Cafard mangeurs d'ecran

Résolu
leunam78 Messages postés 117 Statut Membre -  
jlpjlp Messages postés 52399 Statut Contributeur sécurité -
bonsoir, j'aurais besoin d'aide pour nettoyer mon ordi j'ai pu remarquer
qu'un rapport hijack serait utile!!
merci par avance!!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:24:55, on 07/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Safe mode

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\Explorer.EXE
E:\Documents and Settings\Manu\Bureau\virus\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - E:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: cpmsky browser optimizer - {d4895055-be7a-e634-d31b-b9c4ccc9777a} - E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [THotkey] E:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [SynTPLpr] E:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] E:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PadTouch] "E:\Program Files\TOSHIBA\PadTouch\PadExe.exe
O4 - HKLM\..\Run: [NeroFilterCheck] E:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
O4 - HKLM\..\Run: [avast!] E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "E:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [LVCOMSX] E:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] E:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] E:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [spa_start] E:\WINDOWS\System32\Rundll32.exe "E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll" DllInit
O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "E:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [{31dec895-8270-d8a1-97c5-47639609fe34}] E:\WINDOWS\System32\Rundll32.exe "E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll" DllInit
O4 - HKCU\..\Run: [TOSCDSPD] E:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [MsnMsgr] "E:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DigiClock] none
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "E:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = E:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - (no file)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: e:\windows\system32\nwprovau.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - E:\Program Files\a-squared Free\a2service.exe
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - E:\WINDOWS\System32\ACS.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - E:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - E:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Autodata Limited License Service - Autodata Limited - E:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - E:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - E:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: CbEvtSvc - Unknown owner - E:\WINDOWS\System32\CbEvtSvc.exe (file missing)
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - E:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - E:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - E:\Program Files\Nero\Nero 7\Nero 7\Nero BackItUp\NBService.exe

--
End of file - 7761 bytes
Configuration: Windows XP
Internet Explorer 7.0

15 réponses

  1. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    slt,

    scan avec
    MalwareByte's Anti-Malware et vire ce qui est trouvé et colle le rapport

    https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

    ________________

    smit fraud fix (colle le rapport)

    1/ telecharger :

    http://siri.urz.free.fr/Fix/SmitfraudFix.php

    2/ double clique sur smitfraudfix. puis sélectionne 1 et appuyer sur entrée afin de créer le rapport des infection présentes.
    0
  2. leunam78 Messages postés 117 Statut Membre 1
     
    re et merci pour le coup de main voici les rapports

    Malwarebytes' Anti-Malware 1.15
    Version de la base de données: 839

    23:09:09 07/06/2008
    mbam-log-6-7-2008 (23-08-57).txt

    Type de recherche: Examen complet (C:\|E:\|)
    Eléments examinés: 78519
    Temps écoulé: 38 minute(s), 0 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 1
    Clé(s) du Registre infectée(s): 5
    Valeur(s) du Registre infectée(s): 8
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 1
    Fichier(s) infecté(s): 18

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll (Trojan.Agent) -> No action taken.

    Clé(s) du Registre infectée(s):
    HKEY_CLASSES_ROOT\CLSID\{d4895055-be7a-e634-d31b-b9c4ccc9777a} (Trojan.Agent) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d4895055-be7a-e634-d31b-b9c4ccc9777a} (Trojan.Agent) -> No action taken.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CbEvtSvc (Trojan.Downloader) -> No action taken.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\grande48 (Rootkit.Srizbi) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple) -> No action taken.

    Valeur(s) du Registre infectée(s):
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\General\BackupWallpaper (Trojan.FakeAlert) -> No action taken.
    HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\General\Wallpaper (Trojan.FakeAlert) -> No action taken.
    HKEY_CURRENT_USER\Control Panel\Desktop\Wallpaper (Trojan.FakeAlert) -> No action taken.
    HKEY_CURRENT_USER\Control Panel\Desktop\OriginalWallpaper (Trojan.FakeAlert) -> No action taken.
    HKEY_CURRENT_USER\Control Panel\Desktop\ConvertedWallpaper (Trojan.FakeAlert) -> No action taken.
    HKEY_CURRENT_USER\Control Panel\Desktop\SCRNSAVE.EXE (Trojan.FakeAlert) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\spa_start (Trojan.Agent) -> No action taken.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\{31dec895-8270-d8a1-97c5-47639609fe34} (Trojan.Agent) -> No action taken.

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    E:\Program Files\Temporary (Trojan.Agent) -> No action taken.

    Fichier(s) infecté(s):
    E:\Documents and Settings\LocalService\Application Data\575834442.exe (Trojan.Pakes) -> No action taken.
    E:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\HCPV1ZQ0\1s1[1].exe (Trojan.Pakes) -> No action taken.
    E:\Program Files\WinRAR\Default.SFX (Rogue.Installer) -> No action taken.
    E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP269\A0055401.scr (Trojan.Agent) -> No action taken.
    E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP270\A0055405.scr (Trojan.Agent) -> No action taken.
    E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP272\A0055446.scr (Trojan.Agent) -> No action taken.
    E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP272\A0055627.scr (Trojan.Agent) -> No action taken.
    E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP272\A0055638.scr (Trojan.Agent) -> No action taken.
    E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP272\A0057645.scr (Trojan.Agent) -> No action taken.
    E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP272\A0057662.scr (Trojan.Agent) -> No action taken.
    E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP272\A0057681.scr (Trojan.Agent) -> No action taken.
    E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP272\A0057838.scr (Trojan.Agent) -> No action taken.
    E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP272\A0057855.scr (Trojan.Agent) -> No action taken.
    E:\System Volume Information\_restore{1BFB0C5A-08E4-4271-A355-21D31E8D2646}\RP273\A0057890.exe (Trojan.Agent) -> No action taken.
    E:\WINDOWS\system32\blackster.scr (Trojan.Agent) -> No action taken.
    E:\Program Files\Temporary\Photo0046.jpg (Trojan.Agent) -> No action taken.
    E:\Program Files\Temporary\~ZA_G200.mp3 (Trojan.Agent) -> No action taken.
    E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll (Trojan.Agent) -> No action taken.

    SmitFraudFix v2.323

    Rapport fait à 22:21:40,01, 07/06/2008
    Executé à partir de E:\Documents and Settings\Manu\Bureau\virus\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» Process

    E:\WINDOWS\System32\smss.exe
    E:\WINDOWS\system32\winlogon.exe
    E:\WINDOWS\system32\services.exe
    E:\WINDOWS\system32\lsass.exe
    E:\WINDOWS\System32\Ati2evxx.exe
    E:\WINDOWS\system32\svchost.exe
    E:\WINDOWS\System32\svchost.exe
    E:\WINDOWS\System32\ACS.exe
    E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    E:\Program Files\Alwil Software\Avast4\ashServ.exe
    E:\WINDOWS\system32\spoolsv.exe
    E:\Program Files\a-squared Free\a2service.exe
    E:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    E:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
    E:\Program Files\Bonjour\mDNSResponder.exe
    E:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    E:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
    E:\WINDOWS\System32\svchost.exe
    E:\WINDOWS\system32\Ati2evxx.exe
    E:\WINDOWS\Explorer.EXE
    E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    E:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
    E:\WINDOWS\AGRSMMSG.exe
    E:\WINDOWS\system32\TPSMain.exe
    E:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    E:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    E:\WINDOWS\system32\WgaTray.exe
    E:\WINDOWS\system32\wuauclt.exe
    E:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
    E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    E:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
    E:\WINDOWS\system32\LVCOMSX.EXE
    E:\Program Files\Logitech\Video\LogiTray.exe
    E:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
    E:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    E:\WINDOWS\system32\ctfmon.exe
    E:\WINDOWS\system32\TPSBattM.exe
    E:\Program Files\Logitech\Video\FxSvr2.exe
    E:\Program Files\iPod\bin\iPodService.exe
    E:\WINDOWS\system32\cmd.exe

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    Fichier hosts corrompu !

    127.0.0.1 www.legal-at-spybot.info
    127.0.0.1 legal-at-spybot.info

    »»»»»»»»»»»»»»»»»»»»»»»» E:\

    »»»»»»»»»»»»»»»»»»»»»»»» E:\WINDOWS

    »»»»»»»»»»»»»»»»»»»»»»»» E:\WINDOWS\system

    »»»»»»»»»»»»»»»»»»»»»»»» E:\WINDOWS\Web

    »»»»»»»»»»»»»»»»»»»»»»»» E:\WINDOWS\system32

    »»»»»»»»»»»»»»»»»»»»»»»» E:\WINDOWS\system32\LogFiles

    »»»»»»»»»»»»»»»»»»»»»»»» E:\Documents and Settings\Manu

    »»»»»»»»»»»»»»»»»»»»»»»» E:\Documents and Settings\Manu\Application Data

    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

    »»»»»»»»»»»»»»»»»»»»»»»» E:\DOCUME~1\Manu\Favoris

    »»»»»»»»»»»»»»»»»»»»»»»» Bureau

    »»»»»»»»»»»»»»»»»»»»»»»» E:\Program Files

    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="Ma page d'accueil"

    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» VACFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    404Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"=""

    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "Userinit"="E:\\WINDOWS\\system32\\userinit.exe,"
    "System"=""

    »»»»»»»»»»»»»»»»»»»»»»»» Rustock

    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: Atheros AR5004G Wireless Network Adapter
    DNS Server Search Order: 192.168.1.1

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{BBEE3699-8CD3-4611-9896-3B1BC6476FE0}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{BBEE3699-8CD3-4611-9896-3B1BC6476FE0}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{BBEE3699-8CD3-4611-9896-3B1BC6476FE0}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

    »»»»»»»»»»»»»»»»»»»»»»»» Fin
    0
  3. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    redémarre en mode sans échec (en appuyant sur F8 ou suppr, ou F5 au démarrage en général) puis lance smitfraudfix , sélectionne l'option 2 et appuyer sur entrée pour commencer la désinfection. lorsque le programme demande si tu veut nettoyer le registre mets oui en tapant 0 et entrée

    _________________

    recolle un rapport hijakchits et dis tes soucis
    0
  4. leunam78 Messages postés 117 Statut Membre 1
     
    bonjour, et encore merci sinon apres cette operation le fond ecran est toujour bleu mais plus le meme pour l'instant je n'ai pas eu de visite de ces petites bebetes sinon voici le rapport
    SmitFraudFix v2.323

    Rapport fait à 11:30:44,07, 08/06/2008
    Executé à partir de E:\Documents and Settings\Manu\Bureau\virus\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode sans echec

