you have a security problem et autres Fermé

Question

Bonjour,

Depuis peut mon PC a attraper plusieurs virus (dont un disant " you have a security  problem " ) l'autre je ne c pas ce que c'est et il m'est impossible de m'en débarrassé pourriez vous m'indiquer les manœuvres a suivre pour m'en débarrasser s'il vous plais ,

merci

zorinho · Answer

Salut,

peux-tu faire une analyse avec Hijackthis et coller le rapport d'analyse ici? (attention, aucune suppression de ligne à ce stade)

tu trouveras comment télécharger et utiliser les logiciel
https://www.malekal.com/tutoriel-hijackthis/

A plus

Zor

Akuma · Answer

quand je télécharge Hijackthis et que je veut le décompréser sa me met (aucune archive trouver)

chimay8 · Answer

Télécharge HiJackThis.exe de Merijn sur ton bureau. 
- Cette version est sans installateur! ( Zip à décompresser )
- Enregistre le sur ton bureau
----> exemple C:\hijackthis    *** Enregistre le bien dans C: ! *** 
installer hijackthis correctement:
https://forums.cnetfrance.fr

Akuma · Answer

voila le rapport 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:33:33, on 10/11/2008
Platform: Windows XP SP3, v.5512 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20861)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Taskix\Taskix32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\VistaDriveIcon\DrvIcon.exe
C:\WINDOWS\system32\hkcmd.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\LClock\LClock.exe
C:\DOCUME~1\Miminou\LOCALS~1\Temp\xxx5155.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\DOCUME~1\Miminou\LOCALS~1\Temp\~tmpc.exe
C:\Program Files\Trend Micro\HijackThis\HJT.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [Taskix] C:\Program Files\Taskix\Taskix32.exe start
O4 - HKLM\..\Run: [DrvIcon] C:\Program Files\VistaDriveIcon\DrvIcon.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [LClock] "C:\Program Files\LClock\LClock.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSFox] C:\DOCUME~1\Miminou\LOCALS~1\Temp\xxx5155.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: NameServer = 85.255.112.223;85.255.112.105
O17 - HKLM\System\CS1\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: NameServer = 85.255.112.223;85.255.112.105
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

zorinho · Answer

Salut,

1) je te conseille de désinstaller Avast https://www.avast.com/fr-fr/uninstall-utility
au profit de antivir https://www.malekal.com/avira-free-security-antivirus-gratuit/

pour t'en convaincre, http://forum.malekal.com/ftopic3528.php

Fais une analyse avec Antivir et colle un rapport d'analyse ici

2) Télécharge smitfraudfix http://siri.urz.free.fr/Fix/SmitfraudFix.exe

pour t'aider:  http://www.malekal.com/tutorial_SmitFraudfix.php
 
Arrête-toi à l'étape 1: recherche d'infection

Colle le rapport
A plus

Zor

Akuma · Answer

comment fait on le rapport d'analyse avec antivir ?
 j'ai chercher mais je ne sait pas ou c'est

zorinho · Answer

Re-salut,

regarde bien ce tutorial:
https://forums.cnetfrance.fr

Regarde dans la rubrique "start antivir" en vert
a) fais les mises à jour d'antivir  "start update"
b) scanner l'ordi "scan computer"
c) pour le rapport, vas dans la rubrique "overview/reports" tu pourras voir le rapport en fichier texte que tu colleras ici

A plus

Zor

Akuma · Answer

je croit que j'ai effacer les virus mais j'en suis pas sur, jugez par vous même ( si il en reste encore comment les effacer ?) :

Avira AntiVir Personal
Report file date: lundi 10 novembre 2008  14:06

Scanning for 1023599 virus strains and unwanted programs.

Licensed to:      Avira AntiVir PersonalEdition Classic
Serial number:    0000149996-ADJIE-0001
Platform:         Windows XP
Windows version:  (Service Pack 3, v.5512)  [5.1.2600]
Boot mode:        Normally booted
Username:         Dark-Akuma
Computer name:    TRUS-4EA1E3C776

Version information:
BUILD.DAT     : 8.2.0.334      16933 Bytes  16/10/2008 14:55:00
AVSCAN.EXE    : 8.1.4.7       315649 Bytes  26/06/2008 09:57:53
AVSCAN.DLL    : 8.1.4.0        40705 Bytes  26/05/2008 08:56:40
LUKE.DLL      : 8.1.4.5       164097 Bytes  12/06/2008 13:44:19
LUKERES.DLL   : 8.1.4.0        12033 Bytes  26/05/2008 08:58:52
ANTIVIR0.VDF  : 7.1.0.0     15603712 Bytes  27/10/2008 12:19:15
ANTIVIR1.VDF  : 7.1.0.56      411136 Bytes  09/11/2008 12:19:16
ANTIVIR2.VDF  : 7.1.0.57        2048 Bytes  09/11/2008 12:19:17
ANTIVIR3.VDF  : 7.1.0.62       35840 Bytes  10/11/2008 13:05:29
Engineversion : 8.2.0.29  
AEVDF.DLL     : 8.1.0.6       102772 Bytes  14/10/2008 11:05:56
AESCRIPT.DLL  : 8.1.1.13      332156 Bytes  10/11/2008 12:19:25
AESCN.DLL     : 8.1.1.5       123251 Bytes  10/11/2008 12:19:24
AERDL.DLL     : 8.1.1.3       438645 Bytes  10/11/2008 12:19:24
AEPACK.DLL    : 8.1.3.3       393591 Bytes  10/11/2008 12:19:23
AEOFFICE.DLL  : 8.1.0.30      196986 Bytes  10/11/2008 12:19:22
AEHEUR.DLL    : 8.1.0.71     1487222 Bytes  10/11/2008 12:19:21
AEHELP.DLL    : 8.1.1.3       119157 Bytes  10/11/2008 12:19:19
AEGEN.DLL     : 8.1.1.0       319859 Bytes  10/11/2008 12:19:19
AEEMU.DLL     : 8.1.0.9       393588 Bytes  14/10/2008 11:05:56
AECORE.DLL    : 8.1.4.1       172405 Bytes  10/11/2008 12:19:18
AEBB.DLL      : 8.1.0.3        53618 Bytes  14/10/2008 11:05:56
AVWINLL.DLL   : 1.0.0.12       15105 Bytes  09/07/2008 09:40:05
AVPREF.DLL    : 8.0.2.0        38657 Bytes  16/05/2008 10:28:01
AVREP.DLL     : 8.0.0.2        98344 Bytes  10/11/2008 12:19:18
AVREG.DLL     : 8.0.0.1        33537 Bytes  09/05/2008 12:26:40
AVARKT.DLL    : 1.0.0.23      307457 Bytes  12/02/2008 09:29:23
AVEVTLOG.DLL  : 8.0.0.16      119041 Bytes  12/06/2008 13:27:49
SQLITE3.DLL   : 3.3.17.1      339968 Bytes  22/01/2008 18:28:02
SMTPLIB.DLL   : 1.2.0.23       28929 Bytes  12/06/2008 13:49:40
NETNT.DLL     : 8.0.0.1         7937 Bytes  25/01/2008 13:05:10
RCIMAGE.DLL   : 8.0.0.51     2371841 Bytes  12/06/2008 14:48:07
RCTEXT.DLL    : 8.0.52.0       86273 Bytes  27/06/2008 14:34:37

Configuration settings for the scan:
Jobname..........................: Local Drives
Configuration file...............: C:\Program Files\Avira\AntiVir PersonalEdition Classic\alldrives.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, A:, D:, 
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: lundi 10 novembre 2008  14:06

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'firefox.exe' - '1' Module(s) have been scanned
Scan process 'LClock.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'hkcmd.exe' - '1' Module(s) have been scanned
Scan process 'DrvIcon.exe' - '1' Module(s) have been scanned
Scan process 'Taskix32.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
21 processes with 21 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
    [INFO]      No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
    [INFO]      No virus was found!
Boot sector 'A:\'
    [INFO]      In the drive 'A:\' no data medium is inserted!

Starting to scan the registry.
The registry was scanned ( '48' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
    [WARNING]   The file could not be opened!
Begin scan in 'A:\'
Search path A:\ could not be opened!
System error [21]: Le périphérique n'est pas prêt.
Begin scan in 'D:\'
Search path D:\ could not be opened!
System error [21]: Le périphérique n'est pas prêt.


End of the scan: lundi 10 novembre 2008  14:18
Used time: 11:44 Minute(s)

The scan has been done completely.

   1779 Scanning directories
  63550 Files were scanned
      0 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      1 Files cannot be scanned
  63549 Files not concerned
    364 Archives were scanned
      1 Warnings
      0 Notes

zorinho · Answer

Okay, 

antivir n'a rien détecté: c'est déjà cela.

Comme indiqué ci-dessus, télécharge smitfraudfix et colle un rapport d'analyse.

A plus

Zor

zorinho · Answer

...ainsi qu'un nouveau rapport Hijackthis...évidemment

Akuma · Answer

est-ce normal que quand je télécharge smitfraudfix antivir détecte automatiquement des dropper ?

zorinho · Answer

oui, tu dois temporairement désactiver l'antivirus pour le téléchargement...D'autres logiciels le reconnaissent comme trojan (Nod32 aussi pour ne pas le citer)...

Akuma · Answer

voila  les rapport,


SmitFraudFix v2.373

Rapport fait à 15:58:06,12, 10/11/2008
Executé à partir de C:\Documents and Settings\Miminou\Bureau\T‚l‚chargements\SmitfraudFix
OS: Console - Windows Trust 3.0 (Service Pack 3: v5512) - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Taskix\Taskix32.exe
C:\Program Files\VistaDriveIcon\DrvIcon.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\LClock\LClock.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts

Fichier hosts corrompu !

127.0.0.1 mpa.one.microsoft.com
127.0.0.1 ads.techguy.org

»»»»»»»»»»»»»»»»»»»»»»»» C:\

C:esycled\ PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

C:\WINDOWS\system32\split.exe  PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Miminou


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Miminou\LOCALS~1\Temp


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Miminou\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Miminou\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
 

»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\WINDOWS\system32\userinit.exe,"
"System"="lsass.exe"


»»»»»»»»»»»»»»»»»»»»»»»» RK



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Votre ordinateur est certainement victime d'un détournement de DNS: 85.255.x.x détecté !

Description: SAGEM Wi-Fi 11g USB adapter - Miniport d'ordonnancement de paquets
DNS Server Search Order: 85.255.112.223;85.255.112.105

HKLM\SYSTEM\CCS\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: NameServer=85.255.112.223;85.255.112.105
HKLM\SYSTEM\CS1\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: NameServer=85.255.112.223;85.255.112.105
HKLM\SYSTEM\CS3\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: NameServer=85.255.112.223;85.255.112.105
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:02:12, on 10/11/2008
Platform: Windows XP SP3, v.5512 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20861)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Taskix\Taskix32.exe
C:\Program Files\VistaDriveIcon\DrvIcon.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\LClock\LClock.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HJT.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [Taskix] C:\Program Files\Taskix\Taskix32.exe start
O4 - HKLM\..\Run: [DrvIcon] C:\Program Files\VistaDriveIcon\DrvIcon.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [LClock] "C:\Program Files\LClock\LClock.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSFox] C:\DOCUME~1\Miminou\LOCALS~1\Temp\xxx5155.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: NameServer = 85.255.112.223;85.255.112.105
O17 - HKLM\System\CS1\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: NameServer = 85.255.112.223;85.255.112.105
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

zorinho · Answer

1) Parfait, tu peux relancer Smitfraudfix et lancer l'option 2 (désinfection) cette fois.

2) Ensuite, télécharge malwarebytes antimalware
http://www.commentcamarche.net/telecharger/telecharger 34055379 malwarebytes anti malware

Fais un scan complet de ton ordi en mode sans échec
Démarrage en mode sans échec 

tuto logiciel:  https://forums.cnetfrance.fr

Colle le rapport d'analyse

3) colle un rapport Hijackthis (après redémarrage de l'ordinateur)

Comment se comporte ton ordi?

A plus

Zor

Akuma · Answer

En lançant l'option 2 de Smitfraudfix ce message c'est affiché ( votre ordinateur est certainement victime d'un détournement DNS Sagem Wifi 11g USB adaptateur Miniport d'ordonnance de paquets voulez vous reconfigurer votre réseau avec des IP dynamiques - DHCP )

zorinho · Answer

passe à l'option 2 et accepte la reconfiguration...

Akuma · Answer

Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1380
Windows 5.1.2600 Service Pack 3, v.5512

10/11/2008 20:44:33
mbam-log-2008-11-10 (20-44-18).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 50333
Temps écoulé: 35 minute(s), 45 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 3
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\cont_offersfortoday (Adware.Agent) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{1267d457-eef7-48fa-9fe7-bb22988956fd}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.223;85.255.112.105 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{1267d457-eef7-48fa-9fe7-bb22988956fd}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.223;85.255.112.105 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{1267d457-eef7-48fa-9fe7-bb22988956fd}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.223;85.255.112.105 -> No action taken.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Program Files\Mozilla Firefox\components
soffersfortoday.dll (Adware.BHO) -> No action taken.
C:\WINDOWS\system32\cont_offersfortoday-remove.exe (Adware.Agent) -> No action taken.



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:17:33, on 10/11/2008
Platform: Windows XP SP3, v.5512 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20861)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Taskix\Taskix32.exe
C:\Program Files\VistaDriveIcon\DrvIcon.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\LClock\LClock.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Trend Micro\HijackThis\HJT.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [Taskix] C:\Program Files\Taskix\Taskix32.exe start
O4 - HKLM\..\Run: [DrvIcon] C:\Program Files\VistaDriveIcon\DrvIcon.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [LClock] "C:\Program Files\LClock\LClock.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

zorinho · Answer

Salut,

1) où se trouve le rapport smitfraudfix, après nettoyage (option 2)?

2) A la fin l'examen avec malwarebytes antimalware, et comme cela l'est indiqué dans le tuto, il est indiqué "Afficher les résultats", tu dois alors faire "supprimer la sélection" pour éliminer les malware.

