Problème smitfraud C

Bonjour,

La carte mère de mon PC portable s'étant crashée hier.. Je me retrouve à utiliser un vieux PC de mon frêre qui se trouve être infecté par ce charmant virus qu'est SmitfraudC

Voici le rapport de l'option 1 :

SmitFraudFix v2.344

Rapport fait à 19:20:58,18, 27/05/2009
Executé à partir de C:\Documents and Settings\harlock\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Canal\Canal Widget\VOD\CanalPlus.VOD.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\iPod Access for Windows\iPAHelper.exe
C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TVersity\Media Server\MediaServer.exe
C:\WINDOWS\system32\UAService7.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\Dit.exe
C:\WINDOWS\mHotkey.exe
C:\Program Files\Home Cinema\PowerCinema\PCMService.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE
C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\WINDOWS\system32\atwtusb.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\harlock\Bureau\SmitfraudFix\Policies.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts

Fichier hosts corrompu !

127.0.0.1	www.legal-at-spybot.info
127.0.0.1	legal-at-spybot.info
127.0.0.1	www.spywareinfo.com
127.0.0.1	spywareinfo.com

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

C:\WINDOWS\privacy_danger PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\harlock


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\harlock\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\harlock\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
 

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» AntiXPVSTFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

AntiXPVSTFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""
"LoadAppInit_DLLs"=dword:00000001


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» RK



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: VIA Rhine III Fast Ethernet Adapter
DNS Server Search Order: 212.27.40.241
DNS Server Search Order: 212.27.40.240

HKLM\SYSTEM\CCS\Services\Tcpip\..\{8BF99620-5A59-45A7-B138-82439591B842}: DhcpNameServer=212.27.40.241 212.27.40.240
HKLM\SYSTEM\CCS\Services\Tcpip\..\{9C98C528-E7CE-4AB7-8042-81E90F7737A0}: DhcpNameServer=80.236.0.73 81.220.255.4 80.236.0.68
HKLM\SYSTEM\CS1\Services\Tcpip\..\{8BF99620-5A59-45A7-B138-82439591B842}: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS1\Services\Tcpip\..\{9C98C528-E7CE-4AB7-8042-81E90F7737A0}: DhcpNameServer=80.236.0.73 81.220.255.4 80.236.0.68
HKLM\SYSTEM\CS3\Services\Tcpip\..\{8BF99620-5A59-45A7-B138-82439591B842}: DhcpNameServer=212.27.40.241 212.27.40.240
HKLM\SYSTEM\CS3\Services\Tcpip\..\{9C98C528-E7CE-4AB7-8042-81E90F7737A0}: DhcpNameServer=80.236.0.73 81.220.255.4 80.236.0.68
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.241 212.27.40.240
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.241 212.27.40.240


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Configuration: Windows XP Internet Explorer 7.0

14 réponses

  1. Contributeur sécurité
    Bonsoir,

    il n'y a pas que le PC qui soit vieux.

    La version de SmitfraudFix date de fin août 2008.
    1. Re moi...

      Donc avec l'option 2 ca donne ca :

      <code>SmitFraudFix v2.344

      Rapport fait à 19:39:29,35, 27/05/2009
      Executé à partir de C:\Documents and Settings\harlock\Bureau\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
      Le type du système de fichiers est NTFS
      Fix executé en mode sans echec

