jle

Merci pour la réponse , J'ajoute aussi que si je le redémarre tout de suite après un arrêt c'est à dire qu'il est "encore chaud" il démarre sans problème. Dépoussierage ? qu'entends-tu par dépoussiérage ? J'ai soufflé à l'intérieur... La pâte thermique , peux-tu me dire ce que c'est ? les températures semblent normales la configuration : XP SP3 ....ce n'est surement pas suffisant...je ne suis pas très doué !

Bonjour, Depuis quelques temps mon pc XP déjà un peu vieux, année 2002, reboute plusieurs fois avant de démarrer définitivement ; Certaines fois il bloque sur une séquence de démarrage et d'une manière totalement aléatoire .Une fois démarré le pc tourne normalement , je le mets en veille plusieurs fois et il repart sans problèmes . Quand il a commencé ses caprices j'ai procédé au reformatage complet . L'opération lui a redonné sa jeunesse pour le reste mais pas pour ce problème . Problème matérièl ? Merci d'avance pour un petit coup de main !

Bravo , la méthode était bonne , tout est en ordre , merci encore .

Merci à vous deux je vais essayer et je vous dirai si ça a marché .

Bonjour, Je suis sur Vista , mise à jour auto activé , la dernière mise à jour de sécurité ne veut pas s'installer . Il s'agit de microsoft net framework version 1.1 service pack 1...KB 953297. J'ai tout essayé sans succés , j'ai vu sur google que le problème était évoqué . Pouvez-vous m'aider ?

Bonsoir tornado , voilà le scan Hijackthis . A+ jle Logfile of HijackThis v1.99.1 Scan saved at 17:29:07, on 17/02/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Apps\ActivBoard\nhksrv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE C:\Apps\ActivBoard\MMKeybd.exe C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe C:\PROGRA~1\Wanadoo\TaskbarIcon.exe C:\WINDOWS\SOINTGR.EXE C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe C:\Program Files\e-Carte Bleue\CL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Booster Wanadoo\wanadoo_booster.exe C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\Program Files\Microsoft Office\Office\OSA.EXE C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE C:\Apps\ActivBoard\TrayMon.exe C:\Apps\ActivBoard\OSD.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/bin/frame.cgi?servic...adoo/inbox.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll O2 - BHO: Toolbar Wanadoo - {4E7BD74F-2B8D-469E-8FB0-B921F5DBF922} - C:\PROGRA~1\WANADO~3\WANADO~1.DLL O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll O3 - Toolbar: Toolbar Wanadoo - {4E7BD74F-2B8D-469E-8FB0-B921F5DBF922} - C:\PROGRA~1\WANADO~3\WANADO~1.DLL O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe" O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe O4 - HKLM\..\Run: [sO5 Integrator Pass Two] C:\WINDOWS\SOINTGR.EXE O4 - HKLM\..\Run: [Wanadoo Messager.exe] "C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe" /background O4 - HKLM\..\Run: [eCarteBleue-CLEO] "C:\Program Files\e-Carte Bleue\CL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe" /dontopenmycards O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [FSASWREG] "C:\Program Files\Anti-Spyware\fsaswreg.exe" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKCU\..\Run: [update Service] C:\PROGRA~1\FICHIE~1\TEKNUM~1\update.exe /startup O4 - Startup: Démarrage d'Office.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE O4 - Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE O4 - Global Startup: Booster Wanadoo.lnk = C:\Program Files\Booster Wanadoo\wanadoo_booster.exe O4 - Global Startup: Contrôleur de calendrier Ulead.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O9 - Extra button: Packard Bell - {1D49B7D4-524D-4ac9-BC34-B4822CAE4BB1} - C:\Apps\IECustom\script.htm O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU) O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/kws/kav...can_unicode.cab O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://207.188.7.150/14354a890ccb353bf806/...RdxIE601_fr.cab O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX 6.5) - http://eu-housecall.trendmicro-europe.com/...ivex/hcImpl.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing) O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard\nhksrv.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Bonjour tornado, C'est fait , celui la a marché ! qu'en penses-tu ?A+ jle ******** 17:47: | Début de session, lundi 13 février 2006 | 17:47: Spy Sweeper démarrée 17:47: Analyse lancée avec la version des définitions 613 17:47: Démarrage de l’analyse de la mémoire 17:51: Analyse de la mémoire terminée, temps passé : 00:04:09 17:51: Démarrage de l’analyse du Registre 17:52: Analyse du Registre terminée, temps passé :00:00:37 17:52: Démarrage de l’analyse des cookies 17:52: Trouvé Spy Cookie: 2o7.net cookie 17:52: eymoz@2o7[1].txt (ID = 1957) 17:52: Trouvé Spy Cookie: xiti cookie 17:52: eymoz@xiti[1].txt (ID = 3717) 17:52: Analyse des cookies terminée, temps passé : 00:00:00 17:52: Démarrage de l’analyse des fichiers 18:43: Avertissement: Invalid file - not a PKZip file 18:43: Avertissement: Unhandled Archive Type 18:44: Avertissement: Invalid file - not a PKZip file 18:44: Avertissement: Invalid file - not a PKZip file 18:44: Avertissement: Invalid file - not a PKZip file 18:44: Avertissement: Invalid file - not a PKZip file 18:44: Avertissement: Invalid file - not a PKZip file 18:44: Avertissement: Invalid file - not a PKZip file 18:44: Avertissement: Invalid file - not a PKZip file 18:44: Avertissement: Invalid file - not a PKZip file 18:44: Avertissement: Invalid file - not a PKZip file 18:44: Avertissement: Invalid file - not a PKZip file 18:44: Avertissement: Invalid file - not a PKZip file 18:44: Avertissement: Invalid Stream 18:44: Avertissement: Invalid Stream 18:44: Analyse des fichiers terminée, temps passé : 00:52:16 18:44: Analyse complète terminée. Durée 00:57:09 18:44: Traces trouvées : 2 18:47: Processus de suppression lancé. 18:47: Mise en quarantaine de toutes les traces : 2o7.net cookie 18:47: Mise en quarantaine de toutes les traces : xiti cookie 18:47: Processus de suppression lancé. Durée 00:00:01 ******** 17:27: | Début de session, lundi 13 février 2006 | 17:27: Spy Sweeper démarrée 17:35: Les définitions de logiciels espions ont été mises à jour. 17:47: | Fin de session, lundi 13 février 2006 |

