Virus (rapport HijackThis + smitfraudfix)

Résolu
husnu Messages postés 411 Statut Membre -  
 Miles -
Bonjours a tous,
je crois que j'ai un virus dans mon pc car il y a un ralentissement ou je rame quand je joue un jeu en ligne...voici mon rapport HijackThis et smitfraud:

Logfile of HijackThis v1.99.1
Scan saved at 16:35:06, on 7/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Winamp\Winampa.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\lclock.exe
C:\program files\valve\steam\steam.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\husnu\Mes documents\MesDoc\HusDoc\SmitfraudFix\Nouveau dossier (2)\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LClock] lclock.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\valve\steam\steam.exe" -silent
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\Microsoft Office\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\Microsoft Office\OFFICE11\REFIEBAR.DLL
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {AF2E62B6-F9E1-4D4F-A10A-9DC8E6DCBCC0} (VideoEgg ActiveX Loader) - http://update.videoegg.com/Install/Windows/Initial/VideoEggPublisher.exe
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSN Messenger\msgrapp.8.1.0178.00.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
------------------------------

SmitFraudFix v2.176

Rapport fait à 16:36:13,65, lun. 07/05/2007
Executé à partir de C:\Documents and Settings\husnu\Mes documents\MesDoc\HusDoc\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Winamp\Winampa.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\lclock.exe
C:\program files\valve\steam\steam.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts

Fichier hosts corrompu !

# [MICROSOFT.COM]

»»»»»»»»»»»»»»»»»»»»»»»» C:\

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\husnu

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\husnu\Application Data

»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\husnu\Favoris

»»»»»»»»»»»»»»»»»»»»»»»» Bureau

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32-huy32

»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: D-Link DFE-530TX PCI Fast Ethernet Adapter (rev.C) - Miniport d'ordonnancement de paquets
DNS Server Search Order: 212.68.193.110
DNS Server Search Order: 212.68.193.196

HKLM\SYSTEM\CCS\Services\Tcpip\..\{2034742A-ECDF-411F-8C31-6D19D17FCC15}: DhcpNameServer=212.68.193.110 212.68.193.196
HKLM\SYSTEM\CS1\Services\Tcpip\..\{2034742A-ECDF-411F-8C31-6D19D17FCC15}: DhcpNameServer=212.68.193.110 212.68.193.196
HKLM\SYSTEM\CS2\Services\Tcpip\..\{2034742A-ECDF-411F-8C31-6D19D17FCC15}: DhcpNameServer=212.68.193.110 212.68.193.196
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.68.193.110 212.68.193.196
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.68.193.110 212.68.193.196
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.68.193.110 212.68.193.196

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin
Configuration: Windows XP
Internet Explorer 6.0

10 réponses

  1. rudyrital Messages postés 6233 Statut Membre 131
     
    Salut,

    Démarre en mode sans échec :
    Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
    Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
    Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
    (Si F8 ne marche pas utilise la touche F5).
    ----------------------------------------------------------------------------
    Relance le programme Smitfraud,
    Cette fois choisit l’option 2, répond oui a tous ;
    Sauvegarde le rapport, Redémarre en mode normal, copie/colle le rapport sauvegardé sur le forum

    A+
    0
    1. husnu Messages postés 411 Statut Membre 24
       
      wow je comprend pas tout ces fichier???



      SmitFraudFix v2.176

      Rapport fait à 17:19:34,20, lun. 07/05/2007
      Executé à partir de C:\Documents and Settings\husnu\Mes documents\MesDoc\HusDoc\SmitfraudFix\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
      Le type du système de fichiers est NTFS
      Fix executé en mode sans echec

