Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

Average TAC 3.000

jle

Par jle
dans Analyses et éradication malwares

 Partager

Messages recommandés

tornado Full Patch Member

tornado

Posté(e)
Posté(e)

Re,

 

Bon ce n'est pas très grave...

 

 

Tu peux remplacer Easycleaner par CCleaner.

 

-Commence par télécharger Ccleaner ---> http://telechargement.zebulon.fr/239-ccleaner.html

 

-Après installation, choisi le bouton "nettoyeur"

-Coche uniquement les cases "Fichiers internet temporaires", "Cookies" et "Historique" :

 

pasdenom3ln.th.jpg

 

-Fais "Analyser"

-Une fois l'analyse terminée, clique sur lancer le nettoyage

 

Et voilà

 

N'oublie pas Jv16 et le scan d'Ewido.

 

A +

jle Junior Member

jle

Posté(e)
  • Auteur
Posté(e)

Re,

 

Bon ce n'est pas très grave...

Tu peux remplacer Easycleaner par CCleaner.

 

-Commence par télécharger Ccleaner ---> http://telechargement.zebulon.fr/239-ccleaner.html

 

-Après installation, choisi le bouton "nettoyeur"

-Coche uniquement les cases "Fichiers internet temporaires", "Cookies" et "Historique" :

 

pasdenom3ln.th.jpg

 

-Fais "Analyser"

-Une fois l'analyse terminée, clique sur lancer le nettoyage

 

Et voilà

 

N'oublie pas Jv16 et le scan d'Ewido.

 

A +

 

Voilà tornado , Ccleaner +Jv16+Ewido , tout est fait ! Concernant Jv16 , je me suis contenté de supprimer les lignes avec points verts ; pour les points rouges je pense que pour moi il était préférable de les laisser en place . Ci-dessous ewido et HJT 4 . Merci.jle

 

---------------------------------------------------------

ewido anti-malware - Rapport de scan

---------------------------------------------------------

 

+ Créé le: 10:46:57, 03/02/2006

+ Somme de contrôle: 9F9AC6FD

 

+ Résultats du scan:

 

Pas de fichiers infectés trouvés!

 

 

::Fin du rapport

 

 

Logfile of HijackThis v1.99.1

Scan saved at 11:09:31, on 03/02/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\HijackThis\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL

O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: e-Carte Bleue Browser Helper Object - {2E03C0FD-4C48-43A7-9A54-00240C70FF16} - C:\WINDOWS\system32\BhoECart.dll

O2 - BHO: Toolbar Wanadoo - {4E7BD74F-2B8D-469E-8FB0-B921F5DBF922} - C:\PROGRA~1\WANADO~3\WANADO~1.DLL

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll

O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll

O3 - Toolbar: Toolbar Wanadoo - {4E7BD74F-2B8D-469E-8FB0-B921F5DBF922} - C:\PROGRA~1\WANADO~3\WANADO~1.DLL

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize

O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet

O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE

O4 - HKLM\..\Run: [ACTIVBOARD] C:\Apps\ActivBoard\MMKeybd.exe

O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"

O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe

O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe

O4 - HKLM\..\Run: [sO5 Integrator Pass Two] C:\WINDOWS\SOINTGR.EXE

O4 - HKLM\..\Run: [Wanadoo Messager.exe] "C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe" /background

O4 - HKLM\..\Run: [eCarteBleue-CLEO] "C:\Program Files\e-Carte Bleue\CL\e-Carte Bleue VISA Cleo\ECB-CLEO.exe" /dontopenmycards

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [FSASWREG] "C:\Program Files\Anti-Spyware\fsaswreg.exe"

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

O4 - HKCU\..\Run: [update Service] C:\PROGRA~1\FICHIE~1\TEKNUM~1\update.exe /startup

O4 - Startup: Démarrage d'Office.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE

O4 - Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE

O4 - Global Startup: Booster Wanadoo.lnk = C:\Program Files\Booster Wanadoo\wanadoo_booster.exe

O4 - Global Startup: Contrôleur de calendrier Ulead.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe

O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE

O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html

O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html

O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html

O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html

O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html

O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html

O9 - Extra button: Packard Bell - {1D49B7D4-524D-4ac9-BC34-B4822CAE4BB1} - C:\Apps\IECustom\script.htm

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll

O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe

O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe

O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)

O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab

O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/14354a890ccb353bf806/...RdxIE601_fr.cab

O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab

O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe

O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe

O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe

O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Apps\ActivBoard\nhksrv.exe

O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

tornado Full Patch Member

tornado

Posté(e)
Posté(e) (modifié)

Re,

 

Voilà tornado , Ccleaner +Jv16+Ewido , tout est fait ! Concernant Jv16 , je me suis contenté de supprimer les lignes avec points verts ; pour les points rouges je pense que pour moi il était préférable de les laisser en place . Ci-dessous ewido et HJT 4 . Merci.jle

 

Tu as bien fait de ne pas les supprimer. Il vaut mieux supprimer les clés caduques à la main en passant par "Regedit".

