You have a security problem !

tyfu -  
Bonjour,

Ce message apparait sans cesse "You have a security problem !"
Après avoir nettoyer le système comme indiqué dans le forum "Analyser, interpréter un log HijackThis et agir en conséquence" publié par Jeff ( Bravo pour la clarté du Tutoriel ! )
Voici le rapport Hijackthis

Je vous remercie d'avance de me tirer d'embarras

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:54:57, on 24/11/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16757)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\vsnp2std.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\conime.exe
C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
C:\Users\Tony\AppData\Local\Temp\~tmpa.exe
C:\Windows\system32\regsvr32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: searchersmart search enhancer - {247E05CF-35BE-C43A-A61D-51BC4B11B5D8} - C:\Windows\system32\lfmbvmqfkntoibp.dll
O2 - BHO: 892267 helper - {25E0128D-AAFC-49FF-AB11-1F12C2FCC391} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O2 - BHO: offersfortoday browser enhancer - {EE01C848-FBCD-9D47-66D3-BD284CB5FFC6} - C:\Windows\system32\pudyiuallzdcw.dll
O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O3 - Toolbar: (no name) - {92162A1C-A9E3-4C0C-BCDC-2996E8406887} - (no file)
O3 - Toolbar: (no name) - {70CC76D5-A4EE-4F25-9931-B109A63E298E} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O4 - HKLM\..\Run: [snp2std] C:\Windows\vsnp2std.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\Windows\system32\spool\drivers\w32x86\3\hpztsb06.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [kshfqjugwa] C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\pudyiuallzdcw.dll"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [lphcep2j0elfc] C:\Windows\system32\lphcep2j0elfc.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Cognac] C:\Users\Tony\AppData\Local\Temp\~tmpb.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [MSFox] C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O17 - HKLM\System\CCS\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
O17 - HKLM\System\CCS\Services\Tcpip\..\{F555EB53-4738-4A5E-97EF-74029A4200DA}: NameServer = 212.27.54.252,212.27.53.252
O17 - HKLM\System\CS1\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O21 - SSODL: bmlvqkn - {E5C9FD6F-D3F8-4704-8FE2-C37A27A7107F} - (no file)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\Windows\SYSTEM32\crypserv.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--
End of file - 12431 bytes
Configuration: Windows Vista
Firefox 2.0.0.18

28 réponses

Résumé de la discussion

Le problème central est l'apparition répétée du message "You have a security problem !" et l’analyse d’un log HijackThis pour identifier les éléments potentiellement malveillants. Plusieurs éléments relevés dans le rapport suggèrent des extensions et des services tiers indésirables, notamment des barres d’outils et des composants de navigateur, nécessitant un nettoyage approfondi. En cas de nettoyage, il est recommandé de suivre le tutoriel et de traiter les éléments détectés par HijackThis, avec des actions sur les pages et les programmes lancés au démarrage. Une information utile est que le rapport recense des services et processus variés, issus de logiciels légitimes et de programmes potentiellement compromis, ce qui nécessite d’examiner les autorisations et de vérifier les solutions antivirus.

Bobot (l’IA à votre service)
  1. noctambule28
    Pour info drHouse, la remarque de feelgod n'a rien de déplacé !
    De plus ( là tu ne vois plus ce que tu as écrit mais moi si, et je te cite :"Explique moi le fait d'avoir un nouvelle hijackthis changerais .................."


    alors que tu l'as demandé cet hijackthis !!!

    Et pour repondre à ton interrogation, sache qu'une infection peut en cacher une autre, et le fait d'en detruire une peut la faire apparaitre, c'est pour cela que des rapports neufs sont important ( et surtout après reboot), ainsi que plusieurs yeux sur un problème.

    Cela ne se voit s'en doute pas sur le forum mais nous sommes un certains nombre à travailler ensemble si nous avons des doutes; ce n'est pas chacun dans son coin, et c'est une très bonne manière de progresser pour chacun, faut -il encore avoir envi de faire parti d'une communauté .
    Et comme dans la vrai vie, certain se font exclure par eux même en fonction de leur comportement

    Ici nous sommes sur un forum d'entraide , et l'entraide ne vas pas que dans le sens demandeur-aideur mais egalement entre les intervenants afin d'aider chacun , les débutants en desinfection egalement, et même les confirmés à l'occasion , personne n'etant à l'abris d'une erreur!

    Parcontre une chose qui ne se fait pas , c'est d'envoyer promener les personnes qui viennent te signaler que tu es passé à coté de quelquechose , surtout dans ce cas là, avec une certaine mauvaise foi.

    J'arrete là, j'espere que tu auras compris le but de ceci.
    10
    1. noctambule28
      T'as la mémoire courte?

      Tu veux que je restaure les posts

      Je te cite : 

      Et pour info dégage.cela ne change en rien la désinfection.


Tais toi donc vas changer ta couche et de plus il et l'heure de prendre ton biberont ..........


      BRAVO !!

      4
      1. hooligan63780
        Salut pour suivre ... pour info c'est un rookti TSServer qui fait ca...
        1
        1. noctambule28
          salut

          T'es plus infecté encore qu'hier

          refait smitfraud ,option 1et 2, et ensuite tu reboot, et ensuite tu fais un hijackthis neuf.

          je passerais voir tard dans la soirée
          1
          2. noctambule28
            bon, j'en etais sûr !!

            Alors eMule + crack +keygen= virus assuré !!

            Donc t'as 2 solutions, soit tu les supprimes, et il est possible de desinfecter , soit tu les gardes , et je te dis bon surf, car il n'y a rien à faire.

            Fait ton choix , et dit moi, je t'enverrais la suite de la procédure si tu veux bien les supprimer.

            1
            1. noctambule28
              tu peux chercher les logiciels listé là, et voir s'ils sont encore installé.

              Ça veut dire egalement ceux dont tu t'es servi pour cracker des programme et que tu a du metre en place .

              donc la liste
              C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul
              C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\maxsea10-mapmedia crack.rar
              C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul
              C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\INSTALL.LOG
              C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Crack Isobourse & Infos Confidentielles Investir + Boursier.com + Gagner en Bourse en 2007 !.lnk
              C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\CrackMapMediaMaps.lnk
              C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\IsoBourse + Crack + Serial + Infos Confidentielles Investir + Boursier.com + Bons Plans Trades pour 2007 !.lnk
              C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 10.1.3.2_ full + crack (PERFECT & EASY) (2).lnk
              C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 10.1.3.2_ full + crack (PERFECT & EASY).lnk
              C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\MAXSEA 10.132. + CRACK + WORLDWIDE VECTOR.lnk
              C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\MAXSEA 10.132. + CRACK + WORLDWIDE VECTOR.RAR.lnk
              C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 12 , Le Crack Qui Fonctionne !!! Fr.lnk
              C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 12 Keygen.lnk
              C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea v 12.1.1.6+crack v plaisance.lnk
              C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\MaxSea v12 CRACK CODES (2).lnk
              C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea v12 Crack Codes.lnk
              C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\maxsea10-mapmedia crack (2).lnk
              C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\maxsea10-mapmedia crack.lnk
              C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\[Crack] Maxsea 12 Keygen (Ok).lnk
              C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132. + CRACK + WORLDWIDE VECTOR.RAR
              C:\Users\Tony\Downloads\eMule\Incoming\Maxsea v 12.1.1.6+crack v plaisance.rar
              C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul
              C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\CrackMapMediaMaps.txt
              C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\maxsea10-mapmedia crack.rar
              C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\MaxSea10MapMediaCrack.exe
              C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\CMengDriver.dll
              C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\MAXSEA10Full.REG
              C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul
              C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SENTEMUL.EXE
              C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuDel.bat
              C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuInst.bat
              C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuStart.bat
              C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuStop.bat
              C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\INSTALL.LOG
              C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\SentEmul.sys

              sinon, pour la suite

              Relance Toolbar-S&D en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée".
              ! Ne ferme pas la fenêtre lors de la suppression !
              Un rapport sera généré, poste son contenu ici.

              NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
              Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
              Tape explorer puis valide.

              et
              Clique sur ce lien :
              http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
              pour télécharger navilog1.exe.

              Choisis Enregistrer

              et enregistre-le sur ton bureau.

              Ensuite double clique sur navilog1.exe pour lancer l'installation.
              Une fois l'installation terminée, le fix s'exécutera automatiquement.
              (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

              Double clique sur le raccourci Navilog1 présent sur le bureau et laisse-toi guider.
              Au menu principal, choisis 2 et valide.

              Le fix va t'informer qu'il va alors redémarrer ton PC
              Ferme toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts
              Appuie sur une touche comme demandé.
              (si ton Pc ne redémarre pas automatiquement, fais le toi même)
              Au redémarrage de ton PC, choisis ta session habituelle.

              Patiente jusqu'au message :
              *** Nettoyage Termine le ..... ***
              Le blocnote va s'ouvrir.
              Sauvegarde le rapport de manière à le retrouver
              Referme le blocnote. Ton bureau va réapparaitre

              PS:Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
              Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter"
              Tape explorer et valide. Celà te fera apparaitre ton bureau.

              Donc les deux rapports et s'il te reste des cracks faudra voir pour les supprimer
              @+
              1
              1. Utilisateur anonyme
                Hi,

                =>< Désactive le « contrôle des comptes utilisateurs = UAC »
                (tu le réactiveras après ta désinfection): Ne pas oublier !!
                Désactiver l'UAC est nécessaire pour pouvoir faire fonctionner certains programmes sous Vista.
                - Vas dans Démarrer puis panneau de configuration
                - Double Clique sur l'icône "Comptes d'utilisateurs"
                - Clique ensuite sur désactiver et valide.

                Installe [- Télécharge SmitfraudFix (de de S!Ri, balltrap34 et moe31) :
                http://siri.urz.free.fr/Fix/SmitfraudFix.exe smitfraudfix]

                Option:1 => Recherche:

                * Double cliquer sur SmitfraudFix.exe

                * Sélectionner 1 et pressez =>Entrée dans le menu pour créer

                un rapport des fichiers responsables de l'infection. Le rapport se trouve à la racine du disque

                système

                C:\rapport.txt

                ==>et colle le rapport génèrer sur le forum.

                *=>Ne pas faire l'option 2 sans un avis d'une personne compétente*<=

                Alut.
                0
                1. tyfu Auteur
                  SmitFraudFix v2.376

                  Scan done at 17:03:51,28, 24/11/2008
                  Run from C:\Users\Tony\Desktop\SmitfraudFix
                  OS: Microsoft Windows [version 6.0.6000] - Windows_NT
                  The filesystem type is NTFS
                  Fix run in normal mode

                  »»»»»»»»»»»»»»»»»»»»»»»» Process

                  C:\Windows\system32\csrss.exe
                  C:\Windows\system32\wininit.exe
                  C:\Windows\system32\csrss.exe
                  C:\Windows\system32\services.exe
                  C:\Windows\system32\lsass.exe
                  C:\Windows\system32\lsm.exe
                  C:\Windows\system32\winlogon.exe
                  C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe
                  C:\Windows\System32\svchost.exe
                  C:\Windows\System32\svchost.exe
                  C:\Windows\System32\svchost.exe
                  C:\Windows\system32\svchost.exe
                  C:\Windows\system32\SLsvc.exe
                  C:\Windows\system32\svchost.exe
                  C:\Windows\system32\svchost.exe
                  C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashServ.exe
                  C:\Windows\System32\spoolsv.exe
                  C:\Windows\system32\svchost.exe
                  C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                  C:\Windows\system32\crypserv.exe
                  C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                  C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
                  C:\Windows\system32\PnkBstrA.exe
                  C:\Windows\system32\svchost.exe
                  C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
                  C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
                  C:\Windows\system32\svchost.exe
                  C:\Windows\System32\svchost.exe
                  C:\Windows\system32\SearchIndexer.exe
                  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                  C:\Windows\system32\taskeng.exe
                  C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                  C:\Windows\system32\Dwm.exe
                  C:\Windows\system32\taskeng.exe
                  C:\Windows\Explorer.EXE
                  C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
                  C:\Program Files\WebMediaViewer\qttask.exe
                  C:\Program Files\WebMediaViewer\hpmon.exe
                  C:\Windows\vsnp2std.exe
                  C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                  C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
                  C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
                  C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                  C:\Program Files\iTunes\iTunesHelper.exe
                  C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
                  C:\Program Files\Logitech\QuickCam\Quickcam.exe
                  C:\Windows\System32\regsvr32.exe
                  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                  C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                  C:\Program Files\Windows Media Player\wmpnscfg.exe
                  C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
                  C:\Program Files\Windows Media Player\wmpnetwk.exe
                  C:\Program Files\Internet Explorer\iexplore.exe
                  C:\Windows\system32\wbem\unsecapp.exe
                  C:\Windows\system32\wbem\wmiprvse.exe
                  C:\Windows\system32\ctfmon.exe
                  C:\Program Files\WebMediaViewer\qttaskm.exe
                  C:\Program Files\WebMediaViewer\hpmom.exe
                  C:\Program Files\iPod\bin\iPodService.exe
                  C:\Windows\system32\conime.exe
                  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
                  C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
                  C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
                  C:\Users\Tony\AppData\Local\Temp\~tmpd.exe
                  C:\Program Files\Windows Live Toolbar\msn_sl.exe
                  C:\Windows\system32\wbem\wmiprvse.exe
                  C:\Windows\system32\cmd.exe
                  C:\Windows\system32\wuauclt.exe
                  C:\Windows\servicing\TrustedInstaller.exe

                  »»»»»»»»»»»»»»»»»»»»»»»» hosts

                  hosts file corrupted !

                  127.0.0.1 legal-at-spybot.info
                  127.0.0.1 www.legal-at-spybot.info

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\Web

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32

                  C:\Windows\system32\msxml71.dll FOUND !

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32\LogFiles

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Tony

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Tony\AppData\Local\Temp

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Tony\Application Data

                  »»»»»»»»»»»»»»»»»»»»»»»» Start Menu

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Tony\FAVORI~1

                  C:\Users\Tony\FAVORI~1\Antivirus Scan.url FOUND !

                  »»»»»»»»»»»»»»»»»»»»»»»» Desktop

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                  C:\Program Files\Google\googletoolbar1.dll FOUND !

                  »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys

                  »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

                  »»»»»»»»»»»»»»»»»»»»»»»» o4Patch
                  !!!Attention, following keys are not inevitably infected!!!

                  o4Patch
                  Credits: Malware Analysis & Diagnostic
                  Code: S!Ri

                  »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
                  !!!Attention, following keys are not inevitably infected!!!

                  IEDFix
                  Credits: Malware Analysis & Diagnostic
                  Code: S!Ri

                  »»»»»»»»»»»»»»»»»»»»»»»» VACFix
                  !!!Attention, following keys are not inevitably infected!!!

                  VACFix
                  Credits: Malware Analysis & Diagnostic
                  Code: S!Ri

                  »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
                  !!!Attention, following keys are not inevitably infected!!!

                  404Fix
                  Credits: Malware Analysis & Diagnostic
                  Code: S!Ri
                  +--------------------------------------------------+
                  [!] Suspicious: 512686.dll
                  BHO: 512686 Class - {51B15F5A-E98B-4658-B9CB-9307B74773A7}
                  BHO CLSID TypeLib: {E63648F7-3933-440E-AAAA-A8584DD7B7EB}
                  Corrected TypeLib: {E63648F7-3933-440E-B4F6-A8584DD7B7EB}
                  Interface: {F7D09218-46D7-4D3D-9B7F-315204CD0836}

                  »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
                  !!!Attention, following keys are not inevitably infected!!!

                  SrchSTS.exe by S!Ri
                  Search SharedTaskScheduler's .dll

                  »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
                  !!!Attention, following keys are not inevitably infected!!!

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                  "AppInit_DLLs"="C:\\PROGRA~1\\Google\\GOOGLE~1\\GOEC62~1.DLL"
                  "LoadAppInit_DLLs"=dword:00000001

                  »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
                  !!!Attention, following keys are not inevitably infected!!!

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                  "Userinit"="C:\\Windows\\system32\\userinit.exe,"

                  »»»»»»»»»»»»»»»»»»»»»»»» RK

                  »»»»»»»»»»»»»»»»»»»»»»»» DNS

                  Description: Contrôleur intégré Broadcom 440x 10/100
                  DNS Server Search Order: 212.27.54.252
                  DNS Server Search Order: 212.27.53.252

                  HKLM\SYSTEM\CCS\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer=212.27.32.176,212.27.32.177
                  HKLM\SYSTEM\CCS\Services\Tcpip\..\{F555EB53-4738-4A5E-97EF-74029A4200DA}: NameServer=212.27.54.252,212.27.53.252
                  HKLM\SYSTEM\CS1\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer=212.27.32.176,212.27.32.177
                  HKLM\SYSTEM\CS1\Services\Tcpip\..\{F555EB53-4738-4A5E-97EF-74029A4200DA}: NameServer=212.27.54.252,212.27.53.252
                  HKLM\SYSTEM\CS3\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer=212.27.32.176,212.27.32.177
                  HKLM\SYSTEM\CS3\Services\Tcpip\..\{F555EB53-4738-4A5E-97EF-74029A4200DA}: NameServer=212.27.54.252,212.27.53.252

                  »»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection

                  »»»»»»»»»»»»»»»»»»»»»»»» End
                  0
              2. Utilisateur anonyme
                Hi,

                Maintenant fait ceci:

                2) Nettoyage:

                * Redemarrer l'ordinateur en mode sans échec:

                * Double cliquer sur smitfraudix:

                * Sélectionner 2 et pressez Entrée dans le menu pour supprimer les fichiers responsables de l'infection.