      »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


      »»»»»»»»»»»»»»»»»»»»»»»» hosts


      127.0.0.1 localhost

      127.0.0.1 downloads.aaa1screensavers.com #[Bargin Buddy]
      127.0.0.1 china.dalexcars.com
      127.0.0.1 dl.aaascreensavers.com
      127.0.0.1 abcsearch.com
      127.0.0.1 admin.abcsearch.com
      127.0.0.1 www3.abcsearch.com #[Browseraid]
      127.0.0.1 www.abcsearch.com
      127.0.0.1 abc517.net #[Trojan.Mitglieder.H]
      127.0.0.1 absoluagency.com #[Trojan.StartPage.H]
      127.0.0.1 acestats.com
      127.0.0.1 www.acestats.com
      127.0.0.1 actualnames.com #[Parasite.ActualNames][Spyware.ActualNames]
      127.0.0.1 www.actualnames.com
      127.0.0.1 ad-up.com
      127.0.0.1 www.ad-up.com
      127.0.0.1 adatom.com
      127.0.0.1 aesp.adatom.com
      127.0.0.1 adbest.com
      127.0.0.1 www.adcipta.net #[W32/Malware]
      127.0.0.1 adserv.adbonus.com
      127.0.0.1 www.adbonus.com
      127.0.0.1 ad2.adcept.net
      127.0.0.1 ad3.adcept.net
      127.0.0.1 www.adcept.net
      127.0.0.1 adcomplete.com
      127.0.0.1 www.adcomplete.com
      127.0.0.1 www.adcopy.info
      127.0.0.1 ads.adcorps.com
      127.0.0.1 ads.addynamix.com
      127.0.0.1 pt.server1.adexit.com
      127.0.0.1 www.adexit.com
      127.0.0.1 www.ad4ever.com
      127.0.0.1 adhearus.com
      127.0.0.1 display2.adhearus.com
      127.0.0.1 ssl3.adhost.com
      127.0.0.1 www2.adhost.com
      127.0.0.1 www.addme.com
      127.0.0.1 www.adinfinity.com
      127.0.0.1 te.adlandpro.com
      127.0.0.1 classic.adlink.de
      127.0.0.1 regio.adlink.de
      127.0.0.1 west.adlink.de
      127.0.0.1 www.adminder.com
      127.0.0.1 adsfac.net
      127.0.0.1 www.adonweb.com
      127.0.0.1 www.adrelevance.com #[NetRatings]
      127.0.0.1 media.adrevolver.com
      127.0.0.1 adroar.com
      127.0.0.1 ads.adroar.com
      127.0.0.1 delta.adroar.com
      127.0.0.1 iads.adroar.com #[Adware.AdRoar][ADW_ADROAR.A]
      127.0.0.1 lists.adroar.com
      127.0.0.1 www.adroar.com
      127.0.0.1 ads.adsag.com
      127.0.0.1 di.adsag.com
      127.0.0.1 img.adsag.com
      127.0.0.1 adserv.com
      127.0.0.1 www.adserv.com
      127.0.0.1 ads.adtomi.com
      127.0.0.1 www.adtomi.com #[Adware.Adtomi]
      127.0.0.1 downldcl.adtoolsinc.com
      127.0.0.1 www.adtoolsinc.com
      127.0.0.1 www.adtrader.com
      127.0.0.1 www.adtraffic.net
      127.0.0.1 survey.advantageresearch.com
      127.0.0.1 ad.adver.com.tw
      127.0.0.1 ads.advertise.net
      127.0.0.1 advertisingvision.com #[Adware.Advision]
      127.0.0.1 www.advertisingvision.com
      127.0.0.1 adviva.com
      127.0.0.1 www.adviva.com
      127.0.0.1 ads.adviva.net
      127.0.0.1 adstats.adviva.net
      127.0.0.1 tracker.affistats.com #[msvrl.dll]
      127.0.0.1 www.affiliatefuel.com
      127.0.0.1 banners.affiliatefuel.com
      127.0.0.1 affiliatetarget.com
      127.0.0.1 www.affiliatetarget.com
      127.0.0.1 fcds.affiliatetracking.net
      127.0.0.1 our.affiliatetracking.net
      127.0.0.1 www.affiliatetracking.net
      127.0.0.1 www.affiliatetracking.com
      127.0.0.1 adserver.aim4media.com
      127.0.0.1 adtest.aim4media.com
      127.0.0.1 pops.aim4media.com
      127.0.0.1 www.aim4media.com
      127.0.0.1 crs.akamai.com
      127.0.0.1 soap.alexa.com #[Spyware.Alexa][Alexa Toolbar]
      127.0.0.1 traffic.alexa.com
      127.0.0.1 xsltcache.alexa.com
      127.0.0.1 www.alexa.com
      127.0.0.1 allcheapsolutions.com #[Backdoor-CIE]
      127.0.0.1 ads.as4x.tmcs.akadns.net #[Ticketmaster]
      127.0.0.1 bantam.ai.net
      127.0.0.1 fiona.ai.net
      127.0.0.1 ads.amazingmedia.com
      127.0.0.1 bohema.amillo.net #[Trojan.Mitglieder.H]
      127.0.0.1 adserver04.ancestry.com #[RealMedia]
      127.0.0.1 ads.antionline.com
      127.0.0.1 junior.apk.net
      127.0.0.1 banner.arttoday.com
      127.0.0.1 ads.aspalliance.com
      127.0.0.1 associmg.com #[amazon.com]
      127.0.0.1 armbender.com #[UCSearch.ucUCSearch][W32.Adclicker.F.Trojan]
      127.0.0.1 www.armbender.com #[UCSearch.ArmBender]
      127.0.0.1 audiogalaxy.com
      127.0.0.1 www.audiogalaxy.com #[Restricted Zone site]
      127.0.0.1 adserving.autotrader.com
      127.0.0.1 www.avatarresources.com #[Parasite.AutoStartup]
      127.0.0.1 www.avres.net
      127.0.0.1 www.aweber.com
      127.0.0.1 cploving.awmhost.net #[TrojanClicker.Win32.Lopin]
      127.0.0.1 bar.baidu.com #[Parasite.ClientMan]
      127.0.0.1 www.baltictop.com
      127.0.0.1 www.banner-mania.com
      127.0.0.1 www.bannerspace.com #[Restricted Zone site]
      127.0.0.1 www2.bannerspace.com
      127.0.0.1 www3.bannerspace.com
      127.0.0.1 www5.bannerspace.com
      127.0.0.1 www6.bannerspace.com
      127.0.0.1 www7.bannerspace.com
      127.0.0.1 bannerswap.com
      127.0.0.1 www.bannerswap.com
      127.0.0.1 www.bidclix.com
      127.0.0.1 bidclix.net
      127.0.0.1 www.bidclix.net
      127.0.0.1 bigtracker.com
      127.0.0.1 bighits.net #[Restricted Zone site]
      127.0.0.1 bigticker.bighits.net
      127.0.0.1 bounty.bighits.net
      127.0.0.1 www.bighits.net
      127.0.0.1 download.bigwebportal.com #[hotwebsearch.com]
      127.0.0.1 www.bigwebportal.com
      127.0.0.1 counter.bizland.com
      127.0.0.1 webads.bizservers.com
      127.0.0.1 www.black-hole.co.uk #[Restricted Zone site]
      127.0.0.1 www.blazehits.net #[gonnasearch.com]
      127.0.0.1 s7.blingblingcontent.com #[Easywebinstaller Control]
      127.0.0.1 ads.bmais.net #[bluemountain]
      127.0.0.1 bookedspace.com #[Parasite.BookedSpace]
      127.0.0.1 www.bookedspace.com #[Adware.Bookedspace]
      127.0.0.1 a.boom.ro
      127.0.0.1 s.boom.ro
      127.0.0.1 www1.boomerank.com
      127.0.0.1 boomerank.com
      127.0.0.1 citi.bridgetrack.com #[Tracking Service]
      127.0.0.1 rccl.bridgetrack.com
      127.0.0.1 config.broadcastpc.tv #[TROJ_RVP.E]
      127.0.0.1 report.broadcastpc.tv #[AdvWare.Broadcap.a]
      127.0.0.1 www.broadcastpc.tv #[Adware.Broadcastpc]
      127.0.0.1 www.browserplugin.com #[WebHlprObj Class]
      127.0.0.1 install.browsertoolbar.com #[Backdoor.Autoupder][BrowserToolbar]
      127.0.0.1 www2.browsertoolbar.com #[TROJ_SUA.A]
      127.0.0.1 www.browsertoolbar.com #[Parasite.BrowserToolbar]
      127.0.0.1 browserwise.com #[Parasite.Xupiter][Xupiter.BrowserWise]
      127.0.0.1 www.browserwise.com
      127.0.0.1 www.buildtraffic.com
      127.0.0.1 casino-on-net.com
      127.0.0.1 java2.casino-on-net.com
      127.0.0.1 www.casino-on-net.com
      127.0.0.1 casinojems.com
      127.0.0.1 www.casinojems.com
      127.0.0.1 cc-dt.com
      127.0.0.1 ads.cc-dt.com
      127.0.0.1 clickserve.cc-dt.com
      127.0.0.1 www.capital-systems.net #[Troj/Ovedil-B]
      127.0.0.1 www.care2.com #[TopMoxie]
      127.0.0.1 ads.cars.com
      127.0.0.1 www.cashforclicks.com
      127.0.0.1 www.cashpile.com
      127.0.0.1 ads.cdfreaks.com #[Ads.cdfreaks]
      127.0.0.1 mds.centrport.net
      127.0.0.1 c.clickaire.com #[CWS trojan downloads]
      127.0.0.1 classifieds1000.com
      127.0.0.1 www.classifieds1000.com
      127.0.0.1 clearfind.com
      127.0.0.1 www.clearfind.com #[Restricted Zone site]
      127.0.0.1 hop.clickbank.net #[Adware.Clickbank]
      127.0.0.1 zzz.clickbank.net
      127.0.0.1 clickedyclick.com
      127.0.0.1 www.clickexchange.ru
      127.0.0.1 click2boost.com
      127.0.0.1 secure.click2boost.com
      127.0.0.1 service.click2boost.com
      127.0.0.1 www.click2boost.com
      127.0.0.1 servedby.clickexperts.net
      127.0.0.1 www.clicks2you.com
      127.0.0.1 stats1.clicktracks.com
      127.0.0.1 www.is1.clixgalore.com
      127.0.0.1 www.clixgalore.com
      127.0.0.1 www1.click-fr.com
      127.0.0.1 www2.click-fr.com
      127.0.0.1 www3.click-fr.com
      127.0.0.1 www4.click-fr.com
      127.0.0.1 www.clickhouse.com
      127.0.0.1 www.clicks4u.com
      127.0.0.1 www.clipgenie.com
      127.0.0.1 comclick.com
      127.0.0.1 ct2.comclick.com
      127.0.0.1 fl01.ct2.comclick.com
      127.0.0.1 ihm01.ct2.comclick.com
      127.0.0.1 www.comclick.com #[Restricted Zone site]
      127.0.0.1 www.thecoolbar.com #[Softomate Toolbar][The Coolbar]
      127.0.0.1 www.compactbanner.com
      127.0.0.1 ads.console.net
      127.0.0.1 coolshader.com
      127.0.0.1 c.coolshader.com #[Win32.Harnig]
      127.0.0.1 www.coolshader.com
      127.0.0.1 counted.com
      127.0.0.1 bilbo.counted.com
      127.0.0.1 www.counted.com
      127.0.0.1 www.counterguide.com
      127.0.0.1 counter4u.de
      127.0.0.1 connectionzone.com
      127.0.0.1 count.casino-trade.com
      127.0.0.1 www.couponsandoffers.com #[Adware.TopMoxie]
      127.0.0.1 data.coremetrics.com
      127.0.0.1 twci.coremetrics.com
      127.0.0.1 us.cqcounter.com
      127.0.0.1 zz.cqcounter.com
      127.0.0.1 1us.cqcounter.com
      127.0.0.1 ads.crosswinds.net
      127.0.0.1 megabyte.crosswinds.net
      127.0.0.1 cyberbounty.com
      127.0.0.1 js.cybermonitor.com
      127.0.0.1 stat3.cybermonitor.com
      127.0.0.1 cytron.com #[DailyWinner][Cytron]
      127.0.0.1 www.cytron.com
      127.0.0.1 www.dash.com
      127.0.0.1 ads.date.com
      127.0.0.1 banner.date.com
      127.0.0.1 dbbsrv.com #[bserv.darkblue.com][Restricted Zone site]
      127.0.0.1 freestuff.com.19828.fb.dbbsrv.com #[roar.com]
      127.0.0.1 spyware.com.16871.fb.dbbsrv.com
      127.0.0.1 webads.com.18345.fb.dbbsrv.com
      127.0.0.1 www.deepcom.com #[TrojanDropper.Win32.Small.gt]
      127.0.0.1 collector.deepmetrix.com
      127.0.0.1 geo.deepmetrix.com
      127.0.0.1 www.deepmetrix.com #[Data Miner]
      127.0.0.1 ad.ads.dk
      127.0.0.1 tdkads.ads.dk
      127.0.0.1 didtheyreadit.com #[email tracker]
      127.0.0.1 www.didtheyreadit.com
      127.0.0.1 counter.digits.com
      127.0.0.1 www.divago.com #[Adware.Surfairy]
      127.0.0.1 www.dnscaching.net #[stickypops.com]
      127.0.0.1 www.domamil.cz #[Trojan.Beagooz]
      127.0.0.1 downloadalot.com
      127.0.0.1 get.downloadalot.com
      127.0.0.1 www.downloadalot.com #[Restricted Zone site]
      127.0.0.1 www.downseek.com #[DownSeek Search]
      127.0.0.1 dqmedia.net #[spam]
      127.0.0.1 drmx01.net #[spam]
      127.0.0.1 www.duenow.com
      127.0.0.1 gfx.dvlabs.com
      127.0.0.1 klipads.dvlabs.com
      127.0.0.1 e2give.com #[Adware-E2Give][Spyware.e2give]
      127.0.0.1 www.e2give.com
      127.0.0.1 www.e-bannerx.com
      127.0.0.1 adv1.eblocs.com
      127.0.0.1 adv2.eblocs.com #[Rogue/Suspect]
      127.0.0.1 www.easycounter.com
      127.0.0.1 banners.easydns.com
      127.0.0.1 banner.easyspace.com
      127.0.0.1 adserv1.ebates.com #[WebSavings]
      127.0.0.1 www.ebates.com #[Adware.MoeMoney]
      127.0.0.1 www.efinder.cc #[StartPage-DA]
      127.0.0.1 enhancemysearch.com #[xzoomy.com]
      127.0.0.1 www.enhancemysearch.com
      127.0.0.1 epeople.com
      127.0.0.1 errorpage404.com #[JS_TRAFFICHBAR.A]
      127.0.0.1 www.errorpage404.com #[Parasite.TinyBar]
      127.0.0.1 vipuk.escritorioactivo.com #[123Messenger Hijacker]
      127.0.0.1 www.escorcher.com #[bogus antivirus spyware]
      127.0.0.1 www.eshopads2.com
      127.0.0.1 perso.estat.com
      127.0.0.1 prof.estat.com
      127.0.0.1 www.estat.com #[Restricted Zone site]
      127.0.0.1 eu-adcenter.net
      127.0.0.1 thinknyc.eu-adcenter.net
      127.0.0.1 ugo.eu-adcenter.net #[evidence-eliminator.com]
      127.0.0.1 www.euroklik.nl #[EasyBar][InstallerX Class]
      127.0.0.1 engage.everyone.net
      127.0.0.1 static.everyone.net
      127.0.0.1 www.exchangead.com
      127.0.0.1 exitexchange.com
      127.0.0.1 count.exitexchange.com
      127.0.0.1 images.exitexchange.com
      127.0.0.1 www.exitexchange.com #[Restricted Zone site]
      127.0.0.1 www.exchangeexit.com #[Installer Class][Winupie]
      127.0.0.1 www.exittraffic.net
      127.0.0.1 ezcybersearch.com #[EZCyberSearch.Surebar]
      127.0.0.1 ads.ezcybersearch.com #[Adware.EZSearch.B]
      127.0.0.1 ezcybersearch.mail.everyone.net
      127.0.0.1 www.ezcybersearch.com #[Parasite.ezCyberSearch]
      127.0.0.1 www.evidence-eliminator.com
      127.0.0.1 ads.fairfax.com.au
      127.0.0.1 images.ads.fairfax.com.au
      127.0.0.1 redirect.fairfax.com.au
      127.0.0.1 campaigns.f2.com.au
      127.0.0.1 www.fast2net.com
      127.0.0.1 www.fastfind.org #[SubSearch][TROJ_STARTPAG.KF][Adware.Fastfind.B]
      127.0.0.1 fasttrack.nu
      127.0.0.1 www.fceboard.com #[Adware.EBoard]
      127.0.0.1 www.fightpopups.net #[Adware.MessStopper]
      127.0.0.1 adserver.filefront.com
      127.0.0.1 www.filemix.net #[Surf+]
      127.0.0.1 www.fineclicks.com
      127.0.0.1 firstname.com
      127.0.0.1 clicks.firstname.com
      127.0.0.1 www.fizzlewizzle.com #[Fizzle Wizzle Searchbar]
      127.0.0.1 flashtrack.net
      127.0.0.1 ads.flashtrack.net #[Adware.Flashtrack.B]
      127.0.0.1 coreg.flashtrack.net
      127.0.0.1 www.flashtrack.net #[Adware.FlashEnhancer][KB312429]
      127.0.0.1 flyinads.com
      127.0.0.1 www.flyinads.com
      127.0.0.1 ads.forbes.com
      127.0.0.1 klipmart.forbes.com
      127.0.0.1 www.ampira.com #[Fortunecity]
      127.0.0.1 ads.fortunecity.com
      127.0.0.1 ads.v3.com #[Fortunecity]
      127.0.0.1 www2.fortunecity.com
      127.0.0.1 ad.freefind.com
      127.0.0.1 www.freehistorycleaner.com #[Adware.Fapi][ADW_HISCLEAN.A]
      127.0.0.1 free-stats.com
      127.0.0.1 www.freewebsites.com
      127.0.0.1 ads.free-windows-games.com
      127.0.0.1 www.free-windows-games.com #[Parasite.GAMsys][GamHelper]
      127.0.0.1 pops.freeze.com #[[GamHelper]
      127.0.0.1 ads.gamespy.com
      127.0.0.1 adcontent.gamespy.com
      127.0.0.1 www.gebr-wachs.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
      127.0.0.1 gd.geobytes.com #[obtains users location]
      127.0.0.1 www.getsmart.com
      127.0.0.1 bp2.getredirect.com
      127.0.0.1 4.getredirect.com #[superlogy.com]
      127.0.0.1 www.getredirect.com
      127.0.0.1 getupdate.com
      127.0.0.1 dlx.getupdate.com #[AdvWare.ToolBar.VB.b]
      127.0.0.1 www.getupdate.com #[Adware.Getup]
      127.0.0.1 gigex.com
      127.0.0.1 media.gigex.com #[SpeedDelivery]
      127.0.0.1 oascentral.gigex.com #[RealMedia]
      127.0.0.1 www.gigex.com #[download Class]
      127.0.0.1 globesearch.com
      127.0.0.1 www.globesearch.com #[Restricted Zone site][CWS]
      127.0.0.1 banner.goldenpalace.com #[redirects]
      127.0.0.1 www.goldenwebawards.com #[server down?]
      127.0.0.1 goldstats.net
      127.0.0.1 www.goldstats.net
      127.0.0.1 adincl.gopher.com #[InfoSpace]
      127.0.0.1 ads.gorillanation.com #[Restricted Zone site]
      127.0.0.1 adserver.gorillanation.com
      127.0.0.1 gostats.com
      127.0.0.1 c1.gostats.com
      127.0.0.1 c2.gostats.com
      127.0.0.1 webcounter.goweb.de
      127.0.0.1 greatstartpage.com #[parasite downloads]
      127.0.0.1 www.greatstartpage.com
      127.0.0.1 grokster.com #[Restricted Zone site][P2P]
      127.0.0.1 dl.grokster.com
      127.0.0.1 www.grokster.com
      127.0.0.1 ads.guardian.co.uk
      127.0.0.1 ads.guardianunlimited.co.uk
      127.0.0.1 www.g-wizzads.net
      127.0.0.1 hamster.com #[apps5.oingo.com]
      127.0.0.1 ad0.haynet.com
      127.0.0.1 www.hitboss.com
      127.0.0.1 www.hit4hit.com
      127.0.0.1 ads.hitcents.com
      127.0.0.1 hithopper.com #[Adware.Hithopper]
      127.0.0.1 www.hithopper.com
      127.0.0.1 hitmodel.net
      127.0.0.1 hit-now.com
      127.0.0.1 loga.hit-parade.com
      127.0.0.1 hit-parade.com
      127.0.0.1 www.hitpointer.com
      127.0.0.1 hitslink.com
      127.0.0.1 counter.hitslink.com
      127.0.0.1 counter2.hitslink.com
      127.0.0.1 www2.hitslink.com
      127.0.0.1 www.hitslink.com #[Restricted Zone site]
      127.0.0.1 hitstats.net
      127.0.0.1 www.hiwire.com
      127.0.0.1 ads.home.net
      127.0.0.1 anna.homeftp.net #[W32.Linkbot.A]
      127.0.0.1 counters.honesty.com
      127.0.0.1 banners.hotlinks.net
      127.0.0.1 hotphrase.com
      127.0.0.1 www.hotphrase.com #[Restricted Zone site]
      127.0.0.1 hotsearch.com #[roar.com][Restricted Zone site]
      127.0.0.1 www.hotsearch.com
      127.0.0.1 hotsearchbar.com #[iiittt Class][SpiderSearch]
      127.0.0.1 www.hotsearchbar.com
      127.0.0.1 www.10s.com.br #[Trojan.Cargao]
      127.0.0.1 cgi.hotstat.nl
      127.0.0.1 viewstat.hotstat.nl
      127.0.0.1 hc2.humanclick.com
      127.0.0.1 www.humanclick.com #[Data Miner]
      127.0.0.1 www.hypertracker.com
      127.0.0.1 ads.iafrica.com
      127.0.0.1 ads.iboost.com
      127.0.0.1 www.i-clicks.net
      127.0.0.1 hits.icdirect.com
      127.0.0.1 hitctr01.icdirect.com
      127.0.0.1 image-catcher.com
      127.0.0.1 bar.iebar8.com #[Adware.Navihelper]
      127.0.0.1 stats.surfaid.ihost.com
      127.0.0.1 ads.imdb.com #[amazon.com]
      127.0.0.1 www.impregnable.net #[TrojanDownloader.Win32.VB.dw][Trojan.Win32.StartPage.kk]
      127.0.0.1 stats.indextools.com
      127.0.0.1 adserver.indieclick.com
      127.0.0.1 campaign.indieclick.com
      127.0.0.1 adcenter.in2.com
      127.0.0.1 ads.inet1.com
      127.0.0.1 ads7.inet1.com
      127.0.0.1 banners.inetfast.com
      127.0.0.1 ads.infospace.com
      127.0.0.1 bvads.infospace.com
      127.0.0.1 dpxml.infospace.com
      127.0.0.1 xads.infospace.com
      127.0.0.1 www.infospider.com
      127.0.0.1 ads.intellicast.com
      127.0.0.1 ads.intelihealth.com
      127.0.0.1 ads.intermezzia.com
      127.0.0.1 mjxads.internet.com
      127.0.0.1 indiads.com
      127.0.0.1 infostart.com
      127.0.0.1 popups.infostart.com
      127.0.0.1 www.intelli-tracker.com
      127.0.0.1 ads.ipowerweb.com
      127.0.0.1 www.ipstat.com
      127.0.0.1 istarthere.com #[Troj/IEStart-C]
      127.0.0.1 directory.istarthere.com
      127.0.0.1 moviesponsor.istarthere.com
      127.0.0.1 partners.istarthere.com
      127.0.0.1 www.istarthere.com #[VBS_IESTART.F]
      127.0.0.1 adcycle.isoftmarketing.com
      127.0.0.1 isurfplus.com
      127.0.0.1 www.isurfplus.com #[Adware.Surebar]
      127.0.0.1 www.itrafficstar.com #[Restricted Zone site]
      127.0.0.1 www.jcount.com
      127.0.0.1 affiliates.jeanharris.com
      127.0.0.1 popup.jeanharris.com
      127.0.0.1 jpedownload.joltid.com
      127.0.0.1 www.joltid.com #[Adware.P2PNetworking]
      127.0.0.1 www1.kliks.nl
      127.0.0.1 www2.kliks.nl
      127.0.0.1 www.kliks.nl
      127.0.0.1 kt3.kliptracker.com
      127.0.0.1 kt4.kliptracker.com
      127.0.0.1 www.kliptracker.com
      127.0.0.1 stats.klsoft.com
      127.0.0.1 www.kmindex.ru
      127.0.0.1 ad.leadcrunch.com
      127.0.0.1 ts1.lexmark.com
      127.0.0.1 www.linkcounter.com
      127.0.0.1 linkexchange.ru
      127.0.0.1 web.linkexchange.ru
      127.0.0.1 www.linkexchange.ru
      127.0.0.1 link4link.com
      127.0.0.1 plus.link4link.com
      127.0.0.1 www.links4trade.com
      127.0.0.1 escati.linkopp.net
      127.0.0.1 www.linkopp.net
      127.0.0.1 js.livehelper.com #[Restricted Zone site]
      127.0.0.1 newbrowse.livehelper.com
      127.0.0.1 liveperson.net
      127.0.0.1 server.iad.liveperson.net #[Data Miner]
      127.0.0.1 www.liveperson.com
      127.0.0.1 adserv.lwmn.net
      127.0.0.1 locators.com #[Adware.Locator]
      127.0.0.1 toolbar.locators.com #[Locators Toolbar]
      127.0.0.1 www.locators.com
      127.0.0.1 www.lords-of-havoc.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
      127.0.0.1 luckyhomepage.com #[search.targetwords.com\1stblaze.com]
      127.0.0.1 www.luckyhomepage.com #[Restricted Zone site]
      127.0.0.1 adverts.lzio.com
      127.0.0.1 newupdates.lzio.com
      127.0.0.1 search.lzio.com
      127.0.0.1 updates.lzio.com #[Downloader-LE][Adware.ZioCom]
      127.0.0.1 make-deal.com
      127.0.0.1 www.madoogali.com #[Madoogali]
      127.0.0.1 go.mailbits.com
      127.0.0.1 mair.net #[Realtracker]
      127.0.0.1 marnet.us #[Downloader-IU]
      127.0.0.1 image.masterstats.com
      127.0.0.1 link.masterstats.com
      127.0.0.1 ads.affiliates.match.com
      127.0.0.1 associmage.match.com
      127.0.0.1 adserver.matchcraft.com
      127.0.0.1 maybeyes.biz #[Trojan.Ducky]
      127.0.0.1 ads.mcafee.com
      127.0.0.1 directads.mcafee.com
      127.0.0.1 ads.mediaodyssey.com
      127.0.0.1 ads.mediaturf.net
      127.0.0.1 banner.meerhits.nl #[IEHIjacker.Meerhits.nl]
      127.0.0.1 pokpok.meerhits.nl
      127.0.0.1 exit.megago.com
      127.0.0.1 www.megago.com #[typo squatter]
      127.0.0.1 www.megaseek.net #[Restricted Zone site]
      127.0.0.1 pubs.mgn.net #[Grolier Network]
      127.0.0.1 www.mgshareware.com #[Adware Bundler]
      127.0.0.1 micorsoft.com
      127.0.0.1 www.micorsoft.com #[typo hijacker]
      127.0.0.1 www.mini-player.com #[5MOF Mini-Player]
      127.0.0.1 banner.missingkids.com
      127.0.0.1 ads.monster.com
      127.0.0.1 adserver.monster.com
      127.0.0.1 adserver.a.in.monster.com
      127.0.0.1 ads.monstermoving.com
      127.0.0.1 cookie.monster.com
      127.0.0.1 mp3today.net
      127.0.0.1 www.mp3yes.com #[C2Media\LOP]
      127.0.0.1 mpamexit.com
      127.0.0.1 www.messagetag.com #[Email tracker]
      127.0.0.1 msgtag.com
      127.0.0.1 img.msgtag.com #[Restricted Zone site]
      127.0.0.1 www.msgtag.com
      127.0.0.1 multi1.rmuk.co.uk #[RealMedia]
      127.0.0.1 mvtracker.com
      127.0.0.1 www.mvtracker.com
      127.0.0.1 mvr3d.net #[NavExcel\n-CASE]
      127.0.0.1 mvr.us #[Parasite.NavExcel]
      127.0.0.1 www.mvr.us
      127.0.0.1 www.myaffiliateprogram.com
      127.0.0.1 www.myarmory.com #[Spyware.Bazookabar]
      127.0.0.1 ads.mydailyhoroscope.net
      127.0.0.1 www.mydailyhoroscope.net #[Adware.Horoscope]
      127.0.0.1 www.myemessenger.com
      127.0.0.1 rm.myoc.com
      127.0.0.1 myhitlogger.com
      127.0.0.1 mypagefinder.com #[Parasite.MyPageFinder]
      127.0.0.1 hit.namimedia.com
      127.0.0.1 ads.nandomedia.com
      127.0.0.1 neededware.com #[Adware.NeededWare]
      127.0.0.1 www.neededware.com
      127.0.0.1 neo-toolbar.com #[InstControl Class][Trojan.NeoToolbar.Installer]
      127.0.0.1 www6.netbroadcaster.com
      127.0.0.1 code.netbreak.com.au
      127.0.0.1 www.netflip.com
      127.0.0.1 money2.netfirms.com #[The Money Toolbar]
      127.0.0.1 partner.netmechanic.com
      127.0.0.1 tracker.netmechanic.com
      127.0.0.1 counter.netmore.net
      127.0.0.1 www.netpoll.nl
      127.0.0.1 servedby.netshelter.net
      127.0.0.1 ads.netsol.com
      127.0.0.1 www.netsearch.info
      127.0.0.1 ads.newsint.co.uk
      127.0.0.1 adq.nextag.com
      127.0.0.1 newiframe.biz #[TROJ_DELF.DS]
      127.0.0.1 www.newiframe.biz
      127.0.0.1 web1.noadware.net
      127.0.0.1 www.noadware.net #[SCAM.Enigma.NoAdware]
      127.0.0.1 nowbox.com
      127.0.0.1 www.nowbox.com #[Parasite.NowBox]
      127.0.0.1 mediatickets.nubela.net
      127.0.0.1 www.nubela.net
      127.0.0.1 nzads.net.nz
      127.0.0.1 okcounter.com
      127.0.0.1 www.okww.net #[Trojan.StartPage.C]
      127.0.0.1 stat.onestat.com
      127.0.0.1 www.onestat.com
      127.0.0.1 one.ru
      127.0.0.1 cnt.one.ru
      127.0.0.1 stats0.one.ru
      127.0.0.1 stats1.one.ru
      127.0.0.1 stats2.one.ru
      127.0.0.1 www.oneandonlynetwork.com #[Ticketmaster]
      127.0.0.1 server1.opentracker.net
      127.0.0.1 www.opinionlab.com
      127.0.0.1 ccc00.opinionlab.com
      127.0.0.1 rate.opinionlab.com
      127.0.0.1 banner.orb.net
      127.0.0.1 www.originalicons.com #[F1 Organizer Class]
      127.0.0.1 geoads.osdn.com
      127.0.0.1 tg-images.osdn.com
      127.0.0.1 otx5.otxresearch.com
      127.0.0.1 otx.ifilm.com #[OTXMedia.dll]
      127.0.0.1 survey.otxresearch.com #[TrojanDownloader.OTXloader.A]
      127.0.0.1 www.otxresearch.com #[OTXMovie Class]
      127.0.0.1 adpopper.outblaze.com #[bargain-buddy.net]
      127.0.0.1 www.p3marketing.com #[Zapspot]
      127.0.0.1 click.payserve.com
      127.0.0.1 www.pc-test.net
      127.0.0.1 ad1.peel.com
      127.0.0.1 ad3.peel.com
      127.0.0.1 ads.peel.com
      127.0.0.1 ad4.peel.com
      127.0.0.1 ads5.peel.com
      127.0.0.1 www.peel.com
      127.0.0.1 www.peel.net
      127.0.0.1 ads.pennyweb.com #[addynamix.com]
      127.0.0.1 banners.pennyweb.com
      127.0.0.1 www.peruvianmarket.com #[Trojan.Beagooz.D][server down?]
      127.0.0.1 ads.photosight.ru
      127.0.0.1 phpadsnew.com
      127.0.0.1 www.phpadsnew.com
      127.0.0.1 ads2.playnet.com
      127.0.0.1 popfind.net #[Adware.Ddpop]
      127.0.0.1 www.popupads.com
      127.0.0.1 www.popupad.net
      127.0.0.1 popupblockade.com #[Parasite.Httper]
      127.0.0.1 www.popupblockade.com
      127.0.0.1 popupmoney.com #[Restricted Zone site]
      127.0.0.1 server01.popupmoney.com
      127.0.0.1 www.popupmoney.com
      127.0.0.1 popadstop.com #[Adware.PopAdStop]
      127.0.0.1 www.popadstop.com
      127.0.0.1 www.popunder.info #[TROJ_CHECKIN.B]
      127.0.0.1 www.popupswappers.com
      127.0.0.1 ad.popupswappers.com
      127.0.0.1 www.popuptop.com
      127.0.0.1 www2.portdetective.com
      127.0.0.1 www.positivebeats.com #[C2Media\LOP]
      127.0.0.1 x0x0l.pp.ru #[BKDR_CCT.A]
      127.0.0.1 www.praize.com #[Adware.Praize]
      127.0.0.1 1.primaryads.com
      127.0.0.1 www.privacyoutpost.com #[Troj/Regldr-A]
      127.0.0.1 www.prtracker.com
      127.0.0.1 www.profitzone.com #[ProfitZONE Adbar]
      127.0.0.1 prolivation.com #[Restricted Zone site]
      127.0.0.1 www.prolivation.com
      127.0.0.1 ads.pro-market.net
      127.0.0.1 www.promo.com.au
      127.0.0.1 www.prutect.com #[Spyware.e2give][Win32.Prutec.A]
      127.0.0.1 www.pstopper.com
      127.0.0.1 ad.sma.punto.net
      127.0.0.1 sma.punto.net
      127.0.0.1 www.pureseeker.com #[C2Media\LOP]
      127.0.0.1 www.pwallet.com #[Restricted Zone site]
      127.0.0.1 rads01.quadrogram.com #[Adware.Quadro][Memwatcher.B][TROJ_PEPER.A]
      127.0.0.1 adserv.quality-channel.de
      127.0.0.1 www.quarterserver.de
      127.0.0.1 questionmarket.com
      127.0.0.1 amch.questionmarket.com
      127.0.0.1 ch.questionmarket.com
      127.0.0.1 survey.questionmarket.com
      127.0.0.1 www.questionmarket.com
      127.0.0.1 download.quickflicks.com #[Parasite.SVAPlayer]
      127.0.0.1 www.qq886.com #[Backdoor.Semes]
      127.0.0.1 ramgo.com #[Restricted Zone site]
      127.0.0.1 www.ramgo.com #[Win32.Startpage.B]
      127.0.0.1 www.autoraskrutka.ru #[Spyware.Acext]
      127.0.0.1 www.raskrutim.ru #[Spyware.Acext]
      127.0.0.1 www.realclicks.com
      127.0.0.1 www.relmaxtop.com
      127.0.0.1 banner.relcom.ru
      127.0.0.1 adservice.recon-networks.com
      127.0.0.1 rightmedia.net
      127.0.0.1 rightstats.com
      127.0.0.1 www.rightstats.com
      127.0.0.1 m.rmbclick.com
      127.0.0.1 www.rgs-rostock.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
      127.0.0.1 track.roiservice.com
      127.0.0.1 ad.ro2cn.com #[Adware.Ro2cn]
      127.0.0.1 www.sandboxer.com #[Adware.Quadro][memorywatcher.com][Memwatcher.B]
      127.0.0.1 www.savehits.com
      127.0.0.1 st.sageanalyst.net
      127.0.0.1 scorpionsearch.com #[W32.Adclicker.C.Trojan]
      127.0.0.1 www.scorpionsearch.com #[x10.com][Trojan.Clicker.NetBuie a-b]
      127.0.0.1 adsremote.scripps.com
      127.0.0.1 te.scripps.com
      127.0.0.1 counter.search.bg
      127.0.0.1 searchalot.com
      127.0.0.1 cards.searchalot.com
      127.0.0.1 mail.searchalot.com
      127.0.0.1 search.searchalot.com
      127.0.0.1 web.searchalot.com
      127.0.0.1 www.searchalot.com #[Adware-Tronix]
      127.0.0.1 searchandclick.com
      127.0.0.1 search.searchandclick.com
      127.0.0.1 www.searchandclick.com #[Browseraid][SearchAndClick]
      127.0.0.1 searchby.net
      127.0.0.1 www.searchby.net #[Ultimate Popup Killer]
      127.0.0.1 searchfst.com #[SFUtility Class][keywordsinc.com]
      127.0.0.1 www.searchfst.com
      127.0.0.1 www.searchgauge.com
      127.0.0.1 www.search-control.com #[TrojanDropper.Win32.Small.ig]
      127.0.0.1 search-itnow.com #[Parasite.AdultLinks]
      127.0.0.1 www.search-itnow.com
      127.0.0.1 www.searchmachine.com
      127.0.0.1 www.searchmagnifier.com
      127.0.0.1 www.searchrelevancy.com
      127.0.0.1 www.searchresult.net #[Parasite.IgetNet]
      127.0.0.1 searchseekfind.com #[Adware.SearchSeekFind]
      127.0.0.1 www.searchseekfind.com
      127.0.0.1 browser.secondpower.com
      127.0.0.1 download.secondpower.com
      127.0.0.1 www1.secondpower.com
      127.0.0.1 www3.secondpower.com #[KB320159]
      127.0.0.1 www.secondpower.com
      127.0.0.1 adserver.securityfocus.com #[RealMedia]
      127.0.0.1 www.selfsurveys.com
      127.0.0.1 www.seehits.com
      127.0.0.1 www.sendtraffic.com
      127.0.0.1 sesso.com
      127.0.0.1 www.sesso.com #[VBS.Biscuit.A@mm]
      127.0.0.1 ds.serving-sys.com
      127.0.0.1 quasar.sitegauge.com
      127.0.0.1 tracker.sitescout.com
      127.0.0.1 advertpro.sitepoint.com
      127.0.0.1 www.sitestatslive.com
      127.0.0.1 www.sitetracking.info #[Naughty Pops]
      127.0.0.1 www.shadowcrew.com #[spam]
      127.0.0.1 adserver.sharewareonline.com #[nictechnetworks.com]
      127.0.0.1 www.shockcounter.com
      127.0.0.1 shopathomeselect.com #[Parasite.ShopAtHomeSelect]
      127.0.0.1 download1.shopathomeselect.com #[ADW_SAHAGENT.A]
      127.0.0.1 downloads.shopathomeselect.com
      127.0.0.1 www.shopathomeselect.com #[Adware.SAHAgent]
      127.0.0.1 skeech.com
      127.0.0.1 www.skeech.com #[Restricted Zone site]
      127.0.0.1 smart2com.net #[Trojan.Autoproxy]
      127.0.0.1 smart-browser.com
      127.0.0.1 update.smart-browser.com #[Parasite.SmartBrowser]
      127.0.0.1 www.smart-browser.com
      127.0.0.1 smartclicks.net
      127.0.0.1 www.smartclicks.net
      127.0.0.1 smarter.com #[Restricted Zone site]
      127.0.0.1 sidebar.smarter.com
      127.0.0.1 www.smarter.com
      127.0.0.1 ads.smni.com
      127.0.0.1 static.smni.com
      127.0.0.1 www.sonyasys.com #[Downloader.Botten]
      127.0.0.1 www1.spaex.com #[searchboss.com]
      127.0.0.1 www.specialoffersnetworks.com
      127.0.0.1 www.spedia.net #[SpediaBar]
      127.0.0.1 www.spyarsenal.com #[Spyware.DesktopSpy][Spyware.FamilyKeylog]
      127.0.0.1 spyferret.com #[OnlinePcFix.SpyFerret]
      127.0.0.1 www.spyferret.com
      127.0.0.1 spyware.com #[roar.com]
      127.0.0.1 www.ssppyy.com #[Spyware.Ssppyy]
      127.0.0.1 www.s-tracking.com
      127.0.0.1 adsintl.starwave.com
      127.0.0.1 c1.statcounter.com
      127.0.0.1 c2.statcounter.com
      127.0.0.1 c3.statcounter.com
      127.0.0.1 www.statcounter.com
      127.0.0.1 js.statistici.ro
      127.0.0.1 log.statistici.ro
      127.0.0.1 s.statistici.ro
      127.0.0.1 www.statomatic.com
      127.0.0.1 reg.stats4all.com
      127.0.0.1 stats4you.com
      127.0.0.1 www.stats4you.com
      127.0.0.1 ctgbn.stellaremperor.com #[Backdoor.Alets]
      127.0.0.1 www.stickypops.com
      127.0.0.1 clix.superclix.de
      127.0.0.1 www.superlogy.com #[AdvWare.ToolBar.VB.b]
      127.0.0.1 sqwire.com #[Adware.Sqwire][Xupiter.Sqwire]
      127.0.0.1 www.sqwire.com #[Parasite.Xupiter][Adware-PornKings]
      127.0.0.1 www.supaseek.com #[Spyware.Supaseek]
      127.0.0.1 rd1.surfernetwork.com #[SurferNETWORK Plugin]
      127.0.0.1 www.surfernetwork.com
      127.0.0.1 surfsidekick.com
      127.0.0.1 dl.surfsidekick.com
      127.0.0.1 www.surfsidekick.com #[Adware.SurfSideKick]
      127.0.0.1 www2.surveyfocus.com
      127.0.0.1 www.surveynetworks.com
      127.0.0.1 www.surveysite.com
      127.0.0.1 www2.survey-poll.com #[microsoft]
      127.0.0.1 swift-look.com #[phishing exploit]
      127.0.0.1 www.symantic.com #[Typo Squatter]
      127.0.0.1 adpick.switchboard.com
      127.0.0.1 adtag.sympatico.ca
      127.0.0.1 www.syspage.com #[pop-up scam]
      127.0.0.1 ad.uk.tangozebra.com
      127.0.0.1 targetsearch.info #[Trojan.StartPage.H]
      127.0.0.1 adult.targetsearch.info
      127.0.0.1 go.targetsearch.info
      127.0.0.1 tat-neftbank.ru #[Backdoor.Berbew.H]
      127.0.0.1 www.tech-marketresearch.com
      127.0.0.1 www.textads.biz
      127.0.0.1 a.tfag.de
      127.0.0.1 ak.tfag.de
      127.0.0.1 theaffiliateprogram.com
      127.0.0.1 myaffiliateprogram.com
      127.0.0.1 www.the-counter.net
      127.0.0.1 adbot.theonion.com
      127.0.0.1 www.thepokerclub.com #[SecurityRisk.ClubPoker]
      127.0.0.1 thesearchmall.com #[Adware.SearchMall]
      127.0.0.1 www.thesearchmall.com
      127.0.0.1 tnc4u.com #[Parasite.DownloadPlus]
      127.0.0.1 new.tnc4u.com
      127.0.0.1 www.tnc4u.com #[Adware.DownloadPlus]
      127.0.0.1 www.toilet.com
      127.0.0.1 ad.tomshardware.com
      127.0.0.1 tooncomics.com #[IEDLL.ToonComics][here4search.com]
      127.0.0.1 www.tooncomics.com #[Downloader.Tooncom][CWS.Aff.Tooncomics]
      127.0.0.1 log.trafic.ro
      127.0.0.1 storage.trafic.ro
      127.0.0.1 tool4ame.com #[TROJ_GOLID.A][Adware.IAGold]
      127.0.0.1 www.toolshack.com
      127.0.0.1 ads.toplayerserver.com
      127.0.0.1 www1.toplayerserver.com
      127.0.0.1 www.toplayerserver.com
      127.0.0.1 toprebates.com #[webrebates]
      127.0.0.1 www.toprebates.com
      127.0.0.1 stat.toprefsys.com
      127.0.0.1 www.top-search.com #[Adware-SSF.dr]
      127.0.0.1 ad.topstat.com
      127.0.0.1 nl.topstat.com #[Restricted Zone site]
      127.0.0.1 s26.topstat.com
      127.0.0.1 xl.topstat.com
      127.0.0.1 ads.track-star.com
      127.0.0.1 adserver.track-star.com
      127.0.0.1 geo2.track-star.com
      127.0.0.1 www.track-star.com
      127.0.0.1 tradeexit.com
      127.0.0.1 www.tradeexit.com #[Parasite.Winupie]
      127.0.0.1 www.trafficbeamer.nl
      127.0.0.1 trafficg.com #[Restricted Zone site]
      127.0.0.1 www.trafficg.com
      127.0.0.1 ad.trafficmp.com
      127.0.0.1 images.trafficmp.com
      127.0.0.1 t.trafficmp.com
      127.0.0.1 www.trafficflame.com
      127.0.0.1 trafficfile.com
      127.0.0.1 www.trafficfile.com
      127.0.0.1 trackyourstats.com
      127.0.0.1 trafficmarketplace.com
      127.0.0.1 get.trafficmultiplier.com
      127.0.0.1 go.trafficmultiplier.com
      127.0.0.1 goto.trafficmultiplier.com
      127.0.0.1 a.tribalfusion.com
      127.0.0.1 cdn1.tribalfusion.com
      127.0.0.1 m.tribalfusion.com
      127.0.0.1 tribalfusion.speedera.net
      127.0.0.1 ads.tucows.com
      127.0.0.1 counts.tucows.com
      127.0.0.1 google.tucows.com
      127.0.0.1 www.turbomemorycharger.com #[Adware.Fapi]
      127.0.0.1 ads.ucomics.com
      127.0.0.1 image.ugo.com
      127.0.0.1 mediamgr.ugo.com
      127.0.0.1 www.ukbanners.com
      127.0.0.1 ultimatecounter.com
      127.0.0.1 www.ultimatecounter.com
      127.0.0.1 www.ultimatepopupkiller.com #[searchby.net]
      127.0.0.1 www.ultraload.net #[MHTMLRedir.Exploit]
      127.0.0.1 adcontroller.unicast.com
      127.0.0.1 ads.unlimitedbanners.com
      127.0.0.1 ads1.updated.com
      127.0.0.1 www.updatenow.org #[Messenger Pop-up]
      127.0.0.1 www.upgradenow.org
      127.0.0.1 www.upp2ono41xi9rman2.com #[TrojanDropper.Small.LG]
      127.0.0.1 url.biz.ua #[Download.Ject.B]
      127.0.0.1 config.url404.com #[Parasite.Httper]
      127.0.0.1 urlblaze.com #[Adware.TurboDownload]
      127.0.0.1 www.urlblaze.com #[Adware Bundler]
      127.0.0.1 www.urlblaze.net #[IEDriver][ADW_RULEDOR.C]
      127.0.0.1 usachoice.net
      127.0.0.1 ads.valuead.com #[Restricted Zone site]
      127.0.0.1 adnetintads.valuead.com
      127.0.0.1 banners.valuead.com
      127.0.0.1 cs.valuead.com
      127.0.0.1 oin.valuead.com #[outerinfo.com]
      127.0.0.1 servedby.valuead.com
      127.0.0.1 ad.valuehost.ru
      127.0.0.1 image.versiontracker.com
      127.0.0.1 spinbox.versiontracker.com
      127.0.0.1 ads.vesperexchange.com
      127.0.0.1 www.vesperexchange.com
      127.0.0.1 cinnam.vibrahost.com #[PWSteal.Revcuss.C][Win32.Revcuss.C]
      127.0.0.1 vivi.vibrahost.com #[PWSteal.Revcuss.A]
      127.0.0.1 dns2010.vicp.net #[Backdoor.Tumag]
      127.0.0.1 uygurman.vicp.net #[Trojan.Riler][Troj/Riler-B]
      127.0.0.1 oas.villagevoice.com
      127.0.0.1 www.vikord.com #[Download.Ject.C]
      127.0.0.1 visit-link.com
      127.0.0.1 www.voonda.com #[Spyware.TAFbar]
      127.0.0.1 generic.vpptechnologies.com
      127.0.0.1 images2.vpptechnologies.com
      127.0.0.1 main.vpptechnologies.com
      127.0.0.1 msxml.vpptechnologies.com
      127.0.0.1 static.vpptechnologies.com #[hotsearchbar.com]
      127.0.0.1 xml.vpptechnologies.com #[BlazeFind]
      127.0.0.1 www.vstats.net
      127.0.0.1 ads.vnuemedia.com
      127.0.0.1 sevenc.vze.com #[VBS.Powcox@mm]
      127.0.0.1 www.w3exit.com
      127.0.0.1 ng3.ads.warnerbros.com
      127.0.0.1 wazam.com
      127.0.0.1 www.wazam.com #[Parasite.Wazam]
      127.0.0.1 wcft.net #[Parasite.LinkReplacer]
      127.0.0.1 www.wcft.net
      127.0.0.1 ads.weather.com
      127.0.0.1 ads.webattack.com
      127.0.0.1 webcounter.com
      127.0.0.1 www.webcounter.com
      127.0.0.1 ads.webhosting.info
      127.0.0.1 www.weblink.ru #[server down?]
      127.0.0.1 adv.webmd.com
      127.0.0.1 webhits.de
      127.0.0.1 banners.webmasterplan.com
      127.0.0.1 stat.webmedia.pl
      127.0.0.1 bannervip.web1000.com
      127.0.0.1 ads.webads360.com
      127.0.0.1 clickcash.webpower.com
      127.0.0.1 orders.webpower.com
      127.0.0.1 img.webring.com
      127.0.0.1 img1.webring.com
      127.0.0.1 ads.webshots.com
      127.0.0.1 websponsors.com
      127.0.0.1 a.websponsors.com
      127.0.0.1 ads.websponsors.com
      127.0.0.1 g.websponsors.com
      127.0.0.1 www.websponsors.com
      127.0.0.1 www.webstars2000.com
      127.0.0.1 hits.webstat.com
      127.0.0.1 www.wenksdisdkjeilsow.com #[Parasite.AutoStartup][Download.Trojan]
      127.0.0.1 wetrack.it
      127.0.0.1 st.wetrack.it
      127.0.0.1 www.wgutv.com #[Adware.BuddyLinks]
      127.0.0.1 partner1.whatsfind.com
      127.0.0.1 www.whatsfind.com #[HTML_STARTPAGE.C]
      127.0.0.1 www.win-fix.com #[Rogue/Suspect]
      127.0.0.1 window1.com
      127.0.0.1 ads.winhelp2002.com
      127.0.0.1 ads.winsite.com
      127.0.0.1 winstream.com #[Parasite.Searchex]
      127.0.0.1 www.winstream.com
      127.0.0.1 clicktrack.wnu.com
      127.0.0.1 www.wowweb.net #[Adware.WWWBar]
      127.0.0.1 www.wurldmedia.com #[Adware.Wurldmedia][WurldMedia][KB321923]
      127.0.0.1 x0x.biz
      127.0.0.1 www.x0x.biz #[Backdoor.Berbew.D]
      127.0.0.1 xtra.co.nz
      127.0.0.1 nedstats.xs4all.nl
      127.0.0.1 hit1.xstats.com
      127.0.0.1 view1.xstats.com
      127.0.0.1 ads.xtra.co.nz
      127.0.0.1 bs.yandex.ru
      127.0.0.1 counter.yadro.ru
      127.0.0.1 crsky2004.yeah.net #[Backdoor.Singu.B]
      127.0.0.1 yourspecialoffers.com #[FavoriteMan]
      127.0.0.1 www.yourspecialoffers.com
      127.0.0.1 ysearchus.com #[Parasite.TinyBar]
      127.0.0.1 www.ysearchus.com
      127.0.0.1 zuvio.com #[UCSearch.ucUCSearch]
      127.0.0.1 www.zuvio.com #[Adware.OpenSite][OpenSite]
      127.0.0.1 bannerads.zwire.com
      127.0.0.1 www.0stats.com
      127.0.0.1 cc.1asphost.com #[Trojan.Bansap]
      127.0.0.1 www.123counts.com #[hitslink.com]
      127.0.0.1 www.123mania.com #[SrchHook Class][Parasite.123Mania]
      127.0.0.1 123stat.com
      127.0.0.1 1234.2bro.com #[Adware.Satbo]
      127.0.0.1 www.241hits.com
      127.0.0.1 up.isp.2ch.net #[Trojan.Upchan]
      127.0.0.1 www.321search.com #[SearchAssistant.dll]
      127.0.0.1 ct.360i.com
      127.0.0.1 www.ff.iij4u.or.jp #[Trojan.Upchan]
      127.0.0.1 download.35mb.com #[impregnable.net]
      127.0.0.1 www.35mb.com #[download_35mb_com.applet]
      127.0.0.1 1000stars.ru
      127.0.0.1 xxxwwwjjjhd.20forfree.com #[W32.Autex.Worm]
      127.0.0.1 www.xxxwwwjjjhd.20forfree.com
      127.0.0.1 ad.37.com
      127.0.0.1 2jm.com
      127.0.0.1 7adpower.com
      127.0.0.1 www.7adpower.com #[Svezia.Dialer][VacPro.UserControl1]
      127.0.0.1 7am.com
      127.0.0.1 www.777search.com #[LOP]
      127.0.0.1 ad2.163.com
      127.0.0.1 adclient.163.com
      127.0.0.1 popme.163.com
      127.0.0.1 smtp.163.com #[Trojan.PSW.Ajim_bbs]
      127.0.0.1 ajim.delphibbs.com #[Trojan.PSW.Ajim_bbs]
      127.0.0.1 14713804A.l2m.net #[LiveTechnology]
      127.0.0.1 banner.50megs.com
      127.0.0.1 guannan.3322.net #[Restricted Zone site]
      127.0.0.1 www.fan8.com
      127.0.0.1 banners.dot.tk
      127.0.0.1 topsites.us #[Parasite.eStart]
      127.0.0.1 0-ol1oiz-xolxii1-oxli10ozl1l1-o-l-11-iizxp-l-0o-oll11iz0oil-ol.com
      127.0.0.1 www.123banners.com
      127.0.0.1 ftp.123banners.com
      127.0.0.1 123go.com
      127.0.0.1 ns1.123go.net
      127.0.0.1 n-case.com
      127.0.0.1 www.n-case.com
      127.0.0.1 ads.180solutions.com
      127.0.0.1 ax.180solutions.com #[180SAInstaller Class]
      127.0.0.1 bis.180solutions.com #[nCaseInstaller Class]
      127.0.0.1 bisads.180solutions.com
      127.0.0.1 downloads.180solutions.com
      127.0.0.1 installs.180solutions.com
      127.0.0.1 ping.180solutions.com
      127.0.0.1 tv.180solutions.com
      127.0.0.1 www.180solutions.com #[Parasite.nCase]
      127.0.0.1 www.180searchassistant.com #[Adware.180Search]
      127.0.0.1 www.surfassistant.com #[Adware.SurfAssistant]
      127.0.0.1 downloads.zango.com
      127.0.0.1 games.zango.com
      127.0.0.1 infinity.zango.com #[ZangoInstaller Class]
      127.0.0.1 messenger.zango.com
      127.0.0.1 showtimes.zango.com
      127.0.0.1 www.zango.com
      127.0.0.1 www.zangomessenger.com
      127.0.0.1 www.zangoshowtimes.com
      127.0.0.1 address.3721.com
      127.0.0.1 agent.3721.com
      127.0.0.1 assistant.3721.com
      127.0.0.1 cns.3721.com
      127.0.0.1 cnsmin.3721.com
      127.0.0.1 corp.3721.com
      127.0.0.1 dir.3721.com
      127.0.0.1 download.3721.com
      127.0.0.1 express.3721.com
      127.0.0.1 img.3721.com
      127.0.0.1 magic.3721.com
      127.0.0.1 mark.3721.com
      127.0.0.1 meta.3721.com
      127.0.0.1 msearch.3721.com
      127.0.0.1 sbox.3721.com
      127.0.0.1 shanghai.3721.com
      127.0.0.1 sina.3721.com
      127.0.0.1 user.3721.com
      127.0.0.1 wap.3721.com
      127.0.0.1 www.3721.com #[Adware.Chinet][ADW_CNSMIN.A]
      127.0.0.1 yahoo.3721.com
      127.0.0.1 3721.com
      127.0.0.1 download.feiyang.com
      127.0.0.1 adtracker.411web.com
      127.0.0.1 hits.411web.com
      127.0.0.1 overture.411web.com
      127.0.0.1 static.411web.com
      127.0.0.1 xml.411web.com
      127.0.0.1 search.letssearch.com
      127.0.0.1 search2.letssearch.com
      127.0.0.1 www.letssearch.com #[BrowserAid.LetsSearch]
      127.0.0.1 7search.com #[Parasite.7FaSSt Search]
      127.0.0.1 www.7search.com
      127.0.0.1 fstrack.7search.com
      127.0.0.1 impression.7search.com
      127.0.0.1 img.7meta.com
      127.0.0.1 www.7metasearch.com
      127.0.0.1 bannerx.adtactics.com
      127.0.0.1 adtactics.com
      127.0.0.1 www.adtactics.com
      127.0.0.1 ajokeaday.com
      127.0.0.1 bannersxchange.com
      127.0.0.1 img.bannersxchange.com
      127.0.0.1 www.linkstoyou.com
      127.0.0.1 www.payperranking.com
      127.0.0.1 www.pay-per-search.com
      127.0.0.1 paypertext.com
      127.0.0.1 predictivesearch.com
      127.0.0.1 tracking.roispy.com
      127.0.0.1 www.roispy.com
      127.0.0.1 tracking.spiderbait.com
      127.0.0.1 www.spiderbait.com
      127.0.0.1 advertisingagent.com
      127.0.0.1 clicks.about.com
      127.0.0.1 f.about.com
      127.0.0.1 home.about.com
      127.0.0.1 js.get.about.com
      127.0.0.1 images.about.com
      127.0.0.1 lunafetch.about.com
      127.0.0.1 pixel3.about.com
      127.0.0.1 sprinks-clicks.about.com
      127.0.0.1 statistics.s5.com
      127.0.0.1 ad.aboutwebservices.com
      127.0.0.1 abroadsoftware.com #[EzSearchBar]
      127.0.0.1 www.exits.ro
      127.0.0.1 superwebsearch.com #[Parasite.ILookup][Adware.ILookup]
      127.0.0.1 www.superwebsearch.com
      127.0.0.1 adops.adbureau.net
      127.0.0.1 etype.adbureau.net
      127.0.0.1 granada.adbureau.net
      127.0.0.1 www.adbureau.net
      127.0.0.1 accipiter.speedera.net
      127.0.0.1 ad-blaster.com
      127.0.0.1 www.ad-blaster.com
      127.0.0.1 promote4profit.com
      127.0.0.1 www.promote4profit.com
      127.0.0.1 addfreestats.com
      127.0.0.1 top.addfreestats.com
      127.0.0.1 www.addfreestats.com
      127.0.0.1 www.3dstats.com
      127.0.0.1 www1.addfreestats.com
      127.0.0.1 www2.addfreestats.com
      127.0.0.1 www3.addfreestats.com
      127.0.0.1 adlogix.com #[InPop.InControl][IEEnhancer]
      127.0.0.1 lasagne.adlogix.com
      127.0.0.1 publisher.adlogix.com
      127.0.0.1 traffic.adlogix.com
      127.0.0.1 trafficsource.adlogix.com
      127.0.0.1 www.adlogix.com
      127.0.0.1 getpopped.com
      127.0.0.1 www.getpopped.com
      127.0.0.1 hitgo.com #[IPU][InPop.InControl]
      127.0.0.1 www.hitgo.com
      127.0.0.1 popmonster.com #[IEFeature Class]
      127.0.0.1 www.popmonster.com #[TROJ_POPMON.A]
      127.0.0.1 r2.trafficserverstats.com
      127.0.0.1 ads.adorigin.com
      127.0.0.1 dev.adorigin.com
      127.0.0.1 www.adorigin.com
      127.0.0.1 blowsearch.com
      127.0.0.1 msxml.blowsearch.com
      127.0.0.1 web.blowsearch.com #[infospace.com]
      127.0.0.1 www.blowsearch.com
      127.0.0.1 cb.adprofile.net
      127.0.0.1 content.adprofile.net
      127.0.0.1 tx.adprofile.net
      127.0.0.1 w2-ver.adprofile.net
      127.0.0.1 adteractive.com
      127.0.0.1 www.adteractive.com
      127.0.0.1 adtegrity.com
      127.0.0.1 www.adtegrity.com
      127.0.0.1 webalize.com #[SearchCentrix][VisiCom.SearchCentric]
      127.0.0.1 toolbar.webalize.com #[downloads.searchcentrix.com]
      127.0.0.1 www.webalize.com #[Visicom Media Toolbar]
      127.0.0.1 webalize.net
      127.0.0.1 www.webalize.net
      127.0.0.1 webalize.mygeek.com
      127.0.0.1 advertisementbanners.com
      127.0.0.1 ads.specificclick.com
      127.0.0.1 www.specificclick.com
      127.0.0.1 specificpop.com
      127.0.0.1 ads.specificpop.com
      127.0.0.1 banners.specificpop.com
      127.0.0.1 www.specificpop.com
      127.0.0.1 adopt.specificclick.net
      127.0.0.1 images.specificclick.net
      127.0.0.1 image.adjuggler.com
      127.0.0.1 rotator.adjuggler.com
      127.0.0.1 www.adjuggler.com
      127.0.0.1 thruport.com
      127.0.0.1 adj54.thruport.com
      127.0.0.1 imageserver1.thruport.com
      127.0.0.1 www.thruport.com
      127.0.0.1 alset.com #[WIN32/HXDL AL]
      127.0.0.1 www.alset.com
      127.0.0.1 aveo.com
      127.0.0.1 www.aveo.com #[server down?]
      127.0.0.1 allcybersearch.com #[REG_STARTPAGE.A]
      127.0.0.1 www.allcybersearch.com
      127.0.0.1 amigeek.com
      127.0.0.1 www.amigeek.com
      127.0.0.1 clickyestoenter.net
      127.0.0.1 www.clickyestoenter.net
      127.0.0.1 www.gay50.com
      127.0.0.1 gocybersearch.com
      127.0.0.1 www.gocybersearch.com
      127.0.0.1 www.hotelxxxcams.com
      127.0.0.1 hotpopup.com
      127.0.0.1 search.hotpopup.com
      127.0.0.1 www.hotpopup.com
      127.0.0.1 hotsearchbox.com #[JAVA_STARTPAGE.F]
      127.0.0.1 www.hotsearchbox.com
      127.0.0.1 i--search.com
      127.0.0.1 www.i--search.com #[StartPage-FN]
      127.0.0.1 jethomepage.com #[JS.Exception.Exploit]
      127.0.0.1 www.jethomepage.com #[Troj/JetHome-B]
      127.0.0.1 jetseeker.com #[CWS.Bootconf]
      127.0.0.1 www.jetseeker.com
      127.0.0.1 searchxl.com #[Adware.ZeroPopUpBar]
      127.0.0.1 www.searchxl.com
      127.0.0.1 tinybar.com
      127.0.0.1 www.tinybar.com #[Parasite.TinyBar]
      127.0.0.1 topsearcher.com #[JV/Goplanet]
      127.0.0.1 www.topsearcher.com #[Troj/JetHome-J]
      127.0.0.1 trixscripts.com
      127.0.0.1 www.trixscripts.com
      127.0.0.1 zeropopup.com #[Parasite.ZeroPopUp]
      127.0.0.1 www.zeropopup.com #[Tellafriend.Trojan]
      127.0.0.1 znext.com #[JS_TRAFFICHBAR.A][Parasite.TinyBar]
      127.0.0.1 www.znext.com #[Parasite.ZeroPopUp][App/P0P-A]
      127.0.0.1 adpowerzone.com
      127.0.0.1 ads.adpowerzone.com
      127.0.0.1 easy.adpowerzone.com
      127.0.0.1 ss.adpowerzone.com
      127.0.0.1 tb.adpowerzone.com
      127.0.0.1 tb-static.adpowerzone.com #[Adware.Websearch]
      127.0.0.1 www.adpowerzone.com #[Adware.Searchexplorer]
      127.0.0.1 adserver.adsincontext.com
      127.0.0.1 ns1.adsincontext.com
      127.0.0.1 srv01.adsincontext.com
      127.0.0.1 srv02.adsincontext.com
      127.0.0.1 srv03.adsincontext.com
      127.0.0.1 srv04.adsincontext.com
      127.0.0.1 srv05.adsincontext.com
      127.0.0.1 srv07.adsincontext.com
      127.0.0.1 adgoblin.com #[Adware.AdGoblin]
      127.0.0.1 crossroad.adgoblin.com
      127.0.0.1 www.adgoblin.com #[AdGoblin.foontext]
      127.0.0.1 adforce.adtech.de
      127.0.0.1 adserver.adtech.de
      127.0.0.1 adserv003.adtech.de
      127.0.0.1 imageserv.adtech.de
      127.0.0.1 livingnet.adtech.de
      127.0.0.1 cdn1.adsdk.com
      127.0.0.1 cdn2.adsdk.com #[VirtualBouncer]
      127.0.0.1 advertising.com
      127.0.0.1 adserve.advertising.com
      127.0.0.1 bannerfarm.ace.advertising.com
      127.0.0.1 demo.advertising.com
      127.0.0.1 opera1-servedby.advertising.com
      127.0.0.1 servedby.advertising.com
      127.0.0.1 rd.advertising.com
      127.0.0.1 wap.advertising.com
      127.0.0.1 www.advertising.com
      127.0.0.1 clk4.com
      127.0.0.1 www.clk4.com
      127.0.0.1 www.contextualclicks.com
      127.0.0.1 fastseeker.com #[Adware.FastSeek]
      127.0.0.1 www.fastseeker.com
      127.0.0.1 spyblast.com #[Parasite.SpyBlast]
      127.0.0.1 www.spyblast.com #[SBFullInst Control]
      127.0.0.1 ads.ign.com
      127.0.0.1 adserver.ign.com
      127.0.0.1 t.ign.com
      127.0.0.1 tracker.ign.com
      127.0.0.1 adserver.snowball.com
      127.0.0.1 polls.snowball.com
      127.0.0.1 scripts.snowball.com
      127.0.0.1 t.snowball.com
      127.0.0.1 tracker.snowball.com
      127.0.0.1 altnet.com
      127.0.0.1 file.altnet.com
      127.0.0.1 media.altnet.com
      127.0.0.1 ts.altnet.com
      127.0.0.1 tss.altnet.com
      127.0.0.1 pm.altnet.com
      127.0.0.1 www.altnet.com
      127.0.0.1 www.altnetp2p.com
      127.0.0.1 brilliantdigital.com #[Parasite.BDE]
      127.0.0.1 st.brilliantdigital.com
      127.0.0.1 www.brilliantdigital.com
      127.0.0.1 b3d.com
      127.0.0.1 www.b3d.com
      127.0.0.1 bde3d.com
      127.0.0.1 xiti.com
      127.0.0.1 loga.xiti.com
      127.0.0.1 logc13.xiti.com
      127.0.0.1 logi6.xiti.com
      127.0.0.1 logi7.xiti.com
      127.0.0.1 logv3.xiti.com
      127.0.0.1 logv18.xiti.com
      127.0.0.1 logv20.xiti.com
      127.0.0.1 logp.xiti.com
      127.0.0.1 trafic.xiti.com
      127.0.0.1 www.xiti.com
      127.0.0.1 adintelligence.net
      127.0.0.1 acc.adintelligence.net
      127.0.0.1 adchannel.adintelligence.net
      127.0.0.1 creatives.adintelligence.net
      127.0.0.1 download.adintelligence.net #[SysAI]
      127.0.0.1 www.adintelligence.net
      127.0.0.1 adchannel.contextplus.net #[Parasite.AproposMedia]
      127.0.0.1 www.contextplus.net
      127.0.0.1 www.contextplus.com
      127.0.0.1 adv.peopleonpage.com
      127.0.0.1 app.peopleonpage.com
      127.0.0.1 download.peopleonpage.com #[POP Loader]
      127.0.0.1 envolo.peopleonpage.com
      127.0.0.1 img.peopleonpage.com
      127.0.0.1 srv.peopleonpage.com #[Spyware.Apropos.B]
      127.0.0.1 www.peopleonpage.com #[Apropos.bho][PeopleOnPage.Apropos]
      127.0.0.1 image.avenuea.com
      127.0.0.1 www.avenuea.com
      127.0.0.1 www.atdmt.com
      127.0.0.1 click.atdmt.com
      127.0.0.1 clk.atdmt.com
      127.0.0.1 spd.atdmt.com
      127.0.0.1 spe.atdmt.com
      127.0.0.1 switch.atdmt.com
      127.0.0.1 view.atdmt.com
      127.0.0.1 atlasdmt.com
      127.0.0.1 www.atlasdmt.com
      127.0.0.1 www.avenueainc.com
      127.0.0.1 active-alert-server.com
      127.0.0.1 www.active-alert-server.com
      127.0.0.1 amnv.net
      127.0.0.1 www.amnv.net
      127.0.0.1 avenuemedia.com
      127.0.0.1 www.avenuemedia.com
      127.0.0.1 climaxbucks.com #[ClimaxBucks.InternetOptimizer]
      127.0.0.1 cdn.climaxbucks.com
      127.0.0.1 mt1.climaxbucks.com
      127.0.0.1 mt23.climaxbucks.com
      127.0.0.1 xbs.climaxbucks.com
      127.0.0.1 www.climaxbucks.com
      127.0.0.1 xbs.cocktailcash.com
      127.0.0.1 cocktailcash.com
      127.0.0.1 www.cocktailcash.com
      127.0.0.1 ads.internet-optimizer.com #[Parasite.Internet Optimizer]
      127.0.0.1 internet-optimizer.com #[Downloader.Dyfcia.F]
      127.0.0.1 configure.internet-optimizer.com
      127.0.0.1 help.internet-optimizer.com
      127.0.0.1 www.internet-optimizer.com #[Adware.NetOptimizer]
      127.0.0.1 www.lunasearch.com
      127.0.0.1 movies-etc.com
      127.0.0.1 cdn.movies-etc.com
      127.0.0.1 www.movies-etc.com
      127.0.0.1 yoogee.com #[Parasite.Internet Optimizer]
      127.0.0.1 www.yoogee.com
      127.0.0.1 c.azjmp.com
      127.0.0.1 images.azoogleads.com
      127.0.0.1 images.azooimages.com
      127.0.0.1 www.azoogleads.com
      127.0.0.1 www.giftfox.com
      127.0.0.1 images.imgehost.com
      127.0.0.1 c.qckjmp.com
      127.0.0.1 google.begin2search.com
      127.0.0.1 toolbar.begin2search.com
      127.0.0.1 www.begin2search.com #[Adware.Begin2search][iiittt Class]
      127.0.0.1 click2findnow.com
      127.0.0.1 www.click2findnow.com
      127.0.0.1 desktoptraffic.net
      127.0.0.1 toolbar.desktoptraffic.net
      127.0.0.1 popupsearches.com
      127.0.0.1 www.popupsearches.com
      127.0.0.1 www.eaffiliateinc.com
      127.0.0.1 globalwebsearch.com #[Parasite.ILookup]
      127.0.0.1 toolbar.globalwebsearch.com #[I-Lookup.GWS]
      127.0.0.1 toolbar2.globalwebsearch.com #[iiittt Class]
      127.0.0.1 www.globalwebsearch.com #[Adware.ILookup]
      127.0.0.1 hotwebsearch.com
      127.0.0.1 www.hotwebsearch.com
      127.0.0.1 worldanywhere.com
      127.0.0.1 toolbar.worldanywhere.com
      127.0.0.1 www.worldanywhere.com
      127.0.0.1 adcounter.theglobeandmail.com
      127.0.0.1 adrates.theglobeandmail.com
      127.0.0.1 ads.globeandmail.com
      127.0.0.1 ads1.theglobeandmail.com
      127.0.0.1 visit.theglobeandmail.com
      127.0.0.1 www1.theglobeandmail.com
      127.0.0.1 adbot.com
      127.0.0.1 w1.adbot.com
      127.0.0.1 www.adbot.com
      127.0.0.1 counter.bloke.com
      127.0.0.1 www1.counter.bloke.com
      127.0.0.1 www3.counter.bloke.com
      127.0.0.1 www4.counter.bloke.com
      127.0.0.1 www5.counter.bloke.com
      127.0.0.1 www6.counter.bloke.com
      127.0.0.1 www7.counter.bloke.com
      127.0.0.1 counterbot.com
      127.0.0.1 cb1.counterbot.com
      127.0.0.1 ak.bluestreak.com
      127.0.0.1 ca1.bluestreak.com
      127.0.0.1 s0.bluestreak.com
      127.0.0.1 s0b.bluestreak.com
      127.0.0.1 s1.bluestreak.com
      127.0.0.1 s2.bluestreak.com
      127.0.0.1 s3.bluestreak.com
      127.0.0.1 s4.bluestreak.com
      127.0.0.1 s5.bluestreak.com
      127.0.0.1 s6.bluestreak.com
      127.0.0.1 s7.bluestreak.com
      127.0.0.1 s8.bluestreak.com
      127.0.0.1 www.bluestreak.com
      127.0.0.1 download.bonzi.com
      127.0.0.1 images.bonzi.com
      127.0.0.1 www.bonzi.com
      127.0.0.1 www.bonzibuddy.com
      127.0.0.1 bravenet.com
      127.0.0.1 adserv.bravenet.com
      127.0.0.1 images.bravenet.com
      127.0.0.1 linktrack.bravenet.com
      127.0.0.1 pub1.bravenet.com
      127.0.0.1 www.bravenet.com
      127.0.0.1 belgiandip.com #[ITS Protocol exploit]
      127.0.0.1 www.belgiandip.com
      127.0.0.1 fassia.net #[Parasite.AutoSearch]
      127.0.0.1 www.fassia.net
      127.0.0.1 flipperkeys.com
      127.0.0.1 www.flipperkeys.com
      127.0.0.1 www.illtemperedguppys.com
      127.0.0.1 manipulatingtheicesurface.com
      127.0.0.1 www.manipulatingtheicesurface.com
      127.0.0.1 www.no-beba-el-agua.com
      127.0.0.1 smokeandapancake.org #[Adware.Winpup]
      127.0.0.1 www.smokeandapancake.org #[AdClicker-O][Troj/Psyme-C]
      127.0.0.1 www.undergroundlair.net #[Troj/AdClick-N]
      127.0.0.1 www2.undergroundlair.net
      127.0.0.1 www.00z70az77mnsa-00swj1zzprh.com #[www2.undergroundlair.net]
      127.0.0.1 www.funcionamiento-con-la-tijera.com #[undergroundlair.net]
      127.0.0.1 www.pshnw6510990nmo-34nue7700.net
      127.0.0.1 burstmedia.com
      127.0.0.1 web.burstmedia.com
      127.0.0.1 roscoe.burstmedia.com
      127.0.0.1 ads.burstnet.com
      127.0.0.1 gifs.burstnet.com
      127.0.0.1 sj.burstnet.com
      127.0.0.1 te.burstnet.com
      127.0.0.1 www.burstnet.com
      127.0.0.1 www2.burstnet.com
      127.0.0.1 www3.burstnet.com
      127.0.0.1 www4.burstnet.com
      127.0.0.1 www5.burstnet.com
      127.0.0.1 www6.burstnet.com
      127.0.0.1 www.burstnet.akadns.net
      127.0.0.1 casalemedia.com
      127.0.0.1 as.casalemedia.com
      127.0.0.1 asg01.casalemedia.com
      127.0.0.1 asg02.casalemedia.com
      127.0.0.1 asg03.casalemedia.com
      127.0.0.1 asg04.casalemedia.com
      127.0.0.1 asg05.casalemedia.com
      127.0.0.1 asg06.casalemedia.com
      127.0.0.1 asg07.casalemedia.com
      127.0.0.1 asg08.casalemedia.com
      127.0.0.1 asg09.casalemedia.com
      127.0.0.1 asg10.casalemedia.com
      127.0.0.1 asg11.casalemedia.com
      127.0.0.1 asg12.casalemedia.com
      127.0.0.1 asg13.casalemedia.com
      127.0.0.1 asg14.casalemedia.com
      127.0.0.1 asg15.casalemedia.com
      127.0.0.1 asg16.casalemedia.com
      127.0.0.1 asg17.casalemedia.com
      127.0.0.1 asg18.casalemedia.com
      127.0.0.1 asg19.casalemedia.com
      127.0.0.1 asg20.casalemedia.com
      127.0.0.1 asg21.casalemedia.com
      127.0.0.1 asg22.casalemedia.com
      127.0.0.1 asg23.casalemedia.com
      127.0.0.1 asg24.casalemedia.com
      127.0.0.1 asg25.casalemedia.com
      127.0.0.1 asg26.casalemedia.com
      127.0.0.1 asg27.casalemedia.com
      127.0.0.1 asg28.casalemedia.com
      127.0.0.1 asg29.casalemedia.com
      127.0.0.1 asg30.casalemedia.com
      127.0.0.1 asg31.casalemedia.com
      127.0.0.1 asg32.casalemedia.com
      127.0.0.1 asg33.casalemedia.com
      127.0.0.1 asg34.casalemedia.com
      127.0.0.1 asg35.casalemedia.com
      127.0.0.1 asg36.casalemedia.com
      127.0.0.1 asg37.casalemedia.com
      127.0.0.1 asg38.casalemedia.com
      127.0.0.1 asg39.casalemedia.com
      127.0.0.1 asg40.casalemedia.com
      127.0.0.1 asg41.casalemedia.com
      127.0.0.1 asg42.casalemedia.com
      127.0.0.1 asg43.casalemedia.com
      127.0.0.1 asg44.casalemedia.com
      127.0.0.1 asg45.casalemedia.com
      127.0.0.1 asg46.casalemedia.com
      127.0.0.1 asg47.casalemedia.com
      127.0.0.1 asg48.casalemedia.com
      127.0.0.1 asg49.casalemedia.com
      127.0.0.1 asg50.casalemedia.com
      127.0.0.1 asg51.casalemedia.com
      127.0.0.1 asg52.casalemedia.com
      127.0.0.1 aslg01.casalemedia.com
      127.0.0.1 aslg02.casalemedia.com
      127.0.0.1 aslg03.casalemedia.com
      127.0.0.1 aslg04.casalemedia.com
      127.0.0.1 aslg05.casalemedia.com
      127.0.0.1 aslg06.casalemedia.com
      127.0.0.1 aslg07.casalemedia.com
      127.0.0.1 aslg08.casalemedia.com
      127.0.0.1 aslg09.casalemedia.com
      127.0.0.1 aslg10.casalemedia.com
      127.0.0.1 c.casalemedia.com
      127.0.0.1 i.casalemedia.com
      127.0.0.1 is.casalemedia.com
      127.0.0.1 isg01.casalemedia.com
      127.0.0.1 isg02.casalemedia.com
      127.0.0.1 isg03.casalemedia.com
      127.0.0.1 isg04.casalemedia.com
      127.0.0.1 isg05.casalemedia.com
      127.0.0.1 isg06.casalemedia.com
      127.0.0.1 isg07.casalemedia.com
      127.0.0.1 isg08.casalemedia.com
      127.0.0.1 isg09.casalemedia.com
      127.0.0.1 isg10.casalemedia.com
      127.0.0.1 r.casalemedia.com
      127.0.0.1 www.casalemedia.com
      127.0.0.1 www.spywarestormer.com #[CInstall Class][Zoombar Object][Rogue/Suspect]
      127.0.0.1 active-max.com
      127.0.0.1 search.active-max.com
      127.0.0.1 www.active-max.com
      127.0.0.1 allaboutsearching.com
      127.0.0.1 www.allaboutsearching.com
      127.0.0.1 amazingautossearch.com
      127.0.0.1 www.amazingautossearch.com
      127.0.0.1 contexualsearch.com
      127.0.0.1 www.contexualsearch.com
      127.0.0.1 www.dialup2.com
      127.0.0.1 ecpm.com
      127.0.0.1 www.ecpm.com
      127.0.0.1 find-quick.com
      127.0.0.1 www.find-quick.com
      127.0.0.1 look-today.com
      127.0.0.1 www.look-today.com
      127.0.0.1 lop.com
      127.0.0.1 ao.lop.com
      127.0.0.1 ayb.lop.com
      127.0.0.1 bins.lop.com
      127.0.0.1 k17177.bins.lop.com
      127.0.0.1 img.lop.com
      127.0.0.1 sue.lop.com
      127.0.0.1 srch.lop.com #[Parasite.LOP]
      127.0.0.1 www1.lop.com
      127.0.0.1 www.lop.com
      127.0.0.1 maxexp.com
      127.0.0.1 www.mp3search.com
      127.0.0.1 mysearchnow.com
      127.0.0.1 search200.com
      127.0.0.1 www.search200.com
      127.0.0.1 search.mysearchnow.com
      127.0.0.1 www.mysearchnow.com
      127.0.0.1 netsearchsoft.com
      127.0.0.1 www.netsearchsoft.com
      127.0.0.1 omegasearch.com
      127.0.0.1 www.omegasearch.com
      127.0.0.1 prosearching.com
      127.0.0.1 www.prosearching.com
      127.0.0.1 www.rub.to
      127.0.0.1 sbvr.com
      127.0.0.1 www.sbvr.com
      127.0.0.1 searchexe.com
      127.0.0.1 www.searchexe.com
      127.0.0.1 searchweb2.com
      127.0.0.1 www.searchweb2.com
      127.0.0.1 spawnet.com
      127.0.0.1 www.spawnet.com
      127.0.0.1 tdmy.com #[TrojanDownloader.Win32.Swizzor.h]
      127.0.0.1 tefs.com
      127.0.0.1 tfil.com
      127.0.0.1 www.tfil.com
      127.0.0.1 tdko.com
      127.0.0.1 www.tdko.com
      127.0.0.1 wfix.com #[super-spider.com]
      127.0.0.1 installdollars.com #[affiliate]
      127.0.0.1 www2.installdollars.com #[Adware.Instdollars][server down?]
      127.0.0.1 www.installdollars.com
      127.0.0.1 clickxchange.com
      127.0.0.1 caweb1.clickxchange.com
      127.0.0.1 caweb2.clickxchange.com
      127.0.0.1 www.clickxchange.com
      127.0.0.1 public.americandaytrading.com
      127.0.0.1 blazefind.com #[IE SearchBar]
      127.0.0.1 findwhatevernow.blazefind.com
      127.0.0.1 omniscient.blazefind.com #[TROJ_BLAZEFIND.A]
      127.0.0.1 xml.blazefind.com
      127.0.0.1 www.blazefind.com #[Adware.BlazeFind]
      127.0.0.1 cdtnet.net
      127.0.0.1 anne.cdtnet.net
      127.0.0.1 caroline.cdtnet.net
      127.0.0.1 flingstone.com #[TROJ_WINFAVS.A]
      127.0.0.1 redirect.flingstone.com
      127.0.0.1 static.flingstone.com #[brdg Class]
      127.0.0.1 www.flingstone.com #[Adware.WinFavorites.B]
      127.0.0.1 www2.flingstone.com #[brdg Class][Win32/Bryss.Spy.Trojan]
      127.0.0.1 homepagecash.com
      127.0.0.1 www.homepagecash.com
      127.0.0.1 loudcash.com
      127.0.0.1 partners.loudcash.com
      127.0.0.1 www.loudcash.com
      127.0.0.1 searchbarcash.com #[Downloader.Small.5.Y]
      127.0.0.1 public.searchbarcash.com #[WinFavorites][DownloadUL Class]
      127.0.0.1 www.searchbarcash.com #[Parasite.TinyBar]
      127.0.0.1 searchbrowser.com
      127.0.0.1 findwhatevernow.searchbrowser.com
      127.0.0.1 skoobidoo.com
      127.0.0.1 www.skoobidoo.com
      127.0.0.1 www2.skoobidoo.com #[Downloader.MSCache]
      127.0.0.1 updates.troffee.com
      127.0.0.1 winadclient.com
      127.0.0.1 www.winadclient.com
      127.0.0.1 windowssr.com
      127.0.0.1 public.windupdates.com #[Windows SyncroAd]
      127.0.0.1 static.windupdates.com
      127.0.0.1 www.windupdates.com #[AdvWare.WinAD]
      127.0.0.1 counterstrike.server.us #[Downloader.CDT]
      127.0.0.1 er.errorplace.com
      127.0.0.1 www.errorplace.com #[Parasite.SearchSprint]
      127.0.0.1 www.media-motor.com
      127.0.0.1 bins2.media-motor.net #[TROJ_VB.DO]
      127.0.0.1 cabs.media-motor.net #[IObjSafety.DemoCtl]
      127.0.0.1 logs.media-motor.net
      127.0.0.1 mmm.media-motor.net
      127.0.0.1 upd.media-motor.net
      127.0.0.1 www.media-motor.net
      127.0.0.1 tar.popuppers.com #[Adware.Medload]
      127.0.0.1 www.popuppers.com #[Adware.Roimoi][SULoads.popuppers]
      127.0.0.1 bins.roings.com #[jimmyloader.jimmyform]
      127.0.0.1 cabs.roings.com #[IObjSafety.DemoCtl]
      127.0.0.1 logs.roings.com
      127.0.0.1 mmm.roings.com #[limmyloding.limmyform]
      127.0.0.1 www.roings.com #[Roings Search Enhancment]
      127.0.0.1 bannerexchange.cjb.net
      127.0.0.1 coder3862004.cjb.net #[Trojan.Bansap]
      127.0.0.1 searchwww.com
      127.0.0.1 search.searchwww.com #[Parasite.SearchWWW]
      127.0.0.1 vbs.searchwww.com
      127.0.0.1 www.searchwww.com
      127.0.0.1 dafinder.com
      127.0.0.1 www2.dafinder.com
      127.0.0.1 www3.dafinder.com
      127.0.0.1 adult.getmoviesonline.com
      127.0.0.1 www.getmoviesonline.com
      127.0.0.1 ourlinklist.com
      127.0.0.1 searchaccurate.com #[Parasite.TinyBar]
      127.0.0.1 www.searchaccurate.com
      127.0.0.1 ads.web.aol.com
      127.0.0.1 affiliate.aol.com
      127.0.0.1 aim.aol.com
      127.0.0.1 dynam
      0
    2. rudyrital Messages postés 6233 Statut Membre 131
       