Vas dans l'onglet quarantaine, supprime tout ce qui s'y trouve et colle u nouveau rapport Malware

3) Colle un nouveau rapport Hijackthis

On arrive à la fin, courage

Zor

Akuma · Answer

SmitFraudFix v2.373

Rapport fait à 23:02:08,81, 10/11/2008
Executé à partir de C:\Documents and Settings\Miminou\Bureau\T‚l‚chargements\SmitfraudFix
OS: Console - Windows Trust 3.0 (Service Pack 3: v5512) - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1 localhost
127.0.0.1 rad.msn.com
127.0.0.1 rad.live.com
127.0.0.1 ads1.msn.com
127.0.0.1 adfarm.mediaplex.com 
127.0.0.1 101com.com
127.0.0.1 101order.com
127.0.0.1 103bees.com
127.0.0.1 1100i.com
127.0.0.1 123banners.com
127.0.0.1 123found.com
127.0.0.1 123pagerank.com
127.0.0.1 180searchassistant.com
127.0.0.1 180solutions.com
127.0.0.1 207.net
127.0.0.1 247media.com
127.0.0.1 247realmedia.com
127.0.0.1 24pm-affiliation.com
127.0.0.1 2log.com
127.0.0.1 2mdn.net
127.0.0.1 2o7.net
127.0.0.1 4affiliate.net
127.0.0.1 4d5.net
127.0.0.1 50websads.com
127.0.0.1 518ad.com
127.0.0.1 555-0134.com
127.0.0.1 600z.com
127.0.0.1 777partner.com
127.0.0.1 777seo.com
127.0.0.1 7adpower.com
127.0.0.1 7search.com
127.0.0.1 911promotion.com
127.0.0.1 99count.com
127.0.0.1 a-counter.kiev.ua
127.0.0.1 a.consumer.net
127.0.0.1 a.gismeteo.ru
127.0.0.1 a.mktw.net
127.0.0.1 a.softpedia.com
127.0.0.1 a.ucoz.ru
127.0.0.1 a.windowsitpro.com
127.0.0.1 a.wowinterface.com
127.0.0.1 a.xanga.com
127.0.0.1 a32.g.a.yimg.com
127.0.0.1 aaddzz.com
127.0.0.1 abacho.net
127.0.0.1 abcnews.footprint.net
127.0.0.1 absurdprofits.com
127.0.0.1 abz.com
127.0.0.1 ac.rnm.ca
127.0.0.1 accelerator-media.com
127.0.0.1 accounts.pkr.com
127.0.0.1 acsseo.com
127.0.0.1 action.ientry.net
127.0.0.1 actionsplash.com
127.0.0.1 actualdeals.com
127.0.0.1 ad-flow.com
127.0.0.1 ad-images.suntimes.com
127.0.0.1 ad-logics.com
127.0.0.1 ad-rotator.com
127.0.0.1 ad-server.gulasidorna.se
127.0.0.1 ad-souk.com
127.0.0.1 ad-space.net
127.0.0.1 ad-tech.com
127.0.0.1 ad-universe.com
127.0.0.1 ad-up.com
127.0.0.1 ad.100.tbn.ru
127.0.0.1 ad.37.com
127.0.0.1 ad.71i.de
127.0.0.1 ad.980x.com
127.0.0.1 ad.a8.net
127.0.0.1 ad.abcnews.com
127.0.0.1 ad.abctv.com
127.0.0.1 ad.about.com
127.0.0.1 ad.aboutit.de
127.0.0.1 ad.aboutwebservices.com
127.0.0.1 ad.abum.com
127.0.0.1 ad.aftenposten.no
127.0.0.1 ad.aftonbladet.se
127.0.0.1 ad.allstar.cz
127.0.0.1 ad.altervista.org
127.0.0.1 ad.anuntis.com
127.0.0.1 ad.asap-asp.net
127.0.0.1 ad.bondage.com
127.0.0.1 ad.centrum.cz
127.0.0.1 ad.cgi.cz
127.0.0.1 ad.chip.de
127.0.0.1 ad.choiceradio.com
127.0.0.1 ad.clix.pt
127.0.0.1 ad.digitallook.com
127.0.0.1 ad.directconnect.se
127.0.0.1 ad.disney.go.com
127.0.0.1 ad.domainfactory.de
127.0.0.1 ad.dvdforum.nu
127.0.0.1 ad.e-kolay.net
127.0.0.1 ad.e-not.net
127.0.0.1 ad.eurosport.com
127.0.0.1 ad.fragzone.se
127.0.0.1 ad.free6.com
127.0.0.1 ad.freecity.de
127.0.0.1 ad.gate24.ch
127.0.0.1 ad.grafika.cz
127.0.0.1 ad.harmony-central.com
127.0.0.1 ad.hbv.de
127.0.0.1 ad.howstuffworks.com
127.0.0.1 ad.hyena.cz
127.0.0.1 ad.iinfo.cz
127.0.0.1 ad.infoseek.com
127.0.0.1 ad.investopedia.com
127.0.0.1 ad.ir.ru
127.0.0.1 ad.isohunt.com
127.0.0.1 ad.jamba.net
127.0.0.1 ad.jetsoftware.com
127.0.0.1 ad.keenspace.com
127.0.0.1 ad.krutilka.ru
127.0.0.1 ad.liveinternet.ru
127.0.0.1 ad.lupa.cz
127.0.0.1 ad.media-servers.net
127.0.0.1 ad.mediastorm.hu
127.0.0.1 ad.mgd.de
127.0.0.1 ad.moscowtimes.ru
127.0.0.1 ad.musicmatch.com
127.0.0.1 ad.nachtagenten.de
127.0.0.1 ad.nozonedata.com
127.0.0.1 ad.nrk.no
127.0.0.1 ad.nttnavi.co.jp
127.0.0.1 ad.nwt.cz
127.0.0.1 ad.pbs.bb.ru
127.0.0.1 ad.pdassi.de
127.0.0.1 ad.playground.ru
127.0.0.1 ad.preferances.com
127.0.0.1 ad.profiwin.de
127.0.0.1 ad.prv.pl
127.0.0.1 ad.rambler.ru
127.0.0.1 ad.reunion.com
127.0.0.1 ad.sensismediasmart.com.au
127.0.0.1 ad.seznam.cz
127.0.0.1 ad.simgames.net
127.0.0.1 ad.slutload.com
127.0.0.1 ad.specificmedia.com
127.0.0.1 ad.surfsecret.com
127.0.0.1 ad.t2t2.com
127.0.0.1 ad.tbn.ru
127.0.0.1 ad.tiscali.com
127.0.0.1 ad.tisnet.net.tw
127.0.0.1 ad.tomshardware.com
127.0.0.1 ad.top50.to
127.0.0.1 ad.tv2.no
127.0.0.1 ad.tweakpc.de
127.0.0.1 ad.twitchguru.com
127.0.0.1 ad.usatoday.com
127.0.0.1 ad.virtual-nights.com
127.0.0.1 ad.warcraftmovies.com
127.0.0.1 ad.watch.impress.co.jp
127.0.0.1 ad.wavu.hu
127.0.0.1 ad.way.cz
127.0.0.1 ad.weatherbug.com
127.0.0.1 ad.wz.cz
127.0.0.1 ad.yadro.ru
127.0.0.1 ad.yourmedia.com
127.0.0.1 ad0.bigmir.net
127.0.0.1 ad01.mediacorpsingapore.com
127.0.0.1 ad1.emediate.dk
127.0.0.1 ad1.emule-project.org
127.0.0.1 ad1.gamezone.com
127.0.0.1 ad1.hardware.no
127.0.0.1 ad1.kde.cz
127.0.0.1 ad1.lbe.ru
127.0.0.1 ad1.pamedia.com.au
127.0.0.1 ad1.zendmedia.com
127.0.0.1 ad2.atlas.cz
127.0.0.1 ad2.bb.ru
127.0.0.1 ad2.doublepimp.com
127.0.0.1 ad2.iinfo.cz
127.0.0.1 ad2.ip.ro
127.0.0.1 ad2.lbe.ru
127.0.0.1 ad2.linxcz.cz
127.0.0.1 ad2.lupa.cz
127.0.0.1 ad2.mamma.com
127.0.0.1 ad2.pamedia.com.au
127.0.0.1 ad2.seznam.cz
127.0.0.1 ad2.tisnet.net.tw
127.0.0.1 ad2flash.com
127.0.0.1 ad3.iinfo.cz
127.0.0.1 ad3.pamedia.com.au
127.0.0.1 ad3.tisnet.net.tw
127.0.0.1 ad4.atlas.cz
127.0.0.1 ad4.tisnet.net.tw
127.0.0.1 ad41.atlas.cz
127.0.0.1 ad4ex.com
127.0.0.1 adaos-ads.net
127.0.0.1 adbaaz.com
127.0.0.1 adbanner.ro
127.0.0.1 adbard.net
127.0.0.1 adboost.de.vu
127.0.0.1 adboost.net
127.0.0.1 adbot.com
127.0.0.1 adbrite.com
127.0.0.1 adbunker.com
127.0.0.1 adbureau.net
127.0.0.1 adbutler.com
127.0.0.1 adbutler.de
127.0.0.1 adbuyer3.lycos.com
127.0.0.1 adcell.de
127.0.0.1 adcenter.mdf.se
127.0.0.1 adcenter.net
127.0.0.1 adcenter.rxpg.com
127.0.0.1 adcentriconline.com
127.0.0.1 adcept.net
127.0.0.1 adclick.com
127.0.0.1 adclick.gamespy.com
127.0.0.1 adclick.ro
127.0.0.1 adclient.rottentomatoes.com
127.0.0.1 adclient1.tucows.com
127.0.0.1 adcomplete.com
127.0.0.1 adconion.com
127.0.0.1 adcontent.gamespy.com
127.0.0.1 adcorps.com
127.0.0.1 adcycle.com
127.0.0.1 add.newmedia.cz
127.0.0.1 addcontrol.net
127.0.0.1 addesktop.com
127.0.0.1 addfreestats.com
127.0.0.1 addme.com
127.0.0.1 addynamix.com
127.0.0.1 adecn.com
127.0.0.1 ademails.com
127.0.0.1 adengage.com
127.0.0.1 adext.inkclub.com
127.0.0.1 adfarm.mediaplex.com
127.0.0.1 adfiles.api.no
127.0.0.1 adflight.com
127.0.0.1 adfly.com
127.0.0.1 adforce.com
127.0.0.1 adform.com
127.0.0.1 adgardener.com
127.0.0.1 adgoto.com
127.0.0.1 adgridwork.com
127.0.0.1 adhostcenter.com
127.0.0.1 adi.mainichi.co.jp
127.0.0.1 adimage.asiaone.com.sg
127.0.0.1 adimages.been.com
127.0.0.1 adimages.carsoup.com
127.0.0.1 adimages.go.com
127.0.0.1 adimages.homestore.com
127.0.0.1 adimages.sanomawsoy.fi
127.0.0.1 adimg.cnet.com
127.0.0.1 adimg.com.com
127.0.0.1 adimg1.chosun.com
127.0.0.1 adimgs.sapo.pt
127.0.0.1 adincl.gopher.com
127.0.0.1 adinjector.net
127.0.0.1 adinterax.com
127.0.0.1 adisfy.com
127.0.0.1 adition.com
127.0.0.1 adition.de
127.0.0.1 adition.net
127.0.0.1 adjug.com
127.0.0.1 adjuggler.yourdictionary.com
127.0.0.1 adjustnetwork.com
127.0.0.1 adlegend.com
127.0.0.1 adlink.de
127.0.0.1 adlog.com.com
127.0.0.1 adlogix.net
127.0.0.1 adm.ad.asap-asp.net
127.0.0.1 adman.freeze.com
127.0.0.1 admanagement.ch
127.0.0.1 admanager.btopenworld.com
127.0.0.1 admanager.carsoup.com
127.0.0.1 admarketplace.net
127.0.0.1 admaximize.com
127.0.0.1 admedia.ro
127.0.0.1 admeta.com
127.0.0.1 admex.com
127.0.0.1 adminder.com
127.0.0.1 adminshop.com
127.0.0.1 admonitor.com
127.0.0.1 admonitor.net
127.0.0.1 admotion.com.ar
127.0.0.1 adnet.asahi.com
127.0.0.1 adnet.biz
127.0.0.1 adnet.ru
127.0.0.1 adnews.maddog2000.de
127.0.0.1 adocean.pl
127.0.0.1 adonspot.com
127.0.0.1 adorigin.com
127.0.0.1 adpepper.dk
127.0.0.1 adpick.switchboard.com
127.0.0.1 adpost.com
127.0.0.1 adprofile.net
127.0.0.1 adprojekt.pl
127.0.0.1 adpush.dreamscape.com
127.0.0.1 adq.nextag.com
127.0.0.1 adreactor.com
127.0.0.1 adredirect.com
127.0.0.1 adremedy.com
127.0.0.1 adrenaline.cz
127.0.0.1 adrenalinesk.sk
127.0.0.1 adreporting.com
127.0.0.1 adres.internet.com
127.0.0.1 adrevolver.com
127.0.0.1 adriver.ru
127.0.0.1 adrotate.de
127.0.0.1 adrotator.net
127.0.0.1 ads-205.quarterserver.de
127.0.0.1 ads-click.com
127.0.0.1 ads-de.spray.net
127.0.0.1 ads-dev.youporn.com
127.0.0.1 ads.100asians.com
127.0.0.1 ads.20minutos.es
127.0.0.1 ads.5ci.lt
127.0.0.1 ads.aceweb.net
127.0.0.1 ads.administrator.de
127.0.0.1 ads.adshareware.net
127.0.0.1 ads.adultfriendfinder.com
127.0.0.1 ads.adultking.com
127.0.0.1 ads.advance.net
127.0.0.1 ads.adverline.com
127.0.0.1 ads.affiliates.match.com
127.0.0.1 ads.allsites.com
127.0.0.1 ads.alt.com
127.0.0.1 ads.alwayson-network.com
127.0.0.1 ads.amdmb.com
127.0.0.1 ads.amigos.com
127.0.0.1 ads.anm.co.uk
127.0.0.1 ads.aol.com
127.0.0.1 ads.archivefree.com
127.0.0.1 ads.as4x.tmcs.net
127.0.0.1 ads.asia1.com.sg
127.0.0.1 ads.asiafriendfinder.com
127.0.0.1 ads.aspalliance.com
127.0.0.1 ads.beenetworks.net
127.0.0.1 ads.belointeractive.com
127.0.0.1 ads.berlinonline.de
127.0.0.1 ads.betanews.com
127.0.0.1 ads.bigchurch.com
127.0.0.1 ads.bigcitytools.com
127.0.0.1 ads.bigfoot.com
127.0.0.1 ads.billiton.de
127.0.0.1 ads.bitsonthewire.com
127.0.0.1 ads.blick.ch
127.0.0.1 ads.bloomberg.com
127.0.0.1 ads.bluemountain.com
127.0.0.1 ads.box.sk
127.0.0.1 ads.brabys.com
127.0.0.1 ads.businessweek.com
127.0.0.1 ads.canalblog.com
127.0.0.1 ads.canoe.ca
127.0.0.1 ads.cavello.com
127.0.0.1 ads.cbc.ca
127.0.0.1 ads.cc-dt.com
127.0.0.1 ads.cdfreaks.com
127.0.0.1 ads.centraliprom.com
127.0.0.1 ads.cgnetworks.com
127.0.0.1 ads.channel4.com
127.0.0.1 ads.cimedia.com
127.0.0.1 ads.clanservers.com
127.0.0.1 ads.clearchannel.com
127.0.0.1 ads.cnn.com
127.0.0.1 ads.codebetter.com
127.0.0.1 ads.collegclub.com
127.0.0.1 ads.com.com
127.0.0.1 ads.cooperhosting.com
127.0.0.1 ads.cooperhosting.net
127.0.0.1 ads.creativematch.com
127.0.0.1 ads.currantbun.com
127.0.0.1 ads.cyberfight.ru
127.0.0.1 ads.cybersales.cz
127.0.0.1 ads.dada.it
127.0.0.1 ads.danworld.net
127.0.0.1 ads.datinggold.com
127.0.0.1 ads.datingyes.com
127.0.0.1 ads.dazoot.ro
127.0.0.1 ads.dbforums.com
127.0.0.1 ads.ddj.com
127.0.0.1 ads.deltha.hu
127.0.0.1 ads.dennisnet.co.uk
127.0.0.1 ads.desmoinesregister.com
127.0.0.1 ads.detelefoongids.nl
127.0.0.1 ads.developershed.com
127.0.0.1 ads.deviantart.com
127.0.0.1 ads.digital-digest.com
127.0.0.1 ads.digitalmedianet.com
127.0.0.1 ads.digitalpoint.com
127.0.0.1 ads.directionsmag.com
127.0.0.1 ads.discovery.com
127.0.0.1 ads.dk
127.0.0.1 ads.domeus.com
127.0.0.1 ads.edbindex.dk
