Aide Virus Win32:Renos-AL

Question

Bonjour, 


Je suis infesté par le virus win32:Renos-Al depuis quelques temps et je n'arrive pas a le supprimer. J'ai les logiciels CCleaner AD-Aware, Spybot et Avast et rien ne fonctionne pour supprimer ce virus. 

ESt ce que quelqu'un saurait et pourrait m'aider pour regler ce probleme svp? 

Merci

Utilisateur anonyme · Answer

bonjour 
Télécharge sur le bureau 
[url=http://www.merijn.org/files/hijackthis.zip]hijackthis.zip[/url]
= Clic-droit sur Hijackthis
= Extraire ici ( ou extraire sans confirmation ou tout ou unzip)
= clic droit sur Hijackthis ( en forme de dynamite) ==> renommer ==> écrire : test.exe ( à la place de hijackthis.exe) <== Important
=Double-clic dessus
= Clic Do a system scan and save the log
=coller le rapport
si problème voir l'aide
[url=https://forums.cnetfrance.fr]Aide hijackthis[/url]

Niroors · Answer

C'est bien ça?


Logfile of HijackThis v1.99.1
Scan saved at 16:14:01, on 13/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Guyader\Bureau	est.exe.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/fuji/defaults/su/*https://fr.yahoo.com/?p=us
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\printer.exe
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Muscbrigade] c:\Musicbrigade\Musicbrigade.exe check
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [WinAVX] C:\WINDOWS\system32\WinAvXX.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [fsc-reminder.exe] C:\WINDOWSeminder\fsc-reminder.exe 2454176 6
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [WinAVX] C:\WINDOWS\system32\WinAvXX.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\systems.txt
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe

Utilisateur anonyme · Answer

Télécharge sur le bureau  [url=http://siri.urz.free.fr/Fix/SmitfraudFix.zip]SmitfraudFix.zip[/url]
=> Double clic sur SmitfraudFix.zip
=> Extraire tout
=> Double clic sur SmitfraudFix
=> Double Clic sur SmitfraudFix.cmd
=> Choisir Option 1
=> Sauver le rapport

Niroors · Answer

SmitFraudFix v2.240

Rapport fait à 16:36:21,51, 13/10/2007
Executé à partir de C:\Documents and Settings\Guyader\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts

Fichier hosts corrompu !

127.0.0.1	www.legal-at-spybot.info
127.0.0.1	legal-at-spybot.info

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

C:\WINDOWS\system32\systems.txt PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Guyader


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Guyader\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Guyader\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
 

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"appinit_dlls"="C:\WINDOWS\system32\systems.txt"


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Realtek RTL8139/810x Family Fast Ethernet NIC - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1
DNS Server Search Order: 0.0.0.0

HKLM\SYSTEM\CCS\Services\Tcpip\..\{96292FA9-E2BB-48A0-84D6-A0C777181D4B}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\..\{96292FA9-E2BB-48A0-84D6-A0C777181D4B}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Utilisateur anonyme · Answer

relance SmitfraudFix en mode sans echec 
et choisis l'option 2
= Redémarre en mode Sans Échec (le démarrage peut prendre plusieurs minutes)
Attention, pas d’accès à internet dans ce mode.

Relance le Pc et tapote la touche F8 ( ou F5 pour certains) , jusqu’à l’apparition des inscriptions avec choix de démarrage
Avec les touches « flèches », sélectionne Mode sans échec ==> entrée ==>nom utilisateur habituel

Niroors · Answer

Voilà je viens de finir l'opération. je n'ai pas reçu d'alertes pour le moment. Faut il faire autre chose ou est ce que le virus est entierement supprimer?

Utilisateur anonyme · Answer

as tu le rapport?

maintenant 
Télécharge:
http://www.grisoft.cz/filedir/inst/avgas-setup-7.5.1.43.exe  AVG-AntiSpyware
= Installer
= Le lancer
= Clic : Mise à jour
------
= Redémarre en mode Sans Échec (le démarrage peut prendre plusieurs minutes)
Attention, pas d’accès à internet dans ce mode. Enregistre ou imprime les consignes.

Relance le Pc et tapote la touche F8 ( ou F5 pour certains) , jusqu’à l’apparition des inscriptions avec choix de démarrage
Avec les touches « flèches », sélectionne Mode sans échec ==> entrée ==>nom utilisateur habituel
-------
= Dans ANALYSE ( en forme de loupe )
==> Paramètres ==> sous COMMENT REAGIR==>clic sur Actions recommandées ==>Quarantaine
==> Clic : Analyse complète du système
En fin de scan ( qui est assez long)
==> Clic Appliquer toutes les actions <== ceci Très important
==> Clic Sauvegarder rapport puis Enregistrer sous et choisir bureau
-------
En mode normal
colle le rapport

Niroors · Answer

nan désolé je n'ai plus le rapport je viens de redémarrer l'ordinateur.

Utilisateur anonyme · Answer

pas de soucis 
passe AVG Anti-Spyware

Niroors · Answer

Je viens juste de finir voici le rapport de AVG Anti-Spyware:

AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	20:57:55 13/10/2007

 + Résultat de l'analyse:	



C:\WINDOWS\ekdia143.exe -> Heuristic.Win32.Dialer : Nettoyé.
C:\Documents and Settings\Guyader\Cookies\guyader@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Guyader\Cookies\guyader@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Guyader\Cookies\guyader@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Guyader\Cookies\guyader@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Guyader\Cookies\guyader@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.


Fin du rapport

Utilisateur anonyme · Answer

faire ceci
Télécharger sur le bureau : [url=http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe]navilog.exe[/url]

= Double-Clic navilog1.zip
= Extraire tout ( ou extraire sans confirmation ou unzip)
= Double-Clic navilog1 qui est sur le bureau
= Appuyer sur une touche jusqu' arriver aux options
= Choisir option 1 ( = taper 1 )
ne pas utiliser les autres sans avis , il peut y avoir des processus légitimes

le rapport se trouve dans c: fixnavi.txt

tu postes ce rapport.

---------------------
2°) Télecharger [url=http://www.malekal.com/download/clean.zip]clean.zip[/url] sur le bureau
Dézipper sur le bureau.
= ouvrir le dossier clean
= cliquer sur le symbole roue dentée avec le nom clean
= choisir l'option 1 et laisser clean travailler jusqu'à l'apparition du texte "appuyer sur une touche pour continuer"
= ensuite colle le rapport

Niroors · Answer

Search Navipromo version 3.2.1 commencé le 14/10/2007 à 14:47:52,28

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Poster ce rapport sur le forum pour le faire analyser !!!
!!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

Fix lancé depuis C:\Program Files
avilog1
Mise a jour le 09.10.2007 a 18h00 by IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180 


*** Recherche Programmes installes ***




*** Recherche dossiers dans C:\WINDOWS ***



*** Recherche dossiers dans C:\Program Files ***



*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




*** Recherche dossiers dans C:\Documents and Settings\Guyader\Application Data ***


*** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***


*** Recherche avec Catchme-rootkit/stealth malware detector by gmer ***
pour + d'infos : http://www.gmer.net

Aucun fichier trouvé dans :

- C:\WINDOWS\system32
- C:\DOCUME~1\Guyader\LOCALS~1\APPLIC~1



*** Recherche avec GenericNaviSearch ***
!!! Tous Ces résultats peuvent révéler des fichiers légitimes !!!
!!! A verifier impérativement avant toute suppression manuelle !!!

* Scan C:\WINDOWS\system32 *

* Scan C:\DOCUME~1\Guyader\LOCALS~1\APPLIC~1 *



*** Recherche fichiers *** 




*** Recherche cles registre ***


*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:

2)Recherche Heuristique :



3)Recherche Certificats :

Certificat Egroup absent !


*** Analyse Terminé le 14/10/2007 à 14:48:21,12 ***

Niroors · Answer

14/10/2007 a 14:52:19,20 
 
*** Recherche des fichiers dans C: 
 
*** Recherche des fichiers dans C:\WINDOWS\ 
 
*** Recherche des fichiers dans C:\WINDOWS\system32 
 
*** Recherche des fichiers dans C:\Program Files 
*** Fin du rapport !

Utilisateur anonyme · Answer

ok pour celui là c'est clean

Niroors · Answer

Est ce qu'il reste des choses a faire ou est ce que c'est bon?

Utilisateur anonyme · Answer

refais hijack
stp

Niroors · Answer

Logfile of HijackThis v1.99.1
Scan saved at 15:09:57, on 14/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Documents and Settings\Guyader\Bureau	est.exe.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Muscbrigade] c:\Musicbrigade\Musicbrigade.exe check
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [fsc-reminder.exe] C:\WINDOWSeminder\fsc-reminder.exe 2454176 6
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe

Utilisateur anonyme · Answer

refais SmitfraudFix stp

Niroors · Answer

SmitFraudFix v2.240

Rapport fait à 15:23:42,06, 14/10/2007
Executé à partir de C:\Documents and Settings\Guyader\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

C:\WINDOWS\system32\Delete_Me_Dummy_systems.txt PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Guyader


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Guyader\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Guyader\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
 

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"appinit_dlls"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Realtek RTL8139/810x Family Fast Ethernet NIC - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1
DNS Server Search Order: 0.0.0.0

HKLM\SYSTEM\CCS\Services\Tcpip\..\{96292FA9-E2BB-48A0-84D6-A0C777181D4B}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\..\{96292FA9-E2BB-48A0-84D6-A0C777181D4B}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\..\{96292FA9-E2BB-48A0-84D6-A0C777181D4B}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Utilisateur anonyme · Answer

relance SmitFraudFix en mode sans echec
et colle le rapport

Niroors · Answer

SmitFraudFix v2.240

Rapport fait à 19:57:02,15, 14/10/2007
Executé à partir de C:\Documents and Settings\Guyader\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts


192.168.200.3	ad.doubleclick.net
192.168.200.3	ad.fastclick.net
192.168.200.3	ads.fastclick.net
192.168.200.3	atdmt.com
192.168.200.3	awaps.net
192.168.200.3	banner.fastclick.net
192.168.200.3	banners.fastclick.net
192.168.200.3	click.atdmt.com
192.168.200.3	clicks.atdmt.com
192.168.200.3	engine.awaps.net
192.168.200.3	fastclick.net
192.168.200.3	ftp.avp.ch
192.168.200.3	ftp.kasperskylab.ru
192.168.200.3	updates5.kaspersky-labs.com
192.168.200.3	www.awaps.net
192.168.200.3	www.viruslist.ru
127.0.0.1	babe.the-killer.bz
127.0.0.1	www.babe.the-killer.bz
127.0.0.1	babe.k-lined.com
127.0.0.1	www.babe.k-lined.com
127.0.0.1	did.i-used.cc
127.0.0.1	www.did.i-used.cc
127.0.0.1	coolwwwsearch.com
127.0.0.1	www.coolwwwsearch.com
127.0.0.1	coolwebsearch.com
127.0.0.1	www.coolwebsearch.com
127.0.0.1	hi.studioaperto.net
127.0.0.1	www.hi.studioaperto.net
127.0.0.1	wazzupnet.com
127.0.0.1	www.wazzupnet.com
127.0.0.1	gueb.com
127.0.0.1	www.gueb.com
127.0.0.1	kabex.com
127.0.0.1	www.kabex.com
127.0.0.1	hityou.com
127.0.0.1	www.hityou.com
127.0.0.1	miosearch.com
127.0.0.1	www.miosearch.com
127.0.0.1	blue-elefant.com
127.0.0.1	www.blue-elefant.com
127.0.0.1	babeweb.de
127.0.0.1	www.babeweb.de
127.0.0.1	start-seite.com
127.0.0.1	www.start-seite.com
127.0.0.1	sexolymp.com
127.0.0.1	www.sexolymp.com
127.0.0.1	toriii.cc
127.0.0.1	www.toriii.cc
127.0.0.1	xtipp.de
127.0.0.1	www.xtipp.de
127.0.0.1	urawa.cool.ne.jp
127.0.0.1	777search.com
127.0.0.1	www.777search.com
127.0.0.1	ace-webmaster.com
127.0.0.1	www.ace-webmaster.com
127.0.0.1	aifind.info
127.0.0.1	www.aifind.info
127.0.0.1	amateurliveshow.com
127.0.0.1	www.amateurliveshow.com
127.0.0.1	anarchylolita.com
127.0.0.1	www.anarchylolita.com
127.0.0.1	anarchyporn.com
127.0.0.1	approvedlinks.com
127.0.0.1	www.approvedlinks.com
127.0.0.1	cantfind.com
127.0.0.1	www.cantfind.com
127.0.0.1	castingsamateur.com
127.0.0.1	www.castingsamateur.com
127.0.0.1	cyberrape.com
127.0.0.1	www.cyberrape.com
127.0.0.1	dialerclub.com
127.0.0.1	www.dialerclub.com
127.0.0.1	megago.com
127.0.0.1	exit.megago.com
127.0.0.1	www.megago.com
127.0.0.1	fastmetasearch.com
127.0.0.1	www.fastmetasearch.com
127.0.0.1	findwhatevernow.com
127.0.0.1	www.findwhatevernow.com
127.0.0.1	globesearch.com
127.0.0.1	www.globesearch.com
127.0.0.1	hotfreebies.com
127.0.0.1	www.hotfreebies.com
127.0.0.1	krankin.com
127.0.0.1	www.krankin.com
127.0.0.1	begin2search.com
127.0.0.1	www.begin2search.com
127.0.0.1	mainstreamdollars.com
127.0.0.1	www.mainstreamdollars.com
127.0.0.1	live.sex-explorer.com
127.0.0.1	www.live.sex-explorer.com
127.0.0.1	loveadot.com
127.0.0.1	www.loveadot.com
127.0.0.1	megaseek.net
127.0.0.1	www.megaseek.net
127.0.0.1	mixsearch.com
127.0.0.1	www.mixsearch.com
127.0.0.1	munky.com
127.0.0.1	www.munky.com
127.0.0.1	newtopsites.com
127.0.0.1	www.newtopsites.com
127.0.0.1	noblindlinks.com
127.0.0.1	www.noblindlinks.com
127.0.0.1	babenet.com
127.0.0.1	r.babenet.com
127.0.0.1	www.babenet.com
127.0.0.1	searchresult.net
127.0.0.1	www.searchresult.net
127.0.0.1	sexarena.org
127.0.0.1	www.sexarena.org
127.0.0.1	skeech.com
127.0.0.1	www.skeech.com
127.0.0.1	superwp.by.ru
127.0.0.1	sureseeker.com
127.0.0.1	www.sureseeker.com
127.0.0.1	wethere.com
127.0.0.1	www.wethere.com
127.0.0.1	wowsearch.org
127.0.0.1	www.wowsearch.org
127.0.0.1	xxx.com
127.0.0.1	www.xxx.com
127.0.0.1	art-xxx.com
127.0.0.1	websearch.com
127.0.0.1	www.websearch.com
127.0.0.1	firehunt.com
127.0.0.1	www.firehunt.com
127.0.0.1	partner23.firehunt.com
127.0.0.1	screensaver.it
127.0.0.1	www.screensaver.it
127.0.0.1	cliks.org
127.0.0.1	www.cliks.org
127.0.0.1	xads.cliks.org
127.0.0.1	xwebsearch.biz
127.0.0.1	www.xwebsearch.biz
127.0.0.1	znext.com
127.0.0.1	www.znext.com
127.0.0.1	rawtocash.net
127.0.0.1	www.rawtocash.net
127.0.0.1	7search.com
127.0.0.1	www.7search.com
127.0.0.1	zestyfind.com
127.0.0.1	www.zestyfind.com
127.0.0.1	ntcor.com
127.0.0.1	www.ntcor.com
127.0.0.1	dev.ntcor.com
127.0.0.1	xrenoder.com
127.0.0.1	www.xrenoder.com
127.0.0.1	search.xrenoder.com
127.0.0.1	allcybersearch.com
127.0.0.1	www.allcybersearch.com
127.0.0.1	tinybar.com
127.0.0.1	www.tinybar.com
127.0.0.1	topsite.us
127.0.0.1	www.topsite.us
127.0.0.1	topsites.us
127.0.0.1	www.topsites.us
127.0.0.1	topsitez.us
127.0.0.1	www.topsitez.us
127.0.0.1	true-counter.com
127.0.0.1	www.true-counter.com
127.0.0.1	out.true-counter.com
127.0.0.1	cnetadd.com
127.0.0.1	www.cnetadd.com
127.0.0.1	okmmm.com
127.0.0.1	www.okmmm.com
127.0.0.1	139mm.com
127.0.0.1	www.139mm.com
127.0.0.1	008k.com
127.0.0.1	www.008k.com
127.0.0.1	00hq.com
127.0.0.1	www.00hq.com
127.0.0.1	1-domains-registrations.com
127.0.0.1	www.1-domains-registrations.com
127.0.0.1	100sexlinks.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	1sexparty.com
127.0.0.1	www.1sexparty.com
127.0.0.1	1stpagehere.com
127.0.0.1	www.1stpagehere.com
127.0.0.1	2020search.com
127.0.0.1	www.2020search.com
127.0.0.1	24teen.com
127.0.0.1	www.24teen.com
127.0.0.1	36site.com
127.0.0.1	www.36site.com
127.0.0.1	4corn.net
127.0.0.1	www.4corn.net
127.0.0.1	777top.com
127.0.0.1	www.777top.com
127.0.0.1	8ad.com
127.0.0.1	www.8ad.com
127.0.0.1	aboutclicker.com
127.0.0.1	www.aboutclicker.com
127.0.0.1	abrp.net
127.0.0.1	www.abrp.net
127.0.0.1	accessthefuture.net
127.0.0.1	www.accessthefuture.net
127.0.0.1	acemedic.com
127.0.0.1	www.acemedic.com
127.0.0.1	actionbreastcancer.org
127.0.0.1	www.actionbreastcancer.org
127.0.0.1	activexupdate.com
127.0.0.1	www.activexupdate.com
127.0.0.1	adamsupportgroup.org
127.0.0.1	www.adamsupportgroup.org
127.0.0.1	adasearch.com
127.0.0.1	www.adasearch.com
127.0.0.1	adipics.com
127.0.0.1	www.adipics.com
127.0.0.1	adspics.com
127.0.0.1	www.adspics.com
127.0.0.1	adult-engine-search.com
127.0.0.1	www.adult-engine-search.com
127.0.0.1	adult-erotic-guide.net
127.0.0.1	www.adult-erotic-guide.net
127.0.0.1	adult-friends-finder.net
127.0.0.1	www.adult-friends-finder.net
127.0.0.1	adulthyperlinks.com
127.0.0.1	www.adulthyperlinks.com
127.0.0.1	adulttds.com
127.0.0.1	www.adulttds.com
127.0.0.1	exaccess.ru
127.0.0.1	www.exaccess.ru
127.0.0.1	advert.exaccess.ru
127.0.0.1	agentstudio.com
127.0.0.1	africaspromise.org
127.0.0.1	akril.com
127.0.0.1	alcatel.ws
127.0.0.1	alfa-search.com
127.0.0.1	all-inet.com
127.0.0.1	allabtcars.com
127.0.0.1	allabtjeeps.com
127.0.0.1	allhyperlinks.com
127.0.0.1	allinternetbusiness.com
127.0.0.1	almarvideos.com
127.0.0.1	amandamountains.com
127.0.0.1	amigeek.com
127.0.0.1	amisbusiness.com
127.0.0.1	analmovi.com
127.0.0.1	anin.org
127.0.0.1	annaromeo.com
127.0.0.1	antrocity.com
127.0.0.1	anything4health.com
127.0.0.1	apsua.com
127.0.0.1	aregay.com
127.0.0.1	arheo.com
127.0.0.1	arizonaweb.org
127.0.0.1	armitageinn.com
127.0.0.1	art-func.com
127.0.0.1	artachnid.com
127.0.0.1	asiankingkong.com
127.0.0.1	ass-gals.com
127.0.0.1	athenrye.com
127.0.0.1	avian-ads.com
127.0.0.1	ayakawamura.com
127.0.0.1	ayumitaniguchi.com
127.0.0.1	bannedhost.net
127.0.0.1	barbudafarms.com
127.0.0.1	barnandfence.com
127.0.0.1	batsearch.com
127.0.0.1	baygraphicsllc.com
127.0.0.1	bb-search.com
127.0.0.1	bbbsearch.com
127.0.0.1	bedhome.com
127.0.0.1	bediadance.com
127.0.0.1	bellabasketsfl.com
127.0.0.1	bernaolatwin.com
127.0.0.1	best-counter.com
127.0.0.1	best-hardpics.com
127.0.0.1	best-winning-casino.com
127.0.0.1	bestcrawler.com
127.0.0.1	bestfor.ru
127.0.0.1	bestporngate.com
127.0.0.1	bestxporno.com
127.0.0.1	blackjack-free.net
127.0.0.1	blender.xu.pl
127.0.0.1	bodaciousbabette.com
127.0.0.1	boobdoll.com
127.0.0.1	boobsandtits.com
127.0.0.1	boobsclub.com
127.0.0.1	boredlife.com
127.0.0.1	bowlofogumbo.com
127.0.0.1	bradcoem.org
127.0.0.1	brandiyoung.com
127.0.0.1	brookeburn.com
127.0.0.1	bucps.com
127.0.0.1	burgerkingbigscreen.com
127.0.0.1	buscards.net
127.0.0.1	bustyrussell.com
127.0.0.1	buttejazz.org
127.0.0.1	buyselldomain.net
127.0.0.1	calcioturris.com
127.0.0.1	canberracricketcoaching.com
127.0.0.1	candycantaloupes.com
127.0.0.1	careers.dulcineasystems.net
127.0.0.1	carsands.com
127.0.0.1	carsrentals.net
127.0.0.1	casino-gambling-1.net
127.0.0.1	casino-gambling-2.net
127.0.0.1	casino-onlines.net
127.0.0.1	casino.com.free.game.pogo.gratisdownloads.nl
127.0.0.1	casino2win.net
127.0.0.1	casinomidas.net
127.0.0.1	casinonline.net
127.0.0.1	catallogue.com
127.0.0.1	catsss.da.ru
127.0.0.1	caxa.ru
127.0.0.1	cclebali.org
127.0.0.1	ceewawires.org
127.0.0.1	certumgroup.com
127.0.0.1	chelancatering.com
127.0.0.1	childrenvilla.com
127.0.0.1	chips-4-free.com
127.0.0.1	chrisswasey.com
127.0.0.1	chriswallace.net
127.0.0.1	ckick4thumbs.com
127.0.0.1	clackamasliteraryreview.com
127.0.0.1	clearsearch.cc
127.0.0.1	clearsearch.net
127.0.0.1	clickaire.com
127.0.0.1	clickyestoenter.net
127.0.0.1	clrsch.com
127.0.0.1	cmtapestry.com
127.0.0.1	cool-homepage.co
127.0.0.1	cool-homepage.com
127.0.0.1	cool-search.net
127.0.0.1	cool-search.netfartpost.com
127.0.0.1	cool-web-search.com
127.0.0.1	coolfetishsite.com
127.0.0.1	coolfreehost.com
127.0.0.1	coolfreepage.com
127.0.0.1	coolfreepages.com
127.0.0.1	coolmoneysearch.com
127.0.0.1	coolpornsearch.com
127.0.0.1	coolsearcher.info
127.0.0.1	coolwebsearsh.com
127.0.0.1	copmtraine.com
127.0.0.1	couldnotfind.com
127.0.0.1	count-all.com
127.0.0.1	cracks.me.uk
