Sujet Précédent Sujet Suivant

[downloader.agent.12D et 11Q]

elise -  
 balltrap34 -
Bon alors après scan en ligne voici ci-joint le conte rendu :
Scan started at 11/05/2005 17:30:50

Scanning memory...
Scanning boot sectors...
Scanning files...
C:\Documents and Settings\CLERICE\Local Settings\Application Data\IM\Identities\{7A28F1B9-DBF8-4041-A399-81AB34C27C91}\Message Store\JunkMail.imm->(part0997:) - Trojan:HTML/Bankfraud.C* -> Infected

Scanned
============================
Objects: 59785
Directories: 4072
Archives: 8583
Size(Kb): 1856892
Infected files: 1

Found
============================
Viruses found: 1
Suspicious files: 0
Disinfected files: 0
Mail files: 786
En fait ce que je ne comprend pas c'est que pendant quelques heures cet après midi, mon pc s'est comporté comme s'il n'y avait plus de virus et maintenant j'ai de nouveau AVG qui me signale le virus à chaque fois que j'ouvre un dossier.
Dommage, j'y ai cru l'instant de quelques heures.
Alors mon message ce soir et simple, court et complet : HELPPPPP

Merci pour votre aide

Elise

41 réponses

Réponse 1 / 41
Utilisateur anonyme
 
ok pour faire court:
1/Affiche tous les fichiers et dossiers :
cliquer sur démarrer/panneau de configuration/option des dossiers/affichage
Cocher afficher les dossiers cacher

Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)"

Décocher masquer les extensions dont le type est connu
Puis fais «Ok» pour valider les changements.

Et appliquer

2/supprimes ce qui est en gras
C:\Documents and Settings\CLERICE\Local Settings\Application Data\IM\Identities\{7A28F1B9-DBF8-4041-A399-81AB34C27C91}\Message Store\JunkMail.imm

3/chemin inverse du 1 poiur les cacher

4/ rescan pour verif

5/Bon courage ; a+
0
Réponse 2 / 41
elise
 
Merci pour les conseils

Je cours de ce pas me fumer une p'tite cigarette, me préparer un thé et passer ma soirée devant mon pc, le filet de pêche dans la main droite, l'asticot dans la gauche et avec un peu de chance je vais bien réussir à l'harponner..............

Si j'attrape la bête je vous la prend en photo.

Je te tiens au courant

Merci

Elise
0
Réponse 3 / 41
theoelliot Messages postés 335 Statut Membre 12
 
Alors c'est gagné?
J'éteins mon pc, je redémarre pour une petite analyse avec AVG histoire de me rassurer complètement et je vous tiens au courant.
Je n'ose encore y croire
Elise

Scan started at 11/05/2005 21:35:28

Scanning memory...
Scanning boot sectors...
Scanning files...

Scanned
============================
Objects: 60307
Directories: 4145
Archives: 8587
Size(Kb): 1853400
Infected files: 0

Found
============================
Viruses found: 0
Suspicious files: 0
Disinfected files: 0
Mail files: 775
0
Réponse 4 / 41
Utilisateur anonyme
 
re,
apparemment tout est clean ici, et ton antivirus?

a+
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 41
theoelliot Messages postés 335 Statut Membre 12
 
Mouai ben mon antivirus me dit que j'ai toujours le virus download etc.... Je n'y comprend rien, pourquoi au scan en ligne il n'y a rien et avec AVG je suis contaminée?
J'ai du louper un épisode non?

Elise
0
Réponse 6 / 41
elise
 
Logfile of HijackThis v1.99.1
Scan saved at 23:46:58, on 11/05/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\SCANJET\PrecisionScanLT\hppwrsav.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Olitec\USB ADSL\CnxDslTb.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\javawg.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\palmOne\AlarmApp.exe
C:\Program Files\palmOne\HOTSYNC.EXE
C:\PROGRA~1\INCRED~1\bin\IMAPP.EXE
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\CLERICE\LOCALS~1\Temp\Rar$EX00.594\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://www.smart-search.biz
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.smart-search.biz
R1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://www.LOX.com/index.html
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://www.LOX.com/index.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.smart-search.biz
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.smart-search.biz
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.LOX.com/index.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {5401DC8A-1A4C-4EDC-9555-CC66BBEDCDF4} - C:\WINDOWS\iesu.dll
O2 - BHO: Tubby - {9EAC0102-5E61-2312-BC2D-4D54434D5443} - C:\WINDOWS\system32\MTC.dll (file missing)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll (file missing)
O3 - Toolbar: Search Toolbar - {9EAC0102-5E61-2312-BC2D-4D54434D5443} - C:\WINDOWS\system32\MTC.dll (file missing)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [hppwrsav] C:\SCANJET\PrecisionScanLT\hppwrsav.exe
O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,NewDotNetStartup -s
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [DI2] "C:\DOCUME~1\CLERICE\LOCALS~1\Temp\27.exe\27.exe"
O4 - HKLM\..\Run: [Eistv] C:\Program Files\Tjqdgn\Itmnf.exe
O4 - HKLM\..\Run: [FlenCPY] "C:\Program Files\Common Files\Java\flencpy.exe"
O4 - HKLM\..\Run: [CnxDslTaskBar] C:\Program Files\Olitec\USB ADSL\CnxDslTb.exe
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [Crazy Browser.exe] C:\Program Files\Crazy Browser\Crazy Browser.exe
O4 - HKLM\..\Run: [mscq32.exe] C:\WINDOWS\system32\mscq32.exe
O4 - HKLM\..\Run: [Windows Service] C:\WINDOWS\system32\2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O4 - HKLM\..\Run: [javawg.exe] C:\WINDOWS\javawg.exe
O4 - HKLM\..\RunOnce: [appzv.exe] C:\WINDOWS\appzv.exe
O4 - HKLM\..\RunOnce: [ntuh.exe] C:\WINDOWS\system32\ntuh.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Pense-Bête] C:\Program Files\Pense-bete\Pensbet78a.exe
O4 - HKCU\..\Run: [NDrv] C:\WINDOWS\System32\NDrv.exe
O4 - HKCU\..\Run: [Windows Service] C:\WINDOWS\system32\2.exe
O4 - Startup: HotSync Manager.lnk = C:\Program Files\palmOne\HOTSYNC.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Alarm Manager.LNK = C:\Program Files\palmOne\AlarmApp.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Broken Internet access because of LSP provider 'c:\program files\newdotnet\newdotnet6_38.dll' missing
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: {11111111-1111-1111-1111-111111111123} - http://fuckgoat.net//gallery/d.exe
O16 - DPF: {11311111-1551-1661-1771-000000000000} - http://www.all-find.org/mih2/web.exe
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/FunBuddyIconsFWBInitialSetup1.0.0.8.cab
O16 - DPF: {22A88341-AFCB-45F0-A856-C2BAE74F878E} (InstallX Class) - http://www.20x2p.com/09222a6a/enter.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by12fd.bay12.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {527196A4-B1A3-4647-931D-37BA5AF23037} - http://www.all-find.org/mih4/web.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {9EAC0186-5F5A-4362-B120-15C312CE012D} - http://www.awmdabest.com/cabl/2343/tb.cab
O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game17.zylomgames.com/activex/zylomgamesplayer.cab
O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f005.mail.caramail.lycos.fr/app/uploader/FileUploader.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://labo.nomatica.com/XUpload.ocx
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O16 - DPF: {FFCEABDA-C04E-7F4A-E9B6-DFA72B2F49FB} - http://213.200.210.10/dl/101/FR732_116.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{FEA75EBE-B070-4112-B3A0-F14EA3722F07}: NameServer = 213.36.80.1 213.36.80.1
O23 - Service: Remote Procedure Call (RPC) Helper ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\msez.exe (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
0
Réponse 7 / 41
Utilisateur anonyme
 
met moi le scan de avg aussi
0
Réponse 8 / 41
Utilisateur anonyme
 
whaou t es grave infecté < jte fais ca demain !

supprime new do net en first:
http://www.new.net/support/uninstall6_76.exe

------------

Ad-Aware :
http://telecharger.01net.com/windows/Internet/internet_utlitaire/fiches/11643.html

Le patch en Français pour Ad-Aware :
http://telecharger.01net.com/windows/Internet/internet_utlitaire/fiches/25543.html

Spybot :
http://telecharger.01net.com/windows/Internet/internet_utlitaire/fiches/26157.html

essai ceci,met les a jour, scan et supprime tous ce qu il trouve...
------------------
ensuite recolle moi un log

a demain bisous
0
Réponse 9 / 41
elise
 
Moi Franchement ça ne me parle pas du tout, mais bon........
A tu besoin d'autre chose?
Un café?
Une cigarette?
Un biscuit?
Je sais pas moi parce que je culpabilise de faire travailler les autres......
Bon courage.
Et encore merci

