[downloader.agent.12D et 11Q]

Question

Bon alors après scan en ligne voici ci-joint le conte rendu :
Scan started at 11/05/2005 17:30:50

Scanning memory...
Scanning boot sectors...
Scanning files...
C:\Documents and Settings\CLERICE\Local Settings\Application Data\IM\Identities\{7A28F1B9-DBF8-4041-A399-81AB34C27C91}\Message Store\JunkMail.imm->(part0997:) - Trojan:HTML/Bankfraud.C* -> Infected

Scanned
============================
Objects: 59785
Directories: 4072
Archives: 8583
Size(Kb): 1856892
Infected files: 1

Found
============================
Viruses found: 1
Suspicious files: 0
Disinfected files: 0
Mail files: 786
En fait ce que je ne comprend pas c'est que pendant quelques heures cet après midi, mon pc s'est comporté comme s'il n'y avait plus de virus et maintenant j'ai de nouveau AVG qui me signale le virus à chaque fois que j'ouvre un dossier.
Dommage, j'y ai cru l'instant de quelques heures.
Alors mon message ce soir et simple, court et complet : HELPPPPP

Merci pour votre aide

Elise

Utilisateur anonyme · Answer

ok pour faire court:
1/Affiche tous les fichiers et dossiers :
cliquer sur démarrer/panneau de configuration/option des dossiers/affichage
Cocher afficher les dossiers cacher

Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)"

Décocher masquer les extensions dont le type est connu
Puis fais «Ok» pour valider les changements.

Et appliquer

2/supprimes ce qui est en gras
C:\Documents and Settings\CLERICE\Local Settings\Application Data\IM\Identities\{7A28F1B9-DBF8-4041-A399-81AB34C27C91}\Message Store\JunkMail.imm

3/chemin inverse du 1 poiur les cacher

4/ rescan pour verif

5/Bon courage ; a+

elise · Answer

Merci pour les conseils

Je cours de ce pas me fumer une p'tite cigarette, me préparer un thé et passer ma soirée devant mon pc, le filet de pêche dans la main droite, l'asticot dans la gauche et avec un peu de chance je vais bien réussir à l'harponner..............

Si j'attrape la bête je vous la prend en photo.

Je te tiens au courant

Merci

Elise

theoelliot · Answer

Alors c'est gagné?
J'éteins mon pc, je redémarre pour une petite analyse avec AVG histoire de me rassurer complètement et je vous tiens au courant.
Je n'ose encore y croire
Elise

Scan started at 11/05/2005 21:35:28

Scanning memory...
Scanning boot sectors...
Scanning files...

Scanned
============================
Objects: 60307
Directories: 4145
Archives: 8587
Size(Kb): 1853400
Infected files: 0

Found
============================
Viruses found: 0
Suspicious files: 0
Disinfected files: 0
Mail files: 775

Utilisateur anonyme · Answer

re,apparemment tout est clean ici, et ton antivirus?a+

theoelliot · Answer

Mouai ben mon antivirus me dit que j'ai toujours le virus download etc.... Je n'y comprend rien, pourquoi au scan en ligne il n'y a rien et avec AVG je suis contaminée?
J'ai du louper un épisode non?

Elise

elise · Answer

Logfile of HijackThis v1.99.1Scan saved at 23:46:58, on 11/05/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\WINDOWS\System32
vsvc32.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\SOUNDMAN.EXEC:\SCANJET\PrecisionScanLT\hppwrsav.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\Olitec\USB ADSL\CnxDslTb.exeC:\Program Files\Winamp\winampa.exeC:\Program Files\Java\jre1.5.0_02\bin\jusched.exeC:\PROGRA~1\Grisoft\AVG7\avgcc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\WINDOWS\javawg.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\palmOne\AlarmApp.exeC:\Program Files\palmOne\HOTSYNC.EXEC:\PROGRA~1\INCRED~1\bin\IMAPP.EXEC:\Program Files\WinRAR\WinRAR.exeC:\DOCUME~1\CLERICE\LOCALS~1\Temp\Rar$EX00.594\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://www.smart-search.bizR1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.smart-search.bizR1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://www.LOX.com/index.htmlR1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://www.LOX.com/index.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.smart-search.bizR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blankR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.smart-search.bizR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.LOX.com/index.htmlR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - Default URLSearchHook is missingO2 - BHO: Class - {5401DC8A-1A4C-4EDC-9555-CC66BBEDCDF4} - C:\WINDOWS\iesu.dllO2 - BHO: Tubby - {9EAC0102-5E61-2312-BC2D-4D54434D5443} - C:\WINDOWS\system32\MTC.dll (file missing)O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll (file missing)O3 - Toolbar: Search Toolbar - {9EAC0102-5E61-2312-BC2D-4D54434D5443} - C:\WINDOWS\system32\MTC.dll (file missing)O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [hppwrsav] C:\SCANJET\PrecisionScanLT\hppwrsav.exeO4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,NewDotNetStartup -sO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFLO4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe"O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInitO4 - HKLM\..\Run: [DI2] "C:\DOCUME~1\CLERICE\LOCALS~1\Temp\27.exe\27.exe"O4 - HKLM\..\Run: [Eistv] C:\Program Files\Tjqdgn\Itmnf.exeO4 - HKLM\..\Run: [FlenCPY] "C:\Program Files\Common Files\Java\flencpy.exe"O4 - HKLM\..\Run: [CnxDslTaskBar] C:\Program Files\Olitec\USB ADSL\CnxDslTb.exeO4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exeO4 - HKLM\..\Run: [Crazy Browser.exe] C:\Program Files\Crazy Browser\Crazy Browser.exeO4 - HKLM\..\Run: [mscq32.exe] C:\WINDOWS\system32\mscq32.exeO4 - HKLM\..\Run: [Windows Service] C:\WINDOWS\system32\2.exeO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUPO4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exeO4 - HKLM\..\Run: [javawg.exe] C:\WINDOWS\javawg.exeO4 - HKLM\..\RunOnce: [appzv.exe] C:\WINDOWS\appzv.exeO4 - HKLM\..\RunOnce: [ntuh.exe] C:\WINDOWS\system32
tuh.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /cO4 - HKCU\..\Run: [Pense-Bête] C:\Program Files\Pense-bete\Pensbet78a.exeO4 - HKCU\..\Run: [NDrv] C:\WINDOWS\System32\NDrv.exeO4 - HKCU\..\Run: [Windows Service] C:\WINDOWS\system32\2.exeO4 - Startup: HotSync Manager.lnk = C:\Program Files\palmOne\HOTSYNC.EXEO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO4 - Global Startup: Alarm Manager.LNK = C:\Program Files\palmOne\AlarmApp.exeO4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\binesources\WebMenuImg.htmO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO10 - Broken Internet access because of LSP provider 'c:\program files
ewdotnet
ewdotnet6_38.dll' missingO16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cabO16 - DPF: {11111111-1111-1111-1111-111111111123} - http://fuckgoat.net//gallery/d.exeO16 - DPF: {11311111-1551-1661-1771-000000000000} - http://www.all-find.org/mih2/web.exeO16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/FunBuddyIconsFWBInitialSetup1.0.0.8.cabO16 - DPF: {22A88341-AFCB-45F0-A856-C2BAE74F878E} (InstallX Class) - http://www.20x2p.com/09222a6a/enter.cabO16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cabO16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by12fd.bay12.hotmail.msn.com/resources/MsnPUpld.cabO16 - DPF: {527196A4-B1A3-4647-931D-37BA5AF23037} - http://www.all-find.org/mih4/web.exeO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cabO16 - DPF: {9EAC0186-5F5A-4362-B120-15C312CE012D} - http://www.awmdabest.com/cabl/2343/tb.cabO16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cabO16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game17.zylomgames.com/activex/zylomgamesplayer.cabO16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f005.mail.caramail.lycos.fr/app/uploader/FileUploader.cabO16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://labo.nomatica.com/XUpload.ocxO16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cabO16 - DPF: {FFCEABDA-C04E-7F4A-E9B6-DFA72B2F49FB} - http://213.200.210.10/dl/101/FR732_116.exeO17 - HKLM\System\CCS\Services\Tcpip\..\{FEA75EBE-B070-4112-B3A0-F14EA3722F07}: NameServer = 213.36.80.1 213.36.80.1O23 - Service: Remote Procedure Call (RPC) Helper ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\msez.exe (file missing)O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeO23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exeO23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe

Utilisateur anonyme · Answer

met moi le scan de avg aussi

Utilisateur anonyme · Answer

whaou t es grave infecté < jte fais ca demain !

supprime new do net en first:
http://www.new.net/support/uninstall6_76.exe

------------

Ad-Aware :
http://telecharger.01net.com/windows/Internet/internet_utlitaire/fiches/11643.html

Le patch en Français pour Ad-Aware :
http://telecharger.01net.com/windows/Internet/internet_utlitaire/fiches/25543.html

Spybot :
http://telecharger.01net.com/windows/Internet/internet_utlitaire/fiches/26157.html

essai ceci,met les a jour, scan et supprime tous ce qu il trouve...
------------------
ensuite recolle moi un log