Bonjour tornado, je suis un peu découragé car Trend Micro me pose également des problèmes . J'ai le message suivant qui s'affiche en permanence " Not Food alert-detected-slow-proxied-connection " et ça rame un maximum ...Peut-être trop compliqué pour moi ! que faire ? merci et à A+ jle

Bonsoir tornado, Panda a encore planté juste avant la fin du scan ! Que faire ? Je vais encore poser une question de mon niveau...Quand tu demandes de supprimer des fichiers ou dossiers C:\Documents..., quelle est la méthode pour trouver ces fichiers , parce que à mon avis je n'utilise pas la bonne . Tu me parles de ce qui est inscrit en gras et moi je ne vois rien en gras . Voilà ; Je dois refaire Panda autrement ? Merci pour ta compréhension .jle

Voilà c'est fait ! Quand tu demandes de vider les dossiers suivants C:\Docum.....Identities[/b]\ est-ce seulement le dossier "Idendities" qu'il faut vider ? Même question pour "sauvegarde mails 2005". Pardonne les questions un peu bête ! Au sujet de l'antivirus , penses -tu qu'Antivir serait préférable à Avast ? J'utilise depuis très peu de temps Avast , les documents contaminés l'ont été lorsque j'utilisais Sécuritoo de Wanadoo . En plus il est facturé 5 euros par mois ! Pour répondre à ta question sur les problèmes et disfonctionnements ; j'ai sollicité une analyse parce que l'objet Average TAC 3.000 était systématiquement trouvé après un scan de l'antispyware . Après élimination cet objet retrouvait sa place au bout de 5 minutes de connexion mais sans que je releve de désordres particuliers ...du moins apparents !! Merci pour tes conseils .A+ jle Au fait dois-je repasser un coup de kaspersky?