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    127.0.0.1 localhost
    127.0.0.1 bin.errorprotector.com ## added by CiD
    127.0.0.1 br.errorsafe.com ## added by CiD
    127.0.0.1 br.winantivirus.com ## added by CiD
    127.0.0.1 br.winfixer.com ## added by CiD
    127.0.0.1 cdn.drivecleaner.com ## added by CiD
    127.0.0.1 cdn.errorsafe.com ## added by CiD
    127.0.0.1 cdn.winsoftware.com ## added by CiD
    127.0.0.1 de.errorsafe.com ## added by CiD
    127.0.0.1 de.winantivirus.com ## added by CiD
    127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
    127.0.0.1 download.cdn.errorsafe.com ## added by CiD
    127.0.0.1 download.cdn.winsoftware.com ## added by CiD
    127.0.0.1 download.errorsafe.com ## added by CiD
    127.0.0.1 download.systemdoctor.com ## added by CiD
    127.0.0.1 download.winantispyware.com ## added by CiD
    127.0.0.1 download.windrivecleaner.com ## added by CiD
    127.0.0.1 download.winfixer.com ## added by CiD
    127.0.0.1 drivecleaner.com ## added by CiD
    127.0.0.1 dynamique.drivecleaner.com ## added by CiD
    127.0.0.1 errorprotector.com ## added by CiD
    127.0.0.1 errorsafe.com ## added by CiD
    127.0.0.1 es.winantivirus.com ## added by CiD
    127.0.0.1 fr.winantivirus.com ## added by CiD
    127.0.0.1 fr.winfixer.com ## added by CiD
    127.0.0.1 go.drivecleaner.com ## added by CiD
    127.0.0.1 go.errorsafe.com ## added by CiD
    127.0.0.1 go.winantispyware.com ## added by CiD
    127.0.0.1 go.winantivirus.com ## added by CiD
    127.0.0.1 hk.winantivirus.com ## added by CiD
    127.0.0.1 instlog.errorsafe.com ## added by CiD
    127.0.0.1 instlog.winantivirus.com ## added by CiD
    127.0.0.1 instlog.winfixer.com ## added by CiD
    127.0.0.1 jsp.drivecleaner.com ## added by CiD
    127.0.0.1 kb.errorsafe.com ## added by CiD
    127.0.0.1 kb.winantivirus.com ## added by CiD
    127.0.0.1 nl.errorsafe.com ## added by CiD
    127.0.0.1 se.errorsafe.com ## added by CiD
    127.0.0.1 secure.drivecleaner.com ## added by CiD
    127.0.0.1 secure.errorsafe.com ## added by CiD
    127.0.0.1 secure.winantispam.com ## added by CiD
    127.0.0.1 secure.winantispy.com ## added by CiD
    127.0.0.1 secure.winantivirus.com ## added by CiD
    127.0.0.1 support.winantivirus.com ## added by CiD
    127.0.0.1 trial.updates.winsoftware.com ## added by CiD
    127.0.0.1 ulog.winantivirus.com ## added by CiD
    127.0.0.1 utils.errorsafe.com ## added by CiD
    127.0.0.1 utils.winantivirus.com ## added by CiD
    127.0.0.1 utils.winfixer.com ## added by CiD
    127.0.0.1 winantispyware.com ## added by CiD
    127.0.0.1 winantivirus.com ## added by CiD
    127.0.0.1 winfixer.com ## added by CiD
    127.0.0.1 winfixer2006.com ## added by CiD
    127.0.0.1 winsoftware.com ## added by CiD
    127.0.0.1 www.drivecleaner.com ## added by CiD
    127.0.0.1 www.errorprotector.com ## added by CiD
    127.0.0.1 www.errorsafe.com ## added by CiD
    127.0.0.1 www.systemdoctor.com ## added by CiD
    127.0.0.1 www.utils.winfixer.com ## added by CiD
    127.0.0.1 www.win-anti-virus-pro.com ## added by CiD
    127.0.0.1 www.win-virus-pro.com ## added by CiD
    127.0.0.1 www.winantispam.com ## added by CiD
    127.0.0.1 www.winantispy.com ## added by CiD
    127.0.0.1 www.winantispyware.com ## added by CiD
    127.0.0.1 www.winantivirus.com ## added by CiD
    127.0.0.1 www.winantiviruspro.com ## added by CiD
    127.0.0.1 www.windrivecleaner.com ## added by CiD
    127.0.0.1 www.windrivesafe.com ## added by CiD
    127.0.0.1 www.winfixer.com ## added by CiD
    127.0.0.1 www.winfixer2006.com ## added by CiD
    127.0.0.1 www.winsoftware.com ## added by CiD
    127.0.0.1 www.007guard.com
    127.0.0.1 007guard.com
    127.0.0.1 008i.com
    127.0.0.1 www.008k.com
    127.0.0.1 008k.com
    127.0.0.1 www.00hq.com
    127.0.0.1 00hq.com
    127.0.0.1 010402.com
    127.0.0.1 www.032439.com
    127.0.0.1 032439.com
    127.0.0.1 www.1001-search.info
    127.0.0.1 1001-search.info
    127.0.0.1 www.100888290cs.com
    127.0.0.1 100888290cs.com
    127.0.0.1 www.100sexlinks.com
    127.0.0.1 100sexlinks.com
    127.0.0.1 www.10sek.com
    127.0.0.1 10sek.com
    127.0.0.1 www.123topsearch.com
    127.0.0.1 123topsearch.com
    127.0.0.1 www.132.com
    127.0.0.1 132.com
    127.0.0.1 www.136136.net
    127.0.0.1 136136.net
    127.0.0.1 www.139mm.com
    127.0.0.1 139mm.com
    127.0.0.1 www.163ns.com
    127.0.0.1 163ns.com
    127.0.0.1 171203.com
    127.0.0.1 17-plus.com
    127.0.0.1 www.1800searchonline.com
    127.0.0.1 1800searchonline.com
    127.0.0.1 www.180searchassistant.com
    127.0.0.1 180searchassistant.com
    127.0.0.1 www.180solutions.com
    127.0.0.1 180solutions.com
    127.0.0.1 www.181.365soft.info
    127.0.0.1 181.365soft.info
    127.0.0.1 www.1987324.com
    127.0.0.1 1987324.com
    127.0.0.1 www.1-domains-registrations.com
    127.0.0.1 1-domains-registrations.com
    127.0.0.1 www.1-extreme.biz
    127.0.0.1 1-extreme.biz
    127.0.0.1 www.1sexparty.com
    127.0.0.1 1sexparty.com
    127.0.0.1 www.1stantivirus.com
    127.0.0.1 1stantivirus.com
    127.0.0.1 www.1stpagehere.com
    127.0.0.1 1stpagehere.com
    127.0.0.1 www.1stsearchportal.com
    127.0.0.1 1stsearchportal.com
    127.0.0.1 2.82211.net
    127.0.0.1 www.2006ooo.com
    127.0.0.1 www.2007-download.com
    127.0.0.1 2007-download.com
    127.0.0.1 www.2020search.com
    127.0.0.1 2020search.com
    127.0.0.1 20x2p.com
    127.0.0.1 www.24.365soft.info
    127.0.0.1 24.365soft.info
    127.0.0.1 www.24-7pharmacy.info
    127.0.0.1 24-7pharmacy.info
    127.0.0.1 www.24-7searching-and-more.com
    127.0.0.1 24-7searching-and-more.com
    127.0.0.1 www.24teen.com
    127.0.0.1 24teen.com
    127.0.0.1 www.2every.net
    127.0.0.1 2every.net
    127.0.0.1 2ndpower.com
    127.0.0.1 www.2search.com
    127.0.0.1 2search.com
    127.0.0.1 www.2search.org
    127.0.0.1 2search.org
    127.0.0.1 www.2squared.com
    127.0.0.1 2squared.com
    127.0.0.1 www.3322.org
    127.0.0.1 3322.org
    127.0.0.1 365soft.info
    127.0.0.1 www.36site.com
    127.0.0.1 36site.com
    127.0.0.1 3721.com
    127.0.0.1 39-93.com
    127.0.0.1 www.3abetterinternet.com
    127.0.0.1 3abetterinternet.com
    127.0.0.1 www.3bay.it
    127.0.0.1 3bay.it
    127.0.0.1 www.3ebay.it
    127.0.0.1 3ebay.it
    127.0.0.1 www.3xclipsonline.com
    127.0.0.1 3xclipsonline.com
    127.0.0.1 www.3xcurves.com
    127.0.0.1 3xcurves.com
    127.0.0.1 www.3xfestival.com
    127.0.0.1 3xfestival.com
    127.0.0.1 www.3x-festival.com
    127.0.0.1 3x-festival.com
    127.0.0.1 www.3x-galls.com
    127.0.0.1 3x-galls.com
    127.0.0.1 www.3xmiracle.com
    127.0.0.1 3xmiracle.com
    127.0.0.1 www.3xmoviesblog.com
    127.0.0.1 3xmoviesblog.com
    127.0.0.1 www.404dns.com
    127.0.0.1 404dns.com
    127.0.0.1 www.4199.com
    127.0.0.1 4199.com
    127.0.0.1 www.4corn.net
    127.0.0.1 4corn.net
    127.0.0.1 www.4ebay.it
    127.0.0.1 4ebay.it
    127.0.0.1 4klm.com
    127.0.0.1 www.4mpg.com
    127.0.0.1 4mpg.com
    127.0.0.1 www.4repubblica.it
    127.0.0.1 4repubblica.it
    127.0.0.1 www.4softget.com
    127.0.0.1 4softget.com
    127.0.0.1 www.5iscali.it
    127.0.0.1 5iscali.it
    127.0.0.1 www.5repubblica.it
    127.0.0.1 5repubblica.it
    127.0.0.1 www.5starvideos.com
    127.0.0.1 5starvideos.com
    127.0.0.1 www.5tiscali.it
    127.0.0.1 5tiscali.it
    127.0.0.1 www.5zgmu7o20kt5d8yq.com
    127.0.0.1 5zgmu7o20kt5d8yq.com
    127.0.0.1 www.680180.net
    127.0.0.1 680180.net
    127.0.0.1 www.6iscali.it
    127.0.0.1 6iscali.it
    127.0.0.1 www.6njaga.com
    127.0.0.1 6njaga.com
    127.0.0.1 www.6sek.com
    127.0.0.1 6sek.com
    127.0.0.1 www.6tiscali.it
    127.0.0.1 6tiscali.it
    127.0.0.1 www.70-music.com
    127.0.0.1 70-music.com
    127.0.0.1 www.7322.com
    127.0.0.1 7322.com
    127.0.0.1 75tz.com
    127.0.0.1 www.777search.com
    127.0.0.1 777search.com
    127.0.0.1 www.777top.com
    127.0.0.1 777top.com
    127.0.0.1 www.7939.com
    127.0.0.1 7939.com
    127.0.0.1 www.7search.com
    127.0.0.1 7search.com
    127.0.0.1 80gw6ry3i3x3qbrkwhxhw.032439.com
    127.0.0.1 www.80-music.com
    127.0.0.1 80-music.com
    127.0.0.1 82211.net
    127.0.0.1 8866.org
    127.0.0.1 www.888.com
    127.0.0.1 888.com
    127.0.0.1 www.88vcd.com
    127.0.0.1 88vcd.com
    127.0.0.1 www.8ad.com
    127.0.0.1 8ad.com
    127.0.0.1 www.90-music.com
    127.0.0.1 90-music.com
    127.0.0.1 www.9505.com
    127.0.0.1 9505.com
    127.0.0.1 www.971searchbox.com
    127.0.0.1 971searchbox.com
    127.0.0.1 9mmporn.com
    127.0.0.1 a.bestmanage.org
    127.0.0.1 www.aaabesthomepage.com
    127.0.0.1 aaabesthomepage.com
    127.0.0.1 aaasexypics.com
    127.0.0.1 www.aaawebfinder.com
    127.0.0.1 aaawebfinder.com
    127.0.0.1 www.aaqadarsztriv.com
    127.0.0.1 aaqadarsztriv.com
    127.0.0.1 www.aaqada-rsztriv.com
    127.0.0.1 aaqada-rsztriv.com
    127.0.0.1 www.aaqadaueorn.com
    127.0.0.1 aaqadaueorn.com
    127.0.0.1 www.aaqada-ueorn.com
    127.0.0.1 aaqada-ueorn.com
    127.0.0.1 www.aaqada-ygco.com
    127.0.0.1 aaqada-ygco.com
    127.0.0.1 www.aaqada-ymct.com
    127.0.0.1 aaqada-ymct.com
    127.0.0.1 aavc.com
    127.0.0.1 www.abccodec.com
    127.0.0.1 abccodec.com
    127.0.0.1 www.abcdperformance.com
    127.0.0.1 abcdperformance.com
    127.0.0.1 www.abc-find.info
    127.0.0.1 abc-find.info
    127.0.0.1 www.abcsearch.com
    127.0.0.1 abcsearch.com
    127.0.0.1 www.abetterinternet.com
    127.0.0.1 abetterinternet.com
    127.0.0.1 www.abnetsoft.info
    127.0.0.1 abnetsoft.info
    127.0.0.1 www.aboutclicker.com
    127.0.0.1 aboutclicker.com
    127.0.0.1 www.abrp.net
    127.0.0.1 abrp.net
    127.0.0.1 www.absolutee.com
    127.0.0.1 absolutee.com
    127.0.0.1 www.abyssmedia.com
    127.0.0.1 abyssmedia.com
    127.0.0.1 www.ac66.cn
    127.0.0.1 ac66.cn
    127.0.0.1 access.navinetwork.com
    127.0.0.1 access.rapid-pass.net
    127.0.0.1 www.accessactivexvideo.com
    127.0.0.1 accessactivexvideo.com
    127.0.0.1 www.accessclips.com
    127.0.0.1 accessclips.com
    127.0.0.1 www.access-dvd.com
    127.0.0.1 access-dvd.com
    127.0.0.1 www.accesskeygenerator.com
    127.0.0.1 accesskeygenerator.com
    127.0.0.1 www.accessthefuture.net
    127.0.0.1 accessthefuture.net
    127.0.0.1 www.accessvid.net
    127.0.0.1 accessvid.net
    127.0.0.1 www.acemedic.com
    127.0.0.1 acemedic.com
    127.0.0.1 www.ace-webmaster.com
    127.0.0.1 ace-webmaster.com
    127.0.0.1 acjp.com
    127.0.0.1 www.acrobat-2007.com
    127.0.0.1 acrobat-2007.com
    127.0.0.1 www.acrobat-8.com
    127.0.0.1 acrobat-8.com
    127.0.0.1 www.acrobat-center.com
    127.0.0.1 acrobat-center.com
    127.0.0.1 www.acrobat-hq.com
    127.0.0.1 acrobat-hq.com
    127.0.0.1 www.acrobatreader-8.com
    127.0.0.1 acrobatreader-8.com
    127.0.0.1 www.acrobat-reader-8.de
    127.0.0.1 acrobat-reader-8.de
    127.0.0.1 www.acrobat-stop.com
    127.0.0.1 acrobat-stop.com
    127.0.0.1 www.actionbreastcancer.org
    127.0.0.1 actionbreastcancer.org
    127.0.0.1 www.activesearcher.info
    127.0.0.1 activesearcher.info
    127.0.0.1 www.activexaccessobject.com
    127.0.0.1 activexaccessobject.com
    127.0.0.1 www.activexaccessvideo.com
    127.0.0.1 activexaccessvideo.com
    127.0.0.1 www.activexemedia.com
    127.0.0.1 activexemedia.com
    127.0.0.1 www.activexmediaobject.com
    127.0.0.1 activexmediaobject.com
    127.0.0.1 www.activexmediapro.com
    127.0.0.1 activexmediapro.com
    127.0.0.1 www.activexmediasite.com
    127.0.0.1 activexmediasite.com
    127.0.0.1 www.activexmediasoftware.com
    127.0.0.1 activexmediasoftware.com
    127.0.0.1 www.activexmediasource.com
    127.0.0.1 activexmediasource.com
    127.0.0.1 www.activexmediatool.com
    127.0.0.1 activexmediatool.com
    127.0.0.1 www.activexmediatour.com
    127.0.0.1 activexmediatour.com