      »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

      »»»»»»»»»»»»»»»»»»»»»»»» hosts

      127.0.0.1 localhost
      127.0.0.1 www.007guard.com
      127.0.0.1 007guard.com
      127.0.0.1 008i.com
      127.0.0.1 www.008k.com
      127.0.0.1 008k.com
      127.0.0.1 www.00hq.com
      127.0.0.1 00hq.com
      127.0.0.1 010402.com
      127.0.0.1 www.032439.com
      127.0.0.1 032439.com
      127.0.0.1 www.100888290cs.com
      127.0.0.1 100888290cs.com
      127.0.0.1 www.100sexlinks.com
      127.0.0.1 100sexlinks.com
      127.0.0.1 www.10sek.com
      127.0.0.1 10sek.com
      127.0.0.1 www.123topsearch.com
      127.0.0.1 123topsearch.com
      127.0.0.1 www.132.com
      127.0.0.1 132.com
      127.0.0.1 www.136136.net
      127.0.0.1 136136.net
      127.0.0.1 www.163ns.com
      127.0.0.1 163ns.com
      127.0.0.1 171203.com
      127.0.0.1 17-plus.com
      127.0.0.1 www.1800searchonline.com
      127.0.0.1 1800searchonline.com
      127.0.0.1 www.180searchassistant.com
      127.0.0.1 180searchassistant.com
      127.0.0.1 www.180solutions.com
      127.0.0.1 180solutions.com
      127.0.0.1 www.181.365soft.info
      127.0.0.1 181.365soft.info
      127.0.0.1 www.1987324.com
      127.0.0.1 1987324.com
      127.0.0.1 www.1-domains-registrations.com
      127.0.0.1 1-domains-registrations.com
      127.0.0.1 www.1sexparty.com
      127.0.0.1 1sexparty.com
      127.0.0.1 www.1stantivirus.com
      127.0.0.1 1stantivirus.com
      127.0.0.1 www.1stpagehere.com
      127.0.0.1 1stpagehere.com
      127.0.0.1 www.1stsearchportal.com
      127.0.0.1 1stsearchportal.com
      127.0.0.1 2.82211.net
      127.0.0.1 www.2006ooo.com
      127.0.0.1 2006ooo.com
      127.0.0.1 www.2007-download.com
      127.0.0.1 2007-download.com
      127.0.0.1 www.2008-search-destroy.com
      127.0.0.1 2008-search-destroy.com
      127.0.0.1 www.2020search.com
      127.0.0.1 2020search.com
      127.0.0.1 20x2p.com
      127.0.0.1 www.24.365soft.info
      127.0.0.1 24.365soft.info
      127.0.0.1 www.24-7pharmacy.info
      127.0.0.1 24-7pharmacy.info
      127.0.0.1 www.24-7searching-and-more.com
      127.0.0.1 24-7searching-and-more.com
      127.0.0.1 www.24teen.com
      127.0.0.1 24teen.com
      127.0.0.1 2ndpower.com
      127.0.0.1 www.2search.com
      127.0.0.1 2search.com
      127.0.0.1 www.2search.org
      127.0.0.1 2search.org
      127.0.0.1 www.2squared.com
      127.0.0.1 2squared.com
      127.0.0.1 www.3322.org
      127.0.0.1 3322.org
      127.0.0.1 365soft.info
      127.0.0.1 www.36site.com
      127.0.0.1 36site.com
      127.0.0.1 3721.com
      127.0.0.1 39-93.com
      127.0.0.1 www.3bay.it
      127.0.0.1 3bay.it
      127.0.0.1 www.3xclipsonline.com
      127.0.0.1 3xclipsonline.com
      127.0.0.1 www.3xcurves.com
      127.0.0.1 3xcurves.com
      127.0.0.1 www.3xfestival.com
      127.0.0.1 3xfestival.com
      127.0.0.1 www.3x-festival.com
      127.0.0.1 3x-festival.com
      127.0.0.1 www.3x-galls.com
      127.0.0.1 3x-galls.com
      127.0.0.1 www.3xmiracle.com
      127.0.0.1 3xmiracle.com
      127.0.0.1 www.3xmoviesblog.com
      127.0.0.1 3xmoviesblog.com
      127.0.0.1 www.404dns.com
      127.0.0.1 404dns.com
      127.0.0.1 www.4199.com
      127.0.0.1 4199.com
      127.0.0.1 www.4corn.net
      127.0.0.1 4corn.net
      127.0.0.1 www.4ebay.it
      127.0.0.1 4ebay.it
      127.0.0.1 4klm.com
      127.0.0.1 www.4mpg.com
      127.0.0.1 4mpg.com
      127.0.0.1 www.59cn.cn
      127.0.0.1 59cn.cn
      127.0.0.1 www.5starsblog.com
      127.0.0.1 5starsblog.com
      127.0.0.1 www.5zgmu7o20kt5d8yq.com
      127.0.0.1 5zgmu7o20kt5d8yq.com
      127.0.0.1 www.680180.net
      127.0.0.1 680180.net
      127.0.0.1 www.6sek.com
      127.0.0.1 6sek.com
      127.0.0.1 www.70-music.com
      127.0.0.1 70-music.com
      127.0.0.1 www.7322.com
      127.0.0.1 7322.com
      127.0.0.1 www.745970.com
      127.0.0.1 745970.com
      127.0.0.1 75tz.com
      127.0.0.1 www.777search.com
      127.0.0.1 777search.com
      127.0.0.1 www.777top.com
      127.0.0.1 777top.com
      127.0.0.1 www.7939.com
      127.0.0.1 7939.com
      127.0.0.1 80gw6ry3i3x3qbrkwhxhw.032439.com
      127.0.0.1 www.80-music.com
      127.0.0.1 80-music.com
      127.0.0.1 82211.net
      127.0.0.1 8866.org
      127.0.0.1 www.88vcd.com
      127.0.0.1 88vcd.com
      127.0.0.1 www.8ad.com
      127.0.0.1 8ad.com
      127.0.0.1 www.90-music.com
      127.0.0.1 90-music.com
      127.0.0.1 www.9505.com
      127.0.0.1 9505.com
      127.0.0.1 www.971searchbox.com
      127.0.0.1 971searchbox.com
      127.0.0.1 9mmporn.com
      127.0.0.1 a.bestmanage.org
      127.0.0.1 www.aaabesthomepage.com
      127.0.0.1 aaabesthomepage.com
      127.0.0.1 aaasexypics.com
      127.0.0.1 www.aaawebfinder.com
      127.0.0.1 aaawebfinder.com
      127.0.0.1 www.aaqadarsztriv.com
      127.0.0.1 aaqadarsztriv.com
      127.0.0.1 www.aaqada-rsztriv.com
      127.0.0.1 aaqada-rsztriv.com
      127.0.0.1 www.aaqadaueorn.com
      127.0.0.1 aaqadaueorn.com
      127.0.0.1 www.aaqada-ueorn.com
      127.0.0.1 aaqada-ueorn.com
      127.0.0.1 www.aaqada-ygco.com
      127.0.0.1 aaqada-ygco.com
      127.0.0.1 www.aaqada-ymct.com
      127.0.0.1 aaqada-ymct.com
      127.0.0.1 www.aav2008.com
      127.0.0.1 aav2008.com
      127.0.0.1 aavc.com
      127.0.0.1 www.abccodec.com
      127.0.0.1 abccodec.com
      127.0.0.1 www.abcdperformance.com
      127.0.0.1 abcdperformance.com
      127.0.0.1 www.abc-find.info
      127.0.0.1 abc-find.info
      127.0.0.1 www.abcsearch.com
      127.0.0.1 abcsearch.com
      127.0.0.1 www.abcways.com
      127.0.0.1 abcways.com
      127.0.0.1 www.abetterinternet.com
      127.0.0.1 abetterinternet.com
      127.0.0.1 www.abnetsoft.info
      127.0.0.1 abnetsoft.info
      127.0.0.1 www.about-adult.net
      127.0.0.1 about-adult.net
      127.0.0.1 www.aboutclicker.com
      127.0.0.1 aboutclicker.com
      127.0.0.1 www.abrp.net
      127.0.0.1 abrp.net
      127.0.0.1 www.absolutee.com
      127.0.0.1 absolutee.com
      127.0.0.1 www.ac66.cn
      127.0.0.1 ac66.cn
      127.0.0.1 access.navinetwork.com
      127.0.0.1 access.rapid-pass.net
      127.0.0.1 www.accessactivexvideo.com
      127.0.0.1 accessactivexvideo.com
      127.0.0.1 www.accessclips.com
      127.0.0.1 accessclips.com
      127.0.0.1 www.access-dvd.com
      127.0.0.1 access-dvd.com
      127.0.0.1 www.accesskeygenerator.com
      127.0.0.1 accesskeygenerator.com
      127.0.0.1 www.accessthefuture.net
      127.0.0.1 accessthefuture.net
      127.0.0.1 www.accessvid.net
      127.0.0.1 accessvid.net
      127.0.0.1 www.acemedic.com
      127.0.0.1 acemedic.com
      127.0.0.1 www.ace-webmaster.com
      127.0.0.1 ace-webmaster.com
      127.0.0.1 acjp.com
      127.0.0.1 www.acrobat-2007.com
      127.0.0.1 acrobat-2007.com
      127.0.0.1 www.acrobat-8.com
      127.0.0.1 acrobat-8.com
      127.0.0.1 www.acrobat-center.com
      127.0.0.1 acrobat-center.com
      127.0.0.1 www.acrobat-hq.com
      127.0.0.1 acrobat-hq.com
      127.0.0.1 www.acrobatreader-8.com
      127.0.0.1 acrobatreader-8.com
      127.0.0.1 www.acrobat-reader-8.de
      127.0.0.1 acrobat-reader-8.de
      127.0.0.1 www.acrobat-stop.com
      127.0.0.1 acrobat-stop.com
      127.0.0.1 www.actionbreastcancer.org
      127.0.0.1 actionbreastcancer.org
      127.0.0.1 www.activesearcher.info
      127.0.0.1 activesearcher.info
      127.0.0.1 www.activexaccessobject.com
      127.0.0.1 activexaccessobject.com
      127.0.0.1 www.activexaccessvideo.com
      127.0.0.1 activexaccessvideo.com
      127.0.0.1 www.activexemedia.com
      127.0.0.1 activexemedia.com
      127.0.0.1 www.activexmediaobject.com
      127.0.0.1 activexmediaobject.com
      127.0.0.1 www.activexmediapro.com
      127.0.0.1 activexmediapro.com
      127.0.0.1 www.activexmediasite.com
      127.0.0.1 activexmediasite.com
      127.0.0.1 www.activexmediasoftware.com
      127.0.0.1 activexmediasoftware.com
      127.0.0.1 www.activexmediasource.com
      127.0.0.1 activexmediasource.com
      127.0.0.1 www.activexmediatool.com
      127.0.0.1 activexmediatool.com
      127.0.0.1 www.activexmediatour.com
      127.0.0.1 activexmediatour.com
      127.0.0.1 www.activexsoftwares.com
      127.0.0.1 activexsoftwares.com
      127.0.0.1 www.activexsource.com
      127.0.0.1 activexsource.com
      127.0.0.1 www.activexupdate.com
      127.0.0.1 activexupdate.com
      127.0.0.1 www.activexvideo.com
      127.0.0.1 activexvideo.com
      127.0.0.1 www.activexvideotool.com
      127.0.0.1 activexvideotool.com
      127.0.0.1 www.ad.marketingsector.com
      127.0.0.1 ad.marketingsector.com
      127.0.0.1 www.ad.mokead.com
      127.0.0.1 ad.mokead.com
      127.0.0.1 ad.oinadserver.com
      127.0.0.1 ad.outerinfoads.com
      127.0.0.1 www.ad25.com
      127.0.0.1 ad25.com
      127.0.0.1 www.ad45.com
      127.0.0.1 ad45.com
      127.0.0.1 www.ad77.com
      127.0.0.1 ad77.com
      127.0.0.1 www.ad86.com
      127.0.0.1 ad86.com
      127.0.0.1 www.adamsupportgroup.org
      127.0.0.1 adamsupportgroup.org
      127.0.0.1 www.adarmor.com
      127.0.0.1 adarmor.com
      127.0.0.1 www.adasearch.com
      127.0.0.1 adasearch.com
      127.0.0.1 adaware.cc
      127.0.0.1 www.adawarenow.com
      127.0.0.1 adawarenow.com
      127.0.0.1 adchannel.contextplus.net
      127.0.0.1 www.addetect.com
      127.0.0.1 addetect.com
      127.0.0.1 www.add-hhh.info
      127.0.0.1 add-hhh.info
      127.0.0.1 www.addictivetechnologies.com
      127.0.0.1 addictivetechnologies.com
      127.0.0.1 www.addictivetechnologies.net
      127.0.0.1 addictivetechnologies.net
      127.0.0.1 www.addioerrori.com
      127.0.0.1 addioerrori.com
      127.0.0.1 www.add-manager.com
      127.0.0.1 add-manager.com
      127.0.0.1 www.adgate.info
      127.0.0.1 adgate.info
      127.0.0.1 www.adintelligence.net
      127.0.0.1 adintelligence.net
      127.0.0.1 www.adioserrores.com
      127.0.0.1 adioserrores.com
      127.0.0.1 www.adipics.com
      127.0.0.1 adipics.com
      127.0.0.1 www.adlogix.com
      127.0.0.1 adlogix.com
      127.0.0.1 www.admin2cash.biz
      127.0.0.1 admin2cash.biz
      127.0.0.1 adnet-plus.com
      127.0.0.1 www.adnetserver.com
      127.0.0.1 adnetserver.com
      127.0.0.1 adobe-download-now.com
      127.0.0.1 www.adobe-downloads.com
      127.0.0.1 adobe-downloads.com
      127.0.0.1 www.adobe-reader-8.fr
      127.0.0.1 adobe-reader-8.fr
      127.0.0.1 www.adprotect.com
      127.0.0.1 adprotect.com
      127.0.0.1 ads.centralmedia.ws
      127.0.0.1 ads.k8l.info
      127.0.0.1 ads.kmpads.com
      127.0.0.1 ads.kw.revenue.net
      127.0.0.1 ads.marketingsector.com
      127.0.0.1 ads.searchingbooth.com
      127.0.0.1 ads.z-quest.com
      127.0.0.1 ads1.revenue.net
      127.0.0.1 www.ads183.com
      127.0.0.1 ads183.com
      127.0.0.1 www.adscontex.com
      127.0.0.1 adscontex.com
      127.0.0.1 www.adservices1.enhance.com
      127.0.0.1 adservices1.enhance.com
      127.0.0.1 adservs.com
      127.0.0.1 www.adsextend.net
      127.0.0.1 adsextend.net
      127.0.0.1 www.adshttp.com
      127.0.0.1 adshttp.com
      127.0.0.1 www.adsniffer.com
      127.0.0.1 adsniffer.com
      127.0.0.1 www.adsonwww.com
      127.0.0.1 adsonwww.com
      127.0.0.1 www.adspics.com
      127.0.0.1 adspics.com
      127.0.0.1 www.adsrevenue.net
      127.0.0.1 adsrevenue.net
      127.0.0.1 www.adtrak.net
      127.0.0.1 adtrak.net
      127.0.0.1 adtrgt.com
      127.0.0.1 www.adult18codec.com
      127.0.0.1 adult18codec.com
      127.0.0.1 www.adult777search.info
      127.0.0.1 adult777search.info
      127.0.0.1 www.adultan.com
      127.0.0.1 adultan.com
      127.0.0.1 www.adultcodec-2008.com
      127.0.0.1 adultcodec-2008.com
      127.0.0.1 www.adultcodecstars.com
      127.0.0.1 adultcodecstars.com
      127.0.0.1 www.adult-engine-search.com
      127.0.0.1 adult-engine-search.com
      127.0.0.1 www.adult-erotic-guide.net
      127.0.0.1 adult-erotic-guide.net
      127.0.0.1 www.adultfilmsite.com
      127.0.0.1 adultfilmsite.com
      127.0.0.1 www.adult-friends-finder.net
      127.0.0.1 adult-friends-finder.net
      127.0.0.1 adultgambling.org
      127.0.0.1 adult-host.org
      127.0.0.1 www.adulthyperlinks.com
      127.0.0.1 adulthyperlinks.com
      127.0.0.1 www.adultmovieplus.com
      127.0.0.1 adultmovieplus.com
      127.0.0.1 www.adult-mpg.net
      127.0.0.1 adult-mpg.net
      127.0.0.1 adult-personal.us
      127.0.0.1 adultsgames.net
      127.0.0.1 www.adultsonlyvids.com
      127.0.0.1 adultsonlyvids.com
      127.0.0.1 www.adultsper.com
      127.0.0.1 adultsper.com
      127.0.0.1 www.adulttds.com
      127.0.0.1 adulttds.com
      127.0.0.1 www.adultzoneworld.com
      127.0.0.1 adultzoneworld.com
      127.0.0.1 www.advancedcleaner.com
      127.0.0.1 advancedcleaner.com
      127.0.0.1 www.advancedxpfixer.com
      127.0.0.1 advancedxpfixer.com
      127.0.0.1 www.advcash.biz
      127.0.0.1 advcash.biz
      127.0.0.1 advert.exaccess.ru
      127.0.0.1 www.advertisemoney.info
      127.0.0.1 advertisemoney.info
      127.0.0.1 advertising.paltalk.com
      127.0.0.1 www.advertising-money.info
      127.0.0.1 advertising-money.info
      127.0.0.1 www.advert-network.com
      127.0.0.1 advert-network.com
      127.0.0.1 ad-ware.cc
      127.0.0.1 www.ad-w-a-r-e.com
      127.0.0.1 ad-w-a-r-e.com
      127.0.0.1 www.a-d-w-a-r-e.com
      127.0.0.1 a-d-w-a-r-e.com
      127.0.0.1 www.adware.pro
      127.0.0.1 adware.pro
      127.0.0.1 www.adwarealert.com
      127.0.0.1 adwarealert.com
      127.0.0.1 www.ad-warealert.com
      127.0.0.1 ad-warealert.com
      127.0.0.1 www.adwarearrest.com
      127.0.0.1 adwarearrest.com
      127.0.0.1 www.adwarebazooka.com
      127.0.0.1 adwarebazooka.com
      127.0.0.1 www.adwarebot.com
      127.0.0.1 adwarebot.com
      127.0.0.1 www.adwarecommander.com
      127.0.0.1 adwarecommander.com
      127.0.0.1 www.adwarefinder.com
      127.0.0.1 adwarefinder.com
      127.0.0.1 www.adwaregold.com
      127.0.0.1 adwaregold.com
      127.0.0.1 www.adwarepatrol.com
      127.0.0.1 adwarepatrol.com
      127.0.0.1 www.adwareplatinum.com
      127.0.0.1 adwareplatinum.com
      127.0.0.1 www.adwareprotectionsite.com
      127.0.0.1 adwareprotectionsite.com
      127.0.0.1 www.adwarepunisher.com
      127.0.0.1 adwarepunisher.com
      127.0.0.1 www.adwareremover.ws
      127.0.0.1 adwareremover.ws
      127.0.0.1 www.adwaresafety.com
      127.0.0.1 adwaresafety.com
      127.0.0.1 www.adwarexp.com
      127.0.0.1 adwarexp.com
      127.0.0.1 affiliate.idownload.com
      127.0.0.1 www.aflgate.com
      127.0.0.1 aflgate.com
      127.0.0.1 africaspromise.org
      127.0.0.1 agava.com
      127.0.0.1 agava.ru
      127.0.0.1 agentstudio.com
      127.0.0.1 www.ageofconans.net
      127.0.0.1 ageofconans.net
      127.0.0.1 www.aginegialle.it
      127.0.0.1 aginegialle.it
      127.0.0.1 www.ahnenforschung.de
      127.0.0.1 ahnenforschung.de
      127.0.0.1 www.aifind.info
      127.0.0.1 aifind.info
      127.0.0.1 www.airtleworld.com
      127.0.0.1 airtleworld.com
      127.0.0.1 www.aitalia.it
      127.0.0.1 aitalia.it
      127.0.0.1 akamai.downloadv3.com
      127.0.0.1 www.aklitalia.it
      127.0.0.1 aklitalia.it
      127.0.0.1 akril.com
      127.0.0.1 alcatel.ws
      127.0.0.1 www.alertspy.com
      127.0.0.1 alertspy.com
      127.0.0.1 www.alfacleaner.com
      127.0.0.1 alfacleaner.com
      127.0.0.1 alfa-search.com
      127.0.0.1 www.alialia.it
      127.0.0.1 alialia.it
      127.0.0.1 www.aliotalia.it
      127.0.0.1 aliotalia.it
      127.0.0.1 www.alirtalia.it
      127.0.0.1 alirtalia.it
      127.0.0.1 www.alitaia.it