      Salut,

      Démarre en mode sans échec :
      Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
      Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
      Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
      (Si F8 ne marche pas utilise la touche F5).
      ----------------------------------------------------------------------------
      Relance le programme Smitfraud,
      Cette fois choisit l’option 2, répond oui a tous ;
      Sauvegarde le rapport, Redémarre en mode normal, copie/colle le rapport sauvegardé sur le forum

      A+
      0
      1. husnu Messages postés 411 Statut Membre 24 > rudyrital Messages postés 6233 Statut Membre
         
        SmitFraudFix v2.176

        Rapport fait à 18:26:35,06, lun. 07/05/2007
        Executé à partir de C:\Documents and Settings\husnu\Mes documents\MesDoc\HusDoc\SmitfraudFix\SmitfraudFix
        OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
        Le type du système de fichiers est NTFS
        Fix executé en mode sans echec

        »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

        SrchSTS.exe by S!Ri
        Search SharedTaskScheduler's .dll

        »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


        »»»»»»»»»»»»»»»»»»»»»»»» hosts


        127.0.0.1 localhost

        127.0.0.1 downloads.aaa1screensavers.com #[Bargin Buddy]
        127.0.0.1 china.dalexcars.com
        127.0.0.1 dl.aaascreensavers.com
        127.0.0.1 abcsearch.com
        127.0.0.1 admin.abcsearch.com
        127.0.0.1 www3.abcsearch.com #[Browseraid]
        127.0.0.1 www.abcsearch.com
        127.0.0.1 abc517.net #[Trojan.Mitglieder.H]
        127.0.0.1 absoluagency.com #[Trojan.StartPage.H]
        127.0.0.1 acestats.com
        127.0.0.1 www.acestats.com
        127.0.0.1 actualnames.com #[Parasite.ActualNames][Spyware.ActualNames]
        127.0.0.1 www.actualnames.com
        127.0.0.1 ad-up.com
        127.0.0.1 www.ad-up.com
        127.0.0.1 adatom.com
        127.0.0.1 aesp.adatom.com
        127.0.0.1 adbest.com
        127.0.0.1 www.adcipta.net #[W32/Malware]
        127.0.0.1 adserv.adbonus.com
        127.0.0.1 www.adbonus.com
        127.0.0.1 ad2.adcept.net
        127.0.0.1 ad3.adcept.net
        127.0.0.1 www.adcept.net
        127.0.0.1 adcomplete.com
        127.0.0.1 www.adcomplete.com
        127.0.0.1 www.adcopy.info
        127.0.0.1 ads.adcorps.com
        127.0.0.1 ads.addynamix.com
        127.0.0.1 pt.server1.adexit.com
        127.0.0.1 www.adexit.com
        127.0.0.1 www.ad4ever.com
        127.0.0.1 adhearus.com
        127.0.0.1 display2.adhearus.com
        127.0.0.1 ssl3.adhost.com
        127.0.0.1 www2.adhost.com
        127.0.0.1 www.addme.com
        127.0.0.1 www.adinfinity.com
        127.0.0.1 te.adlandpro.com
        127.0.0.1 classic.adlink.de
        127.0.0.1 regio.adlink.de
        127.0.0.1 west.adlink.de
        127.0.0.1 www.adminder.com
        127.0.0.1 adsfac.net
        127.0.0.1 www.adonweb.com
        127.0.0.1 www.adrelevance.com #[NetRatings]
        127.0.0.1 media.adrevolver.com
        127.0.0.1 adroar.com
        127.0.0.1 ads.adroar.com
        127.0.0.1 delta.adroar.com
        127.0.0.1 iads.adroar.com #[Adware.AdRoar][ADW_ADROAR.A]
        127.0.0.1 lists.adroar.com
        127.0.0.1 www.adroar.com
        127.0.0.1 ads.adsag.com
        127.0.0.1 di.adsag.com
        127.0.0.1 img.adsag.com
        127.0.0.1 adserv.com
        127.0.0.1 www.adserv.com
        127.0.0.1 ads.adtomi.com
        127.0.0.1 www.adtomi.com #[Adware.Adtomi]
        127.0.0.1 downldcl.adtoolsinc.com
        127.0.0.1 www.adtoolsinc.com
        127.0.0.1 www.adtrader.com
        127.0.0.1 www.adtraffic.net
        127.0.0.1 survey.advantageresearch.com
        127.0.0.1 ad.adver.com.tw
        127.0.0.1 ads.advertise.net
        127.0.0.1 advertisingvision.com #[Adware.Advision]
        127.0.0.1 www.advertisingvision.com
        127.0.0.1 adviva.com
        127.0.0.1 www.adviva.com
        127.0.0.1 ads.adviva.net
        127.0.0.1 adstats.adviva.net
        127.0.0.1 tracker.affistats.com #[msvrl.dll]
        127.0.0.1 www.affiliatefuel.com
        127.0.0.1 banners.affiliatefuel.com
        127.0.0.1 affiliatetarget.com
        127.0.0.1 www.affiliatetarget.com
        127.0.0.1 fcds.affiliatetracking.net
        127.0.0.1 our.affiliatetracking.net
        127.0.0.1 www.affiliatetracking.net
        127.0.0.1 www.affiliatetracking.com
        127.0.0.1 adserver.aim4media.com
        127.0.0.1 adtest.aim4media.com
        127.0.0.1 pops.aim4media.com
        127.0.0.1 www.aim4media.com
        127.0.0.1 crs.akamai.com
        127.0.0.1 soap.alexa.com #[Spyware.Alexa][Alexa Toolbar]
        127.0.0.1 traffic.alexa.com
        127.0.0.1 xsltcache.alexa.com
        127.0.0.1 www.alexa.com
        127.0.0.1 allcheapsolutions.com #[Backdoor-CIE]
        127.0.0.1 ads.as4x.tmcs.akadns.net #[Ticketmaster]
        127.0.0.1 bantam.ai.net
        127.0.0.1 fiona.ai.net
        127.0.0.1 ads.amazingmedia.com
        127.0.0.1 bohema.amillo.net #[Trojan.Mitglieder.H]
        127.0.0.1 adserver04.ancestry.com #[RealMedia]
        127.0.0.1 ads.antionline.com
        127.0.0.1 junior.apk.net
        127.0.0.1 banner.arttoday.com
        127.0.0.1 ads.aspalliance.com
        127.0.0.1 associmg.com #[amazon.com]
        127.0.0.1 armbender.com #[UCSearch.ucUCSearch][W32.Adclicker.F.Trojan]
        127.0.0.1 www.armbender.com #[UCSearch.ArmBender]
        127.0.0.1 audiogalaxy.com
        127.0.0.1 www.audiogalaxy.com #[Restricted Zone site]
        127.0.0.1 adserving.autotrader.com
        127.0.0.1 www.avatarresources.com #[Parasite.AutoStartup]
        127.0.0.1 www.avres.net
        127.0.0.1 www.aweber.com
        127.0.0.1 cploving.awmhost.net #[TrojanClicker.Win32.Lopin]
        127.0.0.1 bar.baidu.com #[Parasite.ClientMan]
        127.0.0.1 www.baltictop.com
        127.0.0.1 www.banner-mania.com
        127.0.0.1 www.bannerspace.com #[Restricted Zone site]
        127.0.0.1 www2.bannerspace.com
        127.0.0.1 www3.bannerspace.com
        127.0.0.1 www5.bannerspace.com
        127.0.0.1 www6.bannerspace.com
        127.0.0.1 www7.bannerspace.com
        127.0.0.1 bannerswap.com
        127.0.0.1 www.bannerswap.com
        127.0.0.1 www.bidclix.com
        127.0.0.1 bidclix.net
        127.0.0.1 www.bidclix.net
        127.0.0.1 bigtracker.com
        127.0.0.1 bighits.net #[Restricted Zone site]
        127.0.0.1 bigticker.bighits.net
        127.0.0.1 bounty.bighits.net
        127.0.0.1 www.bighits.net
        127.0.0.1 download.bigwebportal.com #[hotwebsearch.com]
        127.0.0.1 www.bigwebportal.com
        127.0.0.1 counter.bizland.com
        127.0.0.1 webads.bizservers.com
        127.0.0.1 www.black-hole.co.uk #[Restricted Zone site]
        127.0.0.1 www.blazehits.net #[gonnasearch.com]
        127.0.0.1 s7.blingblingcontent.com #[Easywebinstaller Control]
        127.0.0.1 ads.bmais.net #[bluemountain]
        127.0.0.1 bookedspace.com #[Parasite.BookedSpace]
        127.0.0.1 www.bookedspace.com #[Adware.Bookedspace]
        127.0.0.1 a.boom.ro
        127.0.0.1 s.boom.ro
        127.0.0.1 www1.boomerank.com
        127.0.0.1 boomerank.com
        127.0.0.1 citi.bridgetrack.com #[Tracking Service]
        127.0.0.1 rccl.bridgetrack.com
        127.0.0.1 config.broadcastpc.tv #[TROJ_RVP.E]
        127.0.0.1 report.broadcastpc.tv #[AdvWare.Broadcap.a]
        127.0.0.1 www.broadcastpc.tv #[Adware.Broadcastpc]
        127.0.0.1 www.browserplugin.com #[WebHlprObj Class]
        127.0.0.1 install.browsertoolbar.com #[Backdoor.Autoupder][BrowserToolbar]
        127.0.0.1 www2.browsertoolbar.com #[TROJ_SUA.A]
        127.0.0.1 www.browsertoolbar.com #[Parasite.BrowserToolbar]
        127.0.0.1 browserwise.com #[Parasite.Xupiter][Xupiter.BrowserWise]
        127.0.0.1 www.browserwise.com
        127.0.0.1 www.buildtraffic.com
        127.0.0.1 casino-on-net.com
        127.0.0.1 java2.casino-on-net.com
        127.0.0.1 www.casino-on-net.com
        127.0.0.1 casinojems.com
        127.0.0.1 www.casinojems.com
        127.0.0.1 cc-dt.com
        127.0.0.1 ads.cc-dt.com
        127.0.0.1 clickserve.cc-dt.com
        127.0.0.1 www.capital-systems.net #[Troj/Ovedil-B]
        127.0.0.1 www.care2.com #[TopMoxie]
        127.0.0.1 ads.cars.com
        127.0.0.1 www.cashforclicks.com
        127.0.0.1 www.cashpile.com
        127.0.0.1 ads.cdfreaks.com #[Ads.cdfreaks]
        127.0.0.1 mds.centrport.net
        127.0.0.1 c.clickaire.com #[CWS trojan downloads]
        127.0.0.1 classifieds1000.com
        127.0.0.1 www.classifieds1000.com
        127.0.0.1 clearfind.com
        127.0.0.1 www.clearfind.com #[Restricted Zone site]
        127.0.0.1 hop.clickbank.net #[Adware.Clickbank]
        127.0.0.1 zzz.clickbank.net
        127.0.0.1 clickedyclick.com
        127.0.0.1 www.clickexchange.ru
        127.0.0.1 click2boost.com
        127.0.0.1 secure.click2boost.com
        127.0.0.1 service.click2boost.com
        127.0.0.1 www.click2boost.com
        127.0.0.1 servedby.clickexperts.net
        127.0.0.1 www.clicks2you.com
        127.0.0.1 stats1.clicktracks.com
        127.0.0.1 www.is1.clixgalore.com
        127.0.0.1 www.clixgalore.com
        127.0.0.1 www1.click-fr.com
        127.0.0.1 www2.click-fr.com
        127.0.0.1 www3.click-fr.com
        127.0.0.1 www4.click-fr.com
        127.0.0.1 www.clickhouse.com
        127.0.0.1 www.clicks4u.com
        127.0.0.1 www.clipgenie.com
        127.0.0.1 comclick.com
        127.0.0.1 ct2.comclick.com
        127.0.0.1 fl01.ct2.comclick.com
        127.0.0.1 ihm01.ct2.comclick.com
        127.0.0.1 www.comclick.com #[Restricted Zone site]
        127.0.0.1 www.thecoolbar.com #[Softomate Toolbar][The Coolbar]
        127.0.0.1 www.compactbanner.com
        127.0.0.1 ads.console.net
        127.0.0.1 coolshader.com
        127.0.0.1 c.coolshader.com #[Win32.Harnig]
        127.0.0.1 www.coolshader.com
        127.0.0.1 counted.com
        127.0.0.1 bilbo.counted.com
        127.0.0.1 www.counted.com
        127.0.0.1 www.counterguide.com
        127.0.0.1 counter4u.de
        127.0.0.1 connectionzone.com
        127.0.0.1 count.casino-trade.com
        127.0.0.1 www.couponsandoffers.com #[Adware.TopMoxie]
        127.0.0.1 data.coremetrics.com
        127.0.0.1 twci.coremetrics.com
        127.0.0.1 us.cqcounter.com
        127.0.0.1 zz.cqcounter.com
        127.0.0.1 1us.cqcounter.com
        127.0.0.1 ads.crosswinds.net
        127.0.0.1 megabyte.crosswinds.net
        127.0.0.1 cyberbounty.com
        127.0.0.1 js.cybermonitor.com
        127.0.0.1 stat3.cybermonitor.com
        127.0.0.1 cytron.com #[DailyWinner][Cytron]
        127.0.0.1 www.cytron.com
        127.0.0.1 www.dash.com
        127.0.0.1 ads.date.com
        127.0.0.1 banner.date.com
        127.0.0.1 dbbsrv.com #[bserv.darkblue.com][Restricted Zone site]
        127.0.0.1 freestuff.com.19828.fb.dbbsrv.com #[roar.com]
        127.0.0.1 spyware.com.16871.fb.dbbsrv.com
        127.0.0.1 webads.com.18345.fb.dbbsrv.com
        127.0.0.1 www.deepcom.com #[TrojanDropper.Win32.Small.gt]
        127.0.0.1 collector.deepmetrix.com
        127.0.0.1 geo.deepmetrix.com
        127.0.0.1 www.deepmetrix.com #[Data Miner]
        127.0.0.1 ad.ads.dk
        127.0.0.1 tdkads.ads.dk
        127.0.0.1 didtheyreadit.com #[email tracker]
        127.0.0.1 www.didtheyreadit.com
        127.0.0.1 counter.digits.com
        127.0.0.1 www.divago.com #[Adware.Surfairy]
        127.0.0.1 www.dnscaching.net #[stickypops.com]
        127.0.0.1 www.domamil.cz #[Trojan.Beagooz]
        127.0.0.1 downloadalot.com
        127.0.0.1 get.downloadalot.com
        127.0.0.1 www.downloadalot.com #[Restricted Zone site]
        127.0.0.1 www.downseek.com #[DownSeek Search]
        127.0.0.1 dqmedia.net #[spam]
        127.0.0.1 drmx01.net #[spam]
        127.0.0.1 www.duenow.com
        127.0.0.1 gfx.dvlabs.com
        127.0.0.1 klipads.dvlabs.com
        127.0.0.1 e2give.com #[Adware-E2Give][Spyware.e2give]
        127.0.0.1 www.e2give.com
        127.0.0.1 www.e-bannerx.com
        127.0.0.1 adv1.eblocs.com
        127.0.0.1 adv2.eblocs.com #[Rogue/Suspect]
        127.0.0.1 www.easycounter.com
        127.0.0.1 banners.easydns.com
        127.0.0.1 banner.easyspace.com
        127.0.0.1 adserv1.ebates.com #[WebSavings]
        127.0.0.1 www.ebates.com #[Adware.MoeMoney]
        127.0.0.1 www.efinder.cc #[StartPage-DA]
        127.0.0.1 enhancemysearch.com #[xzoomy.com]
        127.0.0.1 www.enhancemysearch.com
        127.0.0.1 epeople.com
        127.0.0.1 errorpage404.com #[JS_TRAFFICHBAR.A]
        127.0.0.1 www.errorpage404.com #[Parasite.TinyBar]
        127.0.0.1 vipuk.escritorioactivo.com #[123Messenger Hijacker]
        127.0.0.1 www.escorcher.com #[bogus antivirus spyware]
        127.0.0.1 www.eshopads2.com
        127.0.0.1 perso.estat.com
        127.0.0.1 prof.estat.com
        127.0.0.1 www.estat.com #[Restricted Zone site]
        127.0.0.1 eu-adcenter.net
        127.0.0.1 thinknyc.eu-adcenter.net
        127.0.0.1 ugo.eu-adcenter.net #[evidence-eliminator.com]
        127.0.0.1 www.euroklik.nl #[EasyBar][InstallerX Class]
        127.0.0.1 engage.everyone.net
        127.0.0.1 static.everyone.net
        127.0.0.1 www.exchangead.com
        127.0.0.1 exitexchange.com
        127.0.0.1 count.exitexchange.com
        127.0.0.1 images.exitexchange.com
        127.0.0.1 www.exitexchange.com #[Restricted Zone site]
        127.0.0.1 www.exchangeexit.com #[Installer Class][Winupie]
        127.0.0.1 www.exittraffic.net
        127.0.0.1 ezcybersearch.com #[EZCyberSearch.Surebar]
        127.0.0.1 ads.ezcybersearch.com #[Adware.EZSearch.B]
        127.0.0.1 ezcybersearch.mail.everyone.net
        127.0.0.1 www.ezcybersearch.com #[Parasite.ezCyberSearch]
        127.0.0.1 www.evidence-eliminator.com
        127.0.0.1 ads.fairfax.com.au
        127.0.0.1 images.ads.fairfax.com.au
        127.0.0.1 redirect.fairfax.com.au
        127.0.0.1 campaigns.f2.com.au
        127.0.0.1 www.fast2net.com
        127.0.0.1 www.fastfind.org #[SubSearch][TROJ_STARTPAG.KF][Adware.Fastfind.B]
        127.0.0.1 fasttrack.nu
        127.0.0.1 www.fceboard.com #[Adware.EBoard]
        127.0.0.1 www.fightpopups.net #[Adware.MessStopper]
        127.0.0.1 adserver.filefront.com
        127.0.0.1 www.filemix.net #[Surf+]
        127.0.0.1 www.fineclicks.com
        127.0.0.1 firstname.com
        127.0.0.1 clicks.firstname.com
        127.0.0.1 www.fizzlewizzle.com #[Fizzle Wizzle Searchbar]
        127.0.0.1 flashtrack.net
        127.0.0.1 ads.flashtrack.net #[Adware.Flashtrack.B]
        127.0.0.1 coreg.flashtrack.net
        127.0.0.1 www.flashtrack.net #[Adware.FlashEnhancer][KB312429]
        127.0.0.1 flyinads.com
        127.0.0.1 www.flyinads.com
        127.0.0.1 ads.forbes.com
        127.0.0.1 klipmart.forbes.com
        127.0.0.1 www.ampira.com #[Fortunecity]
        127.0.0.1 ads.fortunecity.com
        127.0.0.1 ads.v3.com #[Fortunecity]
        127.0.0.1 www2.fortunecity.com
        127.0.0.1 ad.freefind.com
        127.0.0.1 www.freehistorycleaner.com #[Adware.Fapi][ADW_HISCLEAN.A]
        127.0.0.1 free-stats.com
        127.0.0.1 www.freewebsites.com
        127.0.0.1 ads.free-windows-games.com
        127.0.0.1 www.free-windows-games.com #[Parasite.GAMsys][GamHelper]
        127.0.0.1 pops.freeze.com #[[GamHelper]
        127.0.0.1 ads.gamespy.com
        127.0.0.1 adcontent.gamespy.com
        127.0.0.1 www.gebr-wachs.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
        127.0.0.1 gd.geobytes.com #[obtains users location]
        127.0.0.1 www.getsmart.com
        127.0.0.1 bp2.getredirect.com
        127.0.0.1 4.getredirect.com #[superlogy.com]
        127.0.0.1 www.getredirect.com
        127.0.0.1 getupdate.com
        127.0.0.1 dlx.getupdate.com #[AdvWare.ToolBar.VB.b]
        127.0.0.1 www.getupdate.com #[Adware.Getup]
        127.0.0.1 gigex.com
        127.0.0.1 media.gigex.com #[SpeedDelivery]
        127.0.0.1 oascentral.gigex.com #[RealMedia]
        127.0.0.1 www.gigex.com #[download Class]
        127.0.0.1 globesearch.com
        127.0.0.1 www.globesearch.com #[Restricted Zone site][CWS]
        127.0.0.1 banner.goldenpalace.com #[redirects]
        127.0.0.1 www.goldenwebawards.com #[server down?]
        127.0.0.1 goldstats.net
        127.0.0.1 www.goldstats.net
        127.0.0.1 adincl.gopher.com #[InfoSpace]
        127.0.0.1 ads.gorillanation.com #[Restricted Zone site]
        127.0.0.1 adserver.gorillanation.com
        127.0.0.1 gostats.com
        127.0.0.1 c1.gostats.com
        127.0.0.1 c2.gostats.com
        127.0.0.1 webcounter.goweb.de
        127.0.0.1 greatstartpage.com #[parasite downloads]
        127.0.0.1 www.greatstartpage.com
        127.0.0.1 grokster.com #[Restricted Zone site][P2P]
        127.0.0.1 dl.grokster.com
        127.0.0.1 www.grokster.com
        127.0.0.1 ads.guardian.co.uk
        127.0.0.1 ads.guardianunlimited.co.uk
        127.0.0.1 www.g-wizzads.net
        127.0.0.1 hamster.com #[apps5.oingo.com]
        127.0.0.1 ad0.haynet.com
        127.0.0.1 www.hitboss.com
        127.0.0.1 www.hit4hit.com
        127.0.0.1 ads.hitcents.com
        127.0.0.1 hithopper.com #[Adware.Hithopper]
        127.0.0.1 www.hithopper.com
        127.0.0.1 hitmodel.net
        127.0.0.1 hit-now.com
        127.0.0.1 loga.hit-parade.com
        127.0.0.1 hit-parade.com
        127.0.0.1 www.hitpointer.com
        127.0.0.1 hitslink.com
        127.0.0.1 counter.hitslink.com
        127.0.0.1 counter2.hitslink.com
        127.0.0.1 www2.hitslink.com
        127.0.0.1 www.hitslink.com #[Restricted Zone site]
        127.0.0.1 hitstats.net
        127.0.0.1 www.hiwire.com
        127.0.0.1 ads.home.net
        127.0.0.1 anna.homeftp.net #[W32.Linkbot.A]
        127.0.0.1 counters.honesty.com
        127.0.0.1 banners.hotlinks.net
        127.0.0.1 hotphrase.com
        127.0.0.1 www.hotphrase.com #[Restricted Zone site]
        127.0.0.1 hotsearch.com #[roar.com][Restricted Zone site]
        127.0.0.1 www.hotsearch.com
        127.0.0.1 hotsearchbar.com #[iiittt Class][SpiderSearch]
        127.0.0.1 www.hotsearchbar.com
        127.0.0.1 www.10s.com.br #[Trojan.Cargao]
        127.0.0.1 cgi.hotstat.nl
        127.0.0.1 viewstat.hotstat.nl
        127.0.0.1 hc2.humanclick.com
        127.0.0.1 www.humanclick.com #[Data Miner]
        127.0.0.1 www.hypertracker.com
        127.0.0.1 ads.iafrica.com
        127.0.0.1 ads.iboost.com
        127.0.0.1 www.i-clicks.net
        127.0.0.1 hits.icdirect.com
        127.0.0.1 hitctr01.icdirect.com
        127.0.0.1 image-catcher.com
        127.0.0.1 bar.iebar8.com #[Adware.Navihelper]
        127.0.0.1 stats.surfaid.ihost.com
        127.0.0.1 ads.imdb.com #[amazon.com]
        127.0.0.1 www.impregnable.net #[TrojanDownloader.Win32.VB.dw][Trojan.Win32.StartPage.kk]
        127.0.0.1 stats.indextools.com
        127.0.0.1 adserver.indieclick.com
        127.0.0.1 campaign.indieclick.com
        127.0.0.1 adcenter.in2.com
        127.0.0.1 ads.inet1.com
        127.0.0.1 ads7.inet1.com
        127.0.0.1 banners.inetfast.com
        127.0.0.1 ads.infospace.com
        127.0.0.1 bvads.infospace.com
        127.0.0.1 dpxml.infospace.com
        127.0.0.1 xads.infospace.com
        127.0.0.1 www.infospider.com
        127.0.0.1 ads.intellicast.com
        127.0.0.1 ads.intelihealth.com
        127.0.0.1 ads.intermezzia.com
        127.0.0.1 mjxads.internet.com
        127.0.0.1 indiads.com
        127.0.0.1 infostart.com
        127.0.0.1 popups.infostart.com
        127.0.0.1 www.intelli-tracker.com
        127.0.0.1 ads.ipowerweb.com
        127.0.0.1 www.ipstat.com
        127.0.0.1 istarthere.com #[Troj/IEStart-C]
        127.0.0.1 directory.istarthere.com
        127.0.0.1 moviesponsor.istarthere.com
        127.0.0.1 partners.istarthere.com
        127.0.0.1 www.istarthere.com #[VBS_IESTART.F]
        127.0.0.1 adcycle.isoftmarketing.com
        127.0.0.1 isurfplus.com
        127.0.0.1 www.isurfplus.com #[Adware.Surebar]
        127.0.0.1 www.itrafficstar.com #[Restricted Zone site]
        127.0.0.1 www.jcount.com
        127.0.0.1 affiliates.jeanharris.com
        127.0.0.1 popup.jeanharris.com
        127.0.0.1 jpedownload.joltid.com
        127.0.0.1 www.joltid.com #[Adware.P2PNetworking]
        127.0.0.1 www1.kliks.nl
        127.0.0.1 www2.kliks.nl
        127.0.0.1 www.kliks.nl
        127.0.0.1 kt3.kliptracker.com
        127.0.0.1 kt4.kliptracker.com
        127.0.0.1 www.kliptracker.com
        127.0.0.1 stats.klsoft.com
        127.0.0.1 www.kmindex.ru
        127.0.0.1 ad.leadcrunch.com
        127.0.0.1 ts1.lexmark.com
        127.0.0.1 www.linkcounter.com
        127.0.0.1 linkexchange.ru
        127.0.0.1 web.linkexchange.ru
        127.0.0.1 www.linkexchange.ru
        127.0.0.1 link4link.com
        127.0.0.1 plus.link4link.com
        127.0.0.1 www.links4trade.com
        127.0.0.1 escati.linkopp.net
        127.0.0.1 www.linkopp.net
        127.0.0.1 js.livehelper.com #[Restricted Zone site]
        127.0.0.1 newbrowse.livehelper.com
        127.0.0.1 liveperson.net
        127.0.0.1 server.iad.liveperson.net #[Data Miner]
        127.0.0.1 www.liveperson.com
        127.0.0.1 adserv.lwmn.net
        127.0.0.1 locators.com #[Adware.Locator]
        127.0.0.1 toolbar.locators.com #[Locators Toolbar]
        127.0.0.1 www.locators.com
        127.0.0.1 www.lords-of-havoc.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
        127.0.0.1 luckyhomepage.com #[search.targetwords.com\1stblaze.com]
        127.0.0.1 www.luckyhomepage.com #[Restricted Zone site]
        127.0.0.1 adverts.lzio.com
        127.0.0.1 newupdates.lzio.com
        127.0.0.1 search.lzio.com
        127.0.0.1 updates.lzio.com #[Downloader-LE][Adware.ZioCom]
        127.0.0.1 make-deal.com
        127.0.0.1 www.madoogali.com #[Madoogali]
        127.0.0.1 go.mailbits.com
        127.0.0.1 mair.net #[Realtracker]
        127.0.0.1 marnet.us #[Downloader-IU]
        127.0.0.1 image.masterstats.com
        127.0.0.1 link.masterstats.com
        127.0.0.1 ads.affiliates.match.com
        127.0.0.1 associmage.match.com
        127.0.0.1 adserver.matchcraft.com
        127.0.0.1 maybeyes.biz #[Trojan.Ducky]
        127.0.0.1 ads.mcafee.com
        127.0.0.1 directads.mcafee.com
        127.0.0.1 ads.mediaodyssey.com
        127.0.0.1 ads.mediaturf.net
        127.0.0.1 banner.meerhits.nl #[IEHIjacker.Meerhits.nl]
        127.0.0.1 pokpok.meerhits.nl
        127.0.0.1 exit.megago.com
        127.0.0.1 www.megago.com #[typo squatter]
        127.0.0.1 www.megaseek.net #[Restricted Zone site]
        127.0.0.1 pubs.mgn.net #[Grolier Network]
        127.0.0.1 www.mgshareware.com #[Adware Bundler]
        127.0.0.1 micorsoft.com
        127.0.0.1 www.micorsoft.com #[typo hijacker]
        127.0.0.1 www.mini-player.com #[5MOF Mini-Player]
        127.0.0.1 banner.missingkids.com
        127.0.0.1 ads.monster.com
        127.0.0.1 adserver.monster.com
        127.0.0.1 adserver.a.in.monster.com
        127.0.0.1 ads.monstermoving.com
        127.0.0.1 cookie.monster.com
        127.0.0.1 mp3today.net
        127.0.0.1 www.mp3yes.com #[C2Media\LOP]
        127.0.0.1 mpamexit.com
        127.0.0.1 www.messagetag.com #[Email tracker]
        127.0.0.1 msgtag.com
        127.0.0.1 img.msgtag.com #[Restricted Zone site]
        127.0.0.1 www.msgtag.com
        127.0.0.1 multi1.rmuk.co.uk #[RealMedia]
        127.0.0.1 mvtracker.com
        127.0.0.1 www.mvtracker.com
        127.0.0.1 mvr3d.net #[NavExcel\n-CASE]
        127.0.0.1 mvr.us #[Parasite.NavExcel]
        127.0.0.1 www.mvr.us
        127.0.0.1 www.myaffiliateprogram.com
        127.0.0.1 www.myarmory.com #[Spyware.Bazookabar]
        127.0.0.1 ads.mydailyhoroscope.net
        127.0.0.1 www.mydailyhoroscope.net #[Adware.Horoscope]
        127.0.0.1 www.myemessenger.com
        127.0.0.1 rm.myoc.com
        127.0.0.1 myhitlogger.com
        127.0.0.1 mypagefinder.com #[Parasite.MyPageFinder]
        127.0.0.1 hit.namimedia.com
        127.0.0.1 ads.nandomedia.com
        127.0.0.1 neededware.com #[Adware.NeededWare]
        127.0.0.1 www.neededware.com
        127.0.0.1 neo-toolbar.com #[InstControl Class][Trojan.NeoToolbar.Installer]
        127.0.0.1 www6.netbroadcaster.com
        127.0.0.1 code.netbreak.com.au
        127.0.0.1 www.netflip.com
        127.0.0.1 money2.netfirms.com #[The Money Toolbar]
        127.0.0.1 partner.netmechanic.com
        127.0.0.1 tracker.netmechanic.com
        127.0.0.1 counter.netmore.net
        127.0.0.1 www.netpoll.nl
        127.0.0.1 servedby.netshelter.net
        127.0.0.1 ads.netsol.com
        127.0.0.1 www.netsearch.info
        127.0.0.1 ads.newsint.co.uk
        127.0.0.1 adq.nextag.com
        127.0.0.1 newiframe.biz #[TROJ_DELF.DS]
        127.0.0.1 www.newiframe.biz
        127.0.0.1 web1.noadware.net
        127.0.0.1 www.noadware.net #[SCAM.Enigma.NoAdware]
        127.0.0.1 nowbox.com
        127.0.0.1 www.nowbox.com #[Parasite.NowBox]
        127.0.0.1 mediatickets.nubela.net
        127.0.0.1 www.nubela.net
        127.0.0.1 nzads.net.nz
        127.0.0.1 okcounter.com
        127.0.0.1 www.okww.net #[Trojan.StartPage.C]
        127.0.0.1 stat.onestat.com
        127.0.0.1 www.onestat.com
        127.0.0.1 one.ru
        127.0.0.1 cnt.one.ru
        127.0.0.1 stats0.one.ru
        127.0.0.1 stats1.one.ru
        127.0.0.1 stats2.one.ru
        127.0.0.1 www.oneandonlynetwork.com #[Ticketmaster]
        127.0.0.1 server1.opentracker.net
        127.0.0.1 www.opinionlab.com
        127.0.0.1 ccc00.opinionlab.com
        127.0.0.1 rate.opinionlab.com
        127.0.0.1 banner.orb.net
        127.0.0.1 www.originalicons.com #[F1 Organizer Class]
        127.0.0.1 geoads.osdn.com
        127.0.0.1 tg-images.osdn.com
        127.0.0.1 otx5.otxresearch.com
        127.0.0.1 otx.ifilm.com #[OTXMedia.dll]
        127.0.0.1 survey.otxresearch.com #[TrojanDownloader.OTXloader.A]
        127.0.0.1 www.otxresearch.com #[OTXMovie Class]
        127.0.0.1 adpopper.outblaze.com #[bargain-buddy.net]
        127.0.0.1 www.p3marketing.com #[Zapspot]
        127.0.0.1 click.payserve.com
        127.0.0.1 www.pc-test.net
        127.0.0.1 ad1.peel.com
        127.0.0.1 ad3.peel.com
        127.0.0.1 ads.peel.com
        127.0.0.1 ad4.peel.com
        127.0.0.1 ads5.peel.com
        127.0.0.1 www.peel.com
        127.0.0.1 www.peel.net
        127.0.0.1 ads.pennyweb.com #[addynamix.com]
        127.0.0.1 banners.pennyweb.com
        127.0.0.1 www.peruvianmarket.com #[Trojan.Beagooz.D][server down?]
        127.0.0.1 ads.photosight.ru
        127.0.0.1 phpadsnew.com
        127.0.0.1 www.phpadsnew.com
        127.0.0.1 ads2.playnet.com
        127.0.0.1 popfind.net #[Adware.Ddpop]
        127.0.0.1 www.popupads.com
        127.0.0.1 www.popupad.net
        127.0.0.1 popupblockade.com #[Parasite.Httper]
        127.0.0.1 www.popupblockade.com
        127.0.0.1 popupmoney.com #[Restricted Zone site]
        127.0.0.1 server01.popupmoney.com
        127.0.0.1 www.popupmoney.com
        127.0.0.1 popadstop.com #[Adware.PopAdStop]
        127.0.0.1 www.popadstop.com
        127.0.0.1 www.popunder.info #[TROJ_CHECKIN.B]
        127.0.0.1 www.popupswappers.com
        127.0.0.1 ad.popupswappers.com
        127.0.0.1 www.popuptop.com
        127.0.0.1 www2.portdetective.com
        127.0.0.1 www.positivebeats.com #[C2Media\LOP]
        127.0.0.1 x0x0l.pp.ru #[BKDR_CCT.A]
        127.0.0.1 www.praize.com #[Adware.Praize]
        127.0.0.1 1.primaryads.com
        127.0.0.1 www.privacyoutpost.com #[Troj/Regldr-A]
        127.0.0.1 www.prtracker.com
        127.0.0.1 www.profitzone.com #[ProfitZONE Adbar]
        127.0.0.1 prolivation.com #[Restricted Zone site]
        127.0.0.1 www.prolivation.com
        127.0.0.1 ads.pro-market.net
        127.0.0.1 www.promo.com.au
        127.0.0.1 www.prutect.com #[Spyware.e2give][Win32.Prutec.A]
        127.0.0.1 www.pstopper.com
        127.0.0.1 ad.sma.punto.net
        127.0.0.1 sma.punto.net
        127.0.0.1 www.pureseeker.com #[C2Media\LOP]
        127.0.0.1 www.pwallet.com #[Restricted Zone site]
        127.0.0.1 rads01.quadrogram.com #[Adware.Quadro][Memwatcher.B][TROJ_PEPER.A]
        127.0.0.1 adserv.quality-channel.de
        127.0.0.1 www.quarterserver.de
        127.0.0.1 questionmarket.com
        127.0.0.1 amch.questionmarket.com
        127.0.0.1 ch.questionmarket.com
        127.0.0.1 survey.questionmarket.com
        127.0.0.1 www.questionmarket.com
        127.0.0.1 download.quickflicks.com #[Parasite.SVAPlayer]
        127.0.0.1 www.qq886.com #[Backdoor.Semes]
        127.0.0.1 ramgo.com #[Restricted Zone site]
        127.0.0.1 www.ramgo.com #[Win32.Startpage.B]
        127.0.0.1 www.autoraskrutka.ru #[Spyware.Acext]
        127.0.0.1 www.raskrutim.ru #[Spyware.Acext]
        127.0.0.1 www.realclicks.com
        127.0.0.1 www.relmaxtop.com
        127.0.0.1 banner.relcom.ru
        127.0.0.1 adservice.recon-networks.com
        127.0.0.1 rightmedia.net
        127.0.0.1 rightstats.com
        127.0.0.1 www.rightstats.com
        127.0.0.1 m.rmbclick.com
        127.0.0.1 www.rgs-rostock.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
        127.0.0.1 track.roiservice.com
        127.0.0.1 ad.ro2cn.com #[Adware.Ro2cn]
        127.0.0.1 www.sandboxer.com #[Adware.Quadro][memorywatcher.com][Memwatcher.B]
        127.0.0.1 www.savehits.com
        127.0.0.1 st.sageanalyst.net
        127.0.0.1 scorpionsearch.com #[W32.Adclicker.C.Trojan]
        127.0.0.1 www.scorpionsearch.com #[x10.com][Trojan.Clicker.NetBuie a-b]
        127.0.0.1 adsremote.scripps.com
        127.0.0.1 te.scripps.com
        127.0.0.1 counter.search.bg
        127.0.0.1 searchalot.com
        127.0.0.1 cards.searchalot.com
        127.0.0.1 mail.searchalot.com
        127.0.0.1 search.searchalot.com
        127.0.0.1 web.searchalot.com
        127.0.0.1 www.searchalot.com #[Adware-Tronix]
        127.0.0.1 searchandclick.com
        127.0.0.1 search.searchandclick.com
        127.0.0.1 www.searchandclick.com #[Browseraid][SearchAndClick]
        127.0.0.1 searchby.net
        127.0.0.1 www.searchby.net #[Ultimate Popup Killer]
        127.0.0.1 searchfst.com #[SFUtility Class][keywordsinc.com]
        127.0.0.1 www.searchfst.com
        127.0.0.1 www.searchgauge.com
        127.0.0.1 www.search-control.com #[TrojanDropper.Win32.Small.ig]
        127.0.0.1 search-itnow.com #[Parasite.AdultLinks]
        127.0.0.1 www.search-itnow.com
        127.0.0.1 www.searchmachine.com
        127.0.0.1 www.searchmagnifier.com
        127.0.0.1 www.searchrelevancy.com
        127.0.0.1 www.searchresult.net #[Parasite.IgetNet]
        127.0.0.1 searchseekfind.com #[Adware.SearchSeekFind]
        127.0.0.1 www.searchseekfind.com
        127.0.0.1 browser.secondpower.com
        127.0.0.1 download.secondpower.com
        127.0.0.1 www1.secondpower.com
        127.0.0.1 www3.secondpower.com #[KB320159]
        127.0.0.1 www.secondpower.com
        127.0.0.1 adserver.securityfocus.com #[RealMedia]
        127.0.0.1 www.selfsurveys.com
        127.0.0.1 www.seehits.com
        127.0.0.1 www.sendtraffic.com
        127.0.0.1 sesso.com
        127.0.0.1 www.sesso.com #[VBS.Biscuit.A@mm]
        127.0.0.1 ds.serving-sys.com
        127.0.0.1 quasar.sitegauge.com
        127.0.0.1 tracker.sitescout.com
        127.0.0.1 advertpro.sitepoint.com
        127.0.0.1 www.sitestatslive.com
        127.0.0.1 www.sitetracking.info #[Naughty Pops]
        127.0.0.1 www.shadowcrew.com #[spam]
        127.0.0.1 adserver.sharewareonline.com #[nictechnetworks.com]
        127.0.0.1 www.shockcounter.com
        127.0.0.1 shopathomeselect.com #[Parasite.ShopAtHomeSelect]
        127.0.0.1 download1.shopathomeselect.com #[ADW_SAHAGENT.A]
        127.0.0.1 downloads.shopathomeselect.com
        127.0.0.1 www.shopathomeselect.com #[Adware.SAHAgent]
        127.0.0.1 skeech.com
        127.0.0.1 www.skeech.com #[Restricted Zone site]
        127.0.0.1 smart2com.net #[Trojan.Autoproxy]
        127.0.0.1 smart-browser.com
        127.0.0.1 update.smart-browser.com #[Parasite.SmartBrowser]
        127.0.0.1 www.smart-browser.com
        127.0.0.1 smartclicks.net
        127.0.0.1 www.smartclicks.net
        127.0.0.1 smarter.com #[Restricted Zone site]
        127.0.0.1 sidebar.smarter.com
        127.0.0.1 www.smarter.com
        127.0.0.1 ads.smni.com
        127.0.0.1 static.smni.com
        127.0.0.1 www.sonyasys.com #[Downloader.Botten]
        127.0.0.1 www1.spaex.com #[searchboss.com]
        127.0.0.1 www.specialoffersnetworks.com
        127.0.0.1 www.spedia.net #[SpediaBar]
        127.0.0.1 www.spyarsenal.com #[Spyware.DesktopSpy][Spyware.FamilyKeylog]
        127.0.0.1 spyferret.com #[OnlinePcFix.SpyFerret]
        127.0.0.1 www.spyferret.com
        127.0.0.1 spyware.com #[roar.com]
        127.0.0.1 www.ssppyy.com #[Spyware.Ssppyy]
        127.0.0.1 www.s-tracking.com
        127.0.0.1 adsintl.starwave.com
        127.0.0.1 c1.statcounter.com
        127.0.0.1 c2.statcounter.com
        127.0.0.1 c3.statcounter.com
        127.0.0.1 www.statcounter.com
        127.0.0.1 js.statistici.ro
        127.0.0.1 log.statistici.ro
        127.0.0.1 s.statistici.ro
        127.0.0.1 www.statomatic.com
        127.0.0.1 reg.stats4all.com
        127.0.0.1 stats4you.com
        127.0.0.1 www.stats4you.com
        127.0.0.1 ctgbn.stellaremperor.com #[Backdoor.Alets]
        127.0.0.1 www.stickypops.com
        127.0.0.1 clix.superclix.de
        127.0.0.1 www.superlogy.com #[AdvWare.ToolBar.VB.b]
        127.0.0.1 sqwire.com #[Adware.Sqwire][Xupiter.Sqwire]
        127.0.0.1 www.sqwire.com #[Parasite.Xupiter][Adware-PornKings]
        127.0.0.1 www.supaseek.com #[Spyware.Supaseek]
        127.0.0.1 rd1.surfernetwork.com #[SurferNETWORK Plugin]
        127.0.0.1 www.surfernetwork.com
        127.0.0.1 surfsidekick.com
        127.0.0.1 dl.surfsidekick.com
        127.0.0.1 www.surfsidekick.com #[Adware.SurfSideKick]
        127.0.0.1 www2.surveyfocus.com
        127.0.0.1 www.surveynetworks.com
        127.0.0.1 www.surveysite.com
        127.0.0.1 www2.survey-poll.com #[microsoft]
        127.0.0.1 swift-look.com #[phishing exploit]
        127.0.0.1 www.symantic.com #[Typo Squatter]
        127.0.0.1 adpick.switchboard.com
        127.0.0.1 adtag.sympatico.ca
        127.0.0.1 www.syspage.com #[pop-up scam]
        127.0.0.1 ad.uk.tangozebra.com
        127.0.0.1 targetsearch.info #[Trojan.StartPage.H]
        127.0.0.1 adult.targetsearch.info
        127.0.0.1 go.targetsearch.info
        127.0.0.1 tat-neftbank.ru #[Backdoor.Berbew.H]
