Infection

Résolu
lucane -  
Bonjour,
J'ai une grosse infection qui ralentie mon PC jusqu'à ne plus pouvoir rien faire et qui m'envahie de fenetres publicitaires.
Si quelqu'un peut m'aider, ce serais super sympas, je précise que je ne connais absolument rien en informatique. j'ai vu qu'il fallait poster un rapport hijackthis alors le voila.
Merci d'avance.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:43:45, on 25/08/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\WINDOWS\System32\cisvc.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\WINDOWS\wanmpsvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\apps\ABoard\ABoard.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\apps\ABoard\AOSD.exe
C:\Program Files\ATnotes\ATnotes.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Labtec\Wireless Mouse\MulMouse.exe
C:\Program Files\Radio Fr Solo\Radio_Fr_Solo.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\All Users\Documents\Avernon Bruno\hjk.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/wdgt3/*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Call HoverToCall class - {7E853D72-626A-48EC-A868-BA8D5E23E045} - C:\Program Files\Windows Live\Messenger\HTC.DLL
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: iFinger plugin / Browser helper object - {A114D52B-870C-4F15-8021-B6D7F91A054B} - C:\PROGRA~1\iFinger\plugins\IE.ifp
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: ImageShack Toolbar - {6932D140-ABC4-4073-A44C-D4A541665E35} - C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE" /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] "rundll32.exe" bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [ATnotes.exe] "C:\Program Files\ATnotes\ATnotes.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logiciel de la Souris Labtec 2.0.lnk = C:\Program Files\Labtec\Wireless Mouse\MulMouse.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Post Image to Blog - res://C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll/5003
O8 - Extra context menu item: Tag This Image - res://C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll/5002
O8 - Extra context menu item: Upload All Images to ImageShack - res://C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll/5000
O8 - Extra context menu item: Upload Image to ImageShack - res://C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll/5001
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: iFinger - {936E5D60-596C-11D3-BB96-00600816DF55} - C:\WINDOWS\System32\SHDOCVW.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O15 - Trusted Zone: http://toolbar.imageshack.us
O15 - Trusted Zone: http://www.secuser.com
O15 - Trusted Zone: http://download.windowsupdate.com
O16 - DPF: PackageHtmlCab - http://acces.blonde.com/package/op/PackageHtmlCab.CAB
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - https://www.cult3d.com/
O16 - DPF: {45E83043-1F6F-4D22-A5E7-0138EA171B49} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fr/filesharingctrl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {6932D140-ABC4-4073-A44C-D4A541665E35} (ImageShack Toolbar) - http://toolbar.imageshack.us/toolbar/ImageShackToolbar.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredimail.com/contents/setup/downloader/imloader.cab
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: SC Test Branding Service 1 - SC Test Branding 1 - C:\Program Files\Fichiers communs\SC Test Branding 1 Shared\Service\SCTestService1.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O24 - Desktop Component 1: (no name) - http://img157.imageshack.us/img157/7664/ad43az8.swf
O24 - Desktop Component 2: (no name) - http://img87.imageshack.us/img87/1678/a2tk1.swf"%20quality="high
O24 - Desktop Component 3: (no name) - http://img118.imageshack.us/img118/2127/a110oa3.swf
O24 - Desktop Component 4: (no name) - http://img254.imageshack.us/img254/3848/jghkghkqi0.swf
O24 - Desktop Component 5: (no name) - http://img72.imageshack.us/img72/5803/anxhorlio4.swf
O24 - Desktop Component 6: (no name) - http://img358.imageshack.us/img358/4193/a140ox7.swf

--
End of file - 12868 bytes
Configuration: Windows XP
Internet Explorer 7.0

14 réponses

Résumé de la discussion

Problème rencontré : une infection importante ralentit fortement l’ordinateur et génère de nombreuses fenêtres publicitaires, d’où la nécessité d’un rapport HijackThis et d’outils de nettoyage pour identifier les nuisances. Des analyses réalisées avec Malwarebytes’ Anti-Malware ont identifié et isolé plusieurs composants malveillants, notamment des adwares et un programme Rogue.MalwareScanner, conduisant à leur quarantaine ou suppression. Le rapport indique également des éléments détectés lors d’autres analyses, notamment des entrées de registre et des modules associant NaviPromo et des outils Google/MSN, susceptibles d’être supprimés ou restreints par la quarantaine. D’autres conseils utiles englobent la vérification des programmes au démarrage et la suppression de composants inconnus pour prévenir une réapparition des fenêtres publicitaires et assurer la stabilité du système.

Bobot (l’IA à votre service)
  1. varfendell
    Bonjour,

    pour commencer:

    télécharge malware sur cette page=>le tutoriel à été fait par VIRUS_KILLER

    A la fin de l'installation, veille à ce que l'option Mettre à jour Malwarebytes' Anti-Malware soit cochée. >>> clique sur "Terminer"
    Lance Malwarebyte's Anti-Malware en double-cliquant sur l'icône sur le bureau.
    Au premier lancement, une fenêtre t'annonce que la version est Free >>> clique sur ok

    Laisse les Mises à jour se télécharger
    *** Referme le programme ***

    Lance Malwarebyte's Anti-Malware
    Onglet "Recherche" >>> coche Exécuter un examen complet >>> Rechercher
    Sélectionne ton disque dur >>> clic sur Lancer l'examen
    Suppression des éléments détectés >>>> clique sur Supprimer la sélection
    Colle le rapport de malwarebytes dans ta réponse
    S'il t'es demandé de redémarrer >>> clique sur "Yes"

    puis:

    télécharge ccleaner (tutoriel ici par VIRUS_KILLER ou en voici un autre)
    passe un bon coup de balais sur ton ordi:
    -effectue plusieurs fois le nettoyage avec le nettoyeur
    -idem avec la fonction registre
    -supprime les programmes au démarrage qui sont inutile.
    0
    1. lucane Auteur
      Rebonjour
      Le lien de malware ouvre sur un forum, j'ai téléchargé malware scaner sur 01 net mais ca ne fonctionne pas quand je le lance, er je suis obligé de fermer avec le gestionnaire des taches qui me dit qu'il n'y à pas de réponse.
      0
      2. lucane
        J'ai fait tout ce que tu as dit, je verrais cet ap midi si ça fonctionne, je te remercie sincèrement et te tien au courant de ce qui ce passe sur ce même post.
        0
        2. lucane
          Je peut te dire tout de suite que c'est pareil, quand j'ai fermé il y avait quatre fenêtra publicitaire ouvertes derrière le forum.
          0
          1. varfendell
            tu as fait l'analyse avec malware? si oui, post le rapport
            0
            1. lucane Auteur
              Malwarebytes' Anti-Malware 1.25
              Version de la base de données: 1087
              Windows 5.1.2600 Service Pack 3

              11:54:22 25/08/2008
              mbam-log-08-25-2008 (11-54-22).txt

              Type de recherche: Examen complet (C:\|)
              Eléments examinés: 138276
              Temps écoulé: 51 minute(s), 32 second(s)

              Processus mémoire infecté(s): 0
              Module(s) mémoire infecté(s): 0
              Clé(s) du Registre infectée(s): 0
              Valeur(s) du Registre infectée(s): 0
              Elément(s) de données du Registre infecté(s): 0
              Dossier(s) infecté(s): 0
              Fichier(s) infecté(s): 4

              Processus mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Module(s) mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Clé(s) du Registre infectée(s):
              (Aucun élément nuisible détecté)

              Valeur(s) du Registre infectée(s):
              (Aucun élément nuisible détecté)

              Elément(s) de données du Registre infecté(s):
              (Aucun élément nuisible détecté)

              Dossier(s) infecté(s):
              (Aucun élément nuisible détecté)

              Fichier(s) infecté(s):
              C:\Documents and Settings\Joël\Mes documents\mws2200.exe (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\Mservice.dll (Adware.EGDAccess) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\wfewoxin_navps.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
              C:\WINDOWS\system32\wfewoxin_nav.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
              0
              1. varfendell
                Bien, maintenant redemmarre en mode sans echec

                * 1/ Redémarrez l’ordinateur. L'ordinateur commence le traitement d'instructions connues sous le nom Basic Input/Output System (BIOS). L'affichage dépend du fabricant du BIOS. Certains ordinateurs affichent une barre de progression faisant référence à BIOS, d'autres peuvent ne pas indiquer le processus en cours de réalisation.
                * 2/ A la fin du chargement du BIOS, commencez à appuyer sur la touche F8 de votre clavier (ou F5 si F8 ne fonctionne pas). Procédez ainsi jusqu'à ce que le menu des options avancées de Windows apparaisse. Si vous commencez à appuyer sur la touche F8 trop tôt, il est possible que certains ordinateurs affichent le message "erreur clavier". Pour résoudre ce problème, redémarrez l'ordinateur et essayez de nouveau.
                * 3/ En utilisant les flèches de votre clavier, sélectionnez "Mode sans échec" dans le menu puis appuyez sur Entrée.

                puis refait un scan avec malware et post le rapport.
                0
                1. lucane
                  Voila..

                  Malwarebytes' Anti-Malware 1.25
                  Version de la base de données: 1087
                  Windows 5.1.2600 Service Pack 3

                  16:26:20 25/08/2008
                  mbam-log-08-25-2008 (16-26-20).txt

                  Type de recherche: Examen complet (C:\|)
                  Eléments examinés: 160718
                  Temps écoulé: 2 hour(s), 0 minute(s), 10 second(s)

                  Processus mémoire infecté(s): 0
                  Module(s) mémoire infecté(s): 0
                  Clé(s) du Registre infectée(s): 0
                  Valeur(s) du Registre infectée(s): 1
                  Elément(s) de données du Registre infecté(s): 0
                  Dossier(s) infecté(s): 0
                  Fichier(s) infecté(s): 4

                  Processus mémoire infecté(s):
                  (Aucun élément nuisible détecté)

                  Module(s) mémoire infecté(s):
                  (Aucun élément nuisible détecté)

                  Clé(s) du Registre infectée(s):
                  (Aucun élément nuisible détecté)

                  Valeur(s) du Registre infectée(s):
                  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\qaeqauq (Adware.Navipromo.H) -> Quarantined and deleted successfully.

                  Elément(s) de données du Registre infecté(s):
                  (Aucun élément nuisible détecté)

                  Dossier(s) infecté(s):
                  (Aucun élément nuisible détecté)

                  Fichier(s) infecté(s):
                  C:\Documents and Settings\Joël\Local Settings\Application Data\qaeqauq_navps.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
                  C:\Documents and Settings\Joël\Local Settings\Application Data\qaeqauq_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
                  C:\Documents and Settings\Joël\Local Settings\Application Data\qaeqauq.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
                  C:\Documents and Settings\Joël\Local Settings\Application Data\qaeqauq.exe (Adware.Navipromo.H) -> Quarantined and deleted successfully.
                  0
              2. varfendell
                Bien, refait un rapport hijackthis, mais normalement c'est bon, je pense que tu n'as plus de fenêtre publicitaire?
                0
                1. lucane Auteur
                  Logfile of HijackThis v1.99.1
                  Scan saved at 20:23:10, on 25/08/2008
                  Platform: Windows XP SP3 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v7.00 (7.00.6000.16705)

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\Program Files\Windows Defender\MsMpEng.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashServ.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\WINDOWS\SOUNDMAN.EXE
                  C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
                  C:\apps\ABoard\ABoard.exe
                  C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
                  C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                  C:\WINDOWS\system32\rundll32.exe
                  C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                  C:\Program Files\ATnotes\ATnotes.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  C:\Program Files\Labtec\Wireless Mouse\MulMouse.exe
                  C:\apps\ABoard\AOSD.exe
                  C:\Program Files\a-squared Free\a2service.exe
                  C:\WINDOWS\System32\cisvc.exe
                  C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                  C:\WINDOWS\system32\slserv.exe
                  C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
                  C:\WINDOWS\wanmpsvc.exe
                  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                  C:\WINDOWS\system32\cidaemon.exe
                  C:\Program Files\Windows Live\Messenger\usnsvc.exe
                  C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
                  C:\Program Files\Outlook Express\msimn.exe
                  C:\Program Files\Messenger\msmsgs.exe
                  C:\Program Files\Internet Explorer\IEXPLORE.EXE
                  C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                  C:\Documents and Settings\Joël\Menu Démarrer\Programmes\Outils de scan\HijackThis-fr\HijackThis-fr-Colok.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/wdgt3/*http://www.yahoo.com/ext/search/search.html
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                  O2 - BHO: Windows Live Call HoverToCall class - {7E853D72-626A-48EC-A868-BA8D5E23E045} - C:\Program Files\Windows Live\Messenger\HTC.DLL
                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                  O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
                  O2 - BHO: iFinger plugin / Browser helper object - {A114D52B-870C-4F15-8021-B6D7F91A054B} - C:\PROGRA~1\iFinger\plugins\IE.ifp
                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
                  O2 - BHO: -Sans nom - {ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB} - -Manquant
                  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll
                  O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                  O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
                  O3 -BarreOut. EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
                  O3 -BarreOut. MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                  O3 -BarreOut. ImageShack Toolbar - {6932D140-ABC4-4073-A44C-D4A541665E35} - C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll
                  O3 -BarreOut. &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
                  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                  O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
                  O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
                  O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
                  O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                  O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
                  O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                  O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE" /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
                  O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] "rundll32.exe" bthprops.cpl,,BluetoothAuthenticationAgent
                  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                  O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
                  O4 - HKCU\..\Run: [ATnotes.exe] "C:\Program Files\ATnotes\ATnotes.exe"
                  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  O4 - Global Startup: Logiciel de la Souris Labtec 2.0.lnk = C:\Program Files\Labtec\Wireless Mouse\MulMouse.exe
                  O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                  O8 - Extra du menu contextuel E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                  O8 - Extra du menu contextuel Post Image to Blog - res://C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll/5003
                  O8 - Extra du menu contextuel Tag This Image - res://C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll/5002
                  O8 - Extra du menu contextuel Upload All Images to ImageShack - res://C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll/5000
                  O8 - Extra du menu contextuel Upload Image to ImageShack - res://C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll/5001
                  O9 - Bouton Extra: -Sans nom - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                  O9 - Outil Extra du menu : Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                  O9 - Bouton Extra: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
                  O9 - Bouton Extra: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\WINDOWS\System32\shdocvw.dll
                  O9 - Outil Extra du menu : Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\WINDOWS\System32\shdocvw.dll
                  O9 - Bouton Extra: iFinger - {936E5D60-596C-11D3-BB96-00600816DF55} - C:\WINDOWS\System32\SHDOCVW.DLL
                  O9 - Bouton Extra: -Sans nom - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - -Manquant
                  O9 - Bouton Extra: -Sans nom - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                  O9 - Outil Extra du menu : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                  O9 - Bouton Extra: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Outil Extra du menu : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O11 - Options group: [INTERNATIONAL] International*
                  O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
                  O15 - Trusted Zone: http://toolbar.imageshack.us
                  O15 - Trusted Zone: http://www.secuser.com
                  O15 - Trusted Zone: http://download.windowsupdate.com
                  O16 - DPF: PackageHtmlCab - http://acces.blonde.com/package/op/PackageHtmlCab.CAB
                  O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - https://www.cult3d.com/
                  O16 - DPF: {45E83043-1F6F-4D22-A5E7-0138EA171B49} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fr/filesharingctrl.cab
                  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
                  O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
                  O16 - DPF: {6932D140-ABC4-4073-A44C-D4A541665E35} (ImageShack Toolbar) - http://toolbar.imageshack.us/toolbar/ImageShackToolbar.cab
                  O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
                  O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab
                  O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
                  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                  O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredimail.com/contents/setup/downloader/imloader.cab
                  O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
                  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
                  O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
                  O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                  O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                  O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
                  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                  O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
                  O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  O23 - Service: SC Test Branding Service 1 - SC Test Branding 1 - C:\Program Files\Fichiers communs\SC Test Branding 1 Shared\Service\SCTestService1.exe
                  O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
                  O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
                  O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
                  O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
                  O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
                  O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
                  0
              3. varfendell
                Télécharger Smitfraudfix (ne pas oublier d’extraire tous les fichiers sinon il indiquera que le process.exe est absent)

                * Sélectionner 4 pour mettre à jour Smitfraudfix
                * Sélectionner 1 pour créer un rapport et rechercher les fichiers responsables de l'infection. => le poster pour analyse
                * Sélectionner 2 pour supprimer les fichiers responsables de l'infection. (De préférence en mode sans échec, la suppression sera plus facile, c’est fortement conseillé)
                Répondre O (oui) à la question "Voulez-vous nettoyer le registre ?"
                Répondre O (oui) à la question "Corriger le fichier infecté ?" pour remplacer le fichier corrompu.
                * Sélectionner 3 pour effacer la liste des sites de confiance et sensibles.
                0
                1. lucane Auteur
                  Bonjour

                  Comment utilise t'ont Smitfraudfix, j'ai sélectionner ce que tu m'a dit, mais je n'ai pas trouver comment faire démarrer.
                  0
                3. lucane Auteur
                  @varfendellJe suis vraiment désolé varfendell d'être aussi nul, mais une foi lancer j'ai la fenêtre bleu et j'ai beau cliquer n'importe ou, rien ne ce passe.
                  0
                4. lucane Auteur
                  @lucaneJe crois que j'ai trouvé, voila le rapport.

                  SmitFraudFix v2.339

                  Rapport fait à 13:00:50.21, 26/08/2008
                  Executé à partir de C:\Documents and Settings\Jo‰l\Mes documents\SmitfraudFix
                  OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                  Le type du système de fichiers est NTFS
                  Fix executé en mode normal

                  »»»»»»»»»»»»»»»»»»»»»»»» Process

                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\Program Files\Windows Defender\MsMpEng.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashServ.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\WINDOWS\SOUNDMAN.EXE
                  C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
                  C:\apps\ABoard\ABoard.exe
                  C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
                  C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                  C:\WINDOWS\system32\rundll32.exe
                  C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                  C:\Program Files\Windows Defender\MSASCui.exe
                  C:\Program Files\ATnotes\ATnotes.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  C:\Program Files\Labtec\Wireless Mouse\MulMouse.exe
                  C:\apps\ABoard\AOSD.exe
                  C:\Program Files\a-squared Free\a2service.exe
                  C:\WINDOWS\System32\cisvc.exe
                  C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                  C:\WINDOWS\system32\slserv.exe
                  C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
                  C:\WINDOWS\wanmpsvc.exe
                  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                  C:\WINDOWS\system32\cidaemon.exe
                  C:\Program Files\Internet Explorer\IEXPLORE.EXE
                  C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                  C:\WINDOWS\system32\NOTEPAD.EXE
                  C:\WINDOWS\system32\cmd.exe

                  »»»»»»»»»»»»»»»»»»»»»»»» hosts

                  Fichier hosts corrompu !

                  127.0.0.1 www.legal-at-spybot.info
                  127.0.0.1 legal-at-spybot.info

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Jo‰l

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Jo‰l\Application Data

                  »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\JOL~1\Favoris

                  »»»»»»»»»»»»»»»»»»»»»»»» Bureau

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                  »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

                  »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

                  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
                  "Source"="About:Home"
                  "SubscribedURL"="About:Home"
                  "FriendlyName"="Ma page d'accueil"

                  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\1]
                  "Source"="http://img157.imageshack.us/img157/7664/ad43az8.swf"
                  "SubscribedURL"="http://img157.imageshack.us/img157/7664/ad43az8.swf"
                  "FriendlyName"=""
                  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\2]
                  "Source"="http://img87.imageshack.us/img87/1678/a2tk1.swf\"%20quality=\"high"
                  "SubscribedURL"="http://img87.imageshack.us/img87/1678/a2tk1.swf\"%20quality=\"high"
                  "FriendlyName"=""

                  »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
                  !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                  IEDFix
                  Credits: Malware Analysis & Diagnostic
                  Code: S!Ri

                  »»»»»»»»»»»»»»»»»»»»»»»» VACFix
                  !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                  VACFix
                  Credits: Malware Analysis & Diagnostic
                  Code: S!Ri

                  »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
                  !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                  404Fix
                  Credits: Malware Analysis & Diagnostic
                  Code: S!Ri

                  »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
                  !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                  SrchSTS.exe by S!Ri
                  Search SharedTaskScheduler's .dll

                  »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
                  !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                  "AppInit_DLLs"=""

                  »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
                  !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                  "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
                  "System"=""

                  »»»»»»»»»»»»»»»»»»»»»»»» RK

                  »»»»»»»»»»»»»»»»»»»»»»»» DNS

                  Description: D-Link AirPlus DWL-520+ Wireless PCI Adapter - Miniport d'ordonnancement de paquets
                  DNS Server Search Order: 212.27.39.135
                  DNS Server Search Order: 212.27.39.2

                  Description: D-Link AirPlus DWL-520+ Wireless PCI Adapter - Miniport d'ordonnancement de paquets
                  DNS Server Search Order: 212.27.39.135
                  DNS Server Search Order: 212.27.39.1

                  Description: D-Link AirPlus DWL-520+ Wireless PCI Adapter - Miniport d'ordonnancement de paquets
                  DNS Server Search Order: 212.27.54.252
                  DNS Server Search Order: 212.27.53.252

                  HKLM\SYSTEM\CCS\Services\Tcpip\..\{79F12DC8-CC5A-413F-B428-04249DA4985B}: DhcpNameServer=212.27.39.135 212.27.39.1
                  HKLM\SYSTEM\CCS\Services\Tcpip\..\{83D241A8-1EB2-484B-BCBA-C5DBBFDFB49A}: DhcpNameServer=212.27.39.135 212.27.39.2
                  HKLM\SYSTEM\CCS\Services\Tcpip\..\{CD8B9637-61B3-485F-886A-073E5E3CE86A}: DhcpNameServer=212.27.54.252 212.27.53.252
                  HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.54.252 212.27.53.252

                  »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

                  »»»»»»»»»»»»»»»»»»»»»»»» Fin
                  0
                5. lucane Auteur
                  @lucaneIl ne m'a pas posé la question " corriger le fichier infecté " Voila le rapport après nettoyage.

