quelqu'un a -t-il une idee comment s'en débarasser...? je pense qu'il est lancé au départ de windows et aucun spywre n'y arrive ni meme mon symantec.. Merci

merci.. voici le rapport

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:00:30, on 17/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nslsvice.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Juniper Networks\Common Files\dsNcService.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\T-Online Business\Corporate Access\iPassPeriodicUpdateService.exe
c:\Tivoli\lcf\bin\w32-ix86\mrt\lcfd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\lotus\notes\ntmulti.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Symantec AntiVirus\SavRoam.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
c:\program files\lenovo\system update\suservice.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\TPHDEXLG.EXE
C:\WINDOWS\system32\TpKmpSVC.exe
C:\Tivoli\trip\trip.exe
C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
E:\Program Files Perso\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\wentxp.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\T-Online Business\Corporate Access\iPassPeriodicUpdateApp.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\TpShocks.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\Tivoli\lcf\bin\w32-ix86\mrt\lcfep.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\ThinkPad\UltraNav Wizard\UNavTray.EXE
C:\Program Files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe
C:\Program Files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe
C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\ThinkPad\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Symantec AntiVirus\VPC32.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
E:\Program Files Perso\Spy Sweeper\SpySweeperUI.exe
C:\Documents and Settings\gpau\Desktop\HiJackThis.exe
E:\Program Files Perso\Spy Sweeper\SSU.EXE

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 172.28.11.100:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.emhartglass.net;82.210.*;172.28.*;https://ssl.emhartglass.com;https://ssl2.emhartglass.com;<local>
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Inbox\ctbr.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7CD1509C-BC37-4F84-B33F-9492CB212A54} - (no file)
O2 - BHO: CmjBrowserHelperObject Object - {AC41D38F-B56D-40AD-94E0-B493D130C959} - C:\Program File perso\Mindjet\MindManager 6\Mm6InternetExplorer.dll
O2 - BHO: QXK Rhythm - {D4E26A3A-80E0-4467-B116-4F0DC4441C4A} - C:\WINDOWS\fvowketqxfo.dll
O3 - Toolbar: Barre d'outils &Inbox.com - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Inbox\ctbr.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
O3 - Toolbar: (no name) - {755F70ED-8112-4AEA-B77B-E11296C79DA7} - (no file)
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [lcfep] "c:\Tivoli\lcf\bin\w32-ix86\mrt\lcfep.exe" -x
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] "rundll32.exe" bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [TVT Scheduler Proxy] "C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [SpybotSD TeaTimer] "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: DskMgr.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Inbox Search - tbr:iemenu
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll
O9 - Extra button: Send to Mindjet MindManager - {531B9DC0-D8EE-4c76-A6EE-6C1E50569655} - C:\Program File perso\Mindjet\MindManager 6\Mm6InternetExplorer.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Software Installer - {D1A4DEBD-C2EE-449f-B9FB-E8409F9A0BC5} - C:\Program Files\Lenovo\PkgMgr\PkgMgr.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) - http://semchd01/iNotes6.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/window [...] 6575942747
O16 - DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} (JuniperSetupSP1 Control) - https://ssl.emhartglass.com/dana-ca [...] tupSP1.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30155.www3.hp.com/ediags/h [...] gh.cab?326
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = emhartglass.net
O17 - HKLM\Software\..\Telephony: DomainName = emhartglass.net
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = emhartglass.net
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = emhartglass.net
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Inbox\ctbr.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: WinCtrl32 - C:\WINDOWS\SYSTEM32\WinCtrl32.dll
O21 - SSODL: mpfanvqg - {F3B16CA7-3F61-4BFA-BBCE-319DFC977546} - C:\WINDOWS\mpfanvqg.dll
O21 - SSODL: vbksrofa - {B0D2B81D-9B7D-493D-A593-AF73BE10832D} - (no file)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Juniper Network Connect Service (dsNcService) - Juniper Networks - C:\Program Files\Juniper Networks\Common Files\dsNcService.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPassConnectEngine - iPass, Inc. - C:\Program Files\T-Online Business\Corporate Access\iPassConnectEngine.exe
O23 - Service: iPassPeriodicUpdateApp - iPass, Inc. - C:\Program Files\T-Online Business\Corporate Access\iPassPeriodicUpdateApp.exe
O23 - Service: iPassPeriodicUpdateService - iPass, Inc. - C:\Program Files\T-Online Business\Corporate Access\iPassPeriodicUpdateService.exe
O23 - Service: Tivoli Endpoint (lcfd) - Unknown owner - c:\Tivoli\lcf\bin\w32-ix86\mrt\lcfd.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Lotus Notes Single Logon - IBM Corp - C:\WINDOWS\system32\nslsvice.exe
O23 - Service: Multi-user Cleanup Service - IBM Corp - C:\lotus\notes\ntmulti.exe
O23 - Service: NetOp Helper ver. 7.65 (2004317) (NetOp Host for NT Service) - Danware Data A/S - C:\Program Files\Danware Data\NetOp Remote Control\HOST\NHOSTSVC.EXE
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: System Update (SUService) - Lenovo Group Limited - c:\program files\lenovo\system update\suservice.exe
O23 - Service: Software Distribution Updater (SwdisRestart) - Unknown owner - c:\Tivoli\lcf\dat\1\cache\lib\w32-ix86\swdres.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\System32\TPHDEXLG.EXE
O23 - Service: IBM KCU Service (TpKmpSVC) - Unknown owner - C:\WINDOWS\system32\TpKmpSVC.exe
O23 - Service: Tivoli Remote Execution Service (trip) - Unknown owner - CTivoli\trip\trip.exe
O23 - Service: TVT Scheduler - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - E:\Program Files Perso\Spy Sweeper\SpySweeper.exe
O23 - Service: WinEncrypt service (wencrservice) - WinEncrypt - C:\WINDOWS\SYSTEM32\wentxp.exe
O24 - Desktop Component 0: My Current Home Page - About:Home

--
End of file - 14866 bytes

merci voila le rapport..
SmitFraudFix v2.320

Scan done at 16:38:38.17, 17/04/2008
Run from E:\Telechargement provisoire\Clean utilities\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

ªªªªªªªªªªªªªªªªªªªªªªªª Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nslsvice.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Juniper Networks\Common Files\dsNcService.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\T-Online Business\Corporate Access\iPassPeriodicUpdateService.exe
c:\Tivoli\lcf\bin\w32-ix86\mrt\lcfd.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\lotus\notes\ntmulti.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Symantec AntiVirus\SavRoam.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
c:\program files\lenovo\system update\suservice.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\TPHDEXLG.EXE
C:\WINDOWS\system32\TpKmpSVC.exe
C:\Tivoli\trip\trip.exe
C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
E:\Program Files Perso\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\wentxp.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\T-Online Business\Corporate Access\iPassPeriodicUpdateApp.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\TpShocks.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\Tivoli\lcf\bin\w32-ix86\mrt\lcfep.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\ThinkPad\UltraNav Wizard\UNavTray.EXE
C:\Program Files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe
C:\Program Files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe
C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\ThinkPad\BLUETO~1\BTSTAC~1.EXE
E:\Program Files Perso\Spy Sweeper\SpySweeperUI.exe
E:\Program Files Perso\Spy Sweeper\SSU.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\Inbox\CToolbar.exe
c:\PROGRA~1\Inbox\CMail.exe
C:\WINDOWS\system32\cmd.exe

ªªªªªªªªªªªªªªªªªªªªªªªª hosts

hosts file corrupted !

