Spyware secure circule dans mon pc!

Zic -  
 Utilisateur anonyme -
Bonjour, je suis désespérée...Mon antivirus (AVG 7.5) était à jour, Ad-aware 7 fonctionnait régulièrement et boom patatra spyware secure arrive...de bonne foi j'ai cru au message et j'ai analysé mon pc et rien!
J'ai donc cherché la solution en me renseignant sur google. J'ai mis la nouvelle version d'avg mais il n'a rien trouvé. J'ai donc lancé des antivirus online, spybot sur mon pc...je cherche encore et je ne trouve pas. J'ai fini par désinstaller avg free et mis bitdefender free. J'ai utilisé privacy eraser pro mais je n'ia pas tout compris. Là je ne touche plus rien de peur de faire le pire. Toujours des faux messages de spyware secure, de sécurité et des popups.
Que dois je faire? merci de bien vouloir m'aider
Bye bonne soirée
Configuration: Windows XP
Internet Explorer 7.0

32 réponses

  • 1
  • 2
Résumé de la discussion

Une internaute signale des messages trompeurs et des pop-ups liés à spyware secure sur Windows XP, malgré des scans avec AVG, Ad-aware et Spybot, et après essais d’antivirus en ligne. Des réponses suggèrent des procédures de nettoyage en mode sans échec et l’utilisation d’outils externes (navilog, ComboFix, HijackThis, SmitfraudFix), puis des rapports à poster pour aide. D’autres proposent l’installation d’un pare-feu (Kerio ou ZoneAlarm) et des solutions de restauration système, ou l’emploi d’outils comme Zeb-Restore et des méthodes de réparation via un CD/DVD de Windows. La variété des outils et procédures montre que la désinfection peut nécessiter une succession de scans et de rapports, et que certaines étapes (désactiver les antivirus, mode sans échec, rapports HijackThis) doivent être suivies méticuleusement.

Généré automatiquement par IA
sur la base des meilleures réponses
  1. Utilisateur anonyme
     
    Bonsoir,
    Ok,
    très bien,

    Alors,
    > Installe un pare feu :
    - Je te conseille Kerio : http://www.commentcamarche.net/telecharger/telecharger 206 kerio . Si problème, tuto : https://kerio.probb.fr/
    - Si tu as des difficultés avec les configuration de Kerio, alors installe Zone Alarme : /telecharger/telecharger-157-zonealarm, en cas de problème : http://forum.telecharger.01net.com/forum/high-tech/PRODUITS/Questions-techniques/zonealarm-tutorial-sujet_169658_1.htm
    - Installe le nouveau pare-feu, puis désactive le pare-feu windows.

    Ensuite,
    > Lance navilog1 :
    - Choisis l'option 2
    Navilog travail... patient jusqu'à ce qui soit marqué < Nettoyage Termine le ..... >
    Un rapport va être générer. Poste le dans ta prochaine réponse.
    Note: le bureau disparaît.

    Alors, à partir de là tu ne vas plus avoir de pub.

    Mais c'est pas fini : il reste encore une ou deux crasses....

    Poste alors un nouveau rapport HijAckt stp.

    Bonne soirée.
    Je reviens plus tard.
    1
    1. Zic
       
      Dsl mais navilog option 2 ne se lance pas...il m'indque qu'il faut avoir fait optio1 dois je la relancer?

      J'ai installé zone alarm à la place du pare feu de windows

      Merci @+
      0
  2. Utilisateur anonyme
     
    OK,
    Essaye en MSE :
    > Démarre en mode sans échec : (image). Si problème : tuto ici

    Après,
    > Lance navilog1 :
    - Choisis l'option 2
    Navilog travail... patient jusqu'à ce qui soit marqué < Nettoyage Termine le ..... >
    Un rapport va être générer. Poste le dans ta prochaine réponse.
    Note: le bureau disparaît.

    Si ça ne marche pas :
    > Télécharge ComboFix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe (par sUBs) sur ton Bureau.
    Déconnecte toi du net et désactive ton antivirus pour que Combofix puisse s'exécuter normalement.
    - Double clique combofix.exe
    - Tape sur la touche 1 (Yes) pour démarrer le scan.
    - Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.
    NOTE : Le rapport se trouve également ici : C:\Combofix.txt
    Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

    Dis moi si tu rencontres des soucis.

    A+
    1
    1. Zic
       
      Bonjour
      J'ai essayé avec le mode sans échec mais je n'ai pas eu la fenêtre avec boot.in comme le tuto l'indique...alors j'ai opté pour combo et voici le rapport
      ComboFix 08-06-20.4 - steph 2008-06-25 9:22:18.1 - NTFSx86
      Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.222 [GMT 2:00]
      Endroit: F:\Documents and Settings\steph\Bureau\ComboFix.exe
      * Création d'un nouveau point de restauration

      [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
      .

      (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
      .

      F:\Documents and Settings\steph\Local Settings\Application Data\gexpha.dat
      F:\Documents and Settings\steph\Local Settings\Application Data\gexpha.exe
      F:\Documents and Settings\steph\Local Settings\Application Data\gexpha_nav.dat
      F:\Documents and Settings\steph\Local Settings\Application Data\gexpha_navps.dat
      F:\WINDOWS\system32\MSINET.oca
      F:\WINDOWS\system32\nvs2.inf

      .
      ((((((((((((((((((((((((((((( Fichiers créés 2008-05-25 to 2008-06-25 ))))))))))))))))))))))))))))))))))))
      .

      2008-06-25 09:06 . 2005-03-24 19:09 <REP> d--h----- F:\Documents and Settings\Administrateur.X-A01F563DBADF4.000\Voisinage réseau
      2008-06-25 09:06 . 2005-03-24 19:09 <REP> d--h----- F:\Documents and Settings\Administrateur.X-A01F563DBADF4.000\Voisinage d'impression
      2008-06-25 09:06 . 2005-03-24 18:16 <REP> d--h----- F:\Documents and Settings\Administrateur.X-A01F563DBADF4.000\Modèles
      2008-06-25 09:06 . 2005-03-24 19:09 <REP> d-------- F:\Documents and Settings\Administrateur.X-A01F563DBADF4.000\Mes documents
      2008-06-25 09:06 . 2005-03-24 19:09 <REP> dr------- F:\Documents and Settings\Administrateur.X-A01F563DBADF4.000\Menu Démarrer
      2008-06-25 09:06 . 2005-03-24 19:09 <REP> d-------- F:\Documents and Settings\Administrateur.X-A01F563DBADF4.000\Favoris
      2008-06-25 09:06 . 2005-03-24 19:09 <REP> d-------- F:\Documents and Settings\Administrateur.X-A01F563DBADF4.000\Bureau
      2008-06-25 09:06 . 2008-06-25 09:06 <REP> d-------- F:\Documents and Settings\Administrateur.X-A01F563DBADF4.000
      2008-06-24 19:40 . 2003-06-05 21:13 53,248 --a------ F:\WINDOWS\system32\Process.exe
      2008-06-24 19:37 . 2008-06-25 09:26 241,696 --ahs---- F:\WINDOWS\system32\drivers\fidbox.dat
      2008-06-24 19:37 . 2008-06-25 09:13 4,400 --ahs---- F:\WINDOWS\system32\drivers\fidbox.idx
      2008-06-24 19:34 . 2008-04-02 21:08 54,672 --a------ F:\WINDOWS\system32\vsutil_loc040c.dll
      2008-06-24 19:34 . 2008-04-02 21:08 42,384 --a------ F:\WINDOWS\zllsputility_loc040c.dll
      2008-06-24 19:34 . 2008-04-02 21:08 21,904 --a------ F:\WINDOWS\system32\imsinstall_loc040c.dll
      2008-06-24 19:34 . 2008-04-02 21:08 17,808 --a------ F:\WINDOWS\system32\imslsp_install_loc040c.dll
      2008-06-24 17:12 . 2008-06-25 09:09 <REP> d-------- F:\Program Files\Navilog1
      2008-06-24 17:10 . 2008-06-24 17:10 <REP> d-------- F:\Program Files\Trend Micro
      2008-06-22 11:50 . 2008-06-22 11:50 <REP> d-------- F:\Documents and Settings\steph\Application Data\Bitdefender
      2008-06-22 10:50 . 2008-06-22 10:50 <REP> d-------- F:\Program Files\Softwin
      2008-06-22 10:50 . 2008-06-22 10:51 <REP> d-------- F:\Documents and Settings\All Users.WINDOWS\Application Data\BitDefender
      2008-06-19 13:07 . 2008-06-19 13:07 <REP> d-------- F:\Documents and Settings\All Users.WINDOWS\Application Data\Grisoft
      2008-06-19 11:32 . 2008-06-25 09:23 81,984 --a------ F:\WINDOWS\system32\bdod.bin
      2008-06-19 11:26 . 2008-06-22 10:50 <REP> d-------- F:\Program Files\Fichiers communs\Softwin
      2008-06-18 12:52 . 2008-06-18 12:52 260 --a------ F:\WINDOWS\_delis32.ini
      2008-06-16 20:24 . 2008-06-16 20:24 <REP> d-------- F:\Program Files\Microsoft CAPICOM 2.1.0.2
      2008-06-16 17:19 . 2008-06-16 18:07 <REP> d-------- F:\Documents and Settings\All Users.WINDOWS\Application Data\MailFrontier
      2008-06-16 17:18 . 2008-06-24 19:39 4,212 ---h----- F:\WINDOWS\system32\zllictbl.dat
      2008-06-16 16:30 . 2008-06-18 12:57 <REP> d-------- F:\Program Files\Fichiers communs\Logitech
      2008-06-16 16:30 . 2003-03-18 21:44 65,536 --a------ F:\WINDOWS\system32\MFC71DEU.DLL
      2008-06-16 16:30 . 2003-03-18 21:44 61,440 --a------ F:\WINDOWS\system32\MFC71ITA.DLL
      2008-06-16 16:30 . 2003-03-18 21:44 61,440 --a------ F:\WINDOWS\system32\MFC71ESP.DLL
      2008-06-16 16:30 . 2003-03-18 21:44 57,344 --a------ F:\WINDOWS\system32\MFC71ENU.DLL
      2008-06-16 16:30 . 2003-03-18 21:44 49,152 --a------ F:\WINDOWS\system32\MFC71KOR.DLL
      2008-06-16 16:30 . 2003-03-18 21:44 49,152 --a------ F:\WINDOWS\system32\MFC71JPN.DLL
      2008-06-16 16:30 . 2003-03-18 21:44 45,056 --a------ F:\WINDOWS\system32\MFC71CHT.DLL
      2008-06-16 16:30 . 2003-03-18 21:44 40,960 --a------ F:\WINDOWS\system32\MFC71CHS.DLL
      2008-06-16 13:49 . 2008-06-16 18:26 <REP> d-------- F:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy
      2008-06-16 09:12 . 2005-03-24 19:09 <REP> d--h----- F:\Documents and Settings\Administrateur.X-A01F563DBADF4\Voisinage réseau
      2008-06-16 09:12 . 2005-03-24 19:09 <REP> d--h----- F:\Documents and Settings\Administrateur.X-A01F563DBADF4\Voisinage d'impression
      2008-06-16 09:12 . 2005-03-24 18:16 <REP> d--h----- F:\Documents and Settings\Administrateur.X-A01F563DBADF4\Modèles
      2008-06-16 09:12 . 2005-03-24 19:09 <REP> d-------- F:\Documents and Settings\Administrateur.X-A01F563DBADF4\Mes documents
      2008-06-16 09:12 . 2005-03-24 19:09 <REP> dr------- F:\Documents and Settings\Administrateur.X-A01F563DBADF4\Menu Démarrer
      2008-06-16 09:12 . 2005-03-24 19:09 <REP> d-------- F:\Documents and Settings\Administrateur.X-A01F563DBADF4\Favoris
      2008-06-16 09:12 . 2005-03-24 19:09 <REP> d-------- F:\Documents and Settings\Administrateur.X-A01F563DBADF4\Bureau
      2008-06-16 09:12 . 2008-06-16 09:12 <REP> d-------- F:\Documents and Settings\Administrateur.X-A01F563DBADF4
      2008-06-13 11:24 . 2008-06-14 11:57 <REP> d--h-c--- F:\$AVG8.VAULT$
      2008-06-13 10:41 . 2008-06-13 10:41 <REP> d-------- F:\Documents and Settings\steph\Application Data\AVGTOOLBAR
      2008-06-12 20:24 . 2008-06-12 20:37 <REP> d-------- F:\Program Files\Fichiers communs\Real
      2008-06-12 20:20 . 2008-06-12 20:30 <REP> d-a------ F:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP
      2008-06-12 19:56 . 2008-06-12 19:56 <REP> d-------- F:\Documents and Settings\steph\Application Data\skypePM
      2008-06-12 19:56 . 2008-06-12 19:56 56 --ah----- F:\WINDOWS\system32\ezsidmv.dat
      2008-06-11 08:30 . 2008-06-14 19:59 272,768 --------- F:\WINDOWS\system32\drivers\bthport.sys
      2008-06-11 08:30 . 2008-06-14 19:59 272,768 -----c--- F:\WINDOWS\system32\dllcache\bthport.sys
      2008-06-03 09:48 . 2007-07-30 19:19 271,224 --a------ F:\WINDOWS\system32\mucltui.dll
      2008-06-03 09:48 . 2007-07-30 19:19 207,736 --a------ F:\WINDOWS\system32\muweb.dll
      2008-06-03 09:48 . 2007-07-30 19:18 30,072 --a------ F:\WINDOWS\system32\mucltui.dll.mui
      2008-06-03 08:10 . 2006-11-29 13:06 3,426,072 --a------ F:\WINDOWS\system32\d3dx9_32.dll
      2008-06-03 08:09 . 2008-06-03 08:25 <REP> d-------- F:\Program Files\Windows Live Toolbar
      2008-06-03 08:09 . 2008-06-03 08:09 <REP> d-------- F:\Program Files\Microsoft SQL Server Compact Edition
      2008-06-03 08:03 . 2008-06-20 09:25 <REP> d-------- F:\Program Files\Windows Live
      2008-06-03 08:03 . 2008-06-03 08:08 <REP> d--hsc--- F:\Program Files\Fichiers communs\WindowsLiveInstaller
      2008-06-03 08:03 . 2008-06-20 09:25 <REP> d-------- F:\Documents and Settings\All Users.WINDOWS\Application Data\WLInstaller

      .
      (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2008-06-20 07:26 --------- d-----w F:\Program Files\MSN Messenger
      2008-06-16 14:30 --------- d--h--w F:\Program Files\InstallShield Installation Information
      2008-06-12 19:11 --------- d-----w F:\Documents and Settings\All Users.WINDOWS\Application Data\Skype
      2008-05-08 12:28 202,752 ----a-w F:\WINDOWS\system32\drivers\rmcast.sys
      2008-05-07 05:15 1,293,824 ----a-w F:\WINDOWS\system32\quartz.dll
      2008-04-23 04:16 826,368 ----a-w F:\WINDOWS\system32\wininet.dll
      2008-04-02 19:07 75,248 ----a-w F:\WINDOWS\zllsputility.exe
      2008-04-02 19:07 1,086,952 ----a-w F:\WINDOWS\system32\zpeng24.dll
      2008-03-25 16:44 98,304 ----a-w F:\WINDOWS\system32\CmdLineExt.dll
      2008-03-25 04:51 621,344 ----a-w F:\WINDOWS\system32\mswstr10.dll
      2008-03-25 04:51 194,144 ----a-w F:\WINDOWS\system32\msjint40.dll
      2005-08-11 08:39 56 -csh--r F:\WINDOWS\system32\65B4BD6946.sys
      .

      ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      REGEDIT4
      *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "CTFMON.EXE"="F:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:54 15360]
      "updateMgr"="F:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [ ]
      "WOOKIT"="F:\PROGRA~1\Wanadoo\Shell.exe" [ ]
      "Creative Detector"="G:\Programmes Installés\Blaster MD\Detector\CTDetect.exe" [ ]
      "MtdAcq"="F:\Program Files\Creative\Shared Files\Media Sniffer\MtdAcq.EXE" [ ]
      "Uniblue Registry Booster2"="g:\Program Files\Uniblue\RegistryBooster2\RegistryBooster.exe" [ ]
      "MsgCenterExe"="F:\Program Files\Fichiers communs\Real\Update_OB\RealOneMessageCenter.exe" [ ]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "NeroFilterCheck"="F:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]
      "HPDJ Taskbar Utility"="F:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe" [2001-11-19 17:21 196608]
      "BDMCon"="F:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe" [2007-04-02 16:48 290816]
      "BDAgent"="F:\Program Files\Softwin\BitDefender10\bdagent.exe" [2007-03-26 15:49 69632]
      "ZoneAlarm Client"="G:\Programmes Installés\ZoneAlarm\zlclient.exe" [2008-04-02 21:07 919016]

      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
      "CTFMON.EXE"="F:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 00:54 15360]

      F:\Documents and Settings\All Users.WINDOWS\Menu D‚marrer\Programmes\D‚marrage\
      Microsoft Office.lnk - F:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 22:05:56 65588]

      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
      "AppInit_DLLs"=sockspy.dll

      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
      "vidc.iv41"= ir41_32.dll

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
      F:\Program Files\Messenger\msmsgs.exe

      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
      F:\Program Files\MSN Messenger\MsnMsgr.Exe

      [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
      "DisableMonitoring"=dword:00000001

      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
      "EnableFirewall"= 0 (0x0)

      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
      "%windir%\\system32\\sessmgr.exe"=
      "F:\\WINDOWS\\system32\\dpvsetup.exe"=
      "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
      "G:\\Programmes Installés\\E. Mule 0.47\\eMule\\emule.exe"=
      "F:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
      "F:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

      S3 Boonty Games;Boonty Games;"F:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe" [2006-07-31 08:47]
      S3 fbxusb;Carte réseau virtuelle FreeBox USB;F:\WINDOWS\system32\DRIVERS\fbxusb32.sys [2004-10-20 14:23]

      *Newly Created Service* - CATCHME
      .
      **************************************************************************

      catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-06-25 09:24:53
      Windows 5.1.2600 Service Pack 2 NTFS

      Balayage processus cachés ...

      Balayage caché autostart entries ...

      HKCU\Software\Microsoft\Windows\CurrentVersion\Run
      Creative Detector = G:\Programmes Install?s\Blaster MD\Detector\CTDetect.exe /R?r? ?M?D?\?D?e?t?e?c?t?o?r?\?C?T?D?e?t?e?c?t?.?e?x?e????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

      Balayage des fichiers cachés ...

      Scan terminé avec succès
      Les fichiers cachés: 0

      **************************************************************************
      .
      Temps d'accomplissement: 2008-06-25 9:27:44
      ComboFix-quarantined-files.txt 2008-06-25 07:27:22

      Pre-Run: 181,911,552 octets libres
      Post-Run: 186,150,912 octets libres

      158 --- E O F --- 2008-06-19 22:46:09



      voilà ça m'a l'air d'être très compliqué à enlever cette cochonnerie...pppffff

      Merci @+
      0
  3. Utilisateur anonyme
     
    Bonsoir,,
    Commence par poster un rapport HijackThis stp,
    >Télécharge HiJackThis : https://www.commentcamarche.net/telecharger/securite/11747-hijackthis/
    - Lance le programme, puis sélectionne < do a system scan and save a logfile >
    - Enregistre le rapport sur ton bureau.
    Et envoie, par collier/coller, ton log Hijackthis sur le forum,

    Ensuite,
    > Télécharge Navilog1 de Il Mafioso : http://perso.orange.fr/il.mafioso/Navifix/Navilog1.zip
    - Enregistre-le sur ton Bureau puis décompresse-le en faisant « extraire-tout ».
    - Double clique sur Navilog1.exe
    - Choisis pour la langue le français, puis l'option 1 et valide.
    Attention : n’utilise surtout pas les options 2,3 ou 4 maintenant. (tu risquerais d’endommager ton pc)
    - Patiente jusqu'au message : < Analyse Terminée le ..... > Ensuite appuie sur une touche comme demandé. Le Bloc-notes va s'ouvrir.
    - Fais un copier coller du rapport généré et poste-le ici.
    NB : Le rapport se trouve aussi à la racine de ton disque : fixnavi.txt

    A+
    0
    1. Zic
       
      D'accord je te remercie
      j'essaierai demain acr là je sature
      bye
      0
    2. Zic
       
      Bonjour, Voilà j'ai réussi à utilser hijackthis et voici le rapport:

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 17:10:38, on 24/06/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16674)
      Boot mode: Normal

      Running processes:
      F:\WINDOWS\System32\smss.exe
      F:\WINDOWS\system32\winlogon.exe
      F:\WINDOWS\system32\services.exe
      F:\WINDOWS\system32\lsass.exe
      F:\WINDOWS\system32\Ati2evxx.exe
      F:\WINDOWS\system32\svchost.exe
      F:\WINDOWS\System32\svchost.exe
      F:\WINDOWS\system32\spoolsv.exe
      F:\WINDOWS\system32\drivers\CDAC11BA.EXE
      F:\WINDOWS\system32\svchost.exe
      F:\WINDOWS\system32\MsPMSPSv.exe
      F:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
      F:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
      F:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
      F:\Program Files\Softwin\BitDefender10\vsserv.exe
      F:\WINDOWS\system32\Ati2evxx.exe
      F:\WINDOWS\Explorer.EXE
      F:\Program Files\Softwin\BitDefender10\bdmcon.exe
      F:\Program Files\Softwin\BitDefender10\bdagent.exe
      F:\WINDOWS\system32\ctfmon.exe
      F:\Program Files\Internet Explorer\iexplore.exe
      F:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://192.168.2.1/ServicesAcces.html
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - g:\programmes installés\adobe\Reader\ActiveX\AcroIEHelper.ocx
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - F:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] F:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
      O4 - HKLM\..\Run: [BDMCon] "F:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
      O4 - HKLM\..\Run: [BDAgent] "F:\Program Files\Softwin\BitDefender10\bdagent.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [updateMgr] "F:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
      O4 - HKCU\..\Run: [WOOKIT] F:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
      O4 - HKCU\..\Run: [Creative Detector] G:\Programmes Installés\Blaster MD\Detector\CTDetect.exe /R
      O4 - HKCU\..\Run: [MtdAcq] F:\Program Files\Creative\Shared Files\Media Sniffer\MtdAcq.EXE /s
      O4 - HKCU\..\Run: [Uniblue Registry Booster2] g:\Program Files\Uniblue\RegistryBooster2\RegistryBooster.exe /S
      O4 - HKCU\..\Run: [MsgCenterExe] "F:\Program Files\Fichiers communs\Real\Update_OB\RealOneMessageCenter.exe" -osboot
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: Microsoft Office.lnk = F:\Program Files\Microsoft Office\Office\OSA9.EXE
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe (file missing)
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe (file missing)
      O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
      O16 - DPF: Interface Chat Wanadoo - http://chat7.x-echo.com/version6/Applet/wchatsign.cab
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://a1540.g.akamai.net/
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
      O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.extrafilm.fr/ImageUploader4.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
      O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
      O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game13.zylom.com/activex/zylomgamesplayer.cab
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - F:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - F:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
      O23 - Service: Boonty Games - BOONTY - F:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
      O23 - Service: C-DillaCdaC11BA - Macrovision - F:\WINDOWS\system32\drivers\CDAC11BA.EXE
      O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - F:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
      O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - F:\Program Files\Softwin\BitDefender10\vsserv.exe
      O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - F:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
      End of file - 6904 bytes


      Et le Rapport avec navilog1:

      Search Navipromo version 3.5.8 commencé le 24/06/2008 à 17:13:27,20

      !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
      !!! Postez ce rapport sur le forum pour le faire analyser !!!
      !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

      Outil exécuté depuis F:\Program Files\navilog1
      Session actuelle : "steph"

      Mise à jour le 06.06.2008 à 18h00 par IL-MAFIOSO


      Microsoft Windows XP [version 5.1.2600]
      Internet Explorer : 7.0.5730.11
      Système de fichiers : NTFS

      Recherche executé en mode normal

      *** Recherche Programmes installés ***

      Favorit

      *** Recherche dossiers dans "F:\WINDOWS" ***


      *** Recherche dossiers dans "F:\Program Files" ***


      *** Recherche dossiers dans "f:\docume~1\alluse~1.win\applic~1" ***


      *** Recherche dossiers dans "f:\docume~1\alluse~1.win\menudm~1\progra~1" ***


      *** Recherche dossiers dans "F:\Documents and Settings\steph\applic~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\ADMINI~1\applic~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\ADMINI~1.X-A\applic~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\Johanna\applic~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\JOHANN~1.X-A\applic~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\Sabrina\applic~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\SABRIN~1.X-A\applic~1" ***


      *** Recherche dossiers dans "F:\Documents and Settings\steph\locals~1\applic~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\ADMINI~1.X-A\locals~1\applic~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\Johanna\locals~1\applic~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\JOHANN~1.X-A\locals~1\applic~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\Sabrina\locals~1\applic~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\SABRIN~1.X-A\locals~1\applic~1" ***


      *** Recherche dossiers dans "F:\Documents and Settings\steph\menudm~1\progra~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\ADMINI~1.X-A\menudm~1\progra~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\Johanna\menudm~1\progra~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\JOHANN~1.X-A\menudm~1\progra~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\Sabrina\menudm~1\progra~1" ***


      *** Recherche dossiers dans "F:\DOCUME~1\SABRIN~1.X-A\menudm~1\progra~1" ***

      *** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
      pour + d'infos :

      Fichier(s) caché(s) :

      F:\Documents and Settings\steph\Local Settings\Application Data\gexpha.dat
      F:\Documents and Settings\steph\Local Settings\Application Data\gexpha.exe
      F:\Documents and Settings\steph\Local Settings\Application Data\gexpha_nav.dat
      F:\Documents and Settings\steph\Local Settings\Application Data\gexpha_navps.dat


      *** Recherche avec GenericNaviSearch ***
      !!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
      !!! A vérifier impérativement avant toute suppression manuelle !!!

