Problème Fakealert

Trevarec -  
Bonjour,
Je suis constamment ennuyé par des fenêtres publicitaires en utilisant internet.
Spybot m'a détecté à plusieurs reprises un squatteur du nom de Fakealert. Et l'a normalement eradiqué !
Le vaccin ne duure que très peu de temps (5mn). J'ai essayé de suivre quelques avis plus ou moins éclairés mais rien n'y fait; mon squatteur est parfaitement intégré dans mon système.
Je viens de passer à Hijackthis; voilà le résultat ...quelqu'un peut il m'aider ?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:14:56, on 22/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Autodesk\Data Management Server 2008\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\Wave Systems Corp\Common\DataServer.exe
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NTRU Cryptosystems\NTRU Hybrid TSS v2.0.25\bin\tcsd_win32.exe
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Apoint\HidFind.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\docmgr.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\ICO.EXE
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Harrap's Multimédia\Shorter\bin\HiHarrapsTray.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Fichiers communs\DataViz\DvzIncMsgr.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Wave Systems Corp\Services Manager\Secure Update\AutoUpdate.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
C:\Program Files\KirysTech2k\FastNote\kfn.exe
C:\Program Files\Palm\Hotsync.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\Pmxmiced.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row-rel&channel=fr&ibd=0070406
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.dell.com/fr-fr?c=fr&l=fr&s=gen&redirect=1
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row-rel&channel=fr&ibd=0070406
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: (no name) - {037C7B8A-151A-49E6-BAED-CC05FCB50328} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Media Holding Enterprises, LLC - {0D39A900-0F3A-4C29-A254-3E65244FDC34} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O3 - Toolbar: (no name) - {F053C368-5458-45B2-9B4D-D8914BDDDBFF} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Document Manager] C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\docmgr.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [PMX Daemon] ICO.EXE
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\RunOnce: [SpybotDeletingC3179] cmd /c del "C:\WINDOWS\system32\winsrc.dll_old"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Videos] "C:\Program Files\laughnetwork\update.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ieupdate] "C:\WINDOWS\system32\ieupdates.exe"
O4 - HKCU\..\RunOnce: [SpybotDeletingD1032] cmd /c del "C:\WINDOWS\system32\winsrc.dll_old"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Ask Harrap's Shorter.lnk = ?
O4 - Global Startup: Assistant d'Acrobat.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: DataViz Inc Messenger.lnk = C:\Program Files\Fichiers communs\DataViz\DvzIncMsgr.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: EMBASSY Trust Suite Secure Update.lnk = C:\Program Files\Wave Systems Corp\Services Manager\Secure Update\AutoUpdate.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O4 - Global Startup: Fast Note.lnk = C:\Program Files\KirysTech2k\FastNote\kfn.exe
O4 - Global Startup: HOTSYNCSHORTCUTNAME.lnk = C:\Program Files\Palm\Hotsync.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?712be9afcca74c6b8e473c4625813244
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?712be9afcca74c6b8e473c4625813244
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0533AC04-11E3-48CA-A167-40D782C6BD1C} (FileTransferControl2 Class) - http://ntnse-advitium/Advitium/ActiveX/FileTransfer2.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {493EBD8D-8D67-4A2D-8CF9-B8FC992DCFF6} (ProcessViewer Class) - http://ntnse-advitium/Advitium/ActiveX/ProcessViewer.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {6A5C26E3-5A0C-436D-B417-CB4735EC63A6} (FilePreparationControl Class) - http://ntnse-advitium/Advitium/ActiveX/RemoteServerControl.cab
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (Contrôle d'AcDcToday) - file://C:\Program Files\AutoCAD 2002 Fra\AcDcToday.ocx
O16 - DPF: {83A9C1DD-8FEA-4F03-8E62-15CEDE65FF31} (PrintFilesControl Class) - http://ntnse-advitium/Advitium/ActiveX/NetworkPrintingClient.cab
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (Gestion d'AcPreview) - file://C:\Program Files\AutoCAD 2002 Fra\AcPreview.ocx
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = ifremer.fr
O17 - HKLM\Software\..\Telephony: DomainName = ifremer.fr
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = ifremer.fr
O20 - AppInit_DLLs: wxvault.dll C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Data Management Job Dispatch - Autodesk - C:\Program Files\Autodesk\Data Management Server 2008\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe
O23 - Service: Autodesk EDM Server - Autodesk - C:\Program Files\Autodesk\Data Management Server 2008\Server\Webserver\Connectivity.EDMWS.Server.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: DataSvr2 - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Common\DataServer.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Intranet Server Client (SicltNT) - Apsynet - C:\WINDOWS\SYSTEM32\siclt32.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O23 - Service: NTRU Hybrid TSS v2.0.25 TCS (tcsd_win32.exe) - Unknown owner - C:\Program Files\NTRU Cryptosystems\NTRU Hybrid TSS v2.0.25\bin\tcsd_win32.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--
End of file - 18289 bytes

Merci d'avance,

13 réponses

  • Votes
  • Date
  • Date décroissante
  1. dou-l
    SALUT,,

    Télécharge Navilog

    -Choisis Enregistrer et enregistre-le sur ton bureau.

    - Ensuite double clique sur navilog1.exe pour lancer l'installation.
    Une fois l'installation terminée, le fix s'exécutera automatiquement.
    (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

    -Laisse-toi guider. Au menu principal, choisis 1 et valides.
    (ne fais pas le choix 2,3 ou 4 sans notre avis/accord)
    Patiente jusqu'au message " Analyse Termine le ....."

    -Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
    Copie/colle l'intégralité du rapport dans ta réponse. Referme le blocnote.
    Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

    -Si ton antivirus detecte un virus ou un cheval de troie durant l'analyse ignore le.
    1. chimay8 Contributeur sécurité
      salut,
      O4 - HKCU\..\Run: [ieupdate] "C:\WINDOWS\system32\ieupdates.exe"
      Trojan-Downloader.Delf.OEU
      mais il est connu
      infection très fréquente avec WinSecurity Toolbar qui est une variante de Security Toolbar 7.1
      il est vachement bien caché celui la!!
      @+
      1. Trevarec
        Bonjour,
        Merci beaucoup et maintenant ...
        Je comprends que la ligne O4 - HKCU etc... pour un œil expert pose problème mais que faire ?
        Dois je utiliser le Navilog ou je retourne dans Hijackthis pour faire comme certain et 'cocher' la ligne douteuse ?

        Une autre question d'ignare en virus informatique; pourquoi cette ligne vous choque t'elle ?
        Merci,
      2. Trevarec
        Bonjour,
        Quelqu'un peut il me dire ce que je dois faire maintenant ?
        Merci d'avance

        Search Navipromo version 3.5.9 commencé le 25/06/2008 à 19:06:38,29

        !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
        !!! Postez ce rapport sur le forum pour le faire analyser !!!
        !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

        Outil exécuté depuis C:\Program Files\navilog1
        Session actuelle : "ldussud"

        Mise à jour le 24.06.2008 à 18h00 par IL-MAFIOSO

        Microsoft Windows XP [version 5.1.2600]
        Internet Explorer : 6.0.2900.2180
        Système de fichiers : NTFS

        Recherche executé en mode normal

        *** Recherche Programmes installés ***

        *** Recherche dossiers dans "C:\WINDOWS" ***

        *** Recherche dossiers dans "C:\Program Files" ***

        *** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

        *** Recherche dossiers dans "c:\docume~1\alluse~1\menudÉ~1\progra~1" ***

        *** Recherche dossiers dans "C:\Documents and Settings\ldussud\applic~1" ***

        *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***

        *** Recherche dossiers dans "C:\DOCUME~1\pmorizur\applic~1" ***

        *** Recherche dossiers dans "C:\DOCUME~1\ylefur\applic~1" ***

        *** Recherche dossiers dans "C:\Documents and Settings\ldussud\locals~1\applic~1" ***

        *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***

        *** Recherche dossiers dans "C:\DOCUME~1\pmorizur\locals~1\applic~1" ***

        *** Recherche dossiers dans "C:\DOCUME~1\ylefur\locals~1\applic~1" ***

        *** Recherche dossiers dans "C:\Documents and Settings\ldussud\menudm~1\progra~1" ***

        *** Recherche dossiers dans "C:\DOCUME~1\pmorizur\menudm~1\progra~1" ***

        *** Recherche dossiers dans "C:\DOCUME~1\ylefur\menudm~1\progra~1" ***

        *** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
        pour + d'infos : http://www.gmer.net

        Aucun Fichier trouvé

        *** Recherche avec GenericNaviSearch ***
        !!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
        !!! A vérifier impérativement avant toute suppression manuelle !!!

        * Recherche dans "C:\WINDOWS\system32" *

        * Recherche dans "C:\Documents and Settings\ldussud\locals~1\applic~1" *

        * Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *

        * Recherche dans "C:\DOCUME~1\pmorizur\locals~1\applic~1" *

        * Recherche dans "C:\DOCUME~1\ylefur\locals~1\applic~1" *

        *** Recherche fichiers ***

        *** Recherche clés spécifiques dans le Registre ***

        *** Module de Recherche complémentaire ***
        (Recherche fichiers spécifiques)

        1)Recherche nouveaux fichiers Instant Access :

        2)Recherche Heuristique :

        * Dans "C:\WINDOWS\system32" :

        * Dans "C:\Documents and Settings\ldussud\locals~1\applic~1" :

        * Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :

        * Dans "C:\DOCUME~1\pmorizur\locals~1\applic~1" :

        * Dans "C:\DOCUME~1\ylefur\locals~1\applic~1" :

        3)Recherche Certificats :

        Certificat Egroup absent !
        Certificat Electronic-Group absent !
        Certificat OOO-Favorit absent !
        Certificat Sunny-Day-Design-Ltd absent !

        4)Recherche fichiers connus :

        *** Analyse terminée le 25/06/2008 à 19:40:46,31 ***

        Est ce que quelque chose manque ?
    3. dou-l
      elle choque car elle est infécté passe navilog

      a+
      1. Trevarec
        Voila le fichier

        Search Navipromo version 3.5.9 commencé le 25/06/2008 à 19:06:38,29

        !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
        !!! Postez ce rapport sur le forum pour le faire analyser !!!
        !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

        Outil exécuté depuis C:\Program Files\navilog1
        Session actuelle : "ldussud"

        Mise à jour le 24.06.2008 à 18h00 par IL-MAFIOSO

        Microsoft Windows XP [version 5.1.2600]
        Internet Explorer : 6.0.2900.2180
        Système de fichiers : NTFS

        Recherche executé en mode normal

        *** Recherche Programmes installés ***

        *** Recherche dossiers dans "C:\WINDOWS" ***

        *** Recherche dossiers dans "C:\Program Files" ***

        *** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

        *** Recherche dossiers dans "c:\docume~1\alluse~1\menudÉ~1\progra~1" ***

        *** Recherche dossiers dans "C:\Documents and Settings\ldussud\applic~1" ***

        *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***

        *** Recherche dossiers dans "C:\DOCUME~1\pmorizur\applic~1" ***

        *** Recherche dossiers dans "C:\DOCUME~1\ylefur\applic~1" ***

        *** Recherche dossiers dans "C:\Documents and Settings\ldussud\locals~1\applic~1" ***

        *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***

        *** Recherche dossiers dans "C:\DOCUME~1\pmorizur\locals~1\applic~1" ***

        *** Recherche dossiers dans "C:\DOCUME~1\ylefur\locals~1\applic~1" ***

        *** Recherche dossiers dans "C:\Documents and Settings\ldussud\menudm~1\progra~1" ***

        *** Recherche dossiers dans "C:\DOCUME~1\pmorizur\menudm~1\progra~1" ***

        *** Recherche dossiers dans "C:\DOCUME~1\ylefur\menudm~1\progra~1" ***

        *** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
        pour + d'infos : http://www.gmer.net

        Aucun Fichier trouvé

        *** Recherche avec GenericNaviSearch ***
        !!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
        !!! A vérifier impérativement avant toute suppression manuelle !!!

        * Recherche dans "C:\WINDOWS\system32" *

        * Recherche dans "C:\Documents and Settings\ldussud\locals~1\applic~1" *

        * Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *

        * Recherche dans "C:\DOCUME~1\pmorizur\locals~1\applic~1" *

        * Recherche dans "C:\DOCUME~1\ylefur\locals~1\applic~1" *

        *** Recherche fichiers ***

        *** Recherche clés spécifiques dans le Registre ***

        *** Module de Recherche complémentaire ***
        (Recherche fichiers spécifiques)

        1)Recherche nouveaux fichiers Instant Access :

        2)Recherche Heuristique :

        * Dans "C:\WINDOWS\system32" :

        * Dans "C:\Documents and Settings\ldussud\locals~1\applic~1" :

        * Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :

        * Dans "C:\DOCUME~1\pmorizur\locals~1\applic~1" :

        * Dans "C:\DOCUME~1\ylefur\locals~1\applic~1" :

        3)Recherche Certificats :

        Certificat Egroup absent !
        Certificat Electronic-Group absent !
        Certificat OOO-Favorit absent !
        Certificat Sunny-Day-Design-Ltd absent !

        4)Recherche fichiers connus :

        *** Analyse terminée le 25/06/2008 à 19:40:46,31 ***
    5. Trevarec
      Bonjour,
      Quelqu'un peut il me dire ce que je dois faire maintenant ?
      Merci d'avance

      Search Navipromo version 3.5.9 commencé le 25/06/2008 à 19:06:38,29

      !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
      !!! Postez ce rapport sur le forum pour le faire analyser !!!
      !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

      Outil exécuté depuis C:\Program Files\navilog1
      Session actuelle : "ldussud"

      Mise à jour le 24.06.2008 à 18h00 par IL-MAFIOSO

      Microsoft Windows XP [version 5.1.2600]
      Internet Explorer : 6.0.2900.2180
      Système de fichiers : NTFS

      Recherche executé en mode normal

      *** Recherche Programmes installés ***

      *** Recherche dossiers dans "C:\WINDOWS" ***

      *** Recherche dossiers dans "C:\Program Files" ***

      *** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***

      *** Recherche dossiers dans "c:\docume~1\alluse~1\menudÉ~1\progra~1" ***

      *** Recherche dossiers dans "C:\Documents and Settings\ldussud\applic~1" ***

      *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***

      *** Recherche dossiers dans "C:\DOCUME~1\pmorizur\applic~1" ***

      *** Recherche dossiers dans "C:\DOCUME~1\ylefur\applic~1" ***

      *** Recherche dossiers dans "C:\Documents and Settings\ldussud\locals~1\applic~1" ***

      *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***

      *** Recherche dossiers dans "C:\DOCUME~1\pmorizur\locals~1\applic~1" ***

      *** Recherche dossiers dans "C:\DOCUME~1\ylefur\locals~1\applic~1" ***

      *** Recherche dossiers dans "C:\Documents and Settings\ldussud\menudm~1\progra~1" ***

      *** Recherche dossiers dans "C:\DOCUME~1\pmorizur\menudm~1\progra~1" ***

      *** Recherche dossiers dans "C:\DOCUME~1\ylefur\menudm~1\progra~1" ***

      *** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
      pour + d'infos : http://www.gmer.net

      Aucun Fichier trouvé

      *** Recherche avec GenericNaviSearch ***
      !!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
      !!! A vérifier impérativement avant toute suppression manuelle !!!

