Besoin d'une lecture de log HiJackThis ...

Résolu
Bonjour,
Voici une dizaine de jours mon ordinateur est devenu très lent, au point que la petite mélodie du démarrage est carrément macabre. J'ai donc fait des recherches sur internet, téléchargé pas mal de logiciel et opéré à tout un tas de défragmentations, d'analyses et de nettoyages.
entre autre:
-Bitdefender (online et pas online)
-A-squared
-Ad-aware
-Spybot
-Ccleaner
-AVG-anti spyware

Or tout cela n'a pas rétabli mon problème. L'ordinateur est toujours très lent. Toutefois je persiste à croire que ça puisse être un virus car en me baladant sur des forums j'ai vu des cas similaires au mien causés par des virus.

Donc j'ai téléchargé Hijackthis et fait un scan. Comme ça a l'air déconseillé de s'en servir sans expériences et que des personnes informés (et sympatique) ont l'air de pouvoir jeter un oeil sur les log, j'envois le mien.

Merci énormément d'avance,
Cyprien

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:08:19, on 14/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Acer\Empowering Technology\admServ.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\PROGRA~1\NORTON~1\NSR\Agent\VProSvc.exe
C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\Acer\Empowering Technology\admtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\DOCUME~1\Cyprien\LOCALS~1\Temp\RtkBtMnt.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Documents and Settings\Cyprien\Bureau\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [MSPY2002] "C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" /SYNC
O4 - HKLM\..\Run: [eDataSecurity Loader] "C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe"
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] "C:\Acer\Empowering Technology\eRecovery\Monitor.exe"
O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [SpybotSD TeaTimer] "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks Premier\Norton Cleanup\WCQuick.lnk
O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks Premier\Norton Cleanup\WCQuick.lnk
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Norton Save and Restore - Symantec Corporation - C:\PROGRA~1\NORTON~1\NSR\Agent\VProSvc.exe
O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe

--
End of file - 13103 bytes
Configuration: Windows XP sp3
Intel Core Duo T2300 1.66Ghz
Ram 2049 Mo
Firefox 3.0.4

26 réponses

  1. Hi,

    Le tea timer de spybot et activer==>>Pas bon

    Ensuite hijackthis et mal installer.

    Alut.

    0
    1. Merci,

      Je pense que là Teatimer est désactivé.
      Et Pour Hijackthis, normalement maintenant c'est bon, je l'ai téléchargé le .exe dans un dossier que j'ai créé sur mon bureau qui s'appelle hijackthis.

      Voici mon log:

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 00:01:50, on 15/11/2008
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16735)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
      C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\a-squared Free\a2service.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Acer\Empowering Technology\admServ.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\PROGRA~1\NORTON~1\NSR\Agent\VProSvc.exe
      C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
      C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
      C:\WINDOWS\system32\fxssvc.exe
      C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
      C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
      C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
      C:\Acer\Empowering Technology\eRecovery\Monitor.exe
      C:\Acer\Empowering Technology\admtray.exe
      C:\WINDOWS\RTHDCPL.EXE
      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
      C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\system32\wbem\unsecapp.exe
      C:\DOCUME~1\Cyprien\LOCALS~1\Temp\RtkBtMnt.exe
      C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
      C:\Program Files\Skype\Phone\Skype.exe
      C:\Program Files\Skype\Plugin Manager\skypePM.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Documents and Settings\Cyprien\Bureau\HiJackThis\HiJackThis.exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
      O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
      O4 - HKLM\..\Run: [LaunchApp] Alaunch
      O4 - HKLM\..\Run: [MSPY2002] "C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" /SYNC
      O4 - HKLM\..\Run: [eDataSecurity Loader] "C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe"
      O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
      O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
      O4 - HKLM\..\Run: [eRecoveryService] "C:\Acer\Empowering Technology\eRecovery\Monitor.exe"
      O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
      O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
      O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
      O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
      O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
      O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
      O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
      O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
      O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
      O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
      O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
      O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
      O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks Premier\Norton Cleanup\WCQuick.lnk
      O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks Premier\Norton Cleanup\WCQuick.lnk
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
      O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
      O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
      O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
      O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
      O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
      O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
      O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
      O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
      O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
      O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
      O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
      O23 - Service: Norton Save and Restore - Symantec Corporation - C:\PROGRA~1\NORTON~1\NSR\Agent\VProSvc.exe
      O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
      O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe (file missing)
      O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
      O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
      O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
      O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
      O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
      O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
      0
      1. Hi,

        C:\Documents and Settings\Cyprien\Bureau\HiJackThis\HiJackThis.exe => pas bon encore

        Ensuite le tea timer et encore actif.
        0
        1. Désolé pour les erreurs, là ça doit aller.
          J'ai désinstaller spybot et renommé hijackthis.
          Merci,

          mon log:

          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 00:40:25, on 15/11/2008
          Platform: Windows XP SP3 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16735)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
          C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
          C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\a-squared Free\a2service.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          C:\Acer\Empowering Technology\admServ.exe
          C:\Program Files\Bonjour\mDNSResponder.exe
          C:\PROGRA~1\NORTON~1\NSR\Agent\VProSvc.exe
          C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
          C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
          C:\WINDOWS\system32\fxssvc.exe
          C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
          C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
          C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
          C:\Acer\Empowering Technology\eRecovery\Monitor.exe
          C:\Acer\Empowering Technology\admtray.exe
          C:\WINDOWS\RTHDCPL.EXE
          C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
          C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\WINDOWS\system32\wbem\unsecapp.exe
          C:\DOCUME~1\Cyprien\LOCALS~1\Temp\RtkBtMnt.exe
          C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
          C:\Program Files\Trend Micro\HijackThis\HJT.exe

          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
          O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
          O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
          O4 - HKLM\..\Run: [LaunchApp] Alaunch
          O4 - HKLM\..\Run: [MSPY2002] "C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" /SYNC
          O4 - HKLM\..\Run: [eDataSecurity Loader] "C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe"
          O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
          O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
          O4 - HKLM\..\Run: [eRecoveryService] "C:\Acer\Empowering Technology\eRecovery\Monitor.exe"
          O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
          O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
          O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
          O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
          O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
          O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
          O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
          O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
          O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
          O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
          O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
          O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
          O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
          O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
          O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
          O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
          O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
          O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks Premier\Norton Cleanup\WCQuick.lnk
          O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks Premier\Norton Cleanup\WCQuick.lnk
          O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab
          O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
          O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
          O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
          O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
          O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
          O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
          O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
          O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
          O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
          O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
          O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
          O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
          O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
          O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
          O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
          O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
          O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
          O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
          O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
          O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
          O23 - Service: Norton Save and Restore - Symantec Corporation - C:\PROGRA~1\NORTON~1\NSR\Agent\VProSvc.exe
          O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
          O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
          O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe (file missing)
          O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
          O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
          O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
          O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
          O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
          O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
          0
          1. Hi,

            passe cela:

            -Télécharge et installe MalwareByte's Anti-Malware
            Malwarebyte

            - Mets le à jour

            ---
            - Double clique sur le raccourci de MalwareByte's Anti-Malware qui est sur le bureau.
            - Sélectionne Exécuter un examen complet si ce n'est pas déjà fait
            - clique sur Rechercher

            - Une fois le scan terminé, une fenêtre s'ouvre, clique sur sur Ok

            - Si MalwareByte's n'a rien détecté, clique sur Ok Un rapport va apparaître ferme-le.

            - Si MalwareByte's a détecté des infections, clique sur Afficher les résultats ensuite sur Supprimer la sélection

            - Enregistre le rapport sur ton Bureau comme cela il sera plus facile à retrouver, poste ensuite ce rapport.

            Note : Si MalwareByte's a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok

            Dit moi tes miseres?
            0
            1. Bonjour,

              11 objets infectés, héhéhé.
              Je redémarre l'ordinateur.
              Voici le rapport de Malwarebytes:

              Malwarebytes' Anti-Malware 1.30
              Version de la base de données: 1399
              Windows 5.1.2600 Service Pack 3

              15/11/2008 10:19:55
              mbam-log-2008-11-15 (10-19-55).txt

              Type de recherche: Examen complet (C:\|D:\|)
              Eléments examinés: 204648
              Temps écoulé: 6 hour(s), 1 minute(s), 30 second(s)

              Processus mémoire infecté(s): 0
              Module(s) mémoire infecté(s): 0
              Clé(s) du Registre infectée(s): 6
              Valeur(s) du Registre infectée(s): 1
              Elément(s) de données du Registre infecté(s): 1
              Dossier(s) infecté(s): 1
              Fichier(s) infecté(s): 2

              Processus mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Module(s) mémoire infecté(s):
              (Aucun élément nuisible détecté)

              Clé(s) du Registre infectée(s):
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{49e0e0f0-5c30-11d4-945d-000000000000} (Spyware-Logger.Unknown) -> Quarantined and deleted successfully.
              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b64f4a7c-97c9-11da-8bde-f66bad1e3f3a} (Rogue.WinAntivirus) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\TypeLib\{497dddb6-6eee-4561-9621-b77dc82c1f84} (Rogue.AscentivePerformance) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\Interface\{4e980492-027b-47f1-a7ab-ab086dacbb9e} (Rogue.AscentivePerformance) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\Interface\{5ead8321-fcbb-4c3f-888c-ac373d366c3f} (Rogue.AscentivePerformance) -> Quarantined and deleted successfully.
              HKEY_CLASSES_ROOT\CLSID\{31f3cf6e-a71a-4daa-852b-39ac230940b4} (Rogue.AscentivePerformance) -> Quarantined and deleted successfully.

              Valeur(s) du Registre infectée(s):
              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\system32\SysRestore.dll (Rogue.AscentivePerformance) -> Quarantined and deleted successfully.

              Elément(s) de données du Registre infecté(s):
              HKEY_CLASSES_ROOT\regfile\shell\open\command\ (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> Quarantined and deleted successfully.

              Dossier(s) infecté(s):
              C:\Program Files\Ascentive (Rogue.Multiple) -> Quarantined and deleted successfully.

              Fichier(s) infecté(s):
              C:\WINDOWS\system32\SysRestore.dll (Rogue.AscentivePerformance) -> Quarantined and deleted successfully.
              C:\System Volume Information\_restore{DA93E6EB-CF98-47EB-B731-377A4E5ABEC4}\RP966\A0225624.dll (Rogue.AscentivePerformance) -> Quarantined and deleted successfully.
              0
              1. Hi,

                > Fais un scan en ligne avec Kaspersky : Kaspersky

                N.B. : Le scan ne marche que sous Internet Explorer.

                - Commence par connecter tout ton matériel de stockage à ton PC (clés USB, DD amovible...). Allume les si necessaire.

                - Sous Démonstration en ligne, on t'explique la marche à suivre, et pour lancer le scan il faut sélectionner < Exécuter l'analyse en ligne >.

                - On va te demander de télécharger un contrôle active x, accepte .

                - Dans le menu < Choisissez la cible de l'analyse >, sélectionne < Poste de travail >. Le scan va commencer.

                - Poste le rapport qui sera généré stp. (clique sur <enregistrer le rapport> puis sauvegarde-le sur ton bureau en choisissant "fichier texte (*.txt)" pour l'extension).
                S'il y a un problème, assure toi que les contrôles active x sont bien configurés dans les options internet comme décrit sur ce lien : clic ici

                Rappel : le scan est à faire sous Internet Explorer
                Tuto ici si problème

                NOTE : Si tu reçois le message "La licence de Kaspersky On-line Scanner est périmée", va dans Ajout/Suppression de programmes puis désinstalle On-Line Scanner, reconnecte toi sur le site de Kaspersky pour retenter le scan en ligne.
                Pour le rapport Kaspersky il faut que tu choisisses "Afficher le rapport" puis que tu l'enregistres sur ton bureau sous forme de fichier texte (type de fichier "tous les fichiers").
                0
                1. bonjour,

                  Ce fut long, mais voici enfin le rapport du scan de Kapresky.
                  Merci,

                  -------------------------------------------------------------------------------
                  KASPERSKY ON-LINE SCANNER REPORT
                  Sunday, November 16, 2008 3:13:00 AM
                  Système d'exploitation : Microsoft Windows XP Home Edition, Service Pack 3 (Build 2600)
                  Kaspersky On-line Scanner version : 5.0.84.2
                  Dernière mise à jour de la base antivirus Kaspersky : 14/11/2008
                  Enregistrements dans la base antivirus Kaspersky : 1242653
                  -------------------------------------------------------------------------------

                  Paramètres d'analyse:
                  Analyser avec la base antivirus suivante: standard
                  Analyser les archives: vrai
                  Analyser les bases de messagerie: vrai

                  Cible de l'analyse - Poste de travail:
                  C:\
                  D:\
                  E:\
                  F:\
                  G:\
                  H:\
                  I:\
                  W:\

                  Statistiques de l'analyse:
                  Total d'objets analysés: 201520
                  Nombre de virus trouvés: 0
                  Nombre d'objets infectés: 0 / 0
                  Nombre d'objets suspects: 0
                  Durée de l'analyse: 07:09:48

                  Nom de l'objet infecté / Nom du virus / Dernière action
                  C:\Recycled\NPROTECT\NPROTECT.LOG L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\config\Internet.evt L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\config\DEFAULT L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\config\SOFTWARE L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\config\SYSTEM L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\config\ACEEvent.evt L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\drivers\sptd.sys L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\CatRoot2\tmp.edb L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\CatRoot2\edb.log L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\bdss.log L'objet est verrouillé ignoré
                  C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré
                  C:\WINDOWS\Temp\tmp00005543\tmp00000000 L'objet est verrouillé ignoré
                  C:\WINDOWS\Temp\Perflib_Perfdata_684.dat L'objet est verrouillé ignoré
                  C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré
                  C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré
                  C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré
                  C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré
                  C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré
                  C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré
                  C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré
                  C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\2008-11-15_Log.ALUSchedulerSvc.LiveUpdate L'objet est verrouillé ignoré
                  C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat L'objet est verrouillé ignoré
                  C:\Documents and Settings\All Users\Application Data\Symantec\SubEng\submissions.idx L'objet est verrouillé ignoré
                  C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtETmp\C5CB0586.TMP L'objet est verrouillé ignoré
                  C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtETmp\AC2DBC53.TMP L'objet est verrouillé ignoré
                  C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
                  C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
                  C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré
                  C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré
                  C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
                  C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
                  C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
                  C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
                  C:\Documents and Settings\LocalService\Cookies\index.dat L'objet est verrouillé ignoré
                  C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré
                  C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré
                  C:\Documents and Settings\Cyprien\ntuser.dat.LOG L'objet est verrouillé ignoré
                  C:\Documents and Settings\Cyprien\Local Settings\Temp\Perflib_Perfdata_23c.dat L'objet est verrouillé ignoré
                  C:\Documents and Settings\Cyprien\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
                  C:\Documents and Settings\Cyprien\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
                  C:\Documents and Settings\Cyprien\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat L'objet est verrouillé ignoré
                  C:\Documents and Settings\Cyprien\Local Settings\Application Data\ApplicationHistory\ePower_DMC.exe.3ca0acde.ini.inuse L'objet est verrouillé ignoré
                  C:\Documents and Settings\Cyprien\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
                  C:\Documents and Settings\Cyprien\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
                  C:\Documents and Settings\Cyprien\Cookies\index.dat L'objet est verrouillé ignoré
                  C:\Documents and Settings\Cyprien\ntuser.dat L'objet est verrouillé ignoré
                  C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EPERSIST.DAT L'objet est verrouillé ignoré
                  C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcrst.dll L'objet est verrouillé ignoré
                  C:\System Volume Information\_restore{DA93E6EB-CF98-47EB-B731-377A4E5ABEC4}\RP966\change.log L'objet est verrouillé ignoré
                  D:\System Volume Information\_restore{DA93E6EB-CF98-47EB-B731-377A4E5ABEC4}\RP966\change.log L'objet est verrouillé ignoré
                  D:\Recycled\NPROTECT\NPROTECT.LOG L'objet est verrouillé ignoré
                  G:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré

                  Analyse terminée.
                  0
                  1. Hi,

                    Refait un malwarebyte en mode sans échec.

