Probléme de spyware

iceman -  
Bonjour

Depuis dimanche dernier, il y avait trois icones sur mon bureau, Error cleaner, Privacy Protector et Spyware&Malware protection. De plus en bas à droite de l'écran un rond rouge avec une croix blanche qui clignote et qui me disait "System alert". Dés lors, j'ai utilisé spybot pour les effacer. Cependant, une icone persiste c'est privacy protector et un triangle jaune avec un point d'exclamation noir à l'intérieur a succédé a la croix blanche. Mais le triangle s'enléve en cliquan dessus et il ouvre une page web pour un antispyware... En outre, aprés quelques instant j'ai constaté que les trois icones réapparaissent. Je recoit par intermitence une fenetre qui me dit que je suis attaqué par un virus Wormwin 32. Pourtant, mon pack securité de neuf telecom ne détecte rien...
Je ne sait plus quoi faire.
Donc, est ce que quelqu'un pourrait m'aider et m'indiquer la marche à suivre pour éliminer ce probleme.
Merci de votre aide....
Configuration: Windows XP
Internet Explorer 7.0

54 réponses

Résumé de la discussion

Une problématique de sécurité est décrite: trois icônes intrusives (Error cleaner, Privacy Protector et Spyware & Malware protection) et un avertissement clignotant 'System alert' suggèrent une infection par Worm.Win32 sur Windows XP. Des utilisateurs essayent Spybot puis redémarrent, constatent qu'Privacy Protector persiste et un triangle jaune avec un point d'exclamation s'affiche, tandis que les trois icônes réapparaissent peu après. Plusieurs réponses proposent des outils de détection et nettoyage comme HijackThis et VundoFix, indiquant des entrées malveillantes et des DLL à supprimer ou réparer, puis exigent une vérification approfondie. Des logs comme HijackThis peuvent révéler des composants douteux et nécessiter une désinfection manuelle, tandis que certains participants signalent la présence d'un pack Sécurité à risque et l'importance de sauvegarder les données.

Bobot (l’IA à votre service)
  1. Utilisateur anonyme
    BONJOUR

    Télécharger sur le bureau
    http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe
    = clic droit sur Hijackthis ==> renommer ==> écrire : test.exe ( à la place de hijackthis.exe) <== Important
    =Double-clic dessus
    = Clic Do a system scan and save the log
    = un rapport s'ouvre ==> l'enregistrer sur le bureau et poste le rapport

    telecharge smitfraudix

    http://siri.urz.free.fr/Fix/SmitfraudFix.exe
    # Double clique sur SmitfraudFix.exe
    # Sélectionner 1 et pressez Entrée dans le menu pour créer un rapport des fichiers responsables de l'infection. Le rapport se trouve à la racine du disque système C:\rapport.txt/list Poste le rapport dans ton prochain message.
    1. iceman
      Voila le rapport avec Hijackthis:

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 17:10:35, on 21/04/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16640)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      C:\Program Files\Norton Internet Security\ISSVC.exe
      C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
      C:\PROGRA~1\PACKSC~1\backweb\361343\Program\SERVIC~1.EXE
      c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
      C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
      C:\Program Files\Pack Sécurité\Anti-Virus\fsgk32st.exe
      C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
      C:\Program Files\Pack Sécurité\Anti-Virus\FSGK32.EXE
      C:\Program Files\Pack Sécurité\backweb\361343\Program\fspex.exe
      C:\Program Files\Pack Sécurité\backweb\361343\program\fsbwsys.exe
      C:\Program Files\Pack Sécurité\Common\FSMA32.EXE
      c:\APPS\HIDSERVICE\HIDSERVICE.exe
      C:\Program Files\Pack Sécurité\Common\FSMB32.EXE
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
      C:\Program Files\Pack Sécurité\Common\FCH32.EXE
      C:\Program Files\Microsoft SQL Server\MSSQL$INVENTORCONTENT\Binn\sqlservr.exe
      C:\Program Files\Pack Sécurité\Anti-Virus\fsqh.exe
      C:\Program Files\Pack Sécurité\Common\FAMEH32.EXE
      C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Program Files\Pack Sécurité\Anti-Virus\fsrw.exe
      C:\Program Files\Pack Sécurité\FSPC\fspc.exe
      C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      C:\WINDOWS\system32\slserv.exe
      C:\WINDOWS\system32\svchost.exe
      c:\APPS\Powercinema\Kernel\TV\CLSched.exe
      C:\Program Files\Pack Sécurité\Anti-Virus\fssm32.exe
      C:\Program Files\Pack Sécurité\FWES\Program\fsdfwd.exe
      C:\Program Files\Pack Sécurité\Anti-Virus\fsav32.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Documents and Settings\All Users\Application Data\spatwtip\ebknafir.exe
      C:\WINDOWS\system32\RUNDLL32.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Apps\Powercinema\PCMService.exe
      C:\apps\ABoard\ABoard.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\D-Tools\daemon.exe
      C:\apps\ABoard\AOSD.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Pack Sécurité\Common\FSM32.EXE
      C:\WINDOWS\system32\almryrcr.exe
      C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\BitComet\BitComet.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE
      C:\documents and settings\farid\local settings\application data\qddzopibi.exe
      C:\Program Files\Pack Sécurité\Anti-Spyware\fsaw.exe
      C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
      C:\Program Files\Pack Sécurité\FSGUI\fsguidll.exe
      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
      C:\Program Files\Windows Live\Messenger\usnsvc.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NSMdtr.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
      C:\Documents and Settings\FARID\Bureau\test.exe.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fr.htm
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.11.30.dll
      O2 - BHO: DVA Storm - {4C9C9447-3658-44C9-8490-D96B0AB57C88} - C:\WINDOWS\lgmxvpatgbn.dll
      O2 - BHO: PBFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D} - C:\WINDOWS\system32\pbfrv2.dll
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: (no name) - {61D02CDA-380C-45C7-B1D1-6109BD40FCBB} - C:\WINDOWS\system32\pmnmljHB.dll (file missing)
      O2 - BHO: (no name) - {6A6EAE1B-4AD6-4035-974D-504D6DBAA9C3} - C:\WINDOWS\system32\fccBrrPG.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: (no name) - {8EFDDA7C-B0D4-4D21-A755-A8914CDDAA7A} - C:\WINDOWS\system32\mlJDssSl.dll (file missing)
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: (no name) - {9807712F-B343-4C8B-BECB-6CEB025B36AE} - C:\WINDOWS\system32\nnnkHbYs.dll (file missing)
      O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
      O2 - BHO: (no name) - {B3CB5A1C-F67E-470C-8AB0-2ED25F34634F} - C:\WINDOWS\system32\pmnKBQjj.dll (file missing)
      O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
      O2 - BHO: (no name) - {C3E0AEAE-F02B-44D0-812E-6EA25C4E579F} - C:\WINDOWS\system32\hgGxUNHB.dll (file missing)
      O2 - BHO: (no name) - {DED745E0-7751-4634-807F-72EDC0C81F12} - C:\WINDOWS\system32\cbXPhIaB.dll (file missing)
      O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O2 - BHO: (no name) - {EDF92D17-E048-4B50-9084-2195A841548A} - C:\WINDOWS\system32\iifccddc.dll (file missing)
      O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
      O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
      O3 - Toolbar: PBFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D} - C:\WINDOWS\system32\pbfrv2.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O3 - Toolbar: qtvglped - {3D91099B-562D-49EC-BDBD-78C5DE9CAED9} - C:\WINDOWS\qtvglped.dll
      O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
      O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
      O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
      O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Sécurité\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Pack Sécurité\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Sécurité\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
      O4 - HKLM\..\RunOnce: [Spybot - Search & Destroy] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
      O4 - HKLM\..\RunOnce: [SpybotDeletingA2975] command /c del "C:\WINDOWS\system32\hgGxUNHB.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingC1723] cmd /c del "C:\WINDOWS\system32\hgGxUNHB.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingA3894] command /c del "C:\WINDOWS\system32\hgGxUNHB.dll_old"
      O4 - HKLM\..\RunOnce: [SpybotDeletingC7523] cmd /c del "C:\WINDOWS\system32\hgGxUNHB.dll_old"
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
      O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "C:\WINDOWS\TEMP\E_SF2.tmp" /EF "HKCU"
      O4 - HKCU\..\Run: [Instant Access] C:\WINDOWS\system32\nsinet.exe /res
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKCU\..\Run: [pqrnuchx] C:\WINDOWS\system32\ahsbedyx.exe
      O4 - HKCU\..\Run: [qcxzztxl] C:\WINDOWS\system32\nwlmdqrg.exe
      O4 - HKCU\..\Run: [lovarwlb] C:\WINDOWS\system32\exmjuvap.exe
      O4 - HKCU\..\Run: [otiqoefeg] c:\documents and settings\farid\local settings\application data\otiqoefeg.exe otiqoefeg
      O4 - HKCU\..\RunOnce: [SpybotDeletingD2961] cmd /c del "C:\WINDOWS\system32\jqcigmuo.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingB56] command /c del "C:\WINDOWS\system32\hgGxUNHB.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingD5000] cmd /c del "C:\WINDOWS\system32\hgGxUNHB.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingB6775] command /c del "C:\WINDOWS\system32\hgGxUNHB.dll_old"
      O4 - HKCU\..\RunOnce: [SpybotDeletingD484] cmd /c del "C:\WINDOWS\system32\hgGxUNHB.dll_old"
      O4 - HKLM\..\Policies\Explorer\Run: [hNkvaz1JWm] C:\Documents and Settings\All Users\Application Data\spatwtip\ebknafir.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O4 - Global Startup: Pack Sécurité.lnk = ?
      O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
      O8 - Extra context menu item: &Bloquer cette fenêtre pub. - C:\Program Files\Pack Sécurité\Anti-Spyware\blockpopups.htm
      O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
      O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
      O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
      O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Sécurité\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Sécurité\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Sécurité\FSPC\fspcmsie.dll
      O9 - Extra button: Protection IE - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Sécurité\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: Protection IE... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Sécurité\Anti-Spyware\ieshield.dll
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (file missing)
      O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Researcher\EROPROJ.DLL
      O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.1.11.30.dll/206 (file missing)
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
      O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/advanced/2.0.2.3/cfweb_activex.camfrogweb.com-advanced-2.0.2.3_instmodule.exe
      O20 - Winlogon Notify: fccBrrPG - C:\WINDOWS\SYSTEM32\fccBrrPG.dll
      O21 - SSODL: omlbpkaw - {DF049233-E66A-4A04-9D02-84E886184EB4} - C:\WINDOWS\omlbpkaw.dll
      O21 - SSODL: pmsoarbf - {1687B0EB-9EF7-4CD8-9144-792483ABA73D} - C:\WINDOWS\pmsoarbf.dll
      O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
      O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
      O23 - Service: Pack Sécurité (BackWeb Plug-in - 361343) - Pack Securite - C:\PROGRA~1\PACKSC~1\backweb\361343\Program\SERVIC~1.EXE
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
      O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
      O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
      O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
      O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Sécurité\Anti-Virus\fsgk32st.exe
      O23 - Service: FSBWSYS - F-Secure Corp. - C:\Program Files\Pack Sécurité\backweb\361343\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Sécurité\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Pack Sécurité\Common\FSMA32.EXE
      O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
      O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
      O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
      O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
      O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
  2. iceman
    voila pour SmitfraudFix:

    SmitFraudFix v2.315

    Rapport fait à 17:15:31,54, 21/04/2008
    Executé à partir de C:\Documents and Settings\FARID\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» Process

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Norton Internet Security\ISSVC.exe
    C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
    C:\PROGRA~1\PACKSC~1\backweb\361343\Program\SERVIC~1.EXE
    c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
    C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
    C:\Program Files\Pack Sécurité\Anti-Virus\fsgk32st.exe
    C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
    C:\Program Files\Pack Sécurité\Anti-Virus\FSGK32.EXE
    C:\Program Files\Pack Sécurité\backweb\361343\Program\fspex.exe
    C:\Program Files\Pack Sécurité\backweb\361343\program\fsbwsys.exe
    C:\Program Files\Pack Sécurité\Common\FSMA32.EXE
    c:\APPS\HIDSERVICE\HIDSERVICE.exe
    C:\Program Files\Pack Sécurité\Common\FSMB32.EXE
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Pack Sécurité\Common\FCH32.EXE
    C:\Program Files\Microsoft SQL Server\MSSQL$INVENTORCONTENT\Binn\sqlservr.exe
    C:\Program Files\Pack Sécurité\Anti-Virus\fsqh.exe
    C:\Program Files\Pack Sécurité\Common\FAMEH32.EXE
    C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Pack Sécurité\Anti-Virus\fsrw.exe
    C:\Program Files\Pack Sécurité\FSPC\fspc.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\WINDOWS\system32\slserv.exe
    C:\WINDOWS\system32\svchost.exe
    c:\APPS\Powercinema\Kernel\TV\CLSched.exe
    C:\Program Files\Pack Sécurité\Anti-Virus\fssm32.exe
    C:\Program Files\Pack Sécurité\FWES\Program\fsdfwd.exe
    C:\Program Files\Pack Sécurité\Anti-Virus\fsav32.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Documents and Settings\All Users\Application Data\spatwtip\ebknafir.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Apps\Powercinema\PCMService.exe
    C:\apps\ABoard\ABoard.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\D-Tools\daemon.exe
    C:\apps\ABoard\AOSD.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Pack Sécurité\Common\FSM32.EXE
    C:\WINDOWS\system32\almryrcr.exe
    C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\BitComet\BitComet.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE
    C:\documents and settings\farid\local settings\application data\qddzopibi.exe
    C:\Program Files\Pack Sécurité\Anti-Spyware\fsaw.exe
    C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
    C:\Program Files\Pack Sécurité\FSGUI\fsguidll.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Windows Live\Messenger\usnsvc.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NSMdtr.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Documents and Settings\FARID\Bureau\test.exe.exe
    C:\WINDOWS\system32\cmd.exe

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    Fichier hosts corrompu !

    127.0.0.1 www.legal-at-spybot.info
    127.0.0.1 legal-at-spybot.info

    »»»»»»»»»»»»»»»»»»»»»»»» C:\

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\FARID

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\FARID\Application Data

    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\FARID\Favoris

    »»»»»»»»»»»»»»»»»»»»»»»» Bureau

    C:\DOCUME~1\FARID\Bureau\map.txt PRESENT !
    C:\DOCUME~1\FARID\Bureau\Privacy Protector.url PRESENT !

