Cafard mangeurs d'ecran

Résolu
bonsoir, j'aurais besoin d'aide pour nettoyer mon ordi j'ai pu remarquer
qu'un rapport hijack serait utile!!
merci par avance!!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:24:55, on 07/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Safe mode

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\Explorer.EXE
E:\Documents and Settings\Manu\Bureau\virus\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - E:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: cpmsky browser optimizer - {d4895055-be7a-e634-d31b-b9c4ccc9777a} - E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [THotkey] E:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [SynTPLpr] E:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] E:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PadTouch] "E:\Program Files\TOSHIBA\PadTouch\PadExe.exe
O4 - HKLM\..\Run: [NeroFilterCheck] E:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
O4 - HKLM\..\Run: [avast!] E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "E:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [LVCOMSX] E:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] E:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] E:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [spa_start] E:\WINDOWS\System32\Rundll32.exe "E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll" DllInit
O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "E:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [{31dec895-8270-d8a1-97c5-47639609fe34}] E:\WINDOWS\System32\Rundll32.exe "E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll" DllInit
O4 - HKCU\..\Run: [TOSCDSPD] E:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [MsnMsgr] "E:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DigiClock] none
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "E:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = E:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - (no file)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: e:\windows\system32\nwprovau.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - E:\Program Files\a-squared Free\a2service.exe
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - E:\WINDOWS\System32\ACS.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - E:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - E:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Autodata Limited License Service - Autodata Limited - E:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - E:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - E:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: CbEvtSvc - Unknown owner - E:\WINDOWS\System32\CbEvtSvc.exe (file missing)
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - E:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - E:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - E:\Program Files\Nero\Nero 7\Nero 7\Nero BackItUp\NBService.exe

--
End of file - 7761 bytes
Configuration: Windows XP
Internet Explorer 7.0

15 réponses

  • Votes
  • Date
  • Date décroissante
  1. Contributeur sécurité
    slt,

    scan avec
    MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport

    https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

    ________________

    smit fraud fix (colle le rapport)

    1/ telecharger :

    http://siri.urz.free.fr/Fix/SmitfraudFix.php

    2/ double clique sur smitfraudfix. puis sélectionne 1 et appuyer sur entrée afin de créer le rapport des infection présentes.
    1. re et merci pour le coup de main voici les rapports

      Malwarebytes' Anti-Malware 1.15
      Version de la base de données: 839

      23:09:09 07/06/2008
      mbam-log-6-7-2008 (23-08-57).txt

      Type de recherche: Examen complet (C:\|E:\|)
      Eléments examinés: 78519
      Temps écoulé: 38 minute(s), 0 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 1
      Clé(s) du Registre infectée(s): 5
      Valeur(s) du Registre infectée(s): 8
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 1
      Fichier(s) infecté(s): 18

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll (Trojan.Agent) -> No action taken.

      Clé(s) du Registre infectée(s):
      HKEY_CLASSES_ROOT\CLSID\{d4895055-be7a-e634-d31b-b9c4ccc9777a} (Trojan.Agent) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d4895055-be7a-e634-d31b-b9c4ccc9777a} (Trojan.Agent) -> No action taken.
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CbEvtSvc (Trojan.Downloader) -> No action taken.
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\grande48 (Rootkit.Srizbi) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple) -> No action taken.

      Valeur(s) du Registre infectée(s):
      HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\General\BackupWallpaper (Trojan.FakeAlert) -> No action taken.
      HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\General\Wallpaper (Trojan.FakeAlert) -> No action taken.
      HKEY_CURRENT_USER\Control Panel\Desktop\Wallpaper (Trojan.FakeAlert) -> No action taken.
      HKEY_CURRENT_USER\Control Panel\Desktop\OriginalWallpaper (Trojan.FakeAlert) -> No action taken.
      HKEY_CURRENT_USER\Control Panel\Desktop\ConvertedWallpaper (Trojan.FakeAlert) -> No action taken.
      HKEY_CURRENT_USER\Control Panel\Desktop\SCRNSAVE.EXE (Trojan.FakeAlert) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\spa_start (Trojan.Agent) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\{31dec895-8270-d8a1-97c5-47639609fe34} (Trojan.Agent) -> No action taken.

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      E:\Program Files\Temporary (Trojan.Agent) -> No action taken.

      Fichier(s) infecté(s):
      E:\Documents and Settings\LocalService\Application Data\575834442.exe (Trojan.Pakes) -> No action taken.
      E:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\HCPV1ZQ0\1s1[1].exe (Trojan.Pakes) -> No action taken.
      E:\Program Files\WinRAR\Default.SFX (Rogue.Installer) -> No action taken.
      E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP269\A0055401.scr (Trojan.Agent) -> No action taken.
      E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP270\A0055405.scr (Trojan.Agent) -> No action taken.
      E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP272\A0055446.scr (Trojan.Agent) -> No action taken.
      E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP272\A0055627.scr (Trojan.Agent) -> No action taken.
      E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP272\A0055638.scr (Trojan.Agent) -> No action taken.
      E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP272\A0057645.scr (Trojan.Agent) -> No action taken.
      E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP272\A0057662.scr (Trojan.Agent) -> No action taken.
      E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP272\A0057681.scr (Trojan.Agent) -> No action taken.
      E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP272\A0057838.scr (Trojan.Agent) -> No action taken.
      E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP272\A0057855.scr (Trojan.Agent) -> No action taken.
      E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP273\A0057890.exe (Trojan.Agent) -> No action taken.
      E:\WINDOWS\system32\blackster.scr (Trojan.Agent) -> No action taken.
      E:\Program Files\Temporary\Photo0046.jpg (Trojan.Agent) -> No action taken.
      E:\Program Files\Temporary\~ZA_G200.mp3 (Trojan.Agent) -> No action taken.
      E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll (Trojan.Agent) -> No action taken.

      SmitFraudFix v2.323

      Rapport fait à 22:21:40,01, 07/06/2008
      Executé à partir de E:\Documents and Settings\Manu\Bureau\virus\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
      Le type du système de fichiers est NTFS
      Fix executé en mode normal

      »»»»»»»»»»»»»»»»»»»»»»»» Process

      E:\WINDOWS\System32\smss.exe
      E:\WINDOWS\system32\winlogon.exe
      E:\WINDOWS\system32\services.exe
      E:\WINDOWS\system32\lsass.exe
      E:\WINDOWS\System32\Ati2evxx.exe
      E:\WINDOWS\system32\svchost.exe
      E:\WINDOWS\System32\svchost.exe
      E:\WINDOWS\System32\ACS.exe
      E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      E:\Program Files\Alwil Software\Avast4\ashServ.exe
      E:\WINDOWS\system32\spoolsv.exe
      E:\Program Files\a-squared Free\a2service.exe
      E:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      E:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
      E:\Program Files\Bonjour\mDNSResponder.exe
      E:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
      E:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
      E:\WINDOWS\System32\svchost.exe
      E:\WINDOWS\system32\Ati2evxx.exe
      E:\WINDOWS\Explorer.EXE
      E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      E:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
      E:\WINDOWS\AGRSMMSG.exe
      E:\WINDOWS\system32\TPSMain.exe
      E:\Program Files\Synaptics\SynTP\SynTPLpr.exe
      E:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      E:\WINDOWS\system32\WgaTray.exe
      E:\WINDOWS\system32\wuauclt.exe
      E:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
      E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      E:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
      E:\WINDOWS\system32\LVCOMSX.EXE
      E:\Program Files\Logitech\Video\LogiTray.exe
      E:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
      E:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
      E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      E:\WINDOWS\system32\ctfmon.exe
      E:\WINDOWS\system32\TPSBattM.exe
      E:\Program Files\Logitech\Video\FxSvr2.exe
      E:\Program Files\iPod\bin\iPodService.exe
      E:\WINDOWS\system32\cmd.exe

      »»»»»»»»»»»»»»»»»»»»»»»» hosts

      Fichier hosts corrompu !

      127.0.0.1 www.legal-at-spybot.info
      127.0.0.1 legal-at-spybot.info

      »»»»»»»»»»»»»»»»»»»»»»»» E:\

      »»»»»»»»»»»»»»»»»»»»»»»» E:\WINDOWS

      »»»»»»»»»»»»»»»»»»»»»»»» E:\WINDOWS\system

      »»»»»»»»»»»»»»»»»»»»»»»» E:\WINDOWS\Web

      »»»»»»»»»»»»»»»»»»»»»»»» E:\WINDOWS\system32

      »»»»»»»»»»»»»»»»»»»»»»»» E:\WINDOWS\system32\LogFiles

      »»»»»»»»»»»»»»»»»»»»»»»» E:\Documents and Settings\Manu

      »»»»»»»»»»»»»»»»»»»»»»»» E:\Documents and Settings\Manu\Application Data

      »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

      »»»»»»»»»»»»»»»»»»»»»»»» E:\DOCUME~1\Manu\Favoris

      »»»»»»»»»»»»»»»»»»»»»»»» Bureau

      »»»»»»»»»»»»»»»»»»»»»»»» E:\Program Files

      »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

      »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
      "Source"="About:Home"
      "SubscribedURL"="About:Home"
      "FriendlyName"="Ma page d'accueil"

      »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      IEDFix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri

      »»»»»»»»»»»»»»»»»»»»»»»» VACFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      VACFix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri

      »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      404Fix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri

      »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
      "AppInit_DLLs"=""

      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
      "Userinit"="E:\\WINDOWS\\system32\\userinit.exe,"
      "System"=""

      »»»»»»»»»»»»»»»»»»»»»»»» Rustock

      »»»»»»»»»»»»»»»»»»»»»»»» DNS

      Description: Atheros AR5004G Wireless Network Adapter
      DNS Server Search Order: 192.168.1.1

      HKLM\SYSTEM\CCS\Services\Tcpip\..\{BBEE3699-8CD3-4611-9896-3B1BC6476FE0}: DhcpNameServer=192.168.1.1
      HKLM\SYSTEM\CS2\Services\Tcpip\..\{BBEE3699-8CD3-4611-9896-3B1BC6476FE0}: DhcpNameServer=192.168.1.1
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{BBEE3699-8CD3-4611-9896-3B1BC6476FE0}: DhcpNameServer=192.168.1.1
      HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
      HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
      HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1

      »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

      »»»»»»»»»»»»»»»»»»»»»»»» Fin
      1. Contributeur sécurité
        redémarre en mode sans échec (en appuyant sur F8 ou suppr, ou F5 au démarrage en général) puis lance smitfraudfix , sélectionne l'option 2 et appuyer sur entrée pour commencer la désinfection. lorsque le programme demande si tu veut nettoyer le registre mets oui en tapant 0 et entrée

        _________________

        recolle un rapport hijakchits et dis tes soucis
        1. bonjour, et encore merci sinon apres cette operation le fond ecran est toujour bleu mais plus le meme pour l'instant je n'ai pas eu de visite de ces petites bebetes sinon voici le rapport
          SmitFraudFix v2.323

          Rapport fait à 11:30:44,07, 08/06/2008
          Executé à partir de E:\Documents and Settings\Manu\Bureau\virus\SmitfraudFix
          OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
          Le type du système de fichiers est NTFS
          Fix executé en mode sans echec

          »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
          !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

