Se connecter / S'enregistrer
Votre question

spyfalcon toujours pas partie :(

Tags :
  • Sécurité
Dernière réponse : dans Sécurité et virus
4 Mars 2006 18:15:14

re bonjour ,
j'ai toujours un icone "alert virus ! "(spyfalcon)
malgres la demarche que vous m'avez conseille de suivre . mes rapports sont a la suite de la discution " spyfalcon me harcele "
j'attend votre reponse pore recommencer la demarche j'ai du rate un petit truc puisque ca n'a pas fonctionne correctement :-)

Autres pages sur : spyfalcon partie

4 Mars 2006 18:17:27

Salut,

1/ Télécharge SmitfraudFix
http://siri.urz.free.fr/Fix/SmitfraudFix.zip

Dézippe-le sur le Bureau.
Ouvre le dossier SmitfraudFix et lance SmitfraudFix.cmd
Choisis l'option 1 (Recherche)
Poste le rapport ici

2/ Redémarre en mode sans échec

Redémarre l'ordinateur. Après les écritures du BIOS, appuies sur F8 (ou F5 si F8 marche pas) pour arriver à un menu avec des écritures blanches sur un fond noir.

Dans ce menu, tu dois pouvoir choisir le mode sans échec (celà se passe avec les flèches et Entrée pour valider).

Le démarrage en mode sans échec est souvent relativement long. Si tu as des écritures blanches bizarres, ne t'inquiètes pas.
Prend juste ton mal en patience.

Relance SmitfraudFix et choisis cette fois l’option 2 et réponds oui à chaque question
Sauvegarde le rapport.

3/ Redémarre normalement et poste le 2ème rapport de SmitfraudFix et un nouveau Log HJT
4 Mars 2006 18:37:18

hum! je vais refaire ce que tu m'as dit
mais de peur d'etre un grand neuneu c'est quoi ca "un nouveau Log HJT"?
Contenus similaires
a b 8 Sécurité
4 Mars 2006 18:40:36

C'est un rapport Hijackthis...HJT pour les intimes ;-)
4 Mars 2006 19:06:46

au secours la c'est la catastrophe au demarrage spyfalcon c'est installe
j'ai remarque aussi qu'apres le nettoyage en mode sans echec l'icone "alert virus "etait toujours a cote de l'horloge.:( 
je vous colle le rapport de smitfraudfix et vous sur un autre message le rapport de HJT ;-)
SmitFraudFix v2.21

Rapport fait à 18:44:02.25 le 04.03.2006
Executé à partir de C:\Documents and Settings\Administrateur\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600]

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

C:\Documents and Settings\Administrateur\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyFalcon 2.0.lnk supprimé
C:\Documents and Settings\Administrateur\Bureau\SpyFalcon.lnk supprimé
C:\Documents and Settings\Administrateur\Menu Démarrer\SpyFalcon 2.0.lnk supprimé
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\SpyFalcon supprimé
C:\Program Files\SpyFalcon\ supprimé

»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

Nettoyage terminé.

»»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport
4 Mars 2006 19:07:50

voici le rapport HJT

Logfile of HijackThis v1.99.1
Scan saved at 18:51:19, on 04.03.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\The Cleaner\tca.exe
C:\Program Files\The Cleaner\tcm.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\OpenOffice1.1.5\program\soffice.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\SpyFalcon\SpyFalcon.exe
C:\Program Files\SpyFalcon\SpyFalcon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Administrateur\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: ECarteBleueBrowserHelper Class - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll
O2 - BHO: SpywareGuardDLBLOCK.CBrowserHelper - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - :C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll (file missing)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [NvCplDaemon] :RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] :nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MSN Video Enhanced] :"C:\Program Files\MSN Video Enhanced\MSNVE.exe"
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [TkBellExe] :"C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [Mail mfcd cast multi] C:\Documents and Settings\All Users\Application Data\WinChinMailMfcd\boldford.exe
O4 - HKLM\..\Run: [tcactive] C:\Program Files\The Cleaner\tca.exe
O4 - HKLM\..\Run: [tcmonitor] C:\Program Files\The Cleaner\tcm.exe
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKLM\..\Run: [SpyFalcon] C:\Program Files\SpyFalcon\SpyFalcon.exe /h
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BONE FIND] C:\DOCUME~1\Administrateur\Application Data\meta regs bags\web boob thunk.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: OpenOffice.org 1.1.5.lnk = C:\Program Files\OpenOffice1.1.5\program\quickstart.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O16 - DPF: fdjeux - https://www.fdjeux.net/classes/fdjeux.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSN Messenger\msgrapp.dll" (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
4 Mars 2006 22:12:02

Bonsoir

On continue sur ce post.

Commence par supprimer SmitfraudFix, on vient de passer à la version 2.22

Et suis la manip suivante.

* Télécharge
SmitfraudFix de S!Ri:
http://siri.urz.free.fr/Fix/SmitfraudFix.zip
Tu le dézippes sur le Bureau.

Ewido
http://www.ewido.net/fr/download/
Tu l'installes et tu le mets à jour.

* Tu ouvres SmitfraudFix, tu double cliques sur SmitfraudFix.cmd et tu choisis l’option 1
Postes le rapport.

* Redémarre en mode sans échec. Attention, tu n'as pas accès à internet dans ce mode, note bien ce que tu as à faire.
Démarres l'ordinateur.
Une fois le chargement du BIOS terminé, il y a un écran noir. Appuyes sur la touche F8 ou F5 jusqu'à l'affichage du menu des options avancées de Windows.
En utilisant les touches du curseur, sélectionnes le mode sans échec approprié et appuyes sur Entrée.

* Relances SmitfraudFix et choisis cette fois l’option 2 et réponds oui à tout.

* Lance Ewido. Fais un scan en mode complet.
Sauvegardes le rapport.

* Redémarres normalement et communiques le deuxième rapport de SmitfraudFix, celui d'Ewido avec un nouveau rapport Hijackthis.

Comme tu as une infection Lop, tu feras aussi ceci.
Télécharges Lopxp.zip
http://pageperso.aol.fr/balltrap34/lopxp.zip
Dézippes le sur le Bureau
Lances le fichier lopxp.bat
Postes le rapport
5 Mars 2006 02:11:54

voila enfin tout semble normal :-)
je t'envoi les 4 rapports separement chacun ds son message
ewido des son installation a attaque spyfalcon et son scan en mode sans echec a bien fonctionne aussi il a mis le temps mais le resultat est la
merci pour tout et je reste a l'affut de vos nouvel au cas ou vous auriez trouvez d'autres anomalies
5 Mars 2006 02:12:43

SmitFraudFix v2.22

Rapport fait à 1:17:17.98 le 05.03.2006
Executé à partir de C:\Documents and Settings\Administrateur\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600]

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

C:\WINDOWS\system32\ginuerep.dll supprimé
C:\Documents and Settings\Administrateur\Application Data\Microsoft\Internet Explorer\Quick Launch\SpyFalcon 2.0.lnk supprimé
C:\Documents and Settings\Administrateur\Bureau\SpyFalcon.lnk supprimé
C:\Documents and Settings\Administrateur\Menu Démarrer\SpyFalcon 2.0.lnk supprimé
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\SpyFalcon supprimé
C:\Program Files\SpyFalcon\ supprimé

»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

Nettoyage terminé.

