Ordinateur infecté par win32 skynet

Résolu
regisabine Messages postés 56 Statut Membre -  
did71 Messages postés 2187 Statut Contributeur sécurité -
bonjour à tous
mon ordinateur est infecté par plusieurs virus dont win32synet dont je n'arrive pas à me débarasser avec karspersky
j'ai suivi la méthode préliminaire de désinfection et ai récupérré les rapports mais ceux ci ne rentrent pas dans ces messages
je vous remercie de venir à mon aide, je suis perdu
Configuration: Windows XP
Firefox 2.0.0.2

46 réponses

  • 1
  • 2
  • 3
Résumé de la discussion

Un ordinateur fonctionnant sous Windows XP est confronté à une infection multivirus incluant Win32.Synet, malgré l’utilisation de Kaspersky et l’envoi de rapports de désinfection, ce qui rend la remise en état incertaine. Des recommandations prioritaires suggèrent de supprimer certains outils de travail sensibles, notamment VundoFix et SDFix, afin d’éviter des conflits pendant la désinfection et de permettre des analyses plus fiables. D'autres préconisent l'usage d'HijackThis pour l'analyse des entrées système et d'un scan avec BitDefender Online Scanner afin d'obtenir un rapport clair sur les infections et les éléments suspects. En cas de doute, il convient aussi de vérifier les démarrages et les services automatiquement lancés, car des configurations antivirus concurrentes peuvent masquer certaines infections et compliquer le nettoyage.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. did71 Messages postés 2187 Statut Contributeur sécurité 36
     
    Bonsoir,

    télécharge HijackThis:

    http://pchelpbordeaux.free.fr/logiciels.html

    Tutorial:

    http://pchelpbordeaux.free.fr/tuto.html

    Démo en image:

    http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

    Fais un scan et poste l'analyse.

    a+
    0
  2. regisabine Messages postés 56 Statut Membre 3
     
    *BitDefender Online Scanner - Real Time Virus Report* Generated at: Sat, Feb 24, 2007 - 10:00:19 ------------------------------------------------------------------------ *Scan Info* Scanned Files 374748 Infected Files 584 * * *Virus Detected* Win32.Bagle.M@mm 2 Win32.Bagle.BA@mm 4 Win32.Mydoom.L@mm 20 Win32.Worm.Mytob.BT 1 Win32.Worm.Mytob.BC 1 Trojan.Bagle.BK 4 Win32.Worm.Mytob.BD 2 Win32.Netsky.C@mm.Dam 1 Win32.Bagle.CM@mm 2 Win32.Sober.K@mm 7 MemScan:Win32.Bagle.BA@mm 1 Win32.Netsky.C@mm.Damaged 31 Win32.Bagle.AY@mm 1 Exploit.Iframe.Vulnerability.B 36 Win32.NetSky.AA@mm.dam 14 Win32.Bagle.AG@mm 1 Win32.Netsky.D@mm 231 Win32.Netsky.C@mm 37 Win32.Netsky.B@mm 3 Win32.Bagle.BV@mm 1 Win32.Netsky.AA@mm 56 Win32.Worm.Bagle.FJ 32 Win32.Netsky.P@mm 96 ------------------------------------------------------------------------ This summary of the scan process will be used by the BitDefender Antivirus Lab to create agregate statistics about virus activity around the world.
    Logfile of HijackThis v1.99.1
    Scan saved at 20:13:48, on 24/02/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\LVCOMSX.EXE
    C:\Program Files\Soft4Ever\looknstop\looknstop.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (file missing)
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
    O4 - HKLM\..\Run: [OfficeGuard RegChecker] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\ogrc.exe"
    O4 - HKLM\..\Run: [AVPCC] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /wait
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/fr/securityadvisor/virusinfo/webscan.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: AVP Control Centre Service (AVPCC) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /service (file missing)
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: KAV Monitor Service (KAVMonitorService) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe" /service (file missing)
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    0
  3. regisabine Messages postés 56 Statut Membre 3
     
    Logfile of HijackThis v1.99.1
    Scan saved at 20:41:33, on 24/02/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\LVCOMSX.EXE
    C:\Program Files\Soft4Ever\looknstop\looknstop.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\OpenOffice.org1.1.4\program\soffice.exe
    C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (file missing)
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
    O4 - HKLM\..\Run: [OfficeGuard RegChecker] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\ogrc.exe"
    O4 - HKLM\..\Run: [AVPCC] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /wait
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/fr/securityadvisor/virusinfo/webscan.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: AVP Control Centre Service (AVPCC) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /service (file missing)
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: KAV Monitor Service (KAVMonitorService) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe" /service (file missing)
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    0
  4. did71 Messages postés 2187 Statut Contributeur sécurité 36
     
    re,

    peux tu renommer hijackthis.exe en scanner.exe, repasser le scan et poster le rapport de scanner.exe!

    a+
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. regisabine Messages postés 56 Statut Membre 3
     
    j'espere que ma manip est la bonne

    j'ai fais aussi un scan avec ccleaner mais le rapport est énorme (23400 détectés dont surtout des cookies mais ...)