          SrchSTS.exe by S!Ri
          Search SharedTaskScheduler's .dll

          »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

          »»»»»»»»»»»»»»»»»»»»»»»» hosts

          127.0.0.1 localhost
          127.0.0.1 bin.errorprotector.com ## added by CiD
          127.0.0.1 br.errorsafe.com ## added by CiD
          127.0.0.1 br.winantivirus.com ## added by CiD
          127.0.0.1 br.winfixer.com ## added by CiD
          127.0.0.1 cdn.drivecleaner.com ## added by CiD
          127.0.0.1 cdn.errorsafe.com ## added by CiD
          127.0.0.1 cdn.winsoftware.com ## added by CiD
          127.0.0.1 de.errorsafe.com ## added by CiD
          127.0.0.1 de.winantivirus.com ## added by CiD
          127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
          127.0.0.1 download.cdn.errorsafe.com ## added by CiD
          127.0.0.1 download.cdn.winsoftware.com ## added by CiD
          127.0.0.1 download.errorsafe.com ## added by CiD
          127.0.0.1 download.systemdoctor.com ## added by CiD
          127.0.0.1 download.winantispyware.com ## added by CiD
          127.0.0.1 download.windrivecleaner.com ## added by CiD
          127.0.0.1 download.winfixer.com ## added by CiD
          127.0.0.1 drivecleaner.com ## added by CiD
          127.0.0.1 dynamique.drivecleaner.com ## added by CiD
          127.0.0.1 errorprotector.com ## added by CiD
          127.0.0.1 errorsafe.com ## added by CiD
          127.0.0.1 es.winantivirus.com ## added by CiD
          127.0.0.1 fr.winantivirus.com ## added by CiD
          127.0.0.1 fr.winfixer.com ## added by CiD
          127.0.0.1 go.drivecleaner.com ## added by CiD
          127.0.0.1 go.errorsafe.com ## added by CiD
          127.0.0.1 go.winantispyware.com ## added by CiD
          127.0.0.1 go.winantivirus.com ## added by CiD
          127.0.0.1 hk.winantivirus.com ## added by CiD
          127.0.0.1 instlog.errorsafe.com ## added by CiD
          127.0.0.1 instlog.winantivirus.com ## added by CiD
          127.0.0.1 instlog.winfixer.com ## added by CiD
          127.0.0.1 jsp.drivecleaner.com ## added by CiD
          127.0.0.1 kb.errorsafe.com ## added by CiD
          127.0.0.1 kb.winantivirus.com ## added by CiD
          127.0.0.1 nl.errorsafe.com ## added by CiD
          127.0.0.1 se.errorsafe.com ## added by CiD
          127.0.0.1 secure.drivecleaner.com ## added by CiD
          127.0.0.1 secure.errorsafe.com ## added by CiD
          127.0.0.1 secure.winantispam.com ## added by CiD
          127.0.0.1 secure.winantispy.com ## added by CiD
          127.0.0.1 secure.winantivirus.com ## added by CiD
          127.0.0.1 support.winantivirus.com ## added by CiD
          127.0.0.1 trial.updates.winsoftware.com ## added by CiD
          127.0.0.1 ulog.winantivirus.com ## added by CiD
          127.0.0.1 utils.errorsafe.com ## added by CiD
          127.0.0.1 utils.winantivirus.com ## added by CiD
          127.0.0.1 utils.winfixer.com ## added by CiD
          127.0.0.1 winantispyware.com ## added by CiD
          127.0.0.1 winantivirus.com ## added by CiD
          127.0.0.1 winfixer.com ## added by CiD
          127.0.0.1 winfixer2006.com ## added by CiD
          127.0.0.1 winsoftware.com ## added by CiD
          127.0.0.1 www.drivecleaner.com ## added by CiD
          127.0.0.1 www.errorprotector.com ## added by CiD
          127.0.0.1 www.errorsafe.com ## added by CiD
          127.0.0.1 www.systemdoctor.com ## added by CiD
          127.0.0.1 www.utils.winfixer.com ## added by CiD
          127.0.0.1 www.win-anti-virus-pro.com ## added by CiD
          127.0.0.1 www.win-virus-pro.com ## added by CiD
          127.0.0.1 www.winantispam.com ## added by CiD
          127.0.0.1 www.winantispy.com ## added by CiD
          127.0.0.1 www.winantispyware.com ## added by CiD
          127.0.0.1 www.winantivirus.com ## added by CiD
          127.0.0.1 www.winantiviruspro.com ## added by CiD
          127.0.0.1 www.windrivecleaner.com ## added by CiD
          127.0.0.1 www.windrivesafe.com ## added by CiD
          127.0.0.1 www.winfixer.com ## added by CiD
          127.0.0.1 www.winfixer2006.com ## added by CiD
          127.0.0.1 www.winsoftware.com ## added by CiD
          127.0.0.1 www.007guard.com
          127.0.0.1 007guard.com
          127.0.0.1 008i.com
          127.0.0.1 www.008k.com
          127.0.0.1 008k.com
          127.0.0.1 www.00hq.com
          127.0.0.1 00hq.com
          127.0.0.1 010402.com
          127.0.0.1 www.032439.com
          127.0.0.1 032439.com
          127.0.0.1 www.1001-search.info
          127.0.0.1 1001-search.info
          127.0.0.1 www.100888290cs.com
          127.0.0.1 100888290cs.com
          127.0.0.1 www.100sexlinks.com
          127.0.0.1 100sexlinks.com
          127.0.0.1 www.10sek.com
          127.0.0.1 10sek.com
          127.0.0.1 www.123topsearch.com
          127.0.0.1 123topsearch.com
          127.0.0.1 www.132.com
          127.0.0.1 132.com
          127.0.0.1 www.136136.net
          127.0.0.1 136136.net
          127.0.0.1 www.139mm.com
          127.0.0.1 139mm.com
          127.0.0.1 www.163ns.com
          127.0.0.1 163ns.com
          127.0.0.1 171203.com
          127.0.0.1 17-plus.com
          127.0.0.1 www.1800searchonline.com
          127.0.0.1 1800searchonline.com
          127.0.0.1 www.180searchassistant.com
          127.0.0.1 180searchassistant.com
          127.0.0.1 www.180solutions.com
          127.0.0.1 180solutions.com
          127.0.0.1 www.181.365soft.info
          127.0.0.1 181.365soft.info
          127.0.0.1 www.1987324.com
          127.0.0.1 1987324.com
          127.0.0.1 www.1-domains-registrations.com
          127.0.0.1 1-domains-registrations.com
          127.0.0.1 www.1-extreme.biz
          127.0.0.1 1-extreme.biz
          127.0.0.1 www.1sexparty.com
          127.0.0.1 1sexparty.com
          127.0.0.1 www.1stantivirus.com
          127.0.0.1 1stantivirus.com
          127.0.0.1 www.1stpagehere.com
          127.0.0.1 1stpagehere.com
          127.0.0.1 www.1stsearchportal.com
          127.0.0.1 1stsearchportal.com
          127.0.0.1 2.82211.net
          127.0.0.1 www.2006ooo.com
          127.0.0.1 www.2007-download.com
          127.0.0.1 2007-download.com
          127.0.0.1 www.2020search.com
          127.0.0.1 2020search.com
          127.0.0.1 20x2p.com
          127.0.0.1 www.24.365soft.info
          127.0.0.1 24.365soft.info
          127.0.0.1 www.24-7pharmacy.info
          127.0.0.1 24-7pharmacy.info
          127.0.0.1 www.24-7searching-and-more.com
          127.0.0.1 24-7searching-and-more.com
          127.0.0.1 www.24teen.com
          127.0.0.1 24teen.com
          127.0.0.1 www.2every.net
          127.0.0.1 2every.net
          127.0.0.1 2ndpower.com
          127.0.0.1 www.2search.com
          127.0.0.1 2search.com
          127.0.0.1 www.2search.org
          127.0.0.1 2search.org
          127.0.0.1 www.2squared.com
          127.0.0.1 2squared.com
          127.0.0.1 www.3322.org
          127.0.0.1 3322.org
          127.0.0.1 365soft.info
          127.0.0.1 www.36site.com
          127.0.0.1 36site.com
          127.0.0.1 3721.com
          127.0.0.1 39-93.com
          127.0.0.1 www.3abetterinternet.com
          127.0.0.1 3abetterinternet.com
          127.0.0.1 www.3bay.it
          127.0.0.1 3bay.it
          127.0.0.1 www.3ebay.it
          127.0.0.1 3ebay.it
          127.0.0.1 www.3xclipsonline.com
          127.0.0.1 3xclipsonline.com
          127.0.0.1 www.3xcurves.com
          127.0.0.1 3xcurves.com
          127.0.0.1 www.3xfestival.com
          127.0.0.1 3xfestival.com
          127.0.0.1 www.3x-festival.com
          127.0.0.1 3x-festival.com
          127.0.0.1 www.3x-galls.com
          127.0.0.1 3x-galls.com
          127.0.0.1 www.3xmiracle.com
          127.0.0.1 3xmiracle.com
          127.0.0.1 www.3xmoviesblog.com
          127.0.0.1 3xmoviesblog.com
          127.0.0.1 www.404dns.com
          127.0.0.1 404dns.com
          127.0.0.1 www.4199.com
          127.0.0.1 4199.com
          127.0.0.1 www.4corn.net
          127.0.0.1 4corn.net
          127.0.0.1 www.4ebay.it
          127.0.0.1 4ebay.it
          127.0.0.1 4klm.com
          127.0.0.1 www.4mpg.com
          127.0.0.1 4mpg.com
          127.0.0.1 www.4repubblica.it
          127.0.0.1 4repubblica.it
          127.0.0.1 www.4softget.com
          127.0.0.1 4softget.com
          127.0.0.1 www.5iscali.it
          127.0.0.1 5iscali.it
          127.0.0.1 www.5repubblica.it
          127.0.0.1 5repubblica.it
          127.0.0.1 www.5starvideos.com
          127.0.0.1 5starvideos.com
          127.0.0.1 www.5tiscali.it
          127.0.0.1 5tiscali.it
          127.0.0.1 www.5zgmu7o20kt5d8yq.com
          127.0.0.1 5zgmu7o20kt5d8yq.com
          127.0.0.1 www.680180.net
          127.0.0.1 680180.net
          127.0.0.1 www.6iscali.it
          127.0.0.1 6iscali.it
          127.0.0.1 www.6njaga.com
          127.0.0.1 6njaga.com
          127.0.0.1 www.6sek.com
          127.0.0.1 6sek.com
          127.0.0.1 www.6tiscali.it
          127.0.0.1 6tiscali.it
          127.0.0.1 www.70-music.com
          127.0.0.1 70-music.com
          127.0.0.1 www.7322.com
          127.0.0.1 7322.com
          127.0.0.1 75tz.com
          127.0.0.1 www.777search.com
          127.0.0.1 777search.com
          127.0.0.1 www.777top.com
          127.0.0.1 777top.com
          127.0.0.1 www.7939.com
          127.0.0.1 7939.com
          127.0.0.1 www.7search.com
          127.0.0.1 7search.com
          127.0.0.1 80gw6ry3i3x3qbrkwhxhw.032439.com
          127.0.0.1 www.80-music.com
          127.0.0.1 80-music.com
          127.0.0.1 82211.net
          127.0.0.1 8866.org
          127.0.0.1 www.888.com
          127.0.0.1 888.com
          127.0.0.1 www.88vcd.com
          127.0.0.1 88vcd.com
          127.0.0.1 www.8ad.com
          127.0.0.1 8ad.com
          127.0.0.1 www.90-music.com
          127.0.0.1 90-music.com
          127.0.0.1 www.9505.com
          127.0.0.1 9505.com
          127.0.0.1 www.971searchbox.com
          127.0.0.1 971searchbox.com
          127.0.0.1 9mmporn.com
          127.0.0.1 a.bestmanage.org
          127.0.0.1 www.aaabesthomepage.com
          127.0.0.1 aaabesthomepage.com
          127.0.0.1 aaasexypics.com
          127.0.0.1 www.aaawebfinder.com
          127.0.0.1 aaawebfinder.com
          127.0.0.1 www.aaqadarsztriv.com
          127.0.0.1 aaqadarsztriv.com
          127.0.0.1 www.aaqada-rsztriv.com
          127.0.0.1 aaqada-rsztriv.com
          127.0.0.1 www.aaqadaueorn.com
          127.0.0.1 aaqadaueorn.com
          127.0.0.1 www.aaqada-ueorn.com
          127.0.0.1 aaqada-ueorn.com
          127.0.0.1 www.aaqada-ygco.com
          127.0.0.1 aaqada-ygco.com
          127.0.0.1 www.aaqada-ymct.com
          127.0.0.1 aaqada-ymct.com
          127.0.0.1 aavc.com
          127.0.0.1 www.abccodec.com
          127.0.0.1 abccodec.com
          127.0.0.1 www.abcdperformance.com
          127.0.0.1 abcdperformance.com
          127.0.0.1 www.abc-find.info
          127.0.0.1 abc-find.info
          127.0.0.1 www.abcsearch.com
          127.0.0.1 abcsearch.com
          127.0.0.1 www.abetterinternet.com
          127.0.0.1 abetterinternet.com
          127.0.0.1 www.abnetsoft.info
          127.0.0.1 abnetsoft.info
          127.0.0.1 www.aboutclicker.com
          127.0.0.1 aboutclicker.com
          127.0.0.1 www.abrp.net
          127.0.0.1 abrp.net
          127.0.0.1 www.absolutee.com
          127.0.0.1 absolutee.com
          127.0.0.1 www.abyssmedia.com
          127.0.0.1 abyssmedia.com
          127.0.0.1 www.ac66.cn
          127.0.0.1 ac66.cn
          127.0.0.1 access.navinetwork.com
          127.0.0.1 access.rapid-pass.net
          127.0.0.1 www.accessactivexvideo.com
          127.0.0.1 accessactivexvideo.com
          127.0.0.1 www.accessclips.com
          127.0.0.1 accessclips.com
          127.0.0.1 www.access-dvd.com
          127.0.0.1 access-dvd.com
          127.0.0.1 www.accesskeygenerator.com
          127.0.0.1 accesskeygenerator.com
          127.0.0.1 www.accessthefuture.net
          127.0.0.1 accessthefuture.net
          127.0.0.1 www.accessvid.net
          127.0.0.1 accessvid.net
          127.0.0.1 www.acemedic.com
          127.0.0.1 acemedic.com
          127.0.0.1 www.ace-webmaster.com
          127.0.0.1 ace-webmaster.com
          127.0.0.1 acjp.com
          127.0.0.1 www.acrobat-2007.com
          127.0.0.1 acrobat-2007.com
          127.0.0.1 www.acrobat-8.com
          127.0.0.1 acrobat-8.com
          127.0.0.1 www.acrobat-center.com
          127.0.0.1 acrobat-center.com
          127.0.0.1 www.acrobat-hq.com
          127.0.0.1 acrobat-hq.com
          127.0.0.1 www.acrobatreader-8.com
          127.0.0.1 acrobatreader-8.com
          127.0.0.1 www.acrobat-reader-8.de
          127.0.0.1 acrobat-reader-8.de
          127.0.0.1 www.acrobat-stop.com
          127.0.0.1 acrobat-stop.com
          127.0.0.1 www.actionbreastcancer.org
          127.0.0.1 actionbreastcancer.org
          127.0.0.1 www.activesearcher.info
          127.0.0.1 activesearcher.info
          127.0.0.1 www.activexaccessobject.com
          127.0.0.1 activexaccessobject.com
          127.0.0.1 www.activexaccessvideo.com
          127.0.0.1 activexaccessvideo.com
          127.0.0.1 www.activexemedia.com
          127.0.0.1 activexemedia.com
          127.0.0.1 www.activexmediaobject.com
          127.0.0.1 activexmediaobject.com
          127.0.0.1 www.activexmediapro.com
          127.0.0.1 activexmediapro.com
          127.0.0.1 www.activexmediasite.com
          127.0.0.1 activexmediasite.com
          127.0.0.1 www.activexmediasoftware.com
          127.0.0.1 activexmediasoftware.com
          127.0.0.1 www.activexmediasource.com
          127.0.0.1 activexmediasource.com
          127.0.0.1 www.activexmediatool.com
          127.0.0.1 activexmediatool.com
          127.0.0.1 www.activexmediatour.com
          127.0.0.1 activexmediatour.com
          127.0.0.1 www.activexsoftwares.com
