Enfin, érotique, c'est tout de même un bien grand mot, pour un fichier "Sexy.scr" qui se révèle être un cheval de Troie ...
*******************************************************************************
* *
* WARNING MESSAGE *
* *
* *
* This is a Department of Energy computer system, and is the property *
* of the United States Government. It is for authorized use only. *
* Users (authorized or unauthorized) have no explicit or implicit *
* expectation of privacy. *
* *
* All or any uses of this system and all files on this system may be *
* intercepted, monitored, recorded, copied, audited, inspected, and *
* disclosed to authorized site, Department of Energy, and law enforcement *
* personnel, as well as authorized officials of other agencies, both *
* domestic and foreign. By using this system, the user consents to such *
* interception, monitoring, recording, copying, auditing, inspection, *
* and disclosure at the discretion of authorized site or Department *
* of Energy personnel. *
* *
* Unauthorized or improper use of this system may result in administrative *
* disciplinary action and civil and criminal penalties. By continuing to use *
* this system you indicate your awareness of and consent to these terms and *
* conditions of use. LOG OFF IMMEDIATELY if you do not agree to the *
* conditions stated in this warning. *
* *
*******************************************************************************
Après soumission du fichier suspect au multi scanner en ligne de , le Sexy.scr n'est en fait un méchant trojan.

Jotti's malware scan :

File: Sexy.scr
Status:
INFECTED/MALWARE
MD5: ad49d18a719ce5247620bdb49624649d
Packers detected:
RLPACK
Bit9 reports: File not found
Scanner results
Scan taken on 10 Oct 2007 22:14:42 (GMT)
A-Squared
Found nothing
AntiVir
Found TR/Crypt.XPACK.Gen
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found MemScan:Trojan.PWS.LdPinch.BSG
ClamAV
Found nothing
CPsecure
Found Troj.Downloader.W32.Aphex.060
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found Trojan-Dropper.Win32.Small.aww
Fortinet
Found nothing
Kaspersky Anti-Virus
Found Trojan-Dropper.Win32.Small.aww
NOD32
Found Win32/TrojanDropper.Small.AWW
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Rising Antivirus
Found nothing
Sophos Antivirus
Found Troj/Dropper-OG
VirusBuster
Found nothing
VBA32
Found Trojan-Dropper.Win32.Small.aww

Petite anecdote: Est-ce un clin d'œil de la personne ayant mis en place le serveur FTP ou un pur hasard, toujours est-t-il que le dossier contenant les images des webcam se nomme "nsacam".