      * Recherche dans "F:\WINDOWS\system32" *

      * Recherche dans "F:\Documents and Settings\steph\locals~1\applic~1" *

      Fichiers trouvés :

      gexpha.exe trouvé !

      * Recherche dans "F:\DOCUME~1\ADMINI~1\locals~1\applic~1" *

      * Recherche dans "F:\DOCUME~1\ADMINI~1.X-A\locals~1\applic~1" *

      * Recherche dans "F:\DOCUME~1\Johanna\locals~1\applic~1" *

      * Recherche dans "F:\DOCUME~1\JOHANN~1.X-A\locals~1\applic~1" *

      * Recherche dans "F:\DOCUME~1\Sabrina\locals~1\applic~1" *

      * Recherche dans "F:\DOCUME~1\SABRIN~1.X-A\locals~1\applic~1" *



      *** Recherche fichiers ***


      F:\WINDOWS\system32\nvs2.inf trouvé !

      *** Recherche clés spécifiques dans le Registre ***

      HKEY_CURRENT_USER\Software\Lanconfig trouvé !

      *** Module de Recherche complémentaire ***
      (Recherche fichiers spécifiques)

      1)Recherche nouveaux fichiers Instant Access :


      2)Recherche Heuristique :

      * Dans "F:\WINDOWS\system32" :


      * Dans "F:\Documents and Settings\steph\locals~1\applic~1" :

      gexpha.dat trouvé !

      * Dans "F:\DOCUME~1\ADMINI~1\locals~1\applic~1" :


      * Dans "F:\DOCUME~1\ADMINI~1.X-A\locals~1\applic~1" :


      * Dans "F:\DOCUME~1\Johanna\locals~1\applic~1" :


      * Dans "F:\DOCUME~1\JOHANN~1.X-A\locals~1\applic~1" :


      * Dans "F:\DOCUME~1\Sabrina\locals~1\applic~1" :


      * Dans "F:\DOCUME~1\SABRIN~1.X-A\locals~1\applic~1" :


      3)Recherche Certificats :

      Certificat Egroup trouvé !
      Certificat Electronic-Group trouvé !
      Certificat OOO-Favorit trouvé !
      Certificat Sunny-Day-Design-Ltd absent !

      4)Recherche fichiers connus :



      *** Analyse terminée le 24/06/2008 à 17:20:03,01 ***

      De plus j'ai lancé une analyse approfondie avec bitdefender free et il m'a trouvé un virus "adware-mywebsearch" et j'ai enregistré le rapport suivant:

      //-----------------------------------------------------------------
      //
      // Produit BitDefender Free Edition v10
      // Produit 10.2
      //
      // Créé le: 24/06/2008 09:13:40
      //
      //-----------------------------------------------------------------


      Statistiques

      Chemin cible: F:\
      G:\
      Dossiers : 6152
      Fichiers : 117420
      Processus Mémoire analysés : 29
      Archives : 9104
      Fichiers enpaquetés : 7126
      Virus trouvés : 1
      Fichiers infectés : 1
      Processus Mémoire infectés : 0
      Fichiers suspects : 0
      Alertes : 0
      Fichiers désinfectés : 0
      Fichiers effacés : 1
      Fichiers déplacés : 0
      Erreurs I/O : 30
      Temps d'analyse :=00:54:24
      Fichiers/seconde :35

      Statistiques Spywares

      Registres analysés : 300
      Registres infectés : 0
      Cookies analysés : 51
      Cookies infectés : 1
      Fichiers spyware infectés : 0
      Menaces Spyware détectées : 1


      Définitions virus : 1262669
      Plugins d'analyse : 16
      Plugins archives : 42
      Plug-ins décompression : 7
      Plug-ins messagerie : 6
      Plug-ins système : 5

      Options d'analyse

      Détection
      [X] Analyser le secteur de boot
      [X] Processus mémoire
      [X] Analyser les archives
      [X] Analyser les fichiers enpaquetés
      [X] Analyser la messagerie

      Masque fichiers
      [ ] Programmes
      [X] Tous les fichiers
      [ ] Extensions définies par l'utilisateur:
      [ ] Exclure les extensions: ;

      Action

      Objets infectés
      [ ] Ignorer
      [X] Désinfecter
      [ ] Effacer
      [ ] Mettre en quarantaine
      [ ] Demander l'action

      Seconde action
      [ ] Ignorer
      [ ] Effacer
      [X] Mettre en quarantaine
      [ ] Demander l'action

      Options d'analyse
      [X] Activer les alertes
      [X] Activer l'heuristique
      [ ] Afficher tous les fichiers dans le journal
      [X] Fichier journal: F:\Documents and Settings\All Users.WINDOWS\Application Data\Bitdefender\Desktop\Profiles\Logs\deep_scan\1214291620.log

      Options d'analyse Spyware

      [X] Analyse contre les risques non-viraux
      [ ] Ecarter de l'analyse les dialers et les applications
      [X] Clés de registres
      [X] Cookies


      Résumé:

      <System>=>F:\Documents and Settings\steph\Cookies\steph@bs.serving-sys[2].txt Détecté: Cookie.BS.Serving-Sys
      <System>=>F:\Documents and Settings\steph\Cookies\steph@bs.serving-sys[2].txt Effacé
      <System> Recompression des archives réussie
      F:\Documents and Settings\All Users.aawqff=>(Embedded EXE g)=>(Embedded EXE 10o) Détecté: Adware.Mywebsearch.F
      F:\Documents and Settings\All Users.aawqff=>(Embedded EXE g)=>(Embedded EXE 10o) Désinfection impossible
      F:\Documents and Settings\All Users.aawqff=>(Embedded EXE g)=>(Embedded EXE 10o) Déplacement impossible


      Si vous pouvez m'aider ce serait super car avec tout cela je m'arrache les cheveux.

      Merci

      Bye et bonne soirée

      Configuration: Windows XP
      Internet Explorer 7.0
      0
  4. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  5. Utilisateur anonyme
     
    Bonjour,

    Est-ce qu'il fonctionne bien ce processus ?
    vu la clé, ça m'étonnerai...

    HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    Creative Detector = G:\Programmes Install?s\Blaster MD\Detector\CTDetect.exe /R?r? ?M?D?\?D?e?t?e?c?t?o?r?\?C?T?D?e?t?e?c?t?.?e?x?e??????????????????????????????????????????­??????????????????????????????????????????????????????????????????????????????????????????­????????????????

    Il correspond à ça : http://www.pcreview.co.uk/startup/CTDetect.exe/Creative%20Detector.php

    Ensuite,
    Petit nettoyage de printemps :
    > Les logiciels suivants (MalwareByte's Anti-Malware et Ccleaner) te seront utiles par la suite - ils sont à conserver...

    > Télécharge MalwareByte's Anti-Malware :
    - Installe le programme puis lance le stp.
    NB : S'il te manque COMCTL32.OCX alors télécharge le ici
    - Fais les mises à jour (clique sur "Mises à jour" puis "Recherche de mises à jour") puis ferme le programme.
    NB : Si tu as besoin : Tuto

    > Télécharge et installe Ccleaner :
    - Fais les mises à jour puis ferme le programme.
    Si besoin est tu trouveras des Tutoriaux : ici, ici et là.

    > Télécharge Clean (de Malekal Morte) (différent de Ccleaner)

    > Commence par faire un copier/coller de ce poste (cette manip.): (conseillé)
    Ouvre un nouveau fichier Bloc notes (clique sur "Démarrer" => "Programmes" =>"Accessoires" => "Bloc notes"),
    puis fait un copier/coller de tout le contenu de la fenêtre de ce poste dans le fichier texte.
    Sauvegarde le sur le bureau, tu pourras alors y avoir accès même déconnecté ou en mode sans échec.

    > Démarre en mode sans échec : (image). Si problème : tuto ici

    > Lance MalwareByte's Anti-Malware,
    - Clique sur "Executer un examen complet" puis "Rechercher" et sélectionne tous tes disques durs => le scan débute....patiente...
    - A la fin du scanne, clique sur "supprimer" (Si des éléments sont difficiles à supprimer, un message te demandera de redémarrer : clique sur "Oui" alors)
    - après suppression des infections : un rapport va être généré : sauvegarde le et poste le sur forum.

    > Lance Ccleaner,
    - Choisi l’onglet "Options" puis clique sur "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier temp de Windows, plus vieux que 48 heures" (tout doit être supprimé).
    - Dans l'onglet "Nettoyeur" clique sur "Analyse".
    - Une fois l'analyse terminée, clique sur "Lancer le Nettoyage".
    - Dans l'onglet "registre" => Recherches des erreurs => Réparer les erreurs sélectionnées => enregistre une sauvegarde => corriger toutes erreurs sélectionnées => ok => fermer.
    N.B : Si Ccleaner te propose d'enregistrer une sauvegarde, reponds oui et enregistre sous 'Bureau'
    Recommence jusqu’à ce qu’il ne trouve plus rien (cela varie en général entre 1 et 4 fois).

    > Pour Clean (encore en mode sans échec) :
    - Double-clic sur clean.cmd
    - Une fenêtre va apparaître, choisis l'option 2, suis les consignes et poste le rapport clean (Le rapport clean se trouve ici : C:\rapport_clean.txt)
    NB : Si besoin : Tuto

    > Relance ton PC en mode normal

    > Relance Hijackthis :
    Puis sélectionne < do a system scan and save a logfile >,
    Et envoie moi, par collier/coller, ton log Hijackthis,

    Bon courage,

    :-)

    NB : N'oublie pas de poster TOUS les rapports stp ( MalwareByte's Anti-Malware, Clean (différent de Ccleaner - ne poste pas celui de Ccleaner) puis HiJAckT).

    Et puis on termine.

    Comment va le PC ?

    A+
    0
    1. Zic
       
      Brrr que de boulot!

      Est ce qu'il faut que je lance un scan avec ce lien http://www.pcreview.co.uk/startup/CTDetect.exe/Creative%20Detector.php ?

      Dans le pc j'ai BeClean, est ce un bon logiciel?

      Merci A+
      0
    2. Zic
       
      DSl mais comment fait-on pour installer clean? le dossier est en .rar, je l'ai décompressé mais je ne sais pas comment l'exécuter...

      A+
      0
    3. Zic
       
      Dsl

      Malwarebyte's anti-malware ne se lance pas. J'ia une fenêtre: "Erreur372 Impossible de charger contrôle 'vbalGrid' à partir de vbalgrid6.ocx. Version pê obsolète"

      C'est le bazar!

      Que fais je maintenant?

      J'ai désinstallé les 3 logiciels car mon disque principal n'a plus que 92.8 Mo

      A+
      0
    4. Zic
       
      Bonjour,

      J'ai fait une manip et j'ia réussi à lancer malwarebyte'santimalware

      Rapports de Malware...

      Malwarebytes' Anti-Malware 1.18
      Version de la base de données: 893

      09:56:58 26/06/2008
      mbam-log-6-26-2008 (09-56-19).txt

      Type de recherche: Examen complet (F:\|G:\|)
      Eléments examinés: 115239
      Temps écoulé: 41 minute(s), 42 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 0
      Clé(s) du Registre infectée(s): 7
      Valeur(s) du Registre infectée(s): 0
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 0

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> No action taken.
      HKEY_CLASSES_ROOT\CLSID\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken.

      Valeur(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      (Aucun élément nuisible détecté)

      Fichier(s) infecté(s):
      (Aucun élément nuisible détecté)


      Et,
      Malwarebytes' Anti-Malware 1.18
      Version de la base de données: 893

      09:57:23 26/06/2008
      mbam-log-6-26-2008 (09-57-23).txt

      Type de recherche: Examen complet (F:\|G:\|)
      Eléments examinés: 115239
      Temps écoulé: 41 minute(s), 42 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 0
      Clé(s) du Registre infectée(s): 7
      Valeur(s) du Registre infectée(s): 0
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 0

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\CLSID\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.

      Valeur(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      (Aucun élément nuisible détecté)

      Fichier(s) infecté(s):
      (Aucun élément nuisible détecté)


      J'ia lancé Ccleaner et une errur n'a pu être corrigé portant je l'ai lancé plus de 4 fois...comment faire pour aller retrouver le rapport pour t'indiquer l'erreur en question?

      Le rapport de clean :
      Rapport clean par Malekal_morte - http://www.malekal.com
      Script execute en mode sans echec 26/06/2008 a 10:24:41,71

      Microsoft Windows XP [version 5.1.2600]

      *** Suppression des fichiers dans F:

      *** Suppression des fichiers dans F:\WINDOWS\

      *** Suppression des fichiers dans F:\WINDOWS\system32
      tentative de suppression de F:\WINDOWS\system32\bdod.bin
      tentative de suppression de F:\WINDOWS\system32\SpoonUninstall.exe

      *** Suppression des fichiers dans F:\Program Files

      *** Suppression des clefs du registre effectuee..


      Et enfin le rapport de Hijackthis:
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 11:01:16, on 26/06/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16674)
      Boot mode: Normal

      Running processes:
      F:\WINDOWS\System32\smss.exe
      F:\WINDOWS\system32\winlogon.exe
      F:\WINDOWS\system32\services.exe
      F:\WINDOWS\system32\lsass.exe
      F:\WINDOWS\system32\Ati2evxx.exe
      F:\WINDOWS\system32\svchost.exe
      F:\WINDOWS\System32\svchost.exe
      F:\WINDOWS\system32\spoolsv.exe
      F:\WINDOWS\system32\drivers\CDAC11BA.EXE
      F:\WINDOWS\system32\svchost.exe
      F:\WINDOWS\system32\MsPMSPSv.exe
      F:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
      F:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
      F:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
      F:\Program Files\Softwin\BitDefender10\vsserv.exe
      F:\WINDOWS\system32\Ati2evxx.exe
      F:\WINDOWS\Explorer.EXE
      G:\Programmes Installés\ZoneAlarm\zlclient.exe
      F:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
      F:\Program Files\Softwin\BitDefender10\bdagent.exe
      F:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe
      F:\WINDOWS\system32\ctfmon.exe
      F:\Program Files\Internet Explorer\iexplore.exe
      F:\Program Files\Trend Micro\HijackThis\HijackThis.exe
      F:\WINDOWS\system32\NOTEPAD.EXE

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://192.168.2.1/ServicesAcces.html
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - g:\programmes installés\adobe\Reader\ActiveX\AcroIEHelper.ocx
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - F:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [ZoneAlarm Client] "G:\Programmes Installés\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] F:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
      O4 - HKLM\..\Run: [BDMCon] F:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
      O4 - HKLM\..\Run: [BDAgent] "F:\Program Files\Softwin\BitDefender10\bdagent.exe"
      O4 - HKCU\..\Run: [Uniblue RegistryBooster 2] F:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S
      O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Creative Detector] G:\Programmes Installés\Blaster MD\Detector\CTDetect.exe /R
      O4 - HKCU\..\Run: [WOOKIT] F:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
      O4 - HKCU\..\Run: [updateMgr] "F:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
      O4 - HKCU\..\Run: [Uniblue Registry Booster2] g:\Program Files\Uniblue\RegistryBooster2\RegistryBooster.exe /S
      O4 - HKCU\..\Run: [MtdAcq] F:\Program Files\Creative\Shared Files\Media Sniffer\MtdAcq.EXE /s
      O4 - HKCU\..\Run: [MsnMsgr] "F:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [MSMSGS] "F:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [MsgCenterExe] "F:\Program Files\Fichiers communs\Real\Update_OB\RealOneMessageCenter.exe" -osboot
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: Microsoft Office.lnk = F:\Program Files\Microsoft Office\Office\OSA9.EXE
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe (file missing)
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe (file missing)
      O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
      O16 - DPF: Interface Chat Wanadoo - http://chat7.x-echo.com/version6/Applet/wchatsign.cab
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://a1540.g.akamai.net/7/1540/52/20070501/qtinstall.info.apple.com/qtactivex/qtplugin.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - F:\Program Files\Yahoo!\Common\yinsthelper.dll
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
      O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} - http://www.extrafilm.fr/ImageUploader4.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
      O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
      O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game13.zylom.com/activex/zylomgamesplayer.cab
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - F:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - F:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
      O23 - Service: Boonty Games - BOONTY - F:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
      O23 - Service: C-DillaCdaC11BA - Macrovision - F:\WINDOWS\system32\drivers\CDAC11BA.EXE
      O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - F:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
      O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - F:\Program Files\Softwin\BitDefender10\vsserv.exe
      O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - F:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
      0
  6. Zic
     
    Bonjour

    J'ai lancé un scan avec creative detector mais que dois je faire? deux onglets à sélectionner à la fin du scan(en anglais)?

    Le rapport est:

    Scan Results
    --------------------------------------------------------------------------------
    Scanning Date: Thursday, June 26, 2008 - 08:01 AM
    Total Problems Found: 818