                * A la question: Voulez-vous nettoyer le registre ? répondre O (oui) et pressez Entrée afin de débloquer le fond d'écran et supprimer les clés de registre de l'infection:.

                * Le fix déterminera si le fichier wininet.dll est infecté. A la question: Corriger le fichier infecté ? répondre O (oui) et pressez Entrée pour remplacer le fichier corrompu:.

                * Un redemarrage sera peut être necessaire pour terminer la procedure de nettoyage. Le rapport se trouve à la racine du disque système C:\rapport.txt:

                Option::

                * Pour effacer la liste des sites de confiance et sensibles, sélectionner 3 et pressez Entrée dans le menu.

                * A la question: Réinitialiser la liste des sites de confiance et sensibles ? répondre O (oui) et pressez Entrée afin de restaurer les zones de confiances et sensibles:.

                :FAUX POSITIF::

                process.exe est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

                Alut.
                0
                1. tyfu Auteur
                  Merci pour cette analyse.
                  Je n'ai plus de soucis ...
                  Salut
                  0
                  1. Utilisateur anonyme
                    Hi,

                    Refait un hijackthis.

                    Alut.
                    0
                    1. tyfu Auteur
                      Logfile of Trend Micro HijackThis v2.0.2
                      Scan saved at 14:54:57, on 24/11/2008
                      Platform: Windows Vista (WinNT 6.00.1904)
                      MSIE: Internet Explorer v7.00 (7.00.6000.16757)
                      Boot mode: Normal

                      Running processes:
                      C:\Windows\system32\taskeng.exe
                      C:\Windows\system32\Dwm.exe
                      C:\Windows\Explorer.EXE
                      C:\Windows\vsnp2std.exe
                      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                      C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                      C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
                      C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                      C:\Program Files\iTunes\iTunesHelper.exe
                      C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
                      C:\Program Files\Logitech\QuickCam\Quickcam.exe
                      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                      C:\Program Files\Windows Media Player\wmpnscfg.exe
                      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                      C:\Windows\system32\wbem\unsecapp.exe
                      C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
                      C:\Windows\system32\wuauclt.exe
                      C:\Windows\system32\conime.exe
                      C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
                      C:\Users\Tony\AppData\Local\Temp\~tmpa.exe
                      C:\Windows\system32\regsvr32.exe
                      C:\Program Files\Internet Explorer\iexplore.exe
                      C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
                      C:\Windows\system32\taskeng.exe
                      C:\Program Files\Mozilla Firefox\firefox.exe
                      C:\Windows\system32\SearchFilterHost.exe
                      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                      R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                      R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                      O1 - Hosts: ::1 localhost
                      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                      O2 - BHO: searchersmart search enhancer - {247E05CF-35BE-C43A-A61D-51BC4B11B5D8} - C:\Windows\system32\lfmbvmqfkntoibp.dll
                      O2 - BHO: 892267 helper - {25E0128D-AAFC-49FF-AB11-1F12C2FCC391} - (no file)
                      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                      O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
                      O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
                      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                      O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
                      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                      O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
                      O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
                      O2 - BHO: offersfortoday browser enhancer - {EE01C848-FBCD-9D47-66D3-BD284CB5FFC6} - C:\Windows\system32\pudyiuallzdcw.dll
                      O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                      O3 - Toolbar: (no name) - {92162A1C-A9E3-4C0C-BCDC-2996E8406887} - (no file)
                      O3 - Toolbar: (no name) - {70CC76D5-A4EE-4F25-9931-B109A63E298E} - (no file)
                      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                      O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                      O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                      O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
                      O4 - HKLM\..\Run: [snp2std] C:\Windows\vsnp2std.exe
                      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                      O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
                      O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
                      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\Windows\system32\spool\drivers\w32x86\3\hpztsb06.exe
                      O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
                      O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
                      O4 - HKLM\..\Run: [kshfqjugwa] C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\pudyiuallzdcw.dll"
                      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                      O4 - HKCU\..\Run: [lphcep2j0elfc] C:\Windows\system32\lphcep2j0elfc.exe
                      O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                      O4 - HKCU\..\Run: [Cognac] C:\Users\Tony\AppData\Local\Temp\~tmpb.exe
                      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                      O4 - HKCU\..\Run: [MSFox] C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
                      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                      O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
                      O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                      O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
                      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
                      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
                      O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
                      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                      O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                      O13 - Gopher Prefix:
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{F555EB53-4738-4A5E-97EF-74029A4200DA}: NameServer = 212.27.54.252,212.27.53.252
                      O17 - HKLM\System\CS1\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
                      O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
                      O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
                      O21 - SSODL: bmlvqkn - {E5C9FD6F-D3F8-4704-8FE2-C37A27A7107F} - (no file)
                      O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                      O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\Windows\SYSTEM32\crypserv.exe
                      O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
                      O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
                      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                      O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                      O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
                      O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                      O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
                      O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
                      O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
                      O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
                      O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
                      O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
                      0
                      1. Utilisateur anonyme
                        Hi,

                        Il me mannque le rapport de smithfraudix option 2.

                        Alut.
                        0
                        1. tyfu Auteur
                          voici le rapport SmithFraudix option 2

                          IMPORTANT : Il apparait un triangle de signalisation Jaune avec point d'exclamation dans la barre des taches. Le message suivant est Warning ! Spyware threat

                          SmitFraudFix v2.376

                          Scan done at 17:39:14,47, 24/11/2008
                          Run from C:\Users\Tony\Desktop\SmitfraudFix
                          OS: Microsoft Windows [version 6.0.6000] - Windows_NT
                          The filesystem type is NTFS
                          Fix run in safe mode

                          »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
                          !!!Attention, following keys are not inevitably infected!!!

