Triangle rouge avec point d'exclamation!c koi

merlin -  
 beboune -
Bonjour,
Voila j'ai un petit probleme, depuis quelques jours un icone (triangle rouge avec point d'exclamation jaune) apparait ds ma barre des taches et clignote; aprfois il m'ouvre internet explorer et fait apparaitre une laerte du style "malware alert ect ect ...".
Je pense que c un spyware.. mais j'ai un peu plus de soucis a le virer que les autres; j'ai essayé ad aware et spybot en mode normal et sans echec g nettoyé la base de registre g scané avec kaspersky 6 (tout ca mis a jour bien sur) mais il revien a chaque demarrage...quelqu'un aurait til une idée??? merci d'avance
Configuration: Windows XP
Firefox 2.0.0.3

27 réponses

  • 1
  • 2
  1. merlin
     
    voila mon rapport HijackThis

    Logfile of HijackThis v1.99.1
    Scan saved at 07:53:11, on 02/04/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\Mediafour\MacDrive\MDDiskProtect.exe
    C:\Program Files\Fichiers communs\Mediafour\MACVNTFY.EXE
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\RocketDock\RocketDock.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\UberIcon\UberIcon Manager.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\YzShadow\YzShadow.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\eMule\emule.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe
    C:\Documents and Settings\jubb\Bureau\hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://lstard.stormcorp.net/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: VPNS System - {9FA1AA9E-7ECF-4f3b-AC23-7F09E01298E4} - C:\WINDOWS\iesettings.dll
    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [MDDiskProtect.exe] C:\Program Files\Mediafour\MacDrive\MDDiskProtect.exe
    O4 - HKLM\..\Run: [MediafourGettingStartedWithMacDrive6] "C:\Program Files\Mediafour\MacDrive\MacDrive.exe" /runonce
    O4 - HKLM\..\Run: [Mediafour Mac Volume Notifications] "C:\Program Files\Fichiers communs\Mediafour\MACVNTFY.EXE" /auto
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
    O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\UberIcon\UberIcon Manager.exe
    O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\YzShadow\YzShadow.exe
    O4 - Startup: Y'z Toolbar.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
    O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Program Files\Titan Poker\casino.exe
    O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Program Files\Titan Poker\casino.exe
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\Microsoft Office\Office12\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/telecharger.php?id=2&version=
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSN Messenger\msgrapp.8.0.0792.00.dll
    O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSN Messenger\msgrapp.8.0.0792.00.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\Skype4COM.dll
    O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
    O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
    O21 - SSODL: iesupport - {F9A3CE4B-9269-4E25-B3A3-F8ECF27CA0F8} - C:\WINDOWS\iesupport.dll
    O21 - SSODL: iedebug - {89304A23-6A7A-4772-B718-F9AD49F4833E} - C:\WINDOWS\iedebug.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    0
  2. Merlin
     
    Rapport fait à 22:13:28,70, 02/04/2007
    Executé à partir de C:\Documents and Settings\jubb\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» Process

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\Mediafour\MacDrive\MDDiskProtect.exe
    C:\Program Files\Fichiers communs\Mediafour\MACVNTFY.EXE
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\RocketDock\RocketDock.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\UberIcon\UberIcon Manager.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\YzShadow\YzShadow.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\eMule\emule.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\cmd.exe

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    Fichier hosts corrompu !

    # [MICROSOFT.COM]

    »»»»»»»»»»»»»»»»»»»»»»»» C:\

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\jubb

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\jubb\Application Data

    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\jubb\Favoris

    »»»»»»»»»»»»»»»»»»»»»»»» Bureau

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"=""

    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"=""

    »»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32-huy32

    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: Marvell Yukon 88E8053 PCI-E Gigabit Ethernet Controller - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 212.27.54.252
    DNS Server Search Order: 212.27.53.252

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{10A3C246-DD8D-481D-BAA3-8E0CA95FA33B}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{10A3C246-DD8D-481D-BAA3-8E0CA95FA33B}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{10A3C246-DD8D-481D-BAA3-8E0CA95FA33B}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

    »»»»»»»»»»»»»»»»»»»»»»»» Fin
    0
  3. salwa5 Messages postés 7552 Statut Contributeur 1 671
     
    re lance smitfraud choisi l'option 4 pour le mettre a jour

    ensuite

    ----------------------------------------------------------------------------
    Démarre en mode sans échec :
    Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
    Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
    Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
    (Si F8 ne marche pas utilise la touche F5).
    ----------------------------------------------------------------------------
    Relance le programme Smitfraud,
    Cette fois choisit l’option 2, répond oui a tous ;
    Sauvegarde le rapport, Redémarre en mode normal, copie/colle le rapport sauvegardé ici

    a+++
    0
  4. S!Ri Messages postés 932 Statut Contributeur sécurité 10
     
    Salut

    Tu peux uploader ce fichier :
    C:\WINDOWS\iesettings.dll

    à cette adresse: http://siri.urz.free.fr/upload/
    pour mettre le fix à jour.

    Merci
    a+
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Merlin
     
    SmitFraudFix v2.162

    Rapport fait à 23:01:23,09, 02/04/2007
    Executé à partir de C:\Documents and Settings\jubb\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode sans echec

