virus... je sais pas ce que c'est... help :(

Question

bonjour,

j'explique :

ma soeur a installé kazaa lite révolution à cette adresse http://www.klite.a4.pl/

sachant que j aime pas le P2P elle l'a viré avant mon retour mais ca a modifié quelquechose dans mon pc... je soupconne svchost et depuis voici ce que j ai en tapant netstat

TCP nom-fqimekrlhde:990 downloads.screensavers.com1067 ESTABLISHED

Il y a plusieurs connexions comme ceci, meme lorsque je ne suis pas connecté a internet (modem débranché)

je ne sais pas ce qui ce passe... et commence à paniquer

ps: je peux sur demande fournir une copie d'ecran de netstat

d avance merci

nico

Afficher la suite

Utilisateur anonyme · Answer

b'jour

ça n'a pas l'air d'un virus
(downloads) screensaver.com c'est un site de wallpapers, logos de sonneries, screens etc etc

Google
Screensavers - The Very Best from screensaver.com: Free and Custom ... -
Features hundreds of top quality screen savers and desktop themes complete with
descriptions for each. Also available for a small fee is a membership in the ...
www$$.screensaver.com/

supprime-le

*Devise : Je m'intéresse à l'avenir parceque
c'est là que je vais passer le reste de ma vie*

nico · Answer

supprimer quoi ???

Utilisateur anonyme · Answer

ben! l'adresse - supprime-làou réinstalle ta connex au propre*Devise : Je m'intéresse à l'avenir parceque  c'est là que je vais passer le reste de ma vie*

aldo13 · Answer

Salut , C'est pas normal que avec netstat tu as ca en ESTABLISHEDtelecharge hijackthis et ensuite poste le log.

nico · Answer

voici...il me parait "sain"... en fait je pense que svchost à été modifié... action prises jusqua présent*scan en ligne ratantivirus rien d anormal*g viré java et vais reinstallerces connexions st actives meme si non connecté à internetLogfile of HijackThis v1.99.1Scan saved at 10:25:15, on 16/03/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\Program Files\Internet Explorer\IEXPLORE.EXEC:\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr10.hpwis.com/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr10.hpwis.com/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr10.hpwis.com/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr10.hpwis.com/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.google.fr/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla	fswshx.dllO2 - BHO: IEWatchObj Class - {9527D42F-D666-11D3-B8DD-00600838CD5F} - C:\WINDOWS\system32\IETie.dllO3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\hpdtlk02.dllO4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exeO4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXEO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetectO4 - HKLM\..\Run: [VTTimer] VTTimer.exeO4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exeO4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exeO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXEO4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla	fswctrl.exeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUPO4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exeO4 - HKLM\..\Run: [PrevxHome] C:\Program Files\PREVX\Prevx Home\SAGUI.exeO4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exeO4 - HKCU\..\Run: [BackupNotify] c:\Program Files\HP\Digital Imaging\bin\backupnotify.exeO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HPPAVI~1\Pavilion\XPHWWBP4\plugin\bin\PCHButton.exeO4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHookO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTMLO8 - Extra context menu item: Download with Go!Zilla - file://C:\Program Files\Go!Zilla\download-with-gozilla.htmlO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dllO9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dllO9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dllO9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab30149.cabO16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cabO16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CABO16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cabO16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.fr/computercheckup/qdiagcc.cabO16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab30149.cabO16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://81.80.185.58:81/activex/AxisCamControl.cabO16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cabO23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeO23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exeO23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exeO23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exeO23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exeO23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exeO23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exeO23 - Service: Prevx Agent (PrevxAgent) - Unknown owner - C:\Program Files\PREVX\Prevx Home\PXAgent.exe" -f (file missing)O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe

aldo13 · Answer

au moins 1 qui me parait louche , c'est :

O2 - BHO: IEWatchObj Class - {9527D42F-D666-11D3-B8DD-00600838CD5F} - C:\WINDOWS\system32\IETie.dll

mais bon je peux me tromper , attends la releve des pro de la sécurité.

Utilisateur anonyme · Answer

rien dans le log - tout à l'air normal
je comprends pas par contre pkoi ces process apparaissent 2 fois
C:\WINDOWS\system32\winlogon.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE

c'est tout comme Running process??

pkoi tu n'édites pas les adresses supplémentaires TCP ? tu as supprimé kazaa 0k mais pas les adresses du partage

Pour supprimer TCP/IP
http://www.microsoft.com/windows2000/fr/server/help/default.asp?url=/windows2000/fr/server/help/sag_TCPIP_pro_Removing.htm

regarde aussi ton fichier Host

FICHIER Host (ne garder que : 127.0.0.1 localhost + autres adresses connues )
(Déplier) C:-->\windows-->\system32-->\drivers\....\-->Host<--ouvrir avec le bloc-notes/Edition : "sélectionner" (les adresses non voulues)/Supprimer

nico · Answer

je suis un imbécile...je l ai lancé en mode sans échec... je reposte de suite en "normal"

Utilisateur anonyme · Answer

non.... GUID/{9527D42F-D666-11D3-B8DD-00600838CD5F}Filename/IETie.dll, nbiels.dllStatus	L (Légitime)BHODescription/GhostSurfhttp://castlecops.com/clsid-440.html

nico · Answer

que dois je faire alors ? je comprends plus ? je reste en sans echec ?? et ensuite ?

Utilisateur anonyme · Answer

1 log se fait en mode normal!!- Le mettre dans 1 dossier : C:\HijackThis- Le lancer -> Scan -> Save log- Récupérer ce log/texte avec le bloc-notes.- Le copier/coller ici

nico · Answer

génial dolly... :)g fait ceciregarde aussi ton fichier Host FICHIER Host (ne garder que : 127.0.0.1 localhost + autres adresses connues ) (Déplier) C:-->\windows-->\system32-->\drivers\....\-->Host<--ouvrir avec le bloc-notes/Edition : "sélectionner" (les adresses non voulues)/Supprimerj ai supprimé ce screensavers.com et ca a changé... maintenant c une autre adresse... peux tu me confirmer ce que je dois supprimer??? ou laisser...voici le log HJT en "normal"Logfile of HijackThis v1.99.1Scan saved at 11:17:43, on 16/03/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeC:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exeC:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exeC:\windows\system\hpsysdrv.exeC:\WINDOWS\system32\ps2.exeC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\WINDOWS\system32\dla	fswctrl.exeC:\PROGRA~1\Grisoft\AVG7\avgcc.exeC:\PROGRA~1\Grisoft\AVG7\avgemc.exeC:\Program Files\PREVX\Prevx Home\SAGUI.exeC:\Program Files\Google\Gmail Notifier\gnotify.exeC:\Program Files\PREVX\Prevx Home\PXAgent.exeC:\WINDOWS\system32\ctfmon.exeC:\WINDOWS\System32\svchost.exeC:\PROGRA~1\HPPAVI~1\Pavilion\XPHWWBP4\plugin\bin\PCHButton.exeC:\Program Files\Microsoft ActiveSync\WCESCOMM.EXEC:\Program Files\Messenger\msmsgs.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exeC:\WINDOWS\system32\wuauclt.exeC:\Program Files\Microsoft ActiveSync\WCESMgr.exeC:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exeC:\WINDOWS\system32\cmd.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Microsoft Office\Office10\OUTLOOK.EXEC:\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr10.hpwis.com/R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr10.hpwis.com/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr10.hpwis.com/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr10.hpwis.com/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.google.fr/R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla	fswshx.dllO2 - BHO: IEWatchObj Class - {9527D42F-D666-11D3-B8DD-00600838CD5F} - C:\WINDOWS\system32\IETie.dllO3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\hpdtlk02.dllO4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exeO4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXEO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetectO4 - HKLM\..\Run: [VTTimer] VTTimer.exeO4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exeO4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exeO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXEO4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla	fswctrl.exeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUPO4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exeO4 - HKLM\..\Run: [PrevxHome] C:\Program Files\PREVX\Prevx Home\SAGUI.exeO4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exeO4 - HKCU\..\Run: [BackupNotify] c:\Program Files\HP\Digital Imaging\bin\backupnotify.exeO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HPPAVI~1\Pavilion\XPHWWBP4\plugin\bin\PCHButton.exeO4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHookO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTMLO8 - Extra context menu item: Download with Go!Zilla - file://C:\Program Files\Go!Zilla\download-with-gozilla.htmlO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dllO9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dllO9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INetRepl.dllO9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab30149.cabO16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cabO16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CABO16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cabO16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.fr/computercheckup/qdiagcc.cabO16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab30149.cabO16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://81.80.185.58:81/activex/AxisCamControl.cabO16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cabO23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exeO23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exeO23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exeO23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exeO23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exeO23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exeO23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exeO23 - Service: Prevx Agent (PrevxAgent) - Unknown owner - C:\Program Files\PREVX\Prevx Home\PXAgent.exe" -f (file missing)O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe

Utilisateur anonyme · Answer

nan! le log est toujours clean - y'a riengueuh! ^_^le fichier Host - tu peux faire un copié/collé ici avec le bloc-notes?@+

nico · Answer

voici... j hallucine, il est énorme... a ton avis un reformatage du pc peut il assainir tt ca ?? car il doit y avoir des saloperies partout ailleurs non ? a ton avis...N.## [Misc Add-ons][A - Z]127.0.0.1 admin.abcsearch.com127.0.0.1 www3.abcsearch.com #[Browseraid]127.0.0.1 www.abcsearch.com127.0.0.1 abc517.net #[Trojan.Mitglieder.H]127.0.0.1 absoluagency.com #[Trojan.StartPage.H]127.0.0.1 acestats.com127.0.0.1 www.acestats.com127.0.0.1 actualnames.com #[Parasite.ActualNames][Spyware.ActualNames]127.0.0.1 www.actualnames.com127.0.0.1 ad-up.com127.0.0.1 www.ad-up.com127.0.0.1 adatom.com127.0.0.1 aesp.adatom.com127.0.0.1 adbest.com127.0.0.1 adserv.adbonus.com127.0.0.1 www.adbonus.com127.0.0.1 ad2.adcept.net127.0.0.1 ad3.adcept.net127.0.0.1 www.adcept.net127.0.0.1 adcomplete.com127.0.0.1 www.adcomplete.com127.0.0.1 www.adcopy.info127.0.0.1 ads.adcorps.com127.0.0.1 ads.addynamix.com127.0.0.1 pt.server1.adexit.com127.0.0.1 www.adexit.com127.0.0.1 www.ad4ever.com127.0.0.1 adhearus.com127.0.0.1 display2.adhearus.com127.0.0.1 ssl3.adhost.com127.0.0.1 www2.adhost.com127.0.0.1 www.addme.com127.0.0.1 www.adinfinity.com127.0.0.1 te.adlandpro.com127.0.0.1 classic.adlink.de127.0.0.1 regio.adlink.de127.0.0.1 west.adlink.de127.0.0.1 www.adminder.com127.0.0.1 adsfac.net127.0.0.1 www.adonweb.com127.0.0.1 www.adrelevance.com #[NetRatings]127.0.0.1 media.adrevolver.com127.0.0.1 adroar.com127.0.0.1 ads.adroar.com127.0.0.1 delta.adroar.com127.0.0.1 iads.adroar.com #[Adware.AdRoar][ADW_ADROAR.A]127.0.0.1 lists.adroar.com127.0.0.1 www.adroar.com127.0.0.1 ads.adsag.com127.0.0.1 di.adsag.com127.0.0.1 img.adsag.com127.0.0.1 adserv.com127.0.0.1 www.adserv.com127.0.0.1 ads.adtomi.com127.0.0.1 www.adtomi.com #[Adware.Adtomi]127.0.0.1 downldcl.adtoolsinc.com127.0.0.1 www.adtoolsinc.com127.0.0.1 www.adtrader.com127.0.0.1 survey.advantageresearch.com127.0.0.1 ad.adver.com.tw127.0.0.1 ads.advertise.net127.0.0.1 advertisingvision.com #[Adware.Advision]127.0.0.1 www.advertisingvision.com127.0.0.1 adviva.com127.0.0.1 www.adviva.com127.0.0.1 ads.adviva.net127.0.0.1 adstats.adviva.net127.0.0.1 tracker.affistats.com #[msvrl.dll]127.0.0.1 www.affiliatefuel.com127.0.0.1 banners.affiliatefuel.com127.0.0.1 affiliatetarget.com127.0.0.1 www.affiliatetarget.com127.0.0.1 fcds.affiliatetracking.net127.0.0.1 our.affiliatetracking.net127.0.0.1 www.affiliatetracking.net127.0.0.1 www.affiliatetracking.com127.0.0.1 partner.ah-ha.com #[Troj/Subsear-A][Adware-SSF.dr]127.0.0.1 adserver.aim4media.com127.0.0.1 adtest.aim4media.com127.0.0.1 pops.aim4media.com127.0.0.1 www.aim4media.com127.0.0.1 crs.akamai.com127.0.0.1 soap.alexa.com #[Spyware.Alexa][Alexa Toolbar]127.0.0.1 www.alexa.com127.0.0.1 allcheapsolutions.com #[Backdoor-CIE]127.0.0.1 ads.as4x.tmcs.akadns.net #[Ticketmaster]127.0.0.1 bantam.ai.net127.0.0.1 fiona.ai.net127.0.0.1 ads.amazingmedia.com127.0.0.1 bohema.amillo.net #[Trojan.Mitglieder.H]127.0.0.1 adserver04.ancestry.com #[RealMedia]127.0.0.1 ads.antionline.com127.0.0.1 junior.apk.net127.0.0.1 banner.arttoday.com127.0.0.1 associmg.com #[amazon.com]127.0.0.1 armbender.com #[UCSearch.ucUCSearch][W32.Adclicker.F.Trojan]127.0.0.1 www.armbender.com #[UCSearch.ArmBender]127.0.0.1 audiogalaxy.com127.0.0.1 www.audiogalaxy.com #[Restricted Zone site]127.0.0.1 adserving.autotrader.com127.0.0.1 www.avatarresources.com #[Parasite.AutoStartup]127.0.0.1 www.avres.net127.0.0.1 www.aweber.com127.0.0.1 cploving.awmhost.net #[TrojanClicker.Win32.Lopin]# B127.0.0.1 bar.baidu.com #[Parasite.ClientMan]127.0.0.1 www.baltictop.com127.0.0.1 www.banner-mania.com127.0.0.1 www.bannerspace.com #[Restricted Zone site]127.0.0.1 www2.bannerspace.com127.0.0.1 www3.bannerspace.com127.0.0.1 www5.bannerspace.com127.0.0.1 www6.bannerspace.com127.0.0.1 www7.bannerspace.com127.0.0.1 bannerswap.com127.0.0.1 www.bannerswap.com127.0.0.1 www.bidclix.com127.0.0.1 bidclix.net127.0.0.1 www.bidclix.net127.0.0.1 bigtracker.com127.0.0.1 bighits.net #[Restricted Zone site]127.0.0.1 bigticker.bighits.net127.0.0.1 bounty.bighits.net127.0.0.1 www.bighits.net127.0.0.1 download.bigwebportal.com #[hotwebsearch.com]127.0.0.1 www.bigwebportal.com127.0.0.1 counter.bizland.com127.0.0.1 webads.bizservers.com127.0.0.1 www.black-hole.co.uk #[Restricted Zone site]127.0.0.1 www.blazehits.net #[gonnasearch.com]127.0.0.1 s7.blingblingcontent.com #[Easywebinstaller Control]127.0.0.1 ads.bmais.net #[bluemountain]127.0.0.1 bookedspace.com #[Parasite.BookedSpace]127.0.0.1 www.bookedspace.com #[Adware.Bookedspace]127.0.0.1 a.boom.ro127.0.0.1 s.boom.ro127.0.0.1 www1.boomerank.com127.0.0.1 boomerank.com127.0.0.1 citi.bridgetrack.com #[Tracking Service]127.0.0.1 rccl.bridgetrack.com127.0.0.1 config.broadcastpc.tv #[TROJ_RVP.E]127.0.0.1 report.broadcastpc.tv #[AdvWare.Broadcap.a]127.0.0.1 www.broadcastpc.tv #[Adware.Broadcastpc]127.0.0.1 www.browserplugin.com #[WebHlprObj Class]127.0.0.1 install.browsertoolbar.com #[Backdoor.Autoupder][BrowserToolbar]127.0.0.1 www2.browsertoolbar.com #[TROJ_SUA.A]127.0.0.1 www.browsertoolbar.com #[Parasite.BrowserToolbar]127.0.0.1 browserwise.com #[Parasite.Xupiter][Xupiter.BrowserWise]127.0.0.1 www.browserwise.com127.0.0.1 www.buildtraffic.com# C127.0.0.1 casino-on-net.com127.0.0.1 java2.casino-on-net.com127.0.0.1 www.casino-on-net.com127.0.0.1 cc-dt.com127.0.0.1 ads.cc-dt.com127.0.0.1 clickserve.cc-dt.com127.0.0.1 www.capital-systems.net #[Troj/Ovedil-B]127.0.0.1 ads.cars.com127.0.0.1 www.cashforclicks.com127.0.0.1 www.cashpile.com127.0.0.1 ads.cdfreaks.com #[Ads.cdfreaks]127.0.0.1 mds.centrport.net127.0.0.1 c.clickaire.com #[CWS trojan downloads]127.0.0.1 classifieds1000.com127.0.0.1 www.classifieds1000.com127.0.0.1 clearfind.com127.0.0.1 www.clearfind.com #[Restricted Zone site]127.0.0.1 hop.clickbank.net #[Adware.Clickbank]127.0.0.1 