                    Alut.
                    0
                    1. Bonsoir,

                      J'ai fait un scan avec Malwarebyte en mode sans échec, il a trouvé deux fichiers infectés.
                      J'ai cliqué sur supprimer, et il a redémarrer l'ordinateur. Voici le rapport:

                      Malwarebytes' Anti-Malware 1.30
                      Version de la base de données: 1399
                      Windows 5.1.2600 Service Pack 3

                      17/11/2008 00:18:32
                      mbam-log-2008-11-17 (00-18-23).txt

                      Type de recherche: Examen complet (C:\|D:\|G:\|H:\|I:\|)
                      Eléments examinés: 244787
                      Temps écoulé: 5 hour(s), 14 minute(s), 8 second(s)

                      Processus mémoire infecté(s): 0
                      Module(s) mémoire infecté(s): 0
                      Clé(s) du Registre infectée(s): 0
                      Valeur(s) du Registre infectée(s): 0
                      Elément(s) de données du Registre infecté(s): 0
                      Dossier(s) infecté(s): 0
                      Fichier(s) infecté(s): 2

                      Processus mémoire infecté(s):
                      (Aucun élément nuisible détecté)

                      Module(s) mémoire infecté(s):
                      (Aucun élément nuisible détecté)

                      Clé(s) du Registre infectée(s):
                      (Aucun élément nuisible détecté)

                      Valeur(s) du Registre infectée(s):
                      (Aucun élément nuisible détecté)

                      Elément(s) de données du Registre infecté(s):
                      (Aucun élément nuisible détecté)

                      Dossier(s) infecté(s):
                      (Aucun élément nuisible détecté)

                      Fichier(s) infecté(s):
                      C:\System Volume Information\_restore{DA93E6EB-CF98-47EB-B731-377A4E5ABEC4}\RP966\A0226024.sys (Trojan.Downloader) -> No action taken.
                      C:\System Volume Information\_restore{DA93E6EB-CF98-47EB-B731-377A4E5ABEC4}\RP967\A0226207.dll (Rogue.AscentivePerformance) -> No action taken.
                      0
                      1. Hi,

                        C:\System Volume Information\_restore{DA93E6EB-CF98-47EB-B731-377A4E5ABEC4}\R­P966\A0226024.sys (Trojan.Downloader) -> No action taken.
                        C:\System Volume Information\_restore{DA93E6EB-CF98-47EB-B731-377A4E5ABEC4}\RP967\A0226207.dll (Rogue.AscentivePerformance) -> No action taken.


                        Relance Malwarebyte et ensuite vide la quarantaine.

                        Ensuite passe ce fix:

                        Installe [- Télécharge SmitfraudFix (de de S!Ri, balltrap34 et moe31) :
                        http://siri.urz.free.fr/Fix/SmitfraudFix.exe smitfraudfix]

                        Option:1 => Recherche:

                        * Double cliquer sur SmitfraudFix.exe

                        * Sélectionner 1 et pressez =>Entrée dans le menu pour créer

                        un rapport des fichiers responsables de l'infection. Le rapport se trouve à la racine du disque

                        système

                        C:\rapport.txt

                        ==>et colle le rapport génèrer sur le forum.

                        *=>Ne pas faire l'option 2 sans un avis d'une personne compétente*<=

                        Alut.
                        0
                        1. Voici le rapport de SmitFraudFix:

                          SmitFraudFix v2.375

                          Rapport fait à 0:52:12,46, 17/11/2008
                          Executé à partir de C:\Documents and Settings\Cyprien\Bureau\SmitfraudFix
                          OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                          Le type du système de fichiers est FAT32
                          Fix executé en mode normal

                          »»»»»»»»»»»»»»»»»»»»»»»» Process

                          C:\WINDOWS\System32\smss.exe
                          C:\WINDOWS\system32\winlogon.exe
                          C:\WINDOWS\system32\services.exe
                          C:\WINDOWS\system32\lsass.exe
                          C:\WINDOWS\system32\Ati2evxx.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
                          C:\WINDOWS\system32\Ati2evxx.exe
                          C:\WINDOWS\Explorer.EXE
                          C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
                          C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                          C:\WINDOWS\system32\spoolsv.exe
                          C:\Program Files\a-squared Free\a2service.exe
                          C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                          C:\Acer\Empowering Technology\admServ.exe
                          C:\Program Files\Bonjour\mDNSResponder.exe
                          C:\PROGRA~1\NORTON~1\NSR\Agent\VProSvc.exe
                          C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
                          C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
                          C:\WINDOWS\system32\svchost.exe
                          C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
                          C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
                          C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
                          C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
                          C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
                          C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
                          C:\Acer\Empowering Technology\eRecovery\Monitor.exe
                          C:\Acer\Empowering Technology\admtray.exe
                          C:\WINDOWS\system32\wbem\unsecapp.exe
                          C:\WINDOWS\RTHDCPL.EXE
                          C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
                          C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                          C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
                          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                          C:\DOCUME~1\Cyprien\LOCALS~1\Temp\RtkBtMnt.exe
                          C:\WINDOWS\system32\ctfmon.exe
                          C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
                          C:\Program Files\Mozilla Firefox\firefox.exe
                          C:\Program Files\Softwin\BitDefender10\vsserv.exe
                          C:\WINDOWS\system32\cmd.exe

                          »»»»»»»»»»»»»»»»»»»»»»»» hosts

                          Fichier hosts corrompu !

                          127.0.0.1 www.legal-at-spybot.info
                          127.0.0.1 legal-at-spybot.info

                          »»»»»»»»»»»»»»»»»»»»»»»» C:\

                          »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

                          »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

                          »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

                          »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

                          »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

                          »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Cyprien

                          »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Cyprien\LOCALS~1\Temp

                          »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Cyprien\Application Data

                          »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

                          »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\CYPRIEN\FAVORIS

                          »»»»»»»»»»»»»»»»»»»»»»»» Bureau

                          »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                          »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

                          »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

                          [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
                          "Source"="About:Home"
                          "SubscribedURL"="About:Home"
                          "FriendlyName"="Ma page d'accueil"

                          »»»»»»»»»»»»»»»»»»»»»»»» o4Patch
                          !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                          o4Patch
                          Credits: Malware Analysis & Diagnostic
                          Code: S!Ri

                          »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
                          !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
                          0
                          1. Hi,

                            Il est pas complet.

                            Alut.
                            0
                            1. SmitFraudFix v2.375

                              Rapport fait à 0:52:12,46, 17/11/2008
                              Executé à partir de C:\Documents and Settings\Cyprien\Bureau\SmitfraudFix
                              OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                              Le type du système de fichiers est FAT32
                              Fix executé en mode normal

                              »»»»»»»»»»»»»»»»»»»»»»»» Process

                              C:\WINDOWS\System32\smss.exe
                              C:\WINDOWS\system32\winlogon.exe
                              C:\WINDOWS\system32\services.exe
                              C:\WINDOWS\system32\lsass.exe
                              C:\WINDOWS\system32\Ati2evxx.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
                              C:\WINDOWS\system32\Ati2evxx.exe
                              C:\WINDOWS\Explorer.EXE
                              C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
                              C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                              C:\WINDOWS\system32\spoolsv.exe
                              C:\Program Files\a-squared Free\a2service.exe
                              C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                              C:\Acer\Empowering Technology\admServ.exe
                              C:\Program Files\Bonjour\mDNSResponder.exe
                              C:\PROGRA~1\NORTON~1\NSR\Agent\VProSvc.exe
                              C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
                              C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
                              C:\WINDOWS\system32\svchost.exe
                              C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
                              C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
                              C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
                              C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
                              C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
                              C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
                              C:\Acer\Empowering Technology\eRecovery\Monitor.exe
                              C:\Acer\Empowering Technology\admtray.exe
                              C:\WINDOWS\system32\wbem\unsecapp.exe
                              C:\WINDOWS\RTHDCPL.EXE
                              C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
                              C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                              C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
                              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                              C:\DOCUME~1\Cyprien\LOCALS~1\Temp\RtkBtMnt.exe
                              C:\WINDOWS\system32\ctfmon.exe
                              C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
                              C:\Program Files\Mozilla Firefox\firefox.exe
                              C:\Program Files\Softwin\BitDefender10\vsserv.exe
                              C:\WINDOWS\system32\cmd.exe

                              »»»»»»»»»»»»»»»»»»»»»»»» hosts

                              Fichier hosts corrompu !

                              127.0.0.1 www.legal-at-spybot.info
                              127.0.0.1 legal-at-spybot.info

                              »»»»»»»»»»»»»»»»»»»»»»»» C:\

                              »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

                              »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

                              »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

                              »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

                              »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

                              »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Cyprien

                              »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Cyprien\LOCALS~1\Temp

                              »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Cyprien\Application Data

                              »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

                              »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\CYPRIEN\FAVORIS

                              »»»»»»»»»»»»»»»»»»»»»»»» Bureau

                              »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                              »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

                              »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

                              [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
                              "Source"="About:Home"
                              "SubscribedURL"="About:Home"
                              "FriendlyName"="Ma page d'accueil"

                              »»»»»»»»»»»»»»»»»»»»»»»» o4Patch
                              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                              o4Patch
                              Credits: Malware Analysis & Diagnostic
                              Code: S!Ri

                              »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
                              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                              IEDFix
                              Credits: Malware Analysis & Diagnostic
                              Code: S!Ri

                              »»»»»»»»»»»»»»»»»»»»»»»» VACFix
                              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                              VACFix
                              Credits: Malware Analysis & Diagnostic
                              Code: S!Ri

                              »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
                              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                              404Fix
                              Credits: Malware Analysis & Diagnostic
                              Code: S!Ri

                              »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
                              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                              SrchSTS.exe by S!Ri
                              Search SharedTaskScheduler's .dll

                              »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
                              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                              "AppInit_DLLs"=""

                              »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
                              !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                              "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
                              "System"=""

                              »»»»»»»»»»»»»»»»»»»»»»»» RK

                              »»»»»»»»»»»»»»»»»»»»»»»» DNS

                              Description: Broadcom 440x 10/100 Integrated Controller - Miniport d'ordonnancement de paquets
                              DNS Server Search Order: 212.27.40.240
                              DNS Server Search Order: 212.27.40.241

                              HKLM\SYSTEM\CCS\Services\Tcpip\..\{E0846FE9-020E-4D82-AEF8-9C1D0975AC7F}: DhcpNameServer=212.27.40.240 212.27.40.241
                              HKLM\SYSTEM\CS1\Services\Tcpip\..\{E0846FE9-020E-4D82-AEF8-9C1D0975AC7F}: NameServer=212.27.53.252,212.27.54.252
                              HKLM\SYSTEM\CS2\Services\Tcpip\..\{7669F2C7-CA15-4D06-AC47-1918C3E911A3}: DhcpNameServer=212.27.40.240 212.27.40.241
                              HKLM\SYSTEM\CS2\Services\Tcpip\..\{E0846FE9-020E-4D82-AEF8-9C1D0975AC7F}: DhcpNameServer=212.27.40.240 212.27.40.241
                              HKLM\SYSTEM\CS3\Services\Tcpip\..\{E0846FE9-020E-4D82-AEF8-9C1D0975AC7F}: DhcpNameServer=212.27.40.240 212.27.40.241
                              HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
                              HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241
                              HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.27.40.240 212.27.40.241

                              »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

                              »»»»»»»»»»»»»»»»»»»»»»»» Fin
                              0
                              1. Hi,

                                Nettoyage:

                                * Redemarrer l'ordinateur en mode sans échec:

                                * Double cliquer sur smitfraudix:

                                * Sélectionner 2 et pressez Entrée dans le menu pour supprimer les fichiers responsables de l'infection.

                                * A la question: Voulez-vous nettoyer le registre ? répondre O (oui) et pressez Entrée afin de débloquer le fond d'écran et supprimer les clés de registre de l'infection:.

                                * Le fix déterminera si le fichier wininet.dll est infecté. A la question: Corriger le fichier infecté ? répondre O (oui) et pressez Entrée pour remplacer le fichier corrompu:.

                                * Un redemarrage sera peut être necessaire pour terminer la procedure de nettoyage. Le rapport se trouve à la racine du disque système C:\rapport.txt:

                                Option::

                                * Pour effacer la liste des sites de confiance et sensibles, sélectionner 3 et pressez Entrée dans le menu.

                                * A la question: Réinitialiser la liste des sites de confiance et sensibles ? répondre O (oui) et pressez Entrée afin de restaurer les zones de confiances et sensibles:.

                                :FAUX POSITIF::

                                process.exe est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

                                Alut.
                                0
                                1. Le rapport SmitFraudFix:

                                  SmitFraudFix v2.375

                                  Rapport fait à 1:17:56,00, 17/11/2008
                                  Executé à partir de C:\Documents and Settings\Cyprien\Bureau\SmitfraudFix
                                  OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                                  Le type du système de fichiers est FAT32
                                  Fix executé en mode sans echec

                                  »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
                                  !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                  SrchSTS.exe by S!Ri
                                  Search SharedTaskScheduler's .dll