                          SrchSTS.exe by S!Ri
                          Search SharedTaskScheduler's .dll

                          »»»»»»»»»»»»»»»»»»»»»»»» Killing process

                          »»»»»»»»»»»»»»»»»»»»»»»» hosts

                          127.0.0.1 localhost
                          ::1 localhost
                          127.0.0.1 007guard.com
                          127.0.0.1 www.007guard.com
                          127.0.0.1 008i.com
                          127.0.0.1 008k.com
                          127.0.0.1 www.008k.com
                          127.0.0.1 00hq.com
                          127.0.0.1 www.00hq.com
                          127.0.0.1 010402.com
                          127.0.0.1 032439.com
                          127.0.0.1 www.032439.com
                          127.0.0.1 1001-search.info
                          127.0.0.1 www.1001-search.info
                          127.0.0.1 100888290cs.com
                          127.0.0.1 www.100888290cs.com
                          127.0.0.1 100sexlinks.com
                          127.0.0.1 www.100sexlinks.com
                          127.0.0.1 10sek.com
                          127.0.0.1 www.10sek.com
                          127.0.0.1 123topsearch.com
                          127.0.0.1 www.123topsearch.com
                          127.0.0.1 132.com
                          127.0.0.1 www.132.com
                          127.0.0.1 136136.net
                          127.0.0.1 www.136136.net
                          127.0.0.1 139mm.com
                          127.0.0.1 www.139mm.com
                          127.0.0.1 163ns.com
                          127.0.0.1 www.163ns.com
                          127.0.0.1 171203.com
                          127.0.0.1 17-plus.com
                          127.0.0.1 1800searchonline.com
                          127.0.0.1 www.1800searchonline.com
                          127.0.0.1 180searchassistant.com
                          127.0.0.1 www.180searchassistant.com
                          127.0.0.1 180solutions.com
                          127.0.0.1 www.180solutions.com
                          127.0.0.1 181.365soft.info
                          127.0.0.1 www.181.365soft.info
                          127.0.0.1 1987324.com
                          127.0.0.1 www.1987324.com
                          127.0.0.1 1-domains-registrations.com
                          127.0.0.1 www.1-domains-registrations.com
                          127.0.0.1 1-extreme.biz
                          127.0.0.1 www.1-extreme.biz
                          127.0.0.1 1sexparty.com
                          127.0.0.1 www.1sexparty.com
                          127.0.0.1 1stantivirus.com
                          127.0.0.1 www.1stantivirus.com
                          127.0.0.1 1stpagehere.com
                          127.0.0.1 www.1stpagehere.com
                          127.0.0.1 1stsearchportal.com
                          127.0.0.1 www.1stsearchportal.com
                          127.0.0.1 2.82211.net
                          127.0.0.1 www.2006ooo.com
                          127.0.0.1 2007-download.com
                          127.0.0.1 www.2007-download.com
                          127.0.0.1 2020search.com
                          127.0.0.1 www.2020search.com
                          127.0.0.1 20x2p.com
                          127.0.0.1 24.365soft.info
                          127.0.0.1 www.24.365soft.info
                          127.0.0.1 24-7pharmacy.info
                          127.0.0.1 www.24-7pharmacy.info
                          127.0.0.1 24-7searching-and-more.com
                          127.0.0.1 www.24-7searching-and-more.com
                          127.0.0.1 24teen.com
                          127.0.0.1 www.24teen.com
                          127.0.0.1 2every.net
                          127.0.0.1 www.2every.net
                          127.0.0.1 2ndpower.com
                          127.0.0.1 2search.com
                          127.0.0.1 www.2search.com
                          127.0.0.1 2search.org
                          127.0.0.1 www.2search.org
                          127.0.0.1 2squared.com
                          127.0.0.1 www.2squared.com
                          127.0.0.1 3322.org
                          127.0.0.1 www.3322.org
                          127.0.0.1 365soft.info
                          127.0.0.1 36site.com
                          127.0.0.1 www.36site.com
                          127.0.0.1 3721.com
                          127.0.0.1 39-93.com
                          127.0.0.1 3abetterinternet.com
                          127.0.0.1 www.3abetterinternet.com
                          127.0.0.1 3bay.it
                          127.0.0.1 www.3bay.it
                          127.0.0.1 3ebay.it
                          127.0.0.1 www.3ebay.it
                          127.0.0.1 404dns.com
                          127.0.0.1 www.404dns.com
                          127.0.0.1 4199.com
                          127.0.0.1 www.4199.com
                          127.0.0.1 4corn.net
                          127.0.0.1 www.4corn.net
                          127.0.0.1 4ebay.it
                          127.0.0.1 www.4ebay.it
                          127.0.0.1 4klm.com
                          127.0.0.1 4repubblica.it
                          127.0.0.1 www.4repubblica.it
                          127.0.0.1 4softget.com
                          127.0.0.1 www.4softget.com
                          127.0.0.1 5iscali.it
                          127.0.0.1 www.5iscali.it
                          127.0.0.1 5repubblica.it
                          127.0.0.1 www.5repubblica.it
                          127.0.0.1 5starvideos.com
                          127.0.0.1 www.5starvideos.com
                          127.0.0.1 5tiscali.it
                          127.0.0.1 www.5tiscali.it
                          127.0.0.1 5zgmu7o20kt5d8yq.com
                          127.0.0.1 www.5zgmu7o20kt5d8yq.com
                          127.0.0.1 6iscali.it
                          127.0.0.1 www.6iscali.it
                          127.0.0.1 6sek.com
                          127.0.0.1 www.6sek.com
                          127.0.0.1 6tiscali.it
                          127.0.0.1 www.6tiscali.it
                          127.0.0.1 7322.com
                          127.0.0.1 www.7322.com
                          127.0.0.1 75tz.com
                          127.0.0.1 777search.com
                          127.0.0.1 www.777search.com
                          127.0.0.1 777top.com
                          127.0.0.1 www.777top.com
                          127.0.0.1 7939.com
                          127.0.0.1 www.7939.com
                          127.0.0.1 7search.com
                          127.0.0.1 www.7search.com
                          127.0.0.1 80gw6ry3i3x3qbrkwhxhw.032439.com
                          127.0.0.1 82211.net
                          127.0.0.1 8866.org
                          127.0.0.1 888.com
                          127.0.0.1 www.888.com
                          127.0.0.1 images.888.com
                          127.0.0.1 8ad.com
                          127.0.0.1 www.8ad.com
                          127.0.0.1 9505.com
                          127.0.0.1 www.9505.com
                          127.0.0.1 971searchbox.com
                          127.0.0.1 www.971searchbox.com
                          127.0.0.1 a.bestmanage.org
                          127.0.0.1 aaasexypics.com
                          127.0.0.1 aaawebfinder.com
                          127.0.0.1 www.aaawebfinder.com
                          127.0.0.1 aavc.com
                          127.0.0.1 abc-find.info
                          127.0.0.1 www.abc-find.info
                          127.0.0.1 abetterinternet.com
                          127.0.0.1 www.abetterinternet.com
                          127.0.0.1 abnetsoft.info
                          127.0.0.1 www.abnetsoft.info
                          127.0.0.1 aboutclicker.com
                          127.0.0.1 www.aboutclicker.com
                          127.0.0.1 abrp.net
                          127.0.0.1 www.abrp.net
                          127.0.0.1 absolutee.com
                          127.0.0.1 www.absolutee.com
                          127.0.0.1 abyssmedia.com
                          127.0.0.1 www.abyssmedia.com
                          127.0.0.1 ac66.cn
                          127.0.0.1 www.ac66.cn
                          127.0.0.1 access.Navinetwork.com
                          127.0.0.1 access.rapid-pass.net
                          127.0.0.1 accessactivexvideo.com
                          127.0.0.1 www.accessactivexvideo.com
                          127.0.0.1 accessclips.com
                          127.0.0.1 www.accessclips.com
                          127.0.0.1 access-dvd.com
                          127.0.0.1 www.access-dvd.com
                          127.0.0.1 accesskeygenerator.com
                          127.0.0.1 www.accesskeygenerator.com
                          127.0.0.1 accessorygeeks.com
                          127.0.0.1 www.accessorygeeks.com
                          127.0.0.1 accessthefuture.net
                          127.0.0.1 www.accessthefuture.net
                          127.0.0.1 accessvid.net
                          127.0.0.1 www.accessvid.net
                          127.0.0.1 acemedic.com
                          127.0.0.1 www.acemedic.com
                          127.0.0.1 ace-webmaster.com
                          127.0.0.1 www.ace-webmaster.com
                          127.0.0.1 acjp.com
                          127.0.0.1 acrobat-2007.com
                          127.0.0.1 www.acrobat-2007.com
                          127.0.0.1 acrobat-8.com
                          127.0.0.1 www.acrobat-8.com
                          127.0.0.1 acrobat-center.com
                          127.0.0.1 www.acrobat-center.com
                          127.0.0.1 acrobat-hq.com
                          127.0.0.1 www.acrobat-hq.com
                          127.0.0.1 acrobatreader-8.com
                          127.0.0.1 www.acrobatreader-8.com
                          127.0.0.1 acrobat-reader-8.de
                          127.0.0.1 www.acrobat-reader-8.de
                          127.0.0.1 acrobat-stop.com
                          127.0.0.1 www.acrobat-stop.com
                          127.0.0.1 actionbreastcancer.org
                          127.0.0.1 www.actionbreastcancer.org
                          127.0.0.1 activesearcher.info
                          127.0.0.1 www.activesearcher.info
                          127.0.0.1 activexaccessobject.com
                          127.0.0.1 www.activexaccessobject.com
                          127.0.0.1 activexaccessvideo.com
                          127.0.0.1 www.activexaccessvideo.com
                          127.0.0.1 activexemedia.com
                          127.0.0.1 www.activexemedia.com
                          127.0.0.1 activexmediaobject.com
                          127.0.0.1 www.activexmediaobject.com
                          127.0.0.1 activexmediapro.com
                          127.0.0.1 www.activexmediapro.com
                          127.0.0.1 activexmediasite.com
                          127.0.0.1 www.activexmediasite.com
                          127.0.0.1 activexmediasoftware.com
                          127.0.0.1 www.activexmediasoftware.com
                          127.0.0.1 activexmediasource.com
                          127.0.0.1 www.activexmediasource.com
                          127.0.0.1 activexmediatool.com
                          127.0.0.1 www.activexmediatool.com
                          127.0.0.1 activexmediatour.com
                          127.0.0.1 www.activexmediatour.com
                          127.0.0.1 activexsoftwares.com
                          127.0.0.1 www.activexsoftwares.com
                          127.0.0.1 activexsource.com
                          127.0.0.1 www.activexsource.com
                          127.0.0.1 activexupdate.com
                          127.0.0.1 www.activexupdate.com
                          127.0.0.1 activexvideo.com
                          127.0.0.1 www.activexvideo.com
                          127.0.0.1 activexvideotool.com
                          127.0.0.1 www.activexvideotool.com
                          127.0.0.1 ad.marketingsector.com
                          127.0.0.1 www.ad.marketingsector.com
                          127.0.0.1 ad.mokead.com
                          127.0.0.1 www.ad.mokead.com
                          127.0.0.1 ad.yieldmanager.com
                          127.0.0.1 www.ad.yieldmanager.com
                          127.0.0.1 ad25.com
                          127.0.0.1 ad45.com
                          127.0.0.1 ad77.com
                          127.0.0.1 ad86.com
                          127.0.0.1 adamsupportgroup.org
                          127.0.0.1 www.adamsupportgroup.org
                          127.0.0.1 adarmor.com
                          127.0.0.1 www.adarmor.com
                          127.0.0.1 adasearch.com
                          127.0.0.1 www.adasearch.com
                          127.0.0.1 adaware.cc
                          127.0.0.1 adawarenow.com
                          127.0.0.1 www.adawarenow.com
                          127.0.0.1 addictivetechnologies.com
                          127.0.0.1 www.addictivetechnologies.com
                          127.0.0.1 addictivetechnologies.net
                          127.0.0.1 www.addictivetechnologies.net
                          127.0.0.1 add-manager.com
                          127.0.0.1 www.add-manager.com
                          127.0.0.1 adgate.info
                          127.0.0.1 www.adgate.info
                          127.0.0.1 adipics.com
                          127.0.0.1 www.adipics.com
                          127.0.0.1 admin2cash.biz
                          127.0.0.1 www.admin2cash.biz
                          127.0.0.1 adnet-plus.com
                          127.0.0.1 adobe-download-now.com
                          127.0.0.1 adobe-downloads.com
                          127.0.0.1 www.adobe-downloads.com
                          127.0.0.1 adobe-reader-8.fr
                          127.0.0.1 www.adobe-reader-8.fr
                          127.0.0.1 adprotect.com
                          127.0.0.1 www.adprotect.com
                          127.0.0.1 ads.centralmedia.ws
                          127.0.0.1 ads.k8l.info
                          127.0.0.1 ads.kmpads.com
                          127.0.0.1 ads.marketingsector.com
                          127.0.0.1 ads.searchingbooth.com
                          127.0.0.1 ads.z-quest.com
                          127.0.0.1 ads183.com
                          127.0.0.1 www.ads183.com
                          127.0.0.1 adscontex.com
                          127.0.0.1 www.adscontex.com
                          127.0.0.1 adservices1.enhance.com
                          127.0.0.1 www.adservices1.enhance.com
                          127.0.0.1 adservs.com
                          127.0.0.1 adsextend.net
                          127.0.0.1 www.adsextend.net
                          127.0.0.1 adshttp.com
                          127.0.0.1 www.adshttp.com
                          127.0.0.1 adsonwww.com
                          127.0.0.1 www.adsonwww.com
                          127.0.0.1 adspics.com
                          127.0.0.1 www.adspics.com
                          127.0.0.1 adtrak.net
                          127.0.0.1 www.adtrak.net
                          127.0.0.1 adtrgt.com
                          127.0.0.1 adult777search.info
                          127.0.0.1 www.adult777search.info
                          127.0.0.1 adultan.com
                          127.0.0.1 www.adultan.com
                          127.0.0.1 adult-engine-search.com
                          127.0.0.1 www.adult-engine-search.com
                          127.0.0.1 adult-erotic-guide.net
                          127.0.0.1 www.adult-erotic-guide.net
                          127.0.0.1 adultfilmsite.com
                          127.0.0.1 www.adultfilmsite.com
                          127.0.0.1 adult-friends-finder.net
                          127.0.0.1 www.adult-friends-finder.net
                          127.0.0.1 adultgambling.org
                          127.0.0.1 adult-host.org
                          127.0.0.1 adulthyperlinks.com
                          127.0.0.1 www.adulthyperlinks.com
                          127.0.0.1 adultmovieplus.com
                          127.0.0.1 www.adultmovieplus.com
                          127.0.0.1 adult-personal.us
                          127.0.0.1 adultsgames.net
                          127.0.0.1 adultsper.com
                          127.0.0.1 www.adultsper.com
                          127.0.0.1 adulttds.com
                          127.0.0.1 www.adulttds.com
                          127.0.0.1 adultzoneworld.com
                          127.0.0.1 www.adultzoneworld.com
                          127.0.0.1 advcash.biz
                          127.0.0.1 www.advcash.biz
                          127.0.0.1 advert.exaccess.ru
                          127.0.0.1 advertisemoney.info
                          127.0.0.1 www.advertisemoney.info
                          127.0.0.1 advertising.paltalk.com
                          127.0.0.1 advertising-money.info
                          127.0.0.1 www.advertising-money.info
                          127.0.0.1 ad-ware.cc
                          127.0.0.1 ad-w-a-r-e.com
                          127.0.0.1 www.ad-w-a-r-e.com
                          127.0.0.1 a-d-w-a-r-e.com
                          127.0.0.1 www.a-d-w-a-r-e.com
                          127.0.0.1 adwarebazooka.com
                          127.0.0.1 www.adwarebazooka.com
                          127.0.0.1 adwarefinder.com
                          127.0.0.1 www.adwarefinder.com
                          127.0.0.1 adwareprotectionsite.com
                          127.0.0.1 www.adwareprotectionsite.com
                          127.0.0.1 adwarepunisher.com
                          127.0.0.1 www.adwarepunisher.com
                          127.0.0.1 aflgate.com
                          127.0.0.1 www.aflgate.com
                          127.0.0.1 africaspromise.org
                          127.0.0.1 agava.com
                          127.0.0.1 agava.ru
                          127.0.0.1 agentstudio.com
                          127.0.0.1 aginegialle.it
                          127.0.0.1 www.aginegialle.it
                          127.0.0.1 www.aifind.info
                          127.0.0.1 aifind.info
                          127.0.0.1 airtleworld.com
                          127.0.0.1 www.airtleworld.com
                          127.0.0.1 aitalia.it
                          127.0.0.1 www.aitalia.it
                          127.0.0.1 akamai.downloadv3.com
                          127.0.0.1 aklitalia.it
                          127.0.0.1 www.aklitalia.it
                          127.0.0.1 akril.com
                          127.0.0.1 alcatel.ws
                          127.0.0.1 alfacleaner.com
                          127.0.0.1 www.alfacleaner.com
                          127.0.0.1 alfa-search.com
                          127.0.0.1 alialia.it
                          127.0.0.1 www.alialia.it
                          127.0.0.1 aliotalia.it
                          127.0.0.1 www.aliotalia.it
                          127.0.0.1 alirtalia.it
                          127.0.0.1 www.alirtalia.it
                          127.0.0.1 alitaia.it
                          127.0.0.1 www.alitaia.it
                          127.0.0.1 alitaklia.it
                          127.0.0.1 www.alitaklia.it
                          127.0.0.1 alitala.it
                          127.0.0.1 www.alitala.it
                          127.0.0.1 alitali.it
                          127.0.0.1 www.alitali.it
                          127.0.0.1 alitaliaq.it
                          127.0.0.1 www.alitaliaq.it
                          127.0.0.1 alitalias.it
                          127.0.0.1 www.alitalias.it
                          127.0.0.1 alitaliaz.it
                          127.0.0.1 www.alitaliaz.it
                          127.0.0.1 alitalioa.it
                          127.0.0.1 www.alitalioa.it
                          127.0.0.1 alitalisa.it
                          127.0.0.1 www.alitalisa.it
                          127.0.0.1 alitaliua.it
                          127.0.0.1 www.alitaliua.it
                          127.0.0.1 alitalkia.it
                          127.0.0.1 www.alitalkia.it
                          127.0.0.1 alitaloia.it
                          127.0.0.1 www.alitaloia.it
                          127.0.0.1 alitaluia.it
                          127.0.0.1 www.alitaluia.it
                          127.0.0.1 alitaslia.it
                          127.0.0.1 www.alitaslia.it
                          127.0.0.1 alitlia.it
                          127.0.0.1 www.alitlia.it
                          127.0.0.1 alitralia.it
                          127.0.0.1 www.alitralia.it
                          127.0.0.1 alitsalia.it
                          127.0.0.1 www.alitsalia.it
                          127.0.0.1 aliutalia.it
                          127.0.0.1 www.aliutalia.it
                          127.0.0.1 ALL1COUNT.NET
                          127.0.0.1 www.ALL1COUNT.NET
                          127.0.0.1 all4internet.com
                          127.0.0.1 www.all4internet.com
                          127.0.0.1 allabtcars.com
                          127.0.0.1 allabtjeeps.com
                          127.0.0.1 all-bittorrent.com
                          127.0.0.1 www.all-bittorrent.com
                          127.0.0.1 www.allcybersearch.com
                          127.0.0.1 allcybersearch.com
                          127.0.0.1 alldnserrors.com
                          127.0.0.1 www.alldnserrors.com
                          127.0.0.1 all-downloads-now.com
                          127.0.0.1 www.all-downloads-now.com
                          127.0.0.1 all-edonkey.com
                          127.0.0.1 www.all-edonkey.com
                          127.0.0.1 allforadult.com
                          127.0.0.1 allhyperlinks.com
                          127.0.0.1 alliesecurity.com
                          127.0.0.1 www.alliesecurity.com
                          127.0.0.1 all-inet.com
                          127.0.0.1 allinternetbusiness.com
                          127.0.0.1 all-limewire.com
                          127.0.0.1 www.all-limewire.com
                          127.0.0.1 allmegabucks.com
                          127.0.0.1 www.allmegabucks.com
                          127.0.0.1 allprotections.com
                          127.0.0.1 www.allprotections.com
                          127.0.0.1 allresultz.net
                          127.0.0.1 www.allresultz.net
                          127.0.0.1 allsecuritynotes.com
                          127.0.0.1 www.allsecuritynotes.com
                          127.0.0.1 allsecuritysite.com
                          127.0.0.1 www.allsecuritysite.com
                          127.0.0.1 allstarsvideos.net
                          127.0.0.1 www.allstarsvideos.net
                          127.0.0.1 alltruesoftware.com
                          127.0.0.1 www.alltruesoftware.com
                          127.0.0.1 allvideoactivex.com
                          127.0.0.1 www.allvideoactivex.com
                          127.0.0.1 almanah.biz
                          127.0.0.1 www.almanah.biz
                          127.0.0.1 almarvideos.com
                          127.0.0.1 aloitalia.it
                          127.0.0.1 www.aloitalia.it
                          127.0.0.1 aluitalia.it
                          127.0.0.1 www.aluitalia.it
                          127.0.0.1 amaena.com
                          127.0.0.1 www.amaena.com
                          127.0.0.1 amandamountains.com
                          127.0.0.1 amateurliveshow.com
                          127.0.0.1 www.amateurliveshow.com
                          127.0.0.1 amediasoftware.com
                          127.0.0.1 www.amediasoftware.com
                          127.0.0.1 amediasource.com
                          127.0.0.1 www.amediasource.com
                          127.0.0.1 americancarbargains.com
                          127.0.0.1 www.americancarbargains.com
                          127.0.0.1 american-teens.net
