Rapport genproc

Bonjour,

SmitFraudFix v2.378

Rapport fait à 2:22:09,59, 26/11/2008
Executé à partir de C:\Documents and Settings\Administrateur.48CB47796B37437\Application Data\IDM\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\ZSSnp211.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\McAfee\Common Framework\udaterui.exe
D:\iTunesHelper.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\Domino.exe
C:\WINDOWS\VMSnap23.exe
C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\McAfee\VirusScan Enterprise\EngineServer.exe
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
C:\WINDOWS\system32\mfevtps.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
C:\Program Files\McAfee\Common Framework\McTray.exe
C:\WINDOWS\system32\CNAB4RPK.EXE
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\WScript.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\cmd.exe
C:\Documents and Settings\Administrateur.48CB47796B37437\Application Data\IDM\SmitfraudFix\Policies.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts

Fichier hosts corrompu !

127.0.0.1 hk.digitaltrends.com
127.0.0.1 microsoft.com.org
127.0.0.1 www.www.microsoft.com.org
127.0.0.1 legal-at-spybot.info
127.0.0.1 www.legal-at-spybot.info

»»»»»»»»»»»»»»»»»»»»»»»» C:\

C:\autorun.inf PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrateur.48CB47796B37437

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ADMINI~1.48C\LOCALS~1\Temp

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrateur.48CB47796B37437\Application Data

»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ADMINI~1.48C\Favoris

»»»»»»»»»»»»»»»»»»»»»»»» Bureau

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"

»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="userinit.exe,"
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» RK

»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Realtek RTL8169/8110 Family Gigabit Ethernet NIC - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CCS\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS2\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS2\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin

merci mes amis pour votre aide.

Configuration: Windows XP
Internet Explorer 7.0

6 réponses

  1. Contributeur sécurité
    Salut !!

    Fais ce qui suit dans l ordre stp, c est important :

    ▶ Télécharge RHosts (de SiRi)

    ▶ Double clique dessus pour l'exécuter

    ▶ et cliques sur " Restore original Hosts "

    ps : c est normal que rien ne se passe

    ▶ ensuire redémarre le pc

    ensuite :

    Option 2 - Nettoyage :

    ▶ redémarre le PC en mode sans échec

    ▶ Double cliquer sur smitfraudfix

    ▶ Sélectionner 2 pour supprimer les fichiers responsables de l'infection.

    ▶ A la question Voulez-vous nettoyer le registre ? répondre O (oui) afin de débloquer le fond d'écran et supprimer les clés de démarrage automatique de l'infection.

    Le fix déterminera si le fichier wininet.dll est infecté. A la question Corriger le fichier infecté ? répondre O (oui) pour remplacer le fichier corrompu.

    ▶ Enregistre le rapport sur ton bureau

    ▶ Redémarrer en mode normal et poster le rapport.
    1. j'ai fait tout les étapes de la premiere procédure et je vais t'envoyer la 2eme

      quand je suis arriver a la 3eme étape :Etape 3/

      Double-clique sur le fichier "SmitfraudFix.exe" et choisis l'option 2, réponds oui à tout et laisse-le procéder. Sauvegarde le rapport sur ton bureau. le CLEANMGR MANQUE.

      AU 4EME ETAPE:

      Etape 4/

      Lance le fichier MSNFix.bat qui se trouve dans le dossier MSNfix, sur le bureau.
      - Exécute l'option R.
      - Si l'infection est détectée, exécute l'option N.
      - Sauvegarde ce rapport sur ton bureau.

      je pouvez rien faire :fichier introuvable :MSNFix.bat .

      voila donc les rapport:

      -----------\\ ToolBar S&D 1.2.5 XP/Vista

      Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
      X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.00GHz )
      BIOS : Award Modular BIOS v6.00PG
      USER : Administrateur ( Administrator )
      BOOT : Fail-safe boot
      Antivirus : McAfee VirusScan Enterprise 8.7.0.570 (Activated)
      A:\ (USB)
      C:\ (Local Disk) - NTFS - Total:37 Go (Free:1 Go)
      D:\ (Local Disk) - NTFS - Total:195 Go (Free:54 Go)
      E:\ (CD or DVD)
      F:\ (CD or DVD)

      "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
      Option : [2] ( 26/11/2008| 2:47 )
      C:\DOCUME~1\ADMINI~1.48C\LOCALS~1\Temp\mc24.tmp

      -----------\\ SUPPRESSION

      Supprime! - C:\DOCUME~1\ADMINI~1.48C\LOCALS~1\Temp\mc24.tmp

      -----------\\ Recherche de Fichiers / Dossiers ...

      -----------\\ Extensions

      (Admin) - {0200c2a9-70da-4f6d-b527-f5f7d7877228} => fireuploader

      (Administrateur) - {EEE6C361-6118-11DC-9C72-001320C79847} => sweetim-toolbar

      (Administrateur.48CB47796B37437) - {EEE6C361-6118-11DC-9C72-001320C79847} => sweetim-toolbar

      -----------\\ [..\Internet Explorer\Main]

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
      "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
      "SearchMigratedDefaultURL"="https://search.yahoo.com/web{searchTerms}&ei=utf-8&fr=b1ie7"
      "Search Bar"="https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F"
      "Start Page"="https://www.google.fr/?gws_rd=ssl"
      "Url"="http://www.microsoft.com/athome/community/rss.xml"
      "Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
      "Url"="http://www.microsoft.com/atwork/community/rss.xml"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
      "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
      "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
      "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
      "Start Page"="https://www.msn.com/fr-fr/"

      --------------------\\ Recherche d'autres infections

      --------------------\\ Cracks & Keygens ..