Bonsoir tornado , j'ai comme l'impression que Kaspersky a trouvé des choses . Est-ce sérieux ?A+.jle KASPERSKY ON-LINE SCANNER REPORT Friday, February 03, 2006 20:58:35 Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky On-line Scanner version: 5.0.67.0 Kaspersky Anti-Virus database last update: 3/02/2006 Kaspersky Anti-Virus database records: 163981 Scan Settings Scan using the following antivirus database standard Scan Archives true Scan Mail Bases true Scan Target My Computer A:\ C:\ Q:\ R:\ Scan Statistics Total number of scanned objects 78762 Number of viruses found 3 Number of infected objects 54 Number of suspicious objects 48 Duration of the scan process 6015 sec Infected Object Name Virus Name C:\Courriels\Éléments supprimés.dbx/[From "robert fricaud" ][Date Sun, 17 Jul 2005 13:21:10 +0200]/UNNAMED/girls.zip/girls.jpg .scr Infected: Email-Worm.Win32.Eyeveg.g C:\Courriels\Éléments supprimés.dbx/[From "robert fricaud" ][Date Sun, 17 Jul 2005 13:21:10 +0200]/UNNAMED/girls.zip Infected: Email-Worm.Win32.Eyeveg.g C:\Courriels\Éléments supprimés.dbx/[From "robert fricaud" ][Date Sun, 17 Jul 2005 13:21:10 +0200]/UNNAMED Infected: Email-Worm.Win32.Eyeveg.g C:\Courriels\Éléments supprimés.dbx Infected: Email-Worm.Win32.Eyeveg.g C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[F ... /[From amets@who.ch][Date Tue, 23 Mar 2004 18:59:37 + .. ... /html Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[F ... /[From amets@who.ch][Date Tue, 23 Mar 2004 18:59:37 + ... /UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[F ... /[From amets@who.ch][Date Tue, 23 Mar 2004 18:59: ... /message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M . ... /[From noreply@paypal.com][Date Tue, 23 Mar 2004 19:00:47 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M . ... /[From noreply@paypal.com][Date Tue, 23 Mar 2004 19:00:47 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From noreply@paypal.com][Date Tue, 23 Mar 2004 19:00:47 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M . ... /[From maissiat32@aol.com][Date Wed, 24 Mar 2004 13:12:11 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From maissiat32@aol.com][Date Wed, 24 Mar 2004 13:12:11 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Da ... /[From jbarbier1@libertysurf.fr][Date Wed, 24 Mar 2004 13:13:38 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ... /[From jbarbier1@libertysurf.fr][Date Wed, 24 Mar 2004 13:13:38 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][ ... /[From chantalvitipon@hotmail.com][Date Wed, 24 Mar 2004 13:14:07 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Dat ... /[From informatique@ffgolf.org][Date Wed, 24 Mar 2004 13:29:05 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Dat ... /[From informatique@ffgolf.org][Date Wed, 24 Mar 2004 13:29:05 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ] ... /[From informatique@ffgolf.org][Date Wed, 24 Mar 2004 13:29:05 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ... /[From austria@msdirectservices.com][Date Wed, 24 Mar 2004 13:55:22 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ... /[From austria@msdirectservices.com][Date Wed, 24 Mar 2004 13:55:22 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ] ... /[From lyon.chassieu@bluegreen.com][Date Wed, 24 Mar 2004 14:18:07 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ] ... /[From lyon.chassieu@bluegreen.com][Date Wed, 24 Mar 2004 14:18:07 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From golf.albon@wanadoo.fr][Date Wed, 24 Mar 2004 14:44:37 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From golf.albon@wanadoo.fr][Date Wed, 24 Mar 2004 14:44:37 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][D ... /[From golf.albon@wanadoo.fr][Date Wed, 24 Mar 2004 14:44:37 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][ ... /[From ateliers-kerami@wanadoo.fr][Date Wed, 24 Mar 2004 14:46:16 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From acdtech@acdsystems.com][Date Wed, 24 Mar 2004 14:52:00 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From acdtech@acdsystems.com][Date Wed, 24 Mar 2004 14:52:00 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][ ... /[From acdtech@acdsystems.com][Date Wed, 24 Mar 2004 14:52:00 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From info@golfgouverneur.fr][Date Wed, 24 Mar 2004 15:19:40 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][ ... /[From info@golfgouverneur.fr][Date Wed, 24 Mar 2004 15:19:40 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Da ... /[From golf@golf-st-etienne.com][Date Wed, 24 Mar 2004 15:20:23 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ... /[From golf@golf-st-etienne.com][Date Wed, 24 Mar 2004 15:20:23 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... ... /[From osteops@aol.com][Date Wed, 24 Mar 2004 15:34:19 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... ... /[From osteops@aol.com][Date Wed, 24 Mar 2004 15:34:19 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[From osteops@aol.com][Date Wed, 24 Mar 2004 15:34:19 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Da ... /[From golf@golf-st-etienne.com][Date Wed, 24 Mar 2004 16:08:46 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ... /[From golf@golf-st-etienne.com][Date Wed, 24 Mar 2004 16:08:46 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Wed, 24 Mar 2004 16:18:32 +0100 (CET ... /html Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Wed, 24 Mar 2004 16:18:32 +0100 (CET)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peyss ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Wed, 24 Mar 2004 16:18:32 +0100 (CET)]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Dat ... /[From etioro@club-internet.fr][Date Wed, 24 Mar 2004 16:29:48 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Dat ... /[From etioro@club-internet.fr][Date Wed, 24 Mar 2004 16:29:48 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ] ... /[From etioro@club-internet.fr][Date Wed, 24 Mar 2004 16:29:48 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][D ... /[From /contact@lecitronvert.org][Date Wed, 24 Mar 2004 17:01:18 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... ... /[From lola@sexnet.com][Date Wed, 24 Mar 2004 17:02:32 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[From lola@sexnet.com][Date Wed, 24 Mar 2004 17:02:32 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From mssupport@gbrands.com][Date Wed, 24 Mar 2004 17:39:30 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From mssupport@gbrands.com][Date Wed, 24 Mar 2004 17:39:30 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][D ... /[From mssupport@gbrands.com][Date Wed, 24 Mar 2004 17:39:30 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Thu, 25 Mar 2004 13:39:28 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Thu, 25 Mar 2004 13:39:28 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Thu, 25 Mar 2004 13:39:28 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Wed, 30 Oct 2002 19:50:01 +020 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Fri, 26 Mar 2004 17:09:25 GM ... /html Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Fri, 26 Mar 2004 17:09:25 GMT]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Fri, 26 Mar 2004 17:09:25 GMT]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M .. ... /[From about@umist.ac.uk][Date Sat, 27 Mar 2004 12:58:53 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M .. ... /[From about@umist.ac.uk][Date Sat, 27 Mar 2004 12:58:53 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From about@umist.ac.uk][Date Sat, 27 Mar 2004 12:58:53 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M .. ... /[From gdebesson@aol.com][Date Sat, 27 Mar 2004 15:44:54 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M .. ... /[From gdebesson@aol.com][Date Sat, 27 Mar 2004 15:44:54 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From gdebesson@aol.com][Date Sat, 27 Mar 2004 15:44:54 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[From info@adlerevents.ch][Date Mon, 29 Mar 2004 11:09:50 +020 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[From info@adlerevents.ch][Date Mon, 29 Mar 2004 11:09:50 +0200]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Dat ... /[From info@adlerevents.ch][Date Mon, 29 Mar 2004 11:09:50 +0200]/message.scr Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[F ... /[From amets@who.ch][Date Tue, 23 Mar 2004 18:59:37 +0100]/UNNAMED Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[From albanleloup@voila.fr][Date Mon, 22 Mar 2004 19:46:35 +0100]/UNNAMED Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Mon, 22 Mar 2004 11:56:53 +0100]/UNNAMED Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm Infected: Email-Worm.Win32.NetSky.q C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From "robert fricaud" ][Date Sun, 17 Jul 2005 13:21:10 +0200]/girls.zip/girls.jpg .scr Infected: Email-Worm.Win32.Eyeveg.g C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From "robert fricaud" ][Date Sun, 17 Jul 2005 13:21:10 +0200]/girls.zip Infected: Email-Worm.Win32.Eyeveg.g C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From nouslespages@wanadoo.fr][Date Tue, 19 Jul 2005 08:36:23 +0200]/UNNAMED/image.zip/image.jpg .scr Infected: Email-Worm.Win32.Eyeveg.g C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From nouslespages@wanadoo.fr][Date Tue, 19 Jul 2005 08:36:23 +0200]/UNNAMED/image.zip Infected: Email-Worm.Win32.Eyeveg.g C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From nouslespages@wanadoo.fr][Date Tue, 19 Jul 2005 08:36:23 +0200]/UNNAMED Infected: Email-Worm.Win32.Eyeveg.g C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From nouslespages@wanadoo.fr][Date Tue, 19 Jul 2005 08:36:23 +0200]/UNNAMED/image.zip/image.jpg .scr Infected: Email-Worm.Win32.Eyeveg.g C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From nouslespages@wanadoo.fr][Date Tue, 19 Jul 2005 08:36:23 +0200]/UNNAMED/image.zip Infected: Email-Worm.Win32.Eyeveg.g C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From nouslespages@wanadoo.fr][Date Tue, 19 Jul 2005 08:36:23 +0200]/UNNAMED Infected: Email-Worm.Win32.Eyeveg.g C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From "robert fricaud" ][Date Sun, 17 Jul 2005 13:21:10 +0200]/UNNAMED/girls.zip/girls.jpg .scr Infected: Email-Worm.Win32.Eyeveg.g C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From "robert fricaud" ][Date Sun, 17 Jul 2005 13:21:10 +0200]/UNNAMED/girls.zip Infected: Email-Worm.Win32.Eyeveg.g C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From "robert fricaud" ][Date Sun, 17 Jul 2005 13:21:10 +0200]/UNNAMED Infected: Email-Worm.Win32.Eyeveg.g C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx Infected: Email-Worm.Win32.Eyeveg.g Scan process completed.

