Votre question

message virus alert

Tags :
  • Virus
  • Sécurité
Dernière réponse : dans Sécurité et virus
28 Mai 2008 23:45:51

Bonsoir

J'ai chopé un gros virus, etc.. J'ai fait un nettoyage mais j'ai toujours un message Virus Alert à côté de l'horloge, le disque c a disparu du poste de travail qqun peut m'aider svp
merci d'avance

Voici mon hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:08: VIRUS ALERT!, on 28/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Fichiers communs\AOL\Loader\aolload.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Inventel\Add-on\wlancfg.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\Fichiers communs\AOL\1172324924\ee\AOLSoftware.exe
C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\RegCleaner\RegCleanr.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Soria\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*http://fr.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {11B771F0-C8FD-426A-B537-F9AAE4059895} - (no file)
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: EWPBrowseObject Class - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: AVGTOOLBAR - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O3 - Toolbar: (no name) - {C48F0939-992C-45C8-A9C2-B97A22D9B4BD} - (no file)
O3 - Toolbar: AVGTOOLBAR - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1172324924\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AOL Dialer] C:\Program Files\Fichiers communs\AOL\ACS\AOlDial.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.05\AMVConverter\grab.html
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.05\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u3-win...
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O21 - SSODL: vltdfabw - {4D234FB8-BCA5-41CB-874D-84C7E3EDB83B} - (no file)
O21 - SSODL: vregfwlx - {21A51658-94A8-4261-8BD9-CC4E9A522F8D} - C:\WINDOWS\vregfwlx.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Add-on\wlancfg.exe

--
End of file - 14343 bytes

Autres pages sur : message virus alert

29 Mai 2008 13:40:20

Bonjour, quequ'un peut-il m'aider svp
a b 8 Sécurité
29 Mai 2008 17:03:09

Bonjour,

[#ff0000]Désactive tes protections résidentes (antivirus, Spybot-S&D, etc.) ![/#f]

  • Télécharge ComboFix ([#ff0000]sUBs[/#f]) sur ton Bureau.
  • Double clique sur ComboFix.exe (le .exe n'est pas forcément visible) afin de le lancer.
  • Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\combofix.txt*) dans ta prochaine réponse.

    AIDE : Un guide et un tutoriel sur l'utilisation de ComboFix
    * le nom de la partition peut changer
    Contenus similaires
    29 Mai 2008 19:55:42

    Bonsoir, angeldark
    Desole du retard mais voici le rapport


    ComboFix 08-05-29.1 - Soria 2008-05-29 19:43:32.1 - NTFSx86
    Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.526 [GMT 2:00]
    Endroit: C:\Documents and Settings\Soria\Bureau\ComboFix.exe
    * Création d'un nouveau point de restauration

    AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Documents and Settings\Soria\Application Data\inst.exe
    C:\WINDOWS\system32\autorun.ini
    C:\WINDOWS\system32\drivers\downld
    C:\WINDOWS\system32\drivers\downld\785640.exe
    C:\WINDOWS\system32\drivers\downld\794781.exe
    C:\WINDOWS\system32\drivers\downld\805937.exe
    C:\WINDOWS\system32\drivers\downld\812296.exe
    C:\WINDOWS\system32\drivers\downld\823515.exe

    .
    ((((((((((((((((((((((((((((( Fichiers créés 2008-04-28 to 2008-05-29 ))))))))))))))))))))))))))))))))))))
    .

    2008-05-29 14:00 . 2008-05-29 14:00 <REP> d-------- C:\Program Files\Malwarebytes' Anti-Malware
    2008-05-29 14:00 . 2008-05-29 14:00 <REP> d-------- C:\Documents and Settings\Soria\Application Data\Malwarebytes
    2008-05-29 14:00 . 2008-05-29 14:00 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
    2008-05-29 14:00 . 2008-05-05 20:46 27,048 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
    2008-05-29 14:00 . 2008-05-05 20:46 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys
    2008-05-29 00:15 . 2008-05-29 00:16 1,374 --a------ C:\WINDOWS\imsins.BAK
    2008-05-28 23:14 . 2007-09-06 00:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
    2008-05-28 23:14 . 2006-04-27 17:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
    2008-05-28 23:14 . 2008-05-15 23:22 86,528 --a------ C:\WINDOWS\system32\VACFix.exe
    2008-05-28 23:14 . 2008-05-18 21:40 82,944 --a------ C:\WINDOWS\system32\IEDFix.exe
    2008-05-28 23:14 . 2008-05-18 21:40 82,944 --a------ C:\WINDOWS\system32\404Fix.exe
    2008-05-28 23:14 . 2003-06-05 21:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
    2008-05-28 23:14 . 2004-07-31 18:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
    2008-05-28 23:14 . 2007-10-04 00:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
    2008-05-28 17:52 . 2008-05-28 17:52 127 --a------ C:\WINDOWS\system32\MRT.INI
    2008-05-28 17:32 . 2008-05-28 17:32 <REP> d-------- C:\Program Files\AxBx
    2008-05-28 11:23 . 2008-05-28 11:23 <REP> d--h----- C:\$AVG8.VAULT$
    2008-05-27 23:11 . 2008-05-28 11:26 <REP> d-------- C:\Program Files\a-squared Free
    2008-05-27 23:06 . 2008-05-29 13:25 <REP> d-------- C:\WINDOWS\system32\drivers\Avg
    2008-05-27 23:06 . 2008-05-27 23:06 <REP> d-------- C:\Documents and Settings\Soria\Application Data\AVGTOOLBAR
    2008-05-27 23:06 . 2008-05-27 23:06 96,520 --a------ C:\WINDOWS\system32\drivers\avgldx86.sys
    2008-05-27 23:06 . 2008-05-27 23:06 75,272 --a------ C:\WINDOWS\system32\drivers\avgtdix.sys
    2008-05-27 23:06 . 2008-05-27 23:06 12,424 --a------ C:\WINDOWS\system32\drivers\avgrkx86.sys
    2008-05-27 23:06 . 2008-05-27 23:06 10,520 --a------ C:\WINDOWS\system32\avgrsstx.dll
    2008-05-27 23:05 . 2008-05-27 23:05 <REP> d-------- C:\Program Files\AVG
    2008-05-27 23:05 . 2008-05-27 23:05 <REP> d-------- C:\Documents and Settings\All Users\Application Data\avg8
    2008-05-27 23:02 . 2008-05-27 23:03 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
    2008-05-27 23:01 . 2008-05-27 23:02 <REP> d-------- C:\Program Files\Lavasoft
    2008-05-27 22:58 . 2008-05-27 23:00 <REP> d-------- C:\Program Files\CCleaner
    2008-05-27 08:41 . 2008-05-27 08:41 <REP> d-------- C:\Program Files\Spybot - Search & Destroy
    2008-05-27 08:41 . 2008-05-27 09:03 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    2008-05-27 08:23 . 2008-05-28 23:15 4,604 --a------ C:\WINDOWS\system32\tmp.reg
    2008-05-27 08:21 . 2008-05-29 13:55 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Google Updater
    2008-05-27 08:20 . 2008-05-27 09:13 <REP> d-------- C:\Program Files\RegCleaner
    2008-05-26 20:43 . 2008-05-28 11:00 <REP> d-------- C:\Documents and Settings\Soria\Application Data\Spyware Terminator
    2008-05-26 20:43 . 2008-05-28 11:25 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
    2008-05-26 20:43 . 2008-05-26 20:46 141,312 --a------ C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
    2008-05-26 20:42 . 2008-05-28 11:25 <REP> d-------- C:\Program Files\Spyware Terminator
    2008-05-16 11:58 . 2008-05-16 11:58 12,632 --a------ C:\WINDOWS\system32\lsdelete.exe
    2008-05-14 13:09 . 2008-05-14 13:09 <REP> d-------- C:\Program Files\Lavalys
    2008-04-29 11:20 . 2008-04-29 11:20 15,648 --a------ C:\WINDOWS\system32\drivers\NSDriver.sys
    2008-04-29 11:19 . 2008-04-29 11:19 15,648 --a------ C:\WINDOWS\system32\drivers\Awrtrd.sys
    2008-04-29 11:19 . 2008-04-29 11:19 12,960 --a------ C:\WINDOWS\system32\drivers\Awrtpd.sys

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-05-29 11:32 --------- d-----w C:\Program Files\Google
    2008-05-28 22:16 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
    2008-05-28 21:06 --------- d-----w C:\Program Files\Yahoo!
    2008-05-28 19:01 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
    2008-05-27 21:13 --------- d-----w C:\Program Files\SUPERAntiSpyware
    2008-05-27 21:12 --------- d-----w C:\Documents and Settings\Soria\Application Data\SUPERAntiSpyware.com
    2008-05-27 21:11 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
    2008-05-26 17:53 --------- d-----w C:\Program Files\eMule
    2008-05-25 08:40 --------- d-----w C:\Documents and Settings\Soria\Application Data\uTorrent
    2008-04-16 12:13 --------- d-----w C:\Documents and Settings\Soria\Application Data\Vso
    2008-04-16 09:38 --------- d-----w C:\Documents and Settings\All Users\Application Data\NtiDvdCopy
    2008-04-16 09:16 --------- d-----w C:\Program Files\DVDFab Platinum 4
    2008-04-16 09:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\vsosdk
    2008-04-16 08:29 47,360 ----a-w C:\WINDOWS\system32\drivers\pcouffin.sys
    2008-04-16 08:29 47,360 ----a-w C:\Documents and Settings\Soria\Application Data\pcouffin.sys
    2008-04-13 19:10 --------- d-----w C:\Program Files\SereneScreen
    2008-04-13 19:08 --------- d-----w C:\Program Files\Prolific Publishing, Inc
    2008-04-04 11:26 17,134 ----a-w C:\WINDOWS\system32\PCANDIS5.sys
    2008-04-04 08:02 --------- d-----w C:\Program Files\TuneUp Utilities 2007
    2008-04-03 05:51 --------- d-----w C:\Program Files\Java
    2008-04-02 06:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
    2008-03-25 04:51 621,344 ----a-w C:\WINDOWS\system32\mswstr10.dll
    2008-03-25 04:51 194,144 ----a-w C:\WINDOWS\system32\msjint40.dll
    2008-03-20 08:09 1,845,376 ----a-w C:\WINDOWS\system32\win32k.sys
    2008-03-14 22:24 93,128 ----a-w C:\WINDOWS\system32\ElbyCDIO.dll
    2008-03-01 12:58 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
    2007-11-12 15:43 278,528 ----a-w C:\Program Files\Fichiers communs\FDEUnInstaller.exe
    .

    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{11B771F0-C8FD-426A-B537-F9AAE4059895}]

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}]
    2008-05-27 23:06 2051328 --a------ C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{A057A204-BACC-4D26-9990-79A187E2698E}"= "C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL" [2008-05-27 23:06 2051328]

    [HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-9990-79a187e2698e}]
    [HKEY_CLASSES_ROOT\avgtoolbar.AVGTOOLBAR]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
    "{A057A204-BACC-4D26-9990-79A187E2698E}"= C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [2008-05-27 23:06 2051328]

    [HKEY_CLASSES_ROOT\clsid\{a057a204-bacc-4d26-9990-79a187e2698e}]
    [HKEY_CLASSES_ROOT\avgtoolbar.AVGTOOLBAR]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 22:00 15360]
    "AOL Dialer"="C:\Program Files\Fichiers communs\AOL\ACS\AOlDial.exe" [2007-06-21 12:01 70952]
    "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-01-10 00:02 68856]
    "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]
    "SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2008-05-13 12:43 1510640]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-09-29 15:01 67584]
    "LaunchApp"="Alaunch" []
    "RTHDCPL"="RTHDCPL.EXE" [2006-06-01 02:48 16208384 C:\WINDOWS\RTHDCPL.exe]
    "SkyTel"="SkyTel.EXE" [2006-05-16 04:04 2879488 C:\WINDOWS\SkyTel.exe]
    "ntiMUI"="c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe" [2005-05-11 17:15 45056]
    "IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe" [2004-08-10 22:00 208952]
    "IMEKRMIG6.1"="C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE" [2004-08-10 22:00 44032]
    "MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-10 22:00 59392]
    "PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-10 22:00 455168]
    "PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe" [2004-08-10 22:00 455168]
    "Acer Empowering Technology Monitor"="C:\WINDOWS\system32\SysMonitor.exe" [2006-04-18 20:54 49152]
    "eDataSecurity Loader"="C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2006-03-17 16:00 345088]
    "eRecoveryService"="C:\Acer\Empowering Technology\eRecovery\eRAgent.exe" [2006-06-01 15:40 413696]
    "AOLDialer"="C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe" [2007-06-21 12:01 70952]
    "HostManager"="C:\Program Files\Fichiers communs\AOL\1172324924\ee\AOLSoftware.exe" [2006-11-17 15:16 50736]
    "AOLSAV"="C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe" [2004-04-26 18:40 75776]
    "Symantec PIF AlertEng"="C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 10:22 517768]
    "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-04-27 18:47 7573504]
    "nwiz"="nwiz.exe" [2006-04-27 18:47 1519616 C:\WINDOWS\system32\nwiz.exe]
    "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-04-27 18:47 86016]
    "RealTray"="C:\Program Files\Real\RealPlayer\RealPlay.exe" [2007-06-23 19:18 26112]
    "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-29 06:24 286720]
    "SSBkgdUpdate"="C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-09-30 01:14 155648]
    "OpwareSE4"="C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-03-21 14:19 69632]
    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
    "SpywareTerminator"="C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe" [2008-05-26 20:46 1817600]
    "AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-05-27 23:05 1177368]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-10 22:00 15360]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "InstallVisualStyle"= C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
    "InstallTheme"= C:\WINDOWS\Resources\Themes\Royale.theme

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
    "Nouvelle valeur #1"= 00000001