      C:\DOCUME~1\ADMINI~1.48C\Recent\WMP11 FR CRACK.lnk

      1 - "C:\ToolBar SD\TB_1.txt" - 26/11/2008| 2:48 - Option : [2]

      -----------\\ Fin du rapport a 2:48:57,56

      SmitFraudFix v2.378

      Rapport fait à 2:51:16,92, 26/11/2008
      Executé à partir de C:\Documents and Settings\Administrateur.48CB47796B37437\Bureau\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
      Le type du système de fichiers est NTFS
      Fix executé en mode sans echec

      »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

      »»»»»»»»»»»»»»»»»»»»»»»» hosts

      127.0.0.1 localhost

      127.0.0.1 ad.a8.net
      127.0.0.1 asy.a8ww.net
      127.0.0.1 www.abx4.com #[Adware.ABXToolbar]
      127.0.0.1 acezip.net #[SiteAdvisor.acezip.net]
      127.0.0.1 www.acezip.net #[Win32/Adware.180Solutions]
      127.0.0.1 phpadsnew.abac.com
      127.0.0.1 a.abnad.net
      127.0.0.1 b.abnad.net
      127.0.0.1 c.abnad.net #[eTrust.Tracking.Cookie]
      127.0.0.1 d.abnad.net
      127.0.0.1 e.abnad.net
      127.0.0.1 t.abnad.net
      127.0.0.1 banners.absolpublisher.com
      127.0.0.1 tracking.absolstats.com
      127.0.0.1 adv.abv.bg
      127.0.0.1 bimg.abv.bg
      127.0.0.1 www2.a-counter.kiev.ua
      127.0.0.1 accuserveadsystem.com
      127.0.0.1 www.accuserveadsystem.com
      127.0.0.1 gtb5.acecounter.com
      127.0.0.1 gtcc1.acecounter.com
      127.0.0.1 gtp1.acecounter.com #[eTrust.Tracking.Cookie]
      127.0.0.1 acestats.com
      127.0.0.1 www.acestats.com
      127.0.0.1 achmedia.com
      127.0.0.1 ads.active.com
      127.0.0.1 am1.activemeter.com
      127.0.0.1 www.activemeter.com #[eTrust.Tracking.Cookie]
      127.0.0.1 ads.activepower.net
      127.0.0.1 stat.active24stats.nl #[eTrust.Tracking.Cookie]
      127.0.0.1 web.acumenpi.com #[AdvertPro]
      127.0.0.1 ad.ad24.ru
      127.0.0.1 at.ad2click.nl
      127.0.0.1 cms.ad2click.nl
      127.0.0.1 banner.ad.nu
      127.0.0.1 ad-up.com
      127.0.0.1 www.ad-up.com
      127.0.0.1 www.adagencypro.com
      127.0.0.1 ads.adap.tv
      127.0.0.1 vad.adbasket.net
      127.0.0.1 ad.pop1.adbn.ru
      127.0.0.1 adserv.adbonus.com
      127.0.0.1 www.adbonus.com
      127.0.0.1 james.adbutler.de #[Tenebril.TrackingCookie]
      127.0.0.1 www.adbutler.de #[SunBelt.AdButler.de]
      127.0.0.1 adc2.adcentriconline.com
      127.0.0.1 adcp.adcentriconline.com
      127.0.0.1 bell.adcentriconline.com #[Wildcard DNS]
      127.0.0.1 content.adcentriconline.com
      127.0.0.1 media.adcentriconline.com
      127.0.0.1 publicis.adcentriconline.com
      127.0.0.1 ad-clix.com
      127.0.0.1 www.ad-clix.com
      127.0.0.1 adcomplete.com
      127.0.0.1 www.adcomplete.com
      127.0.0.1 axa.addcontrol.net #[Ewido.TrackingCookie.Addcontrol]
      127.0.0.1 ads.addynamix.com #[SpySweeper.Spy.Cookie]
      127.0.0.1 e13.media.addynamix.com
      127.0.0.1 www.adeos.eu
      127.0.0.1 adcode.adengage.com
      127.0.0.1 stats2.adengage.com
      127.0.0.1 www.adengage.com
      127.0.0.1 pt.server1.adexit.com
      127.0.0.1 www.adexit.com
      127.0.0.1 www.ad4ever.com
      127.0.0.1 track.adform.net
      127.0.0.1 adfun.ru
      127.0.0.1 ad1.adfun.ru
      127.0.0.1 ad2.adfun.ru
      127.0.0.1 ad3.adfun.ru
      127.0.0.1 ad4.adfun.ru
      127.0.0.1 harvest.adgardener.com
      127.0.0.1 harvest6.adgardener.com
      127.0.0.1 harvest7.adgardener.com
      127.0.0.1 harvest8.adgardener.com
      127.0.0.1 harvest11.adgardener.com
      127.0.0.1 harvest12.adgardener.com
      127.0.0.1 harvest13.adgardener.com
      127.0.0.1 harvest163.adgardener.com
      127.0.0.1 harvest176.adgardener.com
      127.0.0.1 seeds.adgardener.com
      127.0.0.1 www.adgroups.net
      127.0.0.1 www.ad-groups.com #[Ban Man Pro Banner Code]
      127.0.0.1 host1.adhese.be #[Adhese Datamine Tag]
      127.0.0.1 host2.adhese.be
      127.0.0.1 host3.adhese.be #[ad.be.doubleclick.net]
      127.0.0.1 host4.adhese.be
      127.0.0.1 ads.adhsm.adhese.com
      127.0.0.1 pool.adhsm.adhese.com
      127.0.0.1 ssl3.adhost.com
      127.0.0.1 www2.adhost.com
      127.0.0.1 zone10.adicate.com
      127.0.0.1 www.adimpact.com
      127.0.0.1 adfarm1.adition.com
      127.0.0.1 imagesrv.adition.com
      127.0.0.1 ad.adition.net
      127.0.0.1 hosting.adjug.com
      127.0.0.1 tracking.adjug.com
      127.0.0.1 adsearch.adkontekst.pl
      127.0.0.1 community.adlandpro.com #[Ad-Aware Tracking.Cookie]
      127.0.0.1 pk.adlandpro.com
      127.0.0.1 te.adlandpro.com #[eTrust.Tracking.Cookie]