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="Ma page d'accueil"

    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
    1. Utilisateur anonyme
      # Redémarre l'ordinateur en mode sans échec (au démarrage de l'ordinateur, tapoter F8 )
      # Double clique sur SmitfraudFix.exe
      # Sélectionner 2 et pressez Entrée dans le menu pour supprimer les fichiers responsables de l'infection.
      # A la question: Voulez-vous nettoyer le registre ? répondre O (oui) et pressez Entrée afin de débloquer le fond d'écran et supprimer les clés de registre de l'infection. Le fix déterminera si le fichier wininet.dll est infecté. A la question: Corriger le fichier infecté ? répondre O (oui) et pressez Entrée pour remplacer le fichier corrompu.
      # Un redémarrage sera peut être nécessaire pour terminer la procedure de nettoyage. Le rapport se trouve à la racine du disque système C:\rapport.txt /list Poste le rapport dans ton prochain message.

      est dit moi si les icones ont disparues et si tu as encore les messages d'alertes!!
  3. iceman
    Meme si mon probléme n'est pas encore résolu je vous remerci beaucoup de bien vouloir m'aider.
    1. Utilisateur anonyme
      mais de rien fait bien les manips !!
  4. iceman
    J'ai répondu a la question: Voulez-vous nettoyer le registre ? répondre O (oui) et pressez Entrée. Mais on ne me pose pas la seconde question. Est-ce normal ?
    2. iceman
      la fenétre m'indique de fermez tous les programmes, un redémarrage peut étre necessaire
      1. iceman
        voici le rapport:

        SmitFraudFix v2.315

        Rapport fait à 17:33:21,14, 21/04/2008
        Executé à partir de C:\Documents and Settings\FARID\Bureau\SmitfraudFix
        OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
        Le type du système de fichiers est NTFS
        Fix executé en mode sans echec