a demain bisous

elise · Answer

Moi Franchement ça ne me parle pas du tout, mais bon........A tu besoin d'autre chose?Un café?Une cigarette?Un biscuit?Je sais pas moi parce que je culpabilise de faire travailler les autres......Bon courage.Et encore merciElise"","","Cheval de Troie  Dropper.Small.9.BV","C:\2.exe","07/05/2005 13:52:30","2.exe","27 KB""","","Cheval de Troie  Dialer","C:\127056.exe","07/05/2005 13:52:30","127056.exe","26.68 KB""","","Cheval de Troie  Clicker.3.AV","C:\3.exe","07/05/2005 13:52:30","3.exe","6.84 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\bmykym.txt","07/05/2005 13:52:30","bmykym.txt","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS	nqxsp.txt","07/05/2005 13:52:30","tnqxsp.txt","32.62 KB""","","Cheval de Troie  Startpage.19.AO","C:\WINDOWS	ldea.dll","07/05/2005 13:52:30","tldea.dll","65 KB""","","Cheval de Troie  Startpage.19.AO","C:\WINDOWS\zipgnh.dat","07/05/2005 13:52:30","zipgnh.dat","65 KB""","","Cheval de Troie  Downloader.Small.8.R","C:\WINDOWS\system32\dload.exe","07/05/2005 13:52:30","dload.exe","24.5 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\msez.exe","07/05/2005 13:52:30","msez.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\mscq32.exe","07/05/2005 13:52:30","mscq32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\apitc.exe","07/05/2005 13:52:30","apitc.exe","11.12 KB""","","Cheval de Troie  Startpage.20.F","C:\WINDOWS\system32\boln.dll","07/05/2005 13:52:30","boln.dll","39 KB""","","Cheval de Troie  Dropper.Small.9.BV","C:\WINDOWS\system32\2.exe","07/05/2005 13:52:30","2.exe","27 KB""","","Cheval de Troie  Downloader.Agent.6.BN","C:\WINDOWS\system32\MTC.dll","07/05/2005 13:52:30","MTC.dll","84 KB""","","Virus identifié  Worm/Lovsan.A","C:\WINDOWS\system32\TFTP2564","07/05/2005 13:52:30","TFTP2564","4 KB""","","Virus identifié  Worm/Lovsan.A","C:\WINDOWS\system32\TFTP2124","07/05/2005 13:52:30","TFTP2124","4 KB""","","Cheval de Troie  Dialer.26.AF","C:\Program Files\WebSiteViewer\127056.dlr","07/05/2005 13:52:30","127056.dlr","79.5 KB""","","Cheval de Troie  Dialer","C:\Program Files\WebSiteViewer\127056.exe","07/05/2005 13:52:30","127056.exe","26.68 KB""","","Cheval de Troie  Small.P","C:\Program Files\Tjqdgn\Itmnf.exe","07/05/2005 13:52:30","Itmnf.exe","36.63 KB""","","Cheval de Troie  Small.P","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP343\A0113783.exe","07/05/2005 13:52:30","A0113783.exe","36.63 KB""","","Cheval de Troie  Downloader.Dyfica.3.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP367\A0120335.exe","07/05/2005 13:52:30","A0120335.exe","50.88 KB""","","Cheval de Troie  Downloader.Dyfica.3.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP372\A0120544.EXE","07/05/2005 13:52:30","A0120544.EXE","50.88 KB""","","Cheval de Troie  Dialer.17.B","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP401\A0129050.exe","07/05/2005 13:52:30","A0129050.exe","115.16 KB""","","Cheval de Troie  Dialer.18.AF","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP401\A0129053.exe","07/05/2005 13:52:30","A0129053.exe","84.89 KB""","","Cheval de Troie  Dialer.18.AF","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP411\A0130145.exe","07/05/2005 13:52:30","A0130145.exe","84.89 KB""","","Cheval de Troie  Collected.AF","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP413\A0130195.exe","07/05/2005 13:52:30","A0130195.exe","50.94 KB""","","Cheval de Troie  Downloader.Small.8.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132437.exe","07/05/2005 13:52:30","A0132437.exe","24.5 KB""","","Cheval de Troie  Dialer","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132440.exe","07/05/2005 13:52:31","A0132440.exe","26.68 KB""","","Cheval de Troie  Downloader.Small.8.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132507.exe","07/05/2005 13:52:31","A0132507.exe","24.5 KB""","","Cheval de Troie  Dialer","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132510.exe","07/05/2005 13:52:31","A0132510.exe","26.68 KB""","","Cheval de Troie  Downloader.Small.8.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132524.exe","07/05/2005 13:52:31","A0132524.exe","24.5 KB""","","Cheval de Troie  Dialer","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132527.exe","07/05/2005 13:52:31","A0132527.exe","26.68 KB""","","Cheval de Troie  Downloader.Small.8.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0132632.exe","07/05/2005 13:52:31","A0132632.exe","24.5 KB""","","Cheval de Troie  Startpage.19.AO","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0132883.dll","07/05/2005 13:52:31","A0132883.dll","65 KB""","","Cheval de Troie  Dialer","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0132923.exe","07/05/2005 13:52:31","A0132923.exe","26.68 KB""","","Cheval de Troie  Downloader.Small.8.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133264.exe","07/05/2005 13:52:31","A0133264.exe","24.5 KB""","","Cheval de Troie  Dialer","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133267.exe","07/05/2005 13:52:31","A0133267.exe","26.68 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\System32\MSCQ32.EXE","07/05/2005 13:54:23","MSCQ32.EXE","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\System32\MSEZ.EXE","07/05/2005 13:55:40","MSEZ.EXE","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\System32\MSCQ32.EXE","07/05/2005 13:55:46","MSCQ32.EXE","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\System32\MSCQ32.EXE","07/05/2005 13:57:04","MSCQ32.EXE","32.62 KB""","","Cheval de Troie  Small.P","C:\Program Files\Tjqdgn\Itmnf.exe","07/05/2005 13:58:08","Itmnf.exe","36.63 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\System32\MSEZ.EXE","07/05/2005 13:59:37","MSEZ.EXE","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\System32\MSEZ.EXE","07/05/2005 17:45:10","MSEZ.EXE","11.12 KB""","","Cheval de Troie  Startpage.19.AO","C:\WINDOWS	ldea.dll","07/05/2005 17:48:06","tldea.dll","65 KB""","","Cheval de Troie  Downloader.Small.8.R","C:\WINDOWS\System32\DLOAD.EXE","07/05/2005 17:50:58","DLOAD.EXE","24.5 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\iehs.exe","07/05/2005 18:32:55","iehs.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\System32\mfcee.exe","07/05/2005 19:36:25","mfcee.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\iefo32.exe","07/05/2005 19:36:29","iefo32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\System32\addrw32.exe","07/05/2005 21:45:11","addrw32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\System32\crtn.exe","07/05/2005 21:45:17","crtn.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\addwz.exe","07/05/2005 22:04:22","addwz.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addso.exe","07/05/2005 22:04:27","addso.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\javako.exe","07/05/2005 22:15:20","javako.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\System32\mfclx32.exe","07/05/2005 22:15:26","mfclx32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\System32
etgf32.exe","07/05/2005 22:46:54","netgf32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\winho.exe","07/05/2005 22:47:00","winho.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\addgs32.exe","07/05/2005 23:56:12","addgs32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\crhb.exe","07/05/2005 23:56:19","crhb.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\mfcfa.exe","08/05/2005 08:25:54","mfcfa.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\winfl32.exe","08/05/2005 08:25:54","winfl32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\creb.exe","08/05/2005 08:25:54","creb.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\sdkxf32.exe","08/05/2005 08:25:55","sdkxf32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\atlyo.exe","08/05/2005 08:25:55","atlyo.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\atlgd.exe","08/05/2005 08:25:55","atlgd.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\mfcso.exe","08/05/2005 08:25:55","mfcso.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\ieef.exe","08/05/2005 08:25:55","ieef.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\javahu.exe","08/05/2005 08:25:55","javahu.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\addds32.exe","08/05/2005 08:25:55","addds32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\sdkem32.exe","08/05/2005 08:25:55","sdkem32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\ietx32.exe","08/05/2005 08:25:55","ietx32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\mfcdw32.exe","08/05/2005 08:25:55","mfcdw32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\mfchx32.exe","08/05/2005 08:25:55","mfchx32.exe","32.62 KB""","","Cheval de Troie  Clicker.3.AV","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133304.exe","08/05/2005 08:25:55","A0133304.exe","6.84 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133306.exe","08/05/2005 08:25:55","A0133306.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.6.BN","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133308.dll","08/05/2005 08:25:55","A0133308.dll","84 KB""","","Cheval de Troie  Dropper.Small.9.BV","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133345.EXE","08/05/2005 08:25:55","A0133345.EXE","27 KB""","","Cheval de Troie  Startpage.19.AO","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133353.dll","08/05/2005 08:25:55","A0133353.dll","65 KB""","","Cheval de Troie  Downloader.Small.8.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133356.EXE","08/05/2005 08:25:55","A0133356.EXE","24.5 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\javaie.exe","08/05/2005 22:04:17","javaie.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\System32\mfckw32.exe","08/05/2005 22:04:22","mfckw32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS
tos32.exe","08/05/2005 22:16:15","ntos32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\System32\apppb.exe","08/05/2005 22:16:22","apppb.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\mfctc.exe","08/05/2005 22:18:47","mfctc.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\System32\ieul32.exe","08/05/2005 22:18:54","ieul32.exe","32.62 KB""","","Virus identifié  I-Worm/Netsky.D","your_letter.pif","08/05/2005 22:57:16","your_letter.pif","17 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\System32
etix.exe","08/05/2005 23:10:25","netix.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addjg32.exe","08/05/2005 23:10:32","addjg32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\d3tm32.exe","09/05/2005 08:28:33","d3tm32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addvq.exe","09/05/2005 08:28:33","addvq.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\mfchn32.exe","09/05/2005 08:28:33","mfchn32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\apptk.exe","09/05/2005 08:28:33","apptk.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\winge.exe","09/05/2005 08:28:33","winge.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\winqa32.exe","09/05/2005 08:28:33","winqa32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\msdg32.exe","09/05/2005 08:28:33","msdg32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\d3lq32.exe","09/05/2005 08:28:34","d3lq32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\ipsw32.exe","09/05/2005 08:28:34","ipsw32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addje.exe","09/05/2005 08:28:34","addje.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\d3jh.exe","09/05/2005 08:28:34","d3jh.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addgr.exe","09/05/2005 08:28:34","addgr.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\addqd32.exe","09/05/2005 08:28:34","addqd32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addlx.exe","09/05/2005 08:28:34","addlx.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\crhx.exe","09/05/2005 08:28:34","crhx.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\atlwu32.exe","09/05/2005 08:28:34","atlwu32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\mfceq32.exe","09/05/2005 08:28:34","mfceq32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\d3tt32.exe","09/05/2005 08:28:34","d3tt32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\wines.exe","09/05/2005 08:28:34","wines.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\apild.exe","09/05/2005 08:28:34","apild.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\msuc.exe","09/05/2005 08:28:34","msuc.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\appsd.exe","09/05/2005 08:28:34","appsd.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\ipuh32.exe","09/05/2005 08:28:34","ipuh32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\ieiw.exe","09/05/2005 08:28:34","ieiw.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\iesc.exe","09/05/2005 08:28:34","iesc.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32
tss32.exe","09/05/2005 08:28:34","ntss32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32
etnv32.exe","09/05/2005 08:28:34","netnv32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\syshr32.exe","09/05/2005 08:28:34","syshr32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\sdkia.exe","09/05/2005 08:28:34","sdkia.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\javark.exe","09/05/2005 08:28:34","javark.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\appkr32.exe","09/05/2005 08:28:34","appkr32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\d3zf.exe","09/05/2005 08:28:35","d3zf.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\atlrh.exe","09/05/2005 08:28:35","atlrh.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\mstz32.exe","09/05/2005 08:28:35","mstz32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32
etkz32.exe","09/05/2005 08:28:35","netkz32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\ipfi32.exe","09/05/2005 08:28:35","ipfi32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\crrm.exe","09/05/2005 08:28:35","crrm.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\d3xl.exe","09/05/2005 08:28:35","d3xl.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\apiig32.exe","09/05/2005 08:28:35","apiig32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\apiof32.exe","09/05/2005 08:28:35","apiof32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\javaui32.exe","09/05/2005 08:28:35","javaui32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\msxl.exe","09/05/2005 08:28:35","msxl.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\javadh.exe","09/05/2005 08:28:35","javadh.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32
etuc.exe","09/05/2005 08:28:35","netuc.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32
tci.exe","09/05/2005 08:28:35","ntci.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\appwr32.exe","09/05/2005 08:28:35","appwr32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\ipvl32.exe","09/05/2005 08:28:35","ipvl32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133436.exe","09/05/2005 08:28:35","A0133436.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133438.exe","09/05/2005 08:28:35","A0133438.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133440.exe","09/05/2005 08:28:35","A0133440.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133442.exe","09/05/2005 08:28:35","A0133442.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133443.exe","09/05/2005 08:28:35","A0133443.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133444.exe","09/05/2005 08:28:35","A0133444.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133446.exe","09/05/2005 08:28:35","A0133446.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133447.exe","09/05/2005 08:28:35","A0133447.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133448.exe","09/05/2005 08:28:35","A0133448.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\atlyc32.exe","09/05/2005 10:59:58","atlyc32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\crdt.exe","09/05/2005 10:59:58","crdt.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\ipuo.exe","09/05/2005 10:59:58","ipuo.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addpg32.exe","09/05/2005 10:59:58","addpg32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\apphn32.exe","09/05/2005 10:59:58","apphn32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\msso.exe","09/05/2005 10:59:58","msso.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\msrl.exe","09/05/2005 10:59:58","msrl.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\apiec32.exe","09/05/2005 10:59:58","apiec32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\addvx32.exe","09/05/2005 10:59:58","addvx32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\ipww.exe","09/05/2005 10:59:58","ipww.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\d3ie32.exe","09/05/2005 10:59:58","d3ie32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\d3fu32.exe","10/05/2005 09:43:12","d3fu32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\apizd.exe","10/05/2005 09:43:12","apizd.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\javang.exe","10/05/2005 09:43:12","javang.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\iegk.exe","10/05/2005 09:43:12","iegk.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\winoq32.exe","10/05/2005 09:43:12","winoq32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\atlki.exe","10/05/2005 09:43:12","atlki.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS
tnt32.exe","10/05/2005 09:43:12","ntnt32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addqt.exe","10/05/2005 09:43:12","addqt.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addpk32.exe","10/05/2005 09:43:12","addpk32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\applk32.exe","10/05/2005 09:43:12","applk32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\crpf32.exe","10/05/2005 09:43:12","crpf32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\mfcly32.exe","10/05/2005 09:43:12","mfcly32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\atlok.exe","10/05/2005 09:43:12","atlok.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS
twz32.exe","10/05/2005 09:43:12","ntwz32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\appni.exe","10/05/2005 09:43:12","appni.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\crtn32.exe","10/05/2005 09:43:12","crtn32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\addri.exe","10/05/2005 09:43:12","addri.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\mfcyg.exe","10/05/2005 09:43:12","mfcyg.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\iehi.exe","10/05/2005 09:43:12","iehi.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\appek.exe","10/05/2005 09:43:13","appek.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\mfceb32.exe","10/05/2005 09:43:13","mfceb32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\javaqz.exe","10/05/2005 09:43:13","javaqz.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\sdkjz32.exe","10/05/2005 09:43:13","sdkjz32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\iemk.exe","10/05/2005 09:43:13","iemk.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\mski32.exe","10/05/2005 09:43:13","mski32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\ipob.exe","10/05/2005 09:43:13","ipob.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32
tkb.exe","10/05/2005 09:43:13","ntkb.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\apiqo.exe","10/05/2005 09:43:13","apiqo.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\iemh32.exe","10/05/2005 09:43:13","iemh32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\sdkut32.exe","10/05/2005 09:43:13","sdkut32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\iecp.exe","10/05/2005 09:43:13","iecp.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\msgf.exe","10/05/2005 09:43:13","msgf.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\addze.exe","10/05/2005 09:43:13","addze.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\crsr.exe","10/05/2005 09:43:13","crsr.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\iesx32.exe","10/05/2005 09:43:13","iesx32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\mfcgz.exe","10/05/2005 09:43:13","mfcgz.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133612.exe","10/05/2005 09:43:13","A0133612.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133614.exe","10/05/2005 09:43:13","A0133614.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133615.exe","10/05/2005 09:43:13","A0133615.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133616.exe","10/05/2005 09:43:13","A0133616.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133618.exe","10/05/2005 09:43:13","A0133618.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133620.exe","10/05/2005 09:43:13","A0133620.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133621.exe","10/05/2005 09:43:13","A0133621.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133623.exe","10/05/2005 09:43:13","A0133623.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133624.exe","10/05/2005 09:43:13","A0133624.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133626.exe","10/05/2005 09:43:13","A0133626.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133627.exe","10/05/2005 09:43:13","A0133627.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133628.exe","10/05/2005 09:43:14","A0133628.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133629.exe","10/05/2005 09:43:14","A0133629.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133631.exe","10/05/2005 09:43:14","A0133631.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133632.exe","10/05/2005 09:43:14","A0133632.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133633.exe","10/05/2005 09:43:14","A0133633.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133635.exe","10/05/2005 09:43:14","A0133635.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133636.exe","10/05/2005 09:43:14","A0133636.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133638.exe","10/05/2005 09:43:14","A0133638.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133639.exe","10/05/2005 09:43:14","A0133639.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133640.exe","10/05/2005 09:43:14","A0133640.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133642.exe","10/05/2005 09:43:14","A0133642.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133643.exe","10/05/2005 09:43:14","A0133643.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133644.exe","10/05/2005 09:43:14","A0133644.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133646.exe","10/05/2005 09:43:14","A0133646.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133647.exe","10/05/2005 09:43:14","A0133647.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133648.exe","10/05/2005 09:43:14","A0133648.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133649.exe","10/05/2005 09:43:14","A0133649.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133651.exe","10/05/2005 09:43:14","A0133651.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133652.exe","10/05/2005 09:43:14","A0133652.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133653.exe","10/05/2005 09:43:14","A0133653.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133654.exe","10/05/2005 09:43:14","A0133654.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133655.exe","10/05/2005 09:43:14","A0133655.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133656.exe","10/05/2005 09:43:14","A0133656.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133658.exe","10/05/2005 09:43:14","A0133658.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133744.exe","10/05/2005 09:43:14","A0133744.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133745.exe","10/05/2005 09:43:14","A0133745.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\sdkgw32.exe","11/05/2005 08:32:55","sdkgw32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\sdkyi32.exe","11/05/2005 08:32:55","sdkyi32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\adddt32.exe","11/05/2005 08:32:55","adddt32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\sdkhy.exe","11/05/2005 08:32:55","sdkhy.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\mfcrx32.exe","11/05/2005 08:32:55","mfcrx32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\mfcsk.exe","11/05/2005 08:32:55","mfcsk.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\crsj.exe","11/05/2005 08:32:55","crsj.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\apptt.exe","11/05/2005 08:32:55","apptt.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\d3ic32.exe","11/05/2005 08:32:55","d3ic32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\apifn.exe","11/05/2005 08:32:55","apifn.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS
etix.exe","11/05/2005 08:32:56","netix.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\atlnf.exe","11/05/2005 08:32:56","atlnf.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\atlin.exe","11/05/2005 08:32:56","atlin.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\atlzr.exe","11/05/2005 08:32:56","atlzr.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\ipbk.exe","11/05/2005 08:32:56","ipbk.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\atljh32.exe","11/05/2005 08:32:56","atljh32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\javapg.exe","11/05/2005 08:32:56","javapg.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\apibo32.exe","11/05/2005 08:32:56","apibo32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\apits32.exe","11/05/2005 08:32:56","apits32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32
tsb32.exe","11/05/2005 08:32:56","ntsb32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32
etjl.exe","11/05/2005 08:32:56","netjl.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\sysgw32.exe","11/05/2005 08:32:56","sysgw32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\d3ho32.exe","11/05/2005 08:32:56","d3ho32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32
tbi.exe","11/05/2005 08:32:56","ntbi.exe","32.62 KB""","","Cheval de Troie  Dropper.Small.18.AA","C:\WINDOWS\Temp\ft28s.exe","11/05/2005 08:32:56","ft28s.exe","10 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133945.exe","11/05/2005 08:32:56","A0133945.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133946.exe","11/05/2005 08:32:56","A0133946.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133947.exe","11/05/2005 08:32:56","A0133947.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133948.exe","11/05/2005 08:32:56","A0133948.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133949.exe","11/05/2005 08:32:56","A0133949.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133950.exe","11/05/2005 08:32:56","A0133950.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133951.exe","11/05/2005 08:32:56","A0133951.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133952.exe","11/05/2005 08:32:57","A0133952.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133953.exe","11/05/2005 08:32:57","A0133953.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133954.exe","11/05/2005 08:32:57","A0133954.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133955.exe","11/05/2005 08:32:57","A0133955.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133956.exe","11/05/2005 08:32:57","A0133956.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133957.exe","11/05/2005 08:32:57","A0133957.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133958.exe","11/05/2005 08:32:57","A0133958.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133959.exe","11/05/2005 08:32:57","A0133959.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133960.exe","11/05/2005 08:32:57","A0133960.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133961.exe","11/05/2005 08:32:57","A0133961.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133962.exe","11/05/2005 08:32:57","A0133962.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133963.exe","11/05/2005 08:32:57","A0133963.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133964.exe","11/05/2005 08:32:57","A0133964.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133965.exe","11/05/2005 08:32:57","A0133965.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133966.exe","11/05/2005 08:32:57","A0133966.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133967.exe","11/05/2005 08:32:57","A0133967.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133968.exe","11/05/2005 08:32:57","A0133968.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133969.exe","11/05/2005 08:32:57","A0133969.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133970.exe","11/05/2005 08:32:57","A0133970.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133971.exe","11/05/2005 08:32:57","A0133971.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133972.exe","11/05/2005 08:32:57","A0133972.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133973.exe","11/05/2005 08:32:57","A0133973.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133974.exe","11/05/2005 08:32:57","A0133974.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133975.exe","11/05/2005 08:32:57","A0133975.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133976.exe","11/05/2005 08:32:57","A0133976.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133977.exe","11/05/2005 08:32:57","A0133977.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133978.exe","11/05/2005 08:32:57","A0133978.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133979.exe","11/05/2005 08:32:57","A0133979.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133980.exe","11/05/2005 08:32:57","A0133980.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\crlo32.exe","11/05/2005 12:26:47","crlo32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\sdkze.exe","11/05/2005 14:28:37","sdkze.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\atlrm32.exe","11/05/2005 14:28:38","atlrm32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS
ethm32.exe","11/05/2005 14:28:38","nethm32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\syskh.exe","11/05/2005 14:28:38","syskh.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\appbl32.exe","11/05/2005 14:28:38","appbl32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\mfceg.exe","11/05/2005 14:28:38","mfceg.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\mfcav32.exe","11/05/2005 14:28:38","mfcav32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\d3gd.exe","11/05/2005 14:28:38","d3gd.exe","11.12 KB""","",&qu

Utilisateur anonyme · Answer

ok merci fais le poste juste au dessu et a demain bisous

elise · Answer

Ben merci pour le réconfort!!!!
Voilà que Monsieur me dit bonsoir, t'es grave infectée, c'est pas grave, on fait ça demain.

Argh je sens déjà que ça me gratte !!!!!

Remarque ce qui me rassure c'est que je sais déjà ce que j'ai, alors c'est 90 % de la guérison.

Je fais tout ce que tu m'as dit dès demain matin (aussitôt les jujus jetés au fond de leur classe) et quand même bonne nuit à toi et à tout le monde.

Biz et oups au dodo

Je tiens à remercier ici toutes les personnes qui m'ont conseillée aujourd'hui. Merci aux fins connaisseurs que vous etes de prendre du temps avec des néophytes comme moi.