      127.0.0.1 trafficex.adlandpro.com
      127.0.0.1 www.adlandpro.com #[Ad-Aware Tracking.Cookie]
      127.0.0.1 engine.adland.ru #[eTrust.Tracking.Cookie]
      127.0.0.1 publicidad.adlead.com
      127.0.0.1 www.adlimg03.com
      127.0.0.1 classic.adlink.de
      127.0.0.1 regio.adlink.de
      127.0.0.1 west.adlink.de
      127.0.0.1 rc.de.adlink.net #[eTrust.Tracking.Cookie]
      127.0.0.1 tr.de.adlink.net
      127.0.0.1 ads3.adman.gr #[eTrust.Tracking.Cookie]
      127.0.0.1 r2d2.adman.gr
      127.0.0.1 www.adminder.com #[SpySweeper.Spy.Cookie]
      127.0.0.1 apps.admission.net #[Spotlight Ads]
      127.0.0.1 appcache.admission.net
      127.0.0.1 view.admission.net
      127.0.0.1 rms.admeta.com #[admeta.basefarm.net][eTrust.Tracking.Cookie]
      127.0.0.1 ads.admodus.com #[eTrust.Tracking.Cookie]
      127.0.0.1 ad.adnet.biz #[eTrust.Tracking.Cookie]
      127.0.0.1 engine.adnet.ru
      127.0.0.1 ad2.adnetinteractive.com
      127.0.0.1 ad.adnetwork.com.br
      127.0.0.1 agoraua.adocean.pl
      127.0.0.1 s1.ad.adocean.pl #[Ewido.Tracking.Cookie]
      127.0.0.1 s1.advicepl.adocean.pl
      127.0.0.1 s1.centrumcz.adocean.pl #[eTrust.Tracking.Cookie]
      127.0.0.1 s1.cz.adocean.pl
      127.0.0.1 s1.czgde.adocean.pl
      127.0.0.1 s1.myao.adocean.pl
      127.0.0.1 s1.pracuj.adocean.pl
      127.0.0.1 s1.skgde.adocean.pl
      127.0.0.1 s2.ad.adocean.pl
      127.0.0.1 ad01.adonspot.com
      127.0.0.1 ad02.adonspot.com
      127.0.0.1 isohunt.adonspot.com #[server down?]
      127.0.0.1 ab.adpro.com.ua
      127.0.0.1 ac.adpro.com.ua #[server down?]
      127.0.0.1 system.adquick.nl
      127.0.0.1 www.adquest.nl
      127.0.0.1 adx.adrenaline.cz
      127.0.0.1 c.adroll.com
      127.0.0.1 www.adsforindians.com
      127.0.0.1 ad.adrefer.net
      127.0.0.1 www.adreporting.com #[SunBelt.Adreporting.com]
      127.0.0.1 cntr.adrime.com
      127.0.0.1 images.adrime.com
      127.0.0.1 ad.adriver.ru
      127.0.0.1 www.adrotate.net
      127.0.0.1 serv.ad-rotator.com #[SpySweeper.Spy.Cookie]
      127.0.0.1 ad.ads8.com
      127.0.0.1 vip.ads8.com
      127.0.0.1 www.ads183.com
      127.0.0.1 antevenio.flux.ads-click.com
      127.0.0.1 acnetwork.flux.acsyndication.com
      127.0.0.1 img.ads-click.com
      127.0.0.1 ad.ads.dk
      127.0.0.1 tdkads.ads.dk
      127.0.0.1 adservercentral.com
      127.0.0.1 banners.adservercentral.com
      127.0.0.1 www.adservercentral.com #[SunBelt.adservercentral.com]
      127.0.0.1 www.adservtech.com
      127.0.0.1 adservicedomain.info
      127.0.0.1 adsfac.net #[Facilitate Tracking Code]
      127.0.0.1 images.adshuffle.com
      127.0.0.1 this.content.served.by.adshuffle.com
      127.0.0.1 adsaway.com #[HTML/TrojanDownloader.Agent.BP trojan]
      127.0.0.1 www.adsaway.com #[Google.Warning]
      127.0.0.1 adsfac.eu
      127.0.0.1 www.adshot.de
      127.0.0.1 network.adsmarket.com
      127.0.0.1 allchix.adsmax.com
      127.0.0.1 www2.adsmax.com
      127.0.0.1 www.adsodainteractive.com
      127.0.0.1 www.adspace.be
      127.0.0.1 g.adspeed.net
      127.0.0.1 ads.adsponse.de
      127.0.0.1 banner.adsrevenue.net
      127.0.0.1 creative.adsrevenue.net
      127.0.0.1 popunder.adsrevenue.net
      127.0.0.1 adserve.adster.com
      127.0.0.1 images.adster.com
      127.0.0.1 adsvert.com
      127.0.0.1 o.adtargeter.com
      127.0.0.1 ads.adtiger.de
      127.0.0.1 www.adtiger.de
      127.0.0.1 ads.adgoto.com
      127.0.0.1 adsrv.admindshare.com
      127.0.0.1 adtology.com
      127.0.0.1 adtology2.com
      127.0.0.1 adtology3.com
      127.0.0.1 www.adtology3.com
      127.0.0.1 ad.adtoma.com
      127.0.0.1 downldcl.adtoolsinc.com
      127.0.0.1 www.adtoolsinc.com
      127.0.0.1 www.adtrade.net
      127.0.0.1 www.adtrader.com
      127.0.0.1 survey.advantageresearch.com
      127.0.0.1 ad.adver.com.tw
      127.0.0.1 www.adventideas.com #[Adcycle]
      127.0.0.1 www.adversal.com
      127.0.0.1 ads.advertise.net
      127.0.0.1 www.advertisingspaces.net
      127.0.0.1 www.advertisingstats.com
      127.0.0.1 advertisingpurchase.com
      127.0.0.1 ad.adverticum.net
      127.0.0.1 img.adverticum.net
      127.0.0.1 imgs.adverticum.net
      127.0.0.1 www.advertising365.com
      127.0.0.1 ads.advertisingforyou.info
      127.0.0.1 ads.advertisingz.com
      127.0.0.1 ad.advertstream.com
      127.0.0.1 adviva.com
      127.0.0.1 www.adviva.com
      127.0.0.1 ads.adviva.net #[Panda.Spyware:Cookie/Adviva]
      127.0.0.1 de.ads.adviva.net