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 10:13 77824]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
    C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=avgrsstx.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "msacm.divxa32"= divxa32.acm
    "VIDC.HFYU"= huffyuv.dll
    "VIDC.VP31"= vp31vfw.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    --a------ 2007-06-29 06:24 286720 C:\Program Files\QuickTime\qttask.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "AntiVirusDisableNotify"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "C:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLacsd.exe"=
    "C:\\Program Files\\Fichiers communs\\AOL\\ACS\\AOLDial.exe"=
    "C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
    "C:\\Program Files\\Messenger\\msmsgs.exe"=
    "C:\\Program Files\\Fichiers communs\\AOL\\Loader\\aolload.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "C:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
    "C:\\Program Files\\eMule\\emule.exe"=
    "C:\\Program Files\\AOL 9.0\\waol.exe"=
    "C:\\Program Files\\uTorrent\\utorrent.exe"=
    "C:\\Program Files\\Fichiers communs\\AOL\\1172324924\\ee\\aolsoftware.exe"=
    "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
    "C:\\Program Files\\MSN Messenger\\livecall.exe"=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
    "45677:TCP"= 45677:TCP:utorrent

    R0 AvgRkx86;avgrkx86.sys;C:\WINDOWS\system32\Drivers\avgrkx86.sys [2008-05-27 23:06]
    R1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-05-27 23:06]
    R1 sp_rsdrv2;Spyware Terminator Driver 2;C:\WINDOWS\system32\drivers\sp_rsdrv2.sys [2008-05-26 20:46]
    R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-05-27 23:05]
    R2 AvgTdiX;AVG8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-05-27 23:06]
    R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2004-08-10 22:00]
    R3 int15.sys;int15.sys;C:\Acer\Empowering Technology\eRecovery\int15.sys [2005-01-13 15:46]
    R3 LVHybrid;LVHybrid service;C:\WINDOWS\system32\DRIVERS\LVHybrid.sys [2006-05-16 12:04]
    R3 psdfilter;psdfilter;C:\WINDOWS\system32\Drivers\psdfilter.sys [2006-04-07 21:17]
    R3 psdvdisk;psdvdisk;C:\WINDOWS\system32\Drivers\psdvdisk.sys [2006-03-08 18:10]
    S3 Boonty Games;Boonty Games;"C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" []
    S3 SIS163u;SiS163 USB Wireless LAN Adapter Driver;C:\WINDOWS\system32\DRIVERS\sis163u.sys [2006-03-01 20:37]
    S3 ZD1211BU(ZyDAS);ZyDAS ZD1211B IEEE 802.11 b+g Wireless LAN Driver (USB)(ZyDAS);C:\WINDOWS\system32\DRIVERS\zd1211Bu.sys [2005-10-28 11:38]

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
    UxTuneUp

    *Newly Created Service* - CATCHME
    .
    Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
    "2007-10-09 14:49:00 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
    - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
    "2008-05-16 23:16:34 C:\WINDOWS\Tasks\Maintenance en 1 clic.job"
    - C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe
    .
    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-05-29 19:45:29
    Windows 5.1.2600 Service Pack 2 NTFS

    Balayage processus cachés ...

    Balayage caché autostart entries ...

    HKLM\Software\Microsoft\Windows\CurrentVersion\Run
    AOLSAV = C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

    Balayage des fichiers cachés ...

    Scan terminé avec succès
    Les fichiers cachés: 0

    **************************************************************************
    .
    Temps d'accomplissement: 2008-05-29 19:46:37
    ComboFix-quarantined-files.txt 2008-05-29 17:46:34

    Pre-Run: 97,786,224,640 octets libres
    Post-Run: 97,967,403,008 octets libres

    221 --- E O F --- 2008-05-28 22:16:55
    30 Mai 2008 21:22:31

    Bonsoir,
    que dois-je faire après avoir envoyé le rapport
    merci
    a b 8 Sécurité
    30 Mai 2008 21:27:13

    Re,

    Télécharge Smitfraudfix (de S!ri).
    Enregistre-le sur ton bureau.
    Lance SmitfraudFix.exe (le .exe peut ne pas apparaitre).
    Choisis l'Option 1 (Recherche)
    Poste le premier rapport ici.

    **Si le lien ne fonctionne pas, clique ici**
    30 Mai 2008 21:41:43

    Bonsoir, Angeldark
    Voici le rapport, a propos je ne peux pas entrer dans le mode sans echec

    SmitFraudFix v2.322

    Rapport fait à 21:39:19,40, 30/05/2008
    Executé à partir de C:\Documents and Settings\Soria\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» Process

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\a-squared Free\a2service.exe
    C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\WINDOWS\system32\SysMonitor.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
    C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
    C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
    C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Real\RealPlayer\RealPlay.exe
    C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
    C:\Program Files\Fichiers communs\AOL\1172324924\ee\aolsoftware.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\PROGRA~1\AVG\AVG8\avgtray.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\WINDOWS\system32\ctfmon.exe
    c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\PROGRA~1\AVG\AVG8\avgam.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
    C:\PROGRA~1\AVG\AVG8\avgrsx.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Spyware Terminator\sp_rsser.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\wanmpsvc.exe
    C:\Program Files\Inventel\Add-on\wlancfg.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
    C:\PROGRA~1\AVG\AVG8\avgnsx.exe
    C:\Documents and Settings\Soria\Bureau\SmitfraudFix\Policies.exe
    C:\WINDOWS\system32\cmd.exe

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    Fichier hosts corrompu !

    127.0.0.1 www.legal-at-spybot.info
    127.0.0.1 legal-at-spybot.info

    »»»»»»»»»»»»»»»»»»»»»»»» C:\


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Soria


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Soria\Application Data


    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Soria\Favoris


    »»»»»»»»»»»»»»»»»»»»»»»» Bureau


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="Ma page d'accueil"


    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» VACFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    404Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll


    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"="avgrsstx.dll"


    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
    "System"=""


    »»»»»»»»»»»»»»»»»»»»»»»» Rustock



    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: AOLbox - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 192.168.1.1

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{DC43513F-2D46-4405-9585-48BD843F1A9C}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{DC43513F-2D46-4405-9585-48BD843F1A9C}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


    »»»»»»»»»»»»»»»»»»»»»»»» Fin

    a b 8 Sécurité
    31 Mai 2008 12:05:17

    Re,

    Redémarre en mode sans échec

    Lance SmitfraudFix.exe et choisis cette fois l'Option 2 et réponds oui à la ou les questions.
    Sauvegarde le rapport sur ton Bureau.

    Redémarre normalement.

    Poste les rapports Hijackthis et SmitfraudFix.
    1 Juin 2008 14:47:51

    Bonjour, voici les nouveaux rapports

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 14:38:15, on 01/06/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16640)
    Boot mode: Safe mode

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\explorer.exe
    C:\Documents and Settings\Soria\Bureau\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {11B771F0-C8FD-426A-B537-F9AAE4059895} - (no file)
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: EWPBrowseObject Class - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
    O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: AVGTOOLBAR - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
    O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
    O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
    O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
    O3 - Toolbar: (no name) - {C48F0939-992C-45C8-A9C2-B97A22D9B4BD} - (no file)
    O3 - Toolbar: AVGTOOLBAR - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [LaunchApp] Alaunch
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
    O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
    O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
    O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
    O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
    O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
    O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 1
    O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
    O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
    O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1172324924\ee\AOLSoftware.exe
    O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
    O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
    O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
    O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
    O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [AOL Dialer] C:\Program Files\Fichiers communs\AOL\ACS\AOlDial.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.05\AMVConverter\grab.html
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
    O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
    O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
    O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
    O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.05\MediaManager\grab.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
    O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
    O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u3-win...
    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
    O20 - AppInit_DLLs: avgrsstx.dll
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
    O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (file missing)
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
    O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
    O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Add-on\wlancfg.exe

    --
    End of file - 11107 bytes



    SmitFraudFix v2.322

    Rapport fait à 14:35:04,67, 01/06/2008
    Executé à partir de C:\Documents and Settings\Soria\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode sans echec