 

Ewido n'a rien trouvé, et ton rapport hijack est propre...

 

Tu peux terminer en faisant le scan de Kaspersky en ligne ---> http://www.zebulon.fr/outils/antivirus/ant...us-en-ligne.php

 

Poste le rapport du scan.

Modifié par tornado
jle Junior Member

jle

Posté(e)
  • Auteur
Posté(e)

Re,

Tu as bien fait de ne pas les supprimer. Il vaut mieux supprimer les clés caduques à la main en passant par "Regedit".

 

Ewido n'a rien trouvé, et ton rapport hijack est propre...

 

Tu peux terminer en faisant le scan de Kaspersky en ligne ---> http://www.zebulon.fr/outils/antivirus/ant...us-en-ligne.php

 

Poste le rapport du scan.

 

Bonsoir tornado , j'ai comme l'impression que Kaspersky a trouvé des choses . Est-ce sérieux ?A+.jle

 

KASPERSKY ON-LINE SCANNER REPORT

Friday, February 03, 2006 20:58:35

Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)

Kaspersky On-line Scanner version: 5.0.67.0

Kaspersky Anti-Virus database last update: 3/02/2006

Kaspersky Anti-Virus database records: 163981

 

 

Scan Settings

Scan using the following antivirus database standard

Scan Archives true

Scan Mail Bases true

 

Scan Target My Computer

A:\

C:\

Q:\

R:\

 

Scan Statistics

Total number of scanned objects 78762

Number of viruses found 3

Number of infected objects 54

Number of suspicious objects 48

Duration of the scan process 6015 sec

 

Infected Object Name Virus Name

C:\Courriels\Éléments supprimés.dbx/[From "robert fricaud" ][Date Sun, 17 Jul 2005 13:21:10 +0200]/UNNAMED/girls.zip/girls.jpg .scr Infected: Email-Worm.Win32.Eyeveg.g

 

C:\Courriels\Éléments supprimés.dbx/[From "robert fricaud" ][Date Sun, 17 Jul 2005 13:21:10 +0200]/UNNAMED/girls.zip Infected: Email-Worm.Win32.Eyeveg.g

 

C:\Courriels\Éléments supprimés.dbx/[From "robert fricaud" ][Date Sun, 17 Jul 2005 13:21:10 +0200]/UNNAMED Infected: Email-Worm.Win32.Eyeveg.g

 

