Annexe - Sécurité : Virus détectés par NOD32 dans notre messagerie - juillet 2006


Win32/Bagle.gen.zip worm (équivalent NAV : W32.Beagle@mm!zip)

 

Provenance :  (Wanadoo France Tele-Jambon:-) de BAYONNE

Arrivant systématiquement entre 09:14 et 10:07

Heure d'arrivée

Date (xx)/07/2006

Expéditeur - compte sur domaine

09:17 (01)

ABayonne-152-1-6-84.w83-193.abo.wanadoo.fr (83.193.164.84) - mansenoble.com

09:18 (05)

ABayonne-152-1-16-61.w83-193.abo.wanadoo.fr (83.193.38.61) - vinoplanet.com

09:19 (05)

ABayonne-152-1-16-61.w83-193.abo.wanadoo.fr (83.193.38.61) - mansenoble.com

09:14 (08)

ABayonne-152-1-33-128.w83-193.abo.wanadoo.fr (83.193.175.128) - vinoplanet.com

10:07 (09)

ABayonne-152-1-5-13.w83-193.abo.wanadoo.fr (83.193.163.13) - mansenoble.com

10:07 (09)

ABayonne-152-1-5-13.w83-193.abo.wanadoo.fr (83.193.163.13) - vinoplanet.com

09:15 (11)

ABayonne-152-1-11-191.w83-193.abo.wanadoo.fr (83.193.33.191) - mansenoble.com

09:21 (12)

ABayonne-152-1-103-137.w90-5.abo.wanadoo.fr (90.5.253.137) - vinoplanet.com

09:22 (12)

ABayonne-152-1-103-137.w90-5.abo.wanadoo.fr (90.5.253.137) - mansenoble.com

09:20 (13)

ABayonne-152-1-14-116.w83-193.abo.wanadoo.fr (83.193.36.116) - mansenoble.com

09:39 (14)

ABayonne-152-1-44-123.w83-193.abo.wanadoo.fr (83.193.218.123) - mansenoble.com

09:39 (14)

ABayonne-152-1-44-123.w83-193.abo.wanadoo.fr (83.193.218.123)  - mansenoble.com

10:06 (16)

ABayonne-152-1-26-88.w83-193.abo.wanadoo.fr (83.193.46.88) - vinoplanet.com

09:28 (17)

ABayonne-152-1-63-37.w83-193.abo.wanadoo.fr (83.193.239.37) - mansenoble.com

09:22 (18)

ABayonne-152-1-9-68.w83-193.abo.wanadoo.fr (83.193.167.68) - vinoplanet.com

09:25 (19)

ABayonne-152-1-81-104.w83-200.abo.wanadoo.fr (83.200.255.104) - vinoplanet.com

09:26 (19)

ABayonne-152-1-81-104.w83-200.abo.wanadoo.fr (83.200.255.104) - mansenoble.com

09:18 (20)

ABayonne-152-1-65-203.w83-193.abo.wanadoo.fr (83.193.111.203) - vinoplanet.com

09:19 (21)

ABayonne-152-1-91-50.w86-217.abo.wanadoo.fr (86.217.189.50) - vinoplanet.com

09:13 (22)

ABayonne-152-1-81-227.w83-200.abo.wanadoo.fr (83.200.255.227) - mansenoble.com

09:14 (22)

ABayonne-152-1-81-227.w83-200.abo.wanadoo.fr (83.200.255.227) - vinoplanet.com

09:13 (23)

ABayonne-152-1-81-227.w83-200.abo.wanadoo.fr (83.200.255.227) - vinoplanet.com

10:11 (23)

ABayonne-152-1-2-188.w83-193.abo.wanadoo.fr (83.193.160.188) - vinoplanet.com

09:20 (24)

ABayonne-152-1-49-82.w83-193.abo.wanadoo.fr (83.193.223.82) - mansenoble.com

09:24 (25)

Fin de cette pollution : le 25/07/2006

 

Le virus :

- http://www.viruslist.com/fr/viruses/encyclopedia?virusid=21948

- http://www.eset.com/threat-center/pedia/cervy/baglegzp.htm

- correspondance avec Norton Antivirus : http://securityresponse.symantec.com/avcenter/venc/data/w32.beagle@mm!zip.html

W32.Beagle@mm!zip is a detection for password-protected .zip files that carry executables belonging to the W32.Beagle@mm family of mass-mailing worms. The .zip files may arrive as part of an email message with a spoofed From address. This address may sometimes be created using the local domain, giving the appearance that it was sent from someone at the same ISP or company as the recipient. For example, if your email address is user@ispname.com, then the spoofed From address may be something like support@ispname.com.


