Pub...

Bonjour,
je reçois plein de pub sur mon ordinateur...
comment faire pour les enlever?
Configuration: Windows XP
Firefox 2.0.0.12

16 réponses

Résumé de la discussion

Des publicités indésirables apparaissent sur un ordinateur Windows XP utilisant Firefox 2.0 et les méthodes pour s’en débarrasser et nettoyer le système en cas de répétition et de risques restants. Plusieurs propositions privilégient un balayage malware avec Malwarebytes Anti-Malware, suivie d’un nettoyage en mode sans échec et d’un rapport pour identifier les éléments indésirables et des mesures pour neutraliser les scripts malveillants. Des solutions complémentaires valident les résultats avec des outils comme Navilog et HijackThis, qui permettent d’identifier et de supprimer les éléments suspects dans les répertoires Windows et Program Files. La plupart des échanges recommandent ensuite redémarrage en mode sans échec et conservation des rapports pour analyse, sans conclure sur la réussite immédiate ou l’état final du système.

Bobot (l’IA à votre service)
  1. bonsoir

    tu poste un rapport hijackthis http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis
    = Clic-droit sur Hijackthis
    = Extraire ici ( ou extraire sans confirmation ou tout ou unzip)
    = clic droit sur Hijackthis ==> renommer ==> écrire : test.exe ( à la place de hijackthis.exe) <== Important
    =Double-clic dessus
    = Clic Do a system scan and save the log
    =coller le rapport
    si problème voir l'aide
    http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

    Tu fais un clic droit sur ce lien :
    http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

    Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
    Fais un clic droit sur navilog1.zip et choisis "tout extraire"
    Ensuite double clique sur navilog1.exe pour lancer l'installation.
    Une fois l'installation terminée, le fix s'exécutera automatiquement.
    (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

    Laisse-toi guider. Au menu principal, choisis 1 et valides.
    (ne fais pas le choix 2,3 ou 4 sans notre avis/accord)
    Patiente jusqu'au message :
    *** Analyse Termine le ..... ***
    Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
    Copie-colle l'intégralité dans une réponse. Referme le blocnote.
    Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
    1. Merci,
      voila pour le rapport

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 10:16:40, on 24/03/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\Macromedia\Flash Media Server 2\FMSMaster.exe
      C:\Program Files\Macromedia\Flash Media Server 2\FMSAdmin.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\Macromedia\Flash Media Server 2\FMSEdge.exe
      C:\Program Files\Macromedia\Flash Media Server 2\FMSCore.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\WgaTray.exe
      C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      C:\Acer\Empowering Technology\eRecovery\Monitor.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\Program Files\Acer\Acer eMode Management\AspireService.exe
      C:\Program Files\Acer\Acer eConsole\MediaSync.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\WINDOWS\RTHDCPL.EXE
      C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
      C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
      C:\Program Files\Google\Google Updater\GoogleUpdater.exe
      C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
      C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
      C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
      C:\Program Files\Windows Live\Messenger\usnsvc.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.free.fr/freebox/index.html
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: VirtualCamera IEMenu Class - {0246A1A7-820A-469A-85A7-7B7F01EB808C} - (no file)
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
      O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
      O4 - HKLM\..\Run: [LaunchApp] Alaunch
      O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
      O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
      O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
      O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
      O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
      O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
      O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
      O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
      O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
      O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
      O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
      O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=https://www.free.fr/freebox/index.html
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
      O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
      O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
      O16 - DPF: {2D2BEE6E-3C9A-4D58-B9EC-458EDB28D0F6} - https://www.afternic.com/domains/drivecleaner.com
      O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by103fd.bay103.hotmail.msn.com/activex/HMAtchmt.ocx
      O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
      O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Flash Media Server (FMS) (FMS) - Macromedia, Inc. - C:\Program Files\Macromedia\Flash Media Server 2\FMSMaster.exe
      O23 - Service: Flash Media Administration Server (FMSAdmin) - Macromedia, Inc. - C:\Program Files\Macromedia\Flash Media Server 2\FMSAdmin.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
  2. bonjour

    Double cliques sur le raccourci Navilog1 présent sur le bureau et laisse-toi guider.
    Au menu principal, choisis 2 et valides.
    (ne fais pas le choix ,3 ou 4 sans notre avis/accord)

    Le fix va t'informer qu'il va alors redémarrer ton PC
    Fermes toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts
    Appuies sur une touche comme demandé.
    (si ton Pc ne redémarre pas automatiquement, fais le toi même)
    Au redémarrage de ton PC, choisis ta session habituelle.

    Patiente jusqu'au message :
    *** Nettoyage Termine le ..... ***
    Le bloc-notes va s'ouvrir.
    Sauvegarde le rapport de manière à le retrouver
    Referme le bloc-notes. Ton bureau va réapparaitre

    PS:Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
    Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter"
    Tape explorer et valide. Celà te fera apparaitre ton bureau.

    Postes le rapport içi.
    1. Voila le rapport navilog:
      Clean Navipromo version 3.5.1 commencé le 24/03/2008 à 11:20:07,82

      Outil exécuté depuis C:\Program Files\navilog1
      Session actuelle : "II"
      Actual User Account : "II"

      Mise à jour le 23.03.2008 à 22h00 par IL-MAFIOSO

      Microsoft Windows XP [version 5.1.2600]
      Internet Explorer : 6.0.2900.2180
      Système de fichiers : NTFS

      Mode suppression automatique
      avec prise en charge résultats Catchme et GNS

      *** Creation backups fichiers trouvés par Catchme ***

      Copie vers "C:\Program Files\navilog1\Backupnavi"

      Copie C:\WINDOWS\system32\kvofkrzqjf.dat réalisée avec succès !
      Copie C:\WINDOWS\system32\kvofkrzqjf.exe réalisée avec succès !
      Copie C:\WINDOWS\system32\kvofkrzqjf_nav.dat réalisée avec succès !
      Copie C:\WINDOWS\system32\kvofkrzqjf_navps.dat réalisée avec succès !

      *** Suppression des fichiers trouvés avec Catchme ***

      C:\WINDOWS\system32\kvofkrzqjf.dat supprimé !
      C:\WINDOWS\system32\kvofkrzqjf.exe supprimé !
      C:\WINDOWS\system32\kvofkrzqjf_nav.dat supprimé !
      C:\WINDOWS\system32\kvofkrzqjf_navps.dat supprimé !

      ** 2ème passage avec résultats Catchme **

      * Dans C:\WINDOWS\system32 *

      C:\WINDOWS\prefetch\kvofkrzqjf*.pf trouvé !
      Copie C:\WINDOWS\prefetch\kvofkrzqjf*.pf réalisée avec succès !
      C:\WINDOWS\prefetch\kvofkrzqjf*.pf supprimé !

      * Dans "C:\Documents and Settings\II\locals~1\applic~1" *

      *** Suppression avec sauvegardes résultats GenericNaviSearch ***

      * Suppression dans C:\WINDOWS\System32 *

      * Suppression dans "C:\Documents and Settings\II\locals~1\applic~1" *

      * Suppression dans "C:\docume~1\Administrateur\locals~1\applic~1" *

      * Suppression dans "C:\docume~1\Vincent Bommarito\locals~1\applic~1" *

      *** Suppression dossiers dans C:\WINDOWS ***

      *** Suppression dossiers dans C:\Program Files ***

      *** Suppression dossiers dans C:\DOCUME~1\ALLUSE~1\APPLIC~1 ***

      *** Suppression dossiers dans "C:\Documents and Settings\II\applic~1" ***

      *** Suppression dossiers dans "C:\Documents and Settings\II\locals~1\applic~1" ***

      *** Suppression dossiers dans "C:\Documents and Settings\II\menud+~1\progra~1" ***

      *** Suppression dossiers dans C:\DOCUME~1\ALLUSE~1\MENUD?~1\PROGRA~1 ***

      *** Suppression fichiers ***

      C:\WINDOWS\pack.epk supprimé !
      C:\WINDOWS\system32\nvs2.inf supprimé !

      *** Suppression fichiers temporaires ***

      Nettoyage contenu C:\WINDOWS\Temp effectué !
      Nettoyage contenu C:\Documents and Settings\II\locals~1\Temp effectué !

      *** Traitement Recherche complémentaire ***
      (Recherche fichiers spécifiques)

      1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

      2)Recherche, création sauvegardes et suppression Heuristique :

      * Dans C:\WINDOWS\system32 *

      igvoembcq.dat trouvé !
      Copie igvoembcq.dat réalisée avec succès !
      igvoembcq.dat supprimé !

      igvoembcq_nav.dat trouvé !
      Copie igvoembcq_nav.dat réalisée avec succès !
      igvoembcq_nav.dat supprimé !

      igvoembcq_navps.dat trouvé !
      Copie igvoembcq_navps.dat réalisée avec succès !
      igvoembcq_navps.dat supprimé !

      sgjuamylxc_navtmp.dat trouvé !
      Copie sgjuamylxc_navtmp.dat réalisée avec succès !
      sgjuamylxc_navtmp.dat supprimé !

      * Dans "C:\Documents and Settings\II\locals~1\applic~1" *

      * Dans "C:\docume~1\Administrateur\locals~1\applic~1" *

      * Dans "C:\docume~1\Vincent Bommarito\locals~1\applic~1" *

      *** Sauvegarde du Registre vers dossier Backupnavi ***

      sauvegarde du Registre réalisée avec succès !

      *** Nettoyage Registre ***

      Nettoyage Registre Ok

      *** Certificats ***

      Certificat Egroup supprimé !
      Certificat Electronic-Group supprimé !
      Certificat OOO-Favorit supprimé !
      Certificat Sunny-Day-Design-Ltdt absent !

      *** Nettoyage terminé le 24/03/2008 à 11:24:05,71 ***

      merci de ton aide
  3. Télécharge clean.zip
    http://www.malekal.com/download/clean.zip
    Décompresse-le sur ton bureau (clic droit / extraire tout), tu dois obtenir un dossier clean.
    Ouvre le dossier Clean qui se trouve sur ton bureau.
    Double-clic sur clean.cmd.
    Une fenêtre noire va apparaître, suis les consignes.
    Poste le rapport qui se trouve ici C:\rapport_clean.txt
    1. jusqu'au téléchargement de Clean je te suis,mais ensuite...y'a juste un clean et c'est un fichier de commande windows et quand je l'ouvre deux possibilités s'ouvre a moi...
      recherche ou désinfection
      et lorsque je fais recherche sa me proposait d'envoyer mes fichiers sur un site mais par méfiance et parce que je veux confirmation j'ai stopper
  4. tu peut passer et continu jusqu'au rapport

    a plus tard
    1. voila j'ai réussis

      24/03/2008 a 12:32:39,92

      *** Recherche des fichiers dans C:

      *** Recherche des fichiers dans C:\WINDOWS\

      *** Recherche des fichiers dans

      C:\WINDOWS\system32
      C:\WINDOWS\system32\SpoonUninstall.exe FOUND
      "C:\WINDOWS\Downloaded Program

      Files\CONFLICT.1" FOUND

      *** Recherche des fichiers dans C:\Program

      Files
      "C:\Program Files\Video Add-on\" FOUND
      "C:\Program Files\Viewpoint\" FOUND
      *** Fin du rapport !

      merci
  5. Redémarre ton PC en mode sans échec :
    Redémarre en mode sans échec (Pour cela : démarrer le PC en tapotant sur la touche F8 du clavier jusqu'à ce que le menu des options avancées de Windows apparaisse puis avec les touches fléchées du clavier, sélectionner Mode sans échec puis appuyer sur la touche Entrée...)
    Double-clic sur clean. Cela va ouvrir une fenêtre noire.
    Un menu va apparaître, choisis l'option 2 .
    Clean va travailler.
    colle le rapport sur ta reponse.
    1. et voila!

      Script execute en mode sans echec
      Rapport clean par Malekal_morte - http://www.malekal.com
      Script execute en mode sans echec 24/03/2008 a 12:49:42,56

      Microsoft Windows XP [version 5.1.2600]

      *** Suppression des fichiers dans C:

      *** Suppression des fichiers dans C:\WINDOWS\

      *** Suppression des fichiers dans C:\WINDOWS\system32
      tentative de suppression de C:\WINDOWS\system32\SpoonUninstall.exe
      tentative de suppression de "C:\WINDOWS\Downloaded Program Files\CONFLICT.1"

      *** Suppression des fichiers dans C:\Program Files
      tentative de suppression de "C:\Program Files\Video Add-on\"
      tentative de suppression de "C:\Program Files\Viewpoint\"

      *** Suppression des clefs du registre effectuee..
      *** Fin du rapport !

      une fois que le nettoyage sera fait tu pourras me donner une liste de logiciel protegeant des spyware?
      stp
  6. télécharges smitfraudfix :

    En image :
    http://siri.urz.free.fr/Fix/SmitfraudFix.php

    tu doubles cliques sur smitfraudfix.cmd et tu choisi l option 1
    cela vas générer un rapport.

    Copie/colle le rapport sur le forum stp.
    1. Voici le rapport

      SmitFraudFix v2.307

      Rapport fait à 13:25:11,51, 24/03/2008
      Executé à partir de C:\Documents and Settings\II\Bureau\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
      Le type du système de fichiers est NTFS
      Fix executé en mode normal

      »»»»»»»»»»»»»»»»»»»»»»»» Process

      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\Macromedia\Flash Media Server 2\FMSMaster.exe
      C:\Program Files\Macromedia\Flash Media Server 2\FMSAdmin.exe
      C:\Program Files\Macromedia\Flash Media Server 2\FMSEdge.exe
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\Macromedia\Flash Media Server 2\FMSCore.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\WgaTray.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      C:\Acer\Empowering Technology\eRecovery\Monitor.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      C:\Program Files\Acer\Acer eMode Management\AspireService.exe
      C:\Program Files\Acer\Acer eConsole\MediaSync.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\WINDOWS\RTHDCPL.EXE
      C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
      C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
      C:\Program Files\Google\Google Updater\GoogleUpdater.exe
      C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
      C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
      C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
      C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Windows Media Player\wmplayer.exe
      C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe
      C:\WINDOWS\system32\cmd.exe

      »»»»»»»»»»»»»»»»»»»»»»»» hosts

      Fichier hosts corrompu !

