On s'est introduit dans mon pc !

Question

Bonjour,

Après quelques problèmes avec mon pc (windows update impossible, fichiers dont l'accès est refusé en tant qu'admin, beaucoup de fichiers inaccessibles lors du scan antivirus dont énormément dans all users...) j'ai commencé a trouvé cela bizarre et j'ai fais des fouilles plus poussées en mode sans échec. 
C'est là que je me suis aperçue que quelqu'un s'était certainement introduit dans mon pc  car tout mes fichiers perso et certains fichiers système ne m'appartenaient plus je n'étais plus propriétaire de tout ces fichiers et il y avait une voire plusieurs SID qui en avaient le controle total !!
Je mets mon log hijackthis tout de suite en espérant qu'un expert de la sécurité pourra m'aider à éclaircir tout ça !!
Merci !

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:20:24, on 08/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\HT\bonjour.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.update.microsoft.com/windowsupdate/v6/default.aspx
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset
od32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-21-4266887638-3484514902-1709864122-500\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background (User '?')
O4 - HKUS\S-1-5-21-4266887638-3484514902-1709864122-500\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User '?')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin
pjpi160_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin
pjpi160_02.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{5231FA0F-B244-420D-A4B7-4BB105FA3BB2}: NameServer = 212.27.54.252
O17 - HKLM\System\CS1\Services\Tcpip\..\{5231FA0F-B244-420D-A4B7-4BB105FA3BB2}: NameServer = 212.27.54.252
O17 - HKLM\System\CS2\Services\Tcpip\..\{5231FA0F-B244-420D-A4B7-4BB105FA3BB2}: NameServer = 212.27.54.252
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - C:\Program Files\Eset
od32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

Klaïde · Answer

Je ne m'y connais pas avec le logiciel Hijackthis... Tout ce que je peux dire, c'est que tu t'es fait hacker... Donc que ton ordi n'etait pas réelement bien protégé... Désolé de ce qui t'arrive.

-reb- · Answer

Merci de ta compassion Klaïde ;)
J'espère que quelqu'un pourra justement m'expliquer a quel niveau mon pc est vulnérable et comment cela est possible de s'introduire chez quelqu'un et s'approprier ces fichiers !! 
Je suis trop dégouttée on a violé mon intimité aidez moi !!!!

Klaïde · Answer

Bah, je crois que tout simplement que quelqu'un (je désapprouve totalement ce qu'il a fait) a exploité les failles de sécurité de ton systeme... Je n'en sais pas tellement plus que ça, désolé. J'espere qu'on t'aidera rapidement. 
A+

-reb- · Answer

Merci de me répondre déja !! Depuis que j'ai découvert ça je me suis renseignée et j'ai trouvé et corrigé des failles dans ma sécurité mais bon j'arrive toujours pas à me mettre à jour donc je reste vulnérable de toute façon...Sinon j'ai déja posé des questions sur ce sujet  mais j'ai jamais de réponses c'est un sujet taboo ou quoi lol ? 
Si jamais tu connais un expert tu peux me l'envoyer avec plaisir....

Klaïde · Answer

De rien :) Bah, non, je pense pas que ce soit un sujet tabou puisque je te reponds, hihi.(Franchement, je sais pas pourquoi ) Sinon, pour l'expert, j'en ai pas mais si j'en avais un, bien entendu, je lui aurai demandé de t'aider. 
Voilà
A+

Utilisateur anonyme · Answer

bonjour je ne suis pas expert mais je deja te dire que java n'est pas a jours ( c'est une premiere faille ) as tu un pare feu ? autre que celui de window car il ne vau rien
a l'aide d'hijackthis do a scan systeme only coche la case devant cette ligne et clic sur fix chequed
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) 
AS TU UN PARE FEU !

-reb- · Answer

Dans ce cas j'espère que d'autres te suivront pour répondre parce que j'ai pleins de questions !!!
A+ Merci

Utilisateur anonyme · Answer

essaie ca pour commencer
https://www.zebulon.fr/dossiers/tutoriaux/66-smitfraudfix.html

Utilisateur anonyme · Answer

ca fait longtemp que tu as kerio d'instaler ?

mial · Answer

Bonjour reb. Désolé pour toi. Il m'est arrivé la même chose pour moi il y a deux mois. Essaye spybot met-le à jour et lance un scan.

mial · Answer

RE. Bon ne connaissant rien en informatique je ne peut t'aider. Tout ce que je peut te dire c'est que la galère à durée plusieurs mois, jusqu'au jour ou j'ai téléchargé spyware secure (logiciel malveillant je me suis fait avoir) . Spybot m'a ressorti plein de spywares dont un dossier qui contenait le double de toutes mes données. Dans ce dossier qui ne m'appartenait pas j'ai pu constater que tous les anti-virus et anti-spywares était mentionnés (bizarre) Au final j'ai un ami informaticien qui m'a tout changé, ordinateur et disque dur. Mon ordi étant trés vieux. Noël avant l'heure. Bon courage j'espère que tu auras de l'aide plus efficace que moi.

Lyonnais92 · Answer

Bonjour,

on va essayer d'y voir plus clair.

Télécharge ce programme puis double clic dessus (ferme ton antivirus s'il te détecte quoi que ce soit)
http://www.suspectfile.com/systemscan/

* Coche uniquement ces cases, décoche tout le reste :


- PC accounts
- Recent Files, 30 days
- include hosts files
- suspicious files

Puis clic sur scan now, soit patient.
Une fois qu'il aura terminé, un rapport va s'ouvrir, copie et colle son contenu ici et vérifie qu'il soit bien en entier, si besoin crée deux messages.


C'est quoi un SID ?

jorginho67 · Answer

C'est quoi un SID ? 
(;o):   un secret invader demon ???
SUSPECTFILE, it's the new tool  i've seen in SOSVIRUS ?
Scuze pour l'intrusion, mais vu ce qu'il y à déjà ! en même temps, çà me permettra de suivre ces fameuses SID  lol !!!( comme ils disent les jeunes )

noctambule28 · Answer

bonne nuit à tous

woups, le bureau, c'est pas le café... mais je suis regardant

je vous laisse faire , 

j'ai juste  vu un  hjt, pas à sa place , et sans nom, et en sans echec !!!

tu peux , Vincent,stp, donner 2,3 explications, pour tes conclusions/suspections
, 

merci

-reb- · Answer

Bonjour et merci Lyonnais92 de te pencher sur mon cas !!!

Je vais vous expliquer ce que sont les SID (je connaissais pas non plus avant d'avoir fais ces recherches !!)
Les SID (Security Identifier) sont des identifiants uniques alphanumériques qui identifient chaque système, utilisateur ou objet (groupe) dans un réseau ou sur un PC !

un petit lien pour en savoir plus : http://www.toutwindows.com/sid.shtml

Je te colle maintenant le rapport que tu m'as demandé...

SystemScan - www.suspectfile.com - ver. 3.2.2

Running on: Windows XP HOME Edition, Service Pack 2 (2600.5.1)
System directory: C:\WINDOWS

Date: 10/12/2007
Time: 18:12:42
  
Output limited to: 
 -Recent files
 -PC accounts
 -Include HOSTS file
 -Suspicious Files

===================== Accounts on this PC =====================

 
Users on this computer:
Is Admin? | Username
------------------
   Yes    | Administrateur
          | HelpAssistant (Disabled)
          | Invité (Disabled)
   Yes    | ONE SHOT
          | Rebecca
          | SUPPORT_388945a0 (Disabled)

### users folders

21/09/2007 21:24:08 (DIR)        0 byte     80 days old -- Default User
05/11/2007 21:08:02 (DIR)        0 byte     35 days old -- Propriétaire
07/11/2007 17:09:43 (DIR)        0 byte     33 days old -- All Users
15/11/2007 15:40:57 (DIR)        0 byte     25 days old -- NetworkService
15/11/2007 15:40:57 (DIR)        0 byte     25 days old -- LocalService
15/11/2007 15:40:58 (DIR)        0 byte     25 days old -- Rebecca
15/11/2007 15:40:58 (DIR)        0 byte     25 days old -- Administrateur
09/12/2007 20:18:06 (DIR)        0 byte      1 days old -- ONE SHOT

### startup files in users folders

C:\documents and settings\Administrateur\Menu Démarrer\Programmes\Démarrage\desktop.ini
C:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\desktop.ini
C:\documents and settings\Default User\Menu Démarrer\Programmes\Démarrage\desktop.ini
C:\documents and settings\ONE SHOT\Menu Démarrer\Programmes\Démarrage\desktop.ini
C:\documents and settings\Rebecca\Menu Démarrer\Programmes\Démarrage\desktop.ini

===================== Recent files (30 days old)=====================

----- recent files in C:\
16/11/2007 22:07:29 (DIR)        0 byte     24 days old -- APPS
19/11/2007 15:00:36 (DIR)        0 byte     21 days old -- System Volume Information
19/11/2007 15:31:40 (DIR)        0 byte     21 days old -- DRIVERS
19/11/2007 15:32:05 (DIR)        0 byte     21 days old -- TEMPPB
25/11/2007 18:01:56            291 byte     15 days old -- BOOT.INI
04/12/2007 02:22:03 (DIR)        0 byte      6 days old -- scesp4i
07/12/2007 03:53:46 (DIR)        0 byte      3 days old -- detective
08/12/2007 19:05:11 (DIR)        0 byte      2 days old -- HT
09/12/2007 16:32:22      150994944 byte      1 days old -- pagefile.sys
09/12/2007 16:32:44 (DIR)        0 byte      1 days old -- WINDOWS
09/12/2007 17:22:28 (DIR)        0 byte      1 days old -- Program Files
10/12/2007 18:12:39 (DIR)        0 byte      0 days old -- suspectfile

----- recent files in C:\WINDOWS\
13/11/2007 18:12:47              0 byte     27 days old -- setupact.log
13/11/2007 18:12:47              0 byte     27 days old -- setuperr.log
13/11/2007 18:37:46           3166 byte     27 days old -- ModemLog_Aztech CNR2900 V.90 Modem.txt
16/11/2007 14:15:17            691 byte     24 days old -- Q327979.log
18/11/2007 21:58:18          55190 byte     22 days old -- msgsocm.log
18/11/2007 21:58:18         171166 byte     22 days old -- ntdtcsetup.log
18/11/2007 21:58:18         427857 byte     22 days old -- tsoc.log
18/11/2007 21:58:18          37284 byte     22 days old -- ocmsn.log
18/11/2007 21:58:18        1067746 byte     22 days old -- FaxSetup.log
21/11/2007 05:28:28         214008 byte     19 days old -- KB913580.log
25/11/2007 17:33:52 (DIR)        0 byte     15 days old -- Registration
25/11/2007 18:01:56            541 byte     15 days old -- win.ini
25/11/2007 18:01:56            227 byte     15 days old -- system.ini
25/11/2007 19:49:30           9886 byte     15 days old -- setuplog.txt
25/11/2007 20:51:42            782 byte     15 days old -- KB924732.log
01/12/2007 17:31:22           7766 byte      9 days old -- bitssetup.log
01/12/2007 17:33:33 (DIR)        0 byte      9 days old -- Installer
01/12/2007 17:55:10 (DIR)        0 byte      9 days old -- SoftwareDistribution
03/12/2007 20:12:34         167055 byte      7 days old -- iis6.log
04/12/2007 02:22:43 (DIR)        0 byte      6 days old -- Help
07/12/2007 18:42:21         209617 byte      3 days old -- KB920872.log
07/12/2007 18:43:08         211160 byte      3 days old -- KB900485.log
07/12/2007 18:43:18         193532 byte      3 days old -- KB938828.log
08/12/2007 00:18:48 (DIR)        0 byte      2 days old -- system32
08/12/2007 11:40:48        1141212 byte      2 days old -- ntbtlog.txt
08/12/2007 14:59:43 (DIR)        0 byte      2 days old -- inf
09/12/2007 16:32:26           2048 byte      1 days old -- bootstat.dat
09/12/2007 16:32:35             50 byte      1 days old -- wiaservc.log
09/12/2007 16:32:37            159 byte      1 days old -- wiadebug.log
10/12/2007 00:03:30        1972801 byte      0 days old -- WindowsUpdate.log
10/12/2007 17:33:37 (DIR)        0 byte      0 days old -- temp
10/12/2007 18:00:34         132301 byte      0 days old -- setupapi.log

----- recent files in C:\WINDOWS\Downloaded Program Files\
01/12/2007 17:33:24             65 byte      9 days old -- desktop.ini

----- recent files in C:\WINDOWS\system\

----- recent files in C:\WINDOWS\system32\
15/11/2007 15:40:54 (DIR)        0 byte     25 days old -- wbem
15/11/2007 15:41:04 (DIR)        0 byte     25 days old -- config
18/11/2007 19:35:02           2855 byte     22 days old -- mem.PIF
19/11/2007 15:00:36 (DIR)        0 byte     21 days old -- Restore
23/11/2007 19:45:05            858 byte     17 days old -- qtplugin.log
01/12/2007 17:32:56 (DIR)        0 byte      9 days old -- CatRoot
01/12/2007 17:33:07          16832 byte      9 days old -- amcompat.tlb
01/12/2007 17:33:07          23392 byte      9 days old -- nscompat.tlb
04/12/2007 00:40:02         132480 byte      6 days old -- FNTCACHE.DAT
04/12/2007 02:05:25 (DIR)        0 byte      6 days old -- drivers
05/12/2007 07:26:05         367658 byte      5 days old -- perfh00C.dat
05/12/2007 07:26:05         775034 byte      5 days old -- PerfStringBackup.INI
05/12/2007 07:26:05         311604 byte      5 days old -- perfh009.dat
05/12/2007 07:26:05          39992 byte      5 days old -- perfc009.dat
05/12/2007 07:26:05          48616 byte      5 days old -- perfc00C.dat
06/12/2007 15:31:43           1170 byte      4 days old -- wpa.dbl
07/12/2007 01:56:08 (DIR)        0 byte      3 days old -- NtmsData
09/12/2007 16:34:14 (DIR)        0 byte      1 days old -- CatRoot2
10/12/2007 00:03:44           3733 byte      0 days old -- nvapps.xml

----- recent files in C:\WINDOWS\system32\drivers\
08/12/2007 00:15:58           2613 byte      2 days old -- fwdrv.err

----- recent files in C:\WINDOWS	emp\
03/12/2007 15:33:57              0 byte      7 days old -- exp2BB.tmp
04/12/2007 15:42:08              0 byte      6 days old -- exp258.tmp
06/12/2007 16:32:52              0 byte      4 days old -- exp1C7.tmp
07/12/2007 16:32:52              0 byte      3 days old -- exp1C6E.tmp
07/12/2007 23:40:21            732 byte      3 days old -- MSIc8acf.LOG
07/12/2007 23:42:20            732 byte      3 days old -- MSIeec00.LOG
08/12/2007 14:11:09            732 byte      2 days old -- MSIf578d.LOG
08/12/2007 15:08:54            732 byte      2 days old -- MSIf3340.LOG
08/12/2007 15:10:20            732 byte      2 days old -- MSI72b2d.LOG
08/12/2007 17:42:46              0 byte      2 days old -- exp1236.tmp
09/12/2007 18:33:37              0 byte      1 days old -- exp2C8.tmp

----- recent files in C:\Program Files\
20/11/2007 20:37:58 (DIR)        0 byte     20 days old -- Microsoft Baseline Security Analyzer 2
22/11/2007 01:45:32 (DIR)        0 byte     18 days old -- ESET
22/11/2007 01:56:52 (DIR)        0 byte     18 days old -- Grisoft
29/11/2007 20:04:02 (DIR)        0 byte     11 days old -- eMule
04/12/2007 02:05:24 (DIR)        0 byte      6 days old -- Avira GmbH
04/12/2007 02:05:24 (DIR)        0 byte      6 days old -- InstallShield Installation Information
04/12/2007 02:58:58 (DIR)        0 byte      6 days old -- WinRAR
08/12/2007 14:59:40 (DIR)        0 byte      2 days old -- Microsoft Visual Studio
09/12/2007 17:22:51 (DIR)        0 byte      1 days old -- Everest Poker
10/12/2007 18:10:35 (DIR)        0 byte      0 days old -- Mozilla Firefox

----- recent files in C:\Program Files\Fichiers communs\
04/12/2007 02:05:09 (DIR)        0 byte      6 days old -- InstallShield

----- recent files in C:\Documents and Settings\ONE SHOT\Application Data\
18/11/2007 22:41:54 (DIR)        0 byte     22 days old -- Media Player Classic
18/11/2007 22:42:51 (DIR)        0 byte     22 days old -- Adobe
18/11/2007 22:43:00 (DIR)        0 byte     22 days old -- AdobeUM
19/11/2007 15:13:09 (DIR)        0 byte     21 days old -- Macromedia
19/11/2007 16:09:27 (DIR)        0 byte     21 days old -- Sun
22/11/2007 01:57:14 (DIR)        0 byte     18 days old -- Grisoft
23/11/2007 14:12:45 (DIR)        0 byte     17 days old -- Thunderbird
23/11/2007 14:12:49 (DIR)        0 byte     17 days old -- Mozilla
24/11/2007 02:14:29 (DIR)        0 byte     16 days old -- vlc
29/11/2007 18:31:21 (DIR)        0 byte     11 days old -- Real
04/12/2007 02:58:58 (DIR)        0 byte      6 days old -- Help
07/12/2007 01:52:11 (DIR)        0 byte      3 days old -- Microsoft

----- recent files in C:\DOCUME~1\ONESHO~1\LOCALS~1\Temp\
01/12/2007 17:33:02             49 byte      9 days old -- REGWIZ.LOG
04/12/2007 02:06:16              0 byte      6 days old -- 8F7.tmp
04/12/2007 02:09:33 (DIR)        0 byte      6 days old -- avirarkd
05/12/2007 08:58:01           1607 byte      5 days old -- google.gif
07/12/2007 16:11:28 (DIR)        0 byte      3 days old -- hsperfdata_ONE SHOT
07/12/2007 23:43:12          65536 byte      3 days old -- IH2CEE.tmp
10/12/2007 15:50:40           1872 byte      0 days old -- java_install_reg.log
10/12/2007 18:11:29          16384 byte      0 days old -- ~DF66C7.tmp
10/12/2007 18:12:44 (DIR)        0 byte      0 days old -- nszE30.tmp

