log L'objet est verrouillé ignoré
    C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré
    C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré
    C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\Antivirus.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\default L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\software L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\system L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
    C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\Perflib_Perfdata_3c0.dat L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\ZLT07ade.TMP L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\ZLT07ae2.TMP L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\_avast4_\Webshlock.txt L'objet est verrouillé ignoré
    C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré
    C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré
    C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré
    Analyse terminée.
    4 Avril 2007 22:37:46

    j'essaye de supprimer les archves de mail et je rescan avec kaspersky
    @+
    Pierrot
    5 Avril 2007 06:49:15

    voici mon nouveau rapport kaspersky:

    KASPERSKY ON-LINE SCANNER REPORT
    Thursday, April 05, 2007 6:47:04 AM
    Système d'exploitation : Microsoft Windows XP Professional, (Build 2600)
    Kaspersky On-line Scanner version : 5.0.83.0
    Dernière mise à jour de la base antivirus Kaspersky : 4/04/2007
    Enregistrements dans la base antivirus Kaspersky : 274646
    Paramètres d'analyse
    Analyser avec la base antivirus suivante standard
    Analyser les archives vrai
    Analyser les bases de messagerie vrai
    Cible de l'analyse Poste de travail
    A:\
    C:\
    D:\
    E:\
    F:\
    G:\
    H:\
    I:\
    J:\
    K:\
    Statistiques de l'analyse
    Total d'objets analysés 70596
    Nombre de virus trouvés 0
    Nombre d'objets infectés 0 / 0
    Nombre d'objets suspects 0
    Durée de l'analyse 02:25:47

    Nom de l'objet infecté Nom du virus Dernière action
    C:\Documents and Settings\LocalService\Cookies\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré
    C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré
    C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Application Data\Mozilla\Firefox\Profiles\8vvwdtpn.default\cert8.db L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Application Data\Mozilla\Firefox\Profiles\8vvwdtpn.default\history.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Application Data\Mozilla\Firefox\Profiles\8vvwdtpn.default\key3.db L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Application Data\Mozilla\Firefox\Profiles\8vvwdtpn.default\parent.lock L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Application Data\Mozilla\Firefox\Profiles\8vvwdtpn.default\search.sqlite L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Cookies\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Logs\Dfsr00005.log L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\pending.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Working\database_5A6C_CDF3_6CCD_CA49\dfsr.db L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Working\database_5A6C_CDF3_6CCD_CA49\fsr.log L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Working\database_5A6C_CDF3_6CCD_CA49\fsrtmp.log L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Messenger\dukefleed59@hotmail.com\SharingMetadata\Working\database_5A6C_CDF3_6CCD_CA49\tmp.edb L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Windows Live Contacts\dukefleed59@hotmail.com\real\members.stg L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Application Data\Microsoft\Windows Live Contacts\dukefleed59@hotmail.com\shadow\members.stg L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Historique\History.IE5\MSHist012007040420070405\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temp\~DFC362.tmp L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temp\~DFC375.tmp L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temp\~DFE1A1.tmp L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temp\~DFE1BB.tmp L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\NTUSER.DAT L'objet est verrouillé ignoré
    C:\Documents and Settings\Pierrot\ntuser.dat.LOG L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log L'objet est verrouillé ignoré
    C:\Program Files\Alwil Software\Avast4\DATA\report\Protection résidente.txt L'objet est verrouillé ignoré
    C:\System Volume Information\_restore{5AB9F318-1C88-429B-975C-50D301CDB543}\RP141\change.log L'objet est verrouillé ignoré
    C:\WINDOWS\Debug\oakley.log L'objet est verrouillé ignoré
    C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\fwdbglog.txt L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\fwpktlog.txt L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\IAMDB.RDB L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\PIERROT-ZMYHH79.ldb L'objet est verrouillé ignoré
    C:\WINDOWS\Internet Logs\tvDebug.log L'objet est verrouillé ignoré
    C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré
    C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré
    C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\Antivirus.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\default L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\software L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\system L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
    C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\Perflib_Perfdata_3e8.dat L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\ZLT07eff.TMP L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\ZLT07f02.TMP L'objet est verrouillé ignoré
    C:\WINDOWS\Temp\_avast4_\Webshlock.txt L'objet est verrouillé ignoré
    C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré
    C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré
    C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré
    D:\System Volume Information\_restore{5AB9F318-1C88-429B-975C-50D301CDB543}\RP141\change.log L'objet est verrouillé ignoré
    E:\System Volume Information\_restore{5AB9F318-1C88-429B-975C-50D301CDB543}\RP141\change.log L'objet est verrouillé ignoré
    Analyse terminée.

    Que faire maintenant?
    Pierrot
    Tom's guide dans le monde
    • Allemagne
    • Italie
    • Irlande
    • Royaume Uni
    • Etats Unis
    Suivre Tom's Guide
    Inscrivez-vous à la Newsletter
    • ajouter à twitter
    • ajouter à facebook
    • ajouter un flux RSS