          127.0.0.1 activexsoftwares.com
          127.0.0.1 www.activexsource.com
          127.0.0.1 activexsource.com
          127.0.0.1 www.activexupdate.com
          127.0.0.1 activexupdate.com
          127.0.0.1 www.activexvideo.com
          127.0.0.1 activexvideo.com
          127.0.0.1 www.activexvideotool.com
          127.0.0.1 activexvideotool.com
          127.0.0.1 www.ad.marketingsector.com
          127.0.0.1 ad.marketingsector.com
          127.0.0.1 www.ad.mokead.com
          127.0.0.1 ad.mokead.com
          127.0.0.1 ad.oinadserver.com
          127.0.0.1 ad.outerinfoads.com
          127.0.0.1 www.ad25.com
          127.0.0.1 ad25.com
          127.0.0.1 www.ad45.com
          127.0.0.1 ad45.com
          127.0.0.1 www.ad77.com
          127.0.0.1 ad77.com
          127.0.0.1 www.ad86.com
          127.0.0.1 ad86.com
          127.0.0.1 www.adamsupportgroup.org
          127.0.0.1 adamsupportgroup.org
          127.0.0.1 www.adarmor.com
          127.0.0.1 adarmor.com
          127.0.0.1 www.adasearch.com
          127.0.0.1 adasearch.com
          127.0.0.1 adaware.cc
          127.0.0.1 www.adawarenow.com
          127.0.0.1 adawarenow.com
          127.0.0.1 adchannel.contextplus.net
          127.0.0.1 www.addetect.com
          127.0.0.1 addetect.com
          127.0.0.1 www.add-hhh.info
          127.0.0.1 add-hhh.info
          127.0.0.1 www.addictivetechnologies.com
          127.0.0.1 addictivetechnologies.com
          127.0.0.1 www.addictivetechnologies.net
          127.0.0.1 addictivetechnologies.net
          127.0.0.1 www.addioerrori.com
          127.0.0.1 addioerrori.com
          127.0.0.1 www.add-manager.com
          127.0.0.1 add-manager.com
          127.0.0.1 www.adgate.info
          127.0.0.1 adgate.info
          127.0.0.1 www.adintelligence.net
          127.0.0.1 adintelligence.net
          127.0.0.1 www.adioserrores.com
          127.0.0.1 adioserrores.com
          127.0.0.1 www.adipics.com
          127.0.0.1 adipics.com
          127.0.0.1 www.adlogix.com
          127.0.0.1 adlogix.com
          127.0.0.1 www.admin2cash.biz
          127.0.0.1 admin2cash.biz
          127.0.0.1 adnet-plus.com
          127.0.0.1 www.adnetserver.com
          127.0.0.1 adnetserver.com
          127.0.0.1 adobe-download-now.com
          127.0.0.1 www.adobe-downloads.com
          127.0.0.1 adobe-downloads.com
          127.0.0.1 www.adobe-reader-8.fr
          127.0.0.1 adobe-reader-8.fr
          127.0.0.1 www.adprotect.com
          127.0.0.1 adprotect.com
          127.0.0.1 ads.centralmedia.ws
          127.0.0.1 ads.k8l.info
          127.0.0.1 ads.kmpads.com
          127.0.0.1 ads.kw.revenue.net
          127.0.0.1 ads.marketingsector.com
          127.0.0.1 ads.searchingbooth.com
          127.0.0.1 ads.z-quest.com
          127.0.0.1 ads1.revenue.net
          127.0.0.1 www.ads183.com
          127.0.0.1 ads183.com
          127.0.0.1 www.adscontex.com
          127.0.0.1 adscontex.com
          127.0.0.1 www.adservices1.enhance.com
          127.0.0.1 adservices1.enhance.com
          127.0.0.1 adservs.com
          127.0.0.1 www.adsextend.net
          127.0.0.1 adsextend.net
          127.0.0.1 www.adshttp.com
          127.0.0.1 adshttp.com
          127.0.0.1 www.adsniffer.com
          127.0.0.1 adsniffer.com
          127.0.0.1 www.adsonwww.com
          127.0.0.1 adsonwww.com
          127.0.0.1 www.adspics.com
          127.0.0.1 adspics.com
          127.0.0.1 www.adsrevenue.net
          127.0.0.1 adsrevenue.net
          127.0.0.1 www.adtrak.net
          127.0.0.1 adtrak.net
          127.0.0.1 adtrgt.com
          127.0.0.1 www.adult18codec.com
          127.0.0.1 adult18codec.com
          127.0.0.1 www.adult777search.info
          127.0.0.1 adult777search.info
          127.0.0.1 www.adultan.com
          127.0.0.1 adultan.com
          127.0.0.1 www.adultcodec-2008.com
          127.0.0.1 adultcodec-2008.com
          127.0.0.1 www.adultcodecstars.com
          127.0.0.1 adultcodecstars.com
          127.0.0.1 www.adult-engine-search.com
          127.0.0.1 adult-engine-search.com
          127.0.0.1 www.adult-erotic-guide.net
          127.0.0.1 adult-erotic-guide.net
          127.0.0.1 www.adultfilmsite.com
          127.0.0.1 adultfilmsite.com
          127.0.0.1 www.adult-friends-finder.net
          127.0.0.1 adult-friends-finder.net
          127.0.0.1 adultgambling.org
          127.0.0.1 adult-host.org
          127.0.0.1 www.adulthyperlinks.com
          127.0.0.1 adulthyperlinks.com
          127.0.0.1 www.adultmovieplus.com
          127.0.0.1 adultmovieplus.com
          127.0.0.1 www.adult-mpg.net
          127.0.0.1 adult-mpg.net
          127.0.0.1 adult-personal.us
          127.0.0.1 adultsgames.net
          127.0.0.1 www.adultsonlyvids.com
          127.0.0.1 adultsonlyvids.com
          127.0.0.1 www.adultsper.com
          127.0.0.1 adultsper.com
          127.0.0.1 www.adulttds.com
          127.0.0.1 adulttds.com
          127.0.0.1 www.adultzoneworld.com
          127.0.0.1 adultzoneworld.com
          127.0.0.1 www.advancedcleaner.com
          127.0.0.1 advancedcleaner.com
          127.0.0.1 www.advcash.biz
          127.0.0.1 advcash.biz
          127.0.0.1 advert.exaccess.ru
          127.0.0.1 www.advertisemoney.info
          127.0.0.1 advertisemoney.info
          127.0.0.1 advertising.paltalk.com
          127.0.0.1 www.advertising-money.info
          127.0.0.1 advertising-money.info
          127.0.0.1 ad-ware.cc
          127.0.0.1 www.ad-w-a-r-e.com
          127.0.0.1 ad-w-a-r-e.com
          127.0.0.1 www.a-d-w-a-r-e.com
          127.0.0.1 a-d-w-a-r-e.com
          127.0.0.1 www.adware.pro
          127.0.0.1 adware.pro
          127.0.0.1 www.adwarealert.com
          127.0.0.1 adwarealert.com
          127.0.0.1 www.ad-warealert.com
          127.0.0.1 ad-warealert.com
          127.0.0.1 www.adwarearrest.com
          127.0.0.1 adwarearrest.com
          127.0.0.1 www.adwarebazooka.com
          127.0.0.1 adwarebazooka.com
          127.0.0.1 www.adwarecommander.com
          127.0.0.1 adwarecommander.com
          127.0.0.1 www.adwarefinder.com
          127.0.0.1 adwarefinder.com
          127.0.0.1 www.adwaregold.com
          127.0.0.1 adwaregold.com
          127.0.0.1 www.adwarepatrol.com
          127.0.0.1 adwarepatrol.com
          127.0.0.1 www.adwareplatinum.com
          127.0.0.1 adwareplatinum.com
          127.0.0.1 www.adwareprotectionsite.com
          127.0.0.1 adwareprotectionsite.com
          127.0.0.1 www.adwarepunisher.com
          127.0.0.1 adwarepunisher.com
          127.0.0.1 www.adwareremover.ws
          127.0.0.1 adwareremover.ws
          127.0.0.1 www.adwaresafety.com
          127.0.0.1 adwaresafety.com
          127.0.0.1 www.adwarexp.com
          127.0.0.1 adwarexp.com
          127.0.0.1 affiliate.idownload.com
          127.0.0.1 www.aflgate.com
          127.0.0.1 aflgate.com
          127.0.0.1 africaspromise.org
          127.0.0.1 agava.com
          127.0.0.1 agava.ru
          127.0.0.1 agentstudio.com
          127.0.0.1 www.aginegialle.it
          127.0.0.1 aginegialle.it
          127.0.0.1 www.ahnenforschung.de
          127.0.0.1 ahnenforschung.de
          127.0.0.1 aifind.info
          127.0.0.1 www.aifind.info
          127.0.0.1 www.airtleworld.com
          127.0.0.1 airtleworld.com
          127.0.0.1 www.aitalia.it
          127.0.0.1 aitalia.it
          127.0.0.1 akamai.downloadv3.com
          127.0.0.1 www.aklitalia.it
          127.0.0.1 aklitalia.it
          127.0.0.1 akril.com
          127.0.0.1 alcatel.ws
          127.0.0.1 www.alertspy.com
          127.0.0.1 alertspy.com
          127.0.0.1 www.alfacleaner.com
          127.0.0.1 alfacleaner.com
          127.0.0.1 alfa-search.com
          127.0.0.1 www.alialia.it
          127.0.0.1 alialia.it
          127.0.0.1 www.aliotalia.it
          127.0.0.1 aliotalia.it
          127.0.0.1 www.alirtalia.it
          127.0.0.1 alirtalia.it
          127.0.0.1 www.alitaia.it
          127.0.0.1 alitaia.it
          127.0.0.1 www.alitaklia.it
          127.0.0.1 alitaklia.it
          127.0.0.1 www.alitala.it
          127.0.0.1 alitala.it
          127.0.0.1 www.alitali.it
          127.0.0.1 alitali.it
          127.0.0.1 www.alitaliaq.it
          127.0.0.1 alitaliaq.it
          127.0.0.1 www.alitalias.it
          127.0.0.1 alitalias.it
          127.0.0.1 www.alitaliaz.it
          127.0.0.1 alitaliaz.it
          127.0.0.1 www.alitalioa.it
          127.0.0.1 alitalioa.it
          127.0.0.1 www.alitalisa.it
          127.0.0.1 alitalisa.it
          127.0.0.1 www.alitaliua.it
          127.0.0.1 alitaliua.it
          127.0.0.1 www.alitalkia.it
          127.0.0.1 alitalkia.it
          127.0.0.1 www.alitaloia.it
          127.0.0.1 alitaloia.it
          127.0.0.1 www.alitaluia.it
          127.0.0.1 alitaluia.it
          127.0.0.1 www.alitaslia.it
          127.0.0.1 alitaslia.it
          127.0.0.1 www.alitlia.it
          127.0.0.1 alitlia.it
          127.0.0.1 www.alitralia.it
          127.0.0.1 alitralia.it
          127.0.0.1 www.alitsalia.it
          127.0.0.1 alitsalia.it
          127.0.0.1 www.aliutalia.it
          127.0.0.1 aliutalia.it
          127.0.0.1 www.all1count.net
          127.0.0.1 all1count.net
          127.0.0.1 www.all4internet.com
          127.0.0.1 all4internet.com
          127.0.0.1 allabtcars.com
          127.0.0.1 allabtjeeps.com
          127.0.0.1 www.all-bittorrent.com
          127.0.0.1 all-bittorrent.com
          127.0.0.1 www.allcollisions.com
          127.0.0.1 allcollisions.com
          127.0.0.1 allcybersearch.com
          127.0.0.1 www.allcybersearch.com
          127.0.0.1 www.alldnserrors.com
          127.0.0.1 alldnserrors.com
          127.0.0.1 www.all-downloads-now.com
          127.0.0.1 all-downloads-now.com
          127.0.0.1 www.all-edonkey.com
          127.0.0.1 all-edonkey.com
          127.0.0.1 www.allertaminacce.com
          127.0.0.1 allertaminacce.com
          127.0.0.1 allforadult.com
          127.0.0.1 allhyperlinks.com
          127.0.0.1 www.alliesecurity.com
          127.0.0.1 alliesecurity.com
          127.0.0.1 all-inet.com
          127.0.0.1 allinternetbusiness.com
          127.0.0.1 www.all-limewire.com
          127.0.0.1 all-limewire.com
          127.0.0.1 www.allmegabucks.com
          127.0.0.1 allmegabucks.com
          127.0.0.1 www.allprotections.com
          127.0.0.1 allprotections.com
          127.0.0.1 www.allresultz.net
          127.0.0.1 allresultz.net
          127.0.0.1 www.allsearch.us
          127.0.0.1 allsearch.us
          127.0.0.1 www.allsecuritynotes.com
          127.0.0.1 allsecuritynotes.com
          127.0.0.1 www.allsecuritysite.com
          127.0.0.1 allsecuritysite.com
          127.0.0.1 www.allstarsvideos.net
          127.0.0.1 allstarsvideos.net
          127.0.0.1 www.alltiettantivirus.com
          127.0.0.1 alltiettantivirus.com
          127.0.0.1 www.alltruesoftware.com
          127.0.0.1 alltruesoftware.com
          127.0.0.1 www.allvideoactivex.com
          127.0.0.1 allvideoactivex.com
          127.0.0.1 www.almanah.biz
          127.0.0.1 almanah.biz
          127.0.0.1 almarvideos.com
          127.0.0.1 www.aloitalia.it
          127.0.0.1 aloitalia.it
          127.0.0.1 www.aluitalia.it
          127.0.0.1 aluitalia.it
          127.0.0.1 www.amaena.com
          127.0.0.1 amaena.com
          127.0.0.1 amandamountains.com
          127.0.0.1 www.amateurliveshow.com
          127.0.0.1 amateurliveshow.com
          127.0.0.1 www.amediasoftware.com
          127.0.0.1 amediasoftware.com
          127.0.0.1 www.amediasource.com
          127.0.0.1 amediasource.com
          127.0.0.1 www.americanautobargains.com
          127.0.0.1 americanautobargains.com
          127.0.0.1 www.americancarbargains.com
          127.0.0.1 americancarbargains.com
          127.0.0.1 american-teens.net
          127.0.0.1 amigeek.com
          127.0.0.1 www.amigobore.com
          127.0.0.1 amigobore.com
          127.0.0.1 amisbusiness.com
          127.0.0.1 www.ampmsearch.com
          127.0.0.1 ampmsearch.com
          127.0.0.1 www.analcord.com
          127.0.0.1 analcord.com
          127.0.0.1 analmovi.com
          127.0.0.1 www.anarchylolita.com
          127.0.0.1 anarchylolita.com
          127.0.0.1 anarchyporn.com
          127.0.0.1 www.andromedical.com
          127.0.0.1 andromedical.com
          127.0.0.1 www.animepornmag.com
          127.0.0.1 animepornmag.com
          127.0.0.1 anin.org
          127.0.0.1 www.anjpn-avxiz.biz
          127.0.0.1 anjpn-avxiz.biz
          127.0.0.1 www.anjpnzqav.biz
          127.0.0.1 anjpnzqav.biz
          127.0.0.1 www.anjpn-zqav.biz
          127.0.0.1 anjpn-zqav.biz
          127.0.0.1 annaromeo.com
          127.0.0.1 www.antiddos.us
          127.0.0.1 antiddos.us
          127.0.0.1 www.antiespiadorado.com
          127.0.0.1 antiespiadorado.com
          127.0.0.1 www.antiespionspack.com
          127.0.0.1 antiespionspack.com
          127.0.0.1 www.antigusanos2008.com
          127.0.0.1 antigusanos2008.com
          127.0.0.1 www.antispamassistant.com
          127.0.0.1 antispamassistant.com
          127.0.0.1 www.antispamdeluxe.com
          127.0.0.1 antispamdeluxe.com
          127.0.0.1 www.antispionage.com
          127.0.0.1 antispionage.com
          127.0.0.1 www.antispionagepro.com
          127.0.0.1 antispionagepro.com
          127.0.0.1 www.antispyadvanced.com
          127.0.0.1 antispyadvanced.com
          127.0.0.1 www.antispydns.biz
          127.0.0.1 antispydns.biz
          127.0.0.1 www.antispykit.com
          127.0.0.1 antispykit.com
          127.0.0.1 www.antispylab.com
          127.0.0.1 antispylab.com
          127.0.0.1 www.antispyshield.com
          127.0.0.1 antispyshield.com
          127.0.0.1 www.antispysolutions.com
          127.0.0.1 antispysolutions.com
          127.0.0.1 www.antispyware.com
          127.0.0.1 antispyware.com