      * Recherche dans "C:\WINDOWS\system32" *

      * Recherche dans "C:\Documents and Settings\ldussud\locals~1\applic~1" *

      * Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *

      * Recherche dans "C:\DOCUME~1\pmorizur\locals~1\applic~1" *

      * Recherche dans "C:\DOCUME~1\ylefur\locals~1\applic~1" *

      *** Recherche fichiers ***

      *** Recherche clés spécifiques dans le Registre ***

      *** Module de Recherche complémentaire ***
      (Recherche fichiers spécifiques)

      1)Recherche nouveaux fichiers Instant Access :

      2)Recherche Heuristique :

      * Dans "C:\WINDOWS\system32" :

      * Dans "C:\Documents and Settings\ldussud\locals~1\applic~1" :

      * Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :

      * Dans "C:\DOCUME~1\pmorizur\locals~1\applic~1" :

      * Dans "C:\DOCUME~1\ylefur\locals~1\applic~1" :

      3)Recherche Certificats :

      Certificat Egroup absent !
      Certificat Electronic-Group absent !
      Certificat OOO-Favorit absent !
      Certificat Sunny-Day-Design-Ltd absent !

      4)Recherche fichiers connus :

      *** Analyse terminée le 25/06/2008 à 19:40:46,31 ***
      1. dou-l
        salut a toi,

        Désolé de ne pas t'avoir répondu mais j'ai eu le bac désolé !

        Peux t posté un rapport hijackthis tout frais ?!
        1. Trevarec
          Ci joint le fichier Hijackthis

          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 16:39:51, on 27/06/2008
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
          C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
          C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          C:\Program Files\Autodesk\Data Management Server 2008\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
          C:\Program Files\Wave Systems Corp\Common\DataServer.exe
          C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
          C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
          C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
          C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
          C:\Program Files\F-Secure\Common\FSMA32.EXE
          C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
          C:\Program Files\F-Secure\Common\FSMB32.EXE
          C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
          C:\WINDOWS\system32\nvsvc32.exe
          C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
          C:\Program Files\F-Secure\Common\FCH32.EXE
          C:\WINDOWS\system32\siclt32.exe
          C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
          C:\Program Files\F-Secure\Common\FAMEH32.EXE
          C:\WINDOWS\System32\PAStiSvc.exe
          C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
          C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\NTRU Cryptosystems\NTRU Hybrid TSS v2.0.25\bin\tcsd_win32.exe
          C:\WINDOWS\system32\SearchIndexer.exe
          C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\F-Secure\Common\FNRB32.EXE
          C:\Program Files\F-Secure\Common\FIH32.EXE
          C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Apoint\Apoint.exe
          C:\WINDOWS\system32\rundll32.exe
          C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
          C:\Program Files\Apoint\Apntex.exe
          C:\Program Files\Apoint\HidFind.exe
          C:\WINDOWS\system32\wuauclt.exe
          C:\WINDOWS\stsystra.exe
          C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\docmgr.exe
          C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
          C:\WINDOWS\system32\ICO.EXE
          C:\WINDOWS\system32\Pmxmiced.exe
          C:\Program Files\Dell\QuickSet\quickset.exe
          C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
          C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
          C:\WINDOWS\System32\DLA\DLACTRLW.EXE
          C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
          C:\Program Files\F-Secure\Common\FSM32.EXE
          C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
          C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
          C:\Program Files\Logitech\QuickCam\Quickcam.exe
          C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
          C:\Program Files\F-Secure\FSGUI\fsguidll.exe
          C:\Program Files\iTunes\iTunesHelper.exe
          C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          C:\WINDOWS\system32\ieupdates.exe
          C:\Program Files\Harrap's Multimédia\Shorter\bin\HiHarrapsTray.exe
          C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
          C:\Program Files\Digital Line Detect\DLG.exe
          C:\Program Files\Wave Systems Corp\Services Manager\Secure Update\AutoUpdate.exe
          C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
          C:\Program Files\KirysTech2k\FastNote\kfn.exe
          C:\Program Files\Windows Desktop Search\WindowsSearch.exe
          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
          C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row-rel&channel=fr&ibd=0070406
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.dell.com/fr-fr?c=fr&l=fr&s=gen&redirect=1
          R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row-rel&channel=fr&ibd=0070406
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
          O2 - BHO: (no name) - {037C7B8A-151A-49E6-BAED-CC05FCB50328} - (no file)
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: Media Holding Enterprises, LLC - {0D39A900-0F3A-4C29-A254-3E65244FDC34} - (no file)
          O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
          O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
          O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
          O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
          O3 - Toolbar: (no name) - {F053C368-5458-45B2-9B4D-D8914BDDDBFF} - (no file)
          O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
          O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
          O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
          O4 - HKLM\..\Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
          O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
          O4 - HKLM\..\Run: [Document Manager] C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\docmgr.exe
          O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
          O4 - HKLM\..\Run: [PMX Daemon] ICO.EXE
          O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
          O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
          O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
          O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
          O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
          O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
          O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
          O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
          O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
          O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
          O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
          O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
          O4 - HKCU\..\Run: [Videos] "C:\Program Files\laughnetwork\update.exe" /background
          O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          O4 - HKCU\..\Run: [ieupdate] "C:\WINDOWS\system32\ieupdates.exe"
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
          O4 - Global Startup: Ask Harrap's Shorter.lnk = ?
          O4 - Global Startup: Assistant d'Acrobat.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
          O4 - Global Startup: Digital Line Detect.lnk = ?
          O4 - Global Startup: EMBASSY Trust Suite Secure Update.lnk = C:\Program Files\Wave Systems Corp\Services Manager\Secure Update\AutoUpdate.exe
          O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
          O4 - Global Startup: Fast Note.lnk = C:\Program Files\KirysTech2k\FastNote\kfn.exe
          O4 - Global Startup: HOTSYNCSHORTCUTNAME.lnk = C:\Program Files\Palm\Hotsync.exe
          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
          O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
          O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
          O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
          O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
          O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?712be9afcca74c6b8e473c4625813244
          O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?712be9afcca74c6b8e473c4625813244
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
          O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O16 - DPF: {0533AC04-11E3-48CA-A167-40D782C6BD1C} (FileTransferControl2 Class) - http://ntnse-advitium/Advitium/ActiveX/FileTransfer2.cab
          O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
          O16 - DPF: {493EBD8D-8D67-4A2D-8CF9-B8FC992DCFF6} (ProcessViewer Class) - http://ntnse-advitium/Advitium/ActiveX/ProcessViewer.cab
          O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
          O16 - DPF: {6A5C26E3-5A0C-436D-B417-CB4735EC63A6} (FilePreparationControl Class) - http://ntnse-advitium/Advitium/ActiveX/RemoteServerControl.cab
          O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (Contrôle d'AcDcToday) - file://C:\Program Files\AutoCAD 2002 Fra\AcDcToday.ocx
          O16 - DPF: {83A9C1DD-8FEA-4F03-8E62-15CEDE65FF31} (PrintFilesControl Class) - http://ntnse-advitium/Advitium/ActiveX/NetworkPrintingClient.cab
          O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (Gestion d'AcPreview) - file://C:\Program Files\AutoCAD 2002 Fra\AcPreview.ocx
          O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = ifremer.fr
          O17 - HKLM\Software\..\Telephony: DomainName = ifremer.fr
          O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = ifremer.fr
          O20 - AppInit_DLLs: wxvault.dll C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
          O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: Autodesk Data Management Job Dispatch - Autodesk - C:\Program Files\Autodesk\Data Management Server 2008\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe
          O23 - Service: Autodesk EDM Server - Autodesk - C:\Program Files\Autodesk\Data Management Server 2008\Server\Webserver\Connectivity.EDMWS.Server.exe
          O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
          O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
          O23 - Service: DataSvr2 - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Common\DataServer.exe
          O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
          O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
          O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
          O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
          O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
          O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
          O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
          O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
          O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
          O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
          O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
          O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
          O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
          O23 - Service: Intranet Server Client (SicltNT) - Apsynet - C:\WINDOWS\SYSTEM32\siclt32.exe
          O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
          O23 - Service: NTRU Hybrid TSS v2.0.25 TCS (tcsd_win32.exe) - Unknown owner - C:\Program Files\NTRU Cryptosystems\NTRU Hybrid TSS v2.0.25\bin\tcsd_win32.exe
          O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
      2. dou-l
        télécharge smitfraudfix: smitfraudfix http://siri.urz.free.fr/Fix/SmitfraudFix.exe

        # Double clique sur l'icone de smitfraud pui choisis l'option 1 et poste le rapport.

        Tient moi au courant a+.
        1. Trevarec
          Voilà le nouveau rapport

          SmitFraudFix v2.328

          Rapport fait à 17:40:52,57, 27/06/2008
          Executé à partir de C:\Documents and Settings\ldussud\Bureau\Anticrotte\SmitfraudFix
          OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
          Le type du système de fichiers est NTFS
          Fix executé en mode normal

          »»»»»»»»»»»»»»»»»»»»»»»» Process

          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
          C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
          C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          C:\Program Files\Autodesk\Data Management Server 2008\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
          C:\Program Files\Wave Systems Corp\Common\DataServer.exe
          C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
          C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
          C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
          C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
          C:\Program Files\F-Secure\Common\FSMA32.EXE
          C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
          C:\Program Files\F-Secure\Common\FSMB32.EXE
          C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
          C:\WINDOWS\system32\nvsvc32.exe
          C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
          C:\Program Files\F-Secure\Common\FCH32.EXE
          C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
          C:\Program Files\F-Secure\Common\FAMEH32.EXE
          C:\WINDOWS\System32\PAStiSvc.exe
          C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
          C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\NTRU Cryptosystems\NTRU Hybrid TSS v2.0.25\bin\tcsd_win32.exe
          C:\WINDOWS\system32\SearchIndexer.exe
          C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\F-Secure\Common\FNRB32.EXE
          C:\Program Files\F-Secure\Common\FIH32.EXE
          C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Apoint\Apoint.exe
          C:\WINDOWS\system32\rundll32.exe
          C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
          C:\Program Files\Apoint\Apntex.exe
          C:\Program Files\Apoint\HidFind.exe
          C:\WINDOWS\stsystra.exe
          C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\docmgr.exe
          C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
          C:\WINDOWS\system32\ICO.EXE
          C:\WINDOWS\system32\Pmxmiced.exe
          C:\Program Files\Dell\QuickSet\quickset.exe
          C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
          C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
          C:\WINDOWS\System32\DLA\DLACTRLW.EXE
          C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
          C:\Program Files\F-Secure\Common\FSM32.EXE
          C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
          C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
          C:\Program Files\Logitech\QuickCam\Quickcam.exe
          C:\Program Files\F-Secure\FSGUI\fsguidll.exe
          C:\Program Files\iTunes\iTunesHelper.exe
          C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          C:\WINDOWS\system32\ieupdates.exe
          C:\Program Files\Harrap's Multimédia\Shorter\bin\HiHarrapsTray.exe
          C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
          C:\Program Files\Digital Line Detect\DLG.exe
          C:\Program Files\Wave Systems Corp\Services Manager\Secure Update\AutoUpdate.exe
          C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
          C:\Program Files\KirysTech2k\FastNote\kfn.exe
          C:\Program Files\Windows Desktop Search\WindowsSearch.exe
          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
          C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
          C:\WINDOWS\system32\SearchProtocolHost.exe
          C:\Documents and Settings\ldussud\Bureau\Anticrotte\SmitfraudFix\Policies.exe
          C:\WINDOWS\system32\cmd.exe

          »»»»»»»»»»»»»»»»»»»»»»»» hosts

          Fichier hosts corrompu !

          127.0.0.1 www.legal-at-spybot.info
          127.0.0.1 legal-at-spybot.info

          »»»»»»»»»»»»»»»»»»»»»»»» C:\

          »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

          »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

          »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

          »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

          »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\ldussud

          »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\ldussud\Application Data

          »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

          »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ldussud\Favoris

          »»»»»»»»»»»»»»»»»»»»»»»» Bureau

          »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

          »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

          »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

          [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
          "Source"="About:Home"
          "SubscribedURL"="About:Home"
          "FriendlyName"="Ma page d'accueil"

          »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
          !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

          IEDFix
          Credits: Malware Analysis & Diagnostic
          Code: S!Ri

          »»»»»»»»»»»»»»»»»»»»»»»» VACFix
          !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

          VACFix
          Credits: Malware Analysis & Diagnostic
          Code: S!Ri

          »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
          !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

          404Fix
          Credits: Malware Analysis & Diagnostic
          Code: S!Ri

          »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
          !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

          SrchSTS.exe by S!Ri
          Search SharedTaskScheduler's .dll

          »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
          !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
          "AppInit_DLLs"="wxvault.dll C:\\PROGRA~1\\Google\\GOOGLE~1\\GOEC62~1.DLL"
          "LoadAppInit_DLLs"=dword:00000001

          »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
          !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
          "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
          "System"=""

          »»»»»»»»»»»»»»»»»»»»»»»» Rustock

          »»»»»»»»»»»»»»»»»»»»»»»» DNS

          Description: Intel(R) PRO/Wireless 3945ABG Network Connection - Miniport d'ordonnancement de paquets
          DNS Server Search Order: 192.168.1.1

          HKLM\SYSTEM\CCS\Services\Tcpip\..\{207DE95F-7639-41F9-AF6D-9D8E87F8D500}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CCS\Services\Tcpip\..\{54BA2020-3738-4782-A11B-3A33C42F5341}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CCS\Services\Tcpip\..\{9B546FE1-1166-4C41-BF24-EAB7FCC2419C}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CCS\Services\Tcpip\..\{C0E0F73D-BEAB-4BAE-B2C3-4A94C73B8429}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CS1\Services\Tcpip\..\{207DE95F-7639-41F9-AF6D-9D8E87F8D500}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CS1\Services\Tcpip\..\{54BA2020-3738-4782-A11B-3A33C42F5341}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CS1\Services\Tcpip\..\{9B546FE1-1166-4C41-BF24-EAB7FCC2419C}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CS1\Services\Tcpip\..\{C0E0F73D-BEAB-4BAE-B2C3-4A94C73B8429}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CS3\Services\Tcpip\..\{207DE95F-7639-41F9-AF6D-9D8E87F8D500}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CS3\Services\Tcpip\..\{54BA2020-3738-4782-A11B-3A33C42F5341}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CS3\Services\Tcpip\..\{9B546FE1-1166-4C41-BF24-EAB7FCC2419C}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CS3\Services\Tcpip\..\{C0E0F73D-BEAB-4BAE-B2C3-4A94C73B8429}: DhcpNameServer=192.168.1.1

          »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

          »»»»»»»»»»»»»»»»»»»»»»»» Fin
      3. dou-l
        On continue,

        Redémarre ton ordinateur en mode sans échec
        Ouvre le dossier SmitfraudFix
        Double clic sur Smitfraud.cmd choisis l'option 2 et Entrée
        Réponds O aux deux questions suivantes:
        -Voulez-vous nettoyer le registre ?
        -Corriger le fichier infecté ?
        Un rapport.txt sera généré et tu le postes pour contrôle.
        1. Trevarec
          Voila la fin du message

          »»»»»»»»»»»»»»»»»»»»»»»» VACFix

          VACFix
          Credits: Malware Analysis & Diagnostic
          Code: S!Ri

          »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

          S!Ri's WS2Fix: LSP not Found.