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


    »»»»»»»»»»»»»»»»»»»»»»»» hosts


    127.0.0.1 localhost
    127.0.0.1 www.007guard.com
    127.0.0.1 007guard.com
    127.0.0.1 008i.com
    127.0.0.1 www.008k.com
    127.0.0.1 008k.com
    127.0.0.1 www.00hq.com
    127.0.0.1 00hq.com
    127.0.0.1 010402.com
    127.0.0.1 www.032439.com
    127.0.0.1 032439.com
    127.0.0.1 www.1001-search.info
    127.0.0.1 1001-search.info
    127.0.0.1 www.100888290cs.com
    127.0.0.1 100888290cs.com
    127.0.0.1 www.100sexlinks.com
    127.0.0.1 100sexlinks.com
    127.0.0.1 www.10sek.com
    127.0.0.1 10sek.com
    127.0.0.1 www.123topsearch.com
    127.0.0.1 123topsearch.com
    127.0.0.1 www.132.com
    127.0.0.1 132.com
    127.0.0.1 www.136136.net
    127.0.0.1 136136.net
    127.0.0.1 www.139mm.com
    127.0.0.1 139mm.com
    127.0.0.1 www.163ns.com
    127.0.0.1 163ns.com
    127.0.0.1 171203.com
    127.0.0.1 17-plus.com
    127.0.0.1 www.1800searchonline.com
    127.0.0.1 1800searchonline.com
    127.0.0.1 www.180searchassistant.com
    127.0.0.1 180searchassistant.com
    127.0.0.1 www.180solutions.com
    127.0.0.1 180solutions.com
    127.0.0.1 www.181.365soft.info
    127.0.0.1 181.365soft.info
    127.0.0.1 www.1987324.com
    127.0.0.1 1987324.com
    127.0.0.1 www.1-domains-registrations.com
    127.0.0.1 1-domains-registrations.com
    127.0.0.1 www.1-extreme.biz
    127.0.0.1 1-extreme.biz
    127.0.0.1 www.1sexparty.com
    127.0.0.1 1sexparty.com
    127.0.0.1 www.1stantivirus.com
    127.0.0.1 1stantivirus.com
    127.0.0.1 www.1stpagehere.com
    127.0.0.1 1stpagehere.com
    127.0.0.1 www.1stsearchportal.com
    127.0.0.1 1stsearchportal.com
    127.0.0.1 2.82211.net
    127.0.0.1 www.2006ooo.com
    127.0.0.1 www.2007-download.com
    127.0.0.1 2007-download.com
    127.0.0.1 www.2020search.com
    127.0.0.1 2020search.com
    127.0.0.1 20x2p.com
    127.0.0.1 www.24.365soft.info
    127.0.0.1 24.365soft.info
    127.0.0.1 www.24-7pharmacy.info
    127.0.0.1 24-7pharmacy.info
    127.0.0.1 www.24-7searching-and-more.com
    127.0.0.1 24-7searching-and-more.com
    127.0.0.1 www.24teen.com
    127.0.0.1 24teen.com
    127.0.0.1 www.2every.net
    127.0.0.1 2every.net
    127.0.0.1 2ndpower.com
    127.0.0.1 www.2search.com
    127.0.0.1 2search.com
    127.0.0.1 www.2search.org
    127.0.0.1 2search.org
    127.0.0.1 www.2squared.com
    127.0.0.1 2squared.com
    127.0.0.1 www.3322.org
    127.0.0.1 3322.org
    127.0.0.1 365soft.info
    127.0.0.1 www.36site.com
    127.0.0.1 36site.com
    127.0.0.1 3721.com
    127.0.0.1 39-93.com
    127.0.0.1 www.3abetterinternet.com
    127.0.0.1 3abetterinternet.com
    127.0.0.1 www.3bay.it
    127.0.0.1 3bay.it
    127.0.0.1 www.3ebay.it
    127.0.0.1 3ebay.it
    127.0.0.1 www.3xclipsonline.com
    127.0.0.1 3xclipsonline.com
    127.0.0.1 www.3xcurves.com
    127.0.0.1 3xcurves.com
    127.0.0.1 www.3xfestival.com
    127.0.0.1 3xfestival.com
    127.0.0.1 www.3x-festival.com
    127.0.0.1 3x-festival.com
    127.0.0.1 www.3x-galls.com
    127.0.0.1 3x-galls.com
    127.0.0.1 www.3xmiracle.com
    127.0.0.1 3xmiracle.com
    127.0.0.1 www.3xmoviesblog.com
    127.0.0.1 3xmoviesblog.com
    127.0.0.1 www.404dns.com
    127.0.0.1 404dns.com
    127.0.0.1 www.4199.com
    127.0.0.1 4199.com
    127.0.0.1 www.4corn.net
    127.0.0.1 4corn.net
    127.0.0.1 www.4ebay.it
    127.0.0.1 4ebay.it
    127.0.0.1 4klm.com
    127.0.0.1 www.4mpg.com
    127.0.0.1 4mpg.com
    127.0.0.1 www.4repubblica.it
    127.0.0.1 4repubblica.it
    127.0.0.1 www.4softget.com
    127.0.0.1 4softget.com
    127.0.0.1 www.5iscali.it
    127.0.0.1 5iscali.it
    127.0.0.1 www.5repubblica.it
    127.0.0.1 5repubblica.it
    127.0.0.1 www.5starvideos.com
    127.0.0.1 5starvideos.com
    127.0.0.1 www.5tiscali.it
    127.0.0.1 5tiscali.it
    127.0.0.1 www.5zgmu7o20kt5d8yq.com
    127.0.0.1 5zgmu7o20kt5d8yq.com
    127.0.0.1 www.680180.net
    127.0.0.1 680180.net
    127.0.0.1 www.6iscali.it
    127.0.0.1 6iscali.it
    127.0.0.1 www.6njaga.com
    127.0.0.1 6njaga.com
    127.0.0.1 www.6sek.com
    127.0.0.1 6sek.com
    127.0.0.1 www.6tiscali.it
    127.0.0.1 6tiscali.it
    127.0.0.1 www.70-music.com
    127.0.0.1 70-music.com
    127.0.0.1 www.7322.com
    127.0.0.1 7322.com
    127.0.0.1 75tz.com
    127.0.0.1 www.777search.com
    127.0.0.1 777search.com
    127.0.0.1 www.777top.com
    127.0.0.1 777top.com
    127.0.0.1 www.7939.com
    127.0.0.1 7939.com
    127.0.0.1 www.7search.com
    127.0.0.1 7search.com
    127.0.0.1 80gw6ry3i3x3qbrkwhxhw.032439.com
    127.0.0.1 www.80-music.com
    127.0.0.1 80-music.com
    127.0.0.1 82211.net
    127.0.0.1 8866.org
    127.0.0.1 www.888.com
    127.0.0.1 888.com
    127.0.0.1 www.88vcd.com
    127.0.0.1 88vcd.com
    127.0.0.1 www.8ad.com
    127.0.0.1 8ad.com
    127.0.0.1 www.90-music.com
    127.0.0.1 90-music.com
    127.0.0.1 www.9505.com
    127.0.0.1 9505.com
    127.0.0.1 www.971searchbox.com
    127.0.0.1 971searchbox.com
    127.0.0.1 9mmporn.com
    127.0.0.1 a.bestmanage.org
    127.0.0.1 www.aaabesthomepage.com
    127.0.0.1 aaabesthomepage.com
    127.0.0.1 aaasexypics.com
    127.0.0.1 www.aaawebfinder.com
    127.0.0.1 aaawebfinder.com
    127.0.0.1 www.aaqadarsztriv.com
    127.0.0.1 aaqadarsztriv.com
    127.0.0.1 www.aaqada-rsztriv.com
    127.0.0.1 aaqada-rsztriv.com
    127.0.0.1 www.aaqadaueorn.com
    127.0.0.1 aaqadaueorn.com
    127.0.0.1 www.aaqada-ueorn.com
    127.0.0.1 aaqada-ueorn.com
    127.0.0.1 www.aaqada-ygco.com
    127.0.0.1 aaqada-ygco.com
    127.0.0.1 www.aaqada-ymct.com
    127.0.0.1 aaqada-ymct.com
    127.0.0.1 aavc.com
    127.0.0.1 www.abccodec.com
    127.0.0.1 abccodec.com
    127.0.0.1 www.abcdperformance.com
    127.0.0.1 abcdperformance.com
    127.0.0.1 www.abc-find.info
    127.0.0.1 abc-find.info
    127.0.0.1 www.abcsearch.com
    127.0.0.1 abcsearch.com
    127.0.0.1 www.abetterinternet.com
    127.0.0.1 abetterinternet.com
    127.0.0.1 www.abnetsoft.info
    127.0.0.1 abnetsoft.info
    127.0.0.1 www.aboutclicker.com
    127.0.0.1 aboutclicker.com
    127.0.0.1 www.abrp.net
    127.0.0.1 abrp.net
    127.0.0.1 www.absolutee.com
    127.0.0.1 absolutee.com
    127.0.0.1 www.abyssmedia.com
    127.0.0.1 abyssmedia.com
    127.0.0.1 www.ac66.cn
    127.0.0.1 ac66.cn
    127.0.0.1 access.navinetwork.com
    127.0.0.1 access.rapid-pass.net
    127.0.0.1 www.accessactivexvideo.com
    127.0.0.1 accessactivexvideo.com
    127.0.0.1 www.accessclips.com
    127.0.0.1 accessclips.com
    127.0.0.1 www.access-dvd.com
    127.0.0.1 access-dvd.com
    127.0.0.1 www.accesskeygenerator.com
    127.0.0.1 accesskeygenerator.com
    127.0.0.1 www.accessthefuture.net
    127.0.0.1 accessthefuture.net
    127.0.0.1 www.accessvid.net
    127.0.0.1 accessvid.net
    127.0.0.1 www.acemedic.com
    127.0.0.1 acemedic.com
    127.0.0.1 www.ace-webmaster.com
    127.0.0.1 ace-webmaster.com
    127.0.0.1 acjp.com
    127.0.0.1 www.acrobat-2007.com
    127.0.0.1 acrobat-2007.com
    127.0.0.1 www.acrobat-8.com
    127.0.0.1 acrobat-8.com
    127.0.0.1 www.acrobat-center.com
    127.0.0.1 acrobat-center.com
    127.0.0.1 www.acrobat-hq.com
    127.0.0.1 acrobat-hq.com
    127.0.0.1 www.acrobatreader-8.com
    127.0.0.1 acrobatreader-8.com
    127.0.0.1 www.acrobat-reader-8.de
    127.0.0.1 acrobat-reader-8.de
    127.0.0.1 www.acrobat-stop.com
    127.0.0.1 acrobat-stop.com
    127.0.0.1 www.actionbreastcancer.org
    127.0.0.1 actionbreastcancer.org
    127.0.0.1 www.activesearcher.info
    127.0.0.1 activesearcher.info
    127.0.0.1 www.activexaccessobject.com
    127.0.0.1 activexaccessobject.com
    127.0.0.1 www.activexaccessvideo.com
    127.0.0.1 activexaccessvideo.com
    127.0.0.1 www.activexemedia.com
    127.0.0.1 activexemedia.com
    127.0.0.1 www.activexmediaobject.com
    127.0.0.1 activexmediaobject.com
    127.0.0.1 www.activexmediapro.com
    127.0.0.1 activexmediapro.com
    127.0.0.1 www.activexmediasite.com
    127.0.0.1 activexmediasite.com
    127.0.0.1 www.activexmediasoftware.com
    127.0.0.1 activexmediasoftware.com
    127.0.0.1 www.activexmediasource.com
    127.0.0.1 activexmediasource.com
    127.0.0.1 www.activexmediatool.com
    127.0.0.1 activexmediatool.com
    127.0.0.1 www.activexmediatour.com
    127.0.0.1 activexmediatour.com
    127.0.0.1 www.activexsoftwares.com
    127.0.0.1 activexsoftwares.com
    127.0.0.1 www.activexsource.com
    127.0.0.1 activexsource.com
    127.0.0.1 www.activexupdate.com
    127.0.0.1 activexupdate.com
    127.0.0.1 www.activexvideo.com
    127.0.0.1 activexvideo.com
    127.0.0.1 www.activexvideotool.com
    127.0.0.1 activexvideotool.com
    127.0.0.1 www.ad.marketingsector.com
    127.0.0.1 ad.marketingsector.com
    127.0.0.1 www.ad.mokead.com
    127.0.0.1 ad.mokead.com
    127.0.0.1 ad.oinadserver.com
    127.0.0.1 ad.outerinfoads.com
    127.0.0.1 www.ad25.com
    127.0.0.1 ad25.com
    127.0.0.1 www.ad45.com
    127.0.0.1 ad45.com
    127.0.0.1 www.ad77.com
    127.0.0.1 ad77.com
    127.0.0.1 www.ad86.com
    127.0.0.1 ad86.com
    127.0.0.1 www.adamsupportgroup.org
    127.0.0.1 adamsupportgroup.org
    127.0.0.1 www.adarmor.com
    127.0.0.1 adarmor.com
    127.0.0.1 www.adasearch.com
    127.0.0.1 adasearch.com
    127.0.0.1 adaware.cc
    127.0.0.1 www.adawarenow.com
    127.0.0.1 adawarenow.com
    127.0.0.1 adchannel.contextplus.net
    127.0.0.1 www.addetect.com
    127.0.0.1 addetect.com
    127.0.0.1 www.add-hhh.info
    127.0.0.1 add-hhh.info
    127.0.0.1 www.addictivetechnologies.com
    127.0.0.1 addictivetechnologies.com
    127.0.0.1 www.addictivetechnologies.net
    127.0.0.1 addictivetechnologies.net
    127.0.0.1 www.addioerrori.com
    127.0.0.1 addioerrori.com
    127.0.0.1 www.add-manager.com
    127.0.0.1 add-manager.com
    127.0.0.1 www.adgate.info
    127.0.0.1 adgate.info
    127.0.0.1 www.adintelligence.net
    127.0.0.1 adintelligence.net
    127.0.0.1 www.adioserrores.com
    127.0.0.1 adioserrores.com
    127.0.0.1 www.adipics.com
    127.0.0.1 adipics.com
    127.0.0.1 www.adlogix.com
    127.0.0.1 adlogix.com
    127.0.0.1 www.admin2cash.biz
    127.0.0.1 admin2cash.biz
    127.0.0.1 adnet-plus.com
    127.0.0.1 www.adnetserver.com
    127.0.0.1 adnetserver.com
    127.0.0.1 adobe-download-now.com
    127.0.0.1 www.adobe-downloads.com
    127.0.0.1 adobe-downloads.com
    127.0.0.1 www.adobe-reader-8.fr
    127.0.0.1 adobe-reader-8.fr
    127.0.0.1 www.adprotect.com
    127.0.0.1 adprotect.com
    127.0.0.1 ads.centralmedia.ws
    127.0.0.1 ads.k8l.info
    127.0.0.1 ads.kmpads.com
    127.0.0.1 ads.kw.revenue.net
    127.0.0.1 ads.marketingsector.com
    127.0.0.1 ads.searchingbooth.com
    127.0.0.1 ads.z-quest.com
    127.0.0.1 ads1.revenue.net
    127.0.0.1 www.ads183.com
    127.0.0.1 ads183.com
    127.0.0.1 www.adscontex.com
    127.0.0.1 adscontex.com
    127.0.0.1 www.adservices1.enhance.com
    127.0.0.1 adservices1.enhance.com
    127.0.0.1 adservs.com
    127.0.0.1 www.adsextend.net
    127.0.0.1 adsextend.net
    127.0.0.1 www.adshttp.com
    127.0.0.1 adshttp.com
    127.0.0.1 www.adsniffer.com
    127.0.0.1 adsniffer.com
    127.0.0.1 www.adsonwww.com
    127.0.0.1 adsonwww.com
    127.0.0.1 www.adspics.com
    127.0.0.1 adspics.com
    127.0.0.1 www.adsrevenue.net
    127.0.0.1 adsrevenue.net
    127.0.0.1 www.adtrak.net
    127.0.0.1 adtrak.net
    127.0.0.1 adtrgt.com
    127.0.0.1 www.adult18codec.com
    127.0.0.1 adult18codec.com
    127.0.0.1 www.adult777search.info
    127.0.0.1 adult777search.info
    127.0.0.1 www.adultan.com
    127.0.0.1 adultan.com
    127.0.0.1 www.adultcodec-2008.com
    127.0.0.1 adultcodec-2008.com
    127.0.0.1 www.adultcodecstars.com
    127.0.0.1 adultcodecstars.com
    127.0.0.1 www.adult-engine-search.com
    127.0.0.1 adult-engine-search.com