      127.0.0.1 www.legal-at-spybot.info
      127.0.0.1 legal-at-spybot.info

      »»»»»»»»»»»»»»»»»»»»»»»» C:\

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

      C:\WINDOWS\system32\fftktmk.dll PRESENT !

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\II

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\II\Application Data

      »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

      »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\II\Favoris

      »»»»»»»»»»»»»»»»»»»»»»»» Bureau

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

      »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

      »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
      "Source"="About:Home"
      "SubscribedURL"="About:Home"
      "FriendlyName"="Ma page d'accueil"

      »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      IEDFix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri

      »»»»»»»»»»»»»»»»»»»»»»»» VACFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      VACFix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri

      »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
      "AppInit_DLLs"=""

      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
      "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
      "System"=""

      »»»»»»»»»»»»»»»»»»»»»»»» Rustock

      »»»»»»»»»»»»»»»»»»»»»»»» DNS

      Description: Marvell Yukon 88E8001/8003/8010 PCI Gigabit Ethernet Controller #2 - Miniport d'ordonnancement de paquets
      DNS Server Search Order: 212.27.54.252
      DNS Server Search Order: 212.27.53.252

      HKLM\SYSTEM\CCS\Services\Tcpip\..\{F55CB5BB-28F6-4223-A70C-BC805EE6D35C}: DhcpNameServer=212.27.54.252 212.27.53.252
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{F55CB5BB-28F6-4223-A70C-BC805EE6D35C}: DhcpNameServer=212.27.54.252 212.27.53.252
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{F55CB5BB-28F6-4223-A70C-BC805EE6D35C}: DhcpNameServer=212.27.54.252 212.27.53.252
      HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
      HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
      HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252

      »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

      »»»»»»»»»»»»»»»»»»»»»»»» Fin

      merci
  7. Démarre en mode sans échec :
    Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter.
    Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
    Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
    (Si F8 ne marche pas utilise la touche F5).
    ----------------------------------------------------------------------------
    Relance le programme Smitfraud,
    Cette fois choisit l’option 2, répond oui a tous ;
    Sauvegarde le rapport, Redémarre en mode normal,
    copie/colle le rapport sauvegardé sur le forum
    1. voila le scan que tu m'as demandé:

      SmitFraudFix v2.307

      Rapport fait à 19:44:18,00, 24/03/2008
      Executé à partir de C:\Documents and Settings\II\Bureau\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
      Le type du système de fichiers est NTFS
      Fix executé en mode sans echec

