Ordi Bizarre..

Résolu
Bonjour à tous

Depuis quelque temps mon ordi (AMD Athlon , 384 Mo de Ram) est bizarre..

Je m'explique , des pages internet s'ouvrent toutes seules et m'affichent des pages disant que je suis infecté ,etc..

( Pour info j'utilise Firefox 2 et les pages internet s'ouvrent avec Explorer )

Les temps de chargement sont longs , Il faut attendre tres longtemps quand je fais clique droit qlq part.. Je ne pense pas que ca soit

dû a la ram meme si j'en ai pas bcp.. avant tout allait bien..

Et l'ordi se plante beaucoup m'obligeant a redémarrer

J'ai fait une analyse avec antivir qui ne m'a rien trouvé et ensuite avec ad-adware qui ne m'a trouvé aucun fichier critique

J'espère que vous allez pourvoir m'aider

Ici je vous joint le rapport Hijackthis

Mercii

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:21:14, on 12/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\smtray.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CursorXP\CursorXP.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\Last.fm\LastFMHelper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.proximus.be/pickx
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.presario.net/scripts/redirectors/presario/srchredir2.dll?c=3C01&lc=080c&s=search&ap=b204
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.presario.net/scripts/redirectors/presario/srchredir2.dll?c=3C01&lc=080c&s=search&ap=b204
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.presario.net/scripts/redirectors/presario/srchredir2.dll?c=3C01&lc=080c&s=search&ap=b204
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.proximus.be/pickx
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SXG Advisor - {18DC3D52-5000-45BE-A4B8-BB9910758EE9} - C:\WINDOWS\dmdqdrxfdr.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [Windowsz] rwnt.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Smapp] smtray.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\RunServices: [Windowsz] rwnt.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [CursorXP] C:\Program Files\CursorXP\CursorXP.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.proximus.be/pickx
O16 - DPF: ChatSpace Full Java Client 3.1.0.229 - http://surechat.com:9000/Java/cfs31229.cab
O16 - DPF: Dexia Netbanking - http://netbanking.dexia.be/PC//Dynamic/Shared/Applet//DexiaIIA.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {7A32634B-029C-4836-A023-528983982A49} - http://fdl.msn.com/public/chat/msnchat42.cab
O16 - DPF: {946B0485-8F8C-4C35-A6E7-D2115E3B0B4F} - http://fr4-download.nocreditcard.net/...
O16 - DPF: {9EB4F647-FE4A-42F9-9F5C-B8FB28DD02F9} - http://scripts.dlv4.com/binaries/IA/sysia32svc_EN_XP.cab
O16 - DPF: {AA760512-9BD8-4B1B-9E7A-DD9BBE3CF119} (PandoraBoxCtrl Class) - http://front.boonty.com/Prometheus/PandoraX.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab
O21 - SSODL: admggxp - {D50099E8-783E-4F05-A3A4-1E51EC912E1F} - C:\WINDOWS\admggxp.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 8736 bytes
Configuration: Windows XP
Firefox 2.0.0.12

32 réponses

Résumé de la discussion

Des utilisateurs rencontrent un comportement anormal sur un PC sous Windows XP, avec des pages qui s'ouvrent toutes seules et des messages d'infection accompagnés de ralentissements et de plantages. Le fil relate des tentatives d'analyse par Antivir et Ad-Aware sans détection puis un rapport HijackThis détaillant de multiples BHO, plugins et entrées Run suspectes et des redirections de recherche. Des réponses examinent les éléments de démarrage et les barres d'outils potentiellement indésirables, notamment des chemins vers proximus/pickx et des composants Boonty, Last.fm et Windows Live Toolbar, suggérant une infection par adware/spyware. En cas de suites, les échanges évoquent l’utilisation d’outils spécialisés comme OTMoveIt pour isoler et déplacer les éléments problématiques avant d’envisager des nettoyages plus approfondis.

Bobot (l’IA à votre service)
  1. Contributeur sécurité
    slt,

    Boonty Games est souvent source de soucis, tu devrais le virer!

    ________________

    O2 - BHO: SXG Advisor - {18DC3D52-5000-45BE-A4B8-BB9910758EE9} - C:\WINDOWS\dmdqdrxfdr.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O4 - HKLM\..\Run: [Windowsz] rwnt.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [Smapp] smtray.exe
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\RunServices: [Windowsz] rwnt.exe
    O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
    O16 - DPF: ChatSpace Full Java Client 3.1.0.229 - http://surechat.com:9000/Java/cfs31229.cab
    O16 - DPF: Dexia Netbanking - http://netbanking.dexia.be/PC//Dynamic/Shared/Applet//DexiaIIA.cab
    O16 - DPF: {AA760512-9BD8-4B1B-9E7A-DD9BBE3CF119} (PandoraBoxCtrl Class) - http://front.boonty.com/Prometheus/PandoraX.cab
    O21 - SSODL: admggxp - {D50099E8-783E-4F05-A3A4-1E51EC912E1F} - C:\WINDOWS\admggxp.dll

    __________________

    smit fraud fix (colle le rapport)

    1/ telecharger :

    http://siri.urz.free.fr/Fix/SmitfraudFix.php

    2/ double clique sur smitfraudfix. puis sélectionne 1 et appuyer sur entrée afin de créer le rapport des infection présentes. une fois le rapport effectué redémarre en mode sans échec (en appuyant sur F8 ou suppr, ou F5 au démarrage en général)

    3/ puis refaire comme en 2/ mais sélectionne l'option 2 et appuyer sur entrée pour commencer la désinfection. lorsque le programme demande si tu veut nettoyer le registre mets oui en tapant 0 et entrée

    ___________________

    télécharge OTMoveIt
    http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau. Ou sur https://www.luanagames.com/index.fr.html
    double-clique sur OTMoveIt.exe pour le lancer.
    copie la liste qui se trouve en citation ci-dessous,
    et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

    Citation :

    C:\WINDOWS\dmdqdrxfdr.dll
    C:\WINDOWS\admggxp.dll

    clique sur MoveIt! pour lancer la suppression.
    le résultat apparaitra dans le cadre "Results".
    clique sur Exit pour fermer.
    poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

    il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

    _______________________

    vire ce qui est dans le dossier movedfiles en allant dans poste de travail puis C puis OTMOVIT

    _______________________

    mets a jour interent explorer ici:

    https://www.01net.com/telecharger/windows/Internet/navigateur/fiches/33081.html

    ________________________

    mets a jour JAVA: DEMARRER puis PANNEAU DE CONFIGURATION puis JAVA puis MISE A JOUR
    ______________________

    installe spybot et scan avec (tu le gardera en complement de ad aware et antivir pour virer les espions:

    https://www.safer-networking.org/download/

    _______________________

    recolle un rapport hiajckhtis et dis tes soucis

    a plus
    1. Voila , tout d'abord merci pour ton aide

      Je vais faire les choses dans l'ordre..

      Je ne sais pas comment on supprime bounty game , je l'ai cherché partout et il n'y a pas de trace..

      Sinon voici les rapports

      Smit fraud Première analyse

      SmitFraudFix v2.287

      Rapport fait à 21:03:41,07, mar. 12/02/2008
      Executé à partir de C:\Program Files\Mozilla Firefox\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
      Le type du système de fichiers est NTFS
      Fix executé en mode normal

      »»»»»»»»»»»»»»»»»»»»»»»» Process

      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\WINDOWS\system32\smtray.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
      C:\WINDOWS\system32\RUNDLL32.EXE
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\CursorXP\CursorXP.exe
      C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
      C:\Program Files\Last.fm\LastFMHelper.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
      C:\WINDOWS\System32\drivers\CDAC11BA.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
      C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
      C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
      C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\MSN Messenger\usnsvc.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\WINDOWS\system32\cmd.exe

      »»»»»»»»»»»»»»»»»»»»»»»» hosts

      Fichier hosts corrompu !

      127.0.0.1 www.legal-at-spybot.info
      127.0.0.1 legal-at-spybot.info

      »»»»»»»»»»»»»»»»»»»»»»»» C:\

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

      C:\WINDOWS\fsxloqf.exe PRESENT !

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Olivier

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Olivier\Application Data

      »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

      »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Olivier\Favoris

      »»»»»»»»»»»»»»»»»»»»»»»» Bureau

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

      »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

      »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
      "Source"="About:Home"
      "SubscribedURL"="About:Home"
      "FriendlyName"="Ma page d'accueil"

      »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      IEDFix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri

      »»»»»»»»»»»»»»»»»»»»»»»» VACFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      VACFix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri
      +--------------------------------------------------+
      [!] Suspicious: dmdqdrxfdr.dll
      BHO: SXG Advisor - {18DC3D52-5000-45BE-A4B8-BB9910758EE9}
      TypeLib: {22AEA7CB-3095-4323-8036-06BCFE64C9C8}
      Interface: {7DF3B116-F7D7-4429-9B45-0C088C629246}
      Interface: {B0517AA8-0099-45B7-8888-499E4D204D4B}

      [!] Suspicious: admggxp.dll
      SSODL: admggxp - {D50099E8-783E-4F05-A3A4-1E51EC912E1F}

      »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
      "System"=""

      »»»»»»»»»»»»»»»»»»»»»»»» Rustock

      »»»»»»»»»»»»»»»»»»»»»»»» DNS

      Description: Belkin Wireless G USB Network Adapter #3 - Miniport d'ordonnancement de paquets
      DNS Server Search Order: 192.168.2.1

      Description: Belkin Wireless G USB Network Adapter #3 - Miniport d'ordonnancement de paquets
      DNS Server Search Order: 192.168.2.1

      HKLM\SYSTEM\CCS\Services\Tcpip\..\{48E0F96D-E96E-4879-BD07-1767FCB54C77}: DhcpNameServer=192.168.2.1
      HKLM\SYSTEM\CCS\Services\Tcpip\..\{A56DAF2B-3CC3-4720-9926-D3549706C216}: DhcpNameServer=192.168.2.1
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{48E0F96D-E96E-4879-BD07-1767FCB54C77}: DhcpNameServer=192.168.2.1
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{48E0F96D-E96E-4879-BD07-1767FCB54C77}: DhcpNameServer=192.168.2.1
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{A56DAF2B-3CC3-4720-9926-D3549706C216}: DhcpNameServer=192.168.2.1
      HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.2.1
      HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.2.1
      HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.2.1

      »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

      »»»»»»»»»»»»»»»»»»»»»»»» Fin

      ------------------------------------------------------------------------------------------
      1. Ensuite apres nettoyage

        SmitFraudFix v2.287

        Rapport fait à 21:11:50,92, mar. 12/02/2008
        Executé à partir de C:\Documents and Settings\Olivier\Mes documents\SmitfraudFix
        OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
        Le type du système de fichiers est NTFS
        Fix executé en mode sans echec