Elise

"","","Cheval de Troie Dropper.Small.9.BV","C:\2.exe","07/05/2005 13:52:30","2.exe","27 KB"
"","","Cheval de Troie Dialer","C:\127056.exe","07/05/2005 13:52:30","127056.exe","26.68 KB"
"","","Cheval de Troie Clicker.3.AV","C:\3.exe","07/05/2005 13:52:30","3.exe","6.84 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\bmykym.txt","07/05/2005 13:52:30","bmykym.txt","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\tnqxsp.txt","07/05/2005 13:52:30","tnqxsp.txt","32.62 KB"
"","","Cheval de Troie Startpage.19.AO","C:\WINDOWS\tldea.dll","07/05/2005 13:52:30","tldea.dll","65 KB"
"","","Cheval de Troie Startpage.19.AO","C:\WINDOWS\zipgnh.dat","07/05/2005 13:52:30","zipgnh.dat","65 KB"
"","","Cheval de Troie Downloader.Small.8.R","C:\WINDOWS\system32\dload.exe","07/05/2005 13:52:30","dload.exe","24.5 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\msez.exe","07/05/2005 13:52:30","msez.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\mscq32.exe","07/05/2005 13:52:30","mscq32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\apitc.exe","07/05/2005 13:52:30","apitc.exe","11.12 KB"
"","","Cheval de Troie Startpage.20.F","C:\WINDOWS\system32\boln.dll","07/05/2005 13:52:30","boln.dll","39 KB"
"","","Cheval de Troie Dropper.Small.9.BV","C:\WINDOWS\system32\2.exe","07/05/2005 13:52:30","2.exe","27 KB"
"","","Cheval de Troie Downloader.Agent.6.BN","C:\WINDOWS\system32\MTC.dll","07/05/2005 13:52:30","MTC.dll","84 KB"
"","","Virus identifié Worm/Lovsan.A","C:\WINDOWS\system32\TFTP2564","07/05/2005 13:52:30","TFTP2564","4 KB"
"","","Virus identifié Worm/Lovsan.A","C:\WINDOWS\system32\TFTP2124","07/05/2005 13:52:30","TFTP2124","4 KB"
"","","Cheval de Troie Dialer.26.AF","C:\Program Files\WebSiteViewer\127056.dlr","07/05/2005 13:52:30","127056.dlr","79.5 KB"
"","","Cheval de Troie Dialer","C:\Program Files\WebSiteViewer\127056.exe","07/05/2005 13:52:30","127056.exe","26.68 KB"
"","","Cheval de Troie Small.P","C:\Program Files\Tjqdgn\Itmnf.exe","07/05/2005 13:52:30","Itmnf.exe","36.63 KB"
"","","Cheval de Troie Small.P","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP343\A0113783.exe","07/05/2005 13:52:30","A0113783.exe","36.63 KB"
"","","Cheval de Troie Downloader.Dyfica.3.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP367\A0120335.exe","07/05/2005 13:52:30","A0120335.exe","50.88 KB"
"","","Cheval de Troie Downloader.Dyfica.3.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP372\A0120544.EXE","07/05/2005 13:52:30","A0120544.EXE","50.88 KB"
"","","Cheval de Troie Dialer.17.B","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP401\A0129050.exe","07/05/2005 13:52:30","A0129050.exe","115.16 KB"
"","","Cheval de Troie Dialer.18.AF","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP401\A0129053.exe","07/05/2005 13:52:30","A0129053.exe","84.89 KB"
"","","Cheval de Troie Dialer.18.AF","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP411\A0130145.exe","07/05/2005 13:52:30","A0130145.exe","84.89 KB"
"","","Cheval de Troie Collected.AF","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP413\A0130195.exe","07/05/2005 13:52:30","A0130195.exe","50.94 KB"
"","","Cheval de Troie Downloader.Small.8.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132437.exe","07/05/2005 13:52:30","A0132437.exe","24.5 KB"
"","","Cheval de Troie Dialer","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132440.exe","07/05/2005 13:52:31","A0132440.exe","26.68 KB"
"","","Cheval de Troie Downloader.Small.8.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132507.exe","07/05/2005 13:52:31","A0132507.exe","24.5 KB"
"","","Cheval de Troie Dialer","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132510.exe","07/05/2005 13:52:31","A0132510.exe","26.68 KB"
"","","Cheval de Troie Downloader.Small.8.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132524.exe","07/05/2005 13:52:31","A0132524.exe","24.5 KB"
"","","Cheval de Troie Dialer","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132527.exe","07/05/2005 13:52:31","A0132527.exe","26.68 KB"
"","","Cheval de Troie Downloader.Small.8.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0132632.exe","07/05/2005 13:52:31","A0132632.exe","24.5 KB"
"","","Cheval de Troie Startpage.19.AO","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0132883.dll","07/05/2005 13:52:31","A0132883.dll","65 KB"
"","","Cheval de Troie Dialer","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0132923.exe","07/05/2005 13:52:31","A0132923.exe","26.68 KB"
"","","Cheval de Troie Downloader.Small.8.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133264.exe","07/05/2005 13:52:31","A0133264.exe","24.5 KB"
"","","Cheval de Troie Dialer","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133267.exe","07/05/2005 13:52:31","A0133267.exe","26.68 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\System32\MSCQ32.EXE","07/05/2005 13:54:23","MSCQ32.EXE","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\System32\MSEZ.EXE","07/05/2005 13:55:40","MSEZ.EXE","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\System32\MSCQ32.EXE","07/05/2005 13:55:46","MSCQ32.EXE","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\System32\MSCQ32.EXE","07/05/2005 13:57:04","MSCQ32.EXE","32.62 KB"
"","","Cheval de Troie Small.P","C:\Program Files\Tjqdgn\Itmnf.exe","07/05/2005 13:58:08","Itmnf.exe","36.63 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\System32\MSEZ.EXE","07/05/2005 13:59:37","MSEZ.EXE","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\System32\MSEZ.EXE","07/05/2005 17:45:10","MSEZ.EXE","11.12 KB"
"","","Cheval de Troie Startpage.19.AO","C:\WINDOWS\tldea.dll","07/05/2005 17:48:06","tldea.dll","65 KB"
"","","Cheval de Troie Downloader.Small.8.R","C:\WINDOWS\System32\DLOAD.EXE","07/05/2005 17:50:58","DLOAD.EXE","24.5 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\iehs.exe","07/05/2005 18:32:55","iehs.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\System32\mfcee.exe","07/05/2005 19:36:25","mfcee.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\iefo32.exe","07/05/2005 19:36:29","iefo32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\System32\addrw32.exe","07/05/2005 21:45:11","addrw32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\System32\crtn.exe","07/05/2005 21:45:17","crtn.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\addwz.exe","07/05/2005 22:04:22","addwz.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addso.exe","07/05/2005 22:04:27","addso.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\javako.exe","07/05/2005 22:15:20","javako.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\System32\mfclx32.exe","07/05/2005 22:15:26","mfclx32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\System32\netgf32.exe","07/05/2005 22:46:54","netgf32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\winho.exe","07/05/2005 22:47:00","winho.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\addgs32.exe","07/05/2005 23:56:12","addgs32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\crhb.exe","07/05/2005 23:56:19","crhb.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\mfcfa.exe","08/05/2005 08:25:54","mfcfa.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\winfl32.exe","08/05/2005 08:25:54","winfl32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\creb.exe","08/05/2005 08:25:54","creb.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\sdkxf32.exe","08/05/2005 08:25:55","sdkxf32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\atlyo.exe","08/05/2005 08:25:55","atlyo.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\atlgd.exe","08/05/2005 08:25:55","atlgd.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\mfcso.exe","08/05/2005 08:25:55","mfcso.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\ieef.exe","08/05/2005 08:25:55","ieef.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\javahu.exe","08/05/2005 08:25:55","javahu.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\addds32.exe","08/05/2005 08:25:55","addds32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\sdkem32.exe","08/05/2005 08:25:55","sdkem32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\ietx32.exe","08/05/2005 08:25:55","ietx32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\mfcdw32.exe","08/05/2005 08:25:55","mfcdw32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\mfchx32.exe","08/05/2005 08:25:55","mfchx32.exe","32.62 KB"
"","","Cheval de Troie Clicker.3.AV","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133304.exe","08/05/2005 08:25:55","A0133304.exe","6.84 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133306.exe","08/05/2005 08:25:55","A0133306.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.6.BN","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133308.dll","08/05/2005 08:25:55","A0133308.dll","84 KB"
"","","Cheval de Troie Dropper.Small.9.BV","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133345.EXE","08/05/2005 08:25:55","A0133345.EXE","27 KB"
"","","Cheval de Troie Startpage.19.AO","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133353.dll","08/05/2005 08:25:55","A0133353.dll","65 KB"
"","","Cheval de Troie Downloader.Small.8.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133356.EXE","08/05/2005 08:25:55","A0133356.EXE","24.5 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\javaie.exe","08/05/2005 22:04:17","javaie.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\System32\mfckw32.exe","08/05/2005 22:04:22","mfckw32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\ntos32.exe","08/05/2005 22:16:15","ntos32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\System32\apppb.exe","08/05/2005 22:16:22","apppb.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\mfctc.exe","08/05/2005 22:18:47","mfctc.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\System32\ieul32.exe","08/05/2005 22:18:54","ieul32.exe","32.62 KB"
"","","Virus identifié I-Worm/Netsky.D","your_letter.pif","08/05/2005 22:57:16","your_letter.pif","17 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\System32\netix.exe","08/05/2005 23:10:25","netix.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addjg32.exe","08/05/2005 23:10:32","addjg32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\d3tm32.exe","09/05/2005 08:28:33","d3tm32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addvq.exe","09/05/2005 08:28:33","addvq.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\mfchn32.exe","09/05/2005 08:28:33","mfchn32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\apptk.exe","09/05/2005 08:28:33","apptk.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\winge.exe","09/05/2005 08:28:33","winge.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\winqa32.exe","09/05/2005 08:28:33","winqa32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\msdg32.exe","09/05/2005 08:28:33","msdg32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\d3lq32.exe","09/05/2005 08:28:34","d3lq32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\ipsw32.exe","09/05/2005 08:28:34","ipsw32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addje.exe","09/05/2005 08:28:34","addje.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\d3jh.exe","09/05/2005 08:28:34","d3jh.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addgr.exe","09/05/2005 08:28:34","addgr.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\addqd32.exe","09/05/2005 08:28:34","addqd32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addlx.exe","09/05/2005 08:28:34","addlx.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\crhx.exe","09/05/2005 08:28:34","crhx.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\atlwu32.exe","09/05/2005 08:28:34","atlwu32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\mfceq32.exe","09/05/2005 08:28:34","mfceq32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\d3tt32.exe","09/05/2005 08:28:34","d3tt32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\wines.exe","09/05/2005 08:28:34","wines.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\apild.exe","09/05/2005 08:28:34","apild.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\msuc.exe","09/05/2005 08:28:34","msuc.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\appsd.exe","09/05/2005 08:28:34","appsd.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ipuh32.exe","09/05/2005 08:28:34","ipuh32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\ieiw.exe","09/05/2005 08:28:34","ieiw.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\iesc.exe","09/05/2005 08:28:34","iesc.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ntss32.exe","09/05/2005 08:28:34","ntss32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\netnv32.exe","09/05/2005 08:28:34","netnv32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\syshr32.exe","09/05/2005 08:28:34","syshr32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\sdkia.exe","09/05/2005 08:28:34","sdkia.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\javark.exe","09/05/2005 08:28:34","javark.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\appkr32.exe","09/05/2005 08:28:34","appkr32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\d3zf.exe","09/05/2005 08:28:35","d3zf.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\atlrh.exe","09/05/2005 08:28:35","atlrh.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\mstz32.exe","09/05/2005 08:28:35","mstz32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\netkz32.exe","09/05/2005 08:28:35","netkz32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ipfi32.exe","09/05/2005 08:28:35","ipfi32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\crrm.exe","09/05/2005 08:28:35","crrm.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\d3xl.exe","09/05/2005 08:28:35","d3xl.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\apiig32.exe","09/05/2005 08:28:35","apiig32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\apiof32.exe","09/05/2005 08:28:35","apiof32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\javaui32.exe","09/05/2005 08:28:35","javaui32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\msxl.exe","09/05/2005 08:28:35","msxl.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\javadh.exe","09/05/2005 08:28:35","javadh.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\netuc.exe","09/05/2005 08:28:35","netuc.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ntci.exe","09/05/2005 08:28:35","ntci.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\appwr32.exe","09/05/2005 08:28:35","appwr32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\ipvl32.exe","09/05/2005 08:28:35","ipvl32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133436.exe","09/05/2005 08:28:35","A0133436.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133438.exe","09/05/2005 08:28:35","A0133438.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133440.exe","09/05/2005 08:28:35","A0133440.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133442.exe","09/05/2005 08:28:35","A0133442.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133443.exe","09/05/2005 08:28:35","A0133443.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133444.exe","09/05/2005 08:28:35","A0133444.