                          127.0.0.1 amigeek.com
                          127.0.0.1 amisbusiness.com
                          127.0.0.1 ampmsearch.com
                          127.0.0.1 www.ampmsearch.com
                          127.0.0.1 analcord.com
                          127.0.0.1 www.analcord.com
                          127.0.0.1 analmovi.com
                          127.0.0.1 anarchylolita.com
                          127.0.0.1 www.anarchylolita.com
                          127.0.0.1 anarchyporn.com
                          127.0.0.1 andromedical.com
                          127.0.0.1 www.andromedical.com
                          127.0.0.1 animepornmag.com
                          127.0.0.1 www.animepornmag.com
                          127.0.0.1 anin.org
                          127.0.0.1 anjpn-avxiz.biz
                          127.0.0.1 www.anjpn-avxiz.biz
                          127.0.0.1 anjpnzqav.biz
                          127.0.0.1 www.anjpnzqav.biz
                          127.0.0.1 anjpn-zqav.biz
                          127.0.0.1 www.anjpn-zqav.biz
                          127.0.0.1 annaromeo.com
                          127.0.0.1 antiddos.us
                          127.0.0.1 www.antiddos.us
                          127.0.0.1 Antiespiadorado.com
                          127.0.0.1 www.Antiespiadorado.com
                          127.0.0.1 Antiespionspack.com
                          127.0.0.1 www.Antiespionspack.com
                          127.0.0.1 Antigusanos2008.com
                          127.0.0.1 www.Antigusanos2008.com
                          127.0.0.1 Antispionage.com
                          127.0.0.1 www.Antispionage.com
                          127.0.0.1 Antispionagepro.com
                          127.0.0.1 www.Antispionagepro.com
                          127.0.0.1 antispydns.biz
                          127.0.0.1 www.antispydns.biz
                          127.0.0.1 antispylab.com
                          127.0.0.1 www.antispylab.com
                          127.0.0.1 antispysolutions.com
                          127.0.0.1 www.antispysolutions.com
                          127.0.0.1 antispyware.com
                          127.0.0.1 www.antispyware.com
                          127.0.0.1 antispywarebot.com
                          127.0.0.1 www.antispywarebot.com
                          127.0.0.1 antispywarebox.com
                          127.0.0.1 www.antispywarebox.com
                          127.0.0.1 antispywaredownloads.com
                          127.0.0.1 www.antispywaredownloads.com
                          127.0.0.1 Antispywaresuite.com
                          127.0.0.1 www.Antispywaresuite.com
                          127.0.0.1 Antispyweb.net
                          127.0.0.1 www.Antispyweb.net
                          127.0.0.1 Antiver2008.com
                          127.0.0.1 www.Antiver2008.com
                          127.0.0.1 antivermins.com
                          127.0.0.1 www.antivermins.com
                          127.0.0.1 anti-vermins.com
                          127.0.0.1 www.anti-vermins.com
                          127.0.0.1 antivir2007.com
                          127.0.0.1 www.antivir2007.com
                          127.0.0.1 antivirgear.com
                          127.0.0.1 www.antivirgear.com
                          127.0.0.1 antivirus.fastfreedownload.com
                          127.0.0.1 www.antivirus.fastfreedownload.com
                          127.0.0.1 antivirusgolden.com
                          127.0.0.1 www.antivirusgolden.com
                          127.0.0.1 antivirus-hq.net
                          127.0.0.1 www.antivirus-hq.net
                          127.0.0.1 anti-virus-pro.com
                          127.0.0.1 www.anti-virus-pro.com
                          127.0.0.1 antivirusprotector.com
                          127.0.0.1 www.antivirusprotector.com
                          127.0.0.1 antivirussecuritypro.com
                          127.0.0.1 www.antivirussecuritypro.com
                          127.0.0.1 antivirus-stop.com
                          127.0.0.1 www.antivirus-stop.com
                          127.0.0.1 Antiworm2008.com
                          127.0.0.1 www.Antiworm2008.com
                          127.0.0.1 Antiwurm2008.com
                          127.0.0.1 www.Antiwurm2008.com
                          127.0.0.1 antrocity.com
                          127.0.0.1 anyofus.com
                          127.0.0.1 www.anyofus.com
                          127.0.0.1 anysn.seproger.com
                          127.0.0.1 www.anysn.seproger.com
                          127.0.0.1 anything4health.com
                          127.0.0.1 apicpreview.com
                          127.0.0.1 www.apicpreview.com
                          127.0.0.1 appealcircuit.com
                          127.0.0.1 www.appealcircuit.com
                          127.0.0.1 approvedlinks.com
                          127.0.0.1 www.approvedlinks.com
                          127.0.0.1 apps.deskwizz.com
                          127.0.0.1 apps.webservicehost.com
                          127.0.0.1 aprotectedpage.com
                          127.0.0.1 www.aprotectedpage.com
                          127.0.0.1 apsua.com
                          127.0.0.1 archiviosex.net
                          127.0.0.1 www.archiviosex.net
                          127.0.0.1 aregay.com
                          127.0.0.1 ares-freebie.com
                          127.0.0.1 www.ares-freebie.com
                          127.0.0.1 arespro2007.com
                          127.0.0.1 www.arespro2007.com
                          127.0.0.1 aresultra.com
                          127.0.0.1 www.aresultra.com
                          127.0.0.1 ares-usa.com
                          127.0.0.1 www.ares-usa.com
                          127.0.0.1 arheo.com
                          127.0.0.1 arizonaweb.org
                          127.0.0.1 armitageinn.com
                          127.0.0.1 arquivojpgs.smtp.ru
                          127.0.0.1 www.arquivojpgs.smtp.ru
                          127.0.0.1 artachnid.com
                          127.0.0.1 art-func.com
                          127.0.0.1 art-xxx.com
                          127.0.0.1 asafebrowser.com
                          127.0.0.1 www.asafebrowser.com
                          127.0.0.1 asafetynotice.com
                          127.0.0.1 www.asafetynotice.com
                          127.0.0.1 asafetypage.com
                          127.0.0.1 www.asafetypage.com
                          127.0.0.1 asdbiz.biz
                          127.0.0.1 www.asdbiz.biz
                          127.0.0.1 asdeykuddq.com
                          127.0.0.1 www.asdeykuddq.com
                          127.0.0.1 asecurebar.com
                          127.0.0.1 www.asecurebar.com
                          127.0.0.1 asecureboard.com
                          127.0.0.1 www.asecureboard.com
                          127.0.0.1 asecurevalue.com
                          127.0.0.1 www.asecurevalue.com
                          127.0.0.1 asecurityissue.com
                          127.0.0.1 www.asecurityissue.com
                          127.0.0.1 asecuritynotice.com
                          127.0.0.1 www.asecuritynotice.com
                          127.0.0.1 asecuritypaper.com
                          127.0.0.1 www.asecuritypaper.com
                          127.0.0.1 asecuritystuff.com
                          127.0.0.1 www.asecuritystuff.com
                          127.0.0.1 asiankingkong.com
                          127.0.0.1 asianpornmag.com
                          127.0.0.1 www.asianpornmag.com
                          127.0.0.1 asiantoolbar.com
                          127.0.0.1 www.asiantoolbar.com
                          127.0.0.1 asidseiupc.com
                          127.0.0.1 www.asidseiupc.com
                          127.0.0.1 aslitalia.it
                          127.0.0.1 www.aslitalia.it
                          127.0.0.1 ass-gals.com
                          127.0.0.1 assureprotection.com
                          127.0.0.1 www.assureprotection.com
                          127.0.0.1 asta-killer.com
                          127.0.0.1 asupereva.it
                          127.0.0.1 www.asupereva.it
                          127.0.0.1 athenrye.com
                          127.0.0.1 atotalsafety.com
                          127.0.0.1 www.atotalsafety.com
                          127.0.0.1 atrueprotection.com
                          127.0.0.1 www.atrueprotection.com
                          127.0.0.1 atruesecurity.com
                          127.0.0.1 www.atruesecurity.com
                          127.0.0.1 attackware.com
                          127.0.0.1 www.attackware.com
                          127.0.0.1 attrezzi.biz
                          127.0.0.1 www.attrezzi.biz
                          127.0.0.1 aulde.net
                          127.0.0.1 www.aulde.net
                          127.0.0.1 aupereva.it
                          127.0.0.1 www.aupereva.it
                          127.0.0.1 autocontext.begun.ru
                          127.0.0.1 www.autocontext.begun.ru
                          127.0.0.1 autoescrowpay.com
                          127.0.0.1 avast.free-software-center.com
                          127.0.0.1 www.avast.free-software-center.com
                          127.0.0.1 avast-2007.com
                          127.0.0.1 www.avast-2007.com
                          127.0.0.1 avast-downloads.com
                          127.0.0.1 www.avast-downloads.com
                          127.0.0.1 avast-hq.com
                          127.0.0.1 www.avast-hq.com
                          127.0.0.1 avforce.com
                          127.0.0.1 www.avforce.com
                          127.0.0.1 avg.grab-it-today.net
                          127.0.0.1 www.avg.grab-it-today.net
                          127.0.0.1 avg.softwarecenterz.com
                          127.0.0.1 www.avg.softwarecenterz.com
                          127.0.0.1 avg-secure.com
                          127.0.0.1 www.avg-secure.com
                          127.0.0.1 avian-ads.com
                          127.0.0.1 avideoaxaccess.com
                          127.0.0.1 www.avideoaxaccess.com
                          127.0.0.1 avideosurfer.com
                          127.0.0.1 www.avideosurfer.com
                          127.0.0.1 aviewersoft.com
                          127.0.0.1 www.aviewersoft.com
                          127.0.0.1 avpcheckupdate.com
                          127.0.0.1 www.avpcheckupdate.com
                          127.0.0.1 avxizaaqada.biz
                          127.0.0.1 www.avxizaaqada.biz
                          127.0.0.1 avxiz-anjpn.biz
                          127.0.0.1 www.avxiz-anjpn.biz
                          127.0.0.1 avxizueorn.biz
                          127.0.0.1 www.avxizueorn.biz
                          127.0.0.1 avxiz-ueorn.biz
                          127.0.0.1 www.avxiz-ueorn.biz
                          127.0.0.1 avxiz-vtvcp.biz
                          127.0.0.1 www.avxiz-vtvcp.biz
                          127.0.0.1 avxiz-ygco.biz
                          127.0.0.1 www.avxiz-ygco.biz
                          127.0.0.1 avxiz-zqav.biz
                          127.0.0.1 www.avxiz-zqav.biz
                          127.0.0.1 awarninglist.com
                          127.0.0.1 www.awarninglist.com
                          127.0.0.1 awbeta.net-nucleus.com
                          127.0.0.1 awesomehomepage.com
                          127.0.0.1 www.awesomehomepage.com
                          127.0.0.1 awmcash.biz
                          127.0.0.1 awmdabest.com
                          127.0.0.1 axemediasoftware.com
                          127.0.0.1 www.axemediasoftware.com
                          127.0.0.1 aximageobject.com
                          127.0.0.1 www.aximageobject.com
                          127.0.0.1 axmediaproject.com
                          127.0.0.1 www.axmediaproject.com
                          127.0.0.1 axmediasoftware.com
                          127.0.0.1 www.axmediasoftware.com
                          127.0.0.1 axmediasolutions.com
                          127.0.0.1 www.axmediasolutions.com
                          127.0.0.1 axobjectpage.com
                          127.0.0.1 www.axobjectpage.com
                          127.0.0.1 axobjectsource.com
                          127.0.0.1 www.axobjectsource.com
                          127.0.0.1 axsoftwaretool.com
                          127.0.0.1 www.axsoftwaretool.com
                          127.0.0.1 axvideoproject.com
                          127.0.0.1 www.axvideoproject.com
                          127.0.0.1 axvideosetup.com
                          127.0.0.1 www.axvideosetup.com
                          127.0.0.1 ayakawamura.com
                          127.0.0.1 ayb.dns-look-up.com
                          127.0.0.1 ayb.netbios-wait.com
                          127.0.0.1 ayumitaniguchi.com
                          127.0.0.1 azebar.com
                          127.0.0.1 azureusclub.com
                          127.0.0.1 www.azureusclub.com
                          127.0.0.1 azureus-freebie.com
                          127.0.0.1 www.azureus-freebie.com
                          127.0.0.1 azzetta.it
                          127.0.0.1 www.azzetta.it
                          127.0.0.1 b.casalemedia.com
                          127.0.0.1 babe.k-lined.com
                          127.0.0.1 www.babe.k-lined.com
                          127.0.0.1 babe.the-killer.bz
                          127.0.0.1 www.babe.the-killer.bz
                          127.0.0.1 babenet.com
                          127.0.0.1 www.babenet.com
                          127.0.0.1 babespornmag.com
                          127.0.0.1 www.babespornmag.com
                          127.0.0.1 babeweb.de
                          127.0.0.1 www.babeweb.de
                          127.0.0.1 baccarat-other.info
                          127.0.0.1 www.baccarat-other.info
                          127.0.0.1 Backstripgirls.com
                          127.0.0.1 www.Backstripgirls.com
                          127.0.0.1 backup.mabou.org
                          127.0.0.1 balotierra.com
                          127.0.0.1 www.balotierra.com
                          127.0.0.1 bannedhost.net
                          127.0.0.1 barbudafarms.com
                          127.0.0.1 bardownload.com
                          127.0.0.1 www.bardownload.com
                          127.0.0.1 barnandfence.com
                          127.0.0.1 batsearch.com
                          127.0.0.1 baygraphicsllc.com
                          127.0.0.1 bbbsearch.com
                          127.0.0.1 bb-search.com
                          127.0.0.1 bdsmlibrary.net
                          127.0.0.1 bdsmpornmag.com
                          127.0.0.1 www.bdsmpornmag.com
                          127.0.0.1 bearshare.download-me.info
                          127.0.0.1 www.bearshare.download-me.info
                          127.0.0.1 bearshare.mp3-muzic.com
                          127.0.0.1 www.bearshare.mp3-muzic.com
                          127.0.0.1 bearshare-download.org
                          127.0.0.1 www.bearshare-download.org
                          127.0.0.1 bearshare-downloads.net
                          127.0.0.1 www.bearshare-downloads.net
                          127.0.0.1 bearsharelive.co.uk
                          127.0.0.1 www.bearsharelive.co.uk
                          127.0.0.1 bearshare-music-downloads.com
                          127.0.0.1 www.bearshare-music-downloads.com
                          127.0.0.1 bearsharepro2007.com
                          127.0.0.1 www.bearsharepro2007.com
                          127.0.0.1 bearshare-usa.com
                          127.0.0.1 www.bearshare-usa.com
                          127.0.0.1 bedhome.com
                          127.0.0.1 bediadance.com
                          127.0.0.1 beebappyy.biz
                          127.0.0.1 www.beebappyy.biz
                          127.0.0.1 begin2search.com
                          127.0.0.1 www.begin2search.com
                          127.0.0.1 bellabasketsfl.com
                          127.0.0.1 bernaolatwin.com
                          127.0.0.1 best-counter.com
                          127.0.0.1 bestcrawler.com
                          127.0.0.1 bestfor.ru
                          127.0.0.1 best-hardpics.com
                          127.0.0.1 bestmanage.org
                          127.0.0.1 www.bestmanage.org
                          127.0.0.1 bestmanage0.org
                          127.0.0.1 www.bestmanage0.org
                          127.0.0.1 bestmanage1.org
                          127.0.0.1 www.bestmanage1.org
                          127.0.0.1 bestmanage2.org
                          127.0.0.1 www.bestmanage2.org
                          127.0.0.1 bestmanage3.org
                          127.0.0.1 www.bestmanage3.org
                          127.0.0.1 bestmanage4.org
                          127.0.0.1 www.bestmanage4.org
                          127.0.0.1 bestmanage5.org
                          127.0.0.1 www.bestmanage5.org
                          127.0.0.1 bestmanage6.org
                          127.0.0.1 www.bestmanage6.org
                          127.0.0.1 bestmanage7.org
                          127.0.0.1 www.bestmanage7.org
                          127.0.0.1 bestmanage8.org
                          127.0.0.1 www.bestmanage8.org
                          127.0.0.1 bestmanage9.org
                          127.0.0.1 www.bestmanage9.org
                          127.0.0.1 bestporngate.com
                          127.0.0.1 bestsafetyguide.net
                          127.0.0.1 www.bestsafetyguide.net
                          127.0.0.1 best-spyware.info
                          127.0.0.1 www.best-spyware.info
                          127.0.0.1 best-targeted-traffic.com
                          127.0.0.1 www.best-targeted-traffic.com
                          127.0.0.1 best-voyeur.info
                          127.0.0.1 www.best-voyeur.info
                          127.0.0.1 bestweblinks.com
                          127.0.0.1 best-winning-casino.com
                          127.0.0.1 bestworldgirls-for-u.net
                          127.0.0.1 www.bestworldgirls-for-u.net
                          127.0.0.1 bestxporno.com
                          127.0.0.1 bettersearch.biz
                          127.0.0.1 www.bettersearch.biz
                          127.0.0.1 bgazzetta.it
                          127.0.0.1 www.bgazzetta.it
                          127.0.0.1 bgoogle.it
                          127.0.0.1 www.bgoogle.it
                          127.0.0.1 bigtrafficnetwork.com
                          127.0.0.1 www.bigtrafficnetwork.com
                          127.0.0.1 bigwww.com
                          127.0.0.1 www.bigwww.com
                          127.0.0.1 bin.errorprotector.com
                          127.0.0.1 bins.media-motor.net
                          127.0.0.1 bins2.media-motor.net
                          127.0.0.1 bis.180solutions.com
                          127.0.0.1 bitchesonline.net
                          127.0.0.1 bitcomet-freebie.com
                          127.0.0.1 www.bitcomet-freebie.com
                          127.0.0.1 biz.biz
                          127.0.0.1 blackblues00.com
                          127.0.0.1 www.blackblues00.com
                          127.0.0.1 blackhats.tc
                          127.0.0.1 www.blackhats.tc
                          127.0.0.1 blackhawksoftware.com
                          127.0.0.1 www.blackhawksoftware.com
                          127.0.0.1 blackjack-free.net
                          127.0.0.1 blazefind.com
                          127.0.0.1 blender.xu.pl
                          127.0.0.1 blondetgp.com
                          127.0.0.1 blue-elefant.com
                          127.0.0.1 www.blue-elefant.com
                          127.0.0.1 bm.theaimonline.com
                          127.0.0.1 www.bm.theaimonline.com
                          127.0.0.1 bnmgate.com
                          127.0.0.1 www.bnmgate.com
                          127.0.0.1 bodaciousbabette.com
                          127.0.0.1 bonzi.com
                          127.0.0.1 www.bonzi.com
                          127.0.0.1 boobdoll.com
                          127.0.0.1 boobsandtits.com
                          127.0.0.1 boobsclub.com
                          127.0.0.1 bookedspace.com
                          127.0.0.1 www.bookedspace.com
                          127.0.0.1 boom.com.vn
                          127.0.0.1 www.boom.com.vn
                          127.0.0.1 boredlife.com
                          127.0.0.1 bowlofogumbo.com
                          127.0.0.1 bpfq02.com
                          127.0.0.1 www.bpfq02.com
                          127.0.0.1 bqgate.com
                          127.0.0.1 www.bqgate.com
                          127.0.0.1 br.errorsafe.com
                          127.0.0.1 br.winantivirus.com
                          127.0.0.1 br.winfixer.com
                          127.0.0.1 bradcoem.org
                          127.0.0.1 braincodec.com
                          127.0.0.1 www.braincodec.com
                          127.0.0.1 brandiyoung.com
                          127.0.0.1 bravesentry.com
                          127.0.0.1 www.bravesentry.com
                          127.0.0.1 breenten.biz
                          127.0.0.1 www.breenten.biz
                          127.0.0.1 brodbfm.net
                          127.0.0.1 www.brodbfm.net
                          127.0.0.1 brookeburn.com
                          127.0.0.1 browserwise.com
                          127.0.0.1 www.browserwise.com
                          127.0.0.1 bucps.com
                          127.0.0.1 buhartes.info
                          127.0.0.1 buldog-stats.com
                          127.0.0.1 bullseye-network.com
                          127.0.0.1 www.bullseye-network.com
                          127.0.0.1 burgerkingbigscreen.com
                          127.0.0.1 burnsrecyclinginc.com
                          127.0.0.1 www.burnsrecyclinginc.com
                          127.0.0.1 buscards.net
                          127.0.0.1 bustyrussell.com
                          127.0.0.1 busysearch.net
                          127.0.0.1 www.busysearch.net
                          127.0.0.1 buttejazz.org
                          127.0.0.1 buy-find.info
                          127.0.0.1 www.buy-find.info
                          127.0.0.1 buyselldomain.net
                          127.0.0.1 buytraff.biz
                          127.0.0.1 www.buytraff.biz
                          127.0.0.1 buz.ru
                          127.0.0.1 bvirgilio.it
                          127.0.0.1 www.bvirgilio.it
                          127.0.0.1 c.centralmedia.ws
                          127.0.0.1 c.enhance.com
                          127.0.0.1 www.c.enhance.com
                          127.0.0.1 c.goclick.com
                          127.0.0.1 c4tdownload.com
                          127.0.0.1 www.c4tdownload.com
                          127.0.0.1 c5.www4free.info
                          127.0.0.1 www.c5.www4free.info
                          127.0.0.1 cache.surfaccuracy.com
                          127.0.0.1 www.cache.surfaccuracy.com
                          127.0.0.1 cache.ysbweb.com
                          127.0.0.1 calcioturris.com
                          127.0.0.1 calendaralerts.net
                          127.0.0.1 www.calendaralerts.net
                          127.0.0.1 cameouk.co.uk
                          127.0.0.1 www.cameouk.co.uk
                          127.0.0.1 cameup.com
                          127.0.0.1 camouflageclothingonline.net
                          127.0.0.1 www.camouflageclothingonline.net
                          127.0.0.1 camup.net
                          127.0.0.1 canberracricketcoaching.com
                          127.0.0.1 candycantaloupes.com
                          127.0.0.1 canidetect.org
                          127.0.0.1 www.canidetect.org
                          127.0.0.1 cantfind.com
                          127.0.0.1 www.cantfind.com
                          127.0.0.1 careers.dulcineasystems.net
                          127.0.0.1 carsands.com
                          127.0.0.1 carsrentals.net