    Logfile of HijackThis v1.99.1
    Scan saved at 20:47:29, on 24/02/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\LVCOMSX.EXE
    C:\Program Files\Soft4Ever\looknstop\looknstop.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\OpenOffice.org1.1.4\program\soffice.exe
    C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (file missing)
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
    O4 - HKLM\..\Run: [OfficeGuard RegChecker] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\ogrc.exe"
    O4 - HKLM\..\Run: [AVPCC] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /wait
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/fr/securityadvisor/virusinfo/webscan.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: AVP Control Centre Service (AVPCC) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /service (file missing)
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: KAV Monitor Service (KAVMonitorService) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe" /service (file missing)
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    0
  7. did71 Messages postés 2187 Statut Contributeur sécurité 36
     
    re,

    renomme hijackthis.exe en scanner.exe comme je te l'ai demandé plus haut!

    a+
    0
  8. regisabine Messages postés 56 Statut Membre 3
     
    resalut
    j'espere que c'est mieux:

    Logfile of HijackThis v1.99.1
    Scan saved at 21:13:38, on 24/02/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\LVCOMSX.EXE
    C:\Program Files\Soft4Ever\looknstop\looknstop.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (file missing)
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
    O4 - HKLM\..\Run: [OfficeGuard RegChecker] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\ogrc.exe"
    O4 - HKLM\..\Run: [AVPCC] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /wait
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/fr/securityadvisor/virusinfo/webscan.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: AVP Control Centre Service (AVPCC) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /service (file missing)
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: KAV Monitor Service (KAVMonitorService) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe" /service (file missing)
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

    merci de ton aide
    0
  9. did71 Messages postés 2187 Statut Contributeur sécurité 36
     
    * Télécharge VundoFix.exe (par Atribune) sur ton Bureau:

    http://www.atribune.org/public-beta/VundoFix.exe

    * Double-clique VundoFix.exe afin de le lancer
    * Clique sur le bouton Scan for Vundo
    * Lorsque le scan est complété, clique sur le bouton Remove Vundo
    * Une invite te demandera si tu veux supprimer les fichiers, clique YES
    * Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers
    * Tu verras une invite qui t'annonce que ton PC va redémarrer; clique OK
    * Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis dans ta prochaine réponse

    Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "clique sur le bouton Scan for Vundo".

    a+
    0
    1. afideg Messages postés 10466 Date d'inscription   Statut Contributeur sécurité Dernière intervention   602
       
      Bonsoir Didier

      Je pense qu'on ne sait pas renommer la version HJT de Bordeaux.

      à confirmer..

      Al
      0
  10. regisabine Messages postés 56 Statut Membre 3
     
    resalut

    remove vundo a affiché "no files were found, vundofix v6.3.9 will now close"

    et hijackthis donne:

    Logfile of HijackThis v1.99.1
    Scan saved at 21:34:36, on 24/02/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\LVCOMSX.EXE
    C:\Program Files\Soft4Ever\looknstop\looknstop.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://fr.rd.yahoo.com/customize/ie/defaults/su/msgr8/*https://fr.search.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (file missing)
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
    O4 - HKLM\..\Run: [OfficeGuard RegChecker] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\ogrc.exe"
    O4 - HKLM\..\Run: [AVPCC] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /wait
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
    O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/fr/securityadvisor/virusinfo/webscan.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: AVP Control Centre Service (AVPCC) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /service (file missing)
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: KAV Monitor Service (KAVMonitorService) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe" /service (file missing)
    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

    a+
    merci
    0
  11. did71 Messages postés 2187 Statut Contributeur sécurité 36
     
    re,

    Télécharge AVG Anti-Spyware:

    https://www.avg.com/en-ww/free-antivirus-download

    Tu l'installes.
    Lance AVG Anti-Spyware et clique sur le bouton Mise à jour. Patiente

    Lance AVG Anti-Spyware
    Clique sur le bouton Analyse (de la barre d'outils)
    Puis sur l'onglets Comment réagir, clique sur Actions recommandées. Sélectionne Quarantaine.
    Reviens à l'onglet Analyse. Clique sur Analyse complète du système.
    A la fin du scan, choisis l'option " Appliquer toutes les actions " en bas.
    Clique sur "Enregistrer le rapport". Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.

    poste le rapport AVG!

    a+
    0
  12. did71 Messages postés 2187 Statut Contributeur sécurité 36
     
    Bonsoir Albert,

    je me pose justement la question, j'ai installé la version française pour essayer, je l'ai renommé (sans problème) mais je ne sais pas si ça change quelque chose au rapport hijackthis!

    le nom reste le même VERSION TRADUITE ORIGINALE.EXE, mais les rapports donne quoi?

    ici, pas de vundo, j'ai quand même lancé l'outil!

    a+
    0
  13. regisabine Messages postés 56 Statut Membre 3
     
    rebonsoir

    pas tout compris sur message précédent : ))

    ni sur :

    ---------------------------------------------------------
    AVG Anti-Spyware - Rapport d'analyse
    ---------------------------------------------------------

    + Créé à: 22:46:38 24/02/2007

    + Résultat de l'analyse:

    Rien à signaler.

    Fin du rapport
    0
  14. did71 Messages postés 2187 Statut Contributeur sécurité 36
     
    re,

    le message précedent était destiné à afideg!

    Télécharge Blacklight (de F-Secure), sauvegarde le sur ton Bureau:

    https://europe.f-secure.com/exclude/blacklight/index.shtml

    Double-clique blbeta.exe et accepte la licence ;clique Scan puis Next

    Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).

    Copie et colle le contenu de ce rapport dans ta prochaine réponse!

    a+
    0
  15. regisabine Messages postés 56 Statut Membre 3
     
    resalut

    voici le rapport demandé :

    02/24/07 23:03:56 [Info]: BlackLight Engine 1.0.55 initialized
    02/24/07 23:03:56 [Info]: OS: 5.1 build 2600 (Service Pack 2)
    02/24/07 23:03:56 [Note]: 7019 4
    02/24/07 23:03:56 [Note]: 7005 0
    02/24/07 23:04:00 [Note]: 7006 0
    02/24/07 23:04:00 [Note]: 7011 924
    02/24/07 23:04:00 [Note]: 7026 0
    02/24/07 23:04:00 [Note]: 7026 0
    02/24/07 23:04:20 [Note]: FSRAW library version 1.7.1021
    02/24/07 23:07:11 [Note]: 2000 1012
    02/24/07 23:13:27 [Note]: 7007 0

    encore merci pour ta patience
    0
  16. did71 Messages postés 2187 Statut Contributeur sécurité 36
     
    re,

    aucun des outils ne détecte une infection!