          »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

          GenericRenosFix by S!Ri

          »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

          »»»»»»»»»»»»»»»»»»»»»»»» IEDFix

          IEDFix
          Credits: Malware Analysis & Diagnostic
          Code: S!Ri

          »»»»»»»»»»»»»»»»»»»»»»»» 404Fix

          404Fix
          Credits: Malware Analysis & Diagnostic
          Code: S!Ri

          »»»»»»»»»»»»»»»»»»»»»»»» DNS

          HKLM\SYSTEM\CCS\Services\Tcpip\..\{207DE95F-7639-41F9-AF6D-9D8E87F8D500}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CCS\Services\Tcpip\..\{54BA2020-3738-4782-A11B-3A33C42F5341}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CCS\Services\Tcpip\..\{9B546FE1-1166-4C41-BF24-EAB7FCC2419C}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CCS\Services\Tcpip\..\{C0E0F73D-BEAB-4BAE-B2C3-4A94C73B8429}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CS1\Services\Tcpip\..\{207DE95F-7639-41F9-AF6D-9D8E87F8D500}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CS1\Services\Tcpip\..\{54BA2020-3738-4782-A11B-3A33C42F5341}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CS1\Services\Tcpip\..\{9B546FE1-1166-4C41-BF24-EAB7FCC2419C}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CS1\Services\Tcpip\..\{C0E0F73D-BEAB-4BAE-B2C3-4A94C73B8429}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CS3\Services\Tcpip\..\{207DE95F-7639-41F9-AF6D-9D8E87F8D500}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CS3\Services\Tcpip\..\{54BA2020-3738-4782-A11B-3A33C42F5341}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CS3\Services\Tcpip\..\{9B546FE1-1166-4C41-BF24-EAB7FCC2419C}: DhcpNameServer=192.168.1.1
          HKLM\SYSTEM\CS3\Services\Tcpip\..\{C0E0F73D-BEAB-4BAE-B2C3-4A94C73B8429}: DhcpNameServer=192.168.1.1

          »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

          »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
          !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
          "System"=""

          »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

          Nettoyage terminé.

          »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
          !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

          SrchSTS.exe by S!Ri
          Search SharedTaskScheduler's .dll

          »»»»»»»»»»»»»»»»»»»»»»»» Fin
          1. dou-l
            Il manque le début non ?
            1. Trevarec
              Désolé, j'ai envoyé le fichier en 2 fois car il était trop gros.
              J'ai du faire une fausse manip !!

              Voilà le début

              SmitFraudFix v2.328

              Rapport fait à 18:54:30,96, 27/06/2008
              Executé à partir de C:\Documents and Settings\Administrateur\Bureau\SmitfraudFix
              OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
              Le type du système de fichiers est NTFS
              Fix executé en mode sans echec