Voilà tornado , Ccleaner +Jv16+Ewido , tout est fait ! Concernant Jv16 , je me suis contenté de supprimer les lignes avec points verts ; pour les points rouges je pense que pour moi il était préférable de les laisser en place . Ci-dessous ewido et HJT 4 . Merci.jle --------------------------------------------------------- ewido anti-malware - Rapport de scan --------------------------------------------------------- + Créé le: 10:46:57, 03/02/2006 + Somme de contrôle: 9F9AC6FD + Résultats du scan: Pas de fichiers infectés trouvés! ::Fin du rapport Logfile of HijackThis v1.99.1 Scan saved at 11:09:31, on 03/02/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll O2 - BHO: Toolbar Wanadoo - {4E7BD74F-2B8D-469E-8FB0-B921F5DBF922} - C:\PROGRA~1\WANADO~3\WANADO~1.DLL O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll O3 - Toolbar: Toolbar Wanadoo - {4E7BD74F-2B8D-469E-8FB0-B921F5DBF922} - C:\PROGRA~1\WANADO~3\WANADO~1.DLL O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe" O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe O4 - HKLM\..\Run: [sO5 Integrator Pass Two] C:\WINDOWS\SOINTGR.EXE O4 - HKLM\..\Run: [Wanadoo Messager.exe] "C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe" /background O4 - HKLM\..\Run: [eCarteBleue-CLEO] "C:\Program Files\e-Carte Bleue\CL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe" /dontopenmycards O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [FSASWREG] "C:\Program Files\Anti-Spyware\fsaswreg.exe" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKCU\..\Run: [update Service] C:\PROGRA~1\FICHIE~1\TEKNUM~1\update.exe /startup O4 - Startup: Démarrage d'Office.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE O4 - Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE O4 - Global Startup: Booster Wanadoo.lnk = C:\Program Files\Booster Wanadoo\wanadoo_booster.exe O4 - Global Startup: Contrôleur de calendrier Ulead.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O9 - Extra button: Packard Bell - {1D49B7D4-524D-4ac9-BC34-B4822CAE4BB1} - C:\Apps\IECustom\script.htm O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU) O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/14354a890ccb353bf806/...RdxIE601_fr.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard\nhksrv.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Je suis désolé de te relancer avec ce problème mais ça ne marche pas non plus avec ce lien. Merci pour ton aide .jle

Bonjour tornado, je n'arrive pas à telecharger Easycleaner, le telechargement commence et s'arrête au bout de deux minutes . Que dois-je faire ? J'ai désactivé F-secure .Merci .jle