001-2006G01A : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Received: from NICOLAS.com (unverified [83.193.164.84]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0008948135@web7.e-zone.net> for <vinosoft@mansenoble.com>; Sat, 1 Jul 2006 09:17:24 +0200
Date: Sat, 01 Jul 2006 09:16:24 +0100
To: "Vinosoft" <vinosoft@mansenoble.com>
From: "TylerReubenTyler" <TylerReubenTyler@0451.com>
Subject: [virus Win32/Bagle.gen.zip ver ] Harry
Message-ID: <jfkhrvbmzjuezkhudzq@mansenoble.com>
<br>Zip password: <img src="cid:gpdyckrsdx.gif"><br>
Avertissement: NOD32 Antivirus System a detecte l'infiltration suivante dans le message: Peter.zip - Win32/Bagle.gen.zip ver

Expéditeur du virus : 83.193.164.84

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-6-84.w83-193.abo.wanadoo.fr (83.193.164.84) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM


003-2006G05A : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Received: from NICOLAS.com (unverified [83.193.175.128]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0009228837@web7.e-zone.net> for <vinosoft@vinoplanet.com>; Wed, 5 Jul 2006 09:18:25 +0200
From: "Dif.vins" <dif.vins@free.fr>
Subject: [virus Win32/Bagle.gen.zip worm] Emanual
Message-ID: <tiohrkfpxxfqjdzftxz@vinoplanet.com>
<html><body> I love you <br>Password: <img src="cid:pdjtgrrwao.gif"><br>
Warning: NOD32 antivirus system found the following in the message: Susan.zip - Win32/Bagle.gen.zip worm - renamed to Susan.vzip

Expéditeur du virus : 83.193.175.128

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-16-61.w83-193.abo.wanadoo.fr (83.193.38.61) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM


004-2006G05B : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Received: from NICOLAS.org (unverified [83.193.175.128]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0009228900@web7.e-zone.net> for <vinosoft@mansenoble.com>; Wed, 5 Jul 2006 09:19:04 +0200
From: "Contact" <contact@sytweb.com>
Subject: [virus Win32/Bagle.gen.zip worm] Elizabethe
Message-ID: <ltgpqlstuwntrgvnbln@mansenoble.com>
X-NOD32Result: Infected, Win32/Bagle.gen.zip worm
Warning: NOD32 antivirus system found the following in the message: Judith.zip - Win32/Bagle.gen.zip worm - renamed to Judith.vzip

Expéditeur - Virus : idem message précédent.


005-2006G08 : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Received: from NICOLAS.org (unverified [83.193.38.61]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0009466766@web7.e-zone.net> for <vinosoft@vinoplanet.com>; Sat, 8 Jul 2006 09:14:41 +0200
From: "Destockwine" <destockwine@uwclub.net>
Subject: [virus Win32/Bagle.gen.zip worm] Anne
Message-ID: <qoyrdmloboxbefipoop@vinoplanet.com>
X-NOD32Result: Infected, Win32/Bagle.gen.zip worm
Warning: NOD32 antivirus system found the following in the message: Rebecka.zip - Win32/Bagle.gen.zip worm - renamed to Rebecka.vzip

Expéditeur du virus : 83.193.38.61

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-33-128.w83-193.abo.wanadoo.fr (83.193.175.128) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM


006-2006G09A : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Received: from NICOLAS.com (unverified [83.193.163.13]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0009508836@web7.e-zone.net> for <vinosoft@mansenoble.com>; Sun, 9 Jul 2006 10:07:17 +0200
Date: Sun, 09 Jul 2006 10:06:23 +0100
To: "Vinosoft" <vinosoft@mansenoble.com>
From: "Exhibit-bwe" <exhibit-bwe@exposium.fr>
Subject: [virus Win32/Bagle.gen.zip worm] Wynnefreede
Warning: NOD32 antivirus system found the following in the message: Mary.zip - Win32/Bagle.gen.zip worm - renamed to Mary.vzip

Expéditeur du virus : 83.193.163.13

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-5-13.w83-193.abo.wanadoo.fr (83.193.163.13) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM

Virus : idem message précédent.