              »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

              SrchSTS.exe by S!Ri
              Search SharedTaskScheduler's .dll

              »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

              »»»»»»»»»»»»»»»»»»»»»»»» hosts

              127.0.0.1 localhost
              127.0.0.1 .supercocklol.com
              127.0.0.1 www..webloyalty.com
              127.0.0.1 007guard.com
              127.0.0.1 www.007guard.com
              127.0.0.1 008i.com
              127.0.0.1 008k.com
              127.0.0.1 www.008k.com
              127.0.0.1 00hq.com
              127.0.0.1 www.00hq.com
              127.0.0.1 010402.com
              127.0.0.1 032439.com
              127.0.0.1 www.032439.com
              127.0.0.1 1001-search.info
              127.0.0.1 www.1001-search.info
              127.0.0.1 www.100888290cs.com
              127.0.0.1 100888290cs.com
              127.0.0.1 www.10sek.com
              127.0.0.1 10sek.com
              127.0.0.1 123topsearch.com
              127.0.0.1 www.123topsearch.com
              127.0.0.1 www.132.com
              127.0.0.1 132.com
              127.0.0.1 136136.net
              127.0.0.1 www.136136.net
              127.0.0.1 www.139mm.com
              127.0.0.1 139mm.com
              127.0.0.1 163ns.com
              127.0.0.1 www.163ns.com
              127.0.0.1 171203.com
              127.0.0.1 17-plus.com
              127.0.0.1 1800searchonline.com
              127.0.0.1 www.1800searchonline.com
              127.0.0.1 www.180searchassistant.com
              127.0.0.1 180searchassistant.com
              127.0.0.1 180solutions.com
              127.0.0.1 www.180solutions.com
              127.0.0.1 181.365soft.info
              127.0.0.1 www.181.365soft.info
              127.0.0.1 www.1987324.com
              127.0.0.1 1987324.com
              127.0.0.1 1-domains-registrations.com
              127.0.0.1 www.1-domains-registrations.com
              127.0.0.1 1-extreme.biz
              127.0.0.1 www.1-extreme.biz
              127.0.0.1 www.1stantivirus.com
              127.0.0.1 1stantivirus.com
              127.0.0.1 1stpagehere.com
              127.0.0.1 www.1stpagehere.com
              127.0.0.1 1stsearchportal.com
              127.0.0.1 www.1stsearchportal.com
              127.0.0.1 2.82211.net
              127.0.0.1 www.2006ooo.com
              127.0.0.1 2007-download.com
              127.0.0.1 www.2007-download.com
              127.0.0.1 2020search.com
              127.0.0.1 www.2020search.com
              127.0.0.1 20x2p.com
              127.0.0.1 24.365soft.info
              127.0.0.1 www.24.365soft.info
              127.0.0.1 24-7pharmacy.info
              127.0.0.1 www.24-7pharmacy.info
              127.0.0.1 24-7searching-and-more.com
              127.0.0.1 www.24-7searching-and-more.com
              127.0.0.1 2every.net
              127.0.0.1 www.2every.net
              127.0.0.1 2ndpower.com
              127.0.0.1 www.2search.com
              127.0.0.1 2search.com
              127.0.0.1 2search.org
              127.0.0.1 www.2search.org
              127.0.0.1 www.2squared.com
              127.0.0.1 2squared.com
              127.0.0.1 3322.org
              127.0.0.1 www.3322.org
              127.0.0.1 365soft.info
              127.0.0.1 www.36site.com
              127.0.0.1 36site.com
              127.0.0.1 3721.com
              127.0.0.1 39-93.com
              127.0.0.1 www.3abetterinternet.com
              127.0.0.1 3abetterinternet.com
              127.0.0.1 3bay.it
              127.0.0.1 www.3bay.it
              127.0.0.1 www.3ebay.it
              127.0.0.1 3ebay.it
              127.0.0.1 3xclipsonline.com
              127.0.0.1 www.3xclipsonline.com
              127.0.0.1 3xcurves.com
              127.0.0.1 www.3xcurves.com
              127.0.0.1 3xfestival.com
              127.0.0.1 www.3xfestival.com
              127.0.0.1 www.3x-festival.com
              127.0.0.1 3x-festival.com
              127.0.0.1 3x-galls.com
              127.0.0.1 www.3x-galls.com
              127.0.0.1 www.3xmiracle.com
              127.0.0.1 3xmiracle.com
              127.0.0.1 3xmoviesblog.com
              127.0.0.1 www.3xmoviesblog.com
              127.0.0.1 404dns.com
              127.0.0.1 www.404dns.com
              127.0.0.1 www.4199.com
              127.0.0.1 4199.com
              127.0.0.1 4corn.net
              127.0.0.1 www.4corn.net
              127.0.0.1 4ebay.it
              127.0.0.1 www.4ebay.it
              127.0.0.1 4klm.com
              127.0.0.1 4mpg.com
              127.0.0.1 www.4mpg.com
              127.0.0.1 4repubblica.it
              127.0.0.1 www.4repubblica.it
              127.0.0.1 www.4softget.com
              127.0.0.1 4softget.com
              127.0.0.1 5iscali.it
              127.0.0.1 www.5iscali.it
              127.0.0.1 www.5repubblica.it
              127.0.0.1 5repubblica.it
              127.0.0.1 5tiscali.it
              127.0.0.1 www.5tiscali.it
              127.0.0.1 5zgmu7o20kt5d8yq.com
              127.0.0.1 www.5zgmu7o20kt5d8yq.com
              127.0.0.1 680180.net
              127.0.0.1 www.680180.net
              127.0.0.1 www.6iscali.it
              127.0.0.1 6iscali.it
              127.0.0.1 6njaga.com
              127.0.0.1 www.6njaga.com
              127.0.0.1 6sek.com
              127.0.0.1 www.6sek.com
              127.0.0.1 www.6tiscali.it
              127.0.0.1 6tiscali.it
              127.0.0.1 70-music.com
              127.0.0.1 www.70-music.com
              127.0.0.1 7322.com
              127.0.0.1 www.7322.com
              127.0.0.1 75tz.com
              127.0.0.1 777search.com
              127.0.0.1 www.777search.com
              127.0.0.1 777top.com
              127.0.0.1 www.777top.com
              127.0.0.1 7939.com
              127.0.0.1 www.7939.com
              127.0.0.1 7search.com
              127.0.0.1 www.7search.com
              127.0.0.1 80gw6ry3i3x3qbrkwhxhw.032439.com
              127.0.0.1 www.80-music.com
              127.0.0.1 80-music.com
              127.0.0.1 82211.net
              127.0.0.1 8866.org
              127.0.0.1 888.com
              127.0.0.1 www.888.com
              127.0.0.1 8ad.com
              127.0.0.1 www.8ad.com
              127.0.0.1 www.90-music.com
              127.0.0.1 90-music.com
              127.0.0.1 9505.com
              127.0.0.1 www.9505.com
              127.0.0.1 971searchbox.com
              127.0.0.1 www.971searchbox.com
              127.0.0.1 a.bestmanage.org
              127.0.0.1 aaabesthomepage.com
              127.0.0.1 www.aaabesthomepage.com
              127.0.0.1 aaawebfinder.com
              127.0.0.1 www.aaawebfinder.com
              127.0.0.1 aaqadarsztriv.com
              127.0.0.1 www.aaqadarsztriv.com
              127.0.0.1 aaqada-rsztriv.com
              127.0.0.1 www.aaqada-rsztriv.com
              127.0.0.1 www.aaqadaueorn.com
              127.0.0.1 aaqadaueorn.com
              127.0.0.1 aaqada-ueorn.com
              127.0.0.1 www.aaqada-ueorn.com
              127.0.0.1 aaqada-ygco.com
              127.0.0.1 www.aaqada-ygco.com
              127.0.0.1 aaqada-ymct.com
              127.0.0.1 www.aaqada-ymct.com
              127.0.0.1 aavc.com
              127.0.0.1 www.abcdperformance.com
              127.0.0.1 abcdperformance.com
              127.0.0.1 abc-find.info
              127.0.0.1 www.abc-find.info
              127.0.0.1 abcsearch.com
              127.0.0.1 www.abcsearch.com
              127.0.0.1 abetterinternet.com
              127.0.0.1 www.abetterinternet.com
              127.0.0.1 abnetsoft.info
              127.0.0.1 www.abnetsoft.info
              127.0.0.1 aboutclicker.com
              127.0.0.1 www.aboutclicker.com
              127.0.0.1 abrp.net
              127.0.0.1 www.abrp.net
              127.0.0.1 absolutee.com
              127.0.0.1 www.absolutee.com
              127.0.0.1 www.abyssmedia.com
              127.0.0.1 abyssmedia.com
              127.0.0.1 ac66.cn
              127.0.0.1 www.ac66.cn
              127.0.0.1 access.Navinetwork.com
              127.0.0.1 access.rapid-pass.net
              127.0.0.1 accessactivexvideo.com
              127.0.0.1 www.accessactivexvideo.com
              127.0.0.1 www.accessclips.com
              127.0.0.1 accessclips.com
              127.0.0.1 access-dvd.com
              127.0.0.1 www.access-dvd.com
              127.0.0.1 www.accesskeygenerator.com
              127.0.0.1 accesskeygenerator.com
              127.0.0.1 accessorygeeks.com
              127.0.0.1 www.accessorygeeks.com
              127.0.0.1 www.accessthefuture.net
              127.0.0.1 accessthefuture.net
              127.0.0.1 accessvid.net
              127.0.0.1 www.accessvid.net
              127.0.0.1 www.acemedic.com
              127.0.0.1 acemedic.com
              127.0.0.1 ace-webmaster.com
              127.0.0.1 www.ace-webmaster.com
              127.0.0.1 acjp.com
              127.0.0.1 acrobat-2007.com
              127.0.0.1 www.acrobat-2007.com
              127.0.0.1 acrobat-8.com
              127.0.0.1 www.acrobat-8.com
              127.0.0.1 acrobat-center.com
              127.0.0.1 www.acrobat-center.com
              127.0.0.1 www.acrobat-hq.com
              127.0.0.1 acrobat-hq.com
              127.0.0.1 acrobatreader-8.com
              127.0.0.1 www.acrobatreader-8.com
              127.0.0.1 acrobat-reader-8.de
              127.0.0.1 www.acrobat-reader-8.de
              127.0.0.1 acrobat-stop.com
              127.0.0.1 www.acrobat-stop.com
              127.0.0.1 www.actionbreastcancer.org
              127.0.0.1 actionbreastcancer.org
              127.0.0.1 activesearcher.info
              127.0.0.1 www.activesearcher.info
              127.0.0.1 www.activexaccessobject.com
              127.0.0.1 activexaccessobject.com
              127.0.0.1 activexaccessvideo.com
              127.0.0.1 www.activexaccessvideo.com
              127.0.0.1 www.activexemedia.com
              127.0.0.1 activexemedia.com
              127.0.0.1 activexmediaobject.com
              127.0.0.1 www.activexmediaobject.com
              127.0.0.1 activexmediapro.com
              127.0.0.1 www.activexmediapro.com
              127.0.0.1 activexmediasite.com
              127.0.0.1 www.activexmediasite.com
              127.0.0.1 www.activexmediasoftware.com
              127.0.0.1 activexmediasoftware.com
              127.0.0.1 activexmediasource.com
              127.0.0.1 www.activexmediasource.com
              127.0.0.1 activexmediatool.com
              127.0.0.1 www.activexmediatool.com
              127.0.0.1 activexmediatour.com
              127.0.0.1 www.activexmediatour.com
              127.0.0.1 activexsoftwares.com
              127.0.0.1 www.activexsoftwares.com
              127.0.0.1 www.activexsource.com
              127.0.0.1 activexsource.com
              127.0.0.1 activexupdate.com
              127.0.0.1 www.activexupdate.com
              127.0.0.1 activexvideo.com
              127.0.0.1 www.activexvideo.com
              127.0.0.1 activexvideotool.com
              127.0.0.1 www.activexvideotool.com
              127.0.0.1 www.ad.marketingsector.com
              127.0.0.1 ad.marketingsector.com
              127.0.0.1 ad.mokead.com
              127.0.0.1 www.ad.mokead.com
              127.0.0.1 ad.oinadserver.com
              127.0.0.1 ad.outerinfoads.com
              127.0.0.1 ad25.com
              127.0.0.1 www.ad25.com
              127.0.0.1 www.ad45.com
              127.0.0.1 ad45.com
              127.0.0.1 ad77.com
              127.0.0.1 www.ad77.com
              127.0.0.1 ad86.com
              127.0.0.1 www.ad86.com
              127.0.0.1 adamsupportgroup.org
              127.0.0.1 www.adamsupportgroup.org
              127.0.0.1 www.adarmor.com
              127.0.0.1 adarmor.com
              127.0.0.1 adasearch.com
              127.0.0.1 www.adasearch.com
              127.0.0.1 adaware.cc
              127.0.0.1 adawarenow.com
              127.0.0.1 www.adawarenow.com
              127.0.0.1 adchannel.contextplus.net
              127.0.0.1 www.addetect.com
              127.0.0.1 addetect.com
              127.0.0.1 add-hhh.info
              127.0.0.1 www.add-hhh.info
              127.0.0.1 addictivetechnologies.com
              127.0.0.1 www.addictivetechnologies.com
              127.0.0.1 addictivetechnologies.net
              127.0.0.1 www.addictivetechnologies.net
              127.0.0.1 www.addioerrori.com
              127.0.0.1 addioerrori.com
              127.0.0.1 add-manager.com
              127.0.0.1 www.add-manager.com
              127.0.0.1 www.adgate.info
              127.0.0.1 adgate.info
              127.0.0.1 adintelligence.net
              127.0.0.1 www.adintelligence.net
              127.0.0.1 www.adioserrores.com
              127.0.0.1 adioserrores.com
              127.0.0.1 adipics.com
              127.0.0.1 www.adipics.com
              127.0.0.1 www.adlogix.com
              127.0.0.1 adlogix.com
              127.0.0.1 admin2cash.biz
              127.0.0.1 www.admin2cash.biz
              127.0.0.1 adnet-plus.com
              127.0.0.1 adnetserver.com
              127.0.0.1 www.adnetserver.com
              127.0.0.1 adobe-download-now.com
              127.0.0.1 adobe-downloads.com
              127.0.0.1 www.adobe-downloads.com
              127.0.0.1 adobe-reader-8.fr
              127.0.0.1 www.adobe-reader-8.fr
              127.0.0.1 adprotect.com
              127.0.0.1 www.adprotect.com
              127.0.0.1 ads.centralmedia.ws
              127.0.0.1 ads.k8l.info
              127.0.0.1 ads.kmpads.com
              127.0.0.1 ads.kw.revenue.net
              127.0.0.1 ads.marketingsector.com
              127.0.0.1 ads.searchingbooth.com
              127.0.0.1 ads.z-quest.com
              127.0.0.1 ads1.revenue.net
              127.0.0.1 www.ads183.com
              127.0.0.1 ads183.com
              127.0.0.1 adscontex.com
              127.0.0.1 www.adscontex.com
              127.0.0.1 www.adservices1.enhance.com
              127.0.0.1 adservices1.enhance.com
              127.0.0.1 adservs.com
              127.0.0.1 adsextend.net
              127.0.0.1 www.adsextend.net
              127.0.0.1 www.adshttp.com
              127.0.0.1 adshttp.com
              127.0.0.1 adsniffer.com
              127.0.0.1 www.adsniffer.com
              127.0.0.1 adsonwww.com
              127.0.0.1 www.adsonwww.com
              127.0.0.1 adspics.com
              127.0.0.1 www.adspics.com
              127.0.0.1 adsrevenue.net
              127.0.0.1 www.adsrevenue.net
              127.0.0.1 adtrak.net
              127.0.0.1 www.adtrak.net
              127.0.0.1 adtrgt.com
              127.0.0.1 advcash.biz
              127.0.0.1 www.advcash.biz
              127.0.0.1 advert.exaccess.ru
              127.0.0.1 www.advertisemoney.info
              127.0.0.1 advertisemoney.info
              127.0.0.1 advertising.paltalk.com
              127.0.0.1 advertising-money.info
              127.0.0.1 www.advertising-money.info
              127.0.0.1 ad-ware.cc
              127.0.0.1 ad-w-a-r-e.com
              127.0.0.1 www.ad-w-a-r-e.com
              127.0.0.1 a-d-w-a-r-e.com
              127.0.0.1 www.a-d-w-a-r-e.com
              127.0.0.1 adware.pro
              127.0.0.1 www.adware.pro
              127.0.0.1 www.adwarealert.com
              127.0.0.1 adwarealert.com
              127.0.0.1 ad-warealert.com
              127.0.0.1 www.ad-warealert.com
              127.0.0.1 www.adwarearrest.com
              127.0.0.1 adwarearrest.com
              127.0.0.1 adwarebazooka.com
              127.0.0.1 www.adwarebazooka.com
              127.0.0.1 adwarecommander.com
              127.0.0.1 www.adwarecommander.com
              127.0.0.1 adwarefinder.com
              127.0.0.1 www.adwarefinder.com
              127.0.0.1 www.adwaregold.com
              127.0.0.1 adwaregold.com
              127.0.0.1 adwarepatrol.com
              127.0.0.1 www.adwarepatrol.com
              127.0.0.1 www.adwareplatinum.com
              127.0.0.1 adwareplatinum.com
              127.0.0.1 adwareprotectionsite.com
              127.0.0.1 www.adwareprotectionsite.com
              127.0.0.1 adwarepunisher.com
              127.0.0.1 www.adwarepunisher.com
              127.0.0.1 www.adwareremover.ws
              127.0.0.1 adwareremover.ws
              127.0.0.1 adwaresafety.com
              127.0.0.1 www.adwaresafety.com
              127.0.0.1 adwarexp.com
              127.0.0.1 www.adwarexp.com
              127.0.0.1 affiliate.idownload.com
              127.0.0.1 aflgate.com
              127.0.0.1 www.aflgate.com