      127.0.0.1 alitaia.it
      127.0.0.1 www.alitaklia.it
      127.0.0.1 alitaklia.it
      127.0.0.1 www.alitala.it
      127.0.0.1 alitala.it
      127.0.0.1 www.alitali.it
      127.0.0.1 alitali.it
      127.0.0.1 www.alitaliaq.it
      127.0.0.1 alitaliaq.it
      127.0.0.1 www.alitalias.it
      127.0.0.1 alitalias.it
      127.0.0.1 www.alitaliaz.it
      127.0.0.1 alitaliaz.it
      127.0.0.1 www.alitalioa.it
      127.0.0.1 alitalioa.it
      127.0.0.1 www.alitalisa.it
      127.0.0.1 alitalisa.it
      127.0.0.1 www.alitaliua.it
      127.0.0.1 alitaliua.it
      127.0.0.1 www.alitalkia.it
      127.0.0.1 alitalkia.it
      127.0.0.1 www.alitaloia.it
      127.0.0.1 alitaloia.it
      127.0.0.1 www.alitaluia.it
      127.0.0.1 alitaluia.it
      127.0.0.1 www.alitaslia.it
      127.0.0.1 alitaslia.it
      127.0.0.1 www.alitlia.it
      127.0.0.1 alitlia.it
      127.0.0.1 www.alitralia.it
      127.0.0.1 alitralia.it
      127.0.0.1 www.alitsalia.it
      127.0.0.1 alitsalia.it
      127.0.0.1 www.aliutalia.it
      127.0.0.1 aliutalia.it
      127.0.0.1 www.all1count.net
      127.0.0.1 all1count.net
      127.0.0.1 www.all4internet.com
      127.0.0.1 all4internet.com
      127.0.0.1 allabtcars.com
      127.0.0.1 allabtjeeps.com
      127.0.0.1 www.all-bittorrent.com
      127.0.0.1 all-bittorrent.com
      127.0.0.1 www.allcollisions.com
      127.0.0.1 allcollisions.com
      127.0.0.1 www.allcybersearch.com
      127.0.0.1 allcybersearch.com
      127.0.0.1 www.alldiskscheck300.com
      127.0.0.1 alldiskscheck300.com
      127.0.0.1 www.alldnserrors.com
      127.0.0.1 alldnserrors.com
      127.0.0.1 www.all-downloads-now.com
      127.0.0.1 all-downloads-now.com
      127.0.0.1 www.all-edonkey.com
      127.0.0.1 all-edonkey.com
      127.0.0.1 www.allertaminacce.com
      127.0.0.1 allertaminacce.com
      127.0.0.1 allforadult.com
      127.0.0.1 allhyperlinks.com
      127.0.0.1 www.alliesecurity.com
      127.0.0.1 alliesecurity.com
      127.0.0.1 all-inet.com
      127.0.0.1 allinternetbusiness.com
      127.0.0.1 www.all-limewire.com
      127.0.0.1 all-limewire.com
      127.0.0.1 www.allmegabucks.com
      127.0.0.1 allmegabucks.com
      127.0.0.1 www.allprotections.com
      127.0.0.1 allprotections.com
      127.0.0.1 www.allresultz.net
      127.0.0.1 allresultz.net
      127.0.0.1 www.allsearch.us
      127.0.0.1 allsearch.us
      127.0.0.1 www.allsecuritynotes.com
      127.0.0.1 allsecuritynotes.com
      127.0.0.1 www.allsecuritysite.com
      127.0.0.1 allsecuritysite.com
      127.0.0.1 www.allstarsvideos.net
      127.0.0.1 allstarsvideos.net
      127.0.0.1 www.alltiettantivirus.com
      127.0.0.1 alltiettantivirus.com
      127.0.0.1 www.alltruesoftware.com
      127.0.0.1 alltruesoftware.com
      127.0.0.1 www.allvideoactivex.com
      127.0.0.1 allvideoactivex.com
      127.0.0.1 www.almanah.biz
      127.0.0.1 almanah.biz
      127.0.0.1 almarvideos.com
      127.0.0.1 www.aloitalia.it
      127.0.0.1 aloitalia.it
      127.0.0.1 www.aluitalia.it
      127.0.0.1 aluitalia.it
      127.0.0.1 www.amaena.com
      127.0.0.1 amaena.com
      127.0.0.1 amandamountains.com
      127.0.0.1 www.amateurliveshow.com
      127.0.0.1 amateurliveshow.com
      127.0.0.1 www.amediasoftware.com
      127.0.0.1 amediasoftware.com
      127.0.0.1 www.amediasource.com
      127.0.0.1 amediasource.com
      127.0.0.1 www.americanautobargains.com
      127.0.0.1 americanautobargains.com
      127.0.0.1 www.americancarbargains.com
      127.0.0.1 americancarbargains.com
      127.0.0.1 american-teens.net
      127.0.0.1 amigeek.com
      127.0.0.1 www.amigobore.com
      127.0.0.1 amigobore.com
      127.0.0.1 amisbusiness.com
      127.0.0.1 www.ampmsearch.com
      127.0.0.1 ampmsearch.com
      127.0.0.1 www.analcord.com
      127.0.0.1 analcord.com
      127.0.0.1 analmovi.com
      127.0.0.1 www.anarchylolita.com
      127.0.0.1 anarchylolita.com
      127.0.0.1 anarchyporn.com
      127.0.0.1 www.andromedical.com
      127.0.0.1 andromedical.com
      127.0.0.1 www.animepornmag.com
      127.0.0.1 animepornmag.com
      127.0.0.1 anin.org
      127.0.0.1 www.anjpn-avxiz.biz
      127.0.0.1 anjpn-avxiz.biz
      127.0.0.1 www.anjpnzqav.biz
      127.0.0.1 anjpnzqav.biz
      127.0.0.1 www.anjpn-zqav.biz
      127.0.0.1 anjpn-zqav.biz
      127.0.0.1 annaromeo.com
      127.0.0.1 www.antiddos.us
      127.0.0.1 antiddos.us
      127.0.0.1 www.antiespiadorado.com
      127.0.0.1 antiespiadorado.com
      127.0.0.1 www.antiespionspack.com
      127.0.0.1 antiespionspack.com
      127.0.0.1 www.antigusanos2008.com
      127.0.0.1 antigusanos2008.com
      127.0.0.1 www.antispamassistant.com
      127.0.0.1 antispamassistant.com
      127.0.0.1 www.antispamdeluxe.com
      127.0.0.1 antispamdeluxe.com
      127.0.0.1 www.antispionage.com
      127.0.0.1 antispionage.com
      127.0.0.1 www.antispionagepro.com
      127.0.0.1 antispionagepro.com
      127.0.0.1 www.antispyadvanced.com
      127.0.0.1 antispyadvanced.com
      127.0.0.1 www.antispycheck.com
      127.0.0.1 antispycheck.com
      127.0.0.1 www.antispydns.biz
      127.0.0.1 antispydns.biz
      127.0.0.1 www.antispykit.com
      127.0.0.1 antispykit.com
      127.0.0.1 www.antispylab.com
      127.0.0.1 antispylab.com
      127.0.0.1 www.antispyshield.com
      127.0.0.1 antispyshield.com
      127.0.0.1 www.antispysolutions.com
      127.0.0.1 antispysolutions.com
      127.0.0.1 www.antispyware.com
      127.0.0.1 antispyware.com
      127.0.0.1 www.antispyware-2008.info
      127.0.0.1 antispyware-2008.info
      127.0.0.1 www.antispyware2008.name
      127.0.0.1 antispyware2008.name
      127.0.0.1 www.antispyware-2008.name
      127.0.0.1 antispyware-2008.name
      127.0.0.1 www.antispyware2008.org
      127.0.0.1 antispyware2008.org
      127.0.0.1 www.antispyware-2008.org
      127.0.0.1 antispyware-2008.org
      127.0.0.1 www.antispyware2008-download.com
      127.0.0.1 antispyware2008-download.com
      127.0.0.1 www.antispyware-2008-download.com
      127.0.0.1 antispyware-2008-download.com
      127.0.0.1 www.antispyware2008-download.name
      127.0.0.1 antispyware2008-download.name
      127.0.0.1 www.antispyware2008-download.org
      127.0.0.1 antispyware2008-download.org
      127.0.0.1 www.antispyware-2008-download.org
      127.0.0.1 antispyware-2008-download.org
      127.0.0.1 www.antispywareboot.com
      127.0.0.1 antispywareboot.com
      127.0.0.1 www.antispywarebot.com
      127.0.0.1 antispywarebot.com
      127.0.0.1 www.antispywarebox.com
      127.0.0.1 antispywarebox.com
      127.0.0.1 www.antispywaredownloads.com
      127.0.0.1 antispywaredownloads.com
      127.0.0.1 www.antispywaresales.com
      127.0.0.1 antispywaresales.com
      127.0.0.1 www.antispywaresuite.com
      127.0.0.1 antispywaresuite.com
      127.0.0.1 www.antispywareupdates.net
      127.0.0.1 antispywareupdates.net
      127.0.0.1 www.antispywarexp.com
      127.0.0.1 antispywarexp.com
      127.0.0.1 www.antispyweb.net
      127.0.0.1 antispyweb.net
      127.0.0.1 www.antiver2008.com
      127.0.0.1 antiver2008.com
      127.0.0.1 www.antivermins.com
      127.0.0.1 antivermins.com
      127.0.0.1 www.anti-vermins.com
      127.0.0.1 anti-vermins.com
      127.0.0.1 www.antivir2007.com
      127.0.0.1 antivir2007.com
      127.0.0.1 www.antivirgear.com
      127.0.0.1 antivirgear.com
      127.0.0.1 www.antivirprotect.com
      127.0.0.1 antivirprotect.com
      127.0.0.1 www.antivirus.fastfreedownload.com
      127.0.0.1 antivirus.fastfreedownload.com
      127.0.0.1 www.antivirus2008pro.com
      127.0.0.1 antivirus2008pro.com
      127.0.0.1 www.antivirus-2008pro.com
      127.0.0.1 antivirus-2008pro.com
      127.0.0.1 www.antivirus-2008-pro.com
      127.0.0.1 antivirus-2008-pro.com
      127.0.0.1 www.antivirus2008pro.info
      127.0.0.1 antivirus2008pro.info
      127.0.0.1 www.antivirus-2008pro.info
      127.0.0.1 antivirus-2008pro.info
      127.0.0.1 www.antivirus-2008-pro.info
      127.0.0.1 antivirus-2008-pro.info
      127.0.0.1 www.antivirus2008pro.net
      127.0.0.1 antivirus2008pro.net
      127.0.0.1 www.antivirus-2008pro.net
      127.0.0.1 antivirus-2008pro.net
      127.0.0.1 www.antivirus-2008-pro.net
      127.0.0.1 antivirus-2008-pro.net
      127.0.0.1 www.antivirus2008pro.org
      127.0.0.1 antivirus2008pro.org
      127.0.0.1 www.antivirus-2008pro.org
      127.0.0.1 antivirus-2008pro.org
      127.0.0.1 www.antivirus-2008-pro.org
      127.0.0.1 antivirus-2008-pro.org
      127.0.0.1 www.antivirus2008scanner.com
      127.0.0.1 antivirus2008scanner.com
      127.0.0.1 www.antivirus2008x.com
      127.0.0.1 antivirus2008x.com
      127.0.0.1 www.antivirus2009-freescan.com
      127.0.0.1 antivirus2009-freescan.com
      127.0.0.1 www.antivirus-2009pro.com
      127.0.0.1 antivirus-2009pro.com
      127.0.0.1 www.antivirusadvance.com
      127.0.0.1 antivirusadvance.com
      127.0.0.1 www.antivirusaskeladd.com
      127.0.0.1 antivirusaskeladd.com
      127.0.0.1 www.antivirus-database.com
      127.0.0.1 antivirus-database.com
      127.0.0.1 www.antivirusgereedschap.com
      127.0.0.1 antivirusgereedschap.com
      127.0.0.1 www.antivirusgolden.com
      127.0.0.1 antivirusgolden.com
      127.0.0.1 www.antivirus-hq.net
      127.0.0.1 antivirus-hq.net
      127.0.0.1 www.antiviruspcsuite.com
      127.0.0.1 antiviruspcsuite.com
      127.0.0.1 www.antiviruspremium.com
      127.0.0.1 antiviruspremium.com
      127.0.0.1 www.anti-virus-pro.com
      127.0.0.1 anti-virus-pro.com
      127.0.0.1 www.antivirusprotector.com
      127.0.0.1 antivirusprotector.com
      127.0.0.1 www.antivirus-scanner.com
      127.0.0.1 antivirus-scanner.com
      127.0.0.1 www.antivirusscherm.com
      127.0.0.1 antivirusscherm.com
      127.0.0.1 www.antivirussecuritypro.com
      127.0.0.1 antivirussecuritypro.com
      127.0.0.1 www.antivirus-server.com
      127.0.0.1 antivirus-server.com
      127.0.0.1 www.antivirus-stop.com
      127.0.0.1 antivirus-stop.com
      127.0.0.1 www.antivirussuite.com
      127.0.0.1 antivirussuite.com
      127.0.0.1 www.antiworm2008.com
      127.0.0.1 antiworm2008.com
      127.0.0.1 www.antiwurm2008.com
      127.0.0.1 antiwurm2008.com
      127.0.0.1 antrocity.com
      127.0.0.1 www.anyofus.com
      127.0.0.1 anyofus.com
      127.0.0.1 www.anysafereviews.com
      127.0.0.1 anysafereviews.com
      127.0.0.1 www.anysn.seproger.com
      127.0.0.1 anysn.seproger.com
      127.0.0.1 anything4health.com
      127.0.0.1 www.apicpreview.com
      127.0.0.1 apicpreview.com
      127.0.0.1 www.appealcircuit.com
      127.0.0.1 appealcircuit.com
      127.0.0.1 www.approvedlinks.com
      127.0.0.1 approvedlinks.com
      127.0.0.1 apps.deskwizz.com
      127.0.0.1 apps.webservicehost.com
      127.0.0.1 www.aprotectedpage.com
      127.0.0.1 aprotectedpage.com
      127.0.0.1 apsua.com
      127.0.0.1 www.archivioadulti.com
      127.0.0.1 archivioadulti.com
      127.0.0.1 www.archiviosex.net
      127.0.0.1 archiviosex.net
      127.0.0.1 aregay.com
      127.0.0.1 www.ares.click-new-download.com
      127.0.0.1 ares.click-new-download.com
      127.0.0.1 www.ares-freebie.com
      127.0.0.1 ares-freebie.com
      127.0.0.1 www.arespro2007.com
      127.0.0.1 arespro2007.com
      127.0.0.1 www.aresultra.com
      127.0.0.1 aresultra.com
      127.0.0.1 www.ares-usa.com
      127.0.0.1 ares-usa.com
      127.0.0.1 arheo.com
      127.0.0.1 arizonaweb.org
      127.0.0.1 armitageinn.com
      127.0.0.1 www.arquivojpgs.smtp.ru
      127.0.0.1 arquivojpgs.smtp.ru
      127.0.0.1 artachnid.com
      127.0.0.1 art-func.com
      127.0.0.1 art-xxx.com
      127.0.0.1 www.asafebrowser.com
      127.0.0.1 asafebrowser.com
      127.0.0.1 www.asafetyalways.com
      127.0.0.1 asafetyalways.com
      127.0.0.1 www.asafetynote.com
      127.0.0.1 asafetynote.com
      127.0.0.1 www.asafetynotice.com
      127.0.0.1 asafetynotice.com
      127.0.0.1 www.asafetypage.com
      127.0.0.1 asafetypage.com
      127.0.0.1 www.asdbiz.biz
      127.0.0.1 asdbiz.biz
      127.0.0.1 www.asdeykuddq.com
      127.0.0.1 asdeykuddq.com
      127.0.0.1 www.asecurebar.com
      127.0.0.1 asecurebar.com
      127.0.0.1 www.asecureboard.com
      127.0.0.1 asecureboard.com
      127.0.0.1 www.asecurevalue.com
      127.0.0.1 asecurevalue.com
      127.0.0.1 www.asecurityissue.com
      127.0.0.1 asecurityissue.com
      127.0.0.1 www.asecuritynotice.com
      127.0.0.1 asecuritynotice.com
      127.0.0.1 www.asecuritypaper.com
      127.0.0.1 asecuritypaper.com
      127.0.0.1 www.asecuritystuff.com
      127.0.0.1 asecuritystuff.com
      127.0.0.1 www.asfadaptation.com
      127.0.0.1 asfadaptation.com
      127.0.0.1 asiankingkong.com
      127.0.0.1 www.asianpornmag.com
      127.0.0.1 asianpornmag.com
      127.0.0.1 www.asiantoolbar.com
      127.0.0.1 asiantoolbar.com
      127.0.0.1 www.asidseiupc.com
      127.0.0.1 asidseiupc.com
      127.0.0.1 www.aslitalia.it
      127.0.0.1 aslitalia.it
      127.0.0.1 ass-gals.com
      127.0.0.1 www.assureprotection.com
      127.0.0.1 assureprotection.com
      127.0.0.1 asta-killer.com
      127.0.0.1 www.astrologie-server.com
      127.0.0.1 astrologie-server.com
      127.0.0.1 www.asupereva.it
      127.0.0.1 asupereva.it
      127.0.0.1 www.ataprogram.com
      127.0.0.1 ataprogram.com
      127.0.0.1 athenrye.com
      127.0.0.1 www.atotalsafety.com
      127.0.0.1 atotalsafety.com
      127.0.0.1 www.atrueprotection.com
      127.0.0.1 atrueprotection.com
      127.0.0.1 www.atruesecurity.com
      127.0.0.1 atruesecurity.com
      127.0.0.1 www.attackware.com
      127.0.0.1 attackware.com
      127.0.0.1 www.attrezzi.biz
      127.0.0.1 attrezzi.biz
      127.0.0.1 www.aucunsvirus.com
      127.0.0.1 aucunsvirus.com
      127.0.0.1 www.aulde.net
      127.0.0.1 aulde.net
      127.0.0.1 www.aupereva.it
      127.0.0.1 aupereva.it
      127.0.0.1 www.autobargains.org
      127.0.0.1 autobargains.org
      127.0.0.1 www.autobargainsnetwork.com
      127.0.0.1 autobargainsnetwork.com
      127.0.0.1 www.autocontext.begun.ru
      127.0.0.1 autocontext.begun.ru
      127.0.0.1 autoescrowpay.com
      127.0.0.1 www.autotuningportal.com
      127.0.0.1 autotuningportal.com
      127.0.0.1 www.avadvance.com
      127.0.0.1 avadvance.com
      127.0.0.1 www.avast.free-software-center.com
      127.0.0.1 avast.free-software-center.com
      127.0.0.1 www.avast-2007.com
      127.0.0.1 avast-2007.com
      127.0.0.1 www.avast-downloads.com
      127.0.0.1 avast-downloads.com
      127.0.0.1 www.avast-hq.com
      127.0.0.1 avast-hq.com
      127.0.0.1 www.avforce.com
      127.0.0.1 avforce.com
      127.0.0.1 www.avg.grab-it-today.net
      127.0.0.1 avg.grab-it-today.net
      127.0.0.1 www.avg.softwarecenterz.com
      127.0.0.1 avg.softwarecenterz.com
      127.0.0.1 www.avg-secure.com
      127.0.0.1 avg-secure.com
      127.0.0.1 www.aviadaptation.com
      127.0.0.1 aviadaptation.com
      127.0.0.1 avian-ads.com
      127.0.0.1 www.avicoupler.com
      127.0.0.1 avicoupler.com
      127.0.0.1 www.avideoaxaccess.com
      127.0.0.1 avideoaxaccess.com
      127.0.0.1 www.avideosurfer.com
      127.0.0.1 avideosurfer.com
      127.0.0.1 www.avidirection.com
      127.0.0.1 avidirection.com
      127.0.0.1 www.aviewersoft.com
      127.0.0.1 aviewersoft.com
      127.0.0.1 www.aviexecution.com
      127.0.0.1 aviexecution.com
      127.0.0.1 www.avihelper.com
      127.0.0.1 avihelper.com
      127.0.0.1 www.aviinstrument.com
      127.0.0.1 aviinstrument.com
      127.0.0.1 www.avitool.com
      127.0.0.1 avitool.com
      127.0.0.1 www.aviupdate.com
      127.0.0.1 aviupdate.com