»»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport
5 Mars 2006 02:13:52

ewido anti-malware - Rapport de scan
---------------------------------------------------------

+ Créé le: 01:52:36, 05.03.2006
+ Somme de contrôle: F1DCC346

+ Résultats du scan:

HKLM\SOFTWARE\Classes\AppID\adm.EXE -> Adware.Altnet : Nettoyer et sauvegarder
HKLM\SOFTWARE\Classes\AppID\Altnet Signing Module.EXE -> Adware.Altnet : Nettoyer et sauvegarder
C:\Program Files\Adverts\uninst.exe -> Adware.Lop : Nettoyer et sauvegarder
C:\Program Files\Kazaa\TopSearch.dll -> Adware.Altnet : Nettoyer et sauvegarder


::Fin du rapport
5 Mars 2006 02:14:59

Logfile of HijackThis v1.99.1
Scan saved at 01:56:45, on 05.03.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\The Cleaner\tca.exe
C:\Program Files\The Cleaner\tcm.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\OpenOffice1.1.5\program\soffice.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Administrateur\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: ECarteBleueBrowserHelper Class - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll
O2 - BHO: SpywareGuardDLBLOCK.CBrowserHelper - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - :C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll (file missing)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [NvCplDaemon] :RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] :nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MSN Video Enhanced] :"C:\Program Files\MSN Video Enhanced\MSNVE.exe"
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [TkBellExe] :"C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [Mail mfcd cast multi] C:\Documents and Settings\All Users\Application Data\WinChinMailMfcd\boldford.exe
O4 - HKLM\..\Run: [tcactive] C:\Program Files\The Cleaner\tca.exe
O4 - HKLM\..\Run: [tcmonitor] C:\Program Files\The Cleaner\tcm.exe
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BONE FIND] C:\DOCUME~1\Administrateur\Application Data\meta regs bags\web boob thunk.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: OpenOffice.org 1.1.5.lnk = C:\Program Files\OpenOffice1.1.5\program\quickstart.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O16 - DPF: fdjeux - https://www.fdjeux.net/classes/fdjeux.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSN Messenger\msgrapp.dll" (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
5 Mars 2006 02:18:10

Rapport fait à 2:14:39.54 le 05.03.2006

Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est DCDC-8DFB

R‚pertoire de C:\Documents and Settings\Administrateur\Application Data

03.03.2006 15:45 <REP> Amok shim defy
03.03.2006 15:45 <REP> meta regs bags
13.12.2005 18:06 <REP> .bittorrent
08.10.2005 11:53 <REP> teamspeak2
06.09.2005 11:23 <REP> Media Player Classic
27.08.2005 17:48 <REP> Logitech
06.05.2005 09:33 <REP> SendPix
28.04.2005 02:46 <REP> Real
17.02.2005 03:12 <REP> AdobeUM
17.02.2005 03:08 <REP> Adobe
17.02.2005 03:08 0 dm.ini
17.02.2005 03:08 871 AdobeDLM.log
13.02.2005 11:47 <REP> Microsoft Web Folders
13.02.2005 11:46 <REP> Help
12.02.2005 03:13 <REP> Kazaa Lite
06.02.2005 01:39 <REP> Macromedia
05.02.2005 13:05 <REP> Thunderbird
05.02.2005 12:56 <REP> vlc
05.02.2005 12:45 <REP> Mozilla
05.02.2005 12:42 79 sversion.ini
05.02.2005 12:35 <REP> Sun
05.02.2005 09:46 <REP> Identities
05.02.2005 09:46 62 desktop.ini
05.02.2005 09:46 <REP> ..
05.02.2005 09:46 <REP> .
05.02.2005 09:46 <REP> Microsoft
4 fichier(s) 1012 octets
22 R‚p(s) 11945345024 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est DCDC-8DFB

R‚pertoire de C:\Documents and Settings\All Users\Application Data

03.03.2006 15:45 <REP> WinChinMailMfcd
15.11.2005 17:52 <REP> Adobe
04.08.2005 06:43 <REP> Windows Genuine Advantage
21.07.2005 13:56 <REP> Spybot - Search & Destroy
21.07.2005 13:11 <REP> Messenger Plus!
05.02.2005 20:37 <REP> QuickTime
05.02.2005 10:32 62 desktop.ini
05.02.2005 10:31 <REP> Microsoft
05.02.2005 10:31 <REP> ..
05.02.2005 10:31 <REP> .
1 fichier(s) 62 octets
9 R‚p(s) 11945345024 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est DCDC-8DFB

R‚pertoire de C:\Documents and Settings\Default User\Application Data

05.02.2005 10:32 62 desktop.ini
05.02.2005 10:31 <REP> ..
05.02.2005 10:31 <REP> Microsoft
05.02.2005 10:31 <REP> .
1 fichier(s) 62 octets
3 R‚p(s) 11945345024 octets libres
******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks

Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est DCDC-8DFB

R‚pertoire de C:\WINDOWS\Tasks

05.02.2005 09:45 6 SA.DAT
05.02.2005 09:39 65 desktop.ini
05.02.2005 09:39 <REP> ..
05.02.2005 09:39 <REP> .
2 fichier(s) 71 octets
2 R‚p(s) 11'945'345'024 octets libres

******************************************
Recherche dans Program files

Le dossier C:\Program Files\C2Media n'existe pas

*************** Fin du rapport ****************
5 Mars 2006 10:34:19

Bonjour

Encore quelques corrections.

1 Télécharge CCleaner.
http://www.filehippo.com/download_ccleaner.html
Installe le dans un répertoire dédié.

2 Redémarre en mode sans echec. Attention, tu n'as pas accès à internet dans ce mode, note bien ce que tu as à faire.
Démarre l'ordinateur.
Une fois le chargement du BIOS terminé, il y a un écran noir. Appuye sur la touche F8 jusqu'à l'affichage du menu des options avancées de Windows.
En utilisant les touches du curseur, sélectionne Mode sans échec et appuye sur Entrée.

3 Désinstalle ces applications (si tu les trouves) dans Ajout-Suppression de programmes :

Messenger Plus! 3. C'est un nid à spyware. Il est responsable en partie de ton infection.
Désinstalle le maintenant.
Une fois l'ordinateur propre, soit tu mets une autre version, soit tu réinstalle le même mais en n'oubliant pas de décocher la case Autoriser les sponsors.

4 Relance un scan HijackThis et coche les lignes ci-dessous :

O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - :C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll (file missing)
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [NvCplDaemon] :RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] :nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [TkBellExe] :"C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Mail mfcd cast multi] C:\Documents and Settings\All Users\Application Data\WinChinMailMfcd\boldford.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BONE FIND] C:\DOCUME~1\Administrateur\Application Data\meta regs bags\web boob thunk.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll

Ferme toutes les fenêtres Windows, Internet explorer, Outlook,sauf le logiciel Hijackthis et clique sur « Fix checked »

5 Assure toi d'avoir accés à tous les fichiers.
Démarrer, Poste de travail ou autre dossier, Menu Outils, Option des dossiers, onglet Affichage :
Activer la case : Afficher les fichiers et dossiers cachés
Désactiver la case : Masquer les extensions des fichiers dont le type est connu
Désactiver la case : Masquer les fichiers protégés du système d'exploitation
Puis Appliquer

6 Supprime les fichiers/dossiers incriminés (s'ils existent encore) :

C:\Documents and Settings\All Users\Application Data\WinChinMailMfcd
C:\Documents and Settings\Administrateur\Application Data\meta regs bags
C:\Documents and Settings\Administrateur\Application Data\Amok shim defy

7 Lance le nettoyage avec CCleaner.

Recache les fichiers systeme afin de ne pas faire d'erreur à l'avenir en sélectionnant ne pas afficher les fichiers cachés ou les fichiers système.