    --------------------------------------------------------------------------------

    --------------------------------------------------------------------------------

    Scanning Section: Activex, OLE, COM sections
    Entries Found: 444
    Entries:
    Entry: HKEY_CLASSES_ROOT\CLSID\{00021290-0000-0000-C000-000000000046}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{00021290-0000-0000-C000-000000000046} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0002CC1F-0000-0000-C000-000000000046}\LocalServer32
    Valuename:
    Value:
    Reason: ( The key LocalServer32 under HKEY_CLASSES_ROOT\CLSID\{0002CC1F-0000-0000-C000-000000000046} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0002CC1F-0000-0000-C000-000000000046}\LocalServer
    Valuename:
    Value:
    Reason: ( The key LocalServer under HKEY_CLASSES_ROOT\CLSID\{0002CC1F-0000-0000-C000-000000000046} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0002CE02-0000-0000-C000-000000000046}\LocalServer32
    Valuename:
    Value:
    Reason: ( The key LocalServer32 under HKEY_CLASSES_ROOT\CLSID\{0002CE02-0000-0000-C000-000000000046} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0006F03A-0000-0000-C000-000000000046}\TypeLib
    Valuename:
    Value: 00062FFF-0000-0000-C000-000000000046
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{0006F03A-0000-0000-C000-000000000046}\TypeLib key points to the missing Type Library 00062FFF-0000-0000-C000-000000000046 )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0006F08A-0000-0000-C000-000000000046}\LocalServer32
    Valuename:
    Value:
    Reason: ( The key LocalServer32 under HKEY_CLASSES_ROOT\CLSID\{0006F08A-0000-0000-C000-000000000046} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{01C3D4A0-A701-11D1-8324-00A024CAA292}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{01C3D4A0-A701-11D1-8324-00A024CAA292} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{01C3D4A1-A701-11D1-8324-00A024CAA292}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{01C3D4A1-A701-11D1-8324-00A024CAA292} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{01C3D4A2-A701-11D1-8324-00A024CAA292}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{01C3D4A2-A701-11D1-8324-00A024CAA292} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{01C3D4A3-A701-11D1-8324-00A024CAA292}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{01C3D4A3-A701-11D1-8324-00A024CAA292} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{01C3D4A4-A701-11D1-8324-00A024CAA292}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{01C3D4A4-A701-11D1-8324-00A024CAA292} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{01C3D4A5-A701-11D1-8324-00A024CAA292}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{01C3D4A5-A701-11D1-8324-00A024CAA292} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{01C3D4A6-A701-11D1-8324-00A024CAA292}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{01C3D4A6-A701-11D1-8324-00A024CAA292} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{01C3D4A7-A701-11D1-8324-00A024CAA292}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{01C3D4A7-A701-11D1-8324-00A024CAA292} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{01C3D4A8-A701-11D1-8324-00A024CAA292}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{01C3D4A8-A701-11D1-8324-00A024CAA292} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0254F2B0-7116-40FC-8551-A2ED8C0C5872}\LocalServer32
    Valuename:
    Value: G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{0254F2B0-7116-40FC-8551-A2ED8C0C5872} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{02768AAF-7B48-48AB-B5EB-4A60EFF00587}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll in the HKEY_CLASSES_ROOT\CLSID\{02768AAF-7B48-48AB-B5EB-4A60EFF00587} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{02989195-B026-4182-9119-EC2BEC388237}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcAntiSpywareLibrary.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcAntiSpywareLibrary.dll in the HKEY_CLASSES_ROOT\CLSID\{02989195-B026-4182-9119-EC2BEC388237} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{03819E35-56B6-42BB-9CAD-5A8768D7556B}\LocalServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{03819E35-56B6-42BB-9CAD-5A8768D7556B} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{038E9840-12DD-40E8-82BE-DA826423886E}\LocalServer32
    Valuename:
    Value: G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{038E9840-12DD-40E8-82BE-DA826423886E} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32
    Valuename:
    Value: F:\Program Files\Skype\Plugin Manager\ezPMUtils.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Skype\Plugin Manager\ezPMUtils.dll in the HKEY_CLASSES_ROOT\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{03F3EB8F-BF06-488F-A808-B3A3EAD5C968}\LocalServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{03F3EB8F-BF06-488F-A808-B3A3EAD5C968} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0482E074-C5B7-101A-82E0-08002B36A333}\LocalServer32
    Valuename:
    Value:
    Reason: ( The key LocalServer32 under HKEY_CLASSES_ROOT\CLSID\{0482E074-C5B7-101A-82E0-08002B36A333} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{04A8A9B0-9AE5-424D-8597-96F76B75E264}\LocalServer32
    Valuename:
    Value: F:\Program Files\ABBYY\FineReader 5.0 Sprint\Sprint.exe /StiDevice:%1 /StiEvent:%2
    Reason: ( The LocalServer32 points to the missing program F:\Program Files\ABBYY\FineReader 5.0 Sprint\Sprint.exe /StiDevice:%1 /StiEvent:%2 in the HKEY_CLASSES_ROOT\CLSID\{04A8A9B0-9AE5-424D-8597-96F76B75E264} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0661FFC2-46C1-45C8-A78D-B85144D83B47}\LocalServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{0661FFC2-46C1-45C8-A78D-B85144D83B47} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0932B8A4-BBB4-4bc0-A8AB-91C626950C75}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{0932B8A4-BBB4-4bc0-A8AB-91C626950C75} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{09AC4892-81B7-4d39-B235-8F0DB0DAF4F8}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{09AC4892-81B7-4d39-B235-8F0DB0DAF4F8} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0b1511cd-37ee-4f0a-9647-cb2785b68a29}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\Ahead\Lib\NeroCBUI.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\Ahead\Lib\NeroCBUI.dll in the HKEY_CLASSES_ROOT\CLSID\{0b1511cd-37ee-4f0a-9647-cb2785b68a29} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0b1511cd-37ee-4f0a-9647-cb2785b68a29}\TypeLib
    Valuename:
    Value: {b3267063-8ab4-464d-a13c-1517bd6dc6f4}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{0b1511cd-37ee-4f0a-9647-cb2785b68a29}\TypeLib key points to the missing Type Library {b3267063-8ab4-464d-a13c-1517bd6dc6f4} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0BB5A190-C4AD-4FD1-BF00-E10DD98246A6}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll in the HKEY_CLASSES_ROOT\CLSID\{0BB5A190-C4AD-4FD1-BF00-E10DD98246A6} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0BB66938-FC89-4658-A365-7CD7F60E87E7}\LocalServer32
    Valuename:
    Value: G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{0BB66938-FC89-4658-A365-7CD7F60E87E7} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0C269E51-9FFC-4712-A5B4-6ED3D45636C6}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll in the HKEY_CLASSES_ROOT\CLSID\{0C269E51-9FFC-4712-A5B4-6ED3D45636C6} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0CA55C77-CC60-408B-94C6-EC772FD104A9}\LocalServer32
    Valuename:
    Value: G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{0CA55C77-CC60-408B-94C6-EC772FD104A9} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0D64F7E4-BFB9-448C-903F-C4622D7592A7}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll in the HKEY_CLASSES_ROOT\CLSID\{0D64F7E4-BFB9-448C-903F-C4622D7592A7} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0DE200BA-4B11-49C4-83F9-9E1F749E5700}\LocalServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{0DE200BA-4B11-49C4-83F9-9E1F749E5700} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0edcdb7d-cd9e-44e6-9e9a-adbaa85540e8}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\Ahead\Lib\NeroCBUI.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\Ahead\Lib\NeroCBUI.dll in the HKEY_CLASSES_ROOT\CLSID\{0edcdb7d-cd9e-44e6-9e9a-adbaa85540e8} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{0edcdb7d-cd9e-44e6-9e9a-adbaa85540e8}\TypeLib
    Valuename:
    Value: {b3267063-8ab4-464d-a13c-1517bd6dc6f4}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{0edcdb7d-cd9e-44e6-9e9a-adbaa85540e8}\TypeLib key points to the missing Type Library {b3267063-8ab4-464d-a13c-1517bd6dc6f4} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{1159F2AF-F989-4d11-8B34-9550029269BB}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{1159F2AF-F989-4d11-8B34-9550029269BB} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{1230CAE5-32C9-49BB-AC53-D7067FEC16A6}\InprocServer32
    Valuename:
    Value: F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\SPTISR~2.DLL
    Reason: ( The InprocServer32 points to the missing program F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\SPTISR~2.DLL in the HKEY_CLASSES_ROOT\CLSID\{1230CAE5-32C9-49BB-AC53-D7067FEC16A6} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{13973210-8B95-4B00-B4A0-87C7E6854CCE}\LocalServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{13973210-8B95-4B00-B4A0-87C7E6854CCE} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{1447E2CC-7C0C-4194-99F3-BB409DF1E8E0}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll in the HKEY_CLASSES_ROOT\CLSID\{1447E2CC-7C0C-4194-99F3-BB409DF1E8E0} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{1798921C-C200-4ED6-9AEA-5C53EED3DF4F}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcAntiSpywareLibrary.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcAntiSpywareLibrary.dll in the HKEY_CLASSES_ROOT\CLSID\{1798921C-C200-4ED6-9AEA-5C53EED3DF4F} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A}\LocalServer32
    Valuename:
    Value: F:\PROGRA~1\AVG\AVG8\aAvgApi.exe
    Reason: ( The LocalServer32 points to the missing program F:\PROGRA~1\AVG\AVG8\aAvgApi.exe in the HKEY_CLASSES_ROOT\CLSID\{18B30EBF-6B58-425E-AC54-831C05D91B5A} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{1c613f47-70c5-4551-a264-f7254139854c}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\Ahead\Lib\NeroCBUI.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\Ahead\Lib\NeroCBUI.dll in the HKEY_CLASSES_ROOT\CLSID\{1c613f47-70c5-4551-a264-f7254139854c} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{1c613f47-70c5-4551-a264-f7254139854c}\TypeLib
    Valuename:
    Value: {b3267063-8ab4-464d-a13c-1517bd6dc6f4}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{1c613f47-70c5-4551-a264-f7254139854c}\TypeLib key points to the missing Type Library {b3267063-8ab4-464d-a13c-1517bd6dc6f4} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{1CA68D9F-3A22-4EE6-8DD3-9F4BA554625A}\LocalServer32
    Valuename:
    Value: G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{1CA68D9F-3A22-4EE6-8DD3-9F4BA554625A} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{1E106BCE-DB1F-45DD-B449-0ACA539A215C}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASSoapLib.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASSoapLib.dll in the HKEY_CLASSES_ROOT\CLSID\{1E106BCE-DB1F-45DD-B449-0ACA539A215C} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{1FAE3754-F46B-45DA-B4CF-9EBF92E950EA}\LocalServer32
    Valuename:
    Value: G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{1FAE3754-F46B-45DA-B4CF-9EBF92E950EA} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{1FE7C365-F6A9-4AD2-A075-D61F9AD59236}\LocalServer32
    Valuename:
    Value: G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{1FE7C365-F6A9-4AD2-A075-D61F9AD59236} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{20351880-1EF9-4879-A646-9FAF6D9FC87D}\LocalServer32
    Valuename:
    Value: G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{20351880-1EF9-4879-A646-9FAF6D9FC87D} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{2089ADC0-BE09-11CE-AAE4-CE6AC0F06E88}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{2089ADC0-BE09-11CE-AAE4-CE6AC0F06E88} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{21B20C04-9705-f4bf-FBBD-921F93AA5ADC}\TypeLib
    Valuename:
    Value: {ECFB0AC2-799E-e80a-F9C1-9D052CA5793A}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{21B20C04-9705-f4bf-FBBD-921F93AA5ADC}\TypeLib key points to the missing Type Library {ECFB0AC2-799E-e80a-F9C1-9D052CA5793A} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{22389272-F834-4FE1-9019-954A332CD789}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcAntiSpywareLibrary.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcAntiSpywareLibrary.dll in the HKEY_CLASSES_ROOT\CLSID\{22389272-F834-4FE1-9019-954A332CD789} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{227949BE-EBB8-4D13-9E2B-AC98CAFB9E78}\InprocServer32
    Valuename:
    Value: G:\Programmes Installés\K-lite codec Pack (codecs)\K-Lite Codec Pack\filters\CoreFLACDecoder.ax
    Reason: ( The InprocServer32 points to the missing program G:\Programmes Installés\K-lite codec Pack (codecs)\K-Lite Codec Pack\filters\CoreFLACDecoder.ax in the HKEY_CLASSES_ROOT\CLSID\{227949BE-EBB8-4D13-9E2B-AC98CAFB9E78} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\LocalServer32
    Valuename:
    Value:
    Reason: ( The key LocalServer32 under HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{235F44A7-3618-4044-AE48-C08471C7E887}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcAntiSpywareLibrary.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcAntiSpywareLibrary.dll in the HKEY_CLASSES_ROOT\CLSID\{235F44A7-3618-4044-AE48-C08471C7E887} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{23AF82A5-E704-4EBC-BFE8-DF33EA467512}\LocalServer32
    Valuename:
    Value: G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{23AF82A5-E704-4EBC-BFE8-DF33EA467512} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{24FBD48F-275E-4b3f-A169-08969C996A0D}\InprocServer32
    Valuename:
    Value: F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\mswm.dll
    Reason: ( The InprocServer32 points to the missing program F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\mswm.dll in the HKEY_CLASSES_ROOT\CLSID\{24FBD48F-275E-4b3f-A169-08969C996A0D} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{25AE8E5D-A3D7-46CF-882D-B30FA103DB14}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll in the HKEY_CLASSES_ROOT\CLSID\{25AE8E5D-A3D7-46CF-882D-B30FA103DB14} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{271FC829-DF65-4020-9087-2222AEF54490}\InprocServer32
    Valuename:
    Value: F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\NetMD.dll
    Reason: ( The InprocServer32 points to the missing program F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\NetMD.dll in the HKEY_CLASSES_ROOT\CLSID\{271FC829-DF65-4020-9087-2222AEF54490} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{2871FC9B-5E34-4AAE-9E9C-EBD1652D5C92}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{2871FC9B-5E34-4AAE-9E9C-EBD1652D5C92} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{2917297f-f02b-4b9d-81df-494b6333150b}\TypeLib
    Valuename:
    Value: {{3d02bb77-f1f5-491f-af7d-86ff64847f0b}}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{2917297f-f02b-4b9d-81df-494b6333150b}\TypeLib key points to the missing Type Library {{3d02bb77-f1f5-491f-af7d-86ff64847f0b}} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{2AFC1A12-65EC-433A-BF9B-7AD381F1EF10}\LocalServer32
    Valuename:
    Value: G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{2AFC1A12-65EC-433A-BF9B-7AD381F1EF10} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{2B7E6AA9-C4FA-4951-815B-4AFE39D81453}\InprocServer32
    Valuename:
    Value: F:\Program Files\Messenger\msgsc.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Messenger\msgsc.dll in the HKEY_CLASSES_ROOT\CLSID\{2B7E6AA9-C4FA-4951-815B-4AFE39D81453} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{2D0DE198-0296-4A84-AC3B-0DB11C7F62F2}\LocalServer32
    Valuename:
    Value: G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{2D0DE198-0296-4A84-AC3B-0DB11C7F62F2} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{2DE3F90D-ACA9-4AC8-9033-DE2F360C4F7A}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\Ahead\Lib\AdvrCntr.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\Ahead\Lib\AdvrCntr.dll in the HKEY_CLASSES_ROOT\CLSID\{2DE3F90D-ACA9-4AC8-9033-DE2F360C4F7A} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{2F68F796-69A1-4B88-97A9-19E477974204}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll in the HKEY_CLASSES_ROOT\CLSID\{2F68F796-69A1-4B88-97A9-19E477974204} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{3789E9E8-BE1A-4CD8-9DCF-AEDA87AC2E4B}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll in the HKEY_CLASSES_ROOT\CLSID\{3789E9E8-BE1A-4CD8-9DCF-AEDA87AC2E4B} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{37AB4877-60C3-48EC-B119-A96783066031}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll in the HKEY_CLASSES_ROOT\CLSID\{37AB4877-60C3-48EC-B119-A96783066031} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{37FBC1D9-8FB9-4E5D-A1C2-FE9401CAD56A}\LocalServer32
    Valuename:
    Value: "F:\Program Files\Windows Live Safety Center\wlscUploader.exe"
    Reason: ( The LocalServer32 points to the missing program "F:\Program Files\Windows Live Safety Center\wlscUploader.exe" in the HKEY_CLASSES_ROOT\CLSID\{37FBC1D9-8FB9-4E5D-A1C2-FE9401CAD56A} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{38FF207F-2181-4187-89F5-196756A8EC3F}\InprocServer32
    Valuename:
    Value: F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\mswm.dll
    Reason: ( The InprocServer32 points to the missing program F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\mswm.dll in the HKEY_CLASSES_ROOT\CLSID\{38FF207F-2181-4187-89F5-196756A8EC3F} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{3918D75F-0ACB-41F2-B733-92AA15BCECF6}\TypeLib
    Valuename:
    Value: {9903F14C-12CE-4C99-9986-2EE3D7D588A8}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{3918D75F-0ACB-41F2-B733-92AA15BCECF6}\TypeLib key points to the missing Type Library {9903F14C-12CE-4C99-9986-2EE3D7D588A8} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{39552712-BB70-4fcd-8A49-1A3FF29999FE}\InprocServer32
    Valuename:
    Value: F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\mswm.dll
    Reason: ( The InprocServer32 points to the missing program F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\mswm.dll in the HKEY_CLASSES_ROOT\CLSID\{39552712-BB70-4fcd-8A49-1A3FF29999FE} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{395C0BE7-0CA1-4D1C-8B1A-AF4C683A5BB4}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll in the HKEY_CLASSES_ROOT\CLSID\{395C0BE7-0CA1-4D1C-8B1A-AF4C683A5BB4} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{398BD73C-76C2-4376-B595-5B35E4FA5F1D}\LocalServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{398BD73C-76C2-4376-B595-5B35E4FA5F1D} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{39A2C2A6-4778-11D2-9BDB-204C4F4F5020}\TypeLib
    Valuename:
    Value: {39A2C297-4778-11D2-9BDB-204C4F4F5020}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{39A2C2A6-4778-11D2-9BDB-204C4F4F5020}\TypeLib key points to the missing Type Library {39A2C297-4778-11D2-9BDB-204C4F4F5020} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{39A2C2A9-4778-11D2-9BDB-204C4F4F5020}\TypeLib
    Valuename:
    Value: {39A2C297-4778-11D2-9BDB-204C4F4F5020}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{39A2C2A9-4778-11D2-9BDB-204C4F4F5020}\TypeLib key points to the missing Type Library {39A2C297-4778-11D2-9BDB-204C4F4F5020} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{3A5AC3A7-CC29-47F8-A0FF-AB82F3D2D9F5}\LocalServer32
    Valuename:
    Value: G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{3A5AC3A7-CC29-47F8-A0FF-AB82F3D2D9F5} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{3B56ACCD-47B2-4aea-8C2E-1FCC1687D4E4}\InprocServer32
    Valuename:
    Value: F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\Falcon.dll
    Reason: ( The InprocServer32 points to the missing program F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\Falcon.dll in the HKEY_CLASSES_ROOT\CLSID\{3B56ACCD-47B2-4aea-8C2E-1FCC1687D4E4} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{3BE260D0-9FCB-4C1B-B514-708BBB385389}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll in the HKEY_CLASSES_ROOT\CLSID\{3BE260D0-9FCB-4C1B-B514-708BBB385389} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{3C4E3B8D-98C8-4701-92D6-64702D6A9EEF}\LocalServer32
    Valuename:
    Value: G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{3C4E3B8D-98C8-4701-92D6-64702D6A9EEF} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{3D276BF5-0093-4084-B1B1-A3871DF19E1D}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\Ahead\Lib\apreg.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\Ahead\Lib\apreg.dll in the HKEY_CLASSES_ROOT\CLSID\{3D276BF5-0093-4084-B1B1-A3871DF19E1D} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{3F29DC1A-A2CC-4E9F-B0AC-A2C0A0D31722}\LocalServer32
    Valuename:
    Value: F:\Program Files\EPSON\Photo Print\EPPApp.exe /StiDevice:%1 /StiEvent:%2
    Reason: ( The LocalServer32 points to the missing program F:\Program Files\EPSON\Photo Print\EPPApp.exe /StiDevice:%1 /StiEvent:%2 in the HKEY_CLASSES_ROOT\CLSID\{3F29DC1A-A2CC-4E9F-B0AC-A2C0A0D31722} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{40AF8201-4E6E-11D4-878D-00C0F6B0D1A7}\InprocServer32
    Valuename:
    Value: F:\Program Files\ArcSoft\PhotoImpression 4\ezrgb24.ax
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\ArcSoft\PhotoImpression 4\ezrgb24.ax in the HKEY_CLASSES_ROOT\CLSID\{40AF8201-4E6E-11D4-878D-00C0F6B0D1A7} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{4163E2C5-690A-4FE4-974D-A4FA0C067F6D}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll in the HKEY_CLASSES_ROOT\CLSID\{4163E2C5-690A-4FE4-974D-A4FA0C067F6D} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32
    Valuename:
    Value: F:\Program Files\Skype\Plugin Manager\ezPMUtils.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Skype\Plugin Manager\ezPMUtils.dll in the HKEY_CLASSES_ROOT\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{455EE702-A8ED-4949-ADF7-2D11F0E3A393}\InprocServer32
    Valuename:
    Value: F:\WINDOWS\Twain_32\QuickCam\vsf.ax
    Reason: ( The InprocServer32 points to the missing program F:\WINDOWS\Twain_32\QuickCam\vsf.ax in the HKEY_CLASSES_ROOT\CLSID\{455EE702-A8ED-4949-ADF7-2D11F0E3A393} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{456E55C3-6DC8-4B6A-8E72-D096E7812545}\LocalServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{456E55C3-6DC8-4B6A-8E72-D096E7812545} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{457A23DF-6F2A-4684-91D0-317FB768D87C}\TypeLib
    Valuename:
    Value: {179C8845-1F8D-498D-82BB-949CDF2C7236}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{457A23DF-6F2A-4684-91D0-317FB768D87C}\TypeLib key points to the missing Type Library {179C8845-1F8D-498D-82BB-949CDF2C7236} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{45C4810A-EE8A-4FB6-AB59-629D900CF83F}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASPrivacyLib.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASPrivacyLib.dll in the HKEY_CLASSES_ROOT\CLSID\{45C4810A-EE8A-4FB6-AB59-629D900CF83F} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{45FA9444-4734-4CDA-A5B5-B90BAC76C12D}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll in the HKEY_CLASSES_ROOT\CLSID\{45FA9444-4734-4CDA-A5B5-B90BAC76C12D} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{462A5550-44CF-4AC8-AE32-79E2170F2A1B}\LocalServer32
    Valuename:
    Value: "F:\Program Files\Fichiers communs\Droppix\Droppix Label Maker\DxPrinter.exe"
    Reason: ( The LocalServer32 points to the missing program "F:\Program Files\Fichiers communs\Droppix\Droppix Label Maker\DxPrinter.exe" in the HKEY_CLASSES_ROOT\CLSID\{462A5550-44CF-4AC8-AE32-79E2170F2A1B} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{466D66FA-9616-11D2-9342-0000F875AE17}\TypeLib
    Valuename:
    Value: {466D66ED-9616-11D2-9342-0000F875AE17}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{466D66FA-9616-11D2-9342-0000F875AE17}\TypeLib key points to the missing Type Library {466D66ED-9616-11D2-9342-0000F875AE17} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{46706129-CC51-43a3-ADF2-32FA20635949}\InprocServer32
    Valuename:
    Value: F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\Falcon.dll
    Reason: ( The InprocServer32 points to the missing program F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\Falcon.dll in the HKEY_CLASSES_ROOT\CLSID\{46706129-CC51-43a3-ADF2-32FA20635949} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{46A5C24D-6EE6-438D-B389-3C48C29C2CD0}\LocalServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{46A5C24D-6EE6-438D-B389-3C48C29C2CD0} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{4793C987-099C-446e-964E-3F69F33834F3}\InprocServer32
    Valuename:
    Value: F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\NetMD.dll
    Reason: ( The InprocServer32 points to the missing program F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\NetMD.dll in the HKEY_CLASSES_ROOT\CLSID\{4793C987-099C-446e-964E-3F69F33834F3} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{4966A6E3-D77A-42D5-9BC0-EED2215430D7}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\Ahead\Lib\AdvrCntr.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\Ahead\Lib\AdvrCntr.dll in the HKEY_CLASSES_ROOT\CLSID\{4966A6E3-D77A-42D5-9BC0-EED2215430D7} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{4B718E68-C132-4319-8D3B-750FC01E7C43}\LocalServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{4B718E68-C132-4319-8D3B-750FC01E7C43} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{4C76CAD6-DF47-440F-94D4-F85365945177}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcAntiSpywareLibrary.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcAntiSpywareLibrary.dll in the HKEY_CLASSES_ROOT\CLSID\{4C76CAD6-DF47-440F-94D4-F85365945177} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{4C7AAF4A-9414-455F-9D6D-54B3A7069DCF}\LocalServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{4C7AAF4A-9414-455F-9D6D-54B3A7069DCF} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{4C8DD17E-7079-4c7e-96E5-A7AFDB12F132}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{4C8DD17E-7079-4c7e-96E5-A7AFDB12F132} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{4C904448-74A9-11d0-AF6E-00C04FD8DC02}\InprocServer32
    Valuename:
    Value: F:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRdIF.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRdIF.dll in the HKEY_CLASSES_ROOT\CLSID\{4C904448-74A9-11d0-AF6E-00C04FD8DC02} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{4EC0690F-EA6F-4573-845F-782AD19F35DB}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\Ahead\Lib\AdvrCntr.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\Ahead\Lib\AdvrCntr.dll in the HKEY_CLASSES_ROOT\CLSID\{4EC0690F-EA6F-4573-845F-782AD19F35DB} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{4ECB650F-4630-41D3-AC9A-C8F926FC5907}\TypeLib
    Valuename:
    Value: {246E5F49-035B-4962-B353-6861193396FB}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{4ECB650F-4630-41D3-AC9A-C8F926FC5907}\TypeLib key points to the missing Type Library {246E5F49-035B-4962-B353-6861193396FB} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{4F0BA33E-29D0-43C8-A4F6-1FE136FA5D5B}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcTCPObjLib.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcTCPObjLib.dll in the HKEY_CLASSES_ROOT\CLSID\{4F0BA33E-29D0-43C8-A4F6-1FE136FA5D5B} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{4FA3B676-FF36-4967-B283-19AE85D7D4E6}\InprocServer32
    Valuename:
    Value: F:\WINDOWS\DOWNLO~1\oscan8.ocx
    Reason: ( The InprocServer32 points to the missing program F:\WINDOWS\DOWNLO~1\oscan8.ocx in the HKEY_CLASSES_ROOT\CLSID\{4FA3B676-FF36-4967-B283-19AE85D7D4E6} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{4FE65F23-F99C-48D1-B4B6-5F859C71DA2A}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll in the HKEY_CLASSES_ROOT\CLSID\{4FE65F23-F99C-48D1-B4B6-5F859C71DA2A} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{4FE8FFE1-FCCA-49c4-A363-525AB7C5B7CF}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{4FE8FFE1-FCCA-49c4-A363-525AB7C5B7CF} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{50553481-A590-49D4-98A8-0136244F7F36}\LocalServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{50553481-A590-49D4-98A8-0136244F7F36} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{517539A3-905F-4755-9F94-D91B095A07CC}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{517539A3-905F-4755-9F94-D91B095A07CC} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{5440837F-4BFF-4AE5-A1B1-7722ECC6332A}\TypeLib
    Valuename:
    Value: {0EF20641-8773-4B65-955C-C12C206EB86C}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{5440837F-4BFF-4AE5-A1B1-7722ECC6332A}\TypeLib key points to the missing Type Library {0EF20641-8773-4B65-955C-C12C206EB86C} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{54E91D5F-C482-4F04-AE05-C45031135162}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll in the HKEY_CLASSES_ROOT\CLSID\{54E91D5F-C482-4F04-AE05-C45031135162} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{55265A35-B335-44FE-BFB4-854E3461004D}\InprocServer32
    Valuename:
    Value: F:\Program Files\Windows Live Safety Center\wlscCore.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Windows Live Safety Center\wlscCore.dll in the HKEY_CLASSES_ROOT\CLSID\{55265A35-B335-44FE-BFB4-854E3461004D} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{56336BCA-3D8A-11d6-A00B-0050DA18DE71}\InprocServer32
    Valuename:
    Value: F:\DOCUME~1\steph\LOCALS~1\Temp\InfoWindow.dll
    Reason: ( The InprocServer32 points to the missing program F:\DOCUME~1\steph\LOCALS~1\Temp\InfoWindow.dll in the HKEY_CLASSES_ROOT\CLSID\{56336BCA-3D8A-11d6-A00B-0050DA18DE71} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{5717E2AC-8A5C-47b7-BFE5-50BAD65AB904}\LocalServer32
    Valuename:
    Value: "G:\PROGRA~1\AUDIOG~1\rhaphlpr.exe"
    Reason: ( The LocalServer32 points to the missing program "G:\PROGRA~1\AUDIOG~1\rhaphlpr.exe" in the HKEY_CLASSES_ROOT\CLSID\{5717E2AC-8A5C-47b7-BFE5-50BAD65AB904} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{5872C980-0AAF-4cdb-A62D-4F453DA2EFAD}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{5872C980-0AAF-4cdb-A62D-4F453DA2EFAD} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{59737BED-CBE9-4D02-B537-DA95C5A2591A}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll in the HKEY_CLASSES_ROOT\CLSID\{59737BED-CBE9-4D02-B537-DA95C5A2591A} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{59FA1D1E-3B4C-4311-BB1B-7BF16C607388}\InprocServer32
    Valuename:
    Value: F:\PROGRA~1\Ahead\COVERD~1\COVERE~1.OCX
    Reason: ( The InprocServer32 points to the missing program F:\PROGRA~1\Ahead\COVERD~1\COVERE~1.OCX in the HKEY_CLASSES_ROOT\CLSID\{59FA1D1E-3B4C-4311-BB1B-7BF16C607388} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{5D09EF28-9230-48F7-B9C5-1F60F02A8E1A}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASSoapLib.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASSoapLib.dll in the HKEY_CLASSES_ROOT\CLSID\{5D09EF28-9230-48F7-B9C5-1F60F02A8E1A} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{5E469997-6DF8-46d9-BE8E-37D6E2A84BE1}\InprocServer32
    Valuename:
    Value: F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\NetMD.dll
    Reason: ( The InprocServer32 points to the missing program F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\NetMD.dll in the HKEY_CLASSES_ROOT\CLSID\{5E469997-6DF8-46d9-BE8E-37D6E2A84BE1} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{601B35E2-C013-4889-A315-F4E381F4B56E}\InprocServer32
    Valuename:
    Value: F:\WINDOWS\twain_32\QuickCam\pcsmart.dll
    Reason: ( The InprocServer32 points to the missing program F:\WINDOWS\twain_32\QuickCam\pcsmart.dll in the HKEY_CLASSES_ROOT\CLSID\{601B35E2-C013-4889-A315-F4E381F4B56E} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{601B35E2-C013-4889-A315-F4E381F4B56E}\TypeLib
    Valuename:
    Value: {8E63E664-8C17-44F5-B704-61D35D01C6C9}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{601B35E2-C013-4889-A315-F4E381F4B56E}\TypeLib key points to the missing Type Library {8E63E664-8C17-44F5-B704-61D35D01C6C9} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{6089A37E-EB8A-482D-BD6F-F9F46904D16D}\TypeLib
    Valuename:
    Value: {0EF20641-8773-4B65-955C-C12C206EB86C}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{6089A37E-EB8A-482D-BD6F-F9F46904D16D}\TypeLib key points to the missing Type Library {0EF20641-8773-4B65-955C-C12C206EB86C} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{612fbd09-aad2-4f1c-ba97-f56658b1161b}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\Ahead\Lib\NeroCBUI.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\Ahead\Lib\NeroCBUI.dll in the HKEY_CLASSES_ROOT\CLSID\{612fbd09-aad2-4f1c-ba97-f56658b1161b} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{612fbd09-aad2-4f1c-ba97-f56658b1161b}\TypeLib
    Valuename:
    Value: {b3267063-8ab4-464d-a13c-1517bd6dc6f4}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{612fbd09-aad2-4f1c-ba97-f56658b1161b}\TypeLib key points to the missing Type Library {b3267063-8ab4-464d-a13c-1517bd6dc6f4} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{62C39ACB-2715-4ECD-A49A-36D00482A411}\InprocServer32
    Valuename:
    Value: F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\vmc.dll
    Reason: ( The InprocServer32 points to the missing program F:\PROGRA~1\FICHIE~1\SONYSH~1\AVLib\vmc.dll in the HKEY_CLASSES_ROOT\CLSID\{62C39ACB-2715-4ECD-A49A-36D00482A411} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{6300A6F7-ACC4-4A18-BC75-3F6BDD68EF10}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll in the HKEY_CLASSES_ROOT\CLSID\{6300A6F7-ACC4-4A18-BC75-3F6BDD68EF10} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{630ED07B-04A5-4AB9-A73B-FD94F34D5F09}\TypeLib
    Valuename:
    Value: {72DA7049-1F4A-49CD-9FD4-CC13D128C4CF}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{630ED07B-04A5-4AB9-A73B-FD94F34D5F09}\TypeLib key points to the missing Type Library {72DA7049-1F4A-49CD-9FD4-CC13D128C4CF} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{649EEC1E-B579-4E8C-BB3B-4997F8426536}\TypeLib
    Valuename:
    Value: {CC12D59D-1FE0-4297-850C-B0F9E22BD7BE}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{649EEC1E-B579-4E8C-BB3B-4997F8426536}\TypeLib key points to the missing Type Library {CC12D59D-1FE0-4297-850C-B0F9E22BD7BE} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{6572EE16-5FE5-4331-BB6D-76A49C56E423}\TypeLib
    Valuename:
    Value: {0EF20641-8773-4B65-955C-C12C206EB86C}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{6572EE16-5FE5-4331-BB6D-76A49C56E423}\TypeLib key points to the missing Type Library {0EF20641-8773-4B65-955C-C12C206EB86C} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{66B70351-AC63-4FE2-852D-5FBF600107BB}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASSoapLib.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASSoapLib.dll in the HKEY_CLASSES_ROOT\CLSID\{66B70351-AC63-4FE2-852D-5FBF600107BB} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{6A18FCA0-C53C-4AA1-9285-7FD98EE6AEF5}\LocalServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{6A18FCA0-C53C-4AA1-9285-7FD98EE6AEF5} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{6B98CB52-2698-49da-A761-3ADDC9D639B7}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSWMVFile.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSWMVFile.dll in the HKEY_CLASSES_ROOT\CLSID\{6B98CB52-2698-49da-A761-3ADDC9D639B7} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{6BC60883-CD50-4887-98C4-523D2F0DA9B1}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll in the HKEY_CLASSES_ROOT\CLSID\{6BC60883-CD50-4887-98C4-523D2F0DA9B1} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{6C373D24-7575-4507-972C-1814914570C9}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\Ahead\Lib\NeroCBUI.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\Ahead\Lib\NeroCBUI.dll in the HKEY_CLASSES_ROOT\CLSID\{6C373D24-7575-4507-972C-1814914570C9} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{6CA8E2C8-115A-4DB0-8E4A-C4B16352BF81}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll in the HKEY_CLASSES_ROOT\CLSID\{6CA8E2C8-115A-4DB0-8E4A-C4B16352BF81} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{6E2200B4-7C9E-44C6-96A3-F904A7AB8880}\TypeLib
    Valuename:
    Value: {72DA7049-1F4A-49CD-9FD4-CC13D128C4CF}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{6E2200B4-7C9E-44C6-96A3-F904A7AB8880}\TypeLib key points to the missing Type Library {72DA7049-1F4A-49CD-9FD4-CC13D128C4CF} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{70A4E5E9-D350-4AF0-8298-98E8BB30ADB7}\LocalServer32
    Valuename:
    Value: G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program G:\Programmes installés\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{70A4E5E9-D350-4AF0-8298-98E8BB30ADB7} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{712a2867-02b2-402b-8f8d-74437494dcfb}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\Ahead\Lib\NeroCBUI.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\Ahead\Lib\NeroCBUI.dll in the HKEY_CLASSES_ROOT\CLSID\{712a2867-02b2-402b-8f8d-74437494dcfb} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{712a2867-02b2-402b-8f8d-74437494dcfb}\TypeLib
    Valuename:
    Value: {b3267063-8ab4-464d-a13c-1517bd6dc6f4}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{712a2867-02b2-402b-8f8d-74437494dcfb}\TypeLib key points to the missing Type Library {b3267063-8ab4-464d-a13c-1517bd6dc6f4} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{72D36C78-CC12-445c-8169-CCC942B61100}\TypeLib
    Valuename:
    Value: {IDL_TYPELIB_ID_LSTR}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{72D36C78-CC12-445c-8169-CCC942B61100}\TypeLib key points to the missing Type Library {IDL_TYPELIB_ID_LSTR} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{72DFF8E2-C3EA-43C4-8224-FF8B897BBDF9}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll in the HKEY_CLASSES_ROOT\CLSID\{72DFF8E2-C3EA-43C4-8224-FF8B897BBDF9} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}\InprocServer32
    Valuename:
    Value: F:\Program Files\MyWebSearch\bar\1.bin\M3SKIN.DLL
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\MyWebSearch\bar\1.bin\M3SKIN.DLL in the HKEY_CLASSES_ROOT\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}\TypeLib
    Valuename:
    Value: {7473D290-B7BB-4f24-AE82-7E2CE94BB6A9}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}\TypeLib key points to the missing Type Library {7473D290-B7BB-4f24-AE82-7E2CE94BB6A9} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{74870B39-2651-4A6C-A59B-2F66602FDC67}\LocalServer32
    Valuename:
    Value: "F:\Program Files\Windows Live Safety Center\wlscUploader.exe"
    Reason: ( The LocalServer32 points to the missing program "F:\Program Files\Windows Live Safety Center\wlscUploader.exe" in the HKEY_CLASSES_ROOT\CLSID\{74870B39-2651-4A6C-A59B-2F66602FDC67} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{755496CB-DFBA-4395-9F80-56B22EB7F1E9}\LocalServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{755496CB-DFBA-4395-9F80-56B22EB7F1E9} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{7628839A-597F-4937-B1A5-520C6FC9A215}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll in the HKEY_CLASSES_ROOT\CLSID\{7628839A-597F-4937-B1A5-520C6FC9A215} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{76734FE3-9897-413A-BADA-019C2C5DFA8C}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\AVSMedia\ActiveX\AVSVRmIFOFiles.dll in the HKEY_CLASSES_ROOT\CLSID\{76734FE3-9897-413A-BADA-019C2C5DFA8C} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{787A1520-75B9-11CF-980D-444553540000}\LocalServer
    Valuename:
    Value:
    Reason: ( The key LocalServer under HKEY_CLASSES_ROOT\CLSID\{787A1520-75B9-11CF-980D-444553540000} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{7A0DCFDD-8599-4B89-B1EC-4A1708C19C81}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASSoapLib.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASSoapLib.dll in the HKEY_CLASSES_ROOT\CLSID\{7A0DCFDD-8599-4B89-B1EC-4A1708C19C81} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{7b9717b1-2d9b-4d14-b2da-d4bf5a28c6af}\InprocServer32
    Valuename:
    Value: F:\Program Files\Fichiers communs\Ahead\Lib\NeroCBUI.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Fichiers communs\Ahead\Lib\NeroCBUI.dll in the HKEY_CLASSES_ROOT\CLSID\{7b9717b1-2d9b-4d14-b2da-d4bf5a28c6af} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{7b9717b1-2d9b-4d14-b2da-d4bf5a28c6af}\TypeLib
    Valuename:
    Value: {b3267063-8ab4-464d-a13c-1517bd6dc6f4}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{7b9717b1-2d9b-4d14-b2da-d4bf5a28c6af}\TypeLib key points to the missing Type Library {b3267063-8ab4-464d-a13c-1517bd6dc6f4} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{7BF4F354-8968-48E3-B748-177A13269116}\InprocServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll
    Reason: ( The InprocServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcASThreatAudit.dll in the HKEY_CLASSES_ROOT\CLSID\{7BF4F354-8968-48E3-B748-177A13269116} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{800DD100-DB43-11CE-914E-00A004000162}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{800DD100-DB43-11CE-914E-00A004000162} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{812C4C66-8B64-47ED-9651-AD6500005553}\InprocServer32
    Valuename:
    Value: G:\Programmes Installés\K-lite codec Pack (codecs)\K-Lite Codec Pack\filters\CoreFLACDecoder.ax
    Reason: ( The InprocServer32 points to the missing program G:\Programmes Installés\K-lite codec Pack (codecs)\K-Lite Codec Pack\filters\CoreFLACDecoder.ax in the HKEY_CLASSES_ROOT\CLSID\{812C4C66-8B64-47ED-9651-AD6500005553} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{81397204-F51A-4571-8D7B-DC030521AABD}\TypeLib
    Valuename:
    Value: {CC12D59D-1FE0-4297-850C-B0F9E22BD7BE}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{81397204-F51A-4571-8D7B-DC030521AABD}\TypeLib key points to the missing Type Library {CC12D59D-1FE0-4297-850C-B0F9E22BD7BE} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{81C63250-607F-4e79-9FCB-F756C16C5AB9}\TypeLib
    Valuename:
    Value: {72DA7049-1F4A-49CD-9FD4-CC13D128C4CF}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{81C63250-607F-4e79-9FCB-F756C16C5AB9}\TypeLib key points to the missing Type Library {72DA7049-1F4A-49CD-9FD4-CC13D128C4CF} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{83417D49-C236-4946-91A3-67E24F8ABBBE}\LocalServer32
    Valuename:
    Value: F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    Reason: ( The LocalServer32 points to the missing program F:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe in the HKEY_CLASSES_ROOT\CLSID\{83417D49-C236-4946-91A3-67E24F8ABBBE} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{847B4DF5-4B61-11D2-9BDB-204C4F4F5020}\TypeLib
    Valuename:
    Value: {39A2C297-4778-11D2-9BDB-204C4F4F5020}
    Reason: ( The HKEY_CLASSES_ROOT\CLSID\{847B4DF5-4B61-11D2-9BDB-204C4F4F5020}\TypeLib key points to the missing Type Library {39A2C297-4778-11D2-9BDB-204C4F4F5020} )