      127.0.0.1 www.aviutility.com
      127.0.0.1 aviutility.com
      127.0.0.1 www.avpcheckupdate.com
      127.0.0.1 avpcheckupdate.com
      127.0.0.1 www.avsmanufacture.com
      127.0.0.1 avsmanufacture.com
      127.0.0.1 www.avsystemcare.com
      127.0.0.1 avsystemcare.com
      127.0.0.1 www.avxizaaqada.biz
      127.0.0.1 avxizaaqada.biz
      127.0.0.1 www.avxiz-anjpn.biz
      127.0.0.1 avxiz-anjpn.biz
      127.0.0.1 www.avxizueorn.biz
      127.0.0.1 avxizueorn.biz
      127.0.0.1 www.avxiz-ueorn.biz
      127.0.0.1 avxiz-ueorn.biz
      127.0.0.1 www.avxiz-vtvcp.biz
      127.0.0.1 avxiz-vtvcp.biz
      127.0.0.1 www.avxiz-ygco.biz
      127.0.0.1 avxiz-ygco.biz
      127.0.0.1 www.avxiz-zqav.biz
      127.0.0.1 avxiz-zqav.biz
      127.0.0.1 www.av-xp-08.com
      127.0.0.1 av-xp-08.com
      127.0.0.1 www.awarenesstech.com
      127.0.0.1 awarenesstech.com
      127.0.0.1 www.awarninglist.com
      127.0.0.1 awarninglist.com
      127.0.0.1 awbeta.net-nucleus.com
      127.0.0.1 www.awesomehomepage.com
      127.0.0.1 awesomehomepage.com
      127.0.0.1 awmcash.biz
      127.0.0.1 awmdabest.com
      127.0.0.1 www.axemediasoftware.com
      127.0.0.1 axemediasoftware.com
      127.0.0.1 www.aximageobject.com
      127.0.0.1 aximageobject.com
      127.0.0.1 www.axmediaproject.com
      127.0.0.1 axmediaproject.com
      127.0.0.1 www.axmediasoftware.com
      127.0.0.1 axmediasoftware.com
      127.0.0.1 www.axmediasolutions.com
      127.0.0.1 axmediasolutions.com
      127.0.0.1 www.axobjectpage.com
      127.0.0.1 axobjectpage.com
      127.0.0.1 www.axobjectsource.com
      127.0.0.1 axobjectsource.com
      127.0.0.1 www.axsoftwaretool.com
      127.0.0.1 axsoftwaretool.com
      127.0.0.1 www.axvideoproject.com
      127.0.0.1 axvideoproject.com
      127.0.0.1 www.axvideosetup.com
      127.0.0.1 axvideosetup.com
      127.0.0.1 ayakawamura.com
      127.0.0.1 ayb.dns-look-up.com
      127.0.0.1 ayb.netbios-wait.com
      127.0.0.1 ayumitaniguchi.com
      127.0.0.1 azebar.com
      127.0.0.1 www.azureusclub.com
      127.0.0.1 azureusclub.com
      127.0.0.1 www.azureus-freebie.com
      127.0.0.1 azureus-freebie.com
      127.0.0.1 www.azzetta.it
      127.0.0.1 azzetta.it
      127.0.0.1 b122.mcboo.com
      127.0.0.1 www.babe.k-lined.com
      127.0.0.1 babe.k-lined.com
      127.0.0.1 www.babe.the-killer.bz
      127.0.0.1 babe.the-killer.bz
      127.0.0.1 www.babenet.com
      127.0.0.1 babenet.com
      127.0.0.1 www.babespornmag.com
      127.0.0.1 babespornmag.com
      127.0.0.1 www.babeweb.de
      127.0.0.1 babeweb.de
      127.0.0.1 www.baccarat-other.info
      127.0.0.1 baccarat-other.info
      127.0.0.1 www.backstripgirls.com
      127.0.0.1 backstripgirls.com
      127.0.0.1 backup.mabou.org
      127.0.0.1 www.baiduqqsina.cn
      127.0.0.1 baiduqqsina.cn
      127.0.0.1 www.balotierra.com
      127.0.0.1 balotierra.com
      127.0.0.1 bannedhost.net
      127.0.0.1 barbudafarms.com
      127.0.0.1 www.bardownload.com
      127.0.0.1 bardownload.com
      127.0.0.1 barnandfence.com
      127.0.0.1 www.basteln-und-heimwerken.com
      127.0.0.1 basteln-und-heimwerken.com
      127.0.0.1 batsearch.com
      127.0.0.1 baygraphicsllc.com
      127.0.0.1 bb.wudiliuliang.com
      127.0.0.1 bbbsearch.com
      127.0.0.1 bb-search.com
      127.0.0.1 www.bcnproduction.com
      127.0.0.1 bcnproduction.com
      127.0.0.1 bdsmlibrary.net
      127.0.0.1 www.bdsmpornmag.com
      127.0.0.1 bdsmpornmag.com
      127.0.0.1 www.bearshare.click-new-download.com
      127.0.0.1 bearshare.click-new-download.com
      127.0.0.1 www.bearshare.download-me.info
      127.0.0.1 bearshare.download-me.info
      127.0.0.1 www.bearshare.mp3-muzic.com
      127.0.0.1 bearshare.mp3-muzic.com
      127.0.0.1 www.bearshare-download.org
      127.0.0.1 bearshare-download.org
      127.0.0.1 www.bearshare-downloads.net
      127.0.0.1 bearshare-downloads.net
      127.0.0.1 www.bearsharelive.co.uk
      127.0.0.1 bearsharelive.co.uk
      127.0.0.1 www.bearshare-music-downloads.com
      127.0.0.1 bearshare-music-downloads.com
      127.0.0.1 www.bearsharepro2007.com
      127.0.0.1 bearsharepro2007.com
      127.0.0.1 www.bearshare-usa.com
      127.0.0.1 bearshare-usa.com
      127.0.0.1 bedhome.com
      127.0.0.1 bediadance.com
      127.0.0.1 www.beebappyy.biz
      127.0.0.1 beebappyy.biz
      127.0.0.1 www.begin2search.com
      127.0.0.1 begin2search.com
      127.0.0.1 bellabasketsfl.com
      127.0.0.1 bernaolatwin.com
      127.0.0.1 www.berufe-jobs.de
      127.0.0.1 berufe-jobs.de
      127.0.0.1 www.berufe-server.de
      127.0.0.1 berufe-server.de
      127.0.0.1 www.berufe-welt.de
      127.0.0.1 berufe-welt.de
      127.0.0.1 www.berufs-wahl.de
      127.0.0.1 berufs-wahl.de
      127.0.0.1 www.beruijindegunhadesun.com
      127.0.0.1 beruijindegunhadesun.com
      127.0.0.1 www.best3xclips.com
      127.0.0.1 best3xclips.com
      127.0.0.1 www.bestadults.com
      127.0.0.1 bestadults.com
      127.0.0.1 www.best-codec.com
      127.0.0.1 best-codec.com
      127.0.0.1 best-counter.com
      127.0.0.1 bestcrawler.com
      127.0.0.1 www.bestdailyvids.com
      127.0.0.1 bestdailyvids.com
      127.0.0.1 bestfor.ru
      127.0.0.1 www.bestfuckvids.com
      127.0.0.1 bestfuckvids.com
      127.0.0.1 best-hardpics.com
      127.0.0.1 www.bestmanage.org
      127.0.0.1 bestmanage.org
      127.0.0.1 www.bestmanage0.org
      127.0.0.1 bestmanage0.org
      127.0.0.1 www.bestmanage1.org
      127.0.0.1 bestmanage1.org
      127.0.0.1 www.bestmanage2.org
      127.0.0.1 bestmanage2.org
      127.0.0.1 www.bestmanage3.org
      127.0.0.1 bestmanage3.org
      127.0.0.1 www.bestmanage4.org
      127.0.0.1 bestmanage4.org
      127.0.0.1 www.bestmanage5.org
      127.0.0.1 bestmanage5.org
      127.0.0.1 www.bestmanage6.org
      127.0.0.1 bestmanage6.org
      127.0.0.1 www.bestmanage7.org
      127.0.0.1 bestmanage7.org
      127.0.0.1 www.bestmanage8.org
      127.0.0.1 bestmanage8.org
      127.0.0.1 www.bestmanage9.org
      127.0.0.1 bestmanage9.org
      127.0.0.1 www.bestmovszone.com
      127.0.0.1 bestmovszone.com
      127.0.0.1 www.bestoffersnetworks.com
      127.0.0.1 bestoffersnetworks.com
      127.0.0.1 www.best-porncollection.com
      127.0.0.1 best-porncollection.com
      127.0.0.1 bestporngate.com
      127.0.0.1 www.bestsafetyguide.net
      127.0.0.1 bestsafetyguide.net
      127.0.0.1 www.bestsearch.cc
      127.0.0.1 bestsearch.cc
      127.0.0.1 www.bestsearchworld.info
      127.0.0.1 bestsearchworld.info
      127.0.0.1 www.best-spyware.info
      127.0.0.1 best-spyware.info
      127.0.0.1 www.best-targeted-traffic.com
      127.0.0.1 best-targeted-traffic.com
      127.0.0.1 www.best-voyeur.info
      127.0.0.1 best-voyeur.info
      127.0.0.1 bestweblinks.com
      127.0.0.1 best-winning-casino.com
      127.0.0.1 www.bestworldgirls-for-u.net
      127.0.0.1 bestworldgirls-for-u.net
      127.0.0.1 www.bestxclips.com
      127.0.0.1 bestxclips.com
      127.0.0.1 bestxporno.com
      127.0.0.1 www.bestxxxmpegs.com
      127.0.0.1 bestxxxmpegs.com
      127.0.0.1 www.bettersearch.biz
      127.0.0.1 bettersearch.biz
      127.0.0.1 www.bewerbungsexperte.com
      127.0.0.1 bewerbungsexperte.com
      127.0.0.1 www.bgazzetta.it
      127.0.0.1 bgazzetta.it
      127.0.0.1 www.bgoogle.it
      127.0.0.1 bgoogle.it
      127.0.0.1 www.bigcodecadult.com
      127.0.0.1 bigcodecadult.com
      127.0.0.1 www.bigcodecadult2008.com
      127.0.0.1 bigcodecadult2008.com
      127.0.0.1 www.bigcodecadult2008-17.com
      127.0.0.1 bigcodecadult2008-17.com
      127.0.0.1 www.bighot18adult2008.com
      127.0.0.1 bighot18adult2008.com
      127.0.0.1 www.bighot18-adult2008.com
      127.0.0.1 bighot18-adult2008.com
      127.0.0.1 www.bighot18codec2008.com
      127.0.0.1 bighot18codec2008.com
      127.0.0.1 www.bighot18-codec2008.com
      127.0.0.1 bighot18-codec2008.com
      127.0.0.1 www.bigtrafficnetwork.com
      127.0.0.1 bigtrafficnetwork.com
      127.0.0.1 www.bigwww.com
      127.0.0.1 bigwww.com
      127.0.0.1 www.bill.de
      127.0.0.1 bill.de
      127.0.0.1 bin.errorprotector.com
      127.0.0.1 bins.media-motor.net
      127.0.0.1 bins2.media-motor.net
      127.0.0.1 bis.180solutions.com
      127.0.0.1 bitchesonline.net
      127.0.0.1 www.bitcomet-freebie.com
      127.0.0.1 bitcomet-freebie.com
      127.0.0.1 www.bittorrent.click-new-download.com
      127.0.0.1 bittorrent.click-new-download.com
      127.0.0.1 biz.biz
      127.0.0.1 www.bkvcompany.com
      127.0.0.1 bkvcompany.com
      127.0.0.1 www.blackblues00.com
      127.0.0.1 blackblues00.com
      127.0.0.1 www.blackcodec.com
      127.0.0.1 blackcodec.com
      127.0.0.1 www.black-codec.com
      127.0.0.1 black-codec.com
      127.0.0.1 www.blackcodec.net
      127.0.0.1 blackcodec.net
      127.0.0.1 www.blackhats.tc
      127.0.0.1 blackhats.tc
      127.0.0.1 www.blackhawksoftware.com
      127.0.0.1 blackhawksoftware.com
      127.0.0.1 blackjack-free.net
      127.0.0.1 www.blacklegion.info
      127.0.0.1 blacklegion.info
      127.0.0.1 blazefind.com
      127.0.0.1 blender.xu.pl
      127.0.0.1 www.blockcheckercontrol.com
      127.0.0.1 blockcheckercontrol.com
      127.0.0.1 blondetgp.com
      127.0.0.1 www.blue-elefant.com
      127.0.0.1 blue-elefant.com
      127.0.0.1 www.bm.theaimonline.com
      127.0.0.1 bm.theaimonline.com
      127.0.0.1 www.bnmgate.com
      127.0.0.1 bnmgate.com
      127.0.0.1 bodaciousbabette.com
      127.0.0.1 www.bonzi.com
      127.0.0.1 bonzi.com
      127.0.0.1 boobdoll.com
      127.0.0.1 boobsandtits.com
      127.0.0.1 boobsclub.com
      127.0.0.1 www.bookedspace.com
      127.0.0.1 bookedspace.com
      127.0.0.1 www.boom.com.vn
      127.0.0.1 boom.com.vn
      127.0.0.1 www.boomgirltv.com
      127.0.0.1 boomgirltv.com
      127.0.0.1 boredlife.com
      127.0.0.1 bowlofogumbo.com
      127.0.0.1 www.bpfq02.com
      127.0.0.1 bpfq02.com
      127.0.0.1 www.bqgate.com
      127.0.0.1 bqgate.com
      127.0.0.1 br.errorsafe.com
      127.0.0.1 br.winantivirus.com
      127.0.0.1 br.winfixer.com
      127.0.0.1 bradcoem.org
      127.0.0.1 www.braincodec.com
      127.0.0.1 braincodec.com
      127.0.0.1 www.brakecodec.com
      127.0.0.1 brakecodec.com
      127.0.0.1 www.brakecodec.net
      127.0.0.1 brakecodec.net
      127.0.0.1 brandiyoung.com
      127.0.0.1 www.bravesentry.com
      127.0.0.1 bravesentry.com
      127.0.0.1 www.breenten.biz
      127.0.0.1 breenten.biz
      127.0.0.1 www.brodbfm.net
      127.0.0.1 brodbfm.net
      127.0.0.1 brookeburn.com
      127.0.0.1 www.browserwise.com
      127.0.0.1 browserwise.com
      127.0.0.1 bsa.safetydownload.com
      127.0.0.1 www.bsplaycodec.com
      127.0.0.1 bsplaycodec.com
      127.0.0.1 bucps.com
      127.0.0.1 buhartes.info
      127.0.0.1 buldog-stats.com
      127.0.0.1 www.bullseye-network.com
      127.0.0.1 bullseye-network.com
      127.0.0.1 burgerkingbigscreen.com
      127.0.0.1 www.burningsite.com
      127.0.0.1 burningsite.com
      127.0.0.1 www.burnsrecyclinginc.com
      127.0.0.1 burnsrecyclinginc.com
      127.0.0.1 buscards.net
      127.0.0.1 bustyrussell.com
      127.0.0.1 www.busysearch.net
      127.0.0.1 busysearch.net
      127.0.0.1 buttejazz.org
      127.0.0.1 www.buy-find.info
      127.0.0.1 buy-find.info
      127.0.0.1 buyselldomain.net
      127.0.0.1 www.buytraff.biz
      127.0.0.1 buytraff.biz
      127.0.0.1 buz.ru
      127.0.0.1 www.bvdtechinque.com
      127.0.0.1 bvdtechinque.com
      127.0.0.1 www.bvirgilio.it
      127.0.0.1 bvirgilio.it
      127.0.0.1 www.bye-spyware.com
      127.0.0.1 bye-spyware.com
      127.0.0.1 c.centralmedia.ws
      127.0.0.1 www.c.enhance.com
      127.0.0.1 c.enhance.com
      127.0.0.1 c.goclick.com
      127.0.0.1 www.c4tdownload.com
      127.0.0.1 c4tdownload.com
      127.0.0.1 www.c5.www4free.info
      127.0.0.1 c5.www4free.info
      127.0.0.1 www.cache.surfaccuracy.com
      127.0.0.1 cache.surfaccuracy.com
      127.0.0.1 cache.ysbweb.com
      127.0.0.1 www.cadesfinjeriokas.com
      127.0.0.1 cadesfinjeriokas.com
      127.0.0.1 calcioturris.com
      127.0.0.1 www.calendaralerts.net
      127.0.0.1 calendaralerts.net
      127.0.0.1 www.callinghome.biz
      127.0.0.1 callinghome.biz
      127.0.0.1 www.cameouk.co.uk
      127.0.0.1 cameouk.co.uk
      127.0.0.1 cameup.com
      127.0.0.1 www.camouflageclothingonline.net
      127.0.0.1 camouflageclothingonline.net
      127.0.0.1 campaigns.outerinfo.net
      127.0.0.1 www.camping-community.com
      127.0.0.1 camping-community.com
      127.0.0.1 camup.net
      127.0.0.1 canberracricketcoaching.com
      127.0.0.1 candycantaloupes.com
      127.0.0.1 www.canidetect.org
      127.0.0.1 canidetect.org
      127.0.0.1 www.cantfind.com
      127.0.0.1 cantfind.com
      127.0.0.1 careers.dulcineasystems.net
      127.0.0.1 carsands.com
      127.0.0.1 carsrentals.net
      127.0.0.1 cartoes.uol.com.br
      127.0.0.1 www.cashdeluxe.net
      127.0.0.1 cashdeluxe.net
      127.0.0.1 www.cashengines.com
      127.0.0.1 cashengines.com
      127.0.0.1 cashsearch.biz
      127.0.0.1 www.cashsurfers.com
      127.0.0.1 cashsurfers.com
      127.0.0.1 www.cashunlim.com
      127.0.0.1 cashunlim.com
      127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
      127.0.0.1 casino2win.net
      127.0.0.1 casino-gambling-1.net
      127.0.0.1 casino-gambling-2.net
      127.0.0.1 casinomidas.net
      127.0.0.1 casinonline.net
      127.0.0.1 casino-onlines.net
      127.0.0.1 www.castingsamateur.com
      127.0.0.1 castingsamateur.com
      127.0.0.1 catallogue.com
      127.0.0.1 www.catch-dc.info
      127.0.0.1 catch-dc.info
      127.0.0.1 categories.mygeek.com
      127.0.0.1 catsss.da.ru
      127.0.0.1 caxa.ru
      127.0.0.1 cazygirls-world.com
      127.0.0.1 cc.panet.org
      127.0.0.1 www.ccecaedbebfcaf.com
      127.0.0.1 ccecaedbebfcaf.com
      127.0.0.1 cclebali.org
      127.0.0.1 www.ccorriere.it
      127.0.0.1 ccorriere.it
      127.0.0.1 www.cdcopysite.com
      127.0.0.1 cdcopysite.com
      127.0.0.1 www.cdegate.com
      127.0.0.1 cdegate.com
      127.0.0.1 cdn.drivecleaner.com
      127.0.0.1 cdn.errorsafe.com
      127.0.0.1 cdn.movies-etc.com
      127.0.0.1 cdn.winsoftware.com
      127.0.0.1 cdn2.movies-etc.com
      127.0.0.1 www.cdorriere.it
      127.0.0.1 cdorriere.it
      127.0.0.1 ceewawires.org
      127.0.0.1 centralmedia.ws
      127.0.0.1 certumgroup.com
      127.0.0.1 www.cforriere.it
      127.0.0.1 cforriere.it
      127.0.0.1 cheapest.extra.hu
      127.0.0.1 www.check.jupitersatellites.biz
      127.0.0.1 check.jupitersatellites.biz
      127.0.0.1 www.checkin100.com
      127.0.0.1 checkin100.com
      127.0.0.1 www.checkssecurity.com
      127.0.0.1 checkssecurity.com
      127.0.0.1 chelancatering.com
      127.0.0.1 www.chenshijituan.com
      127.0.0.1 chenshijituan.com
      127.0.0.1 childrenvilla.com
      127.0.0.1 www.chilly3xvids.com
      127.0.0.1 chilly3xvids.com
      127.0.0.1 www.chillymovs.com
      127.0.0.1 chillymovs.com
      127.0.0.1 chips-4-free.com
      127.0.0.1 chrisswasey.com
      127.0.0.1 chriswallace.net
      127.0.0.1 www.cinemadownload.com
      127.0.0.1 cinemadownload.com
      127.0.0.1 www.ciorriere.it
      127.0.0.1 ciorriere.it
      127.0.0.1 www.cirriere.it
      127.0.0.1 cirriere.it
      127.0.0.1 www.citycodec.com
      127.0.0.1 citycodec.com
      127.0.0.1 ckick4thumbs.com
      127.0.0.1 cl55.biz
      127.0.0.1 clackamasliteraryreview.com
      127.0.0.1 www.clckm.com
      127.0.0.1 clckm.com
      127.0.0.1 www.cleancodec.com
      127.0.0.1 cleancodec.com
      127.0.0.1 www.cleancodec.net