Elise

ELISE · Answer

Bonjour,J'ai donc fait tout ce que tu m'avais demandé et voici les 2 logs.LOG D'AVG :"","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\appdz32.exe","12/05/2005 12:10:14","appdz32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\msny.exe","12/05/2005 11:39:44","msny.exe","11.74 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\winha32.exe","12/05/2005 11:39:44","winha32.exe","11.34 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\sysed32.exe","12/05/2005 11:39:44","sysed32.exe","11.5 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\crfq.exe","12/05/2005 11:39:44","crfq.exe","11.37 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\systn.exe","12/05/2005 11:39:44","systn.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\atlqr32.exe","12/05/2005 11:39:44","atlqr32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\atlkl32.exe","12/05/2005 11:39:44","atlkl32.exe","11.3 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\apixn32.exe","12/05/2005 11:39:44","apixn32.exe","11.79 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\apicw.exe","12/05/2005 11:39:44","apicw.exe","11.73 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\ipeb32.exe","12/05/2005 11:39:44","ipeb32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\ipoz32.exe","12/05/2005 11:39:44","ipoz32.exe","11.54 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS
txq.exe","12/05/2005 11:39:43","ntxq.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS
etgl32.exe","12/05/2005 11:39:43","netgl32.exe","11.57 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\d3hr32.exe","12/05/2005 08:59:10","d3hr32.exe","11.32 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\iekv.exe","12/05/2005 08:59:10","iekv.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\sdkla32.exe","12/05/2005 08:59:10","sdkla32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS
ettc.exe","12/05/2005 08:59:10","nettc.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\sdkzj.exe","12/05/2005 08:59:10","sdkzj.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS
etqs32.exe","12/05/2005 08:59:10","netqs32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\sdkpt.exe","12/05/2005 08:59:10","sdkpt.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\appfd.exe","11/05/2005 23:07:12","appfd.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\addby32.exe","11/05/2005 23:07:12","addby32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32
tuh.exe","11/05/2005 23:07:12","ntuh.exe","11.76 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\d3ae32.exe","11/05/2005 23:07:12","d3ae32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32
etjg32.exe","11/05/2005 23:07:12","netjg32.exe","11.33 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\winvx32.exe","11/05/2005 23:07:11","winvx32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\iezx32.exe","11/05/2005 23:07:11","iezx32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\addyu.exe","11/05/2005 23:07:11","addyu.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\iphm32.exe","11/05/2005 23:07:11","iphm32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\apimp.exe","11/05/2005 23:07:11","apimp.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\crkg32.exe","11/05/2005 23:07:11","crkg32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\mfcuy32.exe","11/05/2005 23:07:11","mfcuy32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\javaro.exe","11/05/2005 23:07:11","javaro.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\appzv.exe","11/05/2005 23:07:11","appzv.exe","11.95 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\crqf.exe","11/05/2005 23:07:11","crqf.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\msxd32.exe","11/05/2005 23:07:11","msxd32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\sysnh.exe","11/05/2005 23:07:11","sysnh.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\sdkbf.exe","11/05/2005 23:07:11","sdkbf.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\mfcja.exe","11/05/2005 23:07:11","mfcja.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\sysye32.exe","11/05/2005 23:07:11","sysye32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\addbk.exe","11/05/2005 23:07:11","addbk.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\mfcih32.exe","11/05/2005 18:02:11","mfcih32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\System32\wineq32.exe","11/05/2005 17:28:18","wineq32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\mfcxo.exe","11/05/2005 17:27:02","mfcxo.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\apiaz32.exe","11/05/2005 17:26:59","apiaz32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\javaso.exe","11/05/2005 17:26:54","javaso.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\winyf32.exe","11/05/2005 17:26:49","winyf32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\mfcvc32.exe","11/05/2005 14:28:38","mfcvc32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\sysoq32.exe","11/05/2005 14:28:38","sysoq32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32
tzb.exe","11/05/2005 14:28:38","ntzb.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\d3qx32.exe","11/05/2005 14:28:38","d3qx32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\msuq32.exe","11/05/2005 14:28:38","msuq32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\sdklq32.exe","11/05/2005 14:28:38","sdklq32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\apimx.exe","11/05/2005 14:28:38","apimx.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\apptz32.exe","11/05/2005 14:28:38","apptz32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\ieox32.exe","11/05/2005 14:28:38","ieox32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\d3gd.exe","11/05/2005 14:28:38","d3gd.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\mfcav32.exe","11/05/2005 14:28:38","mfcav32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\mfceg.exe","11/05/2005 14:28:38","mfceg.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\appbl32.exe","11/05/2005 14:28:38","appbl32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\syskh.exe","11/05/2005 14:28:38","syskh.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS
ethm32.exe","11/05/2005 14:28:38","nethm32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\atlrm32.exe","11/05/2005 14:28:38","atlrm32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\sdkze.exe","11/05/2005 14:28:37","sdkze.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\crlo32.exe","11/05/2005 12:26:47","crlo32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133980.exe","11/05/2005 08:32:57","A0133980.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133979.exe","11/05/2005 08:32:57","A0133979.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133978.exe","11/05/2005 08:32:57","A0133978.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133977.exe","11/05/2005 08:32:57","A0133977.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133976.exe","11/05/2005 08:32:57","A0133976.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133975.exe","11/05/2005 08:32:57","A0133975.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133974.exe","11/05/2005 08:32:57","A0133974.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133973.exe","11/05/2005 08:32:57","A0133973.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133972.exe","11/05/2005 08:32:57","A0133972.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133971.exe","11/05/2005 08:32:57","A0133971.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133970.exe","11/05/2005 08:32:57","A0133970.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133969.exe","11/05/2005 08:32:57","A0133969.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133968.exe","11/05/2005 08:32:57","A0133968.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133967.exe","11/05/2005 08:32:57","A0133967.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133966.exe","11/05/2005 08:32:57","A0133966.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133965.exe","11/05/2005 08:32:57","A0133965.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133964.exe","11/05/2005 08:32:57","A0133964.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133963.exe","11/05/2005 08:32:57","A0133963.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133962.exe","11/05/2005 08:32:57","A0133962.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133961.exe","11/05/2005 08:32:57","A0133961.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133960.exe","11/05/2005 08:32:57","A0133960.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133959.exe","11/05/2005 08:32:57","A0133959.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133958.exe","11/05/2005 08:32:57","A0133958.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133957.exe","11/05/2005 08:32:57","A0133957.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133956.exe","11/05/2005 08:32:57","A0133956.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133955.exe","11/05/2005 08:32:57","A0133955.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133954.exe","11/05/2005 08:32:57","A0133954.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133953.exe","11/05/2005 08:32:57","A0133953.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133952.exe","11/05/2005 08:32:57","A0133952.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133951.exe","11/05/2005 08:32:56","A0133951.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133950.exe","11/05/2005 08:32:56","A0133950.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133949.exe","11/05/2005 08:32:56","A0133949.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133948.exe","11/05/2005 08:32:56","A0133948.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133947.exe","11/05/2005 08:32:56","A0133947.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133946.exe","11/05/2005 08:32:56","A0133946.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133945.exe","11/05/2005 08:32:56","A0133945.exe","32.62 KB""","","Cheval de Troie  Dropper.Small.18.AA","C:\WINDOWS\Temp\ft28s.exe","11/05/2005 08:32:56","ft28s.exe","10 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32
tbi.exe","11/05/2005 08:32:56","ntbi.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\d3ho32.exe","11/05/2005 08:32:56","d3ho32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\sysgw32.exe","11/05/2005 08:32:56","sysgw32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32
etjl.exe","11/05/2005 08:32:56","netjl.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32
tsb32.exe","11/05/2005 08:32:56","ntsb32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\apits32.exe","11/05/2005 08:32:56","apits32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\apibo32.exe","11/05/2005 08:32:56","apibo32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\javapg.exe","11/05/2005 08:32:56","javapg.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\atljh32.exe","11/05/2005 08:32:56","atljh32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\ipbk.exe","11/05/2005 08:32:56","ipbk.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\atlzr.exe","11/05/2005 08:32:56","atlzr.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\atlin.exe","11/05/2005 08:32:56","atlin.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\atlnf.exe","11/05/2005 08:32:56","atlnf.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS
etix.exe","11/05/2005 08:32:56","netix.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\apifn.exe","11/05/2005 08:32:55","apifn.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\d3ic32.exe","11/05/2005 08:32:55","d3ic32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\apptt.exe","11/05/2005 08:32:55","apptt.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\crsj.exe","11/05/2005 08:32:55","crsj.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\mfcsk.exe","11/05/2005 08:32:55","mfcsk.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\mfcrx32.exe","11/05/2005 08:32:55","mfcrx32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\sdkhy.exe","11/05/2005 08:32:55","sdkhy.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\adddt32.exe","11/05/2005 08:32:55","adddt32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\sdkyi32.exe","11/05/2005 08:32:55","sdkyi32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\sdkgw32.exe","11/05/2005 08:32:55","sdkgw32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133745.exe","10/05/2005 09:43:14","A0133745.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133744.exe","10/05/2005 09:43:14","A0133744.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133658.exe","10/05/2005 09:43:14","A0133658.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133656.exe","10/05/2005 09:43:14","A0133656.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133655.exe","10/05/2005 09:43:14","A0133655.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133654.exe","10/05/2005 09:43:14","A0133654.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133653.exe","10/05/2005 09:43:14","A0133653.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133652.exe","10/05/2005 09:43:14","A0133652.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133651.exe","10/05/2005 09:43:14","A0133651.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133649.exe","10/05/2005 09:43:14","A0133649.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133648.exe","10/05/2005 09:43:14","A0133648.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133647.exe","10/05/2005 09:43:14","A0133647.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133646.exe","10/05/2005 09:43:14","A0133646.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133644.exe","10/05/2005 09:43:14","A0133644.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133643.exe","10/05/2005 09:43:14","A0133643.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133642.exe","10/05/2005 09:43:14","A0133642.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133640.exe","10/05/2005 09:43:14","A0133640.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133639.exe","10/05/2005 09:43:14","A0133639.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133638.exe","10/05/2005 09:43:14","A0133638.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133636.exe","10/05/2005 09:43:14","A0133636.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133635.exe","10/05/2005 09:43:14","A0133635.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133633.exe","10/05/2005 09:43:14","A0133633.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133632.exe","10/05/2005 09:43:14","A0133632.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133631.exe","10/05/2005 09:43:14","A0133631.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133629.exe","10/05/2005 09:43:14","A0133629.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133628.exe","10/05/2005 09:43:14","A0133628.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133627.exe","10/05/2005 09:43:13","A0133627.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133626.exe","10/05/2005 09:43:13","A0133626.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133624.exe","10/05/2005 09:43:13","A0133624.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133623.exe","10/05/2005 09:43:13","A0133623.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133621.exe","10/05/2005 09:43:13","A0133621.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133620.exe","10/05/2005 09:43:13","A0133620.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133618.exe","10/05/2005 09:43:13","A0133618.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133616.exe","10/05/2005 09:43:13","A0133616.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133615.exe","10/05/2005 09:43:13","A0133615.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133614.exe","10/05/2005 09:43:13","A0133614.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133612.exe","10/05/2005 09:43:13","A0133612.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\mfcgz.exe","10/05/2005 09:43:13","mfcgz.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\iesx32.exe","10/05/2005 09:43:13","iesx32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\crsr.exe","10/05/2005 09:43:13","crsr.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\addze.exe","10/05/2005 09:43:13","addze.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\msgf.exe","10/05/2005 09:43:13","msgf.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\iecp.exe","10/05/2005 09:43:13","iecp.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\sdkut32.exe","10/05/2005 09:43:13","sdkut32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\iemh32.exe","10/05/2005 09:43:13","iemh32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\apiqo.exe","10/05/2005 09:43:13","apiqo.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32
tkb.exe","10/05/2005 09:43:13","ntkb.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\ipob.exe","10/05/2005 09:43:13","ipob.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\mski32.exe","10/05/2005 09:43:13","mski32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\iemk.exe","10/05/2005 09:43:13","iemk.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\sdkjz32.exe","10/05/2005 09:43:13","sdkjz32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\javaqz.exe","10/05/2005 09:43:13","javaqz.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\mfceb32.exe","10/05/2005 09:43:13","mfceb32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\appek.exe","10/05/2005 09:43:13","appek.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\iehi.exe","10/05/2005 09:43:12","iehi.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\mfcyg.exe","10/05/2005 09:43:12","mfcyg.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\addri.exe","10/05/2005 09:43:12","addri.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\crtn32.exe","10/05/2005 09:43:12","crtn32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\appni.exe","10/05/2005 09:43:12","appni.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS
twz32.exe","10/05/2005 09:43:12","ntwz32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\atlok.exe","10/05/2005 09:43:12","atlok.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\mfcly32.exe","10/05/2005 09:43:12","mfcly32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\crpf32.exe","10/05/2005 09:43:12","crpf32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\applk32.exe","10/05/2005 09:43:12","applk32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addpk32.exe","10/05/2005 09:43:12","addpk32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addqt.exe","10/05/2005 09:43:12","addqt.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS
tnt32.exe","10/05/2005 09:43:12","ntnt32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\atlki.exe","10/05/2005 09:43:12","atlki.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\winoq32.exe","10/05/2005 09:43:12","winoq32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\iegk.exe","10/05/2005 09:43:12","iegk.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\javang.exe","10/05/2005 09:43:12","javang.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\apizd.exe","10/05/2005 09:43:12","apizd.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\d3fu32.exe","10/05/2005 09:43:12","d3fu32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\d3ie32.exe","09/05/2005 10:59:58","d3ie32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\ipww.exe","09/05/2005 10:59:58","ipww.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\addvx32.exe","09/05/2005 10:59:58","addvx32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\apiec32.exe","09/05/2005 10:59:58","apiec32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\msrl.exe","09/05/2005 10:59:58","msrl.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\msso.exe","09/05/2005 10:59:58","msso.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\apphn32.exe","09/05/2005 10:59:58","apphn32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addpg32.exe","09/05/2005 10:59:58","addpg32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\ipuo.exe","09/05/2005 10:59:58","ipuo.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\crdt.exe","09/05/2005 10:59:58","crdt.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\atlyc32.exe","09/05/2005 10:59:58","atlyc32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133448.exe","09/05/2005 08:28:35","A0133448.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133447.exe","09/05/2005 08:28:35","A0133447.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133446.exe","09/05/2005 08:28:35","A0133446.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133444.exe","09/05/2005 08:28:35","A0133444.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133443.exe","09/05/2005 08:28:35","A0133443.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133442.exe","09/05/2005 08:28:35","A0133442.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133440.exe","09/05/2005 08:28:35","A0133440.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133438.exe","09/05/2005 08:28:35","A0133438.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133436.exe","09/05/2005 08:28:35","A0133436.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\ipvl32.exe","09/05/2005 08:28:35","ipvl32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\appwr32.exe","09/05/2005 08:28:35","appwr32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32
tci.exe","09/05/2005 08:28:35","ntci.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32
etuc.exe","09/05/2005 08:28:35","netuc.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\javadh.exe","09/05/2005 08:28:35","javadh.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\msxl.exe","09/05/2005 08:28:35","msxl.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\javaui32.exe","09/05/2005 08:28:35","javaui32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\apiof32.exe","09/05/2005 08:28:35","apiof32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\apiig32.exe","09/05/2005 08:28:35","apiig32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\d3xl.exe","09/05/2005 08:28:35","d3xl.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\crrm.exe","09/05/2005 08:28:35","crrm.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\ipfi32.exe","09/05/2005 08:28:35","ipfi32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32
etkz32.exe","09/05/2005 08:28:35","netkz32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\mstz32.exe","09/05/2005 08:28:35","mstz32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\atlrh.exe","09/05/2005 08:28:35","atlrh.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\d3zf.exe","09/05/2005 08:28:35","d3zf.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\appkr32.exe","09/05/2005 08:28:34","appkr32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\javark.exe","09/05/2005 08:28:34","javark.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\sdkia.exe","09/05/2005 08:28:34","sdkia.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\syshr32.exe","09/05/2005 08:28:34","syshr32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32
etnv32.exe","09/05/2005 08:28:34","netnv32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32
tss32.exe","09/05/2005 08:28:34","ntss32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\iesc.exe","09/05/2005 08:28:34","iesc.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\ieiw.exe","09/05/2005 08:28:34","ieiw.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\ipuh32.exe","09/05/2005 08:28:34","ipuh32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\appsd.exe","09/05/2005 08:28:34","appsd.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\msuc.exe","09/05/2005 08:28:34","msuc.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\apild.exe","09/05/2005 08:28:34","apild.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\wines.exe","09/05/2005 08:28:34","wines.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\d3tt32.exe","09/05/2005 08:28:34","d3tt32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\mfceq32.exe","09/05/2005 08:28:34","mfceq32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\atlwu32.exe","09/05/2005 08:28:34","atlwu32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\crhx.exe","09/05/2005 08:28:34","crhx.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addlx.exe","09/05/2005 08:28:34","addlx.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\addqd32.exe","09/05/2005 08:28:34","addqd32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addgr.exe","09/05/2005 08:28:34","addgr.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\d3jh.exe","09/05/2005 08:28:34","d3jh.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addje.exe","09/05/2005 08:28:34","addje.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\ipsw32.exe","09/05/2005 08:28:34","ipsw32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\d3lq32.exe","09/05/2005 08:28:34","d3lq32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\msdg32.exe","09/05/2005 08:28:33","msdg32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\winqa32.exe","09/05/2005 08:28:33","winqa32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\winge.exe","09/05/2005 08:28:33","winge.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\apptk.exe","09/05/2005 08:28:33","apptk.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\mfchn32.exe","09/05/2005 08:28:33","mfchn32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addvq.exe","09/05/2005 08:28:33","addvq.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\d3tm32.exe","09/05/2005 08:28:33","d3tm32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addjg32.exe","08/05/2005 23:10:32","addjg32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\System32
etix.exe","08/05/2005 23:10:25","netix.exe","11.12 KB""","","Virus identifié  I-Worm/Netsky.D","your_letter.pif","08/05/2005 22:57:16","your_letter.pif","17 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\System32\ieul32.exe","08/05/2005 22:18:54","ieul32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\mfctc.exe","08/05/2005 22:18:47","mfctc.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\System32\apppb.exe","08/05/2005 22:16:22","apppb.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS
tos32.exe","08/05/2005 22:16:15","ntos32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\System32\mfckw32.exe","08/05/2005 22:04:22","mfckw32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\javaie.exe","08/05/2005 22:04:17","javaie.exe","11.12 KB""","","Cheval de Troie  Downloader.Small.8.R","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133356.EXE","08/05/2005 08:25:55","A0133356.EXE","24.5 KB""","","Cheval de Troie  Startpage.19.AO","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133353.dll","08/05/2005 08:25:55","A0133353.dll","65 KB""","","Cheval de Troie  Dropper.Small.9.BV","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133345.EXE","08/05/2005 08:25:55","A0133345.EXE","27 KB""","","Cheval de Troie  Downloader.Agent.6.BN","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133308.dll","08/05/2005 08:25:55","A0133308.dll","84 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133306.exe","08/05/2005 08:25:55","A0133306.exe","11.12 KB""","","Cheval de Troie  Clicker.3.AV","C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133304.exe","08/05/2005 08:25:55","A0133304.exe","6.84 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\mfchx32.exe","08/05/2005 08:25:55","mfchx32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\mfcdw32.exe","08/05/2005 08:25:55","mfcdw32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\ietx32.exe","08/05/2005 08:25:55","ietx32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\sdkem32.exe","08/05/2005 08:25:55","sdkem32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\system32\addds32.exe","08/05/2005 08:25:55","addds32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\system32\javahu.exe","08/05/2005 08:25:55","javahu.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\ieef.exe","08/05/2005 08:25:55","ieef.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\mfcso.exe","08/05/2005 08:25:55","mfcso.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\atlgd.exe","08/05/2005 08:25:55","atlgd.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\atlyo.exe","08/05/2005 08:25:55","atlyo.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\sdkxf32.exe","08/05/2005 08:25:55","sdkxf32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\creb.exe","08/05/2005 08:25:54","creb.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\winfl32.exe","08/05/2005 08:25:54","winfl32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\mfcfa.exe","08/05/2005 08:25:54","mfcfa.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\crhb.exe","07/05/2005 23:56:19","crhb.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\addgs32.exe","07/05/2005 23:56:12","addgs32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\winho.exe","07/05/2005 22:47:00","winho.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\System32
etgf32.exe","07/05/2005 22:46:54","netgf32.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\System32\mfclx32.exe","07/05/2005 22:15:26","mfclx32.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\javako.exe","07/05/2005 22:15:20","javako.exe","11.12 KB""","","Cheval de Troie  Downloader.Agent.12.D","C:\WINDOWS\addso.exe","07/05/2005 22:04:27","addso.exe","32.62 KB""","","Cheval de Troie  Downloader.Agent.11.Q","C:\WINDOWS\addw

elise · Answer

Scan started at 12/05/2005 10:10:55

Scanning memory...
Scanning boot sectors...
Scanning files...