        »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

        SrchSTS.exe by S!Ri
        Search SharedTaskScheduler's .dll

        »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

        »»»»»»»»»»»»»»»»»»»»»»»» hosts

        127.0.0.1 localhost
        127.0.0.1 www.007guard.com
        127.0.0.1 007guard.com
        127.0.0.1 008i.com
        127.0.0.1 www.008k.com
        127.0.0.1 008k.com
        127.0.0.1 www.00hq.com
        127.0.0.1 00hq.com
        127.0.0.1 010402.com
        127.0.0.1 www.032439.com
        127.0.0.1 032439.com
        127.0.0.1 www.1001-search.info
        127.0.0.1 1001-search.info
        127.0.0.1 www.100888290cs.com
        127.0.0.1 100888290cs.com
        127.0.0.1 www.100sexlinks.com
        127.0.0.1 100sexlinks.com
        127.0.0.1 www.10sek.com
        127.0.0.1 10sek.com
        127.0.0.1 www.123topsearch.com
        127.0.0.1 123topsearch.com
        127.0.0.1 www.132.com
        127.0.0.1 132.com
        127.0.0.1 www.136136.net
        127.0.0.1 136136.net
        127.0.0.1 www.139mm.com
        127.0.0.1 139mm.com
        127.0.0.1 www.163ns.com
        127.0.0.1 163ns.com
        127.0.0.1 171203.com
        127.0.0.1 17-plus.com
        127.0.0.1 www.1800searchonline.com
        127.0.0.1 1800searchonline.com
        127.0.0.1 www.180searchassistant.com
        127.0.0.1 180searchassistant.com
        127.0.0.1 www.180solutions.com
        127.0.0.1 180solutions.com
        127.0.0.1 www.181.365soft.info
        127.0.0.1 181.365soft.info
        127.0.0.1 www.1987324.com
        127.0.0.1 1987324.com
        127.0.0.1 www.1-domains-registrations.com
        127.0.0.1 1-domains-registrations.com
        127.0.0.1 www.1-extreme.biz
        127.0.0.1 1-extreme.biz
        127.0.0.1 www.1sexparty.com
        127.0.0.1 1sexparty.com
        127.0.0.1 www.1stantivirus.com
        127.0.0.1 1stantivirus.com
        127.0.0.1 www.1stpagehere.com
        127.0.0.1 1stpagehere.com
        127.0.0.1 www.1stsearchportal.com
        127.0.0.1 1stsearchportal.com
        127.0.0.1 2.82211.net
        127.0.0.1 www.2006ooo.com
        127.0.0.1 www.2007-download.com
        127.0.0.1 2007-download.com
        127.0.0.1 www.2020search.com
        127.0.0.1 2020search.com
        127.0.0.1 20x2p.com
        127.0.0.1 www.24.365soft.info
        127.0.0.1 24.365soft.info
        127.0.0.1 www.24-7pharmacy.info
        127.0.0.1 24-7pharmacy.info
        127.0.0.1 www.24-7searching-and-more.com
        127.0.0.1 24-7searching-and-more.com
        127.0.0.1 www.24teen.com
        127.0.0.1 24teen.com
        127.0.0.1 www.2every.net
        127.0.0.1 2every.net
        127.0.0.1 2ndpower.com
        127.0.0.1 www.2search.com
        127.0.0.1 2search.com
        127.0.0.1 www.2search.org
        127.0.0.1 2search.org
        127.0.0.1 www.2squared.com
        127.0.0.1 2squared.com
        127.0.0.1 www.3322.org
        127.0.0.1 3322.org
        127.0.0.1 365soft.info
        127.0.0.1 www.36site.com
        127.0.0.1 36site.com
        127.0.0.1 3721.com
        127.0.0.1 39-93.com
        127.0.0.1 www.3abetterinternet.com
        127.0.0.1 3abetterinternet.com
        127.0.0.1 www.3bay.it
        127.0.0.1 3bay.it
        127.0.0.1 www.3ebay.it
        127.0.0.1 3ebay.it
        127.0.0.1 www.3xclipsonline.com
        127.0.0.1 3xclipsonline.com
        127.0.0.1 www.3xcurves.com
        127.0.0.1 3xcurves.com
        127.0.0.1 www.3xfestival.com
        127.0.0.1 3xfestival.com
        127.0.0.1 www.3x-festival.com
        127.0.0.1 3x-festival.com
        127.0.0.1 www.3x-galls.com
        127.0.0.1 3x-galls.com
        127.0.0.1 www.3xmiracle.com
        127.0.0.1 3xmiracle.com
        127.0.0.1 www.3xmoviesblog.com
        127.0.0.1 3xmoviesblog.com
        127.0.0.1 www.404dns.com
        127.0.0.1 404dns.com
        127.0.0.1 www.4199.com
        127.0.0.1 4199.com
        127.0.0.1 www.4corn.net
        127.0.0.1 4corn.net
        127.0.0.1 www.4ebay.it
        127.0.0.1 4ebay.it
        127.0.0.1 4klm.com
        127.0.0.1 www.4mpg.com
        127.0.0.1 4mpg.com
        127.0.0.1 www.4repubblica.it
        127.0.0.1 4repubblica.it
        127.0.0.1 www.4softget.com
        127.0.0.1 4softget.com
        127.0.0.1 www.5iscali.it
        127.0.0.1 5iscali.it
        127.0.0.1 www.5repubblica.it
        127.0.0.1 5repubblica.it
        127.0.0.1 www.5starvideos.com
        127.0.0.1 5starvideos.com
        127.0.0.1 www.5tiscali.it
        127.0.0.1 5tiscali.it
        127.0.0.1 www.5zgmu7o20kt5d8yq.com
        127.0.0.1 5zgmu7o20kt5d8yq.com
        127.0.0.1 www.680180.net
        127.0.0.1 680180.net
        127.0.0.1 www.6iscali.it
        127.0.0.1 6iscali.it
        127.0.0.1 www.6njaga.com
        127.0.0.1 6njaga.com
        127.0.0.1 www.6sek.com
        127.0.0.1 6sek.com
        127.0.0.1 www.6tiscali.it
        127.0.0.1 6tiscali.it
        127.0.0.1 www.70-music.com
        127.0.0.1 70-music.com
        127.0.0.1 www.7322.com
        127.0.0.1 7322.com
        127.0.0.1 75tz.com
        127.0.0.1 www.777search.com
        127.0.0.1 777search.com
        127.0.0.1 www.777top.com
        127.0.0.1 777top.com
        127.0.0.1 www.7939.com
        127.0.0.1 7939.com
        127.0.0.1 www.7search.com
        127.0.0.1 7search.com
        127.0.0.1 80gw6ry3i3x3qbrkwhxhw.032439.com
        127.0.0.1 www.80-music.com
        127.0.0.1 80-music.com
        127.0.0.1 82211.net
        127.0.0.1 8866.org
        127.0.0.1 www.888.com
        127.0.0.1 888.com
        127.0.0.1 www.8ad.com
        127.0.0.1 8ad.com
        127.0.0.1 www.90-music.com
        127.0.0.1 90-music.com
        127.0.0.1 www.9505.com
        127.0.0.1 9505.com
        127.0.0.1 www.971searchbox.com
        127.0.0.1 971searchbox.com
        127.0.0.1 a.bestmanage.org
        127.0.0.1 www.aaabesthomepage.com
        127.0.0.1 aaabesthomepage.com
        127.0.0.1 aaasexypics.com
        127.0.0.1 www.aaawebfinder.com
        127.0.0.1 aaawebfinder.com
        127.0.0.1 www.aaqadarsztriv.com
        127.0.0.1 aaqadarsztriv.com
        127.0.0.1 www.aaqada-rsztriv.com
        127.0.0.1 aaqada-rsztriv.com
        127.0.0.1 www.aaqadaueorn.com
        127.0.0.1 aaqadaueorn.com
        127.0.0.1 www.aaqada-ueorn.com
        127.0.0.1 aaqada-ueorn.com
        127.0.0.1 www.aaqada-ygco.com
        127.0.0.1 aaqada-ygco.com
        127.0.0.1 www.aaqada-ymct.com
        127.0.0.1 aaqada-ymct.com
        127.0.0.1 aavc.com
        127.0.0.1 www.abcdperformance.com
        127.0.0.1 abcdperformance.com
        127.0.0.1 www.abc-find.info
        127.0.0.1 abc-find.info
        127.0.0.1 www.abcsearch.com
        127.0.0.1 abcsearch.com
        127.0.0.1 www.abetterinternet.com
        127.0.0.1 abetterinternet.com
        127.0.0.1 www.abnetsoft.info
        127.0.0.1 abnetsoft.info
        127.0.0.1 www.aboutclicker.com
        127.0.0.1 aboutclicker.com
        127.0.0.1 www.abrp.net
        127.0.0.1 abrp.net
        127.0.0.1 www.absolutee.com
        127.0.0.1 absolutee.com
        127.0.0.1 www.abyssmedia.com
        127.0.0.1 abyssmedia.com
        127.0.0.1 www.ac66.cn
        127.0.0.1 ac66.cn
        127.0.0.1 access.navinetwork.com
        127.0.0.1 access.rapid-pass.net
        127.0.0.1 www.accessactivexvideo.com
        127.0.0.1 accessactivexvideo.com
        127.0.0.1 www.accessclips.com
        127.0.0.1 accessclips.com
        127.0.0.1 www.access-dvd.com
        127.0.0.1 access-dvd.com
        127.0.0.1 www.accesskeygenerator.com
        127.0.0.1 accesskeygenerator.com
        127.0.0.1 www.accessthefuture.net
        127.0.0.1 accessthefuture.net
        127.0.0.1 www.accessvid.net
        127.0.0.1 accessvid.net
        127.0.0.1 www.acemedic.com
        127.0.0.1 acemedic.com
        127.0.0.1 www.ace-webmaster.com
        127.0.0.1 ace-webmaster.com
        127.0.0.1 acjp.com
        127.0.0.1 www.acrobat-2007.com
        127.0.0.1 acrobat-2007.com
        127.0.0.1 www.acrobat-8.com
        127.0.0.1 acrobat-8.com
        127.0.0.1 www.acrobat-center.com
        127.0.0.1 acrobat-center.com
        127.0.0.1 www.acrobat-hq.com
        127.0.0.1 acrobat-hq.com
        127.0.0.1 www.acrobatreader-8.com
        127.0.0.1 acrobatreader-8.com
        127.0.0.1 www.acrobat-reader-8.de
        127.0.0.1 acrobat-reader-8.de
        127.0.0.1 www.acrobat-stop.com
        127.0.0.1 acrobat-stop.com
        127.0.0.1 www.actionbreastcancer.org
        127.0.0.1 actionbreastcancer.org
        127.0.0.1 www.activesearcher.info
        127.0.0.1 activesearcher.info
        127.0.0.1 www.activexaccessobject.com
        127.0.0.1 activexaccessobject.com
        127.0.0.1 www.activexaccessvideo.com
        127.0.0.1 activexaccessvideo.com
        127.0.0.1 www.activexemedia.com
        127.0.0.1 activexemedia.com
        127.0.0.1 www.activexmediaobject.com
        127.0.0.1 activexmediaobject.com
        127.0.0.1 www.activexmediapro.com
        127.0.0.1 activexmediapro.com
        127.0.0.1 www.activexmediasite.com
        127.0.0.1 activexmediasite.com
        127.0.0.1 www.activexmediasoftware.com
        127.0.0.1 activexmediasoftware.com
        127.0.0.1 www.activexmediasource.com
        127.0.0.1 activexmediasource.com
        127.0.0.1 www.activexmediatool.com
        127.0.0.1 activexmediatool.com
        127.0.0.1 www.activexmediatour.com
        127.0.0.1 activexmediatour.com
        127.0.0.1 www.activexsoftwares.com
        127.0.0.1 activexsoftwares.com
        127.0.0.1 www.activexsource.com
        127.0.0.1 activexsource.com
        127.0.0.1 www.activexupdate.com
        127.0.0.1 activexupdate.com
        127.0.0.1 www.activexvideo.com
        127.0.0.1 activexvideo.com
        127.0.0.1 www.activexvideotool.com
        127.0.0.1 activexvideotool.com
        127.0.0.1 www.ad.marketingsector.com
        127.0.0.1 ad.marketingsector.com
        127.0.0.1 www.ad.mokead.com
        127.0.0.1 ad.mokead.com
        127.0.0.1 ad.oinadserver.com
        127.0.0.1 ad.outerinfoads.com
        127.0.0.1 www.ad25.com
        127.0.0.1 ad25.com
        127.0.0.1 www.ad45.com
        127.0.0.1 ad45.com
        127.0.0.1 www.ad77.com
        127.0.0.1 ad77.com
        127.0.0.1 www.ad86.com
        127.0.0.1 ad86.com
        127.0.0.1 www.adamsupportgroup.org
        127.0.0.1 adamsupportgroup.org
        127.0.0.1 www.adarmor.com
        127.0.0.1 adarmor.com
        127.0.0.1 www.adasearch.com
        127.0.0.1 adasearch.com
        127.0.0.1 adaware.cc
        127.0.0.1 www.adawarenow.com
        127.0.0.1 adawarenow.com
        127.0.0.1 adchannel.contextplus.net
        127.0.0.1 www.addetect.com
        127.0.0.1 addetect.com
        127.0.0.1 www.add-hhh.info
        127.0.0.1 add-hhh.info
        127.0.0.1 www.addictivetechnologies.com
        127.0.0.1 addictivetechnologies.com
        127.0.0.1 www.addictivetechnologies.net
        127.0.0.1 addictivetechnologies.net
        127.0.0.1 www.addioerrori.com
        127.0.0.1 addioerrori.com
        127.0.0.1 www.add-manager.com
        127.0.0.1 add-manager.com
        127.0.0.1 www.adgate.info
        127.0.0.1 adgate.info
        127.0.0.1 www.adintelligence.net
        127.0.0.1 adintelligence.net
        127.0.0.1 www.adioserrores.com
        127.0.0.1 adioserrores.com
        127.0.0.1 www.adipics.com
        127.0.0.1 adipics.com
        127.0.0.1 www.adlogix.com
        127.0.0.1 adlogix.com
        127.0.0.1 www.admin2cash.biz
        127.0.0.1 admin2cash.biz
        127.0.0.1 adnet-plus.com
        127.0.0.1 www.adnetserver.com
        127.0.0.1 adnetserver.com
        127.0.0.1 adobe-download-now.com
        127.0.0.1 www.adobe-downloads.com
        127.0.0.1 adobe-downloads.com
        127.0.0.1 www.adobe-reader-8.fr
        127.0.0.1 adobe-reader-8.fr
        127.0.0.1 www.adprotect.com
        127.0.0.1 adprotect.com
        127.0.0.1 ads.centralmedia.ws
        127.0.0.1 ads.k8l.info
        127.0.0.1 ads.kmpads.com
        127.0.0.1 ads.kw.revenue.net
        127.0.0.1 ads.marketingsector.com
        127.0.0.1 ads.searchingbooth.com
        127.0.0.1 ads.z-quest.com
        127.0.0.1 ads1.revenue.net
        127.0.0.1 www.ads183.com
        127.0.0.1 ads183.com
        127.0.0.1 www.adscontex.com
        127.0.0.1 adscontex.com
        127.0.0.1 www.adservices1.enhance.com
        127.0.0.1 adservices1.enhance.com
        127.0.0.1 adservs.com
        127.0.0.1 www.adsextend.net
        127.0.0.1 adsextend.net
        127.0.0.1 www.adshttp.com
        127.0.0.1 adshttp.com
        127.0.0.1 www.adsniffer.com
        127.0.0.1 adsniffer.com
        127.0.0.1 www.adsonwww.com
        127.0.0.1 adsonwww.com
        127.0.0.1 www.adspics.com
        127.0.0.1 adspics.com
        127.0.0.1 www.adsrevenue.net
        127.0.0.1 adsrevenue.net
        127.0.0.1 www.adtrak.net
        127.0.0.1 adtrak.net
        127.0.0.1 adtrgt.com
        127.0.0.1 www.adult777search.info
        127.0.0.1 adult777search.info
        127.0.0.1 www.adultan.com
        127.0.0.1 adultan.com
        127.0.0.1 www.adult-engine-search.com
        127.0.0.1 adult-engine-search.com
        127.0.0.1 www.adult-erotic-guide.net
        127.0.0.1 adult-erotic-guide.net
        127.0.0.1 www.adultfilmsite.com
        127.0.0.1 adultfilmsite.com
        127.0.0.1 www.adult-friends-finder.net
        127.0.0.1 adult-friends-finder.net
        127.0.0.1 adultgambling.org
        127.0.0.1 adult-host.org
        127.0.0.1 www.adulthyperlinks.com
        127.0.0.1 adulthyperlinks.com
        127.0.0.1 www.adultmovieplus.com
        127.0.0.1 adultmovieplus.com
        127.0.0.1 www.adult-mpg.net
        127.0.0.1 adult-mpg.net
        127.0.0.1 adult-personal.us
        127.0.0.1 adultsgames.net
        127.0.0.1 www.adultsonlyvids.com
        127.0.0.1 adultsonlyvids.com
        127.0.0.1 www.adultsper.com
        127.0.0.1 adultsper.com
        127.0.0.1 www.adulttds.com
        127.0.0.1 adulttds.com
        127.0.0.1 www.adultzoneworld.com
        127.0.0.1 adultzoneworld.com
        127.0.0.1 www.advancedcleaner.com
        127.0.0.1 advancedcleaner.com
        127.0.0.1 www.advcash.biz
        127.0.0.1 advcash.biz
        127.0.0.1 advert.exaccess.ru
        127.0.0.1 www.advertisemoney.info
        127.0.0.1 advertisemoney.info
        127.0.0.1 advertising.paltalk.com
        127.0.0.1 www.advertising-money.info
        127.0.0.1 advertising-money.info
        127.0.0.1 ad-ware.cc
        127.0.0.1 www.ad-w-a-r-e.com
        127.0.0.1 ad-w-a-r-e.com
        127.0.0.1 www.a-d-w-a-r-e.com
        127.0.0.1 a-d-w-a-r-e.com
        127.0.0.1 www.adware.pro
        127.0.0.1 adware.pro
        127.0.0.1 www.adwarealert.com
        127.0.0.1 adwarealert.com
        127.0.0.1 www.ad-warealert.com
        127.0.0.1 ad-warealert.com
        127.0.0.1 www.adwarearrest.com
        127.0.0.1 adwarearrest.com
        127.0.0.1 www.adwarebazooka.com
        127.0.0.1 adwarebazooka.com
        127.0.0.1 www.adwarecommander.com
        127.0.0.1 adwarecommander.com
        127.0.0.1 www.adwarefinder.com
        127.0.0.1 adwarefinder.com
        127.0.0.1 www.adwaregold.com
        127.0.0.1 adwaregold.com
        127.0.0.1 www.adwarepatrol.com
        127.0.0.1 adwarepatrol.com
        127.0.0.1 www.adwareplatinum.com
        127.0.0.1 adwareplatinum.com
        127.0.0.1 www.adwareprotectionsite.com
        127.0.0.1 adwareprotectionsite.com
        127.0.0.1 www.adwarepunisher.com
        127.0.0.1 adwarepunisher.com
        127.0.0.1 www.adwareremover.ws
        127.0.0.1 adwareremover.ws
        127.0.0.1 www.adwaresafety.com
        127.0.0.1 adwaresafety.com
        127.0.0.1 www.adwarexp.com
        127.0.0.1 adwarexp.com
        127.0.0.1 affiliate.idownload.com
        127.0.0.1 www.aflgate.com
        127.0.0.1 aflgate.com
        127.0.0.1 africaspromise.org
        127.0.0.1 agava.com
        127.0.0.1 agava.ru
        127.0.0.1 agentstudio.com
        127.0.0.1 www.aginegialle.it
        127.0.0.1 aginegialle.it
        127.0.0.1 www.ahnenforschung.de
        127.0.0.1 ahnenforschung.de
        127.0.0.1 aifind.info
        127.0.0.1 www.aifind.info
        127.0.0.1 www.airtleworld.com
        127.0.0.1 airtleworld.com
        127.0.0.1 www.aitalia.it
        127.0.0.1 aitalia.it
        127.0.0.1 akamai.downloadv3.com
        127.0.0.1 www.aklitalia.it
        127.0.0.1 aklitalia.it
        127.0.0.1 akril.com
        127.0.0.1 alcatel.ws
        127.0.0.1 www.alertspy.com
        127.0.0.1 alertspy.com
        127.0.0.1 www.alfacleaner.com
        127.0.0.1 alfacleaner.com
        127.0.0.1 alfa-search.com
        127.0.0.1 www.alialia.it
        127.0.0.1 alialia.it
        127.0.0.1 www.aliotalia.it
        127.0.0.1 aliotalia.it
        127.0.0.1 www.alirtalia.it
        127.0.0.1 alirtalia.it