    127.0.0.1 www.activexsoftwares.com
    127.0.0.1 activexsoftwares.com
    127.0.0.1 www.activexsource.com
    127.0.0.1 activexsource.com
    127.0.0.1 www.activexupdate.com
    127.0.0.1 activexupdate.com
    127.0.0.1 www.activexvideo.com
    127.0.0.1 activexvideo.com
    127.0.0.1 www.activexvideotool.com
    127.0.0.1 activexvideotool.com
    127.0.0.1 www.ad.marketingsector.com
    127.0.0.1 ad.marketingsector.com
    127.0.0.1 www.ad.mokead.com
    127.0.0.1 ad.mokead.com
    127.0.0.1 ad.oinadserver.com
    127.0.0.1 ad.outerinfoads.com
    127.0.0.1 www.ad25.com
    127.0.0.1 ad25.com
    127.0.0.1 www.ad45.com
    127.0.0.1 ad45.com
    127.0.0.1 www.ad77.com
    127.0.0.1 ad77.com
    127.0.0.1 www.ad86.com
    127.0.0.1 ad86.com
    127.0.0.1 www.adamsupportgroup.org
    127.0.0.1 adamsupportgroup.org
    127.0.0.1 www.adarmor.com
    127.0.0.1 adarmor.com
    127.0.0.1 www.adasearch.com
    127.0.0.1 adasearch.com
    127.0.0.1 adaware.cc
    127.0.0.1 www.adawarenow.com
    127.0.0.1 adawarenow.com
    127.0.0.1 adchannel.contextplus.net
    127.0.0.1 www.addetect.com
    127.0.0.1 addetect.com
    127.0.0.1 www.add-hhh.info
    127.0.0.1 add-hhh.info
    127.0.0.1 www.addictivetechnologies.com
    127.0.0.1 addictivetechnologies.com
    127.0.0.1 www.addictivetechnologies.net
    127.0.0.1 addictivetechnologies.net
    127.0.0.1 www.addioerrori.com
    127.0.0.1 addioerrori.com
    127.0.0.1 www.add-manager.com
    127.0.0.1 add-manager.com
    127.0.0.1 www.adgate.info
    127.0.0.1 adgate.info
    127.0.0.1 www.adintelligence.net
    127.0.0.1 adintelligence.net
    127.0.0.1 www.adioserrores.com
    127.0.0.1 adioserrores.com
    127.0.0.1 www.adipics.com
    127.0.0.1 adipics.com
    127.0.0.1 www.adlogix.com
    127.0.0.1 adlogix.com
    127.0.0.1 www.admin2cash.biz
    127.0.0.1 admin2cash.biz
    127.0.0.1 adnet-plus.com
    127.0.0.1 www.adnetserver.com
    127.0.0.1 adnetserver.com
    127.0.0.1 adobe-download-now.com
    127.0.0.1 www.adobe-downloads.com
    127.0.0.1 adobe-downloads.com
    127.0.0.1 www.adobe-reader-8.fr
    127.0.0.1 adobe-reader-8.fr
    127.0.0.1 www.adprotect.com
    127.0.0.1 adprotect.com
    127.0.0.1 ads.centralmedia.ws
    127.0.0.1 ads.k8l.info
    127.0.0.1 ads.kmpads.com
    127.0.0.1 ads.kw.revenue.net
    127.0.0.1 ads.marketingsector.com
    127.0.0.1 ads.searchingbooth.com
    127.0.0.1 ads.z-quest.com
    127.0.0.1 ads1.revenue.net
    127.0.0.1 www.ads183.com
    127.0.0.1 ads183.com
    127.0.0.1 www.adscontex.com
    127.0.0.1 adscontex.com
    127.0.0.1 www.adservices1.enhance.com
    127.0.0.1 adservices1.enhance.com
    127.0.0.1 adservs.com
    127.0.0.1 www.adsextend.net
    127.0.0.1 adsextend.net
    127.0.0.1 www.adshttp.com
    127.0.0.1 adshttp.com
    127.0.0.1 www.adsniffer.com
    127.0.0.1 adsniffer.com
    127.0.0.1 www.adsonwww.com
    127.0.0.1 adsonwww.com
    127.0.0.1 www.adspics.com
    127.0.0.1 adspics.com
    127.0.0.1 www.adsrevenue.net
    127.0.0.1 adsrevenue.net
    127.0.0.1 www.adtrak.net
    127.0.0.1 adtrak.net
    127.0.0.1 adtrgt.com
    127.0.0.1 www.adult18codec.com
    127.0.0.1 adult18codec.com
    127.0.0.1 www.adult777search.info
    127.0.0.1 adult777search.info
    127.0.0.1 www.adultan.com
    127.0.0.1 adultan.com
    127.0.0.1 www.adultcodec-2008.com
    127.0.0.1 adultcodec-2008.com
    127.0.0.1 www.adultcodecstars.com
    127.0.0.1 adultcodecstars.com
    127.0.0.1 www.adult-engine-search.com
    127.0.0.1 adult-engine-search.com
    127.0.0.1 www.adult-erotic-guide.net
    127.0.0.1 adult-erotic-guide.net
    127.0.0.1 www.adultfilmsite.com
    127.0.0.1 adultfilmsite.com
    127.0.0.1 www.adult-friends-finder.net
    127.0.0.1 adult-friends-finder.net
    127.0.0.1 adultgambling.org
    127.0.0.1 adult-host.org
    127.0.0.1 www.adulthyperlinks.com
    127.0.0.1 adulthyperlinks.com
    127.0.0.1 www.adultmovieplus.com
    127.0.0.1 adultmovieplus.com
    127.0.0.1 www.adult-mpg.net
    127.0.0.1 adult-mpg.net
    127.0.0.1 adult-personal.us
    127.0.0.1 adultsgames.net
    127.0.0.1 www.adultsonlyvids.com
    127.0.0.1 adultsonlyvids.com
    127.0.0.1 www.adultsper.com
    127.0.0.1 adultsper.com
    127.0.0.1 www.adulttds.com
    127.0.0.1 adulttds.com
    127.0.0.1 www.adultzoneworld.com
    127.0.0.1 adultzoneworld.com
    127.0.0.1 www.advancedcleaner.com
    127.0.0.1 advancedcleaner.com
    127.0.0.1 www.advcash.biz
    127.0.0.1 advcash.biz
    127.0.0.1 advert.exaccess.ru
    127.0.0.1 www.advertisemoney.info
    127.0.0.1 advertisemoney.info
    127.0.0.1 advertising.paltalk.com
    127.0.0.1 www.advertising-money.info
    127.0.0.1 advertising-money.info
    127.0.0.1 ad-ware.cc
    127.0.0.1 www.ad-w-a-r-e.com
    127.0.0.1 ad-w-a-r-e.com
    127.0.0.1 www.a-d-w-a-r-e.com
    127.0.0.1 a-d-w-a-r-e.com
    127.0.0.1 www.adware.pro
    127.0.0.1 adware.pro
    127.0.0.1 www.adwarealert.com
    127.0.0.1 adwarealert.com
    127.0.0.1 www.ad-warealert.com
    127.0.0.1 ad-warealert.com
    127.0.0.1 www.adwarearrest.com
    127.0.0.1 adwarearrest.com
    127.0.0.1 www.adwarebazooka.com
    127.0.0.1 adwarebazooka.com
    127.0.0.1 www.adwarecommander.com
    127.0.0.1 adwarecommander.com
    127.0.0.1 www.adwarefinder.com
    127.0.0.1 adwarefinder.com
    127.0.0.1 www.adwaregold.com
    127.0.0.1 adwaregold.com
    127.0.0.1 www.adwarepatrol.com
    127.0.0.1 adwarepatrol.com
    127.0.0.1 www.adwareplatinum.com
    127.0.0.1 adwareplatinum.com
    127.0.0.1 www.adwareprotectionsite.com
    127.0.0.1 adwareprotectionsite.com
    127.0.0.1 www.adwarepunisher.com
    127.0.0.1 adwarepunisher.com
    127.0.0.1 www.adwareremover.ws
    127.0.0.1 adwareremover.ws
    127.0.0.1 www.adwaresafety.com
    127.0.0.1 adwaresafety.com
    127.0.0.1 www.adwarexp.com
    127.0.0.1 adwarexp.com
    127.0.0.1 affiliate.idownload.com
    127.0.0.1 www.aflgate.com
    127.0.0.1 aflgate.com
    127.0.0.1 africaspromise.org
    127.0.0.1 agava.com
    127.0.0.1 agava.ru
    127.0.0.1 agentstudio.com
    127.0.0.1 www.aginegialle.it
    127.0.0.1 aginegialle.it
    127.0.0.1 www.ahnenforschung.de
    127.0.0.1 ahnenforschung.de
    127.0.0.1 aifind.info
    127.0.0.1 www.aifind.info
    127.0.0.1 www.airtleworld.com
    127.0.0.1 airtleworld.com
    127.0.0.1 www.aitalia.it
    127.0.0.1 aitalia.it
    127.0.0.1 akamai.downloadv3.com
    127.0.0.1 www.aklitalia.it
    127.0.0.1 aklitalia.it
    127.0.0.1 akril.com
    127.0.0.1 alcatel.ws
    127.0.0.1 www.alertspy.com
    127.0.0.1 alertspy.com
    127.0.0.1 www.alfacleaner.com
    127.0.0.1 alfacleaner.com
    127.0.0.1 alfa-search.com
    127.0.0.1 www.alialia.it
    127.0.0.1 alialia.it
    127.0.0.1 www.aliotalia.it
    127.0.0.1 aliotalia.it
    127.0.0.1 www.alirtalia.it
    127.0.0.1 alirtalia.it
    127.0.0.1 www.alitaia.it
    127.0.0.1 alitaia.it
    127.0.0.1 www.alitaklia.it
    127.0.0.1 alitaklia.it
    127.0.0.1 www.alitala.it
    127.0.0.1 alitala.it
    127.0.0.1 www.alitali.it
    127.0.0.1 alitali.it
    127.0.0.1 www.alitaliaq.it
    127.0.0.1 alitaliaq.it
    127.0.0.1 www.alitalias.it
    127.0.0.1 alitalias.it
    127.0.0.1 www.alitaliaz.it
    127.0.0.1 alitaliaz.it
    127.0.0.1 www.alitalioa.it
    127.0.0.1 alitalioa.it
    127.0.0.1 www.alitalisa.it
    127.0.0.1 alitalisa.it
    127.0.0.1 www.alitaliua.it
    127.0.0.1 alitaliua.it
    127.0.0.1 www.alitalkia.it
    127.0.0.1 alitalkia.it
    127.0.0.1 www.alitaloia.it
    127.0.0.1 alitaloia.it
    127.0.0.1 www.alitaluia.it
    127.0.0.1 alitaluia.it
    127.0.0.1 www.alitaslia.it
    127.0.0.1 alitaslia.it
    127.0.0.1 www.alitlia.it
    127.0.0.1 alitlia.it
    127.0.0.1 www.alitralia.it
    127.0.0.1 alitralia.it
    127.0.0.1 www.alitsalia.it
    127.0.0.1 alitsalia.it
    127.0.0.1 www.aliutalia.it
    127.0.0.1 aliutalia.it
    127.0.0.1 www.all1count.net
    127.0.0.1 all1count.net
    127.0.0.1 www.all4internet.com
    127.0.0.1 all4internet.com
    127.0.0.1 allabtcars.com
    127.0.0.1 allabtjeeps.com
    127.0.0.1 www.all-bittorrent.com
    127.0.0.1 all-bittorrent.com
    127.0.0.1 www.allcollisions.com
    127.0.0.1 allcollisions.com
    127.0.0.1 allcybersearch.com
    127.0.0.1 www.allcybersearch.com
    127.0.0.1 www.alldnserrors.com
    127.0.0.1 alldnserrors.com
    127.0.0.1 www.all-downloads-now.com
    127.0.0.1 all-downloads-now.com
    127.0.0.1 www.all-edonkey.com
    127.0.0.1 all-edonkey.com
    127.0.0.1 www.allertaminacce.com
    127.0.0.1 allertaminacce.com
    127.0.0.1 allforadult.com
    127.0.0.1 allhyperlinks.com
    127.0.0.1 www.alliesecurity.com
    127.0.0.1 alliesecurity.com
    127.0.0.1 all-inet.com
    127.0.0.1 allinternetbusiness.com
    127.0.0.1 www.all-limewire.com
    127.0.0.1 all-limewire.com
    127.0.0.1 www.allmegabucks.com
    127.0.0.1 allmegabucks.com
    127.0.0.1 www.allprotections.com
    127.0.0.1 allprotections.com
    127.0.0.1 www.allresultz.net
    127.0.0.1 allresultz.net
    127.0.0.1 www.allsearch.us
    127.0.0.1 allsearch.us
    127.0.0.1 www.allsecuritynotes.com
    127.0.0.1 allsecuritynotes.com
    127.0.0.1 www.allsecuritysite.com
    127.0.0.1 allsecuritysite.com
    127.0.0.1 www.allstarsvideos.net
    127.0.0.1 allstarsvideos.net
    127.0.0.1 www.alltiettantivirus.com
    127.0.0.1 alltiettantivirus.com
    127.0.0.1 www.alltruesoftware.com
    127.0.0.1 alltruesoftware.com
    127.0.0.1 www.allvideoactivex.com
    127.0.0.1 allvideoactivex.com
    127.0.0.1 www.almanah.biz
    127.0.0.1 almanah.biz
    127.0.0.1 almarvideos.com
    127.0.0.1 www.aloitalia.it
    127.0.0.1 aloitalia.it
    127.0.0.1 www.aluitalia.it
    127.0.0.1 aluitalia.it
    127.0.0.1 www.amaena.com
    127.0.0.1 amaena.com
    127.0.0.1 amandamountains.com
    127.0.0.1 www.amateurliveshow.com
    127.0.0.1 amateurliveshow.com
    127.0.0.1 www.amediasoftware.com
    127.0.0.1 amediasoftware.com
    127.0.0.1 www.amediasource.com
    127.0.0.1 amediasource.com
    127.0.0.1 www.americanautobargains.com
    127.0.0.1 americanautobargains.com
    127.0.0.1 www.americancarbargains.com
    127.0.0.1 americancarbargains.com
    127.0.0.1 american-teens.net
    127.0.0.1 amigeek.com
    127.0.0.1 www.amigobore.com
    127.0.0.1 amigobore.com
    127.0.0.1 amisbusiness.com
    127.0.0.1 www.ampmsearch.com
    127.0.0.1 ampmsearch.com
    127.0.0.1 www.analcord.com
    127.0.0.1 analcord.com
    127.0.0.1 analmovi.com
    127.0.0.1 www.anarchylolita.com
    127.0.0.1 anarchylolita.com
    127.0.0.1 anarchyporn.com
    127.0.0.1 www.andromedical.com
    127.0.0.1 andromedical.com
    127.0.0.1 www.animepornmag.com
    127.0.0.1 animepornmag.com
    127.0.0.1 anin.org
    127.0.0.1 www.anjpn-avxiz.biz
    127.0.0.1 anjpn-avxiz.biz
    127.0.0.1 www.anjpnzqav.biz
    127.0.0.1 anjpnzqav.biz
    127.0.0.1 www.anjpn-zqav.biz
    127.0.0.1 anjpn-zqav.biz
    127.0.0.1 annaromeo.com
    127.0.0.1 www.antiddos.us
    127.0.0.1 antiddos.us
    127.0.0.1 www.antiespiadorado.com
    127.0.0.1 antiespiadorado.com
    127.0.0.1 www.antiespionspack.com
    127.0.0.1 antiespionspack.com
    127.0.0.1 www.antigusanos2008.com
    127.0.0.1 antigusanos2008.com
    127.0.0.1 www.antispamassistant.com
    127.0.0.1 antispamassistant.com
    127.0.0.1 www.antispamdeluxe.com
    127.0.0.1 antispamdeluxe.com
    127.0.0.1 www.antispionage.com
    127.0.0.1 antispionage.com
    127.0.0.1 www.antispionagepro.com
    127.0.0.1 antispionagepro.com
    127.0.0.1 www.antispyadvanced.com
    127.0.0.1 antispyadvanced.com
    127.0.0.1 www.antispydns.biz
    127.0.0.1 antispydns.biz
    127.0.0.1 www.antispykit.com
    127.0.0.1 antispykit.com
    127.0.0.1 www.antispylab.com
    127.0.0.1 antispylab.com
    127.0.0.1 www.antispyshield.com
    127.0.0.1 antispyshield.com
    127.0.0.1 www.antispysolutions.com
    127.0.0.1 antispysolutions.com
    127.0.0.1 www.antispyware.com