      127.0.0.1 cleancodec.net
      127.0.0.1 www.cleansoftwares.com
      127.0.0.1 cleansoftwares.com
      127.0.0.1 clearsearch.cc
      127.0.0.1 clearsearch.net
      127.0.0.1 clickaire.com
      127.0.0.1 www.click-codec.com
      127.0.0.1 click-codec.com
      127.0.0.1 www.clickhere4search.com
      127.0.0.1 clickhere4search.com
      127.0.0.1 www.click-new-download.com
      127.0.0.1 click-new-download.com
      127.0.0.1 click-now.net
      127.0.0.1 www.clickspring.net
      127.0.0.1 clickspring.net
      127.0.0.1 www.click-to-download.com
      127.0.0.1 click-to-download.com
      127.0.0.1 www.clicktomakeasearch.com
      127.0.0.1 clicktomakeasearch.com
      127.0.0.1 clickyestoenter.net
      127.0.0.1 client.exeupdate.com
      127.0.0.1 client.myadultexplorer.com
      127.0.0.1 www.cliks.org
      127.0.0.1 cliks.org
      127.0.0.1 www.cliparts4free.com
      127.0.0.1 cliparts4free.com
      127.0.0.1 www.clipsfestival.com
      127.0.0.1 clipsfestival.com
      127.0.0.1 www.clipsreality.com
      127.0.0.1 clipsreality.com
      127.0.0.1 www.clorriere.it
      127.0.0.1 clorriere.it
      127.0.0.1 clrsch.com
      127.0.0.1 www.clubxxxvideo.com
      127.0.0.1 clubxxxvideo.com
      127.0.0.1 clusif.free.fr
      127.0.0.1 cmtapestry.com
      127.0.0.1 www.cnetadd.com
      127.0.0.1 cnetadd.com
      127.0.0.1 www.cnomy.com
      127.0.0.1 cnomy.com
      127.0.0.1 www.cnzz.com
      127.0.0.1 cnzz.com
      127.0.0.1 www.cocktails-ideen.de
      127.0.0.1 cocktails-ideen.de
      127.0.0.1 code.ignphrases.com
      127.0.0.1 codec.ninoa.com
      127.0.0.1 www.codecadult18.com
      127.0.0.1 codecadult18.com
      127.0.0.1 www.codecbest.com
      127.0.0.1 codecbest.com
      127.0.0.1 www.codecbsplay.com
      127.0.0.1 codecbsplay.com
      127.0.0.1 www.codecdemo.com
      127.0.0.1 codecdemo.com
      127.0.0.1 www.codecdvd.net
      127.0.0.1 codecdvd.net
      127.0.0.1 www.codecdvi.com
      127.0.0.1 codecdvi.com
      127.0.0.1 www.codec-fun.com
      127.0.0.1 codec-fun.com
      127.0.0.1 www.codechard.com
      127.0.0.1 codechard.com
      127.0.0.1 www.codechot.net
      127.0.0.1 codechot.net
      127.0.0.1 www.codechq.net
      127.0.0.1 codechq.net
      127.0.0.1 www.codecmeg.net
      127.0.0.1 codecmeg.net
      127.0.0.1 www.codecmega.com
      127.0.0.1 codecmega.com
      127.0.0.1 www.codecmega.net
      127.0.0.1 codecmega.net
      127.0.0.1 www.codecmoon.com
      127.0.0.1 codecmoon.com
      127.0.0.1 www.codecmpg.com
      127.0.0.1 codecmpg.com
      127.0.0.1 www.codecnice.net
      127.0.0.1 codecnice.net
      127.0.0.1 www.codecnitro.com
      127.0.0.1 codecnitro.com
      127.0.0.1 www.codecops.net
      127.0.0.1 codecops.net
      127.0.0.1 www.codecplay.com
      127.0.0.1 codecplay.com
      127.0.0.1 www.codecpretty.net
      127.0.0.1 codecpretty.net
      127.0.0.1 www.codecpro.net
      127.0.0.1 codecpro.net
      127.0.0.1 www.codecred.net
      127.0.0.1 codecred.net
      127.0.0.1 www.codecsoft.net
      127.0.0.1 codecsoft.net
      127.0.0.1 www.codecthe.com
      127.0.0.1 codecthe.com
      127.0.0.1 www.codectime.com
      127.0.0.1 codectime.com
      127.0.0.1 www.codecultra.net
      127.0.0.1 codecultra.net
      127.0.0.1 www.codecvids.com
      127.0.0.1 codecvids.com
      127.0.0.1 www.codecvip.com
      127.0.0.1 codecvip.com
      127.0.0.1 www.codecviva.com
      127.0.0.1 codecviva.com
      127.0.0.1 www.codeczang.net
      127.0.0.1 codeczang.net
      127.0.0.1 www.codrriere.it
      127.0.0.1 codrriere.it
      127.0.0.1 www.coeriere.it
      127.0.0.1 coeriere.it
      127.0.0.1 www.coerriere.it
      127.0.0.1 coerriere.it
      127.0.0.1 www.cofrriere.it
      127.0.0.1 cofrriere.it
      127.0.0.1 www.cogrriere.it
      127.0.0.1 cogrriere.it
      127.0.0.1 www.coirriere.it
      127.0.0.1 coirriere.it
      127.0.0.1 command.adservs.com
      127.0.0.1 www.commonname.com
      127.0.0.1 commonname.com
      127.0.0.1 www.comparespywareremover.org
      127.0.0.1 comparespywareremover.org
      127.0.0.1 www.computerpcgames.net
      127.0.0.1 computerpcgames.net
      127.0.0.1 www.computerrecover.com
      127.0.0.1 computerrecover.com
      127.0.0.1 config.180solutions.com
      127.0.0.1 www.congtouzailai.net
      127.0.0.1 congtouzailai.net
      127.0.0.1 www.consumers-reviews.net
      127.0.0.1 consumers-reviews.net
      127.0.0.1 www.content.dollarrevenue.com
      127.0.0.1 content.dollarrevenue.com
      127.0.0.1 www.content.ireit.com
      127.0.0.1 content.ireit.com
      127.0.0.1 content.onerateld.com
      127.0.0.1 www.contentmatch.net
      127.0.0.1 contentmatch.net
      127.0.0.1 www.contextplus.net
      127.0.0.1 contextplus.net
      127.0.0.1 www.contra-virus.com
      127.0.0.1 contra-virus.com
      127.0.0.1 www.controlmeh.com
      127.0.0.1 controlmeh.com
      127.0.0.1 www.controlpage.info
      127.0.0.1 controlpage.info
      127.0.0.1 www.convenient-search.com
      127.0.0.1 convenient-search.com
      127.0.0.1 www.cookingluck.com
      127.0.0.1 cookingluck.com
      127.0.0.1 www.cooldeskalert.com
      127.0.0.1 cooldeskalert.com
      127.0.0.1 coolfetishsite.com
      127.0.0.1 coolfreehost.com
      127.0.0.1 coolfreepage.com
      127.0.0.1 coolfreepages.com
      127.0.0.1 cool-homepage.co
      127.0.0.1 cool-homepage.com
      127.0.0.1 coolmoneysearch.com
      127.0.0.1 www.coolonlinebusiness.com
      127.0.0.1 coolonlinebusiness.com
      127.0.0.1 coolpornsearch.com
      127.0.0.1 cool-search.net
      127.0.0.1 cool-search.netfartpost.com
      127.0.0.1 coolsearcher.info
      127.0.0.1 www.coolservecorp.net
      127.0.0.1 coolservecorp.net
      127.0.0.1 www.coolwebsearch.com
      127.0.0.1 coolwebsearch.com
      127.0.0.1 cool-web-search.com
      127.0.0.1 coolwebsearsh.com
      127.0.0.1 www.coolwwwsearch.com
      127.0.0.1 coolwwwsearch.com
      127.0.0.1 cool-xxx.net
      127.0.0.1 www.coorriere.it
      127.0.0.1 coorriere.it
      127.0.0.1 copmtraine.com
      127.0.0.1 www.coprriere.it
      127.0.0.1 coprriere.it
      127.0.0.1 www.core.psyche-evolution.com
      127.0.0.1 core.psyche-evolution.com
      127.0.0.1 www.coreiere.it
      127.0.0.1 coreiere.it
      127.0.0.1 www.coreriere.it
      127.0.0.1 coreriere.it
      127.0.0.1 www.corrdiere.it
      127.0.0.1 corrdiere.it
      127.0.0.1 www.correiere.it
      127.0.0.1 correiere.it
      127.0.0.1 www.corrfiere.it
      127.0.0.1 corrfiere.it
      127.0.0.1 www.corrgiere.it
      127.0.0.1 corrgiere.it
      127.0.0.1 www.corridere.it
      127.0.0.1 corridere.it
      127.0.0.1 www.corriedre.it
      127.0.0.1 corriedre.it
      127.0.0.1 www.corriee.it
      127.0.0.1 corriee.it
      127.0.0.1 www.corrieere.it
      127.0.0.1 corrieere.it
      127.0.0.1 www.corriefre.it
      127.0.0.1 corriefre.it
      127.0.0.1 www.corriegre.it
      127.0.0.1 corriegre.it
      127.0.0.1 www.corrierde.it
      127.0.0.1 corrierde.it
      127.0.0.1 www.corriered.it
      127.0.0.1 corriered.it
      127.0.0.1 www.corrieree.it
      127.0.0.1 corrieree.it
      127.0.0.1 www.corrieref.it
      127.0.0.1 corrieref.it
      127.0.0.1 www.corrierer.it
      127.0.0.1 corrierer.it
      127.0.0.1 www.corrieres.it
      127.0.0.1 corrieres.it
      127.0.0.1 www.corrierew.it
      127.0.0.1 corrierew.it
      127.0.0.1 www.corrierfe.it
      127.0.0.1 corrierfe.it
      127.0.0.1 www.corrierge.it
      127.0.0.1 corrierge.it
      127.0.0.1 www.corrierr.it
      127.0.0.1 corrierr.it
      127.0.0.1 www.corrierre.it
      127.0.0.1 corrierre.it
      127.0.0.1 www.corrierse.it
      127.0.0.1 corrierse.it
      127.0.0.1 www.corrierte.it
      127.0.0.1 corrierte.it
      127.0.0.1 www.corrierw.it
      127.0.0.1 corrierw.it
      127.0.0.1 www.corrierwe.it
      127.0.0.1 corrierwe.it
      127.0.0.1 www.corriesre.it
      127.0.0.1 corriesre.it
      127.0.0.1 www.corriete.it
      127.0.0.1 corriete.it
      127.0.0.1 www.corrietre.it
      127.0.0.1 corrietre.it
      127.0.0.1 www.corriewre.it
      127.0.0.1 corriewre.it
      127.0.0.1 www.corrifere.it
      127.0.0.1 corrifere.it
      127.0.0.1 www.corriiere.it
      127.0.0.1 corriiere.it
      127.0.0.1 www.corrilere.it
      127.0.0.1 corrilere.it
      127.0.0.1 www.corrioere.it
      127.0.0.1 corrioere.it
      127.0.0.1 www.corrire.it
      127.0.0.1 corrire.it
      127.0.0.1 www.corrirere.it
      127.0.0.1 corrirere.it
      127.0.0.1 www.corrirre.it
      127.0.0.1 corrirre.it
      127.0.0.1 www.corrisere.it
      127.0.0.1 corrisere.it
      127.0.0.1 www.corriuere.it
      127.0.0.1 corriuere.it
      127.0.0.1 www.corriwere.it
      127.0.0.1 corriwere.it
      127.0.0.1 www.corriwre.it
      127.0.0.1 corriwre.it
      127.0.0.1 www.corrliere.it
      127.0.0.1 corrliere.it
      127.0.0.1 www.corroere.it
      127.0.0.1 corroere.it
      127.0.0.1 www.corroiere.it
      127.0.0.1 corroiere.it
      127.0.0.1 www.corrriere.it
      127.0.0.1 corrriere.it
      127.0.0.1 www.corrtiere.it
      127.0.0.1 corrtiere.it
      127.0.0.1 www.corruere.it
      127.0.0.1 corruere.it
      127.0.0.1 www.corruiere.it
      127.0.0.1 corruiere.it
      127.0.0.1 www.cortiere.it
      127.0.0.1 cortiere.it
      127.0.0.1 www.cortriere.it
      127.0.0.1 cortriere.it
      127.0.0.1 www.costrike.com
      127.0.0.1 costrike.com
      127.0.0.1 www.cotriere.it
      127.0.0.1 cotriere.it
      127.0.0.1 www.cotrriere.it
      127.0.0.1 cotrriere.it
      127.0.0.1 couldnotfind.com
      127.0.0.1 count.cc
      127.0.0.1 count.hitscount.net
      127.0.0.1 count-all.com
      127.0.0.1 www.countdutycall.info
      127.0.0.1 countdutycall.info
      127.0.0.1 counter.sexmaniack.com
      127.0.0.1 www.courtrecordslookup.com
      127.0.0.1 courtrecordslookup.com
      127.0.0.1 www.cporriere.it
      127.0.0.1 cporriere.it
      127.0.0.1 www.cprriere.it
      127.0.0.1 cprriere.it
      127.0.0.1 cpvfeed.com
      127.0.0.1 cracks.me.uk
      127.0.0.1 www.cracks4all.com
      127.0.0.1 cracks4all.com
      127.0.0.1 www.crapsgold.info
      127.0.0.1 crapsgold.info
      127.0.0.1 www.crazygirls-world.com
      127.0.0.1 crazygirls-world.com
      127.0.0.1 www.crazywinnings.com
      127.0.0.1 crazywinnings.com
      127.0.0.1 creamedcutties.com
      127.0.0.1 www.createaccesskey.com
      127.0.0.1 createaccesskey.com
      127.0.0.1 www.creatonsoft.com
      127.0.0.1 creatonsoft.com
      127.0.0.1 creditsearchonline.com
      127.0.0.1 crestring.com
      127.0.0.1 crooder.com
      127.0.0.1 www.crriere.it
      127.0.0.1 crriere.it
      127.0.0.1 www.cryptdrive.com
      127.0.0.1 cryptdrive.com
      127.0.0.1 www.crystalysmedia.com
      127.0.0.1 crystalysmedia.com
      127.0.0.1 www.csx.adservs.com
      127.0.0.1 csx.adservs.com
      127.0.0.1 cts.180solutions.com
      127.0.0.1 www.cuisinartoven.com
      127.0.0.1 cuisinartoven.com
      127.0.0.1 www.curedc.info
      127.0.0.1 curedc.info
      127.0.0.1 www.curepcsolutions.com
      127.0.0.1 curepcsolutions.com
      127.0.0.1 curvedspaces.com
      127.0.0.1 www.cutadult.com
      127.0.0.1 cutadult.com
      127.0.0.1 www.cutoffspyware.com
      127.0.0.1 cutoffspyware.com
      127.0.0.1 www.cvirgilio.it
      127.0.0.1 cvirgilio.it
      127.0.0.1 www.cvorriere.it
      127.0.0.1 cvorriere.it
      127.0.0.1 cvs.jps.ru
      127.0.0.1 cvsymphony.com
      127.0.0.1 www.cxorriere.it
      127.0.0.1 cxorriere.it
      127.0.0.1 www.cyberrape.com
      127.0.0.1 cyberrape.com
      127.0.0.1 cydom.com
      127.0.0.1 www.cydoor.com
      127.0.0.1 cydoor.com
      127.0.0.1 d34s.qfdfqawd.cn
      127.0.0.1 www.daily3xlinks.com
      127.0.0.1 daily3xlinks.com
      127.0.0.1 www.dailybestclips.com
      127.0.0.1 dailybestclips.com
      127.0.0.1 daily-gals.com
      127.0.0.1 www.dailyhugemovs.com
      127.0.0.1 dailyhugemovs.com
      127.0.0.1 www.dailykeys.com
      127.0.0.1 dailykeys.com
      127.0.0.1 www.dailypornmag.com
      127.0.0.1 dailypornmag.com
      127.0.0.1 dailyteenspic.com
      127.0.0.1 www.dailytoolbar.com
      127.0.0.1 dailytoolbar.com
      127.0.0.1 www.dailyxvids.com
      127.0.0.1 dailyxvids.com
      127.0.0.1 dancingbabycd.com
      127.0.0.1 www.dapsol.com
      127.0.0.1 dapsol.com
      127.0.0.1 www.dapsolution.com
      127.0.0.1 dapsolution.com
      127.0.0.1 datanotary.com
      127.0.0.1 datareco.com
      127.0.0.1 www.dateanybabe.com
      127.0.0.1 dateanybabe.com
      127.0.0.1 www.dateanychick.com
      127.0.0.1 dateanychick.com
      127.0.0.1 www.datingdoctorsite.com
      127.0.0.1 datingdoctorsite.com
      127.0.0.1 www.dating-galaxy.info
      127.0.0.1 dating-galaxy.info
      127.0.0.1 dating-search.net
      127.0.0.1 davemarshall.org
      127.0.0.1 db105.com
      127.0.0.1 www.dbdecicated.com
      127.0.0.1 dbdecicated.com
      127.0.0.1 www.dbxcompany.com
      127.0.0.1 dbxcompany.com
      127.0.0.1 dcdl.dmcast.com
      127.0.0.1 dcfitusa.com
      127.0.0.1 www.dcorriere.it
      127.0.0.1 dcorriere.it
      127.0.0.1 www.dcurtis.com
      127.0.0.1 dcurtis.com
      127.0.0.1 dcww.dmcast.com
      127.0.0.1 de.ag
      127.0.0.1 de.drivecleaner.com
      127.0.0.1 de.errorsafe.com
      127.0.0.1 de.winantivirus.com
      127.0.0.1 de98.remsys.org
      127.0.0.1 www.debay.it
      127.0.0.1 debay.it
      127.0.0.1 www.decknews.com
      127.0.0.1 decknews.com
      127.0.0.1 dedmazay.3322.org
      127.0.0.1 www.dedsearch.com
      127.0.0.1 dedsearch.com
      127.0.0.1 defaultsearch.net
      127.0.0.1 www.defensaantimalware.com
      127.0.0.1 defensaantimalware.com
      127.0.0.1 www.deja-rue.com
      127.0.0.1 deja-rue.com
      127.0.0.1 www.delficodec.com
      127.0.0.1 delficodec.com
      127.0.0.1 www.democodec.com
      127.0.0.1 democodec.com
      127.0.0.1 www.demo-codec.com
      127.0.0.1 demo-codec.com
      127.0.0.1 www.democodec.net
      127.0.0.1 democodec.net
      127.0.0.1 www.demo-codec.net
      127.0.0.1 demo-codec.net
      127.0.0.1 www.derklaif.biz
      127.0.0.1 derklaif.biz
      127.0.0.1 www.derrari.it
      127.0.0.1 derrari.it
      127.0.0.1 desarrollocreativo.com
      127.0.0.1 www.deskbar.worldtostart.com
      127.0.0.1 deskbar.worldtostart.com
      127.0.0.1 www.deskwizz.com
      127.0.0.1 deskwizz.com
      127.0.0.1 www.destroy-spy.com
      127.0.0.1 destroy-spy.com
      127.0.0.1 www.destroy-spyware.net
      127.0.0.1 destroy-spyware.net
      127.0.0.1 www.destruktor.to.pl
      127.0.0.1 destruktor.to.pl
      127.0.0.1 www.detection-file101.com
      127.0.0.1 detection-file101.com
      127.0.0.1 www.detectivehound.com
      127.0.0.1 detectivehound.com
      127.0.0.1 www.detectivesearches.com
      127.0.0.1 detectivesearches.com
      127.0.0.1 dev.ntcor.com
      127.0.0.1 develip.com
      127.0.0.1 dewis.spb.ru
      127.0.0.1 dewis.us
      127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
      127.0.0.1 www.dgbusiness.com
      127.0.0.1 dgbusiness.com
      127.0.0.1 dialer2004.com
      127.0.0.1 www.dialerclub.com
      127.0.0.1 dialerclub.com
      127.0.0.1 www.dialer-shop.com
      127.0.0.1 dialer-shop.com
      127.0.0.1 www.dialoff.com
      127.0.0.1 dialoff.com
      127.0.0.1 www.did.i-used.cc
      127.0.0.1 did.i-used.cc
      127.0.0.1 dietpills4free.com
      127.0.0.1 dietpussy.com
      127.0.0.1 www.digikeygen.com
      127.0.0.1 digikeygen.com
      127.0.0.1 digistreamsa.com
      127.0.0.1 www.digitalcoders.net
      127.0.0.1 digitalcoders.net
      127.0.0.1 www.digitalfan.com
      127.0.0.1 digitalfan.com
      127.0.0.1 digital-pornography.com
      127.
      1. Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