        127.0.0.1 www.alitaia.it
        127.0.0.1 alitaia.it
        127.0.0.1 www.alitaklia.it
        127.0.0.1 alitaklia.it
        127.0.0.1 www.alitala.it
        127.0.0.1 alitala.it
        127.0.0.1 www.alitali.it
        127.0.0.1 alitali.it
        127.0.0.1 www.alitaliaq.it
        127.0.0.1 alitaliaq.it
        127.0.0.1 www.alitalias.it
        127.0.0.1 alitalias.it
        127.0.0.1 www.alitaliaz.it
        127.0.0.1 alitaliaz.it
        127.0.0.1 www.alitalioa.it
        127.0.0.1 alitalioa.it
        127.0.0.1 www.alitalisa.it
        127.0.0.1 alitalisa.it
        127.0.0.1 www.alitaliua.it
        127.0.0.1 alitaliua.it
        127.0.0.1 www.alitalkia.it
        127.0.0.1 alitalkia.it
        127.0.0.1 www.alitaloia.it
        127.0.0.1 alitaloia.it
        127.0.0.1 www.alitaluia.it
        127.0.0.1 alitaluia.it
        127.0.0.1 www.alitaslia.it
        127.0.0.1 alitaslia.it
        127.0.0.1 www.alitlia.it
        127.0.0.1 alitlia.it
        127.0.0.1 www.alitralia.it
        127.0.0.1 alitralia.it
        127.0.0.1 www.alitsalia.it
        127.0.0.1 alitsalia.it
        127.0.0.1 www.aliutalia.it
        127.0.0.1 aliutalia.it
        127.0.0.1 www.all1count.net
        127.0.0.1 all1count.net
        127.0.0.1 www.all4internet.com
        127.0.0.1 all4internet.com
        127.0.0.1 allabtcars.com
        127.0.0.1 allabtjeeps.com
        127.0.0.1 www.all-bittorrent.com
        127.0.0.1 all-bittorrent.com
        127.0.0.1 www.allcollisions.com
        127.0.0.1 allcollisions.com
        127.0.0.1 allcybersearch.com
        127.0.0.1 www.allcybersearch.com
        127.0.0.1 www.alldnserrors.com
        127.0.0.1 alldnserrors.com
        127.0.0.1 www.all-downloads-now.com
        127.0.0.1 all-downloads-now.com
        127.0.0.1 www.all-edonkey.com
        127.0.0.1 all-edonkey.com
        127.0.0.1 www.allertaminacce.com
        127.0.0.1 allertaminacce.com
        127.0.0.1 allforadult.com
        127.0.0.1 allhyperlinks.com
        127.0.0.1 www.alliesecurity.com
        127.0.0.1 alliesecurity.com
        127.0.0.1 all-inet.com
        127.0.0.1 allinternetbusiness.com
        127.0.0.1 www.all-limewire.com
        127.0.0.1 all-limewire.com
        127.0.0.1 www.allmegabucks.com
        127.0.0.1 allmegabucks.com
        127.0.0.1 www.allprotections.com
        127.0.0.1 allprotections.com
        127.0.0.1 www.allresultz.net
        127.0.0.1 allresultz.net
        127.0.0.1 www.allsearch.us
        127.0.0.1 allsearch.us
        127.0.0.1 www.allsecuritynotes.com
        127.0.0.1 allsecuritynotes.com
        127.0.0.1 www.allsecuritysite.com
        127.0.0.1 allsecuritysite.com
        127.0.0.1 www.allstarsvideos.net
        127.0.0.1 allstarsvideos.net
        127.0.0.1 www.alltiettantivirus.com
        127.0.0.1 alltiettantivirus.com
        127.0.0.1 www.alltruesoftware.com
        127.0.0.1 alltruesoftware.com
        127.0.0.1 www.allvideoactivex.com
        127.0.0.1 allvideoactivex.com
        127.0.0.1 www.almanah.biz
        127.0.0.1 almanah.biz
        127.0.0.1 almarvideos.com
        127.0.0.1 www.aloitalia.it
        127.0.0.1 aloitalia.it
        127.0.0.1 www.aluitalia.it
        127.0.0.1 aluitalia.it
        127.0.0.1 www.amaena.com
        127.0.0.1 amaena.com
        127.0.0.1 amandamountains.com
        127.0.0.1 www.amateurliveshow.com
        127.0.0.1 amateurliveshow.com
        127.0.0.1 www.amediasoftware.com
        127.0.0.1 amediasoftware.com
        127.0.0.1 www.amediasource.com
        127.0.0.1 amediasource.com
        127.0.0.1 www.americanautobargains.com
        127.0.0.1 americanautobargains.com
        127.0.0.1 www.americancarbargains.com
        127.0.0.1 americancarbargains.com
        127.0.0.1 american-teens.net
        127.0.0.1 amigeek.com
        127.0.0.1 www.amigobore.com
        127.0.0.1 amigobore.com
        127.0.0.1 amisbusiness.com
        127.0.0.1 www.ampmsearch.com
        127.0.0.1 ampmsearch.com
        127.0.0.1 www.analcord.com
        127.0.0.1 analcord.com
        127.0.0.1 analmovi.com
        127.0.0.1 www.anarchylolita.com
        127.0.0.1 anarchylolita.com
        127.0.0.1 anarchyporn.com
        127.0.0.1 www.andromedical.com
        127.0.0.1 andromedical.com
        127.0.0.1 www.animepornmag.com
        127.0.0.1 animepornmag.com
        127.0.0.1 anin.org
        127.0.0.1 www.anjpn-avxiz.biz
        127.0.0.1 anjpn-avxiz.biz
        127.0.0.1 www.anjpnzqav.biz
        127.0.0.1 anjpnzqav.biz
        127.0.0.1 www.anjpn-zqav.biz
        127.0.0.1 anjpn-zqav.biz
        127.0.0.1 annaromeo.com
        127.0.0.1 www.antiddos.us
        127.0.0.1 antiddos.us
        127.0.0.1 www.antiespiadorado.com
        127.0.0.1 antiespiadorado.com
        127.0.0.1 www.antiespionspack.com
        127.0.0.1 antiespionspack.com
        127.0.0.1 www.antigusanos2008.com
        127.0.0.1 antigusanos2008.com
        127.0.0.1 www.antispamassistant.com
        127.0.0.1 antispamassistant.com
        127.0.0.1 www.antispamdeluxe.com
        127.0.0.1 antispamdeluxe.com
        127.0.0.1 www.antispionage.com
        127.0.0.1 antispionage.com
        127.0.0.1 www.antispionagepro.com
        127.0.0.1 antispionagepro.com
        127.0.0.1 www.antispyadvanced.com
        127.0.0.1 antispyadvanced.com
        127.0.0.1 www.antispydns.biz
        127.0.0.1 antispydns.biz
        127.0.0.1 www.antispykit.com
        127.0.0.1 antispykit.com
        127.0.0.1 www.antispylab.com
        127.0.0.1 antispylab.com
        127.0.0.1 www.antispyshield.com
        127.0.0.1 antispyshield.com
        127.0.0.1 www.antispysolutions.com
        127.0.0.1 antispysolutions.com
        127.0.0.1 www.antispyware.com
        127.0.0.1 antispyware.com
        127.0.0.1 www.antispywareboot.com
        127.0.0.1 antispywareboot.com
        127.0.0.1 www.antispywarebot.com
        127.0.0.1 antispywarebot.com
        127.0.0.1 www.antispywarebox.com
        127.0.0.1 antispywarebox.com
        127.0.0.1 www.antispywaredownloads.com
        127.0.0.1 antispywaredownloads.com
        127.0.0.1 www.antispywaresuite.com
        127.0.0.1 antispywaresuite.com
        127.0.0.1 www.antispywareupdates.net
        127.0.0.1 antispywareupdates.net
        127.0.0.1 www.antispywarexp.com
        127.0.0.1 antispywarexp.com
        127.0.0.1 www.antispyweb.net
        127.0.0.1 antispyweb.net
        127.0.0.1 www.antiver2008.com
        127.0.0.1 antiver2008.com
        127.0.0.1 www.antivermins.com
        127.0.0.1 antivermins.com
        127.0.0.1 www.anti-vermins.com
        127.0.0.1 anti-vermins.com
        127.0.0.1 www.antivir2007.com
        127.0.0.1 antivir2007.com
        127.0.0.1 www.antivirgear.com
        127.0.0.1 antivirgear.com
        127.0.0.1 www.antivirus.fastfreedownload.com
        127.0.0.1 antivirus.fastfreedownload.com
        127.0.0.1 www.antivirusadvance.com
        127.0.0.1 antivirusadvance.com
        127.0.0.1 www.antivirusaskeladd.com
        127.0.0.1 antivirusaskeladd.com
        127.0.0.1 www.antivirusgereedschap.com
        127.0.0.1 antivirusgereedschap.com
        127.0.0.1 www.antivirusgolden.com
        127.0.0.1 antivirusgolden.com
        127.0.0.1 www.antivirus-hq.net
        127.0.0.1 antivirus-hq.net
        127.0.0.1 www.antiviruspcsuite.com
        127.0.0.1 antiviruspcsuite.com
        127.0.0.1 www.antiviruspremium.com
        127.0.0.1 antiviruspremium.com
        127.0.0.1 www.anti-virus-pro.com
        127.0.0.1 anti-virus-pro.com
        127.0.0.1 www.antivirusprotector.com
        127.0.0.1 antivirusprotector.com
        127.0.0.1 www.antivirusscherm.com
        127.0.0.1 antivirusscherm.com
        127.0.0.1 www.antivirussecuritypro.com
        127.0.0.1 antivirussecuritypro.com
        127.0.0.1 www.antivirus-stop.com
        127.0.0.1 antivirus-stop.com
        127.0.0.1 www.antiworm2008.com
        127.0.0.1 antiworm2008.com
        127.0.0.1 www.antiwurm2008.com
        127.0.0.1 antiwurm2008.com
        127.0.0.1 antrocity.com
        127.0.0.1 www.anyofus.com
        127.0.0.1 anyofus.com
        127.0.0.1 www.anysn.seproger.com
        127.0.0.1 anysn.seproger.com
        127.0.0.1 anything4health.com
        127.0.0.1 www.apicpreview.com
        127.0.0.1 apicpreview.com
        127.0.0.1 www.appealcircuit.com
        127.0.0.1 appealcircuit.com
        127.0.0.1 www.approvedlinks.com
        127.0.0.1 approvedlinks.com
        127.0.0.1 apps.deskwizz.com
        127.0.0.1 apps.webservicehost.com
        127.0.0.1 www.aprotectedpage.com
        127.0.0.1 aprotectedpage.com
        127.0.0.1 apsua.com
        127.0.0.1 www.archivioadulti.com
        127.0.0.1 archivioadulti.com
        127.0.0.1 www.archiviosex.net
        127.0.0.1 archiviosex.net
        127.0.0.1 aregay.com
        127.0.0.1 www.ares.click-new-download.com
        127.0.0.1 ares.click-new-download.com
        127.0.0.1 www.ares-freebie.com
        127.0.0.1 ares-freebie.com
        127.0.0.1 www.arespro2007.com
        127.0.0.1 arespro2007.com
        127.0.0.1 www.aresultra.com
        127.0.0.1 aresultra.com
        127.0.0.1 www.ares-usa.com
        127.0.0.1 ares-usa.com
        127.0.0.1 arheo.com
        127.0.0.1 arizonaweb.org
        127.0.0.1 armitageinn.com
        127.0.0.1 www.arquivojpgs.smtp.ru
        127.0.0.1 arquivojpgs.smtp.ru
        127.0.0.1 artachnid.com
        127.0.0.1 art-func.com
        127.0.0.1 art-xxx.com
        127.0.0.1 www.asafebrowser.com
        127.0.0.1 asafebrowser.com
        127.0.0.1 www.asafetyalways.com
        127.0.0.1 asafetyalways.com
        127.0.0.1 www.asafetynotice.com
        127.0.0.1 asafetynotice.com
        127.0.0.1 www.asafetypage.com
        127.0.0.1 asafetypage.com
        127.0.0.1 www.asdbiz.biz
        127.0.0.1 asdbiz.biz
        127.0.0.1 www.asdeykuddq.com
        127.0.0.1 asdeykuddq.com
        127.0.0.1 www.asecurebar.com
        127.0.0.1 asecurebar.com
        127.0.0.1 www.asecureboard.com
        127.0.0.1 asecureboard.com
        127.0.0.1 www.asecurevalue.com
        127.0.0.1 asecurevalue.com
        127.0.0.1 www.asecurityissue.com
        127.0.0.1 asecurityissue.com
        127.0.0.1 www.asecuritynotice.com
        127.0.0.1 asecuritynotice.com
        127.0.0.1 www.asecuritypaper.com
        127.0.0.1 asecuritypaper.com
        127.0.0.1 www.asecuritystuff.com
        127.0.0.1 asecuritystuff.com
        127.0.0.1 asiankingkong.com
        127.0.0.1 www.asianpornmag.com
        127.0.0.1 asianpornmag.com
        127.0.0.1 www.asiantoolbar.com
        127.0.0.1 asiantoolbar.com
        127.0.0.1 www.asidseiupc.com
        127.0.0.1 asidseiupc.com
        127.0.0.1 www.aslitalia.it
        127.0.0.1 aslitalia.it
        127.0.0.1 ass-gals.com
        127.0.0.1 www.assureprotection.com
        127.0.0.1 assureprotection.com
        127.0.0.1 asta-killer.com
        127.0.0.1 www.astrologie-server.com
        127.0.0.1 astrologie-server.com
        127.0.0.1 www.asupereva.it
        127.0.0.1 asupereva.it
        127.0.0.1 www.ataprogram.com
        127.0.0.1 ataprogram.com
        127.0.0.1 athenrye.com
        127.0.0.1 www.atotalsafety.com
        127.0.0.1 atotalsafety.com
        127.0.0.1 www.atrueprotection.com
        127.0.0.1 atrueprotection.com
        127.0.0.1 www.atruesecurity.com
        127.0.0.1 atruesecurity.com
        127.0.0.1 www.attackware.com
        127.0.0.1 attackware.com
        127.0.0.1 www.attrezzi.biz
        127.0.0.1 attrezzi.biz
        127.0.0.1 www.aucunsvirus.com
        127.0.0.1 aucunsvirus.com
        127.0.0.1 www.aulde.net
        127.0.0.1 aulde.net
        127.0.0.1 www.aupereva.it
        127.0.0.1 aupereva.it
        127.0.0.1 www.autobargains.org
        127.0.0.1 autobargains.org
        127.0.0.1 www.autobargainsnetwork.com
        127.0.0.1 autobargainsnetwork.com
        127.0.0.1 www.autocontext.begun.ru
        127.0.0.1 autocontext.begun.ru
        127.0.0.1 autoescrowpay.com
        127.0.0.1 www.avadvance.com
        127.0.0.1 avadvance.com
        127.0.0.1 www.avast.free-software-center.com
        127.0.0.1 avast.free-software-center.com
        127.0.0.1 www.avast-2007.com
        127.0.0.1 avast-2007.com
        127.0.0.1 www.avast-downloads.com
        127.0.0.1 avast-downloads.com
        127.0.0.1 www.avast-hq.com
        127.0.0.1 avast-hq.com
        127.0.0.1 www.avforce.com
        127.0.0.1 avforce.com
        127.0.0.1 www.avg.grab-it-today.net
        127.0.0.1 avg.grab-it-today.net
        127.0.0.1 www.avg.softwarecenterz.com
        127.0.0.1 avg.softwarecenterz.com
        127.0.0.1 www.avg-secure.com
        127.0.0.1 avg-secure.com
        127.0.0.1 www.aviadaptation.com
        127.0.0.1 aviadaptation.com
        127.0.0.1 avian-ads.com
        127.0.0.1 www.avicoupler.com
        127.0.0.1 avicoupler.com
        127.0.0.1 www.avideoaxaccess.com
        127.0.0.1 avideoaxaccess.com
        127.0.0.1 www.avideosurfer.com
        127.0.0.1 avideosurfer.com
        127.0.0.1 www.avidirection.com
        127.0.0.1 avidirection.com
        127.0.0.1 www.aviewersoft.com
        127.0.0.1 aviewersoft.com
        127.0.0.1 www.avpcheckupdate.com
        127.0.0.1 avpcheckupdate.com
        127.0.0.1 www.avsmanufacture.com
        127.0.0.1 avsmanufacture.com
        127.0.0.1 www.avsystemcare.com
        127.0.0.1 avsystemcare.com
        127.0.0.1 www.avxizaaqada.biz
        127.0.0.1 avxizaaqada.biz
        127.0.0.1 www.avxiz-anjpn.biz
        127.0.0.1 avxiz-anjpn.biz
        127.0.0.1 www.avxizueorn.biz
        127.0.0.1 avxizueorn.biz
        127.0.0.1 www.avxiz-ueorn.biz
        127.0.0.1 avxiz-ueorn.biz
        127.0.0.1 www.avxiz-vtvcp.biz
        127.0.0.1 avxiz-vtvcp.biz
        127.0.0.1 www.avxiz-ygco.biz
        127.0.0.1 avxiz-ygco.biz
        127.0.0.1 www.avxiz-zqav.biz
        127.0.0.1 avxiz-zqav.biz
        127.0.0.1 www.awarenesstech.com
        127.0.0.1 awarenesstech.com
        127.0.0.1 www.awarninglist.com
        127.0.0.1 awarninglist.com
        127.0.0.1 awbeta.net-nucleus.com
        127.0.0.1 www.awesomehomepage.com
        127.0.0.1 awesomehomepage.com
        127.0.0.1 awmcash.biz
        127.0.0.1 awmdabest.com
        127.0.0.1 www.axemediasoftware.com
        127.0.0.1 axemediasoftware.com
        127.0.0.1 www.aximageobject.com
        127.0.0.1 aximageobject.com
        127.0.0.1 www.axmediaproject.com
        127.0.0.1 axmediaproject.com
        127.0.0.1 www.axmediasoftware.com
        127.0.0.1 axmediasoftware.com
        127.0.0.1 www.axmediasolutions.com
        127.0.0.1 axmediasolutions.com
        127.0.0.1 www.axobjectpage.com
        127.0.0.1 axobjectpage.com
        127.0.0.1 www.axobjectsource.com
        127.0.0.1 axobjectsource.com
        127.0.0.1 www.axsoftwaretool.com
        127.0.0.1 axsoftwaretool.com
        127.0.0.1 www.axvideoproject.com
        127.0.0.1 axvideoproject.com
        127.0.0.1 www.axvideosetup.com
        127.0.0.1 axvideosetup.com
        127.0.0.1 ayakawamura.com
        127.0.0.1 ayb.dns-look-up.com
        127.0.0.1 ayb.netbios-wait.com
        127.0.0.1 ayumitaniguchi.com
        127.0.0.1 azebar.com
        127.0.0.1 www.azureusclub.com
        127.0.0.1 azureusclub.com
        127.0.0.1 www.azureus-freebie.com
        127.0.0.1 azureus-freebie.com
        127.0.0.1 www.azzetta.it
        127.0.0.1 azzetta.it
        127.0.0.1 b.casalemedia.com
        127.0.0.1 b122.mcboo.com
        127.0.0.1 www.babe.k-lined.com
        127.0.0.1 babe.k-lined.com
        127.0.0.1 www.babe.the-killer.bz
        127.0.0.1 babe.the-killer.bz
        127.0.0.1 www.babenet.com
        127.0.0.1 babenet.com
        127.0.0.1 www.babespornmag.com
        127.0.0.1 babespornmag.com
        127.0.0.1 www.babeweb.de
        127.0.0.1 babeweb.de
        127.0.0.1 www.baccarat-other.info
        127.0.0.1 baccarat-other.info
        127.0.0.1 www.backstripgirls.com
        127.0.0.1 backstripgirls.com
        127.0.0.1 backup.mabou.org
        127.0.0.1 www.baidu.com
        127.0.0.1 baidu.com
        127.0.0.1 www.balotierra.com
        127.0.0.1 balotierra.com
        127.0.0.1 bannedhost.net
        127.0.0.1 bar.baidu.com
        127.0.0.1 barbudafarms.com
        127.0.0.1 www.bardownload.com
        127.0.0.1 bardownload.com
        127.0.0.1 barnandfence.com
        127.0.0.1 batsearch.com
        127.0.0.1 baygraphicsllc.com
        127.0.0.1 bbbsearch.com
        127.0.0.1 bb-search.com
        127.0.0.1 www.bcnproduction.com
        127.0.0.1 bcnproduction.com
        127.0.0.1 bdsmlibrary.net
        127.0.0.1 www.bdsmpornmag.com
        127.0.0.1 bdsmpornmag.com
        127.0.0.1 www.bearshare.click-new-download.com
        127.0.0.1 bearshare.click-new-download.com
        127.0.0.1 www.bearshare.download-me.info
        127.0.0.1 bearshare.download-me.info