      127.0.0.1 adstats.adviva.net
      127.0.0.1 www.traf.advscripts.com
      127.0.0.1 ad.adworx.at
      127.0.0.1 www.ad-z.de
      127.0.0.1 banners.adzones.com
      127.0.0.1 clicks.adzones.com
      127.0.0.1 feeds.adzones.com
      127.0.0.1 www.adzones.com
      127.0.0.1 w.aeaer.com #[Google.Warning]
      127.0.0.1 aeoworld.de
      127.0.0.1 www.aeoworld.de #[W32/WMF-exploit]
      127.0.0.1 banners.affilimatch.de
      127.0.0.1 tracker.affistats.com #[msvrl.dll]
      127.0.0.1 adz.afterdawn.net
      127.0.0.1 ad.afy11.net
      127.0.0.1 stats.agent.co.il
      127.0.0.1 rmbannerserver.agestado.com.br
      127.0.0.1 stats.agentinteractive.com
      127.0.0.1 api.aggregateknowledge.com
      127.0.0.1 aams1.aim4media.com
      127.0.0.1 artwork.aim4media.com
      127.0.0.1 www.aim4media.com #[SunBelt.Adserver.aim4media]
      127.0.0.1 ads.airamerica.com
      127.0.0.1 adserver.akqa.net #[Ad-Aware Tracking.Cookie]
      127.0.0.1 download.alexa.com #[Trackware.Alexa][SPYW_ALEXA.A]
      127.0.0.1 download.china.alibaba.com #[Adware.AlibabaTB][AdWare.ToolBar.Alibabar.b]
      127.0.0.1 ad.alldanzradio.com
      127.0.0.1 tracking.allposters.com
      127.0.0.1 ad.allstar.cz
      127.0.0.1 bokee.allyes.com
      127.0.0.1 demoafp.allyes.com
      127.0.0.1 eastmoney.allyes.com
      127.0.0.1 smarttrade.allyes.com
      127.0.0.1 sroomafp.allyes.com
      127.0.0.1 taobaoafp.allyes.com
      127.0.0.1 tom.allyes.com
      127.0.0.1 uuseeafp.allyes.com
      127.0.0.1 www.almondnetworks.com
      127.0.0.1 www.almoso3h.com #[Trojan-PSW.Win32.VB.cl]
      127.0.0.1 www.alsaloumainvestment.com #[Win32/SpamTool.Gadina]
      127.0.0.1 ad.altervista.org
      127.0.0.1 pqwaker.altervista.org
      127.0.0.1 bantam.ai.net
      127.0.0.1 fiona.ai.net
      127.0.0.1 adimg.alice.it
      127.0.0.1 adv.alice.it
      127.0.0.1 altmedia101.com
      127.0.0.1 adserver.alt.com
      127.0.0.1 count1.altastat.com
      127.0.0.1 feed1.altastat.com
      127.0.0.1 www.alwayson-network.com
      127.0.0.1 rcm.amazon.com
      127.0.0.1 rcm-images.amazon.com
      127.0.0.1 ads.amdmb.com
      127.0.0.1 whos.amung.us #[WebBug]
      127.0.0.1 advert.ananzi.co.za
      127.0.0.1 advert2.ananzi.co.za
      127.0.0.1 adserver.ancestry.com #[RealMedia]
      127.0.0.1 adserver04.ancestry.com #[RealMedia]
      127.0.0.1 www.andyhoppe.com
      127.0.0.1 ads.angryape.com
      127.0.0.1 banners.ads.angryape.com
      127.0.0.1 www.antarasystems.com
      127.0.0.1 www.anticlown.com
      127.0.0.1 ads.antionline.com
      127.0.0.1 junior.apk.net
      127.0.0.1 www.arcadebannerexchange.com
      127.0.0.1 ard114.info #[Spamdexing]
      127.0.0.1 nu.arnostat.nl
      127.0.0.1 demiurge.arstechnica.com
      127.0.0.1 banner.arttoday.com
      127.0.0.1 ads.asia1.com.sg
      127.0.0.1 asimpleinternet.com #[Tenebril.SpecialOffers]
      127.0.0.1 www.asimpleinternet.com
      127.0.0.1 ads.ask.com #[sv-click.looksmart.com]
      127.0.0.1 contextual.syndication.ask.com
      127.0.0.1 www.asknew.com #[Spamdexing]
      127.0.0.1 www.askyaya.com #[SunBelt.AskYaya]
      127.0.0.1 ads.aspalliance.com
      127.0.0.1 ads.associatedcontent.com
      127.0.0.1 f.astaz.info #[Malicious.Links.Codec]
      127.0.0.1 www.ati-etailer.de
      127.0.0.1 dist.atlas-ia.com #[ADW_ATLAST.A]
      127.0.0.1 www.atlas-ia.com #[Adware.OfferAgent][Adware-Atlas]
      127.0.0.1 ads.auctionads.com
      127.0.0.1 audiogalaxy.com
      127.0.0.1 www.audiogalaxy.com
      127.0.0.1 banners.audioholics.com
      127.0.0.1 ads.auctioncity.co.nz
      127.0.0.1 ads.autotrader.co.za
      127.0.0.1 adserving.autotrader.com #[SunBelt.AdServing.AutoTrader.com]
      127.0.0.1 www.avsads.com
      127.0.0.1 engine.awaps.net
      127.0.0.1 b3a70b.t.axf8.net
      127.0.0.1 caea4e.t.axf8.net
      127.0.0.1 fdff44.r.axf8.net
      127.0.0.1 www.axill.com
      127.0.0.1 images.axill.in
      127.0.0.1 www.axill.in
      127.0.0.1 axload.to #[Adware.Webprefix][Trojan.Downloader.6588.E]
      127.0.0.1 valid.axload.to
      127.0.0.1 ayiosamvrosios.com #[Javascript.Exploit]
      127.0.0.1 www.azads.net
      127.0.0.1 azsearch.org
      127.0.0.1 adserver1.backbeatmedia.com
      127.0.0.1 adserver1-images.backbeatmedia.com
      127.0.0.1 bullseye.backbeatmedia.com
      127.0.0.1 www.badhyip.org #[Google.Warning]
      127.0.0.1 ads.badische-zeitung.de
      127.0.0.1 bar.baidu.com #[Win32/Adware.Toolbar.Baidu][Sophos.JS/BDHelper-A]