C:\Courriels\Éléments supprimés.dbx Infected: Email-Worm.Win32.Eyeveg.g

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[F ... /[From amets@who.ch][Date Tue, 23 Mar 2004 18:59:37 + .. ... /html Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[F ... /[From amets@who.ch][Date Tue, 23 Mar 2004 18:59:37 + ... /UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[F ... /[From amets@who.ch][Date Tue, 23 Mar 2004 18:59: ... /message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M . ... /[From noreply@paypal.com][Date Tue, 23 Mar 2004 19:00:47 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M . ... /[From noreply@paypal.com][Date Tue, 23 Mar 2004 19:00:47 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From noreply@paypal.com][Date Tue, 23 Mar 2004 19:00:47 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M . ... /[From maissiat32@aol.com][Date Wed, 24 Mar 2004 13:12:11 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From maissiat32@aol.com][Date Wed, 24 Mar 2004 13:12:11 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Da ... /[From jbarbier1@libertysurf.fr][Date Wed, 24 Mar 2004 13:13:38 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ... /[From jbarbier1@libertysurf.fr][Date Wed, 24 Mar 2004 13:13:38 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][ ... /[From chantalvitipon@hotmail.com][Date Wed, 24 Mar 2004 13:14:07 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Dat ... /[From informatique@ffgolf.org][Date Wed, 24 Mar 2004 13:29:05 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Dat ... /[From informatique@ffgolf.org][Date Wed, 24 Mar 2004 13:29:05 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ] ... /[From informatique@ffgolf.org][Date Wed, 24 Mar 2004 13:29:05 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ... /[From austria@msdirectservices.com][Date Wed, 24 Mar 2004 13:55:22 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ... /[From austria@msdirectservices.com][Date Wed, 24 Mar 2004 13:55:22 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ] ... /[From lyon.chassieu@bluegreen.com][Date Wed, 24 Mar 2004 14:18:07 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ] ... /[From lyon.chassieu@bluegreen.com][Date Wed, 24 Mar 2004 14:18:07 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From golf.albon@wanadoo.fr][Date Wed, 24 Mar 2004 14:44:37 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From golf.albon@wanadoo.fr][Date Wed, 24 Mar 2004 14:44:37 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][D ... /[From golf.albon@wanadoo.fr][Date Wed, 24 Mar 2004 14:44:37 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][ ... /[From ateliers-kerami@wanadoo.fr][Date Wed, 24 Mar 2004 14:46:16 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From acdtech@acdsystems.com][Date Wed, 24 Mar 2004 14:52:00 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From acdtech@acdsystems.com][Date Wed, 24 Mar 2004 14:52:00 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][ ... /[From acdtech@acdsystems.com][Date Wed, 24 Mar 2004 14:52:00 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From info@golfgouverneur.fr][Date Wed, 24 Mar 2004 15:19:40 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][ ... /[From info@golfgouverneur.fr][Date Wed, 24 Mar 2004 15:19:40 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Da ... /[From golf@golf-st-etienne.com][Date Wed, 24 Mar 2004 15:20:23 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ... /[From golf@golf-st-etienne.com][Date Wed, 24 Mar 2004 15:20:23 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... ... /[From osteops@aol.com][Date Wed, 24 Mar 2004 15:34:19 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... ... /[From osteops@aol.com][Date Wed, 24 Mar 2004 15:34:19 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[From osteops@aol.com][Date Wed, 24 Mar 2004 15:34:19 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Da ... /[From golf@golf-st-etienne.com][Date Wed, 24 Mar 2004 16:08:46 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ... /[From golf@golf-st-etienne.com][Date Wed, 24 Mar 2004 16:08:46 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Wed, 24 Mar 2004 16:18:32 +0100 (CET ... /html Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Wed, 24 Mar 2004 16:18:32 +0100 (CET)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peyss ... /[From MAILER-DAEMON@wanadoo.fr (Mail Delivery System)][Date Wed, 24 Mar 2004 16:18:32 +0100 (CET)]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Dat ... /[From etioro@club-internet.fr][Date Wed, 24 Mar 2004 16:29:48 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Dat ... /[From etioro@club-internet.fr][Date Wed, 24 Mar 2004 16:29:48 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ] ... /[From etioro@club-internet.fr][Date Wed, 24 Mar 2004 16:29:48 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][D ... /[From /contact@lecitronvert.org][Date Wed, 24 Mar 2004 17:01:18 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... ... /[From lola@sexnet.com][Date Wed, 24 Mar 2004 17:02:32 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[From lola@sexnet.com][Date Wed, 24 Mar 2004 17:02:32 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From mssupport@gbrands.com][Date Wed, 24 Mar 2004 17:39:30 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From mssupport@gbrands.com][Date Wed, 24 Mar 2004 17:39:30 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][D ... /[From mssupport@gbrands.com][Date Wed, 24 Mar 2004 17:39:30 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Thu, 25 Mar 2004 13:39:28 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Thu, 25 Mar 2004 13:39:28 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Thu, 25 Mar 2004 13:39:28 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Wed, 30 Oct 2002 19:50:01 +020 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Wed, 30 Oct 2002 19:50:01 +0200]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Fri, 26 Mar 2004 17:09:25 GM ... /html Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Fri, 26 Mar 2004 17:09:25 GMT]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Fri, 26 Mar 2004 17:09:25 GMT]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M .. ... /[From about@umist.ac.uk][Date Sat, 27 Mar 2004 12:58:53 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M .. ... /[From about@umist.ac.uk][Date Sat, 27 Mar 2004 12:58:53 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From about@umist.ac.uk][Date Sat, 27 Mar 2004 12:58:53 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M .. ... /[From gdebesson@aol.com][Date Sat, 27 Mar 2004 15:44:54 +010 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M .. ... /[From gdebesson@aol.com][Date Sat, 27 Mar 2004 15:44:54 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date ... /[From gdebesson@aol.com][Date Sat, 27 Mar 2004 15:44:54 +0100]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[From info@adlerevents.ch][Date Mon, 29 Mar 2004 11:09:50 +020 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[From info@adlerevents.ch][Date Mon, 29 Mar 2004 11:09:50 +0200]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Dat ... /[From info@adlerevents.ch][Date Mon, 29 Mar 2004 11:09:50 +0200]/message.scr Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[F ... /[From amets@who.ch][Date Tue, 23 Mar 2004 18:59:37 +0100]/UNNAMED Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date M ... /[From albanleloup@voila.fr][Date Mon, 22 Mar 2004 19:46:35 +0100]/UNNAMED Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED/[From "Thierry Peysson" ][Date Mon, 22 Mar 2004 11:56:53 +0100]/UNNAMED Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED/[From "Thierry Peysson" ][Date Sun, 21 Mar 2004 09:07:37 +0100]/UNNAMED Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED/[From IncrediMail][Date Wed, 22 Jan 2003 10:00:01 +0000]/UNNAMED Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:05 +0000]/UNNAMED Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:02 +0000]/UNNAMED Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm/[From IncrediMail][Date Wed, 09 Apr 2003 10:00:03 +0000]/UNNAMED Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\{B82062B5-3F05-4D14-B388-00720AABD2A2}\Message Store\Inbox.imm Infected: Email-Worm.Win32.NetSky.q