zzz.clickbank.net127.0.0.1 clickedyclick.com127.0.0.1 www.clickexchange.ru127.0.0.1 click2boost.com127.0.0.1 secure.click2boost.com127.0.0.1 service.click2boost.com127.0.0.1 www.click2boost.com127.0.0.1 servedby.clickexperts.net127.0.0.1 www.clicks2you.com127.0.0.1 stats1.clicktracks.com127.0.0.1 www.is1.clixgalore.com127.0.0.1 www.clixgalore.com127.0.0.1 www1.click-fr.com127.0.0.1 www2.click-fr.com127.0.0.1 www3.click-fr.com127.0.0.1 www4.click-fr.com127.0.0.1 www.clickhouse.com127.0.0.1 www.clicks4u.com127.0.0.1 www.clipgenie.com127.0.0.1 comclick.com127.0.0.1 ct2.comclick.com127.0.0.1 fl01.ct2.comclick.com127.0.0.1 ihm01.ct2.comclick.com127.0.0.1 www.comclick.com #[Restricted Zone site]127.0.0.1 www.thecoolbar.com #[Softomate Toolbar][The Coolbar]127.0.0.1 www.compactbanner.com127.0.0.1 ads.console.net127.0.0.1 coolshader.com127.0.0.1 c.coolshader.com #[Win32.Harnig]127.0.0.1 www.coolshader.com127.0.0.1 counted.com127.0.0.1 bilbo.counted.com127.0.0.1 www.counted.com127.0.0.1 www.counterguide.com127.0.0.1 counter4u.de127.0.0.1 connectionzone.com127.0.0.1 count.casino-trade.com127.0.0.1 www.couponica.com127.0.0.1 www.couponsandoffers.com #[Adware.TopMoxie]127.0.0.1 data.coremetrics.com127.0.0.1 twci.coremetrics.com127.0.0.1 us.cqcounter.com127.0.0.1 zz.cqcounter.com127.0.0.1 1us.cqcounter.com127.0.0.1 ads.crosswinds.net127.0.0.1 megabyte.crosswinds.net127.0.0.1 cyberbounty.com127.0.0.1 js.cybermonitor.com127.0.0.1 stat3.cybermonitor.com127.0.0.1 cytron.com #[DailyWinner][Cytron]127.0.0.1 www.cytron.com# D127.0.0.1 dailywinner.net #[Parasite.DailyWinner][ezcybersearch.com]127.0.0.1 dw.dailywinner.net127.0.0.1 www.dailywinner.net127.0.0.1 www.dash.com127.0.0.1 ads.date.com127.0.0.1 banner.date.com127.0.0.1 dbbsrv.com #[bserv.darkblue.com][Restricted Zone site]127.0.0.1 freestuff.com.19828.fb.dbbsrv.com #[roar.com]127.0.0.1 spyware.com.16871.fb.dbbsrv.com127.0.0.1 webads.com.18345.fb.dbbsrv.com127.0.0.1 collector.deepmetrix.com127.0.0.1 geo.deepmetrix.com127.0.0.1 www.deepmetrix.com127.0.0.1 ad.ads.dk127.0.0.1 tdkads.ads.dk127.0.0.1 didtheyreadit.com #[email tracker]127.0.0.1 www.didtheyreadit.com127.0.0.1 counter.digits.com127.0.0.1 www.divago.com #[Adware.Surfairy]127.0.0.1 www.dnscaching.net #[stickypops.com]127.0.0.1 www.domamil.cz #[Trojan.Beagooz]127.0.0.1 downloadalot.com127.0.0.1 get.downloadalot.com127.0.0.1 www.downloadalot.com #[Restricted Zone site]127.0.0.1 doc-tracker.com127.0.0.1 dqmedia.net #[spam]127.0.0.1 drmx01.net #[spam]127.0.0.1 www.duenow.com127.0.0.1 gfx.dvlabs.com127.0.0.1 klipads.dvlabs.com# E127.0.0.1 e2give.com #[Adware-E2Give][Spyware.e2give]127.0.0.1 www.e2give.com127.0.0.1 www.e-bannerx.com127.0.0.1 adv1.eblocs.com127.0.0.1 www.easycounter.com127.0.0.1 banners.easydns.com127.0.0.1 banner.easyspace.com127.0.0.1 adserv1.ebates.com #[WebSavings]127.0.0.1 www.ebates.com #[Adware.MoeMoney]127.0.0.1 www.efinder.cc #[StartPage-DA]127.0.0.1 c.enhance.com #[ah-ha.com]127.0.0.1 enhancemysearch.com #[xzoomy.com]127.0.0.1 www.enhancemysearch.com127.0.0.1 epeople.com127.0.0.1 errorpage404.com #[JS_TRAFFICHBAR.A]127.0.0.1 www.errorpage404.com #[Parasite.TinyBar]127.0.0.1 er.errorplace.com127.0.0.1 www.errorplace.com127.0.0.1 vipuk.escritorioactivo.com #[123Messenger Hijacker]127.0.0.1 www.escorcher.com #[bogus antivirus spyware]127.0.0.1 www.esearch.cc #[StartPage-EZ][server down?]127.0.0.1 www.eshopads2.com127.0.0.1 perso.estat.com127.0.0.1 prof.estat.com127.0.0.1 www.estat.com #[Restricted Zone site]127.0.0.1 eu-adcenter.net127.0.0.1 thinknyc.eu-adcenter.net127.0.0.1 ugo.eu-adcenter.net #[evidence-eliminator.com]127.0.0.1 www.euroklik.nl #[EasyBar][InstallerX Class]127.0.0.1 engage.everyone.net127.0.0.1 static.everyone.net127.0.0.1 www.exchangead.com127.0.0.1 exitexchange.com127.0.0.1 count.exitexchange.com127.0.0.1 images.exitexchange.com127.0.0.1 www.exitexchange.com #[Restricted Zone site]127.0.0.1 www.exittraffic.net127.0.0.1 ezcybersearch.com #[EZCyberSearch.Surebar]127.0.0.1 ads.ezcybersearch.com127.0.0.1 ezcybersearch.mail.everyone.net127.0.0.1 www.ezcybersearch.com #[Parasite.ezCyberSearch]127.0.0.1 www.evidence-eliminator.com127.0.0.1 www.ezhits4u.com #[EZHits4U.com]# F127.0.0.1 ads.fairfax.com.au127.0.0.1 images.ads.fairfax.com.au127.0.0.1 redirect.fairfax.com.au127.0.0.1 campaigns.f2.com.au127.0.0.1 www.fast2net.com127.0.0.1 www.fastfind.org #[SubSearch][TROJ_STARTPAG.KF][Adware.Fastfind.B]127.0.0.1 fasttrack.nu127.0.0.1 www.fceboard.com #[Adware.EBoard]127.0.0.1 www.fightpopups.net #[Adware.MessStopper]127.0.0.1 adserver.filefront.com127.0.0.1 www.filemix.net #[Surf+]127.0.0.1 www.fineclicks.com127.0.0.1 firstname.com127.0.0.1 clicks.firstname.com127.0.0.1 flashtrack.net127.0.0.1 ads.flashtrack.net #[Adware.Flashtrack.B]127.0.0.1 coreg.flashtrack.net127.0.0.1 www.flashtrack.net #[Adware.FlashEnhancer][KB312429]127.0.0.1 flyinads.com127.0.0.1 www.flyinads.com127.0.0.1 ads.forbes.com127.0.0.1 klipmart.forbes.com127.0.0.1 www.ampira.com #[Fortunecity]127.0.0.1 ads.fortunecity.com127.0.0.1 ads.v3.com #[Fortunecity]127.0.0.1 www2.fortunecity.com127.0.0.1 ad.freefind.com127.0.0.1 www.freehistorycleaner.com #[Adware.Fapi][ADW_HISCLEAN.A]127.0.0.1 free-stats.com127.0.0.1 www.freewebsites.com127.0.0.1 ads.free-windows-games.com127.0.0.1 www.free-windows-games.com #[Parasite.GAMsys][GamHelper]127.0.0.1 pops.freeze.com #[[GamHelper]# G127.0.0.1 ads.gamespy.com127.0.0.1 adcontent.gamespy.com127.0.0.1 www.gebr-wachs.de #[Trojan.Mitglieder.C][Backdoor.Gaster]127.0.0.1 gd.geobytes.com #[obtains users location]127.0.0.1 www.getsmart.com127.0.0.1 bp2.getredirect.com127.0.0.1 4.getredirect.com #[superlogy.com]127.0.0.1 www.getredirect.com127.0.0.1 getupdate.com127.0.0.1 dlx.getupdate.com #[AdvWare.ToolBar.VB.b]127.0.0.1 www.getupdate.com #[Adware.Getup]127.0.0.1 gigex.com127.0.0.1 media.gigex.com #[SpeedDelivery]127.0.0.1 www.gigex.com127.0.0.1 globesearch.com127.0.0.1 www.globesearch.com #[Restricted