                  SmitFraudFix v2.339

                  Rapport fait à 13:10:47.96, 26/08/2008
                  Executé à partir de C:\Documents and Settings\Jo‰l\Mes documents\SmitfraudFix
                  OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                  Le type du système de fichiers est NTFS
                  Fix executé en mode sans echec

                  »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
                  !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                  SrchSTS.exe by S!Ri
                  Search SharedTaskScheduler's .dll

                  »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

                  »»»»»»»»»»»»»»»»»»»»»»»» hosts

                  127.0.0.1 localhost
                  127.0.0.1 www.007guard.com
                  127.0.0.1 007guard.com
                  127.0.0.1 008i.com
                  127.0.0.1 www.008k.com
                  127.0.0.1 008k.com
                  127.0.0.1 www.00hq.com
                  127.0.0.1 00hq.com
                  127.0.0.1 010402.com
                  127.0.0.1 www.032439.com
                  127.0.0.1 032439.com
                  127.0.0.1 www.1001-search.info
                  127.0.0.1 1001-search.info
                  127.0.0.1 www.100888290cs.com
                  127.0.0.1 100888290cs.com
                  127.0.0.1 www.100sexlinks.com
                  127.0.0.1 100sexlinks.com
                  127.0.0.1 www.10sek.com
                  127.0.0.1 10sek.com
                  127.0.0.1 www.123topsearch.com
                  127.0.0.1 123topsearch.com
                  127.0.0.1 www.132.com
                  127.0.0.1 132.com
                  127.0.0.1 www.136136.net
                  127.0.0.1 136136.net
                  127.0.0.1 www.139mm.com
                  127.0.0.1 139mm.com
                  127.0.0.1 www.163ns.com
                  127.0.0.1 163ns.com
                  127.0.0.1 171203.com
                  127.0.0.1 17-plus.com
                  127.0.0.1 www.1800searchonline.com
                  127.0.0.1 1800searchonline.com
                  127.0.0.1 www.180searchassistant.com
                  127.0.0.1 180searchassistant.com
                  127.0.0.1 www.180solutions.com
                  127.0.0.1 180solutions.com
                  127.0.0.1 www.181.365soft.info
                  127.0.0.1 181.365soft.info
                  127.0.0.1 www.1987324.com
                  127.0.0.1 1987324.com
                  127.0.0.1 www.1-domains-registrations.com
                  127.0.0.1 1-domains-registrations.com
                  127.0.0.1 www.1-extreme.biz
                  127.0.0.1 1-extreme.biz
                  127.0.0.1 www.1sexparty.com
                  127.0.0.1 1sexparty.com
                  127.0.0.1 www.1stantivirus.com
                  127.0.0.1 1stantivirus.com
                  127.0.0.1 www.1stpagehere.com
                  127.0.0.1 1stpagehere.com
                  127.0.0.1 www.1stsearchportal.com
                  127.0.0.1 1stsearchportal.com
                  127.0.0.1 2.82211.net
                  127.0.0.1 www.2006ooo.com
                  127.0.0.1 2006ooo.com
                  127.0.0.1 www.2007-download.com
                  127.0.0.1 2007-download.com
                  127.0.0.1 www.2020search.com
                  127.0.0.1 2020search.com
                  127.0.0.1 20x2p.com
                  127.0.0.1 www.24.365soft.info
                  127.0.0.1 24.365soft.info
                  127.0.0.1 www.24-7pharmacy.info
                  127.0.0.1 24-7pharmacy.info
                  127.0.0.1 www.24-7searching-and-more.com
                  127.0.0.1 24-7searching-and-more.com
                  127.0.0.1 www.24teen.com
                  127.0.0.1 24teen.com
                  127.0.0.1 www.2every.net
                  127.0.0.1 2every.net
                  127.0.0.1 2ndpower.com
                  127.0.0.1 www.2search.com
                  127.0.0.1 2search.com
                  127.0.0.1 www.2search.org
                  127.0.0.1 2search.org
                  127.0.0.1 www.2squared.com
                  127.0.0.1 2squared.com
                  127.0.0.1 www.3322.org
                  127.0.0.1 3322.org
                  127.0.0.1 365soft.info
                  127.0.0.1 www.36site.com
                  127.0.0.1 36site.com
                  127.0.0.1 3721.com
                  127.0.0.1 39-93.com
                  127.0.0.1 www.3abetterinternet.com
                  127.0.0.1 3abetterinternet.com
                  127.0.0.1 www.3bay.it
                  127.0.0.1 3bay.it
                  127.0.0.1 www.3ebay.it
                  127.0.0.1 3ebay.it
                  127.0.0.1 www.3xclipsonline.com
                  127.0.0.1 3xclipsonline.com
                  127.0.0.1 www.3xcurves.com
                  127.0.0.1 3xcurves.com
                  127.0.0.1 www.3xfestival.com
                  127.0.0.1 3xfestival.com
                  127.0.0.1 www.3x-festival.com
                  127.0.0.1 3x-festival.com
                  127.0.0.1 www.3x-galls.com
                  127.0.0.1 3x-galls.com
                  127.0.0.1 www.3xmiracle.com
                  127.0.0.1 3xmiracle.com
                  127.0.0.1 www.3xmoviesblog.com
                  127.0.0.1 3xmoviesblog.com
                  127.0.0.1 www.404dns.com
                  127.0.0.1 404dns.com
                  127.0.0.1 www.4199.com
                  127.0.0.1 4199.com
                  127.0.0.1 www.4corn.net
                  127.0.0.1 4corn.net
                  127.0.0.1 www.4ebay.it
                  127.0.0.1 4ebay.it
                  127.0.0.1 4klm.com
                  127.0.0.1 www.4mpg.com
                  127.0.0.1 4mpg.com
                  127.0.0.1 www.4repubblica.it
                  127.0.0.1 4repubblica.it
                  127.0.0.1 www.4softget.com
                  127.0.0.1 4softget.com
                  127.0.0.1 www.59cn.cn
                  127.0.0.1 59cn.cn
                  127.0.0.1 www.5iscali.it
                  127.0.0.1 5iscali.it
                  127.0.0.1 www.5repubblica.it
                  127.0.0.1 5repubblica.it
                  127.0.0.1 www.5starvideos.com
                  127.0.0.1 5starvideos.com
                  127.0.0.1 www.5tiscali.it
                  127.0.0.1 5tiscali.it
                  127.0.0.1 www.5zgmu7o20kt5d8yq.com
                  127.0.0.1 5zgmu7o20kt5d8yq.com
                  127.0.0.1 www.680180.net
                  127.0.0.1 680180.net
                  127.0.0.1 www.6iscali.it
                  127.0.0.1 6iscali.it
                  127.0.0.1 www.6njaga.com
                  127.0.0.1 6njaga.com
                  127.0.0.1 www.6sek.com
                  127.0.0.1 6sek.com
                  127.0.0.1 www.6tiscali.it
                  127.0.0.1 6tiscali.it
                  127.0.0.1 www.70-music.com
                  127.0.0.1 70-music.com
                  127.0.0.1 www.7322.com
                  127.0.0.1 7322.com
                  127.0.0.1 www.745970.com
                  127.0.0.1 745970.com
                  127.0.0.1 75tz.com
                  127.0.0.1 www.777search.com
                  127.0.0.1 777search.com
                  127.0.0.1 www.777top.com
                  127.0.0.1 777top.com
                  127.0.0.1 www.7939.com
                  127.0.0.1 7939.com
                  127.0.0.1 www.7search.com
                  127.0.0.1 7search.com
                  127.0.0.1 80gw6ry3i3x3qbrkwhxhw.032439.com
                  127.0.0.1 www.80-music.com
                  127.0.0.1 80-music.com
                  127.0.0.1 82211.net
                  127.0.0.1 8866.org
                  127.0.0.1 www.88vcd.com
                  127.0.0.1 88vcd.com
                  127.0.0.1 www.8ad.com
                  127.0.0.1 8ad.com
                  127.0.0.1 www.90-music.com
                  127.0.0.1 90-music.com
                  127.0.0.1 www.9505.com
                  127.0.0.1 9505.com
                  127.0.0.1 www.971searchbox.com
                  127.0.0.1 971searchbox.com
                  127.0.0.1 9mmporn.com
                  127.0.0.1 a.bestmanage.org
                  127.0.0.1 www.aaabesthomepage.com
                  127.0.0.1 aaabesthomepage.com
                  127.0.0.1 aaasexypics.com
                  127.0.0.1 www.aaawebfinder.com
                  127.0.0.1 aaawebfinder.com
                  127.0.0.1 www.aaqadarsztriv.com
                  127.0.0.1 aaqadarsztriv.com
                  127.0.0.1 www.aaqada-rsztriv.com
                  127.0.0.1 aaqada-rsztriv.com
                  127.0.0.1 www.aaqadaueorn.com
                  127.0.0.1 aaqadaueorn.com
                  127.0.0.1 www.aaqada-ueorn.com
                  127.0.0.1 aaqada-ueorn.com
                  127.0.0.1 www.aaqada-ygco.com
                  127.0.0.1 aaqada-ygco.com
                  127.0.0.1 www.aaqada-ymct.com
                  127.0.0.1 aaqada-ymct.com
                  127.0.0.1 www.aav2008.com
                  127.0.0.1 aav2008.com
                  127.0.0.1 aavc.com
                  127.0.0.1 www.abccodec.com
                  127.0.0.1 abccodec.com
                  127.0.0.1 www.abcdperformance.com
                  127.0.0.1 abcdperformance.com
                  127.0.0.1 www.abc-find.info
                  127.0.0.1 abc-find.info
                  127.0.0.1 www.abcsearch.com
                  127.0.0.1 abcsearch.com
                  127.0.0.1 www.abetterinternet.com
                  127.0.0.1 abetterinternet.com
                  127.0.0.1 www.abnetsoft.info
                  127.0.0.1 abnetsoft.info
                  127.0.0.1 www.about-adult.net
                  127.0.0.1 about-adult.net
                  127.0.0.1 www.aboutclicker.com
                  127.0.0.1 aboutclicker.com
                  127.0.0.1 www.abrp.net
                  127.0.0.1 abrp.net
                  127.0.0.1 www.absolutee.com
                  127.0.0.1 absolutee.com
                  127.0.0.1 www.abyssmedia.com
                  127.0.0.1 abyssmedia.com
                  127.0.0.1 www.ac66.cn
                  127.0.0.1 ac66.cn
                  127.0.0.1 access.navinetwork.com
                  127.0.0.1 access.rapid-pass.net
                  127.0.0.1 www.accessactivexvideo.com
                  127.0.0.1 accessactivexvideo.com
                  127.0.0.1 www.accessclips.com
                  127.0.0.1 accessclips.com
                  127.0.0.1 www.access-dvd.com
                  127.0.0.1 access-dvd.com
                  127.0.0.1 www.accesskeygenerator.com
                  127.0.0.1 accesskeygenerator.com
                  127.0.0.1 www.accessthefuture.net
                  127.0.0.1 accessthefuture.net
                  127.0.0.1 www.accessvid.net
                  127.0.0.1 accessvid.net
                  127.0.0.1 www.acemedic.com
                  127.0.0.1 acemedic.com
                  127.0.0.1 www.ace-webmaster.com
                  127.0.0.1 ace-webmaster.com
                  127.0.0.1 acjp.com
                  127.0.0.1 www.acrobat-2007.com
                  127.0.0.1 acrobat-2007.com
                  127.0.0.1 www.acrobat-8.com
                  127.0.0.1 acrobat-8.com
                  127.0.0.1 www.acrobat-center.com
                  127.0.0.1 acrobat-center.com
                  127.0.0.1 www.acrobat-hq.com
                  127.0.0.1 acrobat-hq.com
                  127.0.0.1 www.acrobatreader-8.com
                  127.0.0.1 acrobatreader-8.com
                  127.0.0.1 www.acrobat-reader-8.de
                  127.0.0.1 acrobat-reader-8.de
                  127.0.0.1 www.acrobat-stop.com
                  127.0.0.1 acrobat-stop.com
                  127.0.0.1 www.actionbreastcancer.org
                  127.0.0.1 actionbreastcancer.org
                  127.0.0.1 www.activesearcher.info
                  127.0.0.1 activesearcher.info
                  127.0.0.1 www.activexaccessobject.com
                  127.0.0.1 activexaccessobject.com
                  127.0.0.1 www.activexaccessvideo.com
                  127.0.0.1 activexaccessvideo.com
                  127.0.0.1 www.activexemedia.com
                  127.0.0.1 activexemedia.com
                  127.0.0.1 www.activexmediaobject.com
                  127.0.0.1 activexmediaobject.com
                  127.0.0.1 www.activexmediapro.com
                  127.0.0.1 activexmediapro.com
                  127.0.0.1 www.activexmediasite.com
                  127.0.0.1 activexmediasite.com
                  127.0.0.1 www.activexmediasoftware.com
                  127.0.0.1 activexmediasoftware.com
                  127.0.0.1 www.activexmediasource.com
                  127.0.0.1 activexmediasource.com
                  127.0.0.1 www.activexmediatool.com
                  127.0.0.1 activexmediatool.com
                  127.0.0.1 www.activexmediatour.com
                  127.0.0.1 activexmediatour.com
                  127.0.0.1 www.activexsoftwares.com
                  127.0.0.1 activexsoftwares.com
                  127.0.0.1 www.activexsource.com
                  127.0.0.1 activexsource.com
                  127.0.0.1 www.activexupdate.com
                  127.0.0.1 activexupdate.com
                  127.0.0.1 www.activexvideo.com
                  127.0.0.1 activexvideo.com
                  127.0.0.1 www.activexvideotool.com
                  127.0.0.1 activexvideotool.com
                  127.0.0.1 www.ad.marketingsector.com
                  127.0.0.1 ad.marketingsector.com
                  127.0.0.1 www.ad.mokead.com
                  127.0.0.1 ad.mokead.com
                  127.0.0.1 ad.oinadserver.com
                  127.0.0.1 ad.outerinfoads.com
                  127.0.0.1 www.ad25.com
                  127.0.0.1 ad25.com
                  127.0.0.1 www.ad45.com
                  127.0.0.1 ad45.com
                  127.0.0.1 www.ad77.com
                  127.0.0.1 ad77.com
                  127.0.0.1 www.ad86.com
                  127.0.0.1 ad86.com
                  127.0.0.1 www.adamsupportgroup.org
                  127.0.0.1 adamsupportgroup.org
                  127.0.0.1 www.adarmor.com
                  127.0.0.1 adarmor.com
                  127.0.0.1 www.adasearch.com
                  127.0.0.1 adasearch.com
                  127.0.0.1 adaware.cc
                  127.0.0.1 www.adawarenow.com
                  127.0.0.1 adawarenow.com
                  127.0.0.1 adchannel.contextplus.net
                  127.0.0.1 www.addetect.com
                  127.0.0.1 addetect.com
                  127.0.0.1 www.add-hhh.info
                  127.0.0.1 add-hhh.info
                  127.0.0.1 www.addictivetechnologies.com
                  127.0.0.1 addictivetechnologies.com
                  127.0.0.1 www.addictivetechnologies.net
                  127.0.0.1 addictivetechnologies.net
                  127.0.0.1 www.addioerrori.com
                  127.0.0.1 addioerrori.com
                  127.0.0.1 www.add-manager.com
                  127.0.0.1 add-manager.com
                  127.0.0.1 www.adgate.info
                  127.0.0.1 adgate.info
                  127.0.0.1 www.adintelligence.net
                  127.0.0.1 adintelligence.net
                  127.0.0.1 www.adioserrores.com
                  127.0.0.1 adioserrores.com
                  127.0.0.1 www.adipics.com
                  127.0.0.1 adipics.com
                  127.0.0.1 www.adlogix.com
                  127.0.0.1 adlogix.com
                  127.0.0.1 www.admin2cash.biz
                  127.0.0.1 admin2cash.biz
                  127.0.0.1 adnet-plus.com
                  127.0.0.1 www.adnetserver.com
                  127.0.0.1 adnetserver.com
                  127.0.0.1 adobe-download-now.com
                  127.0.0.1 www.adobe-downloads.com
                  127.0.0.1 adobe-downloads.com
                  127.0.0.1 www.adobe-reader-8.fr
                  127.0.0.1 adobe-reader-8.fr
                  127.0.0.1 www.adprotect.com
                  127.0.0.1 adprotect.com
                  127.0.0.1 ads.centralmedia.ws
                  127.0.0.1 ads.k8l.info
                  127.0.0.1 ads.kmpads.com
                  127.0.0.1 ads.kw.revenue.net
                  127.0.0.1 ads.marketingsector.com
                  127.0.0.1 ads.searchingbooth.com
                  127.0.0.1 ads.z-quest.com
                  127.0.0.1 ads1.revenue.net
                  127.0.0.1 www.ads183.com
                  127.0.0.1 ads183.com
                  127.0.0.1 www.adscontex.com
                  127.0.0.1 adscontex.com
                  127.0.0.1 www.adservices1.enhance.com
                  127.0.0.1 adservices1.enhance.com
                  127.0.0.1 adservs.com
                  127.0.0.1 www.adsextend.net
                  127.0.0.1 adsextend.net
                  127.0.0.1 www.adshttp.com
                  127.0.0.1 adshttp.com
                  127.0.0.1 www.adsniffer.com
                  127.0.0.1 adsniffer.com
                  127.0.0.1 www.adsonwww.com
                  127.0.0.1 adsonwww.com
                  127.0.0.1 www.adspics.com
                  127.0.0.1 adspics.com
                  127.0.0.1 www.adsrevenue.net
                  127.0.0.1 adsrevenue.net
                  127.0.0.1 www.adtrak.net
                  127.0.0.1 adtrak.net
                  127.0.0.1 adtrgt.com
                  127.0.0.1 www.adult18codec.com
                  127.0.0.1 adult18codec.com
                  127.0.0.1 www.adult777search.info
                  127.0.0.1 adult777search.info
                  127.0.0.1 www.adultan.com
                  127.0.0.1 adultan.com
                  127.0.0.1 www.adultcodec-2008.com
                  127.0.0.1 adultcodec-2008.com
                  127.0.0.1 www.adultcodecstars.com
                  127.0.0.1 adultcodecstars.com
                  127.0.0.1 www.adult-engine-search.com
                  127.0.0.1 adult-engine-search.com
                  127.0.0.1 www.adult-erotic-guide.net
                  127.0.0.1 adult-erotic-guide.net
                  127.0.0.1 www.adultfilmsite.com
                  127.0.0.1 adultfilmsite.com
                  127.0.0.1 www.adult-friends-finder.net
                  127.0.0.1 adult-friends-finder.net
                  127.0.0.1 adultgambling.org
                  127.0.0.1 adult-host.org
                  127.0.0.1 www.adulthyperlinks.com
                  127.0.0.1 adulthyperlinks.com
                  127.0.0.1 www.adultmovieplus.com
                  127.0.0.1 adultmovieplus.com
                  127.0.0.1 www.adult-mpg.net
                  127.0.0.1 adult-mpg.net
                  127.0.0.1 adult-personal.us
                  127.0.0.1 adultsgames.net
                  127.0.0.1 www.adultsonlyvids.com
                  127.0.0.1 adultsonlyvids.com
                  127.0.0.1 www.adultsper.com
                  127.0.0.1 adultsper.com
                  127.0.0.1 www.adulttds.com
                  127.0.0.1 adulttds.com
                  127.0.0.1 www.adultzoneworld.com
                  127.0.0.1 adultzoneworld.com
                  127.0.0.1 www.advancedcleaner.com
                  127.0.0.1 advancedcleaner.com
                  127.0.0.1 www.advcash.biz
                  127.0.0.1 advcash.biz
                  127.0.0.1 advert.exaccess.ru
                  127.0.0.1 www.advertisemoney.info
                  127.0.0.1 advertisemoney.info
                  127.0.0.1 advertising.paltalk.com
                  127.0.0.1 www.advertising-money.info
                  127.0.0.1 advertising-money.info
                  127.0.0.1 ad-ware.cc
                  127.0.0.1 www.ad-w-a-r-e.com
                  127.0.0.1 ad-w-a-r-e.com
                  127.0.0.1 www.a-d-w-a-r-e.com
                  127.0.0.1 a-d-w-a-r-e.com
                  127.0.0.1 www.adware.pro
                  127.0.0.1 adware.pro
                  127.0.0.1 www.adwarealert.com
                  127.0.0.1 adwarealert.com
                  127.0.0.1 www.ad-warealert.com
                  127.0.0.1 ad-warealert.com
                  127.0.0.1 www.adwarearrest.com
                  127.0.0.1 adwarearrest.com
                  127.0.0.1 www.adwarebazooka.com
                  127.0.0.1 adwarebazooka.com
                  127.0.0.1 www.adwarecommander.com
                  127.0.0.1 adwarecommander.com
                  127.0.0.1 www.adwarefinder.com
                  127.0.0.1 adwarefinder.com
                  127.0.0.1 www.adwaregold.com
                  127.0.0.1 adwaregold.com
                  127.0.0.1 www.adwarepatrol.com
                  127.0.0.1 adwarepatrol.com
                  127.0.0.1 www.adwareplatinum.com
                  127.0.0.1 adwareplatinum.com
                  127.0.0.1 www.adwareprotectionsite.com
                  127.0.0.1 adwareprotectionsite.com
                  127.0.0.1 www.adwarepunisher.com
                  127.0.0.1 adwarepunisher.com
                  127.0.0.1 www.adwareremover.ws
                  127.0.0.1 adwareremover.ws
                  127.0.0.1 www.adwaresafety.com
                  127.0.0.1 adwaresafety.com
                  127.0.0.1 www.adwarexp.com
                  127.0.0.1 adwarexp.com
                  127.0.0.1 affiliate.idownload.com
                  127.0.0.1 www.aflgate.com
                  127.0.0.1 aflgate.com
                  127.0.0.1 africaspromise.org
                  127.0.0.1 agava.com
                  127.0.0.1 agava.ru
                  127.0.0.1 agentstudio.com
                  127.0.0.1 www.ageofconans.net
                  127.0.0.1 ageofconans.net
                  127.0.0.1 www.aginegialle.it
                  127.0.0.1 aginegialle.it
                  127.0.0.1 www.ahnenforschung.de
                  127.0.0.1 ahnenforschung.de
                  127.0.0.1 www.aifind.info
                  127.0.0.1 aifind.info
                  127.0.0.1 www.airtleworld.com
                  127.0.0.1 airtleworld.com
                  127.0.0.1 www.aitalia.it
                  127.0.0.1 aitalia.it
                  127.0.0.1 akamai.downloadv3.com
                  127.0.0.1 www.aklitalia.it
                  127.0.0.1 aklitalia.it
                  127.0.0.1 akril.com
                  127.0.0.1 alcatel.ws
                  127.0.0.1 www.alertspy.com
                  127.0.0.1 alertspy.com
                  127.0.0.1 www.alfacleaner.com
                  127.0.0.1 alfacleaner.com
                  127.0.0.1 alfa-search.com
                  127.0.0.1 www.alialia.it
                  127.0.0.1 alialia.it
                  127.0.0.1 www.aliotalia.it
                  127.0.0.1 aliotalia.it
                  127.0.0.1 www.alirtalia.it
                  127.0.0.1 alirtalia.it
                  127.0.0.1 www.alitaia.it
                  127.0.0.1 alitaia.it
                  127.0.0.1 www.alitaklia.it
                  127.0.0.1 alitaklia.it
                  127.0.0.1 www.alitala.it
                  127.0.0.1 alitala.it
                  127.0.0.1 www.alitali.it
                  127.0.0.1 alitali.it
                  127.0.0.1 www.alitaliaq.it
                  127.0.0.1 alitaliaq.it
                  127.0.0.1 www.alitalias.it
                  127.0.0.1 alitalias.it
                  127.0.0.1 www.alitaliaz.it
                  127.0.0.1 alitaliaz.it
                  127.0.0.1 www.alitalioa.it
                  127.0.0.1 alitalioa.it
                  127.0.0.1 www.alitalisa.it
                  127.0.0.1 alitalisa.it
                  127.0.0.1 www.alitaliua.it
                  127.0.0.1 alitaliua.it
                  127.0.0.1 www.alitalkia.it
                  127.0.0.1 alitalkia.it
                  127.0.0.1 www.alitaloia.it
                  127.0.0.1 alitaloia.it
                  127.0.0.1 www.alitaluia.it
                  127.0.0.1 alitaluia.it
                  127.0.0.1 www.alitaslia.it
                  127.0.0.1 alitaslia.it
                  127.0.0.1 www.alitlia.it
                  127.0.0.1 alitlia.it
                  127.0.0.1 www.alitralia.it
                  127.0.0.1 alitralia.it
                  127.0.0.1 www.alitsalia.it
                  127.0.0.1 alitsalia.it
                  127.0.0.1 www.aliutalia.it
                  127.0.0.1 aliutalia.it
                  127.0.0.1 www.all1count.net
                  127.0.0.1 all1count.net
                  127.0.0.1 www.all4internet.com
                  127.0.0.1 all4internet.com
                  127.0.0.1 allabtcars.com
                  127.0.0.1 allabtjeeps.com
                  127.0.0.1 www.all-bittorrent.com
                  127.0.0.1 all-bittorrent.com
                  127.0.0.1 www.allcollisions.com
                  127.0.0.1 allcollisions.com
                  127.0.0.1 www.allcybersearch.com
                  127.0.0.1 allcybersearch.com
                  127.0.0.1 www.alldnserrors.com
                  127.0.0.1 alldnserrors.com
                  127.0.0.1 www.all-downloads-now.com
                  127.0.0.1 all-downloads-now.com
                  127.0.0.1 www.all-edonkey.com
                  127.0.0.1 all-edonkey.com
                  127.0.0.1 www.allertaminacce.com
                  127.0.0.1 allertaminacce.com
                  127.0.0.1 allforadult.com
                  127.0.0.1 allhyperlinks.com
                  127.0.0.1 www.alliesecurity.com
                  127.0.0.1 alliesecurity.com
                  127.0.0.1 all-inet.com
                  127.0.0.1 allinternetbusiness.com
                  127.0.0.1 www.all-limewire.com
                  127.0.0.1 all-limewire.com
                  127.0.0.1 www.allmegabucks.com
                  127.0.0.1 allmegabucks.com
                  127.0.0.1 www.allprotections.com
                  127.0.0.1 allprotections.com
                  127.0.0.1 www.allresultz.net
                  127.0.0.1 allresultz.net
                  127.0.0.1 www.allsearch.us
                  127.0.0.1 allsearch.us
                  127.0.0.1 www.allsecuritynotes.com
                  127.0.0.1 allsecuritynotes.com
                  127.0.0.1 www.allsecuritysite.com
                  127.0.0.1 allsecuritysite.com
                  127.0.0.1 www.allstarsvideos.net
                  127.0.0.1 allstarsvideos.net
                  127.0.0.1 www.alltiettantivirus.com
                  127.0.0.1 alltiettantivirus.com
                  127.0.0.1 www.alltruesoftware.com
                  127.0.0.1 alltruesoftware.com
                  127.0.0.1 www.allvideoactivex.com
                  127.0.0.1 allvideoactivex.com
                  127.0.0.1 www.almanah.biz
                  127.0.0.1 almanah.biz
                  127.0.0.1 almarvideos.com
                  127.0.0.1 www.aloitalia.it
                  127.0.0.1 aloitalia.it
                  127.0.0.1 www.aluitalia.it
                  127.0.0.1 aluitalia.it
                  127.0.0.1 www.amaena.com
                  127.0.0.1 amaena.com
                  127.0.0.1 amandamountains.com
                  127.0.0.1 www.amateurliveshow.com
                  127.0.0.1 amateurliveshow.com
                  127.0.0.1 www.amediasoftware.com
                  127.0.0.1 amediasoftware.com
                  127.0.0.1 www.amediasource.com
                  127.0.0.1 amediasource.com
                  127.0.0.1 www.americanautobargains.com
                  127.0.0.1 americanautobargains.com
                  127.0.0.1 www.americancarbargains.com
                  127.0.0.1 americancarbargains.com
                  127.0.0.1 american-teens.net
                  127.0.0.1 amigeek.com
                  127.0.0.1 www.amigobore.com
                  127.0.0.1 amigobore.com
                  127.0.0.1 amisbusiness.com
                  127.0.0.1 www.ampmsearch.com
                  127.0.0.1 ampmsearch.com
                  127.0.0.1 www.analcord.com
                  127.0.0.1 analcord.com
                  127.0.0.1 analmovi.com
                  127.0.0.1 www.anarchylolita.com
                  127.0.0.1 anarchylolita.com
                  127.0.0.1 anarchyporn.com
                  127.0.0.1 www.andromedical.com
                  127.0.0.1 andromedical.com
                  127.0.0.1 www.animepornmag.com
                  127.0.0.1 animepornmag.com
                  127.0.0.1 anin.org
                  127.0.0.1 www.anjpn-avxiz.biz
                  127.0.0.1 anjpn-avxiz.biz
                  127.0.0.1 www.anjpnzqav.biz
                  127.0.0.1 anjpnzqav.biz