127.0.0.1 www.legal-at-spybot.info
127.0.0.1 legal-at-spybot.info

ªªªªªªªªªªªªªªªªªªªªªªªª C:\


ªªªªªªªªªªªªªªªªªªªªªªªª C:\WINDOWS


ªªªªªªªªªªªªªªªªªªªªªªªª C:\WINDOWS\system


ªªªªªªªªªªªªªªªªªªªªªªªª C:\WINDOWS\Web


ªªªªªªªªªªªªªªªªªªªªªªªª C:\WINDOWS\system32


ªªªªªªªªªªªªªªªªªªªªªªªª C:\WINDOWS\system32\LogFiles


ªªªªªªªªªªªªªªªªªªªªªªªª C:\Documents and Settings\gpau


ªªªªªªªªªªªªªªªªªªªªªªªª C:\Documents and Settings\gpau\Application Data


ªªªªªªªªªªªªªªªªªªªªªªªª Start Menu


ªªªªªªªªªªªªªªªªªªªªªªªª C:\DOCUME~1\gpau\FAVORI~1


ªªªªªªªªªªªªªªªªªªªªªªªª Desktop


ªªªªªªªªªªªªªªªªªªªªªªªª C:\Program Files


ªªªªªªªªªªªªªªªªªªªªªªªª Corrupted keys


ªªªªªªªªªªªªªªªªªªªªªªªª Desktop Components

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"


ªªªªªªªªªªªªªªªªªªªªªªªª IEDFix
!!!Attention, following keys are not inevitably infected!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


ªªªªªªªªªªªªªªªªªªªªªªªª VACFix
!!!Attention, following keys are not inevitably infected!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
+--------------------------------------------------+
[!] Suspicious: fvowketqxfo.dll
BHO: QXK Rhythm - {D4E26A3A-80E0-4467-B116-4F0DC4441C4A}
TypeLib: {1FB0C65B-9C33-49E9-A15E-DACA3E7424B8}
Interface: {2EAF1221-F437-4DE5-B69B-1581E2A763F2}
Interface: {6130393E-F8F0-4E50-9F23-49341AF0630B}

[!] Suspicious: mpfanvqg.dll
SSODL: mpfanvqg - {F3B16CA7-3F61-4BFA-BBCE-319DFC977546}


ªªªªªªªªªªªªªªªªªªªªªªªª 404Fix
!!!Attention, following keys are not inevitably infected!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


ªªªªªªªªªªªªªªªªªªªªªªªª Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


ªªªªªªªªªªªªªªªªªªªªªªªª AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\\PROGRA~1\\Google\\GOOGLE~1\\GOEC62~1.DLL"
"LoadAppInit_DLLs"=dword:00000001


ªªªªªªªªªªªªªªªªªªªªªªªª Winlogon
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
"System"=""


ªªªªªªªªªªªªªªªªªªªªªªªª Rustock



ªªªªªªªªªªªªªªªªªªªªªªªª DNS

Description: Intel(R) PRO/Wireless 2200BG Network Connection - Packet Scheduler Miniport
DNS Server Search Order: 192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{3316BA47-D07E-444A-91DB-28A1D640F950}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{3316BA47-D07E-444A-91DB-28A1D640F950}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


ªªªªªªªªªªªªªªªªªªªªªªªª Scanning for wininet.dll infection


ªªªªªªªªªªªªªªªªªªªªªªªª End

Bonjour,XmichouX, avant de recevoir ta reponse j'ai malheuresement fais une betise et coché la case safe boot dans msconfig, parce que je ne savais pas quelle touche utiliser au boot de l'ordi. maintenant il démarre en mode "safe" mais je n'ai pas le mdp admin (pc de bureau).. je suis donc coincé a moins que tu n'ai ne solution pour acceder et desactiver l'option dans msconfig a partir d'une ligne de commande...et comment l'obtenir, cette ligne..?

et le hihjack
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:18:34, on 19.04.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\explorer.exe
E:\Telechargement provisoire\Clean utilities\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 62.185.246.242:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 62.185.*;*emhartglass.net;<local>
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Inbox\ctbr.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7CD1509C-BC37-4F84-B33F-9492CB212A54} - (no file)
O2 - BHO: CmjBrowserHelperObject Object - {AC41D38F-B56D-40AD-94E0-B493D130C959} - C:\Program File perso\Mindjet\MindManager 6\Mm6InternetExplorer.dll
O3 - Toolbar: Barre d'outils &Inbox.com - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Inbox\ctbr.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
O3 - Toolbar: (no name) - {755F70ED-8112-4AEA-B77B-E11296C79DA7} - (no file)
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [lcfep] "c:\Tivoli\lcf\bin\w32-ix86\mrt\lcfep.exe" -x
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] "rundll32.exe" bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [TVT Scheduler Proxy] "C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll
O9 - Extra button: Send to Mindjet MindManager - {531B9DC0-D8EE-4c76-A6EE-6C1E50569655} - C:\Program File perso\Mindjet\MindManager 6\Mm6InternetExplorer.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Software Installer - {D1A4DEBD-C2EE-449f-B9FB-E8409F9A0BC5} - C:\Program Files\Lenovo\PkgMgr\PkgMgr.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) - http://semchd01/iNotes6.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/window [...] 6575942747
O16 - DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B} (JuniperSetupSP1 Control) - https://ssl.emhartglass.com/dana-ca [...] tupSP1.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30155.www3.hp.com/ediags/h [...] gh.cab?326
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = emhartglass.net
O17 - HKLM\Software\..\Telephony: DomainName = emhartglass.net
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = emhartglass.net
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = emhartglass.net
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = emhartglass.net
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Inbox\ctbr.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: WinCtrl32 - C:\WINDOWS\SYSTEM32\WinCtrl32.dll
O21 - SSODL: vbksrofa - {B0D2B81D-9B7D-493D-A593-AF73BE10832D} - (no file)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Juniper Network Connect Service (dsNcService) - Juniper Networks - C:\Program Files\Juniper Networks\Common Files\dsNcService.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPassConnectEngine - iPass, Inc. - C:\Program Files\T-Online Business\Corporate Access\iPassConnectEngine.exe
O23 - Service: iPassPeriodicUpdateApp - iPass, Inc. - C:\Program Files\T-Online Business\Corporate Access\iPassPeriodicUpdateApp.exe
O23 - Service: iPassPeriodicUpdateService - iPass, Inc. - C:\Program Files\T-Online Business\Corporate Access\iPassPeriodicUpdateService.exe
O23 - Service: Tivoli Endpoint (lcfd) - Unknown owner - c:\Tivoli\lcf\bin\w32-ix86\mrt\lcfd.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Lotus Notes Single Logon - IBM Corp - C:\WINDOWS\system32\nslsvice.exe
O23 - Service: Multi-user Cleanup Service - IBM Corp - C:\lotus\notes\ntmulti.exe
O23 - Service: NetOp Helper ver. 7.65 (2004317) (NetOp Host for NT Service) - Danware Data A/S - C:\Program Files\Danware Data\NetOp Remote Control\HOST\NHOSTSVC.EXE
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: System Update (SUService) - Lenovo Group Limited - c:\program files\lenovo\system update\suservice.exe
O23 - Service: Software Distribution Updater (SwdisRestart) - Unknown owner - c:\Tivoli\lcf\dat\1\cache\lib\w32-ix86\swdres.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\System32\TPHDEXLG.EXE
O23 - Service: IBM KCU Service (TpKmpSVC) - Unknown owner - C:\WINDOWS\system32\TpKmpSVC.exe
O23 - Service: Tivoli Remote Execution Service (trip) - Unknown owner - CTivoli\trip\trip.exe
O23 - Service: TVT Scheduler - Lenovo Group Limited - C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - E:\Program Files Perso\Spy Sweeper\SpySweeper.exe
O23 - Service: WinEncrypt service (wencrservice) - WinEncrypt - C:\WINDOWS\SYSTEM32\wentxp.exe

--
End of file - 11439 bytes

Mon antivirus trouve toujours un TROJAN PANDEX...

et aussi le ficheir precedent smitfraudfix a été tronqué quand je l'ai copié, il se termine par ceci :

127.0.0.1 www.z-quest.com
127.0.0.1 www.zsupereva.it
127.0.0.1 zsupereva.it
127.0.0.1 www.zsvcompany.com
127.0.0.1 zsvcompany.com
127.0.0.1 zurrusco.com
127.0.0.1 www.zurrusco.com
127.0.0.1 zvimigdal.com
127.0.0.1 www.zxcsolution.com
127.0.0.1 zxcsolution.com
127.0.0.1 zxlinks.com
127.0.0.1 www.zxlinks.com
127.0.0.1 zyban-zocor-levitra.com

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
C:\WINDOWS\fvowketqxfo.dll deleted.
C:\WINDOWS\mpfanvqg.dll deleted.