===================== HOSTS FILE =====================


127.0.0.1       localhost
127.0.0.1	007guard.com
127.0.0.1	www.007guard.com
127.0.0.1	008i.com
127.0.0.1	008k.com
127.0.0.1	www.008k.com
127.0.0.1	00hq.com
127.0.0.1	www.00hq.com
127.0.0.1	010402.com
127.0.0.1	032439.com
127.0.0.1	www.032439.com
127.0.0.1	1001-search.info
127.0.0.1	www.1001-search.info
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	100sexlinks.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	10sek.com
127.0.0.1	www.10sek.com
127.0.0.1	123topsearch.com
127.0.0.1	www.123topsearch.com
127.0.0.1	132.com
127.0.0.1	www.132.com
127.0.0.1	136136.net
127.0.0.1	www.136136.net
127.0.0.1	139mm.com
127.0.0.1	www.139mm.com
127.0.0.1	163ns.com
127.0.0.1	www.163ns.com
127.0.0.1	171203.com
127.0.0.1	17-plus.com
127.0.0.1	1800searchonline.com
127.0.0.1	www.1800searchonline.com
127.0.0.1	180searchassistant.com
127.0.0.1	www.180searchassistant.com
127.0.0.1	180solutions.com
127.0.0.1	www.180solutions.com
127.0.0.1	181.365soft.info
127.0.0.1	www.181.365soft.info
127.0.0.1	1987324.com
127.0.0.1	www.1987324.com
127.0.0.1	1-domains-registrations.com
127.0.0.1	www.1-domains-registrations.com
127.0.0.1	1-extreme.biz
127.0.0.1	www.1-extreme.biz
127.0.0.1	1sexparty.com
127.0.0.1	www.1sexparty.com
127.0.0.1	1stantivirus.com
127.0.0.1	www.1stantivirus.com
127.0.0.1	1stpagehere.com
127.0.0.1	www.1stpagehere.com
127.0.0.1	1stsearchportal.com
127.0.0.1	www.1stsearchportal.com
127.0.0.1	2.82211.net
127.0.0.1	www.2006ooo.com
127.0.0.1	2007-download.com
127.0.0.1	www.2007-download.com
127.0.0.1	2020search.com
127.0.0.1	www.2020search.com
127.0.0.1	20x2p.com
127.0.0.1	24.365soft.info
127.0.0.1	www.24.365soft.info
127.0.0.1	24-7pharmacy.info
127.0.0.1	www.24-7pharmacy.info
127.0.0.1	24-7searching-and-more.com
127.0.0.1	www.24-7searching-and-more.com
127.0.0.1	24teen.com
127.0.0.1	www.24teen.com
127.0.0.1	2every.net
127.0.0.1	www.2every.net
127.0.0.1	2ndpower.com
127.0.0.1	2search.com
127.0.0.1	www.2search.com
127.0.0.1	2search.org
127.0.0.1	www.2search.org
127.0.0.1	2squared.com
127.0.0.1	www.2squared.com
127.0.0.1	3322.org
127.0.0.1	www.3322.org
127.0.0.1	365soft.info
127.0.0.1	36site.com
127.0.0.1	www.36site.com
127.0.0.1	3721.com
127.0.0.1	39-93.com
127.0.0.1	3abetterinternet.com
127.0.0.1	www.3abetterinternet.com
127.0.0.1	3bay.it
127.0.0.1	www.3bay.it
127.0.0.1	3ebay.it
127.0.0.1	www.3ebay.it
127.0.0.1	404dns.com
127.0.0.1	www.404dns.com
127.0.0.1	4199.com
127.0.0.1	www.4199.com
127.0.0.1	4corn.net
127.0.0.1	www.4corn.net
127.0.0.1	4ebay.it
127.0.0.1	www.4ebay.it
127.0.0.1	4klm.com
127.0.0.1	4repubblica.it
127.0.0.1	www.4repubblica.it
127.0.0.1	4softget.com
127.0.0.1	www.4softget.com
127.0.0.1	5iscali.it
127.0.0.1	www.5iscali.it
127.0.0.1	5repubblica.it
127.0.0.1	www.5repubblica.it
127.0.0.1	5starvideos.com
127.0.0.1	www.5starvideos.com
127.0.0.1	5tiscali.it
127.0.0.1	www.5tiscali.it
127.0.0.1	5zgmu7o20kt5d8yq.com
127.0.0.1	www.5zgmu7o20kt5d8yq.com
127.0.0.1	6iscali.it
127.0.0.1	www.6iscali.it
127.0.0.1	6sek.com
127.0.0.1	www.6sek.com
127.0.0.1	6tiscali.it
127.0.0.1	www.6tiscali.it
127.0.0.1	7322.com
127.0.0.1	www.7322.com
127.0.0.1	75tz.com
127.0.0.1	777search.com
127.0.0.1	www.777search.com
127.0.0.1	777top.com
127.0.0.1	www.777top.com
127.0.0.1	7939.com
127.0.0.1	www.7939.com
127.0.0.1	7search.com
127.0.0.1	www.7search.com
127.0.0.1	80gw6ry3i3x3qbrkwhxhw.032439.com
127.0.0.1	82211.net
127.0.0.1	8866.org
127.0.0.1	888.com
127.0.0.1	www.888.com
127.0.0.1	8ad.com
127.0.0.1	www.8ad.com
127.0.0.1	9505.com
127.0.0.1	www.9505.com
127.0.0.1	971searchbox.com
127.0.0.1	www.971searchbox.com
127.0.0.1	a.bestmanage.org
127.0.0.1	aaasexypics.com
127.0.0.1	aaawebfinder.com
127.0.0.1	www.aaawebfinder.com
127.0.0.1	aavc.com
127.0.0.1	abc-find.info
127.0.0.1	www.abc-find.info
127.0.0.1	abetterinternet.com
127.0.0.1	www.abetterinternet.com
127.0.0.1	abnetsoft.info
127.0.0.1	www.abnetsoft.info
127.0.0.1	aboutclicker.com
127.0.0.1	www.aboutclicker.com
127.0.0.1	abrp.net
127.0.0.1	www.abrp.net
127.0.0.1	absolutee.com
127.0.0.1	www.absolutee.com
127.0.0.1	abyssmedia.com
127.0.0.1	www.abyssmedia.com
127.0.0.1	ac66.cn
127.0.0.1	www.ac66.cn
127.0.0.1	access.Navinetwork.com
127.0.0.1	access.rapid-pass.net
127.0.0.1	accessactivexvideo.com
127.0.0.1	www.accessactivexvideo.com
127.0.0.1	accessclips.com
127.0.0.1	www.accessclips.com
127.0.0.1	access-dvd.com
127.0.0.1	www.access-dvd.com
127.0.0.1	accesskeygenerator.com
127.0.0.1	www.accesskeygenerator.com
127.0.0.1	accessorygeeks.com
127.0.0.1	www.accessorygeeks.com
127.0.0.1	accessthefuture.net
127.0.0.1	www.accessthefuture.net
127.0.0.1	accessvid.net
127.0.0.1	www.accessvid.net
127.0.0.1	acemedic.com
127.0.0.1	www.acemedic.com
127.0.0.1	ace-webmaster.com
127.0.0.1	www.ace-webmaster.com
127.0.0.1	acjp.com
127.0.0.1	acrobat-2007.com
127.0.0.1	www.acrobat-2007.com
127.0.0.1	acrobat-8.com
127.0.0.1	www.acrobat-8.com
127.0.0.1	acrobat-center.com
127.0.0.1	www.acrobat-center.com
127.0.0.1	acrobat-hq.com
127.0.0.1	www.acrobat-hq.com
127.0.0.1	acrobatreader-8.com
127.0.0.1	www.acrobatreader-8.com
127.0.0.1	acrobat-reader-8.de
127.0.0.1	www.acrobat-reader-8.de
127.0.0.1	acrobat-stop.com
127.0.0.1	www.acrobat-stop.com
127.0.0.1	actionbreastcancer.org
127.0.0.1	www.actionbreastcancer.org
127.0.0.1	activesearcher.info
127.0.0.1	www.activesearcher.info
127.0.0.1	activexaccessobject.com
127.0.0.1	www.activexaccessobject.com
127.0.0.1	activexaccessvideo.com
127.0.0.1	www.activexaccessvideo.com
127.0.0.1	activexemedia.com
127.0.0.1	www.activexemedia.com
127.0.0.1	activexmediaobject.com
127.0.0.1	www.activexmediaobject.com
127.0.0.1	activexmediapro.com
127.0.0.1	www.activexmediapro.com
127.0.0.1	activexmediasite.com
127.0.0.1	www.activexmediasite.com
127.0.0.1	activexmediasoftware.com
127.0.0.1	www.activexmediasoftware.com
127.0.0.1	activexmediasource.com
127.0.0.1	www.activexmediasource.com
127.0.0.1	activexmediatool.com
127.0.0.1	www.activexmediatool.com
127.0.0.1	activexmediatour.com
127.0.0.1	www.activexmediatour.com
127.0.0.1	activexsoftwares.com
127.0.0.1	www.activexsoftwares.com
127.0.0.1	activexsource.com
127.0.0.1	www.activexsource.com
127.0.0.1	activexupdate.com
127.0.0.1	www.activexupdate.com
127.0.0.1	activexvideo.com
127.0.0.1	www.activexvideo.com
127.0.0.1	activexvideotool.com
127.0.0.1	www.activexvideotool.com
127.0.0.1	ad.marketingsector.com
127.0.0.1	www.ad.marketingsector.com
127.0.0.1	ad.mokead.com
127.0.0.1	www.ad.mokead.com
127.0.0.1	ad.yieldmanager.com
127.0.0.1	www.ad.yieldmanager.com
127.0.0.1	ad25.com
127.0.0.1	ad45.com
127.0.0.1	ad77.com
127.0.0.1	ad86.com
127.0.0.1	adamsupportgroup.org
127.0.0.1	www.adamsupportgroup.org
127.0.0.1	adarmor.com
127.0.0.1	www.adarmor.com
127.0.0.1	adasearch.com
127.0.0.1	www.adasearch.com
127.0.0.1	adaware.cc
127.0.0.1	adawarenow.com
127.0.0.1	www.adawarenow.com
127.0.0.1	addictivetechnologies.com
127.0.0.1	www.addictivetechnologies.com
127.0.0.1	addictivetechnologies.net
127.0.0.1	www.addictivetechnologies.net
127.0.0.1	add-manager.com
127.0.0.1	www.add-manager.com
127.0.0.1	adgate.info
127.0.0.1	www.adgate.info
127.0.0.1	adipics.com
127.0.0.1	www.adipics.com
127.0.0.1	admin2cash.biz
127.0.0.1	www.admin2cash.biz
127.0.0.1	adnet-plus.com
127.0.0.1	adobe-download-now.com
127.0.0.1	adobe-downloads.com
127.0.0.1	www.adobe-downloads.com
127.0.0.1	adobe-reader-8.fr
127.0.0.1	www.adobe-reader-8.fr
127.0.0.1	adprotect.com
127.0.0.1	www.adprotect.com
127.0.0.1	ads.centralmedia.ws
127.0.0.1	ads.k8l.info
127.0.0.1	ads.kmpads.com
127.0.0.1	ads.marketingsector.com
127.0.0.1	ads.searchingbooth.com
127.0.0.1	ads.z-quest.com
127.0.0.1	ads183.com
127.0.0.1	www.ads183.com
127.0.0.1	adscontex.com
127.0.0.1	www.adscontex.com
127.0.0.1	adservices1.enhance.com
127.0.0.1	www.adservices1.enhance.com
127.0.0.1	adservs.com
127.0.0.1	adsextend.net
127.0.0.1	www.adsextend.net
127.0.0.1	adshttp.com
127.0.0.1	www.adshttp.com
127.0.0.1	adsonwww.com
127.0.0.1	www.adsonwww.com
127.0.0.1	adspics.com
127.0.0.1	www.adspics.com
127.0.0.1	adtrak.net
127.0.0.1	www.adtrak.net
127.0.0.1	adtrgt.com
127.0.0.1	adult777search.info
127.0.0.1	www.adult777search.info
127.0.0.1	adultan.com
127.0.0.1	www.adultan.com
127.0.0.1	adult-engine-search.com
127.0.0.1	www.adult-engine-search.com
127.0.0.1	adult-erotic-guide.net
127.0.0.1	www.adult-erotic-guide.net
127.0.0.1	adultfilmsite.com
127.0.0.1	www.adultfilmsite.com
127.0.0.1	adult-friends-finder.net
127.0.0.1	www.adult-friends-finder.net
127.0.0.1	adultgambling.org
127.0.0.1	adult-host.org
127.0.0.1	adulthyperlinks.com
127.0.0.1	www.adulthyperlinks.com
127.0.0.1	adultmovieplus.com
127.0.0.1	www.adultmovieplus.com
127.0.0.1	adult-personal.us
127.0.0.1	adultsgames.net
127.0.0.1	adultsper.com
127.0.0.1	www.adultsper.com
127.0.0.1	adulttds.com
127.0.0.1	www.adulttds.com
127.0.0.1	adultzoneworld.com
127.0.0.1	www.adultzoneworld.com
127.0.0.1	advcash.biz
127.0.0.1	www.advcash.biz
127.0.0.1	advert.exaccess.ru
127.0.0.1	advertisemoney.info
127.0.0.1	www.advertisemoney.info
127.0.0.1	advertising.paltalk.com
127.0.0.1	advertising-money.info
127.0.0.1	www.advertising-money.info
127.0.0.1	ad-ware.cc
127.0.0.1	ad-w-a-r-e.com
127.0.0.1	www.ad-w-a-r-e.com
127.0.0.1	a-d-w-a-r-e.com
127.0.0.1	www.a-d-w-a-r-e.com
127.0.0.1	adwarebazooka.com
127.0.0.1	www.adwarebazooka.com
127.0.0.1	adwarefinder.com
127.0.0.1	www.adwarefinder.com
127.0.0.1	adwareprotectionsite.com
127.0.0.1	www.adwareprotectionsite.com
127.0.0.1	adwarepunisher.com
127.0.0.1	www.adwarepunisher.com
127.0.0.1	aflgate.com
127.0.0.1	www.aflgate.com
127.0.0.1	africaspromise.org
127.0.0.1	agava.com
127.0.0.1	agava.ru
127.0.0.1	agentstudio.com
127.0.0.1	aginegialle.it
127.0.0.1	www.aginegialle.it
127.0.0.1	www.aifind.info
127.0.0.1	aifind.info
127.0.0.1	airtleworld.com
127.0.0.1	www.airtleworld.com
127.0.0.1	aitalia.it
127.0.0.1	www.aitalia.it
127.0.0.1	akamai.downloadv3.com
127.0.0.1	aklitalia.it
127.0.0.1	www.aklitalia.it
127.0.0.1	akril.com
127.0.0.1	alcatel.ws
127.0.0.1	alfacleaner.com
127.0.0.1	www.alfacleaner.com
127.0.0.1	alfa-search.com
127.0.0.1	alialia.it
127.0.0.1	www.alialia.it
127.0.0.1	aliotalia.it
127.0.0.1	www.aliotalia.it
127.0.0.1	alirtalia.it
127.0.0.1	www.alirtalia.it
127.0.0.1	alitaia.it
127.0.0.1	www.alitaia.it
127.0.0.1	alitaklia.it
127.0.0.1	www.alitaklia.it
127.0.0.1	alitala.it
127.0.0.1	www.alitala.it
127.0.0.1	alitali.it
127.0.0.1	www.alitali.it
127.0.0.1	alitaliaq.it
127.0.0.1	www.alitaliaq.it
127.0.0.1	alitalias.it
127.0.0.1	www.alitalias.it
127.0.0.1	alitaliaz.it
127.0.0.1	www.alitaliaz.it
127.0.0.1	alitalioa.it
127.0.0.1	www.alitalioa.it
127.0.0.1	alitalisa.it
127.0.0.1	www.alitalisa.it
127.0.0.1	alitaliua.it
127.0.0.1	www.alitaliua.it
127.0.0.1	alitalkia.it
127.0.0.1	www.alitalkia.it
127.0.0.1	alitaloia.it
127.0.0.1	www.alitaloia.it
127.0.0.1	alitaluia.it
127.0.0.1	www.alitaluia.it
127.0.0.1	alitaslia.it
127.0.0.1	www.alitaslia.it
127.0.0.1	alitlia.it
127.0.0.1	www.alitlia.it
127.0.0.1	alitralia.it
127.0.0.1	www.alitralia.it
127.0.0.1	alitsalia.it
127.0.0.1	www.alitsalia.it
127.0.0.1	aliutalia.it
127.0.0.1	www.aliutalia.it
127.0.0.1	ALL1COUNT.NET
127.0.0.1	www.ALL1COUNT.NET
127.0.0.1	all4internet.com
127.0.0.1	www.all4internet.com
127.0.0.1	allabtcars.com
127.0.0.1	allabtjeeps.com
127.0.0.1	all-bittorrent.com
127.0.0.1	www.all-bittorrent.com
127.0.0.1	www.allcybersearch.com
127.0.0.1	allcybersearch.com
127.0.0.1	alldnserrors.com
127.0.0.1	www.alldnserrors.com
127.0.0.1	all-downloads-now.com
127.0.0.1	www.all-downloads-now.com
127.0.0.1	all-edonkey.com
127.0.0.1	www.all-edonkey.com
127.0.0.1	allforadult.com
127.0.0.1	allhyperlinks.com
127.0.0.1	alliesecurity.com
127.0.0.1	www.alliesecurity.com
127.0.0.1	all-inet.com
127.0.0.1	allinternetbusiness.com
127.0.0.1	all-limewire.com
127.0.0.1	www.all-limewire.com
127.0.0.1	allmegabucks.com
127.0.0.1	www.allmegabucks.com
127.0.0.1	allprotections.com
127.0.0.1	www.allprotections.com
127.0.0.1	allresultz.net
127.0.0.1	www.allresultz.net
127.0.0.1	allsecuritynotes.com
127.0.0.1	www.allsecuritynotes.com
127.0.0.1	allsecuritysite.com
127.0.0.1	www.allsecuritysite.com
127.0.0.1	allstarsvideos.net
127.0.0.1	www.allstarsvideos.net
127.0.0.1	alltruesoftware.com
127.0.0.1	www.alltruesoftware.com
127.0.0.1	allvideoactivex.com
127.0.0.1	www.allvideoactivex.com
127.0.0.1	almanah.biz
127.0.0.1	www.almanah.biz
127.0.0.1	almarvideos.com
127.0.0.1	aloitalia.it
127.0.0.1	www.aloitalia.it
127.0.0.1	aluitalia.it
127.0.0.1	www.aluitalia.it
127.0.0.1	amaena.com
127.0.0.1	www.amaena.com
127.0.0.1	amandamountains.com
127.0.0.1	amateurliveshow.com
127.0.0.1	www.amateurliveshow.com
127.0.0.1	amediasoftware.com
127.0.0.1	www.amediasoftware.com
127.0.0.1	amediasource.com
127.0.0.1	www.amediasource.com
127.0.0.1	americancarbargains.com
127.0.0.1	www.americancarbargains.com
127.0.0.1	american-teens.net
127.0.0.1	amigeek.com
127.0.0.1	amisbusiness.com
127.0.0.1	ampmsearch.com
127.0.0.1	www.ampmsearch.com
127.0.0.1	analcord.com
127.0.0.1	www.analcord.com
127.0.0.1	analmovi.com
127.0.0.1	anarchylolita.com
127.0.0.1	www.anarchylolita.com
127.0.0.1	anarchyporn.com
127.0.0.1	andromedical.com
127.0.0.1	www.andromedical.com
127.0.0.1	animepornmag.com
127.0.0.1	www.animepornmag.com
127.0.0.1	anin.org
127.0.0.1	anjpn-avxiz.biz
127.0.0.1	www.anjpn-avxiz.biz
127.0.0.1	anjpnzqav.biz
127.0.0.1	www.anjpnzqav.biz
127.0.0.1	anjpn-zqav.biz
127.0.0.1	www.anjpn-zqav.biz
127.0.0.1	annaromeo.com
127.0.0.1	antiddos.us
127.0.0.1	www.antiddos.us
127.0.0.1	Antiespiadorado.com
127.0.0.1	www.Antiespiadorado.com
127.0.0.1	Antiespionspack.com
127.0.0.1	www.Antiespionspack.com
127.0.0.1	Antigusanos2008.com
127.0.0.1	www.Antigusanos2008.com
127.0.0.1	Antispionage.com
127.0.0.1	www.Antispionage.com
127.0.0.1	Antispionagepro.com
127.0.0.1	www.Antispionagepro.com
127.0.0.1	antispydns.biz
127.0.0.1	www.antispydns.biz
127.0.0.1	antispylab.com
127.0.0.1	www.antispylab.com
127.0.0.1	antispysolutions.com
127.0.0.1	www.antispysolutions.com
127.0.0.1	antispyware.com
127.0.0.1	www.antispyware.com
127.0.0.1	antispywarebot.com
127.0.0.1	www.antispywarebot.com
127.0.0.1	antispywarebox.com
127.0.0.1	www.antispywarebox.com
127.0.0.1	antispywaredownloads.com
127.0.0.1	www.antispywaredownloads.com
127.0.0.1	Antispywaresuite.com
127.0.0.1	www.Antispywaresuite.com
127.0.0.1	Antispyweb.net
127.0.0.1	www.Antispyweb.net
127.0.0.1	Antiver2008.com
127.0.0.1	www.Antiver2008.com
127.0.0.1	antivermins.com
127.0.0.1	www.antivermins.com
127.0.0.1	anti-vermins.com
127.0.0.1	www.anti-vermins.com
127.0.0.1	antivir2007.com
127.0.0.1	www.antivir2007.com
127.0.0.1	antivirgear.com
127.0.0.1	www.antivirgear.com
127.0.0.1	antivirus.fastfreedownload.com
127.0.0.1	www.antivirus.fastfreedownload.com
127.0.0.1	antivirusgolden.com
127.0.0.1	www.antivirusgolden.com
127.0.0.1	antivirus-hq.net
127.0.0.1	www.antivirus-hq.net
127.0.0.1	anti-virus-pro.com
127.0.0.1	www.anti-virus-pro.com
127.0.0.1	antivirusprotector.com
127.0.0.1	www.antivirusprotector.com
127.0.0.1	antivirussecuritypro.com
127.0.0.1	www.antivirussecuritypro.com
127.0.0.1	antivirus-stop.com
127.0.0.1	www.antivirus-stop.com
127.0.0.1	Antiworm2008.com
127.0.0.1	www.Antiworm2008.com
127.0.0.1	Antiwurm2008.com
127.0.0.1	www.Antiwurm2008.com
127.0.0.1	antrocity.com
127.0.0.1	anyofus.com
127.0.0.1	www.anyofus.com
127.0.0.1	anysn.seproger.com
127.0.0.1	www.anysn.seproger.com
127.0.0.1	anything4health.com
127.0.0.1	apicpreview.com