        »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

        SrchSTS.exe by S!Ri
        Search SharedTaskScheduler's .dll

        »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

        »»»»»»»»»»»»»»»»»»»»»»»» hosts

        127.0.0.1 localhost
        127.0.0.1 babe.the-killer.bz
        127.0.0.1 www.babe.the-killer.bz
        127.0.0.1 babe.k-lined.com
        127.0.0.1 www.babe.k-lined.com
        127.0.0.1 did.i-used.cc
        127.0.0.1 www.did.i-used.cc
        127.0.0.1 coolwwwsearch.com
        127.0.0.1 www.coolwwwsearch.com
        127.0.0.1 coolwebsearch.com
        127.0.0.1 www.coolwebsearch.com
        127.0.0.1 hi.studioaperto.net
        127.0.0.1 www.hi.studioaperto.net
        127.0.0.1 wazzupnet.com
        127.0.0.1 www.wazzupnet.com
        127.0.0.1 gueb.com
        127.0.0.1 www.gueb.com
        127.0.0.1 kabex.com
        127.0.0.1 www.kabex.com
        127.0.0.1 hityou.com
        127.0.0.1 www.hityou.com
        127.0.0.1 miosearch.com
        127.0.0.1 www.miosearch.com
        127.0.0.1 blue-elefant.com
        127.0.0.1 www.blue-elefant.com
        127.0.0.1 babeweb.de
        127.0.0.1 www.babeweb.de
        127.0.0.1 start-seite.com
        127.0.0.1 www.start-seite.com
        127.0.0.1 sexolymp.com
        127.0.0.1 www.sexolymp.com
        127.0.0.1 toriii.cc
        127.0.0.1 www.toriii.cc
        127.0.0.1 xtipp.de
        127.0.0.1 www.xtipp.de
        127.0.0.1 urawa.cool.ne.jp
        127.0.0.1 777search.com
        127.0.0.1 www.777search.com
        127.0.0.1 ace-webmaster.com
        127.0.0.1 www.ace-webmaster.com
        127.0.0.1 aifind.info
        127.0.0.1 www.aifind.info
        127.0.0.1 amateurliveshow.com
        127.0.0.1 www.amateurliveshow.com
        127.0.0.1 anarchylolita.com
        127.0.0.1 www.anarchylolita.com
        127.0.0.1 anarchyporn.com
        127.0.0.1 approvedlinks.com
        127.0.0.1 www.approvedlinks.com
        127.0.0.1 cantfind.com
        127.0.0.1 www.cantfind.com
        127.0.0.1 castingsamateur.com
        127.0.0.1 www.castingsamateur.com
        127.0.0.1 cyberrape.com
        127.0.0.1 www.cyberrape.com
        127.0.0.1 dialerclub.com
        127.0.0.1 www.dialerclub.com
        127.0.0.1 megago.com
        127.0.0.1 exit.megago.com
        127.0.0.1 www.megago.com
        127.0.0.1 fastmetasearch.com
        127.0.0.1 www.fastmetasearch.com
        127.0.0.1 findwhatevernow.com
        127.0.0.1 www.findwhatevernow.com
        127.0.0.1 globesearch.com
        127.0.0.1 www.globesearch.com
        127.0.0.1 hotfreebies.com
        127.0.0.1 www.hotfreebies.com
        127.0.0.1 krankin.com
        127.0.0.1 www.krankin.com
        127.0.0.1 begin2search.com
        127.0.0.1 www.begin2search.com
        127.0.0.1 mainstreamdollars.com
        127.0.0.1 www.mainstreamdollars.com
        127.0.0.1 live.sex-explorer.com
        127.0.0.1 www.live.sex-explorer.com
        127.0.0.1 loveadot.com
        127.0.0.1 www.loveadot.com
        127.0.0.1 megaseek.net
        127.0.0.1 www.megaseek.net
        127.0.0.1 mixsearch.com
        127.0.0.1 www.mixsearch.com
        127.0.0.1 munky.com
        127.0.0.1 www.munky.com
        127.0.0.1 newtopsites.com
        127.0.0.1 www.newtopsites.com
        127.0.0.1 noblindlinks.com
        127.0.0.1 www.noblindlinks.com
        127.0.0.1 babenet.com
        127.0.0.1 r.babenet.com
        127.0.0.1 www.babenet.com
        127.0.0.1 searchresult.net
        127.0.0.1 www.searchresult.net
        127.0.0.1 sexarena.org
        127.0.0.1 www.sexarena.org
        127.0.0.1 skeech.com
        127.0.0.1 www.skeech.com
        127.0.0.1 superwp.by.ru
        127.0.0.1 sureseeker.com
        127.0.0.1 www.sureseeker.com
        127.0.0.1 wethere.com
        127.0.0.1 www.wethere.com
        127.0.0.1 wowsearch.org
        127.0.0.1 www.wowsearch.org
        127.0.0.1 xxx.com
        127.0.0.1 www.xxx.com
        127.0.0.1 art-xxx.com
        127.0.0.1 websearch.com
        127.0.0.1 www.websearch.com
        127.0.0.1 firehunt.com
        127.0.0.1 www.firehunt.com
        127.0.0.1 partner23.firehunt.com
        127.0.0.1 screensaver.it
        127.0.0.1 www.screensaver.it
        127.0.0.1 cliks.org
        127.0.0.1 www.cliks.org
        127.0.0.1 xads.cliks.org
        127.0.0.1 xwebsearch.biz
        127.0.0.1 www.xwebsearch.biz
        127.0.0.1 znext.com
        127.0.0.1 www.znext.com
        127.0.0.1 rawtocash.net
        127.0.0.1 www.rawtocash.net
        127.0.0.1 7search.com
        127.0.0.1 www.7search.com
        127.0.0.1 zestyfind.com
        127.0.0.1 www.zestyfind.com
        127.0.0.1 ntcor.com
        127.0.0.1 www.ntcor.com
        127.0.0.1 dev.ntcor.com
        127.0.0.1 xrenoder.com
        127.0.0.1 www.xrenoder.com
        127.0.0.1 search.xrenoder.com
        127.0.0.1 allcybersearch.com
        127.0.0.1 www.allcybersearch.com
        127.0.0.1 tinybar.com
        127.0.0.1 www.tinybar.com
        127.0.0.1 topsite.us
        127.0.0.1 www.topsite.us
        127.0.0.1 topsites.us
        127.0.0.1 www.topsites.us
        127.0.0.1 topsitez.us
        127.0.0.1 www.topsitez.us
        127.0.0.1 true-counter.com
        127.0.0.1 www.true-counter.com
        127.0.0.1 out.true-counter.com
        127.0.0.1 cnetadd.com
        127.0.0.1 www.cnetadd.com
        127.0.0.1 okmmm.com
        127.0.0.1 www.okmmm.com
        127.0.0.1 139mm.com
        127.0.0.1 www.139mm.com
        127.0.0.1 008k.com
        127.0.0.1 www.008k.com
        127.0.0.1 00hq.com
        127.0.0.1 www.00hq.com
        127.0.0.1 1-domains-registrations.com
        127.0.0.1 www.1-domains-registrations.com
        127.0.0.1 100sexlinks.com
        127.0.0.1 www.100sexlinks.com
        127.0.0.1 1sexparty.com
        127.0.0.1 www.1sexparty.com
        127.0.0.1 1stpagehere.com
        127.0.0.1 www.1stpagehere.com
        127.0.0.1 2020search.com
        127.0.0.1 www.2020search.com
        127.0.0.1 24teen.com
        127.0.0.1 www.24teen.com
        127.0.0.1 36site.com
        127.0.0.1 www.36site.com
        127.0.0.1 4corn.net
        127.0.0.1 www.4corn.net
        127.0.0.1 777top.com
        127.0.0.1 www.777top.com
        127.0.0.1 8ad.com
        127.0.0.1 www.8ad.com
        127.0.0.1 aboutclicker.com
        127.0.0.1 www.aboutclicker.com
        127.0.0.1 abrp.net
        127.0.0.1 www.abrp.net
        127.0.0.1 accessthefuture.net
        127.0.0.1 www.accessthefuture.net
        127.0.0.1 acemedic.com
        127.0.0.1 www.acemedic.com
        127.0.0.1 actionbreastcancer.org
        127.0.0.1 www.actionbreastcancer.org
        127.0.0.1 activexupdate.com
        127.0.0.1 www.activexupdate.com
        127.0.0.1 adamsupportgroup.org
        127.0.0.1 www.adamsupportgroup.org
        127.0.0.1 adasearch.com
        127.0.0.1 www.adasearch.com
        127.0.0.1 adipics.com
        127.0.0.1 www.adipics.com
        127.0.0.1 adspics.com
        127.0.0.1 www.adspics.com
        127.0.0.1 adult-engine-search.com
        127.0.0.1 www.adult-engine-search.com
        127.0.0.1 adult-erotic-guide.net
        127.0.0.1 www.adult-erotic-guide.net
        127.0.0.1 adult-friends-finder.net
        127.0.0.1 www.adult-friends-finder.net
        127.0.0.1 adulthyperlinks.com
        127.0.0.1 www.adulthyperlinks.com
        127.0.0.1 adulttds.com
        127.0.0.1 www.adulttds.com
        127.0.0.1 exaccess.ru
        127.0.0.1 www.exaccess.ru
        127.0.0.1 advert.exaccess.ru
        127.0.0.1 agentstudio.com
        127.0.0.1 africaspromise.org
        127.0.0.1 akril.com
        127.0.0.1 alcatel.ws
        127.0.0.1 alfa-search.com
        127.0.0.1 all-inet.com
        127.0.0.1 allabtcars.com
        127.0.0.1 allabtjeeps.com
        127.0.0.1 allhyperlinks.com
        127.0.0.1 allinternetbusiness.com
        127.0.0.1 almarvideos.com
        127.0.0.1 amandamountains.com
        127.0.0.1 amigeek.com
        127.0.0.1 amisbusiness.com
        127.0.0.1 analmovi.com
        127.0.0.1 anin.org
        127.0.0.1 annaromeo.com
        127.0.0.1 antrocity.com
        127.0.0.1 anything4health.com
        127.0.0.1 apsua.com
        127.0.0.1 aregay.com
        127.0.0.1 arheo.com
        127.0.0.1 arizonaweb.org
        127.0.0.1 armitageinn.com
        127.0.0.1 art-func.com
        127.0.0.1 artachnid.com
        127.0.0.1 asiankingkong.com
        127.0.0.1 ass-gals.com
        127.0.0.1 athenrye.com
        127.0.0.1 avian-ads.com
        127.0.0.1 ayakawamura.com
        127.0.0.1 ayumitaniguchi.com
        127.0.0.1 bannedhost.net
        127.0.0.1 barbudafarms.com
        127.0.0.1 barnandfence.com
        127.0.0.1 batsearch.com
        127.0.0.1 baygraphicsllc.com
        127.0.0.1 bb-search.com
        127.0.0.1 bbbsearch.com
        127.0.0.1 bedhome.com
        127.0.0.1 bediadance.com
        127.0.0.1 bellabasketsfl.com
        127.0.0.1 bernaolatwin.com
        127.0.0.1 best-counter.com
        127.0.0.1 best-hardpics.com
        127.0.0.1 best-winning-casino.com
        127.0.0.1 bestcrawler.com
        127.0.0.1 bestfor.ru
        127.0.0.1 bestporngate.com
        127.0.0.1 bestxporno.com
        127.0.0.1 blackjack-free.net
        127.0.0.1 blender.xu.pl
        127.0.0.1 bodaciousbabette.com
        127.0.0.1 boobdoll.com
        127.0.0.1 boobsandtits.com
        127.0.0.1 boobsclub.com
        127.0.0.1 boredlife.com
        127.0.0.1 bowlofogumbo.com
        127.0.0.1 bradcoem.org
        127.0.0.1 brandiyoung.com
        127.0.0.1 brookeburn.com
        127.0.0.1 bucps.com
        127.0.0.1 burgerkingbigscreen.com
        127.0.0.1 buscards.net
        127.0.0.1 bustyrussell.com
        127.0.0.1 buttejazz.org
        127.0.0.1 buyselldomain.net
        127.0.0.1 calcioturris.com
        127.0.0.1 canberracricketcoaching.com
        127.0.0.1 candycantaloupes.com
        127.0.0.1 careers.dulcineasystems.net
        127.0.0.1 carsands.com
        127.0.0.1 carsrentals.net
        127.0.0.1 casino-gambling-1.net
        127.0.0.1 casino-gambling-2.net
        127.0.0.1 casino-onlines.net
        127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
        127.0.0.1 casino2win.net
        127.0.0.1 casinomidas.net
        127.0.0.1 casinonline.net
        127.0.0.1 catallogue.com
        127.0.0.1 catsss.da.ru
        127.0.0.1 caxa.ru
        127.0.0.1 cclebali.org
        127.0.0.1 ceewawires.org
        127.0.0.1 certumgroup.com
        127.0.0.1 chelancatering.com
        127.0.0.1 childrenvilla.com
        127.0.0.1 chips-4-free.com
        127.0.0.1 chrisswasey.com
        127.0.0.1 chriswallace.net
        127.0.0.1 ckick4thumbs.com
        127.0.0.1 clackamasliteraryreview.com
        127.0.0.1 clearsearch.cc
        127.0.0.1 clearsearch.net
        127.0.0.1 clickaire.com
        127.0.0.1 clickyestoenter.net
        127.0.0.1 clrsch.com
        127.0.0.1 cmtapestry.com
        127.0.0.1 cool-homepage.co
        127.0.0.1 cool-homepage.com
        127.0.0.1 cool-search.net
        127.0.0.1 cool-search.netfartpost.com
        127.0.0.1 cool-web-search.com
        127.0.0.1 coolfetishsite.com
        127.0.0.1 coolfreehost.com
        127.0.0.1 coolfreepage.com
        127.0.0.1 coolfreepages.com
        127.0.0.1 coolmoneysearch.com
        127.0.0.1 coolpornsearch.com
        127.0.0.1 coolsearcher.info
        127.0.0.1 coolwebsearsh.com
        127.0.0.1 copmtraine.com
        127.0.0.1 couldnotfind.com
        127.0.0.1 count-all.com
        127.0.0.1 cracks.me.uk
        127.0.0.1 creamedcutties.com
        127.0.0.1 creditsearchonline.com
        127.0.0.1 crestring.com
        127.0.0.1 crooder.com
        127.0.0.1 curvedspaces.com
        127.0.0.1 cvs.jps.ru
        127.0.0.1 cvsymphony.com
        127.0.0.1 cydom.com
        127.0.0.1 daily-gals.com
        127.0.0.1 dancingbabycd.com
        127.0.0.1 datanotary.com
        127.0.0.1 datareco.com
        127.0.0.1 davemarshall.org
        127.0.0.1 dcfitusa.com
        127.0.0.1 defaultsearch.net
        127.0.0.1 desarrollocreativo.com
        127.0.0.1 develip.com
        127.0.0.1 dewis.spb.ru
        127.0.0.1 dewis.us
        127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
        127.0.0.1 dietpills4free.com
        127.0.0.1 dietpussy.com
        127.0.0.1 digistreamsa.com
        127.0.0.1 dionforvalleycouncil.org
        127.0.0.1 doctorwaldron.com
        127.0.0.1 document-not-found.pornpic.org
        127.0.0.1 doggyaction.com
        127.0.0.1 domain-your-registration.com
        127.0.0.1 domains-for-you-online.com
        127.0.0.1 domains2003.net
        127.0.0.1 domkrat.com
        127.0.0.1 dp-host.com
        127.0.0.1 dragqueen.gay-clan.com
        127.0.0.1 drug-sources-exposed.com
        127.0.0.1 drvvv.com
        127.0.0.1 dutch-sex.com
        127.0.0.1 dvdbank.org
        127.0.0.1 e-localad.com
        127.0.0.1 e-plus.cc
        127.0.0.1 e-websitesolutions.com
        127.0.0.1 eases.net
        127.0.0.1 easy-search.net
        127.0.0.1 easycategories.com
        127.0.0.1 ecosrioplatenses.org
        127.0.0.1 ecstasyporn.net
        127.0.0.1 eikokoike.com
        127.0.0.1 epornsex.com
        127.0.0.1 euuu.com
        127.0.0.1 evidence-detector.biz
        127.0.0.1 evilspidercomics.com
        127.0.0.1 ewebsearch.net
        127.0.0.1 findloss.com
        127.0.0.1 excellentsckin.com
        127.0.0.1 extremeseek.net
        127.0.0.1 faithstevens.com
        127.0.0.1 fantasiewelten.com
        127.0.0.1 farmsteadbandb.com
        127.0.0.1 fartpost.com
        127.0.0.1 fastwebfinder.com
        127.0.0.1 faxporn.com
        127.0.0.1 fickenisgeil.de
        127.0.0.1 finance-loans.com
        127.0.0.1 find-itnow.com
        127.0.0.1 find-uk-health.co.uk
        127.0.0.1 find4u.net
        127.0.0.1 findit-now.com
        127.0.0.1 findthesite.com
        127.0.0.1 findthewebsiteyouneed.com
        127.0.0.1 www.findthewebsiteyouneed.com
        127.0.0.1 fionasteel.com
        127.0.0.1 firstbookmark.net
        127.0.0.1 fitness-free.com
        127.0.0.1 foodvacations.net
        127.0.0.1 forex.jps.ru
        127.0.0.1 forexcredit.com
        127.0.0.1 forexcredit.ru
        127.0.0.1 formingfusions.com
        127.0.0.1 forsythfire.net
        127.0.0.1 forthline.com
        127.0.0.1 free-chipes.com
        127.0.0.1 free-hit.com
        127.0.0.1 free-pics-and-movies.com
        127.0.0.1 free-sex-movie-clips.net
        127.0.0.1 free4porno.net
        127.0.0.1 free64all.com
        127.0.0.1 freebookmark.net
        127.0.0.1 freebookmarks.net
        127.0.0.1 freecategories.com
        127.0.0.1 freecoolhost.com
        127.0.0.1 freerbhost.com
        127.0.0.1 freeshemalepics.net
        127.0.0.1 freeyaho.com
        127.0.0.1 freshseek.com
        127.0.0.1 freshteensite.com
        127.0.0.1 gabrielscott.com
        127.0.0.1 galpostgirls.com
        127.0.0.1 gals-for-free.com
        127.0.0.1 gambling-online4you.com
        127.0.0.1 gameterror.net
        127.0.0.1 gay50.com
        127.0.0.1 generalsmeltingofcanada.com
        127.0.0.1 geteens.com
        127.0.0.1 getpicshere.com
        127.0.0.1 gimmezamore.com
        127.0.0.1 gimnasiaer.com
        127.0.0.1 girls-porn-life.com
        127.0.0.1 glbdf.org
        127.0.0.1 global-finder.com
        127.0.0.1 globe-finder.cc
        127.0.0.1 globe-finder.com
        127.0.0.1 gocybersearch.com
        127.0.0.1 golftennis.net
        127.0.0.1 good-mortgages-calculator.com
        127.0.0.1 good-mortgages.net
        127.0.0.1 goodsexs.com
        127.0.0.1 googlebar.jps.ru
        127.0.0.1 googlf.com
        127.0.0.1 gradforum.org
        127.0.0.1 gratis-porn-movie.com
        127.0.0.1 gratis-pornopics.com
        127.0.0.1 guzzycats.com
        127.0.0.1 gzphoenix.com
        127.0.0.1 hallnetaccolade.com
        127.0.0.1 hand-book.com
        127.0.0.1 happyanal.com
        127.0.0.1 hard-gals.com
        127.0.0.1 hardbodytgp.com
        127.0.0.1 hardcoreover.com
        127.0.0.1 hardloved.com
        127.0.0.1 hardwareseek.net
        127.0.0.1 harukaigawa.com
        127.0.0.1 hccsolanonapa.org
        127.0.0.1 health-protein.com
        127.0.0.1 hentai4u.net
        127.0.0.1 here4search.com
        127.0.0.1 heyrichy.com
        127.0.0.1 hi-search.com
        127.0.0.1 hiddenguides.com
        127.0.0.1 hitlistlyrics.com
        127.0.0.1 holidayautostr.com
        127.0.0.1 homemortage.ws
        127.0.0.1 hostssp.com
        127.0.0.1 hot-cartoon-sex.anime.american-teens.net
        127.0.0.1 hotbookmark.com
        127.0.0.1 hotels-list.net
        127.0.0.1 hotelxxxcams.com
        127.0.0.1 hotpopup.com
        127.0.0.1 hotsearchbox.com
        127.0.0.1 hotsex-series.com
        127.0.0.1 hotstartpage.com
        127.0.0.1 hqsex.biz
        127.0.0.1 hugeporn4u.net
        127.0.0.1 hunacsa.com
        127.0.0.1 hupacasath.com
        127.0.0.1 hzsx.com
        127.0.0.1 icansearch.net
        127.0.0.1 idgsearch.com
        127.0.0.1 ie-search.com
        127.0.0.1 incestporngate.com
        127.0.0.1 infodigger.net
        127.0.0.1 infoglobus.com
        127.0.0.1 inherhole.com
        127.0.0.1 insertthiscock.com
        127.0.0.1 insurance-flood.net
        127.0.0.1 insuranceall.net
        127.0.0.1 internetsearch.ru
        127.0.0.1 ionichost.com
        127.0.0.1 ionomist.com
        127.0.0.1 ipsex.net
        127.0.0.1 itsanal.com
        127.0.0.1 itseasy.us
        127.0.0.1 iweb-commerce.com
        127.0.0.1 iwebland.com
        127.0.0.1 jeannineoldfield.com
        127.0.0.1 jethomepage.com
        127.0.0.1 jetseeker.com
        127.0.0.1 jmhgallery.org
        127.0.0.1 joannelatham.com
        127.0.0.1 judin.ru
        127.0.0.1 junkysex.com
        127.0.0.1 karleyt.narod.ru
        127.0.0.1 kathisomers.com
        127.0.0.1 kazaa-lite.ws
        127.0.0.1 keithgreenpro.com
        127.0.0.1 kenmccaul.com
        127.0.0.1 kilosex.com
        127.0.0.1 kimhines.com
        127.0.0.1 kinoru.com
        127.0.0.1 ksdspups.org
        127.0.0.1 landrape.com
        127.0.0.1 lauraroebuck.com
        127.0.0.1 leannalovelace.com
        127.0.0.1 lesobank.ru
        127.0.0.1 libertyonlinehosting.com
        127.0.0.1 lingerie-mania.com
        127.0.0.1 lisamatthew.com
        127.0.0.1 liveholio.com
        127.0.0.1 livenewspaper.com
        127.0.0.1 louiseleeds.com
        127.0.0.1 love-pix.com
        127.0.0.1 lovelas.com
        127.0.0.1 lovelysearch.com
        127.0.0.1 low-taxes.com
        127.0.0.1 luckysearch.net
        127.0.0.1 lunitaweb.net
        127.0.0.1 lustful-porno.com
        127.0.0.1 mackinnonsbrook.org
        127.0.0.1 madfinder.com
        127.0.0.1 madisonmoons.com
        127.0.0.1 madisonoilco.com
        127.0.0.1 madonalive.com
        127.0.0.1 majuozawa.com
        127.0.0.1 makin-do.com
        127.0.0.1 male4free.com
        127.0.0.1 map-quest.org
        127.0.0.1 marilynchamber.com
        127.0.0.1 martfinder.com
        127.0.0.1 massearch.com
        127.0.0.1 matetrava.com
        127.0.0.1 mature50.com
        127.0.0.1 matureporngate.com
        127.0.0.1 maxdzines.com
        127.0.0.1 mcgeeforlabor.com
        127.0.0.1 mdstunisie.org
        127.0.0.1 medicare-insurance.net
        127.0.0.1 medicare-supplemental.com
        127.0.0.1 mega-dating-tips.com
        127.0.0.1 megumikanzaki.com
        127.0.0.1 meshalynn.com
        127.0.0.1 meta-adult.com
        127.0.0.1 meta-casino.com
        127.0.0.1 meta-mobile.com
        127.0.0.1 meta-porn.com
        127.0.0.1 metafora.ru
        127.0.0.1 metapoisk.ru
        127.0.0.1 michiyonakajima.com
        127.0.0.1 miconsultamedica.com
        127.0.0.1 mikasakamoto.com
        127.0.0.1 mikoni.com
        127.0.0.1 militarygods.porn4porn.net
        127.0.0.1 millennialpeople.org
        127.0.0.1 mipham.org
        127.0.0.1 missingcommand.com
        127.0.0.1 mommykiss.com
        127.0.0.1 moneyhunters.com
        127.0.0.1 montgomeryhospitalanesthesia.com
        127.0.0.1 morflot.com
        127.0.0.1 mortgage-debt.net
        127.0.0.1 mortismaximus.com
        127.0.0.1 moscowwhores.com
        127.0.0.1 moviecategories.com
        127.0.0.1 mp3-pix.com
        127.0.0.1 mrtg.jps.ru
        127.0.0.1 msn-info.net
        127.0.0.1 multipussy.com
        127.0.0.1 mundopolar.com
        127.0.0.1 mustv.com
        127.0.0.1 mywebsearch.net
        127.0.0.1 nativehardcore.com
        127.0.0.1 naturalspy.com
        127.0.0.1 nbasportsbook.net
        127.0.0.1 nellyslyrics.com
        127.0.0.1 nepgyan.com
        127.0.0.1 nesrecords.com
        127.0.0.1 netshastra.net
        127.0.0.1 nettime.ru
        127.0.0.1 nettracker.jps.ru
        127.0.0.1 netyellowpages.info
        127.0.0.1 new-incest.com
        127.0.0.1 newcategories.com
        127.0.0.1 newcracks.com
        127.0.0.1 newcracks.net
        127.0.0.1 newlife-lajolla.com
        127.0.0.1 newsexgate.com
        127.0.0.1 newtonsracks.com
        127.0.0.1 newxpics.com
        127.0.0.1 nhlsportsbook.net
        127.0.0.1 niagaracapital.com
        127.0.0.1 niche-tv.com
        127.0.0.1 nmrba.com
        127.0.0.1 nocalories.net
        127.0.0.1 nocensor.com
        127.0.0.1 ormandcompany.com
        127.0.0.1 nsbabes.com
        127.0.0.1 nuclearwitness.org
        127.0.0.1 nursemania.com
        127.0.0.1 nvntour.com
        127.0.0.1 nvphall.org
        127.0.0.1 oborot.com
        127.0.0.1 ocalalivestockmarket.com
        127.0.0.1 ocsff.com
        127.0.0.1 oeatlanta.com
        127.0.0.1 oharrowsearch.com
        127.0.0.1 ok-search.com
        127.0.0.1 okulta.com
        127.0.0.1 omegabrains.net
        127.0.0.1 online-casino-1.net
        127.0.0.1 online-casino-bonus.info
        127.0.0.1 online-casinos-x.com
        127.0.0.1 online-winning.net
        127.0.0.1 onlineserverz.com
        127.0.0.1 onlinetradings.net
        127.0.0.1 onlycunt.com
        127.0.0.1 onlyinsured.com
        127.0.0.1 operanabuco.com
        127.0.0.1 opsex.com
        127.0.0.1 oregoncharters.org
        127.0.0.1 otrlives.com
        127.0.0.1 ozawamadoka.com
        127.0.0.1 paigesummer.com
        127.0.0.1 pamelacollections.com
        127.0.0.1 panamcup.com
        127.0.0.1 pantygirls4u.com
        127.0.0.1 pantyhoserealm.com
        127.0.0.1 pantyplace.com
        127.0.0.1 pastubes.com
        127.0.0.1 paulapage.com
        127.0.0.1 paulhoover.com
        127.0.0.1 payfortraffic.net
        127.0.0.1 pedo.ws
        127.0.0.1 people.1gb.ru
        127.0.0.1 pervertbot.com
        127.0.0.1 pharma-diet-pills.com
        127.0.0.1 pharmacy2003.com
        127.0.0.1 pharmalocator.com
        127.0.0.1 phendimetrazine-tenuate-adipex.com
        127.0.0.1 pics-videos.com
        127.0.0.1 picsdir.com
        127.0.0.1 picsforbucks.com
        127.0.0.1 picsofseductiveladies.com
        127.0.0.1 pills-birth-control.com
        127.0.0.1 pillsmall.com
        127.0.0.1 pilotronix.com
        127.0.0.1 pixpox.com
        127.0.0.1 planemusic.com
        127.0.0.1 poiska.net
        127.0.0.1 poker-casino-free.com
        127.0.0.1 poker-games-free.net
        127.0.0.1 polradiologia.com
        127.0.0.1 pooi.net
        127.0.0.1 porn-teacher.com
        127.0.0.1 porncamz.com
        127.0.0.1 pornfree.info
        127.0.0.1 pornnightdreams.com
        127.0.0.1 pornokopec.com
        127.0.0.1 porntetris.com
        127.0.0.1 porntwist.com
        127.0.0.1 powerwebsearch.com
        127.0.0.1 prblitz.com
        127.0.0.1 pretypics.com
        127.0.0.1 pribalt.com
        127.0.0.1 privacy-support.biz
        127.0.0.1 privateporn.net
        127.0.0.1 prostactive.com
        127.0.0.1 prostol.com
        127.0.0.1 protect-yourself.biz