Zone site][CWS]127.0.0.1 goclick.com127.0.0.1 earth.goclick.com127.0.0.1 partner1.goclick.com127.0.0.1 www.goclick.com127.0.0.1 banner.goldenpalace.com #[redirects]127.0.0.1 www.goldenwebawards.com127.0.0.1 goldstats.net127.0.0.1 www.goldstats.net127.0.0.1 adincl.gopher.com #[InfoSpace]127.0.0.1 ads.gorillanation.com #[Restricted Zone site]127.0.0.1 adserver.gorillanation.com127.0.0.1 gostats.com127.0.0.1 c1.gostats.com127.0.0.1 c2.gostats.com127.0.0.1 webcounter.goweb.de127.0.0.1 greatstartpage.com #[parasite downloads]127.0.0.1 www.greatstartpage.com127.0.0.1 grokster.com #[Restricted Zone site][P2P]127.0.0.1 dl.grokster.com127.0.0.1 www.grokster.com127.0.0.1 ads.guardian.co.uk127.0.0.1 ads.guardianunlimited.co.uk127.0.0.1 www.g-wizzads.net# H127.0.0.1 hamster.com #[apps5.oingo.com]127.0.0.1 ad0.haynet.com127.0.0.1 www.hitboss.com127.0.0.1 www.hit4hit.com127.0.0.1 ads.hitcents.com127.0.0.1 hithopper.com #[Adware.Hithopper]127.0.0.1 www.hithopper.com127.0.0.1 hitmodel.net127.0.0.1 hit-now.com127.0.0.1 loga.hit-parade.com127.0.0.1 hit-parade.com127.0.0.1 www.hitpointer.com127.0.0.1 hitslink.com127.0.0.1 counter.hitslink.com127.0.0.1 counter2.hitslink.com127.0.0.1 www2.hitslink.com127.0.0.1 www.hitslink.com #[Restricted Zone site]127.0.0.1 www.hiwire.com127.0.0.1 ads.home.net127.0.0.1 counters.honesty.com127.0.0.1 banners.hotlinks.net127.0.0.1 hotphrase.com127.0.0.1 www.hotphrase.com #[Restricted Zone site]127.0.0.1 hotsearch.com #[roar.com][Restricted Zone site]127.0.0.1 www.hotsearch.com127.0.0.1 hotsearchbar.com #[iiittt Class][SpiderSearch]127.0.0.1 www.hotsearchbar.com127.0.0.1 www.10s.com.br #[Trojan.Cargao]127.0.0.1 cgi.hotstat.nl127.0.0.1 viewstat.hotstat.nl127.0.0.1 www.humanclick.com #[Restricted Zone site]127.0.0.1 hc2.humanclick.com127.0.0.1 www.hypertracker.com# I127.0.0.1 ads.iafrica.com127.0.0.1 ads.iboost.com127.0.0.1 www.i-clicks.net127.0.0.1 hits.icdirect.com127.0.0.1 hitctr01.icdirect.com127.0.0.1 image-catcher.com127.0.0.1 stats.surfaid.ihost.com127.0.0.1 ads.imdb.com #[amazon.com]127.0.0.1 www.impregnable.net #[TrojanDownloader.Win32.VB.dw][Trojan.Win32.StartPage.kk]127.0.0.1 stats.indextools.com127.0.0.1 adserver.indieclick.com127.0.0.1 campaign.indieclick.com127.0.0.1 adcenter.in2.com127.0.0.1 ads.inet1.com127.0.0.1 ads7.inet1.com127.0.0.1 banners.inetfast.com127.0.0.1 ads.infospace.com127.0.0.1 bvads.infospace.com127.0.0.1 dpxml.infospace.com127.0.0.1 xads.infospace.com127.0.0.1 www.infospider.com127.0.0.1 ads.intellicast.com127.0.0.1 ads.intelihealth.com127.0.0.1 ads.intermezzia.com127.0.0.1 mjxads.internet.com127.0.0.1 indiads.com127.0.0.1 infostart.com127.0.0.1 popups.infostart.com127.0.0.1 www.intelli-tracker.com127.0.0.1 ads.ipowerweb.com127.0.0.1 www.ipstat.com127.0.0.1 istarthere.com #[Troj/IEStart-C]127.0.0.1 moviesponsor.istarthere.com127.0.0.1 partners.istarthere.com127.0.0.1 www.istarthere.com127.0.0.1 adcycle.isoftmarketing.com127.0.0.1 isurfplus.com127.0.0.1 www.isurfplus.com #[Adware.Surebar]127.0.0.1 www.itrafficstar.com #[Restricted Zone site]# J127.0.0.1 www.jcount.com127.0.0.1 affiliates.jeanharris.com127.0.0.1 popup.jeanharris.com127.0.0.1 jpedownload.joltid.com127.0.0.1 www.joltid.com #[Adware.P2PNetworking]127.0.0.1 ads.jpost.com127.0.0.1 track.jpost.com# K127.0.0.1 www1.kliks.nl127.0.0.1 www2.kliks.nl127.0.0.1 www.kliks.nl127.0.0.1 kt3.kliptracker.com127.0.0.1 kt4.kliptracker.com127.0.0.1 www.kliptracker.com127.0.0.1 stats.klsoft.com127.0.0.1 www.kmindex.ru# L127.0.0.1 ad.leadcrunch.com127.0.0.1 ts1.lexmark.com127.0.0.1 www.linkcounter.com127.0.0.1 linkexchange.ru127.0.0.1 web.linkexchange.ru127.0.0.1 www.linkexchange.ru127.0.0.1 link4link.com127.0.0.1 plus.link4link.com127.0.0.1 www.links4trade.com127.0.0.1 escati.linkopp.net127.0.0.1 www.linkopp.net127.0.0.1 js.livehelper.com #[Restricted Zone site]127.0.0.1 newbrowse.livehelper.com127.0.0.1 liveperson.net127.0.0.1 server.iad.liveperson.net #[Restricted Zone site]127.0.0.1 www.liveperson.com127.0.0.1 adserv.lwmn.net127.0.0.1 locators.com #[object exploit]127.0.0.1 toolbar.locators.com #[Locators Toolbar]127.0.0.1 www.lords-of-havoc.de #[Trojan.Mitglieder.C][Backdoor.Gaster]127.0.0.1 luckyhomepage.com #[search.targetwords.com\1stblaze.com]127.0.0.1 www.luckyhomepage.com #[Restricted Zone site]127.0.0.1 adverts.lzio.com127.0.0.1 newupdates.lzio.com127.0.0.1 search.lzio.com127.0.0.1 updates.lzio.com #[Downloader-LE][Adware.ZioCom]# M127.0.0.1 make-deal.com127.0.0.1 go.mailbits.com127.0.0.1 mair.net #[Realtracker]127.0.0.1 marnet.us #[Downloader-IU]127.0.0.1 image.masterstats.com127.0.0.1 link.masterstats.com127.0.0.1 ads.affiliates.match.com127.0.0.1 associmage.match.com127.0.0.1 adserver.matchcraft.com127.0.0.1 maybeyes.biz #[Trojan.Ducky]127.0.0.1 ads.mcafee.com127.0.0.1 directads.mcafee.com127.0.0.1 ads.mediaodyssey.com127.0.0.1 www.mediatickets.net127.0.0.1 www.mt-download.com #[MediaTicketsInstaller Control]127.0.0.1 ads.mediaturf.net127.0.0.1 banner.meerhits.nl #[IEHIjacker.Meerhits.nl]127.0.0.1 pokpok.meerhits.nl127.0.0.1 exit.megago.com127.0.0.1 www.megago.com #[typo squatter]127.0.0.1 www.megasearchbar.com127.0.0.1 www.megaseek.net #[Restricted Zone site]127.0.0.1 www.memorywatcher.com #[TROJ_PEPER.A]127.0.0.1 pubs.mgn.net #[Grolier Network]127.0.0.1 micorsoft.com127.0.0.1 www.micorsoft.com #[typo hijacker]127.0.0.1 adserver.mindshare.de127.0.0.1 www.mini-player.com #[5MOF Mini-Player]127.0.0.1 banner.missingkids.com127.0.0.1 ads.monster.com127.0.0.1 adserver.monster.com127.0.0.1 adserver.a.in.monster.com127.0.0.1 ads.monstermoving.com127.0.0.1 cookie.monster.com127.0.0.1 mp3today.net127.0.0.1 www.mp3yes.com #[C2Media\LOP]127.0.0.1 mpamexit.com127.0.0.1 msgtag.com127.0.0.1 img.msgtag.com #[Restricted Zone site]127.0.0.1 www.msgtag.com127.0.0.1 multi1.rmuk.co.uk127.0.0.1 multimpp.com #[MultimppObj Class][AdvWare.BiSpy.o]127.0.0.1 www.multimpp.com127.0.0.1 mvtracker.com127.0.0.1 www.mvtracker.com127.0.0.1 mvr3d.net #[NavExcel