                                  »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

                                  »»»»»»»»»»»»»»»»»»»»»»»» hosts

                                  127.0.0.1 localhost
                                  127.0.0.1 www.007guard.com
                                  127.0.0.1 007guard.com
                                  127.0.0.1 008i.com
                                  127.0.0.1 www.008k.com
                                  127.0.0.1 008k.com
                                  127.0.0.1 www.00hq.com
                                  127.0.0.1 00hq.com
                                  127.0.0.1 010402.com
                                  127.0.0.1 www.032439.com
                                  127.0.0.1 032439.com
                                  127.0.0.1 www.0scan.com
                                  127.0.0.1 0scan.com
                                  127.0.0.1 1000gratisproben.com
                                  127.0.0.1 www.1000gratisproben.com
                                  127.0.0.1 www.1001namen.com
                                  127.0.0.1 1001namen.com
                                  127.0.0.1 100888290cs.com
                                  127.0.0.1 www.100888290cs.com
                                  127.0.0.1 100sexlinks.com
                                  127.0.0.1 www.100sexlinks.com
                                  127.0.0.1 10sek.com
                                  127.0.0.1 www.10sek.com
                                  127.0.0.1 www.123haustiereundmehr.com
                                  127.0.0.1 123haustiereundmehr.com
                                  127.0.0.1 123simsen.com
                                  127.0.0.1 www.123simsen.com
                                  127.0.0.1 www.123topsearch.com
                                  127.0.0.1 123topsearch.com
                                  127.0.0.1 125sms.co.uk
                                  127.0.0.1 www.125sms.co.uk
                                  127.0.0.1 125sms.com
                                  127.0.0.1 www.125sms.com
                                  127.0.0.1 132.com
                                  127.0.0.1 www.132.com
                                  127.0.0.1 136136.net
                                  127.0.0.1 www.136136.net
                                  127.0.0.1 150freesms.de
                                  127.0.0.1 www.150freesms.de
                                  127.0.0.1 163ns.com
                                  127.0.0.1 www.163ns.com
                                  127.0.0.1 171203.com
                                  127.0.0.1 17-plus.com
                                  127.0.0.1 www.1800searchonline.com
                                  127.0.0.1 1800searchonline.com
                                  127.0.0.1 180searchassistant.com
                                  127.0.0.1 www.180searchassistant.com
                                  127.0.0.1 www.180solutions.com
                                  127.0.0.1 180solutions.com
                                  127.0.0.1 181.365soft.info
                                  127.0.0.1 www.181.365soft.info
                                  127.0.0.1 1987324.com
                                  127.0.0.1 www.1987324.com
                                  127.0.0.1 1clickpcfix.com
                                  127.0.0.1 www.1clickpcfix.com
                                  127.0.0.1 www.1-domains-registrations.com
                                  127.0.0.1 1-domains-registrations.com
                                  127.0.0.1 www.1sexparty.com
                                  127.0.0.1 1sexparty.com
                                  127.0.0.1 www.1sms.de
                                  127.0.0.1 1sms.de
                                  127.0.0.1 www.1stantivirus.com
                                  127.0.0.1 1stantivirus.com
                                  127.0.0.1 www.1stpagehere.com
                                  127.0.0.1 1stpagehere.com
                                  127.0.0.1 www.1stsearchportal.com
                                  127.0.0.1 1stsearchportal.com
                                  127.0.0.1 2.82211.net
                                  127.0.0.1 www.2006ooo.com
                                  127.0.0.1 2006ooo.com
                                  127.0.0.1 www.2007-download.com
                                  127.0.0.1 2007-download.com
                                  127.0.0.1 2008search-destroy.com
                                  127.0.0.1 www.2008search-destroy.com
                                  127.0.0.1 2008-search-destroy.com
                                  127.0.0.1 www.2008-search-destroy.com
                                  127.0.0.1 www.2020search.com
                                  127.0.0.1 2020search.com
                                  127.0.0.1 20x2p.com
                                  127.0.0.1 24.365soft.info
                                  127.0.0.1 www.24.365soft.info
                                  127.0.0.1 www.24-7pharmacy.info
                                  127.0.0.1 24-7pharmacy.info
                                  127.0.0.1 24-7searching-and-more.com
                                  127.0.0.1 www.24-7searching-and-more.com
                                  127.0.0.1 www.24teen.com
                                  127.0.0.1 24teen.com
                                  127.0.0.1 2ndpower.com
                                  127.0.0.1 www.2search.com
                                  127.0.0.1 2search.com
                                  127.0.0.1 www.2search.org
                                  127.0.0.1 2search.org
                                  127.0.0.1 www.2squared.com
                                  127.0.0.1 2squared.com
                                  127.0.0.1 www.321-gratis-sms.com
                                  127.0.0.1 321-gratis-sms.com
                                  127.0.0.1 www.3322.org
                                  127.0.0.1 3322.org
                                  127.0.0.1 365soft.info
                                  127.0.0.1 www.36site.com
                                  127.0.0.1 36site.com
                                  127.0.0.1 3721.com
                                  127.0.0.1 39-93.com
                                  127.0.0.1 www.3bay.it
                                  127.0.0.1 3bay.it
                                  127.0.0.1 3xclipsonline.com
                                  127.0.0.1 www.3xclipsonline.com
                                  127.0.0.1 3xcurves.com
                                  127.0.0.1 www.3xcurves.com
                                  127.0.0.1 www.3xfestival.com
                                  127.0.0.1 3xfestival.com
                                  127.0.0.1 www.3x-festival.com
                                  127.0.0.1 3x-festival.com
                                  127.0.0.1 www.3x-galls.com
                                  127.0.0.1 3x-galls.com
                                  127.0.0.1 www.3xmiracle.com
                                  127.0.0.1 3xmiracle.com
                                  127.0.0.1 www.3xmoviesblog.com
                                  127.0.0.1 3xmoviesblog.com
                                  127.0.0.1 www.404dns.com
                                  127.0.0.1 404dns.com
                                  127.0.0.1 www.4199.com
                                  127.0.0.1 4199.com
                                  127.0.0.1 www.4corn.net
                                  127.0.0.1 4corn.net
                                  127.0.0.1 www.4ebay.it
                                  127.0.0.1 4ebay.it
                                  127.0.0.1 4klm.com
                                  127.0.0.1 www.4mpg.com
                                  127.0.0.1 4mpg.com
                                  127.0.0.1 www.59cn.cn
                                  127.0.0.1 59cn.cn
                                  127.0.0.1 www.5starsblog.com
                                  127.0.0.1 5starsblog.com
                                  127.0.0.1 www.5zgmu7o20kt5d8yq.com
                                  127.0.0.1 5zgmu7o20kt5d8yq.com
                                  127.0.0.1 www.6000vornamen.de
                                  127.0.0.1 6000vornamen.de
                                  127.0.0.1 www.680180.net
                                  127.0.0.1 680180.net
                                  127.0.0.1 www.6sek.com
                                  127.0.0.1 6sek.com
                                  127.0.0.1 www.70-music.com
                                  127.0.0.1 70-music.com
                                  127.0.0.1 www.7322.com
                                  127.0.0.1 7322.com
                                  127.0.0.1 www.745970.com
                                  127.0.0.1 745970.com
                                  127.0.0.1 75tz.com
                                  127.0.0.1 www.777search.com
                                  127.0.0.1 777search.com
                                  127.0.0.1 www.777top.com
                                  127.0.0.1 777top.com
                                  127.0.0.1 www.7939.com
                                  127.0.0.1 7939.com
                                  127.0.0.1 www.7search.com
                                  127.0.0.1 7search.com
                                  127.0.0.1 80gw6ry3i3x3qbrkwhxhw.032439.com
                                  127.0.0.1 www.80-music.com
                                  127.0.0.1 80-music.com
                                  127.0.0.1 82211.net
                                  127.0.0.1 8866.org
                                  127.0.0.1 www.88sms.ch
                                  127.0.0.1 88sms.ch
                                  127.0.0.1 www.88vcd.com
                                  127.0.0.1 88vcd.com
                                  127.0.0.1 www.8ad.com
                                  127.0.0.1 8ad.com
                                  127.0.0.1 www.90-music.com
                                  127.0.0.1 90-music.com
                                  127.0.0.1 www.9505.com
                                  127.0.0.1 9505.com
                                  127.0.0.1 www.971searchbox.com
                                  127.0.0.1 971searchbox.com
                                  127.0.0.1 9mmporn.com
                                  127.0.0.1 a.bestmanage.org
                                  127.0.0.1 aaabesthomepage.com
                                  127.0.0.1 www.aaabesthomepage.com
                                  127.0.0.1 aaasexypics.com
                                  127.0.0.1 aaawebfinder.com
                                  127.0.0.1 www.aaawebfinder.com
                                  127.0.0.1 www.aaqadarsztriv.com
                                  127.0.0.1 aaqadarsztriv.com
                                  127.0.0.1 www.aaqada-rsztriv.com
                                  127.0.0.1 aaqada-rsztriv.com
                                  127.0.0.1 www.aaqadaueorn.com
                                  127.0.0.1 aaqadaueorn.com
                                  127.0.0.1 aaqada-ueorn.com
                                  127.0.0.1 www.aaqada-ueorn.com
                                  127.0.0.1 www.aaqada-ygco.com
                                  127.0.0.1 aaqada-ygco.com
                                  127.0.0.1 aaqada-ymct.com
                                  127.0.0.1 www.aaqada-ymct.com
                                  127.0.0.1 aaszxy.ru
                                  127.0.0.1 www.aaszxy.ru
                                  127.0.0.1 www.aav2008.com
                                  127.0.0.1 aav2008.com
                                  127.0.0.1 aavc.com
                                  127.0.0.1 www.abccodec.com
                                  127.0.0.1 abccodec.com
                                  127.0.0.1 abcdperformance.com
                                  127.0.0.1 www.abcdperformance.com
                                  127.0.0.1 abc-find.info
                                  127.0.0.1 www.abc-find.info
                                  127.0.0.1 abcsearch.com
                                  127.0.0.1 www.abcsearch.com
                                  127.0.0.1 abcways.com
                                  127.0.0.1 www.abcways.com
                                  127.0.0.1 abetterinternet.com
                                  127.0.0.1 www.abetterinternet.com
                                  127.0.0.1 abnetsoft.info
                                  127.0.0.1 www.abnetsoft.info
                                  127.0.0.1 www.about-adult.net
                                  127.0.0.1 about-adult.net
                                  127.0.0.1 aboutclicker.com
                                  127.0.0.1 www.aboutclicker.com
                                  127.0.0.1 www.abrp.net
                                  127.0.0.1 abrp.net
                                  127.0.0.1 absolutee.com
                                  127.0.0.1 www.absolutee.com
                                  127.0.0.1 ac66.cn
                                  127.0.0.1 www.ac66.cn
                                  127.0.0.1 access.navinetwork.com
                                  127.0.0.1 access.rapid-pass.net
                                  127.0.0.1 accessactivexvideo.com
                                  127.0.0.1 www.accessactivexvideo.com
                                  127.0.0.1 accessclips.com
                                  127.0.0.1 www.accessclips.com
                                  127.0.0.1 access-dvd.com
                                  127.0.0.1 www.access-dvd.com
                                  127.0.0.1 www.accesskeygenerator.com
                                  127.0.0.1 accesskeygenerator.com
                                  127.0.0.1 accessthefuture.net
                                  127.0.0.1 www.accessthefuture.net
                                  127.0.0.1 www.accessvid.net
                                  127.0.0.1 accessvid.net
                                  127.0.0.1 acemedic.com
                                  127.0.0.1 www.acemedic.com
                                  127.0.0.1 www.ace-webmaster.com
                                  127.0.0.1 ace-webmaster.com
                                  127.0.0.1 acjp.com
                                  127.0.0.1 www.acrobat-2007.com
                                  127.0.0.1 acrobat-2007.com
                                  127.0.0.1 acrobat-8.com
                                  127.0.0.1 www.acrobat-8.com
                                  127.0.0.1 www.acrobat-center.com
                                  127.0.0.1 acrobat-center.com
                                  127.0.0.1 acrobat-hq.com
                                  127.0.0.1 www.acrobat-hq.com
                                  127.0.0.1 acrobatreader-8.com
                                  127.0.0.1 www.acrobatreader-8.com
                                  127.0.0.1 www.acrobat-reader-8.de
                                  127.0.0.1 acrobat-reader-8.de
                                  127.0.0.1 www.acrobat-stop.com
                                  127.0.0.1 acrobat-stop.com
                                  127.0.0.1 actionbreastcancer.org
                                  127.0.0.1 www.actionbreastcancer.org
                                  127.0.0.1 activesearcher.info
                                  127.0.0.1 www.activesearcher.info
                                  127.0.0.1 activexaccessobject.com
                                  127.0.0.1 www.activexaccessobject.com
                                  127.0.0.1 www.activexaccessvideo.com
                                  127.0.0.1 activexaccessvideo.com
                                  127.0.0.1 activexemedia.com
                                  127.0.0.1 www.activexemedia.com
                                  127.0.0.1 activexmediaobject.com
                                  127.0.0.1 www.activexmediaobject.com
                                  127.0.0.1 activexmediapro.com
                                  127.0.0.1 www.activexmediapro.com
                                  127.0.0.1 www.activexmediasite.com
                                  127.0.0.1 activexmediasite.com
                                  127.0.0.1 activexmediasoftware.com
                                  127.0.0.1 www.activexmediasoftware.com
                                  127.0.0.1 www.activexmediasource.com
                                  127.0.0.1 activexmediasource.com
                                  127.0.0.1 activexmediatool.com
                                  127.0.0.1 www.activexmediatool.com
                                  127.0.0.1 activexmediatour.com
                                  127.0.0.1 www.activexmediatour.com
                                  127.0.0.1 activexsoftwares.com
                                  127.0.0.1 www.activexsoftwares.com
                                  127.0.0.1 activexsource.com
                                  127.0.0.1 www.activexsource.com
                                  127.0.0.1 activexupdate.com
                                  127.0.0.1 www.activexupdate.com
                                  127.0.0.1 activexvideo.com
                                  127.0.0.1 www.activexvideo.com
                                  127.0.0.1 www.activexvideotool.com
                                  127.0.0.1 activexvideotool.com
                                  127.0.0.1 www.ad.marketingsector.com
                                  127.0.0.1 ad.marketingsector.com
                                  127.0.0.1 ad.mokead.com
                                  127.0.0.1 www.ad.mokead.com
                                  127.0.0.1 ad.oinadserver.com
                                  127.0.0.1 ad.outerinfoads.com
                                  127.0.0.1 www.ad25.com
                                  127.0.0.1 ad25.com
                                  127.0.0.1 www.ad45.com
                                  127.0.0.1 ad45.com
                                  127.0.0.1 www.ad77.com
                                  127.0.0.1 ad77.com
                                  127.0.0.1 ad86.com
                                  127.0.0.1 www.ad86.com
                                  127.0.0.1 adamsupportgroup.org
                                  127.0.0.1 www.adamsupportgroup.org
                                  127.0.0.1 www.adarmor.com
                                  127.0.0.1 adarmor.com
                                  127.0.0.1 adasearch.com
                                  127.0.0.1 www.adasearch.com
                                  127.0.0.1 adaware.cc
                                  127.0.0.1 www.adawarenow.com
                                  127.0.0.1 adawarenow.com
                                  127.0.0.1 adchannel.contextplus.net
                                  127.0.0.1 www.addetect.com
                                  127.0.0.1 addetect.com
                                  127.0.0.1 www.add-hhh.info
                                  127.0.0.1 add-hhh.info
                                  127.0.0.1 addictivetechnologies.com
                                  127.0.0.1 www.addictivetechnologies.com
                                  127.0.0.1 www.addictivetechnologies.net
                                  127.0.0.1 addictivetechnologies.net
                                  127.0.0.1 www.addioerrori.com
                                  127.0.0.1 addioerrori.com
                                  127.0.0.1 www.add-manager.com
                                  127.0.0.1 add-manager.com
                                  127.0.0.1 www.adgate.info
                                  127.0.0.1 adgate.info
                                  127.0.0.1 www.adintelligence.net
                                  127.0.0.1 adintelligence.net
                                  127.0.0.1 www.adioserrores.com
                                  127.0.0.1 adioserrores.com
                                  127.0.0.1 www.adipics.com
                                  127.0.0.1 adipics.com
                                  127.0.0.1 adlogix.com
                                  127.0.0.1 www.adlogix.com
                                  127.0.0.1 www.admin2cash.biz
                                  127.0.0.1 admin2cash.biz
                                  127.0.0.1 adnet-plus.com
                                  127.0.0.1 adnetserver.com
                                  127.0.0.1 www.adnetserver.com
                                  127.0.0.1 adobe-download-now.com
                                  127.0.0.1 www.adobe-downloads.com
                                  127.0.0.1 adobe-downloads.com
                                  127.0.0.1 www.adobe-reader-8.fr
                                  127.0.0.1 adobe-reader-8.fr
                                  127.0.0.1 adprotect.com
                                  127.0.0.1 www.adprotect.com
                                  127.0.0.1 ads.centralmedia.ws
                                  127.0.0.1 ads.k8l.info
                                  127.0.0.1 ads.kmpads.com
                                  127.0.0.1 ads.kw.revenue.net
                                  127.0.0.1 ads.marketingsector.com
                                  127.0.0.1 ads.searchingbooth.com
                                  127.0.0.1 ads.z-quest.com
                                  127.0.0.1 ads1.revenue.net
                                  127.0.0.1 www.ads183.com
                                  127.0.0.1 ads183.com
                                  127.0.0.1 www.adscontex.com
                                  127.0.0.1 adscontex.com
                                  127.0.0.1 adservices1.enhance.com
                                  127.0.0.1 www.adservices1.enhance.com
                                  127.0.0.1 adservs.com
                                  127.0.0.1 www.adsextend.net
                                  127.0.0.1 adsextend.net
                                  127.0.0.1 www.adshttp.com
                                  127.0.0.1 adshttp.com
                                  127.0.0.1 www.adsniffer.com
                                  127.0.0.1 adsniffer.com
                                  127.0.0.1 www.adsonwww.com
                                  127.0.0.1 adsonwww.com
                                  127.0.0.1 www.adspics.com
                                  127.0.0.1 adspics.com