127.0.0.1	www.apicpreview.com
127.0.0.1	appealcircuit.com
127.0.0.1	www.appealcircuit.com
127.0.0.1	approvedlinks.com
127.0.0.1	www.approvedlinks.com
127.0.0.1	apps.deskwizz.com
127.0.0.1	apps.webservicehost.com
127.0.0.1	aprotectedpage.com
127.0.0.1	www.aprotectedpage.com
127.0.0.1	apsua.com
127.0.0.1	archiviosex.net
127.0.0.1	www.archiviosex.net
127.0.0.1	aregay.com
127.0.0.1	ares-freebie.com
127.0.0.1	www.ares-freebie.com
127.0.0.1	arespro2007.com
127.0.0.1	www.arespro2007.com
127.0.0.1	aresultra.com
127.0.0.1	www.aresultra.com
127.0.0.1	ares-usa.com
127.0.0.1	www.ares-usa.com
127.0.0.1	arheo.com
127.0.0.1	arizonaweb.org
127.0.0.1	armitageinn.com
127.0.0.1	arquivojpgs.smtp.ru
127.0.0.1	www.arquivojpgs.smtp.ru
127.0.0.1	artachnid.com
127.0.0.1	art-func.com
127.0.0.1	art-xxx.com
127.0.0.1	asafebrowser.com
127.0.0.1	www.asafebrowser.com
127.0.0.1	asafetynotice.com
127.0.0.1	www.asafetynotice.com
127.0.0.1	asafetypage.com
127.0.0.1	www.asafetypage.com
127.0.0.1	asdbiz.biz
127.0.0.1	www.asdbiz.biz
127.0.0.1	asdeykuddq.com
127.0.0.1	www.asdeykuddq.com
127.0.0.1	asecurebar.com
127.0.0.1	www.asecurebar.com
127.0.0.1	asecureboard.com
127.0.0.1	www.asecureboard.com
127.0.0.1	asecurevalue.com
127.0.0.1	www.asecurevalue.com
127.0.0.1	asecurityissue.com
127.0.0.1	www.asecurityissue.com
127.0.0.1	asecuritynotice.com
127.0.0.1	www.asecuritynotice.com
127.0.0.1	asecuritypaper.com
127.0.0.1	www.asecuritypaper.com
127.0.0.1	asecuritystuff.com
127.0.0.1	www.asecuritystuff.com
127.0.0.1	asiankingkong.com
127.0.0.1	asianpornmag.com
127.0.0.1	www.asianpornmag.com
127.0.0.1	asiantoolbar.com
127.0.0.1	www.asiantoolbar.com
127.0.0.1	asidseiupc.com
127.0.0.1	www.asidseiupc.com
127.0.0.1	aslitalia.it
127.0.0.1	www.aslitalia.it
127.0.0.1	ass-gals.com
127.0.0.1	assureprotection.com
127.0.0.1	www.assureprotection.com
127.0.0.1	asta-killer.com
127.0.0.1	asupereva.it
127.0.0.1	www.asupereva.it
127.0.0.1	athenrye.com
127.0.0.1	atotalsafety.com
127.0.0.1	www.atotalsafety.com
127.0.0.1	atrueprotection.com
127.0.0.1	www.atrueprotection.com
127.0.0.1	atruesecurity.com
127.0.0.1	www.atruesecurity.com
127.0.0.1	attackware.com
127.0.0.1	www.attackware.com
127.0.0.1	attrezzi.biz
127.0.0.1	www.attrezzi.biz
127.0.0.1	aulde.net
127.0.0.1	www.aulde.net
127.0.0.1	aupereva.it
127.0.0.1	www.aupereva.it
127.0.0.1	autocontext.begun.ru
127.0.0.1	www.autocontext.begun.ru
127.0.0.1	autoescrowpay.com
127.0.0.1	avast.free-software-center.com
127.0.0.1	www.avast.free-software-center.com
127.0.0.1	avast-2007.com
127.0.0.1	www.avast-2007.com
127.0.0.1	avast-downloads.com
127.0.0.1	www.avast-downloads.com
127.0.0.1	avast-hq.com
127.0.0.1	www.avast-hq.com
127.0.0.1	avforce.com
127.0.0.1	www.avforce.com
127.0.0.1	avg.grab-it-today.net
127.0.0.1	www.avg.grab-it-today.net
127.0.0.1	avg.softwarecenterz.com
127.0.0.1	www.avg.softwarecenterz.com
127.0.0.1	avg-secure.com
127.0.0.1	www.avg-secure.com
127.0.0.1	avian-ads.com
127.0.0.1	avideoaxaccess.com
127.0.0.1	www.avideoaxaccess.com
127.0.0.1	avideosurfer.com
127.0.0.1	www.avideosurfer.com
127.0.0.1	aviewersoft.com
127.0.0.1	www.aviewersoft.com
127.0.0.1	avpcheckupdate.com
127.0.0.1	www.avpcheckupdate.com
127.0.0.1	avxizaaqada.biz
127.0.0.1	www.avxizaaqada.biz
127.0.0.1	avxiz-anjpn.biz
127.0.0.1	www.avxiz-anjpn.biz
127.0.0.1	avxizueorn.biz
127.0.0.1	www.avxizueorn.biz
127.0.0.1	avxiz-ueorn.biz
127.0.0.1	www.avxiz-ueorn.biz
127.0.0.1	avxiz-vtvcp.biz
127.0.0.1	www.avxiz-vtvcp.biz
127.0.0.1	avxiz-ygco.biz
127.0.0.1	www.avxiz-ygco.biz
127.0.0.1	avxiz-zqav.biz
127.0.0.1	www.avxiz-zqav.biz
127.0.0.1	awarninglist.com
127.0.0.1	www.awarninglist.com
127.0.0.1	awbeta.net-nucleus.com
127.0.0.1	awesomehomepage.com
127.0.0.1	www.awesomehomepage.com
127.0.0.1	awmcash.biz
127.0.0.1	awmdabest.com
127.0.0.1	axemediasoftware.com
127.0.0.1	www.axemediasoftware.com
127.0.0.1	aximageobject.com
127.0.0.1	www.aximageobject.com
127.0.0.1	axmediaproject.com
127.0.0.1	www.axmediaproject.com
127.0.0.1	axmediasoftware.com
127.0.0.1	www.axmediasoftware.com
127.0.0.1	axmediasolutions.com
127.0.0.1	www.axmediasolutions.com
127.0.0.1	axobjectpage.com
127.0.0.1	www.axobjectpage.com
127.0.0.1	axobjectsource.com
127.0.0.1	www.axobjectsource.com
127.0.0.1	axsoftwaretool.com
127.0.0.1	www.axsoftwaretool.com
127.0.0.1	axvideoproject.com
127.0.0.1	www.axvideoproject.com
127.0.0.1	axvideosetup.com
127.0.0.1	www.axvideosetup.com
127.0.0.1	ayakawamura.com
127.0.0.1	ayb.dns-look-up.com
127.0.0.1	ayb.netbios-wait.com
127.0.0.1	ayumitaniguchi.com
127.0.0.1	azebar.com
127.0.0.1	azureusclub.com
127.0.0.1	www.azureusclub.com
127.0.0.1	azureus-freebie.com
127.0.0.1	www.azureus-freebie.com
127.0.0.1	azzetta.it
127.0.0.1	www.azzetta.it
127.0.0.1	b.casalemedia.com
127.0.0.1	babe.k-lined.com
127.0.0.1	www.babe.k-lined.com
127.0.0.1	babe.the-killer.bz
127.0.0.1	www.babe.the-killer.bz
127.0.0.1	babenet.com
127.0.0.1	www.babenet.com
127.0.0.1	babespornmag.com
127.0.0.1	www.babespornmag.com
127.0.0.1	babeweb.de
127.0.0.1	www.babeweb.de
127.0.0.1	baccarat-other.info
127.0.0.1	www.baccarat-other.info
127.0.0.1	Backstripgirls.com
127.0.0.1	www.Backstripgirls.com
127.0.0.1	backup.mabou.org
127.0.0.1	balotierra.com
127.0.0.1	www.balotierra.com
127.0.0.1	bannedhost.net
127.0.0.1	barbudafarms.com
127.0.0.1	bardownload.com
127.0.0.1	www.bardownload.com
127.0.0.1	barnandfence.com
127.0.0.1	batsearch.com
127.0.0.1	baygraphicsllc.com
127.0.0.1	bbbsearch.com
127.0.0.1	bb-search.com
127.0.0.1	bdsmlibrary.net
127.0.0.1	bdsmpornmag.com
127.0.0.1	www.bdsmpornmag.com
127.0.0.1	bearshare.download-me.info
127.0.0.1	www.bearshare.download-me.info
127.0.0.1	bearshare.mp3-muzic.com
127.0.0.1	www.bearshare.mp3-muzic.com
127.0.0.1	bearshare-download.org
127.0.0.1	www.bearshare-download.org
127.0.0.1	bearshare-downloads.net
127.0.0.1	www.bearshare-downloads.net
127.0.0.1	bearsharelive.co.uk
127.0.0.1	www.bearsharelive.co.uk
127.0.0.1	bearshare-music-downloads.com
127.0.0.1	www.bearshare-music-downloads.com
127.0.0.1	bearsharepro2007.com
127.0.0.1	www.bearsharepro2007.com
127.0.0.1	bearshare-usa.com
127.0.0.1	www.bearshare-usa.com
127.0.0.1	bedhome.com
127.0.0.1	bediadance.com
127.0.0.1	beebappyy.biz
127.0.0.1	www.beebappyy.biz
127.0.0.1	begin2search.com
127.0.0.1	www.begin2search.com
127.0.0.1	bellabasketsfl.com
127.0.0.1	bernaolatwin.com
127.0.0.1	best-counter.com
127.0.0.1	bestcrawler.com
127.0.0.1	bestfor.ru
127.0.0.1	best-hardpics.com
127.0.0.1	bestmanage.org
127.0.0.1	www.bestmanage.org
127.0.0.1	bestmanage0.org
127.0.0.1	www.bestmanage0.org
127.0.0.1	bestmanage1.org
127.0.0.1	www.bestmanage1.org
127.0.0.1	bestmanage2.org
127.0.0.1	www.bestmanage2.org
127.0.0.1	bestmanage3.org
127.0.0.1	www.bestmanage3.org
127.0.0.1	bestmanage4.org
127.0.0.1	www.bestmanage4.org
127.0.0.1	bestmanage5.org
127.0.0.1	www.bestmanage5.org
127.0.0.1	bestmanage6.org
127.0.0.1	www.bestmanage6.org
127.0.0.1	bestmanage7.org
127.0.0.1	www.bestmanage7.org
127.0.0.1	bestmanage8.org
127.0.0.1	www.bestmanage8.org
127.0.0.1	bestmanage9.org
127.0.0.1	www.bestmanage9.org
127.0.0.1	bestporngate.com
127.0.0.1	bestsafetyguide.net
127.0.0.1	www.bestsafetyguide.net
127.0.0.1	best-spyware.info
127.0.0.1	www.best-spyware.info
127.0.0.1	best-targeted-traffic.com
127.0.0.1	www.best-targeted-traffic.com
127.0.0.1	best-voyeur.info
127.0.0.1	www.best-voyeur.info
127.0.0.1	bestweblinks.com
127.0.0.1	best-winning-casino.com
127.0.0.1	bestworldgirls-for-u.net
127.0.0.1	www.bestworldgirls-for-u.net
127.0.0.1	bestxporno.com
127.0.0.1	bettersearch.biz
127.0.0.1	www.bettersearch.biz
127.0.0.1	bgazzetta.it
127.0.0.1	www.bgazzetta.it
127.0.0.1	bgoogle.it
127.0.0.1	www.bgoogle.it
127.0.0.1	bigtrafficnetwork.com
127.0.0.1	www.bigtrafficnetwork.com
127.0.0.1	bigwww.com
127.0.0.1	www.bigwww.com
127.0.0.1	bin.errorprotector.com
127.0.0.1	bins.media-motor.net
127.0.0.1	bins2.media-motor.net
127.0.0.1	bis.180solutions.com
127.0.0.1	bitchesonline.net
127.0.0.1	bitcomet-freebie.com
127.0.0.1	www.bitcomet-freebie.com
127.0.0.1	biz.biz
127.0.0.1	blackblues00.com
127.0.0.1	www.blackblues00.com
127.0.0.1	blackhats.tc
127.0.0.1	www.blackhats.tc
127.0.0.1	blackhawksoftware.com
127.0.0.1	www.blackhawksoftware.com
127.0.0.1	blackjack-free.net
127.0.0.1	blazefind.com
127.0.0.1	blender.xu.pl
127.0.0.1	blondetgp.com
127.0.0.1	blue-elefant.com
127.0.0.1	www.blue-elefant.com
127.0.0.1	bm.theaimonline.com
127.0.0.1	www.bm.theaimonline.com
127.0.0.1	bnmgate.com
127.0.0.1	www.bnmgate.com
127.0.0.1	bodaciousbabette.com
127.0.0.1	bonzi.com
127.0.0.1	www.bonzi.com
127.0.0.1	boobdoll.com
127.0.0.1	boobsandtits.com
127.0.0.1	boobsclub.com
127.0.0.1	bookedspace.com
127.0.0.1	www.bookedspace.com
127.0.0.1	boom.com.vn
127.0.0.1	www.boom.com.vn
127.0.0.1	boredlife.com
127.0.0.1	bowlofogumbo.com
127.0.0.1	bpfq02.com
127.0.0.1	www.bpfq02.com
127.0.0.1	bqgate.com
127.0.0.1	www.bqgate.com
127.0.0.1	br.errorsafe.com
127.0.0.1	br.winantivirus.com
127.0.0.1	br.winfixer.com
127.0.0.1	bradcoem.org
127.0.0.1	braincodec.com
127.0.0.1	www.braincodec.com
127.0.0.1	brandiyoung.com
127.0.0.1	bravesentry.com
127.0.0.1	www.bravesentry.com
127.0.0.1	breenten.biz
127.0.0.1	www.breenten.biz
127.0.0.1	brodbfm.net
127.0.0.1	www.brodbfm.net
127.0.0.1	brookeburn.com
127.0.0.1	browserwise.com
127.0.0.1	www.browserwise.com
127.0.0.1	bucps.com
127.0.0.1	buhartes.info
127.0.0.1	buldog-stats.com
127.0.0.1	bullseye-network.com
127.0.0.1	www.bullseye-network.com
127.0.0.1	burgerkingbigscreen.com
127.0.0.1	burnsrecyclinginc.com
127.0.0.1	www.burnsrecyclinginc.com
127.0.0.1	buscards.net
127.0.0.1	bustyrussell.com
127.0.0.1	busysearch.net
127.0.0.1	www.busysearch.net
127.0.0.1	buttejazz.org
127.0.0.1	buy-find.info
127.0.0.1	www.buy-find.info
127.0.0.1	buyselldomain.net
127.0.0.1	buytraff.biz
127.0.0.1	www.buytraff.biz
127.0.0.1	buz.ru
127.0.0.1	bvirgilio.it
127.0.0.1	www.bvirgilio.it
127.0.0.1	c.centralmedia.ws
127.0.0.1	c.enhance.com
127.0.0.1	www.c.enhance.com
127.0.0.1	c.goclick.com
127.0.0.1	c4tdownload.com
127.0.0.1	www.c4tdownload.com
127.0.0.1	c5.www4free.info
127.0.0.1	www.c5.www4free.info
127.0.0.1	cache.surfaccuracy.com
127.0.0.1	www.cache.surfaccuracy.com
127.0.0.1	cache.ysbweb.com
127.0.0.1	calcioturris.com
127.0.0.1	calendaralerts.net
127.0.0.1	www.calendaralerts.net
127.0.0.1	cameouk.co.uk
127.0.0.1	www.cameouk.co.uk
127.0.0.1	cameup.com
127.0.0.1	camouflageclothingonline.net
127.0.0.1	www.camouflageclothingonline.net
127.0.0.1	camup.net
127.0.0.1	canberracricketcoaching.com
127.0.0.1	candycantaloupes.com
127.0.0.1	canidetect.org
127.0.0.1	www.canidetect.org
127.0.0.1	cantfind.com
127.0.0.1	www.cantfind.com
127.0.0.1	careers.dulcineasystems.net
127.0.0.1	carsands.com
127.0.0.1	carsrentals.net
127.0.0.1	cartoes.uol.com.br
127.0.0.1	casalemedia.com
127.0.0.1	www.casalemedia.com
127.0.0.1	cashdeluxe.net
127.0.0.1	www.cashdeluxe.net
127.0.0.1	cashengines.com
127.0.0.1	www.cashengines.com
127.0.0.1	cashsearch.biz
127.0.0.1	cashsurfers.com
127.0.0.1	www.cashsurfers.com
127.0.0.1	CashUnlim.com
127.0.0.1	www.CashUnlim.com
127.0.0.1	casino.com.free.game.pogo.gratisdownloads.nl
127.0.0.1	casino2win.net
127.0.0.1	casino-gambling-1.net
127.0.0.1	casino-gambling-2.net
127.0.0.1	casinomidas.net
127.0.0.1	casinonline.net
127.0.0.1	casino-onlines.net
127.0.0.1	castingsamateur.com
127.0.0.1	www.castingsamateur.com
127.0.0.1	catallogue.com
127.0.0.1	catch-dc.info
127.0.0.1	www.catch-dc.info
127.0.0.1	categories.mygeek.com
127.0.0.1	catsss.da.ru
127.0.0.1	caxa.ru
127.0.0.1	cc.panet.org
127.0.0.1	ccecaedbebfcaf.com
127.0.0.1	www.ccecaedbebfcaf.com
127.0.0.1	cclebali.org
127.0.0.1	ccorriere.it
127.0.0.1	www.ccorriere.it
127.0.0.1	cdegate.com
127.0.0.1	www.cdegate.com
127.0.0.1	cdn.drivecleaner.com
127.0.0.1	cdn.errorsafe.com
127.0.0.1	cdn.movies-etc.com
127.0.0.1	cdn.winsoftware.com
127.0.0.1	cdn2.movies-etc.com
127.0.0.1	cdorriere.it
127.0.0.1	www.cdorriere.it
127.0.0.1	ceewawires.org
127.0.0.1	centralmedia.ws
127.0.0.1	certumgroup.com
127.0.0.1	cforriere.it
127.0.0.1	www.cforriere.it
127.0.0.1	check.jupitersatellites.biz
127.0.0.1	www.check.jupitersatellites.biz
127.0.0.1	checkin100.com
127.0.0.1	www.checkin100.com
127.0.0.1	checkssecurity.com
127.0.0.1	www.checkssecurity.com
127.0.0.1	chelancatering.com
127.0.0.1	chenshijituan.com
127.0.0.1	www.chenshijituan.com
127.0.0.1	childrenvilla.com
127.0.0.1	chips-4-free.com
127.0.0.1	chrisswasey.com
127.0.0.1	chriswallace.net
127.0.0.1	cia-trjn.myvnc.com
127.0.0.1	www.cia-trjn.myvnc.com
127.0.0.1	ciorriere.it
127.0.0.1	www.ciorriere.it
127.0.0.1	cirriere.it
127.0.0.1	www.cirriere.it
127.0.0.1	ckick4thumbs.com
127.0.0.1	cl55.biz
127.0.0.1	clackamasliteraryreview.com
127.0.0.1	cleansoftwares.com
127.0.0.1	www.cleansoftwares.com
127.0.0.1	clearsearch.cc
127.0.0.1	clearsearch.net
127.0.0.1	clickaire.com
127.0.0.1	click-codec.com
127.0.0.1	www.click-codec.com
127.0.0.1	clickhere4search.com
127.0.0.1	www.clickhere4search.com
127.0.0.1	click-now.net
127.0.0.1	clickspring.net
127.0.0.1	www.clickspring.net
127.0.0.1	click-to-download.com
127.0.0.1	www.click-to-download.com
127.0.0.1	clicktomakeasearch.com
127.0.0.1	www.clicktomakeasearch.com
127.0.0.1	clickyestoenter.net
127.0.0.1	client.exeupdate.com
127.0.0.1	client.myadultexplorer.com
127.0.0.1	cliks.org
127.0.0.1	www.cliks.org
127.0.0.1	clorriere.it
127.0.0.1	www.clorriere.it
127.0.0.1	clrsch.com
127.0.0.1	clubxxxvideo.com
127.0.0.1	www.clubxxxvideo.com
127.0.0.1	clusif.free.fr
127.0.0.1	cmtapestry.com
127.0.0.1	cnetadd.com
127.0.0.1	www.cnetadd.com
127.0.0.1	cnzz.com
127.0.0.1	www.cnzz.com
127.0.0.1	code.ignphrases.com
127.0.0.1	codec.ninoa.com
127.0.0.1	codecdvd.net
127.0.0.1	www.codecdvd.net
127.0.0.1	codec-fun.com
127.0.0.1	www.codec-fun.com
127.0.0.1	codecsoft.net
127.0.0.1	www.codecsoft.net
127.0.0.1	codrriere.it
127.0.0.1	www.codrriere.it
127.0.0.1	coeriere.it
127.0.0.1	www.coeriere.it
127.0.0.1	coerriere.it
127.0.0.1	www.coerriere.it
127.0.0.1	cofrriere.it
127.0.0.1	www.cofrriere.it
127.0.0.1	cogrriere.it
127.0.0.1	www.cogrriere.it
127.0.0.1	coirriere.it
127.0.0.1	www.coirriere.it
127.0.0.1	command.adservs.com
127.0.0.1	www.commonname.com
127.0.0.1	computerpcgames.net
127.0.0.1	www.computerpcgames.net
127.0.0.1	computerrecover.com
127.0.0.1	www.computerrecover.com
127.0.0.1	config.180solutions.com
127.0.0.1	content.dollarrevenue.com
127.0.0.1	www.content.dollarrevenue.com
127.0.0.1	content.ireit.com
127.0.0.1	www.content.ireit.com
127.0.0.1	content.onerateld.com
127.0.0.1	contentmatch.net
127.0.0.1	www.contentmatch.net
127.0.0.1	contra-virus.com
127.0.0.1	www.contra-virus.com
127.0.0.1	controlmeh.com
127.0.0.1	www.controlmeh.com
127.0.0.1	cooldeskalert.com
127.0.0.1	www.cooldeskalert.com
127.0.0.1	coolfetishsite.com
127.0.0.1	coolfreehost.com
127.0.0.1	coolfreepage.com
127.0.0.1	coolfreepages.com
127.0.0.1	cool-homepage.co
127.0.0.1	cool-homepage.com
127.0.0.1	coolmoneysearch.com
127.0.0.1	coolpornsearch.com
127.0.0.1	cool-search.net
127.0.0.1	cool-search.netfartpost.com
127.0.0.1	coolsearcher.info
127.0.0.1	coolservecorp.net
127.0.0.1	www.coolservecorp.net
127.0.0.1	coolwebsearch.com
127.0.0.1	www.coolwebsearch.com
127.0.0.1	cool-web-search.com
127.0.0.1	coolwebsearsh.com
127.0.0.1	coolwwwsearch.com
127.0.0.1	www.coolwwwsearch.com
127.0.0.1	cool-xxx.net
127.0.0.1	coorriere.it
127.0.0.1	www.coorriere.it
127.0.0.1	copmtraine.com
127.0.0.1	coprriere.it
127.0.0.1	www.coprriere.it
127.0.0.1	core.psyche-evolution.com