-CASE]127.0.0.1 mvr.us #[Parasite.NavExcel]127.0.0.1 www.mvr.us127.0.0.1 www.myaffiliateprogram.com127.0.0.1 ads.mydailyhoroscope.net127.0.0.1 www.mydailyhoroscope.net #[Adware.Horoscope]127.0.0.1 www.myemessenger.com127.0.0.1 rm.myoc.com127.0.0.1 myhitlogger.com127.0.0.1 mypagefinder.com #[Parasite.MyPageFinder]# N127.0.0.1 hit.namimedia.com127.0.0.1 ads.nandomedia.com127.0.0.1 neededware.com #[Adware.NeededWare]127.0.0.1 www.neededware.com127.0.0.1 www6.netbroadcaster.com127.0.0.1 code.netbreak.com.au127.0.0.1 www.netflip.com127.0.0.1 money2.netfirms.com127.0.0.1 partner.netmechanic.com127.0.0.1 tracker.netmechanic.com127.0.0.1 counter.netmore.net127.0.0.1 www.netpoll.nl127.0.0.1 ads.netsol.com127.0.0.1 ads.newsint.co.uk127.0.0.1 adq.nextag.com127.0.0.1 newiframe.biz #[TROJ_DELF.DS]127.0.0.1 www.newiframe.biz127.0.0.1 www.noadware.net #[SCAM.Enigma.NoAdware]127.0.0.1 ad.nobreak.com127.0.0.1 nounpax.com #[spam][server down?]127.0.0.1 nowbox.com127.0.0.1 www.nowbox.com #[Parasite.NowBox]127.0.0.1 mediatickets.nubela.net127.0.0.1 www.nubela.net127.0.0.1 nzads.net.nz# O127.0.0.1 okcounter.com127.0.0.1 www.okww.net #[Trojan.StartPage.C]127.0.0.1 stat.onestat.com127.0.0.1 www.onestat.com127.0.0.1 one.ru127.0.0.1 cnt.one.ru127.0.0.1 stats0.one.ru127.0.0.1 stats1.one.ru127.0.0.1 stats2.one.ru127.0.0.1 www.oneandonlynetwork.com #[Ticketmaster]127.0.0.1 server1.opentracker.net127.0.0.1 www.opinionlab.com127.0.0.1 ccc00.opinionlab.com127.0.0.1 rate.opinionlab.com127.0.0.1 banner.orb.net127.0.0.1 www.originalicons.com #[F1 Organizer Class]127.0.0.1 geoads.osdn.com127.0.0.1 tg-images.osdn.com127.0.0.1 otx5.otxresearch.com127.0.0.1 otx.ifilm.com #[OTXMedia.dll]127.0.0.1 www.otxresearch.com #[OTXMovie Class]127.0.0.1 adpopper.outblaze.com #[bargain-buddy.net]# P127.0.0.1 www.p3marketing.com #[Zapspot]127.0.0.1 click.payserve.com127.0.0.1 www.pc-test.net127.0.0.1 ad1.peel.com127.0.0.1 ad3.peel.com127.0.0.1 ads.peel.com127.0.0.1 ad4.peel.com127.0.0.1 ads5.peel.com127.0.0.1 www.peel.com127.0.0.1 www.peel.net127.0.0.1 ads.pennyweb.com #[addynamix.com]127.0.0.1 banners.pennyweb.com127.0.0.1 www.peruvianmarket.com #[Trojan.Beagooz.D]127.0.0.1 ads.photosight.ru127.0.0.1 phpadsnew.com127.0.0.1 www.phpadsnew.com127.0.0.1 pidorasam.net #[Backdoor.Berbew.J]127.0.0.1 ads2.playnet.com127.0.0.1 popfind.net #[Adware.Ddpop]127.0.0.1 www.popupads.com127.0.0.1 www.popupad.net127.0.0.1 popupblockade.com #[Parasite.Httper]127.0.0.1 www.popupblockade.com127.0.0.1 popupmoney.com #[Restricted Zone site]127.0.0.1 server01.popupmoney.com127.0.0.1 www.popupmoney.com127.0.0.1 popadstop.com #[Adware.PopAdStop]127.0.0.1 www.popadstop.com127.0.0.1 www.popunder.info #[TROJ_CHECKIN.B]127.0.0.1 www.popupswappers.com127.0.0.1 ad.popupswappers.com127.0.0.1 www.popuptop.com127.0.0.1 www2.portdetective.com127.0.0.1 x0x0l.pp.ru #[BKDR_CCT.A]127.0.0.1 www.praize.com #[Adware.Praize]127.0.0.1 1.primaryads.com127.0.0.1 www.privacyoutpost.com #[Troj/Regldr-A]127.0.0.1 www.prtracker.com127.0.0.1 www.profitzone.com #[ProfitZONE Adbar]127.0.0.1 prolivation.com #[Restricted Zone site]127.0.0.1 www.prolivation.com127.0.0.1 ads.pro-market.net127.0.0.1 www.promo.com.au127.0.0.1 www.proxylist.biz127.0.0.1 www.prutect.com #[Spyware.e2give]127.0.0.1 www.pstopper.com127.0.0.1 ad.sma.punto.net127.0.0.1 sma.punto.net127.0.0.1 www.pureseeker.com #[C2Media\LOP]127.0.0.1 www.pwallet.com #[Restricted Zone site]# Q127.0.0.1 rads01.quadrogram.com #[Adware.Quadro][Memwatcher.B][TROJ_PEPER.A]127.0.0.1 adserv.quality-channel.de127.0.0.1 www.quarterserver.de127.0.0.1 questionmarket.com127.0.0.1 amch.questionmarket.com127.0.0.1 ch.questionmarket.com127.0.0.1 survey.questionmarket.com127.0.0.1 www.questionmarket.com127.0.0.1 download.quickflicks.com #[Parasite.SVAPlayer]127.0.0.1 www.qq886.com #[Backdoor.Semes]# R127.0.0.1 ramgo.com #[Restricted Zone site]127.0.0.1 www.ramgo.com #[Win32.Startpage.B]127.0.0.1 www.autoraskrutka.ru #[Spyware.Acext]127.0.0.1 www.raskrutim.ru #[Spyware.Acext]127.0.0.1 www.realclicks.com127.0.0.1 www.relmaxtop.com127.0.0.1 banner.relcom.ru127.0.0.1 adservice.recon-networks.com127.0.0.1 rightstats.com127.0.0.1 www.rightstats.com127.0.0.1 m.rmbclick.com127.0.0.1 www.rgs-rostock.de #[Trojan.Mitglieder.C][Backdoor.Gaster]127.0.0.1 track.roiservice.com# S127.0.0.1 www.sandboxer.com #[Adware.Quadro][memorywatcher.com][Memwatcher.B]127.0.0.1 www.savehits.com127.0.0.1 st.sageanalyst.net127.0.0.1 scorpionsearch.com #[W32.Adclicker.C.Trojan]127.0.0.1 www.scorpionsearch.com #[x10.com][Trojan.Clicker.NetBuie a-b]127.0.0.1 adsremote.scripps.com127.0.0.1 counter.search.bg127.0.0.1 searchalot.com127.0.0.1 cards.searchalot.com127.0.0.1 mail.searchalot.com127.0.0.1 search.searchalot.com127.0.0.1 web.searchalot.com127.0.0.1 www.searchalot.com #[Adware-Tronix]127.0.0.1 searchandclick.com127.0.0.1 search.searchandclick.com127.0.0.1 www.searchandclick.com #[Browseraid][SearchAndClick]127.0.0.1 searchby.net127.0.0.1 www.searchby.net #[Ultimate Popup Killer]127.0.0.1 searchfst.com #[SFUtility Class][keywordsinc.com]127.0.0.1 www.searchfst.com127.0.0.1 www.searchgauge.com127.0.0.1 www.search-control.com #[TrojanDropper.Win32.Small.ig]127.0.0.1 search-itnow.com #[Parasite.AdultLinks]127.0.0.1 www.search-itnow.com127.0.0.1 www.searchmachine.com127.0.0.1 www.searchmagnifier.com127.0.0.1 searchmiracle.com #[Adware.EliteBar]127.0.0.1 install.searchmiracle.com127.0.0.1 641.searchmiracle.com127.0.0.1 10016.searchmiracle.com127.0.0.1 9310.searchmiracle.com127.0.0.1 www.searchresult.net #[Parasite.IgetNet]127.0.0.1 searchseekfind.com127.0.0.1 ads.searchseekfind.com127.0.0.1 tp.searchseekfind.com #[Trojan.Download.Chekin][server down?]127.0.0.1 www.searchseekfind.com127.0.0.1 browser.secondpower.com127.0.0.1 download.secondpower.com127.0.0.1 www1.secondpower.com127.0.0.1 www3.secondpower.com #[KB320159]127.0.0.1 www.secondpower.com127.0.0.1 adserver.securityfocus.com127.0.0.1 www.selfsurveys.com127.0.0.1 