        127.0.0.1 prsainlandempire.org
        127.0.0.1 put-your-link-here.com
        127.0.0.1 pyrocorp.com
        127.0.0.1 quick-search.ws
        127.0.0.1 quiksearchgenealogy.com
        127.0.0.1 radfrall.org
        127.0.0.1 ramgo.com
        127.0.0.1 ranafrog.ne
        127.0.0.1 rapegate.com
        127.0.0.1 redbudbmx.com
        127.0.0.1 refinance-help.com
        127.0.0.1 removeearthkeepers.org
        127.0.0.1 rightfinder.net
        127.0.0.1 robbsproshop.com
        127.0.0.1 robertferencz.com
        127.0.0.1 rotocasters.com
        127.0.0.1 royalsearch.net
        127.0.0.1 runsearch.com
        127.0.0.1 russiansponsor.com
        127.0.0.1 russogay.com
        127.0.0.1 s2.exocrew.com
        127.0.0.1 sacitylife.com
        127.0.0.1 samplegals.com
        127.0.0.1 sbssurvivor.com
        127.0.0.1 scarypix.com
        127.0.0.1 sccdnet.com
        127.0.0.1 schoolforest.com
        127.0.0.1 search-1.net
        127.0.0.1 search-2003.com
        127.0.0.1 search-about.net
        127.0.0.1 search-hawk.com
        127.0.0.1 search-log.com
        127.0.0.1 search-meta.com
        127.0.0.1 search-safe.com
        127.0.0.1 search.psn.cn
        127.0.0.1 searchadultweb.com
        127.0.0.1 searchbutler.com
        127.0.0.1 searchbuttler.com
        127.0.0.1 searchbutler.org
        127.0.0.1 searchcomplete.com
        127.0.0.1 searchdesire.com
        127.0.0.1 searchdot.net
        127.0.0.1 searchexpander.com
        127.0.0.1 searchfastnet.com
        127.0.0.1 searchforge.com
        127.0.0.1 searching-the-net.com
        127.0.0.1 searchmeta.md
        127.0.0.1 searchmeta.net
        127.0.0.1 searchmeta.ru
        127.0.0.1 searchmeta.webhost.ru
        127.0.0.1 searchnow.ws
        127.0.0.1 searchonfly.com
        127.0.0.1 searchv.com
        127.0.0.1 searchxl.com
        127.0.0.1 searchxp.com
        127.0.0.1 sebot.com
        127.0.0.1 securenp.org
        127.0.0.1 security-warning.biz
        127.0.0.1 seehardcore.com
        127.0.0.1 seekwell.net
        127.0.0.1 selfbookmark.com
        127.0.0.1 selfbookmark.info
        127.0.0.1 selfbookmark.net
        127.0.0.1 sex.free4porno.net
        127.0.0.1 sex-coach.com
        127.0.0.1 sex-festival.com
        127.0.0.1 sex-video-galleries.com
        127.0.0.1 sexgalleries4all.com
        127.0.0.1 sexmoviesnet.com
        127.0.0.1 sexpatriot.net
        127.0.0.1 sexy18.cc
        127.0.0.1 sexycat.adult-host.org
        127.0.0.1 sfbayfolkboats.com
        127.0.0.1 sgirls.net
        127.0.0.1 sharempeg.com
        127.0.0.1 shopcards.net
        127.0.0.1 shopknights.com
        127.0.0.1 sic02.com
        127.0.0.1 sintrader.com
        127.0.0.1 site1.ru
        127.0.0.1 sites-in-web.com
        127.0.0.1 sitevictoria.com
        127.0.0.1 sixroads.com
        127.0.0.1 skakalka.ru
        127.0.0.1 slawsearch.com
        127.0.0.1 slotch.com
        127.0.0.1 slotchbar.com
        127.0.0.1 smartsumo.com
        127.0.0.1 smutarchive.net
        127.0.0.1 solongas.com
        127.0.0.1 sonomaevents.com
        127.0.0.1 spermatrix.com
        127.0.0.1 sportbooks-free4you.com
        127.0.0.1 spros.com
        127.0.0.1 spyass.com
        127.0.0.1 spyorgy.net
        127.0.0.1 staceyowens.com
        127.0.0.1 stacistaxx.com
        127.0.0.1 stacystaxx.com
        127.0.0.1 start-space.com
        127.0.0.1 steamycock.com
        127.0.0.1 sterva.com
        127.0.0.1 stevecashdollar.com
        127.0.0.1 stop-tracking.biz
        127.0.0.1 stopvotefraud.com
        127.0.0.1 stopxxxpics.com
        127.0.0.1 strekoza.com
        127.0.0.1 stuffstore.com
        127.0.0.1 styleclickink.com
        127.0.0.1 summercollins.com
        127.0.0.1 summitcross.com
        127.0.0.1 super-spider.com
        127.0.0.1 super-websearch.com
        127.0.0.1 supersexmachine.com
        127.0.0.1 superwebsearch.com
        127.0.0.1 supret.com
        127.0.0.1 suzannebrecht.com
        127.0.0.1 sweeteenz.com
        127.0.0.1 tacil.org
        127.0.0.1 tangounion.com
        127.0.0.1 tastethemusic.com
        127.0.0.1 tax-refund4you.com
        127.0.0.1 tech-jobs.ws
        127.0.0.1 technology-related.com
        127.0.0.1 teen-biz.com
        127.0.0.1 teen-pic-post.com
        127.0.0.1 teenpornosex.com
        127.0.0.1 teens4free.net
        127.0.0.1 teensact.com
        127.0.0.1 teensgate.com
        127.0.0.1 teensguru.com
        127.0.0.1 teenswamp.com
        127.0.0.1 testosterone-birth-control.com
        127.0.0.1 the-exit.com
        127.0.0.1 the-huns-yellow-pages.com
        127.0.0.1 thefakejournal.com
        127.0.0.1 thehuy.net
        127.0.0.1 theproxy.org
        127.0.0.1 therealsearch.com
        127.0.0.1 thesten.com
        127.0.0.1 thornleygroup.com
        127.0.0.1 tings.org
        127.0.0.1 tit-x.com
        127.0.0.1 titanvision.com
        127.0.0.1 titsianna.com
        127.0.0.1 toddhayes.com
        127.0.0.1 toon-comics.com
        127.0.0.1 tooncomics.com
        127.0.0.1 topsearcher.com
        127.0.0.1 trafficback.com
        127.0.0.1 trafficswitcher.com
        127.0.0.1 travel.picture-posters.com
        127.0.0.1 true-portal.com
        127.0.0.1 trytechnical.com
        127.0.0.1 ufindall.click-now.net
        127.0.0.1 umaxsearch.com
        127.0.0.1 une-autre-france.com
        127.0.0.1 unigays.com
        127.0.0.1 unipages.cc
        127.0.0.1 up2you.ru
        127.0.0.1 urlstat.com
        127.0.0.1 urlstat.ru
        127.0.0.1 uralitel.ru
        127.0.0.1 ursie.net
        127.0.0.1 utahsweet.com
        127.0.0.1 utopicportal.com
        127.0.0.1 uusocialjustice.org
        127.0.0.1 v61.com
        127.0.0.1 vaginpics.com
        127.0.0.1 valmyers.com
        127.0.0.1 vegas-free.com
        127.0.0.1 vegbuy.com
        127.0.0.1 veloventures.com
        127.0.0.1 verzila.com
        127.0.0.1 victoriaadam.com
        127.0.0.1 videocategories.com
        127.0.0.1 vitamins-for-each.com
        127.0.0.1 votehowe.org
        127.0.0.1 vxebony.com
        127.0.0.1 wakeupdick.com
        127.0.0.1 warnomore.org
        127.0.0.1 watersport-specialties.com
        127.0.0.1 web-homepage.net
        127.0.0.1 web-search.tk
        127.0.0.1 webcoolsearch.com
        127.0.0.1 websearchdot.com
        127.0.0.1 weekend-movies.com
        127.0.0.1 wetpornostars.com
        127.0.0.1 whatsyoursearch.com
        127.0.0.1 white-pages.ws
        127.0.0.1 whittierblvd.com
        127.0.0.1 win-in-casino.com
        127.0.0.1 wiresearch.com
        127.0.0.1 wolfpacracing.com
        127.0.0.1 wordlist.jps.ru
        127.0.0.1 wpc2001.org
        127.0.0.1 wspzone.sexpornonline.com
        127.0.0.1 wwwbet.net
        127.0.0.1 wwwbetting.net
        127.0.0.1 wwwpokergames.com
        127.0.0.1 wwwpokerplayers.com
        127.0.0.1 wwwroulette.net
        127.0.0.1 x-library.com
        127.0.0.1 x-webdesign.com
        127.0.0.1 xcomics4u.com
        127.0.0.1 xic-bs.com
        127.0.0.1 xldr.com
        127.0.0.1 xp18.com
        127.0.0.1 xrenosearch.com
        127.0.0.1 xtragay.com
        127.0.0.1 xu.xu.pl
        127.0.0.1 xxxcategories.com
        127.0.0.1 xxxemailxxx.com
        127.0.0.1 y-e-l-l-o-w.com
        127.0.0.1 yellow500.com
        127.0.0.1 yezol.com
        127.0.0.1 you-search.com
        127.0.0.1 you-search.com.ru
        127.0.0.1 youfindall.com
        127.0.0.1 youfindall.net
        127.0.0.1 your-prescriptions.net
        127.0.0.1 yourbookmarks.info
        127.0.0.1 yourbookmarks.ws
        127.0.0.1 ypir.com
        127.0.0.1 ysa-info.net
        127.0.0.1 yukohamano.com
        127.0.0.1 ywebsearch.info
        127.0.0.1 zapros.com
        127.0.0.1 zesearch.com
        127.0.0.1 ziportal.com
        127.0.0.1 zipportal.com
        127.0.0.1 zoneoffreeporn.com
        127.0.0.1 zoomegasite.com
        127.0.0.1 zvimigdal.com
        127.0.0.1 zyban-zocor-levitra.com
        127.0.0.1 t.rack.cc
        127.0.0.1 omega-search.com
        127.0.0.1 cool-xxx.net
        127.0.0.1 revolto3.da.ru
        127.0.0.1 dating-search.net
        127.0.0.1 linksummary.com
        127.0.0.1 duolaimi.net
        127.0.0.1 ez-searching.com
        127.0.0.1 freehqmovies.com
        127.0.0.1 xzoomy.com
        127.0.0.1 freescratchandwin.com
        127.0.0.1 globalwebsearch.com
        127.0.0.1 www.gocybersearch.com
        127.0.0.1 mayancasino.com
        127.0.0.1 www.hastalavista.com
        127.0.0.1 www.free-popup-killer.com
        127.0.0.1 www.digitalfan.com
        127.0.0.1 google123.web1000.com
        127.0.0.1 search.ieplugin.com
        127.0.0.1 i-lookup.com
        127.0.0.1 spidersearch.com
        127.0.0.1 istarthere.com
        127.0.0.1 xxxtoolbar.com
        127.0.0.1 www.seekporn.org
        127.0.0.1 17-plus.com
        127.0.0.1 lolita4all1.xrensmagpost.com
        127.0.0.1 mafiapics.com
        127.0.0.1 www.teenmonster.com
        127.0.0.1 ie.marketdart.com
        127.0.0.1 masterbar.com
        127.0.0.1 search.netzany.com
        127.0.0.1 only-virgins.com
        127.0.0.1 passthison.com
        127.0.0.1 blondetgp.com
        127.0.0.1 prolivation.com
        127.0.0.1 server-au.imrworldwide.com
        127.0.0.1 rocketsearch.com
        127.0.0.1 roar.com
        127.0.0.1 searchaccurate.com
        127.0.0.1 searchalot.com
        127.0.0.1 searchandbrowse.com
        127.0.0.1 gtawarehouse.com
        127.0.0.1 startium.com
        127.0.0.1 searchandclick.com
        127.0.0.1 searchby.net
        127.0.0.1 searchdot.com
        127.0.0.1 search-exe.com
        127.0.0.1 secret-crush.com
        127.0.0.1 seekseek.com
        127.0.0.1 sexarena.com
        127.0.0.1 sexocean.play-lolita.com
        127.0.0.1 startsurfing.com
        127.0.0.1 srng.net
        127.0.0.1 apps.webservicehost.com
        127.0.0.1 search.shopnav.com
        127.0.0.1 wish7.com
        127.0.0.1 www.supersexpass.com
        127.0.0.1 surferbar.com
        127.0.0.1 xlola.underagehost.com
        127.0.0.1 hotlolitas.underagehost.com
        127.0.0.1 loading-lolita.com
        127.0.0.1 www.xupiter.com
        127.0.0.1 xjupiter.com
        127.0.0.1 www.xjupiter.com
        127.0.0.1 www.browserwise.com
        127.0.0.1 sqwire.com
        127.0.0.1 orbitexplorer.com
        127.0.0.1 searchcentrix.com
        127.0.0.1 categories.mygeek.com
        127.0.0.1 web-entrance.co
        127.0.0.1 whazit.com
        127.0.0.1 windowenhancer.com
        127.0.0.1 buz.ru
        127.0.0.1 iwon.com
        127.0.0.1 www.bonzi.com
        127.0.0.1 featured-results.com
        127.0.0.1 searchmadesafe.net
        127.0.0.1 quicklaunch.com
        127.0.0.1 www.cashsurfers.com
        127.0.0.1 lop.com
        127.0.0.1 tjdo.com
        127.0.0.1 ebav.com
        127.0.0.1 ebgo.com
        127.0.0.1 ebaw.com
        127.0.0.1 ebkb.com
        127.0.0.1 ebmu.com
        127.0.0.1 ecmp.com
        127.0.0.1 edhq.com
        127.0.0.1 edty.com
        127.0.0.1 sbee.com
        127.0.0.1 aavc.com
        127.0.0.1 acjp.com
        127.0.0.1 ecmh.com
        127.0.0.1 emch.com
        127.0.0.1 ecpm.com
        127.0.0.1 wabu.com
        127.0.0.1 wabq.com
        127.0.0.1 ebch.com
        127.0.0.1 ebdv.com
        127.0.0.1 ebdw.com
        127.0.0.1 ebjp.com
        127.0.0.1 ebkn.com
        127.0.0.1 ebky.com
        127.0.0.1 eblv.com
        127.0.0.1 wbkb.com
        127.0.0.1 ebvr.com
        127.0.0.1 ecwz.com
        127.0.0.1 ecyb.com
        127.0.0.1 eduy.com
        127.0.0.1 eeev.com
        127.0.0.1 farse.com
        127.0.0.1 ibmx.com
        127.0.0.1 icwb.com
        127.0.0.1 icwo.com
        127.0.0.1 icwp.com
        127.0.0.1 iddh.com
        127.0.0.1 idhh.com
        127.0.0.1 ifiz.com
        127.0.0.1 iguu.com
        127.0.0.1 samz.com
        127.0.0.1 saoe.com
        127.0.0.1 sbjr.com
        127.0.0.1 sbnl.com
        127.0.0.1 sbnt.com
        127.0.0.1 sbvr.com
        127.0.0.1 scbm.com
        127.0.0.1 sckr.com
        127.0.0.1 scrk.com
        127.0.0.1 sdry.com
        127.0.0.1 seld.com
        127.0.0.1 sfux.com
        127.0.0.1 sheat.com
        127.0.0.1 sipo.com
        127.0.0.1 smds.com
        127.0.0.1 srib.com
        127.0.0.1 srox.com
        127.0.0.1 srsf.com
        127.0.0.1 ssaw.com
        127.0.0.1 ssby.com
        127.0.0.1 surj.com
        127.0.0.1 tbvg.com
        127.0.0.1 tdak.com
        127.0.0.1 tdmy.com
        127.0.0.1 tefs.com
        127.0.0.1 tfil.com
        127.0.0.1 tjar.com
        127.0.0.1 tjaw.com
        127.0.0.1 tjgo.com
        127.0.0.1 tjem.com
        127.0.0.1 torc.com
        127.0.0.1 wfix.com
        127.0.0.1 wflu.com
        127.0.0.1 tdko.com
        127.0.0.1 thko.com
        127.0.0.1 H24413.tfil.com
        127.0.0.1 germany.rub.to
        127.0.0.1 search.rub.to
        127.0.0.1 unitedstates.rub.to
        127.0.0.1 www.commonname.com
        127.0.0.1 www.ezcybersearch.com
        127.0.0.1 www.jethomepage.com
        127.0.0.1 www.gohip.com
        127.0.0.1 hotbar.com
        127.0.0.1 www.huntbar.com
        127.0.0.1 search.imiserver.com
        127.0.0.1 searchenhancement.com
        127.0.0.1 newtonknows.com
        127.0.0.1 search-explorer.net
        127.0.0.1 searchsquire.com
        127.0.0.1 secondpower.com
        127.0.0.1 2ndpower.com
        127.0.0.1 searchgateway.net
        127.0.0.1 worldusa.com
        127.0.0.1 www.topsearcher.com
        127.0.0.1 smutserver.com
        127.0.0.1 searchmeup.com
        127.0.0.1 cameup.com
        127.0.0.1 kliksearch.com
        127.0.0.1 realphx.com
        127.0.0.1 blazefind.com
        127.0.0.1 zoofil.com
        127.0.0.1 terafinder.com
        127.0.0.1 008i.com
        127.0.0.1 171203.com
        127.0.0.1 39-93.com
        127.0.0.1 adult-personal.us
        127.0.0.1 cashsearch.biz
        127.0.0.1 cl55.biz
        127.0.0.1 dailyteenspic.com
        127.0.0.1 dialer2004.com
        127.0.0.1 digital-pornography.com
        127.0.0.1 eager-sex.com
        127.0.0.1 ergosites.com
        127.0.0.1 freecj.com
        127.0.0.1 greg-search.com
        127.0.0.1 incest-host.com
        127.0.0.1 ironcarteam.com
        127.0.0.1 is-best.com
        127.0.0.1 killerpornstars.com
        127.0.0.1 lollitop.com
        127.0.0.1 love-host.com
        127.0.0.1 myexexex.com
        127.0.0.1 my-finder.com
        127.0.0.1 onlineclick.net
        127.0.0.1 onlysex.ws
        127.0.0.1 regfreeze.com
        127.0.0.1 ruworld.com
        127.0.0.1 selltraffic.biz
        127.0.0.1 sexunique.net
        127.0.0.1 sinpussy.com
        127.0.0.1 teenhost.net
        127.0.0.1 ultraload.net
        127.0.0.1 vse-moe.biz
        127.0.0.1 xsex.ws
        127.0.0.1 75tz.com
        127.0.0.1 iefeadsl.com
        127.0.0.1 rf104.com
        127.0.0.1 www.v61.com
        127.0.0.1 ads.centralmedia.ws
        127.0.0.1 c.centralmedia.ws
        127.0.0.1 count.cc
        127.0.0.1 topx.cc
        127.0.0.1 sidefind.com
        127.0.0.1 thenewsearch.com
        127.0.0.1 new-search.net
        127.0.0.1 x-google.net
        127.0.0.1 adultgambling.org
        127.0.0.1 bitchesonline.net
        127.0.0.1 girls4rent.net
        127.0.0.1 usefullsoft.net
        127.0.0.1 livegambling.com
        127.0.0.1 adultsgames.net
        127.0.0.1 easyantispy.com
        127.0.0.1 spybotremover.net
        127.0.0.1 winprotect.net
        127.0.0.1 funny-girls.com
        127.0.0.1 winmsn.com
        127.0.0.1 oneclicksearches.com
        127.0.0.1 bestweblinks.com
        127.0.0.1 iqsearch.net
        127.0.0.1 dumpserv.com
        127.0.0.1 helpyoursearch.com
        127.0.0.1 sgrunt.biz
        127.0.0.1 yeak.net
        127.0.0.1 u45.cx
        127.0.0.1 u46.cx
        127.0.0.1 u47.cc
        127.0.0.1 u48.cc
        127.0.0.1 sfonditalia.biz
        127.0.0.1 realarea.biz
        127.0.0.1 archiviosex.net
        127.0.0.1 agava.com
        127.0.0.1 agava.ru
        127.0.0.1 hut1.ru
        127.0.0.1 hu15.ru
        127.0.0.1 winfixer.com
        127.0.0.1 3721.com
        127.0.0.1 easysearchingtips.com
        127.0.0.1 fine-search.net
        127.0.0.1 noproblemsurf.com
        127.0.0.1 pcspyremover.com
        127.0.0.1 search-motor.com
        127.0.0.1 searchwhatuwant.com
        127.0.0.1 ad25.com
        127.0.0.1 ad45.com
        127.0.0.1 ad77.com
        127.0.0.1 ad86.com
        127.0.0.1 full-search.net
        127.0.0.1 go2-search.com
        127.0.0.1 onemoresearch.net
        127.0.0.1 search-777.com
        127.0.0.1 search-to-find.com
        127.0.0.1 search-what.net
        127.0.0.1 winshow.biz
        127.0.0.1 lookfor.cc
        127.0.0.1 looking-for.cc
        127.0.0.1 tgp-4-you.com
        127.0.0.1 veryeasysearch.com
        127.0.0.1 010402.com
        127.0.0.1 20x2p.com
        127.0.0.1 db105.com
        127.0.0.1 ga31.com
        127.0.0.1 mpeg-look.com
        127.0.0.1 n-udd.com
        127.0.0.1 p-uud.com
        127.0.0.1 porn-screen.com
        127.0.0.1 rb37.com
        127.0.0.1 t058.com
        127.0.0.1 u-239.com
        127.0.0.1 v-224.com
        127.0.0.1 trackhits.cc
        127.0.0.1 tracktraff.cc
        127.0.0.1 power-cleaner.com
        127.0.0.1 yoursitebar.com
        127.0.0.1 ysbweb.com
        127.0.0.1 www.ysbweb.com
        127.0.0.1 installcash.com
        127.0.0.1 toolbarcash.com
        127.0.0.1 enjoywebsurf.com
        127.0.0.1 msnguard.cc
        127.0.0.1 searchclick.cc
        127.0.0.1 havy.biz
        127.0.0.1 ewizard.cc
        127.0.0.1 4klm.com
        127.0.0.1 camup.net
        127.0.0.1 bdsmlibrary.net
        127.0.0.1 n-glx.s-redirect.com
        127.0.0.1 aaasexypics.com
        127.0.0.1 allforadult.com
        127.0.0.1 autoescrowpay.com
        127.0.0.1 awmcash.biz
        127.0.0.1 awmdabest.com
        127.0.0.1 buldog-stats.com
        127.0.0.1 counter.sexmaniack.com
        127.0.0.1 fregat.drocherway.com
        127.0.0.1 greg-tut.com
        127.0.0.1 iframe.biz
        127.0.0.1 megapornix.com
        127.0.0.1 newiframe.biz
        127.0.0.1 nylonsexy.com
        127.0.0.1 pizdato.biz
        127.0.0.1 sexfiles.nu
        127.0.0.1 slutmania.biz
        127.0.0.1 sp2fucked.biz
        127.0.0.1 toolbarpartner.com
        127.0.0.1 vesbiz.biz
        127.0.0.1 virgin-tgp.net
        127.0.0.1 vparivalka.com
        127.0.0.1 x.full-tgp.net
        127.0.0.1 toolbar.cc
        127.0.0.1 himen.biz
        127.0.0.1 msupdater.net
        127.0.0.1 www.msupdater.net
        127.0.0.1 1800searchonline.com
        127.0.0.1 www.1800searchonline.com
        127.0.0.1 1stsearchportal.com
        127.0.0.1 www.1stsearchportal.com
        127.0.0.1 24-7searching-and-more.com
        127.0.0.1 www.24-7searching-and-more.com
        127.0.0.1 971searchbox.com
        127.0.0.1 www.971searchbox.com
        127.0.0.1 aaawebfinder.com
        127.0.0.1 www.aaawebfinder.com
        127.0.0.1 ampmsearch.com
        127.0.0.1 www.ampmsearch.com
        127.0.0.1 clickhere4search.com
        127.0.0.1 www.clickhere4search.com
        127.0.0.1 clicktomakeasearch.com
        127.0.0.1 www.clicktomakeasearch.com
        127.0.0.1 directsearchzone.com
        127.0.0.1 www.directsearchzone.com
        127.0.0.1 easysearch4you.com
        127.0.0.1 www.easysearch4you.com
        127.0.0.1 enterthesearch.com
        127.0.0.1 www.enterthesearch.com
        127.0.0.1 esearch2005.com
        127.0.0.1 www.esearch2005.com
        127.0.0.1 eza1netsearch.com
        127.0.0.1 www.eza1netsearch.com
        127.0.0.1 ezwebsearching.com
        127.0.0.1 www.ezwebsearching.com
        127.0.0.1 globalefinder.com
        127.0.0.1 www.globalefinder.com
        127.0.0.1 go2realsearch.com
        127.0.0.1 www.go2realsearch.com
        127.0.0.1 myseachexplorer.com
        127.0.0.1 www.myseachexplorer.com
        127.0.0.1 quicksearch360.com
        127.0.0.1 www.quicksearch360.com
        127.0.0.1 s1s1s1search.com
        127.0.0.1 www.s1s1s1search.com
        127.0.0.1 search101online.com
        127.0.0.1 www.search101online.com
        127.0.0.1 search123forme.com
        127.0.0.1 www.search123forme.com
        127.0.0.1 search345quest.com
        127.0.0.1 www.search345quest.com
        127.0.0.1 searchmiracle.com
        127.0.0.1 www.searchmiracle.com
        127.0.0.1 searchtheworld4you.com
        127.0.0.1 www.searchtheworld4you.com
        127.0.0.1 searchwebzone.com
        127.0.0.1 www.searchwebzone.com
        127.0.0.1 seektheglobe.com
        127.0.0.1 www.seektheglobe.com
        127.0.0.1 sitesearchcentral.com
        127.0.0.1 www.sitesearchcentral.com
        127.0.0.1 the818search-co.com
        127.0.0.1 www.the818search-co.com
        127.0.0.1 type2find.com
        127.0.0.1 www.type2find.com
        127.0.0.1 xosearchox.com
        127.0.0.1 www.xosearchox.com
        127.0.0.1 yoursearchspace.com
        127.0.0.1 www.yoursearchspace.com
        127.0.0.1 httpwwwads.com
        127.0.0.1 www.httpwwwads.com
        127.0.0.1 adshttp.com
        127.0.0.1 www.adshttp.com
        127.0.0.1 adsonwww.com
        127.0.0.1 www.adsonwww.com
        127.0.0.1 dnaads.com
        127.0.0.1 www.dnaads.com
        127.0.0.1 marketengines.com
        127.0.0.1 www.marketengines.com
        127.0.0.1 ad-w-a-r-e.com
        127.0.0.1 www.ad-w-a-r-e.com
        127.0.0.1 a-d-w-a-r-e.com
        127.0.0.1 www.a-d-w-a-r-e.com
        127.0.0.1 securityindex.net
        127.0.0.1 www.securityindex.net
        127.0.0.1 sexpicsporn.com
        127.0.0.1 www.sexpicsporn.com
        127.0.0.1 free-spybot.com
        127.0.0.1 www.free-spybot.com
        127.0.0.1 cashengines.com
        127.0.0.1 www.cashengines.com
        127.0.0.1 microsoftantispyware.net
        127.0.0.1 www.microsoftantispyware.net
        127.0.0.1 mircosoftantispy.com
        127.0.0.1 www.mircosoftantispy.com
        127.0.0.1 msantispy.com
        127.0.0.1 www.msantispy.com
        127.0.0.1 netspyprotector.com
        127.0.0.1 www.netspyprotector.com
        127.0.0.1 avforce.com
        127.0.0.1 www.avforce.com
        127.0.0.1 savehits.com
        127.0.0.1 www.savehits.com
        127.0.0.1 saveli.com
        127.0.0.1 www.saveli.com
        127.0.0.1 metastop.com
        127.0.0.1 www.metastop.com
        127.0.0.1 perlink.biz
        127.0.0.1 www.perlink.biz
        127.0.0.1 highdialer.com
        127.0.0.1 www.highdialer.com
        127.0.0.1 online-more.com
        127.0.0.1 www.online-more.com
        127.0.0.1 www.syserrors.com
        127.0.0.1 www.vcodec.com
        127.0.0.1 toolbartraff.biz
        127.0.0.1 www.toolbartraff.biz
        127.0.0.1 pcadprotector.cc
        127.0.0.1 www.pcadprotector.cc
        127.0.0.1 airtleworld.com
        127.0.0.1 www.airtleworld.com
        127.0.0.1 domaincar.com
        127.0.0.1 www.domaincar.com
        127.0.0.1 worldray.com
        127.0.0.1 www.worldray.com
        127.0.0.1 www5.worldray.com
        127.0.0.1 www6.worldray.com
        127.0.0.1 www.spytrooper.com
        127.0.0.1 spytrooper.com
        127.0.0.1 dl.ad-ware.cc
        127.0.0.1 ad-ware.cc
        127.0.0.1 downloads.adaware.cc
        127.0.0.1 adaware.cc
        127.0.0.1 hitscount.net
        127.0.0.1 count.hitscount.net
        127.0.0.1 fined.biz
        127.0.0.1 de.ag
        127.0.0.1 games.de.ag
        127.0.0.1 www.games.de.ag
        127.0.0.1 little-download.net
        127.0.0.1 www.little-download.net
        127.0.0.1 little-help.com
        127.0.0.1 www.little-help.com
        127.0.0.1 www.spyaxe.net
        127.0.0.1 www.spyaxe.com
        127.0.0.1 www.spyaxe.biz
        127.0.0.1 www.malwarewipe.com
        127.0.0.1 dl.malwarewipe.com
        127.0.0.1 www.malwarewipeupdate.com
        127.0.0.1 unionseek.com
        127.0.0.1 www.unionseek.com