127.0.0.1 ads.einmedia.com
127.0.0.1 ads.electrocelt.com
127.0.0.1 ads.elitetrader.com
127.0.0.1 ads.erotism.com
127.0.0.1 ads.esam.ro
127.0.0.1 ads.esmas.com
127.0.0.1 ads.eu.msn.com
127.0.0.1 ads.eudora.com
127.0.0.1 ads.exhedra.com
127.0.0.1 ads.expedia.com
127.0.0.1 ads.ezboard.com
127.0.0.1 ads.fairfax.com.au
127.0.0.1 ads.ferianc.com
127.0.0.1 ads.filmup.com
127.0.0.1 ads.firingsquad.com
127.0.0.1 ads.flooble.com
127.0.0.1 ads.fool.com
127.0.0.1 ads.football.co.uk
127.0.0.1 ads.forbes.com
127.0.0.1 ads.forbes.net
127.0.0.1 ads.forium.de
127.0.0.1 ads.fortunecity.com
127.0.0.1 ads.foxkidseurope.net
127.0.0.1 ads.freecity.de
127.0.0.1 ads.freeze.com
127.0.0.1 ads.friendfinder.com
127.0.0.1 ads.ft.com
127.0.0.1 ads.game.net
127.0.0.1 ads.gamecity.net
127.0.0.1 ads.gameforgeads.de
127.0.0.1 ads.gamershell.com
127.0.0.1 ads.gamespy.com
127.0.0.1 ads.gamespyid.com
127.0.0.1 ads.gamigo.de
127.0.0.1 ads.gaming-universe.de
127.0.0.1 ads.garagegames.com
127.0.0.1 ads.gawker.com
127.0.0.1 ads.globeandmail.com
127.0.0.1 ads.goyk.com
127.0.0.1 ads.gradfinder.com
127.0.0.1 ads.grindinggears.com
127.0.0.1 ads.guardian.co.uk
127.0.0.1 ads.guardianunlimited.co.uk
127.0.0.1 ads.guru3d.com
127.0.0.1 ads.harpers.org
127.0.0.1 ads.hbv.de
127.0.0.1 ads.heartlight.org
127.0.0.1 ads.hollywood.com
127.0.0.1 ads.humorbua.no
127.0.0.1 ads.iafrica.com
127.0.0.1 ads.ibest.com.br
127.0.0.1 ads.iboost.com
127.0.0.1 ads.icq.com
127.0.0.1 ads.ign.com
127.0.0.1 ads.imdb.com
127.0.0.1 ads.img.co.za
127.0.0.1 ads.indiatimes.com
127.0.0.1 ads.inetfast.com
127.0.0.1 ads.inetinteractive.com
127.0.0.1 ads.infi.net
127.0.0.1 ads.infomediaindia.com
127.0.0.1 ads.infospace.com
127.0.0.1 ads.ingame.de
127.0.0.1 ads.internic.co.il
127.0.0.1 ads.inthemix.com.au
127.0.0.1 ads.ipowerweb.com
127.0.0.1 ads.isoftmarketing.com
127.0.0.1 ads.itv.com
127.0.0.1 ads.iwon.com
127.0.0.1 ads.jamba.cz
127.0.0.1 ads.jewishfriendfinder.com
127.0.0.1 ads.jimworld.com
127.0.0.1 ads.jobsite.co.uk
127.0.0.1 ads.jpost.com
127.0.0.1 ads.jubii.dk
127.0.0.1 ads.kaktuz.net
127.0.0.1 ads.kinobox.cz
127.0.0.1 ads.kinxxx.com
127.0.0.1 ads.krawall.de
127.0.0.1 ads.lamp-solutions.de
127.0.0.1 ads.linuxjournal.com
127.0.0.1 ads.linuxsecurity.com
127.0.0.1 ads.lnkworld.com
127.0.0.1 ads.localnow.com
127.0.0.1 ads.lvz-online.de
127.0.0.1 ads.lycos-europe.com
127.0.0.1 ads.lycos.com
127.0.0.1 ads.macapper.com
127.0.0.1 ads.macupdate.com
127.0.0.1 ads.madison.com
127.0.0.1 ads.mambocommunities.com
127.0.0.1 ads.mariuana.it
127.0.0.1 ads.mcafee.com
127.0.0.1 ads.mediaodyssey.com
127.0.0.1 ads.mediaturf.net
127.0.0.1 ads.metropol.dk
127.0.0.1 ads.mgnetwork.com
127.0.0.1 ads.mobygames.com
127.0.0.1 ads.monster.com
127.0.0.1 ads.msn.com
127.0.0.1 ads.multimania.lycos.fr
127.0.0.1 ads.myguysolutions.com
127.0.0.1 ads.neoseeker.com
127.0.0.1 ads.neowin.net
127.0.0.1 ads.netclusive.de
127.0.0.1 ads.netmechanic.com
127.0.0.1 ads.newcity.com
127.0.0.1 ads.newcitynet.com
127.0.0.1 ads.newdream.net
127.0.0.1 ads.newmedia.cz
127.0.0.1 ads.newsint.co.uk
127.0.0.1 ads.newsquest.co.uk
127.0.0.1 ads.newtimes.com
127.0.0.1 ads.ninemsn.com.au
127.0.0.1 ads.nola.com
127.0.0.1 ads.nordichardware.com
127.0.0.1 ads.nordichardware.se
127.0.0.1 ads.nwsource.com
127.0.0.1 ads.nyi.net
127.0.0.1 ads.nypost.com
127.0.0.1 ads.nytimes.com
127.0.0.1 ads.nyx.cz
127.0.0.1 ads.nzcity.co.nz
127.0.0.1 ads.ole.com
127.0.0.1 ads.oneplace.com
127.0.0.1 ads.optusnet.com.au
127.0.0.1 ads.osdn.com
127.0.0.1 ads.ourbrisbane.com
127.0.0.1 ads.outpersonals.com
127.0.0.1 ads.overclockers.at
127.0.0.1 ads.passion.com
127.0.0.1 ads.pastemagazine.com
127.0.0.1 ads.pcper.com
127.0.0.1 ads.peel.com
127.0.0.1 ads.penny-arcade.com
127.0.0.1 ads.phpclasses.org
127.0.0.1 ads.pittsburghlive.com
127.0.0.1 ads.planet.nl
127.0.0.1 ads.planetactive.com
127.0.0.1 ads.planetamd64.com
127.0.0.1 ads.pni.com
127.0.0.1 ads.powweb.com
127.0.0.1 ads.primeinteractive.net
127.0.0.1 ads.prisacom.com
127.0.0.1 ads.pro-market.net
127.0.0.1 ads.quoka.de
127.0.0.1 ads.realcities.com
127.0.0.1 ads.realmedia.de
127.0.0.1 ads.recoletos.es
127.0.0.1 ads.rediff.com
127.0.0.1 ads.redtube.com
127.0.0.1 ads.resoom.de
127.0.0.1 ads.rivals.net
127.0.0.1 ads.rockstargames.com
127.0.0.1 ads.rottentomatoes.com
127.0.0.1 ads.rpgdot.com
127.0.0.1 ads.rpgui.com
127.0.0.1 ads.satyamonline.com
127.0.0.1 ads.savannahnow.com
127.0.0.1 ads.scifi.com
127.0.0.1 ads.seniorfriendfinder.com
127.0.0.1 ads.shareprovider.com
127.0.0.1 ads.shizmoo.com
127.0.0.1 ads.sify.com
127.0.0.1 ads.simtel.net
127.0.0.1 ads.skins.be
127.0.0.1 ads.slim.com
127.0.0.1 ads.smartclick.com
127.0.0.1 ads.soft32.com
127.0.0.1 ads.sourcelabs.com
127.0.0.1 ads.space.com
127.0.0.1 ads.sptimes.com
127.0.0.1 ads.spyderbyte.com
127.0.0.1 ads.stationplay.com
127.0.0.1 ads.stileproject.com
127.0.0.1 ads.storagereview.net
127.0.0.1 ads.stratics.com
127.0.0.1 ads.sumotorrent.com
127.0.0.1 ads.sun.com
127.0.0.1 ads.switchboard.com
127.0.0.1 ads.t-online.de
127.0.0.1 ads.tahono.com
127.0.0.1 ads.techtv.com
127.0.0.1 ads.telegraaf.nl
127.0.0.1 ads.telegraph.co.uk
127.0.0.1 ads.tentonhammer.com
127.0.0.1 ads.theglobeandmail.com
127.0.0.1 ads.thestar.com
127.0.0.1 ads.thestranger.com
127.0.0.1 ads.thewebfreaks.com
127.0.0.1 ads.tmcs.net
127.0.0.1 ads.top500.org
127.0.0.1 ads.torrentreactor.net
127.0.0.1 ads.totallyfreestuff.com
127.0.0.1 ads.townhall.com
127.0.0.1 ads.tripod.com
127.0.0.1 ads.tripod.lycos.co.uk
127.0.0.1 ads.tripod.lycos.de
127.0.0.1 ads.tripod.lycos.es
127.0.0.1 ads.tripod.lycos.it
127.0.0.1 ads.tripod.lycos.nl
127.0.0.1 ads.tripod.spray.se
127.0.0.1 ads.ucomics.com
127.0.0.1 ads.uigc.net
127.0.0.1 ads.unixathome.org
127.0.0.1 ads.urli.net
127.0.0.1 ads.us.e-planning.net
127.0.0.1 ads.usatoday.com
127.0.0.1 ads.v3.com
127.0.0.1 ads.vesperexchange.com
127.0.0.1 ads.vg.basefarm.net
127.0.0.1 ads.virtual-nights.com
127.0.0.1 ads.virtualcountries.com
127.0.0.1 ads.vnumedia.com
127.0.0.1 ads.weather.ca
127.0.0.1 ads.web.aol.com
127.0.0.1 ads.web.cs.com
127.0.0.1 ads.web.de
127.0.0.1 ads.web21.com
127.0.0.1 ads.weblogssl.com
127.0.0.1 ads.webnet.advance.net
127.0.0.1 ads.whi.co.nz
127.0.0.1 ads.wikia.nocookie.net
127.0.0.1 ads.winsite.com
127.0.0.1 ads.wowscreenies.com
127.0.0.1 ads.wunderground.com
127.0.0.1 ads.x10.com
127.0.0.1 ads.xtra.co.nz
127.0.0.1 ads.y-0.net
127.0.0.1 ads.yimg.com
127.0.0.1 ads.yourfreedvds.com
127.0.0.1 ads.zdnet.com
127.0.0.1 ads1.canoe.ca
127.0.0.1 ads1.conjelco.com
127.0.0.1 ads1.erotism.com
127.0.0.1 ads1.mediacapital.pt
127.0.0.1 ads1.msn.com
127.0.0.1 ads1.rne.com
127.0.0.1 ads1.theglobeandmail.com
127.0.0.1 ads1.virtual-nights.com
127.0.0.1 ads10.speedbit.com
127.0.0.1 ads180.com
127.0.0.1 ads2.advance.net
127.0.0.1 ads2.clearchannel.com
127.0.0.1 ads2.collegclub.com
127.0.0.1 ads2.collegeclub.com
127.0.0.1 ads2.conjelco.com
127.0.0.1 ads2.exhedra.com
127.0.0.1 ads2.firingsquad.com
127.0.0.1 ads2.gamecity.net
127.0.0.1 ads2.jubii.dk
127.0.0.1 ads2.oneplace.com
127.0.0.1 ads2.osdn.com
127.0.0.1 ads2.rne.com
127.0.0.1 ads2.virtual-nights.com
127.0.0.1 ads2004.treiberupdate.de
127.0.0.1 ads3.advance.net
127.0.0.1 ads3.flabber.nl
127.0.0.1 ads3.gamecity.net
127.0.0.1 ads3.virtual-nights.com
127.0.0.1 ads4.advance.net
127.0.0.1 ads4.clearchannel.com
127.0.0.1 ads4.gamecity.net
127.0.0.1 ads4.virtual-nights.com
127.0.0.1 ads4homes.com
127.0.0.1 ads5.advance.net
127.0.0.1 ads5.canoe.ca
127.0.0.1 ads5.virtual-nights.com
127.0.0.1 ads6.advance.net
127.0.0.1 ads6.gamecity.net
127.0.0.1 ads7.gamecity.net
127.0.0.1 ads8.com
127.0.0.1 ads9.udc.advance.net
127.0.0.1 adsag.com
127.0.0.1 adsatt.abc.starwave.com
127.0.0.1 Adsatt.ABCNews.starwave.com
127.0.0.1 adsatt.espn.go.com
127.0.0.1 adsatt.espn.starwave.com
127.0.0.1 Adsatt.go.starwave.com
127.0.0.1 adsbrite.com
127.0.0.1 adscholar.com
127.0.0.1 adscpm.com
127.0.0.1 adsdaq.com
127.0.0.1 adsdk.com
127.0.0.1 adsend.de
127.0.0.1 adserv.evo-x.de
127.0.0.1 adserv.gamezone.de
127.0.0.1 adserv.geocomm.com
127.0.0.1 adserv.happypuppy.com
127.0.0.1 adserv.iafrica.com
127.0.0.1 adserv.muchosucko.com
127.0.0.1 adserv.qconline.com
127.0.0.1 adserv.quality-channel.de
127.0.0.1 adserv.tacticalgamer.com
127.0.0.1 adserv1.winboard.org
127.0.0.1 adserver.00web.com
127.0.0.1 adserver.3digit.de
127.0.0.1 adserver.43plc.com
127.0.0.1 adserver.71i.de
127.0.0.1 adserver.adultfriendfinder.com
127.0.0.1 adserver.aidameter.com
127.0.0.1 adserver.allerinternett.com
127.0.0.1 adserver.aseanhosting.com
127.0.0.1 adserver.ath.cx
127.0.0.1 adserver.barrapunto.com
127.0.0.1 adserver.betandwin.de
127.0.0.1 adserver.billiger-surfen.de
127.0.0.1 adserver.billiger-telefonieren.de
127.0.0.1 adserver.bizhat.com
127.0.0.1 adserver.bluewin.ch
127.0.0.1 adserver.cams.com
127.0.0.1 adserver.colleges.com
127.0.0.1 adserver.com
127.0.0.1 adserver.conjelco.com
127.0.0.1 adserver.designertoday.com
127.0.0.1 adserver.digitoday.com
127.0.0.1 adserver.dotcommedia.de
127.0.0.1 adserver.eudora.com
127.0.0.1 adserver.filefront.com
127.0.0.1 adserver.fmpub.net
127.0.0.1 adserver.freecity.de
127.0.0.1 adserver.freenet.de
127.0.0.1 adserver.friendfinder.com
127.0.0.1 adserver.fuckaroo.org
127.0.0.1 adserver.gb2.motorpresse.de
127.0.0.1 adserver.gb3.motorpresse.de
127.0.0.1 adserver.geizkragen.de
127.0.0.1 adserver.gr
127.0.0.1 adserver.hardwareanalysis.com
127.0.0.1 adserver.hispavista.com
127.0.0.1 adserver.html.it
127.0.0.1 adserver.ifmagazine.com
127.0.0.1 adserver.incgamers.com
127.0.0.1 adserver.itsfogo.com
127.0.0.1 adserver.janes.com
127.0.0.1 adserver.jolt.co.uk
127.0.0.1 adserver.journalinteractive.com
127.0.0.1 adserver.karizmaoffers.com
127.0.0.1 adserver.kyoceramita-europe.com
127.0.0.1 adserver.legacy-network.com
127.0.0.1 adserver.libero.it
127.0.0.1 adserver.monster.com
127.0.0.1 adserver.motorpresse.de
127.0.0.1 adserver.n9nedegrees.com
127.0.0.1 adserver.news.com.au
127.0.0.1 adserver.ngz-network.de
127.0.0.1 adserver.nydailynews.com
127.0.0.1 adserver.o2.pl
127.0.0.1 adserver.pl
127.0.0.1 adserver.plhb.com
127.0.0.1 adserver.portalofevil.com
127.0.0.1 adserver.portugalmail.net
127.0.0.1 adserver.portugalmail.pt
127.0.0.1 adserver.realhomesex.net
127.0.0.1 adserver.ro
127.0.0.1 adserver.sanomawsoy.fi
127.0.0.1 adserver.securityfocus.com
127.0.0.1 adserver.sharewareonline.com
127.0.0.1 adserver.snowball.com
127.0.0.1 adserver.spankaway.com
127.0.0.1 adserver.startnow.com
127.0.0.1 adserver.terra.es
127.0.0.1 adserver.theonering.net