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    127.0.0.1 localhost

    127.0.0.1 downloads.aaa1screensavers.com #[Bargin Buddy]
    127.0.0.1 china.dalexcars.com
    127.0.0.1 dl.aaascreensavers.com
    127.0.0.1 abcsearch.com
    127.0.0.1 admin.abcsearch.com
    127.0.0.1 www3.abcsearch.com #[Browseraid]
    127.0.0.1 www.abcsearch.com
    127.0.0.1 abc517.net #[Trojan.Mitglieder.H]
    127.0.0.1 absoluagency.com #[Trojan.StartPage.H]
    127.0.0.1 acestats.com
    127.0.0.1 www.acestats.com
    127.0.0.1 actualnames.com #[Parasite.ActualNames][Spyware.ActualNames]
    127.0.0.1 www.actualnames.com
    127.0.0.1 ad-up.com
    127.0.0.1 www.ad-up.com
    127.0.0.1 adatom.com
    127.0.0.1 aesp.adatom.com
    127.0.0.1 adbest.com
    127.0.0.1 www.adcipta.net #[W32/Malware]
    127.0.0.1 adserv.adbonus.com
    127.0.0.1 www.adbonus.com
    127.0.0.1 ad2.adcept.net
    127.0.0.1 ad3.adcept.net
    127.0.0.1 www.adcept.net
    127.0.0.1 adcomplete.com
    127.0.0.1 www.adcomplete.com
    127.0.0.1 www.adcopy.info
    127.0.0.1 ads.adcorps.com
    127.0.0.1 ads.addynamix.com
    127.0.0.1 pt.server1.adexit.com
    127.0.0.1 www.adexit.com
    127.0.0.1 www.ad4ever.com
    127.0.0.1 adhearus.com
    127.0.0.1 display2.adhearus.com
    127.0.0.1 ssl3.adhost.com
    127.0.0.1 www2.adhost.com
    127.0.0.1 www.addme.com
    127.0.0.1 www.adinfinity.com
    127.0.0.1 te.adlandpro.com
    127.0.0.1 classic.adlink.de
    127.0.0.1 regio.adlink.de
    127.0.0.1 west.adlink.de
    127.0.0.1 www.adminder.com
    127.0.0.1 adsfac.net
    127.0.0.1 www.adonweb.com
    127.0.0.1 www.adrelevance.com #[NetRatings]
    127.0.0.1 media.adrevolver.com
    127.0.0.1 adroar.com
    127.0.0.1 ads.adroar.com
    127.0.0.1 delta.adroar.com
    127.0.0.1 iads.adroar.com #[Adware.AdRoar][ADW_ADROAR.A]
    127.0.0.1 lists.adroar.com
    127.0.0.1 www.adroar.com
    127.0.0.1 ads.adsag.com
    127.0.0.1 di.adsag.com
    127.0.0.1 img.adsag.com
    127.0.0.1 adserv.com
    127.0.0.1 www.adserv.com
    127.0.0.1 ads.adtomi.com
    127.0.0.1 www.adtomi.com #[Adware.Adtomi]
    127.0.0.1 downldcl.adtoolsinc.com
    127.0.0.1 www.adtoolsinc.com
    127.0.0.1 www.adtrader.com
    127.0.0.1 www.adtraffic.net
    127.0.0.1 survey.advantageresearch.com
    127.0.0.1 ad.adver.com.tw
    127.0.0.1 ads.advertise.net
    127.0.0.1 advertisingvision.com #[Adware.Advision]
    127.0.0.1 www.advertisingvision.com
    127.0.0.1 adviva.com
    127.0.0.1 www.adviva.com
    127.0.0.1 ads.adviva.net
    127.0.0.1 adstats.adviva.net
    127.0.0.1 tracker.affistats.com #[msvrl.dll]
    127.0.0.1 www.affiliatefuel.com
    127.0.0.1 banners.affiliatefuel.com
    127.0.0.1 affiliatetarget.com
    127.0.0.1 www.affiliatetarget.com
    127.0.0.1 fcds.affiliatetracking.net
    127.0.0.1 our.affiliatetracking.net
    127.0.0.1 www.affiliatetracking.net
    127.0.0.1 www.affiliatetracking.com
    127.0.0.1 adserver.aim4media.com
    127.0.0.1 adtest.aim4media.com
    127.0.0.1 pops.aim4media.com
    127.0.0.1 www.aim4media.com
    127.0.0.1 crs.akamai.com
    127.0.0.1 soap.alexa.com #[Spyware.Alexa][Alexa Toolbar]
    127.0.0.1 traffic.alexa.com
    127.0.0.1 xsltcache.alexa.com
    127.0.0.1 www.alexa.com
    127.0.0.1 allcheapsolutions.com #[Backdoor-CIE]
    127.0.0.1 ads.as4x.tmcs.akadns.net #[Ticketmaster]
    127.0.0.1 bantam.ai.net
    127.0.0.1 fiona.ai.net
    127.0.0.1 ads.amazingmedia.com
    127.0.0.1 bohema.amillo.net #[Trojan.Mitglieder.H]
    127.0.0.1 adserver04.ancestry.com #[RealMedia]
    127.0.0.1 ads.antionline.com
    127.0.0.1 junior.apk.net
    127.0.0.1 banner.arttoday.com
    127.0.0.1 ads.aspalliance.com
    127.0.0.1 associmg.com #[amazon.com]
    127.0.0.1 armbender.com #[UCSearch.ucUCSearch][W32.Adclicker.F.Trojan]
    127.0.0.1 www.armbender.com #[UCSearch.ArmBender]
    127.0.0.1 audiogalaxy.com
    127.0.0.1 www.audiogalaxy.com #[Restricted Zone site]
    127.0.0.1 adserving.autotrader.com
    127.0.0.1 www.avatarresources.com #[Parasite.AutoStartup]
    127.0.0.1 www.avres.net
    127.0.0.1 www.aweber.com
    127.0.0.1 cploving.awmhost.net #[TrojanClicker.Win32.Lopin]
    127.0.0.1 bar.baidu.com #[Parasite.ClientMan]
    127.0.0.1 www.baltictop.com
    127.0.0.1 www.banner-mania.com
    127.0.0.1 www.bannerspace.com #[Restricted Zone site]
    127.0.0.1 www2.bannerspace.com
    127.0.0.1 www3.bannerspace.com
    127.0.0.1 www5.bannerspace.com
    127.0.0.1 www6.bannerspace.com
    127.0.0.1 www7.bannerspace.com
    127.0.0.1 bannerswap.com
    127.0.0.1 www.bannerswap.com
    127.0.0.1 www.bidclix.com
    127.0.0.1 bidclix.net
    127.0.0.1 www.bidclix.net
    127.0.0.1 bigtracker.com
    127.0.0.1 bighits.net #[Restricted Zone site]
    127.0.0.1 bigticker.bighits.net
    127.0.0.1 bounty.bighits.net
    127.0.0.1 www.bighits.net
    127.0.0.1 download.bigwebportal.com #[hotwebsearch.com]
    127.0.0.1 www.bigwebportal.com
    127.0.0.1 counter.bizland.com
    127.0.0.1 webads.bizservers.com
    127.0.0.1 www.black-hole.co.uk #[Restricted Zone site]
    127.0.0.1 www.blazehits.net #[gonnasearch.com]
    127.0.0.1 s7.blingblingcontent.com #[Easywebinstaller Control]
    127.0.0.1 ads.bmais.net #[bluemountain]
    127.0.0.1 bookedspace.com #[Parasite.BookedSpace]
    127.0.0.1 www.bookedspace.com #[Adware.Bookedspace]
    127.0.0.1 a.boom.ro
    127.0.0.1 s.boom.ro
    127.0.0.1 www1.boomerank.com
    127.0.0.1 boomerank.com
    127.0.0.1 citi.bridgetrack.com #[Tracking Service]
    127.0.0.1 rccl.bridgetrack.com
    127.0.0.1 config.broadcastpc.tv #[TROJ_RVP.E]
    127.0.0.1 report.broadcastpc.tv #[AdvWare.Broadcap.a]
    127.0.0.1 www.broadcastpc.tv #[Adware.Broadcastpc]
    127.0.0.1 www.browserplugin.com #[WebHlprObj Class]
    127.0.0.1 install.browsertoolbar.com #[Backdoor.Autoupder][BrowserToolbar]
    127.0.0.1 www2.browsertoolbar.com #[TROJ_SUA.A]
    127.0.0.1 www.browsertoolbar.com #[Parasite.BrowserToolbar]
    127.0.0.1 browserwise.com #[Parasite.Xupiter][Xupiter.BrowserWise]
    127.0.0.1 www.browserwise.com
    127.0.0.1 www.buildtraffic.com
    127.0.0.1 casino-on-net.com
    127.0.0.1 java2.casino-on-net.com
    127.0.0.1 www.casino-on-net.com
    127.0.0.1 casinojems.com
    127.0.0.1 www.casinojems.com
    127.0.0.1 cc-dt.com
    127.0.0.1 ads.cc-dt.com
    127.0.0.1 clickserve.cc-dt.com
    127.0.0.1 www.capital-systems.net #[Troj/Ovedil-B]
    127.0.0.1 www.care2.com #[TopMoxie]
    127.0.0.1 ads.cars.com
    127.0.0.1 www.cashforclicks.com
    127.0.0.1 www.cashpile.com
    127.0.0.1 ads.cdfreaks.com #[Ads.cdfreaks]
    127.0.0.1 mds.centrport.net
    127.0.0.1 c.clickaire.com #[CWS trojan downloads]
    127.0.0.1 classifieds1000.com
    127.0.0.1 www.classifieds1000.com
    127.0.0.1 clearfind.com
    127.0.0.1 www.clearfind.com #[Restricted Zone site]
    127.0.0.1 hop.clickbank.net #[Adware.Clickbank]
    127.0.0.1 zzz.clickbank.net
    127.0.0.1 clickedyclick.com
    127.0.0.1 www.clickexchange.ru
    127.0.0.1 click2boost.com
    127.0.0.1 secure.click2boost.com
    127.0.0.1 service.click2boost.com
    127.0.0.1 www.click2boost.com
    127.0.0.1 servedby.clickexperts.net
    127.0.0.1 www.clicks2you.com
    127.0.0.1 stats1.clicktracks.com
    127.0.0.1 www.is1.clixgalore.com
    127.0.0.1 www.clixgalore.com
    127.0.0.1 www1.click-fr.com
    127.0.0.1 www2.click-fr.com
    127.0.0.1 www3.click-fr.com
    127.0.0.1 www4.click-fr.com
    127.0.0.1 www.clickhouse.com
    127.0.0.1 www.clicks4u.com
    127.0.0.1 www.clipgenie.com
    127.0.0.1 comclick.com
    127.0.0.1 ct2.comclick.com
    127.0.0.1 fl01.ct2.comclick.com
    127.0.0.1 ihm01.ct2.comclick.com
    127.0.0.1 www.comclick.com #[Restricted Zone site]
    127.0.0.1 www.thecoolbar.com #[Softomate Toolbar][The Coolbar]
    127.0.0.1 www.compactbanner.com
    127.0.0.1 ads.console.net
    127.0.0.1 coolshader.com
    127.0.0.1 c.coolshader.com #[Win32.Harnig]
    127.0.0.1 www.coolshader.com
    127.0.0.1 counted.com
    127.0.0.1 bilbo.counted.com
    127.0.0.1 www.counted.com
    127.0.0.1 www.counterguide.com
    127.0.0.1 counter4u.de
    127.0.0.1 connectionzone.com
    127.0.0.1 count.casino-trade.com
    127.0.0.1 www.couponsandoffers.com #[Adware.TopMoxie]
    127.0.0.1 data.coremetrics.com
    127.0.0.1 twci.coremetrics.com
    127.0.0.1 us.cqcounter.com
    127.0.0.1 zz.cqcounter.com
    127.0.0.1 1us.cqcounter.com
    127.0.0.1 ads.crosswinds.net
    127.0.0.1 megabyte.crosswinds.net
    127.0.0.1 cyberbounty.com
    127.0.0.1 js.cybermonitor.com
    127.0.0.1 stat3.cybermonitor.com
    127.0.0.1 cytron.com #[DailyWinner][Cytron]
    127.0.0.1 www.cytron.com
    127.0.0.1 www.dash.com
    127.0.0.1 ads.date.com
    127.0.0.1 banner.date.com
    127.0.0.1 dbbsrv.com #[bserv.darkblue.com][Restricted Zone site]
    127.0.0.1 freestuff.com.19828.fb.dbbsrv.com #[roar.com]
    127.0.0.1 spyware.com.16871.fb.dbbsrv.com
    127.0.0.1 webads.com.18345.fb.dbbsrv.com
    127.0.0.1 www.deepcom.com #[TrojanDropper.Win32.Small.gt]
    127.0.0.1 collector.deepmetrix.com
    127.0.0.1 geo.deepmetrix.com
    127.0.0.1 www.deepmetrix.com #[Data Miner]
    127.0.0.1 ad.ads.dk
    127.0.0.1 tdkads.ads.dk
    127.0.0.1 didtheyreadit.com #[email tracker]
    127.0.0.1 www.didtheyreadit.com
    127.0.0.1 counter.digits.com
    127.0.0.1 www.divago.com #[Adware.Surfairy]
    127.0.0.1 www.dnscaching.net #[stickypops.com]
    127.0.0.1 www.domamil.cz #[Trojan.Beagooz]
    127.0.0.1 downloadalot.com
    127.0.0.1 get.downloadalot.com
    127.0.0.1 www.downloadalot.com #[Restricted Zone site]
    127.0.0.1 www.downseek.com #[DownSeek Search]
    127.0.0.1 dqmedia.net #[spam]
    127.0.0.1 drmx01.net #[spam]
    127.0.0.1 www.duenow.com
    127.0.0.1 gfx.dvlabs.com
    127.0.0.1 klipads.dvlabs.com
    127.0.0.1 e2give.com #[Adware-E2Give][Spyware.e2give]
    127.0.0.1 www.e2give.com
    127.0.0.1 www.e-bannerx.com
    127.0.0.1 adv1.eblocs.com
    127.0.0.1 adv2.eblocs.com #[Rogue/Suspect]
    127.0.0.1 www.easycounter.com
    127.0.0.1 banners.easydns.com
    127.0.0.1 banner.easyspace.com
    127.0.0.1 adserv1.ebates.com #[WebSavings]
    127.0.0.1 www.ebates.com #[Adware.MoeMoney]
    127.0.0.1 www.efinder.cc #[StartPage-DA]
    127.0.0.1 enhancemysearch.com #[xzoomy.com]
    127.0.0.1 www.enhancemysearch.com
    127.0.0.1 epeople.com
    127.0.0.1 errorpage404.com #[JS_TRAFFICHBAR.A]
    127.0.0.1 www.errorpage404.com #[Parasite.TinyBar]
    127.0.0.1 vipuk.escritorioactivo.com #[123Messenger Hijacker]
    127.0.0.1 www.escorcher.com #[bogus antivirus spyware]
    127.0.0.1 www.eshopads2.com
    127.0.0.1 perso.estat.com
    127.0.0.1 prof.estat.com
    127.0.0.1 www.estat.com #[Restricted Zone site]
    127.0.0.1 eu-adcenter.net
    127.0.0.1 thinknyc.eu-adcenter.net
    127.0.0.1 ugo.eu-adcenter.net #[evidence-eliminator.com]
    127.0.0.1 www.euroklik.nl #[EasyBar][InstallerX Class]
    127.0.0.1 engage.everyone.net
    127.0.0.1 static.everyone.net
    127.0.0.1 www.exchangead.com
    127.0.0.1 exitexchange.com
    127.0.0.1 count.exitexchange.com
    127.0.0.1 images.exitexchange.com
    127.0.0.1 www.exitexchange.com #[Restricted Zone site]
    127.0.0.1 www.exchangeexit.com #[Installer Class][Winupie]
    127.0.0.1 www.exittraffic.net
    127.0.0.1 ezcybersearch.com #[EZCyberSearch.Surebar]
    127.0.0.1 ads.ezcybersearch.com #[Adware.EZSearch.B]
    127.0.0.1 ezcybersearch.mail.everyone.net
    127.0.0.1 www.ezcybersearch.com #[Parasite.ezCyberSearch]
    127.0.0.1 www.evidence-eliminator.com
    127.0.0.1 ads.fairfax.com.au
    127.0.0.1 images.ads.fairfax.com.au
    127.0.0.1 redirect.fairfax.com.au
    127.0.0.1 campaigns.f2.com.au
    127.0.0.1 www.fast2net.com
    127.0.0.1 www.fastfind.org #[SubSearch][TROJ_STARTPAG.KF][Adware.Fastfind.B]
    127.0.0.1 fasttrack.nu
    127.0.0.1 www.fceboard.com #[Adware.EBoard]
    127.0.0.1 www.fightpopups.net #[Adware.MessStopper]
    127.0.0.1 adserver.filefront.com
    127.0.0.1 www.filemix.net #[Surf+]
    127.0.0.1 www.fineclicks.com
    127.0.0.1 firstname.com
    127.0.0.1 clicks.firstname.com
    127.0.0.1 www.fizzlewizzle.com #[Fizzle Wizzle Searchbar]
    127.0.0.1 flashtrack.net
    127.0.0.1 ads.flashtrack.net #[Adware.Flashtrack.B]
    127.0.0.1 coreg.flashtrack.net
    127.0.0.1 www.flashtrack.net #[Adware.FlashEnhancer][KB312429]
    127.0.0.1 flyinads.com
    127.0.0.1 www.flyinads.com
    127.0.0.1 ads.forbes.com
    127.0.0.1 klipmart.forbes.com
    127.0.0.1 www.ampira.com #[Fortunecity]
    127.0.0.1 ads.fortunecity.com
    127.0.0.1 ads.v3.com #[Fortunecity]
    127.0.0.1 www2.fortunecity.com
    127.0.0.1 ad.freefind.com
    127.0.0.1 www.freehistorycleaner.com #[Adware.Fapi][ADW_HISCLEAN.A]
    127.0.0.1 free-stats.com
    127.0.0.1 www.freewebsites.com
    127.0.0.1 ads.free-windows-games.com
    127.0.0.1 www.free-windows-games.com #[Parasite.GAMsys][GamHelper]
    127.0.0.1 pops.freeze.com #[[GamHelper]
    127.0.0.1 ads.gamespy.com
    127.0.0.1 adcontent.gamespy.com
    127.0.0.1 www.gebr-wachs.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
    127.0.0.1 gd.geobytes.com #[obtains users location]
    127.0.0.1 www.getsmart.com
    127.0.0.1 bp2.getredirect.com
    127.0.0.1 4.getredirect.com #[superlogy.com]
    127.0.0.1 www.getredirect.com
    127.0.0.1 getupdate.com
    127.0.0.1 dlx.getupdate.com #[AdvWare.ToolBar.VB.b]
    127.0.0.1 www.getupdate.com #[Adware.Getup]
    127.0.0.1 gigex.com
    127.0.0.1 media.gigex.com #[SpeedDelivery]
    127.0.0.1 oascentral.gigex.com #[RealMedia]
    127.0.0.1 www.gigex.com #[download Class]
    127.0.0.1 globesearch.com
    127.0.0.1 www.globesearch.com #[Restricted Zone site][CWS]
    127.0.0.1 banner.goldenpalace.com #[redirects]
    127.0.0.1 www.goldenwebawards.com #[server down?]
    127.0.0.1 goldstats.net
    127.0.0.1 www.goldstats.net
    127.0.0.1 adincl.gopher.com #[InfoSpace]
    127.0.0.1 ads.gorillanation.com #[Restricted Zone site]
    127.0.0.1 adserver.gorillanation.com
    127.0.0.1 gostats.com
    127.0.0.1 c1.gostats.com
    127.0.0.1 c2.gostats.com
    127.0.0.1 webcounter.goweb.de
    127.0.0.1 greatstartpage.com #[parasite downloads]
    127.0.0.1 www.greatstartpage.com
    127.0.0.1 grokster.com #[Restricted Zone site][P2P]
    127.0.0.1 dl.grokster.com
    127.0.0.1 www.grokster.com
    127.0.0.1 ads.guardian.co.uk
    127.0.0.1 ads.guardianunlimited.co.uk
    127.0.0.1 www.g-wizzads.net
    127.0.0.1 hamster.com #[apps5.oingo.com]
    127.0.0.1 ad0.haynet.com
    127.0.0.1 www.hitboss.com
    127.0.0.1 www.hit4hit.com
    127.0.0.1 ads.hitcents.com
    127.0.0.1 hithopper.com #[Adware.Hithopper]
    127.0.0.1 www.hithopper.com
    127.0.0.1 hitmodel.net
    127.0.0.1 hit-now.com
    127.0.0.1 loga.hit-parade.com
    127.0.0.1 hit-parade.com
    127.0.0.1 www.hitpointer.com
    127.0.0.1 hitslink.com
    127.0.0.1 counter.hitslink.com
    127.0.0.1 counter2.hitslink.com
    127.0.0.1 www2.hitslink.com
    127.0.0.1 www.hitslink.com #[Restricted Zone site]
    127.0.0.1 hitstats.net
    127.0.0.1 www.hiwire.com
    127.0.0.1 ads.home.net
    127.0.0.1 anna.homeftp.net #[W32.Linkbot.A]
    127.0.0.1 counters.honesty.com
    127.0.0.1 banners.hotlinks.net
    127.0.0.1 hotphrase.com
    127.0.0.1 www.hotphrase.com #[Restricted Zone site]
    127.0.0.1 hotsearch.com #[roar.com][Restricted Zone site]
    127.0.0.1 www.hotsearch.com
    127.0.0.1 hotsearchbar.com #[iiittt Class][SpiderSearch]
    127.0.0.1 www.hotsearchbar.com
    127.0.0.1 www.10s.com.br #[Trojan.Cargao]
    127.0.0.1 cgi.hotstat.nl
    127.0.0.1 viewstat.hotstat.nl
    127.0.0.1 hc2.humanclick.com
    127.0.0.1 www.humanclick.com #[Data Miner]
    127.0.0.1 www.hypertracker.com
    127.0.0.1 ads.iafrica.com
    127.0.0.1 ads.iboost.com
    127.0.0.1 www.i-clicks.net
    127.0.0.1 hits.icdirect.com
    127.0.0.1 hitctr01.icdirect.com
    127.0.0.1 image-catcher.com
    127.0.0.1 bar.iebar8.com #[Adware.Navihelper]
    127.0.0.1 stats.surfaid.ihost.com
    127.0.0.1 ads.imdb.com #[amazon.com]
    127.0.0.1 www.impregnable.net #[TrojanDownloader.Win32.VB.dw][Trojan.Win32.StartPage.kk]
    127.0.0.1 stats.indextools.com
    127.0.0.1 adserver.indieclick.com
    127.0.0.1 campaign.indieclick.com
    127.0.0.1 adcenter.in2.com
    127.0.0.1 ads.inet1.com
    127.0.0.1 ads7.inet1.com
    127.0.0.1 banners.inetfast.com
    127.0.0.1 ads.infospace.com
    127.0.0.1 bvads.infospace.com
    127.0.0.1 dpxml.infospace.com
    127.0.0.1 xads.infospace.com
    127.0.0.1 www.infospider.com
    127.0.0.1 ads.intellicast.com
    127.0.0.1 ads.intelihealth.com
    127.0.0.1 ads.intermezzia.com
    127.0.0.1 mjxads.internet.com
    127.0.0.1 indiads.com
    127.0.0.1 infostart.com
    127.0.0.1 popups.infostart.com
    127.0.0.1 www.intelli-tracker.com
    127.0.0.1 ads.ipowerweb.com
    127.0.0.1 www.ipstat.com
    127.0.0.1 istarthere.com #[Troj/IEStart-C]
    127.0.0.1 directory.istarthere.com
    127.0.0.1 moviesponsor.istarthere.com
    127.0.0.1 partners.istarthere.com
    127.0.0.1 www.istarthere.com #[VBS_IESTART.F]
    127.0.0.1 adcycle.isoftmarketing.com
    127.0.0.1 isurfplus.com
    127.0.0.1 www.isurfplus.com #[Adware.Surebar]
    127.0.0.1 www.itrafficstar.com #[Restricted Zone site]
    127.0.0.1 www.jcount.com
    127.0.0.1 affiliates.jeanharris.com
    127.0.0.1 popup.jeanharris.com
    127.0.0.1 jpedownload.joltid.com
    127.0.0.1 www.joltid.com #[Adware.P2PNetworking]
    127.0.0.1 www1.kliks.nl
    127.0.0.1 www2.kliks.nl
    127.0.0.1 www.kliks.nl
    127.0.0.1 kt3.kliptracker.com
    127.0.0.1 kt4.kliptracker.com
    127.0.0.1 www.kliptracker.com
    127.0.0.1 stats.klsoft.com
    127.0.0.1 www.kmindex.ru
    127.0.0.1 ad.leadcrunch.com
    127.0.0.1 ts1.lexmark.com
    127.0.0.1 www.linkcounter.com
    127.0.0.1 linkexchange.ru
    127.0.0.1 web.linkexchange.ru
    127.0.0.1 www.linkexchange.ru
    127.0.0.1 link4link.com
    127.0.0.1 plus.link4link.com
    127.0.0.1 www.links4trade.com
    127.0.0.1 escati.linkopp.net
    127.0.0.1 www.linkopp.net
    127.0.0.1 js.livehelper.com #[Restricted Zone site]
    127.0.0.1 newbrowse.livehelper.com
    127.0.0.1 liveperson.net
    127.0.0.1 server.iad.liveperson.net #[Data Miner]
    127.0.0.1 www.liveperson.com
    127.0.0.1 adserv.lwmn.net
    127.0.0.1 locators.com #[Adware.Locator]
    127.0.0.1 toolbar.locators.com #[Locators Toolbar]
    127.0.0.1 www.locators.com
    127.0.0.1 www.lords-of-havoc.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
    127.0.0.1 luckyhomepage.com #[search.targetwords.com\1stblaze.com]
    127.0.0.1 www.luckyhomepage.com #[Restricted Zone site]
    127.0.0.1 adverts.lzio.com
    127.0.0.1 newupdates.lzio.com
    127.0.0.1 search.lzio.com
    127.0.0.1 updates.lzio.com #[Downloader-LE][Adware.ZioCom]
    127.0.0.1 make-deal.com
    127.0.0.1 www.madoogali.com #[Madoogali]
    127.0.0.1 go.mailbits.com
    127.0.0.1 mair.net #[Realtracker]
    127.0.0.1 marnet.us #[Downloader-IU]
    127.0.0.1 image.masterstats.com
    127.0.0.1 link.masterstats.com
    127.0.0.1 ads.affiliates.match.com
    127.0.0.1 associmage.match.com
    127.0.0.1 adserver.matchcraft.com
    127.0.0.1 maybeyes.biz #[Trojan.Ducky]
    127.0.0.1 ads.mcafee.com
    127.0.0.1 directads.mcafee.com
    127.0.0.1 ads.mediaodyssey.com
    127.0.0.1 ads.mediaturf.net
    127.0.0.1 banner.meerhits.nl #[IEHIjacker.Meerhits.nl]
    127.0.0.1 pokpok.meerhits.nl
    127.0.0.1 exit.megago.com
    127.0.0.1 www.megago.com #[typo squatter]
    127.0.0.1 www.megaseek.net #[Restricted Zone site]
    127.0.0.1 pubs.mgn.net #[Grolier Network]
    127.0.0.1 www.mgshareware.com #[Adware Bundler]
    127.0.0.1 micorsoft.com
    127.0.0.1 www.micorsoft.com #[typo hijacker]
    127.0.0.1 www.mini-player.com #[5MOF Mini-Player]
    127.0.0.1 banner.missingkids.com
    127.0.0.1 ads.monster.com
    127.0.0.1 adserver.monster.com
    127.0.0.1 adserver.a.in.monster.com
    127.0.0.1 ads.monstermoving.com
    127.0.0.1 cookie.monster.com
    127.0.0.1 mp3today.net
    127.0.0.1 www.mp3yes.com #[C2Media\LOP]
    127.0.0.1 mpamexit.com
    127.0.0.1 www.messagetag.com #[Email tracker]
    127.0.0.1 msgtag.com
    127.0.0.1 img.msgtag.com #[Restricted Zone site]
    127.0.0.1 www.msgtag.com
    127.0.0.1 multi1.rmuk.co.uk #[RealMedia]
    127.0.0.1 mvtracker.com
    127.0.0.1 www.mvtracker.com
    127.0.0.1 mvr3d.net #[NavExcel\n-CASE]
    127.0.0.1 mvr.us #[Parasite.NavExcel]
    127.0.0.1 www.mvr.us
    127.0.0.1 www.myaffiliateprogram.com
    127.0.0.1 www.myarmory.com #[Spyware.Bazookabar]
    127.0.0.1 ads.mydailyhoroscope.net
    127.0.0.1 www.mydailyhoroscope.net #[Adware.Horoscope]
    127.0.0.1 www.myemessenger.com
    127.0.0.1 rm.myoc.com
    127.0.0.1 myhitlogger.com
    127.0.0.1 mypagefinder.com #[Parasite.MyPageFinder]
    127.0.0.1 hit.namimedia.com
    127.0.0.1 ads.nandomedia.com
    127.0.0.1 neededware.com #[Adware.NeededWare]
    127.0.0.1 www.neededware.com
    127.0.0.1 neo-toolbar.com #[InstControl Class][Trojan.NeoToolbar.Installer]
    127.0.0.1 www6.netbroadcaster.com
    127.0.0.1 code.netbreak.com.au
    127.0.0.1 www.netflip.com
    127.0.0.1 money2.netfirms.com #[The Money Toolbar]
    127.0.0.1 partner.netmechanic.com
    127.0.0.1 tracker.netmechanic.com
    127.0.0.1 counter.netmore.net
    127.0.0.1 www.netpoll.nl
    127.0.0.1 servedby.netshelter.net
    127.0.0.1 ads.netsol.com
    127.0.0.1 www.netsearch.info
    127.0.0.1 ads.newsint.co.uk
    127.0.0.1 adq.nextag.com
    127.0.0.1 newiframe.biz #[TROJ_DELF.DS]
    127.0.0.1 www.newiframe.biz
    127.0.0.1 web1.noadware.net
    127.0.0.1 www.noadware.net #[SCAM.Enigma.NoAdware]
    127.0.0.1 nowbox.com
    127.0.0.1 www.nowbox.com #[Parasite.NowBox]
    127.0.0.1 mediatickets.nubela.net
    127.0.0.1 www.nubela.net
    127.0.0.1 nzads.net.nz
    127.0.0.1 okcounter.com
    127.0.0.1 www.okww.net #[Trojan.StartPage.C]
    127.0.0.1 stat.onestat.com
    127.0.0.1 www.onestat.com
    127.0.0.1 one.ru
    127.0.0.1 cnt.one.ru
    127.0.0.1 stats0.one.ru
    127.0.0.1 stats1.one.ru
    127.0.0.1 stats2.one.ru
    127.0.0.1 www.oneandonlynetwork.com #[Ticketmaster]
    127.0.0.1 server1.opentracker.net
    127.0.0.1 www.opinionlab.com
    127.0.0.1 ccc00.opinionlab.com
    127.0.0.1 rate.opinionlab.com
    127.0.0.1 banner.orb.net
    127.0.0.1 www.originalicons.com #[F1 Organizer Class]
    127.0.0.1 geoads.osdn.com
    127.0.0.1 tg-images.osdn.com
    127.0.0.1 otx5.otxresearch.com
    127.0.0.1 otx.ifilm.com #[OTXMedia.dll]
    127.0.0.1 survey.otxresearch.com #[TrojanDownloader.OTXloader.A]
    127.0.0.1 www.otxresearch.com #[OTXMovie Class]
    127.0.0.1 adpopper.outblaze.com #[bargain-buddy.net]
    127.0.0.1 www.p3marketing.com #[Zapspot]
    127.0.0.1 click.payserve.com
    127.0.0.1 www.pc-test.net
    127.0.0.1 ad1.peel.com
    127.0.0.1 ad3.peel.com
    127.0.0.1 ads.peel.com
    127.0.0.1 ad4.peel.com
    127.0.0.1 ads5.peel.com
    127.0.0.1 www.peel.com
    127.0.0.1 www.peel.net
    127.0.0.1 ads.pennyweb.com #[addynamix.com]
    127.0.0.1 banners.pennyweb.com
    127.0.0.1 www.peruvianmarket.com #[Trojan.Beagooz.D][server down?]
    127.0.0.1 ads.photosight.ru
    127.0.0.1 phpadsnew.com
    127.0.0.1 www.phpadsnew.com
    127.0.0.1 ads2.playnet.com
    127.0.0.1 popfind.net #[Adware.Ddpop]
    127.0.0.1 www.popupads.com
    127.0.0.1 www.popupad.net
    127.0.0.1 popupblockade.com #[Parasite.Httper]
    127.0.0.1 www.popupblockade.com
    127.0.0.1 popupmoney.com #[Restricted Zone site]
    127.0.0.1 server01.popupmoney.com
    127.0.0.1 www.popupmoney.com
    127.0.0.1 popadstop.com #[Adware.PopAdStop]
    127.0.0.1 www.popadstop.com
    127.0.0.1 www.popunder.info #[TROJ_CHECKIN.B]
    127.0.0.1 www.popupswappers.com
    127.0.0.1 ad.popupswappers.com
    127.0.0.1 www.popuptop.com
    127.0.0.1 www2.portdetective.com
    127.0.0.1 www.positivebeats.com #[C2Media\LOP]
    127.0.0.1 x0x0l.pp.ru #[BKDR_CCT.A]
    127.0.0.1 www.praize.com #[Adware.Praize]
    127.0.0.1 1.primaryads.com
    127.0.0.1 www.privacyoutpost.com #[Troj/Regldr-A]
    127.0.0.1 www.prtracker.com
    127.0.0.1 www.profitzone.com #[ProfitZONE Adbar]
    127.0.0.1 prolivation.com #[Restricted Zone site]
    127.0.0.1 www.prolivation.com
    127.0.0.1 ads.pro-market.net
    127.0.0.1 www.promo.com.au
    127.0.0.1 www.prutect.com #[Spyware.e2give][Win32.Prutec.A]
    127.0.0.1 www.pstopper.com
    127.0.0.1 ad.sma.punto.net
    127.0.0.1 sma.punto.net
    127.0.0.1 www.pureseeker.com #[C2Media\LOP]
    127.0.0.1 www.pwallet.com #[Restricted Zone site]
    127.0.0.1 rads01.quadrogram.com #[Adware.Quadro][Memwatcher.B][TROJ_PEPER.A]
    127.0.0.1 adserv.quality-channel.de
    127.0.0.1 www.quarterserver.de
    127.0.0.1 questionmarket.com
    127.0.0.1 amch.questionmarket.com
    127.0.0.1 ch.questionmarket.com
    127.0.0.1 survey.questionmarket.com
    127.0.0.1 www.questionmarket.com
    127.0.0.1 download.quickflicks.com #[Parasite.SVAPlayer]
    127.0.0.1 www.qq886.com #[Backdoor.Semes]
    127.0.0.1 ramgo.com #[Restricted Zone site]
    127.0.0.1 www.ramgo.com #[Win32.Startpage.B]
    127.0.0.1 www.autoraskrutka.ru #[Spyware.Acext]
    127.0.0.1 www.raskrutim.ru #[Spyware.Acext]
    127.0.0.1 www.realclicks.com
    127.0.0.1 www.relmaxtop.com
    127.0.0.1 banner.relcom.ru
    127.0.0.1 adservice.recon-networks.com
    127.0.0.1 rightmedia.net
    127.0.0.1 rightstats.com
    127.0.0.1 www.rightstats.com
    127.0.0.1 m.rmbclick.com
    127.0.0.1 www.rgs-rostock.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
    127.0.0.1 track.roiservice.com
    127.0.0.1 ad.ro2cn.com #[Adware.Ro2cn]
    127.0.0.1 www.sandboxer.com #[Adware.Quadro][memorywatcher.com][Memwatcher.B]
    127.0.0.1 www.savehits.com
    127.0.0.1 st.sageanalyst.net
    127.0.0.1 scorpionsearch.com #[W32.Adclicker.C.Trojan]
    127.0.0.1 www.scorpionsearch.com #[x10.com][Trojan.Clicker.NetBuie a-b]
    127.0.0.1 adsremote.scripps.com
    127.0.0.1 te.scripps.com
    127.0.0.1 counter.search.bg
    127.0.0.1 searchalot.com
    127.0.0.1 cards.searchalot.com
    127.0.0.1 mail.searchalot.com
    127.0.0.1 search.searchalot.com
    127.0.0.1 web.searchalot.com
    127.0.0.1 www.searchalot.com #[Adware-Tronix]
    127.0.0.1 searchandclick.com
    127.0.0.1 search.searchandclick.com
    127.0.0.1 www.searchandclick.com #[Browseraid][SearchAndClick]
    127.0.0.1 searchby.net
    127.0.0.1 www.searchby.net #[Ultimate Popup Killer]
    127.0.0.1 searchfst.com #[SFUtility Class][keywordsinc.com]
    127.0.0.1 www.searchfst.com
    127.0.0.1 www.searchgauge.com
    127.0.0.1 www.search-control.com #[TrojanDropper.Win32.Small.ig]
    127.0.0.1 search-itnow.com #[Parasite.AdultLinks]
    127.0.0.1 www.search-itnow.com
    127.0.0.1 www.searchmachine.com
    127.0.0.1 www.searchmagnifier.com
    127.0.0.1 www.searchrelevancy.com
    127.0.0.1 www.searchresult.net #[Parasite.IgetNet]
    127.0.0.1 searchseekfind.com #[Adware.SearchSeekFind]
    127.0.0.1 www.searchseekfind.com
    127.0.0.1 browser.secondpower.com
    127.0.0.1 download.secondpower.com
    127.0.0.1 www1.secondpower.com
    127.0.0.1 www3.secondpower.com #[KB320159]
    127.0.0.1 www.secondpower.com
    127.0.0.1 adserver.securityfocus.com #[RealMedia]
    127.0.0.1 www.selfsurveys.com
    127.0.0.1 www.seehits.com
    127.0.0.1 www.sendtraffic.com
    127.0.0.1 sesso.com
    127.0.0.1 www.sesso.com #[VBS.Biscuit.A@mm]
    127.0.0.1 ds.serving-sys.com
    127.0.0.1 quasar.sitegauge.com
    127.0.0.1 tracker.sitescout.com
    127.0.0.1 advertpro.sitepoint.com
    127.0.0.1 www.sitestatslive.com
    127.0.0.1 www.sitetracking.info #[Naughty Pops]
    127.0.0.1 www.shadowcrew.com #[spam]
    127.0.0.1 adserver.sharewareonline.com #[nictechnetworks.com]
    127.0.0.1 www.shockcounter.com
    127.0.0.1 shopathomeselect.com #[Parasite.ShopAtHomeSelect]
    127.0.0.1 download1.shopathomeselect.com #[ADW_SAHAGENT.A]
    127.0.0.1 downloads.shopathomeselect.com
    127.0.0.1 www.shopathomeselect.com #[Adware.SAHAgent]
    127.0.0.1 skeech.com
    127.0.0.1 www.skeech.com #[Restricted Zone site]
    127.0.0.1 smart2com.net #[Trojan.Autoproxy]
    127.0.0.1 smart-browser.com
    127.0.0.1 update.smart-browser.com #[Parasite.SmartBrowser]
    127.0.0.1 www.smart-browser.com
    127.0.0.1 smartclicks.net
    127.0.0.1 www.smartclicks.net
    127.0.0.1 smarter.com #[Restricted Zone site]
    127.0.0.1 sidebar.smarter.com
    127.0.0.1 www.smarter.com
    127.0.0.1 ads.smni.com
    127.0.0.1 static.smni.com
    127.0.0.1 www.sonyasys.com #[Downloader.Botten]
    127.0.0.1 www1.spaex.com #[searchboss.com]
    127.0.0.1 www.specialoffersnetworks.com
    127.0.0.1 www.spedia.net #[SpediaBar]
    127.0.0.1 www.spyarsenal.com #[Spyware.DesktopSpy][Spyware.FamilyKeylog]
    127.0.0.1 spyferret.com #[OnlinePcFix.SpyFerret]
    127.0.0.1 www.spyferret.com
    127.0.0.1 spyware.com #[roar.com]
    127.0.0.1 www.ssppyy.com #[Spyware.Ssppyy]
    127.0.0.1 www.s-tracking.com
    127.0.0.1 adsintl.starwave.com
    127.0.0.1 c1.statcounter.com
    127.0.0.1 c2.statcounter.com
    127.0.0.1 c3.statcounter.com
    127.0.0.1 www.statcounter.com
    127.0.0.1 js.statistici.ro
    127.0.0.1 log.statistici.ro
    127.0.0.1 s.statistici.ro
    127.0.0.1 www.statomatic.com
    127.0.0.1 reg.stats4all.com
    127.0.0.1 stats4you.com
    127.0.0.1 www.stats4you.com
    127.0.0.1 ctgbn.stellaremperor.com #[Backdoor.Alets]
    127.0.0.1 www.stickypops.com
    127.0.0.1 clix.superclix.de
    127.0.0.1 www.superlogy.com #[AdvWare.ToolBar.VB.b]
    127.0.0.1 sqwire.com #[Adware.Sqwire][Xupiter.Sqwire]
    127.0.0.1 www.sqwire.com #[Parasite.Xupiter][Adware-PornKings]
    127.0.0.1 www.supaseek.com #[Spyware.Supaseek]
    127.0.0.1 rd1.surfernetwork.com #[SurferNETWORK Plugin]
    127.0.0.1 www.surfernetwork.com
    127.0.0.1 surfsidekick.com
    127.0.0.1 dl.surfsidekick.com
    127.0.0.1 www.surfsidekick.com #[Adware.SurfSideKick]
    127.0.0.1 www2.surveyfocus.com
    127.0.0.1 www.surveynetworks.com
    127.0.0.1 www.surveysite.com
    127.0.0.1 www2.survey-poll.com #[microsoft]
    127.0.0.1 swift-look.com #[phishing exploit]
    127.0.0.1 www.symantic.com #[Typo Squatter]
    127.0.0.1 adpick.switchboard.com
    127.0.0.1 adtag.sympatico.ca
    127.0.0.1 www.syspage.com #[pop-up scam]
    127.0.0.1 ad.uk.tangozebra.com
    127.0.0.1 targetsearch.info #[Trojan.StartPage.H]
    127.0.0.1 adult.targetsearch.info
    127.0.0.1 go.targetsearch.info
    127.0.0.1 tat-neftbank.ru #[Backdoor.Berbew.H]
    127.0.0.1 www.tech-marketresearch.com
    127.0.0.1 www.textads.biz
    127.0.0.1 a.tfag.de
    127.0.0.1 ak.tfag.de
    127.0.0.1 theaffiliateprogram.com
    127.0.0.1 myaffiliateprogram.com
    127.0.0.1 www.the-counter.net
    127.0.0.1 adbot.theonion.com
    127.0.0.1 www.thepokerclub.com #[SecurityRisk.ClubPoker]
    127.0.0.1 thesearchmall.com #[Adware.SearchMall]
    127.0.0.1 www.thesearchmall.com
    127.0.0.1 tnc4u.com #[Parasite.DownloadPlus]