        127.0.0.1 sirh0t.blackhats.tc
        127.0.0.1 blackhats.tc
        127.0.0.1 www.blackhats.tc
        127.0.0.1 ritztours.com
        127.0.0.1 www.ritztours.com
        127.0.0.1 flashflashmx.3322.org
        127.0.0.1 3322.org
        127.0.0.1 www.3322.org
        127.0.0.1 jupitersatellites.biz
        127.0.0.1 www.jupitersatellites.biz
        127.0.0.1 yops.biz
        127.0.0.1 www.yops.biz
        127.0.0.1 goldengr.hypermart.net
        127.0.0.1 web-nexus.net
        127.0.0.1 safe-sales.biz
        127.0.0.1 www.safe-sales.biz
        127.0.0.1 jerrynews.com
        127.0.0.1 www.jerrynews.com
        127.0.0.1 Teslaplus.com
        127.0.0.1 www.Teslaplus.com
        127.0.0.1 WorldAntiSpy.com
        127.0.0.1 www.WorldAntiSpy.com
        127.0.0.1 www.securitycaution.com
        127.0.0.1 securitycaution.com
        127.0.0.1 adservs.com
        127.0.0.1 csx.adservs.com
        127.0.0.1 www.csx.adservs.com
        127.0.0.1 toolbarbest.biz
        127.0.0.1 www.toolbarbest.biz
        127.0.0.1 game4all.biz
        127.0.0.1 www.game4all.biz
        127.0.0.1 wm.kannylizaciya.info
        127.0.0.1 www.wm.kannylizaciya.info
        127.0.0.1 wm.buhartes.info
        127.0.0.1 www.wm.buhartes.info
        127.0.0.1 login.fric.cn
        127.0.0.1 www.login.fric.cn
        127.0.0.1 xsremover.com
        127.0.0.1 www.xsremover.com
        127.0.0.1 spydeface.com
        127.0.0.1 www.spydeface.com
        127.0.0.1 alfacleaner.com
        127.0.0.1 www.alfacleaner.com
        127.0.0.1 innovagest2000.com
        127.0.0.1 www.innovagest2000.com
        127.0.0.1 www.thespyguard.com
        127.0.0.1 thespyguard.com
        127.0.0.1 www.adwarepunisher.com
        127.0.0.1 adwarepunisher.com
        127.0.0.1 www.spyiblock.com
        127.0.0.1 spyiblock.com
        127.0.0.1 www.uvu-channel.com
        127.0.0.1 uvu-channel.com
        127.0.0.1 www.hachimitsu-lemon.com
        127.0.0.1 hachimitsu-lemon.com
        127.0.0.1 SEARCHTOFIND.NET
        127.0.0.1 www.SEARCHTOFIND.NET
        127.0.0.1 www.pestrap.com
        127.0.0.1 pestrap.com
        127.0.0.1 uptodatesecurity.com
        127.0.0.1 www.uptodatesecurity.com
        127.0.0.1 thinstall.abetterinternet.com
        127.0.0.1 www.3abetterinternet.com
        127.0.0.1 download.abetterinternet.com
        127.0.0.1 www.abetterinternet.com
        127.0.0.1 qmex.psyche-evolution.com
        127.0.0.1 www.qmex.psyche-evolution.com
        127.0.0.1 core.psyche-evolution.com
        127.0.0.1 www.core.psyche-evolution.com
        127.0.0.1 1stantivirus.com
        127.0.0.1 www.1stantivirus.com
        127.0.0.1 scanandrepair.com
        127.0.0.1 www.scanandrepair.com
        127.0.0.1 uydsiygeds.com
        127.0.0.1 www.uydsiygeds.com
        127.0.0.1 pesttrap.com
        127.0.0.1 www.pesttrap.com
        127.0.0.1 adwarebazooka.com
        127.0.0.1 get.adwarebazooka.com
        127.0.0.1 www.adwarebazooka.com
        127.0.0.1 kliksoftware.com
        127.0.0.1 www.kliksoftware.com
        127.0.0.1 hitvirus.com
        127.0.0.1 get.hitvirus.com
        127.0.0.1 www.hitvirus.com
        127.0.0.1 promo.dollarrevenue.com
        127.0.0.1 www.promo.dollarrevenue.com
        127.0.0.1 maxifile.com
        127.0.0.1 www.maxifile.com
        127.0.0.1 targetsaver.com
        127.0.0.1 www.targetsaver.com
        127.0.0.1 dl.targetsaver.com
        127.0.0.1 www.dl.targetsaver.com
        127.0.0.1 nonameforthisdomain.com
        127.0.0.1 www.nonameforthisdomain.com
        127.0.0.1 hypoteches.com
        127.0.0.1 www.hypoteches.com
        127.0.0.1 www.earthllnk.net
        127.0.0.1 earthllnk.net
        127.0.0.1 hostance.net
        127.0.0.1 www.hostance.net
        127.0.0.1 my-dedik-one.com
        127.0.0.1 www.my-dedik-one.com
        127.0.0.1 10sek.com
        127.0.0.1 www.10sek.com
        127.0.0.1 6sek.com
        127.0.0.1 www.6sek.com
        127.0.0.1 cashdeluxe.net
        127.0.0.1 www.cashdeluxe.net
        127.0.0.1 stats.cashdeluxe.net
        127.0.0.1 www.stats.cashdeluxe.net
        127.0.0.1 www.2006ooo.com
        127.0.0.1 www.spyware-stop.com
        127.0.0.1 spyware-stop.com
        127.0.0.1 www.SpyShield.org
        127.0.0.1 SpyShield.org
        127.0.0.1 utils.winfixer.com
        127.0.0.1 www.utils.winfixer.com
        127.0.0.1 toolbarbucks.biz
        127.0.0.1 www.toolbarbucks.biz
        127.0.0.1 derklaif.biz
        127.0.0.1 www.derklaif.biz
        127.0.0.1 www.v-codec.com
        127.0.0.1 v-codec.com
        127.0.0.1 www.emediacodec.com
        127.0.0.1 emediacodec.com
        127.0.0.1 www.popentertain.com
        127.0.0.1 popentertain.com
        127.0.0.1 softwareprofit.com
        127.0.0.1 www.softwareprofit.com
        127.0.0.1 de.winantivirus.com
        127.0.0.1 download.winantivirus.com
        127.0.0.1 winantivirus.com
        127.0.0.1 www.winantivirus.com
        127.0.0.1 offers.bullseye-network.com
        127.0.0.1 www.offers.bullseye-network.com
        127.0.0.1 bullseye-network.com
        127.0.0.1 www.bullseye-network.com
        127.0.0.1 sponsor2.ucmore.com
        127.0.0.1 www.sponsor2.ucmore.com
        127.0.0.1 hostthesky.com
        127.0.0.1 www.hostthesky.com
        127.0.0.1 dbdecicated.com
        127.0.0.1 www.dbdecicated.com
        127.0.0.1 readagreement.net
        127.0.0.1 www.readagreement.net
        127.0.0.1 gl.secdep.info
        127.0.0.1 www.gl.secdep.info
        127.0.0.1 spyfalcon.com
        127.0.0.1 www.spyfalcon.com
        127.0.0.1 spyfalconupdate.com
        127.0.0.1 www.spyfalconupdate.com
        127.0.0.1 spy-shield.com
        127.0.0.1 www.spy-shield.com
        127.0.0.1 winnanny.com
        127.0.0.1 www.winnanny.com
        127.0.0.1 winsoftware.com
        127.0.0.1 www.winsoftware.com
        127.0.0.1 winfirewall.com
        127.0.0.1 www.winfirewall.com
        127.0.0.1 winantispyware.com
        127.0.0.1 www.winantispyware.com
        127.0.0.1 udefender.com
        127.0.0.1 www.udefender.com
        127.0.0.1 bravesentry.com
        127.0.0.1 www.bravesentry.com
        127.0.0.1 content.dollarrevenue.com
        127.0.0.1 www.content.dollarrevenue.com
        127.0.0.1 toolbar.azebar.com
        127.0.0.1 www.toolbar.azebar.com
        127.0.0.1 traffsale1.biz
        127.0.0.1 www.traffsale1.biz
        127.0.0.1 spywaredisinfector.com
        127.0.0.1 www.spywaredisinfector.com
        127.0.0.1 SpyCut.com
        127.0.0.1 www.SpyCut.com
        127.0.0.1 almanah.biz
        127.0.0.1 www.almanah.biz
        127.0.0.1 antispydns.biz
        127.0.0.1 www.antispydns.biz
        127.0.0.1 spyaxeupdate.com
        127.0.0.1 www.spyaxeupdate.com
        127.0.0.1 malwarewipesupport.com
        127.0.0.1 www.malwarewipesupport.com
        127.0.0.1 remedyantispy.com
        127.0.0.1 www.remedyantispy.com
        127.0.0.1 systemstable.com
        127.0.0.1 www.systemstable.com
        127.0.0.1 whoisprivacyprotect.com
        127.0.0.1 www.whoisprivacyprotect.com
        127.0.0.1 prime.webhancer.com
        127.0.0.1 www.prime.webhancer.com
        127.0.0.1 webhancer.com
        127.0.0.1 www.webhancer.com
        127.0.0.1 dr.webhancer.com
        127.0.0.1 www.dr.webhancer.com
        127.0.0.1 dr2.webhancer.com
        127.0.0.1 www.dr2.webhancer.com
        127.0.0.1 www.onli-ne.com
        127.0.0.1 spycontra.com
        127.0.0.1 www.spycontra.com
        127.0.0.1 anti-virus-pro.com
        127.0.0.1 www.anti-virus-pro.com
        127.0.0.1 check.jupitersatellites.biz
        127.0.0.1 www.check.jupitersatellites.biz
        127.0.0.1 necessaryupdates.com
        127.0.0.1 www.necessaryupdates.com
        127.0.0.1 bestworldgirls-for-u.net
        127.0.0.1 www.bestworldgirls-for-u.net
        127.0.0.1 stejax.pl
        127.0.0.1 www.stejax.pl
        127.0.0.1 kitehosting.com
        127.0.0.1 www.kitehosting.com
        127.0.0.1 ware2006.com
        127.0.0.1 www.ware2006.com
        127.0.0.1 filestore.com
        127.0.0.1 www.filestore.com
        127.0.0.1 systemupdates.net
        127.0.0.1 www.systemupdates.net
        127.0.0.1 logs.vapochille.com
        127.0.0.1 www.logs.vapochille.com
        127.0.0.1 goldenfreehost.com
        127.0.0.1 www.goldenfreehost.com
        127.0.0.1 todaywarnings.com
        127.0.0.1 www.todaywarnings.com
        127.0.0.1 spywarequake.com
        127.0.0.1 spywarequake.info
        127.0.0.1 www.spywarequake.info
        127.0.0.1 www.spywarequake.com
        127.0.0.1 download2.spywarequake.com
        127.0.0.1 download3.spywarequake.com
        127.0.0.1 download4.spywarequake.com
        127.0.0.1 download5.spywarequake.com
        127.0.0.1 download7.spywarequake.com
        127.0.0.1 download8.spywarequake.com
        127.0.0.1 download9.spywarequake.com
        127.0.0.1 download10.spywarequake.com
        127.0.0.1 download11.spywarequake.com
        127.0.0.1 download12.spywarequake.com
        127.0.0.1 download13.spywarequake.com
        127.0.0.1 download15.spywarequake.com
        127.0.0.1 updates.spywarequake.com
        127.0.0.1 urgentsystemupdate.com
        127.0.0.1 www.urgentsystemupdate.com
        127.0.0.1 dl2.spywarestrike.com
        127.0.0.1 dl3.spywarestrike.com
        127.0.0.1 dl4.spywarestrike.com
        127.0.0.1 dl5.spywarestrike.com
        127.0.0.1 dl6.spywarestrike.com
        127.0.0.1 dl7.spywarestrike.com
        127.0.0.1 dl8.spywarestrike.com
        127.0.0.1 nospywaresoft.com
        127.0.0.1 spywarestrike.com
        127.0.0.1 www.nospywaresoft.com
        127.0.0.1 www.spywarestrike.com
        127.0.0.1 spyaxesupport.com
        127.0.0.1 www.spyaxesupport.com
        127.0.0.1 download3.spyaxe.com
        127.0.0.1 download4.spyaxe.com
        127.0.0.1 download5.spyaxe.com
        127.0.0.1 download6.spyaxe.com
        127.0.0.1 dl2.spyfalcon.com
        127.0.0.1 dl3.spyfalcon.com
        127.0.0.1 dl4.spyfalcon.com
        127.0.0.1 dl5.spyfalcon.com
        127.0.0.1 dl9.spyfalcon.com
        127.0.0.1 dl10.spyfalcon.com
        127.0.0.1 dl16.spyfalcon.com
        127.0.0.1 www.sgrunt.biz
        127.0.0.1 traffbest.biz
        127.0.0.1 www.traffbest.biz
        127.0.0.1 securityfeature.com
        127.0.0.1 www.securityfeature.com
        127.0.0.1 pimasoft.com
        127.0.0.1 www.pimasoft.com
        127.0.0.1 blackhawksoftware.com
        127.0.0.1 www.blackhawksoftware.com
        127.0.0.1 spy-sniper.com
        127.0.0.1 www.spy-sniper.com
        127.0.0.1 safetydefender.com
        127.0.0.1 www.safetydefender.com
        127.0.0.1 securitywarnings.net
        127.0.0.1 www.securitywarnings.net
        127.0.0.1 urgentsystemupdate.biz
        127.0.0.1 www.urgentsystemupdate.biz
        127.0.0.1 antispylab.com
        127.0.0.1 www.antispylab.com
        127.0.0.1 spywaresheriff.com
        127.0.0.1 www.spywaresheriff.com
        127.0.0.1 allmegabucks.com
        127.0.0.1 www.allmegabucks.com
        127.0.0.1 rizalof.com
        127.0.0.1 www.rizalof.com
        127.0.0.1 rc.rizalof.com
        127.0.0.1 media-codec.com
        127.0.0.1 www.media-codec.com
        127.0.0.1 SpywareScraper.com
        127.0.0.1 www.SpywareScraper.com
        127.0.0.1 crystalysmedia.com
        127.0.0.1 www.crystalysmedia.com
        127.0.0.1 180solutions.com
        127.0.0.1 cts.180solutions.com
        127.0.0.1 bis.180solutions.com
        127.0.0.1 downloads.180solutions.com
        127.0.0.1 uploads.180solutions.com
        127.0.0.1 installs.180solutions.com
        127.0.0.1 config.180solutions.com
        127.0.0.1 ping.180solutions.com
        127.0.0.1 tv.180solutions.com
        127.0.0.1 nowhere.180solutions.com
        127.0.0.1 www.180solutions.com
        127.0.0.1 180searchassistant.com
        127.0.0.1 www.180searchassistant.com
        127.0.0.1 theguardservices.com
        127.0.0.1 www.theguardservices.com
        127.0.0.1 securitybulletin.net
        127.0.0.1 www.securitybulletin.net
        127.0.0.1 www.supernet.speedserv.com
        127.0.0.1 spyonthis.net
        127.0.0.1 download.spyonthis.net
        127.0.0.1 www.spyonthis.net
        127.0.0.1 hijack-this.net
        127.0.0.1 www.hijack-this.net
        127.0.0.1 errorsafe.com
        127.0.0.1 de.errorsafe.com
        127.0.0.1 download.errorsafe.com
        127.0.0.1 www.errorsafe.com
        127.0.0.1 amaena.com
        127.0.0.1 trial.updates.winsoftware.com
        127.0.0.1 instlog.winfixer.com
        127.0.0.1 winfixer2006.com
        127.0.0.1 www.winfixer2006.com
        127.0.0.1 webtopsecurity.com
        127.0.0.1 www.webtopsecurity.com
        127.0.0.1 traff5all.biz
        127.0.0.1 www.traff5all.biz
        127.0.0.1 1-extreme.biz
        127.0.0.1 www.1-extreme.biz
        127.0.0.1 download.bravesentry.com
        127.0.0.1 www.download.bravesentry.com
        127.0.0.1 evko.biz
        127.0.0.1 www.evko.biz
        127.0.0.1 lavasoftupdate.com
        127.0.0.1 www.lavasoftupdate.com
        127.0.0.1 download.secureyournet.biz
        127.0.0.1 www.download.secureyournet.biz
        127.0.0.1 secureyournet.biz
        127.0.0.1 www.secureyournet.biz
        127.0.0.1 windupdates.com
        127.0.0.1 asdbiz.biz
        127.0.0.1 www.asdbiz.biz
        127.0.0.1 spywarelabs.com
        127.0.0.1 www.spywarelabs.com
        127.0.0.1 traffweb1.biz
        127.0.0.1 www.traffweb1.biz
        127.0.0.1 newtoolbar.biz
        127.0.0.1 www.newtoolbar.biz
        127.0.0.1 buytraff.biz
        127.0.0.1 www.buytraff.biz
        127.0.0.1 safetyuptodate.com
        127.0.0.1 www.safetyuptodate.com
        127.0.0.1 crazywinnings.com
        127.0.0.1 frame.crazywinnings.com
        127.0.0.1 www.crazywinnings.com
        127.0.0.1 topconverting.com
        127.0.0.1 www.topconverting.com
        127.0.0.1 casalemedia.com
        127.0.0.1 b.casalemedia.com
        127.0.0.1 www.casalemedia.com
        127.0.0.1 addictivetechnologies.com
        127.0.0.1 www.addictivetechnologies.com
        127.0.0.1 addictivetechnologies.net
        127.0.0.1 www.addictivetechnologies.net
        127.0.0.1 admin2cash.biz
        127.0.0.1 www.admin2cash.biz
        127.0.0.1 advcash.biz
        127.0.0.1 www.advcash.biz
        127.0.0.1 all4internet.com
        127.0.0.1 www.all4internet.com
        127.0.0.1 bettersearch.biz
        127.0.0.1 www.bettersearch.biz
        127.0.0.1 c4tdownload.com
        127.0.0.1 www.c4tdownload.com
        127.0.0.1 clickspring.net
        127.0.0.1 www.clickspring.net
        127.0.0.1 contentmatch.net
        127.0.0.1 www.contentmatch.net
        127.0.0.1 dialer-shop.com
        127.0.0.1 www.dialer-shop.com
        127.0.0.1 dialoff.com
        127.0.0.1 www.dialoff.com
        127.0.0.1 energy-factor.com
        127.0.0.1 www.energy-factor.com
        127.0.0.1 hardcorefantasyland.com
        127.0.0.1 www.hardcorefantasyland.com
        127.0.0.1 hardfootballbabes.com
        127.0.0.1 www.hardfootballbabes.com
        127.0.0.1 linkautomatici.com
        127.0.0.1 www.linkautomatici.com
        127.0.0.1 master69.biz
        127.0.0.1 www.master69.biz
        127.0.0.1 master70.biz
        127.0.0.1 www.master70.biz
        127.0.0.1 master71.biz
        127.0.0.1 www.master71.biz
        127.0.0.1 mcdial.biz
        127.0.0.1 www.mcdial.biz
        127.0.0.1 mt-download.com
        127.0.0.1 www.mt-download.com
        127.0.0.1 my-teensex.com
        127.0.0.1 overpro.com
        127.0.0.1 private-dialer.biz
        127.0.0.1 private-iframe.biz
        127.0.0.1 redfunny.com
        127.0.0.1 scoobidoo.com
        127.0.0.1 skoobidoo.com
        127.0.0.1 sexvideopro.com
        127.0.0.1 storage-tasp.com
        127.0.0.1 xbeta69.com
        127.0.0.1 securityuptodate.net
        127.0.0.1 www.securityuptodate.net
        127.0.0.1 troonety.biz
        127.0.0.1 www.troonety.biz
        127.0.0.1 zurrusco.com
        127.0.0.1 www.zurrusco.com
        127.0.0.1 breenten.biz
        127.0.0.1 www.breenten.biz
        127.0.0.1 votreenton.biz
        127.0.0.1 www.votreenton.biz
        127.0.0.1 ozonung.biz
        127.0.0.1 www.ozonung.biz
        127.0.0.1 digikeygen.com
        127.0.0.1 www.digikeygen.com
        127.0.0.1 5starvideos.com
        127.0.0.1 www.5starvideos.com
        127.0.0.1 moviereality.com
        127.0.0.1 www.moviereality.com
        127.0.0.1 perfectedsecurity.com
        127.0.0.1 www.perfectedsecurity.com
        127.0.0.1 securityprecaution.net
        127.0.0.1 www.securityprecaution.net
        127.0.0.1 securityupdatesite.com
        127.0.0.1 www.securityupdatesite.com
        127.0.0.1 dns-look-up.com
        127.0.0.1 www.dns-look-up.com
        127.0.0.1 ayb.dns-look-up.com
        127.0.0.1 search200.com
        127.0.0.1 www.search200.com
        127.0.0.1 404dns.com
        127.0.0.1 www.404dns.com
        127.0.0.1 mcboo.com
        127.0.0.1 dr.mcboo.com
        127.0.0.1 www.mcboo.com
        127.0.0.1 appealcircuit.com
        127.0.0.1 www.appealcircuit.com
        127.0.0.1 balotierra.com
        127.0.0.1 www.balotierra.com
        127.0.0.1 oldflock.com
        127.0.0.1 www.oldflock.com
        127.0.0.1 pornmagpass.com
        127.0.0.1 www.pornmagpass.com
        127.0.0.1 dailypornmag.com
        127.0.0.1 www.dailypornmag.com
        127.0.0.1 babespornmag.com
        127.0.0.1 www.babespornmag.com
        127.0.0.1 teenspornmag.com
        127.0.0.1 www.teenspornmag.com
        127.0.0.1 maturespornmag.com
        127.0.0.1 www.maturespornmag.com
        127.0.0.1 hardcorepornmag.com
        127.0.0.1 www.hardcorepornmag.com
        127.0.0.1 gayspornmag.com
        127.0.0.1 www.gayspornmag.com
        127.0.0.1 topsecuritysite.net
        127.0.0.1 www.topsecuritysite.net
        127.0.0.1 bestsafetyguide.net
        127.0.0.1 www.bestsafetyguide.net
        127.0.0.1 searchweb2.com
        127.0.0.1 www.searchweb2.com
        127.0.0.1 www.lop.com
        127.0.0.1 vidscodec.com
        127.0.0.1 www.vidscodec.com
        127.0.0.1 newvidscodec.net
        127.0.0.1 www.newvidscodec.net
        127.0.0.1 media-codec.net
        127.0.0.1 www.media-codec.net
        127.0.0.1 mediacodec.net
        127.0.0.1 www.mediacodec.net
        127.0.0.1 imediacodec.com
        127.0.0.1 www.imediacodec.com
        127.0.0.1 emcodec.com
        127.0.0.1 www.emcodec.com
        127.0.0.1 vicodec.com
        127.0.0.1 www.vicodec.com
        127.0.0.1 xpasswordmanager.com
        127.0.0.1 www.xpasswordmanager.com
        127.0.0.1 cracks4all.com
        127.0.0.1 www.cracks4all.com
        127.0.0.1 media-motor.net
        127.0.0.1 mmm.media-motor.net
        127.0.0.1 bins.media-motor.net
        127.0.0.1 bins2.media-motor.net
        127.0.0.1 logs.media-motor.net
        127.0.0.1 mmohsix.com
        127.0.0.1 www.mmohsix.com
        127.0.0.1 pops.mmohsix.com
        127.0.0.1 megalocast.net
        127.0.0.1 js.megalocast.net
        127.0.0.1 www.megalocast.net
        127.0.0.1 dl.web-nexus.net
        127.0.0.1 movies-etc.com
        127.0.0.1 cdn.movies-etc.com
        127.0.0.1 cdn2.movies-etc.com
        127.0.0.1 internet-optimizer.com
        127.0.0.1 www.internet-optimizer.com
        127.0.0.1 888.com
        127.0.0.1 www.888.com
        127.0.0.1 images.888.com
        127.0.0.1 surfsidekick.com
        127.0.0.1 www.surfsidekick.com
        127.0.0.1 sdl.surfsidekick.com
        127.0.0.1 kmpads.com
        127.0.0.1 www.kmpads.com
        127.0.0.1 ads.kmpads.com
        127.0.0.1 zipcodec.com
        127.0.0.1 www.zipcodec.com
        127.0.0.1 ibankis.org
        127.0.0.1 www.ibankis.org
        127.0.0.1 adwarefinder.com
        127.0.0.1 www.adwarefinder.com
        127.0.0.1 nbcsearch.com
        127.0.0.1 www.nbcsearch.com
        127.0.0.1 TBCODE.COM
        127.0.0.1 www.TBCODE.COM
        127.0.0.1 1987324.com
        127.0.0.1 www.1987324.com
        127.0.0.1 www.archiviosex.net
        127.0.0.1 sysnetsecurity.com
        127.0.0.1 www.sysnetsecurity.com
        127.0.0.1 sysnetsecurity.net
        127.0.0.1 www.sysnetsecurity.net
        127.0.0.1 error404site.com
        127.0.0.1 www.error404site.com
        127.0.0.1 error404site.net
        127.0.0.1 www.error404site.net
        127.0.0.1 wm.vother.info
        127.0.0.1 www.wm.vother.info
        127.0.0.1 vother.info
        127.0.0.1 www.vother.info
        127.0.0.1 wm.komforochka.info
        127.0.0.1 www.wm.komforochka.info
        127.0.0.1 komforochka.info
        127.0.0.1 www.komforochka.info
        127.0.0.1 hervam.com
        127.0.0.1 www.hervam.com
        127.0.0.1 www.nunah.info
        127.0.0.1 nunah.info
        127.0.0.1 www.searchmeup.com
        127.0.0.1 www.searchcolours.com
        127.0.0.1 searchcolours.com
        127.0.0.1 brodbfm.net
        127.0.0.1 www.brodbfm.net
        127.0.0.1 easybestdeals.com
        127.0.0.1 www.easybestdeals.com
        127.0.0.1 spywareno.com
        127.0.0.1 www.spywareno.com
        127.0.0.1 spyheal.com
        127.0.0.1 www.spyheal.com
        127.0.0.1 www.streamxs.ws
        127.0.0.1 streamxs.ws
        127.0.0.1 asta-killer.com
        127.0.0.1 newmediaidea.com
        127.0.0.1 www.newmediaidea.com
        127.0.0.1 syssecuritysite.net
        127.0.0.1 www.syssecuritysite.net
        127.0.0.1 aulde.net
        127.0.0.1 www.aulde.net
        127.0.0.1 searchdrive.info
        127.0.0.1 wwwsearchdrive.info
        127.0.0.1 download.bardownload.com
        127.0.0.1 www.download.bardownload.com
        127.0.0.1 bardownload.com
        127.0.0.1 www.bardownload.com
        127.0.0.1 intcodec.com
        127.0.0.1 www.intcodec.com
        127.0.0.1 newupdates.lzio.com
        127.0.0.1 uptofind.com
        127.0.0.1 www.uptofind.com
        127.0.0.1 homelandnetwork.COM
        127.0.0.1 www.homelandnetwork.COM
        127.0.0.1 getmirar.com
        127.0.0.1 mirarsearch.com
        127.0.0.1 net-nucleus.com
        127.0.0.1 zenotecnico.com
        127.0.0.1 www.zenotecnico.com
        127.0.0.1 zenotecnico2.com
        127.0.0.1 www.zenotecnico2.com
        127.0.0.1 surfaccuracy.com
        127.0.0.1 www.surfaccuracy.com
        127.0.0.1 cache.surfaccuracy.com
        127.0.0.1 www.cache.surfaccuracy.com
        127.0.0.1 www.the.007guard.com
        127.0.0.1 the.007guard.com
        127.0.0.1 install.007guard.com
        127.0.0.1 www.install.007guard.com
        127.0.0.1 007guard.com
        127.0.0.1 www.007guard.com
        127.0.0.1 feeds.2search.com
        127.0.0.1 www.feeds.2search.com
        127.0.0.1 2search.com
        127.0.0.1 www.2search.com
        127.0.0.1 feeds2.2search.org
        127.0.0.1 www.feeds2.2search.org
        127.0.0.1 2search.org
        127.0.0.1 www.2search.org
        127.0.0.1 zangocash.com
        127.0.0.1 www.zangocash.com
        127.0.0.1 static.zangocash.com
        127.0.0.1 www.static.zangocash.com
        127.0.0.1 public.zangocash.com
        127.0.0.1 www.public.zangocash.com
        127.0.0.1 code.ignphrases.com
        127.0.0.1 www.ignphrases.com
        127.0.0.1 ignphrases.com
        127.0.0.1 www.igetnet.com
        127.0.0.1 igetnet.com
        127.0.0.1 www.topbrowsing.com
        127.0.0.1 topbrowsing.com
        127.0.0.1 www.download.jupitersatellites.biz
        127.0.0.1 download.jupitersatellites.biz
        127.0.0.1 voghp.com
        127.0.0.1 www.voghp.com
        127.0.0.1 zhmbscwdgk.biz
        127.0.0.1 www.zhmbscwdgk.biz
        127.0.0.1 zabywjwzlr.biz.biz
        127.0.0.1 www.zabywjwzlr.biz.biz
        127.0.0.1 i-femdom.com
        127.0.0.1 www.i-femdom.com
        127.0.0.1 buy-find.info
        127.0.0.1 www.buy-find.info
        127.0.0.1 searche.info
        127.0.0.1 www.searche.info
        1. ( Suite )