Scanned
============================
Objects: 61487
Directories: 4173
Archives: 8591
Size(Kb): 1855240
Infected files: 0

Found
============================
Viruses found: 0
Suspicious files: 0
Disinfected files: 0
Mail files: 786

elise · Answer

Bon ben voilà, voilà.........Je crains que mes sauveurs ne soient partis ailleurs en croisade vers de lointains PC.........Y a t-il une ême charitable pour m'aider???Merci beaucoup.Elise

Utilisateur anonyme · Answer

salut
-------------------------
tous da bord telecharge ces programmes si tu ne les a pas et met les a jour mais ne les utilise pas encore
adaware (1)
spyboot (2)
(ici) http://www.florensac-chasse-trap.com/ section virus
et aussi ceci
CleanUp312.exe (3)

----------------

demarre en mode sans echec
mode sans echec pour cela tu tapote la touche f8
des le debut de l allumage du pc sans t arreter
une fenetre vas souvrir tute deplace avec les fleches du clavier sur demarreren mode sans echec
une fois sur le bureau il ni auras pas toutes les couleurs et autres c est normal.si f8 ne marche pas utilise la touche f5
-------------------------
desactive ta restauration systeme
pour ça tu fais clic droit sur poste de travail
propriété tu clique sur onglet restauration système
tu coche la case désactiver la restauration et applique
------------

assure toi de ceci
Affiche tous les fichiers et dossiers :
cliquer sur démarrer/panneau de configuration/option des dossiers/affichage
Cocher afficher les dossiers cacher

Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)"

Décocher masquer les extensions dont le type est connu
Puis fais «Ok» pour valider les changements.

Et appliquer
----------------------
vide tes fichiers temps et tempory internet file sur tous les utilisateur
utilise ceci pour le faire
http://pageperso.aol.fr/Balltrap34/CleanUp312.exe
---------------
supprime new do net en first:
http://www.new.net/support/uninstall6_76.exe

--------------------
relance hijack coche ces lignes et ensuite clik sur fix

R1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://www.smart-search.biz

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.smart-search.biz

R1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://www.LOX.com/index.html
R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://www.LOX.com/index.html

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.smart-search.biz

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768

toutes les R1 en fait !

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.LOX.com/index.html

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.LOX.com/index.html

R3 - Default URLSearchHook is missing

O2 - BHO: Class - {5401DC8A-1A4C-4EDC-9555-CC66BBEDCDF4} - C:\WINDOWS\iesu.dll

O4 - HKLM\..\Run: [DI2] "C:\DOCUME~1\CLERICE\LOCALS~1\Temp\27.exe\27.exe"
O4 - HKLM\..\Run: [Eistv] C:\Program Files\Tjqdgn\Itmnf.exe

O4 - HKLM\..\Run: [Crazy Browser.exe] C:\Program Files\Crazy Browser\Crazy Browser.exe
O4 - HKCU\..\Run: [NDrv] C:\WINDOWS\System32\NDrv.exe

O16 - DPF: {11111111-1111-1111-1111-111111111123} - http://fuckgoat.net//gallery/d.exe

O16 - DPF: {11311111-1551-1661-1771-000000000000} - http://www.all-find.org/mih2/web.exe

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/FunBuddyIconsFWBInitialSe tup1.0.0.8.cab

O16 - DPF: {22A88341-AFCB-45F0-A856-C2BAE74F878E} (InstallX Class) - http://www.20x2p.com/09222a6a/enter.cab
O16 - DPF: {527196A4-B1A3-4647-931D-37BA5AF23037} - http://www.all-find.org/mih4/web.exe

O16 - DPF: {FFCEABDA-C04E-7F4A-E9B6-DFA72B2F49FB} - http://213.200.210.10/dl/101/FR732_116.exe

----------------------
recherche et suppr ceci en gras

C:\WINDOWS\javawg.exe

---------------
passe adaware et vire tous se qu il trouve
----------
passe spy boot et vire tous se qu il trouvent
-------------

tu vide ta poubelle et tu redemarre en mode normal et refait un hijack

Bon courage

elise · Answer

Merci preu chevalier

Vu tout ce qu'il y a à faire, je crois que je vais m'y mettre tranquillement ce soir quand les gars seront au lit.
Donc je fais tout cela, et je redepose les logs ici cette nuit ou demain matin.
Merci beaucoup de ne pas me laisser tomber.

Elise

Utilisateur anonyme · Answer

ok pas de soucis elise,prend ton temps et te trompe pas, si je suis encore la ce soir je continuerais sinon a demain belle princesse...