    Entry: HKEY_CLASSES_ROOT\CLSID\{851E8B97-E301-4D0A-8CAC-2A02528AD8AC}\InprocServer32
    Valuename:
    Value: F:\PROGRA~1\FICHIE~1\SONYSH~1\VISUAL~1\TSMDSC~1.DLL
    Reason: ( The InprocServer32 points to the missing program F:\PROGRA~1\FICHIE~1\SONYSH~1\VISUAL~1\TSMDSC~1.DLL in the HKEY_CLASSES_ROOT\CLSID\{851E8B97-E301-4D0A-8CAC-2A02528AD8AC} key )

    Entry: HKEY_CLASSES_ROOT\CLSID\{85980D04-9851-11D1-A0F4-00C04FB67CF6}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{85980D04-9851-11D1-A0F4-00C04FB67CF6} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{85980D05-9851-11D1-A0F4-00C04FB67CF6}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{85980D05-9851-11D1-A0F4-00C04FB67CF6} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{85980D06-9851-11D1-A0F4-00C04FB67CF6}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{85980D06-9851-11D1-A0F4-00C04FB67CF6} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{85980D07-9851-11D1-A0F4-00C04FB67CF6}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{85980D07-9851-11D1-A0F4-00C04FB67CF6} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{85980D08-9851-11D1-A0F4-00C04FB67CF6}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{85980D08-9851-11D1-A0F4-00C04FB67CF6} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{85980D13-9851-11D1-A0F4-00C04FB67CF6}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{85980D13-9851-11D1-A0F4-00C04FB67CF6} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{85980D14-9851-11D1-A0F4-00C04FB67CF6}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{85980D14-9851-11D1-A0F4-00C04FB67CF6} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{85980D15-9851-11D1-A0F4-00C04FB67CF6}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{85980D15-9851-11D1-A0F4-00C04FB67CF6} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{85980D16-9851-11D1-A0F4-00C04FB67CF6}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{85980D16-9851-11D1-A0F4-00C04FB67CF6} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{85980D17-9851-11D1-A0F4-00C04FB67CF6}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{85980D17-9851-11D1-A0F4-00C04FB67CF6} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{85980D18-9851-11D1-A0F4-00C04FB67CF6}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{85980D18-9851-11D1-A0F4-00C04FB67CF6} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{85980D19-9851-11D1-A0F4-00C04FB67CF6}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{85980D19-9851-11D1-A0F4-00C04FB67CF6} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{85980D1A-9851-11D1-A0F4-00C04FB67CF6}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{85980D1A-9851-11D1-A0F4-00C04FB67CF6} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{85980D1B-9851-11D1-A0F4-00C04FB67CF6}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{85980D1B-9851-11D1-A0F4-00C04FB67CF6} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{85980D1C-9851-11D1-A0F4-00C04FB67CF6}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{85980D1C-9851-11D1-A0F4-00C04FB67CF6} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{85980D1D-9851-11D1-A0F4-00C04FB67CF6}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServer32 under HKEY_CLASSES_ROOT\CLSID\{85980D1D-9851-11D1-A0F4-00C04FB67CF6} is empty )

    Entry: HKEY_CLASSES_ROOT\CLSID\{85980D1E-9851-11D1-A0F4-00C04FB67CF6}\InprocServer32
    Valuename:
    Value:
    Reason: ( The key InprocServ
    0
  7. Zic
     
    Bonjour,

    Au secours, aidez moi svp

    Merciiii

    A+
    0
  8. Utilisateur anonyme
     
    Bonjour,

    Flute ! Je t'ai fais installé un pare feu alors que tu en as déjà un avec Bitdefender, non ?
    Si tu en as déjà un alors supprime ZoneAlarm.

    Alors,
    Politique menée par Boonty Games :
    "Il se peut que nous partageons aussi des informations payantes avec des tiers
    qui fournissent ds services payants et partage des données regroupées montrant le type
    et le nombre de jeux videos que vous téléchargez, votre age, votre sexe, vos occupations,
    niveau d'éducation, localité géographique, données sur l'équipement de votre ordinateur,
    internet et intérêts pour les jeux videos, activités et entrainement des jeux édités.
    De plus, nous partageons les adresses email avec des tiers fournisseurs de compte mails
    qui nous assistent en envoyant nos mails a de nombreux clients en même temps..."


    Je te conseille donc de le supprimer, pour ça :
    > Désactivation de service :
    - Clique sur Démarrer --> Exécuter
    - Saisis : Services.msc puis OK
    - Choisis le mode "Etendu" (onglets inférieurs)
    - Grâce à la barre de défilement (à droite) recherche le service suivant:

    Code:
    Boonty Games

    - Quand le service est trouvé, pointe dessus, double-clique (bouton gauche).
    - Dans la fenêtre suivante qui apparait, sous l'onglet Général clique sur le bouton Arrêter,
    puis déroule le Type de Démarrage pour le modifier en Désactivé
    - Clique sur Appliquer puis OK
    Tuto si besoin : https://www.zebulon.fr/dossiers/windows/31-services.html

    Après,
    >Ouvre ce lien http://siri.urz.free.fr/Fix/SmitfraudFix.php et télécharge SmitfraudFix (de S!RI).
    - Regarde le tuto
    - Exécute le programme et choisi l’option 1 (et uniquement).
    Le programme va générer un rapport, copie/colle le sur le forum.

    Ensuite,
    > Lance Hijackthis :
    - Puis sélectionne < Do a system scan only >
    - Coche les cases des lignes suivantes :

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe (file missing)
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe (file missing)
    O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
    
    O23 - Service: Boonty Games - BOONTY - F:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe

    Ensuite,
    - Ferme toutes les autres fenêtres et applications (même internet)
    - Clic sur < fixe checked >

    > Relance ton PC en mode normal puis Hijackthis :
    Puis sélectionne < do a system scan and save a logfile >,

    Et envoie, par collier/coller, ton log Hijackthis,

    Comment va le PC ?

    A+
    0
    1. Zic
       
      bonjour

      y a t il un pb avec le site??????????????????????????

      j'ai envoyé les rapports de malware, ccleaner , clean + hijakthis, les as tu reçus?????

      Dois je faire ce que tu m'indiques dans le mail du 26? avec Smitfraud fix?

      Je te joints les rapports au cas où et dis moi ce que je fais ...

      Rapports de Malware...

      Malwarebytes' Anti-Malware 1.18
      Version de la base de données: 893

      09:56:58 26/06/2008
      mbam-log-6-26-2008 (09-56-19).txt

      Type de recherche: Examen complet (F:\|G:\|)
      Eléments examinés: 115239
      Temps écoulé: 41 minute(s), 42 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 0
      Clé(s) du Registre infectée(s): 7
      Valeur(s) du Registre infectée(s): 0
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 0

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-957­1-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c­9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45­b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> No action taken.
      HKEY_CLASSES_ROOT\CLSID\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73­b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b03­0-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> No action taken.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken.

      Valeur(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      (Aucun élément nuisible détecté)

      Fichier(s) infecté(s):
      (Aucun élément nuisible détecté)


      Et,
      Malwarebytes' Anti-Malware 1.18
      Version de la base de données: 893

      09:57:23 26/06/2008
      mbam-log-6-26-2008 (09-57-23).txt

      Type de recherche: Examen complet (F:\|G:\|)
      Eléments examinés: 115239
      Temps écoulé: 41 minute(s), 42 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 0
      Clé(s) du Registre infectée(s): 7
      Valeur(s) du Registre infectée(s): 0
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 0

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-957­1-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c­9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45­b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\CLSID\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73­b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b03­0-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.

      Valeur(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      (Aucun élément nuisible détecté)

      Fichier(s) infecté(s):
      (Aucun élément nuisible détecté)


      J'ia lancé Ccleaner et une errur n'a pu être corrigé portant je l'ai lancé plus de 4 fois...comment faire pour aller retrouver le rapport pour t'indiquer l'erreur en question?

      Le rapport de clean :
      Rapport clean par Malekal_morte - http://www.malekal.com
      Script execute en mode sans echec 26/06/2008 a 10:24:41,71

      Microsoft Windows XP [version 5.1.2600]

      *** Suppression des fichiers dans F:

      *** Suppression des fichiers dans F:\WINDOWS\

      *** Suppression des fichiers dans F:\WINDOWS\system32
      tentative de suppression de F:\WINDOWS\system32\bdod.bin
      tentative de suppression de F:\WINDOWS\system32\SpoonUninstall.exe

      *** Suppression des fichiers dans F:\Program Files

      *** Suppression des clefs du registre effectuee..


      Et enfin le rapport de Hijackthis:
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 11:01:16, on 26/06/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16674)
      Boot mode: Normal

      Running processes:
      F:\WINDOWS\System32\smss.exe
      F:\WINDOWS\system32\winlogon.exe
      F:\WINDOWS\system32\services.exe
      F:\WINDOWS\system32\lsass.exe
      F:\WINDOWS\system32\Ati2evxx.exe
      F:\WINDOWS\system32\svchost.exe
      F:\WINDOWS\System32\svchost.exe
      F:\WINDOWS\system32\spoolsv.exe
      F:\WINDOWS\system32\drivers\CDAC11BA.EXE
      F:\WINDOWS\system32\svchost.exe
      F:\WINDOWS\system32\MsPMSPSv.exe
      F:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
      F:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
      F:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
      F:\Program Files\Softwin\BitDefender10\vsserv.exe
      F:\WINDOWS\system32\Ati2evxx.exe
      F:\WINDOWS\Explorer.EXE
      G:\Programmes Installés\ZoneAlarm\zlclient.exe
      F:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
      F:\Program Files\Softwin\BitDefender10\bdagent.exe
      F:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe
      F:\WINDOWS\system32\ctfmon.exe
      F:\Program Files\Internet Explorer\iexplore.exe
      F:\Program Files\Trend Micro\HijackThis\HijackThis.exe
      F:\WINDOWS\system32\NOTEPAD.EXE

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://192.168.2.1/ServicesAcces.html
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - g:\programmes installés\adobe\Reader\ActiveX\AcroIEHelper.ocx
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - F:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [ZoneAlarm Client] "G:\Programmes Installés\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] F:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
      O4 - HKLM\..\Run: [BDMCon] F:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
      O4 - HKLM\..\Run: [BDAgent] "F:\Program Files\Softwin\BitDefender10\bdagent.exe"
      O4 - HKCU\..\Run: [Uniblue RegistryBooster 2] F:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S
      O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Creative Detector] G:\Programmes Installés\Blaster MD\Detector\CTDetect.exe /R
      O4 - HKCU\..\Run: [WOOKIT] F:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
      O4 - HKCU\..\Run: [updateMgr] "F:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
      O4 - HKCU\..\Run: [Uniblue Registry Booster2] g:\Program Files\Uniblue\RegistryBooster2\RegistryBooster.exe /S
      O4 - HKCU\..\Run: [MtdAcq] F:\Program Files\Creative\Shared Files\Media Sniffer\MtdAcq.EXE /s
      O4 - HKCU\..\Run: [MsnMsgr] "F:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [MSMSGS] "F:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [MsgCenterExe] "F:\Program Files\Fichiers communs\Real\Update_OB\RealOneMessageCenter.exe" -osboot
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: Microsoft Office.lnk = F:\Program Files\Microsoft Office\Office\OSA9.EXE
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe (file missing)
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe (file missing)
      O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
      O16 - DPF: Interface Chat Wanadoo - http://chat7.x-echo.com/version6/Applet/wchatsign.cab
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://a1540.g.akamai.net/
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - F:\Program Files\Yahoo!\Common\yinsthelper.dll
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
      O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} - http://www.extrafilm.fr/ImageUploader4.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
      O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
      O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game13.zylom.com/activex/zylomgamesplayer.cab
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - F:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - F:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
      O23 - Service: Boonty Games - BOONTY - F:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
      O23 - Service: C-DillaCdaC11BA - Macrovision - F:\WINDOWS\system32\drivers\CDAC11BA.EXE
      O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - F:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
      O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - F:\Program Files\Softwin\BitDefender10\vsserv.exe
      O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - F:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
      End of file - 7481 bytes



      Voilà

      A+
      0
  9. Utilisateur anonyme
     
    Bonjour,

    Oui : peux tu faire les manip du poste 17 ?

    Merci.
    0
  10. Zic
     
    En mode normal on MSE stp?

    Mercii
    0
    1. Utilisateur anonyme
       
      En mode normal pour tout.

      Sinon, je te préviendrai.

      :-)
      0
  11. Zic
     
    Ok voilà le rapport de Smitfraudfix

    SmitFraudFix v2.328

    Rapport fait à 18:20:47,96, 28/06/2008
    Executé à partir de F:\Documents and Settings\steph\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» Process

    F:\WINDOWS\System32\smss.exe
    F:\WINDOWS\system32\winlogon.exe
    F:\WINDOWS\system32\services.exe
    F:\WINDOWS\system32\lsass.exe
    F:\WINDOWS\system32\Ati2evxx.exe
    F:\WINDOWS\system32\svchost.exe
    F:\WINDOWS\System32\svchost.exe
    F:\WINDOWS\system32\spoolsv.exe
    F:\WINDOWS\system32\drivers\CDAC11BA.EXE
    F:\WINDOWS\system32\svchost.exe
    F:\WINDOWS\system32\MsPMSPSv.exe
    F:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
    F:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
    F:\WINDOWS\system32\Ati2evxx.exe
    F:\WINDOWS\Explorer.EXE
    F:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
    F:\Program Files\Softwin\BitDefender10\bdagent.exe
    F:\WINDOWS\system32\ctfmon.exe
    F:\Program Files\Windows Live\Messenger\msnmsgr.exe
    F:\Program Files\Windows Live\Messenger\usnsvc.exe
    F:\Program Files\Outlook Express\msimn.exe
    F:\Program Files\Windows Media Player\wmplayer.exe
    F:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
    F:\Program Files\Softwin\BitDefender10\vsserv.exe
    F:\Program Files\Internet Explorer\iexplore.exe
    F:\Documents and Settings\steph\Bureau\SmitfraudFix\Policies.exe
    F:\WINDOWS\system32\cmd.exe

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    Fichier hosts corrompu !