      127.0.0.1 download.baigoo.com #[AdWare.Win32.Baigoo.a][Trackware.Baigoo]
      127.0.0.1 balticaffiliate.com #[Spamdexing]
      127.0.0.1 www.baltictop.com
      127.0.0.1 adsrv.bankrate.com
      127.0.0.1 click.banneradv.com
      127.0.0.1 adserver.banneradministration.com
      127.0.0.1 www.bannerbox.cn
      127.0.0.1 bannerboxes.com #[BannerBoxes Ad Code]
      127.0.0.1 clicks.bannerboxes.com
      127.0.0.1 feeds.bannerboxes.com
      127.0.0.1 www.bannerboxes.com
      127.0.0.1 www.banner-exchange.nl
      127.0.0.1 ad.bannerhost.ru
      127.0.0.1 www.bannerhouse.ru
      127.0.0.1 banners.bannerlandia.com.ar
      127.0.0.1 www.bannermanagement.nl
      127.0.0.1 www.banneroverdrive.com
      127.0.0.1 www.bannerpromotion.it
      127.0.0.1 www.bannerspace.com
      127.0.0.1 www3.bannerspace.com #[SpySweeper.Spy.Cookie]
      127.0.0.1 www5.bannerspace.com
      127.0.0.1 www6.bannerspace.com
      127.0.0.1 www7.bannerspace.com #[Tenebril.Tracking.Cookie]
      127.0.0.1 www.bannerswap.ca
      127.0.0.1 ads.vg.basefarm.net #[RealMedia]
      127.0.0.1 ads.baz.ch
      127.0.0.1 ad2.bbmedia.cz
      127.0.0.1 bbeplayer.com #[WebBug]
      127.0.0.1 stat.bdirect.ru
      127.0.0.1 autocontext.begun.ru
      127.0.0.1 promo.begun.ru
      127.0.0.1 referal.begun.ru
      127.0.0.1 adlogger.bertgeens.be
      127.0.0.1 www.belstat.be
      127.0.0.1 www.belstat.com
      127.0.0.1 www.belstat.nl
      127.0.0.1 oas.benchmark.fr #[RealMedia]
      127.0.0.1 bestinshowjewelry.com #[HTML/TrojanDownloader.Agent.BP]
      127.0.0.1 www.bestinshowjewelry.com
      127.0.0.1 webtrends.besite.be
      127.0.0.1 www.bestofferdirect.com
      127.0.0.1 www.besttoolbars.net #[ADW_TBARWIN32.A]
      127.0.0.1 ads.betanews.com
      127.0.0.1 banner.betfred.com
      127.0.0.1 www.bettertextads.com
      127.0.0.1 big4top.com
      127.0.0.1 www.big4top.com #[IFrame.Exploit]
      127.0.0.1 stats.big-boards.com
      127.0.0.1 ad0.bigmir.net
      127.0.0.1 ad1.bigmir.net
      127.0.0.1 ad4.bigmir.net
      127.0.0.1 ad5.bigmir.net
      127.0.0.1 ad6.bigmir.net
      127.0.0.1 ad7.bigmir.net
      127.0.0.1 adi.bigmir.net
      127.0.0.1 c.bigmir.net #[SecuritySpace.WebBug]
      127.0.0.1 i.bigmir.net
      127.0.0.1 bigtracker.com
      127.0.0.1 bighits.net
      127.0.0.1 bigticker.bighits.net
      127.0.0.1 bounty.bighits.net
      127.0.0.1 www.bighits.net
      127.0.0.1 counter.bigli.ru
      127.0.0.1 bigstats.net
      127.0.0.1 banex.bikers-engine.com
      127.0.0.1 ad2.billboard.cz
      127.0.0.1 adserver.bizhat.com
      127.0.0.1 counter.bizland.com
      127.0.0.1 dc.bizjournals.com
      127.0.0.1 ads2.blastro.com
      127.0.0.1 ads3.blastro.com
      127.0.0.1 ads4.blastro.com
      127.0.0.1 ads.blick.ch
      127.0.0.1 streamstats1.blinkx.com
      127.0.0.1 ads.blizzard.com
      127.0.0.1 blogadswap.com
      127.0.0.1 tracker.blogbeat.net
      127.0.0.1 ads.blogdrive.com
      127.0.0.1 banners.blogexplosion.com
      127.0.0.1 counter.blogexplosion.com
      127.0.0.1 blogtextlinks.blogexplosion.com
      127.0.0.1 rentblog.blogexplosion.com
      127.0.0.1 mapstats.blogflux.com
      127.0.0.1 www.blogplaync.com #[Win32/TrojanDownloader.Ani.Gen][server down?]
      127.0.0.1 pcbutts1-therealtruth.blogspot.com
      127.0.0.1 t.blogreaderproject.com #[WebBug]
      127.0.0.1 blogmark.bokee.com #[Adware.BocaiToolbar]
      127.0.0.1 track.blogcounter.de
      127.0.0.1 www.blogcounter.de
      127.0.0.1 www3.bloomingdales.com #[WebBug.eluminate]
      127.0.0.1 adserver.bluewin.ch
      127.0.0.1 ie-stat.bmmetrix.com
      127.0.0.1 t.bmmetrix.com
      127.0.0.1 www.bmmetrix.com #[WebBug][Tracking.Cookie]
      127.0.0.1 ads.boardtracker.com
      127.0.0.1 ranks.boardtracker.com
      127.0.0.1 adimage.bokee.com
      127.0.0.1 ad.bol.bg
      127.0.0.1 adv.bol.bg
      127.0.0.1 ads.bomis.com
      127.0.0.1 banners.bookmaker.com
      127.0.0.1 ccc.boolans.com #[Adware.Rugo]
      127.0.0.1 err.boom.ru
      127.0.0.1 www.borlander.com.cn #[ADSPY/Boran.X.19.C]
      127.0.0.1 ads.brainiads.com
      127.0.0.1 ads.breakthru.com
      127.0.0.1 bans.bride.ru
      127.0.0.1 ads.bridgetrack.com
      127.0.0.1 cc.bridgetrack.com
      127.0.0.1 citi.bridgetrack.com #[Ad-Aware.Tracking.Cookie]
      127.0.0.1 citi.bridgetrack.com.edgesuite.net
      127.0.0.1 rccl.bridgetrack.com #[MVPS.Criteria]
      127.0.0.1 goku.brightcove.com #[WebBug]
      127.0.0.1 adsrv2.brownpride.com
      127.0.0.1 www.browserplugin.com #[HJTH.EroticAccess][wobz.de]