127.0.0.1 adserver.track-star.com
127.0.0.1 adserver.ugo.com
127.0.0.1 adserver.visions.de
127.0.0.1 adserver.webhostlist.de
127.0.0.1 adserver.yahoo.com
127.0.0.1 adserver01.de
127.0.0.1 adserver1-images.backbeatmedia.com
127.0.0.1 adserver1.backbeatmedia.com
127.0.0.1 adserver1.mediainsight.de
127.0.0.1 adserver1.mindshare.de
127.0.0.1 adserver1.ogilvy-interactive.de
127.0.0.1 adserver1.shareconnector.com
127.0.0.1 adserver2.mediainsight.de
127.0.0.1 adserver2.mindshare.de
127.0.0.1 adserver2.popdata.de
127.0.0.1 adserver3.eudora.com
127.0.0.1 adserver4.eudora.com
127.0.0.1 adserversolutions.com
127.0.0.1 adservertoo.com
127.0.0.1 adservervv.geizkragen.de
127.0.0.1 adserving.eleven-agency.com
127.0.0.1 adservingcentral.com
127.0.0.1 adservinginternational.com
127.0.0.1 adsfac.net
127.0.0.1 adsklick.de
127.0.0.1 adsmart.co.uk
127.0.0.1 adsmart.com
127.0.0.1 adsmart.net
127.0.0.1 adsmusic.com
127.0.0.1 adsnew.userfriendly.org
127.0.0.1 adsoftware.com
127.0.0.1 adsoldier.com
127.0.0.1 adsonar.com
127.0.0.1 adspace.ro
127.0.0.1 adsponse.de
127.0.0.1 adsremote.scripps.com
127.0.0.1 adsrevenue.net
127.0.0.1 adsrv.bankrate.com
127.0.0.1 adsrv.iol.co.za
127.0.0.1 adstat.4u.pl
127.0.0.1 adstest.weather.com
127.0.0.1 adsweb.tiscali.cz
127.0.0.1 adsynergy.com
127.0.0.1 adsystem.tt-forums.net
127.0.0.1 adtech.de
127.0.0.1 adtiger.de
127.0.0.1 adtoll.com
127.0.0.1 adtology.com
127.0.0.1 adtology3.com
127.0.0.1 adtoma.com
127.0.0.1 adtrackerelite.com
127.0.0.1 adtrade.net
127.0.0.1 adtrading.de
127.0.0.1 adtrak.net
127.0.0.1 adtrgt.com
127.0.0.1 adtrix.com
127.0.0.1 adult-adv.com
127.0.0.1 adv-banner.libero.it
127.0.0.1 adv.for-ua.com
127.0.0.1 adv.freeonline.it
127.0.0.1 adv.hwupgrade.it
127.0.0.1 adv.isdn.cz
127.0.0.1 adv.livedoor.com
127.0.0.1 adv.surinter.net
127.0.0.1 adv.webmd.com
127.0.0.1 adv.wp.pl
127.0.0.1 adv.yo.cz
127.0.0.1 adv1.videoprofessor.com
127.0.0.1 advariant.com
127.0.0.1 adventory.com
127.0.0.1 adverity.com
127.0.0.1 adverlinkz.com
127.0.0.1 adverserve.net
127.0.0.1 advert.bayarea.com
127.0.0.1 advert.hi-media.com
127.0.0.1 advert.hu
127.0.0.1 adverticum.com
127.0.0.1 adverticum.net
127.0.0.1 advertiseireland.com
127.0.0.1 advertising-department.com
127.0.0.1 advertising.com
127.0.0.1 advertising.guildlaunch.net
127.0.0.1 advertising.se
127.0.0.1 advertisingbanners.com
127.0.0.1 advertisingbox.com
127.0.0.1 advertmarket.com
127.0.0.1 advertmedia.de
127.0.0.1 advertpro.sitepoint.com
127.0.0.1 advertpro.ya.com
127.0.0.1 adverts.carltononline.com
127.0.0.1 adverts.digitalspy.co.uk
127.0.0.1 advertserve.com
127.0.0.1 advertstream.com
127.0.0.1 advertwizard.com
127.0.0.1 adview.ppro.de
127.0.0.1 adviva.net
127.0.0.1 advnt.com
127.0.0.1 advnt02.com
127.0.0.1 advnt04.com
127.0.0.1 adware.hu
127.0.0.1 adwareremovergold.com
127.0.0.1 adweb.integctr.com
127.0.0.1 adworldnetwork.com
127.0.0.1 adworx.at
127.0.0.1 adx.allstar.cz
127.0.0.1 adx.arip.co.th
127.0.0.1 adx.atnext.com
127.0.0.1 adx.gainesvillesun.com
127.0.0.1 adx.nu
127.0.0.1 adyea.com
127.0.0.1 adz.afterdawn.net
127.0.0.1 adzones.com
127.0.0.1 afcyhf.com
127.0.0.1 affiliate-europe.com
127.0.0.1 affiliate.1800flowers.com
127.0.0.1 affiliate.7host.com
127.0.0.1 affiliate.doubleyourdating.com
127.0.0.1 affiliate.dtiserv.com
127.0.0.1 affiliate.gamestop.com
127.0.0.1 affiliate.grasscity.com
127.0.0.1 affiliate.kitapyurdu.com
127.0.0.1 affiliate.mercola.com
127.0.0.1 affiliate.mogs.com
127.0.0.1 affiliate.offgamers.com
127.0.0.1 affiliate.travelnow.com
127.0.0.1 affiliate.viator.com
127.0.0.1 affiliatebrand.com
127.0.0.1 affiliatefuel.com
127.0.0.1 affiliatefuture.com
127.0.0.1 affiliates.allposters.com
127.0.0.1 affiliates.digitalriver.com
127.0.0.1 affiliates.eroticy.com
127.0.0.1 affiliates.globat.com
127.0.0.1 affiliates.ige.com
127.0.0.1 affiliates.internationaljock.com
127.0.0.1 affiliates.jlist.com
127.0.0.1 affiliates.quintura.com
127.0.0.1 affiliates.streamray.com
127.0.0.1 affiliates.thrixxx.com
127.0.0.1 affiliatetracking.com
127.0.0.1 affiliatetracking.net
127.0.0.1 affiliatewindow.com
127.0.0.1 affiliplus.de
127.0.0.1 afiliados.submarino.com.br
127.0.0.1 afy11.net
127.0.0.1 ah-ha.com
127.0.0.1 aidu-ads.de
127.0.0.1 aim4media.com
127.0.0.1 ajouter.net
127.0.0.1 alclick.com
127.0.0.1 alexa-sitestats.s3.amazonaws.com
127.0.0.1 all4spy.com
127.0.0.1 alladvantage.com
127.0.0.1 allosponsor.com
127.0.0.1 allotraffic.com
127.0.0.1 allthe-waytothebank.com
127.0.0.1 amazingcounters.com
127.0.0.1 amung.us
127.0.0.1 an.tacoda.net
127.0.0.1 anahtars.com
127.0.0.1 analytics.live.com
127.0.0.1 analyze.yourfilehost.com
127.0.0.1 anchorfreesearch.com
127.0.0.1 anm.intelli-direct.com
127.0.0.1 annonser.dagbladet.no
127.0.0.1 aolcdn.com.example.com
127.0.0.1 api.intensifier.de
127.0.0.1 app.lstdesign.com
127.0.0.1 arc1.msn.com
127.0.0.1 arcadebanners.com
127.0.0.1 ard.xxxblackbook.com
127.0.0.1 as.cmpnet.com
127.0.0.1 as.fotexnet.hu
127.0.0.1 as.nu.nl
127.0.0.1 as1.advfn.com
127.0.0.1 as1.falkag.de
127.0.0.1 as2.advfn.com
127.0.0.1 as2.falkag.de
127.0.0.1 as3.falkag.de
127.0.0.1 as4.falkag.de
127.0.0.1 as5000.com
127.0.0.1 assets.loomia.com
127.0.0.1 assoc-amazon.com
127.0.0.1 asv.gameplanet.co.nz
127.0.0.1 atdmt.com
127.0.0.1 ati-etailer.de
127.0.0.1 atopsites.com
127.0.0.1 atwola.com
127.0.0.1 au2m8.com
127.0.0.1 auctionads.com
127.0.0.1 auctionads.net
127.0.0.1 audit.median.hu
127.0.0.1 audit.webinform.hu
127.0.0.1 auto-bannertausch.de
127.0.0.1 autohits.dk
127.0.0.1 avenuea.com
127.0.0.1 avpa.javalobby.org
127.0.0.1 avres.net
127.0.0.1 avsads.com
127.0.0.1 awarez.net
127.0.0.1 awempire.com
127.0.0.1 awin1.com
127.0.0.1 aws.sitepoint.com
127.0.0.1 axelsfun.com
127.0.0.1 azebar.com
127.0.0.1 azfront.com
127.0.0.1 azjmp.com
127.0.0.1 azoogleads.com
127.0.0.1 ba.afl.rakuten.co.jp
127.0.0.1 babs.tv2.dk
127.0.0.1 backbeatmedia.com
127.0.0.1 bamboobiz.net
127.0.0.1 banik.redigy.cz
127.0.0.1 banner-exchange-24.de
127.0.0.1 banner.1and1.com
127.0.0.1 banner.ad.nu
127.0.0.1 banner.alphacool.de
127.0.0.1 banner.amitize.com
127.0.0.1 banner.blogranking.net
127.0.0.1 banner.buempliz-online.ch
127.0.0.1 banner.casino.net
127.0.0.1 banner.casinodelrio.com
127.0.0.1 banner.coza.com
127.0.0.1 banner.cz
127.0.0.1 banner.easyspace.com
127.0.0.1 banner.elisa.net
127.0.0.1 banner.getgo.de
127.0.0.1 banner.goldenpalace.com
127.0.0.1 banner.img.co.za
127.0.0.1 banner.inyourpocket.com
127.0.0.1 banner.jobsahead.com
127.0.0.1 banner.kiev.ua
127.0.0.1 banner.linux.se
127.0.0.1 banner.media-system.de
127.0.0.1 banner.mindshare.de
127.0.0.1 banner.musikmedia.de
127.0.0.1 banner.nixnet.cz
127.0.0.1 banner.noblepoker.com
127.0.0.1 banner.northsky.com
127.0.0.1 banner.orb.net
127.0.0.1 banner.penguin.cz
127.0.0.1 banner.relcom.ru
127.0.0.1 banner.rojakpot.com
127.0.0.1 banner.supereva.it
127.0.0.1 banner.tanto.de
127.0.0.1 banner.titan-dsl.de
127.0.0.1 banner.tpage.com
127.0.0.1 banner.vadian.net
127.0.0.1 banner.webdmz.tv2.dk
127.0.0.1 banner.webmersion.com
127.0.0.1 banner.wirenode.com
127.0.0.1 banner4all.dk
127.0.0.1 bannerads.de
127.0.0.1 bannerads.zwire.com
127.0.0.1 bannerbank.ru
127.0.0.1 bannerbox.hu
127.0.0.1 bannerboxes.com
127.0.0.1 bannercommunity.de
127.0.0.1 bannerconnect.com
127.0.0.1 bannerconnect.net
127.0.0.1 bannerexchange.cjb.net
127.0.0.1 bannerhost.com
127.0.0.1 bannerimage.com
127.0.0.1 bannerlandia.com.ar
127.0.0.1 bannermall.com
127.0.0.1 bannermarkt.nl
127.0.0.1 bannerpower.com
127.0.0.1 banners.adultfriendfinder.com
127.0.0.1 banners.amigos.com
127.0.0.1 banners.arachne.cz
127.0.0.1 banners.asiafriendfinder.com
127.0.0.1 banners.babylon-x.com
127.0.0.1 banners.babylonbucks.com
127.0.0.1 banners.bol.com.br
127.0.0.1 banners.cams.com
127.0.0.1 banners.clubseventeen.com
127.0.0.1 banners.czi.cz
127.0.0.1 banners.de.clara.net
127.0.0.1 banners.direction-x.com
127.0.0.1 banners.directnic.com
127.0.0.1 banners.easydns.com
127.0.0.1 banners.ebay.com
127.0.0.1 banners.expressindia.com
127.0.0.1 banners.freett.com
127.0.0.1 banners.friendfinder.com
127.0.0.1 banners.friendsfinder.com
127.0.0.1 banners.hawh.com
127.0.0.1 banners.helpmij.nl
127.0.0.1 banners.iq.pl
127.0.0.1 banners.isoftmarketing.com
127.0.0.1 banners.kfmb.com
127.0.0.1 banners.lifeserv.com
127.0.0.1 banners.linkbuddies.com
127.0.0.1 banners.netcraft.com
127.0.0.1 banners.passion.com
127.0.0.1 banners.resultonline.com
127.0.0.1 banners.revenuegateway.net
127.0.0.1 banners.sexsearch.com
127.0.0.1 banners.stilenet.com
127.0.0.1 banners.sugeridos.com
127.0.0.1 banners.sys-con.com
127.0.0.1 banners.touteslesvideosx.com
127.0.0.1 banners.uk.clara.net
127.0.0.1 banners.videosz.com
127.0.0.1 banners.virtuagirlhd.com
127.0.0.1 banners.wunderground.com
127.0.0.1 bannerserver.com
127.0.0.1 bannersgomlm.com
127.0.0.1 bannershotlink.perfectgonzo.com
127.0.0.1 bannersng.yell.com
127.0.0.1 bannerspace.com
127.0.0.1 bannerswap.com
127.0.0.1 bannertesting.com
127.0.0.1 bannery.cz
127.0.0.1 bannieres.acces-contenu.com
127.0.0.1 bans.adserver.co.il
127.0.0.1 bans.bride.ru
127.0.0.1 bansrv1.n1media.com
127.0.0.1 barnesandnoble.bfast.com
127.0.0.1 bbmedia.cz
127.0.0.1 bbn.img.com.ua
127.0.0.1 begun.ru
127.0.0.1 belinked.info
127.0.0.1 belstat.com
127.0.0.1 belstat.nl
127.0.0.1 best-top.ro
127.0.0.1 bestsearch.net
127.0.0.1 betarget.net
127.0.0.1 bidclix.com
127.0.0.1 bidclix.net
127.0.0.1 bidvertiser.com
127.0.0.1 bigads.guj.de
127.0.0.1 bigbangmedia.com
127.0.0.1 bigtits4u.info
127.0.0.1 billboard.cz
127.0.0.1 bizad.nikkeibp.co.jp
127.0.0.1 bizban.net
127.0.0.1 bizrate.com
127.0.0.1 blast4traffic.com
127.0.0.1 blingbucks.com
127.0.0.1 blogads.com
127.0.0.1 blogcounter.de
127.0.0.1 blogrush.com
127.0.0.1 blogtoplist.se
127.0.0.1 blogtoppen.se
127.0.0.1 blogtopsites.com
127.0.0.1 blueadvertise.com
127.0.0.1 bluehornet.com
127.0.0.1 bluestreak.com
127.0.0.1 bluetime.com
127.0.0.1 bluewhaleweb.com
127.0.0.1 bm.annonce.cz
127.0.0.1 bn.bfast.com
127.0.0.1 bnr.volgocity.ru
127.0.0.1 boersego-ads.de
127.0.0.1 books.zenofeller.com
127.0.0.1 boom.ro
127.0.0.1 box.anchorfree.net
127.0.0.1 bpath.com
127.0.0.1 braincash.com
127.0.0.1 bravenet.com
127.0.0.1 bridesservice.com
127.0.0.1 bridgetrack.com
127.0.0.1 british-banners.com
127.0.0.1 bs.yandex.ru
127.0.0.1 budsinc.com
127.0.0.1 bulletads.com
127.0.0.1 bullseye.backbeatmedia.com
127.0.0.1 burstnet.com
127.0.0.1 bux-jungle.com
127.0.0.1 buyhitscheap.com
127.0.0.1 buysellads.com
127.0.0.1 bvalphaserver.com
127.0.0.1 bwp.download.com
127.0.0.1 c-planet.net