    127.0.0.1 www.legal-at-spybot.info
    127.0.0.1 legal-at-spybot.info

    »»»»»»»»»»»»»»»»»»»»»»»» F:\

    »»»»»»»»»»»»»»»»»»»»»»»» F:\WINDOWS

    »»»»»»»»»»»»»»»»»»»»»»»» F:\WINDOWS\system

    »»»»»»»»»»»»»»»»»»»»»»»» F:\WINDOWS\Web

    »»»»»»»»»»»»»»»»»»»»»»»» F:\WINDOWS\system32

    »»»»»»»»»»»»»»»»»»»»»»»» F:\WINDOWS\system32\LogFiles

    »»»»»»»»»»»»»»»»»»»»»»»» F:\Documents and Settings\steph

    »»»»»»»»»»»»»»»»»»»»»»»» F:\Documents and Settings\steph\Application Data

    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

    »»»»»»»»»»»»»»»»»»»»»»»» F:\DOCUME~1\steph\Favoris

    »»»»»»»»»»»»»»»»»»»»»»»» Bureau

    »»»»»»»»»»»»»»»»»»»»»»»» F:\Program Files

    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="Ma page d'accueil"

    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» VACFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    404Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"="sockspy.dll"

    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "Userinit"="F:\\WINDOWS\\system32\\userinit.exe,"
    "System"=""

    »»»»»»»»»»»»»»»»»»»»»»»» Rustock

    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: Carte réseau virtuelle FreeBox USB #5 - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 212.27.53.252
    DNS Server Search Order: 212.27.54.252

    Description: Carte réseau virtuelle FreeBox USB #5 - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 212.27.53.252
    DNS Server Search Order: 212.27.54.252

    Description: Carte réseau virtuelle FreeBox USB #5 - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 212.27.54.252
    DNS Server Search Order: 212.27.53.252

    Description: Carte réseau virtuelle FreeBox USB #5 - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 212.27.54.252
    DNS Server Search Order: 212.27.53.252

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{16135771-07A3-4654-ADB3-A3679D675086}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{C32379A0-7D65-4B79-BE34-3E299ABEC3D8}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{C9C5599C-0271-4DCA-9998-F126346F9C17}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{E70D2E48-9DC5-4125-B1C7-27D08C454E6B}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{16135771-07A3-4654-ADB3-A3679D675086}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{C32379A0-7D65-4B79-BE34-3E299ABEC3D8}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{C9C5599C-0271-4DCA-9998-F126346F9C17}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{E70D2E48-9DC5-4125-B1C7-27D08C454E6B}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{16135771-07A3-4654-ADB3-A3679D675086}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{C32379A0-7D65-4B79-BE34-3E299ABEC3D8}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{C9C5599C-0271-4DCA-9998-F126346F9C17}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{E70D2E48-9DC5-4125-B1C7-27D08C454E6B}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

    »»»»»»»»»»»»»»»»»»»»»»»» Fin

    A+
    0
  12. Utilisateur anonyme
     
    ok,
    très bien.

    Quand tu auras fixé dans HiJackT et posté le rapport :
    > Démarre en mode sans échec : (image). Si problème : tuto ici
    - Dans le dossier "SmitfraudFix" ouvre "Smitfraudfix.cmd" puis choisit l 'option 2 et tape "oui" pour toutes les questions.
    - Enregistre le rapport puis envoie le dans ton prochain poste.

    Puis on termine.
    Comment va le PC ?

    A+
    0
    1. Zic
       
      Ah zut j'ia continué de suivre le post 17 et je n'ia pas fait un hijack en MSE mais en Mode normal...et en plus j'ia oublié d'éteindre internet...est ce grave? je dois recommencer hijack ou pas? et je n'ia pas trouvé 023 boonty?

      Je te donne le rapport Hijack que j'ia effectué en normal

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 18:30:24, on 28/06/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16674)
      Boot mode: Normal

      Running processes:
      F:\WINDOWS\System32\smss.exe
      F:\WINDOWS\system32\winlogon.exe
      F:\WINDOWS\system32\services.exe
      F:\WINDOWS\system32\lsass.exe
      F:\WINDOWS\system32\Ati2evxx.exe
      F:\WINDOWS\system32\svchost.exe
      F:\WINDOWS\System32\svchost.exe
      F:\WINDOWS\system32\spoolsv.exe
      F:\WINDOWS\system32\drivers\CDAC11BA.EXE
      F:\WINDOWS\system32\svchost.exe
      F:\WINDOWS\system32\MsPMSPSv.exe
      F:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
      F:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
      F:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
      F:\WINDOWS\system32\Ati2evxx.exe
      F:\WINDOWS\Explorer.EXE
      F:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
      F:\Program Files\Softwin\BitDefender10\bdagent.exe
      F:\WINDOWS\system32\ctfmon.exe
      F:\Program Files\Softwin\BitDefender10\vsserv.exe
      F:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://192.168.2.1/ServicesAcces.html
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - g:\programmes installés\adobe\Reader\ActiveX\AcroIEHelper.ocx
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - F:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] F:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe
      O4 - HKLM\..\Run: [BDMCon] F:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
      O4 - HKLM\..\Run: [BDAgent] "F:\Program Files\Softwin\BitDefender10\bdagent.exe"
      O4 - HKCU\..\Run: [Uniblue RegistryBooster 2] F:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S
      O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Creative Detector] G:\Programmes Installés\Blaster MD\Detector\CTDetect.exe /R
      O4 - HKCU\..\Run: [WOOKIT] F:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
      O4 - HKCU\..\Run: [updateMgr] "F:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
      O4 - HKCU\..\Run: [MtdAcq] F:\Program Files\Creative\Shared Files\Media Sniffer\MtdAcq.EXE /s
      O4 - HKCU\..\Run: [MSMSGS] "F:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [MsgCenterExe] "F:\Program Files\Fichiers communs\Real\Update_OB\RealOneMessageCenter.exe" -osboot
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: Microsoft Office.lnk = F:\Program Files\Microsoft Office\Office\OSA9.EXE
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O16 - DPF: Interface Chat Wanadoo - http://chat7.x-echo.com/version6/Applet/wchatsign.cab
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://a1540.g.akamai.net/7/1540/52/20070501/qtinstall.info.apple.com/qtactivex/qtplugin.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
      O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} - http://www.extrafilm.fr/ImageUploader4.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
      O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP-1.1.cab
      O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game13.zylom.com/activex/zylomgamesplayer.cab
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - F:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - F:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
      O23 - Service: C-DillaCdaC11BA - Macrovision - F:\WINDOWS\system32\drivers\CDAC11BA.EXE
      O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - F:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
      O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - F:\Program Files\Softwin\BitDefender10\vsserv.exe
      O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - F:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
      0
  13. Utilisateur anonyme
     
    Non, non,

    Le HiJackT doit toujours être fait en mode normal.
    Il est propre. Donc pour ça c'est bon.

    Quand tu veux pour le smitfraudfix (en MSE là).

    A+
    0
  14. Zic
     
    Excuse
    j'ai mal lu ton mail mais en fait je m'occcupe de ma fille en même temps donc je déraille en lecture

    A+
    0
  15. Zic
     
    Salut

    Le rapport:

    SmitFraudFix v2.328

    Rapport fait à 18:20:47,96, 28/06/2008
    Executé à partir de F:\Documents and Settings\steph\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» Process

    F:\WINDOWS\System32\smss.exe
    F:\WINDOWS\system32\winlogon.exe
    F:\WINDOWS\system32\services.exe
    F:\WINDOWS\system32\lsass.exe
    F:\WINDOWS\system32\Ati2evxx.exe
    F:\WINDOWS\system32\svchost.exe
    F:\WINDOWS\System32\svchost.exe
    F:\WINDOWS\system32\spoolsv.exe
    F:\WINDOWS\system32\drivers\CDAC11BA.EXE
    F:\WINDOWS\system32\svchost.exe
    F:\WINDOWS\system32\MsPMSPSv.exe
    F:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
    F:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
    F:\WINDOWS\system32\Ati2evxx.exe
    F:\WINDOWS\Explorer.EXE
    F:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
    F:\Program Files\Softwin\BitDefender10\bdagent.exe
    F:\WINDOWS\system32\ctfmon.exe
    F:\Program Files\Windows Live\Messenger\msnmsgr.exe
    F:\Program Files\Windows Live\Messenger\usnsvc.exe
    F:\Program Files\Outlook Express\msimn.exe
    F:\Program Files\Windows Media Player\wmplayer.exe
    F:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
    F:\Program Files\Softwin\BitDefender10\vsserv.exe
    F:\Program Files\Internet Explorer\iexplore.exe
    F:\Documents and Settings\steph\Bureau\SmitfraudFix\Policies.exe
    F:\WINDOWS\system32\cmd.exe

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    Fichier hosts corrompu !

    127.0.0.1 www.legal-at-spybot.info
    127.0.0.1 legal-at-spybot.info

    »»»»»»»»»»»»»»»»»»»»»»»» F:\

    »»»»»»»»»»»»»»»»»»»»»»»» F:\WINDOWS

    »»»»»»»»»»»»»»»»»»»»»»»» F:\WINDOWS\system

    »»»»»»»»»»»»»»»»»»»»»»»» F:\WINDOWS\Web

    »»»»»»»»»»»»»»»»»»»»»»»» F:\WINDOWS\system32

    »»»»»»»»»»»»»»»»»»»»»»»» F:\WINDOWS\system32\LogFiles

    »»»»»»»»»»»»»»»»»»»»»»»» F:\Documents and Settings\steph

    »»»»»»»»»»»»»»»»»»»»»»»» F:\Documents and Settings\steph\Application Data

    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

    »»»»»»»»»»»»»»»»»»»»»»»» F:\DOCUME~1\steph\Favoris

    »»»»»»»»»»»»»»»»»»»»»»»» Bureau

    »»»»»»»»»»»»»»»»»»»»»»»» F:\Program Files

    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="Ma page d'accueil"

    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» VACFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    404Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"="sockspy.dll"

    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "Userinit"="F:\\WINDOWS\\system32\\userinit.exe,"
    "System"=""

    »»»»»»»»»»»»»»»»»»»»»»»» Rustock

    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: Carte réseau virtuelle FreeBox USB #5 - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 212.27.53.252
    DNS Server Search Order: 212.27.54.252

    Description: Carte réseau virtuelle FreeBox USB #5 - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 212.27.53.252
    DNS Server Search Order: 212.27.54.252

    Description: Carte réseau virtuelle FreeBox USB #5 - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 212.27.54.252
    DNS Server Search Order: 212.27.53.252

    Description: Carte réseau virtuelle FreeBox USB #5 - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 212.27.54.252
    DNS Server Search Order: 212.27.53.252

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{16135771-07A3-4654-ADB3-A3679D675086}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{C32379A0-7D65-4B79-BE34-3E299ABEC3D8}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{C9C5599C-0271-4DCA-9998-F126346F9C17}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{E70D2E48-9DC5-4125-B1C7-27D08C454E6B}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{16135771-07A3-4654-ADB3-A3679D675086}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{C32379A0-7D65-4B79-BE34-3E299ABEC3D8}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{C9C5599C-0271-4DCA-9998-F126346F9C17}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{E70D2E48-9DC5-4125-B1C7-27D08C454E6B}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{16135771-07A3-4654-ADB3-A3679D675086}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{C32379A0-7D65-4B79-BE34-3E299ABEC3D8}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{C9C5599C-0271-4DCA-9998-F126346F9C17}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{E70D2E48-9DC5-4125-B1C7-27D08C454E6B}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252

    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

    »»»»»»»»»»»»»»»»»»»»»»»» Fin

    Sinon j'ai mes icones sur mon bureau, un bureau tout bleu et la page d'accueil internet est changé

    Je vais voir en naviguant si rien à changer

    A+
    0
  16. Utilisateur anonyme
     
    Salut,

    Tu n'as pas fait ce qu'il fallait !

    :-)

    Alors,
    > Démarre en mode sans échec : (image). Si problème : tuto ici
    - Dans le dossier "SmitfraudFix" ouvre "Smitfraudfix.cmd" puis choisit l 'option 2 et tape "oui" pour toutes les questions.
    - Enregistre le rapport puis envoie le dans ton prochain poste.

    A+
    0
  17. Zic
     
    Salut

    En mse, sur mon pc je n'ai pas l'onglet boot.in, est ce grave?

    De plus une fenêtre ets apparu après mon 2é démarrage en mSE: la jauge d'énérgie??????