                  127.0.0.1 www.anjpn-zqav.biz
                  127.0.0.1 anjpn-zqav.biz
                  127.0.0.1 annaromeo.com
                  127.0.0.1 www.antiddos.us
                  127.0.0.1 antiddos.us
                  127.0.0.1 www.antiespiadorado.com
                  127.0.0.1 antiespiadorado.com
                  127.0.0.1 www.antiespionspack.com
                  127.0.0.1 antiespionspack.com
                  127.0.0.1 www.antigusanos2008.com
                  127.0.0.1 antigusanos2008.com
                  127.0.0.1 www.antispamassistant.com
                  127.0.0.1 antispamassistant.com
                  127.0.0.1 www.antispamdeluxe.com
                  127.0.0.1 antispamdeluxe.com
                  127.0.0.1 www.antispionage.com
                  127.0.0.1 antispionage.com
                  127.0.0.1 www.antispionagepro.com
                  127.0.0.1 antispionagepro.com
                  127.0.0.1 www.antispyadvanced.com
                  127.0.0.1 antispyadvanced.com
                  127.0.0.1 www.antispycheck.com
                  127.0.0.1 antispycheck.com
                  127.0.0.1 www.antispydns.biz
                  127.0.0.1 antispydns.biz
                  127.0.0.1 www.antispykit.com
                  127.0.0.1 antispykit.com
                  127.0.0.1 www.antispylab.com
                  127.0.0.1 antispylab.com
                  127.0.0.1 www.antispyshield.com
                  127.0.0.1 antispyshield.com
                  127.0.0.1 www.antispysolutions.com
                  127.0.0.1 antispysolutions.com
                  127.0.0.1 www.antispyware.com
                  127.0.0.1 antispyware.com
                  127.0.0.1 www.antispyware-2008.info
                  127.0.0.1 antispyware-2008.info
                  127.0.0.1 www.antispyware2008.name
                  127.0.0.1 antispyware2008.name
                  127.0.0.1 www.antispyware-2008.name
                  127.0.0.1 antispyware-2008.name
                  127.0.0.1 www.antispyware2008.org
                  127.0.0.1 antispyware2008.org
                  127.0.0.1 www.antispyware-2008.org
                  127.0.0.1 antispyware-2008.org
                  127.0.0.1 www.antispyware2008-download.com
                  127.0.0.1 antispyware2008-download.com
                  127.0.0.1 www.antispyware-2008-download.com
                  127.0.0.1 antispyware-2008-download.com
                  127.0.0.1 www.antispyware2008-download.name
                  127.0.0.1 antispyware2008-download.name
                  127.0.0.1 www.antispyware2008-download.org
                  127.0.0.1 antispyware2008-download.org
                  127.0.0.1 www.antispyware-2008-download.org
                  127.0.0.1 antispyware-2008-download.org
                  127.0.0.1 www.antispywareboot.com
                  127.0.0.1 antispywareboot.com
                  127.0.0.1 www.antispywarebot.com
                  127.0.0.1 antispywarebot.com
                  127.0.0.1 www.antispywarebox.com
                  127.0.0.1 antispywarebox.com
                  127.0.0.1 www.antispywaredownloads.com
                  127.0.0.1 antispywaredownloads.com
                  127.0.0.1 www.antispywaresuite.com
                  127.0.0.1 antispywaresuite.com
                  127.0.0.1 www.antispywareupdates.net
                  127.0.0.1 antispywareupdates.net
                  127.0.0.1 www.antispywarexp.com
                  127.0.0.1 antispywarexp.com
                  127.0.0.1 www.antispyweb.net
                  127.0.0.1 antispyweb.net
                  127.0.0.1 www.antiver2008.com
                  127.0.0.1 antiver2008.com
                  127.0.0.1 www.antivermins.com
                  127.0.0.1 antivermins.com
                  127.0.0.1 www.anti-vermins.com
                  127.0.0.1 anti-vermins.com
                  127.0.0.1 www.antivir2007.com
                  127.0.0.1 antivir2007.com
                  127.0.0.1 www.antivirgear.com
                  127.0.0.1 antivirgear.com
                  127.0.0.1 www.antivirprotect.com
                  127.0.0.1 antivirprotect.com
                  127.0.0.1 www.antivirus.fastfreedownload.com
                  127.0.0.1 antivirus.fastfreedownload.com
                  127.0.0.1 www.antivirus2008pro.com
                  127.0.0.1 antivirus2008pro.com
                  127.0.0.1 www.antivirus-2008pro.com
                  127.0.0.1 antivirus-2008pro.com
                  127.0.0.1 www.antivirus-2008-pro.com
                  127.0.0.1 antivirus-2008-pro.com
                  127.0.0.1 www.antivirus2008pro.info
                  127.0.0.1 antivirus2008pro.info
                  127.0.0.1 www.antivirus-2008pro.info
                  127.0.0.1 antivirus-2008pro.info
                  127.0.0.1 www.antivirus-2008-pro.info
                  127.0.0.1 antivirus-2008-pro.info
                  127.0.0.1 www.antivirus2008pro.net
                  127.0.0.1 antivirus2008pro.net
                  127.0.0.1 www.antivirus-2008pro.net
                  127.0.0.1 antivirus-2008pro.net
                  127.0.0.1 www.antivirus-2008-pro.net
                  127.0.0.1 antivirus-2008-pro.net
                  127.0.0.1 www.antivirus2008pro.org
                  127.0.0.1 antivirus2008pro.org
                  127.0.0.1 www.antivirus-2008pro.org
                  127.0.0.1 antivirus-2008pro.org
                  127.0.0.1 www.antivirus-2008-pro.org
                  127.0.0.1 antivirus-2008-pro.org
                  127.0.0.1 www.antivirus2008x.com
                  127.0.0.1 antivirus2008x.com
                  127.0.0.1 www.antivirusadvance.com
                  127.0.0.1 antivirusadvance.com
                  127.0.0.1 www.antivirusaskeladd.com
                  127.0.0.1 antivirusaskeladd.com
                  127.0.0.1 www.antivirus-database.com
                  127.0.0.1 antivirus-database.com
                  127.0.0.1 www.antivirusgereedschap.com
                  127.0.0.1 antivirusgereedschap.com
                  127.0.0.1 www.antivirusgolden.com
                  127.0.0.1 antivirusgolden.com
                  127.0.0.1 www.antivirus-hq.net
                  127.0.0.1 antivirus-hq.net
                  127.0.0.1 www.antiviruspcsuite.com
                  127.0.0.1 antiviruspcsuite.com
                  127.0.0.1 www.antiviruspremium.com
                  127.0.0.1 antiviruspremium.com
                  127.0.0.1 www.anti-virus-pro.com
                  127.0.0.1 anti-virus-pro.com
                  127.0.0.1 www.antivirusprotector.com
                  127.0.0.1 antivirusprotector.com
                  127.0.0.1 www.antivirus-scanner.com
                  127.0.0.1 antivirus-scanner.com
                  127.0.0.1 www.antivirusscherm.com
                  127.0.0.1 antivirusscherm.com
                  127.0.0.1 www.antivirussecuritypro.com
                  127.0.0.1 antivirussecuritypro.com
                  127.0.0.1 www.antivirus-stop.com
                  127.0.0.1 antivirus-stop.com
                  127.0.0.1 www.antivirussuite.com
                  127.0.0.1 antivirussuite.com
                  127.0.0.1 www.antiworm2008.com
                  127.0.0.1 antiworm2008.com
                  127.0.0.1 www.antiwurm2008.com
                  127.0.0.1 antiwurm2008.com
                  127.0.0.1 antrocity.com
                  127.0.0.1 www.anyofus.com
                  127.0.0.1 anyofus.com
                  127.0.0.1 www.anysafereviews.com
                  127.0.0.1 anysafereviews.com
                  127.0.0.1 www.anysn.seproger.com
                  127.0.0.1 anysn.seproger.com
                  127.0.0.1 anything4health.com
                  127.0.0.1 www.apicpreview.com
                  127.0.0.1 apicpreview.com
                  127.0.0.1 www.appealcircuit.com
                  127.0.0.1 appealcircuit.com
                  127.0.0.1 www.approvedlinks.com
                  127.0.0.1 approvedlinks.com
                  127.0.0.1 apps.deskwizz.com
                  127.0.0.1 apps.webservicehost.com
                  127.0.0.1 www.aprotectedpage.com
                  127.0.0.1 aprotectedpage.com
                  127.0.0.1 apsua.com
                  127.0.0.1 www.archivioadulti.com
                  127.0.0.1 archivioadulti.com
                  127.0.0.1 www.archiviosex.net
                  127.0.0.1 archiviosex.net
                  127.0.0.1 aregay.com
                  127.0.0.1 www.ares.click-new-download.com
                  127.0.0.1 ares.click-new-download.com
                  127.0.0.1 www.ares-freebie.com
                  127.0.0.1 ares-freebie.com
                  127.0.0.1 www.arespro2007.com
                  127.0.0.1 arespro2007.com
                  127.0.0.1 www.aresultra.com
                  127.0.0.1 aresultra.com
                  127.0.0.1 www.ares-usa.com
                  127.0.0.1 ares-usa.com
                  127.0.0.1 arheo.com
                  127.0.0.1 arizonaweb.org
                  127.0.0.1 armitageinn.com
                  127.0.0.1 www.arquivojpgs.smtp.ru
                  127.0.0.1 arquivojpgs.smtp.ru
                  127.0.0.1 artachnid.com
                  127.0.0.1 art-func.com
                  127.0.0.1 art-xxx.com
                  127.0.0.1 www.asafebrowser.com
                  127.0.0.1 asafebrowser.com
                  127.0.0.1 www.asafetyalways.com
                  127.0.0.1 asafetyalways.com
                  127.0.0.1 www.asafetynote.com
                  127.0.0.1 asafetynote.com
                  127.0.0.1 www.asafetynotice.com
                  127.0.0.1 asafetynotice.com
                  127.0.0.1 www.asafetypage.com
                  127.0.0.1 asafetypage.com
                  127.0.0.1 www.asdbiz.biz
                  127.0.0.1 asdbiz.biz
                  127.0.0.1 www.asdeykuddq.com
                  127.0.0.1 asdeykuddq.com
                  127.0.0.1 www.asecurebar.com
                  127.0.0.1 asecurebar.com
                  127.0.0.1 www.asecureboard.com
                  127.0.0.1 asecureboard.com
                  127.0.0.1 www.asecurevalue.com
                  127.0.0.1 asecurevalue.com
                  127.0.0.1 www.asecurityissue.com
                  127.0.0.1 asecurityissue.com
                  127.0.0.1 www.asecuritynotice.com
                  127.0.0.1 asecuritynotice.com
                  127.0.0.1 www.asecuritypaper.com
                  127.0.0.1 asecuritypaper.com
                  127.0.0.1 www.asecuritystuff.com
                  127.0.0.1 asecuritystuff.com
                  127.0.0.1 www.asfadaptation.com
                  127.0.0.1 asfadaptation.com
                  127.0.0.1 asiankingkong.com
                  127.0.0.1 www.asianpornmag.com
                  127.0.0.1 asianpornmag.com
                  127.0.0.1 www.asiantoolbar.com
                  127.0.0.1 asiantoolbar.com
                  127.0.0.1 www.asidseiupc.com
                  127.0.0.1 asidseiupc.com
                  127.0.0.1 www.aslitalia.it
                  127.0.0.1 aslitalia.it
                  127.0.0.1 ass-gals.com
                  127.0.0.1 www.assureprotection.com
                  127.0.0.1 assureprotection.com
                  127.0.0.1 asta-killer.com
                  127.0.0.1 www.astrologie-server.com
                  127.0.0.1 astrologie-server.com
                  127.0.0.1 www.asupereva.it
                  127.0.0.1 asupereva.it
                  127.0.0.1 www.ataprogram.com
                  127.0.0.1 ataprogram.com
                  127.0.0.1 athenrye.com
                  127.0.0.1 www.atotalsafety.com
                  127.0.0.1 atotalsafety.com
                  127.0.0.1 www.atrueprotection.com
                  127.0.0.1 atrueprotection.com
                  127.0.0.1 www.atruesecurity.com
                  127.0.0.1 atruesecurity.com
                  127.0.0.1 www.attackware.com
                  127.0.0.1 attackware.com
                  127.0.0.1 www.attrezzi.biz
                  127.0.0.1 attrezzi.biz
                  127.0.0.1 www.aucunsvirus.com
                  127.0.0.1 aucunsvirus.com
                  127.0.0.1 www.aulde.net
                  127.0.0.1 aulde.net
                  127.0.0.1 www.aupereva.it
                  127.0.0.1 aupereva.it
                  127.0.0.1 www.autobargains.org
                  127.0.0.1 autobargains.org
                  127.0.0.1 www.autobargainsnetwork.com
                  127.0.0.1 autobargainsnetwork.com
                  127.0.0.1 www.autocontext.begun.ru
                  127.0.0.1 autocontext.begun.ru
                  127.0.0.1 autoescrowpay.com
                  127.0.0.1 www.avadvance.com
                  127.0.0.1 avadvance.com
                  127.0.0.1 www.avast.free-software-center.com
                  127.0.0.1 avast.free-software-center.com
                  127.0.0.1 www.avast-2007.com
                  127.0.0.1 avast-2007.com
                  127.0.0.1 www.avast-downloads.com
                  127.0.0.1 avast-downloads.com
                  127.0.0.1 www.avast-hq.com
                  127.0.0.1 avast-hq.com
                  127.0.0.1 www.avforce.com
                  127.0.0.1 avforce.com
                  127.0.0.1 www.avg.grab-it-today.net
                  127.0.0.1 avg.grab-it-today.net
                  127.0.0.1 www.avg.softwarecenterz.com
                  127.0.0.1 avg.softwarecenterz.com
                  127.0.0.1 www.avg-secure.com
                  127.0.0.1 avg-secure.com
                  127.0.0.1 www.aviadaptation.com
                  127.0.0.1 aviadaptation.com
                  127.0.0.1 avian-ads.com
                  127.0.0.1 www.avicoupler.com
                  127.0.0.1 avicoupler.com
                  127.0.0.1 www.avideoaxaccess.com
                  127.0.0.1 avideoaxaccess.com
                  127.0.0.1 www.avideosurfer.com
                  127.0.0.1 avideosurfer.com
                  127.0.0.1 www.avidirection.com
                  127.0.0.1 avidirection.com
                  127.0.0.1 www.aviewersoft.com
                  127.0.0.1 aviewersoft.com
                  127.0.0.1 www.aviexecution.com
                  127.0.0.1 aviexecution.com
                  127.0.0.1 www.avihelper.com
                  127.0.0.1 avihelper.com
                  127.0.0.1 www.aviinstrument.com
                  127.0.0.1 aviinstrument.com
                  127.0.0.1 www.avitool.com
                  127.0.0.1 avitool.com
                  127.0.0.1 www.aviutility.com
                  127.0.0.1 aviutility.com
                  127.0.0.1 www.avpcheckupdate.com
                  127.0.0.1 avpcheckupdate.com
                  127.0.0.1 www.avsmanufacture.com
                  127.0.0.1 avsmanufacture.com
                  127.0.0.1 www.avsystemcare.com
                  127.0.0.1 avsystemcare.com
                  127.0.0.1 www.avxizaaqada.biz
                  127.0.0.1 avxizaaqada.biz
                  127.0.0.1 www.avxiz-anjpn.biz
                  127.0.0.1 avxiz-anjpn.biz
                  127.0.0.1 www.avxizueorn.biz
                  127.0.0.1 avxizueorn.biz
                  127.0.0.1 www.avxiz-ueorn.biz
                  127.0.0.1 avxiz-ueorn.biz
                  127.0.0.1 www.avxiz-vtvcp.biz
                  127.0.0.1 avxiz-vtvcp.biz
                  127.0.0.1 www.avxiz-ygco.biz
                  127.0.0.1 avxiz-ygco.biz
                  127.0.0.1 www.avxiz-zqav.biz
                  127.0.0.1 avxiz-zqav.biz
                  127.0.0.1 www.awarenesstech.com
                  127.0.0.1 awarenesstech.com
                  127.0.0.1 www.awarninglist.com
                  127.0.0.1 awarninglist.com
                  127.0.0.1 awbeta.net-nucleus.com
                  127.0.0.1 www.awesomehomepage.com
                  127.0.0.1 awesomehomepage.com
                  127.0.0.1 awmcash.biz
                  127.0.0.1 awmdabest.com
                  127.0.0.1 www.axemediasoftware.com
                  127.0.0.1 axemediasoftware.com
                  127.0.0.1 www.aximageobject.com
                  127.0.0.1 aximageobject.com
                  127.0.0.1 www.axmediaproject.com
                  127.0.0.1 axmediaproject.com
                  127.0.0.1 www.axmediasoftware.com
                  127.0.0.1 axmediasoftware.com
                  127.0.0.1 www.axmediasolutions.com
                  127.0.0.1 axmediasolutions.com
                  127.0.0.1 www.axobjectpage.com
                  127.0.0.1 axobjectpage.com
                  127.0.0.1 www.axobjectsource.com
                  127.0.0.1 axobjectsource.com
                  127.0.0.1 www.axsoftwaretool.com
                  127.0.0.1 axsoftwaretool.com
                  127.0.0.1 www.axvideoproject.com
                  127.0.0.1 axvideoproject.com
                  127.0.0.1 www.axvideosetup.com
                  127.0.0.1 axvideosetup.com
                  127.0.0.1 ayakawamura.com
                  127.0.0.1 ayb.dns-look-up.com
                  127.0.0.1 ayb.netbios-wait.com
                  127.0.0.1 ayumitaniguchi.com
                  127.0.0.1 azebar.com
                  127.0.0.1 www.azureusclub.com
                  127.0.0.1 azureusclub.com
                  127.0.0.1 www.azureus-freebie.com
                  127.0.0.1 azureus-freebie.com
                  127.0.0.1 www.azzetta.it
                  127.0.0.1 azzetta.it
                  127.0.0.1 b.casalemedia.com
                  127.0.0.1 b122.mcboo.com
                  127.0.0.1 www.babe.k-lined.com
                  127.0.0.1 babe.k-lined.com
                  127.0.0.1 www.babe.the-killer.bz
                  127.0.0.1 babe.the-killer.bz
                  127.0.0.1 www.babenet.com
                  127.0.0.1 babenet.com
                  127.0.0.1 www.babespornmag.com
                  127.0.0.1 babespornmag.com
                  127.0.0.1 www.babeweb.de
                  127.0.0.1 babeweb.de
                  127.0.0.1 www.baccarat-other.info
                  127.0.0.1 baccarat-other.info
                  127.0.0.1 www.backstripgirls.com
                  127.0.0.1 backstripgirls.com
                  127.0.0.1 backup.mabou.org
                  127.0.0.1 www.baiduqqsina.cn
                  127.0.0.1 baiduqqsina.cn
                  127.0.0.1 www.balotierra.com
                  127.0.0.1 balotierra.com
                  127.0.0.1 bannedhost.net
                  127.0.0.1 barbudafarms.com
                  127.0.0.1 www.bardownload.com
                  127.0.0.1 bardownload.com
                  127.0.0.1 barnandfence.com
                  127.0.0.1 batsearch.com
                  127.0.0.1 baygraphicsllc.com
                  127.0.0.1 bb.wudiliuliang.com
                  127.0.0.1 bbbsearch.com
                  127.0.0.1 bb-search.com
                  127.0.0.1 www.bcnproduction.com
                  127.0.0.1 bcnproduction.com
                  127.0.0.1 bdsmlibrary.net
                  127.0.0.1 www.bdsmpornmag.com
                  127.0.0.1 bdsmpornmag.com
                  127.0.0.1 www.bealent.com
                  127.0.0.1 bealent.com
                  127.0.0.1 www.bearshare.click-new-download.com
                  127.0.0.1 bearshare.click-new-download.com
                  127.0.0.1 www.bearshare.download-me.info
                  127.0.0.1 bearshare.download-me.info
                  127.0.0.1 www.bearshare.mp3-muzic.com
                  127.0.0.1 bearshare.mp3-muzic.com
                  127.0.0.1 www.bearshare-download.org
                  127.0.0.1 bearshare-download.org
                  127.0.0.1 www.bearshare-downloads.net
                  127.0.0.1 bearshare-downloads.net
                  127.0.0.1 www.bearsharelive.co.uk
                  127.0.0.1 bearsharelive.co.uk
                  127.0.0.1 www.bearshare-music-downloads.com
                  127.0.0.1 bearshare-music-downloads.com
                  127.0.0.1 www.bearsharepro2007.com
                  127.0.0.1 bearsharepro2007.com
                  127.0.0.1 www.bearshare-usa.com
                  127.0.0.1 bearshare-usa.com
                  127.0.0.1 bedhome.com
                  127.0.0.1 bediadance.com
                  127.0.0.1 www.beebappyy.biz
                  127.0.0.1 beebappyy.biz
                  127.0.0.1 www.begin2search.com
                  127.0.0.1 begin2search.com
                  127.0.0.1 bellabasketsfl.com
                  127.0.0.1 bernaolatwin.com
                  127.0.0.1 www.berufe-jobs.de
                  127.0.0.1 berufe-jobs.de
                  127.0.0.1 www.berufe-server.de
                  127.0.0.1 berufe-server.de
                  127.0.0.1 www.berufe-welt.de
                  127.0.0.1 berufe-welt.de
                  127.0.0.1 www.berufs-wahl.de
                  127.0.0.1 berufs-wahl.de
                  127.0.0.1 www.beruijindegunhadesun.com
                  127.0.0.1 beruijindegunhadesun.com
                  127.0.0.1 www.best3xclips.com
                  127.0.0.1 best3xclips.com
                  127.0.0.1 www.bestadults.com
                  127.0.0.1 bestadults.com
                  127.0.0.1 www.best-codec.com
                  127.0.0.1 best-codec.com
                  127.0.0.1 best-counter.com
                  127.0.0.1 bestcrawler.com
                  127.0.0.1 www.bestdailyvids.com
                  127.0.0.1 bestdailyvids.com
                  127.0.0.1 bestfor.ru
                  127.0.0.1 www.bestfuckvids.com
                  127.0.0.1 bestfuckvids.com
                  127.0.0.1 best-hardpics.com
                  127.0.0.1 www.bestmanage.org
                  127.0.0.1 bestmanage.org
                  127.0.0.1 www.bestmanage0.org
                  127.0.0.1 bestmanage0.org
                  127.0.0.1 www.bestmanage1.org
                  127.0.0.1 bestmanage1.org
                  127.0.0.1 www.bestmanage2.org
                  127.0.0.1 bestmanage2.org
                  127.0.0.1 www.bestmanage3.org
                  127.0.0.1 bestmanage3.org
                  127.0.0.1 www.bestmanage4.org
                  127.0.0.1 bestmanage4.org
                  127.0.0.1 www.bestmanage5.org
                  127.0.0.1 bestmanage5.org
                  127.0.0.1 www.bestmanage6.org
                  127.0.0.1 bestmanage6.org
                  127.0.0.1 www.bestmanage7.org
                  127.0.0.1 bestmanage7.org
                  127.0.0.1 www.bestmanage8.org
                  127.0.0.1 bestmanage8.org
                  127.0.0.1 www.bestmanage9.org
                  127.0.0.1 bestmanage9.org
                  127.0.0.1 www.bestmovszone.com
                  127.0.0.1 bestmovszone.com
                  127.0.0.1 www.bestoffersnetworks.com
                  127.0.0.1 bestoffersnetworks.com
                  127.0.0.1 www.best-porncollection.com
                  127.0.0.1 best-porncollection.com
                  127.0.0.1 bestporngate.com
                  127.0.0.1 www.bestsafetyguide.net
                  127.0.0.1 bestsafetyguide.net
                  127.0.0.1 www.bestsearch.cc
                  127.0.0.1 bestsearch.cc
                  127.0.0.1 www.bestsearchworld.info
                  127.0.0.1 bestsearchworld.info
                  127.0.0.1 www.best-spyware.info
                  127.0.0.1 best-spyware.info
                  127.0.0.1 www.best-targeted-traffic.com
                  127.0.0.1 best-targeted-traffic.com
                  127.0.0.1 www.best-voyeur.info
                  127.0.0.1 best-voyeur.info
                  127.0.0.1 bestweblinks.com
                  127.0.0.1 best-winning-casino.com
                  127.0.0.1 www.bestworldgirls-for-u.net
                  127.0.0.1 bestworldgirls-for-u.net
                  127.0.0.1 www.bestxclips.com
                  127.0.0.1 bestxclips.com
                  127.0.0.1 bestxporno.com
                  127.0.0.1 www.bestxxxmpegs.com
                  127.0.0.1 bestxxxmpegs.com
                  127.0.0.1 www.bettersearch.biz
                  127.0.0.1 bettersearch.biz
                  127.0.0.1 www.bgazzetta.it
                  127.0.0.1 bgazzetta.it
                  127.0.0.1 www.bgoogle.it
                  127.0.0.1 bgoogle.it
                  127.0.0.1 www.bigcodecadult.com
                  127.0.0.1 bigcodecadult.com
                  127.0.0.1 www.bigcodecadult2008.com
                  127.0.0.1 bigcodecadult2008.com
                  127.0.0.1 www.bigcodecadult2008-17.com
                  127.0.0.1 bigcodecadult2008-17.com
                  127.0.0.1 www.bighot18adult2008.com
                  127.0.0.1 bighot18adult2008.com
                  127.0.0.1 www.bighot18-adult2008.com
                  127.0.0.1 bighot18-adult2008.com
                  127.0.0.1 www.bighot18codec2008.com
                  127.0.0.1 bighot18codec2008.com
                  127.0.0.1 www.bighot18-codec2008.com
                  127.0.0.1 bighot18-codec2008.com
                  127.0.0.1 www.bigtrafficnetwork.com
                  127.0.0.1 bigtrafficnetwork.com
                  127.0.0.1 www.bigwww.com
                  127.0.0.1 bigwww.com
                  127.0.0.1 www.bill.de
                  127.0.0.1 bill.de
                  127.0.0.1 bin.errorprotector.com
                  127.0.0.1 bins.media-motor.net
                  127.0.0.1 bins2.media-motor.net
                  127.0.0.1 bis.180solutions.com
                  127.0.0.1 bitchesonline.net
                  127.0.0.1 www.bitcomet-freebie.com
                  127.0.0.1 bitcomet-freebie.com
                  127.0.0.1 www.bittorrent.click-new-download.com
                  127.0.0.1 bittorrent.click-new-download.com
                  127.0.0.1 biz.biz
                  127.0.0.1 www.bkvcompany.com
                  127.0.0.1 bkvcompany.com
                  127.0.0.1 www.blackblues00.com
                  127.0.0.1 blackblues00.com
                  127.0.0.1 www.blackcodec.com
                  127.0.0.1 blackcodec.com
                  127.0.0.1 www.black-codec.com
                  127.0.0.1 black-codec.com
                  127.0.0.1 www.blackcodec.net
                  127.0.0.1 blackcodec.net
                  127.0.0.1 www.blackhats.tc
                  127.0.0.1 blackhats.tc
                  127.0.0.1 www.blackhawksoftware.com
                  127.0.0.1 blackhawksoftware.com
                  127.0.0.1 blackjack-free.net
                  127.0.0.1 www.blacklegion.info
                  127.0.0.1 blacklegion.info
                  127.0.0.1 blazefind.com
                  127.0.0.1 blender.xu.pl
                  127.0.0.1 www.blockcheckercontrol.com
                  127.0.0.1 blockcheckercontrol.com
                  127.0.0.1 blondetgp.com
                  127.0.0.1 www.blue-elefant.com
                  127.0.0.1 blue-elefant.com
                  127.0.0.1 www.bm.theaimonline.com
                  127.0.0.1 bm.theaimonline.com
                  127.0.0.1 www.bnmgate.com
                  127.0.0.1 bnmgate.com
                  127.0.0.1 bodaciousbabette.com
                  127.0.0.1 www.bonzi.com
                  127.0.0.1 bonzi.com
                  127.0.0.1 boobdoll.com
                  127.0.0.1 boobsandtits.com
                  127.0.0.1 boobsclub.com
                  127.0.0.1 www.bookedspace.com
                  127.0.0.1 bookedspace.com
                  127.0.0.1 www.boom.com.vn
                  127.0.0.1 boom.com.vn
                  127.0.0.1 www.boomgirltv.com
                  127.0.0.1 boomgirltv.com
                  127.0.0.1 boredlife.com
                  127.0.0.1 bowlofogumbo.com
                  127.0.0.1 www.bpfq02.com
                  127.0.0.1 bpfq02.com
                  127.0.0.1 www.bqgate.com
                  127.0.0.1 bqgate.com
                  127.0.0.1 br.errorsafe.com
                  127.0.0.1 br.winantivirus.com
                  127.0.0.1 br.winfixer.com
                  127.0.0.1 bradcoem.org
                  127.0.0.1 www.braincodec.com
                  127.0.0.1 braincodec.com
                  127.0.0.1 www.brakecodec.com
                  127.0.0.1 brakecodec.com
                  127.0.0.1 brandiyoung.com
                  127.0.0.1 www.bravesentry.com
                  127.0.0.1 bravesentry.com
                  127.0.0.1 www.breenten.biz
                  127.0.0.1 breenten.biz
                  127.0.0.1 www.brodbfm.net
                  127.0.0.1 brodbfm.net
                  127.0.0.1 brookeburn.com
                  127.0.0.1 www.browserwise.com