      127.0.0.1 bsdpng.info
      127.0.0.1 btbilgisayarkursu.com #[Win32/TrojanDownloader.Small.AWA]
      127.0.0.1 www.btbilgisayarkursu.com #[Win32/TrojanDownloader.Small.AWA]
      127.0.0.1 www.bulletads.com
      127.0.0.1 redemption.bullseye-media.net
      127.0.0.1 users.bullseye-media.net
      127.0.0.1 www.bullseye-media.net
      127.0.0.1 bunnezone.com #[Win32/Jep.Russ]
      127.0.0.1 burnsrecyclinginc.com #[Win32/TrojanDropper.Agent.NBX]
      127.0.0.1 www.burnsrecyclinginc.com
      127.0.0.1 ad1.bustcash.com
      127.0.0.1 www.buycheapadvertising.com
      127.0.0.1 buytraffic.cn
      127.0.0.1 www.buzzclick.com
      127.0.0.1 tr.buzzlogic.com
      127.0.0.1 tracking.byindia.com
      127.0.0.1 www.byip.cn #[Google.Warning]
      127.0.0.1 multi.byulcom.com #[Win32/TrojanDownloader.Small.BIV]
      127.0.0.1 ads.calgarystampede.com
      127.0.0.1 www.cambodiaoutsourcing.com
      127.0.0.1 canadianhw.ca #[VBS/Envary.A]
      127.0.0.1 www.canadianhw.ca
      127.0.0.1 ads.caniamedia.com
      127.0.0.1 canadians-health.com #[Spamdexing]
      127.0.0.1 ads.capablenet.com
      127.0.0.1 images.cashfiesta.com #[AdWare.CashFiesta.a]
      127.0.0.1 www.cashfiesta.com #[McAfee.Adware-CashFiesta]
      127.0.0.1 www.cashfiesta.net
      127.0.0.1 banner.casinoking.com #[AdWare.Win32.Casino.ae]
      127.0.0.1 ad.caradisiac.com
      127.0.0.1 ads.cars.com
      127.0.0.1 www.cbproads.com
      127.0.0.1 qi.ccbtv.net #[Google.Warning]
      127.0.0.1 blockbuster.com.7.ccg360.com
      127.0.0.1 blockbuster.med.ccg360.com
      127.0.0.1 www.cd321.com
      127.0.0.1 ads.cdfreaks.com #[eTrust.Ads.cdfreaks]
      127.0.0.1 ads.cdrinfo.com
      127.0.0.1 stats.cdrinfo.com #[WebBug]
      127.0.0.1 www.celebritypicturesarchive.com #[Trojan-Downloader.Win32.IstBar.nn]
      127.0.0.1 www.celebrity-pictures-world.com #[Trojan-Downloader.Win32.IstBar.nn]
      127.0.0.1 clicktracker.centrum.cz
      127.0.0.1 cetrk.com #[Crazy Egg]
      127.0.0.1 cesp.be #[HTML/TrojanDownloader.Agent.NAB]
      127.0.0.1 adserver.cducinema.com
      127.0.0.1 counter.cgiworld.net
      127.0.0.1 tracker.cgiworld.net
      127.0.0.1 cts.channelintelligence.com #[switch.atdmt.com]
      127.0.0.1 abc.checkm8.com
      127.0.0.1 ny.checkm8.com
      127.0.0.1 rmm1u.checkm8.com
      127.0.0.1 web.checkm8.com #[CHECKM8 AD TAGS]
      127.0.0.1 web2.checkm8.com
      127.0.0.1 ads.checkm8.co.za
      127.0.0.1 ads.china.com
      127.0.0.1 ad.chip.de
      127.0.0.1 ad.cibleclick.com #[eTrust.Cibleclick]
      127.0.0.1 www.cibleclick.com #[Ad-Aware.Tracking.Cookie]
      127.0.0.1 www.classicequipment.com #[Google.Warning]
      127.0.0.1 board.classifieds1000.com
      127.0.0.1 xp.classifieds1000.com
      127.0.0.1 www.classifieds1000.com #[SiteAdvisor.classifieds1000.com]
      127.0.0.1 images.clckm.com
      127.0.0.1 pics.clckm.com #[Parking Service]
      127.0.0.1 ads.clickad.com #[eTrust.Tracking.Cookie]
      127.0.0.1 clickbank.net #[Ad-Aware.Tracking.Cookie]
      127.0.0.1 hop.clickbank.net #[Adware.Clickbank][Adware.ClickDLoader]
      127.0.0.1 ssl.clickbank.net
      127.0.0.1 zzz.clickbank.net #[Ewido.TrackingCookie.Clickbank]
      127.0.0.1 publishers.clickbooth.com #[directleads.com]
      127.0.0.1 clickboothlnk.com
      127.0.0.1 www.clickboothlnk.com
      127.0.0.1 j.clickdensity.com
      127.0.0.1 r.clickdensity.com
      127.0.0.1 cf-db01.clickfacts.com
      127.0.0.1 server104.clickfacts.com #[ClickFacts Tracking Beacon]
      127.0.0.1 www.clickmanage.com
      127.0.0.1 clicktracks.com #[McAfee.Cookie-Clicktracks]
      127.0.0.1 stats.clicktracks.com #[Tenebril.Tracking.Cookie]
      127.0.0.1 stats1.clicktracks.com # [eTrust.Tracking.Cookie]
      127.0.0.1 stats2.clicktracks.com #[SpySweeper.Spy.Cookie]
      127.0.0.1 stats3.clicktracks.com
      127.0.0.1 stats4.clicktracks.com
      127.0.0.1 www.clicktracks.com #[SunBelt.ClickTracks]
      127.0.0.1 www.is1.clixgalore.com
      127.0.0.1 www.clixgalore.com
      127.0.0.1 hit.click2006.com
      127.0.0.1 www2.click-fr.com
      127.0.0.1 www3.click-fr.com
      127.0.0.1 www4.click-fr.com
      127.0.0.1 www.clickhouse.com #[SunBelt.ClickHouse]
      127.0.0.1 www.click-power.com #[Win32/TrojanDownloader.VB.JL][Win32.Virtumonde.by]
      127.0.0.1 www.clicksbroker.com
      127.0.0.1 ad1.clickhype.com #[Ewido.TrackingCookie.Clickhype]
      127.0.0.1 redirect.clickshield.net
      127.0.0.1 clicktorrent.info
      127.0.0.1 static.clicktorrent.info