    127.0.0.1 www.adult-erotic-guide.net
    127.0.0.1 adult-erotic-guide.net
    127.0.0.1 www.adultfilmsite.com
    127.0.0.1 adultfilmsite.com
    127.0.0.1 www.adult-friends-finder.net
    127.0.0.1 adult-friends-finder.net
    127.0.0.1 adultgambling.org
    127.0.0.1 adult-host.org
    127.0.0.1 www.adulthyperlinks.com
    127.0.0.1 adulthyperlinks.com
    127.0.0.1 www.adultmovieplus.com
    127.0.0.1 adultmovieplus.com
    127.0.0.1 www.adult-mpg.net
    127.0.0.1 adult-mpg.net
    127.0.0.1 adult-personal.us
    127.0.0.1 adultsgames.net
    127.0.0.1 www.adultsonlyvids.com
    127.0.0.1 adultsonlyvids.com
    127.0.0.1 www.adultsper.com
    127.0.0.1 adultsper.com
    127.0.0.1 www.adulttds.com
    127.0.0.1 adulttds.com
    127.0.0.1 www.adultzoneworld.com
    127.0.0.1 adultzoneworld.com
    127.0.0.1 www.advancedcleaner.com
    127.0.0.1 advancedcleaner.com
    127.0.0.1 www.advcash.biz
    127.0.0.1 advcash.biz
    127.0.0.1 advert.exaccess.ru
    127.0.0.1 www.advertisemoney.info
    127.0.0.1 advertisemoney.info
    127.0.0.1 advertising.paltalk.com
    127.0.0.1 www.advertising-money.info
    127.0.0.1 advertising-money.info
    127.0.0.1 ad-ware.cc
    127.0.0.1 www.ad-w-a-r-e.com
    127.0.0.1 ad-w-a-r-e.com
    127.0.0.1 www.a-d-w-a-r-e.com
    127.0.0.1 a-d-w-a-r-e.com
    127.0.0.1 www.adware.pro
    127.0.0.1 adware.pro
    127.0.0.1 www.adwarealert.com
    127.0.0.1 adwarealert.com
    127.0.0.1 www.ad-warealert.com
    127.0.0.1 ad-warealert.com
    127.0.0.1 www.adwarearrest.com
    127.0.0.1 adwarearrest.com
    127.0.0.1 www.adwarebazooka.com
    127.0.0.1 adwarebazooka.com
    127.0.0.1 www.adwarecommander.com
    127.0.0.1 adwarecommander.com
    127.0.0.1 www.adwarefinder.com
    127.0.0.1 adwarefinder.com
    127.0.0.1 www.adwaregold.com
    127.0.0.1 adwaregold.com
    127.0.0.1 www.adwarepatrol.com
    127.0.0.1 adwarepatrol.com
    127.0.0.1 www.adwareplatinum.com
    127.0.0.1 adwareplatinum.com
    127.0.0.1 www.adwareprotectionsite.com
    127.0.0.1 adwareprotectionsite.com
    127.0.0.1 www.adwarepunisher.com
    127.0.0.1 adwarepunisher.com
    127.0.0.1 www.adwareremover.ws
    127.0.0.1 adwareremover.ws
    127.0.0.1 www.adwaresafety.com
    127.0.0.1 adwaresafety.com
    127.0.0.1 www.adwarexp.com
    127.0.0.1 adwarexp.com
    127.0.0.1 affiliate.idownload.com
    127.0.0.1 www.aflgate.com
    127.0.0.1 aflgate.com
    127.0.0.1 africaspromise.org
    127.0.0.1 agava.com
    127.0.0.1 agava.ru
    127.0.0.1 agentstudio.com
    127.0.0.1 www.aginegialle.it
    127.0.0.1 aginegialle.it
    127.0.0.1 www.ahnenforschung.de
    127.0.0.1 ahnenforschung.de
    127.0.0.1 aifind.info
    127.0.0.1 www.aifind.info
    127.0.0.1 www.airtleworld.com
    127.0.0.1 airtleworld.com
    127.0.0.1 www.aitalia.it
    127.0.0.1 aitalia.it
    127.0.0.1 akamai.downloadv3.com
    127.0.0.1 www.aklitalia.it
    127.0.0.1 aklitalia.it
    127.0.0.1 akril.com
    127.0.0.1 alcatel.ws
    127.0.0.1 www.alertspy.com
    127.0.0.1 alertspy.com
    127.0.0.1 www.alfacleaner.com
    127.0.0.1 alfacleaner.com
    127.0.0.1 alfa-search.com
    127.0.0.1 www.alialia.it
    127.0.0.1 alialia.it
    127.0.0.1 www.aliotalia.it
    127.0.0.1 aliotalia.it
    127.0.0.1 www.alirtalia.it
    127.0.0.1 alirtalia.it
    127.0.0.1 www.alitaia.it
    127.0.0.1 alitaia.it
    127.0.0.1 www.alitaklia.it
    127.0.0.1 alitaklia.it
    127.0.0.1 www.alitala.it
    127.0.0.1 alitala.it
    127.0.0.1 www.alitali.it
    127.0.0.1 alitali.it
    127.0.0.1 www.alitaliaq.it
    127.0.0.1 alitaliaq.it
    127.0.0.1 www.alitalias.it
    127.0.0.1 alitalias.it
    127.0.0.1 www.alitaliaz.it
    127.0.0.1 alitaliaz.it
    127.0.0.1 www.alitalioa.it
    127.0.0.1 alitalioa.it
    127.0.0.1 www.alitalisa.it
    127.0.0.1 alitalisa.it
    127.0.0.1 www.alitaliua.it
    127.0.0.1 alitaliua.it
    127.0.0.1 www.alitalkia.it
    127.0.0.1 alitalkia.it
    127.0.0.1 www.alitaloia.it
    127.0.0.1 alitaloia.it
    127.0.0.1 www.alitaluia.it
    127.0.0.1 alitaluia.it
    127.0.0.1 www.alitaslia.it
    127.0.0.1 alitaslia.it
    127.0.0.1 www.alitlia.it
    127.0.0.1 alitlia.it
    127.0.0.1 www.alitralia.it
    127.0.0.1 alitralia.it
    127.0.0.1 www.alitsalia.it
    127.0.0.1 alitsalia.it
    127.0.0.1 www.aliutalia.it
    127.0.0.1 aliutalia.it
    127.0.0.1 www.all1count.net
    127.0.0.1 all1count.net
    127.0.0.1 www.all4internet.com
    127.0.0.1 all4internet.com
    127.0.0.1 allabtcars.com
    127.0.0.1 allabtjeeps.com
    127.0.0.1 www.all-bittorrent.com
    127.0.0.1 all-bittorrent.com
    127.0.0.1 www.allcollisions.com
    127.0.0.1 allcollisions.com
    127.0.0.1 allcybersearch.com
    127.0.0.1 www.allcybersearch.com
    127.0.0.1 www.alldnserrors.com
    127.0.0.1 alldnserrors.com
    127.0.0.1 www.all-downloads-now.com
    127.0.0.1 all-downloads-now.com
    127.0.0.1 www.all-edonkey.com
    127.0.0.1 all-edonkey.com
    127.0.0.1 www.allertaminacce.com
    127.0.0.1 allertaminacce.com
    127.0.0.1 allforadult.com
    127.0.0.1 allhyperlinks.com
    127.0.0.1 www.alliesecurity.com
    127.0.0.1 alliesecurity.com
    127.0.0.1 all-inet.com
    127.0.0.1 allinternetbusiness.com
    127.0.0.1 www.all-limewire.com
    127.0.0.1 all-limewire.com
    127.0.0.1 www.allmegabucks.com
    127.0.0.1 allmegabucks.com
    127.0.0.1 www.allprotections.com
    127.0.0.1 allprotections.com
    127.0.0.1 www.allresultz.net
    127.0.0.1 allresultz.net
    127.0.0.1 www.allsearch.us
    127.0.0.1 allsearch.us
    127.0.0.1 www.allsecuritynotes.com
    127.0.0.1 allsecuritynotes.com
    127.0.0.1 www.allsecuritysite.com
    127.0.0.1 allsecuritysite.com
    127.0.0.1 www.allstarsvideos.net
    127.0.0.1 allstarsvideos.net
    127.0.0.1 www.alltiettantivirus.com
    127.0.0.1 alltiettantivirus.com
    127.0.0.1 www.alltruesoftware.com
    127.0.0.1 alltruesoftware.com
    127.0.0.1 www.allvideoactivex.com
    127.0.0.1 allvideoactivex.com
    127.0.0.1 www.almanah.biz
    127.0.0.1 almanah.biz
    127.0.0.1 almarvideos.com
    127.0.0.1 www.aloitalia.it
    127.0.0.1 aloitalia.it
    127.0.0.1 www.aluitalia.it
    127.0.0.1 aluitalia.it
    127.0.0.1 www.amaena.com
    127.0.0.1 amaena.com
    127.0.0.1 amandamountains.com
    127.0.0.1 www.amateurliveshow.com
    127.0.0.1 amateurliveshow.com
    127.0.0.1 www.amediasoftware.com
    127.0.0.1 amediasoftware.com
    127.0.0.1 www.amediasource.com
    127.0.0.1 amediasource.com
    127.0.0.1 www.americanautobargains.com
    127.0.0.1 americanautobargains.com
    127.0.0.1 www.americancarbargains.com
    127.0.0.1 americancarbargains.com
    127.0.0.1 american-teens.net
    127.0.0.1 amigeek.com
    127.0.0.1 www.amigobore.com
    127.0.0.1 amigobore.com
    127.0.0.1 amisbusiness.com
    127.0.0.1 www.ampmsearch.com
    127.0.0.1 ampmsearch.com
    127.0.0.1 www.analcord.com
    127.0.0.1 analcord.com
    127.0.0.1 analmovi.com
    127.0.0.1 www.anarchylolita.com
    127.0.0.1 anarchylolita.com
    127.0.0.1 anarchyporn.com
    127.0.0.1 www.andromedical.com
    127.0.0.1 andromedical.com
    127.0.0.1 www.animepornmag.com
    127.0.0.1 animepornmag.com
    127.0.0.1 anin.org
    127.0.0.1 www.anjpn-avxiz.biz
    127.0.0.1 anjpn-avxiz.biz
    127.0.0.1 www.anjpnzqav.biz
    127.0.0.1 anjpnzqav.biz
    127.0.0.1 www.anjpn-zqav.biz
    127.0.0.1 anjpn-zqav.biz
    127.0.0.1 annaromeo.com
    127.0.0.1 www.antiddos.us
    127.0.0.1 antiddos.us
    127.0.0.1 www.antiespiadorado.com
    127.0.0.1 antiespiadorado.com
    127.0.0.1 www.antiespionspack.com
    127.0.0.1 antiespionspack.com
    127.0.0.1 www.antigusanos2008.com
    127.0.0.1 antigusanos2008.com
    127.0.0.1 www.antispamassistant.com
    127.0.0.1 antispamassistant.com
    127.0.0.1 www.antispamdeluxe.com
    127.0.0.1 antispamdeluxe.com
    127.0.0.1 www.antispionage.com
    127.0.0.1 antispionage.com
    127.0.0.1 www.antispionagepro.com
    127.0.0.1 antispionagepro.com
    127.0.0.1 www.antispyadvanced.com
    127.0.0.1 antispyadvanced.com
    127.0.0.1 www.antispydns.biz
    127.0.0.1 antispydns.biz
    127.0.0.1 www.antispykit.com
    127.0.0.1 antispykit.com
    127.0.0.1 www.antispylab.com
    127.0.0.1 antispylab.com
    127.0.0.1 www.antispyshield.com
    127.0.0.1 antispyshield.com
    127.0.0.1 www.antispysolutions.com
    127.0.0.1 antispysolutions.com
    127.0.0.1 www.antispyware.com
    127.0.0.1 antispyware.com
    127.0.0.1 www.antispywareboot.com
    127.0.0.1 antispywareboot.com
    127.0.0.1 www.antispywarebot.com
    127.0.0.1 antispywarebot.com
    127.0.0.1 www.antispywarebox.com
    127.0.0.1 antispywarebox.com
    127.0.0.1 www.antispywaredownloads.com
    127.0.0.1 antispywaredownloads.com
    127.0.0.1 www.antispywaresuite.com
    127.0.0.1 antispywaresuite.com
    127.0.0.1 www.antispywareupdates.net
    127.0.0.1 antispywareupdates.net
    127.0.0.1 www.antispywarexp.com
    127.0.0.1 antispywarexp.com
    127.0.0.1 www.antispyweb.net
    127.0.0.1 antispyweb.net
    127.0.0.1 www.antiver2008.com
    127.0.0.1 antiver2008.com
    127.0.0.1 www.antivermins.com
    127.0.0.1 antivermins.com
    127.0.0.1 www.anti-vermins.com
    127.0.0.1 anti-vermins.com
    127.0.0.1 www.antivir2007.com
    127.0.0.1 antivir2007.com
    127.0.0.1 www.antivirgear.com
    127.0.0.1 antivirgear.com
    127.0.0.1 www.antivirus.fastfreedownload.com
    127.0.0.1 antivirus.fastfreedownload.com
    127.0.0.1 www.antivirus2008x.com
    127.0.0.1 antivirus2008x.com
    127.0.0.1 www.antivirusadvance.com
    127.0.0.1 antivirusadvance.com
    127.0.0.1 www.antivirusaskeladd.com
    127.0.0.1 antivirusaskeladd.com
    127.0.0.1 www.antivirusgereedschap.com
    127.0.0.1 antivirusgereedschap.com
    127.0.0.1 www.antivirusgolden.com
    127.0.0.1 antivirusgolden.com
    127.0.0.1 www.antivirus-hq.net
    127.0.0.1 antivirus-hq.net
    127.0.0.1 www.antiviruspcsuite.com
    127.0.0.1 antiviruspcsuite.com
    127.0.0.1 www.antiviruspremium.com
    127.0.0.1 antiviruspremium.com
    127.0.0.1 www.anti-virus-pro.com
    127.0.0.1 anti-virus-pro.com
    127.0.0.1 www.antivirusprotector.com
    127.0.0.1 antivirusprotector.com
    127.0.0.1 www.antivirus-scanner.com
    127.0.0.1 antivirus-scanner.com
    127.0.0.1 www.antivirusscherm.com
    127.0.0.1 antivirusscherm.com
    127.0.0.1 www.antivirussecuritypro.com
    127.0.0.1 antivirussecuritypro.com
    127.0.0.1 www.antivirus-stop.com
    127.0.0.1 antivirus-stop.com
    127.0.0.1 www.antivirussuite.com
    127.0.0.1 antivirussuite.com
    127.0.0.1 www.antiworm2008.com
    127.0.0.1 antiworm2008.com
    127.0.0.1 www.antiwurm2008.com
    127.0.0.1 antiwurm2008.com
    127.0.0.1 antrocity.com
    127.0.0.1 www.anyofus.com
    127.0.0.1 anyofus.com
    127.0.0.1 www.anysn.seproger.com
    127.0.0.1 anysn.seproger.com
    127.0.0.1 anything4health.com
    127.0.0.1 www.apicpreview.com
    127.0.0.1 apicpreview.com
    127.0.0.1 www.appealcircuit.com
    127.0.0.1 appealcircuit.com
    127.0.0.1 www.approvedlinks.com
    127.0.0.1 approvedlinks.com
    127.0.0.1 apps.deskwizz.com
    127.0.0.1 apps.webservicehost.com
    127.0.0.1 www.aprotectedpage.com
    127.0.0.1 aprotectedpage.com
    127.0.0.1 apsua.com
    127.0.0.1 www.archivioadulti.com
    127.0.0.1 archivioadulti.com
    127.0.0.1 www.archiviosex.net
    127.0.0.1 archiviosex.net
    127.0.0.1 aregay.com
    127.0.0.1 www.ares.click-new-download.com
    127.0.0.1 ares.click-new-download.com
    127.0.0.1 www.ares-freebie.com
    127.0.0.1 ares-freebie.com
    127.0.0.1 www.arespro2007.com
    127.0.0.1 arespro2007.com
    127.0.0.1 www.aresultra.com
    127.0.0.1 aresultra.com
    127.0.0.1 www.ares-usa.com
    127.0.0.1 ares-usa.com
    127.0.0.1 arheo.com
    127.0.0.1 arizonaweb.org
    127.0.0.1 armitageinn.com
    127.0.0.1 www.arquivojpgs.smtp.ru
    127.0.0.1 arquivojpgs.smtp.ru
    127.0.0.1 artachnid.com
    127.0.0.1 art-func.com
    127.0.0.1 art-xxx.com