        127.0.0.1 www.tech-marketresearch.com
        127.0.0.1 www.textads.biz
        127.0.0.1 a.tfag.de
        127.0.0.1 ak.tfag.de
        127.0.0.1 theaffiliateprogram.com
        127.0.0.1 myaffiliateprogram.com
        127.0.0.1 www.the-counter.net
        127.0.0.1 adbot.theonion.com
        127.0.0.1 www.thepokerclub.com #[SecurityRisk.ClubPoker]
        127.0.0.1 thesearchmall.com #[Adware.SearchMall]
        127.0.0.1 www.thesearchmall.com
        127.0.0.1 tnc4u.com #[Parasite.DownloadPlus]
        127.0.0.1 new.tnc4u.com
        127.0.0.1 www.tnc4u.com #[Adware.DownloadPlus]
        127.0.0.1 www.toilet.com
        127.0.0.1 ad.tomshardware.com
        127.0.0.1 tooncomics.com #[IEDLL.ToonComics][here4search.com]
        127.0.0.1 www.tooncomics.com #[Downloader.Tooncom][CWS.Aff.Tooncomics]
        127.0.0.1 log.trafic.ro
        127.0.0.1 storage.trafic.ro
        127.0.0.1 tool4ame.com #[TROJ_GOLID.A][Adware.IAGold]
        127.0.0.1 www.toolshack.com
        127.0.0.1 ads.toplayerserver.com
        127.0.0.1 www1.toplayerserver.com
        127.0.0.1 www.toplayerserver.com
        127.0.0.1 toprebates.com #[webrebates]
        127.0.0.1 www.toprebates.com
        127.0.0.1 stat.toprefsys.com
        127.0.0.1 www.top-search.com #[Adware-SSF.dr]
        127.0.0.1 ad.topstat.com
        127.0.0.1 nl.topstat.com #[Restricted Zone site]
        127.0.0.1 s26.topstat.com
        127.0.0.1 xl.topstat.com
        127.0.0.1 ads.track-star.com
        127.0.0.1 adserver.track-star.com
        127.0.0.1 geo2.track-star.com
        127.0.0.1 www.track-star.com
        127.0.0.1 tradeexit.com
        127.0.0.1 www.tradeexit.com #[Parasite.Winupie]
        127.0.0.1 www.trafficbeamer.nl
        127.0.0.1 trafficg.com #[Restricted Zone site]
        127.0.0.1 www.trafficg.com
        127.0.0.1 ad.trafficmp.com
        127.0.0.1 images.trafficmp.com
        127.0.0.1 t.trafficmp.com
        127.0.0.1 www.trafficflame.com
        127.0.0.1 trafficfile.com
        127.0.0.1 www.trafficfile.com
        127.0.0.1 trackyourstats.com
        127.0.0.1 trafficmarketplace.com
        127.0.0.1 get.trafficmultiplier.com
        127.0.0.1 go.trafficmultiplier.com
        127.0.0.1 goto.trafficmultiplier.com
        127.0.0.1 a.tribalfusion.com
        127.0.0.1 cdn1.tribalfusion.com
        127.0.0.1 m.tribalfusion.com
        127.0.0.1 tribalfusion.speedera.net
        127.0.0.1 ads.tucows.com
        127.0.0.1 counts.tucows.com
        127.0.0.1 google.tucows.com
        127.0.0.1 www.turbomemorycharger.com #[Adware.Fapi]
        127.0.0.1 ads.ucomics.com
        127.0.0.1 image.ugo.com
        127.0.0.1 mediamgr.ugo.com
        127.0.0.1 www.ukbanners.com
        127.0.0.1 ultimatecounter.com
        127.0.0.1 www.ultimatecounter.com
        127.0.0.1 www.ultimatepopupkiller.com #[searchby.net]
        127.0.0.1 www.ultraload.net #[MHTMLRedir.Exploit]
        127.0.0.1 adcontroller.unicast.com
        127.0.0.1 ads.unlimitedbanners.com
        127.0.0.1 ads1.updated.com
        127.0.0.1 www.updatenow.org #[Messenger Pop-up]
        127.0.0.1 www.upgradenow.org
        127.0.0.1 www.upp2ono41xi9rman2.com #[TrojanDropper.Small.LG]
        127.0.0.1 url.biz.ua #[Download.Ject.B]
        127.0.0.1 config.url404.com #[Parasite.Httper]
        127.0.0.1 urlblaze.com #[Adware.TurboDownload]
        127.0.0.1 www.urlblaze.com #[Adware Bundler]
        127.0.0.1 www.urlblaze.net #[IEDriver][ADW_RULEDOR.C]
        127.0.0.1 usachoice.net
        127.0.0.1 ads.valuead.com #[Restricted Zone site]
        127.0.0.1 adnetintads.valuead.com
        127.0.0.1 banners.valuead.com
        127.0.0.1 cs.valuead.com
        127.0.0.1 oin.valuead.com #[outerinfo.com]
        127.0.0.1 servedby.valuead.com
        127.0.0.1 ad.valuehost.ru
        127.0.0.1 image.versiontracker.com
        127.0.0.1 spinbox.versiontracker.com
        127.0.0.1 ads.vesperexchange.com
        127.0.0.1 www.vesperexchange.com
        127.0.0.1 cinnam.vibrahost.com #[PWSteal.Revcuss.C][Win32.Revcuss.C]
        127.0.0.1 vivi.vibrahost.com #[PWSteal.Revcuss.A]
        127.0.0.1 dns2010.vicp.net #[Backdoor.Tumag]
        127.0.0.1 uygurman.vicp.net #[Trojan.Riler][Troj/Riler-B]
        127.0.0.1 oas.villagevoice.com
        127.0.0.1 www.vikord.com #[Download.Ject.C]
        127.0.0.1 visit-link.com
        127.0.0.1 www.voonda.com #[Spyware.TAFbar]
        127.0.0.1 generic.vpptechnologies.com
        127.0.0.1 images2.vpptechnologies.com
        127.0.0.1 main.vpptechnologies.com
        127.0.0.1 msxml.vpptechnologies.com
        127.0.0.1 static.vpptechnologies.com #[hotsearchbar.com]
        127.0.0.1 xml.vpptechnologies.com #[BlazeFind]
        127.0.0.1 www.vstats.net
        127.0.0.1 ads.vnuemedia.com
        127.0.0.1 sevenc.vze.com #[VBS.Powcox@mm]
        127.0.0.1 www.w3exit.com
        127.0.0.1 ng3.ads.warnerbros.com
        127.0.0.1 wazam.com
        127.0.0.1 www.wazam.com #[Parasite.Wazam]
        127.0.0.1 wcft.net #[Parasite.LinkReplacer]
        127.0.0.1 www.wcft.net
        127.0.0.1 ads.weather.com
        127.0.0.1 ads.webattack.com
        127.0.0.1 webcounter.com
        127.0.0.1 www.webcounter.com
        127.0.0.1 ads.webhosting.info
        127.0.0.1 www.weblink.ru #[server down?]
        127.0.0.1 adv.webmd.com
        127.0.0.1 webhits.de
        127.0.0.1 banners.webmasterplan.com
        127.0.0.1 stat.webmedia.pl
        127.0.0.1 bannervip.web1000.com
        127.0.0.1 ads.webads360.com
        127.0.0.1 clickcash.webpower.com
        127.0.0.1 orders.webpower.com
        127.0.0.1 img.webring.com
        127.0.0.1 img1.webring.com
        127.0.0.1 ads.webshots.com
        127.0.0.1 websponsors.com
        127.0.0.1 a.websponsors.com
        127.0.0.1 ads.websponsors.com
        127.0.0.1 g.websponsors.com
        127.0.0.1 www.websponsors.com
        127.0.0.1 www.webstars2000.com
        127.0.0.1 hits.webstat.com
        127.0.0.1 www.wenksdisdkjeilsow.com #[Parasite.AutoStartup][Download.Trojan]
        127.0.0.1 wetrack.it
        127.0.0.1 st.wetrack.it
        127.0.0.1 www.wgutv.com #[Adware.BuddyLinks]
        127.0.0.1 partner1.whatsfind.com
        127.0.0.1 www.whatsfind.com #[HTML_STARTPAGE.C]
        127.0.0.1 www.win-fix.com #[Rogue/Suspect]
        127.0.0.1 window1.com
        127.0.0.1 ads.winhelp2002.com
        127.0.0.1 ads.winsite.com
        127.0.0.1 winstream.com #[Parasite.Searchex]
        127.0.0.1 www.winstream.com
        127.0.0.1 clicktrack.wnu.com
        127.0.0.1 www.wowweb.net #[Adware.WWWBar]
        127.0.0.1 www.wurldmedia.com #[Adware.Wurldmedia][WurldMedia][KB321923]
        127.0.0.1 x0x.biz
        127.0.0.1 www.x0x.biz #[Backdoor.Berbew.D]
        127.0.0.1 xtra.co.nz
        127.0.0.1 nedstats.xs4all.nl
        127.0.0.1 hit1.xstats.com
        127.0.0.1 view1.xstats.com
        127.0.0.1 ads.xtra.co.nz
        127.0.0.1 bs.yandex.ru
        127.0.0.1 counter.yadro.ru
        127.0.0.1 crsky2004.yeah.net #[Backdoor.Singu.B]
        127.0.0.1 yourspecialoffers.com #[FavoriteMan]
        127.0.0.1 www.yourspecialoffers.com
        127.0.0.1 ysearchus.com #[Parasite.TinyBar]
        127.0.0.1 www.ysearchus.com
        127.0.0.1 zuvio.com #[UCSearch.ucUCSearch]
        127.0.0.1 www.zuvio.com #[Adware.OpenSite][OpenSite]
        127.0.0.1 bannerads.zwire.com
        127.0.0.1 www.0stats.com
        127.0.0.1 cc.1asphost.com #[Trojan.Bansap]
        127.0.0.1 www.123counts.com #[hitslink.com]
        127.0.0.1 www.123mania.com #[SrchHook Class][Parasite.123Mania]
        127.0.0.1 123stat.com
        127.0.0.1 1234.2bro.com #[Adware.Satbo]
        127.0.0.1 www.241hits.com
        127.0.0.1 up.isp.2ch.net #[Trojan.Upchan]
        127.0.0.1 www.321search.com #[SearchAssistant.dll]
        127.0.0.1 ct.360i.com
        127.0.0.1 www.ff.iij4u.or.jp #[Trojan.Upchan]
        127.0.0.1 download.35mb.com #[impregnable.net]
        127.0.0.1 www.35mb.com #[download_35mb_com.applet]
        127.0.0.1 1000stars.ru
        127.0.0.1 xxxwwwjjjhd.20forfree.com #[W32.Autex.Worm]
        127.0.0.1 www.xxxwwwjjjhd.20forfree.com
        127.0.0.1 ad.37.com
        127.0.0.1 2jm.com
        127.0.0.1 7adpower.com
        127.0.0.1 www.7adpower.com #[Svezia.Dialer][VacPro.UserControl1]
        127.0.0.1 7am.com
        127.0.0.1 www.777search.com #[LOP]
        127.0.0.1 ad2.163.com
        127.0.0.1 adclient.163.com
        127.0.0.1 popme.163.com
        127.0.0.1 smtp.163.com #[Trojan.PSW.Ajim_bbs]
        127.0.0.1 ajim.delphibbs.com #[Trojan.PSW.Ajim_bbs]
        127.0.0.1 14713804A.l2m.net #[LiveTechnology]
        127.0.0.1 banner.50megs.com
        127.0.0.1 guannan.3322.net #[Restricted Zone site]
        127.0.0.1 www.fan8.com
        127.0.0.1 banners.dot.tk
        127.0.0.1 topsites.us #[Parasite.eStart]
        127.0.0.1 0-ol1oiz-xolxii1-oxli10ozl1l1-o-l-11-iizxp-l-0o-oll11iz0oil-ol.com
        127.0.0.1 www.123banners.com
        127.0.0.1 ftp.123banners.com
        127.0.0.1 123go.com
        127.0.0.1 ns1.123go.net
        127.0.0.1 n-case.com
        127.0.0.1 www.n-case.com
        127.0.0.1 ads.180solutions.com
        127.0.0.1 ax.180solutions.com #[180SAInstaller Class]
        127.0.0.1 bis.180solutions.com #[nCaseInstaller Class]
        127.0.0.1 bisads.180solutions.com
        127.0.0.1 downloads.180solutions.com
        127.0.0.1 installs.180solutions.com
        127.0.0.1 ping.180solutions.com
        127.0.0.1 tv.180solutions.com
        127.0.0.1 www.180solutions.com #[Parasite.nCase]
        127.0.0.1 www.180searchassistant.com #[Adware.180Search]
        127.0.0.1 www.surfassistant.com #[Adware.SurfAssistant]
        127.0.0.1 downloads.zango.com
        127.0.0.1 games.zango.com
        127.0.0.1 infinity.zango.com #[ZangoInstaller Class]
        127.0.0.1 messenger.zango.com
        127.0.0.1 showtimes.zango.com
        127.0.0.1 www.zango.com
        127.0.0.1 www.zangomessenger.com
        127.0.0.1 www.zangoshowtimes.com
        127.0.0.1 address.3721.com
        127.0.0.1 agent.3721.com
        127.0.0.1 assistant.3721.com
        127.0.0.1 cns.3721.com
        127.0.0.1 cnsmin.3721.com
        127.0.0.1 corp.3721.com
        127.0.0.1 dir.3721.com
        127.0.0.1 download.3721.com
        127.0.0.1 express.3721.com
        127.0.0.1 img.3721.com
        127.0.0.1 magic.3721.com
        127.0.0.1 mark.3721.com
        127.0.0.1 meta.3721.com
        127.0.0.1 msearch.3721.com
        127.0.0.1 sbox.3721.com
        127.0.0.1 shanghai.3721.com
        127.0.0.1 sina.3721.com
        127.0.0.1 user.3721.com
        127.0.0.1 wap.3721.com
        127.0.0.1 www.3721.com #[Adware.Chinet][ADW_CNSMIN.A]
        127.0.0.1 yahoo.3721.com
        127.0.0.1 3721.com
        127.0.0.1 download.feiyang.com
        127.0.0.1 adtracker.411web.com
        127.0.0.1 hits.411web.com
        127.0.0.1 overture.411web.com
        127.0.0.1 static.411web.com
        127.0.0.1 xml.411web.com
        127.0.0.1 search.letssearch.com
        127.0.0.1 search2.letssearch.com
        127.0.0.1 www.letssearch.com #[BrowserAid.LetsSearch]
        127.0.0.1 7search.com #[Parasite.7FaSSt Search]
        127.0.0.1 www.7search.com
        127.0.0.1 fstrack.7search.com
        127.0.0.1 impression.7search.com
        127.0.0.1 img.7meta.com
        127.0.0.1 www.7metasearch.com
        127.0.0.1 bannerx.adtactics.com
        127.0.0.1 adtactics.com
        127.0.0.1 www.adtactics.com
        127.0.0.1 ajokeaday.com
        127.0.0.1 bannersxchange.com
        127.0.0.1 img.bannersxchange.com
        127.0.0.1 www.linkstoyou.com
        127.0.0.1 www.payperranking.com
        127.0.0.1 www.pay-per-search.com
        127.0.0.1 paypertext.com
        127.0.0.1 predictivesearch.com
        127.0.0.1 tracking.roispy.com
        127.0.0.1 www.roispy.com
        127.0.0.1 tracking.spiderbait.com
        127.0.0.1 www.spiderbait.com
        127.0.0.1 advertisingagent.com
        127.0.0.1 clicks.about.com
        127.0.0.1 f.about.com
        127.0.0.1 home.about.com
        127.0.0.1 js.get.about.com
        127.0.0.1 images.about.com
        127.0.0.1 lunafetch.about.com
        127.0.0.1 pixel3.about.com
        127.0.0.1 sprinks-clicks.about.com
        127.0.0.1 statistics.s5.com
        127.0.0.1 ad.aboutwebservices.com
        127.0.0.1 abroadsoftware.com #[EzSearchBar]
        127.0.0.1 www.exits.ro
        127.0.0.1 superwebsearch.com #[Parasite.ILookup][Adware.ILookup]
        127.0.0.1 www.superwebsearch.com
        127.0.0.1 adops.adbureau.net
        127.0.0.1 etype.adbureau.net
        127.0.0.1 granada.adbureau.net
        127.0.0.1 www.adbureau.net
        127.0.0.1 accipiter.speedera.net
        127.0.0.1 ad-blaster.com
        127.0.0.1 www.ad-blaster.com
        127.0.0.1 promote4profit.com
        127.0.0.1 www.promote4profit.com
        127.0.0.1 addfreestats.com
        127.0.0.1 top.addfreestats.com
        127.0.0.1 www.addfreestats.com
        127.0.0.1 www.3dstats.com
        127.0.0.1 www1.addfreestats.com
        127.0.0.1 www2.addfreestats.com
        127.0.0.1 www3.addfreestats.com
        127.0.0.1 adlogix.com #[InPop.InControl][IEEnhancer]
        127.0.0.1 lasagne.adlogix.com
        127.0.0.1 publisher.adlogix.com
        127.0.0.1 traffic.adlogix.com
        127.0.0.1 trafficsource.adlogix.com
        127.0.0.1 www.adlogix.com
        127.0.0.1 getpopped.com
        127.0.0.1 www.getpopped.com
        127.0.0.1 hitgo.com #[IPU][InPop.InControl]
        127.0.0.1 www.hitgo.com
        127.0.0.1 popmonster.com #[IEFeature Class]
        127.0.0.1 www.popmonster.com #[TROJ_POPMON.A]
        127.0.0.1 r2.trafficserverstats.com
        127.0.0.1 ads.adorigin.com
        127.0.0.1 dev.adorigin.com
        127.0.0.1 www.adorigin.com
        127.0.0.1 blowsearch.com
        127.0.0.1 msxml.blowsearch.com
        127.0.0.1 web.blowsearch.com #[infospace.com]
        127.0.0.1 www.blowsearch.com
        127.0.0.1 cb.adprofile.net
        127.0.0.1 content.adprofile.net
        127.0.0.1 tx.adprofile.net
        127.0.0.1 w2-ver.adprofile.net
        127.0.0.1 adteractive.com
        127.0.0.1 www.adteractive.com
        127.0.0.1 adtegrity.com
        127.0.0.1 www.adtegrity.com
        127.0.0.1 webalize.com #[SearchCentrix][VisiCom.SearchCentric]
        127.0.0.1 toolbar.webalize.com #[downloads.searchcentrix.com]
        127.0.0.1 www.webalize.com #[Visicom Media Toolbar]
        127.0.0.1 webalize.net
        127.0.0.1 www.webalize.net
        127.0.0.1 webalize.mygeek.com
        127.0.0.1 advertisementbanners.com
        127.0.0.1 ads.specificclick.com
        127.0.0.1 www.specificclick.com
        127.0.0.1 specificpop.com
        127.0.0.1 ads.specificpop.com
        127.0.0.1 banners.specificpop.com
        127.0.0.1 www.specificpop.com
        127.0.0.1 adopt.specificclick.net
        127.0.0.1 images.specificclick.net
        127.0.0.1 image.adjuggler.com
        127.0.0.1 rotator.adjuggler.com
        127.0.0.1 www.adjuggler.com
        127.0.0.1 thruport.com
        127.0.0.1 adj54.thruport.com
        127.0.0.1 imageserver1.thruport.com
        127.0.0.1 www.thruport.com
        127.0.0.1 alset.com #[WIN32/HXDL AL]
        127.0.0.1 www.alset.com
        127.0.0.1 aveo.com
        127.0.0.1 www.aveo.com #[server down?]
        127.0.0.1 allcybersearch.com #[REG_STARTPAGE.A]
        127.0.0.1 www.allcybersearch.com
        127.0.0.1 amigeek.com
        127.0.0.1 www.amigeek.com
        127.0.0.1 clickyestoenter.net
        127.0.0.1 www.clickyestoenter.net
        127.0.0.1 www.gay50.com
        127.0.0.1 gocybersearch.com
        127.0.0.1 www.gocybersearch.com
        127.0.0.1 www.hotelxxxcams.com
        127.0.0.1 hotpopup.com
        127.0.0.1 search.hotpopup.com
        127.0.0.1 www.hotpopup.com
        127.0.0.1 hotsearchbox.com #[JAVA_STARTPAGE.F]
        127.0.0.1 www.hotsearchbox.com
        127.0.0.1 i--search.com
        127.0.0.1 www.i--search.com #[StartPage-FN]
        127.0.0.1 jethomepage.com #[JS.Exception.Exploit]
        127.0.0.1 www.jethomepage.com #[Troj/JetHome-B]
        127.0.0.1 jetseeker.com #[CWS.Bootconf]
        127.0.0.1 www.jetseeker.com
        127.0.0.1 searchxl.com #[Adware.ZeroPopUpBar]
        127.0.0.1 www.searchxl.com
        127.0.0.1 tinybar.com
        127.0.0.1 www.tinybar.com #[Parasite.TinyBar]
        127.0.0.1 topsearcher.com #[JV/Goplanet]
        127.0.0.1 www.topsearcher.com #[Troj/JetHome-J]
        127.0.0.1 trixscripts.com
        127.0.0.1 www.trixscripts.com
        127.0.0.1 zeropopup.com #[Parasite.ZeroPopUp]
        127.0.0.1 www.zeropopup.com #[Tellafriend.Trojan]
        127.0.0.1 znext.com #[JS_TRAFFICHBAR.A][Parasite.TinyBar]
        127.0.0.1 www.znext.com #[Parasite.ZeroPopUp][App/P0P-A]
        127.0.0.1 adpowerzone.com
        127.0.0.1 ads.adpowerzone.com
        127.0.0.1 easy.adpowerzone.com
        127.0.0.1 ss.adpowerzone.com
        127.0.0.1 tb.adpowerzone.com
        127.0.0.1 tb-static.adpowerzone.com #[Adware.Websearch]
        127.0.0.1 www.adpowerzone.com #[Adware.Searchexplorer]
        127.0.0.1 adserver.adsincontext.com
        127.0.0.1 ns1.adsincontext.com
        127.0.0.1 srv01.adsincontext.com
        127.0.0.1 srv02.adsincontext.com
        127.0.0.1 srv03.adsincontext.com
        127.0.0.1 srv04.adsincontext.com
        127.0.0.1 srv05.adsincontext.com
        127.0.0.1 srv07.adsincontext.com
        127.0.0.1 adgoblin.com #[Adware.AdGoblin]
        127.0.0.1 crossroad.adgoblin.com
        127.0.0.1 www.adgoblin.com #[AdGoblin.foontext]
        127.0.0.1 adforce.adtech.de
        127.0.0.1 adserver.adtech.de
        127.0.0.1 adserv003.adtech.de
        127.0.0.1 imageserv.adtech.de
        127.0.0.1 livingnet.adtech.de
        127.0.0.1 cdn1.adsdk.com
        127.0.0.1 cdn2.adsdk.com #[VirtualBouncer]
        127.0.0.1 advertising.com
        127.0.0.1 adserve.advertising.com
        127.0.0.1 bannerfarm.ace.advertising.com
        127.0.0.1 demo.advertising.com
        127.0.0.1 opera1-servedby.advertising.com
        127.0.0.1 servedby.advertising.com
        127.0.0.1 rd.advertising.com
        127.0.0.1 wap.advertising.com
        127.0.0.1 www.advertising.com
        127.0.0.1 clk4.com
        127.0.0.1 www.clk4.com
        127.0.0.1 www.contextualclicks.com
        127.0.0.1 fastseeker.com #[Adware.FastSeek]
        127.0.0.1 www.fastseeker.com
        127.0.0.1 spyblast.com #[Parasite.SpyBlast]
        127.0.0.1 www.spyblast.com #[SBFullInst Control]
        127.0.0.1 ads.ign.com
        127.0.0.1 adserver.ign.com
        127.0.0.1 t.ign.com
        127.0.0.1 tracker.ign.com
        127.0.0.1 adserver.snowball.com
        127.0.0.1 polls.snowball.com
        127.0.0.1 scripts.snowball.com
        127.0.0.1 t.snowball.com
        127.0.0.1 tracker.snowball.com
        127.0.0.1 altnet.com
        127.0.0.1 file.altnet.com
        127.0.0.1 media.altnet.com
        127.0.0.1 ts.altnet.com
        127.0.0.1 tss.altnet.com
        127.0.0.1 pm.altnet.com
        127.0.0.1 www.altnet.com
        127.0.0.1 www.altnetp2p.com
        127.0.0.1 brilliantdigital.com #[Parasite.BDE]
        127.0.0.1 st.brilliantdigital.com
        127.0.0.1 www.brilliantdigital.com
        127.0.0.1 b3d.com
        127.0.0.1 www.b3d.com
        127.0.0.1 bde3d.com
        127.0.0.1 xiti.com
        127.0.0.1 loga.xiti.com
        127.0.0.1 logc13.xiti.com
        127.0.0.1 logi6.xiti.com
        127.0.0.1 logi7.xiti.com
        127.0.0.1 logv3.xiti.com
        127.0.0.1 logv18.xiti.com
        127.0.0.1 logv20.xiti.com
        127.0.0.1 logp.xiti.com
        127.0.0.1 trafic.xiti.com
        127.0.0.1 www.xiti.com
        127.0.0.1 adintelligence.net
        127.0.0.1 acc.adintelligence.net
        127.0.0.1 adchannel.adintelligence.net
        127.0.0.1 creatives.adintelligence.net
        127.0.0.1 download.adintelligence.net #[SysAI]
        127.0.0.1 www.adintelligence.net
        127.0.0.1 adchannel.contextplus.net #[Parasite.AproposMedia]
        127.0.0.1 www.contextplus.net
        127.0.0.1 www.contextplus.com
        127.0.0.1 adv.peopleonpage.com
        127.0.0.1 app.peopleonpage.com
        127.0.0.1 download.peopleonpage.com #[POP Loader]
        127.0.0.1 envolo.peopleonpage.com
        127.0.0.1 img.peopleonpage.com
        127.0.0.1 srv.peopleonpage.com #[Spyware.Apropos.B]
        127.0.0.1 www.peopleonpage.com #[Apropos.bho][PeopleOnPage.Apropos]
        127.0.0.1 image.avenuea.com
        127.0.0.1 www.avenuea.com
        127.0.0.1 www.atdmt.com
        127.0.0.1 click.atdmt.com
        127.0.0.1 clk.atdmt.com
        127.0.0.1 spd.atdmt.com
        127.0.0.1 spe.atdmt.com
        127.0.0.1 switch.atdmt.com
        127.0.0.1 view.atdmt.com
        127.0.0.1 atlasdmt.com
        127.0.0.1 www.atlasdmt.com
        127.0.0.1 www.avenueainc.com
        127.0.0.1 active-alert-server.com
        127.0.0.1 www.active-alert-server.com
        127.0.0.1 amnv.net
        127.0.0.1 www.amnv.net
        127.0.0.1 avenuemedia.com
        127.0.0.1 www.avenuemedia.com
        127.0.0.1 climaxbucks.com #[ClimaxBucks.InternetOptimizer]
        127.0.0.1 cdn.climaxbucks.com
        127.0.0.1 mt1.climaxbucks.com
        127.0.0.1 mt23.climaxbucks.com
        127.0.0.1 xbs.climaxbucks.com
        127.0.0.1 www.climaxbucks.com
        127.0.0.1 xbs.cocktailcash.com
        127.0.0.1 cocktailcash.com
        127.0.0.1 www.cocktailcash.com
        127.0.0.1 ads.internet-optimizer.com #[Parasite.Internet Optimizer]
        127.0.0.1 internet-optimizer.com #[Downloader.Dyfcia.F]
        127.0.0.1 configure.internet-optimizer.com
        127.0.0.1 help.internet-optimizer.com
        127.0.0.1 www.internet-optimizer.com #[Adware.NetOptimizer]
        127.0.0.1 www.lunasearch.com
        127.0.0.1 movies-etc.com
        127.0.0.1 cdn.movies-etc.com
        127.0.0.1 www.movies-etc.com
        127.0.0.1 yoogee.com #[Parasite.Internet Optimizer]
        127.0.0.1 www.yoogee.com
        127.0.0.1 c.azjmp.com
        127.0.0.1 images.azoogleads.com
        127.0.0.1 images.azooimages.com
        127.0.0.1 www.azoogleads.com
        127.0.0.1 www.giftfox.com
        127.0.0.1 images.imgehost.com
        127.0.0.1 c.qckjmp.com
        127.0.0.1 google.begin2search.com
        127.0.0.1 toolbar.begin2search.com
        127.0.0.1 www.begin2search.com #[Adware.Begin2search][iiittt Class]
        127.0.0.1 click2findnow.com
        127.0.0.1 www.click2findnow.com
        127.0.0.1 desktoptraffic.net
        127.0.0.1 toolbar.desktoptraffic.net
        127.0.0.1 popupsearches.com
        127.0.0.1 www.popupsearches.com
        127.0.0.1 www.eaffiliateinc.com
        127.0.0.1 globalwebsearch.com #[Parasite.ILookup]
        127.0.0.1 toolbar.globalwebsearch.com #[I-Lookup.GWS]
        127.0.0.1 toolbar2.globalwebsearch.com #[iiittt Class]
        127.0.0.1 www.globalwebsearch.com #[Adware.ILookup]
        127.0.0.1 hotwebsearch.com
        127.0.0.1 www.hotwebsearch.com
        127.0.0.1 worldanywhere.com
        127.0.0.1 toolbar.worldanywhere.com
        127.0.0.1 www.worldanywhere.com
        127.0.0.1 adcounter.theglobeandmail.com
        127.0.0.1 adrates.theglobeandmail.com
        127.0.0.1 ads.globeandmail.com
        127.0.0.1 ads1.theglobeandmail.com
        127.0.0.1 visit.theglobeandmail.com
        127.0.0.1 www1.theglobeandmail.com
        127.0.0.1 adbot.com
        127.0.0.1 w1.adbot.com
        127.0.0.1 www.adbot.com
        127.0.0.1 counter.bloke.com
        127.0.0.1 www1.counter.bloke.com
        127.0.0.1 www3.counter.bloke.com
        127.0.0.1 www4.counter.bloke.com
        127.0.0.1 www5.counter.bloke.com
        127.0.0.1 www6.counter.bloke.com
        127.0.0.1 www7.counter.bloke.com
        127.0.0.1 counterbot.com
        127.0.0.1 cb1.counterbot.com
        127.0.0.1 ak.bluestreak.com
        127.0.0.1 ca1.bluestreak.com
        127.0.0.1 s0.bluestreak.com
        127.0.0.1 s0b.bluestreak.com
        127.0.0.1 s1.bluestreak.com
        127.0.0.1 s2.bluestreak.com
        127.0.0.1 s3.bluestreak.com
        127.0.0.1 s4.bluestreak.com
        127.0.0.1 s5.bluestreak.com
        127.0.0.1 s6.bluestreak.com
        127.0.0.1 s7.bluestreak.com
        127.0.0.1 s8.bluestreak.com
        127.0.0.1 www.bluestreak.com
        127.0.0.1 download.bonzi.com
        127.0.0.1 images.bonzi.com
        127.0.0.1 www.bonzi.com
        127.0.0.1 www.bonzibuddy.com
        127.0.0.1 bravenet.com
        127.0.0.1 adserv.bravenet.com
        127.0.0.1 images.bravenet.com
        127.0.0.1 linktrack.bravenet.com
        127.0.0.1 pub1.bravenet.com
        127.0.0.1 www.bravenet.com
        127.0.0.1 belgiandip.com #[ITS Protocol exploit]
        127.0.0.1 www.belgiandip.com
        127.0.0.1 fassia.net #[Parasite.AutoSearch]
        127.0.0.1 www.fassia.net
        127.0.0.1 flipperkeys.com
        127.0.0.1 www.flipperkeys.com
        127.0.0.1 www.illtemperedguppys.com
        127.0.0.1 manipulatingtheicesurface.com
        127.0.0.1 www.manipulatingtheicesurface.com
        127.0.0.1 www.no-beba-el-agua.com
        127.0.0.1 smokeandapancake.org #[Adware.Winpup]
        127.0.0.1 www.smokeandapancake.org #[AdClicker-O][Troj/Psyme-C]
        127.0.0.1 www.undergroundlair.net #[Troj/AdClick-N]
        127.0.0.1 www2.undergroundlair.net
        127.0.0.1 www.00z70az77mnsa-00swj1zzprh.com #[www2.undergroundlair.net]
        127.0.0.1 www.funcionamiento-con-la-tijera.com #[undergroundlair.net]
        127.0.0.1 www.pshnw6510990nmo-34nue7700.net
        127.0.0.1 burstmedia.com
        127.0.0.1 web.burstmedia.com
        127.0.0.1 roscoe.burstmedia.com
        127.0.0.1 ads.burstnet.com
        127.0.0.1 gifs.burstnet.com
        127.0.0.1 sj.burstnet.com
        127.0.0.1 te.burstnet.com
        127.0.0.1 www.burstnet.com
        127.0.0.1 www2.burstnet.com
        127.0.0.1 www3.burstnet.com
        127.0.0.1 www4.burstnet.com
        127.0.0.1 www5.burstnet.com
        127.0.0.1 www6.burstnet.com
        127.0.0.1 www.burstnet.akadns.net
        127.0.0.1 casalemedia.com
        127.0.0.1 as.casalemedia.com
        127.0.0.1 asg01.casalemedia.com
        127.0.0.1 asg02.casalemedia.com
        127.0.0.1 asg03.casalemedia.com
        127.0.0.1 asg04.casalemedia.com
        127.0.0.1 asg05.casalemedia.com
        127.0.0.1 asg06.casalemedia.com
        127.0.0.1 asg07.casalemedia.com
        127.0.0.1 asg08.casalemedia.com
        127.0.0.1 asg09.casalemedia.com
        127.0.0.1 asg10.casalemedia.com
        127.0.0.1 asg11.casalemedia.com
        127.0.0.1 asg12.casalemedia.com
        127.0.0.1 asg13.casalemedia.com
        127.0.0.1 asg14.casalemedia.com
        127.0.0.1 asg15.casalemedia.com
        127.0.0.1 asg16.casalemedia.com
        127.0.0.1 asg17.casalemedia.com
        127.0.0.1 asg18.casalemedia.com
        127.0.0.1 asg19.casalemedia.com
        127.0.0.1 asg20.casalemedia.com
        127.0.0.1 asg21.casalemedia.com
        127.0.0.1 asg22.casalemedia.com
        127.0.0.1 asg23.casalemedia.com
        127.0.0.1 asg24.casalemedia.com
        127.0.0.1 asg25.casalemedia.com
        127.0.0.1 asg26.casalemedia.com
        127.0.0.1 asg27.casalemedia.com
        127.0.0.1 asg28.casalemedia.com
        127.0.0.1 asg29.casalemedia.com
        127.0.0.1 asg30.casalemedia.com
        127.0.0.1 asg31.casalemedia.com
        127.0.0.1 asg32.casalemedia.com
        127.0.0.1 asg33.casalemedia.com
        127.0.0.1 asg34.casalemedia.com
        127.0.0.1 asg35.casalemedia.com
        127.0.0.1 asg36.casalemedia.com
        127.0.0.1 asg37.casalemedia.com
        127.0.0.1 asg38.casalemedia.com
        127.0.0.1 asg39.casalemedia.com
        127.0.0.1 asg40.casalemedia.com
        127.0.0.1 asg41.casalemedia.com
        127.0.0.1 asg42.casalemedia.com
        127.0.0.1 asg43.casalemedia.com
        127.0.0.1 asg44.casalemedia.com
        127.0.0.1 asg45.casalemedia.com
        127.0.0.1 asg46.casalemedia.com
        127.0.0.1 asg47.casalemedia.com
        127.0.0.1 asg48.casalemedia.com
        127.0.0.1 asg49.casalemedia.com
        127.0.0.1 asg50.casalemedia.com
        127.0.0.1 asg51.casalemedia.com
        127.0.0.1 asg52.casalemedia.com
        127.0.0.1 aslg01.casalemedia.com
        127.0.0.1 aslg02.casalemedia.com
        127.0.0.1 aslg03.casalemedia.com
        127.0.0.1 aslg04.casalemedia.com
        127.0.0.1 aslg05.casalemedia.com
        127.0.0.1 aslg06.casalemedia.com
        127.0.0.1 aslg07.casalemedia.com
        127.0.0.1 aslg08.casalemedia.com
        127.0.0.1 aslg09.casalemedia.com
        127.0.0.1 aslg10.casalemedia.com
        127.0.0.1 c.casalemedia.com
        127.0.0.1 i.casalemedia.com
        127.0.0.1 is.casalemedia.com
        127.0.0.1 isg01.casalemedia.com
        127.0.0.1 isg02.casalemedia.com
        127.0.0.1 isg03.casalemedia.com
        127.0.0.1 isg04.casalemedia.com
        127.0.0.1 isg05.casalemedia.com
        127.0.0.1 isg06.casalemedia.com
        127.0.0.1 isg07.casalemedia.com
        127.0.0.1 isg08.casalemedia.com
        127.0.0.1 isg09.casalemedia.com
        127.0.0.1 isg10.casalemedia.com
        127.0.0.1 r.casalemedia.com
        127.0.0.1 www.casalemedia.com
        127.0.0.1 www.spywarestormer.com #[CInstall Class][Zoombar Object][Rogue/Suspect]
        127.0.0.1 active-max.com
        127.0.0.1 search.active-max.com
        127.0.0.1 www.active-max.com
        127.0.0.1 allaboutsearching.com
        127.0.0.1 www.allaboutsearching.com
        127.0.0.1 amazingautossearch.com
        127.0.0.1 www.amazingautossearch.com
        127.0.0.1 contexualsearch.com
        127.0.0.1 www.contexualsearch.com
        127.0.0.1 www.dialup2.com
        127.0.0.1 ecpm.com
        127.0.0.1 www.ecpm.com
        127.0.0.1 find-quick.com
        127.0.0.1 www.find-quick.com
        127.0.0.1 look-today.com
        127.0.0.1 www.look-today.com
        127.0.0.1 lop.com
        127.0.0.1 ao.lop.com
        127.0.0.1 ayb.lop.com
        127.0.0.1 bins.lop.com
        127.0.0.1 k17177.bins.lop.com
        127.0.0.1 img.lop.com
        127.0.0.1 sue.lop.com
        127.0.0.1 srch.lop.com #[Parasite.LOP]
        127.0.0.1 www1.lop.com
        127.0.0.1 www.lop.com
        127.0.0.1 maxexp.com
        127.0.0.1 www.mp3search.com
        127.0.0.1 mysearchnow.com
        127.0.0.1 search200.com
        127.0.0.1 www.search200.com
        127.0.0.1 search.mysearchnow.com
        127.0.0.1 www.mysearchnow.com
        127.0.0.1 netsearchsoft.com
        127.0.0.1 www.netsearchsoft.com
        127.0.0.1 omegasearch.com
        127.0.0.1 www.omegasearch.com
        127.0.0.1 prosearching.com
        127.0.0.1 www.prosearching.com
        127.0.0.1 www.rub.to
        127.0.0.1 sbvr.com
        127.0.0.1 www.sbvr.com
        127.0.0.1 searchexe.com
        127.0.0.1 www.searchexe.com
        127.0.0.1 searchweb2.com
        127.0.0.1 www.searchweb2.com
        127.0.0.1 spawnet.com
        127.0.0.1 www.spawnet.com
        127.0.0.1 tdmy.com #[TrojanDownloader.Win32.Swizzor.h]
        127.0.0.1 tefs.com
        127.0.0.1 tfil.com
        127.0.0.1 www.tfil.com
        127.0.0.1 tdko.com
        127.0.0.1 www.tdko.com
        127.0.0.1 wfix.com #[super-spider.com]
        127.0.0.1 installdollars.com #[affiliate]
        127.0.0.1 www2.installdollars.com #[Adware.Instdollars][server down?]
        127.0.0.1 www.installdollars.com
        127.0.0.1 clickxchange.com
        127.0.0.1 caweb1.clickxchange.com
        127.0.0.1 caweb2.clickxchange.com
        127.0.0.1 www.clickxchange.com
        127.0.0.1 public.americandaytrading.com
        127.0.0.1 blazefind.com #[IE SearchBar]
        127.0.0.1 findwhatevernow.blazefind.com
        127.0.0.1 omniscient.blazefind.com #[TROJ_BLAZEFIND.A]
        127.0.0.1 xml.blazefind.com
        127.0.0.1 www.blazefind.com #[Adware.BlazeFind]
        127.0.0.1 cdtnet.net
        127.0.0.1 anne.cdtnet.net
        127.0.0.1 caroline.cdtnet.net
        127.0.0.1 flingstone.com #[TROJ_WINFAVS.A]
        127.0.0.1 redirect.flingstone.com
        127.0.0.1 static.flingstone.com #[brdg Class]
        127.0.0.1 www.flingstone.com #[Adware.WinFavorites.B]
        127.0.0.1 www2.flingstone.com #[brdg Class][Win32/Bryss.Spy.Trojan]
        127.0.0.1 homepagecash.com
        127.0.0.1 www.homepagecash.com
        127.0.0.1 loudcash.com
        127.0.0.1 partners.loudcash.com
        127.0.0.1 www.loudcash.com
        127.0.0.1 searchbarcash.com #[Downloader.Small.5.Y]
        127.0.0.1 public.searchbarcash.com #[WinFavorites][DownloadUL Class]
        127.0.0.1 www.searchbarcash.com #[Parasite.TinyBar]
        127.0.0.1 searchbrowser.com
        127.0.0.1 findwhatevernow.searchbrowser.com
        127.0.0.1 skoobidoo.com
        127.0.0.1 www.skoobidoo.com
        127.0.0.1 www2.skoobidoo.com #[Downloader.MSCache]
        127.0.0.1 updates.troffee.com
        127.0.0.1 winadclient.com
        127.0.0.1 www.winadclient.com
        127.0.0.1 windowssr.com
        127.0.0.1 public.windupdates.com #[Windows SyncroAd]
        127.0.0.1 static.windupdates.com
        127.0.0.1 www.windupdates.com #[AdvWare.WinAD]
        127.0.0.1 counterstrike.server.us #[Downloader.CDT]
        127.0.0.1 er.errorplace.com
        127.0.0.1 www.errorplace.com #[Parasite.SearchSprint]
        127.0.0.1 www.media-motor.com
        127.0.0.1 bins2.media-motor.net #[TROJ_VB.DO]
        127.0.0.1 cabs.media-motor.net #[IObjSafety.DemoCtl]
        127.0.0.1 logs.media-motor.net
        127.0.0.1 mmm.media-motor.net
        127.0.0.1 upd.media-motor.net
        127.0.0.1 www.media-motor.net
        127.0.0.1 tar.popuppers.com #[Adware.Medload]
        127.0.0.1 www.popuppers.com #[Adware.Roimoi][SULoads.popuppers]
        127.0.0.1 bins.roings.com #[jimmyloader.jimmyform]
        127.0.0.1 cabs.roings.com #[IObjSafety.DemoCtl]
        127.0.0.1 logs.roings.com
        127.0.0.1 mmm.roings.com #[limmyloding.limmyform]
        127.0.0.1 www.roings.com #[Roings Search Enhancment]
        127.0.0.1 bannerexchange.cjb.net
        127.0.0.1 coder3862004.cjb.net #[Trojan.Bansap]
        127.0.0.1 searchwww.com
        127.0.0.1 search.searchwww.com #[Parasite.SearchWWW]
        127.0.0.1 vbs.searchwww.com
        127.0.0.1 www.searchwww.com
        127.0.0.1 dafinder.com
        127.0.0.1 www2.dafinder.com
        127.0.0.1 www3.dafinder.com
        127.0.0.1 adult.getmoviesonline.com
        127.0.0.1 www.getmoviesonline.com
        127.0.0.1 ourlinklist.com
        127.0.0.1 searchaccurate.com #[Parasite.TinyBar]
        127.0.0.1 www.searchaccurate.com
        127.0.0.1 ads.web.aol.com
        127.0.0.1 affiliate.aol.com
        127.0.0.1 aim.aol.com
        127.0.0.1 dynamic.aol.com
        127.0.0.1 free.aol.com
        127.0.0.1 usaol.c
        0
  2. rudyrital Messages postés 6233 Statut Membre 131
     