127.0.0.1	creamedcutties.com
127.0.0.1	creditsearchonline.com
127.0.0.1	crestring.com
127.0.0.1	crooder.com
127.0.0.1	curvedspaces.com
127.0.0.1	cvs.jps.ru
127.0.0.1	cvsymphony.com
127.0.0.1	cydom.com
127.0.0.1	daily-gals.com
127.0.0.1	dancingbabycd.com
127.0.0.1	datanotary.com
127.0.0.1	datareco.com
127.0.0.1	davemarshall.org
127.0.0.1	dcfitusa.com
127.0.0.1	defaultsearch.net
127.0.0.1	desarrollocreativo.com
127.0.0.1	develip.com
127.0.0.1	dewis.spb.ru
127.0.0.1	dewis.us
127.0.0.1	df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
127.0.0.1	dietpills4free.com
127.0.0.1	dietpussy.com
127.0.0.1	digistreamsa.com
127.0.0.1	dionforvalleycouncil.org
127.0.0.1	doctorwaldron.com
127.0.0.1	document-not-found.pornpic.org
127.0.0.1	doggyaction.com
127.0.0.1	domain-your-registration.com
127.0.0.1	domains-for-you-online.com
127.0.0.1	domains2003.net
127.0.0.1	domkrat.com
127.0.0.1	dp-host.com
127.0.0.1	dragqueen.gay-clan.com
127.0.0.1	drug-sources-exposed.com
127.0.0.1	drvvv.com
127.0.0.1	dutch-sex.com
127.0.0.1	dvdbank.org
127.0.0.1	e-localad.com
127.0.0.1	e-plus.cc
127.0.0.1	e-websitesolutions.com
127.0.0.1	eases.net
127.0.0.1	easy-search.net
127.0.0.1	easycategories.com
127.0.0.1	ecosrioplatenses.org
127.0.0.1	ecstasyporn.net
127.0.0.1	eikokoike.com
127.0.0.1	epornsex.com
127.0.0.1	euuu.com
127.0.0.1	evidence-detector.biz
127.0.0.1	evilspidercomics.com
127.0.0.1	ewebsearch.net
127.0.0.1	findloss.com
127.0.0.1	excellentsckin.com
127.0.0.1	extremeseek.net
127.0.0.1	faithstevens.com
127.0.0.1	fantasiewelten.com
127.0.0.1	farmsteadbandb.com
127.0.0.1	fartpost.com
127.0.0.1	fastwebfinder.com
127.0.0.1	faxporn.com
127.0.0.1	fickenisgeil.de
127.0.0.1	finance-loans.com
127.0.0.1	find-itnow.com
127.0.0.1	find-uk-health.co.uk
127.0.0.1	find4u.net
127.0.0.1	findit-now.com
127.0.0.1	findthesite.com
127.0.0.1	findthewebsiteyouneed.com
127.0.0.1	www.findthewebsiteyouneed.com
127.0.0.1	fionasteel.com
127.0.0.1	firstbookmark.net
127.0.0.1	fitness-free.com
127.0.0.1	foodvacations.net
127.0.0.1	forex.jps.ru
127.0.0.1	forexcredit.com
127.0.0.1	forexcredit.ru
127.0.0.1	formingfusions.com
127.0.0.1	forsythfire.net
127.0.0.1	forthline.com
127.0.0.1	free-chipes.com
127.0.0.1	free-hit.com
127.0.0.1	free-pics-and-movies.com
127.0.0.1	free-sex-movie-clips.net
127.0.0.1	free4porno.net
127.0.0.1	free64all.com
127.0.0.1	freebookmark.net
127.0.0.1	freebookmarks.net
127.0.0.1	freecategories.com
127.0.0.1	freecoolhost.com
127.0.0.1	freerbhost.com
127.0.0.1	freeshemalepics.net
127.0.0.1	freeyaho.com
127.0.0.1	freshseek.com
127.0.0.1	freshteensite.com
127.0.0.1	gabrielscott.com
127.0.0.1	galpostgirls.com
127.0.0.1	gals-for-free.com
127.0.0.1	gambling-online4you.com
127.0.0.1	gameterror.net
127.0.0.1	gay50.com
127.0.0.1	generalsmeltingofcanada.com
127.0.0.1	geteens.com
127.0.0.1	getpicshere.com
127.0.0.1	gimmezamore.com
127.0.0.1	gimnasiaer.com
127.0.0.1	girls-porn-life.com
127.0.0.1	glbdf.org
127.0.0.1	global-finder.com
127.0.0.1	globe-finder.cc
127.0.0.1	globe-finder.com
127.0.0.1	gocybersearch.com
127.0.0.1	golftennis.net
127.0.0.1	good-mortgages-calculator.com
127.0.0.1	good-mortgages.net
127.0.0.1	goodsexs.com
127.0.0.1	googlebar.jps.ru
127.0.0.1	googlf.com
127.0.0.1	gradforum.org
127.0.0.1	gratis-porn-movie.com
127.0.0.1	gratis-pornopics.com
127.0.0.1	guzzycats.com
127.0.0.1	gzphoenix.com
127.0.0.1	hallnetaccolade.com
127.0.0.1	hand-book.com
127.0.0.1	happyanal.com
127.0.0.1	hard-gals.com
127.0.0.1	hardbodytgp.com
127.0.0.1	hardcoreover.com
127.0.0.1	hardloved.com
127.0.0.1	hardwareseek.net
127.0.0.1	harukaigawa.com
127.0.0.1	hccsolanonapa.org
127.0.0.1	health-protein.com
127.0.0.1	hentai4u.net
127.0.0.1	here4search.com
127.0.0.1	heyrichy.com
127.0.0.1	hi-search.com
127.0.0.1	hiddenguides.com
127.0.0.1	hitlistlyrics.com
127.0.0.1	holidayautostr.com
127.0.0.1	homemortage.ws
127.0.0.1	hostssp.com
127.0.0.1	hot-cartoon-sex.anime.american-teens.net
127.0.0.1	hotbookmark.com
127.0.0.1	hotels-list.net
127.0.0.1	hotelxxxcams.com
127.0.0.1	hotpopup.com
127.0.0.1	hotsearchbox.com
127.0.0.1	hotsex-series.com
127.0.0.1	hotstartpage.com
127.0.0.1	hqsex.biz
127.0.0.1	hugeporn4u.net
127.0.0.1	hunacsa.com
127.0.0.1	hupacasath.com
127.0.0.1	hzsx.com
127.0.0.1	icansearch.net
127.0.0.1	idgsearch.com
127.0.0.1	ie-search.com
127.0.0.1	incestporngate.com
127.0.0.1	infodigger.net
127.0.0.1	infoglobus.com
127.0.0.1	inherhole.com
127.0.0.1	insertthiscock.com
127.0.0.1	insurance-flood.net
127.0.0.1	insuranceall.net
127.0.0.1	internetsearch.ru
127.0.0.1	ionichost.com
127.0.0.1	ionomist.com
127.0.0.1	ipsex.net
127.0.0.1	itsanal.com
127.0.0.1	itseasy.us
127.0.0.1	iweb-commerce.com
127.0.0.1	iwebland.com
127.0.0.1	jeannineoldfield.com
127.0.0.1	jethomepage.com
127.0.0.1	jetseeker.com
127.0.0.1	jmhgallery.org
127.0.0.1	joannelatham.com
127.0.0.1	judin.ru
127.0.0.1	junkysex.com
127.0.0.1	karleyt.narod.ru
127.0.0.1	kathisomers.com
127.0.0.1	kazaa-lite.ws
127.0.0.1	keithgreenpro.com
127.0.0.1	kenmccaul.com
127.0.0.1	kilosex.com
127.0.0.1	kimhines.com
127.0.0.1	kinoru.com
127.0.0.1	ksdspups.org
127.0.0.1	landrape.com
127.0.0.1	lauraroebuck.com
127.0.0.1	leannalovelace.com
127.0.0.1	lesobank.ru
127.0.0.1	libertyonlinehosting.com
127.0.0.1	lingerie-mania.com
127.0.0.1	lisamatthew.com
127.0.0.1	liveholio.com
127.0.0.1	livenewspaper.com
127.0.0.1	louiseleeds.com
127.0.0.1	love-pix.com
127.0.0.1	lovelas.com
127.0.0.1	lovelysearch.com
127.0.0.1	low-taxes.com
127.0.0.1	luckysearch.net
127.0.0.1	lunitaweb.net
127.0.0.1	lustful-porno.com
127.0.0.1	mackinnonsbrook.org
127.0.0.1	madfinder.com
127.0.0.1	madisonmoons.com
127.0.0.1	madisonoilco.com
127.0.0.1	madonalive.com
127.0.0.1	majuozawa.com
127.0.0.1	makin-do.com
127.0.0.1	male4free.com
127.0.0.1	map-quest.org
127.0.0.1	marilynchamber.com
127.0.0.1	martfinder.com
127.0.0.1	massearch.com
127.0.0.1	matetrava.com
127.0.0.1	mature50.com
127.0.0.1	matureporngate.com
127.0.0.1	maxdzines.com
127.0.0.1	mcgeeforlabor.com
127.0.0.1	mdstunisie.org
127.0.0.1	medicare-insurance.net
127.0.0.1	medicare-supplemental.com
127.0.0.1	mega-dating-tips.com
127.0.0.1	megumikanzaki.com
127.0.0.1	meshalynn.com
127.0.0.1	meta-adult.com
127.0.0.1	meta-casino.com
127.0.0.1	meta-mobile.com
127.0.0.1	meta-porn.com
127.0.0.1	metafora.ru
127.0.0.1	metapoisk.ru
127.0.0.1	michiyonakajima.com
127.0.0.1	miconsultamedica.com
127.0.0.1	mikasakamoto.com
127.0.0.1	mikoni.com
127.0.0.1	militarygods.porn4porn.net
127.0.0.1	millennialpeople.org
127.0.0.1	mipham.org
127.0.0.1	missingcommand.com
127.0.0.1	mommykiss.com
127.0.0.1	moneyhunters.com
127.0.0.1	montgomeryhospitalanesthesia.com
127.0.0.1	morflot.com
127.0.0.1	mortgage-debt.net
127.0.0.1	mortismaximus.com
127.0.0.1	moscowwhores.com
127.0.0.1	moviecategories.com
127.0.0.1	mp3-pix.com
127.0.0.1	mrtg.jps.ru
127.0.0.1	msn-info.net
127.0.0.1	multipussy.com
127.0.0.1	mundopolar.com
127.0.0.1	mustv.com
127.0.0.1	mywebsearch.net
127.0.0.1	nativehardcore.com
127.0.0.1	naturalspy.com
127.0.0.1	nbasportsbook.net
127.0.0.1	nellyslyrics.com
127.0.0.1	nepgyan.com
127.0.0.1	nesrecords.com
127.0.0.1	netshastra.net
127.0.0.1	nettime.ru
127.0.0.1	nettracker.jps.ru
127.0.0.1	netyellowpages.info
127.0.0.1	new-incest.com
127.0.0.1	newcategories.com
127.0.0.1	newcracks.com
127.0.0.1	newcracks.net
127.0.0.1	newlife-lajolla.com
127.0.0.1	newsexgate.com
127.0.0.1	newtonsracks.com
127.0.0.1	newxpics.com
127.0.0.1	nhlsportsbook.net
127.0.0.1	niagaracapital.com
127.0.0.1	niche-tv.com
127.0.0.1	nmrba.com
127.0.0.1	nocalories.net
127.0.0.1	nocensor.com
127.0.0.1	ormandcompany.com
127.0.0.1	nsbabes.com
127.0.0.1	nuclearwitness.org
127.0.0.1	nursemania.com
127.0.0.1	nvntour.com
127.0.0.1	nvphall.org
127.0.0.1	oborot.com
127.0.0.1	ocalalivestockmarket.com
127.0.0.1	ocsff.com
127.0.0.1	oeatlanta.com
127.0.0.1	oharrowsearch.com
127.0.0.1	ok-search.com
127.0.0.1	okulta.com
127.0.0.1	omegabrains.net
127.0.0.1	online-casino-1.net
127.0.0.1	online-casino-bonus.info
127.0.0.1	online-casinos-x.com
127.0.0.1	online-winning.net
127.0.0.1	onlineserverz.com
127.0.0.1	onlinetradings.net
127.0.0.1	onlycunt.com
127.0.0.1	onlyinsured.com
127.0.0.1	operanabuco.com
127.0.0.1	opsex.com
127.0.0.1	oregoncharters.org
127.0.0.1	otrlives.com
127.0.0.1	ozawamadoka.com
127.0.0.1	paigesummer.com
127.0.0.1	pamelacollections.com
127.0.0.1	panamcup.com
127.0.0.1	pantygirls4u.com
127.0.0.1	pantyhoserealm.com
127.0.0.1	pantyplace.com
127.0.0.1	pastubes.com
127.0.0.1	paulapage.com
127.0.0.1	paulhoover.com
127.0.0.1	payfortraffic.net
127.0.0.1	pedo.ws
127.0.0.1	people.1gb.ru
127.0.0.1	pervertbot.com
127.0.0.1	pharma-diet-pills.com
127.0.0.1	pharmacy2003.com
127.0.0.1	pharmalocator.com
127.0.0.1	phendimetrazine-tenuate-adipex.com
127.0.0.1	pics-videos.com
127.0.0.1	picsdir.com
127.0.0.1	picsforbucks.com
127.0.0.1	picsofseductiveladies.com
127.0.0.1	pills-birth-control.com
127.0.0.1	pillsmall.com
127.0.0.1	pilotronix.com
127.0.0.1	pixpox.com
127.0.0.1	planemusic.com
127.0.0.1	poiska.net
127.0.0.1	poker-casino-free.com
127.0.0.1	poker-games-free.net
127.0.0.1	polradiologia.com
127.0.0.1	pooi.net
127.0.0.1	porn-teacher.com
127.0.0.1	porncamz.com
127.0.0.1	pornfree.info
127.0.0.1	pornnightdreams.com
127.0.0.1	pornokopec.com