          127.0.0.1 zippy-lookup.com
          127.0.0.1 www.zippy-lookup.com
          127.0.0.1 here4search.biz
          127.0.0.1 www.here4search.biz
          127.0.0.1 popcorn.net
          127.0.0.1 www.popcorn.net
          127.0.0.1 eupdatepage.com
          127.0.0.1 www.eupdatepage.com
          127.0.0.1 errorsdns.com
          127.0.0.1 www.errorsdns.com
          127.0.0.1 esafetypage.com
          127.0.0.1 www.esafetypage.com
          127.0.0.1 eprotectpage.com
          127.0.0.1 www.eprotectpage.com
          127.0.0.1 esecuritypage.com
          127.0.0.1 www.esecuritypage.com
          127.0.0.1 iednserror.com
          127.0.0.1 www.iednserror.com
          127.0.0.1 idnserror.com
          127.0.0.1 www.idnserror.com
          127.0.0.1 iesecurepage.com
          127.0.0.1 www.iesecurepage.com
          127.0.0.1 dvdaccess.net
          127.0.0.1 www.dvdaccess.net
          127.0.0.1 qualitycodec.com
          127.0.0.1 www.qualitycodec.com
          127.0.0.1 elitecodec.com
          127.0.0.1 www.elitecodec.com
          127.0.0.1 vidcodecs.com
          127.0.0.1 www.vidcodecs.com
          127.0.0.1 supercodec.com
          127.0.0.1 www.supercodec.com
          127.0.0.1 perfectcodec.com
          127.0.0.1 www.perfectcodec.com
          127.0.0.1 searchfindsearch.com
          127.0.0.1 www.searchfindsearch.com
          127.0.0.1 site.accessorygeeks.com
          127.0.0.1 www.site.accessorygeeks.com
          127.0.0.1 accessorygeeks.com
          127.0.0.1 www.accessorygeeks.com
          127.0.0.1 ivideocodec.com
          127.0.0.1 www.ivideocodec.com
          127.0.0.1 medcodec.com
          127.0.0.1 www.medcodec.com
          127.0.0.1 absolutee.com
          127.0.0.1 www.absolutee.com
          127.0.0.1 pornohome.net
          127.0.0.1 www.pornohome.net
          127.0.0.1 tvcodec.com
          127.0.0.1 www.tvcodec.com
          127.0.0.1 moviecodec.net
          127.0.0.1 www.moviecodec.net
          127.0.0.1 silvercodec.com
          127.0.0.1 www.silvercodec.com
          127.0.0.1 goldcodec.com
          127.0.0.1 www.goldcodec.com
          127.0.0.1 clusif.free.fr
          127.0.0.1 outerinfo.com
          127.0.0.1 www.outerinfo.com
          127.0.0.1 elitemediagroup.net
          127.0.0.1 mmm.elitemediagroup.net
          127.0.0.1 www.elitemediagroup.net
          127.0.0.1 snipernet.biz
          127.0.0.1 www.snipernet.biz
          127.0.0.1 sxload.com
          127.0.0.1 www.sxload.com
          127.0.0.1 adgate.info
          127.0.0.1 www.adgate.info
          127.0.0.1 www.ishowbao.com
          127.0.0.1 ishowbao.com
          127.0.0.1 sd.ncast.cn
          127.0.0.1 www.sd.ncast.cn
          127.0.0.1 sh.ncast.cn
          127.0.0.1 www.sh.ncast.cn
          127.0.0.1 ncast.cn
          127.0.0.1 www.ncast.cn
          127.0.0.1 videosaccess.net
          127.0.0.1 www.videosaccess.net
          127.0.0.1 yourieprotect.com
          127.0.0.1 www.yourieprotect.com
          127.0.0.1 youriesafety.com
          127.0.0.1 www.youriesafety.com
          127.0.0.1 securetoolbars.com
          127.0.0.1 www.securetoolbars.com
          127.0.0.1 www.amaena.com
          127.0.0.1 go.winantivirus.com
          127.0.0.1 download.systemdoctor.com
          127.0.0.1 ulog.systemdoctor.com
          127.0.0.1 www.systemdoctor.com
          127.0.0.1 go.systemdoctor.com
          127.0.0.1 systemdoctor.com
          127.0.0.1 www.adsextend.net
          127.0.0.1 adsextend.net
          127.0.0.1 ad.mokead.com
          127.0.0.1 www.ad.mokead.com
          127.0.0.1 mokead.com
          127.0.0.1 www.mokead.com
          127.0.0.1 virusburst.com
          127.0.0.1 www.virusburst.com
          127.0.0.1 aviewersoft.com
          127.0.0.1 www.aviewersoft.com
          127.0.0.1 braincodec.com
          127.0.0.1 www.braincodec.com
          127.0.0.1 www.asianpornmag.com
          127.0.0.1 www.ebony-pornmag.com
          127.0.0.1 www.lesbianspornmag.com
          127.0.0.1 www.nylonpornmag.com
          127.0.0.1 www.shemalespornmag.com
          127.0.0.1 vaxobject.com
          127.0.0.1 www.vaxobject.com
          127.0.0.1 mediaobjectsource.com
          127.0.0.1 www.mediaobjectsource.com
          127.0.0.1 amediasoftware.com
          127.0.0.1 www.amediasoftware.com
          127.0.0.1 activexsoftwares.com
          127.0.0.1 www.activexsoftwares.com
          127.0.0.1 activexmediaobject.com
          127.0.0.1 www.activexmediaobject.com
          127.0.0.1 mediaactivex.com
          127.0.0.1 www.mediaactivex.com
          127.0.0.1 wzdq.cn
          127.0.0.1 www.wzdq.cn
          127.0.0.1 deja-rue.com
          127.0.0.1 www.deja-rue.com
          127.0.0.1 spywarebot.com
          127.0.0.1 www.spywarebot.com
          127.0.0.1 revolt-search.com
          127.0.0.1 www.revolt-search.com
          127.0.0.1 MUAFK.COM
          127.0.0.1 www.MUAFK.COM
          127.0.0.1 offers.ukiee.com
          127.0.0.1 www.ukiee.com
          127.0.0.1 ukiee.com
          127.0.0.1 lzio.com
          127.0.0.1 www.lzio.com
          127.0.0.1 lavl-vicky.com
          127.0.0.1 www.lavl-vicky.com
          127.0.0.1 checkssecurity.com
          127.0.0.1 www.checkssecurity.com
          127.0.0.1 cleansoftwares.com
          127.0.0.1 www.cleansoftwares.com
          127.0.0.1 atruesecurity.com
          127.0.0.1 www.atruesecurity.com
          127.0.0.1 atotalsafety.com
          127.0.0.1 www.atotalsafety.com
          127.0.0.1 allprotections.com
          127.0.0.1 www.allprotections.com
          127.0.0.1 multimediaobject.com
          127.0.0.1 www.multimediaobject.com
          127.0.0.1 iesafetywarning.com
          127.0.0.1 www.iesafetywarning.com
          127.0.0.1 uptodateprotect.com
          127.0.0.1 www.uptodateprotect.com
          127.0.0.1 alldnserrors.com
          127.0.0.1 www.alldnserrors.com
          127.0.0.1 allsecuritysite.com
          127.0.0.1 www.allsecuritysite.com
          127.0.0.1 curedc.info
          127.0.0.1 www.curedc.info
          127.0.0.1 catch-dc.info
          127.0.0.1 www.catch-dc.info
          127.0.0.1 nicemoviejokes.com
          127.0.0.1 www.nicemoviejokes.com
          127.0.0.1 goodmovielaugh.com
          127.0.0.1 www.goodmovielaugh.com
          127.0.0.1 good-movie-play.com
          127.0.0.1 nice-movie-jokes.com
          127.0.0.1 br.errorsafe.com
          127.0.0.1 br.winantivirus.com
          127.0.0.1 br.winfixer.com
          127.0.0.1 www.winfixer.com
          127.0.0.1 download.cdn.winsoftware.com
          127.0.0.1 download.winantispyware.com
          127.0.0.1 download.winfixer.com
          127.0.0.1 es.winantivirus.com
          127.0.0.1 fr.winantivirus.com
          127.0.0.1 fr.winfixer.com
          127.0.0.1 go.errorsafe.com
          127.0.0.1 go.winantispyware.com
          127.0.0.1 hk.winantivirus.com
          127.0.0.1 instlog.errorsafe.com
          127.0.0.1 instlog.winantivirus.com
          127.0.0.1 kb.errorsafe.com
          127.0.0.1 kb.winantivirus.com
          127.0.0.1 nl.errorsafe.com
          127.0.0.1 se.errorsafe.com
          127.0.0.1 secure.errorsafe.com
          127.0.0.1 secure.winantivirus.com
          127.0.0.1 support.winantivirus.com
          127.0.0.1 ulog.winantivirus.com
          127.0.0.1 utils.errorsafe.com
          127.0.0.1 utils.winantivirus.com
          127.0.0.1 winantispy.com
          127.0.0.1 www.winantispy.com
          127.0.0.1 secure.winantispy.com
          127.0.0.1 download.windrivecleaner.com
          127.0.0.1 www.windrivecleaner.com
          127.0.0.1 windrivecleaner.com
          127.0.0.1 errorprotector.com
          127.0.0.1 www.errorprotector.com
          127.0.0.1 www.win-anti-virus-pro.com
          127.0.0.1 win-anti-virus-pro.com
          127.0.0.1 www.win-virus-pro.com
          127.0.0.1 win-virus-pro.com
          127.0.0.1 www.winantiviruspro.com
          127.0.0.1 winantiviruspro.com
          127.0.0.1 malwarewiped.com
          127.0.0.1 www.malwarewiped.com
          127.0.0.1 zxlinks.com
          127.0.0.1 www.zxlinks.com
          127.0.0.1 wanfuchina.com
          127.0.0.1 www.wanfuchina.com
          127.0.0.1 generateskey.com
          127.0.0.1 www.generateskey.com
          127.0.0.1 accessvid.net
          127.0.0.1 www.accessvid.net
          127.0.0.1 mediaobjectsite.com
          127.0.0.1 www.mediaobjectsite.com
          127.0.0.1 activexsource.com
          127.0.0.1 www.activexsource.com
          127.0.0.1 mediaobjectguide.com
          127.0.0.1 www.mediaobjectguide.com
          127.0.0.1 tscodec.com
          127.0.0.1 www.tscodec.com
          127.0.0.1 vidaccess.net
          127.0.0.1 www.vidaccess.net
          127.0.0.1 vaxcodec.com
          127.0.0.1 www.vaxcodec.com
          127.0.0.1 alltruesoftware.com
          127.0.0.1 www.alltruesoftware.com
          127.0.0.1 siteentrances.com
          127.0.0.1 www.siteentrances.com
          127.0.0.1 vids-access.com
          127.0.0.1 www.vids-access.com
          127.0.0.1 sites-entrance.net
          127.0.0.1 www.sites-entrance.net
          127.0.0.1 sites-entrance.com
          127.0.0.1 www.sites-entrance.com
          127.0.0.1 playcodecs.com
          127.0.0.1 www.playcodecs.com
          127.0.0.1 sitesentrance.com
          127.0.0.1 www.sitesentrance.com
          127.0.0.1 playerscodec.com
          127.0.0.1 www.playerscodec.com
          127.0.0.1 site-entrance.net
          127.0.0.1 www.site-entrance.net
          127.0.0.1 web.links4all.biz
          127.0.0.1 otherchance.com
          127.0.0.1 www.otherchance.com
          127.0.0.1 secureserver3.com
          127.0.0.1 www.secureserver3.com
          127.0.0.1 simpaticissimo.com
          127.0.0.1 www.simpaticissimo.com
          127.0.0.1 reserved-company.info
          127.0.0.1 www.reserved-company.info
          127.0.0.1 vcodec2007.com
          127.0.0.1 www.vcodec2007.com
          127.0.0.1 spyboot.com
          127.0.0.1 adultan.com
          127.0.0.1 www.adultan.com
          127.0.0.1 adultfilmsite.com
          127.0.0.1 www.adultfilmsite.com
          127.0.0.1 adultmovieplus.com
          127.0.0.1 www.adultmovieplus.com
          127.0.0.1 adultsper.com
          127.0.0.1 www.adultsper.com
          127.0.0.1 clubxxxvideo.com
          127.0.0.1 www.clubxxxvideo.com
          127.0.0.1 cutadult.com
          127.0.0.1 www.cutadult.com
          127.0.0.1 galleryclick.net
          127.0.0.1 www.galleryclick.net
          127.0.0.1 gallerypictures.net
          127.0.0.1 www.gallerypictures.net
          127.0.0.1 greatadultvideo.com
          127.0.0.1 www.greatadultvideo.com
          127.0.0.1 hardcorevideosite.com
          127.0.0.1 www.hardcorevideosite.com
          127.0.0.1 loweradult.com
          127.0.0.1 www.loweradult.com
          127.0.0.1 mega-adult.com
          127.0.0.1 www.mega-adult.com
          127.0.0.1 siteticket.net
          127.0.0.1 www.siteticket.net
          127.0.0.1 sureadult.com
          127.0.0.1 www.sureadult.com
          127.0.0.1 xxxallvideo.com
          127.0.0.1 www.xxxallvideo.com
          127.0.0.1 xxxmovietour.com
          127.0.0.1 www.xxxmovietour.com
          127.0.0.1 xxxteenfilm.com
          127.0.0.1 www.xxxteenfilm.com
          127.0.0.1 xxxzonevideo.com
          127.0.0.1 www.xxxzonevideo.com
          127.0.0.1 superadultfriend.com
          127.0.0.1 www.superadultfriend.com
          127.0.0.1 superporncity.com
          127.0.0.1 www.superporncity.com
          127.0.0.1 theadulteye.com
          127.0.0.1 www.theadulteye.com
          127.0.0.1 adultzoneworld.com
          127.0.0.1 www.adultzoneworld.com
          127.0.0.1 pornissex.com
          127.0.0.1 www.pornissex.com
          127.0.0.1 pornxxxfilm.com
          127.0.0.1 www.pornxxxfilm.com
          127.0.0.1 worldbestadult.com
          127.0.0.1 www.worldbestadult.com
          127.0.0.1 securityplugins.com
          127.0.0.1 www.securityplugins.com
          127.0.0.1 virusrescue.com
          127.0.0.1 www.virusrescue.com
          127.0.0.1 adprotect.com
          127.0.0.1 www.adprotect.com
          127.0.0.1 antivirusgolden.com
          127.0.0.1 www.antivirusgolden.com
          127.0.0.1 spysoldier.com
          127.0.0.1 www.spysoldier.com
          127.0.0.1 onlinesecuritynet.com
          127.0.0.1 www.onlinesecuritynet.com
          127.0.0.1 spywareknight.com
          127.0.0.1 www.spywareknight.com
          127.0.0.1 moviecodecs.net
          127.0.0.1 www.moviecodecs.net
          127.0.0.1 esafetylist.com
          127.0.0.1 www.esafetylist.com
          127.0.0.1 sverner.info
          127.0.0.1 www.sverner.info
          127.0.0.1 fastssearch.com
          127.0.0.1 www.fastssearch.com
          127.0.0.1 drivecleanr.com
          127.0.0.1 www.drivecleanr.com
          127.0.0.1 access-dvd.com
          127.0.0.1 www.access-dvd.com
          127.0.0.1 spybot-2007.com
          127.0.0.1 www.spybot-2007.com
          127.0.0.1 get-spybot.com
          127.0.0.1 www.get-spybot.com
          127.0.0.1 curepcsolutions.com
          127.0.0.1 www.curepcsolutions.com
          127.0.0.1 pcflashsoft.com
          127.0.0.1 www.pcflashsoft.com
          127.0.0.1 spylog.com
          127.0.0.1 www.spylog.com
          127.0.0.1 errorkiller.com
          127.0.0.1 www.errorkiller.com
          127.0.0.1 Some-Standards.com
          127.0.0.1 www.Some-Standards.com
          127.0.0.1 getpatytoday.info
          127.0.0.1 www.getpatytoday.info
          127.0.0.1 antiddos.us
          127.0.0.1 www.antiddos.us
          127.0.0.1 pussyharem.com
          127.0.0.1 www.pussyharem.com
          127.0.0.1 axmediasoftware.com
          127.0.0.1 www.axmediasoftware.com
          127.0.0.1 videoaxsoftware.com
          127.0.0.1 www.videoaxsoftware.com
          127.0.0.1 movies-codecs.com
          127.0.0.1 www.movies-codecs.com
          127.0.0.1 adarmor.com
          127.0.0.1 www.adarmor.com
          127.0.0.1 fixerantispy.com
          127.0.0.1 www.fixerantispy.com
          127.0.0.1 spyanalyst.com
          127.0.0.1 www.spyanalyst.com
          127.0.0.1 spyofficer.com
          127.0.0.1 www.spyofficer.com
          127.0.0.1 tvscodec.com
          127.0.0.1 www.tvscodec.com
          127.0.0.1 blackblues00.com
          127.0.0.1 www.blackblues00.com
          127.0.0.1 www.net-nucleus.com
          127.0.0.1 www.mirarsearch.com
          127.0.0.1 spywarewizard.net
          127.0.0.1 www.spywarewizard.net
          127.0.0.1 dcurtis.com
          127.0.0.1 www.dcurtis.com
          127.0.0.1 contra-virus.com
          127.0.0.1 www.contra-virus.com
          127.0.0.1 mrantispy.com
          127.0.0.1 www.mrantispy.com
          127.0.0.1 malwarealarm.com
          127.0.0.1 www.malwarealarm.com
          127.0.0.1 myspyprotector.com
          127.0.0.1 www.myspyprotector.com
          127.0.0.1 spydefence.com
          127.0.0.1 www.spydefence.com
          127.0.0.1 onporn.info
          127.0.0.1 www.onporn.info
          127.0.0.1 keygenguru.com
          127.0.0.1 www.keygenguru.com
          127.0.0.1 whitescat.com
          127.0.0.1 www.whitescat.com
          127.0.0.1 123topsearch.com
          127.0.0.1 www.123topsearch.com
          127.0.0.1 itknown.net
          127.0.0.1 www.itknown.net
          127.0.0.1 www.downloadmax.net
          127.0.0.1 coolservecorp.net
          127.0.0.1 www.coolservecorp.net
          127.0.0.1 r16254.coolservecorp.net
          127.0.0.1 panet.org
          127.0.0.1 www.panet.org
          127.0.0.1 cc.panet.org
          127.0.0.1 ss.panet.org
          127.0.0.1 fhg.panet.org
          127.0.0.1 google.panet.org
          127.0.0.1 yahoo.panet.org
          127.0.0.1 backup.mabou.org
          127.0.0.1 nav.mabou.org
          127.0.0.1 dnl.mabou.org
          127.0.0.1 www.searchmeta.net
          127.0.0.1 vipru.com
          127.0.0.1 www.vipru.com
          127.0.0.1 xibu315.com
          127.0.0.1 net.xibu315.com
          127.0.0.1 www.xibu315.com
          127.0.0.1 cache.ysbweb.com
          127.0.0.1 www.vapochille.com
          127.0.0.1 rms.vapochille.com
          127.0.0.1 vapochille.com
          127.0.0.1 spywarezapper.com
          127.0.0.1 www.spywarezapper.com
          127.0.0.1 mediaaxobject.com
          127.0.0.1 www.mediaaxobject.com
          127.0.0.1 axobjectsource.com
          127.0.0.1 www.axobjectsource.com
          127.0.0.1 videoaxobject.com
          127.0.0.1 www.videoaxobject.com
          127.0.0.1 accesskeygenerator.com
          127.0.0.1 www.accesskeygenerator.com
          127.0.0.1 numb-soft.com
          127.0.0.1 www.numb-soft.com
          127.0.0.1 internationalmarketingfirm.com
          127.0.0.1 www.internationalmarketingfirm.com
          127.0.0.1 7939.com
          127.0.0.1 www.7939.com
          127.0.0.1 hao123.com
          127.0.0.1 www.hao123.com
          127.0.0.1 4199.com
          127.0.0.1 www.4199.com
          127.0.0.1 9505.com
          127.0.0.1 www.9505.com
          127.0.0.1 7322.com
          127.0.0.1 www.7322.com
          127.0.0.1 huoche.com.cn
          127.0.0.1 www.huoche.com.cn
          127.0.0.1 free-porn-movies.info
          127.0.0.1 www.free-porn-movies.info
          127.0.0.1 player-codec.com
          127.0.0.1 www.player-codec.com
          127.0.0.1 activexvideo.com
          127.0.0.1 www.activexvideo.com
          127.0.0.1 activexemedia.com
          127.0.0.1 www.activexemedia.com
          127.0.0.1 axemediasoftware.com
          127.0.0.1 www.axemediasoftware.com
          127.0.0.1 activexmediasource.com
          127.0.0.1 www.activexmediasource.com
          127.0.0.1 videoactivexsoftware.com
          127.0.0.1 www.videoactivexsoftware.com
          127.0.0.1 ifeelyou.info
          127.0.0.1 notify.ifeelyou.info
          127.0.0.1 www.ifeelyou.info
          127.0.0.1 iconnectyou.biz
          127.0.0.1 www.iconnectyou.biz
          127.0.0.1 settings.iconnectyou.biz
          127.0.0.1 imergeyou.com
          127.0.0.1 www.imergeyou.com
          127.0.0.1 settings.imergeyou.com
          127.0.0.1 myexes.hk
          127.0.0.1 www.myexes.hk
          127.0.0.1 updatemysettings.com
          127.0.0.1 www.updatemysettings.com
          127.0.0.1 settings.updatemysettings.com
          127.0.0.1 controlmeh.com
          127.0.0.1 www.controlmeh.com
          127.0.0.1 settings.controlmeh.com
          127.0.0.1 gfxgraphics.net
          127.0.0.1 www.gfxgraphics.net
          127.0.0.1 settings.gfxgraphics.net
          127.0.0.1 ipointyou.hk
          127.0.0.1 www.ipointyou.hk
          127.0.0.1 axobjectpage.com
          127.0.0.1 www.axobjectpage.com
          127.0.0.1 axsoftwaretool.com
          127.0.0.1 www.axsoftwaretool.com
          127.0.0.1 sitekeygenerator.com
          127.0.0.1 www.sitekeygenerator.com
          127.0.0.1 mediaactivexobject.com
          127.0.0.1 www.mediaactivexobject.com
          127.0.0.1 videoactivexsoft.com
          127.0.0.1 www.videoactivexsoft.com
          127.0.0.1 videoobjectmedia.com
          127.0.0.1 www.videoobjectmedia.com
          127.0.0.1 traffstats.biz
          127.0.0.1 www.traffstats.biz
          127.0.0.1 support.365soft.info
          127.0.0.1 www.support.365soft.info
          127.0.0.1 best-targeted-traffic.com
          127.0.0.1 www.best-targeted-traffic.com
          127.0.0.1 createaccesskey.com
          127.0.0.1 www.createaccesskey.com
          127.0.0.1 sexxxpassport.com
          127.0.0.1 www.sexxxpassport.com
          127.0.0.1 mmmike.com
          127.0.0.1 www.mmmike.com
          127.0.0.1 worldwideadvertisingservices.info
          127.0.0.1 www.worldwideadvertisingservices.info
          127.0.0.1 www.nownames.org
          127.0.0.1 nownames.org
          127.0.0.1 dedmazay.3322.org
          127.0.0.1 dr38.mcboo.com
          127.0.0.1 bin.errorprotector.com
          127.0.0.1 cdn.drivecleaner.com
          127.0.0.1 cdn.errorsafe.com
          127.0.0.1 cdn.winsoftware.com
          127.0.0.1 download.cdn.drivecleaner.com
          127.0.0.1 download.cdn.errorsafe.com
          127.0.0.1 drivecleaner.com
          127.0.0.1 dynamique.drivecleaner.com
          127.0.0.1 go.drivecleaner.com
          127.0.0.1 jsp.drivecleaner.com
          127.0.0.1 secure.drivecleaner.com
          127.0.0.1 secure.winantispam.com
          127.0.0.1 www.drivecleaner.com
          127.0.0.1 www.winantispam.com
          127.0.0.1 www.windrivesafe.com
          127.0.0.1 181.365soft.info
          127.0.0.1 www.181.365soft.info
          127.0.0.1 24.365soft.info
          127.0.0.1 www.24.365soft.info
          127.0.0.1 c5.www4free.info
          127.0.0.1 www.c5.www4free.info
          127.0.0.1 bookedspace.com
          127.0.0.1 www.bookedspace.com
          127.0.0.1 searchclickads.net
          127.0.0.1 www.searchclickads.net
          127.0.0.1 toolster.de
          127.0.0.1 www.toolster.de
          127.0.0.1 checkin100.com
          127.0.0.1 www.checkin100.com
          127.0.0.1 dist.checkin100.com
          127.0.0.1 myadultexplorer.com
          127.0.0.1 www.myadultexplorer.com
          127.0.0.1 client.myadultexplorer.com
          127.0.0.1 sense-super.com
          127.0.0.1 www.sense-super.com
          127.0.0.1 awbeta.net-nucleus.com
          127.0.0.1 mycpmads.com
          127.0.0.1 www.mycpmads.com
          127.0.0.1 p2psoft.biz
          127.0.0.1 www.p2psoft.biz
          127.0.0.1 wonder-context.com
          127.0.0.1 new.wonder-context.com
          127.0.0.1 www.wonder-context.com
          127.0.0.1 www.matcash.com
          127.0.0.1 media.matcash.com
          127.0.0.1 matcash.com
          127.0.0.1 www.laughnetwork.com
          127.0.0.1 laughnetwork.com
          127.0.0.1 www.cooldeskalert.com
          127.0.0.1 cooldeskalert.com
          127.0.0.1 www.awesomehomepage.com
          127.0.0.1 awesomehomepage.com
          127.0.0.1 www.softomate.com
          127.0.0.1 softomate.com
          127.0.0.1 magicsearch.ws
          127.0.0.1 www.magicsearch.ws
          127.0.0.1 antivermins.com
          127.0.0.1 www.antivermins.com
          127.0.0.1 awarninglist.com
          127.0.0.1 www.awarninglist.com
          127.0.0.1 macrovirus.com
          127.0.0.1 www.macrovirus.com
          127.0.0.1 www.iframebiz.com
          127.0.0.1 iframebiz.com
          127.0.0.1 search.keyword.exeupdate.com
          127.0.0.1 client.exeupdate.com
          127.0.0.1 www.exeupdate.com
          127.0.0.1 download.searchtabs.net
          127.0.0.1 install.searchtab.net
          127.0.0.1 www.searchtab.net
          127.0.0.1 videoobjectax.com
          127.0.0.1 www.videoobjectax.com
          127.0.0.1 videoaccessactivex.com
          127.0.0.1 www.videoaccessactivex.com
          127.0.0.1 site-ticket.net
          127.0.0.1 www.site-ticket.net
          127.0.0.1 floorsovertexas.com
          127.0.0.1 www.floorsovertexas.com
          127.0.0.1 cameouk.co.uk
          127.0.0.1 www.cameouk.co.uk
          127.0.0.1 graceinthedesert.org
          127.0.0.1 www.graceinthedesert.org
          127.0.0.1 northernsoulclub.com
          127.0.0.1 www.northernsoulclub.com
          127.0.0.1 oxfordclockrepairs.co.uk
          127.0.0.1 www.oxfordclockrepairs.co.uk
          127.0.0.1 starcleaningservice.com.au
          127.0.0.1 www.starcleaningservice.com.au
          127.0.0.1 hiboss.com
          127.0.0.1 www.hiboss.com
          127.0.0.1 releaseforlife.com
          127.0.0.1 www.releaseforlife.com
          127.0.0.1 relevantknowledge.com
          127.0.0.1 www.relevantknowledge.com
          127.0.0.1 bpfq02.com
          127.0.0.1 www.bpfq02.com
          127.0.0.1 axmediaproject.com
          127.0.0.1 www.axmediaproject.com
          127.0.0.1 activexmediapro.com
          127.0.0.1 www.activexmediapro.com
          127.0.0.1 activexvideotool.com
          127.0.0.1 www.activexvideotool.com
          127.0.0.1 aximageobject.com
          127.0.0.1 www.aximageobject.com
          127.0.0.1 tv-codecs.com
          127.0.0.1 www.tv-codecs.com
          127.0.0.1 sitesticket.net
          127.0.0.1 www.sitesticket.net
          127.0.0.1 multitrader.info
          127.0.0.1 www.multitrader.info
          127.0.0.1 googlus.com
          127.0.0.1 www.googlus.com
          127.0.0.1 p2p-heute.de
          127.0.0.1 www.p2p-heute.de
          127.0.0.1 antispywarebot.com
          127.0.0.1 www.antispywarebot.com
          127.0.0.1 download.antispywarebot.com
          127.0.0.1 www.download.antispywarebot.com
          127.0.0.1 spybot.reviewsit.net
          127.0.0.1 www.spybot.reviewsit.net
          127.0.0.1 reviewsit.net
          127.0.0.1 www.reviewsit.net
          127.0.0.1 antispywaredownloads.com
          127.0.0.1 www.antispywaredownloads.com
          127.0.0.1 www-spyboot.com
          127.0.0.1 www.www-spyboot.com
          127.0.0.1 computerrecover.com
          127.0.0.1 www.computerrecover.com
          127.0.0.1 kr62.com
          127.0.0.1 www.kr62.com
          127.0.0.1 marketing-know-how.com
          127.0.0.1 www.marketing-know-how.com
          127.0.0.1 titanmotors.com
          127.0.0.1 www.titanmotors.com
          127.0.0.1 alliesecurity.com
          127.0.0.1 www.alliesecurity.com
          127.0.0.1 allsecuritynotes.com
          127.0.0.1 www.allsecuritynotes.com
          127.0.0.1 aprotectedpage.com
          127.0.0.1 www.aprotectedpage.com
          127.0.0.1 asafetynotice.com
          127.0.0.1 www.asafetynotice.com
          127.0.0.1 asafetypage.com
          127.0.0.1 www.asafetypage.com
          127.0.0.1 asecureboard.com
          127.0.0.1 www.asecureboard.com
          127.0.0.1 asecurityissue.com
          127.0.0.1 www.asecurityissue.com
          127.0.0.1 asecuritynotice.com
          127.0.0.1 www.asecuritynotice.com
          127.0.0.1 asecuritypaper.com
          127.0.0.1 www.asecuritypaper.com
          127.0.0.1 asecuritystuff.com
          127.0.0.1 www.asecuritystuff.com
          127.0.0.1 assureprotection.com
          127.0.0.1 www.assureprotection.com
          127.0.0.1 atrueprotection.com
          127.0.0.1 www.atrueprotection.com
          127.0.0.1 eprotectionline.com
          127.0.0.1 www.eprotectionline.com
          127.0.0.1 esecuritynote.com
          127.0.0.1 www.esecuritynote.com
          127.0.0.1 ieprotectpage.com
          127.0.0.1 www.ieprotectpage.com
          127.0.0.1 iesafetypage.com
          127.0.0.1 www.iesafetypage.com
          127.0.0.1 iesecuritytool.com
          127.0.0.1 www.iesecuritytool.com
          127.0.0.1 protectionssoft.com
          127.0.0.1 www.protectionssoft.com
          127.0.0.1 protectionwarn.com
          127.0.0.1 www.protectionwarn.com
          127.0.0.1 qnavigate.com
          127.0.0.1 www.qnavigate.com
          127.0.0.1 safetyhall.com
          127.0.0.1 www.safetyhall.com
          127.0.0.1 safetypropage.com
          127.0.0.1 www.safetypropage.com
          127.0.0.1 thesafetytool.com
          127.0.0.1 www.thesafetytool.com
          127.0.0.1 topsecuritypage.com
          127.0.0.1 www.topsecuritypage.com
          127.0.0.1 youriesecure.com
          127.0.0.1 www.youriesecure.com
          127.0.0.1 dl2.spyheal.com
          127.0.0.1 dl3.spyheal.com
          127.0.0.1 www.xp-vista.com
          127.0.0.1 xp-vista.com
          127.0.0.1 dl8.spyheal.com
          127.0.0.1 sitestickets.net
          127.0.0.1 www.sitestickets.net
          127.0.0.1 madsexxx.com
          127.0.0.1 www.madsexxx.com
          127.0.0.1 accessclips.com
          127.0.0.1 www.accessclips.com
          127.0.0.1 www.warningiepage.com
          127.0.0.1 warningiepage.com
          127.0.0.1 videos-access.com
          127.0.0.1 www.videos-access.com
          127.0.0.1 axvideoproject.com
          127.0.0.1 www.axvideoproject.com
          127.0.0.1 videoaxproject.com
          127.0.0.1 www.videoaxproject.com
          127.0.0.1 videoactivexmode.com
          127.0.0.1 www.videoactivexmode.com
          127.0.0.1 player-codec.net
          127.0.0.1 www.player-codec.net
          127.0.0.1 siteentrance.net
          127.0.0.1 www.siteentrance.net
          127.0.0.1 www.pestcapture.com
          127.0.0.1 pestcapture.com
          127.0.0.1 andromedical.com
          127.0.0.1 www.andromedical.com
          127.0.0.1 video-clips.in
          127.0.0.1 www.video-clips.in
          127.0.0.1 activexmediasoftware.com
          127.0.0.1 www.activexmediasoftware.com
          127.0.0.1 spybot-scan.com
          127.0.0.1 www.spybot-scan.com
          127.0.0.1 www.spyboot.com
          127.0.0.1 codecdvd.net
          127.0.0.1 www.codecdvd.net
          127.0.0.1 lebenstest.de
          127.0.0.1 www.lebenstest.de
          127.0.0.1 kalmarte.zapto.org
          127.0.0.1 nmextensions.com
          127.0.0.1 www.nmextensions.com
          127.0.0.1 asecurebar.com
          127.0.0.1 www.asecurebar.com
          127.0.0.1 thesafebar.com
          127.0.0.1 www.thesafebar.com
          127.0.0.1 videoaxdata.com
          127.0.0.1 www.videoaxdata.com
          127.0.0.1 mediaaxproject.com
          127.0.0.1 www.mediaaxproject.com
          127.0.0.1 videoaxsolution.com
          127.0.0.1 www.videoaxsolution.com
          127.0.0.1 dvdsmovies.net
          127.0.0.1 www.dvdsmovies.net
          127.0.0.1 dvdsvideos.net
          127.0.0.1 www.dvdsvideos.net
          127.0.0.1 moviesdvds.net
          127.0.0.1 www.moviesdvds.net
          127.0.0.1 xbxxrvnyes.com
          127.0.0.1 www.xbxxrvnyes.com
          127.0.0.1 spywarebot-t.com
          127.0.0.1 www.spywarebot-t.com
          127.0.0.1 kzdh.com
          127.0.0.1 www.kzdh.com
          127.0.0.1 unionsms.net
          127.0.0.1 www.unionsms.net
          127.0.0.1 file.unionsms.net
          127.0.0.1 82211.net
          127.0.0.1 wwww.2211.net
          127.0.0.1 2.82211.net
          127.0.0.1 xsec.org
          127.0.0.1 www.xsec.org
          127.0.0.1 securetoolbar.com
          127.0.0.1 www.securetoolbar.com
          127.0.0.1 sdbot.n3.net
          127.0.0.1 k8l.info
          127.0.0.1 ads.k8l.info
          127.0.0.1 emailicon.org
          127.0.0.1 www.emailicon.org
          127.0.0.1 find-52.com
          127.0.0.1 www.find-52.com
          127.0.0.1 wintvguide.com
          127.0.0.1 www.wintvguide.com
          127.0.0.1 adtrak.net
          127.0.0.1 www.adtrak.net
          127.0.0.1 top-banners.com
          127.0.0.1 www.top-banners.com
          127.0.0.1 jumptothat.com
          127.0.0.1 www.jumptothat.com
          127.0.0.1 searchingbooth.com
          127.0.0.1 ads.searchingbooth.com
          127.0.0.1 www.searchingbooth.com
          127.0.0.1 uzoogle.com
          127.0.0.1 games.uzoogle.com
          127.0.0.1 www.uzoogle.com
          127.0.0.1 marketingsector.com
          127.0.0.1 ads.marketingsector.com
          127.0.0.1 fun-photo.com
          127.0.0.1 www.fun-photo.com
          127.0.0.1 calendaralerts.net
          127.0.0.1 www.calendaralerts.net
          127.0.0.1 cydoor.com
          127.0.0.1 www.cydoor.com
          127.0.0.1 headlinesandnews.com
          127.0.0.1 www.headlinesandnews.com
          127.0.0.1 servedby.headlinesandnews.com
          127.0.0.1 oridian.com
          127.0.0.1 www.oridian.com
          127.0.0.1 standardinternet.com
          127.0.0.1 www.standardinternet.com
          127.0.0.1 z-quest.com
          127.0.0.1 ads.z-quest.com
          127.0.0.1 www.z-quest.com
          127.0.0.1 finalfantasyactionfigures.com
          127.0.0.1 www.finalfantasyactionfigures.com
          127.0.0.1 iconfessonline.com
          127.0.0.1 www.iconfessonline.com
          127.0.0.1 touchnsearch.com
          127.0.0.1 www.touchnsearch.com
          127.0.0.1 computerpcgames.net
          127.0.0.1 www.computerpcgames.net
          127.0.0.1 fairsearcher.com
          127.0.0.1 www.fairsearcher.com
          127.0.0.1 greencardspouse.com
          127.0.0.1 www.greencardspouse.com
          127.0.0.1 deskwizz.com
          127.0.0.1 apps.deskwizz.com
          127.0.0.1 www.deskwizz.com
          127.0.0.1 cuisinartoven.com
          127.0.0.1 www.cuisinartoven.com
          127.0.0.1 webbuying.net
          127.0.0.1 u.webbuying.net
          127.0.0.1 www.webbuying.net
          127.0.0.1 paypopup.com
          127.0.0.1 www.paypopup.com
          127.0.0.1 www224.paypopup.com
          127.0.0.1 multi-pops.com
          127.0.0.1 www.multi-pops.com
          127.0.0.1 service.multi-pops.com
          127.0.0.1 i-nt-e-r-n-e-t.com
          127.0.0.1 www.i-nt-e-r-n-e-t.com
          127.0.0.1 searchfromyourbrowser.net
          127.0.0.1 www.searchfromyourbrowser.net
          127.0.0.1 quick.searchfromyourbrowser.net
          127.0.0.1 ertikadeswiokinganfujas.com
          127.0.0.1 www.ertikadeswiokinganfujas.com
          127.0.0.1 juyatinjesaza.com
          127.0.0.1 www.juyatinjesaza.com
          127.0.0.1 hadesunharuikeya.com
          127.0.0.1 www3.hadesunharuikeya.com
          127.0.0.1 dr47.mcboo.com
          127.0.0.1 032439.com
          127.0.0.1 www.032439.com
          127.0.0.1 80gw6ry3i3x3qbrkwhxhw.032439.com
          127.0.0.1 command.adservs.com
          127.0.0.1 report.dropspam.com
          127.0.0.1 dropspam.com
          127.0.0.1 www.dropspam.com
          127.0.0.1 dl1.antivermins.com
          127.0.0.1 dl1.spydawn.com
          127.0.0.1 souljah.com
          127.0.0.1 www.souljah.com
          127.0.0.1 geil-de.info
          127.0.0.1 www.geil-de.info
          127.0.0.1 www.pochta.ru
          127.0.0.1 pochta.ru
          127.0.0.1 www.arquivojpgs.smtp.ru
          127.0.0.1 arquivojpgs.smtp.ru
          127.0.0.1 www.smtp.ru
          127.0.0.1 www.x-ratedclips.com
          127.0.0.1 x-ratedclips.com
          127.0.0.1 www.mediaaxsolution.com
          127.0.0.1 mediaaxsolution.com
          127.0.0.1 www.activexmediasite.com
          127.0.0.1 activexmediasite.com
          127.0.0.1 engineplay.com
          127.0.0.1 www.engineplay.com
          127.0.0.1 ofuxico.uol.com.br
          127.0.0.1 hobbypesca.com.br
          127.0.0.1 www.hobbypesca.com.br
          127.0.0.1 www.abyssmedia.com
          127.0.0.1 abyssmedia.com
          127.0.0.1 zjkjw.gov.cn
          127.0.0.1 www.zjkjw.gov.cn
          127.0.0.1 lfxmsc.gov.cn
          127.0.0.1 www.lfxmsc.gov.cn
          127.0.0.1 ultimateprotect.com
          127.0.0.1 www.get-access.host.sk
          127.0.0.1 www.burnsrecyclinginc.com
          127.0.0.1 burnsrecyclinginc.com
          127.0.0.1 use-play.com
          127.0.0.1 www.use-play.com
          127.0.0.1 plus-play.com
          127.0.0.1 www.plus-play.com
          127.0.0.1 review-play.com
          127.0.0.1 www.review-play.com
          127.0.0.1 avideoaxaccess.com
          127.0.0.1 www.avideoaxaccess.com
          127.0.0.1 cartoes.uol.com.br
          127.0.0.1 fhgate.com
          127.0.0.1 www.fhgate.com
          127.0.0.1 aflgate.com
          127.0.0.1 www.aflgate.com
          127.0.0.1 bqgate.com
          127.0.0.1 www.bqgate.com
          127.0.0.1 xvgate.com
          127.0.0.1 www.xvgate.com
          127.0.0.1 bnmgate.com
          127.0.0.1 www.bnmgate.com
          127.0.0.1 cdegate.com
          127.0.0.1 www.cdegate.com
          127.0.0.1 hwgate.com
          127.0.0.1 www.hwgate.com
          127.0.0.1 worldsecurityonline.biz
          127.0.0.1 www.worldsecurityonline.biz
          127.0.0.1 karachun.biz
          127.0.0.1 www.karachun.biz
          127.0.0.1 anti-vermins.com
          127.0.0.1 www.anti-vermins.com
          127.0.0.1 antispyware.com
          127.0.0.1 www.antispyware.com
          127.0.0.1 2squared.com
          127.0.0.1 www.2squared.com
          127.0.0.1 spydawn.com
          127.0.0.1 www.spydawn.com
          127.0.0.1 videosoftwareax.com
          127.0.0.1 www.videosoftwareax.com
          127.0.0.1 imagemediaax.com
          127.0.0.1 www.imagemediaax.com
          127.0.0.1 freeimageheaven.com
          127.0.0.1 www.freeimageheaven.com
          127.0.0.1 itfindout.org
          127.0.0.1 www.itfindout.org
          127.0.0.1 findanyshow.org
          127.0.0.1 www.findanyshow.org
          127.0.0.1 findwapsite.org
          127.0.0.1 www.findwapsite.org
          127.0.0.1 nowsearchonline.org
          127.0.0.1 www.nowsearchonline.org
          127.0.0.1 ebestfind.org
          127.0.0.1 www.ebestfind.org
          127.0.0.1 canidetect.org
          127.0.0.1 www.canidetect.org
          127.0.0.1 starsdoor.com
          127.0.0.1 www.starsdoor.com
          127.0.0.1 imageactivexsolution.com
          127.0.0.1 www.imageactivexsolution.com
          127.0.0.1 hotwinupdates.com
          127.0.0.1 www.hotwinupdates.com
          127.0.0.1 antispywarebox.com
          127.0.0.1 www.antispywarebox.com
          127.0.0.1 protectmypc.net
          127.0.0.1 www.protectmypc.net
          127.0.0.1 mediacodec2007.com
          127.0.0.1 www.mediacodec2007.com
          127.0.0.1 malwarebot.com
          127.0.0.1 www.malwarebot.com
          127.0.0.1 www.nerdwareinc.com
          127.0.0.1 nerdwareinc.com
          127.0.0.1 exportplay.com
          127.0.0.1 www.exportplay.com
          127.0.0.1 avpcheckupdate.com
          127.0.0.1 www.avpcheckupdate.com
          127.0.0.1 net-integration.net
          127.0.0.1 www.net-integration.net
          127.0.0.1 net-integration.us
          127.0.0.1 www.net-integration.us
          127.0.0.1 zdrqmpad.com