                  127.0.0.1 browserwise.com
                  127.0.0.1 bsa.safetydownload.com
                  127.0.0.1 www.bsplaycodec.com
                  127.0.0.1 bsplaycodec.com
                  127.0.0.1 bucps.com
                  127.0.0.1 buhartes.info
                  127.0.0.1 buldog-stats.com
                  127.0.0.1 www.bullseye-network.com
                  127.0.0.1 bullseye-network.com
                  127.0.0.1 burgerkingbigscreen.com
                  127.0.0.1 www.burningsite.com
                  127.0.0.1 burningsite.com
                  127.0.0.1 www.burnsrecyclinginc.com
                  127.0.0.1 burnsrecyclinginc.com
                  127.0.0.1 buscards.net
                  127.0.0.1 bustyrussell.com
                  127.0.0.1 www.busysearch.net
                  127.0.0.1 busysearch.net
                  127.0.0.1 buttejazz.org
                  127.0.0.1 www.buy-find.info
                  127.0.0.1 buy-find.info
                  127.0.0.1 buyselldomain.net
                  127.0.0.1 www.buytraff.biz
                  127.0.0.1 buytraff.biz
                  127.0.0.1 buz.ru
                  127.0.0.1 www.bvdtechinque.com
                  127.0.0.1 bvdtechinque.com
                  127.0.0.1 www.bvirgilio.it
                  127.0.0.1 bvirgilio.it
                  127.0.0.1 www.bye-spyware.com
                  127.0.0.1 bye-spyware.com
                  127.0.0.1 c.centralmedia.ws
                  127.0.0.1 www.c.enhance.com
                  127.0.0.1 c.enhance.com
                  127.0.0.1 c.goclick.com
                  127.0.0.1 www.c4tdownload.com
                  127.0.0.1 c4tdownload.com
                  127.0.0.1 www.c5.www4free.info
                  127.0.0.1 c5.www4free.info
                  127.0.0.1 www.cache.surfaccuracy.com
                  127.0.0.1 cache.surfaccuracy.com
                  127.0.0.1 cache.ysbweb.com
                  127.0.0.1 www.cadesfinjeriokas.com
                  127.0.0.1 cadesfinjeriokas.com
                  127.0.0.1 calcioturris.com
                  127.0.0.1 www.calendaralerts.net
                  127.0.0.1 calendaralerts.net
                  127.0.0.1 www.callinghome.biz
                  127.0.0.1 callinghome.biz
                  127.0.0.1 www.cameouk.co.uk
                  127.0.0.1 cameouk.co.uk
                  127.0.0.1 cameup.com
                  127.0.0.1 www.camouflageclothingonline.net
                  127.0.0.1 camouflageclothingonline.net
                  127.0.0.1 campaigns.outerinfo.net
                  127.0.0.1 camup.net
                  127.0.0.1 canberracricketcoaching.com
                  127.0.0.1 candycantaloupes.com
                  127.0.0.1 www.canidetect.org
                  127.0.0.1 canidetect.org
                  127.0.0.1 www.cantfind.com
                  127.0.0.1 cantfind.com
                  127.0.0.1 careers.dulcineasystems.net
                  127.0.0.1 carsands.com
                  127.0.0.1 carsrentals.net
                  127.0.0.1 cartoes.uol.com.br
                  127.0.0.1 www.casalemedia.com
                  127.0.0.1 casalemedia.com
                  127.0.0.1 www.cashdeluxe.net
                  127.0.0.1 cashdeluxe.net
                  127.0.0.1 www.cashengines.com
                  127.0.0.1 cashengines.com
                  127.0.0.1 cashsearch.biz
                  127.0.0.1 www.cashsurfers.com
                  127.0.0.1 cashsurfers.com
                  127.0.0.1 www.cashunlim.com
                  127.0.0.1 cashunlim.com
                  127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
                  127.0.0.1 casino2win.net
                  127.0.0.1 casino-gambling-1.net
                  127.0.0.1 casino-gambling-2.net
                  127.0.0.1 casinomidas.net
                  127.0.0.1 casinonline.net
                  127.0.0.1 casino-onlines.net
                  127.0.0.1 www.castingsamateur.com
                  127.0.0.1 castingsamateur.com
                  127.0.0.1 catallogue.com
                  127.0.0.1 www.catch-dc.info
                  127.0.0.1 catch-dc.info
                  127.0.0.1 categories.mygeek.com
                  127.0.0.1 catsss.da.ru
                  127.0.0.1 caxa.ru
                  127.0.0.1 cazygirls-world.com
                  127.0.0.1 cc.panet.org
                  127.0.0.1 www.ccecaedbebfcaf.com
                  127.0.0.1 ccecaedbebfcaf.com
                  127.0.0.1 cclebali.org
                  127.0.0.1 www.ccorriere.it
                  127.0.0.1 ccorriere.it
                  127.0.0.1 www.cdcopysite.com
                  127.0.0.1 cdcopysite.com
                  127.0.0.1 www.cdegate.com
                  127.0.0.1 cdegate.com
                  127.0.0.1 cdn.drivecleaner.com
                  127.0.0.1 cdn.errorsafe.com
                  127.0.0.1 cdn.movies-etc.com
                  127.0.0.1 cdn.winsoftware.com
                  127.0.0.1 cdn2.movies-etc.com
                  127.0.0.1 www.cdorriere.it
                  127.0.0.1 cdorriere.it
                  127.0.0.1 ceewawires.org
                  127.0.0.1 centralmedia.ws
                  127.0.0.1 certumgroup.com
                  127.0.0.1 www.cforriere.it
                  127.0.0.1 cforriere.it
                  127.0.0.1 www.check.jupitersatellites.biz
                  127.0.0.1 check.jupitersatellites.biz
                  127.0.0.1 www.checkin100.com
                  127.0.0.1 checkin100.com
                  127.0.0.1 www.checkssecurity.com
                  127.0.0.1 checkssecurity.com
                  127.0.0.1 chelancatering.com
                  127.0.0.1 www.chenshijituan.com
                  127.0.0.1 chenshijituan.com
                  127.0.0.1 childrenvilla.com
                  127.0.0.1 www.chilly3xvids.com
                  127.0.0.1 chilly3xvids.com
                  127.0.0.1 www.chillymovs.com
                  127.0.0.1 chillymovs.com
                  127.0.0.1 chips-4-free.com
                  127.0.0.1 chrisswasey.com
                  127.0.0.1 chriswallace.net
                  127.0.0.1 www.cia-trjn.myvnc.com
                  127.0.0.1 cia-trjn.myvnc.com
                  127.0.0.1 www.cinemadownload.com
                  127.0.0.1 cinemadownload.com
                  127.0.0.1 www.ciorriere.it
                  127.0.0.1 ciorriere.it
                  127.0.0.1 www.cirriere.it
                  127.0.0.1 cirriere.it
                  127.0.0.1 www.citycodec.com
                  127.0.0.1 citycodec.com
                  127.0.0.1 ckick4thumbs.com
                  127.0.0.1 cl55.biz
                  127.0.0.1 clackamasliteraryreview.com
                  127.0.0.1 www.clckm.com
                  127.0.0.1 clckm.com
                  127.0.0.1 www.cleancodec.com
                  127.0.0.1 cleancodec.com
                  127.0.0.1 www.cleansoftwares.com
                  127.0.0.1 cleansoftwares.com
                  127.0.0.1 clearsearch.cc
                  127.0.0.1 clearsearch.net
                  127.0.0.1 clickaire.com
                  127.0.0.1 www.click-codec.com
                  127.0.0.1 click-codec.com
                  127.0.0.1 www.clickhere4search.com
                  127.0.0.1 clickhere4search.com
                  127.0.0.1 www.click-new-download.com
                  127.0.0.1 click-new-download.com
                  127.0.0.1 click-now.net
                  127.0.0.1 www.clickspring.net
                  127.0.0.1 clickspring.net
                  127.0.0.1 www.click-to-download.com
                  127.0.0.1 click-to-download.com
                  127.0.0.1 www.clicktomakeasearch.com
                  127.0.0.1 clicktomakeasearch.com
                  127.0.0.1 clickyestoenter.net
                  127.0.0.1 client.exeupdate.com
                  127.0.0.1 client.myadultexplorer.com
                  127.0.0.1 www.cliks.org
                  127.0.0.1 cliks.org
                  127.0.0.1 www.clipsfestival.com
                  127.0.0.1 clipsfestival.com
                  127.0.0.1 www.clipsreality.com
                  127.0.0.1 clipsreality.com
                  127.0.0.1 www.clorriere.it
                  127.0.0.1 clorriere.it
                  127.0.0.1 clrsch.com
                  127.0.0.1 www.clubxxxvideo.com
                  127.0.0.1 clubxxxvideo.com
                  127.0.0.1 clusif.free.fr
                  127.0.0.1 cmtapestry.com
                  127.0.0.1 www.cnetadd.com
                  127.0.0.1 cnetadd.com
                  127.0.0.1 www.cnomy.com
                  127.0.0.1 cnomy.com
                  127.0.0.1 www.cnzz.com
                  127.0.0.1 cnzz.com
                  127.0.0.1 www.cocktails-ideen.de
                  127.0.0.1 cocktails-ideen.de
                  127.0.0.1 code.ignphrases.com
                  127.0.0.1 codec.ninoa.com
                  127.0.0.1 www.codecadult18.com
                  127.0.0.1 codecadult18.com
                  127.0.0.1 www.codecbest.com
                  127.0.0.1 codecbest.com
                  127.0.0.1 www.codecbsplay.com
                  127.0.0.1 codecbsplay.com
                  127.0.0.1 www.codecdemo.com
                  127.0.0.1 codecdemo.com
                  127.0.0.1 www.codecdvd.net
                  127.0.0.1 codecdvd.net
                  127.0.0.1 www.codecdvi.com
                  127.0.0.1 codecdvi.com
                  127.0.0.1 www.codec-fun.com
                  127.0.0.1 codec-fun.com
                  127.0.0.1 www.codechard.com
                  127.0.0.1 codechard.com
                  127.0.0.1 www.codechot.net
                  127.0.0.1 codechot.net
                  127.0.0.1 www.codechq.net
                  127.0.0.1 codechq.net
                  127.0.0.1 www.codecmeg.net
                  127.0.0.1 codecmeg.net
                  127.0.0.1 www.codecmega.com
                  127.0.0.1 codecmega.com
                  127.0.0.1 www.codecmega.net
                  127.0.0.1 codecmega.net
                  127.0.0.1 www.codecmoon.com
                  127.0.0.1 codecmoon.com
                  127.0.0.1 www.codecmpg.com
                  127.0.0.1 codecmpg.com
                  127.0.0.1 www.codecnice.net
                  127.0.0.1 codecnice.net
                  127.0.0.1 www.codecnitro.com
                  127.0.0.1 codecnitro.com
                  127.0.0.1 www.codecops.net
                  127.0.0.1 codecops.net
                  127.0.0.1 www.codecplay.com
                  127.0.0.1 codecplay.com
                  127.0.0.1 www.codecpretty.net
                  127.0.0.1 codecpretty.net
                  127.0.0.1 www.codecpro.net
                  127.0.0.1 codecpro.net
                  127.0.0.1 www.codecred.net
                  127.0.0.1 codecred.net
                  127.0.0.1 www.codecsoft.net
                  127.0.0.1 codecsoft.net
                  127.0.0.1 www.codecthe.com
                  127.0.0.1 codecthe.com
                  127.0.0.1 www.codectime.com
                  127.0.0.1 codectime.com
                  127.0.0.1 www.codecultra.net
                  127.0.0.1 codecultra.net
                  127.0.0.1 www.codecvids.com
                  127.0.0.1 codecvids.com
                  127.0.0.1 www.codecvip.com
                  127.0.0.1 codecvip.com
                  127.0.0.1 www.codecviva.com
                  127.0.0.1 codecviva.com
                  127.0.0.1 www.codeczang.net
                  127.0.0.1 codeczang.net
                  127.0.0.1 www.codrriere.it
                  127.0.0.1 codrriere.it
                  127.0.0.1 www.coeriere.it
                  127.0.0.1 coeriere.it
                  127.0.0.1 www.coerriere.it
                  127.0.0.1 coerriere.it
                  127.0.0.1 www.cofrriere.it
                  127.0.0.1 cofrriere.it
                  127.0.0.1 www.cogrriere.it
                  127.0.0.1 cogrriere.it
                  127.0.0.1 www.coirriere.it
                  127.0.0.1 coirriere.it
                  127.0.0.1 command.adservs.com
                  127.0.0.1 www.commonname.com
                  127.0.0.1 commonname.com
                  127.0.0.1 www.computerpcgames.net
                  127.0.0.1 computerpcgames.net
                  127.0.0.1 www.computerrecover.com
                  127.0.0.1 computerrecover.com
                  127.0.0.1 config.180solutions.com
                  127.0.0.1 www.congtouzailai.net
                  127.0.0.1 congtouzailai.net
                  127.0.0.1 www.content.dollarrevenue.com
                  127.0.0.1 content.dollarrevenue.com
                  127.0.0.1 www.content.ireit.com
                  127.0.0.1 content.ireit.com
                  127.0.0.1 content.onerateld.com
                  127.0.0.1 www.contentmatch.net
                  127.0.0.1 contentmatch.net
                  127.0.0.1 www.contextplus.net
                  127.0.0.1 contextplus.net
                  127.0.0.1 www.contra-virus.com
                  127.0.0.1 contra-virus.com
                  127.0.0.1 www.controlmeh.com
                  127.0.0.1 controlmeh.com
                  127.0.0.1 www.convenient-search.com
                  127.0.0.1 convenient-search.com
                  127.0.0.1 www.cookingluck.com
                  127.0.0.1 cookingluck.com
                  127.0.0.1 www.cooldeskalert.com
                  127.0.0.1 cooldeskalert.com
                  127.0.0.1 coolfetishsite.com
                  127.0.0.1 coolfreehost.com
                  127.0.0.1 coolfreepage.com
                  127.0.0.1 coolfreepages.com
                  127.0.0.1 cool-homepage.co
                  127.0.0.1 cool-homepage.com
                  127.0.0.1 coolmoneysearch.com
                  127.0.0.1 www.coolonlinebusiness.com
                  127.0.0.1 coolonlinebusiness.com
                  127.0.0.1 coolpornsearch.com
                  127.0.0.1 cool-search.net
                  127.0.0.1 cool-search.netfartpost.com
                  127.0.0.1 coolsearcher.info
                  127.0.0.1 www.coolservecorp.net
                  127.0.0.1 coolservecorp.net
                  127.0.0.1 www.coolwebsearch.com
                  127.0.0.1 coolwebsearch.com
                  127.0.0.1 cool-web-search.com
                  127.0.0.1 coolwebsearsh.com
                  127.0.0.1 www.coolwwwsearch.com
                  127.0.0.1 coolwwwsearch.com
                  127.0.0.1 cool-xxx.net
                  127.0.0.1 www.coorriere.it
                  127.0.0.1 coorriere.it
                  127.0.0.1 copmtraine.com
                  127.0.0.1 www.coprriere.it
                  127.0.0.1 coprriere.it
                  127.0.0.1 www.core.psyche-evolution.com
                  127.0.0.1 core.psyche-evolution.com
                  127.0.0.1 www.coreiere.it
                  127.0.0.1 coreiere.it
                  127.0.0.1 www.coreriere.it
                  127.0.0.1 coreriere.it
                  127.0.0.1 www.corrdiere.it
                  127.0.0.1 corrdiere.it
                  127.0.0.1 www.correiere.it
                  127.0.0.1 correiere.it
                  127.0.0.1 www.corrfiere.it
                  127.0.0.1 corrfiere.it
                  127.0.0.1 www.corrgiere.it
                  127.0.0.1 corrgiere.it
                  127.0.0.1 www.corridere.it
                  127.0.0.1 corridere.it
                  127.0.0.1 www.corriedre.it
                  127.0.0.1 corriedre.it
                  127.0.0.1 www.corriee.it
                  127.0.0.1 corriee.it
                  127.0.0.1 www.corrieere.it
                  127.0.0.1 corrieere.it
                  127.0.0.1 www.corriefre.it
                  127.0.0.1 corriefre.it
                  127.0.0.1 www.corriegre.it
                  127.0.0.1 corriegre.it
                  127.0.0.1 www.corrierde.it
                  127.0.0.1 corrierde.it
                  127.0.0.1 www.corriered.it
                  127.0.0.1 corriered.it
                  127.0.0.1 www.corrieree.it
                  127.0.0.1 corrieree.it
                  127.0.0.1 www.corrieref.it
                  127.0.0.1 corrieref.it
                  127.0.0.1 www.corrierer.it
                  127.0.0.1 corrierer.it
                  127.0.0.1 www.corrieres.it
                  127.0.0.1 corrieres.it
                  127.0.0.1 www.corrierew.it
                  127.0.0.1 corrierew.it
                  127.0.0.1 www.corrierfe.it
                  127.0.0.1 corrierfe.it
                  127.0.0.1 www.corrierge.it
                  127.0.0.1 corrierge.it
                  127.0.0.1 www.corrierr.it
                  127.0.0.1 corrierr.it
                  127.0.0.1 www.corrierre.it
                  127.0.0.1 corrierre.it
                  127.0.0.1 www.corrierse.it
                  127.0.0.1 corrierse.it
                  127.0.0.1 www.corrierte.it
                  127.0.0.1 corrierte.it
                  127.0.0.1 www.corrierw.it
                  127.0.0.1 corrierw.it
                  127.0.0.1 www.corrierwe.it
                  127.0.0.1 corrierwe.it
                  127.0.0.1 www.corriesre.it
                  127.0.0.1 corriesre.it
                  127.0.0.1 www.corriete.it
                  127.0.0.1 corriete.it
                  127.0.0.1 www.corrietre.it
                  127.0.0.1 corrietre.it
                  127.0.0.1 www.corriewre.it
                  127.0.0.1 corriewre.it
                  127.0.0.1 www.corrifere.it
                  127.0.0.1 corrifere.it
                  127.0.0.1 www.corriiere.it
                  127.0.0.1 corriiere.it
                  127.0.0.1 www.corrilere.it
                  127.0.0.1 corrilere.it
                  127.0.0.1 www.corrioere.it
                  127.0.0.1 corrioere.it
                  127.0.0.1 www.corrire.it
                  127.0.0.1 corrire.it
                  127.0.0.1 www.corrirere.it
                  127.0.0.1 corrirere.it
                  127.0.0.1 www.corrirre.it
                  127.0.0.1 corrirre.it
                  127.0.0.1 www.corrisere.it
                  127.0.0.1 corrisere.it
                  127.0.0.1 www.corriuere.it
                  127.0.0.1 corriuere.it
                  127.0.0.1 www.corriwere.it
                  127.0.0.1 corriwere.it
                  127.0.0.1 www.corriwre.it
                  127.0.0.1 corriwre.it
                  127.0.0.1 www.corrliere.it
                  127.0.0.1 corrliere.it
                  127.0.0.1 www.corroere.it
                  127.0.0.1 corroere.it
                  127.0.0.1 www.corroiere.it
                  127.0.0.1 corroiere.it
                  127.0.0.1 www.corrriere.it
                  127.0.0.1 corrriere.it
                  127.0.0.1 www.corrtiere.it
                  127.0.0.1 corrtiere.it
                  127.0.0.1 www.corruere.it
                  127.0.0.1 corruere.it
                  127.0.0.1 www.corruiere.it
                  127.0.0.1 corruiere.it
                  127.0.0.1 www.cortiere.it
                  127.0.0.1 cortiere.it
                  127.0.0.1 www.cortriere.it
                  127.0.0.1 cortriere.it
                  127.0.0.1 www.costrike.com
                  127.0.0.1 costrike.com
                  127.0.0.1 www.cotriere.it
                  127.0.0.1 cotriere.it
                  127.0.0.1 www.cotrriere.it
                  127.0.0.1 cotrriere.it
                  127.0.0.1 couldnotfind.com
                  127.0.0.1 count.cc
                  127.0.0.1 count.hitscount.net
                  127.0.0.1 count-all.com
                  127.0.0.1 www.countdutycall.info
                  127.0.0.1 countdutycall.info
                  127.0.0.1 counter.sexmaniack.com
                  127.0.0.1 www.courtrecordslookup.com
                  127.0.0.1 courtrecordslookup.com
                  127.0.0.1 www.cporriere.it
                  127.0.0.1 cporriere.it
                  127.0.0.1 www.cprriere.it
                  127.0.0.1 cprriere.it
                  127.0.0.1 cpvfeed.com
                  127.0.0.1 cracks.me.uk
                  127.0.0.1 www.cracks4all.com
                  127.0.0.1 cracks4all.com
                  127.0.0.1 www.crapsgold.info
                  127.0.0.1 crapsgold.info
                  127.0.0.1 www.crazygirls-world.com
                  127.0.0.1 crazygirls-world.com
                  127.0.0.1 www.crazywinnings.com
                  127.0.0.1 crazywinnings.com
                  127.0.0.1 creamedcutties.com
                  127.0.0.1 www.createaccesskey.com
                  127.0.0.1 createaccesskey.com
                  127.0.0.1 www.creatonsoft.com
                  127.0.0.1 creatonsoft.com
                  127.0.0.1 creditsearchonline.com
                  127.0.0.1 crestring.com
                  127.0.0.1 crooder.com
                  127.0.0.1 www.crriere.it
                  127.0.0.1 crriere.it
                  127.0.0.1 www.cryptdrive.com
                  127.0.0.1 cryptdrive.com
                  127.0.0.1 www.crystalysmedia.com
                  127.0.0.1 crystalysmedia.com
                  127.0.0.1 www.csx.adservs.com
                  127.0.0.1 csx.adservs.com
                  127.0.0.1 cts.180solutions.com
                  127.0.0.1 www.cuisinartoven.com
                  127.0.0.1 cuisinartoven.com
                  127.0.0.1 www.curedc.info
                  127.0.0.1 curedc.info
                  127.0.0.1 www.curepcsolutions.com
                  127.0.0.1 curepcsolutions.com
                  127.0.0.1 curvedspaces.com
                  127.0.0.1 www.cutadult.com
                  127.0.0.1 cutadult.com
                  127.0.0.1 www.cutoffspyware.com
                  127.0.0.1 cutoffspyware.com
                  127.0.0.1 www.cvirgilio.it
                  127.0.0.1 cvirgilio.it
                  127.0.0.1 www.cvorriere.it
                  127.0.0.1 cvorriere.it
                  127.0.0.1 cvs.jps.ru
                  127.0.0.1 cvsymphony.com
                  127.0.0.1 www.cxorriere.it
                  127.0.0.1 cxorriere.it
                  127.0.0.1 www.cyberrape.com
                  127.0.0.1 cyberrape.com
                  127.0.0.1 cydom.com
                  127.0.0.1 www.cydoor.com
                  127.0.0.1 cydoor.com
                  127.0.0.1 d34s.qfdfqawd.cn
                  127.0.0.1 www.daily3xlinks.com
                  127.0.0.1 daily3xlinks.com
                  127.0.0.1 www.dailybestclips.com
                  127.0.0.1 dailybestclips.com
                  127.0.0.1 daily-gals.com
                  127.0.0.1 www.dailyhugemovs.com
                  127.0.0.1 dailyhugemovs.com
                  127.0.0.1 www.dailykeys.com
                  127.0.0.1 dailykeys.com
                  127.0.0.1 www.dailypornmag.com
                  127.0.0.1 dailypornmag.com
                  127.0.0.1 dailyteenspic.com
                  127.0.0.1 www.dailytoolbar.com
                  127.0.0.1 dailytoolbar.com
                  127.0.0.1 www.dailyxvids.com
                  127.0.0.1 dailyxvids.com
                  127.0.0.1 dancingbabycd.com
                  127.0.0.1 www.dapsol.com
                  127.0.0.1 dapsol.com
                  127.0.0.1 www.dapsolution.com
                  127.0.0.1 dapsolution.com
                  127.0.0.1 www.data-hoster.com
                  127.0.0.1 data-hoster.com
                  127.0.0.1 datanotary.com
                  127.0.0.1 datareco.com
                  127.0.0.1 www.dateanybabe.com
                  127.0.0.1 dateanybabe.com
                  127.0.0.1 www.dateanychick.com
                  127.0.0.1 dateanychick.com
                  127.0.0.1 www.datingdoctorsite.com
                  127.0.0.1 datingdoctorsite.com
                  127.0.0.1 www.dating-galaxy.info
                  127.0.0.1 dating-galaxy.info
                  127.0.0.1 dating-search.net
                  127.0.0.1 davemarshall.org
                  127.0.0.1 db105.com
                  127.0.0.1 www.dbdecicated.com
                  127.0.0.1 dbdecicated.com
                  127.0.0.1 www.dbxcompany.com
                  127.0.0.1 dbxcompany.com
                  127.0.0.1 dcdl.dmcast.com
                  127.0.0.1 dcfitusa.com
                  127.0.0.1 www.dcorriere.it
                  127.0.0.1 dcorriere.it
                  127.0.0.1 www.dcurtis.com
                  127.0.0.1 dcurtis.com
                  127.0.0.1 dcww.dmcast.com
                  127.0.0.1 de.ag
                  127.0.0.1 de.drivecleaner.com
                  127.0.0.1 de.errorsafe.com
                  127.0.0.1 de.winantivirus.com
                  127.0.0.1 de98.remsys.org
                  127.0.0.1 www.debay.it
                  127.0.0.1 debay.it
                  127.0.0.1 www.decknews.com
                  127.0.0.1 decknews.com
                  127.0.0.1 dedmazay.3322.org
                  127.0.0.1 www.dedsearch.com
                  127.0.0.1 dedsearch.com
                  127.0.0.1 defaultsearch.net
                  127.0.0.1 www.defensaantimalware.com
                  127.0.0.1 defensaantimalware.com
                  127.0.0.1 www.deja-rue.com
                  127.0.0.1 deja-rue.com
                  127.0.0.1 www.delficodec.com
                  127.0.0.1 delficodec.com
                  127.0.0.1 www.democodec.com
                  127.0.0.1 democodec.com
                  127.0.0.1 www.democodec.net
                  127.0.0.1 democodec.net
                  127.0.0.1 www.demo-codec.net
                  127.0.0.1 demo-codec.net
                  127.0.0.1 www.derklaif.biz
                  127.0.0.1 derklaif.biz
                  127.0.0.1 www.derrari.it
                  127.0.0.1 derrari.it
                  127.0.0.1 desarrollocreativo.com
                  127.0.0.1 www.deskbar.worldtostart.com
                  127.0.0.1 deskbar.worldtostart.com
                  127.0.0.1 www.deskwizz.com
                  127.0.0.1 deskwizz.com
                  127.0.0.1 www.destroy-spyware.net
                  127.0.0.1 destroy-spyware.net
                  127.0.0.1 www.destruktor.to.pl
                  127.0.0.1 destruktor.to.pl
                  127.0.0.1 www.detectivehound.com
                  127.0.0.1 detectivehound.com
                  127.0.0.1 www.detectivesearches.com
                  127.0.0.1 detectivesearches.com
                  127.0.0.1 dev.ntcor.com
                  127.0.0.1 develip.com
                  127.0.0.1 dewis.spb.ru
                  127.0.0.1 dewis.us
                  127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
                  127.0.0.1 www.dgbusiness.com
                  127.0.0.1 dgbusiness.com
                  127.0.0.1 dialer2004.com
                  127.0.0.1 www.dialerclub.com
                  127.0.0.1 dialerclub.com
                  127.0.0.1 www.dialer-shop.com
                  127.0.0.1 dialer-shop.com
                  127.0.0.1 www.dialoff.com
                  127.0.0.1 dialoff.com
                  127.0.0.1 www.did.i-used.cc
                  127.0.0.1 did.i-used.cc
                  127.0.0.1 dietpills4free.com
                  127.0.0.1 dietpussy.com
                  127.0.0.1 www.digikeygen.com
                  127.0.0.1 digikeygen.com
                  127.0.0.1 digistreamsa.com
                  127.0.0.1 www.digitalcoders.net
                  127.0.0.1 digitalcoders.net
                  127.0.0.1 www.digitalfan.com
                  127.0.0.1 digitalfan.com
                  127.0.0.1 digital-pornography.com
                  127.0.0.1 dionforvalleycouncil.org
                  127.0.0.1 www.directdvdpro.com
                  127.0.0.1 directdvdpro.com
                  127.0.0.1 www.directnameservice.com
                  127.0.0.1 directnameservice.com
                  127.0.0.1 www.directporta.info
                  127.0.0.1 directporta.info
                  127.0.0.1 www.directsearchzone.com
                  127.0.0.1 directsearchzone.com
                  127.0.0.1 www.diskretter.com
                  127.0.0.1 diskretter.com
                  127.0.0.1 dist.checkin100.com
                  127.0.0.1 dl.ad-ware.cc
                  127.0.0.1 dl.malwarewipe.com
                  127.0.0.1 dl.mcboo.com
                  127.0.0.1 www.dl.targetsaver.com
                  127.0.0.1 dl.targetsaver.com
                  127.0.0.1 dl.web-nexus.net
                  127.0.0.1 dl1.ant
                  0
              4. varfendell
                tu as toujours des fenêtres publicitaires?