      »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

      »»»»»»»»»»»»»»»»»»»»»»»» hosts

      127.0.0.1 localhost
      127.0.0.1 // {undo}example.com
      127.0.0.1 babe.the-killer.bz
      127.0.0.1 www.babe.the-killer.bz
      127.0.0.1 babe.k-lined.com
      127.0.0.1 www.babe.k-lined.com
      127.0.0.1 did.i-used.cc
      127.0.0.1 www.did.i-used.cc
      127.0.0.1 coolwwwsearch.com
      127.0.0.1 www.coolwwwsearch.com
      127.0.0.1 coolwebsearch.com
      127.0.0.1 www.coolwebsearch.com
      127.0.0.1 hi.studioaperto.net
      127.0.0.1 www.hi.studioaperto.net
      127.0.0.1 webbrowser.tv
      127.0.0.1 www.webbrowser.tv
      127.0.0.1 wazzupnet.com
      127.0.0.1 www.wazzupnet.com
      127.0.0.1 gueb.com
      127.0.0.1 www.gueb.com
      127.0.0.1 kabex.com
      127.0.0.1 www.kabex.com
      127.0.0.1 hityou.com
      127.0.0.1 www.hityou.com
      127.0.0.1 miosearch.com
      127.0.0.1 www.miosearch.com
      127.0.0.1 213.131.225.2
      127.0.0.1 blue-elefant.com
      127.0.0.1 www.blue-elefant.com
      127.0.0.1 babeweb.de
      127.0.0.1 www.babeweb.de
      127.0.0.1 start-seite.com
      127.0.0.1 www.start-seite.com
      127.0.0.1 sexolymp.com
      127.0.0.1 www.sexolymp.com
      127.0.0.1 toriii.cc
      127.0.0.1 www.toriii.cc
      127.0.0.1 xtipp.de
      127.0.0.1 www.xtipp.de
      127.0.0.1 urawa.cool.ne.jp
      127.0.0.1 777search.com
      127.0.0.1 www.777search.com
      127.0.0.1 ace-webmaster.com
      127.0.0.1 www.ace-webmaster.com
      127.0.0.1 aifind.info
      127.0.0.1 www.aifind.info
      127.0.0.1 amateurliveshow.com
      127.0.0.1 www.amateurliveshow.com
      127.0.0.1 anarchylolita.com
      127.0.0.1 www.anarchylolita.com
      127.0.0.1 anarchyporn.com
      127.0.0.1 approvedlinks.com
      127.0.0.1 www.approvedlinks.com
      127.0.0.1 cantfind.com
      127.0.0.1 www.cantfind.com
      127.0.0.1 castingsamateur.com
      127.0.0.1 www.castingsamateur.com
      127.0.0.1 cyberrape.com
      127.0.0.1 www.cyberrape.com
      127.0.0.1 dialerclub.com
      127.0.0.1 www.dialerclub.com
      127.0.0.1 megago.com
      127.0.0.1 exit.megago.com
      127.0.0.1 www.megago.com
      127.0.0.1 fastmetasearch.com
      127.0.0.1 www.fastmetasearch.com
      127.0.0.1 findwhatevernow.com
      127.0.0.1 www.findwhatevernow.com
      127.0.0.1 globesearch.com
      127.0.0.1 www.globesearch.com
      127.0.0.1 hotfreebies.com
      127.0.0.1 www.hotfreebies.com
      127.0.0.1 krankin.com
      127.0.0.1 www.krankin.com
      127.0.0.1 begin2search.com
      127.0.0.1 www.begin2search.com
      127.0.0.1 mainstreamdollars.com
      127.0.0.1 www.mainstreamdollars.com
      127.0.0.1 live.sex-explorer.com
      127.0.0.1 www.live.sex-explorer.com
      127.0.0.1 loveadot.com
      127.0.0.1 www.loveadot.com
      127.0.0.1 megaseek.net
      127.0.0.1 www.megaseek.net
      127.0.0.1 mixsearch.com
      127.0.0.1 www.mixsearch.com
      127.0.0.1 munky.com
      127.0.0.1 www.munky.com
      127.0.0.1 newtopsites.com
      127.0.0.1 www.newtopsites.com
      127.0.0.1 noblindlinks.com
      127.0.0.1 www.noblindlinks.com
      127.0.0.1 babenet.com
      127.0.0.1 r.babenet.com
      127.0.0.1 www.babenet.com
      127.0.0.1 searchresult.net
      127.0.0.1 www.searchresult.net
      127.0.0.1 sexarena.org
      127.0.0.1 www.sexarena.org
      127.0.0.1 skeech.com
      127.0.0.1 www.skeech.com
      127.0.0.1 by.ru
      127.0.0.1 www.by.ru
      127.0.0.1 superwp.by.ru
      127.0.0.1 sureseeker.com
      127.0.0.1 www.sureseeker.com
      127.0.0.1 wethere.com
      127.0.0.1 www.wethere.com
      127.0.0.1 wowsearch.org
      127.0.0.1 www.wowsearch.org
      127.0.0.1 xxx.com
      127.0.0.1 www.xxx.com
      127.0.0.1 art-xxx.com
      127.0.0.1 websearch.com
      127.0.0.1 www.websearch.com
      127.0.0.1 firehunt.com
      127.0.0.1 www.firehunt.com
      127.0.0.1 partner23.firehunt.com
      127.0.0.1 screensaver.it
      127.0.0.1 www.screensaver.it
      127.0.0.1 cliks.org
      127.0.0.1 www.cliks.org
      127.0.0.1 xads.cliks.org
      127.0.0.1 xwebsearch.biz
      127.0.0.1 www.xwebsearch.biz
      127.0.0.1 znext.com
      127.0.0.1 www.znext.com
      127.0.0.1 rawtocash.net
      127.0.0.1 www.rawtocash.net
      127.0.0.1 7search.com
      127.0.0.1 www.7search.com
      127.0.0.1 zestyfind.com
      127.0.0.1 www.zestyfind.com
      127.0.0.1 ntcor.com
      127.0.0.1 www.ntcor.com
      127.0.0.1 dev.ntcor.com
      127.0.0.1 xrenoder.com
      127.0.0.1 www.xrenoder.com
      127.0.0.1 search.xrenoder.com
      127.0.0.1 193.125.201.50
      127.0.0.1 allcybersearch.com
      127.0.0.1 www.allcybersearch.com
      127.0.0.1 tinybar.com
      127.0.0.1 www.tinybar.com
      127.0.0.1 topsite.us
      127.0.0.1 www.topsite.us
      127.0.0.1 topsites.us
      127.0.0.1 www.topsites.us
      127.0.0.1 topsitez.us
      127.0.0.1 www.topsitez.us
      127.0.0.1 true-counter.com
      127.0.0.1 www.true-counter.com
      127.0.0.1 out.true-counter.com
      127.0.0.1 cnetadd.com
      127.0.0.1 www.cnetadd.com
      127.0.0.1 okmmm.com
      127.0.0.1 www.okmmm.com
      127.0.0.1 139mm.com
      127.0.0.1 www.139mm.com
      127.0.0.1 008k.com
      127.0.0.1 www.008k.com
      127.0.0.1 00hq.com
      127.0.0.1 www.00hq.com
      127.0.0.1 1-domains-registrations.com
      127.0.0.1 www.1-domains-registrations.com
      127.0.0.1 100sexlinks.com
      127.0.0.1 www.100sexlinks.com
      127.0.0.1 157.238.62.14
      127.0.0.1 1sexparty.com
      127.0.0.1 www.1sexparty.com
      127.0.0.1 1stpagehere.com
      127.0.0.1 www.1stpagehere.com
      127.0.0.1 2020search.com
      127.0.0.1 www.2020search.com
      127.0.0.1 209.66.114.130
      127.0.0.1 24teen.com
      127.0.0.1 www.24teen.com
      127.0.0.1 36site.com
      127.0.0.1 www.36site.com
      127.0.0.1 4corn.net
      127.0.0.1 www.4corn.net
      127.0.0.1 66.117.14.138
      127.0.0.1 66.197.100.83
      127.0.0.1 66.250.107.99
      127.0.0.1 66.250.107.100
      127.0.0.1 66.250.107.101
      127.0.0.1 66.250.130.194
      127.0.0.1 66.250.170.107
      127.0.0.1 66.250.57.26
      127.0.0.1 66.250.57.27
      127.0.0.1 66.250.57.28
      127.0.0.1 66.250.74.150
      127.0.0.1 777top.com
      127.0.0.1 www.777top.com
      127.0.0.1 8ad.com
      127.0.0.1 www.8ad.com
      127.0.0.1 aboutclicker.com
      127.0.0.1 www.aboutclicker.com
      127.0.0.1 abrp.net
      127.0.0.1 www.abrp.net
      127.0.0.1 accessthefuture.net
      127.0.0.1 www.accessthefuture.net
      127.0.0.1 acemedic.com
      127.0.0.1 www.acemedic.com
      127.0.0.1 actionbreastcancer.org
      127.0.0.1 www.actionbreastcancer.org
      127.0.0.1 activexupdate.com
      127.0.0.1 www.activexupdate.com
      127.0.0.1 adamsupportgroup.org
      127.0.0.1 www.adamsupportgroup.org
      127.0.0.1 adasearch.com
      127.0.0.1 www.adasearch.com
      127.0.0.1 adipics.com
      127.0.0.1 www.adipics.com
      127.0.0.1 adspics.com
      127.0.0.1 www.adspics.com
      127.0.0.1 adult-engine-search.com
      127.0.0.1 www.adult-engine-search.com
      127.0.0.1 adult-erotic-guide.net
      127.0.0.1 www.adult-erotic-guide.net
      127.0.0.1 adult-friends-finder.net
      127.0.0.1 www.adult-friends-finder.net
      127.0.0.1 adulthyperlinks.com
      127.0.0.1 www.adulthyperlinks.com
      127.0.0.1 adulttds.com
      127.0.0.1 www.adulttds.com
      127.0.0.1 exaccess.ru
      127.0.0.1 www.exaccess.ru
      127.0.0.1 advert.exaccess.ru
      127.0.0.1 agentstudio.com
      127.0.0.1 africaspromise.org
      127.0.0.1 akril.com
      127.0.0.1 alcatel.ws
      127.0.0.1 alfa-search.com
      127.0.0.1 all-inet.com
      127.0.0.1 allabtcars.com
      127.0.0.1 allabtjeeps.com
      127.0.0.1 allhyperlinks.com
      127.0.0.1 allinternetbusiness.com
      127.0.0.1 almarvideos.com
      127.0.0.1 amandamountains.com
      127.0.0.1 amigeek.com
      127.0.0.1 amisbusiness.com
      127.0.0.1 analmovi.com
      127.0.0.1 anin.org
      127.0.0.1 annaromeo.com
      127.0.0.1 antrocity.com
      127.0.0.1 anything4health.com
      127.0.0.1 apsua.com
      127.0.0.1 aregay.com
      127.0.0.1 arheo.com
      127.0.0.1 arizonaweb.org
      127.0.0.1 armitageinn.com
      127.0.0.1 art-func.com
      127.0.0.1 artachnid.com
      127.0.0.1 asiankingkong.com
      127.0.0.1 ass-gals.com
      127.0.0.1 athenrye.com
      127.0.0.1 avian-ads.com
      127.0.0.1 ayakawamura.com
      127.0.0.1 ayumitaniguchi.com
      127.0.0.1 bannedhost.net
      127.0.0.1 barbudafarms.com
      127.0.0.1 barnandfence.com
      127.0.0.1 batsearch.com
      127.0.0.1 baygraphicsllc.com
      127.0.0.1 bb-search.com
      127.0.0.1 bbbsearch.com
      127.0.0.1 bedhome.com
      127.0.0.1 bediadance.com
      127.0.0.1 bellabasketsfl.com
      127.0.0.1 bernaolatwin.com
      127.0.0.1 best-counter.com
      127.0.0.1 best-hardpics.com
      127.0.0.1 best-winning-casino.com
      127.0.0.1 bestcrawler.com
      127.0.0.1 bestfor.ru
      127.0.0.1 bestporngate.com
      127.0.0.1 bestxporno.com
      127.0.0.1 blackjack-free.net
      127.0.0.1 blender.xu.pl
      127.0.0.1 bodaciousbabette.com
      127.0.0.1 boobdoll.com
      127.0.0.1 boobsandtits.com
      127.0.0.1 boobsclub.com
      127.0.0.1 boredlife.com
      127.0.0.1 bowlofogumbo.com
      127.0.0.1 bradcoem.org
      127.0.0.1 brandiyoung.com
      127.0.0.1 brookeburn.com
      127.0.0.1 bucps.com
      127.0.0.1 burgerkingbigscreen.com
      127.0.0.1 buscards.net
      127.0.0.1 bustyrussell.com
      127.0.0.1 buttejazz.org
      127.0.0.1 buyselldomain.net
      127.0.0.1 calcioturris.com
      127.0.0.1 canberracricketcoaching.com
      127.0.0.1 candycantaloupes.com
      127.0.0.1 careers.dulcineasystems.net
      127.0.0.1 carsands.com
      127.0.0.1 carsrentals.net
      127.0.0.1 casino-gambling-1.net
      127.0.0.1 casino-gambling-2.net
      127.0.0.1 casino-onlines.net
      127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
      127.0.0.1 casino2win.net
      127.0.0.1 casinomidas.net
      127.0.0.1 casinonline.net
      127.0.0.1 catallogue.com
      127.0.0.1 catsss.da.ru
      127.0.0.1 caxa.ru
      127.0.0.1 cclebali.org
      127.0.0.1 ceewawires.org
      127.0.0.1 certumgroup.com
      127.0.0.1 chelancatering.com
      127.0.0.1 childrenvilla.com
      127.0.0.1 chips-4-free.com
      127.0.0.1 chrisswasey.com
      127.0.0.1 chriswallace.net
      127.0.0.1 ckick4thumbs.com
      127.0.0.1 clackamasliteraryreview.com
      127.0.0.1 clearsearch.cc
      127.0.0.1 clearsearch.net
      127.0.0.1 clickaire.com
      127.0.0.1 clickyestoenter.net
      127.0.0.1 clrsch.com
      127.0.0.1 cmtapestry.com
      127.0.0.1 cool-homepage.co
      127.0.0.1 cool-homepage.com
      127.0.0.1 cool-search.net
      127.0.0.1 cool-search.netfartpost.com
      127.0.0.1 cool-web-search.com
      127.0.0.1 coolfetishsite.com
      127.0.0.1 coolfreehost.com
      127.0.0.1 coolfreepage.com
      127.0.0.1 coolfreepages.com
      127.0.0.1 coolmoneysearch.com
      127.0.0.1 coolpornsearch.com
      127.0.0.1 coolsearcher.info
      127.0.0.1 coolwebsearsh.com
      127.0.0.1 copmtraine.com
      127.0.0.1 couldnotfind.com
      127.0.0.1 count-all.com
      127.0.0.1 cracks.me.uk
      127.0.0.1 creamedcutties.com
      127.0.0.1 creditsearchonline.com
      127.0.0.1 crestring.com
      127.0.0.1 crooder.com
      127.0.0.1 curvedspaces.com
      127.0.0.1 cvs.jps.ru
      127.0.0.1 cvsymphony.com
      127.0.0.1 cydom.com
      127.0.0.1 daily-gals.com
      127.0.0.1 dancingbabycd.com
      127.0.0.1 datanotary.com
      127.0.0.1 datareco.com
      127.0.0.1 davemarshall.org
      127.0.0.1 dcfitusa.com
      127.0.0.1 defaultsearch.net
      127.0.0.1 desarrollocreativo.com
      127.0.0.1 develip.com
      127.0.0.1 dewis.spb.ru
      127.0.0.1 dewis.us
      127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
      127.0.0.1 dietpills4free.com
      127.0.0.1 dietpussy.com
      127.0.0.1 digistreamsa.com
      127.0.0.1 dionforvalleycouncil.org
      127.0.0.1 doctorwaldron.com
      127.0.0.1 document-not-found.pornpic.org
      127.0.0.1 doggyaction.com
      127.0.0.1 domain-your-registration.com
      127.0.0.1 domains-for-you-online.com
      127.0.0.1 domains2003.net
      127.0.0.1 domkrat.com
      127.0.0.1 dp-host.com
      127.0.0.1 dragqueen.gay-clan.com
      127.0.0.1 drug-sources-exposed.com
      127.0.0.1 drvvv.com
      127.0.0.1 dutch-sex.com
      127.0.0.1 dvdbank.org
      127.0.0.1 e-localad.com
      127.0.0.1 e-plus.cc
      127.0.0.1 e-websitesolutions.com
      127.0.0.1 eases.net
      127.0.0.1 easy-search.net
      127.0.0.1 easycategories.com
      127.0.0.1 ecosrioplatenses.org
      127.0.0.1 ecstasyporn.net
      127.0.0.1 eikokoike.com
      127.0.0.1 epornsex.com
      127.0.0.1 euuu.com
      127.0.0.1 evidence-detector.biz
      127.0.0.1 evilspidercomics.com
      127.0.0.1 ewebsearch.net
      127.0.0.1 findloss.com
      127.0.0.1 excellentsckin.com
      127.0.0.1 extremeseek.net
      127.0.0.1 f*ckdenniss.com
      127.0.0.1 f*cknicepics.com
      127.0.0.1 faithstevens.com
      127.0.0.1 fantasiewelten.com
      127.0.0.1 farmsteadbandb.com
      127.0.0.1 fartpost.com
      127.0.0.1 fastwebfinder.com
      127.0.0.1 faxporn.com
      127.0.0.1 fickenisgeil.de
      127.0.0.1 finance-loans.com
      127.0.0.1 find-itnow.com
      127.0.0.1 find-uk-health.co.uk
      127.0.0.1 find4u.net
      127.0.0.1 findit-now.com
      127.0.0.1 findthesite.com
      127.0.0.1 findthewebsiteyouneed.com
      127.0.0.1 www.findthewebsiteyouneed.com
      127.0.0.1 fionasteel.com
      127.0.0.1 firstbookmark.net
      127.0.0.1 fitness-free.com
      127.0.0.1 foodvacations.net
      127.0.0.1 forex.jps.ru
      127.0.0.1 forexcredit.com
      127.0.0.1 forexcredit.ru
      127.0.0.1 formingfusions.com
      127.0.0.1 forsythfire.net
      127.0.0.1 forthline.com
      127.0.0.1 free-chipes.com
      127.0.0.1 free-f*cking-video.com
      127.0.0.1 free-hit.com
      127.0.0.1 free-pics-and-movies.com
      127.0.0.1 free-sex-movie-clips.net
      127.0.0.1 free4porno.net
      127.0.0.1 free64all.com
      127.0.0.1 freebookmark.net
      127.0.0.1 freebookmarks.net
      127.0.0.1 freecategories.com
      127.0.0.1 freecoolhost.com
      127.0.0.1 freerbhost.com
      127.0.0.1 freeshemalepics.net
      127.0.0.1 freeyaho.com
      127.0.0.1 freshseek.com
      127.0.0.1 freshteensite.com
      127.0.0.1 gabrielscott.com
      127.0.0.1 galpostgirls.com
      127.0.0.1 gals-for-free.com
      127.0.0.1 gambling-online4you.com
      127.0.0.1 gameterror.net
      127.0.0.1 gay50.com
      127.0.0.1 generalsmeltingofcanada.com
      127.0.0.1 geteens.com
      127.0.0.1 getpicshere.com
      127.0.0.1 gimmezamore.com
      127.0.0.1 gimnasiaer.com
      127.0.0.1 girls-porn-life.com
      127.0.0.1 glbdf.org
      127.0.0.1 global-finder.com
      127.0.0.1 globe-finder.cc
      127.0.0.1 globe-finder.com
      127.0.0.1 gocybersearch.com
      127.0.0.1 golftennis.net
      127.0.0.1 good-mortgages-calculator.com
      127.0.0.1 good-mortgages.net
      127.0.0.1 goodsexs.com
      127.0.0.1 googlebar.jps.ru
      127.0.0.1 googlf.com
      127.0.0.1 gradforum.org
      127.0.0.1 gratis-porn-movie.com
      127.0.0.1 gratis-pornopics.com
      127.0.0.1 guzzycats.com
      127.0.0.1 gzphoenix.com
      127.0.0.1 hallnetaccolade.com
      127.0.0.1 hand-book.com
      127.0.0.1 happyanal.com
      127.0.0.1 hard-gals.com
      127.0.0.1 hardbodytgp.com
      127.0.0.1 hardcoreover.com
      127.0.0.1 hardloved.com
      127.0.0.1 hardwareseek.net
      127.0.0.1 harukaigawa.com
      127.0.0.1 hccsolanonapa.org