          127.0.0.1 www.zdrqmpad.com
          127.0.0.1 sandracounter.com
          127.0.0.1 www.sandracounter.com
          127.0.0.1 mybestsearch2007.com
          127.0.0.1 www.mybestsearch2007.com
          127.0.0.1 givecnt.info
          127.0.0.1 www.givecnt.info
          127.0.0.1 khcbaym.com
          127.0.0.1 www.khcbaym.com
          127.0.0.1 allvideoactivex.com
          127.0.0.1 www.allvideoactivex.com
          127.0.0.1 gaystogay.com
          127.0.0.1 www.gaystogay.com
          127.0.0.1 ayb.netbios-wait.com
          127.0.0.1 www.netbios-wait.com
          127.0.0.1 netbios-wait.com
          127.0.0.1 vskeylogger.nazwa.pl
          127.0.0.1 www.vskeylogger.nazwa.pl
          127.0.0.1 farmacept32.phpnet.us
          127.0.0.1 playbrowse.com
          127.0.0.1 www.playbrowse.com
          127.0.0.1 videoactivexnote.com
          127.0.0.1 www.videoactivexnote.com
          127.0.0.1 digitalcoders.net
          127.0.0.1 www.digitalcoders.net
          127.0.0.1 cia-trjn.myvnc.com
          127.0.0.1 www.cia-trjn.myvnc.com
          127.0.0.1 misofthelp.com
          127.0.0.1 www.misofthelp.com
          127.0.0.1 swz2006.to.8866.org
          127.0.0.1 www.swz2006.to.8866.org
          127.0.0.1 myspywarebot.com
          127.0.0.1 www.myspywarebot.com
          127.0.0.1 spywarebott.com
          127.0.0.1 www.spywarebott.com
          127.0.0.1 giangho.biz
          127.0.0.1 www.giangho.biz
          127.0.0.1 owntibia.com
          127.0.0.1 www.owntibia.com
          127.0.0.1 activexaccessobject.com
          127.0.0.1 www.activexaccessobject.com
          127.0.0.1 imageaxaccesssoft.com
          127.0.0.1 www.imageaxaccesssoft.com
          127.0.0.1 play-ticket.com
          127.0.0.1 www.play-ticket.com
          127.0.0.1 de.drivecleaner.com
          127.0.0.1 smart-security.biz
          127.0.0.1 mezzicodec.net
          127.0.0.1 l.mezzicodec.net
          127.0.0.1 www.mezzicodec.net
          127.0.0.1 attrezzi.biz
          127.0.0.1 xp.attrezzi.biz
          127.0.0.1 www.attrezzi.biz
          127.0.0.1 sisdotnet.com
          127.0.0.1 zero.sisdotnet.com
          127.0.0.1 www.sisdotnet.com
          127.0.0.1 j10.wrs.mcboo.com
          127.0.0.1 wrs.mcboo.com
          127.0.0.1 bestmanage.org
          127.0.0.1 a.bestmanage.org
          127.0.0.1 www.bestmanage.org
          127.0.0.1 methasearch.info
          127.0.0.1 www.methasearch.info
          127.0.0.1 other-baccarat.info
          127.0.0.1 www.other-baccarat.info
          127.0.0.1 rfthud.com
          127.0.0.1 www.rfthud.com
          127.0.0.1 exflow.org
          127.0.0.1 www.exflow.org
          127.0.0.1 baccarat-other.info
          127.0.0.1 www.baccarat-other.info
          127.0.0.1 othergold.info
          127.0.0.1 www.othergold.info
          127.0.0.1 klikadvertising.com
          127.0.0.1 klik.klikadvertising.com
          127.0.0.1 www.klikadvertising.com
          127.0.0.1 abnetsoft.info
          127.0.0.1 www.abnetsoft.info
          127.0.0.1 directporta.info
          127.0.0.1 www.directporta.info
          127.0.0.1 1shoppingcart.com
          127.0.0.1 www.1shoppingcart.com
          127.0.0.1 mygeek.com
          127.0.0.1 www.mygeek.com
          127.0.0.1 xmlsearch.mygeek.com
          127.0.0.1 crapsgold.info
          127.0.0.1 www.crapsgold.info
          127.0.0.1 gold-craps.info
          127.0.0.1 www.gold-craps.info
          127.0.0.1 goldbaccarat.info
          127.0.0.1 www.gocodec.com
          127.0.0.1 gocodec.com
          127.0.0.1 www.engine-ticket.com
          127.0.0.1 engine-ticket.com
          127.0.0.1 www.party-ticket.com
          127.0.0.1 party-ticket.com
          127.0.0.1 www.mediaprojectaccess.com
          127.0.0.1 mediaprojectaccess.com
          127.0.0.1 www.activexmediatour.com
          127.0.0.1 activexmediatour.com
          127.0.0.1 ygsondheks.info
          127.0.0.1 www.ygsondheks.info
          127.0.0.1 boom.com.vn
          127.0.0.1 www.boom.com.vn
          127.0.0.1 codecsoft.net
          127.0.0.1 www.codecsoft.net
          127.0.0.1 meizi7472831.com
          127.0.0.1 www.meizi7472831.com
          127.0.0.1 helpcodec.com
          127.0.0.1 www.helpcodec.com
          127.0.0.1 videoactivexlist.com
          127.0.0.1 www.videoactivexlist.com
          127.0.0.1 axmediasolutions.com
          127.0.0.1 www.axmediasolutions.com
          127.0.0.1 accessactivexvideo.com
          127.0.0.1 www.accessactivexvideo.com
          127.0.0.1 mediaactivextask.com
          127.0.0.1 www.mediaactivextask.com
          127.0.0.1 motioncodecs.com
          127.0.0.1 www.motioncodecs.com
          127.0.0.1 spycrush.com
          127.0.0.1 www.spycrush.com
          127.0.0.1 www-spybot.net
          127.0.0.1 www.www-spybot.net
          127.0.0.1 super-servers.net
          127.0.0.1 www.super-servers.net
          127.0.0.1 smetsys.net
          127.0.0.1 www.smetsys.net
          127.0.0.1 antispysolutions.com
          127.0.0.1 www.antispysolutions.com
          127.0.0.1 www2.p0rt2.com
          127.0.0.1 www.www2.p0rt2.com
          127.0.0.1 www7.logih.com
          127.0.0.1 www.www7.logih.com
          127.0.0.1 iugate.com
          127.0.0.1 www.iugate.com
          127.0.0.1 web-codec.com
          127.0.0.1 www.web-codec.com
          127.0.0.1 usecodec.com
          127.0.0.1 www.usecodec.com
          127.0.0.1 privateaxsoftware.com
          127.0.0.1 www.privateaxsoftware.com
          127.0.0.1 mediaactivexfile.com
          127.0.0.1 www.mediaactivexfile.com
          127.0.0.1 activexmediatool.com
          127.0.0.1 www.activexmediatool.com
          127.0.0.1 activexaccessvideo.com
          127.0.0.1 www.activexaccessvideo.com
          127.0.0.1 the-ticket.net
          127.0.0.1 www.the-ticket.net
          127.0.0.1 the-codec.com
          127.0.0.1 www.the-codec.com
          127.0.0.1 funcodec.com
          127.0.0.1 www.funcodec.com
          127.0.0.1 data-hoster.com
          127.0.0.1 www.data-hoster.com
          127.0.0.1 netsearchsoft.com
          127.0.0.1 www.netsearchsoft.com
          127.0.0.1 pcgewinnen.de
          127.0.0.1 www.pcgewinnen.de
          127.0.0.1 play3w.com
          127.0.0.1 playon.play3w.com
          127.0.0.1 www.play3w.com
          127.0.0.1 Antispywaresuite.com
          127.0.0.1 www.Antispywaresuite.com
          127.0.0.1 Antiworm2008.com
          127.0.0.1 www.Antiworm2008.com
          127.0.0.1 Defensaantimalware.com
          127.0.0.1 www.Defensaantimalware.com
          127.0.0.1 Filtrodetrojan.com
          127.0.0.1 www.Filtrodetrojan.com
          127.0.0.1 Goldenantispy.com
          127.0.0.1 www.Goldenantispy.com
          127.0.0.1 Keinegefahr.com
          127.0.0.1 www.Keinegefahr.com
          127.0.0.1 Menacerescue.com
          127.0.0.1 www.Menacerescue.com
          127.0.0.1 Menacesecure.com
          127.0.0.1 www.Menacesecure.com
          127.0.0.1 Orantiespion.com
          127.0.0.1 www.Orantiespion.com
          127.0.0.1 Rescatedeamenazas.com
          127.0.0.1 www.Rescatedeamenazas.com
          127.0.0.1 Trojanerfilter.com
          127.0.0.1 www.Trojanerfilter.com
          127.0.0.1 Trojansfilter.com
          127.0.0.1 www.Trojansfilter.com
          127.0.0.1 Trojansfiltre.com
          127.0.0.1 www.Trojansfiltre.com
          127.0.0.1 Antiespiadorado.com
          127.0.0.1 www.Antiespiadorado.com
          127.0.0.1 Antiespionspack.com
          127.0.0.1 www.Antiespionspack.com
          127.0.0.1 Antigusanos2008.com
          127.0.0.1 www.Antigusanos2008.com
          127.0.0.1 Antispionage.com
          127.0.0.1 www.Antispionage.com
          127.0.0.1 Antispionagepro.com
          127.0.0.1 www.Antispionagepro.com
          127.0.0.1 Antiver2008.com
          127.0.0.1 www.Antiver2008.com
          127.0.0.1 Antiwurm2008.com
          127.0.0.1 www.Antiwurm2008.com
          127.0.0.1 onerateld.com
          127.0.0.1 content.onerateld.com
          127.0.0.1 www.onerateld.com
          127.0.0.1 downloadvax.com
          127.0.0.1 www.downloadvax.com
          127.0.0.1 vaxdownload.com
          127.0.0.1 www.vaxdownload.com
          127.0.0.1 getvaxobject.com
          127.0.0.1 www.getvaxobject.com
          127.0.0.1 inc-codec.com
          127.0.0.1 www.inc-codec.com
          127.0.0.1 passtosites.net
          127.0.0.1 www.passtosites.net
          127.0.0.1 keratomir.biz
          127.0.0.1 www.keratomir.biz
          127.0.0.1 keratomir2.biz
          127.0.0.1 www.keratomir2.biz
          127.0.0.1 spylocked.com
          127.0.0.1 www.spylocked.com
          127.0.0.1 ucleaner.com
          127.0.0.1 www.ucleaner.com
          127.0.0.1 mediaaxsetup.com
          127.0.0.1 www.mediaaxsetup.com
          127.0.0.1 spyot.info
          127.0.0.1 www.spyot.info
          127.0.0.1 ads183.com
          127.0.0.1 www.ads183.com
          127.0.0.1 seobiz.us
          127.0.0.1 www.seobiz.us
          127.0.0.1 top100drugs.info
          127.0.0.1 www.top100drugs.info
          127.0.0.1 fr.drivecleaner.com
          127.0.0.1 www.fr.drivecleaner.com
          127.0.0.1 asafebrowser.com
          127.0.0.1 www.asafebrowser.com
          127.0.0.1 getbestloanrate.info
          127.0.0.1 www.getbestloanrate.info
          127.0.0.1 pipni.cz
          127.0.0.1 www.pipni.cz
          127.0.0.1 www3.pipni.cz
          127.0.0.1 serverc.org
          127.0.0.1 zero.serverc.org
          127.0.0.1 www.serverc.org
          127.0.0.1 dedsearch.com
          127.0.0.1 feed.dedsearch.com
          127.0.0.1 www.dedsearch.com
          127.0.0.1 secure.ucleaner.com
          127.0.0.1 softwarereferral.com
          127.0.0.1 www.softwarereferral.com
          127.0.0.1 vaxobjectinstall.com
          127.0.0.1 www.vaxobjectinstall.com
          127.0.0.1 analcord.com
          127.0.0.1 www.analcord.com
          127.0.0.1 gooogle.bz
          127.0.0.1 www.gooogle.bz
          127.0.0.1 internet-explorer.name
          127.0.0.1 www.internet-explorer.name
          127.0.0.1 click-codec.com
          127.0.0.1 www.click-codec.com
          127.0.0.1 antivirussecuritypro.com
          127.0.0.1 www.antivirussecuritypro.com
          127.0.0.1 sysprotect.com
          127.0.0.1 www.sysprotect.com
          127.0.0.1 pinaccesscode.com
          127.0.0.1 www.pinaccesscode.com
          127.0.0.1 ALL1COUNT.NET
          127.0.0.1 www.ALL1COUNT.NET
          127.0.0.1 4softget.com
          127.0.0.1 www.4softget.com
          127.0.0.1 traff.justcount.net
          127.0.0.1 www.justcount.net
          127.0.0.1 webtop100.net
          127.0.0.1 www.webtop100.net
          127.0.0.1 xathzesocc.com
          127.0.0.1 www.xathzesocc.com
          127.0.0.1 zfxaqzkevi.com
          127.0.0.1 www.zfxaqzkevi.com
          127.0.0.1 setup.bestmanage.org
          127.0.0.1 f1.bestmanage.org
          127.0.0.1 f2.bestmanage.org
          127.0.0.1 f3.bestmanage.org
          127.0.0.1 f4.bestmanage.org
          127.0.0.1 f5.bestmanage.org
          127.0.0.1 f6.bestmanage.org
          127.0.0.1 f7.bestmanage.org
          127.0.0.1 f8.bestmanage.org
          127.0.0.1 f9.bestmanage.org
          127.0.0.1 s1.bestmanage.org
          127.0.0.1 s2.bestmanage.org
          127.0.0.1 s3.bestmanage.org
          127.0.0.1 s4.bestmanage.org
          127.0.0.1 s5.bestmanage.org
          127.0.0.1 s6.bestmanage.org
          127.0.0.1 s7.bestmanage.org
          127.0.0.1 s8.bestmanage.org
          127.0.0.1 s9.bestmanage.org
          127.0.0.1 setup.truth-is-out-there.org
          127.0.0.1 www.truth-is-out-there.org
          127.0.0.1 f1.truth-is-out-there.org
          127.0.0.1 f2.truth-is-out-there.org
          127.0.0.1 f3.truth-is-out-there.org
          127.0.0.1 f4.truth-is-out-there.org
          127.0.0.1 f5.truth-is-out-there.org
          127.0.0.1 f7.truth-is-out-there.org
          127.0.0.1 f8.truth-is-out-there.org
          127.0.0.1 f9.truth-is-out-there.org
          127.0.0.1 s1.truth-is-out-there.org
          127.0.0.1 s2.truth-is-out-there.org
          127.0.0.1 s3.truth-is-out-there.org
          127.0.0.1 s4.truth-is-out-there.org
          127.0.0.1 s5.truth-is-out-there.org
          127.0.0.1 s6.truth-is-out-there.org
          127.0.0.1 s7.truth-is-out-there.org
          127.0.0.1 s8.truth-is-out-there.org
          127.0.0.1 s9.truth-is-out-there.org
          127.0.0.1 wwwsearch.biz
          127.0.0.1 www.wwwsearch.biz
          127.0.0.1 xat.com
          127.0.0.1 www.xat.com
          127.0.0.1 installobject.com
          127.0.0.1 www.installobject.com
          127.0.0.1 dl1.virusprotectpro.com
          127.0.0.1 imagescontrol.com
          127.0.0.1 www.imagescontrol.com
          127.0.0.1 ufixer.com
          127.0.0.1 www.ufixer.com
          127.0.0.1 spyware-secure.com
          127.0.0.1 www.spyware-secure.com
          127.0.0.1 lordoftibia.pl
          127.0.0.1 www.lordoftibia.pl
          127.0.0.1 downloadpics.net
          127.0.0.1 www.downloadpics.net
          127.0.0.1 search2find.biz
          127.0.0.1 www.search2find.biz
          127.0.0.1 viewimageonline.com
          127.0.0.1 www.viewimageonline.com
          127.0.0.1 getphotosets.com
          127.0.0.1 www.getphotosets.com
          127.0.0.1 jackpot-advertising.info
          127.0.0.1 www.jackpot-advertising.info
          127.0.0.1 oddsjackpot.info
          127.0.0.1 www.oddsjackpot.info
          127.0.0.1 jackpotcheck.info
          127.0.0.1 www.jackpotcheck.info
          127.0.0.1 tv-codec.com
          127.0.0.1 www.tv-codec.com
          127.0.0.1 codec.ninoa.com
          127.0.0.1 videoaxdownload.com
          127.0.0.1 www.videoaxdownload.com
          127.0.0.1 axvideosetup.com
          127.0.0.1 www.axvideosetup.com
          127.0.0.1 installvaxobject.com
          127.0.0.1 www.installvaxobject.com
          127.0.0.1 getimageactivex.com
          127.0.0.1 www.getimageactivex.com
          127.0.0.1 micro-codec.com
          127.0.0.1 www.micro-codec.com
          127.0.0.1 downloadmediaax.com
          127.0.0.1 www.downloadmediaax.com
          127.0.0.1 videoactivexsetup.com
          127.0.0.1 www.videoactivexsetup.com
          127.0.0.1 iaxobjectdownload.com
          127.0.0.1 www.iaxobjectdownload.com
          127.0.0.1 virtual-ticket.net
          127.0.0.1 www.virtual-ticket.net
          127.0.0.1 virtualcodec.com
          127.0.0.1 www.virtualcodec.com
          127.0.0.1 host-codec.com
          127.0.0.1 www.host-codec.com
          127.0.0.1 amediasource.com
          127.0.0.1 www.amediasource.com
          127.0.0.1 videossoftware.com
          127.0.0.1 www.videossoftware.com
          127.0.0.1 greatcodec.com
          127.0.0.1 www.greatcodec.com
          127.0.0.1 great-ticket.net
          127.0.0.1 www.great-ticket.net
          127.0.0.1 enhancevideos.com
          127.0.0.1 www.enhancevideos.com
          127.0.0.1 key-codec.com
          127.0.0.1 www.key-codec.com
          127.0.0.1 portal-ticket.com
          127.0.0.1 www.portal-ticket.com
          127.0.0.1 mega-codec.com
          127.0.0.1 www.mega-codec.com
          127.0.0.1 avideosurfer.com
          127.0.0.1 www.avideosurfer.com
          127.0.0.1 key-ticket.com
          127.0.0.1 www.key-ticket.com
          127.0.0.1 imagespecials.com
          127.0.0.1 www.imagespecials.com
          127.0.0.1 pilotcodec.com
          127.0.0.1 www.pilotcodec.com
          127.0.0.1 movietooklit.com
          127.0.0.1 www.movietooklit.com
          127.0.0.1 flrx-tools.net
          127.0.0.1 www.flrx-tools.net
          127.0.0.1 flrxtools.greatnuke.com
          127.0.0.1 upx.tsx.org
          127.0.0.1 spybot-uk.com
          127.0.0.1 www.spybot-uk.com
          127.0.0.1 www.miaminews365.net
          127.0.0.1 miaminews365.net
          127.0.0.1 www.adscontex.com
          127.0.0.1 adscontex.com
          127.0.0.1 www.redir.ws
          127.0.0.1 redir.ws
          127.0.0.1 yourcodec.com
          127.0.0.1 www.yourcodec.com
          127.0.0.1 hotelcodec.com
          127.0.0.1 www.hotelcodec.com
          127.0.0.1 toohs.com
          127.0.0.1 www.toohs.com
          127.0.0.1 spyware-browser.com
          127.0.0.1 www.spyware-browser.com
          127.0.0.1 iesecuritybar.com
          127.0.0.1 www.iesecuritybar.com
          127.0.0.1 spydefenderpro.com
          127.0.0.1 www.spydefenderpro.com
          127.0.0.1 download.spy-shredder.com
          127.0.0.1 remsys.org
          127.0.0.1 de98.remsys.org
          127.0.0.1 nameservicedirect.com
          127.0.0.1 www.nameservicedirect.com
          127.0.0.1 onlinesecurityworld.com
          127.0.0.1 www.onlinesecurityworld.com
          127.0.0.1 mediabusnetwork.com
          127.0.0.1 www.mediabusnetwork.com
          127.0.0.1 attackware.com
          127.0.0.1 www.attackware.com
          127.0.0.1 picturesspot.com
          127.0.0.1 www.picturesspot.com
          127.0.0.1 tamotua.com
          127.0.0.1 www.tamotua.com
          127.0.0.1 2every.net
          127.0.0.1 www.2every.net
          127.0.0.1 official--software.com
          127.0.0.1 www.official--software.com
          127.0.0.1 acrobat-2007.com
          127.0.0.1 www.acrobat-2007.com
          127.0.0.1 antivir2007.com
          127.0.0.1 www.antivir2007.com
          127.0.0.1 spybot2007.com
          127.0.0.1 www.spybot2007.com
          127.0.0.1 spybot-ib.com
          127.0.0.1 www.spybot-ib.com
          127.0.0.1 onlineplayer.tv
          127.0.0.1 www.onlineplayer.tv
          127.0.0.1 interactivebrands.com
          127.0.0.1 www.interactivebrands.com
          127.0.0.1 watchonline.tv
          127.0.0.1 www.watchonline.tv
          127.0.0.1 tvsatellitepourpc.com
          127.0.0.1 www.tvsatellitepourpc.com
          127.0.0.1 liveplayer.tv
          127.0.0.1 www.liveplayer.tv
          127.0.0.1 tv-en-pc.es
          127.0.0.1 www.tv-en-pc.es
          127.0.0.1 premiumtvchannels.com
          127.0.0.1 www.premiumtvchannels.com
          127.0.0.1 tv-sur-pc.com
          127.0.0.1 www.tv-sur-pc.com
          127.0.0.1 acrobat-center.com
          127.0.0.1 www.acrobat-center.com
          127.0.0.1 avast-downloads.com
          127.0.0.1 www.avast-downloads.com
          127.0.0.1 hq-downloads.com
          127.0.0.1 www.hq-downloads.com
          127.0.0.1 downloadservicearea.com
          127.0.0.1 www.downloadservicearea.com
          127.0.0.1 avast-2007.com
          127.0.0.1 www.avast-2007.com
          127.0.0.1 freedownloadpage.com
          127.0.0.1 www.freedownloadpage.com
          127.0.0.1 limewire-download-pro.com
          127.0.0.1 www.limewire-download-pro.com
          127.0.0.1 mcafee-antivirus-2007.com
          127.0.0.1 www.mcafee-antivirus-2007.com
          127.0.0.1 acrobatreader-8.com
          127.0.0.1 www.acrobatreader-8.com
          127.0.0.1 pandaantivirus-2007.com
          127.0.0.1 www.pandaantivirus-2007.com
          127.0.0.1 adobe-reader-8.fr
          127.0.0.1 www.adobe-reader-8.fr
          127.0.0.1 acrobat-reader-8.de
          127.0.0.1 www.acrobat-reader-8.de
          127.0.0.1 tv-auf-dem-pc.de
          127.0.0.1 www.tv-auf-dem-pc.de
          127.0.0.1 online-fernsehen.tv
          127.0.0.1 www.online-fernsehen.tv
          127.0.0.1 free-program-download.com
          127.0.0.1 www.free-program-download.com
          127.0.0.1 freedownloadhq.com
          127.0.0.1 www.freedownloadhq.com
          127.0.0.1 downloadfreeway.com
          127.0.0.1 www.downloadfreeway.com
          127.0.0.1 get-ipod-music.com
          127.0.0.1 www.get-ipod-music.com
          127.0.0.1 winzip-11.com
          127.0.0.1 www.winzip-11.com
          127.0.0.1 mp3musichq.com
          127.0.0.1 www.mp3musichq.com
          127.0.0.1 quicktime.downloadzcenter.com
          127.0.0.1 www.quicktime.downloadzcenter.com
          127.0.0.1 xtremesoftware-ltd.com
          127.0.0.1 wwwxtremesoftware-ltd.com
          127.0.0.1 yahoo.downloadznow.net
          127.0.0.1 wwwyahoo.downloadznow.net
          127.0.0.1 fullsoftwaredownloadz.com
          127.0.0.1 www.fullsoftwaredownloadz.com
          127.0.0.1 software-club.com
          127.0.0.1 www.software-club.com
          127.0.0.1 downloadwizard.com
          127.0.0.1 wwwdownloadwizard.com
          127.0.0.1 adobe-download-now.com
          127.0.0.1 wwwadobe-download-now.com
          127.0.0.1 downloadfreesoft.com
          127.0.0.1 www.downloadfreesoft.com
          127.0.0.1 all-edonkey.com
          127.0.0.1 www.all-edonkey.com
          127.0.0.1 freedownloadzone.com
          127.0.0.1 www.freedownloadzone.com
          127.0.0.1 free-download-support.com
          127.0.0.1 www.free-download-support.com
          127.0.0.1 winamp-download-now.com
          127.0.0.1 www.winamp-download-now.com
          127.0.0.1 winamp-hq.com
          127.0.0.1 www.winamp-hq.com
          127.0.0.1 limewirenetwork.com
          127.0.0.1 www.limewirenetwork.com
          127.0.0.1 adobe-downloads.com
          127.0.0.1 www.adobe-downloads.com
          127.0.0.1 click-to-download.com
          127.0.0.1 www.click-to-download.com
          127.0.0.1 limewire2007pro.info
          127.0.0.1 www.limewire2007pro.info
          127.0.0.1 download-all-area.com
          127.0.0.1 www.download-all-area.com
          127.0.0.1 realplayer-hq.com
          127.0.0.1 www.realplayer-hq.com
          127.0.0.1 firefoxdownload-now.com
          127.0.0.1 www.firefoxdownload-now.com
          127.0.0.1 pandadownload-now.com
          127.0.0.1 www.pandadownload-now.com
          127.0.0.1 my-music-space.com
          127.0.0.1 www.my-music-space.com
          127.0.0.1 skype-download-now.com
          127.0.0.1 www.skype-download-now.com
          127.0.0.1 skype-stop.com
          127.0.0.1 www.skype-stop.com
          127.0.0.1 winrar-download-now.com
          127.0.0.1 www.winrar-download-now.com
          127.0.0.1 skype-free-calls.com
          127.0.0.1 www.skype-free-calls.com
          127.0.0.1 download-all-4-free.com
          127.0.0.1 www.download-all-4-free.com
          127.0.0.1 emule-freebie.com
          127.0.0.1 www.emule-freebie.com
          127.0.0.1 downloadcorporation.com
          127.0.0.1 www.downloadcorporation.com
          127.0.0.1 irfanview-download-now.com
          127.0.0.1 www.irfanview-download-now.com
          127.0.0.1 getdvdshrink2007.com
          127.0.0.1 www.getdvdshrink2007.com
          127.0.0.1 mediaplayer-download-now.com
          127.0.0.1 www.mediaplayer-download-now.com
          127.0.0.1 ipod-music-store.com
          127.0.0.1 www.ipod-music-store.com
          127.0.0.1 realplayer-download-now.com
          127.0.0.1 www.realplayer-download-now.com
          127.0.0.1 panda-hq.com
          127.0.0.1 www.panda-hq.com
          127.0.0.1 directdvdpro.com
          127.0.0.1 www.directdvdpro.com
          127.0.0.1 free-download-place.com
          127.0.0.1 www.free-download-place.com
          127.0.0.1 free-avg-download.com
          127.0.0.1 www.free-avg-download.com
          127.0.0.1 itunesandipods.com
          127.0.0.1 www.itunesandipods.com
          127.0.0.1 winrar-hq.com
          127.0.0.1 www.winrar-hq.com
          127.0.0.1 freemp3access.com
          127.0.0.1 www.freemp3access.com
          127.0.0.1 download-winrar.com
          127.0.0.1 www.download-winrar.com
          127.0.0.1 acrobat-8.com
          127.0.0.1 www.acrobat-8.com
          127.0.0.1 powerdvd-7.com
          127.0.0.1 www.powerdvd-7.com
          127.0.0.1 photoshop.softwarecenterz.com
          127.0.0.1 www.photoshop.softwarecenterz.com
          127.0.0.1 winmx-freebie.com
          127.0.0.1 www.winmx-freebie.com
          127.0.0.1 aresultra.com
          127.0.0.1 www.aresultra.com
          127.0.0.1 my-software-space.com
          127.0.0.1 www.my-software-space.com
          127.0.0.1 antivirus.fastfreedownload.com
          127.0.0.1 www.antivirus.fastfreedownload.com
          127.0.0.1 mymusicaccessories.com
          127.0.0.1 www.mymusicaccessories.com
          127.0.0.1 free-bearshares.com
          127.0.0.1 www.free-bearshares.com
          127.0.0.1 download-real-player.com
          127.0.0.1 www.download-real-player.com
          127.0.0.1 winrar-stop.com
          127.0.0.1 www.winrar-stop.com
          127.0.0.1 etomi.all-downloads-now.com
          127.0.0.1 www.etomi.all-downloads-now.com
          127.0.0.1 azureus-freebie.com
          127.0.0.1 www.azureus-freebie.com
          127.0.0.1 emuledownloadhome.com
          127.0.0.1 www.emuledownloadhome.com
          127.0.0.1 bearshare-usa.com
          127.0.0.1 www.bearshare-usa.com
          127.0.0.1 downloadimesh.com
          127.0.0.1 www.downloadimesh.com
          127.0.0.1 bearsharelive.co.uk
          127.0.0.1 www.bearsharelive.co.uk
          127.0.0.1 all-bittorrent.com
          127.0.0.1 www.all-bittorrent.com
          127.0.0.1 downloadanysong.com
          127.0.0.1 www.downloadanysong.com
          127.0.0.1 free-avg.org
          127.0.0.1 www.free-avg.org
          127.0.0.1 bitcomet-freebie.com
          127.0.0.1 www.bitcomet-freebie.com
          127.0.0.1 ipod-tunes-download.com
          127.0.0.1 www.ipod-tunes-download.com
          127.0.0.1 incredimail-hq.com
          127.0.0.1 www.incredimail-hq.com
          127.0.0.1 2007-download.com
          127.0.0.1 www.2007-download.com
          127.0.0.1 skype-hq.com
          127.0.0.1 www.skype-hq.com
          127.0.0.1 downloadlost.tv
          127.0.0.1 www.downloadlost.tv
          127.0.0.1 ares-freebie.com
          127.0.0.1 www.ares-freebie.com
          127.0.0.1 incredimailpro.com
          127.0.0.1 www.incredimailpro.com
          127.0.0.1 avast.free-software-center.com
          127.0.0.1 www.avast.free-software-center.com
          127.0.0.1 irfanview-stop.com
          127.0.0.1 www.irfanview-stop.com
          127.0.0.1 www-free-tunes.com
          127.0.0.1 www.www-free-tunes.com
          127.0.0.1 irfanview-center.com
          127.0.0.1 www.irfanview-center.com
          127.0.0.1 zonealarm-download-now.com
          127.0.0.1 www.zonealarm-download-now.com
          127.0.0.1 mysoftwareprovider.com
          127.0.0.1 www.mysoftwareprovider.com
          127.0.0.1 free-music-network.com
          127.0.0.1 www.free-music-network.com
          127.0.0.1 mytunes.lets-get-it.net
          127.0.0.1 www.mytunes.lets-get-it.net
          127.0.0.1 bearshare.mp3-muzic.com
          127.0.0.1 www.bearshare.mp3-muzic.com
          127.0.0.1 mediaplayer-2007.com
          127.0.0.1 www.mediaplayer-2007.com
          127.0.0.1 download-trillian.com
          127.0.0.1 www.download-trillian.com
          127.0.0.1 quickiefilez.com
          127.0.0.1 www.quickiefilez.com
          127.0.0.1 ares-usa.com
          127.0.0.1 www.ares-usa.com
          127.0.0.1 free-software-center.com
          127.0.0.1 www.free-software-center.com
          127.0.0.1 itunesfreebies.com
          127.0.0.1 www.itunesfreebies.com
          127.0.0.1 lets-get-it.org
          127.0.0.1 www.lets-get-it.org
          127.0.0.1 avg-secure.com
          127.0.0.1 www.avg-secure.com
          127.0.0.1 start-downloading.com
          127.0.0.1 www.start-downloading.com
          127.0.0.1 all-downloads-now.com
          127.0.0.1 www.all-downloads-now.com
          127.0.0.1 k-litetk.com
          127.0.0.1 www.k-litetk.com
          127.0.0.1 download-this.us
          127.0.0.1 www.download-this.us
          127.0.0.1 get-winrar.com
          127.0.0.1 www.get-winrar.com
          127.0.0.1 download-windvd.com
          127.0.0.1 www.download-windvd.com
          127.0.0.1 outlook-express-utilities.com
          127.0.0.1 www.outlook-express-utilities.com
          127.0.0.1 acrobat-hq.com
          127.0.0.1 www.acrobat-hq.com
          127.0.0.1 lets-get-it.info
          127.0.0.1 www.lets-get-it.info
          127.0.0.1 download-limewire.org
          127.0.0.1 www.download-limewire.org
          127.0.0.1 limewire-mp3-share.com
          127.0.0.1 www.limewire-mp3-share.com
          127.0.0.1 downloadzfree.com
          127.0.0.1 www.downloadzfree.com
          127.0.0.1 musicmatch.free-software-center.com
          127.0.0.1 www.musicmatch.free-software-center.com
          127.0.0.1 bearshare-download.org
          127.0.0.1 www.bearshare-download.org
          127.0.0.1 easymp3musicnow.com
          127.0.0.1 www.easymp3musicnow.com
          127.0.0.1 limewire-pro-downloads.com
          127.0.0.1 www.limewire-pro-downloads.com
          127.0.0.1 prisonbreakseason.tv
          127.0.0.1 www.prisonbreakseason.tv
          127.0.0.1 download-for-free.net
          127.0.0.1 www.download-for-free.net
          127.0.0.1 bearshare.download-me.info
          127.0.0.1 www.bearshare.download-me.info
          127.0.0.1 mylimewirenetwork.com
          127.0.0.1 www.mylimewirenetwork.com
          127.0.0.1 bearshare-music-downloads.com
          127.0.0.1 www.bearshare-music-downloads.com
          127.0.0.1 download-2007.com
          127.0.0.1 www.download-2007.com
          127.0.0.1 arespro2007.com
          127.0.0.1 www.arespro2007.com
          127.0.0.1 bearsharepro2007.com
          127.0.0.1 www.bearsharepro2007.com
          127.0.0.1 azureusclub.com
          127.0.0.1 www.azureusclub.com
          127.0.0.1 download-zone-free.com
          127.0.0.1 www.download-zone-free.com
          127.0.0.1 free-adobe-download-support.com
          127.0.0.1 www.free-adobe-download-support.com
          127.0.0.1 limewirezone.com
          127.0.0.1 www.limewirezone.com
          127.0.0.1 winzip-hq.com
          127.0.0.1 www.winzip-hq.com
          127.0.0.1 www-win-mx.com
          127.0.0.1 www.www-win-mx.com
          127.0.0.1 klitepro.com
          127.0.0.1 www.klitepro.com
          127.0.0.1 mp3-music-source.com
          127.0.0.1 www.mp3-music-source.com
          127.0.0.1 emule.mp3-muzic.com
          127.0.0.1 www.emule.mp3-muzic.com
          127.0.0.1 downloads-free.org
          127.0.0.1 www.downloads-free.org
          127.0.0.1 acrobat-stop.com
          127.0.0.1 www.acrobat-stop.com
          127.0.0.1 download-mcafee.com
          127.0.0.1 www.download-mcafee.com
          127.0.0.1 powerdvd2007.info
          127.0.0.1 www.powerdvd2007.info
          127.0.0.1 myeasymp3downloadsnow.com
          127.0.0.1 www.myeasymp3downloadsnow.com
          127.0.0.1 winamp2007.com
          127.0.0.1 www.winamp2007.com
          127.0.0.1 official-avg-download-now.com
          127.0.0.1 www.official-avg-download-now.com
          127.0.0.1 avg.grab-it-today.net
          127.0.0.1 www.avg.grab-it-today.net
          127.0.0.1 zonealarm-stop.com
          127.0.0.1 www.zonealarm-stop.com
          127.0.0.1 adawarenow.com
          127.0.0.1 www.adawarenow.com
          127.0.0.1 download-zone-free.net
          127.0.0.1 www.download-zone-free.net
          127.0.0.1 mp3winmx.com
          127.0.0.1 www.mp3winmx.com
          127.0.0.1 yim-stop.com
          127.0.0.1 www.yim-stop.com
          127.0.0.1 winmxfrance.com
          127.0.0.1 www.winmxfrance.com
          127.0.0.1 mp3bearshare.com
          127.0.0.1 www.mp3bearshare.com
          127.0.0.1 mp3-morpheus.com
          127.0.0.1 www.mp3-morpheus.com
          127.0.0.1 ipod-itunes-download-now.com
          127.0.0.1 www.ipod-itunes-download-now.com
          127.0.0.1 get-mp3-onlined.com
          127.0.0.1 www.get-mp3-onlined.com
          127.0.0.1 telecharger-avast.com
          127.0.0.1 www.telecharger-avast.com
          127.0.0.1 thelimewiredownload.com
          127.0.0.1 www.thelimewiredownload.com
          127.0.0.1 download-ad-aware.com
          127.0.0.1 www.download-ad-aware.com
          127.0.0.1 stuff-your-ipod.com
          127.0.0.1 www.stuff-your-ipod.com
          127.0.0.1 avast-hq.com
          127.0.0.1 www.avast-hq.com
          127.0.0.1 winmx-music-download.com
          127.0.0.1 www.winmx-music-download.com
          127.0.0.1 bearshare-downloads.net
          127.0.0.1 www.bearshare-downloads.net
          127.0.0.1 antivirus-hq.net
          127.0.0.1 www.antivirus-hq.net
          127.0.0.1 photoshop.downloadzcentral.com
          127.0.0.1 www.photoshop.downloadzcentral.com
          127.0.0.1 mp3-muzic.com
          127.0.0.1 www.mp3-muzic.com
          127.0.0.1 avg.softwarecenterz.com
          127.0.0.1 www.avg.softwarecenterz.com
          127.0.0.1 freeunlimitedskype.com
          127.0.0.1 www.freeunlimitedskype.com
          127.0.0.1 antivirus-stop.com
          127.0.0.1 www.antivirus-stop.com
          127.0.0.1 tutorial-hq.com
          127.0.0.1 www.tutorial-hq.com
          127.0.0.1 photoshop-stop.com
          127.0.0.1 www.photoshop-stop.com
          127.0.0.1 k-litegold.com
          127.0.0.1 www.k-litegold.com
          127.0.0.1 all-limewire.com
          127.0.0.1 www.all-limewire.com
          127.0.0.1 download-antivir.com
          127.0.0.1 www.download-antivir.com
          127.0.0.1 mediaplayer-download.org
          127.0.0.1 www.mediaplayer-download.org
          127.0.0.1 download-dvdshrink.com
          127.0.0.1 www.download-dvdshrink.com
          127.0.0.1 getanysoftware.com
          127.0.0.1 www.getanysoftware.com
          127.0.0.1 spybotdownload-now.com
          127.0.0.1 www.spybotdownload-now.com
          127.0.0.1 www-audacity.com
          127.0.0.1 www.www-audacity.com
          127.0.0.1 downloadsglobe.com
          127.0.0.1 www.downloadsglobe.com
          127.0.0.1 incredimail-download-now.com
          127.0.0.1 www.incredimail-download-now.com
          127.0.0.1 download-avast.com
          127.0.0.1 www.download-avast.com
          127.0.0.1 download-itunes-now.com
          127.0.0.1 www.download-itunes-now.com
          127.0.0.1 quicktime-download-now.com
          127.0.0.1 www.quicktime-download-now.com
          127.0.0.1 get-realplayer.com
          127.0.0.1 www.get-realplayer.com
          127.0.0.1 searchinmates.org
          127.0.0.1 www.searchinmates.org
          127.0.0.1 idolikemovies.com
          127.0.0.1 www.idolikemovies.com
          127.0.0.1 www.3bay.it
          127.0.0.1 www.3ebay.it
          127.0.0.1 www.4ebay.it
          127.0.0.1 www.4repubblica.it
          127.0.0.1 www.5iscali.it
          127.0.0.1 www.5repubblica.it
          127.0.0.1 www.5tiscali.it
          127.0.0.1 www.6iscali.it
          127.0.0.1 www.6tiscali.it
          127.0.0.1 www.aginegialle.it
          127.0.0.1 www.aitalia.it
          127.0.0.1 www.aklitalia.it
          127.0.0.1 www.alialia.it
          127.0.0.1 www.aliotalia.it
          127.0.0.1 www.alirtalia.it
          127.0.0.1 www.alitaia.it
          127.0.0.1 www.alitaklia.it
          127.0.0.1 www.alitala.it
          127.0.0.1 www.alitaliaq.it
          127.0.0.1 www.alitalias.it
          127.0.0.1 www.alitaliaz.it
          127.0.0.1 www.alitali.it
          127.0.0.1 www.alitalioa.it
          127.0.0.1 www.alitalisa.it
          127.0.0.1 www.alitaliua.it
          127.0.0.1 www.alitalkia.it
          127.0.0.1 www.alitaloia.it
          127.0.0.1 www.alitaluia.it
          127.0.0.1 www.alitaslia.it
          127.0.0.1 www.alitlia.it
          127.0.0.1 www.alitralia.it
          127.0.0.1 www.alitsalia.it
          127.0.0.1 www.aliutalia.it
          127.0.0.1 www.aloitalia.it
          127.0.0.1 www.aluitalia.it
          127.0.0.1 www.aslitalia.it
          127.0.0.1 www.asupereva.it
          127.0.0.1 www.aupereva.it
          127.0.0.1 www.azzetta.it
          127.0.0.1 www.bgazzetta.it
          127.0.0.1 www.fgazzetta.it
          127.0.0.1 www.gazzettaa.it
          127.0.0.1 www.gazzettaq.it
          127.0.0.1 www.gazzettas.it
          127.0.0.1 www.gazzettaz.it
          127.0.0.1 www.ggazzetta.it
          127.0.0.1 www.hgazzetta.it
          127.0.0.1 www.tgazzetta.it
          127.0.0.1 www.vgazzetta.it
          127.0.0.1 www.bgoogle.it
          127.0.0.1 www.bvirgilio.it
          127.0.0.1 www.ccorriere.it
          127.0.0.1 www.cdorriere.it
          127.0.0.1 www.cforriere.it
          127.0.0.1 www.ciorriere.it
          127.0.0.1 www.cirriere.it
          127.0.0.1 www.clorriere.it
          127.0.0.1 www.codrriere.it
          127.0.0.1 www.coeriere.it
          127.0.0.1 www.coerriere.it
          127.0.0.1 www.cofrriere.it
          127.0.0.1 www.cogrriere.it
          127.0.0.1 www.coirriere.it
          127.0.0.1 www.coorriere.it
          127.0.0.1 www.coprriere.it
          127.0.0.1 www.coreiere.it
          127.0.0.1 www.coreriere.it
          127.0.0.1 www.corrdiere.it
          127.0.0.1 www.correiere.it
          127.0.0.1 www.corrfiere.it
          127.0.0.1 www.corrgiere.it
          127.0.0.1 www.corridere.it
          127.0.0.1 www.corriedre.it
          127.0.0.1 www.corriee.it
          127.0.0.1 www.corrieere.it
          127.0.0.1 www.corriefre.it
          127.0.0.1 www.corriegre.it
          127.0.0.1 www.corrierde.it
          127.0.0.1 www.corriered.it
          127.0.0.1 www.corrieree.it
          127.0.0.1 www.corrieref.it
          127.0.0.1 www.corrierer.it
          127.0.0.1 www.corrieres.it
          127.0.0.1 www.corrierew.it
          127.0.0.1 www.corrierfe.it
          127.0.0.1 www.corrierge.it
          127.0.0.1 www.corrierre.it
          127.0.0.1 www.corrierr.it
          127.0.0.1 www.corrierse.it
          1. Otmoveit : Apparemment il n'a pas trouvé les fichiers