          127.0.0.1 www.antispywareboot.com
          127.0.0.1 antispywareboot.com
          127.0.0.1 www.antispywarebot.com
          127.0.0.1 antispywarebot.com
          127.0.0.1 www.antispywarebox.com
          127.0.0.1 antispywarebox.com
          127.0.0.1 www.antispywaredownloads.com
          127.0.0.1 antispywaredownloads.com
          127.0.0.1 www.antispywaresuite.com
          127.0.0.1 antispywaresuite.com
          127.0.0.1 www.antispywareupdates.net
          127.0.0.1 antispywareupdates.net
          127.0.0.1 www.antispywarexp.com
          127.0.0.1 antispywarexp.com
          127.0.0.1 www.antispyweb.net
          127.0.0.1 antispyweb.net
          127.0.0.1 www.antiver2008.com
          127.0.0.1 antiver2008.com
          127.0.0.1 www.antivermins.com
          127.0.0.1 antivermins.com
          127.0.0.1 www.anti-vermins.com
          127.0.0.1 anti-vermins.com
          127.0.0.1 www.antivir2007.com
          127.0.0.1 antivir2007.com
          127.0.0.1 www.antivirgear.com
          127.0.0.1 antivirgear.com
          127.0.0.1 www.antivirus.fastfreedownload.com
          127.0.0.1 antivirus.fastfreedownload.com
          127.0.0.1 www.antivirus2008x.com
          127.0.0.1 antivirus2008x.com
          127.0.0.1 www.antivirusadvance.com
          127.0.0.1 antivirusadvance.com
          127.0.0.1 www.antivirusaskeladd.com
          127.0.0.1 antivirusaskeladd.com
          127.0.0.1 www.antivirusgereedschap.com
          127.0.0.1 antivirusgereedschap.com
          127.0.0.1 www.antivirusgolden.com
          127.0.0.1 antivirusgolden.com
          127.0.0.1 www.antivirus-hq.net
          127.0.0.1 antivirus-hq.net
          127.0.0.1 www.antiviruspcsuite.com
          127.0.0.1 antiviruspcsuite.com
          127.0.0.1 www.antiviruspremium.com
          127.0.0.1 antiviruspremium.com
          127.0.0.1 www.anti-virus-pro.com
          127.0.0.1 anti-virus-pro.com
          127.0.0.1 www.antivirusprotector.com
          127.0.0.1 antivirusprotector.com
          127.0.0.1 www.antivirus-scanner.com
          127.0.0.1 antivirus-scanner.com
          127.0.0.1 www.antivirusscherm.com
          127.0.0.1 antivirusscherm.com
          127.0.0.1 www.antivirussecuritypro.com
          127.0.0.1 antivirussecuritypro.com
          127.0.0.1 www.antivirus-stop.com
          127.0.0.1 antivirus-stop.com
          127.0.0.1 www.antivirussuite.com
          127.0.0.1 antivirussuite.com
          127.0.0.1 www.antiworm2008.com
          127.0.0.1 antiworm2008.com
          127.0.0.1 www.antiwurm2008.com
          127.0.0.1 antiwurm2008.com
          127.0.0.1 antrocity.com
          127.0.0.1 www.anyofus.com
          127.0.0.1 anyofus.com
          127.0.0.1 www.anysn.seproger.com
          127.0.0.1 anysn.seproger.com
          127.0.0.1 anything4health.com
          127.0.0.1 www.apicpreview.com
          127.0.0.1 apicpreview.com
          127.0.0.1 www.appealcircuit.com
          127.0.0.1 appealcircuit.com
          127.0.0.1 www.approvedlinks.com
          127.0.0.1 approvedlinks.com
          127.0.0.1 apps.deskwizz.com
          127.0.0.1 apps.webservicehost.com
          127.0.0.1 www.aprotectedpage.com
          127.0.0.1 aprotectedpage.com
          127.0.0.1 apsua.com
          127.0.0.1 www.archivioadulti.com
          127.0.0.1 archivioadulti.com
          127.0.0.1 www.archiviosex.net
          127.0.0.1 archiviosex.net
          127.0.0.1 aregay.com
          127.0.0.1 www.ares.click-new-download.com
          127.0.0.1 ares.click-new-download.com
          127.0.0.1 www.ares-freebie.com
          127.0.0.1 ares-freebie.com
          127.0.0.1 www.arespro2007.com
          127.0.0.1 arespro2007.com
          127.0.0.1 www.aresultra.com
          127.0.0.1 aresultra.com
          127.0.0.1 www.ares-usa.com
          127.0.0.1 ares-usa.com
          127.0.0.1 arheo.com
          127.0.0.1 arizonaweb.org
          127.0.0.1 armitageinn.com
          127.0.0.1 www.arquivojpgs.smtp.ru
          127.0.0.1 arquivojpgs.smtp.ru
          127.0.0.1 artachnid.com
          127.0.0.1 art-func.com
          127.0.0.1 art-xxx.com
          127.0.0.1 www.asafebrowser.com
          127.0.0.1 asafebrowser.com
          127.0.0.1 www.asafetyalways.com
          127.0.0.1 asafetyalways.com
          127.0.0.1 www.asafetynotice.com
          127.0.0.1 asafetynotice.com
          127.0.0.1 www.asafetypage.com
          127.0.0.1 asafetypage.com
          127.0.0.1 www.asdbiz.biz
          127.0.0.1 asdbiz.biz
          127.0.0.1 www.asdeykuddq.com
          127.0.0.1 asdeykuddq.com
          127.0.0.1 www.asecurebar.com
          127.0.0.1 asecurebar.com
          127.0.0.1 www.asecureboard.com
          127.0.0.1 asecureboard.com
          127.0.0.1 www.asecurevalue.com
          127.0.0.1 asecurevalue.com
          127.0.0.1 www.asecurityissue.com
          127.0.0.1 asecurityissue.com
          127.0.0.1 www.asecuritynotice.com
          127.0.0.1 asecuritynotice.com
          127.0.0.1 www.asecuritypaper.com
          127.0.0.1 asecuritypaper.com
          127.0.0.1 www.asecuritystuff.com
          127.0.0.1 asecuritystuff.com
          127.0.0.1 www.asfadaptation.com
          127.0.0.1 asfadaptation.com
          127.0.0.1 asiankingkong.com
          127.0.0.1 www.asianpornmag.com
          127.0.0.1 asianpornmag.com
          127.0.0.1 www.asiantoolbar.com
          127.0.0.1 asiantoolbar.com
          127.0.0.1 www.asidseiupc.com
          127.0.0.1 asidseiupc.com
          127.0.0.1 www.aslitalia.it
          127.0.0.1 aslitalia.it
          127.0.0.1 ass-gals.com
          127.0.0.1 www.assureprotection.com
          127.0.0.1 assureprotection.com
          127.0.0.1 asta-killer.com
          127.0.0.1 www.astrologie-server.com
          127.0.0.1 astrologie-server.com
          127.0.0.1 www.asupereva.it
          127.0.0.1 asupereva.it
          127.0.0.1 www.ataprogram.com
          127.0.0.1 ataprogram.com
          127.0.0.1 athenrye.com
          127.0.0.1 www.atotalsafety.com
          127.0.0.1 atotalsafety.com
          127.0.0.1 www.atrueprotection.com
          127.0.0.1 atrueprotection.com
          127.0.0.1 www.atruesecurity.com
          127.0.0.1 atruesecurity.com
          127.0.0.1 www.attackware.com
          127.0.0.1 attackware.com
          127.0.0.1 www.attrezzi.biz
          127.0.0.1 attrezzi.biz
          127.0.0.1 www.aucunsvirus.com
          127.0.0.1 aucunsvirus.com
          127.0.0.1 www.aulde.net
          127.0.0.1 aulde.net
          127.0.0.1 www.aupereva.it
          127.0.0.1 aupereva.it
          127.0.0.1 www.autobargains.org
          127.0.0.1 autobargains.org
          127.0.0.1 www.autobargainsnetwork.com
          127.0.0.1 autobargainsnetwork.com
          127.0.0.1 www.autocontext.begun.ru
          127.0.0.1 autocontext.begun.ru
          127.0.0.1 autoescrowpay.com
          127.0.0.1 www.avadvance.com
          127.0.0.1 avadvance.com
          127.0.0.1 www.avast.free-software-center.com
          127.0.0.1 avast.free-software-center.com
          127.0.0.1 www.avast-2007.com
          127.0.0.1 avast-2007.com
          127.0.0.1 www.avast-downloads.com
          127.0.0.1 avast-downloads.com
          127.0.0.1 www.avast-hq.com
          127.0.0.1 avast-hq.com
          127.0.0.1 www.avforce.com
          127.0.0.1 avforce.com
          127.0.0.1 www.avg.grab-it-today.net
          127.0.0.1 avg.grab-it-today.net
          127.0.0.1 www.avg.softwarecenterz.com
          127.0.0.1 avg.softwarecenterz.com
          127.0.0.1 www.avg-secure.com
          127.0.0.1 avg-secure.com
          127.0.0.1 www.aviadaptation.com
          127.0.0.1 aviadaptation.com
          127.0.0.1 avian-ads.com
          127.0.0.1 www.avicoupler.com
          127.0.0.1 avicoupler.com
          127.0.0.1 www.avideoaxaccess.com
          127.0.0.1 avideoaxaccess.com
          127.0.0.1 www.avideosurfer.com
          127.0.0.1 avideosurfer.com
          127.0.0.1 www.avidirection.com
          127.0.0.1 avidirection.com
          127.0.0.1 www.aviewersoft.com
          127.0.0.1 aviewersoft.com
          127.0.0.1 www.avihelper.com
          127.0.0.1 avihelper.com
          127.0.0.1 www.avitool.com
          127.0.0.1 avitool.com
          127.0.0.1 www.avpcheckupdate.com
          127.0.0.1 avpcheckupdate.com
          127.0.0.1 www.avsmanufacture.com
          127.0.0.1 avsmanufacture.com
          127.0.0.1 www.avsystemcare.com
          127.0.0.1 avsystemcare.com
          127.0.0.1 www.avxizaaqada.biz
          127.0.0.1 avxizaaqada.biz
          127.0.0.1 www.avxiz-anjpn.biz
          127.0.0.1 avxiz-anjpn.biz
          127.0.0.1 www.avxizueorn.biz
          127.0.0.1 avxizueorn.biz
          127.0.0.1 www.avxiz-ueorn.biz
          127.0.0.1 avxiz-ueorn.biz
          127.0.0.1 www.avxiz-vtvcp.biz
          127.0.0.1 avxiz-vtvcp.biz
          127.0.0.1 www.avxiz-ygco.biz
          127.0.0.1 avxiz-ygco.biz
          127.0.0.1 www.avxiz-zqav.biz
          127.0.0.1 avxiz-zqav.biz
          127.0.0.1 www.awarenesstech.com
          127.0.0.1 awarenesstech.com
          127.0.0.1 www.awarninglist.com
          127.0.0.1 awarninglist.com
          127.0.0.1 awbeta.net-nucleus.com
          127.0.0.1 www.awesomehomepage.com
          127.0.0.1 awesomehomepage.com
          127.0.0.1 awmcash.biz
          127.0.0.1 awmdabest.com
          127.0.0.1 www.axemediasoftware.com
          127.0.0.1 axemediasoftware.com
          127.0.0.1 www.aximageobject.com
          127.0.0.1 aximageobject.com
          127.0.0.1 www.axmediaproject.com
          127.0.0.1 axmediaproject.com
          127.0.0.1 www.axmediasoftware.com
          127.0.0.1 axmediasoftware.com
          127.0.0.1 www.axmediasolutions.com
          127.0.0.1 axmediasolutions.com
          127.0.0.1 www.axobjectpage.com
          127.0.0.1 axobjectpage.com
          127.0.0.1 www.axobjectsource.com
          127.0.0.1 axobjectsource.com
          127.0.0.1 www.axsoftwaretool.com
          127.0.0.1 axsoftwaretool.com
          127.0.0.1 www.axvideoproject.com
          127.0.0.1 axvideoproject.com
          127.0.0.1 www.axvideosetup.com
          127.0.0.1 axvideosetup.com
          127.0.0.1 ayakawamura.com
          127.0.0.1 ayb.dns-look-up.com
          127.0.0.1 ayb.netbios-wait.com
          127.0.0.1 ayumitaniguchi.com
          127.0.0.1 azebar.com
          127.0.0.1 www.azureusclub.com
          127.0.0.1 azureusclub.com
          127.0.0.1 www.azureus-freebie.com
          127.0.0.1 azureus-freebie.com
          127.0.0.1 www.azzetta.it
          127.0.0.1 azzetta.it
          127.0.0.1 b.casalemedia.com
          127.0.0.1 b122.mcboo.com
          127.0.0.1 www.babe.k-lined.com
          127.0.0.1 babe.k-lined.com
          127.0.0.1 www.babe.the-killer.bz
          127.0.0.1 babe.the-killer.bz
          127.0.0.1 www.babenet.com
          127.0.0.1 babenet.com
          127.0.0.1 www.babespornmag.com
          127.0.0.1 babespornmag.com
          127.0.0.1 www.babeweb.de
          127.0.0.1 babeweb.de
          127.0.0.1 www.baccarat-other.info
          127.0.0.1 baccarat-other.info
          127.0.0.1 www.backstripgirls.com
          127.0.0.1 backstripgirls.com
          127.0.0.1 backup.mabou.org
          127.0.0.1 www.baidu.com
          127.0.0.1 baidu.com
          127.0.0.1 www.balotierra.com
          127.0.0.1 balotierra.com
          127.0.0.1 bannedhost.net
          127.0.0.1 bar.baidu.com
          127.0.0.1 barbudafarms.com
          127.0.0.1 www.bardownload.com
          127.0.0.1 bardownload.com
          127.0.0.1 barnandfence.com
          127.0.0.1 batsearch.com
          127.0.0.1 baygraphicsllc.com
          127.0.0.1 bbbsearch.com
          127.0.0.1 bb-search.com
          127.0.0.1 www.bcnproduction.com
          127.0.0.1 bcnproduction.com
          127.0.0.1 bdsmlibrary.net
          127.0.0.1 www.bdsmpornmag.com
          127.0.0.1 bdsmpornmag.com
          127.0.0.1 www.bearshare.click-new-download.com
          127.0.0.1 bearshare.click-new-download.com
          127.0.0.1 www.bearshare.download-me.info
          127.0.0.1 bearshare.download-me.info
          127.0.0.1 www.bearshare.mp3-muzic.com
          127.0.0.1 bearshare.mp3-muzic.com
          127.0.0.1 www.bearshare-download.org
          127.0.0.1 bearshare-download.org
          127.0.0.1 www.bearshare-downloads.net
          127.0.0.1 bearshare-downloads.net
          127.0.0.1 www.bearsharelive.co.uk
          127.0.0.1 bearsharelive.co.uk
          127.0.0.1 www.bearshare-music-downloads.com
          127.0.0.1 bearshare-music-downloads.com
          127.0.0.1 www.bearsharepro2007.com
          127.0.0.1 bearsharepro2007.com
          127.0.0.1 www.bearshare-usa.com
          127.0.0.1 bearshare-usa.com
          127.0.0.1 bedhome.com
          127.0.0.1 bediadance.com
          127.0.0.1 www.beebappyy.biz
          127.0.0.1 beebappyy.biz
          127.0.0.1 www.begin2search.com
          127.0.0.1 begin2search.com
          127.0.0.1 bellabasketsfl.com
          127.0.0.1 bernaolatwin.com
          127.0.0.1 www.berufe-jobs.de
          127.0.0.1 berufe-jobs.de
          127.0.0.1 www.berufe-server.de
          127.0.0.1 berufe-server.de
          127.0.0.1 www.berufe-welt.de
          127.0.0.1 berufe-welt.de
          127.0.0.1 www.berufs-wahl.de
          127.0.0.1 berufs-wahl.de
          127.0.0.1 www.beruijindegunhadesun.com
          127.0.0.1 beruijindegunhadesun.com
          127.0.0.1 www.best3xclips.com
          127.0.0.1 best3xclips.com
          127.0.0.1 www.bestadults.com
          127.0.0.1 bestadults.com
          127.0.0.1 best-counter.com
          127.0.0.1 bestcrawler.com
          127.0.0.1 www.bestdailyvids.com
          127.0.0.1 bestdailyvids.com
          127.0.0.1 bestfor.ru
          127.0.0.1 www.bestfuckvids.com
          127.0.0.1 bestfuckvids.com
          127.0.0.1 best-hardpics.com
          127.0.0.1 www.bestmanage.org
          127.0.0.1 bestmanage.org
          127.0.0.1 www.bestmanage0.org
          127.0.0.1 bestmanage0.org