    127.0.0.1 antispyware.com
    127.0.0.1 www.antispywareboot.com
    127.0.0.1 antispywareboot.com
    127.0.0.1 www.antispywarebot.com
    127.0.0.1 antispywarebot.com
    127.0.0.1 www.antispywarebox.com
    127.0.0.1 antispywarebox.com
    127.0.0.1 www.antispywaredownloads.com
    127.0.0.1 antispywaredownloads.com
    127.0.0.1 www.antispywaresuite.com
    127.0.0.1 antispywaresuite.com
    127.0.0.1 www.antispywareupdates.net
    127.0.0.1 antispywareupdates.net
    127.0.0.1 www.antispywarexp.com
    127.0.0.1 antispywarexp.com
    127.0.0.1 www.antispyweb.net
    127.0.0.1 antispyweb.net
    127.0.0.1 www.antiver2008.com
    127.0.0.1 antiver2008.com
    127.0.0.1 www.antivermins.com
    127.0.0.1 antivermins.com
    127.0.0.1 www.anti-vermins.com
    127.0.0.1 anti-vermins.com
    127.0.0.1 www.antivir2007.com
    127.0.0.1 antivir2007.com
    127.0.0.1 www.antivirgear.com
    127.0.0.1 antivirgear.com
    127.0.0.1 www.antivirus.fastfreedownload.com
    127.0.0.1 antivirus.fastfreedownload.com
    127.0.0.1 www.antivirus2008x.com
    127.0.0.1 antivirus2008x.com
    127.0.0.1 www.antivirusadvance.com
    127.0.0.1 antivirusadvance.com
    127.0.0.1 www.antivirusaskeladd.com
    127.0.0.1 antivirusaskeladd.com
    127.0.0.1 www.antivirusgereedschap.com
    127.0.0.1 antivirusgereedschap.com
    127.0.0.1 www.antivirusgolden.com
    127.0.0.1 antivirusgolden.com
    127.0.0.1 www.antivirus-hq.net
    127.0.0.1 antivirus-hq.net
    127.0.0.1 www.antiviruspcsuite.com
    127.0.0.1 antiviruspcsuite.com
    127.0.0.1 www.antiviruspremium.com
    127.0.0.1 antiviruspremium.com
    127.0.0.1 www.anti-virus-pro.com
    127.0.0.1 anti-virus-pro.com
    127.0.0.1 www.antivirusprotector.com
    127.0.0.1 antivirusprotector.com
    127.0.0.1 www.antivirus-scanner.com
    127.0.0.1 antivirus-scanner.com
    127.0.0.1 www.antivirusscherm.com
    127.0.0.1 antivirusscherm.com
    127.0.0.1 www.antivirussecuritypro.com
    127.0.0.1 antivirussecuritypro.com
    127.0.0.1 www.antivirus-stop.com
    127.0.0.1 antivirus-stop.com
    127.0.0.1 www.antivirussuite.com
    127.0.0.1 antivirussuite.com
    127.0.0.1 www.antiworm2008.com
    127.0.0.1 antiworm2008.com
    127.0.0.1 www.antiwurm2008.com
    127.0.0.1 antiwurm2008.com
    127.0.0.1 antrocity.com
    127.0.0.1 www.anyofus.com
    127.0.0.1 anyofus.com
    127.0.0.1 www.anysn.seproger.com
    127.0.0.1 anysn.seproger.com
    127.0.0.1 anything4health.com
    127.0.0.1 www.apicpreview.com
    127.0.0.1 apicpreview.com
    127.0.0.1 www.appealcircuit.com
    127.0.0.1 appealcircuit.com
    127.0.0.1 www.approvedlinks.com
    127.0.0.1 approvedlinks.com
    127.0.0.1 apps.deskwizz.com
    127.0.0.1 apps.webservicehost.com
    127.0.0.1 www.aprotectedpage.com
    127.0.0.1 aprotectedpage.com
    127.0.0.1 apsua.com
    127.0.0.1 www.archivioadulti.com
    127.0.0.1 archivioadulti.com
    127.0.0.1 www.archiviosex.net
    127.0.0.1 archiviosex.net
    127.0.0.1 aregay.com
    127.0.0.1 www.ares.click-new-download.com
    127.0.0.1 ares.click-new-download.com
    127.0.0.1 www.ares-freebie.com
    127.0.0.1 ares-freebie.com
    127.0.0.1 www.arespro2007.com
    127.0.0.1 arespro2007.com
    127.0.0.1 www.aresultra.com
    127.0.0.1 aresultra.com
    127.0.0.1 www.ares-usa.com
    127.0.0.1 ares-usa.com
    127.0.0.1 arheo.com
    127.0.0.1 arizonaweb.org
    127.0.0.1 armitageinn.com
    127.0.0.1 www.arquivojpgs.smtp.ru
    127.0.0.1 arquivojpgs.smtp.ru
    127.0.0.1 artachnid.com
    127.0.0.1 art-func.com
    127.0.0.1 art-xxx.com
    127.0.0.1 www.asafebrowser.com
    127.0.0.1 asafebrowser.com
    127.0.0.1 www.asafetyalways.com
    127.0.0.1 asafetyalways.com
    127.0.0.1 www.asafetynotice.com
    127.0.0.1 asafetynotice.com
    127.0.0.1 www.asafetypage.com
    127.0.0.1 asafetypage.com
    127.0.0.1 www.asdbiz.biz
    127.0.0.1 asdbiz.biz
    127.0.0.1 www.asdeykuddq.com
    127.0.0.1 asdeykuddq.com
    127.0.0.1 www.asecurebar.com
    127.0.0.1 asecurebar.com
    127.0.0.1 www.asecureboard.com
    127.0.0.1 asecureboard.com
    127.0.0.1 www.asecurevalue.com
    127.0.0.1 asecurevalue.com
    127.0.0.1 www.asecurityissue.com
    127.0.0.1 asecurityissue.com
    127.0.0.1 www.asecuritynotice.com
    127.0.0.1 asecuritynotice.com
    127.0.0.1 www.asecuritypaper.com
    127.0.0.1 asecuritypaper.com
    127.0.0.1 www.asecuritystuff.com
    127.0.0.1 asecuritystuff.com
    127.0.0.1 www.asfadaptation.com
    127.0.0.1 asfadaptation.com
    127.0.0.1 asiankingkong.com
    127.0.0.1 www.asianpornmag.com
    127.0.0.1 asianpornmag.com
    127.0.0.1 www.asiantoolbar.com
    127.0.0.1 asiantoolbar.com
    127.0.0.1 www.asidseiupc.com
    127.0.0.1 asidseiupc.com
    127.0.0.1 www.aslitalia.it
    127.0.0.1 aslitalia.it
    127.0.0.1 ass-gals.com
    127.0.0.1 www.assureprotection.com
    127.0.0.1 assureprotection.com
    127.0.0.1 asta-killer.com
    127.0.0.1 www.astrologie-server.com
    127.0.0.1 astrologie-server.com
    127.0.0.1 www.asupereva.it
    127.0.0.1 asupereva.it
    127.0.0.1 www.ataprogram.com
    127.0.0.1 ataprogram.com
    127.0.0.1 athenrye.com
    127.0.0.1 www.atotalsafety.com
    127.0.0.1 atotalsafety.com
    127.0.0.1 www.atrueprotection.com
    127.0.0.1 atrueprotection.com
    127.0.0.1 www.atruesecurity.com
    127.0.0.1 atruesecurity.com
    127.0.0.1 www.attackware.com
    127.0.0.1 attackware.com
    127.0.0.1 www.attrezzi.biz
    127.0.0.1 attrezzi.biz
    127.0.0.1 www.aucunsvirus.com
    127.0.0.1 aucunsvirus.com
    127.0.0.1 www.aulde.net
    127.0.0.1 aulde.net
    127.0.0.1 www.aupereva.it
    127.0.0.1 aupereva.it
    127.0.0.1 www.autobargains.org
    127.0.0.1 autobargains.org
    127.0.0.1 www.autobargainsnetwork.com
    127.0.0.1 autobargainsnetwork.com
    127.0.0.1 www.autocontext.begun.ru
    127.0.0.1 autocontext.begun.ru
    127.0.0.1 autoescrowpay.com
    127.0.0.1 www.avadvance.com
    127.0.0.1 avadvance.com
    127.0.0.1 www.avast.free-software-center.com
    127.0.0.1 avast.free-software-center.com
    127.0.0.1 www.avast-2007.com
    127.0.0.1 avast-2007.com
    127.0.0.1 www.avast-downloads.com
    127.0.0.1 avast-downloads.com
    127.0.0.1 www.avast-hq.com
    127.0.0.1 avast-hq.com
    127.0.0.1 www.avforce.com
    127.0.0.1 avforce.com
    127.0.0.1 www.avg.grab-it-today.net
    127.0.0.1 avg.grab-it-today.net
    127.0.0.1 www.avg.softwarecenterz.com
    127.0.0.1 avg.softwarecenterz.com
    127.0.0.1 www.avg-secure.com
    127.0.0.1 avg-secure.com
    127.0.0.1 www.aviadaptation.com
    127.0.0.1 aviadaptation.com
    127.0.0.1 avian-ads.com
    127.0.0.1 www.avicoupler.com
    127.0.0.1 avicoupler.com
    127.0.0.1 www.avideoaxaccess.com
    127.0.0.1 avideoaxaccess.com
    127.0.0.1 www.avideosurfer.com
    127.0.0.1 avideosurfer.com
    127.0.0.1 www.avidirection.com
    127.0.0.1 avidirection.com
    127.0.0.1 www.aviewersoft.com
    127.0.0.1 aviewersoft.com
    127.0.0.1 www.avihelper.com
    127.0.0.1 avihelper.com
    127.0.0.1 www.avitool.com
    127.0.0.1 avitool.com
    127.0.0.1 www.avpcheckupdate.com
    127.0.0.1 avpcheckupdate.com
    127.0.0.1 www.avsmanufacture.com
    127.0.0.1 avsmanufacture.com
    127.0.0.1 www.avsystemcare.com
    127.0.0.1 avsystemcare.com
    127.0.0.1 www.avxizaaqada.biz
    127.0.0.1 avxizaaqada.biz
    127.0.0.1 www.avxiz-anjpn.biz
    127.0.0.1 avxiz-anjpn.biz
    127.0.0.1 www.avxizueorn.biz
    127.0.0.1 avxizueorn.biz
    127.0.0.1 www.avxiz-ueorn.biz
    127.0.0.1 avxiz-ueorn.biz
    127.0.0.1 www.avxiz-vtvcp.biz
    127.0.0.1 avxiz-vtvcp.biz
    127.0.0.1 www.avxiz-ygco.biz
    127.0.0.1 avxiz-ygco.biz
    127.0.0.1 www.avxiz-zqav.biz
    127.0.0.1 avxiz-zqav.biz
    127.0.0.1 www.awarenesstech.com
    127.0.0.1 awarenesstech.com
    127.0.0.1 www.awarninglist.com
    127.0.0.1 awarninglist.com
    127.0.0.1 awbeta.net-nucleus.com
    127.0.0.1 www.awesomehomepage.com
    127.0.0.1 awesomehomepage.com
    127.0.0.1 awmcash.biz
    127.0.0.1 awmdabest.com
    127.0.0.1 www.axemediasoftware.com
    127.0.0.1 axemediasoftware.com
    127.0.0.1 www.aximageobject.com
    127.0.0.1 aximageobject.com
    127.0.0.1 www.axmediaproject.com
    127.0.0.1 axmediaproject.com
    127.0.0.1 www.axmediasoftware.com
    127.0.0.1 axmediasoftware.com
    127.0.0.1 www.axmediasolutions.com
    127.0.0.1 axmediasolutions.com
    127.0.0.1 www.axobjectpage.com
    127.0.0.1 axobjectpage.com
    127.0.0.1 www.axobjectsource.com
    127.0.0.1 axobjectsource.com
    127.0.0.1 www.axsoftwaretool.com
    127.0.0.1 axsoftwaretool.com
    127.0.0.1 www.axvideoproject.com
    127.0.0.1 axvideoproject.com
    127.0.0.1 www.axvideosetup.com
    127.0.0.1 axvideosetup.com
    127.0.0.1 ayakawamura.com
    127.0.0.1 ayb.dns-look-up.com
    127.0.0.1 ayb.netbios-wait.com
    127.0.0.1 ayumitaniguchi.com
    127.0.0.1 azebar.com
    127.0.0.1 www.azureusclub.com
    127.0.0.1 azureusclub.com
    127.0.0.1 www.azureus-freebie.com
    127.0.0.1 azureus-freebie.com
    127.0.0.1 www.azzetta.it
    127.0.0.1 azzetta.it
    127.0.0.1 b.casalemedia.com
    127.0.0.1 b122.mcboo.com
    127.0.0.1 www.babe.k-lined.com
    127.0.0.1 babe.k-lined.com
    127.0.0.1 www.babe.the-killer.bz
    127.0.0.1 babe.the-killer.bz
    127.0.0.1 www.babenet.com
    127.0.0.1 babenet.com
    127.0.0.1 www.babespornmag.com
    127.0.0.1 babespornmag.com
    127.0.0.1 www.babeweb.de
    127.0.0.1 babeweb.de
    127.0.0.1 www.baccarat-other.info
    127.0.0.1 baccarat-other.info
    127.0.0.1 www.backstripgirls.com
    127.0.0.1 backstripgirls.com
    127.0.0.1 backup.mabou.org
    127.0.0.1 www.baidu.com
    127.0.0.1 baidu.com
    127.0.0.1 www.balotierra.com
    127.0.0.1 balotierra.com
    127.0.0.1 bannedhost.net
    127.0.0.1 bar.baidu.com
    127.0.0.1 barbudafarms.com
    127.0.0.1 www.bardownload.com
    127.0.0.1 bardownload.com
    127.0.0.1 barnandfence.com
    127.0.0.1 batsearch.com
    127.0.0.1 baygraphicsllc.com
    127.0.0.1 bbbsearch.com
    127.0.0.1 bb-search.com
    127.0.0.1 www.bcnproduction.com
    127.0.0.1 bcnproduction.com
    127.0.0.1 bdsmlibrary.net
    127.0.0.1 www.bdsmpornmag.com
    127.0.0.1 bdsmpornmag.com
    127.0.0.1 www.bearshare.click-new-download.com
    127.0.0.1 bearshare.click-new-download.com
    127.0.0.1 www.bearshare.download-me.info
    127.0.0.1 bearshare.download-me.info
    127.0.0.1 www.bearshare.mp3-muzic.com
    127.0.0.1 bearshare.mp3-muzic.com
    127.0.0.1 www.bearshare-download.org
    127.0.0.1 bearshare-download.org
    127.0.0.1 www.bearshare-downloads.net
    127.0.0.1 bearshare-downloads.net
    127.0.0.1 www.bearsharelive.co.uk
    127.0.0.1 bearsharelive.co.uk
    127.0.0.1 www.bearshare-music-downloads.com
    127.0.0.1 bearshare-music-downloads.com
    127.0.0.1 www.bearsharepro2007.com
    127.0.0.1 bearsharepro2007.com
    127.0.0.1 www.bearshare-usa.com
    127.0.0.1 bearshare-usa.com
    127.0.0.1 bedhome.com
    127.0.0.1 bediadance.com
    127.0.0.1 www.beebappyy.biz
    127.0.0.1 beebappyy.biz
    127.0.0.1 www.begin2search.com
    127.0.0.1 begin2search.com
    127.0.0.1 bellabasketsfl.com
    127.0.0.1 bernaolatwin.com
    127.0.0.1 www.berufe-jobs.de
    127.0.0.1 berufe-jobs.de
    127.0.0.1 www.berufe-server.de
    127.0.0.1 berufe-server.de
    127.0.0.1 www.berufe-welt.de
    127.0.0.1 berufe-welt.de
    127.0.0.1 www.berufs-wahl.de
    127.0.0.1 berufs-wahl.de
    127.0.0.1 www.beruijindegunhadesun.com
    127.0.0.1 beruijindegunhadesun.com
    127.0.0.1 www.best3xclips.com
    127.0.0.1 best3xclips.com
    127.0.0.1 www.bestadults.com
    127.0.0.1 bestadults.com
    127.0.0.1 best-counter.com
    127.0.0.1 bestcrawler.com
    127.0.0.1 www.bestdailyvids.com
    127.0.0.1 bestdailyvids.com
    127.0.0.1 bestfor.ru
    127.0.0.1 www.bestfuckvids.com
    127.0.0.1 bestfuckvids.com
    127.0.0.1 best-hardpics.com
    127.0.0.1 www.bestmanage.org
    127.0.0.1 bestmanage.org