127.0.0.1 c.bigmir.net
127.0.0.1 c1.nowlinux.com
127.0.0.1 canadatop.com
127.0.0.1 caniamedia.com
127.0.0.1 casalemedia.com
127.0.0.1 casalmedia.com
127.0.0.1 cash4banner.com
127.0.0.1 cash4banner.de
127.0.0.1 cash4members.com
127.0.0.1 cash4popup.de
127.0.0.1 cashcrate.com
127.0.0.1 cashengines.com
127.0.0.1 cashfiesta.com
127.0.0.1 cashlayer.com
127.0.0.1 cashpartner.com
127.0.0.1 cashpartner.net
127.0.0.1 casinogames.com
127.0.0.1 casinopays.com
127.0.0.1 casinorewards.com
127.0.0.1 casinotraffic.com
127.0.0.1 casinotreasure.com
127.0.0.1 cat.clx.ru
127.0.0.1 cbanners.virtuagirlhd.com
127.0.0.1 cben1.net
127.0.0.1 cbmall.com
127.0.0.1 cbx.net
127.0.0.1 ceskydomov.alias.ngs.modry.cz
127.0.0.1 cetrk.com
127.0.0.1 cgicounter.puretec.de
127.0.0.1 ch.questionmarket.com
127.0.0.1 channelintelligence.com
127.0.0.1 chart.dk
127.0.0.1 checkm8.com
127.0.0.1 checkstat.nl
127.0.0.1 chestionar.ro
127.0.0.1 chitika.net
127.0.0.1 ciaoclick.com
127.0.0.1 cibleclick.com
127.0.0.1 cityads.telus.net
127.0.0.1 cj.com
127.0.0.1 cjbmanagement.com
127.0.0.1 claria.com
127.0.0.1 clckm.com
127.0.0.1 click-fr.com
127.0.0.1 click.absoluteagency.com
127.0.0.1 click.fool.co.uk
127.0.0.1 click.fool.com
127.0.0.1 click.go2net.com
127.0.0.1 click2freemoney.com
127.0.0.1 click2paid.com
127.0.0.1 clickability.com
127.0.0.1 clickagents.com
127.0.0.1 clickaider.com
127.0.0.1 clickbank.com
127.0.0.1 clickbank.net
127.0.0.1 clickbooth.com
127.0.0.1 clickboothlnk.com
127.0.0.1 clickbrokers.com
127.0.0.1 clickconsultingltd.com
127.0.0.1 clickdensity.com
127.0.0.1 clickedyclick.com
127.0.0.1 clickfinders.com
127.0.0.1 clickforwebmasters.com
127.0.0.1 clickhere.foronlinegames.com
127.0.0.1 clickhereforcellphones.com
127.0.0.1 clickhouse.com
127.0.0.1 clickhype.com
127.0.0.1 clicklink.jp
127.0.0.1 clickmedia.ro
127.0.0.1 clicks.equantum.com
127.0.0.1 clicks.jackpot.com
127.0.0.1 clicks.mods.de
127.0.0.1 clicks.stripsaver.com
127.0.0.1 clickserve.cc-dt.com
127.0.0.1 clicksor.com
127.0.0.1 clickthrucash.com
127.0.0.1 clickthruserver.com
127.0.0.1 clickthrutraffic.com
127.0.0.1 clicktorrent.info
127.0.0.1 clicktrace.info
127.0.0.1 clicktrack.ziyu.net
127.0.0.1 clicktracks.com
127.0.0.1 clicktrade.com
127.0.0.1 clickxchange.com
127.0.0.1 clickz.com
127.0.0.1 clicmanager.fr
127.0.0.1 clictrafic.com
127.0.0.1 client.alexa.com
127.0.0.1 clients.tbo.com
127.0.0.1 clixgalore.com
127.0.0.1 clixsta.com
127.0.0.1 cluster.adultworld.com
127.0.0.1 clustrmaps.com
127.0.0.1 cnomy.com
127.0.0.1 cnt.one.ru
127.0.0.1 cnt1.pocitadlo.cz
127.0.0.1 code-server.biz
127.0.0.1 colonize.com
127.0.0.1 comclick.com
127.0.0.1 commission-junction.com
127.0.0.1 commissionmonster.com
127.0.0.1 commonname.com
127.0.0.1 compactbanner.com
127.0.0.1 comprabanner.it
127.0.0.1 connextra.com
127.0.0.1 constantcontact.com
127.0.0.1 contextweb.com
127.0.0.1 conversionruler.com
127.0.0.1 cookies.cmpnet.com
127.0.0.1 coremetrics.com
127.0.0.1 count.hypem.com
127.0.0.1 count.rin.ru
127.0.0.1 count.west263.com
127.0.0.1 countall.com
127.0.0.1 countall.net
127.0.0.1 counted.com
127.0.0.1 counter.bloke.com
127.0.0.1 counter.cgiworld.net
127.0.0.1 counter.cnw.cz
127.0.0.1 counter.cz
127.0.0.1 counter.dreamhost.com
127.0.0.1 counter.fateback.com
127.0.0.1 counter.mirohost.net
127.0.0.1 counter.nowlinux.com
127.0.0.1 counter.rambler.ru
127.0.0.1 counter.search.bg
127.0.0.1 counter.times.lv
127.0.0.1 counter.webtrends.net
127.0.0.1 counter.yadro.ru
127.0.0.1 counters.honesty.com
127.0.0.1 counts.tucows.com
127.0.0.1 coupling-media.de
127.0.0.1 cpays.com
127.0.0.1 cpmstar.com
127.0.0.1 cpxinteractive.com
127.0.0.1 cqcounter.com
127.0.0.1 crakmedia.com
127.0.0.1 crawlability.com
127.0.0.1 crazypopups.com
127.0.0.1 creative.paypopup.com
127.0.0.1 creative.whi.co.nz
127.0.0.1 creatives.as4x.tmcs.net
127.0.0.1 crispads.com
127.0.0.1 crtv.mate1.com
127.0.0.1 crwdcntrl.net
127.0.0.1 cserver.mii.instacontent.net
127.0.0.1 ctnetwork.hu
127.0.0.1 ctxtads.overture.com
127.0.0.1 custom-click.com
127.0.0.1 customad.cnn.com
127.0.0.1 cxoreport.dnsalias.net
127.0.0.1 cyberbounty.com
127.0.0.1 cybercount.com
127.0.0.1 cybereps.com
127.0.0.1 cybermonitor.com
127.0.0.1 cyberwing.co.jp
127.0.0.1 cydoor.com
127.0.0.1 danban.com
127.0.0.1 datashreddergold.com
127.0.0.1 datingadvertising.com
127.0.0.1 dbbsrv.com
127.0.0.1 dclk.net
127.0.0.1 de.rottentomatoes.com
127.0.0.1 dealdotcom.com
127.0.0.1 debtbusterloans.com
127.0.0.1 debtreductioncenter.com
127.0.0.1 default-homepage-network.com
127.0.0.1 deloo.de
127.0.0.1 depilflash.tv
127.0.0.1 desktop.kazaa.com
127.0.0.1 dgm2.com
127.0.0.1 dgmaustralia.com
127.0.0.1 dialerporn.com
127.0.0.1 didtheyreadit.com
127.0.0.1 digits.com
127.0.0.1 direct-revenue.com
127.0.0.1 direct-xxx-access.com
127.0.0.1 direct.lbe.ru
127.0.0.1 directaclick.com
127.0.0.1 directivepub.com
127.0.0.1 directleads.com
127.0.0.1 directorym.com
127.0.0.1 directtrack.com
127.0.0.1 directwebsearch.net
127.0.0.1 discountclick.com
127.0.0.1 displayadsmedia.com
127.0.0.1 dist.belnk.com
127.0.0.1 divicash.com
127.0.0.1 dmtracking.alibaba.com
127.0.0.1 dmtracking2.alibaba.com
127.0.0.1 dnads.directnic.com
127.0.0.1 domainsponsor.com
127.0.0.1 domainsteam.de
127.0.0.1 donorschoose.org
127.0.0.1 doubleclick.com
127.0.0.1 doubleclick.de
127.0.0.1 doubleclick.net
127.0.0.1 dpbolvw.net
127.0.0.1 drumcash.com
127.0.0.1 dynamic.fmpub.net
127.0.0.1 e-bannerx.com
127.0.0.1 e-debtconsolidation.com
127.0.0.1 e-m.fr
127.0.0.1 e-planning.net
127.0.0.1 e.kde.cz
127.0.0.1 e2give.com
127.0.0.1 eadexchange.com
127.0.0.1 easy-ad.info
127.0.0.1 easyad.info
127.0.0.1 easyadjob.com
127.0.0.1 ecircle-ag.com
127.0.0.1 ecoupons.com
127.0.0.1 edgefcs.net
127.0.0.1 edgeio.com
127.0.0.1 efektiv.net
127.0.0.1 elitetoplist.com
127.0.0.1 em.aveno.net
127.0.0.1 emarketer.com
127.0.0.1 emarketmakers.com
127.0.0.1 emediate.dk
127.0.0.1 emonitor.takeit.cz
127.0.0.1 engage.everyone.net
127.0.0.1 engage.omaha.com
127.0.0.1 engine.awaps.net
127.0.0.1 engine.espace.netavenir.com
127.0.0.1 enginenetwork.com
127.0.0.1 entercasino.com
127.0.0.1 epiccash.com
127.0.0.1 ero-advertising.com
127.0.0.1 erotic-ad.com
127.0.0.1 escati.linkopp.net
127.0.0.1 esellerate.net
127.0.0.1 eshopads2.com
127.0.0.1 espotting.com
127.0.0.1 estat.com
127.0.0.1 estats.com
127.0.0.1 etargetnet.com
127.0.0.1 etology.com
127.0.0.1 etracker.de
127.0.0.1 eu-adcenter.net
127.0.0.1 euniverseads.com
127.0.0.1 eur.a1.yimg.com
127.0.0.1 eurekster.com
127.0.0.1 euro4banner.com
127.0.0.1 euroclick.com
127.0.0.1 europeanbanners.com
127.0.0.1 europebanner.net
127.0.0.1 euros4click.de
127.0.0.1 eusta.de
127.0.0.1 evidencecleanergold.com
127.0.0.1 exchange-it.com
127.0.0.1 exchange.bg
127.0.0.1 exchangead.com
127.0.0.1 exchangeclicksonline.com
127.0.0.1 exit76.com
127.0.0.1 exitexchange.com
127.0.0.1 exitfuel.com
127.0.0.1 exoclick.com
127.0.0.1 expoactive.com
127.0.0.1 exponential.com
127.0.0.1 extads.web.de
127.0.0.1 extractorandburner.com
127.0.0.1 extreme-dm.com
127.0.0.1 eyeblaster-bs.com
127.0.0.1 eyeblaster.com
127.0.0.1 eyewonder.com
127.0.0.1 ezula.com
127.0.0.1 f1organizer.com
127.0.0.1 f5biz.com
127.0.0.1 falkag.de
127.0.0.1 falkag.net
127.0.0.1 fast-adv.it
127.0.0.1 fastclick.com
127.0.0.1 fastclick.com.edgesuite.net
127.0.0.1 fastclick.net
127.0.0.1 fastcounter.bcentral.com
127.0.0.1 fc.webmasterpro.de
127.0.0.1 feedbackresearch.com
127.0.0.1 feedjit.com
127.0.0.1 ffxcam.fairfax.com.au
127.0.0.1 filitrac.com
127.0.0.1 fimserve.com
127.0.0.1 findcommerce.com
127.0.0.1 findyourcasino.com
127.0.0.1 fineclicks.com
127.0.0.1 first.nova.cz
127.0.0.1 firstadsolution.com
127.0.0.1 flabberads.flabber.nl
127.0.0.1 fleshlightcash.com
127.0.0.1 flexbanner.com
127.0.0.1 flowgo.com
127.0.0.1 fmads.osdn.com
127.0.0.1 focalex.com
127.0.0.1 foo.cosmocode.de
127.0.0.1 forex-affiliate.net
127.0.0.1 fpctraffic.com
127.0.0.1 fragmentserv.iac-online.de
127.0.0.1 francetop.com
127.0.0.1 free-banners.com
127.0.0.1 freebanner.com
127.0.0.1 freelogs.com
127.0.0.1 freeonlineusers.com
127.0.0.1 freepay.com
127.0.0.1 freestat.pl
127.0.0.1 freestats.com
127.0.0.1 freestats.tv
127.0.0.1 freewebcounter.com
127.0.0.1 ftjcfx.com
127.0.0.1 fuck-access.com
127.0.0.1 funklicks.com
127.0.0.1 funpageexchange.com
127.0.0.1 fusionquest.com
127.0.0.1 fxstyle.net
127.0.0.1 g-wizzads.net
127.0.0.1 galaxien.com
127.0.0.1 gamblingbanner.com
127.0.0.1 game-advertising-online.com
127.0.0.1 gamehouse.com
127.0.0.1 gamesites100.net
127.0.0.1 gamesites200.com
127.0.0.1 gamesitestop100.com
127.0.0.1 gator.com
127.0.0.1 gbanners.hornymatches.com
127.0.0.1 gcads.osdn.com
127.0.0.1 gemius.pl
127.0.0.1 geo.digitalpoint.com
127.0.0.1 geovisite.com
127.0.0.1 getclicky.com
127.0.0.1 getfreecounter.com
127.0.0.1 gg.daqi.com
127.0.0.1 giftsky.org
127.0.0.1 globalismedia.com
127.0.0.1 globaltrack.com
127.0.0.1 go-clicks.de
127.0.0.1 go-rank.de
127.0.0.1 goingplatinum.com
127.0.0.1 gold.weborama.fr
127.0.0.1 goldstats.com
127.0.0.1 google-analytics.com
127.0.0.1 googleadservices.com
127.0.0.1 googlesyndication.com
127.0.0.1 gorillanation.com
127.0.0.1 gostats.com
127.0.0.1 gp.dejanews.com
127.0.0.1 gpr.hu
127.0.0.1 grafstat.ro
127.0.0.1 grantmedia.com
127.0.0.1 gtop.ro
127.0.0.1 gtop100.com
127.0.0.1 hbmediapro.com
127.0.0.1 head.imho.ru
127.0.0.1 hentaicounter.com
127.0.0.1 herbalaffiliateprogram.com
127.0.0.1 hexusads.fluent.ltd.uk
127.0.0.1 highconvert.com
127.0.0.1 hightrafficads.com
127.0.0.1 histats.com
127.0.0.1 hit-parade.com
127.0.0.1 hit.bg
127.0.0.1 hit.ua
127.0.0.1 hit.webcentre.lycos.co.uk
127.0.0.1 hitbox.com
127.0.0.1 hitcents.com
127.0.0.1 hitexchange.net
127.0.0.1 hitfarm.com
127.0.0.1 hitiz.com
127.0.0.1 hitlist.ru
127.0.0.1 hitlounge.com
127.0.0.1 hitometer.com
127.0.0.1 hits4me.com
127.0.0.1 hits4pay.com
127.0.0.1 hitsdriving.com
127.0.0.1 hitslink.com
127.0.0.1 hittail.com
127.0.0.1 hollandbusinessadvertising.nl
127.0.0.1 horyzonix.sdv.fr
127.0.0.1 hostedads.realitykings.com
127.0.0.1 hotlog.ru
127.0.0.1 hotrank.com.tw
127.0.0.1 hotstatistics.com
127.0.0.1 httpads.com
127.0.0.1 httpool.com
127.0.0.1 humanclick.com
127.0.0.1 hurricanedigitalmedia.com
127.0.0.1 hydramedia.com
127.0.0.1 hyperbanner.net
127.0.0.1 hypertracker.com
127.0.0.1 i-clicks.net
127.0.0.1 i-lookup.com
127.0.0.1 i1img.com
127.0.0.1 i1media.no
127.0.0.1 ia.iinfo.cz
127.0.0.1 iad.anm.co.uk
127.0.0.1 iadnet.com
127.0.0.1 iconadserver.com
127.0.0.1 icptrack.com
127.0.0.1 idcounter.com
127.0.0.1 idot.cz