      127.0.0.1 www.clicktorrent.info #[phpAds]
      127.0.0.1 www1.clicktorrent.info
      127.0.0.1 norbert_sirot.club.fr #[Trojan-Spy.Win32.Banker.anv]
      127.0.0.1 banner.clubdicecasino.com
      127.0.0.1 adserver.clix.pt
      127.0.0.1 ad.cmfu.com
      127.0.0.1 www.cnstats.com
      127.0.0.1 ad.coas2.co.kr
      127.0.0.1 collectiveads.net
      127.0.0.1 a.collective-media.net
      127.0.0.1 www.comclean.co.kr #[Spyware.Comclean]
      127.0.0.1 www.combimedia.nl
      127.0.0.1 bdx.comclick.com
      127.0.0.1 br.comclick.com
      127.0.0.1 ct2.comclick.com #[Tenebril.Tracking.Cookie]
      127.0.0.1 fl01.ct2.comclick.com #[Ad-Aware.Tracking.Cookie]
      127.0.0.1 ihm01.ct2.comclick.com
      127.0.0.1 www.comclick.com #[Ewido.TrackingCookie.Comclick]
      127.0.0.1 banners.commissionking.com
      127.0.0.1 members.commissionmonster.com
      127.0.0.1 www.compactads.com
      127.0.0.1 aa.connextra.com
      127.0.0.1 bb.connextra.com #[a22.g.akamai.net]
      127.0.0.1 cc.connextra.com
      127.0.0.1 dd.connextra.com
      127.0.0.1 ee.connextra.com
      127.0.0.1 ff.connextra.com #[a22.g.akamai.net]
      127.0.0.1 data.connextra.com
      127.0.0.1 linkexchange.consoleunderground.com
      127.0.0.1 www.consoleunderground.com #[Adware.Begin2search]
      127.0.0.1 ads.consumeraffairs.com
      127.0.0.1 ads.contact.md
      127.0.0.1 ads.contactmusic.com #[AdvertPro]
      127.0.0.1 servedby.contextuad.org
      127.0.0.1 svp.contextuad.org #[SunBelt.ContextuAd]
      127.0.0.1 www.contextualadv.com
      127.0.0.1 www.contextpanel.com #[searchant.com]
      127.0.0.1 ads.console.net
      127.0.0.1 banners.copyscape.com
      127.0.0.1 www.counter-x.com
      127.0.0.1 www.countit.ch
      127.0.0.1 counter.co.kz
      127.0.0.1 www.counter-gratis.com #[Ad-Aware.Tracking.Cookie]
      127.0.0.1 www.countercentral.com
      127.0.0.1 www.counterdata.com
      127.0.0.1 www.counterguide.com
      127.0.0.1 counter-shop.net
      127.0.0.1 htm-pop-ky.counterstat.net
      127.0.0.1 www.counting4free.com
      127.0.0.1 www.counter.cz
      127.0.0.1 www.counti.de
      127.0.0.1 www.countmypage.com
      127.0.0.1 log1.countomat.com
      127.0.0.1 connectionzone.com
      127.0.0.1 www.couponsandoffers.com #[Adware.TopMoxie]
      127.0.0.1 data.coremetrics.com
      127.0.0.1 test.coremetrics.com #[SpySweeper.Spy.Cookie]
      127.0.0.1 twci.coremetrics.com #[Ad-Aware.Tracking.Cookie]
      127.0.0.1 banner.coza.com
      127.0.0.1 cp16688.cn #[Win32/TrojanDownloader.Ani.Gen]
      127.0.0.1 www.cp16688.cn #[VBS/TrojanDownloader.Psyme.FM]
      127.0.0.1 www.cpaclicks.com #[Spamdexing]
      127.0.0.1 server.cpmstar.com #[ads.shizmoo.com]
      127.0.0.1 cracks.am #[eTrust.Cracks.am][ADW_CRAMTB.A]
      127.0.0.1 www.cracks.am #[fuck-portal.com][Adware.CramToolbar]
      127.0.0.1 ads.cracked.com
      127.0.0.1 track.cracked.com
      127.0.0.1 new.crashextads.co.uk
      127.0.0.1 crawl.ws
      127.0.0.1 cont.crawl.ws #[AdWare.Win32.MegaKiss.b]
      127.0.0.1 www.crawl.ws
      127.0.0.1 counter.credo.ru
      127.0.0.1 www.cridem.org #[Win32/Spy.Banker.AHY]
      127.0.0.1 ads.crosswinds.net
      127.0.0.1 ads.crucialparadigm.com
      127.0.0.1 cdn.crwdcntrl.net
      127.0.0.1 media.customeracquisitionsite.com #[customeracquisitionsite.adlegend.com]
      127.0.0.1 cmd.customink.com #[WebBug.eluminate]
      127.0.0.1 cxss358.com #[HTML/TrojanDownloader.Agent.BP]
      127.0.0.1 ads.cyberax.com
      127.0.0.1 banner.cybertechdev.com
      127.0.0.1 cybertown.ru
      127.0.0.1 search.cygo.net
      127.0.0.1 www.cygo.net #[McAfee.Adware-Cygo]
      127.0.0.1 ads.dada.it
      127.0.0.1 www.dailykeys.com #[Google.Warning]
      127.0.0.1 aj.daniweb.com
      127.0.0.1 www.data-jpn.com #[Trojan.Pajatan]
      127.0.0.1 banner.date.com #[Tenebril.Tracking.Cookie]
      127.0.0.1 www.dateclix.com #[DateClix.com Banner Exchange Code]
      127.0.0.1 datingbanners.net
      127.0.0.1 ads.datinggold.com
      127.0.0.1 ad.db3nf.com
      127.0.0.1 dcstat.com
      127.0.0.1 images.ddc.com #[Parking Service]
      127.0.0.1 ads.dealnews.com
      127.0.0.1 au.track.decideinteractive.com
      127.0.0.1 au.link.decideinteractive.com
      127.0.0.1 eu.link.decideinteractive.com
      127.0.0.1 link.decideinteractive.com
      127.0.0.1 www.decideinteractive.com
      127.0.0.1 www.decideinteractive.co.uk
      127.0.0.1 deepcom.com #[SiteAdvisor.deepcom.com]
      127.0.0.1 www.deepcom.com #[TrojanDropper.Win32.Small.gt]