    127.0.0.1 www.bestmanage0.org
    127.0.0.1 bestmanage0.org
    127.0.0.1 www.bestmanage1.org
    127.0.0.1 bestmanage1.org
    127.0.0.1 www.bestmanage2.org
    127.0.0.1 bestmanage2.org
    127.0.0.1 www.bestmanage3.org
    127.0.0.1 bestmanage3.org
    127.0.0.1 www.bestmanage4.org
    127.0.0.1 bestmanage4.org
    127.0.0.1 www.bestmanage5.org
    127.0.0.1 bestmanage5.org
    127.0.0.1 www.bestmanage6.org
    127.0.0.1 bestmanage6.org
    127.0.0.1 www.bestmanage7.org
    127.0.0.1 bestmanage7.org
    127.0.0.1 www.bestmanage8.org
    127.0.0.1 bestmanage8.org
    127.0.0.1 www.bestmanage9.org
    127.0.0.1 bestmanage9.org
    127.0.0.1 www.bestmovszone.com
    127.0.0.1 bestmovszone.com
    127.0.0.1 www.bestoffersnetworks.com
    127.0.0.1 bestoffersnetworks.com
    127.0.0.1 bestporngate.com
    127.0.0.1 www.bestsafetyguide.net
    127.0.0.1 bestsafetyguide.net
    127.0.0.1 www.bestsearch.cc
    127.0.0.1 bestsearch.cc
    127.0.0.1 www.bestsearchworld.info
    127.0.0.1 bestsearchworld.info
    127.0.0.1 www.best-spyware.info
    127.0.0.1 best-spyware.info
    127.0.0.1 www.best-targeted-traffic.com
    127.0.0.1 best-targeted-traffic.com
    127.0.0.1 www.best-voyeur.info
    127.0.0.1 best-voyeur.info
    127.0.0.1 bestweblinks.com
    127.0.0.1 best-winning-casino.com
    127.0.0.1 www.bestworldgirls-for-u.net
    127.0.0.1 bestworldgirls-for-u.net
    127.0.0.1 www.bestxclips.com
    127.0.0.1 bestxclips.com
    127.0.0.1 bestxporno.com
    127.0.0.1 www.bestxxxmpegs.com
    127.0.0.1 bestxxxmpegs.com
    127.0.0.1 www.bettersearch.biz
    127.0.0.1 bettersearch.biz
    127.0.0.1 www.bgazzetta.it
    127.0.0.1 bgazzetta.it
    127.0.0.1 www.bgoogle.it
    127.0.0.1 bgoogle.it
    127.0.0.1 www.bigcodecadult.com
    127.0.0.1 bigcodecadult.com
    127.0.0.1 www.bigcodecadult2008.com
    127.0.0.1 bigcodecadult2008.com
    127.0.0.1 www.bigcodecadult2008-17.com
    127.0.0.1 bigcodecadult2008-17.com
    127.0.0.1 www.bighot18adult2008.com
    127.0.0.1 bighot18adult2008.com
    127.0.0.1 www.bighot18-adult2008.com
    127.0.0.1 bighot18-adult2008.com
    127.0.0.1 www.bighot18codec2008.com
    127.0.0.1 bighot18codec2008.com
    127.0.0.1 www.bighot18-codec2008.com
    127.0.0.1 bighot18-codec2008.com
    127.0.0.1 www.bigtrafficnetwork.com
    127.0.0.1 bigtrafficnetwork.com
    127.0.0.1 www.bigwww.com
    127.0.0.1 bigwww.com
    127.0.0.1 www.bill.de
    127.0.0.1 bill.de
    127.0.0.1 bins.media-motor.net
    127.0.0.1 bins2.media-motor.net
    127.0.0.1 bis.180solutions.com
    127.0.0.1 bitchesonline.net
    127.0.0.1 www.bitcomet-freebie.com
    127.0.0.1 bitcomet-freebie.com
    127.0.0.1 www.bittorrent.click-new-download.com
    127.0.0.1 bittorrent.click-new-download.com
    127.0.0.1 biz.biz
    127.0.0.1 www.bkvcompany.com
    127.0.0.1 bkvcompany.com
    127.0.0.1 www.blackblues00.com
    127.0.0.1 blackblues00.com
    127.0.0.1 www.blackcodec.com
    127.0.0.1 blackcodec.com
    127.0.0.1 www.blackcodec.net
    127.0.0.1 blackcodec.net
    127.0.0.1 www.blackhats.tc
    127.0.0.1 blackhats.tc
    127.0.0.1 www.blackhawksoftware.com
    127.0.0.1 blackhawksoftware.com
    127.0.0.1 blackjack-free.net
    127.0.0.1 www.blacklegion.info
    127.0.0.1 blacklegion.info
    127.0.0.1 blazefind.com
    127.0.0.1 blender.xu.pl
    127.0.0.1 www.blockcheckercontrol.com
    127.0.0.1 blockcheckercontrol.com
    127.0.0.1 blondetgp.com
    127.0.0.1 www.blue-elefant.com
    127.0.0.1 blue-elefant.com
    127.0.0.1 www.bm.theaimonline.com
    127.0.0.1 bm.theaimonline.com
    127.0.0.1 www.bnmgate.com
    127.0.0.1 bnmgate.com
    127.0.0.1 bodaciousbabette.com
    127.0.0.1 www.bonzi.com
    127.0.0.1 bonzi.com
    127.0.0.1 boobdoll.com
    127.0.0.1 boobsandtits.com
    127.0.0.1 boobsclub.com
    127.0.0.1 www.bookedspace.com
    127.0.0.1 bookedspace.com
    127.0.0.1 www.boom.com.vn
    127.0.0.1 boom.com.vn
    127.0.0.1 www.boomgirltv.com
    127.0.0.1 boomgirltv.com
    127.0.0.1 boredlife.com
    127.0.0.1 bowlofogumbo.com
    127.0.0.1 www.bpfq02.com
    127.0.0.1 bpfq02.com
    127.0.0.1 www.bqgate.com
    127.0.0.1 bqgate.com
    127.0.0.1 bradcoem.org
    127.0.0.1 www.braincodec.com
    127.0.0.1 braincodec.com
    127.0.0.1 brandiyoung.com
    127.0.0.1 www.bravesentry.com
    127.0.0.1 bravesentry.com
    127.0.0.1 www.breenten.biz
    127.0.0.1 breenten.biz
    127.0.0.1 www.brodbfm.net
    127.0.0.1 brodbfm.net
    127.0.0.1 brookeburn.com
    127.0.0.1 www.browserwise.com
    127.0.0.1 browserwise.com
    127.0.0.1 bsa.safetydownload.com
    127.0.0.1 www.bsplaycodec.com
    127.0.0.1 bsplaycodec.com
    127.0.0.1 bucps.com
    127.0.0.1 buhartes.info
    127.0.0.1 buldog-stats.com
    127.0.0.1 www.bullseye-network.com
    127.0.0.1 bullseye-network.com
    127.0.0.1 burgerkingbigscreen.com
    127.0.0.1 www.burningsite.com
    127.0.0.1 burningsite.com
    127.0.0.1 www.burnsrecyclinginc.com
    127.0.0.1 burnsrecyclinginc.com
    127.0.0.1 buscards.net
    127.0.0.1 bustyrussell.com
    127.0.0.1 www.busysearch.net
    127.0.0.1 busysearch.net
    127.0.0.1 buttejazz.org
    127.0.0.1 www.buy-find.info
    127.0.0.1 buy-find.info
    127.0.0.1 buyselldomain.net
    127.0.0.1 www.buytraff.biz
    127.0.0.1 buytraff.biz
    127.0.0.1 buz.ru
    127.0.0.1 www.bvdtechinque.com
    127.0.0.1 bvdtechinque.com
    127.0.0.1 www.bvirgilio.it
    127.0.0.1 bvirgilio.it
    127.0.0.1 c.centralmedia.ws
    127.0.0.1 www.c.enhance.com
    127.0.0.1 c.enhance.com
    127.0.0.1 c.goclick.com
    127.0.0.1 www.c4tdownload.com
    127.0.0.1 c4tdownload.com
    127.0.0.1 www.c5.www4free.info
    127.0.0.1 c5.www4free.info
    127.0.0.1 www.cache.surfaccuracy.com
    127.0.0.1 cache.surfaccuracy.com
    127.0.0.1 cache.ysbweb.com
    127.0.0.1 www.cadesfinjeriokas.com
    127.0.0.1 cadesfinjeriokas.com
    127.0.0.1 calcioturris.com
    127.0.0.1 www.calendaralerts.net
    127.0.0.1 calendaralerts.net
    127.0.0.1 www.callinghome.biz
    127.0.0.1 callinghome.biz
    127.0.0.1 www.cameouk.co.uk
    127.0.0.1 cameouk.co.uk
    127.0.0.1 cameup.com
    127.0.0.1 www.camouflageclothingonline.net
    127.0.0.1 camouflageclothingonline.net
    127.0.0.1 campaigns.outerinfo.net
    127.0.0.1 camup.net
    127.0.0.1 canberracricketcoaching.com
    127.0.0.1 candycantaloupes.com
    127.0.0.1 www.canidetect.org
    127.0.0.1 canidetect.org
    127.0.0.1 www.cantfind.com
    127.0.0.1 cantfind.com
    127.0.0.1 careers.dulcineasystems.net
    127.0.0.1 carsands.com
    127.0.0.1 carsrentals.net
    127.0.0.1 cartoes.uol.com.br
    127.0.0.1 www.casalemedia.com
    127.0.0.1 casalemedia.com
    127.0.0.1 www.cashdeluxe.net
    127.0.0.1 cashdeluxe.net
    127.0.0.1 www.cashengines.com
    127.0.0.1 cashengines.com
    127.0.0.1 cashsearch.biz
    127.0.0.1 www.cashsurfers.com
    127.0.0.1 cashsurfers.com
    127.0.0.1 www.cashunlim.com
    127.0.0.1 cashunlim.com
    127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
    127.0.0.1 casino2win.net
    127.0.0.1 casino-gambling-1.net
    127.0.0.1 casino-gambling-2.net
    127.0.0.1 casinomidas.net
    127.0.0.1 casinonline.net
    127.0.0.1 casino-onlines.net
    127.0.0.1 www.castingsamateur.com
    127.0.0.1 castingsamateur.com
    127.0.0.1 catallogue.com
    127.0.0.1 www.catch-dc.info
    127.0.0.1 catch-dc.info
    127.0.0.1 categories.mygeek.com
    127.0.0.1 catsss.da.ru
    127.0.0.1 caxa.ru
    127.0.0.1 cazygirls-world.com
    127.0.0.1 cc.panet.org
    127.0.0.1 www.ccecaedbebfcaf.com
    127.0.0.1 ccecaedbebfcaf.com
    127.0.0.1 cclebali.org
    127.0.0.1 www.ccorriere.it
    127.0.0.1 ccorriere.it
    127.0.0.1 www.cdcopysite.com
    127.0.0.1 cdcopysite.com
    127.0.0.1 www.cdegate.com
    127.0.0.1 cdegate.com
    127.0.0.1 cdn.movies-etc.com
    127.0.0.1 cdn2.movies-etc.com
    127.0.0.1 www.cdorriere.it
    127.0.0.1 cdorriere.it
    127.0.0.1 ceewawires.org
    127.0.0.1 centralmedia.ws
    127.0.0.1 certumgroup.com
    127.0.0.1 www.cforriere.it
    127.0.0.1 cforriere.it
    127.0.0.1 www.check.jupitersatellites.biz
    127.0.0.1 check.jupitersatellites.biz
    127.0.0.1 www.checkin100.com
    127.0.0.1 checkin100.com
    127.0.0.1 www.checkssecurity.com
    127.0.0.1 checkssecurity.com
    127.0.0.1 chelancatering.com
    127.0.0.1 www.chenshijituan.com
    127.0.0.1 chenshijituan.com
    127.0.0.1 childrenvilla.com
    127.0.0.1 www.chilly3xvids.com
    127.0.0.1 chilly3xvids.com
    127.0.0.1 www.chillymovs.com
    127.0.0.1 chillymovs.com
    127.0.0.1 chips-4-free.com
    127.0.0.1 chrisswasey.com
    127.0.0.1 chriswallace.net
    127.0.0.1 www.cia-trjn.myvnc.com
    127.0.0.1 cia-trjn.myvnc.com
    127.0.0.1 www.cinemadownload.com
    127.0.0.1 cinemadownload.com
    127.0.0.1 www.ciorriere.it
    127.0.0.1 ciorriere.it
    127.0.0.1 www.cirriere.it
    127.0.0.1 cirriere.it
    127.0.0.1 www.citycodec.com
    127.0.0.1 citycodec.com
    127.0.0.1 ckick4thumbs.com
    127.0.0.1 cl55.biz
    127.0.0.1 clackamasliteraryreview.com
    127.0.0.1 www.clckm.com
    127.0.0.1 clckm.com
    127.0.0.1 www.cleancodec.com
    127.0.0.1 cleancodec.com
    127.0.0.1 www.cleansoftwares.com
    127.0.0.1 cleansoftwares.com
    127.0.0.1 clearsearch.cc
    127.0.0.1 clearsearch.net
    127.0.0.1 clickaire.com
    127.0.0.1 www.click-codec.com
    127.0.0.1 click-codec.com
    127.0.0.1 www.clickhere4search.com
    127.0.0.1 clickhere4search.com
    127.0.0.1 www.click-new-download.com
    127.0.0.1 click-new-download.com
    127.0.0.1 click-now.net
    127.0.0.1 www.clickspring.net
    127.0.0.1 clickspring.net
    127.0.0.1 www.click-to-download.com
    127.0.0.1 click-to-download.com
    127.0.0.1 www.clicktomakeasearch.com
    127.0.0.1 clicktomakeasearch.com
    127.0.0.1 clickyestoenter.net
    127.0.0.1 client.exeupdate.com
    127.0.0.1 client.myadultexplorer.com
    127.0.0.1 www.cliks.org
    127.0.0.1 cliks.org
    127.0.0.1 www.clipsfestival.com
    127.0.0.1 clipsfestival.com
    127.0.0.1 www.clipsreality.com
    127.0.0.1 clipsreality.com
    127.0.0.1 www.clorriere.it
    127.0.0.1 clorriere.it
    127.0.0.1 clrsch.com
    127.0.0.1 www.clubxxxvideo.com
    127.0.0.1 clubxxxvideo.com
    127.0.0.1 clusif.free.fr
    127.0.0.1 cmtapestry.com
    127.0.0.1 www.cnetadd.com
    127.0.0.1 cnetadd.com
    127.0.0.1 www.cnomy.com
    127.0.0.1 cnomy.com
    127.0.0.1 www.cnzz.com
    127.0.0.1 cnzz.com
    127.0.0.1 www.cocktails-ideen.de
    127.0.0.1 cocktails-ideen.de
    127.0.0.1 code.ignphrases.com
    127.0.0.1 codec.ninoa.com
    127.0.0.1 www.codecadult18.com
    127.0.0.1 codecadult18.com
    127.0.0.1 www.codecbest.com
    127.0.0.1 codecbest.com
    127.0.0.1 www.codecbsplay.com
    127.0.0.1 codecbsplay.com
    127.0.0.1 www.codecdemo.com
    127.0.0.1 codecdemo.com
    127.0.0.1 www.codecdvd.net
    127.0.0.1 codecdvd.net
    127.0.0.1 www.codecdvi.com
    127.0.0.1 codecdvi.com
    127.0.0.1 www.codec-fun.com
    127.0.0.1 codec-fun.com
    127.0.0.1 www.codechard.com
    127.0.0.1 codechard.com
    127.0.0.1 www.codechot.net
    127.0.0.1 codechot.net
    127.0.0.1 www.codechq.net
    127.0.0.1 codechq.net
    127.0.0.1 www.codecmeg.net
    127.0.0.1 codecmeg.net
    127.0.0.1 www.codecmega.com
    127.0.0.1 codecmega.com
    127.0.0.1 www.codecmega.net
    127.0.0.1 codecmega.net
    127.0.0.1 www.codecmoon.com
    127.0.0.1 codecmoon.com
    127.0.0.1 www.codecmpg.com
    127.0.0.1 codecmpg.com
    127.0.0.1 www.codecnice.net
    127.0.0.1 codecnice.net
    127.0.0.1 www.codecnitro.com
    127.0.0.1 codecnitro.com
    127.0.0.1 www.codecops.net
    127.0.0.1 codecops.net
    127.0.0.1 www.codecplay.com
    127.0.0.1 codecplay.com
    127.0.0.1 www.codecpretty.net
    127.0.0.1 codecpretty.net
    127.0.0.1 www.codecpro.net
    127.0.0.1 codecpro.net
    127.0.0.1 www.codecred.net
    127.0.0.1 codecred.net
    127.0.0.1 www.codecsoft.net