    127.0.0.1 new.tnc4u.com
    127.0.0.1 www.tnc4u.com #[Adware.DownloadPlus]
    127.0.0.1 www.toilet.com
    127.0.0.1 ad.tomshardware.com
    127.0.0.1 tooncomics.com #[IEDLL.ToonComics][here4search.com]
    127.0.0.1 www.tooncomics.com #[Downloader.Tooncom][CWS.Aff.Tooncomics]
    127.0.0.1 log.trafic.ro
    127.0.0.1 storage.trafic.ro
    127.0.0.1 tool4ame.com #[TROJ_GOLID.A][Adware.IAGold]
    127.0.0.1 www.toolshack.com
    127.0.0.1 ads.toplayerserver.com
    127.0.0.1 www1.toplayerserver.com
    127.0.0.1 www.toplayerserver.com
    127.0.0.1 toprebates.com #[webrebates]
    127.0.0.1 www.toprebates.com
    127.0.0.1 stat.toprefsys.com
    127.0.0.1 www.top-search.com #[Adware-SSF.dr]
    127.0.0.1 ad.topstat.com
    127.0.0.1 nl.topstat.com #[Restricted Zone site]
    127.0.0.1 s26.topstat.com
    127.0.0.1 xl.topstat.com
    127.0.0.1 ads.track-star.com
    127.0.0.1 adserver.track-star.com
    127.0.0.1 geo2.track-star.com
    127.0.0.1 www.track-star.com
    127.0.0.1 tradeexit.com
    127.0.0.1 www.tradeexit.com #[Parasite.Winupie]
    127.0.0.1 www.trafficbeamer.nl
    127.0.0.1 trafficg.com #[Restricted Zone site]
    127.0.0.1 www.trafficg.com
    127.0.0.1 ad.trafficmp.com
    127.0.0.1 images.trafficmp.com
    127.0.0.1 t.trafficmp.com
    127.0.0.1 www.trafficflame.com
    127.0.0.1 trafficfile.com
    127.0.0.1 www.trafficfile.com
    127.0.0.1 trackyourstats.com
    127.0.0.1 trafficmarketplace.com
    127.0.0.1 get.trafficmultiplier.com
    127.0.0.1 go.trafficmultiplier.com
    127.0.0.1 goto.trafficmultiplier.com
    127.0.0.1 a.tribalfusion.com
    127.0.0.1 cdn1.tribalfusion.com
    127.0.0.1 m.tribalfusion.com
    127.0.0.1 tribalfusion.speedera.net
    127.0.0.1 ads.tucows.com
    127.0.0.1 counts.tucows.com
    127.0.0.1 google.tucows.com
    127.0.0.1 www.turbomemorycharger.com #[Adware.Fapi]
    127.0.0.1 ads.ucomics.com
    127.0.0.1 image.ugo.com
    127.0.0.1 mediamgr.ugo.com
    127.0.0.1 www.ukbanners.com
    127.0.0.1 ultimatecounter.com
    127.0.0.1 www.ultimatecounter.com
    127.0.0.1 www.ultimatepopupkiller.com #[searchby.net]
    127.0.0.1 www.ultraload.net #[MHTMLRedir.Exploit]
    127.0.0.1 adcontroller.unicast.com
    127.0.0.1 ads.unlimitedbanners.com
    127.0.0.1 ads1.updated.com
    127.0.0.1 www.updatenow.org #[Messenger Pop-up]
    127.0.0.1 www.upgradenow.org
    127.0.0.1 www.upp2ono41xi9rman2.com #[TrojanDropper.Small.LG]
    127.0.0.1 url.biz.ua #[Download.Ject.B]
    127.0.0.1 config.url404.com #[Parasite.Httper]
    127.0.0.1 urlblaze.com #[Adware.TurboDownload]
    127.0.0.1 www.urlblaze.com #[Adware Bundler]
    127.0.0.1 www.urlblaze.net #[IEDriver][ADW_RULEDOR.C]
    127.0.0.1 usachoice.net
    127.0.0.1 ads.valuead.com #[Restricted Zone site]
    127.0.0.1 adnetintads.valuead.com
    127.0.0.1 banners.valuead.com
    127.0.0.1 cs.valuead.com
    127.0.0.1 oin.valuead.com #[outerinfo.com]
    127.0.0.1 servedby.valuead.com
    127.0.0.1 ad.valuehost.ru
    127.0.0.1 image.versiontracker.com
    127.0.0.1 spinbox.versiontracker.com
    127.0.0.1 ads.vesperexchange.com
    127.0.0.1 www.vesperexchange.com
    127.0.0.1 cinnam.vibrahost.com #[PWSteal.Revcuss.C][Win32.Revcuss.C]
    127.0.0.1 vivi.vibrahost.com #[PWSteal.Revcuss.A]
    127.0.0.1 dns2010.vicp.net #[Backdoor.Tumag]
    127.0.0.1 uygurman.vicp.net #[Trojan.Riler][Troj/Riler-B]
    127.0.0.1 oas.villagevoice.com
    127.0.0.1 www.vikord.com #[Download.Ject.C]
    127.0.0.1 visit-link.com
    127.0.0.1 www.voonda.com #[Spyware.TAFbar]
    127.0.0.1 generic.vpptechnologies.com
    127.0.0.1 images2.vpptechnologies.com
    127.0.0.1 main.vpptechnologies.com
    127.0.0.1 msxml.vpptechnologies.com
    127.0.0.1 static.vpptechnologies.com #[hotsearchbar.com]
    127.0.0.1 xml.vpptechnologies.com #[BlazeFind]
    127.0.0.1 www.vstats.net
    127.0.0.1 ads.vnuemedia.com
    127.0.0.1 sevenc.vze.com #[VBS.Powcox@mm]
    127.0.0.1 www.w3exit.com
    127.0.0.1 ng3.ads.warnerbros.com
    127.0.0.1 wazam.com
    127.0.0.1 www.wazam.com #[Parasite.Wazam]
    127.0.0.1 wcft.net #[Parasite.LinkReplacer]
    127.0.0.1 www.wcft.net
    127.0.0.1 ads.weather.com
    127.0.0.1 ads.webattack.com
    127.0.0.1 webcounter.com
    127.0.0.1 www.webcounter.com
    127.0.0.1 ads.webhosting.info
    127.0.0.1 www.weblink.ru #[server down?]
    127.0.0.1 adv.webmd.com
    127.0.0.1 webhits.de
    127.0.0.1 banners.webmasterplan.com
    127.0.0.1 stat.webmedia.pl
    127.0.0.1 bannervip.web1000.com
    127.0.0.1 ads.webads360.com
    127.0.0.1 clickcash.webpower.com
    127.0.0.1 orders.webpower.com
    127.0.0.1 img.webring.com
    127.0.0.1 img1.webring.com
    127.0.0.1 ads.webshots.com
    127.0.0.1 websponsors.com
    127.0.0.1 a.websponsors.com
    127.0.0.1 ads.websponsors.com
    127.0.0.1 g.websponsors.com
    127.0.0.1 www.websponsors.com
    127.0.0.1 www.webstars2000.com
    127.0.0.1 hits.webstat.com
    127.0.0.1 www.wenksdisdkjeilsow.com #[Parasite.AutoStartup][Download.Trojan]
    127.0.0.1 wetrack.it
    127.0.0.1 st.wetrack.it
    127.0.0.1 www.wgutv.com #[Adware.BuddyLinks]
    127.0.0.1 partner1.whatsfind.com
    127.0.0.1 www.whatsfind.com #[HTML_STARTPAGE.C]
    127.0.0.1 www.win-fix.com #[Rogue/Suspect]
    127.0.0.1 window1.com
    127.0.0.1 ads.winhelp2002.com
    127.0.0.1 ads.winsite.com
    127.0.0.1 winstream.com #[Parasite.Searchex]
    127.0.0.1 www.winstream.com
    127.0.0.1 clicktrack.wnu.com
    127.0.0.1 www.wowweb.net #[Adware.WWWBar]
    127.0.0.1 www.wurldmedia.com #[Adware.Wurldmedia][WurldMedia][KB321923]
    127.0.0.1 x0x.biz
    127.0.0.1 www.x0x.biz #[Backdoor.Berbew.D]
    127.0.0.1 xtra.co.nz
    127.0.0.1 nedstats.xs4all.nl
    127.0.0.1 hit1.xstats.com
    127.0.0.1 view1.xstats.com
    127.0.0.1 ads.xtra.co.nz
    127.0.0.1 bs.yandex.ru
    127.0.0.1 counter.yadro.ru
    127.0.0.1 crsky2004.yeah.net #[Backdoor.Singu.B]
    127.0.0.1 yourspecialoffers.com #[FavoriteMan]
    127.0.0.1 www.yourspecialoffers.com
    127.0.0.1 ysearchus.com #[Parasite.TinyBar]
    127.0.0.1 www.ysearchus.com
    127.0.0.1 zuvio.com #[UCSearch.ucUCSearch]
    127.0.0.1 www.zuvio.com #[Adware.OpenSite][OpenSite]
    127.0.0.1 bannerads.zwire.com
    127.0.0.1 www.0stats.com
    127.0.0.1 cc.1asphost.com #[Trojan.Bansap]
    127.0.0.1 www.123counts.com #[hitslink.com]
    127.0.0.1 www.123mania.com #[SrchHook Class][Parasite.123Mania]
    127.0.0.1 123stat.com
    127.0.0.1 1234.2bro.com #[Adware.Satbo]
    127.0.0.1 www.241hits.com
    127.0.0.1 up.isp.2ch.net #[Trojan.Upchan]
    127.0.0.1 www.321search.com #[SearchAssistant.dll]
    127.0.0.1 ct.360i.com
    127.0.0.1 www.ff.iij4u.or.jp #[Trojan.Upchan]
    127.0.0.1 download.35mb.com #[impregnable.net]
    127.0.0.1 www.35mb.com #[download_35mb_com.applet]
    127.0.0.1 1000stars.ru
    127.0.0.1 xxxwwwjjjhd.20forfree.com #[W32.Autex.Worm]
    127.0.0.1 www.xxxwwwjjjhd.20forfree.com
    127.0.0.1 ad.37.com
    127.0.0.1 2jm.com
    127.0.0.1 7adpower.com
    127.0.0.1 www.7adpower.com #[Svezia.Dialer][VacPro.UserControl1]
    127.0.0.1 7am.com
    127.0.0.1 www.777search.com #[LOP]
    127.0.0.1 ad2.163.com
    127.0.0.1 adclient.163.com
    127.0.0.1 popme.163.com
    127.0.0.1 smtp.163.com #[Trojan.PSW.Ajim_bbs]
    127.0.0.1 ajim.delphibbs.com #[Trojan.PSW.Ajim_bbs]
    127.0.0.1 14713804A.l2m.net #[LiveTechnology]
    127.0.0.1 banner.50megs.com
    127.0.0.1 guannan.3322.net #[Restricted Zone site]
    127.0.0.1 www.fan8.com
    127.0.0.1 banners.dot.tk
    127.0.0.1 topsites.us #[Parasite.eStart]
    127.0.0.1 0-ol1oiz-xolxii1-oxli10ozl1l1-o-l-11-iizxp-l-0o-oll11iz0oil-ol.com
    127.0.0.1 www.123banners.com
    127.0.0.1 ftp.123banners.com
    127.0.0.1 123go.com
    127.0.0.1 ns1.123go.net
    127.0.0.1 n-case.com
    127.0.0.1 www.n-case.com
    127.0.0.1 ads.180solutions.com
    127.0.0.1 ax.180solutions.com #[180SAInstaller Class]
    127.0.0.1 bis.180solutions.com #[nCaseInstaller Class]
    127.0.0.1 bisads.180solutions.com
    127.0.0.1 downloads.180solutions.com
    127.0.0.1 installs.180solutions.com
    127.0.0.1 ping.180solutions.com
    127.0.0.1 tv.180solutions.com
    127.0.0.1 www.180solutions.com #[Parasite.nCase]
    127.0.0.1 www.180searchassistant.com #[Adware.180Search]
    127.0.0.1 www.surfassistant.com #[Adware.SurfAssistant]
    127.0.0.1 downloads.zango.com
    127.0.0.1 games.zango.com
    127.0.0.1 infinity.zango.com #[ZangoInstaller Class]
    127.0.0.1 messenger.zango.com
    127.0.0.1 showtimes.zango.com
    127.0.0.1 www.zango.com
    127.0.0.1 www.zangomessenger.com
    127.0.0.1 www.zangoshowtimes.com
    127.0.0.1 address.3721.com
    127.0.0.1 agent.3721.com
    127.0.0.1 assistant.3721.com
    127.0.0.1 cns.3721.com
    127.0.0.1 cnsmin.3721.com
    127.0.0.1 corp.3721.com
    127.0.0.1 dir.3721.com
    127.0.0.1 download.3721.com
    127.0.0.1 express.3721.com
    127.0.0.1 img.3721.com
    127.0.0.1 magic.3721.com
    127.0.0.1 mark.3721.com
    127.0.0.1 meta.3721.com
    127.0.0.1 msearch.3721.com
    127.0.0.1 sbox.3721.com
    127.0.0.1 shanghai.3721.com
    127.0.0.1 sina.3721.com
    127.0.0.1 user.3721.com
    127.0.0.1 wap.3721.com
    127.0.0.1 www.3721.com #[Adware.Chinet][ADW_CNSMIN.A]
    127.0.0.1 yahoo.3721.com
    127.0.0.1 3721.com
    127.0.0.1 download.feiyang.com
    127.0.0.1 adtracker.411web.com
    127.0.0.1 hits.411web.com
    127.0.0.1 overture.411web.com
    127.0.0.1 static.411web.com
    127.0.0.1 xml.411web.com
    127.0.0.1 search.letssearch.com
    127.0.0.1 search2.letssearch.com
    127.0.0.1 www.letssearch.com #[BrowserAid.LetsSearch]
    127.0.0.1 7search.com #[Parasite.7FaSSt Search]
    127.0.0.1 www.7search.com
    127.0.0.1 fstrack.7search.com
    127.0.0.1 impression.7search.com
    127.0.0.1 img.7meta.com
    127.0.0.1 www.7metasearch.com
    127.0.0.1 bannerx.adtactics.com
    127.0.0.1 adtactics.com
    127.0.0.1 www.adtactics.com
    127.0.0.1 ajokeaday.com
    127.0.0.1 bannersxchange.com
    127.0.0.1 img.bannersxchange.com
    127.0.0.1 www.linkstoyou.com
    127.0.0.1 www.payperranking.com
    127.0.0.1 www.pay-per-search.com
    127.0.0.1 paypertext.com
    127.0.0.1 predictivesearch.com
    127.0.0.1 tracking.roispy.com
    127.0.0.1 www.roispy.com
    127.0.0.1 tracking.spiderbait.com
    127.0.0.1 www.spiderbait.com
    127.0.0.1 advertisingagent.com
    127.0.0.1 clicks.about.com
    127.0.0.1 f.about.com
    127.0.0.1 home.about.com
    127.0.0.1 js.get.about.com
    127.0.0.1 images.about.com
    127.0.0.1 lunafetch.about.com
    127.0.0.1 pixel3.about.com
    127.0.0.1 sprinks-clicks.about.com
    127.0.0.1 statistics.s5.com
    127.0.0.1 ad.aboutwebservices.com
    127.0.0.1 abroadsoftware.com #[EzSearchBar]
    127.0.0.1 www.exits.ro
    127.0.0.1 superwebsearch.com #[Parasite.ILookup][Adware.ILookup]
    127.0.0.1 www.superwebsearch.com
    127.0.0.1 adops.adbureau.net
    127.0.0.1 etype.adbureau.net
    127.0.0.1 granada.adbureau.net
    127.0.0.1 www.adbureau.net
    127.0.0.1 accipiter.speedera.net
    127.0.0.1 ad-blaster.com
    127.0.0.1 www.ad-blaster.com
    127.0.0.1 promote4profit.com
    127.0.0.1 www.promote4profit.com
    127.0.0.1 addfreestats.com
    127.0.0.1 top.addfreestats.com
    127.0.0.1 www.addfreestats.com
    127.0.0.1 www.3dstats.com
    127.0.0.1 www1.addfreestats.com
    127.0.0.1 www2.addfreestats.com
    127.0.0.1 www3.addfreestats.com
    127.0.0.1 adlogix.com #[InPop.InControl][IEEnhancer]
    127.0.0.1 lasagne.adlogix.com
    127.0.0.1 publisher.adlogix.com
    127.0.0.1 traffic.adlogix.com
    127.0.0.1 trafficsource.adlogix.com
    127.0.0.1 www.adlogix.com
    127.0.0.1 getpopped.com
    127.0.0.1 www.getpopped.com
    127.0.0.1 hitgo.com #[IPU][InPop.InControl]
    127.0.0.1 www.hitgo.com
    127.0.0.1 popmonster.com #[IEFeature Class]
    127.0.0.1 www.popmonster.com #[TROJ_POPMON.A]
    127.0.0.1 r2.trafficserverstats.com
    127.0.0.1 ads.adorigin.com
    127.0.0.1 dev.adorigin.com
    127.0.0.1 www.adorigin.com
    127.0.0.1 blowsearch.com
    127.0.0.1 msxml.blowsearch.com
    127.0.0.1 web.blowsearch.com #[infospace.com]
    127.0.0.1 www.blowsearch.com
    127.0.0.1 cb.adprofile.net
    127.0.0.1 content.adprofile.net
    127.0.0.1 tx.adprofile.net
    127.0.0.1 w2-ver.adprofile.net
    127.0.0.1 adteractive.com
    127.0.0.1 www.adteractive.com
    127.0.0.1 adtegrity.com
    127.0.0.1 www.adtegrity.com
    127.0.0.1 webalize.com #[SearchCentrix][VisiCom.SearchCentric]
    127.0.0.1 toolbar.webalize.com #[downloads.searchcentrix.com]
    127.0.0.1 www.webalize.com #[Visicom Media Toolbar]
    127.0.0.1 webalize.net
    127.0.0.1 www.webalize.net
    127.0.0.1 webalize.mygeek.com
    127.0.0.1 advertisementbanners.com
    127.0.0.1 ads.specificclick.com
    127.0.0.1 www.specificclick.com
    127.0.0.1 specificpop.com
    127.0.0.1 ads.specificpop.com
    127.0.0.1 banners.specificpop.com
    127.0.0.1 www.specificpop.com
    127.0.0.1 adopt.specificclick.net
    127.0.0.1 images.specificclick.net
    127.0.0.1 image.adjuggler.com
    127.0.0.1 rotator.adjuggler.com
    127.0.0.1 www.adjuggler.com
    127.0.0.1 thruport.com
    127.0.0.1 adj54.thruport.com
    127.0.0.1 imageserver1.thruport.com
    127.0.0.1 www.thruport.com
    127.0.0.1 alset.com #[WIN32/HXDL AL]
    127.0.0.1 www.alset.com
    127.0.0.1 aveo.com
    127.0.0.1 www.aveo.com #[server down?]
    127.0.0.1 allcybersearch.com #[REG_STARTPAGE.A]
    127.0.0.1 www.allcybersearch.com
    127.0.0.1 amigeek.com
    127.0.0.1 www.amigeek.com
    127.0.0.1 clickyestoenter.net
    127.0.0.1 www.clickyestoenter.net
    127.0.0.1 www.gay50.com
    127.0.0.1 gocybersearch.com
    127.0.0.1 www.gocybersearch.com
    127.0.0.1 www.hotelxxxcams.com
    127.0.0.1 hotpopup.com
    127.0.0.1 search.hotpopup.com
    127.0.0.1 www.hotpopup.com
    127.0.0.1 hotsearchbox.com #[JAVA_STARTPAGE.F]
    127.0.0.1 www.hotsearchbox.com
    127.0.0.1 i--search.com
    127.0.0.1 www.i--search.com #[StartPage-FN]
    127.0.0.1 jethomepage.com #[JS.Exception.Exploit]
    127.0.0.1 www.jethomepage.com #[Troj/JetHome-B]
    127.0.0.1 jetseeker.com #[CWS.Bootconf]
    127.0.0.1 www.jetseeker.com
    127.0.0.1 searchxl.com #[Adware.ZeroPopUpBar]
    127.0.0.1 www.searchxl.com
    127.0.0.1 tinybar.com
    127.0.0.1 www.tinybar.com #[Parasite.TinyBar]
    127.0.0.1 topsearcher.com #[JV/Goplanet]
    127.0.0.1 www.topsearcher.com #[Troj/JetHome-J]
    127.0.0.1 trixscripts.com
    127.0.0.1 www.trixscripts.com
    127.0.0.1 zeropopup.com #[Parasite.ZeroPopUp]
    127.0.0.1 www.zeropopup.com #[Tellafriend.Trojan]
    127.0.0.1 znext.com #[JS_TRAFFICHBAR.A][Parasite.TinyBar]
    127.0.0.1 www.znext.com #[Parasite.ZeroPopUp][App/P0P-A]
    127.0.0.1 adpowerzone.com
    127.0.0.1 ads.adpowerzone.com
    127.0.0.1 easy.adpowerzone.com
    127.0.0.1 ss.adpowerzone.com
    127.0.0.1 tb.adpowerzone.com
    127.0.0.1 tb-static.adpowerzone.com #[Adware.Websearch]
    127.0.0.1 www.adpowerzone.com #[Adware.Searchexplorer]
    127.0.0.1 adserver.adsincontext.com
    127.0.0.1 ns1.adsincontext.com
    127.0.0.1 srv01.adsincontext.com
    127.0.0.1 srv02.adsincontext.com
    127.0.0.1 srv03.adsincontext.com
    127.0.0.1 srv04.adsincontext.com
    127.0.0.1 srv05.adsincontext.com
    127.0.0.1 srv07.adsincontext.com
    127.0.0.1 adgoblin.com #[Adware.AdGoblin]
    127.0.0.1 crossroad.adgoblin.com
    127.0.0.1 www.adgoblin.com #[AdGoblin.foontext]
    127.0.0.1 adforce.adtech.de
    127.0.0.1 adserver.adtech.de
    127.0.0.1 adserv003.adtech.de
    127.0.0.1 imageserv.adtech.de
    127.0.0.1 livingnet.adtech.de
    127.0.0.1 cdn1.adsdk.com
    127.0.0.1 cdn2.adsdk.com #[VirtualBouncer]
    127.0.0.1 advertising.com
    127.0.0.1 adserve.advertising.com
    127.0.0.1 bannerfarm.ace.advertising.com
    127.0.0.1 demo.advertising.com
    127.0.0.1 opera1-servedby.advertising.com
    127.0.0.1 servedby.advertising.com
    127.0.0.1 rd.advertising.com
    127.0.0.1 wap.advertising.com
    127.0.0.1 www.advertising.com
    127.0.0.1 clk4.com
    127.0.0.1 www.clk4.com
    127.0.0.1 www.contextualclicks.com
    127.0.0.1 fastseeker.com #[Adware.FastSeek]
    127.0.0.1 www.fastseeker.com
    127.0.0.1 spyblast.com #[Parasite.SpyBlast]
    127.0.0.1 www.spyblast.com #[SBFullInst Control]
    127.0.0.1 ads.ign.com
    127.0.0.1 adserver.ign.com
    127.0.0.1 t.ign.com
    127.0.0.1 tracker.ign.com
    127.0.0.1 adserver.snowball.com
    127.0.0.1 polls.snowball.com
    127.0.0.1 scripts.snowball.com
    127.0.0.1 t.snowball.com
    127.0.0.1 tracker.snowball.com
    127.0.0.1 altnet.com
    127.0.0.1 file.altnet.com
    127.0.0.1 media.altnet.com
    127.0.0.1 ts.altnet.com
    127.0.0.1 tss.altnet.com
    127.0.0.1 pm.altnet.com
    127.0.0.1 www.altnet.com
    127.0.0.1 www.altnetp2p.com
    127.0.0.1 brilliantdigital.com #[Parasite.BDE]
    127.0.0.1 st.brilliantdigital.com
    127.0.0.1 www.brilliantdigital.com
    127.0.0.1 b3d.com
    127.0.0.1 www.b3d.com
    127.0.0.1 bde3d.com
    127.0.0.1 xiti.com
    127.0.0.1 loga.xiti.com
    127.0.0.1 logc13.xiti.com
    127.0.0.1 logi6.xiti.com
    127.0.0.1 logi7.xiti.com
    127.0.0.1 logv3.xiti.com
    127.0.0.1 logv18.xiti.com
    127.0.0.1 logv20.xiti.com
    127.0.0.1 logp.xiti.com
    127.0.0.1 trafic.xiti.com
    127.0.0.1 www.xiti.com
    127.0.0.1 adchannel.contextplus.net #[Parasite.AproposMedia]
    127.0.0.1 www.contextplus.net
    127.0.0.1 www.contextplus.com
    127.0.0.1 adv.peopleonpage.com
    127.0.0.1 app.peopleonpage.com
    127.0.0.1 download.peopleonpage.com #[POP Loader]
    127.0.0.1 envolo.peopleonpage.com
    127.0.0.1 img.peopleonpage.com
    127.0.0.1 srv.peopleonpage.com #[Spyware.Apropos.B]
    127.0.0.1 www.peopleonpage.com #[Apropos.bho][PeopleOnPage.Apropos]
    127.0.0.1 image.avenuea.com
    127.0.0.1 www.avenuea.com
    127.0.0.1 www.atdmt.com
    127.0.0.1 click.atdmt.com
    127.0.0.1 clk.atdmt.com
    127.0.0.1 spd.atdmt.com
    127.0.0.1 spe.atdmt.com
    127.0.0.1 switch.atdmt.com
    127.0.0.1 view.atdmt.com
    127.0.0.1 atlasdmt.com
    127.0.0.1 www.atlasdmt.com
    127.0.0.1 www.avenueainc.com
    127.0.0.1 active-alert-server.com
    127.0.0.1 www.active-alert-server.com
    127.0.0.1 amnv.net
    127.0.0.1 www.amnv.net
    127.0.0.1 avenuemedia.com
    127.0.0.1 www.avenuemedia.com
    127.0.0.1 climaxbucks.com #[ClimaxBucks.InternetOptimizer]
    127.0.0.1 cdn.climaxbucks.com
    127.0.0.1 mt1.climaxbucks.com
    127.0.0.1 mt23.climaxbucks.com
    127.0.0.1 xbs.climaxbucks.com
    127.0.0.1 www.climaxbucks.com
    127.0.0.1 xbs.cocktailcash.com
    127.0.0.1 cocktailcash.com
    127.0.0.1 www.cocktailcash.com
    127.0.0.1 ads.internet-optimizer.com #[Parasite.Internet Optimizer]
    127.0.0.1 internet-optimizer.com #[Downloader.Dyfcia.F]
    127.0.0.1 configure.internet-optimizer.com
    127.0.0.1 help.internet-optimizer.com
    127.0.0.1 www.internet-optimizer.com #[Adware.NetOptimizer]
    127.0.0.1 www.lunasearch.com
    127.0.0.1 movies-etc.com
    127.0.0.1 cdn.movies-etc.com
    127.0.0.1 www.movies-etc.com
    127.0.0.1 yoogee.com #[Parasite.Internet Optimizer]
    127.0.0.1 www.yoogee.com
    127.0.0.1 c.azjmp.com
    127.0.0.1 images.azoogleads.com
    127.0.0.1 images.azooimages.com
    127.0.0.1 www.azoogleads.com
    127.0.0.1 www.giftfox.com
    127.0.0.1 images.imgehost.com
    127.0.0.1 c.qckjmp.com
    127.0.0.1 google.begin2search.com
    127.0.0.1 toolbar.begin2search.com
    127.0.0.1 www.begin2search.com #[Adware.Begin2search][iiittt Class]
    127.0.0.1 click2findnow.com
    127.0.0.1 www.click2findnow.com
    127.0.0.1 desktoptraffic.net
    127.0.0.1 toolbar.desktoptraffic.net
    127.0.0.1 popupsearches.com
    127.0.0.1 www.popupsearches.com
    127.0.0.1 www.eaffiliateinc.com
    127.0.0.1 globalwebsearch.com #[Parasite.ILookup]
    127.0.0.1 toolbar.globalwebsearch.com #[I-Lookup.GWS]
    127.0.0.1 toolbar2.globalwebsearch.com #[iiittt Class]
    127.0.0.1 www.globalwebsearch.com #[Adware.ILookup]
    127.0.0.1 hotwebsearch.com
    127.0.0.1 www.hotwebsearch.com
    127.0.0.1 worldanywhere.com
    127.0.0.1 toolbar.worldanywhere.com
    127.0.0.1 www.worldanywhere.com
    127.0.0.1 adcounter.theglobeandmail.com
    127.0.0.1 adrates.theglobeandmail.com
    127.0.0.1 ads.globeandmail.com
    127.0.0.1 ads1.theglobeandmail.com
    127.0.0.1 visit.theglobeandmail.com
    127.0.0.1 www1.theglobeandmail.com
    127.0.0.1 adbot.com
    127.0.0.1 w1.adbot.com
    127.0.0.1 www.adbot.com
    127.0.0.1 counter.bloke.com
    127.0.0.1 www1.counter.bloke.com
    127.0.0.1 www3.counter.bloke.com
    127.0.0.1 www4.counter.bloke.com
    127.0.0.1 www5.counter.bloke.com
    127.0.0.1 www6.counter.bloke.com
    127.0.0.1 www7.counter.bloke.com
    127.0.0.1 counterbot.com
    127.0.0.1 cb1.counterbot.com
    127.0.0.1 ak.bluestreak.com
    127.0.0.1 ca1.bluestreak.com
    127.0.0.1 s0.bluestreak.com
    127.0.0.1 s0b.bluestreak.com
    127.0.0.1 s1.bluestreak.com
    127.0.0.1 s2.bluestreak.com
    127.0.0.1 s3.bluestreak.com
    127.0.0.1 s4.bluestreak.com
    127.0.0.1 s5.bluestreak.com
    127.0.0.1 s6.bluestreak.com
    127.0.0.1 s7.bluestreak.com
    127.0.0.1 s8.bluestreak.com
    127.0.0.1 www.bluestreak.com
    127.0.0.1 download.bonzi.com
    127.0.0.1 images.bonzi.com
    127.0.0.1 www.bonzi.com
    127.0.0.1 www.bonzibuddy.com
    127.0.0.1 bravenet.com
    127.0.0.1 adserv.bravenet.com
    127.0.0.1 images.bravenet.com
    127.0.0.1 linktrack.bravenet.com
    127.0.0.1 pub1.bravenet.com
    127.0.0.1 www.bravenet.com
    127.0.0.1 belgiandip.com #[ITS Protocol exploit]
    127.0.0.1 www.belgiandip.com
    127.0.0.1 fassia.net #[Parasite.AutoSearch]
    127.0.0.1 www.fassia.net
    127.0.0.1 flipperkeys.com
    127.0.0.1 www.flipperkeys.com
    127.0.0.1 www.illtemperedguppys.com
    127.0.0.1 manipulatingtheicesurface.com
    127.0.0.1 www.manipulatingtheicesurface.com
    127.0.0.1 www.no-beba-el-agua.com
    127.0.0.1 smokeandapancake.org #[Adware.Winpup]
    127.0.0.1 www.smokeandapancake.org #[AdClicker-O][Troj/Psyme-C]
    127.0.0.1 www.undergroundlair.net #[Troj/AdClick-N]
    127.0.0.1 www2.undergroundlair.net
    127.0.0.1 www.00z70az77mnsa-00swj1zzprh.com #[www2.undergroundlair.net]
    127.0.0.1 www.funcionamiento-con-la-tijera.com #[undergroundlair.net]
    127.0.0.1 www.pshnw6510990nmo-34nue7700.net
    127.0.0.1 burstmedia.com
    127.0.0.1 web.burstmedia.com
    127.0.0.1 roscoe.burstmedia.com
    127.0.0.1 ads.burstnet.com
    127.0.0.1 gifs.burstnet.com
    127.0.0.1 sj.burstnet.com
    127.0.0.1 te.burstnet.com
    127.0.0.1 www.burstnet.com
    127.0.0.1 www2.burstnet.com
    127.0.0.1 www3.burstnet.com
    127.0.0.1 www4.burstnet.com
    127.0.0.1 www5.burstnet.com
    127.0.0.1 www6.burstnet.com
    127.0.0.1 www.burstnet.akadns.net
    127.0.0.1 casalemedia.com
    127.0.0.1 as.casalemedia.com
    127.0.0.1 asg01.casalemedia.com
    127.0.0.1 asg02.casalemedia.com
    127.0.0.1 asg03.casalemedia.com
    127.0.0.1 asg04.casalemedia.com
    127.0.0.1 asg05.casalemedia.com
    127.0.0.1 asg06.casalemedia.com
    127.0.0.1 asg07.casalemedia.com
    127.0.0.1 asg08.casalemedia.com
    127.0.0.1 asg09.casalemedia.com
    127.0.0.1 asg10.casalemedia.com
    127.0.0.1 asg11.casalemedia.com
    127.0.0.1 asg12.casalemedia.com
    127.0.0.1 asg13.casalemedia.com
    127.0.0.1 asg14.casalemedia.com
    127.0.0.1 asg15.casalemedia.com
    127.0.0.1 asg16.casalemedia.com
    127.0.0.1 asg17.casalemedia.com
    127.0.0.1 asg18.casalemedia.com
    127.0.0.1 asg19.casalemedia.com
    127.0.0.1 asg20.casalemedia.com
    127.0.0.1 asg21.casalemedia.com
    127.0.0.1 asg22.casalemedia.com
    127.0.0.1 asg23.casalemedia.com
    127.0.0.1 asg24.casalemedia.com
    127.0.0.1 asg25.casalemedia.com
    127.0.0.1 asg26.casalemedia.com
    127.0.0.1 asg27.casalemedia.com
    127.0.0.1 asg28.casalemedia.com
    127.0.0.1 asg29.casalemedia.com
    127.0.0.1 asg30.casalemedia.com
    127.0.0.1 asg31.casalemedia.com
    127.0.0.1 asg32.casalemedia.com
    127.0.0.1 asg33.casalemedia.com
    127.0.0.1 asg34.casalemedia.com
    127.0.0.1 asg35.casalemedia.com
    127.0.0.1 asg36.casalemedia.com
    127.0.0.1 asg37.casalemedia.com
    127.0.0.1 asg38.casalemedia.com
    127.0.0.1 asg39.casalemedia.com
    127.0.0.1 asg40.casalemedia.com
    127.0.0.1 asg41.casalemedia.com
    127.0.0.1 asg42.casalemedia.com
    127.0.0.1 asg43.casalemedia.com
    127.0.0.1 asg44.casalemedia.com
    127.0.0.1 asg45.casalemedia.com
    127.0.0.1 asg46.casalemedia.com
    127.0.0.1 asg47.casalemedia.com
    127.0.0.1 asg48.casalemedia.com
    127.0.0.1 asg49.casalemedia.com
    127.0.0.1 asg50.casalemedia.com
    127.0.0.1 asg51.casalemedia.com
    127.0.0.1 asg52.casalemedia.com
    127.0.0.1 aslg01.casalemedia.com
    127.0.0.1 aslg02.casalemedia.com
    127.0.0.1 aslg03.casalemedia.com
    127.0.0.1 aslg04.casalemedia.com
    127.0.0.1 aslg05.casalemedia.com
    127.0.0.1 aslg06.casalemedia.com
    127.0.0.1 aslg07.casalemedia.com
    127.0.0.1 aslg08.casalemedia.com
    127.0.0.1 aslg09.casalemedia.com
    127.0.0.1 aslg10.casalemedia.com
    127.0.0.1 c.casalemedia.com
    127.0.0.1 i.casalemedia.com
    127.0.0.1 is.casalemedia.com
    127.0.0.1 isg01.casalemedia.com
    127.0.0.1 isg02.casalemedia.com
    127.0.0.1 isg03.casalemedia.com
    127.0.0.1 isg04.casalemedia.com
    127.0.0.1 isg05.casalemedia.com
    127.0.0.1 isg06.casalemedia.com
    127.0.0.1 isg07.casalemedia.com
    127.0.0.1 isg08.casalemedia.com
    127.0.0.1 isg09.casalemedia.com
    127.0.0.1 isg10.casalemedia.com
    127.0.0.1 r.casalemedia.com
    127.0.0.1 www.casalemedia.com
    127.0.0.1 www.spywarestormer.com #[CInstall Class][Zoombar Object][Rogue/Suspect]
    127.0.0.1 active-max.com
    127.0.0.1 search.active-max.com
    127.0.0.1 www.active-max.com
    127.0.0.1 www.dialup2.com
    127.0.0.1 maxexp.com
    127.0.0.1 www.mp3search.com
    127.0.0.1 www.rub.to
    127.0.0.1 spawnet.com
    127.0.0.1 www.spawnet.com
    127.0.0.1 installdollars.com #[affiliate]
    127.0.0.1 www2.installdollars.com #[Adware.Instdollars][server down?]
    127.0.0.1 www.installdollars.com
    127.0.0.1 clickxchange.com
    127.0.0.1 caweb1.clickxchange.com
    127.0.0.1 caweb2.clickxchange.com
    127.0.0.1 www.clickxchange.com
    127.0.0.1 public.americandaytrading.com
    127.0.0.1 blazefind.com #[IE SearchBar]
    127.0.0.1 findwhatevernow.blazefind.com
    127.0.0.1 omniscient.blazefind.com #[TROJ_BLAZEFIND.A]
    127.0.0.1 xml.blazefind.com
    127.0.0.1 www.blazefind.com #[Adware.BlazeFind]
    127.0.0.1 cdtnet.net
    127.0.0.1 anne.cdtnet.net
    127.0.0.1 caroline.cdtnet.net
    127.0.0.1 flingstone.com #[TROJ_WINFAVS.A]
    127.0.0.1 redirect.flingstone.com
    127.0.0.1 static.flingstone.com #[brdg Class]
    127.0.0.1 www.flingstone.com #[Adware.WinFavorites.B]
    127.0.0.1 www2.flingstone.com #[brdg Class][Win32/Bryss.Spy.Trojan]
    127.0.0.1 homepagecash.com
    127.0.0.1 www.homepagecash.com
    127.0.0.1 loudcash.com
    127.0.0.1 partners.loudcash.com
    127.0.0.1 www.loudcash.com
    127.0.0.1 searchbarcash.com #[Downloader.Small.5.Y]
    127.0.0.1 public.searchbarcash.com #[WinFavorites][DownloadUL Class]
    127.0.0.1 www.searchbarcash.com #[Parasite.TinyBar]
    127.0.0.1 searchbrowser.com
    127.0.0.1 findwhatevernow.searchbrowser.com
    127.0.0.1 skoobidoo.com
    127.0.0.1 www.skoobidoo.com
    127.0.0.1 www2.skoobidoo.com #[Downloader.MSCache]
    127.0.0.1 updates.troffee.com
    127.0.0.1 winadclient.com
    127.0.0.1 www.winadclient.com
    127.0.0.1 windowssr.com
    127.0.0.1 public.windupdates.com #[Windows SyncroAd]
    127.0.0.1 static.windupdates.com
    127.0.0.1 www.windupdates.com #[AdvWare.WinAD]
    127.0.0.1 counterstrike.server.us #[Downloader.CDT]
    127.0.0.1 er.errorplace.com
    127.0.0.1 www.errorplace.com #[Parasite.SearchSprint]
    127.0.0.1 www.media-motor.com
    127.0.0.1 bins2.media-motor.net #[TROJ_VB.DO]
    127.0.0.1 cabs.media-motor.net #[IObjSafety.DemoCtl]
    127.0.0.1 logs.media-motor.net
    127.0.0.1 mmm.media-motor.net
    127.0.0.1 upd.media-motor.net
    127.0.0.1 www.media-motor.net
    127.0.0.1 tar.popuppers.com #[Adware.Medload]
    127.0.0.1 www.popuppers.com #[Adware.Roimoi][SULoads.popuppers]
    127.0.0.1 bins.roings.com #[jimmyloader.jimmyform]
    127.0.0.1 cabs.roings.com #[IObjSafety.DemoCtl]
    127.0.0.1 logs.roings.com
    127.0.0.1 mmm.roings.com #[limmyloding.limmyform]
    127.0.0.1 www.roings.com #[Roings Search Enhancment]
    127.0.0.1 bannerexchange.cjb.net
    127.0.0.1 coder3862004.cjb.net #[Trojan.Bansap]
    127.0.0.1 searchwww.com
    127.0.0.1 search.searchwww.com #[Parasite.SearchWWW]
    127.0.0.1 vbs.searchwww.com
    127.0.0.1 www.searchwww.com
    127.0.0.1 dafinder.com
    127.0.0.1 www2.dafinder.com
    127.0.0.1 www3.dafinder.com
    127.0.0.1 adult.getmoviesonline.com
    127.0.0.1 www.getmoviesonline.com
    127.0.0.1 ourlinklist.com
    127.0.0.1 searchaccurate.com #[Parasite.TinyBar]
    127.0.0.1 www.searchaccurate.com
    127.0.0.1 ads.web.aol.com
    127.0.0.1 affiliate.aol.com
    127.0.0.1 aim.aol.com
    127.0.0.1 dynamic.aol.com
    127.0.0.1 free.aol.com
    127.0.0.1 usaol.com
    127.0.0.1 ar.atwola.com
    127.0.0.1 pr.atwola.com
    127.0.0.1 ads.newline.aol.com
    127.0.0.1 adremote.pathfinder.com
    127.0.0.1 adremote.timeinc.net
    127.0.0.1 aolwpnscom.112.2o7.net
    127.0.0.1 aolwpnswhatsnew.112.2o7.net
    127.0.0.1 adimg.cnet.com
    127.0.0.1 remotead-internal.cnet.com
    127.0.0.1 remotead.cnet.com
    127.0.0.1 ads.com.com
    127.0.0.1 adimg.com.com
    127.0.0.1 adlog.com.com
    127.0.0.1 cj.com
    127.0.0.1 www.cj.com
    127.0.0.1 www.commission-junction.com
    127.0.0.1 qksrv.com
    127.0.0.1 www.qksrv.net
    127.0.0.1 www.qksz.net
    127.0.0.1 commonname.com
    127.0.0.1 www.commonname.com
    127.0.0.1 commonnames.com
    127.0.0.1 www.commonnames.com
    127.0.0.1 xpsn.com
    127.0.0.1 www.xpsn.com
    127.0.0.1 img10.coolsavings.com
    127.0.0.1 mn104.coolsavings.com
    127.0.0.1 www101.coolsavings.com
    127.0.0.1 www102.coolsavings.com
    127.0.0.1 www105.coolsavings.com
    127.0.0.1 www108.coolsavings.com
    127.0.0.1 www109.coolsavings.com
    127.0.0.1 www112.coolsavings.com #[CMV5 Class]
    127.0.0.1 www113.coolsavings.com
    127.0.0.1 coolwebsearch.com
    127.0.0.1 stats.coolwebsearch.com
    127.0.0.1 www.coolwebsearch.com #[CWS/IEFeats]
    127.0.0.1 0websearch.com
    127.0.0.1 1-se.com #[CWS.Aboutblank][W32.Tuoba.Trojan]
    127.0.0.1 www.1-se.com #[VBS.Startpage.C]
    127.0.0.1 1stpagehere.com
    127.0.0.1 www.1stpagehere.com
    127.0.0.1 www.31234.com #[CWS.Msconfig]
    127.0.0.1 4-counter.com #[CWS.Winproc32][icanfindit.net]
    127.0.0.1 a-search.biz
    127.0.0.1 adasearch.com
    127.0.0.1 www.adasearch.com
    127.0.0.1 adulthyperlinks.com #[Parasite.CoolWebSearch]
    127.0.0.1 www.adulthyperlinks.com <
    0
  7. Merlin
     