    Voici le 2è rapport

    SmitFraudFix v2.328

    Rapport fait à 19:40:13,35, 28/06/2008
    Executé à partir de F:\Documents and Settings\steph\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    127.0.0.1 localhost
    127.0.0.1 www.007guard.com
    127.0.0.1 007guard.com
    127.0.0.1 008i.com
    127.0.0.1 www.008k.com
    127.0.0.1 008k.com
    127.0.0.1 www.00hq.com
    127.0.0.1 00hq.com
    127.0.0.1 010402.com
    127.0.0.1 www.032439.com
    127.0.0.1 032439.com
    127.0.0.1 www.1001-search.info
    127.0.0.1 1001-search.info
    127.0.0.1 www.100888290cs.com
    127.0.0.1 100888290cs.com
    127.0.0.1 www.100sexlinks.com
    127.0.0.1 100sexlinks.com
    127.0.0.1 www.10sek.com
    127.0.0.1 10sek.com
    127.0.0.1 www.123topsearch.com
    127.0.0.1 123topsearch.com
    127.0.0.1 www.132.com
    127.0.0.1 132.com
    127.0.0.1 www.136136.net
    127.0.0.1 136136.net
    127.0.0.1 www.139mm.com
    127.0.0.1 139mm.com
    127.0.0.1 www.163ns.com
    127.0.0.1 163ns.com
    127.0.0.1 171203.com
    127.0.0.1 17-plus.com
    127.0.0.1 www.1800searchonline.com
    127.0.0.1 1800searchonline.com
    127.0.0.1 www.180searchassistant.com
    127.0.0.1 180searchassistant.com
    127.0.0.1 www.180solutions.com
    127.0.0.1 180solutions.com
    127.0.0.1 www.181.365soft.info
    127.0.0.1 181.365soft.info
    127.0.0.1 www.1987324.com
    127.0.0.1 1987324.com
    127.0.0.1 www.1-domains-registrations.com
    127.0.0.1 1-domains-registrations.com
    127.0.0.1 www.1-extreme.biz
    127.0.0.1 1-extreme.biz
    127.0.0.1 www.1sexparty.com
    127.0.0.1 1sexparty.com
    127.0.0.1 www.1stantivirus.com
    127.0.0.1 1stantivirus.com
    127.0.0.1 www.1stpagehere.com
    127.0.0.1 1stpagehere.com
    127.0.0.1 www.1stsearchportal.com
    127.0.0.1 1stsearchportal.com
    127.0.0.1 2.82211.net
    127.0.0.1 www.2006ooo.com
    127.0.0.1 2006ooo.com
    127.0.0.1 www.2007-download.com
    127.0.0.1 2007-download.com
    127.0.0.1 www.2020search.com
    127.0.0.1 2020search.com
    127.0.0.1 20x2p.com
    127.0.0.1 www.24.365soft.info
    127.0.0.1 24.365soft.info
    127.0.0.1 www.24-7pharmacy.info
    127.0.0.1 24-7pharmacy.info
    127.0.0.1 www.24-7searching-and-more.com
    127.0.0.1 24-7searching-and-more.com
    127.0.0.1 www.24teen.com
    127.0.0.1 24teen.com
    127.0.0.1 www.2every.net
    127.0.0.1 2every.net
    127.0.0.1 2ndpower.com
    127.0.0.1 www.2search.com
    127.0.0.1 2search.com
    127.0.0.1 www.2search.org
    127.0.0.1 2search.org
    127.0.0.1 www.2squared.com
    127.0.0.1 2squared.com
    127.0.0.1 www.3322.org
    127.0.0.1 3322.org
    127.0.0.1 365soft.info
    127.0.0.1 www.36site.com
    127.0.0.1 36site.com
    127.0.0.1 3721.com
    127.0.0.1 39-93.com
    127.0.0.1 www.3abetterinternet.com
    127.0.0.1 3abetterinternet.com
    127.0.0.1 www.3bay.it
    127.0.0.1 3bay.it
    127.0.0.1 www.3ebay.it
    127.0.0.1 3ebay.it
    127.0.0.1 www.3xclipsonline.com
    127.0.0.1 3xclipsonline.com
    127.0.0.1 www.3xcurves.com
    127.0.0.1 3xcurves.com
    127.0.0.1 www.3xfestival.com
    127.0.0.1 3xfestival.com
    127.0.0.1 www.3x-festival.com
    127.0.0.1 3x-festival.com
    127.0.0.1 www.3x-galls.com
    127.0.0.1 3x-galls.com
    127.0.0.1 www.3xmiracle.com
    127.0.0.1 3xmiracle.com
    127.0.0.1 www.3xmoviesblog.com
    127.0.0.1 3xmoviesblog.com
    127.0.0.1 www.404dns.com
    127.0.0.1 404dns.com
    127.0.0.1 www.4199.com
    127.0.0.1 4199.com
    127.0.0.1 www.4corn.net
    127.0.0.1 4corn.net
    127.0.0.1 www.4ebay.it
    127.0.0.1 4ebay.it
    127.0.0.1 4klm.com
    127.0.0.1 www.4mpg.com
    127.0.0.1 4mpg.com
    127.0.0.1 www.4repubblica.it
    127.0.0.1 4repubblica.it
    127.0.0.1 www.4softget.com
    127.0.0.1 4softget.com
    127.0.0.1 www.59cn.cn
    127.0.0.1 59cn.cn
    127.0.0.1 www.5iscali.it
    127.0.0.1 5iscali.it
    127.0.0.1 www.5repubblica.it
    127.0.0.1 5repubblica.it
    127.0.0.1 www.5starvideos.com
    127.0.0.1 5starvideos.com
    127.0.0.1 www.5tiscali.it
    127.0.0.1 5tiscali.it
    127.0.0.1 www.5zgmu7o20kt5d8yq.com
    127.0.0.1 5zgmu7o20kt5d8yq.com
    127.0.0.1 www.680180.net
    127.0.0.1 680180.net
    127.0.0.1 www.6iscali.it
    127.0.0.1 6iscali.it
    127.0.0.1 www.6njaga.com
    127.0.0.1 6njaga.com
    127.0.0.1 www.6sek.com
    127.0.0.1 6sek.com
    127.0.0.1 www.6tiscali.it
    127.0.0.1 6tiscali.it
    127.0.0.1 www.70-music.com
    127.0.0.1 70-music.com
    127.0.0.1 www.7322.com
    127.0.0.1 7322.com
    127.0.0.1 www.745970.com
    127.0.0.1 745970.com
    127.0.0.1 75tz.com
    127.0.0.1 www.777search.com
    127.0.0.1 777search.com
    127.0.0.1 www.777top.com
    127.0.0.1 777top.com
    127.0.0.1 www.7939.com
    127.0.0.1 7939.com
    127.0.0.1 www.7search.com
    127.0.0.1 7search.com
    127.0.0.1 80gw6ry3i3x3qbrkwhxhw.032439.com
    127.0.0.1 www.80-music.com
    127.0.0.1 80-music.com
    127.0.0.1 82211.net
    127.0.0.1 8866.org
    127.0.0.1 www.88vcd.com
    127.0.0.1 88vcd.com
    127.0.0.1 www.8ad.com
    127.0.0.1 8ad.com
    127.0.0.1 www.90-music.com
    127.0.0.1 90-music.com
    127.0.0.1 www.9505.com
    127.0.0.1 9505.com
    127.0.0.1 www.971searchbox.com
    127.0.0.1 971searchbox.com
    127.0.0.1 9mmporn.com
    127.0.0.1 a.bestmanage.org
    127.0.0.1 www.aaabesthomepage.com
    127.0.0.1 aaabesthomepage.com
    127.0.0.1 aaasexypics.com
    127.0.0.1 www.aaawebfinder.com
    127.0.0.1 aaawebfinder.com
    127.0.0.1 www.aaqadarsztriv.com
    127.0.0.1 aaqadarsztriv.com
    127.0.0.1 www.aaqada-rsztriv.com
    127.0.0.1 aaqada-rsztriv.com
    127.0.0.1 www.aaqadaueorn.com
    127.0.0.1 aaqadaueorn.com
    127.0.0.1 www.aaqada-ueorn.com
    127.0.0.1 aaqada-ueorn.com
    127.0.0.1 www.aaqada-ygco.com
    127.0.0.1 aaqada-ygco.com
    127.0.0.1 www.aaqada-ymct.com
    127.0.0.1 aaqada-ymct.com
    127.0.0.1 aavc.com
    127.0.0.1 www.abccodec.com
    127.0.0.1 abccodec.com
    127.0.0.1 www.abcdperformance.com
    127.0.0.1 abcdperformance.com
    127.0.0.1 www.abc-find.info
    127.0.0.1 abc-find.info
    127.0.0.1 www.abcsearch.com
    127.0.0.1 abcsearch.com
    127.0.0.1 www.abetterinternet.com
    127.0.0.1 abetterinternet.com
    127.0.0.1 www.abnetsoft.info
    127.0.0.1 abnetsoft.info
    127.0.0.1 www.about-adult.net
    127.0.0.1 about-adult.net
    127.0.0.1 www.aboutclicker.com
    127.0.0.1 aboutclicker.com
    127.0.0.1 www.abrp.net
    127.0.0.1 abrp.net
    127.0.0.1 www.absolutee.com
    127.0.0.1 absolutee.com
    127.0.0.1 www.abyssmedia.com
    127.0.0.1 abyssmedia.com
    127.0.0.1 www.ac66.cn
    127.0.0.1 ac66.cn
    127.0.0.1 access.navinetwork.com
    127.0.0.1 access.rapid-pass.net
    127.0.0.1 www.accessactivexvideo.com
    127.0.0.1 accessactivexvideo.com
    127.0.0.1 www.accessclips.com
    127.0.0.1 accessclips.com
    127.0.0.1 www.access-dvd.com
    127.0.0.1 access-dvd.com
    127.0.0.1 www.accesskeygenerator.com
    127.0.0.1 accesskeygenerator.com
    127.0.0.1 www.accessthefuture.net
    127.0.0.1 accessthefuture.net
    127.0.0.1 www.accessvid.net
    127.0.0.1 accessvid.net
    127.0.0.1 www.acemedic.com
    127.0.0.1 acemedic.com
    127.0.0.1 www.ace-webmaster.com
    127.0.0.1 ace-webmaster.com
    127.0.0.1 acjp.com
    127.0.0.1 www.acrobat-2007.com
    127.0.0.1 acrobat-2007.com
    127.0.0.1 www.acrobat-8.com
    127.0.0.1 acrobat-8.com
    127.0.0.1 www.acrobat-center.com
    127.0.0.1 acrobat-center.com
    127.0.0.1 www.acrobat-hq.com
    127.0.0.1 acrobat-hq.com
    127.0.0.1 www.acrobatreader-8.com
    127.0.0.1 acrobatreader-8.com
    127.0.0.1 www.acrobat-reader-8.de
    127.0.0.1 acrobat-reader-8.de
    127.0.0.1 www.acrobat-stop.com
    127.0.0.1 acrobat-stop.com
    127.0.0.1 www.actionbreastcancer.org
    127.0.0.1 actionbreastcancer.org
    127.0.0.1 www.activesearcher.info
    127.0.0.1 activesearcher.info
    127.0.0.1 www.activexaccessobject.com
    127.0.0.1 activexaccessobject.com
    127.0.0.1 www.activexaccessvideo.com
    127.0.0.1 activexaccessvideo.com
    127.0.0.1 www.activexemedia.com
    127.0.0.1 activexemedia.com
    127.0.0.1 www.activexmediaobject.com
    127.0.0.1 activexmediaobject.com
    127.0.0.1 www.activexmediapro.com
    127.0.0.1 activexmediapro.com
    127.0.0.1 www.activexmediasite.com
    127.0.0.1 activexmediasite.com
    127.0.0.1 www.activexmediasoftware.com
    127.0.0.1 activexmediasoftware.com
    127.0.0.1 www.activexmediasource.com
    127.0.0.1 activexmediasource.com
    127.0.0.1 www.activexmediatool.com
    127.0.0.1 activexmediatool.com
    127.0.0.1 www.activexmediatour.com
    127.0.0.1 activexmediatour.com
    127.0.0.1 www.activexsoftwares.com
    127.0.0.1 activexsoftwares.com
    127.0.0.1 www.activexsource.com
    127.0.0.1 activexsource.com
    127.0.0.1 www.activexupdate.com
    127.0.0.1 activexupdate.com
    127.0.0.1 www.activexvideo.com
    127.0.0.1 activexvideo.com
    127.0.0.1 www.activexvideotool.com
    127.0.0.1 activexvideotool.com
    127.0.0.1 www.ad.marketingsector.com
    127.0.0.1 ad.marketingsector.com
    127.0.0.1 www.ad.mokead.com
    127.0.0.1 ad.mokead.com
    127.0.0.1 ad.oinadserver.com
    127.0.0.1 ad.outerinfoads.com
    127.0.0.1 www.ad25.com
    127.0.0.1 ad25.com
    127.0.0.1 www.ad45.com
    127.0.0.1 ad45.com
    127.0.0.1 www.ad77.com
    127.0.0.1 ad77.com
    127.0.0.1 www.ad86.com
    127.0.0.1 ad86.com
    127.0.0.1 www.adamsupportgroup.org
    127.0.0.1 adamsupportgroup.org
    127.0.0.1 www.adarmor.com
    127.0.0.1 adarmor.com
    127.0.0.1 www.adasearch.com
    127.0.0.1 adasearch.com
    127.0.0.1 adaware.cc
    127.0.0.1 www.adawarenow.com
    127.0.0.1 adawarenow.com
    127.0.0.1 adchannel.contextplus.net
    127.0.0.1 www.addetect.com
    127.0.0.1 addetect.com
    127.0.0.1 www.add-hhh.info
    127.0.0.1 add-hhh.info
    127.0.0.1 www.addictivetechnologies.com
    127.0.0.1 addictivetechnologies.com
    127.0.0.1 www.addictivetechnologies.net
    127.0.0.1 addictivetechnologies.net
    127.0.0.1 www.addioerrori.com
    127.0.0.1 addioerrori.com
    127.0.0.1 www.add-manager.com
    127.0.0.1 add-manager.com
    127.0.0.1 www.adgate.info
    127.0.0.1 adgate.info
    127.0.0.1 www.adintelligence.net
    127.0.0.1 adintelligence.net
    127.0.0.1 www.adioserrores.com
    127.0.0.1 adioserrores.com
    127.0.0.1 www.adipics.com
    127.0.0.1 adipics.com
    127.0.0.1 www.adlogix.com
    127.0.0.1 adlogix.com
    127.0.0.1 www.admin2cash.biz
    127.0.0.1 admin2cash.biz
    127.0.0.1 adnet-plus.com
    127.0.0.1 www.adnetserver.com
    127.0.0.1 adnetserver.com
    127.0.0.1 adobe-download-now.com
    127.0.0.1 www.adobe-downloads.com
    127.0.0.1 adobe-downloads.com
    127.0.0.1 www.adobe-reader-8.fr
    127.0.0.1 adobe-reader-8.fr
    127.0.0.1 www.adprotect.com
    127.0.0.1 adprotect.com
    127.0.0.1 ads.centralmedia.ws
    127.0.0.1 ads.k8l.info
    127.0.0.1 ads.kmpads.com
    127.0.0.1 ads.kw.revenue.net
    127.0.0.1 ads.marketingsector.com
    127.0.0.1 ads.searchingbooth.com
    127.0.0.1 ads.z-quest.com
    127.0.0.1 ads1.revenue.net
    127.0.0.1 www.ads183.com
    127.0.0.1 ads183.com
    127.0.0.1 www.adscontex.com
    127.0.0.1 adscontex.com
    127.0.0.1 www.adservices1.enhance.com
    127.0.0.1 adservices1.enhance.com
    127.0.0.1 adservs.com
    127.0.0.1 www.adsextend.net
    127.0.0.1 adsextend.net
    127.0.0.1 www.adshttp.com
    127.0.0.1 adshttp.com
    127.0.0.1 www.adsniffer.com
    127.0.0.1 adsniffer.com
    127.0.0.1 www.adsonwww.com
    127.0.0.1 adsonwww.com
    127.0.0.1 www.adspics.com
    127.0.0.1 adspics.com
    127.0.0.1 www.adsrevenue.net
    127.0.0.1 adsrevenue.net
    127.0.0.1 www.adtrak.net
    127.0.0.1 adtrak.net
    127.0.0.1 adtrgt.com
    127.0.0.1 www.adult18codec.com
    127.0.0.1 adult18codec.com
    127.0.0.1 www.adult777search.info
    127.0.0.1 adult777search.info
    127.0.0.1 www.adultan.com
    127.0.0.1 adultan.com
    127.0.0.1 www.adultcodec-2008.com
    127.0.0.1 adultcodec-2008.com
    127.0.0.1 www.adultcodecstars.com
    127.0.0.1 adultcodecstars.com
    127.0.0.1 www.adult-engine-search.com
    127.0.0.1 adult-engine-search.com
    127.0.0.1 www.adult-erotic-guide.net
    127.0.0.1 adult-erotic-guide.net
    127.0.0.1 www.adultfilmsite.com
    127.0.0.1 adultfilmsite.com
    127.0.0.1 www.adult-friends-finder.net
    127.0.0.1 adult-friends-finder.net
    127.0.0.1 adultgambling.org
    127.0.0.1 adult-host.org
    127.0.0.1 www.adulthyperlinks.com
    127.0.0.1 adulthyperlinks.com
    127.0.0.1 www.adultmovieplus.com
    127.0.0.1 adultmovieplus.com
    127.0.0.1 www.adult-mpg.net
    127.0.0.1 adult-mpg.net
    127.0.0.1 adult-personal.us
    127.0.0.1 adultsgames.net
    127.0.0.1 www.adultsonlyvids.com
    127.0.0.1 adultsonlyvids.com
    127.0.0.1 www.adultsper.com
    127.0.0.1 adultsper.com
    127.0.0.1 www.adulttds.com
    127.0.0.1 adulttds.com
    127.0.0.1 www.adultzoneworld.com
    127.0.0.1 adultzoneworld.com
    127.0.0.1 www.advancedcleaner.com
    127.0.0.1 advancedcleaner.com
    127.0.0.1 www.advcash.biz
    127.0.0.1 advcash.biz
    127.0.0.1 advert.exaccess.ru
    127.0.0.1 www.advertisemoney.info
    127.0.0.1 advertisemoney.info
    127.0.0.1 advertising.paltalk.com
    127.0.0.1 www.advertising-money.info
    127.0.0.1 advertising-money.info
    127.0.0.1 ad-ware.cc
    127.0.0.1 www.ad-w-a-r-e.com
    127.0.0.1 ad-w-a-r-e.com
    127.0.0.1 www.a-d-w-a-r-e.com
    127.0.0.1 a-d-w-a-r-e.com
    127.0.0.1 www.adware.pro
    127.0.0.1 adware.pro
    127.0.0.1 www.adwarealert.com
    127.0.0.1 adwarealert.com
    127.0.0.1 www.ad-warealert.com
    127.0.0.1 ad-warealert.com
    127.0.0.1 www.adwarearrest.com
    127.0.0.1 adwarearrest.com
    127.0.0.1 www.adwarebazooka.com
    127.0.0.1 adwarebazooka.com
    127.0.0.1 www.adwarecommander.com
    127.0.0.1 adwarecommander.com
    127.0.0.1 www.adwarefinder.com
    127.0.0.1 adwarefinder.com
    127.0.0.1 www.adwaregold.com
    127.0.0.1 adwaregold.com
    127.0.0.1 www.adwarepatrol.com
    127.0.0.1 adwarepatrol.com
    127.0.0.1 www.adwareplatinum.com
    127.0.0.1 adwareplatinum.com
    127.0.0.1 www.adwareprotectionsite.com
    127.0.0.1 adwareprotectionsite.com
    127.0.0.1 www.adwarepunisher.com
    127.0.0.1 adwarepunisher.com
    127.0.0.1 www.adwareremover.ws
    127.0.0.1 adwareremover.ws
    127.0.0.1 www.adwaresafety.com
    127.0.0.1 adwaresafety.com
    127.0.0.1 www.adwarexp.com
    127.0.0.1 adwarexp.com
    127.0.0.1 affiliate.idownload.com
    127.0.0.1 www.aflgate.com
    127.0.0.1 aflgate.com
    127.0.0.1 africaspromise.org
    127.0.0.1 agava.com
    127.0.0.1 agava.ru
    127.0.0.1 agentstudio.com
    127.0.0.1 www.ageofconans.net
    127.0.0.1 ageofconans.net
    127.0.0.1 www.aginegialle.it
    127.0.0.1 aginegialle.it
    127.0.0.1 www.ahnenforschung.de
    127.0.0.1 ahnenforschung.de
    127.0.0.1 www.aifind.info
    127.0.0.1 aifind.info
    127.0.0.1 www.airtleworld.com
    127.0.0.1 airtleworld.com
    127.0.0.1 www.aitalia.it
    127.0.0.1 aitalia.it
    127.0.0.1 akamai.downloadv3.com
    127.0.0.1 www.aklitalia.it
    127.0.0.1 aklitalia.it
    127.0.0.1 akril.com
    127.0.0.1 alcatel.ws
    127.0.0.1 www.alertspy.com
    127.0.0.1 alertspy.com
    127.0.0.1 www.alfacleaner.com
    127.0.0.1 alfacleaner.com
    127.0.0.1 alfa-search.com
    127.0.0.1 www.alialia.it
    127.0.0.1 alialia.it
    127.0.0.1 www.aliotalia.it
    127.0.0.1 aliotalia.it
    127.0.0.1 www.alirtalia.it
    127.0.0.1 alirtalia.it
    127.0.0.1 www.alitaia.it
    127.0.0.1 alitaia.it
    127.0.0.1 www.alitaklia.it
    127.0.0.1 alitaklia.it
    127.0.0.1 www.alitala.it
    127.0.0.1 alitala.it
    127.0.0.1 www.alitali.it
    127.0.0.1 alitali.it
    127.0.0.1 www.alitaliaq.it
    127.0.0.1 alitaliaq.it
    127.0.0.1 www.alitalias.it
    127.0.0.1 alitalias.it
    127.0.0.1 www.alitaliaz.it
    127.0.0.1 alitaliaz.it
    127.0.0.1 www.alitalioa.it
    127.0.0.1 alitalioa.it
    127.0.0.1 www.alitalisa.it
    127.0.0.1 alitalisa.it
    127.0.0.1 www.alitaliua.it
    127.0.0.1 alitaliua.it
    127.0.0.1 www.alitalkia.it
    127.0.0.1 alitalkia.it
    127.0.0.1 www.alitaloia.it
    127.0.0.1 alitaloia.it
    127.0.0.1 www.alitaluia.it
    127.0.0.1 alitaluia.it
    127.0.0.1 www.alitaslia.it
    127.0.0.1 alitaslia.it
    127.0.0.1 www.alitlia.it
    127.0.0.1 alitlia.it
    127.0.0.1 www.alitralia.it
    127.0.0.1 alitralia.it
    127.0.0.1 www.alitsalia.it
    127.0.0.1 alitsalia.it
    127.0.0.1 www.aliutalia.it
    127.0.0.1 aliutalia.it
    127.0.0.1 www.all1count.net
    127.0.0.1 all1count.net
    127.0.0.1 www.all4internet.com
    127.0.0.1 all4internet.com
    127.0.0.1 allabtcars.com
    127.0.0.1 allabtjeeps.com
    127.0.0.1 www.all-bittorrent.com
    127.0.0.1 all-bittorrent.com
    127.0.0.1 www.allcollisions.com
    127.0.0.1 allcollisions.com
    127.0.0.1 www.allcybersearch.com
    127.0.0.1 allcybersearch.com
    127.0.0.1 www.alldnserrors.com
    127.0.0.1 alldnserrors.com
    127.0.0.1 www.all-downloads-now.com
    127.0.0.1 all-downloads-now.com
    127.0.0.1 www.all-edonkey.com
    127.0.0.1 all-edonkey.com
    127.0.0.1 www.allertaminacce.com
    127.0.0.1 allertaminacce.com
    127.0.0.1 allforadult.com
    127.0.0.1 allhyperlinks.com
    127.0.0.1 www.alliesecurity.com
    127.0.0.1 alliesecurity.com
    127.0.0.1 all-inet.com
    127.0.0.1 allinternetbusiness.com
    127.0.0.1 www.all-limewire.com
    127.0.0.1 all-limewire.com
    127.0.0.1 www.allmegabucks.com
    127.0.0.1 allmegabucks.com
    127.0.0.1 www.allprotections.com
    127.0.0.1 allprotections.com
    127.0.0.1 www.allresultz.net
    127.0.0.1 allresultz.net
    127.0.0.1 www.allsearch.us
    127.0.0.1 allsearch.us
    127.0.0.1 www.allsecuritynotes.com
    127.0.0.1 allsecuritynotes.com
    127.0.0.1 www.allsecuritysite.com
    127.0.0.1 allsecuritysite.com
    127.0.0.1 www.allstarsvideos.net
    127.0.0.1 allstarsvideos.net
    127.0.0.1 www.alltiettantivirus.com
    127.0.0.1 alltiettantivirus.com
    127.0.0.1 www.alltruesoftware.com
    127.0.0.1 alltruesoftware.com
    127.0.0.1 www.allvideoactivex.com
    127.0.0.1 allvideoactivex.com
    127.0.0.1 www.almanah.biz
    127.0.0.1 almanah.biz
    127.0.0.1 almarvideos.com
    127.0.0.1 www.aloitalia.it
    127.0.0.1 aloitalia.it
    127.0.0.1 www.aluitalia.it
    127.0.0.1 aluitalia.it
    127.0.0.1 www.amaena.com
    127.0.0.1 amaena.com
    127.0.0.1 amandamountains.com
    127.0.0.1 www.amateurliveshow.com
    127.0.0.1 amateurliveshow.com
    127.0.0.1 www.amediasoftware.com
    127.0.0.1 amediasoftware.com
    127.0.0.1 www.amediasource.com
    127.0.0.1 amediasource.com
    127.0.0.1 www.americanautobargains.com
    127.0.0.1 americanautobargains.com
    127.0.0.1 www.americancarbargains.com
    127.0.0.1 americancarbargains.com
    127.0.0.1 american-teens.net
    127.0.0.1 amigeek.com
    127.0.0.1 www.amigobore.com
    127.0.0.1 amigobore.com
    127.0.0.1 amisbusiness.com
    127.0.0.1 www.ampmsearch.com
    127.0.0.1 ampmsearch.com
    127.0.0.1 www.analcord.com
    127.0.0.1 analcord.com
    127.0.0.1 analmovi.com
    127.0.0.1 www.anarchylolita.com
    127.0.0.1 anarchylolita.com
    127.0.0.1 anarchyporn.com
    127.0.0.1 www.andromedical.com
    127.0.0.1 andromedical.com
    127.0.0.1 www.animepornmag.com
    127.0.0.1 animepornmag.com
    127.0.0.1 anin.org
    127.0.0.1 www.anjpn-avxiz.biz
    127.0.0.1 anjpn-avxiz.biz
    127.0.0.1 www.anjpnzqav.biz
    127.0.0.1 anjpnzqav.biz
    127.0.0.1 www.anjpn-zqav.biz
    127.0.0.1 anjpn-zqav.biz
    127.0.0.1 annaromeo.com
    127.0.0.1 www.antiddos.us
    127.0.0.1 antiddos.us
    127.0.0.1 www.antiespiadorado.com
    127.0.0.1 antiespiadorado.com
    127.0.0.1 www.antiespionspack.com
    127.0.0.1 antiespionspack.com
    127.0.0.1 www.antigusanos2008.com
    127.0.0.1 antigusanos2008.com
    127.0.0.1 www.antispamassistant.com
    127.0.0.1 antispamassistant.com
    127.0.0.1 www.antispamdeluxe.com
    127.0.0.1 antispamdeluxe.com
    127.0.0.1 www.antispionage.com
    127.0.0.1 antispionage.com
    127.0.0.1 www.antispionagepro.com
    127.0.0.1 antispionagepro.com
    127.0.0.1 www.antispyadvanced.com
    127.0.0.1 antispyadvanced.com
    127.0.0.1 www.antispydns.biz
    127.0.0.1 antispydns.biz
    127.0.0.1 www.antispykit.com
    127.0.0.1 antispykit.com
    127.0.0.1 www.antispylab.com
    127.0.0.1 antispylab.com
    127.0.0.1 www.antispyshield.com
    127.0.0.1 antispyshield.com
    127.0.0.1 www.antispysolutions.com
    127.0.0.1 antispysolutions.com
    127.0.0.1 www.antispyware.com
    127.0.0.1 antispyware.com
    127.0.0.1 www.antispywareboot.com
    127.0.0.1 antispywareboot.com
    127.0.0.1 www.antispywarebot.com
    127.0.0.1 antispywarebot.com
    127.0.0.1 www.antispywarebox.com
    127.0.0.1 antispywarebox.com
    127.0.0.1 www.antispywaredownloads.com
    127.0.0.1 antispywaredownloads.com
    127.0.0.1 www.antispywaresuite.com
    127.0.0.1 antispywaresuite.com
    127.0.0.1 www.antispywareupdates.net
    127.0.0.1 antispywareupdates.net
    127.0.0.1 www.antispywarexp.com
    127.0.0.1 antispywarexp.com
    127.0.0.1 www.antispyweb.net
    127.0.0.1 antispyweb.net
    127.0.0.1 www.antiver2008.com
    127.0.0.1 antiver2008.com
    127.0.0.1 www.antivermins.com
    127.0.0.1 antivermins.com
    127.0.0.1 www.anti-vermins.com
    127.0.0.1 anti-vermins.com
    127.0.0.1 www.antivir2007.com
    127.0.0.1 antivir2007.com
    127.0.0.1 www.antivirgear.com
    127.0.0.1 antivirgear.com
    127.0.0.1 www.antivirprotect.com
    127.0.0.1 antivirprotect.com
    127.0.0.1 www.antivirus.fastfreedownload.com
    127.0.0.1 antivirus.fastfreedownload.com
    127.0.0.1 www.antivirus2008pro.com
    127.0.0.1 antivirus2008pro.com
    127.0.0.1 www.antivirus-2008pro.com
    127.0.0.1 antivirus-2008pro.com
    127.0.0.1 www.antivirus-2008-pro.com
    127.0.0.1 antivirus-2008-pro.com
    127.0.0.1 www.antivirus2008pro.info
    127.0.0.1 antivirus2008pro.info
    127.0.0.1 www.antivirus-2008pro.info
    127.0.0.1 antivirus-2008pro.info
    127.0.0.1 www.antivirus-2008-pro.info
    127.0.0.1 antivirus-2008-pro.info
    127.0.0.1 www.antivirus2008pro.net
    127.0.0.1 antivirus2008pro.net
    127.0.0.1 www.antivirus-2008pro.net
    127.0.0.1 antivirus-2008pro.net
    127.0.0.1 www.antivirus-2008-pro.net
    127.0.0.1 antivirus-2008-pro.net
    127.0.0.1 www.antivirus2008pro.org
    127.0.0.1 antivirus2008pro.org
    127.0.0.1 www.antivirus-2008pro.org
    127.0.0.1 antivirus-2008pro.org
    127.0.0.1 www.antivirus-2008-pro.org
    127.0.0.1 antivirus-2008-pro.org
    127.0.0.1 www.antivirus2008x.com
    127.0.0.1 antivirus2008x.com
    127.0.0.1 www.antivirusadvance.com
    127.0.0.1 antivirusadvance.com
    127.0.0.1 www.antivirusaskeladd.com
    127.0.0.1 antivirusaskeladd.com
    127.0.0.1 www.antivirusgereedschap.com
    127.0.0.1 antivirusgereedschap.com
    127.0.0.1 www.antivirusgolden.com
    127.0.0.1 antivirusgolden.com
    127.0.0.1 www.antivirus-hq.net
    127.0.0.1 antivirus-hq.net
    127.0.0.1 www.antiviruspcsuite.com
    127.0.0.1 antiviruspcsuite.com
    127.0.0.1 www.antiviruspremium.com
    127.0.0.1 antiviruspremium.com
    127.0.0.1 www.anti-virus-pro.com
    127.0.0.1 anti-virus-pro.com
    127.0.0.1 www.antivirusprotector.com
    127.0.0.1 antivirusprotector.com
    127.0.0.1 www.antivirus-scanner.com
    127.0.0.1 antivirus-scanner.com
    127.0.0.1 www.antivirusscherm.com
    127.0.0.1 antivirusscherm.com
    127.0.0.1 www.antivirussecuritypro.com
    127.0.0.1 antivirussecuritypro.com
    127.0.0.1 www.antivirus-stop.com
    127.0.0.1 antivirus-stop.com
    127.0.0.1 www.antivirussuite.com
    127.0.0.1 antivirussuite.com
    127.0.0.1 www.antiworm2008.com
    127.0.0.1 antiworm2008.com
    127.0.0.1 www.antiwurm2008.com
    127.0.0.1 antiwurm2008.com
    127.0.0.1 antrocity.com
    127.0.0.1 www.anyofus.com
    127.0.0.1 anyofus.com
    127.0.0.1 www.anysn.seproger.com
    127.0.0.1 anysn.seproger.com
    127.0.0.1 anything4health.com
    127.0.0.1 www.apicpreview.com
    127.0.0.1 apicpreview.com
    127.0.0.1 www.appealcircuit.com
    127.0.0.1 appealcircuit.com
    127.0.0.1 www.approvedlinks.com
    127.0.0.1 approvedlinks.com
    127.0.0.1 apps.deskwizz.com
    127.0.0.1 apps.webservicehost.com
    127.0.0.1 www.aprotectedpage.com
    127.0.0.1 aprotectedpage.com
    127.0.0.1 apsua.com
    127.0.0.1 www.archivioadulti.com
    127.0.0.1 archivioadulti.com
    127.0.0.1 www.archiviosex.net
    127.0.0.1 archiviosex.net
    127.0.0.1 aregay.com
    127.0.0.1 www.ares.click-new-download.com
    127.0.0.1 ares.click-new-download.com
    127.0.0.1 www.ares-freebie.com
    127.0.0.1 ares-freebie.com
    127.0.0.1 www.arespro2007.com
    127.0.0.1 arespro2007.com
    127.0.0.1 www.aresultra.com
    127.0.0.1 aresultra.com
    127.0.0.1 www.ares-usa.com
    127.0.0.1 ares-usa.com
    127.0.0.1 arheo.com
    127.0.0.1 arizonaweb.org
    127.0.0.1 armitageinn.com
    127.0.0.1 www.arquivojpgs.smtp.ru
    127.0.0.1 arquivojpgs.smtp.ru
    127.0.0.1 artachnid.com
    127.0.0.1 art-func.com
    127.0.0.1 art-xxx.com
    127.0.0.1 www.asafebrowser.com
    127.0.0.1 asafebrowser.com
    127.0.0.1 www.asafetyalways.com
    127.0.0.1 asafetyalways.com
    127.0.0.1 www.asafetynote.com
    127.0.0.1 asafetynote.com
    127.0.0.1 www.asafetynotice.com
    127.0.0.1 asafetynotice.com
    127.0.0.1 www.asafetypage.com
    127.0.0.1 asafetypage.com
    127.0.0.1 www.asdbiz.biz
    127.0.0.1 asdbiz.biz
    127.0.0.1 www.asdeykuddq.com
    127.0.0.1 asdeykuddq.com
    127.0.0.1 www.asecurebar.com
    127.0.0.1 asecurebar.com
    127.0.0.1 www.asecureboard.com
    127.0.0.1 asecureboard.com
    127.0.0.1 www.asecurevalue.com
    127.0.0.1 asecurevalue.com
    127.0.0.1 www.asecurityissue.com
    127.0.0.1 asecurityissue.com
    127.0.0.1 www.asecuritynotice.com
    127.0.0.1 asecuritynotice.com
    127.0.0.1 www.asecuritypaper.com
    127.0.0.1 asecuritypaper.com
    127.0.0.1 www.asecuritystuff.com
    127.0.0.1 asecuritystuff.com
    127.0.0.1 www.asfadaptation.com
    127.0.0.1 asfadaptation.com
    127.0.0.1 asiankingkong.com
    127.0.0.1 www.asianpornmag.com
    127.0.0.1 asianpornmag.com
    127.0.0.1 www.asiantoolbar.com
    127.0.0.1 asiantoolbar.com
    127.0.0.1 www.asidseiupc.com
    127.0.0.1 asidseiupc.com
    127.0.0.1 www.aslitalia.it
    127.0.0.1 aslitalia.it
    127.0.0.1 ass-gals.com
    127.0.0.1 www.assureprotection.com
    127.0.0.1 assureprotection.com
    127.0.0.1 asta-killer.com
    127.0.0.1 www.astrologie-server.com
    127.0.0.1 astrologie-server.com
    127.0.0.1 www.asupereva.it
    127.0.0.1 asupereva.it
    127.0.0.1 www.ataprogram.com
    127.0.0.1 ataprogram.com
    127.0.0.1 athenrye.com
    127.0.0.1 www.atotalsafety.com
    127.0.0.1 atotalsafety.com
    127.0.0.1 www.atrueprotection.com
    127.0.0.1 atrueprotection.com
    127.0.0.1 www.atruesecurity.com
    127.0.0.1 atruesecurity.com
    127.0.0.1 www.attackware.com
    127.0.0.1 attackware.com
    127.0.0.1 www.attrezzi.biz
    127.0.0.1 attrezzi.biz
    127.0.0.1 www.aucunsvirus.com
    127.0.0.1 aucunsvirus.com
    127.0.0.1 www.aulde.net
    127.0.0.1 aulde.net
    127.0.0.1 www.aupereva.it
    127.0.0.1 aupereva.it
    127.0.0.1 www.autobargains.org
    127.0.0.1 autobargains.org
    127.0.0.1 www.autobargainsnetwork.com
    127.0.0.1 autobargainsnetwork.com
    127.0.0.1 www.autocontext.begun.ru
    127.0.0.1 autocontext.begun.ru
    127.0.0.1 autoescrowpay.com
    127.0.0.1 www.avadvance.com
    127.0.0.1 avadvance.com
    127.0.0.1 www.avast.free-software-center.com
    127.0.0.1 avast.free-software-center.com
    127.0.0.1 www.avast-2007.com
    127.0.0.1 avast-2007.com
    127.0.0.1 www.avast-downloads.com
    127.0.0.1 avast-downloads.com
    127.0.0.1 www.avast-hq.com
    127.0.0.1 avast-hq.com
    127.0.0.1 www.avforce.com
    127.0.0.1 avforce.com
    127.0.0.1 www.avg.grab-it-today.net
    127.0.0.1 avg.grab-it-today.net
    127.0.0.1 www.avg.softwarecenterz.com
    127.0.0.1 avg.softwarecenterz.com
    127.0.0.1 www.avg-secure.com
    127.0.0.1 avg-secure.com
    127.0.0.1 www.aviadaptation.com
    127.0.0.1 aviadaptation.com
    127.0.0.1 avian-ads.com
    127.0.0.1 www.avicoupler.com
    127.0.0.1 avicoupler.com
    127.0.0.1 www.avideoaxaccess.com
    127.0.0.1 avideoaxaccess.com
    127.0.0.1 www.avideosurfer.com
    127.0.0.1 avideosurfer.com
    127.0.0.1 www.avidirection.com
    127.0.0.1 avidirection.com
    127.0.0.1 www.aviewersoft.com
    127.0.0.1 aviewersoft.com
    127.0.0.1 www.avihelper.com
    127.0.0.1 avihelper.com
    127.0.0.1 www.aviinstrument.com
    127.0.0.1 aviinstrument.com
    127.0.0.1 www.avitool.com
    127.0.0.1 avitool.com
    127.0.0.1 www.avpcheckupdate.com
    127.0.0.1 avpcheckupdate.com
    127.0.0.1 www.avsmanufacture.com
    127.0.0.1 avsmanufacture.com
    127.0.0.1 www.avsystemcare.com
    127.0.0.1 avsystemcare.com
    127.0.0.1 www.avxizaaqada.biz
    127.0.0.1 avxizaaqada.biz
    127.0.0.1 www.avxiz-anjpn.biz
    127.0.0.1 avxiz-anjpn.biz
    127.0.0.1 www.avxizueorn.biz
    127.0.0.1 avxizueorn.biz
    127.0.0.1 www.avxiz-ueorn.biz
    127.0.0.1 avxiz-ueorn.biz
    127.0.0.1 www.avxiz-vtvcp.biz
    127.0.0.1 avxiz-vtvcp.biz
    127.0.0.1 www.avxiz-ygco.biz
    127.0.0.1 avxiz-ygco.biz
    127.0.0.1 www.avxiz-zqav.biz
    127.0.0.1 avxiz-zqav.biz
    127.0.0.1 www.awarenesstech.com
    127.0.0.1 awarenesstech.com
    127.0.0.1 www.awarninglist.com
    127.0.0.1 awarninglist.com
    127.0.0.1 awbeta.net-nucleus.com
    127.0.0.1 www.awesomehomepage.com
    127.0.0.1 awesomehomepage.com
    127.0.0.1 awmcash.biz
    127.0.0.1 awmdabest.com
    127.0.0.1 www.axemediasoftware.com
    127.0.0.1 axemediasoftware.com