127.0.0.1	porntetris.com
127.0.0.1	porntwist.com
127.0.0.1	powerwebsearch.com
127.0.0.1	prblitz.com
127.0.0.1	pretypics.com
127.0.0.1	pribalt.com
127.0.0.1	privacy-support.biz
127.0.0.1	privateporn.net
127.0.0.1	prostactive.com
127.0.0.1	prostol.com
127.0.0.1	protect-yourself.biz
127.0.0.1	prsainlandempire.org
127.0.0.1	put-your-link-here.com
127.0.0.1	pyrocorp.com
127.0.0.1	quick-search.ws
127.0.0.1	quiksearchgenealogy.com
127.0.0.1	radfrall.org
127.0.0.1	ramgo.com
127.0.0.1	ranafrog.ne
127.0.0.1	rapegate.com
127.0.0.1	redbudbmx.com
127.0.0.1	refinance-help.com
127.0.0.1	removeearthkeepers.org
127.0.0.1	rightfinder.net
127.0.0.1	robbsproshop.com
127.0.0.1	robertferencz.com
127.0.0.1	rotocasters.com
127.0.0.1	royalsearch.net
127.0.0.1	runsearch.com
127.0.0.1	russiansponsor.com
127.0.0.1	russogay.com
127.0.0.1	s2.exocrew.com
127.0.0.1	sacitylife.com
127.0.0.1	samplegals.com
127.0.0.1	sbssurvivor.com
127.0.0.1	scarypix.com
127.0.0.1	sccdnet.com
127.0.0.1	schoolforest.com
127.0.0.1	search-1.net
127.0.0.1	search-2003.com
127.0.0.1	search-about.net
127.0.0.1	search-hawk.com
127.0.0.1	search-log.com
127.0.0.1	search-meta.com
127.0.0.1	search-safe.com
127.0.0.1	search.psn.cn
127.0.0.1	searchadultweb.com
127.0.0.1	searchbutler.com
127.0.0.1	searchbuttler.com
127.0.0.1	searchbutler.org
127.0.0.1	searchcomplete.com
127.0.0.1	searchdesire.com
127.0.0.1	searchdot.net
127.0.0.1	searchexpander.com
127.0.0.1	searchfastnet.com
127.0.0.1	searchforge.com
127.0.0.1	searching-the-net.com
127.0.0.1	searchmeta.md
127.0.0.1	searchmeta.net
127.0.0.1	searchmeta.ru
127.0.0.1	searchmeta.webhost.ru
127.0.0.1	searchnow.ws
127.0.0.1	searchonfly.com
127.0.0.1	searchv.com
127.0.0.1	searchxl.com
127.0.0.1	searchxp.com
127.0.0.1	sebot.com
127.0.0.1	securenp.org
127.0.0.1	security-warning.biz
127.0.0.1	seehardcore.com
127.0.0.1	seekwell.net
127.0.0.1	selfbookmark.com
127.0.0.1	selfbookmark.info
127.0.0.1	selfbookmark.net
127.0.0.1	sex.free4porno.net
127.0.0.1	sex-coach.com
127.0.0.1	sex-festival.com
127.0.0.1	sex-video-galleries.com
127.0.0.1	sexgalleries4all.com
127.0.0.1	sexmoviesnet.com
127.0.0.1	sexpatriot.net
127.0.0.1	sexy18.cc
127.0.0.1	sexycat.adult-host.org
127.0.0.1	sfbayfolkboats.com
127.0.0.1	sgirls.net
127.0.0.1	sharempeg.com
127.0.0.1	shopcards.net
127.0.0.1	shopknights.com
127.0.0.1	sic02.com
127.0.0.1	sintrader.com
127.0.0.1	site1.ru
127.0.0.1	sites-in-web.com
127.0.0.1	sitevictoria.com
127.0.0.1	sixroads.com
127.0.0.1	skakalka.ru
127.0.0.1	slawsearch.com
127.0.0.1	slotch.com
127.0.0.1	slotchbar.com
127.0.0.1	smartsumo.com
127.0.0.1	smutarchive.net
127.0.0.1	solongas.com
127.0.0.1	sonomaevents.com
127.0.0.1	spermatrix.com
127.0.0.1	sportbooks-free4you.com
127.0.0.1	spros.com
127.0.0.1	spyass.com
127.0.0.1	spyorgy.net
127.0.0.1	staceyowens.com
127.0.0.1	stacistaxx.com
127.0.0.1	stacystaxx.com
127.0.0.1	start-space.com
127.0.0.1	steamycock.com
127.0.0.1	sterva.com
127.0.0.1	stevecashdollar.com
127.0.0.1	stop-tracking.biz
127.0.0.1	stopvotefraud.com
127.0.0.1	stopxxxpics.com
127.0.0.1	strekoza.com
127.0.0.1	stuffstore.com
127.0.0.1	styleclickink.com
127.0.0.1	summercollins.com
127.0.0.1	summitcross.com
127.0.0.1	super-spider.com
127.0.0.1	super-websearch.com
127.0.0.1	supersexmachine.com
127.0.0.1	superwebsearch.com
127.0.0.1	supret.com
127.0.0.1	suzannebrecht.com
127.0.0.1	sweeteenz.com
127.0.0.1	tacil.org
127.0.0.1	tangounion.com
127.0.0.1	tastethemusic.com
127.0.0.1	tax-refund4you.com
127.0.0.1	tech-jobs.ws
127.0.0.1	technology-related.com
127.0.0.1	teen-biz.com
127.0.0.1	teen-pic-post.com
127.0.0.1	teenpornosex.com
127.0.0.1	teens4free.net
127.0.0.1	teensact.com
127.0.0.1	teensgate.com
127.0.0.1	teensguru.com
127.0.0.1	teenswamp.com
127.0.0.1	testosterone-birth-control.com
127.0.0.1	the-exit.com
127.0.0.1	the-huns-yellow-pages.com
127.0.0.1	thefakejournal.com
127.0.0.1	thehuy.net
127.0.0.1	theproxy.org
127.0.0.1	therealsearch.com
127.0.0.1	thesten.com
127.0.0.1	thornleygroup.com
127.0.0.1	tings.org
127.0.0.1	tit-x.com
127.0.0.1	titanvision.com
127.0.0.1	titsianna.com
127.0.0.1	toddhayes.com
127.0.0.1	toon-comics.com
127.0.0.1	tooncomics.com
127.0.0.1	topsearcher.com
127.0.0.1	trafficback.com
127.0.0.1	trafficswitcher.com
127.0.0.1	travel.picture-posters.com
127.0.0.1	true-portal.com
127.0.0.1	trytechnical.com
127.0.0.1	ufindall.click-now.net
127.0.0.1	umaxsearch.com
127.0.0.1	une-autre-france.com
127.0.0.1	unigays.com
127.0.0.1	unipages.cc
127.0.0.1	up2you.ru
127.0.0.1	urlstat.com
127.0.0.1	urlstat.ru
127.0.0.1	uralitel.ru
127.0.0.1	ursie.net
127.0.0.1	utahsweet.com
127.0.0.1	utopicportal.com
127.0.0.1	uusocialjustice.org
127.0.0.1	v61.com
127.0.0.1	vaginpics.com
127.0.0.1	valmyers.com
127.0.0.1	vegas-free.com
127.0.0.1	vegbuy.com
127.0.0.1	veloventures.com
127.0.0.1	verzila.com
127.0.0.1	victoriaadam.com
127.0.0.1	videocategories.com
127.0.0.1	vitamins-for-each.com
127.0.0.1	votehowe.org
127.0.0.1	vxebony.com
127.0.0.1	wakeupdick.com
127.0.0.1	warnomore.org
127.0.0.1	watersport-specialties.com
127.0.0.1	web-homepage.net
127.0.0.1	web-search.tk
127.0.0.1	webcoolsearch.com
127.0.0.1	websearchdot.com
127.0.0.1	weekend-movies.com
127.0.0.1	wetpornostars.com
127.0.0.1	whatsyoursearch.com
127.0.0.1	white-pages.ws
127.0.0.1	whittierblvd.com
127.0.0.1	win-in-casino.com
127.0.0.1	wiresearch.com
127.0.0.1	wolfpacracing.com
127.0.0.1	wordlist.jps.ru
127.0.0.1	wpc2001.org
127.0.0.1	wspzone.sexpornonline.com
127.0.0.1	wwwbet.net
127.0.0.1	wwwbetting.net
127.0.0.1	wwwpokergames.com
127.0.0.1	wwwpokerplayers.com
127.0.0.1	wwwroulette.net
127.0.0.1	x-library.com
127.0.0.1	x-webdesign.com
127.0.0.1	xcomics4u.com
127.0.0.1	xic-bs.com
127.0.0.1	xldr.com
127.0.0.1	xp18.com
127.0.0.1	xrenosearch.com
127.0.0.1	xtragay.com
127.0.0.1	xu.xu.pl
127.0.0.1	xxxcategories.com
127.0.0.1	xxxemailxxx.com
127.0.0.1	y-e-l-l-o-w.com
127.0.0.1	yellow500.com
127.0.0.1	yezol.com
127.0.0.1	you-search.com
127.0.0.1	you-search.com.ru
127.0.0.1	youfindall.com
127.0.0.1	youfindall.net
127.0.0.1	your-prescriptions.net
127.0.0.1	yourbookmarks.info
127.0.0.1	yourbookmarks.ws
127.0.0.1	ypir.com
127.0.0.1	ysa-info.net
127.0.0.1	yukohamano.com
127.0.0.1	ywebsearch.info
127.0.0.1	zapros.com
127.0.0.1	zesearch.com
127.0.0.1	ziportal.com
127.0.0.1	zipportal.com
127.0.0.1	zoneoffreeporn.com
127.0.0.1	zoomegasite.com
127.0.0.1	zvimigdal.com
127.0.0.1	zyban-zocor-levitra.com
127.0.0.1	t.rack.cc
127.0.0.1	omega-search.com
127.0.0.1	cool-xxx.net
127.0.0.1	revolto3.da.ru
127.0.0.1	dating-search.net
127.0.0.1	linksummary.com
127.0.0.1	duolaimi.net
127.0.0.1	ez-searching.com
127.0.0.1	freehqmovies.com
127.0.0.1	xzoomy.com
127.0.0.1	freescratchandwin.com
127.0.0.1	globalwebsearch.com
127.0.0.1	www.gocybersearch.com
127.0.0.1	mayancasino.com
127.0.0.1	www.hastalavista.com
127.0.0.1	www.free-popup-killer.com
127.0.0.1	www.digitalfan.com
127.0.0.1	google123.web1000.com
127.0.0.1	search.ieplugin.com
127.0.0.1	i-lookup.com
127.0.0.1	spidersearch.com
127.0.0.1	istarthere.com
127.0.0.1	xxxtoolbar.com
127.0.0.1	www.seekporn.org
127.0.0.1	17-plus.com
127.0.0.1	lolita4all1.xrensmagpost.com
127.0.0.1	mafiapics.com
127.0.0.1	www.teenmonster.com
127.0.0.1	ie.marketdart.com
127.0.0.1	masterbar.com
127.0.0.1	search.netzany.co
127.0.0.1	only-virgins.com
127.0.0.1	passthison.com
127.0.0.1	blondetgp.com
127.0.0.1	prolivation.com
127.0.0.1	server-au.imrworldwide.com
127.0.0.1	rocketsearch.com
127.0.0.1	roar.com
127.0.0.1	searchaccurate.com
127.0.0.1	searchalot.com
127.0.0.1	searchandbrowse.com
127.0.0.1	gtawarehouse.com
127.0.0.1	startium.com
127.0.0.1	searchandclick.com
127.0.0.1	searchby.net
127.0.0.1	searchdot.com
127.0.0.1	search-exe.com
127.0.0.1	secret-crush.com
127.0.0.1	seekseek.com
127.0.0.1	sexarena.com
127.0.0.1	sexocean.play-lolita.com
127.0.0.1	startsurfing.com
127.0.0.1	srng.net
127.0.0.1	apps.webservicehost.com
127.0.0.1	search.shopnav.com
127.0.0.1	wish7.com
127.0.0.1	www.supersexpass.com
127.0.0.1	surferbar.com
127.0.0.1	xlola.underagehost.com
127.0.0.1	hotlolitas.underagehost.com
127.0.0.1	loading-lolita.com
127.0.0.1	www.xupiter.com
127.0.0.1	xjupiter.com
127.0.0.1	www.xjupiter.com
127.0.0.1	www.browserwise.com
127.0.0.1	sqwire.com
127.0.0.1	orbitexplorer.com
127.0.0.1	searchcentrix.com
127.0.0.1	categories.mygeek.com
127.0.0.1	web-entrance.co
127.0.0.1	whazit.com
127.0.0.1	windowenhancer.com
127.0.0.1	buz.ru
127.0.0.1	iwon.com
127.0.0.1	www.bonzi.com
127.0.0.1	featured-results.com
127.0.0.1	searchmadesafe.net
127.0.0.1	quicklaunch.com
127.0.0.1	www.cashsurfers.com
127.0.0.1	lop.com
127.0.0.1	tjdo.com
127.0.0.1	ebav.com
127.0.0.1	ebgo.com
127.0.0.1	ebaw.com
127.0.0.1	ebkb.com
127.0.0.1	ebmu.com
127.0.0.1	ecmp.com
127.0.0.1	edhq.com
127.0.0.1	edty.com
127.0.0.1	sbee.com
127.0.0.1	aavc.com
127.0.0.1	acjp.com
127.0.0.1	ecmh.com
127.0.0.1	emch.com
127.0.0.1	ecpm.com
127.0.0.1	wabu.com
127.0.0.1	wabq.com
127.0.0.1	ebch.com
127.0.0.1	ebdv.com
127.0.0.1	ebdw.com
127.0.0.1	ebjp.com
127.0.0.1	ebkn.com
127.0.0.1	ebky.com
127.0.0.1	eblv.com
127.0.0.1	wbkb.com
127.0.0.1	ebvr.com
127.0.0.1	ecwz.com
127.0.0.1	ecyb.com
127.0.0.1	eduy.com
127.0.0.1	eeev.com
127.0.0.1	farse.com
127.0.0.1	ibmx.com
127.0.0.1	icwb.com
127.0.0.1	icwo.com
127.0.0.1	icwp.com