    c tre tre long je te met tou?
    ou juste la fin
    0
  8. salwa5 Messages postés 7552 Statut Contributeur 1 671
     
    oui stp essay de le mettre au complet si le probleme persiste fait ce que te demande siri sur le message numeo 5

    < 5 > S!Ri (lundi 2 avril 2007 à 22:59:22)
    Salut

    Tu peux uploader ce fichier :
    C:\WINDOWS\iesettings.dll

    à cette adresse: http://siri.urz.free.fr/upload/
    pour mettre le fix à jour.

    Merci
    a+
    0
  9. salwa5 Messages postés 7552 Statut Contributeur 1 671
     
    pour le raport c'est ok je l'ai recu en entié par email :p

    a++++
    0
  11. S!Ri Messages postés 932 Statut Contributeur sécurité 10
     
    Salut

    J'ai bien recu le fichier. Il fait partie de ton infection. Il y en a d'autre:

    Redemarre en mode sans echec, regarde dans
    C:\Windows\ ou C:\windows\system32\ un fichier qui se nomme mslog.exe
    Si tu le trouves, renomme le en mslog.bak

    Tu peux uploader de la même facon les fichiers suivants:
    C:\WINDOWS\iesupport.dll
    C:\WINDOWS\iedebug.dll
    C:\WINDOWS\mslog.bak ou C:\WINDOWS\system32\mslog.bak si tu l'as trouvé.

    Merci
    a+
    0
  12. Merlin
     
    merci encore de m'aider..je fais ca tout de suite!
    0
  13. merlin
     
    Salut,
    Alors voila jai uploadé ce que tu ma demandé par contre jai pas trouvé le fichier mslog.exe
    0
  14. S!Ri Messages postés 932 Statut Contributeur sécurité 10
     
    Salut

    Merci pour ta contribution.
    Je viens de mettre le fix a jour avec les nouvelles versions.