    Étape 1:
    Télécharge eScan Antivirus Toolkit ici:

    http://www.spywareinfo.dk/download/mwav.exe

    Sauvegarde-le sur ton Bureau.
    Avant de lancer le programme, il faut le mettre à jour tel qu'indiqué à l'étape 2.

    Étape 2:
    Voici comment mettre l'outil à jour :

    1.) Double-clique le fichier mwav.exe qui se trouve sur le Bureau ; dézippe les fichiers dans le nouveau dossier suggéré (C:\Kaspersky). Le programme va se lancer, et tu dois le quitter (clique sur "Exit" puis "Exit").

    2.) Double-clique sur le Poste de travail, puis double-clique sur le lecteur principal (habituellement C:\), double-clique sur le dossier Kaspersky ; ensuite, double-clique sur le fichier kavupd.exe. Tu verras maintenant une fenêtre DOS apparaître, et la mise à jour se complètera en quelques minutes.

    3.) Lorsque la mise à jour sera complétée, tu verras "Press any key to continue" ; tape sur une clé pour continuer. Deux nouveaux répertoires (dossiers) ont été créés lors de la mise à jour (C:\Bases et C:\Downloads).

    4.) Sélectionne/copie tous les fichiers présents dans le dossier C:\Downloads, puis colle-les dans le dossier C:\Kaspersky. Accepte à l'invite de remplacer les fichiers existants.

    Ne pas lancer le scan tout de suite !

    Étape 3:
    Redémarre en mode Sans Échec :
    1) Redémarre ton ordi
    2) Tapote la touche F8 immédiatement, juste après le "Bip"
    3) Tu verras un écran avec options de démarrage apparaître
    4) Choisi la première option : Sans Échec, et valide avec "Entrée"
    5) Choisi ton compte régulier, et non Administrateur

    Étape 4:
    Du mode Sans Échec, voici comment utiliser le programme :

    1.) Pour lancer "eScan Antivirus Toolkit", trouve le fichier mwavscan.com situé dans le dossier C:\Kaspersky

    2.) Double-clique sur mwavscan.com ; l'interface d'eScan va apparaître à l'écran.

    3.) Il est très important de bien cocher ces boîtes sous Scan Option : Memory, Registry, Startup Folders, System Folders, Services.

    4.) Coche la boîte Drive, ce qui donne accès à une nouvelle boîte Drive (bouton rond) juste dessous ; coche ce bouton "Drive" (très important..), et tu verras une nouvelle boîte de navigation apparaître à la droite. Clique sur la petite flèche de cette boîte and choisi la lettre de ton disque dur, habituellement C:\.

    5.) Juste au-dessous, assure-toi que Scan All Files est coché, et non Program Files.

    6.) Clique sur Scan Clean et laisse le tool vérifier tout le disque dur (ça peut être long..). Lorsque terminé, tu verras Scan Completed. Ne pas quitter tout de suite !

    7.) Ouvre un nouveau fichier Bloc notes (clique sur "Démarrer" >> "Programmes" >>"Accessoires" >> "Bloc notes"), puis copie/colle tout le contenu de la fenêtre Virus Log Information (la deuxième, au bas) dans le fichier texte, et sauvegarde le. eScan génère également un rapport complet dans le dossier C:\Kaspersky (nommé mwav.log), mais il est trop lourd pour poster sur le forum.

    Ferme le programme. Redémarre ton PC en mode Normal. Poste (copie/colle) le rapport que tu as sauvegardé dans ta prochaine réponse.

    a+
    0
  17. regisabine Messages postés 56 Statut Membre 3
     
    bonjour
    désolé d'avoir tardé
    j'ai eu pas mal de difficulté hier soir à faire la manip
    j'ai enfin réussi mais le copié collé sur escan ne marchait pas ni non plus en glissant.
    j'ai donc pris des passages dans le mwav.log qui me paraissaient les plus significatifs.

    voila donc ce rapport où j'espere que vous trouverez les infos nécéssaires :

    Sun Feb 25 00:34:00 2007 => **********************************************************
    Sun Feb 25 00:34:00 2007 => eScan AntiVirus Toolkit Utility.
    Sun Feb 25 00:34:00 2007 => Copyright © 2003-2004, MicroWorld Technologies Inc.
    Sun Feb 25 00:34:00 2007 => **********************************************************
    Sun Feb 25 00:34:00 2007 => Version 4.4.7
    Sun Feb 25 00:34:00 2007 => Log File: C:\KASPER~1\mwav.log
    Sun Feb 25 00:34:00 2007 => Database Path in KL Key: C:\Program Files\Fichiers communs\KAV Shared Files\Bases.
    Sun Feb 25 00:34:01 2007 => Latest Date of files in KL key: 23 Feb 2007 14:31:57.
    Sun Feb 25 00:34:04 2007 => Latest Date of files inside MWAV: 25 Feb 2007 00:57:08.
    Sun Feb 25 00:34:09 2007 => AV Library Loaded...
    Sun Feb 25 00:34:09 2007 => Scanning File C:\KASPER~1\kavss.exe
    Sun Feb 25 00:34:09 2007 => Scanning File C:\KASPER~1\Getvlist.exe
    Sun Feb 25 00:34:10 2007 => Scanning File C:\KASPER~1\kavss.dll
    Sun Feb 25 00:34:10 2007 => Scanning File C:\KASPER~1\kavssdi.dll
    Sun Feb 25 00:34:10 2007 => Scanning File C:\KASPER~1\kavssi.dll
    Sun Feb 25 00:34:10 2007 => Scanning File C:\KASPER~1\kavvlg.dll
    Sun Feb 25 00:34:10 2007 => Scanning File C:\KASPER~1\msvlclnt.dll
    Sun Feb 25 00:34:10 2007 => Scanning File C:\KASPER~1\ipc.dll
    Sun Feb 25 00:34:10 2007 => Scanning File C:\KASPER~1\main.avi
    Sun Feb 25 00:34:10 2007 => Scanning File C:\KASPER~1\virus.avi
    Sun Feb 25 00:34:10 2007 => Virus Database Date: 2007/02/25
    Sun Feb 25 00:34:10 2007 => Virus Database Count: 273142