127.0.0.1 idregie.com
127.0.0.1 ientrymail.com
127.0.0.1 iesnare.com
127.0.0.1 ifptp.com
127.0.0.1 igads.no.publicus.com
127.0.0.1 ilbanner.com
127.0.0.1 ilead.itrack.it
127.0.0.1 iliillliO00OO0.321.cn
127.0.0.1 image.ugo.com
127.0.0.1 imageads.canoe.ca
127.0.0.1 imagecash.net
127.0.0.1 images-pw.secureserver.net
127.0.0.1 images.v3.com
127.0.0.1 imaginemedia.com
127.0.0.1 img.bannersxchange.com
127.0.0.1 img.pheedo.com
127.0.0.1 img.prohardver.hu
127.0.0.1 imonitor.nethost.cz
127.0.0.1 impact-ad.jp
127.0.0.1 impact.as
127.0.0.1 imprese.cz
127.0.0.1 impressionmedia.cz
127.0.0.1 impressionz.co.uk
127.0.0.1 imrworldwide.com
127.0.0.1 inboxdollars.com
127.0.0.1 inc.com
127.0.0.1 incentaclick.com
127.0.0.1 indexlink.ro
127.0.0.1 indexstats.com
127.0.0.1 indieclick.com
127.0.0.1 industrybrains.com
127.0.0.1 inet-traffic.com
127.0.0.1 infinite-ads.com
127.0.0.1 infiniteadds.com
127.0.0.1 infiniteadds.org
127.0.0.1 information.com
127.0.0.1 initgroup.com
127.0.0.1 inringtone.com
127.0.0.1 insightexpress.com
127.0.0.1 insightexpressai.com
127.0.0.1 inspectorclick.com
127.0.0.1 instadia.com
127.0.0.1 instadia.net
127.0.0.1 instantmadness.com
127.0.0.1 intelliads.com
127.0.0.1 intellitxt.com
127.0.0.1 interclick.com
127.0.0.1 internet-optimizer.com
127.0.0.1 internetfuel.com
127.0.0.1 interreklame.de
127.0.0.1 interstat.hu
127.0.0.1 ip.ro
127.0.0.1 ipro.com
127.0.0.1 ireklama.cz
127.0.0.1 itadnetwork.co.uk
127.0.0.1 itbannerexchange.com
127.0.0.1 itfarm.com
127.0.0.1 itop.cz
127.0.0.1 itsptp.com
127.0.0.1 ivwbox.de
127.0.0.1 jaco.box.sk
127.0.0.1 jbeet.cjt1.net
127.0.0.1 jcontent.bns1.net
127.0.0.1 jcount.com
127.0.0.1 jdoqocy.com
127.0.0.1 jedonkey.cjt1.net
127.0.0.1 jinisearch.co.uk
127.0.0.1 jinkads.de
127.0.0.1 jkazaa.cjt1.net
127.0.0.1 jnova.cjt1.net
127.0.0.1 joetec.net
127.0.0.1 jokedollars.com
127.0.0.1 js.users.51.la
127.0.0.1 juggler.inetinteractive.com
127.0.0.1 just-hitz.org
127.0.0.1 justwebads.com
127.0.0.1 k.iinfo.cz
127.0.0.1 kanoodle.com
127.0.0.1 keymedia.hu
127.0.0.1 kliks.nl
127.0.0.1 klipads.dvlabs.com
127.0.0.1 kliptracker.com
127.0.0.1 klix.cz
127.0.0.1 kontera.com
127.0.0.1 kqzyfj.com
127.0.0.1 ktu.sv2.biz
127.0.0.1 laih.com
127.0.0.1 lakequincy.com
127.0.0.1 layer-ad.de
127.0.0.1 layer-ads.de
127.0.0.1 lbn.ru
127.0.0.1 lduhtrp.net
127.0.0.1 leadclick.com
127.0.0.1 leadingedgecash.com
127.0.0.1 lightningcast.net
127.0.0.1 lightspeedcash.com
127.0.0.1 link4ads.com
127.0.0.1 linkbuddies.com
127.0.0.1 linkexchange.com
127.0.0.1 linkexchange.ru
127.0.0.1 linkpositions.com
127.0.0.1 linkprice.com
127.0.0.1 linkrain.com
127.0.0.1 linkreferral.com
127.0.0.1 linkshighway.com
127.0.0.1 linkshighway.net
127.0.0.1 linkswaper.com
127.0.0.1 linksynergy.com
127.0.0.1 linktarget.com
127.0.0.1 liquidad.narrowcastmedia.com
127.0.0.1 lnads.osdn.com
127.0.0.1 log.btopenworld.com
127.0.0.1 logging.to
127.0.0.1 logs.erasmas.com
127.0.0.1 lookery.com
127.0.0.1 lop.com
127.0.0.1 lynxtrack.com
127.0.0.1 m.webtrends.com
127.0.0.1 m4n.nl
127.0.0.1 madisonavenue.com
127.0.0.1 mads.cnet.com
127.0.0.1 mads.gamespot.com
127.0.0.1 mailusnow123.com
127.0.0.1 mainos2.mtv3.fi
127.0.0.1 malware-scan.com
127.0.0.1 malwaredomainlist.com
127.0.0.1 malwaredomains.com
127.0.0.1 marchex.com
127.0.0.1 marketbanker.com
127.0.0.1 marketing.3fn.net
127.0.0.1 marketing.888.com
127.0.0.1 marketing.beatport.net
127.0.0.1 marketing.nyi.net
127.0.0.1 marketing.osijek031.com
127.0.0.1 marketingsolutions.yahoo.com
127.0.0.1 marketscore.com
127.0.0.1 mas.sector.sk
127.0.0.1 masterbanners.com
127.0.0.1 mastermind.com
127.0.0.1 masterstats.com
127.0.0.1 matchcraft.com
127.0.0.1 max.i12.de
127.0.0.1 maximumcash.com
127.0.0.1 maxserving.com
127.0.0.1 mbs.megaroticlive.com
127.0.0.1 mbuyu.nl
127.0.0.1 measuremap.com
127.0.0.1 media-adrunner.mycomputer.com
127.0.0.1 media-servers.net
127.0.0.1 media.ftv-publicite.fr
127.0.0.1 media.funpic.de
127.0.0.1 mediacharger.com
127.0.0.1 mediadvertising.ro
127.0.0.1 mediageneral.com
127.0.0.1 mediamayhemcorp.com
127.0.0.1 mediamgr.ugo.com
127.0.0.1 mediaplazza.com
127.0.0.1 mediaplex.com
127.0.0.1 mediascale.de
127.0.0.1 mediatext.com
127.0.0.1 mediavantage.de
127.0.0.1 megacash.de
127.0.0.1 megago.com
127.0.0.1 megastats.com
127.0.0.1 megawerbung.de
127.0.0.1 memorix.sdv.fr
127.0.0.1 metaad.econet.hu
127.0.0.1 metaffiliation.com
127.0.0.1 metafilliation.com
127.0.0.1 methodcash.com
127.0.0.1 metrics.windowsitpro.com
127.0.0.1 miarroba.com
127.0.0.1 microstatic.pl
127.0.0.1 microticker.com
127.0.0.1 milky.stileproject.com
127.0.0.1 mindseti.com
127.0.0.1 minhembio.research-int.se
127.0.0.1 mirror.qkimg.net
127.0.0.1 misstrends.com
127.0.0.1 miva.com
127.0.0.1 mixtraffic.com
127.0.0.1 mjxads.internet.com
127.0.0.1 mkt.cz
127.0.0.1 mochiads.com
127.0.0.1 modemspeedbooster.com
127.0.0.1 mojobucks.com
127.0.0.1 moneyexpert.com
127.0.0.1 monsterpops.com
127.0.0.1 ms-links.com
127.0.0.1 msads.net
127.0.0.1 mtree.com
127.0.0.1 multi1.rmuk.co.uk
127.0.0.1 musiccounter.ru
127.0.0.1 muwmedia.com
127.0.0.1 mvoe.cn
127.0.0.1 my1ads.com
127.0.0.1 myaffiliateprogram.com
127.0.0.1 mybloglog.com
127.0.0.1 mypagerank.net
127.0.0.1 mypowermall.com
127.0.0.1 myrating.ljseek.com
127.0.0.1 mystat-in.net
127.0.0.1 mystat.pl
127.0.0.1 mytop-in.net
127.0.0.1 mytrix.com
127.0.0.1 n69.com
127.0.0.1 naj.sk
127.0.0.1 namimedia.com
127.0.0.1 nastydollars.com
127.0.0.1 navrcholu.cz
127.0.0.1 navstevnost.cz
127.0.0.1 nbjmp.com
127.0.0.1 ndparking.com
127.0.0.1 nedstat.com
127.0.0.1 nedstat.nl
127.0.0.1 nedstatbasic.net
127.0.0.1 nedstatpro.net
127.0.0.1 neocounter.neoworx-blog-tools.net
127.0.0.1 neocounter.net
127.0.0.1 neoffic.com
127.0.0.1 net-filter.com
127.0.0.1 netads.sohu.com
127.0.0.1 netaffiliation.com
127.0.0.1 netagent.cz
127.0.0.1 netdirect.nl
127.0.0.1 neteu.eu
127.0.0.1 netincap.com
127.0.0.1 netpool.netbookia.net
127.0.0.1 netvertising.be
127.0.0.1 network.business.com
127.0.0.1 network.realmedia.com
127.0.0.1 networkadvertising.org
127.0.0.1 new-ads.eurogamer.net
127.0.0.1 new.50bang.com
127.0.0.1 newbie.com
127.0.0.1 newnet.qsrch.com
127.0.0.1 newnudecash.com
127.0.0.1 newt1.adultadworld.com
127.0.0.1 newtopsites.com
127.0.0.1 ng3.ads.warnerbros.com
127.0.0.1 ngadcenter.net
127.0.0.1 ngs.impress.co.jp
127.0.0.1 nitroclicks.com
127.0.0.1 nscpcdn.com.example.com
127.0.0.1 numax.nu-1.com
127.0.0.1 nuseek.com
127.0.0.1 oa.techcrunch.com
127.0.0.1 oas-central.realmedia.com
127.0.0.1 oas.benchmark.fr
127.0.0.1 oas.blick.ch
127.0.0.1 oas.foxnews.com
127.0.0.1 oas.heise.de
127.0.0.1 oas.repubblica.it
127.0.0.1 oas.roanoke.com
127.0.0.1 oas.salon.com
127.0.0.1 oas.signonsandiego.com
127.0.0.1 oas.toronto.com
127.0.0.1 oas.uniontrib.com
127.0.0.1 oas.villagevoice.com
127.0.0.1 oas.wwwheise.de
127.0.0.1 oascentral.businessweek.com
127.0.0.1 oascentral.chicagobusiness.com
127.0.0.1 oascentral.dilbert.com
127.0.0.1 oascentral.encyclopedia.com
127.0.0.1 oascentral.fortunecity.com
127.0.0.1 oascentral.ggl.com
127.0.0.1 oascentral.redherring.com
127.0.0.1 oascentral.reference.com
127.0.0.1 oascentral.register.com
127.0.0.1 oascentral.theonion.com
127.0.0.1 oascentral.thesmokinggun.com
127.0.0.1 observer.cz
127.0.0.1 oewa.at
127.0.0.1 oewabox.at
127.0.0.1 offerforge.com
127.0.0.1 offermatica.com
127.0.0.1 offeroptimizer.com
127.0.0.1 oinadserve.com
127.0.0.1 oinadserver.com
127.0.0.1 ojdinteractiva.com
127.0.0.1 omniture.com
127.0.0.1 oneandonlynetwork.com
127.0.0.1 onenetworkdirect.com
127.0.0.1 onestat.com
127.0.0.1 onewaylinkexchange.net
127.0.0.1 onlinecash.com
127.0.0.1 onlinerewardcenter.com
127.0.0.1 onresponse.com
127.0.0.1 openad.infobel.com
127.0.0.1 openad.travelnow.com
127.0.0.1 openads.friendfinder.com
127.0.0.1 openclick.com
127.0.0.1 openx.cz
127.0.0.1 operaadfilter.com
127.0.0.1 ota.cartrawler.com
127.0.0.1 overpeer.com
127.0.0.1 overture.com
127.0.0.1 owebmoney.ru
127.0.0.1 oxado.com
127.0.0.1 oxcash.com
127.0.0.1 p5.omaha.com
127.0.0.1 pa.penny-arcade.com
127.0.0.1 pagead2.googlesyndication.com
127.0.0.1 partage-facile.com
127.0.0.1 partner-ads.com
127.0.0.1 partner.gonamic.de
127.0.0.1 partner.pelikan.cz
127.0.0.1 partner.topcities.com
127.0.0.1 partner2profit.com
127.0.0.1 partnerkonto.de
127.0.0.1 partners.priceline.com
127.0.0.1 partners.starnetsystems.net
127.0.0.1 partnerz.gada.be
127.0.0.1 passion-4.com
127.0.0.1 passion-4.net
127.0.0.1 passport.baidu.com
127.0.0.1 pay-ads.com
127.0.0.1 pay-to-promote.com
127.0.0.1 paycounter.com
127.0.0.1 paydayasap.com
127.0.0.1 paypopup.com
127.0.0.1 payserve.com
127.0.0.1 pbnet.ru
127.0.0.1 pcash.imlive.com
127.0.0.1 pcekspert.com
127.0.0.1 pcwizz.com
127.0.0.1 pennyweb.com
127.0.0.1 pepperjamnetwork.com
127.0.0.1 performancing.com
127.0.0.1 pgpartner.com
127.0.0.1 phoenix-adrunner.mycomputer.com
127.0.0.1 phpadsnew.new.natuurpark.nl
127.0.0.1 pillscash.com
127.0.0.1 pimproll.com
127.0.0.1 planetactive.com
127.0.0.1 play4traffic.com
127.0.0.1 plugrush.com
127.0.0.1 pointroll.com
127.0.0.1 pop-under.ru
127.0.0.1 pop6.com
127.0.0.1 pops.freeze.com
127.0.0.1 popub.com
127.0.0.1 popularix.com
127.0.0.1 popunder.ru
127.0.0.1 popup.msn.com
127.0.0.1 popupad.net
127.0.0.1 popupmoney.com
127.0.0.1 popupnation.com
127.0.0.1 popups.infostart.com
127.0.0.1 popups.ru
127.0.0.1 popupsponsor.com
127.0.0.1 popuptraffic.com
127.0.0.1 porngraph.com
127.0.0.1 porntrack.com
127.0.0.1 postmasterbannernet.com
127.0.0.1 potenza.cz
127.0.0.1 prchecker.info
127.0.0.1 precisionclick.com
127.0.0.1 precisioncounter.com
127.0.0.1 predictad.com
127.0.0.1 premium-offers.com
127.0.0.1 premiumcash.de
127.0.0.1 primaryads.com
127.0.0.1 primetime.net
127.0.0.1 prisjakt.research-int.se
127.0.0.1 privatecash.com
127.0.0.1 pro-advertising.com
127.0.0.1 pro-market.net
127.0.0.1 pro.i-doctor.co.kr
127.0.0.1 proaffili.net
127.0.0.1 profero.com
127.0.0.1 professorbanner.com
127.0.0.1 profiler.engagd.com
127.0.0.1 projectwonderful.com
127.0.0.1 promo.badoink.com
127.0.0.1 promo.elitepvpers.com
127.0.0.1 promo1.webcams.nl
127.0.0.1 promobenef.com
127.0.0.1 promos.fling.com
127.0.0.1 promote.opera.com
127.0.0.1 promote.pair.com
127.0.0.1 promotionpalace.com
127.0.0.1 promozia.de
127.0.0.1 pronetadvertising.com
127.0.0.1 proton-tm.com
127.0.0.1 provexia.com
127.0.0.1 prsitecheck.com
127.0.0.1 psstt.com
127.0.0.1 pub-g.ifrance.com
127.0.0.1 pub.chez.com
127.0.0.1 pub.club-internet.fr
127.0.0.1 pub.hardware.fr
127.0.0.1 pub.opt.pf
127.0.0.1 pub.realmedia.fr
127.0.0.1 publi.grupocorreo.es
127.0.0.1