8 Redémarre normalement et poste un nouveau log HijackThis.
5 Mars 2006 11:50:55

voici le nettoyage réalisé :-)
hum ! quoi d'autre 8-)
je te copie le rapport :-o

Logfile of HijackThis v1.99.1
Scan saved at 11:42:48, on 05.03.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\The Cleaner\tca.exe
C:\Program Files\The Cleaner\tcm.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\PROGRA~1\MSN Messenger\msnmsgr.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\OpenOffice1.1.5\program\soffice.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Administrateur\Bureau\infection metode\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: ECarteBleueBrowserHelper Class - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll
O2 - BHO: SpywareGuardDLBLOCK.CBrowserHelper - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O4 - HKLM\..\Run: [MSN Video Enhanced] :"C:\Program Files\MSN Video Enhanced\MSNVE.exe"
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [tcactive] C:\Program Files\The Cleaner\tca.exe
O4 - HKLM\..\Run: [tcmonitor] C:\Program Files\The Cleaner\tcm.exe
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: OpenOffice.org 1.1.5.lnk = C:\Program Files\OpenOffice1.1.5\program\quickstart.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O16 - DPF: fdjeux - https://www.fdjeux.net/classes/fdjeux.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSN Messenger\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: MsgPlusLoader.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

6 Mars 2006 01:21:16

1/2
rapport long envoie en 2 messages
-------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Monday, March 06, 2006 01:12:03
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version: 5.0.67.0
Kaspersky Anti-Virus database last update: 6/03/2006
Kaspersky Anti-Virus database records: 169398
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\

Scan Statistics:
Total number of scanned objects: 55616
Number of viruses found: 9
Number of infected objects: 143
Number of suspicious objects: 0
Duration of the scan process: 2779 sec