ELISE · Answer

Bonsoir à tout le monde,Bon je crois que j'ai tout fait à part que j'ai fixé tous les R1, sachant qu'il y en avaient deux de plus que sur la liste. Je me suis tatée un bon bout de temps et puis comme c'était écrit de fixer tous les R1, ben tu vois bien........Sinon je joins mes logs de Hijack (j'ai toujours du mal à l'écrire celui ci) et d' AVG qui me dit que Monsieur Downloader agent est toujours à la maison (m'en fiche, vais lui donner les croquettes du chat, l'en aura peut être mal et partira....).Je pense que par précaution je vais mettre un autre post en route pour le formatage de W XP.Mais je continuerai à être obéissante et faire tout ce qu'on me dit.Juste une question : que ce passe t-il vraiment dans mon PC?Parce que je n'y comprend rien, que fait ce troyen exactement sur le PC? Le risque est -il important?Merci pour toutEliseCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\atlqb.exe	05/12/2005 19:35	atlqb.exe	11.8 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\d3sc32.exe	05/12/2005 19:35	d3sc32.exe	11.54 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\syscv32.exe	05/12/2005 19:35	syscv32.exe	11.8 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\mfcay32.exe	05/12/2005 19:35	mfcay32.exe	11.49 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\apiil32.exe	05/12/2005 19:35	apiil32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\winwx32.exe	05/12/2005 19:35	winwx32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\atlei32.exe	05/12/2005 19:35	atlei32.exe	11.82 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\iexp32.exe	05/12/2005 19:35	iexp32.exe	12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\ipqu32.exe	05/12/2005 19:35	ipqu32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\d3gp32.exe	05/12/2005 19:35	d3gp32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\appdz32.exe	05/12/2005 12:10	appdz32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\msny.exe	05/12/2005 11:39	msny.exe	11.74 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\winha32.exe	05/12/2005 11:39	winha32.exe	11.34 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\sysed32.exe	05/12/2005 11:39	sysed32.exe	11.5 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\crfq.exe	05/12/2005 11:39	crfq.exe	11.37 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\systn.exe	05/12/2005 11:39	systn.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\atlqr32.exe	05/12/2005 11:39	atlqr32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\atlkl32.exe	05/12/2005 11:39	atlkl32.exe	11.3 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\apixn32.exe	05/12/2005 11:39	apixn32.exe	11.79 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\apicw.exe	05/12/2005 11:39	apicw.exe	11.73 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\ipeb32.exe	05/12/2005 11:39	ipeb32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\ipoz32.exe	05/12/2005 11:39	ipoz32.exe	11.54 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS
txq.exe	05/12/2005 11:39	ntxq.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS
etgl32.exe	05/12/2005 11:39	netgl32.exe	11.57 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\d3hr32.exe	05/12/2005 08:59	d3hr32.exe	11.32 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\iekv.exe	05/12/2005 08:59	iekv.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\sdkla32.exe	05/12/2005 08:59	sdkla32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS
ettc.exe	05/12/2005 08:59	nettc.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sdkzj.exe	05/12/2005 08:59	sdkzj.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS
etqs32.exe	05/12/2005 08:59	netqs32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sdkpt.exe	05/12/2005 08:59	sdkpt.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\appfd.exe	05/11/2005 23:07	appfd.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\addby32.exe	05/11/2005 23:07	addby32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32
tuh.exe	05/11/2005 23:07	ntuh.exe	11.76 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\d3ae32.exe	05/11/2005 23:07	d3ae32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32
etjg32.exe	05/11/2005 23:07	netjg32.exe	11.33 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\winvx32.exe	05/11/2005 23:07	winvx32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\iezx32.exe	05/11/2005 23:07	iezx32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\addyu.exe	05/11/2005 23:07	addyu.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\iphm32.exe	05/11/2005 23:07	iphm32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\apimp.exe	05/11/2005 23:07	apimp.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\crkg32.exe	05/11/2005 23:07	crkg32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\mfcuy32.exe	05/11/2005 23:07	mfcuy32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\javaro.exe	05/11/2005 23:07	javaro.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\appzv.exe	05/11/2005 23:07	appzv.exe	11.95 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\crqf.exe	05/11/2005 23:07	crqf.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\msxd32.exe	05/11/2005 23:07	msxd32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sysnh.exe	05/11/2005 23:07	sysnh.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sdkbf.exe	05/11/2005 23:07	sdkbf.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfcja.exe	05/11/2005 23:07	mfcja.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sysye32.exe	05/11/2005 23:07	sysye32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\addbk.exe	05/11/2005 23:07	addbk.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfcih32.exe	05/11/2005 18:02	mfcih32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\System32\wineq32.exe	05/11/2005 17:28	wineq32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfcxo.exe	05/11/2005 17:27	mfcxo.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\apiaz32.exe	05/11/2005 17:26	apiaz32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\javaso.exe	05/11/2005 17:26	javaso.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\winyf32.exe	05/11/2005 17:26	winyf32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\mfcvc32.exe	05/11/2005 14:28	mfcvc32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\sysoq32.exe	05/11/2005 14:28	sysoq32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32
tzb.exe	05/11/2005 14:28	ntzb.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\d3qx32.exe	05/11/2005 14:28	d3qx32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\msuq32.exe	05/11/2005 14:28	msuq32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\sdklq32.exe	05/11/2005 14:28	sdklq32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\apimx.exe	05/11/2005 14:28	apimx.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\apptz32.exe	05/11/2005 14:28	apptz32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\ieox32.exe	05/11/2005 14:28	ieox32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\d3gd.exe	05/11/2005 14:28	d3gd.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\mfcav32.exe	05/11/2005 14:28	mfcav32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\mfceg.exe	05/11/2005 14:28	mfceg.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\appbl32.exe	05/11/2005 14:28	appbl32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\syskh.exe	05/11/2005 14:28	syskh.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS
ethm32.exe	05/11/2005 14:28	nethm32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\atlrm32.exe	05/11/2005 14:28	atlrm32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sdkze.exe	05/11/2005 14:28	sdkze.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\crlo32.exe	05/11/2005 12:26	crlo32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133980.exe	05/11/2005 08:32	A0133980.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133979.exe	05/11/2005 08:32	A0133979.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133978.exe	05/11/2005 08:32	A0133978.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133977.exe	05/11/2005 08:32	A0133977.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133976.exe	05/11/2005 08:32	A0133976.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133975.exe	05/11/2005 08:32	A0133975.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133974.exe	05/11/2005 08:32	A0133974.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133973.exe	05/11/2005 08:32	A0133973.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133972.exe	05/11/2005 08:32	A0133972.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133971.exe	05/11/2005 08:32	A0133971.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133970.exe	05/11/2005 08:32	A0133970.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133969.exe	05/11/2005 08:32	A0133969.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133968.exe	05/11/2005 08:32	A0133968.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133967.exe	05/11/2005 08:32	A0133967.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133966.exe	05/11/2005 08:32	A0133966.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133965.exe	05/11/2005 08:32	A0133965.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133964.exe	05/11/2005 08:32	A0133964.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133963.exe	05/11/2005 08:32	A0133963.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133962.exe	05/11/2005 08:32	A0133962.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133961.exe	05/11/2005 08:32	A0133961.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133960.exe	05/11/2005 08:32	A0133960.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133959.exe	05/11/2005 08:32	A0133959.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133958.exe	05/11/2005 08:32	A0133958.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133957.exe	05/11/2005 08:32	A0133957.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133956.exe	05/11/2005 08:32	A0133956.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133955.exe	05/11/2005 08:32	A0133955.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133954.exe	05/11/2005 08:32	A0133954.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133953.exe	05/11/2005 08:32	A0133953.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133952.exe	05/11/2005 08:32	A0133952.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133951.exe	05/11/2005 08:32	A0133951.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133950.exe	05/11/2005 08:32	A0133950.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133949.exe	05/11/2005 08:32	A0133949.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133948.exe	05/11/2005 08:32	A0133948.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133947.exe	05/11/2005 08:32	A0133947.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133946.exe	05/11/2005 08:32	A0133946.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133945.exe	05/11/2005 08:32	A0133945.exe	32.62 KB		Cheval de Troie  Dropper.Small.18.AA	C:\WINDOWS\Temp\ft28s.exe	05/11/2005 08:32	ft28s.exe	10 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32
tbi.exe	05/11/2005 08:32	ntbi.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\d3ho32.exe	05/11/2005 08:32	d3ho32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\sysgw32.exe	05/11/2005 08:32	sysgw32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32
etjl.exe	05/11/2005 08:32	netjl.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32
tsb32.exe	05/11/2005 08:32	ntsb32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\apits32.exe	05/11/2005 08:32	apits32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\apibo32.exe	05/11/2005 08:32	apibo32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\javapg.exe	05/11/2005 08:32	javapg.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\atljh32.exe	05/11/2005 08:32	atljh32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\ipbk.exe	05/11/2005 08:32	ipbk.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\atlzr.exe	05/11/2005 08:32	atlzr.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\atlin.exe	05/11/2005 08:32	atlin.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\atlnf.exe	05/11/2005 08:32	atlnf.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS
etix.exe	05/11/2005 08:32	netix.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\apifn.exe	05/11/2005 08:32	apifn.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\d3ic32.exe	05/11/2005 08:32	d3ic32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\apptt.exe	05/11/2005 08:32	apptt.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\crsj.exe	05/11/2005 08:32	crsj.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\mfcsk.exe	05/11/2005 08:32	mfcsk.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\mfcrx32.exe	05/11/2005 08:32	mfcrx32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sdkhy.exe	05/11/2005 08:32	sdkhy.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\adddt32.exe	05/11/2005 08:32	adddt32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sdkyi32.exe	05/11/2005 08:32	sdkyi32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sdkgw32.exe	05/11/2005 08:32	sdkgw32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133745.exe	05/10/2005 09:43	A0133745.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133744.exe	05/10/2005 09:43	A0133744.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133658.exe	05/10/2005 09:43	A0133658.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133656.exe	05/10/2005 09:43	A0133656.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133655.exe	05/10/2005 09:43	A0133655.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133654.exe	05/10/2005 09:43	A0133654.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133653.exe	05/10/2005 09:43	A0133653.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133652.exe	05/10/2005 09:43	A0133652.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133651.exe	05/10/2005 09:43	A0133651.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133649.exe	05/10/2005 09:43	A0133649.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133648.exe	05/10/2005 09:43	A0133648.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133647.exe	05/10/2005 09:43	A0133647.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133646.exe	05/10/2005 09:43	A0133646.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133644.exe	05/10/2005 09:43	A0133644.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133643.exe	05/10/2005 09:43	A0133643.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133642.exe	05/10/2005 09:43	A0133642.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133640.exe	05/10/2005 09:43	A0133640.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133639.exe	05/10/2005 09:43	A0133639.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133638.exe	05/10/2005 09:43	A0133638.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133636.exe	05/10/2005 09:43	A0133636.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133635.exe	05/10/2005 09:43	A0133635.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133633.exe	05/10/2005 09:43	A0133633.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133632.exe	05/10/2005 09:43	A0133632.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133631.exe	05/10/2005 09:43	A0133631.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133629.exe	05/10/2005 09:43	A0133629.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133628.exe	05/10/2005 09:43	A0133628.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133627.exe	05/10/2005 09:43	A0133627.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133626.exe	05/10/2005 09:43	A0133626.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133624.exe	05/10/2005 09:43	A0133624.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133623.exe	05/10/2005 09:43	A0133623.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133621.exe	05/10/2005 09:43	A0133621.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133620.exe	05/10/2005 09:43	A0133620.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133618.exe	05/10/2005 09:43	A0133618.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133616.exe	05/10/2005 09:43	A0133616.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133615.exe	05/10/2005 09:43	A0133615.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133614.exe	05/10/2005 09:43	A0133614.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133612.exe	05/10/2005 09:43	A0133612.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\mfcgz.exe	05/10/2005 09:43	mfcgz.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\iesx32.exe	05/10/2005 09:43	iesx32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\crsr.exe	05/10/2005 09:43	crsr.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\addze.exe	05/10/2005 09:43	addze.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\msgf.exe	05/10/2005 09:43	msgf.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\iecp.exe	05/10/2005 09:43	iecp.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\sdkut32.exe	05/10/2005 09:43	sdkut32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\iemh32.exe	05/10/2005 09:43	iemh32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\apiqo.exe	05/10/2005 09:43	apiqo.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32
tkb.exe	05/10/2005 09:43	ntkb.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\ipob.exe	05/10/2005 09:43	ipob.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\mski32.exe	05/10/2005 09:43	mski32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\iemk.exe	05/10/2005 09:43	iemk.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\sdkjz32.exe	05/10/2005 09:43	sdkjz32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\javaqz.exe	05/10/2005 09:43	javaqz.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\mfceb32.exe	05/10/2005 09:43	mfceb32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\appek.exe	05/10/2005 09:43	appek.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\iehi.exe	05/10/2005 09:43	iehi.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfcyg.exe	05/10/2005 09:43	mfcyg.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\addri.exe	05/10/2005 09:43	addri.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\crtn32.exe	05/10/2005 09:43	crtn32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\appni.exe	05/10/2005 09:43	appni.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS
twz32.exe	05/10/2005 09:43	ntwz32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\atlok.exe	05/10/2005 09:43	atlok.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfcly32.exe	05/10/2005 09:43	mfcly32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\crpf32.exe	05/10/2005 09:43	crpf32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\applk32.exe	05/10/2005 09:43	applk32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addpk32.exe	05/10/2005 09:43	addpk32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addqt.exe	05/10/2005 09:43	addqt.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS
tnt32.exe	05/10/2005 09:43	ntnt32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\atlki.exe	05/10/2005 09:43	atlki.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\winoq32.exe	05/10/2005 09:43	winoq32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\iegk.exe	05/10/2005 09:43	iegk.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\javang.exe	05/10/2005 09:43	javang.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\apizd.exe	05/10/2005 09:43	apizd.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\d3fu32.exe	05/10/2005 09:43	d3fu32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\d3ie32.exe	05/09/2005 10:59	d3ie32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\ipww.exe	05/09/2005 10:59	ipww.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\addvx32.exe	05/09/2005 10:59	addvx32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\apiec32.exe	05/09/2005 10:59	apiec32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\msrl.exe	05/09/2005 10:59	msrl.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\msso.exe	05/09/2005 10:59	msso.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\apphn32.exe	05/09/2005 10:59	apphn32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addpg32.exe	05/09/2005 10:59	addpg32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\ipuo.exe	05/09/2005 10:59	ipuo.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\crdt.exe	05/09/2005 10:59	crdt.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\atlyc32.exe	05/09/2005 10:59	atlyc32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133448.exe	05/09/2005 08:28	A0133448.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133447.exe	05/09/2005 08:28	A0133447.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133446.exe	05/09/2005 08:28	A0133446.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133444.exe	05/09/2005 08:28	A0133444.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133443.exe	05/09/2005 08:28	A0133443.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133442.exe	05/09/2005 08:28	A0133442.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133440.exe	05/09/2005 08:28	A0133440.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133438.exe	05/09/2005 08:28	A0133438.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133436.exe	05/09/2005 08:28	A0133436.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\ipvl32.exe	05/09/2005 08:28	ipvl32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\appwr32.exe	05/09/2005 08:28	appwr32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32
tci.exe	05/09/2005 08:28	ntci.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32
etuc.exe	05/09/2005 08:28	netuc.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\javadh.exe	05/09/2005 08:28	javadh.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\msxl.exe	05/09/2005 08:28	msxl.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\javaui32.exe	05/09/2005 08:28	javaui32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\apiof32.exe	05/09/2005 08:28	apiof32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\apiig32.exe	05/09/2005 08:28	apiig32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\d3xl.exe	05/09/2005 08:28	d3xl.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\crrm.exe	05/09/2005 08:28	crrm.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\ipfi32.exe	05/09/2005 08:28	ipfi32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32
etkz32.exe	05/09/2005 08:28	netkz32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\mstz32.exe	05/09/2005 08:28	mstz32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\atlrh.exe	05/09/2005 08:28	atlrh.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\d3zf.exe	05/09/2005 08:28	d3zf.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\appkr32.exe	05/09/2005 08:28	appkr32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\javark.exe	05/09/2005 08:28	javark.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\sdkia.exe	05/09/2005 08:28	sdkia.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\syshr32.exe	05/09/2005 08:28	syshr32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32
etnv32.exe	05/09/2005 08:28	netnv32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32
tss32.exe	05/09/2005 08:28	ntss32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\iesc.exe	05/09/2005 08:28	iesc.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\ieiw.exe	05/09/2005 08:28	ieiw.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\ipuh32.exe	05/09/2005 08:28	ipuh32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\appsd.exe	05/09/2005 08:28	appsd.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\msuc.exe	05/09/2005 08:28	msuc.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\apild.exe	05/09/2005 08:28	apild.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\wines.exe	05/09/2005 08:28	wines.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\d3tt32.exe	05/09/2005 08:28	d3tt32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\mfceq32.exe	05/09/2005 08:28	mfceq32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\atlwu32.exe	05/09/2005 08:28	atlwu32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\crhx.exe	05/09/2005 08:28	crhx.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addlx.exe	05/09/2005 08:28	addlx.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\addqd32.exe	05/09/2005 08:28	addqd32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addgr.exe	05/09/2005 08:28	addgr.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\d3jh.exe	05/09/2005 08:28	d3jh.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addje.exe	05/09/2005 08:28	addje.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\ipsw32.exe	05/09/2005 08:28	ipsw32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\d3lq32.exe	05/09/2005 08:28	d3lq32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\msdg32.exe	05/09/2005 08:28	msdg32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\winqa32.exe	05/09/2005 08:28	winqa32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\winge.exe	05/09/2005 08:28	winge.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\apptk.exe	05/09/2005 08:28	apptk.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfchn32.exe	05/09/2005 08:28	mfchn32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addvq.exe	05/09/2005 08:28	addvq.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\d3tm32.exe	05/09/2005 08:28	d3tm32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addjg32.exe	05/08/2005 23:10	addjg32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\System32
etix.exe	05/08/2005 23:10	netix.exe	11.12 KB		Virus identifié  I-Worm/Netsky.D	your_letter.pif	05/08/2005 22:57	your_letter.pif	17 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\System32\ieul32.exe	05/08/2005 22:18	ieul32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfctc.exe	05/08/2005 22:18	mfctc.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\System32\apppb.exe	05/08/2005 22:16	apppb.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS
tos32.exe	05/08/2005 22:16	ntos32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\System32\mfckw32.exe	05/08/2005 22:04	mfckw32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\javaie.exe	05/08/2005 22:04	javaie.exe	11.12 KB		Cheval de Troie  Downloader.Small.8.R	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133356.EXE	05/08/2005 08:25	A0133356.EXE	24.5 KB		Cheval de Troie  Startpage.19.AO	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133353.dll	05/08/2005 08:25	A0133353.dll	65 KB		Cheval de Troie  Dropper.Small.9.BV	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133345.EXE	05/08/2005 08:25	A0133345.EXE	27 KB		Cheval de Troie  Downloader.Agent.6.BN	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133308.dll	05/08/2005 08:25	A0133308.dll	84 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133306.exe	05/08/2005 08:25	A0133306.exe	11.12 KB		Cheval de Troie  Clicker.3.AV	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133304.exe	05/08/2005 08:25	A0133304.exe	6.84 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\mfchx32.exe	05/08/2005 08:25	mfchx32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\mfcdw32.exe	05/08/2005 08:25	mfcdw32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\ietx32.exe	05/08/2005 08:25	ietx32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\sdkem32.exe	05/08/2005 08:25	sdkem32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\addds32.exe	05/08/2005 08:25	addds32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\javahu.exe	05/08/2005 08:25	javahu.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\ieef.exe	05/08/2005 08:25	ieef.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfcso.exe	05/08/2005 08:25	mfcso.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\atlgd.exe	05/08/2005 08:25	atlgd.exe	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\atlyo.exe	05/08/2005 08:25	atlyo.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sdkxf32.exe	05/08/2005 08:25	sdkxf32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\creb.exe	05/08/2005 08:25	creb.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\winfl32.exe	05/08/2005 08:25	winfl32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfcfa.exe	05/08/2005 08:25	mfcfa.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\crhb.exe	05/07/2005 23:56	crhb.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\addgs32.exe	05/07/2005 23:56	addgs32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\winho.exe	05/07/2005 22:47	winho.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\System32
etgf32.exe	05/07/2005 22:46	netgf32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\System32\mfclx32.exe	05/07/2005 22:15	mfclx32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\javako.exe	05/07/2005 22:15	javako.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addso.exe	05/07/2005 22:04	addso.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\addwz.exe	05/07/2005 22:04	addwz.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\System32\crtn.exe	05/07/2005 21:45	crtn.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\System32\addrw32.exe	05/07/2005 21:45	addrw32.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\iefo32.exe	05/07/2005 19:36	iefo32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\System32\mfcee.exe	05/07/2005 19:36	mfcee.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\iehs.exe	05/07/2005 18:32	iehs.exe	32.62 KB		Cheval de Troie  Downloader.Small.8.R	C:\WINDOWS\System32\DLOAD.EXE	05/07/2005 17:50	DLOAD.EXE	24.5 KB		Cheval de Troie  Startpage.19.AO	C:\WINDOWS	ldea.dll	05/07/2005 17:48	tldea.dll	65 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\System32\MSEZ.EXE	05/07/2005 17:45	MSEZ.EXE	11.12 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\System32\MSEZ.EXE	05/07/2005 13:59	MSEZ.EXE	11.12 KB		Cheval de Troie  Small.P	C:\Program Files\Tjqdgn\Itmnf.exe	05/07/2005 13:58	Itmnf.exe	36.63 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\System32\MSCQ32.EXE	05/07/2005 13:57	MSCQ32.EXE	32.62 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\System32\MSCQ32.EXE	05/07/2005 13:55	MSCQ32.EXE	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\System32\MSEZ.EXE	05/07/2005 13:55	MSEZ.EXE	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\System32\MSCQ32.EXE	05/07/2005 13:54	MSCQ32.EXE	32.62 KB		Cheval de Troie  Dialer	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133267.exe	05/07/2005 13:52	A0133267.exe	26.68 KB		Cheval de Troie  Downloader.Small.8.R	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133264.exe	05/07/2005 13:52	A0133264.exe	24.5 KB		Cheval de Troie  Dialer	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0132923.exe	05/07/2005 13:52	A0132923.exe	26.68 KB		Cheval de Troie  Startpage.19.AO	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0132883.dll	05/07/2005 13:52	A0132883.dll	65 KB		Cheval de Troie  Downloader.Small.8.R	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0132632.exe	05/07/2005 13:52	A0132632.exe	24.5 KB		Cheval de Troie  Dialer	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132527.exe	05/07/2005 13:52	A0132527.exe	26.68 KB		Cheval de Troie  Downloader.Small.8.R	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132524.exe	05/07/2005 13:52	A0132524.exe	24.5 KB		Cheval de Troie  Dialer	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132510.exe	05/07/2005 13:52	A0132510.exe	26.68 KB		Cheval de Troie  Downloader.Small.8.R	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132507.exe	05/07/2005 13:52	A0132507.exe	24.5 KB		Cheval de Troie  Dialer	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132440.exe	05/07/2005 13:52	A0132440.exe	26.68 KB		Cheval de Troie  Downloader.Small.8.R	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132437.exe	05/07/2005 13:52	A0132437.exe	24.5 KB		Cheval de Troie  Collected.AF	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP413\A0130195.exe	05/07/2005 13:52	A0130195.exe	50.94 KB		Cheval de Troie  Dialer.18.AF	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP411\A0130145.exe	05/07/2005 13:52	A0130145.exe	84.89 KB		Cheval de Troie  Dialer.18.AF	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP401\A0129053.exe	05/07/2005 13:52	A0129053.exe	84.89 KB		Cheval de Troie  Dialer.17.B	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP401\A0129050.exe	05/07/2005 13:52	A0129050.exe	115.16 KB		Cheval de Troie  Downloader.Dyfica.3.R	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP372\A0120544.EXE	05/07/2005 13:52	A0120544.EXE	50.88 KB		Cheval de Troie  Downloader.Dyfica.3.R	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP367\A0120335.exe	05/07/2005 13:52	A0120335.exe	50.88 KB		Cheval de Troie  Small.P	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP343\A0113783.exe	05/07/2005 13:52	A0113783.exe	36.63 KB		Cheval de Troie  Small.P	C:\Program Files\Tjqdgn\Itmnf.exe	05/07/2005 13:52	Itmnf.exe	36.63 KB		Cheval de Troie  Dialer	C:\Program Files\WebSiteViewer\127056.exe	05/07/2005 13:52	127056.exe	26.68 KB		Cheval de Troie  Dialer.26.AF	C:\Program Files\WebSiteViewer\127056.dlr	05/07/2005 13:52	127056.dlr	79.5 KB		Virus identifié  Worm/Lovsan.A	C:\WINDOWS\system32\TFTP2124	05/07/2005 13:52	TFTP2124	4 KB		Virus identifié  Worm/Lovsan.A	C:\WINDOWS\system32\TFTP2564	05/07/2005 13:52	TFTP2564	4 KB		Cheval de Troie  Downloader.Agent.6.BN	C:\WINDOWS\system32\MTC.dll	05/07/2005 13:52	MTC.dll	84 KB		Cheval de Troie  Dropper.Small.9.BV	C:\WINDOWS\system32\2.exe	05/07/2005 13:52	2.exe	27 KB		Cheval de Troie  Startpage.20.F	C:\WINDOWS\system32\boln.dll	05/07/2005 13:52	boln.dll	39 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\apitc.exe	05/07/2005 13:52	apitc.exe	11.12 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\mscq32.exe	05/07/2005 13:52	mscq32.exe	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\msez.exe	05/07/2005 13:52	msez.exe	11.12 KB		Cheval de Troie  Downloader.Small.8.R	C:\WINDOWS\system32\dload.exe	05/07/2005 13:52	dload.exe	24.5 KB		Cheval de Troie  Startpage.19.AO	C:\WINDOWS\zipgnh.dat	05/07/2005 13:52	zipgnh.dat	65 KB		Cheval de Troie  Startpage.19.AO	C:\WINDOWS	ldea.dll	05/07/2005 13:52	tldea.dll	65 KB		Cheval de Troie  Downloader.Agent.12.D	C:\WINDOWS	nqxsp.txt	05/07/2005 13:52	tnqxsp.txt	32.62 KB		Cheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\bmykym.txt	05/07/2005 13:52	bmykym.txt	11.12 KB		Cheval de Troie  Clicker.3.AV	C:\3.exe	05/07/2005 13:52	3.exe	6.84 KB		Cheval de Troie  Dialer	C:\127056.exe	05/07/2005 13:52	127056.exe	26.68 KB		Cheval de Troie  Dropper.Small.9.BV	C:\2.exe	05/07/2005 13:52	2.exe	27 KB		Logfile of HijackThis v1.99.1Scan saved at 19:16:28, on 12/05/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\WINDOWS\System32
vsvc32.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\SOUNDMAN.EXEC:\SCANJET\PrecisionScanLT\hppwrsav.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\Olitec\USB ADSL\CnxDslTb.exeC:\Program Files\Winamp\winampa.exeC:\Program Files\Java\jre1.5.0_02\bin\jusched.exeC:\PROGRA~1\Grisoft\AVG7\avgcc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\palmOne\AlarmApp.exeC:\Program Files\palmOne\HOTSYNC.EXEC:\PROGRA~1\INCRED~1\bin\IMAPP.EXEC:\WINDOWS\system32\ipiy32.exeC:\Documents and Settings\CLERICE\Mes documents\My eBooks\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blankR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.LOX.com/index.htmlR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - Default URLSearchHook is missingO2 - BHO: Class - {5401DC8A-1A4C-4EDC-9555-CC66BBEDCDF4} - C:\WINDOWS\iesu.dllO3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll (file missing)O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [hppwrsav] C:\SCANJET\PrecisionScanLT\hppwrsav.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFLO4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe"O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInitO4 - HKLM\..\Run: [DI2] "C:\DOCUME~1\CLERICE\LOCALS~1\Temp\27.exe\27.exe"O4 - HKLM\..\Run: [Eistv] C:\Program Files\Tjqdgn\Itmnf.exeO4 - HKLM\..\Run: [FlenCPY] "C:\Program Files\Common Files\Java\flencpy.exe"O4 - HKLM\..\Run: [CnxDslTaskBar] C:\Program Files\Olitec\USB ADSL\CnxDslTb.exeO4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exeO4 - HKLM\..\Run: [Crazy Browser.exe] C:\Program Files\Crazy Browser\Crazy Browser.exeO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUPO4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exeO4 - HKLM\..\Run: [javawg.exe] C:\WINDOWS\javawg.exeO4 - HKLM\..\Run: [ipiy32.exe] C:\WINDOWS\system32\ipiy32.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /cO4 - HKCU\..\Run: [Pense-Bête] C:\Program Files\Pense-bete\Pensbet78a.exeO4 - Startup: HotSync Manager.lnk = C:\Program Files\palmOne\HOTSYNC.EXEO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO4 - Global Startup: Alarm Manager.LNK = C:\Program Files\palmOne\AlarmApp.exeO4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\binesources\WebMenuImg.htmO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cabO16 - DPF: {11311111-1551-1661-1771-000000000000} - http://www.all-find.org/mih2/web.exeO16 - DPF: {22A88341-AFCB-45F0-A856-C2BAE74F878E} (InstallX Class) - http://www.20x2p.com/09222a6a/enter.cabO16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cabO16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by12fd.bay12.hotmail.msn.com/resources/MsnPUpld.cabO16 - DPF: {527196A4-B1A3-4647-931D-37BA5AF23037} - http://www.all-find.org/mih4/web.exeO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cabO16 - DPF: {9EAC0186-5F5A-4362-B120-15C312CE012D} - http://www.awmdabest.com/cabl/2343/tb.cabO16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cabO16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game17.zylomgames.com/activex/zylomgamesplayer.cabO16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f005.mail.caramail.lycos.fr/app/uploader/FileUploader.cabO16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://labo.nomatica.com/XUpload.ocxO16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cabO16 - DPF: {FFCEABDA-C04E-7F4A-E9B6-DFA72B2F49FB} - http://213.200.210.10/dl/101/FR732_116.exeO23 - Service: Remote Procedure Call (RPC) Helper ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\msez.exe (file missing)O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeO23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exeO23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe

Utilisateur anonyme · Answer

Salut elise

Pas mal de boulot en perspective !!!

Télécharge ces logiciels (gratuits) et met les à jours(important):

aboutbuster:
http://www.malwarebytes.biz/index.php?page=downloads
Pour le mettre à jours:
clic sur "update"
puis clic sur "check for update"
Si une nouvelle version est disponible clic sur "downloaded update"

CWShredder:
http://cwshredder.net/bin/CWShredder.exe

Mais ne les utilises pas encore

_________________________________

Déconnecte toi d'internet.

Vide le cache d'Internet Explorer et supprime les cookies:

* Panneau de configuration >> Options internet >> Onglet "Général"
- Clic sur [supprimer les cookies]
- Clic sur [Supprimer les fichiers] en cochant la case "Supprimer tout le contenu hors connexion"

__________________________________

Désactive la restauration systéme.
Clic droit sur poste de travail > propriétés > onglet restauration système
puis cocher "désactiver la restauration système".
(accepte le redemarrage).

Redémarre en mode sans échec
Laisse passer l'écran du bios, puis tapote sur la touche F8.
Choisis le mode sans échec dans les options et valide avec entrée.

Rend visible les fichiers cachés et systeme
panneau de configuration > options des dossiers > onglet affichage
Cocher " afficher les fichiers et dossiers cachés "
Décocher " masquer les extentions des fichiers dont le type est connu
Décocher " masquer les fichiers protégés du système"
Valide

___________________________________

Dans le menu Demarrer>Executer >tape: Services.msc
recherche le service avec cette orthographe exacte:
Remote Procedure Call (RPC) Helper
Double clic dessus et clic sur [arreter] puis dans :
type de demarrage --> sélectionne désactivé.

Lance hijackthis et clic sur "do a system scan only"
cocher la case au début des lignes suivantes:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\dclwx.dll/sp.html#44768
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.LOX.com/index.html

R3 - Default URLSearchHook is missing
O2 - BHO: Class - {5401DC8A-1A4C-4EDC-9555-CC66BBEDCDF4} - C:\WINDOWS\iesu.dll

O4 - HKLM\..\Run: [DI2] "C:\DOCUME~1\CLERICE\LOCALS~1\Temp\27.exe\27.exe"
O4 - HKLM\..\Run: [Eistv] C:\Program Files\Tjqdgn\Itmnf.exe
O4 - HKLM\..\Run: [FlenCPY] "C:\Program Files\Common Files\Java\flencpy.exe
O4 - HKLM\..\Run: [javawg.exe] C:\WINDOWS\javawg.exe
O4 - HKLM\..\Run: [ipiy32.exe] C:\WINDOWS\system32\ipiy32.exe

O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: {11311111-1551-1661-1771-000000000000} - http://www.all-find.org/mih2/web.exe
O16 - DPF: {22A88341-AFCB-45F0-A856-C2BAE74F878E} (InstallX Class) - http://www.20x2p.com/09222a6a/enter.cab
O16 - DPF: {527196A4-B1A3-4647-931D-37BA5AF23037} - http://www.all-find.org/mih4/web.exe
O16 - DPF: {9EAC0186-5F5A-4362-B120-15C312CE012D} - http://www.awmdabest.com/cabl/2343/tb.cab
O16 - DPF: {FFCEABDA-C04E-7F4A-E9B6-DFA72B2F49FB} - http://213.200.210.10/dl/101/FR732_116.exe
O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f005.mail.caramail.lycos.fr/app/uploader/FileUploader.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://labo.nomatica.com/XUpload.ocx

valider avec [fix checked]

____________________________________

Rechercher et supprimer si présent:

Dans le cas ou tu utiliserais la fonction Rechercher:
Assure toi que dans:
Tous les fichiers et tous les dossiers >> Options avancées
• Rechercher dans les dossiers systemes <- DOIT ETRE COCHE !
• Rechercher dans les fichiers et les dossiers cachés <- DOIT ETRE COCHE !
• Rechercher dans les sous-dossiers <- DOIT ETRE COCHE !

Supprime:

C:\WINDOWS\javawg.exe
C:\WINDOWS\iesu.dll
C:\WINDOWS\system32\dclwx.dll
C:\WINDOWS\system32\ipiy32.exe
C:\WINDOWS\system32\msez.exe
C:\Documents and Settings\CLERICE\Local Settings\Temp\27.exe
C:\Program Files\Common Files\Java\flencpy.exe
C:\Program Files\Tjqdgn

Ensuite, tres important

Supprimer les fichiers temporaires:

* C:\Documents and Settings\CLERICE\Local Settings\Temp
* C:\Documents and Settings\tous les autres comptes\Local Settings\Temp
* C:\Temp
* C:\Windows\Temp
vider tout le contenu des dossiers en gras.

Le contenu du dossier prefetch:

* C:\WINDOWS\Prefetch <= sauf le fichier layout.ini

* Ne pas oublier de vider la corbeille !

_____________________________________

Une fois fait, lance Aboutbuster (clic sur start)

puis lance cwshredder (clic sur fix)
___________________________________

Redemarre normalement et relance Aboutbuster

reposte un hijack pour vérifier l'évolution.

Ne pas oublier après les manips de recocher" masquer les fichiers protégés du système" dans les options des dossiers.

a+

elise · Answer

Merci beaucoup pour tes conseilsJ'imprime le tout et je fais tout cela demain matin de bonne heure.Bonne soirée à tout le monde et merci à tout le mondeElise