      127.0.0.1 health-protein.com
      127.0.0.1 hentai4u.net
      127.0.0.1 here4search.com
      127.0.0.1 heyrichy.com
      127.0.0.1 hi-search.com
      127.0.0.1 hiddenguides.com
      127.0.0.1 hitlistlyrics.com
      127.0.0.1 holidayautostr.com
      127.0.0.1 homemortage.ws
      127.0.0.1 hostssp.com
      127.0.0.1 hot-cartoon-sex.anime.american-teens.net
      127.0.0.1 hotbookmark.com
      127.0.0.1 hotels-list.net
      127.0.0.1 hotelxxxcams.com
      127.0.0.1 hotpopup.com
      127.0.0.1 hotsearchbox.com
      127.0.0.1 hotsex-series.com
      127.0.0.1 hotstartpage.com
      127.0.0.1 hqsex.biz
      127.0.0.1 hugeporn4u.net
      127.0.0.1 hunacsa.com
      127.0.0.1 hupacasath.com
      127.0.0.1 hzsx.com
      127.0.0.1 icansearch.net
      127.0.0.1 idgsearch.com
      127.0.0.1 ie-search.com
      127.0.0.1 incestporngate.com
      127.0.0.1 infodigger.net
      127.0.0.1 infoglobus.com
      127.0.0.1 inherhole.com
      127.0.0.1 insertthiscock.com
      127.0.0.1 insurance-flood.net
      127.0.0.1 insuranceall.net
      127.0.0.1 internetsearch.ru
      127.0.0.1 ionichost.com
      127.0.0.1 ionomist.com
      127.0.0.1 ipsex.net
      127.0.0.1 itsanal.com
      127.0.0.1 itseasy.us
      127.0.0.1 iweb-commerce.com
      127.0.0.1 iwebland.com
      127.0.0.1 jeannineoldfield.com
      127.0.0.1 jethomepage.com
      127.0.0.1 jetseeker.com
      127.0.0.1 jmhgallery.org
      127.0.0.1 joannelatham.com
      127.0.0.1 judin.ru
      127.0.0.1 junkysex.com
      127.0.0.1 karleyt.narod.ru
      127.0.0.1 kathisomers.com
      127.0.0.1 kazaa-lite.ws
      127.0.0.1 keithgreenpro.com
      127.0.0.1 kenmccaul.com
      127.0.0.1 kilosex.com
      127.0.0.1 kimhines.com
      127.0.0.1 kinoru.com
      127.0.0.1 ksdspups.org
      127.0.0.1 landrape.com
      127.0.0.1 lauraroebuck.com
      127.0.0.1 leannalovelace.com
      127.0.0.1 lesobank.ru
      127.0.0.1 libertyonlinehosting.com
      127.0.0.1 lingerie-mania.com
      127.0.0.1 lisamatthew.com
      127.0.0.1 liveholio.com
      127.0.0.1 livenewspaper.com
      127.0.0.1 louiseleeds.com
      127.0.0.1 love-pix.com
      127.0.0.1 lovelas.com
      127.0.0.1 lovelysearch.com
      127.0.0.1 low-taxes.com
      127.0.0.1 luckysearch.net
      127.0.0.1 lunitaweb.net
      127.0.0.1 lustful-porno.com
      127.0.0.1 mackinnonsbrook.org
      127.0.0.1 madfinder.com
      127.0.0.1 madisonmoons.com
      127.0.0.1 madisonoilco.com
      127.0.0.1 madonalive.com
      127.0.0.1 majuozawa.com
      127.0.0.1 makin-do.com
      127.0.0.1 male4free.com
      127.0.0.1 map-quest.org
      127.0.0.1 marilynchamber.com
      127.0.0.1 martfinder.com
      127.0.0.1 massearch.com
      127.0.0.1 matetrava.com
      127.0.0.1 mature50.com
      127.0.0.1 matureporngate.com
      127.0.0.1 maxdzines.com
      127.0.0.1 mcgeeforlabor.com
      127.0.0.1 mdstunisie.org
      127.0.0.1 medicare-insurance.net
      127.0.0.1 medicare-supplemental.com
      127.0.0.1 mega-dating-tips.com
      127.0.0.1 megumikanzaki.com
      127.0.0.1 meshalynn.com
      127.0.0.1 meta-adult.com
      127.0.0.1 meta-casino.com
      127.0.0.1 meta-mobile.com
      127.0.0.1 meta-porn.com
      127.0.0.1 metafora.ru
      127.0.0.1 metapoisk.ru
      127.0.0.1 michiyonakajima.com
      127.0.0.1 miconsultamedica.com
      127.0.0.1 mikasakamoto.com
      127.0.0.1 mikoni.com
      127.0.0.1 militarygods.porn4porn.net
      127.0.0.1 millennialpeople.org
      127.0.0.1 mipham.org
      127.0.0.1 missingcommand.com
      127.0.0.1 mommykiss.com
      127.0.0.1 moneyhunters.com
      127.0.0.1 montgomeryhospitalanesthesia.com
      127.0.0.1 morflot.com
      127.0.0.1 mortgage-debt.net
      127.0.0.1 mortismaximus.com
      127.0.0.1 moscowwhores.com
      127.0.0.1 moviecategories.com
      127.0.0.1 mp3-pix.com
      127.0.0.1 mrtg.jps.ru
      127.0.0.1 msn-info.net
      127.0.0.1 multipussy.com
      127.0.0.1 mundopolar.com
      127.0.0.1 mustv.com
      127.0.0.1 mywebsearch.net
      127.0.0.1 nativehardcore.com
      127.0.0.1 naturalspy.com
      127.0.0.1 nbasportsbook.net
      127.0.0.1 needf*cknow.com
      127.0.0.1 nellyslyrics.com
      127.0.0.1 nepgyan.com
      127.0.0.1 nesrecords.com
      127.0.0.1 netshastra.net
      127.0.0.1 nettime.ru
      127.0.0.1 nettracker.jps.ru
      127.0.0.1 netyellowpages.info
      127.0.0.1 new-incest.com
      127.0.0.1 newcategories.com
      127.0.0.1 newcracks.com
      127.0.0.1 newcracks.net
      127.0.0.1 newlife-lajolla.com
      127.0.0.1 newsexgate.com
      127.0.0.1 newtonsracks.com
      127.0.0.1 newxpics.com
      127.0.0.1 nhlsportsbook.net
      127.0.0.1 niagaracapital.com
      127.0.0.1 niche-tv.com
      127.0.0.1 nmrba.com
      127.0.0.1 nocalories.net
      127.0.0.1 nocensor.com
      127.0.0.1 ormandcompany.com
      127.0.0.1 nsbabes.com
      127.0.0.1 nuclearwitness.org
      127.0.0.1 nursemania.com
      127.0.0.1 nvntour.com
      127.0.0.1 nvphall.org
      127.0.0.1 oborot.com
      127.0.0.1 ocalalivestockmarket.com
      127.0.0.1 ocsff.com
      127.0.0.1 oeatlanta.com
      127.0.0.1 oharrowsearch.com
      127.0.0.1 ok-search.com
      127.0.0.1 okulta.com
      127.0.0.1 omegabrains.net
      127.0.0.1 online-casino-1.net
      127.0.0.1 online-casino-bonus.info
      127.0.0.1 online-casinos-x.com
      127.0.0.1 online-winning.net
      127.0.0.1 onlineserverz.com
      127.0.0.1 onlinetradings.net
      127.0.0.1 onlycunt.com
      127.0.0.1 onlyinsured.com
      127.0.0.1 operanabuco.com
      127.0.0.1 opsex.com
      127.0.0.1 oregoncharters.org
      127.0.0.1 otrlives.com
      127.0.0.1 ozawamadoka.com
      127.0.0.1 paigesummer.com
      127.0.0.1 pamelacollections.com
      127.0.0.1 panamcup.com
      127.0.0.1 pantygirls4u.com
      127.0.0.1 pantyhoserealm.com
      127.0.0.1 pantyplace.com
      127.0.0.1 pastubes.com
      127.0.0.1 paulapage.com
      127.0.0.1 paulhoover.com
      127.0.0.1 payfortraffic.net
      127.0.0.1 pedo.ws
      127.0.0.1 people.1gb.ru
      127.0.0.1 pervertbot.com
      127.0.0.1 pharma-diet-pills.com
      127.0.0.1 pharmacy2003.com
      127.0.0.1 pharmalocator.com
      127.0.0.1 phendimetrazine-tenuate-adipex.com
      127.0.0.1 pics-videos.com
      127.0.0.1 picsdir.com
      127.0.0.1 picsforbucks.com
      127.0.0.1 picsofseductiveladies.com
      127.0.0.1 pills-birth-control.com
      127.0.0.1 pillsmall.com
      127.0.0.1 pilotronix.com
      127.0.0.1 pixpox.com
      127.0.0.1 planemusic.com
      127.0.0.1 poiska.net
      127.0.0.1 poker-casino-free.com
      127.0.0.1 poker-games-free.net
      127.0.0.1 polradiologia.com
      127.0.0.1 pooi.net
      127.0.0.1 porn-teacher.com
      127.0.0.1 porncamz.com
      127.0.0.1 pornfree.info
      127.0.0.1 pornnightdreams.com
      127.0.0.1 pornokopec.com
      127.0.0.1 porntetris.com
      127.0.0.1 porntwist.com
      127.0.0.1 powerwebsearch.com
      127.0.0.1 prblitz.com
      127.0.0.1 pretypics.com
      127.0.0.1 pribalt.com
      127.0.0.1 privacy-support.biz
      127.0.0.1 privateporn.net
      127.0.0.1 prostactive.com
      127.0.0.1 prostol.com
      127.0.0.1 protect-yourself.biz
      127.0.0.1 prsainlandempire.org
      127.0.0.1 put-your-link-here.com
      127.0.0.1 pyrocorp.com
      127.0.0.1 quick-search.ws
      127.0.0.1 quiksearchgenealogy.com
      127.0.0.1 radfrall.org
      127.0.0.1 ramgo.com
      127.0.0.1 ranafrog.ne
      127.0.0.1 rapegate.com
      127.0.0.1 redbudbmx.com
      127.0.0.1 refinance-help.com
      127.0.0.1 removeearthkeepers.org
      127.0.0.1 rightfinder.net
      127.0.0.1 robbsproshop.com
      127.0.0.1 robertferencz.com
      127.0.0.1 rotocasters.com
      127.0.0.1 royalsearch.net
      127.0.0.1 runsearch.com
      127.0.0.1 russiansponsor.com
      127.0.0.1 russogay.com
      127.0.0.1 s2.exocrew.com
      127.0.0.1 sacitylife.com
      127.0.0.1 samplegals.com
      127.0.0.1 satisf*cktion.net
      127.0.0.1 sbssurvivor.com
      127.0.0.1 scarypix.com
      127.0.0.1 sccdnet.com
      127.0.0.1 schoolforest.com
      127.0.0.1 search-1.net
      127.0.0.1 search-2003.com
      127.0.0.1 search-about.net
      127.0.0.1 search-hawk.com
      127.0.0.1 search-log.com
      127.0.0.1 search-meta.com
      127.0.0.1 search-safe.com
      127.0.0.1 search.psn.cn
      127.0.0.1 searchadultweb.com
      127.0.0.1 searchbutler.com
      127.0.0.1 searchbuttler.com
      127.0.0.1 searchbutler.org
      127.0.0.1 searchcomplete.com
      127.0.0.1 searchdesire.com
      127.0.0.1 searchdot.net
      127.0.0.1 searchexpander.com
      127.0.0.1 searchfastnet.com
      127.0.0.1 searchforge.com
      127.0.0.1 searching-the-net.com
      127.0.0.1 searchmeta.md
      127.0.0.1 searchmeta.net
      127.0.0.1 searchmeta.ru
      127.0.0.1 searchmeta.webhost.ru
      127.0.0.1 searchnow.ws
      127.0.0.1 searchonfly.com
      127.0.0.1 searchv.com
      127.0.0.1 searchxl.com
      127.0.0.1 searchxp.com
      127.0.0.1 sebot.com
      127.0.0.1 securenp.org
      127.0.0.1 security-warning.biz
      127.0.0.1 seehardcore.com
      127.0.0.1 seekwell.net
      127.0.0.1 selfbookmark.com
      127.0.0.1 selfbookmark.info
      127.0.0.1 selfbookmark.net
      127.0.0.1 sex.free4porno.net
      127.0.0.1 sex-coach.com
      127.0.0.1 sex-festival.com
      127.0.0.1 sex-video-galleries.com
      127.0.0.1 sexgalleries4all.com
      127.0.0.1 sexmoviesnet.com
      127.0.0.1 sexpatriot.net
      127.0.0.1 sexy18.cc
      127.0.0.1 sexycat.adult-host.org
      127.0.0.1 sfbayfolkboats.com
      127.0.0.1 sgirls.net
      127.0.0.1 sharempeg.com
      127.0.0.1 shopcards.net
      127.0.0.1 shopknights.com
      127.0.0.1 sic02.com
      127.0.0.1 sintrader.com
      127.0.0.1 site1.ru
      127.0.0.1 sites-in-web.com
      127.0.0.1 sitevictoria.com
      127.0.0.1 sixroads.com
      127.0.0.1 skakalka.ru
      127.0.0.1 slawsearch.com
      127.0.0.1 slotch.com
      127.0.0.1 slotchbar.com
      127.0.0.1 smartsumo.com
      127.0.0.1 smutarchive.net
      127.0.0.1 solongas.com
      127.0.0.1 sonomaevents.com
      127.0.0.1 spermatrix.com
      127.0.0.1 sportbooks-free4you.com
      127.0.0.1 spros.com
      127.0.0.1 spyass.com
      127.0.0.1 spyorgy.net
      127.0.0.1 staceyowens.com
      127.0.0.1 stacistaxx.com
      127.0.0.1 stacystaxx.com
      127.0.0.1 start-space.com
      127.0.0.1 steamycock.com
      127.0.0.1 sterva.com
      127.0.0.1 stevecashdollar.com
      127.0.0.1 stop-tracking.biz
      127.0.0.1 stopvotefraud.com
      127.0.0.1 stopxxxpics.com
      127.0.0.1 strekoza.com
      127.0.0.1 stuffstore.com
      127.0.0.1 styleclickink.com
      127.0.0.1 summercollins.com
      127.0.0.1 summitcross.com
      127.0.0.1 super-spider.com
      127.0.0.1 super-websearch.com
      127.0.0.1 supersexmachine.com
      127.0.0.1 superwebsearch.com
      127.0.0.1 supret.com
      127.0.0.1 suzannebrecht.com
      127.0.0.1 sweeteenz.com
      127.0.0.1 tacil.org
      127.0.0.1 tangounion.com
      127.0.0.1 tastethemusic.com
      127.0.0.1 tax-refund4you.com
      127.0.0.1 tech-jobs.ws
      127.0.0.1 technology-related.com
      127.0.0.1 teen-biz.com
      127.0.0.1 teen-pic-post.com
      127.0.0.1 teenpornosex.com
      127.0.0.1 teens4free.net
      127.0.0.1 teensact.com
      127.0.0.1 teensgate.com
      127.0.0.1 teensguru.com
      127.0.0.1 teenswamp.com
      127.0.0.1 testosterone-birth-control.com
      127.0.0.1 the-exit.com
      127.0.0.1 the-huns-yellow-pages.com
      127.0.0.1 thefakejournal.com
      127.0.0.1 thehuy.net
      127.0.0.1 theproxy.org
      127.0.0.1 therealsearch.com
      127.0.0.1 thesten.com
      127.0.0.1 thornleygroup.com
      127.0.0.1 tings.org
      127.0.0.1 tit-x.com
      127.0.0.1 titanvision.com
      127.0.0.1 titsianna.com
      127.0.0.1 toddhayes.com
      127.0.0.1 toon-comics.com
      127.0.0.1 tooncomics.com
      127.0.0.1 topsearcher.com
      127.0.0.1 trafficback.com
      127.0.0.1 trafficswitcher.com
      127.0.0.1 travel.picture-posters.com
      127.0.0.1 true-portal.com
      127.0.0.1 trytechnical.com
      127.0.0.1 ufindall.click-now.net
      127.0.0.1 umaxsearch.com
      127.0.0.1 une-autre-france.com
      127.0.0.1 unigays.com
      127.0.0.1 unipages.cc
      127.0.0.1 up2you.ru
      127.0.0.1 urlstat.com
      127.0.0.1 urlstat.ru
      127.0.0.1 uralitel.ru
      127.0.0.1 ursie.net
      127.0.0.1 utahsweet.com
      127.0.0.1 utopicportal.com
      127.0.0.1 uusocialjustice.org
      127.0.0.1 v61.com
      127.0.0.1 vaginpics.com
      127.0.0.1 valmyers.com
      127.0.0.1 vegas-free.com
      127.0.0.1 vegbuy.com
      127.0.0.1 veloventures.com
      127.0.0.1 verzila.com
      127.0.0.1 victoriaadam.com
      127.0.0.1 videocategories.com
      127.0.0.1 vitamins-for-each.com
      127.0.0.1 votehowe.org
      127.0.0.1 vxebony.com
      127.0.0.1 wakeupdick.com
      127.0.0.1 warnomore.org
      127.0.0.1 watersport-specialties.com
      127.0.0.1 web-homepage.net
      127.0.0.1 web-search.tk
      127.0.0.1 webcoolsearch.com
      127.0.0.1 websearchdot.com
      127.0.0.1 weekend-movies.com
      127.0.0.1 wetpornostars.com
      127.0.0.1 whatsyoursearch.com
      127.0.0.1 white-pages.ws
      127.0.0.1 whittierblvd.com
      127.0.0.1 win-in-casino.com
      127.0.0.1 wiresearch.com
      127.0.0.1 wolfpacracing.com
      127.0.0.1 wordlist.jps.ru
      127.0.0.1 wpc2001.org
      127.0.0.1 wspzone.sexpornonline.com
      127.0.0.1 wwwbet.net
      127.0.0.1 wwwbetting.net
      127.0.0.1 wwwpokergames.com
      127.0.0.1 wwwpokerplayers.com
      127.0.0.1 wwwroulette.net
      127.0.0.1 x-library.com
      127.0.0.1 x-webdesign.com
      127.0.0.1 xcomics4u.com
      127.0.0.1 xic-bs.com
      127.0.0.1 xldr.com
      127.0.0.1 xp18.com
      127.0.0.1 xrenosearch.com
      127.0.0.1 xtragay.com
      127.0.0.1 xu.xu.pl
      127.0.0.1 xxxcategories.com
      127.0.0.1 xxxemailxxx.com
      127.0.0.1 y-e-l-l-o-w.com
      127.0.0.1 yellow500.com
      127.0.0.1 yezol.com
      127.0.0.1 you-search.com
      127.0.0.1 you-search.com.ru
      127.0.0.1 youfindall.com
      127.0.0.1 youfindall.net
      127.0.0.1 your-prescriptions.net
      127.0.0.1 yourbookmarks.info
      127.0.0.1 yourbookmarks.ws
      127.0.0.1 ypir.com
      127.0.0.1 ysa-info.net
      127.0.0.1 yukohamano.com
      127.0.0.1 ywebsearch.info
      127.0.0.1 zapros.com
      127.0.0.1 zesearch.com
      127.0.0.1 ziportal.com
      127.0.0.1 zipportal.com
      127.0.0.1 zoneoffreeporn.com
      127.0.0.1 zoomegasite.com
      127.0.0.1 zvimigdal.com
      127.0.0.1 zyban-zocor-levitra.com
      127.0.0.1 t.rack.cc
      127.0.0.1 omega-search.com
      127.0.0.1 cool-xxx.net
      127.0.0.1 revolto3.da.ru
      127.0.0.1 dating-search.net
      127.0.0.1 linksummary.com
      127.0.0.1 duolaimi.net
      127.0.0.1 ez-searching.com
      127.0.0.1 freehqmovies.com
      127.0.0.1 xzoomy.com
      127.0.0.1 freescratchandwin.com
      127.0.0.1 globalwebsearch.com
      127.0.0.1 www.gocybersearch.com
      127.0.0.1 mayancasino.com
      127.0.0.1 www.hastalavista.com
      127.0.0.1 www.free-popup-killer.com
      127.0.0.1 www.digitalfan.com
      127.0.0.1 google123.web1000.com
      127.0.0.1 search.ieplugin.com
      127.0.0.1 i-lookup.com
      127.0.0.1 spidersearch.com
      127.0.0.1 istarthere.com
      127.0.0.1 xxxtoolbar.com
      127.0.0.1 www.seekporn.org
      127.0.0.1 17-plus.com
      127.0.0.1 lolita4all1.xrensmagpost.com
      127.0.0.1 mafiapics.com
      127.0.0.1 www.teenmonster.com
      127.0.0.1 ie.marketdart.com
      127.0.0.1 masterbar.com
      127.0.0.1 search.netzany.co
      127.0.0.1 only-virgins.com