          127.0.0.1 www.bestmanage1.org
          127.0.0.1 bestmanage1.org
          127.0.0.1 www.bestmanage2.org
          127.0.0.1 bestmanage2.org
          127.0.0.1 www.bestmanage3.org
          127.0.0.1 bestmanage3.org
          127.0.0.1 www.bestmanage4.org
          127.0.0.1 bestmanage4.org
          127.0.0.1 www.bestmanage5.org
          127.0.0.1 bestmanage5.org
          127.0.0.1 www.bestmanage6.org
          127.0.0.1 bestmanage6.org
          127.0.0.1 www.bestmanage7.org
          127.0.0.1 bestmanage7.org
          127.0.0.1 www.bestmanage8.org
          127.0.0.1 bestmanage8.org
          127.0.0.1 www.bestmanage9.org
          127.0.0.1 bestmanage9.org
          127.0.0.1 www.bestmovszone.com
          127.0.0.1 bestmovszone.com
          127.0.0.1 www.bestoffersnetworks.com
          127.0.0.1 bestoffersnetworks.com
          127.0.0.1 bestporngate.com
          127.0.0.1 www.bestsafetyguide.net
          127.0.0.1 bestsafetyguide.net
          127.0.0.1 www.bestsearch.cc
          127.0.0.1 bestsearch.cc
          127.0.0.1 www.bestsearchworld.info
          127.0.0.1 bestsearchworld.info
          127.0.0.1 www.best-spyware.info
          127.0.0.1 best-spyware.info
          127.0.0.1 www.best-targeted-traffic.com
          127.0.0.1 best-targeted-traffic.com
          127.0.0.1 www.best-voyeur.info
          127.0.0.1 best-voyeur.info
          127.0.0.1 bestweblinks.com
          127.0.0.1 best-winning-casino.com
          127.0.0.1 www.bestworldgirls-for-u.net
          127.0.0.1 bestworldgirls-for-u.net
          127.0.0.1 www.bestxclips.com
          127.0.0.1 bestxclips.com
          127.0.0.1 bestxporno.com
          127.0.0.1 www.bestxxxmpegs.com
          127.0.0.1 bestxxxmpegs.com
          127.0.0.1 www.bettersearch.biz
          127.0.0.1 bettersearch.biz
          127.0.0.1 www.bgazzetta.it
          127.0.0.1 bgazzetta.it
          127.0.0.1 www.bgoogle.it
          127.0.0.1 bgoogle.it
          127.0.0.1 www.bigcodecadult.com
          127.0.0.1 bigcodecadult.com
          127.0.0.1 www.bigcodecadult2008.com
          127.0.0.1 bigcodecadult2008.com
          127.0.0.1 www.bigcodecadult2008-17.com
          127.0.0.1 bigcodecadult2008-17.com
          127.0.0.1 www.bighot18adult2008.com
          127.0.0.1 bighot18adult2008.com
          127.0.0.1 www.bighot18-adult2008.com
          127.0.0.1 bighot18-adult2008.com
          127.0.0.1 www.bighot18codec2008.com
          127.0.0.1 bighot18codec2008.com
          127.0.0.1 www.bighot18-codec2008.com
          127.0.0.1 bighot18-codec2008.com
          127.0.0.1 www.bigtrafficnetwork.com
          127.0.0.1 bigtrafficnetwork.com
          127.0.0.1 www.bigwww.com
          127.0.0.1 bigwww.com
          127.0.0.1 www.bill.de
          127.0.0.1 bill.de
          127.0.0.1 bins.media-motor.net
          127.0.0.1 bins2.media-motor.net
          127.0.0.1 bis.180solutions.com
          127.0.0.1 bitchesonline.net
          127.0.0.1 www.bitcomet-freebie.com
          127.0.0.1 bitcomet-freebie.com
          127.0.0.1 www.bittorrent.click-new-download.com
          127.0.0.1 bittorrent.click-new-download.com
          127.0.0.1 biz.biz
          127.0.0.1 www.bkvcompany.com
          127.0.0.1 bkvcompany.com
          127.0.0.1 www.blackblues00.com
          127.0.0.1 blackblues00.com
          127.0.0.1 www.blackcodec.com
          127.0.0.1 blackcodec.com
          127.0.0.1 www.blackcodec.net
          127.0.0.1 blackcodec.net
          127.0.0.1 www.blackhats.tc
          127.0.0.1 blackhats.tc
          127.0.0.1 www.blackhawksoftware.com
          127.0.0.1 blackhawksoftware.com
          127.0.0.1 blackjack-free.net
          127.0.0.1 www.blacklegion.info
          127.0.0.1 blacklegion.info
          127.0.0.1 blazefind.com
          127.0.0.1 blender.xu.pl
          127.0.0.1 www.blockcheckercontrol.com
          127.0.0.1 blockcheckercontrol.com
          127.0.0.1 blondetgp.com
          127.0.0.1 www.blue-elefant.com
          127.0.0.1 blue-elefant.com
          127.0.0.1 www.bm.theaimonline.com
          127.0.0.1 bm.theaimonline.com
          127.0.0.1 www.bnmgate.com
          127.0.0.1 bnmgate.com
          127.0.0.1 bodaciousbabette.com
          127.0.0.1 www.bonzi.com
          127.0.0.1 bonzi.com
          127.0.0.1 boobdoll.com
          127.0.0.1 boobsandtits.com
          127.0.0.1 boobsclub.com
          127.0.0.1 www.bookedspace.com
          127.0.0.1 bookedspace.com
          127.0.0.1 www.boom.com.vn
          127.0.0.1 boom.com.vn
          127.0.0.1 www.boomgirltv.com
          127.0.0.1 boomgirltv.com
          127.0.0.1 boredlife.com
          127.0.0.1 bowlofogumbo.com
          127.0.0.1 www.bpfq02.com
          127.0.0.1 bpfq02.com
          127.0.0.1 www.bqgate.com
          127.0.0.1 bqgate.com
          127.0.0.1 bradcoem.org
          127.0.0.1 www.braincodec.com
          127.0.0.1 braincodec.com
          127.0.0.1 brandiyoung.com
          127.0.0.1 www.bravesentry.com
          127.0.0.1 bravesentry.com
          127.0.0.1 www.breenten.biz
          127.0.0.1 breenten.biz
          127.0.0.1 www.brodbfm.net
          127.0.0.1 brodbfm.net
          127.0.0.1 brookeburn.com
          127.0.0.1 www.browserwise.com
          127.0.0.1 browserwise.com
          127.0.0.1 bsa.safetydownload.com
          127.0.0.1 www.bsplaycodec.com
          127.0.0.1 bsplaycodec.com
          127.0.0.1 bucps.com
          127.0.0.1 buhartes.info
          127.0.0.1 buldog-stats.com
          127.0.0.1 www.bullseye-network.com
          127.0.0.1 bullseye-network.com
          127.0.0.1 burgerkingbigscreen.com
          127.0.0.1 www.burningsite.com
          127.0.0.1 burningsite.com
          127.0.0.1 www.burnsrecyclinginc.com
          127.0.0.1 burnsrecyclinginc.com
          127.0.0.1 buscards.net
          127.0.0.1 bustyrussell.com
          127.0.0.1 www.busysearch.net
          127.0.0.1 busysearch.net
          127.0.0.1 buttejazz.org
          127.0.0.1 www.buy-find.info
          127.0.0.1 buy-find.info
          127.0.0.1 buyselldomain.net
          127.0.0.1 www.buytraff.biz
          127.0.0.1 buytraff.biz
          127.0.0.1 buz.ru
          127.0.0.1 www.bvdtechinque.com
          127.0.0.1 bvdtechinque.com
          127.0.0.1 www.bvirgilio.it
          127.0.0.1 bvirgilio.it
          127.0.0.1 c.centralmedia.ws
          127.0.0.1 www.c.enhance.com
          127.0.0.1 c.enhance.com
          127.0.0.1 c.goclick.com
          127.0.0.1 www.c4tdownload.com
          127.0.0.1 c4tdownload.com
          127.0.0.1 www.c5.www4free.info
          127.0.0.1 c5.www4free.info
          127.0.0.1 www.cache.surfaccuracy.com
          127.0.0.1 cache.surfaccuracy.com
          127.0.0.1 cache.ysbweb.com
          127.0.0.1 www.cadesfinjeriokas.com
          127.0.0.1 cadesfinjeriokas.com
          127.0.0.1 calcioturris.com
          127.0.0.1 www.calendaralerts.net
          127.0.0.1 calendaralerts.net
          127.0.0.1 www.callinghome.biz
          127.0.0.1 callinghome.biz
          127.0.0.1 www.cameouk.co.uk
          127.0.0.1 cameouk.co.uk
          127.0.0.1 cameup.com
          127.0.0.1 www.camouflageclothingonline.net
          127.0.0.1 camouflageclothingonline.net
          127.0.0.1 campaigns.outerinfo.net
          127.0.0.1 camup.net
          127.0.0.1 canberracricketcoaching.com
          127.0.0.1 candycantaloupes.com
          127.0.0.1 www.canidetect.org
          127.0.0.1 canidetect.org
          127.0.0.1 www.cantfind.com
          127.0.0.1 cantfind.com
          127.0.0.1 careers.dulcineasystems.net
          127.0.0.1 carsands.com
          127.0.0.1 carsrentals.net
          127.0.0.1 cartoes.uol.com.br
          127.0.0.1 www.casalemedia.com
          127.0.0.1 casalemedia.com
          127.0.0.1 www.cashdeluxe.net
          127.0.0.1 cashdeluxe.net
          127.0.0.1 www.cashengines.com
          127.0.0.1 cashengines.com
          127.0.0.1 cashsearch.biz
          127.0.0.1 www.cashsurfers.com
          127.0.0.1 cashsurfers.com
          127.0.0.1 www.cashunlim.com
          127.0.0.1 cashunlim.com
          127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
          127.0.0.1 casino2win.net
          127.0.0.1 casino-gambling-1.net
          127.0.0.1 casino-gambling-2.net
          127.0.0.1 casinomidas.net
          127.0.0.1 casinonline.net
          127.0.0.1 casino-onlines.net
          127.0.0.1 www.castingsamateur.com
          127.0.0.1 castingsamateur.com
          127.0.0.1 catallogue.com
          127.0.0.1 www.catch-dc.info
          127.0.0.1 catch-dc.info
          127.0.0.1 categories.mygeek.com
          127.0.0.1 catsss.da.ru
          127.0.0.1 caxa.ru
          127.0.0.1 cazygirls-world.com
          127.0.0.1 cc.panet.org
          127.0.0.1 www.ccecaedbebfcaf.com
          127.0.0.1 ccecaedbebfcaf.com
          127.0.0.1 cclebali.org
          127.0.0.1 www.ccorriere.it
          127.0.0.1 ccorriere.it
          127.0.0.1 www.cdcopysite.com
          127.0.0.1 cdcopysite.com
          127.0.0.1 www.cdegate.com
          127.0.0.1 cdegate.com
          127.0.0.1 cdn.movies-etc.com
          127.0.0.1 cdn2.movies-etc.com
          127.0.0.1 www.cdorriere.it
          127.0.0.1 cdorriere.it
          127.0.0.1 ceewawires.org
          127.0.0.1 centralmedia.ws
          127.0.0.1 certumgroup.com
          127.0.0.1 www.cforriere.it
          127.0.0.1 cforriere.it
          127.0.0.1 www.check.jupitersatellites.biz
          127.0.0.1 check.jupitersatellites.biz
          127.0.0.1 www.checkin100.com
          127.0.0.1 checkin100.com
          127.0.0.1 www.checkssecurity.com
          127.0.0.1 checkssecurity.com
          127.0.0.1 chelancatering.com
          127.0.0.1 www.chenshijituan.com
          127.0.0.1 chenshijituan.com
          127.0.0.1 childrenvilla.com
          127.0.0.1 www.chilly3xvids.com
          127.0.0.1 chilly3xvids.com
          127.0.0.1 www.chillymovs.com
          127.0.0.1 chillymovs.com
          127.0.0.1 chips-4-free.com
          127.0.0.1 chrisswasey.com
          127.0.0.1 chriswallace.net
          127.0.0.1 www.cia-trjn.myvnc.com
          127.0.0.1 cia-trjn.myvnc.com
          127.0.0.1 www.cinemadownload.com
          127.0.0.1 cinemadownload.com
          127.0.0.1 www.ciorriere.it
          127.0.0.1 ciorriere.it
          127.0.0.1 www.cirriere.it
          127.0.0.1 cirriere.it
          127.0.0.1 www.citycodec.com
          127.0.0.1 citycodec.com
          127.0.0.1 ckick4thumbs.com
          127.0.0.1 cl55.biz
          127.0.0.1 clackamasliteraryreview.com
          127.0.0.1 www.clckm.com
          127.0.0.1 clckm.com
          127.0.0.1 www.cleancodec.com
          127.0.0.1 cleancodec.com
          127.0.0.1 www.cleansoftwares.com
          127.0.0.1 cleansoftwares.com
          127.0.0.1 clearsearch.cc
          127.0.0.1 clearsearch.net
          127.0.0.1 clickaire.com
          127.0.0.1 www.click-codec.com
          127.0.0.1 click-codec.com
          127.0.0.1 www.clickhere4search.com
          127.0.0.1 clickhere4search.com
          127.0.0.1 www.click-new-download.com
          127.0.0.1 click-new-download.com
          127.0.0.1 click-now.net
          127.0.0.1 www.clickspring.net
          127.0.0.1 clickspring.net
          127.0.0.1 www.click-to-download.com
          127.0.0.1 click-to-download.com
          127.0.0.1 www.clicktomakeasearch.com
          127.0.0.1 clicktomakeasearch.com
          127.0.0.1 clickyestoenter.net
          127.0.0.1 client.exeupdate.com
          127.0.0.1 client.myadultexplorer.com
          127.0.0.1 www.cliks.org
          127.0.0.1 cliks.org
          127.0.0.1 www.clipsfestival.com
          127.0.0.1 clipsfestival.com
          127.0.0.1 www.clipsreality.com
          127.0.0.1 clipsreality.com
          127.0.0.1 www.clorriere.it
          127.0.0.1 clorriere.it
          127.0.0.1 clrsch.com
          127.0.0.1 www.clubxxxvideo.com
          127.0.0.1 clubxxxvideo.com
          127.0.0.1 clusif.free.fr
          127.0.0.1 cmtapestry.com
          127.0.0.1 www.cnetadd.com
          127.0.0.1 cnetadd.com
          127.0.0.1 www.cnomy.com
          127.0.0.1 cnomy.com
          127.0.0.1 www.cnzz.com
          127.0.0.1 cnzz.com
          127.0.0.1 www.cocktails-ideen.de
          127.0.0.1 cocktails-ideen.de
          127.0.0.1 code.ignphrases.com
          127.0.0.1 codec.ninoa.com
          127.0.0.1 www.codecadult18.com
          127.0.0.1 codecadult18.com
          127.0.0.1 www.codecbest.com
          127.0.0.1 codecbest.com
          127.0.0.1 www.codecbsplay.com
          127.0.0.1 codecbsplay.com
          127.0.0.1 www.codecdemo.com
          127.0.0.1 codecdemo.com
          127.0.0.1 www.codecdvd.net
          127.0.0.1 codecdvd.net
          127.0.0.1 www.codecdvi.com
          127.0.0.1 codecdvi.com
          127.0.0.1 www.codec-fun.com
          127.0.0.1 codec-fun.com
          127.0.0.1 www.codechard.com
          127.0.0.1 codechard.com
          127.0.0.1 www.codechot.net
          127.0.0.1 codechot.net
          127.0.0.1 www.codechq.net
          127.0.0.1 codechq.net
          127.0.0.1 www.codecmeg.net
          127.0.0.1 codecmeg.net
          127.0.0.1 www.codecmega.com
          127.0.0.1 codecmega.com
          127.0.0.1 www.codecmega.net
          127.0.0.1 codecmega.net
          127.0.0.1 www.codecmoon.com
          127.0.0.1 codecmoon.com
          127.0.0.1 www.codecmpg.com
          127.0.0.1 codecmpg.com
          127.0.0.1 www.codecnice.net
          127.0.0.1 codecnice.net
          127.0.0.1 www.codecnitro.com
          127.0.0.1 codecnitro.com
          127.0.0.1 www.codecops.net
          127.0.0.1 codecops.net
          127.0.0.1 www.codecplay.com
          127.0.0.1 codecplay.com
          127.0.0.1 www.codecpretty.net
          127.0.0.1 codecpretty.net
          127.0.0.1 www.codecpro.net
          127.0.0.1 codecpro.net
          127.0.0.1 www.codecred.net
          127.0.0.1 codecred.net
          127.0.0.1 www.codecsoft.net
          127.0.0.1 codecsoft.net
          127.0.0.1 www.codectime.com