            File/Folder C:\WINDOWS\dmdqdrxfdr.dll not found.
            File/Folder C:\WINDOWS\admggxp.dll not found.

            OTMoveIt2 v1.0.19 log created on 02122008_213051

            -----------------------------------------------------------------------------------------

            J'ai mis A jour Java et IE et installer Spybot

            ------------------------------------------------------------------------------------------

            Rapport Hijackthis

            Logfile of Trend Micro HijackThis v2.0.2
            Scan saved at 21:55:27, on 12/02/2008
            Platform: Windows XP SP2 (WinNT 5.01.2600)
            MSIE: Internet Explorer v6.00 (6.00.2900.2180)
            Boot mode: Normal

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
            C:\WINDOWS\Explorer.EXE
            C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
            C:\WINDOWS\system32\smtray.exe
            C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
            C:\WINDOWS\system32\RUNDLL32.EXE
            C:\WINDOWS\system32\ctfmon.exe
            C:\Program Files\CursorXP\CursorXP.exe
            C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
            C:\Program Files\Last.fm\LastFMHelper.exe
            C:\WINDOWS\system32\spoolsv.exe
            C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
            C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
            C:\WINDOWS\System32\drivers\CDAC11BA.EXE
            C:\WINDOWS\system32\nvsvc32.exe
            C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
            C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
            C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
            C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
            C:\Program Files\Mozilla Firefox\firefox.exe
            C:\Documents and Settings\Olivier\Mes documents\IE7Setup.exe
            C:\WINDOWS\system32\cmd.exe
            C:\DOCUME~1\Olivier\LOCALS~1\Temp\IXP000.TMP\IE7-Setup.exe
            c:\61e0f5a78968261395fe\update\iesetup.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
            C:\WINDOWS\system32\wuauclt.exe
            C:\WINDOWS\system32\wuauclt.exe
            C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
            C:\WINDOWS\SoftwareDistribution\Download\3da5fb25f9bca1c53dde30405d5bbc6e\update\update.exe

            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
            R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.proximus.be/pickx
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
            O2 - BHO: SXG Advisor - {18DC3D52-5000-45BE-A4B8-BB9910758EE9} - C:\WINDOWS\dmdqdrxfdr.dll (file missing)
            O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
            O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
            O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
            O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
            O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
            O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
            O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
            O4 - HKLM\..\Run: [Windowsz] rwnt.exe
            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
            O4 - HKLM\..\Run: [Smapp] smtray.exe
            O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
            O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
            O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
            O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
            O4 - HKLM\..\RunServices: [Windowsz] rwnt.exe
            O4 - HKLM\..\RunOnce: [wextract_cleanup0] rundll32.exe C:\WINDOWS\system32\advpack.dll,DelNodeRunDLL32 "C:\DOCUME~1\Olivier\LOCALS~1\Temp\IXP000.TMP\"
            O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
            O4 - HKCU\..\Run: [CursorXP] C:\Program Files\CursorXP\CursorXP.exe
            O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
            O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
            O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
            O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
            O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
            O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
            O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
            O4 - Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper.exe
            O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
            O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
            O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
            O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
            O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
            O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
            O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
            O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O14 - IERESET.INF: START_PAGE_URL=https://www.proximus.be/pickx
            O16 - DPF: ChatSpace Full Java Client 3.1.0.229 - http://surechat.com:9000/Java/cfs31229.cab
            O16 - DPF: Dexia Netbanking - http://netbanking.dexia.be/PC//Dynamic/Shared/Applet//DexiaIIA.cab
            O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
            O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
            O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
            O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
            O16 - DPF: {7A32634B-029C-4836-A023-528983982A49} - http://fdl.msn.com/public/chat/msnchat42.cab
            O16 - DPF: {946B0485-8F8C-4C35-A6E7-D2115E3B0B4F} - http://fr4-download.nocreditcard.net/...
            O16 - DPF: {9EB4F647-FE4A-42F9-9F5C-B8FB28DD02F9} - http://scripts.dlv4.com/binaries/IA/sysia32svc_EN_XP.cab
            O16 - DPF: {AA760512-9BD8-4B1B-9E7A-DD9BBE3CF119} (PandoraBoxCtrl Class) - http://front.boonty.com/Prometheus/PandoraX.cab
            O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab
            O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
            O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
            O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
            O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
            O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
            O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
            O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
            O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
            1. Contributeur sécurité
              vas dans PANNEAU DE CONFIGURATION puis AJOUT/SUPPRESSION DE PROGRAMME Et vire l'ancienne version JAVA

              ________________

              O2 - BHO: SXG Advisor - {18DC3D52-5000-45BE-A4B8-BB9910758EE9} - C:\WINDOWS\dmdqdrxfdr.dll (file missing)
              O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
              O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
              O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
              O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
              O4 - HKLM\..\Run: [Windowsz] rwnt.exe

              Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked".

              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

              O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

              O4 - HKLM\..\RunServices: [Windowsz] rwnt.exe
              O4 - HKLM\..\RunOnce: [wextract_cleanup0] rundll32.exe C:\WINDOWS\system32\advpack.dll,DelNodeRunDLL32 "C:\DOCUME~1\Olivier\LOCALS~1\Temp\IXP000.TMP\"

              ____________________

              Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
              http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
              Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
              • Redémarre ton ordinateur
              • Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
              • A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
              • Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
              • Choisis ton compte.
              Déroule la liste des instructions ci-dessous :
              • Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
              • Appuie sur Y pour commencer le processus de nettoyage.
              • Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
              • Appuie sur une touche pour redémarrer le PC.
              • Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
              • Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
              • Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
              • Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
              • Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum

              ________________

              télécharge OTMoveIt
              http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau. Ou sur https://www.luanagames.com/index.fr.html
              double-clique sur OTMoveIt.exe pour le lancer.
              copie la liste qui se trouve en citation ci-dessous,
              et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

              Citation :

              C:\WINDOWS\system32\advpack.dll
              C:\DOCUME~1\Olivier\LOCALS~1\Temp\IXP000.TMP

              clique sur MoveIt! pour lancer la suppression.
              le résultat apparaitra dans le cadre "Results".
              clique sur Exit pour fermer.
              poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

              il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

              _______________________

              vire ce qui est dans le dossier movedfiles en allant dans poste de travail puis C puis OTMOVIT

              __________________

              recolle en un nouveau et dis tes soucis actuels
              1. Rapport Sd fix

                SDFix: Version 1.142

                Run by Olivier on jeu. 14/02/2008 at 16:56

                Microsoft Windows XP [version 5.1.2600]

                Running From: C:\DOCUME~1\Olivier\MESDOC~1\SDFix

                Safe Mode:
                Checking Services:

                Restoring Windows Registry Values
                Restoring Windows Default Hosts File

                Rebooting...

                Normal Mode:
                Checking Files:

                Trojan Files Found:

                C:\WINDOWS\bdmnopx.dll - Deleted
                C:\WINDOWS\dat.txt - Deleted
                C:\WINDOWS\emotrlq.dll - Deleted
                C:\WINDOWS\rs.txt - Deleted

                Removing Temp Files...

                ADS Check:

                Final Check:

                catchme 0.3.1344.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                Rootkit scan 2008-02-14 17:07:54
                Windows 5.1.2600 Service Pack 2 NTFS

                scanning hidden processes ...

                IPC error: 2 Le fichier spécifié est introuvable.
                scanning hidden services & system hive ...

                [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
                "h0"=dword:00000000
                "khjeh"=hex:fd,6b,b6,db,c9,d0,6e,7a,32,0f,c7,a8,d5,2a,14,1b,9d,06,b3,6c,52,..
                [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
                "p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
                "h0"=dword:00000001
                "ujdew"=hex:09,dc,ae,13,e7,a4,f3,45,f4,ce,1f,63,d2,fd,12,74,50,5f,b5,09,17,..
                [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
                "h0"=dword:00000000
                "khjeh"=hex:fd,6b,b6,db,c9,d0,6e,7a,32,0f,c7,a8,d5,2a,14,1b,9d,06,b3,6c,52,..
                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch]
                "Epoch"=dword:00000764
                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
                "s1"=dword:97490c1b
                "s2"=dword:de0c9db8
                "h0"=dword:00000002

                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
                "h0"=dword:00000001
                "ujdew"=hex:6e,60,e9,c3,41,83,07,1e,e9,6b,74,8a,e1,96,13,17,10,02,cf,b3,33,..
                "p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"

                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
                "h0"=dword:00000000
                "khjeh"=hex:fd,6b,b6,db,c9,d0,6e,7a,32,0f,c7,a8,d5,2a,14,1b,9d,06,b3,6c,52,..
                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A56DAF2B-3CC3-4720-9926-D3549706C216}]
                "DhcpServer"="255.255.255.255"
                "Lease"=dword:00000e10
                "LeaseObtainedTime"=dword:47b46758
                "T1"=dword:47b46e60
                "T2"=dword:47b473a6
                "LeaseTerminatesTime"=dword:47b47568
                "DhcpIPAddress"="0.0.0.0"
                "DhcpSubnetMask"="255.0.0.0"
                [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{A56DAF2B-3CC3-4720-9926-D3549706C216}\Parameters\Tcpip]
                "DhcpIPAddress"="0.0.0.0"
                "DhcpSubnetMask"="255.0.0.0"
                "DhcpServer"="255.255.255.255"
                "Lease"=dword:00000e10
                "LeaseObtainedTime"=dword:47b46758
                "T1"=dword:47b46e60
                "T2"=dword:47b473a6
                "LeaseTerminatesTime"=dword:47b47568
                [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
                "h0"=dword:00000001
                "ujdew"=hex:6e,60,e9,c3,41,83,07,1e,e9,6b,74,8a,e1,96,13,17,10,02,cf,b3,33,..
                "p0"="C:\Program Files\Alcohol Soft\Alcohol 120\"
                [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
                "h0"=dword:00000000
                "khjeh"=hex:fd,6b,b6,db,c9,d0,6e,7a,32,0f,c7,a8,d5,2a,14,1b,9d,06,b3,6c,52,..

                scanning hidden registry entries ...

                scanning hidden files ...

                scan completed successfully
                hidden processes: 0
                hidden services: 0
                hidden files: 2

                Remaining Services:
                ------------------

                Authorized Application Key Export:

                [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
                "C:\\Program Files\\BitTorrent\\bittorrent.exe"="C:\\Program Files\\BitTorrent\\bittorrent.exe:*:Enabled:BitTorrent"
                "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
                "C:\\Program Files\\Microsoft ActiveSync\\WCESCOMM.EXE"="C:\\Program Files\\Microsoft ActiveSync\\WCESCOMM.EXE:*:Enabled:Connection Manager"
                "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
                "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
                "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
                "C:\\Program Files\\uTorrent\\uTorrent.exe"="C:\\Program Files\\uTorrent\\uTorrent.exe:*:Enabled:æTorrent"

                [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
                "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
                "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
                "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
                "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

                Remaining Files:
                ---------------

                File Backups: - C:\DOCUME~1\Olivier\MESDOC~1\SDFix\backups\backups.zip

                Files with Hidden Attributes:

                Tue 28 Aug 2001 94,864 ..SH. --- "C:\WINDOWS\twain.dll"
                Thu 19 Aug 2004 50,688 ..SH. --- "C:\WINDOWS\twain_32.dll"
                Mon 28 Jan 2008 1,404,240 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
                Mon 28 Jan 2008 5,146,448 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
                Mon 28 Jan 2008 2,097,488 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
                Thu 19 Aug 2004 1,028,096 ..SH. --- "C:\WINDOWS\system32\mfc42.dll"
                Thu 19 Aug 2004 54,784 ..SH. --- "C:\WINDOWS\system32\msvcirt.dll"
                Thu 19 Aug 2004 413,696 A.SH. --- "C:\WINDOWS\system32\msvcp60.dll"
                Thu 19 Aug 2004 343,040 A.SH. --- "C:\WINDOWS\system32\msvcrt.dll"
                Thu 19 Aug 2004 83,456 A.SH. --- "C:\WINDOWS\system32\olepro32.dll"
                Thu 19 Aug 2004 12,288 ..SH. --- "C:\WINDOWS\system32\regsvr32.exe"
                Thu 15 Aug 2002 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
                Thu 15 Aug 2002 401 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv16.bak"
                Fri 2 Nov 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
                Sat 13 Nov 2004 37,376 ...H. --- "C:\Program Files\Fichiers communs\Adobe\ESD\DLMCleanup.exe"

                Finished!

                ----------------------------------------------------------------------------------------------------------------------------------------------

                OTmovit

                DllUnregisterServer procedure not found in C:\WINDOWS\system32\advpack.dll
                C:\WINDOWS\system32\advpack.dll NOT unregistered.
                C:\WINDOWS\system32\advpack.dll moved successfully.
                File/Folder C:\DOCUME~1\Olivier\LOCALS~1\Temp\IXP000.TMP not found.