    Relance SmitfraudFix.exe, lance l'option de mise a jour (4).
    Le fix va télécharger la dernière version puis se relancer.

    Selectionne le choix 1. et poste le rapport ici.

    Redemarre en mode sans echec,
    Relance smitfraudFix et selectionne le choix n°2.
    Poste la rapport généré ici (supprime les lignes 127.0.0.1... de celui ci)
    Accompagné d'un nouveau rapport HijackThis.

    Je te laisse entre les mains de salwa5 pour terminer.

    a+
    0
  15. merlin
     
    SmitFraudFix v2.164

    Rapport fait à 8:53:23,65, 05/04/2007
    Executé à partir de C:\Documents and Settings\jubb\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» Process

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\Mediafour\MacDrive\MDDiskProtect.exe
    C:\Program Files\Fichiers communs\Mediafour\MACVNTFY.EXE
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\YzShadow\YzShadow.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
    C:\Program Files\RocketDock\RocketDock.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\cmd.exe

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    Fichier hosts corrompu !

    # [MICROSOFT.COM]

    »»»»»»»»»»»»»»»»»»»»»»»» C:\

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

    C:\WINDOWS\iedebug.dll PRESENT !
    C:\WINDOWS\iesettings.dll PRESENT !
    C:\WINDOWS\iesupport.dll PRESENT !

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\jubb

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\jubb\Application Data

    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\jubb\Favoris

    »»»»»»»»»»»»»»»»»»»»»»»» Bureau

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"=""

    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"=""

    »»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32-huy32

    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: Marvell Yukon 88E8053 PCI-E Gigabit Ethernet Controller - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 212.27.54.252
    DNS Server Search Order: 212.27.53.252

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{10A3C246-DD8D-481D-BAA3-8E0CA95FA33B}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{10A3C246-DD8D-481D-BAA3-8E0CA95FA33B}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{10A3C246-DD8D-481D-BAA3-8E0CA95FA33B}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

    »»»»»»»»»»»»»»»»»»»»»»»» Fin
    0
  16. merlin
     
    SmitFraudFix v2.164

    Rapport fait à 9:01:15,14, 05/04/2007
    Executé à partir de C:\Documents and Settings\jubb\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode sans echec