127.0.0.1	iddh.com
127.0.0.1	idhh.com
127.0.0.1	ifiz.com
127.0.0.1	iguu.com
127.0.0.1	samz.com
127.0.0.1	saoe.com
127.0.0.1	sbjr.com
127.0.0.1	sbnl.com
127.0.0.1	sbnt.com
127.0.0.1	sbvr.com
127.0.0.1	scbm.com
127.0.0.1	sckr.com
127.0.0.1	scrk.com
127.0.0.1	sdry.com
127.0.0.1	seld.com
127.0.0.1	sfux.com
127.0.0.1	sheat.com
127.0.0.1	sipo.com
127.0.0.1	smds.com
127.0.0.1	srib.com
127.0.0.1	srox.com
127.0.0.1	srsf.com
127.0.0.1	ssaw.com
127.0.0.1	ssby.com
127.0.0.1	surj.com
127.0.0.1	tbvg.com
127.0.0.1	tdak.com
127.0.0.1	tdmy.com
127.0.0.1	tefs.com
127.0.0.1	tfil.com
127.0.0.1	tjar.com
127.0.0.1	tjaw.com
127.0.0.1	tjgo.com
127.0.0.1	tjem.com
127.0.0.1	torc.com
127.0.0.1	wfix.com
127.0.0.1	wflu.com
127.0.0.1	tdko.com
127.0.0.1	thko.com
127.0.0.1	H24413.tfil.com
127.0.0.1	germany.rub.to
127.0.0.1	search.rub.to
127.0.0.1	unitedstates.rub.to
127.0.0.1	www.commonname.com
127.0.0.1	www.ezcybersearch.com
127.0.0.1	www.jethomepage.com
127.0.0.1	www.gohip.com
127.0.0.1	hotbar.com
127.0.0.1	www.huntbar.com
127.0.0.1	search.imiserver.com
127.0.0.1	searchenhancement.com
127.0.0.1	newtonknows.com
127.0.0.1	search-explorer.net
127.0.0.1	searchsquire.com
127.0.0.1	secondpower.com
127.0.0.1	2ndpower.com
127.0.0.1	searchgateway.net
127.0.0.1	worldusa.com
127.0.0.1	www.topsearcher.com
127.0.0.1	smutserver.com
127.0.0.1	searchmeup.com
127.0.0.1	cameup.com
127.0.0.1	kliksearch.com
127.0.0.1	realphx.com
127.0.0.1	blazefind.com
127.0.0.1	zoofil.com
127.0.0.1	terafinder.com
127.0.0.1	008i.com
127.0.0.1	171203.com
127.0.0.1	39-93.com
127.0.0.1	adult-personal.us
127.0.0.1	cashsearch.biz
127.0.0.1	cl55.biz
127.0.0.1	dailyteenspic.com
127.0.0.1	dialer2004.com
127.0.0.1	digital-pornography.com
127.0.0.1	eager-sex.com
127.0.0.1	ergosites.com
127.0.0.1	freecj.com
127.0.0.1	greg-search.com
127.0.0.1	incest-host.com
127.0.0.1	ironcarteam.com
127.0.0.1	is-best.com
127.0.0.1	killerpornstars.com
127.0.0.1	lollitop.com
127.0.0.1	love-host.com
127.0.0.1	myexexex.com
127.0.0.1	my-finder.com
127.0.0.1	onlineclick.net
127.0.0.1	onlysex.ws
127.0.0.1	regfreeze.com
127.0.0.1	ruworld.com
127.0.0.1	selltraffic.biz
127.0.0.1	sexunique.net
127.0.0.1	sinpussy.com
127.0.0.1	teenhost.net
127.0.0.1	ultraload.net
127.0.0.1	vse-moe.biz
127.0.0.1	xsex.ws
127.0.0.1	75tz.com
127.0.0.1	iefeadsl.com
127.0.0.1	rf104.com
127.0.0.1	www.v61.com
127.0.0.1	ads.centralmedia.ws
127.0.0.1	c.centralmedia.ws
127.0.0.1	count.cc
127.0.0.1	topx.cc
127.0.0.1	sidefind.com
127.0.0.1	thenewsearch.com
127.0.0.1	new-search.net
127.0.0.1	x-google.net
127.0.0.1	adultgambling.org
127.0.0.1	bitchesonline.net
127.0.0.1	girls4rent.net
127.0.0.1	usefullsoft.net
127.0.0.1	livegambling.com
127.0.0.1	adultsgames.net
127.0.0.1	easyantispy.com
127.0.0.1	spybotremover.net
127.0.0.1	winprotect.net
127.0.0.1	funny-girls.com
127.0.0.1	winmsn.com
127.0.0.1	oneclicksearches.com
127.0.0.1	bestweblinks.com
127.0.0.1	iqsearch.net
127.0.0.1	dumpserv.com
127.0.0.1	helpyoursearch.com
127.0.0.1	sgrunt.biz
127.0.0.1	yeak.net
127.0.0.1	u45.cx
127.0.0.1	u46.cx
127.0.0.1	u47.cc
127.0.0.1	u48.cc
127.0.0.1	sfonditalia.biz
127.0.0.1	realarea.biz
127.0.0.1	archiviosex.net
127.0.0.1	agava.com
127.0.0.1	agava.ru
127.0.0.1	hut1.ru
127.0.0.1	hu15.ru
127.0.0.1	winfixer.com
127.0.0.1	3721.com
127.0.0.1	easysearchingtips.com
127.0.0.1	fine-search.net
127.0.0.1	noproblemsurf.com
127.0.0.1	pcspyremover.com
127.0.0.1	search-motor.com
127.0.0.1	searchwhatuwant.com
127.0.0.1	ad25.com
127.0.0.1	ad45.com
127.0.0.1	ad77.com
127.0.0.1	ad86.com
127.0.0.1	full-search.net
127.0.0.1	go2-search.com
127.0.0.1	onemoresearch.net
127.0.0.1	search-777.com
127.0.0.1	search-to-find.com
127.0.0.1	search-what.net
127.0.0.1	winshow.biz
127.0.0.1	lookfor.cc
127.0.0.1	looking-for.cc
127.0.0.1	tgp-4-you.com
127.0.0.1	veryeasysearch.com
127.0.0.1	010402.com
127.0.0.1	20x2p.com
127.0.0.1	db105.com
127.0.0.1	ga31.com
127.0.0.1	mpeg-look.com
127.0.0.1	n-udd.com
127.0.0.1	p-uud.com
127.0.0.1	porn-screen.com
127.0.0.1	rb37.com
127.0.0.1	t058.com
127.0.0.1	u-239.com
127.0.0.1	v-224.com
127.0.0.1	trackhits.cc
127.0.0.1	tracktraff.cc
127.0.0.1	power-cleaner.com
127.0.0.1	yoursitebar.com
127.0.0.1	ysbweb.com
127.0.0.1	www.ysbweb.com
127.0.0.1	installcash.com
127.0.0.1	toolbarcash.com
127.0.0.1	enjoywebsurf.com
127.0.0.1	msnguard.cc
127.0.0.1	searchclick.cc
127.0.0.1	havy.biz
127.0.0.1	ewizard.cc
127.0.0.1	4klm.com
127.0.0.1	camup.net
127.0.0.1	bdsmlibrary.net
127.0.0.1	n-glx.s-redirect.com
127.0.0.1	aaasexypics.com
127.0.0.1	allforadult.com
127.0.0.1	autoescrowpay.com
127.0.0.1	awmcash.biz
127.0.0.1	awmdabest.com
127.0.0.1	buldog-stats.com
127.0.0.1	counter.sexmaniack.com
127.0.0.1	fregat.drocherway.com
127.0.0.1	greg-tut.com
127.0.0.1	iframe.biz
127.0.0.1	megapornix.com
127.0.0.1	newiframe.biz
127.0.0.1	nylonsexy.com
127.0.0.1	pizdato.biz
127.0.0.1	sexfiles.nu
127.0.0.1	slutmania.biz
127.0.0.1	sp2fucked.biz
127.0.0.1	toolbarpartner.com
127.0.0.1	vesbiz.biz
127.0.0.1	virgin-tgp.net
127.0.0.1	vparivalka.com
127.0.0.1	x.full-tgp.net
127.0.0.1	toolbar.cc
127.0.0.1	himen.biz
127.0.0.1	msupdater.net
127.0.0.1	www.msupdater.net
127.0.0.1	1800searchonline.com
127.0.0.1	www.1800searchonline.com
127.0.0.1	1stsearchportal.com
127.0.0.1	www.1stsearchportal.com
127.0.0.1	24-7searching-and-more.com
127.0.0.1	www.24-7searching-and-more.com
127.0.0.1	971searchbox.com
127.0.0.1	www.971searchbox.com
127.0.0.1	aaawebfinder.com
127.0.0.1	www.aaawebfinder.com
127.0.0.1	ampmsearch.com
127.0.0.1	www.ampmsearch.com
127.0.0.1	clickhere4search.com
127.0.0.1	www.clickhere4search.com
127.0.0.1	clicktomakeasearch.com
127.0.0.1	www.clicktomakeasearch.com
127.0.0.1	directsearchzone.com
127.0.0.1	www.directsearchzone.com
127.0.0.1	easysearch4you.com
127.0.0.1	www.easysearch4you.com
127.0.0.1	enterthesearch.com
127.0.0.1	www.enterthesearch.com
127.0.0.1	esearch2005.com
127.0.0.1	www.esearch2005.com
127.0.0.1	eza1netsearch.com
127.0.0.1	www.eza1netsearch.com
127.0.0.1	ezwebsearching.com
127.0.0.1	www.ezwebsearching.com
127.0.0.1	globalefinder.com
127.0.0.1	www.globalefinder.com
127.0.0.1	go2realsearch.com
127.0.0.1	www.go2realsearch.com
127.0.0.1	myseachexplorer.com
127.0.0.1	www.myseachexplorer.com
127.0.0.1	quicksearch360.com
127.0.0.1	www.quicksearch360.com
127.0.0.1	s1s1s1search.com
127.0.0.1	www.s1s1s1search.com
127.0.0.1	search101online.com
127.0.0.1	www.search101online.com
127.0.0.1	search123forme.com
127.0.0.1	www.search123forme.com
127.0.0.1	search345quest.com
127.0.0.1	www.search345quest.com
127.0.0.1	searchmiracle.com
127.0.0.1	www.searchmiracle.com
127.0.0.1	searchtheworld4you.com
127.0.0.1	www.searchtheworld4you.com
127.0.0.1	searchwebzone.com
127.0.0.1	www.searchwebzone.com
127.0.0.1	seektheglobe.com
127.0.0.1	www.seektheglobe.com
127.0.0.1	sitesearchcentral.com
127.0.0.1	www.sitesearchcentral.com
127.0.0.1	the818search-co.com
127.0.0.1	www.the818search-co.com
127.0.0.1	type2find.com
127.0.0.1	www.type2find.com
127.0.0.1	xosearchox.com
127.0.0.1	www.xosearchox.com
127.0.0.1	yoursearchspace.com
127.0.0.1	www.yoursearchspace.com
127.0.0.1	httpwwwads.com
127.0.0.1	www.httpwwwads.com
127.0.0.1	adshttp.com
127.0.0.1	www.adshttp.com
127.0.0.1	adsonwww.com
127.0.0.1	www.adsonwww.com
127.0.0.1	dnaads.com
127.0.0.1	www.dnaads.com
127.0.0.1	marketengines.com
127.0.0.1	www.marketengines.com
127.0.0.1	ad-w-a-r-e.com
127.0.0.1	www.ad-w-a-r-e.com
127.0.0.1	a-d-w-a-r-e.com
127.0.0.1	www.a-d-w-a-r-e.com
127.0.0.1	securityindex.net
127.0.0.1	www.securityindex.net
127.0.0.1	sexpicsporn.com
127.0.0.1	www.sexpicsporn.com
127.0.0.1	free-spybot.com
127.0.0.1	www.free-spybot.com
127.0.0.1	cashengines.com
127.0.0.1	www.cashengines.com
127.0.0.1	microsoftantispyware.net
127.0.0.1	www.microsoftantispyware.net
127.0.0.1	mircosoftantispy.com
127.0.0.1	www.mircosoftantispy.com
127.0.0.1	msantispy.com
127.0.0.1	www.msantispy.com
127.0.0.1	netspyprotector.com
127.0.0.1	www.netspyprotector.com
127.0.0.1	avforce.com
127.0.0.1	www.avforce.com
127.0.0.1	savehits.com
127.0.0.1	www.savehits.com
127.0.0.1	saveli.com
127.0.0.1	www.saveli.com
127.0.0.1	metastop.com
127.0.0.1	www.metastop.com
127.0.0.1	perlink.biz
127.0.0.1	www.perlink.biz
127.0.0.1	highdialer.com
127.0.0.1	www.highdialer.com
127.0.0.1	online-more.com
127.0.0.1	www.online-more.com
127.0.0.1	www.syserrors.com
127.0.0.1	www.vcodec.com
127.0.0.1	toolbartraff.biz
127.0.0.1	www.toolbartraff.biz
127.0.0.1	pcadprotector.cc
127.0.0.1	www.pcadprotector.cc
127.0.0.1	airtleworld.com
127.0.0.1	www.airtleworld.com
127.0.0.1	domaincar.com
127.0.0.1	www.domaincar.com
127.0.0.1	worldray.com
127.0.0.1	www.worldray.com
127.0.0.1	www5.worldray.com
127.0.0.1	www6.worldray.com
127.0.0.1	www.spytrooper.com
127.0.0.1	spytrooper.com
127.0.0.1	dl.ad-ware.cc
127.0.0.1	ad-ware.cc
127.0.0.1	downloads.adaware.cc
127.0.0.1	adaware.cc
127.0.0.1	hitscount.net
127.0.0.1	count.hitscount.net
127.0.0.1	fined.biz
127.0.0.1	de.ag
127.0.0.1	games.de.ag
127.0.0.1	www.games.de.ag
127.0.0.1	little-download.net
127.0.0.1	www.little-download.net
127.0.0.1	little-help.com
127.0.0.1	www.little-help.com
127.0.0.1	www.spyaxe.net
127.0.0.1	www.spyaxe.com
127.0.0.1	www.spyaxe.biz
127.0.0.1	www.malwarewipe.com
127.0.0.1	dl.malwarewipe.com