www.seehits.com127.0.0.1 www.sendtraffic.com127.0.0.1 sesso.com127.0.0.1 www.sesso.com #[VBS.Biscuit.A@mm]127.0.0.1 ds.serving-sys.com127.0.0.1 quasar.sitegauge.com127.0.0.1 tracker.sitescout.com127.0.0.1 advertpro.sitepoint.com127.0.0.1 www.sitestatslive.com127.0.0.1 www.shadowcrew.com #[spam]127.0.0.1 adserver.sharewareonline.com #[nictechnetworks.com]127.0.0.1 www.shockcounter.com127.0.0.1 shopathomeselect.com #[Parasite.ShopAtHomeSelect]127.0.0.1 download1.shopathomeselect.com #[ADW_SAHAGENT.A]127.0.0.1 downloads.shopathomeselect.com127.0.0.1 www.shopathomeselect.com #[Adware.SAHAgent]127.0.0.1 skeech.com127.0.0.1 www.skeech.com #[Restricted Zone site]127.0.0.1 smart2com.net #[Trojan.Autoproxy]127.0.0.1 smart-browser.com127.0.0.1 update.smart-browser.com #[Parasite.SmartBrowser]127.0.0.1 www.smart-browser.com127.0.0.1 smartclicks.net127.0.0.1 www.smartclicks.net127.0.0.1 smarter.com #[Restricted Zone site]127.0.0.1 sidebar.smarter.com127.0.0.1 www.smarter.com127.0.0.1 ads.smni.com127.0.0.1 static.smni.com127.0.0.1 www.sonyasys.com #[Downloader.Botten]127.0.0.1 ads.spaceports.com127.0.0.1 www1.spaex.com #[searchboss.com]127.0.0.1 www.specialoffersnetworks.com127.0.0.1 www.spedia.net #[SpediaBar]127.0.0.1 www.spyarsenal.com #[Spyware.DesktopSpy][Spyware.FamilyKeylog]127.0.0.1 spyferret.com #[OnlinePcFix.SpyFerret]127.0.0.1 www.spyferret.com127.0.0.1 spyware.com #[roar.com]127.0.0.1 www.ssppyy.com #[Spyware.Ssppyy]127.0.0.1 www.s-tracking.com127.0.0.1 link.startmake.com127.0.0.1 adsintl.starwave.com127.0.0.1 c1.statcounter.com127.0.0.1 www.statcounter.com127.0.0.1 js.statistici.ro127.0.0.1 log.statistici.ro127.0.0.1 s.statistici.ro127.0.0.1 www.statomatic.com127.0.0.1 reg.stats4all.com127.0.0.1 stats4you.com127.0.0.1 www.stats4you.com127.0.0.1 ctgbn.stellaremperor.com #[Backdoor.Alets]127.0.0.1 www.stickypops.com127.0.0.1 clix.superclix.de127.0.0.1 www.superlogy.com #[AdvWare.ToolBar.VB.b]127.0.0.1 sqwire.com #[Adware.Sqwire][Xupiter.Sqwire]127.0.0.1 www.sqwire.com #[Parasite.Xupiter][Adware-PornKings]127.0.0.1 www.supaseek.com #[Spyware.Supaseek]127.0.0.1 rd1.surfernetwork.com #[SurferNETWORK Plugin]127.0.0.1 www.surfernetwork.com127.0.0.1 www2.surveyfocus.com127.0.0.1 www.surveynetworks.com127.0.0.1 www.surveysite.com127.0.0.1 www2.survey-poll.com #[microsoft]127.0.0.1 swift-look.com #[phishing exploit]127.0.0.1 www.symantic.com #[Typo Squatter]127.0.0.1 adpick.switchboard.com127.0.0.1 adtag.sympatico.ca127.0.0.1 www.syspage.com #[pop-up scam]127.0.0.1 www.sysupdates.com127.0.0.1 www.sysupdates2.com #[TopMoxie]# T127.0.0.1 ad.uk.tangozebra.com127.0.0.1 targetsearch.info #[Trojan.StartPage.H]127.0.0.1 adult.targetsearch.info127.0.0.1 go.targetsearch.info127.0.0.1 tat-neftbank.ru #[Backdoor.Berbew.H]127.0.0.1 www.tech-marketresearch.com127.0.0.1 www.textads.biz127.0.0.1 a.tfag.de127.0.0.1 ak.tfag.de127.0.0.1 theaffiliateprogram.com127.0.0.1 myaffiliateprogram.com127.0.0.1 www.the-counter.net127.0.0.1 adbot.theonion.com127.0.0.1 www.thepokerclub.com #[SecurityRisk.ClubPoker]127.0.0.1 thesearchmall.com #[Adware.SearchMall]127.0.0.1 www.thesearchmall.com127.0.0.1 tnc4u.com #[Parasite.DownloadPlus]127.0.0.1 new.tnc4u.com127.0.0.1 www.tnc4u.com #[Adware.DownloadPlus]127.0.0.1 www.toilet.com127.0.0.1 ad.tomshardware.com127.0.0.1 tooncomics.com #[IEDLL.ToonComics][here4search.com]127.0.0.1 www.tooncomics.com #[Downloader.Tooncom][CWS.Aff.Tooncomics]127.0.0.1 log.trafic.ro127.0.0.1 tool4ame.com #[TROJ_GOLID.A][Adware.IAGold]127.0.0.1 www.toolshack.com127.0.0.1 ads.toplayerserver.com127.0.0.1 www1.toplayerserver.com127.0.0.1 www.toplayerserver.com127.0.0.1 topmoxie.com127.0.0.1 www.topmoxie.com #[Etraffic]127.0.0.1 toprebates.com #[webrebates]127.0.0.1 www.toprebates.com127.0.0.1 stat.toprefsys.com127.0.0.1 www.top-search.com #[Adware-SSF.dr]127.0.0.1 ad.topstat.com127.0.0.1 nl.topstat.com #[Restricted Zone site]127.0.0.1 s26.topstat.com127.0.0.1 xl.topstat.com127.0.0.1 ads.track-star.com127.0.0.1 adserver.track-star.com127.0.0.1 geo2.track-star.com127.0.0.1 www.track-star.com127.0.0.1 tradeexit.com127.0.0.1 www.tradeexit.com #[Parasite.Winupie]127.0.0.1 www.trafficbeamer.nl127.0.0.1 trafficg.com #[Restricted Zone site]127.0.0.1 www.trafficg.com127.0.0.1 ad.trafficmp.com127.0.0.1 images.trafficmp.com127.0.0.1 t.trafficmp.com127.0.0.1 www.trafficflame.com127.0.0.1 trafficfile.com127.0.0.1 www.trafficfile.com127.0.0.1 trackyourstats.com127.0.0.1 trafficmarketplace.com127.0.0.1 get.trafficmultiplier.com127.0.0.1 go.trafficmultiplier.com127.0.0.1 goto.trafficmultiplier.com127.0.0.1 a.tribalfusion.com127.0.0.1 m.tribalfusion.com127.0.0.1 ads.tucows.com127.0.0.1 counts.tucows.com127.0.0.1 google.tucows.com127.0.0.1 www.turbomemorycharger.com #[Adware.Fapi]# U127.0.0.1 users.ucmore.com #[Parasite.UCmore]127.0.0.1 www.ucmore.com127.0.0.1 ads.ucomics.com127.0.0.1 image.ugo.com127.0.0.1 mediamgr.ugo.com127.0.0.1 www.ukbanners.com127.0.0.1 www.ultimatepopupkiller.com #[Restricted Zone site]127.0.0.1 ultimatecounter.com127.0.0.1 www.ultimatecounter.com127.0.0.1 adcontroller.unicast.com127.0.0.1 ads.unlimitedbanners.com127.0.0.1 ads1.updated.com127.0.0.1 url.biz.ua #[Download.Ject.B]127.0.0.1 config.url404.com #[Parasite.Httper]127.0.0.1 urlblaze.com #[Adware.TurboDownload]127.0.0.1 www.urlblaze.com127.0.0.1 www.urlblaze.net #[IEDriver][ADW_RULEDOR.C]127.0.0.1 usachoice.net# V127.0.0.1 www.v5msn.com #[Adware.Livechat]127.0.0.1 ads.valuead.com #[Restricted Zone site]127.0.0.1 adnetintads.valuead.com127.0.0.1 banners.valuead.com127.0.0.1 cs.valuead.com127.0.0.1 servedby.valuead.com127.0.0.1 ad.valuehost.ru127.0.0.1 image.versiontracker.com127.0.0.1 spinbox.versiontracker.com127.0.0.1 vesbiz.biz #[TROJ_DELF.DS]127.0.0.1 www.vesbiz.biz127.0.0.1 ads.vesperexchange.com127.0.0.1 www.vesperexchange.com127.0.0.1 cinnam.vibrahost.com #[PWSteal.Revcuss.C][Win32.Revcuss.C]127.0.0.1 vivi.vibrahost.com #[PWSteal.Revcuss.A]127.0.0.1 