    127.0.0.1 codecsoft.net
    127.0.0.1 www.codectime.com
    127.0.0.1 codectime.com
    127.0.0.1 www.codecultra.net
    127.0.0.1 codecultra.net
    127.0.0.1 www.codecvids.com
    127.0.0.1 codecvids.com
    127.0.0.1 www.codecvip.com
    127.0.0.1 codecvip.com
    127.0.0.1 www.codecviva.com
    127.0.0.1 codecviva.com
    127.0.0.1 www.codeczang.net
    127.0.0.1 codeczang.net
    127.0.0.1 www.codrriere.it
    127.0.0.1 codrriere.it
    127.0.0.1 www.coeriere.it
    127.0.0.1 coeriere.it
    127.0.0.1 www.coerriere.it
    127.0.0.1 coerriere.it
    127.0.0.1 www.cofrriere.it
    127.0.0.1 cofrriere.it
    127.0.0.1 www.cogrriere.it
    127.0.0.1 cogrriere.it
    127.0.0.1 www.coirriere.it
    127.0.0.1 coirriere.it
    127.0.0.1 command.adservs.com
    127.0.0.1 www.commonname.com
    127.0.0.1 www.computerpcgames.net
    127.0.0.1 computerpcgames.net
    127.0.0.1 www.computerrecover.com
    127.0.0.1 computerrecover.com
    127.0.0.1 config.180solutions.com
    127.0.0.1 www.content.dollarrevenue.com
    127.0.0.1 content.dollarrevenue.com
    127.0.0.1 www.content.ireit.com
    127.0.0.1 content.ireit.com
    127.0.0.1 content.onerateld.com
    127.0.0.1 www.contentmatch.net
    127.0.0.1 contentmatch.net
    127.0.0.1 www.contextplus.net
    127.0.0.1 contextplus.net
    127.0.0.1 www.contra-virus.com
    127.0.0.1 contra-virus.com
    127.0.0.1 www.controlmeh.com
    127.0.0.1 controlmeh.com
    127.0.0.1 www.convenient-search.com
    127.0.0.1 convenient-search.com
    127.0.0.1 www.cookingluck.com
    127.0.0.1 cookingluck.com
    127.0.0.1 www.cooldeskalert.com
    127.0.0.1 cooldeskalert.com
    127.0.0.1 coolfetishsite.com
    127.0.0.1 coolfreehost.com
    127.0.0.1 coolfreepage.com
    127.0.0.1 coolfreepages.com
    127.0.0.1 cool-homepage.co
    127.0.0.1 cool-homepage.com
    127.0.0.1 coolmoneysearch.com
    127.0.0.1 www.coolonlinebusiness.com
    127.0.0.1 coolonlinebusiness.com
    127.0.0.1 coolpornsearch.com
    127.0.0.1 cool-search.net
    127.0.0.1 cool-search.netfartpost.com
    127.0.0.1 coolsearcher.info
    127.0.0.1 www.coolservecorp.net
    127.0.0.1 coolservecorp.net
    127.0.0.1 www.coolwebsearch.com
    127.0.0.1 coolwebsearch.com
    127.0.0.1 cool-web-search.com
    127.0.0.1 coolwebsearsh.com
    127.0.0.1 www.coolwwwsearch.com
    127.0.0.1 coolwwwsearch.com
    127.0.0.1 cool-xxx.net
    127.0.0.1 www.coorriere.it
    127.0.0.1 coorriere.it
    127.0.0.1 copmtraine.com
    127.0.0.1 www.coprriere.it
    127.0.0.1 coprriere.it
    127.0.0.1 www.core.psyche-evolution.com
    127.0.0.1 core.psyche-evolution.com
    127.0.0.1 www.coreiere.it
    127.0.0.1 coreiere.it
    127.0.0.1 www.coreriere.it
    127.0.0.1 coreriere.it
    127.0.0.1 www.corrdiere.it
    127.0.0.1 corrdiere.it
    127.0.0.1 www.correiere.it
    127.0.0.1 correiere.it
    127.0.0.1 www.corrfiere.it
    127.0.0.1 corrfiere.it
    127.0.0.1 www.corrgiere.it
    127.0.0.1 corrgiere.it
    127.0.0.1 www.corridere.it
    127.0.0.1 corridere.it
    127.0.0.1 www.corriedre.it
    127.0.0.1 corriedre.it
    127.0.0.1 www.corriee.it
    127.0.0.1 corriee.it
    127.0.0.1 www.corrieere.it
    127.0.0.1 corrieere.it
    127.0.0.1 www.corriefre.it
    127.0.0.1 corriefre.it
    127.0.0.1 www.corriegre.it
    127.0.0.1 corriegre.it
    127.0.0.1 www.corrierde.it
    127.0.0.1 corrierde.it
    127.0.0.1 www.corriered.it
    127.0.0.1 corriered.it
    127.0.0.1 www.corrieree.it
    127.0.0.1 corrieree.it
    127.0.0.1 www.corrieref.it
    127.0.0.1 corrieref.it
    127.0.0.1 www.corrierer.it
    127.0.0.1 corrierer.it
    127.0.0.1 www.corrieres.it
    127.0.0.1 corrieres.it
    127.0.0.1 www.corrierew.it
    127.0.0.1 corrierew.it
    127.0.0.1 www.corrierfe.it
    127.0.0.1 corrierfe.it
    127.0.0.1 www.corrierge.it
    127.0.0.1 corrierge.it
    127.0.0.1 www.corrierr.it
    127.0.0.1 corrierr.it
    127.0.0.1 www.corrierre.it
    127.0.0.1 corrierre.it
    127.0.0.1 www.corrierse.it
    127.0.0.1 corrierse.it
    127.0.0.1 www.corrierte.it
    127.0.0.1 corrierte.it
    127.0.0.1 www.corrierw.it
    127.0.0.1 corrierw.it
    127.0.0.1 www.corrierwe.it
    127.0.0.1 corrierwe.it
    127.0.0.1 www.corriesre.it
    127.0.0.1 corriesre.it
    127.0.0.1 www.corriete.it
    127.0.0.1 corriete.it
    127.0.0.1 www.corrietre.it
    127.0.0.1 corrietre.it
    127.0.0.1 www.corriewre.it
    127.0.0.1 corriewre.it
    127.0.0.1 www.corrifere.it
    127.0.0.1 corrifere.it
    127.0.0.1 www.corriiere.it
    127.0.0.1 corriiere.it
    127.0.0.1 www.corrilere.it
    127.0.0.1 corrilere.it
    127.0.0.1 www.corrioere.it
    127.0.0.1 corrioere.it
    127.0.0.1 www.corrire.it
    127.0.0.1 corrire.it
    127.0.0.1 www.corrirere.it
    127.0.0.1 corrirere.it
    127.0.0.1 www.corrirre.it
    127.0.0.1 corrirre.it
    127.0.0.1 www.corrisere.it
    127.0.0.1 corrisere.it
    127.0.0.1 www.corriuere.it
    127.0.0.1 corriuere.it
    127.0.0.1 www.corriwere.it
    127.0.0.1 corriwere.it
    127.0.0.1 www.corriwre.it
    127.0.0.1 corriwre.it
    127.0.0.1 www.corrliere.it
    127.0.0.1 corrliere.it
    127.0.0.1 www.corroere.it
    127.0.0.1 corroere.it
    127.0.0.1 www.corroiere.it
    127.0.0.1 corroiere.it
    127.0.0.1 www.corrriere.it
    127.0.0.1 corrriere.it
    127.0.0.1 www.corrtiere.it
    127.0.0.1 corrtiere.it
    127.0.0.1 www.corruere.it
    127.0.0.1 corruere.it
    127.0.0.1 www.corruiere.it
    127.0.0.1 corruiere.it
    127.0.0.1 www.cortiere.it
    127.0.0.1 cortiere.it
    127.0.0.1 www.cortriere.it
    127.0.0.1 cortriere.it
    127.0.0.1 www.costrike.com
    127.0.0.1 costrike.com
    127.0.0.1 www.cotriere.it
    127.0.0.1 cotriere.it
    127.0.0.1 www.cotrriere.it
    127.0.0.1 cotrriere.it
    127.0.0.1 couldnotfind.com
    127.0.0.1 count.cc
    127.0.0.1 count.hitscount.net
    127.0.0.1 count-all.com
    127.0.0.1 www.countdutycall.info
    127.0.0.1 countdutycall.info
    127.0.0.1 counter.sexmaniack.com
    127.0.0.1 www.courtrecordslookup.com
    127.0.0.1 courtrecordslookup.com
    127.0.0.1 www.cporriere.it
    127.0.0.1 cporriere.it
    127.0.0.1 www.cprriere.it
    127.0.0.1 cprriere.it
    127.0.0.1 cpvfeed.com
    127.0.0.1 cracks.me.uk
    127.0.0.1 www.cracks4all.com
    127.0.0.1 cracks4all.com
    127.0.0.1 www.crapsgold.info
    127.0.0.1 crapsgold.info
    127.0.0.1 crazygirls-world.com
    127.0.0.1 www.crazywinnings.com
    127.0.0.1 crazywinnings.com
    127.0.0.1 creamedcutties.com
    127.0.0.1 www.createaccesskey.com
    127.0.0.1 createaccesskey.com
    127.0.0.1 www.creatonsoft.com
    127.0.0.1 creatonsoft.com
    127.0.0.1 creditsearchonline.com
    127.0.0.1 crestring.com
    127.0.0.1 crooder.com
    127.0.0.1 www.crriere.it
    127.0.0.1 crriere.it
    127.0.0.1 www.cryptdrive.com
    127.0.0.1 cryptdrive.com
    127.0.0.1 www.crystalysmedia.com
    127.0.0.1 crystalysmedia.com
    127.0.0.1 www.csx.adservs.com
    127.0.0.1 csx.adservs.com
    127.0.0.1 cts.180solutions.com
    127.0.0.1 www.cuisinartoven.com
    127.0.0.1 cuisinartoven.com
    127.0.0.1 www.curedc.info
    127.0.0.1 curedc.info
    127.0.0.1 www.curepcsolutions.com
    127.0.0.1 curepcsolutions.com
    127.0.0.1 curvedspaces.com
    127.0.0.1 www.cutadult.com
    127.0.0.1 cutadult.com
    127.0.0.1 www.cvirgilio.it
    127.0.0.1 cvirgilio.it
    127.0.0.1 www.cvorriere.it
    127.0.0.1 cvorriere.it
    127.0.0.1 cvs.jps.ru
    127.0.0.1 cvsymphony.com
    127.0.0.1 www.cxorriere.it
    127.0.0.1 cxorriere.it
    127.0.0.1 www.cyberrape.com
    127.0.0.1 cyberrape.com
    127.0.0.1 cydom.com
    127.0.0.1 www.cydoor.com
    127.0.0.1 cydoor.com
    127.0.0.1 www.daily3xlinks.com
    127.0.0.1 daily3xlinks.com
    127.0.0.1 www.dailybestclips.com
    127.0.0.1 dailybestclips.com
    127.0.0.1 daily-gals.com
    127.0.0.1 www.dailyhugemovs.com
    127.0.0.1 dailyhugemovs.com
    127.0.0.1 www.dailykeys.com
    127.0.0.1 dailykeys.com
    127.0.0.1 www.dailypornmag.com
    127.0.0.1 dailypornmag.com
    127.0.0.1 dailyteenspic.com
    127.0.0.1 www.dailytoolbar.com
    127.0.0.1 dailytoolbar.com
    127.0.0.1 www.dailyxvids.com
    127.0.0.1 dailyxvids.com
    127.0.0.1 dancingbabycd.com
    127.0.0.1 www.dapsol.com
    127.0.0.1 dapsol.com
    127.0.0.1 www.dapsolution.com
    127.0.0.1 dapsolution.com
    127.0.0.1 www.data-hoster.com
    127.0.0.1 data-hoster.com
    127.0.0.1 datanotary.com
    127.0.0.1 datareco.com
    127.0.0.1 www.dateanybabe.com
    127.0.0.1 dateanybabe.com
    127.0.0.1 www.dateanychick.com
    127.0.0.1 dateanychick.com
    127.0.0.1 www.datingdoctorsite.com
    127.0.0.1 datingdoctorsite.com
    127.0.0.1 www.dating-galaxy.info
    127.0.0.1 dating-galaxy.info
    127.0.0.1 dating-search.net
    127.0.0.1 davemarshall.org
    127.0.0.1 db105.com
    127.0.0.1 www.dbdecicated.com
    127.0.0.1 dbdecicated.com
    127.0.0.1 www.dbxcompany.com
    127.0.0.1 dbxcompany.com
    127.0.0.1 dcdl.dmcast.com
    127.0.0.1 dcfitusa.com
    127.0.0.1 www.dcorriere.it
    127.0.0.1 dcorriere.it
    127.0.0.1 www.dcurtis.com
    127.0.0.1 dcurtis.com
    127.0.0.1 dcww.dmcast.com
    127.0.0.1 de.ag
    127.0.0.1 de.drivecleaner.com
    127.0.0.1 de98.remsys.org
    127.0.0.1 www.debay.it
    127.0.0.1 debay.it
    127.0.0.1 www.decknews.com
    127.0.0.1 decknews.com
    127.0.0.1 dedmazay.3322.org
    127.0.0.1 www.dedsearch.com
    127.0.0.1 dedsearch.com
    127.0.0.1 defaultsearch.net
    127.0.0.1 www.defensaantimalware.com
    127.0.0.1 defensaantimalware.com
    127.0.0.1 www.deja-rue.com
    127.0.0.1 deja-rue.com
    127.0.0.1 www.delficodec.com
    127.0.0.1 delficodec.com
    127.0.0.1 www.democodec.com
    127.0.0.1 democodec.com
    127.0.0.1 www.derklaif.biz
    127.0.0.1 derklaif.biz
    127.0.0.1 www.derrari.it
    127.0.0.1 derrari.it
    127.0.0.1 desarrollocreativo.com
    127.0.0.1 www.deskbar.worldtostart.com
    127.0.0.1 deskbar.worldtostart.com
    127.0.0.1 www.deskwizz.com
    127.0.0.1 deskwizz.com
    127.0.0.1 www.destroy-spyware.net
    127.0.0.1 destroy-spyware.net
    127.0.0.1 www.destruktor.to.pl
    127.0.0.1 destruktor.to.pl
    127.0.0.1 www.detectivehound.com
    127.0.0.1 detectivehound.com
    127.0.0.1 www.detectivesearches.com
    127.0.0.1 detectivesearches.com
    127.0.0.1 dev.ntcor.com
    127.0.0.1 develip.com
    127.0.0.1 dewis.spb.ru
    127.0.0.1 dewis.us
    127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
    127.0.0.1 www.dgbusiness.com
    127.0.0.1 dgbusiness.com
    127.0.0.1 dialer2004.com
    127.0.0.1 www.dialerclub.com
    127.0.0.1 dialerclub.com
    127.0.0.1 www.dialer-shop.com
    127.0.0.1 dialer-shop.com
    127.0.0.1 www.dialoff.com
    127.0.0.1 dialoff.com
    127.0.0.1 www.did.i-used.cc
    127.0.0.1 did.i-used.cc
    127.0.0.1 dietpills4free.com
    127.0.0.1 dietpussy.com
    127.0.0.1 www.digikeygen.com
    127.0.0.1 digikeygen.com
    127.0.0.1 digistreamsa.com
    127.0.0.1 www.digitalcoders.net
    127.0.0.1 digitalcoders.net
    127.0.0.1 www.digitalfan.com
    127.0.0.1 digital-pornography.com
    127.0.0.1 dionforvalleycouncil.org
    127.0.0.1 www.directdvdpro.com
    127.0.0.1 directdvdpro.com
    127.0.0.1 www.directnameservice.com
    127.0.0.1 directnameservice.com
    127.0.0.1 www.directporta.info
    127.0.0.1 directporta.info
    127.0.0.1 www.directsearchzone.com
    127.0.0.1 directsearchzone.com
    127.0.0.1 www.diskretter.com
    127.0.0.1 diskretter.com
    127.0.0.1 dist.checkin100.com
    127.0.0.1 dl.ad-ware.cc
    127.0.0.1 dl.malwarewipe.com
    127.0.0.1 dl.mcboo.com
    127.0.0.1 www.dl.targetsaver.com
    127.0.0.1 dl.targetsaver.com
    127.0.0.1 dl.web-nexus.net
    127.0.0.1 dl1.antivermins.com
    127.0.0.1 dl1.antivirgear.com
    127.0.0.1 dl1.spydawn.com
    127.0.0.1 dl1.virusprotectpro.com
    127.0.0.1 dl1
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. leunam78 Messages postés 117 Statut Membre 1
     