127.0.0.1	www.malwarewipeupdate.com
127.0.0.1	unionseek.com
127.0.0.1	www.unionseek.com
127.0.0.1	sirh0t.blackhats.tc
127.0.0.1	blackhats.tc
127.0.0.1	www.blackhats.tc
127.0.0.1	ritztours.com
127.0.0.1	www.ritztours.com
127.0.0.1	flashflashmx.3322.org
127.0.0.1	3322.org
127.0.0.1	www.3322.org
127.0.0.1	jupitersatellites.biz
127.0.0.1	www.jupitersatellites.biz
127.0.0.1	yops.biz
127.0.0.1	www.yops.biz
127.0.0.1	goldengr.hypermart.net
127.0.0.1	web-nexus.net
127.0.0.1	safe-sales.biz
127.0.0.1	www.safe-sales.biz
127.0.0.1	jerrynews.com
127.0.0.1	www.jerrynews.com
127.0.0.1	Teslaplus.com
127.0.0.1	www.Teslaplus.com
127.0.0.1	WorldAntiSpy.com
127.0.0.1	www.WorldAntiSpy.com
127.0.0.1	www.securitycaution.com
127.0.0.1	securitycaution.com
127.0.0.1	adservs.com
127.0.0.1	csx.adservs.com
127.0.0.1	www.csx.adservs.com
127.0.0.1	toolbarbest.biz
127.0.0.1	www.toolbarbest.biz
127.0.0.1	game4all.biz
127.0.0.1	www.game4all.biz
127.0.0.1	wm.kannylizaciya.info
127.0.0.1	www.wm.kannylizaciya.info
127.0.0.1	wm.buhartes.info
127.0.0.1	www.wm.buhartes.info
127.0.0.1	login.fric.cn
127.0.0.1	www.login.fric.cn
127.0.0.1	xsremover.com
127.0.0.1	www.xsremover.com
127.0.0.1	spydeface.com
127.0.0.1	www.spydeface.com
127.0.0.1	alfacleaner.com
127.0.0.1	www.alfacleaner.com
127.0.0.1	innovagest2000.com
127.0.0.1	www.innovagest2000.com
127.0.0.1	www.thespyguard.com
127.0.0.1	thespyguard.com
127.0.0.1	www.adwarepunisher.com
127.0.0.1	adwarepunisher.com
127.0.0.1	www.spyiblock.com
127.0.0.1	spyiblock.com
127.0.0.1	www.uvu-channel.com
127.0.0.1	uvu-channel.com
127.0.0.1	www.hachimitsu-lemon.com
127.0.0.1	hachimitsu-lemon.com
127.0.0.1	SEARCHTOFIND.NET
127.0.0.1	www.SEARCHTOFIND.NET
127.0.0.1	www.pestrap.com
127.0.0.1	pestrap.com
127.0.0.1	uptodatesecurity.com
127.0.0.1	www.uptodatesecurity.com
127.0.0.1	thinstall.abetterinternet.com
127.0.0.1	www.3abetterinternet.com
127.0.0.1	download.abetterinternet.com
127.0.0.1	www.abetterinternet.com
127.0.0.1	qmex.psyche-evolution.com
127.0.0.1	www.qmex.psyche-evolution.com
127.0.0.1	core.psyche-evolution.com
127.0.0.1	www.core.psyche-evolution.com
127.0.0.1	1stantivirus.com
127.0.0.1	www.1stantivirus.com
127.0.0.1	scanandrepair.com
127.0.0.1	www.scanandrepair.com
127.0.0.1	uydsiygeds.com
127.0.0.1	www.uydsiygeds.com
127.0.0.1	pesttrap.com
127.0.0.1	www.pesttrap.com
127.0.0.1	adwarebazooka.com
127.0.0.1	get.adwarebazooka.com
127.0.0.1	www.adwarebazooka.com
127.0.0.1	kliksoftware.com
127.0.0.1	www.kliksoftware.com
127.0.0.1	hitvirus.com
127.0.0.1	get.hitvirus.com
127.0.0.1	www.hitvirus.com
127.0.0.1	promo.dollarrevenue.com
127.0.0.1	www.promo.dollarrevenue.com
127.0.0.1	maxifile.com
127.0.0.1	www.maxifile.com
127.0.0.1	targetsaver.com
127.0.0.1	www.targetsaver.com
127.0.0.1	dl.targetsaver.com
127.0.0.1	www.dl.targetsaver.com
127.0.0.1	nonameforthisdomain.com
127.0.0.1	www.nonameforthisdomain.com
127.0.0.1	hypoteches.com
127.0.0.1	www.hypoteches.com
127.0.0.1	www.earthllnk.net
127.0.0.1	earthllnk.net
127.0.0.1	hostance.net
127.0.0.1	www.hostance.net
127.0.0.1	my-dedik-one.com
127.0.0.1	www.my-dedik-one.com
127.0.0.1	10sek.com
127.0.0.1	www.10sek.com
127.0.0.1	6sek.com
127.0.0.1	www.6sek.com
127.0.0.1	cashdeluxe.net
127.0.0.1	www.cashdeluxe.net
127.0.0.1	stats.cashdeluxe.net
127.0.0.1	www.stats.cashdeluxe.net
127.0.0.1	www.2006ooo.com
127.0.0.1	www.spyware-stop.com
127.0.0.1	spyware-stop.com
127.0.0.1	www.SpyShield.org
127.0.0.1	SpyShield.org
127.0.0.1	utils.winfixer.com
127.0.0.1	www.utils.winfixer.com
127.0.0.1	toolbarbucks.biz
127.0.0.1	www.toolbarbucks.biz
127.0.0.1	derklaif.biz
127.0.0.1	www.derklaif.biz
127.0.0.1	www.v-codec.com
127.0.0.1	v-codec.com
127.0.0.1	www.emediacodec.com
127.0.0.1	emediacodec.com
127.0.0.1	www.popentertain.com
127.0.0.1	popentertain.com
127.0.0.1	softwareprofit.com
127.0.0.1	www.softwareprofit.com
127.0.0.1	de.winantivirus.com
127.0.0.1	download.winantivirus.com
127.0.0.1	winantivirus.com
127.0.0.1	www.winantivirus.com
127.0.0.1	offers.bullseye-network.com
127.0.0.1	www.offers.bullseye-network.com
127.0.0.1	bullseye-network.com
127.0.0.1	www.bullseye-network.com
127.0.0.1	sponsor2.ucmore.com
127.0.0.1	www.sponsor2.ucmore.com
127.0.0.1	hostthesky.com
127.0.0.1	www.hostthesky.com
127.0.0.1	dbdecicated.com
127.0.0.1	www.dbdecicated.com
127.0.0.1	readagreement.net
127.0.0.1	www.readagreement.net
127.0.0.1	gl.secdep.info
127.0.0.1	www.gl.secdep.info
127.0.0.1	spyfalcon.com
127.0.0.1	www.spyfalcon.com
127.0.0.1	spyfalconupdate.com
127.0.0.1	www.spyfalconupdate.com
127.0.0.1	spy-shield.com
127.0.0.1	www.spy-shield.com
127.0.0.1	winnanny.com
127.0.0.1	www.winnanny.com
127.0.0.1	winsoftware.com
127.0.0.1	www.winsoftware.com
127.0.0.1	winfirewall.com
127.0.0.1	www.winfirewall.com
127.0.0.1	winantispyware.com
127.0.0.1	www.winantispyware.com
127.0.0.1	udefender.com
127.0.0.1	www.udefender.com
127.0.0.1	bravesentry.com
127.0.0.1	www.bravesentry.com
127.0.0.1	content.dollarrevenue.com
127.0.0.1	www.content.dollarrevenue.com
127.0.0.1	toolbar.azebar.com
127.0.0.1	www.toolbar.azebar.com
127.0.0.1	traffsale1.biz
127.0.0.1	www.traffsale1.biz
127.0.0.1	spywaredisinfector.com
127.0.0.1	www.spywaredisinfector.com
127.0.0.1	SpyCut.com
127.0.0.1	www.SpyCut.com
127.0.0.1	almanah.biz
127.0.0.1	www.almanah.biz
127.0.0.1	antispydns.biz
127.0.0.1	www.antispydns.biz
127.0.0.1	spyaxeupdate.com
127.0.0.1	www.spyaxeupdate.com
127.0.0.1	malwarewipesupport.com
127.0.0.1	www.malwarewipesupport.com
127.0.0.1	remedyantispy.com
127.0.0.1	www.remedyantispy.com
127.0.0.1	systemstable.com
127.0.0.1	www.systemstable.com
127.0.0.1	whoisprivacyprotect.com
127.0.0.1	www.whoisprivacyprotect.com
127.0.0.1	prime.webhancer.com
127.0.0.1	www.prime.webhancer.com
127.0.0.1	webhancer.com
127.0.0.1	www.webhancer.com
127.0.0.1	dr.webhancer.com
127.0.0.1	www.dr.webhancer.com
127.0.0.1	dr2.webhancer.com
127.0.0.1	www.dr2.webhancer.com
127.0.0.1	www.onli-ne.com
127.0.0.1	spycontra.com
127.0.0.1	www.spycontra.com
127.0.0.1	anti-virus-pro.com
127.0.0.1	www.anti-virus-pro.com
127.0.0.1	check.jupitersatellites.biz
127.0.0.1	www.check.jupitersatellites.biz
127.0.0.1	necessaryupdates.com
127.0.0.1	www.necessaryupdates.com
127.0.0.1	bestworldgirls-for-u.net
127.0.0.1	www.bestworldgirls-for-u.net
127.0.0.1	stejax.pl
127.0.0.1	www.stejax.pl
127.0.0.1	kitehosting.com
127.0.0.1	www.kitehosting.com
127.0.0.1	ware2006.com
127.0.0.1	www.ware2006.com
127.0.0.1	filestore.com
127.0.0.1	www.filestore.com
127.0.0.1	systemupdates.net
127.0.0.1	www.systemupdates.net
127.0.0.1	logs.vapochille.com
127.0.0.1	www.logs.vapochille.com
127.0.0.1	goldenfreehost.com
127.0.0.1	www.goldenfreehost.com
127.0.0.1	todaywarnings.com
127.0.0.1	www.todaywarnings.com
127.0.0.1	spywarequake.com
127.0.0.1	spywarequake.info
127.0.0.1	www.spywarequake.info
127.0.0.1	www.spywarequake.com
127.0.0.1	download2.spywarequake.com
127.0.0.1	download3.spywarequake.com
127.0.0.1	download4.spywarequake.com
127.0.0.1	download5.spywarequake.com
127.0.0.1	download7.spywarequake.com
127.0.0.1	download8.spywarequake.com
127.0.0.1	download9.spywarequake.com
127.0.0.1	download10.spywarequake.com
127.0.0.1	download11.spywarequake.com
127.0.0.1	download12.spywarequake.com
127.0.0.1	download13.spywarequake.com
127.0.0.1	download15.spywarequake.com
127.0.0.1	updates.spywarequake.com
127.0.0.1	urgentsystemupdate.com
127.0.0.1	www.urgentsystemupdate.com
127.0.0.1	dl2.spywarestrike.com
127.0.0.1	dl3.spywarestrike.com
127.0.0.1	dl4.spywarestrike.com
127.0.0.1	dl5.spywarestrike.com
127.0.0.1	dl6.spywarestrike.com
127.0.0.1	dl7.spywarestrike.com
127.0.0.1	dl8.spywarestrike.com
127.0.0.1	nospywaresoft.com
127.0.0.1	spywarestrike.com
127.0.0.1	www.nospywaresoft.com
127.0.0.1	www.spywarestrike.com
127.0.0.1	spyaxesupport.com
127.0.0.1	www.spyaxesupport.com
127.0.0.1	download3.spyaxe.com
127.0.0.1	download4.spyaxe.com
127.0.0.1	download5.spyaxe.com
127.0.0.1	download6.spyaxe.com
127.0.0.1	dl2.spyfalcon.com
127.0.0.1	dl3.spyfalcon.com
127.0.0.1	dl4.spyfalcon.com
127.0.0.1	dl5.spyfalcon.com
127.0.0.1	dl9.spyfalcon.com
127.0.0.1	dl10.spyfalcon.com
127.0.0.1	dl16.spyfalcon.com
127.0.0.1	www.sgrunt.biz
127.0.0.1	traffbest.biz
127.0.0.1	www.traffbest.biz
127.0.0.1	securityfeature.com
127.0.0.1	www.securityfeature.com
127.0.0.1	pimasoft.com
127.0.0.1	www.pimasoft.com
127.0.0.1	blackhawksoftware.com
127.0.0.1	www.blackhawksoftware.com
127.0.0.1	spy-sniper.com
127.0.0.1	www.spy-sniper.com
127.0.0.1	safetydefender.com
127.0.0.1	www.safetydefender.com
127.0.0.1	securitywarnings.net
127.0.0.1	www.securitywarnings.net
127.0.0.1	urgentsystemupdate.biz
127.0.0.1	www.urgentsystemupdate.biz
127.0.0.1	antispylab.com
127.0.0.1	www.antispylab.com
127.0.0.1	spywaresheriff.com
127.0.0.1	www.spywaresheriff.com
127.0.0.1	allmegabucks.com
127.0.0.1	www.allmegabucks.com
127.0.0.1	rizalof.com
127.0.0.1	www.rizalof.com
127.0.0.1	rc.rizalof.com
127.0.0.1	media-codec.com
127.0.0.1	www.media-codec.com
127.0.0.1	SpywareScraper.com
127.0.0.1	www.SpywareScraper.com
127.0.0.1	crystalysmedia.com
127.0.0.1	www.crystalysmedia.com
127.0.0.1	180solutions.com
127.0.0.1	cts.180solutions.com
127.0.0.1	bis.180solutions.com
127.0.0.1	downloads.180solutions.com
127.0.0.1	uploads.180solutions.com