          127.0.0.1 codectime.com
          127.0.0.1 www.codecultra.net
          127.0.0.1 codecultra.net
          127.0.0.1 www.codecvids.com
          127.0.0.1 codecvids.com
          127.0.0.1 www.codecvip.com
          127.0.0.1 codecvip.com
          127.0.0.1 www.codecviva.com
          127.0.0.1 codecviva.com
          127.0.0.1 www.codeczang.net
          127.0.0.1 codeczang.net
          127.0.0.1 www.codrriere.it
          127.0.0.1 codrriere.it
          127.0.0.1 www.coeriere.it
          127.0.0.1 coeriere.it
          127.0.0.1 www.coerriere.it
          127.0.0.1 coerriere.it
          127.0.0.1 www.cofrriere.it
          127.0.0.1 cofrriere.it
          127.0.0.1 www.cogrriere.it
          127.0.0.1 cogrriere.it
          127.0.0.1 www.coirriere.it
          127.0.0.1 coirriere.it
          127.0.0.1 command.adservs.com
          127.0.0.1 www.commonname.com
          127.0.0.1 www.computerpcgames.net
          127.0.0.1 computerpcgames.net
          127.0.0.1 www.computerrecover.com
          127.0.0.1 computerrecover.com
          127.0.0.1 config.180solutions.com
          127.0.0.1 www.content.dollarrevenue.com
          127.0.0.1 content.dollarrevenue.com
          127.0.0.1 www.content.ireit.com
          127.0.0.1 content.ireit.com
          127.0.0.1 content.onerateld.com
          127.0.0.1 www.contentmatch.net
          127.0.0.1 contentmatch.net
          127.0.0.1 www.contextplus.net
          127.0.0.1 contextplus.net
          127.0.0.1 www.contra-virus.com
          127.0.0.1 contra-virus.com
          127.0.0.1 www.controlmeh.com
          127.0.0.1 controlmeh.com
          127.0.0.1 www.convenient-search.com
          127.0.0.1 convenient-search.com
          127.0.0.1 www.cookingluck.com
          127.0.0.1 cookingluck.com
          127.0.0.1 www.cooldeskalert.com
          127.0.0.1 cooldeskalert.com
          127.0.0.1 coolfetishsite.com
          127.0.0.1 coolfreehost.com
          127.0.0.1 coolfreepage.com
          127.0.0.1 coolfreepages.com
          127.0.0.1 cool-homepage.co
          127.0.0.1 cool-homepage.com
          127.0.0.1 coolmoneysearch.com
          127.0.0.1 www.coolonlinebusiness.com
          127.0.0.1 coolonlinebusiness.com
          127.0.0.1 coolpornsearch.com
          127.0.0.1 cool-search.net
          127.0.0.1 cool-search.netfartpost.com
          127.0.0.1 coolsearcher.info
          127.0.0.1 www.coolservecorp.net
          127.0.0.1 coolservecorp.net
          127.0.0.1 www.coolwebsearch.com
          127.0.0.1 coolwebsearch.com
          127.0.0.1 cool-web-search.com
          127.0.0.1 coolwebsearsh.com
          127.0.0.1 www.coolwwwsearch.com
          127.0.0.1 coolwwwsearch.com
          127.0.0.1 cool-xxx.net
          127.0.0.1 www.coorriere.it
          127.0.0.1 coorriere.it
          127.0.0.1 copmtraine.com
          127.0.0.1 www.coprriere.it
          127.0.0.1 coprriere.it
          127.0.0.1 www.core.psyche-evolution.com
          127.0.0.1 core.psyche-evolution.com
          127.0.0.1 www.coreiere.it
          127.0.0.1 coreiere.it
          127.0.0.1 www.coreriere.it
          127.0.0.1 coreriere.it
          127.0.0.1 www.corrdiere.it
          127.0.0.1 corrdiere.it
          127.0.0.1 www.correiere.it
          127.0.0.1 correiere.it
          127.0.0.1 www.corrfiere.it
          127.0.0.1 corrfiere.it
          127.0.0.1 www.corrgiere.it
          127.0.0.1 corrgiere.it
          127.0.0.1 www.corridere.it
          127.0.0.1 corridere.it
          127.0.0.1 www.corriedre.it
          127.0.0.1 corriedre.it
          127.0.0.1 www.corriee.it
          127.0.0.1 corriee.it
          127.0.0.1 www.corrieere.it
          127.0.0.1 corrieere.it
          127.0.0.1 www.corriefre.it
          127.0.0.1 corriefre.it
          127.0.0.1 www.corriegre.it
          127.0.0.1 corriegre.it
          127.0.0.1 www.corrierde.it
          127.0.0.1 corrierde.it
          127.0.0.1 www.corriered.it
          127.0.0.1 corriered.it
          127.0.0.1 www.corrieree.it
          127.0.0.1 corrieree.it
          127.0.0.1 www.corrieref.it
          127.0.0.1 corrieref.it
          127.0.0.1 www.corrierer.it
          127.0.0.1 corrierer.it
          127.0.0.1 www.corrieres.it
          127.0.0.1 corrieres.it
          127.0.0.1 www.corrierew.it
          127.0.0.1 corrierew.it
          127.0.0.1 www.corrierfe.it
          127.0.0.1 corrierfe.it
          127.0.0.1 www.corrierge.it
          127.0.0.1 corrierge.it
          127.0.0.1 www.corrierr.it
          127.0.0.1 corrierr.it
          127.0.0.1 www.corrierre.it
          127.0.0.1 corrierre.it
          127.0.0.1 www.corrierse.it
          127.0.0.1 corrierse.it
          127.0.0.1 www.corrierte.it
          127.0.0.1 corrierte.it
          127.0.0.1 www.corrierw.it
          127.0.0.1 corrierw.it
          127.0.0.1 www.corrierwe.it
          127.0.0.1 corrierwe.it
          127.0.0.1 www.corriesre.it
          127.0.0.1 corriesre.it
          127.0.0.1 www.corriete.it
          127.0.0.1 corriete.it
          127.0.0.1 www.corrietre.it
          127.0.0.1 corrietre.it
          127.0.0.1 www.corriewre.it
          127.0.0.1 corriewre.it
          127.0.0.1 www.corrifere.it
          127.0.0.1 corrifere.it
          127.0.0.1 www.corriiere.it
          127.0.0.1 corriiere.it
          127.0.0.1 www.corrilere.it
          127.0.0.1 corrilere.it
          127.0.0.1 www.corrioere.it
          127.0.0.1 corrioere.it
          127.0.0.1 www.corrire.it
          127.0.0.1 corrire.it
          127.0.0.1 www.corrirere.it
          127.0.0.1 corrirere.it
          127.0.0.1 www.corrirre.it
          127.0.0.1 corrirre.it
          127.0.0.1 www.corrisere.it
          127.0.0.1 corrisere.it
          127.0.0.1 www.corriuere.it
          127.0.0.1 corriuere.it
          127.0.0.1 www.corriwere.it
          127.0.0.1 corriwere.it
          127.0.0.1 www.corriwre.it
          127.0.0.1 corriwre.it
          127.0.0.1 www.corrliere.it
          127.0.0.1 corrliere.it
          127.0.0.1 www.corroere.it
          127.0.0.1 corroere.it
          127.0.0.1 www.corroiere.it
          127.0.0.1 corroiere.it
          127.0.0.1 www.corrriere.it
          127.0.0.1 corrriere.it
          127.0.0.1 www.corrtiere.it
          127.0.0.1 corrtiere.it
          127.0.0.1 www.corruere.it
          127.0.0.1 corruere.it
          127.0.0.1 www.corruiere.it
          127.0.0.1 corruiere.it
          127.0.0.1 www.cortiere.it
          127.0.0.1 cortiere.it
          127.0.0.1 www.cortriere.it
          127.0.0.1 cortriere.it
          127.0.0.1 www.costrike.com
          127.0.0.1 costrike.com
          127.0.0.1 www.cotriere.it
          127.0.0.1 cotriere.it
          127.0.0.1 www.cotrriere.it
          127.0.0.1 cotrriere.it
          127.0.0.1 couldnotfind.com
          127.0.0.1 count.cc
          127.0.0.1 count.hitscount.net
          127.0.0.1 count-all.com
          127.0.0.1 www.countdutycall.info
          127.0.0.1 countdutycall.info
          127.0.0.1 counter.sexmaniack.com
          127.0.0.1 www.courtrecordslookup.com
          127.0.0.1 courtrecordslookup.com
          127.0.0.1 www.cporriere.it
          127.0.0.1 cporriere.it
          127.0.0.1 www.cprriere.it
          127.0.0.1 cprriere.it
          127.0.0.1 cpvfeed.com
          127.0.0.1 cracks.me.uk
          127.0.0.1 www.cracks4all.com
          127.0.0.1 cracks4all.com
          127.0.0.1 www.crapsgold.info
          127.0.0.1 crapsgold.info
          127.0.0.1 crazygirls-world.com
          127.0.0.1 www.crazywinnings.com
          127.0.0.1 crazywinnings.com
          127.0.0.1 creamedcutties.com
          127.0.0.1 www.createaccesskey.com
          127.0.0.1 createaccesskey.com
          127.0.0.1 www.creatonsoft.com
          127.0.0.1 creatonsoft.com
          127.0.0.1 creditsearchonline.com
          127.0.0.1 crestring.com
          127.0.0.1 crooder.com
          127.0.0.1 www.crriere.it
          127.0.0.1 crriere.it
          127.0.0.1 www.cryptdrive.com
          127.0.0.1 cryptdrive.com
          127.0.0.1 www.crystalysmedia.com
          127.0.0.1 crystalysmedia.com
          127.0.0.1 www.csx.adservs.com
          127.0.0.1 csx.adservs.com
          127.0.0.1 cts.180solutions.com
          127.0.0.1 www.cuisinartoven.com
          127.0.0.1 cuisinartoven.com
          127.0.0.1 www.curedc.info
          127.0.0.1 curedc.info
          127.0.0.1 www.curepcsolutions.com
          127.0.0.1 curepcsolutions.com
          127.0.0.1 curvedspaces.com
          127.0.0.1 www.cutadult.com
          127.0.0.1 cutadult.com
          127.0.0.1 www.cvirgilio.it
          127.0.0.1 cvirgilio.it
          127.0.0.1 www.cvorriere.it
          127.0.0.1 cvorriere.it
          127.0.0.1 cvs.jps.ru
          127.0.0.1 cvsymphony.com
          127.0.0.1 www.cxorriere.it
          127.0.0.1 cxorriere.it
          127.0.0.1 www.cyberrape.com
          127.0.0.1 cyberrape.com
          127.0.0.1 cydom.com
          127.0.0.1 www.cydoor.com
          127.0.0.1 cydoor.com
          127.0.0.1 www.daily3xlinks.com
          127.0.0.1 daily3xlinks.com
          127.0.0.1 www.dailybestclips.com
          127.0.0.1 dailybestclips.com
          127.0.0.1 daily-gals.com
          127.0.0.1 www.dailyhugemovs.com
          127.0.0.1 dailyhugemovs.com
          127.0.0.1 www.dailykeys.com
          127.0.0.1 dailykeys.com
          127.0.0.1 www.dailypornmag.com
          127.0.0.1 dailypornmag.com
          127.0.0.1 dailyteenspic.com
          127.0.0.1 www.dailytoolbar.com
          127.0.0.1 dailytoolbar.com
          127.0.0.1 www.dailyxvids.com
          127.0.0.1 dailyxvids.com
          127.0.0.1 dancingbabycd.com
          127.0.0.1 www.dapsol.com
          127.0.0.1 dapsol.com
          127.0.0.1 www.dapsolution.com
          127.0.0.1 dapsolution.com
          127.0.0.1 www.data-hoster.com
          127.0.0.1 data-hoster.com
          127.0.0.1 datanotary.com
          127.0.0.1 datareco.com
          127.0.0.1 www.dateanybabe.com
          127.0.0.1 dateanybabe.com
          127.0.0.1 www.dateanychick.com
          127.0.0.1 dateanychick.com
          127.0.0.1 www.datingdoctorsite.com
          127.0.0.1 datingdoctorsite.com
          127.0.0.1 www.dating-galaxy.info
          127.0.0.1 dating-galaxy.info
          127.0.0.1 dating-search.net
          127.0.0.1 davemarshall.org
          127.0.0.1 db105.com
          127.0.0.1 www.dbdecicated.com
          127.0.0.1 dbdecicated.com
          127.0.0.1 www.dbxcompany.com
          127.0.0.1 dbxcompany.com
          127.0.0.1 dcdl.dmcast.com
          127.0.0.1 dcfitusa.com
          127.0.0.1 www.dcorriere.it
          127.0.0.1 dcorriere.it
          127.0.0.1 www.dcurtis.com
          127.0.0.1 dcurtis.com
          127.0.0.1 dcww.dmcast.com
          127.0.0.1 de.ag
          127.0.0.1 de.drivecleaner.com
          127.0.0.1 de98.remsys.org
          127.0.0.1 www.debay.it
          127.0.0.1 debay.it
          127.0.0.1 www.decknews.com
          127.0.0.1 decknews.com
          127.0.0.1 dedmazay.3322.org
          127.0.0.1 www.dedsearch.com
          127.0.0.1 dedsearch.com
          127.0.0.1 defaultsearch.net
          127.0.0.1 www.defensaantimalware.com
          127.0.0.1 defensaantimalware.com
          127.0.0.1 www.deja-rue.com
          127.0.0.1 deja-rue.com
          127.0.0.1 www.delficodec.com
          127.0.0.1 delficodec.com
          127.0.0.1 www.democodec.com
          127.0.0.1 democodec.com
          127.0.0.1 www.derklaif.biz
          127.0.0.1 derklaif.biz
          127.0.0.1 www.derrari.it
          127.0.0.1 derrari.it
          127.0.0.1 desarrollocreativo.com
          127.0.0.1 www.deskbar.worldtostart.com
          127.0.0.1 deskbar.worldtostart.com
          127.0.0.1 www.deskwizz.com
          127.0.0.1 deskwizz.com
          127.0.0.1 www.destroy-spyware.net
          127.0.0.1 destroy-spyware.net
          127.0.0.1 www.destruktor.to.pl
          127.0.0.1 destruktor.to.pl
          127.0.0.1 www.detectivehound.com
          127.0.0.1 detectivehound.com
          127.0.0.1 www.detectivesearches.com
          127.0.0.1 detectivesearches.com
          127.0.0.1 dev.ntcor.com
          127.0.0.1 develip.com
          127.0.0.1 dewis.spb.ru
          127.0.0.1 dewis.us
          127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
          127.0.0.1 www.dgbusiness.com
          127.0.0.1 dgbusiness.com
          127.0.0.1 dialer2004.com
          127.0.0.1 www.dialerclub.com
          127.0.0.1 dialerclub.com
          127.0.0.1 www.dialer-shop.com
          127.0.0.1 dialer-shop.com
          127.0.0.1 www.dialoff.com
          127.0.0.1 dialoff.com
          127.0.0.1 www.did.i-used.cc
          127.0.0.1 did.i-used.cc
          127.0.0.1 dietpills4free.com
          127.0.0.1 dietpussy.com
          127.0.0.1 www.digikeygen.com
          127.0.0.1 digikeygen.com
          127.0.0.1 digistreamsa.com
          127.0.0.1 www.digitalcoders.net
          127.0.0.1 digitalcoders.net
          127.0.0.1 www.digitalfan.com
          127.0.0.1 digital-pornography.com
          127.0.0.1 dionforvalleycouncil.org
          127.0.0.1 www.directdvdpro.com
          127.0.0.1 directdvdpro.com
          127.0.0.1 www.directnameservice.com
          127.0.0.1 directnameservice.com
          127.0.0.1 www.directporta.info
          127.0.0.1 directporta.info
          127.0.0.1 www.directsearchzone.com
          127.0.0.1 directsearchzone.com
          127.0.0.1 www.diskretter.com
          127.0.0.1 diskretter.com
          127.0.0.1 dist.checkin100.com
          127.0.0.1 dl.ad-ware.cc
          127.0.0.1 dl.malwarewipe.com
          127.0.0.1 dl.mcboo.com
          127.0.0.1 www.dl.targetsaver.com
          127.0.0.1 dl.targetsaver.com
          127.0.0.1 dl.web-nexus.net
          127.0.0.1 dl1.antivermins.com
          127.0.0.1 dl1.antivirgear.com
          127.0.0.1 dl1.spydawn.com
          127.0.0.1 dl1.virusprotectpro.com
          127.0.0.1 dl1
          1. Contributeur sécurité
            non il est incomplet