    j'ai l'impression que tu n'as pas le rapport entier?
    0
  7. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    non il est incomplet

    bon
    recolle un rapport hijakchits et dis tes soucis
    0
  8. Anonyme
     
    Bonjour (et veuillez m'excuser par avance pour l'intrusion),

    Recherche avec Google ; "virus cafard mange mon ecran" :

    https://www.google.fr/search?hl=fr&q=virus+cafard+mange+mon+ecran&gws_rd=ssl

    Si vous avez fait une ou des vidéos ou que vous avez des liens ça nous intéressent ; merci ...

    Recherche avec Google ; "video virus cafard mange mon ecran" :

    https://www.google.fr/search?hl=fr&q=video+virus+cafard+mange+mon+ecran&gws_rd=ssl

    Merci (et pardon pour le dérangement).
    0
  9. leunam78 Messages postés 117 Statut Membre 1
     
    bonjour, pour l'instant tout a l'air d'etre impec
    j'ai toujour un fond ecran bleu mais plus le meme du tout
    pas de bebetes a l'horizon
    merci pour tout si tout s'arrete la voici le rapport hijack demamde
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 07:50:43, on 09/06/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16640)
    Boot mode: Normal

    Running processes:
    E:\WINDOWS\System32\smss.exe
    E:\WINDOWS\system32\winlogon.exe
    E:\WINDOWS\system32\services.exe
    E:\WINDOWS\system32\lsass.exe
    E:\WINDOWS\System32\Ati2evxx.exe
    E:\WINDOWS\system32\svchost.exe
    E:\WINDOWS\System32\svchost.exe
    E:\WINDOWS\System32\ACS.exe
    E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    E:\Program Files\Alwil Software\Avast4\ashServ.exe
    E:\WINDOWS\system32\spoolsv.exe
    E:\Program Files\a-squared Free\a2service.exe
    E:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    E:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
    E:\Program Files\Bonjour\mDNSResponder.exe
    E:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    E:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
    E:\WINDOWS\System32\svchost.exe
    E:\WINDOWS\system32\Ati2evxx.exe
    E:\WINDOWS\Explorer.EXE
    E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    E:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
    E:\WINDOWS\AGRSMMSG.exe
    E:\WINDOWS\system32\WgaTray.exe
    E:\WINDOWS\system32\TPSMain.exe
    E:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    E:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    E:\Program Files\TOSHIBA\PadTouch\PadExe.exe
    E:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
    E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    E:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
    E:\WINDOWS\system32\LVCOMSX.EXE
    E:\Program Files\Logitech\Video\LogiTray.exe
    E:\Program Files\iTunes\iTunesHelper.exe
    E:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
    E:\WINDOWS\system32\TPSBattM.exe
    E:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    E:\WINDOWS\system32\ctfmon.exe
    E:\Program Files\Logitech\Video\FxSvr2.exe
    E:\Program Files\iPod\bin\iPodService.exe
    E:\WINDOWS\system32\wuauclt.exe
    E:\Program Files\Windows Live\Messenger\usnsvc.exe
    E:\Program Files\Internet Explorer\iexplore.exe
    E:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    E:\Documents and Settings\Manu\Bureau\virus\HiJackThis.exe

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - E:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
    O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
    O4 - HKLM\..\Run: [ATIPTA] E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [THotkey] E:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
    O4 - HKLM\..\Run: [SynTPLpr] E:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] E:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [PadTouch] "E:\Program Files\TOSHIBA\PadTouch\PadExe.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] E:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
    O4 - HKLM\..\Run: [avast!] E:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "E:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
    O4 - HKLM\..\Run: [LVCOMSX] E:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] E:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] E:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "E:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [spa_start] E:\WINDOWS\System32\Rundll32.exe "E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll" DllInit
    O4 - HKLM\..\Run: [{31dec895-8270-d8a1-97c5-47639609fe34}] E:\WINDOWS\System32\Rundll32.exe "E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll" DllInit
    O4 - HKCU\..\Run: [TOSCDSPD] E:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
    O4 - HKCU\..\Run: [MsnMsgr] "E:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [DigiClock] none
    O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "E:\Program Files\Logitech\Video\ManifestEngine.exe" boot
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = E:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office\OSA9.EXE
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: (no name) - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - (no file)
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: e:\windows\system32\nwprovau.dll
    O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - E:\Program Files\a-squared Free\a2service.exe
    O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - E:\WINDOWS\System32\ACS.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - E:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - Unknown owner - E:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: Autodata Limited License Service - Autodata Limited - E:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
    O23 - Service: avast! Antivirus - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - E:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Boonty Games - BOONTY - E:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
    O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - E:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - E:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: NBService - Nero AG - E:\Program Files\Nero\Nero 7\Nero 7\Nero BackItUp\NBService.exe
    0
  10. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked".

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O4 - HKLM\..\Run: [SunJavaUpdateSched] "E:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

    O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\QTTask.exe" -atboottime

    O4 - HKLM\..\Run: [iTunesHelper] "E:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [spa_start] E:\WINDOWS\System32\Rundll32.exe "E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll" DllInit
    O4 - HKLM\..\Run: [{31dec895-8270-d8a1-97c5-47639609fe34}] E:\WINDOWS\System32\Rundll32.exe "E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll" DllInit
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = E:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office\OSA9.EXE
    O9 - Extra button: (no name) - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - (no file)
    ____________________

    télécharge OTMoveIt
    http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe (de Old_Timer) sur ton Bureau. Ou sur https://www.luanagames.com/index.fr.html
    double-clique sur OTMoveIt.exe pour le lancer.
    copie la liste qui se trouve en citation ci-dessous,
    et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

    Citation :

    E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll
    E:\WINDOWS\System32\Rundll32.exe "E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll

    clique sur MoveIt! pour lancer la suppression.
    le résultat apparaitra dans le cadre "Results".
    clique sur Exit pour fermer.
    poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

    il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

    ________________

    télécharge combofix (par sUBs) ici :

    http://download.bleepingcomputer.com/sUBs/ComboFix.exe

    et enregistre le sur le bureau.

    déconnecte toi d'internet et ferme toutes tes applications.

    désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

    double-clique sur combofix.exe et suis les instructions

    à la fin, il va produire un rapport C:\ComboFix.txt

    réactive ton parefeu, ton antivirus, la garde de ton antispyware

    copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

    Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

    Tu as un tutoriel complet ici :

    https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
    0
  11. leunam78 Messages postés 117 Statut Membre 1
     
    bonsoir!! voila les rapports demander

    File/Folder E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll not found.
    File/Folder E:\WINDOWS\System32\Rundll32.exe "E:\WINDOWS\system32\{457a2186-d7dd-fcd9-2751-130dec1f23e1}.dll not found.

    OTMoveIt2 by OldTimer - Version 1.0.4.2 log created on 06102008_205614

    ComboFix 08-06-09.7 - Manu 2008-06-10 21:21:07.1 - NTFSx86
    Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.41 [GMT 2:00]Endroit: E:\Documents and Settings\Manu\Bureau\virus\ComboFix.exe
    * Création d'un nouveau point de restauration

    [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
    .

    (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
    .

    E:\Documents and Settings\LocalService\Application Data\1027743438.exe
    E:\WINDOWS\system32\cpmsky-uninst.exe
    E:\WINDOWS\system32\uninstall.exe

    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_CBEVTSVC
    -------\Legacy_GRANDE48
    -------\Legacy_NWSAPAGENT
    -------\Service_NwSapAgent

    ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-05-10 to 2008-06-10 ))))))))))))))))))))))))))))))))))))
    .

    2008-06-10 20:56 . 2008-06-10 20:56 <REP> d----c--- E:\_OTMoveIt
    2008-06-08 11:23 . 2008-06-08 11:23 <REP> d----c--- E:\Program Files\Microsoft CAPICOM 2.1.0.2
    2008-06-08 11:22 . 2008-06-08 11:22 268 --ah-c--- E:\sqmdata17.sqm
    2008-06-08 11:22 . 2008-06-08 11:22 244 --ah-c--- E:\sqmnoopt17.sqm
    2008-06-08 00:16 . 2008-06-08 00:16 268 --ah-c--- E:\sqmdata16.sqm
    2008-06-08 00:16 . 2008-06-08 00:16 244 --ah-c--- E:\sqmnoopt16.sqm
    2008-06-07 23:13 . 2008-06-07 23:13 268 --ah-c--- E:\sqmdata15.sqm
    2008-06-07 23:13 . 2008-06-07 23:13 244 --ah-c--- E:\sqmnoopt15.sqm
    2008-06-07 22:22 . 2008-06-08 11:32 3,718 --a--c--- E:\WINDOWS\system32\tmp.reg
    2008-06-07 22:08 . 2008-06-07 22:08 <REP> d----c--- E:\Program Files\Malwarebytes' Anti-Malware
    2008-06-07 22:08 . 2008-06-07 22:08 <REP> d----c--- E:\Documents and Settings\Manu\Application Data\Malwarebytes
    2008-06-07 22:08 . 2008-06-07 22:08 <REP> d----c--- E:\Documents and Settings\All Users\Application Data\Malwarebytes
    2008-06-07 22:08 . 2008-06-05 16:04 34,296 --a--c--- E:\WINDOWS\system32\drivers\mbamcatchme.sys
    2008-06-07 22:08 . 2008-06-05 16:04 15,864 --a--c--- E:\WINDOWS\system32\drivers\mbam.sys
    2008-06-07 22:04 . 2008-06-07 22:04 268 --ah-c--- E:\sqmdata14.sqm
    2008-06-07 22:04 . 2008-06-07 22:04 244 --ah-c--- E:\sqmnoopt14.sqm
    2008-06-07 21:20 . 2008-06-07 21:20 268 --ah-c--- E:\sqmdata13.sqm
    2008-06-07 21:20 . 2008-06-07 21:20 244 --ah-c--- E:\sqmnoopt13.sqm
    2008-06-07 20:23 . 2007-04-17 11:32 2,455,488 -----c--- E:\WINDOWS\system32\dllcache\ieapfltr.dat
    2008-06-07 20:23 . 2007-03-08 07:10 1,048,576 -----c--- E:\WINDOWS\system32\dllcache\ieframe.dll.mui
    2008-06-07 20:23 . 2008-03-01 14:58 459,264 -----c--- E:\WINDOWS\system32\dllcache\msfeeds.dll
    2008-06-07 20:23 . 2008-03-01 14:58 383,488 -----c--- E:\WINDOWS\system32\dllcache\ieapfltr.dll
    2008-06-07 20:23 . 2008-03-01 14:58 267,776 -----c--- E:\WINDOWS\system32\dllcache\iertutil.dll
    2008-06-07 20:23 . 2008-03-01 14:58 63,488 -----c--- E:\WINDOWS\system32\dllcache\icardie.dll
    2008-06-07 20:23 . 2008-03-01 14:58 52,224 -----c--- E:\WINDOWS\system32\dllcache\msfeedsbs.dll
    2008-06-07 20:23 . 2008-02-22 12:00 13,824 -----c--- E:\WINDOWS\system32\dllcache\ieudinit.exe
    2008-06-07 20:22 . 2008-03-01 14:58 6,066,176 -----c--- E:\WINDOWS\system32\dllcache\ieframe.dll
    2008-06-07 19:19 . 2003-11-11 14:12 336,800 -ra--c--- E:\WINDOWS\system32\drivers\PRISMA02.sys
    2008-06-07 01:41 . 2008-06-07 01:41 268 --ah-c--- E:\sqmdata12.sqm
    2008-06-07 01:41 . 2008-06-07 01:41 244 --ah-c--- E:\sqmnoopt12.sqm
    2008-06-07 01:25 . 2007-07-30 19:19 271,224 --a--c--- E:\WINDOWS\system32\mucltui.dll
    2008-06-07 01:25 . 2007-07-30 19:19 207,736 --a--c--- E:\WINDOWS\system32\muweb.dll
    2008-06-07 01:25 . 2007-07-30 19:18 30,072 --a--c--- E:\WINDOWS\system32\mucltui.dll.mui
    2008-06-06 20:39 . 2008-06-06 20:39 268 --ah-c--- E:\sqmdata11.sqm
    2008-06-06 20:39 . 2008-06-06 20:39 244 --ah-c--- E:\sqmnoopt11.sqm
    2008-05-28 09:16 . 2008-06-06 20:34 <REP> d----c--- E:\Program Files\a-squared Free
    2008-05-28 07:22 . 2008-05-28 07:22 <REP> d----c--- E:\Program Files\Yahoo!
    2008-05-28 07:22 . 2008-05-28 07:23 <REP> d----c--- E:\Program Files\CCleaner
    2008-05-26 23:19 . 2008-05-26 23:19 <REP> d----c--- E:\Program Files\Spybot - Search & Destroy
    2008-05-20 22:31 . 2008-05-20 22:31 282 --a--c--- E:\Raccourci vers Donn‚es (C).lnk
    2008-05-15 23:56 . 2008-05-15 23:56 280 --ah-c--- E:\sqmdata10.sqm
    2008-05-15 23:56 . 2008-05-15 23:56 244 --ah-c--- E:\sqmnoopt10.sqm