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    127.0.0.1 localhost

    127.0.0.1 downloads.aaa1screensavers.com #[Bargin Buddy]
    127.0.0.1 china.dalexcars.com
    127.0.0.1 dl.aaascreensavers.com
    127.0.0.1 abcsearch.com
    127.0.0.1 admin.abcsearch.com
    127.0.0.1 www3.abcsearch.com #[Browseraid]
    127.0.0.1 www.abcsearch.com
    127.0.0.1 abc517.net #[Trojan.Mitglieder.H]
    127.0.0.1 absoluagency.com #[Trojan.StartPage.H]
    127.0.0.1 acestats.com
    127.0.0.1 www.acestats.com
    127.0.0.1 actualnames.com #[Parasite.ActualNames][Spyware.ActualNames]
    127.0.0.1 www.actualnames.com
    127.0.0.1 ad-up.com
    127.0.0.1 www.ad-up.com
    127.0.0.1 adatom.com
    127.0.0.1 aesp.adatom.com
    127.0.0.1 adbest.com
    127.0.0.1 www.adcipta.net #[W32/Malware]
    127.0.0.1 adserv.adbonus.com
    127.0.0.1 www.adbonus.com
    127.0.0.1 ad2.adcept.net
    127.0.0.1 ad3.adcept.net
    127.0.0.1 www.adcept.net
    127.0.0.1 adcomplete.com
    127.0.0.1 www.adcomplete.com
    127.0.0.1 www.adcopy.info
    127.0.0.1 ads.adcorps.com
    127.0.0.1 ads.addynamix.com
    127.0.0.1 pt.server1.adexit.com
    127.0.0.1 www.adexit.com
    127.0.0.1 www.ad4ever.com
    127.0.0.1 adhearus.com
    127.0.0.1 display2.adhearus.com
    127.0.0.1 ssl3.adhost.com
    127.0.0.1 www2.adhost.com
    127.0.0.1 www.addme.com
    127.0.0.1 www.adinfinity.com
    127.0.0.1 te.adlandpro.com
    127.0.0.1 classic.adlink.de
    127.0.0.1 regio.adlink.de
    127.0.0.1 west.adlink.de
    127.0.0.1 www.adminder.com
    127.0.0.1 adsfac.net
    127.0.0.1 www.adonweb.com
    127.0.0.1 www.adrelevance.com #[NetRatings]
    127.0.0.1 media.adrevolver.com
    127.0.0.1 adroar.com
    127.0.0.1 ads.adroar.com
    127.0.0.1 delta.adroar.com
    127.0.0.1 iads.adroar.com #[Adware.AdRoar][ADW_ADROAR.A]
    127.0.0.1 lists.adroar.com
    127.0.0.1 www.adroar.com
    127.0.0.1 ads.adsag.com
    127.0.0.1 di.adsag.com
    127.0.0.1 img.adsag.com
    127.0.0.1 adserv.com
    127.0.0.1 www.adserv.com
    127.0.0.1 ads.adtomi.com
    127.0.0.1 www.adtomi.com #[Adware.Adtomi]
    127.0.0.1 downldcl.adtoolsinc.com
    127.0.0.1 www.adtoolsinc.com
    127.0.0.1 www.adtrader.com
    127.0.0.1 www.adtraffic.net
    127.0.0.1 survey.advantageresearch.com
    127.0.0.1 ad.adver.com.tw
    127.0.0.1 ads.advertise.net
    127.0.0.1 advertisingvision.com #[Adware.Advision]
    127.0.0.1 www.advertisingvision.com
    127.0.0.1 adviva.com
    127.0.0.1 www.adviva.com
    127.0.0.1 ads.adviva.net
    127.0.0.1 adstats.adviva.net
    127.0.0.1 tracker.affistats.com #[msvrl.dll]
    127.0.0.1 www.affiliatefuel.com
    127.0.0.1 banners.affiliatefuel.com
    127.0.0.1 affiliatetarget.com
    127.0.0.1 www.affiliatetarget.com
    127.0.0.1 fcds.affiliatetracking.net
    127.0.0.1 our.affiliatetracking.net
    127.0.0.1 www.affiliatetracking.net
    127.0.0.1 www.affiliatetracking.com
    127.0.0.1 adserver.aim4media.com
    127.0.0.1 adtest.aim4media.com
    127.0.0.1 pops.aim4media.com
    127.0.0.1 www.aim4media.com
    127.0.0.1 crs.akamai.com
    127.0.0.1 soap.alexa.com #[Spyware.Alexa][Alexa Toolbar]
    127.0.0.1 traffic.alexa.com
    127.0.0.1 xsltcache.alexa.com
    127.0.0.1 www.alexa.com
    127.0.0.1 allcheapsolutions.com #[Backdoor-CIE]
    127.0.0.1 ads.as4x.tmcs.akadns.net #[Ticketmaster]
    127.0.0.1 bantam.ai.net
    127.0.0.1 fiona.ai.net
    127.0.0.1 ads.amazingmedia.com
    127.0.0.1 bohema.amillo.net #[Trojan.Mitglieder.H]
    127.0.0.1 adserver04.ancestry.com #[RealMedia]
    127.0.0.1 ads.antionline.com
    127.0.0.1 junior.apk.net
    127.0.0.1 banner.arttoday.com
    127.0.0.1 ads.aspalliance.com
    127.0.0.1 associmg.com #[amazon.com]
    127.0.0.1 armbender.com #[UCSearch.ucUCSearch][W32.Adclicker.F.Trojan]
    127.0.0.1 www.armbender.com #[UCSearch.ArmBender]
    127.0.0.1 audiogalaxy.com
    127.0.0.1 www.audiogalaxy.com #[Restricted Zone site]
    127.0.0.1 adserving.autotrader.com
    127.0.0.1 www.avatarresources.com #[Parasite.AutoStartup]
    127.0.0.1 www.avres.net
    127.0.0.1 www.aweber.com
    127.0.0.1 cploving.awmhost.net #[TrojanClicker.Win32.Lopin]
    127.0.0.1 bar.baidu.com #[Parasite.ClientMan]
    127.0.0.1 www.baltictop.com
    127.0.0.1 www.banner-mania.com
    127.0.0.1 www.bannerspace.com #[Restricted Zone site]
    127.0.0.1 www2.bannerspace.com
    127.0.0.1 www3.bannerspace.com
    127.0.0.1 www5.bannerspace.com
    127.0.0.1 www6.bannerspace.com
    127.0.0.1 www7.bannerspace.com
    127.0.0.1 bannerswap.com
    127.0.0.1 www.bannerswap.com
    127.0.0.1 www.bidclix.com
    127.0.0.1 bidclix.net
    127.0.0.1 www.bidclix.net
    127.0.0.1 bigtracker.com
    127.0.0.1 bighits.net #[Restricted Zone site]
    127.0.0.1 bigticker.bighits.net
    127.0.0.1 bounty.bighits.net
    127.0.0.1 www.bighits.net
    127.0.0.1 download.bigwebportal.com #[hotwebsearch.com]
    127.0.0.1 www.bigwebportal.com
    127.0.0.1 counter.bizland.com
    127.0.0.1 webads.bizservers.com
    127.0.0.1 www.black-hole.co.uk #[Restricted Zone site]
    127.0.0.1 www.blazehits.net #[gonnasearch.com]
    127.0.0.1 s7.blingblingcontent.com #[Easywebinstaller Control]
    127.0.0.1 ads.bmais.net #[bluemountain]
    127.0.0.1 bookedspace.com #[Parasite.BookedSpace]
    127.0.0.1 www.bookedspace.com #[Adware.Bookedspace]
    127.0.0.1 a.boom.ro
    127.0.0.1 s.boom.ro
    127.0.0.1 www1.boomerank.com
    127.0.0.1 boomerank.com
    127.0.0.1 citi.bridgetrack.com #[Tracking Service]
    127.0.0.1 rccl.bridgetrack.com
    127.0.0.1 config.broadcastpc.tv #[TROJ_RVP.E]
    127.0.0.1 report.broadcastpc.tv #[AdvWare.Broadcap.a]
    127.0.0.1 www.broadcastpc.tv #[Adware.Broadcastpc]
    127.0.0.1 www.browserplugin.com #[WebHlprObj Class]
    127.0.0.1 install.browsertoolbar.com #[Backdoor.Autoupder][BrowserToolbar]
    127.0.0.1 www2.browsertoolbar.com #[TROJ_SUA.A]
    127.0.0.1 www.browsertoolbar.com #[Parasite.BrowserToolbar]
    127.0.0.1 browserwise.com #[Parasite.Xupiter][Xupiter.BrowserWise]
    127.0.0.1 www.browserwise.com
    127.0.0.1 www.buildtraffic.com
    127.0.0.1 casino-on-net.com
    127.0.0.1 java2.casino-on-net.com
    127.0.0.1 www.casino-on-net.com
    127.0.0.1 casinojems.com
    127.0.0.1 www.casinojems.com
    127.0.0.1 cc-dt.com
    127.0.0.1 ads.cc-dt.com
    127.0.0.1 clickserve.cc-dt.com
    127.0.0.1 www.capital-systems.net #[Troj/Ovedil-B]
    127.0.0.1 www.care2.com #[TopMoxie]
    127.0.0.1 ads.cars.com
    127.0.0.1 www.cashforclicks.com
    127.0.0.1 www.cashpile.com
    127.0.0.1 ads.cdfreaks.com #[Ads.cdfreaks]
    127.0.0.1 mds.centrport.net
    127.0.0.1 c.clickaire.com #[CWS trojan downloads]
    127.0.0.1 classifieds1000.com
    127.0.0.1 www.classifieds1000.com
    127.0.0.1 clearfind.com
    127.0.0.1 www.clearfind.com #[Restricted Zone site]
    127.0.0.1 hop.clickbank.net #[Adware.Clickbank]
    127.0.0.1 zzz.clickbank.net
    127.0.0.1 clickedyclick.com
    127.0.0.1 www.clickexchange.ru
    127.0.0.1 click2boost.com
    127.0.0.1 secure.click2boost.com
    127.0.0.1 service.click2boost.com
    127.0.0.1 www.click2boost.com
    127.0.0.1 servedby.clickexperts.net
    127.0.0.1 www.clicks2you.com
    127.0.0.1 stats1.clicktracks.com
    127.0.0.1 www.is1.clixgalore.com
    127.0.0.1 www.clixgalore.com
    127.0.0.1 www1.click-fr.com
    127.0.0.1 www2.click-fr.com
    127.0.0.1 www3.click-fr.com
    127.0.0.1 www4.click-fr.com
    127.0.0.1 www.clickhouse.com
    127.0.0.1 www.clicks4u.com
    127.0.0.1 www.clipgenie.com
    127.0.0.1 comclick.com
    127.0.0.1 ct2.comclick.com
    127.0.0.1 fl01.ct2.comclick.com
    127.0.0.1 ihm01.ct2.comclick.com
    127.0.0.1 www.comclick.com #[Restricted Zone site]
    127.0.0.1 www.thecoolbar.com #[Softomate Toolbar][The Coolbar]
    127.0.0.1 www.compactbanner.com
    127.0.0.1 ads.console.net
    127.0.0.1 coolshader.com
    127.0.0.1 c.coolshader.com #[Win32.Harnig]
    127.0.0.1 www.coolshader.com
    127.0.0.1 counted.com
    127.0.0.1 bilbo.counted.com
    127.0.0.1 www.counted.com
    127.0.0.1 www.counterguide.com
    127.0.0.1 counter4u.de
    127.0.0.1 connectionzone.com
    127.0.0.1 count.casino-trade.com
    127.0.0.1 www.couponsandoffers.com #[Adware.TopMoxie]
    127.0.0.1 data.coremetrics.com
    127.0.0.1 twci.coremetrics.com
    127.0.0.1 us.cqcounter.com
    127.0.0.1 zz.cqcounter.com
    127.0.0.1 1us.cqcounter.com
    127.0.0.1 ads.crosswinds.net
    127.0.0.1 megabyte.crosswinds.net
    127.0.0.1 cyberbounty.com
    127.0.0.1 js.cybermonitor.com
    127.0.0.1 stat3.cybermonitor.com
    127.0.0.1 cytron.com #[DailyWinner][Cytron]
    127.0.0.1 www.cytron.com
    127.0.0.1 www.dash.com
    127.0.0.1 ads.date.com
    127.0.0.1 banner.date.com
    127.0.0.1 dbbsrv.com #[bserv.darkblue.com][Restricted Zone site]
    127.0.0.1 freestuff.com.19828.fb.dbbsrv.com #[roar.com]
    127.0.0.1 spyware.com.16871.fb.dbbsrv.com
    127.0.0.1 webads.com.18345.fb.dbbsrv.com
    127.0.0.1 www.deepcom.com #[TrojanDropper.Win32.Small.gt]
    127.0.0.1 collector.deepmetrix.com
    127.0.0.1 geo.deepmetrix.com
    127.0.0.1 www.deepmetrix.com #[Data Miner]
    127.0.0.1 ad.ads.dk
    127.0.0.1 tdkads.ads.dk
    127.0.0.1 didtheyreadit.com #[email tracker]
    127.0.0.1 www.didtheyreadit.com
    127.0.0.1 counter.digits.com
    127.0.0.1 www.divago.com #[Adware.Surfairy]
    127.0.0.1 www.dnscaching.net #[stickypops.com]
    127.0.0.1 www.domamil.cz #[Trojan.Beagooz]
    127.0.0.1 downloadalot.com
    127.0.0.1 get.downloadalot.com
    127.0.0.1 www.downloadalot.com #[Restricted Zone site]
    127.0.0.1 www.downseek.com #[DownSeek Search]
    127.0.0.1 dqmedia.net #[spam]
    127.0.0.1 drmx01.net #[spam]
    127.0.0.1 www.duenow.com
    127.0.0.1 gfx.dvlabs.com
    127.0.0.1 klipads.dvlabs.com
    127.0.0.1 e2give.com #[Adware-E2Give][Spyware.e2give]
    127.0.0.1 www.e2give.com
    127.0.0.1 www.e-bannerx.com
    127.0.0.1 adv1.eblocs.com
    127.0.0.1 adv2.eblocs.com #[Rogue/Suspect]
    127.0.0.1 www.easycounter.com
    127.0.0.1 banners.easydns.com
    127.0.0.1 banner.easyspace.com
    127.0.0.1 adserv1.ebates.com #[WebSavings]
    127.0.0.1 www.ebates.com #[Adware.MoeMoney]
    127.0.0.1 www.efinder.cc #[StartPage-DA]
    127.0.0.1 enhancemysearch.com #[xzoomy.com]
    127.0.0.1 www.enhancemysearch.com
    127.0.0.1 epeople.com
    127.0.0.1 errorpage404.com #[JS_TRAFFICHBAR.A]
    127.0.0.1 www.errorpage404.com #[Parasite.TinyBar]
    127.0.0.1 vipuk.escritorioactivo.com #[123Messenger Hijacker]
    127.0.0.1 www.escorcher.com #[bogus antivirus spyware]
    127.0.0.1 www.eshopads2.com
    127.0.0.1 perso.estat.com
    127.0.0.1 prof.estat.com
    127.0.0.1 www.estat.com #[Restricted Zone site]
    127.0.0.1 eu-adcenter.net
    127.0.0.1 thinknyc.eu-adcenter.net
    127.0.0.1 ugo.eu-adcenter.net #[evidence-eliminator.com]
    127.0.0.1 www.euroklik.nl #[EasyBar][InstallerX Class]
    127.0.0.1 engage.everyone.net
    127.0.0.1 static.everyone.net
    127.0.0.1 www.exchangead.com
    127.0.0.1 exitexchange.com
    127.0.0.1 count.exitexchange.com
    127.0.0.1 images.exitexchange.com
    127.0.0.1 www.exitexchange.com #[Restricted Zone site]
    127.0.0.1 www.exchangeexit.com #[Installer Class][Winupie]
    127.0.0.1 www.exittraffic.net
    127.0.0.1 ezcybersearch.com #[EZCyberSearch.Surebar]
    127.0.0.1 ads.ezcybersearch.com #[Adware.EZSearch.B]
    127.0.0.1 ezcybersearch.mail.everyone.net
    127.0.0.1 www.ezcybersearch.com #[Parasite.ezCyberSearch]
    127.0.0.1 www.evidence-eliminator.com
    127.0.0.1 ads.fairfax.com.au
    127.0.0.1 images.ads.fairfax.com.au
    127.0.0.1 redirect.fairfax.com.au
    127.0.0.1 campaigns.f2.com.au
    127.0.0.1 www.fast2net.com
    127.0.0.1 www.fastfind.org #[SubSearch][TROJ_STARTPAG.KF][Adware.Fastfind.B]
    127.0.0.1 fasttrack.nu
    127.0.0.1 www.fceboard.com #[Adware.EBoard]
    127.0.0.1 www.fightpopups.net #[Adware.MessStopper]
    127.0.0.1 adserver.filefront.com
    127.0.0.1 www.filemix.net #[Surf+]
    127.0.0.1 www.fineclicks.com
    127.0.0.1 firstname.com
    127.0.0.1 clicks.firstname.com
    127.0.0.1 www.fizzlewizzle.com #[Fizzle Wizzle Searchbar]
    127.0.0.1 flashtrack.net
    127.0.0.1 ads.flashtrack.net #[Adware.Flashtrack.B]
    127.0.0.1 coreg.flashtrack.net
    127.0.0.1 www.flashtrack.net #[Adware.FlashEnhancer][KB312429]
    127.0.0.1 flyinads.com
    127.0.0.1 www.flyinads.com
    127.0.0.1 ads.forbes.com
    127.0.0.1 klipmart.forbes.com
    127.0.0.1 www.ampira.com #[Fortunecity]
    127.0.0.1 ads.fortunecity.com
    127.0.0.1 ads.v3.com #[Fortunecity]
    127.0.0.1 www2.fortunecity.com
    127.0.0.1 ad.freefind.com
    127.0.0.1 www.freehistorycleaner.com #[Adware.Fapi][ADW_HISCLEAN.A]
    127.0.0.1 free-stats.com
    127.0.0.1 www.freewebsites.com
    127.0.0.1 ads.free-windows-games.com
    127.0.0.1 www.free-windows-games.com #[Parasite.GAMsys][GamHelper]
    127.0.0.1 pops.freeze.com #[[GamHelper]
    127.0.0.1 ads.gamespy.com
    127.0.0.1 adcontent.gamespy.com
    127.0.0.1 www.gebr-wachs.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
    127.0.0.1 gd.geobytes.com #[obtains users location]
    127.0.0.1 www.getsmart.com
    127.0.0.1 bp2.getredirect.com
    127.0.0.1 4.getredirect.com #[superlogy.com]
    127.0.0.1 www.getredirect.com
    127.0.0.1 getupdate.com
    127.0.0.1 dlx.getupdate.com #[AdvWare.ToolBar.VB.b]
    127.0.0.1 www.getupdate.com #[Adware.Getup]
    127.0.0.1 gigex.com
    127.0.0.1 media.gigex.com #[SpeedDelivery]
    127.0.0.1 oascentral.gigex.com #[RealMedia]
    127.0.0.1 www.gigex.com #[download Class]
    127.0.0.1 globesearch.com
    127.0.0.1 www.globesearch.com #[Restricted Zone site][CWS]
    127.0.0.1 banner.goldenpalace.com #[redirects]
    127.0.0.1 www.goldenwebawards.com #[server down?]
    127.0.0.1 goldstats.net
    127.0.0.1 www.goldstats.net
    127.0.0.1 adincl.gopher.com #[InfoSpace]
    127.0.0.1 ads.gorillanation.com #[Restricted Zone site]
    127.0.0.1 adserver.gorillanation.com
    127.0.0.1 gostats.com
    127.0.0.1 c1.gostats.com
    127.0.0.1 c2.gostats.com
    127.0.0.1 webcounter.goweb.de
    127.0.0.1 greatstartpage.com #[parasite downloads]
    127.0.0.1 www.greatstartpage.com
    127.0.0.1 grokster.com #[Restricted Zone site][P2P]
    127.0.0.1 dl.grokster.com
    127.0.0.1 www.grokster.com
    127.0.0.1 ads.guardian.co.uk
    127.0.0.1 ads.guardianunlimited.co.uk
    127.0.0.1 www.g-wizzads.net
    127.0.0.1 hamster.com #[apps5.oingo.com]
    127.0.0.1 ad0.haynet.com
    127.0.0.1 www.hitboss.com
    127.0.0.1 www.hit4hit.com
    127.0.0.1 ads.hitcents.com
    127.0.0.1 hithopper.com #[Adware.Hithopper]
    127.0.0.1 www.hithopper.com
    127.0.0.1 hitmodel.net
    127.0.0.1 hit-now.com
    127.0.0.1 loga.hit-parade.com
    127.0.0.1 hit-parade.com
    127.0.0.1 www.hitpointer.com
    127.0.0.1 hitslink.com
    127.0.0.1 counter.hitslink.com
    127.0.0.1 counter2.hitslink.com
    127.0.0.1 www2.hitslink.com
    127.0.0.1 www.hitslink.com #[Restricted Zone site]
    127.0.0.1 hitstats.net
    127.0.0.1 www.hiwire.com
    127.0.0.1 ads.home.net
    127.0.0.1 anna.homeftp.net #[W32.Linkbot.A]
    127.0.0.1 counters.honesty.com
    127.0.0.1 banners.hotlinks.net
    127.0.0.1 hotphrase.com
    127.0.0.1 www.hotphrase.com #[Restricted Zone site]
    127.0.0.1 hotsearch.com #[roar.com][Restricted Zone site]
    127.0.0.1 www.hotsearch.com
    127.0.0.1 hotsearchbar.com #[iiittt Class][SpiderSearch]
    127.0.0.1 www.hotsearchbar.com
    127.0.0.1 www.10s.com.br #[Trojan.Cargao]
    127.0.0.1 cgi.hotstat.nl
    127.0.0.1 viewstat.hotstat.nl
    127.0.0.1 hc2.humanclick.com
    127.0.0.1 www.humanclick.com #[Data Miner]
    127.0.0.1 www.hypertracker.com
    127.0.0.1 ads.iafrica.com
    127.0.0.1 ads.iboost.com
    127.0.0.1 www.i-clicks.net
    127.0.0.1 hits.icdirect.com
    127.0.0.1 hitctr01.icdirect.com
    127.0.0.1 image-catcher.com
    127.0.0.1 bar.iebar8.com #[Adware.Navihelper]
    127.0.0.1 stats.surfaid.ihost.com
    127.0.0.1 ads.imdb.com #[amazon.com]
    127.0.0.1 www.impregnable.net #[TrojanDownloader.Win32.VB.dw][Trojan.Win32.StartPage.kk]
    127.0.0.1 stats.indextools.com
    127.0.0.1 adserver.indieclick.com
    127.0.0.1 campaign.indieclick.com
    127.0.0.1 adcenter.in2.com
    127.0.0.1 ads.inet1.com
    127.0.0.1 ads7.inet1.com
    127.0.0.1 banners.inetfast.com
    127.0.0.1 ads.infospace.com
    127.0.0.1 bvads.infospace.com
    127.0.0.1 dpxml.infospace.com
    127.0.0.1 xads.infospace.com
    127.0.0.1 www.infospider.com
    127.0.0.1 ads.intellicast.com
    127.0.0.1 ads.intelihealth.com
    127.0.0.1 ads.intermezzia.com
    127.0.0.1 mjxads.internet.com
    127.0.0.1 indiads.com
    127.0.0.1 infostart.com
    127.0.0.1 popups.infostart.com
    127.0.0.1 www.intelli-tracker.com
    127.0.0.1 ads.ipowerweb.com
    127.0.0.1 www.ipstat.com
    127.0.0.1 istarthere.com #[Troj/IEStart-C]
    127.0.0.1 directory.istarthere.com
    127.0.0.1 moviesponsor.istarthere.com
    127.0.0.1 partners.istarthere.com
    127.0.0.1 www.istarthere.com #[VBS_IESTART.F]
    127.0.0.1 adcycle.isoftmarketing.com
    127.0.0.1 isurfplus.com
    127.0.0.1 www.isurfplus.com #[Adware.Surebar]
    127.0.0.1 www.itrafficstar.com #[Restricted Zone site]
    127.0.0.1 www.jcount.com
    127.0.0.1 affiliates.jeanharris.com
    127.0.0.1 popup.jeanharris.com
    127.0.0.1 jpedownload.joltid.com
    127.0.0.1 www.joltid.com #[Adware.P2PNetworking]
    127.0.0.1 www1.kliks.nl
    127.0.0.1 www2.kliks.nl
    127.0.0.1 www.kliks.nl
    127.0.0.1 kt3.kliptracker.com
    127.0.0.1 kt4.kliptracker.com
    127.0.0.1 www.kliptracker.com
    127.0.0.1 stats.klsoft.com
    127.0.0.1 www.kmindex.ru
    127.0.0.1 ad.leadcrunch.com
    127.0.0.1 ts1.lexmark.com
    127.0.0.1 www.linkcounter.com
    127.0.0.1 linkexchange.ru
    127.0.0.1 web.linkexchange.ru
    127.0.0.1 www.linkexchange.ru
    127.0.0.1 link4link.com
    127.0.0.1 plus.link4link.com
    127.0.0.1 www.links4trade.com
    127.0.0.1 escati.linkopp.net
    127.0.0.1 www.linkopp.net
    127.0.0.1 js.livehelper.com #[Restricted Zone site]
    127.0.0.1 newbrowse.livehelper.com
    127.0.0.1 liveperson.net
    127.0.0.1 server.iad.liveperson.net #[Data Miner]
    127.0.0.1 www.liveperson.com
    127.0.0.1 adserv.lwmn.net
    127.0.0.1 locators.com #[Adware.Locator]
    127.0.0.1 toolbar.locators.com #[Locators Toolbar]
    127.0.0.1 www.locators.com
    127.0.0.1 www.lords-of-havoc.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
    127.0.0.1 luckyhomepage.com #[search.targetwords.com\1stblaze.com]
    127.0.0.1 www.luckyhomepage.com #[Restricted Zone site]
    127.0.0.1 adverts.lzio.com
    127.0.0.1 newupdates.lzio.com
    127.0.0.1 search.lzio.com
    127.0.0.1 updates.lzio.com #[Downloader-LE][Adware.ZioCom]
    127.0.0.1 make-deal.com
    127.0.0.1 www.madoogali.com #[Madoogali]
    127.0.0.1 go.mailbits.com
    127.0.0.1 mair.net #[Realtracker]
    127.0.0.1 marnet.us #[Downloader-IU]
    127.0.0.1 image.masterstats.com
    127.0.0.1 link.masterstats.com
    127.0.0.1 ads.affiliates.match.com
    127.0.0.1 associmage.match.com
    127.0.0.1 adserver.matchcraft.com
    127.0.0.1 maybeyes.biz #[Trojan.Ducky]
    127.0.0.1 ads.mcafee.com
    127.0.0.1 directads.mcafee.com
    127.0.0.1 ads.mediaodyssey.com
    127.0.0.1 ads.mediaturf.net
    127.0.0.1 banner.meerhits.nl #[IEHIjacker.Meerhits.nl]
    127.0.0.1 pokpok.meerhits.nl
    127.0.0.1 exit.megago.com
    127.0.0.1 www.megago.com #[typo squatter]
    127.0.0.1 www.megaseek.net #[Restricted Zone site]
    127.0.0.1 pubs.mgn.net #[Grolier Network]
    127.0.0.1 www.mgshareware.com #[Adware Bundler]
    127.0.0.1 micorsoft.com
    127.0.0.1 www.micorsoft.com #[typo hijacker]
    127.0.0.1 www.mini-player.com #[5MOF Mini-Player]
    127.0.0.1 banner.missingkids.com
    127.0.0.1 ads.monster.com
    127.0.0.1 adserver.monster.com
    127.0.0.1 adserver.a.in.monster.com
    127.0.0.1 ads.monstermoving.com
    127.0.0.1 cookie.monster.com
    127.0.0.1 mp3today.net
    127.0.0.1 www.mp3yes.com #[C2Media\LOP]
    127.0.0.1 mpamexit.com
    127.0.0.1 www.messagetag.com #[Email tracker]
    127.0.0.1 msgtag.com
    127.0.0.1 img.msgtag.com #[Restricted Zone site]
    127.0.0.1 www.msgtag.com
    127.0.0.1 multi1.rmuk.co.uk #[RealMedia]
    127.0.0.1 mvtracker.com
    127.0.0.1 www.mvtracker.com
    127.0.0.1 mvr3d.net #[NavExcel\n-CASE]
    127.0.0.1 mvr.us #[Parasite.NavExcel]
    127.0.0.1 www.mvr.us
    127.0.0.1 www.myaffiliateprogram.com
    127.0.0.1 www.myarmory.com #[Spyware.Bazookabar]
    127.0.0.1 ads.mydailyhoroscope.net
    127.0.0.1 www.mydailyhoroscope.net #[Adware.Horoscope]
    127.0.0.1 www.myemessenger.com
    127.0.0.1 rm.myoc.com
    127.0.0.1 myhitlogger.com
    127.0.0.1 mypagefinder.com #[Parasite.MyPageFinder]
    127.0.0.1 hit.namimedia.com
    127.0.0.1 ads.nandomedia.com
    127.0.0.1 neededware.com #[Adware.NeededWare]
    127.0.0.1 www.neededware.com
    127.0.0.1 neo-toolbar.com #[InstControl Class][Trojan.NeoToolbar.Installer]
    127.0.0.1 www6.netbroadcaster.com
    127.0.0.1 code.netbreak.com.au
    127.0.0.1 www.netflip.com
    127.0.0.1 money2.netfirms.com #[The Money Toolbar]
    127.0.0.1 partner.netmechanic.com
    127.0.0.1 tracker.netmechanic.com
    127.0.0.1 counter.netmore.net
    127.0.0.1 www.netpoll.nl
    127.0.0.1 servedby.netshelter.net
    127.0.0.1 ads.netsol.com
    127.0.0.1 www.netsearch.info
    127.0.0.1 ads.newsint.co.uk
    127.0.0.1 adq.nextag.com
    127.0.0.1 newiframe.biz #[TROJ_DELF.DS]
    127.0.0.1 www.newiframe.biz
    127.0.0.1 web1.noadware.net
    127.0.0.1 www.noadware.net #[SCAM.Enigma.NoAdware]
    127.0.0.1 nowbox.com
    127.0.0.1 www.nowbox.com #[Parasite.NowBox]
    127.0.0.1 mediatickets.nubela.net
    127.0.0.1 www.nubela.net
    127.0.0.1 nzads.net.nz
    127.0.0.1 okcounter.com
    127.0.0.1 www.okww.net #[Trojan.StartPage.C]
    127.0.0.1 stat.onestat.com
    127.0.0.1 www.onestat.com
    127.0.0.1 one.ru
    127.0.0.1 cnt.one.ru
    127.0.0.1 stats0.one.ru
    127.0.0.1 stats1.one.ru
    127.0.0.1 stats2.one.ru
    127.0.0.1 www.oneandonlynetwork.com #[Ticketmaster]
    127.0.0.1 server1.opentracker.net
    127.0.0.1 www.opinionlab.com
    127.0.0.1 ccc00.opinionlab.com
    127.0.0.1 rate.opinionlab.com
    127.0.0.1 banner.orb.net
    127.0.0.1 www.originalicons.com #[F1 Organizer Class]
    127.0.0.1 geoads.osdn.com
    127.0.0.1 tg-images.osdn.com
    127.0.0.1 otx5.otxresearch.com
    127.0.0.1 otx.ifilm.com #[OTXMedia.dll]
    127.0.0.1 survey.otxresearch.com #[TrojanDownloader.OTXloader.A]
    127.0.0.1 www.otxresearch.com #[OTXMovie Class]
    127.0.0.1 adpopper.outblaze.com #[bargain-buddy.net]
    127.0.0.1 www.p3marketing.com #[Zapspot]
    127.0.0.1 click.payserve.com
    127.0.0.1 www.pc-test.net
    127.0.0.1 ad1.peel.com
    127.0.0.1 ad3.peel.com
    127.0.0.1 ads.peel.com
    127.0.0.1 ad4.peel.com
    127.0.0.1 ads5.peel.com
    127.0.0.1 www.peel.com
    127.0.0.1 www.peel.net
    127.0.0.1 ads.pennyweb.com #[addynamix.com]
    127.0.0.1 banners.pennyweb.com
    127.0.0.1 www.peruvianmarket.com #[Trojan.Beagooz.D][server down?]
    127.0.0.1 ads.photosight.ru
    127.0.0.1 phpadsnew.com
    127.0.0.1 www.phpadsnew.com
    127.0.0.1 ads2.playnet.com
    127.0.0.1 popfind.net #[Adware.Ddpop]
    127.0.0.1 www.popupads.com
    127.0.0.1 www.popupad.net
    127.0.0.1 popupblockade.com #[Parasite.Httper]
    127.0.0.1 www.popupblockade.com
    127.0.0.1 popupmoney.com #[Restricted Zone site]
    127.0.0.1 server01.popupmoney.com
    127.0.0.1 www.popupmoney.com
    127.0.0.1 popadstop.com #[Adware.PopAdStop]
    127.0.0.1 www.popadstop.com
    127.0.0.1 www.popunder.info #[TROJ_CHECKIN.B]
    127.0.0.1 www.popupswappers.com
    127.0.0.1 ad.popupswappers.com
    127.0.0.1 www.popuptop.com
    127.0.0.1 www2.portdetective.com
    127.0.0.1 www.positivebeats.com #[C2Media\LOP]
    127.0.0.1 x0x0l.pp.ru #[BKDR_CCT.A]
    127.0.0.1 www.praize.com #[Adware.Praize]
    127.0.0.1 1.primaryads.com
    127.0.0.1 www.privacyoutpost.com #[Troj/Regldr-A]
    127.0.0.1 www.prtracker.com
    127.0.0.1 www.profitzone.com #[ProfitZONE Adbar]
    127.0.0.1 prolivation.com #[Restricted Zone site]
    127.0.0.1 www.prolivation.com
    127.0.0.1 ads.pro-market.net
    127.0.0.1 www.promo.com.au
    127.0.0.1 www.prutect.com #[Spyware.e2give][Win32.Prutec.A]
    127.0.0.1 www.pstopper.com
    127.0.0.1 ad.sma.punto.net
    127.0.0.1 sma.punto.net
    127.0.0.1 www.pureseeker.com #[C2Media\LOP]
    127.0.0.1 www.pwallet.com #[Restricted Zone site]
    127.0.0.1 rads01.quadrogram.com #[Adware.Quadro][Memwatcher.B][TROJ_PEPER.A]
    127.0.0.1 adserv.quality-channel.de
    127.0.0.1 www.quarterserver.de
    127.0.0.1 questionmarket.com
    127.0.0.1 amch.questionmarket.com
    127.0.0.1 ch.questionmarket.com
    127.0.0.1 survey.questionmarket.com
    127.0.0.1 www.questionmarket.com
    127.0.0.1 download.quickflicks.com #[Parasite.SVAPlayer]
    127.0.0.1 www.qq886.com #[Backdoor.Semes]
    127.0.0.1 ramgo.com #[Restricted Zone site]
    127.0.0.1 www.ramgo.com #[Win32.Startpage.B]
    127.0.0.1 www.autoraskrutka.ru #[Spyware.Acext]
    127.0.0.1 www.raskrutim.ru #[Spyware.Acext]
    127.0.0.1 www.realclicks.com
    127.0.0.1 www.relmaxtop.com
    127.0.0.1 banner.relcom.ru
    127.0.0.1 adservice.recon-networks.com
    127.0.0.1 rightmedia.net
    127.0.0.1 rightstats.com
    127.0.0.1 www.rightstats.com
    127.0.0.1 m.rmbclick.com
    127.0.0.1 www.rgs-rostock.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
    127.0.0.1 track.roiservice.com
    127.0.0.1 ad.ro2cn.com #[Adware.Ro2cn]
    127.0.0.1 www.sandboxer.com #[Adware.Quadro][memorywatcher.com][Memwatcher.B]
    127.0.0.1 www.savehits.com
    127.0.0.1 st.sageanalyst.net
    127.0.0.1 scorpionsearch.com #[W32.Adclicker.C.Trojan]
    127.0.0.1 www.scorpionsearch.com #[x10.com][Trojan.Clicker.NetBuie a-b]
    127.0.0.1 adsremote.scripps.com
    127.0.0.1 te.scripps.com
    127.0.0.1 counter.search.bg
    127.0.0.1 searchalot.com
    127.0.0.1 cards.searchalot.com
    127.0.0.1 mail.searchalot.com
    127.0.0.1 search.searchalot.com
    127.0.0.1 web.searchalot.com
    127.0.0.1 www.searchalot.com #[Adware-Tronix]
    127.0.0.1 searchandclick.com
    127.0.0.1 search.searchandclick.com
    127.0.0.1 www.searchandclick.com #[Browseraid][SearchAndClick]
    127.0.0.1 searchby.net
    127.0.0.1 www.searchby.net #[Ultimate Popup Killer]
    127.0.0.1 searchfst.com #[SFUtility Class][keywordsinc.com]
    127.0.0.1 www.searchfst.com
    127.0.0.1 www.searchgauge.com
    127.0.0.1 www.search-control.com #[TrojanDropper.Win32.Small.ig]
    127.0.0.1 search-itnow.com #[Parasite.AdultLinks]
    127.0.0.1 www.search-itnow.com
    127.0.0.1 www.searchmachine.com
    127.0.0.1 www.searchmagnifier.com
    127.0.0.1 www.searchrelevancy.com
    127.0.0.1 www.searchresult.net #[Parasite.IgetNet]
    127.0.0.1 searchseekfind.com #[Adware.SearchSeekFind]
    127.0.0.1 www.searchseekfind.com
    127.0.0.1 browser.secondpower.com
    127.0.0.1 download.secondpower.com
    127.0.0.1 www1.secondpower.com
    127.0.0.1 www3.secondpower.com #[KB320159]
    127.0.0.1 www.secondpower.com
    127.0.0.1 adserver.securityfocus.com #[RealMedia]
    127.0.0.1 www.selfsurveys.com
    127.0.0.1 www.seehits.com
    127.0.0.1 www.sendtraffic.com
    127.0.0.1 sesso.com
    127.0.0.1 www.sesso.com #[VBS.Biscuit.A@mm]
    127.0.0.1 ds.serving-sys.com
    127.0.0.1 quasar.sitegauge.com
    127.0.0.1 tracker.sitescout.com
    127.0.0.1 advertpro.sitepoint.com
    127.0.0.1 www.sitestatslive.com
    127.0.0.1 www.sitetracking.info #[Naughty Pops]
    127.0.0.1 www.shadowcrew.com #[spam]
    127.0.0.1 adserver.sharewareonline.com #[nictechnetworks.com]
    127.0.0.1 www.shockcounter.com
    127.0.0.1 shopathomeselect.com #[Parasite.ShopAtHomeSelect]
    127.0.0.1 download1.shopathomeselect.com #[ADW_SAHAGENT.A]
    127.0.0.1 downloads.shopathomeselect.com
    127.0.0.1 www.shopathomeselect.com #[Adware.SAHAgent]
    127.0.0.1 skeech.com
    127.0.0.1 www.skeech.com #[Restricted Zone site]
    127.0.0.1 smart2com.net #[Trojan.Autoproxy]
    127.0.0.1 smart-browser.com
    127.0.0.1 update.smart-browser.com #[Parasite.SmartBrowser]
    127.0.0.1 www.smart-browser.com
    127.0.0.1 smartclicks.net
    127.0.0.1 www.smartclicks.net
    127.0.0.1 smarter.com #[Restricted Zone site]
    127.0.0.1 sidebar.smarter.com
    127.0.0.1 www.smarter.com
    127.0.0.1 ads.smni.com
    127.0.0.1 static.smni.com
    127.0.0.1 www.sonyasys.com #[Downloader.Botten]
    127.0.0.1 www1.spaex.com #[searchboss.com]
    127.0.0.1 www.specialoffersnetworks.com
    127.0.0.1 www.spedia.net #[SpediaBar]
    127.0.0.1 www.spyarsenal.com #[Spyware.DesktopSpy][Spyware.FamilyKeylog]
    127.0.0.1 spyferret.com #[OnlinePcFix.SpyFerret]
    127.0.0.1 www.spyferret.com
    127.0.0.1 spyware.com #[roar.com]
    127.0.0.1 www.ssppyy.com #[Spyware.Ssppyy]
    127.0.0.1 www.s-tracking.com
    127.0.0.1 adsintl.starwave.com
    127.0.0.1 c1.statcounter.com
    127.0.0.1 c2.statcounter.com
    127.0.0.1 c3.statcounter.com
    127.0.0.1 www.statcounter.com
    127.0.0.1 js.statistici.ro
    127.0.0.1 log.statistici.ro
    127.0.0.1 s.statistici.ro
    127.0.0.1 www.statomatic.com
    127.0.0.1 reg.stats4all.com
    127.0.0.1 stats4you.com
    127.0.0.1 www.stats4you.com
    127.0.0.1 ctgbn.stellaremperor.com #[Backdoor.Alets]
    127.0.0.1 www.stickypops.com
    127.0.0.1 clix.superclix.de
    127.0.0.1 www.superlogy.com #[AdvWare.ToolBar.VB.b]
    127.0.0.1 sqwire.com #[Adware.Sqwire][Xupiter.Sqwire]
    127.0.0.1 www.sqwire.com #[Parasite.Xupiter][Adware-PornKings]
    127.0.0.1 www.supaseek.com #[Spyware.Supaseek]
    127.0.0.1 rd1.surfernetwork.com #[SurferNETWORK Plugin]
    127.0.0.1 www.surfernetwork.com
    127.0.0.1 surfsidekick.com
    127.0.0.1 dl.surfsidekick.com
    127.0.0.1 www.surfsidekick.com #[Adware.SurfSideKick]
    127.0.0.1 www2.surveyfocus.com
    127.0.0.1 www.surveynetworks.com
    127.0.0.1 www.surveysite.com
    127.0.0.1 www2.survey-poll.com #[microsoft]
    127.0.0.1 swift-look.com #[phishing exploit]
    127.0.0.1 www.symantic.com #[Typo Squatter]
    127.0.0.1 adpick.switchboard.com
    127.0.0.1 adtag.sympatico.ca
    127.0.0.1 www.syspage.com #[pop-up scam]
    127.0.0.1 ad.uk.tangozebra.com
    127.0.0.1 targetsearch.info #[Trojan.StartPage.H]
    127.0.0.1 adult.targetsearch.info
    127.0.0.1 go.targetsearch.info
    127.0.0.1 tat-neftbank.ru #[Backdoor.Berbew.H]
    127.0.0.1 www.tech-marketresearch.com
    127.0.0.1 www.textads.biz
    127.0.0.1 a.tfag.de
    127.0.0.1 ak.tfag.de
    127.0.0.1 theaffiliateprogram.com
    127.0.0.1 myaffiliateprogram.com
    127.0.0.1 www.the-counter.net
    127.0.0.1 adbot.theonion.com
    127.0.0.1 www.thepokerclub.com #[SecurityRisk.ClubPoker]
    127.0.0.1 thesearchmall.com #[Adware.SearchMall]
    127.0.0.1 www.thesearchmall.com
    127.0.0.1 tnc4u.com #[Parasite.DownloadPlus]