                OTMoveIt2 v1.0.19 log created on 02142008_163604

                -------------------------------------------------------------------------------------------------------------------------------------------------

                Rapport Hijackthis

                Logfile of Trend Micro HijackThis v2.0.2
                Scan saved at 9:36:28, on 16/02/2008
                Platform: Windows XP SP2 (WinNT 5.01.2600)
                MSIE: Internet Explorer v7.00 (7.00.6000.16608)
                Boot mode: Normal

                Running processes:
                C:\WINDOWS\System32\smss.exe
                C:\WINDOWS\system32\winlogon.exe
                C:\WINDOWS\system32\services.exe
                C:\WINDOWS\system32\lsass.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\System32\svchost.exe
                C:\WINDOWS\Explorer.EXE
                C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
                C:\WINDOWS\system32\smtray.exe
                C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
                C:\WINDOWS\system32\RUNDLL32.EXE
                C:\WINDOWS\system32\ctfmon.exe
                C:\Program Files\CursorXP\CursorXP.exe
                C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
                C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                C:\Program Files\Last.fm\LastFMHelper.exe
                C:\WINDOWS\system32\spoolsv.exe
                C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                C:\WINDOWS\System32\drivers\CDAC11BA.EXE
                C:\WINDOWS\system32\nvsvc32.exe
                C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
                C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
                C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
                C:\Program Files\Mozilla Firefox\firefox.exe
                C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
                C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
                R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.proximus.be/pickx
                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                O4 - HKLM\..\Run: [Smapp] smtray.exe
                O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
                O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                O4 - HKCU\..\Run: [CursorXP] C:\Program Files\CursorXP\CursorXP.exe
                O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
                O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
                O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
                O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
                O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
                O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
                O4 - Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper.exe
                O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
                O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
                O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
                O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O14 - IERESET.INF: START_PAGE_URL=https://www.proximus.be/pickx
                O16 - DPF: ChatSpace Full Java Client 3.1.0.229 - http://surechat.com:9000/Java/cfs31229.cab
                O16 - DPF: Dexia Netbanking - http://netbanking.dexia.be/PC//Dynamic/Shared/Applet//DexiaIIA.cab
                O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
                O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
                O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
                O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
                O16 - DPF: {7A32634B-029C-4836-A023-528983982A49} - http://fdl.msn.com/public/chat/msnchat42.cab
                O16 - DPF: {946B0485-8F8C-4C35-A6E7-D2115E3B0B4F} - http://fr4-download.nocreditcard.net/...
                O16 - DPF: {9EB4F647-FE4A-42F9-9F5C-B8FB28DD02F9} - http://scripts.dlv4.com/binaries/IA/sysia32svc_EN_XP.cab
                O16 - DPF: {AA760512-9BD8-4B1B-9E7A-DD9BBE3CF119} (PandoraBoxCtrl Class) - http://front.boonty.com/Prometheus/PandoraX.cab
                O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab
                O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
                O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
                O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
                O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
                1. Contributeur
                  salut,

                  jpl ne va pas etre present ces prochains jour, je vais prendre la suite.

                  c´est pas grave qu´antivir te detecte smitfraud, c´est normal...

                  a l´aide de hijack this coce et fix les lignes suivantes :

                  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                  O16 - DPF: ChatSpace Full Java Client 3.1.0.229 - http://surechat.com:9000/Java/cfs31229.cab
                  O16 - DPF: {946B0485-8F8C-4C35-A6E7-D2115E3B0B4F} - http://fr4-download.nocreditcard.net/
                  O16 - DPF: {9EB4F647-FE4A-42F9-9F5C-B8FB28DD02F9} - http://scripts.dlv4.com/binaries/IA/sysia32svc_EN_XP.cab
                  O16 - DPF: {AA760512-9BD8-4B1B-9E7A-DD9BBE3CF119} (PandoraBoxCtrl Class) - http://front.boonty.com/Prometheus/PandoraX.cab

                  comment fixer :

                  Tutoriel d´utilisation (video) : (Merci a Balltrap34 pour cette réalisation)

                  -> http://pageperso.aol.fr/balltrap34/demohijack.htm

                  puis fais ceci :

                  « Démarrer » > « Executer » > taper cmd > valide par ok

                  dans la fenetre noire tape ceci en respectant bien les espaces et guillemets

                  sc stop "Boonty Games" ==> [Enter]
                  sc config "Boonty Games" start= disabled ==> [Enter]
                  sc delete "Boonty Games" ==> [Enter]

                  * Double-clique sur OTMoveIt.exe pour lancer le programme,
                  * Copie la liste de fichiers ou de dossiers ci-dessous et colle-la dans la fenêtre du programme "Paste Custom List of Files/Folders to Move" :

                  C:\Program Files\Fichiers communs\BOONTY Shared
                  C:\Program Files\boontyGames
                  C:\Program Files\boonty

                  * Clique sur MoveIt! pour lancer la suppression,
                  * Le résultat appraraîtra dans le cadre Results.
                  * Clique sur Exit pour fermer le programme.
                  * Poste le rapport qui est situé ici : C:\\\_OTMoveIt\MovedFiles
                  * Il te sera peut-être demandé de redémarrer ton PC. Dans ce cas, clique sur Yes.

                  post le rapport de ot_move it ainsi qu´un nouveau hijack this

                  performes egalement un scan a l´aide d´antivir avec les regalges ci dessous et post le rapport ici stp

                  une fois antivir ouvert click surconfiguration et coche la case "expert mode" puis sur l´onglet scanner dans la fenetre du dessous tu va voir : rootkit search click sur le petit + pour deployer et coche la case a coté de ton disk dur
                  puis click sur configuration en haut a droite; dans la nouvelle fenetre a gauche >scanner > coche "scan all files" et en dessous >scanner priority = High
                  coche : allow stopping the scanner, comme cela tu peux faire une pause pendant le scan si tu le desir.
                  puis sur la droite coche les case suivantes :
                  scan boot sectors of selected drives
                  scan master boot sectors
                  scan memory
                  search foe rootkit before scan
                  decoche :
                  ignore off line files
                  toujours a gauche > scan > deploie > heuristique > macrovirus heuristic = coché et en dessous > win32 heuristic la case coché et high detection level

                  @+
                  1. Alors voici les rapports

                    Ot Move it

                    [Custom Input]
                    < C:\Program Files\Fichiers communs\BOONTY Shared >
                    C:\Program Files\Fichiers communs\BOONTY Shared\Service moved successfully.
                    C:\Program Files\Fichiers communs\BOONTY Shared moved successfully.
                    < C:\Program Files\boontyGames >
                    File/Folder C:\Program Files\boontyGames not found.
                    < C:\Program Files\boonty >
                    File/Folder C:\Program Files\boonty not found.

                    OTMoveIt2 v1.0.19 log created on 02162008_231258

                    ---------------------------------------------------------------------------------------------------

                    Antivir :

                    AntiVir PersonalEdition Classic
                    Report file date: dimanche 17 février 2008 18:51

                    Scanning for 1109165 virus strains and unwanted programs.

                    Licensed to: Avira AntiVir PersonalEdition Classic
                    Serial number: 0000149996-ADJIE-0001
                    Platform: Windows XP
                    Windows version: (Service Pack 2) [5.1.2600]
                    Username: SYSTEM
                    Computer name: NOM-LV6JFIE1LL1

                    Version information:
                    BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
                    AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29
                    AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51
                    LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47
                    LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20
                    ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15
                    ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 14/12/2007 20:04:43
                    ANTIVIR2.VDF : 7.0.2.113 1673728 Bytes 8/02/2008 23:07:06
                    ANTIVIR3.VDF : 7.0.2.139 181760 Bytes 14/02/2008 15:10:17
                    AVEWIN32.DLL : 7.6.0.65 3240448 Bytes 14/02/2008 15:10:21
                    AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26
                    AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17
                    AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24
                    AVPACK32.DLL : 7.6.0.3 360488 Bytes 8/02/2008 23:07:09
                    AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06
                    AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33
                    AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18
                    NETNT.DLL : 7.0.0.0 7720 Bytes 8/03/2007 11:09:42
                    RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 7/08/2007 12:38:13
                    RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37
                    SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21

                    Configuration settings for the scan:
                    Jobname..........................: Complete system scan
                    Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
                    Logging..........................: low
                    Primary action...................: interactive
                    Secondary action.................: ignore
                    Scan master boot sector..........: on
                    Scan boot sector.................: on
                    Boot sectors.....................: D:,
                    Scan memory......................: on
                    Process scan.....................: on
                    Scan registry....................: on
                    Search for rootkits..............: on
                    Scan all files...................: All files
                    Scan archives....................: on
                    Recursion depth..................: 20
                    Smart extensions.................: on
                    Macro heuristic..................: on
                    File heuristic...................: high

                    Start of the scan: dimanche 17 février 2008 18:51

                    Starting search for hidden objects.
                    '52335' objects were checked, '0' hidden objects were found.

                    The scan of running processes will be started
                    Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
                    Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
                    Scan process 'avscan.exe' - '1' Module(s) have been scanned
                    Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned
                    Scan process 'alg.exe' - '1' Module(s) have been scanned
                    Scan process 'kpf4gui.exe' - '1' Module(s) have been scanned
                    Scan process 'StarWindServiceAE.exe' - '1' Module(s) have been scanned
                    Scan process 'kpf4ss.exe' - '1' Module(s) have been scanned
                    Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
                    Scan process 'CDAC11BA.EXE' - '1' Module(s) have been scanned
                    Scan process 'sched.exe' - '1' Module(s) have been scanned
                    Scan process 'LastFMHelper.exe' - '1' Module(s) have been scanned
                    Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
                    Scan process 'WCESCOMM.EXE' - '1' Module(s) have been scanned
                    Scan process 'CursorXP.exe' - '1' Module(s) have been scanned
                    Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
                    Scan process 'rundll32.exe' - '1' Module(s) have been scanned
                    Scan process 'avguard.exe' - '1' Module(s) have been scanned
                    Scan process 'avgnt.exe' - '1' Module(s) have been scanned
                    Scan process 'SMTray.exe' - '1' Module(s) have been scanned
                    Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
                    Scan process 'aawservice.exe' - '1' Module(s) have been scanned
                    Scan process 'explorer.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'svchost.exe' - '1' Module(s) have been scanned
                    Scan process 'lsass.exe' - '1' Module(s) have been scanned
                    Scan process 'services.exe' - '1' Module(s) have been scanned
                    Scan process 'winlogon.exe' - '1' Module(s) have been scanned
                    Scan process 'csrss.exe' - '1' Module(s) have been scanned
                    Scan process 'smss.exe' - '1' Module(s) have been scanned
                    33 processes with 33 modules were scanned

                    Starting master boot sector scan:
                    Master boot sector HD0
                    [NOTE] No virus was found!

                    Start scanning boot sectors:
                    Boot sector 'C:\'
                    [NOTE] No virus was found!
                    Boot sector 'D:\'
                    [NOTE] No virus was found!

                    Starting to scan the registry.
                    The registry was scanned ( '24' files ).

                    Starting the file scan:

                    Begin scan in 'C:\'
                    C:\hiberfil.sys
                    [WARNING] The file could not be opened!
                    C:\pagefile.sys
                    [WARNING] The file could not be opened!
                    C:\Documents and Settings\Olivier\Mes documents\SmitfraudFix.exe
                    [DETECTION] Contains detection pattern of the dropper DR/Tool.Reboot.F.36
                    [WARNING] The file was ignored!
                    C:\WINDOWS\Downloaded Program Files\30ETPLUS.exe
                    [WARNING] 'Contains detection pattern of the dial-up program DIAL/Generic'. This detection is probably an error. Please send us this file immediately for further analysis.
                    C:\WINDOWS\system32\drivers\sptd.sys
                    [WARNING] The file could not be opened!
                    Begin scan in 'D:\' <SYSTEM_SAV>

                    End of the scan: dimanche 17 février 2008 20:07
                    Used time: 1:15:32 min

                    The scan has been done completely.

                    3869 Scanning directories
                    217422 Files were scanned
                    1 viruses and/or unwanted programs were found
                    0 Files were classified as suspicious:
                    0 files were deleted
                    0 files were repaired
                    0 files were moved to quarantine
                    0 files were renamed
                    3 Files cannot be scanned
                    217421 Files not concerned
                    7355 Archives were scanned
                    5 Warnings
                    0 Notes
                    52335 Objects were scanned with rootkit scan
                    0 Hidden objects were found

                    ----------------------------------------------------------------------------------------

                    Hijackthis

                    Logfile of Trend Micro HijackThis v2.0.2
                    Scan saved at 20:55:20, on 17/02/2008
                    Platform: Windows XP SP2 (WinNT 5.01.2600)
                    MSIE: Internet Explorer v7.00 (7.00.6000.16608)
                    Boot mode: Normal

                    Running processes:
                    C:\WINDOWS\System32\smss.exe
                    C:\WINDOWS\system32\winlogon.exe
                    C:\WINDOWS\system32\services.exe
                    C:\WINDOWS\system32\lsass.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\WINDOWS\System32\svchost.exe
                    C:\WINDOWS\Explorer.EXE
                    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
                    C:\WINDOWS\system32\spoolsv.exe
                    C:\WINDOWS\system32\smtray.exe
                    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
                    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                    C:\WINDOWS\system32\RUNDLL32.EXE
                    C:\WINDOWS\system32\ctfmon.exe
                    C:\Program Files\CursorXP\CursorXP.exe
                    C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
                    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                    C:\Program Files\Last.fm\LastFMHelper.exe
                    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                    C:\WINDOWS\System32\drivers\CDAC11BA.EXE
                    C:\WINDOWS\system32\nvsvc32.exe
                    C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
                    C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
                    C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
                    C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
                    C:\Program Files\MSN Messenger\usnsvc.exe
                    C:\Program Files\Mozilla Firefox\firefox.exe
                    C:\Program Files\MSN Messenger\msnmsgr.exe
                    C:\WINDOWS\System32\svchost.exe
                    C:\Program Files\Windows Media Player\wmplayer.exe
                    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
                    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.proximus.be/pickx
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                    O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                    O4 - HKLM\..\Run: [Smapp] smtray.exe
                    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
                    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                    O4 - HKCU\..\Run: [CursorXP] C:\Program Files\CursorXP\CursorXP.exe
                    O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
                    O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
                    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
                    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
                    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
                    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
                    O4 - Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper.exe
                    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                    O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
                    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
                    O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
                    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                    O14 - IERESET.INF: START_PAGE_URL=https://www.proximus.be/pickx
                    O16 - DPF: Dexia Netbanking - http://netbanking.dexia.be/PC//Dynamic/Shared/Applet//DexiaIIA.cab
                    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
                    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
                    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
                    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
                    O16 - DPF: {7A32634B-029C-4836-A023-528983982A49} - http://fdl.msn.com/public/chat/msnchat42.cab
                    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://fdl.msn.com/public/chat/msnchat45.cab
                    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
                    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                    O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
                    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                    O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
                    O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
                    1. Contributeur
                      bonsoir,

                      tu sais ce que c´est que ceci :

                      C:\WINDOWS\Downloaded Program Files\30ETPLUS.exe

                      @+
                      1. Non je ne sais pas , j'ai été regardé dans le répertoire en question mais il n'est pas la
                        1. Contributeur
                          salus aless,

                          Télécharge ceci: (by Moe) :

                          http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe

                          Double clic sur Lopxpsetup.exe pour lancer l'installation
                          Au menu, choisir l'option 1
                          Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer !
                          Une rapport sera alors crée, à copie/colle en entier sur le forum.

                          @+
                          1. voici le rapport

                            # Rapport Lopxp fait le lun. 18/02/2008 à 15:08:22
                            # Exécuté dans : C:\Program Files\Lopxp
                            # Version 3.08 - Maj du 15/02/2008

                            ========== Listing des dossiers Application Data

                            +- C:\Documents and Settings\Administrateur\Application Data

                            2001-05-01 à 00:45:01 - Adobe
                            2001-05-01 à 00:20:25 - Identities
                            2001-05-01 à 00:45:01 - InterTrust
                            2001-05-01 à 00:20:07 - Microsoft

                            +- C:\Documents and Settings\Administrateur\Local Settings\Application Data

                            2001-05-01 à 00:20:36 - Microsoft

                            +- C:\Documents and Settings\All Users\Application Data

                            2006-09-02 à 11:51:14 - Adobe
                            2007-11-01 à 15:52:57 - Avira
                            2006-07-20 à 08:12:25 - BOONTY
                            2008-02-08 à 20:08:29 - Last.fm
                            2008-02-11 à 18:49:18 - Lavasoft
                            2006-05-01 à 07:33:24 - Macrovision
                            2008-02-08 à 23:57:05 - Messenger Plus!
                            2007-11-01 à 23:16:34 - Microsoft
                            2002-10-04 à 18:07:05 - MSN6
                            2002-06-08 à 13:58:32 - QuickTime
                            2008-02-12 à 20:46:17 - Spybot - Search & Destroy
                            2006-03-28 à 17:11:24 - Support.com
                            2007-09-21 à 20:43:57 - Symantec
                            2006-07-19 à 11:49:39 - Windows Genuine Advantage
                            2006-11-25 à 14:47:20 - Windows Live Toolbar
                            2006-09-02 à 11:53:03 - Yahoo! Companion

                            +- C:\Documents and Settings\Olivier\Application Data

                            2002-08-31 à 16:07:41 - ACD Systems
                            2006-10-14 à 19:30:24 - Adobe
                            2006-09-02 à 11:50:00 - AdobeAUM
                            2005-09-13 à 16:01:57 - AdobeUM
                            2002-06-08 à 14:03:45 - ArcSoft
                            2006-07-04 à 10:07:22 - Atari
                            2007-10-23 à 20:01:37 - BitTorrent
                            2006-07-25 à 09:36:18 - CopyToDvd
                            2004-01-31 à 17:01:19 - Dossier de téléchargement Share-to-Web
                            2002-06-08 à 13:37:35 - Dossier de téléchargement Share-to-Web
                            2006-07-25 à 08:42:53 - Droppix
                            2006-06-05 à 10:14:16 - Google
                            2002-11-10 à 23:11:08 - Help
                            2002-10-05 à 09:39:24 - Identities
                            2001-05-01 à 00:45:01 - InterTrust
                            2007-11-01 à 22:27:44 - Leadertech
                            2006-05-05 à 19:05:52 - Macromedia
                            2008-02-11 à 18:46:31 - Microsoft
                            2008-02-07 à 23:22:41 - Mozilla
                            2003-02-16 à 07:55:53 - MSN6
                            2007-10-20 à 18:50:11 - SecuROM
                            2007-10-20 à 19:03:42 - Sports Interactive
                            2006-06-16 à 14:20:16 - Steinberg
                            2006-05-18 à 05:20:50 - Sun
                            2006-05-05 à 17:02:20 - Symantec
                            2008-02-10 à 10:23:32 - SystemRequirementsLab
                            2006-11-18 à 21:10:13 - Talkback
                            2008-02-17 à 10:58:36 - uTorrent
                            2006-05-30 à 16:38:35 - vlc
                            2007-09-21 à 20:51:10 - Vso

                            +- C:\Documents and Settings\Olivier\Local Settings\Application Data

                            2005-09-13 à 16:01:56 - Adobe
                            2008-02-08 à 14:15:05 - Ares
                            2008-02-09 à 09:27:55 - Copernic
                            2006-06-05 à 10:14:16 - Google
                            2002-06-08 à 13:39:18 - Help
                            2002-10-04 à 18:32:59 - Identities
                            2008-02-11 à 16:21:44 - Last.fm
                            2008-02-13 à 12:35:15 - Microsoft
                            2006-11-18 à 21:08:43 - Mozilla
                            2006-09-01 à 15:45:16 - Pando
                            2007-11-02 à 13:52:13 - Stardock

                            +- C:\Documents and Settings\Propri‚taire\Application Data

                            2001-05-01 à 00:45:01 - Adobe
                            2001-05-01 à 00:20:25 - Identities
                            2001-05-01 à 00:45:01 - InterTrust
                            2001-05-01 à 00:20:07 - Microsoft

                            +- C:\Documents and Settings\Propri‚taire\Local Settings\Application Data

                            2001-05-01 à 00:20:36 - Microsoft

                            ========== Listing du dossier Program Files

                            +- C:\Program Files

                            2007-11-01 à 22:28:16 - Adobe
                            2007-10-20 à 15:35:44 - Alcohol Soft
                            2006-05-05 à 15:10:09 - Alwil Software
                            2001-05-01 à 00:42:01 - Analog Devices
                            2006-09-05 à 09:16:15 - Ares
                            2004-05-28 à 15:48:37 - AvantGo Connect
                            2007-11-01 à 15:52:57 - Avira
                            2007-10-20 à 22:14:03 - BitTorrent
                            2007-09-21 à 21:24:55 - CCleaner
                            2004-05-28 à 15:48:35 - Common Files
                            2006-08-16 à 07:15:01 - Creative
                            2007-11-02 à 13:52:04 - CursorXP
                            2002-12-18 à 17:19:30 - directx
                            2007-09-29 à 23:30:41 - DivX
                            2008-02-17 à 11:14:01 - eMule
                            2008-02-16 à 21:09:34 - EuroPoker
                            2008-02-16 à 22:12:59 - Fichiers communs
                            2006-04-15 à 15:40:21 - FotoStation Easy
                            2006-07-18 à 09:20:40 - Google
                            2008-02-16 à 23:16:52 - GUILD WARS
                            2006-04-15 à 15:38:15 - Hewlett-Packard
                            2002-10-02 à 17:22:16 - HP Creative Idea CD(2)
                            2007-09-22 à 08:40:07 - InstallShield Installation Information
                            2008-02-12 à 21:09:56 - Internet Explorer
                            2008-02-12 à 20:37:50 - Java
                            2008-02-08 à 20:07:50 - Last.fm
                            2008-02-11 à 18:48:45 - Lavasoft
                            2008-02-18 à 14:08:28 - Lopxp
                            2006-08-15 à 11:21:23 - Macrogaming
                            2007-11-02 à 11:14:50 - Messenger
                            2008-02-08 à 19:44:59 - Messenger Plus! Live
                            2008-02-09 à 10:19:50 - MessengerPlus! 3
                            2002-10-02 à 17:22:16 - Micrografx(2)
                            2004-05-28 à 15:48:39 - Microsoft ActiveSync
                            2001-05-01 à 00:15:31 - microsoft frontpage
                            2001-05-01 à 00:49:59 - Microsoft Office
                            2001-05-01 à 00:54:53 - Microsoft Works
                            2001-05-01 à 00:56:55 - ModemXpert
                            2007-11-01 à 23:04:21 - Movie Maker
                            2008-02-18 à 14:06:11 - Mozilla Firefox
                            2008-02-07 à 23:33:47 - mozilla.org
                            2001-05-01 à 00:10:08 - MSN Gaming Zone
                            2008-02-09 à 10:28:16 - MSN Messenger
                            2002-10-20 à 16:16:15 - ndvia(30.82)
                            2007-11-01 à 22:56:14 - NetMeeting
                            2001-05-01 à 00:56:50 - NetWaiting
                            2007-11-02 à 11:14:16 - Outlook Express
                            2002-06-08 à 13:58:41 - QuickTime
                            2006-04-16 à 08:17:24 - Services en ligne
                            2008-02-17 à 21:05:01 - SopCast
                            2008-02-12 à 20:44:10 - Spybot - Search & Destroy
                            2008-02-07 à 23:48:45 - Sunbelt Software
                            2006-03-28 à 17:11:30 - support.com
                            2007-09-21 à 20:48:25 - Symantec
                            2008-02-12 à 18:20:34 - Trend Micro
                            2001-05-01 à 00:20:13 - Uninstall Information
                            2008-02-08 à 11:27:55 - uTorrent
                            2006-05-30 à 16:37:59 - VideoLAN
                            2008-02-08 à 19:44:57 - Windows Live
                            2007-12-23 à 00:54:34 - Windows Live Toolbar
                            2007-11-02 à 00:05:53 - Windows Media Connect 2
                            2008-02-08 à 20:08:27 - Windows Media Player
                            2007-11-01 à 22:56:02 - Windows NT
                            2006-05-05 à 19:08:17 - WindowsUpdate
                            2006-12-11 à 15:07:16 - WinRAR
                            2001-05-01 à 00:15:31 - xerox
                            2006-09-02 à 11:39:46 - Yahoo!
                            2007-10-20 à 18:49:07 - Zero G Registry

                            ========== Tâches planifiées

                            defrag.job: C:\WINDOWS\system32\defrag.exe
                            Vérifier les mises à jour de Windows Live Toolbar.job: C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE

                            ========== Clés registre

                            ========== Bloqueur popups Internet Explorer

                            ========== Suggestion ( /!\ Nécessite une interprétation.) ==========

                            +- Registre : Aucune suggestion.

                            - Fin du rapport -
                            1. Contributeur
                              ok

                              regarde encore si tu voie ceci :

                              C:\WINDOWS\Downloaded Program Files\30ETPLUS.exe

                              en fesant ceci :

                              Affiche tous les fichiers et dossiers :

                              Pour cela :

                              Clique sur démarrer/panneau de configuration/option des dossiers/affichage

                              Cocher afficher les dossiers cacher

                              Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)"

                              Décocher masquer les extensions dont le type est connu

                              Puis fais «Ok» pour valider les changements.

                              Et appliquer !

                              supprime ceci :

                              C:\Documents and Settings\All Users\Application Data\BOONTY

                              As tu installé messenger plus avec le sponssor?

                              @+
                              1. Le fichier n'est tjrs pas la même en faisant ce que tu as dis..

                                j'ai supprimé le fichier boonty

                                et pour le sponsor msn + je ne pense pas que je l'ai installé mais je ne suis pas sur et certain..D'habitude je fais attention quand je l'installe donc..
                                1. Contributeur
                                  Bon

                                  sponssor msn+ = publicités de type cid, si tu en as c´est que tu l´as installé... dis moi

                                  vide tes fichiers temporaires avec ceci :

                                  Vide tes fichiers temporaires avec ceci:
                                  ->Clean Up 40:
                                  http://pageperso.aol.fr/balltrap34/CleanUp40.exe
                                  ->aide en image:(merci a Balltrap34)
                                  http://pageperso.aol.fr/balltrap34/democleanup.htm

                                  click sur option et décoche la case devant : delete prefect files

                                  vide le manuellement :

                                  :: Le contenu du dossier prefetch ::

                                  * C:\WINDOWS\Prefetch <= sauf le fichier layout.ini

                                  * Ne pas oublier de vider la corbeille !

                                  comment va ton pc maintenant ?

                                  @+
                                  1. Contributeur
                                    re,

                                    tu as toujours le message alors?

                                    vas voir dans panneau de configuration > outils d´administation > peripherique > sous usb deploie et regarde si il reste une trace de bluethoot si oui click droit et suprimer

                                    dis moi quoi

                                    @+
                                    1. C est le gestionnaire de phériphérique que tu parles ??

                                      Si oui aucune trace de bluetooth :s
                                      1. Contributeur
                                        re,

                                        oui c´est le gestionnaire de peripherique.

                                        fais ceci pour voir :

                                        Ouvre le bloc notes (Démarrer >> exécuter et tape notepad), et copie tout ce qui ci-dessous:

                                        @ echo off

                                        if exist \G!RLY.TXT del \G!RLY.TXT
                                        FOR %%A in (C D E F G H I J K L M N O P Q R S T U V W X Y Z) DO IF EXIST %%A: (
                                        IF EXIST %%A:\autorun.inf ECHO %%A:\autorun.inf Présent>>\G!RLY.TXT
                                        IF NOT EXIST %%A:\autorun.inf ECHO %%A:\autorun.inf Non trouvé>>\G!RLY.TXT
                                        IF EXIST %%A:\MS32DLL.dll.vbs ECHO %%A:\MS32DLL.dll.vbs Présent>>\G!RLY.TXT
                                        IF NOT EXIST %%A:\MS32DLL.dll.vbs ECHO %%A:\MS32DLL.dll.vbs Non trouvé>>\G!RLY.TXT
                                        )
                                        IF EXIST %WINDIR%\MS32DLL.dll.vbs (
                                        ECHO %WINDIR%\MS32DLL.dll.vbs Présent>>\G!RLY.TXT) else (
                                        ECHO %WINDIR%\MS32DLL.dll.vbs non trouvé >>\G!RLY.TXT)
                                        REG QUERY "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run" >>\G!RLY.TXT
                                        REG QUERY "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run" >>\G!RLY.TXT
                                        notepad \G!RLY.TXT
                                        exit

                                        Dans le menu du bloc notes, clic sur "Fichier" >> Enregistrer sous.
                                        Choisis le bureau comme lieu d'enregistrement, puis dans:

                                        Type -> choisis "tous les fichiers"
                                        Nom du fichier -> tape G!RLY.bat
                                        clic sur enregistrer.

                                        Sur ton bureau tu auras maintenant un fichier nommé G!RLY.bat.

                                        Connecte les périphériques externes susceptibles d'avoir été infectés au pc:
                                        Clé USB, DD externe... etc

                                        Puis une fois fait, double clic sur le fichier G!RLY.bat.
                                        Une fenêtre noire va s'ouvrir et se refermer rapidement, c'est normal.
                                        Le bloc note va s'ouvrir ensuite avec le listing des fichiers que le script aura détecté.
                                        Copie et colle ici le contenu de ce rapport.

                                        @+
                                        • 1
                                        • 2