                repost un rapport hijackthis.
                0
                1. lucane Auteur
                  Pour l'instant, ca à l'air d'aller bien, aucune fenêtre ne sait ouverte, je vais voir à la longue, en tous cas je te remercie sincèrement de t'être occupé de moi. Voila le rapport.

                  Logfile of HijackThis v1.99.1
                  Scan saved at 14:04:48, on 26/08/2008
                  Platform: Windows XP SP3 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v7.00 (7.00.6000.16705)

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\Program Files\Windows Defender\MsMpEng.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashServ.exe
                  C:\WINDOWS\SOUNDMAN.EXE
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
                  C:\apps\ABoard\ABoard.exe
                  C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
                  C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                  C:\WINDOWS\system32\rundll32.exe
                  C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                  C:\Program Files\Windows Defender\MSASCui.exe
                  C:\Program Files\ATnotes\ATnotes.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  C:\Program Files\Labtec\Wireless Mouse\MulMouse.exe
                  C:\apps\ABoard\AOSD.exe
                  C:\Program Files\a-squared Free\a2service.exe
                  C:\WINDOWS\System32\cisvc.exe
                  C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                  C:\WINDOWS\system32\slserv.exe
                  C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
                  C:\WINDOWS\wanmpsvc.exe
                  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                  C:\Program Files\Internet Explorer\IEXPLORE.EXE
                  C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
                  C:\WINDOWS\system32\cidaemon.exe
                  C:\Documents and Settings\Joël\Menu Démarrer\Programmes\Outils de scan\HijackThis-fr\HijackThis-fr-Colok.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8&gws_rd=ssl
                  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                  O2 - BHO: Windows Live Call HoverToCall class - {7E853D72-626A-48EC-A868-BA8D5E23E045} - C:\Program Files\Windows Live\Messenger\HTC.DLL
                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                  O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
                  O2 - BHO: iFinger plugin / Browser helper object - {A114D52B-870C-4F15-8021-B6D7F91A054B} - C:\PROGRA~1\iFinger\plugins\IE.ifp
                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
                  O2 - BHO: -Sans nom - {ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB} - -Manquant
                  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.509.6972\swg.dll
                  O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                  O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
                  O3 -BarreOut. EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
                  O3 -BarreOut. MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                  O3 -BarreOut. ImageShack Toolbar - {6932D140-ABC4-4073-A44C-D4A541665E35} - C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll
                  O3 -BarreOut. &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
                  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                  O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
                  O4 - HKLM\..\Run: [ATIPTA] "C:\ATI Technologies\ATI Control Panel\atiptaxx.exe"
                  O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
                  O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                  O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
                  O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                  O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE" /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
                  O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] "rundll32.exe" bthprops.cpl,,BluetoothAuthenticationAgent
                  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                  O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
                  O4 - HKCU\..\Run: [ATnotes.exe] "C:\Program Files\ATnotes\ATnotes.exe"
                  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  O4 - Global Startup: Logiciel de la Souris Labtec 2.0.lnk = C:\Program Files\Labtec\Wireless Mouse\MulMouse.exe
                  O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                  O8 - Extra du menu contextuel E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                  O8 - Extra du menu contextuel Post Image to Blog - res://C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll/5003
                  O8 - Extra du menu contextuel Tag This Image - res://C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll/5002
                  O8 - Extra du menu contextuel Upload All Images to ImageShack - res://C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll/5000
                  O8 - Extra du menu contextuel Upload Image to ImageShack - res://C:\WINDOWS\ImageShackToolbar\ImageShackToolbar.dll/5001
                  O9 - Bouton Extra: -Sans nom - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                  O9 - Outil Extra du menu : Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                  O9 - Bouton Extra: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
                  O9 - Bouton Extra: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\WINDOWS\System32\shdocvw.dll
                  O9 - Outil Extra du menu : Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\WINDOWS\System32\shdocvw.dll
                  O9 - Bouton Extra: iFinger - {936E5D60-596C-11D3-BB96-00600816DF55} - C:\WINDOWS\System32\SHDOCVW.DLL
                  O9 - Bouton Extra: -Sans nom - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - -Manquant
                  O9 - Bouton Extra: -Sans nom - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                  O9 - Outil Extra du menu : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                  O9 - Bouton Extra: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Outil Extra du menu : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O11 - Options group: [INTERNATIONAL] International*
                  O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
                  O16 - DPF: PackageHtmlCab - http://acces.blonde.com/package/op/PackageHtmlCab.CAB
                  O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - https://www.cult3d.com/
                  O16 - DPF: {45E83043-1F6F-4D22-A5E7-0138EA171B49} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fr/filesharingctrl.cab
                  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
                  O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
                  O16 - DPF: {6932D140-ABC4-4073-A44C-D4A541665E35} (ImageShack Toolbar) - http://toolbar.imageshack.us/toolbar/ImageShackToolbar.cab
                  O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
                  O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab
                  O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
                  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                  O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredimail.com/contents/setup/downloader/imloader.cab
                  O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
                  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
                  O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
                  O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                  O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                  O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
                  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                  O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
                  O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  O23 - Service: SC Test Branding Service 1 - SC Test Branding 1 - C:\Program Files\Fichiers communs\SC Test Branding 1 Shared\Service\SCTestService1.exe
                  O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
                  O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
                  O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
                  O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
                  O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
                  O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
                  0
                2. mima
                  @lucaneg le mème problème ke toi ,mè suis incapable de retenir tout ce kil fo faire , g 6 virus d spot pub ki nen finisse pas aidè moi plizzzzzzz
                  0
              5. varfendell
                Bien, c'est déjà mieux,

                fixe ces lignes en cochant la cases devant et en cliquant sur "fix checked"
                O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
                O2 - BHO: -Sans nom - {ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB} - -Manquant
                O16 - DPF: PackageHtmlCab - http://acces.blonde.com/package/op/PackageHtmlCab.CAB
                O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)

                regarde avec virus total ces fichiers:
                C:\Program Files\Spyware Doctor\pctsSvc.exe => normalement il est bon
                C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                0
                1. lucane Auteur
                  Ou est "fix checked" ?
                  0
                2. varfendell
                  @lucanedans ton rapport, tu as des cases devant chaque lignes, tu coche les cases en face des lignes cité, puis en bas, tu as 4 bouton, l'un des quatre est "fix checked", tu clique dessus.
                  0
                3. lucane Auteur
                  @varfendellDésolé, je n'ai pas ce bouton.