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133446.exe","09/05/2005 08:28:35","A0133446.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133447.exe","09/05/2005 08:28:35","A0133447.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133448.exe","09/05/2005 08:28:35","A0133448.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\atlyc32.exe","09/05/2005 10:59:58","atlyc32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\crdt.exe","09/05/2005 10:59:58","crdt.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\ipuo.exe","09/05/2005 10:59:58","ipuo.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addpg32.exe","09/05/2005 10:59:58","addpg32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\apphn32.exe","09/05/2005 10:59:58","apphn32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\msso.exe","09/05/2005 10:59:58","msso.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\msrl.exe","09/05/2005 10:59:58","msrl.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\apiec32.exe","09/05/2005 10:59:58","apiec32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\addvx32.exe","09/05/2005 10:59:58","addvx32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ipww.exe","09/05/2005 10:59:58","ipww.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\d3ie32.exe","09/05/2005 10:59:58","d3ie32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\d3fu32.exe","10/05/2005 09:43:12","d3fu32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\apizd.exe","10/05/2005 09:43:12","apizd.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\javang.exe","10/05/2005 09:43:12","javang.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\iegk.exe","10/05/2005 09:43:12","iegk.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\winoq32.exe","10/05/2005 09:43:12","winoq32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\atlki.exe","10/05/2005 09:43:12","atlki.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\ntnt32.exe","10/05/2005 09:43:12","ntnt32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addqt.exe","10/05/2005 09:43:12","addqt.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addpk32.exe","10/05/2005 09:43:12","addpk32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\applk32.exe","10/05/2005 09:43:12","applk32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\crpf32.exe","10/05/2005 09:43:12","crpf32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\mfcly32.exe","10/05/2005 09:43:12","mfcly32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\atlok.exe","10/05/2005 09:43:12","atlok.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\ntwz32.exe","10/05/2005 09:43:12","ntwz32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\appni.exe","10/05/2005 09:43:12","appni.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\crtn32.exe","10/05/2005 09:43:12","crtn32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\addri.exe","10/05/2005 09:43:12","addri.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\mfcyg.exe","10/05/2005 09:43:12","mfcyg.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\iehi.exe","10/05/2005 09:43:12","iehi.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\appek.exe","10/05/2005 09:43:13","appek.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\mfceb32.exe","10/05/2005 09:43:13","mfceb32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\javaqz.exe","10/05/2005 09:43:13","javaqz.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\sdkjz32.exe","10/05/2005 09:43:13","sdkjz32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\iemk.exe","10/05/2005 09:43:13","iemk.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\mski32.exe","10/05/2005 09:43:13","mski32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ipob.exe","10/05/2005 09:43:13","ipob.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ntkb.exe","10/05/2005 09:43:13","ntkb.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\apiqo.exe","10/05/2005 09:43:13","apiqo.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\iemh32.exe","10/05/2005 09:43:13","iemh32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\sdkut32.exe","10/05/2005 09:43:13","sdkut32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\iecp.exe","10/05/2005 09:43:13","iecp.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\msgf.exe","10/05/2005 09:43:13","msgf.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\addze.exe","10/05/2005 09:43:13","addze.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\crsr.exe","10/05/2005 09:43:13","crsr.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\iesx32.exe","10/05/2005 09:43:13","iesx32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\mfcgz.exe","10/05/2005 09:43:13","mfcgz.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133612.exe","10/05/2005 09:43:13","A0133612.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133614.exe","10/05/2005 09:43:13","A0133614.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133615.exe","10/05/2005 09:43:13","A0133615.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133616.exe","10/05/2005 09:43:13","A0133616.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133618.exe","10/05/2005 09:43:13","A0133618.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133620.exe","10/05/2005 09:43:13","A0133620.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133621.exe","10/05/2005 09:43:13","A0133621.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133623.exe","10/05/2005 09:43:13","A0133623.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133624.exe","10/05/2005 09:43:13","A0133624.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133626.exe","10/05/2005 09:43:13","A0133626.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133627.exe","10/05/2005 09:43:13","A0133627.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133628.exe","10/05/2005 09:43:14","A0133628.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133629.exe","10/05/2005 09:43:14","A0133629.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133631.exe","10/05/2005 09:43:14","A0133631.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133632.exe","10/05/2005 09:43:14","A0133632.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133633.exe","10/05/2005 09:43:14","A0133633.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133635.exe","10/05/2005 09:43:14","A0133635.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133636.exe","10/05/2005 09:43:14","A0133636.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133638.exe","10/05/2005 09:43:14","A0133638.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133639.exe","10/05/2005 09:43:14","A0133639.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133640.exe","10/05/2005 09:43:14","A0133640.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133642.exe","10/05/2005 09:43:14","A0133642.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133643.exe","10/05/2005 09:43:14","A0133643.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133644.exe","10/05/2005 09:43:14","A0133644.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133646.exe","10/05/2005 09:43:14","A0133646.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133647.exe","10/05/2005 09:43:14","A0133647.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133648.exe","10/05/2005 09:43:14","A0133648.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133649.exe","10/05/2005 09:43:14","A0133649.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133651.exe","10/05/2005 09:43:14","A0133651.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133652.exe","10/05/2005 09:43:14","A0133652.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133653.exe","10/05/2005 09:43:14","A0133653.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133654.exe","10/05/2005 09:43:14","A0133654.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133655.exe","10/05/2005 09:43:14","A0133655.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133656.exe","10/05/2005 09:43:14","A0133656.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133658.exe","10/05/2005 09:43:14","A0133658.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133744.exe","10/05/2005 09:43:14","A0133744.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133745.exe","10/05/2005 09:43:14","A0133745.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\sdkgw32.exe","11/05/2005 08:32:55","sdkgw32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\sdkyi32.exe","11/05/2005 08:32:55","sdkyi32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\adddt32.exe","11/05/2005 08:32:55","adddt32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\sdkhy.exe","11/05/2005 08:32:55","sdkhy.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\mfcrx32.exe","11/05/2005 08:32:55","mfcrx32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\mfcsk.exe","11/05/2005 08:32:55","mfcsk.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\crsj.exe","11/05/2005 08:32:55","crsj.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\apptt.exe","11/05/2005 08:32:55","apptt.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\d3ic32.exe","11/05/2005 08:32:55","d3ic32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\apifn.exe","11/05/2005 08:32:55","apifn.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\netix.exe","11/05/2005 08:32:56","netix.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\atlnf.exe","11/05/2005 08:32:56","atlnf.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\atlin.exe","11/05/2005 08:32:56","atlin.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\atlzr.exe","11/05/2005 08:32:56","atlzr.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ipbk.exe","11/05/2005 08:32:56","ipbk.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\atljh32.exe","11/05/2005 08:32:56","atljh32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\javapg.exe","11/05/2005 08:32:56","javapg.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\apibo32.exe","11/05/2005 08:32:56","apibo32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\apits32.exe","11/05/2005 08:32:56","apits32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ntsb32.exe","11/05/2005 08:32:56","ntsb32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\netjl.exe","11/05/2005 08:32:56","netjl.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\sysgw32.exe","11/05/2005 08:32:56","sysgw32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\d3ho32.exe","11/05/2005 08:32:56","d3ho32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\ntbi.exe","11/05/2005 08:32:56","ntbi.exe","32.62 KB"
"","","Cheval de Troie Dropper.Small.18.AA","C:\WINDOWS\Temp\ft28s.exe","11/05/2005 08:32:56","ft28s.exe","10 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133945.exe","11/05/2005 08:32:56","A0133945.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133946.exe","11/05/2005 08:32:56","A0133946.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133947.exe","11/05/2005 08:32:56","A0133947.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133948.exe","11/05/2005 08:32:56","A0133948.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133949.exe","11/05/2005 08:32:56","A0133949.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133950.exe","11/05/2005 08:32:56","A0133950.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133951.exe","11/05/2005 08:32:56","A0133951.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133952.exe","11/05/2005 08:32:57","A0133952.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133953.exe","11/05/2005 08:32:57","A0133953.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133954.exe","11/05/2005 08:32:57","A0133954.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133955.exe","11/05/2005 08:32:57","A0133955.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133956.exe","11/05/2005 08:32:57","A0133956.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133957.exe","11/05/2005 08:32:57","A0133957.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133958.exe","11/05/2005 08:32:57","A0133958.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133959.exe","11/05/2005 08:32:57","A0133959.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133960.exe","11/05/2005 08:32:57","A0133960.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133961.exe","11/05/2005 08:32:57","A0133961.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133962.exe","11/05/2005 08:32:57","A0133962.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133963.exe","11/05/2005 08:32:57","A0133963.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133964.exe","11/05/2005 08:32:57","A0133964.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133965.exe","11/05/2005 08:32:57","A0133965.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133966.exe","11/05/2005 08:32:57","A0133966.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133967.exe","11/05/2005 08:32:57","A0133967.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133968.exe","11/05/2005 08:32:57","A0133968.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133969.exe","11/05/2005 08:32:57","A0133969.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133970.exe","11/05/2005 08:32:57","A0133970.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133971.exe","11/05/2005 08:32:57","A0133971.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133972.exe","11/05/2005 08:32:57","A0133972.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133973.exe","11/05/2005 08:32:57","A0133973.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133974.exe","11/05/2005 08:32:57","A0133974.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133975.exe","11/05/2005 08:32:57","A0133975.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133976.exe","11/05/2005 08:32:57","A0133976.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133977.exe","11/05/2005 08:32:57","A0133977.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133978.exe","11/05/2005 08:32:57","A0133978.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133979.exe","11/05/2005 08:32:57","A0133979.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133980.exe","11/05/2005 08:32:57","A0133980.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\crlo32.exe","11/05/2005 12:26:47","crlo32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\sdkze.exe","11/05/2005 14:28:37","sdkze.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\atlrm32.exe","11/05/2005 14:28:38","atlrm32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\nethm32.exe","11/05/2005 14:28:38","nethm32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\syskh.exe","11/05/2005 14:28:38","syskh.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\appbl32.exe","11/05/2005 14:28:38","appbl32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\mfceg.exe","11/05/2005 14:28:38","mfceg.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\mfcav32.exe","11/05/2005 14:28:38","mfcav32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\d3gd.exe","11/05/2005 14:28:38","d3gd.exe","11.12 KB"
"","",&qu
0
Réponse 10 / 41
Utilisateur anonyme
 