    refait une analyse avec ca pour voir :

    télécharges smitfraudfix :
    http://siri.urz.free.fr/Fix/SmitfraudFix.exe

    En image :
    http://siri.urz.free.fr/Fix/SmitfraudFix.php

    tu doubles cliques sur smitfraudfix.cmd et tu choisi l option 1
    cela vas générer un rapport.

    Copie/colle le rapport sur le forum.

    Remarque:

    Process.exe est détecté par certains antivirus.
    Ce n'est pas un virus, mais il peut arrêter des logiciel de sécurité avec certaine manipulation.
    C'est pour cela qu'il est détecté par les antivirus.
    0
    1. husnu
       
      SmitFraudFix v2.176

      Rapport fait à 19:56:22,17, lun. 07/05/2007
      Executé à partir de C:\Documents and Settings\husnu\Bureau\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
      Le type du système de fichiers est NTFS
      Fix executé en mode normal

      »»»»»»»»»»»»»»»»»»»»»»»» Process

      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\wscntfy.exe
      C:\WINDOWS\Mixer.exe
      C:\Program Files\Microsoft IntelliType Pro\type32.exe
      C:\Program Files\Microsoft IntelliPoint\point32.exe
      C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
      C:\Program Files\Alwil Software\Avast4\ashDisp.exe
      C:\Program Files\Winamp\Winampa.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\lclock.exe
      C:\program files\valve\steam\steam.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\WINDOWS\system32\cmd.exe

      »»»»»»»»»»»»»»»»»»»»»»»» hosts

      Fichier hosts corrompu !

      # [MICROSOFT.COM]

      »»»»»»»»»»»»»»»»»»»»»»»» C:\


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\husnu


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\husnu\Application Data


      »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


      »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\husnu\Favoris


      »»»»»»»»»»»»»»»»»»»»»»»» Bureau


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


      »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


      »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau



      »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll


      »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
      "AppInit_DLLs"=""


      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
      "System"=""


      »»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32-huy32



      »»»»»»»»»»»»»»»»»»»»»»»» DNS

      Description: D-Link DFE-530TX PCI Fast Ethernet Adapter (rev.C) - Miniport d'ordonnancement de paquets
      DNS Server Search Order: 212.68.193.110
      DNS Server Search Order: 212.68.193.196

      HKLM\SYSTEM\CCS\Services\Tcpip\..\{2034742A-ECDF-411F-8C31-6D19D17FCC15}: DhcpNameServer=212.68.193.110 212.68.193.196
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{2034742A-ECDF-411F-8C31-6D19D17FCC15}: DhcpNameServer=212.68.193.110 212.68.193.196
      HKLM\SYSTEM\CS2\Services\Tcpip\..\{2034742A-ECDF-411F-8C31-6D19D17FCC15}: DhcpNameServer=212.68.193.110 212.68.193.196
      HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.68.193.110 212.68.193.196
      HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.68.193.110 212.68.193.196
      HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.68.193.110 212.68.193.196


      »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


      »»»»»»»»»»»»»»»»»»»»»»»» Fin
      0
    2. rudyrital Messages postés 6233 Statut Membre 131
       
      Prends connaissance du contenu le lien suivant:
      http://www.f-secure.com/products/license-terms/eult_fra.pdf
      Tu as donc pris connaissance et accepté les conditions d'utilisations du programme blacklight qui est inclus dans le dossier compressé navilog1.zip que tu vas télécharger.
      Maintenant fais un clic droit sur ce lien :
      http://perso.orange.fr/il.mafioso/Navifix/navilog1.zip
      Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
      Fais un clic droit sur navilog1.zip et choisis "tout extraire"
      Ensuite double clique sur navilog1.bat
      Laisses-toi guider. Au menu principal, choisis 1 et valides.
      (ne fais pas le choix 2 sans notre avis/accord)
      Patientes jusqu'au message :
      *** Analyse Termine le ..... ***
      Appuies sur une touche comme demandé, le blocnote va s'ouvrir.
      Copies-colles l'intégralité dans une réponse. Refermes le blocnote.
      Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

      0
    3. husnu Messages postés 411 Statut Membre 24 > rudyrital Messages postés 6233 Statut Membre
       
      Search Navipromo version 1.1.6 commencé le lun. 07/05/2007 à 20:07:39,14

      !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
      !!! Poster ce rapport sur le forum pour le faire analyser !!!
      !!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

      Fix lancé depuis C:\Documents and Settings\husnu\Bureau\navilog1
      Mise a jour le 02.05.2007 a 08h00 by IL-MAFIOSO

      Executé en mode normal

      *** Recherche Programmes installes ***




      *** Recherche dossiers dans C:\WINDOWS ***




      *** Recherche dossiers dans C:\Program Files ***




      *** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




      *** Recherche dossiers dans C:\Documents and Settings\husnu\Application Data ***



      *** Recherche avec BlackLight Engine/F-secure ***
      BlackLight Engine est un produit de F-secure, pour + d'infos :
      https://www.f-secure.com/en

      Fichier(s) caché(s) dans C:\WINDOWS\system32 :


      Processus caché(s) dans C:\WINDOWS\system32 :



      *** Recherche fichiers ***




      *** Recherche cles registre ***


      Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs]



      Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage]



      Recherche Clé Magic Control



      *** Module de Recherche complémentaire ***
      (Recherche fichiers spécifiques)

      1)Recherche fichiers connus:


      2)Recherche Heuristique :
      *
      **
      ***
      ****
      *****
      ******
      *******
      ********


      *** Analyse Terminé le lun. 07/05/2007 à 20:10:01,87 ***
      0
    4. rudyrital Messages postés 6233 Statut Membre 131 > rudyrital Messages postés 6233 Statut Membre
       
      **Télécharge la version d'essai d'AVG Anti-Spyware 7.5 ici :
      avg antispyware
      et l'installer.

      Son tuto (merci malekal_morte) : https://www.malekal.com/avg-antivirus-free-antivirus-gratuit-pour-proteger-son-pc-des-virus/

      Démarrer AVG antispyware. Cliquer sur "mise à jour", cliquer sur le bouton "Commencer la mise à jour" et attendre la fin de cette mise à jour puis, fermer le programme.
      Redemarrer en mode sans échec, relancer AVG AS et cliquer sur l'onglet "scanner" puis sur "Analyse complète du système".
      Une fois le scan terminé, il t'affiche un rapport. Cliquer sur "configurer..." en bas a gauche et choisir "supprimer". Ensuite cliquer sur "Appliquer toutes les actions ", ca va supprimer toutes les infections détectées.
      Ensuite cliquer sur "Enregistrer le rapport d'analyse" -> "enregistrer sous" et enregistrer le rapport où bon te semble, afin de me l'envoyer dans ta prochaine réponse.
      0
    5. husnu Messages postés 411 Statut Membre 24 > rudyrital Messages postés 6233 Statut Membre
       
      la mise a jour est tres lente..... dès que j'ai fini je t'envoi le rapport
      0
  3. rudyrital Messages postés 6233 Statut Membre 131
     
    ouvre le fichier host et dis supprime toutes les adresses.
    ne laisse que celle ci:
    127.0.0.1 localhost

    enregistre et remet un nouveau smitfraudfix.
    0
    1. husnu Messages postés 411 Statut Membre 24
       
      alors là c'est la meilleur!!! je viens juste de formater mon pc mais qu'es ce que je vois encore les memes processus dans mon pc!!!!
      je viens de faire une recherche avec smitfraud et voici le resultats, je n'ai pas encore fais de nettoyage avec smitfraudfix:

      SmitFraudFix v2.177

      Rapport fait à 20:03:00,28, mar. 08/05/2007
      Executé à partir de C:\Documents and Settings\husnu\Bureau\SmitfraudFix\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
      Le type du système de fichiers est NTFS
      Fix executé en mode normal

      »»»»»»»»»»»»»»»»»»»»»»»» Process

      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\Mixer.exe
      C:\Program Files\Alwil Software\Avast4\ashDisp.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\lclock.exe
      C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
      C:\WINDOWS\system32\cmd.exe

      »»»»»»»»»»»»»»»»»»»»»»»» hosts

      Fichier hosts corrompu !

      # [MICROSOFT.COM]
      127.0.0.1 microsoft.com.org
      127.0.0.1 www.www.microsoft.com.org

      »»»»»»»»»»»»»»»»»»»»»»»» C:\


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\husnu


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\husnu\Application Data


      »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


      »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\husnu\Favoris


      »»»»»»»»»»»»»»»»»»»»»»»» Bureau


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


      »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


      »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
      "Source"="About:Home"
      "SubscribedURL"="About:Home"
      "FriendlyName"="Ma page d'accueil"


      »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll


      »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
      "AppInit_DLLs"=""


      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
      "System"=""


      »»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32-huy32



      »»»»»»»»»»»»»»»»»»»»»»»» DNS

      Description: D-Link DFE-530TX PCI Fast Ethernet Adapter (rev.C) - Miniport d'ordonnancement de paquets
      DNS Server Search Order: 212.68.193.110
      DNS Server Search Order: 212.68.193.196

      HKLM\SYSTEM\CCS\Services\Tcpip\..\{0B79BC6C-31C6-405C-817B-41F1CB3B914E}: DhcpNameServer=212.68.193.110 212.68.193.196
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{0B79BC6C-31C6-405C-817B-41F1CB3B914E}: DhcpNameServer=212.68.193.110 212.68.193.196
      HKLM\SYSTEM\CS2\Services\Tcpip\..\{0B79BC6C-31C6-405C-817B-41F1CB3B914E}: DhcpNameServer=212.68.193.110 212.68.193.196
      HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.68.193.110 212.68.193.196
      HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.68.193.110 212.68.193.196
      HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.68.193.110 212.68.193.196


      »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


      »»»»»»»»»»»»»»»»»»»»»»»» Fin
      0
    2. husnu Messages postés 411 Statut Membre 24
       
      d'ou et comment j'ouvre le fichier host???
      0
    3. rudyrital Messages postés 6233 Statut Membre 131
       
      attend je vais demander de l'aide je reviens
      0
      1. husnu Messages postés 411 Statut Membre 24 > rudyrital Messages postés 6233 Statut Membre
         
        ok jte remerci
        0
      2. rudyrital Messages postés 6233 Statut Membre 131 > rudyrital Messages postés 6233 Statut Membre
         
        j'attend une reponse t'inquiete pas !! a toute
        0
  4. Darkkiller Messages postés 2336 Statut Contributeur 67
     
    Re,

    Je prend le relais de rudyrital !

    Donc tu vas me chercher ce fichier :

    C:\WINDOWS\system32\drivers\etc\hosts

    Et tu me copie-colle ce qu'il y a dedans.
    ----------------------------------------------------------------------------
    Redémarre en mode sans échec tuto : http://forum.telecharger.01net.com/forum/high-tech/SECURITE/Securite/redemarrer-mode-echec-sujet_1526_1.htm
    Puis tu exécutes SmitFraudFix.exe et tu choisis l'option 2.
    Redémarre normalement et poste le log Smitfraudfix + un nouveau log Hijackthis.

    0
    1. husnu Messages postés 411 Statut Membre 24
       
      j'ai été jusque dans le fichier "etc" mais pour le fichier hosts il n'y a aucune extension, pas tres bien compris ce qu'il faut faire.Bon maintenant je vais faire ce que tu me demandé apres les tirets j'arrive.....
      0
    2. husnu Messages postés 411 Statut Membre 24
       
      SmitFraudFix v2.177

      Rapport fait à 21:42:57,17, mar. 08/05/2007
      Executé à partir de C:\Documents and Settings\husnu\Bureau\SmitfraudFix\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
      Le type du système de fichiers est NTFS
      Fix executé en mode sans echec