007-2006G09B : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Received: from NICOLAS.org (unverified [83.193.163.13]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0009508834@web7.e-zone.net> for <vinosoft@vinoplanet.com>; Sun, 9 Jul 2006 10:07:14 +0200
Date: Sun, 09 Jul 2006 10:05:53 +0100
To: "Vinosoft" <vinosoft@vinoplanet.com>
From: "Dif.vins" <dif.vins@free.fr>
Subject: [virus Win32/Bagle.gen.zip worm] Bennett
Message-ID: <qgigjkiiqaquwawkedw@vinoplanet.com>
Warning: NOD32 antivirus system found the following in the message: Susanna.zip - Win32/Bagle.gen.zip worm - renamed to Susanna.vzip

Expéditeur - Virus : idem message précédent.


009-2006G11A : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Received: from NICOLAS.org (unverified [83.193.33.191]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0009632375@web7.e-zone.net> for <vinosoft@mansenoble.com>; Tue, 11 Jul 2006 09:15:38 +0200
Date: Tue, 11 Jul 2006 09:14:52 +0100
To: "Vinosoft" <vinosoft@mansenoble.com>
From: "Wein" <wein@martel.ch>
Subject: [virus Win32/Bagle.gen.zip worm] Dorithie
Message-ID: <zenulzhwrnomrndfuvt@mansenoble.com>
Warning: NOD32 antivirus system found the following in the message: Grace.zip - Win32/Bagle.gen.zip worm - renamed to Grace.vzip

Expéditeur du virus : 83.193.33.191

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-11-191.w83-193.abo.wanadoo.fr (83.193.33.191) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM


011-2006G12A : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Received: from NICOLAS.net (unverified [90.5.253.137]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0009708449@web7.e-zone.net> for <vinosoft@vinoplanet.com>; Wed, 12 Jul 2006 09:21:54 +0200
Date: Wed, 12 Jul 2006 09:20:33 +0100
To: "Vinosoft" <vinosoft@vinoplanet.com>
From: "Barbier.h" <barbier.h@swing.be>
Subject: [virus Win32/Bagle.gen.zip worm] Nathanyell
Message-ID: <mhvfqdgzipfensbcqqg@vinoplanet.com>
Warning: NOD32 antivirus system found the following in the message: Edward.zip - Win32/Bagle.gen.zip worm - renamed to Edward.vzip

 

012-2006G12B : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Received: from NICOLAS.net (unverified [90.5.253.137]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0009708462@web7.e-zone.net> for <vinosoft@mansenoble.com>; Wed, 12 Jul 2006 09:22:05 +0200
Date: Wed, 12 Jul 2006 09:21:09 +0100
To: "Vinosoft" <vinosoft@mansenoble.com>
From: "Rodrigoharold" <rodrigoharold@hotmail.com>
Subject: [virus Win32/Bagle.gen.zip worm] Rose
Message-ID: <nhplhczlhnbqoakhout@mansenoble.com>
Warning: NOD32 antivirus system found the following in the message: Wynefreed.zip - Win32/Bagle.gen.zip worm - renamed to Wynefreed.vzip

 

Expéditeur des deux virus : 90.5.253.137

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-103-137.w90-5.abo.wanadoo.fr  - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM


013-2006G13A : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Received: from NICOLAS.com (unverified [83.193.36.116]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0009789316@web7.e-zone.net> for <vinosoft@mansenoble.com>; Thu, 13 Jul 2006 09:20:30 +0200
Date: Thu, 13 Jul 2006 09:19:50 +0100
To: "Vinosoft" <vinosoft@mansenoble.com>
From: "Wines" <wines@wine-not.be>
Subject: [virus Win32/Bagle.gen.zip worm] Andrew
Message-ID: <vmefcjsuaubbzxgmbtk@mansenoble.com>
Warning: NOD32 antivirus system found the following in the message: Leonarde.zip - Win32/Bagle.gen.zip worm - renamed to Leonarde.vzip

Expéditeur du virus : 83.193.36.116

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-14-116.w83-193.abo.wanadoo.fr (83.193.36.116) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM


014-2006G14A : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Received: from NICOLAS.com (unverified [83.193.218.123]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0009875041@web7.e-zone.net> for <vinosoft@mansenoble.com>; Fri, 14 Jul 2006 09:39:32 +0200
Date: Fri, 14 Jul 2006 09:38:36 +0100
To: "Vinosoft" <vinosoft@mansenoble.com>
From: "Beaune.cph" <beaune.cph@perardel.com>
Subject: [virus Win32/Bagle.gen.zip worm] Rebecka
Message-ID: <gmufgsunjejbirwyldn@mansenoble.com>
Warning: NOD32 antivirus system found the following in the message: Elizabethe.zip - Win32/Bagle.gen.zip worm - renamed to Elizabethe.vzip