ok merci fais le poste juste au dessu et a demain bisous
0
Réponse 11 / 41
elise
 
Ben merci pour le réconfort!!!!
Voilà que Monsieur me dit bonsoir, t'es grave infectée, c'est pas grave, on fait ça demain.

Argh je sens déjà que ça me gratte !!!!!

Remarque ce qui me rassure c'est que je sais déjà ce que j'ai, alors c'est 90 % de la guérison.

Je fais tout ce que tu m'as dit dès demain matin (aussitôt les jujus jetés au fond de leur classe) et quand même bonne nuit à toi et à tout le monde.

Biz et oups au dodo

Je tiens à remercier ici toutes les personnes qui m'ont conseillée aujourd'hui. Merci aux fins connaisseurs que vous etes de prendre du temps avec des néophytes comme moi.

Elise
0
Réponse 12 / 41
ELISE
 
Bonjour,

J'ai donc fait tout ce que tu m'avais demandé et voici les 2 logs.

LOG D'AVG :

"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\appdz32.exe","12/05/2005 12:10:14","appdz32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\msny.exe","12/05/2005 11:39:44","msny.exe","11.74 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\winha32.exe","12/05/2005 11:39:44","winha32.exe","11.34 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\sysed32.exe","12/05/2005 11:39:44","sysed32.exe","11.5 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\crfq.exe","12/05/2005 11:39:44","crfq.exe","11.37 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\systn.exe","12/05/2005 11:39:44","systn.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\atlqr32.exe","12/05/2005 11:39:44","atlqr32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\atlkl32.exe","12/05/2005 11:39:44","atlkl32.exe","11.3 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\apixn32.exe","12/05/2005 11:39:44","apixn32.exe","11.79 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\apicw.exe","12/05/2005 11:39:44","apicw.exe","11.73 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\ipeb32.exe","12/05/2005 11:39:44","ipeb32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\ipoz32.exe","12/05/2005 11:39:44","ipoz32.exe","11.54 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\ntxq.exe","12/05/2005 11:39:43","ntxq.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\netgl32.exe","12/05/2005 11:39:43","netgl32.exe","11.57 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\d3hr32.exe","12/05/2005 08:59:10","d3hr32.exe","11.32 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\iekv.exe","12/05/2005 08:59:10","iekv.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\sdkla32.exe","12/05/2005 08:59:10","sdkla32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\nettc.exe","12/05/2005 08:59:10","nettc.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\sdkzj.exe","12/05/2005 08:59:10","sdkzj.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\netqs32.exe","12/05/2005 08:59:10","netqs32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\sdkpt.exe","12/05/2005 08:59:10","sdkpt.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\appfd.exe","11/05/2005 23:07:12","appfd.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\addby32.exe","11/05/2005 23:07:12","addby32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ntuh.exe","11/05/2005 23:07:12","ntuh.exe","11.76 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\d3ae32.exe","11/05/2005 23:07:12","d3ae32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\netjg32.exe","11/05/2005 23:07:12","netjg32.exe","11.33 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\winvx32.exe","11/05/2005 23:07:11","winvx32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\iezx32.exe","11/05/2005 23:07:11","iezx32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\addyu.exe","11/05/2005 23:07:11","addyu.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\iphm32.exe","11/05/2005 23:07:11","iphm32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\apimp.exe","11/05/2005 23:07:11","apimp.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\crkg32.exe","11/05/2005 23:07:11","crkg32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\mfcuy32.exe","11/05/2005 23:07:11","mfcuy32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\javaro.exe","11/05/2005 23:07:11","javaro.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\appzv.exe","11/05/2005 23:07:11","appzv.exe","11.95 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\crqf.exe","11/05/2005 23:07:11","crqf.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\msxd32.exe","11/05/2005 23:07:11","msxd32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\sysnh.exe","11/05/2005 23:07:11","sysnh.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\sdkbf.exe","11/05/2005 23:07:11","sdkbf.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\mfcja.exe","11/05/2005 23:07:11","mfcja.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\sysye32.exe","11/05/2005 23:07:11","sysye32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\addbk.exe","11/05/2005 23:07:11","addbk.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\mfcih32.exe","11/05/2005 18:02:11","mfcih32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\System32\wineq32.exe","11/05/2005 17:28:18","wineq32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\mfcxo.exe","11/05/2005 17:27:02","mfcxo.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\apiaz32.exe","11/05/2005 17:26:59","apiaz32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\javaso.exe","11/05/2005 17:26:54","javaso.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\winyf32.exe","11/05/2005 17:26:49","winyf32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\mfcvc32.exe","11/05/2005 14:28:38","mfcvc32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\sysoq32.exe","11/05/2005 14:28:38","sysoq32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ntzb.exe","11/05/2005 14:28:38","ntzb.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\d3qx32.exe","11/05/2005 14:28:38","d3qx32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\msuq32.exe","11/05/2005 14:28:38","msuq32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\sdklq32.exe","11/05/2005 14:28:38","sdklq32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\apimx.exe","11/05/2005 14:28:38","apimx.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\apptz32.exe","11/05/2005 14:28:38","apptz32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ieox32.exe","11/05/2005 14:28:38","ieox32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\d3gd.exe","11/05/2005 14:28:38","d3gd.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\mfcav32.exe","11/05/2005 14:28:38","mfcav32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\mfceg.exe","11/05/2005 14:28:38","mfceg.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\appbl32.exe","11/05/2005 14:28:38","appbl32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\syskh.exe","11/05/2005 14:28:38","syskh.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\nethm32.exe","11/05/2005 14:28:38","nethm32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\atlrm32.exe","11/05/2005 14:28:38","atlrm32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\sdkze.exe","11/05/2005 14:28:37","sdkze.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\crlo32.exe","11/05/2005 12:26:47","crlo32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133980.exe","11/05/2005 08:32:57","A0133980.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133979.exe","11/05/2005 08:32:57","A0133979.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133978.exe","11/05/2005 08:32:57","A0133978.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133977.exe","11/05/2005 08:32:57","A0133977.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133976.exe","11/05/2005 08:32:57","A0133976.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133975.exe","11/05/2005 08:32:57","A0133975.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133974.exe","11/05/2005 08:32:57","A0133974.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133973.exe","11/05/2005 08:32:57","A0133973.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133972.exe","11/05/2005 08:32:57","A0133972.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133971.exe","11/05/2005 08:32:57","A0133971.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133970.exe","11/05/2005 08:32:57","A0133970.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133969.exe","11/05/2005 08:32:57","A0133969.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133968.exe","11/05/2005 08:32:57","A0133968.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133967.exe","11/05/2005 08:32:57","A0133967.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133966.exe","11/05/2005 08:32:57","A0133966.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133965.exe","11/05/2005 08:32:57","A0133965.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133964.exe","11/05/2005 08:32:57","A0133964.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133963.exe","11/05/2005 08:32:57","A0133963.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133962.exe","11/05/2005 08:32:57","A0133962.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133961.exe","11/05/2005 08:32:57","A0133961.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133960.exe","11/05/2005 08:32:57","A0133960.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133959.exe","11/05/2005 08:32:57","A0133959.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133958.exe","11/05/2005 08:32:57","A0133958.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133957.exe","11/05/2005 08:32:57","A0133957.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133956.exe","11/05/2005 08:32:57","A0133956.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133955.exe","11/05/2005 08:32:57","A0133955.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133954.exe","11/05/2005 08:32:57","A0133954.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133953.exe","11/05/2005 08:32:57","A0133953.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133952.exe","11/05/2005 08:32:57","A0133952.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133951.exe","11/05/2005 08:32:56","A0133951.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133950.exe","11/05/2005 08:32:56","A0133950.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133949.exe","11/05/2005 08:32:56","A0133949.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133948.exe","11/05/2005 08:32:56","A0133948.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133947.exe","11/05/2005 08:32:56","A0133947.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133946.exe","11/05/2005 08:32:56","A0133946.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133945.exe","11/05/2005 08:32:56","A0133945.exe","32.62 KB"
"","","Cheval de Troie Dropper.Small.18.AA","C:\WINDOWS\Temp\ft28s.exe","11/05/2005 08:32:56","ft28s.exe","10 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\ntbi.exe","11/05/2005 08:32:56","ntbi.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\d3ho32.exe","11/05/2005 08:32:56","d3ho32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\sysgw32.exe","11/05/2005 08:32:56","sysgw32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\netjl.exe","11/05/2005 08:32:56","netjl.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ntsb32.exe","11/05/2005 08:32:56","ntsb32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\apits32.exe","11/05/2005 08:32:56","apits32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\apibo32.exe","11/05/2005 08:32:56","apibo32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\javapg.exe","11/05/2005 08:32:56","javapg.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\atljh32.exe","11/05/2005 08:32:56","atljh32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ipbk.exe","11/05/2005 08:32:56","ipbk.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\atlzr.exe","11/05/2005 08:32:56","atlzr.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\atlin.exe","11/05/2005 08:32:56","atlin.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\atlnf.exe","11/05/2005 08:32:56","atlnf.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\netix.exe","11/05/2005 08:32:56","netix.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\apifn.exe","11/05/2005 08:32:55","apifn.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\d3ic32.exe","11/05/2005 08:32:55","d3ic32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\apptt.exe","11/05/2005 08:32:55","apptt.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\crsj.exe","11/05/2005 08:32:55","crsj.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\mfcsk.exe","11/05/2005 08:32:55","mfcsk.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\mfcrx32.exe","11/05/2005 08:32:55","mfcrx32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\sdkhy.exe","11/05/2005 08:32:55","sdkhy.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\adddt32.exe","11/05/2005 08:32:55","adddt32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\sdkyi32.exe","11/05/2005 08:32:55","sdkyi32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\sdkgw32.exe","11/05/2005 08:32:55","sdkgw32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133745.exe","10/05/2005 09:43:14","A0133745.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133744.exe","10/05/2005 09:43:14","A0133744.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133658.exe","10/05/2005 09:43:14","A0133658.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133656.exe","10/05/2005 09:43:14","A0133656.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133655.exe","10/05/2005 09:43:14","A0133655.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133654.exe","10/05/2005 09:43:14","A0133654.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133653.exe","10/05/2005 09:43:14","A0133653.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133652.exe","10/05/2005 09:43:14","A0133652.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133651.exe","10/05/2005 09:43:14","A0133651.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133649.exe","10/05/2005 09:43:14","A0133649.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133648.exe","10/05/2005 09:43:14","A0133648.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133647.exe","10/05/2005 09:43:14","A0133647.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133646.exe","10/05/2005 09:43:14","A0133646.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133644.exe","10/05/2005 09:43:14","A0133644.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133643.exe","10/05/2005 09:43:14","A0133643.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133642.exe","10/05/2005 09:43:14","A0133642.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133640.exe","10/05/2005 09:43:14","A0133640.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133639.exe","10/05/2005 09:43:14","A0133639.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133638.exe","10/05/2005 09:43:14","A0133638.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133636.exe","10/05/2005 09:43:14","A0133636.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133635.exe","10/05/2005 09:43:14","A0133635.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133633.exe","10/05/2005 09:43:14","A0133633.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133632.exe","10/05/2005 09:43:14","A0133632.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133631.exe","10/05/2005 09:43:14","A0133631.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133629.exe","10/05/2005 09:43:14","A0133629.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133628.exe","10/05/2005 09:43:14","A0133628.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133627.exe","10/05/2005 09:43:13","A0133627.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133626.exe","10/05/2005 09:43:13","A0133626.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133624.exe","10/05/2005 09:43:13","A0133624.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133623.exe","10/05/2005 09:43:13","A0133623.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133621.exe","10/05/2005 09:43:13","A0133621.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133620.exe","10/05/2005 09:43:13","A0133620.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133618.exe","10/05/2005 09:43:13","A0133618.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133616.exe","10/05/2005 09:43:13","A0133616.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133615.exe","10/05/2005 09:43:13","A0133615.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133614.exe","10/05/2005 09:43:13","A0133614.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133612.exe","10/05/2005 09:43:13","A0133612.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\mfcgz.exe","10/05/2005 09:43:13","mfcgz.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\iesx32.exe","10/05/2005 09:43:13","iesx32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\crsr.exe","10/05/2005 09:43:13","crsr.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\addze.exe","10/05/2005 09:43:13","addze.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\msgf.exe","10/05/2005 09:43:13","msgf.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\iecp.exe","10/05/2005 09:43:13","iecp.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\sdkut32.exe","10/05/2005 09:43:13","sdkut32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\iemh32.exe","10/05/2005 09:43:13","iemh32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\apiqo.exe","10/05/2005 09:43:13","apiqo.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ntkb.exe","10/05/2005 09:43:13","ntkb.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ipob.exe","10/05/2005 09:43:13","ipob.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\mski32.exe","10/05/2005 09:43:13","mski32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\iemk.exe","10/05/2005 09:43:13","iemk.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\sdkjz32.exe","10/05/2005 09:43:13","sdkjz32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\javaqz.exe","10/05/2005 09:43:13","javaqz.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\mfceb32.exe","10/05/2005 09:43:13","mfceb32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\appek.exe","10/05/2005 09:43:13","appek.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\iehi.exe","10/05/2005 09:43:12","iehi.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\mfcyg.exe","10/05/2005 09:43:12","mfcyg.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\addri.exe","10/05/2005 09:43:12","addri.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\crtn32.exe","10/05/2005 09:43:12","crtn32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\appni.exe","10/05/2005 09:43:12","appni.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\ntwz32.exe","10/05/2005 09:43:12","ntwz32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\atlok.exe","10/05/2005 09:43:12","atlok.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\mfcly32.exe","10/05/2005 09:43:12","mfcly32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\crpf32.exe","10/05/2005 09:43:12","crpf32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\applk32.exe","10/05/2005 09:43:12","applk32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addpk32.exe","10/05/2005 09:43:12","addpk32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addqt.exe","10/05/2005 09:43:12","addqt.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\ntnt32.exe","10/05/2005 09:43:12","ntnt32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\atlki.exe","10/05/2005 09:43:12","atlki.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\winoq32.exe","10/05/2005 09:43:12","winoq32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\iegk.exe","10/05/2005 09:43:12","iegk.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\javang.exe","10/05/2005 09:43:12","javang.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\apizd.exe","10/05/2005 09:43:12","apizd.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\d3fu32.exe","10/05/2005 09:43:12","d3fu32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\d3ie32.exe","09/05/2005 10:59:58","d3ie32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ipww.exe","09/05/2005 10:59:58","ipww.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\addvx32.exe","09/05/2005 10:59:58","addvx32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\apiec32.exe","09/05/2005 10:59:58","apiec32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\msrl.exe","09/05/2005 10:59:58","msrl.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\msso.exe","09/05/2005 10:59:58","msso.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\apphn32.exe","09/05/2005 10:59:58","apphn32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addpg32.exe","09/05/2005 10:59:58","addpg32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\ipuo.exe","09/05/2005 10:59:58","ipuo.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\crdt.exe","09/05/2005 10:59:58","crdt.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\atlyc32.exe","09/05/2005 10:59:58","atlyc32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133448.exe","09/05/2005 08:28:35","A0133448.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133447.exe","09/05/2005 08:28:35","A0133447.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133446.exe","09/05/2005 08:28:35","A0133446.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133444.exe","09/05/2005 08:28:35","A0133444.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133443.exe","09/05/2005 08:28:35","A0133443.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133442.exe","09/05/2005 08:28:35","A0133442.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133440.exe","09/05/2005 08:28:35","A0133440.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133438.exe","09/05/2005 08:28:35","A0133438.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133436.exe","09/05/2005 08:28:35","A0133436.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\ipvl32.exe","09/05/2005 08:28:35","ipvl32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\appwr32.exe","09/05/2005 08:28:35","appwr32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ntci.exe","09/05/2005 08:28:35","ntci.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\netuc.exe","09/05/2005 08:28:35","netuc.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\javadh.exe","09/05/2005 08:28:35","javadh.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\msxl.exe","09/05/2005 08:28:35","msxl.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\javaui32.exe","09/05/2005 08:28:35","javaui32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\apiof32.exe","09/05/2005 08:28:35","apiof32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\apiig32.exe","09/05/2005 08:28:35","apiig32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\d3xl.exe","09/05/2005 08:28:35","d3xl.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\crrm.exe","09/05/2005 08:28:35","crrm.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ipfi32.exe","09/05/2005 08:28:35","ipfi32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\netkz32.exe","09/05/2005 08:28:35","netkz32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\mstz32.exe","09/05/2005 08:28:35","mstz32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\atlrh.exe","09/05/2005 08:28:35","atlrh.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\d3zf.exe","09/05/2005 08:28:35","d3zf.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\appkr32.exe","09/05/2005 08:28:34","appkr32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\javark.exe","09/05/2005 08:28:34","javark.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\sdkia.exe","09/05/2005 08:28:34","sdkia.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\syshr32.exe","09/05/2005 08:28:34","syshr32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\netnv32.exe","09/05/2005 08:28:34","netnv32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ntss32.exe","09/05/2005 08:28:34","ntss32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\iesc.exe","09/05/2005 08:28:34","iesc.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\ieiw.exe","09/05/2005 08:28:34","ieiw.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\ipuh32.exe","09/05/2005 08:28:34","ipuh32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\appsd.exe","09/05/2005 08:28:34","appsd.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\msuc.exe","09/05/2005 08:28:34","msuc.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\apild.exe","09/05/2005 08:28:34","apild.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\wines.exe","09/05/2005 08:28:34","wines.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\d3tt32.exe","09/05/2005 08:28:34","d3tt32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\mfceq32.exe","09/05/2005 08:28:34","mfceq32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\atlwu32.exe","09/05/2005 08:28:34","atlwu32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\crhx.exe","09/05/2005 08:28:34","crhx.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addlx.exe","09/05/2005 08:28:34","addlx.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\addqd32.exe","09/05/2005 08:28:34","addqd32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addgr.exe","09/05/2005 08:28:34","addgr.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\d3jh.exe","09/05/2005 08:28:34","d3jh.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addje.exe","09/05/2005 08:28:34","addje.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\ipsw32.exe","09/05/2005 08:28:34","ipsw32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\d3lq32.exe","09/05/2005 08:28:34","d3lq32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\msdg32.exe","09/05/2005 08:28:33","msdg32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\winqa32.exe","09/05/2005 08:28:33","winqa32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\winge.exe","09/05/2005 08:28:33","winge.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\apptk.exe","09/05/2005 08:28:33","apptk.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\mfchn32.exe","09/05/2005 08:28:33","mfchn32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addvq.exe","09/05/2005 08:28:33","addvq.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\d3tm32.exe","09/05/2005 08:28:33","d3tm32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addjg32.exe","08/05/2005 23:10:32","addjg32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\System32\netix.exe","08/05/2005 23:10:25","netix.exe","11.12 KB"
"","","Virus identifié I-Worm/Netsky.D","your_letter.pif","08/05/2005 22:57:16","your_letter.pif","17 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\System32\ieul32.exe","08/05/2005 22:18:54","ieul32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\mfctc.exe","08/05/2005 22:18:47","mfctc.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\System32\apppb.exe","08/05/2005 22:16:22","apppb.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\ntos32.exe","08/05/2005 22:16:15","ntos32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\System32\mfckw32.exe","08/05/2005 22:04:22","mfckw32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\javaie.exe","08/05/2005 22:04:17","javaie.exe","11.12 KB"
"","","Cheval de Troie Downloader.Small.8.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133356.EXE","08/05/2005 08:25:55","A0133356.EXE","24.5 KB"
"","","Cheval de Troie Startpage.19.AO","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133353.dll","08/05/2005 08:25:55","A0133353.dll","65 KB"
"","","Cheval de Troie Dropper.Small.9.BV","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133345.EXE","08/05/2005 08:25:55","A0133345.EXE","27 KB"
"","","Cheval de Troie Downloader.Agent.6.BN","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133308.dll","08/05/2005 08:25:55","A0133308.dll","84 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133306.exe","08/05/2005 08:25:55","A0133306.exe","11.12 KB"
"","","Cheval de Troie Clicker.3.AV","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133304.exe","08/05/2005 08:25:55","A0133304.exe","6.84 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\mfchx32.exe","08/05/2005 08:25:55","mfchx32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\mfcdw32.exe","08/05/2005 08:25:55","mfcdw32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\ietx32.exe","08/05/2005 08:25:55","ietx32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\sdkem32.exe","08/05/2005 08:25:55","sdkem32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\system32\addds32.exe","08/05/2005 08:25:55","addds32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\system32\javahu.exe","08/05/2005 08:25:55","javahu.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\ieef.exe","08/05/2005 08:25:55","ieef.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\mfcso.exe","08/05/2005 08:25:55","mfcso.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\atlgd.exe","08/05/2005 08:25:55","atlgd.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\atlyo.exe","08/05/2005 08:25:55","atlyo.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\sdkxf32.exe","08/05/2005 08:25:55","sdkxf32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\creb.exe","08/05/2005 08:25:54","creb.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\winfl32.exe","08/05/2005 08:25:54","winfl32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\mfcfa.exe","08/05/2005 08:25:54","mfcfa.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\crhb.exe","07/05/2005 23:56:19","crhb.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\addgs32.exe","07/05/2005 23:56:12","addgs32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\winho.exe","07/05/2005 22:47:00","winho.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\System32\netgf32.exe","07/05/2005 22:46:54","netgf32.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\System32\mfclx32.exe","07/05/2005 22:15:26","mfclx32.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\javako.exe","07/05/2005 22:15:20","javako.exe","11.12 KB"
"","","Cheval de Troie Downloader.Agent.12.D","C:\WINDOWS\addso.exe","07/05/2005 22:04:27","addso.exe","32.62 KB"
"","","Cheval de Troie Downloader.Agent.11.Q","C:\WINDOWS\addw
0
Réponse 13 / 41
elise
 