    Sun Feb 25 00:36:10 2007 => **********************************************************
    Sun Feb 25 00:36:10 2007 => eScan AntiVirus Toolkit Utility.
    Sun Feb 25 00:36:10 2007 => Copyright © 2003-2004, MicroWorld Technologies Inc.
    Sun Feb 25 00:36:10 2007 =>
    Sun Feb 25 00:36:10 2007 => Support: support@mwti.net
    Sun Feb 25 00:36:10 2007 => Web: https://www.escanav.com/en/index.asp
    Sun Feb 25 00:36:10 2007 => **********************************************************
    Sun Feb 25 00:36:10 2007 => Version 4.4.7
    Sun Feb 25 00:36:10 2007 => Log File: C:\KASPER~1\mwav.log
    Sun Feb 25 00:36:10 2007 => Database Path in KL Key: C:\Program Files\Fichiers communs\KAV Shared Files\Bases.
    Sun Feb 25 00:36:10 2007 => Latest Date of files in KL key: 23 Feb 2007 14:31:57.
    Sun Feb 25 00:36:10 2007 => Latest Date of files inside MWAV: 25 Feb 2007 00:57:08.

    Sun Feb 25 00:36:10 2007 => Options Selected by User:
    Sun Feb 25 00:36:10 2007 => Memory Check: Enabled
    Sun Feb 25 00:36:10 2007 => Registry Check: Enabled
    Sun Feb 25 00:36:10 2007 => StartUp Folder Check: Enabled
    Sun Feb 25 00:36:10 2007 => System Folder Check: Enabled
    Sun Feb 25 00:36:10 2007 => System Area Check: Disabled
    Sun Feb 25 00:36:10 2007 => Services Check: Enabled
    Sun Feb 25 00:36:10 2007 => Drive Check: Enabled
    Sun Feb 25 00:36:10 2007 => All Drive Check :Disabled
    Sun Feb 25 00:36:10 2007 => Scanning Type: Scan And Clean
    Sun Feb 25 00:36:10 2007 => Drive Selected = C:\
    Sun Feb 25 00:36:10 2007 => Folder Check: Disabled

    Sun Feb 25 01:09:15 2007 => Scanning File C:\Program Files\NetMeeting\TestSnd.wav
    Sun Feb 25 01:09:15 2007 => Scanning File C:\Program Files\NetMeeting\wb32.exe
    Sun Feb 25 01:09:15 2007 => Scanning Folder: C:\Program Files\Norton SystemWorks\*.*
    Sun Feb 25 01:09:15 2007 => Scanning Folder: C:\Program Files\Norton SystemWorks\Norton AntiVirus\*.*
    Sun Feb 25 01:09:16 2007 => Scanning Folder: C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\*.*
    Sun Feb 25 01:09:16 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\00D962C8.tmp
    Sun Feb 25 01:09:16 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\00D962C8.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:16 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\01422255.tmp
    Sun Feb 25 01:09:16 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\01422255.tmp infected by "Email-Worm.Win32.NetSky.c" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:16 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\01836A0D.tmp
    Sun Feb 25 01:09:16 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\01836A0D.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:17 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\01B709D3.tmp
    Sun Feb 25 01:09:17 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\01B709D3.tmp infected by "Email-Worm.Win32.NetSky.b" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:17 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\01C431C5.tmp
    Sun Feb 25 01:09:17 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\01C431C5.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:17 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\01E87F9D.tmp
    Sun Feb 25 01:09:17 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\023851D0.tmp
    Sun Feb 25 01:09:17 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\023851D0.tmp infected by "Email-Worm.Win32.Mydoom.l" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:17 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\061A5540.tmp
    Sun Feb 25 01:09:17 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\061A5540.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:17 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08767713.tmp
    Sun Feb 25 01:09:18 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\08767713.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:18 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\09D84D8E.tmp
    Sun Feb 25 01:09:18 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\09D84D8E.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:18 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0E5E7D38.tmp
    Sun Feb 25 01:09:18 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0E5E7D38.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:18 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0E9432F9.tmp
    Sun Feb 25 01:09:18 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0E9432F9.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:18 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0E9E30EE.tmp
    Sun Feb 25 01:09:19 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0E9E30EE.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:19 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0EA15AEA.tmp
    Sun Feb 25 01:09:19 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0EA15AEA.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:19 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F0F5876.tmp
    Sun Feb 25 01:09:19 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F1C0067.tmp
    Sun Feb 25 01:09:19 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F1C0067.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:19 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F1F2A64.tmp
    Sun Feb 25 01:09:19 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F292859.tmp
    Sun Feb 25 01:09:19 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F292859.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:19 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F2C5255.tmp
    Sun Feb 25 01:09:20 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F2F7C52.tmp
    Sun Feb 25 01:09:20 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F2F7C52.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:20 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F33264E.tmp
    Sun Feb 25 01:09:20 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F562DEA.tmp
    Sun Feb 25 01:09:20 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F562DEA.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:20 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F814FBB.tmp
    Sun Feb 25 01:09:20 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F814FBB.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:20 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0F944BA6.tmp
    Sun Feb 25 01:09:20 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0FA27398.tmp
    Sun Feb 25 01:09:21 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\0FA27398.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:21 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\16C87996.tmp
    Sun Feb 25 01:09:21 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\16C87996.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:21 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1789473F.tmp
    Sun Feb 25 01:09:21 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1789473F.tmp infected by "Email-Worm.Win32.Mydoom.l" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:21 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\190311BB.tmp
    Sun Feb 25 01:09:21 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\190311BB.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:21 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\191039AD.tmp
    Sun Feb 25 01:09:22 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\191039AD.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:22 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1AF77BF6.tmp
    Sun Feb 25 01:09:22 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1AF77BF6.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:22 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1C7B3A62.tmp
    Sun Feb 25 01:09:22 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1C7B3A62.tmp infected by "Email-Worm.Win32.Mydoom.l" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:22 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1C9F0B05.tmp
    Sun Feb 25 01:09:22 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1C9F0B05.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:22 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1CC92CD6.tmp
    Sun Feb 25 01:09:22 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1CE052BD.tmp
    Sun Feb 25 01:09:23 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1CE052BD.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:23 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1CE726B6.tmp
    Sun Feb 25 01:09:23 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D017699.tmp
    Sun Feb 25 01:09:23 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D074A92.tmp
    Sun Feb 25 01:09:23 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D074A92.tmp infected by "Email-Worm.Win32.NetSky.c" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:23 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D114887.tmp
    Sun Feb 25 01:09:23 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D114887.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:23 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D1E7079.tmp
    Sun Feb 25 01:09:24 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D1E7079.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:24 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D286E6E.tmp
    Sun Feb 25 01:09:24 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D286E6E.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:24 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D2E4267.tmp
    Sun Feb 25 01:09:24 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D2E4267.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:24 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D596438.tmp
    Sun Feb 25 01:09:24 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D596438.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:24 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D693626.tmp
    Sun Feb 25 01:09:24 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D8220B6.tmp
    Sun Feb 25 01:09:25 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D8220B6.tmp infected by "Exploit.HTML.Iframe.FileDownload" Virus. Action Taken: File Renamed.