      »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


      »»»»»»»»»»»»»»»»»»»»»»»» hosts


      127.0.0.1 localhost

      127.0.0.1 downloads.aaa1screensavers.com #[Bargin Buddy]
      127.0.0.1 china.dalexcars.com
      127.0.0.1 dl.aaascreensavers.com
      127.0.0.1 abcsearch.com
      127.0.0.1 admin.abcsearch.com
      127.0.0.1 www3.abcsearch.com #[Browseraid]
      127.0.0.1 www.abcsearch.com
      127.0.0.1 abc517.net #[Trojan.Mitglieder.H]
      127.0.0.1 absoluagency.com #[Trojan.StartPage.H]
      127.0.0.1 acestats.com
      127.0.0.1 www.acestats.com
      127.0.0.1 actualnames.com #[Parasite.ActualNames][Spyware.ActualNames]
      127.0.0.1 www.actualnames.com
      127.0.0.1 ad-up.com
      127.0.0.1 www.ad-up.com
      127.0.0.1 adatom.com
      127.0.0.1 aesp.adatom.com
      127.0.0.1 adbest.com
      127.0.0.1 www.adcipta.net #[W32/Malware]
      127.0.0.1 adserv.adbonus.com
      127.0.0.1 www.adbonus.com
      127.0.0.1 ad2.adcept.net
      127.0.0.1 ad3.adcept.net
      127.0.0.1 www.adcept.net
      127.0.0.1 adcomplete.com
      127.0.0.1 www.adcomplete.com
      127.0.0.1 www.adcopy.info
      127.0.0.1 ads.adcorps.com
      127.0.0.1 ads.addynamix.com
      127.0.0.1 pt.server1.adexit.com
      127.0.0.1 www.adexit.com
      127.0.0.1 www.ad4ever.com
      127.0.0.1 adhearus.com
      127.0.0.1 display2.adhearus.com
      127.0.0.1 ssl3.adhost.com
      127.0.0.1 www2.adhost.com
      127.0.0.1 www.addme.com
      127.0.0.1 www.adinfinity.com
      127.0.0.1 te.adlandpro.com
      127.0.0.1 classic.adlink.de
      127.0.0.1 regio.adlink.de
      127.0.0.1 west.adlink.de
      127.0.0.1 www.adminder.com
      127.0.0.1 adsfac.net
      127.0.0.1 www.adonweb.com
      127.0.0.1 www.adrelevance.com #[NetRatings]
      127.0.0.1 media.adrevolver.com
      127.0.0.1 adroar.com
      127.0.0.1 ads.adroar.com
      127.0.0.1 delta.adroar.com
      127.0.0.1 iads.adroar.com #[Adware.AdRoar][ADW_ADROAR.A]
      127.0.0.1 lists.adroar.com
      127.0.0.1 www.adroar.com
      127.0.0.1 ads.adsag.com
      127.0.0.1 di.adsag.com
      127.0.0.1 img.adsag.com
      127.0.0.1 adserv.com
      127.0.0.1 www.adserv.com
      127.0.0.1 ads.adtomi.com
      127.0.0.1 www.adtomi.com #[Adware.Adtomi]
      127.0.0.1 downldcl.adtoolsinc.com
      127.0.0.1 www.adtoolsinc.com
      127.0.0.1 www.adtrader.com
      127.0.0.1 www.adtraffic.net
      127.0.0.1 survey.advantageresearch.com
      127.0.0.1 ad.adver.com.tw
      127.0.0.1 ads.advertise.net
      127.0.0.1 advertisingvision.com #[Adware.Advision]
      127.0.0.1 www.advertisingvision.com
      127.0.0.1 adviva.com
      127.0.0.1 www.adviva.com
      127.0.0.1 ads.adviva.net
      127.0.0.1 adstats.adviva.net
      127.0.0.1 tracker.affistats.com #[msvrl.dll]
      127.0.0.1 www.affiliatefuel.com
      127.0.0.1 banners.affiliatefuel.com
      127.0.0.1 affiliatetarget.com
      127.0.0.1 www.affiliatetarget.com
      127.0.0.1 fcds.affiliatetracking.net
      127.0.0.1 our.affiliatetracking.net
      127.0.0.1 www.affiliatetracking.net
      127.0.0.1 www.affiliatetracking.com
      127.0.0.1 adserver.aim4media.com
      127.0.0.1 adtest.aim4media.com
      127.0.0.1 pops.aim4media.com
      127.0.0.1 www.aim4media.com
      127.0.0.1 crs.akamai.com
      127.0.0.1 soap.alexa.com #[Spyware.Alexa][Alexa Toolbar]
      127.0.0.1 traffic.alexa.com
      127.0.0.1 xsltcache.alexa.com
      127.0.0.1 www.alexa.com
      127.0.0.1 allcheapsolutions.com #[Backdoor-CIE]
      127.0.0.1 ads.as4x.tmcs.akadns.net #[Ticketmaster]
      127.0.0.1 bantam.ai.net
      127.0.0.1 fiona.ai.net
      127.0.0.1 ads.amazingmedia.com
      127.0.0.1 bohema.amillo.net #[Trojan.Mitglieder.H]
      127.0.0.1 adserver04.ancestry.com #[RealMedia]
      127.0.0.1 ads.antionline.com
      127.0.0.1 junior.apk.net
      127.0.0.1 banner.arttoday.com
      127.0.0.1 ads.aspalliance.com
      127.0.0.1 associmg.com #[amazon.com]
      127.0.0.1 armbender.com #[UCSearch.ucUCSearch][W32.Adclicker.F.Trojan]
      127.0.0.1 www.armbender.com #[UCSearch.ArmBender]
      127.0.0.1 audiogalaxy.com
      127.0.0.1 www.audiogalaxy.com #[Restricted Zone site]
      127.0.0.1 adserving.autotrader.com
      127.0.0.1 www.avatarresources.com #[Parasite.AutoStartup]
      127.0.0.1 www.avres.net
      127.0.0.1 www.aweber.com
      127.0.0.1 cploving.awmhost.net #[TrojanClicker.Win32.Lopin]
      127.0.0.1 bar.baidu.com #[Parasite.ClientMan]
      127.0.0.1 www.baltictop.com
      127.0.0.1 www.banner-mania.com
      127.0.0.1 www.bannerspace.com #[Restricted Zone site]
      127.0.0.1 www2.bannerspace.com
      127.0.0.1 www3.bannerspace.com
      127.0.0.1 www5.bannerspace.com
      127.0.0.1 www6.bannerspace.com
      127.0.0.1 www7.bannerspace.com
      127.0.0.1 bannerswap.com
      127.0.0.1 www.bannerswap.com
      127.0.0.1 www.bidclix.com
      127.0.0.1 bidclix.net
      127.0.0.1 www.bidclix.net
      127.0.0.1 bigtracker.com
      127.0.0.1 bighits.net #[Restricted Zone site]
      127.0.0.1 bigticker.bighits.net
      127.0.0.1 bounty.bighits.net
      127.0.0.1 www.bighits.net
      127.0.0.1 download.bigwebportal.com #[hotwebsearch.com]
      127.0.0.1 www.bigwebportal.com
      127.0.0.1 counter.bizland.com
      127.0.0.1 webads.bizservers.com
      127.0.0.1 www.black-hole.co.uk #[Restricted Zone site]
      127.0.0.1 www.blazehits.net #[gonnasearch.com]
      127.0.0.1 s7.blingblingcontent.com #[Easywebinstaller Control]
      127.0.0.1 ads.bmais.net #[bluemountain]
      127.0.0.1 bookedspace.com #[Parasite.BookedSpace]
      127.0.0.1 www.bookedspace.com #[Adware.Bookedspace]
      127.0.0.1 a.boom.ro
      127.0.0.1 s.boom.ro
      127.0.0.1 www1.boomerank.com
      127.0.0.1 boomerank.com
      127.0.0.1 citi.bridgetrack.com #[Tracking Service]
      127.0.0.1 rccl.bridgetrack.com
      127.0.0.1 config.broadcastpc.tv #[TROJ_RVP.E]
      127.0.0.1 report.broadcastpc.tv #[AdvWare.Broadcap.a]
      127.0.0.1 www.broadcastpc.tv #[Adware.Broadcastpc]
      127.0.0.1 www.browserplugin.com #[WebHlprObj Class]
      127.0.0.1 install.browsertoolbar.com #[Backdoor.Autoupder][BrowserToolbar]
      127.0.0.1 www2.browsertoolbar.com #[TROJ_SUA.A]
      127.0.0.1 www.browsertoolbar.com #[Parasite.BrowserToolbar]
      127.0.0.1 browserwise.com #[Parasite.Xupiter][Xupiter.BrowserWise]
      127.0.0.1 www.browserwise.com
      127.0.0.1 www.buildtraffic.com
      127.0.0.1 casino-on-net.com
      127.0.0.1 java2.casino-on-net.com
      127.0.0.1 www.casino-on-net.com
      127.0.0.1 casinojems.com
      127.0.0.1 www.casinojems.com
      127.0.0.1 cc-dt.com
      127.0.0.1 ads.cc-dt.com
      127.0.0.1 clickserve.cc-dt.com
      127.0.0.1 www.capital-systems.net #[Troj/Ovedil-B]
      127.0.0.1 www.care2.com #[TopMoxie]
      127.0.0.1 ads.cars.com
      127.0.0.1 www.cashforclicks.com
      127.0.0.1 www.cashpile.com
      127.0.0.1 ads.cdfreaks.com #[Ads.cdfreaks]
      127.0.0.1 mds.centrport.net
      127.0.0.1 c.clickaire.com #[CWS trojan downloads]
      127.0.0.1 classifieds1000.com
      127.0.0.1 www.classifieds1000.com
      127.0.0.1 clearfind.com
      127.0.0.1 www.clearfind.com #[Restricted Zone site]
      127.0.0.1 hop.clickbank.net #[Adware.Clickbank]
      127.0.0.1 zzz.clickbank.net
      127.0.0.1 clickedyclick.com
      127.0.0.1 www.clickexchange.ru
      127.0.0.1 click2boost.com
      127.0.0.1 secure.click2boost.com
      127.0.0.1 service.click2boost.com
      127.0.0.1 www.click2boost.com
      127.0.0.1 servedby.clickexperts.net
      127.0.0.1 www.clicks2you.com
      127.0.0.1 stats1.clicktracks.com
      127.0.0.1 www.is1.clixgalore.com
      127.0.0.1 www.clixgalore.com
      127.0.0.1 www1.click-fr.com
      127.0.0.1 www2.click-fr.com
      127.0.0.1 www3.click-fr.com
      127.0.0.1 www4.click-fr.com
      127.0.0.1 www.clickhouse.com
      127.0.0.1 www.clicks4u.com
      127.0.0.1 www.clipgenie.com
      127.0.0.1 comclick.com
      127.0.0.1 ct2.comclick.com
      127.0.0.1 fl01.ct2.comclick.com
      127.0.0.1 ihm01.ct2.comclick.com
      127.0.0.1 www.comclick.com #[Restricted Zone site]
      127.0.0.1 www.thecoolbar.com #[Softomate Toolbar][The Coolbar]
      127.0.0.1 www.compactbanner.com
      127.0.0.1 ads.console.net
      127.0.0.1 coolshader.com
      127.0.0.1 c.coolshader.com #[Win32.Harnig]
      127.0.0.1 www.coolshader.com
      127.0.0.1 counted.com
      127.0.0.1 bilbo.counted.com
      127.0.0.1 www.counted.com
      127.0.0.1 www.counterguide.com
      127.0.0.1 counter4u.de
      127.0.0.1 connectionzone.com
      127.0.0.1 count.casino-trade.com
      127.0.0.1 www.couponsandoffers.com #[Adware.TopMoxie]
      127.0.0.1 data.coremetrics.com
      127.0.0.1 twci.coremetrics.com
      127.0.0.1 us.cqcounter.com
      127.0.0.1 zz.cqcounter.com
      127.0.0.1 1us.cqcounter.com
      127.0.0.1 ads.crosswinds.net
      127.0.0.1 megabyte.crosswinds.net
      127.0.0.1 cyberbounty.com
      127.0.0.1 js.cybermonitor.com
      127.0.0.1 stat3.cybermonitor.com
      127.0.0.1 cytron.com #[DailyWinner][Cytron]
      127.0.0.1 www.cytron.com
      127.0.0.1 www.dash.com
      127.0.0.1 ads.date.com
      127.0.0.1 banner.date.com
      127.0.0.1 dbbsrv.com #[bserv.darkblue.com][Restricted Zone site]
      127.0.0.1 freestuff.com.19828.fb.dbbsrv.com #[roar.com]
      127.0.0.1 spyware.com.16871.fb.dbbsrv.com
      127.0.0.1 webads.com.18345.fb.dbbsrv.com
      127.0.0.1 www.deepcom.com #[TrojanDropper.Win32.Small.gt]
      127.0.0.1 collector.deepmetrix.com
      127.0.0.1 geo.deepmetrix.com
      127.0.0.1 www.deepmetrix.com #[Data Miner]
      127.0.0.1 ad.ads.dk
      127.0.0.1 tdkads.ads.dk
      127.0.0.1 didtheyreadit.com #[email tracker]
      127.0.0.1 www.didtheyreadit.com
      127.0.0.1 counter.digits.com
      127.0.0.1 www.divago.com #[Adware.Surfairy]
      127.0.0.1 www.dnscaching.net #[stickypops.com]
      127.0.0.1 www.domamil.cz #[Trojan.Beagooz]
      127.0.0.1 downloadalot.com
      127.0.0.1 get.downloadalot.com
      127.0.0.1 www.downloadalot.com #[Restricted Zone site]
      127.0.0.1 www.downseek.com #[DownSeek Search]
      127.0.0.1 dqmedia.net #[spam]
      127.0.0.1 drmx01.net #[spam]
      127.0.0.1 www.duenow.com
      127.0.0.1 gfx.dvlabs.com
      127.0.0.1 klipads.dvlabs.com
      127.0.0.1 e2give.com #[Adware-E2Give][Spyware.e2give]
      127.0.0.1 www.e2give.com
      127.0.0.1 www.e-bannerx.com
      127.0.0.1 adv1.eblocs.com
      127.0.0.1 adv2.eblocs.com #[Rogue/Suspect]
      127.0.0.1 www.easycounter.com
      127.0.0.1 banners.easydns.com
      127.0.0.1 banner.easyspace.com
      127.0.0.1 adserv1.ebates.com #[WebSavings]
      127.0.0.1 www.ebates.com #[Adware.MoeMoney]
      127.0.0.1 www.efinder.cc #[StartPage-DA]
      127.0.0.1 enhancemysearch.com #[xzoomy.com]
      127.0.0.1 www.enhancemysearch.com
      127.0.0.1 epeople.com
      127.0.0.1 errorpage404.com #[JS_TRAFFICHBAR.A]
      127.0.0.1 www.errorpage404.com #[Parasite.TinyBar]
      127.0.0.1 vipuk.escritorioactivo.com #[123Messenger Hijacker]
      127.0.0.1 www.escorcher.com #[bogus antivirus spyware]
      127.0.0.1 www.eshopads2.com
      127.0.0.1 perso.estat.com
      127.0.0.1 prof.estat.com
      127.0.0.1 www.estat.com #[Restricted Zone site]
      127.0.0.1 eu-adcenter.net
      127.0.0.1 thinknyc.eu-adcenter.net
      127.0.0.1 ugo.eu-adcenter.net #[evidence-eliminator.com]
      127.0.0.1 www.euroklik.nl #[EasyBar][InstallerX Class]
      127.0.0.1 engage.everyone.net
      127.0.0.1 static.everyone.net
      127.0.0.1 www.exchangead.com
      127.0.0.1 exitexchange.com
      127.0.0.1 count.exitexchange.com
      127.0.0.1 images.exitexchange.com
      127.0.0.1 www.exitexchange.com #[Restricted Zone site]
      127.0.0.1 www.exchangeexit.com #[Installer Class][Winupie]
      127.0.0.1 www.exittraffic.net
      127.0.0.1 ezcybersearch.com #[EZCyberSearch.Surebar]
      127.0.0.1 ads.ezcybersearch.com #[Adware.EZSearch.B]
      127.0.0.1 ezcybersearch.mail.everyone.net
      127.0.0.1 www.ezcybersearch.com #[Parasite.ezCyberSearch]
      127.0.0.1 www.evidence-eliminator.com
      127.0.0.1 ads.fairfax.com.au
      127.0.0.1 images.ads.fairfax.com.au
      127.0.0.1 redirect.fairfax.com.au
      127.0.0.1 campaigns.f2.com.au
      127.0.0.1 www.fast2net.com
      127.0.0.1 www.fastfind.org #[SubSearch][TROJ_STARTPAG.KF][Adware.Fastfind.B]
      127.0.0.1 fasttrack.nu
      127.0.0.1 www.fceboard.com #[Adware.EBoard]
      127.0.0.1 www.fightpopups.net #[Adware.MessStopper]
      127.0.0.1 adserver.filefront.com
      127.0.0.1 www.filemix.net #[Surf+]
      127.0.0.1 www.fineclicks.com
      127.0.0.1 firstname.com
      127.0.0.1 clicks.firstname.com
      127.0.0.1 www.fizzlewizzle.com #[Fizzle Wizzle Searchbar]
      127.0.0.1 flashtrack.net
      127.0.0.1 ads.flashtrack.net #[Adware.Flashtrack.B]
      127.0.0.1 coreg.flashtrack.net
      127.0.0.1 www.flashtrack.net #[Adware.FlashEnhancer][KB312429]
      127.0.0.1 flyinads.com
      127.0.0.1 www.flyinads.com
      127.0.0.1 ads.forbes.com
      127.0.0.1 klipmart.forbes.com
      127.0.0.1 www.ampira.com #[Fortunecity]
      127.0.0.1 ads.fortunecity.com
      127.0.0.1 ads.v3.com #[Fortunecity]
      127.0.0.1 www2.fortunecity.com
      127.0.0.1 ad.freefind.com
      127.0.0.1 www.freehistorycleaner.com #[Adware.Fapi][ADW_HISCLEAN.A]
      127.0.0.1 free-stats.com
      127.0.0.1 www.freewebsites.com
      127.0.0.1 ads.free-windows-games.com
      127.0.0.1 www.free-windows-games.com #[Parasite.GAMsys][GamHelper]
      127.0.0.1 pops.freeze.com #[[GamHelper]
      127.0.0.1 ads.gamespy.com
      127.0.0.1 adcontent.gamespy.com
      127.0.0.1 www.gebr-wachs.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
      127.0.0.1 gd.geobytes.com #[obtains users location]
      127.0.0.1 www.getsmart.com
      127.0.0.1 bp2.getredirect.com
      127.0.0.1 4.getredirect.com #[superlogy.com]
      127.0.0.1 www.getredirect.com
      127.0.0.1 getupdate.com
      127.0.0.1 dlx.getupdate.com #[AdvWare.ToolBar.VB.b]
      127.0.0.1 www.getupdate.com #[Adware.Getup]
      127.0.0.1 gigex.com
      127.0.0.1 media.gigex.com #[SpeedDelivery]
      127.0.0.1 oascentral.gigex.com #[RealMedia]
      127.0.0.1 www.gigex.com #[download Class]
      127.0.0.1 globesearch.com
      127.0.0.1 www.globesearch.com #[Restricted Zone site][CWS]
      127.0.0.1 banner.goldenpalace.com #[redirects]
      127.0.0.1 www.goldenwebawards.com #[server down?]
      127.0.0.1 goldstats.net
      127.0.0.1 www.goldstats.net
      127.0.0.1 adincl.gopher.com #[InfoSpace]
      127.0.0.1 ads.gorillanation.com #[Restricted Zone site]
      127.0.0.1 adserver.gorillanation.com
      127.0.0.1 gostats.com
      127.0.0.1 c1.gostats.com
      127.0.0.1 c2.gostats.com
      127.0.0.1 webcounter.goweb.de
      127.0.0.1 greatstartpage.com #[parasite downloads]
      127.0.0.1 www.greatstartpage.com
      127.0.0.1 grokster.com #[Restricted Zone site][P2P]
      127.0.0.1 dl.grokster.com
      127.0.0.1 www.grokster.com
      127.0.0.1 ads.guardian.co.uk
      127.0.0.1 ads.guardianunlimited.co.uk
      127.0.0.1 www.g-wizzads.net
      127.0.0.1 hamster.com #[apps5.oingo.com]
      127.0.0.1 ad0.haynet.com
      127.0.0.1 www.hitboss.com
      127.0.0.1 www.hit4hit.com
      127.0.0.1 ads.hitcents.com
      127.0.0.1 hithopper.com #[Adware.Hithopper]
      127.0.0.1 www.hithopper.com
      127.0.0.1 hitmodel.net
      127.0.0.1 hit-now.com
      127.0.0.1 loga.hit-parade.com
      127.0.0.1 hit-parade.com
      127.0.0.1 www.hitpointer.com
      127.0.0.1 hitslink.com
      127.0.0.1 counter.hitslink.com
      127.0.0.1 counter2.hitslink.com
      127.0.0.1 www2.hitslink.com
      127.0.0.1 www.hitslink.com #[Restricted Zone site]
      127.0.0.1 hitstats.net
      127.0.0.1 www.hiwire.com
      127.0.0.1 ads.home.net
      127.0.0.1 anna.homeftp.net #[W32.Linkbot.A]
      127.0.0.1 counters.honesty.com
      127.0.0.1 banners.hotlinks.net
      127.0.0.1 hotphrase.com
      127.0.0.1 www.hotphrase.com #[Restricted Zone site]
      127.0.0.1 hotsearch.com #[roar.com][Restricted Zone site]
      127.0.0.1 www.hotsearch.com
      127.0.0.1 hotsearchbar.com #[iiittt Class][SpiderSearch]
      127.0.0.1 www.hotsearchbar.com
      127.0.0.1 www.10s.com.br #[Trojan.Cargao]
      127.0.0.1 cgi.hotstat.nl
      127.0.0.1 viewstat.hotstat.nl
      127.0.0.1 hc2.humanclick.com
      127.0.0.1 www.humanclick.com #[Data Miner]
      127.0.0.1 www.hypertracker.com
      127.0.0.1 ads.iafrica.com
      127.0.0.1 ads.iboost.com
      127.0.0.1 www.i-clicks.net
      127.0.0.1 hits.icdirect.com
      127.0.0.1 hitctr01.icdirect.com
      127.0.0.1 image-catcher.com
      127.0.0.1 bar.iebar8.com #[Adware.Navihelper]
      127.0.0.1 stats.surfaid.ihost.com
      127.0.0.1 ads.imdb.com #[amazon.com]
      127.0.0.1 www.impregnable.net #[TrojanDownloader.Win32.VB.dw][Trojan.Win32.StartPage.kk]
      127.0.0.1 stats.indextools.com
      127.0.0.1 adserver.indieclick.com
      127.0.0.1 campaign.indieclick.com
      127.0.0.1 adcenter.in2.com
      127.0.0.1 ads.inet1.com
      127.0.0.1 ads7.inet1.com
      127.0.0.1 banners.inetfast.com
      127.0.0.1 ads.infospace.com
      127.0.0.1 bvads.infospace.com
      127.0.0.1 dpxml.infospace.com
      127.0.0.1 xads.infospace.com
      127.0.0.1 www.infospider.com
      127.0.0.1 ads.intellicast.com
      127.0.0.1 ads.intelihealth.com
      127.0.0.1 ads.intermezzia.com
      127.0.0.1 mjxads.internet.com
      127.0.0.1 indiads.com
      127.0.0.1 infostart.com
      127.0.0.1 popups.infostart.com
      127.0.0.1 www.intelli-tracker.com
      127.0.0.1 ads.ipowerweb.com
      127.0.0.1 www.ipstat.com
      127.0.0.1 istarthere.com #[Troj/IEStart-C]
      127.0.0.1 directory.istarthere.com
      127.0.0.1 moviesponsor.istarthere.com
      127.0.0.1 partners.istarthere.com
      127.0.0.1 www.istarthere.com #[VBS_IESTART.F]
      127.0.0.1 adcycle.isoftmarketing.com
      127.0.0.1 isurfplus.com
      127.0.0.1 www.isurfplus.com #[Adware.Surebar]
      127.0.0.1 www.itrafficstar.com #[Restricted Zone site]
      127.0.0.1 www.jcount.com
      127.0.0.1 affiliates.jeanharris.com
      127.0.0.1 popup.jeanharris.com
      127.0.0.1 jpedownload.joltid.com
      127.0.0.1 www.joltid.com #[Adware.P2PNetworking]
      127.0.0.1 www1.kliks.nl
      127.0.0.1 www2.kliks.nl
      127.0.0.1 www.kliks.nl
      127.0.0.1 kt3.kliptracker.com
      127.0.0.1 kt4.kliptracker.com
      127.0.0.1 www.kliptracker.com
      127.0.0.1 stats.klsoft.com
      127.0.0.1 www.kmindex.ru
      127.0.0.1 ad.leadcrunch.com
      127.0.0.1 ts1.lexmark.com
      127.0.0.1 www.linkcounter.com
      127.0.0.1 linkexchange.ru
      127.0.0.1 web.linkexchange.ru
      127.0.0.1 www.linkexchange.ru
      127.0.0.1 link4link.com
      127.0.0.1 plus.link4link.com
      127.0.0.1 www.links4trade.com
      127.0.0.1 escati.linkopp.net
      127.0.0.1 www.linkopp.net
      127.0.0.1 js.livehelper.com #[Restricted Zone site]
      127.0.0.1 newbrowse.livehelper.com
      127.0.0.1 liveperson.net
      127.0.0.1 server.iad.liveperson.net #[Data Miner]
      127.0.0.1 www.liveperson.com
      127.0.0.1 adserv.lwmn.net
      127.0.0.1 locators.com #[Adware.Locator]
      127.0.0.1 toolbar.locators.com #[Locators Toolbar]
      127.0.0.1 www.locators.com
      127.0.0.1 www.lords-of-havoc.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
      127.0.0.1 luckyhomepage.com #[search.targetwords.com\1stblaze.com]
      127.0.0.1 www.luckyhomepage.com #[Restricted Zone site]
      127.0.0.1 adverts.lzio.com
      127.0.0.1 newupdates.lzio.com
      127.0.0.1 search.lzio.com
      127.0.0.1 updates.lzio.com #[Downloader-LE][Adware.ZioCom]
      127.0.0.1 make-deal.com
      127.0.0.1 www.madoogali.com #[Madoogali]
      127.0.0.1 go.mailbits.com
      127.0.0.1 mair.net #[Realtracker]
      127.0.0.1 marnet.us #[Downloader-IU]
      127.0.0.1 image.masterstats.com
      127.0.0.1 link.masterstats.com
      127.0.0.1 ads.affiliates.match.com
      127.0.0.1 associmage.match.com
      127.0.0.1 adserver.matchcraft.com
      127.0.0.1 maybeyes.biz #[Trojan.Ducky]
      127.0.0.1 ads.mcafee.com
      127.0.0.1 directads.mcafee.com
      127.0.0.1 ads.mediaodyssey.com
      127.0.0.1 ads.mediaturf.net
      127.0.0.1 banner.meerhits.nl #[IEHIjacker.Meerhits.nl]
      127.0.0.1 pokpok.meerhits.nl
      127.0.0.1 exit.megago.com
      127.0.0.1 www.megago.com #[typo squatter]
      127.0.0.1 www.megaseek.net #[Restricted Zone site]
      127.0.0.1 pubs.mgn.net #[Grolier Network]
      127.0.0.1 www.mgshareware.com #[Adware Bundler]
      127.0.0.1 micorsoft.com
      127.0.0.1 www.micorsoft.com #[typo hijacker]
      127.0.0.1 www.mini-player.com #[5MOF Mini-Player]
      127.0.0.1 banner.missingkids.com
      127.0.0.1 ads.monster.com
      127.0.0.1 adserver.monster.com
      127.0.0.1 adserver.a.in.monster.com
      127.0.0.1 ads.monstermoving.com
      127.0.0.1 cookie.monster.com
      127.0.0.1 mp3today.net
      127.0.0.1 www.mp3yes.com #[C2Media\LOP]
      127.0.0.1 mpamexit.com
      127.0.0.1 www.messagetag.com #[Email tracker]
      127.0.0.1 msgtag.com
      127.0.0.1 img.msgtag.com #[Restricted Zone site]
      127.0.0.1 www.msgtag.com
      127.0.0.1 multi1.rmuk.co.uk #[RealMedia]
      127.0.0.1 mvtracker.com
      127.0.0.1 www.mvtracker.com
      127.0.0.1 mvr3d.net #[NavExcel\n-CASE]
      127.0.0.1 mvr.us #[Parasite.NavExcel]
      127.0.0.1 www.mvr.us
      127.0.0.1 www.myaffiliateprogram.com
      127.0.0.1 www.myarmory.com #[Spyware.Bazookabar]
      127.0.0.1 ads.mydailyhoroscope.net
      127.0.0.1 www.mydailyhoroscope.net #[Adware.Horoscope]
      127.0.0.1 www.myemessenger.com
      127.0.0.1 rm.myoc.com
      127.0.0.1 myhitlogger.com
      127.0.0.1 mypagefinder.com #[Parasite.MyPageFinder]
      127.0.0.1 hit.namimedia.com
      127.0.0.1 ads.nandomedia.com
      127.0.0.1 neededware.com #[Adware.NeededWare]
      127.0.0.1 www.neededware.com
      127.0.0.1 neo-toolbar.com #[InstControl Class][Trojan.NeoToolbar.Installer]
      127.0.0.1 www6.netbroadcaster.com
      127.0.0.1 code.netbreak.com.au
      127.0.0.1 www.netflip.com
      127.0.0.1 money2.netfirms.com #[The Money Toolbar]
      127.0.0.1 partner.netmechanic.com
      127.0.0.1 tracker.netmechanic.com
      127.0.0.1 counter.netmore.net
      127.0.0.1 www.netpoll.nl
      127.0.0.1 servedby.netshelter.net
      127.0.0.1 ads.netsol.com
      127.0.0.1 www.netsearch.info
      127.0.0.1 ads.newsint.co.uk
      127.0.0.1 adq.nextag.com
      127.0.0.1 newiframe.biz #[TROJ_DELF.DS]
      127.0.0.1 www.newiframe.biz
      127.0.0.1 web1.noadware.net
      127.0.0.1 www.noadware.net #[SCAM.Enigma.NoAdware]
      127.0.0.1 nowbox.com
      127.0.0.1 www.nowbox.com #[Parasite.NowBox]
      127.0.0.1 mediatickets.nubela.net
      127.0.0.1 www.nubela.net
      127.0.0.1 nzads.net.nz
      127.0.0.1 okcounter.com
      127.0.0.1 www.okww.net #[Trojan.StartPage.C]
      127.0.0.1 stat.onestat.com
      127.0.0.1 www.onestat.com
      127.0.0.1 one.ru
      127.0.0.1 cnt.one.ru
      127.0.0.1 stats0.one.ru
      127.0.0.1 stats1.one.ru
      127.0.0.1 stats2.one.ru
      127.0.0.1 www.oneandonlynetwork.com #[Ticketmaster]
      127.0.0.1 server1.opentracker.net
      127.0.0.1 www.opinionlab.com
      127.0.0.1 ccc00.opinionlab.com
      127.0.0.1 rate.opinionlab.com
      127.0.0.1 banner.orb.net
      127.0.0.1 www.originalicons.com #[F1 Organizer Class]
      127.0.0.1 geoads.osdn.com
      127.0.0.1 tg-images.osdn.com
      127.0.0.1 otx5.otxresearch.com
      127.0.0.1 otx.ifilm.com #[OTXMedia.dll]
      127.0.0.1 survey.otxresearch.com #[TrojanDownloader.OTXloader.A]
      127.0.0.1 www.otxresearch.com #[OTXMovie Class]
      127.0.0.1 adpopper.outblaze.com #[bargain-buddy.net]
      127.0.0.1 www.p3marketing.com #[Zapspot]
      127.0.0.1 click.payserve.com
      127.0.0.1 www.pc-test.net
      127.0.0.1 ad1.peel.com
      127.0.0.1 ad3.peel.com
      127.0.0.1 ads.peel.com
      127.0.0.1 ad4.peel.com
      127.0.0.1 ads5.peel.com
      127.0.0.1 www.peel.com
      127.0.0.1 www.peel.net
      127.0.0.1 ads.pennyweb.com #[addynamix.com]
      127.0.0.1 banners.pennyweb.com
      127.0.0.1 www.peruvianmarket.com #[Trojan.Beagooz.D][server down?]
      127.0.0.1 ads.photosight.ru
      127.0.0.1 phpadsnew.com
      127.0.0.1 www.phpadsnew.com
      127.0.0.1 ads2.playnet.com
      127.0.0.1 popfind.net #[Adware.Ddpop]
      127.0.0.1 www.popupads.com
      127.0.0.1 www.popupad.net
      127.0.0.1 popupblockade.com #[Parasite.Httper]
      127.0.0.1 www.popupblockade.com
      127.0.0.1 popupmoney.com #[Restricted Zone site]
      127.0.0.1 server01.popupmoney.com
      127.0.0.1 www.popupmoney.com
      127.0.0.1 popadstop.com #[Adware.PopAdStop]
      127.0.0.1 www.popadstop.com
      127.0.0.1 www.popunder.info #[TROJ_CHECKIN.B]
      127.0.0.1 www.popupswappers.com
      127.0.0.1 ad.popupswappers.com
      127.0.0.1 www.popuptop.com
      127.0.0.1 www2.portdetective.com
      127.0.0.1 www.positivebeats.com #[C2Media\LOP]
      127.0.0.1 x0x0l.pp.ru #[BKDR_CCT.A]
      127.0.0.1 www.praize.com #[Adware.Praize]
      127.0.0.1 1.primaryads.com
      127.0.0.1 www.privacyoutpost.com #[Troj/Regldr-A]
      127.0.0.1 www.prtracker.com
      127.0.0.1 www.profitzone.com #[ProfitZONE Adbar]
      127.0.0.1 prolivation.com #[Restricted Zone site]
      127.0.0.1 www.prolivation.com
      127.0.0.1 ads.pro-market.net
      127.0.0.1 www.promo.com.au
      127.0.0.1 www.prutect.com #[Spyware.e2give][Win32.Prutec.A]
      127.0.0.1 www.pstopper.com
      127.0.0.1 ad.sma.punto.net
      127.0.0.1 sma.punto.net
      127.0.0.1 www.pureseeker.com #[C2Media\LOP]
      127.0.0.1 www.pwallet.com #[Restricted Zone site]
      127.0.0.1 rads01.quadrogram.com #[Adware.Quadro][Memwatcher.B][TROJ_PEPER.A]
      127.0.0.1 adserv.quality-channel.de
      127.0.0.1 www.quarterserver.de
      127.0.0.1 questionmarket.com
      127.0.0.1 amch.questionmarket.com
      127.0.0.1 ch.questionmarket.com
      127.0.0.1 survey.questionmarket.com
      127.0.0.1 www.questionmarket.com
      127.0.0.1 download.quickflicks.com #[Parasite.SVAPlayer]
      127.0.0.1 www.qq886.com #[Backdoor.Semes]
      127.0.0.1 ramgo.com #[Restricted Zone site]
      127.0.0.1 www.ramgo.com #[Win32.Startpage.B]
      127.0.0.1 www.autoraskrutka.ru #[Spyware.Acext]
      127.0.0.1 www.raskrutim.ru #[Spyware.Acext]
      127.0.0.1 www.realclicks.com
      127.0.0.1 www.relmaxtop.com
      127.0.0.1 banner.relcom.ru
      127.0.0.1 adservice.recon-networks.com
      127.0.0.1 rightmedia.net
      127.0.0.1 rightstats.com
      127.0.0.1 www.rightstats.com
      127.0.0.1 m.rmbclick.com
      127.0.0.1 www.rgs-rostock.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
      127.0.0.1 track.roiservice.com
      127.0.0.1 ad.ro2cn.com #[Adware.Ro2cn]
      127.0.0.1 www.sandboxer.com #[Adware.Quadro][memorywatcher.com][Memwatcher.B]
      127.0.0.1 www.savehits.com
      127.0.0.1 st.sageanalyst.net
      127.0.0.1 scorpionsearch.com #[W32.Adclicker.C.Trojan]
      127.0.0.1 www.scorpionsearch.com #[x10.com][Trojan.Clicker.NetBuie a-b]
      127.0.0.1 adsremote.scripps.com
      127.0.0.1 te.scripps.com
      127.0.0.1 counter.search.bg
      127.0.0.1 searchalot.com
      127.0.0.1 cards.searchalot.com
      127.0.0.1 mail.searchalot.com
      127.0.0.1 search.searchalot.com
      127.0.0.1 web.searchalot.com
      127.0.0.1 www.searchalot.com #[Adware-Tronix]
      127.0.0.1 searchandclick.com
      127.0.0.1 search.searchandclick.com
      127.0.0.1 www.searchandclick.com #[Browseraid][SearchAndClick]
      127.0.0.1 searchby.net
      127.0.0.1 www.searchby.net #[Ultimate Popup Killer]
      127.0.0.1 searchfst.com #[SFUtility Class][keywordsinc.com]
      127.0.0.1 www.searchfst.com
      127.0.0.1 www.searchgauge.com
      127.0.0.1 www.search-control.com #[TrojanDropper.Win32.Small.ig]
      127.0.0.1 search-itnow.com #[Parasite.AdultLinks]
      127.0.0.1 www.search-itnow.com
      127.0.0.1 www.searchmachine.com
      127.0.0.1 www.searchmagnifier.com
      127.0.0.1 www.searchrelevancy.com
      127.0.0.1 www.searchresult.net #[Parasite.IgetNet]
      127.0.0.1 searchseekfind.com #[Adware.SearchSeekFind]
      127.0.0.1 www.searchseekfind.com
      127.0.0.1 browser.secondpower.com
      127.0.0.1 download.secondpower.com
      127.0.0.1 www1.secondpower.com
      127.0.0.1 www3.secondpower.com #[KB320159]
      127.0.0.1 www.secondpower.com
      127.0.0.1 adserver.securityfocus.com #[RealMedia]
      127.0.0.1 www.selfsurveys.com
      127.0.0.1 www.seehits.com
      127.0.0.1 www.sendtraffic.com
      127.0.0.1 sesso.com
      127.0.0.1 www.sesso.com #[VBS.Biscuit.A@mm]
      127.0.0.1 ds.serving-sys.com
      127.0.0.1 quasar.sitegauge.com
      127.0.0.1 tracker.sitescout.com
      127.0.0.1 advertpro.sitepoint.com
      127.0.0.1 www.sitestatslive.com
      127.0.0.1 www.sitetracking.info #[Naughty Pops]
      127.0.0.1 www.shadowcrew.com #[spam]
      127.0.0.1 adserver.sharewareonline.com #[nictechnetworks.com]
      127.0.0.1 www.shockcounter.com
      127.0.0.1 shopathomeselect.com #[Parasite.ShopAtHomeSelect]
      127.0.0.1 download1.shopathomeselect.com #[ADW_SAHAGENT.A]
      127.0.0.1 downloads.shopathomeselect.com
      127.0.0.1 www.shopathomeselect.com #[Adware.SAHAgent]
      127.0.0.1 skeech.com
      127.0.0.1 www.skeech.com #[Restricted Zone site]
      127.0.0.1 smart2com.net #[Trojan.Autoproxy]
      127.0.0.1 smart-browser.com
      127.0.0.1 update.smart-browser.com #[Parasite.SmartBrowser]
      127.0.0.1 www.smart-browser.com
      127.0.0.1 smartclicks.net
      127.0.0.1 www.smartclicks.net
      127.0.0.1 smarter.com #[Restricted Zone site]
      127.0.0.1 sidebar.smarter.com
      127.0.0.1 www.smarter.com
      127.0.0.1 ads.smni.com
      127.0.0.1 static.smni.com
      127.0.0.1 www.sonyasys.com #[Downloader.Botten]
      127.0.0.1 www1.spaex.com #[searchboss.com]
      127.0.0.1 www.specialoffersnetworks.com
      127.0.0.1 www.spedia.net #[SpediaBar]
      127.0.0.1 www.spyarsenal.com #[Spyware.DesktopSpy][Spyware.FamilyKeylog]
      127.0.0.1 spyferret.com #[OnlinePcFix.SpyFerret]
      127.0.0.1 www.spyferret.com
      127.0.0.1 spyware.com #[roar.com]
      127.0.0.1 www.ssppyy.com #[Spyware.Ssppyy]
      127.0.0.1 www.s-tracking.com
      127.0.0.1 adsintl.starwave.com
      127.0.0.1 c1.statcounter.com
      127.0.0.1 c2.statcounter.com
      127.0.0.1 c3.statcounter.com
      127.0.0.1 www.statcounter.com
      127.0.0.1 js.statistici.ro
      127.0.0.1 log.statistici.ro
      127.0.0.1 s.statistici.ro
      127.0.0.1 www.statomatic.com
      127.0.0.1 reg.stats4all.com
      127.0.0.1 stats4you.com
      127.0.0.1 www.stats4you.com
      127.0.0.1 ctgbn.stellaremperor.com #[Backdoor.Alets]
      127.0.0.1 www.stickypops.com
      127.0.0.1 clix.superclix.de
      127.0.0.1 www.superlogy.com #[AdvWare.ToolBar.VB.b]
      127.0.0.1 sqwire.com #[Adware.Sqwire][Xupiter.Sqwire]
      127.0.0.1 www.sqwire.com #[Parasite.Xupiter][Adware-PornKings]
      127.0.0.1 www.supaseek.com #[Spyware.Supaseek]
      127.0.0.1 rd1.surfernetwork.com #[SurferNETWORK Plugin]
      127.0.0.1 www.surfernetwork.com
      127.0.0.1 surfsidekick.com
      127.0.0.1 dl.surfsidekick.com
      127.0.0.1 www.surfsidekick.com #[Adware.SurfSideKick]
      127.0.0.1 www2.surveyfocus.com
      127.0.0.1 www.surveynetworks.com
      127.0.0.1 www.surveysite.com
      127.0.0.1 www2.survey-poll.com #[microsoft]
      127.0.0.1 swift-look.com #[phishing exploit]
      127.0.0.1 www.symantic.com #[Typo Squatter]
      127.0.0.1 adpick.switchboard.com
      127.0.0.1 adtag.sympatico.ca
      127.0.0.1 www.syspage.com #[pop-up scam]
      127.0.0.1 ad.uk.tangozebra.com
      127.0.0.1 targetsearch.info #[Trojan.StartPage.H]
      127.0.0.1 adult.targetsearch.info
      127.0.0.1 go.targetsearch.info
      127.0.0.1 tat-neftbank.ru #[Backdoor.Berbew.H]
      127.0.0.1 www.tech-marketresearch.com
      127.0.0.1 www.textads.biz
      127.0.0.1 a.tfag.de
      127.0.0.1 ak.tfag.de
      127.0.0.1 theaffiliateprogram.com
      127.0.0.1 myaffiliateprogram.com
      127.0.0.1 www.the-counter.net
      127.0.0.1 adbot.theonion.com
      127.0.0.1 www.thepokerclub.com #[SecurityRisk.ClubPoker]
      127.0.0.1 thesearchmall.com #[Adware.SearchMall]
      127.0.0.1 www.thesearchmall.com
      127.0.0.1 tnc4u.com #[Parasite.DownloadPlus]
      127.0.0.1 new.tnc4u.com