Expéditeur du virus : 83.193.218.123

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-44-123.w83-193.abo.wanadoo.fr (83.193.218.123) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM


015-2006G14B : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Received: from NICOLAS.com (unverified [83.193.218.123]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0009875041@web7.e-zone.net> for <vinosoft@mansenoble.com>; Fri, 14 Jul 2006 09:39:32 +0200
Date: Fri, 14 Jul 2006 09:38:36 +0100
To: "Vinosoft" <vinosoft@mansenoble.com>
From: "Beaune.cph" <beaune.cph@perardel.com>
Subject: [virus Win32/Bagle.gen.zip worm] Rebecka
Message-ID: <gmufgsunjejbirwyldn@mansenoble.com>
Warning: NOD32 antivirus system found the following in the message: Elizabethe.zip - Win32/Bagle.gen.zip worm - renamed to Elizabethe.vzip

Expéditeur du virus : 83.193.218.123

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-44-123.w83-193.abo.wanadoo.fr (83.193.218.123) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM


017-2006G16A : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Return-path: <vinosoft@vinoplanet.com>
Received: from NICOLAS.com (unverified [83.193.46.88]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0010008510@web7.e-zone.net> for <vinosoft@vinoplanet.com>; Sun, 16 Jul 2006 10:06:21 +0200
Date: Sun, 16 Jul 2006 10:05:26 +0100
To: "Vinosoft" <vinosoft@vinoplanet.com>
From: "Uccle.vins" <uccle.vins@skynet.be>
Subject: [virus Win32/Bagle.gen.zip worm] Nycholas
Message-ID: <qpfcxrbvnapbgaftizs@vinoplanet.com>
Warning: NOD32 antivirus system found the following in the message: Ester.zip - Win32/Bagle.gen.zip worm - renamed to Ester.vzip

Expéditeur du virus : 83.193.46.88

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-26-88.w83-193.abo.wanadoo.fr (83.193.46.88) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM


018-2006G17A : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Return-path: <vinosoft@mansenoble.com>
Received: from NICOLAS.org (unverified [83.193.239.37]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0010066762@web7.e-zone.net> for <vinosoft@mansenoble.com>; Mon, 17 Jul 2006 09:28:30 +0200
Date: Mon, 17 Jul 2006 09:27:44 +0100
To: "Vinosoft" <vinosoft@mansenoble.com>
From: "Benevins" <benevins@benevins.com>
Subject: [virus Win32/Bagle.gen.zip worm] Mychaell
Message-ID: <urkikdxhpcbicahnvqm@mansenoble.com>
X-NOD32Result: Infected, Win32/Bagle.gen.zip worm
Warning: NOD32 antivirus system found the following in the message: Francis.zip - Win32/Bagle.gen.zip worm - renamed to Francis.vzip

Expéditeur du virus : 83.193.239.37

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-63-37.w83-193.abo.wanadoo.fr (83.193.239.37) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM


019-2006G18A : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Return-path: <vinosoft@vinoplanet.com>
Received: from NICOLAS.net (unverified [83.193.167.68]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0010149818@web7.e-zone.net> for <vinosoft@vinoplanet.com>; Tue, 18 Jul 2006 09:23:06 +0200
Date: Tue, 18 Jul 2006 09:22:15 +0100
To: "Vinosoft" <vinosoft@vinoplanet.com>
From: "Buqivxmtu" <buqivxmtu@surrealismo.com>
Subject: [virus Win32/Bagle.gen.zip worm] Mychaell
Message-ID: <omzhqoljukfvcbjdkkj@vinoplanet.com>
X-NOD32Result: Infected, Win32/Bagle.gen.zip worm
Warning: NOD32 antivirus system found the following in the message: Nathanyell.zip - Win32/Bagle.gen.zip worm - renamed to Nathanyell.vzip

Expéditeur du virus : 83.193.167.68

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-9-68.w83-193.abo.wanadoo.fr (83.193.167.68) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM


021-2006G19A : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Return-path: <vinosoft@vinoplanet.com>
Received: from NICOLAS.com (unverified [83.200.255.104]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0010232477@web7.e-zone.net> for <vinosoft@vinoplanet.com>; Wed, 19 Jul 2006 09:25:07 +0200
Date: Wed, 19 Jul 2006 09:24:11 +0100
To: "Vinosoft" <vinosoft@vinoplanet.com>
From: "Despert" <despert@skynet.be>
Subject: [virus Win32/Bagle.gen.zip worm] Marie
Message-ID: <pnssouclrfpokxqmoov@vinoplanet.com>
Warning: NOD32 antivirus system found the following in the message: Christian.zip - Win32/Bagle.gen.zip worm - renamed to Christian.vzip

Expéditeur du virus : 83.200.255.104

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-81-104.w83-200.abo.wanadoo.fr (83.200.255.104) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM

 

022-2006G19B : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Return-path: <vinosoft@mansenoble.com>
Received: from NICOLAS.org (unverified [83.200.255.104]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0010232564@web7.e-zone.net> for <vinosoft@mansenoble.com>; Wed, 19 Jul 2006 09:26:51 +0200
Date: Wed, 19 Jul 2006 09:24:36 +0100
To: "Vinosoft" <vinosoft@mansenoble.com>
From: "Indo" <indo@cavesstamand.be>
Subject: [virus Win32/Bagle.gen.zip worm] Susan
Message-ID: <pkroixwgoxtkybdeaiw@mansenoble.com>
X-NOD32Result: Infected, Win32/Bagle.gen.zip worm
Warning: NOD32 antivirus system found the following in the message: Ester.zip - Win32/Bagle.gen.zip worm - renamed to Ester.vzip

Expéditeur du virus : 83.200.255.104

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-81-104.w83-200.abo.wanadoo.fr (83.200.255.104) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM


024-2006G20A : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Return-path: <vinosoft@vinoplanet.com>
Received: from NICOLAS.org (unverified [83.193.111.203]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0010379263@web7.e-zone.net> for <vinosoft@vinoplanet.com>; Thu, 20 Jul 2006 09:19:26 +0200
Date: Thu, 20 Jul 2006 09:18:38 +0100
To: "Vinosoft" <vinosoft@vinoplanet.com>
From: "Gemma" <gemma@abrvavylk.com>
Subject: [virus Win32/Bagle.gen.zip worm] Suzanna
Message-ID: <ilrzzszcawkbdzjvyqo@vinoplanet.com>
Warning: NOD32 antivirus system found the following in the message: Anne.zip - Win32/Bagle.gen.zip worm - renamed to Anne.vzip

Expéditeur du virus : 83.193.111.203

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-65-203.w83-193.abo.wanadoo.fr (83.193.111.203) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM


025-2006G21A : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Return-path: <vinosoft@vinoplanet.com>
Received: from NICOLAS.net (unverified [86.217.189.50]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0010453866@web7.e-zone.net> for <vinosoft@vinoplanet.com>; Fri, 21 Jul 2006 09:20:01 +0200
Date: Fri, 21 Jul 2006 09:19:21 +0100
To: "Vinosoft" <vinosoft@vinoplanet.com>
From: "Cave.du.clos" <cave.du.clos@wanadoo.fr>
Subject: [virus Win32/Bagle.gen.zip worm] Alice
Message-ID: <adjgoewkllnouggviay@vinoplanet.com>
X-NOD32Result: Infected, Win32/Bagle.gen.zip worm
Warning: NOD32 antivirus system found the following in the message: Daniel.zip - Win32/Bagle.gen.zip worm - renamed to Daniel.vzip

Expéditeur du virus : 86.217.189.50

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-91-50.w86-217.abo.wanadoo.fr (86.217.189.50) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM


026-2006G22A : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Return-path: <vinosoft@mansenoble.com>
Received: from NICOLAS.com (unverified [83.200.255.227]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0010513719@web7.e-zone.net> for <vinosoft@mansenoble.com>; Sat, 22 Jul 2006 09:14:20 +0200
Date: Sat, 22 Jul 2006 09:13:42 +0100
To: "Vinosoft" <vinosoft@mansenoble.com>
From: "Ppgdvj" <ppgdvj@ubi.com>
Subject: [virus Win32/Bagle.gen.zip worm] Judith
Message-ID: <jzrtnlcctacdnuenosc@mansenoble.com>
X-NOD32Result: Infected, Win32/Bagle.gen.zip worm
Warning: NOD32 antivirus system found the following in the message: Margerie.zip - Win32/Bagle.gen.zip worm - renamed to Margerie.vzip