                          127.0.0.1 cartoes.uol.com.br
                          127.0.0.1 casalemedia.com
                          127.0.0.1 www.casalemedia.com
                          127.0.0.1 cashdeluxe.net
                          127.0.0.1 www.cashdeluxe.net
                          127.0.0.1 cashengines.com
                          127.0.0.1 www.cashengines.com
                          127.0.0.1 cashsearch.biz
                          127.0.0.1 cashsurfers.com
                          127.0.0.1 www.cashsurfers.com
                          127.0.0.1 CashUnlim.com
                          127.0.0.1 www.CashUnlim.com
                          127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
                          127.0.0.1 casino2win.net
                          127.0.0.1 casino-gambling-1.net
                          127.0.0.1 casino-gambling-2.net
                          127.0.0.1 casinomidas.net
                          127.0.0.1 casinonline.net
                          127.0.0.1 casino-onlines.net
                          127.0.0.1 castingsamateur.com
                          127.0.0.1 www.castingsamateur.com
                          127.0.0.1 catallogue.com
                          127.0.0.1 catch-dc.info
                          127.0.0.1 www.catch-dc.info
                          127.0.0.1 categories.mygeek.com
                          127.0.0.1 catsss.da.ru
                          127.0.0.1 caxa.ru
                          127.0.0.1 cc.panet.org
                          127.0.0.1 ccecaedbebfcaf.com
                          127.0.0.1 www.ccecaedbebfcaf.com
                          127.0.0.1 cclebali.org
                          127.0.0.1 ccorriere.it
                          127.0.0.1 www.ccorriere.it
                          127.0.0.1 cdegate.com
                          127.0.0.1 www.cdegate.com
                          127.0.0.1 cdn.drivecleaner.com
                          127.0.0.1 cdn.errorsafe.com
                          127.0.0.1 cdn.movies-etc.com
                          127.0.0.1 cdn.winsoftware.com
                          127.0.0.1 cdn2.movies-etc.com
                          127.0.0.1 cdorriere.it
                          127.0.0.1 www.cdorriere.it
                          127.0.0.1 ceewawires.org
                          127.0.0.1 centralmedia.ws
                          127.0.0.1 certumgroup.com
                          127.0.0.1 cforriere.it
                          127.0.0.1 www.cforriere.it
                          127.0.0.1 check.jupitersatellites.biz
                          127.0.0.1 www.check.jupitersatellites.biz
                          127.0.0.1 checkin100.com
                          127.0.0.1 www.checkin100.com
                          127.0.0.1 checkssecurity.com
                          127.0.0.1 www.checkssecurity.com
                          127.0.0.1 chelancatering.com
                          127.0.0.1 chenshijituan.com
                          127.0.0.1 www.chenshijituan.com
                          127.0.0.1 childrenvilla.com
                          127.0.0.1 chips-4-free.com
                          127.0.0.1 chrisswasey.com
                          127.0.0.1 chriswallace.net
                          127.0.0.1 cia-trjn.myvnc.com
                          127.0.0.1 www.cia-trjn.myvnc.com
                          127.0.0.1 ciorriere.it
                          127.0.0.1 www.ciorriere.it
                          127.0.0.1 cirriere.it
                          127.0.0.1 www.cirriere.it
                          127.0.0.1 ckick4thumbs.com
                          127.0.0.1 cl55.biz
                          127.0.0.1 clackamasliteraryreview.com
                          127.0.0.1 cleansoftwares.com
                          127.0.0.1 www.cleansoftwares.com
                          127.0.0.1 clearsearch.cc
                          127.0.0.1 clearsearch.net
                          127.0.0.1 clickaire.com
                          127.0.0.1 click-codec.com
                          127.0.0.1 www.click-codec.com
                          127.0.0.1 clickhere4search.com
                          127.0.0.1 www.clickhere4search.com
                          127.0.0.1 click-now.net
                          127.0.0.1 clickspring.net
                          127.0.0.1 www.clickspring.net
                          127.0.0.1 click-to-download.com
                          127.0.0.1 www.click-to-download.com
                          127.0.0.1 clicktomakeasearch.com
                          127.0.0.1 www.clicktomakeasearch.com
                          127.0.0.1 clickyestoenter.net
                          127.0.0.1 client.exeupdate.com
                          127.0.0.1 client.myadultexplorer.com
                          127.0.0.1 cliks.org
                          127.0.0.1 www.cliks.org
                          127.0.0.1 clorriere.it
                          127.0.0.1 www.clorriere.it
                          127.0.0.1 clrsch.com
                          127.0.0.1 clubxxxvideo.com
                          127.0.0.1 www.clubxxxvideo.com
                          127.0.0.1 clusif.free.fr
                          127.0.0.1 cmtapestry.com
                          127.0.0.1 cnetadd.com
                          127.0.0.1 www.cnetadd.com
                          127.0.0.1 cnzz.com
                          127.0.0.1 www.cnzz.com
                          127.0.0.1 code.ignphrases.com
                          127.0.0.1 codec.ninoa.com
                          127.0.0.1 codecdvd.net
                          127.0.0.1 www.codecdvd.net
                          127.0.0.1 codec-fun.com
                          127.0.0.1 www.codec-fun.com
                          127.0.0.1 codecsoft.net
                          127.0.0.1 www.codecsoft.net
                          127.0.0.1 codrriere.it
                          127.0.0.1 www.codrriere.it
                          127.0.0.1 coeriere.it
                          127.0.0.1 www.coeriere.it
                          127.0.0.1 coerriere.it
                          127.0.0.1 www.coerriere.it
                          127.0.0.1 cofrriere.it
                          127.0.0.1 www.cofrriere.it
                          127.0.0.1 cogrriere.it
                          127.0.0.1 www.cogrriere.it
                          127.0.0.1 coirriere.it
                          127.0.0.1 www.coirriere.it
                          127.0.0.1 command.adservs.com
                          127.0.0.1 www.commonname.com
                          127.0.0.1 computerpcgames.net
                          127.0.0.1 www.computerpcgames.net
                          127.0.0.1 computerrecover.com
                          127.0.0.1 www.computerrecover.com
                          127.0.0.1 config.180solutions.com
                          127.0.0.1 content.dollarrevenue.com
                          127.0.0.1 www.content.dollarrevenue.com
                          127.0.0.1 content.ireit.com
                          127.0.0.1 www.content.ireit.com
                          127.0.0.1 content.onerateld.com
                          127.0.0.1 contentmatch.net
                          127.0.0.1 www.contentmatch.net
                          127.0.0.1 contra-virus.com
                          127.0.0.1 www.contra-virus.com
                          127.0.0.1 controlmeh.com
                          127.0.0.1 www.controlmeh.com
                          127.0.0.1 cooldeskalert.com
                          127.0.0.1 www.cooldeskalert.com
                          127.0.0.1 coolfetishsite.com
                          127.0.0.1 coolfreehost.com
                          127.0.0.1 coolfreepage.com
                          127.0.0.1 coolfreepages.com
                          127.0.0.1 cool-homepage.co
                          127.0.0.1 cool-homepage.com
                          127.0.0.1 coolmoneysearch.com
                          127.0.0.1 coolpornsearch.com
                          127.0.0.1 cool-search.net
                          127.0.0.1 cool-search.netfartpost.com
                          127.0.0.1 coolsearcher.info
                          127.0.0.1 coolservecorp.net
                          127.0.0.1 www.coolservecorp.net
                          127.0.0.1 coolwebsearch.com
                          127.0.0.1 www.coolwebsearch.com
                          127.0.0.1 cool-web-search.com
                          127.0.0.1 coolwebsearsh.com
                          127.0.0.1 coolwwwsearch.com
                          127.0.0.1 www.coolwwwsearch.com
                          127.0.0.1 cool-xxx.net
                          127.0.0.1 coorriere.it
                          127.0.0.1 www.coorriere.it
                          127.0.0.1 copmtraine.com
                          127.0.0.1 coprriere.it
                          127.0.0.1 www.coprriere.it
                          127.0.0.1 core.psyche-evolution.com
                          127.0.0.1 www.core.psyche-evolution.com
                          127.0.0.1 coreiere.it
                          127.0.0.1 www.coreiere.it
                          127.0.0.1 coreriere.it
                          127.0.0.1 www.coreriere.it
                          127.0.0.1 corrdiere.it
                          127.0.0.1 www.corrdiere.it
                          127.0.0.1 correiere.it
                          127.0.0.1 www.correiere.it
                          127.0.0.1 corrfiere.it
                          127.0.0.1 www.corrfiere.it
                          127.0.0.1 corrgiere.it
                          127.0.0.1 www.corrgiere.it
                          127.0.0.1 corridere.it
                          127.0.0.1 www.corridere.it
                          127.0.0.1 corriedre.it
                          127.0.0.1 www.corriedre.it
                          127.0.0.1 corriee.it
                          127.0.0.1 www.corriee.it
                          127.0.0.1 corrieere.it
                          127.0.0.1 www.corrieere.it
                          127.0.0.1 corriefre.it
                          127.0.0.1 www.corriefre.it
                          127.0.0.1 corriegre.it
                          127.0.0.1 www.corriegre.it
                          127.0.0.1 corrierde.it
                          127.0.0.1 www.corrierde.it
                          127.0.0.1 corriered.it
                          127.0.0.1 www.corriered.it
                          127.0.0.1 corrieree.it
                          127.0.0.1 www.corrieree.it
                          127.0.0.1 corrieref.it
                          127.0.0.1 www.corrieref.it
                          127.0.0.1 corrierer.it
                          127.0.0.1 www.corrierer.it
                          127.0.0.1 corrieres.it
                          127.0.0.1 www.corrieres.it
                          127.0.0.1 corrierew.it
                          127.0.0.1 www.corrierew.it
                          127.0.0.1 corrierfe.it
                          127.0.0.1 www.corrierfe.it
                          127.0.0.1 corrierge.it
                          127.0.0.1 www.corrierge.it
                          127.0.0.1 corrierr.it
                          127.0.0.1 www.corrierr.it
                          127.0.0.1 corrierre.it
                          127.0.0.1 www.corrierre.it
                          127.0.0.1 corrierse.it
                          127.0.0.1 www.corrierse.it
                          127.0.0.1 corrierte.it
                          127.0.0.1 www.corrierte.it
                          127.0.0.1 corrierw.it
                          127.0.0.1 www.corrierw.it
                          127.0.0.1 corrierwe.it
                          127.0.0.1 www.corrierwe.it
                          127.0.0.1 corriesre.it
                          127.0.0.1 www.corriesre.it
                          127.0.0.1 corriete.it
                          127.0.0.1 www.corriete.it
                          127.0.0.1 corrietre.it
                          127.0.0.1 www.corrietre.it
                          127.0.0.1 corriewre.it
                          127.0.0.1 www.corriewre.it
                          127.0.0.1 corrifere.it
                          127.0.0.1 www.corrifere.it
                          127.0.0.1 corriiere.it
                          127.0.0.1 www.corriiere.it
                          127.0.0.1 corrilere.it
                          127.0.0.1 www.corrilere.it
                          127.0.0.1 corrioere.it
                          127.0.0.1 www.corrioere.it
                          127.0.0.1 corrire.it
                          127.0.0.1 www.corrire.it
                          127.0.0.1 corrirere.it
                          127.0.0.1 www.corrirere.it
                          127.0.0.1 corrirre.it
                          127.0.0.1 www.corrirre.it
                          127.0.0.1 corrisere.it
                          127.0.0.1 www.corrisere.it
                          127.0.0.1 corriuere.it
                          127.0.0.1 www.corriuere.it
                          127.0.0.1 corriwere.it
                          127.0.0.1 www.corriwere.it
                          127.0.0.1 corriwre.it
                          127.0.0.1 www.corriwre.it
                          127.0.0.1 corrliere.it
                          127.0.0.1 www.corrliere.it
                          127.0.0.1 corroere.it
                          127.0.0.1 www.corroere.it
                          127.0.0.1 corroiere.it
                          127.0.0.1 www.corroiere.it
                          127.0.0.1 corrriere.it
                          127.0.0.1 www.corrriere.it
                          127.0.0.1 corrtiere.it
                          127.0.0.1 www.corrtiere.it
                          127.0.0.1 corruere.it
                          127.0.0.1 www.corruere.it
                          127.0.0.1 corruiere.it
                          127.0.0.1 www.corruiere.it
                          127.0.0.1 cortiere.it
                          127.0.0.1 www.cortiere.it
                          127.0.0.1 cortriere.it
                          127.0.0.1 www.cortriere.it
                          127.0.0.1 costrike.com
                          127.0.0.1 www.costrike.com
                          127.0.0.1 cotriere.it
                          127.0.0.1 www.cotriere.it
                          127.0.0.1 cotrriere.it
                          127.0.0.1 www.cotrriere.it
                          127.0.0.1 couldnotfind.com
                          127.0.0.1 count.cc
                          127.0.0.1 count.hitscount.net
                          127.0.0.1 count-all.com
                          127.0.0.1 countdutycall.info
                          127.0.0.1 www.countdutycall.info
                          127.0.0.1 counter.sexmaniack.com
                          127.0.0.1 cporriere.it
                          127.0.0.1 www.cporriere.it
                          127.0.0.1 cprriere.it
                          127.0.0.1 www.cprriere.it
                          127.0.0.1 cpvfeed.com
                          127.0.0.1 cracks.me.uk
                          127.0.0.1 cracks4all.com
                          127.0.0.1 www.cracks4all.com
                          127.0.0.1 crapsgold.info
                          127.0.0.1 www.crapsgold.info
                          127.0.0.1 Crazygirls-world.com
                          127.0.0.1 crazywinnings.com
                          127.0.0.1 www.crazywinnings.com
                          127.0.0.1 creamedcutties.com
                          127.0.0.1 createaccesskey.com
                          127.0.0.1 www.createaccesskey.com
                          127.0.0.1 creditsearchonline.com
                          127.0.0.1 crestring.com
                          127.0.0.1 crooder.com
                          127.0.0.1 crriere.it
                          127.0.0.1 www.crriere.it
                          127.0.0.1 crystalysmedia.com
                          127.0.0.1 www.crystalysmedia.com
                          127.0.0.1 csx.adservs.com
                          127.0.0.1 www.csx.adservs.com
                          127.0.0.1 cts.180solutions.com
                          127.0.0.1 cuisinartoven.com
                          127.0.0.1 www.cuisinartoven.com
                          127.0.0.1 curedc.info
                          127.0.0.1 www.curedc.info
                          127.0.0.1 curepcsolutions.com
                          127.0.0.1 www.curepcsolutions.com
                          127.0.0.1 curvedspaces.com
                          127.0.0.1 cutadult.com
                          127.0.0.1 www.cutadult.com
                          127.0.0.1 cvirgilio.it
                          127.0.0.1 www.cvirgilio.it
                          127.0.0.1 cvorriere.it
                          127.0.0.1 www.cvorriere.it
                          127.0.0.1 cvs.jps.ru
                          127.0.0.1 cvsymphony.com
                          127.0.0.1 cxorriere.it
                          127.0.0.1 www.cxorriere.it
                          127.0.0.1 cyberrape.com
                          127.0.0.1 www.cyberrape.com
                          127.0.0.1 cydom.com
                          127.0.0.1 cydoor.com
                          127.0.0.1 www.cydoor.com
                          127.0.0.1 daily-gals.com
                          127.0.0.1 dailypornmag.com
                          127.0.0.1 www.dailypornmag.com
                          127.0.0.1 dailyteenspic.com
                          127.0.0.1 dailytoolbar.com
                          127.0.0.1 www.dailytoolbar.com
                          127.0.0.1 dancingbabycd.com
                          127.0.0.1 data-hoster.com
                          127.0.0.1 www.data-hoster.com
                          127.0.0.1 datanotary.com
                          127.0.0.1 datareco.com
                          127.0.0.1 dating-galaxy.info
                          127.0.0.1 www.dating-galaxy.info
                          127.0.0.1 dating-search.net
                          127.0.0.1 davemarshall.org
                          127.0.0.1 db105.com
                          127.0.0.1 dbdecicated.com
                          127.0.0.1 www.dbdecicated.com
                          127.0.0.1 dbxcompany.com
                          127.0.0.1 www.dbxcompany.com
                          127.0.0.1 dcdl.dmcast.com
                          127.0.0.1 dcfitusa.com
                          127.0.0.1 dcorriere.it
                          127.0.0.1 www.dcorriere.it
                          127.0.0.1 dcurtis.com
                          127.0.0.1 www.dcurtis.com
                          127.0.0.1 dcww.dmcast.com
                          127.0.0.1 de.ag
                          127.0.0.1 de.drivecleaner.com
                          127.0.0.1 de.errorsafe.com
                          127.0.0.1 de.winantivirus.com
                          127.0.0.1 de98.remsys.org
                          127.0.0.1 debay.it
                          127.0.0.1 www.debay.it
                          127.0.0.1 dedmazay.3322.org
                          127.0.0.1 dedsearch.com
                          127.0.0.1 www.dedsearch.com
                          127.0.0.1 defaultsearch.net
                          127.0.0.1 Defensaantimalware.com
                          127.0.0.1 www.Defensaantimalware.com
                          127.0.0.1 deja-rue.com
                          127.0.0.1 www.deja-rue.com
                          127.0.0.1 derklaif.biz
                          127.0.0.1 www.derklaif.biz
                          127.0.0.1 derrari.it
                          127.0.0.1 www.derrari.it
                          127.0.0.1 desarrollocreativo.com
                          127.0.0.1 deskbar.worldtostart.com
                          127.0.0.1 www.deskbar.worldtostart.com
                          127.0.0.1 deskwizz.com
                          127.0.0.1 www.deskwizz.com
                          127.0.0.1 dev.ntcor.com
                          127.0.0.1 develip.com
                          127.0.0.1 dewis.spb.ru
                          127.0.0.1 dewis.us
                          127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
                          127.0.0.1 dgbusiness.com
                          127.0.0.1 www.dgbusiness.com
                          127.0.0.1 dialer2004.com
                          127.0.0.1 dialerclub.com
                          127.0.0.1 www.dialerclub.com
                          127.0.0.1 dialer-shop.com
                          127.0.0.1 www.dialer-shop.com
                          127.0.0.1 dialoff.com
                          127.0.0.1 www.dialoff.com
                          127.0.0.1 did.i-used.cc
                          127.0.0.1 www.did.i-used.cc
                          127.0.0.1 dietpills4free.com
                          127.0.0.1 dietpussy.com
                          127.0.0.1 digikeygen.com
                          127.0.0.1 www.digikeygen.com
                          127.0.0.1 digistreamsa.com
                          127.0.0.1 digitalcoders.net
                          127.0.0.1 www.digitalcoders.net
                          127.0.0.1 www.digitalfan.com
                          127.0.0.1 digital-pornography.com
                          127.0.0.1 dionforvalleycouncil.org
                          127.0.0.1 directdvdpro.com
                          127.0.0.1 www.directdvdpro.com
                          127.0.0.1 directporta.info
                          127.0.0.1 www.directporta.info
                          127.0.0.1 directsearchzone.com
                          127.0.0.1 www.directsearchzone.com
                          127.0.0.1 dist.checkin100.com
                          127.0.0.1 dl.ad-ware.cc
                          127.0.0.1 dl.malwarewipe.com
                          127.0.0.1 dl.targetsaver.com
                          127.0.0.1 www.dl.targetsaver.com
                          127.0.0.1 dl.web-nexus.net
                          127.0.0.1 dl1.antivermins.com
                          127.0.0.1 dl1.antivirgear.com
                          127.0.0.1 dl1.spydawn.com
                          127.0.0.1 dl1.virusprotectpro.com
                          127.0.0.1 dl10.spyfalcon.com
                          127.0.0.1 dl16.spyfalcon.com
                          127.0.0.1 dl2.spyfalcon.com
                          127.0.0.1 dl2.spyheal.com
                          127.0.0.1 dl2.spywarestrike.com
                          127.0.0.1 dl3.spyfalcon.com
                          127.0.0.1 dl3.spyheal.com
                          127.0.0.1 dl3.spywarestrike.com
                          127.0.0.1 dl4.spyfalcon.com
                          127.0.0.1 dl4.spywarestrike.com
                          127.0.0.1 dl5.spyfalcon.com
                          127.0.0.1 dl5.spywarestrike.com
                          127.0.0.1 dl6.spywarestrike.com
                          127.0.0.1 dl7.spywarestrike.com
                          127.0.0.1 dl8.spyheal.com
                          127.0.0.1 dl8.spywarestrike.com
                          127.0.0.1 dl9.spyfalcon.com
                          127.0.0.1 dmcast.com
                          127.0.0.1 www.dmcast.com
                          127.0.0.1 dnaads.com
                          127.0.0.1 www.dnaads.com
                          127.0.0.1 dnl.mabou.org
                          127.0.0.1 dns-look-up.com
                          127.0.0.1 www.dns-look-up.com
                          127.0.0.1 doctorwaldron.com
                          127.0.0.1 document-not-found.pornpic.org
                          127.0.0.1 doggyaction.com
                          127.0.0.1 dogproblemswebsite.com
                          127.0.0.1 www.dogproblemswebsite.com
                          127.0.0.1 doktorxxx.com
                          127.0.0.1 dollarrevenue.com
                          127.0.0.1 domaincar.com
                          127.0.0.1 www.domaincar.com
                          127.0.0.1 domains2003.net
                          127.0.0.1 domains-for-you-online.com
                          127.0.0.1 domain-your-registration.com
                          127.0.0.1 domkrat.com
                          127.0.0.1 dotcomtoolbar.com
                          127.0.0.1 www.dotcomtoolbar.com
                          127.0.0.1 down.136136.net
                          127.0.0.1 download.abetterinternet.com
                          127.0.0.1 download.antispywarebot.com
                          127.0.0.1 www.download.antispywarebot.com
                          127.0.0.1 download.bardownload.com
                          127.0.0.1 www.download.bardownload.com
                          127.0.0.1 download.bravesentry.com