                  Fichier pctsSvc.exe reçu le 2008.08.17 15:27:43 (CET)Antivirus Version Dernière mise à jour Résultat
                  AhnLab-V3 2008.8.15.0 2008.08.15 -
                  AntiVir 7.8.1.19 2008.08.16 -
                  Authentium 5.1.0.4 2008.08.16 -
                  Avast 4.8.1195.0 2008.08.17 -
                  AVG 8.0.0.161 2008.08.16 -
                  BitDefender 7.2 2008.08.17 -
                  CAT-QuickHeal 9.50 2008.08.16 -
                  ClamAV 0.93.1 2008.08.16 -
                  DrWeb 4.44.0.09170 2008.08.17 -
                  eSafe 7.0.17.0 2008.08.14 -
                  eTrust-Vet 31.6.6035 2008.08.15 -
                  Ewido 4.0 2008.08.17 -
                  F-Prot 4.4.4.56 2008.08.16 -
                  F-Secure 7.60.13501.0 2008.08.17 Suspicious:W32/Kolweb.d!Gemini
                  Fortinet 3.14.0.0 2008.08.17 -
                  GData 2.0.7306.1023 2008.08.16 -
                  Ikarus T3.1.1.34.0 2008.08.17 -
                  K7AntiVirus 7.10.417 2008.08.15 -
                  Kaspersky 7.0.0.125 2008.08.17 -
                  McAfee 5362 2008.08.15 -
                  Microsoft 1.3807 2008.08.17 -
                  NOD32v2 3362 2008.08.17 -
                  Norman 5.80.02 2008.08.15 -
                  Panda 9.0.0.4 2008.08.17 Suspicious file
                  PCTools 4.4.2.0 2008.08.17 -
                  Prevx1 V2 2008.08.17 -
                  Rising 20.57.62.00 2008.08.17 -
                  Sophos 4.32.0 2008.08.17 -
                  Sunbelt 3.1.1546.1 2008.08.15 -
                  Symantec 10 2008.08.17 -
                  TheHacker 6.3.0.3.052 2008.08.17 -
                  TrendMicro 8.700.0.1004 2008.08.16 -
                  VBA32 3.12.8.3 2008.08.17 -
                  ViRobot 2008.8.16.1338 2008.08.16 -
                  VirusBuster 4.5.11.0 2008.08.16 -
                  Webwasher-Gateway 6.6.2 2008.08.17 Virus.Win32.FileInfector.gen!90 (suspicious)