Scan started at 12/05/2005 10:10:55

Scanning memory...
Scanning boot sectors...
Scanning files...

Scanned
============================
Objects: 61487
Directories: 4173
Archives: 8591
Size(Kb): 1855240
Infected files: 0

Found
============================
Viruses found: 0
Suspicious files: 0
Disinfected files: 0
Mail files: 786
0
Réponse 14 / 41
elise
 
Bon ben voilà, voilà.........

Je crains que mes sauveurs ne soient partis ailleurs en croisade vers de lointains PC.........

Y a t-il une ême charitable pour m'aider???

Merci beaucoup.

Elise
0
Réponse 15 / 41
Utilisateur anonyme
 
salut
-------------------------
tous da bord telecharge ces programmes si tu ne les a pas et met les a jour mais ne les utilise pas encore
adaware (1)
spyboot (2)
(ici) http://www.florensac-chasse-trap.com/ section virus
et aussi ceci
CleanUp312.exe (3)

----------------

demarre en mode sans echec
mode sans echec pour cela tu tapote la touche f8
des le debut de l allumage du pc sans t arreter
une fenetre vas souvrir tute deplace avec les fleches du clavier sur demarreren mode sans echec
une fois sur le bureau il ni auras pas toutes les couleurs et autres c est normal.si f8 ne marche pas utilise la touche f5
-------------------------
desactive ta restauration systeme
pour ça tu fais clic droit sur poste de travail
propriété tu clique sur onglet restauration système
tu coche la case désactiver la restauration et applique
------------

assure toi de ceci
Affiche tous les fichiers et dossiers :
cliquer sur démarrer/panneau de configuration/option des dossiers/affichage
Cocher afficher les dossiers cacher

Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)"

Décocher masquer les extensions dont le type est connu
Puis fais «Ok» pour valider les changements.

Et appliquer
----------------------
vide tes fichiers temps et tempory internet file sur tous les utilisateur
utilise ceci pour le faire
http://pageperso.aol.fr/Balltrap34/CleanUp312.exe
---------------
supprime new do net en first:
http://www.new.net/support/uninstall6_76.exe

--------------------
relance hijack coche ces lignes et ensuite clik sur fix

R1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://www.smart-search.biz

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.smart-search.biz

R1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://www.LOX.com/index.html
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://www.LOX.com/index.html

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.smart-search.biz

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768

toutes les R1 en fait !

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.LOX.com/index.html

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.LOX.com/index.html

R3 - Default URLSearchHook is missing

O2 - BHO: Class - {5401DC8A-1A4C-4EDC-9555-CC66BBEDCDF4} - C:\WINDOWS\iesu.dll

O4 - HKLM\..\Run: [DI2] "C:\DOCUME~1\CLERICE\LOCALS~1\Temp\27.exe\27.exe"
O4 - HKLM\..\Run: [Eistv] C:\Program Files\Tjqdgn\Itmnf.exe

O4 - HKLM\..\Run: [Crazy Browser.exe] C:\Program Files\Crazy Browser\Crazy Browser.exe
O4 - HKCU\..\Run: [NDrv] C:\WINDOWS\System32\NDrv.exe

O16 - DPF: {11111111-1111-1111-1111-111111111123} - http://fuckgoat.net//gallery/d.exe

O16 - DPF: {11311111-1551-1661-1771-000000000000} - http://www.all-find.org/mih2/web.exe

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/FunBuddyIconsFWBInitialSe tup1.0.0.8.cab

O16 - DPF: {22A88341-AFCB-45F0-A856-C2BAE74F878E} (InstallX Class) - http://www.20x2p.com/09222a6a/enter.cab
O16 - DPF: {527196A4-B1A3-4647-931D-37BA5AF23037} - http://www.all-find.org/mih4/web.exe

O16 - DPF: {FFCEABDA-C04E-7F4A-E9B6-DFA72B2F49FB} - http://213.200.210.10/dl/101/FR732_116.exe

----------------------
recherche et suppr ceci en gras

C:\WINDOWS\javawg.exe

---------------
passe adaware et vire tous se qu il trouve
----------
passe spy boot et vire tous se qu il trouvent
-------------

tu vide ta poubelle et tu redemarre en mode normal et refait un hijack

Bon courage
0
Réponse 16 / 41
elise
 
Merci preu chevalier

Vu tout ce qu'il y a à faire, je crois que je vais m'y mettre tranquillement ce soir quand les gars seront au lit.
Donc je fais tout cela, et je redepose les logs ici cette nuit ou demain matin.
Merci beaucoup de ne pas me laisser tomber.