      127.0.0.1 www.tnc4u.com #[Adware.DownloadPlus]
      127.0.0.1 www.toilet.com
      127.0.0.1 ad.tomshardware.com
      127.0.0.1 tooncomics.com #[IEDLL.ToonComics][here4search.com]
      127.0.0.1 www.tooncomics.com #[Downloader.Tooncom][CWS.Aff.Tooncomics]
      127.0.0.1 log.trafic.ro
      127.0.0.1 storage.trafic.ro
      127.0.0.1 tool4ame.com #[TROJ_GOLID.A][Adware.IAGold]
      127.0.0.1 www.toolshack.com
      127.0.0.1 ads.toplayerserver.com
      127.0.0.1 www1.toplayerserver.com
      127.0.0.1 www.toplayerserver.com
      127.0.0.1 toprebates.com #[webrebates]
      127.0.0.1 www.toprebates.com
      127.0.0.1 stat.toprefsys.com
      127.0.0.1 www.top-search.com #[Adware-SSF.dr]
      127.0.0.1 ad.topstat.com
      127.0.0.1 nl.topstat.com #[Restricted Zone site]
      127.0.0.1 s26.topstat.com
      127.0.0.1 xl.topstat.com
      127.0.0.1 ads.track-star.com
      127.0.0.1 adserver.track-star.com
      127.0.0.1 geo2.track-star.com
      127.0.0.1 www.track-star.com
      127.0.0.1 tradeexit.com
      127.0.0.1 www.tradeexit.com #[Parasite.Winupie]
      127.0.0.1 www.trafficbeamer.nl
      127.0.0.1 trafficg.com #[Restricted Zone site]
      127.0.0.1 www.trafficg.com
      127.0.0.1 ad.trafficmp.com
      127.0.0.1 images.trafficmp.com
      127.0.0.1 t.trafficmp.com
      127.0.0.1 www.trafficflame.com
      127.0.0.1 trafficfile.com
      127.0.0.1 www.trafficfile.com
      127.0.0.1 trackyourstats.com
      127.0.0.1 trafficmarketplace.com
      127.0.0.1 get.trafficmultiplier.com
      127.0.0.1 go.trafficmultiplier.com
      127.0.0.1 goto.trafficmultiplier.com
      127.0.0.1 a.tribalfusion.com
      127.0.0.1 cdn1.tribalfusion.com
      127.0.0.1 m.tribalfusion.com
      127.0.0.1 tribalfusion.speedera.net
      127.0.0.1 ads.tucows.com
      127.0.0.1 counts.tucows.com
      127.0.0.1 google.tucows.com
      127.0.0.1 www.turbomemorycharger.com #[Adware.Fapi]
      127.0.0.1 ads.ucomics.com
      127.0.0.1 image.ugo.com
      127.0.0.1 mediamgr.ugo.com
      127.0.0.1 www.ukbanners.com
      127.0.0.1 ultimatecounter.com
      127.0.0.1 www.ultimatecounter.com
      127.0.0.1 www.ultimatepopupkiller.com #[searchby.net]
      127.0.0.1 www.ultraload.net #[MHTMLRedir.Exploit]
      127.0.0.1 adcontroller.unicast.com
      127.0.0.1 ads.unlimitedbanners.com
      127.0.0.1 ads1.updated.com
      127.0.0.1 www.updatenow.org #[Messenger Pop-up]
      127.0.0.1 www.upgradenow.org
      127.0.0.1 www.upp2ono41xi9rman2.com #[TrojanDropper.Small.LG]
      127.0.0.1 url.biz.ua #[Download.Ject.B]
      127.0.0.1 config.url404.com #[Parasite.Httper]
      127.0.0.1 urlblaze.com #[Adware.TurboDownload]
      127.0.0.1 www.urlblaze.com #[Adware Bundler]
      127.0.0.1 www.urlblaze.net #[IEDriver][ADW_RULEDOR.C]
      127.0.0.1 usachoice.net
      127.0.0.1 ads.valuead.com #[Restricted Zone site]
      127.0.0.1 adnetintads.valuead.com
      127.0.0.1 banners.valuead.com
      127.0.0.1 cs.valuead.com
      127.0.0.1 oin.valuead.com #[outerinfo.com]
      127.0.0.1 servedby.valuead.com
      127.0.0.1 ad.valuehost.ru
      127.0.0.1 image.versiontracker.com
      127.0.0.1 spinbox.versiontracker.com
      127.0.0.1 ads.vesperexchange.com
      127.0.0.1 www.vesperexchange.com
      127.0.0.1 cinnam.vibrahost.com #[PWSteal.Revcuss.C][Win32.Revcuss.C]
      127.0.0.1 vivi.vibrahost.com #[PWSteal.Revcuss.A]
      127.0.0.1 dns2010.vicp.net #[Backdoor.Tumag]
      127.0.0.1 uygurman.vicp.net #[Trojan.Riler][Troj/Riler-B]
      127.0.0.1 oas.villagevoice.com
      127.0.0.1 www.vikord.com #[Download.Ject.C]
      127.0.0.1 visit-link.com
      127.0.0.1 www.voonda.com #[Spyware.TAFbar]
      127.0.0.1 generic.vpptechnologies.com
      127.0.0.1 images2.vpptechnologies.com
      127.0.0.1 main.vpptechnologies.com
      127.0.0.1 msxml.vpptechnologies.com
      127.0.0.1 static.vpptechnologies.com #[hotsearchbar.com]
      127.0.0.1 xml.vpptechnologies.com #[BlazeFind]
      127.0.0.1 www.vstats.net
      127.0.0.1 ads.vnuemedia.com
      127.0.0.1 sevenc.vze.com #[VBS.Powcox@mm]
      127.0.0.1 www.w3exit.com
      127.0.0.1 ng3.ads.warnerbros.com
      127.0.0.1 wazam.com
      127.0.0.1 www.wazam.com #[Parasite.Wazam]
      127.0.0.1 wcft.net #[Parasite.LinkReplacer]
      127.0.0.1 www.wcft.net
      127.0.0.1 ads.weather.com
      127.0.0.1 ads.webattack.com
      127.0.0.1 webcounter.com
      127.0.0.1 www.webcounter.com
      127.0.0.1 ads.webhosting.info
      127.0.0.1 www.weblink.ru #[server down?]
      127.0.0.1 adv.webmd.com
      127.0.0.1 webhits.de
      127.0.0.1 banners.webmasterplan.com
      127.0.0.1 stat.webmedia.pl
      127.0.0.1 bannervip.web1000.com
      127.0.0.1 ads.webads360.com
      127.0.0.1 clickcash.webpower.com
      127.0.0.1 orders.webpower.com
      127.0.0.1 img.webring.com
      127.0.0.1 img1.webring.com
      127.0.0.1 ads.webshots.com
      127.0.0.1 websponsors.com
      127.0.0.1 a.websponsors.com
      127.0.0.1 ads.websponsors.com
      127.0.0.1 g.websponsors.com
      127.0.0.1 www.websponsors.com
      127.0.0.1 www.webstars2000.com
      127.0.0.1 hits.webstat.com
      127.0.0.1 www.wenksdisdkjeilsow.com #[Parasite.AutoStartup][Download.Trojan]
      127.0.0.1 wetrack.it
      127.0.0.1 st.wetrack.it
      127.0.0.1 www.wgutv.com #[Adware.BuddyLinks]
      127.0.0.1 partner1.whatsfind.com
      127.0.0.1 www.whatsfind.com #[HTML_STARTPAGE.C]
      127.0.0.1 www.win-fix.com #[Rogue/Suspect]
      127.0.0.1 window1.com
      127.0.0.1 ads.winhelp2002.com
      127.0.0.1 ads.winsite.com
      127.0.0.1 winstream.com #[Parasite.Searchex]
      127.0.0.1 www.winstream.com
      127.0.0.1 clicktrack.wnu.com
      127.0.0.1 www.wowweb.net #[Adware.WWWBar]
      127.0.0.1 www.wurldmedia.com #[Adware.Wurldmedia][WurldMedia][KB321923]
      127.0.0.1 x0x.biz
      127.0.0.1 www.x0x.biz #[Backdoor.Berbew.D]
      127.0.0.1 xtra.co.nz
      127.0.0.1 nedstats.xs4all.nl
      127.0.0.1 hit1.xstats.com
      127.0.0.1 view1.xstats.com
      127.0.0.1 ads.xtra.co.nz
      127.0.0.1 bs.yandex.ru
      127.0.0.1 counter.yadro.ru
      127.0.0.1 crsky2004.yeah.net #[Backdoor.Singu.B]
      127.0.0.1 yourspecialoffers.com #[FavoriteMan]
      127.0.0.1 www.yourspecialoffers.com
      127.0.0.1 ysearchus.com #[Parasite.TinyBar]
      127.0.0.1 www.ysearchus.com
      127.0.0.1 zuvio.com #[UCSearch.ucUCSearch]
      127.0.0.1 www.zuvio.com #[Adware.OpenSite][OpenSite]
      127.0.0.1 bannerads.zwire.com
      127.0.0.1 www.0stats.com
      127.0.0.1 cc.1asphost.com #[Trojan.Bansap]
      127.0.0.1 www.123counts.com #[hitslink.com]
      127.0.0.1 www.123mania.com #[SrchHook Class][Parasite.123Mania]
      127.0.0.1 123stat.com
      127.0.0.1 1234.2bro.com #[Adware.Satbo]
      127.0.0.1 www.241hits.com
      127.0.0.1 up.isp.2ch.net #[Trojan.Upchan]
      127.0.0.1 www.321search.com #[SearchAssistant.dll]
      127.0.0.1 ct.360i.com
      127.0.0.1 www.ff.iij4u.or.jp #[Trojan.Upchan]
      127.0.0.1 download.35mb.com #[impregnable.net]
      127.0.0.1 www.35mb.com #[download_35mb_com.applet]
      127.0.0.1 1000stars.ru
      127.0.0.1 xxxwwwjjjhd.20forfree.com #[W32.Autex.Worm]
      127.0.0.1 www.xxxwwwjjjhd.20forfree.com
      127.0.0.1 ad.37.com
      127.0.0.1 2jm.com
      127.0.0.1 7adpower.com
      127.0.0.1 www.7adpower.com #[Svezia.Dialer][VacPro.UserControl1]
      127.0.0.1 7am.com
      127.0.0.1 www.777search.com #[LOP]
      127.0.0.1 ad2.163.com
      127.0.0.1 adclient.163.com
      127.0.0.1 popme.163.com
      127.0.0.1 smtp.163.com #[Trojan.PSW.Ajim_bbs]
      127.0.0.1 ajim.delphibbs.com #[Trojan.PSW.Ajim_bbs]
      127.0.0.1 14713804A.l2m.net #[LiveTechnology]
      127.0.0.1 banner.50megs.com
      127.0.0.1 guannan.3322.net #[Restricted Zone site]
      127.0.0.1 www.fan8.com
      127.0.0.1 banners.dot.tk
      127.0.0.1 topsites.us #[Parasite.eStart]
      127.0.0.1 0-ol1oiz-xolxii1-oxli10ozl1l1-o-l-11-iizxp-l-0o-oll11iz0oil-ol.com
      127.0.0.1 www.123banners.com
      127.0.0.1 ftp.123banners.com
      127.0.0.1 123go.com
      127.0.0.1 ns1.123go.net
      127.0.0.1 n-case.com
      127.0.0.1 www.n-case.com
      127.0.0.1 ads.180solutions.com
      127.0.0.1 ax.180solutions.com #[180SAInstaller Class]
      127.0.0.1 bis.180solutions.com #[nCaseInstaller Class]
      127.0.0.1 bisads.180solutions.com
      127.0.0.1 downloads.180solutions.com
      127.0.0.1 installs.180solutions.com
      127.0.0.1 ping.180solutions.com
      127.0.0.1 tv.180solutions.com
      127.0.0.1 www.180solutions.com #[Parasite.nCase]
      127.0.0.1 www.180searchassistant.com #[Adware.180Search]
      127.0.0.1 www.surfassistant.com #[Adware.SurfAssistant]
      127.0.0.1 downloads.zango.com
      127.0.0.1 games.zango.com
      127.0.0.1 infinity.zango.com #[ZangoInstaller Class]
      127.0.0.1 messenger.zango.com
      127.0.0.1 showtimes.zango.com
      127.0.0.1 www.zango.com
      127.0.0.1 www.zangomessenger.com
      127.0.0.1 www.zangoshowtimes.com
      127.0.0.1 address.3721.com
      127.0.0.1 agent.3721.com
      127.0.0.1 assistant.3721.com
      127.0.0.1 cns.3721.com
      127.0.0.1 cnsmin.3721.com
      127.0.0.1 corp.3721.com
      127.0.0.1 dir.3721.com
      127.0.0.1 download.3721.com
      127.0.0.1 express.3721.com
      127.0.0.1 img.3721.com
      127.0.0.1 magic.3721.com
      127.0.0.1 mark.3721.com
      127.0.0.1 meta.3721.com
      127.0.0.1 msearch.3721.com
      127.0.0.1 sbox.3721.com
      127.0.0.1 shanghai.3721.com
      127.0.0.1 sina.3721.com
      127.0.0.1 user.3721.com
      127.0.0.1 wap.3721.com
      127.0.0.1 www.3721.com #[Adware.Chinet][ADW_CNSMIN.A]
      127.0.0.1 yahoo.3721.com
      127.0.0.1 3721.com
      127.0.0.1 download.feiyang.com
      127.0.0.1 adtracker.411web.com
      127.0.0.1 hits.411web.com
      127.0.0.1 overture.411web.com
      127.0.0.1 static.411web.com
      127.0.0.1 xml.411web.com
      127.0.0.1 search.letssearch.com
      127.0.0.1 search2.letssearch.com
      127.0.0.1 www.letssearch.com #[BrowserAid.LetsSearch]
      127.0.0.1 7search.com #[Parasite.7FaSSt Search]
      127.0.0.1 www.7search.com
      127.0.0.1 fstrack.7search.com
      127.0.0.1 impression.7search.com
      127.0.0.1 img.7meta.com
      127.0.0.1 www.7metasearch.com
      127.0.0.1 bannerx.adtactics.com
      127.0.0.1 adtactics.com
      127.0.0.1 www.adtactics.com
      127.0.0.1 ajokeaday.com
      127.0.0.1 bannersxchange.com
      127.0.0.1 img.bannersxchange.com
      127.0.0.1 www.linkstoyou.com
      127.0.0.1 www.payperranking.com
      127.0.0.1 www.pay-per-search.com
      127.0.0.1 paypertext.com
      127.0.0.1 predictivesearch.com
      127.0.0.1 tracking.roispy.com
      127.0.0.1 www.roispy.com
      127.0.0.1 tracking.spiderbait.com
      127.0.0.1 www.spiderbait.com
      127.0.0.1 advertisingagent.com
      127.0.0.1 clicks.about.com
      127.0.0.1 f.about.com
      127.0.0.1 home.about.com
      127.0.0.1 js.get.about.com
      127.0.0.1 images.about.com
      127.0.0.1 lunafetch.about.com
      127.0.0.1 pixel3.about.com
      127.0.0.1 sprinks-clicks.about.com
      127.0.0.1 statistics.s5.com
      127.0.0.1 ad.aboutwebservices.com
      127.0.0.1 abroadsoftware.com #[EzSearchBar]
      127.0.0.1 www.exits.ro
      127.0.0.1 superwebsearch.com #[Parasite.ILookup][Adware.ILookup]
      127.0.0.1 www.superwebsearch.com
      127.0.0.1 adops.adbureau.net
      127.0.0.1 etype.adbureau.net
      127.0.0.1 granada.adbureau.net
      127.0.0.1 www.adbureau.net
      127.0.0.1 accipiter.speedera.net
      127.0.0.1 ad-blaster.com
      127.0.0.1 www.ad-blaster.com
      127.0.0.1 promote4profit.com
      127.0.0.1 www.promote4profit.com
      127.0.0.1 addfreestats.com
      127.0.0.1 top.addfreestats.com
      127.0.0.1 www.addfreestats.com
      127.0.0.1 www.3dstats.com
      127.0.0.1 www1.addfreestats.com
      127.0.0.1 www2.addfreestats.com
      127.0.0.1 www3.addfreestats.com
      127.0.0.1 adlogix.com #[InPop.InControl][IEEnhancer]
      127.0.0.1 lasagne.adlogix.com
      127.0.0.1 publisher.adlogix.com
      127.0.0.1 traffic.adlogix.com
      127.0.0.1 trafficsource.adlogix.com
      127.0.0.1 www.adlogix.com
      127.0.0.1 getpopped.com
      127.0.0.1 www.getpopped.com
      127.0.0.1 hitgo.com #[IPU][InPop.InControl]
      127.0.0.1 www.hitgo.com
      127.0.0.1 popmonster.com #[IEFeature Class]
      127.0.0.1 www.popmonster.com #[TROJ_POPMON.A]
      127.0.0.1 r2.trafficserverstats.com
      127.0.0.1 ads.adorigin.com
      127.0.0.1 dev.adorigin.com
      127.0.0.1 www.adorigin.com
      127.0.0.1 blowsearch.com
      127.0.0.1 msxml.blowsearch.com
      127.0.0.1 web.blowsearch.com #[infospace.com]
      127.0.0.1 www.blowsearch.com
      127.0.0.1 cb.adprofile.net
      127.0.0.1 content.adprofile.net
      127.0.0.1 tx.adprofile.net
      127.0.0.1 w2-ver.adprofile.net
      127.0.0.1 adteractive.com
      127.0.0.1 www.adteractive.com
      127.0.0.1 adtegrity.com
      127.0.0.1 www.adtegrity.com
      127.0.0.1 webalize.com #[SearchCentrix][VisiCom.SearchCentric]
      127.0.0.1 toolbar.webalize.com #[downloads.searchcentrix.com]
      127.0.0.1 www.webalize.com #[Visicom Media Toolbar]
      127.0.0.1 webalize.net
      127.0.0.1 www.webalize.net
      127.0.0.1 webalize.mygeek.com
      127.0.0.1 advertisementbanners.com
      127.0.0.1 ads.specificclick.com
      127.0.0.1 www.specificclick.com
      127.0.0.1 specificpop.com
      127.0.0.1 ads.specificpop.com
      127.0.0.1 banners.specificpop.com
      127.0.0.1 www.specificpop.com
      127.0.0.1 adopt.specificclick.net
      127.0.0.1 images.specificclick.net
      127.0.0.1 image.adjuggler.com
      127.0.0.1 rotator.adjuggler.com
      127.0.0.1 www.adjuggler.com
      127.0.0.1 thruport.com
      127.0.0.1 adj54.thruport.com
      127.0.0.1 imageserver1.thruport.com
      127.0.0.1 www.thruport.com
      127.0.0.1 alset.com #[WIN32/HXDL AL]
      127.0.0.1 www.alset.com
      127.0.0.1 aveo.com
      127.0.0.1 www.aveo.com #[server down?]
      127.0.0.1 allcybersearch.com #[REG_STARTPAGE.A]
      127.0.0.1 www.allcybersearch.com
      127.0.0.1 amigeek.com
      127.0.0.1 www.amigeek.com
      127.0.0.1 clickyestoenter.net
      127.0.0.1 www.clickyestoenter.net
      127.0.0.1 www.gay50.com
      127.0.0.1 gocybersearch.com
      127.0.0.1 www.gocybersearch.com
      127.0.0.1 www.hotelxxxcams.com
      127.0.0.1 hotpopup.com
      127.0.0.1 search.hotpopup.com
      127.0.0.1 www.hotpopup.com
      127.0.0.1 hotsearchbox.com #[JAVA_STARTPAGE.F]
      127.0.0.1 www.hotsearchbox.com
      127.0.0.1 i--search.com
      127.0.0.1 www.i--search.com #[StartPage-FN]
      127.0.0.1 jethomepage.com #[JS.Exception.Exploit]
      127.0.0.1 www.jethomepage.com #[Troj/JetHome-B]
      127.0.0.1 jetseeker.com #[CWS.Bootconf]
      127.0.0.1 www.jetseeker.com
      127.0.0.1 searchxl.com #[Adware.ZeroPopUpBar]
      127.0.0.1 www.searchxl.com
      127.0.0.1 tinybar.com
      127.0.0.1 www.tinybar.com #[Parasite.TinyBar]
      127.0.0.1 topsearcher.com #[JV/Goplanet]
      127.0.0.1 www.topsearcher.com #[Troj/JetHome-J]
      127.0.0.1 trixscripts.com
      127.0.0.1 www.trixscripts.com
      127.0.0.1 zeropopup.com #[Parasite.ZeroPopUp]
      127.0.0.1 www.zeropopup.com #[Tellafriend.Trojan]
      127.0.0.1 znext.com #[JS_TRAFFICHBAR.A][Parasite.TinyBar]
      127.0.0.1 www.znext.com #[Parasite.ZeroPopUp][App/P0P-A]
      127.0.0.1 adpowerzone.com
      127.0.0.1 ads.adpowerzone.com
      127.0.0.1 easy.adpowerzone.com
      127.0.0.1 ss.adpowerzone.com
      127.0.0.1 tb.adpowerzone.com
      127.0.0.1 tb-static.adpowerzone.com #[Adware.Websearch]
      127.0.0.1 www.adpowerzone.com #[Adware.Searchexplorer]
      127.0.0.1 adserver.adsincontext.com
      127.0.0.1 ns1.adsincontext.com
      127.0.0.1 srv01.adsincontext.com
      127.0.0.1 srv02.adsincontext.com
      127.0.0.1 srv03.adsincontext.com
      127.0.0.1 srv04.adsincontext.com
      127.0.0.1 srv05.adsincontext.com
      127.0.0.1 srv07.adsincontext.com
      127.0.0.1 adgoblin.com #[Adware.AdGoblin]
      127.0.0.1 crossroad.adgoblin.com
      127.0.0.1 www.adgoblin.com #[AdGoblin.foontext]
      127.0.0.1 adforce.adtech.de
      127.0.0.1 adserver.adtech.de
      127.0.0.1 adserv003.adtech.de
      127.0.0.1 imageserv.adtech.de
      127.0.0.1 livingnet.adtech.de
      127.0.0.1 cdn1.adsdk.com
      127.0.0.1 cdn2.adsdk.com #[VirtualBouncer]
      127.0.0.1 advertising.com
      127.0.0.1 adserve.advertising.com
      127.0.0.1 bannerfarm.ace.advertising.com
      127.0.0.1 demo.advertising.com
      127.0.0.1 opera1-servedby.advertising.com
      127.0.0.1 servedby.advertising.com
      127.0.0.1 rd.advertising.com
      127.0.0.1 wap.advertising.com
      127.0.0.1 www.advertising.com
      127.0.0.1 clk4.com
      127.0.0.1 www.clk4.com
      127.0.0.1 www.contextualclicks.com
      127.0.0.1 fastseeker.com #[Adware.FastSeek]
      127.0.0.1 www.fastseeker.com
      127.0.0.1 spyblast.com #[Parasite.SpyBlast]
      127.0.0.1 www.spyblast.com #[SBFullInst Control]
      127.0.0.1 ads.ign.com
      127.0.0.1 adserver.ign.com
      127.0.0.1 t.ign.com
      127.0.0.1 tracker.ign.com
      127.0.0.1 adserver.snowball.com
      127.0.0.1 polls.snowball.com
      127.0.0.1 scripts.snowball.com
      127.0.0.1 t.snowball.com
      127.0.0.1 tracker.snowball.com
      127.0.0.1 altnet.com
      127.0.0.1 file.altnet.com
      127.0.0.1 media.altnet.com
      127.0.0.1 ts.altnet.com
      127.0.0.1 tss.altnet.com
      127.0.0.1 pm.altnet.com
      127.0.0.1 www.altnet.com
      127.0.0.1 www.altnetp2p.com
      127.0.0.1 brilliantdigital.com #[Parasite.BDE]
      127.0.0.1 st.brilliantdigital.com
      127.0.0.1 www.brilliantdigital.com
      127.0.0.1 b3d.com
      127.0.0.1 www.b3d.com
      127.0.0.1 bde3d.com
      127.0.0.1 xiti.com
      127.0.0.1 loga.xiti.com
      127.0.0.1 logc13.xiti.com
      127.0.0.1 logi6.xiti.com
      127.0.0.1 logi7.xiti.com
      127.0.0.1 logv3.xiti.com
      127.0.0.1 logv18.xiti.com
      127.0.0.1 logv20.xiti.com
      127.0.0.1 logp.xiti.com
      127.0.0.1 trafic.xiti.com
      127.0.0.1 www.xiti.com
      127.0.0.1 adintelligence.net
      127.0.0.1 acc.adintelligence.net
      127.0.0.1 adchannel.adintelligence.net
      127.0.0.1 creatives.adintelligence.net
      127.0.0.1 download.adintelligence.net #[SysAI]
      127.0.0.1 www.adintelligence.net
      127.0.0.1 adchannel.contextplus.net #[Parasite.AproposMedia]
      127.0.0.1 www.contextplus.net
      127.0.0.1 www.contextplus.com
      127.0.0.1 adv.peopleonpage.com
      127.0.0.1 app.peopleonpage.com
      127.0.0.1 download.peopleonpage.com #[POP Loader]
      127.0.0.1 envolo.peopleonpage.com
      127.0.0.1 img.peopleonpage.com
      127.0.0.1 srv.peopleonpage.com #[Spyware.Apropos.B]
      127.0.0.1 www.peopleonpage.com #[Apropos.bho][PeopleOnPage.Apropos]
      127.0.0.1 image.avenuea.com
      127.0.0.1 www.avenuea.com
      127.0.0.1 www.atdmt.com
      127.0.0.1 click.atdmt.com
      127.0.0.1 clk.atdmt.com
      127.0.0.1 spd.atdmt.com
      127.0.0.1 spe.atdmt.com
      127.0.0.1 switch.atdmt.com
      127.0.0.1 view.atdmt.com
      127.0.0.1 atlasdmt.com
      127.0.0.1 www.atlasdmt.com
      127.0.0.1 www.avenueainc.com
      127.0.0.1 active-alert-server.com
      127.0.0.1 www.active-alert-server.com
      127.0.0.1 amnv.net
      127.0.0.1 www.amnv.net
      127.0.0.1 avenuemedia.com
      127.0.0.1 www.avenuemedia.com
      127.0.0.1 climaxbucks.com #[ClimaxBucks.InternetOptimizer]
      127.0.0.1 cdn.climaxbucks.com
      127.0.0.1 mt1.climaxbucks.com
      127.0.0.1 mt23.climaxbucks.com
      127.0.0.1 xbs.climaxbucks.com
      127.0.0.1 www.climaxbucks.com
      127.0.0.1 xbs.cocktailcash.com
      127.0.0.1 cocktailcash.com
      127.0.0.1 www.cocktailcash.com
      127.0.0.1 ads.internet-optimizer.com #[Parasite.Internet Optimizer]
      127.0.0.1 internet-optimizer.com #[Downloader.Dyfcia.F]
      127.0.0.1 configure.internet-optimizer.com
      127.0.0.1 help.internet-optimizer.com
      127.0.0.1 www.internet-optimizer.com #[Adware.NetOptimizer]
      127.0.0.1 www.lunasearch.com
      127.0.0.1 movies-etc.com
      127.0.0.1 cdn.movies-etc.com
      127.0.0.1 www.movies-etc.com
      127.0.0.1 yoogee.com #[Parasite.Internet Optimizer]
      127.0.0.1 www.yoogee.com
      127.0.0.1 c.azjmp.com
      127.0.0.1 images.azoogleads.com
      127.0.0.1 images.azooimages.com
      127.0.0.1 www.azoogleads.com
      127.0.0.1 www.giftfox.com
      127.0.0.1 images.imgehost.com
      127.0.0.1 c.qckjmp.com
      127.0.0.1 google.begin2search.com
      127.0.0.1 toolbar.begin2search.com
      127.0.0.1 www.begin2search.com #[Adware.Begin2search][iiittt Class]
      127.0.0.1 click2findnow.com
      127.0.0.1 www.click2findnow.com
      127.0.0.1 desktoptraffic.net
      127.0.0.1 toolbar.desktoptraffic.net
      127.0.0.1 popupsearches.com
      127.0.0.1 www.popupsearches.com
      127.0.0.1 www.eaffiliateinc.com
      127.0.0.1 globalwebsearch.com #[Parasite.ILookup]
      127.0.0.1 toolbar.globalwebsearch.com #[I-Lookup.GWS]
      127.0.0.1 toolbar2.globalwebsearch.com #[iiittt Class]
      127.0.0.1 www.globalwebsearch.com #[Adware.ILookup]
      127.0.0.1 hotwebsearch.com
      127.0.0.1 www.hotwebsearch.com
      127.0.0.1 worldanywhere.com
      127.0.0.1 toolbar.worldanywhere.com
      127.0.0.1 www.worldanywhere.com
      127.0.0.1 adcounter.theglobeandmail.com
      127.0.0.1 adrates.theglobeandmail.com
      127.0.0.1 ads.globeandmail.com
      127.0.0.1 ads1.theglobeandmail.com
      127.0.0.1 visit.theglobeandmail.com
      127.0.0.1 www1.theglobeandmail.com
      127.0.0.1 adbot.com
      127.0.0.1 w1.adbot.com
      127.0.0.1 www.adbot.com
      127.0.0.1 counter.bloke.com
      127.0.0.1 www1.counter.bloke.com
      127.0.0.1 www3.counter.bloke.com
      127.0.0.1 www4.counter.bloke.com
      127.0.0.1 www5.counter.bloke.com
      127.0.0.1 www6.counter.bloke.com
      127.0.0.1 www7.counter.bloke.com
      127.0.0.1 counterbot.com
      127.0.0.1 cb1.counterbot.com
      127.0.0.1 ak.bluestreak.com
      127.0.0.1 ca1.bluestreak.com
      127.0.0.1 s0.bluestreak.com
      127.0.0.1 s0b.bluestreak.com
      127.0.0.1 s1.bluestreak.com
      127.0.0.1 s2.bluestreak.com
      127.0.0.1 s3.bluestreak.com
      127.0.0.1 s4.bluestreak.com
      127.0.0.1 s5.bluestreak.com
      127.0.0.1 s6.bluestreak.com
      127.0.0.1 s7.bluestreak.com
      127.0.0.1 s8.bluestreak.com
      127.0.0.1 www.bluestreak.com
      127.0.0.1 download.bonzi.com
      127.0.0.1 images.bonzi.com
      127.0.0.1 www.bonzi.com
      127.0.0.1 www.bonzibuddy.com
      127.0.0.1 bravenet.com
      127.0.0.1 adserv.bravenet.com
      127.0.0.1 images.bravenet.com
      127.0.0.1 linktrack.bravenet.com
      127.0.0.1 pub1.bravenet.com
      127.0.0.1 www.bravenet.com
      127.0.0.1 belgiandip.com #[ITS Protocol exploit]
      127.0.0.1 www.belgiandip.com
      127.0.0.1 fassia.net #[Parasite.AutoSearch]
      127.0.0.1 www.fassia.net
      127.0.0.1 flipperkeys.com
      127.0.0.1 www.flipperkeys.com
      127.0.0.1 www.illtemperedguppys.com
      127.0.0.1 manipulatingtheicesurface.com
      127.0.0.1 www.manipulatingtheicesurface.com
      127.0.0.1 www.no-beba-el-agua.com
      127.0.0.1 smokeandapancake.org #[Adware.Winpup]
      127.0.0.1 www.smokeandapancake.org #[AdClicker-O][Troj/Psyme-C]
      127.0.0.1 www.undergroundlair.net #[Troj/AdClick-N]
      127.0.0.1 www2.undergroundlair.net
      127.0.0.1 www.00z70az77mnsa-00swj1zzprh.com #[www2.undergroundlair.net]
      127.0.0.1 www.funcionamiento-con-la-tijera.com #[undergroundlair.net]
      127.0.0.1 www.pshnw6510990nmo-34nue7700.net
      127.0.0.1 burstmedia.com
      127.0.0.1 web.burstmedia.com
      127.0.0.1 roscoe.burstmedia.com
      127.0.0.1 ads.burstnet.com
      127.0.0.1 gifs.burstnet.com
      127.0.0.1 sj.burstnet.com
      127.0.0.1 te.burstnet.com
      127.0.0.1 www.burstnet.com
      127.0.0.1 www2.burstnet.com
      127.0.0.1 www3.burstnet.com
      127.0.0.1 www4.burstnet.com
      127.0.0.1 www5.burstnet.com
      127.0.0.1 www6.burstnet.com
      127.0.0.1 www.burstnet.akadns.net
      127.0.0.1 casalemedia.com
      127.0.0.1 as.casalemedia.com
      127.0.0.1 asg01.casalemedia.com
      127.0.0.1 asg02.casalemedia.com
      127.0.0.1 asg03.casalemedia.com
      127.0.0.1 asg04.casalemedia.com
      127.0.0.1 asg05.casalemedia.com
      127.0.0.1 asg06.casalemedia.com
      127.0.0.1 asg07.casalemedia.com
      127.0.0.1 asg08.casalemedia.com
      127.0.0.1 asg09.casalemedia.com
      127.0.0.1 asg10.casalemedia.com
      127.0.0.1 asg11.casalemedia.com
      127.0.0.1 asg12.casalemedia.com
      127.0.0.1 asg13.casalemedia.com
      127.0.0.1 asg14.casalemedia.com
      127.0.0.1 asg15.casalemedia.com
      127.0.0.1 asg16.casalemedia.com
      127.0.0.1 asg17.casalemedia.com
      127.0.0.1 asg18.casalemedia.com
      127.0.0.1 asg19.casalemedia.com
      127.0.0.1 asg20.casalemedia.com
      127.0.0.1 asg21.casalemedia.com
      127.0.0.1 asg22.casalemedia.com
      127.0.0.1 asg23.casalemedia.com
      127.0.0.1 asg24.casalemedia.com
      127.0.0.1 asg25.casalemedia.com
      127.0.0.1 asg26.casalemedia.com
      127.0.0.1 asg27.casalemedia.com
      127.0.0.1 asg28.casalemedia.com
      127.0.0.1 asg29.casalemedia.com
      127.0.0.1 asg30.casalemedia.com
      127.0.0.1 asg31.casalemedia.com
      127.0.0.1 asg32.casalemedia.com
      127.0.0.1 asg33.casalemedia.com
      127.0.0.1 asg34.casalemedia.com
      127.0.0.1 asg35.casalemedia.com
      127.0.0.1 asg36.casalemedia.com
      127.0.0.1 asg37.casalemedia.com
      127.0.0.1 asg38.casalemedia.com
      127.0.0.1 asg39.casalemedia.com
      127.0.0.1 asg40.casalemedia.com
      127.0.0.1 asg41.casalemedia.com
      127.0.0.1 asg42.casalemedia.com
      127.0.0.1 asg43.casalemedia.com
      127.0.0.1 asg44.casalemedia.com
      127.0.0.1 asg45.casalemedia.com
      127.0.0.1 asg46.casalemedia.com
      127.0.0.1 asg47.casalemedia.com
      127.0.0.1 asg48.casalemedia.com
      127.0.0.1 asg49.casalemedia.com
      127.0.0.1 asg50.casalemedia.com
      127.0.0.1 asg51.casalemedia.com
      127.0.0.1 asg52.casalemedia.com
      127.0.0.1 aslg01.casalemedia.com
      127.0.0.1 aslg02.casalemedia.com
      127.0.0.1 aslg03.casalemedia.com
      127.0.0.1 aslg04.casalemedia.com
      127.0.0.1 aslg05.casalemedia.com
      127.0.0.1 aslg06.casalemedia.com
      127.0.0.1 aslg07.casalemedia.com
      127.0.0.1 aslg08.casalemedia.com
      127.0.0.1 aslg09.casalemedia.com
      127.0.0.1 aslg10.casalemedia.com
      127.0.0.1 c.casalemedia.com
      127.0.0.1 i.casalemedia.com
      127.0.0.1 is.casalemedia.com
      127.0.0.1 isg01.casalemedia.com
      127.0.0.1 isg02.casalemedia.com
      127.0.0.1 isg03.casalemedia.com
      127.0.0.1 isg04.casalemedia.com
      127.0.0.1 isg05.casalemedia.com
      127.0.0.1 isg06.casalemedia.com
      127.0.0.1 isg07.casalemedia.com
      127.0.0.1 isg08.casalemedia.com
      127.0.0.1 isg09.casalemedia.com
      127.0.0.1 isg10.casalemedia.com
      127.0.0.1 r.casalemedia.com
      127.0.0.1 www.casalemedia.com
      127.0.0.1 www.spywarestormer.com #[CInstall Class][Zoombar Object][Rogue/Suspect]
      127.0.0.1 active-max.com
      127.0.0.1 search.active-max.com
      127.0.0.1 www.active-max.com
      127.0.0.1 allaboutsearching.com
      127.0.0.1 www.allaboutsearching.com
      127.0.0.1 amazingautossearch.com
      127.0.0.1 www.amazingautossearch.com
      127.0.0.1 contexualsearch.com
      127.0.0.1 www.contexualsearch.com
      127.0.0.1 www.dialup2.com
      127.0.0.1 ecpm.com
      127.0.0.1 www.ecpm.com
      127.0.0.1 find-quick.com
      127.0.0.1 www.find-quick.com
      127.0.0.1 look-today.com
      127.0.0.1 www.look-today.com
      127.0.0.1 lop.com
      127.0.0.1 ao.lop.com
      127.0.0.1 ayb.lop.com
      127.0.0.1 bins.lop.com
      127.0.0.1 k17177.bins.lop.com
      127.0.0.1 img.lop.com
      127.0.0.1 sue.lop.com
      127.0.0.1 srch.lop.com #[Parasite.LOP]
      127.0.0.1 www1.lop.com
      127.0.0.1 www.lop.com
      127.0.0.1 maxexp.com
      127.0.0.1 www.mp3search.com
      127.0.0.1 mysearchnow.com
      127.0.0.1 search200.com
      127.0.0.1 www.search200.com
      127.0.0.1 search.mysearchnow.com
      127.0.0.1 www.mysearchnow.com
      127.0.0.1 netsearchsoft.com
      127.0.0.1 www.netsearchsoft.com
      127.0.0.1 omegasearch.com
      127.0.0.1 www.omegasearch.com
      127.0.0.1 prosearching.com
      127.0.0.1 www.prosearching.com
      127.0.0.1 www.rub.to
      127.0.0.1 sbvr.com
      127.0.0.1 www.sbvr.com
      127.0.0.1 searchexe.com
      127.0.0.1 www.searchexe.com
      127.0.0.1 searchweb2.com
      127.0.0.1 www.searchweb2.com
      127.0.0.1 spawnet.com
      127.0.0.1 www.spawnet.com
      127.0.0.1 tdmy.com #[TrojanDownloader.Win32.Swizzor.h]
      127.0.0.1 tefs.com
      127.0.0.1 tfil.com
      127.0.0.1 www.tfil.com
      127.0.0.1 tdko.com
      127.0.0.1 www.tdko.com
      127.0.0.1 wfix.com #[super-spider.com]
      127.0.0.1 installdollars.com #[affiliate]
      127.0.0.1 www2.installdollars.com #[Adware.Instdollars][server down?]
      127.0.0.1 www.installdollars.com
      127.0.0.1 clickxchange.com
      127.0.0.1 caweb1.clickxchange.com
      127.0.0.1 caweb2.clickxchange.com
      127.0.0.1 www.clickxchange.com
      127.0.0.1 public.americandaytrading.com
      127.0.0.1 blazefind.com #[IE SearchBar]
      127.0.0.1 findwhatevernow.blazefind.com
      127.0.0.1 omniscient.blazefind.com #[TROJ_BLAZEFIND.A]
      127.0.0.1 xml.blazefind.com
      127.0.0.1 www.blazefind.com #[Adware.BlazeFind]
      127.0.0.1 cdtnet.net
      127.0.0.1 anne.cdtnet.net
      127.0.0.1 caroline.cdtnet.net
      127.0.0.1 flingstone.com #[TROJ_WINFAVS.A]
      127.0.0.1 redirect.flingstone.com
      127.0.0.1 static.flingstone.com #[brdg Class]
      127.0.0.1 www.flingstone.com #[Adware.WinFavorites.B]
      127.0.0.1 www2.flingstone.com #[brdg Class][Win32/Bryss.Spy.Trojan]
      127.0.0.1 homepagecash.com
      127.0.0.1 www.homepagecash.com
      127.0.0.1 loudcash.com
      127.0.0.1 partners.loudcash.com
      127.0.0.1 www.loudcash.com
      127.0.0.1 searchbarcash.com #[Downloader.Small.5.Y]
      127.0.0.1 public.searchbarcash.com #[WinFavorites][DownloadUL Class]
      127.0.0.1 www.searchbarcash.com #[Parasite.TinyBar]
      127.0.0.1 searchbrowser.com
      127.0.0.1 findwhatevernow.searchbrowser.com
      127.0.0.1 skoobidoo.com
      127.0.0.1 www.skoobidoo.com
      127.0.0.1 www2.skoobidoo.com #[Downloader.MSCache]
      127.0.0.1 updates.troffee.com
      127.0.0.1 winadclient.com
      127.0.0.1 www.winadclient.com
      127.0.0.1 windowssr.com
      127.0.0.1 public.windupdates.com #[Windows SyncroAd]
      127.0.0.1 static.windupdates.com
      127.0.0.1 www.windupdates.com #[AdvWare.WinAD]
      127.0.0.1 counterstrike.server.us #[Downloader.CDT]
      127.0.0.1 er.errorplace.com
      127.0.0.1 www.errorplace.com #[Parasite.SearchSprint]
      127.0.0.1 www.media-motor.com
      127.0.0.1 bins2.media-motor.net #[TROJ_VB.DO]
      127.0.0.1 cabs.media-motor.net #[IObjSafety.DemoCtl]
      127.0.0.1 logs.media-motor.net
      127.0.0.1 mmm.media-motor.net
      127.0.0.1 upd.media-motor.net
      127.0.0.1 www.media-motor.net
      127.0.0.1 tar.popuppers.com #[Adware.Medload]
      127.0.0.1 www.popuppers.com #[Adware.Roimoi][SULoads.popuppers]
      127.0.0.1 bins.roings.com #[jimmyloader.jimmyform]
      127.0.0.1 cabs.roings.com #[IObjSafety.DemoCtl]
      127.0.0.1 logs.roings.com
      127.0.0.1 mmm.roings.com #[limmyloding.limmyform]
      127.0.0.1 www.roings.com #[Roings Search Enhancment]
      127.0.0.1 bannerexchange.cjb.net
      127.0.0.1 coder3862004.cjb.net #[Trojan.Bansap]
      127.0.0.1 searchwww.com
      127.0.0.1 search.searchwww.com #[Parasite.SearchWWW]
      127.0.0.1 vbs.searchwww.com
      127.0.0.1 www.searchwww.com
      127.0.0.1 dafinder.com
      127.0.0.1 www2.dafinder.com
      127.0.0.1 www3.dafinder.com
      127.0.0.1 adult.getmoviesonline.com
      127.0.0.1 www.getmoviesonline.com
      127.0.0.1 ourlinklist.com
      127.0.0.1 searchaccurate.com #[Parasite.TinyBar]
      127.0.0.1 www.searchaccurate.com
      127.0.0.1 ads.web.aol.com
      127.0.0.1 affiliate.aol.com
      127.0.0.1 aim.aol.com
      127.0.0.1 dynamic.aol.com
      127.0.0.1 free.aol.com
      127.0.0.1 usaol.com
      127.0.0.1 ar
      0
    3. husnu Messages postés 411 Statut Membre 24
       