    127.0.0.1 new.tnc4u.com
    127.0.0.1 www.tnc4u.com #[Adware.DownloadPlus]
    127.0.0.1 www.toilet.com
    127.0.0.1 ad.tomshardware.com
    127.0.0.1 tooncomics.com #[IEDLL.ToonComics][here4search.com]
    127.0.0.1 www.tooncomics.com #[Downloader.Tooncom][CWS.Aff.Tooncomics]
    127.0.0.1 log.trafic.ro
    127.0.0.1 storage.trafic.ro
    127.0.0.1 tool4ame.com #[TROJ_GOLID.A][Adware.IAGold]
    127.0.0.1 www.toolshack.com
    127.0.0.1 ads.toplayerserver.com
    127.0.0.1 www1.toplayerserver.com
    127.0.0.1 www.toplayerserver.com
    127.0.0.1 toprebates.com #[webrebates]
    127.0.0.1 www.toprebates.com
    127.0.0.1 stat.toprefsys.com
    127.0.0.1 www.top-search.com #[Adware-SSF.dr]
    127.0.0.1 ad.topstat.com
    127.0.0.1 nl.topstat.com #[Restricted Zone site]
    127.0.0.1 s26.topstat.com
    127.0.0.1 xl.topstat.com
    127.0.0.1 ads.track-star.com
    127.0.0.1 adserver.track-star.com
    127.0.0.1 geo2.track-star.com
    127.0.0.1 www.track-star.com
    127.0.0.1 tradeexit.com
    127.0.0.1 www.tradeexit.com #[Parasite.Winupie]
    127.0.0.1 www.trafficbeamer.nl
    127.0.0.1 trafficg.com #[Restricted Zone site]
    127.0.0.1 www.trafficg.com
    127.0.0.1 ad.trafficmp.com
    127.0.0.1 images.trafficmp.com
    127.0.0.1 t.trafficmp.com
    127.0.0.1 www.trafficflame.com
    127.0.0.1 trafficfile.com
    127.0.0.1 www.trafficfile.com
    127.0.0.1 trackyourstats.com
    127.0.0.1 trafficmarketplace.com
    127.0.0.1 get.trafficmultiplier.com
    127.0.0.1 go.trafficmultiplier.com
    127.0.0.1 goto.trafficmultiplier.com
    127.0.0.1 a.tribalfusion.com
    127.0.0.1 cdn1.tribalfusion.com
    127.0.0.1 m.tribalfusion.com
    127.0.0.1 tribalfusion.speedera.net
    127.0.0.1 ads.tucows.com
    127.0.0.1 counts.tucows.com
    127.0.0.1 google.tucows.com
    127.0.0.1 www.turbomemorycharger.com #[Adware.Fapi]
    127.0.0.1 ads.ucomics.com
    127.0.0.1 image.ugo.com
    127.0.0.1 mediamgr.ugo.com
    127.0.0.1 www.ukbanners.com
    127.0.0.1 ultimatecounter.com
    127.0.0.1 www.ultimatecounter.com
    127.0.0.1 www.ultimatepopupkiller.com #[searchby.net]
    127.0.0.1 www.ultraload.net #[MHTMLRedir.Exploit]
    127.0.0.1 adcontroller.unicast.com
    127.0.0.1 ads.unlimitedbanners.com
    127.0.0.1 ads1.updated.com
    127.0.0.1 www.updatenow.org #[Messenger Pop-up]
    127.0.0.1 www.upgradenow.org
    127.0.0.1 www.upp2ono41xi9rman2.com #[TrojanDropper.Small.LG]
    127.0.0.1 url.biz.ua #[Download.Ject.B]
    127.0.0.1 config.url404.com #[Parasite.Httper]
    127.0.0.1 urlblaze.com #[Adware.TurboDownload]
    127.0.0.1 www.urlblaze.com #[Adware Bundler]
    127.0.0.1 www.urlblaze.net #[IEDriver][ADW_RULEDOR.C]
    127.0.0.1 usachoice.net
    127.0.0.1 ads.valuead.com #[Restricted Zone site]
    127.0.0.1 adnetintads.valuead.com
    127.0.0.1 banners.valuead.com
    127.0.0.1 cs.valuead.com
    127.0.0.1 oin.valuead.com #[outerinfo.com]
    127.0.0.1 servedby.valuead.com
    127.0.0.1 ad.valuehost.ru
    127.0.0.1 image.versiontracker.com
    127.0.0.1 spinbox.versiontracker.com
    127.0.0.1 ads.vesperexchange.com
    127.0.0.1 www.vesperexchange.com
    127.0.0.1 cinnam.vibrahost.com #[PWSteal.Revcuss.C][Win32.Revcuss.C]
    127.0.0.1 vivi.vibrahost.com #[PWSteal.Revcuss.A]
    127.0.0.1 dns2010.vicp.net #[Backdoor.Tumag]
    127.0.0.1 uygurman.vicp.net #[Trojan.Riler][Troj/Riler-B]
    127.0.0.1 oas.villagevoice.com
    127.0.0.1 www.vikord.com #[Download.Ject.C]
    127.0.0.1 visit-link.com
    127.0.0.1 www.voonda.com #[Spyware.TAFbar]
    127.0.0.1 generic.vpptechnologies.com
    127.0.0.1 images2.vpptechnologies.com
    127.0.0.1 main.vpptechnologies.com
    127.0.0.1 msxml.vpptechnologies.com
    127.0.0.1 static.vpptechnologies.com #[hotsearchbar.com]
    127.0.0.1 xml.vpptechnologies.com #[BlazeFind]
    127.0.0.1 www.vstats.net
    127.0.0.1 ads.vnuemedia.com
    127.0.0.1 sevenc.vze.com #[VBS.Powcox@mm]
    127.0.0.1 www.w3exit.com
    127.0.0.1 ng3.ads.warnerbros.com
    127.0.0.1 wazam.com
    127.0.0.1 www.wazam.com #[Parasite.Wazam]
    127.0.0.1 wcft.net #[Parasite.LinkReplacer]
    127.0.0.1 www.wcft.net
    127.0.0.1 ads.weather.com
    127.0.0.1 ads.webattack.com
    127.0.0.1 webcounter.com
    127.0.0.1 www.webcounter.com
    127.0.0.1 ads.webhosting.info
    127.0.0.1 www.weblink.ru #[server down?]
    127.0.0.1 adv.webmd.com
    127.0.0.1 webhits.de
    127.0.0.1 banners.webmasterplan.com
    127.0.0.1 stat.webmedia.pl
    127.0.0.1 bannervip.web1000.com
    127.0.0.1 ads.webads360.com
    127.0.0.1 clickcash.webpower.com
    127.0.0.1 orders.webpower.com
    127.0.0.1 img.webring.com
    127.0.0.1 img1.webring.com
    127.0.0.1 ads.webshots.com
    127.0.0.1 websponsors.com
    127.0.0.1 a.websponsors.com
    127.0.0.1 ads.websponsors.com
    127.0.0.1 g.websponsors.com
    127.0.0.1 www.websponsors.com
    127.0.0.1 www.webstars2000.com
    127.0.0.1 hits.webstat.com
    127.0.0.1 www.wenksdisdkjeilsow.com #[Parasite.AutoStartup][Download.Trojan]
    127.0.0.1 wetrack.it
    127.0.0.1 st.wetrack.it
    127.0.0.1 www.wgutv.com #[Adware.BuddyLinks]
    127.0.0.1 partner1.whatsfind.com
    127.0.0.1 www.whatsfind.com #[HTML_STARTPAGE.C]
    127.0.0.1 www.win-fix.com #[Rogue/Suspect]
    127.0.0.1 window1.com
    127.0.0.1 ads.winhelp2002.com
    127.0.0.1 ads.winsite.com
    127.0.0.1 winstream.com #[Parasite.Searchex]
    127.0.0.1 www.winstream.com
    127.0.0.1 clicktrack.wnu.com
    127.0.0.1 www.wowweb.net #[Adware.WWWBar]
    127.0.0.1 www.wurldmedia.com #[Adware.Wurldmedia][WurldMedia][KB321923]
    127.0.0.1 x0x.biz
    127.0.0.1 www.x0x.biz #[Backdoor.Berbew.D]
    127.0.0.1 xtra.co.nz
    127.0.0.1 nedstats.xs4all.nl
    127.0.0.1 hit1.xstats.com
    127.0.0.1 view1.xstats.com
    127.0.0.1 ads.xtra.co.nz
    127.0.0.1 bs.yandex.ru
    127.0.0.1 counter.yadro.ru
    127.0.0.1 crsky2004.yeah.net #[Backdoor.Singu.B]
    127.0.0.1 yourspecialoffers.com #[FavoriteMan]
    127.0.0.1 www.yourspecialoffers.com
    127.0.0.1 ysearchus.com #[Parasite.TinyBar]
    127.0.0.1 www.ysearchus.com
    127.0.0.1 zuvio.com #[UCSearch.ucUCSearch]
    127.0.0.1 www.zuvio.com #[Adware.OpenSite][OpenSite]
    127.0.0.1 bannerads.zwire.com
    127.0.0.1 www.0stats.com
    127.0.0.1 cc.1asphost.com #[Trojan.Bansap]
    127.0.0.1 www.123counts.com #[hitslink.com]
    127.0.0.1 www.123mania.com #[SrchHook Class][Parasite.123Mania]
    127.0.0.1 123stat.com
    127.0.0.1 1234.2bro.com #[Adware.Satbo]
    127.0.0.1 www.241hits.com
    127.0.0.1 up.isp.2ch.net #[Trojan.Upchan]
    127.0.0.1 www.321search.com #[SearchAssistant.dll]
    127.0.0.1 ct.360i.com
    127.0.0.1 www.ff.iij4u.or.jp #[Trojan.Upchan]
    127.0.0.1 download.35mb.com #[impregnable.net]
    127.0.0.1 www.35mb.com #[download_35mb_com.applet]
    127.0.0.1 1000stars.ru
    127.0.0.1 xxxwwwjjjhd.20forfree.com #[W32.Autex.Worm]
    127.0.0.1 www.xxxwwwjjjhd.20forfree.com
    127.0.0.1 ad.37.com
    127.0.0.1 2jm.com
    127.0.0.1 7adpower.com
    127.0.0.1 www.7adpower.com #[Svezia.Dialer][VacPro.UserControl1]
    127.0.0.1 7am.com
    127.0.0.1 www.777search.com #[LOP]
    127.0.0.1 ad2.163.com
    127.0.0.1 adclient.163.com
    127.0.0.1 popme.163.com
    127.0.0.1 smtp.163.com #[Trojan.PSW.Ajim_bbs]
    127.0.0.1 ajim.delphibbs.com #[Trojan.PSW.Ajim_bbs]
    127.0.0.1 14713804A.l2m.net #[LiveTechnology]
    127.0.0.1 banner.50megs.com
    127.0.0.1 guannan.3322.net #[Restricted Zone site]
    127.0.0.1 www.fan8.com
    127.0.0.1 banners.dot.tk
    127.0.0.1 topsites.us #[Parasite.eStart]
    127.0.0.1 0-ol1oiz-xolxii1-oxli10ozl1l1-o-l-11-iizxp-l-0o-oll11iz0oil-ol.com
    127.0.0.1 www.123banners.com
    127.0.0.1 ftp.123banners.com
    127.0.0.1 123go.com
    127.0.0.1 ns1.123go.net
    127.0.0.1 n-case.com
    127.0.0.1 www.n-case.com
    127.0.0.1 ads.180solutions.com
    127.0.0.1 ax.180solutions.com #[180SAInstaller Class]
    127.0.0.1 bis.180solutions.com #[nCaseInstaller Class]
    127.0.0.1 bisads.180solutions.com
    127.0.0.1 downloads.180solutions.com
    127.0.0.1 installs.180solutions.com
    127.0.0.1 ping.180solutions.com
    127.0.0.1 tv.180solutions.com
    127.0.0.1 www.180solutions.com #[Parasite.nCase]
    127.0.0.1 www.180searchassistant.com #[Adware.180Search]
    127.0.0.1 www.surfassistant.com #[Adware.SurfAssistant]
    127.0.0.1 downloads.zango.com
    127.0.0.1 games.zango.com
    127.0.0.1 infinity.zango.com #[ZangoInstaller Class]
    127.0.0.1 messenger.zango.com
    127.0.0.1 showtimes.zango.com
    127.0.0.1 www.zango.com
    127.0.0.1 www.zangomessenger.com
    127.0.0.1 www.zangoshowtimes.com
    127.0.0.1 address.3721.com
    127.0.0.1 agent.3721.com
    127.0.0.1 assistant.3721.com
    127.0.0.1 cns.3721.com
    127.0.0.1 cnsmin.3721.com
    127.0.0.1 corp.3721.com
    127.0.0.1 dir.3721.com
    127.0.0.1 download.3721.com
    127.0.0.1 express.3721.com
    127.0.0.1 img.3721.com
    127.0.0.1 magic.3721.com
    127.0.0.1 mark.3721.com
    127.0.0.1 meta.3721.com
    127.0.0.1 msearch.3721.com
    127.0.0.1 sbox.3721.com
    127.0.0.1 shanghai.3721.com
    127.0.0.1 sina.3721.com
    127.0.0.1 user.3721.com
    127.0.0.1 wap.3721.com
    127.0.0.1 www.3721.com #[Adware.Chinet][ADW_CNSMIN.A]
    127.0.0.1 yahoo.3721.com
    127.0.0.1 3721.com
    127.0.0.1 download.feiyang.com
    127.0.0.1 adtracker.411web.com
    127.0.0.1 hits.411web.com
    127.0.0.1 overture.411web.com
    127.0.0.1 static.411web.com
    127.0.0.1 xml.411web.com
    127.0.0.1 search.letssearch.com
    127.0.0.1 search2.letssearch.com
    127.0.0.1 www.letssearch.com #[BrowserAid.LetsSearch]
    127.0.0.1 7search.com #[Parasite.7FaSSt Search]
    127.0.0.1 www.7search.com
    127.0.0.1 fstrack.7search.com
    127.0.0.1 impression.7search.com
    127.0.0.1 img.7meta.com
    127.0.0.1 www.7metasearch.com
    127.0.0.1 bannerx.adtactics.com
    127.0.0.1 adtactics.com
    127.0.0.1 www.adtactics.com
    127.0.0.1 ajokeaday.com
    127.0.0.1 bannersxchange.com
    127.0.0.1 img.bannersxchange.com
    127.0.0.1 www.linkstoyou.com
    127.0.0.1 www.payperranking.com
    127.0.0.1 www.pay-per-search.com
    127.0.0.1 paypertext.com
    127.0.0.1 predictivesearch.com
    127.0.0.1 tracking.roispy.com
    127.0.0.1 www.roispy.com
    127.0.0.1 tracking.spiderbait.com
    127.0.0.1 www.spiderbait.com
    127.0.0.1 advertisingagent.com
    127.0.0.1 clicks.about.com
    127.0.0.1 f.about.com
    127.0.0.1 home.about.com
    127.0.0.1 js.get.about.com
    127.0.0.1 images.about.com
    127.0.0.1 lunafetch.about.com
    127.0.0.1 pixel3.about.com
    127.0.0.1 sprinks-clicks.about.com
    127.0.0.1 statistics.s5.com
    127.0.0.1 ad.aboutwebservices.com
    127.0.0.1 abroadsoftware.com #[EzSearchBar]
    127.0.0.1 www.exits.ro
    127.0.0.1 superwebsearch.com #[Parasite.ILookup][Adware.ILookup]
    127.0.0.1 www.superwebsearch.com
    127.0.0.1 adops.adbureau.net
    127.0.0.1 etype.adbureau.net
    127.0.0.1 granada.adbureau.net
    127.0.0.1 www.adbureau.net
    127.0.0.1 accipiter.speedera.net
    127.0.0.1 ad-blaster.com
    127.0.0.1 www.ad-blaster.com
    127.0.0.1 promote4profit.com
    127.0.0.1 www.promote4profit.com
    127.0.0.1 addfreestats.com
    127.0.0.1 top.addfreestats.com
    127.0.0.1 www.addfreestats.com
    127.0.0.1 www.3dstats.com
    127.0.0.1 www1.addfreestats.com
    127.0.0.1 www2.addfreestats.com
    127.0.0.1 www3.addfreestats.com
    127.0.0.1 adlogix.com #[InPop.InControl][IEEnhancer]
    127.0.0.1 lasagne.adlogix.com
    127.0.0.1 publisher.adlogix.com
    127.0.0.1 traffic.adlogix.com
    127.0.0.1 trafficsource.adlogix.com
    127.0.0.1 www.adlogix.com
    127.0.0.1 getpopped.com
    127.0.0.1 www.getpopped.com
    127.0.0.1 hitgo.com #[IPU][InPop.InControl]
    127.0.0.1 www.hitgo.com
    127.0.0.1 popmonster.com #[IEFeature Class]
    127.0.0.1 www.popmonster.com #[TROJ_POPMON.A]
    127.0.0.1 r2.trafficserverstats.com
    127.0.0.1 ads.adorigin.com
    127.0.0.1 dev.adorigin.com
    127.0.0.1 www.adorigin.com
    127.0.0.1 blowsearch.com
    127.0.0.1 msxml.blowsearch.com
    127.0.0.1 web.blowsearch.com #[infospace.com]
    127.0.0.1 www.blowsearch.com
    127.0.0.1 cb.adprofile.net
    127.0.0.1 content.adprofile.net
    127.0.0.1 tx.adprofile.net
    127.0.0.1 w2-ver.adprofile.net
    127.0.0.1 adteractive.com
    127.0.0.1 www.adteractive.com
    127.0.0.1 adtegrity.com
    127.0.0.1 www.adtegrity.com
    127.0.0.1 webalize.com #[SearchCentrix][VisiCom.SearchCentric]
    127.0.0.1 toolbar.webalize.com #[downloads.searchcentrix.com]
    127.0.0.1 www.webalize.com #[Visicom Media Toolbar]
    127.0.0.1 webalize.net
    127.0.0.1 www.webalize.net
    127.0.0.1 webalize.mygeek.com
    127.0.0.1 advertisementbanners.com
    127.0.0.1 ads.specificclick.com
    127.0.0.1 www.specificclick.com
    127.0.0.1 specificpop.com
    127.0.0.1 ads.specificpop.com
    127.0.0.1 banners.specificpop.com
    127.0.0.1 www.specificpop.com
    127.0.0.1 adopt.specificclick.net
    127.0.0.1 images.specificclick.net
    127.0.0.1 image.adjuggler.com
    127.0.0.1 rotator.adjuggler.com
    127.0.0.1 www.adjuggler.com
    127.0.0.1 thruport.com
    127.0.0.1 adj54.thruport.com
    127.0.0.1 imageserver1.thruport.com
    127.0.0.1 www.thruport.com
    127.0.0.1 alset.com #[WIN32/HXDL AL]
    127.0.0.1 www.alset.com
    127.0.0.1 aveo.com
    127.0.0.1 www.aveo.com #[server down?]
    127.0.0.1 allcybersearch.com #[REG_STARTPAGE.A]
    127.0.0.1 www.allcybersearch.com
    127.0.0.1 amigeek.com
    127.0.0.1 www.amigeek.com
    127.0.0.1 clickyestoenter.net
    127.0.0.1 www.clickyestoenter.net
    127.0.0.1 www.gay50.com
    127.0.0.1 gocybersearch.com
    127.0.0.1 www.gocybersearch.com
    127.0.0.1 www.hotelxxxcams.com
    127.0.0.1 hotpopup.com
    127.0.0.1 search.hotpopup.com
    127.0.0.1 www.hotpopup.com
    127.0.0.1 hotsearchbox.com #[JAVA_STARTPAGE.F]
    127.0.0.1 www.hotsearchbox.com
    127.0.0.1 i--search.com
    127.0.0.1 www.i--search.com #[StartPage-FN]
    127.0.0.1 jethomepage.com #[JS.Exception.Exploit]
    127.0.0.1 www.jethomepage.com #[Troj/JetHome-B]
    127.0.0.1 jetseeker.com #[CWS.Bootconf]
    127.0.0.1 www.jetseeker.com
    127.0.0.1 searchxl.com #[Adware.ZeroPopUpBar]
    127.0.0.1 www.searchxl.com
    127.0.0.1 tinybar.com
    127.0.0.1 www.tinybar.com #[Parasite.TinyBar]
    127.0.0.1 topsearcher.com #[JV/Goplanet]
    127.0.0.1 www.topsearcher.com #[Troj/JetHome-J]
    127.0.0.1 trixscripts.com
    127.0.0.1 www.trixscripts.com
    127.0.0.1 zeropopup.com #[Parasite.ZeroPopUp]
    127.0.0.1 www.zeropopup.com #[Tellafriend.Trojan]
    127.0.0.1 znext.com #[JS_TRAFFICHBAR.A][Parasite.TinyBar]
    127.0.0.1 www.znext.com #[Parasite.ZeroPopUp][App/P0P-A]
    127.0.0.1 adpowerzone.com
    127.0.0.1 ads.adpowerzone.com
    127.0.0.1 easy.adpowerzone.com
    127.0.0.1 ss.adpowerzone.com
    127.0.0.1 tb.adpowerzone.com
    127.0.0.1 tb-static.adpowerzone.com #[Adware.Websearch]
    127.0.0.1 www.adpowerzone.com #[Adware.Searchexplorer]
    127.0.0.1 adserver.adsincontext.com
    127.0.0.1 ns1.adsincontext.com
    127.0.0.1 srv01.adsincontext.com
    127.0.0.1 srv02.adsincontext.com
    127.0.0.1 srv03.adsincontext.com
    127.0.0.1 srv04.adsincontext.com
    127.0.0.1 srv05.adsincontext.com
    127.0.0.1 srv07.adsincontext.com
    127.0.0.1 adgoblin.com #[Adware.AdGoblin]
    127.0.0.1 crossroad.adgoblin.com
    127.0.0.1 www.adgoblin.com #[AdGoblin.foontext]
    127.0.0.1 adforce.adtech.de
    127.0.0.1 adserver.adtech.de
    127.0.0.1 adserv003.adtech.de
    127.0.0.1 imageserv.adtech.de
    127.0.0.1 livingnet.adtech.de
    127.0.0.1 cdn1.adsdk.com
    127.0.0.1 cdn2.adsdk.com #[VirtualBouncer]
    127.0.0.1 advertising.com
    127.0.0.1 adserve.advertising.com
    127.0.0.1 bannerfarm.ace.advertising.com
    127.0.0.1 demo.advertising.com
    127.0.0.1 opera1-servedby.advertising.com
    127.0.0.1 servedby.advertising.com
    127.0.0.1 rd.advertising.com
    127.0.0.1 wap.advertising.com
    127.0.0.1 www.advertising.com
    127.0.0.1 clk4.com
    127.0.0.1 www.clk4.com
    127.0.0.1 www.contextualclicks.com
    127.0.0.1 fastseeker.com #[Adware.FastSeek]
    127.0.0.1 www.fastseeker.com
    127.0.0.1 spyblast.com #[Parasite.SpyBlast]
    127.0.0.1 www.spyblast.com #[SBFullInst Control]
    127.0.0.1 ads.ign.com
    127.0.0.1 adserver.ign.com
    127.0.0.1 t.ign.com
    127.0.0.1 tracker.ign.com
    127.0.0.1 adserver.snowball.com
    127.0.0.1 polls.snowball.com
    127.0.0.1 scripts.snowball.com
    127.0.0.1 t.snowball.com
    127.0.0.1 tracker.snowball.com
    127.0.0.1 altnet.com
    127.0.0.1 file.altnet.com
    127.0.0.1 media.altnet.com
    127.0.0.1 ts.altnet.com
    127.0.0.1 tss.altnet.com
    127.0.0.1 pm.altnet.com
    127.0.0.1 www.altnet.com
    127.0.0.1 www.altnetp2p.com
    127.0.0.1 brilliantdigital.com #[Parasite.BDE]
    127.0.0.1 st.brilliantdigital.com
    127.0.0.1 www.brilliantdigital.com
    127.0.0.1 b3d.com
    127.0.0.1 www.b3d.com
    127.0.0.1 bde3d.com
    127.0.0.1 xiti.com
    127.0.0.1 loga.xiti.com
    127.0.0.1 logc13.xiti.com
    127.0.0.1 logi6.xiti.com
    127.0.0.1 logi7.xiti.com
    127.0.0.1 logv3.xiti.com
    127.0.0.1 logv18.xiti.com
    127.0.0.1 logv20.xiti.com
    127.0.0.1 logp.xiti.com
    127.0.0.1 trafic.xiti.com
    127.0.0.1 www.xiti.com
    127.0.0.1 adchannel.contextplus.net #[Parasite.AproposMedia]
    127.0.0.1 www.contextplus.net
    127.0.0.1 www.contextplus.com
    127.0.0.1 adv.peopleonpage.com
    127.0.0.1 app.peopleonpage.com
    127.0.0.1 download.peopleonpage.com #[POP Loader]
    127.0.0.1 envolo.peopleonpage.com
    127.0.0.1 img.peopleonpage.com
    127.0.0.1 srv.peopleonpage.com #[Spyware.Apropos.B]
    127.0.0.1 www.peopleonpage.com #[Apropos.bho][PeopleOnPage.Apropos]
    127.0.0.1 image.avenuea.com
    127.0.0.1 www.avenuea.com
    127.0.0.1 www.atdmt.com
    127.0.0.1 click.atdmt.com
    127.0.0.1 clk.atdmt.com
    127.0.0.1 spd.atdmt.com
    127.0.0.1 spe.atdmt.com
    127.0.0.1 switch.atdmt.com
    127.0.0.1 view.atdmt.com
    127.0.0.1 atlasdmt.com
    127.0.0.1 www.atlasdmt.com
    127.0.0.1 www.avenueainc.com
    127.0.0.1 active-alert-server.com
    127.0.0.1 www.active-alert-server.com
    127.0.0.1 amnv.net
    127.0.0.1 www.amnv.net
    127.0.0.1 avenuemedia.com
    127.0.0.1 www.avenuemedia.com
    127.0.0.1 climaxbucks.com #[ClimaxBucks.InternetOptimizer]
    127.0.0.1 cdn.climaxbucks.com
    127.0.0.1 mt1.climaxbucks.com
    127.0.0.1 mt23.climaxbucks.com
    127.0.0.1 xbs.climaxbucks.com
    127.0.0.1 www.climaxbucks.com
    127.0.0.1 xbs.cocktailcash.com
    127.0.0.1 cocktailcash.com
    127.0.0.1 www.cocktailcash.com
    127.0.0.1 ads.internet-optimizer.com #[Parasite.Internet Optimizer]
    127.0.0.1 internet-optimizer.com #[Downloader.Dyfcia.F]
    127.0.0.1 configure.internet-optimizer.com
    127.0.0.1 help.internet-optimizer.com
    127.0.0.1 www.internet-optimizer.com #[Adware.NetOptimizer]
    127.0.0.1 www.lunasearch.com
    127.0.0.1 movies-etc.com
    127.0.0.1 cdn.movies-etc.com
    127.0.0.1 www.movies-etc.com
    127.0.0.1 yoogee.com #[Parasite.Internet Optimizer]
    127.0.0.1 www.yoogee.com
    127.0.0.1 c.azjmp.com
    127.0.0.1 images.azoogleads.com
    127.0.0.1 images.azooimages.com
    127.0.0.1 www.azoogleads.com
    127.0.0.1 www.giftfox.com
    127.0.0.1 images.imgehost.com
    127.0.0.1 c.qckjmp.com
    127.0.0.1 google.begin2search.com
    127.0.0.1 toolbar.begin2search.com
    127.0.0.1 www.begin2search.com #[Adware.Begin2search][iiittt Class]
    127.0.0.1 click2findnow.com
    127.0.0.1 www.click2findnow.com
    127.0.0.1 desktoptraffic.net
    127.0.0.1 toolbar.desktoptraffic.net
    127.0.0.1 popupsearches.com
    127.0.0.1 www.popupsearches.com
    127.0.0.1 www.eaffiliateinc.com
    127.0.0.1 globalwebsearch.com #[Parasite.ILookup]
    127.0.0.1 toolbar.globalwebsearch.com #[I-Lookup.GWS]
    127.0.0.1 toolbar2.globalwebsearch.com #[iiittt Class]
    127.0.0.1 www.globalwebsearch.com #[Adware.ILookup]
    127.0.0.1 hotwebsearch.com
    127.0.0.1 www.hotwebsearch.com
    127.0.0.1 worldanywhere.com
    127.0.0.1 toolbar.worldanywhere.com
    127.0.0.1 www.worldanywhere.com
    127.0.0.1 adcounter.theglobeandmail.com
    127.0.0.1 adrates.theglobeandmail.com
    127.0.0.1 ads.globeandmail.com
    127.0.0.1 ads1.theglobeandmail.com
    127.0.0.1 visit.theglobeandmail.com
    127.0.0.1 www1.theglobeandmail.com
    127.0.0.1 adbot.com
    127.0.0.1 w1.adbot.com
    127.0.0.1 www.adbot.com
    127.0.0.1 counter.bloke.com
    127.0.0.1 www1.counter.bloke.com
    127.0.0.1 www3.counter.bloke.com
    127.0.0.1 www4.counter.bloke.com
    127.0.0.1 www5.counter.bloke.com
    127.0.0.1 www6.counter.bloke.com
    127.0.0.1 www7.counter.bloke.com
    127.0.0.1 counterbot.com
    127.0.0.1 cb1.counterbot.com
    127.0.0.1 ak.bluestreak.com
    127.0.0.1 ca1.bluestreak.com
    127.0.0.1 s0.bluestreak.com
    127.0.0.1 s0b.bluestreak.com
    127.0.0.1 s1.bluestreak.com
    127.0.0.1 s2.bluestreak.com
    127.0.0.1 s3.bluestreak.com
    127.0.0.1 s4.bluestreak.com
    127.0.0.1 s5.bluestreak.com
    127.0.0.1 s6.bluestreak.com
    127.0.0.1 s7.bluestreak.com
    127.0.0.1 s8.bluestreak.com
    127.0.0.1 www.bluestreak.com
    127.0.0.1 download.bonzi.com
    127.0.0.1 images.bonzi.com
    127.0.0.1 www.bonzi.com
    127.0.0.1 www.bonzibuddy.com
    127.0.0.1 bravenet.com
    127.0.0.1 adserv.bravenet.com
    127.0.0.1 images.bravenet.com
    127.0.0.1 linktrack.bravenet.com
    127.0.0.1 pub1.bravenet.com
    127.0.0.1 www.bravenet.com
    127.0.0.1 belgiandip.com #[ITS Protocol exploit]
    127.0.0.1 www.belgiandip.com
    127.0.0.1 fassia.net #[Parasite.AutoSearch]
    127.0.0.1 www.fassia.net
    127.0.0.1 flipperkeys.com
    127.0.0.1 www.flipperkeys.com
    127.0.0.1 www.illtemperedguppys.com
    127.0.0.1 manipulatingtheicesurface.com
    127.0.0.1 www.manipulatingtheicesurface.com
    127.0.0.1 www.no-beba-el-agua.com
    127.0.0.1 smokeandapancake.org #[Adware.Winpup]
    127.0.0.1 www.smokeandapancake.org #[AdClicker-O][Troj/Psyme-C]
    127.0.0.1 www.undergroundlair.net #[Troj/AdClick-N]
    127.0.0.1 www2.undergroundlair.net
    127.0.0.1 www.00z70az77mnsa-00swj1zzprh.com #[www2.undergroundlair.net]
    127.0.0.1 www.funcionamiento-con-la-tijera.com #[undergroundlair.net]
    127.0.0.1 www.pshnw6510990nmo-34nue7700.net
    127.0.0.1 burstmedia.com
    127.0.0.1 web.burstmedia.com
    127.0.0.1 roscoe.burstmedia.com
    127.0.0.1 ads.burstnet.com
    127.0.0.1 gifs.burstnet.com
    127.0.0.1 sj.burstnet.com
    127.0.0.1 te.burstnet.com
    127.0.0.1 www.burstnet.com
    127.0.0.1 www2.burstnet.com
    127.0.0.1 www3.burstnet.com
    127.0.0.1 www4.burstnet.com
    127.0.0.1 www5.burstnet.com
    127.0.0.1 www6.burstnet.com
    127.0.0.1 www.burstnet.akadns.net
    127.0.0.1 casalemedia.com
    127.0.0.1 as.casalemedia.com
    127.0.0.1 asg01.casalemedia.com
    127.0.0.1 asg02.casalemedia.com
    127.0.0.1 asg03.casalemedia.com
    127.0.0.1 asg04.casalemedia.com
    127.0.0.1 asg05.casalemedia.com
    127.0.0.1 asg06.casalemedia.com
    127.0.0.1 asg07.casalemedia.com
    127.0.0.1 asg08.casalemedia.com
    127.0.0.1 asg09.casalemedia.com
    127.0.0.1 asg10.casalemedia.com
    127.0.0.1 asg11.casalemedia.com
    127.0.0.1 asg12.casalemedia.com
    127.0.0.1 asg13.casalemedia.com
    127.0.0.1 asg14.casalemedia.com
    127.0.0.1 asg15.casalemedia.com
    127.0.0.1 asg16.casalemedia.com
    127.0.0.1 asg17.casalemedia.com
    127.0.0.1 asg18.casalemedia.com
    127.0.0.1 asg19.casalemedia.com
    127.0.0.1 asg20.casalemedia.com
    127.0.0.1 asg21.casalemedia.com
    127.0.0.1 asg22.casalemedia.com
    127.0.0.1 asg23.casalemedia.com
    127.0.0.1 asg24.casalemedia.com
    127.0.0.1 asg25.casalemedia.com
    127.0.0.1 asg26.casalemedia.com
    127.0.0.1 asg27.casalemedia.com
    127.0.0.1 asg28.casalemedia.com
    127.0.0.1 asg29.casalemedia.com
    127.0.0.1 asg30.casalemedia.com
    127.0.0.1 asg31.casalemedia.com
    127.0.0.1 asg32.casalemedia.com
    127.0.0.1 asg33.casalemedia.com
    127.0.0.1 asg34.casalemedia.com
    127.0.0.1 asg35.casalemedia.com
    127.0.0.1 asg36.casalemedia.com
    127.0.0.1 asg37.casalemedia.com
    127.0.0.1 asg38.casalemedia.com
    127.0.0.1 asg39.casalemedia.com
    127.0.0.1 asg40.casalemedia.com
    127.0.0.1 asg41.casalemedia.com
    127.0.0.1 asg42.casalemedia.com
    127.0.0.1 asg43.casalemedia.com
    127.0.0.1 asg44.casalemedia.com
    127.0.0.1 asg45.casalemedia.com
    127.0.0.1 asg46.casalemedia.com
    127.0.0.1 asg47.casalemedia.com
    127.0.0.1 asg48.casalemedia.com
    127.0.0.1 asg49.casalemedia.com
    127.0.0.1 asg50.casalemedia.com
    127.0.0.1 asg51.casalemedia.com
    127.0.0.1 asg52.casalemedia.com
    127.0.0.1 aslg01.casalemedia.com
    127.0.0.1 aslg02.casalemedia.com
    127.0.0.1 aslg03.casalemedia.com
    127.0.0.1 aslg04.casalemedia.com
    127.0.0.1 aslg05.casalemedia.com
    127.0.0.1 aslg06.casalemedia.com
    127.0.0.1 aslg07.casalemedia.com
    127.0.0.1 aslg08.casalemedia.com
    127.0.0.1 aslg09.casalemedia.com
    127.0.0.1 aslg10.casalemedia.com
    127.0.0.1 c.casalemedia.com
    127.0.0.1 i.casalemedia.com
    127.0.0.1 is.casalemedia.com
    127.0.0.1 isg01.casalemedia.com
    127.0.0.1 isg02.casalemedia.com
    127.0.0.1 isg03.casalemedia.com
    127.0.0.1 isg04.casalemedia.com
    127.0.0.1 isg05.casalemedia.com
    127.0.0.1 isg06.casalemedia.com
    127.0.0.1 isg07.casalemedia.com
    127.0.0.1 isg08.casalemedia.com
    127.0.0.1 isg09.casalemedia.com
    127.0.0.1 isg10.casalemedia.com
    127.0.0.1 r.casalemedia.com
    127.0.0.1 www.casalemedia.com
    127.0.0.1 www.spywarestormer.com #[CInstall Class][Zoombar Object][Rogue/Suspect]
    127.0.0.1 active-max.com
    127.0.0.1 search.active-max.com
    127.0.0.1 www.active-max.com
    127.0.0.1 www.dialup2.com
    127.0.0.1 maxexp.com
    127.0.0.1 www.mp3search.com
    127.0.0.1 www.rub.to
    127.0.0.1 spawnet.com
    127.0.0.1 www.spawnet.com
    127.0.0.1 installdollars.com #[affiliate]
    127.0.0.1 www2.installdollars.com #[Adware.Instdollars][server down?]
    127.0.0.1 www.installdollars.com
    127.0.0.1 clickxchange.com
    127.0.0.1 caweb1.clickxchange.com
    127.0.0.1 caweb2.clickxchange.com
    127.0.0.1 www.clickxchange.com
    127.0.0.1 public.americandaytrading.com
    127.0.0.1 blazefind.com #[IE SearchBar]
    127.0.0.1 findwhatevernow.blazefind.com
    127.0.0.1 omniscient.blazefind.com #[TROJ_BLAZEFIND.A]
    127.0.0.1 xml.blazefind.com
    127.0.0.1 www.blazefind.com #[Adware.BlazeFind]
    127.0.0.1 cdtnet.net
    127.0.0.1 anne.cdtnet.net
    127.0.0.1 caroline.cdtnet.net
    127.0.0.1 flingstone.com #[TROJ_WINFAVS.A]
    127.0.0.1 redirect.flingstone.com
    127.0.0.1 static.flingstone.com #[brdg Class]
    127.0.0.1 www.flingstone.com #[Adware.WinFavorites.B]
    127.0.0.1 www2.flingstone.com #[brdg Class][Win32/Bryss.Spy.Trojan]
    127.0.0.1 homepagecash.com
    127.0.0.1 www.homepagecash.com
    127.0.0.1 loudcash.com
    127.0.0.1 partners.loudcash.com
    127.0.0.1 www.loudcash.com
    127.0.0.1 searchbarcash.com #[Downloader.Small.5.Y]
    127.0.0.1 public.searchbarcash.com #[WinFavorites][DownloadUL Class]
    127.0.0.1 www.searchbarcash.com #[Parasite.TinyBar]
    127.0.0.1 searchbrowser.com
    127.0.0.1 findwhatevernow.searchbrowser.com
    127.0.0.1 skoobidoo.com
    127.0.0.1 www.skoobidoo.com
    127.0.0.1 www2.skoobidoo.com #[Downloader.MSCache]
    127.0.0.1 updates.troffee.com
    127.0.0.1 winadclient.com
    127.0.0.1 www.winadclient.com
    127.0.0.1 windowssr.com
    127.0.0.1 public.windupdates.com #[Windows SyncroAd]
    127.0.0.1 static.windupdates.com
    127.0.0.1 www.windupdates.com #[AdvWare.WinAD]
    127.0.0.1 counterstrike.server.us #[Downloader.CDT]
    127.0.0.1 er.errorplace.com
    127.0.0.1 www.errorplace.com #[Parasite.SearchSprint]
    127.0.0.1 www.media-motor.com
    127.0.0.1 bins2.media-motor.net #[TROJ_VB.DO]
    127.0.0.1 cabs.media-motor.net #[IObjSafety.DemoCtl]
    127.0.0.1 logs.media-motor.net
    127.0.0.1 mmm.media-motor.net
    127.0.0.1 upd.media-motor.net
    127.0.0.1 www.media-motor.net
    127.0.0.1 tar.popuppers.com #[Adware.Medload]
    127.0.0.1 www.popuppers.com #[Adware.Roimoi][SULoads.popuppers]
    127.0.0.1 bins.roings.com #[jimmyloader.jimmyform]
    127.0.0.1 cabs.roings.com #[IObjSafety.DemoCtl]
    127.0.0.1 logs.roings.com
    127.0.0.1 mmm.roings.com #[limmyloding.limmyform]
    127.0.0.1 www.roings.com #[Roings Search Enhancment]
    127.0.0.1 bannerexchange.cjb.net
    127.0.0.1 coder3862004.cjb.net #[Trojan.Bansap]
    127.0.0.1 searchwww.com
    127.0.0.1 search.searchwww.com #[Parasite.SearchWWW]
    127.0.0.1 vbs.searchwww.com
    127.0.0.1 www.searchwww.com
    127.0.0.1 dafinder.com
    127.0.0.1 www2.dafinder.com
    127.0.0.1 www3.dafinder.com
    127.0.0.1 adult.getmoviesonline.com
    127.0.0.1 www.getmoviesonline.com
    127.0.0.1 ourlinklist.com
    127.0.0.1 searchaccurate.com #[Parasite.TinyBar]
    127.0.0.1 www.searchaccurate.com
    127.0.0.1 ads.web.aol.com
    127.0.0.1 affiliate.aol.com
    127.0.0.1 aim.aol.com
    127.0.0.1 dynamic.aol.com
    127.0.0.1 free.aol.com
    127.0.0.1 usaol.com
    127.0.0.1 ar.atwola.com
    127.0.0.1 pr.atwola.com
    127.0.0.1 ads.newline.aol.com
    127.0.0.1 adremote.pathfinder.com
    127.0.0.1 adremote.timeinc.net
    127.0.0.1 aolwpnscom.112.2o7.net
    127.0.0.1 aolwpnswhatsnew.112.2o7.net
    127.0.0.1 adimg.cnet.com
    127.0.0.1 remotead-internal.cnet.com
    127.0.0.1 remotead.cnet.com
    127.0.0.1 ads.com.com
    127.0.0.1 adimg.com.com
    127.0.0.1 adlog.com.com
    127.0.0.1 cj.com
    127.0.0.1 www.cj.com
    127.0.0.1 www.commission-junction.com
    127.0.0.1 qksrv.com
    127.0.0.1 www.qksrv.net
    127.0.0.1 www.qksz.net
    127.0.0.1 commonname.com
    127.0.0.1 www.commonname.com
    127.0.0.1 commonnames.com
    127.0.0.1 www.commonnames.com
    127.0.0.1 xpsn.com
    127.0.0.1 www.xpsn.com
    127.0.0.1 img10.coolsavings.com
    127.0.0.1 mn104.coolsavings.com
    127.0.0.1 www101.coolsavings.com
    127.0.0.1 www102.coolsavings.com
    127.0.0.1 www105.coolsavings.com
    127.0.0.1 www108.coolsavings.com
    127.0.0.1 www109.coolsavings.com
    127.0.0.1 www112.coolsavings.com #[CMV5 Class]
    127.0.0.1 www113.coolsavings.com
    127.0.0.1 coolwebsearch.com
    127.0.0.1 stats.coolwebsearch.com
    127.0.0.1 www.coolwebsearch.com #[CWS/IEFeats]
    127.0.0.1 0websearch.com
    127.0.0.1 1-se.com #[CWS.Aboutblank][W32.Tuoba.Trojan]
    127.0.0.1 www.1-se.com #[VBS.Startpage.C]
    127.0.0.1 1stpagehere.com
    127.0.0.1 www.1stpagehere.com
    127.0.0.1 www.31234.com #[CWS.Msconfig]
    127.0.0.1 4-counter.com #[CWS.Winproc32][icanfindit.net]
    127.0.0.1 a-search.biz
    127.0.0.1 adasearch.com
    127.0.0.1 www.adasearch.com
    127.0.0.1 adulthyperlinks.com #[Parasite.CoolWebSearch]
    127.0.0.1 www.adulthyperlinks.com <
    0
  17. merlin
     