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files


»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CS1\Services\Tcpip\..\{3316BA47-D07E-444A-91DB-28A1D640F950}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» End

Merci Eric, je commençais à m'impatienter un peu
voici le rapport demandé

Malwarebytes' Anti-Malware 1.12
Database version: 768

Scan type: Full Scan (C:\|)
Objects scanned: 103311
Time elapsed: 1 hour(s), 28 minute(s), 46 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 4
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 6

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
C:\WINDOWS\system32\WinCtrl32.dll (Trojan.Agent) -> Unloaded module successfully.

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winctrl32 (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\affri (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\vbksrofa (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\dqbfmwep.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\pewmfbqd.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\blackster.scr (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\WinCtrl32.dll (Trojan.Agent) -> Delete on reboot.
C:\WINDOWS\system32\pmnnNghe.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\oadkxrts.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

J'attends la suite, et merci encore

le programme me retourne date error check your settings..?

Eric ?
Bon je considère que c'est clean ?

merci Eric voici le rapport..

ComboFix 08-05-19.4 - gpau 2008-05-21 6:47:38.2 - NTFSx86
Running from: C:\Documents and Settings\gpau\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\gpau\Desktop\CFScript.txt
* Created a new restore point

[color=red]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/color]

FILE ::
C:\DelUS.bat
C:\WINDOWS\epfg.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\DelUS.bat
C:\WINDOWS\epfg.exe

.
((((((((((((((((((((((((( Files Created from 2008-04-21 to 2008-05-21 )))))))))))))))))))))))))))))))
.

2008-05-16 13:53 . 2008-05-16 13:53 <DIR> d-------- C:\Program Files\CCleaner
2008-05-16 10:43 . 2008-05-16 10:43 <DIR> d-------- C:\Program Files\CleanUp!
2008-05-15 18:51 . 2008-05-16 14:15 <DIR> d-------- C:\Documents and Settings\gpau\Application Data\TmpRecentIcons
2008-05-15 18:02 . 2008-05-15 18:03 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
2008-05-15 18:01 . 2008-05-15 17:55 691,545 --a------ C:\WINDOWS\unins000.exe
2008-05-15 18:01 . 2008-05-15 18:01 2,540 --a------ C:\WINDOWS\unins000.dat
2008-05-02 21:16 . 2008-05-02 21:16 <DIR> d-------- C:\Documents and Settings\gpau\Application Data\Nokia Multimedia Player
2008-04-22 08:50 . 2008-04-22 08:50 0 --ah----- C:\Documents and Settings\NetworkService\NTUSER.DAT_TU_35901.LOG
2008-04-22 08:50 . 2008-04-22 08:50 0 --ah----- C:\Documents and Settings\LocalService\NTUSER.DAT_TU_41534.LOG
2008-04-22 08:50 . 2008-04-22 08:50 0 --ah----- C:\Documents and Settings\gpau\ntuser.dat_TU_35730.LOG

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-21 04:54 --------- d-----w C:\Program Files\Symantec AntiVirus
2008-05-20 17:54 --------- d-----w C:\Program Files\Inbox
2008-05-20 13:32 --------- d-----w C:\Documents and Settings\gpau\Application Data\Juniper Networks
2008-05-14 18:05 --------- d-----w C:\Documents and Settings\gpau\Application Data\U3
2008-05-14 16:48 --------- d-----w C:\Documents and Settings\gpau\Application Data\PC Suite
2008-05-07 05:51 --------- d-----w C:\Documents and Settings\gpau\Application Data\AdobeUM
2008-05-05 18:46 27,048 ----a-w C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-05-05 18:46 15,864 ----a-w C:\WINDOWS\system32\drivers\mbam.sys
2008-05-05 18:05 --------- d-----w C:\Program Files\Corel
2008-04-20 08:22 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-04-20 05:50 --------- d-----w C:\Documents and Settings\Administrator\Application Data\Malwarebytes
2008-04-20 05:42 --------- d-----w C:\Documents and Settings\gpau\Application Data\Malwarebytes
2008-04-20 05:42 --------- d-----w C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-04-19 13:57 --------- d-----w C:\Documents and Settings\gpau\Application Data\PC Tools
2008-04-19 10:28 --------- d-----w C:\Documents and Settings\NetworkService\Application Data\Webroot
2008-04-19 10:22 --------- d-----w C:\Documents and Settings\Administrator\Application Data\Webroot
2008-04-19 09:38 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-04-16 13:52 --------- d-----w C:\Documents and Settings\LocalService\Application Data\Webroot
2008-04-16 13:51 --------- d-----w C:\Documents and Settings\gpau\Application Data\Webroot
2008-04-16 13:51 --------- d-----w C:\Documents and Settings\All Users\Application Data\Webroot
2008-04-15 09:00 --------- d-----w C:\Documents and Settings\All Users\Application Data\TechSmith
2008-04-15 08:59 --------- d-----w C:\Program Files\TechSmith
2008-04-15 08:58 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-04-14 19:40 --------- d-----w C:\Program Files\Common Files\Download Manager
2008-04-10 13:36 --------- d-----w C:\Program Files\Nokia
2008-04-10 13:36 --------- d-----w C:\Program Files\Common Files\PCSuite
2008-04-10 13:36 --------- d-----w C:\Program Files\Common Files\Nokia
2008-04-07 16:36 --------- d-----w C:\Documents and Settings\gpau\Application Data\Windows Desktop Search
2008-04-07 16:28 --------- d-----w C:\Program Files\Windows Desktop Search
2008-04-04 13:32 --------- d-----w C:\Program Files\gMigrate
2008-03-25 07:33 --------- d-----w C:\Program Files\HP
2008-03-25 07:33 --------- d-----w C:\Documents and Settings\All Users\Application Data\HP Product Assistant
2008-03-25 07:33 --------- d-----w C:\Documents and Settings\All Users\Application Data\HP
2008-01-27 10:28 2,566,144 ----a-w C:\Program Files\NXPowerLite30_5.msi
2005-11-04 17:15 1,228,800 ----a-w C:\Program Files\Common Files\vfp9rfra.dll
2005-11-04 17:13 4,722,688 ----a-w C:\Program Files\Common Files\vfp9r.dll
2005-11-04 17:13 3,891,200 ----a-w C:\Program Files\Common Files\vfp9t.dll
2005-11-04 16:44 1,187,840 ----a-w C:\Program Files\Common Files\VFP9RENU.DLL
2001-09-06 06:00 1,700,352 ----a-w C:\Program Files\Common Files\gdiplus.dll
2006-06-23 11:35 56 --sh--r C:\WINDOWS\system32\7D89E56B62.sys
2006-07-31 17:23 1,056 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((( snapshot@2008-05-20_14.05.25.46 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-05-20 11:58:24 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-05-21 04:53:10 2,048 --s-a-w C:\WINDOWS\bootstat.dat
- 2008-04-05 20:56:22 19,836,024 ----a-w C:\WINDOWS\system32\MRT.exe
+ 2008-05-09 21:35:04 16,863,864 ----a-w C:\WINDOWS\system32\MRT.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7CD1509C-BC37-4F84-B33F-9492CB212A54}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"updateMgr"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 17:45 313472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2006-01-21 21:00 344064]
"TPHOTKEY"="C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe" [2006-10-02 10:19 94208]
"TP4EX"="tp4ex.exe" [2005-10-17 01:11 65536 C:\WINDOWS\system32\TP4EX.exe]
"PWRMGRTR"="C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL" [2005-12-07 01:12 151552]
"SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2005-09-15 15:57 110592]
"TpShocks"="TpShocks.exe" [2005-11-07 11:14 106496 C:\WINDOWS\system32\TpShocks.exe]
"EZEJMNAP"="C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe" [2005-11-17 02:22 237568]
"lcfep"="c:\Tivoli\lcf\bin\w32-ix86\mrt\lcfep.exe" [2008-04-16 15:39 270336]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 02:11 132496]
"BluetoothAuthenticationAgent"="rundll32.exe" [2004-08-04 14:00 33280 C:\WINDOWS\system32\rundll32.exe]
"TVT Scheduler Proxy"="C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe" [2007-08-01 12:07 540672]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 14:00 15360]
"Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-11-07 17:35 1294336]