      127.0.0.1 passthison.com
      127.0.0.1 blondetgp.com
      127.0.0.1 prolivation.com
      127.0.0.1 server-au.imrworldwide.com
      127.0.0.1 rocketsearch.com
      127.0.0.1 .roar.com
      127.0.0.1 searchaccurate.com
      127.0.0.1 searchalot.com
      127.0.0.1 searchandbrowse.com
      127.0.0.1 gtawarehouse.com
      127.0.0.1 startium.com
      127.0.0.1 searchandclick.com
      127.0.0.1 searchby.net
      127.0.0.1 searchdot.com
      127.0.0.1 search-exe.com
      127.0.0.1 secret-crush.com
      127.0.0.1 seekseek.com
      127.0.0.1 sexarena.com
      127.0.0.1 sexocean.play-lolita.com
      127.0.0.1 startsurfing.com
      127.0.0.1 66.197.138.235
      127.0.0.1 srng.net
      127.0.0.1 apps.webservicehost.com
      127.0.0.1 search.shopnav.com
      127.0.0.1 wish7.com
      127.0.0.1 216.65.3.68
      127.0.0.1 www.supersexpass.com
      127.0.0.1 surferbar.com
      127.0.0.1 xlola.underagehost.com
      127.0.0.1 hotlolitas.underagehost.com
      127.0.0.1 loading-lolita.com
      127.0.0.1 www.xupiter.com
      127.0.0.1 xjupiter.com
      127.0.0.1 www.xjupiter.com
      127.0.0.1 www.browserwise.com
      127.0.0.1 sqwire.com
      127.0.0.1 orbitexplorer.com
      127.0.0.1 searchcentrix.com
      127.0.0.1 categories.mygeek.com
      127.0.0.1 web-entrance.co
      127.0.0.1 whazit.com
      127.0.0.1 windowenhancer.com
      127.0.0.1 buz.ru
      127.0.0.1 iwon.com
      127.0.0.1 www.bonzi.com
      127.0.0.1 featured-results.com
      127.0.0.1 searchmadesafe.net
      127.0.0.1 quicklaunch.com
      127.0.0.1 www.cashsurfers.com
      127.0.0.1 .lop.com
      127.0.0.1 .tjdo.com
      127.0.0.1 /tjdo.com
      127.0.0.1 .ebav.com
      127.0.0.1 /ebav.com
      127.0.0.1 .ebgo.com
      127.0.0.1 /ebgo.com
      127.0.0.1 .ebaw.com
      127.0.0.1 /ebaw.com
      127.0.0.1 .ebkb.com
      127.0.0.1 /ebkb.com
      127.0.0.1 .ebmu.com
      127.0.0.1 /ebmu.com
      127.0.0.1 .ecmp.com
      127.0.0.1 /ecmp.com
      127.0.0.1 .edhq.com
      127.0.0.1 /edhq.com
      127.0.0.1 .edty.com
      127.0.0.1 /edty.com
      127.0.0.1 .sbee.com
      127.0.0.1 /sbee.com
      127.0.0.1 .aavc.com
      127.0.0.1 /aavc.com
      127.0.0.1 .acjp.com
      127.0.0.1 /acjp.com
      127.0.0.1 .ecmh.com
      127.0.0.1 /ecmh.com
      127.0.0.1 .emch.com
      127.0.0.1 /emch.com
      127.0.0.1 .ecpm.com
      127.0.0.1 /ecpm.com
      127.0.0.1 .wabu.com
      127.0.0.1 /wabu.com
      127.0.0.1 .wabq.com
      127.0.0.1 /wabq.com
      127.0.0.1 .ebch.com
      127.0.0.1 /ebch.com
      127.0.0.1 .ebdv.com
      127.0.0.1 /ebdv.com
      127.0.0.1 .ebdw.com
      127.0.0.1 /ebdw.com
      127.0.0.1 .ebjp.com
      127.0.0.1 /ebjp.com
      127.0.0.1 .ebkn.com
      127.0.0.1 /ebkn.com
      127.0.0.1 .ebky.com
      127.0.0.1 /ebky.com
      127.0.0.1 .eblv.com
      127.0.0.1 /eblv.com
      127.0.0.1 .wbkb.com
      127.0.0.1 /wbkb.com
      127.0.0.1 .ebvr.com
      127.0.0.1 /ebvr.com
      127.0.0.1 .ecwz.com
      127.0.0.1 /ecwz.com
      127.0.0.1 .ecyb.com
      127.0.0.1 /ecyb.com
      127.0.0.1 .eduy.com
      127.0.0.1 /eduy.com
      127.0.0.1 .eeev.com
      127.0.0.1 /eeev.com
      127.0.0.1 .farse.com
      127.0.0.1 /farse.com
      127.0.0.1 .ibmx.com
      127.0.0.1 /ibmx.com
      127.0.0.1 .icwb.com
      127.0.0.1 /icwb.com
      127.0.0.1 .icwo.com
      127.0.0.1 /icwo.com
      127.0.0.1 .icwp.com
      127.0.0.1 /icwp.com
      127.0.0.1 .iddh.com
      127.0.0.1 /iddh.com
      127.0.0.1 .idhh.com
      127.0.0.1 /idhh.com
      127.0.0.1 .ifiz.com
      127.0.0.1 /ifiz.com
      127.0.0.1 .iguu.com
      127.0.0.1 /iguu.com
      127.0.0.1 .samz.com
      127.0.0.1 /samz.com
      127.0.0.1 .saoe.com
      127.0.0.1 /saoe.com
      127.0.0.1 .sbjr.com
      127.0.0.1 /sbjr.com
      127.0.0.1 .sbnl.com
      127.0.0.1 /sbnl.com
      127.0.0.1 .sbnt.com
      127.0.0.1 /sbnt.com
      127.0.0.1 .sbvr.com
      127.0.0.1 /sbvr.com
      127.0.0.1 .scbm.com
      127.0.0.1 /scbm.com
      127.0.0.1 .sckr.com
      127.0.0.1 /sckr.com
      127.0.0.1 .scrk.com
      127.0.0.1 /scrk.com
      127.0.0.1 .sdry.com
      127.0.0.1 /sdry.com
      127.0.0.1 .seld.com
      127.0.0.1 /seld.com
      127.0.0.1 .sfux.com
      127.0.0.1 /sfux.com
      127.0.0.1 .sheat.com
      127.0.0.1 /sheat.com
      127.0.0.1 .sipo.com
      127.0.0.1 /sipo.com
      127.0.0.1 .smds.com
      127.0.0.1 /smds.com
      127.0.0.1 .srib.com
      127.0.0.1 /srib.com
      127.0.0.1 .srox.com
      127.0.0.1 /srox.com
      127.0.0.1 .srsf.com
      127.0.0.1 /srsf.com
      127.0.0.1 .ssaw.com
      127.0.0.1 /ssaw.com
      127.0.0.1 .ssby.com
      127.0.0.1 /ssby.com
      127.0.0.1 .surj.com
      127.0.0.1 /surj.com
      127.0.0.1 .tbvg.com
      127.0.0.1 /tbvg.com
      127.0.0.1 .tdak.com
      127.0.0.1 /tdak.com
      127.0.0.1 .tdmy.com
      127.0.0.1 /tdmy.com
      127.0.0.1 .tefs.com
      127.0.0.1 /tefs.com
      127.0.0.1 .tfil.com
      127.0.0.1 /tfil.com
      127.0.0.1 .tjar.com
      127.0.0.1 /tjar.com
      127.0.0.1 .tjaw.com
      127.0.0.1 /tjaw.com
      127.0.0.1 .tjgo.com
      127.0.0.1 /tjgo.com
      127.0.0.1 .tjem.com
      127.0.0.1 /tjem.com
      127.0.0.1 .torc.com
      127.0.0.1 /torc.com
      127.0.0.1 .wfix.com
      127.0.0.1 /wfix.com
      127.0.0.1 .wflu.com
      127.0.0.1 /wflu.com
      127.0.0.1 .tdko.com
      127.0.0.1 /tdko.com
      127.0.0.1 .thko.com
      127.0.0.1 /thko.com
      127.0.0.1 H24413.tfil.com
      127.0.0.1 germany.rub.to
      127.0.0.1 search.rub.to
      127.0.0.1 unitedstates.rub.to
      127.0.0.1 www.commonname.com
      127.0.0.1 www.ezcybersearch.com
      127.0.0.1 www.jethomepage.com
      127.0.0.1 www.gohip.com
      127.0.0.1 hotbar.com
      127.0.0.1 www.huntbar.com
      127.0.0.1 search.imiserver.com
      127.0.0.1 infospace.com/blsrch.dp.toolbar
      127.0.0.1 searchenhancement.com
      127.0.0.1 newtonknows.com
      127.0.0.1 search-explorer.net
      127.0.0.1 searchsquire.com
      127.0.0.1 secondpower.com
      127.0.0.1 2ndpower.com
      127.0.0.1 searchgateway.net
      127.0.0.1 worldusa.com
      127.0.0.1 www.topsearcher.com
      127.0.0.1 smutserver.com
      127.0.0.1 searchmeup.com
      127.0.0.1 cameup.com
      127.0.0.1 kliksearch.com
      127.0.0.1 realphx.com
      127.0.0.1 blazefind.com
      127.0.0.1 66.40.16.198
      127.0.0.1 zoofil.com
      127.0.0.1 terafinder.com
      127.0.0.1 008i.com
      127.0.0.1 171203.com
      127.0.0.1 39-93.com
      127.0.0.1 adult-personal.us
      127.0.0.1 cashsearch.biz
      127.0.0.1 cl55.biz
      127.0.0.1 dailyteenspic.com
      127.0.0.1 dialer2004.com
      127.0.0.1 digital-pornography.com
      127.0.0.1 eager-sex.com
      127.0.0.1 ergosites.com
      127.0.0.1 freecj.com
      127.0.0.1 greg-search.com
      127.0.0.1 incest-host.com
      127.0.0.1 ironcarteam.com
      127.0.0.1 is-best.com
      127.0.0.1 killerpornstars.com
      127.0.0.1 lollitop.com
      127.0.0.1 love-host.com
      127.0.0.1 myexexex.com
      127.0.0.1 my-finder.com
      127.0.0.1 onlineclick.net
      127.0.0.1 onlysex.ws
      127.0.0.1 regfreeze.com
      127.0.0.1 ruworld.com
      127.0.0.1 selltraffic.biz
      127.0.0.1 sexunique.net
      127.0.0.1 sinpussy.com
      127.0.0.1 teenhost.net
      127.0.0.1 ultraload.net
      127.0.0.1 vse-moe.biz
      127.0.0.1 xsex.ws
      127.0.0.1 .75tz.com
      127.0.0.1 /75tz.com
      127.0.0.1 .iefeadsl.com
      127.0.0.1 /iefeadsl.com
      127.0.0.1 /rf104.com
      127.0.0.1 .rf104.com
      127.0.0.1 www.v61.com
      127.0.0.1 ads.centralmedia.ws
      127.0.0.1 c.centralmedia.ws
      127.0.0.1 .count.cc
      127.0.0.1 /count.cc
      127.0.0.1 .topx.cc
      127.0.0.1 /topx.cc
      127.0.0.1 sidefind.com
      127.0.0.1 thenewsearch.com
      127.0.0.1 new-search.net
      127.0.0.1 x-google.net
      127.0.0.1 adultgambling.org
      127.0.0.1 bitchesonline.net
      127.0.0.1 girls4rent.net
      127.0.0.1 usefullsoft.net
      127.0.0.1 livegambling.com
      127.0.0.1 adultsgames.net
      127.0.0.1 easyantispy.com
      127.0.0.1 spybotremover.net
      127.0.0.1 winprotect.net
      127.0.0.1 funny-girls.com
      127.0.0.1 winmsn.com
      127.0.0.1 oneclicksearches.com
      127.0.0.1 bestweblinks.com
      127.0.0.1 iqsearch.net
      127.0.0.1 dumpserv.com
      127.0.0.1 helpyoursearch.com
      127.0.0.1 sgrunt.biz
      127.0.0.1 yeak.net
      127.0.0.1 u45.cx
      127.0.0.1 u46.cx
      127.0.0.1 u47.cc
      127.0.0.1 u48.cc
      127.0.0.1 sfonditalia.biz
      127.0.0.1 realarea.biz
      127.0.0.1 archiviosex.net
      127.0.0.1 agava.com
      127.0.0.1 agava.ru
      127.0.0.1 hut1.ru
      127.0.0.1 hu15.ru
      127.0.0.1 winfixer.com
      127.0.0.1 3721.com
      127.0.0.1 easysearchingtips.com
      127.0.0.1 fine-search.net
      127.0.0.1 noproblemsurf.com
      127.0.0.1 pcspyremover.com
      127.0.0.1 search-motor.com
      127.0.0.1 searchwhatuwant.com
      127.0.0.1 ad25.com
      127.0.0.1 ad45.com
      127.0.0.1 ad77.com
      127.0.0.1 ad86.com
      127.0.0.1 full-search.net
      127.0.0.1 go2-search.com
      127.0.0.1 onemoresearch.net
      127.0.0.1 search-777.com
      127.0.0.1 search-to-find.com
      127.0.0.1 search-what.net
      127.0.0.1 winshow.biz
      127.0.0.1 lookfor.cc
      127.0.0.1 looking-for.cc
      127.0.0.1 tgp-4-you.com
      127.0.0.1 veryeasysearch.com
      127.0.0.1 010402.com
      127.0.0.1 20x2p.com
      127.0.0.1 db105.com
      127.0.0.1 ga31.com
      127.0.0.1 mpeg-look.com
      127.0.0.1 n-udd.com
      127.0.0.1 p-uud.com
      127.0.0.1 porn-screen.com
      127.0.0.1 rb37.com
      127.0.0.1 t058.com
      127.0.0.1 u-239.com
      127.0.0.1 v-224.com
      127.0.0.1 trackhits.cc
      127.0.0.1 tracktraff.cc
      127.0.0.1 power-cleaner.com
      127.0.0.1 yoursitebar.com
      127.0.0.1 ysbweb.com
      127.0.0.1 www.ysbweb.com
      127.0.0.1 installcash.com
      127.0.0.1 toolbarcash.com
      127.0.0.1 enjoywebsurf.com
      127.0.0.1 msnguard.cc
      127.0.0.1 searchclick.cc
      127.0.0.1 havy.biz
      127.0.0.1 ewizard.cc
      127.0.0.1 4klm.com
      127.0.0.1 camup.net
      127.0.0.1 bdsmlibrary.net
      127.0.0.1 n-glx.s-redirect.com
      127.0.0.1 aaasexypics.com
      127.0.0.1 allforadult.com
      127.0.0.1 autoescrowpay.com
      127.0.0.1 awmcash.biz
      127.0.0.1 awmdabest.com
      127.0.0.1 buldog-stats.com
      127.0.0.1 counter.sexmaniack.com
      127.0.0.1 fregat.drocherway.com
      127.0.0.1 greg-tut.com
      127.0.0.1 iframe.biz
      127.0.0.1 megapornix.com
      127.0.0.1 newiframe.biz
      127.0.0.1 nylonsexy.com
      127.0.0.1 pizdato.biz
      127.0.0.1 sexfiles.nu
      127.0.0.1 slutmania.biz
      127.0.0.1 sp2fucked.biz
      127.0.0.1 toolbarpartner.com
      127.0.0.1 vesbiz.biz
      127.0.0.1 virgin-tgp.net
      127.0.0.1 vparivalka.com
      127.0.0.1 x.full-tgp.net
      127.0.0.1 toolbar.cc
      127.0.0.1 himen.biz
      127.0.0.1 msupdater.net
      127.0.0.1 www.msupdater.net
      127.0.0.1 1800searchonline.com
      127.0.0.1 www.1800searchonline.com
      127.0.0.1 1stsearchportal.com
      127.0.0.1 www.1stsearchportal.com
      127.0.0.1 24-7searching-and-more.com
      127.0.0.1 www.24-7searching-and-more.com
      127.0.0.1 971searchbox.com
      127.0.0.1 www.971searchbox.com
      127.0.0.1 aaawebfinder.com
      127.0.0.1 www.aaawebfinder.com
      127.0.0.1 ampmsearch.com
      127.0.0.1 www.ampmsearch.com
      127.0.0.1 clickhere4search.com
      127.0.0.1 www.clickhere4search.com
      127.0.0.1 clicktomakeasearch.com
      127.0.0.1 www.clicktomakeasearch.com
      127.0.0.1 directsearchzone.com
      127.0.0.1 www.directsearchzone.com
      127.0.0.1 easysearch4you.com
      127.0.0.1 www.easysearch4you.com
      127.0.0.1 enterthesearch.com
      127.0.0.1 www.enterthesearch.com
      127.0.0.1 esearch2005.com
      127.0.0.1 www.esearch2005.com
      127.0.0.1 eza1netsearch.com
      127.0.0.1 www.eza1netsearch.com
      127.0.0.1 ezwebsearching.com
      127.0.0.1 www.ezwebsearching.com
      127.0.0.1 globalefinder.com
      127.0.0.1 www.globalefinder.com
      127.0.0.1 go2realsearch.com
      127.0.0.1 www.go2realsearch.com
      127.0.0.1 myseachexplorer.com
      127.0.0.1 www.myseachexplorer.com
      127.0.0.1 quicksearch360.com
      127.0.0.1 www.quicksearch360.com
      127.0.0.1 s1s1s1search.com
      127.0.0.1 www.s1s1s1search.com
      127.0.0.1 search101online.com
      127.0.0.1 www.search101online.com
      127.0.0.1 search123forme.com
      127.0.0.1 www.search123forme.com
      127.0.0.1 search345quest.com
      127.0.0.1 www.search345quest.com
      127.0.0.1 searchmiracle.com
      127.0.0.1 www.searchmiracle.com
      127.0.0.1 searchtheworld4you.com
      127.0.0.1 www.searchtheworld4you.com
      127.0.0.1 searchwebzone.com
      127.0.0.1 www.searchwebzone.com
      127.0.0.1 seektheglobe.com
      127.0.0.1 www.seektheglobe.com
      127.0.0.1 sitesearchcentral.com
      127.0.0.1 www.sitesearchcentral.com
      127.0.0.1 the818search-co.com
      127.0.0.1 www.the818search-co.com
      127.0.0.1 type2find.com
      127.0.0.1 www.type2find.com
      127.0.0.1 xosearchox.com
      127.0.0.1 www.xosearchox.com
      127.0.0.1 yoursearchspace.com
      127.0.0.1 www.yoursearchspace.com
      127.0.0.1 httpwwwads.com
      127.0.0.1 www.httpwwwads.com
      127.0.0.1 adshttp.com
      127.0.0.1 www.adshttp.com
      127.0.0.1 adsonwww.com
      127.0.0.1 www.adsonwww.com
      127.0.0.1 216.152.240.14
      127.0.0.1 216.152.240.13
      127.0.0.1 216.152.240.10
      127.0.0.1 216.152.240.16
      127.0.0.1 dnaads.com
      127.0.0.1 www.dnaads.com
      127.0.0.1 marketengines.com
      127.0.0.1 www.marketengines.com
      127.0.0.1 ad-w-a-r-e.com
      127.0.0.1 www.ad-w-a-r-e.com
      127.0.0.1 a-d-w-a-r-e.com
      127.0.0.1 www.a-d-w-a-r-e.com
      127.0.0.1 securityindex.net
      127.0.0.1 www.securityindex.net
      127.0.0.1 sexpicsporn.com
      127.0.0.1 www.sexpicsporn.com
      127.0.0.1 free-spybot.com
      127.0.0.1 www.free-spybot.com
      127.0.0.1 cashengines.com
      127.0.0.1 www.cashengines.com
      127.0.0.1 microsoftantispyware.net
      127.0.0.1 www.microsoftantispyware.net
      127.0.0.1 mircosoftantispy.com
      127.0.0.1 www.mircosoftantispy.com
      127.0.0.1 msantispy.com
      127.0.0.1 www.msantispy.com
      127.0.0.1 netspyprotector.com
      127.0.0.1 www.netspyprotector.com
      127.0.0.1 avforce.com
      127.0.0.1 www.avforce.com
      127.0.0.1 savehits.com
      127.0.0.1 www.savehits.com
      127.0.0.1 saveli.com
      127.0.0.1 www.saveli.com
      127.0.0.1 metastop.com
      127.0.0.1 www.metastop.com
      127.0.0.1 perlink.biz
      127.0.0.1 www.perlink.biz
      127.0.0.1 highdialer.com
      127.0.0.1 www.highdialer.com
      127.0.0.1 66.230.175.129
      127.0.0.1 online-more.com
      127.0.0.1 www.online-more.com
      127.0.0.1 66.117.37.7
      127.0.0.1 www.syserrors.com
      127.0.0.1 www.vcodec.com
      127.0.0.1 toolbartraff.biz
      127.0.0.1 www.toolbartraff.biz
      127.0.0.1 pcadprotector.cc
      127.0.0.1 www.pcadprotector.cc
      127.0.0.1 airtleworld.com
      127.0.0.1 www.airtleworld.com
      127.0.0.1 domaincar.com
      127.0.0.1 www.domaincar.com
      127.0.0.1 worldray.com
      127.0.0.1 www.worldray.com
      127.0.0.1 www5.worldray.com
      127.0.0.1 www6.worldray.com
      127.0.0.1 www.spytrooper.com
      127.0.0.1 spytrooper.com
      127.0.0.1 dl.ad-ware.cc
      127.0.0.1 ad-ware.cc
      127.0.0.1 82.179.170.11
      127.0.0.1 195.255.177.28
      127.0.0.1 downloads.adaware.cc
      127.0.0.1 adaware.cc
      127.0.0.1 hitscount.net