127.0.0.1	www.core.psyche-evolution.com
127.0.0.1	coreiere.it
127.0.0.1	www.coreiere.it
127.0.0.1	coreriere.it
127.0.0.1	www.coreriere.it
127.0.0.1	corrdiere.it
127.0.0.1	www.corrdiere.it
127.0.0.1	correiere.it
127.0.0.1	www.correiere.it
127.0.0.1	corrfiere.it
127.0.0.1	www.corrfiere.it
127.0.0.1	corrgiere.it
127.0.0.1	www.corrgiere.it
127.0.0.1	corridere.it
127.0.0.1	www.corridere.it
127.0.0.1	corriedre.it
127.0.0.1	www.corriedre.it
127.0.0.1	corriee.it
127.0.0.1	www.corriee.it
127.0.0.1	corrieere.it
127.0.0.1	www.corrieere.it
127.0.0.1	corriefre.it
127.0.0.1	www.corriefre.it
127.0.0.1	corriegre.it
127.0.0.1	www.corriegre.it
127.0.0.1	corrierde.it
127.0.0.1	www.corrierde.it
127.0.0.1	corriered.it
127.0.0.1	www.corriered.it
127.0.0.1	corrieree.it
127.0.0.1	www.corrieree.it
127.0.0.1	corrieref.it
127.0.0.1	www.corrieref.it
127.0.0.1	corrierer.it
127.0.0.1	www.corrierer.it
127.0.0.1	corrieres.it
127.0.0.1	www.corrieres.it
127.0.0.1	corrierew.it
127.0.0.1	www.corrierew.it
127.0.0.1	corrierfe.it
127.0.0.1	www.corrierfe.it
127.0.0.1	corrierge.it
127.0.0.1	www.corrierge.it
127.0.0.1	corrierr.it
127.0.0.1	www.corrierr.it
127.0.0.1	corrierre.it
127.0.0.1	www.corrierre.it
127.0.0.1	corrierse.it
127.0.0.1	www.corrierse.it
127.0.0.1	corrierte.it
127.0.0.1	www.corrierte.it
127.0.0.1	corrierw.it
127.0.0.1	www.corrierw.it
127.0.0.1	corrierwe.it
127.0.0.1	www.corrierwe.it
127.0.0.1	corriesre.it
127.0.0.1	www.corriesre.it
127.0.0.1	corriete.it
127.0.0.1	www.corriete.it
127.0.0.1	corrietre.it
127.0.0.1	www.corrietre.it
127.0.0.1	corriewre.it
127.0.0.1	www.corriewre.it
127.0.0.1	corrifere.it
127.0.0.1	www.corrifere.it
127.0.0.1	corriiere.it
127.0.0.1	www.corriiere.it
127.0.0.1	corrilere.it
127.0.0.1	www.corrilere.it
127.0.0.1	corrioere.it
127.0.0.1	www.corrioere.it
127.0.0.1	corrire.it
127.0.0.1	www.corrire.it
127.0.0.1	corrirere.it
127.0.0.1	www.corrirere.it
127.0.0.1	corrirre.it
127.0.0.1	www.corrirre.it
127.0.0.1	corrisere.it
127.0.0.1	www.corrisere.it
127.0.0.1	corriuere.it
127.0.0.1	www.corriuere.it
127.0.0.1	corriwere.it
127.0.0.1	www.corriwere.it
127.0.0.1	corriwre.it
127.0.0.1	www.corriwre.it
127.0.0.1	corrliere.it
127.0.0.1	www.corrliere.it
127.0.0.1	corroere.it
127.0.0.1	www.corroere.it
127.0.0.1	corroiere.it
127.0.0.1	www.corroiere.it
127.0.0.1	corrriere.it
127.0.0.1	www.corrriere.it
127.0.0.1	corrtiere.it
127.0.0.1	www.corrtiere.it
127.0.0.1	corruere.it
127.0.0.1	www.corruere.it
127.0.0.1	corruiere.it
127.0.0.1	www.corruiere.it
127.0.0.1	cortiere.it
127.0.0.1	www.cortiere.it
127.0.0.1	cortriere.it
127.0.0.1	www.cortriere.it
127.0.0.1	costrike.com
127.0.0.1	www.costrike.com
127.0.0.1	cotriere.it
127.0.0.1	www.cotriere.it
127.0.0.1	cotrriere.it
127.0.0.1	www.cotrriere.it
127.0.0.1	couldnotfind.com
127.0.0.1	count.cc
127.0.0.1	count.hitscount.net
127.0.0.1	count-all.com
127.0.0.1	countdutycall.info
127.0.0.1	www.countdutycall.info
127.0.0.1	counter.sexmaniack.com
127.0.0.1	cporriere.it
127.0.0.1	www.cporriere.it
127.0.0.1	cprriere.it
127.0.0.1	www.cprriere.it
127.0.0.1	cpvfeed.com
127.0.0.1	cracks.me.uk
127.0.0.1	cracks4all.com
127.0.0.1	www.cracks4all.com
127.0.0.1	crapsgold.info
127.0.0.1	www.crapsgold.info
127.0.0.1	Crazygirls-world.com
127.0.0.1	crazywinnings.com
127.0.0.1	www.crazywinnings.com
127.0.0.1	creamedcutties.com
127.0.0.1	createaccesskey.com
127.0.0.1	www.createaccesskey.com
127.0.0.1	creditsearchonline.com
127.0.0.1	crestring.com
127.0.0.1	crooder.com
127.0.0.1	crriere.it
127.0.0.1	www.crriere.it
127.0.0.1	crystalysmedia.com
127.0.0.1	www.crystalysmedia.com
127.0.0.1	csx.adservs.com
127.0.0.1	www.csx.adservs.com
127.0.0.1	cts.180solutions.com
127.0.0.1	cuisinartoven.com
127.0.0.1	www.cuisinartoven.com
127.0.0.1	curedc.info
127.0.0.1	www.curedc.info
127.0.0.1	curepcsolutions.com
127.0.0.1	www.curepcsolutions.com
127.0.0.1	curvedspaces.com
127.0.0.1	cutadult.com
127.0.0.1	www.cutadult.com
127.0.0.1	cvirgilio.it
127.0.0.1	www.cvirgilio.it
127.0.0.1	cvorriere.it
127.0.0.1	www.cvorriere.it
127.0.0.1	cvs.jps.ru
127.0.0.1	cvsymphony.com
127.0.0.1	cxorriere.it
127.0.0.1	www.cxorriere.it
127.0.0.1	cyberrape.com
127.0.0.1	www.cyberrape.com
127.0.0.1	cydom.com
127.0.0.1	cydoor.com
127.0.0.1	www.cydoor.com
127.0.0.1	daily-gals.com
127.0.0.1	dailypornmag.com
127.0.0.1	www.dailypornmag.com
127.0.0.1	dailyteenspic.com
127.0.0.1	dailytoolbar.com
127.0.0.1	www.dailytoolbar.com
127.0.0.1	dancingbabycd.com
127.0.0.1	data-hoster.com
127.0.0.1	www.data-hoster.com
127.0.0.1	datanotary.com
127.0.0.1	datareco.com
127.0.0.1	dating-galaxy.info
127.0.0.1	www.dating-galaxy.info
127.0.0.1	dating-search.net
127.0.0.1	davemarshall.org
127.0.0.1	db105.com
127.0.0.1	dbdecicated.com
127.0.0.1	www.dbdecicated.com
127.0.0.1	dbxcompany.com
127.0.0.1	www.dbxcompany.com
127.0.0.1	dcdl.dmcast.com
127.0.0.1	dcfitusa.com
127.0.0.1	dcorriere.it
127.0.0.1	www.dcorriere.it
127.0.0.1	dcurtis.com
127.0.0.1	www.dcurtis.com
127.0.0.1	dcww.dmcast.com
127.0.0.1	de.ag
127.0.0.1	de.drivecleaner.com
127.0.0.1	de.errorsafe.com
127.0.0.1	de.winantivirus.com
127.0.0.1	de98.remsys.org
127.0.0.1	debay.it
127.0.0.1	www.debay.it
127.0.0.1	dedmazay.3322.org
127.0.0.1	dedsearch.com
127.0.0.1	www.dedsearch.com
127.0.0.1	defaultsearch.net
127.0.0.1	Defensaantimalware.com
127.0.0.1	www.Defensaantimalware.com
127.0.0.1	deja-rue.com
127.0.0.1	www.deja-rue.com
127.0.0.1	derklaif.biz
127.0.0.1	www.derklaif.biz
127.0.0.1	derrari.it
127.0.0.1	www.derrari.it
127.0.0.1	desarrollocreativo.com
127.0.0.1	deskbar.worldtostart.com
127.0.0.1	www.deskbar.worldtostart.com
127.0.0.1	deskwizz.com
127.0.0.1	www.deskwizz.com
127.0.0.1	dev.ntcor.com
127.0.0.1	develip.com
127.0.0.1	dewis.spb.ru
127.0.0.1	dewis.us
127.0.0.1	df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
127.0.0.1	dgbusiness.com
127.0.0.1	www.dgbusiness.com
127.0.0.1	dialer2004.com
127.0.0.1	dialerclub.com
127.0.0.1	www.dialerclub.com
127.0.0.1	dialer-shop.com
127.0.0.1	www.dialer-shop.com
127.0.0.1	dialoff.com
127.0.0.1	www.dialoff.com
127.0.0.1	did.i-used.cc
127.0.0.1	www.did.i-used.cc
127.0.0.1	dietpills4free.com
127.0.0.1	dietpussy.com
127.0.0.1	digikeygen.com
127.0.0.1	www.digikeygen.com
127.0.0.1	digistreamsa.com
127.0.0.1	digitalcoders.net
127.0.0.1	www.digitalcoders.net
127.0.0.1	www.digitalfan.com
127.0.0.1	digital-pornography.com
127.0.0.1	dionforvalleycouncil.org
127.0.0.1	directdvdpro.com
127.0.0.1	www.directdvdpro.com
127.0.0.1	directporta.info
127.0.0.1	www.directporta.info
127.0.0.1	directsearchzone.com
127.0.0.1	www.directsearchzone.com
127.0.0.1	dist.checkin100.com
127.0.0.1	dl.ad-ware.cc
127.0.0.1	dl.malwarewipe.com
127.0.0.1	dl.targetsaver.com
127.0.0.1	www.dl.targetsaver.com
127.0.0.1	dl.web-nexus.net
127.0.0.1	dl1.antivermins.com
127.0.0.1	dl1.antivirgear.com
127.0.0.1	dl1.spydawn.com
127.0.0.1	dl1.virusprotectpro.com
127.0.0.1	dl10.spyfalcon.com
127.0.0.1	dl16.spyfalcon.com
127.0.0.1	dl2.spyfalcon.com
127.0.0.1	dl2.spyheal.com
127.0.0.1	dl2.spywarestrike.com
127.0.0.1	dl3.spyfalcon.com
127.0.0.1	dl3.spyheal.com
127.0.0.1	dl3.spywarestrike.com
127.0.0.1	dl4.spyfalcon.com
127.0.0.1	dl4.spywarestrike.com
127.0.0.1	dl5.spyfalcon.com
127.0.0.1	dl5.spywarestrike.com
127.0.0.1	dl6.spywarestrike.com
127.0.0.1	dl7.spywarestrike.com
127.0.0.1	dl8.spyheal.com
127.0.0.1	dl8.spywarestrike.com
127.0.0.1	dl9.spyfalcon.com
127.0.0.1	dmcast.com
127.0.0.1	www.dmcast.com
127.0.0.1	dnaads.com
127.0.0.1	www.dnaads.com
127.0.0.1	dnl.mabou.org
127.0.0.1	dns-look-up.com
127.0.0.1	www.dns-look-up.com
127.0.0.1	doctorwaldron.com
127.0.0.1	document-not-found.pornpic.org
127.0.0.1	doggyaction.com
127.0.0.1	dogproblemswebsite.com
127.0.0.1	www.dogproblemswebsite.com
127.0.0.1	doktorxxx.com
127.0.0.1	dollarrevenue.com
127.0.0.1	domaincar.com
127.0.0.1	www.domaincar.com
127.0.0.1	domains2003.net
127.0.0.1	domains-for-you-online.com
127.0.0.1	domain-your-registration.com
127.0.0.1	domkrat.com
127.0.0.1	dotcomtoolbar.com
127.0.0.1	www.dotcomtoolbar.com
127.0.0.1	down.136136.net
127.0.0.1	download.abetterinternet.com
127.0.0.1	download.antispywarebot.com
127.0.0.1	www.download.antispywarebot.com
127.0.0.1	download.bardownload.com
127.0.0.1	www.download.bardownload.com
127.0.0.1	download.bravesentry.com
127.0.0.1	www.download.bravesentry.com
127.0.0.1	download.cdn.drivecleaner.com
127.0.0.1	download.cdn.errorsafe.com
127.0.0.1	download.cdn.winsoftware.com
127.0.0.1	download.errorsafe.com
127.0.0.1	download.jupitersatellites.biz
127.0.0.1	www.download.jupitersatellites.biz
127.0.0.1	download.searchtabs.net
127.0.0.1	download.secureyournet.biz
127.0.0.1	www.download.secureyournet.biz
127.0.0.1	download.spyonthis.net
127.0.0.1	download.spy-shredder.com
127.0.0.1	download.systemdoctor.com
127.0.0.1	download.winantispyware.com
127.0.0.1	download.winantivirus.com
127.0.0.1	download.windrivecleaner.com
127.0.0.1	download.winfixer.com
127.0.0.1	download10.spywarequake.com
127.0.0.1	download11.spywarequake.com
127.0.0.1	download12.spywarequake.com
127.0.0.1	download13.spywarequake.com
127.0.0.1	download15.spywarequake.com
127.0.0.1	download2.spywarequake.com
127.0.0.1	download-2007.com
127.0.0.1	www.download-2007.com
127.0.0.1	download3.spyaxe.com
127.0.0.1	download3.spywarequake.com
127.0.0.1	download4.spyaxe.com
127.0.0.1	download4.spywarequake.com
127.0.0.1	download5.spyaxe.com
127.0.0.1	download5.spywarequake.com
127.0.0.1	download6.spyaxe.com
127.0.0.1	download7.spywarequake.com
127.0.0.1	download8.spywarequake.com
127.0.0.1	download9.spywarequake.com
127.0.0.1	download-ad-aware.com
127.0.0.1	www.download-ad-aware.com
127.0.0.1	download-all-4-free.com
127.0.0.1	www.download-all-4-free.com
127.0.0.1	download-all-area.com
127.0.0.1	www.download-all-area.com
127.0.0.1	download-antivir.com
127.0.0.1	www.download-antivir.com
127.0.0.1	downloadanysong.com
127.0.0.1	www.downloadanysong.com
127.0.0.1	download-avast.com
127.0.0.1	www.download-avast.com
127.0.0.1	downloadcorporation.com
127.0.0.1	www.downloadcorporation.com
127.0.0.1	download-dvdshrink.com
127.0.0.1	www.download-dvdshrink.com
127.0.0.1	download-for-free.net
127.0.0.1	www.download-for-free.net
127.0.0.1	downloadfreesoft.com
127.0.0.1	www.downloadfreesoft.com
127.0.0.1	downloadfreeway.com
127.0.0.1	www.downloadfreeway.com
127.0.0.1	downloadimesh.com
127.0.0.1	www.downloadimesh.com
127.0.0.1	download-itunes-now.com
127.0.0.1	www.download-itunes-now.com
127.0.0.1	download-limewire.org
127.0.0.1	www.download-limewire.org
127.0.0.1	downloadlost.tv
127.0.0.1	www.downloadlost.tv
127.0.0.1	downloadmax.net
127.0.0.1	www.downloadmax.net
127.0.0.1	download-mcafee.com
127.0.0.1	www.download-mcafee.com
127.0.0.1	download-me.info
127.0.0.1	downloadmediaax.com
127.0.0.1	www.downloadmediaax.com
127.0.0.1	downloadpics.net
127.0.0.1	www.downloadpics.net
127.0.0.1	download-real-player.com
127.0.0.1	www.download-real-player.com
127.0.0.1	downloads.180solutions.com
127.0.0.1	downloads.adaware.cc
127.0.0.1	downloadservicearea.com
127.0.0.1	www.downloadservicearea.com
127.0.0.1	downloads-free.org
127.0.0.1	www.downloads-free.org
127.0.0.1	downloadsglobe.com
127.0.0.1	www.downloadsglobe.com
127.0.0.1	download-this.us
127.0.0.1	www.download-this.us
127.0.0.1	download-trillian.com
127.0.0.1	www.download-trillian.com
127.0.0.1	downloadv3.com
127.0.0.1	www.downloadv3.com
127.0.0.1	downloadvax.com
127.0.0.1	www.downloadvax.com
127.0.0.1	download-windvd.com
127.0.0.1	www.download-windvd.com
127.0.0.1	download-winrar.com
127.0.0.1	www.download-winrar.com
127.0.0.1	downloadwizard.com
127.0.0.1	downloadzcenter.com
127.0.0.1	downloadzcentral.com
127.0.0.1	downloadzfree.com
127.0.0.1	www.downloadzfree.com
127.0.0.1	downloadznow.net
127.0.0.1	download-zone-free.com
127.0.0.1	www.download-zone-free.com
127.0.0.1	download-zone-free.net
127.0.0.1	www.download-zone-free.net
127.0.0.1	dp-host.com
127.0.0.1	dr.mcboo.com
127.0.0.1	dr.webhancer.com
127.0.0.1	www.dr.webhancer.com
127.0.0.1	dr2.webhancer.com
127.0.0.1	www.dr2.webhancer.com
127.0.0.1	dr38.mcboo.com
127.0.0.1	dr47.mcboo.com
127.0.0.1	dragqueen.gay-clan.com
127.0.0.1	drepubblica.it
127.0.0.1	www.drepubblica.it
127.0.0.1	drivecleaner.com
127.0.0.1	www.drivecleaner.com
127.0.0.1	drivecleanr.com
127.0.0.1	www.drivecleanr.com
127.0.0.1	drocherway.com
127.0.0.1	dropspam.com
127.0.0.1	www.dropspam.com
127.0.0.1	drug-sources-exposed.com
127.0.0.1	drvvv.com
127.0.0.1	dsupereva.it
127.0.0.1	www.dsupereva.it
127.0.0.1	dtlproduct.com
127.0.0.1	www.dtlproduct.com
127.0.0.1	dudu.com
127.0.0.1	www.dudu.com
127.0.0.1	dulcineasystems.net
127.0.0.1	dumpserv.com
127.0.0.1	duolaimi.net
127.0.0.1	dutch-sex.com
127.0.0.1	dvdaccess.net
127.0.0.1	www.dvdaccess.net
127.0.0.1	dvdbank.org
127.0.0.1	dvdcodec.net
127.0.0.1	www.dvdcodec.net
127.0.0.1	dvdsmovies.net
127.0.0.1	www.dvdsmovies.net
127.0.0.1	dvdsvideos.net
127.0.0.1	www.dvdsvideos.net
127.0.0.1	dvdtocdsite.com
127.0.0.1	www.dvdtocdsite.com
127.0.0.1	dynamique.drivecleaner.com
127.0.0.1	e3bay.it
127.0.0.1	www.e3bay.it
127.0.0.1	e4bay.it
127.0.0.1	www.e4bay.it
127.0.0.1	eager-sex.com
127.0.0.1	earthllnk.net
127.0.0.1	www.earthllnk.net
127.0.0.1	eases.net
127.0.0.1	easyantispy.com
127.0.0.1	easybestdeals.com
127.0.0.1	www.easybestdeals.com
127.0.0.1	easycategories.com
127.0.0.1	easymp3musicnow.com
127.0.0.1	www.easymp3musicnow.com
127.0.0.1	easy-pharmacy.info
127.0.0.1	www.easy-pharmacy.info
127.0.0.1	easy-search.net
127.0.0.1	easysearch4you.com
127.0.0.1	www.easysearch4you.com
127.0.0.1	easysearchingtips.com
127.0.0.1	easyspyware.com
127.0.0.1	www.easyspyware.com
127.0.0.1	easywww.info
127.0.0.1	www.easywww.info
127.0.0.1	eba6y.it
127.0.0.1	www.eba6y.it
127.0.0.1	eba7y.it
127.0.0.1	www.eba7y.it
127.0.0.1	ebaay.it
127.0.0.1	www.ebaay.it
127.0.0.1	ebagy.it
127.0.0.1	www.ebagy.it
127.0.0.1	ebahy.it
127.0.0.1	www.ebahy.it
127.0.0.1	ebajy.it
127.0.0.1	www.ebajy.it
127.0.0.1	ebaqy.it
127.0.0.1	www.ebaqy.it
127.0.0.1	ebasy.it
127.0.0.1	www.ebasy.it
127.0.0.1	ebaty.it
127.0.0.1	www.ebaty.it
127.0.0.1	ebauy.it
127.0.0.1	www.ebauy.it
127.0.0.1	ebav.com
127.0.0.1	ebaw.com
127.0.0.1	ebawy.it
127.0.0.1	www.ebawy.it
127.0.0.1	ebaxy.it
127.0.0.1	www.ebaxy.it
127.0.0.1	ebay6.it
127.0.0.1	www.ebay6.it
127.0.0.1	ebay7.it
127.0.0.1	www.ebay7.it
127.0.0.1	ebayg.it
127.0.0.1	www.ebayg.it
127.0.0.1	ebayh.it
127.0.0.1	www.ebayh.it
127.0.0.1	ebayj.it
127.0.0.1	www.ebayj.it
127.0.0.1	ebayt.it
127.0.0.1	www.ebayt.it
127.0.0.1	ebayu.it
127.0.0.1	www.ebayu.it
127.0.0.1	ebazy.it
127.0.0.1	www.ebazy.it
127.0.0.1	ebch.com
127.0.0.1	ebdv.com
127.0.0.1	ebdw.com
127.0.0.1	ebestfind.org
127.0.0.1	www.ebestfind.org
127.0.0.1	ebgay.it
127.0.0.1	www.ebgay.it
127.0.0.1	ebgo.com
127.0.0.1	ebhay.it
127.0.0.1	www.ebhay.it
127.0.0.1	ebjp.com
127.0.0.1	ebkb.com
127.0.0.1	ebkn.com
127.0.0.1	ebky.com
127.0.0.1	eblv.com
127.0.0.1	ebmu.com
127.0.0.1	ebnay.it
127.0.0.1	www.ebnay.it
127.0.0.1	ebony-pornmag.com
127.0.0.1	www.ebony-pornmag.com
127.0.0.1	ebonypornmag.com
127.0.0.1	www.ebonypornmag.com
127.0.0.1	ebqay.it
127.0.0.1	www.ebqay.it
127.0.0.1	ebsay.it
127.0.0.1	www.ebsay.it
127.0.0.1	ebsy.it
127.0.0.1	www.ebsy.it
127.0.0.1	ebvay.it
127.0.0.1	www.ebvay.it
127.0.0.1	ebvr.com
127.0.0.1	ebway.it
127.0.0.1	www.ebway.it
127.0.0.1	ebxay.it
127.0.0.1	www.ebxay.it
127.0.0.1	ebzay.it
127.0.0.1	www.ebzay.it
127.0.0.1	ecmh.com
127.0.0.1	ecmp.com
127.0.0.1	ecosrioplatenses.org
127.0.0.1	ecpm.com
127.0.0.1	ecstasyporn.net
127.0.0.1	ecwz.com
127.0.0.1	ecyb.com
12