            bon
            recolle un rapport hijakchits et dis tes soucis
            1. Bonjour (et veuillez m'excuser par avance pour l'intrusion),

              Recherche avec Google ; "virus cafard mange mon ecran" :

              https://www.google.fr/search?hl=fr&q=virus+cafard+mange+mon+ecran&gws_rd=ssl

              Si vous avez fait une ou des vidéos ou que vous avez des liens ça nous intéressent ; merci ...

              Recherche avec Google ; "video virus cafard mange mon ecran" :

              https://www.google.fr/search?hl=fr&q=video+virus+cafard+mange+mon+ecran&gws_rd=ssl

              Merci (et pardon pour le dérangement).
              1. bonjour, pour l'instant tout a l'air d'etre impec
                j'ai toujour un fond ecran bleu mais plus le meme du tout
                pas de bebetes a l'horizon
                merci pour tout si tout s'arrete la voici le rapport hijack demamde
                Logfile of Trend Micro HijackThis v2.0.2
                Scan saved at 07:50:43, on 09/06/2008
                Platform: Windows XP SP2 (WinNT 5.01.2600)
                MSIE: Internet Explorer v7.00 (7.00.6000.16640)
                Boot mode: Normal

                Running processes:
                E:\WINDOWS\System32\smss.exe
                E:\WINDOWS\system32\winlogon.exe
                E:\WINDOWS\system32\services.exe
                E:\WINDOWS\system32\lsass.exe
                E:\WINDOWS\System32\Ati2evxx.exe
                E:\WINDOWS\system32\svchost.exe
                E:\WINDOWS\System32\svchost.exe
                E:\WINDOWS\System32\ACS.exe
                E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                E:\Program Files\Alwil Software\Avast4\ashServ.exe
                E:\WINDOWS\system32\spoolsv.exe
                E:\Program Files\a-squared Free\a2service.exe
                E:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                E:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
                E:\Program Files\Bonjour\mDNSResponder.exe
                E:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
                E:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
                E:\WINDOWS\System32\svchost.exe
                E:\WINDOWS\system32\Ati2evxx.exe
                E:\WINDOWS\Explorer.EXE
                E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                E:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
                E:\WINDOWS\AGRSMMSG.exe
                E:\WINDOWS\system32\WgaTray.exe
                E:\WINDOWS\system32\TPSMain.exe
                E:\Program Files\Synaptics\SynTP\SynTPLpr.exe
                E:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                E:\Program Files\TOSHIBA\PadTouch\PadExe.exe
                E:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
                E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                E:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
                E:\WINDOWS\system32\LVCOMSX.EXE
                E:\Program Files\Logitech\Video\LogiTray.exe
                E:\Program Files\iTunes\iTunesHelper.exe
                E:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
                E:\WINDOWS\system32\TPSBattM.exe
                E:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
                E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                E:\WINDOWS\system32\ctfmon.exe
                E:\Program Files\Logitech\Video\FxSvr2.exe
                E:\Program Files\iPod\bin\iPodService.exe
                E:\WINDOWS\system32\wuauclt.exe
                E:\Program Files\Windows Live\Messenger\usnsvc.exe
                E:\Program Files\Internet Explorer\iexplore.exe
                E:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                E:\Documents and Settings\Manu\Bureau\virus\HiJackThis.exe

                R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
                O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - E:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
                O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
                O4 - HKLM\..\Run: [ATIPTA] E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                O4 - HKLM\..\Run: [THotkey] E:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
                O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
                O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
                O4 - HKLM\..\Run: [SynTPLpr] E:\Program Files\Synaptics\SynTP\SynTPLpr.exe
                O4 - HKLM\..\Run: [SynTPEnh] E:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                O4 - HKLM\..\Run: [PadTouch] "E:\Program Files\TOSHIBA\PadTouch\PadExe.exe
                O4 - HKLM\..\Run: [NeroFilterCheck] E:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
                O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
                O4 - HKLM\..\Run: [avast!] E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                O4 - HKLM\..\Run: [SunJavaUpdateSched] "E:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
                O4 - HKLM\..\Run: [LVCOMSX] E:\WINDOWS\system32\LVCOMSX.EXE
                O4 - HKLM\..\Run: [LogitechVideoRepair] E:\Program Files\Logitech\Video\ISStart.exe
                O4 - HKLM\..\Run: [LogitechVideoTray] E:\Program Files\Logitech\Video\LogiTray.exe
                O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\QTTask.exe" -atboottime
                O4 - HKLM\..\Run: [iTunesHelper] "E:\Program Files\iTunes\iTunesHelper.exe"
                O4 - HKLM\..\Run: [spa_start] E:\WINDOWS\System32\Rundll32.exe "E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll" DllInit
                O4 - HKLM\..\Run: [{31dec895-8270-d8a1-97c5-47639609fe34}] E:\WINDOWS\System32\Rundll32.exe "E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll" DllInit
                O4 - HKCU\..\Run: [TOSCDSPD] E:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
                O4 - HKCU\..\Run: [MsnMsgr] "E:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                O4 - HKCU\..\Run: [DigiClock] none
                O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "E:\Program Files\Logitech\Video\ManifestEngine.exe" boot
                O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
                O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
                O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
                O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
                O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = E:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office\OSA9.EXE
                O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                O9 - Extra button: (no name) - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - (no file)
                O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
                O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
                O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
                O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
                O10 - Unknown file in Winsock LSP: e:\windows\system32\nwprovau.dll
                O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - E:\Program Files\a-squared Free\a2service.exe
                O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - E:\WINDOWS\System32\ACS.exe
                O23 - Service: Apple Mobile Device - Apple, Inc. - E:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                O23 - Service: Ati HotKey Poller - Unknown owner - E:\WINDOWS\System32\Ati2evxx.exe
                O23 - Service: Autodata Limited License Service - Autodata Limited - E:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
                O23 - Service: avast! Antivirus - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashServ.exe
                O23 - Service: avast! Mail Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                O23 - Service: avast! Web Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - E:\Program Files\Bonjour\mDNSResponder.exe
                O23 - Service: Boonty Games - BOONTY - E:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - E:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
                O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - E:\Program Files\iPod\bin\iPodService.exe
                O23 - Service: NBService - Nero AG - E:\Program Files\Nero\Nero 7\Nero 7\Nero BackItUp\NBService.exe
                1. Contributeur sécurité
                  Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked".

                  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "E:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

                  O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\QTTask.exe" -atboottime

                  O4 - HKLM\..\Run: [iTunesHelper] "E:\Program Files\iTunes\iTunesHelper.exe"
                  O4 - HKLM\..\Run: [spa_start] E:\WINDOWS\System32\Rundll32.exe "E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll" DllInit
                  O4 - HKLM\..\Run: [{31dec895-8270-d8a1-97c5-47639609fe34}] E:\WINDOWS\System32\Rundll32.exe "E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll" DllInit
                  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
                  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
                  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
                  O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = E:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                  O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office\OSA9.EXE
                  O9 - Extra button: (no name) - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - (no file)
                  ____________________

                  télécharge OTMoveIt
                  http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau. Ou sur https://www.luanagames.com/index.fr.html
                  double-clique sur OTMoveIt.exe pour le lancer.
                  copie la liste qui se trouve en citation ci-dessous,
                  et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

                  Citation :

                  E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll
                  E:\WINDOWS\System32\Rundll32.exe "E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll

                  clique sur MoveIt! pour lancer la suppression.
                  le résultat apparaitra dans le cadre "Results".
                  clique sur Exit pour fermer.
                  poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

                  il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

                  ________________

                  télécharge combofix (par sUBs) ici :

                  http://download.bleepingcomputer.com/sUBs/ComboFix.exe

                  et enregistre le sur le bureau.

                  déconnecte toi d'internet et ferme toutes tes applications.

                  désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

                  double-clique sur combofix.exe et suis les instructions

                  à la fin, il va produire un rapport C:\ComboFix.txt

                  réactive ton parefeu, ton antivirus, la garde de ton antispyware

                  copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

                  Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

                  Tu as un tutoriel complet ici :

                  https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
                  1. bonsoir!! voila les rapports demander

                    File/Folder E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll not found.
                    File/Folder E:\WINDOWS\System32\Rundll32.exe "E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll not found.

                    OTMoveIt2 by OldTimer - Version 1.0.4.2 log created on 06102008_205614

                    ComboFix 08-06-09.7 - Manu 2008-06-10 21:21:07.1 - NTFSx86
                    Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.41 [GMT 2:00]Endroit: E:\Documents and Settings\Manu\Bureau\virus\ComboFix.exe
                    * Création d'un nouveau point de restauration

                    [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
                    .

                    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                    .

                    E:\Documents and Settings\LocalService\Application Data\1027743438.exe
                    E:\WINDOWS\system32\cpmsky-uninst.exe
                    E:\WINDOWS\system32\uninstall.exe

                    .
                    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
                    .

                    -------\Legacy_CBEVTSVC
                    -------\Legacy_GRANDE48
                    -------\Legacy_NWSAPAGENT
                    -------\Service_NwSapAgent

                    ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-05-10 to 2008-06-10 ))))))))))))))))))))))))))))))))))))
                    .

                    2008-06-10 20:56 . 2008-06-10 20:56 <REP> d----c--- E:\_OTMoveIt
                    2008-06-08 11:23 . 2008-06-08 11:23 <REP> d----c--- E:\Program Files\Microsoft CAPICOM 2.1.0.2
                    2008-06-08 11:22 . 2008-06-08 11:22 268 --ah-c--- E:\sqmdata17.sqm
                    2008-06-08 11:22 . 2008-06-08 11:22 244 --ah-c--- E:\sqmnoopt17.sqm
                    2008-06-08 00:16 . 2008-06-08 00:16 268 --ah-c--- E:\sqmdata16.sqm
                    2008-06-08 00:16 . 2008-06-08 00:16 244 --ah-c--- E:\sqmnoopt16.sqm
                    2008-06-07 23:13 . 2008-06-07 23:13 268 --ah-c--- E:\sqmdata15.sqm
                    2008-06-07 23:13 . 2008-06-07 23:13 244 --ah-c--- E:\sqmnoopt15.sqm
                    2008-06-07 22:22 . 2008-06-08 11:32 3,718 --a--c--- E:\WINDOWS\system32\tmp.reg
                    2008-06-07 22:08 . 2008-06-07 22:08 <REP> d----c--- E:\Program Files\Malwarebytes' Anti-Malware
                    2008-06-07 22:08 . 2008-06-07 22:08 <REP> d----c--- E:\Documents and Settings\Manu\Application Data\Malwarebytes
                    2008-06-07 22:08 . 2008-06-07 22:08 <REP> d----c--- E:\Documents and Settings\All Users\Application Data\Malwarebytes
                    2008-06-07 22:08 . 2008-06-05 16:04 34,296 --a--c--- E:\WINDOWS\system32\drivers\mbamcatchme.sys
                    2008-06-07 22:08 . 2008-06-05 16:04 15,864 --a--c--- E:\WINDOWS\system32\drivers\mbam.sys
                    2008-06-07 22:04 . 2008-06-07 22:04 268 --ah-c--- E:\sqmdata14.sqm
                    2008-06-07 22:04 . 2008-06-07 22:04 244 --ah-c--- E:\sqmnoopt14.sqm
                    2008-06-07 21:20 . 2008-06-07 21:20 268 --ah-c--- E:\sqmdata13.sqm
                    2008-06-07 21:20 . 2008-06-07 21:20 244 --ah-c--- E:\sqmnoopt13.sqm
                    2008-06-07 20:23 . 2007-04-17 11:32 2,455,488 -----c--- E:\WINDOWS\system32\dllcache\ieapfltr.dat
                    2008-06-07 20:23 . 2007-03-08 07:10 1,048,576 -----c--- E:\WINDOWS\system32\dllcache\ieframe.dll.mui
                    2008-06-07 20:23 . 2008-03-01 14:58 459,264 -----c--- E:\WINDOWS\system32\dllcache\msfeeds.dll
                    2008-06-07 20:23 . 2008-03-01 14:58 383,488 -----c--- E:\WINDOWS\system32\dllcache\ieapfltr.dll
                    2008-06-07 20:23 . 2008-03-01 14:58 267,776 -----c--- E:\WINDOWS\system32\dllcache\iertutil.dll
                    2008-06-07 20:23 . 2008-03-01 14:58 63,488 -----c--- E:\WINDOWS\system32\dllcache\icardie.dll
                    2008-06-07 20:23 . 2008-03-01 14:58 52,224 -----c--- E:\WINDOWS\system32\dllcache\msfeedsbs.dll
                    2008-06-07 20:23 . 2008-02-22 12:00 13,824 -----c--- E:\WINDOWS\system32\dllcache\ieudinit.exe
                    2008-06-07 20:22 . 2008-03-01 14:58 6,066,176 -----c--- E:\WINDOWS\system32\dllcache\ieframe.dll
                    2008-06-07 19:19 . 2003-11-11 14:12 336,800 -ra--c--- E:\WINDOWS\system32\drivers\PRISMA02.sys
                    2008-06-07 01:41 . 2008-06-07 01:41 268 --ah-c--- E:\sqmdata12.sqm
                    2008-06-07 01:41 . 2008-06-07 01:41 244 --ah-c--- E:\sqmnoopt12.sqm
                    2008-06-07 01:25 . 2007-07-30 19:19 271,224 --a--c--- E:\WINDOWS\system32\mucltui.dll
                    2008-06-07 01:25 . 2007-07-30 19:19 207,736 --a--c--- E:\WINDOWS\system32\muweb.dll
                    2008-06-07 01:25 . 2007-07-30 19:18 30,072 --a--c--- E:\WINDOWS\system32\mucltui.dll.mui
                    2008-06-06 20:39 . 2008-06-06 20:39 268 --ah-c--- E:\sqmdata11.sqm
                    2008-06-06 20:39 . 2008-06-06 20:39 244 --ah-c--- E:\sqmnoopt11.sqm
                    2008-05-28 09:16 . 2008-06-06 20:34 <REP> d----c--- E:\Program Files\a-squared Free
                    2008-05-28 07:22 . 2008-05-28 07:22 <REP> d----c--- E:\Program Files\Yahoo!
                    2008-05-28 07:22 . 2008-05-28 07:23 <REP> d----c--- E:\Program Files\CCleaner
                    2008-05-26 23:19 . 2008-05-26 23:19 <REP> d----c--- E:\Program Files\Spybot - Search & Destroy
                    2008-05-20 22:31 . 2008-05-20 22:31 282 --a--c--- E:\Raccourci vers Donn‚es (C).lnk
                    2008-05-15 23:56 . 2008-05-15 23:56 280 --ah-c--- E:\sqmdata10.sqm
                    2008-05-15 23:56 . 2008-05-15 23:56 244 --ah-c--- E:\sqmnoopt10.sqm

                    .
                    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                    .
                    2008-06-06 22:49 --------- dc----w E:\Program Files\AlerteGPS
                    2008-05-28 20:08 --------- dc----w E:\Program Files\iTunes
                    2008-05-26 21:20 --------- dc----w E:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
                    2008-05-17 16:00 --------- dc----w E:\Documents and Settings\Manu\Application Data\AdobeUM
                    2008-05-11 10:38 --------- dc----w E:\Documents and Settings\Manu\Application Data\LimeWire
                    2008-05-03 16:06 --------- dc----w E:\Documents and Settings\Manu\Application Data\Apple Computer
                    2008-05-03 16:05 --------- dc----w E:\Program Files\iPod
                    2008-05-03 16:04 --------- dc----w E:\Documents and Settings\All Users\Application Data\Apple Computer
                    2008-05-03 16:03 --------- dc----w E:\Program Files\Bonjour
                    2008-05-03 16:02 --------- dc----w E:\Program Files\QuickTime
                    2008-05-03 15:55 --------- dc----w E:\Program Files\Fichiers communs\Apple
                    2008-05-03 15:47 --------- dc----w E:\Program Files\Apple Software Update
                    2008-05-03 15:47 --------- dc----w E:\Documents and Settings\All Users\Application Data\Apple
                    2008-04-23 19:19 --------- dc----w E:\Documents and Settings\Manu\Application Data\MSN6
                    2008-03-25 04:51 621,344 -c--a-w E:\WINDOWS\system32\mswstr10.dll
                    2008-03-25 04:51 194,144 -c--a-w E:\WINDOWS\system32\msjint40.dll
                    2008-03-20 08:09 1,845,376 -c--a-w E:\WINDOWS\system32\win32k.sys
                    2007-01-31 13:17 1,376,256 -c--a-w E:\Program Files\evll.dll
                    2007-01-31 13:12 815,104 -c--a-w E:\Program Files\layer.dll
                    2007-01-31 13:12 61,440 -c--a-w E:\Program Files\sockets.dll
                    2007-01-31 13:12 208,896 -c--a-w E:\Program Files\webbrowser.dll
                    2007-01-31 13:12 192,512 -c--a-w E:\Program Files\googlesearch.dll
                    2007-01-31 13:11 69,632 -c--a-w E:\Program Files\googleearth.exe
                    2007-01-31 13:11 585,728 -c--a-w E:\Program Files\googleearth.dll
                    2007-01-31 13:11 237,568 -c--a-w E:\Program Files\navigate.dll
                    2007-01-31 13:11 180,224 -c--a-w E:\Program Files\measure.dll
                    2007-01-31 13:11 14,336 -c--a-w E:\Program Files\earthps.dll
                    2007-01-31 13:11 131,072 -c--a-w E:\Program Files\gps.dll
                    2007-01-31 13:11 1,429,504 -c--a-w E:\Program Files\collada.dll
                    2007-01-31 13:10 839,680 -c--a-w E:\Program Files\common.dll
                    2007-01-31 13:10 49,152 -c--a-w E:\Program Files\input_plugin.dll
                    2007-01-31 13:10 323,584 -c--a-w E:\Program Files\basicingest.dll
                    2007-01-31 13:10 241,664 -c--a-w E:\Program Files\auth.dll
                    2007-01-31 13:10 143,360 -c--a-w E:\Program Files\render.dll
                    2007-01-31 13:10 13,312 -c--a-w E:\Program Files\alchemyext.dll
                    2007-01-31 13:10 122,880 -c--a-w E:\Program Files\wmsbase.dll
                    2007-01-31 13:10 1,392,640 -c--a-w E:\Program Files\geobase.dll
                    2007-01-31 13:09 9,216 -c--a-w E:\Program Files\fusioncommon.dll
                    2007-01-31 13:09 278,528 -c--a-w E:\Program Files\base.dll
                    2007-01-31 13:09 22,016 -c--a-w E:\Program Files\moduleframework.dll
                    2007-01-31 13:09 16,896 -c--a-w E:\Program Files\componentframework.dll
                    2007-01-31 13:09 131,072 -c--a-w E:\Program Files\math.dll
                    2007-01-31 13:09 12,800 -c--a-w E:\Program Files\apiloader.dll
                    2007-01-31 13:09 118,784 -c--a-w E:\Program Files\net.dll
                    2006-12-20 13:01 729,088 -c--a-w E:\Program Files\libIGExportCommon.dll
                    2006-12-20 13:01 622,592 -c--a-w E:\Program Files\libIGMath.dll
                    2006-12-20 13:01 286,720 -c--a-w E:\Program Files\libIGUtils.dll
                    2006-12-20 13:01 1,298,432 -c--a-w E:\Program Files\libIGCore.dll
                    2006-12-20 13:01 1,064,960 -c--a-w E:\Program Files\libIGOpt.dll
                    2006-12-07 16:01 704 -c--a-w E:\Program Files\PCOptimizations.ini
                    2006-11-30 16:00 503,808 -c--a-w E:\Program Files\gpsbabel.exe
                    2006-11-17 12:30 61,053 -c--a-w E:\Program Files\drivers.ini
                    2006-11-09 09:49 33,329 -c--a-w E:\Program Files\releasenotes.txt
                    2006-11-03 11:30 5,219 -c--a-w E:\Program Files\ImporterUISettings.ini
                    2006-08-31 10:30 14,353 -c--a-w E:\Program Files\default_myplaces.kml
                    2006-08-21 14:00 26,694 -c--a-w E:\Program Files\uninstall.ico
                    2006-08-21 14:00 26,694 -c--a-w E:\Program Files\earth.ico
                    2006-08-16 16:19 4,075,520 -c--a-w E:\Program Files\qt-mt336.dll
                    2006-06-30 11:51 86,016 -c--a-w E:\Program Files\zlibwapi.dll
                    2006-04-08 16:50 45 -c--a-w E:\Program Files\logThumb.txt
                    2006-04-03 13:58 1,013 -c--a-w E:\Program Files\ImporterGlobalSettings.ini
                    2006-03-18 22:49 1,058 -c--a-w E:\Program Files\mmscomp.ini
                    2006-03-18 22:41 415 -c--a-w E:\Program Files\config.ini
                    2006-03-18 22:40 0 -c--a-w E:\Program Files\changelog.dat
                    2006-03-10 17:30 6,656 -csha-w E:\Program Files\Thumbs.db
                    2006-03-07 02:52 0 -c--a-w E:\Program Files\Program
                    2006-03-07 02:51 47 -c--a-w E:\Program Files\ETOS_USER.INI
                    2005-11-29 11:49 89,088 -c--a-w E:\Program Files\atl71.dll
                    2005-08-24 13:27 667,648 -c--a-w E:\Program Files\ijl20.dll
                    2005-08-23 08:47 151,552 -c--a-w E:\Program Files\libexpatw.dll
                    2005-06-09 17:55 18,351 -c--a-w E:\Program Files\gpl.txt
                    2005-04-27 12:29 0 -c--a-w E:\Program Files\googleearth.exe.local
                    2004-04-15 11:57 413,184 -c--a-w E:\Program Files\usp10.dll
                    2004-02-16 14:09 116,736 -c--a-w E:\Program Files\glu32.dll
                    2004-01-14 17:11 53,299 -c--a-w E:\Program Files\pthreadVC.dll
                    2003-11-25 09:53 77,878 -c--a-w E:\Program Files\msvcirt.dll
                    2000-05-21 23:00 1,066,176 -c--a-w E:\Program Files\MSCOMCTL.OCX
                    2008-01-14 12:33 32,768 -csha-w E:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008011420080115\index.dat
                    .