Akuma · Answer

ya eut un petit problème sa a pas tout mis (suite)

127.0.0.1 offeroptimizer.com
127.0.0.1 oinadserve.com
127.0.0.1 oinadserver.com
127.0.0.1 ojdinteractiva.com
127.0.0.1 omniture.com
127.0.0.1 oneandonlynetwork.com
127.0.0.1 onenetworkdirect.com
127.0.0.1 onestat.com
127.0.0.1 onewaylinkexchange.net
127.0.0.1 onlinecash.com
127.0.0.1 onlinerewardcenter.com
127.0.0.1 onresponse.com
127.0.0.1 openad.infobel.com
127.0.0.1 openad.travelnow.com
127.0.0.1 openads.friendfinder.com
127.0.0.1 openclick.com
127.0.0.1 openx.cz
127.0.0.1 operaadfilter.com
127.0.0.1 ota.cartrawler.com
127.0.0.1 overpeer.com
127.0.0.1 overture.com
127.0.0.1 owebmoney.ru
127.0.0.1 oxado.com
127.0.0.1 oxcash.com
127.0.0.1 p5.omaha.com
127.0.0.1 pa.penny-arcade.com
127.0.0.1 pagead2.googlesyndication.com
127.0.0.1 partage-facile.com
127.0.0.1 partner-ads.com
127.0.0.1 partner.gonamic.de
127.0.0.1 partner.pelikan.cz
127.0.0.1 partner.topcities.com
127.0.0.1 partner2profit.com
127.0.0.1 partnerkonto.de
127.0.0.1 partners.priceline.com
127.0.0.1 partners.starnetsystems.net
127.0.0.1 partnerz.gada.be
127.0.0.1 passion-4.com
127.0.0.1 passion-4.net
127.0.0.1 passport.baidu.com
127.0.0.1 pay-ads.com
127.0.0.1 pay-to-promote.com
127.0.0.1 paycounter.com
127.0.0.1 paydayasap.com
127.0.0.1 paypopup.com
127.0.0.1 payserve.com
127.0.0.1 pbnet.ru
127.0.0.1 pcash.imlive.com
127.0.0.1 pcekspert.com
127.0.0.1 pcwizz.com
127.0.0.1 pennyweb.com
127.0.0.1 pepperjamnetwork.com
127.0.0.1 performancing.com
127.0.0.1 pgpartner.com
127.0.0.1 phoenix-adrunner.mycomputer.com
127.0.0.1 phpadsnew.new.natuurpark.nl
127.0.0.1 pillscash.com
127.0.0.1 pimproll.com
127.0.0.1 planetactive.com
127.0.0.1 play4traffic.com
127.0.0.1 plugrush.com
127.0.0.1 pointroll.com
127.0.0.1 pop-under.ru
127.0.0.1 pop6.com
127.0.0.1 pops.freeze.com
127.0.0.1 popub.com
127.0.0.1 popularix.com
127.0.0.1 popunder.ru
127.0.0.1 popup.msn.com
127.0.0.1 popupad.net
127.0.0.1 popupmoney.com
127.0.0.1 popupnation.com
127.0.0.1 popups.infostart.com
127.0.0.1 popups.ru
127.0.0.1 popupsponsor.com
127.0.0.1 popuptraffic.com
127.0.0.1 porngraph.com
127.0.0.1 porntrack.com
127.0.0.1 postmasterbannernet.com
127.0.0.1 potenza.cz
127.0.0.1 prchecker.info
127.0.0.1 precisionclick.com
127.0.0.1 precisioncounter.com
127.0.0.1 predictad.com
127.0.0.1 premium-offers.com
127.0.0.1 premiumcash.de
127.0.0.1 primaryads.com
127.0.0.1 primetime.net
127.0.0.1 prisjakt.research-int.se
127.0.0.1 privatecash.com
127.0.0.1 pro-advertising.com
127.0.0.1 pro-market.net
127.0.0.1 pro.i-doctor.co.kr
127.0.0.1 proaffili.net
127.0.0.1 profero.com
127.0.0.1 professorbanner.com
127.0.0.1 profiler.engagd.com
127.0.0.1 projectwonderful.com
127.0.0.1 promo.badoink.com
127.0.0.1 promo.elitepvpers.com
127.0.0.1 promo1.webcams.nl
127.0.0.1 promobenef.com
127.0.0.1 promos.fling.com
127.0.0.1 promote.opera.com
127.0.0.1 promote.pair.com
127.0.0.1 promotionpalace.com
127.0.0.1 promozia.de
127.0.0.1 pronetadvertising.com
127.0.0.1 proton-tm.com
127.0.0.1 provexia.com
127.0.0.1 prsitecheck.com
127.0.0.1 psstt.com
127.0.0.1 pub-g.ifrance.com
127.0.0.1 pub.chez.com
127.0.0.1 pub.club-internet.fr
127.0.0.1 pub.hardware.fr
127.0.0.1 pub.opt.pf
127.0.0.1 pub.realmedia.fr
127.0.0.1 publi.grupocorreo.es
127.0.0.1 publi2.grupocorreo.es
127.0.0.1 publiads.com
127.0.0.1 publicidad.elmundo.es
127.0.0.1 publicidad.ya.com
127.0.0.1 publisher.to
127.0.0.1 pubs.branchez-vous.com
127.0.0.1 pubs.lemonde.fr
127.0.0.1 q.azcentral.com
127.0.0.1 qckjmp.com
127.0.0.1 qctop.com
127.0.0.1 qksrv.net
127.0.0.1 quantcast.com
127.0.0.1 quantserve.com
127.0.0.1 quarterserver.de
127.0.0.1 questaffiliates.net
127.0.0.1 quigo.com
127.0.0.1 quinst.com
127.0.0.1 rad.msn.com
127.0.0.1 radiate.com
127.0.0.1 rampidads.com
127.0.0.1 rank.ivws.net
127.0.0.1 ranking-charts.de
127.0.0.1 ranking-hits.de
127.0.0.1 ranking-liste.de
127.0.0.1 rankyou.com
127.0.0.1 rapidcounter.com
127.0.0.1 rate.ru
127.0.0.1 rb1.design.ru
127.0.0.1 realads.realmedia.com
127.0.0.1 realcastmedia.com
127.0.0.1 realclix.com
127.0.0.1 realmedia-a800.d4p.net
127.0.0.1 realtechnetwork.com
127.0.0.1 realtechnetwork.net
127.0.0.1 realtracker.com
127.0.0.1 redsherriff.com
127.0.0.1 reduxmedia.com
127.0.0.1 reefaquarium.biz
127.0.0.1 referralware.com
127.0.0.1 regnow.com
127.0.0.1 reklam.prisjakt.nu
127.0.0.1 reklam.rfsl.se
127.0.0.1 reklama.mironet.cz
127.0.0.1 reklama.reflektor.cz
127.0.0.1 reklamcsere.hu
127.0.0.1 reklame.unwired-i.net
127.0.0.1 reklamer.com.ua
127.0.0.1 reliablebanners.com
127.0.0.1 relmaxtop.com
127.0.0.1 remotead.cnet.com
127.0.0.1 reply.mediatris.net
127.0.0.1 republika.onet.pl
127.0.0.1 retaildirect.realmedia.com
127.0.0.1 revenue.net
127.0.0.1 revenuedirect.com
127.0.0.1 revenuegateway.net
127.0.0.1 revenuepilot.com
127.0.0.1 revsci.net
127.0.0.1 revstats.com
127.0.0.1 rewardster.com
127.0.0.1 richmails.com
127.0.0.1 richmedia.yimg.com
127.0.0.1 richwebmaster.com
127.0.0.1 richwebmedia.com
127.0.0.1 ricollect.research-int.se
127.0.0.1 rightmedia.net
127.0.0.1 rightstats.com
127.0.0.1 rl.auto.ru
127.0.0.1 rle.ru
127.0.0.1 rmads.msn.com
127.0.0.1 rmedia.boston.com
127.0.0.1 rmxads.com
127.0.0.1 rnd.yxo.ru
127.0.0.1 roar.com
127.0.0.1 robotreplay.com
127.0.0.1 roia.biz
127.0.0.1 roings.com
127.0.0.1 roiservice.com
127.0.0.1 rok.com.com
127.0.0.1 rose.ixbt.com
127.0.0.1 rotabanner.auto.ru
127.0.0.1 rotabanner.com
127.0.0.1 rotabanner.izvestia.ru
127.0.0.1 rotabanner.rian.ru
127.0.0.1 rotator.juggler.inetinteractive.com
127.0.0.1 rpts.net
127.0.0.1 ru-traffic.com
127.0.0.1 ru4.com
127.0.0.1 sacserv.com
127.0.0.1 safelists.com
127.0.0.1 sageanalyst.net
127.0.0.1 sbx.pagesjaunes.fr
127.0.0.1 scopelight.com
127.0.0.1 searchbar.us
127.0.0.1 searchfeast.com
127.0.0.1 searchmarketing.com
127.0.0.1 searchramp.com
127.0.0.1 secure.webconnect.net
127.0.0.1 secureads.ft.com
127.0.0.1 sedoparking.com
127.0.0.1 sedotracker.com
127.0.0.1 seeq.com
127.0.0.1 sensismediasmart.com.au
127.0.0.1 seo4india.com
127.0.0.1 separtnership.com
127.0.0.1 serv0.com
127.0.0.1 servedby.netshelter.net
127.0.0.1 servethis.com
127.0.0.1 serving-sys.com
127.0.0.1 sexcounter.com
127.0.0.1 sexlist.com
127.0.0.1 sextracker.com
127.0.0.1 sexystat.com
127.0.0.1 sfads.osdn.com
127.0.0.1 shareasale.com
127.0.0.1 sher.index.hu
127.0.0.1 shinystat.com
127.0.0.1 shinystat.it
127.0.0.1 shoppingads.com
127.0.0.1 siccash.com
127.0.0.1 sidebar.angelfire.com
127.0.0.1 sinoa.com
127.0.0.1 sitebrand.geeks.com
127.0.0.1 sitelifter.com
127.0.0.1 sitemerkezi.net
127.0.0.1 sitemeter.com
127.0.0.1 sitestat.com
127.0.0.1 sm.aport.ru
127.0.0.1 sma.punto.net
127.0.0.1 smartadserver.com
127.0.0.1 smartbizsearch.com
127.0.0.1 smartmeds.com
127.0.0.1 smfgroup.cjb.net
127.0.0.1 smile.modchipstore.com
127.0.0.1 snoobi.com
127.0.0.1 socialspark.com
127.0.0.1 softclick.com.br
127.0.0.1 software.global-netcom.de
127.0.0.1 softwaresponsor.com
127.0.0.1 spa.snap.com
127.0.0.1 spacash.com
127.0.0.1 sparkstudios.com
127.0.0.1 specificclick.net
127.0.0.1 specificpop.com
127.0.0.1 spezialreporte.de
127.0.0.1 spinbox.net
127.0.0.1 spinbox.techtracker.com
127.0.0.1 spinbox.versiontracker.com
127.0.0.1 sponsor4you.net
127.0.0.1 sponsorads.de
127.0.0.1 sponsoradulto.com
127.0.0.1 sponsorpro.de
127.0.0.1 sponsors.thoughtsmedia.com
127.0.0.1 spottt.com
127.0.0.1 sprinks-clicks.about.com
127.0.0.1 spylog.com
127.0.0.1 spywarelabs.com
127.0.0.1 spywarenuker.com
127.0.0.1 spywords.com
127.0.0.1 ssads.osdn.com
127.0.0.1 starffa.com
127.0.0.1 start.freeze.com
127.0.0.1 stat.dealtime.com
127.0.0.1 stat.doxod.net
127.0.0.1 stat.pl
127.0.0.1 stat.tudou.com
127.0.0.1 stat.webmedia.pl
127.0.0.1 stat.zenon.net
127.0.0.1 statcounter.com
127.0.0.1 statgep.hu
127.0.0.1 static.fmpub.net
127.0.0.1 static.itrack.it
127.0.0.1 staticads.btopenworld.com
127.0.0.1 statisfy.net
127.0.0.1 statistics.ro
127.0.0.1 statistik-gallup.net
127.0.0.1 statistik.motorpresse.de
127.0.0.1 stats.big-boards.com
127.0.0.1 stats.blogger.com
127.0.0.1 stats.cts-bv.nl
127.0.0.1 stats.darkbluesea.com
127.0.0.1 stats.directnic.com
127.0.0.1 stats.hyperinzerce.cz
127.0.0.1 stats.klsoft.com
127.0.0.1 stats.surfaid.ihost.com
127.0.0.1 stats.unwired-i.net
127.0.0.1 stats.wordpress.com
127.0.0.1 stats4all.com
127.0.0.1 statxpress.com
127.0.0.1 stormpay.com
127.0.0.1 streamit.hardwarezone.com
127.0.0.1 sugoicounter.com
127.0.0.1 superclix.de
127.0.0.1 superpremium.us
127.0.0.1 superstats.com
127.0.0.1 supertop.ru
127.0.0.1 supertop100.com
127.0.0.1 surfmusik-adserver.de
127.0.0.1 synergiinteractive.com
127.0.0.1 sys.war-online.ru
127.0.0.1 tacoda.net
127.0.0.1 tangerinenet.biz
127.0.0.1 tangozebra.com
127.0.0.1 targad.de
127.0.0.1 targetnet.com
127.0.0.1 targetpoint.com
127.0.0.1 targetsaver.com
127.0.0.1 targetshop.com
127.0.0.1 tcads.net
127.0.0.1 teknosurf2.com
127.0.0.1 teknosurf3.com
127.0.0.1 tenbux.somethingawful.com
127.0.0.1 teracent.net
127.0.0.1 test.com
127.0.0.1 text-link-ads.com
127.0.0.1 textad.sexsearch.com
127.0.0.1 textads.biz
127.0.0.1 textads.opera.com
127.0.0.1 textlinks.com
127.0.0.1 tfag.de
127.0.0.1 theanswerto.com
127.0.0.1 thebugs.ws
127.0.0.1 thecounter.com
127.0.0.1 thefreesitez.com
127.0.0.1 therapistla.com
127.0.0.1 therichkids.com
127.0.0.1 thevictorynetwork.com
127.0.0.1 thinkingmedia.net
127.0.0.1 thisbanner.com
127.0.0.1 thruport.com
127.0.0.1 tier1network.com
127.0.0.1 tinybar.com
127.0.0.1 tizers.net
127.0.0.1 tkqlhce.com
127.0.0.1 tmpinvalidpheedo.com
127.0.0.1 tmsads.tribune.com
127.0.0.1 toads.osdn.com
127.0.0.1 toolbar.netscape.com
127.0.0.1 top-site-list.com
127.0.0.1 top.list.ru
127.0.0.1 top.mail.ru
127.0.0.1 top.one.ru
127.0.0.1 top.proext.com
127.0.0.1 top.stileproject.com
127.0.0.1 top100-images.rambler.ru
127.0.0.1 top100.kontraband.com
127.0.0.1 top100.mafia.ru
127.0.0.1 top100arcades.com
127.0.0.1 top100pcgamesites.com
127.0.0.1 top123.ro
127.0.0.1 top20.com
127.0.0.1 top20free.com
127.0.0.1 top66.ro
127.0.0.1 top90.ro
127.0.0.1 topbarh.box.sk
127.0.0.1 topblogarea.se
127.0.0.1 topbloglists.com
127.0.0.1 topbucks.com
127.0.0.1 topforall.com
127.0.0.1 topgamesites.net
127.0.0.1 toplist.cz
127.0.0.1 toplist.pornhost.com
127.0.0.1 toplista.mw.hu
127.0.0.1 toplistcity.com
127.0.0.1 toplisted.in
127.0.0.1 topmango.com
127.0.0.1 topmmorpgsites.com
127.0.0.1 topping.com.ua
127.0.0.1 topprofits.info
127.0.0.1 toprebates.com
127.0.0.1 topsearcher.com
127.0.0.1 topshop-counter.rambler.ru
127.0.0.1 topsir.com
127.0.0.1 topsites.com.br
127.0.0.1 topstats.com
127.0.0.1 topstats.net
127.0.0.1 totemcash.com
127.0.0.1 tour.brazzers.com
127.0.0.1 tps108.org
127.0.0.1 tqlkg.com
127.0.0.1 track.anchorfree.com
127.0.0.1 track.collegehumor.com
127.0.0.1 track.freexxxhost.net
127.0.0.1 track.mybloglog.com
127.0.0.1 track2.mybloglog.com
127.0.0.1 tracker.icerocket.com
127.0.0.1 tracking.frantic.com
127.0.0.1 tracking.yourfilehost.com
127.0.0.1 tracking101.com
127.0.0.1 trackingsoft.com
127.0.0.1 trackmysales.com
127.0.0.1 tradedoubler.com
127.0.0.1 traffic-exchange.com
127.0.0.1 traffic.liveuniversenetwork.com
127.0.0.1 trafficcdn.liveuniversenetwork.com
127.0.0.1 trafficholder.com
127.0.0.1 trafficleader.com
127.0.0.1 trafficmasterz.net
127.0.0.1 trafficmaxx.de
127.0.0.1 trafficmp.com
127.0.0.1 trafficsecrets.com
127.0.0.1 trafficstrategies.com
127.0.0.1 trafficswarm.com
127.0.0.1 trafficsyndicate.com
127.0.0.1 traffictrader.net
127.0.0.1 trafficvenue.net
127.0.0.1 trafic.ro
127.0.0.1 traficdublu.ro
127.0.0.1 trakkerd.net
127.0.0.1 travis.bosscasinos.com
127.0.0.1 trax.channelgator.com
127.0.0.1 trekblue.com
127.0.0.1 trekdata.com
127.0.0.1 tribalfusion.com
127.0.0.1 trix.net
127.0.0.1 trk.advisor.com
127.0.0.1 truehits.net
127.0.0.1 truehits1.gits.net.th
127.0.0.1 truehits2.gits.net.th
127.0.0.1 tsms-ad.tsms.com
127.0.0.1 tyroo.com
127.0.0.1 u9nation.com
127.0.0.1 ubt.ign.com
127.0.0.1 ukaffiliates2.com
127.0.0.1 ukbanners.com
127.0.0.1 ultimate-freestuff.com
127.0.0.1 ultsearch.com
127.0.0.1 untd.com
127.0.0.1 updated.com
127.0.0.1 upspiral.com
127.0.0.1 urlcash.net
127.0.0.1 us.a1.yimg.com
127.0.0.1 usapromotravel.com
127.0.0.1 usmsad.tom.com
127.0.0.1 utarget.co.uk
127.0.0.1 utils.mediageneral.net
127.0.0.1 v1.cnzz.com
127.0.0.1 validclick.com
127.0.0.1 valuead.com
127.0.0.1 valueclick.com
127.0.0.1 valueclick.net
127.0.0.1 valueclickmedia.com
127.0.0.1 valuecommerce.com
127.0.0.1 valuesponsor.com
127.0.0.1 veille-referencement.com
127.0.0.1 vendaregroup.com
127.0.0.1 vericlick.com
127.0.0.1 vg.ad.asap-asp.net
127.0.0.1 vibrantmedia.com
127.0.0.1 video-stats.video.google.com
127.0.0.1 view4cash.de
127.0.0.1 viewpoint.com
127.0.0.1 vipermailer.com
127.0.0.1 viprhealthcare.typepad.com
127.0.0.1 visistat.com
127.0.0.1 visit.webhosting.yahoo.com
127.0.0.1 visitorprofiler.com
127.0.0.1 vrs.cz
127.0.0.1 vs.tucows.com
127.0.0.1 w3exit.com
127.0.0.1 wads.webteh.com
127.0.0.1 warlog.info
127.0.0.1 warlog.ru
127.0.0.1 web-stat.com
127.0.0.1 web2.deja.com
127.0.0.1 webads.co.nz
127.0.0.1 webads.nl
127.0.0.1 webangel.ru
127.0.0.1 webcash.nl
127.0.0.1 webcounter.cz
127.0.0.1 webcounter.goweb.de
127.0.0.1 webmasterplan.com
127.0.0.1 webpower.com
127.0.0.1 webreseau.com
127.0.0.1 websidestory.com
127.0.0.1 websponsors.com
127.0.0.1 webstat.com
127.0.0.1 webstat.dk
127.0.0.1 webstat.net
127.0.0.1 webtrack.it
127.0.0.1 webtraxx.de
127.0.0.1 webtrendslive.com
127.0.0.1 wegcash.com
127.0.0.1 werbung.meteoxpress.com
127.0.0.1 werbung.world4you.com
127.0.0.1 wetrack.it
127.0.0.1 whenu.com
127.0.0.1 whispa.com
127.0.0.1 whoisonline.net
127.0.0.1 wiadomosci.onet.pl
127.0.0.1 widgetbucks.com
127.0.0.1 wikia-ads.wikia.com
127.0.0.1 window.nixnet.cz
127.0.0.1 wintricksbanner.googlepages.com
127.0.0.1 wipub.com
127.0.0.1 witch-counter.de
127.0.0.1 wmirk.ru
127.0.0.1 wondoads.de
127.0.0.1 woopra.com
127.0.0.1 worldbe.com
127.0.0.1 worldofwarcraft100.com
127.0.0.1 wtlive.com
127.0.0.1 wustat.windows.com
127.0.0.1 www-banner.chat.ru
127.0.0.1 www-google-analytics.l.google.com
127.0.0.1 www.adsxchange.lv
127.0.0.1 www.banner-link.com.br
127.0.0.1 www.dnps.com
127.0.0.1 www.kaplanindex.com
127.0.0.1 www.money4exit.de
127.0.0.1 www.photo-ads.co.uk
127.0.0.1 www.sponsor2002.de
127.0.0.1 x-traceur.com
127.0.0.1 x.mycity.com
127.0.0.1 x6.yakiuchi.com
127.0.0.1 xbanner.cz
127.0.0.1 xchange.awmcenter.eu
127.0.0.1 xchange.ro
127.0.0.1 xclicks.net
127.0.0.1 xiti.com
127.0.0.1 xponsor.com
127.0.0.1 xq1.net
127.0.0.1 xrea.com
127.0.0.1 xtremetop100.com
127.0.0.1 xtrocash.org
127.0.0.1 xxxcounter.com
127.0.0.1 xxxtoolbar.com
127.0.0.1 xzoomy.com
127.0.0.1 y.ibsys.com
127.0.0.1 yadro.ru
127.0.0.1 yandex.ru
127.0.0.1 yceml.net
127.0.0.1 yesadvertising.com
127.0.0.1 yieldmanager.com
127.0.0.1 yieldmanager.edgesuite.net
127.0.0.1 youclick2earn.com
127.0.0.1 yournetaccess.com
127.0.0.1 yourtracking.net
127.0.0.1 z.times.lv
127.0.0.1 z5x.net
127.0.0.1 zangocash.com
127.0.0.1 zanox-affiliate.de
127.0.0.1 zanox.com
127.0.0.1 zeads.com
127.0.0.1 zedo.com
127.0.0.1 zencudo.co.uk
127.0.0.1 zenzuu.com
127.0.0.1 zeus.developershed.com
127.0.0.1 zintext.com
127.0.0.1 zmedia.com