      127.0.0.1 count.hitscount.net
      127.0.0.1 fined.biz
      127.0.0.1 de.ag
      127.0.0.1 games.de.ag
      127.0.0.1 www.games.de.ag
      127.0.0.1 little-download.net
      127.0.0.1 www.little-download.net
      127.0.0.1 little-help.com
      127.0.0.1 www.little-help.com
      127.0.0.1 www.spyaxe.net
      127.0.0.1 www.spyaxe.com
      127.0.0.1 www.spyaxe.biz
      127.0.0.1 www.malwarewipe.com
      127.0.0.1 dl.malwarewipe.com
      127.0.0.1 www.malwarewipeupdate.com
      127.0.0.1 24.244.71.239
      127.0.0.1 unionseek.com
      127.0.0.1 www.unionseek.com
      127.0.0.1 sirh0t.blackhats.tc
      127.0.0.1 blackhats.tc
      127.0.0.1 www.blackhats.tc
      127.0.0.1 ritztours.com
      127.0.0.1 www.ritztours.com
      127.0.0.1 flashflashmx.3322.org
      127.0.0.1 3322.org
      127.0.0.1 www.3322.org
      127.0.0.1 jupitersatellites.biz
      127.0.0.1 www.jupitersatellites.biz
      127.0.0.1 yops.biz
      127.0.0.1 www.yops.biz
      127.0.0.1 69.50.171.122
      127.0.0.1 goldengr.hypermart.net
      127.0.0.1 web-nexus.net
      127.0.0.1 safe-sales.biz
      127.0.0.1 www.safe-sales.biz
      127.0.0.1 jerrynews.com
      127.0.0.1 www.jerrynews.com
      127.0.0.1 Teslaplus.com
      127.0.0.1 www.Teslaplus.com
      127.0.0.1 82.179.170.82
      127.0.0.1 WorldAntiSpy.com
      127.0.0.1 www.WorldAntiSpy.com
      127.0.0.1 www.securitycaution.com
      127.0.0.1 securitycaution.com
      127.0.0.1 adservs.com
      127.0.0.1 csx.adservs.com
      127.0.0.1 www.csx.adservs.com
      127.0.0.1 toolbarbest.biz
      127.0.0.1 www.toolbarbest.biz
      127.0.0.1 65.75.151.192
      127.0.0.1 game4all.biz
      127.0.0.1 www.game4all.biz
      127.0.0.1 game4all.biz/adv/018
      127.0.0.1 www.game4all.biz/adv/018
      127.0.0.1 wm.kannylizaciya.info
      127.0.0.1 www.wm.kannylizaciya.info
      127.0.0.1 wm.buhartes.info
      127.0.0.1 www.wm.buhartes.info
      127.0.0.1 login.fric.cn
      127.0.0.1 www.login.fric.cn
      127.0.0.1 xsremover.com
      127.0.0.1 www.xsremover.com
      127.0.0.1 spydeface.com
      127.0.0.1 www.spydeface.com
      127.0.0.1 alfacleaner.com
      127.0.0.1 www.alfacleaner.com
      127.0.0.1 innovagest2000.com
      127.0.0.1 www.innovagest2000.com
      127.0.0.1 www.thespyguard.com
      127.0.0.1 thespyguard.com
      127.0.0.1 www.adwarepunisher.com
      127.0.0.1 adwarepunisher.com
      127.0.0.1 www.spyiblock.com
      127.0.0.1 spyiblock.com
      127.0.0.1 www.uvu-channel.com
      127.0.0.1 uvu-channel.com
      127.0.0.1 www.hachimitsu-lemon.com
      127.0.0.1 hachimitsu-lemon.com
      127.0.0.1 SEARCHTOFIND.NET
      127.0.0.1 www.SEARCHTOFIND.NET
      127.0.0.1 www.pestrap.com
      127.0.0.1 pestrap.com
      127.0.0.1 uptodatesecurity.com
      127.0.0.1 www.uptodatesecurity.com
      127.0.0.1 thinstall.abetterinternet.com
      127.0.0.1 www.3abetterinternet.com
      127.0.0.1 download.abetterinternet.com
      127.0.0.1 www.abetterinternet.com
      127.0.0.1 216.255.179.234
      127.0.0.1 qmex.psyche-evolution.com
      127.0.0.1 www.qmex.psyche-evolution.com
      127.0.0.1 core.psyche-evolution.com
      127.0.0.1 www.core.psyche-evolution.com
      127.0.0.1 1stantivirus.com
      127.0.0.1 www.1stantivirus.com
      127.0.0.1 scanandrepair.com
      127.0.0.1 www.scanandrepair.com
      127.0.0.1 uydsiygeds.com
      127.0.0.1 www.uydsiygeds.com
      127.0.0.1 pesttrap.com
      127.0.0.1 www.pesttrap.com
      127.0.0.1 adwarebazooka.com
      127.0.0.1 get.adwarebazooka.com
      127.0.0.1 www.adwarebazooka.com
      127.0.0.1 kliksoftware.com
      127.0.0.1 www.kliksoftware.com
      127.0.0.1 hitvirus.com
      127.0.0.1 get.hitvirus.com
      127.0.0.1 www.hitvirus.com
      127.0.0.1 promo.dollarrevenue.com
      127.0.0.1 www.promo.dollarrevenue.com
      127.0.0.1 maxifile.com
      127.0.0.1 www.maxifile.com
      127.0.0.1 targetsaver.com
      127.0.0.1 www.targetsaver.com
      127.0.0.1 dl.targetsaver.com
      127.0.0.1 www.dl.targetsaver.com
      127.0.0.1 nonameforthisdomain.com
      127.0.0.1 www.nonameforthisdomain.com
      127.0.0.1 hypoteches.com
      127.0.0.1 www.hypoteches.com
      127.0.0.1 www.earthllnk.net
      127.0.0.1 earthllnk.net
      127.0.0.1 hostance.net
      127.0.0.1 www.hostance.net
      127.0.0.1 my-dedik-one.com
      127.0.0.1 www.my-dedik-one.com
      127.0.0.1 10sek.com
      127.0.0.1 www.10sek.com
      127.0.0.1 6sek.com
      127.0.0.1 www.6sek.com
      127.0.0.1 cashdeluxe.net
      127.0.0.1 www.cashdeluxe.net
      127.0.0.1 stats.cashdeluxe.net
      127.0.0.1 www.stats.cashdeluxe.net
      127.0.0.1 www.2006ooo.com
      127.0.0.1 www.spyware-stop.com
      127.0.0.1 spyware-stop.com
      127.0.0.1 www.SpyShield.org
      127.0.0.1 SpyShield.org
      127.0.0.1 utils.winfixer.com
      127.0.0.1 www.utils.winfixer.com
      127.0.0.1 toolbarbucks.biz
      127.0.0.1 www.toolbarbucks.biz
      127.0.0.1 derklaif.biz
      127.0.0.1 www.derklaif.biz
      127.0.0.1 www.v-codec.com
      127.0.0.1 v-codec.com
      127.0.0.1 www.emediacodec.com
      127.0.0.1 emediacodec.com
      127.0.0.1 www.popentertain.com
      127.0.0.1 popentertain.com
      127.0.0.1 softwareprofit.com
      127.0.0.1 www.softwareprofit.com
      127.0.0.1 de.winantivirus.com
      127.0.0.1 download.winantivirus.com
      127.0.0.1 winantivirus.com
      127.0.0.1 www.winantivirus.com
      127.0.0.1 205.209.152.121
      127.0.0.1 offers.bullseye-network.com
      127.0.0.1 www.offers.bullseye-network.com
      127.0.0.1 bullseye-network.com
      127.0.0.1 www.bullseye-network.com
      127.0.0.1 sponsor2.ucmore.com
      127.0.0.1 www.sponsor2.ucmore.com
      127.0.0.1 apps.deskwizz
      127.0.0.1 www.apps.deskwizz
      127.0.0.1 hostthesky.com
      127.0.0.1 www.hostthesky.com
      127.0.0.1 dbdecicated.com
      127.0.0.1 www.dbdecicated.com
      127.0.0.1 readagreement.net
      127.0.0.1 www.readagreement.net
      127.0.0.1 gl.secdep.info
      127.0.0.1 www.gl.secdep.info
      127.0.0.1 spyfalcon.com
      127.0.0.1 www.spyfalcon.com
      127.0.0.1 spyfalconupdate.com
      127.0.0.1 www.spyfalconupdate.com
      127.0.0.1 spy-shield.com
      127.0.0.1 www.spy-shield.com
      127.0.0.1 winnanny.com
      127.0.0.1 www.winnanny.com
      127.0.0.1 winsoftware.com
      127.0.0.1 www.winsoftware.com
      127.0.0.1 winfirewall.com
      127.0.0.1 www.winfirewall.com
      127.0.0.1 winantispyware.com
      127.0.0.1 www.winantispyware.com
      127.0.0.1 udefender.com
      127.0.0.1 www.udefender.com
      127.0.0.1 bravesentry.com
      127.0.0.1 www.bravesentry.com
      127.0.0.1 content.dollarrevenue.com
      127.0.0.1 www.content.dollarrevenue.com
      127.0.0.1 toolbar.azebar.com
      127.0.0.1 www.toolbar.azebar.com
      127.0.0.1 traffsale1.biz
      127.0.0.1 www.traffsale1.biz
      127.0.0.1 194.187.45.55
      127.0.0.1 82.146.60.36
      127.0.0.1 spywaredisinfector.com
      127.0.0.1 www.spywaredisinfector.com
      127.0.0.1 SpyCut.com
      127.0.0.1 www.SpyCut.com
      127.0.0.1 almanah.biz
      127.0.0.1 www.almanah.biz
      127.0.0.1 antispydns.biz
      127.0.0.1 www.antispydns.biz
      127.0.0.1 spyaxeupdate.com
      127.0.0.1 www.spyaxeupdate.com
      127.0.0.1 malwarewipesupport.com
      127.0.0.1 www.malwarewipesupport.com
      127.0.0.1 remedyantispy.com
      127.0.0.1 www.remedyantispy.com
      127.0.0.1 systemstable.com
      127.0.0.1 www.systemstable.com
      127.0.0.1 whoisprivacyprotect.com
      127.0.0.1 www.whoisprivacyprotect.com
      127.0.0.1 85.249.22.240
      127.0.0.1 prime.webhancer.com
      127.0.0.1 www.prime.webhancer.com
      127.0.0.1 webhancer.com
      127.0.0.1 www.webhancer.com
      127.0.0.1 dr.webhancer.com
      127.0.0.1 www.dr.webhancer.com
      127.0.0.1 dr2.webhancer.com
      127.0.0.1 www.dr2.webhancer.com
      127.0.0.1 www.onli-ne.com
      127.0.0.1 spycontra.com
      127.0.0.1 www.spycontra.com
      127.0.0.1 anti-virus-pro.com
      127.0.0.1 www.anti-virus-pro.com
      127.0.0.1 check.jupitersatellites.biz
      127.0.0.1 www.check.jupitersatellites.biz
      127.0.0.1 necessaryupdates.com
      127.0.0.1 www.necessaryupdates.com
      127.0.0.1 bestworldgirls-for-u.net
      127.0.0.1 www.bestworldgirls-for-u.net
      127.0.0.1 stejax.pl
      127.0.0.1 www.stejax.pl
      127.0.0.1 kitehosting.com
      127.0.0.1 www.kitehosting.com
      127.0.0.1 ware2006.com
      127.0.0.1 www.ware2006.com
      127.0.0.1 filestore.com
      127.0.0.1 www.filestore.com
      127.0.0.1 systemupdates.net
      127.0.0.1 www.systemupdates.net
      127.0.0.1 logs.vapochille.com
      127.0.0.1 www.logs.vapochille.com
      127.0.0.1 goldenfreehost.com
      127.0.0.1 www.goldenfreehost.com
      127.0.0.1 todaywarnings.com
      127.0.0.1 www.todaywarnings.com
      127.0.0.1 spywarequake.com
      127.0.0.1 spywarequake.info
      127.0.0.1 www.spywarequake.info
      127.0.0.1 www.spywarequake.com
      127.0.0.1 download2.spywarequake.com
      127.0.0.1 download3.spywarequake.com
      127.0.0.1 download4.spywarequake.com
      127.0.0.1 download5.spywarequake.com
      127.0.0.1 download7.spywarequake.com
      127.0.0.1 download8.spywarequake.com
      127.0.0.1 download9.spywarequake.com
      127.0.0.1 download10.spywarequake.com
      127.0.0.1 download11.spywarequake.com
      127.0.0.1 download12.spywarequake.com
      127.0.0.1 download13.spywarequake.com
      127.0.0.1 download15.spywarequake.com
      127.0.0.1 updates.spywarequake.com
      127.0.0.1 206.161.124.98
      127.0.0.1 69.31.131.82
      127.0.0.1 207.226.162.34
      127.0.0.1 urgentsystemupdate.com
      127.0.0.1 www.urgentsystemupdate.com
      127.0.0.1 dl2.spywarestrike.com
      127.0.0.1 dl3.spywarestrike.com
      127.0.0.1 dl4.spywarestrike.com
      127.0.0.1 dl5.spywarestrike.com
      127.0.0.1 dl6.spywarestrike.com
      127.0.0.1 dl7.spywarestrike.com
      127.0.0.1 dl8.spywarestrike.com
      127.0.0.1 nospywaresoft.com
      127.0.0.1 spywarestrike.com
      127.0.0.1 www.nospywaresoft.com
      127.0.0.1 www.spywarestrike.com
      127.0.0.1 69.31.81.82
      127.0.0.1 spyaxesupport.com
      127.0.0.1 www.spyaxesupport.com
      127.0.0.1 download3.spyaxe.com
      127.0.0.1 download4.spyaxe.com
      127.0.0.1 download5.spyaxe.com
      127.0.0.1 download6.spyaxe.com
      127.0.0.1 dl2.spyfalcon.com
      127.0.0.1 dl3.spyfalcon.com
      127.0.0.1 dl4.spyfalcon.com
      127.0.0.1 dl5.spyfalcon.com
      127.0.0.1 dl9.spyfalcon.com
      127.0.0.1 dl10.spyfalcon.com
      127.0.0.1 dl16.spyfalcon.com
      127.0.0.1 www.sgrunt.biz
      127.0.0.1 traffbest.biz
      127.0.0.1 www.traffbest.biz
      127.0.0.1 securityfeature.com
      127.0.0.1 www.securityfeature.com
      127.0.0.1 pimasoft.com
      127.0.0.1 www.pimasoft.com
      127.0.0.1 blackhawksoftware.com
      127.0.0.1 www.blackhawksoftware.com
      127.0.0.1 spy-sniper.com
      127.0.0.1 www.spy-sniper.com
      127.0.0.1 safetydefender.com
      127.0.0.1 www.safetydefender.com
      127.0.0.1 securitywarnings.net
      127.0.0.1 www.securitywarnings.net
      127.0.0.1 urgentsystemupdate.biz
      127.0.0.1 www.urgentsystemupdate.biz
      127.0.0.1 antispylab.com
      127.0.0.1 www.antispylab.com
      127.0.0.1 spywaresheriff.com
      127.0.0.1 www.spywaresheriff.com
      127.0.0.1 allmegabucks.com
      127.0.0.1 www.allmegabucks.com
      127.0.0.1 rizalof.com
      127.0.0.1 www.rizalof.com
      127.0.0.1 rc.rizalof.com
      127.0.0.1 media-codec.com
      127.0.0.1 www.media-codec.com
      127.0.0.1 SpywareScraper.com
      127.0.0.1 www.SpywareScraper.com
      127.0.0.1 crystalysmedia.com
      127.0.0.1 www.crystalysmedia.com
      127.0.0.1 180solutions.com
      127.0.0.1 cts.180solutions.com
      127.0.0.1 bis.180solutions.com
      127.0.0.1 downloads.180solutions.com
      127.0.0.1 uploads.180solutions.com
      127.0.0.1 installs.180solutions.com
      127.0.0.1 config.180solutions.com
      127.0.0.1 ping.180solutions.com
      127.0.0.1 tv.180solutions.com
      127.0.0.1 nowhere.180solutions.com
      127.0.0.1 www.180solutions.com
      127.0.0.1 180searchassistant.com
      127.0.0.1 www.180searchassistant.com
      127.0.0.1 theguardservices.com
      127.0.0.1 www.theguardservices.com
      127.0.0.1 securitybulletin.net
      127.0.0.1 www.securitybulletin.net
      127.0.0.1 www.supernet.speedserv.com
      127.0.0.1 spyonthis.net
      127.0.0.1 download.spyonthis.net
      127.0.0.1 www.spyonthis.net
      127.0.0.1 hijack-this.net
      127.0.0.1 www.hijack-this.net
      127.0.0.1 errorsafe.com
      127.0.0.1 de.errorsafe.com
      127.0.0.1 download.errorsafe.com
      127.0.0.1 www.errorsafe.com
      127.0.0.1 amaena.com
      127.0.0.1 trial.updates.winsoftware.com
      127.0.0.1 instlog.winfixer.com
      127.0.0.1 winfixer2006.com
      127.0.0.1 www.winfixer2006.com
      127.0.0.1 webtopsecurity.com
      127.0.0.1 www.webtopsecurity.com
      127.0.0.1 traff5all.biz
      127.0.0.1 www.traff5all.biz
      127.0.0.1 1-extreme.biz
      127.0.0.1 www.1-extreme.biz
      127.0.0.1 download.bravesentry.com
      127.0.0.1 www.download.bravesentry.com
      127.0.0.1 evko.biz
      127.0.0.1 www.evko.biz
      127.0.0.1 lavasoftupdate.com
      127.0.0.1 www.lavasoftupdate.com
      127.0.0.1 download.secureyournet.biz
      127.0.0.1 www.download.secureyournet.biz
      127.0.0.1 secureyournet.biz
      127.0.0.1 www.secureyournet.biz
      127.0.0.1 windupdates.com
      127.0.0.1 asdbiz.biz
      127.0.0.1 www.asdbiz.biz
      127.0.0.1 spywarelabs.com
      127.0.0.1 www.spywarelabs.com
      127.0.0.1 traffweb1.biz
      127.0.0.1 www.traffweb1.biz
      127.0.0.1 newtoolbar.biz
      127.0.0.1 www.newtoolbar.biz
      127.0.0.1 buytraff.biz
      127.0.0.1 www.buytraff.biz
      127.0.0.1 safetyuptodate.com
      127.0.0.1 www.safetyuptodate.com
      127.0.0.1 crazywinnings.com
      127.0.0.1 frame.crazywinnings.com
      127.0.0.1 www.crazywinnings.com
      127.0.0.1 topconverting.com
      127.0.0.1 www.topconverting.com
      127.0.0.1 casalemedia.com
      127.0.0.1 b.casalemedia.com
      127.0.0.1 www.casalemedia.com
      127.0.0.1 addictivetechnologies.com
      127.0.0.1 www.addictivetechnologies.com
      127.0.0.1 addictivetechnologies.net
      127.0.0.1 www.addictivetechnologies.net
      127.0.0.1 admin2cash.biz
      127.0.0.1 www.admin2cash.biz
      127.0.0.1 advcash.biz
      127.0.0.1 www.advcash.biz
      127.0.0.1 all4internet.com
      127.0.0.1 www.all4internet.com
      127.0.0.1 bettersearch.biz
      127.0.0.1 www.bettersearch.biz
      127.0.0.1 c4tdownload.com
      127.0.0.1 www.c4tdownload.com
      127.0.0.1 clickspring.net
      127.0.0.1 www.clickspring.net
      127.0.0.1 contentmatch.net
      127.0.0.1 www.contentmatch.net
      127.0.0.1 dialer-shop.com
      127.0.0.1 www.dialer-shop.com
      127.0.0.1 dialoff.com
      127.0.0.1 www.dialoff.com
      127.0.0.1 energy-factor.com
      127.0.0.1 www.energy-factor.com
      127.0.0.1 hardcorefantasyland.com
      127.0.0.1 www.hardcorefantasyland.com
      127.0.0.1 hardfootballbabes.com
      127.0.0.1 www.hardfootballbabes.com
      127.0.0.1 linkautomatici.com
      127.0.0.1 www.linkautomatici.com
      127.0.0.1 master69.biz
      127.0.0.1 www.master69.biz
      127.0.0.1 master70.biz
      127.0.0.1 www.master70.biz
      127.0.0.1 master71.biz
      127.0.0.1 www.master71.biz
      127.0.0.1 mcdial.biz
      127.0.0.1 www.mcdial.biz
      127.0.0.1 mt-download.com
      127.0.0.1 www.mt-download.com
      127.0.0.1 my-teensex.com
      1. bonsoir
        repost un rapport hijackthis
        1. bonsoir,