        http://images.malwareremoval.com/random/RSIT.exe

        ! Déconnecte toi et ferme toutes tes applications en cours !

        Double-clique sur " RSIT.exe " pour le lancer .

        -> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

        * Devant l'option "List files/folders created ..." , tu choisis : 2 months

        * clique ensuite sur " Continue " pour lancer l'analyse ...

        -> laisse faire le scan et ne touche pas au PC ...

        Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).

        Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

        Important : poste un rapport, puis l'autre dans la réponse suivante
        Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum

        ( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )
        1. Pour le log c'ets ca :

          Logfile of random's system information tool 1.06 (written by random/random)
          Run by harlock at 2009-05-27 20:56:29
          Microsoft Windows XP Édition familiale Service Pack 3
          System drive C: has 5 GB (4%) free of 119 GB
          Total RAM: 1023 MB (38% free)
          
          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 20:56:52, on 27/05/2009
          Platform: Windows XP SP3 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16827)
          Boot mode: Normal
          
          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
          C:\Program Files\Bonjour\mDNSResponder.exe
          C:\Program Files\Canal\Canal Widget\VOD\CanalPlus.VOD.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\iPod Access for Windows\iPAHelper.exe
          C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
          C:\WINDOWS\system32\nvsvc32.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\TVersity\Media Server\MediaServer.exe
          C:\WINDOWS\system32\UAService7.exe
          C:\PROGRA~1\AVG\AVG8\avgrsx.exe
          C:\WINDOWS\system32\ZoneLabs\vsmon.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\RunDll32.exe
          C:\WINDOWS\AGRSMMSG.exe
          C:\WINDOWS\Dit.exe
          C:\WINDOWS\mHotkey.exe
          C:\Program Files\Home Cinema\PowerCinema\PCMService.exe
          C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE
          C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
          C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
          C:\Program Files\Microsoft Hardware\Mouse\point32.exe
          C:\WINDOWS\system32\atwtusb.exe
          C:\PROGRA~1\AVG\AVG8\avgtray.exe
          C:\Program Files\iTunes\iTunesHelper.exe
          C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
          C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
          C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
          C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
          C:\Program Files\Windows Media Player\WMPNSCFG.exe
          C:\Program Files\Fichiers communs\Teleca Shared\CapabilityManager.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
          C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
          C:\WINDOWS\system32\msiexec.exe
          C:\Program Files\Windows Live\Messenger\usnsvc.exe
          C:\Documents and Settings\harlock\Bureau\RSIT.exe
          C:\Documents and Settings\harlock\Bureau\harlock.exe
          
          R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.carrefour.fr/
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer optimisé pour MSN
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
          O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
          O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
          O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
          O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
          O2 - BHO: (no name) - {FDEDC074-05A7-443A-9563-2E094B6C6079} - (no file)
          O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
          O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
          O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
          O3 - Toolbar: (no name) - {18C388BB-5014-4906-AE38-E62BA5AA7387} - (no file)
          O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
          O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
          O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
          O4 - HKLM\..\Run: [Dit] Dit.exe
          O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
          O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
          O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
          O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Home Cinema\PowerCinema\PCMService.exe"
          O4 - HKLM\..\Run: [EPSON Stylus CX3600 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE /P26 "EPSON Stylus CX3600 Series" /O6 "USB001" /M "Stylus CX3600"
          O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
          O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
          O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
          O4 - HKLM\..\Run: [POINTER] point32.exe
          O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta
          O4 - HKLM\..\Run: [WidgetGF38] C:\Program Files\GrenobleFoot38\Widget\widget_gf38.exe
          O4 - HKLM\..\Run: [Canal Widget] "C:\Program Files\Canal\Canal Widget\Launcher.exe"
          O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
          O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
          O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
          O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
          O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
          O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
          O4 - HKCU\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
          O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
          O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
          O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
          O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
          O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
          O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O14 - IERESET.INF: START_PAGE_URL=http://www.carrefour.fr/
          O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
          O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
          O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
          O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
          O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
          O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
          O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://eithanamahenahita.spaces.live.com//PhotoUpload/MsnPUpld.cab
          O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
          O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/...
          O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://fdata.over-blog.com/99/00/00/01/js/javauploader/ImageUploader4.cab
          O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
          O16 - DPF: {983AB2CC-3D50-11D9-ADFE-00062919A34C} (ActiveXUpload.UserCtrl) - http://www.photoservice.com/activeX/newUpload.CAB
          O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
          O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
          O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
          O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
          O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab50997.cab
          O16 - DPF: {FD40EC41-D860-4579-8BA4-52671A45C71C} (AxHtChat Class) - http://images.goa.com/it/Woo2/fr/chat/nPaxChat.cab
          O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
          O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
          O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
          O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
          O20 - Winlogon Notify: geBRIBqo - geBRIBqo.dll (file missing)
          O21 - SSODL: pdoskegl - {C8F4956D-2A48-43DE-8506-8BA3DAF7F5C4} - (no file)
          O21 - SSODL: rqbmvpso - {FC83D483-EC1A-402A-84A0-0BCB0AED0177} - (no file)
          O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
          O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
          O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
          O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
          O23 - Service: CanalPlus.VOD - Canal+ Active - C:\Program Files\Canal\Canal Widget\VOD\CanalPlus.VOD.exe
          O23 - Service: Client de licence CA (CA_LIC_CLNT) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
          O23 - Service: Serveur de licence CA (CA_LIC_SRVR) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmtd.exe
          O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: iPAHelper.exe - Unknown owner - C:\Program Files\iPod Access for Windows\iPAHelper.exe
          O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
          O23 - Service: Event Log Watch (LogWatch) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
          O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Unknown owner - C:\Program Files\Norton AntiVirus\navapsvc.exe (file missing)
          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
          O23 - Service: TVersityMediaServer - Unknown owner - C:\Program Files\TVersity\Media Server\MediaServer.exe
          O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
          O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
          O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
          
          --
          End of file - 15158 bytes
          
          ======Scheduled tasks folder======
          
          C:\WINDOWS\tasks\AppleSoftwareUpdate.job
          C:\WINDOWS\tasks\Vérifier les mises à jour de Windows Live Toolbar.job
          
          ======Registry dump======
          
          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
          Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]
          
          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
          SSVHelper Class - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll [2005-11-10 184423]
          
          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
          Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]
          
          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
          Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-04-30 259696]
          
          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
          AcroIEToolbarHelper Class - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15 147456]
          
          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
          Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-04-30 668656]
          
          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
          Windows Live Toolbar Helper - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
          
          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
          Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-04-30 470512]
          
          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}]
          EpsonToolBandKicker Class - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2004-02-10 339968]
          
          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDEDC074-05A7-443A-9563-2E094B6C6079}]
          
          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
          {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - EPSON Web-To-Page - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2004-02-10 339968]
          {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll [2003-05-15 147456]
          {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2005-08-04 343112]
          {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Windows Live Toolbar - C:\Program Files\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
          {18C388BB-5014-4906-AE38-E62BA5AA7387}
          {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-04-30 259696]
          
          [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
          "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2004-09-29 4603904]
          "nwiz"=nwiz.exe /install []
          "Cmaudio"=RunDll32 cmicnfg.cpl,CMICtrlWnd []
          "AGRSMMSG"=C:\WINDOWS\AGRSMMSG.exe [2005-03-04 88209]
          "Dit"=C:\WINDOWS\Dit.exe [2004-04-02 86016]
          "NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
          "CHotkey"=C:\WINDOWS\mHotkey.exe [2002-07-23 477184]
          "Realtime Monitor"=C:\PROGRA~1\CA\ETRUST~1\realmon.exe [2003-03-21 487696]
          "PCMService"=C:\Program Files\Home Cinema\PowerCinema\PCMService.exe [2004-10-08 81920]
          "EPSON Stylus CX3600 Series"=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9BE.EXE [2004-03-04 98304]
          "AdobeVersionCue"=C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe [2003-10-22 1732608]
          "PinnacleDriverCheck"=C:\WINDOWS\system32\PSDrvCheck.exe [2003-12-04 406016]
          "SunJavaUpdateSched"=C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe [2005-11-10 36975]
          "POINTER"=point32.exe []
          "atwtusb"=atwtusb.exe beta []
          "WidgetGF38"=C:\Program Files\GrenobleFoot38\Widget\widget_gf38.exe [2008-01-24 1701370]
          "Canal Widget"=C:\Program Files\Canal\Canal Widget\Launcher.exe [2009-04-30 170072]
          "AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe [2009-05-26 1947928]
          "AppleSyncNotifier"=C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2008-07-10 116040]
          "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-05-27 413696]
          "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-07-30 289064]
          ""= []
          "Sony Ericsson PC Suite"=C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe [2005-10-26 159744]
          "Adobe Photo Downloader"=C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe [2005-06-23 57344]
          "ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2009-02-16 981384]
          
          [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
          "SweetIM"=C:\Program Files\Macrogaming\SweetIM\SweetIM.exe [2006-06-06 40960]
          "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2008-05-27 413696]
          "AnyDVD"=C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe [2006-09-19 471040]
          "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
          "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-05-18 68856]
          "SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
          "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-03 204288]
          
          C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
          Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
          Lancement rapide d'Adobe Reader.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
          Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
          
          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
          C:\WINDOWS\system32\avgrsstx.dll [2009-05-26 11952]
          
          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\geBRIBqo]
          geBRIBqo.dll []
          
          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
          C:\WINDOWS\system32\WgaLogon.dll [2006-06-19 702768]
          
          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
          WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
          pdoskegl - {C8F4956D-2A48-43DE-8506-8BA3DAF7F5C4}
          rqbmvpso - {FC83D483-EC1A-402A-84A0-0BCB0AED0177}
          
          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
          "authentication packages"=msv1_0
          C:\WINDOWS\system32\awtutRji
          
          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]
          
          [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
          "dontdisplaylastusername"=0
          "legalnoticecaption"=
          "legalnoticetext"=
          "shutdownwithoutlogon"=1
          "undockwithoutlogon"=1
          
          [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
          "NoDriveTypeAutoRun"=145
          
          [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
          "HonorAutoRunSetting"=
          
          [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
          "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
          "%ProgramFiles%\Messenger\msmsgs.exe"="%ProgramFiles%\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
          "%ProgramFiles%\AOL 9.0\AOL.exe"="%ProgramFiles%\AOL 9.0\AOL.exe:*:enabled:AOL 9.0"
          "%ProgramFiles%\AOL 9.0\WAOL.exe"="%ProgramFiles%\AOL 9.0\WAOL.exe:*:enabled:AOL 9.0"
          "%CommonProgramFiles%\AOL\ACS\AOLACSD.exe"="%CommonProgramFiles%\AOL\ACS\AOLACSD.exe:*:enabled:AOL 9.0 (Connectivity Service)"
          "%CommonProgramFiles%\AOL\ACS\AOLDIAL.exe"="%CommonProgramFiles%\AOL\ACS\AOLDIAL.exe:*:enabled:AOL 9.0 (Connectivity Service Dialer)"
          "%WinDir%\system32\fxsclnt.exe"="%WinDir%\system32\fxsclnt.exe:*:enabled:Microsoft Fax Console"
          "%ProgramFiles%\CA\eTrust Antivirus\InocIT.exe"="%ProgramFiles%\CA\eTrust Antivirus\InocIT.exe:*:enabled:eTrust Antivirus - Local Scanner"
          "%ProgramFiles%\CA\eTrust Antivirus\Realmon.exe"="%ProgramFiles%\CA\eTrust Antivirus\Realmon.exe:*:enabled:eTrust Antivirus - Realtime monitor"
          "%ProgramFiles%\CA\eTrust Antivirus\InoRpc.exe"="%ProgramFiles%\CA\eTrust Antivirus\InoRpc.exe:*:enabled:eTrust Antivirus - RPC Server"
          "C:\WINDOWS\Temp\NavBrowser.exe"="C:\WINDOWS\Temp\NavBrowser.exe:*:Enabled:NAVBrowser"
          "C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
          "C:\Program Files\Yahoo!\Messenger\YPager.exe"="C:\Program Files\Yahoo!\Messenger\YPager.exe:*:Enabled:Yahoo! Messenger"
          "C:\Program Files\Yahoo!\Messenger\YServer.exe"="C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server"
          "C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Civilization4.exe"="C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Civilization4.exe:*:Enabled:Sid Meier's Civilization 4"
          "C:\Program Files\Grisoft\AVG Free\avginet.exe"="C:\Program Files\Grisoft\AVG Free\avginet.exe:*:Enabled:avginet.exe"
          "C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
          "C:\Program Files\Grisoft\AVG Free\avgamsvr.exe"="C:\Program Files\Grisoft\AVG Free\avgamsvr.exe:*:Enabled:avgamsvr.exe"
          "C:\Program Files\Grisoft\AVG Free\avgcc.exe"="C:\Program Files\Grisoft\AVG Free\avgcc.exe:*:Enabled:avgcc.exe"
          "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
          "C:\Program Files\BitTorrent_DNA\dna.exe"="C:\Program Files\BitTorrent_DNA\dna.exe:*:Enabled:DNA"
          "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
          "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
          "C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
          "C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
          "C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
          "C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
          "C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
          
          [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
          "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
          "%ProgramFiles%\Messenger\msmsgs.exe"="%ProgramFiles%\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
          "%ProgramFiles%\AOL 9.0\AOL.exe"="%ProgramFiles%\AOL 9.0\AOL.exe:*:enabled:AOL 9.0"
          "%ProgramFiles%\AOL 9.0\WAOL.exe"="%ProgramFiles%\AOL 9.0\WAOL.exe:*:enabled:AOL 9.0"
          "%CommonProgramFiles%\AOL\ACS\AOLACSD.exe"="%CommonProgramFiles%\AOL\ACS\AOLACSD.exe:*:enabled:AOL 9.0 (Connectivity Service)"
          "%CommonProgramFiles%\AOL\ACS\AOLDIAL.exe"="%CommonProgramFiles%\AOL\ACS\AOLDIAL.exe:*:enabled:AOL 9.0 (Connectivity Service Dialer)"
          "%WinDir%\system32\fxsclnt.exe"="%WinDir%\system32\fxsclnt.exe:*:enabled:Microsoft Fax Console"
          "%ProgramFiles%\CA\eTrust Antivirus\InocIT.exe"="%ProgramFiles%\CA\eTrust Antivirus\InocIT.exe:*:enabled:eTrust Antivirus - Local Scanner"
          "%ProgramFiles%\CA\eTrust Antivirus\Realmon.exe"="%ProgramFiles%\CA\eTrust Antivirus\Realmon.exe:*:enabled:eTrust Antivirus - Realtime monitor"
          "%ProgramFiles%\CA\eTrust Antivirus\InoRpc.exe"="%ProgramFiles%\CA\eTrust Antivirus\InoRpc.exe:*:enabled:eTrust Antivirus - RPC Server"
          "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
          "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
          "C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
          
          [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3f943a42-3065-11dc-a28f-00110977bf55}]
          shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe
          
          
          ======File associations======
          
          .js - open - "C:\Program Files\Macromedia\Dreamweaver MX\Dreamweaver.exe" "%1"
          
          ======List of files/folders created in the last 2 months======
          
          2009-05-27 20:56:29 ----D---- C:\rsit
          2009-05-27 19:31:19 ----A---- C:\WINDOWS\ntbtlog.txt
          2009-05-26 22:30:35 ----A---- C:\WINDOWS\system32\zpeng25.dll
          2009-04-19 00:21:01 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
          2009-04-19 00:20:52 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
          2009-04-19 00:16:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
          2009-04-19 00:16:39 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
          2009-04-19 00:16:31 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
          2009-04-19 00:16:21 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
          2009-04-07 21:31:39 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
          2009-04-07 21:31:32 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$
          2009-04-07 21:31:14 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
          2009-04-07 21:31:06 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
          2009-04-07 21:30:44 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
          
          ======List of files/folders modified in the last 2 months======
          
          2009-05-27 20:52:39 ----SHD---- C:\WINDOWS\Installer
          2009-05-27 20:50:19 ----D---- C:\WINDOWS\Internet Logs
          2009-05-27 20:47:32 ----D---- C:\WINDOWS\Temp
          2009-05-27 20:40:14 ----D---- C:\WINDOWS\system32\CatRoot2
          2009-05-27 20:40:11 ----A---- C:\WINDOWS\ModemLog_Agere Systems PCI Soft Modem.txt
          2009-05-27 19:42:16 ----D---- C:\WINDOWS\system32
          2009-05-27 19:41:43 ----A---- C:\rapport.txt
          2009-05-27 19:40:17 ----A---- C:\WINDOWS\system32\tmp.txt
          2009-05-27 19:35:39 ----A---- C:\WINDOWS\SchedLgU.Txt
          2009-05-27 19:31:19 ----D---- C:\WINDOWS
          2009-05-27 19:22:36 ----D---- C:\WINDOWS\Prefetch
          2009-05-26 23:58:54 ----SHD---- C:\Config.Msi
          2009-05-26 23:57:58 ----A---- C:\WINDOWS\wininit.ini
          2009-05-26 22:57:51 ----D---- C:\WINDOWS\system32\ZoneLabs
          2009-05-26 22:28:31 ----D---- C:\WINDOWS\WinSxS
          2009-05-26 22:17:54 ----D---- C:\Program Files\Spybot - Search & Destroy
          2009-05-26 22:16:57 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
          2009-05-26 21:50:57 ----D---- C:\WINDOWS\system32\drivers
          2009-05-26 21:47:52 ----A---- C:\WINDOWS\system32\avgrsstx.dll
          2009-05-07 09:16:29 ----A---- C:\WINDOWS\system32\MRT.exe
          2009-04-19 12:53:04 ----HD---- C:\$AVG8.VAULT$
          2009-04-19 01:34:11 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
          2009-04-19 01:29:20 ----D---- C:\WINDOWS\system32\wbem
          2009-04-19 01:29:20 ----D---- C:\WINDOWS\AppPatch
          2009-04-19 00:21:05 ----HD---- C:\WINDOWS\inf
          2009-04-19 00:21:04 ----RSHDC---- C:\WINDOWS\system32\dllcache
          2009-04-19 00:20:55 ----A---- C:\WINDOWS\imsins.BAK
          2009-04-19 00:20:32 ----D---- C:\WINDOWS\system32\fr-fr
          2009-04-19 00:20:31 ----D---- C:\Program Files\Internet Explorer
          2009-04-19 00:20:15 ----D---- C:\WINDOWS\ie7updates
          2009-04-19 00:16:47 ----HD---- C:\WINDOWS\$hf_mig$
          2009-04-07 21:34:56 ----D---- C:\Program Files\Fichiers communs\Microsoft Shared
          2009-04-07 21:22:51 ----D---- C:\WINDOWS\system32\FxsTmp
          2009-04-07 21:22:51 ----D---- C:\Documents and Settings\harlock\Application Data\Adobe
          2009-04-07 21:22:51 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
          2009-04-05 17:41:42 ----D---- C:\Program Files\Google
          2009-04-05 17:38:24 ----D---- C:\Documents and Settings\All Users\Application Data\Google
          
          ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
          
          R1 AvgLdx86;AVG AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2009-05-26 325896]
          R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-05-26 27784]
          R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys []
          R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
          R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2009-02-16 353672]
          R2 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2006-04-22 8064]
          R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
          R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2005-03-04 1066278]
          R3 AnyDVD;AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [2006-08-18 20096]
          R3 Arp1394;Protocole client ARP 1394; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
          R3 ASAPIW2k;ASAPIW2K; C:\WINDOWS\system32\drivers\ASAPIW2k.sys [2003-12-04 11264]
          R3 Cap7134;MEDION (7134) WDM Video Capture; C:\WINDOWS\system32\DRIVERS\Cap7134.sys [2003-06-05 350752]
          R3 CardReaderFilter;Card Reader Filter; \??\C:\WINDOWS\system32\Drivers\USBCRFT.SYS []
          R3 cmudax;C-Media High Definition Audio Interface; C:\WINDOWS\system32\drivers\cmudax.sys [2005-05-12 1287296]
          R3 ElbyDelay;ElbyDelay; C:\WINDOWS\System32\Drivers\ElbyDelay.sys [2005-04-12 4608]
          R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5b.sys [2004-04-15 42496]
          R3 GEARAspiWDM;GEAR CDRom Filter; C:\WINDOWS\SYSTEM32\DRIVERS\GEARAspiWDM.sys [2008-01-29 16168]
          R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
          R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
          R3 IPFilter;Microsoft IntelliPoint Features driver; C:\WINDOWS\system32\DRIVERS\IPFilter.sys [2002-04-11 11136]
          R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
          R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12288]
          R3 MxlW2k;MxlW2k; C:\WINDOWS\system32\drivers\MxlW2k.sys [2004-10-14 28352]
          R3 NIC1394;Pilote réseau 1394; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
          R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-09-29 2744640]
          R3 PhTVTune;MEDION TV-TUNER 7134 MK2/3; C:\WINDOWS\system32\DRIVERS\PhTVTune.sys [2003-06-12 24704]
          R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
          R3 usbhub;Pilote de concentrateur standard USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
          R3 usbstor;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
          R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
          S1 aiptektp;HyperPen; C:\WINDOWS\system32\DRIVERS\aiptektp.sys [2004-07-07 22272]
          S3 61883;Pilote d'unité 61883; C:\WINDOWS\system32\DRIVERS\61883.sys [2008-04-13 48128]
          S3 Avc;Périphérique AVC; C:\WINDOWS\system32\DRIVERS\avc.sys [2008-04-13 38912]
          S3 BRIDGE;Pont MAC; C:\WINDOWS\system32\DRIVERS\bridge.sys [2008-04-13 71552]
          S3 BridgeMP;Miniport de pont MAC; C:\WINDOWS\system32\DRIVERS\bridge.sys [2008-04-13 71552]
          S3 CCDECODE;Décodeur sous-titre fermé; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
          S3 CoachAud;Coach Audio; C:\WINDOWS\system32\DRIVERS\CoachAud.sys [2004-11-24 10368]
          S3 CoachUsb;Coach Digital Camera on USB; C:\WINDOWS\system32\DRIVERS\CoachUsb.sys [2004-11-24 50976]
          S3 CoachVc;Coach Video Capture; C:\WINDOWS\system32\DRIVERS\CoachVc.sys [2004-11-24 44256]
          S3 EL90XBC;Pilote de la carte EtherLink XL 90XB/C 3Com; C:\WINDOWS\system32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
          S3 HdAudAddService;Pilote de fonction Microsoft UAA pour Service High Definition Audio; C:\WINDOWS\system32\drivers\HdAudio.sys [2004-03-17 113664]
          S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2008-04-13 51200]
          S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
          S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
          S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
          S3 netrcacm;RCA USB Digital Cable Modem Driver; C:\WINDOWS\system32\DRIVERS\netrcacm.sys [2003-01-24 20642]
          S3 ovt530;Webcam Classic; C:\WINDOWS\System32\Drivers\ov530vid.sys [2005-03-15 161792]
          S3 QCDonner;Logitech QuickCam Express; C:\WINDOWS\system32\DRIVERS\OVCD.sys [2001-08-17 28032]
          S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
          S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
          S3 STV680;USB Dual-mode Camera; C:\WINDOWS\system32\drivers\STV680.sys [2002-02-11 119536]
          S3 STV680m;USB Dual-mode Cameram; C:\WINDOWS\system32\drivers\STV680m.sys [2002-02-11 9024]
          S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
          S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
          S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
          S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
          S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
          S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
          S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
          S3 X10UIF;%DESCRIPTION%; C:\WINDOWS\System32\Drivers\x10uif.sys [2001-11-14 10761]
          S3 XUIF;X10 USB Wireless Transceiver; C:\WINDOWS\System32\Drivers\x10ufx2.sys [2005-05-19 17792]
          
          ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
          
          R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-07-22 116040]
          R2 avg8wd;AVG8 WatchDog; C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2009-05-26 298776]
          R2 Bonjour Service;Service Bonjour; C:\Program Files\Bonjour\mDNSResponder.exe [2007-07-24 229376]
          R2 CanalPlus.VOD;CanalPlus.VOD; C:\Program Files\Canal\Canal Widget\VOD\CanalPlus.VOD.exe [2009-04-30 188416]
          R2 iPAHelper.exe;iPAHelper.exe; C:\Program Files\iPod Access for Windows\iPAHelper.exe [2007-04-05 1543614]
          R2 LogWatch;Event Log Watch; C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe [2002-09-20 53248]
          R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2004-09-29 127043]
          R2 TVersityMediaServer;TVersityMediaServer; C:\Program Files\TVersity\Media Server\MediaServer.exe [2007-12-30 724992]
          R2 UserAccess7;SecuROM User Access Service (V7); C:\WINDOWS\system32\UAService7.exe [2005-05-17 126976]
          R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2009-02-16 2402184]
          R2 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
          R3 iPod Service;Service de l'iPod; C:\Program Files\iPod\bin\iPodService.exe [2008-07-30 532264]
          R3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
          R3 x10nets;X10 Device Network Service; C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe [2001-11-12 20480]
          S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
          S2 navapsvc;Norton AntiVirus Auto-Protect Service; C:\Program Files\Norton AntiVirus\navapsvc.exe []
          S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe [2004-11-16 68096]
          S3 AdobeVersionCue;AdobeVersionCue; C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe [2003-10-22 61440]
          S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
          S3 CA_LIC_CLNT;Client de licence CA; C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe [2002-09-20 77824]
          S3 CA_LIC_SRVR;Serveur de licence CA; C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmtd.exe [2002-09-20 77824]
          S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
          S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-30 182768]
          S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
          S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
          S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
          
          -----------------EOF-----------------
          
          1. Télécharges :

            Malwarebytes

            http://www.malwarebytes.org/mbam.php

            * Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installation ) et mets le à jour .

            (NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici :

            https://www.malekal.com/tutorial-aboutbuster/

            * Potasses le Tuto pour te familiariser avec le prg :

            https://forum.pcastuces.com/sujet.asp?f=31&s=3

            ( cela dit, il est très simple d'utilisation ).

            relance malwarebytes en suivant scrupuleusement ces consignes :

            ! Déconnecte toi et ferme toutes applications en cours !

            * Lance Malwarebyte's .

            Fais un examen dit "Complet" .

            --> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
            --> à la fin tu cliques sur "résultat" .
            --> Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

            Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

            Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)
            1. ho ouais essaie avec la dernière version de smitfraudfix

              http://siri.urz.free.fr/Fix/SmitfraudFix.exe
              1. Bon apparement doit y avoir une protection antiflood qui empêche de poster deux fois de suite...

                Voila le fichier info :

                info.txt logfile of random's system information tool 1.06 2009-05-27 20:56:55
                
                ======Uninstall list======
                
                -->C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
                -->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
                -->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
                -->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
                -->C:\WINDOWS\UNNMP.exe /UNINSTALL
                -->MsiExec.exe /I{AC76BA86-1033-F400-7760-000000000001}
                -->RunDll32 "C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll",LaunchSetup "C:\Program Files\InstallShield Installation Information\{416DFEDD-9F1B-4EFC-AF70-FCA891AE0251}\zidxp.exe"
                -->RunDll32 "C:\Program Files\Fichiers communs\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll",LaunchSetup "C:\Program Files\InstallShield Installation Information\{91A4AD99-69CE-4745-97B7-0E0DFBECFDE5}\setup.exe"
                -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23EFDB58-0874-4883-9810-EDA510B19FAE}\setup.exe" -l0x9 
                -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2BB79C8D-9DCC-4861-8A23-AE1B0B45E2B6}\setup.exe" -l0x9 
                -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{775FFF70-4A8C-4500-908D-3C34DBEB11D5}\setup.exe" -l0x9 
                -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{83021AC3-086F-4B77-ACCD-1BD7C9AB211E}\setup.exe" -l0x9 
                -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B14F9B26-D695-4C4A-8B11-0FE6CDCC797B}\setup.exe" -l0x9 
                -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E213C271-AEFA-481D-A9B4-914D88925B8D}\setup.exe" -l0x9 
                -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{01958032-9877-4118-B87F-9EFA74B3F15F}\setup.exe" -l0x40c 
                -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2C0DAEA5-826C-4A76-B176-56959B99D3F0}\setup.exe" -l0x40c 
                -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}\setup.exe" -l0x40c 
                -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
                1200-V2 WIRELESS SCROLL TABLET-->Rmtablet KNL
                22Pixels Photoshop Flock-->C:\Program Files\Adobe\Photoshop CS\Uninstal.exe
                Ad-Aware SE Personal-->C:\PROGRA~1\Lavasoft\AD-AWA~2\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~2\INSTALL.LOG
                Adobe Acrobat - Reader 6.0.2 Update-->MsiExec.exe /I{AC76BA86-0000-0000-0000-6028747ADE01}
                Adobe AIR-->MsiExec.exe /I{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}
                Adobe Creative Suite-->C:\PROGRA~1\INSTAL~1\{D52EC~1\setup.exe /Relaunched=yes /Uninstall /Relaunched=yes
                Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
                Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
                Adobe Reader 6.0.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A00000000001}
                Adobe Reader 7.0.7 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70000000000}
                Adobe SVG Viewer 3.0-->C:\Program Files\Fichiers communs\Adobe\SVG Viewer 3.0\Uninstall\Winstall.exe -u -fC:\Program Files\Fichiers communs\Adobe\SVG Viewer 3.0\Uninstall\Install.log
                Adobe® Photoshop® Album Edition Découverte 3.0-->MsiExec.exe /I{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}
                Agere Systems PCI Soft Modem-->agrsmdel
                AnyDVD-->"C:\Program Files\SlySoft\AnyDVD\AnyDVD-uninst.exe" /D="C:\Program Files\SlySoft\AnyDVD"
                Apple Mobile Device Support-->MsiExec.exe /I{49C88E44-1B38-4FC6-824E-2BDA3063B0E3}
                Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
                Araxis Merge v6.5-->MsiExec.exe /I{18773DD3-1B4A-413F-840E-44F96D046B74}
                Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe
                Assistant de connexion Windows Live-->MsiExec.exe /I{D3116CC7-24DC-4CA3-9CE1-23FED836E9F2}
                AVG Free 8.5-->C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
                Barre d'outils Outlook de Windows Live (Windows Live Toolbar)-->MsiExec.exe /X{6E15BEDF-7EB5-4010-998E-B430DB4EFE45}
                Bloqueur de fenêtres pop-up (Windows Live Toolbar)-->MsiExec.exe /X{A425C250-A0E1-4D78-B1C1-A5CBC7385E7C}
                Bonjour-->MsiExec.exe /I{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
                CA eTrust Antivirus-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\CA\eTrust Antivirus\Uninst.isu" -c"C:\Program Files\CA\eTrust Antivirus\InoSetup.dll"
                CANAL WIDGET-->MsiExec.exe /X{09B6B322-325F-4A5F-9051-830ED194A1A7}
                CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
                CloneDVD2-->"C:\Program Files\Elaborate Bytes\CloneDVD2\CloneDVD2-uninst.exe" /D="C:\Program Files\Elaborate Bytes\CloneDVD2"
                C-Media High Definition Audio Driver-->C:\WINDOWS\system32\cmirmdrv.exe
                Codeur Windows Media Série 9-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
                Codeur Windows Media Série 9-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
                Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
                Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
                Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
                Creatix V.92 Data Fax Modem-->agrsmdel
                Détecteur de flux Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{EFFCB0F1-CFEC-48D4-B793-EBFCAE852976}
                Digital Camera Manager 3.7-->C:\PROGRA~1\DIGITA~1\UNWISE.EXE C:\PROGRA~1\DIGITA~1\INSTALL.LOG
                Disc2Phone-->MsiExec.exe /I{FFAB5ABB-8AAB-42E2-847F-1743E51E01E9}
                DV 5700-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A19B094A-42EB-4D3F-A57E-0CDE052A1D80}\Setup.exe" 
                DVD Audio Extractor 3.5.1-->"C:\Program Files\DVD Audio Extractor\unins000.exe"
                Ecran de veille AOL Photos-->C:\Program Files\Fichiers communs\AOL\Screensaver\uninst_ygpss.exe
                Emule Speed Booster 2.1-->"C:\Program Files\Emule Speed Booster\unins000.exe"
                eMule-->"C:\Program Files\eMule\Uninstall.exe"
                eMule2-->"C:\Program Files\eMule\uninstall.exe"
                EPSON CardMonitor-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{109D28C7-FB38-483A-9C91-001CB59E2699}\SETUP.EXE" -l0x40c uninst
                EPSON Copy Utility 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\Setup.exe" -l0x40c -UnInstall
                EPSON Logiciel imprimante-->C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
                EPSON PhotoQuicker3.5-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{65F5B7AF-3363-11D7-BB6B-00018021113F}\SETUP.EXE" -l0x40c uninst
                EPSON PhotoStarter3.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C48817E7-AA05-4151-A99D-1E1E550CE801}\SETUP.EXE" -l0x40c uninst
                EPSON PRINT Image Framer Tool2.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{23B59ED4-C360-11D7-875B-0090CC005647}\SETUP.EXE" -l0x40c anything
                EPSON Scan-->C:\Program Files\epson\escndv\setup\setup.exe /r
                EPSON Smart Panel-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6C11D561-620B-47DA-A693-4C597F3CDF40}\SETUP.EXE" -l0x40c Uninstall
                EPSON Web-To-Page-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}\SETUP.EXE" -l0x40c -anything
                ESCX3600 Guide de réf.-->C:\Program Files\EPSON\TPMANUAL\ESCX3600\REF_G\DOCUNINS.EXE
                ESCX3600 Guide des logiciels-->C:\Program Files\EPSON\TPMANUAL\ESCX3600\PQU_G\DOCUNINS.EXE
                Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
                Extension HighMAT pour l'Assistant Graver un CD de Microsoft Windows XP-->MsiExec.exe /X{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}
                ffdshow [rev 1324] [2007-07-01]-->"C:\Program Files\K-Lite Codec Pack\ffdshow\unins000.exe"
                FileZilla (remove only)-->"C:\Program Files\FileZilla\uninstall.exe"
                Freeplayer-->C:\Program Files\Freeplayer\Uninstall.exe
                Google Earth-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\setup.exe" -l0x9  -removeonly
                Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_BDA1448D3D255554.exe" /uninstall
                Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
                Google Video Player-->"C:\Program Files\Google\Google Video Player\Uninstall.exe"
                Hercules WebCam Station-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D208F4A7-6B73-4C2A-8B1E-8756FCBA831E}\Setup.exe" -l0x40c 
                Hercules Webcam-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A250D351-A07F-4D5D-AB6C-693C69B9BFAF}\Setup.exe" -l0x40c 
                High Definition Audio Driver Package - KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe
                HijackThis 2.0.2-->"C:\Documents and Settings\harlock\Bureau\HijackThis.exe" /uninstall
                Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
                Information sur votre PC-->MsiExec.exe /I{36D6F663-DF15-45BD-B0C6-4B909308E3B6}
                iPod Access for Windows v4.0.5-->"C:\Program Files\iPod Access for Windows\unins000.exe"
                iPod for Windows 2005-03-23-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{44A537A5-859C-43A6-8285-C0668142A090} /l1036 
                iPod for Windows 2005-09-23-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{D4936AAF-FFD0-44A1-A7EA-A2DB41CEB5BC} /l1036 
                iPod for Windows 2005-10-12-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{D9F4A9F8-92C5-4289-9D04-F0F8F02D580A} /l1036 
                iPod for Windows 2006-01-10-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{3D047C15-C859-45F7-81CE-F2681778069B} /l1036 
                iTunes-->MsiExec.exe /I{3DE0053C-FD9A-483E-B7C9-B06E4392206E}
                J2SE Runtime Environment 5.0 Update 6-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
                Java 2 Runtime Environment, SE v1.4.2_05-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142050}
                Jeux Classiques-->MsiExec.exe /X{6107371A-6504-43D4-9B11-AB633B84F700}
                K-Lite Codec Pack 2.79 Full-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
                Language pack for Ad-Aware SE-->C:\PROGRA~1\Lavasoft\AD-AWA~2\Plugins\Langs\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~2\Plugins\Langs\INSTALL.LOG
                Learn2 Player (Uninstall Only)-->C:\Program Files\Learn2.com\StRunner\stuninst.exe
                Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
                Macrogaming SweetIM 1.2a-->MsiExec.exe /X{5827C8C9-A3C6-4E7C-AA70-F6AFAB52F981}
                Macromedia Dreamweaver MX-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8B4AB829-DFD3-436D-B808-D9733D76C590}\Setup.exe" -l0x40c mmUninstall
                Macromedia Extension Manager-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A5BA14E0-7384-11D4-BAE7-00409631A2C8}\setup.exe" -l0x40c mmUninstall
                Macromedia Flash MX-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3BE480ED-E17A-431A-981C-5C2EDDBCD3BF}\Setup.exe" -l0x40c UNINSTALL
                Macromedia Shockwave Player-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
                Matroska Pack (remove only)-->C:\Program Files\Matroska Pack\Uninstall.exe
                Media Player Classic fr-->"C:\Program Files\Media Player Classic\uninstall.exe"
                Medion Flash XL 2.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EA1CB7AC-E221-4822-A789-0ADB051DC498}\Setup.exe" -l0x9  -wUninst
                Menus intelligents (Windows Live Toolbar)-->MsiExec.exe /X{0CC70FEF-5068-4CD5-B4DE-86FFD98EC929}
                Messenger Plus! 3-->"C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /Remove
                Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
                Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
                Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
                Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
                Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
                Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
                Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
                Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
                Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
                Microsoft Office XP Professional-->MsiExec.exe /I{9211040C-6000-11D3-8CFE-0050048383C9}
                Microsoft PowerPoint Viewer 97-->C:\Program Files\PowerPoint Viewer\setup\setup.exe
                Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
                Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
                Microsoft Windows Media Video 9 VCM-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmv9vcm.inf, Uninstall
                Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour le Codeur Windows Media (KB954156)-->"C:\WINDOWS\$NtUninstallKB954156_WM9L$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)-->"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
                Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
                Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
                Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
                Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
                Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
                Movie Collection 5.4.3.3-->"C:\Program Files\Movie Collection\unins000.exe"
                Mozilla Firefox (3.0.1)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
                MP3 Workshop 1.96-->"C:\Program Files\MP3 Workshop\unins000.exe"
                MSN Reaper-->"C:\Program Files\MSN Reaper\uninst.exe"
                MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
                MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
                MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
                MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
                Multimedia Keyboard Driver Ver1.0 (KB-0108)-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FF262740-C85A-11D5-BBEC-00D0B740900A}\Setup.exe" 
                Musetools NT-->MsiExec.exe /I{EB64DD0C-3C22-4D6B-A6FE-3ECB1EA6C98E}
                Musicmatch® Jukebox-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8EF1122E-E90C-4EE9-AB0C-7FDE2BA42C26}\setup.exe" -l0x40c  -uninst 
                Nero Suite-->C:\Program Files\Fichiers communs\Ahead\Uninstall\setup.exe /uninstall
                NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
                OneCare Advisor (Windows Live Toolbar)-->MsiExec.exe /X{F242B06B-517F-4D62-B654-16B11564A912}
                OpenOffice.org 2.2-->MsiExec.exe /I{7FD7F10E-0666-4C9F-A0A8-422EA5E31C4C}
                Philips Key Ring Audio Player-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{39EB9562-0612-4409-90C2-7D1F6C853316}\Setup.exe" -l0x40c 
                PIF DESIGNER2.1-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7BD0A2D8-4EA0-43C6-BDF8-DDA87B8031C6}\SETUP.EXE" -l0x40c anything
                PinnacleHollywood FX 5-->C:\WINDOWS\unvise32.exe C:\Program Files\Pinnacle\Hollywood FX 5\uninstal.log
                PowerCinema 3.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\setup.exe"  -uninstall
                PowerDVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe"  -uninstall
                PowerProducer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.exe"  -uninstall
                QuarkXPress 6.0 Demo-->MsiExec.exe /I{6F7703D0-CC91-4a73-90FE-29D719541481}
                QuickTime-->MsiExec.exe /I{08CA9554-B5FE-4313-938F-D4A417B81175}
                RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
                Safari-->MsiExec.exe /I{C9D96682-5A4D-45FA-BA3E-DDCB2B0CB868}
                Samsung Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung\SSM_Uninstall.exe
                Samsung PC Studio-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -l0x40c  -removeonly
                ScanToWeb-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EBAE381B-60A6-4863-AA9F-FCAB755BC9E5}\SETUP.EXE" ADDREMOVEDLG
                Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
                Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
                Sid Meier's Civilization 4-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CFBCE791-2D53-4FCE-B3FB-D6E01F4112E8}\setup.exe" -l0x40c  -removeonly
                Skype™ 3.8-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
                Sony Ericsson PC Suite-->MsiExec.exe /I{B56B1487-9A26-4AFD-A1FD-949C40F5F2BC}
                Spybot - Search & Destroy 1.4-->"C:\Program Files\Spybot - Search & Destroy\unins000.exe"
                Spybot - Search & Destroy-->"C:\Program Files\Spybot - Search & Destroy\unins001.exe"
                StarCraft-->I:\StarCraft\UNINSTALL\unins000.exe
                STOIK Video Converter 2-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A8DF8593-F619-47DE-AD27-BCABF233433A}\setup.exe" -l0x9  -removeonly
                Studio 9-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9E491AB7-4589-48CA-9CBB-874CB2788391}\Setup.exe" -l0x40c  UNINSTALL
                SweetIM For Internet Explorer 1.0a-->MsiExec.exe /X{F86FFD86-1966-4C6C-99D9-44A6E7AB97E3}
                The Movies(TM)-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{0556F885-2415-4666-B53E-33727E46AEA1} 
                Trillian-->C:\Program Files\Trillian\trillian.exe /uninstall
                TVersity Codec Pack 1.1-->C:\Program Files\TVersity Codec Pack\uninst.exe
                TVersity Media Server  0.9.11.4 beta-->C:\Program Files\TVersity\Media Server\uninst.exe
                USB Driver for Panasonic DVC-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{6304CCF6-3343-4DA5-96B6-84B3A644B93B} /l1033 
                USB Dual-mode Camera v200 Installation Files-->C:\PROGRA~1\STMICR~1\STV680~1\UNWISE.EXE C:\PROGRA~1\STMICR~1\STV680~1\INSTALL.LOG
                Utilitaire de sauvegarde Windows-->MsiExec.exe /I{76EFFC7C-17A6-479D-9E47-8E658C1695AE}
                VC 9.0 Runtime-->MsiExec.exe /I{02E89EFC-7B07-4D5A-AA03-9EC0902914EE}
                VC 9.0 Runtime-->MsiExec.exe /I{A040AC77-C1AA-4CC9-8931-9F648AF178F6}
                VideoLAN VLC media player 0.8.4a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
                Viewpoint Media Player-->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
                Visionneuse Journal Windows Microsoft-->MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA7}
                VobSub v2.05 (Remove Only)-->"C:\Program Files\Gabest\VobSub\uninstall.exe"
                WebCam Driver for Panasonic DVC-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{EBE171CC-C465-43FE-AA82-F0B4333764DD} /l1036 
                Widget programmes-->msiexec /qb /x {29C877B1-19D9-3F74-E86C-2ECF5028C087}
                widget_programmes-->MsiExec.exe /I{29C877B1-19D9-3F74-E86C-2ECF5028C087}
                Windows Live Favorites pour Windows Live Toolbar-->MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}
                Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
                Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
                Windows Live Safety Scanner-->RunDll32.exe "C:\Program Files\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
                Windows Live Toolbar-->"C:\Program Files\Windows Live Toolbar\UnInstall.exe" {0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
                Windows Live Toolbar-->MsiExec.exe /X{0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
                Windows Media Connect-->"C:\WINDOWS\$NtUninstallWMCSetup$\spuninst\spuninst.exe"
                Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
                Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
                Windows Media Format SDK Hotfix - KB891122-->"C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.exe"
                Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
                Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
                Yahoo! Toolbar avec bloqueur de fenêtres pop-up-->C:\PROGRA~1\Yahoo!\Common\unyt.exe
                ZoneAlarm Spy Blocker-->rundll32 C:\PROGRA~1\ZONEAL~1\bar\1.bin\SpyBlock.dll,O 
                ZoneAlarm-->C:\Program Files\Zone Labs\ZoneAlarm\zauninst.exe
                