    Sun Feb 25 01:09:25 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D8874AF.tmp
    Sun Feb 25 01:09:25 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D8874AF.tmp infected by "Exploit.HTML.Iframe.FileDownload" Virus. Action Taken: File Renamed.

    Sun Feb 25 01:09:25 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D8F48A8.tmp
    Sun Feb 25 01:09:25 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1D8F48A8.tmp infected by "Exploit.HTML.Iframe.FileDownload" Virus. Action Taken: File Renamed.

    Sun Feb 25 01:09:25 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1DE5719D.tmp
    Sun Feb 25 01:09:25 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1DE5719D.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:25 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1DF2198F.tmp
    Sun Feb 25 01:09:25 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E036B7D.tmp
    Sun Feb 25 01:09:26 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E036B7D.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:26 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E133D6B.tmp
    Sun Feb 25 01:09:26 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E133D6B.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:26 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E273956.tmp
    Sun Feb 25 01:09:26 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E30374B.tmp
    Sun Feb 25 01:09:26 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E30374B.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:26 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E3A3540.tmp
    Sun Feb 25 01:09:26 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E3A3540.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:26 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E4A072E.tmp
    Sun Feb 25 01:09:26 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E540523.tmp
    Sun Feb 25 01:09:27 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E540523.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:27 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E612D15.tmp
    Sun Feb 25 01:09:27 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E6B2B0A.tmp
    Sun Feb 25 01:09:27 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E6B2B0A.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:27 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E727F03.tmp
    Sun Feb 25 01:09:27 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E727F03.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:27 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E7B7CF8.tmp
    Sun Feb 25 01:09:27 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E7B7CF8.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:27 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E857AED.tmp
    Sun Feb 25 01:09:28 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E857AED.tmp infected by "Email-Worm.Win32.NetSky.c" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:28 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E8C4EE6.tmp
    Sun Feb 25 01:09:28 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E8C4EE6.tmp infected by "Email-Worm.Win32.NetSky.c" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:28 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E9222DF.tmp
    Sun Feb 25 01:09:28 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\1E9222DF.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:28 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\20A349DB.tmp
    Sun Feb 25 01:09:28 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\20A349DB.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:28 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\20B31BC9.tmp
    Sun Feb 25 01:09:29 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\20B31BC9.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:29 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\20E16796.tmp
    Sun Feb 25 01:09:29 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\20E16796.tmp infected by "Email-Worm.Win32.Mydoom.l" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:29 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\240667D5.tmp
    Sun Feb 25 01:09:29 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\240667D5.tmp infected by "Email-Worm.Win32.Mydoom.l" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:29 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\24306E17.tmp
    Sun Feb 25 01:09:29 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\24306E17.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:29 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\24404005.tmp
    Sun Feb 25 01:09:30 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\24404005.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:30 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\24543BEF.tmp
    Sun Feb 25 01:09:30 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\24543BEF.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:30 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\246163E1.tmp
    Sun Feb 25 01:09:30 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\246163E1.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:30 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\246A61D6.tmp
    Sun Feb 25 01:09:31 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\246A61D6.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:31 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\24745FCB.tmp
    Sun Feb 25 01:09:31 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\24745FCB.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:31 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\247B33C4.tmp
    Sun Feb 25 01:09:31 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\247B33C4.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:31 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\24982DA4.tmp
    Sun Feb 25 01:09:31 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\24982DA4.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:31 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\24D635CD
    Sun Feb 25 01:09:34 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\24D635CD infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:34 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\28540D80.tmp
    Sun Feb 25 01:09:34 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\28540D80.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:34 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\29B34941.tmp
    Sun Feb 25 01:09:35 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\29B34941.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:35 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\29C07132.tmp
    Sun Feb 25 01:09:35 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\29C07132.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:35 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\29C31B2F.tmp
    Sun Feb 25 01:09:35 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\29C31B2F.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:35 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\29C6452B.tmp
    Sun Feb 25 01:09:35 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\29C6452B.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:35 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\29C74013.tmp
    Sun Feb 25 01:09:35 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\29C74013.tmp infected by "Email-Worm.Win32.Mydoom.l" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:35 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\29D13E08.tmp
    Sun Feb 25 01:09:36 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\29D13E08.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:36 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\2AB46685.tmp
    Sun Feb 25 01:09:36 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\2AB46685.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:36 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\2DC87D4B.tmp
    Sun Feb 25 01:09:36 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\2DC87D4B.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:36 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\2E171287.tmp
    Sun Feb 25 01:09:36 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\2E171287.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:36 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\2F7375C0.tmp
    Sun Feb 25 01:09:37 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\2F7375C0.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:37 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\31235A6D