    127.0.0.1 www.aximageobject.com
    127.0.0.1 aximageobject.com
    127.0.0.1 www.axmediaproject.com
    127.0.0.1 axmediaproject.com
    127.0.0.1 www.axmediasoftware.com
    127.0.0.1 axmediasoftware.com
    127.0.0.1 www.axmediasolutions.com
    127.0.0.1 axmediasolutions.com
    127.0.0.1 www.axobjectpage.com
    127.0.0.1 axobjectpage.com
    127.0.0.1 www.axobjectsource.com
    127.0.0.1 axobjectsource.com
    127.0.0.1 www.axsoftwaretool.com
    127.0.0.1 axsoftwaretool.com
    127.0.0.1 www.axvideoproject.com
    127.0.0.1 axvideoproject.com
    127.0.0.1 www.axvideosetup.com
    127.0.0.1 axvideosetup.com
    127.0.0.1 ayakawamura.com
    127.0.0.1 ayb.dns-look-up.com
    127.0.0.1 ayb.netbios-wait.com
    127.0.0.1 ayumitaniguchi.com
    127.0.0.1 azebar.com
    127.0.0.1 www.azureusclub.com
    127.0.0.1 azureusclub.com
    127.0.0.1 www.azureus-freebie.com
    127.0.0.1 azureus-freebie.com
    127.0.0.1 www.azzetta.it
    127.0.0.1 azzetta.it
    127.0.0.1 b.casalemedia.com
    127.0.0.1 b122.mcboo.com
    127.0.0.1 www.babe.k-lined.com
    127.0.0.1 babe.k-lined.com
    127.0.0.1 www.babe.the-killer.bz
    127.0.0.1 babe.the-killer.bz
    127.0.0.1 www.babenet.com
    127.0.0.1 babenet.com
    127.0.0.1 www.babespornmag.com
    127.0.0.1 babespornmag.com
    127.0.0.1 www.babeweb.de
    127.0.0.1 babeweb.de
    127.0.0.1 www.baccarat-other.info
    127.0.0.1 baccarat-other.info
    127.0.0.1 www.backstripgirls.com
    127.0.0.1 backstripgirls.com
    127.0.0.1 backup.mabou.org
    127.0.0.1 www.baiduqqsina.cn
    127.0.0.1 baiduqqsina.cn
    127.0.0.1 www.balotierra.com
    127.0.0.1 balotierra.com
    127.0.0.1 bannedhost.net
    127.0.0.1 barbudafarms.com
    127.0.0.1 www.bardownload.com
    127.0.0.1 bardownload.com
    127.0.0.1 barnandfence.com
    127.0.0.1 batsearch.com
    127.0.0.1 baygraphicsllc.com
    127.0.0.1 bb.wudiliuliang.com
    127.0.0.1 bbbsearch.com
    127.0.0.1 bb-search.com
    127.0.0.1 www.bcnproduction.com
    127.0.0.1 bcnproduction.com
    127.0.0.1 bdsmlibrary.net
    127.0.0.1 www.bdsmpornmag.com
    127.0.0.1 bdsmpornmag.com
    127.0.0.1 www.bealent.com
    127.0.0.1 bealent.com
    127.0.0.1 www.bearshare.click-new-download.com
    127.0.0.1 bearshare.click-new-download.com
    127.0.0.1 www.bearshare.download-me.info
    127.0.0.1 bearshare.download-me.info
    127.0.0.1 www.bearshare.mp3-muzic.com
    127.0.0.1 bearshare.mp3-muzic.com
    127.0.0.1 www.bearshare-download.org
    127.0.0.1 bearshare-download.org
    127.0.0.1 www.bearshare-downloads.net
    127.0.0.1 bearshare-downloads.net
    127.0.0.1 www.bearsharelive.co.uk
    127.0.0.1 bearsharelive.co.uk
    127.0.0.1 www.bearshare-music-downloads.com
    127.0.0.1 bearshare-music-downloads.com
    127.0.0.1 www.bearsharepro2007.com
    127.0.0.1 bearsharepro2007.com
    127.0.0.1 www.bearshare-usa.com
    127.0.0.1 bearshare-usa.com
    127.0.0.1 bedhome.com
    127.0.0.1 bediadance.com
    127.0.0.1 www.beebappyy.biz
    127.0.0.1 beebappyy.biz
    127.0.0.1 www.begin2search.com
    127.0.0.1 begin2search.com
    127.0.0.1 bellabasketsfl.com
    127.0.0.1 bernaolatwin.com
    127.0.0.1 www.berufe-jobs.de
    127.0.0.1 berufe-jobs.de
    127.0.0.1 www.berufe-server.de
    127.0.0.1 berufe-server.de
    127.0.0.1 www.berufe-welt.de
    127.0.0.1 berufe-welt.de
    127.0.0.1 www.berufs-wahl.de
    127.0.0.1 berufs-wahl.de
    127.0.0.1 www.beruijindegunhadesun.com
    127.0.0.1 beruijindegunhadesun.com
    127.0.0.1 www.best3xclips.com
    127.0.0.1 best3xclips.com
    127.0.0.1 www.bestadults.com
    127.0.0.1 bestadults.com
    127.0.0.1 best-counter.com
    127.0.0.1 bestcrawler.com
    127.0.0.1 www.bestdailyvids.com
    127.0.0.1 bestdailyvids.com
    127.0.0.1 bestfor.ru
    127.0.0.1 www.bestfuckvids.com
    127.0.0.1 bestfuckvids.com
    127.0.0.1 best-hardpics.com
    127.0.0.1 www.bestmanage.org
    127.0.0.1 bestmanage.org
    127.0.0.1 www.bestmanage0.org
    127.0.0.1 bestmanage0.org
    127.0.0.1 www.bestmanage1.org
    127.0.0.1 bestmanage1.org
    127.0.0.1 www.bestmanage2.org
    127.0.0.1 bestmanage2.org
    127.0.0.1 www.bestmanage3.org
    127.0.0.1 bestmanage3.org
    127.0.0.1 www.bestmanage4.org
    127.0.0.1 bestmanage4.org
    127.0.0.1 www.bestmanage5.org
    127.0.0.1 bestmanage5.org
    127.0.0.1 www.bestmanage6.org
    127.0.0.1 bestmanage6.org
    127.0.0.1 www.bestmanage7.org
    127.0.0.1 bestmanage7.org
    127.0.0.1 www.bestmanage8.org
    127.0.0.1 bestmanage8.org
    127.0.0.1 www.bestmanage9.org
    127.0.0.1 bestmanage9.org
    127.0.0.1 www.bestmovszone.com
    127.0.0.1 bestmovszone.com
    127.0.0.1 www.bestoffersnetworks.com
    127.0.0.1 bestoffersnetworks.com
    127.0.0.1 www.best-porncollection.com
    127.0.0.1 best-porncollection.com
    127.0.0.1 bestporngate.com
    127.0.0.1 www.bestsafetyguide.net
    127.0.0.1 bestsafetyguide.net
    127.0.0.1 www.bestsearch.cc
    127.0.0.1 bestsearch.cc
    127.0.0.1 www.bestsearchworld.info
    127.0.0.1 bestsearchworld.info
    127.0.0.1 www.best-spyware.info
    127.0.0.1 best-spyware.info
    127.0.0.1 www.best-targeted-traffic.com
    127.0.0.1 best-targeted-traffic.com
    127.0.0.1 www.best-voyeur.info
    127.0.0.1 best-voyeur.info
    127.0.0.1 bestweblinks.com
    127.0.0.1 best-winning-casino.com
    127.0.0.1 www.bestworldgirls-for-u.net
    127.0.0.1 bestworldgirls-for-u.net
    127.0.0.1 www.bestxclips.com
    127.0.0.1 bestxclips.com
    127.0.0.1 bestxporno.com
    127.0.0.1 www.bestxxxmpegs.com
    127.0.0.1 bestxxxmpegs.com
    127.0.0.1 www.bettersearch.biz
    127.0.0.1 bettersearch.biz
    127.0.0.1 www.bgazzetta.it
    127.0.0.1 bgazzetta.it
    127.0.0.1 www.bgoogle.it
    127.0.0.1 bgoogle.it
    127.0.0.1 www.bigcodecadult.com
    127.0.0.1 bigcodecadult.com
    127.0.0.1 www.bigcodecadult2008.com
    127.0.0.1 bigcodecadult2008.com
    127.0.0.1 www.bigcodecadult2008-17.com
    127.0.0.1 bigcodecadult2008-17.com
    127.0.0.1 www.bighot18adult2008.com
    127.0.0.1 bighot18adult2008.com
    127.0.0.1 www.bighot18-adult2008.com
    127.0.0.1 bighot18-adult2008.com
    127.0.0.1 www.bighot18codec2008.com
    127.0.0.1 bighot18codec2008.com
    127.0.0.1 www.bighot18-codec2008.com
    127.0.0.1 bighot18-codec2008.com
    127.0.0.1 www.bigtrafficnetwork.com
    127.0.0.1 bigtrafficnetwork.com
    127.0.0.1 www.bigwww.com
    127.0.0.1 bigwww.com
    127.0.0.1 www.bill.de
    127.0.0.1 bill.de
    127.0.0.1 bin.errorprotector.com
    127.0.0.1 bins.media-motor.net
    127.0.0.1 bins2.media-motor.net
    127.0.0.1 bis.180solutions.com
    127.0.0.1 bitchesonline.net
    127.0.0.1 www.bitcomet-freebie.com
    127.0.0.1 bitcomet-freebie.com
    127.0.0.1 www.bittorrent.click-new-download.com
    127.0.0.1 bittorrent.click-new-download.com
    127.0.0.1 biz.biz
    127.0.0.1 www.bkvcompany.com
    127.0.0.1 bkvcompany.com
    127.0.0.1 www.blackblues00.com
    127.0.0.1 blackblues00.com
    127.0.0.1 www.blackcodec.com
    127.0.0.1 blackcodec.com
    127.0.0.1 www.blackcodec.net
    127.0.0.1 blackcodec.net
    127.0.0.1 www.blackhats.tc
    127.0.0.1 blackhats.tc
    127.0.0.1 www.blackhawksoftware.com
    127.0.0.1 blackhawksoftware.com
    127.0.0.1 blackjack-free.net
    127.0.0.1 www.blacklegion.info
    127.0.0.1 blacklegion.info
    127.0.0.1 blazefind.com
    127.0.0.1 blender.xu.pl
    127.0.0.1 www.blockcheckercontrol.com
    127.0.0.1 blockcheckercontrol.com
    127.0.0.1 blondetgp.com
    127.0.0.1 www.blue-elefant.com
    127.0.0.1 blue-elefant.com
    127.0.0.1 www.bm.theaimonline.com
    127.0.0.1 bm.theaimonline.com
    127.0.0.1 www.bnmgate.com
    127.0.0.1 bnmgate.com
    127.0.0.1 bodaciousbabette.com
    127.0.0.1 www.bonzi.com
    127.0.0.1 bonzi.com
    127.0.0.1 boobdoll.com
    127.0.0.1 boobsandtits.com
    127.0.0.1 boobsclub.com
    127.0.0.1 www.bookedspace.com
    127.0.0.1 bookedspace.com
    127.0.0.1 www.boom.com.vn
    127.0.0.1 boom.com.vn
    127.0.0.1 www.boomgirltv.com
    127.0.0.1 boomgirltv.com
    127.0.0.1 boredlife.com
    127.0.0.1 bowlofogumbo.com
    127.0.0.1 www.bpfq02.com
    127.0.0.1 bpfq02.com
    127.0.0.1 www.bqgate.com
    127.0.0.1 bqgate.com
    127.0.0.1 br.errorsafe.com
    127.0.0.1 br.winantivirus.com
    127.0.0.1 br.winfixer.com
    127.0.0.1 bradcoem.org
    127.0.0.1 www.braincodec.com
    127.0.0.1 braincodec.com
    127.0.0.1 www.brakecodec.com
    127.0.0.1 brakecodec.com
    127.0.0.1 brandiyoung.com
    127.0.0.1 www.bravesentry.com
    127.0.0.1 bravesentry.com
    127.0.0.1 www.breenten.biz
    127.0.0.1 breenten.biz
    127.0.0.1 www.brodbfm.net
    127.0.0.1 brodbfm.net
    127.0.0.1 brookeburn.com
    127.0.0.1 www.browserwise.com
    127.0.0.1 browserwise.com
    127.0.0.1 bsa.safetydownload.com
    127.0.0.1 www.bsplaycodec.com
    127.0.0.1 bsplaycodec.com
    127.0.0.1 bucps.com
    127.0.0.1 buhartes.info
    127.0.0.1 buldog-stats.com
    127.0.0.1 www.bullseye-network.com
    127.0.0.1 bullseye-network.com
    127.0.0.1 burgerkingbigscreen.com
    127.0.0.1 www.burningsite.com
    127.0.0.1 burningsite.com
    127.0.0.1 www.burnsrecyclinginc.com
    127.0.0.1 burnsrecyclinginc.com
    127.0.0.1 buscards.net
    127.0.0.1 bustyrussell.com
    127.0.0.1 www.busysearch.net
    127.0.0.1 busysearch.net
    127.0.0.1 buttejazz.org
    127.0.0.1 www.buy-find.info
    127.0.0.1 buy-find.info
    127.0.0.1 buyselldomain.net
    127.0.0.1 www.buytraff.biz
    127.0.0.1 buytraff.biz
    127.0.0.1 buz.ru
    127.0.0.1 www.bvdtechinque.com
    127.0.0.1 bvdtechinque.com
    127.0.0.1 www.bvirgilio.it
    127.0.0.1 bvirgilio.it
    127.0.0.1 c.centralmedia.ws
    127.0.0.1 www.c.enhance.com
    127.0.0.1 c.enhance.com
    127.0.0.1 c.goclick.com
    127.0.0.1 www.c4tdownload.com
    127.0.0.1 c4tdownload.com
    127.0.0.1 www.c5.www4free.info
    127.0.0.1 c5.www4free.info
    127.0.0.1 www.cache.surfaccuracy.com
    127.0.0.1 cache.surfaccuracy.com
    127.0.0.1 cache.ysbweb.com
    127.0.0.1 www.cadesfinjeriokas.com
    127.0.0.1 cadesfinjeriokas.com
    127.0.0.1 calcioturris.com
    127.0.0.1 www.calendaralerts.net
    127.0.0.1 calendaralerts.net
    127.0.0.1 www.callinghome.biz
    127.0.0.1 callinghome.biz
    127.0.0.1 www.cameouk.co.uk
    127.0.0.1 cameouk.co.uk
    127.0.0.1 cameup.com
    127.0.0.1 www.camouflageclothingonline.net
    127.0.0.1 camouflageclothingonline.net
    127.0.0.1 campaigns.outerinfo.net
    127.0.0.1 camup.net
    127.0.0.1 canberracricketcoaching.com
    127.0.0.1 candycantaloupes.com
    127.0.0.1 www.canidetect.org
    127.0.0.1 canidetect.org
    127.0.0.1 www.cantfind.com
    127.0.0.1 cantfind.com
    127.0.0.1 careers.dulcineasystems.net
    127.0.0.1 carsands.com
    127.0.0.1 carsrentals.net
    127.0.0.1 cartoes.uol.com.br
    127.0.0.1 www.casalemedia.com
    127.0.0.1 casalemedia.com
    127.0.0.1 www.cashdeluxe.net
    127.0.0.1 cashdeluxe.net
    127.0.0.1 www.cashengines.com
    127.0.0.1 cashengines.com
    127.0.0.1 cashsearch.biz
    127.0.0.1 www.cashsurfers.com
    127.0.0.1 cashsurfers.com
    127.0.0.1 www.cashunlim.com
    127.0.0.1 cashunlim.com
    127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
    127.0.0.1 casino2win.net
    127.0.0.1 casino-gambling-1.net
    127.0.0.1 casino-gambling-2.net
    127.0.0.1 casinomidas.net
    127.0.0.1 casinonline.net
    127.0.0.1 casino-onlines.net
    127.0.0.1 www.castingsamateur.com
    127.0.0.1 castingsamateur.com
    127.0.0.1 catallogue.com
    127.0.0.1 www.catch-dc.info
    127.0.0.1 catch-dc.info
    127.0.0.1 categories.mygeek.com
    127.0.0.1 catsss.da.ru
    127.0.0.1 caxa.ru
    127.0.0.1 cazygirls-world.com
    127.0.0.1 cc.panet.org
    127.0.0.1 www.ccecaedbebfcaf.com
    127.0.0.1 ccecaedbebfcaf.com
    127.0.0.1 cclebali.org
    127.0.0.1 www.ccorriere.it
    127.0.0.1 ccorriere.it
    127.0.0.1 www.cdcopysite.com
    127.0.0.1 cdcopysite.com
    127.0.0.1 www.cdegate.com
    127.0.0.1 cdegate.com
    127.0.0.1 cdn.drivecleaner.com
    127.0.0.1 cdn.errorsafe.com
    127.0.0.1 cdn.movies-etc.com
    127.0.0.1 cdn.winsoftware.com
    127.0.0.1 cdn2.movies-etc.com
    127.0.0.1 www.cdorriere.it
    127.0.0.1 cdorriere.it
    127.0.0.1 ceewawires.org
    127.0.0.1 centralmedia.ws
    127.0.0.1 certumgroup.com
    127.0.0.1 www.cforriere.it
    127.0.0.1 cforriere.it
    127.0.0.1 www.check.jupitersatellites.biz
    127.0.0.1 check.jupitersatellites.biz
    127.0.0.1 www.checkin100.com
    127.0.0.1 checkin100.com
    127.0.0.1 www.checkssecurity.com
    127.0.0.1 checkssecurity.com
    127.0.0.1 chelancatering.com
    127.0.0.1 www.chenshijituan.com
    127.0.0.1 chenshijituan.com
    127.0.0.1 childrenvilla.com
    127.0.0.1 www.chilly3xvids.com
    127.0.0.1 chilly3xvids.com
    127.0.0.1 www.chillymovs.com
    127.0.0.1 chillymovs.com
    127.0.0.1 chips-4-free.com
    127.0.0.1 chrisswasey.com
    127.0.0.1 chriswallace.net
    127.0.0.1 www.cia-trjn.myvnc.com
    127.0.0.1 cia-trjn.myvnc.com
    127.0.0.1 www.cinemadownload.com
    127.0.0.1 cinemadownload.com
    127.0.0.1 www.ciorriere.it
    127.0.0.1 ciorriere.it
    127.0.0.1 www.cirriere.it
    127.0.0.1 cirriere.it
    127.0.0.1 www.citycodec.com
    127.0.0.1 citycodec.com
    127.0.0.1 ckick4thumbs.com
    127.0.0.1 cl55.biz
    127.0.0.1 clackamasliteraryreview.com
    127.0.0.1 www.clckm.com
    127.0.0.1 clckm.com
    127.0.0.1 www.cleancodec.com
    127.0.0.1 cleancodec.com
    127.0.0.1 www.cleansoftwares.com
    127.0.0.1 cleansoftwares.com
    127.0.0.1 clearsearch.cc
    127.0.0.1 clearsearch.net
    127.0.0.1 clickaire.com
    127.0.0.1 www.click-codec.com
    127.0.0.1 click-codec.com
    127.0.0.1 www.clickhere4search.com
    127.0.0.1 clickhere4search.com
    127.0.0.1 www.click-new-download.com
    127.0.0.1 click-new-download.com
    127.0.0.1 click-now.net
    127.0.0.1 www.clickspring.net
    127.0.0.1 clickspring.net
    127.0.0.1 www.click-to-download.com
    127.0.0.1 click-to-download.com
    127.0.0.1 www.clicktomakeasearch.com
    127.0.0.1 clicktomakeasearch.com
    127.0.0.1 clickyestoenter.net
    127.0.0.1 client.exeupdate.com
    127.0.0.1 client.myadultexplorer.com
    127.0.0.1 www.cliks.org
    127.0.0.1 cliks.org
    127.0.0.1 www.clipsfestival.com
    127.0.0.1 clipsfestival.com
    127.0.0.1 www.clipsreality.com
    127.0.0.1 clipsreality.com
    127.0.0.1 www.clorriere.it
    127.0.0.1 clorriere.it
    127.0.0.1 clrsch.com
    127.0.0.1 www.clubxxxvideo.com
    127.0.0.1 clubxxxvideo.com
    127.0.0.1 clusif.free.fr
    127.0.0.1 cmtapestry.com
    127.0.0.1 www.cnetadd.com
    127.0.0.1 cnetadd.com
    127.0.0.1 www.cnomy.com
    127.0.0.1 cnomy.com
    127.0.0.1 www.cnzz.com
    127.0.0.1 cnzz.com
    127.0.0.1 www.cocktails-ideen.de
    127.0.0.1 cocktails-ideen.de
    127.0.0.1 code.ignphrases.com
    127.0.0.1 codec.ninoa.com
    127.0.0.1 www.codecadult18.com
    127.0.0.1 codecadult18.com
    127.0.0.1 www.codecbest.com
    127.0.0.1 codecbest.com
    127.0.0.1 www.codecbsplay.com
    127.0.0.1 codecbsplay.com
    127.0.0.1 www.codecdemo.com
    127.0.0.1 codecdemo.com
    127.0.0.1 www.codecdvd.net
    127.0.0.1 codecdvd.net
    127.0.0.1 www.codecdvi.com
    127.0.0.1 codecdvi.com
    127.0.0.1 www.codec-fun.com
    127.0.0.1 codec-fun.com
    127.0.0.1 www.codechard.com
    127.0.0.1 codechard.com
    127.0.0.1 www.codechot.net
    127.0.0.1 codechot.net
    127.0.0.1 www.codechq.net
    127.0.0.1 codechq.net
    127.0.0.1 www.codecmeg.net
    127.0.0.1 codecmeg.net
    127.0.0.1 www.codecmega.com
    127.0.0.1 codecmega.com
    127.0.0.1 www.codecmega.net
    127.0.0.1 codecmega.net
    127.0.0.1 www.codecmoon.com
    127.0.0.1 codecmoon.com
    127.0.0.1 www.codecmpg.com
    127.0.0.1 codecmpg.com
    127.0.0.1 www.codecnice.net
    127.0.0.1 codecnice.net
    127.0.0.1 www.codecnitro.com
    127.0.0.1 codecnitro.com
    127.0.0.1 www.codecops.net
    127.0.0.1 codecops.net
    127.0.0.1 www.codecplay.com
    127.0.0.1 codecplay.com
    127.0.0.1 www.codecpretty.net
    127.0.0.1 codecpretty.net
    127.0.0.1 www.codecpro.net
    127.0.0.1 codecpro.net
    127.0.0.1 www.codecred.net
    127.0.0.1 codecred.net
    127.0.0.1 www.codecsoft.net
    127.0.0.1 codecsoft.net
    127.0.0.1 www.codecthe.com
    127.0.0.1 codecthe.com
    127.0.0.1 www.codectime.com
    127.0.0.1 codectime.com
    127.0.0.1 www.codecultra.net
    127.0.0.1 codecultra.net
    127.0.0.1 www.codecvids.com
    127.0.0.1 codecvids.com
    127.0.0.1 www.codecvip.com
    127.0.0.1 codecvip.com
    127.0.0.1 www.codecviva.com
    127.0.0.1 codecviva.com
    127.0.0.1 www.codeczang.net
    127.0.0.1 codeczang.net
    127.0.0.1 www.codrriere.it
    127.0.0.1 codrriere.it
    127.0.0.1 www.coeriere.it
    127.0.0.1 coeriere.it
    127.0.0.1 www.coerriere.it
    127.0.0.1 coerriere.it
    127.0.0.1 www.cofrriere.it
    127.0.0.1 cofrriere.it
    127.0.0.1 www.cogrriere.it
    127.0.0.1 cogrriere.it
    127.0.0.1 www.coirriere.it
    127.0.0.1 coirriere.it
    127.0.0.1 command.adservs.com
    127.0.0.1 www.commonname.com
    127.0.0.1 commonname.com
    127.0.0.1 www.computerpcgames.net
    127.0.0.1 computerpcgames.net
    127.0.0.1 www.computerrecover.com
    127.0.0.1 computerrecover.com
    127.0.0.1 config.180solutions.com
    127.0.0.1 www.congtouzailai.net
    127.0.0.1 congtouzailai.net
    127.0.0.1 www.content.dollarrevenue.com
    127.0.0.1 content.dollarrevenue.com
    127.0.0.1 www.content.ireit.com
    127.0.0.1 content.ireit.com
    127.0.0.1 content.onerateld.com
    127.0.0.1 www.contentmatch.net
    127.0.0.1 contentmatch.net
    127.0.0.1 www.contextplus.net
    127.0.0.1 contextplus.net
    127.0.0.1 www.contra-virus.com
    127.0.0.1 contra-virus.com
    127.0.0.1 www.controlmeh.com
    127.0.0.1 controlmeh.com
    127.0.0.1 www.convenient-search.com
    127.0.0.1 convenient-search.com
    127.0.0.1 www.cookingluck.com
    127.0.0.1 cookingluck.com
    127.0.0.1 www.cooldeskalert.com
    127.0.0.1 cooldeskalert.com
    127.0.0.1 coolfetishsite.com
    127.0.0.1 coolfreehost.com
    127.0.0.1 coolfreepage.com
    127.0.0.1 coolfreepages.com
    127.0.0.1 cool-homepage.co
    127.0.0.1 cool-homepage.com
    127.0.0.1 coolmoneysearch.com
    127.0.0.1 www.coolonlinebusiness.com
    127.0.0.1 coolonlinebusiness.com
    127.0.0.1 coolpornsearch.com
    127.0.0.1 cool-search.net
    127.0.0.1 cool-search.netfartpost.com
    127.0.0.1 coolsearcher.info
    127.0.0.1 www.coolservecorp.net
    127.0.0.1 coolservecorp.net
    127.0.0.1 www.coolwebsearch.com
    127.0.0.1 coolwebsearch.com
    127.0.0.1 cool-web-search.com
    127.0.0.1 coolwebsearsh.com
    127.0.0.1 www.coolwwwsearch.com
    127.0.0.1 coolwwwsearch.com
    127.0.0.1 cool-xxx.net
    127.0.0.1 www.coorriere.it
    127.0.0.1 coorriere.it
    127.0.0.1 copmtraine.com
    127.0.0.1 www.coprriere.it
    127.0.0.1 coprriere.it
    127.0.0.1 www.core.psyche-evolution.com
    127.0.0.1 core.psyche-evolution.com
    127.0.0.1 www.coreiere.it
    127.0.0.1 coreiere.it
    127.0.0.1 www.coreriere.it
    127.0.0.1 coreriere.it
    127.0.0.1 www.corrdiere.it
    127.0.0.1 corrdiere.it
    127.0.0.1 www.correiere.it
    127.0.0.1 correiere.it
    127.0.0.1 www.corrfiere.it
    127.0.0.1 corrfiere.it
    127.0.0.1 www.corrgiere.it
    127.0.0.1 corrgiere.it
    127.0.0.1 www.corridere.it
    127.0.0.1 corridere.it
    127.0.0.1 www.corriedre.it
    127.0.0.1 corriedre.it
    127.0.0.1 www.corriee.it
    127.0.0.1 corriee.it
    127.0.0.1 www.corrieere.it
    127.0.0.1 corrieere.it
    127.0.0.1 www.corriefre.it
    127.0.0.1 corriefre.it
    127.0.0.1 www.corriegre.it
    127.0.0.1 corriegre.it
    127.0.0.1 www.corrierde.it
    127.0.0.1 corrierde.it
    127.0.0.1 www.corriered.it
    127.0.0.1 corriered.it
    127.0.0.1 www.corrieree.it
    127.0.0.1 corrieree.it
    127.0.0.1 www.corrieref.it
    127.0.0.1 corrieref.it
    127.0.0.1 www.corrierer.it
    127.0.0.1 corrierer.it
    127.0.0.1 www.corrieres.it
    127.0.0.1 corrieres.it
    127.0.0.1 www.corrierew.it
    127.0.0.1 corrierew.it
    127.0.0.1 www.corrierfe.it
    127.0.0.1 corrierfe.it
    127.0.0.1 www.corrierge.it
    127.0.0.1 corrierge.it
    127.0.0.1 www.corrierr.it
    127.0.0.1 corrierr.it
    127.0.0.1 www.corrierre.it
    127.0.0.1 corrierre.it
    127.0.0.1 www.corrierse.it
    127.0.0.1 corrierse.it
    127.0.0.1 www.corrierte.it
    127.0.0.1 corrierte.it
    127.0.0.1 www.corrierw.it
    127.0.0.1 corrierw.it
    127.0.0.1 www.corrierwe.it
    127.0.0.1 corrierwe.it
    127.0.0.1 www.corriesre.it
    127.0.0.1 corriesre.it
    127.0.0.1 www.corriete.it
    127.0.0.1 corriete.it
    127.0.0.1 www.corrietre.it
    127.0.0.1 corrietre.it
    127.0.0.1 www.corriewre.it
    127.0.0.1 corriewre.it
    127.0.0.1 www.corrifere.it
    127.0.0.1 corrifere.it
    127.0.0.1 www.corriiere.it
    127.0.0.1 corriiere.it
    127.0.0.1 www.corrilere.it
    127.0.0.1 corrilere.it
    127.0.0.1 www.corrioere.it
    127.0.0.1 corrioere.it
    127.0.0.1 www.corrire.it
    127.0.0.1 corrire.it
    127.0.0.1 www.corrirere.it
    127.0.0.1 corrirere.it
    127.0.0.1 www.corrirre.it
    127.0.0.1 corrirre.it
    127.0.0.1 www.corrisere.it
    127.0.0.1 corrisere.it
    127.0.0.1 www.corriuere.it
    127.0.0.1 corriuere.it
    127.0.0.1 www.corriwere.it
    127.0.0.1 corriwere.it
    127.0.0.1 www.corriwre.it
    127.0.0.1 corriwre.it
    127.0.0.1 www.corrliere.it
    127.0.0.1 corrliere.it
    127.0.0.1 www.corroere.it
    127.0.0.1 corroere.it
    127.0.0.1 www.corroiere.it
    127.0.0.1 corroiere.it
    127.0.0.1 www.corrriere.it
    127.0.0.1 corrriere.it
    127.0.0.1 www.corrtiere.it
    127.0.0.1 corrtiere.it
    127.0.0.1 www.corruere.it
    127.0.0.1 corruere.it
    127.0.0.1 www.corruiere.it
    127.0.0.1 corruiere.it
    127.0.0.1 www.cortiere.it
    127.0.0.1 cortiere.it
    127.0.0.1 www.cortriere.it
    127.0.0.1 cortriere.it
    127.0.0.1 www.costrike.com
    127.0.0.1 costrike.com
    127.0.0.1 www.cotriere.it
    127.0.0.1 cotriere.it
    127.0.0.1 www.cotrriere.it
    127.0.0.1 cotrriere.it
    127.0.0.1 couldnotfind.com
    127.0.0.1 count.cc
    127.0.0.1 count.hitscount.net
    127.0.0.1 count-all.com
    127.0.0.1 www.countdutycall.info
    127.0.0.1 countdutycall.info
    127.0.0.1 counter.sexmaniack.com
    127.0.0.1 www.courtrecordslookup.com
    127.0.0.1 courtrecordslookup.com
    127.0.0.1 www.cporriere.it
    127.0.0.1 cporriere.it
    127.0.0.1 www.cprriere.it
    127.0.0.1 cprriere.it
    127.0.0.1 cpvfeed.com
    127.0.0.1 cracks.me.uk
    127.0.0.1 www.cracks4all.com
    127.0.0.1 cracks4all.com
    127.0.0.1 www.crapsgold.info
    127.0.0.1 crapsgold.info
    127.0.0.1 www.crazygirls-world.com
    127.0.0.1 crazygirls-world.com
    127.0.0.1 www.crazywinnings.com
    127.0.0.1 crazywinnings.com
    127.0.0.1 creamedcutties.com
    127.0.0.1 www.createaccesskey.com
    127.0.0.1 createaccesskey.com
    127.0.0.1 www.creatonsoft.com
    127.0.0.1 creatonsoft.com
    127.0.0.1 creditsearchonline.com
    127.0.0.1 crestring.com
    127.0.0.1 crooder.com
    127.0.0.1 www.crriere.it
    127.0.0.1 crriere.it
    127.0.0.1 www.cryptdrive.com
    127.0.0.1 cryptdrive.com
    127.0.0.1 www.crystalysmedia.com
    127.0.0.1 crystalysmedia.com
    127.0.0.1 www.csx.adservs.com
    127.0.0.1 csx.adservs.com
    127.0.0.1 cts.180solutions.com
    127.0.0.1 www.cuisinartoven.com
    127.0.0.1 cuisinartoven.com
    127.0.0.1 www.curedc.info
    127.0.0.1 curedc.info
    127.0.0.1 www.curepcsolutions.com
    127.0.0.1 curepcsolutions.com
    127.0.0.1 curvedspaces.com
    127.0.0.1 www.cutadult.com
    127.0.0.1 cutadult.com
    127.0.0.1 www.cutoffspyware.com
    127.0.0.1 cutoffspyware.com
    127.0.0.1 www.cvirgilio.it
    127.0.0.1 cvirgilio.it
    127.0.0.1 www.cvorriere.it
    127.0.0.1 cvorriere.it
    127.0.0.1 cvs.jps.ru
    127.0.0.1 cvsymphony.com
    127.0.0.1 www.cxorriere.it
    127.0.0.1 cxorriere.it
    127.0.0.1 www.cyberrape.com
    127.0.0.1 cyberrape.com
    127.0.0.1 cydom.com
    127.0.0.1 www.cydoor.com
    127.0.0.1 cydoor.com
    127.0.0.1 d34s.qfdfqawd.cn
    127.0.0.1 www.daily3xlinks.com
    127.0.0.1 daily3xlinks.com
    127.0.0.1 www.dailybestclips.com
    127.0.0.1 dailybestclips.com
    127.0.0.1 daily-gals.com
    127.0.0.1 www.dailyhugemovs.com
    127.0.0.1 dailyhugemovs.com
    127.0.0.1 www.dailykeys.com
    127.0.0.1 dailykeys.com
    127.0.0.1 www.dailypornmag.com
    127.0.0.1 dailypornmag.com
    127.0.0.1 dailyteenspic.com
    127.0.0.1 www.dailytoolbar.com
    127.0.0.1 dailytoolbar.com
    127.0.0.1 www.dailyxvids.com
    127.0.0.1 dailyxvids.com
    127.0.0.1 dancingbabycd.com
    127.0.0.1 www.dapsol.com
    127.0.0.1 dapsol.com
    127.0.0.1 www.dapsolution.com
    127.0.0.1 dapsolution.com
    127.0.0.1 www.data-hoster.com
    127.0.0.1 data-hoster.com
    127.0.0.1 datanotary.com
    127.0.0.1 datareco.com
    127.0.0.1 www.dateanybabe.com
    127.0.0.1 dateanybabe.com
    127.0.0.1 www.dateanychick.com
    127.0.0.1 dateanychick.com
    127.0.0.1 www.datingdoctorsite.com
    127.0.0.1 datingdoctorsite.com
    127.0.0.1 www.dating-galaxy.info
    127.0.0.1 dating-galaxy.info
    127.0.0.1 dating-search.net
    127.0.0.1 davemarshall.org
    127.0.0.1 db105.com
    127.0.0.1 www.dbdecicated.com
    127.0.0.1 dbdecicated.com
    127.0.0.1 www.dbxcompany.com
    127.0.0.1 dbxcompany.com
    127.0.0.1 dcdl.dmcast.com
    127.0.0.1 dcfitusa.com
    127.0.0.1 www.dcorriere.it
    127.0.0.1 dcorriere.it
    127.0.0.1 www.dcurtis.com
    127.0.0.1 dcurtis.com
    127.0.0.1 dcww.dmcast.com
    127.0.0.1 de.ag
    127.0.0.1 de.drivecleaner.com
    127.0.0.1 de.errorsafe.com
    127.0.0.1 de.winantivirus.com
    127.0.0.1 de98.remsys.org
    127.0.0.1 www.debay.it
    127.0.0.1 debay.it
    127.0.0.1 www.decknews.com
    127.0.0.1 decknews.com
    127.0.0.1 dedmazay.3322.org
    127.0.0.1 www.dedsearch.com
    127.0.0.1 dedsearch.com
    127.0.0.1 defaultsearch.net
    127.0.0.1 www.defensaantimalware.com
    127.0.0.1 defensaantimalware.com
    127.0.0.1 www.deja-rue.com
    127.0.0.1 deja-rue.com
    127.0.0.1 www.delficodec.com
    127.0.0.1 delficodec.com
    127.0.0.1 www.democodec.com
    127.0.0.1 democodec.com
    127.0.0.1 www.derklaif.biz
    127.0.0.1 derklaif.biz
    127.0.0.1 www.derrari.it
    127.0.0.1 derrari.it
    127.0.0.1 desarrollocreativo.com
    127.0.0.1 www.deskbar.worldtostart.com
    127.0.0.1 deskbar.worldtostart.com
    127.0.0.1 www.deskwizz.com
    127.0.0.1 deskwizz.com
    127.0.0.1 www.destroy-spyware.net
    127.0.0.1 destroy-spyware.net
    127.0.0.1 www.destruktor.to.pl
    127.0.0.1 destruktor.to.pl
    127.0.0.1 www.detectivehound.com
    127.0.0.1 detectivehound.com
    127.0.0.1 www.detectivesearches.com
    127.0.0.1 detectivesearches.com
    127.0.0.1 dev.ntcor.com
    127.0.0.1 develip.com
    127.0.0.1 dewis.spb.ru
    127.0.0.1 dewis.us
    127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
    127.0.0.1 www.dgbusiness.com
    127.0.0.1 dgbusiness.com
    127.0.0.1 dialer2004.com
    127.0.0.1 www.dialerclub.com
    127.0.0.1 dialerclub.com
    127.0.0.1 www.dialer-shop.com
    127.0.0.1 dialer-shop.com
    127.0.0.1 www.dialoff.com
    127.0.0.1 dialoff.com
    127.0.0.1 www.did.i-used.cc
    127.0.0.1 did.i-used.cc
    127.0.0.1 dietpills4free.com
    127.0.0.1 dietpussy.com
    127.0.0.1 www.digikeygen.com
    127.0.0.1 digikeygen.com
    127.0.0.1 digistreamsa.com
    127.0.0.1 www.digitalcoders.net
    127.0.0.1 digitalcoders.net
    127.0.0.1 www.digitalfan.com
    127.0.0.1 digitalfan.com
    127.0.0.1 digital-pornography.com
    127.0.0.1 dionforvalleycouncil.org
    127.0.0.1 www.directdvdpro.com
    127.0.0.1 directdvdpro.com
    127.0.0.1 www.directnameservice.com
    127.0.0.1 directnameservice.com
    127.0.0.1 www.directporta.info
    127.0.0.1 directporta.info
    127.0.0.1 www.directsearchzone.com
    127.0.0.1 directsearchzone.com
    127.0.0.1 www.diskretter.com
    127.0.0.1 diskretter.com
    127.0.0.1 dist.checkin100.com
    127.0.0.1 dl.ad-ware.cc
    127.0.0.1 dl.malwarewipe.com
    127.0.0.1 dl.mcboo.com
    127.0.0.1 www.dl.targetsaver.com
    127.0.0.1 dl.targetsaver.com
    127.0.0.1 dl.web-nexus.net
    127.0.0.1 dl1.antivermins.com
    127.0.0.1 dl1.antivirgear.com
    127.0.0.1 dl1.spydawn.com
    127.0.0.1 dl1.virusprotectpro.com
    127.0.0.1 dl10.spyfalcon.com
    127.0.0.1 dl16.spyfalcon.com
    127.0.0.1 dl2.spyfalcon.com
    127.0.0.1 dl2.spyheal.com
    127.0.0.1 dl2.spywarestrike.com
    127.0.0.1 dl3.spyfalcon.com
    127.0.0.1 dl3.spyheal.com
    127.0.0.1 dl3.spywarestrike.com
    127.0.0.1 dl4.spyfalcon.com
    127.0.0.1 dl4.spywarestrike.com
    127.0.0.1 dl5.spyfalcon.com
    127.0.0.1 dl5.spywarestrike.com
    127.0.0.1 dl6.spywarestrike.com
    127.0.0.1 dl7.spywarestrike.com
    127.0.0.1 dl8.spyheal.com
    127.0.0.1 dl8.spywarestrike.com
    127.0.0.1 dl9.spyfalcon.com
    127.0.0.1 dload.contextplus.net
    127.0.0.1 www.dltsolution.com
    127.0.0.1 dltsolution.com
    127.0.0.1 www.dmcast.com
    127.0.0.1 dmcast.com
    127.0.0.1 www.dmqfirm.com
    127.0.0.1 dmqfirm.com
    127.0.0.1 www.dnaads.com
    127.0.0.1 dnaads.com
    127.0.0.1 dnl.mabou.org
    127.0.0.1 www.dns-look-up.com
    127.0.0.1 dns-look-up.com
    127.0.0.1 doctorwaldron.com
    127.0.0.1 document-not-found.pornpic.org
    127.0.0.1 doggyaction.com
    127.0.0.1 www.dogproblemswebsite.com
    127.0.0.1 dogproblemswebsite.com
    127.0.0.1 doktorxxx.com
    127.0.0.1 dollarrevenue.com
    127.0.0.1 www.domaincar.com
    127.0.0.1 domaincar.com
    127.0.0.1 domains2003.net
    127.0.0.1 domains-for-you-online.com
    0
  18. Utilisateur anonyme
     