C:\Documents and Settings\gpau\Start Menu\Programs\Startup\
DskMgr.exe [2007-09-10 15:21:02 122880]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Bluetooth.lnk - C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe [2005-11-01 15:10:32 581693]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2007-02-05 15:39 294400]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tpfnf2]
notifyf2.dll 2005-07-05 23:45 28672 C:\WINDOWS\system32\notifyf2.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tphotkey]
tphklock.dll 2005-11-30 20:16 24576 C:\WINDOWS\system32\tphklock.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WinCtrl32]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 TivoliAP

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\Machine\Scripts\Startup\0\0]
"Script"=WW_AddWW_Admins.vbs

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\Machine\Scripts\Startup\1\0]
"Script"=ChangePassw.vbs

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2025429265-220523388-682003330-1780\Scripts\Logon\0\0]
"Script"=TemplatesV3.bat

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2025429265-220523388-682003330-1780\Scripts\Logon\1\0]
"Script"=CH_ZipMail.bat

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2025429265-220523388-682003330-1780\Scripts\Logon\2\0]
"Script"=CH_Sales.bat

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2025429265-220523388-682003330-1780\Scripts\Logon\3\0]
"Script"=CH_CSA.bat

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2025429265-220523388-682003330-1780\Scripts\Logon\4\0]
"Script"=CreateTransfer.vbs

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2025429265-220523388-682003330-26752\Scripts\Logon\0\0]
"Script"=CH_ZipMail.bat

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2025429265-220523388-682003330-26752\Scripts\Logon\1\0]
"Script"=CH_RunTwixUpdate.bat

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2025429265-220523388-682003330-26752\Scripts\Logon\2\0]
"Script"=Templates.bat

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2025429265-220523388-682003330-26752\Scripts\Logon\3\0]
"Script"=CH_IT.bat

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2025429265-220523388-682003330-26752\Scripts\Logon\4\0]
"Script"=Templates.bat

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ahM28.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ahn30.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ciO85.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Cjq41.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\flQ17.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\flR20.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Flr64.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hoU06.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ipu41.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ipW05.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Jpw06.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Jqx30.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Krx28.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ksx31.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lrx51.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lsx38.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\lsY41.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msY28.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msY41.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\muD32.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Nta17.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ouC30.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\qwD27.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ryF53.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sxE85.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Syf41.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Tbh53.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Vdj63.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdj74.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\weL42.sys]
@="Driver"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
"pdfSaver3"="C:\Program Files\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe"
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe
"updateMgr"=C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
"PC Suite Tray"="C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray
"CrawlerMail"="c:\progra~1\inbox\cmail.exe" /startup
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SSBkgdUpdate"="C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
"PaperPort PTD"=C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
"IndexSearch"=C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
"SwdisUsrPCN.chn050"="c:\Tivoli\lcf\dat\1\cache\lib\w32-ix86\wdusrpcn.exe" "c:\Tivoli\swdis\1\wdusrpcn.env"
"BLOG"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
"TPKMAPHELPER"=C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper
"GoBoingo"=C:\Program Files\Boingo\GoBoingo\GoBoingo.exe
"SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
"ISTray"="C:\Program File perso\Spyware Doctor\pctsTray.exe"
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
"vptray"=C:\PROGRA~1\SYMANT~1\VPTray.exe
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Danware Data\\NetOp Remote Control\\HOST\\Nhstw32.exe"=
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"= C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"C:\Program Files\Microsoft ActiveSync\wcescomm.exe"= C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"= C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"C:\\Program Files\\devolo\\informer\\devinf.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"C:\\Tivoli\\lcf\\bin\\w32-ix86\\mrt\\lcfd.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

R0 Shockprf;Shockprf;C:\WINDOWS\system32\drivers\Shockprf.sys [2005-11-30 15:58]
R0 TPDiskPM;TPDiskPM;C:\WINDOWS\system32\drivers\TPDiskPM.sys [2006-09-26 14:13]
R1 NHostNT1;NetOp Driver 1 ver. 7.65 (2004317);C:\WINDOWS\system32\Drivers\NHOSTNT1.SYS [2004-11-12 07:59]
R1 ShockMgr;ShockMgr;C:\WINDOWS\system32\drivers\ShockMgr.sys [2005-06-20 12:18]
R1 TPPWRIF;TPPWRIF;C:\WINDOWS\system32\drivers\Tppwrif.sys [2005-12-07 01:12]
R2 HPSLPSVC;HP Network Devices Support;C:\WINDOWS\system32\svchost.exe [2004-08-04 14:00]
R2 lcfd;Tivoli Endpoint;"c:\Tivoli\lcf\bin\w32-ix86\mrt\lcfd.exe" [2008-04-16 15:39]
R2 NetOp Host for NT Service;NetOp Helper ver. 7.65 (2004317);"C:\Program Files\Danware Data\NetOp Remote Control\HOST\NHOSTSVC.EXE" [2004-11-12 07:59]
R2 UxTuneUp;Extension de conception TuneUp;C:\WINDOWS\System32\svchost.exe [2004-08-04 14:00]
R2 WENCRNT4;WENCRNT4;C:\WINDOWS\system32\Drivers\WENCRNT4.SYS [2006-05-04 23:12]
R3 dsNcAdpt;Juniper Network Connect Adapter;C:\WINDOWS\system32\DRIVERS\dsNcAdpt.sys [2007-04-11 01:05]
R3 NHOSTNT3;NetOp Driver 3 ver. 7.65 (2004317) (NHOSTNT3);C:\WINDOWS\system32\Drivers\NHOSTNT3.SYS [2004-11-12 07:59]
R3 TPInput;TPInput;C:\WINDOWS\system32\DRIVERS\TPInput.sys [2006-09-26 14:13]
R3 TPM11;NSC Integrated Trusted Platform Module 1.1;C:\WINDOWS\system32\DRIVERS\nsctpm11.sys [2005-04-21 18:44]
S0 Krx28;Krx28;C:\WINDOWS\system32\Drivers\Krx28.sys []
S0 Vdj63;Vdj63;C:\WINDOWS\system32\Drivers\Vdj63.sys []
S2 SwdisRestart;Software Distribution Updater;c:\Tivoli\lcf\dat\1\cache\lib\w32-ix86\swdres.exe [2006-11-29 12:59]
S3 avpnnic;AGN Virtual Network Adapter;C:\WINDOWS\system32\DRIVERS\avpnnic.sys [2003-04-04 12:48]
S3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\Drivers\BrScnUsb.sys [2004-10-15 12:50]
S3 MBAMCatchMe;MBAMCatchMe;C:\WINDOWS\system32\drivers\mbamcatchme.sys [2008-05-05 20:46]
S3 P1130VID;Creative WebCam NX Pro;C:\WINDOWS\system32\DRIVERS\P1130Vid.sys [2003-06-11 16:00]
S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2006-06-06 16:22]
S3 PLCMPR5;PLCMPR5 NDIS Protocol Driver;C:\WINDOWS\system32\PLCMPR5.SYS []
S3 PLCNDIS5;PLCNDIS5 NDIS Protocol Driver;C:\WINDOWS\system32\PLCNDIS5.SYS [2004-04-26 19:11]
S3 USB28xxBGA;PCTV Hybrid Pro* Stick;C:\WINDOWS\system32\DRIVERS\emBDA.sys [2006-02-08 14:12]
S3 USB28xxOEM;USB 28xx OEM Filter;C:\WINDOWS\system32\DRIVERS\emOEM.sys [2006-02-08 14:12]
S3 ZSMC302;Q-CAM;C:\WINDOWS\system32\Drivers\usbvm302.sys [2004-01-07 15:22]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
HPService REG_MULTI_SZ HPSLPSVC