Elise
0
Réponse 17 / 41
Utilisateur anonyme
 
ok pas de soucis elise,
prend ton temps et te trompe pas, si je suis encore la ce soir je continuerais sinon a demain belle princesse...
0
Réponse 18 / 41
ELISE
 
Bonsoir à tout le monde,

Bon je crois que j'ai tout fait à part que j'ai fixé tous les R1, sachant qu'il y en avaient deux de plus que sur la liste. Je me suis tatée un bon bout de temps et puis comme c'était écrit de fixer tous les R1, ben tu vois bien........
Sinon je joins mes logs de Hijack (j'ai toujours du mal à l'écrire celui ci) et d' AVG qui me dit que Monsieur Downloader agent est toujours à la maison (m'en fiche, vais lui donner les croquettes du chat, l'en aura peut être mal et partira....).
Je pense que par précaution je vais mettre un autre post en route pour le formatage de W XP.
Mais je continuerai à être obéissante et faire tout ce qu'on me dit.

Juste une question : que ce passe t-il vraiment dans mon PC?
Parce que je n'y comprend rien, que fait ce troyen exactement sur le PC? Le risque est -il important?

Merci pour tout

Elise

Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\atlqb.exe 05/12/2005 19:35 atlqb.exe 11.8 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\d3sc32.exe 05/12/2005 19:35 d3sc32.exe 11.54 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\syscv32.exe 05/12/2005 19:35 syscv32.exe 11.8 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\mfcay32.exe 05/12/2005 19:35 mfcay32.exe 11.49 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\apiil32.exe 05/12/2005 19:35 apiil32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\winwx32.exe 05/12/2005 19:35 winwx32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\atlei32.exe 05/12/2005 19:35 atlei32.exe 11.82 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\iexp32.exe 05/12/2005 19:35 iexp32.exe 12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\ipqu32.exe 05/12/2005 19:35 ipqu32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\d3gp32.exe 05/12/2005 19:35 d3gp32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\appdz32.exe 05/12/2005 12:10 appdz32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\msny.exe 05/12/2005 11:39 msny.exe 11.74 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\winha32.exe 05/12/2005 11:39 winha32.exe 11.34 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\sysed32.exe 05/12/2005 11:39 sysed32.exe 11.5 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\crfq.exe 05/12/2005 11:39 crfq.exe 11.37 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\systn.exe 05/12/2005 11:39 systn.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\atlqr32.exe 05/12/2005 11:39 atlqr32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\atlkl32.exe 05/12/2005 11:39 atlkl32.exe 11.3 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\apixn32.exe 05/12/2005 11:39 apixn32.exe 11.79 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\apicw.exe 05/12/2005 11:39 apicw.exe 11.73 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\ipeb32.exe 05/12/2005 11:39 ipeb32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\ipoz32.exe 05/12/2005 11:39 ipoz32.exe 11.54 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\ntxq.exe 05/12/2005 11:39 ntxq.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\netgl32.exe 05/12/2005 11:39 netgl32.exe 11.57 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\d3hr32.exe 05/12/2005 08:59 d3hr32.exe 11.32 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\iekv.exe 05/12/2005 08:59 iekv.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\sdkla32.exe 05/12/2005 08:59 sdkla32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\nettc.exe 05/12/2005 08:59 nettc.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\sdkzj.exe 05/12/2005 08:59 sdkzj.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\netqs32.exe 05/12/2005 08:59 netqs32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\sdkpt.exe 05/12/2005 08:59 sdkpt.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\appfd.exe 05/11/2005 23:07 appfd.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\addby32.exe 05/11/2005 23:07 addby32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\ntuh.exe 05/11/2005 23:07 ntuh.exe 11.76 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\d3ae32.exe 05/11/2005 23:07 d3ae32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\netjg32.exe 05/11/2005 23:07 netjg32.exe 11.33 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\winvx32.exe 05/11/2005 23:07 winvx32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\iezx32.exe 05/11/2005 23:07 iezx32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\addyu.exe 05/11/2005 23:07 addyu.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\iphm32.exe 05/11/2005 23:07 iphm32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\apimp.exe 05/11/2005 23:07 apimp.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\crkg32.exe 05/11/2005 23:07 crkg32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\mfcuy32.exe 05/11/2005 23:07 mfcuy32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\javaro.exe 05/11/2005 23:07 javaro.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\appzv.exe 05/11/2005 23:07 appzv.exe 11.95 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\crqf.exe 05/11/2005 23:07 crqf.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\msxd32.exe 05/11/2005 23:07 msxd32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\sysnh.exe 05/11/2005 23:07 sysnh.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\sdkbf.exe 05/11/2005 23:07 sdkbf.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\mfcja.exe 05/11/2005 23:07 mfcja.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\sysye32.exe 05/11/2005 23:07 sysye32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\addbk.exe 05/11/2005 23:07 addbk.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\mfcih32.exe 05/11/2005 18:02 mfcih32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\System32\wineq32.exe 05/11/2005 17:28 wineq32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\mfcxo.exe 05/11/2005 17:27 mfcxo.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\apiaz32.exe 05/11/2005 17:26 apiaz32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\javaso.exe 05/11/2005 17:26 javaso.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\winyf32.exe 05/11/2005 17:26 winyf32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\mfcvc32.exe 05/11/2005 14:28 mfcvc32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\sysoq32.exe 05/11/2005 14:28 sysoq32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\ntzb.exe 05/11/2005 14:28 ntzb.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\d3qx32.exe 05/11/2005 14:28 d3qx32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\msuq32.exe 05/11/2005 14:28 msuq32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\sdklq32.exe 05/11/2005 14:28 sdklq32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\apimx.exe 05/11/2005 14:28 apimx.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\apptz32.exe 05/11/2005 14:28 apptz32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\ieox32.exe 05/11/2005 14:28 ieox32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\d3gd.exe 05/11/2005 14:28 d3gd.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\mfcav32.exe 05/11/2005 14:28 mfcav32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\mfceg.exe 05/11/2005 14:28 mfceg.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\appbl32.exe 05/11/2005 14:28 appbl32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\syskh.exe 05/11/2005 14:28 syskh.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\nethm32.exe 05/11/2005 14:28 nethm32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\atlrm32.exe 05/11/2005 14:28 atlrm32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\sdkze.exe 05/11/2005 14:28 sdkze.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\crlo32.exe 05/11/2005 12:26 crlo32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133980.exe 05/11/2005 08:32 A0133980.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133979.exe 05/11/2005 08:32 A0133979.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133978.exe 05/11/2005 08:32 A0133978.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133977.exe 05/11/2005 08:32 A0133977.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133976.exe 05/11/2005 08:32 A0133976.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133975.exe 05/11/2005 08:32 A0133975.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133974.exe 05/11/2005 08:32 A0133974.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133973.exe 05/11/2005 08:32 A0133973.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133972.exe 05/11/2005 08:32 A0133972.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133971.exe 05/11/2005 08:32 A0133971.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133970.exe 05/11/2005 08:32 A0133970.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133969.exe 05/11/2005 08:32 A0133969.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133968.exe 05/11/2005 08:32 A0133968.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133967.exe 05/11/2005 08:32 A0133967.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133966.exe 05/11/2005 08:32 A0133966.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133965.exe 05/11/2005 08:32 A0133965.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133964.exe 05/11/2005 08:32 A0133964.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133963.exe 05/11/2005 08:32 A0133963.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133962.exe 05/11/2005 08:32 A0133962.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133961.exe 05/11/2005 08:32 A0133961.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133960.exe 05/11/2005 08:32 A0133960.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133959.exe 05/11/2005 08:32 A0133959.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133958.exe 05/11/2005 08:32 A0133958.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133957.exe 05/11/2005 08:32 A0133957.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133956.exe 05/11/2005 08:32 A0133956.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133955.exe 05/11/2005 08:32 A0133955.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133954.exe 05/11/2005 08:32 A0133954.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133953.exe 05/11/2005 08:32 A0133953.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133952.exe 05/11/2005 08:32 A0133952.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133951.exe 05/11/2005 08:32 A0133951.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133950.exe 05/11/2005 08:32 A0133950.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133949.exe 05/11/2005 08:32 A0133949.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133948.exe 05/11/2005 08:32 A0133948.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133947.exe 05/11/2005 08:32 A0133947.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133946.exe 05/11/2005 08:32 A0133946.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133945.exe 05/11/2005 08:32 A0133945.exe 32.62 KB
Cheval de Troie Dropper.Small.18.AA C:\WINDOWS\Temp\ft28s.exe 05/11/2005 08:32 ft28s.exe 10 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\ntbi.exe 05/11/2005 08:32 ntbi.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\d3ho32.exe 05/11/2005 08:32 d3ho32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\sysgw32.exe 05/11/2005 08:32 sysgw32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\netjl.exe 05/11/2005 08:32 netjl.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\ntsb32.exe 05/11/2005 08:32 ntsb32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\apits32.exe 05/11/2005 08:32 apits32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\apibo32.exe 05/11/2005 08:32 apibo32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\javapg.exe 05/11/2005 08:32 javapg.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\atljh32.exe 05/11/2005 08:32 atljh32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\ipbk.exe 05/11/2005 08:32 ipbk.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\atlzr.exe 05/11/2005 08:32 atlzr.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\atlin.exe 05/11/2005 08:32 atlin.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\atlnf.exe 05/11/2005 08:32 atlnf.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\netix.exe 05/11/2005 08:32 netix.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\apifn.exe 05/11/2005 08:32 apifn.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\d3ic32.exe 05/11/2005 08:32 d3ic32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\apptt.exe 05/11/2005 08:32 apptt.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\crsj.exe 05/11/2005 08:32 crsj.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\mfcsk.exe 05/11/2005 08:32 mfcsk.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\mfcrx32.exe 05/11/2005 08:32 mfcrx32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\sdkhy.exe 05/11/2005 08:32 sdkhy.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\adddt32.exe 05/11/2005 08:32 adddt32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\sdkyi32.exe 05/11/2005 08:32 sdkyi32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\sdkgw32.exe 05/11/2005 08:32 sdkgw32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133745.exe 05/10/2005 09:43 A0133745.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133744.exe 05/10/2005 09:43 A0133744.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133658.exe 05/10/2005 09:43 A0133658.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133656.exe 05/10/2005 09:43 A0133656.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133655.exe 05/10/2005 09:43 A0133655.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133654.exe 05/10/2005 09:43 A0133654.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133653.exe 05/10/2005 09:43 A0133653.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133652.exe 05/10/2005 09:43 A0133652.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133651.exe 05/10/2005 09:43 A0133651.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133649.exe 05/10/2005 09:43 A0133649.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133648.exe 05/10/2005 09:43 A0133648.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133647.exe 05/10/2005 09:43 A0133647.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133646.exe 05/10/2005 09:43 A0133646.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133644.exe 05/10/2005 09:43 A0133644.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133643.exe 05/10/2005 09:43 A0133643.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133642.exe 05/10/2005 09:43 A0133642.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133640.exe 05/10/2005 09:43 A0133640.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133639.exe 05/10/2005 09:43 A0133639.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133638.exe 05/10/2005 09:43 A0133638.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133636.exe 05/10/2005 09:43 A0133636.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133635.exe 05/10/2005 09:43 A0133635.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133633.exe 05/10/2005 09:43 A0133633.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133632.exe 05/10/2005 09:43 A0133632.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133631.exe 05/10/2005 09:43 A0133631.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133629.exe 05/10/2005 09:43 A0133629.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133628.exe 05/10/2005 09:43 A0133628.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133627.exe 05/10/2005 09:43 A0133627.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133626.exe 05/10/2005 09:43 A0133626.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133624.exe 05/10/2005 09:43 A0133624.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133623.exe 05/10/2005 09:43 A0133623.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133621.exe 05/10/2005 09:43 A0133621.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133620.exe 05/10/2005 09:43 A0133620.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133618.exe 05/10/2005 09:43 A0133618.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133616.exe 05/10/2005 09:43 A0133616.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133615.exe 05/10/2005 09:43 A0133615.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133614.exe 05/10/2005 09:43 A0133614.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133612.exe 05/10/2005 09:43 A0133612.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\mfcgz.exe 05/10/2005 09:43 mfcgz.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\iesx32.exe 05/10/2005 09:43 iesx32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\crsr.exe 05/10/2005 09:43 crsr.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\addze.exe 05/10/2005 09:43 addze.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\msgf.exe 05/10/2005 09:43 msgf.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\iecp.exe 05/10/2005 09:43 iecp.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\sdkut32.exe 05/10/2005 09:43 sdkut32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\iemh32.exe 05/10/2005 09:43 iemh32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\apiqo.exe 05/10/2005 09:43 apiqo.