Utilisateur anonyme · Answer

okà demain

elise · Answer

Salut tout le monde,J’ai donc fait toutes les manipulations indiquées mais j’ai eu quelques soucis que je vais t’indiquer :D’abord, impossible de trouver ma fonction « executer », donc je n’ai pas pu faire ceci :Dans le menu Demarrer>Executer >tape: Services.msc recherche le service avec cette orthographe exacte: Remote Procedure Call (RPC) Helper Double clic dessus et clic sur [arreter] puis dans : type de demarrage --> sélectionne désactivé.Après il y a des fichiers que je n’ai pas trouvés qui sont les suivants : C:\WINDOWS\iesu.dll C:\WINDOWS\system32\msez.exe C:\Documents and Settings\CLERICE\Local Settings\Temp\27.exe C:\Program Files\Common Files\Java\flencpy.exe Enfin quand je relance aboutbuster, il me dit qu’il y a un fichier qu’il ne peut supprimer (des clefs de registre je crois). Il me propose de se relancer au démarrage du PC, j’accepte, il refait une analyse mais ne peut toujours pas les supprimer.A part ca tout va bien si je peux dire………..Ci joint mes logs :Logfile of HijackThis v1.99.1Scan saved at 07:52:57, on 13/05/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\WINDOWS\System32
vsvc32.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\SOUNDMAN.EXEC:\SCANJET\PrecisionScanLT\hppwrsav.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\Olitec\USB ADSL\CnxDslTb.exeC:\Program Files\Winamp\winampa.exeC:\Program Files\Java\jre1.5.0_02\bin\jusched.exeC:\PROGRA~1\Grisoft\AVG7\avgcc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\palmOne\AlarmApp.exeC:\Program Files\palmOne\HOTSYNC.EXEC:\PROGRA~1\INCRED~1\bin\IMAPP.EXEC:\Documents and Settings\CLERICE\Mes documents\My eBooks\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll (file missing)O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [hppwrsav] C:\SCANJET\PrecisionScanLT\hppwrsav.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFLO4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe"O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInitO4 - HKLM\..\Run: [CnxDslTaskBar] C:\Program Files\Olitec\USB ADSL\CnxDslTb.exeO4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exeO4 - HKLM\..\Run: [Crazy Browser.exe] C:\Program Files\Crazy Browser\Crazy Browser.exeO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUPO4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /cO4 - HKCU\..\Run: [Pense-Bête] C:\Program Files\Pense-bete\Pensbet78a.exeO4 - Startup: HotSync Manager.lnk = C:\Program Files\palmOne\HOTSYNC.EXEO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO4 - Global Startup: Alarm Manager.LNK = C:\Program Files\palmOne\AlarmApp.exeO4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exeO8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\binesources\WebMenuImg.htmO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cabO16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by12fd.bay12.hotmail.msn.com/resources/MsnPUpld.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cabO16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cabO16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game17.zylomgames.com/activex/zylomgamesplayer.cabO16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cabO23 - Service: Remote Procedure Call (RPC) Helper ( 11Fßä #·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\msez.exe (file missing)O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeO23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exeO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exeO23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exeCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\ipzc.exe	13/05/2005 08:21:21	ipzc.exe	11.68 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\sysjj.exe	13/05/2005 08:21:21	sysjj.exe	11.71 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\addrd.exe	13/05/2005 08:21:21	addrd.exe	11.91 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\iebt.exe	13/05/2005 08:21:21	iebt.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\msyg32.exe	13/05/2005 08:21:21	msyg32.exe	12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32
etgo32.exe	13/05/2005 08:21:21	netgo32.exe	11.29 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\msoq32.exe	13/05/2005 08:21:21	msoq32.exe	11.29 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\crol32.exe	13/05/2005 08:21:21	crol32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS
etjb32.exe	13/05/2005 08:21:21	netjb32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\msfk32.exe	13/05/2005 08:21:21	msfk32.exe	11.8 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\msdt32.exe	13/05/2005 08:21:21	msdt32.exe	11.74 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS
tts32.exe	13/05/2005 08:21:21	ntts32.exe	11.75 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\addwy32.exe	13/05/2005 08:21:21	addwy32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\appfp.exe	13/05/2005 08:21:21	appfp.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\syspk.exe	13/05/2005 08:21:21	syspk.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\atlqb.exe	05/12/2005 19:35	atlqb.exe	11.8 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\d3sc32.exe	05/12/2005 19:35	d3sc32.exe	11.54 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\syscv32.exe	05/12/2005 19:35	syscv32.exe	11.8 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\mfcay32.exe	05/12/2005 19:35	mfcay32.exe	11.49 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\apiil32.exe	05/12/2005 19:35	apiil32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\winwx32.exe	05/12/2005 19:35	winwx32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\atlei32.exe	05/12/2005 19:35	atlei32.exe	11.82 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\iexp32.exe	05/12/2005 19:35	iexp32.exe	12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\ipqu32.exe	05/12/2005 19:35	ipqu32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\d3gp32.exe	05/12/2005 19:35	d3gp32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\appdz32.exe	05/12/2005 12:10	appdz32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\msny.exe	05/12/2005 11:39	msny.exe	11.74 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\winha32.exe	05/12/2005 11:39	winha32.exe	11.34 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\sysed32.exe	05/12/2005 11:39	sysed32.exe	11.5 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\crfq.exe	05/12/2005 11:39	crfq.exe	11.37 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\systn.exe	05/12/2005 11:39	systn.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\atlqr32.exe	05/12/2005 11:39	atlqr32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\atlkl32.exe	05/12/2005 11:39	atlkl32.exe	11.3 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\apixn32.exe	05/12/2005 11:39	apixn32.exe	11.79 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\apicw.exe	05/12/2005 11:39	apicw.exe	11.73 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\ipeb32.exe	05/12/2005 11:39	ipeb32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\ipoz32.exe	05/12/2005 11:39	ipoz32.exe	11.54 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS
txq.exe	05/12/2005 11:39	ntxq.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS
etgl32.exe	05/12/2005 11:39	netgl32.exe	11.57 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\d3hr32.exe	05/12/2005 08:59	d3hr32.exe	11.32 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\iekv.exe	05/12/2005 08:59	iekv.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\sdkla32.exe	05/12/2005 08:59	sdkla32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS
ettc.exe	05/12/2005 08:59	nettc.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sdkzj.exe	05/12/2005 08:59	sdkzj.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS
etqs32.exe	05/12/2005 08:59	netqs32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sdkpt.exe	05/12/2005 08:59	sdkpt.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\appfd.exe	05/11/2005 23:07	appfd.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\addby32.exe	05/11/2005 23:07	addby32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32
tuh.exe	05/11/2005 23:07	ntuh.exe	11.76 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\d3ae32.exe	05/11/2005 23:07	d3ae32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32
etjg32.exe	05/11/2005 23:07	netjg32.exe	11.33 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\winvx32.exe	05/11/2005 23:07	winvx32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\iezx32.exe	05/11/2005 23:07	iezx32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\addyu.exe	05/11/2005 23:07	addyu.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\iphm32.exe	05/11/2005 23:07	iphm32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\apimp.exe	05/11/2005 23:07	apimp.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\crkg32.exe	05/11/2005 23:07	crkg32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\mfcuy32.exe	05/11/2005 23:07	mfcuy32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\javaro.exe	05/11/2005 23:07	javaro.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\appzv.exe	05/11/2005 23:07	appzv.exe	11.95 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\crqf.exe	05/11/2005 23:07	crqf.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\msxd32.exe	05/11/2005 23:07	msxd32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sysnh.exe	05/11/2005 23:07	sysnh.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sdkbf.exe	05/11/2005 23:07	sdkbf.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfcja.exe	05/11/2005 23:07	mfcja.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sysye32.exe	05/11/2005 23:07	sysye32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\addbk.exe	05/11/2005 23:07	addbk.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfcih32.exe	05/11/2005 18:02	mfcih32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\System32\wineq32.exe	05/11/2005 17:28	wineq32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfcxo.exe	05/11/2005 17:27	mfcxo.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\apiaz32.exe	05/11/2005 17:26	apiaz32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\javaso.exe	05/11/2005 17:26	javaso.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\winyf32.exe	05/11/2005 17:26	winyf32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\mfcvc32.exe	05/11/2005 14:28	mfcvc32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\sysoq32.exe	05/11/2005 14:28	sysoq32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32
tzb.exe	05/11/2005 14:28	ntzb.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\d3qx32.exe	05/11/2005 14:28	d3qx32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\msuq32.exe	05/11/2005 14:28	msuq32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\sdklq32.exe	05/11/2005 14:28	sdklq32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\apimx.exe	05/11/2005 14:28	apimx.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\apptz32.exe	05/11/2005 14:28	apptz32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\ieox32.exe	05/11/2005 14:28	ieox32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\d3gd.exe	05/11/2005 14:28	d3gd.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\mfcav32.exe	05/11/2005 14:28	mfcav32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\mfceg.exe	05/11/2005 14:28	mfceg.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\appbl32.exe	05/11/2005 14:28	appbl32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\syskh.exe	05/11/2005 14:28	syskh.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS
ethm32.exe	05/11/2005 14:28	nethm32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\atlrm32.exe	05/11/2005 14:28	atlrm32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sdkze.exe	05/11/2005 14:28	sdkze.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\crlo32.exe	05/11/2005 12:26	crlo32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133980.exe	05/11/2005 08:32	A0133980.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133979.exe	05/11/2005 08:32	A0133979.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133978.exe	05/11/2005 08:32	A0133978.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133977.exe	05/11/2005 08:32	A0133977.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133976.exe	05/11/2005 08:32	A0133976.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133975.exe	05/11/2005 08:32	A0133975.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133974.exe	05/11/2005 08:32	A0133974.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133973.exe	05/11/2005 08:32	A0133973.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133972.exe	05/11/2005 08:32	A0133972.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133971.exe	05/11/2005 08:32	A0133971.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133970.exe	05/11/2005 08:32	A0133970.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133969.exe	05/11/2005 08:32	A0133969.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133968.exe	05/11/2005 08:32	A0133968.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133967.exe	05/11/2005 08:32	A0133967.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133966.exe	05/11/2005 08:32	A0133966.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133965.exe	05/11/2005 08:32	A0133965.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133964.exe	05/11/2005 08:32	A0133964.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133963.exe	05/11/2005 08:32	A0133963.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133962.exe	05/11/2005 08:32	A0133962.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133961.exe	05/11/2005 08:32	A0133961.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133960.exe	05/11/2005 08:32	A0133960.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133959.exe	05/11/2005 08:32	A0133959.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133958.exe	05/11/2005 08:32	A0133958.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133957.exe	05/11/2005 08:32	A0133957.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133956.exe	05/11/2005 08:32	A0133956.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133955.exe	05/11/2005 08:32	A0133955.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133954.exe	05/11/2005 08:32	A0133954.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133953.exe	05/11/2005 08:32	A0133953.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133952.exe	05/11/2005 08:32	A0133952.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133951.exe	05/11/2005 08:32	A0133951.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133950.exe	05/11/2005 08:32	A0133950.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133949.exe	05/11/2005 08:32	A0133949.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133948.exe	05/11/2005 08:32	A0133948.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133947.exe	05/11/2005 08:32	A0133947.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133946.exe	05/11/2005 08:32	A0133946.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133945.exe	05/11/2005 08:32	A0133945.exe	32.62 KBCheval de Troie  Dropper.Small.18.AA	C:\WINDOWS\Temp\ft28s.exe	05/11/2005 08:32	ft28s.exe	10 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32
tbi.exe	05/11/2005 08:32	ntbi.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\d3ho32.exe	05/11/2005 08:32	d3ho32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\sysgw32.exe	05/11/2005 08:32	sysgw32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32
etjl.exe	05/11/2005 08:32	netjl.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32
tsb32.exe	05/11/2005 08:32	ntsb32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\apits32.exe	05/11/2005 08:32	apits32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\apibo32.exe	05/11/2005 08:32	apibo32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\javapg.exe	05/11/2005 08:32	javapg.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\atljh32.exe	05/11/2005 08:32	atljh32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\ipbk.exe	05/11/2005 08:32	ipbk.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\atlzr.exe	05/11/2005 08:32	atlzr.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\atlin.exe	05/11/2005 08:32	atlin.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\atlnf.exe	05/11/2005 08:32	atlnf.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS
etix.exe	05/11/2005 08:32	netix.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\apifn.exe	05/11/2005 08:32	apifn.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\d3ic32.exe	05/11/2005 08:32	d3ic32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\apptt.exe	05/11/2005 08:32	apptt.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\crsj.exe	05/11/2005 08:32	crsj.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\mfcsk.exe	05/11/2005 08:32	mfcsk.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\mfcrx32.exe	05/11/2005 08:32	mfcrx32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sdkhy.exe	05/11/2005 08:32	sdkhy.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\adddt32.exe	05/11/2005 08:32	adddt32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sdkyi32.exe	05/11/2005 08:32	sdkyi32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sdkgw32.exe	05/11/2005 08:32	sdkgw32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133745.exe	05/10/2005 09:43	A0133745.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133744.exe	05/10/2005 09:43	A0133744.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133658.exe	05/10/2005 09:43	A0133658.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133656.exe	05/10/2005 09:43	A0133656.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133655.exe	05/10/2005 09:43	A0133655.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133654.exe	05/10/2005 09:43	A0133654.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133653.exe	05/10/2005 09:43	A0133653.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133652.exe	05/10/2005 09:43	A0133652.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133651.exe	05/10/2005 09:43	A0133651.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133649.exe	05/10/2005 09:43	A0133649.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133648.exe	05/10/2005 09:43	A0133648.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133647.exe	05/10/2005 09:43	A0133647.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133646.exe	05/10/2005 09:43	A0133646.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133644.exe	05/10/2005 09:43	A0133644.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133643.exe	05/10/2005 09:43	A0133643.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133642.exe	05/10/2005 09:43	A0133642.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133640.exe	05/10/2005 09:43	A0133640.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133639.exe	05/10/2005 09:43	A0133639.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133638.exe	05/10/2005 09:43	A0133638.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133636.exe	05/10/2005 09:43	A0133636.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133635.exe	05/10/2005 09:43	A0133635.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133633.exe	05/10/2005 09:43	A0133633.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133632.exe	05/10/2005 09:43	A0133632.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133631.exe	05/10/2005 09:43	A0133631.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133629.exe	05/10/2005 09:43	A0133629.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133628.exe	05/10/2005 09:43	A0133628.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133627.exe	05/10/2005 09:43	A0133627.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133626.exe	05/10/2005 09:43	A0133626.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133624.exe	05/10/2005 09:43	A0133624.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133623.exe	05/10/2005 09:43	A0133623.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133621.exe	05/10/2005 09:43	A0133621.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133620.exe	05/10/2005 09:43	A0133620.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133618.exe	05/10/2005 09:43	A0133618.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133616.exe	05/10/2005 09:43	A0133616.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133615.exe	05/10/2005 09:43	A0133615.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133614.exe	05/10/2005 09:43	A0133614.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP431\A0133612.exe	05/10/2005 09:43	A0133612.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\mfcgz.exe	05/10/2005 09:43	mfcgz.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\iesx32.exe	05/10/2005 09:43	iesx32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\crsr.exe	05/10/2005 09:43	crsr.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\addze.exe	05/10/2005 09:43	addze.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\msgf.exe	05/10/2005 09:43	msgf.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\iecp.exe	05/10/2005 09:43	iecp.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\sdkut32.exe	05/10/2005 09:43	sdkut32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\iemh32.exe	05/10/2005 09:43	iemh32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\apiqo.exe	05/10/2005 09:43	apiqo.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32
tkb.exe	05/10/2005 09:43	ntkb.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\ipob.exe	05/10/2005 09:43	ipob.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\mski32.exe	05/10/2005 09:43	mski32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\iemk.exe	05/10/2005 09:43	iemk.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\sdkjz32.exe	05/10/2005 09:43	sdkjz32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\javaqz.exe	05/10/2005 09:43	javaqz.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\mfceb32.exe	05/10/2005 09:43	mfceb32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\appek.exe	05/10/2005 09:43	appek.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\iehi.exe	05/10/2005 09:43	iehi.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfcyg.exe	05/10/2005 09:43	mfcyg.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\addri.exe	05/10/2005 09:43	addri.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\crtn32.exe	05/10/2005 09:43	crtn32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\appni.exe	05/10/2005 09:43	appni.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS
twz32.exe	05/10/2005 09:43	ntwz32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\atlok.exe	05/10/2005 09:43	atlok.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfcly32.exe	05/10/2005 09:43	mfcly32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\crpf32.exe	05/10/2005 09:43	crpf32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\applk32.exe	05/10/2005 09:43	applk32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addpk32.exe	05/10/2005 09:43	addpk32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addqt.exe	05/10/2005 09:43	addqt.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS
tnt32.exe	05/10/2005 09:43	ntnt32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\atlki.exe	05/10/2005 09:43	atlki.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\winoq32.exe	05/10/2005 09:43	winoq32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\iegk.exe	05/10/2005 09:43	iegk.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\javang.exe	05/10/2005 09:43	javang.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\apizd.exe	05/10/2005 09:43	apizd.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\d3fu32.exe	05/10/2005 09:43	d3fu32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\d3ie32.exe	05/09/2005 10:59	d3ie32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\ipww.exe	05/09/2005 10:59	ipww.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\addvx32.exe	05/09/2005 10:59	addvx32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\apiec32.exe	05/09/2005 10:59	apiec32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\msrl.exe	05/09/2005 10:59	msrl.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\msso.exe	05/09/2005 10:59	msso.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\apphn32.exe	05/09/2005 10:59	apphn32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addpg32.exe	05/09/2005 10:59	addpg32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\ipuo.exe	05/09/2005 10:59	ipuo.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\crdt.exe	05/09/2005 10:59	crdt.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\atlyc32.exe	05/09/2005 10:59	atlyc32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133448.exe	05/09/2005 08:28	A0133448.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133447.exe	05/09/2005 08:28	A0133447.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133446.exe	05/09/2005 08:28	A0133446.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133444.exe	05/09/2005 08:28	A0133444.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133443.exe	05/09/2005 08:28	A0133443.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133442.exe	05/09/2005 08:28	A0133442.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133440.exe	05/09/2005 08:28	A0133440.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133438.exe	05/09/2005 08:28	A0133438.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP428\A0133436.exe	05/09/2005 08:28	A0133436.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\ipvl32.exe	05/09/2005 08:28	ipvl32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\appwr32.exe	05/09/2005 08:28	appwr32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32
tci.exe	05/09/2005 08:28	ntci.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32
etuc.exe	05/09/2005 08:28	netuc.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\javadh.exe	05/09/2005 08:28	javadh.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\msxl.exe	05/09/2005 08:28	msxl.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\javaui32.exe	05/09/2005 08:28	javaui32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\apiof32.exe	05/09/2005 08:28	apiof32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\apiig32.exe	05/09/2005 08:28	apiig32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\d3xl.exe	05/09/2005 08:28	d3xl.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\crrm.exe	05/09/2005 08:28	crrm.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\ipfi32.exe	05/09/2005 08:28	ipfi32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32
etkz32.exe	05/09/2005 08:28	netkz32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\mstz32.exe	05/09/2005 08:28	mstz32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\atlrh.exe	05/09/2005 08:28	atlrh.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\d3zf.exe	05/09/2005 08:28	d3zf.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\appkr32.exe	05/09/2005 08:28	appkr32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\javark.exe	05/09/2005 08:28	javark.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\sdkia.exe	05/09/2005 08:28	sdkia.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\syshr32.exe	05/09/2005 08:28	syshr32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32
etnv32.exe	05/09/2005 08:28	netnv32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32
tss32.exe	05/09/2005 08:28	ntss32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\iesc.exe	05/09/2005 08:28	iesc.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\ieiw.exe	05/09/2005 08:28	ieiw.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\ipuh32.exe	05/09/2005 08:28	ipuh32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\appsd.exe	05/09/2005 08:28	appsd.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\msuc.exe	05/09/2005 08:28	msuc.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\apild.exe	05/09/2005 08:28	apild.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\wines.exe	05/09/2005 08:28	wines.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\d3tt32.exe	05/09/2005 08:28	d3tt32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\mfceq32.exe	05/09/2005 08:28	mfceq32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\atlwu32.exe	05/09/2005 08:28	atlwu32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\crhx.exe	05/09/2005 08:28	crhx.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addlx.exe	05/09/2005 08:28	addlx.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\addqd32.exe	05/09/2005 08:28	addqd32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addgr.exe	05/09/2005 08:28	addgr.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\d3jh.exe	05/09/2005 08:28	d3jh.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addje.exe	05/09/2005 08:28	addje.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\ipsw32.exe	05/09/2005 08:28	ipsw32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\d3lq32.exe	05/09/2005 08:28	d3lq32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\msdg32.exe	05/09/2005 08:28	msdg32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\winqa32.exe	05/09/2005 08:28	winqa32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\winge.exe	05/09/2005 08:28	winge.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\apptk.exe	05/09/2005 08:28	apptk.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfchn32.exe	05/09/2005 08:28	mfchn32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addvq.exe	05/09/2005 08:28	addvq.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\d3tm32.exe	05/09/2005 08:28	d3tm32.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addjg32.exe	05/08/2005 23:10	addjg32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\System32
etix.exe	05/08/2005 23:10	netix.exe	11.12 KBVirus identifié  I-Worm/Netsky.D	your_letter.pif	05/08/2005 22:57	your_letter.pif	17 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\System32\ieul32.exe	05/08/2005 22:18	ieul32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfctc.exe	05/08/2005 22:18	mfctc.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\System32\apppb.exe	05/08/2005 22:16	apppb.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS
tos32.exe	05/08/2005 22:16	ntos32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\System32\mfckw32.exe	05/08/2005 22:04	mfckw32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\javaie.exe	05/08/2005 22:04	javaie.exe	11.12 KBCheval de Troie  Downloader.Small.8.R	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133356.EXE	05/08/2005 08:25	A0133356.EXE	24.5 KBCheval de Troie  Startpage.19.AO	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133353.dll	05/08/2005 08:25	A0133353.dll	65 KBCheval de Troie  Dropper.Small.9.BV	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133345.EXE	05/08/2005 08:25	A0133345.EXE	27 KBCheval de Troie  Downloader.Agent.6.BN	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133308.dll	05/08/2005 08:25	A0133308.dll	84 KBCheval de Troie  Downloader.Agent.11.Q	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133306.exe	05/08/2005 08:25	A0133306.exe	11.12 KBCheval de Troie  Clicker.3.AV	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133304.exe	05/08/2005 08:25	A0133304.exe	6.84 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\mfchx32.exe	05/08/2005 08:25	mfchx32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\mfcdw32.exe	05/08/2005 08:25	mfcdw32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\ietx32.exe	05/08/2005 08:25	ietx32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\sdkem32.exe	05/08/2005 08:25	sdkem32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\addds32.exe	05/08/2005 08:25	addds32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\javahu.exe	05/08/2005 08:25	javahu.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\ieef.exe	05/08/2005 08:25	ieef.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfcso.exe	05/08/2005 08:25	mfcso.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\atlgd.exe	05/08/2005 08:25	atlgd.exe	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\atlyo.exe	05/08/2005 08:25	atlyo.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\sdkxf32.exe	05/08/2005 08:25	sdkxf32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\creb.exe	05/08/2005 08:25	creb.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\winfl32.exe	05/08/2005 08:25	winfl32.exe	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\mfcfa.exe	05/08/2005 08:25	mfcfa.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\crhb.exe	05/07/2005 23:56	crhb.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\addgs32.exe	05/07/2005 23:56	addgs32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\winho.exe	05/07/2005 22:47	winho.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\System32
etgf32.exe	05/07/2005 22:46	netgf32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\System32\mfclx32.exe	05/07/2005 22:15	mfclx32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\javako.exe	05/07/2005 22:15	javako.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\addso.exe	05/07/2005 22:04	addso.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\addwz.exe	05/07/2005 22:04	addwz.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\System32\crtn.exe	05/07/2005 21:45	crtn.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\System32\addrw32.exe	05/07/2005 21:45	addrw32.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\iefo32.exe	05/07/2005 19:36	iefo32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\System32\mfcee.exe	05/07/2005 19:36	mfcee.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\iehs.exe	05/07/2005 18:32	iehs.exe	32.62 KBCheval de Troie  Downloader.Small.8.R	C:\WINDOWS\System32\DLOAD.EXE	05/07/2005 17:50	DLOAD.EXE	24.5 KBCheval de Troie  Startpage.19.AO	C:\WINDOWS	ldea.dll	05/07/2005 17:48	tldea.dll	65 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\System32\MSEZ.EXE	05/07/2005 17:45	MSEZ.EXE	11.12 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\System32\MSEZ.EXE	05/07/2005 13:59	MSEZ.EXE	11.12 KBCheval de Troie  Small.P	C:\Program Files\Tjqdgn\Itmnf.exe	05/07/2005 13:58	Itmnf.exe	36.63 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\System32\MSCQ32.EXE	05/07/2005 13:57	MSCQ32.EXE	32.62 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\System32\MSCQ32.EXE	05/07/2005 13:55	MSCQ32.EXE	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\System32\MSEZ.EXE	05/07/2005 13:55	MSEZ.EXE	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\System32\MSCQ32.EXE	05/07/2005 13:54	MSCQ32.EXE	32.62 KBCheval de Troie  Dialer	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133267.exe	05/07/2005 13:52	A0133267.exe	26.68 KBCheval de Troie  Downloader.Small.8.R	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0133264.exe	05/07/2005 13:52	A0133264.exe	24.5 KBCheval de Troie  Dialer	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0132923.exe	05/07/2005 13:52	A0132923.exe	26.68 KBCheval de Troie  Startpage.19.AO	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0132883.dll	05/07/2005 13:52	A0132883.dll	65 KBCheval de Troie  Downloader.Small.8.R	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP426\A0132632.exe	05/07/2005 13:52	A0132632.exe	24.5 KBCheval de Troie  Dialer	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132527.exe	05/07/2005 13:52	A0132527.exe	26.68 KBCheval de Troie  Downloader.Small.8.R	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132524.exe	05/07/2005 13:52	A0132524.exe	24.5 KBCheval de Troie  Dialer	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132510.exe	05/07/2005 13:52	A0132510.exe	26.68 KBCheval de Troie  Downloader.Small.8.R	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132507.exe	05/07/2005 13:52	A0132507.exe	24.5 KBCheval de Troie  Dialer	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132440.exe	05/07/2005 13:52	A0132440.exe	26.68 KBCheval de Troie  Downloader.Small.8.R	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP425\A0132437.exe	05/07/2005 13:52	A0132437.exe	24.5 KBCheval de Troie  Collected.AF	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP413\A0130195.exe	05/07/2005 13:52	A0130195.exe	50.94 KBCheval de Troie  Dialer.18.AF	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP411\A0130145.exe	05/07/2005 13:52	A0130145.exe	84.89 KBCheval de Troie  Dialer.18.AF	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP401\A0129053.exe	05/07/2005 13:52	A0129053.exe	84.89 KBCheval de Troie  Dialer.17.B	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP401\A0129050.exe	05/07/2005 13:52	A0129050.exe	115.16 KBCheval de Troie  Downloader.Dyfica.3.R	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP372\A0120544.EXE	05/07/2005 13:52	A0120544.EXE	50.88 KBCheval de Troie  Downloader.Dyfica.3.R	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP367\A0120335.exe	05/07/2005 13:52	A0120335.exe	50.88 KBCheval de Troie  Small.P	C:\System Volume Information\_restore{DA45E9D2-979A-4409-A078-8670236F8529}\RP343\A0113783.exe	05/07/2005 13:52	A0113783.exe	36.63 KBCheval de Troie  Small.P	C:\Program Files\Tjqdgn\Itmnf.exe	05/07/2005 13:52	Itmnf.exe	36.63 KBCheval de Troie  Dialer	C:\Program Files\WebSiteViewer\127056.exe	05/07/2005 13:52	127056.exe	26.68 KBCheval de Troie  Dialer.26.AF	C:\Program Files\WebSiteViewer\127056.dlr	05/07/2005 13:52	127056.dlr	79.5 KBVirus identifié  Worm/Lovsan.A	C:\WINDOWS\system32\TFTP2124	05/07/2005 13:52	TFTP2124	4 KBVirus identifié  Worm/Lovsan.A	C:\WINDOWS\system32\TFTP2564	05/07/2005 13:52	TFTP2564	4 KBCheval de Troie  Downloader.Agent.6.BN	C:\WINDOWS\system32\MTC.dll	05/07/2005 13:52	MTC.dll	84 KBCheval de Troie  Dropper.Small.9.BV	C:\WINDOWS\system32\2.exe	05/07/2005 13:52	2.exe	27 KBCheval de Troie  Startpage.20.F	C:\WINDOWS\system32\boln.dll	05/07/2005 13:52	boln.dll	39 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\apitc.exe	05/07/2005 13:52	apitc.exe	11.12 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS\system32\mscq32.exe	05/07/2005 13:52	mscq32.exe	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\system32\msez.exe	05/07/2005 13:52	msez.exe	11.12 KBCheval de Troie  Downloader.Small.8.R	C:\WINDOWS\system32\dload.exe	05/07/2005 13:52	dload.exe	24.5 KBCheval de Troie  Startpage.19.AO	C:\WINDOWS\zipgnh.dat	05/07/2005 13:52	zipgnh.dat	65 KBCheval de Troie  Startpage.19.AO	C:\WINDOWS	ldea.dll	05/07/2005 13:52	tldea.dll	65 KBCheval de Troie  Downloader.Agent.12.D	C:\WINDOWS	nqxsp.txt	05/07/2005 13:52	tnqxsp.txt	32.62 KBCheval de Troie  Downloader.Agent.11.Q	C:\WINDOWS\bmykym.txt	05/07/2005 13:52	bmykym.txt	11.12 KBCheval de Troie  Clicker.3.AV	C:\3.exe	05/07/2005 13:52	3.exe	6.84 KBCheval de Troie  Dialer	C:\127056.exe	05/07/2005 13:52	127056.exe	26.68 KBCheval de Troie  Dropper.Small.9.BV	C:\2.exe	05/07/2005 13:52	2.exe	27 KBVoilà, j’attend de vos nouvelles avec impatience.Merci beaucoup pour votre aideELise