                                  127.0.0.1 adsrevenue.net
                                  127.0.0.1 www.adsrevenue.net
                                  127.0.0.1 adtrak.net
                                  127.0.0.1 www.adtrak.net
                                  127.0.0.1 adtrgt.com
                                  127.0.0.1 adult18codec.com
                                  127.0.0.1 www.adult18codec.com
                                  127.0.0.1 www.adult777search.info
                                  127.0.0.1 adult777search.info
                                  127.0.0.1 adultadworld.com
                                  127.0.0.1 www.adultadworld.com
                                  127.0.0.1 www.adultan.com
                                  127.0.0.1 adultan.com
                                  127.0.0.1 adultcodec-2008.com
                                  127.0.0.1 www.adultcodec-2008.com
                                  127.0.0.1 www.adultcodecstars.com
                                  127.0.0.1 adultcodecstars.com
                                  127.0.0.1 adult-engine-search.com
                                  127.0.0.1 www.adult-engine-search.com
                                  127.0.0.1 adult-erotic-guide.net
                                  127.0.0.1 www.adult-erotic-guide.net
                                  127.0.0.1 www.adultfilmsite.com
                                  127.0.0.1 adultfilmsite.com
                                  127.0.0.1 adult-friends-finder.net
                                  127.0.0.1 www.adult-friends-finder.net
                                  127.0.0.1 adultgambling.org
                                  127.0.0.1 adult-host.org
                                  127.0.0.1 www.adulthyperlinks.com
                                  127.0.0.1 adulthyperlinks.com
                                  127.0.0.1 www.adultmovieplus.com
                                  127.0.0.1 adultmovieplus.com
                                  127.0.0.1 adult-mpg.net
                                  127.0.0.1 www.adult-mpg.net
                                  127.0.0.1 adult-personal.us
                                  127.0.0.1 adultsgames.net
                                  127.0.0.1 www.adultsonlyvids.com
                                  127.0.0.1 adultsonlyvids.com
                                  127.0.0.1 adultsper.com
                                  127.0.0.1 www.adultsper.com
                                  127.0.0.1 adulttds.com
                                  127.0.0.1 www.adulttds.com
                                  127.0.0.1 adultzoneworld.com
                                  127.0.0.1 www.adultzoneworld.com
                                  127.0.0.1 www.advancedcleaner.com
                                  127.0.0.1 advancedcleaner.com
                                  127.0.0.1 www.advancedpccleaner.com
                                  127.0.0.1 advancedpccleaner.com
                                  127.0.0.1 advancedxpfixer.com
                                  127.0.0.1 www.advancedxpfixer.com
                                  127.0.0.1 advcash.biz
                                  127.0.0.1 www.advcash.biz
                                  127.0.0.1 advert.exaccess.ru
                                  127.0.0.1 www.advertisemoney.info
                                  127.0.0.1 advertisemoney.info
                                  127.0.0.1 advertising.paltalk.com
                                  127.0.0.1 advertising-money.info
                                  127.0.0.1 www.advertising-money.info
                                  127.0.0.1 www.advert-network.com
                                  127.0.0.1 advert-network.com
                                  127.0.0.1 ad-ware.cc
                                  127.0.0.1 www.ad-w-a-r-e.com
                                  127.0.0.1 ad-w-a-r-e.com
                                  127.0.0.1 a-d-w-a-r-e.com
                                  127.0.0.1 www.a-d-w-a-r-e.com
                                  127.0.0.1 www.adware.pro
                                  127.0.0.1 adware.pro
                                  127.0.0.1 www.adwarealert.com
                                  127.0.0.1 adwarealert.com
                                  127.0.0.1 www.ad-warealert.com
                                  127.0.0.1 ad-warealert.com
                                  127.0.0.1 adwarearrest.com
                                  127.0.0.1 www.adwarearrest.com
                                  127.0.0.1 adwarebazooka.com
                                  127.0.0.1 www.adwarebazooka.com
                                  127.0.0.1 www.adwarebot.com
                                  127.0.0.1 adwarebot.com
                                  127.0.0.1 adwarecommander.com
                                  127.0.0.1 www.adwarecommander.com
                                  127.0.0.1 adware-download.com
                                  127.0.0.1 www.adware-download.com
                                  127.0.0.1 www.adwarefinder.com
                                  127.0.0.1 adwarefinder.com
                                  127.0.0.1 www.adwaregold.com
                                  127.0.0.1 adwaregold.com
                                  127.0.0.1 www.adwarepatrol.com
                                  127.0.0.1 adwarepatrol.com
                                  127.0.0.1 www.adwareplatinum.com
                                  127.0.0.1 adwareplatinum.com
                                  127.0.0.1 www.adwarepro.org
                                  127.0.0.1 adwarepro.org
                                  127.0.0.1 www.adwareprotectionsite.com
                                  127.0.0.1 adwareprotectionsite.com
                                  127.0.0.1 www.adwarepunisher.com
                                  127.0.0.1 adwarepunisher.com
                                  127.0.0.1 www.adwareremover.ws
                                  127.0.0.1 adwareremover.ws
                                  127.0.0.1 www.adwaresafety.com
                                  127.0.0.1 adwaresafety.com
                                  127.0.0.1 www.adwarexp.com
                                  127.0.0.1 adwarexp.com
                                  127.0.0.1 www.adwareye.com
                                  127.0.0.1 adwareye.com
                                  127.0.0.1 affiliate.idownload.com
                                  127.0.0.1 www.aflgate.com
                                  127.0.0.1 aflgate.com
                                  127.0.0.1 africaspromise.org
                                  127.0.0.1 agava.com
                                  127.0.0.1 agava.ru
                                  127.0.0.1 agentstudio.com
                                  127.0.0.1 www.ageofconans.net
                                  127.0.0.1 ageofconans.net
                                  127.0.0.1 www.aginegialle.it
                                  127.0.0.1 aginegialle.it
                                  127.0.0.1 www.ahnenforschung.de
                                  127.0.0.1 ahnenforschung.de
                                  127.0.0.1 www.aifind.info
                                  127.0.0.1 aifind.info
                                  127.0.0.1 www.airtleworld.com
                                  127.0.0.1 airtleworld.com
                                  127.0.0.1 www.aitalia.it
                                  127.0.0.1 aitalia.it
                                  127.0.0.1 akamai.downloadv3.com
                                  127.0.0.1 www.aklitalia.it
                                  127.0.0.1 aklitalia.it
                                  127.0.0.1 akril.com
                                  127.0.0.1 alcatel.ws
                                  127.0.0.1 www.alertspy.com
                                  127.0.0.1 alertspy.com
                                  127.0.0.1 alfacleaner.com
                                  127.0.0.1 www.alfacleaner.com
                                  127.0.0.1 alfa-search.com
                                  127.0.0.1 www.alialia.it
                                  127.0.0.1 alialia.it
                                  127.0.0.1 www.aliotalia.it
                                  127.0.0.1 aliotalia.it
                                  127.0.0.1 www.alirtalia.it
                                  127.0.0.1 alirtalia.it
                                  127.0.0.1 www.alitaia.it
                                  127.0.0.1 alitaia.it
                                  127.0.0.1 www.alitaklia.it
                                  127.0.0.1 alitaklia.it
                                  127.0.0.1 www.alitala.it
                                  127.0.0.1 alitala.it
                                  127.0.0.1 www.alitali.it
                                  127.0.0.1 alitali.it
                                  127.0.0.1 www.alitaliaq.it
                                  127.0.0.1 alitaliaq.it
                                  127.0.0.1 www.alitalias.it
                                  127.0.0.1 alitalias.it
                                  127.0.0.1 www.alitaliaz.it
                                  127.0.0.1 alitaliaz.it
                                  127.0.0.1 www.alitalioa.it
                                  127.0.0.1 alitalioa.it
                                  127.0.0.1 www.alitalisa.it
                                  127.0.0.1 alitalisa.it
                                  127.0.0.1 www.alitaliua.it
                                  127.0.0.1 alitaliua.it
                                  127.0.0.1 www.alitalkia.it
                                  127.0.0.1 alitalkia.it
                                  127.0.0.1 www.alitaloia.it
                                  127.0.0.1 alitaloia.it
                                  127.0.0.1 www.alitaluia.it
                                  127.0.0.1 alitaluia.it
                                  127.0.0.1 www.alitaslia.it
                                  127.0.0.1 alitaslia.it
                                  127.0.0.1 www.alitlia.it
                                  127.0.0.1 alitlia.it
                                  127.0.0.1 www.alitralia.it
                                  127.0.0.1 alitralia.it
                                  127.0.0.1 www.alitsalia.it
                                  127.0.0.1 alitsalia.it
                                  127.0.0.1 www.aliutalia.it
                                  127.0.0.1 aliutalia.it
                                  127.0.0.1 www.all1count.net
                                  127.0.0.1 all1count.net
                                  127.0.0.1 all4internet.com
                                  127.0.0.1 www.all4internet.com
                                  127.0.0.1 allabtcars.com
                                  127.0.0.1 allabtjeeps.com
                                  127.0.0.1 all-bittorrent.com
                                  127.0.0.1 www.all-bittorrent.com
                                  127.0.0.1 allcollisions.com
                                  127.0.0.1 www.allcollisions.com
                                  127.0.0.1 www.allcybersearch.com
                                  127.0.0.1 allcybersearch.com
                                  127.0.0.1 www.alldiskscheck300.com
                                  127.0.0.1 alldiskscheck300.com
                                  127.0.0.1 www.alldnserrors.com
                                  127.0.0.1 alldnserrors.com
                                  127.0.0.1 all-downloads-now.com
                                  127.0.0.1 www.all-downloads-now.com
                                  127.0.0.1 all-edonkey.com
                                  127.0.0.1 www.all-edonkey.com
                                  127.0.0.1 www.allertaminacce.com
                                  127.0.0.1 allertaminacce.com
                                  127.0.0.1 allforadult.com
                                  127.0.0.1 allhyperlinks.com
                                  127.0.0.1 www.alliesecurity.com
                                  127.0.0.1 alliesecurity.com
                                  127.0.0.1 all-inet.com
                                  127.0.0.1 allinternetbusiness.com
                                  127.0.0.1 all-limewire.com
                                  127.0.0.1 www.all-limewire.com
                                  127.0.0.1 www.allmegabucks.com
                                  127.0.0.1 allmegabucks.com
                                  127.0.0.1 www.allprotections.com
                                  127.0.0.1 allprotections.com
                                  127.0.0.1 www.allresultz.net
                                  127.0.0.1 allresultz.net
                                  127.0.0.1 www.allsearch.us
                                  127.0.0.1 allsearch.us
                                  127.0.0.1 www.allsecuritynotes.com
                                  127.0.0.1 allsecuritynotes.com
                                  127.0.0.1 www.allsecuritysite.com
                                  127.0.0.1 allsecuritysite.com
                                  127.0.0.1 www.allstarsvideos.net
                                  127.0.0.1 allstarsvideos.net
                                  127.0.0.1 www.alltiettantivirus.com
                                  127.0.0.1 alltiettantivirus.com
                                  127.0.0.1 www.alltruesoftware.com
                                  127.0.0.1 alltruesoftware.com
                                  127.0.0.1 www.allvideoactivex.com
                                  127.0.0.1 allvideoactivex.com
                                  127.0.0.1 www.almanah.biz
                                  127.0.0.1 almanah.biz
                                  127.0.0.1 almarvideos.com
                                  127.0.0.1 www.aloitalia.it
                                  127.0.0.1 aloitalia.it
                                  127.0.0.1 www.aluitalia.it
                                  127.0.0.1 aluitalia.it
                                  127.0.0.1 www.amaena.com
                                  127.0.0.1 amaena.com
                                  127.0.0.1 amandamountains.com
                                  127.0.0.1 www.amateurliveshow.com
                                  127.0.0.1 amateurliveshow.com
                                  127.0.0.1 www.amediasoftware.com
                                  127.0.0.1 amediasoftware.com
                                  127.0.0.1 www.amediasource.com
                                  127.0.0.1 amediasource.com
                                  127.0.0.1 www.americanautobargains.com
                                  127.0.0.1 americanautobargains.com
                                  127.0.0.1 www.americancarbargains.com
                                  127.0.0.1 americancarbargains.com
                                  127.0.0.1 american-teens.net
                                  127.0.0.1 amigeek.com
                                  127.0.0.1 www.amigobore.com
                                  127.0.0.1 amigobore.com
                                  127.0.0.1 amisbusiness.com
                                  127.0.0.1 www.ampmsearch.com
                                  127.0.0.1 ampmsearch.com
                                  127.0.0.1 www.analcord.com
                                  127.0.0.1 analcord.com
                                  127.0.0.1 analmovi.com
                                  127.0.0.1 www.anarchylolita.com
                                  127.0.0.1 anarchylolita.com
                                  127.0.0.1 anarchyporn.com
                                  127.0.0.1 www.andromedical.com
                                  127.0.0.1 andromedical.com
                                  127.0.0.1 www.animepornmag.com
                                  127.0.0.1 animepornmag.com
                                  127.0.0.1 anin.org
                                  127.0.0.1 www.anjpn-avxiz.biz
                                  127.0.0.1 anjpn-avxiz.biz
                                  127.0.0.1 anjpnzqav.biz
                                  127.0.0.1 www.anjpnzqav.biz
                                  127.0.0.1 anjpn-zqav.biz
                                  127.0.0.1 www.anjpn-zqav.biz
                                  127.0.0.1 annaromeo.com
                                  127.0.0.1 www.antiddos.us
                                  127.0.0.1 antiddos.us
                                  127.0.0.1 www.antiespiadorado.com
                                  127.0.0.1 antiespiadorado.com
                                  127.0.0.1 www.antiespionspack.com
                                  127.0.0.1 antiespionspack.com
                                  127.0.0.1 www.antigusanos2008.com
                                  127.0.0.1 antigusanos2008.com
                                  127.0.0.1 antispamassistant.com
                                  127.0.0.1 www.antispamassistant.com
                                  127.0.0.1 antispamdeluxe.com
                                  127.0.0.1 www.antispamdeluxe.com
                                  127.0.0.1 antispionage.com
                                  127.0.0.1 www.antispionage.com
                                  127.0.0.1 www.antispionagepro.com
                                  127.0.0.1 antispionagepro.com
                                  127.0.0.1 antispyadvanced.com
                                  127.0.0.1 www.antispyadvanced.com
                                  127.0.0.1 antispycheck.com
                                  127.0.0.1 www.antispycheck.com
                                  127.0.0.1 antispydns.biz
                                  127.0.0.1 www.antispydns.biz
                                  127.0.0.1 www.antispykit.com
                                  127.0.0.1 antispykit.com
                                  127.0.0.1 www.antispylab.com
                                  127.0.0.1 antispylab.com
                                  127.0.0.1 www.antispyshield.com
                                  127.0.0.1 antispyshield.com
                                  127.0.0.1 antispysolutions.com
                                  127.0.0.1 www.antispysolutions.com
                                  127.0.0.1 antispyware.com
                                  127.0.0.1 www.antispyware.com
                                  127.0.0.1 www.antispyware-2008.info
                                  127.0.0.1 antispyware-2008.info
                                  127.0.0.1 www.antispyware2008.name
                                  127.0.0.1 antispyware2008.name
                                  127.0.0.1 www.antispyware-2008.name
                                  127.0.0.1 antispyware-2008.name
                                  127.0.0.1 antispyware2008.org
                                  127.0.0.1 www.antispyware2008.org
                                  127.0.0.1 antispyware-2008.org
                                  127.0.0.1 www.antispyware-2008.org
                                  127.0.0.1 www.antispyware2008-download.com
                                  127.0.0.1 antispyware2008-download.com
                                  127.0.0.1 www.antispyware-2008-download.com
                                  127.0.0.1 antispyware-2008-download.com
                                  127.0.0.1 antispyware2008-download.name
                                  127.0.0.1 www.antispyware2008-download.name
                                  127.0.0.1 www.antispyware2008-download.org
                                  127.0.0.1 antispyware2008-download.org
                                  127.0.0.1 antispyware-2008-download.org
                                  127.0.0.1 www.antispyware-2008-download.org
                                  127.0.0.1 www.antispywareboot.com
                                  127.0.0.1 antispywareboot.com
                                  127.0.0.1 antispywarebot.com
                                  127.0.0.1 www.antispywarebot.com
                                  127.0.0.1 antispywarebox.com
                                  127.0.0.1 www.antispywarebox.com
                                  127.0.0.1 www.antispywaredownloads.com
                                  127.0.0.1 antispywaredownloads.com
                                  127.0.0.1 www.antispywareexpert.com
                                  127.0.0.1 antispywareexpert.com
                                  127.0.0.1 www.antispywaremaster.com
                                  127.0.0.1 antispywaremaster.com
                                  127.0.0.1 antispyware-review.biz
                                  127.0.0.1 www.antispyware-review.biz
                                  127.0.0.1 antispyware-review.info
                                  127.0.0.1 www.antispyware-review.info
                                  127.0.0.1 antispywaresales.com
                                  127.0.0.1 www.antispywaresales.com
                                  127.0.0.1 antispywaresuite.com
                                  127.0.0.1 www.antispywaresuite.com
                                  127.0.0.1 www.antispywareupdates.net
                                  127.0.0.1 antispywareupdates.net
                                  127.0.0.1 www.antispywarexp.com
                                  127.0.0.1 antispywarexp.com
                                  127.0.0.1 www.antispyweb.net
                                  127.0.0.1 antispyweb.net
                                  127.0.0.1 antiver2008.com
                                  127.0.0.1 www.antiver2008.com
                                  127.0.0.1 antivermins.com
                                  127.0.0.1 www.antivermins.com
                                  127.0.0.1 anti-vermins.com
                                  127.0.0.1 www.anti-vermins.com
                                  127.0.0.1 antivir2007.com
                                  127.0.0.1 www.antivir2007.com
                                  127.0.0.1 antivirgear.com
                                  127.0.0.1 www.antivirgear.com
                                  127.0.0.1 antivirprotect.com
                                  127.0.0.1 www.antivirprotect.com
                                  127.0.0.1 www.antivirus.fastfreedownload.com
                                  127.0.0.1 antivirus.fastfreedownload.com
                                  127.0.0.1 antivirus2008pro.com
                                  127.0.0.1 www.antivirus2008pro.com
                                  127.0.0.1 www.antivirus-2008pro.com