                    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
                    .
                    .
                    REGEDIT4
                    *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

                    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                    "TOSCDSPD"="E:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2003-09-15 17:19 65536]
                    "MsnMsgr"="E:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 12:34 5724184]
                    "DigiClock"="none" []
                    "LogitechSoftwareUpdate"="E:\Program Files\Logitech\Video\ManifestEngine.exe" [2005-06-08 15:44 196608]
                    "SpybotSD TeaTimer"="E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]
                    "CTFMON.EXE"="E:\WINDOWS\system32\ctfmon.exe" [2004-08-04 01:54 15360]

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                    "ATIModeChange"="Ati2mdxx.exe" [2004-06-02 10:05 28672 E:\WINDOWS\system32\Ati2mdxx.exe]
                    "ATIPTA"="E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-03-09 22:10 335872]
                    "THotkey"="E:\Program Files\Toshiba\Toshiba Applet\thotkey.exe" [2004-08-16 17:08 430080]
                    "AGRSMMSG"="AGRSMMSG.exe" [2004-06-02 10:09 88363 E:\WINDOWS\agrsmmsg.exe]
                    "TPSMain"="TPSMain.exe" [2004-05-04 11:41 266240 E:\WINDOWS\system32\TPSMain.exe]
                    "SynTPLpr"="E:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2004-09-14 16:30 98304]
                    "SynTPEnh"="E:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2004-09-14 16:30 507904]
                    "PadTouch"="E:\Program Files\TOSHIBA\PadTouch\PadExe.exe" [2004-02-12 12:43 1019904]
                    "NeroFilterCheck"="E:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 17:40 155648]
                    "CFSServ.exe"="CFSServ.exe" []
                    "LVCOMSX"="E:\WINDOWS\system32\LVCOMSX.EXE" [2005-07-19 18:32 221184]
                    "LogitechVideoRepair"="E:\Program Files\Logitech\Video\ISStart.exe" [2005-06-08 16:24 458752]
                    "LogitechVideoTray"="E:\Program Files\Logitech\Video\LogiTray.exe" [2005-06-08 16:14 217088]

                    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
                    Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

                    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
                    "EnableFirewall"= 0 (0x0)

                    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                    "E:\\WINDOWS\\system32\\sessmgr.exe"=
                    "E:\\Program Files\\Nero\\Nero 7\\Nero 7\\Nero Home\\NeroHome.exe"=
                    "E:\\Program Files\\Internet Explorer\\iexplore.exe"=
                    "E:\\Program Files\\Nero\\Nero 7\\Nero 7\\Nero ShowTime\\ShowTime.exe"=
                    "%windir%\\system32\\sessmgr.exe"=
                    "E:\\Program Files\\LimeWire\\LimeWire.exe"=
                    "E:\\Program Files\\eMule\\emule.exe"=
                    "E:\\Program Files\\messenger\\msmsgs.exe"=
                    "E:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
                    "E:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
                    "E:\\Program Files\\Bonjour\\mDNSResponder.exe"=
                    "E:\\Program Files\\iTunes\\iTunes.exe"=

                    R0 atiide;atiide;E:\WINDOWS\system32\DRIVERS\atiide.sys [2004-06-02 10:05]
                    R1 aswSP;avast! Self Protection;E:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]
                    R2 aswFsBlk;aswFsBlk;E:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
                    R3 axvbusx;axvbusx;E:\WINDOWS\system32\DRIVERS\axvbusx.sys [2002-12-11 22:34]
                    R3 axvscsi;axvscsi;E:\WINDOWS\system32\DRIVERS\axvscsi.sys [2002-12-19 01:36]
                    S3 Boonty Games;Boonty Games;"E:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" [2006-03-09 21:58]

                    .
                    Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
                    "2008-05-15 08:21:16 E:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
                    - E:\Program Files\Apple Software Update\SoftwareUpdate.exe
                    "2008-01-06 01:11:56 E:\WINDOWS\Tasks\Low3.job"
                    .
                    **************************************************************************

                    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                    Rootkit scan 2008-06-10 21:32:00
                    Windows 5.1.2600 Service Pack 2 NTFS

                    Balayage processus cach‚s ...

                    Balayage cach‚ autostart entries ...

                    Balayage des fichiers cach‚s ...

                    Scan termin‚ avec succŠs
                    Les fichiers cach‚s: 0

                    **************************************************************************
                    .
                    --------------------- DLLs a charg‚ sous des processus courants ---------------------

                    PROCESS: E:\WINDOWS\system32\winlogon.exe
                    -> E:\WINDOWS\system32\Ati2evxx.dll
                    .
                    ------------------------ Other Running Processes ------------------------
                    .
                    E:\WINDOWS\system32\ati2evxx.exe
                    E:\WINDOWS\system32\acs.exe
                    E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                    E:\Program Files\Alwil Software\Avast4\ashServ.exe
                    E:\Program Files\a-squared Free\a2service.exe
                    E:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                    E:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
                    E:\Program Files\Bonjour\mDNSResponder.exe
                    E:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
                    E:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
                    E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                    E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                    E:\WINDOWS\system32\wscntfy.exe
                    E:\WINDOWS\system32\ati2evxx.exe
                    E:\WINDOWS\system32\WgaTray.exe
                    E:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
                    E:\WINDOWS\system32\TPSBattM.exe
                    E:\Program Files\Logitech\Video\FxSvr2.exe
                    .
                    **************************************************************************
                    .
                    Temps d'accomplissement: 2008-06-10 21:38:55 - machine was rebooted
                    ComboFix-quarantined-files.txt 2008-06-10 19:38:39

                    Pre-Run: 4,666,159,104 octets libres
                    Post-Run: 4,588,367,872 octets libres

                    240 --- E O F --- 2008-06-10 18:30:54

                    merci et bonne soiree
                    1. Contributeur sécurité
                      recolle un rapport hijakchits et dis tes soucis actuels
                      1. bonsoir actuellement pas de probleme et les bestiaux ont disparu
                        voici le rapport
                        Logfile of Trend Micro HijackThis v2.0.2
                        Scan saved at 19:20:39, on 11/06/2008
                        Platform: Windows XP SP2 (WinNT 5.01.2600)
                        MSIE: Internet Explorer v7.00 (7.00.6000.16640)
                        Boot mode: Normal

                        Running processes:
                        E:\WINDOWS\System32\smss.exe
                        E:\WINDOWS\system32\winlogon.exe
                        E:\WINDOWS\system32\services.exe
                        E:\WINDOWS\system32\lsass.exe
                        E:\WINDOWS\System32\Ati2evxx.exe
                        E:\WINDOWS\system32\svchost.exe
                        E:\WINDOWS\System32\svchost.exe
                        E:\WINDOWS\System32\ACS.exe
                        E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                        E:\Program Files\Alwil Software\Avast4\ashServ.exe
                        E:\WINDOWS\system32\spoolsv.exe
                        E:\Program Files\a-squared Free\a2service.exe
                        E:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                        E:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
                        E:\Program Files\Bonjour\mDNSResponder.exe
                        E:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
                        E:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
                        E:\WINDOWS\System32\svchost.exe
                        E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                        E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                        E:\WINDOWS\system32\Ati2evxx.exe
                        E:\WINDOWS\system32\WgaTray.exe
                        E:\WINDOWS\Explorer.EXE
                        E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                        E:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
                        E:\WINDOWS\AGRSMMSG.exe
                        E:\WINDOWS\system32\TPSMain.exe
                        E:\Program Files\Synaptics\SynTP\SynTPLpr.exe
                        E:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                        E:\Program Files\TOSHIBA\PadTouch\PadExe.exe
                        E:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
                        E:\WINDOWS\system32\LVCOMSX.EXE
                        E:\Program Files\Logitech\Video\LogiTray.exe
                        E:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
                        E:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
                        E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                        E:\WINDOWS\system32\ctfmon.exe
                        E:\WINDOWS\system32\TPSBattM.exe
                        E:\Program Files\Logitech\Video\FxSvr2.exe
                        E:\Program Files\Windows Live\Messenger\usnsvc.exe
                        E:\Program Files\internet explorer\iexplore.exe
                        E:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                        E:\Documents and Settings\Manu\Bureau\virus\HiJackThis.exe

                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                        R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                        O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                        O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
                        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                        O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - E:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
                        O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                        O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                        O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
                        O4 - HKLM\..\Run: [ATIPTA] E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                        O4 - HKLM\..\Run: [THotkey] E:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
                        O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
                        O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
                        O4 - HKLM\..\Run: [SynTPLpr] E:\Program Files\Synaptics\SynTP\SynTPLpr.exe
                        O4 - HKLM\..\Run: [SynTPEnh] E:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                        O4 - HKLM\..\Run: [PadTouch] "E:\Program Files\TOSHIBA\PadTouch\PadExe.exe
                        O4 - HKLM\..\Run: [NeroFilterCheck] E:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
                        O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
                        O4 - HKLM\..\Run: [LVCOMSX] E:\WINDOWS\system32\LVCOMSX.EXE
                        O4 - HKLM\..\Run: [LogitechVideoRepair] E:\Program Files\Logitech\Video\ISStart.exe
                        O4 - HKLM\..\Run: [LogitechVideoTray] E:\Program Files\Logitech\Video\LogiTray.exe
                        O4 - HKCU\..\Run: [TOSCDSPD] E:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
                        O4 - HKCU\..\Run: [MsnMsgr] "E:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                        O4 - HKCU\..\Run: [DigiClock] none
                        O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "E:\Program Files\Logitech\Video\ManifestEngine.exe" boot
                        O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                        O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
                        O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
                        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
                        O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
                        O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
                        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
                        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
                        O10 - Unknown file in Winsock LSP: e:\windows\system32\nwprovau.dll
                        O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - E:\Program Files\a-squared Free\a2service.exe
                        O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - E:\WINDOWS\System32\ACS.exe
                        O23 - Service: Apple Mobile Device - Apple, Inc. - E:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                        O23 - Service: Ati HotKey Poller - Unknown owner - E:\WINDOWS\System32\Ati2evxx.exe
                        O23 - Service: Autodata Limited License Service - Autodata Limited - E:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
                        O23 - Service: avast! Antivirus - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashServ.exe
                        O23 - Service: avast! Mail Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                        O23 - Service: avast! Web Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                        O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - E:\Program Files\Bonjour\mDNSResponder.exe
                        O23 - Service: Boonty Games - BOONTY - E:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                        O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - E:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
                        O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - E:\Program Files\iPod\bin\iPodService.exe
                        O23 - Service: NBService - Nero AG - E:\Program Files\Nero\Nero 7\Nero 7\Nero BackItUp\NBService.exe
                        1. Contributeur sécurité
                          ok c'est bon

                          vire combofix et hijakhcits et smitfraudfix

                          il faudra mettre le sp3 de windows: DEMARRER puis TOUS LES PROGRAMMES puis WINDOWS UPDATE

                          pour protéger gratos ton ordi

                          http://www.commentcamarche.net/telecharger/logiciel 4 securite

                          mettre un antivirus

                          AVAST en français ou ANTIVIR (en anglais mais très efficace)
                          https://www.malekal.com/avira-free-security-antivirus-gratuit/ (merci Malekal)
                          -------------
                          des anti-espions :
                          MalwareByte's Anti-Malware + SPYBOT +/- si tea timer non active de spybot:
                          WINDOWS DEFENDER ou SPYWARE TERMINATOR

                          +
                          SPYWAREBLASTER pour immuniser le système contre vundo notamment mais en anglais (mais facile d'utilisation : il suffit de faire "update" pour mettre à jour tous les mois et ensuite" enable all protection" pour immuniser)...

                          Rq : spybot et ad-aware ont sorti de nouvelles versions cette année vérifiez que vous avez la dernière version
                          --------
                          un pare feu :
                          celui de (Windows) ou mieux Online armor ou KERIO ou JETICO ou ZONE ALARM (mettre que le parefeu gratuit)

                          http://www.commentcamarche.net/telecharger/telecharger 34055356 online armor personal firewall

                          https://forum.pcastuces.com/sujet.asp?f=25&s=35606
                          https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html
                          https://manuelsdaide.com/contact/
                          http://www.open-files.com/forum/index.php?showtopic=29277
                          http://www.commentcamarche.net/telecharger/telecharger 157 zonealarm

                          -----------
                          CCLEANER pour effacer les traces de surf
                          ---------
                          naviguer avec firefox ou safari ou opera et non internet explorer plus touché par les virus
                          http://www.mozilla-europe.org/fr/products/firefox/
                          1. okk merci pour tout!
                            bonne continuation
                            merci pour les conseil!!