        127.0.0.1 www.bearshare.mp3-muzic.com
        127.0.0.1 bearshare.mp3-muzic.com
        127.0.0.1 www.bearshare-download.org
        127.0.0.1 bearshare-download.org
        127.0.0.1 www.bearshare-downloads.net
        127.0.0.1 bearshare-downloads.net
        127.0.0.1 www.bearsharelive.co.uk
        127.0.0.1 bearsharelive.co.uk
        127.0.0.1 www.bearshare-music-downloads.com
        127.0.0.1 bearshare-music-downloads.com
        127.0.0.1 www.bearsharepro2007.com
        127.0.0.1 bearsharepro2007.com
        127.0.0.1 www.bearshare-usa.com
        127.0.0.1 bearshare-usa.com
        127.0.0.1 bedhome.com
        127.0.0.1 bediadance.com
        127.0.0.1 www.beebappyy.biz
        127.0.0.1 beebappyy.biz
        127.0.0.1 www.begin2search.com
        127.0.0.1 begin2search.com
        127.0.0.1 bellabasketsfl.com
        127.0.0.1 bernaolatwin.com
        127.0.0.1 www.berufe-jobs.de
        127.0.0.1 berufe-jobs.de
        127.0.0.1 www.berufe-server.de
        127.0.0.1 berufe-server.de
        127.0.0.1 www.berufe-welt.de
        127.0.0.1 berufe-welt.de
        127.0.0.1 www.berufs-wahl.de
        127.0.0.1 berufs-wahl.de
        127.0.0.1 www.beruijindegunhadesun.com
        127.0.0.1 beruijindegunhadesun.com
        127.0.0.1 www.best3xclips.com
        127.0.0.1 best3xclips.com
        127.0.0.1 www.bestadults.com
        127.0.0.1 bestadults.com
        127.0.0.1 best-counter.com
        127.0.0.1 bestcrawler.com
        127.0.0.1 www.bestdailyvids.com
        127.0.0.1 bestdailyvids.com
        127.0.0.1 bestfor.ru
        127.0.0.1 www.bestfuckvids.com
        127.0.0.1 bestfuckvids.com
        127.0.0.1 best-hardpics.com
        127.0.0.1 www.bestmanage.org
        127.0.0.1 bestmanage.org
        127.0.0.1 www.bestmanage0.org
        127.0.0.1 bestmanage0.org
        127.0.0.1 www.bestmanage1.org
        127.0.0.1 bestmanage1.org
        127.0.0.1 www.bestmanage2.org
        127.0.0.1 bestmanage2.org
        127.0.0.1 www.bestmanage3.org
        127.0.0.1 bestmanage3.org
        127.0.0.1 www.bestmanage4.org
        127.0.0.1 bestmanage4.org
        127.0.0.1 www.bestmanage5.org
        127.0.0.1 bestmanage5.org
        127.0.0.1 www.bestmanage6.org
        127.0.0.1 bestmanage6.org
        127.0.0.1 www.bestmanage7.org
        127.0.0.1 bestmanage7.org
        127.0.0.1 www.bestmanage8.org
        127.0.0.1 bestmanage8.org
        127.0.0.1 www.bestmanage9.org
        127.0.0.1 bestmanage9.org
        127.0.0.1 www.bestmovszone.com
        127.0.0.1 bestmovszone.com
        127.0.0.1 www.bestoffersnetworks.com
        127.0.0.1 bestoffersnetworks.com
        127.0.0.1 bestporngate.com
        127.0.0.1 www.bestsafetyguide.net
        127.0.0.1 bestsafetyguide.net
        127.0.0.1 www.bestsearch.cc
        127.0.0.1 bestsearch.cc
        127.0.0.1 www.best-spyware.info
        127.0.0.1 best-spyware.info
        127.0.0.1 www.best-targeted-traffic.com
        127.0.0.1 best-targeted-traffic.com
        127.0.0.1 www.best-voyeur.info
        127.0.0.1 best-voyeur.info
        127.0.0.1 bestweblinks.com
        127.0.0.1 best-winning-casino.com
        127.0.0.1 www.bestworldgirls-for-u.net
        127.0.0.1 bestworldgirls-for-u.net
        127.0.0.1 www.bestxclips.com
        127.0.0.1 bestxclips.com
        127.0.0.1 bestxporno.com
        127.0.0.1 www.bestxxxmpegs.com
        127.0.0.1 bestxxxmpegs.com
        127.0.0.1 www.bettersearch.biz
        127.0.0.1 bettersearch.biz
        127.0.0.1 www.bgazzetta.it
        127.0.0.1 bgazzetta.it
        127.0.0.1 www.bgoogle.it
        127.0.0.1 bgoogle.it
        127.0.0.1 www.bigtrafficnetwork.com
        127.0.0.1 bigtrafficnetwork.com
        127.0.0.1 www.bigwww.com
        127.0.0.1 bigwww.com
        127.0.0.1 www.bill.de
        127.0.0.1 bill.de
        127.0.0.1 bin.errorprotector.com
        127.0.0.1 bins.media-motor.net
        127.0.0.1 bins2.media-motor.net
        127.0.0.1 bis.180solutions.com
        127.0.0.1 bitchesonline.net
        127.0.0.1 www.bitcomet-freebie.com
        127.0.0.1 bitcomet-freebie.com
        127.0.0.1 www.bittorrent.click-new-download.com
        127.0.0.1 bittorrent.click-new-download.com
        127.0.0.1 biz.biz
        127.0.0.1 www.bkvcompany.com
        127.0.0.1 bkvcompany.com
        127.0.0.1 www.blackblues00.com
        127.0.0.1 blackblues00.com
        127.0.0.1 www.blackcodec.com
        127.0.0.1 blackcodec.com
        127.0.0.1 www.blackcodec.net
        127.0.0.1 blackcodec.net
        127.0.0.1 www.blackhats.tc
        127.0.0.1 blackhats.tc
        127.0.0.1 www.blackhawksoftware.com
        127.0.0.1 blackhawksoftware.com
        127.0.0.1 blackjack-free.net
        127.0.0.1 www.blacklegion.info
        127.0.0.1 blacklegion.info
        127.0.0.1 blazefind.com
        127.0.0.1 blender.xu.pl
        127.0.0.1 www.blockcheckercontrol.com
        127.0.0.1 blockcheckercontrol.com
        127.0.0.1 blondetgp.com
        127.0.0.1 www.blue-elefant.com
        127.0.0.1 blue-elefant.com
        127.0.0.1 www.bm.theaimonline.com
        127.0.0.1 bm.theaimonline.com
        127.0.0.1 www.bnmgate.com
        127.0.0.1 bnmgate.com
        127.0.0.1 bodaciousbabette.com
        127.0.0.1 www.bonzi.com
        127.0.0.1 bonzi.com
        127.0.0.1 boobdoll.com
        127.0.0.1 boobsandtits.com
        127.0.0.1 boobsclub.com
        127.0.0.1 www.bookedspace.com
        127.0.0.1 bookedspace.com
        127.0.0.1 www.boom.com.vn
        127.0.0.1 boom.com.vn
        127.0.0.1 boredlife.com
        127.0.0.1 bowlofogumbo.com
        127.0.0.1 www.bpfq02.com
        127.0.0.1 bpfq02.com
        127.0.0.1 www.bqgate.com
        127.0.0.1 bqgate.com
        127.0.0.1 br.errorsafe.com
        127.0.0.1 br.winantivirus.com
        127.0.0.1 br.winfixer.com
        127.0.0.1 bradcoem.org
        127.0.0.1 www.braincodec.com
        127.0.0.1 braincodec.com
        127.0.0.1 brandiyoung.com
        127.0.0.1 www.bravesentry.com
        127.0.0.1 bravesentry.com
        127.0.0.1 www.breenten.biz
        127.0.0.1 breenten.biz
        127.0.0.1 www.brodbfm.net
        127.0.0.1 brodbfm.net
        127.0.0.1 brookeburn.com
        127.0.0.1 www.browserwise.com
        127.0.0.1 browserwise.com
        127.0.0.1 bsa.safetydownload.com
        127.0.0.1 www.bsplaycodec.com
        127.0.0.1 bsplaycodec.com
        127.0.0.1 bucps.com
        127.0.0.1 buhartes.info
        127.0.0.1 buldog-stats.com
        127.0.0.1 www.bullseye-network.com
        127.0.0.1 bullseye-network.com
        127.0.0.1 burgerkingbigscreen.com
        127.0.0.1 www.burningsite.com
        127.0.0.1 burningsite.com
        127.0.0.1 www.burnsrecyclinginc.com
        127.0.0.1 burnsrecyclinginc.com
        127.0.0.1 buscards.net
        127.0.0.1 bustyrussell.com
        127.0.0.1 www.busysearch.net
        127.0.0.1 busysearch.net
        127.0.0.1 buttejazz.org
        127.0.0.1 www.buy-find.info
        127.0.0.1 buy-find.info
        127.0.0.1 buyselldomain.net
        127.0.0.1 www.buytraff.biz
        127.0.0.1 buytraff.biz
        127.0.0.1 buz.ru
        127.0.0.1 www.bvdtechinque.com
        127.0.0.1 bvdtechinque.com
        127.0.0.1 www.bvirgilio.it
        127.0.0.1 bvirgilio.it
        127.0.0.1 c.centralmedia.ws
        127.0.0.1 www.c.enhance.com
        127.0.0.1 c.enhance.com
        127.0.0.1 c.goclick.com
        127.0.0.1 www.c4tdownload.com
        127.0.0.1 c4tdownload.com
        127.0.0.1 www.c5.www4free.info
        127.0.0.1 c5.www4free.info
        127.0.0.1 www.cache.surfaccuracy.com
        127.0.0.1 cache.surfaccuracy.com
        127.0.0.1 cache.ysbweb.com
        127.0.0.1 www.cadesfinjeriokas.com
        127.0.0.1 cadesfinjeriokas.com
        127.0.0.1 calcioturris.com
        127.0.0.1 www.calendaralerts.net
        127.0.0.1 calendaralerts.net
        127.0.0.1 www.callinghome.biz
        127.0.0.1 callinghome.biz
        127.0.0.1 www.cameouk.co.uk
        127.0.0.1 cameouk.co.uk
        127.0.0.1 cameup.com
        127.0.0.1 www.camouflageclothingonline.net
        127.0.0.1 camouflageclothingonline.net
        127.0.0.1 campaigns.outerinfo.net
        127.0.0.1 camup.net
        127.0.0.1 canberracricketcoaching.com
        127.0.0.1 candycantaloupes.com
        127.0.0.1 www.canidetect.org
        127.0.0.1 canidetect.org
        127.0.0.1 www.cantfind.com
        127.0.0.1 cantfind.com
        127.0.0.1 careers.dulcineasystems.net
        127.0.0.1 carsands.com
        127.0.0.1 carsrentals.net
        127.0.0.1 cartoes.uol.com.br
        127.0.0.1 www.casalemedia.com
        127.0.0.1 casalemedia.com
        127.0.0.1 www.cashdeluxe.net
        127.0.0.1 cashdeluxe.net
        127.0.0.1 www.cashengines.com
        127.0.0.1 cashengines.com
        127.0.0.1 cashsearch.biz
        127.0.0.1 www.cashsurfers.com
        127.0.0.1 cashsurfers.com
        127.0.0.1 www.cashunlim.com
        127.0.0.1 cashunlim.com
        127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
        127.0.0.1 casino2win.net
        127.0.0.1 casino-gambling-1.net
        127.0.0.1 casino-gambling-2.net
        127.0.0.1 casinomidas.net
        127.0.0.1 casinonline.net
        127.0.0.1 casino-onlines.net
        127.0.0.1 www.castingsamateur.com
        127.0.0.1 castingsamateur.com
        127.0.0.1 catallogue.com
        127.0.0.1 www.catch-dc.info
        127.0.0.1 catch-dc.info
        127.0.0.1 categories.mygeek.com
        127.0.0.1 catsss.da.ru
        127.0.0.1 caxa.ru
        127.0.0.1 cazygirls-world.com
        127.0.0.1 cc.panet.org
        127.0.0.1 www.ccecaedbebfcaf.com
        127.0.0.1 ccecaedbebfcaf.com
        127.0.0.1 cclebali.org
        127.0.0.1 www.ccorriere.it
        127.0.0.1 ccorriere.it
        127.0.0.1 www.cdcopysite.com
        127.0.0.1 cdcopysite.com
        127.0.0.1 www.cdegate.com
        127.0.0.1 cdegate.com
        127.0.0.1 cdn.drivecleaner.com
        127.0.0.1 cdn.errorsafe.com
        127.0.0.1 cdn.movies-etc.com
        127.0.0.1 cdn.winsoftware.com
        127.0.0.1 cdn2.movies-etc.com
        127.0.0.1 www.cdorriere.it
        127.0.0.1 cdorriere.it
        127.0.0.1 ceewawires.org
        127.0.0.1 centralmedia.ws
        127.0.0.1 certumgroup.com
        127.0.0.1 www.cforriere.it
        127.0.0.1 cforriere.it
        127.0.0.1 www.check.jupitersatellites.biz
        127.0.0.1 check.jupitersatellites.biz
        127.0.0.1 www.checkin100.com
        127.0.0.1 checkin100.com
        127.0.0.1 www.checkssecurity.com
        127.0.0.1 checkssecurity.com
        127.0.0.1 chelancatering.com
        127.0.0.1 www.chenshijituan.com
        127.0.0.1 chenshijituan.com
        127.0.0.1 childrenvilla.com
        127.0.0.1 www.chilly3xvids.com
        127.0.0.1 chilly3xvids.com
        127.0.0.1 www.chillymovs.com
        127.0.0.1 chillymovs.com
        127.0.0.1 chips-4-free.com
        127.0.0.1 chrisswasey.com
        127.0.0.1 chriswallace.net
        127.0.0.1 www.cia-trjn.myvnc.com
        127.0.0.1 cia-trjn.myvnc.com
        127.0.0.1 www.cinemadownload.com
        127.0.0.1 cinemadownload.com
        127.0.0.1 www.ciorriere.it
        127.0.0.1 ciorriere.it
        127.0.0.1 www.cirriere.it
        127.0.0.1 cirriere.it
        127.0.0.1 www.citycodec.com
        127.0.0.1 citycodec.com
        127.0.0.1 ckick4thumbs.com
        127.0.0.1 cl55.biz
        127.0.0.1 clackamasliteraryreview.com
        127.0.0.1 www.clckm.com
        127.0.0.1 clckm.com
        127.0.0.1 www.cleancodec.com
        127.0.0.1 cleancodec.com
        127.0.0.1 www.cleansoftwares.com
        127.0.0.1 cleansoftwares.com
        127.0.0.1 clearsearch.cc
        127.0.0.1 clearsearch.net
        127.0.0.1 clickaire.com
        127.0.0.1 www.click-codec.com
        127.0.0.1 click-codec.com
        127.0.0.1 www.clickhere4search.com
        127.0.0.1 clickhere4search.com
        127.0.0.1 www.click-new-download.com
        127.0.0.1 click-new-download.com
        127.0.0.1 click-now.net
        127.0.0.1 www.clickspring.net
        127.0.0.1 clickspring.net
        127.0.0.1 www.click-to-download.com
        127.0.0.1 click-to-download.com
        127.0.0.1 www.clicktomakeasearch.com
        127.0.0.1 clicktomakeasearch.com
        127.0.0.1 clickyestoenter.net
        127.0.0.1 client.exeupdate.com
        127.0.0.1 client.myadultexplorer.com
        127.0.0.1 www.cliks.org
        127.0.0.1 cliks.org
        127.0.0.1 www.clipsfestival.com
        127.0.0.1 clipsfestival.com
        127.0.0.1 www.clipsreality.com
        127.0.0.1 clipsreality.com
        127.0.0.1 www.clorriere.it
        127.0.0.1 clorriere.it
        127.0.0.1 clrsch.com
        127.0.0.1 www.clubxxxvideo.com
        127.0.0.1 clubxxxvideo.com
        127.0.0.1 clusif.free.fr
        127.0.0.1 cmtapestry.com
        127.0.0.1 www.cnetadd.com
        127.0.0.1 cnetadd.com
        127.0.0.1 www.cnomy.com
        127.0.0.1 cnomy.com
        127.0.0.1 www.cnzz.com
        127.0.0.1 cnzz.com
        127.0.0.1 www.cocktails-ideen.de
        127.0.0.1 cocktails-ideen.de
        127.0.0.1 code.ignphrases.com
        127.0.0.1 codec.ninoa.com
        127.0.0.1 www.codecbsplay.com
        127.0.0.1 codecbsplay.com
        127.0.0.1 www.codecdvd.net
        127.0.0.1 codecdvd.net
        127.0.0.1 www.codecdvi.com
        127.0.0.1 codecdvi.com
        127.0.0.1 www.codec-fun.com
        127.0.0.1 codec-fun.com
        127.0.0.1 www.codechard.com
        127.0.0.1 codechard.com
        127.0.0.1 www.codechot.net
        127.0.0.1 codechot.net
        127.0.0.1 www.codechq.net
        127.0.0.1 codechq.net
        127.0.0.1 www.codecmeg.net
        127.0.0.1 codecmeg.net
        127.0.0.1 www.codecmega.net
        127.0.0.1 codecmega.net
        127.0.0.1 www.codecmoon.com
        127.0.0.1 codecmoon.com
        127.0.0.1 www.codecmpg.com
        127.0.0.1 codecmpg.com
        127.0.0.1 www.codecnice.net
        127.0.0.1 codecnice.net
        127.0.0.1 www.codecops.net
        127.0.0.1 codecops.net
        127.0.0.1 www.codecplay.com
        127.0.0.1 codecplay.com
        127.0.0.1 www.codecpretty.net
        127.0.0.1 codecpretty.net
        127.0.0.1 www.codecpro.net
        127.0.0.1 codecpro.net
        127.0.0.1 www.codecsoft.net
        127.0.0.1 codecsoft.net
        127.0.0.1 www.codectime.com
        127.0.0.1 codectime.com
        127.0.0.1 www.codecultra.net
        127.0.0.1 codecultra.net
        127.0.0.1 www.codecvids.com
        127.0.0.1 codecvids.com
        127.0.0.1 www.codecvip.com
        127.0.0.1 codecvip.com
        127.0.0.1 www.codecviva.com
        127.0.0.1 codecviva.com
        127.0.0.1 www.codeczang.net
        127.0.0.1 codeczang.net
        127.0.0.1 www.codrriere.it
        127.0.0.1 codrriere.it
        127.0.0.1 www.coeriere.it
        127.0.0.1 coeriere.it
        127.0.0.1 www.coerriere.it
        127.0.0.1 coerriere.it
        127.0.0.1 www.cofrriere.it
        127.0.0.1 cofrriere.it
        127.0.0.1 www.cogrriere.it
        127.0.0.1 cogrriere.it
        127.0.0.1 www.coirriere.it
        127.0.0.1 coirriere.it
        127.0.0.1 command.adservs.com
        127.0.0.1 www.commonname.com
        127.0.0.1 www.computerpcgames.net
        127.0.0.1 computerpcgames.net
        127.0.0.1 www.computerrecover.com
        127.0.0.1 computerrecover.com
        127.0.0.1 config.180solutions.com
        127.0.0.1 www.content.dollarrevenue.com
        127.0.0.1 content.dollarrevenue.com
        127.0.0.1 www.content.ireit.com
        127.0.0.1 content.ireit.com
        127.0.0.1 content.onerateld.com
        127.0.0.1 www.contentmatch.net
        127.0.0.1 contentmatch.net
        127.0.0.1 www.contextplus.net
        127.0.0.1 contextplus.net
        127.0.0.1 www.contra-virus.com
        127.0.0.1 contra-virus.com
        127.0.0.1 www.controlmeh.com
        127.0.0.1 controlmeh.com
        127.0.0.1 www.convenient-search.com
        127.0.0.1 convenient-search.com
        127.0.0.1 www.cookingluck.com
        127.0.0.1 cookingluck.com
        127.0.0.1 www.cooldeskalert.com
        127.0.0.1 cooldeskalert.com
        127.0.0.1 coolfetishsite.com
        127.0.0.1 coolfreehost.com
        127.0.0.1 coolfreepage.com
        127.0.0.1 coolfreepages.com
        127.0.0.1 cool-homepage.co
        127.0.0.1 cool-homepage.com
        127.0.0.1 coolmoneysearch.com
        127.0.0.1 coolpornsearch.com
        127.0.0.1 cool-search.net
        127.0.0.1 cool-search.netfartpost.com
        127.0.0.1 coolsearcher.info
        127.0.0.1 www.coolservecorp.net
        127.0.0.1 coolservecorp.net
        127.0.0.1 www.coolwebsearch.com
        127.0.0.1 coolwebsearch.com
        127.0.0.1 cool-web-search.com
        127.0.0.1 coolwebsearsh.com
        127.0.0.1 www.coolwwwsearch.com
        127.0.0.1 coolwwwsearch.com
        127.0.0.1 cool-xxx.net