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés


»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» RK


»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: SAGEM Wi-Fi 11g USB adapter - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: DhcpNameServer=192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"="lsass.exe"


»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
 
Nettoyage terminé. 
 
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

Akuma · Answer

Malwarebytes' Anti-Malware 1.30
Version de la base de données: 1380
Windows 5.1.2600 Service Pack 3, v.5512

10/11/2008 23:49:51
mbam-log-2008-11-10 (23-49-51).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 50615
Temps écoulé: 35 minute(s), 46 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 2

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\cont_offersfortoday (Adware.Agent) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Program Files\Mozilla Firefox\components
soffersfortoday.dll (Adware.BHO) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\cont_offersfortoday-remove.exe (Adware.Agent) -> Quarantined and deleted successfully.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:10:29, on 11/11/2008
Platform: Windows XP SP3, v.5512 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20861)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Taskix\Taskix32.exe
C:\Program Files\VistaDriveIcon\DrvIcon.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\LClock\LClock.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HJT.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [Taskix] C:\Program Files\Taskix\Taskix32.exe start
O4 - HKLM\..\Run: [DrvIcon] C:\Program Files\VistaDriveIcon\DrvIcon.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [LClock] "C:\Program Files\LClock\LClock.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

Akuma · Answer

je crois que je ne vais plus prêté mon pc a mon frère ^^ c la cata a chaque fois !!

zorinho · Answer

Salut,

on arrive à la fin...Comment se porte ton ordinateur? L'annonce est-elle toujours présente?

1) lance Hijackthis et fixe les lignes suivantes
 R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file) 
 O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k 
 O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background     
 O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE     

2) Pour désinstaller Smitfraudfix (au sinon Antivir ne sera vraiment pas content), télécharge Toolscleaner
http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner

Colle un rapport à la fin de l'analyse

3) Pour optimiser ton ordinateur
au niveau antivirus: tu as antivir, le meilleur antivirus actuel. Il serait bon de planifier une analyse périodique en allant dans l'onglet Administration/Scheduler
au niveau de l'antimalware: tu dois mettre cet antimalware à jour manuellement. Tu peux faire un examen rapide (environ 5') chaque jour, ou un complet toutes les semaines

Très important, tu n'as pas de pare-feu. Je te recommande ON-line Armor, que je n'ai jamais utilisé personnellement, mais dont on dit le plus grand bien. Il est gratuit et les mises à jour sont manuelles. Il est en anglais.
tu imprimeras le tuto avant de l'installer
https://www.malekal.com/tutorial-online-armor-free/

4) Utilise Firefox comme navigateur sur le net, plus sécurisant
http://www.commentcamarche.net/telecharger/telecharger 111 firefox

5) Enfn, CCleaner, un logiciel gratuit que tu dois toujours avoir sur toi
- il nettoie ton ordinateur (des cookies et fichiers temporaires inutiles)
- il nettoie ta base de registres (très important, quand tu désinstalles un logiciel)---
- il te permet de désinstaller des programmes

Suis le tuto ici   https://www.malekal.com/tutoriel-ccleaner/

Comme indiqué dans ce tuto, n'installe pas la "yahoo toolbar" inutile

Pour nettoyer ton ordi, vas dans l'onglet nettoyeur/ analyse puis lancer le nettoyage (confirmer)
Pour nettoyer ta base de registre,vas dans Registre/chercher les erreurs Réparer les erreurs


Tiens-moi au courant...

A plus

Zor

Akuma · Answer

non je n'est plus d'annonce

comment affiche ton cela dans Hijackthis :

R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE 

quand a Smitfraudfix  je l'est effacé manuellement et donc Toolscleaner ne d'etecte que les fichier de Hijackthis 

jutilise deja ccleaner er firefox et je suis en trin d'installer ON-line Armor

zorinho · Answer

Salut,

c'est très simple.

Lance Hijackthis, fais "scan only". Va apparaître ensuite une liste de lignes avec une case vide à côté.
Coche les lignes sus-mentionnées et fais "fix checked"

A plus

Zor

Akuma · Answer

c'est bon j'ai tout fait je crois mais je vais enlever online amor car au démarrage mon pc fait un écrans bleu et afiche les icône que plusieurs minutes plus tard

zorinho · Answer

okay, mais renseigne-toi sur un pare-feu efficace...autre que celui de XP sp2

http://www.malekal.com/menu_tutorials_logiciels.php

Ciao

Zor

You have a security problem et autres

27 réponses

Discussions similaires