                                  127.0.0.1 antivirus-2008pro.com
                                  127.0.0.1 www.antivirus-2008-pro.com
                                  127.0.0.1 antivirus-2008-pro.com
                                  127.0.0.1 www.antivirus2008pro.info
                                  127.0.0.1 antivirus2008pro.info
                                  127.0.0.1 www.antivirus-2008pro.info
                                  127.0.0.1 antivirus-2008pro.info
                                  127.0.0.1 www.antivirus-2008-pro.info
                                  127.0.0.1 antivirus-2008-pro.info
                                  127.0.0.1 antivirus2008pro.net
                                  127.0.0.1 www.antivirus2008pro.net
                                  127.0.0.1 www.antivirus-2008pro.net
                                  127.0.0.1 antivirus-2008pro.net
                                  127.0.0.1 antivirus-2008-pro.net
                                  127.0.0.1 www.antivirus-2008-pro.net
                                  127.0.0.1 www.antivirus2008pro.org
                                  127.0.0.1 antivirus2008pro.org
                                  127.0.0.1 antivirus-2008pro.org
                                  127.0.0.1 www.antivirus-2008pro.org
                                  127.0.0.1 www.antivirus-2008-pro.org
                                  127.0.0.1 antivirus-2008-pro.org
                                  127.0.0.1 www.antivirus2008scanner.com
                                  127.0.0.1 antivirus2008scanner.com
                                  127.0.0.1 www.antivirus2008x.com
                                  127.0.0.1 antivirus2008x.com
                                  127.0.0.1 antivirus-2009.com
                                  127.0.0.1 www.antivirus-2009.com
                                  127.0.0.1 antivirus2009-freescan.com
                                  127.0.0.1 www.antivirus2009-freescan.com
                                  127.0.0.1 antivirus-2009pro.com
                                  127.0.0.1 www.antivirus-2009pro.com
                                  127.0.0.1 www.antivirus2009professional.com
                                  127.0.0.1 antivirus2009professional.com
                                  127.0.0.1 antivirusadvance.com
                                  127.0.0.1 www.antivirusadvance.com
                                  127.0.0.1 antivirusaskeladd.com
                                  127.0.0.1 www.antivirusaskeladd.com
                                  127.0.0.1 www.antivirus-database.com
                                  127.0.0.1 antivirus-database.com
                                  127.0.0.1 antivirusgereedschap.com
                                  127.0.0.1 www.antivirusgereedschap.com
                                  127.0.0.1 www.antivirusgolden.com
                                  127.0.0.1 antivirusgolden.com
                                  127.0.0.1 www.antivirus-hq.net
                                  127.0.0.1 antivirus-hq.net
                                  127.0.0.1 antiviruspcsuite.com
                                  127.0.0.1 www.antiviruspcsuite.com
                                  127.0.0.1 antivirusplasma.com
                                  127.0.0.1 www.antivirusplasma.com
                                  127.0.0.1 antiviruspremium.com
                                  127.0.0.1 www.antiviruspremium.com
                                  127.0.0.1 anti-virus-pro.com
                                  127.0.0.1 www.anti-virus-pro.com
                                  127.0.0.1 www.antivirusprotector.com
                                  127.0.0.1 antivirusprotector.com
                                  127.0.0.1 www.antivirus-scanner.com
                                  127.0.0.1 antivirus-scanner.com
                                  127.0.0.1 www.antivirusscherm.com
                                  127.0.0.1 antivirusscherm.com
                                  127.0.0.1 www.antivirussecuritypro.com
                                  127.0.0.1 antivirussecuritypro.com
                                  127.0.0.1 www.antivirus-server.com
                                  127.0.0.1 antivirus-server.com
                                  127.0.0.1 www.antivirus-stop.com
                                  127.0.0.1 antivirus-stop.com
                                  127.0.0.1 www.antivirussuite.com
                                  127.0.0.1 antivirussuite.com
                                  127.0.0.1 www.antiworm2008.com
                                  127.0.0.1 antiworm2008.com
                                  127.0.0.1 www.antiwurm2008.com
                                  127.0.0.1 antiwurm2008.com
                                  127.0.0.1 antrocity.com
                                  127.0.0.1 www.anyofus.com
                                  127.0.0.1 anyofus.com
                                  127.0.0.1 www.anysafereviews.com
                                  127.0.0.1 anysafereviews.com
                                  127.0.0.1 www.anysn.seproger.com
                                  127.0.0.1 anysn.seproger.com
                                  127.0.0.1 anything4health.com
                                  127.0.0.1 www.apicpreview.com
                                  127.0.0.1 apicpreview.com
                                  127.0.0.1 www.appealcircuit.com
                                  127.0.0.1 appealcircuit.com
                                  127.0.0.1 www.approvedlinks.com
                                  127.0.0.1 approvedlinks.com
                                  127.0.0.1 apps.deskwizz.com
                                  127.0.0.1 apps.webservicehost.com
                                  127.0.0.1 www.aprotectedpage.com
                                  127.0.0.1 aprotectedpage.com
                                  127.0.0.1 apsua.com
                                  127.0.0.1 www.archivioadulti.com
                                  127.0.0.1 archivioadulti.com
                                  127.0.0.1 www.archiviosex.net
                                  127.0.0.1 archiviosex.net
                                  127.0.0.1 aregay.com
                                  127.0.0.1 ares.click-new-download.com
                                  127.0.0.1 www.ares.click-new-download.com
                                  127.0.0.1 www.ares-freebie.com
                                  127.0.0.1 ares-freebie.com
                                  127.0.0.1 www.arespro2007.com
                                  127.0.0.1 arespro2007.com
                                  127.0.0.1 aresultra.com
                                  127.0.0.1 www.aresultra.com
                                  127.0.0.1 www.ares-usa.com
                                  127.0.0.1 ares-usa.com
                                  127.0.0.1 www.areuhot.tv
                                  127.0.0.1 areuhot.tv
                                  127.0.0.1 arheo.com
                                  127.0.0.1 arizonaweb.org
                                  127.0.0.1 armitageinn.com
                                  127.0.0.1 www.arquivojpgs.smtp.ru
                                  127.0.0.1 arquivojpgs.smtp.ru
                                  127.0.0.1 artachnid.com
                                  127.0.0.1 art-func.com
                                  127.0.0.1 art-xxx.com
                                  127.0.0.1 www.asafebrowser.com
                                  127.0.0.1 asafebrowser.com
                                  127.0.0.1 www.asafetyalways.com
                                  127.0.0.1 asafetyalways.com
                                  127.0.0.1 www.asafetynote.com
                                  127.0.0.1 asafetynote.com
                                  127.0.0.1 www.asafetynotice.com
                                  127.0.0.1 asafetynotice.com
                                  127.0.0.1 www.asafetypage.com
                                  127.0.0.1 asafetypage.com
                                  127.0.0.1 www.asdbiz.biz
                                  127.0.0.1 asdbiz.biz
                                  127.0.0.1 www.asdeykuddq.com
                                  127.0.0.1 asdeykuddq.com
                                  127.0.0.1 www.asecurebar.com
                                  127.0.0.1 asecurebar.com
                                  127.0.0.1 www.asecureboard.com
                                  127.0.0.1 asecureboard.com
                                  127.0.0.1 www.asecurevalue.com
                                  127.0.0.1 asecurevalue.com
                                  127.0.0.1 www.asecurityissue.com
                                  127.0.0.1 asecurityissue.com
                                  127.0.0.1 www.asecuritynotice.com
                                  127.0.0.1 asecuritynotice.com
                                  127.0.0.1 www.asecuritypaper.com
                                  127.0.0.1 asecuritypaper.com
                                  127.0.0.1 www.asecuritystuff.com
                                  127.0.0.1 asecuritystuff.com
                                  127.0.0.1 www.asfadaptation.com
                                  127.0.0.1 asfadaptation.com
                                  127.0.0.1 asiankingkong.com
                                  127.0.0.1 www.asianpornmag.com
                                  127.0.0.1 asianpornmag.com
                                  127.0.0.1 www.asiantoolbar.com
                                  127.0.0.1 asiantoolbar.com
                                  127.0.0.1 www.asidseiupc.com
                                  127.0.0.1 asidseiupc.com
                                  127.0.0.1 www.aslitalia.it
                                  127.0.0.1 aslitalia.it
                                  127.0.0.1 www.aspirate.de
                                  127.0.0.1 aspirate.de
                                  127.0.0.1 www.asproxpstorage.com
                                  127.0.0.1 asproxpstorage.com
                                  127.0.0.1 ass-gals.com
                                  127.0.0.1 www.assureprotection.com
                                  127.0.0.1 assureprotection.com
                                  127.0.0.1 asta-killer.com
                                  127.0.0.1 www.astrologie-server.com
                                  127.0.0.1 astrologie-server.com
                                  127.0.0.1 www.asupereva.it
                                  127.0.0.1 asupereva.it
                                  127.0.0.1 www.ataprogram.com
                                  127.0.0.1 ataprogram.com
                                  127.0.0.1 athenrye.com
                                  127.0.0.1 www.atotalsafety.com
                                  127.0.0.1 atotalsafety.com
                                  127.0.0.1 www.atrueprotection.com
                                  127.0.0.1 atrueprotection.com
                                  127.0.0.1 www.atruesecurity.com
                                  127.0.0.1 atruesecurity.com
                                  127.0.0.1 www.attackware.com
                                  127.0.0.1 attackware.com
                                  127.0.0.1 www.attrezzi.biz
                                  127.0.0.1 attrezzi.biz
                                  127.0.0.1 www.aucunsvirus.com
                                  127.0.0.1 aucunsvirus.com
                                  127.0.0.1 www.aulde.net
                                  127.0.0.1 aulde.net
                                  127.0.0.1 www.aupereva.it
                                  127.0.0.1 aupereva.it
                                  127.0.0.1 www.ausgebrannt.com
                                  127.0.0.1 ausgebrannt.com
                                  127.0.0.1 www.ausgewaehlter-gewinner.de
                                  127.0.0.1 ausgewaehlter-gewinner.de
                                  127.0.0.1 www.auswandern-jobs.de
                                  127.0.0.1 auswandern-jobs.de
                                  127.0.0.1 www.autobargains.org
                                  127.0.0.1 autobargains.org
                                  127.0.0.1 www.autobargainsnetwork.com
                                  127.0.0.1 autobargainsnetwork.com
                                  127.0.0.1 www.autocontext.begun.ru
                                  127.0.0.1 autocontext.begun.ru
                                  127.0.0.1 autoescrowpay.com
                                  127.0.0.1 www.autogewinner.com
                                  127.0.0.1 autogewinner.com
                                  127.0.0.1 www.autotuningportal.com
                                  127.0.0.1 autotuningportal.com
                                  127.0.0.1 avadvance.com
                                  127.0.0.1 www.avadvance.com
                                  127.0.0.1 www.avast.free-software-center.com
                                  127.0.0.1 avast.free-software-center.com
                                  127.0.0.1 www.avast-2007.com
                                  127.0.0.1 avast-2007.com
                                  127.0.0.1 www.avast-downloads.com
                                  127.0.0.1 avast-downloads.com
                                  127.0.0.1 www.avast-hq.com
                                  127.0.0.1 avast-hq.com
                                  127.0.0.1 avforce.com
                                  127.0.0.1 www.avforce.com
                                  127.0.0.1 avg.grab-it-today.net
                                  127.0.0.1 www.avg.grab-it-today.net
                                  127.0.0.1 www.avg.softwarecenterz.com
                                  127.0.0.1 avg.softwarecenterz.com
                                  127.0.0.1 avg-secure.com
                                  127.0.0.1 www.avg-secure.com
                                  127.0.0.1 www.aviadaptation.com
                                  127.0.0.1 aviadaptation.com
                                  127.0.0.1 avian-ads.com
                                  127.0.0.1 www.avicoupler.com
                                  127.0.0.1 avicoupler.com
                                  127.0.0.1 avideoaxaccess.com
                                  127.0.0.1 www.avideoaxaccess.com
                                  127.0.0.1 avideosurfer.com
                                  127.0.0.1 www.avideosurfer.com
                                  127.0.0.1 avidirection.com
                                  127.0.0.1 www.avidirection.com
                                  127.0.0.1 aviewersoft.com
                                  127.0.0.1 www.aviewersoft.com
                                  127.0.0.1 www.aviexecution.com
                                  127.0.0.1 aviexecution.com
                                  127.0.0.1 avihelper.com
                                  127.0.0.1 www.avihelper.com
                                  127.0.0.1 aviinstrument.com
                                  127.0.0.1 www.aviinstrument.com
                                  127.0.0.1 aviplugin.com
                                  127.0.0.1 www.aviplugin.com
                                  127.0.0.1 avitool.com
                                  127.0.0.1 www.avitool.com
                                  127.0.0.1 aviupdate.com
                                  127.0.0.1 www.aviupdate.com
                                  127.0.0.1 aviutility.com
                                  127.0.0.1 www.aviutility.com
                                  127.0.0.1 www.avpcheckupdate.com
                                  127.0.0.1 avpcheckupdate.com
                                  127.0.0.1 avsmanufacture.com
                                  127.0.0.1 www.avsmanufacture.com
                                  127.0.0.1 www.avsystemcare.com
                                  127.0.0.1 avsystemcare.com
                                  127.0.0.1 www.avxizaaqada.biz
                                  127.0.0.1 avxizaaqada.biz
                                  127.0.0.1 www.avxiz-anjpn.biz
                                  127.0.0.1 avxiz-anjpn.biz
                                  127.0.0.1 www.avxizueorn.biz
                                  127.0.0.1 avxizueorn.biz
                                  127.0.0.1 www.avxiz-ueorn.biz
                                  127.0.0.1 avxiz-ueorn.biz
                                  127.0.0.1 avxiz-vtvcp.biz
                                  127.0.0.1 www.avxiz-vtvcp.biz
                                  127.0.0.1 avxiz-ygco.biz
                                  127.0.0.1 www.avxiz-ygco.biz
                                  127.0.0.1 avxiz-zqav.biz
                                  127.0.0.1 www.avxiz-zqav.biz
                                  127.0.0.1 av-xp-08.com
                                  127.0.0.1 www.av-xp-08.com
                                  127.0.0.1 www.awarenesstech.com
                                  127.0.0.1 awarenesstech.com
                                  127.0.0.1 www.awarninglist.com
                                  127.0.0.1 awarninglist.com
                                  127.0.0.1 awbeta.net-nucleus.com
                                  127.0.0.1 www.awesomehomepage.com
                                  127.0.0.1 awesomehomepage.com
                                  127.0.0.1 awmcash.biz
                                  127.0.0.1 awmdabest.com
                                  127.0.0.1 www.axemediasoftware.com
                                  127.0.0.1 axemediasoftware.com
                                  127.0.0.1 www.aximageobject.com
                                  127.0.0.1 aximageobject.com
                                  127.0.0.1 www.axmediaproject.com
                                  127.0.0.1 axmediaproject.com
                                  127.0.0.1 www.axmediasoftware.com
                                  127.0.0.1 axmediasoftware.com
                                  127.0.0.1 www.axmediasolutions.com
                                  127.0.0.1 axmediasolutions.com
                                  127.0.0.1 www.axobjectpage.com
                                  127.0.0.1 axobjectpage.com
                                  127.0.0.1 www.axobjectsource.com
                                  127.0.0.1 axobjectsource.com
                                  127.0.0.1 www.axsoftwaretool.com
                                  127.0.0.1 axsoftwaretool.com
                                  127.0.0.1 www.axvideoproject.com
                                  127.0.0.1 axvideoproject.com
                                  127.0.0.1 www.axvideosetup.com
                                  127.0.0.1 axvideosetup.com
                                  127.0.0.1 ayakawamura.com
                                  127.0.0.1 ayb.dns-look-up.com
                                  127.0.0.1 ayb.netbios-wait.com
                                  127.0.0.1 ayumitaniguchi.com
                                  127.0.0.1 azebar.com
                                  127.0.0.1 azureusclub.com
                                  127.0.0.1 www.azureusclub.com
                                  127.0.0.1 azureus-freebie.com
                                  127.0.0.1 www.azureus-freebie.com
                                  127.0.0.1 www.azzetta.it
                                  127.0.0.1 azzetta.it
                                  127.0.0.1 b.casalemedia.com
                                  127.0.0.1 b122.mcboo.com
                                  127.0.0.1 b128.bundlext.com
                                  127.0.0.1 b148.bundlext.com
                                  127.0.0.1 b152.bundlext.com
                                  127.0.0.1 b155.bundlext.com
                                  127.0.0.1 b156.bundlext.com
                                  127.0.0.1 www.babe.k-lined.com
                                  127.0.0.1 babe.k-lined.com
                                  127.0.0.1 www.babe.the-killer.bz
                                  127.0.0.1 babe.the-killer.bz
                                  127.0.0.1 www.babenet.com
                                  127.0.0.1 babenet.com
                                  127.0.0.1 www.babespornmag.com
                                  127.0.0.1 babespornmag.com
                                  127.0.0.1 www.babeweb.de
                                  127.0.0.1 babeweb.de
                                  127.0.0.1 www.baccarat-other.info
                                  127.0.0.1 baccarat-other.info
                                  127.0.0.1 www.backstripgirls.com
                                  127.0.0.1 backstripgirls.com
                                  127.0.0.1 backup.mabou.org
                                  127.0.0.1 www.baiduqqsina.cn
                                  127.0.0.1 baiduqqsina.cn
                                  127.0.0.1 www.balotierra.com
                                  127.0.0.1 balotierra.com
                                  127.0.0.1 bannedhost.net
                                  127.0.0.1 barbudafarms.com
                                  127.0.0.1 www.bardownload.com
                                  127.0.0.1 bardownload.com
                                  127.0.0.1 barnandfence.com
                                  127.0.0.1 basteln.at
                                  127.0.0.1 www.basteln.at
                                  127.0.0.1 www.basteln-heute.com
                                  127.0.0.1 basteln-heute.com
                                  127.0.0.1 basteln-und-heimwerken.com
                                  127.0.0.1 www.basteln-und-heimwerken.com
                                  127.0.0.1 batsearch.com
                                  127.0.0.1 baygraphicsllc.com
                                  127.0.0.1 bb.wudiliuliang.com
                                  127.0.0.1 bbbsearch.com
                                  127.0.0.1 bb-search.com
                                  127.0.0.1 www.bcnproduction.com
                                  127.0.0.1 bcnproduction.com
                                  127.0.0.1 bdsmlibrary.net
                                  127.0.0.1 www.bdsmpornmag.com
                                  127.0.0.1 bdsmpornmag.com
                                  127.0.0.1 www.bearshare.click-new-download.com
                                  127.0.0.1 bearshare.click-new-download.com
                                  127.0.0.1 www.bearshare.download-me.info