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\ntkb.exe 05/10/2005 09:43 ntkb.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\ipob.exe 05/10/2005 09:43 ipob.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\mski32.exe 05/10/2005 09:43 mski32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\iemk.exe 05/10/2005 09:43 iemk.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\sdkjz32.exe 05/10/2005 09:43 sdkjz32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\javaqz.exe 05/10/2005 09:43 javaqz.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\mfceb32.exe 05/10/2005 09:43 mfceb32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\appek.exe 05/10/2005 09:43 appek.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\iehi.exe 05/10/2005 09:43 iehi.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\mfcyg.exe 05/10/2005 09:43 mfcyg.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\addri.exe 05/10/2005 09:43 addri.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\crtn32.exe 05/10/2005 09:43 crtn32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\appni.exe 05/10/2005 09:43 appni.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\ntwz32.exe 05/10/2005 09:43 ntwz32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\atlok.exe 05/10/2005 09:43 atlok.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\mfcly32.exe 05/10/2005 09:43 mfcly32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\crpf32.exe 05/10/2005 09:43 crpf32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\applk32.exe 05/10/2005 09:43 applk32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\addpk32.exe 05/10/2005 09:43 addpk32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\addqt.exe 05/10/2005 09:43 addqt.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\ntnt32.exe 05/10/2005 09:43 ntnt32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\atlki.exe 05/10/2005 09:43 atlki.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\winoq32.exe 05/10/2005 09:43 winoq32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\iegk.exe 05/10/2005 09:43 iegk.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\javang.exe 05/10/2005 09:43 javang.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\apizd.exe 05/10/2005 09:43 apizd.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\d3fu32.exe 05/10/2005 09:43 d3fu32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\d3ie32.exe 05/09/2005 10:59 d3ie32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\ipww.exe 05/09/2005 10:59 ipww.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\addvx32.exe 05/09/2005 10:59 addvx32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\apiec32.exe 05/09/2005 10:59 apiec32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\msrl.exe 05/09/2005 10:59 msrl.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\msso.exe 05/09/2005 10:59 msso.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\apphn32.exe 05/09/2005 10:59 apphn32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\addpg32.exe 05/09/2005 10:59 addpg32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\ipuo.exe 05/09/2005 10:59 ipuo.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\crdt.exe 05/09/2005 10:59 crdt.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\atlyc32.exe 05/09/2005 10:59 atlyc32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133448.exe 05/09/2005 08:28 A0133448.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133447.exe 05/09/2005 08:28 A0133447.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133446.exe 05/09/2005 08:28 A0133446.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133444.exe 05/09/2005 08:28 A0133444.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133443.exe 05/09/2005 08:28 A0133443.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133442.exe 05/09/2005 08:28 A0133442.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133440.exe 05/09/2005 08:28 A0133440.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133438.exe 05/09/2005 08:28 A0133438.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133436.exe 05/09/2005 08:28 A0133436.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\ipvl32.exe 05/09/2005 08:28 ipvl32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\appwr32.exe 05/09/2005 08:28 appwr32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\ntci.exe 05/09/2005 08:28 ntci.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\netuc.exe 05/09/2005 08:28 netuc.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\javadh.exe 05/09/2005 08:28 javadh.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\msxl.exe 05/09/2005 08:28 msxl.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\javaui32.exe 05/09/2005 08:28 javaui32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\apiof32.exe 05/09/2005 08:28 apiof32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\apiig32.exe 05/09/2005 08:28 apiig32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\d3xl.exe 05/09/2005 08:28 d3xl.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\crrm.exe 05/09/2005 08:28 crrm.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\ipfi32.exe 05/09/2005 08:28 ipfi32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\netkz32.exe 05/09/2005 08:28 netkz32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\mstz32.exe 05/09/2005 08:28 mstz32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\atlrh.exe 05/09/2005 08:28 atlrh.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\d3zf.exe 05/09/2005 08:28 d3zf.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\appkr32.exe 05/09/2005 08:28 appkr32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\javark.exe 05/09/2005 08:28 javark.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\sdkia.exe 05/09/2005 08:28 sdkia.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\syshr32.exe 05/09/2005 08:28 syshr32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\netnv32.exe 05/09/2005 08:28 netnv32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\ntss32.exe 05/09/2005 08:28 ntss32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\iesc.exe 05/09/2005 08:28 iesc.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\ieiw.exe 05/09/2005 08:28 ieiw.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\ipuh32.exe 05/09/2005 08:28 ipuh32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\appsd.exe 05/09/2005 08:28 appsd.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\msuc.exe 05/09/2005 08:28 msuc.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\apild.exe 05/09/2005 08:28 apild.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\wines.exe 05/09/2005 08:28 wines.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\d3tt32.exe 05/09/2005 08:28 d3tt32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\mfceq32.exe 05/09/2005 08:28 mfceq32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\atlwu32.exe 05/09/2005 08:28 atlwu32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\crhx.exe 05/09/2005 08:28 crhx.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\addlx.exe 05/09/2005 08:28 addlx.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\addqd32.exe 05/09/2005 08:28 addqd32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\addgr.exe 05/09/2005 08:28 addgr.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\d3jh.exe 05/09/2005 08:28 d3jh.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\addje.exe 05/09/2005 08:28 addje.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\ipsw32.exe 05/09/2005 08:28 ipsw32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\d3lq32.exe 05/09/2005 08:28 d3lq32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\msdg32.exe 05/09/2005 08:28 msdg32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\winqa32.exe 05/09/2005 08:28 winqa32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\winge.exe 05/09/2005 08:28 winge.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\apptk.exe 05/09/2005 08:28 apptk.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\mfchn32.exe 05/09/2005 08:28 mfchn32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\addvq.exe 05/09/2005 08:28 addvq.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\d3tm32.exe 05/09/2005 08:28 d3tm32.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\addjg32.exe 05/08/2005 23:10 addjg32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\System32\netix.exe 05/08/2005 23:10 netix.exe 11.12 KB
Virus identifié I-Worm/Netsky.D your_letter.pif 05/08/2005 22:57 your_letter.pif 17 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\System32\ieul32.exe 05/08/2005 22:18 ieul32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\mfctc.exe 05/08/2005 22:18 mfctc.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\System32\apppb.exe 05/08/2005 22:16 apppb.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\ntos32.exe 05/08/2005 22:16 ntos32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\System32\mfckw32.exe 05/08/2005 22:04 mfckw32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\javaie.exe 05/08/2005 22:04 javaie.exe 11.12 KB
Cheval de Troie Downloader.Small.8.R C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133356.EXE 05/08/2005 08:25 A0133356.EXE 24.5 KB
Cheval de Troie Startpage.19.AO C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133353.dll 05/08/2005 08:25 A0133353.dll 65 KB
Cheval de Troie Dropper.Small.9.BV C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133345.EXE 05/08/2005 08:25 A0133345.EXE 27 KB
Cheval de Troie Downloader.Agent.6.BN C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133308.dll 05/08/2005 08:25 A0133308.dll 84 KB
Cheval de Troie Downloader.Agent.11.Q C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133306.exe 05/08/2005 08:25 A0133306.exe 11.12 KB
Cheval de Troie Clicker.3.AV C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133304.exe 05/08/2005 08:25 A0133304.exe 6.84 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\mfchx32.exe 05/08/2005 08:25 mfchx32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\mfcdw32.exe 05/08/2005 08:25 mfcdw32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\ietx32.exe 05/08/2005 08:25 ietx32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\sdkem32.exe 05/08/2005 08:25 sdkem32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\addds32.exe 05/08/2005 08:25 addds32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\javahu.exe 05/08/2005 08:25 javahu.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\ieef.exe 05/08/2005 08:25 ieef.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\mfcso.exe 05/08/2005 08:25 mfcso.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\atlgd.exe 05/08/2005 08:25 atlgd.exe 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\atlyo.exe 05/08/2005 08:25 atlyo.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\sdkxf32.exe 05/08/2005 08:25 sdkxf32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\creb.exe 05/08/2005 08:25 creb.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\winfl32.exe 05/08/2005 08:25 winfl32.exe 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\mfcfa.exe 05/08/2005 08:25 mfcfa.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\crhb.exe 05/07/2005 23:56 crhb.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\addgs32.exe 05/07/2005 23:56 addgs32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\winho.exe 05/07/2005 22:47 winho.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\System32\netgf32.exe 05/07/2005 22:46 netgf32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\System32\mfclx32.exe 05/07/2005 22:15 mfclx32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\javako.exe 05/07/2005 22:15 javako.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\addso.exe 05/07/2005 22:04 addso.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\addwz.exe 05/07/2005 22:04 addwz.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\System32\crtn.exe 05/07/2005 21:45 crtn.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\System32\addrw32.exe 05/07/2005 21:45 addrw32.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\iefo32.exe 05/07/2005 19:36 iefo32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\System32\mfcee.exe 05/07/2005 19:36 mfcee.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\iehs.exe 05/07/2005 18:32 iehs.exe 32.62 KB
Cheval de Troie Downloader.Small.8.R C:\WINDOWS\System32\DLOAD.EXE 05/07/2005 17:50 DLOAD.EXE 24.5 KB
Cheval de Troie Startpage.19.AO C:\WINDOWS\tldea.dll 05/07/2005 17:48 tldea.dll 65 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\System32\MSEZ.EXE 05/07/2005 17:45 MSEZ.EXE 11.12 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\System32\MSEZ.EXE 05/07/2005 13:59 MSEZ.EXE 11.12 KB
Cheval de Troie Small.P C:\Program Files\Tjqdgn\Itmnf.exe 05/07/2005 13:58 Itmnf.exe 36.63 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\System32\MSCQ32.EXE 05/07/2005 13:57 MSCQ32.EXE 32.62 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\System32\MSCQ32.EXE 05/07/2005 13:55 MSCQ32.EXE 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\System32\MSEZ.EXE 05/07/2005 13:55 MSEZ.EXE 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\System32\MSCQ32.EXE 05/07/2005 13:54 MSCQ32.EXE 32.62 KB
Cheval de Troie Dialer C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133267.exe 05/07/2005 13:52 A0133267.exe 26.68 KB
Cheval de Troie Downloader.Small.8.R C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133264.exe 05/07/2005 13:52 A0133264.exe 24.5 KB
Cheval de Troie Dialer C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0132923.exe 05/07/2005 13:52 A0132923.exe 26.68 KB
Cheval de Troie Startpage.19.AO C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0132883.dll 05/07/2005 13:52 A0132883.dll 65 KB
Cheval de Troie Downloader.Small.8.R C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0132632.exe 05/07/2005 13:52 A0132632.exe 24.5 KB
Cheval de Troie Dialer C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132527.exe 05/07/2005 13:52 A0132527.exe 26.68 KB
Cheval de Troie Downloader.Small.8.R C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132524.exe 05/07/2005 13:52 A0132524.exe 24.5 KB
Cheval de Troie Dialer C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132510.exe 05/07/2005 13:52 A0132510.exe 26.68 KB
Cheval de Troie Downloader.Small.8.R C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132507.exe 05/07/2005 13:52 A0132507.exe 24.5 KB
Cheval de Troie Dialer C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132440.exe 05/07/2005 13:52 A0132440.exe 26.68 KB
Cheval de Troie Downloader.Small.8.R C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132437.exe 05/07/2005 13:52 A0132437.exe 24.5 KB
Cheval de Troie Collected.AF C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP413\A0130195.exe 05/07/2005 13:52 A0130195.exe 50.94 KB
Cheval de Troie Dialer.18.AF C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP411\A0130145.exe 05/07/2005 13:52 A0130145.exe 84.89 KB
Cheval de Troie Dialer.18.AF C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP401\A0129053.exe 05/07/2005 13:52 A0129053.exe 84.89 KB
Cheval de Troie Dialer.17.B C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP401\A0129050.exe 05/07/2005 13:52 A0129050.exe 115.16 KB
Cheval de Troie Downloader.Dyfica.3.R C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP372\A0120544.EXE 05/07/2005 13:52 A0120544.EXE 50.88 KB
Cheval de Troie Downloader.Dyfica.3.R C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP367\A0120335.exe 05/07/2005 13:52 A0120335.exe 50.88 KB
Cheval de Troie Small.P C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP343\A0113783.exe 05/07/2005 13:52 A0113783.exe 36.63 KB
Cheval de Troie Small.P C:\Program Files\Tjqdgn\Itmnf.exe 05/07/2005 13:52 Itmnf.exe 36.63 KB
Cheval de Troie Dialer C:\Program Files\WebSiteViewer\127056.exe 05/07/2005 13:52 127056.exe 26.68 KB
Cheval de Troie Dialer.26.AF C:\Program Files\WebSiteViewer\127056.dlr 05/07/2005 13:52 127056.dlr 79.5 KB
Virus identifié Worm/Lovsan.A C:\WINDOWS\system32\TFTP2124 05/07/2005 13:52 TFTP2124 4 KB
Virus identifié Worm/Lovsan.A C:\WINDOWS\system32\TFTP2564 05/07/2005 13:52 TFTP2564 4 KB
Cheval de Troie Downloader.Agent.6.BN C:\WINDOWS\system32\MTC.dll 05/07/2005 13:52 MTC.dll 84 KB
Cheval de Troie Dropper.Small.9.BV C:\WINDOWS\system32\2.exe 05/07/2005 13:52 2.exe 27 KB
Cheval de Troie Startpage.20.F C:\WINDOWS\system32\boln.dll 05/07/2005 13:52 boln.dll 39 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\apitc.exe 05/07/2005 13:52 apitc.exe 11.12 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\system32\mscq32.exe 05/07/2005 13:52 mscq32.exe 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\system32\msez.exe 05/07/2005 13:52 msez.exe 11.12 KB
Cheval de Troie Downloader.Small.8.R C:\WINDOWS\system32\dload.exe 05/07/2005 13:52 dload.exe 24.5 KB
Cheval de Troie Startpage.19.AO C:\WINDOWS\zipgnh.dat 05/07/2005 13:52 zipgnh.dat 65 KB
Cheval de Troie Startpage.19.AO C:\WINDOWS\tldea.dll 05/07/2005 13:52 tldea.dll 65 KB
Cheval de Troie Downloader.Agent.12.D C:\WINDOWS\tnqxsp.txt 05/07/2005 13:52 tnqxsp.txt 32.62 KB
Cheval de Troie Downloader.Agent.11.Q C:\WINDOWS\bmykym.txt 05/07/2005 13:52 bmykym.txt 11.12 KB
Cheval de Troie Clicker.3.AV C:\3.exe 05/07/2005 13:52 3.exe 6.84 KB
Cheval de Troie Dialer C:\127056.exe 05/07/2005 13:52 127056.exe 26.68 KB
Cheval de Troie Dropper.Small.9.BV C:\2.exe 05/07/2005 13:52 2.exe 27 KB