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{634f31bb-20b9-11dd-8f44-0014a4ddee22}]
\Shell\AutoRun\command - E:\PortableApps\PortableAppsMenu\PortableAppsMenu.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{634f31f3-20b9-11dd-8f44-0014a4ddee22}]
\Shell\AutoRun\command - E:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{83f13647-da6c-11dc-9c4c-00166f050601}]
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL CD_Start.exe

.
Contents of the 'Scheduled Tasks' folder
"2008-04-18 15:17:32 C:\WINDOWS\Tasks\Maintenance en 1 clic.job"
- C:\Program File perso\TuneUp Utilities 2006\SystemOptimizer.exe
"2006-06-25 07:15:49 C:\WINDOWS\Tasks\PMCS_Wakeup632868237493750000.job"
- C:\Program Files\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe
"2008-05-21 08:02:39 C:\WINDOWS\Tasks\PMTask.job"
- C:\PROGRA~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-21 09:57:02
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\trip]
"ImagePath"="CTivoli\trip\trip.exe"

[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\trip]
"ImagePath"="CTivoli\trip\trip.exe"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\WINDOWS\system32\winlogon.exe
-> C:\WINDOWS\system32\tphklock.dll
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\nslsvice.exe
C:\WINDOWS\system32\nsl.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\brss01a.exe
C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Juniper Networks\Common Files\dsNcService.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\T-Online Business\Corporate Access\iPassPeriodicUpdateService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\lotus\notes\ntmulti.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Symantec AntiVirus\SavRoam.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Lenovo\System Update\SUService.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\system32\TPHDEXLG.exe
C:\WINDOWS\system32\TpKmpSvc.exe
C:\Tivoli\trip\trip.exe
C:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
C:\WINDOWS\system32\wentxp.exe
C:\WINDOWS\system32\searchindexer.exe
C:\Program Files\T-Online Business\Corporate Access\iPassPeriodicUpdateApp.exe
C:\Program Files\Danware Data\NetOp Remote Control\HOST\NLDRW32.EXE
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe
C:\Program Files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe
.
**************************************************************************
.
Completion time: 2008-05-21 10:04:38 - machine was rebooted
ComboFix-quarantined-files.txt 2008-05-21 08:03:25
ComboFix2.txt 2008-05-20 12:06:06

Pre-Run: 85,061,287,936 bytes free
Post-Run: 85,031,690,240 bytes free

355 --- E O F --- 2008-05-20 12:09:32

Tu étais bien infecté , on va quand même faire une dernière vérif ,

Télécharge ToolsCleaner2 < ici

Installe le sur ton Bureau
Clique sur [Recherche] pour lancer le scan
Clique sur [Supprimer] pour nettoyer les outils utilisés

----------------------------------------------------

Fais un scan en ligne Kaspersky < ici avec Internet Explorer !

Clique sur Demarrer Online-Scanner ( en bas à droite )
Clique sur J'accepte , si necessaire valide l'installation des ActiveX
laisse installer les Mises à jour , choisis l'analyse du Poste de travail

à la fin de l'analyse , Sauvegarde le rapport puis colle le dans ta réponse

Si tu vois ce message : La licence de Kaspersky On-line Scanner est périmée
vas dans Ajout / Suppression de programmes et désinstalle On-Line Scanner
retourne sur le site et retente le scan

Bonjour Eric,
Voilà le rapport Kapersky dis moi vite l'étape suivante, je dois partir a l'etranger pour la semaine

KASPERSKY ON-LINE SCANNER REPORT
Saturday, May 24, 2008 2:52:37 PM
Système d'exploitation : Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version : 5.0.83.0
Dernière mise à jour de la base antivirus Kaspersky : 24/05/2008
Enregistrements dans la base antivirus Kaspersky : 712714
-------------------------------------------------------------------------------

Paramètres d'analyse:
Analyser avec la base antivirus suivante: standard
Analyser les archives: vrai
Analyser les bases de messagerie: vrai

Cible de l'analyse - Poste de travail:
C:\
D:\
I:\
J:\
K:\
N:\
Z:\

Statistiques de l'analyse:
Total d'objets analysés: 66698
Nombre de virus trouvés: 9
Nombre d'objets infectés: 165 / 0
Nombre d'objets suspects: 0
Durée de l'analyse: 01:18:18