                                  127.0.0.1 bearshare.download-me.info
                                  127.0.0.1 www.bearshare.mp3-muzic.com
                                  127.0.0.1 bearshare.mp3-muzic.com
                                  127.0.0.1 bearshare-download.org
                                  127.0.0.1 www.bearshare-download.org
                                  127.0.0.1 bearshare-downloads.net
                                  127.0.0.1 www.bearshare-downloads.net
                                  127.0.0.1 www.bearsharelive.co.uk
                                  127.0.0.1 bearsharelive.co.uk
                                  127.0.0.1 www.bearshare-music-downloads.com
                                  127.0.0.1 bearshare-music-downloads.com
                                  127.0.0.1 bearsharepro2007.com
                                  127.0.0.1 www.bearsharepro2007.com
                                  127.0.0.1 bearshare-usa.com
                                  127.0.0.1 www.bearshare-usa.com
                                  127.0.0.1 bedhome.com
                                  127.0.0.1 bediadance.com
                                  127.0.0.1 www.beebappyy.biz
                                  127.0.0.1 beebappyy.biz
                                  127.0.0.1 www.begin2search.com
                                  127.0.0.1 begin2search.com
                                  127.0.0.1 bellabasketsfl.com
                                  127.0.0.1 www.benzin-billiger.net
                                  127.0.0.1 benzin-billiger.net
                                  127.0.0.1 bernaolatwin.com
                                  127.0.0.1 www.berufe-beratung.de
                                  127.0.0.1 berufe-beratung.de
                                  127.0.0.1 www.berufe-info.com
                                  127.0.0.1 berufe-info.com
                                  127.0.0.1 www.berufe-jobs.de
                                  127.0.0.1 berufe-jobs.de
                                  127.0.0.1 www.berufe-server.de
                                  127.0.0.1 berufe-server.de
                                  127.0.0.1 www.berufe-testen.de
                                  127.0.0.1 berufe-testen.de
                                  127.0.0.1 www.berufe-wahl.com
                                  127.0.0.1 berufe-wahl.com
                                  127.0.0.1 www.berufe-welt.de
                                  127.0.0.1 berufe-welt.de
                                  127.0.0.1 www.berufs-wahl.com
                                  127.0.0.1 berufs-wahl.com
                                  127.0.0.1 www.berufs-wahl.de
                                  127.0.0.1 berufs-wahl.de
                                  127.0.0.1 www.beruijindegunhadesun.com
                                  127.0.0.1 beruijindegunhadesun.com
                                  127.0.0.1 www.bescoro.com
                                  127.0.0.1 bescoro.com
                                  127.0.0.1 www.best3xclips.com
                                  127.0.0.1 best3xclips.com
                                  127.0.0.1 www.bestadults.com
                                  127.0.0.1 bestadults.com
                                  127.0.0.1 www.best-codec.com
                                  127.0.0.1 best-codec.com
                                  127.0.0.1 best-counter.com
                                  127.0.0.1 bestcrawler.com
                                  127.0.0.1 www.bestdailyvids.com
                                  127.0.0.1 bestdailyvids.com
                                  127.0.0.1 bestfor.ru
                                  127.0.0.1 bestfuckvids.com
                                  127.0.0.1 www.bestfuckvids.com
                                  127.0.0.1 best-hardpics.com
                                  127.0.0.1 www.bestmanage.org
                                  127.0.0.1 bestmanage.org
                                  127.0.0.1 www.bestmanage0.org
                                  127.0.0.1 bestmanage0.org
                                  127.0.0.1 www.bestmanage1.org
                                  127.0.0.1 bestmanage1.org
                                  127.0.0.1 www.bestmanage2.org
                                  127.0.0.1 bestmanage2.org
                                  127.0.0.1 bestmanage3.org
                                  127.0.0.1 www.bestmanage3.org
                                  127.0.0.1 bestmanage4.org
                                  127.0.0.1 www.bestmanage4.org
                                  127.0.0.1 www.bestmanage5.org
                                  127.0.0.1 bestmanage5.org
                                  127.0.0.1 bestmanage6.org
                                  127.0.0.1 www.bestmanage6.org
                                  127.0.0.1 www.bestmanage7.org
                                  127.0.0.1 bestmanage7.org
                                  127.0.0.1 bestmanage8.org
                                  127.0.0.1 www.bestmanage8.org
                                  127.0.0.1 bestmanage9.org
                                  127.0.0.1 www.bestmanage9.org
                                  127.0.0.1 www.bestmovszone.com
                                  127.0.0.1 bestmovszone.com
                                  127.0.0.1 bestnetwok.net
                                  127.0.0.1 www.bestnetwok.net
                                  127.0.0.1 bestnetwork.net
                                  127.0.0.1 www.bestnetwork.net
                                  127.0.0.1 www.bestoffersnetworks.com
                                  127.0.0.1 bestoffersnetworks.com
                                  127.0.0.1 www.best-porncollection.com
                                  127.0.0.1 best-porncollection.com
                                  127.0.0.1 bestporngate.com
                                  127.0.0.1 www.bestsafetyguide.net
                                  127.0.0.1 bestsafetyguide.net
                                  127.0.0.1 www.bestsearch.cc
                                  127.0.0.1 bestsearch.cc
                                  127.0.0.1 bestsearchworld.info
                                  127.0.0.1 www.bestsearchworld.info
                                  127.0.0.1 www.best-spyware.info
                                  127.0.0.1 best-spyware.info
                                  127.0.0.1 best-targeted-traffic.com
                                  127.0.0.1 www.best-targeted-traffic.com
                                  127.0.0.1 best-voyeur.info
                                  127.0.0.1 www.best-voyeur.info
                                  127.0.0.1 bestweblinks.com
                                  127.0.0.1 best-winning-casino.com
                                  127.0.0.1 www.bestworldgirls-for-u.net
                                  127.0.0.1 bestworldgirls-for-u.net
                                  127.0.0.1 www.bestxclips.com
                                  127.0.0.1 bestxclips.com
                                  127.0.0.1 bestxporno.com
                                  127.0.0.1 www.bestxxxmpegs.com
                                  127.0.0.1 bestxxxmpegs.com
                                  127.0.0.1 www.bettersearch.biz
                                  127.0.0.1 bettersearch.biz
                                  127.0.0.1 www.bewerbo.com
                                  127.0.0.1 bewerbo.com
                                  127.0.0.1 www.bewerbungsexperte.com
                                  127.0.0.1 bewerbungsexperte.com
                                  127.0.0.1 www.bgazzetta.it
                                  127.0.0.1 bgazzetta.it
                                  127.0.0.1 www.bgoogle.it
                                  127.0.0.1 bgoogle.it
                                  127.0.0.1 www.bigcodecadult.com
                                  127.0.0.1 bigcodecadult.com
                                  127.0.0.1 bigcodecadult2008.com
                                  127.0.0.1 www.bigcodecadult2008.com
                                  127.0.0.1 bigcodecadult2008-17.com
                                  127.0.0.1 www.bigcodecadult2008-17.com
                                  127.0.0.1 bighot18adult2008.com
                                  127.0.0.1 www.bighot18adult2008.com
                                  127.0.0.1 www.bighot18-adult2008.com
                                  127.0.0.1 bighot18-adult2008.com
                                  127.0.0.1 www.bighot18codec2008.com
                                  127.0.0.1 bighot18codec2008.com
                                  127.0.0.1 bighot18-codec2008.com
                                  127.0.0.1 www.bighot18-codec2008.com
                                  127.0.0.1 www.bigtrafficnetwork.com
                                  127.0.0.1 bigtrafficnetwork.com
                                  127.0.0.1 www.bigwww.com
                                  127.0.0.1 bigwww.com
                                  127.0.0.1 www.bill.de
                                  127.0.0.1 bill.de
                                  127.0.0.1 bin.errorprotector.com
                                  127.0.0.1 bins.media-motor.net
                                  127.0.0.1 bins2.media-motor.net
                                  127.0.0.1 bis.180solutions.com
                                  127.0.0.1 bitchesonline.net
                                  127.0.0.1 www.bitcomet-freebie.com
                                  127.0.0.1 bitcomet-freebie.com
                                  127.0.0.1 www.bittorrent.click-new-download.com
                                  127.0.0.1 bittorrent.click-new-download.com
                                  127.0.0.1 biz.biz
                                  127.0.0.1 www.bkvcompany.com
                                  127.0.0.1 bkvcompany.com
                                  127.0.0.1 blackblues00.com
                                  127.0.0.1 www.blackblues00.com
                                  127.0.0.1 blackcodec.com
                                  127.0.0.1 www.blackcodec.com
                                  127.0.0.1 www.black-codec.com
                                  127.0.0.1 black-codec.com
                                  127.0.0.1 www.blackcodec.net
                                  127.0.0.1 blackcodec.net
                                  127.0.0.1 www.blackhats.tc
                                  127.0.0.1 blackhats.tc
                                  127.0.0.1 www.blackhawksoftware.com
                                  127.0.0.1 blackhawksoftware.com
                                  127.0.0.1 blackjack-free.net
                                  127.0.0.1 www.blacklegion.info
                                  127.0.0.1 blacklegion.info
                                  127.0.0.1 blazefind.com
                                  127.0.0.1 blender.xu.pl
                                  127.0.0.1 www.blockcheckercontrol.com
                                  127.0.0.1 blockcheckercontrol.com
                                  127.0.0.1 blondetgp.com
                                  127.0.0.1 www.blue-elefant.com
                                  127.0.0.1 blue-elefant.com
                                  127.0.0.1 www.bm.theaimonline.com
                                  127.0.0.1 bm.theaimonline.com
                                  127.0.0.1 www.bnmgate.com
                                  127.0.0.1 bnmgate.com
                                  127.0.0.1 bodaciousbabette.com
                                  127.0.0.1 www.bonzi.com
                                  127.0.0.1 bonzi.com
                                  127.0.0.1 boobdoll.com
                                  127.0.0.1 boobsandtits.com
                                  127.0.0.1 boobsclub.com
                                  127.0.0.1 www.bookedspace.com
                                  127.0.0.1 bookedspace.com
                                  127.0.0.1 www.boom.com.vn
                                  127.0.0.1 boom.com.vn
                                  127.0.0.1 www.boomgirltv.com
                                  127.0.0.1 boomgirltv.com
                                  127.0.0.1 boredlife.com
                                  127.0.0.1 bowlofogumbo.com
                                  127.0.0.1 www.bpfq02.com
                                  127.0.0.1 bpfq02.com
                                  127.0.0.1 www.bqgate.com
                                  127.0.0.1 bqgate.com
                                  127.0.0.1 br.errorsafe.com
                                  127.0.0.1 br.winantivirus.com
                                  127.0.0.1 br.winfixer.com
                                  127.0.0.1 bradcoem.org
                                  127.0.0.1 www.braincodec.com
                                  127.0.0.1 braincodec.com
                                  127.0.0.1 www.brakecodec.com
                                  127.0.0.1 brakecodec.com
                                  127.0.0.1 www.brakecodec.net
                                  127.0.0.1 brakecodec.net
                                  127.0.0.1 brandiyoung.com
                                  127.0.0.1 www.bravesentry.com
                                  127.0.0.1 bravesentry.com
                                  127.0.0.1 www.breenten.biz
                                  127.0.0.1 breenten.biz
                                  127.0.0.1 www.brodbfm.net
                                  127.0.0.1 brodbfm.net
                                  127.0.0.1 brookeburn.com
                                  127.0.0.1 www.browserwise.com
                                  127.0.0.1 browserwise.com
                                  127.0.0.1 bsa.safetydownload.com
                                  127.0.0.1 www.bsplaycodec.com
                                  127.0.0.1 bsplaycodec.com
                                  127.0.0.1 bucps.com
                                  127.0.0.1 buhartes.info
                                  127.0.0.1 buldog-stats.com
                                  127.0.0.1 www.bullseye-network.com
                                  127.0.0.1 bullseye-network.com
                                  127.0.0.1 www.bundlext.com
                                  127.0.0.1 bundlext.com
                                  127.0.0.1 burgerkingbigscreen.com
                                  127.0.0.1 www.burningsite.com
                                  127.0.0.1 burningsite.com
                                  127.0.0.1 www.burnsrecyclinginc.com
                                  127.0.0.1 burnsrecyclinginc.com
                                  127.0.0.1 buscards.net
                                  127.0.0.1 bustyrussell.com
                                  127.0.0.1 www.busysearch.net
                                  127.0.0.1 busysearch.net
                                  127.0.0.1 buttejazz.org
                                  127.0.0.1 www.buy-find.info
                                  127.0.0.1 buy-find.info
                                  127.0.0.1 buyselldomain.net
                                  127.0.0.1 www.buytraff.biz
                                  127.0.0.1 buytraff.biz
                                  127.0.0.1 buz.ru
                                  127.0.0.1 www.bvdtechinque.com
                                  127.0.0.1 bvdtechinque.com
                                  127.0.0.1 www.bvirgilio.it
                                  127.0.0.1 bvirgilio.it
                                  127.0.0.1 www.bye-spyware.com
                                  127.0.0.1 bye-spyware.com
                                  127.0.0.1 by-fotos.ifrance.com
                                  127.0.0.1 c.centralmedia.ws
                                  127.0.0.1 www.c.enhance.com
                                  127.0.0.1 c.enhance.com
                                  127.0.0.1 c.goclick.com
                                  127.0.0.1 www.c4tdownload.com
                                  127.0.0.1 c4tdownload.com
                                  127.0.0.1 www.c5.www4free.info
                                  127.0.0.1 c5.www4free.info
                                  127.0.0.1 www.cache.surfaccuracy.com
                                  127.0.0.1 cache.surfaccuracy.com
                                  127.0.0.1 cache.ysbweb.com
                                  127.0.0.1 www.cadesfinjeriokas.com
                                  127.0.0.1 cadesfinjeriokas.com
                                  127.0.0.1 calcioturris.com
                                  127.0.0.1 www.calendaralerts.net
                                  127.0.0.1 calendaralerts.net
                                  127.0.0.1 www.callinghome.biz
                                  127.0.0.1 callinghome.biz
                                  127.0.0.1 www.cameouk.co.uk
                                  127.0.0.1 cameouk.co.uk
                                  127.0.0.1 cameup.com
                                  127.0.0.1 www.camouflageclothingonline.net
                                  127.0.0.1 camouflageclothingonline.net
                                  127.0.0.1 campaigns.outerinfo.net
                                  127.0.0.1 www.camping-community.com
                                  127.0.0.1 camping-community.com
                                  127.0.0.1 camup.net
                                  127.0.0.1 canberracricketcoaching.com
                                  127.0.0.1 candycantaloupes.com
                                  127.0.0.1 www.canidetect.org
                                  127.0.0.1 canidetect.org
                                  127.0.0.1 www.cantfind.com
                                  127.0.0.1 cantfind.com
                                  127.0.0.1 careers.dulcineasystems.net
                                  127.0.0.1 carsands.com
                                  127.0.0.1 carsrentals.net
                                  127.0.0.1 cartoes.uol.com.br
                                  127.0.0.1 www.casalemedia.com
                                  127.0.0.1 casalemedia.com
                                  127.0.0.1 www.cashdeluxe.net
                                  127.0.0.1 cashdeluxe.net
                                  127.0.0.1 www.cashengines.com
                                  127.0.0.1 cashengines.com
                                  127.0.0.1 cashsearch.biz
                                  127.0.0.1 www.cashsurfers.com
                                  127.0.0.1 cashsurfers.com
                                  127.0.0.1 www.cashunlim.com
                                  127.0.0.1 cashunlim.com
                                  127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
                                  127.0.0.1 casino2win.net
                                  127.0.0.1 casino-gambling-1.net
                                  127.0.0.1 casino-gambling-2.net
                                  127.0.0.1 casinomidas.net
                                  127.0.0.1 casinonline.net
                                  127.0.0.1 casino-onlines.net
                                  127.0.0.1 www.casting.ag
                                  127.0.0.1 casting.ag
                                  127.0.0.1 www.castingsamateur.com
                                  127.0.0.1 castingsamateur.com
                                  127.0.0.1 catallogue.com
                                  127.0.0.1 www.catch-dc.info
                                  127.0.0.1 catch-dc.info
                                  127.0.0.1 categories.mygeek.com
                                  127.0.0.1 catsss.da.ru
                                  127.0.0.1 caxa.ru
                                  127.0.0.1 cazygirls-world.com
                                  127.0.0.1 cc.panet.org
                                  127.0.0.1 www.ccecaedbebfcaf.com
                                  127.0.0.1 ccecaedbebfcaf.com
                                  127.0.0.1 cclebali.org
                                  127.0.0.1 www.ccorriere.it
                                  127.0.0.1 ccorriere.it
                                  127.0.0.1 www.cdcopysite.com
                                  127.0.0.1 cdcopysite.com
                                  127.0.0.1 www.cdegate.com
                                  127.0.0.1 cdegate.com
                                  127.0.0.1 cdn.drivecleaner.com
                                  127.0.0.1 cdn.errorsafe.com
                                  127.0.0.1 cdn.movies-etc.com
                                  127.0.0.1 cdn.winsoftware.com
                                  127.0.0.1 cdn2.movies-etc.com
                                  127.0.0.1 www.cdorriere.it
                                  127.0.0.1 cdorriere.it
                                  127.0.0.1 ceewawires.org
                                  127.0.0.1 centralmedia.ws
                                  127.0.0.1 certumgroup.com
                                  127.0.0.1 www.cforriere.it
                                  127.0.0.1 cforriere.it
                                  127.0.0.1 cheapest.extra.hu
                                  127.0.0.1 check.jupitersatellites.biz
                                  127.0.0.1 www.check.jupitersatellites.biz
                                  127.0.0.1 check-deinen-sex.com
                                  127.0.0.1 www.check-deinen-sex.com
                                  127.0.0.1 www.checkin100.com
                                  127.0.0.1 checkin100.com
                                  127.0.0.1 www.checkssecurity.com
                                  127.0.0.1 checkssecurity.com
                                  127.0.0.1 www.checksystem-online.com
                                  127.0.0.1 checksystem-online.com
                                  127.0.0.1 chelancatering.com
                                  127.0.0.1 www.chenshijituan.com
                                  127.0.0.1 chenshijituan.com
                                  127.0.0.1 childrenvilla.com
                                  127.0.0.1 www.chilly3xvids.com
                                  127.0.0.1 chilly3xvids.com
                                  127.0.0.1 www.chillymovs.com
                                  127.0.0.1 chillymovs.com
                                  127.0.0.1 chips-4-free.com
                                  127.0.0.1 chrisswasey.com
                                  127.0.0.1 chriswallace.net
                                  127.0.0.1 www.cia-trjn.myvnc.com