 

C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From "robert fricaud" ][Date Sun, 17 Jul 2005 13:21:10 +0200]/girls.zip/girls.jpg .scr Infected: Email-Worm.Win32.Eyeveg.g

 

C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From "robert fricaud" ][Date Sun, 17 Jul 2005 13:21:10 +0200]/girls.zip Infected: Email-Worm.Win32.Eyeveg.g

 

C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From nouslespages@wanadoo.fr][Date Tue, 19 Jul 2005 08:36:23 +0200]/UNNAMED/image.zip/image.jpg .scr Infected: Email-Worm.Win32.Eyeveg.g

 

C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From nouslespages@wanadoo.fr][Date Tue, 19 Jul 2005 08:36:23 +0200]/UNNAMED/image.zip Infected: Email-Worm.Win32.Eyeveg.g

 

C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From nouslespages@wanadoo.fr][Date Tue, 19 Jul 2005 08:36:23 +0200]/UNNAMED Infected: Email-Worm.Win32.Eyeveg.g

 

C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From nouslespages@wanadoo.fr][Date Tue, 19 Jul 2005 08:36:23 +0200]/UNNAMED/image.zip/image.jpg .scr Infected: Email-Worm.Win32.Eyeveg.g

 

C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From nouslespages@wanadoo.fr][Date Tue, 19 Jul 2005 08:36:23 +0200]/UNNAMED/image.zip Infected: Email-Worm.Win32.Eyeveg.g

 

C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From nouslespages@wanadoo.fr][Date Tue, 19 Jul 2005 08:36:23 +0200]/UNNAMED Infected: Email-Worm.Win32.Eyeveg.g

 

C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From "robert fricaud" ][Date Sun, 17 Jul 2005 13:21:10 +0200]/UNNAMED/girls.zip/girls.jpg .scr Infected: Email-Worm.Win32.Eyeveg.g

 

C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From "robert fricaud" ][Date Sun, 17 Jul 2005 13:21:10 +0200]/UNNAMED/girls.zip Infected: Email-Worm.Win32.Eyeveg.g

 

C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx/[From "robert fricaud" ][Date Sun, 17 Jul 2005 13:21:10 +0200]/UNNAMED Infected: Email-Worm.Win32.Eyeveg.g

 

C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\Éléments supprimés.dbx Infected: Email-Worm.Win32.Eyeveg.g

 

Scan process completed.

tornado Full Patch Member

tornado

Posté(e)
Posté(e) (modifié)

Re jle,

 

Bonsoir tornado , j'ai comme l'impression que Kaspersky a trouvé des choses . Est-ce sérieux ?A+.jle

 

 

Ton filtrage de mails n'est pas très efficace à ce que je vois...

 

Vide totalement les dossiers suivants:

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\

 

C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\

 

Puis vide la corbeille de windows.

 

 

Un conseil : vide régulièrement ta boîte mail... vu toutes les "cochonneries" que tu reçois.

 

Edit: As-tu toujours des disfonctionnements/problèmes ?

Modifié par tornado
jle Junior Member

jle

Posté(e)
  • Auteur
Posté(e)

Re jle,

Ton filtrage de mails n'est pas très efficace à ce que je vois...

 

Vide totalement les dossiers suivants:

 

C:\Documents and Settings\Eymoz\Local Settings\Application Data\IM\Identities\

 

C:\Documents and Settings\Eymoz\Mes documents\Sauvegarde mails 2005\

 

Puis vide la corbeille de windows.

Un conseil : vide régulièrement ta boîte mail... vu toutes les "cochonneries" que tu reçois.