Nom de l'objet infecté / Nom du virus / Dernière action
C:\Data\@GLASS\PALITHA (F)\autorun.inf Infecté : Worm.Win32.Small.i ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.52.Crwl L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.52.gthr L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\MSS.log L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010001.ci L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010001.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010001.wsb L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010002.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010003.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010004.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010005.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010009.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001000F.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010011.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010012.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010013.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010014.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010015.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010016.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010018.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001001C.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001001D.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010020.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010022.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001002A.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001004D.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\0001004E.wid L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\INDEX.000 L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\CiPT0000.000 L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\Used0000.000 L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\CiST0000.000 L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SystemIndex.chk1.gthr L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SystemIndex.chk2.gthr L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SystemIndex.Ntfy42.gthr L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\tmp.edb L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Applications\Windows\Windows.edb L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Temp\usgthrsvc\Ntf1.tmp L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Temp\usgthrsvc\Ntf2.tmp L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Microsoft\Search\Data\Temp\usgthrsvc\Perflib_Perfdata_4c0.dat L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat L'objet est verrouillé ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\00EC0000.VBN Infecté : Trojan-Downloader.Win32.Agent.lxa ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01100000\493D5189.VBN Infecté : Trojan-Downloader.Win32.Agent.lxa ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\01C00000\49C99E34.VBN Infecté : Trojan-Dropper.Win32.Agent.ror ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\02B40000\4AB60678.VBN Infecté : Trojan-Dropper.Win32.Agent.ror ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\02B40001\4AB60715.VBN Infecté : Trojan-Downloader.Win32.Agent.lxa ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\03C00000.VBN Infecté : Trojan-Dropper.Win32.Agent.ror ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\03DC0000\4BFD3584.VBN Infecté : Trojan-Downloader.Win32.Agent.lxa ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\055C0000\4D7D4BAB.VBN Infecté : Trojan-Downloader.Win32.Agent.lxa ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06740000\4E771498.VBN Infecté : Trojan-Dropper.Win32.Agent.ror ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\06A80000\4EA9A3D0.VBN Infecté : Trojan-Dropper.Win32.Agent.ror ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\080C0000\480E46FA.VBN Infecté : Trojan-Dropper.Win32.Agent.ror ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\08A80000\48AD754F.VBN Infecté : Trojan-Downloader.Win32.Agent.lxa ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\09280000\4929A294.VBN Infecté : Trojan-Dropper.Win32.Agent.ror ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0B340000\4B3626D3.VBN Infecté : Trojan-Dropper.Win32.Agent.ror ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0B700000\4B7D491E.VBN Infecté : Trojan-Downloader.Win32.Agent.lxa ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0BC00000\4BED4EEF.VBN Infecté : Trojan-Downloader.Win32.Agent.lxa ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C180000.VBN Infecté : Trojan-Downloader.Win32.Agent.lxa ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C280000\4C2D6C4F.VBN Infecté : Trojan-Downloader.Win32.Agent.lxa ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C2C0000.VBN Infecté : Trojan-Dropper.Win32.Agent.ror ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C2C0001\4C2E0018.VBN Infecté : Trojan-Dropper.Win32.Agent.ror ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0E180000\4E3C5B88.VBN Infecté : Trojan-Downloader.Win32.Agent.lxa ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0E1C0000\4E3D5871.VBN Infecté : Trojan-Downloader.Win32.Agent.lxa ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0E3C0000\4E3F067F.VBN Infecté : Trojan-Dropper.Win32.Agent.ror ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0E880000\4E89FE02.VBN Infecté : Trojan-Dropper.Win32.Agent.ror ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0EBC0000\4EBDF879.VBN Infecté : Trojan-Dropper.Win32.Agent.ror ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0EC40000\4EED5A64.VBN Infecté : Trojan-Downloader.Win32.Agent.lxa ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0F580000\4F59E227.VBN Infecté : Trojan-Dropper.Win32.Agent.ror ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0F840000\4F870877.VBN Infecté : Trojan-Dropper.Win32.Agent.ror ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0FA00000\4FA64878.VBN Infecté : Trojan-Dropper.Win32.Agent.ror ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40003.VBN/[From Netclub <news@netclub.com>][Date Fri, 14 Jan 2005 03:31:38 -0500 (EST)]/html/[From Doctor <mathog@cienciaficcion.com>][Date Fri, 14 Oct 2005 08:36:24 -0400]/UNNAMED/[From <ramonitanedd@bigsecret.com>][Date Fri, 21 Oct 2005 13:41:06 -0100]/text/[From "Adrienne Owens" <sequoia.kemble4cc3@gmail.com>][Date Tue, 1 Nov 2005 18:38:08 +0000]/text/[From "Tradecom" <tradecom@wanadoo.es>][Date Wed, 02 Nov 2005 11:29:41 -0500]/UNNAMED Infecté : Email-Worm.Win32.Bagle.eb ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40003.VBN/[From Netclub <news@netclub.com>][Date Fri, 14 Jan 2005 03:31:38 -0500 (EST)]/html/[From Doctor <mathog@cienciaficcion.com>][Date Fri, 14 Oct 2005 08:36:24 -0400]/UNNAMED/[From <ramonitanedd@bigsecret.com>][Date Fri, 21 Oct 2005 13:41:06 -0100]/text/[From "Adrienne Owens" <sequoia.kemble4cc3@gmail.com>][Date Tue, 1 Nov 2005 18:38:08 +0000]/text Infecté : Email-Worm.Win32.Bagle.eb ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40003.VBN/[From Netclub <news@netclub.com>][Date Fri, 14 Jan 2005 03:31:38 -0500 (EST)]/html/[From Doctor <mathog@cienciaficcion.com>][Date Fri, 14 Oct 2005 08:36:24 -0400]/UNNAMED/[From <ramonitanedd@bigsecret.com>][Date Fri, 21 Oct 2005 13:41:06 -0100]/text Infecté : Email-Worm.Win32.Bagle.eb ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40003.VBN/[From Netclub <news@netclub.com>][Date Fri, 14 Jan 2005 03:31:38 -0500 (EST)]/html/[From Doctor <mathog@cienciaficcion.com>][Date Fri, 14 Oct 2005 08:36:24 -0400]/UNNAMED Infecté : Email-Worm.Win32.Bagle.eb ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40003.VBN/[From Netclub <news@netclub.com>][Date Fri, 14 Jan 2005 03:31:38 -0500 (EST)]/html Infecté : Email-Worm.Win32.Bagle.eb ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40003.VBN MailBerkeleymboxx: infecté - 5 ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40003.VBN CryptZ: infecté - 5 ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40004.VBN/[From "Mika Salonen" <software@mikasalonen.com>][Date Fri, 7 Jan 2005 04:25:07 +0200]/text/[From "Jenifer" <mysticvalleyfarm@yahoo.com>][Date Sat, 08 Jan 2005 17:35:15 +0000]/my_details.pif Infecté : Email-Worm.Win32.NetSky.d ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40004.VBN/[From "Mika Salonen" <software@mikasalonen.com>][Date Fri, 7 Jan 2005 04:25:07 +0200]/text/[From "Marceline" <sales@3koenige.com>][Date Mon, 10 Jan 2005 06:47:19 +0000]/html/[From "Dorcas" <sales@paddleducks.com>][Date Wed, 12 Jan 2005 18:23:03 +0000]/html/[From "Edmundo" <missiamrericianbreiauty@yiahoo.com>][Date Wed, 12 Jan 2005 22:14:12 +0000]/your_picture.pif Infecté : Email-Worm.Win32.NetSky.d ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40004.VBN/[From "Mika Salonen" <software@mikasalonen.com>][Date Fri, 7 Jan 2005 04:25:07 +0200]/text/[From "Marceline" <sales@3koenige.com>][Date Mon, 10 Jan 2005 06:47:19 +0000]/html/[From "Dorcas" <sales@paddleducks.com>][Date Wed, 12 Jan 2005 18:23:03 +0000]/html/[From "Hayley" <pentongc@cnnet.com.au>][Date Sat, 15 Jan 2005 17:39:02 +0000]/html/[From infodeia@deia.com][Date Tue, 18 Jan 2005 21:03:22 +0100]/your_letter.pif Infecté : Email-Worm.Win32.NetSky.d ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40004.VBN/[From "Mika Salonen" <software@mikasalonen.com>][Date Fri, 7 Jan 2005 04:25:07 +0200]/text/[From "Marceline" <sales@3koenige.com>][Date Mon, 10 Jan 2005 06:47:19 +0000]/html/[From "Dorcas" <sales@paddleducks.com>][Date Wed, 12 Jan 2005 18:23:03 +0000]/html/[From "Hayley" <pentongc@cnnet.com.au>][Date Sat, 15 Jan 2005 17:39:02 +0000]/html/[From "eBay" <eBay@reply.ebay.com>][Date Wed, 19 Jan 2005 02:03:27 -0800]/UNNAMED/[From mailing@solypresse.com][Date 28 Jan 2005 12:37:57 -0000]/yours.pif Infecté : Email-Worm.Win32.NetSky.d ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40004.VBN/[From "Mika Salonen" <software@mikasalonen.com>][Date Fri, 7 Jan 2005 04:25:07 +0200]/text/[From "Marceline" <sales@3koenige.com>][Date Mon, 10 Jan 2005 06:47:19 +0000]/html/[From "Dorcas" <sales@paddleducks.com>][Date Wed, 12 Jan 2005 18:23:03 +0000]/html/[From "Hayley" <pentongc@cnnet.com.au>][Date Sat, 15 Jan 2005 17:39:02 +0000]/html/[From "eBay" <eBay@reply.ebay.com>][Date Wed, 19 Jan 2 ... ... /[From mailing@aquarelle.com][Date Tue, 1 Feb 2005 12:50:52 +0100 (MET)]/your_picture.pif Infecté : Email-Worm.Win32.NetSky.d ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40004.VBN/[From "Mika Salonen" <software@mikasalonen.com>][Date Fri, 7 Jan 2005 04:25:07 +0200]/text/[From "Marceline" <sales@3koenige.com>][Date Mon, 10 Jan 2005 06:47:19 +0000]/html/[From "Dorcas" <sales@paddleducks.com>][Date Wed, 12 Jan 2005 18:23:03 +0000]/html/[From "Hayley" <pentongc@cnnet.com.au>][Date Sat, 15 Jan 2005 17:39:02 +0000]/html/[From "eBay" <eBay@reply.ebay.com>][Date Wed, 19 Jan 2 ... /[From "D1sc0unt Pharm ... /[From lhw@sfs.org.sg][Date Sun, 6 Feb 2005 ... /your_document.pif Infecté : Email-Worm.Win32.NetSky.d ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40004.VBN/[From "Mika Salonen" <software@mikasalonen.com>][Date Fri, 7 Jan 2005 04:25:07 +0200]/text/[From "Marceline" <sales@3koenige.com>][Date Mon, 10 Jan 2005 06:47:19 +0000]/html/[From "Dorcas" <sales@paddleducks.com>][Date Wed, 12 Jan 2005 18:23:03 +0000]/html/[From "Hayley" <pentongc@cnnet.com.au>][Date Sat, 15 Jan 2005 17:39:02 +0000]/html/[From "eBay" <eBay@reply.ebay.com>][Date Wed, 19 Jan 2 ... /[From "D1sc0unt Pharm ... /[From lhw@sfs.org.sg][Date Sun, 6 Feb 2005 18:44:44 +0100]/UNNAMED Infecté : Email-Worm.Win32.NetSky.d ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40004.VBN/[From "Mika Salonen" <software@mikasalonen.com>][Date Fri, 7 Jan 2005 04:25:07 +0200]/text/[From "Marceline" <sales@3koenige.com>][Date Mon, 10 Jan 2005 06:47:19 +0000]/html/[From "Dorcas" <sales@paddleducks.com>][Date Wed, 12 Jan 2005 18:23:03 +0000]/html/[From "Hayley" <pentongc@cnnet.com.au>][Date Sat, 15 Jan 2005 17:39:02 +0000]/html/[From "eBay" <eBay@reply.ebay.com>][Date Wed, 19 Jan 2 ... /[From "D1sc0unt Pharmacy" <xwmuldgthn@wanadoo.fr>][Date Mon, 31 Jan 2005 05:31:16 +1000]/text Infecté : Email-Worm.Win32.NetSky.d ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40004.VBN/[From "Mika Salonen" <software@mikasalonen.com>][Date Fri, 7 Jan 2005 04:25:07 +0200]/text/[From "Marceline" <sales@3koenige.com>][Date Mon, 10 Jan 2005 06:47:19 +0000]/html/[From "Dorcas" <sales@paddleducks.com>][Date Wed, 12 Jan 2005 18:23:03 +0000]/html/[From "Hayley" <pentongc@cnnet.com.au>][Date Sat, 15 Jan 2005 17:39:02 +0000]/html/[From "eBay" <eBay@reply.ebay.com>][Date Wed, 19 Jan 2005 02:03:27 -0800]/UNNAMED Infecté : Email-Worm.Win32.NetSky.d ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40004.VBN/[From "Mika Salonen" <software@mikasalonen.com>][Date Fri, 7 Jan 2005 04:25:07 +0200]/text/[From "Marceline" <sales@3koenige.com>][Date Mon, 10 Jan 2005 06:47:19 +0000]/html/[From "Dorcas" <sales@paddleducks.com>][Date Wed, 12 Jan 2005 18:23:03 +0000]/html/[From "Hayley" <pentongc@cnnet.com.au>][Date Sat, 15 Jan 2005 17:39:02 +0000]/html Infecté : Email-Worm.Win32.NetSky.d ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40004.VBN/[From "Mika Salonen" <software@mikasalonen.com>][Date Fri, 7 Jan 2005 04:25:07 +0200]/text/[From "Marceline" <sales@3koenige.com>][Date Mon, 10 Jan 2005 06:47:19 +0000]/html/[From "Dorcas" <sales@paddleducks.com>][Date Wed, 12 Jan 2005 18:23:03 +0000]/html Infecté : Email-Worm.Win32.NetSky.d ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40004.VBN/[From "Mika Salonen" <software@mikasalonen.com>][Date Fri, 7 Jan 2005 04:25:07 +0200]/text/[From "Marceline" <sales@3koenige.com>][Date Mon, 10 Jan 2005 06:47:19 +0000]/html Infecté : Email-Worm.Win32.NetSky.d ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40004.VBN/[From "Mika Salonen" <software@mikasalonen.com>][Date Fri, 7 Jan 2005 04:25:07 +0200]/text Infecté : Email-Worm.Win32.NetSky.d ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40004.VBN MailBerkeleymboxx: infecté - 13 ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40004.VBN CryptZ: infecté - 13 ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100]/U ... /[From "Ber .. ... /[Fr ... /[From B.Martin <ubens_du_13@hotmail.com ... /reclame.mess ... /dscn0058.bat Infecté : Trojan-Dropper.Win32.Agent.xt ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100]/U ... /[From "Ber .. ... /[Fr ... /[From B.Martin <ubens_du_13@hotmail.com ... /reclame.messenger.dscn0058.zip Infecté : Trojan-Dropper.Win32.Agent.xt ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 ... /[From Pierre <francois.bezel@libertysurf.fr>][Date sam., 13 janv. 2007]/link.ecarte. ... /card.id4323.com Infecté : Email-Worm.Win32.Zafi.d ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 ... /[From Pierre <francois.bezel@libertysurf.fr>][Date sam., 13 janv. 2007]/link.ecarte.christmas.gif0080.zip Infecté : Email-Worm.Win32.Zafi.d ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. .. ... /[From "Haven ... /[From AFPA <claude.marlien.chevigny@wanadoo.fr>][Date lun., 1 ... /Contactenos.com Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. .. ... /[From "Haven ... /[From AFPA <claude.marlien.chevigny@w ... /link.zdnet.fr.ecarte.index.php34b31.pif Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. .. ... /[From "Haven ... /[From AFPA <claude.marlien.chevigny@wanadoo.fr>][Date lun., 15 janv. 2007]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . . ... /[ ... /[From "Leckie Josie" ... /[From HPenztar <inet@mi ... /link.zdnet.fr.ecarte.index.php34b31.pif Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . . ... /[ ... /[From "Leckie Josie" ... /[From HPenztar <inet@microsoft.com>][Date Sze, 17 jan. 2007]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . . ... /[ ... /[From "Leckie Josie" <dalekylaskyui@bevcomm.net>][Date Wed, 17 Jan 2007 10:12:32 +0300]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . . ... /[From "Speck B. Reproachfully" <ibs@goldenovaleggs.com>][Date Wed, 17 Jan 2007 04:01:14 +0000]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . .. ... /[From "Rajya Tunnell" <nyeu@hawaiianstylewebsites.com>][Date Tue, 16 Jan 2007 22:59:34 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . .. ... /[ . ... /[From Brian ... /[From door <zbasis@ftse.com>][Date Wed, 17 Jan 2007 00:44:00 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . .. ... /[ . ... /[From Briana P.Ashby <mdensity@shakomako.net>][Date Wed, 17 Jan 2007 00:43:27 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . .. ... /[ ... /[ ... /[From Wm