                                  127.0.0.1 cia-trjn.myvnc.com
                                  127.0.0.1 www.cinemadownload.com
                                  127.0.0.1 cinemadownload.com
                                  127.0.0.1 www.ciorriere.it
                                  127.0.0.1 ciorriere.it
                                  127.0.0.1 www.cirriere.it
                                  127.0.0.1 cirriere.it
                                  127.0.0.1 citycodec.com
                                  127.0.0.1 www.citycodec.com
                                  127.0.0.1 city-codec.com
                                  127.0.0.1 www.city-codec.com
                                  127.0.0.1 ckick4thumbs.com
                                  127.0.0.1 cl55.biz
                                  127.0.0.1 clackamasliteraryreview.com
                                  127.0.0.1 www.clckm.com
                                  127.0.0.1 clckm.com
                                  127.0.0.1 cleancodec.com
                                  127.0.0.1 www.cleancodec.com
                                  127.0.0.1 www.cleancodec.net
                                  127.0.0.1 cleancodec.net
                                  127.0.0.1 clean-codec.net
                                  127.0.0.1 www.clean-codec.net
                                  127.0.0.1 www.cleansoftwares.com
                                  127.0.0.1 cleansoftwares.com
                                  127.0.0.1 clearsearch.cc
                                  127.0.0.1 clearsearch.net
                                  127.0.0.1 clickaire.com
                                  127.0.0.1 www.click-codec.com
                                  127.0.0.1 click-codec.com
                                  127.0.0.1 www.clickhere4search.com
                                  127.0.0.1 clickhere4search.com
                                  127.0.0.1 www.click-new-download.com
                                  127.0.0.1 click-new-download.com
                                  127.0.0.1 click-now.net
                                  127.0.0.1 www.clickspring.net
                                  127.0.0.1 clickspring.net
                                  127.0.0.1 click-to-download.com
                                  127.0.0.1 www.click-to-download.com
                                  127.0.0.1 www.clicktomakeasearch.com
                                  127.0.0.1 clicktomakeasearch.com
                                  127.0.0.1 clickyestoenter.net
                                  127.0.0.1 client.exeupdate.com
                                  127.0.0.1 client.myadultexplorer.com
                                  127.0.0.1 www.cliks.org
                                  127.0.0.1 cliks.org
                                  127.0.0.1 www.cliparts4free.com
                                  127.0.0.1 cliparts4free.com
                                  127.0.0.1 www.clipsfestival.com
                                  127.0.0.1 clipsfestival.com
                                  127.0.0.1 www.clipsreality.com
                                  127.0.0.1 clipsreality.com
                                  127.0.0.1 www.clorriere.it
                                  127.0.0.1 clorriere.it
                                  127.0.0.1 clrsch.com
                                  127.0.0.1 www.clubxxxvideo.com
                                  127.0.0.1 clubxxxvideo.com
                                  127.0.0.1 clusif.free.fr
                                  127.0.0.1 www.cluster.exaserve.net
                                  127.0.0.1 cluster.exaserve.net
                                  127.0.0.1 cmtapestry.com
                                  127.0.0.1 www.cnetadd.com
                                  127.0.0.1 cnetadd.com
                                  127.0.0.1 www.cnomy.com
                                  127.0.0.1 cnomy.com
                                  127.0.0.1 www.cnzz.com
                                  127.0.0.1 cnzz.com
                                  127.0.0.1 www.cocktails-heute.com
                                  127.0.0.1 cocktails-heute.com
                                  127.0.0.1 www.cocktails-ideen.de
                                  127.0.0.1 cocktails-ideen.de
                                  127.0.0.1 www.cocktails-rezepte.net
                                  127.0.0.1 cocktails-rezepte.net
                                  127.0.0.1 code.ignphrases.com
                                  127.0.0.1 codec.ninoa.com
                                  127.0.0.1 codecadult18.com
                                  127.0.0.1 www.codecadult18.com
                                  127.0.0.1 codecbest.com
                                  127.0.0.1 www.codecbest.com
                                  127.0.0.1 codecbsplay.com
                                  127.0.0.1 www.codecbsplay.com
                                  127.0.0.1 www.codecdemo.com
                                  127.0.0.1 codecdemo.com
                                  127.0.0.1 www.codecdvd.net
                                  127.0.0.1 codecdvd.net
                                  127.0.0.1 codecdvi.com
                                  127.0.0.1 www.codecdvi.com
                                  127.0.0.1 www.codec-fun.com
                                  127.0.0.1 codec-fun.com
                                  127.0.0.1 www.codechard.com
                                  127.0.0.1 codechard.com
                                  127.0.0.1 www.codechot.net
                                  127.0.0.1 codechot.net
                                  127.0.0.1 www.codechq.net
                                  127.0.0.1 codechq.net
                                  127.0.0.1 www.codecmeg.net
                                  127.0.0.1 codecmeg.net
                                  127.0.0.1 www.codecmega.com
                                  127.0.0.1 codecmega.com
                                  127.0.0.1 www.codecmega.net
                                  127.0.0.1 codecmega.net
                                  127.0.0.1 www.codecmoon.com
                                  127.0.0.1 codecmoon.com
                                  127.0.0.1 www.codecmpg.com
                                  127.0.0.1 codecmpg.com
                                  127.0.0.1 www.codecnice.net
                                  127.0.0.1 codecnice.net
                                  127.0.0.1 www.codecnitro.com
                                  127.0.0.1 codecnitro.com
                                  127.0.0.1 www.codecops.net
                                  127.0.0.1 codecops.net
                                  127.0.0.1 www.codecplay.com
                                  127.0.0.1 codecplay.com
                                  127.0.0.1 www.codecpretty.net
                                  127.0.0.1 codecpretty.net
                                  127.0.0.1 www.codecpro.net
                                  127.0.0.1 codecpro.net
                                  127.0.0.1 www.codecred.net
                                  127.0.0.1 codecred.net
                                  127.0.0.1 www.codecsoft.net
                                  127.0.0.1 codecsoft.net
                                  127.0.0.1 www.codecthe.com
                                  127.0.0.1 codecthe.com
                                  127.0.0.1 www.codectime.com
                                  127.0.0.1 codectime.com
                                  127.0.0.1 www.codecultra.net
                                  127.0.0.1 codecultra.net
                                  127.0.0.1 www.codecvids.com
                                  127.0.0.1 codecvids.com
                                  127.0.0.1 www.codecvip.com
                                  127.0.0.1 codecvip.com
                                  127.0.0.1 www.codecviva.com
                                  127.0.0.1 codecviva.com
                                  127.0.0.1 www.codeczang.net
                                  127.0.0.1 codeczang.net
                                  127.0.0.1 www.codrriere.it
                                  127.0.0.1 codrriere.it
                                  127.0.0.1 www.coeriere.it
                                  127.0.0.1 coeriere.it
                                  127.0.0.1 www.coerriere.it
                                  127.0.0.1 coerriere.it
                                  127.0.0.1 www.cofrriere.it
                                  127.0.0.1 cofrriere.it
                                  127.0.0.1 www.cogrriere.it
                                  127.0.0.1 cogrriere.it
                                  127.0.0.1 www.coirriere.it
                                  127.0.0.1 coirriere.it
                                  127.0.0.1 www.comissur.com
                                  127.0.0.1 comissur.com
                                  127.0.0.1 command.adservs.com
                                  127.0.0.1 www.commonname.com
                                  127.0.0.1 commonname.com
                                  127.0.0.1 www.comparespywareremover.org
                                  127.0.0.1 comparespywareremover.org
                                  127.0.0.1 www.computerpcgames.net
                                  127.0.0.1 computerpcgames.net
                                  127.0.0.1 www.computerrecover.com
                                  127.0.0.1 computerrecover.com
                                  127.0.0.1 www.condome.tv
                                  127.0.0.1 condome.tv
                                  127.0.0.1 config.180solutions.com
                                  127.0.0.1 www.congtouzailai.net
                                  127.0.0.1 congtouzailai.net
                                  127.0.0.1 www.consumers-reviews.net
                                  127.0.0.1 consumers-reviews.net
                                  127.0.0.1 www.content.dollarrevenue.com
                                  127.0.0.1 content.dollarrevenue.com
                                  127.0.0.1 www.content.ireit.com
                                  127.0.0.1 content.ireit.com
                                  127.0.0.1 content.onerateld.com
                                  127.0.0.1 www.contentmatch.net
                                  127.0.0.1 contentmatch.net
                                  127.0.0.1 www.contextplus.net
                                  127.0.0.1 contextplus.net
                                  127.0.0.1 www.contra-virus.com
                                  127.0.0.1 contra-virus.com
                                  127.0.0.1 www.controlmeh.com
                                  127.0.0.1 controlmeh.com
                                  127.0.0.1 www.controlpage.info
                                  127.0.0.1 controlpage.info
                                  127.0.0.1 www.convenient-search.com
                                  127.0.0.1 convenient-search.com
                                  127.0.0.1 www.cookingluck.com
                                  127.0.0.1 cookingluck.com
                                  127.0.0.1 www.cooldeskalert.com
                                  127.0.0.1 cooldeskalert.com
                                  127.0.0.1 coole-tattoos.de
                                  127.0.0.1 www.coole-tattoos.de
                                  127.0.0.1 coolfetishsite.com
                                  127.0.0.1 coolfreehost.com
                                  127.0.0.1 coolfreepage.com
                                  127.0.0.1 coolfreepages.com
                                  127.0.0.1 cool-homepage.co
                                  127.0.0.1 cool-homepage.com
                                  127.0.0.1 coolmoneysearch.com
                                  127.0.0.1 www.coolonlinebusiness.com
                                  127.0.0.1 coolonlinebusiness.com
                                  127.0.0.1 coolpornsearch.com
                                  127.0.0.1 cool-search.net
                                  127.0.0.1 cool-search.netfartpost.com
                                  127.0.0.1 coolsearcher.info
                                  127.0.0.1 coolservecorp.net
                                  127.0.0.1 www.coolservecorp.net
                                  127.0.0.1 coolwebsearch.com
                                  127.0.0.1 www.coolwebsearch.com
                                  127.0.0.1 cool-web-search.com
                                  127.0.0.1 coolwebsearsh.com
                                  127.0.0.1 www.coolwwwsearch.com
                                  127.0.0.1 coolwwwsearch.com
                                  127.0.0.1 cool-xxx.net
                                  127.0.0.1 www.coorriere.it
                                  127.0.0.1 coorriere.it
                                  127.0.0.1 copmtraine.com
                                  127.0.0.1 www.coprriere.it
                                  127.0.0.1 coprriere.it
                                  127.0.0.1 www.core.psyche-evolution.com
                                  127.0.0.1 core.psyche-evolution.com
                                  127.0.0.1 www.coreiere.it
                                  127.0.0.1 coreiere.it
                                  127.0.0.1 www.coreriere.it
                                  127.0.0.1 coreriere.it
                                  127.0.0.1 www.corrdiere.it
                                  127.0.0.1 corrdiere.it
                                  127.0.0.1 www.correiere.it
                                  127.0.0.1 correiere.it
                                  127.0.0.1 www.corrfiere.it
                                  127.0.0.1 corrfiere.it
                                  127.0.0.1 www.corrgiere.it
                                  127.0.0.1 corrgiere.it
                                  127.0.0.1 www.corridere.it
                                  127.0.0.1 corridere.it
                                  127.0.0.1 www.corriedre.it
                                  127.0.0.1 corriedre.it
                                  127.0.0.1 www.corriee.it
                                  127.0.0.1 corriee.it
                                  127.0.0.1 www.corrieere.it
                                  127.0.0.1 corrieere.it
                                  127.0.0.1 www.corriefre.it
                                  127.0.0.1 corriefre.it
                                  127.0.0.1 www.corriegre.it
                                  127.0.0.1 corriegre.it
                                  127.0.0.1 www.corrierde.it
                                  127.0.0.1 corrierde.it
                                  127.0.0.1 www.corriered.it
                                  127.0.0.1 corriered.it
                                  127.0.0.1 www.corrieree.it
                                  127.0.0.1 corrieree.it
                                  127.0.0.1 www.corrieref.it
                                  127.0.0.1 corrieref.it
                                  127.0.0.1 www.corrierer.it
                                  127.0.0.1 corrierer.it
                                  127.0.0.1 www.corrieres.it
                                  127.0.0.1 corrieres.it
                                  127.0.0.1 www.corrierew.it
                                  127.0.0.1 corrierew.it
                                  127.0.0.1 www.corrierfe.it
                                  127.0.0.1 corrierfe.it
                                  127.0.0.1 www.corrierge.it
                                  127.0.0.1 corrierge.it
                                  127.0.0.1 www.corrierr.it
                                  127.0.0.1 corrierr.it
                                  127.0.0.1 www.corrierre.it
                                  127.0.0.1 corrierre.it
                                  127.0.0.1 www.corrierse.it
                                  127.0.0.1 corrierse.it
                                  127.0.0.1 www.corrierte.it
                                  127.0.0.1 corrierte.it
                                  127.0.0.1 www.corrierw.it
                                  127.0.0.1 corrierw.it
                                  127.0.0.1 www.corrierwe.it
                                  127.0.0.1 corrierwe.it
                                  127.0.0.1 www.corriesre.it
                                  127.0.0.1 corriesre.it
                                  127.0.0.1 www.corriete.it
                                  127.0.0.1 corriete.it
                                  127.0.0.1 www.corrietre.it
                                  127.0.0.1 corrietre.it
                                  127.0.0.1 www.corriewre.it
                                  127.0.0.1 corriewre.it
                                  127.0.0.1 www.corrifere.it
                                  127.0.0.1 corrifere.it
                                  127.0.0.1 www.corriiere.it
                                  127.0.0.1 corriiere.it
                                  127.0.0.1 www.corrilere.it
                                  127.0.0.1 corrilere.it
                                  127.0.0.1 www.corrioere.it
                                  127.0.0.1 corrioere.it
                                  127.0.0.1 www.corrire.it
                                  127.0.0.1 corrire.it
                                  127.0.0.1 www.corrirere.it
                                  127.0.0.1 corrirere.it
                                  127.0.0.1 www.corrirre.it
                                  127.0.0.1 corrirre.it
                                  127.0.0.1 www.corrisere.it
                                  127.0.0.1 corrisere.it
                                  127.0.0.1 www.corriuere.it
                                  127.0.0.1 corriuere.it
                                  127.0.0.1 www.corriwere.it
                                  127.0.0.1 corriwere.it
                                  127.0.0.1 www.corriwre.it
                                  127.0.0.1 corriwre.it
                                  127.0.0.1 www.corrliere.it
                                  127.0.0.1 corrliere.it
                                  127.0.0.1 www.corroere.it
                                  127.0.0.1 corroere.it
                                  127.0.0.1 www.corroiere.it
                                  127.0.0.1 corroiere.it
                                  127.0.0.1 www.corrriere.it
                                  127.0.0.1 corrriere.it
                                  127.0.0.1 www.corrtiere.it
                                  127.0.0.1 corrtiere.it
                                  127.0.0.1 www.corruere.it
                                  127.0.0.1 corruere.it
                                  127.0.0.1 www.corruiere.it
                                  127.0.0.1 corruiere.it
                                  127.0.0.1 www.cortiere.it
                                  127.0.0.1 cortiere.it
                                  127.0.0.1 www.cortriere.it
                                  127.0.0.1 cortriere.it
                                  127.0.0.1 www.costrike.com
                                  127.0.0.1 costrike.com
                                  127.0.0.1 www.cotriere.it
                                  127.0.0.1 cotriere.it
                                  127.0.0.1 www.cotrriere.it
                                  127.0.0.1 cotrriere.it
                                  127.0.0.1 couldnotfind.com
                                  127.0.0.1 count.cc
                                  127.0.0.1 count.hitscount.net
                                  127.0.0.1 count-all.com
                                  127.0.0.1 www.countdutycall.info
                                  127.0.0.1 countdutycall.info
                                  127.0.0.1 counter.sexmaniack.com
                                  127.0.0.1 www.courtrecordslookup.com
                                  127.0.0.1 courtrecordslookup.com
                                  127.0.0.1 www.cporriere.it
                                  127.0.0.1 cporriere.it
                                  127.0.0.1 www.cprriere.it
                                  127.0.0.1 cprriere.it
                                  127.0.0.1 cpvfeed.com
                                  127.0.0.1 cracks.me.uk
                                  127.0.0.1 www.cracks4all.com
                                  127.0.0.1 cracks4all.com
                                  127.0.0.1 www.crapsgold.info
                                  127.0.0.1 crapsgold.info
                                  127.0.0.1 www.crazygirls-world.com
                                  127.0.0.1 crazygirls-world.com
                                  127.0.0.1 www.crazywinnings.com
                                  127.0.0.1 crazywinnings.com
                                  127.0.0.1 creamedcutties.com
                                  127.0.0.1 www.createaccesskey.com
                                  127.0.0.1 createaccesskey.com
                                  127.0.0.1 www.creatonsoft.com
                                  127.0.0.1 creatonsoft.com
                                  127.0.0.1 creditsearchonline.com
                                  127.0.0.1 crestring.com
                                  127.0.0.1 crooder.com
                                  127.0.0.1 www.crriere.it
                                  127.0.0.1 crriere.it
                                  127.0.0.1 www.cryptdrive.com
                                  127.0.0.1 cryptdrive.com
                                  127.0.0.1 www.crystalysmedia.com
                                  127.0.0.1 crystalysmedia.com
                                  127.0.0.1 www.csx.adservs.com
                                  127.0.0.1 csx.adservs.com
                                  127.0.0.1 cts.180solutions.com
                                  127.0.0.1 www.cuisinartoven.com
                                  127.0.0.1 cuisinartoven.com
                                  127.0.0.1 www.curedc.info
                                  127.0.0.1 curedc.info
                                  127.0.0.1 www.curepcsolutions.com
                                  127.0.0.1 curepcsolutions.com
                                  127.0.0.1 curvedspaces.com
                                  127.0.0.1 www.cutadult.com
                                  127.0.0.1 cutadult.com
                                  127.0.0.1 www.cutoffspywar
                                  0
                                  1. Hi,