Infected Object Name - Virus Name
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\Local Folders\Inbox/[From 2celeroy@tiscali.fr][Date Wed, 9 Feb 2005 13:45:07 +0100]/UNNAMED/your_file.pif Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\Local Folders\Inbox/[From 2celeroy@tiscali.fr][Date Wed, 9 Feb 2005 13:45:07 +0100]/UNNAMED/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Wed, 9 Feb 2005 14:31:58 +0100]/UNNAMED/UNNAMED/[From dubus.doulay@libertysurf.fr][Date Thu, 10 Feb 2005 10:17:55 +0100]/UNNAMED/my_details.pif Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\Local Folders\Inbox/[From 2celeroy@tiscali.fr][Date Wed, 9 Feb 2005 13:45:07 +0100]/UNNAMED/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Wed, 9 Feb 2005 14:31:58 +0100]/UNNAMED/UNNAMED/[From dubus.doulay@libertysurf.fr][Date Thu, 10 Feb 2005 10:17:55 +0100]/UNNAMED/[From "Backpedalling D. Housemothers" <burn@sonic.hypermart.net>][Date Thu, 10 Feb 2005 03:49:23 -0600]/UNNAMED/[From webmaster@plusdesexe.com][Date Thu, 10 Feb 2005 18:42:40 +0100]/message_part2.pif Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\Local Folders\Inbox/[From 2celeroy@tiscali.fr][Date Wed, 9 Feb 2005 13:45:07 +0100]/UNNAMED/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Wed, 9 Feb 2005 14:31:58 +0100]/UNNAMED/UNNAMED/[From dubus.doulay@libertysurf.fr][Date Thu, 10 Feb 2005 10:17:55 +0100]/UNNAMED/[From "Backpedalling D. Housemothers" <burn@sonic.hypermart.net>][Date Thu, 10 Feb 2005 03:49:23 -0600]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\Local Folders\Inbox/[From 2celeroy@tiscali.fr][Date Wed, 9 Feb 2005 13:45:07 +0100]/UNNAMED/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Wed, 9 Feb 2005 14:31:58 +0100]/UNNAMED/UNNAMED/[From dubus.doulay@libertysurf.fr][Date Thu, 10 Feb 2005 10:17:55 +0100]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\Local Folders\Inbox/[From 2celeroy@tiscali.fr][Date Wed, 9 Feb 2005 13:45:07 +0100]/UNNAMED/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Wed, 9 Feb 2005 14:31:58 +0100]/UNNAMED/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\Local Folders\Inbox/[From 2celeroy@tiscali.fr][Date Wed, 9 Feb 2005 13:45:07 +0100]/UNNAMED/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Wed, 9 Feb 2005 14:31:58 +0100]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\Local Folders\Inbox/[From 2celeroy@tiscali.fr][Date Wed, 9 Feb 2005 13:45:07 +0100]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\Local Folders\Inbox/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][Date Fri, 11 Feb 2005 02:09:06 +0100]/html/[From veronique.mantel@guideo.fr][Date Fri, 11 Feb 2005 22:01:36 +0100]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\Local Folders\Inbox/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][Date Fri, 11 Feb 2005 02:09:06 +0100]/html Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\Local Folders\Inbox Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From thomasjullien-lombrage@nomade.fr][Date Mon, 14 Feb 2005 16:00:00 +0100]/readme.doc.pif Infected: Email-Worm.Win32.NetSky.q
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From GameSpy Daily <owner-portal-daily-html@daily.gamespy.com>][Date Mon, 14 Feb 2005 10:15:17 -0800]/document43.pif Infected: Email-Worm.Win32.NetSky.q
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From "Julia" <juliavzojpqrqlri@net24.it>][Date Mon, 7 Mar 2005 10:18:41 -0800]/UNNAMED/[From servicefr@qxl.com][Date Tue, 8 Mar 2005 20:44:39 +0100]/your_document.pif Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From "Julia" <juliavzojpqrqlri@net24.it>][Date Mon, 7 Mar 2005 10:18:41 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 8 Mar 2005 22:11:23 +0100]/text/[From =?ISO-8859-1?Q?Vincent_Berr=E9e?= <vincent.berree@gmail.com>][Date Thu, 10 Mar 2005 09:18:13 +0100]/text/[From PayPal <paypal@email.paypal.fr>][Date Thu, 10 Mar 2005 10:44:09 PST]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From "Julia" <juliavzojpqrqlri@net24.it>][Date Mon, 7 Mar 2005 10:18:41 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 8 Mar 2005 22:11:23 +0100]/text/[From =?ISO-8859-1?Q?Vincent_Berr=E9e?= <vincent.berree@gmail.com>][Date Thu, 10 Mar 2005 09:18:13 +0100]/text/[From "IncrediMail" <incredimail@incredimail.com>][Date Thu, 10 Mar 2005 00:39:10 +0200 (IST)]/UNNAMED/[From "in ... /[From piebtrebau@sun8.isotonicsolution.com][Date Fri, 11 Mar 2005 13:30:24 -0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From "Julia" <juliavzojpqrqlri@net24.it>][Date Mon, 7 Mar 2005 10:18:41 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 8 Mar 2005 22:11:23 +0100]/text/[From =?ISO-8859-1?Q?Vincent_Berr=E9e?= <vincent.berree@gmail.com>][Date Thu, 10 Mar 2005 09:18:13 +0100]/text/[From "IncrediMail" <incredimail@incredimail.com>][Date Thu, 10 Mar 2005 00:39:10 +0200 (IST)]/UNNAMED/[Fro ... /[From "Acces GRATUIT !" <no-reply@dreamnex.com>][Date Sat, 12 Mar 2005 06:20:16 -0000]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From "Julia" <juliavzojpqrqlri@net24.it>][Date Mon, 7 Mar 2005 10:18:41 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 8 Mar 2005 22:11:23 +0100]/text/[From =?ISO-8859-1?Q?Vincent_Berr=E9e?= <vincent.berree@gmail.com>][Date Thu, 10 Mar 2005 09:18:13 +0100]/text/[From "IncrediMail" <incredimail@incredimail.com>][Date Thu, 10 Mar 2005 00:39:10 +0200 (IST)]/UNNAMED/[From "in ... /[From "alapage.com" <information@alapage.com>][Date Sat, 12 Mar 2005 00:54:21 +0100]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From "Julia" <juliavzojpqrqlri@net24.it>][Date Mon, 7 Mar 2005 10:18:41 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 8 Mar 2005 22:11:23 +0100]/text/[From =?ISO-8859-1?Q?Vincent_Berr=E9e?= <vincent.berree@gmail.com>][Date Thu, 10 Mar 2005 09:18:13 +0100]/text/[From "IncrediMail" <incredimail@incredimail.com>][Date Thu, 10 Mar 2005 00:39:10 +0200 (IST)]/UNNAMED/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][Date Thu, 10 Mar 2005 23:28:41 +0100]/html Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From "Julia" <juliavzojpqrqlri@net24.it>][Date Mon, 7 Mar 2005 10:18:41 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 8 Mar 2005 22:11:23 +0100]/text/[From =?ISO-8859-1?Q?Vincent_Berr=E9e?= <vincent.berree@gmail.com>][Date Thu, 10 Mar 2005 09:18:13 +0100]/text/[From "IncrediMail" <incredimail@incredimail.com>][Date Thu, 10 Mar 2005 00:39:10 +0200 (IST)]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From "Julia" <juliavzojpqrqlri@net24.it>][Date Mon, 7 Mar 2005 10:18:41 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 8 Mar 2005 22:11:23 +0100]/text/[From =?ISO-8859-1?Q?Vincent_Berr=E9e?= <vincent.berree@gmail.com>][Date Thu, 10 Mar 2005 09:18:13 +0100]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From "Julia" <juliavzojpqrqlri@net24.it>][Date Mon, 7 Mar 2005 10:18:41 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 8 Mar 2005 22:11:23 +0100]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From "Julia" <juliavzojpqrqlri@net24.it>][Date Mon, 7 Mar 2005 10:18:41 -0800]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From "Julia" <juliavzojpqrqlri@net24.it>][Date Mon, 7 Mar 2005 10:18:41 -0800]/message.zip/data.rtf .scr Infected: Email-Worm.Win32.NetSky.q