Lyonnais92 · Answer

Bonjour,

tu relances systemscan et tu ne laisses coché que suspect files 

tu postes le rapport.

de quand date tes problèmes.

Sais tu à quoi correspond ONE SHOT ?

C'est volontaire que ta session n'ait pas les droits d'administrateur ?

Peux tu démarrer en mode sans échec sur la session administrateur ?


Si tu ne connais pas ONE SHOT et que tu démarres sur la session administrateur en mode sans échec, tu fais ceci :

Tu te déconnectes du net (physiquement), va en mode sans échec, panneau de configuration, gestion des comptes utilisateurs, suppression du compte ONE SHOT, réaffectation des droits d'administrateur à ta session.

Tu changes tous tes mots de passe.

Tu mets un mot de passe sur ta session administrateur (un vrai, 10 caractères que tu notes sur un bout de papier pour ne pas le perdre)

Mets un mot de passe sur ta session personelle.

Redémarre en mode normal.

Remets un rapport Hijackthis et dis moi ce que tu as fait.

-reb- · Answer

Bonjour

Voila le rapport que tu m'as demandé : 

SystemScan - www.suspectfile.com - ver. 3.2.2

Running on: Windows XP HOME Edition, Service Pack 2 (2600.5.1)
System directory: C:\WINDOWS

Date: 10/12/2007
Time: 18:47:25
  
Output limited to: 
 -Suspicious Files

===================== Checking Suspicious files =====================
EXE and DLL files packed with runtime packers, found in: C:\; C:\WINDOWS\; C:\WINDOWS\system32\