              127.0.0.1 africaspromise.org
              127.0.0.1 agava.com
              127.0.0.1 agava.ru
              127.0.0.1 agentstudio.com
              127.0.0.1 aginegialle.it
              127.0.0.1 www.aginegialle.it
              127.0.0.1 aifind.info
              127.0.0.1 www.aifind.info
              127.0.0.1 airtleworld.com
              127.0.0.1 www.airtleworld.com
              127.0.0.1 aitalia.it
              127.0.0.1 www.aitalia.it
              127.0.0.1 akamai.downloadv3.com
              127.0.0.1 aklitalia.it
              127.0.0.1 www.aklitalia.it
              127.0.0.1 akril.com
              127.0.0.1 alcatel.ws
              127.0.0.1 alertspy.com
              127.0.0.1 www.alertspy.com
              127.0.0.1 alfacleaner.com
              127.0.0.1 www.alfacleaner.com
              127.0.0.1 alfa-search.com
              127.0.0.1 www.alialia.it
              127.0.0.1 alialia.it
              127.0.0.1 aliotalia.it
              127.0.0.1 www.aliotalia.it
              127.0.0.1 alirtalia.it
              127.0.0.1 www.alirtalia.it
              127.0.0.1 alitaia.it
              127.0.0.1 www.alitaia.it
              127.0.0.1 www.alitaklia.it
              127.0.0.1 alitaklia.it
              127.0.0.1 alitala.it
              127.0.0.1 www.alitala.it
              127.0.0.1 www.alitali.it
              127.0.0.1 alitali.it
              127.0.0.1 alitaliaq.it
              127.0.0.1 www.alitaliaq.it
              127.0.0.1 www.alitalias.it
              127.0.0.1 alitalias.it
              127.0.0.1 alitaliaz.it
              127.0.0.1 www.alitaliaz.it
              127.0.0.1 alitalioa.it
              127.0.0.1 www.alitalioa.it
              127.0.0.1 alitalisa.it
              127.0.0.1 www.alitalisa.it
              127.0.0.1 www.alitaliua.it
              127.0.0.1 alitaliua.it
              127.0.0.1 alitalkia.it
              127.0.0.1 www.alitalkia.it
              127.0.0.1 alitaloia.it
              127.0.0.1 www.alitaloia.it
              127.0.0.1 alitaluia.it
              127.0.0.1 www.alitaluia.it
              127.0.0.1 www.alitaslia.it
              127.0.0.1 alitaslia.it
              127.0.0.1 alitlia.it
              127.0.0.1 www.alitlia.it
              127.0.0.1 alitralia.it
              127.0.0.1 www.alitralia.it
              127.0.0.1 alitsalia.it
              127.0.0.1 www.alitsalia.it
              127.0.0.1 www.aliutalia.it
              127.0.0.1 aliutalia.it
              127.0.0.1 ALL1COUNT.NET
              127.0.0.1 www.ALL1COUNT.NET
              127.0.0.1 www.all4internet.com
              127.0.0.1 all4internet.com
              127.0.0.1 allabtcars.com
              127.0.0.1 allabtjeeps.com
              127.0.0.1 www.all-bittorrent.com
              127.0.0.1 all-bittorrent.com
              127.0.0.1 allcollisions.com
              127.0.0.1 www.allcollisions.com
              127.0.0.1 www.allcybersearch.com
              127.0.0.1 allcybersearch.com
              127.0.0.1 alldnserrors.com
              127.0.0.1 www.alldnserrors.com
              127.0.0.1 www.all-downloads-now.com
              127.0.0.1 all-downloads-now.com
              127.0.0.1 all-edonkey.com
              127.0.0.1 www.all-edonkey.com
              127.0.0.1 www.allertaminacce.com
              127.0.0.1 allertaminacce.com
              127.0.0.1 allhyperlinks.com
              127.0.0.1 alliesecurity.com
              127.0.0.1 www.alliesecurity.com
              127.0.0.1 all-inet.com
              127.0.0.1 allinternetbusiness.com
              127.0.0.1 all-limewire.com
              127.0.0.1 www.all-limewire.com
              127.0.0.1 allmegabucks.com
              127.0.0.1 www.allmegabucks.com
              127.0.0.1 allprotections.com
              127.0.0.1 www.allprotections.com
              127.0.0.1 www.allresultz.net
              127.0.0.1 allresultz.net
              127.0.0.1 allsearch.us
              127.0.0.1 www.allsearch.us
              127.0.0.1 allsecuritynotes.com
              127.0.0.1 www.allsecuritynotes.com
              127.0.0.1 allsecuritysite.com
              127.0.0.1 www.allsecuritysite.com
              127.0.0.1 allstarsvideos.net
              127.0.0.1 www.allstarsvideos.net
              127.0.0.1 www.alltiettantivirus.com
              127.0.0.1 alltiettantivirus.com
              127.0.0.1 alltruesoftware.com
              127.0.0.1 www.alltruesoftware.com
              127.0.0.1 www.allvideoactivex.com
              127.0.0.1 allvideoactivex.com
              127.0.0.1 almanah.biz
              127.0.0.1 www.almanah.biz
              127.0.0.1 almarvideos.com
              127.0.0.1 aloitalia.it
              127.0.0.1 www.aloitalia.it
              127.0.0.1 aluitalia.it
              127.0.0.1 www.aluitalia.it
              127.0.0.1 amaena.com
              127.0.0.1 www.amaena.com
              127.0.0.1 amandamountains.com
              127.0.0.1 amateurliveshow.com
              127.0.0.1 www.amateurliveshow.com
              127.0.0.1 www.amediasoftware.com
              127.0.0.1 amediasoftware.com
              127.0.0.1 amediasource.com
              127.0.0.1 www.amediasource.com
              127.0.0.1 www.americanautobargains.com
              127.0.0.1 americanautobargains.com
              127.0.0.1 americancarbargains.com
              127.0.0.1 www.americancarbargains.com
              127.0.0.1 amigeek.com
              127.0.0.1 amigobore.com
              127.0.0.1 www.amigobore.com
              127.0.0.1 amisbusiness.com
              127.0.0.1 ampmsearch.com
              127.0.0.1 www.ampmsearch.com
              127.0.0.1 analcord.com
              127.0.0.1 www.analcord.com
              127.0.0.1 analmovi.com
              127.0.0.1 anarchylolita.com
              127.0.0.1 www.anarchylolita.com
              127.0.0.1 www.andromedical.com
              127.0.0.1 andromedical.com
              127.0.0.1 anin.org
              127.0.0.1 anjpn-avxiz.biz
              127.0.0.1 www.anjpn-avxiz.biz
              127.0.0.1 www.anjpnzqav.biz
              127.0.0.1 anjpnzqav.biz
              127.0.0.1 anjpn-zqav.biz
              127.0.0.1 www.anjpn-zqav.biz
              127.0.0.1 annaromeo.com
              127.0.0.1 antiddos.us
              127.0.0.1 www.antiddos.us
              127.0.0.1 www.Antiespiadorado.com
              127.0.0.1 Antiespiadorado.com
              127.0.0.1 Antiespionspack.com
              127.0.0.1 www.Antiespionspack.com
              127.0.0.1 www.Antigusanos2008.com
              127.0.0.1 Antigusanos2008.com
              127.0.0.1 antispamassistant.com
              127.0.0.1 www.antispamassistant.com
              127.0.0.1 antispamdeluxe.com
              127.0.0.1 www.antispamdeluxe.com
              127.0.0.1 www.Antispionage.com
              127.0.0.1 Antispionage.com
              127.0.0.1 Antispionagepro.com
              127.0.0.1 www.Antispionagepro.com
              127.0.0.1 www.antispyadvanced.com
              127.0.0.1 antispyadvanced.com
              127.0.0.1 antispydns.biz
              127.0.0.1 www.antispydns.biz
              127.0.0.1 www.antispykit.com
              127.0.0.1 antispykit.com
              127.0.0.1 www.antispylab.com
              127.0.0.1 antispylab.com
              127.0.0.1 www.antispyshield.com
              127.0.0.1 antispyshield.com
              127.0.0.1 antispysolutions.com
              127.0.0.1 www.antispysolutions.com
              127.0.0.1 antispyware.com
              127.0.0.1 www.antispyware.com
              127.0.0.1 www.antispywareboot.com
              127.0.0.1 antispywareboot.com
              127.0.0.1 www.antispywarebot.com
              127.0.0.1 antispywarebot.com
              127.0.0.1 www.antispywarebox.com
              127.0.0.1 antispywarebox.com
              127.0.0.1 antispywaredownloads.com
              127.0.0.1 www.antispywaredownloads.com
              127.0.0.1 antispywaresuite.com
              127.0.0.1 www.Antispywaresuite.com
              127.0.0.1 Antispywaresuite.com
              127.0.0.1 www.antispywaresuite.com
              127.0.0.1 www.antispywareupdates.net
              127.0.0.1 antispywareupdates.net
              127.0.0.1 antispywarexp.com
              127.0.0.1 www.antispywarexp.com
              127.0.0.1 Antispyweb.net
              127.0.0.1 www.Antispyweb.net
              127.0.0.1 www.Antiver2008.com
              127.0.0.1 Antiver2008.com
              127.0.0.1 www.antivermins.com
              127.0.0.1 antivermins.com
              127.0.0.1 www.anti-vermins.com
              127.0.0.1 anti-vermins.com
              127.0.0.1 www.antivir2007.com
              127.0.0.1 antivir2007.com
              127.0.0.1 antivirgear.com
              127.0.0.1 www.antivirgear.com
              127.0.0.1 www.antivirus.fastfreedownload.com
              127.0.0.1 antivirus.fastfreedownload.com
              127.0.0.1 www.antivirusadvance.com
              127.0.0.1 antivirusadvance.com
              127.0.0.1 www.antivirusaskeladd.com
              127.0.0.1 antivirusaskeladd.com
              127.0.0.1 www.antivirusgereedschap.com
              127.0.0.1 antivirusgereedschap.com
              127.0.0.1 www.antivirusgolden.com
              127.0.0.1 antivirusgolden.com
              127.0.0.1 www.antivirus-hq.net
              127.0.0.1 antivirus-hq.net
              127.0.0.1 www.antiviruspcsuite.com
              127.0.0.1 antiviruspcsuite.com
              127.0.0.1 antiviruspremium.com
              127.0.0.1 www.antiviruspremium.com
              127.0.0.1 www.anti-virus-pro.com
              127.0.0.1 anti-virus-pro.com
              127.0.0.1 www.antivirusprotector.com
              127.0.0.1 antivirusprotector.com
              127.0.0.1 www.antivirusscherm.com
              127.0.0.1 antivirusscherm.com
              127.0.0.1 antivirussecuritypro.com
              127.0.0.1 www.antivirussecuritypro.com
              127.0.0.1 www.antivirus-stop.com
              127.0.0.1 antivirus-stop.com
              127.0.0.1 www.Antiworm2008.com
              127.0.0.1 Antiworm2008.com
              127.0.0.1 antiworm2008.com
              127.0.0.1 www.antiworm2008.com
              127.0.0.1 www.Antiwurm2008.com
              127.0.0.1 Antiwurm2008.com
              127.0.0.1 antrocity.com
              127.0.0.1 anyofus.com
              127.0.0.1 www.anyofus.com
              127.0.0.1 www.anysn.seproger.com
              127.0.0.1 anysn.seproger.com
              127.0.0.1 anything4health.com
              127.0.0.1 www.apicpreview.com
              127.0.0.1 apicpreview.com
              127.0.0.1 www.appealcircuit.com
              127.0.0.1 appealcircuit.com
              127.0.0.1 approvedlinks.com
              127.0.0.1 www.approvedlinks.com
              127.0.0.1 apps.deskwizz.com
              127.0.0.1 apps.webservicehost.com
              127.0.0.1 www.aprotectedpage.com
              127.0.0.1 aprotectedpage.com
              127.0.0.1 apsua.com
              127.0.0.1 aregay.com
              127.0.0.1 ares.click-new-download.com
              127.0.0.1 www.ares.click-new-download.com
              127.0.0.1 www.ares-freebie.com
              127.0.0.1 ares-freebie.com
              127.0.0.1 arespro2007.com
              127.0.0.1 www.arespro2007.com
              127.0.0.1 www.aresultra.com
              127.0.0.1 aresultra.com
              127.0.0.1 www.ares-usa.com
              127.0.0.1 ares-usa.com
              127.0.0.1 arheo.com
              127.0.0.1 arizonaweb.org
              127.0.0.1 armitageinn.com
              127.0.0.1 www.arquivojpgs.smtp.ru
              127.0.0.1 arquivojpgs.smtp.ru
              127.0.0.1 artachnid.com
              127.0.0.1 art-func.com
              127.0.0.1 www.asafebrowser.com
              127.0.0.1 asafebrowser.com
              127.0.0.1 www.asafetyalways.com
              127.0.0.1 asafetyalways.com
              127.0.0.1 www.asafetynotice.com
              127.0.0.1 asafetynotice.com
              127.0.0.1 www.asafetypage.com
              127.0.0.1 asafetypage.com
              127.0.0.1 asdbiz.biz
              127.0.0.1 www.asdbiz.biz
              127.0.0.1 asdeykuddq.com
              127.0.0.1 www.asdeykuddq.com
              127.0.0.1 www.asecurebar.com
              127.0.0.1 asecurebar.com
              127.0.0.1 www.asecureboard.com
              127.0.0.1 asecureboard.com
              127.0.0.1 www.asecurevalue.com
              127.0.0.1 asecurevalue.com
              127.0.0.1 asecurityissue.com
              127.0.0.1 www.asecurityissue.com
              127.0.0.1 www.asecuritynotice.com
              127.0.0.1 asecuritynotice.com
              127.0.0.1 asecuritypaper.com
              127.0.0.1 www.asecuritypaper.com
              127.0.0.1 www.asecuritystuff.com
              127.0.0.1 asecuritystuff.com
              127.0.0.1 asidseiupc.com
              127.0.0.1 www.asidseiupc.com
              127.0.0.1 aslitalia.it
              127.0.0.1 www.aslitalia.it
              127.0.0.1 ass-gals.com
              127.0.0.1 assureprotection.com
              127.0.0.1 www.assureprotection.com
              127.0.0.1 asta-killer.com
              127.0.0.1 www.asupereva.it
              127.0.0.1 asupereva.it
              127.0.0.1 ataprogram.com
              127.0.0.1 www.ataprogram.com
              127.0.0.1 athenrye.com
              127.0.0.1 atotalsafety.com
              127.0.0.1 www.atotalsafety.com
              127.0.0.1 atrueprotection.com
              127.0.0.1 www.atrueprotection.com
              127.0.0.1 www.atruesecurity.com
              127.0.0.1 atruesecurity.com
              127.0.0.1 www.attackware.com
              127.0.0.1 attackware.com
              127.0.0.1 www.attrezzi.biz
              127.0.0.1 attrezzi.biz
              127.0.0.1 www.aucunsvirus.com
              127.0.0.1 aucunsvirus.com
              127.0.0.1 www.aulde.net
              127.0.0.1 aulde.net
              127.0.0.1 aupereva.it
              127.0.0.1 www.aupereva.it
              127.0.0.1 autobargains.org
              127.0.0.1 www.autobargains.org
              127.0.0.1 autobargainsnetwork.com
              127.0.0.1 www.autobargainsnetwork.com
              127.0.0.1 www.autocontext.begun.ru
              127.0.0.1 autocontext.begun.ru
              127.0.0.1 autoescrowpay.com
              127.0.0.1 avadvance.com
              127.0.0.1 www.avadvance.com
              127.0.0.1 www.avast.free-software-center.com
              127.0.0.1 avast.free-software-center.com
              127.0.0.1 avast-2007.com
              127.0.0.1 www.avast-2007.com
              127.0.0.1 avast-downloads.com
              127.0.0.1 www.avast-downloads.com
              127.0.0.1 www.avast-hq.com
              127.0.0.1 avast-hq.com
              127.0.0.1 avforce.com
              127.0.0.1 www.avforce.com
              127.0.0.1 www.avg.grab-it-today.net
              127.0.0.1 avg.grab-it-today.net
              127.0.0.1 www.avg.softwarecenterz.com
              127.0.0.1 avg.softwarecenterz.com
              127.0.0.1 www.avg-secure.com
              127.0.0.1 avg-secure.com
              127.0.0.1 aviadaptation.com
              127.0.0.1 www.aviadaptation.com
              127.0.0.1 avian-ads.com
              127.0.0.1 www.avicoupler.com
              127.0.0.1 avicoupler.com
              127.0.0.1 avideoaxaccess.com
              127.0.0.1 www.avideoaxaccess.com
              127.0.0.1 www.avideosurfer.com
              127.0.0.1 avideosurfer.com
              127.0.0.1 www.aviewersoft.com
              127.0.0.1 aviewersoft.com
              127.0.0.1 www.avpcheckupdate.com
              127.0.0.1 avpcheckupdate.com
              127.0.0.1 www.avsmanufacture.com
              127.0.0.1 avsmanufacture.com
              127.0.0.1 www.avsystemcare.com
              127.0.0.1 avsystemcare.com
              127.0.0.1 www.avxizaaqada.biz
              127.0.0.1 avxizaaqada.biz
              127.0.0.1 avxiz-anjpn.biz
              127.0.0.1 www.avxiz-anjpn.biz
              127.0.0.1 www.avxizueorn.biz
              127.0.0.1 avxizueorn.biz
              127.0.0.1 www.avxiz-ueorn.biz
              127.0.0.1 avxiz-ueorn.biz
              127.0.0.1 avxiz-vtvcp.biz
              127.0.0.1 www.avxiz-vtvcp.biz
              127.0.0.1 www.avxiz-ygco.biz
              127.0.0.1 avxiz-ygco.biz
              127.0.0.1 avxiz-zqav.biz
              127.0.0.1 www.avxiz-zqav.biz
              127.0.0.1 www.awarenesstech.com
              127.0.0.1 awarenesstech.com
              127.0.0.1 www.awarninglist.com
              127.0.0.1 awarninglist.com
              127.0.0.1 awbeta.net-nucleus.com
              127.0.0.1 awesomehomepage.com
              127.0.0.1 www.awesomehomepage.com
              127.0.0.1 awmcash.biz