    Sun Feb 25 01:09:37 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\31235A6D infected by "Email-Worm.Win32.Bagle.cs" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:37 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\317C480C
    Sun Feb 25 01:09:37 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\317C480C infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:37 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\35951E5A.tmp
    Sun Feb 25 01:09:38 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\35951E5A.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:38 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\35984856.tmp
    Sun Feb 25 01:09:38 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\35984856.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:38 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\359C7253.tmp
    Sun Feb 25 01:09:38 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\359C7253.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:38 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\36AA5A7C.tmp
    Sun Feb 25 01:09:39 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\36AA5A7C.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:39 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\37462DA9.tmp
    Sun Feb 25 01:09:39 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\392C2A0F.tmp
    Sun Feb 25 01:09:39 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\392C2A0F.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:39 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\39337E08.tmp
    Sun Feb 25 01:09:39 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\39337E08.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:39 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\3A846373
    Sun Feb 25 01:09:42 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\3A846373 infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:42 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\3A9004A1
    Sun Feb 25 01:09:42 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\3A9004A1 infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:42 2007 => *** File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\3D3F5668 having Size Restriction ***
    Sun Feb 25 01:09:42 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\3D3F5668 [**]
    Sun Feb 25 01:09:42 2007 => *** File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\40CA507A having Size Restriction ***
    Sun Feb 25 01:09:42 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\40CA507A [**]
    Sun Feb 25 01:09:42 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\42A956C2.tmp
    Sun Feb 25 01:09:42 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\43A63ECE.tmp
    Sun Feb 25 01:09:43 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\43A63ECE.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:43 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\43CF69BE.tmp
    Sun Feb 25 01:09:43 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\43CF69BE.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:43 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\43DB4DC1.tmp
    Sun Feb 25 01:09:43 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\43DB4DC1.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:43 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\44AA0FE8.tmp
    Sun Feb 25 01:09:44 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\44AA0FE8.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:44 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\44C71CBE.tmp
    Sun Feb 25 01:09:44 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\44C71CBE.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:44 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\44E4169E.tmp
    Sun Feb 25 01:09:44 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\44E4169E.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:44 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\44E82B81.tmp
    Sun Feb 25 01:09:44 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\44E82B81.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:44 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\44FF5168.tmp
    Sun Feb 25 01:09:45 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\47FF150E
    Sun Feb 25 01:09:45 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\47FF150E infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:45 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\48007D53.tmp
    Sun Feb 25 01:09:45 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\48007D53.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:45 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\48081303
    Sun Feb 25 01:09:46 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\48081303 infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:46 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\48287528.tmp
    Sun Feb 25 01:09:46 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\48287528.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:46 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\482E4921.tmp
    Sun Feb 25 01:09:46 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\482E4921.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:46 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\48351D1A.tmp
    Sun Feb 25 01:09:46 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\48351D1A.tmp infected by "Email-Worm.Win32.Mydoom.l" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:46 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\483B7112.tmp
    Sun Feb 25 01:09:47 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\483B7112.tmp infected by "Email-Worm.Win32.Mydoom.l" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:47 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4842450B.tmp
    Sun Feb 25 01:09:47 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4842450B.tmp infected by "Email-Worm.Win32.Mydoom.l" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:47 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\484B4300.tmp
    Sun Feb 25 01:09:47 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\484B4300.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:47 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\485216F9.tmp
    Sun Feb 25 01:09:47 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\485216F9.tmp infected by "Email-Worm.Win32.Mydoom.l" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:47 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\485540F6.tmp
    Sun Feb 25 01:09:47 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\485540F6.tmp infected by "Email-Worm.Win32.Mydoom.l" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:47 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\48693CE0.tmp
    Sun Feb 25 01:09:48 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\48693CE0.tmp infected by "Email-Worm.Win32.Mydoom.l" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:48 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4CE2689E.tmp
    Sun Feb 25 01:09:48 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4CE2689E.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:48 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D135E68.tmp
    Sun Feb 25 01:09:48 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D243056.tmp
    Sun Feb 25 01:09:48 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D2A044F.tmp
    Sun Feb 25 01:09:48 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D2A044F.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:48 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D315848.tmp
    Sun Feb 25 01:09:48 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D3E003A.tmp
    Sun Feb 25 01:09:48 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D3E003A.tmp infected by "Exploit.HTML.Iframe.FileDownload" Virus. Action Taken: File Renamed.

    Sun Feb 25 01:09:48 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D445433.tmp
    Sun Feb 25 01:09:49 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D445433.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:49 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D4B282B.tmp
    Sun Feb 25 01:09:49 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D4B282B.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:49 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D552621.tmp
    Sun Feb 25 01:09:49 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D552621.tmp infected by "Exploit.HTML.Iframe.FileDownload" Virus. Action Taken: File Renamed.