    127.0.0.1 www.asafebrowser.com
    127.0.0.1 asafebrowser.com
    127.0.0.1 www.asafetyalways.com
    127.0.0.1 asafetyalways.com
    127.0.0.1 www.asafetynotice.com
    127.0.0.1 asafetynotice.com
    127.0.0.1 www.asafetypage.com
    127.0.0.1 asafetypage.com
    127.0.0.1 www.asdbiz.biz
    127.0.0.1 asdbiz.biz
    127.0.0.1 www.asdeykuddq.com
    127.0.0.1 asdeykuddq.com
    127.0.0.1 www.asecurebar.com
    127.0.0.1 asecurebar.com
    127.0.0.1 www.asecureboard.com
    127.0.0.1 asecureboard.com
    127.0.0.1 www.asecurevalue.com
    127.0.0.1 asecurevalue.com
    127.0.0.1 www.asecurityissue.com
    127.0.0.1 asecurityissue.com
    127.0.0.1 www.asecuritynotice.com
    127.0.0.1 asecuritynotice.com
    127.0.0.1 www.asecuritypaper.com
    127.0.0.1 asecuritypaper.com
    127.0.0.1 www.asecuritystuff.com
    127.0.0.1 asecuritystuff.com
    127.0.0.1 www.asfadaptation.com
    127.0.0.1 asfadaptation.com
    127.0.0.1 asiankingkong.com
    127.0.0.1 www.asianpornmag.com
    127.0.0.1 asianpornmag.com
    127.0.0.1 www.asiantoolbar.com
    127.0.0.1 asiantoolbar.com
    127.0.0.1 www.asidseiupc.com
    127.0.0.1 asidseiupc.com
    127.0.0.1 www.aslitalia.it
    127.0.0.1 aslitalia.it
    127.0.0.1 ass-gals.com
    127.0.0.1 www.assureprotection.com
    127.0.0.1 assureprotection.com
    127.0.0.1 asta-killer.com
    127.0.0.1 www.astrologie-server.com
    127.0.0.1 astrologie-server.com
    127.0.0.1 www.asupereva.it
    127.0.0.1 asupereva.it
    127.0.0.1 www.ataprogram.com
    127.0.0.1 ataprogram.com
    127.0.0.1 athenrye.com
    127.0.0.1 www.atotalsafety.com
    127.0.0.1 atotalsafety.com
    127.0.0.1 www.atrueprotection.com
    127.0.0.1 atrueprotection.com
    127.0.0.1 www.atruesecurity.com
    127.0.0.1 atruesecurity.com
    127.0.0.1 www.attackware.com
    127.0.0.1 attackware.com
    127.0.0.1 www.attrezzi.biz
    127.0.0.1 attrezzi.biz
    127.0.0.1 www.aucunsvirus.com
    127.0.0.1 aucunsvirus.com
    127.0.0.1 www.aulde.net
    127.0.0.1 aulde.net
    127.0.0.1 www.aupereva.it
    127.0.0.1 aupereva.it
    127.0.0.1 www.autobargains.org
    127.0.0.1 autobargains.org
    127.0.0.1 www.autobargainsnetwork.com
    127.0.0.1 autobargainsnetwork.com
    127.0.0.1 www.autocontext.begun.ru
    127.0.0.1 autocontext.begun.ru
    127.0.0.1 autoescrowpay.com
    127.0.0.1 www.avadvance.com
    127.0.0.1 avadvance.com
    127.0.0.1 www.avast.free-software-center.com
    127.0.0.1 avast.free-software-center.com
    127.0.0.1 www.avast-2007.com
    127.0.0.1 avast-2007.com
    127.0.0.1 www.avast-downloads.com
    127.0.0.1 avast-downloads.com
    127.0.0.1 www.avast-hq.com
    127.0.0.1 avast-hq.com
    127.0.0.1 www.avforce.com
    127.0.0.1 avforce.com
    127.0.0.1 www.avg.grab-it-today.net
    127.0.0.1 avg.grab-it-today.net
    127.0.0.1 www.avg.softwarecenterz.com
    127.0.0.1 avg.softwarecenterz.com
    127.0.0.1 www.avg-secure.com
    127.0.0.1 avg-secure.com
    127.0.0.1 www.aviadaptation.com
    127.0.0.1 aviadaptation.com
    127.0.0.1 avian-ads.com
    127.0.0.1 www.avicoupler.com
    127.0.0.1 avicoupler.com
    127.0.0.1 www.avideoaxaccess.com
    127.0.0.1 avideoaxaccess.com
    127.0.0.1 www.avideosurfer.com
    127.0.0.1 avideosurfer.com
    127.0.0.1 www.avidirection.com
    127.0.0.1 avidirection.com
    127.0.0.1 www.aviewersoft.com
    127.0.0.1 aviewersoft.com
    127.0.0.1 www.avihelper.com
    127.0.0.1 avihelper.com
    127.0.0.1 www.avitool.com
    127.0.0.1 avitool.com
    127.0.0.1 www.avpcheckupdate.com
    127.0.0.1 avpcheckupdate.com
    127.0.0.1 www.avsmanufacture.com
    127.0.0.1 avsmanufacture.com
    127.0.0.1 www.avsystemcare.com
    127.0.0.1 avsystemcare.com
    127.0.0.1 www.avxizaaqada.biz
    127.0.0.1 avxizaaqada.biz
    127.0.0.1 www.avxiz-anjpn.biz
    127.0.0.1 avxiz-anjpn.biz
    127.0.0.1 www.avxizueorn.biz
    127.0.0.1 avxizueorn.biz
    127.0.0.1 www.avxiz-ueorn.biz
    127.0.0.1 avxiz-ueorn.biz
    127.0.0.1 www.avxiz-vtvcp.biz
    127.0.0.1 avxiz-vtvcp.biz
    127.0.0.1 www.avxiz-ygco.biz
    127.0.0.1 avxiz-ygco.biz
    127.0.0.1 www.avxiz-zqav.biz
    127.0.0.1 avxiz-zqav.biz
    127.0.0.1 www.awarenesstech.com
    127.0.0.1 awarenesstech.com
    127.0.0.1 www.awarninglist.com
    127.0.0.1 awarninglist.com
    127.0.0.1 awbeta.net-nucleus.com
    127.0.0.1 www.awesomehomepage.com
    127.0.0.1 awesomehomepage.com
    127.0.0.1 awmcash.biz
    127.0.0.1 awmdabest.com
    127.0.0.1 www.axemediasoftware.com
    127.0.0.1 axemediasoftware.com
    127.0.0.1 www.aximageobject.com
    127.0.0.1 aximageobject.com
    127.0.0.1 www.axmediaproject.com
    127.0.0.1 axmediaproject.com
    127.0.0.1 www.axmediasoftware.com
    127.0.0.1 axmediasoftware.com
    127.0.0.1 www.axmediasolutions.com
    127.0.0.1 axmediasolutions.com
    127.0.0.1 www.axobjectpage.com
    127.0.0.1 axobjectpage.com
    127.0.0.1 www.axobjectsource.com
    127.0.0.1 axobjectsource.com
    127.0.0.1 www.axsoftwaretool.com
    127.0.0.1 axsoftwaretool.com
    127.0.0.1 www.axvideoproject.com
    127.0.0.1 axvideoproject.com
    127.0.0.1 www.axvideosetup.com
    127.0.0.1 axvideosetup.com
    127.0.0.1 ayakawamura.com
    127.0.0.1 ayb.dns-look-up.com
    127.0.0.1 ayb.netbios-wait.com
    127.0.0.1 ayumitaniguchi.com
    127.0.0.1 azebar.com
    127.0.0.1 www.azureusclub.com
    127.0.0.1 azureusclub.com
    127.0.0.1 www.azureus-freebie.com
    127.0.0.1 azureus-freebie.com
    127.0.0.1 www.azzetta.it
    127.0.0.1 azzetta.it
    127.0.0.1 b.casalemedia.com
    127.0.0.1 b122.mcboo.com
    127.0.0.1 www.babe.k-lined.com
    127.0.0.1 babe.k-lined.com
    127.0.0.1 www.babe.the-killer.bz
    127.0.0.1 babe.the-killer.bz
    127.0.0.1 www.babenet.com
    127.0.0.1 babenet.com
    127.0.0.1 www.babespornmag.com
    127.0.0.1 babespornmag.com
    127.0.0.1 www.babeweb.de
    127.0.0.1 babeweb.de
    127.0.0.1 www.baccarat-other.info
    127.0.0.1 baccarat-other.info
    127.0.0.1 www.backstripgirls.com
    127.0.0.1 backstripgirls.com
    127.0.0.1 backup.mabou.org
    127.0.0.1 www.baidu.com
    127.0.0.1 baidu.com
    127.0.0.1 www.balotierra.com
    127.0.0.1 balotierra.com
    127.0.0.1 bannedhost.net
    127.0.0.1 bar.baidu.com
    127.0.0.1 barbudafarms.com
    127.0.0.1 www.bardownload.com
    127.0.0.1 bardownload.com
    127.0.0.1 barnandfence.com
    127.0.0.1 batsearch.com
    127.0.0.1 baygraphicsllc.com
    127.0.0.1 bbbsearch.com
    127.0.0.1 bb-search.com
    127.0.0.1 www.bcnproduction.com
    127.0.0.1 bcnproduction.com
    127.0.0.1 bdsmlibrary.net
    127.0.0.1 www.bdsmpornmag.com
    127.0.0.1 bdsmpornmag.com
    127.0.0.1 www.bearshare.click-new-download.com
    127.0.0.1 bearshare.click-new-download.com
    127.0.0.1 www.bearshare.download-me.info
    127.0.0.1 bearshare.download-me.info
    127.0.0.1 www.bearshare.mp3-muzic.com
    127.0.0.1 bearshare.mp3-muzic.com
    127.0.0.1 www.bearshare-download.org
    127.0.0.1 bearshare-download.org
    127.0.0.1 www.bearshare-downloads.net
    127.0.0.1 bearshare-downloads.net
    127.0.0.1 www.bearsharelive.co.uk
    127.0.0.1 bearsharelive.co.uk
    127.0.0.1 www.bearshare-music-downloads.com
    127.0.0.1 bearshare-music-downloads.com
    127.0.0.1 www.bearsharepro2007.com
    127.0.0.1 bearsharepro2007.com
    127.0.0.1 www.bearshare-usa.com
    127.0.0.1 bearshare-usa.com
    127.0.0.1 bedhome.com
    127.0.0.1 bediadance.com
    127.0.0.1 www.beebappyy.biz
    127.0.0.1 beebappyy.biz
    127.0.0.1 www.begin2search.com
    127.0.0.1 begin2search.com
    127.0.0.1 bellabasketsfl.com
    127.0.0.1 bernaolatwin.com
    127.0.0.1 www.berufe-jobs.de
    127.0.0.1 berufe-jobs.de
    127.0.0.1 www.berufe-server.de
    127.0.0.1 berufe-server.de
    127.0.0.1 www.berufe-welt.de
    127.0.0.1 berufe-welt.de
    127.0.0.1 www.berufs-wahl.de
    127.0.0.1 berufs-wahl.de
    127.0.0.1 www.beruijindegunhadesun.com
    127.0.0.1 beruijindegunhadesun.com
    127.0.0.1 www.best3xclips.com
    127.0.0.1 best3xclips.com
    127.0.0.1 www.bestadults.com
    127.0.0.1 bestadults.com
    127.0.0.1 best-counter.com
    127.0.0.1 bestcrawler.com
    127.0.0.1 www.bestdailyvids.com
    127.0.0.1 bestdailyvids.com
    127.0.0.1 bestfor.ru
    127.0.0.1 www.bestfuckvids.com
    127.0.0.1 bestfuckvids.com
    127.0.0.1 best-hardpics.com
    127.0.0.1 www.bestmanage.org
    127.0.0.1 bestmanage.org
    127.0.0.1 www.bestmanage0.org
    127.0.0.1 bestmanage0.org
    127.0.0.1 www.bestmanage1.org
    127.0.0.1 bestmanage1.org
    127.0.0.1 www.bestmanage2.org
    127.0.0.1 bestmanage2.org
    127.0.0.1 www.bestmanage3.org
    127.0.0.1 bestmanage3.org
    127.0.0.1 www.bestmanage4.org
    127.0.0.1 bestmanage4.org
    127.0.0.1 www.bestmanage5.org
    127.0.0.1 bestmanage5.org
    127.0.0.1 www.bestmanage6.org
    127.0.0.1 bestmanage6.org
    127.0.0.1 www.bestmanage7.org
    127.0.0.1 bestmanage7.org
    127.0.0.1 www.bestmanage8.org
    127.0.0.1 bestmanage8.org
    127.0.0.1 www.bestmanage9.org
    127.0.0.1 bestmanage9.org
    127.0.0.1 www.bestmovszone.com
    127.0.0.1 bestmovszone.com
    127.0.0.1 www.bestoffersnetworks.com
    127.0.0.1 bestoffersnetworks.com
    127.0.0.1 bestporngate.com
    127.0.0.1 www.bestsafetyguide.net
    127.0.0.1 bestsafetyguide.net
    127.0.0.1 www.bestsearch.cc
    127.0.0.1 bestsearch.cc
    127.0.0.1 www.bestsearchworld.info
    127.0.0.1 bestsearchworld.info
    127.0.0.1 www.best-spyware.info
    127.0.0.1 best-spyware.info
    127.0.0.1 www.best-targeted-traffic.com
    127.0.0.1 best-targeted-traffic.com
    127.0.0.1 www.best-voyeur.info
    127.0.0.1 best-voyeur.info
    127.0.0.1 bestweblinks.com
    127.0.0.1 best-winning-casino.com
    127.0.0.1 www.bestworldgirls-for-u.net
    127.0.0.1 bestworldgirls-for-u.net
    127.0.0.1 www.bestxclips.com
    127.0.0.1 bestxclips.com
    127.0.0.1 bestxporno.com
    127.0.0.1 www.bestxxxmpegs.com
    127.0.0.1 bestxxxmpegs.com
    127.0.0.1 www.bettersearch.biz
    127.0.0.1 bettersearch.biz
    127.0.0.1 www.bgazzetta.it
    127.0.0.1 bgazzetta.it
    127.0.0.1 www.bgoogle.it
    127.0.0.1 bgoogle.it
    127.0.0.1 www.bigcodecadult.com
    127.0.0.1 bigcodecadult.com
    127.0.0.1 www.bigcodecadult2008.com
    127.0.0.1 bigcodecadult2008.com
    127.0.0.1 www.bigcodecadult2008-17.com
    127.0.0.1 bigcodecadult2008-17.com
    127.0.0.1 www.bighot18adult2008.com
    127.0.0.1 bighot18adult2008.com
    127.0.0.1 www.bighot18-adult2008.com
    127.0.0.1 bighot18-adult2008.com
    127.0.0.1 www.bighot18codec2008.com
    127.0.0.1 bighot18codec2008.com
    127.0.0.1 www.bighot18-codec2008.com
    127.0.0.1 bighot18-codec2008.com
    127.0.0.1 www.bigtrafficnetwork.com
    127.0.0.1 bigtrafficnetwork.com
    127.0.0.1 www.bigwww.com
    127.0.0.1 bigwww.com
    127.0.0.1 www.bill.de
    127.0.0.1 bill.de
    127.0.0.1 bin.errorprotector.com
    127.0.0.1 bins.media-motor.net
    127.0.0.1 bins2.media-motor.net
    127.0.0.1 bis.180solutions.com
    127.0.0.1 bitchesonline.net
    127.0.0.1 www.bitcomet-freebie.com
    127.0.0.1 bitcomet-freebie.com
    127.0.0.1 www.bittorrent.click-new-download.com
    127.0.0.1 bittorrent.click-new-download.com
    127.0.0.1 biz.biz
    127.0.0.1 www.bkvcompany.com
    127.0.0.1 bkvcompany.com
    127.0.0.1 www.blackblues00.com
    127.0.0.1 blackblues00.com
    127.0.0.1 www.blackcodec.com
    127.0.0.1 blackcodec.com
    127.0.0.1 www.blackcodec.net
    127.0.0.1 blackcodec.net
    127.0.0.1 www.blackhats.tc
    127.0.0.1 blackhats.tc
    127.0.0.1 www.blackhawksoftware.com
    127.0.0.1 blackhawksoftware.com
    127.0.0.1 blackjack-free.net
    127.0.0.1 www.blacklegion.info
    127.0.0.1 blacklegion.info
    127.0.0.1 blazefind.com
    127.0.0.1 blender.xu.pl
    127.0.0.1 www.blockcheckercontrol.com
    127.0.0.1 blockcheckercontrol.com
    127.0.0.1 blondetgp.com
    127.0.0.1 www.blue-elefant.com
    127.0.0.1 blue-elefant.com