              127.0.0.1 awmdabest.com
              127.0.0.1 www.axemediasoftware.com
              127.0.0.1 axemediasoftware.com
              127.0.0.1 aximageobject.com
              127.0.0.1 www.aximageobject.com
              127.0.0.1 axmediaproject.com
              127.0.0.1 www.axmediaproject.com
              127.0.0.1 www.axmediasoftware.com
              127.0.0.1 axmediasoftware.com
              127.0.0.1 axmediasolutions.com
              127.0.0.1 www.axmediasolutions.com
              127.0.0.1 www.axobjectpage.com
              127.0.0.1 axobjectpage.com
              127.0.0.1 www.axobjectsource.com
              127.0.0.1 axobjectsource.com
              127.0.0.1 axsoftwaretool.com
              127.0.0.1 www.axsoftwaretool.com
              127.0.0.1 www.axvideoproject.com
              127.0.0.1 axvideoproject.com
              127.0.0.1 axvideosetup.com
              127.0.0.1 www.axvideosetup.com
              127.0.0.1 ayakawamura.com
              127.0.0.1 ayb.dns-look-up.com
              127.0.0.1 ayb.netbios-wait.com
              127.0.0.1 ayumitaniguchi.com
              127.0.0.1 azebar.com
              127.0.0.1 azureusclub.com
              127.0.0.1 www.azureusclub.com
              127.0.0.1 www.azureus-freebie.com
              127.0.0.1 azureus-freebie.com
              127.0.0.1 www.azzetta.it
              127.0.0.1 azzetta.it
              127.0.0.1 b.casalemedia.com
              127.0.0.1 b122.mcboo.com
              127.0.0.1 babe.k-lined.com
              127.0.0.1 www.babe.k-lined.com
              127.0.0.1 www.babe.the-killer.bz
              127.0.0.1 babe.the-killer.bz
              127.0.0.1 babenet.com
              127.0.0.1 www.babenet.com
              127.0.0.1 www.baccarat-other.info
              127.0.0.1 baccarat-other.info
              127.0.0.1 Backstripgirls.com
              127.0.0.1 www.Backstripgirls.com
              127.0.0.1 backup.mabou.org
              127.0.0.1 www.balotierra.com
              127.0.0.1 balotierra.com
              127.0.0.1 bannedhost.net
              127.0.0.1 barbudafarms.com
              127.0.0.1 bardownload.com
              127.0.0.1 www.bardownload.com
              127.0.0.1 barnandfence.com
              127.0.0.1 batsearch.com
              127.0.0.1 baygraphicsllc.com
              127.0.0.1 bbbsearch.com
              127.0.0.1 bb-search.com
              127.0.0.1 www.bcnproduction.com
              127.0.0.1 bcnproduction.com
              127.0.0.1 bdsmlibrary.net
              127.0.0.1 www.bearshare.click-new-download.com
              127.0.0.1 bearshare.click-new-download.com
              127.0.0.1 www.bearshare.download-me.info
              127.0.0.1 bearshare.download-me.info
              127.0.0.1 www.bearshare.mp3-muzic.com
              127.0.0.1 bearshare.mp3-muzic.com
              127.0.0.1 bearshare-download.org
              127.0.0.1 www.bearshare-download.org
              127.0.0.1 bearshare-downloads.net
              127.0.0.1 www.bearshare-downloads.net
              127.0.0.1 www.bearsharelive.co.uk
              127.0.0.1 bearsharelive.co.uk
              127.0.0.1 www.bearshare-music-downloads.com
              127.0.0.1 bearshare-music-downloads.com
              127.0.0.1 bearsharepro2007.com
              127.0.0.1 www.bearsharepro2007.com
              127.0.0.1 www.bearshare-usa.com
              127.0.0.1 bearshare-usa.com
              127.0.0.1 bedhome.com
              127.0.0.1 bediadance.com
              127.0.0.1 beebappyy.biz
              127.0.0.1 www.beebappyy.biz
              127.0.0.1 www.begin2search.com
              127.0.0.1 begin2search.com
              127.0.0.1 bellabasketsfl.com
              127.0.0.1 bernaolatwin.com
              127.0.0.1 beruijindegunhadesun.com
              127.0.0.1 www.beruijindegunhadesun.com
              127.0.0.1 best3xclips.com
              127.0.0.1 www.best3xclips.com
              127.0.0.1 best-counter.com
              127.0.0.1 bestcrawler.com
              127.0.0.1 www.bestdailyvids.com
              127.0.0.1 bestdailyvids.com
              127.0.0.1 bestfor.ru
              127.0.0.1 www.bestfuckvids.com
              127.0.0.1 bestfuckvids.com
              127.0.0.1 best-hardpics.com
              127.0.0.1 www.bestmanage.org
              127.0.0.1 bestmanage.org
              127.0.0.1 www.bestmanage0.org
              127.0.0.1 bestmanage0.org
              127.0.0.1 bestmanage1.org
              127.0.0.1 www.bestmanage1.org
              127.0.0.1 www.bestmanage2.org
              127.0.0.1 bestmanage2.org
              127.0.0.1 www.bestmanage3.org
              127.0.0.1 bestmanage3.org
              127.0.0.1 bestmanage4.org
              127.0.0.1 www.bestmanage4.org
              127.0.0.1 www.bestmanage5.org
              127.0.0.1 bestmanage5.org
              127.0.0.1 www.bestmanage6.org
              127.0.0.1 bestmanage6.org
              127.0.0.1 bestmanage7.org
              127.0.0.1 www.bestmanage7.org
              127.0.0.1 www.bestmanage8.org
              127.0.0.1 bestmanage8.org
              127.0.0.1 www.bestmanage9.org
              127.0.0.1 bestmanage9.org
              127.0.0.1 www.bestoffersnetworks.com
              127.0.0.1 bestoffersnetworks.com
              127.0.0.1 www.bestsafetyguide.net
              127.0.0.1 bestsafetyguide.net
              127.0.0.1 www.bestsearch.cc
              127.0.0.1 bestsearch.cc
              127.0.0.1 best-spyware.info
              127.0.0.1 www.best-spyware.info
              127.0.0.1 best-targeted-traffic.com
              127.0.0.1 www.best-targeted-traffic.com
              127.0.0.1 www.best-voyeur.info
              127.0.0.1 best-voyeur.info
              127.0.0.1 bestweblinks.com
              127.0.0.1 best-winning-casino.com
              127.0.0.1 bestworldgirls-for-u.net
              127.0.0.1 www.bestworldgirls-for-u.net
              127.0.0.1 bestxclips.com
              127.0.0.1 www.bestxclips.com
              127.0.0.1 bettersearch.biz
              127.0.0.1 www.bettersearch.biz
              127.0.0.1 bgazzetta.it
              127.0.0.1 www.bgazzetta.it
              127.0.0.1 www.bgoogle.it
              127.0.0.1 bgoogle.it
              127.0.0.1 bigtrafficnetwork.com
              127.0.0.1 www.bigtrafficnetwork.com
              127.0.0.1 www.bigwww.com
              127.0.0.1 bigwww.com
              127.0.0.1 bin.errorprotector.com
              127.0.0.1 bins.media-motor.net
              127.0.0.1 bins2.media-motor.net
              127.0.0.1 bis.180solutions.com
              127.0.0.1 bitchesonline.net
              127.0.0.1 www.bitcomet-freebie.com
              127.0.0.1 bitcomet-freebie.com
              127.0.0.1 bittorrent.click-new-download.com
              127.0.0.1 www.bittorrent.click-new-download.com
              127.0.0.1 biz.biz
              127.0.0.1 www.bkvcompany.com
              127.0.0.1 bkvcompany.com
              127.0.0.1 www.blackblues00.com
              127.0.0.1 blackblues00.com
              127.0.0.1 www.blackcodec.com
              127.0.0.1 blackcodec.com
              127.0.0.1 www.blackcodec.net
              127.0.0.1 blackcodec.net
              127.0.0.1 www.blackhats.tc
              127.0.0.1 blackhats.tc
              127.0.0.1 www.blackhawksoftware.com
              127.0.0.1 blackhawksoftware.com
              127.0.0.1 blackjack-free.net
              127.0.0.1 blacklegion.info
              127.0.0.1 www.blacklegion.info
              127.0.0.1 blazefind.com
              127.0.0.1 blender.xu.pl
              127.0.0.1 www.blockcheckercontrol.com
              127.0.0.1 blockcheckercontrol.com
              127.0.0.1 blondetgp.com
              127.0.0.1 www.blue-elefant.com
              127.0.0.1 blue-elefant.com
              127.0.0.1 www.bm.theaimonline.com
              127.0.0.1 bm.theaimonline.com
              127.0.0.1 www.bnmgate.com
              127.0.0.1 bnmgate.com
              127.0.0.1 bodaciousbabette.com
              127.0.0.1 www.bonzi.com
              127.0.0.1 bonzi.com
              127.0.0.1 www.bookedspace.com
              127.0.0.1 bookedspace.com
              127.0.0.1 www.boom.com.vn
              127.0.0.1 boom.com.vn
              127.0.0.1 boredlife.com
              127.0.0.1 bowlofogumbo.com
              127.0.0.1 bpfq02.com
              127.0.0.1 www.bpfq02.com
              127.0.0.1 bqgate.com
              127.0.0.1 www.bqgate.com
              127.0.0.1 br.errorsafe.com
              127.0.0.1 br.winantivirus.com
              127.0.0.1 br.winfixer.com
              127.0.0.1 bradcoem.org
              127.0.0.1 braincodec.com
              127.0.0.1 www.braincodec.com
              127.0.0.1 brandiyoung.com
              127.0.0.1 www.bravesentry.com
              127.0.0.1 bravesentry.com
              127.0.0.1 www.breenten.biz
              127.0.0.1 breenten.biz
              127.0.0.1 www.brodbfm.net
              127.0.0.1 brodbfm.net
              127.0.0.1 brookeburn.com
              127.0.0.1 browserwise.com
              127.0.0.1 www.browserwise.com
              127.0.0.1 bsa.safetydownload.com
              127.0.0.1 www.bsplaycodec.com
              127.0.0.1 bsplaycodec.com
              127.0.0.1 bucps.com
              127.0.0.1 buhartes.info
              127.0.0.1 buldog-stats.com
              127.0.0.1 www.bullseye-network.com
              127.0.0.1 bullseye-network.com
              127.0.0.1 burgerkingbigscreen.com
              127.0.0.1 www.burningsite.com
              127.0.0.1 burningsite.com
              127.0.0.1 burnsrecyclinginc.com
              127.0.0.1 www.burnsrecyclinginc.com
              127.0.0.1 buscards.net
              127.0.0.1 bustyrussell.com
              127.0.0.1 www.busysearch.net
              127.0.0.1 busysearch.net
              127.0.0.1 buttejazz.org
              127.0.0.1 www.buy-find.info
              127.0.0.1 buy-find.info
              127.0.0.1 buyselldomain.net
              127.0.0.1 www.buytraff.biz
              127.0.0.1 buytraff.biz
              127.0.0.1 buz.ru
              127.0.0.1 www.bvdtechinque.com
              127.0.0.1 bvdtechinque.com
              127.0.0.1 bvirgilio.it
              127.0.0.1 www.bvirgilio.it
              127.0.0.1 c.centralmedia.ws
              127.0.0.1 c.enhance.com
              127.0.0.1 www.c.enhance.com
              127.0.0.1 c.goclick.com
              127.0.0.1 www.c4tdownload.com
              127.0.0.1 c4tdownload.com
              127.0.0.1 www.c5.www4free.info
              127.0.0.1 c5.www4free.info
              127.0.0.1 www.cache.surfaccuracy.com
              127.0.0.1 cache.surfaccuracy.com
              127.0.0.1 cache.ysbweb.com
              127.0.0.1 www.cadesfinjeriokas.com
              127.0.0.1 cadesfinjeriokas.com
              127.0.0.1 calcioturris.com
              127.0.0.1 calendaralerts.net
              127.0.0.1 www.calendaralerts.net
              127.0.0.1 callinghome.biz
              127.0.0.1 www.callinghome.biz
              127.0.0.1 www.cameouk.co.uk
              127.0.0.1 cameouk.co.uk
              127.0.0.1 cameup.com
              127.0.0.1 www.camouflageclothingonline.net
              127.0.0.1 camouflageclothingonline.net
              127.0.0.1 campaigns.outerinfo.net
              127.0.0.1 camup.net
              127.0.0.1 canberracricketcoaching.com
              127.0.0.1 candycantaloupes.com
              127.0.0.1 www.canidetect.org
              127.0.0.1 canidetect.org
              127.0.0.1 cantfind.com
              127.0.0.1 www.cantfind.com
              127.0.0.1 careers.dulcineasystems.net
              127.0.0.1 carsands.com
              127.0.0.1 carsrentals.net
              127.0.0.1 cartoes.uol.com.br
              127.0.0.1 www.casalemedia.com
              127.0.0.1 casalemedia.com
              127.0.0.1 www.cashdeluxe.net
              127.0.0.1 cashdeluxe.net
              127.0.0.1 cashengines.com
              127.0.0.1 www.cashengines.com
              127.0.0.1 cashsearch.biz
              127.0.0.1 www.cashsurfers.com
              127.0.0.1 cashsurfers.com
              127.0.0.1 www.CashUnlim.com
              127.0.0.1 CashUnlim.com
              127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
              127.0.0.1 casino2win.net
              127.0.0.1 casino-gambling-1.net
              127.0.0.1 casino-gambling-2.net
              127.0.0.1 casinomidas.net
              127.0.0.1 casinonline.net
              127.0.0.1 casino-onlines.net
              127.0.0.1 castingsamateur.com
              127.0.0.1 www.castingsamateur.com
              127.0.0.1 catallogue.com
              127.0.0.1 www.catch-dc.info
              127.0.0.1 catch-dc.info
              127.0.0.1 categories.mygeek.com
              127.0.0.1 catsss.da.ru
              127.0.0.1 caxa.ru
              127.0.0.1 cc.panet.org
              127.0.0.1 www.ccecaedbebfcaf.com
              127.0.0.1 ccecaedbebfcaf.com
              127.0.0.1 cclebali.org
              127.0.0.1 www.ccorriere.it
              127.0.0.1 ccorriere.it
              127.0.0.1 www.cdcopysite.com
              127.0.0.1 cdcopysite.com
              127.0.0.1 www.cdegate.com
              127.0.0.1 cdegate.com
              127.0.0.1 cdn.drivecleaner.com
              127.0.0.1 cdn.errorsafe.com
              127.0.0.1 cdn.movies-etc.com
              127.0.0.1 cdn.winsoftware.com
              127.0.0.1 cdn2.movies-etc.com
              127.0.0.1 cdorriere.it
              127.0.0.1 www.cdorriere.it
              127.0.0.1 ceewawires.org
              127.0.0.1 centralmedia.ws
              127.0.0.1 certumgroup.com
              127.0.0.1 www.cforriere.it
              127.0.0.1 cforriere.it
              127.0.0.1 www.check.jupitersatellites.biz
              127.0.0.1 check.jupitersatellites.biz
              127.0.0.1 www.checkin100.com
              127.0.0.1 checkin100.com
              127.0.0.1 www.checkssecurity.com
              127.0.0.1 checkssecurity.com
              127.0.0.1 chelancatering.com
              127.0.0.1 chenshijituan.com
              127.0.0.1 www.chenshijituan.com
              127.0.0.1 childrenvilla.com
              127.0.0.1 chilly3xvids.com
              127.0.0.1 www.chilly3xvids.com
              127.0.0.1 chillymovs.com
              127.0.0.1 www.chillymovs.com
              127.0.0.1 chips-4-free.com
              127.0.0.1 chrisswasey.com
              127.0.0.1 chriswallace.net
              127.0.0.1 www.cia-trjn.myvnc.com
              127.0.0.1 cia-trjn.myvnc.com
              127.0.0.1 www.cinemadownload.com
              127.0.0.1 cinemadownload.com
              127.0.0.1 www.ciorriere.it
              127.0.0.1 ciorriere.it
              127.0.0.1 www.cirriere.it
              127.0.0.1 cirriere.it
              127.0.0.1 www.citycodec.com
              127.0.0.1 citycodec.com
              127.0.0.1 ckick4thumbs.com
              127.0.0.1 cl55.biz
              127.0.0.1 clackamasliteraryreview.com
              127.0.0.1 clckm.com
              127.0.0.1 www.clckm.com
              127.0.0.1 cleancodec.com
              127.0.0.1 www.cleancodec.com
              127.0.0.1 cleansoftwares.com
              127.0.0.1 www.cleansoftwares.com
              127.0.0.1 clearsearch.cc
              127.0.0.1 clearsearch.net
              127.0.0.1 clickaire.com
              127.0.0.1 click-codec.com
              127.0.0.1 www.click-codec.com
              127.0.0.1 www.clickhere4search.com
              127.0.0.1 clickhere4search.com
              127.0.0.1 www.click-new-download.com
              127.0.0.1 click-new-download.com
              127.0.0.1 click-now.net
              127.0.0.1 www.clickspring.net
              127.0.0.1 clickspring.net
              127.0.0.1 click-to-download.com
              127.0.0.1 www.click-to-download.com
              127.0.0.1 www.clicktomakeasearch.com
              127.0.0.1 clicktomakeasearch.com
              127.0.0.1 clickyestoenter.net
              127.0.0.1 client.exeupdate.com
              127.0.0.1 www.cliks.org
              127.0.0.1 cliks.org
              127.0.0.1 www.clipsfestival.com
              127.0.0.1 clipsfestival.com
              127.0.0.1 www.clipsreality.com
              127.0.0.1 clipsreality.com
              127.0.0.1 www.clorriere.it
              127.0.0.1 clorriere.it
              127.0.0.1 clrsch.com
              127.0.0.1 clusif.free.fr
              127.0.0.1 cmtapestry.com
              127.0.0.1 www.cnetadd.com
              127.0.0.1 cnetadd.com
              127.0.0.1 www.cnomy.com
              127.0.0.1 cnomy.com
              127.0.0.1 www.cnzz.com
              127.0.0.1 cnzz.com
              127.0.0.1 code.ignphrases.com
              127.0.0.1 codec.ninoa.com