Logfile of HijackThis v1.99.1
Scan saved at 19:16:28, on 12/05/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\SCANJET\PrecisionScanLT\hppwrsav.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Olitec\USB ADSL\CnxDslTb.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\palmOne\AlarmApp.exe
C:\Program Files\palmOne\HOTSYNC.EXE
C:\PROGRA~1\INCRED~1\bin\IMAPP.EXE
C:\WINDOWS\system32\ipiy32.exe
C:\Documents and Settings\CLERICE\Mes documents\My eBooks\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.LOX.com/index.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {5401DC8A-1A4C-4EDC-9555-CC66BBEDCDF4} - C:\WINDOWS\iesu.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll (file missing)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [hppwrsav] C:\SCANJET\PrecisionScanLT\hppwrsav.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [DI2] "C:\DOCUME~1\CLERICE\LOCALS~1\Temp\27.exe\27.exe"
O4 - HKLM\..\Run: [Eistv] C:\Program Files\Tjqdgn\Itmnf.exe
O4 - HKLM\..\Run: [FlenCPY] "C:\Program Files\Common Files\Java\flencpy.exe"
O4 - HKLM\..\Run: [CnxDslTaskBar] C:\Program Files\Olitec\USB ADSL\CnxDslTb.exe
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [Crazy Browser.exe] C:\Program Files\Crazy Browser\Crazy Browser.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O4 - HKLM\..\Run: [javawg.exe] C:\WINDOWS\javawg.exe
O4 - HKLM\..\Run: [ipiy32.exe] C:\WINDOWS\system32\ipiy32.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Pense-Bête] C:\Program Files\Pense-bete\Pensbet78a.exe
O4 - Startup: HotSync Manager.lnk = C:\Program Files\palmOne\HOTSYNC.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Alarm Manager.LNK = C:\Program Files\palmOne\AlarmApp.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: {11311111-1551-1661-1771-000000000000} - http://www.all-find.org/mih2/web.exe
O16 - DPF: {22A88341-AFCB-45F0-A856-C2BAE74F878E} (InstallX Class) - http://www.20x2p.com/09222a6a/enter.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by12fd.bay12.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {527196A4-B1A3-4647-931D-37BA5AF23037} - http://www.all-find.org/mih4/web.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {9EAC0186-5F5A-4362-B120-15C312CE012D} - http://www.awmdabest.com/cabl/2343/tb.cab
O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game17.zylomgames.com/activex/zylomgamesplayer.cab
O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f005.mail.caramail.lycos.fr/app/uploader/FileUploader.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://labo.nomatica.com/XUpload.ocx
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O16 - DPF: {FFCEABDA-C04E-7F4A-E9B6-DFA72B2F49FB} - http://213.200.210.10/dl/101/FR732_116.exe
O23 - Service: Remote Procedure Call (RPC) Helper ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\msez.exe (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
0
Réponse 19 / 41
Utilisateur anonyme
 
Salut elise

Pas mal de boulot en perspective !!!

Télécharge ces logiciels (gratuits) et met les à jours(important):

aboutbuster:
http://www.malwarebytes.biz/index.php?page=downloads
Pour le mettre à jours:
clic sur "update"
puis clic sur "check for update"
Si une nouvelle version est disponible clic sur "downloaded update"

CWShredder:
http://cwshredder.net/bin/CWShredder.exe

Mais ne les utilises pas encore

_________________________________

Déconnecte toi d'internet.

Vide le cache d'Internet Explorer et supprime les cookies:

* Panneau de configuration >> Options internet >> Onglet "Général"
- Clic sur [supprimer les cookies]
- Clic sur [Supprimer les fichiers] en cochant la case "Supprimer tout le contenu hors connexion"

__________________________________

Désactive la restauration systéme.
Clic droit sur poste de travail > propriétés > onglet restauration système
puis cocher "désactiver la restauration système".
(accepte le redemarrage).

Redémarre en mode sans échec
Laisse passer l'écran du bios, puis tapote sur la touche F8.
Choisis le mode sans échec dans les options et valide avec entrée.

Rend visible les fichiers cachés et systeme
panneau de configuration > options des dossiers > onglet affichage
Cocher " afficher les fichiers et dossiers cachés "
Décocher " masquer les extentions des fichiers dont le type est connu
Décocher " masquer les fichiers protégés du système"
Valide

___________________________________

Dans le menu Demarrer>Executer >tape: Services.msc
recherche le service avec cette orthographe exacte:
Remote Procedure Call (RPC) Helper
Double clic dessus et clic sur [arreter] puis dans :
type de demarrage --> sélectionne désactivé.

Lance hijackthis et clic sur "do a system scan only"
cocher la case au début des lignes suivantes:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.LOX.com/index.html

R3 - Default URLSearchHook is missing
O2 - BHO: Class - {5401DC8A-1A4C-4EDC-9555-CC66BBEDCDF4} - C:\WINDOWS\iesu.dll

O4 - HKLM\..\Run: [DI2] "C:\DOCUME~1\CLERICE\LOCALS~1\Temp\27.exe\27.exe"
O4 - HKLM\..\Run: [Eistv] C:\Program Files\Tjqdgn\Itmnf.exe
O4 - HKLM\..\Run: [FlenCPY] "C:\Program Files\Common Files\Java\flencpy.exe
O4 - HKLM\..\Run: [javawg.exe] C:\WINDOWS\javawg.exe
O4 - HKLM\..\Run: [ipiy32.exe] C:\WINDOWS\system32\ipiy32.exe

O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: {11311111-1551-1661-1771-000000000000} - http://www.all-find.org/mih2/web.exe
O16 - DPF: {22A88341-AFCB-45F0-A856-C2BAE74F878E} (InstallX Class) - http://www.20x2p.com/09222a6a/enter.cab
O16 - DPF: {527196A4-B1A3-4647-931D-37BA5AF23037} - http://www.all-find.org/mih4/web.exe
O16 - DPF: {9EAC0186-5F5A-4362-B120-15C312CE012D} - http://www.awmdabest.com/cabl/2343/tb.cab
O16 - DPF: {FFCEABDA-C04E-7F4A-E9B6-DFA72B2F49FB} - http://213.200.210.10/dl/101/FR732_116.exe
O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f005.mail.caramail.lycos.fr/app/uploader/FileUploader.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://labo.nomatica.com/XUpload.ocx

valider avec [fix checked]

____________________________________

Rechercher et supprimer si présent:

Dans le cas ou tu utiliserais la fonction Rechercher:
Assure toi que dans:
Tous les fichiers et tous les dossiers >> Options avancées
• Rechercher dans les dossiers systemes <- DOIT ETRE COCHE !
• Rechercher dans les fichiers et les dossiers cachés <- DOIT ETRE COCHE !
• Rechercher dans les sous-dossiers <- DOIT ETRE COCHE !

Supprime:

C:\WINDOWS\javawg.exe
C:\WINDOWS\iesu.dll
C:\WINDOWS\system32\dclwx.dll
C:\WINDOWS\system32\ipiy32.exe
C:\WINDOWS\system32\msez.exe
C:\Documents and Settings\CLERICE\Local Settings\Temp\27.exe
C:\Program Files\Common Files\Java\flencpy.exe
C:\Program Files\Tjqdgn

Ensuite, tres important

Supprimer les fichiers temporaires:

* C:\Documents and Settings\CLERICE\Local Settings\Temp
* C:\Documents and Settings\tous les autres comptes\Local Settings\Temp
* C:\Temp
* C:\Windows\Temp
vider tout le contenu des dossiers en gras.

Le contenu du dossier prefetch:

* C:\WINDOWS\Prefetch <= sauf le fichier layout.ini

* Ne pas oublier de vider la corbeille !

_____________________________________

Une fois fait, lance Aboutbuster (clic sur start)

puis lance cwshredder (clic sur fix)
___________________________________

Redemarre normalement et relance Aboutbuster

reposte un hijack pour vérifier l'évolution.

Ne pas oublier après les manips de recocher" masquer les fichiers protégés du système" dans les options des dossiers.

a+
0
Réponse 20 / 41
elise
 
Merci beaucoup pour tes conseils

J'imprime le tout et je fais tout cela demain matin de bonne heure.

Bonne soirée à tout le monde et merci à tout le monde

Elise
0