 

Edit: As-tu toujours des disfonctionnements/problèmes ?

 

Voilà c'est fait ! Quand tu demandes de vider les dossiers suivants C:\Docum.....Identities[/b]\ est-ce seulement le dossier "Idendities" qu'il faut vider ? Même question pour "sauvegarde mails 2005". Pardonne les questions un peu bête !

Au sujet de l'antivirus , penses -tu qu'Antivir serait préférable à Avast ? J'utilise depuis très peu de temps Avast , les documents contaminés l'ont été lorsque j'utilisais Sécuritoo de Wanadoo . En plus il est facturé 5 euros par mois !

Pour répondre à ta question sur les problèmes et disfonctionnements ; j'ai sollicité une analyse parce que l'objet Average TAC 3.000 était systématiquement trouvé après un scan de l'antispyware . Après élimination cet objet retrouvait sa place au bout de 5 minutes de connexion mais sans que je releve de désordres particuliers ...du moins apparents !!

Merci pour tes conseils .A+ jle Au fait dois-je repasser un coup de kaspersky?

tornado Full Patch Member

tornado

Posté(e)
Posté(e) (modifié)
Voilà c'est fait ! Quand tu demandes de vider les dossiers suivants C:\Docum.....Identities[/b]\ est-ce seulement le dossier "Idendities" qu'il faut vider ? Même question pour "sauvegarde mails 2005". Pardonne les questions un peu bête !

 

 

Oui c'est bien ça (juste ce qui est en gras quoi). J'aurais dû être plus précis...

 

Au sujet de l'antivirus , penses -tu qu'Antivir serait préférable à Avast ? J'utilise depuis très peu de temps Avast , les documents contaminés l'ont été lorsque j'utilisais Sécuritoo de Wanadoo . En plus il est facturé 5 euros par mois !

 

Je ne saurais trop te conseiller. J'utilise avast depuis plus d'un an, et presque pas de problèmes (je doute sur la fiabilité de son scan, par contre sa protection résidente me paraît tout à fait convenable). Antivir est plus léger qu'avast mais il est en anglais. La meilleure solution est que tu fasses un essai :P

 

A+ jle Au fait dois-je repasser un coup de kaspersky?

 

Fais plutôt le scan de panda (après avoir supprimé les dossiers) et poste le rapport

 

---> http://www.zebulon.fr/outils/antivirus/ant...us-en-ligne.php

 

 

A+

Modifié par tornado
jle Junior Member

jle

Posté(e)
  • Auteur
Posté(e)

Oui c'est bien ça (juste ce qui est en gras quoi). J'aurais dû être plus précis...

Je ne saurais trop te conseiller. J'utilise avast depuis plus d'un an, et presque pas de problèmes (je doute sur la fiabilité de son scan, par contre sa protection résidente me paraît tout à fait convenable). Antivir est plus léger qu'avast mais il est en anglais. La meilleure solution est que tu fasses un essai :P

Fais plutôt le scan de panda (après avoir supprimé les dossiers) et poste le rapport

 

---> http://www.zebulon.fr/outils/antivirus/ant...us-en-ligne.php

A+

 

Bonsoir tornado, Panda a encore planté juste avant la fin du scan ! Que faire ? Je vais encore poser une question de mon niveau...Quand tu demandes de supprimer des fichiers ou dossiers C:\Documents..., quelle est la méthode pour trouver ces fichiers , parce que à mon avis je n'utilise pas la bonne . Tu me parles de ce qui est inscrit en gras et moi je ne vois rien en gras . Voilà ; Je dois refaire Panda autrement ? Merci pour ta compréhension .jle

tornado Full Patch Member

tornado

Posté(e)
Posté(e) (modifié)

Re jle,

 

 

Je pense que tu n'arrives pas à repérer les dossiers car tu n'as sûrement pas fait ça :

 

-Va dans "poste de travail" ; "outils", "options", onglet "affichage"

-Coche la lignes suivante:

 

---> "afficher les fichiers et dossiers cachés "

- Puis valide.

 

 

Ensuite tu peux retrouver les dossiers en passant par :

 

-"Poste de travail", "disque local", "documents and settings", "Eymoz", "Local settings", "Application Data","IM","Identities"

Et là tu supprimes tout ce qu'il y a dans ce dossier

 

Même chose pour "Sauvegardes mails 2005"

 

 

Bon sinon, laisse tomber Panda, fais le scan de trend micro ---> http://fr.trendmicro-europe.com/consumer/h...call_launch.php

 

Colle le rapport

Modifié par tornado

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...