              127.0.0.1 www.codecbsplay.com
              127.0.0.1 codecbsplay.com
              127.0.0.1 www.codecdvd.net
              127.0.0.1 codecdvd.net
              127.0.0.1 codecdvi.com
              127.0.0.1 www.codecdvi.com
              127.0.0.1 www.codec-fun.com
              127.0.0.1 codec-fun.com
              127.0.0.1 www.codechard.com
              127.0.0.1 codechard.com
              127.0.0.1 www.codechot.net
              127.0.0.1 codechot.net
              127.0.0.1 codechq.net
              127.0.0.1 www.codechq.net
              127.0.0.1 codecmeg.net
              127.0.0.1 www.codecmeg.net
              127.0.0.1 www.codecmega.net
              127.0.0.1 codecmega.net
              127.0.0.1 www.codecmoon.com
              127.0.0.1 codecmoon.com
              127.0.0.1 www.codecmpg.com
              127.0.0.1 codecmpg.com
              127.0.0.1 www.codecnice.net
              127.0.0.1 codecnice.net
              127.0.0.1 www.codecops.net
              127.0.0.1 codecops.net
              127.0.0.1 www.codecplay.com
              127.0.0.1 codecplay.com
              127.0.0.1 www.codecpretty.net
              127.0.0.1 codecpretty.net
              127.0.0.1 codecpro.net
              127.0.0.1 www.codecpro.net
              127.0.0.1 www.codecsoft.net
              127.0.0.1 codecsoft.net
              127.0.0.1 www.codectime.com
              127.0.0.1 codectime.com
              127.0.0.1 www.codecultra.net
              127.0.0.1 codecultra.net
              127.0.0.1 codecvids.com
              127.0.0.1 www.codecvids.com
              127.0.0.1 www.codecvip.com
              127.0.0.1 codecvip.com
              127.0.0.1 www.codecviva.com
              127.0.0.1 codecviva.com
              127.0.0.1 www.codeczang.net
              127.0.0.1 codeczang.net
              127.0.0.1 www.codrriere.it
              127.0.0.1 codrriere.it
              127.0.0.1 www.coeriere.it
              127.0.0.1 coeriere.it
              127.0.0.1 www.coerriere.it
              127.0.0.1 coerriere.it
              127.0.0.1 www.cofrriere.it
              127.0.0.1 cofrriere.it
              127.0.0.1 cogrriere.it
              127.0.0.1 www.cogrriere.it
              127.0.0.1 coirriere.it
              127.0.0.1 www.coirriere.it
              127.0.0.1 command.adservs.com
              127.0.0.1 www.commonname.com
              127.0.0.1 www.computerpcgames.net
              127.0.0.1 computerpcgames.net
              127.0.0.1 www.computerrecover.com
              127.0.0.1 computerrecover.com
              127.0.0.1 config.180solutions.com
              127.0.0.1 www.content.dollarrevenue.com
              127.0.0.1 content.dollarrevenue.com
              127.0.0.1 www.content.ireit.com
              127.0.0.1 content.ireit.com
              127.0.0.1 content.onerateld.com
              127.0.0.1 www.contentmatch.net
              127.0.0.1 contentmatch.net
              127.0.0.1 www.contextplus.net
              127.0.0.1 contextplus.net
              127.0.0.1 contra-virus.com
              127.0.0.1 www.contra-virus.com
              127.0.0.1 controlmeh.com
              127.0.0.1 www.controlmeh.com
              127.0.0.1 convenient-search.com
              127.0.0.1 www.convenient-search.com
              127.0.0.1 cookingluck.com
              127.0.0.1 www.cookingluck.com
              127.0.0.1 cooldeskalert.com
              127.0.0.1 www.cooldeskalert.com
              127.0.0.1 coolfetishsite.com
              127.0.0.1 coolfreehost.com
              127.0.0.1 coolfreepage.com
              127.0.0.1 coolfreepages.com
              127.0.0.1 cool-homepage.co
              127.0.0.1 cool-homepage.com
              127.0.0.1 coolmoneysearch.com
              127.0.0.1 cool-search.netfartpost.com
              127.0.0.1 coolsearcher.info
              127.0.0.1 www.coolservecorp.net
              127.0.0.1 coolservecorp.net
              127.0.0.1 www.coolwebsearch.com
              127.0.0.1 coolwebsearch.com
              127.0.0.1 cool-web-search.com
              127.0.0.1 coolwebsearsh.com
              127.0.0.1 www.coolwwwsearch.com
              127.0.0.1 coolwwwsearch.com
              127.0.0.1 www.coorriere.it
              127.0.0.1 coorriere.it
              127.0.0.1 copmtraine.com
              127.0.0.1 www.coprriere.it
              127.0.0.1 coprriere.it
              127.0.0.1 www.core.psyche-evolution.com
              127.0.0.1 core.psyche-evolution.com
              127.0.0.1 www.coreiere.it
              127.0.0.1 coreiere.it
              127.0.0.1 www.coreriere.it
              127.0.0.1 coreriere.it
              127.0.0.1 www.corrdiere.it
              127.0.0.1 corrdiere.it
              127.0.0.1 www.correiere.it
              127.0.0.1 correiere.it
              127.0.0.1 www.corrfiere.it
              127.0.0.1 corrfiere.it
              127.0.0.1 www.corrgiere.it
              127.0.0.1 corrgiere.it
              127.0.0.1 www.corridere.it
              127.0.0.1 corridere.it
              127.0.0.1 www.corriedre.it
              127.0.0.1 corriedre.it
              127.0.0.1 www.corriee.it
              127.0.0.1 corriee.it
              127.0.0.1 www.corrieere.it
              127.0.0.1 corrieere.it
              127.0.0.1 www.corriefre.it
              127.0.0.1 corriefre.it
              127.0.0.1 www.corriegre.it
              127.0.0.1 corriegre.it
              127.0.0.1 www.corrierde.it
              127.0.0.1 corrierde.it
              127.0.0.1 www.corriered.it
              127.0.0.1 corriered.it
              127.0.0.1 www.corrieree.it
              127.0.0.1 corrieree.it
              127.0.0.1 www.corrieref.it
              127.0.0.1 corrieref.it
              127.0.0.1 www.corrierer.it
              127.0.0.1 corrierer.it
              127.0.0.1 www.corrieres.it
              127.0.0.1 corrieres.it
              127.0.0.1 www.corrierew.it
              127.0.0.1 corrierew.it
              127.0.0.1 www.corrierfe.it
              127.0.0.1 corrierfe.it
              127.0.0.1 www.corrierge.it
              127.0.0.1 corrierge.it
              127.0.0.1 corrierr.it
              127.0.0.1 www.corrierr.it
              127.0.0.1 www.corrierre.it
              127.0.0.1 corrierre.it
              127.0.0.1 www.corrierse.it
              127.0.0.1 corrierse.it
              127.0.0.1 www.corrierte.it
              127.0.0.1 corrierte.it
              127.0.0.1 www.corrierw.it
              127.0.0.1 corrierw.it
              127.0.0.1 www.corrierwe.it
              127.0.0.1 corrierwe.it
              127.0.0.1 www.corriesre.it
              127.0.0.1 corriesre.it
              127.0.0.1 www.corriete.it
              127.0.0.1 corriete.it
              127.0.0.1 corrietre.it
              127.0.0.1 www.corrietre.it
              127.0.0.1 www.corriewre.it
              127.0.0.1 corriewre.it
              127.0.0.1 www.corrifere.it
              127.0.0.1 corrifere.it
              127.0.0.1 www.corriiere.it
              127.0.0.1 corriiere.it
              127.0.0.1 corrilere.it
              127.0.0.1 www.corrilere.it
              127.0.0.1 www.corrioere.it
              127.0.0.1 corrioere.it
              127.0.0.1 www.corrire.it
              127.0.0.1 corrire.it
              127.0.0.1 www.corrirere.it
              127.0.0.1 corrirere.it
              127.0.0.1 www.corrirre.it
              127.0.0.1 corrirre.it
              127.0.0.1 corrisere.it
              127.0.0.1 www.corrisere.it
              127.0.0.1 www.corriuere.it
              127.0.0.1 corriuere.it
              127.0.0.1 www.corriwere.it
              127.0.0.1 corriwere.it
              127.0.0.1 www.corriwre.it
              127.0.0.1 corriwre.it
              127.0.0.1 www.corrliere.it
              127.0.0.1 corrliere.it
              127.0.0.1 www.corroere.it
              127.0.0.1 corroere.it
              127.0.0.1 www.corroiere.it
              127.0.0.1 corroiere.it
              127.0.0.1 www.corrriere.it
              127.0.0.1 corrriere.it
              127.0.0.1 www.corrtiere.it
              127.0.0.1 corrtiere.it
              127.0.0.1 corruere.it
              127.0.0.1 www.corruere.it
              127.0.0.1 corruiere.it
              127.0.0.1 www.corruiere.it
              127.0.0.1 cortiere.it
              127.0.0.1 www.cortiere.it
              127.0.0.1 www.cortriere.it
              127.0.0.1 cortriere.it
              127.0.0.1 costrike.com
              127.0.0.1 www.costrike.com
              127.0.0.1 www.cotriere.it
              127.0.0.1 cotriere.it
              127.0.0.1 cotrriere.it
              127.0.0.1 www.cotrriere.it
              127.0.0.1 couldnotfind.com
              127.0.0.1 count.cc
              127.0.0.1 count.hitscount.net
              127.0.0.1 count-all.com
              127.0.0.1 www.countdutycall.info
              127.0.0.1 countdutycall.info
              127.0.0.1 courtrecordslookup.com
              127.0.0.1 www.courtrecordslookup.com
              127.0.0.1 cporriere.it
              127.0.0.1 www.cporriere.it
              127.0.0.1 www.cprriere.it
              127.0.0.1 cprriere.it
              127.0.0.1 cpvfeed.com
              127.0.0.1 cracks.me.uk
              127.0.0.1 www.cracks4all.com
              127.0.0.1 cracks4all.com
              127.0.0.1 www.crapsgold.info
              127.0.0.1 crapsgold.info
              127.0.0.1 Crazygirls-world.com
              127.0.0.1 www.crazywinnings.com
              127.0.0.1 crazywinnings.com
              127.0.0.1 creamedcutties.com
              127.0.0.1 www.createaccesskey.com
              127.0.0.1 createaccesskey.com
              127.0.0.1 www.creatonsoft.com
              127.0.0.1 creatonsoft.com
              127.0.0.1 creditsearchonline.com
              127.0.0.1 crestring.com
              127.0.0.1 crooder.com
              127.0.0.1 www.crriere.it
              127.0.0.1 crriere.it
              127.0.0.1 www.cryptdrive.com
              127.0.0.1 cryptdrive.com
              127.0.0.1 crystalysmedia.com
              127.0.0.1 www.crystalysmedia.com
              127.0.0.1 www.csx.adservs.com
              127.0.0.1 csx.adservs.com
              127.0.0.1 cts.180solutions.com
              127.0.0.1 www.cuisinartoven.com
              127.0.0.1 cuisinartoven.com
              127.0.0.1 www.curedc.info
              127.0.0.1 curedc.info
              127.0.0.1 curepcsolutions.com
              127.0.0.1 www.curepcsolutions.com
              127.0.0.1 curvedspaces.com
              127.0.0.1 cvirgilio.it
              127.0.0.1 www.cvirgilio.it
              127.0.0.1 www.cvorriere.it
              127.0.0.1 cvorriere.it
              127.0.0.1 cvs.jps.ru
              127.0.0.1 cvsymphony.com
              127.0.0.1 cxorriere.it
              127.0.0.1 www.cxorriere.it
              127.0.0.1 www.cyberrape.com
              127.0.0.1 cyberrape.com
              127.0.0.1 cydom.com
              127.0.0.1 www.cydoor.com
              127.0.0.1 cydoor.com
              127.0.0.1 daily3xlinks.com
              127.0.0.1 www.daily3xlinks.com
              127.0.0.1 www.dailybestclips.com
              127.0.0.1 dailybestclips.com
              127.0.0.1 daily-gals.com
              127.0.0.1 dailyhugemovs.com
              127.0.0.1 www.dailyhugemovs.com
              127.0.0.1 www.dailykeys.com
              127.0.0.1 dailykeys.com
              127.0.0.1 dancingbabycd.com
              127.0.0.1 dapsol.com
              127.0.0.1 www.dapsol.com
              127.0.0.1 www.dapsolution.com
              127.0.0.1 dapsolution.com
              127.0.0.1 data-hoster.com
              127.0.0.1 www.data-hoster.com
              127.0.0.1 datanotary.com
              127.0.0.1 datareco.com
              127.0.0.1 dateanybabe.com
              127.0.0.1 www.dateanybabe.com
              127.0.0.1 dateanychick.com
              127.0.0.1 www.dateanychick.com
              127.0.0.1 www.datingdoctorsite.com
              127.0.0.1 datingdoctorsite.com
              127.0.0.1 www.dating-galaxy.info
              127.0.0.1 dating-galaxy.info
              127.0.0.1 dating-search.net
              127.0.0.1 davemarshall.org
              127.0.0.1 db105.com
              127.0.0.1 www.dbdecicated.com
              127.0.0.1 dbdecicated.com
              127.0.0.1 dbxcompany.com
              127.0.0.1 www.dbxcompany.com
              127.0.0.1 dcdl.dmcast.com
              127.0.0.1 dcfitusa.com
              127.0.0.1 dcorriere.it
              127.0.0.1 www.dcorriere.it
              127.0.0.1 www.dcurtis.com
              127.0.0.1 dcurtis.com
              127.0.0.1 dcww.dmcast.com
              127.0.0.1 de.ag
              127.0.0.1 de.drivecleaner.com
              127.0.0.1 de.errorsafe.com
              127.0.0.1 de.winantivirus.com
              127.0.0.1 de98.remsys.org
              127.0.0.1 www.debay.it
              127.0.0.1 debay.it
              127.0.0.1 www.decknews.com
              127.0.0.1 decknews.com
              127.0.0.1 dedmazay.3322.org
              127.0.0.1 dedsearch.com
              127.0.0.1 www.dedsearch.com
              127.0.0.1 defaultsearch.net
              127.0.0.1 Defensaantimalware.com
              127.0.0.1 www.Defensaantimalware.com
              127.0.0.1 www.deja-rue.com
              127.0.0.1 deja-rue.com
              127.0.0.1 www.delficodec.com
              127.0.0.1 delficodec.com
              127.0.0.1 www.democodec.com
              127.0.0.1 democodec.com
              127.0.0.1 www.derklaif.biz
              127.0.0.1 derklaif.biz
              127.0.0.1 www.derrari.it
              127.0.0.1 derrari.it
              127.0.0.1 desarrollocreativo.com
              127.0.0.1 www.deskbar.worldtostart.com
              127.0.0.1 deskbar.worldtostart.com
              127.0.0.1 www.deskwizz.com
              127.0.0.1 deskwizz.com
              127.0.0.1 www.destruktor.to.pl
              127.0.0.1 destruktor.to.pl
              127.0.0.1 www.detectivehound.com
              127.0.0.1 detectivehound.com
              127.0.0.1 www.detectivesearches.com
              127.0.0.1 detectivesearches.com
              127.0.0.1 dev.ntcor.com
              127.0.0.1 develip.com
              127.0.0.1 dewis.spb.ru
              127.0.0.1 dewis.us
              127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
              127.0.0.1 www.dgbusiness.com
              127.0.0.1 dgbusiness.com
              127.0.0.1 dialer2004.com
              127.0.0.1 www.dialerclub.com
              127.0.0.1 dialerclub.com
              127.0.0.1 www.dialer-shop.com
              127.0.0.1 dialer-shop.com
              127.0.0.1 www.dialoff.com
              127.0.0.1 dialoff.com
              127.0.0.1 did.i-used.cc
              127.0.0.1 www.did.i-used.cc
              127.0.0.1 dietpills4free.com
              127.0.0.1 dietpussy.com
              127.0.0.1 www.digikeygen.com
              127.0.0.1 digikeygen.com
              127.0.0.1 digistreamsa.com
              127.0.0.1 www.digitalcoders.net
              127.0.0.1 digitalcoders.net
              127.0.0.1 www.digitalfan.com
              127.0.0.1 dionforvalleycouncil.org
              127.0.0.1 www.directdvdpro.com
              127.0.0.1 directdvdpro.com
              127.0.0.1 www.directporta.info
              127.0.0.1 directporta.info
              127.0.0.1 directsearchzone.com
              127.0.0.1 www.directsearchzone.com
              127.0.0.1 diskretter.com
              127.0.0.1 www.diskretter.com
              127.0.0.1 dist.checkin100.com
              127.0.0.1 dl.ad-ware.cc
              127.0.0.1 dl.malwarewipe.com
              127.0.0.1 dl.mcboo.com
              127.0.0.1 dl.targetsaver.com
              127.0.0.1 www.dl.targetsaver.com
              127.0.0.1 dl.web-nexus.net
              127.0.0.1 dl1.antivermins.com
              127.0.0.1 dl1.antivirgear.com
              127.0.0.1 dl1.spydawn.com
              127.0.0.1 dl1.virusprotectpro.com
              127.0.0.1 dl10.spyfalcon.com
              127.0.0.1 dl16.spyfalcon.com
              127.0.0.1 dl2.spyfalcon.com
              127.0.0.1 dl2.spyheal.com
              127.0.0.1 dl2.spywarestrike.com
              127.0.0.1 dl3.spyfalcon.com
              127.0.0.1 dl3.spyheal.com
              127.0.0.1 dl3.spywarestrike.com
              127.0.0.1 dl4.spyfalcon.com
              127.0.0.1 dl4.spywarestrike.com
              127.0.0.1 dl5.spyfalcon.com
              127.0.0.1 dl5.spywarestrike.com
              127.0.0.1 dl6.spywarestrike.com
              127.0.0.1 dl7.spywarestrike.com
              127.0.0.1 dl8.spyheal.com
              127.0.0.1 dl8.spywarestrike.com
              127.0.0.1 dl9.spyfalcon.com
          2. dou-l
            non c'est normal !