        127.0.0.1 www.coorriere.it
        127.0.0.1 coorriere.it
        127.0.0.1 copmtraine.com
        127.0.0.1 www.coprriere.it
        127.0.0.1 coprriere.it
        127.0.0.1 www.core.psyche-evolution.com
        127.0.0.1 core.psyche-evolution.com
        127.0.0.1 www.coreiere.it
        127.0.0.1 coreiere.it
        127.0.0.1 www.coreriere.it
        127.0.0.1 coreriere.it
        127.0.0.1 www.corrdiere.it
        127.0.0.1 corrdiere.it
        127.0.0.1 www.correiere.it
        127.0.0.1 correiere.it
        127.0.0.1 www.corrfiere.it
        127.0.0.1 corrfiere.it
        127.0.0.1 www.corrgiere.it
        127.0.0.1 corrgiere.it
        127.0.0.1 www.corridere.it
        127.0.0.1 corridere.it
        127.0.0.1 www.corriedre.it
        127.0.0.1 corriedre.it
        127.0.0.1 www.corriee.it
        127.0.0.1 corriee.it
        127.0.0.1 www.corrieere.it
        127.0.0.1 corrieere.it
        127.0.0.1 www.corriefre.it
        127.0.0.1 corriefre.it
        127.0.0.1 www.corriegre.it
        127.0.0.1 corriegre.it
        127.0.0.1 www.corrierde.it
        127.0.0.1 corrierde.it
        127.0.0.1 www.corriered.it
        127.0.0.1 corriered.it
        127.0.0.1 www.corrieree.it
        127.0.0.1 corrieree.it
        127.0.0.1 www.corrieref.it
        127.0.0.1 corrieref.it
        127.0.0.1 www.corrierer.it
        127.0.0.1 corrierer.it
        127.0.0.1 www.corrieres.it
        127.0.0.1 corrieres.it
        127.0.0.1 www.corrierew.it
        127.0.0.1 corrierew.it
        127.0.0.1 www.corrierfe.it
        127.0.0.1 corrierfe.it
        127.0.0.1 www.corrierge.it
        127.0.0.1 corrierge.it
        127.0.0.1 www.corrierr.it
        127.0.0.1 corrierr.it
        127.0.0.1 www.corrierre.it
        127.0.0.1 corrierre.it
        127.0.0.1 www.corrierse.it
        127.0.0.1 corrierse.it
        127.0.0.1 www.corrierte.it
        127.0.0.1 corrierte.it
        127.0.0.1 www.corrierw.it
        127.0.0.1 corrierw.it
        127.0.0.1 www.corrierwe.it
        127.0.0.1 corrierwe.it
        127.0.0.1 www.corriesre.it
        127.0.0.1 corriesre.it
        127.0.0.1 www.corriete.it
        127.0.0.1 corriete.it
        127.0.0.1 www.corrietre.it
        127.0.0.1 corrietre.it
        127.0.0.1 www.corriewre.it
        127.0.0.1 corriewre.it
        127.0.0.1 www.corrifere.it
        127.0.0.1 corrifere.it
        127.0.0.1 www.corriiere.it
        127.0.0.1 corriiere.it
        127.0.0.1 www.corrilere.it
        127.0.0.1 corrilere.it
        127.0.0.1 www.corrioere.it
        127.0.0.1 corrioere.it
        127.0.0.1 www.corrire.it
        127.0.0.1 corrire.it
        127.0.0.1 www.corrirere.it
        127.0.0.1 corrirere.it
        127.0.0.1 www.corrirre.it
        127.0.0.1 corrirre.it
        127.0.0.1 www.corrisere.it
        127.0.0.1 corrisere.it
        127.0.0.1 www.corriuere.it
        127.0.0.1 corriuere.it
        127.0.0.1 www.corriwere.it
        127.0.0.1 corriwere.it
        127.0.0.1 www.corriwre.it
        127.0.0.1 corriwre.it
        127.0.0.1 www.corrliere.it
        127.0.0.1 corrliere.it
        127.0.0.1 www.corroere.it
        127.0.0.1 corroere.it
        127.0.0.1 www.corroiere.it
        127.0.0.1 corroiere.it
        127.0.0.1 www.corrriere.it
        127.0.0.1 corrriere.it
        127.0.0.1 www.corrtiere.it
        127.0.0.1 corrtiere.it
        127.0.0.1 www.corruere.it
        127.0.0.1 corruere.it
        127.0.0.1 www.corruiere.it
        127.0.0.1 corruiere.it
        127.0.0.1 www.cortiere.it
        127.0.0.1 cortiere.it
        127.0.0.1 www.cortriere.it
        127.0.0.1 cortriere.it
        127.0.0.1 www.costrike.com
        127.0.0.1 costrike.com
        127.0.0.1 www.cotriere.it
        127.0.0.1 cotriere.it
        127.0.0.1 www.cotrriere.it
        127.0.0.1 cotrriere.it
        127.0.0.1 couldnotfind.com
        127.0.0.1 count.cc
        127.0.0.1 count.hitscount.net
        127.0.0.1 count-all.com
        127.0.0.1 www.countdutycall.info
        127.0.0.1 countdutycall.info
        127.0.0.1 counter.sexmaniack.com
        127.0.0.1 www.courtrecordslookup.com
        127.0.0.1 courtrecordslookup.com
        127.0.0.1 www.cporriere.it
        127.0.0.1 cporriere.it
        127.0.0.1 www.cprriere.it
        127.0.0.1 cprriere.it
        127.0.0.1 cpvfeed.com
        127.0.0.1 cracks.me.uk
        127.0.0.1 www.cracks4all.com
        127.0.0.1 cracks4all.com
        127.0.0.1 www.crapsgold.info
        127.0.0.1 crapsgold.info
        127.0.0.1 crazygirls-world.com
        127.0.0.1 www.crazywinnings.com
        127.0.0.1 crazywinnings.com
        127.0.0.1 creamedcutties.com
        127.0.0.1 www.createaccesskey.com
        127.0.0.1 createaccesskey.com
        127.0.0.1 www.creatonsoft.com
        127.0.0.1 creatonsoft.com
        127.0.0.1 creditsearchonline.com
        127.0.0.1 crestring.com
        127.0.0.1 crooder.com
        127.0.0.1 www.crriere.it
        127.0.0.1 crriere.it
        127.0.0.1 www.cryptdrive.com
        127.0.0.1 cryptdrive.com
        127.0.0.1 www.crystalysmedia.com
        127.0.0.1 crystalysmedia.com
        127.0.0.1 www.csx.adservs.com
        127.0.0.1 csx.adservs.com
        127.0.0.1 cts.180solutions.com
        127.0.0.1 www.cuisinartoven.com
        127.0.0.1 cuisinartoven.com
        127.0.0.1 www.curedc.info
        127.0.0.1 curedc.info
        127.0.0.1 www.curepcsolutions.com
        127.0.0.1 curepcsolutions.com
        127.0.0.1 curvedspaces.com
        127.0.0.1 www.cutadult.com
        127.0.0.1 cutadult.com
        127.0.0.1 www.cvirgilio.it
        127.0.0.1 cvirgilio.it
        127.0.0.1 www.cvorriere.it
        127.0.0.1 cvorriere.it
        127.0.0.1 cvs.jps.ru
        127.0.0.1 cvsymphony.com
        127.0.0.1 www.cxorriere.it
        127.0.0.1 cxorriere.it
        127.0.0.1 www.cyberrape.com
        127.0.0.1 cyberrape.com
        127.0.0.1 cydom.com
        127.0.0.1 www.cydoor.com
        127.0.0.1 cydoor.com
        127.0.0.1 www.daily3xlinks.com
        127.0.0.1 daily3xlinks.com
        127.0.0.1 www.dailybestclips.com
        127.0.0.1 dailybestclips.com
        127.0.0.1 daily-gals.com
        127.0.0.1 www.dailyhugemovs.com
        127.0.0.1 dailyhugemovs.com
        127.0.0.1 www.dailykeys.com
        127.0.0.1 dailykeys.com
        127.0.0.1 www.dailypornmag.com
        127.0.0.1 dailypornmag.com
        127.0.0.1 dailyteenspic.com
        127.0.0.1 www.dailytoolbar.com
        127.0.0.1 dailytoolbar.com
        127.0.0.1 www.dailyxvids.com
        127.0.0.1 dailyxvids.com
        127.0.0.1 dancingbabycd.com
        127.0.0.1 www.dapsol.com
        127.0.0.1 dapsol.com
        127.0.0.1 www.dapsolution.com
        127.0.0.1 dapsolution.com
        127.0.0.1 www.data-hoster.com
        127.0.0.1 data-hoster.com
        127.0.0.1 datanotary.com
        127.0.0.1 datareco.com
        127.0.0.1 www.dateanybabe.com
        127.0.0.1 dateanybabe.com
        127.0.0.1 www.dateanychick.com
        127.0.0.1 dateanychick.com
        127.0.0.1 www.datingdoctorsite.com
        127.0.0.1 datingdoctorsite.com
        127.0.0.1 www.dating-galaxy.info
        127.0.0.1 dating-galaxy.info
        127.0.0.1 dating-search.net
        127.0.0.1 davemarshall.org
        127.0.0.1 db105.com
        127.0.0.1 www.dbdecicated.com
        127.0.0.1 dbdecicated.com
        127.0.0.1 www.dbxcompany.com
        127.0.0.1 dbxcompany.com
        127.0.0.1 dcdl.dmcast.com
        127.0.0.1 dcfitusa.com
        127.0.0.1 www.dcorriere.it
        127.0.0.1 dcorriere.it
        127.0.0.1 www.dcurtis.com
        127.0.0.1 dcurtis.com
        127.0.0.1 dcww.dmcast.com
        127.0.0.1 de.ag
        127.0.0.1 de.drivecleaner.com
        127.0.0.1 de.errorsafe.com
        127.0.0.1 de.winantivirus.com
        127.0.0.1 de98.remsys.org
        127.0.0.1 www.debay.it
        127.0.0.1 debay.it
        127.0.0.1 www.decknews.com
        127.0.0.1 decknews.com
        127.0.0.1 dedmazay.3322.org
        127.0.0.1 www.dedsearch.com
        127.0.0.1 dedsearch.com
        127.0.0.1 defaultsearch.net
        127.0.0.1 www.defensaantimalware.com
        127.0.0.1 defensaantimalware.com
        127.0.0.1 www.deja-rue.com
        127.0.0.1 deja-rue.com
        127.0.0.1 www.delficodec.com
        127.0.0.1 delficodec.com
        127.0.0.1 www.democodec.com
        127.0.0.1 democodec.com
        127.0.0.1 www.derklaif.biz
        127.0.0.1 derklaif.biz
        127.0.0.1 www.derrari.it
        127.0.0.1 derrari.it
        127.0.0.1 desarrollocreativo.com
        127.0.0.1 www.deskbar.worldtostart.com
        127.0.0.1 deskbar.worldtostart.com
        127.0.0.1 www.deskwizz.com
        127.0.0.1 deskwizz.com
        127.0.0.1 www.destruktor.to.pl
        127.0.0.1 destruktor.to.pl
        127.0.0.1 www.detectivehound.com
        127.0.0.1 detectivehound.com
        127.0.0.1 www.detectivesearches.com
        127.0.0.1 detectivesearches.com
        127.0.0.1 dev.ntcor.com
        127.0.0.1 develip.com
        127.0.0.1 dewis.spb.ru
        127.0.0.1 dewis.us
        127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
        127.0.0.1 www.dgbusiness.com
        127.0.0.1 dgbusiness.com
        127.0.0.1 dialer2004.com
        127.0.0.1 www.dialerclub.com
        127.0.0.1 dialerclub.com
        127.0.0.1 www.dialer-shop.com
        127.0.0.1 dialer-shop.com
        127.0.0.1 www.dialoff.com
        127.0.0.1 dialoff.com
        127.0.0.1 www.did.i-used.cc
        127.0.0.1 did.i-used.cc
        127.0.0.1 dietpills4free.com
        127.0.0.1 dietpussy.com
        127.0.0.1 www.digikeygen.com
        127.0.0.1 digikeygen.com
        127.0.0.1 digistreamsa.com
        127.0.0.1 www.digitalcoders.net
        127.0.0.1 digitalcoders.net
        127.0.0.1 www.digitalfan.com
        127.0.0.1 digital-pornography.com
        127.0.0.1 dionforvalleycouncil.org
        127.0.0.1 www.directdvdpro.com
        127.0.0.1 directdvdpro.com
        127.0.0.1 www.directnameservice.com
        127.0.0.1 directnameservice.com
        127.0.0.1 www.directporta.info
        127.0.0.1 directporta.info
        127.0.0.1 www.directsearchzone.com
        127.0.0.1 directsearchzone.com
        127.0.0.1 www.diskretter.com
        127.0.0.1 diskretter.com
        127.0.0.1 dist.checkin100.com
        127.0.0.1 dl.ad-ware.cc
        127.0.0.1 dl.malwarewipe.com
        127.0.0.1 dl.mcboo.com
        127.0.0.1 www.dl.targetsaver.com
        127.0.0.1 dl.targetsaver.com
        127.0.0.1 dl.web-nexus.net
        127.0.0.1 dl1.antivermins.com
        127.0.0.1 dl1.antivirgear.com
        127.0.0.1 dl1.spydawn.com
        127.0.0.1 dl1.virusprotectpro.com
        127.0.0.1 dl10.spyfalcon.com
        127.0.0.1 dl16.spyfalcon.com
        127.0.0.1 dl2.spyfalcon.com
        127.0.0.1 dl2.spyheal.com
        127.0.0.1 dl2.spywarestrike.com
        127.0.0.1 dl3.spyfalcon.com
        127.0.0.1 dl3.spyheal.com
        127.0.0.1 dl3.spywarestrike.com
        127.0.0.1 dl4.spyfalcon.com
        127.0.0.1 dl4.spywarestrike.com
        127.0.0.1 dl5.spyfalcon.com
        127.0.0.1 dl5.spywarestrike.com
        127.0.0.1 dl6.spywarestrike.com
        127.0.0.1 dl7.spywarestrike.com
        127.0.0.1 dl8.spyheal.com
        127.0.0.1 dl8.spywarestrike.com
        127.0.0.1 dl9.spyfalcon.com
        127.0.0.1 dload.contextplus.net
        127.0.0.1 www.dltsolution.com
        127.0.0.1 dltsolution.com
        127.0.0.1 www.dmcast.com
        127.0.0.1 dmcast.com
        127.0.0.1 www.dmqfirm.com
        127.0.0.1 dmqfirm.com
        127.0.0.1 www.dnaads.com
        127.0.0.1 dnaads.com
        127.0.0.1 dnl.mabou.org
        127.0.0.1 www.dns-look-up.com
        127.0.0.1 dns-look-up.com
        127.0.0.1 doctorwaldron.com
        127.0.0.1 document-not-found.pornpic.org
        127.0.0.1 doggyaction.com
        127.0.0.1 www.dogproblemswebsite.com
        127.0.0.1 dogproblemswebsite.com
        127.0.0.1 doktorxxx.com
        127.0.0.1 dollarrevenue.com
        127.0.0.1 www.domaincar.com
        127.0.0.1 domaincar.com
        127.0.0.1 domains2003.net
        127.0.0.1 domains-for-you-online.com
        127.0.0.1 domain-your-registration.com
        127.0.0.1 domkrat.com
        127.0.0.1 www.doofo.com
        127.0.0.1 doofo.com
        127.0.0.1 www.dotcomtoolbar.com
        127.0.0.1 dotcomtoolbar.com
        127.0.0.1 down.136136.net
        127.0.0.1 download.abetterinternet.com
        127.0.0.1 download.adintelligence.net
        127.0.0.1 www.download.antispywarebot.com
        127.0.0.1 download.antispywarebot.com
        127.0.0.1 www.download.bardownload.com
        127.0.0.1 download.bardownload.com
        127.0.0.1 www.download.bravesentry.com
        127.0.0.1 download.bravesentry.com
        127.0.0.1 download.cdn.drivecleaner.com
        127.0.0.1 download.cdn.errorsafe.com
        127.0.0.1 download.cdn.winsoftware.com
        127.0.0.1 download.contextplus.net
        127.0.0.1 download.errorsafe.com
        127.0.0.1 www.download.jupitersatellites.biz
        127.0.0.1 download.jupitersatellites.biz
        127.0.0.1 download.malwarealarm.com
        127.0.0.1 download.searchtabs.net
        127.0.0.1 www.download.secureyournet.biz
        127.0.0.1 download.secureyournet.biz
        127.0.0.1 download.spyonthis.net
        127.0.0.1 download.spy-shredder.com
        127.0.0.1 download.systemdoctor.com
        127.0.0.1 download.winantispyware.com
        127.0.0.1 download.winantivirus.com
        127.0.0.1 download.windrivecleaner.com
        127.0.0.1 download.winfixer.com
        127.0.0.1 download10.spywarequake.com
        127.0.0.1 download11.spywarequake.com
        127.0.0.1 download12.spywarequake.com
        127.0.0.1 download13.spywarequake.com
        127.0.0.1 download15.spywarequake.com
        127.0.0.1 download2.spywarequake.com
        127.0.0.1 www.download-2007.com
        127.0.0.1 download-2007.com
        127.0.0.1 download3.spyaxe.com
        127.0.0.1 download3.spywarequake.com
        127.0.0.1 www.download3xpics.com
        127.0.0.1 download3xpics.com
        127.0.0.1 download4.spyaxe.com
        127.0.0.1 download4.spywarequake.com
        127.0.0.1 download5.spyaxe.com
        127.0.0.1 download5.spywarequake.com
        127.0.0.1 download6.spyaxe.com
        127.0.0.1 download7.spywarequake.com
        127.0.0.1 download8.spywarequake.com
        127.0.0.1 download9.spywarequake.com
        127.0.0.1 www.downloadacceleratorsite.com
        127.0.0.1 downloadacceleratorsite.com
        127.0.0.1 www.download-ad-aware.com
        127.0.0.1 download-ad-aware.com
        127.0.0.1 www.download-all-4-free.com
        127.0.0.1 download-all-4-free.com
        127.0.0.1 www.download-all-area.com
        127.0.0.1 download-all-area.com
        127.0.0.1 www.download-antivir.com
        127.0.0.1 download-antivir.com
        127.0.0.1 www.downloadanysong.com
        127.0.0.1 downloadanysong.com
        127.0.0.1 www.downloadaresnow.com
        127.0.0.1 downloadaresnow.com
        127.0.0.1 www.download-avast.com
        127.0.0.1 download-avast.com
        127.0.0.1 www.downloadcorporation.com
        127.0.0.1 downloadcorporation.com
        127.0.0.1 www.download-dvdshrink.com
        127.0.0.1 download-dvdshrink.com
        127.0.0.1 www.download-for-free.net
        127.0.0.1 download-for-free.net
        127.0.0.1 www.downloadfreesoft.com
        127.0.0.1 downloadfreesoft.com
        127.0.0.1 www.downloadfreeway.com
        127.0.0.1 downloadfreeway.com
        127.0.0.1 www.downloadimesh.com
        127.0.0.1 downloadimesh.com
        127.0.0.1 www.download-itunes-now.com
        127.0.0.1 download-itunes-now.com
        127.0.0.1 www.download-limewire.org
        127.0.0.1 download-limewire.org
        127.0.0.1 www.downloadlost.tv
        127.0.0.1 downloadlost.tv
        127.0.0.1 www.downloadmax.net
        127.0.0.1 downloadmax.net
        127.0.0.1 www.download-mcafee.com
        127.0.0.1 download-mcafee.com
        127.0.0.1 download-me.info
        127.0.0.1 www.downloadmediaax.com
        127.0.0.1 downloadmediaax.com
        127.0.0.1 www.downloadpics.net
        127.0.0.1 downloadpics.net
        127.0.0.1 www.downloadprovider.net
        127.0.0.1 downloadprovider.net
        127.0.0.1 www.download-real-player.com
        127.0.0.1 download-real-player.com
        127.0.0.1 downloads.180solutions.com
        127.0.0.1 downloads.adaware.cc
        127.0.0.1 www.downloadservicearea.com
        127.0.0.1 downloadservicearea.com
        127.0.0.1 www.downloads-free.org
        127.0.0.1
        2. iceman
          je redemarre mon ordinateur et je vous dit si l'icone est définitivement partis. Franchement je suis content qu'il existe des gens hyper sympas comme vous qui acceptent d' aider d'autres gens. merci encore mille fois
          1. Utilisateur anonyme
            alors!!