    Sun Feb 25 01:09:49 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D5B7A19.tmp
    Sun Feb 25 01:09:50 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D5B7A19.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:50 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D624E12.tmp
    Sun Feb 25 01:09:50 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D722000.tmp
    Sun Feb 25 01:09:50 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D7C1DF5.tmp
    Sun Feb 25 01:09:50 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D7C1DF5.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:50 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D8945E7.tmp
    Sun Feb 25 01:09:50 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D8945E7.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:50 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D8F19E0.tmp
    Sun Feb 25 01:09:50 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D9343DC.tmp
    Sun Feb 25 01:09:51 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4D9343DC.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:51 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4DA315CA.tmp
    Sun Feb 25 01:09:51 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4DA315CA.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:51 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4DAA69C3.tmp
    Sun Feb 25 01:09:51 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4DAA69C3.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:51 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4DB711B5.tmp
    Sun Feb 25 01:09:51 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\4DB711B5.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:51 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\50890F49.tmp
    Sun Feb 25 01:09:52 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\50890F49.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:52 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\509C0B34.tmp
    Sun Feb 25 01:09:52 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\509C0B34.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:52 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\50AD5D22.tmp
    Sun Feb 25 01:09:52 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\50CE020E.tmp
    Sun Feb 25 01:09:52 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\50CE020E.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:52 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\50EF25EA.tmp
    Sun Feb 25 01:09:52 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\50F578D3.tmp
    Sun Feb 25 01:09:52 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\50F578D3.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:52 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\510220C4.tmp
    Sun Feb 25 01:09:52 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\510B1EBA.tmp
    Sun Feb 25 01:09:53 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\510B1EBA.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:53 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\51266E9D.tmp
    Sun Feb 25 01:09:53 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\51843035.tmp
    Sun Feb 25 01:09:53 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\51843035.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:53 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\519E0018.tmp
    Sun Feb 25 01:09:53 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\519E0018.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:53 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\51B27C02.tmp
    Sun Feb 25 01:09:53 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\51ED6FC2.tmp
    Sun Feb 25 01:09:53 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\51ED6FC2.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:53 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\51FD41B0.tmp
    Sun Feb 25 01:09:54 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\522A3FB7.tmp
    Sun Feb 25 01:09:54 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\522A3FB7.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:54 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\52343DAC.tmp
    Sun Feb 25 01:09:54 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\52343DAC.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:54 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\534F6FF6.tmp
    Sun Feb 25 01:09:55 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\534F6FF6.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:55 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\53E74B16.tmp
    Sun Feb 25 01:09:55 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\53F47308.tmp
    Sun Feb 25 01:09:55 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\53F47308.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:55 2007 => *** File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\55E9225F having Size Restriction ***
    Sun Feb 25 01:09:55 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\55E9225F [**]
    Sun Feb 25 01:09:55 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\56B67E31.tmp
    Sun Feb 25 01:09:55 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\56B67E31.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:55 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\56C6501F.tmp
    Sun Feb 25 01:09:55 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\56EA1DF8.tmp
    Sun Feb 25 01:09:55 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\56EA1DF8.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:55 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\56ED47F4.tmp
    Sun Feb 25 01:09:55 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\56F745E9.tmp
    Sun Feb 25 01:09:55 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\56F745E9.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:55 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\56FA6FE6.tmp
    Sun Feb 25 01:09:56 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\58EA1E05.tmp
    Sun Feb 25 01:09:56 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\58EA1E05.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:56 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\58FA6FF3.tmp
    Sun Feb 25 01:09:56 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\590D6BDD.tmp
    Sun Feb 25 01:09:56 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\590D6BDD.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:56 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\591769D3.tmp
    Sun Feb 25 01:09:56 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\592167C8.tmp
    Sun Feb 25 01:09:56 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\592167C8.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:56 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59283BC1.tmp
    Sun Feb 25 01:09:56 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\593E61A7.tmp
    Sun Feb 25 01:09:57 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\594B0999.tmp
    Sun Feb 25 01:09:57 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\594B0999.tmp infected by "Exploit.HTML.Iframe.FileDownload" Virus. Action Taken: File Renamed.

    Sun Feb 25 01:09:57 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5959318B.tmp
    Sun Feb 25 01:09:57 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5959318B.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:57 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\595C5B87.tmp
    Sun Feb 25 01:09:57 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59622F80.tmp
    Sun Feb 25 01:09:57 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59622F80.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:57 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5966597C.tmp
    Sun Feb 25 01:09:57 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59690379.tmp
    Sun Feb 25 01:09:57 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59690379.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:57 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\596C2D75.tmp
    Sun Feb 25 01:09:58 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59762B6A.tmp
    Sun Feb 25 01:09:58 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59762B6A.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:58 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59795567.tmp
    Sun Feb 25 01:09:58 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5983535C.tmp
    Sun Feb 25 01:09:58 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59A47738.tmp
    Sun Feb 25 01:09:58 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59A47738.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:58 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59B11F2A.tmp
    Sun Feb 25 01:09:58 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59B11F2A.tmp infected by "Exploit.HTML.Iframe.FileDownload" Virus. Action Taken: File Renamed.

    Sun Feb 25 01:09:58 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59B77322.tmp
    Sun Feb 25 01:09:58 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59B77322.tmp infected by "Exploit.HTML.Iframe.FileDownload" Virus. Action Taken: File Renamed.

    Sun Feb 25 01:09:58 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59BE471B.tmp
    Sun Feb 25 01:09:59 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59BE471B.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:59 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59C17118.tmp
    Sun Feb 25 01:09:59 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59CB6F0D.tmp
    Sun Feb 25 01:09:59 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59CB6F0D.tmp infected by "Exploit.HTML.Iframe.FileDownload" Virus. Action Taken: File Renamed.

    Sun Feb 25 01:09:59 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59D14306.tmp
    Sun Feb 25 01:09:59 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59D14306.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:09:59 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59D56D02.tmp
    Sun Feb 25 01:10:00 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59DA0001.tmp
    Sun Feb 25 01:10:00 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59DA0001.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:10:00 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59DB40FB.tmp
    Sun Feb 25 01:10:00 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59DB40FB.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:10:00 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59DE6AF7.tmp
    Sun Feb 25 01:10:00 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59E53EF0.tmp
    Sun Feb 25 01:10:00 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59EF3CE5.tmp
    Sun Feb 25 01:10:00 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\59EF3CE5.tmp infected by "Exploit.HTML.Iframe.FileDownload" Virus. Action Taken: File Renamed.