127.0.0.1	installs.180solutions.com
127.0.0.1	config.180solutions.com
127.0.0.1	ping.180solutions.com
127.0.0.1	tv.180solutions.com
127.0.0.1	nowhere.180solutions.com
127.0.0.1	www.180solutions.com
127.0.0.1	180searchassistant.com
127.0.0.1	www.180searchassistant.com
127.0.0.1	theguardservices.com
127.0.0.1	www.theguardservices.com
127.0.0.1	securitybulletin.net
127.0.0.1	www.securitybulletin.net
127.0.0.1	www.supernet.speedserv.com
127.0.0.1	spyonthis.net
127.0.0.1	download.spyonthis.net
127.0.0.1	www.spyonthis.net
127.0.0.1	hijack-this.net
127.0.0.1	www.hijack-this.net
127.0.0.1	errorsafe.com
127.0.0.1	de.errorsafe.com
127.0.0.1	download.errorsafe.com
127.0.0.1	www.errorsafe.com
127.0.0.1	amaena.com
127.0.0.1	trial.updates.winsoftware.com
127.0.0.1	instlog.winfixer.com
127.0.0.1	winfixer2006.com
127.0.0.1	www.winfixer2006.com
127.0.0.1	webtopsecurity.com
127.0.0.1	www.webtopsecurity.com
127.0.0.1	traff5all.biz
127.0.0.1	www.traff5all.biz
127.0.0.1	1-extreme.biz
127.0.0.1	www.1-extreme.biz
127.0.0.1	download.bravesentry.com
127.0.0.1	www.download.bravesentry.com
127.0.0.1	evko.biz
127.0.0.1	www.evko.biz
127.0.0.1	lavasoftupdate.com
127.0.0.1	www.lavasoftupdate.com
127.0.0.1	download.secureyournet.biz
127.0.0.1	www.download.secureyournet.biz
127.0.0.1	secureyournet.biz
127.0.0.1	www.secureyournet.biz
127.0.0.1	windupdates.com
127.0.0.1	asdbiz.biz
127.0.0.1	www.asdbiz.biz
127.0.0.1	spywarelabs.com
127.0.0.1	www.spywarelabs.com
127.0.0.1	traffweb1.biz
127.0.0.1	www.traffweb1.biz
127.0.0.1	newtoolbar.biz
127.0.0.1	www.newtoolbar.biz
127.0.0.1	buytraff.biz
127.0.0.1	www.buytraff.biz
127.0.0.1	safetyuptodate.com
127.0.0.1	www.safetyuptodate.com
127.0.0.1	crazywinnings.com
127.0.0.1	frame.crazywinnings.com
127.0.0.1	www.crazywinnings.com
127.0.0.1	topconverting.com
127.0.0.1	www.topconverting.com
127.0.0.1	casalemedia.com
127.0.0.1	b.casalemedia.com
127.0.0.1	www.casalemedia.com
127.0.0.1	addictivetechnologies.com
127.0.0.1	www.addictivetechnologies.com
127.0.0.1	addictivetechnologies.net
127.0.0.1	www.addictivetechnologies.net
127.0.0.1	admin2cash.biz
127.0.0.1	www.admin2cash.biz
127.0.0.1	advcash.biz
127.0.0.1	www.advcash.biz
127.0.0.1	all4internet.com
127.0.0.1	www.all4internet.com
127.0.0.1	bettersearch.biz
127.0.0.1	www.bettersearch.biz
127.0.0.1	c4tdownload.com
127.0.0.1	www.c4tdownload.com
127.0.0.1	clickspring.net
127.0.0.1	www.clickspring.net
127.0.0.1	contentmatch.net
127.0.0.1	www.contentmatch.net
127.0.0.1	dialer-shop.com
127.0.0.1	www.dialer-shop.com
127.0.0.1	dialoff.com
127.0.0.1	www.dialoff.com
127.0.0.1	energy-factor.com
127.0.0.1	www.energy-factor.com
127.0.0.1	hardcorefantasyland.com
127.0.0.1	www.hardcorefantasyland.com
127.0.0.1	hardfootballbabes.com
127.0.0.1	www.hardfootballbabes.com
127.0.0.1	linkautomatici.com
127.0.0.1	www.linkautomatici.com
127.0.0.1	master69.biz
127.0.0.1	www.master69.biz
127.0.0.1	master70.biz
127.0.0.1	www.master70.biz
127.0.0.1	master71.biz
127.0.0.1	www.master71.biz
127.0.0.1	mcdial.biz
127.0.0.1	www.mcdial.biz
127.0.0.1	mt-download.com
127.0.0.1	www.mt-download.com
127.0.0.1	my-teensex.com
127.0.0.1	overpro.com
127.0.0.1	private-dialer.biz
127.0.0.1	private-iframe.biz
127.0.0.1	redfunny.com
127.0.0.1	scoobidoo.com
127.0.0.1	skoobidoo.com
127.0.0.1	sexvideopro.com
127.0.0.1	storage-tasp.com
127.0.0.1	xbeta69.com
127.0.0.1	securityuptodate.net
127.0.0.1	www.securityuptodate.net
127.0.0.1	troonety.biz
127.0.0.1	www.troonety.biz
127.0.0.1	zurrusco.com
127.0.0.1	www.zurrusco.com
127.0.0.1	breenten.biz
127.0.0.1	www.breenten.biz
127.0.0.1	votreenton.biz
127.0.0.1	www.votreenton.biz
127.0.0.1	ozonung.biz
127.0.0.1	www.ozonung.biz
127.0.0.1	digikeygen.com
127.0.0.1	www.digikeygen.com
127.0.0.1	5starvideos.com
127.0.0.1	www.5starvideos.com
127.0.0.1	moviereality.com
127.0.0.1	www.moviereality.com
127.0.0.1	perfectedsecurity.com
127.0.0.1	www.perfectedsecurity.com
127.0.0.1	securityprecaution.net
127.0.0.1	www.securityprecaution.net
127.0.0.1	securityupdatesite.com
127.0.0.1	www.securityupdatesite.com
127.0.0.1	dns-look-up.com
127.0.0.1	www.dns-look-up.com
127.0.0.1	ayb.dns-look-up.com
127.0.0.1	search200.com
127.0.0.1	www.search200.com
127.0.0.1	404dns.com
127.0.0.1	www.404dns.com
127.0.0.1	mcboo.com
127.0.0.1	dr.mcboo.com
127.0.0.1	www.mcboo.com
127.0.0.1	appealcircuit.com
127.0.0.1	www.appealcircuit.com
127.0.0.1	balotierra.com
127.0.0.1	www.balotierra.com
127.0.0.1	oldflock.com
127.0.0.1	www.oldflock.com
127.0.0.1	pornmagpass.com
127.0.0.1	www.pornmagpass.com
127.0.0.1	dailypornmag.com
127.0.0.1	www.dailypornmag.com
127.0.0.1	babespornmag.com
127.0.0.1	www.babespornmag.com
127.0.0.1	teenspornmag.com
127.0.0.1	www.teenspornmag.com
127.0.0.1	maturespornmag.com
127.0.0.1	www.maturespornmag.com
127.0.0.1	hardcorepornmag.com
127.0.0.1	www.hardcorepornmag.com
127.0.0.1	gayspornmag.com
127.0.0.1	www.gayspornmag.com
127.0.0.1	topsecuritysite.net
127.0.0.1	www.topsecuritysite.net
127.0.0.1	bestsafetyguide.net
127.0.0.1	www.bestsafetyguide.net
127.0.0.1	searchweb2.com
127.0.0.1	www.searchweb2.com
127.0.0.1	www.lop.com
127.0.0.1	vidscodec.com
127.0.0.1	www.vidscodec.com
127.0.0.1	newvidscodec.net
127.0.0.1	www.newvidscodec.net
127.0.0.1	media-codec.net
127.0.0.1	www.media-codec.net
127.0.0.1	mediacodec.net
127.0.0.1	www.mediacodec.net
127.0.0.1	imediacodec.com
127.0.0.1	www.imediacodec.com
127.0.0.1	emcodec.com
127.0.0.1	www.emcodec.com
127.0.0.1	vicodec.com
127.0.0.1	www.vicodec.com
127.0.0.1	xpasswordmanager.com
127.0.0.1	www.xpasswordmanager.com
127.0.0.1	cracks4all.com
127.0.0.1	www.cracks4all.com
127.0.0.1	media-motor.net
127.0.0.1	mmm.media-motor.net
127.0.0.1	bins.media-motor.net
127.0.0.1	bins2.media-motor.net
127.0.0.1	logs.media-motor.net
127.0.0.1	mmohsix.com
127.0.0.1	www.mmohsix.com
127.0.0.1	pops.mmohsix.com
127.0.0.1	megalocast.net
127.0.0.1	js.megalocast.net
127.0.0.1	www.megalocast.net
127.0.0.1	dl.web-nexus.net
127.0.0.1	movies-etc.com
127.0.0.1	cdn.movies-etc.com
127.0.0.1	cdn2.movies-etc.com
127.0.0.1	internet-optimizer.com
127.0.0.1	www.internet-optimizer.com
127.0.0.1	888.com
127.0.0.1	www.888.com
127.0.0.1	images.888.com
127.0.0.1	surfsidekick.com
127.0.0.1	www.surfsidekick.com
127.0.0.1	sdl.surfsidekick.com
127.0.0.1	kmpads.com
127.0.0.1	www.kmpads.com
127.0.0.1	ads.kmpads.com
127.0.0.1	zipcodec.com
127.0.0.1	www.zipcodec.com
127.0.0.1	ibankis.org
127.0.0.1	www.ibankis.org
127.0.0.1	adwarefinder.com
127.0.0.1	www.adwarefinder.com
127.0.0.1	nbcsearch.com
127.0.0.1	www.nbcsearch.com
127.0.0.1	TBCODE.COM
127.0.0.1	www.TBCODE.COM
127.0.0.1	1987324.com
127.0.0.1	www.1987324.com
127.0.0.1	www.archiviosex.net
127.0.0.1	sysnetsecurity.com
127.0.0.1	www.sysnetsecurity.com
127.0.0.1	sysnetsecurity.net
127.0.0.1	www.sysnetsecurity.net
127.0.0.1	error404site.com
127.0.0.1	www.error404site.com
127.0.0.1	error404site.net
127.0.0.1	www.error404site.net
127.0.0.1	wm.vother.info
127.0.0.1	www.wm.vother.info
127.0.0.1	vother.info
127.0.0.1	www.vother.info
127.0.0.1	wm.komforochka.info
127.0.0.1	www.wm.komforochka.info
127.0.0.1	komforochka.info
127.0.0.1	www.komforochka.info
127.0.0.1	hervam.com
127.0.0.1	www.hervam.com
127.0.0.1	www.nunah.info
127.0.0.1	nunah.info
127.0.0.1	www.searchmeup.com
127.0.0.1	www.searchcolours.com
127.0.0.1	searchcolours.com
127.0.0.1	brodbfm.net
127.0.0.1	www.brodbfm.net
127.0.0.1	easybestdeals.com
127.0.0.1	www.easybestdeals.com
127.0.0.1	spywareno.com
127.0.0.1	www.spywareno.com
127.0.0.1	spyheal.com
127.0.0.1	www.spyheal.com
127.0.0.1	www.streamxs.ws
127.0.0.1	streamxs.ws
127.0.0.1	asta-killer.com
127.0.0.1	newmediaidea.com
127.0.0.1	www.newmediaidea.com
127.0.0.1	syssecuritysite.net
127.0.0.1	www.syssecuritysite.net
127.0.0.1	aulde.net
127.0.0.1	www.aulde.net
127.0.0.1	searchdrive.info
127.0.0.1	wwwsearchdrive.info
127.0.0.1	download.bardownload.com
127.0.0.1	www.download.bardownload.com
127.0.0.1	bardownload.com
127.0.0.1	www.bardownload.com
127.0.0.1	intcodec.com
127.0.0.1	www.intcodec.com
127.0.0.1	newupdates.lzio.com
127.0.0.1	uptofind.com
127.0.0.1	www.uptofind.com
127.0.0.1	homelandnetwork.COM
127.0.0.1	www.homelandnetwork.COM
127.0.0.1	getmirar.com
127.0.0.1	mirarsearch.com
127.0.0.1	net-nucleus.com
127.0.0.1	zenotecnico.com
127.0.0.1	www.zenotecnico.com
127.0.0.1	zenotecnico2.com
127.0.0.1	www.zenotecnico2.com
127.0.0.1	surfaccuracy.com
127.0.0.1	www.surfaccuracy.com
127.0.0.1	cache.surfaccuracy.com
127.0.0.1	www.cache.surfaccuracy.com
127.0.0.1	www.the.007guard.com
127.0.0.1	the.007guard.com
127.0.0.1	install.007guard.com
127.0.0.1	www.install.007guard.com
127.0.0.1	007guard.com
127.0.0.1	www.007guard.com
127.0.0.1	feeds.2search.com
127.0.0.1	www.feeds.2search.com
127.0.0.1	2search.com
127.0.0.1	www.2search.com
127.0.0.1	feeds2.2search.org
127.0.0.1	www.feeds2.2search.org
127.0.0.1	2search.org
127.0.0.1	www.2search.org
127.0.0.1	zangocash.com
127.0.0.1	www.zangocash.com
127.0.0.1	static.zangocash.com
127.0.0.1	www.static.zangocash.com
127.0.0.1	public.zangocash.com
127.0.0.1	www.public.zangocash.com
127.0.0.1	code.ignphrases.com
127.0.0.1	www.ignphrases.com
127.0.0.1	ignphrases.com
127.0.0.1	www.igetnet.com
127.0.0.1	igetnet.com
127.0.0.1	www.topbrowsing.com
127.