==========================================
Scan completed in 0,2 minutes
End of report


~~~~~~~~~~~~~~~~~~~~~-----CREDITS-----~~~~~~~~~~~~~~~~~~~~~
SystemScan uses some freeware tools that remain property of their authors:

* SteelWerX Registry Console Tool, Who Am I (Bobby Flekman: www.xs4all.nl/~fstaal01) --> "Registry scan", "PC accounts "
* dumphive (Markus Stephany)--> "Registry scan"
* Listdlls (M.Russinovich, B.Cogswell: www.sysinternals.com) --> "Loaded modules"
* Catchme (gmer: www.gmer.net) --> "Hidden objects"
* LADS (Frank Heyne Software: http://www.heysoft.de) --> "Alternate Data Streams"

Thanks to them all for their hard work

Mes problèmes datent de plusieurs mois en fait je crois mais je ne remarquais pas grand chose au départ (je n'ai pas eu de virus, mon ordi ne ramait pas etc...).Quand j'ai commencé à avoir l'accès refusé à certains fichiers et à avoir certains doutes sur l'accession de mon pc par une autre personne (j'ai des ouvertures de session réseau dans l'observateur d'évènements)  j'ai décidé de reformaté mon pc pour éradiquer le problème mais ça n'a servi à rien car à peine au bout de quelques semaines il a apparemment recommencé car c'est là que j'ai commencé à fouiller partout pour essayer de comprendre et que je me suis aperçue en mode sans échec dans l'onglet sécurité que le propriétaire de fichiers perso et système n'était aucun de mes comptes mais une tete avec un point d'interrogation rouge dessus suivie de cette SID ci la plupart du temps S-1-5-21-4266887638-3484451490-1709864121-1003 et quelque fois d'autres...

J'essaye de t'expliquer tout ça le plus clairement possible mais c'est difficile car j'y comprend pas grand chose moi-meme.

On continue par tes autres questions....
Oui ONE SHOT est mon compte administrateur et rebecca le compte à accès restreint avec lequel je voudrais surfer sur le net et faire tout ce qui n'a pas besoin de droits d'admin je les ai crée lors du formatage justement pour mieux me sécuriser mais bon ça a pas servi à grand chose on dirait...

-reb- · Answer

J'ai quelques questions moi aussi à te poser pour y voir plus clair....

Je ne suis censée appartenir à aucun réseau est-ce normal d'avoir des ouvertures de session réseau ?

J'ai deux disques dur C pour le sytème et D pour les fichiers persos, j'avais trouvé un dossier windows update sur D dont l'accès était refusé je n'y ai pas fais attention pendant quelques temps et l'ai laissé avant de le supprimer en mode sans échec quand j'ai eu des doutes (la meme SID en était propritétaire en plus) c'est possible d'utiliser les mises à jour windows pour s'introduire chez quelqu'un ?

-reb- · Answer

re salut,

J'ai enfin réussi à télécharger et installer Smitfraudfix après des dizaines d'échec...

voilà mon rapport en espérant que ça aidera à y voir plus clair !

SmitFraudFix v2.260

Rapport fait à 23:59:37,01, 10/12/2007
Executé à partir de C:\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» Process


»»»»»»»»»»»»»»»»»»»»»»»» hosts

Fichier hosts corrompu !

127.0.0.1	legal-at-spybot.info
127.0.0.1	www.legal-at-spybot.info

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrateur


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrateur\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» 


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
 

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS



»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Lyonnais92 · Answer

Re,

il a apporté une information importante;

 

Télécharge cet autre outil  de SiRi:

http://siri.urz.free.fr/RHosts.php

.double cliquer dessus pour l'exécuter

et cliquer sur " Restore original Hosts "

En fin de désinfection, il faudra que tu remettes ton fichier hosts personnel qui bloque beaucoup de sites malveillants.

mais je ne sais pas lequel tu utilises ni où tu le trouves.

Après Rhost, tu redémarres l'ordi et tu remets un rapport Smitfraudfix choix 1 en mode normal.

-reb- · Answer

J'ai restaurer les hosts originaux avec ton outils
Mon fichier host perso provenait de spybot je crois ce n'est pas moi qui l'ai installé en tout cas...

voilà mon nouveau rapport smitfraudfix 

SmitFraudFix v2.260

Rapport fait à  0:56:16,00, 11/12/2007
Executé à partir de C:\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process


»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\ONE SHOT


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\ONE SHOT\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» 


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
 

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS



»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Lyonnais92 · Answer

Bonjour,

supprime Rhosts, il a fait son travail.

Télécharge « clean.zip »
http://www.malekal.com/download/clean.zip
•- Décompresse-le sur ton bureau (clic droit / extraire tout), tu dois obtenir un dossier dénommé "clean ".
 
•- Redémarre en mode sans échec. ( note bien ce que tu as à faire ).
•- Ouvre le dossier « clean » qui se trouve sur ton bureau.
•- Double-clic sur « clean.cmd ».
Une fenêtre noire va apparaître, choisis l’option 2.

Clean va travailler.
•- Redémarre normalement
•- Poste qui se trouve ici C:\rapport_clean.txt.

jorginho67 · Answer

Salut,Lyonnais !
à ce que je vois, tu t'est encore fais des copains !!
c'est rageant............(:=( !

-reb- · Answer

Salut !

jorginho67 de quoi tu parles ??

alexplorer c'est qui le rigolo ??

-reb- · Answer

ok ok y'en a vraiment qui ont rien d'autre à faire on dirait....lol

voila mon rapport :

Script execute en mode sans echec 
Rapport clean par Malekal_morte - http://www.malekal.com 
Script execute en mode sans echec 11/12/2007 a 18:42:07,09 

Microsoft Windows XP [version 5.1.2600]
 
*** Suppression des fichiers dans C: 
 
*** Suppression des fichiers dans C:\WINDOWS\ 
 
*** Suppression des fichiers dans C:\WINDOWS\system32 
 
*** Suppression des fichiers dans C:\Program Files 
tentative de suppression de "C:\Program Files\Everest Poker\" 
 
*** Suppression des clefs du registre effectuee.. 
*** Fin du rapport !

Lyonnais92 · Answer

re,

tu ne peux toujours pas faire les mises à jour ?

-reb- · Answer

non les mises à jour s'installent toujours pas....échec de l'installation avec erreur 0x80070005 comme si j'étais pas administrateur....
je désespère...

Lyonnais92 · Answer

Re,

ouvre ce lein :

http://telechargement.zebulon.fr/zeb-restore.html

télécharge zeb restore

exécute les cas qui te concernent, en particulier Windows update.

Ressaye les mises bà jour ensuite.

-reb- · Answer

re,

J'ai testé zeb restore avec beaucoup d'espoir mais c'est toujours pareil : échec....

En tout cas je te remercie vraiment de m'aider comme ça et j'espère que tu as d'autres idéees ;-) j'ai besoin de comprendre d'où vient le problème !

Lyonnais92 · Answer

Re,

tu fais passer zeb restore,

tu reboot l'ordi

tu essayes les mises à jour

Même chose ?

-reb- · Answer

oui c'est toujours pareil malheureusement...

Lyonnais92 · Answer

Re,

télécharge combofix (par sUBs)ici :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe


et enregistre le sur le bureau.

2 double-clique sur combofix.exe et suis les instructions

3 à la fin, il va produire un rapport C:\ComboFix.txt

4 copie/colle ce rapport dans ta prochaine réponse.

Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

-reb- · Answer

salut noctambule28

merci d'essayer de m'aider mais c'est pas encore la solution miracle pour moi dommage...

-reb- · Answer

et voilà mon log Combofix ComboFix 07-12-12.3 - ONE SHOT 2007-12-13 1:29:56.5 - NTFSx86 Running from: C:\ComboFix.exe . ((((((((((((((((((((((((((((( Fichiers créés 2007-11-13 to 2007-12-13 )))))))))))))))))))))))))))))))))))) . 2007-12-11 23:49 . 2007-12-11 23:49 1,597,637 --a------ C:\ComboFix.exe 2007-12-11 23:43 . 2007-12-11 23:43 245,840 --a------ C:\dotnetfx_cleanup_tool.zip 2007-12-11 22:14 . 2007-12-11 23:16 d-------- C:\ZR_1.0.0.37 2007-12-11 22:13 . 2007-12-11 22:13 74,505 --a------ C:\Zeb-Restore.zip 2007-12-11 18:32 . 2007-12-11 20:17 d-------- C:\clean 2007-12-11 00:42 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe 2007-12-11 00:42 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe 2007-12-11 00:42 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe 2007-12-11 00:42 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe 2007-12-11 00:42 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe 2007-12-11 00:23 . 2007-12-11 01:09 d-------- C:\SmitfraudFix 2007-12-10 23:58 . 2007-12-11 00:56 1,140 --a------ C:\WINDOWS\system32 mp.reg 2007-12-07 03:53 . 2007-12-07 03:53 d-------- C:\detective 2007-12-07 03:44 . 2007-12-08 19:05 d-------- C:\HT 2007-12-07 01:54 . 2007-12-07 01:56 d-------- C:\WINDOWS\system32\NtmsData 2007-12-04 02:22 . 1998-09-30 12:24 242,448 --a------ C:\WINDOWS\system32\scedll.dll 2007-12-04 02:22 . 1998-09-30 12:26 49,936 --a------ C:\WINDOWS\system32\SeCEdit.exe 2007-12-04 02:22 . 1998-03-31 16:37 29,968 --a------ C:\WINDOWS\system32\Rshx32_5.dll 2007-12-04 02:21 . 2007-12-04 02:22 d-------- C:\scesp4i 2007-12-04 02:05 . 2007-12-04 02:05 d-------- C:\Program Files\Avira GmbH 2007-12-03 20:55 . 2007-12-03 20:55 d-------- C:\Documents and Settings\Administrateur\Application Data\vlc 2007-12-01 17:32 . 2007-12-13 00:59 d-------- C:\WINDOWS\system32\CatRoot2 2007-11-28 01:17 . 2007-11-28 01:17 d-------- C:\Documents and Settings\Rebecca\Application Data\Grisoft 2007-11-25 16:49 . 2001-08-28 14:00 563,200 --a------ C:\WINDOWS\system32\wsecedit.dll 2007-11-25 16:49 . 2001-08-28 14:00 35,719 --a------ C:\WINDOWS\system32\secpol.msc 2007-11-24 02:14 . 2007-11-24 02:14 d-------- C:\Documents and Settings\ONE SHOT\Application Data\vlc 2007-11-23 14:12 . 2007-11-23 14:12 d-------- C:\Documents and Settings\ONE SHOT\Application Data\Thunderbird 2007-11-22 02:25 . 2007-11-22 02:25 d-------- C:\Documents and Settings\Administrateur\Application Data\Grisoft 2007-11-22 01:57 . 2007-11-22 01:57 d-------- C:\Documents and Settings\ONE SHOT\Application Data\Grisoft 2007-11-22 01:56 . 2007-11-22 01:56 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft 2007-11-22 01:56 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2007-11-21 15:12 . 2007-11-21 15:12 d-------- C:\Documents and Settings\ONE SHOT\SecurityScans 2007-11-19 15:32 . 2007-11-19 15:32 d-------- C:\TEMPPB 2007-11-18 22:43 . 2007-11-18 22:43 d-------- C:\Documents and Settings\ONE SHOT\Application Data\AdobeUM 2007-11-18 22:41 . 2007-11-18 22:41 d-------- C:\Documents and Settings\ONE SHOT\Application Data\Media Player Classic 2007-11-18 19:35 . 2007-11-18 19:35 2,855 --a------ C:\WINDOWS\system32\mem.PIF . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-11 17:39 3,448 ----a-w C:\WINDOWS\system32\drivers\fwdrv.err 2007-12-04 01:05 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-12-04 01:05 --------- d-----w C:\Program Files\Fichiers communs\InstallShield 2007-11-29 19:04 --------- d-----w C:\Program Files\eMule 2007-11-08 23:16 512,096 ----a-w C:\WINDOWS\system32\drivers\amon.sys 2007-11-08 23:16 298,104 ----a-w C:\WINDOWS\system32\imon.dll 2007-11-08 23:16 15,424 ----a-w C:\WINDOWS\system32\drivers od32drv.sys 2007-11-07 14:57 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Thunderbird 2007-11-05 18:49 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2007-10-30 13:49 --------- d-----w C:\Program Files\MSN Messenger 2007-10-30 12:54 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller 2007-10-30 12:16 --------- d-----w C:\Program Files\Windows Live 2007-10-28 09:49 --------- d-----w C:\Program Files\Media Player Classic 2007-10-19 11:17 --------- d-----w C:\Program Files\EPSON 2007-10-19 11:16 --------- d-----w C:\Program Files\ArcSoft 2007-10-19 11:06 --------- d-----w C:\Program Files\Fichiers communs\EPSON 2007-09-21 21:58 99,965 ----a-w C:\WINDOWS\UninstallThunderbird.exe 2007-09-21 21:56 99,970 ----a-w C:\WINDOWS\UninstallFirefox.exe . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 00:09] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "nod32kui"="C:\Program Files\Eset od32kui.exe" [2007-11-09 00:16] "NvCplDaemon"="RUNDLL32.exe" [2004-08-20 00:10 C:\WINDOWS\system32 undll32.exe] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 03:00] "PCMService"="c:\Apps\Powercinema\PCMService.exe" [2004-01-30 10:45] "NvMediaCenter"="RUNDLL32.exe" [2004-08-20 00:10 C:\WINDOWS\system32 undll32.exe] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoFavoritesMenu"= 0 (0x0) "NoSMMyPictures"= 0 (0x0) "NoStartMenuMyMusic"= 0 (0x0) "NoRecentDocsHistory"= 1 (0x1) "NoRecentDocsNetHood"= 1 (0x1) "NoSimpleStartMenu"= 0 (0x0) [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoFavoritesMenu"= 0 (0x0) "NoSMMyPictures"= 0 (0x0) "NoStartMenuMyMusic"= 0 (0x0) "NoRecentDocsHistory"= 1 (0x1) "NoRecentDocsNetHood"= 1 (0x1) "NoUserNameInStartMenu"= 1 (0x1) "NoStartMenuPinnedList"= 0 (0x0) "ForceStartMenuLogoff"= 0 (0x0) "NoSharedDocuments"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion un-] "Ad-Watch"=C:\Program Files\Lavasoft\Ad-Aware 2007\Ad-Watch2007.exe "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB ealsched.exe" -osboot "setmode"=C:\WINDOWS\system32\Wscript.exe //e:VBS C:\DRIVERS\SETMODE\SETMODE.NEC . ************************************************************************** catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-13 01:33:25 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- PROCESS: C:\WINDOWS\system32\lsass.exe [5.01.2600.2180] -> C:\Program Files\Eset\pr_imon.dll . Completion time: 2007-12-13 1:34:43 . 2007-12-12 23:45:28 --- E O F ---

-reb- · Answer

Salut,

J'ai déja formaté ça n'a pas réglé le problème !

Lyonnais92 · Answer

Bonjour,

explore plutôt cette piste :

http://www.microsoft.com/downloads/details.aspx?familyid=36dd19df-bc5e-44b7-a339-6794d97994a2&displaylang=fr

il faut peut être aussi détruire tout ce qui a été téléchargé et est prêt à être installé. C'est dans un répertoire particulier.

Si tu ne le trouves pas, je chercherai.

Mais il doit falloir combiner le patch que je viens de te donner, la suppression des éléments téléchargés, un nettoyage de registre avec ccleaner, l'utilisation de zeb restore (Windows update) et le redémarrage de l'ordi pour prendre en compte les modifications.

-reb- · Answer

ok merci Lyonnais92 je vais voir si ton lien peut aider à résoudre mon problème. Par contre j'ai réglé les mises à jour sur "avertir quand il y'a des nouvelles mises à jour mais sans télécharger" puisque ça ne fonctionne toujours pas, est-ce que dans ce cas je dois quand meme chercher le répertoire dont tu me parles ?

Lyonnais92 · Answer

Re,

je crois que le maximum de nettoyage possible s'impose.

Le download est dans Softwaredistribution (dans c:\Windows)

Une référence qui donne une explication (vers la fin : NEW PROBLEMS INTRODUCED BY SERVICE PACK 2 (SP2))


http://aumha.org/win5/a/shtdwnxp.php

Je continue à suivre.

-reb- · Answer

Bonjour !

Je suis de retour après un break avec mon Pc j'en avais besoin je crois ....

En tout cas y'a du nouveau, ce matin en allumant le pc j'éxamine le pare-feu et j'ai vu que tous mes réglages avaient disparus comme si je venais de l'installer, je reconfigure l'essentiel et ensuite j'essaye à tout hasard de faire mes mises à jour et oh miracle ça à fonctionné enfin une chose de réglée!!

Autre changement aussi depuis 1 mois j'ai changé d'antivirus maintenant j'ai antivir....ce matin je lance antivir et il me trouve un trojan TR/Inject.JT je l'ai supprimé mais quand je fais d'autres scans j'ai des centaines de fichiers dans warnings et le meme nombre de fichiers scannés que de fichiers "non concernés" je comprends pas.....

Alors si quelqu'un a le courage de m'aider il est le bienvenu (Lyonnais92 si tu te souviens de mon cas et que tu as encore un peu de temps à m'accorder ce serait génial !)

Je vous mets mon rapport antivir pour illustrer tout ça.... 



AntiVir PersonalEdition Classic
Report file date: jeudi 10 janvier 2008  14:01

Scanning for 1023016 virus strains and unwanted programs.

Licensed to:      Avira AntiVir PersonalEdition Classic
Serial number:    0000149996-ADJIE-0001
Platform:         Windows XP
Windows version:  (Service Pack 2)  [5.1.2600]
Username:         Administrateur
Computer name:    PSYCKO

Version information:
BUILD.DAT    : 270           15603 Bytes  19/09/2007 13:32:00
AVSCAN.EXE   : 7.0.6.1      290856 Bytes  23/08/2007 13:16:29
AVSCAN.DLL   : 7.0.6.0       49192 Bytes  16/08/2007 12:23:51
LUKE.DLL     : 7.0.5.3      147496 Bytes  14/08/2007 15:32:47
LUKERES.DLL  : 7.0.6.1       10280 Bytes  21/08/2007 12:35:20
ANTIVIR0.VDF : 6.40.0.0    11030528 Bytes  18/07/2007 14:27:15
ANTIVIR1.VDF : 7.0.1.95    3367424 Bytes  14/12/2007 20:50:24
ANTIVIR2.VDF : 7.0.1.205    620544 Bytes  08/01/2008 20:48:10
ANTIVIR3.VDF : 7.0.1.217     91136 Bytes  10/01/2008 10:31:01
AVEWIN32.DLL : 7.6.0.46    3084800 Bytes  02/01/2008 20:50:26
AVWINLL.DLL  : 1.0.0.7       14376 Bytes  26/02/2007 10:36:26
AVPREF.DLL   : 7.0.2.2       25640 Bytes  18/07/2007 07:39:17
AVREP.DLL    : 7.0.0.1      155688 Bytes  16/04/2007 13:16:24
AVPACK32.DLL : 7.6.0.2      360488 Bytes  02/01/2008 20:50:26
AVREG.DLL    : 7.0.1.6       30760 Bytes  18/07/2007 07:17:06
AVARKT.DLL   : 1.0.0.20     278568 Bytes  28/08/2007 12:26:33
AVEVTLOG.DLL : 7.0.0.20      86056 Bytes  18/07/2007 07:10:18
NETNT.DLL    : 7.0.0.0        7720 Bytes  08/03/2007 11:09:42
RCIMAGE.DLL  : 7.0.1.30    2342952 Bytes  07/08/2007 12:38:13
RCTEXT.DLL   : 7.0.62.0      86056 Bytes  21/08/2007 12:50:37
SQLITE3.DLL  : 3.3.17.1     339968 Bytes  23/07/2007 09:37:21

Configuration settings for the scan:
Jobname..........................: Manual Selection
Configuration file...............: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\PROFILES\folder.avp
Logging..........................: medium
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, 
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: All files
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: jeudi 10 janvier 2008  14:01

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'guard.exe' - '1' Module(s) have been scanned
Scan process 'aawservice.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
13 processes with 13 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
      [NOTE]      No virus was found!
Master boot sector HD1
      [NOTE]      No virus was found!
Master boot sector HD2
      [NOTE]      No virus was found!
      [WARNING]   The boot sector file could not be read!
      [WARNING]   Error code: 0x0015
Master boot sector HD3
      [NOTE]      No virus was found!
      [WARNING]   The boot sector file could not be read!
      [WARNING]   Error code: 0x0015
Master boot sector HD4
      [NOTE]      No virus was found!
      [WARNING]   The boot sector file could not be read!
      [WARNING]   Error code: 0x0015
Master boot sector HD5
      [NOTE]      No virus was found!
      [WARNING]   The boot sector file could not be read!
      [WARNING]   Error code: 0x0015

Start scanning boot sectors:
Boot sector 'C:\'
      [NOTE]      No virus was found!

Starting to scan the registry.
c:\APPS\Powercinema\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Démarrage\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\WINDOWS\system32\
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Démarrage\
C:\WINDOWS\system32\
The registry was scanned ( '24' files ).


Starting the file scan:

Begin scan in 'C:\' <HDD>
C:\
C:\pagefile.sys
      [WARNING]   The file could not be opened!
      [WARNING]   Error code: 0x000D
      [WARNING]   Access error/file locked!
C:\ACTIVDOC\
C:\ACTIVDOC\INSTALL\
C:\ACTIVDOC\SETUP\
C:\ACTIVDOC\SETUP\02\
C:\ACTIVDOC\SETUP\02\guides\
C:\ACTIVDOC\SETUP\02\guides\Glossary\
C:\ACTIVDOC\SETUP\02\Hardware\CD-ROM\02cd001a\
C:\ACTIVDOC\SETUP\02\Hardware\Chassis\02ch009a\
C:\ACTIVDOC\SETUP\02\Hardware\Chassis\02ch013a\
C:\ACTIVDOC\SETUP\02\Hardware\Chassis\02ch014a\
C:\ACTIVDOC\SETUP\02\Hardware\Chassis\02ch015a\
C:\ACTIVDOC\SETUP\02\Hardware\Chassis\02ch016a\
C:\ACTIVDOC\SETUP\02\Hardware\Chassis\02ch017a\
C:\ACTIVDOC\SETUP\02\Hardware\Chassis\02ch017b\
C:\ACTIVDOC\SETUP\02\Hardware\Chassis\02ch019a\
C:\ACTIVDOC\SETUP\02\Hardware\Chassis\02ch020a\
C:\ACTIVDOC\SETUP\02\Hardware\Chassis\02ch022a\
C:\ACTIVDOC\SETUP\02\Hardware\Chassis\02ch023a\
C:\ACTIVDOC\SETUP\02\Hardware\Connect\02cx003a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex001a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex002a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex003a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex004a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex005a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex006a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex007a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex008a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex009a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex009b\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex010a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex011a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex012a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex013a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex014a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex015a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex016a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex017a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex019a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex020a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ex021a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02po000a\
C:\ACTIVDOC\SETUP\02\Hardware\Extras\02ug000a\
C:\ACTIVDOC\SETUP\02\Hardware\FaxModem\02fm007a\
C:\ACTIVDOC\SETUP\02\Hardware\FaxModem\02fm008a\
C:\ACTIVDOC\SETUP\02\Hardware\FaxModem\02fm011a\
C:\ACTIVDOC\SETUP\02\Hardware\FaxModem\02fm012a\
C:\ACTIVDOC\SETUP\02\Hardware\FaxModem\02fm014a\
C:\ACTIVDOC\SETUP\02\Hardware\FaxModem\02fm016a\
C:\ACTIVDOC\SETUP\02\Hardware\FDD\02fd001a\
C:\ACTIVDOC\SETUP\02\Hardware\HDD\02hd001a\
C:\ACTIVDOC\SETUP\02\Hardware\Keyboard\02kb005a\
C:\ACTIVDOC\SETUP\02\Hardware\Keyboard\02kb006a\
C:\ACTIVDOC\SETUP\02\Hardware\Keyboard\02kb007b\
C:\ACTIVDOC\SETUP\02\Hardware\Keyboard\02kb008b\
C:\ACTIVDOC\SETUP\02\Hardware\Keyboard\02kb009a\
C:\ACTIVDOC\SETUP\02\Hardware\Keyboard\02kb010a\
C:\ACTIVDOC\SETUP\02\Hardware\Keyboard\02kb011a\
C:\ACTIVDOC\SETUP\02\Hardware\Mobo\02mb031a\
C:\ACTIVDOC\SETUP\02\Hardware\Mobo\02mb032a\
C:\ACTIVDOC\SETUP\02\Hardware\Mobo\02mb036a\
C:\ACTIVDOC\SETUP\02\Hardware\Mobo\02mb037c\
C:\ACTIVDOC\SETUP\02\Hardware\Mobo\02mb038a\
C:\ACTIVDOC\SETUP\02\Hardware\Mobo\02mb039a\
C:\ACTIVDOC\SETUP\02\Hardware\Mobo\02mb040a\
C:\ACTIVDOC\SETUP\02\Hardware\Mobo\02mb041a\
C:\ACTIVDOC\SETUP\02\Hardware\Mobo\02mb042a\
C:\ACTIVDOC\SETUP\02\Hardware\Mobo\02mb043a\
C:\ACTIVDOC\SETUP\02\Hardware\Mobo\02mb044a\
C:\ACTIVDOC\SETUP\02\Hardware\Mobo\02mb045a\
C:\ACTIVDOC\SETUP\02\Hardware\Mobo\02mb046a\
C:\ACTIVDOC\SETUP\02\Hardware\Mobo\02mb048a\