    apparemment c bon!!!!
    merci bcp...mais cété quoi ce truc et pourquoi kaspersky na rien trouvé?
    0
  18. S!Ri Messages postés 932 Statut Contributeur sécurité 10
     
    Re'

    Post encore un rapport Hijackthis STP.

    Kaspersky l'a laissé passer parcequ'aucun antivirus n'est fiable à 100%. Même les plus réputés.

    ( http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9010041&source=rss_news50 )

    Les fichiers que tu m'as fait parvenir ont été envoyés a divers labos d'antivirus et seront intégrés à leur base de donnée.

    a+
    0
  19. merlin
     
    Logfile of HijackThis v1.99.1
    Scan saved at 13:34:54, on 05/04/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\Mediafour\MacDrive\MDDiskProtect.exe
    C:\Program Files\Fichiers communs\Mediafour\MACVNTFY.EXE
    C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\RocketDock\RocketDock.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\YzShadow\YzShadow.exe
    C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\WinRAR\WinRAR.exe
    C:\Documents and Settings\jubb\Bureau\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://lstard.stormcorp.net/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: VPNS System - {9FA1AA9E-7ECF-4f3b-AC23-7F09E01298E4} - C:\WINDOWS\iesettings.dll (file missing)
    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [MDDiskProtect.exe] C:\Program Files\Mediafour\MacDrive\MDDiskProtect.exe
    O4 - HKLM\..\Run: [MediafourGettingStartedWithMacDrive6] "C:\Program Files\Mediafour\MacDrive\MacDrive.exe" /runonce
    O4 - HKLM\..\Run: [Mediafour Mac Volume Notifications] "C:\Program Files\Fichiers communs\Mediafour\MACVNTFY.EXE" /auto
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
    O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\UberIcon\UberIcon Manager.exe
    O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\YzShadow\YzShadow.exe
    O4 - Startup: Y'z Toolbar.lnk = C:\WINDOWS\BricoPacks\Crystal Clear\YzToolbar\YzToolBar.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
    O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Program Files\Titan Poker\casino.exe
    O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Program Files\Titan Poker\casino.exe
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\Microsoft Office\Office12\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\system32\shdocvw.dll
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/telecharger.php?id=2&version=
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSN Messenger\msgrapp.8.0.0792.00.dll
    O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSN Messenger\msgrapp.8.0.0792.00.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\Skype4COM.dll
    O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
    O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
    O21 - SSODL: iesupport - {F9A3CE4B-9269-4E25-B3A3-F8ECF27CA0F8} - C:\WINDOWS\iesupport.dll (file missing)
    O21 - SSODL: iedebug - {89304A23-6A7A-4772-B718-F9AD49F4833E} - C:\WINDOWS\iedebug.dll (file missing)
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    0
  20. S!Ri Messages postés 932 Statut Contributeur sécurité 10
     
    Re'

    Relance SmitfraudFix en mode normal, option 2
    et ce coup ci, accepte le nettoyage du registre.

    Relance HijackThis, coche les lignes suivantes et fixe les.

    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)

    Reposte un rapport, c'est devrait suffir.
    a+
    0
  21. salwa5 Messages postés 7552 Statut Contributeur 1 671
     
    bonjour :) pour finaliser le netoyage telecharge et executes

    AVG anti spyware
    https://www.01net.com/telecharger/

    (n'oublie pas de le mettre a jour avant de lancer le scan)

    Relance AVG AS puis choisis l'onglet "Analyse"
    Puis l'onglet "Paramètres"
    Sous la question "Comment réagir ?", clique sur "Actions recommandées" et choisis "Quarantaine"
    Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"

    /!\ Si un fichier est infecté en fin d'analyse /!\
    Clique sur "Appliquer toutes les actions "

    Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous"
    Enregistre ce fichier texte sur ton bureau ensuite colle le raport ici

    supprime les fichiers inutiles (fichiers temporaire , cookies .. ect avec ceci

    Ccleaner
    https://www.malekal.com/tutoriel-ccleaner/

    a+++
    0
  • 1
  • 2

Discussions similaires

je n'arrive pas aller sur pronote
irsa -
MPMP10 -

2 réponses
Triangle rouge freebox tv révolution Light
sosop06 -
bazfile -

1 réponse
triangle rouge
bichikouninette -
nina3066 -

2 réponses
Symbole Attention dans Word
Nortec59 -
LOUL7619 -

33 réponses
JetonRouge.com : Arnaque ou bon plan casino ?
Yvan6775 -
Mamaze -

15 réponses