      Logfile of HijackThis v1.99.1
      Scan saved at 21:50:36, on 8/05/2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\Mixer.exe
      C:\Program Files\Alwil Software\Avast4\ashDisp.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\lclock.exe
      C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\husnu\Bureau\Nouveau dossier (2)\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://lstard.stormcorp.net/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
      O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
      O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [LClock] lclock.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
      O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
      0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Darkkiller Messages postés 2336 Statut Contributeur 67
     
    Re,

    Télécharge AVG Anti-Spyware:

    https://www.avg.com/en-ww/free-antivirus-download

    Tu l'installes.
    Lance AVG Anti-Spyware et clique sur le bouton Mise à jour. Patiente

    Lance AVG Anti-Spyware
    Clique sur le bouton Analyse (de la barre d'outils)
    Puis sur l'onglets Comment réagir, clique sur Actions recommandées. Sélectionne Quarantaine.
    Reviens à l'onglet Analyse. Clique sur Analyse complète du système.
    A la fin du scan, choisis l'option " Appliquer toutes les actions " en bas.
    Clique sur "Enregistrer le rapport". Ceci génère un rapport en fichier texte qui se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.

    poste le rapport AVG!

    0
    1. husnu Messages postés 411 Statut Membre 24
       
      ---------------------------------------------------------
      AVG Anti-Spyware - Rapport d'analyse
      ---------------------------------------------------------

      + Créé à: 22:25:08 8/05/2007

      + Résultat de l'analyse:



      C:\Documents and Settings\husnu\Cookies\husnu@247realmedia[1].txt -> TrackingCookie.247realmedia : Nettoyé.
      C:\Documents and Settings\husnu\Cookies\husnu@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Nettoyé.
      C:\Documents and Settings\husnu\Cookies\husnu@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
      C:\Documents and Settings\husnu\Cookies\husnu@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.


      Fin du rapport
      0
    2. husnu Messages postés 411 Statut Membre 24
       
      je comprend rien aucun virus!! pourtant jsuis sure qu'il y a des virus!
      0
  7. Darkkiller Messages postés 2336 Statut Contributeur 67
     
    Re,

    Pourquoi tu as des symptomes ? Des dysfonctionnements ?
    0
    1. husnu Messages postés 411 Statut Membre 24
       
      ben oui par exemple comme je viens de formater mon pc je voulai installer le new msn messenger et j'arrive pas! windows m'indique une erreur:

      C:\Documents and Settings\.....Install_Messenger.exe n'est pas une application Win32 valide.
      0
    2. husnu Messages postés 411 Statut Membre 24
       
      pour le moment a part ca pas de prob c normal je viens de formater mais je suis sure que cava empirer! qd j'ouvre le gestionnaire de taches je vois plusieur processus pas net!
      0
  8. Darkkiller Messages postés 2336 Statut Contributeur 67
     
    RE,

    scan kaspersky https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr

    Clic sur l'image Kaspersky Online Scanner
    Clic sur J'accepte
    Installes le ActiveX
    Tu attends que la mise à jour se termine, une fois terminé,
    clic sur Suivant
    Clic sur Paramètres d'analyse
    Coche la case Étendue >> Ok
    Clic sur Poste de travail pour faire un scan complet
    Une fois le scan fini à 100%, clic sur Enregistrer rapport
    sous...
    Enregistrer le rapport au format .txt (en nom tu mets rapport ou
    ce que tu veux et en type tu choisis fichier texte (*.txt)
    Tu ouvres le fichier que tu viens de sauvegarder, copie et colle
    le rapport ici si tu es infecté

    0
  9. Darkkiller Messages postés 2336 Statut Contributeur 67
     
    Re,

    Si tu as formater tu peux être sur certains que toutes tes infections sont eradiquées ! Pourrais-je avoir le nom de tes processus pas net ? stp
    0
    1. husnu Messages postés 411 Statut Membre 24
       
      aucun virus trouvé a mon avis....


      -------------------------------------------------------------------------------
      KASPERSKY ON-LINE SCANNER REPORT
      Tuesday, May 08, 2007 11:25:09 PM
      Système d'exploitation : Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
      Kaspersky On-line Scanner version : 5.0.83.0
      Dernière mise à jour de la base antivirus Kaspersky : 8/05/2007
      Enregistrements dans la base antivirus Kaspersky : 315606
      -------------------------------------------------------------------------------

      Paramètres d'analyse:
      Analyser avec la base antivirus suivante: étendue
      Analyser les archives: vrai
      Analyser les bases de messagerie: vrai

      Cible de l'analyse - Poste de travail:
      C:\
      D:\
      E:\
      F:\

      Statistiques de l'analyse:
      Total d'objets analysés: 13691
      Nombre de virus trouvés: 1
      Nombre d'objets infectés: 4 / 0
      Nombre d'objets suspects: 0
      Durée de l'analyse: 00:22:16

      Nom de l'objet infecté / Nom du virus / Dernière action
      C:\Documents and Settings\husnu\Bureau\SmitfraudFix\SmitfraudFix\Reboot.exe Infecté : not-a-virus:RiskTool.Win32.Reboot.f ignoré
      C:\Documents and Settings\husnu\Cookies\index.dat L'objet est verrouillé ignoré
      C:\Documents and Settings\husnu\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
      C:\Documents and Settings\husnu\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
      C:\Documents and Settings\husnu\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
      C:\Documents and Settings\husnu\Local Settings\Temp\Perflib_Perfdata_848.dat L'objet est verrouillé ignoré
      C:\Documents and Settings\husnu\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
      C:\Documents and Settings\husnu\NTUSER.DAT L'objet est verrouillé ignoré
      C:\Documents and Settings\husnu\ntuser.dat.LOG L'objet est verrouillé ignoré
      C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
      C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
      C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré
      C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré
      C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
      C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
      C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré
      C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré
      C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat L'objet est verrouillé ignoré
      C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db L'objet est verrouillé ignoré
      C:\Program Files\Alwil Software\Avast4\DATA\integ\avast.int L'objet est verrouillé ignoré
      C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws L'objet est verrouillé ignoré
      C:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log L'objet est verrouillé ignoré
      C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log L'objet est verrouillé ignoré
      C:\Program Files\Alwil Software\Avast4\DATA\report\Protection résidente.txt L'objet est verrouillé ignoré
      C:\RECYCLER\S-1-5-21-1229272821-1644491937-839522115-1003\Dc5.zip/SmitfraudFix/Reboot.exe Infecté : not-a-virus:RiskTool.Win32.Reboot.f ignoré
      C:\RECYCLER\S-1-5-21-1229272821-1644491937-839522115-1003\Dc5.zip ZIP: infecté - 1 ignoré
      C:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré
      C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré
      C:\WINDOWS\system32\CatRoot2\edb.log L'objet est verrouillé ignoré
      C:\WINDOWS\system32\CatRoot2\tmp.edb L'objet est verrouillé ignoré
      C:\WINDOWS\system32\config\default L'objet est verrouillé ignoré
      C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré
      C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré
      C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré
      C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré
      C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré
      C:\WINDOWS\system32\config\software L'objet est verrouillé ignoré
      C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré
      C:\WINDOWS\system32\config\system L'objet est verrouillé ignoré
      C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré
      C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré
      C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré
      C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré
      C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré
      C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré
      C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré
      C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré
      C:\WINDOWS\Temp\Perflib_Perfdata_5b8.dat L'objet est verrouillé ignoré
      C:\WINDOWS\Temp\_avast4_\Webshlock.txt L'objet est verrouillé ignoré
      F:\RECYCLER\S-1-5-21-1417001333-1383384898-725345543-1003\Df25\Reboot.exe Infecté : not-a-virus:RiskTool.Win32.Reboot.f ignoré
      F:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré

      Analyse terminée.
      -----------------------------------------------------------



      voici les processus:
      smss.exe
      csrss.exe
      winlogon.exe
      services.exe
      lsass.exe
      svchost.exe (2fois)
      aswUpdSv.exe
      ashServ.exe
      guard.exe
      0
  10. Darkkiller Messages postés 2336 Statut Contributeur 67
     
    Re,

    Les processus sont sains.
    Vide ta corbeille, et tu peux supprimer tout les logiciels qui ont servi à la désinfection, SMitfraudfix etc..
    0
    1. husnu Messages postés 411 Statut Membre 24
       
      ah bon pourtant sur google ca avais l'air d'etre des virus ses processus mais bon si tu le dis en tout cas je te remerci toi et rudy vous m'avez pas laisser tomber...un grand merci
      0
  11. Miles
     
    Bjr à tous, voilà mon rapport, pourriez-vous m'aider un peu. Option1

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\MELISSA

    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\MELISSA\LOCALS~1\Temp

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\MELISSA\Application Data

    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\MELISSA\Favoris

    »»»»»»»»»»»»»»»»»»»»»»»» Bureau

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="Ma page d'accueil"

    »»»»»»»»»»»»»»»»»»»»»»»» o4Patch
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    o4Patch
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    Agent.OMZ.Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» VACFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    404Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"="C:\\PROGRA~1\\KASPER~1\\KASPER~1\\mzvkbd3.dll,C:\\PROGRA~1\\KASPER~1\\KASPER~1\\kloehk.dll"

    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"

    »»»»»»»»»»»»»»»»»»»»»»»» RK

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"=""

    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: Broadcom 802.11b/g WLAN - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 192.168.1.1

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{F16BCA70-4960-4E00-8E2C-B288B9D3264D}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{F16BCA70-4960-4E00-8E2C-B288B9D3264D}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{F16BCA70-4960-4E00-8E2C-B288B9D3264D}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

    »»»»»»»»»»»»»»»»»»»»»»»» Fin
    0