                ======Hosts File======
                
                127.0.0.1	www.007guard.com
                127.0.0.1	007guard.com
                127.0.0.1	008i.com
                127.0.0.1	www.008k.com
                127.0.0.1	008k.com
                127.0.0.1	www.00hq.com
                127.0.0.1	00hq.com
                127.0.0.1	010402.com
                127.0.0.1	www.032439.com
                127.0.0.1	032439.com
                
                ======Security center information======
                
                AV: AVG Anti-Virus Free
                FW: ZoneAlarm Firewall
                
                ======System event log======
                
                Computer Name: NOM-86D0CDC22E1
                Event Code: 7036
                Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : arrêté.
                
                Record Number: 115674
                Source Name: Service Control Manager
                Time Written: 20080921213057.000000+120
                Event Type: Informations
                User: 
                
                Computer Name: NOM-86D0CDC22E1
                Event Code: 7036
                Message: Le service Service de la passerelle de la couche Application est entré dans l'état : en cours d'exécution.
                
                Record Number: 115673
                Source Name: Service Control Manager
                Time Written: 20080921213056.000000+120
                Event Type: Informations
                User: 
                
                Computer Name: NOM-86D0CDC22E1
                Event Code: 7035
                Message: Un contrôle Démarrer a correctement été envoyé au service Service de la passerelle de la couche Application.
                
                Record Number: 115672
                Source Name: Service Control Manager
                Time Written: 20080921213056.000000+120
                Event Type: Informations
                User: AUTORITE NT\SYSTEM
                
                Computer Name: NOM-86D0CDC22E1
                Event Code: 7036
                Message: Le service X10 Device Network Service est entré dans l'état : en cours d'exécution.
                
                Record Number: 115671
                Source Name: Service Control Manager
                Time Written: 20080921213054.000000+120
                Event Type: Informations
                User: 
                
                Computer Name: NOM-86D0CDC22E1
                Event Code: 7036
                Message: Le service NLA (Network Location Awareness) est entré dans l'état : en cours d'exécution.
                
                Record Number: 115670
                Source Name: Service Control Manager
                Time Written: 20080921213053.000000+120
                Event Type: Informations
                User: 
                
                =====Application event log=====
                
                Computer Name: NOM-86D0CDC22E1
                Event Code: 701
                Message: msnmsgr (3532) La défragmentation en ligne a terminé un passage complet dans la base de données '\\.\C:\Documents and Settings\Parn\Local Settings\Application Data\Microsoft\Messenger\bonino_pierrick@hotmail.com\SharingMetadata\Working\database_6EB8_A464_B8A4_2C91\dfsr.db'.
                
                Record Number: 15305
                Source Name: ESENT
                Time Written: 20080530050003.000000+120
                Event Type: Informations
                User: 
                
                Computer Name: NOM-86D0CDC22E1
                Event Code: 700
                Message: msnmsgr (3532) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\Parn\Local Settings\Application Data\Microsoft\Messenger\bonino_pierrick@hotmail.com\SharingMetadata\Working\database_6EB8_A464_B8A4_2C91\dfsr.db'.
                
                Record Number: 15304
                Source Name: ESENT
                Time Written: 20080530050003.000000+120
                Event Type: Informations
                User: 
                
                Computer Name: NOM-86D0CDC22E1
                Event Code: 701
                Message: msnmsgr (3532) La défragmentation en ligne a terminé un passage complet dans la base de données '\\.\C:\Documents and Settings\Parn\Local Settings\Application Data\Microsoft\Messenger\bonino_pierrick@hotmail.com\SharingMetadata\Working\database_6EB8_A464_B8A4_2C91\dfsr.db'.
                
                Record Number: 15303
                Source Name: ESENT
                Time Written: 20080530040003.000000+120
                Event Type: Informations
                User: 
                
                Computer Name: NOM-86D0CDC22E1
                Event Code: 700
                Message: msnmsgr (3532) La défragmentation en ligne commence un passage complet dans la base de données '\\.\C:\Documents and Settings\Parn\Local Settings\Application Data\Microsoft\Messenger\bonino_pierrick@hotmail.com\SharingMetadata\Working\database_6EB8_A464_B8A4_2C91\dfsr.db'.
                
                Record Number: 15302
                Source Name: ESENT
                Time Written: 20080530040003.000000+120
                Event Type: Informations
                User: 
                
                Computer Name: NOM-86D0CDC22E1
                Event Code: 701
                Message: msnmsgr (3532) La défragmentation en ligne a terminé un passage complet dans la base de données '\\.\C:\Documents and Settings\Parn\Local Settings\Application Data\Microsoft\Messenger\bonino_pierrick@hotmail.com\SharingMetadata\Working\database_6EB8_A464_B8A4_2C91\dfsr.db'.
                
                Record Number: 15301
                Source Name: ESENT
                Time Written: 20080530030003.000000+120
                Event Type: Informations
                User: 
                
                ======Environment variables======
                
                "ComSpec"=%SystemRoot%\system32\cmd.exe
                "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\PROGRA~1\CA\SHARED~1\SCANEN~1;C:\PROGRA~1\CA\ETRUST~1;"C:\Program Files\Zone Labs\ZoneAlarm\MailFrontier";C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Fichiers communs\Teleca Shared
                "windir"=%SystemRoot%
                "FP_NO_HOST_CHECK"=NO
                "OS"=Windows_NT
                "PROCESSOR_ARCHITECTURE"=x86
                "PROCESSOR_LEVEL"=15
                "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 3 Stepping 4, GenuineIntel
                "PROCESSOR_REVISION"=0304
                "NUMBER_OF_PROCESSORS"=2
                "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
                "TEMP"=%SystemRoot%\TEMP
                "TMP"=%SystemRoot%\TEMP
                "AVENGINE"=C:\PROGRA~1\CA\SHARED~1\SCANEN~1
                "INOCULAN"=C:\PROGRA~1\CA\ETRUST~1
                "tvdumpflags"=8
                "CLASSPATH"=.;C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip
                "QTJAVA"=C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip
                
                -----------------EOF-----------------
                

                Pour malwerbites j'attendrais que quelqu'un ai posté pour pouvoir mettre le rapport...
                1. as-tu essayer avec ton smitfraudfix à jours ?

                  télécharge celui la celui que tu as pris au début est loin d'être à jours.

                  http://siri.urz.free.fr/Fix/SmitfraudFix.exe
                  1. rapport de malwarebytes :

                    Malwarebytes' Anti-Malware 1.37
                    Version de la base de données: 2188
                    Windows 5.1.2600 Service Pack 3
                    
                    28/05/2009 19:20:31
                    mbam-log-2009-05-28 (19-20-31).txt
                    
                    Type de recherche: Examen complet (C:\|D:\|E:\|)
                    Eléments examinés: 298864
                    Temps écoulé: 1 hour(s), 40 minute(s), 22 second(s)
                    
                    Processus mémoire infecté(s): 0
                    Module(s) mémoire infecté(s): 0
                    Clé(s) du Registre infectée(s): 8
                    Valeur(s) du Registre infectée(s): 2
                    Elément(s) de données du Registre infecté(s): 0
                    Dossier(s) infecté(s): 3
                    Fichier(s) infecté(s): 5
                    
                    Processus mémoire infecté(s):
                    (Aucun élément nuisible détecté)
                    
                    Module(s) mémoire infecté(s):
                    (Aucun élément nuisible détecté)
                    
                    Clé(s) du Registre infectée(s):
                    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{74ce56ff-3469-47c0-93e1-d0cb8b203ea9} (Trojan.Vundo) -> Quarantined and deleted successfully.
                    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b64f4a7c-97c9-11da-8bde-f66bad1e3f3a} (Rogue.WinAntivirus) -> Quarantined and deleted successfully.
                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully.
                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VSPlugin (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                    HKEY_CLASSES_ROOT\qalkfxor.bpqk (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                    HKEY_CLASSES_ROOT\qalkfxor.toolbar.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                    
                    Valeur(s) du Registre infectée(s):
                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\rqbmvpso (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\pdoskegl (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                    
                    Elément(s) de données du Registre infecté(s):
                    (Aucun élément nuisible détecté)
                    
                    Dossier(s) infecté(s):
                    C:\WINDOWS\privacy_danger (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                    c:\WINDOWS\privacy_danger\images (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                    C:\Program Files\Media Access (Adware.MediaAccess) -> Quarantined and deleted successfully.
                    
                    Fichier(s) infecté(s):
                    c:\WINDOWS\privacy_danger\images\danger.jpg (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                    c:\WINDOWS\privacy_danger\images\spacer.gif (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                    c:\program files\media access\Info.txt (Adware.MediaAccess) -> Quarantined and deleted successfully.
                    c:\program files\media access\MediaAccK.exe (Adware.MediaAccess) -> Quarantined and deleted successfully.
                    C:\WINDOWS\cookies.ini (Malware.Trace) -> Quarantined and deleted successfully.
                    
                    1. et maintenant si tu redémarre ton pc ?
                      en mode normal as-tu encore la fenêtre ?
                      1. Aprés avoir passé ton programme.. et ensuite le smitfraudfix mis à jour... Puis un petit coup de spybot... j'ai l'air d'être enfin débarassé de toute ces s*******... Le fond d'ecran ne disparait plus aprés chaque redémarage et je n'ai plus de fenêtre access violation quand je ferme mon ordi...

                        On va prier en esperant que ca dure;...

                        n grand merci à tout ceux qui m'on aidé...
                        1. oubli pas de changer ton post pour résolu si ces bien résolu

                          a+
                          1. Contributeur sécurité
                            Bonjour,

                            il n'y a aucune certitude que l'ordi est vraiment désinfecté.

                            En particulier, je ne vois pas qui a nettoyé

                            shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL copy.exe


                            Il n'est pas normal non plus de te laisser partir sans nettoyer les outils devenus onutiles et dont certains peuvent être potentiellement dangereux.

                            Il n'est pas normal non plus de ne pas t'avoir demandé de mettre à jour ta console java. C'est une faille de sécurité permanente.

                            ===========

                            Donc :

                            tu postes le dernier rapport de SmitFraudFix

                            tu refais tourner RSIT et tu postes le rapport.

                            ===========

                            Ca devrait diminuer les chances que tu nous reviennes avec pire. Le taux de formatage augmente ces temps ci.