                          127.0.0.1 www.download.bravesentry.com
                          127.0.0.1 download.cdn.drivecleaner.com
                          127.0.0.1 download.cdn.errorsafe.com
                          127.0.0.1 download.cdn.winsoftware.com
                          127.0.0.1 download.errorsafe.com
                          127.0.0.1 download.jupitersatellites.biz
                          127.0.0.1 www.download.jupitersatellites.biz
                          127.0.0.1 download.searchtabs.net
                          127.0.0.1 download.secureyournet.biz
                          127.0.0.1 www.download.secureyournet.biz
                          127.0.0.1 download.spyonthis.net
                          127.0.0.1 download.spy-shredder.com
                          127.0.0.1 download.systemdoctor.com
                          127.0.0.1 download.winantispyware.com
                          127.0.0.1 download.winantivirus.com
                          127.0.0.1 download.windrivecleaner.com
                          127.0.0.1 download.winfixer.com
                          127.0.0.1 download10.spywarequake.com
                          127.0.0.1 download11.spywarequake.com
                          127.0.0.1 download12.spywarequake.com
                          127.0.0.1 download13.spywarequake.com
                          127.0.0.1 download15.spywarequake.com
                          127.0.0.1 download2.spywarequake.com
                          127.0.0.1 download-2007.com
                          127.0.0.1 www.download-2007.com
                          127.0.0.1 download3.spyaxe.com
                          127.0.0.1 download3.spywarequake.com
                          127.0.0.1 download4.spyaxe.com
                          127.0.0.1 download4.spywarequake.com
                          127.0.0.1 download5.spyaxe.com
                          127.0.0.1 download5.spywarequake.com
                          127.0.0.1 download6.spyaxe.com
                          127.0.0.1 download7.spywarequake.com
                          127.0.0.1 download8.spywarequake.com
                          127.0.0.1 download9.spywarequake.com
                          127.0.0.1 download-ad-aware.com
                          127.0.0.1 www.download-ad-aware.com
                          127.0.0.1 download-all-4-free.com
                          127.0.0.1 www.download-all-4-free.com
                          127.0.0.1 download-all-area.com
                          127.0.0.1 www.download-all-area.com
                          127.0.0.1 download-antivir.com
                          127.0.0.1 www.download-antivir.com
                          127.0.0.1 downloadanysong.com
                          127.0.0.1 www.downloadanysong.com
                          127.0.0.1 download-avast.com
                          127.0.0.1 www.download-avast.com
                          127.0.0.1 downloadcorporation.com
                          127.0.0.1 www.downloadcorporation.com
                          127.0.0.1 download-dvdshrink.com
                          127.0.0.1 www.download-dvdshrink.com
                          127.0.0.1 download-for-free.net
                          127.0.0.1 www.download-for-free.net
                          127.0.0.1 downloadfreesoft.com
                          127.0.0.1 www.downloadfreesoft.com
                          127.0.0.1 downloadfreeway.com
                          127.0.0.1 www.downloadfreeway.com
                          127.0.0.1 downloadimesh.com
                          127.0.0.1 www.downloadimesh.com
                          127.0.0.1 download-itunes-now.com
                          127.0.0.1 www.download-itunes-now.com
                          127.0.0.1 download-limewire.org
                          127.0.0.1 www.download-limewire.org
                          127.0.0.1 downloadlost.tv
                          127.0.0.1 www.downloadlost.tv
                          127.0.0.1 downloadmax.net
                          127.0.0.1 www.downloadmax.net
                          127.0.0.1 download-mcafee.com
                          127.0.0.1 www.download-mcafee.com
                          127.0.0.1 download-me.info
                          127.0.0.1 downloadmediaax.com
                          127.0.0.1 www.downloadmediaax.com
                          127.0.0.1 downloadpics.net
                          127.0.0.1 www.downloadpics.net
                          127.0.0.1 download-real-player.com
                          127.0.0.1 www.download-real-player.com
                          127.0.0.1 downloads.180solutions.com
                          127.0.0.1 downloads.adaware.cc
                          127.0.0.1 downloadservicearea.com
                          127.0.0.1 www.downloadservicearea.com
                          127.0.0.1 downloads-free.org
                          127.0.0.1 www.downloads-free.org
                          127.0.0.1 downloadsglobe.com
                          127.0.0.1 www.downloadsglobe.com
                          127.0.0.1 download-this.us
                          127.0.0.1 www.download-this.us
                          127.0.0.1 download-trillian.com
                          127.0.0.1 www.download-trillian.com
                          127.0.0.1 downloadv3.com
                          127.0.0.1 www.downloadv3.com
                          127.0.0.1 downloadvax.com
                          127.0.0.1 www.downloadvax.com
                          127.0.0.1 download-windvd.com
                          127.0.0.1 www.download-windvd.com
                          127.0.0.1 download-winrar.com
                          127.0.0.1 www.download-winrar.com
                          127.0.0.1 downloadwizard.com
                          127.0.0.1 downloadzcenter.com
                          127.0.0.1 downloadzcentral.com
                          127.0.0.1 downloadzfree.com
                          127.0.0.1 www.downloadzfree.com
                          127.0.0.1 downloadznow.net
                          127.0.0.1 download-zone-free.com
                          127.0.0.1 www.download-zone-free.com
                          127.0.0.1 download-zone-free.net
                          127.0.0.1 www.download-zone-free.net
                          127.0.0.1 dp-host.com
                          127.0.0.1 dr.mcboo.com
                          127.0.0.1 dr.webhancer.com
                          127.0.0.1 www.dr.webhancer.com
                          127.0.0.1 dr2.webhancer.com
                          127.0.0.1 www.dr2.webhancer.com
                          127.0.0.1 dr38.mcboo.com
                          127.0.0.1 dr47.mcboo.com
                          127.0.0.1 dragqueen.gay-clan.com
                          127.0.0.1 drepubblica.it
                          127.0.0.1 www.drepubblica.it
                          127.0.0.1 drivecleaner.com
                          127.0.0.1 www.drivecleaner.com
                          127.0.0.1 drivecleanr.com
                          127.0.0.1 www.drivecleanr.com
                          127.0.0.1 drocherway.com
                          127.0.0.1 dropspam.com
                          127.0.0.1 www.dropspam.com
                          127.0.0.1 drug-sources-exposed.com
                          127.0.0.1 drvvv.com
                          127.0.0.1 dsupereva.it
                          127.0.0.1 www.dsupereva.it
                          127.0.0.1 dtlproduct.com
                          127.0.0.1 www.dtlproduct.com
                          127.0.0.1 dudu.com
                          127.0.0.1 www.dudu.com
                          127.0.0.1 dulcineasystems.net
                          127.0.0.1 dumpserv.com
                          127.0.0.1 duolaimi.net
                          127.0.0.1 dutch-sex.com
                          127.0.0.1 dvdaccess.net
                          127.0.0.1 www.dvdaccess.net
                          127.0.0.1 dvdbank.org
                          127.0.0.1 dvdcodec.net
                          127.0.0.1 www.dvdcodec.net
                          127.0.0.1 dvdsmovies.net
                          127.0.0.1 www.dvdsmovies.net
                          127.0.0.1 dvdsvideos.net
                          127.0.0.1 www.dvdsvideos.net
                          127.0.0.1 dvdtocdsite.com
                          127.0.0.1 www.dvdtocdsite.com
                          127.0.0.1 dynamique.drivecleaner.com
                          127.0.0.1 e3bay.it
                          127.0.0.1 www.e3bay.it
                          127.0.0.1 e4bay.it
                          127.0.0.1 www.e4bay.it
                          127.0.0.1 eager-sex.com
                          127.0.0.1 earthllnk.net
                          127.0.0.1 www.earthllnk.net
                          127.0.0.1 eases.net
                          127.0.0.1 easyantispy.com
                          127.0.0.1 easybestdeals.com
                          127.0.0.1 www.easybestdeals.com
                          127.0.0.1 easycategories.com
                          127.0.0.1 easymp3musicnow.com
                          127.0.0.1 www.easymp3musicnow.com
                          127.0.0.1 easy-pharmacy.info
                          127.0.0.1 www.easy-pharmacy.info
                          127.0.0.1 easy-search.net
                          127.0.0.1 easysearch4you.com
                          127.0.0.1 www.easysearch4you.com
                          127.0.0.1 easysearchingtips.com
                          127.0.0.1 easyspyware.com
                          127.0.0.1 www.easyspyware.com
                          127.0.0.1 easywww.info
                          127.0.0.1 www.easywww.info
                          127.0.0.1 eba6y.it
                          127.0.0.1 www.eba6y.it
                          127.0.0.1 eba7y.it
                          127.0.0.1 www.eba7y.it
                          127.0.0.1 ebaay.it
                          127.0.0.1 www.ebaay.it
                          127.0.0.1 ebagy.it
                          127.0.0.1 www.ebagy.it
                          127.0.0.1 ebahy.it
                          127.0.0.1 www.ebahy.it
                          127.0.0.1 ebajy.it
                          127.0.0.1 www.ebajy.it
                          127.0.0.1 ebaqy.it
                          127.0.0.1 www.ebaqy.it
                          127.0.0.1 ebasy.it
                          127.0.0.1 www.ebasy.it
                          127.0.0.1 ebaty.it
                          127.0.0.1 www.ebaty.it
                          127.0.0.1 ebauy.it
                          127.0.0.1 www.ebauy.it
                          127.0.0.1 ebav.com
                          127.0.0.1 ebaw.com
                          127.0.0.1 ebawy.it
                          127.0.0.1 www.ebawy.it
                          127.0.0.1 ebaxy.it
                          127.0.0.1 www.ebaxy.it
                          127.0.0.1 ebay6.it
                          127.0.0.1 www.ebay6.it
                          127.0.0.1 ebay7.it
                          127.0.0.1 www.ebay7.it
                          127.0.0.1 ebayg.it
                          127.0.0.1 www.ebayg.it
                          127.0.0.1 ebayh.it
                          127.0.0.1 www.ebayh.it
                          127.0.0.1 ebayj.it
                          127.0.0.1 www.ebayj.it
                          127.0.0.1 ebayt.it
                          127.0.0.1 www.ebayt.it
                          127.0.0.1 ebayu.it
                          127.0.0.1 www.ebayu.it
                          127.0.0.1 ebazy.it
                          127.0.0.1 www.ebazy.it
                          127.0.0.1 ebch.com
                          127.0.0.1 ebdv.com
                          127.0.0.1 ebdw.com
                          127.0.0.1 ebestfind.org
                          127.0.0.1 www.ebestfind.org
                          127.0.0.1 ebgay.it
                          127.0.0.1 www.ebgay.it
                          127.0.0.1 ebgo.com
                          127.0.0.1 ebhay.it
                          127.0.0.1 www.ebhay.it
                          127.0.0.1 ebjp.com
                          127.0.0.1 ebkb.com
                          127.0.0.1 ebkn.com
                          127.0.0.1 ebky.com
                          127.0.0.1 eblv.com
                          127.0.0.1 ebmu.com
                          127.0.0.1 ebnay.it
                          127.0.0.1 www.ebnay.it
                          127.0.0.1 ebony-pornmag.com
                          127.0.0.1 www.ebony-pornmag.com
                          127.0.0.1 ebonypornmag.com
                          127.0.0.1 www.ebonypornmag.com
                          127.0.0.1 ebqay.it
                          127.0.0.1 www.ebqay.it
                          127.0.0.1 ebsay.it
                          127.0.0.1 www.ebsay.it
                          127.0.0.1 ebsy.it
                          127.0.0.1 www.ebsy.it
                          127.0.0.1 ebvay.it
                          127.0.0.1 www.ebvay.it
                          127.0.0.1 ebvr.com
                          127.0.0.1 ebway.it
                          127.0.0.1 www.ebway.it
                          127.0.0.1 ebxay.it
                          127.0.0.1 www.ebxay.it
                          127.0.0.1 ebzay.it
                          127.0.0.1 www.ebzay.it
                          127.0.0.1 ecmh.com
                          127.0.0.1 ecmp.com
                          127.0.0.1 ecosrioplatenses.org
                          127.0.0.1 ecpm.com
                          127.0.0.1 ecstasyporn.net
                          127.0.0.1 ecwz.com
                          127.0.0.1 ecyb.com
                          127.0.0.1 edbay.it
                          127.0.0.1 www.edbay.it
                          127.0.0.1 edhq.com
                          127.0.0.1 edietprogram.com
                          127.0.0.1 www.edietprogram.com
                          127.0.0.1 edty.com
                          127.0.0.1 eduy.com
                          127.0.0.1 eebay.it
                          127.0.0.1 www.eebay.it
                          127.0.0.1 eeev.com
                          127.0.0.1 eepubblica.it
                          127.0.0.1 www.eepubblica.it
                          127.0.0.1 efbay.it
                          127.0.0.1 www.efbay.it
                          127.0.0.1 egbay.it
                          127.0.0.1 www.egbay.it
                          127.0.0.1 ehbay.it
                          127.0.0.1 www.ehbay.it
                          127.0.0.1 eikokoike.com
                          127.0.0.1 elitecodec.com
                          127.0.0.1 www.elitecodec.com
                          127.0.0.1 elitemediagroup.net
                          127.0.0.1 www.elitemediagroup.net
                          127.0.0.1 e-localad.com
                          127.0.0.1 emailicon.org
                          127.0.0.1 www.emailicon.org
                          127.0.0.1 emch.com
                          127.0.0.1 emcodec.com
                          127.0.0.1 www.emcodec.com
                          127.0.0.1 emediacodec.com
                          127.0.0.1 www.emediacodec.com
                          127.0.0.1 emule.mp3-muzic.com
                          127.0.0.1 www.emule.mp3-muzic.com
                          127.0.0.1 emuledownloadhome.com
                          127.0.0.1 www.emuledownloadhome.com
                          127.0.0.1 emule-freebie.com
                          127.0.0.1 www.emule-freebie.com
                          127.0.0.1 enay.it
                          127.0.0.1 www.enay.it
                          127.0.0.1 enbay.it
                          127.0.0.1 www.enbay.it
                          127.0.0.1 energy-factor.com
                          127.0.0.1 www.energy-factor.com
                          127.0.0.1 engineplay.com
                          127.0.0.1 www.engineplay.com
                          127.0.0.1 engine-ticket.com
                          127.0.0.1 www.engine-ticket.com
                          127.0.0.1 enhance.com
                          127.0.0.1 www.enhance.com
                          127.0.0.1 enhancevideos.com
                          127.0.0.1 www.enhancevideos.com
                          127.0.0.1 enitinvest.net
                          127.0.0.1 enjoywebsurf.com
                          127.0.0.1 entertainsite.net
                          127.0.0.1 www.entertainsite.net
                          127.0.0.1 enterthesearch.com
                          127.0.0.1 www.enterthesearch.com
                          127.0.0.1 e-plus.cc
                          127.0.0.1 epornsex.com
                          127.0.0.1 eprotectionline.com
                          127.0.0.1 www.eprotectionline.com
                          127.0.0.1 eprotectpage.com
                          127.0.0.1 www.eprotectpage.com
                          127.0.0.1 erbay.it
                          127.0.0.1 www.erbay.it
                          127.0.0.1 erepubblica.it
                          127.0.0.1 www.erepubblica.it
                          127.0.0.1 ergosites.com
                          127.0.0.1 erossoalice.it
                          127.0.0.1 www.erossoalice.it
                          127.0.0.1 errari.it
                          127.0.0.1 www.errari.it
                          127.0.0.1 error404site.com
                          127.0.0.1 www.error404site.com
                          127.0.0.1 error404site.net
                          127.0.0.1 www.error404site.net
                          127.0.0.1 errorkiller.com
                          127.0.0.1 www.errorkiller.com
                          127.0.0.1 errorprotector.com
                          127.0.0.1 www.errorprotector.com
                          127.0.0.1 errorsafe.com
                          127.0.0.1 www.errorsafe.com
                          127.0.0.1 errorsdns.com
                          127.0.0.1 www.errorsdns.com
                          127.0.0.1 ert0003.e76.163ns.com
                          127.0.0.1 ertikadeswiokinganfujas.com
                          127.0.0.1 www.ertikadeswiokinganfujas.com
                          127.0.0.1 es.winantivirus.com
                          127.0.0.1 es0-www.5zgmu7o20kt5d8yq.com
                          127.0.0.1 es1-www.5zgmu7o20kt5d8yq.com
                          127.0.0.1 es2-www.5zgmu7o20kt5d8yq.com
                          127.0.0.1 es3-www.5zgmu7o20kt5d8yq.com
                          127.0.0.1 es4-www.5zgmu7o20kt5d8yq.com
                          127.0.0.1 es5-www.5zgmu7o20kt5d8yq.com
                          127.0.0.1 es6-www.5zgmu7o20kt5d8yq.com
                          127.0.0.1 es7-www.5zgmu7o20kt5d8yq.com
                          127.0.0.1 es8-www.5zgmu7o20kt5d8yq.com
                          127.0.0.1 es9-www.5zgmu7o20kt5d8yq.com
                          127.0.0.1 esafetylist.com
                          127.0.0.1 www.esafetylist.com
                          127.0.0.1 esafetypage.com
                          127.0.0.1 www.esafetypage.com
                          127.0.0.1 esbay.it
                          127.0.0.1 www.esbay.it
                          127.0.0.1 esearch2005.com
                          127.0.0.1 www.esearch2005.com
                          127.0.0.1 esecuritynote.com
                          127.0.0.1 www.esecuritynote.com
                          127.0.0.1 esecuritypage.com
                          127.0.0.1 www.esecuritypage.com
                          127.0.0.1 esupereva.it
                          127.0.0.1 www.esupereva.it
                          127.0.0.1 etomi.all-downloads-now.com
                          127.0.0.1 www.etomi.all-downloads-now.com
                          127.0.0.1 eupdatepage.com
                          127.0.0.1 www.eupdatepage.com
                          127.0.0.1 euuu.com
                          127.0.0.1 evbay.it
                          127.0.0.1 www.evbay.it
                          127.0.0.1 evidence-detector.biz
                          127.0.0.1 evilspidercomics.com
                          127.0.0.1 evko.biz
                          127.0.0.1 www.evko.biz
                          127.0.0.1 ewbay.it
                          127.0.0.1 www.ewbay.it
                          127.0.0.1 ewebsearch.net
                          127.0.0.1 e-websitesolutions.com
                          127.0.0.1 ewizard.cc
                          127.0.0.1 exaccess.ru
                          127.0.0.1 www.exaccess.ru
                          127.0.0.1 excellentsckin.com
                          127.0.0.1 exeupdate.com
                          127.0.0.1 www.exeupdate.com
                          127.0.0.1 exflow.org
                          127.0.0.1 www.exflow.org
                          127.0.0.1 exit.megago.com
                          127.0.0.1 expandvideo.com
                          127.0.0.1 www.expandvideo.com
                          127.0.0.1 exportplay.com
                          127.0.0.1 www.exportplay.com
                          127.0.0.1 extremepaidsurveys.com
                          127.0.0.1 www.extremepaidsurveys.com
                          127.0.0.1 extremeseek.net
                          127.0.0.1 eza1netsearch.com
                          127.0.0.1 www.eza1netsearch.com
                          127.0.0.1 ezcybersearch.com
                          127.0.0.1 www.ezcybersearch.com
                          127.0.0.1 ez-searching.com
                          127.0.0.1 ezwebsearching.com
                          127.0.0.1 www.ezwebsearching.com
                          127.0.0.1 f1.bestmanage.org
                          127.0.0.1 f1.truth-is-out-there.org
                          127.0.0.1 f1organizer.com
                          127.0.0.1 www.f1organizer.com
                          127.0.0.1 f2.bestmanage.org
                          127.0.0.1 f2.truth-is-out-there.org
                          127.0.0.1 f3.bestmanage.org
                          127.0.0.1 f3.truth-is-out-there.org
                          127.0.0.1 f4.bestmanage.org
                          127.0.0.1 f4.truth-is-out-there.org
                          127.0.0.1 f5.bestmanage.org
                          127.0.0.1 f5.truth-is-out-there.org
                          127.0.0.1 f6.bestmanage.org
                          127.0.0.1 f7.bestmanage.org
                          127.0.0.1 f7.truth-is-out-there.org
                          127.0.0.1 f8.bestmanage.org
                          127.0.0.1 f8.truth-is-out-there.org
                          127.0.0.1 f9.bestmanage.org
                          127.0.0.1 f9.truth-is-out-there.org
                          127.0.0.1 fairsearcher.com
                          127.0.0.1 www.fairsearcher.com
                          127.0.0.1 faithstevens.com
                          127.0.0.1 fantasiewelten.com
                          127.0.0.1 farmacept32.phpnet.us
                          127.0.0.1 farmsteadbandb.com
                          127.0.0.1 farse.com
                          127.0.0.1 fartpost.com
                          127.0.0.1 fastfreedownload.com
                          127.0.0.1 fastmetasearch.com
                          127.0.0.1 www.fastmetasearch.com
                          127.0.0.1 fastssearch.com
                          127.0.0.1 www.fastssearch.com
                          127.0.0.1 fastwebfinder.com
                          127.0.0.1 faxporn.com
                          127.0.0.1 fazzetta.it
                          127.0.0.1 www.fazzetta.it
                          127.0.0.1 fcorriere.it
                          127.0.0.1 www.fcorriere.it
                          127.0.0.1 featured-results.com
                          127.0.0.1 febay.it
                          127.0.0.1 www.febay.it
                          127.0.0.1 feed.dedsearch.com
                          127.0.0.1 feeds.2search.com
                          127.0.0.1 www.feeds.2search.com
                          127.0.0.1 feeds2.2search.org
                          127.0.0.1 www.feeds2.2search.org
                          127.0.0.1 ferraeri.it
                          127.0.0.1 www.ferraeri.it
                          127.0.0.1 ferrai.it
                          127.0.0.1 www.ferrai.it
                          127.0.0.1 ferrarei.it
                          127.0.0.1 www.ferrarei.it
                          127.0.0.1 ferrarti.it
                          127.0.0.1 www.ferrarti.it
                          127.0.0.1 ferrasri.it
                          127.0.0.1 www.ferrasri.it
                          127.0.0.1 ferratri.it
                          127.
                          0
                          1. Utilisateur anonyme
                            Hi,