                  Information additionnelle
                  File size: 948616 bytes
                  MD5...: f4cdcbd7ad2e0c60d3eed62a55877834
                  SHA1..: 26d393a0836b7ce8ceb91e74355ac81a49a74fa0
                  SHA256: 01668968d83ff57a4a076225d96eda68485e4f05096cf62d7d2a552a195da04e
                  SHA512: 2e0526399acc26829eb87e232d5be4e39d2a7dc755218c9264ef98d4a63a7d20<BR>3ec3ebe824d0311af47045df942867acc6d87c38aac64b7aa5f5648e56825b7d
                  PEiD..: -
                  PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x4aec54<BR>timedatestamp.....: 0x2a425e19 (Fri Jun 19 22:22:17 1992)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 10 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0xace2c 0xad000 6.57 a07f3ed4b5f6bb151d0eac93dd032982<BR>.itext 0xae000 0xfe8 0x1000 6.33 9980cb5e219503644081e751501895e2<BR>.data 0xaf000 0xa1f4 0xa200 7.06 dfa9ce942ef6b54f2ff9231f928bcc2c<BR>.bss 0xba000 0x17b4 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e<BR>.idata 0xbc000 0xa01a 0xa200 5.42 9b1ed9f54c18fd95f4e32b564be5d538<BR>.edata 0xc7000 0x4e 0x200 0.84 2f3e86134bb5a210eca90361969ea24b<BR>.tls 0xc8000 0xdc 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e<BR>.rdata 0xc9000 0x18 0x200 0.19 f3e7baf06c902a3ad339b11dcb2c53fa<BR>.reloc 0xca000 0x948c 0x9600 6.75 4f1ca5e125557e6fd9e7b4f56056e572<BR>.rsrc 0xd4000 0x19fc0 0x1a000 6.58 6a82597b716c243f2fa1e4799ca7f0d2<BR><BR>( 62 imports ) <BR>> rtl100.bpl: @System@initialization$qqrv, @System@Finalization$qqrv, @System@LoadResString$qqrp20System@TResStringRec, @System@UTF8Encode$qqrx17System@WideString, @System@FreeMemory$qpv, @System@@CheckAutoResult$qqrl, @System@TInterfacedObject@_Release$qqsv, @System@TInterfacedObject@_AddRef$qqsv, @System@TInterfacedObject@QueryInterface$qqsrx5_GUIDpv, @System@TInterfacedObject@NewInstance$qqrp17System@TMetaClass, @System@TInterfacedObject@BeforeDestruction$qqrv, @System@TInterfacedObject@AfterConstruction$qqrv, @System@@IntfAddRef$qqrx45System@_DelphiInterface$t17System@IInterface_, @System@@IntfCast$qqrr45System@_DelphiInterface$t17System@IInterface_x45System@_DelphiInterface$t17System@IInterface_rx5_GUID, @System@@IntfCopy$qqrr45System@_DelphiInterface$t17System@IInterface_x45System@_DelphiInterface$t17System@IInterface_, @System@@IntfClear$qqrr45System@_DelphiInterface$t17System@IInterface_, @System@RegisterModule$qqrp17System@TLibModule, @System@RemoveModuleUnloadProc$qqrpqqri$v, @System@AddModuleUnloadProc$qqrpqqri$v, @System@FindResourceHInstance$qqrui, @System@FindClassHInstance$qqrp17System@TMetaClass, @System@@DynArrayAddRef$qqrv, @System@@DynArrayAsg$qqrv, @System@@DynArrayClear$qqrrpvpv, @System@@DynArrayCopy$qqrpvt1rpv, @System@@DynArraySetLength$qqrv, @System@@DynArrayHigh$qqrv, @System@@DynArrayLength$qqrv, @System@@_llshl$qqrv, @System@@_llmod$qqrv, @System@@_lldiv$qqrv, @System@@_llmul$qqrv, @System@@Dispose$qqrpvt1, @System@@New$qqripv, @System@@CopyRecord$qqrv, @System@@Finalize$qqrpvt1, @System@@FinalizeArray$qqrpvt1ui, @System@@FinalizeRecord$qqrpvt1, @System@@InitializeRecord$qqrpvt1, @System@@WStrAddRef$qqrr17System@WideString, @System@@WStrSetLength$qqrr17System@WideStringi, @System@Pos$qqrx17System@WideStringt1, @System@@WStrInsert$qqrx17System@WideStringr17System@WideStringi, @System@@WStrDelete$qqrr17System@WideStringii, @System@@WStrCopy$qqrx17System@WideStringii, @System@@WStrCmp$qqrv, @System@@WStrCatN$qqrv, @System@@WStrCat3$qqrr17System@WideStringx17System@WideStringt2, @System@@WStrCat$qqrr17System@WideStringx17System@WideString, @System@@WStrLen$qqrx17System@WideString, @System@@WStrToPWChar$qqrx17System@WideString, @System@@WStrFromLStr$qqrr17System@WideStringx17System@AnsiString, @System@@WStrFromWArray$qqrr17System@WideStringpbi, @System@@WStrFromArray$qqrr17System@WideStringpci, @System@@WStrFromString$qqrr17System@WideStringrx28System@_SmallString$iuc$255_, @System@@WStrFromPWChar$qqrr17System@WideStringpb, @System@@WStrFromPChar$qqrr17System@WideStringpc, @System@@WStrFromWChar$qqrr17System@WideStringb, @System@@WStrFromPWCharLen$qqrr17System@WideStringpbi, @System@@WStrLAsg$qqrr17System@WideStringx17System@WideString, @System@@WStrAsg$qqrr17System@WideStringx17System@WideString, @System@@WStrArrayClr$qqrpvi, @System@@WStrClr$qqrpv, @System@@NewWideString$qqri, @System@@Write0LString$qqrr15System@TTextRecx17System@AnsiString, @System@@LStrSetLength$qqrv, @System@Pos$qqrx17System@AnsiStringt1, @System@@LStrInsert$qqrv, @System@@LStrDelete$qqrv, @System@@LStrCopy$qqrv, @System@@UniqueStringA$qqrr17System@AnsiString, @System@UniqueString$qqrr17System@AnsiString, @System@@LStrToPChar$qqrx17System@AnsiString, @System@@LStrAddRef$qqrpv, @System@@LStrCmp$qqrv, @System@@LStrCatN$qqrv, @System@@LStrCat3$qqrv, @System@@LStrCat$qqrv, @System@@LStrLen$qqrx17System@AnsiString, @System@@LStrFromWStr$qqrr17System@AnsiStringx17System@WideString, @System@@LStrFromWArray$qqrr17System@AnsiStringpbi, @System@@LStrFromArray$qqrr17System@AnsiStringpci, @System@@LStrFromString$qqrr17System@AnsiStringrx28System@_SmallString$iuc$255_, @System@@LStrFromPWChar$qqrr17System@AnsiStringpb, @System@@LStrFromPChar$qqrr17System@AnsiStringpc, @System@@LStrFromChar$qqrr17System@AnsiStringc, @System@@LStrFromPCharLen$qqrr17System@AnsiStringpci, @System@@LStrLAsg$qqrpvpxv, @System@@LStrAsg$qqrpvpxv, @System@@LStrArrayClr$qqrpvi, @System@@LStrClr$qqrpv, @System@EndThread$qqri, @System@BeginThread$qqrpvuipqqrpv$it1uirui, @System@@RunError$qqruc, @System@@Halt$qqri, @System@@Halt0$qqrv, @System@@InitWideStrings$qqrv, @System@@InitResStringImports$qqrv, @System@@StartExe$qqrp23System@PackageInfoTablep17System@TLibModule, @System@@TryFinallyExit$qqrv, @System@@DoneExcept$qqrv, @System@@RaiseAgain$qqrv, @System@@RaiseExcept$qqrv, @System@@HandleAutoException$qqrv, @System@@HandleFinally$qqrv, @System@@HandleOnException$qqrv, @System@@HandleAnyException$qqrv, @System@@BeforeDestruction$qqrp14System@TObjectzc, @System@@AfterConstruction$qqrp14System@TObject, @System@@ClassDestroy$qqrp14System@TObject, @System@@ClassCreate$qqrp17System@TMetaClasso, @System@TObject@Dispatch$qqrpv, @System@TObject@BeforeDestruction$qqrv, @System@TObject@AfterConstruction$qqrv, @System@TObject@DefaultHandler$qqrpv, @System@TObject@SafeCallException$qqrp14System@TObjectpv, @System@TObject@InheritsFrom$qqrp17System@TMetaClasst1, @System@@CallDynaInst$qqrv, @System@@AsClass$qqrp14System@TObjectp17System@TMetaClass, @System@@IsClass$qqrp14System@TObjectp17System@TMetaClass, @System@TObject@GetInterface$qqrrx5_GUIDpv, @System@TObject@Free$qqrv, @System@TObject@$bdtr$qqrv, @System@TObject@$bctr$qqrv, @System@TObject@FreeInstance$qqrv, @System@TObject@NewInstance$qqrp17System@TMetaClass, @System@TObject@ClassParent$qqrp17System@TMetaClass, @System@TObject@ClassName$qqrp17System@TMetaClass, @System@TObject@ClassType$qqrv, @System@@SetSub$qqrv, @System@@_CToPasStr$qqrp28System@_SmallString$iuc$255_pxc, @System@@WriteLn$qqrr15System@TTextRec, @System@@ReadLn$qqrr15System@TTextRec, @System@@ReadLString$qqrr15System@TTextRecr17System@AnsiString, @System@@FillChar$qqrpvic, @System@@AStrCmp$qqrv, @System@@PStrNCpy$qqrp28System@_SmallString$iuc$255_t1uc, @System@@PStrCpy$qqrp28System@_SmallString$iuc$255_t1, @System@@PStrNCat$qqrv, @System@@Close$qqrr15System@TTextRec, @System@@Assign$qqrr15System@TTextRecx17System@AnsiString, @System@@ResetText$qqrr15System@TTextRec, @System@@AbstractError$qqrv, @System@@ROUND$qqrv, @System@Get8087CW$qqrv, @System@Set8087CW$qqrus, @System@UpCase$qqrc, @System@Random$qqrxi, @System@Randomize$qqrv, @System@ParamStr$qqri, @System@ParamCount$qqrv, @System@Move$qqrpxvpvi, @System@@_IOTest$qqrv, @System@RaiseList$qqrv, @System@AcquireExceptionObject$qqrv, @System@ExceptAddr$qqrv, @System@ExceptObject$qqrv, @System@SetMemoryManager$qqrrx21System@TMemoryManager, @System@GetMemoryManager$qqrr21System@TMemoryManager, @System@@ReallocMem$qqrrpvi, @System@@FreeMem$qqrpv, @System@@GetMem$qqri, @System@AllocMem$qqrui, @System@ReportMemoryLeaksOnShutdown, @System@AllocMemSize, @System@AllocMemCount, @System@DebugHook, @System@HeapAllocFlags, @System@Output, @System@IsMultiThread, @System@IsConsole, @System@ErrorAddr, @System@ExitCode, @System@CmdLine, @System@MainThreadID, @System@AssertErrorProc, @System@ExceptionClass, @System@ExceptObjProc, @System@TInterfacedObject@, @$xp$17System@IInterface, @$xp$14System@TObject, @System@TObject@, @$xp$17System@WideString, @$xp$13System@string, @$xp$15System@Cardinal, @$xp$11System@Word, @$xp$14System@Integer, @$xp$15System@Smallint, @$xp$14System@Boolean<BR>> kernel32.dll: TlsSetValue, TlsGetValue, LocalAlloc, GetModuleHandleA<BR>> user32.dll: CreateWindowExA, WindowFromPoint, WaitForInputIdle, UnregisterClassA, TranslateMessage, SystemParametersInfoA, ShowWindow, ShowOwnedPopups, SetWindowTextA, SetWindowPos, SetWindowPlacement, SetWindowLongA, SetTimer, SetRect, SetPropA, SetParent, SetForegroundWindow, SetFocus, SetCursor, SetClipboardData, SetClassLongA, SetCapture, SetActiveWindow, SendMessageTimeoutA, SendMessageCallbackA, SendMessageW, SendMessageA, ScreenToClient, RemovePropA, RemoveMenu, ReleaseDC, ReleaseCapture, RegisterWindowMessageA, RegisterClassA, PostThreadMessageA, PostQuitMessage, PostMessageA, PeekMessageW, PeekMessageA, OpenClipboard, OffsetRect, OemToCharBuffA, MsgWaitForMultipleObjects, MessageBoxA, MessageBeep, LoadImageA, LoadCursorA, KillTimer, IsZoomed, IsWindowVisible, IsWindowUnicode, IsWindowEnabled, IsWindow, IsIconic, IsDialogMessageA, InvalidateRect, InflateRect, GetWindowThreadProcessId, GetWindowTextA, GetWindowRect, GetWindowPlacement, GetWindowLongA, GetWindowDC, GetTopWindow, GetSystemMetrics, GetSystemMenu, GetSysColorBrush, GetSysColor, GetPropA, GetParent, GetWindow, GetMessageW, GetMessageA, GetMenu, GetKeyState, GetIconInfo, GetForegroundWindow, GetFocus, GetDC, GetCursorPos, GetCursor, GetClientRect, GetClassNameA, GetClassLongA, GetClassInfoA, GetCapture, FrameRect, FindWindowExA, FindWindowA, FillRect, ExitWindowsEx, EnumWindows, EnumThreadWindows, EndPaint, EnableWindow, EmptyClipboard, DrawTextA, DrawIconEx, DrawFrameControl, DrawFocusRect, DispatchMessageA, DestroyWindow, DestroyIcon, DefWindowProcA, CloseClipboard, ChildWindowFromPointEx, CharNextW, CallWindowProcA, BringWindowToTop, BeginPaint, AttachThreadInput, AdjustWindowRectEx<BR>> gdi32.dll: TextOutA, StartPage, StartDocA, SetTextColor, SetMapMode, SetBkMode, SetBkColor, SelectObject, SelectClipRgn, MoveToEx, LineTo, GetTextMetricsA, GetTextFaceA, GetTextExtentPoint32A, GetStockObject, GetRgnBox, GetObjectA, GetDeviceCaps, GdiFlush, EndPage, EndDoc, DeleteObject, DeleteDC, CreateSolidBrush, CreateRectRgnIndirect, CreatePen, CreateFontA, CreateDIBSection, CreateDCA, CreateCompatibleDC, CombineRgn, BitBlt<BR>> version.dll: VerQueryValueA, GetFileVersionInfoSizeA, GetFileVersionInfoA<BR>> kernel32.dll: lstrlenW, lstrcmpA, WriteProcessMemory, WriteFile, WaitForSingleObject, WaitForMultipleObjectsEx, WaitForMultipleObjects, VirtualQueryEx, VirtualQuery, VirtualProtectEx, VirtualProtect, VirtualFree, VirtualAlloc, UnmapViewOfFile, TerminateThread, TerminateProcess, SystemTimeToFileTime, SuspendThread, Sleep, SizeofResource, SetWaitableTimer, SetUnhandledExceptionFilter, SetThreadPriority, SetThreadContext, SetThreadAffinityMask, SetProcessWorkingSetSize, SetPriorityClass, SetLastError, SetFilePointer, SetFileAttributesA, SetEvent, SetEndOfFile, ResumeThread, ResetEvent, RemoveDirectoryA, ReleaseMutex, ReadProcessMemory, ReadFile, RaiseException, QueryPerformanceFrequency, QueryPerformanceCounter, PulseEvent, OutputDebugStringA, OpenProcess, OpenFileMappingA, OpenEventA, MoveFileExW, MoveFileExA, MapViewOfFile, LockResource, LocalSize, LocalFree, LocalAlloc, LoadResource, LoadLibraryExA, LoadLibraryW, LoadLibraryA, LeaveCriticalSection, IsBadReadPtr, InitializeCriticalSection, HeapFree, HeapAlloc, GlobalUnlock, GlobalSize, GlobalReAlloc, GlobalMemoryStatus, GlobalHandle, GlobalLock, GlobalFree, GlobalAlloc, GetWindowsDirectoryA, GetVersionExW, GetVersionExA, GetVersion, GetTickCount, GetThreadPriority, GetThreadLocale, GetThreadContext, GetTempPathA, GetSystemTime, GetSystemDirectoryW, GetSystemDirectoryA, GetStartupInfoA, GetProcessVersion, GetProcessHeap, GetProcessAffinityMask, GetProcAddress, GetPriorityClass, GetModuleHandleW, GetModuleHandleA, GetModuleFileNameW, GetModuleFileNameA, GetLocaleInfoA, GetLocalTime, GetLastError, GetFileTime, GetFileSize, GetFileAttributesW, GetFileAttributesA, GetExitCodeThread, GetExitCodeProcess, GetDiskFreeSpaceA, GetCurrentThreadId, GetCurrentThread, GetCurrentProcessId, GetCurrentProcess, GetComputerNameA, GetCommandLineA, GetACP, FreeResource, InterlockedIncrement, InterlockedExchange, InterlockedDecrement, FreeLibrary, FormatMessageA, FindResourceA, FindNextFileA, FindFirstFileA, FindClose, FileTimeToSystemTime, FileTimeToLocalFileTime, FileTimeToDosDateTime, ExpandEnvironmentStringsA, ExitThread, ExitProcess, EnterCriticalSection, DuplicateHandle, DeleteFileA, DeleteCriticalSection, CreateWaitableTimerA, CreateThread, CreateSemaphoreA, CreateRemoteThread, CreateProcessA, CreatePipe, CreateMutexW, CreateMutexA, CreateFileMappingW, CreateFileMappingA, CreateFileW, CreateFileA, CreateEventA, CreateDirectoryA, CopyFileA, CompareStringW, CompareStringA, CloseHandle, CancelWaitableTimer, Beep<BR>> advapi32.dll: SetSecurityDescriptorDacl, ReportEventA, RegisterEventSourceA, RegSetValueExA, RegQueryValueExA, RegQueryInfoKeyA, RegOpenKeyExA, RegEnumKeyA, RegDeleteValueA, RegCreateKeyExA, RegCloseKey, OpenProcessToken, LookupPrivilegeValueA, IsValidSid, InitializeSecurityDescriptor, InitializeAcl, GetUserNameA, GetTokenInformation, GetLengthSid, FreeSid, DuplicateTokenEx, DeregisterEventSource, CreateProcessAsUserW, CreateProcessAsUserA, AllocateAndInitializeSid, AdjustTokenPrivileges, AddAccessDeniedAce, AddAccessAllowedAce<BR>> rtl100.bpl: @Sysutils@initialization$qqrv, @Sysutils@Finalization$qqrv, @Sysutils@FreeAndNil$qqrpv, @Sysutils@RaiseLastOSError$qqrv, @Sysutils@FindCmdLineSwitch$qqrx17System@AnsiStringo, @Sysutils@FindCmdLineSwitch$qqrx17System@AnsiStringrx29System@_Set$tc$iuc$0$iuc$255_o, @Sysutils@StringReplace$qqrx17System@AnsiStringt1t149System@_Set$t21Sysutils@SysUtils__94$iuc$0$iuc$1_, @Sysutils@GetLocaleFormatSettings$qqrir24Sysutils@TFormatSettings, @Sysutils@AnsiPos$qqrx17System@AnsiStringt1, @Sysutils@IncludeTrailingPathDelimiter$qqrx17System@AnsiString, @Sysutils@Exception@$bctr$qqrp20System@TResStringRecpx14System@TVarRecxi, @Sysutils@Exception@$bctr$qqrx17System@AnsiStringpx14System@TVarRecxi, @Sysutils@Exception@$bctr$qqrx17System@AnsiString, @Sysutils@ShowException$qqrp14System@TObjectpv, @Sysutils@SysErrorMessage$qqri, @Sysutils@DateTimeToStr$qqrx16System@TDateTimerx24Sysutils@TFormatSettings, @Sysutils@Now$qqrv, @Sysutils@DateTimeToSystemTime$qqrx16System@TDateTimer11_SYSTEMTIME, @Sysutils@WideFormat$qqrx17System@WideStringpx14System@TVarRecxi, @Sysutils@Format$qqrx17System@AnsiStringpx14System@TVarRecxi, @Sysutils@StrLIComp$qqrpxct1ui, @Sysutils@StrIComp$qqrpxct1, @Sysutils@StrPLCopy$qqrpcx17System@AnsiStringui, @Sysutils@StrPCopy$qqrpcx17System@AnsiString, @Sysutils@StrECopy$qqrpcpxc, @Sysutils@StrLen$qqrpxc, @Sysutils@ExpandFileName$qqrx17System@AnsiString, @Sysutils@ExtractFileExt$qqrx17System@AnsiString, @Sysutils@ExtractFileName$qqrx17System@AnsiString, @Sysutils@ExtractFilePath$qqrx17System@AnsiString, @Sysutils@FileExists$qqrx17System@AnsiString, @Sysutils@FileClose$qqri, @Sysutils@FileSeek$qqriii, @Sysutils@FileWrite$qqripxvui, @Sysutils@StrToBoolDef$qqrx17System@AnsiStringxo, @Sysutils@StrToIntDef$qqrx17System@AnsiStringi, @Sysutils@IntToHex$qqrji, @Sysutils@IntToStr$qqrj, @Sysutils@IntToStr$qqri, @Sysutils@Trim$qqrx17System@AnsiString, @Sysutils@WideCompareText$qqrx17System@WideStringt1, @Sysutils@WideCompareStr$qqrx17System@WideStringt1, @Sysutils@AnsiCompareText$qqrx17System@AnsiStringt1, @Sysutils@CompareText$qqrx17System@AnsiStringt1, @Sysutils@CompareMem$qqrpvt1i, @Sysutils@UpperCase$qqrx17System@AnsiString, @Sysutils@AddExitProc$qqrpqqrv$v, @$xp$24Sysutils@TFormatSettings, @Sysutils@SysLocale, @Sysutils@Win32Platform, @Sysutils@EExternal@, @Sysutils@Exception@<BR>> kernel32.dll: Sleep<BR>> rtl100.bpl: @Sysconst@_SModuleAccessViolation, @Sysconst@_SExternalException, @Sysconst@_SWriteAccess, @Sysconst@_SReadAccess, @Sysconst@_SPrivilege, @Sysconst@_SControlC, @Sysconst@_SStackOverflow, @Sysconst@_SUnderflow, @Sysconst@_SOverflow, @Sysconst@_SZeroDivide, @Sysconst@_SInvalidOp, @Sysconst@_SIntOverflow, @Sysconst@_SRangeError, @Sysconst@_SDivByZero<BR>> rtl100.bpl: @Classes@initialization$qqrv, @Classes@Finalization$qqrv, @Classes@TDataModule@ReadState$qqrp15Classes@TReader, @Classes@TDataModule@DefineProperties$qqrp14Classes@TFiler, @Classes@TDataModule@DoDestroy$qqrv, @Classes@TDataModule@DoCreate$qqrv, @Classes@TDataModule@$bdtr$qqrv, @Classes@TDataModule@BeforeDestruction$qqrv, @Classes@TDataModule@$bctr$qqrp18Classes@TComponenti, @Classes@TDataModule@AfterConstruction$qqrv, @Classes@TDataModule@$bctr$qqrp18Classes@TComponent, @Classes@TStreamAdapter@$bctr$qqrp15Classes@TStream24Classes@TStreamOwnership, @Classes@TComponent@QueryInterface$qqsrx5_GUIDpv, @Classes@TComponent@UpdateRegistry$qqrp17System@TMetaClassox17System@AnsiStringt3, @Classes@TComponent@SafeCallException$qqrp14System@TObjectpv, @Classes@TComponent@GetComponentCount$qqrv, @Classes@TComponent@GetComponent$qqri, @Classes@TComponent@SetName$qqrx17System@AnsiString, @Classes@TComponent@ValidateRename$qqrp18Classes@TComponentx17System@AnsiStringt2, @Classes@TComponent@WriteState$qqrp15Classes@TWriter, @Classes@TComponent@ReadState$qqrp15Classes@TReader, @Classes@TComponent@Loaded$qqrv, @Classes@TComponent@DefineProperties$qqrp14Classes@TFiler, @Classes@TComponent@Notification$qqrp18Classes@TComponent18Classes@TOperation, @Classes@TComponent@Destroying$qqrv, @Classes@TComponent@DestroyComponents$qqrv, @Classes@TComponent@BeforeDestruction$qqrv, @Classes@TComponent@$bdtr$qqrv, @Classes@TComponent@$bctr$qqrp18Classes@TComponent, @Classes@TThread@WaitFor$qqrv, @Classes@TThread@Terminate$qqrv, @Classes@TThread@Resume$qqrv, @Classes@TThread@Suspend$qqrv, @Classes@TThread@SetPriority$qqr23Classes@TThreadPriority, @Classes@TThread@DoTerminate$qqrv, @Classes@TThread@AfterConstruction$qqrv, @Classes@TThread@$bdtr$qqrv, @Classes@TWriter@WriteWideString$qqrx17System@WideString, @Classes@TWriter@WriteListEnd$qqrv, @Classes@TWriter@WriteListBegin$qqrv, @Classes@TReader@ReadWideString$qqrv, @Classes@TReader@ReadListEnd$qqrv, @Classes@TReader@ReadListBegin$qqrv, @Classes@TReader@EndOfList$qqrv, @Classes@TStringStream@$bctr$qqrx17System@AnsiString, @Classes@TMemoryStream@Clear$qqrv, @Classes@TFileStream@$bctr$qqrx17System@AnsiStringus, @Classes@THandleStream@SetSize$qqrxj, @Classes@THandleStream@SetSize$qqri, @Classes@THandleStream@Seek$qqrxj19Classes@TSeekOrigin, @Classes@THandleStream@Write$qqrpxvi, @Classes@THandleStream@Read$qqrpvi, @Classes@THandleStream@$bctr$qqri, @Classes@TStream@CopyFrom$qqrp15Classes@TStreamj, @Classes@TStream@WriteBuffer$qqrpxvi, @Classes@TStream@ReadBuffer$qqrpvi, @Classes@TStream@Seek$qqrxj19Classes@TSeekOrigin, @Classes@TStream@Seek$qqrius, @Classes@TStream@SetSize$qqrxj, @Classes@TStream@SetSize64$qqrxj, @Classes@TStream@SetSize$qqri, @Classes@TStream@GetSize$qqrv, @Classes@TStream@SetPosition$qqrxj, @Classes@TStream@GetPosition$qqrv, @Classes@TStrings@GetValueFromIndex$qqri, @Classes@TStrings@SetNameValueSeparator$qqrxc, @Classes@TStrings@GetNameValueSeparator$qqrv, @Classes@TStrings@SetStrictDelimiter$qqrxo, @Classes@TStrings@SetQuoteChar$qqrxc, @Classes@TStrings@SetLineBreak$qqrx17System@AnsiString, @Classes@TStrings@SetDelimiter$qqrxc, @Classes@TStrings@GetStrictDelimiter$qqrv, @Classes@TStrings@GetQuoteChar$qqrv, @Classes@TStrings@GetLineBreak$qqrv, @Classes@TStrings@GetDelimiter$qqrv, @Classes@TStrings@GetName$qqri, @Classes@TStrings@EndUpdate$qqrv, @Classes@TStrings@BeginUpdate$qqrv, @Classes@TCollection@Notify$qqrp23Classes@TCollectionItem31Classes@TCollectionNotification, @Classes@TCollection@Deleting$qqrp23Classes@TCollectionItem, @Classes@TCollection@Added$qqrrp23Classes@TCollectionItem, @Classes@TCollection@Update$qqrp23Classes@TCollectionItem, @Classes@TCollection@SetItemName$qqrp23Classes@TCollectionItem, @Classes@TCollection@GetItem$qqri, @Classes@TCollection@GetCount$qqrv, @Classes@TCollection@EndUpdate$qqrv, @Classes@TCollection@BeginUpdate$qqrv, @Classes@TCollection@Assign$qqrp19Classes@TPersistent, @Classes@TCollection@$bdtr$qqrv, @Classes@TCollection@$bctr$qqrp17System@TMetaClass, @Classes@TCollectionItem@SetIndex$qqri, @Classes@TCollectionItem@SetDisplayName$qqrx17System@AnsiString, @Classes@TCollectionItem@SetCollection$qqrp19Classes@TCollection, @Classes@TCollectionItem@GetDisplayName$qqrv, @Classes@TCollectionItem@$bdtr$qqrv, @Classes@TCollectionItem@$bctr$qqrp19Classes@TCollection, @Classes@TPersistent@DefineProperties$qqrp14Classes@TFiler, @Classes@TPersistent@AssignTo$qqrp19Classes@TPersistent, @Classes@TPersistent@Assign$qqrp19Classes@TPersistent, @Classes@TPersistent@$bdtr$qqrv, @Classes@TList@Notify$qqrpv25Classes@TListNotification, @Classes@TList@Put$qqripv, @Classes@TList@Insert$qqripv, @Classes@TList@IndexOf$qqrpv, @Classes@TList@Grow$qqrv, @Classes@TList@Get$qqri, @Classes@TList@Error$qqrp17System@TMetaClassx17System@AnsiStringi, @Classes@TList@Delete$qqri, @Classes@TList@Clear$qqrv, @Classes@TList@Add$qqrpv, @Classes@TList@$bdtr$qqrv, @Classes@SyncEvent, @$xp$19Classes@TDataModule, @Classes@TDataModule@, @$xp$18Classes@TComponent, @Classes@TComponent@, @Classes@TThread@, @Classes@EThread@, @Classes@TStreamAdapter@, @Classes@TStringStream@, @Classes@TMemoryStream@, @Classes@TFileStream@, @Classes@THandleStream@, @Classes@TStream@, @Classes@TStringList@, @Classes@TStrings@, @$xp$19Classes@TCollection, @Classes@TCollection@, @$xp$23Classes@TCollectionItem, @Classes@TCollectionItem@, @$xp$19Classes@TPersistent, @Classes@TPersistent@, @$xp$22Classes@IInterfaceList, @Classes@TList@, @Classes@EStringListError@, @Classes@EFOpenError@, @Classes@EFCreateError@<BR>> ole32.dll: CreateStreamOnHGlobal, CoCreateInstance<BR>> rtl100.bpl: @Typinfo@initialization$qqrv, @Typinfo@Finalization$qqrv<BR>> rtl100.bpl: @Variants@initialization$qqrv, @Variants@Finalization$qqrv, @Variants@VarToWideStr$qqrrx14System@Variant, @Variants@VarIsNull$qqrrx14System@Variant, @Variants@@VarAddRef$qqrr8TVarData, @Variants@@VarFromDisp$qqrr8TVarDatax36System@_DelphiInterface$t9IDispatch_, @Variants@@VarFromIntf$qqrr8TVarDatax45System@_DelphiInterface$t17System@IInterface_, @Variants@@VarFromWStr$qqrr8TVarDatax17System@WideString, @Variants@@OleVarFromInt$qqrr8TVarDataxixzc, @Variants@@VarToWStr$qqrr17System@WideStringrx8TVarData, @Variants@@VarClr$qqrr8TVarData<BR>> rtl100.bpl: @Varutils@initialization$qqrv, @Varutils@Finalization$qqrv<BR>> rtl100.bpl: @Rtlconsts@_SThreadCreateError, @Rtlconsts@_SSortedListError, @Rtlconsts@_SRegSetDataFailed, @Rtlconsts@_SRegGetDataFailed, @Rtlconsts@_SListIndexError, @Rtlconsts@_SInvalidRegType, @Rtlconsts@_SFOpenErrorEx, @Rtlconsts@_SFCreateErrorEx, @Rtlconsts@_SDuplicateString<BR>> rtl100.bpl: @Registry@initialization$qqrv, @Registry@Finalization$qqrv<BR>> rtl100.bpl: @Inifiles@initialization$qqrv, @Inifiles@Finalization$qqrv<BR>> Kernel32.dll: lstrlenW<BR>> oleaut32.dll: SysStringLen, SysStringByteLen, SysReAllocStringLen, SysReAllocString, SysFreeString, SysAllocStringLen, SysAllocStringByteLen, SysAllocString<BR>> wsock32.dll: WSACleanup, WSAStartup, gethostbyname, socket, setsockopt, sendto, send, select, recvfrom, recv, inet_addr, htons, connect, closesocket, bind<BR>> shell32.dll: Shell_NotifyIconA, ShellExecuteExW, ShellExecuteExA, ShellExecuteA, SHGetFileInfoA<BR>> comdlg32.dll: PrintDlgA, GetSaveFileNameA<BR>> comctl32.dll: ImageList_GetIconSize, ImageList_Write, ImageList_Read, ImageList_GetIcon, ImageList_ReplaceIcon, ImageList_GetImageCount, ImageList_Destroy, ImageList_Create, InitCommonControls<BR>> kernel32.dll: RtlUnwind<BR>> vcl100.bpl: @Forms@initialization$qqrv, @Forms@Finalization$qqrv, @Forms@TApplication@SetShowHint$qqro, @Forms@TApplication@GetExeName$qqrv, @Forms@TApplication@Terminate$qqrv, @Forms@TApplication@Run$qqrv, @Forms@TApplication@CreateForm$qqrp17System@TMetaClasspv, @Forms@TApplication@Initialize$qqrv, @Forms@TApplication@UnhookMainWindow$qqrynpqqrr17Messages@TMessage$o, @Forms@TApplication@HookMainWindow$qqrynpqqrr17Messages@TMessage$o, @Forms@TApplication@HandleMessage$qqrv, @Forms@TApplication@ProcessMessages$qqrv, @Forms@TCustomForm@QueryInterface$qqsrx5_GUIDpv, @Forms@TCustomForm@RequestAlign$qqrv, @Forms@TCustomForm@UpdateActions$qqrv, @Forms@TCustomForm@ShowModal$qqrv, @Forms@TCustomForm@SetFocus$qqrv, @Forms@TCustomForm@CloseQuery$qqrv, @Forms@TCustomForm@Resizing$qqr18Forms@TWindowState, @Forms@TCustomForm@PaintWindow$qqrui, @Forms@TCustomForm@SetFocusedControl$qqrp20Controls@TWinControl, @Forms@TCustomForm@DefaultHandler$qqrpv, @Forms@TCustomForm@DestroyWindowHandle$qqrv, @Forms@TCustomForm@DestroyHandle$qqrv, @Forms@TCustomForm@CreateWindowHandle$qqrrx22Controls@TCreateParams, @Forms@TCustomForm@CreateWnd$qqrv, @Forms@TCustomForm@CreateParams$qqrr22Controls@TCreateParams, @Forms@TCustomForm@AlignControls$qqrp17Controls@TControlr11Types@TRect, @Forms@TCustomForm@WndProc$qqrr17Messages@TMessage, @Forms@TCustomForm@ValidateRename$qqrp18Classes@TComponentx17System@AnsiStringt2, @Forms@TCustomForm@SetParent$qqrp20Controls@TWinControl, @Forms@TCustomForm@WantChildKey$qqrp17Controls@TControlr17Messages@TMessage, @Forms@TCustomForm@SetParentBiDiMode$qqro, @Forms@TCustomForm@GetFloating$qqrv, @Forms@TCustomForm@GetClientRect$qqrv, @Forms@TCustomForm@DefineProperties$qqrp14Classes@TFiler, @Forms@TCustomForm@ReadState$qqrp15Classes@TReader, @Forms@TCustomForm@Notification$qqrp18Classes@TComponent18Classes@TOperation, @Forms@TCustomForm@Loaded$qqrv, @Forms@TCustomForm@DoDestroy$qqrv, @Forms@TCustomForm@DoCreate$qqrv, @Forms@TCustomForm@$bdtr$qqrv, @Forms@TCustomForm@BeforeDestruction$qqrv, @Forms@TCustomForm@$bctr$qqrp18Classes@TComponenti, @Forms@TCustomForm@AfterConstruction$qqrv, @Forms@TCustomForm@$bctr$qqrp18Classes@TComponent, @Forms@TScrollingWinControl@AdjustClientRect$qqrr11Types@TRect, @Forms@TScrollingWinControl@AutoScrollInView$qqrp17Controls@TControl, @Forms@TScrollingWinControl@AutoScrollEnabled$qqrv, @Forms@Application, @$xp$11Forms@TForm, @Forms@TForm@<BR>> rtl100.bpl: @Helpintfs@initialization$qqrv, @Helpintfs@Finalization$qqrv<BR>> rtl100.bpl: @Contnrs@TObjectList@GetItem$qqri, @Contnrs@TObjectList@$bctr$qqro, @Contnrs@TObjectList@Add$qqrp14System@TObject, @Contnrs@TObjectList@<BR>> rtl100.bpl: @Math@Min$qqrxjxj<BR>> rtl100.bpl: @Multimon@initialization$qqrv, @Multimon@Finalization$qqrv<BR>> vcl100.bpl: @Actnlist@initialization$qqrv, @Actnlist@Finalization$qqrv<BR>> vcl100.bpl: @Graphics@initialization$qqrv, @Graphics@Finalization$qqrv<BR>> vcl100.bpl: @Consts@_SServiceUninstallFailed, @Consts@_SServiceUninstallOK, @Consts@_SServiceInstallFailed, @Consts@_SServiceInstallOK, @Consts@_SCustomError, @Consts@_SShutdown, @Consts@_SInterrogate, @Consts@_SContinue, @Consts@_SPause, @Consts@_SStop, @Consts@_SStart, @Consts@_SExecute, @Consts@_SServiceFailed<BR>> vcl100.bpl: @Controls@initialization$qqrv, @Controls@Finalization$qqrv, @Controls@TWinControl@UpdateControlOriginalParentSize$qqrp17Controls@TControlr12Types@TPoint, @Controls@TWinControl@DockReplaceDockClient$qqrp17Controls@TControlp20Controls@TWinControlt115Controls@TAlignt1, @Controls@TWinControl@SetParentBackground$qqro, @Controls@TWinControl@CanAutoSize$qqrrit1, @Controls@TWinControl@AssignTo$qqrp19Classes@TPersistent, @Controls@TWinControl@ConstrainedResize$qqrrit1t1t1, @Controls@TWinControl@CanResize$qqrrit1, @Controls@TWinControl@GetClientOrigin$qqrv, @Controls@TWinControl@GetControlExtents$qqrv, @Controls@TWinControl@Repaint$qqrv, @Controls@TWinControl@Update$qqrv, @Controls@TWinControl@Invalidate$qqrv, @Controls@TWinControl@GetDeviceContext$qqrrui, @Controls@TWinControl@ShowControl$qqrp17Controls@TControl, @Controls@TWinControl@SetBounds$qqriiii, @Controls@TWinControl@CustomAlignPosition$qqrp17Controls@TControlrit2t2t2r11Types@TRectrx19Controls@TAlignInfo, @Controls@TWinControl@CustomAlignInsertBefore$qqrp17Controls@TControlt1, @Controls@TWinControl@CreateHandle$qqrv, @Controls@TWinControl@DestroyWnd$qqrv, @Controls@TControl@InitiateAction$qqrv, @Controls@TControl@GetFloatingDockSiteClass$qqrv, @Controls@TControl@SetBiDiMode$qqr17Classes@TBiDiMode, @Controls@TControl@SetEnabled$qqro, @Controls@TControl@SetName$qqrx17System@AnsiString, @Controls@TControl@SetAutoSize$qqro, @Controls@TControl@SetDragMode$qqr18Controls@TDragMode, @Controls@TControl@GetAction$qqrv, @Controls@TControl@GetEnabled$qqrv, @Controls@TControl@GetDragImages$qqrv<BR>> vcl100.bpl: @Menus@initialization$qqrv, @Menus@Finalization$qqrv<BR>> rtl100.bpl: @Uxtheme@initialization$qqrv, @Uxtheme@Finalization$qqrv<BR>> vcl100.bpl: @Themes@initialization$qqrv, @Themes@Finalization$qqrv<BR>> vcl100.bpl: @Dialogs@initialization$qqrv, @Dialogs@Finalization$qqrv, @Dialogs@MessageDlg$qqrx17System@AnsiString19Dialogs@TMsgDlgType47System@_Set$t18Dialogs@TMsgDlgBtn$iuc$0$iuc$10_i<BR>> vcl100.bpl: @Stdctrls@TMemo@<BR>> vcl100.bpl: @Printers@initialization$qqrv, @Printers@Finalization$qqrv<BR>> vcl100.bpl: @Extctrls@initialization$qqrv, @Extctrls@Finalization$qqrv<BR>> vcl100.bpl: @Graphutil@initialization$qqrv, @Graphutil@Finalization$qqrv<BR>> rtl100.bpl: @Strutils@PosEx$qqrx17System@AnsiStringt1i, @Strutils@MidBStr$qqrx17System@AnsiStringxixi, @Strutils@RightBStr$qqrx17System@AnsiStringxi, @Strutils@LeftBStr$qqrx17System@AnsiStringxi, @Strutils@RightStr$qqrx17System@AnsiStringxi, @Strutils@LeftStr$qqrx17System@WideStringxi<BR>> vcl100.bpl: @Clipbrd@initialization$qqrv, @Clipbrd@Finalization$qqrv<BR>> rtl100.bpl: @Flatsb@initialization$qqrv, @Flatsb@Finalization$qqrv<BR>> advapi32.dll: StartServiceCtrlDispatcherA, SetServiceStatus, RegisterServiceCtrlHandlerA, QueryServiceConfigW, OpenServiceW, OpenServiceA, OpenSCManagerW, OpenSCManagerA, DeleteService, CreateServiceA, CloseServiceHandle<BR>> rtl100.bpl: @Widestrutils@inOpSet$qqrbrx29System@_Set$tc$iuc$0$iuc$255_, @Widestrutils@WideStringReplace$qqrx17System@WideStringt1t149System@_Set$t21Sysutils@SysUtils__94$iuc$0$iuc$1_, @Widestrutils@WStrScan$qqrpbb, @Widestrutils@WStrEnd$qqrpxb, @Widestrutils@WStrLen$qqrpxb, @Widestrutils@WStrNew$qqrpxb<BR>> SysAccess.dll: GetSDWrapper<BR>> rtl100.bpl: @$xp$17Msxml@IXMLDOMText, @$xp$22Msxml@IXMLDOMAttribute, @$xp$21Msxml@IXMLDOMDocument, @$xp$25Msxml@IXMLDOMNamedNodeMap, @$xp$21Msxml@IXMLDOMNodeList, @$xp$17Msxml@IXMLDOMNode, @$xp$27Msxml@IXMLDOMImplementation, @Msxml@CLASS_DOMDocument<BR>> rtl100.bpl: @Comobj@initialization$qqrv, @Comobj@Finalization$qqrv, @Comobj@OleCheck$qqrl, @Comobj@HandleSafeCallException$qqrp14System@TObjectpvrx5_GUIDx17System@WideStringt4, @Comobj@EOleException@<BR>> CommOM.dll: GetSDObjectModel<BR>> vcl100.bpl: @Svcmgr@initialization$qqrv, @Svcmgr@Finalization$qqrv<BR>> advapi32.dll: GetKernelObjectSecurity<BR>> comctl32.dll: ImageList_Write<BR>> ole32.dll: GetHGlobalFromStream, CreateStreamOnHGlobal<BR>> commhlpr.dll: CreateCommonHelper<BR>> RegHelper.dll: CreateRegHelper<BR>> inethlpr.dll: CreateInternetHelper<BR>> filehlpr.dll: CreateFileHelper<BR>> sdcore.dll: GetObjectRegistry<BR>> rtl100.bpl: @Widestrings@initialization$qqrv, @Widestrings@Finalization$qqrv, @Widestrings@TWideStringList@SetCaseSensitive$qqrxo, @Widestrings@TWideStringList@SetSorted$qqro, @Widestrings@TWideStringList@<BR>> sdcore.dll: GetObjectRegistry<BR><BR>( 1 exports ) <BR>madTraceProcess<BR>
                  Fichier msntb.dll reçu le 2008.08.19 00:09:24 (CET)Antivirus Version Dernière mise à jour Résultat
                  AhnLab-V3 2008.8.19.0 2008.08.18 -
                  AntiVir 7.8.1.19 2008.08.18 -
                  Authentium 5.1.0.4 2008.08.18 -
                  Avast 4.8.1195.0 2008.08.18 -
                  AVG 8.0.0.161 2008.08.18 -
                  BitDefender 7.2 2008.08.18 -
                  CAT-QuickHeal 9.50 2008.08.18 -
                  ClamAV 0.93.1 2008.08.18 -
                  DrWeb 4.44.0.09170 2008.08.18 -
                  eSafe 7.0.17.0 2008.08.18 -
                  eTrust-Vet 31.6.6035 2008.08.15 -
                  Ewido 4.0 2008.08.18 -
                  F-Prot 4.4.4.56 2008.08.18 -
                  F-Secure 7.60.13501.0 2008.08.18 -
                  Fortinet 3.14.0.0 2008.08.18 -
                  GData 2.0.7306.1023 2008.08.18 -
                  Ikarus T3.1.1.34.0 2008.08.18 -
                  K7AntiVirus 7.10.420 2008.08.18 -
                  Kaspersky 7.0.0.125 2008.08.18 -
                  McAfee 5363 2008.08.18 -
                  Microsoft 1.3807 2008.08.18 -
                  NOD32v2 3365 2008.08.18 -
                  Norman 5.80.02 2008.08.18 -
                  Panda 9.0.0.4 2008.08.18 -
                  PCTools 4.4.2.0 2008.08.18 -
                  Prevx1 V2 2008.08.19 -
                  Rising 20.58.02.00 2008.08.18 -
                  Sophos 4.32.0 2008.08.18 -
                  Sunbelt 3.1.1546.1 2008.08.15 -
                  Symantec 10 2008.08.18 -
                  TheHacker 6.3.0.5.053 2008.08.18 -
                  TrendMicro 8.700.0.1004 2008.08.18 -
                  VBA32 3.12.8.3 2008.08.18 -
                  ViRobot 2008.8.18.1339 2008.08.18 -
                  VirusBuster 4.5.11.0 2008.08.18 -
                  Webwasher-Gateway 6.6.2 2008.08.18 -