    Ok,
    alors :

    > Télécharge Zeb-Restore : http://telechargement.zebulon.fr/zeb-restore.html
    - Mets le dans un dossier, sur ton bureau par exemple.
    - Lance Zebrestore et coche la/les case(s) suivante(s) :

    Sites de confiance et sensibles
    Préfixes et Protocoles Internet
    Réinitialiser Fichier Hosts

    - Ne coche que la/les case(s) indiquée(s).
    - Clique sur le bouton Restaurer.
    - Quitte le programme.

    Ensuite,
    refais ceci stp : (si tu n'y arrives pas en mode sans échec alors fais le en mode normal).

    > Démarre en mode sans échec : (image). Si problème : tuto ici
    - Dans le dossier "SmitfraudFix" ouvre "Smitfraudfix.cmd" puis choisit l 'option 2 et tape "oui" pour toutes les questions.
    - Enregistre le rapport puis envoie le dans ton prochain poste.

    A+
    0
  19. Zic
     
    Voilà le rapport (obtenu en mode normal)

    au fait ça craint pas la fenêtre jauge d'énergie que j'ai eue?

    SmitFraudFix v2.328

    Rapport fait à 20:16:10,67, 28/06/2008
    Executé à partir de F:\Documents and Settings\steph\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    127.0.0.1 localhost

    »»»»»»»»»»»»»»»»»»»»»»»» VACFix

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

    S!Ri's WS2Fix: LSP not Found.

    »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

    GenericRenosFix by S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix

    404Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: Carte réseau virtuelle FreeBox USB #5 - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 212.27.53.252
    DNS Server Search Order: 212.27.54.252

    Description: Carte réseau virtuelle FreeBox USB #5 - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 212.27.53.252
    DNS Server Search Order: 212.27.54.252

    Description: Carte réseau virtuelle FreeBox USB #5 - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 212.27.54.252
    DNS Server Search Order: 212.27.53.252

    Description: Carte réseau virtuelle FreeBox USB #5 - Miniport d'ordonnancement de paquets
    DNS Server Search Order: 212.27.54.252
    DNS Server Search Order: 212.27.53.252

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{16135771-07A3-4654-ADB3-A3679D675086}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{C32379A0-7D65-4B79-BE34-3E299ABEC3D8}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{C9C5599C-0271-4DCA-9998-F126346F9C17}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{E70D2E48-9DC5-4125-B1C7-27D08C454E6B}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{16135771-07A3-4654-ADB3-A3679D675086}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{C32379A0-7D65-4B79-BE34-3E299ABEC3D8}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{C9C5599C-0271-4DCA-9998-F126346F9C17}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{E70D2E48-9DC5-4125-B1C7-27D08C454E6B}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{16135771-07A3-4654-ADB3-A3679D675086}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{C32379A0-7D65-4B79-BE34-3E299ABEC3D8}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{C9C5599C-0271-4DCA-9998-F126346F9C17}: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{E70D2E48-9DC5-4125-B1C7-27D08C454E6B}: DhcpNameServer=212.27.53.252 212.27.54.252
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252

    »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"=""

    »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

    Nettoyage terminé.

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Fin

    A+
    0
  20. Utilisateur anonyme
     
    Re,

    au fait ça craint pas la fenêtre jauge d'énergie que j'ai eue?
    ,

    j'en sais rien :)

    Alors,
    truc bizarre pour le DNS...

    Reposte un HiJackT.

    Merci
    0
  • 1
  • 2