027-2006G22B : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Return-path: <vinosoft@vinoplanet.com>
Received: from NICOLAS.net (unverified [83.200.255.227]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0010513710@web7.e-zone.net> for <vinosoft@vinoplanet.com>; Sat, 22 Jul 2006 09:13:55 +0200
Date: Sat, 22 Jul 2006 09:13:16 +0100
To: "Vinosoft" <vinosoft@vinoplanet.com>
From: "Uccle.vins" <uccle.vins@skynet.be>
Subject: [virus Win32/Bagle.gen.zip worm] Androwe
Message-ID: <bkkvmfkizctsteakreo@vinoplanet.com>
X-NOD32Result: Infected, Win32/Bagle.gen.zip worm
Warning: NOD32 antivirus system found the following in the message: Constance.zip - Win32/Bagle.gen.zip worm - renamed to Constance.vzip

Expéditeur des deux virus : 83.200.255.227

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-81-227.w83-200.abo.wanadoo.fr (83.200.255.227) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM


027-2006G23A : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Return-path: <vinosoft@vinoplanet.com>
Received: from NICOLAS.net (unverified [83.193.160.188]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0010564091@web7.e-zone.net> for <vinosoft@vinoplanet.com>; Sun, 23 Jul 2006 10:11:54 +0200
Date: Sun, 23 Jul 2006 10:11:07 +0100
To: "Vinosoft" <vinosoft@vinoplanet.com>
From: "Wein" <wein@martel.ch>
Subject: [virus Win32/Bagle.gen.zip worm] Ellen
Message-ID: <tsijuquoaftyuyzzfas@vinoplanet.com>
X-NOD32Result: Infected, Win32/Bagle.gen.zip worm
Warning: NOD32 antivirus system found the following in the message: Alyce.zip - Win32/Bagle.gen.zip worm - renamed to Alyce.vzip

Expéditeur du virus : 83.193.160.188

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-2-188.w83-193.abo.wanadoo.fr (83.193.160.188) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM


028-2006G23B : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Return-path: <vinosoft@vinoplanet.com>
Received: from NICOLAS.net (unverified [83.200.255.227]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0010513710@web7.e-zone.net> for <vinosoft@vinoplanet.com>; Sat, 22 Jul 2006 09:13:55 +0200
Date: Sat, 22 Jul 2006 09:13:16 +0100
To: "Vinosoft" <vinosoft@vinoplanet.com>
From: "Uccle.vins" <uccle.vins@skynet.be>
Subject: [virus Win32/Bagle.gen.zip worm] Androwe
Message-ID: <bkkvmfkizctsteakreo@vinoplanet.com>
Old-X-NOD32Result: Infected, Win32/Bagle.gen.zip worm
X-NOD32Result: Infected, Win32/Bagle.gen.zip worm
Warning: NOD32 antivirus system found the following in the message: Constance.zip - Win32/Bagle.gen.zip worm - renamed to Constance.vzip

Expéditeur du virus : 83.200.255.227

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-81-227.w83-200.abo.wanadoo.fr (83.200.255.227) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM


029-2006G24A : Win32/Bagle.gen.zip worm dans un fichier compressé (zip)

Return-path: <vinosoft@mansenoble.com>
Received: from NICOLAS.net (unverified [83.193.223.82]) by mail1.e-zone.net (Rockliffe SMTPRA 6.1.22) with SMTP id <B0010617097@web7.e-zone.net> for <vinosoft@mansenoble.com>; Mon, 24 Jul 2006 09:20:02 +0200
Date: Mon, 24 Jul 2006 09:18:24 +0100
To: "Vinosoft" <vinosoft@mansenoble.com>
From: "Renavins" <renavins@renavins.com>
Subject: [virus Win32/Bagle.gen.zip worm] Wynnefreede
Message-ID: <qvctzfdnodpfcranptx@mansenoble.com>
X-NOD32Result: Infected, Win32/Bagle.gen.zip worm
Warning: NOD32 antivirus system found the following in the message: Sybell.zip - Win32/Bagle.gen.zip worm - renamed to Sybell.vzip

Expéditeur du virus : 83.193.223.82

FRANCE

IP2000-ADSL-BAS

ABayonne-152-1-49-82.w83-193.abo.wanadoo.fr (83.193.223.82) - BSBAY152 Bayonne Bloc1 - Wanadoo - FRANCE TELECOM