                                    Fait moi un nouvelle hijackthis.

                                    Alut.
                                    0
                                    1. Voilà:

                                      Logfile of Trend Micro HijackThis v2.0.2
                                      Scan saved at 01:55:47, on 17/11/2008
                                      Platform: Windows XP SP3 (WinNT 5.01.2600)
                                      MSIE: Internet Explorer v7.00 (7.00.6000.16735)
                                      Boot mode: Normal

                                      Running processes:
                                      C:\WINDOWS\System32\smss.exe
                                      C:\WINDOWS\system32\winlogon.exe
                                      C:\WINDOWS\system32\services.exe
                                      C:\WINDOWS\system32\lsass.exe
                                      C:\WINDOWS\system32\Ati2evxx.exe
                                      C:\WINDOWS\system32\svchost.exe
                                      C:\WINDOWS\System32\svchost.exe
                                      C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
                                      C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
                                      C:\WINDOWS\system32\Ati2evxx.exe
                                      C:\WINDOWS\Explorer.EXE
                                      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                                      C:\WINDOWS\system32\spoolsv.exe
                                      C:\Program Files\a-squared Free\a2service.exe
                                      C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
                                      C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                                      C:\Acer\Empowering Technology\eRecovery\Monitor.exe
                                      C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
                                      C:\Acer\Empowering Technology\admtray.exe
                                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                      C:\WINDOWS\RTHDCPL.EXE
                                      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                                      C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
                                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                                      C:\WINDOWS\system32\ctfmon.exe
                                      C:\Program Files\Bonjour\mDNSResponder.exe
                                      C:\PROGRA~1\NORTON~1\NSR\Agent\VProSvc.exe
                                      C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
                                      C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
                                      C:\WINDOWS\system32\svchost.exe
                                      C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
                                      C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
                                      C:\Program Files\RamBoost XP\rambxpfr.exe
                                      C:\DOCUME~1\Cyprien\LOCALS~1\Temp\RtkBtMnt.exe
                                      C:\Acer\Empowering Technology\admServ.exe
                                      C:\WINDOWS\system32\wbem\unsecapp.exe
                                      C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
                                      C:\Program Files\Trend Micro\HijackThis\HJT.exe
                                      C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe

                                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
                                      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                                      O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
                                      O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
                                      O4 - HKLM\..\Run: [LaunchApp] Alaunch
                                      O4 - HKLM\..\Run: [MSPY2002] "C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" /SYNC
                                      O4 - HKLM\..\Run: [eDataSecurity Loader] "C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe"
                                      O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
                                      O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
                                      O4 - HKLM\..\Run: [eRecoveryService] "C:\Acer\Empowering Technology\eRecovery\Monitor.exe"
                                      O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
                                      O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                                      O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                                      O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
                                      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                                      O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
                                      O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
                                      O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
                                      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                                      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                                      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                                      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                                      O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                                      O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                                      O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                                      O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
                                      O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
                                      O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                                      O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                                      O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                                      O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
                                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                                      O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks Premier\Norton Cleanup\WCQuick.lnk
                                      O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - C:\Program Files\Norton SystemWorks Premier\Norton Cleanup\WCQuick.lnk
                                      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
                                      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                      O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab
                                      O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
                                      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
                                      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
                                      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
                                      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
                                      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                                      O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
                                      O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                                      O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                                      O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
                                      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                                      O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                                      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                      O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
                                      O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
                                      O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                                      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
                                      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
                                      O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
                                      O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
                                      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                      O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
                                      O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
                                      O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
                                      O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
                                      O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
                                      O23 - Service: Norton Save and Restore - Symantec Corporation - C:\PROGRA~1\NORTON~1\NSR\Agent\VProSvc.exe
                                      O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
                                      O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
                                      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe (file missing)
                                      O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
                                      O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
                                      O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
                                      O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
                                      O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
                                      O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
                                      0
                                      1. Hi,

                                        pour toi c'est bon.

                                        Télécharge toolscleaner sur ton Bureau :

                                        toolscleaner

                                        * Double-clique sur ToolsCleaner2.exe et laisse le travailler
                                        * Clique sur Recherche et laisse le scan se terminer.
                                        * Clique sur Suppression pour finaliser.
                                        * Tu peux, si tu le souhaites, te servir des Options facultatives.
                                        * Clique sur Quitter, pour que le rapport puisse se créer.
                                        * Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse

                                        Désactive et réactive la Restauration du système :

                                        1 Dans la barre des tâches de Windows, clique sur Démarrer.

                                        2 Clique avec le bouton droit de la souris sur Poste de travail puis clique sur Propriétés.

                                        3 Dans l'onglet Restauration du système, coche "Désactiver la Restauration du système"

                                        4 Clique sur Appliquer.

                                        5 Ensuite décoche "Désactiver la restauration du systeme"

                                        6 clique sur appliquer puis ok

                                        7 vas créer un point de restauration dans accessoires----outils systeme----restauration du systeme.

                                        Alut.
                                        0
                                        • 1
                                        • 2