    127.0.0.1 www.bm.theaimonline.com
    127.0.0.1 bm.theaimonline.com
    127.0.0.1 www.bnmgate.com
    127.0.0.1 bnmgate.com
    127.0.0.1 bodaciousbabette.com
    127.0.0.1 www.bonzi.com
    127.0.0.1 bonzi.com
    127.0.0.1 boobdoll.com
    127.0.0.1 boobsandtits.com
    127.0.0.1 boobsclub.com
    127.0.0.1 www.bookedspace.com
    127.0.0.1 bookedspace.com
    127.0.0.1 www.boom.com.vn
    127.0.0.1 boom.com.vn
    127.0.0.1 www.boomgirltv.com
    127.0.0.1 boomgirltv.com
    127.0.0.1 boredlife.com
    127.0.0.1 bowlofogumbo.com
    127.0.0.1 www.bpfq02.com
    127.0.0.1 bpfq02.com
    127.0.0.1 www.bqgate.com
    127.0.0.1 bqgate.com
    127.0.0.1 br.errorsafe.com
    127.0.0.1 br.winantivirus.com
    127.0.0.1 br.winfixer.com
    127.0.0.1 bradcoem.org
    127.0.0.1 www.braincodec.com
    127.0.0.1 braincodec.com
    127.0.0.1 brandiyoung.com
    127.0.0.1 www.bravesentry.com
    127.0.0.1 bravesentry.com
    127.0.0.1 www.breenten.biz
    127.0.0.1 breenten.biz
    127.0.0.1 www.brodbfm.net
    127.0.0.1 brodbfm.net
    127.0.0.1 brookeburn.com
    127.0.0.1 www.browserwise.com
    127.0.0.1 browserwise.com
    127.0.0.1 bsa.safetydownload.com
    127.0.0.1 www.bsplaycodec.com
    127.0.0.1 bsplaycodec.com
    127.0.0.1 bucps.com
    127.0.0.1 buhartes.info
    127.0.0.1 buldog-stats.com
    127.0.0.1 www.bullseye-network.com
    127.0.0.1 bullseye-network.com
    127.0.0.1 burgerkingbigscreen.com
    127.0.0.1 www.burningsite.com
    127.0.0.1 burningsite.com
    127.0.0.1 www.burnsrecyclinginc.com
    127.0.0.1 burnsrecyclinginc.com
    127.0.0.1 buscards.net
    127.0.0.1 bustyrussell.com
    127.0.0.1 www.busysearch.net
    127.0.0.1 busysearch.net
    127.0.0.1 buttejazz.org
    127.0.0.1 www.buy-find.info
    127.0.0.1 buy-find.info
    127.0.0.1 buyselldomain.net
    127.0.0.1 www.buytraff.biz
    127.0.0.1 buytraff.biz
    127.0.0.1 buz.ru
    127.0.0.1 www.bvdtechinque.com
    127.0.0.1 bvdtechinque.com
    127.0.0.1 www.bvirgilio.it
    127.0.0.1 bvirgilio.it
    127.0.0.1 c.centralmedia.ws
    127.0.0.1 www.c.enhance.com
    127.0.0.1 c.enhance.com
    127.0.0.1 c.goclick.com
    127.0.0.1 www.c4tdownload.com
    127.0.0.1 c4tdownload.com
    127.0.0.1 www.c5.www4free.info
    127.0.0.1 c5.www4free.info
    127.0.0.1 www.cache.surfaccuracy.com
    127.0.0.1 cache.surfaccuracy.com
    127.0.0.1 cache.ysbweb.com
    127.0.0.1 www.cadesfinjeriokas.com
    127.0.0.1 cadesfinjeriokas.com
    127.0.0.1 calcioturris.com
    127.0.0.1 www.calendaralerts.net
    127.0.0.1 calendaralerts.net
    127.0.0.1 www.callinghome.biz
    127.0.0.1 callinghome.biz
    127.0.0.1 www.cameouk.co.uk
    127.0.0.1 cameouk.co.uk
    127.0.0.1 cameup.com
    127.0.0.1 www.camouflageclothingonline.net
    127.0.0.1 camouflageclothingonline.net
    127.0.0.1 campaigns.outerinfo.net
    127.0.0.1 camup.net
    127.0.0.1 canberracricketcoaching.com
    127.0.0.1 candycantaloupes.com
    127.0.0.1 www.canidetect.org
    127.0.0.1 canidetect.org
    127.0.0.1 www.cantfind.com
    127.0.0.1 cantfind.com
    127.0.0.1 careers.dulcineasystems.net
    127.0.0.1 carsands.com
    127.0.0.1 carsrentals.net
    127.0.0.1 cartoes.uol.com.br
    127.0.0.1 www.casalemedia.com
    127.0.0.1 casalemedia.com
    127.0.0.1 www.cashdeluxe.net
    127.0.0.1 cashdeluxe.net
    127.0.0.1 www.cashengines.com
    127.0.0.1 cashengines.com
    127.0.0.1 cashsearch.biz
    127.0.0.1 www.cashsurfers.com
    127.0.0.1 cashsurfers.com
    127.0.0.1 www.cashunlim.com
    127.0.0.1 cashunlim.com
    127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
    127.0.0.1 casino2win.net
    127.0.0.1 casino-gambling-1.net
    127.0.0.1 casino-gambling-2.net
    127.0.0.1 casinomidas.net
    127.0.0.1 casinonline.net
    127.0.0.1 casino-onlines.net
    127.0.0.1 www.castingsamateur.com
    127.0.0.1 castingsamateur.com
    127.0.0.1 catallogue.com
    127.0.0.1 www.catch-dc.info
    127.0.0.1 catch-dc.info
    127.0.0.1 categories.mygeek.com
    127.0.0.1 catsss.da.ru
    127.0.0.1 caxa.ru
    127.0.0.1 cazygirls-world.com
    127.0.0.1 cc.panet.org
    127.0.0.1 www.ccecaedbebfcaf.com
    127.0.0.1 ccecaedbebfcaf.com
    127.0.0.1 cclebali.org
    127.0.0.1 www.ccorriere.it
    127.0.0.1 ccorriere.it
    127.0.0.1 www.cdcopysite.com
    127.0.0.1 cdcopysite.com
    127.0.0.1 www.cdegate.com
    127.0.0.1 cdegate.com
    127.0.0.1 cdn.drivecleaner.com
    127.0.0.1 cdn.errorsafe.com
    127.0.0.1 cdn.movies-etc.com
    127.0.0.1 cdn.winsoftware.com
    127.0.0.1 cdn2.movies-etc.com
    127.0.0.1 www.cdorriere.it
    127.0.0.1 cdorriere.it
    127.0.0.1 ceewawires.org
    127.0.0.1 centralmedia.ws
    127.0.0.1 certumgroup.com
    127.0.0.1 www.cforriere.it
    127.0.0.1 cforriere.it
    127.0.0.1 www.check.jupitersatellites.biz
    127.0.0.1 check.jupitersatellites.biz
    127.0.0.1 www.checkin100.com
    127.0.0.1 checkin100.com
    127.0.0.1 www.checkssecurity.com
    127.0.0.1 checkssecurity.com
    127.0.0.1 chelancatering.com
    127.0.0.1 www.chenshijituan.com
    127.0.0.1 chenshijituan.com
    127.0.0.1 childrenvilla.com
    127.0.0.1 www.chilly3xvids.com
    127.0.0.1 chilly3xvids.com
    127.0.0.1 www.chillymovs.com
    127.0.0.1 chillymovs.com
    127.0.0.1 chips-4-free.com
    127.0.0.1 chrisswasey.com
    127.0.0.1 chriswallace.net
    127.0.0.1 www.cia-trjn.myvnc.com
    127.0.0.1 cia-trjn.myvnc.com
    127.0.0.1 www.cinemadownload.com
    127.0.0.1 cinemadownload.com
    127.0.0.1 www.ciorriere.it
    127.0.0.1 ciorriere.it
    127.0.0.1 www.cirriere.it
    127.0.0.1 cirriere.it
    127.0.0.1 www.citycodec.com
    127.0.0.1 citycodec.com
    127.0.0.1 ckick4thumbs.com
    127.0.0.1 cl55.biz
    127.0.0.1 clackamasliteraryreview.com
    127.0.0.1 www.clckm.com
    127.0.0.1 clckm.com
    127.0.0.1 www.cleancodec.com
    127.0.0.1 cleancodec.com
    127.0.0.1 www.cleansoftwares.com
    127.0.0.1 cleansoftwares.com
    127.0.0.1 clearsearch.cc
    127.0.0.1 clearsearch.net
    127.0.0.1 clickaire.com
    127.0.0.1 www.click-codec.com
    127.0.0.1 click-codec.com
    127.0.0.1 www.clickhere4search.com
    127.0.0.1 clickhere4search.com
    127.0.0.1 www.click-new-download.com
    127.0.0.1 click-new-download.com
    127.0.0.1 click-now.net
    127.0.0.1 www.clickspring.net
    127.0.0.1 clickspring.net
    127.0.0.1 www.click-to-download.com
    127.0.0.1 click-to-download.com
    127.0.0.1 www.clicktomakeasearch.com
    127.0.0.1 clicktomakeasearch.com
    127.0.0.1 clickyestoenter.net
    127.0.0.1 client.exeupdate.com
    127.0.0.1 client.myadultexplorer.com
    127.0.0.1 www.cliks.org
    127.0.0.1 cliks.org
    127.0.0.1 www.clipsfestival.com
    127.0.0.1 clipsfestival.com
    127.0.0.1 www.clipsreality.com
    127.0.0.1 clipsreality.com
    127.0.0.1 www.clorriere.it
    127.0.0.1 clorriere.it
    127.0.0.1 clrsch.com
    127.0.0.1 www.clubxxxvideo.com
    127.0.0.1 clubxxxvideo.com
    127.0.0.1 clusif.free.fr
    127.0.0.1 cmtapestry.com
    127.0.0.1 www.cnetadd.com
    127.0.0.1 cnetadd.com
    127.0.0.1 www.cnomy.com
    127.0.0.1 cnomy.com
    127.0.0.1 www.cnzz.com
    127.0.0.1 cnzz.com
    127.0.0.1 www.cocktails-ideen.de
    127.0.0.1 cocktails-ideen.de
    127.0.0.1 code.ignphrases.com
    127.0.0.1 codec.ninoa.com
    127.0.0.1 www.codecadult18.com
    127.0.0.1 codecadult18.com
    127.0.0.1 www.codecbest.com
    127.0.0.1 codecbest.com
    127.0.0.1 www.codecbsplay.com
    127.0.0.1 codecbsplay.com
    127.0.0.1 www.codecdemo.com
    127.0.0.1 codecdemo.com
    127.0.0.1 www.codecdvd.net
    127.0.0.1 codecdvd.net
    127.0.0.1 www.codecdvi.com
    127.0.0.1 codecdvi.com
    127.0.0.1 www.codec-fun.com
    127.0.0.1 codec-fun.com
    127.0.0.1 www.codechard.com
    127.0.0.1 codechard.com
    127.0.0.1 www.codechot.net
    127.0.0.1 codechot.net
    127.0.0.1 www.codechq.net
    127.0.0.1 codechq.net
    127.0.0.1 www.codecmeg.net
    127.0.0.1 codecmeg.net
    127.0.0.1 www.codecmega.com
    127.0.0.1 codecmega.com
    127.0.0.1 www.codecmega.net
    127.0.0.1 codecmega.net
    127.0.0.1 www.codecmoon.com
    127.0.0.1 codecmoon.com
    127.0.0.1 www.codecmpg.com
    127.0.0.1 codecmpg.com
    127.0.0.1 www.codecnice.net
    127.0.0.1 codecnice.net
    127.0.0.1 www.codecnitro.com
    127.0.0.1 codecnitro.com
    127.0.0.1 www.codecops.net
    127.0.0.1 codecops.net
    127.0.0.1 www.codecplay.com
    127.0.0.1 codecplay.com
    127.0.0.1 www.codecpretty.net
    127.0.0.1 codecpretty.net
    127.0.0.1 www.codecpro.net
    127.0.0.1 codecpro.net
    127.0.0.1 www.codecred.net
    127.0.0.1 codecred.net
    127.0.0.1 www.codecsoft.net
    127.0.0.1 codecsoft.net
    127.0.0.1 www.codectime.com
    127.0.0.1 codectime.com
    127.0.0.1 www.codecultra.net
    127.0.0.1 codecultra.net
    127.0.0.1 www.codecvids.com
    127.0.0.1 codecvids.com
    127.0.0.1 www.codecvip.com
    127.0.0.1 codecvip.com
    127.0.0.1 www.codecviva.com
    127.0.0.1 codecviva.com
    127.0.0.1 www.codeczang.net
    127.0.0.1 codeczang.net
    127.0.0.1 www.codrriere.it
    127.0.0.1 codrriere.it
    127.0.0.1 www.coeriere.it
    127.0.0.1 coeriere.it
    127.0.0.1 www.coerriere.it
    127.0.0.1 coerriere.it
    127.0.0.1 www.cofrriere.it
    127.0.0.1 cofrriere.it
    127.0.0.1 www.cogrriere.it
    127.0.0.1 cogrriere.it
    127.0.0.1 www.coirriere.it
    127.0.0.1 coirriere.it
    127.0.0.1 command.adservs.com
    127.0.0.1 www.commonname.com
    127.0.0.1 www.computerpcgames.net
    127.0.0.1 computerpcgames.net
    127.0.0.1 www.computerrecover.com
    127.0.0.1 computerrecover.com
    127.0.0.1 config.180solutions.com
    127.0.0.1 www.content.dollarrevenue.com
    127.0.0.1 content.dollarrevenue.com
    127.0.0.1 www.content.ireit.com
    127.0.0.1 content.ireit.com
    127.0.0.1 content.onerateld.com
    127.0.0.1 www.contentmatch.net
    127.0.0.1 contentmatch.net
    127.0.0.1 www.contextplus.net
    127.0.0.1 contextplus.net
    127.0.0.1 www.contra-virus.com
    127.0.0.1 contra-virus.com
    127.0.0.1 www.controlmeh.com
    127.0.0.1 controlmeh.com
    127.0.0.1 www.convenient-search.com
    127.0.0.1 convenient-search.com
    127.0.0.1 www.cookingluck.com
    127.0.0.1 cookingluck.com
    127.0.0.1 www.cooldeskalert.com
    127.0.0.1 cooldeskalert.com
    127.0.0.1 coolfetishsite.com
    127.0.0.1 coolfreehost.com
    127.0.0.1 coolfreepage.com
    127.0.0.1 coolfreepages.com
    127.0.0.1 cool-homepage.co
    127.0.0.1 cool-homepage.com
    127.0.0.1 coolmoneysearch.com
    127.0.0.1 www.coolonlinebusiness.com
    127.0.0.1 coolonlinebusiness.com
    127.0.0.1 coolpornsearch.com
    127.0.0.1 cool-search.net
    127.0.0.1 cool-search.netfartpost.com
    127.0.0.1 coolsearcher.info
    127.0.0.1 www.coolservecorp.net
    127.0.0.1 coolservecorp.net
    127.0.0.1 www.coolwebsearch.com
    127.0.0.1 coolwebsearch.com
    127.0.0.1 cool-web-search.com
    127.0.0.1 coolwebsearsh.com
    127.0.0.1 www.coolwwwsearch.com
    127.0.0.1 coolwwwsearch.com
    127.0.0.1 cool-xxx.net
    127.0.0.1 www.coorriere.it
    127.0.0.1 coorriere.it
    127.0.0.1 copmtraine.com
    127.0.0.1 www.coprriere.it
    127.0.0.1 coprriere.it
    127.0.0.1 www.core.psyche-evolution.com
    127.0.0.1 core.psyche-evolution.com
    127.0.0.1 www.coreiere.it
    127.0.0.1 coreiere.it
    127.0.0.1 www.coreriere.it
    127.0.0.1 coreriere.it
    127.0.0.1 www.corrdiere.it
    127.0.0.1 corrdiere.it
    127.0.0.1 www.correiere.it
    127.0.0.1 correiere.it
    127.0.0.1 www.corrfiere.it
    127.0.0.1 corrfiere.it
    127.0.0.1 www.corrgiere.it
    127.0.0.1 corrgiere.it
    127.0.0.1 www.corridere.it
    127.0.0.1 corridere.it
    127.0.0.1 www.corriedre.it
    127.0.0.1 corriedre.it
    127.0.0.1 www.corriee.it
    127.0.0.1 corriee.it
    127.0.0.1 www.corrieere.it
    127.0.0.1 corrieere.it
    127.0.0.1 www.corriefre.it
    127.0.0.1 corriefre.it
    127.0.0.1 www.corriegre.it
    127.0.0.1 corriegre.it