                            Refait moi un hijackthis.

                            Alut.
                            0
                            1. tyfu Auteur
                              Bonjour,

                              Comme demandé, ci-dessous le rapport Hijackthis
                              Merci

                              Logfile of Trend Micro HijackThis v2.0.2
                              Scan saved at 14:54:57, on 24/11/2008
                              Platform: Windows Vista (WinNT 6.00.1904)
                              MSIE: Internet Explorer v7.00 (7.00.6000.16757)
                              Boot mode: Normal

                              Running processes:
                              C:\Windows\system32\taskeng.exe
                              C:\Windows\system32\Dwm.exe
                              C:\Windows\Explorer.EXE
                              C:\Windows\vsnp2std.exe
                              C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                              C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                              C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
                              C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                              C:\Program Files\iTunes\iTunesHelper.exe
                              C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
                              C:\Program Files\Logitech\QuickCam\Quickcam.exe
                              C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                              C:\Program Files\Windows Media Player\wmpnscfg.exe
                              C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                              C:\Windows\system32\wbem\unsecapp.exe
                              C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
                              C:\Windows\system32\wuauclt.exe
                              C:\Windows\system32\conime.exe
                              C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
                              C:\Users\Tony\AppData\Local\Temp\~tmpa.exe
                              C:\Windows\system32\regsvr32.exe
                              C:\Program Files\Internet Explorer\iexplore.exe
                              C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
                              C:\Windows\system32\taskeng.exe
                              C:\Program Files\Mozilla Firefox\firefox.exe
                              C:\Windows\system32\SearchFilterHost.exe
                              C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
                              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                              R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                              R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                              O1 - Hosts: ::1 localhost
                              O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                              O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                              O2 - BHO: searchersmart search enhancer - {247E05CF-35BE-C43A-A61D-51BC4B11B5D8} - C:\Windows\system32\lfmbvmqfkntoibp.dll
                              O2 - BHO: 892267 helper - {25E0128D-AAFC-49FF-AB11-1F12C2FCC391} - (no file)
                              O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                              O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
                              O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
                              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                              O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                              O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
                              O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                              O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
                              O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
                              O2 - BHO: offersfortoday browser enhancer - {EE01C848-FBCD-9D47-66D3-BD284CB5FFC6} - C:\Windows\system32\pudyiuallzdcw.dll
                              O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                              O3 - Toolbar: (no name) - {92162A1C-A9E3-4C0C-BCDC-2996E8406887} - (no file)
                              O3 - Toolbar: (no name) - {70CC76D5-A4EE-4F25-9931-B109A63E298E} - (no file)
                              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                              O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                              O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                              O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                              O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
                              O4 - HKLM\..\Run: [snp2std] C:\Windows\vsnp2std.exe
                              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                              O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                              O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
                              O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
                              O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                              O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                              O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\Windows\system32\spool\drivers\w32x86\3\hpztsb06.exe
                              O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
                              O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
                              O4 - HKLM\..\Run: [kshfqjugwa] C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\pudyiuallzdcw.dll"
                              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                              O4 - HKCU\..\Run: [lphcep2j0elfc] C:\Windows\system32\lphcep2j0elfc.exe
                              O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                              O4 - HKCU\..\Run: [Cognac] C:\Users\Tony\AppData\Local\Temp\~tmpb.exe
                              O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                              O4 - HKCU\..\Run: [MSFox] C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
                              O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                              O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                              O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                              O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
                              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
                              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
                              O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                              O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                              O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
                              O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
                              O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
                              O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
                              O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                              O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                              O13 - Gopher Prefix:
                              O17 - HKLM\System\CCS\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
                              O17 - HKLM\System\CCS\Services\Tcpip\..\{F555EB53-4738-4A5E-97EF-74029A4200DA}: NameServer = 212.27.54.252,212.27.53.252
                              O17 - HKLM\System\CS1\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
                              O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
                              O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
                              O21 - SSODL: bmlvqkn - {E5C9FD6F-D3F8-4704-8FE2-C37A27A7107F} - (no file)
                              O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                              O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                              O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                              O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                              O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                              O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                              O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\Windows\SYSTEM32\crypserv.exe
                              O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
                              O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
                              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                              O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                              O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                              O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
                              O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                              O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
                              O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
                              O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
                              O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
                              O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
                              O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
                              0
                              1. Utilisateur anonyme
                                Hi,

                                maintenant fait ceci:

                                ==>>Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.<<===

                                Toolbar-S&D

                                !! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

                                * double-cliques sur l'.exe pour lancer l'installe et laisses toi guider ...

                                * Une fois fait, cliques sur le raccourci créé sur ton bureau pour lancer l'outil .

                                * Choisis l'option 1 ( "recherche") et tapes "entrée" .

                                * Une fois le scan finit , un rapport va apparaître, copie/colles l'intégralité
                                de son contenu dans ta prochaine réponse ...

                                ( le rapport est en outre sauvegardé ici -> C:\TB.txt )

                                Alut.
                                0
                                1. Utilisateur anonyme
                                  Salut, pour info : le rapport hijackthis est celui d'hier avant le nettoyage de Smitfraudfix, donc c'est pour cela que l'infection a toujours l'air d'etre présente... Peux-tu envoyer un nouveau log hijackthis ! il a 3 jours son rapport!
                                  0
                                2. tyfu Auteur
                                  -----------\\ ToolBar S&D 1.2.5 XP/Vista

                                  Microsoft® Windows Vista™ Professionnel ( v6.0.6001 ) Service Pack 1
                                  X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4600+ )
                                  BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
                                  USER : Tony ( Not Administrator ! )
                                  BOOT : Normal boot
                                  Antivirus : avast! antivirus 4.8.1201 [VPS 081124-0] 4.8.1201 (Activated)
                                  C:\ (Local Disk) - NTFS - Total:222 Go (Free:146 Go)
                                  D:\ (Local Disk) - NTFS - Total:9 Go (Free:6 Go)
                                  E:\ (CD or DVD)

                                  "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
                                  Option : [1] ( 27/11/2008|11:12 )

                                  [ UAC => 1 ]

                                  -----------\\ Recherche de Fichiers / Dossiers ...

                                  C:\Program Files\AskTBar
                                  C:\Program Files\AskTBar\bar
                                  C:\Program Files\AskTBar\PopSwatr
                                  C:\Program Files\AskTBar\SrchAstt
                                  C:\Program Files\AskTBar\bar\1.bin
                                  C:\Program Files\AskTBar\bar\Cache
                                  C:\Program Files\AskTBar\bar\History
                                  C:\Program Files\AskTBar\bar\Settings
                                  C:\Program Files\AskTBar\bar\1.bin\A5POPSWT.DLL
                                  C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                                  C:\Program Files\AskTBar\bar\Cache\004B3E1A
                                  C:\Program Files\AskTBar\bar\Cache\004B422F
                                  C:\Program Files\AskTBar\bar\Cache\004B4403.bin
                                  C:\Program Files\AskTBar\bar\Cache\004B45B8.bin
                                  C:\Program Files\AskTBar\bar\Cache\004B471E.bin
                                  C:\Program Files\AskTBar\bar\Cache\files.ini
                                  C:\Program Files\AskTBar\bar\History\search2
                                  C:\Program Files\AskTBar\bar\Settings\prevcfg2.htm
                                  C:\Program Files\AskTBar\PopSwatr\History
                                  C:\Program Files\AskTBar\PopSwatr\History\allowed
                                  C:\Program Files\AskTBar\PopSwatr\History\notallow
                                  C:\Program Files\AskTBar\SrchAstt\1.bin
                                  C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                                  C:\Users\Tony\AppData\Roaming\MICROS~1\Windows\Cookies\tony@mysearch[2].txt

                                  -----------\\ [..\Internet Explorer\Main]

                                  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                                  "Local Page"="C:\\Windows\\system32\\blank.htm"
                                  "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                                  "Start Page"="about:blank"
                                  "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                                  "Url"="https://www.msn.com/fr-fr/actualite/"

                                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                                  "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"
                                  "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
                                  "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                                  "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                                  "Local Page"="C:\\windows\\system32\\blank.htm"

                                  --------------------\\ Recherche d'autres infections

                                  C:\Program Files\InternetGameBox
                                  C:\Program Files\InternetGameBox\Conditions g‚n‚rales.url
                                  C:\Program Files\InternetGameBox\Confidentialit‚.url
                                  C:\Program Files\InternetGameBox\language
                                  C:\Program Files\InternetGameBox\ressources
                                  C:\Program Files\InternetGameBox\skins
                                  C:\Program Files\InternetGameBox\Website.url
                                  C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox
                                  C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Conditions g‚n‚rales.lnk
                                  C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Confidentialit‚.lnk
                                  C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\InternetGameBox.lnk
                                  C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Website.lnk

                                  C:\Users\Tony\AppData\Local\pdxpqpitva.dat
                                  C:\Users\Tony\AppData\Local\pdxpqpitva_nav.dat
                                  C:\Users\Tony\AppData\Local\pdxpqpitva_navps.dat
                                  [b]==> EGDACCESS <==/b

                                  --------------------\\ ROGUES ..

                                  C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\AntiSpyGolden 5.1
                                  C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Spyware-Secure
                                  C:\Users\Tony\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Spyware-Secure

                                  --------------------\\ Cracks & Keygens ..

                                  C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul
                                  C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\maxsea10-mapmedia crack.rar
                                  C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul
                                  C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\INSTALL.LOG
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Crack Isobourse & Infos Confidentielles Investir + Boursier.com + Gagner en Bourse en 2007 !.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\CrackMapMediaMaps.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\IsoBourse + Crack + Serial + Infos Confidentielles Investir + Boursier.com + Bons Plans Trades pour 2007 !.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 10.1.3.2_ full + crack (PERFECT & EASY) (2).lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 10.1.3.2_ full + crack (PERFECT & EASY).lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\MAXSEA 10.132. + CRACK + WORLDWIDE VECTOR.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\MAXSEA 10.132. + CRACK + WORLDWIDE VECTOR.RAR.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 12 , Le Crack Qui Fonctionne !!! Fr.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 12 Keygen.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea v 12.1.1.6+crack v plaisance.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\MaxSea v12 CRACK CODES (2).lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea v12 Crack Codes.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\maxsea10-mapmedia crack (2).lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\maxsea10-mapmedia crack.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\[Crack] Maxsea 12 Keygen (Ok).lnk
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132. + CRACK + WORLDWIDE VECTOR.RAR
                                  C:\Users\Tony\Downloads\eMule\Incoming\Maxsea v 12.1.1.6+crack v plaisance.rar
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\CrackMapMediaMaps.txt
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\maxsea10-mapmedia crack.rar
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\MaxSea10MapMediaCrack.exe
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\CMengDriver.dll
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\MAXSEA10Full.REG
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SENTEMUL.EXE
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuDel.bat
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuInst.bat
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuStart.bat
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuStop.bat
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\INSTALL.LOG
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\SentEmul.sys

                                  [ UAC => 1 ]

                                  1 - "C:\ToolBar SD\TB_1.txt" - 27/11/2008|11:13 - Option : [1]

                                  -----------\\ Fin du rapport a 11:13:35,59
                                  0
                              2. Utilisateur anonyme
                                Hi,

                                Nettoyage avec ToolBar S&D :

                                !! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

                                Relances Toolbar-S&D en double-cliquant sur le raccourci.
                                -->Tapes sur l'option 2 ( "nettoyage" ) puis tapes sur "Entrée".

                                Note : ne touches à rien lors de la suppression !

                                Un rapport sera généré à la fin du processus : postes son contenu dans ta prochaine réponse

                                accompagné d'un nouveau rapport hijackthis pour analyse ... =>un nouveau cette fois ci.