          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 20:20:23, on 24/03/2008
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          C:\Program Files\Macromedia\Flash Media Server 2\FMSMaster.exe
          C:\Program Files\Macromedia\Flash Media Server 2\FMSAdmin.exe
          C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          C:\Program Files\Macromedia\Flash Media Server 2\FMSEdge.exe
          C:\Program Files\Macromedia\Flash Media Server 2\FMSCore.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
          C:\Acer\Empowering Technology\eRecovery\Monitor.exe
          C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
          C:\Program Files\Acer\Acer eMode Management\AspireService.exe
          C:\Program Files\Acer\Acer eConsole\MediaSync.exe
          C:\WINDOWS\system32\rundll32.exe
          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\WINDOWS\RTHDCPL.EXE
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
          C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
          C:\Program Files\Google\Google Updater\GoogleUpdater.exe
          C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
          C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
          C:\WINDOWS\system32\WgaTray.exe
          C:\Program Files\Mozilla Firefox\firefox.exe
          C:\Program Files\Windows Live\Messenger\usnsvc.exe
          C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe
          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

          R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O2 - BHO: VirtualCamera IEMenu Class - {0246A1A7-820A-469A-85A7-7B7F01EB808C} - (no file)
          O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
          O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
          O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
          O4 - HKLM\..\Run: [LaunchApp] Alaunch
          O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
          O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
          O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
          O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
          O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
          O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
          O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
          O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
          O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
          O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
          O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
          O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
          O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
          O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
          O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
          O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
          O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
          O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O14 - IERESET.INF: START_PAGE_URL=https://www.free.fr/freebox/index.html
          O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
          O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
          O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
          O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
          O16 - DPF: {2D2BEE6E-3C9A-4D58-B9EC-458EDB28D0F6} - https://www.afternic.com/domains/drivecleaner.com
          O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
          O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
          O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
          O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
          O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
          O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by103fd.bay103.hotmail.msn.com/activex/HMAtchmt.ocx
          O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
          O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          O23 - Service: Flash Media Server (FMS) (FMS) - Macromedia, Inc. - C:\Program Files\Macromedia\Flash Media Server 2\FMSMaster.exe
          O23 - Service: Flash Media Administration Server (FMSAdmin) - Macromedia, Inc. - C:\Program Files\Macromedia\Flash Media Server 2\FMSAdmin.exe
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
      2. scan avec MalwareByte's Anti-Malware, nettoie ce qui est trouvé et colle le rapport:

        https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
        1. et voila!

          Malwarebytes' Anti-Malware 1.09
          Version de la base de données: 534

          Type de recherche: Examen complet (C:\|D:\|F:\|G:\|H:\|I:\|)
          Eléments examinés: 130171
          Temps écoulé: 31 minute(s), 8 second(s)

          Processus mémoire infecté(s): 0
          Module(s) mémoire infecté(s): 0
          Clé(s) du Registre infectée(s): 2
          Valeur(s) du Registre infectée(s): 0
          Elément(s) de données du Registre infecté(s): 0
          Dossier(s) infecté(s): 0
          Fichier(s) infecté(s): 0

          Processus mémoire infecté(s):
          (Aucun élément nuisible détecté)

          Module(s) mémoire infecté(s):
          (Aucun élément nuisible détecté)

          Clé(s) du Registre infectée(s):
          HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{daed9266-8c28-4c1c-8b58-5c66eff1d302} (Search.Hijack) -> Quarantined and deleted successfully.
          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{2d2bee6e-3c9a-4d58-b9ec-458edb28d0f6} (Rogue.DriveCleanerr) -> Quarantined and deleted successfully.

          Valeur(s) du Registre infectée(s):
          (Aucun élément nuisible détecté)

          Elément(s) de données du Registre infecté(s):
          (Aucun élément nuisible détecté)

          Dossier(s) infecté(s):
          (Aucun élément nuisible détecté)

          Fichier(s) infecté(s):
          (Aucun élément nuisible détecté)

          merci
      3. relance hijackthis
        selectionne do a system scan only
        et coches les lignes suivantes:

        O16 - DPF: {2D2BEE6E-3C9A-4D58-B9EC-458EDB28D0F6} - https://www.afternic.com/domains/drivecleaner.com

        installdrivecleanerstart_fr.cab
        puis clic sur le bouton "Fix Checked"
        puis tu me repost un rapport hijackthis
        1. la ligne dont tu me parle ne se trouve pas sur hijack...
        2. @juliareposte un nouveau hijackthis stp

          a plus tard
      4. voici le scan!

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 19:33:40, on 25/03/2008
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        C:\Program Files\Alwil Software\Avast4\ashServ.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
        C:\Program Files\Macromedia\Flash Media Server 2\FMSMaster.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\Macromedia\Flash Media Server 2\FMSAdmin.exe
        C:\Program Files\Macromedia\Flash Media Server 2\FMSEdge.exe
        C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        C:\Program Files\Macromedia\Flash Media Server 2\FMSCore.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
        C:\Acer\Empowering Technology\eRecovery\Monitor.exe
        C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
        C:\Program Files\Acer\Acer eMode Management\AspireService.exe
        C:\Program Files\Acer\Acer eConsole\MediaSync.exe
        C:\WINDOWS\system32\rundll32.exe
        C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        C:\WINDOWS\RTHDCPL.EXE
        C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
        C:\Program Files\Google\Google Updater\GoogleUpdater.exe
        C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
        C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
        C:\WINDOWS\system32\WgaTray.exe
        C:\Program Files\Mozilla Firefox\firefox.exe
        C:\Program Files\Fichiers communs\Teleca Shared\Generic.exe
        C:\Program Files\Windows Live\Messenger\usnsvc.exe
        C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
        C:\WINDOWS\system32\wuauclt.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

        R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1036
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O2 - BHO: VirtualCamera IEMenu Class - {0246A1A7-820A-469A-85A7-7B7F01EB808C} - (no file)
        O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
        O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
        O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
        O4 - HKLM\..\Run: [LaunchApp] Alaunch
        O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
        O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
        O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
        O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
        O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
        O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
        O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
        O4 - HKLM\..\Run: [AspireService] C:\Program Files\Acer\Acer eMode Management\AspireService.exe
        O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
        O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
        O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
        O4 - HKLM\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [QuickTime Task] "C:\Program Files\K-Lite Codec Pack\QuickTime\qttask.exe" -atboottime
        O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
        O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
        O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
        O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O14 - IERESET.INF: START_PAGE_URL=https://www.free.fr/freebox/index.html
        O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
        O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
        O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
        O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
        O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab
        O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
        O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
        O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
        O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by103fd.bay103.hotmail.msn.com/activex/HMAtchmt.ocx
        O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
        O23 - Service: Acer Media Server - Acer Inc. - C:\Program Files\Acer\Acer eConsole\MediaServerService.exe
        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
        O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
        O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
        O23 - Service: Flash Media Server (FMS) (FMS) - Macromedia, Inc. - C:\Program Files\Macromedia\Flash Media Server 2\FMSMaster.exe
        O23 - Service: Flash Media Administration Server (FMSAdmin) - Macromedia, Inc. - C:\Program Files\Macromedia\Flash Media Server 2\FMSAdmin.exe
        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
        1. C BON
          on y est presque une derniére

          · Télécharge ToolsCleaner de A.Roshtein sur ton Bureau.(sur un des 2 liens)
          http://pagesperso-orange.fr/AceRothstein/ToolsCleaner2.exe
          http://a-rothstein.changelog.fr/TC/ToolsCleaner2.exe
          · Clique sur Recherche et laisse le scan se terminer.
          · Clique, sur Suppression pour finaliser.
          · Tu peux, si tu le souhaites, te servir des Options facultatives.
          · Clique sur Quitter, pour que le rapport puisse se créer.
          · Poste moi le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur( C:\).
          1. et voilaaa!

            -->- Recherche:

            C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
            C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: trouvé !
            C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
            C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé !
            C:\Documents and Settings\II\Bureau\vide poche\Navilog1.exe: trouvé !
            C:\Documents and Settings\II\Bureau\vide poche\Navilog1.lnk: trouvé !
            C:\Documents and Settings\II\Bureau\vide poche\SmitFraudFix.exe: trouvé !
            C:\Documents and Settings\II\Bureau\vide poche\SmitFraudfix: trouvé !
            C:\Program Files\Navilog1: trouvé !
            C:\Program Files\Navilog1\Navilog1.bat: trouvé !
            C:\Program Files\Trend Micro\HijackThis: trouvé !
            C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !

            Corbeille vidée!
            Fichiers temporaires nettoyés !
            ---------------------------------
            -->- Suppression:
            C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
            C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé !
            C:\Documents and Settings\II\Bureau\vide poche\Navilog1.exe: supprimé !
            C:\Documents and Settings\II\Bureau\vide poche\Navilog1.lnk: supprimé !
            C:\Documents and Settings\II\Bureau\vide poche\SmitFraudFix.exe: supprimé !
            C:\Program Files\Navilog1\Navilog1.bat: supprimé !
            C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
            C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
            C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: supprimé !
            C:\Documents and Settings\II\Bureau\vide poche\SmitFraudfix: supprimé !
            C:\Program Files\Navilog1: supprimé !
            C:\Program Files\Trend Micro\HijackThis: supprimé !
            1. pour moi c terminer

              bonne soirée

              a+
              1. merci beaucoup,je n'ai plus de pub grace a toi...
                quel logiciel me conseil tu et antivirus pour éviter ce genre de problemes?