Barnes <ljhart@ccnmatthews.com>][Date Wed, 17 Jan 2007 00:39:17 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . .. ... /[ ... /[From D ... /[From "Recettes" <logo@empleonuevo.com>][Date 16 Jan 2007 21:53:54 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . .. ... /[ ... /[From Desiree Goins <xocommitment@cuttedge.com>][Date Tue, 16 Jan 2007 18:28:52 +0000]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . .. ... /[ ... ... /[From static the <yywthanks@dentrassis.com>][Date Tue, 16 Jan 2007 21:20:03 +0300]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . .. ... /[ ... ... /[From Teddy Lockhart <zwflux@laparkan.com>][Date Tue, 16 Jan 2007 19:20:07 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . .. ... /[ ... /[From Emerson Z.Burks <pkuscenic@idcmotion.com>][Date Tue, 16 Jan 2007 19:15:53 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . .. ... /[From "P ... /[From Grattage.com <register@caloga.com>][Date Tue, 16 Jan 2007 17:47:47 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . .. ... /[From "Pa ... /[Fro ... /[From Marco <Bret@wanadoo.fr>][Date Tue, 16 Jan 2007 16:10:51 +0000]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . .. ... /[From "Pa ... /[From quite on <wapparatus@firstam.com>][Date Tue, 16 Jan 2007 15:51:49 +0000]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . .. ... /[From "Parker Busbyzo" <jjuicesm@sternestackhouse.com>][Date Tue, 16 Jan 2007 16:38:26 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . ... /[From " ... /[From "BOYCE LINDSEY" <fvgrcbokq@caller.com>][Date Tue, 16 Jan 2007 07:31:04 -0800]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . ... /[From " ... /[From "Stanton" <a-mancillatwg@abrac.com.br>][Date Tue, 16 Jan 2007 16:01:57 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . ... /[From "Freckle L. Shimmies" <r_china@globalenviroinc.com>][Date Tue, 16 Jan 2007 10:48:38 +0000]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . ... ... /[From "Cognomen L. Wallaby" <minor@glorioustour.com>][Date Tue, 16 Jan 2007 18:20:28 +0000]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . ... / ... /[From "Shawanda Wells" <shoichihamadageg@g-n-c.biz>][Date Tue, 16 Jan 2007 08:48:05 +0000]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . ... / ... /[From "M ... /[From "install new" <judge@flipside.co.uk>][Date 16 Jan 2007 09:39:31 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . ... / ... /[From "Marcella Holliday" <blcasteth@irklavimas.lt>][Date Tue, 16 Jan 2007 02:39:11 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . ... /[From " .. ... /[From "Alive Xtreme" <Rings@essencesuites.com>][Date 16 Jan 2007 01:47:48 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . ... /[From " ... /[From "ERWIN VIOLET" <vwbrlnpjfjfn@fast.net>][Date Mon, 15 Jan 2007 16:36:34 -0800]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . ... /[From "Britt Snyder" <johnhollingergsbq@degraafschap.com>][Date Tue, 16 Jan 2007 01:04:10 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . ... /[Fro ... /[From Wallace P.Arias <fsdirections@fabiny.com>][Date Mon, 15 Jan 2007 17:56:41 -0600]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . ... /[From ... /[F ... /[From brush <qthorough@johnrellis.com>][Date Tue, 16 Jan 2007 01:46:43 +0200]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . ... /[From ... /[From "Kelia Steinke" <bec@captainsparkle.com>][Date Mon, 15 Jan 2007 19:14:21 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 . ... /[From "Twana Martinez" <dlcooperrb@franchiseinvestor.com>][Date Mon, 15 Jan 2007 19:05:43 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. .. ... /[Fro ... ... /[From figures a <sping@sprinternet.com>][Date Mon, 15 Jan 2007 11:19:07 -0800]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. .. ... /[Fro ... /[Fr ... /[From delivery <rvbriefs@slam.com>][Date Mon, 15 Jan 2007 17:21:41 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. .. ... /[Fro ... /[From Michelle Bowden <dsage@farmstead.com>][Date Mon, 15 Jan 2007 10:21:00 -0600]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. .. ... /[From "Preamble D. Injunctions" <gcawood@gotimer.com>][Date Mon, 15 Jan 2007 21:48:39 +0000]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. .. .. ... /[ .. ... ... /[From colored <ajibelieve@brg.com>][Date Mon, 15 Jan 2007 13:37:02 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. .. .. ... /[ .. ... /[From radical by <ddonor@usachoice.net>][Date Mon, 15 Jan 2007 21:33:34 +0900]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. .. .. ... /[ ... /[From Sheila J.Cleveland <isalad@ifun.com>][Date Mon, 15 Jan 2007 13:33:24 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. .. .. ... /[ ... /[From school as <kwyvessel@palmbeachfl.com>][Date Mon, 15 Jan 2007 15:25:44 +0300]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. .. .. ... /[From Groupe France Mutuelle <register@caloga.com>][Date Mon, 15 Jan 2007 12:45:40 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. .. ... /[From "Haven ... /[From AFPA <claude.marlien.chevigny@wanadoo.fr>][Date lun., 15 janv. 2007]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. .. ... /[From "Haven De ... /[From honors <iczsixty@idig.net>][Date Mon, 15 Jan 2007 11:13:34 +0300]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. .. ... /[From "Haven Debose" <stefanaygala@falcon.tamucc.edu>][Date Mon, 15 Jan 2007 13:37:33 +0500]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. ... / ... /[ ... /[From "USA" <Neonnbv@californiapsychic.com>][Date Mon, 15 Jan 2007 09:50:43 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. ... / ... /[F ... /[From "Agustin Babb" <imerry@elitists.com>][Date Sun, 14 Jan 2007 19:15:16 -0500]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. ... / ... /[From "Sto ... /[From "items are" <exciting@esadev.com>][Date 15 Jan 2007 01:17:57 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. ... / ... /[From "Stone Trinidad" <xsbtokkkhwgy@thunderball.net>][Date Sun, 14 Jan 2007 23:36:42 -0000]/text Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 .. ... /[From Harrison O.Jamison <nfznutrition@marketletter.com>][Date Sun, 14 Jan 2007 20:31:43 -0200]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 ... ... /[Fr ... ... /[From Carter G.Morrow <lstyle@necusa.com>][Date Sun, 14 Jan 2007 22:57:33 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 ... ... /[Fr ... /[From "Antoine" <acerpcprinu@interbusiness.it>][Date Sun, 14 Jan 2007 21:40:22 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 ... ... /[From ... ... /[From Fern D.Stewart <hilrally@tics.net>][Date Mon, 15 Jan 2007 21:39:10 +0700]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 ... ... /[From ... /[From "Isabel Morton" <vcronald@azrharn.net>][Date Sun, 14 Jan 2007 17:42:29 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 ... ... /[From " ... /[From "Christer Remer" <caro@oakbaybc.org>][Date Sun, 14 Jan 2007 15:33:33 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 ... ... /[From "Hospital" <GearyNancyua@century21concept100.com>][Date Sun, 14 Jan 2007 15:33:14 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 ... /[From ... /[From "Mohammed Oathout" <truitto@gadenver.com>][Date Sun, 14 Jan 2007 14:41:05 +0300]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 ... /[From "Maryellen Mcfarla ... /[From "Name" <zip@exfo.ntu.edu.tw>][Date 14 Jan 2007 12:12:32 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\11A40006.VBN/[From "Clayton Douglas" <DouglaspGuysangaree@fantasyflightgames.com>][Date Wed, 10 Jan 2007 10:43:01 +0600]/UNNAMED/[From "Converter" <we@fya.upmesystase.com>][Date 10 Jan 2007 18:51:01 +0100]/UNNAMED/[From "Jaime Brunelle" <gatesy@kays-dehoff.com>][Date Wed, 10 Jan 2007 19:28:11 +0100]/UNNAMED/[From forefront in <hnhoffice@highnoonfilm.com>][Date Wed, 10 Jan 2007 23:56:03 +0100 ... /[From "Maryellen Mcfarland" <pbideuterium@cosmicwealth.com>][Date Sun, 14 Jan 2007 11:35:14 +0100]/UNNAMED Infecté : Email-Worm.Win32.Zafi.b ignoré
C:\Documents and Settings\All User

Ok je vais le supprimer; Non apparemment plus de problèmes. Est-ce que je dois et je peux supprimer ce qui est dans la quarantaine? je voudrais vraiment eliminer tout et meme ce qui est inactif et mis de coté.
Autre question puis-je creér un point de restauration maintenant?

Merci Eric, vraiment sympa et efficace.