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From "Julia" <juliavzojpqrqlri@net24.it>][Date Mon, 7 Mar 2005 10:18:41 -0800]/message.zip Infected: Email-Worm.Win32.NetSky.q
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Thu, 17 Mar 20 ... /[From rejouin@dirickx.com][Date Thu, 17 Mar 2005 19:22:39 +0100]/my_details.pif Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/text/[From "Jean-Claude Tessier" <jct ... /[From "Transformation O ... /[From reciprok.contact@tiscali.fr][Date Fri, 18 Mar 2005 10:26:15 +0100]/your_letter.pif Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/text/[From "Jean-Claude Tessier" <jct ... /[From "Transformation O. Freemasonries" <celebrated@fecongolfe.com.br>][Date Thu, 17 Mar 2005 10:48:05 -0800]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Thu, 17 Mar 2005 18:36:09 +0100]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/UNNAMED/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][Date Tue, 2 ... /[From webmaster@realize-your-dreams.com][Date Fri, 25 Mar 2005 21:40:50 + ... /UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/UNNAMED/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][ ... /[From "Chantal AUBERT ... /[From cargaz@wanadoo.fr][Date Tue, 29 Mar 2005 20:43:02 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/UNNAMED/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][ ... /[From "Chantal AUBERT" <Chantal.Aubert@justice.fr>][Date Tue, 29 Mar 2005 17:22:35 +020 ... /text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/UNNAMED/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][ ... /[From "Chantal AUBERT" <Chantal.Aubert@justice.fr>][Date Tue, 29 Mar 2005 17:22:35 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/UNNAMED/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][Date Tu ... /[From "dromadaire.com" <info@dromadaire.com>][Date Fri, 1 Apr 2005 13:14:2 ... /naked1.exe Infected: Email-Worm.Win32.NetSky.c
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/UNNAMED/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][Date Tu ... /[From "dromadaire.com" <info@dromadaire.com>][Date Fri, 1 Apr 2005 13:14:22 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.c
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/UNNAMED/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][Date Tue ... ... /[From "Fnac ... /[From ebay@tiscali.fr][Date Fri, 1 Apr 2005 18:08:30 + ... /UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/UNNAMED/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][Date Tue ... ... /[From "Fnac ... /[From ebay@tiscali.fr][Date Fri, 1 Apr 2005 18:08:30 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/UNNAMED/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][Date Tue ... ... /[From "Fnac Disques" <info-fnac@fnac.com>][Date Wed, 30 Mar 2005 02:36:36 +0200]/html Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/UNNAMED/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][Date Tue ... /[From "alapage.com" <information@alapage.com>][Date Sat, 26 Mar 2005 00:53:51 +0100]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/UNNAMED/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][Date Tue, 2 ... /[From webmaster@realize-your-dreams.com][Date Fri, 25 Mar 2005 21:40:50 +0100]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/UNNAMED/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][Date ... /[From Stephen Cilurzo <atknowing@rescueteam.com>][Date Thu, 07 Apr 2005 20:17:33 GMT]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/UNNAMED/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][Date Tue, ... ... /[From campinglarouteblanche@yahoo.fr][Date Fri, 8 Apr 2005 21:08:18 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/UNNAMED/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][Date Tue, ... /[From Solvi Stubing <sighedwisdom@priest.com>][Date Fri, 08 Apr 2005 14:46:58 GMT]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/UNNAMED/[From "info-fnac@fnac.com" <info-fnac@fnac.com>][Date Tue, 22 Mar 2005 23:38:31 +0100]/html Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED/[From "Alexandra" <alexandra@date4free.cc>][Date Tue, 15 Mar 2005 21:46:23 +0100]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html/[From "portal-daily-html Confirmation (from Lyris ListManager)" <lyris-confirm-100919489E@lyris.gamespy.com>][Date Tue, 15 Mar 2005 11:41:08 -0800]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED/html Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From piebtrebau@sun5.isotonicsolution.com][Date Mon, 14 Mar 2005 08:12:49 -0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From lego2@voila.fr][Date Tue, 19 Apr 2005 22:43:41 +0200]/UNNAMED/your_picture.pif Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From lego2@voila.fr][Date Tue, 19 Apr 2005 22:43:41 +0200]/UNNAMED/[From "Fnac Disques" <info-fnac@fnac.com>][Date Wed, 20 Apr 2005 00:53:36 +0200]/html/[From autier@sodifrance.fr][Date Thu, 21 Apr 2005 10:11:14 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From lego2@voila.fr][Date Tue, 19 Apr 2005 22:43:41 +0200]/UNNAMED/[From "Fnac Disques" <info-fnac@fnac.com>][Date Wed, 20 Apr 2005 00:53:36 +0200]/html/[From olivier.tregarot@teamcast.com][Date Thu, 21 Apr 2005 17:09:10 +0200]/UNNAMED/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From lego2@voila.fr][Date Tue, 19 Apr 2005 22:43:41 +0200]/UNNAMED/[From "Fnac Disques" <info-fnac@fnac.com>][Date Wed, 20 Apr 2005 00:53:36 +0200]/html/[From olivier.tregarot@teamcast.com][Date Thu, 21 Apr 2005 17:09:10 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From lego2@voila.fr][Date Tue, 19 Apr 2005 22:43:41 +0200]/UNNAMED/[From "Fnac Disques" <info-fnac@fnac.com>][Date Wed, 20 Apr 2005 00:53:36 +0200]/html Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From lego2@voila.fr][Date Tue, 19 Apr 2005 22:43:41 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Reyna <Kimberlee@xebusiness.com>][Date Wed, 29 Apr 2009 00:16:30 +0100]/text/[From "clubdial.fr" <newsletter@clubdial.fr>][Date Fri, 29 Apr 2005 11:03:36 +0200 (CEST)]/UNNAMED/[From "boss fangio" <ludovic_cheval@hotmail.com>][Date Fri, 29 Apr 2005 11:25:43 +0200]/your_document.pif Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Reyna <Kimberlee@xebusiness.com>][Date Wed, 29 Apr 2009 00:16:30 +0100]/text/[From "clubdial.fr" <newsletter@clubdial.fr>][Date Fri, 29 Apr 2005 11:03:36 +0200 (CEST)]/UNNAMED/[From Abbey <Carson@zeto.olsztyn.pl>][Date Fri, 29 Apr 2005 16:04:12 +0200]/text/[From Naomi <Paulina@x3.com>][Date Sun, 1 May 2005 02:16:44 +0300]/text/[From Brittanie <Kellie@xxx.res.ray.com>][Date Sun, 1 May 2005 09:26:33 +0900]/your_picture.pif Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Reyna <Kimberlee@xebusiness.com>][Date Wed, 29 Apr 2009 00:16:30 +0100]/text/[From "clubdial.fr" <newsletter@clubdial.fr>][Date Fri, 29 Apr 2005 11:03:36 +0200 (CEST)]/UNNAMED/[From Abbey <Carson@zeto.olsztyn.pl>][Date Fri, 29 Apr 2005 16:04:12 +0200]/text/[From Naomi <Paulina@x3.com>][Date Sun, 1 May 2005 02:16:44 +0300]/text/[From "marie-francoise.rot" <marie-francoise.rot@wanadoo.fr>][Date Mon, ... /[From minchellajcf@aol.com][Date Tue, 3 May 2005 14:01:23 +0200]/your_picture.pif Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Reyna <Kimberlee@xebusiness.com>][Date Wed, 29 Apr 2009 00:16:30 +0100]/text/[From "clubdial.fr" <newsletter@clubdial.fr>][Date Fri, 29 Apr 2005 11:03:36 +0200 (CEST)]/UNNAMED/[From Abbey <Carson@zeto.olsztyn.pl>][Date Fri, 29 Apr 2005 16:04:12 +0200]/text/[From Naomi <Paulina@x3.com>][Date Sun, 1 May 2005 02:16:44 +0300]/text/[From "marie-francoise.rot" <marie-francoise.rot@wan ... /[From H ... /[From "Fn ... /[From airmonde@wanadoo.fr][Date Wed, 4 May 2005 20:04:29 +0200]/text.txt Infected: Email-Worm.Win32.NetSky.q