C:\ACTIVDOC\SETUP\02\Hardware\Mobo\02mb049a\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn000e\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn014a\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn015a\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn016a\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn017a\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn018a\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn019a\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn020a\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn021a\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn022a\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn023a\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn024a\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn025a\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn026a\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn027a\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn028a\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn029a\
C:\ACTIVDOC\SETUP\02\Hardware\Monitor\02mn030a\
C:\ACTIVDOC\SETUP\02\Hardware\Network\02nw002a\
C:\ACTIVDOC\SETUP\02\Hardware\Network\02nw004a\
C:\ACTIVDOC\SETUP\02\Hardware\Readers\02rd001a\
C:\ACTIVDOC\SETUP\02\Hardware\Readers\02rd002a\
C:\ACTIVDOC\SETUP\02\Hardware\Readers\02rd003a\
C:\ACTIVDOC\SETUP\02\Hardware\Readers\02rd004a\
C:\ACTIVDOC\SETUP\02\Hardware\Readers\02rd005a\
C:\ACTIVDOC\SETUP\02\Hardware\Readers\02rd006a\
C:\ACTIVDOC\SETUP\02\Hardware\Sound\02sd002a\
C:\ACTIVDOC\SETUP\02\Hardware\Sound\02sd003a\
C:\ACTIVDOC\SETUP\02\Hardware\Sound\02sd004a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr007a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr009a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr010a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr011a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr012a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr013a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr014a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr015a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr016a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr017a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr018a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr019a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr020a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr022a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr024a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr025a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr026a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr027a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr028a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr029a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr030a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr031a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr032a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr033a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr034a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr035a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr036a\
C:\ACTIVDOC\SETUP\02\Hardware\Storage\02dr037a\
C:\ACTIVDOC\SETUP\02\Hardware\TVtuner\02tv001a\
C:\ACTIVDOC\SETUP\02\Hardware\TVtuner\02tv002a\
C:\ACTIVDOC\SETUP\02\Hardware\TVtuner\02tv003a\
C:\ACTIVDOC\SETUP\02\Hardware\TVtuner\02tv005a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd012a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd013a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd014a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd015a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd016a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd017a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd018a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd019a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd020a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd021a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd022a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd022b\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd023a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd024a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd025a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd026a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd027a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd028a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd029a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd030a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd031a\
C:\ACTIVDOC\SETUP\02\Hardware\Video\02vd032a\
C:\ACTIVDOC\SETUP\02\Howto\hard\02hwht01\
C:\ACTIVDOC\SETUP\02\Howto\hard\02hwht03\
C:\ACTIVDOC\SETUP\02\Howto\maintain\02xpmt10\
C:\ACTIVDOC\SETUP\02\Howto\XP\02xpht04\
C:\ACTIVDOC\SETUP\02\Howto\XP\02xpht08\
C:\ACTIVDOC\SETUP\02\Navigate\
C:\ACTIVDOC\SETUP\02\Notebook\02fthr\
C:\ACTIVDOC\SETUP\02\Notebook\02fthr\02bi021a\
C:\ACTIVDOC\SETUP\02\Notebook\02fthr\02co021a\
C:\ACTIVDOC\SETUP\02\Notebook\02fthr\02dd021a\
C:\ACTIVDOC\SETUP\02\Notebook\02fthr\02in021a\
C:\ACTIVDOC\SETUP\02\Notebook\02fthr\02po021a\
C:\ACTIVDOC\SETUP\02\Notebook\02fthr\02pw021a\
C:\ACTIVDOC\SETUP\02\Notebook\02fthr\02sp021a\
C:\ACTIVDOC\SETUP\02\Notebook\02fthr\02tr021a\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrla\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrla\02bi022a\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrla\02co022a\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrla\02dd022a\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrla\02in022a\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrla\02po022a\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrla\02pw022a\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrla\02sp022a\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrla\02tr022a\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrlb\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrlb\02bi022b\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrlb\02co022b\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrlb\02dd022b\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrlb\02in022b\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrlb\02po022b\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrlb\02pw022b\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrlb\02sp022b\
C:\ACTIVDOC\SETUP\02\Notebook\02ghrlb\02tr022b\
C:\ACTIVDOC\SETUP\02\Notebook\02K1\
C:\ACTIVDOC\SETUP\02\Notebook\02K1\02bi023a\
C:\ACTIVDOC\SETUP\02\Notebook\02K1\02co023a\
C:\ACTIVDOC\SETUP\02\Notebook\02K1\02dd023a\
C:\ACTIVDOC\SETUP\02\Notebook\02K1\02in023a\
C:\ACTIVDOC\SETUP\02\Notebook\02K1\02po023a\
C:\ACTIVDOC\SETUP\02\Notebook\02K1\02pw023a\
C:\ACTIVDOC\SETUP\02\Notebook\02K1\02sp023a\
C:\ACTIVDOC\SETUP\02\Notebook\02K1\02tr023a\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxa\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxa\02bi020a\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxa\02co020a\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxa\02dd020a\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxa\02in020a\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxa\02po020a\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxa\02pw020a\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxa\02sp020a\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxa\02tr020a\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxb\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxb\02bi020b\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxb\02co020b\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxb\02dd020b\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxb\02in020b\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxb\02po020b\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxb\02pw020b\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxb\02sp020b\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxb\02tr020b\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxc\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxc\02bi020c\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxc\02co020c\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxc\02dd020c\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxc\02in020c\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxc\02po020c\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxc\02pw020c\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxc\02sp020c\
C:\ACTIVDOC\SETUP\02\Notebook\02lynxc\02tr020c\
C:\ACTIVDOC\SETUP\02\Notebook\02NR1\
C:\ACTIVDOC\SETUP\02\Notebook\02NR1\02bi024a\
C:\ACTIVDOC\SETUP\02\Notebook\02NR1\02co024a\
C:\ACTIVDOC\SETUP\02\Notebook\02NR1\02dd024a\
C:\ACTIVDOC\SETUP\02\Notebook\02NR1\02in024a\
C:\ACTIVDOC\SETUP\02\Notebook\02NR1\02po024a\
C:\ACTIVDOC\SETUP\02\Notebook\02NR1\02pw024a\
C:\ACTIVDOC\SETUP\02\Notebook\02NR1\02sp024a\
C:\ACTIVDOC\SETUP\02\Notebook\02NR1\02tr024a\
C:\ACTIVDOC\SETUP\02\Notebook\02Static\02bi000a\
C:\ACTIVDOC\SETUP\02\Notebook\02Static\02co000a\
C:\ACTIVDOC\SETUP\02\Notebook\02Static\02dd000a\
C:\ACTIVDOC\SETUP\02\Notebook\02Static\02in000a\
C:\ACTIVDOC\SETUP\02\Notebook\02Static\02pb000a\
C:\ACTIVDOC\SETUP\02\Notebook\02Static\02po000a\
C:\ACTIVDOC\SETUP\02\Notebook\02Static\02pw000a\
C:\ACTIVDOC\SETUP\02\Notebook\02Static\02sp000a\
C:\ACTIVDOC\SETUP\02\Notebook\02Static\02tl000a\
C:\ACTIVDOC\SETUP\02\Notebook\02Static\02tr000a\
C:\ACTIVDOC\SETUP\02\Notebook\02Static\02wa000a\
C:\ACTIVDOC\SETUP\Static\
C:\ACTIVDOC\SETUP\Static\common\
C:\ACTIVDOC\SETUP\Static\common\brand\
C:\ACTIVDOC\SETUP\Static\Hardware\CD-ROM\CD001A\
C:\ACTIVDOC\SETUP\Static\Hardware\Chassis\ch000a\
C:\ACTIVDOC\SETUP\Static\Hardware\Chassis\ch000b\
C:\ACTIVDOC\SETUP\Static\Hardware\Chassis\ch009a\
C:\ACTIVDOC\SETUP\Static\Hardware\Chassis\ch013a\
C:\ACTIVDOC\SETUP\Static\Hardware\Chassis\ch014a\
C:\ACTIVDOC\SETUP\Static\Hardware\Chassis\ch015a\
C:\ACTIVDOC\SETUP\Static\Hardware\Chassis\ch016a\
C:\ACTIVDOC\SETUP\Static\Hardware\Chassis\ch017a\
C:\ACTIVDOC\SETUP\Static\Hardware\Chassis\ch017b\
C:\ACTIVDOC\SETUP\Static\Hardware\Chassis\ch019a\
C:\ACTIVDOC\SETUP\Static\Hardware\Chassis\ch020a\
C:\ACTIVDOC\SETUP\Static\Hardware\Chassis\ch021a\
C:\ACTIVDOC\SETUP\Static\Hardware\Chassis\ch022a\
C:\ACTIVDOC\SETUP\Static\Hardware\Chassis\ch023a\
C:\ACTIVDOC\SETUP\Static\Hardware\Connect\cx003a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex000a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex001a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex005a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex006a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex007a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex008a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex009a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex009b\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex010a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex012a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex013a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex014a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex015a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex016a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex017a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex018a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex019a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex019a\setup\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex019a\setup\Binary\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex019a\setup\Drivers\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex019a\setup\Programs\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex020a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ex021a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\media\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\po000a\
C:\ACTIVDOC\SETUP\Static\Hardware\Extras\ug000a\
C:\ACTIVDOC\SETUP\Static\Hardware\FaxModem\fm007a\
C:\ACTIVDOC\SETUP\Static\Hardware\FaxModem\fm008a\
C:\ACTIVDOC\SETUP\Static\Hardware\FaxModem\fm011a\
C:\ACTIVDOC\SETUP\Static\Hardware\FaxModem\fm012a\
C:\ACTIVDOC\SETUP\Static\Hardware\FaxModem\fm014a\
C:\ACTIVDOC\SETUP\Static\Hardware\FaxModem\fm015a\
C:\ACTIVDOC\SETUP\Static\Hardware\FaxModem\fm016a\
C:\ACTIVDOC\SETUP\Static\Hardware\FDD\FD001A\
C:\ACTIVDOC\SETUP\Static\Hardware\HDD\HD001A\
C:\ACTIVDOC\SETUP\Static\Hardware\Keyboard\kb000a\ka\
C:\ACTIVDOC\SETUP\Static\Hardware\Keyboard\kb000a\kb\
C:\ACTIVDOC\SETUP\Static\Hardware\Keyboard\kb000a\kc\
C:\ACTIVDOC\SETUP\Static\Hardware\Keyboard\kb000a\kk\
C:\ACTIVDOC\SETUP\Static\Hardware\Keyboard\kb000a\kr\
C:\ACTIVDOC\SETUP\Static\Hardware\Keyboard\kb006a\
C:\ACTIVDOC\SETUP\Static\Hardware\Keyboard\kb009a\ka\
C:\ACTIVDOC\SETUP\Static\Hardware\Keyboard\kb009a\kb\
C:\ACTIVDOC\SETUP\Static\Hardware\Keyboard\kb009a\kc\
C:\ACTIVDOC\SETUP\Static\Hardware\Keyboard\kb009a\kk\
C:\ACTIVDOC\SETUP\Static\Hardware\Keyboard\kb009a\kr\
C:\ACTIVDOC\SETUP\Static\Hardware\Keyboard\kb010a\kb\
C:\ACTIVDOC\SETUP\Static\Hardware\Keyboard\kb010a\kc\
C:\ACTIVDOC\SETUP\Static\Hardware\Keyboard\kb010a\kk\
C:\ACTIVDOC\SETUP\Static\Hardware\Keyboard\kb011a\kb\
C:\ACTIVDOC\SETUP\Static\Hardware\Keyboard\kb011a\kc\
C:\ACTIVDOC\SETUP\Static\Hardware\Keyboard\kb011a\kk\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb000a\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb031a\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb032a\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb036a\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb037b\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb037c\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb038a\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb039a\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb040a\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb041a\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb042a\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb043a\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb044a\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb045a\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb046a\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb047a\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb048a\
C:\ACTIVDOC\SETUP\Static\Hardware\Mobo\mb049a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn000a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn014a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn014a\OSD\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn015a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn015a\OSD\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn016a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn016a\OSD\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn017a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn017a\OSD\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn018a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn018a\OSD\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn019a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn019a\OSD\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn020a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn020a\OSD\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn021a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn022a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn022a\OSD\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn023a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn024a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn025a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn026a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn027a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn028a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn029a\
C:\ACTIVDOC\SETUP\Static\Hardware\Monitor\mn030a\
C:\ACTIVDOC\SETUP\Static\Hardware\Network
w002a\
C:\ACTIVDOC\SETUP\Static\Hardware\Network
w004a\
C:\ACTIVDOC\SETUP\Static\Hardware\Readersd000a\
C:\ACTIVDOC\SETUP\Static\Hardware\Readersd001a\
C:\ACTIVDOC\SETUP\Static\Hardware\Readersd002a\
C:\ACTIVDOC\SETUP\Static\Hardware\Readersd005a\
C:\ACTIVDOC\SETUP\Static\Hardware\Readersd006a\
C:\ACTIVDOC\SETUP\Static\Hardware\Sound\sd002a\
C:\ACTIVDOC\SETUP\Static\Hardware\Sound\sd003a\
C:\ACTIVDOC\SETUP\Static\Hardware\Sound\sd004a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr000a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr007a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr009a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr010a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr011a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr012a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr013a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr014a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr015a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr016a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr017a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr018a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr019a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr020a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr022a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr024a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr025a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr026a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr027a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr028a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr029a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr030a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr031a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr032a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr033a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr034a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr035a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr036a\
C:\ACTIVDOC\SETUP\Static\Hardware\Storage\dr037a\
C:\ACTIVDOC\SETUP\Static\Hardware\TVtuner	v001a\
C:\ACTIVDOC\SETUP\Static\Hardware\TVtuner	v002a\
C:\ACTIVDOC\SETUP\Static\Hardware\TVtuner	v003a\
C:\ACTIVDOC\SETUP\Static\Hardware\TVtuner	v004a\
C:\ACTIVDOC\SETUP\Static\Hardware\TVtuner	v005a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd000a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd012a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd013a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd014a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd015a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd016a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd017a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd018a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd019a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd020a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd021a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd022a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd022b\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd023a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd024a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd025a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd026a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd027a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd028a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd029a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd030a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd031a\
C:\ACTIVDOC\SETUP\Static\Hardware\Video\vd032a\
C:\ACTIVDOC\SETUP\Static\howto\hard\hwht01\
C:\ACTIVDOC\SETUP\Static
otebook\fthr\co021a\
C:\ACTIVDOC\SETUP\Static
otebook\fthr\dd021a\
C:\ACTIVDOC\SETUP\Static
otebook\fthr\in021a\
C:\ACTIVDOC\SETUP\Static
otebook\fthr\po021a\
C:\ACTIVDOC\SETUP\Static
otebook\fthr\pw021a\
C:\ACTIVDOC\SETUP\Static
otebook\fthr	r021a\
C:\ACTIVDOC\SETUP\Static
otebook\ghrl\co022\
C:\ACTIVDOC\SETUP\Static
otebook\ghrl\dd022\
C:\ACTIVDOC\SETUP\Static
otebook\ghrl\in022\
C:\ACTIVDOC\SETUP\Static
otebook\ghrl\po022\
C:\ACTIVDOC\SETUP\Static
otebook\ghrl\pw022\
C:\ACTIVDOC\SETUP\Static
otebook\ghrl	r022\
C:\ACTIVDOC\SETUP\Static
otebook\K1\co023a\
C:\ACTIVDOC\SETUP\Static
otebook\K1\dd023a\
C:\ACTIVDOC\SETUP\Static
otebook\K1\in023a\
C:\ACTIVDOC\SETUP\Static
otebook\K1\po023a\
C:\ACTIVDOC\SETUP\Static
otebook\K1\pw023a\
C:\ACTIVDOC\SETUP\Static
otebook\K1	r023a\
C:\ACTIVDOC\SETUP\Static
otebook\lynx\co020\
C:\ACTIVDOC\SETUP\Static
otebook\lynx\dd020\
C:\ACTIVDOC\SETUP\Static
otebook\lynx\in020\
C:\ACTIVDOC\SETUP\Static
otebook\lynx\po020\
C:\ACTIVDOC\SETUP\Static
otebook\lynx\pw020\
C:\ACTIVDOC\SETUP\Static
otebook\lynx	r020\
C:\ACTIVDOC\SETUP\Static
otebook\NBstatic\co\
C:\ACTIVDOC\SETUP\Static
otebook\NBstatic\dd\
C:\ACTIVDOC\SETUP\Static
otebook\NBstatic\in\
C:\ACTIVDOC\SETUP\Static
otebook\NBstatic\Legal\
C:\ACTIVDOC\SETUP\Static
otebook\NBstatic\po\
C:\ACTIVDOC\SETUP\Static
otebook\NBstatic\pw\
C:\ACTIVDOC\SETUP\Static
otebook\NR1\co024a\
C:\ACTIVDOC\SETUP\Static
otebook\NR1\dd024a\
C:\ACTIVDOC\SETUP\Static
otebook\NR1\in024a\
C:\ACTIVDOC\SETUP\Static
otebook\NR1\po024a\
C:\ACTIVDOC\SETUP\Static
otebook\NR1\pw024a\
C:\ACTIVDOC\SETUP\Static
otebook\NR1	r024a\
C:\ACTIVDOC\SETUP\TOOLS\
C:\ACTIVDOC\SETUP\TOOLS\XP\
C:\APPS\AOL8\
C:\APPS\AOL8\media\
C:\APPS\ICO\
C:\APPS\ICO\AOL8\
C:\APPS\ICO\NIS\
C:\APPS\ICO\PBLINKS\
C:\APPS\NIS\
C:\APPS\NIS\MANUAL\
C:\APPS\NIS\Nis\
C:\APPS\NIS\Nis\MSSHLIB\
C:\APPS\NIS\RESCUE\
C:\APPS\NIS\SUPPORT\EDISK\
C:\APPS\NIS\SUPPORT\LIVEREG\
C:\APPS\NIS\SUPPORT\LUPDATE\
C:\APPS\NIS\SUPPORT\MEMSCAN\
C:\APPS\NIS\SUPPORT\NAVTOOLS\NAVEGG\
C:\APPS\NIS\SUPPORT\NAVTOOLS\REPAIR\
C:\APPS\NIS\SUPPORT\PCA_HOST\
C:\APPS\NIS\VIRUSDEF\
C:\APPS\NIS\VIRUSDEF\LATEST\
C:\APPS\Powercinema\
C:\APPS\Powercinema\Capture\
C:\APPS\Powercinema\Capture\PlugIns\
C:\APPS\Powercinema\Help\
C:\APPS\Powercinema\Layout\Img\Authoring\
C:\APPS\Powercinema\Layout\Img\Common\
C:\APPS\Powercinema\Layout\Img\FloatingWnd\Caption\
C:\APPS\Powercinema\Layout\Img\FloatingWnd\Control\
C:\APPS\Powercinema\Layout\Img\Logo\
C:\APPS\Powercinema\Layout\Img\Movie\
C:\APPS\Powercinema\Layout\Img\Music\
C:\APPS\Powercinema\Layout\Img\Photo\
C:\APPS\Powercinema\Layout\Img\Radio\
C:\APPS\Powercinema\Layout\Img\Root\
C:\APPS\Powercinema\Layout\Img\Root\·s¸ê®Æ§¨\
C:\APPS\Powercinema\Layout\Img\TV\
C:\APPS\Powercinema\Layout\Img\TV_timebar\
C:\APPS\Powercinema\Layout\Img\Video\
C:\APPS\Powercinema\Layout\XML\
C:\APPS\Powercinema\Layout\XML\Authoring\Burn\
C:\APPS\Powercinema\Layout\XML\Authoring\Play\
C:\APPS\Powercinema\Layout\XML\Authoring\Preview\
C:\APPS\Powercinema\Layout\XML\FloatingBar\CaptionBar\
C:\APPS\Powercinema\Layout\XML\FloatingBar\PlaybackBar\AuthoringPlaybackBar\
C:\APPS\Powercinema\Layout\XML\FloatingBar\PlaybackBar\MoviePlaybackBar\
C:\APPS\Powercinema\Layout\XML\FloatingBar\PlaybackBar\MusicPlaybackBar\
C:\APPS\Powercinema\Layout\XML\FloatingBar\PlaybackBar\PhotoPlaybackBar\
C:\APPS\Powercinema\Layout\XML\FloatingBar\PlaybackBar\RadioPlaybackBar\
C:\APPS\Powercinema\Layout\XML\FloatingBar\PlaybackBar\TVPlaybackBar\
C:\APPS\Powercinema\Layout\XML\FloatingBar\PlaybackBar\VideoPlaybackBar\
C:\APPS\Powercinema\Layout\XML\Movie\DeviceSelection\
C:\APPS\Powercinema\Layout\XML\Movie\Main\
C:\APPS\Powercinema\Layout\XML\Movie\NoDisc\
C:\APPS\Powercinema\Layout\XML\Movie\NotSupportDTS\
C:\APPS\Powercinema\Layout\XML\Movie\PopUp\
C:\APPS\Powercinema\Layout\XML\Movie\Region\AdministratorMsg\
C:\APPS\Powercinema\Layout\XML\Movie\Region\LimitedMsg\
C:\APPS\Powercinema\Layout\XML\Movie\Region\SelRegion\
C:\APPS\Powercinema\Layout\XML\Movie\Setting\AudioSetting\
C:\APPS\Powercinema\Layout\XML\Movie\Setting\LanguageSetting\
C:\APPS\Powercinema\Layout\XML\Movie\Setting\PLCSetting\PLCAllowPlayMsg\
C:\APPS\Powercinema\Layout\XML\Movie\Setting\PLCSetting\PLCEnterConfirmPIN\
C:\APPS\Powercinema\Layout\XML\Movie\Setting\PLCSetting\PLCEnterPIN\