dns2010.vicp.net #[Backdoor.Tumag]127.0.0.1 uygurman.vicp.net #[Trojan.Riler][Troj/Riler-B]127.0.0.1 oas.villagevoice.com127.0.0.1 www.vikord.com #[Download.Ject.C]127.0.0.1 visit-link.com127.0.0.1 www.voonda.com #[Spyware.TAFbar]127.0.0.1 generic.vpptechnologies.com127.0.0.1 images2.vpptechnologies.com127.0.0.1 main.vpptechnologies.com127.0.0.1 msxml.vpptechnologies.com127.0.0.1 static.vpptechnologies.com #[hotsearchbar.com]127.0.0.1 xml.vpptechnologies.com #[BlazeFind]127.0.0.1 www.vstats.net127.0.0.1 ads.vnuemedia.com127.0.0.1 sevenc.vze.com #[VBS.Powcox@mm]# W127.0.0.1 www.w3exit.com127.0.0.1 ng3.ads.warnerbros.com127.0.0.1 wazam.com127.0.0.1 www.wazam.com #[Parasite.Wazam]127.0.0.1 wcft.net #[Parasite.LinkReplacer]127.0.0.1 www.wcft.net127.0.0.1 ads.weather.com127.0.0.1 ads.webattack.com127.0.0.1 webcounter.com127.0.0.1 www.webcounter.com127.0.0.1 www.weblink.ru127.0.0.1 adv.webmd.com127.0.0.1 webhits.de127.0.0.1 banners.webmasterplan.com127.0.0.1 stat.webmedia.pl127.0.0.1 bannervip.web1000.com127.0.0.1 ads.webads360.com127.0.0.1 clickcash.webpower.com127.0.0.1 orders.webpower.com127.0.0.1 img.webring.com127.0.0.1 img1.webring.com127.0.0.1 ads.webshots.com127.0.0.1 websponsors.com127.0.0.1 a.websponsors.com127.0.0.1 ads.websponsors.com127.0.0.1 g.websponsors.com127.0.0.1 www.websponsors.com127.0.0.1 www.webstars2000.com127.0.0.1 hits.webstat.com127.0.0.1 www.wenksdisdkjeilsow.com #[Parasite.AutoStartup][Download.Trojan]127.0.0.1 wetrack.it127.0.0.1 st.wetrack.it127.0.0.1 partner1.whatsfind.com127.0.0.1 www.whatsfind.com #[HTML_STARTPAGE.C]127.0.0.1 window1.com127.0.0.1 ads.winhelp2002.com127.0.0.1 ads.winsite.com127.0.0.1 winstream.com #[Parasite.Searchex]127.0.0.1 www.winstream.com127.0.0.1 clicktrack.wnu.com127.0.0.1 www.wowweb.net #[Adware.WWWBar]127.0.0.1 www.wurldmedia.com #[Adware.Wurldmedia][WurldMedia][KB321923]# X127.0.0.1 x0x.biz127.0.0.1 www.x0x.biz #[Backdoor.Berbew.D]127.0.0.1 xtra.co.nz127.0.0.1 nedstats.xs4all.nl127.0.0.1 hit1.xstats.com127.0.0.1 view1.xstats.com127.0.0.1 ads.xtra.co.nz# Y127.0.0.1 bs.yandex.ru127.0.0.1 counter.yadro.ru127.0.0.1 crsky2004.yeah.net #[Backdoor.Singu.B]127.0.0.1 yourspecialoffers.com #[FavoriteMan]127.0.0.1 www.yourspecialoffers.com127.0.0.1 ysearchus.com #[Parasite.TinyBar]127.0.0.1 www.ysearchus.com# Z127.0.0.1 zuvio.com #[UCSearch.ucUCSearch]127.0.0.1 www.zuvio.com #[Adware.OpenSite][OpenSite]127.0.0.1 bannerads.zwire.com# [Misc]127.0.0.1 www.0stats.com127.0.0.1 www.123counts.com #[hitslink.com]127.0.0.1 www.123mania.com #[SrchHook Class][Parasite.123Mania]127.0.0.1 123stat.com127.0.0.1 1234.2bro.com #[Adware.Satbo]127.0.0.1 www.241hits.com127.0.0.1 up.isp.2ch.net #[Trojan.Upchan]127.0.0.1 www.321search.com #[SearchAssistant.dll]127.0.0.1 ct.360i.com127.0.0.1 www.ff.iij4u.or.jp #[Trojan.Upchan]127.0.0.1 download.35mb.com #[impregnable.net]127.0.0.1 www.35mb.com #[download_35mb_com.applet]127.0.0.1 1000stars.ru127.0.0.1 xxxwwwjjjhd.20forfree.com #[W32.Autex.Worm]127.0.0.1 www.xxxwwwjjjhd.20forfree.com127.0.0.1 ad.37.com127.0.0.1 2jm.com127.0.0.1 7adpower.com127.0.0.1 www.7adpower.com #[Svezia.Dialer][VacPro.UserControl1]127.0.0.1 7am.com127.0.0.1 www.777search.com #[LOP]127.0.0.1 ad2.163.com127.0.0.1 adclient.163.com127.0.0.1 popme.163.com127.0.0.1 smtp.163.com #[Trojan.PSW.Ajim_bbs]127.0.0.1 ajim.delphibbs.com #[Trojan.PSW.Ajim_bbs]127.0.0.1 14713804A.l2m.net #[LiveTechnology]127.0.0.1 banner.50megs.com127.0.0.1 guannan.3322.net #[Restricted Zone site]127.0.0.1 www.fan8.com127.0.0.1 banners.dot.tk127.0.0.1 topsites.us #[Parasite.eStart]127.0.0.1 0-ol1oiz-xolxii1-oxli10ozl1l1-o-l-11-iizxp-l-0o-oll11iz0oil-ol.com# [123Banners][123Greetings.com][TROJ_NALDEM.A][Trojan.Naldem]127.0.0.1 www.123banners.com127.0.0.1 ftp.123banners.com127.0.0.1 123go.com127.0.0.1 ns1.123go.net# [180solutions][Adware.Ncase][KB317714]127.0.0.1 n-case.com127.0.0.1 www.n-case.com127.0.0.1 180solutions.com #[KB320162][NCase]127.0.0.1 ads.180solutions.com127.0.0.1 ax.180solutions.com #[180SAInstaller Class]127.0.0.1 bis.180solutions.com #[nCaseInstaller Class]127.0.0.1 bisads.180solutions.com127.0.0.1 downloads.180solutions.com127.0.0.1 installs.180solutions.com127.0.0.1 ping.180solutions.com127.0.0.1 tv.180solutions.com127.0.0.1 www.180solutions.com #[Parasite.nCase]127.0.0.1 www.180searchassistant.com #[Adware.180Search]127.0.0.1 www.surfassistant.com #[Adware.SurfAssistant]127.0.0.1 downloads.zango.com127.0.0.1 games.zango.com127.0.0.1 infinity.zango.com #[ZangoInstaller Class]127.0.0.1 messenger.zango.com127.0.0.1 showtimes.zango.com127.0.0.1 www.zango.com127.0.0.1 www.zangomessenger.com127.0.0.1 www.zangoshowtimes.com# [3721.COM][Parasite.CnsMin][Adware.Wengs]127.0.0.1 address.3721.com127.0.0.1 agent.3721.com127.0.0.1 assistant.3721.com127.0.0.1 cns.3721.com127.0.0.1 cnsmin.3721.com127.0.0.1 corp.3721.com127.0.0.1 dir.3721.com127.0.0.1 download.3721.com127.0.0.1 express.3721.com127.0.0.1 img.3721.com127.0.0.1 magic.3721.com127.0.0.1 mark.3721.com127.0.0.1 meta.3721.com127.0.0.1 msearch.3721.com127.0.0.1 sbox.3721.com127.0.0.1 shanghai.3721.com127.0.0.1 sina.3721.com127.0.0.1 user.3721.com127.0.0.1 wap.3721.com127.0.0.1 www.3721.com #[Adware.Chinet]127.0.0.1 yahoo.3721.com127.0.0.1 3721.com127.0.0.1 download.feiyang.com# [411 Web Directory]127.0.0.1 adtracker.411web.com127.0.0.1 hits.411web.com127.0.0.1 overture.411web.com127.0.0.1 static.411web.com127.0.0.1 xml.411web.com127.0.0.1 search.letssearch.com127.0.0.1 search2.letssearch.com127.0.0.1 www.letssearch.com #[BrowserAid.LetsSearch]# [7Search.com Networks][EMERgency 24, Inc][Track.SevenSearch]127.0.0.1 7search.com #[Parasite.7FaSSt Search]127.0.0.1 www.7search.com127.0.0.1 fstrack.7search.com127.0.0.1 impression.7search.com127.0.0.1 img.7meta.com127.0.0.1 www.7metasearch.com127.0.0.1 bannerx.adtactics.com127.0.0.1 adtactics.com127.0.0.1 www.adtactics.com127.0.0.1 ajokeaday.com127.0.0.1 bannersxchange.com127.0.0.1 img.bannersxchange.com127.0.0.1