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Reyna <Kimberlee@xebusiness.com>][Date Wed, 29 Apr 2009 00:16:30 +0100]/text/[From "clubdial.fr" <newsletter@clubdial.fr>][Date Fri, 29 Apr 2005 11:03:36 +0200 (CEST)]/UNNAMED/[From Abbey <Carson@zeto.olsztyn.pl>][Date Fri, 29 Apr 2005 16:04:12 +0200]/text/[From Naomi <Paulina@x3.com>][Date Sun, 1 May 2005 02:16:44 +0300]/text/[From "marie-francoise.rot" <marie-francoise.rot@wan ... /[From H ... /[From "Fnac ... /[From Ana <Kierra@zcl.com>][Date Wed, 4 May 2005 12:24:53 +0200]/text Infected: Email-Worm.Win32.NetSky.q
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Reyna <Kimberlee@xebusiness.com>][Date Wed, 29 Apr 2009 00:16:30 +0100]/text/[From "clubdial.fr" <newsletter@clubdial.fr>][Date Fri, 29 Apr 2005 11:03:36 +0200 (CEST)]/UNNAMED/[From Abbey <Carson@zeto.olsztyn.pl>][Date Fri, 29 Apr 2005 16:04:12 +0200]/text/[From Naomi <Paulina@x3.com>][Date Sun, 1 May 2005 02:16:44 +0300]/text/[From "marie-francoise.rot" <marie-francoise.rot@wan ... /[From H ... /[From "Fnac Livres" <info-fnac@fnac.com>][Date Wed, 04 May 2005 01:23:03 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.q
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Reyna <Kimberlee@xebusiness.com>][Date Wed, 29 Apr 2009 00:16:30 +0100]/text/[From "clubdial.fr" <newsletter@clubdial.fr>][Date Fri, 29 Apr 2005 11:03:36 +0200 (CEST)]/UNNAMED/[From Abbey <Carson@zeto.olsztyn.pl>][Date Fri, 29 Apr 2005 16:04:12 +0200]/text/[From Naomi <Paulina@x3.com>][Date Sun, 1 May 2005 02:16:44 +0300]/text/[From "marie-francoise.rot" <marie-francoise.rot@wan ... /[From Homair Vacances <e-marketing@homair-vacances.fr>][Date Tue, 3 May 2005 18:01:38 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.q
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Reyna <Kimberlee@xebusiness.com>][Date Wed, 29 Apr 2009 00:16:30 +0100]/text/[From "clubdial.fr" <newsletter@clubdial.fr>][Date Fri, 29 Apr 2005 11:03:36 +0200 (CEST)]/UNNAMED/[From Abbey <Carson@zeto.olsztyn.pl>][Date Fri, 29 Apr 2005 16:04:12 +0200]/text/[From Naomi <Paulina@x3.com>][Date Sun, 1 May 2005 02:16:44 +0300]/text/[From "marie-francoise.rot" <marie-francoise.rot@wanadoo.fr>][Date Mon, 2 May 2005 11:48:53 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.q
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Reyna <Kimberlee@xebusiness.com>][Date Wed, 29 Apr 2009 00:16:30 +0100]/text/[From "clubdial.fr" <newsletter@clubdial.fr>][Date Fri, 29 Apr 2005 11:03:36 +0200 (CEST)]/UNNAMED/[From Abbey <Carson@zeto.olsztyn.pl>][Date Fri, 29 Apr 2005 16:04:12 +0200]/text/[From Naomi <Paulina@x3.com>][Date Sun, 1 May 2005 02:16:44 +0300]/text Infected: Email-Worm.Win32.NetSky.q
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Reyna <Kimberlee@xebusiness.com>][Date Wed, 29 Apr 2009 00:16:30 +0100]/text/[From "clubdial.fr" <newsletter@clubdial.fr>][Date Fri, 29 Apr 2005 11:03:36 +0200 (CEST)]/UNNAMED/[From Abbey <Carson@zeto.olsztyn.pl>][Date Fri, 29 Apr 2005 16:04:12 +0200]/text Infected: Email-Worm.Win32.NetSky.q
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Reyna <Kimberlee@xebusiness.com>][Date Wed, 29 Apr 2009 00:16:30 +0100]/text/[From "clubdial.fr" <newsletter@clubdial.fr>][Date Fri, 29 Apr 2005 11:03:36 +0200 (CEST)]/UNNAMED Infected: Email-Worm.Win32.NetSky.q
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Reyna <Kimberlee@xebusiness.com>][Date Wed, 29 Apr 2009 00:16:30 +0100]/text Infected: Email-Worm.Win32.NetSky.q
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From Lidia <Sonia@yks.com>][Date Fri, 6 May 2005 20:10:07 +0200]/text/[From gerlav31@hotmail.com][Date Mon, 9 May 2005 19:16:58 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From Lidia <Sonia@yks.com>][Date Fri, 6 May 2005 20:10:07 +0200]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "Fnac Disques" <info-fnac@fnac.com>][Date Mon, 09 May 2005 23:26:48 +0200]/html/[From AntiVir PersonalProducts GmbH <newsletter@antivir-pe.de>][Date Fri, 13 May 2005 15:26:59 +0200 (CEST)]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "Fnac Disques" <info-fnac@fnac.com>][Date Mon, 09 May 2005 23:26:48 +0200]/html/[From "alapage.com" <information@alapage.com>][Date Sat, 14 May 2005 00:52:36 +0200]/text/[From Sonia <Alex@xerographicsolutions.com>][Date Sat, 14 May 2005 10:42:18 +0900]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "Fnac Disques" <info-fnac@fnac.com>][Date Mon, 09 May 2005 23:26:48 +0200]/html/[From "alapage.com" <information@alapage.com>][Date Sat, 14 May 2005 00:52:36 +0200]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "Fnac Disques" <info-fnac@fnac.com>][Date Mon, 09 May 2005 23:26:48 +0200]/html Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From web_mailing1@yahoo.ca][Date Fri, 3 Jun 2005 22:40:29 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Fnac Livres" <info-fnac@fnac.com>][Date Sat, 04 Jun 2005 03:33:34 +0200]/html/[From "gautier.soph" <gautier.soph@voila.fr>][Date Sat, 4 Jun 2005 15:14:01 +0200 (CEST)]/UNNAMED/text/[From Frank <Kellen@yesnetwork.com>][Date Sat, 4 Jun 2005 18:29:41 +0300]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Fnac Livres" <info-fnac@fnac.com>][Date Sat, 04 Jun 2005 03:33:34 +0200]/html/[From "gautier.soph" <gautier.soph@voila.fr>][Date Sat, 4 Jun 2005 15:14:01 +0200 (CEST)]/UNNAMED/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Fnac Livres" <info-fnac@fnac.com>][Date Sat, 04 Jun 2005 03:33:34 +0200]/html/[From "gautier.soph" <gautier.soph@voila.fr>][Date Sat, 4 Jun 2005 15:14:01 +0200 (CEST)]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Fnac Livres" <info-fnac@fnac.com>][Date Sat, 04 Jun 2005 03:33:34 +0200]/html Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From webmaster@plusdesexe.com][Date Wed, 8 Jun 2005 14:43:31 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[Fro ... /[From Yso-8859-1?Q?Amicale_Laïque ... /[From mahe.chr@wanadoo.fr][Date Fri, 10 Jun 2005 17:14:33 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[Fro ... /[From Yso-8859-1 ... /[From "Fnac Disques" <info-fnac@fnac.com>][Date Wed, 15 Jun 2005 01:09:32 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[Fro ... /[From Yso-8859-1 ... /[From ... /[From pas_de_reponse@tiscali.fr][Date Wed, 15 Jun 2005 15:46:54 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[Fro ... /[From Yso-8859-1 ... /[From "alapage.com" <information@alapage.com>][Date Wed, 15 Jun 2005 12:16:07 +0200]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[Fro ... /[From Yso-8859-1 ... /[From "alapage.com" <information@alapage.com>][Date Sat, 11 Jun 2005 01:01:03 +0200]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[Fro ... /[From Yso-8859-1?Q?Amicale_Laïque_de_Bruz?<secretariat.alb@free.fr>][Date Fri, 10 Jun 2005 16:21:05 +0200]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application
6 Mars 2006 01:22:23