        3. iceman
          désolé du temps. Ben l'icone n'est pas réapparue. Mais mon papier peint est devenue bleue alors que j'avais une autre image.
          2. iceman
            Je viens de recevoir un message avec comme logo une fleche bleu arrondie: System Integrity Scan Wizard qui me dit que: your computer may have critical errors in windows registry and file system! Que dois je faire s'il vous plait ? Je ne sais pas si c'est encore un spyware ou pas ?
            1. Utilisateur anonyme
              ne clic sur rien post moi un hijackthis
          3. iceman
            voila:

            Logfile of Trend Micro HijackThis v2.0.2
            Scan saved at 19:27:03, on 21/04/2008
            Platform: Windows XP SP2 (WinNT 5.01.2600)
            MSIE: Internet Explorer v7.00 (7.00.6000.16640)
            Boot mode: Normal

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
            C:\Program Files\Norton Internet Security\ISSVC.exe
            C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
            C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
            C:\WINDOWS\system32\spoolsv.exe
            C:\WINDOWS\Explorer.EXE
            C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
            C:\PROGRA~1\PACKSC~1\backweb\361343\Program\SERVIC~1.EXE
            c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
            C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
            C:\Program Files\Pack Sécurité\backweb\361343\Program\fspex.exe
            C:\Program Files\Pack Sécurité\Anti-Virus\fsgk32st.exe
            C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
            C:\Program Files\Pack Sécurité\Anti-Virus\FSGK32.EXE
            C:\Program Files\Pack Sécurité\backweb\361343\program\fsbwsys.exe
            C:\Program Files\Pack Sécurité\Common\FSMA32.EXE
            c:\APPS\HIDSERVICE\HIDSERVICE.exe
            C:\Program Files\Pack Sécurité\Common\FSMB32.EXE
            C:\Program Files\Pack Sécurité\Common\FCH32.EXE
            C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
            C:\Program Files\Microsoft SQL Server\MSSQL$INVENTORCONTENT\Binn\sqlservr.exe
            C:\Program Files\Pack Sécurité\Anti-Virus\fsqh.exe
            C:\Program Files\Pack Sécurité\Common\FAMEH32.EXE
            C:\Program Files\Pack Sécurité\Anti-Virus\fsrw.exe
            C:\Program Files\Pack Sécurité\FSPC\fspc.exe
            C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
            C:\WINDOWS\system32\nvsvc32.exe
            C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
            C:\WINDOWS\system32\slserv.exe
            C:\WINDOWS\system32\svchost.exe
            c:\APPS\Powercinema\Kernel\TV\CLSched.exe
            C:\Program Files\Pack Sécurité\FWES\Program\fsdfwd.exe
            C:\Program Files\Pack Sécurité\Anti-Virus\fssm32.exe
            C:\Program Files\Pack Sécurité\Anti-Virus\fsav32.exe
            C:\Documents and Settings\All Users\Application Data\spatwtip\ebknafir.exe
            C:\WINDOWS\system32\wuauclt.exe
            C:\WINDOWS\system32\RUNDLL32.EXE
            C:\WINDOWS\SOUNDMAN.EXE
            C:\Apps\Powercinema\PCMService.exe
            C:\apps\ABoard\ABoard.exe
            C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
            C:\Program Files\D-Tools\daemon.exe
            C:\apps\ABoard\AOSD.exe
            C:\Program Files\QuickTime\qttask.exe
            C:\Program Files\Pack Sécurité\Common\FSM32.EXE
            C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
            C:\WINDOWS\system32\ctfmon.exe
            C:\Program Files\BitComet\BitComet.exe
            C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE
            C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
            C:\WINDOWS\system32\ahsbedyx.exe
            C:\Program Files\Pack Sécurité\Anti-Spyware\fsaw.exe
            C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
            C:\Program Files\Pack Sécurité\FSGUI\fsguidll.exe
            C:\Program Files\Internet Explorer\IEXPLORE.EXE
            C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NSMdtr.exe
            C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
            C:\PROGRA~1\WINDOW~4\MESSEN~1\msnmsgr.exe
            C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
            C:\WINDOWS\system32\ahsbedyx.exe
            C:\Program Files\Windows Live\Messenger\usnsvc.exe
            C:\Documents and Settings\FARID\Bureau\test.exe.exe

            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
            O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.11.30.dll
            O2 - BHO: (no name) - {4C9C9447-3658-44C9-8490-D96B0AB57C88} - (no file)
            O2 - BHO: PBFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D} - C:\WINDOWS\system32\pbfrv2.dll
            O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
            O2 - BHO: (no name) - {54DD758D-DE7D-4DAC-BBC6-4D8BDB7FFEF9} - C:\WINDOWS\system32\xxyyxyAr.dll (file missing)
            O2 - BHO: (no name) - {61D02CDA-380C-45C7-B1D1-6109BD40FCBB} - C:\WINDOWS\system32\pmnmljHB.dll (file missing)
            O2 - BHO: (no name) - {6A6EAE1B-4AD6-4035-974D-504D6DBAA9C3} - C:\WINDOWS\system32\fccBrrPG.dll
            O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
            O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
            O2 - BHO: (no name) - {8EFDDA7C-B0D4-4D21-A755-A8914CDDAA7A} - C:\WINDOWS\system32\mlJDssSl.dll (file missing)
            O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
            O2 - BHO: (no name) - {9807712F-B343-4C8B-BECB-6CEB025B36AE} - C:\WINDOWS\system32\nnnkHbYs.dll (file missing)
            O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
            O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
            O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
            O2 - BHO: (no name) - {B3CB5A1C-F67E-470C-8AB0-2ED25F34634F} - C:\WINDOWS\system32\pmnKBQjj.dll (file missing)
            O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
            O2 - BHO: (no name) - {C3E0AEAE-F02B-44D0-812E-6EA25C4E579F} - C:\WINDOWS\system32\hgGxUNHB.dll (file missing)
            O2 - BHO: (no name) - {DED745E0-7751-4634-807F-72EDC0C81F12} - C:\WINDOWS\system32\cbXPhIaB.dll (file missing)
            O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
            O2 - BHO: (no name) - {EDF92D17-E048-4B50-9084-2195A841548A} - C:\WINDOWS\system32\iifccddc.dll (file missing)
            O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
            O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
            O3 - Toolbar: PBFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D} - C:\WINDOWS\system32\pbfrv2.dll
            O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
            O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
            O3 - Toolbar: qtvglped - {3D91099B-562D-49EC-BDBD-78C5DE9CAED9} - C:\WINDOWS\qtvglped.dll
            O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
            O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
            O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
            O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
            O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
            O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
            O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
            O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
            O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
            O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
            O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
            O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
            O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Sécurité\Common\FSM32.EXE" /splash
            O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Pack Sécurité\FSGUI\FSSW.EXE" /reboot
            O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Sécurité\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
            O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
            O4 - HKLM\..\RunOnce: [Spybot - Search & Destroy] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
            O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
            O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
            O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
            O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "C:\WINDOWS\TEMP\E_SF2.tmp" /EF "HKCU"
            O4 - HKCU\..\Run: [Instant Access] C:\WINDOWS\system32\nsinet.exe /res
            O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
            O4 - HKCU\..\Run: [pqrnuchx] C:\WINDOWS\system32\ahsbedyx.exe
            O4 - HKCU\..\Run: [qcxzztxl] C:\WINDOWS\system32\nwlmdqrg.exe
            O4 - HKCU\..\Run: [lovarwlb] C:\WINDOWS\system32\exmjuvap.exe
            O4 - HKCU\..\Run: [otiqoefeg] c:\documents and settings\farid\local settings\application data\otiqoefeg.exe otiqoefeg
            O4 - HKCU\..\RunOnce: [SpybotDeletingD2961] cmd /c del "C:\WINDOWS\system32\jqcigmuo.dll_old"
            O4 - HKLM\..\Policies\Explorer\Run: [hNkvaz1JWm] C:\Documents and Settings\All Users\Application Data\spatwtip\ebknafir.exe
            O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
            O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
            O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
            O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
            O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
            O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
            O4 - Global Startup: Pack Sécurité.lnk = ?
            O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
            O8 - Extra context menu item: &Bloquer cette fenêtre pub. - C:\Program Files\Pack Sécurité\Anti-Spyware\blockpopups.htm
            O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
            O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
            O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
            O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
            O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Sécurité\FSPC\fspcmsie.dll
            O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Sécurité\FSPC\fspcmsie.dll
            O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Sécurité\FSPC\fspcmsie.dll
            O9 - Extra button: Protection IE - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Sécurité\Anti-Spyware\ieshield.dll
            O9 - Extra 'Tools' menuitem: Protection IE... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Sécurité\Anti-Spyware\ieshield.dll
            O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (file missing)
            O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Researcher\EROPROJ.DLL
            O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.1.11.30.dll/206 (file missing)
            O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
            O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
            O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
            O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
            O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/advanced/2.0.2.3/cfweb_activex.camfrogweb.com-advanced-2.0.2.3_instmodule.exe
            O20 - Winlogon Notify: fccBrrPG - C:\WINDOWS\SYSTEM32\fccBrrPG.dll
            O21 - SSODL: omlbpkaw - {DF049233-E66A-4A04-9D02-84E886184EB4} - C:\WINDOWS\omlbpkaw.dll
            O21 - SSODL: pmsoarbf - {1687B0EB-9EF7-4CD8-9144-792483ABA73D} - C:\WINDOWS\pmsoarbf.dll
            O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
            O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
            O23 - Service: Pack Sécurité (BackWeb Plug-in - 361343) - Pack Securite - C:\PROGRA~1\PACKSC~1\backweb\361343\Program\SERVIC~1.EXE
            O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
            O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
            O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
            O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
            O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
            O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
            O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
            O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Sécurité\Anti-Virus\fsgk32st.exe
            O23 - Service: FSBWSYS - F-Secure Corp. - C:\Program Files\Pack Sécurité\backweb\361343\program\fsbwsys.exe
            O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Sécurité\FWES\Program\fsdfwd.exe
            O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Pack Sécurité\Common\FSMA32.EXE
            O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
            O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
            O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
            O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
            O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
            O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
            O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
            O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
            O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
            O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
            O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
            O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
            1. iceman
              Le triangle jaune avec le point d'exclamation noir vien de réapparaitre en bas a droite de l'écran avec mes autres icones. Il me dit qu'il ya des spywares dans on ordinateur.
              3. iceman
                je voulais vous die que je ne peut pas restaurer mon systeme. Donc il doit y avoir un virus qui traine encore...Est-ce que vous pouver m'aider a enlever ces virus ......s'il vous plait....
                1. Utilisateur anonyme
                  Télécharger Vundofix.exe (par Atribune) sur votre Bureau.

                  http://www.atribune.org/ccount/click.php?id=4

                  * Double-cliquer sur VundoFix.exe afin de le lancer.
                  * Cliquer sur le bouton Scan for Vundo.
                  * Lorsque le scan est complété, cliquer sur le bouton fix Vundo.
                  * Une invite de commande demandera si l’on souhaite supprimer les fichiers, cliquer sur YES
                  * Après avoir cliqué "YES", le Bureau disparaîtra un moment lors de la suppression des fichiers.
                  * Une nouvelle invite de commande annoncera que le PC devra s'éteindre ("shutdown"). Cliquer sur OK , puis laisser le redémarrer.
                  * Le contenu du rapport est situé dans C:\vundofix.txt, et poste le!!

                  et repost un hijackthis
              5. iceman
                voila le rapport vundofix:

                VundoFix V7.0.3

                Scan started at 12:14:45 22/04/2008

                Listing files found while scanning....

                C:\WINDOWS\system32\fccBrrPG.dll

                Beginning removal...

                Attempting to delete C:\WINDOWS\system32\fccBrrPG.dll
                C:\WINDOWS\system32\fccBrrPG.dll Could not be deleted.

                Performing Repairs to the registry.
                Done!