elise · Answer

Heu, Princesse cherche preu chevalier pour réparer le fer de son cheval.                                                       ou si vous préferezY a t-il quelqu'un pour m'aider à continuer à désinfecter mon PC, s'il vous plait?MERCI BEAUCOUPElise

theoelliot · Answer

Allo?

theoelliot · Answer

Bon ben je crois que les sauveteurs sont partis en mer à la recherche d'autres hommes et femmes à la dérive...Tant pisAmitiés quand mêmeElise

Utilisateur anonyme · Answer

re,dis moi le scan de ton antivirus , il te detecte tout ca??si oui,clik droit sur poste de travail<propriete onglet restau systeme, coche la case desactiver les poitns de restauration, ferme puis decoche la case, et remet un rapport de ton antivirus stpa+

theoelliot · Answer

Ben peut être que je fais mal mon log et que je met toutes les analyses depuis le début non? Hein?Rassures moi.........Elise

theoelliot · Answer

J'ai fait ce que tu m'as dis et je suis en train de repasser mon anti virus.--Pour l'instant il n'a rien detecté alors que d'habitude il m'en met une tartine à peine démarré...J'attend, vais chercher les gars et je post le résultat de l'analysePendant que je suis là,Le ménage ne se fait pas................

Utilisateur anonyme · Answer

ok pas de probleme...a bientot

theoelliot · Answer

L'analyse de mon antivirus m'indique que je n'ai aucun virus sur le PC.Je ne laisse pas encore éclater ma joie, préférant attendre un petit peu (pessimiste que je suis...).Quoiqu'il en soit je tiens à vous remercier très vivement pour vos conseils, le temps que vous m'accordez.....MERCI A VOUS TOUSElise

Utilisateur anonyme · Answer

De rien,et tiens moi au courant car si facile reste perplexe, chez moi aussi lolsi tu n as plus d alertes d ici quelques jours, confirme moi stpa+

Utilisateur anonyme · Answer

Salut elisedsl, je ne t'avais pas oublié, mais j'avais des obligations...si ton av ne detecte plus rien, c'est bon signe.Est ce que tu as réactive la restauration systeme ?Est ce que tu as de nouveau acces a la commande EXECUTER du menu demarrer ?a+

Utilisateur anonyme · Answer

ok merci moe, et aussi remet une page de demarrage !! a+

theoelliot · Answer

Re mes sauveteurs,Donc pour vous répondre :- oui ma restauration système est activée.-non je n'ai toujours pas ma commande "execute" au menu (tiens voilà une bonne idée de post, mais avant je vais aller voir dans la recherche du forum....)- je croise les doigts très fort...........(aie).Encore merci à vous deux pour tout et je vous tiens au courant (un si tout marche bien je vous le dis par respect pour tout ce que vous avez fait pour moi, deux s'il revient vous m'entendrez pleurez ici bien assez fort pour savoir que c'est moi.....)MerciElise

theoelliot · Answer

J'oubliai,Qu'est ce que tu veux dire par remettre une page de démarrage???????

Utilisateur anonyme · Answer

salut élisepour la commande executer:ouvre ton gestionnaire des taches: ctrl+alt+supprclic sur fichier puis sur : nouvelle tachetape regedit et validel'éditeur du registre devrait s'ouvrirDéplace toi sur cette clé à l'aide du signe +:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\clic sur Explorer pour le mettre en surbrillance.dans la fenetre de droite dis moi si tu vois une entrée nommé: NoRunni touche pas pour l'instant.a+

theoelliot · Answer

Yo ManNan je ne vois pas NoRun......C'est grave docteur?Elise

Utilisateur anonyme · Answer

ouvre le bloc note et fais un copier coller de ce qui est en gras ci-dessous: REGEDIT4[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]"NoRun"=dword:00000000Puis enregistrer sous et dans: Nom du fichier, met    executer.reg Type : selectionne "tous les fichiers" clic sur enregistrer ensuite double clic sur executer.reg, accepte de fusionner, le changement devrait etre immédiat, sinon redemarre le pc et dis moi si executer est revenua+

himad · Answer

le virus click me me tue!  voici mon hijackthis! aide moi sil te plé. merci d'avance.      Scan saved at 21:37:55, on 05/13/2005Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeC:\Program Files\Norton Internet Security\NISUM.EXEC:\WINDOWS\Explorer.EXEC:\Program Files\Norton Internet Security\ccPxySvc.exeC:\Program Files\sony\giga pocket\shwserv.exeC:\Program Files\Norton AntiVirus
avapsvc.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\UStorSrv.exeC:\Program Files\sony\giga pocket\RM_SV.exeC:\WINDOWS\System32\ezSP_Px.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\drag'n drop cd+dvd\BinFiles\DragDrop.exeC:\PROGRA~1\TWINTO~1\MouseElf.EXEC:\WINDOWS\AGRSMMSG.exeC:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exeC:\Program Files\Fichiers communs\Symantec Shared\ccApp.exeC:\Program Files\TwinTouch LuxeMate\EMouse.exeC:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exeC:\WINDOWS\System32\wuauclt.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exeC:\Program Files\LightSurf\Common\IconMgr.exeC:\Program Files\LightSurf\Colorific\hgcctl95.exeC:\Program Files\sony\usbsircs\USBsircs.exeC:\Program Files\sony\giga pocket\ReserveModule.exeC:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exeC:\Program Files\LightSurf\Color Indicator\TICIcon.exeC:\Program Files\sony\giga pocket\gps.exeC:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exeC:\Program Files\Messenger\msmsgs.exeC:\Program Files\MSN Messenger\msnmsgr.exeD:\Mes docs\Utilitaires\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.neuf.frR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blankR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blankR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)R3 - URLSearchHook: (no name) - _{00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)O2 - BHO: &EliteBar - {28CAEFF3-0F18-4036-B504-51D73BD81ABC} - C:\WINDOWS\EliteToolBar\EliteToolBar version 59.dllO2 - BHO: &EliteSideBar - {ED103D9F-3070-4580-AB1E-E5C179C1AE41} - C:\WINDOWS\EliteSideBar\EliteSideBar 08.dllO3 - Toolbar: &EliteBar - {825CF5BD-8862-4430-B771-0C15C5CA8DEF} - C:\WINDOWS\EliteToolBar\EliteToolBar version 59.dllO4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exeO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [URLLSTCK.exe] C:\Program Files\Norton Internet Security\UrlLstCk.exeO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [Drag'n Drop CD+DVD] C:\Program Files\drag'n drop cd+dvd\BinFiles\DragDrop.exe /StartUpO4 - HKLM\..\Run: [mouseElf] C:\PROGRA~1\TWINTO~1\MouseElf.EXEO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exeO4 - HKLM\..\Run: [WmaORaV_Ml] C:\WINDOWS\System32\irkwsrvgcg.exeO4 - HKLM\..\Run: [Windows DLL Loader] C:\WINDOWS\system32\defragfatz.exeO4 - HKLM\..\Run: [salm] c:	emp\salm.exeO4 - HKLM\..\Run: [ElSH] C:\WINDOWS\cfpwidqd.exeO4 - HKLM\..\Run: [tqrit] C:\WINDOWS	qrit.exeO4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"O4 - HKLM\..\Run: [Ghqww] C:\Program Files\Gwxiki\Diqnamz.exeO4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exeO4 - HKLM\..\Run: [¢‰¸K0¨4W}ïÁzî[8C:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\cfpwidqd.exeO4 - HKLM\..\Run: [MsnExplorer] C:\WINDOWS\msexploren.exe /iO4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Fichiers communs\Symantec Shared\ccRegVfy.exe"O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /ConsumerO4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exeO4 - HKLM\..\Run: [gcasServ] C:\WINDOWS\gcasServ.exeO4 - HKLM\..\Run: [SheduIer] C:\WINDOWS\qttasks.exe /iO4 - HKLM\..\Run: [checkrun] C:\windows\system32\elitedme32.exeO4 - HKLM\..\Run: [HELPER] C:\WINDOWS\System32\france.exe -NO4 - HKLM\..\RunOnce: [SpybotSnD] "D:\Mes docs\Utilitaires\Spybot - Search & Destroy\SpybotSD.exe" /autocheckO4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exeO4 - Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXEO4 - Global Startup: Adobe Gamma Loader.lnk = ?O4 - Global Startup: Assistant d'Acrobat.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exeO4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exeO4 - Global Startup: hpoddt01.exe.lnk = ?O4 - Global Startup: LightSurf.lnk = C:\Program Files\LightSurf\Common\IconMgr.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO4 - Global Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXEO4 - Global Startup: Pilote Remocon.lnk = C:\Program Files\sony\usbsircs\USBsircs.exeO4 - Global Startup: Timer Recording Manager.lnk = C:\Program Files\sony\giga pocket\ReserveModule.exeO8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxdm414YYFRO9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll (file missing)O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htmO9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\webelated.htmO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXEO9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXEO15 - Trusted Zone: *.sony-europe.comO15 - Trusted Zone: *.sonystyle-europe.comO15 - Trusted Zone: *.vaio-link.comO16 - DPF: Interface Chat Voila - http://chat7.x-echo.com/version5/Applet/vchatsign.cabO16 - DPF: {00000000-0000-0000-0000-000020030000} - http://www.advnt01.com/dialer/france_nos.exeO16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei-2/SmileyCentralFWBInitialSetup1.0.0.8-2.exeO16 - DPF: {205FF73B-CA67-11D5-99DD-444553540000} (CInstall Class) - http://www.spywarestormer.com/files2/Install.cabO16 - DPF: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658} (Installer Class) - http://www.ysbweb.com/ist/softwares/v4.0/ysb_regular.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cabO16 - DPF: {EFB22865-F3BC-4309-ADFA-C8E078A7F762} (SysWebTelecomInt Class) - http://www.sponsoradulto.com/cab/14/fr/SysWebTelecomInt.cabO16 - DPF: {FC67BB52-AAB6-4282-9D51-2DAFFE73AFD0} - http://download.spyspotter.com/spyspotter/SpSp29952.40noopt/SpySpotterCabInstall.cabO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Proxy Service (ccPxySvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPxySvc.exeO23 - Service: Giga Pocket Hardware Detector - Sony Corporation - C:\Program Files\sony\giga pocket\shwserv.exeO23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus
avapsvc.exeO23 - Service: Norton Internet Security Accounts Manager (NISUM) - Symantec Corporation - C:\Program Files\Norton Internet Security\NISUM.EXEO23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exeO23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exeO23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exeO23 - Service: Sony TV Tuner Controller - Sony Corporation - C:\Program Files\sony\giga pocket\halsv.exeO23 - Service: Sony TV Tuner Manager - Sony Corporation - C:\Program Files\sony\giga pocket\RM_SV.exeO23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exeO23 - Service: UStorage Server Service - OTi - C:\WINDOWS\system32\UStorSrv.exeO23 - Service: VAIO Media Music Server (VAIOMediaPlatform-MusicServer-AppServer) - Unknown owner - C:\Program Files\sony\vaio media music server\SSSvr.exe" /Service=VAIOMediaPlatform-MusicServer-AppServer /DisplayName="VAIO Media Music Server (file missing)O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\vaio media platform\sv_httpd.exe" /Service=VAIOMediaPlatform-MusicServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\MusicServer\HTTP (file missing)O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\vaio media platform\UPnPFramework.exeO23 - Service: VAIO Media Photo Server (VAIOMediaPlatform-PhotoServer-AppServer) - Sony Corporation - C:\Program Files\sony\photo server\appsrv\PhotoAppSrv.exeO23 - Service: VAIO Media Photo Server (HTTP) (VAIOMediaPlatform-PhotoServer-HTTP) - Unknown owner - C:\Program Files\Fichiers communs\sony shared\vaio media platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-PhotoServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\PhotoServer\HTTP (file missing)O23 - Service: VAIO Media Photo Server (UPnP) (VAIOMediaPlatform-PhotoServer-UPnP) - Sony Corporation - C:\Program Files\Fichiers communs\sony shared\vaio media platform\UPnPFramework.exeO23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Unknown owner - C:\Program Files\sony\giga pocket\GPVSvr.exe" /Service=VAIOMediaPlatform-VideoServer-AppServer /DisplayName="VAIO Media Video Server (file missing)O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Unknown owner - C:\Program Files\Fichiers communs\sony shared\vaio media platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-VideoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\VideoServer\HTTP (file missing)O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Program Files\Fichiers communs\sony shared\vaio media platform\UPnPFramework.exe

theoelliot · Answer

Oups,J'ai failli vous oublier.Donc pour vous résumer la situation, tout est bien clean sur mon PC depuis l'éradication (sans scrupule, je dois bien l'avouer) de mon intru.Alors encore 1000 mercis à vous tous.Maintenant je vais m'occuper de ma commande execute.Elise

balltrap34 · Answer

si ta commande executer ne fonctionne plusEssai en premier ceciClick droit sur demarrer,ensuite click sur propriete/personnaliser/avance/et coche la commande executeci cela ne fonctionne pas,essai ce qui suitacceder a la base de registrepour acceder a la base de registre ouvre l'explorateur puis c/windows/systeme32 dans la fenetre de droite cherche regedit.exe(classer par ordre alpha)et click dessus ensuiteouvre les cles HKEY/CURRENT/USER/software/microsoft/windows/currentversion/policies/explorer ensuite edition,nouveau,valeurDWORD,NoRun ensuite click 2 fois sur cette valeur et tape 0(zero)dans le champ donnees de la valeur,tu ferme ,et tu redemmare ton pc avant de faire tous cela verrifie si cette cles n'existe pas deja ci oui tous simplement donne zero a la valeur a la place du 1

[downloader.agent.12D et 11Q]

41 réponses

Newsletters