2/2
suite et fin
Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From ... /[From Yso-8859-1?Q?Amicale_Laïque_de_Br ... /[From 16@tiscali.fr][Date Fri, 1 Jul 2005 17:02:03 + ... /UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From ... /[From Yso-8859-1?Q?Ami ... ... /[From Benny <Stuart@YORK.AC.UK>][Date Sat, 2 Jul 2005 09:30:14 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From ... /[From Yso-8859-1?Q?Ami ... /[Fr ... /[From e.deplaix@wanadoo.fr][Date Sun, 3 Jul 2005 18:03:10 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From ... /[From Yso-8859-1?Q?Ami .. ... /[From hristophe.ropert@wanadoo.fr][Date Sun, 3 Jul 2005 19:11:16 + ... /UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From ... /[From Yso-8859-1?Q?Ami ... /[From Rashad <Domenic@yuba.cc.ca.us>][Date Sun, 3 Jul 2005 17:32:39 -1000]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From ... /[From Yso-8859-1?Q?Ami .. .. ... /[From -0005n0-00@antolinux.net][Date Mon, 4 Jul 2005 15:33:56 + ... /UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From ... /[From Yso-8859- . ... /[From "Fnac Livres" <info-fnac@fnac.com>][Date Tue, 05 Jul 2005 02:16:20 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From ... /[From Yso- ... /[From Magasins-U <magasins-u@fr.colt.net>][Date Wed, 6 Jul 2005 12:05:30 +0200 (CEST)]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From ... /[From Yso-8859- ... /[From "a ... /[From German <Hernan@yozawa.com>][Date Tue, 5 Jul 2005 12:44:58 -0700]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From ... /[From Yso-8859- ... /[From "alapage.com" <information@alapage.com>][Date Mon, 04 Jul 2005 19:49:15 +0200]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From ... /[From Yso-8859-1?Q?Ami .. .. ... /[From -0005n0-00@antolinux.net][Date Mon, 4 Jul 2005 15:33:56 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From ... /[From Yso-8859-1?Q?Ami .. ... / ... /[From Devonta <Triston@zeb.be>][Date Sun, 3 Jul 2005 23:16:37 +0200]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From ... /[From Yso-8859-1?Q?Ami .. ... /[From hristophe.ropert@wanadoo.fr][Date Sun, 3 Jul 2005 19:11:16 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From ... /[From Yso-8859-1?Q?Ami ... /[Fr ... /[From Ruben <Nathan@xenyx.com>][Date Sat, 2 Jul 2005 18:55:37 +0200]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From ... /[From Yso-8859-1?Q?Ami ... /[From Stephen <Rashad@zbp.univie.ac.at>][Date Fri, 1 Jul 2005 15:30:16 -0500]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From ... /[From Yso-8859-1?Q?Amicale_Laïque_de_Br ... /[From 16@tiscali.fr][Date Fri, 1 Jul 2005 17:02:03 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From ... /[From Yso-8859-1?Q?Amicale_Laïque_de_Bruz?<secretariat.alb@free.fr>][Date Thu, 9 Jun 2005 17:07:40 +0200]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED/[From "alapage.com" <information@alapage.com>]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text/[From infocom <infocom@ville-bruz.fr>][Date Wed, 08 Jun 2005 15:30:37 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text/[From "Jean-Claude Tessier" <jctbruz2@wanadoo.fr>][Date Tue, 7 Jun 2005 11:47:23 +0300]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "alapage.com" <information@alapage.com>][Date Fri, 3 Jun 2005 22:00:32 +0200]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "dromadaire.com" <info@dromadaire.com>][Date Fri, 8 Jul 2005 14:44:03 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From Andres <Ron@wsta.vi>][Date Fri, 8 Jul 2005 13:44:12 -0500]/text/[From Bradly <Fernando@wzdave.com>][Date Fri, 8 Jul 2005 16:33:50 -0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From Andres <Ron@wsta.vi>][Date Fri, 8 Jul 2005 13:44:12 -0500]/text/[From Tyron <Theodore@ystgaard.no>][Date Fri, 8 Jul 2005 23:56:30 +0200]/text/[From contact@voila.net][Date Sat, 9 Jul 2005 11:21:58 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From Andres <Ron@wsta.vi>][Date Fri, 8 Jul 2005 13:44:12 -0500]/text/[From Tyron <Theodore@ystgaard.no>][Date Fri, 8 Jul 2005 23:56:30 +0200]/text/[From corsi.everitt@btopenworld.com][Date Sat, 9 Jul 2005 14:51:10 +0200]/UNNAMED/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From Andres <Ron@wsta.vi>][Date Fri, 8 Jul 2005 13:44:12 -0500]/text/[From Tyron <Theodore@ystgaard.no>][Date Fri, 8 Jul 2005 23:56:30 +0200]/text/[From corsi.everitt@btopenworld.com][Date Sat, 9 Jul 2005 14:51:10 +0200]/UNNAMED/[From Louis <Gregorio@WXC.COM.AU>][Date Sat, 9 Jul 2005 17:36:28 -0700]/text/[From Kristian <Dillan@yoox.com>][Date Sat, 9 Jul 2005 20:28:14 -0500]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From Andres <Ron@wsta.vi>][Date Fri, 8 Jul 2005 13:44:12 -0500]/text/[From Tyron <Theodore@ystgaard.no>][Date Fri, 8 Jul 2005 23:56:30 +0200]/text/[From corsi.everitt@btopenworld.com][Date Sat, 9 Jul 2005 14:51:10 +0200]/UNNAMED/[From Louis <Gregorio@WXC.COM.AU>][Date Sat, 9 Jul 2005 17:36:28 -0700]/text/[From "alapage.com" <infor ... /[From shhh@free.fr][Date Mon, 11 Jul 2005 12:29:21 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From Andres <Ron@wsta.vi>][Date Fri, 8 Jul 2005 13:44:12 -0500]/text/[From Tyron <Theodore@ystgaard.no>][Date Fri, 8 Jul 2005 23:56:30 +0200]/text/[From corsi.everitt@btopenworld.com][Date Sat, 9 Jul 2005 14:51:10 +0200]/UNNAMED/[From Louis <Gregorio@WXC.COM.AU>][Date Sat, 9 Jul 2005 17:36:28 -0700]/tex ... /[From ... /[From Rene <Ryan@yellowpagepro.com>][Date Mon, 11 Jul 2005 18:52:39 -0400]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From Andres <Ron@wsta.vi>][Date Fri, 8 Jul 2005 13:44:12 -0500]/text/[From Tyron <Theodore@ystgaard.no>][Date Fri, 8 Jul 2005 23:56:30 +0200]/text/[From corsi.everitt@btopenworld.com][Date Sat, 9 Jul 2005 14:51:10 +0200]/UNNAMED/[From Louis <Gregorio@WXC.COM.AU>][Date Sat, 9 Jul 2005 17:36:28 -0700]/tex ... /[From Mackenzie <Ronnie@wwwug.lgb.cal.boeing.com>][Date Mon, 11 Jul 2005 14:04:39 -0500]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From Andres <Ron@wsta.vi>][Date Fri, 8 Jul 2005 13:44:12 -0500]/text/[From Tyron <Theodore@ystgaard.no>][Date Fri, 8 Jul 2005 23:56:30 +0200]/text/[From corsi.everitt@btopenworld.com][Date Sat, 9 Jul 2005 14:51:10 +0200]/UNNAMED/[From Louis <Gregorio@WXC.COM.AU>][Date Sat, 9 Jul 2005 17:36:28 -0700]/text/[From "alapage.com" <information@alapage.com>][Date Mon, 11 Jul 2005 12:22:18 +0200]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From Andres <Ron@wsta.vi>][Date Fri, 8 Jul 2005 13:44:12 -0500]/text/[From Tyron <Theodore@ystgaard.no>][Date Fri, 8 Jul 2005 23:56:30 +0200]/text/[From corsi.everitt@btopenworld.com][Date Sat, 9 Jul 2005 14:51:10 +0200]/UNNAMED/[From Louis <Gregorio@WXC.COM.AU>][Date Sat, 9 Jul 2005 17:36:28 -0700]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From Andres <Ron@wsta.vi>][Date Fri, 8 Jul 2005 13:44:12 -0500]/text/[From Tyron <Theodore@ystgaard.no>][Date Fri, 8 Jul 2005 23:56:30 +0200]/text/[From corsi.everitt@btopenworld.com][Date Sat, 9 Jul 2005 14:51:10 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From Andres <Ron@wsta.vi>][Date Fri, 8 Jul 2005 13:44:12 -0500]/text/[From Tyron <Theodore@ystgaard.no>][Date Fri, 8 Jul 2005 23:56:30 +0200]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From Andres <Ron@wsta.vi>][Date Fri, 8 Jul 2005 13:44:12 -0500]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text/[From "dromadaire.com" <info@dromadaire.com>][Date Wed, 19 Oct 2005 15:47:33 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox/[From Gandalf le Fou <gandalflefou@gmail.com>][Date Thu, 5 May 2005 11:18:17 +0200]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Inbox Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Trash/[From Isaiah <Thomas@zonline.jamtland.se>][Date Sun, 25 Sep 2005 03:25:24 +0530]/document.pif Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Trash/[From franck.le_devehat@libertysurf.fr][Date Sun, 9 Oct 2005 21:06:08 +0200]/UNNAMED/application.pif Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Trash/[From franck.le_devehat@libertysurf.fr][Date Sun, 9 Oct 2005 21:06:08 +0200]/UNNAMED/[From "Petra" <petra@premiumhost.tv>][Date Mon, 10 Oct 2005 16:56:23 +0200]/text/[From "alapage.com " <mperf@bp06.net>][Date Fri, 14 Oct 2005 11:20:09 +0200]/UNNAMED/[From psoreau@dirickx.com][Date Sun, 16 Oct 2005 17:56:01 +0200]/mp3music.pif Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Trash/[From franck.le_devehat@libertysurf.fr][Date Sun, 9 Oct 2005 21:06:08 +0200]/UNNAMED/[From "Petra" <petra@premiumhost.tv>][Date Mon, 10 Oct 2005 16:56:23 +0200]/text/[From "alapage.com " <mperf@bp06.net>][Date Fri, 14 Oct 2005 11:20:09 +0200]/UNNAMED/[From Romeo <Westley@wskz.com>][Date Sun, 16 Oct 2005 13:40:17 -0400]/text/[From jb.jb3@libertysurf.fr][Date Mon, 17 Oct 2005 21:26:11 +0200]/mp3music.pif Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Trash/[From franck.le_devehat@libertysurf.fr][Date Sun, 9 Oct 2005 21:06:08 +0200]/UNNAMED/[From "Petra" <petra@premiumhost.tv>][Date Mon, 10 Oct 2005 16:56:23 +0200]/text/[From "alapage.com " <mperf@bp06.net>][Date Fri, 14 Oct 2005 11:20:09 +0200]/UNNAMED/[From Romeo <Westley@wskz.com>][Date Sun, 16 Oct 2005 13:40:17 -0400]/text/[From "alapage.com" <information@alapage.com>][Date Tue, 18 Oct 2 ... /[From "dromadaire.com" <info@dromadaire.com>][Date Wed, 19 Oct 2005 15:47:33 +0200]/mp3music.pif Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Trash/[From franck.le_devehat@libertysurf.fr][Date Sun, 9 Oct 2005 21:06:08 +0200]/UNNAMED/[From "Petra" <petra@premiumhost.tv>][Date Mon, 10 Oct 2005 16:56:23 +0200]/text/[From "alapage.com " <mperf@bp06.net>][Date Fri, 14 Oct 2005 11:20:09 +0200]/UNNAMED/[From Romeo <Westley@wskz.com>][Date Sun, 16 Oct 2005 13:40:17 -0400]/text/[From "alapage.com" <information@alapage.com>][Date Tue, 18 Oct 20 ... /[From franck.le_devehat@libertysurf.fr][Date Fri, 21 Oct 2005 21:38:35 +0200]/document_4351.pif Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Trash/[From franck.le_devehat@libertysurf.fr][Date Sun, 9 Oct 2005 21:06:08 +0200]/UNNAMED/[From "Petra" <petra@premiumhost.tv>][Date Mon, 10 Oct 2005 16:56:23 +0200]/text/[From "alapage.com " <mperf@bp06.net>][Date Fri, 14 Oct 2005 11:20:09 +0200]/UNNAMED/[From Romeo <Westley@wskz.com>][Date Sun, 16 Oct 2005 13:40:17 -0400]/text/[From "alapage.com" <information@alapage.com>][Date Tue, 18 Oct 2005 12:18:34 +0200]/text/[From Cristopher <Kaleb@zuherbe.de>][Date Thu, 20 Oct 2005 11:31:51 +0700]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Trash/[From franck.le_devehat@libertysurf.fr][Date Sun, 9 Oct 2005 21:06:08 +0200]/UNNAMED/[From "Petra" <petra@premiumhost.tv>][Date Mon, 10 Oct 2005 16:56:23 +0200]/text/[From "alapage.com " <mperf@bp06.net>][Date Fri, 14 Oct 2005 11:20:09 +0200]/UNNAMED/[From Romeo <Westley@wskz.com>][Date Sun, 16 Oct 2005 13:40:17 -0400]/text/[From "alapage.com" <information@alapage.com>][Date Tue, 18 Oct 2005 12:18:34 +0200]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Trash/[From franck.le_devehat@libertysurf.fr][Date Sun, 9 Oct 2005 21:06:08 +0200]/UNNAMED/[From "Petra" <petra@premiumhost.tv>][Date Mon, 10 Oct 2005 16:56:23 +0200]/text/[From "alapage.com " <mperf@bp06.net>][Date Fri, 14 Oct 2005 11:20:09 +0200]/UNNAMED/[From Romeo <Westley@wskz.com>][Date Sun, 16 Oct 2005 13:40:17 -0400]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Trash/[From franck.le_devehat@libertysurf.fr][Date Sun, 9 Oct 2005 21:06:08 +0200]/UNNAMED/[From "Petra" <petra@premiumhost.tv>][Date Mon, 10 Oct 2005 16:56:23 +0200]/text/[From "alapage.com " <mperf@bp06.net>][Date Fri, 14 Oct 2005 11:20:09 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Trash/[From franck.le_devehat@libertysurf.fr][Date Sun, 9 Oct 2005 21:06:08 +0200]/UNNAMED/[From "Petra" <petra@premiumhost.tv>][Date Mon, 10 Oct 2005 16:56:23 +0200]/text Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Trash/[From franck.le_devehat@libertysurf.fr][Date Sun, 9 Oct 2005 21:06:08 +0200]/UNNAMED Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default\Mail\pop.free.fr\Trash Infected: Email-Worm.Win32.NetSky.d
C:\Documents and Settings\Administrateur\Mes documents\Mes fichiers reçus\hacknowfr.exe Infected: not-virus:Hoax.Win16.Pornovir
C:\System Volume Information\_restore{72364565-F2D6-4658-AF36-E2EE85864EE5}\RP278\A0090889.dll Infected: not-virus:Hoax.Win32.Renos.bs
C:\System Volume Information\_restore{72364565-F2D6-4658-AF36-E2EE85864EE5}\RP278\A0091101.exe Infected: Trojan-Downloader.Win32.Swizzor.bo
C:\System Volume Information\_restore{72364565-F2D6-4658-AF36-E2EE85864EE5}\RP278\A0091102.exe Infected: Trojan-Downloader.Win32.Swizzor.cb
C:\System Volume Information\_restore{72364565-F2D6-4658-AF36-E2EE85864EE5}\RP278\A0091103.exe Infected: Trojan-Downloader.Win32.Swizzor.dv
C:\WINDOWS\system32\dfrgsrv.exe Infected: Trojan-Downloader.Win32.Zlob.hu