    .
    (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-06-06 22:49 --------- dc----w E:\Program Files\AlerteGPS
    2008-05-28 20:08 --------- dc----w E:\Program Files\iTunes
    2008-05-26 21:20 --------- dc----w E:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    2008-05-17 16:00 --------- dc----w E:\Documents and Settings\Manu\Application Data\AdobeUM
    2008-05-11 10:38 --------- dc----w E:\Documents and Settings\Manu\Application Data\LimeWire
    2008-05-03 16:06 --------- dc----w E:\Documents and Settings\Manu\Application Data\Apple Computer
    2008-05-03 16:05 --------- dc----w E:\Program Files\iPod
    2008-05-03 16:04 --------- dc----w E:\Documents and Settings\All Users\Application Data\Apple Computer
    2008-05-03 16:03 --------- dc----w E:\Program Files\Bonjour
    2008-05-03 16:02 --------- dc----w E:\Program Files\QuickTime
    2008-05-03 15:55 --------- dc----w E:\Program Files\Fichiers communs\Apple
    2008-05-03 15:47 --------- dc----w E:\Program Files\Apple Software Update
    2008-05-03 15:47 --------- dc----w E:\Documents and Settings\All Users\Application Data\Apple
    2008-04-23 19:19 --------- dc----w E:\Documents and Settings\Manu\Application Data\MSN6
    2008-03-25 04:51 621,344 -c--a-w E:\WINDOWS\system32\mswstr10.dll
    2008-03-25 04:51 194,144 -c--a-w E:\WINDOWS\system32\msjint40.dll
    2008-03-20 08:09 1,845,376 -c--a-w E:\WINDOWS\system32\win32k.sys
    2007-01-31 13:17 1,376,256 -c--a-w E:\Program Files\evll.dll
    2007-01-31 13:12 815,104 -c--a-w E:\Program Files\layer.dll
    2007-01-31 13:12 61,440 -c--a-w E:\Program Files\sockets.dll
    2007-01-31 13:12 208,896 -c--a-w E:\Program Files\webbrowser.dll
    2007-01-31 13:12 192,512 -c--a-w E:\Program Files\googlesearch.dll
    2007-01-31 13:11 69,632 -c--a-w E:\Program Files\googleearth.exe
    2007-01-31 13:11 585,728 -c--a-w E:\Program Files\googleearth.dll
    2007-01-31 13:11 237,568 -c--a-w E:\Program Files\navigate.dll
    2007-01-31 13:11 180,224 -c--a-w E:\Program Files\measure.dll
    2007-01-31 13:11 14,336 -c--a-w E:\Program Files\earthps.dll
    2007-01-31 13:11 131,072 -c--a-w E:\Program Files\gps.dll
    2007-01-31 13:11 1,429,504 -c--a-w E:\Program Files\collada.dll
    2007-01-31 13:10 839,680 -c--a-w E:\Program Files\common.dll
    2007-01-31 13:10 49,152 -c--a-w E:\Program Files\input_plugin.dll
    2007-01-31 13:10 323,584 -c--a-w E:\Program Files\basicingest.dll
    2007-01-31 13:10 241,664 -c--a-w E:\Program Files\auth.dll
    2007-01-31 13:10 143,360 -c--a-w E:\Program Files\render.dll
    2007-01-31 13:10 13,312 -c--a-w E:\Program Files\alchemyext.dll
    2007-01-31 13:10 122,880 -c--a-w E:\Program Files\wmsbase.dll
    2007-01-31 13:10 1,392,640 -c--a-w E:\Program Files\geobase.dll
    2007-01-31 13:09 9,216 -c--a-w E:\Program Files\fusioncommon.dll
    2007-01-31 13:09 278,528 -c--a-w E:\Program Files\base.dll
    2007-01-31 13:09 22,016 -c--a-w E:\Program Files\moduleframework.dll
    2007-01-31 13:09 16,896 -c--a-w E:\Program Files\componentframework.dll
    2007-01-31 13:09 131,072 -c--a-w E:\Program Files\math.dll
    2007-01-31 13:09 12,800 -c--a-w E:\Program Files\apiloader.dll
    2007-01-31 13:09 118,784 -c--a-w E:\Program Files\net.dll
    2006-12-20 13:01 729,088 -c--a-w E:\Program Files\libIGExportCommon.dll
    2006-12-20 13:01 622,592 -c--a-w E:\Program Files\libIGMath.dll
    2006-12-20 13:01 286,720 -c--a-w E:\Program Files\libIGUtils.dll
    2006-12-20 13:01 1,298,432 -c--a-w E:\Program Files\libIGCore.dll
    2006-12-20 13:01 1,064,960 -c--a-w E:\Program Files\libIGOpt.dll
    2006-12-07 16:01 704 -c--a-w E:\Program Files\PCOptimizations.ini
    2006-11-30 16:00 503,808 -c--a-w E:\Program Files\gpsbabel.exe
    2006-11-17 12:30 61,053 -c--a-w E:\Program Files\drivers.ini
    2006-11-09 09:49 33,329 -c--a-w E:\Program Files\releasenotes.txt
    2006-11-03 11:30 5,219 -c--a-w E:\Program Files\ImporterUISettings.ini
    2006-08-31 10:30 14,353 -c--a-w E:\Program Files\default_myplaces.kml
    2006-08-21 14:00 26,694 -c--a-w E:\Program Files\uninstall.ico
    2006-08-21 14:00 26,694 -c--a-w E:\Program Files\earth.ico
    2006-08-16 16:19 4,075,520 -c--a-w E:\Program Files\qt-mt336.dll
    2006-06-30 11:51 86,016 -c--a-w E:\Program Files\zlibwapi.dll
    2006-04-08 16:50 45 -c--a-w E:\Program Files\logThumb.txt
    2006-04-03 13:58 1,013 -c--a-w E:\Program Files\ImporterGlobalSettings.ini
    2006-03-18 22:49 1,058 -c--a-w E:\Program Files\mmscomp.ini
    2006-03-18 22:41 415 -c--a-w E:\Program Files\config.ini
    2006-03-18 22:40 0 -c--a-w E:\Program Files\changelog.dat
    2006-03-10 17:30 6,656 -csha-w E:\Program Files\Thumbs.db
    2006-03-07 02:52 0 -c--a-w E:\Program Files\Program
    2006-03-07 02:51 47 -c--a-w E:\Program Files\ETOS_USER.INI
    2005-11-29 11:49 89,088 -c--a-w E:\Program Files\atl71.dll
    2005-08-24 13:27 667,648 -c--a-w E:\Program Files\ijl20.dll
    2005-08-23 08:47 151,552 -c--a-w E:\Program Files\libexpatw.dll
    2005-06-09 17:55 18,351 -c--a-w E:\Program Files\gpl.txt
    2005-04-27 12:29 0 -c--a-w E:\Program Files\googleearth.exe.local
    2004-04-15 11:57 413,184 -c--a-w E:\Program Files\usp10.dll
    2004-02-16 14:09 116,736 -c--a-w E:\Program Files\glu32.dll
    2004-01-14 17:11 53,299 -c--a-w E:\Program Files\pthreadVC.dll
    2003-11-25 09:53 77,878 -c--a-w E:\Program Files\msvcirt.dll
    2000-05-21 23:00 1,066,176 -c--a-w E:\Program Files\MSCOMCTL.OCX
    2008-01-14 12:33 32,768 -csha-w E:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008011420080115\index.dat
    .

    ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    REGEDIT4
    *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "TOSCDSPD"="E:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe" [2003-09-15 17:19 65536]
    "MsnMsgr"="E:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 12:34 5724184]
    "DigiClock"="none" []
    "LogitechSoftwareUpdate"="E:\Program Files\Logitech\Video\ManifestEngine.exe" [2005-06-08 15:44 196608]
    "SpybotSD TeaTimer"="E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 11:43 2097488]
    "CTFMON.EXE"="E:\WINDOWS\system32\ctfmon.exe" [2004-08-04 01:54 15360]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ATIModeChange"="Ati2mdxx.exe" [2004-06-02 10:05 28672 E:\WINDOWS\system32\Ati2mdxx.exe]
    "ATIPTA"="E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-03-09 22:10 335872]
    "THotkey"="E:\Program Files\Toshiba\Toshiba Applet\thotkey.exe" [2004-08-16 17:08 430080]
    "AGRSMMSG"="AGRSMMSG.exe" [2004-06-02 10:09 88363 E:\WINDOWS\agrsmmsg.exe]
    "TPSMain"="TPSMain.exe" [2004-05-04 11:41 266240 E:\WINDOWS\system32\TPSMain.exe]
    "SynTPLpr"="E:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2004-09-14 16:30 98304]
    "SynTPEnh"="E:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2004-09-14 16:30 507904]
    "PadTouch"="E:\Program Files\TOSHIBA\PadTouch\PadExe.exe" [2004-02-12 12:43 1019904]
    "NeroFilterCheck"="E:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe" [2006-01-12 17:40 155648]
    "CFSServ.exe"="CFSServ.exe" []
    "LVCOMSX"="E:\WINDOWS\system32\LVCOMSX.EXE" [2005-07-19 18:32 221184]
    "LogitechVideoRepair"="E:\Program Files\Logitech\Video\ISStart.exe" [2005-06-08 16:24 458752]
    "LogitechVideoTray"="E:\Program Files\Logitech\Video\LogiTray.exe" [2005-06-08 16:14 217088]

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
    Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "E:\\WINDOWS\\system32\\sessmgr.exe"=
    "E:\\Program Files\\Nero\\Nero 7\\Nero 7\\Nero Home\\NeroHome.exe"=
    "E:\\Program Files\\Internet Explorer\\iexplore.exe"=
    "E:\\Program Files\\Nero\\Nero 7\\Nero 7\\Nero ShowTime\\ShowTime.exe"=
    "%windir%\\system32\\sessmgr.exe"=
    "E:\\Program Files\\LimeWire\\LimeWire.exe"=
    "E:\\Program Files\\eMule\\emule.exe"=
    "E:\\Program Files\\messenger\\msmsgs.exe"=
    "E:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "E:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "E:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "E:\\Program Files\\iTunes\\iTunes.exe"=

    R0 atiide;atiide;E:\WINDOWS\system32\DRIVERS\atiide.sys [2004-06-02 10:05]
    R1 aswSP;avast! Self Protection;E:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]
    R2 aswFsBlk;aswFsBlk;E:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
    R3 axvbusx;axvbusx;E:\WINDOWS\system32\DRIVERS\axvbusx.sys [2002-12-11 22:34]
    R3 axvscsi;axvscsi;E:\WINDOWS\system32\DRIVERS\axvscsi.sys [2002-12-19 01:36]
    S3 Boonty Games;Boonty Games;"E:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" [2006-03-09 21:58]

    .
    Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
    "2008-05-15 08:21:16 E:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
    - E:\Program Files\Apple Software Update\SoftwareUpdate.exe
    "2008-01-06 01:11:56 E:\WINDOWS\Tasks\Low3.job"
    .
    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-06-10 21:32:00
    Windows 5.1.2600 Service Pack 2 NTFS

    Balayage processus cach‚s ...

    Balayage cach‚ autostart entries ...

    Balayage des fichiers cach‚s ...

    Scan termin‚ avec succŠs
    Les fichiers cach‚s: 0

    **************************************************************************
    .
    --------------------- DLLs a charg‚ sous des processus courants ---------------------

    PROCESS: E:\WINDOWS\system32\winlogon.exe
    -> E:\WINDOWS\system32\Ati2evxx.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    E:\WINDOWS\system32\ati2evxx.exe
    E:\WINDOWS\system32\acs.exe
    E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    E:\Program Files\Alwil Software\Avast4\ashServ.exe
    E:\Program Files\a-squared Free\a2service.exe
    E:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    E:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
    E:\Program Files\Bonjour\mDNSResponder.exe
    E:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    E:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
    E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    E:\WINDOWS\system32\wscntfy.exe
    E:\WINDOWS\system32\ati2evxx.exe
    E:\WINDOWS\system32\WgaTray.exe
    E:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
    E:\WINDOWS\system32\TPSBattM.exe
    E:\Program Files\Logitech\Video\FxSvr2.exe
    .
    **************************************************************************
    .
    Temps d'accomplissement: 2008-06-10 21:38:55 - machine was rebooted
    ComboFix-quarantined-files.txt 2008-06-10 19:38:39

    Pre-Run: 4,666,159,104 octets libres
    Post-Run: 4,588,367,872 octets libres

    240 --- E O F --- 2008-06-10 18:30:54

    merci et bonne soiree
    0
  12. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    recolle un rapport hijakchits et dis tes soucis actuels
    0
  13. leunam78 Messages postés 117 Statut Membre 1
     
    bonsoir actuellement pas de probleme et les bestiaux ont disparu
    voici le rapport
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 19:20:39, on 11/06/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16640)
    Boot mode: Normal

    Running processes:
    E:\WINDOWS\System32\smss.exe
    E:\WINDOWS\system32\winlogon.exe
    E:\WINDOWS\system32\services.exe
    E:\WINDOWS\system32\lsass.exe
    E:\WINDOWS\System32\Ati2evxx.exe
    E:\WINDOWS\system32\svchost.exe
    E:\WINDOWS\System32\svchost.exe
    E:\WINDOWS\System32\ACS.exe
    E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    E:\Program Files\Alwil Software\Avast4\ashServ.exe
    E:\WINDOWS\system32\spoolsv.exe
    E:\Program Files\a-squared Free\a2service.exe
    E:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    E:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
    E:\Program Files\Bonjour\mDNSResponder.exe
    E:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    E:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
    E:\WINDOWS\System32\svchost.exe
    E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    E:\WINDOWS\system32\Ati2evxx.exe
    E:\WINDOWS\system32\WgaTray.exe
    E:\WINDOWS\Explorer.EXE
    E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    E:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
    E:\WINDOWS\AGRSMMSG.exe
    E:\WINDOWS\system32\TPSMain.exe
    E:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    E:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    E:\Program Files\TOSHIBA\PadTouch\PadExe.exe
    E:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
    E:\WINDOWS\system32\LVCOMSX.EXE
    E:\Program Files\Logitech\Video\LogiTray.exe
    E:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
    E:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    E:\WINDOWS\system32\ctfmon.exe
    E:\WINDOWS\system32\TPSBattM.exe
    E:\Program Files\Logitech\Video\FxSvr2.exe
    E:\Program Files\Windows Live\Messenger\usnsvc.exe
    E:\Program Files\internet explorer\iexplore.exe
    E:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    E:\Documents and Settings\Manu\Bureau\virus\HiJackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - E:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - E:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
    O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
    O4 - HKLM\..\Run: [ATIPTA] E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [THotkey] E:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
    O4 - HKLM\..\Run: [SynTPLpr] E:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] E:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [PadTouch] "E:\Program Files\TOSHIBA\PadTouch\PadExe.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] E:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
    O4 - HKLM\..\Run: [LVCOMSX] E:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] E:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] E:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKCU\..\Run: [TOSCDSPD] E:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
    O4 - HKCU\..\Run: [MsnMsgr] "E:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [DigiClock] none
    O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "E:\Program Files\Logitech\Video\ManifestEngine.exe" boot
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: e:\windows\system32\nwprovau.dll
    O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - E:\Program Files\a-squared Free\a2service.exe
    O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - E:\WINDOWS\System32\ACS.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - E:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - E:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - Unknown owner - E:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: Autodata Limited License Service - Autodata Limited - E:\Program Files\Fichiers communs\Autodata Limited Shared\Service\ADCDLicSvc.exe
    O23 - Service: avast! Antivirus - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - E:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - E:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Boonty Games - BOONTY - E:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
    O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - E:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - E:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: NBService - Nero AG - E:\Program Files\Nero\Nero 7\Nero 7\Nero BackItUp\NBService.exe
    0
  14. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    ok c'est bon

    vire combofix et hijakhcits et smitfraudfix

    il faudra mettre le sp3 de windows: DEMARRER puis TOUS LES PROGRAMMES puis WINDOWS UPDATE

    pour protéger gratos ton ordi

    http://www.commentcamarche.net/telecharger/logiciel 4 securite

    mettre un antivirus

    AVAST en français ou ANTIVIR (en anglais mais très efficace)
    https://www.malekal.com/avira-free-security-antivirus-gratuit/ (merci Malekal)
    -------------
    des anti-espions :
    MalwareByte's Anti-Malware + SPYBOT +/- si tea timer non active de spybot:
    WINDOWS DEFENDER ou SPYWARE TERMINATOR

    +
    SPYWAREBLASTER pour immuniser le système contre vundo notamment mais en anglais (mais facile d'utilisation : il suffit de faire "update" pour mettre à jour tous les mois et ensuite" enable all protection" pour immuniser)...

    Rq : spybot et ad-aware ont sorti de nouvelles versions cette année vérifiez que vous avez la dernière version
    --------
    un pare feu :
    celui de (Windows) ou mieux Online armor ou KERIO ou JETICO ou ZONE ALARM (mettre que le parefeu gratuit)

    http://www.commentcamarche.net/telecharger/telecharger 34055356 online armor personal firewall

    https://forum.pcastuces.com/sujet.asp?f=25&s=35606
    https://www.clubic.com/telecharger-fiche11071-sunbelt-personal-firewall-ex-kerio.html
    https://manuelsdaide.com/contact/
    http://www.open-files.com/forum/index.php?showtopic=29277
    http://www.commentcamarche.net/telecharger/telecharger 157 zonealarm

    -----------
    CCLEANER pour effacer les traces de surf
    ---------
    naviguer avec firefox ou safari ou opera et non internet explorer plus touché par les virus
    http://www.mozilla-europe.org/fr/products/firefox/
    0
  15. leunam78 Messages postés 117 Statut Membre 1
     
    okk merci pour tout!
    bonne continuation
    merci pour les conseil!!
    0
  16. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    de rien bonne suite
    0