C:\APPS\Powercinema\Layout\XML\Movie\Setting\PLCSetting\PLCErrorPINMsg\
C:\APPS\Powercinema\Layout\XML\Movie\Setting\PLCSetting\PLCProgConfirmPIN\
C:\APPS\Powercinema\Layout\XML\Movie\Setting\PLCSetting\PLCRemovePINOKMsg\
C:\APPS\Powercinema\Layout\XML\Movie\Setting\PLCSetting\PLCRemovePINYNMsg\
C:\APPS\Powercinema\Layout\XML\Movie\Setting\PLCSetting\PLCSelLevel\
C:\APPS\Powercinema\Layout\XML\Movie\Setting\VideoSetting\
C:\APPS\Powercinema\Layout\XML\Music\AudioCapture\
C:\APPS\Powercinema\Layout\XML\Music\AudioCD\RipCDNow\
C:\APPS\Powercinema\Layout\XML\Music\AudioCD\RipCDTrackSel\
C:\APPS\Powercinema\Layout\XML\Music\AudioCD\Tracks\
C:\APPS\Powercinema\Layout\XML\Music\Burnning\Preview\
C:\APPS\Powercinema\Layout\XML\Music\Burnning\SelectSourceType\
C:\APPS\Powercinema\Layout\XML\Music\Burnning\SelectTracks\
C:\APPS\Powercinema\Layout\XML\Music\MediaSearch\
C:\APPS\Powercinema\Layout\XML\Music\MusicDevice\
C:\APPS\Powercinema\Layout\XML\Music\MusicFolderSelector\
C:\APPS\Powercinema\Layout\XML\Music\RecentMusic\
C:\APPS\Powercinema\Layout\XML\Music\Settings\MusicSetting\
C:\APPS\Powercinema\Layout\XML\Music\Settings\VisualizationSetting\
C:\APPS\Powercinema\Layout\XML\Music\SourceType\
C:\APPS\Powercinema\Layout\XML\Music\Tracks\
C:\APPS\Powercinema\Layout\XML\Music\VisualizationDisplay\
C:\APPS\Powercinema\Layout\XML\Photo\PhotoBGMusic\
C:\APPS\Powercinema\Layout\XML\Photo\PhotoBrowser\
C:\APPS\Powercinema\Layout\XML\Photo\PhotoBurningBrowser\
C:\APPS\Powercinema\Layout\XML\Photo\PhotoDisplay\
C:\APPS\Powercinema\Layout\XML\Photo\PhotoDriveSelector\
C:\APPS\Powercinema\Layout\XML\Photo\PhotoEditingBrowser\
C:\APPS\Powercinema\Layout\XML\Photo\PhotoEditingView\
C:\APPS\Powercinema\Layout\XML\Photo\PhotoFolderSelector\
C:\APPS\Powercinema\Layout\XML\Photo\PhotoFullScreenDisplay\
C:\APPS\Powercinema\Layout\XML\Photo\PhotoImageAcquisitionBrowser\
C:\APPS\Powercinema\Layout\XML\Photo\PhotoMyPicture\
C:\APPS\Powercinema\Layout\XML\Photo\PhotoRecentPicture\
C:\APPS\Powercinema\Layout\XML\Photo\PhotoSetting\
C:\APPS\Powercinema\Layout\XML\PopupWnd\BufferTime\
C:\APPS\Powercinema\Layout\XML\Radio\ConflictSchedulePage\
C:\APPS\Powercinema\Layout\XML\Radio\MainPage\
C:\APPS\Powercinema\Layout\XML\Radio\ProcessingPage\
C:\APPS\Powercinema\Layout\XML\Radio\RadioMsgPage\
C:\APPS\Powercinema\Layout\XML\Radio\SchedulePage\
C:\APPS\Powercinema\Layout\XML\Radio\SetSchedulePage\
C:\APPS\Powercinema\Layout\XML\Radio\SettingPage\
C:\APPS\Powercinema\Layout\XML\Root\
C:\APPS\Powercinema\Layout\XML\Setting\SettingAbout\
C:\APPS\Powercinema\Layout\XML\Setting\SettingMain\
C:\APPS\Powercinema\Layout\XML\TV\AutoScan\
C:\APPS\Powercinema\Layout\XML\TV\ChannelMove\
C:\APPS\Powercinema\Layout\XML\TV\ChannelSetting\
C:\APPS\Powercinema\Layout\XML\TV\Conflict\
C:\APPS\Powercinema\Layout\XML\TV\MainMenu\
C:\APPS\Powercinema\Layout\XML\TV\Preview\
C:\APPS\Powercinema\Layout\XML\TV\Schedule\
C:\APPS\Powercinema\Layout\XML\TV\SetSchedule\
C:\APPS\Powercinema\Layout\XML\TV\SignalSetting\
C:\APPS\Powercinema\Layout\XML\TV\Teletext\
C:\APPS\Powercinema\Layout\XML\TV\Transparent\
C:\APPS\Powercinema\Layout\XML\TV\TVWall\
C:\APPS\Powercinema\Layout\XML\VIDEO\BurnVideos\SelectVideos\
C:\APPS\Powercinema\Layout\XML\VIDEO\CaptureVideos\
C:\APPS\Powercinema\Layout\XML\VIDEO\MyVideos\
C:\APPS\Powercinema\Layout\XML\VIDEO\NoCaptureDevice\
C:\APPS\Powercinema\Layout\XML\VIDEO\PlayVideo\
C:\APPS\Powercinema\Layout\XML\VIDEO\RecentVideos\
C:\APPS\Powercinema\Layout\XML\VIDEO\SelectDevice\
C:\APPS\Powercinema\Layout\XML\VIDEO\Setting\CaptureSetting\
C:\APPS\Powercinema\Layout\XML\VIDEO\Setting\GeneralSetting\
C:\APPS\Powercinema\Layout\XML\VIDEO\Setting\SelectFolder\
C:\APPS\Powercinema\Movie\
C:\APPS\Powercinema\Music\
C:\APPS\Powercinema\Photo\
C:\APPS\Powercinema\Radio\
C:\APPS\Powercinema\Teletext\
C:\APPS\Powercinema\Video\
C:\clean\
C:\cmdcons\
C:\cmdcons\system32\
C:\detective\
C:\DIVTOOLS\
C:\DIVTOOLS\MYPCDOC\
C:\DIVTOOLS\UNZIP\
C:\DIVTOOLS\ZIP\
C:\Documents and Settings\Administrateur\
C:\Documents and Settings\Administrateur
tuser.dat
      [WARNING]   The file could not be opened!
      [WARNING]   Error code: 0x000D
      [WARNING]   Access error/file locked!
C:\Documents and Settings\Administrateur
tuser.dat.LOG
      [WARNING]   The file could not be opened!
      [WARNING]   Error code: 0x000D
      [WARNING]   Access error/file locked!
C:\Documents and Settings\Administrateur\Application Data\
C:\Documents and Settings\Administrateur\Application Data\Grisoft\AVG Antispyware 7.5\Reports\
C:\Documents and Settings\Administrateur\Application Data\Microsoft\Address Book\
C:\Documents and Settings\Administrateur\Application Data\Microsoft\HTML Help\
C:\Documents and Settings\Administrateur\Application Data\Microsoft\Internet Explorer\
C:\Documents and Settings\Administrateur\Application Data\Microsoft\Internet Explorer\Quick Launch\
C:\Documents and Settings\Administrateur\Application Data\Microsoft\Media Player\
C:\Documents and Settings\Administrateur\Application Data\Microsoft\Protect\
C:\Documents and Settings\Administrateur\Application Data\Microsoft\Protect\S-1-5-21-4266887638-3484514902-1709864122-500\
C:\Documents and Settings\Administrateur\Application Data\Microsoft\Windows\Themes\
C:\Documents and Settings\Administrateur\Application Data\Mozilla\
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\5trlk5ps.default\
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\5trlk5ps.default\bookmarkbackups\
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\5trlk5ps.default\chrome\
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qsyi0j36.default\
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qsyi0j36.default\bookmarkbackups\
C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qsyi0j36.default\chrome\
C:\Documents and Settings\Administrateur\Application Data\Realnadmin\
C:\Documents and Settings\Administrateur\Application Data\Sun\Java\Deployment\
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bgacstlh.default\
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bgacstlh.default\extensions\
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bgacstlh.default\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bgacstlh.default\Mail\Local Folders\
C:\Documents and Settings\Administrateur\Application Data\Thunderbird\Profiles\bgacstlh.default\Mail\pop.free.fr\
C:\Documents and Settings\Administrateur\Application Data\vlc\
C:\Documents and Settings\Administrateur\Application Data\vlc\cache\
C:\Documents and Settings\Administrateur\Cookies\
C:\Documents and Settings\Administrateur\Favoris\
C:\Documents and Settings\Administrateur\Local Settings\
C:\Documents and Settings\Administrateur\Local Settings\Application Data\
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\HelpCtr\
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Internet Explorer\
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Media Player\
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows\
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
      [WARNING]   The file could not be opened!
      [WARNING]   Error code: 0x000D
      [WARNING]   Access error/file locked!
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG
      [WARNING]   The file could not be opened!
      [WARNING]   Error code: 0x000D
      [WARNING]   Access error/file locked!
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Microsoft\Windows Media\9.0\
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\5trlk5ps.default\
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\5trlk5ps.default\Cache\
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\5trlk5ps.default\Cache\C0487342d01
  [0] Archive type: GZ
  --> unkwn
      [WARNING]   Possible archive bomb: the maximum compression ratio has been exceeded.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\qsyi0j36.default\Cache\
C:\Documents and Settings\Administrateur\Local Settings\Historique\
C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\
C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\MSHist012007111920071126\
C:\Documents and Settings\Administrateur\Local Settings\Historique\History.IE5\MSHist012007120320071204\
C:\Documents and Settings\Administrateur\Local Settings	emp\
C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\
C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\AntiPhishing\
C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\
C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\9Q060R4E\
C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\CW1XC4ZN\
C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\KLNOJAN4\
C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\NTQNRQSI\
C:\Documents and Settings\Administrateur\Menu Démarrer\
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Accessibilité\
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Accessoires\Divertissement\
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Démarrage\
C:\Documents and Settings\Administrateur\Mes documents\
C:\Documents and Settings\Administrateur\Mes documents\Ma musique\
C:\Documents and Settings\Administrateur\Mes documents\Mes images\
C:\Documents and Settings\Administrateur\Modèles\
C:\Documents and Settings\Administrateur\Recent\
C:\Documents and Settings\Administrateur\SecurityScans\Config\
C:\Documents and Settings\Administrateur\SendTo\
C:\Documents and Settings\All Users\
C:\Documents and Settings\All Users\Application Data\
C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat\6.0\Replicate\Security\
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\BACKUP\FAILSAFE\
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\EVENTDB\
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\IDX\
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\JOBS\
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\LOGFILES\
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\PROFILES\
C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Classic\REPORTS\
C:\Documents and Settings\All Users\Application Data\Grisoft\AVG Anti-Spyware 7.5\Downloads\
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware 2007\
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware 2007\logs\
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware 2007\update\backup\
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware 2007\update\backup\%SYSTEM%\drivers\
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware 2007\update\backup\Lang\
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware 2007\update
ew\
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware 2007\update
ew\%SYSTEM%\drivers\
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware 2007\update
ew\Lang\
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\S-1-5-18\
C:\Documents and Settings\All Users\Application Data\Microsoft\HTML Help\
C:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\
C:\Documents and Settings\All Users\Application Data\Microsoft\Media Player\
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Connections\Pbk\
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\
C:\Documents and Settings\All Users\Application Data\Microsoft\User Account Pictures\
C:\Documents and Settings\All Users\Application Data\Microsoft\User Account Pictures\Default Pictures\
C:\Documents and Settings\All Users\Application Data\Microsoft\USMT\
C:\Documents and Settings\All Users\Application Data\Microsoft\Works\
C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage\data\
C:\Documents and Settings\All Users\Application Data\QuickTime\
C:\Documents and Settings\All Users\Application Data\SBSI\ORUN\
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Backups\
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Excludes\
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Logs\
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AdobeAcrobatReader.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AdobeAcrobatReader1.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AdobeAcrobatReader2.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AdobeAcrobatReader3.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AdobeAcrobatReader4.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\CommonDialogs.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante1.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante10.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante11.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante12.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante13.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante14.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante15.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante16.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante17.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante18.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante19.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante2.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante20.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante21.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante22.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante23.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante24.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante25.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante26.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante27.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante28.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante29.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante3.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante30.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante31.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante32.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante33.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante34.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante35.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante36.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante37.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante38.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante39.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante4.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante40.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante41.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante42.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante43.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante44.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante45.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante46.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante47.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante48.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante49.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante5.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante50.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante51.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante52.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante53.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante54.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante55.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted
      [WARNING]   The archive is encrypted
C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DLLpartagemanquante56.zip
  [0] Archive type: ZIP
  --> sbRecovery.reg
      [WARNING]   The archive is encrypted

Lyonnais92 · Answer

Bonjour,

Télécharge DSS (Deckard's System Scanner de Deckard) sur ton Bureau à partir de ce lien : 

http://www.techsupportforum.com/sectools/Deckard/dss.exe

Choisis "enregistrer" et "Bureau" comme emplacement.

Ferme toutes les applications en cours (très important, sinon l'ordi peut planter).

Double-clique sur dss.exe pour lancer l'outil.

S'il ne trouve pas HijackThis, clique sur Oui.

Clique sur OK à chaque fois que cela sera demandé.

L'analyse finie, un fichier texte s'affichera. Poste son contenu dans ta réponse.
 
Le rapport se trouve ici : C:\Deckard\System Scanner\main.txt. 





Poste aussi le contenu de  : C:\Deckard\System Scanner\extra.txt

-reb- · Answer

Bonjour Lyonnais92 et merci pour ton aide !!

voilà ce que tu m'as demandé...

Deckard's System Scanner v20071014.68
Run by ONE SHOT on 2008-01-10 18:40:45
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Failed to create restore point; unknown error code 0x00000001


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as ONE SHOT.exe) --------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:42:05, on 10/01/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\WINDOWS\System32
vsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Apps\Powercinema\PCMService.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Documents and Settings\ONE SHOT\Bureau\dss.exe
C:\HT\ONE SHOT.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://download.windowsupdate.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{5231FA0F-B244-420D-A4B7-4BB105FA3BB2}: NameServer = 212.27.54.252
O17 - HKLM\System\CS1\Services\Tcpip\..\{5231FA0F-B244-420D-A4B7-4BB105FA3BB2}: NameServer = 212.27.54.252
O17 - HKLM\System\CS2\Services\Tcpip\..\{5231FA0F-B244-420D-A4B7-4BB105FA3BB2}: NameServer = 212.27.54.252
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

-reb- · Answer

Bonsoir,

Quelque chose de suspect dans tout ça ?

Lyonnais92 · Answer

Bonsoir,

*Ccleaner (gratuit)
Téléchargement :
https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html
Tuto :
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

Lors de l’installation, [décoche] l’option qui t’installerait la barre Yahoo !

¤ Lance CCleaner.

Suppression des fichiers temporaires

Va dans la section "Options" situé dans la marge gauche. Décoche Avancé. Retourne ensuite dans la section "Nettoyeur"
Fais bien attention de cocher toutes ces cases dans la marge gauche (Internet Explorer/Windows Explorer/Système)
• Clique sur Analyse
• Patiente le temps du scan, qui peut prendre un peu de temps si c'est la première fois.
• Une fois le scan terminé, clique sur Lancer le Nettoyage

Suppression des incohérence du registre

• Clique sur l'icône Erreurs situés dans la marge à gauche.
• Puis clique sur Analyser les erreurs
• Patiente pendant que CCleaner scan ton registre.
• Une fois le scan terminé, coche toutes les entrèes qu'il t'aura trouvée.
• Tu peux cliquer ensuite sur Corriger les erreurs.

Si tu n'est pas sur de ce que tu fais, tu peux choisir de sauvegarder les entrées cochées pour les restaurer ultérieurement 

Vérifie que C:\Documents and Settings\ONE SHOT\Local Settings\Temp\frpvveqv.dll  a bien disparu.

Il y a aussi l'indication que quelque chose s'est mal passé avec COM+. Tu as une idée de ce que c'est ?

-reb- · Answer

J'ai nettoyé mon PC grace à CCleaner !

frpvveqv.dll  a bien disparu

Pour COM+ j'étais tombée sur un sujet qui disait que c'était bizarre d'avoir des applications  COM+ dans services de composants et de ne rien avoir dans le dossier ComPlus dans C, comme c'était mon cas j'ai désactivé le service Com+ par précaution  ça n'a rien changé à mon système donc je l'ai laissé comme ça, j'imagine que ça à un rapport avec ces erreurs ?

Lyonnais92 · Answer

Re,

je ne vois rien d'autres.

Comment va l'ordi ?

-reb- · Answer

L'ordi se comporte normalement mais je n'arrive toujours pas à faire la mise à jour de java ou de kério par contre ....

J'avais pas vu non plus dans le message 50 mon rapport antivirus n'est pas complet en fait il me dit ça à la fin :

The scan has been done completely.

   3651 Scanning directories
 222443 Files were scanned
      0 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
     32 Files cannot be scanned
 222443 Files not concerned
   6530 Archives were scanned
    501 Warnings
      0 Notes

c'est normal autant de warnings ?
et les files not concerned ?

Lyonnais92 · Answer

Re,

pourquoi veux tu faire une mise à jour de kerio ?

Je t'ai fait utiliser zeb restore ?

-reb- · Answer

parce que depuis que j'ai vu que quelqu'un à fouillé dans mon ordi je veux tout mettre à jour mais ça marche pas...c'est pas nécessaire pour kério ?

oui tu m'avais déja fait utiliser zeb restore

Lyonnais92 · Answer

Bonsoir,

non, un parefeu ne se met pas à jour (sauf en cas de nouvelle version).

Il se passe quoi avec java (par internet explorer) ?

-reb- · Answer

ok pour le pare-feu

avec java par internet explorer je ne comprends pas ce qu'il faut faire ça me met ça :

Java Plug-in 1.6.0_02
Utilisation de la version JRE 1.6.0_02 Java HotSpot(TM) Client VM
Répertoire d'accueil de l'utilisateur = C:\Documents and Settings\ONE SHOT
----------------------------------------------------
c:   effacer la fenêtre de la console
f:   finaliser les objets de la file d'attente de finalisation
g:   libérer la mémoire
h:   afficher ce message d'aide
l:   vider la liste des chargeurs de classes
m:   imprimer le relevé d'utilisation de la mémoire
o:   déclencher la consignation
p:   recharger la configuration du proxy
q:   masquer la console
r:   recharger la configuration des politiques
s:   vider les propriétés système et déploiement
t:   vider la liste des threads
v:   vider la pile des threads
x:   effacer le cache de chargeurs de classes
0-5: fixer le niveau de traçage à n

j'ai essayé de mettre à jour via le panneau de configuration mais le téléchargement s'affiche puis disparait...

LOONA* · Answer

Oulala Je ne m'y connais pas tant que ça mais à première vue compare ton hijackthis à n'mporte quel autre, il a l'air trop Bizarre !

Lyonnais92 · Answer

Re,

as tu  utilisé l'option de verrouillage de la page de démarrage d'Internet Explorer de Spybot-S&D, dans la section Mode -> Mode avancé -> Outils -> Ajustements IE ?

Si oui, désactive cette option et fais ceci :

Ouvre ce lien :
    https://www.java.com/fr/download/manual.jsp

    Choisis la première ligne de téléchargement puis installe java.

    En fin d'installation, revient sur la page pour vérifier ton installation.

    Quand l'installation a réussi, ouvre le panneau de configuration, Ajout/suppression de programmes et supprime
    J2SE Runtime Environment Version 6.0 Update 02.

Si non, signale, on va corriger.

LOONA*, à part ça, tu vois quoi de bizarre ?

-reb- · Answer

Non cette option n'était pas cochée il me semble pourtant que je l'avais fais...

Lyonnais92 · Answer

re,

Relance HijackThis.

Choisis Do a scan only

 	O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present

Ferme toutes les fenêtres (hormis HijackThis), y compris ton navigateur.

Clique sur fix checked.

Ferme Hijackthis.

Redémarre l'ordi.

Essaye de mettre à jour à ton console java avec la méthode décrite ci-dessus.

-reb- · Answer

j'ai suivi tes instructions mais ça marche toujours pas pour java...

Un truc qui me tracasse quand je ferme windows ça met "fermeture des connexions réseau" c'est normal ?
Et dans l'observateur d'évènements j'ai des ouvertures de sessions réseau fait par "autorite nt/service reseau" c'est quoi ?

Lyonnais92 · Answer

Bonjour,

clic droit sur démarrer, explorer, outils, déconnecter un lecteur réseau.

Tu as quoi comme connexion  qui apparaissent ?

-reb- · Answer

j'ai essayé déconnecter un lecteur reseau ça me met "vous n'avez pas de lecteur réseau à deconnecter"

tu veux dire quand je ferme windows ? ça me marque juste ça je ne sais d'où viennent ces connexions !

On s'est introduit dans mon pc !

57 réponses

Votre réponse

Newsletters