                Beginning removal...

                Performing Repairs to the registry.
                Done!
                1. iceman
                  voila le rapport hijackthis:

                  Logfile of Trend Micro HijackThis v2.0.2
                  Scan saved at 14:06:29, on 22/04/2008
                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v7.00 (7.00.6000.16640)
                  Boot mode: Normal

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
                  C:\Program Files\Norton Internet Security\ISSVC.exe
                  C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
                  C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
                  C:\PROGRA~1\PACKSC~1\backweb\361343\Program\SERVIC~1.EXE
                  c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
                  C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
                  C:\Program Files\Pack Sécurité\backweb\361343\Program\fspex.exe
                  C:\Program Files\Pack Sécurité\Anti-Virus\fsgk32st.exe
                  C:\Program Files\Pack Sécurité\Anti-Virus\FSGK32.EXE
                  C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
                  C:\Program Files\Pack Sécurité\backweb\361343\program\fsbwsys.exe
                  C:\Program Files\Pack Sécurité\Common\FSMA32.EXE
                  c:\APPS\HIDSERVICE\HIDSERVICE.exe
                  C:\Program Files\Pack Sécurité\Common\FSMB32.EXE
                  C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                  C:\Program Files\Pack Sécurité\Common\FCH32.EXE
                  C:\Program Files\Microsoft SQL Server\MSSQL$INVENTORCONTENT\Binn\sqlservr.exe
                  C:\Program Files\Pack Sécurité\Anti-Virus\fsqh.exe
                  C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
                  C:\Program Files\Pack Sécurité\Common\FAMEH32.EXE
                  C:\WINDOWS\system32\nvsvc32.exe
                  C:\Program Files\Pack Sécurité\Anti-Virus\fsrw.exe
                  C:\Program Files\Pack Sécurité\FSPC\fspc.exe
                  C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                  C:\WINDOWS\system32\slserv.exe
                  C:\WINDOWS\system32\svchost.exe
                  c:\APPS\Powercinema\Kernel\TV\CLSched.exe
                  C:\Program Files\Pack Sécurité\FWES\Program\fsdfwd.exe
                  C:\Program Files\Pack Sécurité\Anti-Virus\fssm32.exe
                  C:\Program Files\Pack Sécurité\Anti-Virus\fsav32.exe
                  C:\WINDOWS\system32\wuauclt.exe
                  C:\Documents and Settings\All Users\Application Data\spatwtip\ebknafir.exe
                  C:\WINDOWS\system32\RUNDLL32.EXE
                  C:\WINDOWS\SOUNDMAN.EXE
                  C:\Apps\Powercinema\PCMService.exe
                  C:\apps\ABoard\ABoard.exe
                  C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                  C:\apps\ABoard\AOSD.exe
                  C:\Program Files\D-Tools\daemon.exe
                  C:\Program Files\QuickTime\qttask.exe
                  C:\Program Files\Pack Sécurité\Common\FSM32.EXE
                  C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\BitComet\BitComet.exe
                  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  C:\WINDOWS\system32\vgxgjyxy.exe
                  C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE
                  C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
                  C:\Program Files\Pack Sécurité\Anti-Spyware\fsaw.exe
                  C:\Program Files\Pack Sécurité\FSGUI\fsguidll.exe
                  C:\Program Files\Internet Explorer\IEXPLORE.EXE
                  C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NSMdtr.exe
                  C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                  C:\Documents and Settings\FARID\Bureau\test.exe.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2
                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                  O2 - BHO: (no name) - {237FCF20-D640-40BD-93AA-3BE414FF9F35} - C:\WINDOWS\system32\urqQjgeB.dll (file missing)
                  O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.11.30.dll
                  O2 - BHO: (no name) - {4C9C9447-3658-44C9-8490-D96B0AB57C88} - (no file)
                  O2 - BHO: PBFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D} - C:\WINDOWS\system32\pbfrv2.dll
                  O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                  O2 - BHO: (no name) - {54DD758D-DE7D-4DAC-BBC6-4D8BDB7FFEF9} - C:\WINDOWS\system32\xxyyxyAr.dll (file missing)
                  O2 - BHO: (no name) - {61D02CDA-380C-45C7-B1D1-6109BD40FCBB} - C:\WINDOWS\system32\pmnmljHB.dll (file missing)
                  O2 - BHO: (no name) - {6A6EAE1B-4AD6-4035-974D-504D6DBAA9C3} - C:\WINDOWS\system32\fccBrrPG.dll
                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                  O2 - BHO: (no name) - {8EFDDA7C-B0D4-4D21-A755-A8914CDDAA7A} - C:\WINDOWS\system32\mlJDssSl.dll (file missing)
                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                  O2 - BHO: (no name) - {9807712F-B343-4C8B-BECB-6CEB025B36AE} - C:\WINDOWS\system32\nnnkHbYs.dll (file missing)
                  O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
                  O2 - BHO: (no name) - {B3CB5A1C-F67E-470C-8AB0-2ED25F34634F} - C:\WINDOWS\system32\pmnKBQjj.dll (file missing)
                  O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
                  O2 - BHO: (no name) - {C3E0AEAE-F02B-44D0-812E-6EA25C4E579F} - C:\WINDOWS\system32\hgGxUNHB.dll (file missing)
                  O2 - BHO: (no name) - {DED745E0-7751-4634-807F-72EDC0C81F12} - C:\WINDOWS\system32\cbXPhIaB.dll (file missing)
                  O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
                  O2 - BHO: (no name) - {EDF92D17-E048-4B50-9084-2195A841548A} - C:\WINDOWS\system32\iifccddc.dll (file missing)
                  O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
                  O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
                  O3 - Toolbar: PBFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D} - C:\WINDOWS\system32\pbfrv2.dll
                  O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                  O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
                  O3 - Toolbar: qtvglped - {3D91099B-562D-49EC-BDBD-78C5DE9CAED9} - C:\WINDOWS\qtvglped.dll
                  O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
                  O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
                  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                  O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                  O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
                  O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
                  O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32"
                  O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
                  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                  O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                  O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Sécurité\Common\FSM32.EXE" /splash
                  O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Pack Sécurité\FSGUI\FSSW.EXE" /reboot
                  O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Sécurité\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
                  O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
                  O4 - HKLM\..\RunOnce: [Spybot - Search & Destroy] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
                  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [BitComet] "C:\Program Files\BitComet\BitComet.exe" /tray
                  O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
                  O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "C:\WINDOWS\TEMP\E_SF2.tmp" /EF "HKCU"
                  O4 - HKCU\..\Run: [Instant Access] C:\WINDOWS\system32\nsinet.exe /res
                  O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                  O4 - HKCU\..\Run: [pqrnuchx] C:\WINDOWS\system32\ahsbedyx.exe
                  O4 - HKCU\..\Run: [qcxzztxl] C:\WINDOWS\system32\nwlmdqrg.exe
                  O4 - HKCU\..\Run: [lovarwlb] C:\WINDOWS\system32\exmjuvap.exe
                  O4 - HKCU\..\Run: [otiqoefeg] c:\documents and settings\farid\local settings\application data\otiqoefeg.exe otiqoefeg
                  O4 - HKCU\..\RunOnce: [SpybotDeletingD2961] cmd /c del "C:\WINDOWS\system32\jqcigmuo.dll_old"
                  O4 - HKCU\..\RunOnce: [SpybotDeletingD3863] cmd /c del "C:\WINDOWS\system32\xxyyxyAr.dll_old"
                  O4 - HKLM\..\Policies\Explorer\Run: [hNkvaz1JWm] C:\Documents and Settings\All Users\Application Data\spatwtip\ebknafir.exe
                  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                  O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
                  O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                  O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                  O4 - Global Startup: Pack Sécurité.lnk = ?
                  O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
                  O8 - Extra context menu item: &Bloquer cette fenêtre pub. - C:\Program Files\Pack Sécurité\Anti-Spyware\blockpopups.htm
                  O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
                  O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
                  O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
                  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                  O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Sécurité\FSPC\fspcmsie.dll
                  O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Sécurité\FSPC\fspcmsie.dll
                  O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Sécurité\FSPC\fspcmsie.dll
                  O9 - Extra button: Protection IE - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Sécurité\Anti-Spyware\ieshield.dll
                  O9 - Extra 'Tools' menuitem: Protection IE... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Sécurité\Anti-Spyware\ieshield.dll
                  O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (file missing)
                  O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Researcher\EROPROJ.DLL
                  O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.1.11.30.dll/206 (file missing)
                  O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                  O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
                  O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/advanced/2.0.2.3/cfweb_activex.camfrogweb.com-advanced-2.0.2.3_instmodule.exe
                  O21 - SSODL: omlbpkaw - {DF049233-E66A-4A04-9D02-84E886184EB4} - C:\WINDOWS\omlbpkaw.dll
                  O21 - SSODL: pmsoarbf - {1687B0EB-9EF7-4CD8-9144-792483ABA73D} - C:\WINDOWS\pmsoarbf.dll
                  O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
                  O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
                  O23 - Service: Pack Sécurité (BackWeb Plug-in - 361343) - Pack Securite - C:\PROGRA~1\PACKSC~1\backweb\361343\Program\SERVIC~1.EXE
                  O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
                  O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
                  O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
                  O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
                  O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
                  O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
                  O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
                  O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Sécurité\Anti-Virus\fsgk32st.exe
                  O23 - Service: FSBWSYS - F-Secure Corp. - C:\Program Files\Pack Sécurité\backweb\361343\program\fsbwsys.exe
                  O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Sécurité\FWES\Program\fsdfwd.exe
                  O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Pack Sécurité\Common\FSMA32.EXE
                  O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
                  O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
                  O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
                  O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
                  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                  O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                  O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
                  O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
                  O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
                  O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
                  1. Utilisateur anonyme
                    relance hijack et coches les lignes ci dessous dans le bloc note qui va s'ouvrir et clic sur fix checkhed seul hijac doit etre ouvert!!

                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2

                    O2 - BHO: (no name) - {237FCF20-D640-40BD-93AA-3BE414FF9F35} - C:\WINDOWS\system32\urqQjgeB.dll (file missing)
                    O2 - BHO: (no name) - {4C9C9447-3658-44C9-8490-D96B0AB57C88} - (no file)
                    O2 - BHO: PBFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D} - C:\WINDOWS\system32\pbfrv2.dll
                    O2 - BHO: (no name) - {54DD758D-DE7D-4DAC-BBC6-4D8BDB7FFEF9} - C:\WINDOWS\system32\xxyyxyAr.dll (file missing)
                    O2 - BHO: (no name) - {61D02CDA-380C-45C7-B1D1-6109BD40FCBB} - C:\WINDOWS\system32\pmnmljHB.dll (file missing)
                    O2 - BHO: (no name) - {6A6EAE1B-4AD6-4035-974D-504D6DBAA9C3} - C:\WINDOWS\system32\fccBrrPG.dll
                    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                    O2 - BHO: (no name) - {8EFDDA7C-B0D4-4D21-A755-A8914CDDAA7A} - C:\WINDOWS\system32\mlJDssSl.dll (file missing)
                    O2 - BHO: (no name) - {9807712F-B343-4C8B-BECB-6CEB025B36AE} - C:\WINDOWS\system32\nnnkHbYs.dll (file missing)
                    O2 - BHO: (no name) - {B3CB5A1C-F67E-470C-8AB0-2ED25F34634F} - C:\WINDOWS\system32\pmnKBQjj.dll (file missing)
                    O2 - BHO: (no name) - {C3E0AEAE-F02B-44D0-812E-6EA25C4E579F} - C:\WINDOWS\system32\hgGxUNHB.dll (file missing)
                    O2 - BHO: (no name) - {DED745E0-7751-4634-807F-72EDC0C81F12} - C:\WINDOWS\system32\cbXPhIaB.dll (file missing)
                    O2 - BHO: (no name) - {EDF92D17-E048-4B50-9084-2195A841548A} - C:\WINDOWS\system32\iifccddc.dll (file missing)
                    O3 - Toolbar: PBFRV2 - {4E7BD74F-2B8D-469E-A0E8-ED6AB685FA7D} - C:\WINDOWS\system32\pbfrv2.dll
                    O3 - Toolbar: qtvglped - {3D91099B-562D-49EC-BDBD-78C5DE9CAED9} - C:\WINDOWS\qtvglped.dll
                    O4 - HKCU\..\Run: [Instant Access] C:\WINDOWS\system32\nsinet.exe /res
                    O4 - HKCU\..\Run: [pqrnuchx] C:\WINDOWS\system32\ahsbedyx.exe
                    O4 - HKCU\..\Run: [qcxzztxl] C:\WINDOWS\system32\nwlmdqrg.exe
                    O4 - HKCU\..\Run: [lovarwlb] C:\WINDOWS\system32\exmjuvap.exe

                    O4 - HKCU\..\Run: [otiqoefeg] c:\documents and settings\farid\local settings\application data\otiqoefeg.exe otiqoefeg
                    O4 - HKCU\..\RunOnce: [SpybotDeletingD2961] cmd /c del "C:\WINDOWS\system32\jqcigmuo.dll_old"
                    O4 - HKCU\..\RunOnce: [SpybotDeletingD3863] cmd /c del "C:\WINDOWS\system32\xxyyxyAr.dll_old"
                    O4 - HKLM\..\Policies\Explorer\Run: [hNkvaz1JWm] C:\Documents and Settings\All Users\Application Data\spatwtip\ebknafir.exe

                    Télécharger SmitfraudFix (de S!ri)
                    http://siri.urz.free.fr/Fix/SmitfraudFix.exe

                    Etape 1 : Recherche

                    • Mettre le fichier SmitfraudFix.exe, téléchargé préalablement, sur le Bureau Windows.
                    • Double click sur SmitfraudFix.exe pour lancer l'outil.
                    • Après l'affichage du menu, taper 1 puis faire Entrée pour rechercher les fichiers responsables de l'infection.
                    Le rapport se trouve à la racine de la partition système (en général il s'agit de C: ) dans le fichier rapport.txt
                    • Copier/Coller le rapport dans le prochain message

                    _
                    Etape 2 : Nettoyage:

                    • Redémarrer l'ordinateur en mode sans échec (au démarrage de l'ordinateur,
                    après le test du matériel par le BIOS, alors que l'écran est noir,
                    tapoter sur la touche de fonction F8 (ou F5 dans certains cas))
                    • Double click sur SmitfraudFix.exe
                    • Sélectionner 2 et presser Entrée dans le menu pour supprimer les fichiers responsables de l'infection.
                    • A la question: Voulez-vous nettoyer le registre ? répondre O (oui) et presser Entrée afin de débloquer
                    le fond d'écran et supprimer les clés de registre de l'infection.
                    • Le correctif déterminera si le fichier wininet.dll est infecté.
                    • A la question: "Corriger le fichier infecté ?" répondre O (oui) et presser Entrée
                    pour remplacer le fichier corrompu.
                    • Un redémarrage sera peut être nécessaire pour terminer la procédure de nettoyage.
                    Le rapport se trouve à la racine de la partition système (en général il s'agit de C: )
                    dans le fichier rapport.txt. Le Copier/Coller dans le prochain message

                    Télécharger VirtumundoBegone sur le bureau:

                    http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe

                    Double cliquer sur VirtumundoBeGone.exe et suivre les instructions.
                    Une fois terminé, redémarrer le PC, le rapport VBG.TXT sera crée sur le bureau .
                    (Si un message Ecran bleu "Erreur fatale" apparaît, pas d’inquiétude car c'est normal et attendu). Comme précédemment, repost un rapport hijackthis,

                2. mikia06
                  oki je fé lé manip
                  1. Utilisateur anonyme
                    pourquoi mikia06 et iceman et deux post pour le même sujet c'est pas bien ne te fais suivre par deux helper en même

                    temps!!!

                    cela n'est pas bon pour la désinfection!!!! donc comme tu veut soit tu reste sur l'autre post ou avec moi mais pas les deux en même temps!!

                    @+
                • 1
                • 2
                • 3