    127.0.0.1 www.corrierde.it
    127.0.0.1 corrierde.it
    127.0.0.1 www.corriered.it
    127.0.0.1 corriered.it
    127.0.0.1 www.corrieree.it
    127.0.0.1 corrieree.it
    127.0.0.1 www.corrieref.it
    127.0.0.1 corrieref.it
    127.0.0.1 www.corrierer.it
    127.0.0.1 corrierer.it
    127.0.0.1 www.corrieres.it
    127.0.0.1 corrieres.it
    127.0.0.1 www.corrierew.it
    127.0.0.1 corrierew.it
    127.0.0.1 www.corrierfe.it
    127.0.0.1 corrierfe.it
    127.0.0.1 www.corrierge.it
    127.0.0.1 corrierge.it
    127.0.0.1 www.corrierr.it
    127.0.0.1 corrierr.it
    127.0.0.1 www.corrierre.it
    127.0.0.1 corrierre.it
    127.0.0.1 www.corrierse.it
    127.0.0.1 corrierse.it
    127.0.0.1 www.corrierte.it
    127.0.0.1 corrierte.it
    127.0.0.1 www.corrierw.it
    127.0.0.1 corrierw.it
    127.0.0.1 www.corrierwe.it
    127.0.0.1 corrierwe.it
    127.0.0.1 www.corriesre.it
    127.0.0.1 corriesre.it
    127.0.0.1 www.corriete.it
    127.0.0.1 corriete.it
    127.0.0.1 www.corrietre.it
    127.0.0.1 corrietre.it
    127.0.0.1 www.corriewre.it
    127.0.0.1 corriewre.it
    127.0.0.1 www.corrifere.it
    127.0.0.1 corrifere.it
    127.0.0.1 www.corriiere.it
    127.0.0.1 corriiere.it
    127.0.0.1 www.corrilere.it
    127.0.0.1 corrilere.it
    127.0.0.1 www.corrioere.it
    127.0.0.1 corrioere.it
    127.0.0.1 www.corrire.it
    127.0.0.1 corrire.it
    127.0.0.1 www.corrirere.it
    127.0.0.1 corrirere.it
    127.0.0.1 www.corrirre.it
    127.0.0.1 corrirre.it
    127.0.0.1 www.corrisere.it
    127.0.0.1 corrisere.it
    127.0.0.1 www.corriuere.it
    127.0.0.1 corriuere.it
    127.0.0.1 www.corriwere.it
    127.0.0.1 corriwere.it
    127.0.0.1 www.corriwre.it
    127.0.0.1 corriwre.it
    127.0.0.1 www.corrliere.it
    127.0.0.1 corrliere.it
    127.0.0.1 www.corroere.it
    127.0.0.1 corroere.it
    127.0.0.1 www.corroiere.it
    127.0.0.1 corroiere.it
    127.0.0.1 www.corrriere.it
    127.0.0.1 corrriere.it
    127.0.0.1 www.corrtiere.it
    127.0.0.1 corrtiere.it
    127.0.0.1 www.corruere.it
    127.0.0.1 corruere.it
    127.0.0.1 www.corruiere.it
    127.0.0.1 corruiere.it
    127.0.0.1 www.cortiere.it
    127.0.0.1 cortiere.it
    127.0.0.1 www.cortriere.it
    127.0.0.1 cortriere.it
    127.0.0.1 www.costrike.com
    127.0.0.1 costrike.com
    127.0.0.1 www.cotriere.it
    127.0.0.1 cotriere.it
    127.0.0.1 www.cotrriere.it
    127.0.0.1 cotrriere.it
    127.0.0.1 couldnotfind.com
    127.0.0.1 count.cc
    127.0.0.1 count.hitscount.net
    127.0.0.1 count-all.com
    127.0.0.1 www.countdutycall.info
    127.0.0.1 countdutycall.info
    127.0.0.1 counter.sexmaniack.com
    127.0.0.1 www.courtrecordslookup.com
    127.0.0.1 courtrecordslookup.com
    127.0.0.1 www.cporriere.it
    127.0.0.1 cporriere.it
    127.0.0.1 www.cprriere.it
    127.0.0.1 cprriere.it
    127.0.0.1 cpvfeed.com
    127.0.0.1 cracks.me.uk
    127.0.0.1 www.cracks4all.com
    127.0.0.1 cracks4all.com
    127.0.0.1 www.crapsgold.info
    127.0.0.1 crapsgold.info
    127.0.0.1 crazygirls-world.com
    127.0.0.1 www.crazywinnings.com
    127.0.0.1 crazywinnings.com
    127.0.0.1 creamedcutties.com
    127.0.0.1 www.createaccesskey.com
    127.0.0.1 createaccesskey.com
    127.0.0.1 www.creatonsoft.com
    127.0.0.1 creatonsoft.com
    127.0.0.1 creditsearchonline.com
    127.0.0.1 crestring.com
    127.0.0.1 crooder.com
    127.0.0.1 www.crriere.it
    127.0.0.1 crriere.it
    127.0.0.1 www.cryptdrive.com
    127.0.0.1 cryptdrive.com
    127.0.0.1 www.crystalysmedia.com
    127.0.0.1 crystalysmedia.com
    127.0.0.1 www.csx.adservs.com
    127.0.0.1 csx.adservs.com
    127.0.0.1 cts.180solutions.com
    127.0.0.1 www.cuisinartoven.com
    127.0.0.1 cuisinartoven.com
    127.0.0.1 www.curedc.info
    127.0.0.1 curedc.info
    127.0.0.1 www.curepcsolutions.com
    127.0.0.1 curepcsolutions.com
    127.0.0.1 curvedspaces.com
    127.0.0.1 www.cutadult.com
    127.0.0.1 cutadult.com
    127.0.0.1 www.cvirgilio.it
    127.0.0.1 cvirgilio.it
    127.0.0.1 www.cvorriere.it
    127.0.0.1 cvorriere.it
    127.0.0.1 cvs.jps.ru
    127.0.0.1 cvsymphony.com
    127.0.0.1 www.cxorriere.it
    127.0.0.1 cxorriere.it
    127.0.0.1 www.cyberrape.com
    127.0.0.1 cyberrape.com
    127.0.0.1 cydom.com
    127.0.0.1 www.cydoor.com
    127.0.0.1 cydoor.com
    127.0.0.1 www.daily3xlinks.com
    127.0.0.1 daily3xlinks.com
    127.0.0.1 www.dailybestclips.com
    127.0.0.1 dailybestclips.com
    127.0.0.1 daily-gals.com
    127.0.0.1 www.dailyhugemovs.com
    127.0.0.1 dailyhugemovs.com
    127.0.0.1 www.dailykeys.com
    127.0.0.1 dailykeys.com
    127.0.0.1 www.dailypornmag.com
    127.0.0.1 dailypornmag.com
    127.0.0.1 dailyteenspic.com
    127.0.0.1 www.dailytoolbar.com
    127.0.0.1 dailytoolbar.com
    127.0.0.1 www.dailyxvids.com
    127.0.0.1 dailyxvids.com
    127.0.0.1 dancingbabycd.com
    127.0.0.1 www.dapsol.com
    127.0.0.1 dapsol.com
    127.0.0.1 www.dapsolution.com
    127.0.0.1 dapsolution.com
    127.0.0.1 www.data-hoster.com
    127.0.0.1 data-hoster.com
    127.0.0.1 datanotary.com
    127.0.0.1 datareco.com
    127.0.0.1 www.dateanybabe.com
    127.0.0.1 dateanybabe.com
    127.0.0.1 www.dateanychick.com
    127.0.0.1 dateanychick.com
    127.0.0.1 www.datingdoctorsite.com
    127.0.0.1 datingdoctorsite.com
    127.0.0.1 www.dating-galaxy.info
    127.0.0.1 dating-galaxy.info
    127.0.0.1 dating-search.net
    127.0.0.1 davemarshall.org
    127.0.0.1 db105.com
    127.0.0.1 www.dbdecicated.com
    127.0.0.1 dbdecicated.com
    127.0.0.1 www.dbxcompany.com
    127.0.0.1 dbxcompany.com
    127.0.0.1 dcdl.dmcast.com
    127.0.0.1 dcfitusa.com
    127.0.0.1 www.dcorriere.it
    127.0.0.1 dcorriere.it
    127.0.0.1 www.dcurtis.com
    127.0.0.1 dcurtis.com
    127.0.0.1 dcww.dmcast.com
    127.0.0.1 de.ag
    127.0.0.1 de.drivecleaner.com
    127.0.0.1 de.errorsafe.com
    127.0.0.1 de.winantivirus.com
    127.0.0.1 de98.remsys.org
    127.0.0.1 www.debay.it
    127.0.0.1 debay.it
    127.0.0.1 www.decknews.com
    127.0.0.1 decknews.com
    127.0.0.1 dedmazay.3322.org
    127.0.0.1 www.dedsearch.com
    127.0.0.1 dedsearch.com
    127.0.0.1 defaultsearch.net
    127.0.0.1 www.defensaantimalware.com
    127.0.0.1 defensaantimalware.com
    127.0.0.1 www.deja-rue.com
    127.0.0.1 deja-rue.com
    127.0.0.1 www.delficodec.com
    127.0.0.1 delficodec.com
    127.0.0.1 www.democodec.com
    127.0.0.1 democodec.com
    127.0.0.1 www.derklaif.biz
    127.0.0.1 derklaif.biz
    127.0.0.1 www.derrari.it
    127.0.0.1 derrari.it
    127.0.0.1 desarrollocreativo.com
    127.0.0.1 www.deskbar.worldtostart.com
    127.0.0.1 deskbar.worldtostart.com
    127.0.0.1 www.deskwizz.com
    127.0.0.1 deskwizz.com
    127.0.0.1 www.destroy-spyware.net
    127.0.0.1 destroy-spyware.net
    127.0.0.1 www.destruktor.to.pl
    127.0.0.1 destruktor.to.pl
    127.0.0.1 www.detectivehound.com
    127.0.0.1 detectivehound.com
    127.0.0.1 www.detectivesearches.com
    127.0.0.1 detectivesearches.com
    127.0.0.1 dev.ntcor.com
    127.0.0.1 develip.com
    127.0.0.1 dewis.spb.ru
    127.0.0.1 dewis.us
    127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
    127.0.0.1 www.dgbusiness.com
    127.0.0.1 dgbusiness.com
    127.0.0.1 dialer2004.com
    127.0.0.1 www.dialerclub.com
    127.0.0.1 dialerclub.com
    127.0.0.1 www.dialer-shop.com
    127.0.0.1 dialer-shop.com
    127.0.0.1 www.dialoff.com
    127.0.0.1 dialoff.com
    127.0.0.1 www.did.i-used.cc
    127.0.0.1 did.i-used.cc
    127.0.0.1 dietpills4free.com
    127.0.0.1 dietpussy.com
    127.0.0.1 www.digikeygen.com
    127.0.0.1 digikeygen.com
    127.0.0.1 digistreamsa.com
    127.0.0.1 www.digitalcoders.net
    127.0.0.1 digitalcoders.net
    127.0.0.1 www.digitalfan.com
    127.0.0.1 digital-pornography.com
    127.0.0.1 dionforvalleycouncil.org
    127.0.0.1 www.directdvdpro.com
    127.0.0.1 directdvdpro.com
    127.0.0.1 www.directnameservice.com
    127.0.0.1 directnameservice.com
    127.0.0.1 www.directporta.info
    127.0.0.1 directporta.info
    127.0.0.1 www.directsearchzone.com
    127.0.0.1 directsearchzone.com
    127.0.0.1 www.diskretter.com
    127.0.0.1 diskretter.com
    127.0.0.1 dist.checkin100.com
    127.0.0.1 dl.ad-ware.cc
    127.0.0.1 dl.malwarewipe.com
    127.0.0.1 dl.mcboo.com
    127.0.0.1 www.dl.targetsaver.com
    127.0.0.1 dl.targetsaver.com
    127.0.0.1 dl.web-nexus.net
    127.0.0.1 dl1.antivermins.com
    127.0.0.1 dl1.antivirgear.com
    127.0.0.1 dl1.spydawn.com
    127.0.0.1 dl1.virusprotectpro.com
    127.0.0.1 dl10.spyfalcon.com
    127.0.0.1 dl16.spyfalcon.com
    127.0.0.1 dl2.spyfalcon.com
    127.0.0.1 dl2.spyheal.com
    127.0.0.1 dl2.spywarestrike.com
    127.0.0.1 dl3.spyfalcon.com
    127.0.0.1 dl3.spyheal.com
    127.0.0.1 dl3.spywarestrike.com
    127.0.0.1 dl4.spyfalcon.com
    127.0.0.1 dl4.spywarestrike.com
    127.0.0.1 dl5.spyfalcon.com
    127.0.0.1 dl5.spywarestrike.com
    127.0.0.1 dl6.spywarestrike.com
    127.0.0.1 dl7.spywarestrike.com
    127.0.0.1 dl8.spyheal.com
    127.0.0.1 dl8.spywarestrike.com
    127.0.0.1 dl9.spyfalcon.com
    127.0.0.1 dload.contextplus.net
    127.0.0.1 www.dltsolution.com
    127.0.0.1 dltsolution.com
    127.0.0.1 www.dmcast.com
    127.0.0.1 dmcast.com
    127.0.0.1 www.dmqfirm.com
    127.0.0.1 dmqfirm.com
    127.0.0.1 www.dnaads.com
    127.0.0.1 dnaads.com
    127.0.0.1 dnl.mabou.org
    127.0.0.1 www.dns-look-up.com
    127.0.0.1 dns-look-up.com
    127.0.0.1 doctorwaldron.com
    127.0.0.1 document-not-found.pornpic.org
    127.0.0.1 doggyaction.com
    127.0.0.1 www.dogproblemswebsite.com
    127.0.0.1 dogproblemswebsite.com
    127.0.0.1 doktorxxx.com
    127.0.0.1 dollarrevenue.com
    127.0.0.1 www.domaincar.com
    127.0.0.1 domaincar.com
    127.0.0.1 domains2003.net
    127.0.0.1 domains-for-you-online.com
    127.0.0.1 domain-your-registration.com
    127.0.0.1 domkrat.com
    127.0.0.1 www.doofo.com
    127.0.0.1 doofo.com
    127.0.0.1 www.dotcomtoolbar.com
    127.0.0.1 dotcomtoolbar.com
    127.0.0.1 down.136136.net
    127.0.0.1 download.abetterinternet.com
    127.0.0.1 download.adintelligence.net
    127.0.0.1 www.download.antispywarebot.com
    127.0.0.1 download.antispywarebot.com
    127.0.0.1 www.download.bardownload.com
    127.0.0.1 download.bardownload.com
    127.0.0.1 www.download.bravesentry.com
    127.0.0.1 download.bravesentry.com
    127.0.0.1 download.cdn.drivecleaner.com
    127.0.0.1 download.cdn.errorsafe.com
    127.0.0.1 download.cdn.winsoftware.com
    127.0.0.1 download.contextplus.net
    127.0.0.1 download.errorsafe.com
    127.0.0.1 www.download.jupitersatellites.biz
    127.0.0.1 download.jupitersatellites.biz
    127.0.0.1 download.malwarealarm.com
    127.0.0.1 download.searchtabs.net
    127.0.0.1 www.download.secureyournet.biz
    127.0.0.1 download.secureyournet.biz
    127.0.0.1 download.spyonthis.net
    127.0.0.1 download.spy-shredder.com
    127.0.0.1 download.systemdoctor.com
    127.0.0.1 download.winantispyware.com
    127.0.0.1 download.winantivirus.com
    127.0.0.1 download.windrivecleaner.com
    127.0.0.1 download.winfixer.com
    127.0.0.1 download10.spywarequake.com
    127.0.0.1 download11.spywarequake.com
    127.0.0.1 download12.spywarequake.com
    127.0.0.1 download13.spywarequake.com
    127.0.0.1 download15.spywarequake.com
    127.0.0.1 download2.spywarequake.com
    127.0.0.1 www.download-2007.com
    127.0.0.1 download-2007.com
    127.0.0.1 download3.spyaxe.com
    127.0.0.1 download3.spywarequake.com
    127.0.0.1 www.download3xpics.com
    127.0.0.1 download3xpics.com
    127.0.0.1 download4.spyaxe.com
    127.0.0.1 download4.spywarequake.com
    127.0.0.1 download5.spyaxe.com
    127.0.0.1 download5.spywarequake.com
    127.0.0.1 download6.spyaxe.com
    127.0.0.1 download7.spywarequake.com
    127
    a b 8 Sécurité
    1 Juin 2008 19:20:16