            Alors fais ceci stp :
            > Télécharge Zeb-Restore : http://telechargement.zebulon.fr/zeb-restore.html
            - Mets le dans un dossier, sur ton bureau par exemple.
            - Lance Zebrestore et coche la/les case(s) suivante(s) :

            Réinitialiser Fichier Hosts

            - Ne coche que la/les case(s) indiquée(s).
            - Clique sur le bouton Restaurer.
            - Quitte le programme puis renvoie un log HiJack,

            Ensuite,

            Dit tes soucis et poste un nouveau hijackthis

            A+
            1. Trevarec
              Voilà le dernier rapport HiJackThis

              Logfile of Trend Micro HijackThis v2.0.2
              Scan saved at 12:07:22, on 28/06/2008
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
              Boot mode: Normal

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
              C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
              C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              C:\Program Files\Alwil Software\Avast4\ashServ.exe
              C:\WINDOWS\system32\spoolsv.exe
              C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
              C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              C:\Program Files\Autodesk\Data Management Server 2008\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe
              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
              C:\Program Files\Wave Systems Corp\Common\DataServer.exe
              C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
              C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
              C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
              C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
              C:\Program Files\F-Secure\Common\FSMA32.EXE
              C:\Program Files\F-Secure\Common\FSMB32.EXE
              C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
              C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
              C:\WINDOWS\system32\nvsvc32.exe
              C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
              C:\Program Files\F-Secure\Common\FCH32.EXE
              C:\WINDOWS\system32\siclt32.exe
              C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
              C:\WINDOWS\System32\PAStiSvc.exe
              C:\WINDOWS\system32\svchost.exe
              C:\Program Files\F-Secure\Common\FAMEH32.EXE
              C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
              C:\WINDOWS\Explorer.EXE
              C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
              C:\Program Files\NTRU Cryptosystems\NTRU Hybrid TSS v2.0.25\bin\tcsd_win32.exe
              C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
              C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
              C:\WINDOWS\system32\SearchIndexer.exe
              C:\Program Files\Apoint\Apoint.exe
              C:\WINDOWS\system32\rundll32.exe
              C:\Program Files\Apoint\HidFind.exe
              C:\Program Files\Apoint\Apntex.exe
              C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
              C:\WINDOWS\stsystra.exe
              C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\docmgr.exe
              C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
              C:\WINDOWS\system32\ICO.EXE
              C:\WINDOWS\system32\Pmxmiced.exe
              C:\Program Files\Dell\QuickSet\quickset.exe
              C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
              C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
              C:\WINDOWS\System32\DLA\DLACTRLW.EXE
              C:\Program Files\F-Secure\Common\FNRB32.EXE
              C:\WINDOWS\system32\wuauclt.exe
              C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
              C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
              C:\Program Files\F-Secure\Common\FIH32.EXE
              C:\Program Files\F-Secure\Common\FSM32.EXE
              C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
              C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
              C:\Program Files\Logitech\QuickCam\Quickcam.exe
              C:\Program Files\F-Secure\FSGUI\fsguidll.exe
              C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
              C:\Program Files\iTunes\iTunesHelper.exe
              C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
              C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              C:\WINDOWS\system32\SearchProtocolHost.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
              C:\WINDOWS\system32\ieupdates.exe
              C:\Program Files\iPod\bin\iPodService.exe
              C:\Program Files\Harrap's Multimédia\Shorter\bin\HiHarrapsTray.exe
              C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
              C:\Program Files\Digital Line Detect\DLG.exe
              C:\Program Files\Wave Systems Corp\Services Manager\Secure Update\AutoUpdate.exe
              C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
              C:\Program Files\KirysTech2k\FastNote\kfn.exe
              C:\Program Files\Windows Desktop Search\WindowsSearch.exe
              C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
              C:\Documents and Settings\ldussud\Bureau\ZR_1.0.0.37\Zeb-Restore.exe
              C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row-rel&channel=fr&ibd=0070406
              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.dell.com/fr-fr?c=fr&l=fr&s=gen&redirect=1
              R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row-rel&channel=fr&ibd=0070406
              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
              O2 - BHO: (no name) - {037C7B8A-151A-49E6-BAED-CC05FCB50328} - (no file)
              O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
              O2 - BHO: Media Holding Enterprises, LLC - {0D39A900-0F3A-4C29-A254-3E65244FDC34} - (no file)
              O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
              O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
              O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
              O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
              O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
              O3 - Toolbar: (no name) - {F053C368-5458-45B2-9B4D-D8914BDDDBFF} - (no file)
              O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
              O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
              O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
              O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
              O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
              O4 - HKLM\..\Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start
              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
              O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
              O4 - HKLM\..\Run: [Document Manager] C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\docmgr.exe
              O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
              O4 - HKLM\..\Run: [PMX Daemon] ICO.EXE
              O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
              O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
              O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
              O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
              O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
              O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
              O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
              O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
              O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
              O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
              O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
              O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
              O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
              O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
              O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
              O4 - HKCU\..\Run: [Videos] "C:\Program Files\laughnetwork\update.exe" /background
              O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
              O4 - HKCU\..\Run: [ieupdate] "C:\WINDOWS\system32\ieupdates.exe"
              O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
              O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
              O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
              O4 - Global Startup: Ask Harrap's Shorter.lnk = ?
              O4 - Global Startup: Assistant d'Acrobat.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
              O4 - Global Startup: Digital Line Detect.lnk = ?
              O4 - Global Startup: EMBASSY Trust Suite Secure Update.lnk = C:\Program Files\Wave Systems Corp\Services Manager\Secure Update\AutoUpdate.exe
              O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
              O4 - Global Startup: Fast Note.lnk = C:\Program Files\KirysTech2k\FastNote\kfn.exe
              O4 - Global Startup: HOTSYNCSHORTCUTNAME.lnk = C:\Program Files\Palm\Hotsync.exe
              O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
              O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
              O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
              O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
              O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
              O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?712be9afcca74c6b8e473c4625813244
              O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?712be9afcca74c6b8e473c4625813244
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
              O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
              O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O16 - DPF: {0533AC04-11E3-48CA-A167-40D782C6BD1C} (FileTransferControl2 Class) - http://ntnse-advitium/Advitium/ActiveX/FileTransfer2.cab
              O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
              O16 - DPF: {493EBD8D-8D67-4A2D-8CF9-B8FC992DCFF6} (ProcessViewer Class) - http://ntnse-advitium/Advitium/ActiveX/ProcessViewer.cab
              O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
              O16 - DPF: {6A5C26E3-5A0C-436D-B417-CB4735EC63A6} (FilePreparationControl Class) - http://ntnse-advitium/Advitium/ActiveX/RemoteServerControl.cab
              O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (Contrôle d'AcDcToday) - file://C:\Program Files\AutoCAD 2002 Fra\AcDcToday.ocx
              O16 - DPF: {83A9C1DD-8FEA-4F03-8E62-15CEDE65FF31} (PrintFilesControl Class) - http://ntnse-advitium/Advitium/ActiveX/NetworkPrintingClient.cab
              O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (Gestion d'AcPreview) - file://C:\Program Files\AutoCAD 2002 Fra\AcPreview.ocx
              O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = ifremer.fr
              O17 - HKLM\Software\..\Telephony: DomainName = ifremer.fr
              O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = ifremer.fr
              O20 - AppInit_DLLs: wxvault.dll C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
              O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              O23 - Service: Autodesk Data Management Job Dispatch - Autodesk - C:\Program Files\Autodesk\Data Management Server 2008\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe
              O23 - Service: Autodesk EDM Server - Autodesk - C:\Program Files\Autodesk\Data Management Server 2008\Server\Webserver\Connectivity.EDMWS.Server.exe
              O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
              O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
              O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
              O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
              O23 - Service: DataSvr2 - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Common\DataServer.exe
              O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
              O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
              O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
              O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
              O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
              O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
              O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
              O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
              O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
              O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
              O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
              O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
              O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
              O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
              O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
              O23 - Service: Intranet Server Client (SicltNT) - Apsynet - C:\WINDOWS\SYSTEM32\siclt32.exe
              O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
              O23 - Service: NTRU Hybrid TSS v2.0.25 TCS (tcsd_win32.exe) - Unknown owner - C:\Program Files\NTRU Cryptosystems\NTRU Hybrid TSS v2.0.25\bin\tcsd_win32.exe
              O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
          3. dou-l
            ok

            Fais un scan avec cet antimalware : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

            Telecharge malwarebytes

            Tu l´instale; le programme va se mettre automatiquement a jour.

            Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".

            Click maintenant sur l´onglet recherche et coche la case : "executer un examun complet".

            Puis click sur "rechercher".

            Laisse le scanner le pc...

            Si des elements on ete trouvés > click sur supprimer la selection.

            si il t´es demandé de redemarrer > click sur "yes".

            A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.

            Copie et colle le rapport stp.
            1. Trevarec
              Ci après le rapport MalWarebytes

              Malwarebytes' Anti-Malware 1.18
              Version de la base de données: 897

              14:21:36 28/06/2008
              mbam-log-6-28-2008 (14-21-36).txt

              Type de recherche: Examen complet (C:\|)
              Eléments examinés: 237767
              Temps écoulé: 1 hour(s), 5 minute(s), 12 second(s)

              Processus mémoire infecté(s): 0
              Module(s) mémoire infecté(s): 0
              Clé(s) du Registre infectée(s): 13
              Valeur(s) du Registre infectée(s): 2
              Elément(s) de données du Registre infecté(s): 0
              Dossier(s) infecté(s): 6
              Fichier(s) infecté(s): 19

              Processus mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Module(s) mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Clé(s) du Registre infectée(s):
              HKEY_CLASSES_ROOT\CLSID\{037c7b8a-151a-49e6-baed-cc05fcb50328} (Adware.Search Toolbar) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{037c7b8a-151a-49e6-baed-cc05fcb50328} (Adware.Search Toolbar) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0d39a900-0f3a-4c29-a254-3e65244fdc34} (Adware.PlayaZ) -> Quarantined and deleted successfully.
              \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\contexttool (Adware.PlayaZ) -> Quarantined and deleted successfully.
              \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\playmp3 (Adware.PlayMP3Z) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\MediaHoldings (Adware.PlayMP3Z) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Mirar (AdWare.Mirar) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\PlayMP3 (Adware.PlayMP3Z) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PlayMP3 (Adware.PlayMP3Z) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\FBrowsingAdvisor (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\fbrowsingadvisor_is1 (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\laughnetwork (Hijacker.Searchnut) -> Quarantined and deleted successfully.
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\laughnetwork (Hijacker.Searchnut) -> Quarantined and deleted successfully.

              Valeur(s) du Registre infectée(s):
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ieupdate (Backdoor.Delf) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Videos (Hijacker.Searchnut) -> Quarantined and deleted successfully.

              Elément(s) de données du Registre infecté(s):
              (Aucun élément nuisible détecté)

              Dossier(s) infecté(s):
              C:\Program Files\contexttool (Adware.PlayaZ) -> Quarantined and deleted successfully.
              C:\Program Files\laughnetwork (Hijacker.Searchnut) -> Quarantined and deleted successfully.
              C:\Program Files\laughnetwork\Temp (Hijacker.Searchnut) -> Quarantined and deleted successfully.
              C:\Program Files\FBrowsingAdvisor (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
              C:\Program Files\FBrowserAdvisor (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
              C:\Program Files\PlayMP3z (Adware.PlayMP3Z) -> Quarantined and deleted successfully.

              Fichier(s) infecté(s):
              C:\WINDOWS\system32\ieupdates.exe (Backdoor.Delf) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\winsrc.dll (Adware.Search Toolbar) -> Quarantined and deleted successfully.
              C:\Program Files\FBrowsingAdvisor\XPCOMEvents.dll (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
              C:\Program Files\Mozilla Firefox\regxpcom.exe (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
              C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP316\A0084219.exe (Adware.Mirar) -> Quarantined and deleted successfully.
              C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP316\A0084268.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
              C:\System Volume Information\_restore{340C3340-2EBB-4324-859A-C37E85627171}\RP316\A0084398.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
              C:\Program Files\contexttool\ContextHelper.dat (Adware.PlayaZ) -> Quarantined and deleted successfully.
              C:\Program Files\contexttool\pcre3.dll (Adware.PlayaZ) -> Quarantined and deleted successfully.
              C:\Program Files\contexttool\uninstall.exe (Adware.PlayaZ) -> Quarantined and deleted successfully.
              C:\Program Files\laughnetwork\Uninst.exe (Hijacker.Searchnut) -> Quarantined and deleted successfully.
              C:\Program Files\laughnetwork\update.exe (Hijacker.Searchnut) -> Quarantined and deleted successfully.
              C:\Program Files\laughnetwork\Temp\license.txt (Hijacker.Searchnut) -> Quarantined and deleted successfully.
              C:\Program Files\FBrowsingAdvisor\IXPCOMEvents.xpt (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
              C:\Program Files\FBrowsingAdvisor\Logo.png (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
              C:\Program Files\FBrowsingAdvisor\main.db (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
              C:\Program Files\FBrowsingAdvisor\unins000.dat (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
              C:\Program Files\FBrowsingAdvisor\unins000.exe (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
              C:\Program Files\PlayMP3z\uninstall.exe (Adware.PlayMP3Z) -> Quarantined and deleted successfully.
          4. dou-l
            Ok encore des soucis?
            1. Trevarec
              J'ai remis mon antivirus en résident et je n'ai plus de fenêtre intempestives 'XP antivirus'.
              Merci beaucoup pour cette assistance efficace.
              A+