Utilisateur anonyme · Answer

à ta place je supprimerais tout, met juste : 127.0.0.1 localhost - tu as quelques  sites douteux, même Microsoft dit de ne pas mettre leur adresse dans le Host, car elle peut être modifiée et empêcher l'accès au site Microsoft Updatec'pas la peine de formater à mon avis, ton log est clean vraiment ;  qd tu as supprimé kazaa, tu n'as pas supprimé simplement les connexions effectuées par ta soeur c'est tout, qd on installe kazaa il se connecte tt de suite ce truc à la recherche d'autres IP (c'est le but)tu devrais télécharger des anti-spywares plutôt - tu as qq sites qui laissent présager des p'tits trojans, cookies  et bébêtesAd-aware SE (bien de le coupler à Spybot)http://www.lavasoftusa.com/software/adaware/a² d'Emisoft (anti-trojans à dl pour 30 jours d'essai)http://www.emsisoft.net/fr/software/download/SpySweeper 1.3/anti-spywares (30 jours d'essai)<-- c'est très bien ce programme  en particulierhttp://www.webroot.com/fr/index.php

nico · Answer

comme precisé j ai tout supprimé...

et la, plus rien en netstat...

Ajouté par aldo13 (16/03/2005 à 11:53 GMT+1)
Il est normal ton fichier hosts , c'est justement pour pas se manger de saloperie que sites douteux sont présent dans ton hosts .

comment ca ?

aldo13 · Answer

quant tu as dans ton fichier host

127.0.0.1 le_site_de_q.com (c'est 1 exemple , ok )

en tapant dans internet explorer ou autre

le_site_de_q.com , tu sera redirigé vers ta machine (127.0.0.1)
donc le site ne sera pas accessible.

nico · Answer

comment faire alors ?par contre, la plus rien ds netstat... ca doit bien venir de là alors... mais comment trouver ce bon fichier ?

aldo13 · Answer

laisse tomber maintenant que tu as viré ,
si tu veux vraiment , tu peux aller sur le site de jceel (chez free mais j'ai pas le lien direct) pour telecharger un fichier hosts complet .

par contre fais voir "netstat -an" ce que ca donne.

au fait malibu , c'est toi ou pas ?

nico · Answer

si tu as msn je peux t envoyer une copie de netstat-annon je ne suis pas malibunicomouf@hotmail.com

aldo13 · Answer

J'ai pas msn , mais c'est pas dur a mettre dans un fichiernetstat -an > c:\monstat.txtet ensuite dans c : tu a le fichier txt  si tu veux pas montrer les ip mets des xx a la place ,  genre : 80.118.xx.xx: 145

nico · Answer

merci, je savais pas que l on pouvait faire ca...  Proto  Adresse locale         Adresse distante       Etat  TCP    0.0.0.0:135            0.0.0.0:0              LISTENING  TCP    0.0.0.0:1029           0.0.0.0:0              LISTENING  TCP    0.0.0.0:1041           0.0.0.0:0              LISTENING  TCP    0.0.0.0:7438           0.0.0.0:0              LISTENING  TCP    0.0.0.0:44334          0.0.0.0:0              LISTENING  TCP    0.0.0.0:44501          0.0.0.0:0              LISTENING  TCP    62.147.xxx.xxx:139     0.0.0.0:0              LISTENING  TCP    62.147.xxx.xxx:1095    80.239.xxx.xxx:80       SYN_SENT  TCP    127.0.0.1:990          0.0.0.0:0              LISTENING  TCP    127.0.0.1:990          127.0.0.1:1057         ESTABLISHED  TCP    127.0.0.1:999          0.0.0.0:0              LISTENING  TCP    127.0.0.1:999          127.0.0.1:1061         ESTABLISHED  TCP    127.0.0.1:1026         0.0.0.0:0              LISTENING  TCP    127.0.0.1:1027         127.0.0.1:44334        ESTABLISHED  TCP    127.0.0.1:1029         127.0.0.1:1031         ESTABLISHED  TCP    127.0.0.1:1031         127.0.0.1:1029         ESTABLISHED  TCP    127.0.0.1:1035         0.0.0.0:0              LISTENING  TCP    127.0.0.1:1036         127.0.0.1:44334        ESTABLISHED  TCP    127.0.0.1:1041         127.0.0.1:1043         ESTABLISHED  TCP    127.0.0.1:1043         127.0.0.1:1041         ESTABLISHED  TCP    127.0.0.1:1053         127.0.0.1:5679         ESTABLISHED  TCP    127.0.0.1:1057         127.0.0.1:990          ESTABLISHED  TCP    127.0.0.1:1060         127.0.0.1:5678         ESTABLISHED  TCP    127.0.0.1:1061         127.0.0.1:999          ESTABLISHED  TCP    127.0.0.1:1062         127.0.0.1:5678         ESTABLISHED  TCP    127.0.0.1:5678         127.0.0.1:1060         ESTABLISHED  TCP    127.0.0.1:5678         127.0.0.1:1062         ESTABLISHED  TCP    127.0.0.1:5679         0.0.0.0:0              LISTENING  TCP    127.0.0.1:5679         127.0.0.1:1053         ESTABLISHED  TCP    127.0.0.1:10025        0.0.0.0:0              LISTENING  TCP    127.0.0.1:10110        0.0.0.0:0              LISTENING  TCP    127.0.0.1:44334        127.0.0.1:1027         ESTABLISHED  TCP    127.0.0.1:44334        127.0.0.1:1036         ESTABLISHED  UDP    0.0.0.0:161            *:*                      UDP    0.0.0.0:1025           *:*                      UDP    0.0.0.0:1026           *:*                      UDP    0.0.0.0:1028           *:*                      UDP    0.0.0.0:1030           *:*                      UDP    0.0.0.0:1038           *:*                      UDP    0.0.0.0:1040           *:*                      UDP    0.0.0.0:1042           *:*                      UDP    0.0.0.0:3289           *:*                      UDP    0.0.0.0:44334          *:*                      UDP    62.147.xxx.xxx:53      *:*                      UDP    62.147.xxx.xxx:137     *:*                      UDP    62.147.xxx.xxx:138     *:*                      UDP    62.147.xxx.xxx:2051    *:*                      UDP    127.0.0.1:1039         *:*                      UDP    127.0.0.1:1044         *:*                      UDP    127.0.0.1:1077         *:*

aldo13 · Answer

Regarde ce lien , voir :https://grc.com/x/ne.dll?bh0bkyd2si il  existe toujours Dans ton netstat  le truc 990 me semble bizare , mais bon .

nico · Answer

le test donne de bons résultats...si qelqu'un d autre à un avis, je suis preneur...merci d avance et merci à ceux qui m ont aidé jusque là

nico · Answer

up

coste · Answer

Bonjour à vous tous, merçi de m'expliquer clairement comment je me débarasse de 123mania dès que j'ouvre internet. J'en ai marre !amicalement - sylvie coste - je ne suis pas une pro d'internet.

regis59 · Answer

salut costet cela depuis quand? suites a quelque chose?tu as un pare feu?logiciels? antivirus?vides temp+cookies dans option internet puis installe: Ad-Aware : http://telecharger.01net.com/windows/Internet/internet_utlitaire/fiches/11643.html Le patch en Français pour Ad-Aware : http://telecharger.01net.com/windows/Internet/internet_utlitaire/fiches/25543.html Spybot : http://telecharger.01net.com/windows/Internet/internet_utlitaire/fiches/26157.html essai ceci,met les a jour, scan et supprime tous ce qu il trouve... -------------------------------------------------------------------------- ------------------------------------------------------------------------- Si les problèmes persistes télécharge hijackthis ici: http://www.hijackthis.de/downloads/hijackthis_199.zip L'aide est ici: http://www.zebulon.fr/articles/HijackThis.php Dezippz le dans un dossier prévu a cet effet. Par exemple C:\hijackthis lancez le puis: clic sur "do a system scan and save logfile" faire un copier coller du log entier sur le forum. tiens moi au courant, si tu as besoin, n hesite pas...

doudou · Answer

salut tout le monde alors , mon pc met bps de tps por demarrer entre 7et 10 min , je sias que c un virus je suis entrain d'essayer avec secuser .. je ne connais pas encore le resultat .. j espere que ca va amrche .. sinon svp si vous pouvez m aider : ) merci bps

Virus... je sais pas ce que c'est... help :(

28 réponses

Votre réponse

Discussions similaires

Newsletters