    Sun Feb 25 01:10:00 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5A144051.tmp
    Sun Feb 25 01:10:01 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5A144051.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:10:01 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5A3C6B95.tmp
    Sun Feb 25 01:10:01 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5A3C6B95.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:10:01 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5A912F37.tmp
    Sun Feb 25 01:10:01 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5ADC74E5.tmp
    Sun Feb 25 01:10:01 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5ADC74E5.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:10:01 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5B72003F.tmp
    Sun Feb 25 01:10:01 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5B72003F.tmp infected by "Email-Worm.Win32.NetSky.d" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:10:01 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5B7453D9.tmp
    Sun Feb 25 01:10:02 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5B7453D9.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:10:02 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5B777DD6.tmp
    Sun Feb 25 01:10:02 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5B777DD6.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:10:02 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5B7A27D2.tmp
    Sun Feb 25 01:10:02 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5B7A27D2.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:10:02 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5B7E51CE.tmp
    Sun Feb 25 01:10:03 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5B7E51CE.tmp infected by "Email-Worm.Win32.NetSky.q" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:10:03 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5B892626.tmp
    Sun Feb 25 01:10:03 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5B892626.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:10:03 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5BC16FE9.tmp
    Sun Feb 25 01:10:03 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5BD141D7.tmp
    Sun Feb 25 01:10:03 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5BD141D7.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:10:03 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5C0C3597.tmp
    Sun Feb 25 01:10:03 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5C0C3597.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:10:03 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5C365768.tmp
    Sun Feb 25 01:10:03 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5C365768.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:10:03 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5C9F16F5.tmp
    Sun Feb 25 01:10:03 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5C9F16F5.tmp infected by "Email-Worm.Win32.NetSky.aa" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:10:03 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5CA56AEE.tmp
    Sun Feb 25 01:10:04 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5D6A5C18.tmp
    Sun Feb 25 01:10:04 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5D6A5C18.tmp infected by "Email-Worm.Win32.Mydoom.l" Virus. Action Taken: File Deleted.

    Sun Feb 25 01:10:04 2007 => Scanning File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5D6D0615.tmp
    Sun Feb 25 01:10:04 2007 => File C:\Program Files\Norton SystemWorks\Norton AntiVirus\Quarantine\5D6D0615.tmp infected by "Email-Worm.Win32.Mydoom.l" Virus. Action Taken: File Deleted. <
    0
  18. did71 Messages postés 2187 Statut Contributeur sécurité 36
     
    bonjour,

    toutes les saletés sont contenues dans la quarantaine de norton, tu peux la vider!

    Ensuite repasse le scan bitdefender en ligne et poste le rapport!

    a+
    0
  19. regisabine Messages postés 56 Statut Membre 3
     
    salut did
    j'ai fais une erreur : j'ai ouvert une autre question avec le meme sujet et je m'en excuse aupres de toi qui m'a aidé depuis hier et aupres de tous les lecteurs.
    je viens de lancer bitdefend
    mais kaspersky en trouve toujours (testé ce matin) mais je ne suis pas arrivé à le lancer en mode sans échec
    a+
    0
  20. did71 Messages postés 2187 Statut Contributeur sécurité 36
     
    Salut,

    Pas grave, mais faut savoir que l'on a une vie en dehors de l'aide que l'on apporte sur les différents forums, je ne peux pas être 24h/24h devant mon PC!

    j'attends le rapport bitdefender!

    a+
    0
  21. regisabine Messages postés 56 Statut Membre 3
     
    salut
    désolé j'ai été long
    problème de déconnection adsl par free comme très souvent en soirée :((

    voici le rapport

    BitDefender Online Scanner

    Scan report generated at: Mon, Feb 26, 2007 - 13:20:08

    Scan path: A:\;C:\;D:\;E:\;F:\;

    Statistics

    Time

    01:17:30

    Files

    365796

    Folders

    4047

    Boot Sectors

    3

    Archives

    19400

    Packed Files

    36086

    Results

    Identified Viruses

    1

    Infected Files

    1

    Suspect Files

    0

    Warnings

    0

    Disinfected

    0

    Deleted Files

    1

    Engines Info

    Virus Definitions

    393526

    Engine build

    AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)

    Scan plugins

    14

    Archive plugins

    38

    Unpack plugins

    6

    E-mail plugins

    6

    System plugins

    1

    Scan Settings

    First Action

    Disinfect

    Second Action

    Delete

    Heuristics

    Yes

    Enable Warnings

    Yes

    Scanned Extensions

    *;

    Exclude Extensions

    Scan Emails

    Yes

    Scan Archives

    Yes

    Scan Packed

    Yes

    Scan Files

    Yes

    Scan Boot

    Yes

    Scanned File

    Status

    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\Infected\Inbox=>(message 7)=>[Subject: moin][Date: Wed, 26 Jan 2005 17:59:28 +0100]=>(MIME part)=>(base64)=>archstored:nothing_old_photos.doc.com

    Infected with: Win32.Netsky.C@mm.Damaged

    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\Infected\Inbox=>(message 7)=>[Subject: moin][Date: Wed, 26 Jan 2005 17:59:28 +0100]=>(MIME part)=>(base64)=>archstored:nothing_old_photos.doc.com

    Disinfection failed

    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\Infected\Inbox=>(message 7)=>[Subject: moin][Date: Wed, 26 Jan 2005 17:59:28 +0100]=>(MIME part)=>(base64)=>archstored:nothing_old_photos.doc.com

    Deleted

    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\Infected\Inbox=>(message 7)=>[Subject: moin][Date: Wed, 26 Jan 2005 17:59:28 +0100]=>(MIME part)=>(base64)

    Update failed

    pour info, j'ai relancé Karspersky AV control qui tourne en ce moment et qui a trouvé 95 occurences de virus
    cela expliquerait le très net ralentissemnent de mon pc

    a+
    0
  • 1
  • 2
  • 3

Discussions similaires

Tukif bloqué ? Solutions express !
Paparazzi -
bzh60 -

5 réponses