                                merci
                                0
                                1. tyfu Auteur
                                  ci-dessous Rapport Toolbar + rapport Hijackthis
                                  Merci

                                  -----------\\ ToolBar S&D 1.2.5 XP/Vista

                                  Microsoft® Windows Vista™ Professionnel ( v6.0.6001 ) Service Pack 1
                                  X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4600+ )
                                  BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
                                  USER : Tony ( Not Administrator ! )
                                  BOOT : Normal boot
                                  Antivirus : avast! antivirus 4.8.1201 [VPS 081124-0] 4.8.1201 (Activated)
                                  C:\ (Local Disk) - NTFS - Total:222 Go (Free:146 Go)
                                  D:\ (Local Disk) - NTFS - Total:9 Go (Free:6 Go)
                                  E:\ (CD or DVD)

                                  "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
                                  Option : [1] ( 27/11/2008|11:12 )

                                  [ UAC => 1 ]

                                  -----------\\ Recherche de Fichiers / Dossiers ...

                                  C:\Program Files\AskTBar
                                  C:\Program Files\AskTBar\bar
                                  C:\Program Files\AskTBar\PopSwatr
                                  C:\Program Files\AskTBar\SrchAstt
                                  C:\Program Files\AskTBar\bar\1.bin
                                  C:\Program Files\AskTBar\bar\Cache
                                  C:\Program Files\AskTBar\bar\History
                                  C:\Program Files\AskTBar\bar\Settings
                                  C:\Program Files\AskTBar\bar\1.bin\A5POPSWT.DLL
                                  C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                                  C:\Program Files\AskTBar\bar\Cache\004B3E1A
                                  C:\Program Files\AskTBar\bar\Cache\004B422F
                                  C:\Program Files\AskTBar\bar\Cache\004B4403.bin
                                  C:\Program Files\AskTBar\bar\Cache\004B45B8.bin
                                  C:\Program Files\AskTBar\bar\Cache\004B471E.bin
                                  C:\Program Files\AskTBar\bar\Cache\files.ini
                                  C:\Program Files\AskTBar\bar\History\search2
                                  C:\Program Files\AskTBar\bar\Settings\prevcfg2.htm
                                  C:\Program Files\AskTBar\PopSwatr\History
                                  C:\Program Files\AskTBar\PopSwatr\History\allowed
                                  C:\Program Files\AskTBar\PopSwatr\History\notallow
                                  C:\Program Files\AskTBar\SrchAstt\1.bin
                                  C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                                  C:\Users\Tony\AppData\Roaming\MICROS~1\Windows\Cookies\tony@mysearch[2].txt

                                  -----------\\ [..\Internet Explorer\Main]

                                  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                                  "Local Page"="C:\\Windows\\system32\\blank.htm"
                                  "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                                  "Start Page"="about:blank"
                                  "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                                  "Url"="https://www.msn.com/fr-fr/actualite/"

                                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                                  "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"
                                  "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
                                  "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                                  "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                                  "Local Page"="C:\\windows\\system32\\blank.htm"

                                  --------------------\\ Recherche d'autres infections

                                  C:\Program Files\InternetGameBox
                                  C:\Program Files\InternetGameBox\Conditions g‚n‚rales.url
                                  C:\Program Files\InternetGameBox\Confidentialit‚.url
                                  C:\Program Files\InternetGameBox\language
                                  C:\Program Files\InternetGameBox\ressources
                                  C:\Program Files\InternetGameBox\skins
                                  C:\Program Files\InternetGameBox\Website.url
                                  C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox
                                  C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Conditions g‚n‚rales.lnk
                                  C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Confidentialit‚.lnk
                                  C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\InternetGameBox.lnk
                                  C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Website.lnk

                                  C:\Users\Tony\AppData\Local\pdxpqpitva.dat
                                  C:\Users\Tony\AppData\Local\pdxpqpitva_nav.dat
                                  C:\Users\Tony\AppData\Local\pdxpqpitva_navps.dat
                                  [b]==> EGDACCESS <==/b

                                  --------------------\\ ROGUES ..

                                  C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\AntiSpyGolden 5.1
                                  C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Spyware-Secure
                                  C:\Users\Tony\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Spyware-Secure

                                  --------------------\\ Cracks & Keygens ..

                                  C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul
                                  C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\maxsea10-mapmedia crack.rar
                                  C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul
                                  C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\INSTALL.LOG
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Crack Isobourse & Infos Confidentielles Investir + Boursier.com + Gagner en Bourse en 2007 !.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\CrackMapMediaMaps.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\IsoBourse + Crack + Serial + Infos Confidentielles Investir + Boursier.com + Bons Plans Trades pour 2007 !.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 10.1.3.2_ full + crack (PERFECT & EASY) (2).lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 10.1.3.2_ full + crack (PERFECT & EASY).lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\MAXSEA 10.132. + CRACK + WORLDWIDE VECTOR.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\MAXSEA 10.132. + CRACK + WORLDWIDE VECTOR.RAR.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 12 , Le Crack Qui Fonctionne !!! Fr.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 12 Keygen.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea v 12.1.1.6+crack v plaisance.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\MaxSea v12 CRACK CODES (2).lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea v12 Crack Codes.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\maxsea10-mapmedia crack (2).lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\maxsea10-mapmedia crack.lnk
                                  C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\[Crack] Maxsea 12 Keygen (Ok).lnk
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132. + CRACK + WORLDWIDE VECTOR.RAR
                                  C:\Users\Tony\Downloads\eMule\Incoming\Maxsea v 12.1.1.6+crack v plaisance.rar
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\CrackMapMediaMaps.txt
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\maxsea10-mapmedia crack.rar
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\MaxSea10MapMediaCrack.exe
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\CMengDriver.dll
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\MAXSEA10Full.REG
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SENTEMUL.EXE
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuDel.bat
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuInst.bat
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuStart.bat
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuStop.bat
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\INSTALL.LOG
                                  C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\SentEmul.sys

                                  [ UAC => 1 ]

                                  1 - "C:\ToolBar SD\TB_1.txt" - 27/11/2008|11:13 - Option : [1]

                                  -----------\\ Fin du rapport a 11:13:35,59

                                  Logfile of Trend Micro HijackThis v2.0.2
                                  Scan saved at 14:54:57, on 24/11/2008
                                  Platform: Windows Vista (WinNT 6.00.1904)
                                  MSIE: Internet Explorer v7.00 (7.00.6000.16757)
                                  Boot mode: Normal

                                  Running processes:
                                  C:\Windows\system32\taskeng.exe
                                  C:\Windows\system32\Dwm.exe
                                  C:\Windows\Explorer.EXE
                                  C:\Windows\vsnp2std.exe
                                  C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                                  C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                                  C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
                                  C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                                  C:\Program Files\iTunes\iTunesHelper.exe
                                  C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
                                  C:\Program Files\Logitech\QuickCam\Quickcam.exe
                                  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                                  C:\Program Files\Windows Media Player\wmpnscfg.exe
                                  C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                                  C:\Windows\system32\wbem\unsecapp.exe
                                  C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
                                  C:\Windows\system32\wuauclt.exe
                                  C:\Windows\system32\conime.exe
                                  C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
                                  C:\Users\Tony\AppData\Local\Temp\~tmpa.exe
                                  C:\Windows\system32\regsvr32.exe
                                  C:\Program Files\Internet Explorer\iexplore.exe
                                  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
                                  C:\Windows\system32\taskeng.exe
                                  C:\Program Files\Mozilla Firefox\firefox.exe
                                  C:\Windows\system32\SearchFilterHost.exe
                                  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                                  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
                                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                                  R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                  R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                                  O1 - Hosts: ::1 localhost
                                  O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                  O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                  O2 - BHO: searchersmart search enhancer - {247E05CF-35BE-C43A-A61D-51BC4B11B5D8} - C:\Windows\system32\lfmbvmqfkntoibp.dll
                                  O2 - BHO: 892267 helper - {25E0128D-AAFC-49FF-AB11-1F12C2FCC391} - (no file)
                                  O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                                  O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
                                  O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
                                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                                  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                  O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                                  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
                                  O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                  O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
                                  O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
                                  O2 - BHO: offersfortoday browser enhancer - {EE01C848-FBCD-9D47-66D3-BD284CB5FFC6} - C:\Windows\system32\pudyiuallzdcw.dll
                                  O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                                  O3 - Toolbar: (no name) - {92162A1C-A9E3-4C0C-BCDC-2996E8406887} - (no file)
                                  O3 - Toolbar: (no name) - {70CC76D5-A4EE-4F25-9931-B109A63E298E} - (no file)
                                  O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                                  O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                  O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                                  O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                  O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
                                  O4 - HKLM\..\Run: [snp2std] C:\Windows\vsnp2std.exe
                                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                                  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                                  O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
                                  O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
                                  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                                  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                                  O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\Windows\system32\spool\drivers\w32x86\3\hpztsb06.exe
                                  O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
                                  O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
                                  O4 - HKLM\..\Run: [kshfqjugwa] C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\pudyiuallzdcw.dll"
                                  O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                                  O4 - HKCU\..\Run: [lphcep2j0elfc] C:\Windows\system32\lphcep2j0elfc.exe
                                  O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                                  O4 - HKCU\..\Run: [Cognac] C:\Users\Tony\AppData\Local\Temp\~tmpb.exe
                                  O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                                  O4 - HKCU\..\Run: [MSFox] C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
                                  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                                  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                                  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                                  O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                                  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
                                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
                                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
                                  O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                                  O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                                  O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
                                  O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
                                  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
                                  O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
                                  O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                                  O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                                  O13 - Gopher Prefix:
                                  O17 - HKLM\System\CCS\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
                                  O17 - HKLM\System\CCS\Services\Tcpip\..\{F555EB53-4738-4A5E-97EF-74029A4200DA}: NameServer = 212.27.54.252,212.27.53.252
                                  O17 - HKLM\System\CS1\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
                                  O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
                                  O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
                                  O21 - SSODL: bmlvqkn - {E5C9FD6F-D3F8-4704-8FE2-C37A27A7107F} - (no file)
                                  O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                                  O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                                  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                                  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                                  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                                  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                                  O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\Windows\SYSTEM32\crypserv.exe
                                  O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
                                  O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
                                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                  O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                                  O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                                  O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
                                  O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                                  O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
                                  O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
                                  O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
                                  O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
                                  O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
                                  O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
                                  0
                              3. Utilisateur anonyme
                                Hi,

                                POUR INFO LORSQUE JE DOUTE JE DEMANDE.

                                ENSUITE LE TOOLBARD ETAIT PREVUE .

                                ET ENSUITE JE REDEMANDE TOUJOURS UN HIJACKTHIS.

                                DE PLUS MEME SI INFECTION APRES PASSAGE DE TEL OU TEL OUTILS JE LE VERRAIS TRES BIEN.

                                MAINTENANT LES REMARQUES VENANT DE CERTAINS SUR CE FORUM ET DE PLUS PITOYABLE LORSQUE L'ON VOIT LE RESULTAT.

                                0
                              4. Utilisateur anonyme
                                Hi,

                                A oué je ne croit pas et la loin de la.

                                Car je m'explique au puis non regarde le mp que je t'es faits.
                                0
                                1. Utilisateur anonyme
                                  Pourquoi veux-tu t'expliquer en MP... La preuve est là, devant nous ! le " helpé " depuis le début t'as envoyé 3 fois le meme rapport hijackthis et tu ne l'as pas vu ! il n'y a aucun complot ( tu appelles ça " rebellion, je crois???), je te l'ai juste fais remarqué gentiment dans le but de t'aider, mais surtout d'aider le " helpé ".
                                  0
                                2. tyfu Auteur
                                  @Utilisateur anonymeBonjour Feelgood1

                                  Je suis resté en plan avec mon problème depuis hier midi .
                                  Puis-je, s'il te plait, te soumettre mon problème ?
                                  A bientôt.
                                  0
                                3. Utilisateur anonyme
                                  @tyfuSalut Tyfu, ce que tu peux faire, c'est envoyer un Nouveau rapport Hijackthis, il faut refaire à chaque demande de rapport une nouvelle manipulation " Do a scan and save a logfile" >>> un nouveau rapport >> copie/colle le dans ta reponse !
                                  0
                                4. tyfu Auteur
                                  @Utilisateur anonymeLogfile of Trend Micro HijackThis v2.0.2
                                  Scan saved at 14:54:57, on 24/11/2008
                                  Platform: Windows Vista (WinNT 6.00.1904)
                                  MSIE: Internet Explorer v7.00 (7.00.6000.16757)
                                  Boot mode: Normal

                                  Running processes:
                                  C:\Windows\system32\taskeng.exe
                                  C:\Windows\system32\Dwm.exe
                                  C:\Windows\Explorer.EXE
                                  C:\Windows\vsnp2std.exe
                                  C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                                  C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                                  C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
                                  C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                                  C:\Program Files\iTunes\iTunesHelper.exe
                                  C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
                                  C:\Program Files\Logitech\QuickCam\Quickcam.exe
                                  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                                  C:\Program Files\Windows Media Player\wmpnscfg.exe
                                  C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                                  C:\Windows\system32\wbem\unsecapp.exe
                                  C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
                                  C:\Windows\system32\wuauclt.exe
                                  C:\Windows\system32\conime.exe
                                  C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
                                  C:\Users\Tony\AppData\Local\Temp\~tmpa.exe
                                  C:\Windows\system32\regsvr32.exe
                                  C:\Program Files\Internet Explorer\iexplore.exe
                                  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
                                  C:\Windows\system32\taskeng.exe
                                  C:\Program Files\Mozilla Firefox\firefox.exe
                                  C:\Windows\system32\SearchFilterHost.exe
                                  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=4070221
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                                  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
                                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                                  R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                  R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                                  O1 - Hosts: ::1 localhost
                                  O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                  O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                  O2 - BHO: searchersmart search enhancer - {247E05CF-35BE-C43A-A61D-51BC4B11B5D8} - C:\Windows\system32\lfmbvmqfkntoibp.dll
                                  O2 - BHO: 892267 helper - {25E0128D-AAFC-49FF-AB11-1F12C2FCC391} - (no file)
                                  O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                                  O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
                                  O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
                                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                                  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                  O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                                  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
                                  O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                  O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
                                  O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
                                  O2 - BHO: offersfortoday browser enhancer - {EE01C848-FBCD-9D47-66D3-BD284CB5FFC6} - C:\Windows\system32\pudyiuallzdcw.dll
                                  O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                                  O3 - Toolbar: (no name) - {92162A1C-A9E3-4C0C-BCDC-2996E8406887} - (no file)
                                  O3 - Toolbar: (no name) - {70CC76D5-A4EE-4F25-9931-B109A63E298E} - (no file)
                                  O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                                  O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                  O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                                  O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                  O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
                                  O4 - HKLM\..\Run: [snp2std] C:\Windows\vsnp2std.exe
                                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                                  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                                  O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
                                  O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
                                  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                                  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                                  O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\Windows\system32\spool\drivers\w32x86\3\hpztsb06.exe
                                  O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
                                  O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
                                  O4 - HKLM\..\Run: [kshfqjugwa] C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\pudyiuallzdcw.dll"
                                  O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                                  O4 - HKCU\..\Run: [lphcep2j0elfc] C:\Windows\system32\lphcep2j0elfc.exe
                                  O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                                  O4 - HKCU\..\Run: [Cognac] C:\Users\Tony\AppData\Local\Temp\~tmpb.exe
                                  O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                                  O4 - HKCU\..\Run: [MSFox] C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
                                  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                                  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                                  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                                  O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                                  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
                                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
                                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
                                  O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                                  O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                                  O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
                                  O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
                                  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
                                  O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
                                  O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                                  O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                                  O13 - Gopher Prefix:
                                  O17 - HKLM\System\CCS\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
                                  O17 - HKLM\System\CCS\Services\Tcpip\..\{F555EB53-4738-4A5E-97EF-74029A4200DA}: NameServer = 212.27.54.252,212.27.53.252
                                  O17 - HKLM\System\CS1\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
                                  O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
                                  O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
                                  O21 - SSODL: bmlvqkn - {E5C9FD6F-D3F8-4704-8FE2-C37A27A7107F} - (no file)
                                  O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                                  O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                                  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                                  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                                  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                                  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                                  O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\Windows\SYSTEM32\crypserv.exe
                                  O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
                                  O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
                                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                  O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                                  O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                                  O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
                                  O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                                  O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
                                  O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
                                  O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
                                  O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
                                  O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
                                  O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
                                  0
                                5. Utilisateur anonyme
                                  @tyfuTu n'as rien compris, je t'ai demandé de refaire la Manipulation avec Hijackthis afin d'obtenir un nouveau rapport Hijacthis, le tien est daté du 24/11 !
                                  0
                              5. Utilisateur anonyme
                                Hi,

                                Fait le moi personnellement je dit ce que je pense et puis c'est tout.

                                Sa plait ou plait pas......................

                                Je n'ai aucun reproche sur ce coup la.

                                Alut.

                                PS;tout ce que sa fait c'est de pourrir un topic pour rien.

                                0
                                • 1
                                • 2

                                Discussions similaires

                                Security boot fail lors du démarrage
                                Steu

                                5 réponses
                                SecurityHealth est a désactiver ou pas au démarrage de W10 Pro 64 ?
                                Walti55

                                2 réponses
                                Comment retirer le SECURE BOOT ?
                                Elparigo60

                                10 réponses
                                Security Boot Fail Windows 10 Acer
                                benjamin5800

                                22 réponses
                                Analyse de l'appli "AI SECURITY"
                                cl06

                                1 réponse