    Re,

    Télécharge R-Hosts.exe (de S!ri)
    Lance R-Hosts puis clique sur "Restaurer".
    Valide la modification en appuyant sur OK.
    1 Juin 2008 20:55:39

    Re,
    C'est fait, c'est très rapide. est-ce que je dois enlever tous les programmes qui ont servis au nettoyage, d'autre part, j'ai télécharger Avira Antivir comme tu le conseillais, dois je faire autre chose ?
    Merci
    a b 8 Sécurité
    2 Juin 2008 13:15:43

    Refais un scan Smitfraudfix option 1.
    3 Juin 2008 20:55:36

    Bonsoir,
    voici le rapport Smitfraudix

    SmitFraudFix v2.322

    Rapport fait à 20:52:09,95, 03/06/2008
    Executé à partir de C:\Documents and Settings\Soria\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» Process

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\a-squared Free\a2service.exe
    C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
    C:\PROGRA~1\AVG\AVG8\avgam.exe
    C:\PROGRA~1\AVG\AVG8\avgrsx.exe
    C:\PROGRA~1\AVG\AVG8\avgnsx.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Spyware Terminator\sp_rsser.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\wanmpsvc.exe
    C:\Program Files\Inventel\Add-on\wlancfg.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\ehome\ehtray.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\WINDOWS\system32\SysMonitor.exe
    C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
    C:\Program Files\Fichiers communs\AOL\1172324924\ee\AOLSoftware.exe
    C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
    C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
    C:\Program Files\Real\RealPlayer\RealPlay.exe
    C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
    C:\PROGRA~1\AVG\AVG8\avgtray.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\cmd.exe

    »»»»»»»»»»»»»»»»»»»»»»»» hosts


    »»»»»»»»»»»»»»»»»»»»»»»» C:\


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Soria


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Soria\Application Data


    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Soria\Favoris


    »»»»»»»»»»»»»»»»»»»»»»»» Bureau


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau



    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» VACFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    404Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll


    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"="avgrsstx.dll"


    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
    "System"=""


    »»»»»»»»»»»»»»»»»»»»»»»» Rustock



    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: AOLbox - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 192.168.1.1

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{DC43513F-2D46-4405-9585-48BD843F1A9C}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{DC43513F-2D46-4405-9585-48BD843F1A9C}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


    »»»»»»»»»»»»»»»»»»»»»»»» Fin

    a b 8 Sécurité
    4 Juin 2008 13:59:05

    Passe l'option 2 pour voir.
    4 Juin 2008 14:21:34

    bonjour,
    voici le rapport de l'option 2

    SmitFraudFix v2.322

    Rapport fait à 14:14:47,89, 04/06/2008
    Executé à partir de C:\Documents and Settings\Soria\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode sans echec

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


    »»»»»»»»»»»»»»»»»»»»»»»» hosts


    127.0.0.1 localhost

    »»»»»»»»»»»»»»»»»»»»»»»» VACFix

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

    S!Ri's WS2Fix: LSP not Found.


    »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

    GenericRenosFix by S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés


    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix

    404Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{DC43513F-2D46-4405-9585-48BD843F1A9C}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{DC43513F-2D46-4405-9585-48BD843F1A9C}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


    »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"=""


    »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

    Nettoyage terminé.

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll


    »»»»»»»»»»»»»»»»»»»»»»»» Fin

    a b 8 Sécurité
    4 Juin 2008 17:55:44

    Tu as une ancienne version de Smitfraudfix. Supprime ta version puis recommence.
    4 Juin 2008 22:52:11

    Bonsoir,
    j'ai telecharger SmitFraudFix sur le site et c'est toujours cette version qui revient SmitFraudFix v2.322
    Pourrais-tu m'envoyer la bonne version
    Cordialement
    4 Juin 2008 23:11:22

    Re,
    Désolée je me suis trompée
    Voici le rapport après l'option 1
    SmitFraudFix v2.323

    Rapport fait à 22:56:09,99, 04/06/2008
    Executé à partir de C:\Documents and Settings\Soria\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» Process

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\WINDOWS\Explorer.EXE
    C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
    C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
    C:\WINDOWS\system32\SysMonitor.exe
    C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Fichiers communs\AOL\1172324924\ee\AOLSoftware.exe
    C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
    C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
    C:\Program Files\Real\RealPlayer\RealPlay.exe
    C:\Program Files\Spyware Terminator\sp_rsser.exe
    C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\wanmpsvc.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Inventel\Add-on\wlancfg.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\WINDOWS\system32\cmd.exe

    »»»»»»»»»»»»»»»»»»»»»»»» hosts


    »»»»»»»»»»»»»»»»»»»»»»»» C:\


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Soria


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Soria\Application Data


    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Soria\Favoris


    »»»»»»»»»»»»»»»»»»»»»»»» Bureau


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau



    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» VACFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    404Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll


    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"=""
    "LoadAppInit_DLLs"=dword:00000001


    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
    "System"=""


    »»»»»»»»»»»»»»»»»»»»»»»» Rustock



    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: AOLbox - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 192.168.1.1

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{DC43513F-2D46-4405-9585-48BD843F1A9C}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{DC43513F-2D46-4405-9585-48BD843F1A9C}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


    »»»»»»»»»»»»»»»»»»»»»»»» Fin

    et voici le rapport après l'option 2
    SmitFraudFix v2.323

    Rapport fait à 23:02:38,93, 04/06/2008
    Executé à partir de C:\Documents and Settings\Soria\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode sans echec

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


    »»»»»»»»»»»»»»»»»»»»»»»» hosts


    127.0.0.1 localhost

    »»»»»»»»»»»»»»»»»»»»»»»» VACFix

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

    S!Ri's WS2Fix: LSP not Found.


    »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

    GenericRenosFix by S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés


    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix

    404Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{DC43513F-2D46-4405-9585-48BD843F1A9C}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{DC43513F-2D46-4405-9585-48BD843F1A9C}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


    »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"=""


    »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

    Nettoyage terminé.

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll


    »»»»»»»»»»»»»»»»»»»»»»»» Fin

    Merci encore Angeldark pour ton aide

    a b 8 Sécurité
    5 Juin 2008 13:18:20

    Alors ?
    7 Juin 2008 18:47:28

    bonjour,
    j'ai envoyé les 2 rapports smitfraudix, est ce que maintenant tout est nickel ? Je ne suis pas calée en informatique, j'attends que tu me dise que tout est bon d'après les rapports.
    Merci
    a b 8 Sécurité
    8 Juin 2008 12:01:53

    Pour toi, c'est ok ?
    11 Juin 2008 22:26:33

    Bonsoir,
    désolée du retard, oui pour moi c'est rentrer dans l'ordre, par contre que dois je garder sur mon pc
    Smitfraudix,
    Combo Fix,
    Hijackthis,
    Ad watch,
    Ccleaner,
    Regcleaner,
    Multivirus Cleaner,
    Ad aware,
    Malwarebytes'anti malware,
    Peux tu me dire lesquels je peux supprimer et Aviva antivir suffit-il pour protéger mon ordinateur
    merci de ta réponse
    a b 8 Sécurité
    12 Juin 2008 13:51:37

    Garde juste MBAM :) 
    12 Juin 2008 19:17:15

    Bonsoir,
    merci encore une fois pour ton aide.
    Aviva antivir et MBAM suffisent-il pour protéger mon ordinateur ?

    a b 8 Sécurité
    13 Juin 2008 11:41:31

    Si tu fais attention : pas de cracks, pas de XXX, etc. > Oui
    14 Juin 2008 20:41:00

    Bonsoir,
    Encore ue fois je te remercie Angeldark pour ton aide.
    Merci pour votre site
    a+
    a b 8 Sécurité
    15 Juin 2008 12:34:22

    De rien ;) 
    Tom's guide dans le monde
    • Allemagne
    • Italie
    • Irlande
    • Royaume Uni
    • Etats Unis
    Suivre Tom's Guide
    Inscrivez-vous à la Newsletter
    • ajouter à twitter
    • ajouter à facebook
    • ajouter un flux RSS