Utilisateur anonyme · Answer

tu n'as pas choisis l'option 2

Niroors · Answer

Si j'ai bien choisi l'option 2 de  SmitFraudFix en mode sans echec pourtant!

Utilisateur anonyme · Answer

refait hijack stp

Niroors · Answer

Logfile of HijackThis v1.99.1
Scan saved at 22:02:16, on 14/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\MSN Messenger\livecall.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Guyader\Bureau	est.exe.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Muscbrigade] c:\Musicbrigade\Musicbrigade.exe check
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [fsc-reminder.exe] C:\WINDOWSeminder\fsc-reminder.exe 2454176 6
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe

Utilisateur anonyme · Answer

refais SmitFraudFix option1

Niroors · Answer

SmitFraudFix v2.240

Rapport fait à 22:28:00,28, 14/10/2007
Executé à partir de C:\Documents and Settings\Guyader\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\MSN Messenger\livecall.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Guyader


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Guyader\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Guyader\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
 

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"appinit_dlls"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Realtek RTL8139/810x Family Fast Ethernet NIC - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1
DNS Server Search Order: 0.0.0.0

HKLM\SYSTEM\CCS\Services\Tcpip\..\{96292FA9-E2BB-48A0-84D6-A0C777181D4B}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\..\{96292FA9-E2BB-48A0-84D6-A0C777181D4B}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\..\{96292FA9-E2BB-48A0-84D6-A0C777181D4B}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Utilisateur anonyme · Answer

relance hijack
et coche ceci
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
	O4 - HKLM\..\Run: [Muscbrigade] c:\Musicbrigade\Musicbrigade.exe check
	O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
	O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
	O4 - HKCU\..\Run: [fsc-reminder.exe] C:\WINDOWS\reminder\fsc-reminder.exe 2454176 6
ensuite clic sur fix checked

ensuite supprime tout ce que je t'ai fait télécharger 
redémarre ton pc et dit moi si tout est ok
à+

Niroors · Answer

ça y est c'est fait. Je pense que c'est bon ça marche en tout cas je n'ai plus reçu d'alert d'avast. Bon ben si tu pense que c'est fini je te fais confiance. Merci beaucoup d'avoir pris le temps de t'occuper de mon probleme c'est très simpa de ta part.

Aide Virus Win32:Renos-AL - Page 2

Discussions similaires

Newsletters