Scan process completed.
6 Mars 2006 09:23:11

Salut,

1/ Désactive ta restauration systeme

tu fait un clique droit sur l'icone poste de travail ensuite propriete tu vas sur l'onglet Restauration du systeme tu coches Désactiver la restauration systeme

2/Ensuite supprime les fichiers et/ou dossiers suivants :

C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bofz8szq.default

C:\WINDOWS\system32\dfrgsrv.exe

3/Redemarre ton PC

4/ Réactive la restauration systeme

5/Poste un nouveau Log HJT
6 Mars 2006 12:29:52

Logfile of HijackThis v1.99.1
Scan saved at 12:23:40, on 06.03.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\The Cleaner\tca.exe
C:\Program Files\The Cleaner\tcm.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\PROGRA~1\MSN Messenger\msnmsgr.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\OpenOffice1.1.5\program\soffice.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Administrateur\Bureau\infection metode\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: ECarteBleueBrowserHelper Class - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll
O2 - BHO: SpywareGuardDLBLOCK.CBrowserHelper - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O4 - HKLM\..\Run: [MSN Video Enhanced] :"C:\Program Files\MSN Video Enhanced\MSNVE.exe"
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [tcactive] C:\Program Files\The Cleaner\tca.exe
O4 - HKLM\..\Run: [tcmonitor] C:\Program Files\The Cleaner\tcm.exe
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: OpenOffice.org 1.1.5.lnk = C:\Program Files\OpenOffice1.1.5\program\quickstart.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O16 - DPF: fdjeux - https://www.fdjeux.net/classes/fdjeux.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/kws/kavwebscan_unico...
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSN Messenger\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: MsgPlusLoader.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Tom's guide dans le monde
  • Allemagne
  • Italie
  • Irlande
  • Royaume Uni
  • Etats Unis
Suivre Tom's Guide
Inscrivez-vous à la Newsletter
  • ajouter à twitter
  • ajouter à facebook
  • ajouter un flux RSS