                  Information additionnelle
                  File size: 282624 bytes
                  MD5...: 6b3b0c6657b3dfead7abc5bfee45b347
                  SHA1..: afdbee676428c8c1cfc5c2f844a74e58926a4468
                  SHA256: b0bc19b728f19f744cf97a88cddd8fa5b9e9d491ce52b5e965eb56b5ca15a7f7
                  SHA512: 26c2c6f74f4805b7033f1076b532e28bb0e3f0c127d33f6fd72922d6bc37298b<BR>7ac69a9bd264f39a292a1cf24de82d6397b2ec96b243b4a390133f7e126a146b
                  PEiD..: -
                  PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x10017792<BR>timedatestamp.....: 0x43cd85fe (Wed Jan 18 00:04:14 2006)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 6 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x2dd7a 0x2e000 6.55 e26b2b06c6df8b838570095211a47c24<BR>.rdata 0x2f000 0xe6c9 0xf000 5.20 21f9c8f0837aad2aba428567abab82ef<BR>.data 0x3e000 0x55fc 0x2000 2.39 bc4f9918b5af99b8095cfb8b703ffea2<BR>.SHARED 0x44000 0x4 0x1000 0.00 620f0b67a91f7f74151bc5be745b7110<BR>.rsrc 0x45000 0x5d8 0x1000 2.09 239651130be8c9b9181c9d1c2a268104<BR>.reloc 0x46000 0x2a40 0x3000 6.22 a6c9acba9a1ab6c97015632920f1adc7<BR><BR>( 10 imports ) <BR>> ADVAPI32.dll: RegCloseKey, RegNotifyChangeKeyValue, RegCreateKeyExW, RegDeleteKeyA, RegDeleteKeyW, RegDeleteValueA, RegDeleteValueW, RegOpenKeyExA, RegOpenKeyExW, RegQueryValueExA, RegQueryValueExW, RegSetValueExA, RegSetValueExW, RegCreateKeyExA<BR>> GDI32.dll: SetBkMode, RoundRect, CreatePen, CreateSolidBrush, IntersectClipRect, SetBkColor, CreateFontIndirectW, GetObjectA, CreateFontIndirectA, GetTextExtentPoint32W, GetTextExtentPoint32A, GetTextExtentExPointW, GetTextExtentExPointA, SetTextColor, BitBlt, SetStretchBltMode, StretchBlt, CreateCompatibleBitmap, CreateCompatibleDC, GetStockObject, Rectangle, SelectObject, DeleteDC, DeleteObject, GetObjectW<BR>> KERNEL32.dll: GetCurrentProcessId, GetCurrentThreadId, FreeLibrary, CreateMutexA, GetModuleFileNameA, Sleep, GetTickCount, SetEvent, SetPriorityClass, SetThreadPriority, FindResourceW, LoadResource, LockResource, SizeofResource, FreeResource, SetCurrentDirectoryW, SetCurrentDirectoryA, CreateEventW, CreateEventA, GetFileAttributesA, RemoveDirectoryW, RemoveDirectoryA, OutputDebugStringW, MoveFileExW, MoveFileA, GetTempPathW, GetTempPathA, GetShortPathNameW, GetShortPathNameA, GetCurrentDirectoryW, OpenMutexA, FindNextFileW, FindNextFileA, FindFirstFileW, FindFirstFileA, FindClose, DeleteFileW, DeleteFileA, CreateProcessW, CreateProcessA, CreateFileW, CreateFileA, CreateDirectoryW, CreateDirectoryA, CopyFileW, CopyFileA, SetEnvironmentVariableA, CompareStringW, CompareStringA, FlushFileBuffers, HeapSize, GetLocaleInfoW, SetStdHandle, SetConsoleCtrlHandler, GetTimeZoneInformation, SetFilePointer, InitializeCriticalSection, GetOEMCP, GetACP, IsBadCodePtr, IsBadReadPtr, SetUnhandledExceptionFilter, WriteFile, UnhandledExceptionFilter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetStartupInfoA, GetFileType, GetStdHandle, SetHandleCount, GetCurrentProcess, TerminateProcess, LCMapStringW, WideCharToMultiByte, LCMapStringA, GetSystemInfo, VirtualProtect, GetStringTypeW, GetStringTypeA, IsValidCodePage, IsValidLocale, ReleaseMutex, CreateThread, OutputDebugStringA, GetModuleFileNameW, SetLastError, GetLastError, ResetEvent, CloseHandle, TerminateThread, WaitForSingleObject, GetVersion, GetFileAttributesW, GetProcAddress, GetModuleHandleW, GetModuleHandleA, LoadLibraryW, LoadLibraryA, InterlockedDecrement, InterlockedIncrement, GetCurrentDirectoryA, RtlUnwind, ExitProcess, HeapFree, HeapAlloc, HeapReAlloc, GetCommandLineA, GetVersionExA, TlsAlloc, GetCurrentThread, TlsFree, TlsSetValue, TlsGetValue, QueryPerformanceCounter, GetSystemTimeAsFileTime, InterlockedExchange, VirtualQuery, MultiByteToWideChar, HeapDestroy, HeapCreate, VirtualFree, DeleteCriticalSection, LeaveCriticalSection, FatalAppExitA, EnterCriticalSection, VirtualAlloc, IsBadWritePtr, GetTimeFormatA, GetDateFormatA, GetCPInfo, GetUserDefaultLCID, GetLocaleInfoA, EnumSystemLocalesA<BR>> ole32.dll: CoTaskMemFree, CoInitialize, CoCreateInstance, StringFromGUID2, StringFromIID, CoUninitialize<BR>> OLEAUT32.dll: -, -, -, -, -<BR>> USER32.dll: GetClientRect, UpdateWindow, SetCursor, SetCapture, GetCapture, ReleaseCapture, GetDesktopWindow, CopyRect, SetWindowPos, GetCursorPos, MapWindowPoints, CreatePopupMenu, TrackPopupMenuEx, DestroyMenu, InvalidateRect, TranslateMessage, DestroyWindow, PeekMessageW, DispatchMessageW, PeekMessageA, DispatchMessageA, GetAsyncKeyState, KillTimer, CharLowerA, GetForegroundWindow, GetWindowRect, PtInRect, SetWindowsHookExW, EnableMenuItem, GetFocus, CallNextHookEx, GetKeyState, UnhookWindowsHookEx, LoadImageW, LoadImageA, SetTimer, GetParent, GetDC, SetFocus, IsWindowEnabled, IsWindow, FindWindowA, SetForegroundWindow, PostMessageA, EndDialog, IsDlgButtonChecked, EnableWindow, CheckDlgButton, ShowWindow, GetDlgItem, TrackPopupMenu, GetSubMenu, GetSysColorBrush, GetSystemMetrics, DialogBoxParamW, IsRectEmpty, CreateDialogParamW, CreateDialogParamA, CreateWindowExW, CreateWindowExA, RegisterClassW, RegisterClassA, BringWindowToTop, FillRect, EndPaint, ReleaseDC, BeginPaint, DialogBoxParamA, SetWindowsHookExA, DrawFocusRect, SystemParametersInfoW, SystemParametersInfoA, AppendMenuA, AppendMenuW, CallWindowProcA, CallWindowProcW, DefWindowProcA, DefWindowProcW, DrawTextA, DrawTextW, FindWindowW, LoadCursorA, LoadCursorW, LoadStringA, LoadStringW, MessageBoxA, MessageBoxW, SendMessageA, SendMessageW, SetWindowLongA, SetWindowLongW, GetWindowLongA, GetWindowLongW, SendNotifyMessageA, SendNotifyMessageW, GetClassInfoA, GetClassInfoW, SetWindowTextA, SetWindowTextW, LoadMenuA, LoadMenuW, SetMenuItemInfoA, SetMenuItemInfoW, VkKeyScanA, VkKeyScanW, FindWindowExA, FindWindowExW, SetPropA, SetPropW, GetPropA, GetPropW, GetClassNameA, GetClassNameW<BR>> WININET.dll: InternetSetCookieW, InternetGetCookieW, InternetCrackUrlW, InternetCanonicalizeUrlW<BR>> SHELL32.dll: SHGetSpecialFolderPathA, SHGetSpecialFolderPathW, ShellExecuteExA, ShellExecuteExW, ShellExecuteA, ShellExecuteW<BR>> urlmon.dll: CreateURLMoniker, CoInternetParseUrl<BR>> WINMM.dll: PlaySoundW, PlaySoundA<BR><BR>( 6 exports ) <BR>DllCanUnloadNow, DllGetClassObject, DllInstall, DllMain, DllRegisterServer, DllUnregisterServer<BR>

                  Fichier msntb.dll reçu le 2008.08.19 00:09:24 (CET)Antivirus Version Dernière mise à jour Résultat
                  AhnLab-V3 2008.8.19.0 2008.08.18 -
                  AntiVir 7.8.1.19 2008.08.18 -
                  Authentium 5.1.0.4 2008.08.18 -
                  Avast 4.8.1195.0 2008.08.18 -
                  AVG 8.0.0.161 2008.08.18 -
                  BitDefender 7.2 2008.08.18 -
                  CAT-QuickHeal 9.50 2008.08.18 -
                  ClamAV 0.93.1 2008.08.18 -
                  DrWeb 4.44.0.09170 2008.08.18 -
                  eSafe 7.0.17.0 2008.08.18 -
                  eTrust-Vet 31.6.6035 2008.08.15 -
                  Ewido 4.0 2008.08.18 -
                  F-Prot 4.4.4.56 2008.08.18 -
                  F-Secure 7.60.13501.0 2008.08.18 -
                  Fortinet 3.14.0.0 2008.08.18 -
                  GData 2.0.7306.1023 2008.08.18 -
                  Ikarus T3.1.1.34.0 2008.08.18 -
                  K7AntiVirus 7.10.420 2008.08.18 -
                  Kaspersky 7.0.0.125 2008.08.18 -
                  McAfee 5363 2008.08.18 -
                  Microsoft 1.3807 2008.08.18 -
                  NOD32v2 3365 2008.08.18 -
                  Norman 5.80.02 2008.08.18 -
                  Panda 9.0.0.4 2008.08.18 -
                  PCTools 4.4.2.0 2008.08.18 -
                  Prevx1 V2 2008.08.19 -
                  Rising 20.58.02.00 2008.08.18 -
                  Sophos 4.32.0 2008.08.18 -
                  Sunbelt 3.1.1546.1 2008.08.15 -
                  Symantec 10 2008.08.18 -
                  TheHacker 6.3.0.5.053 2008.08.18 -
                  TrendMicro 8.700.0.1004 2008.08.18 -
                  VBA32 3.12.8.3 2008.08.18 -
                  ViRobot 2008.8.18.1339 2008.08.18 -
                  VirusBuster 4.5.11.0 2008.08.18 -
                  Webwasher-Gateway 6.6.2 2008.08.18 -

                  Information additionnelle
                  File size: 282624 bytes
                  MD5...: 6b3b0c6657b3dfead7abc5bfee45b347
                  SHA1..: afdbee676428c8c1cfc5c2f844a74e58926a4468
                  SHA256: b0bc19b728f19f744cf97a88cddd8fa5b9e9d491ce52b5e965eb56b5ca15a7f7
                  SHA512: 26c2c6f74f4805b7033f1076b532e28bb0e3f0c127d33f6fd72922d6bc37298b<BR>7ac69a9bd264f39a292a1cf24de82d6397b2ec96b243b4a390133f7e126a146b
                  PEiD..: -
                  PEInfo: PE Structure information<BR><BR>( base data )<BR>entrypointaddress.: 0x10017792<BR>timedatestamp.....: 0x43cd85fe (Wed Jan 18 00:04:14 2006)<BR>machinetype.......: 0x14c (I386)<BR><BR>( 6 sections )<BR>name viradd virsiz rawdsiz ntrpy md5<BR>.text 0x1000 0x2dd7a 0x2e000 6.55 e26b2b06c6df8b838570095211a47c24<BR>.rdata 0x2f000 0xe6c9 0xf000 5.20 21f9c8f0837aad2aba428567abab82ef<BR>.data 0x3e000 0x55fc 0x2000 2.39 bc4f9918b5af99b8095cfb8b703ffea2<BR>.SHARED 0x44000 0x4 0x1000 0.00 620f0b67a91f7f74151bc5be745b7110<BR>.rsrc 0x45000 0x5d8 0x1000 2.09 239651130be8c9b9181c9d1c2a268104<BR>.reloc 0x46000 0x2a40 0x3000 6.22 a6c9acba9a1ab6c97015632920f1adc7<BR><BR>( 10 imports ) <BR>> ADVAPI32.dll: RegCloseKey, RegNotifyChangeKeyValue, RegCreateKeyExW, RegDeleteKeyA, RegDeleteKeyW, RegDeleteValueA, RegDeleteValueW, RegOpenKeyExA, RegOpenKeyExW, RegQueryValueExA, RegQueryValueExW, RegSetValueExA, RegSetValueExW, RegCreateKeyExA<BR>> GDI32.dll: SetBkMode, RoundRect, CreatePen, CreateSolidBrush, IntersectClipRect, SetBkColor, CreateFontIndirectW, GetObjectA, CreateFontIndirectA, GetTextExtentPoint32W, GetTextExtentPoint32A, GetTextExtentExPointW, GetTextExtentExPointA, SetTextColor, BitBlt, SetStretchBltMode, StretchBlt, CreateCompatibleBitmap, CreateCompatibleDC, GetStockObject, Rectangle, SelectObject, DeleteDC, DeleteObject, GetObjectW<BR>> KERNEL32.dll: GetCurrentProcessId, GetCurrentThreadId, FreeLibrary, CreateMutexA, GetModuleFileNameA, Sleep, GetTickCount, SetEvent, SetPriorityClass, SetThreadPriority, FindResourceW, LoadResource, LockResource, SizeofResource, FreeResource, SetCurrentDirectoryW, SetCurrentDirectoryA, CreateEventW, CreateEventA, GetFileAttributesA, RemoveDirectoryW, RemoveDirectoryA, OutputDebugStringW, MoveFileExW, MoveFileA, GetTempPathW, GetTempPathA, GetShortPathNameW, GetShortPathNameA, GetCurrentDirectoryW, OpenMutexA, FindNextFileW, FindNextFileA, FindFirstFileW, FindFirstFileA, FindClose, DeleteFileW, DeleteFileA, CreateProcessW, CreateProcessA, CreateFileW, CreateFileA, CreateDirectoryW, CreateDirectoryA, CopyFileW, CopyFileA, SetEnvironmentVariableA, CompareStringW, CompareStringA, FlushFileBuffers, HeapSize, GetLocaleInfoW, SetStdHandle, SetConsoleCtrlHandler, GetTimeZoneInformation, SetFilePointer, InitializeCriticalSection, GetOEMCP, GetACP, IsBadCodePtr, IsBadReadPtr, SetUnhandledExceptionFilter, WriteFile, UnhandledExceptionFilter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetStartupInfoA, GetFileType, GetStdHandle, SetHandleCount, GetCurrentProcess, TerminateProcess, LCMapStringW, WideCharToMultiByte, LCMapStringA, GetSystemInfo, VirtualProtect, GetStringTypeW, GetStringTypeA, IsValidCodePage, IsValidLocale, ReleaseMutex, CreateThread, OutputDebugStringA, GetModuleFileNameW, SetLastError, GetLastError, ResetEvent, CloseHandle, TerminateThread, WaitForSingleObject, GetVersion, GetFileAttributesW, GetProcAddress, GetModuleHandleW, GetModuleHandleA, LoadLibraryW, LoadLibraryA, InterlockedDecrement, InterlockedIncrement, GetCurrentDirectoryA, RtlUnwind, ExitProcess, HeapFree, HeapAlloc, HeapReAlloc, GetCommandLineA, GetVersionExA, TlsAlloc, GetCurrentThread, TlsFree, TlsSetValue, TlsGetValue, QueryPerformanceCounter, GetSystemTimeAsFileTime, InterlockedExchange, VirtualQuery, MultiByteToWideChar, HeapDestroy, HeapCreate, VirtualFree, DeleteCriticalSection, LeaveCriticalSection, FatalAppExitA, EnterCriticalSection, VirtualAlloc, IsBadWritePtr, GetTimeFormatA, GetDateFormatA, GetCPInfo, GetUserDefaultLCID, GetLocaleInfoA, EnumSystemLocalesA<BR>> ole32.dll: CoTaskMemFree, CoInitialize, CoCreateInstance, StringFromGUID2, StringFromIID, CoUninitialize<BR>> OLEAUT32.dll: -, -, -, -, -<BR>> USER32.dll: GetClientRect, UpdateWindow, SetCursor, SetCapture, GetCapture, ReleaseCapture, GetDesktopWindow, CopyRect, SetWindowPos, GetCursorPos, MapWindowPoints, CreatePopupMenu, TrackPopupMenuEx, DestroyMenu, InvalidateRect, TranslateMessage, DestroyWindow, PeekMessageW, DispatchMessageW, PeekMessageA, DispatchMessageA, GetAsyncKeyState, KillTimer, CharLowerA, GetForegroundWindow, GetWindowRect, PtInRect, SetWindowsHookExW, EnableMenuItem, GetFocus, CallNextHookEx, GetKeyState, UnhookWindowsHookEx, LoadImageW, LoadImageA, SetTimer, GetParent, GetDC, SetFocus, IsWindowEnabled, IsWindow, FindWindowA, SetForegroundWindow, PostMessageA, EndDialog, IsDlgButtonChecked, EnableWindow, CheckDlgButton, ShowWindow, GetDlgItem, TrackPopupMenu, GetSubMenu, GetSysColorBrush, GetSystemMetrics, DialogBoxParamW, IsRectEmpty, CreateDialogParamW, CreateDialogParamA, CreateWindowExW, CreateWindowExA, RegisterClassW, RegisterClassA, BringWindowToTop, FillRect, EndPaint, ReleaseDC, BeginPaint, DialogBoxParamA, SetWindowsHookExA, DrawFocusRect, SystemParametersInfoW, SystemParametersInfoA, AppendMenuA, AppendMenuW, CallWindowProcA, CallWindowProcW, DefWindowProcA, DefWindowProcW, DrawTextA, DrawTextW, FindWindowW, LoadCursorA, LoadCursorW, LoadStringA, LoadStringW, MessageBoxA, MessageBoxW, SendMessageA, SendMessageW, SetWindowLongA, SetWindowLongW, GetWindowLongA, GetWindowLongW, SendNotifyMessageA, SendNotifyMessageW, GetClassInfoA, GetClassInfoW, SetWindowTextA, SetWindowTextW, LoadMenuA, LoadMenuW, SetMenuItemInfoA, SetMenuItemInfoW, VkKeyScanA, VkKeyScanW, FindWindowExA, FindWindowExW, SetPropA, SetPropW, GetPropA, GetPropW, GetClassNameA, GetClassNameW<BR>> WININET.dll: InternetSetCookieW, InternetGetCookieW, InternetCrackUrlW, InternetCanonicalizeUrlW<BR>> SHELL32.dll: SHGetSpecialFolderPathA, SHGetSpecialFolderPathW, ShellExecuteExA, ShellExecuteExW, ShellExecuteA, ShellExecuteW<BR>> urlmon.dll: CreateURLMoniker, CoInternetParseUrl<BR>> WINMM.dll: PlaySoundW, PlaySoundA<BR><BR>( 6 exports ) <BR>DllCanUnloadNow, DllGetClassObject, DllInstall, DllMain, DllRegisterServer, DllUnregisterServer<BR>
                  0
                5. varfendell
                  @lucaneje n'ai as acces au lien, certain site me sont bloqué.
                  nomme moi juste les bouton dont tu disposes.
                  0
              7. varfendell
                Sa m'a l'air déjà mieux ton rapport.
                De ton coté, il donne quoi ton ordi?
                0
                1. lucane Auteur
                  Hé bien tout à l'air de fonctionner à merveille, je pense que l'on va laisser comme ca pour le moment et si ca va pas, je referais un post.
                  Je te remercie mille fois.
                  Cordialement Lucane.
                  0

              Discussions similaires

              infection
              céline0034

              12 réponses
              Infection
              toast3r

              44 réponses
              problème infection ?
              emma

              76 réponses
              Infection FileRepMetagen
              Fab8769

              9 réponses
              Infection Luckystarting
              @ssomw@r

              20 réponses