      127.0.0.1 collector.deepmetrix.com
      127.0.0.1 geo.deepmetrix.com
      127.0.0.1 www.deepmetrix.com #[Microsoft]
      127.0.0.1 ads.dennisnet.co.uk
      127.0.0.1 ad.depositfiles.com
      127.0.0.1 ad.detik.com
      127.0.0.1 desire-search.com #[Spamdexing]
      127.0.0.1 ads.deviantart.com
      127.0.0.1 adsvr.deviantart.com
      127.0.0.1 phpadsnew.devstart.com
      127.0.0.1 www.dhtianyu.net #[Spamdexing]
      127.0.0.1 banners.diariodelaltoaragon.es
      127.0.0.1 track.did-it.com #[Panda.Spyware:Cookie/did-it]
      127.0.0.1 counter.dieit.de
      127.0.0.1 digiwexonline.com #[W32/Kibik.a]
      127.0.0.1 www.digink.com #[PcTools.SysCheckBop32]
      127.0.0.1 ads.digitalpoint.com
      127.0.0.1 geo.digitalpoint.com
      127.0.0.1 comm1.digits.com
      127.0.0.1 counter.digits.com
      127.0.0.1 ads.dir.bg
      127.0.0.1 banners.dir.bg
      127.0.0.1 ad.directconnect.se
      127.0.0.1 banners.directnic.com #[SecuritySpace.WebBug][MVPS.Criteria]
      127.0.0.1 dnads.directnic.com
      127.0.0.1 parked.directnic.com
      127.0.0.1 stats.directnic.com
      127.0.0.1 www.directnicparking.com
      127.0.0.1 aserve.directorym.com
      127.0.0.1 cache.directorym.com #[c2.mii.instacontent.net]
      127.0.0.1 ads.directnetadvertising.net #[SiteAdvisor.directnetadvertising.net]
      127.0.0.1 www.directnetadvertising.net #[Ad-Aware Tracking.Cookie]
      127.0.0.1 direct-web.co.kr #[Adware-DirectWeb]
      127.0.0.1 agentq.ditto.com
      127.0.0.1 js.ditto.com
      127.0.0.1 matrix.ditto.com
      127.0.0.1 media.ditto.com #[a232.x.akamai.net]
      127.0.0.1 www.ditto.com #[AdWare.Win32.Softomate.c]
      127.0.0.1 ads.djindexes.com
      127.0.0.1 openads.dlg.cz
      127.0.0.1 a.dlqm.net
      127.0.0.1 dcww.dmcast.com #[Adware-DesktopMedia]
      127.0.0.1 ad1.dmcmedia.co.kr
      127.0.0.1 dmdl.dmcast.com
      127.0.0.1 install.dmcast.com #[Adware-DesktopMedia.dr]
      127.0.0.1 track.dmipartners.com
      127.0.0.1 rotabanner.dni.ru
      127.0.0.1 searchportal.dnparking.com #[Parking Service]
      127.0.0.1 www.dnscaching.net #[SiteAdvisor.dnscaching.net]
      127.0.0.1 dnv-counter.com
      127.0.0.1 d08r.cn #[Spamdexing]
      127.0.0.1 www.domamil.cz #[Trojan.Beagooz]
      127.0.0.1 www.dodostats.com
      127.0.0.1 adv.dontcrack.com
      127.0.0.1 doorgen.com #[Spamdexing]
      127.0.0.1 www.doorgen.com
      127.0.0.1 ads.dotomi.com
      127.0.0.1 www.download-services.com #[VBA32.Trojan-Downloader.Agent.26]
      127.0.0.1 www.downseek.com #[SunBelt.DownSeek Search]
      127.0.0.1 banners.dpnet.com.br
      127.0.0.1 drmx01.net #[Spamdexing]
      127.0.0.1 www.claus.drehteile-rieche.de #[Win32.Formglieder.B]
      127.0.0.1 www.dreamadvert.com #[SunBelt.Dreamadvert]
      127.0.0.1 www.dropthehammer.com #[Win32/Spy.Banker.AHY]
      127.0.0.1 ads.drugs.com
      127.0.0.1 b.ds1.nl
      127.0.0.1 dsiworld.net
      127.0.0.1 ddd.dudu.com #[Tenebril.DuDu Accelerator]
      127.0.0.1 ulink4.dudu.com #[Adware.DDDClient][SunBelt.DuDuAccelerator]
      127.0.0.1 ulink13.dudu.com #[Win32/Adware.DM]
      127.0.0.1 www.dudu.com #[McAfee.Downloader-AVV]
      127.0.0.1 www.duenow.com
      127.0.0.1 dukasound.info #[Javascript.Exploit]
      127.0.0.1 www.dutty.de #[W32.Peerload.A]
      127.0.0.1 www.dzy520.com #[Google.Warning]
      127.0.0.1 hits.e.cl
      127.0.0.1 banners.earnunited.com
      127.0.0.1 blogads.ebanner.nl
      127.0.0.1 www.e-bannerx.com #[Ad-Aware.Tracking.Cookie]
      127.0.0.1 www.earncashontheinternet.com #[SunBelt.OpinionBar]
      127.0.0.1 click.easilyfound.com #[Tenebril.AdTraffic]
      127.0.0.1 www.easilyfound.com
      127.0.0.1 www.easycounter.com
      127.0.0.1 banners.easydns.com
      127.0.0.1 easyhitcounters.com
      127.0.0.1 beta.easyhitcounters.com
      127.0.0.1 easytrader.bg
      127.0.0.1 static.easytrader.bg
      127.0.0.1 www.ebannertraffic.com
      127.0.0.1 mailer.ebates.com
      127.0.0.1 www.ebates.com #[Adware.MoeMoney]
      127.0.0.1 ads.eccentrix.com
      127.0.0.1 b.economedia.bg #[ban.etaligent.net]
      127.0.0.1 ads.ecrush.com #[AdvertPro]
      127.0.0.1 www.eden21.net #[Win32/Haxdoor][TR/Dldr.Botol.D.1]
      127.0.0.1 c6.edgesuite.net #[RealMedia]
      127.0.0.1 einfachstarten.com #[Trojan.Firpage]
      127.0.0.1 eisenstein.dk #[tracking.ping]
      127.0.0.1 www.ejmx.com #[Adware.ElectroJMX]
      127.0.0.1 ad.e-kolay.net
      127.0.0.1 www.ek21.com #[Trojan.Chost.B]
      127.0.0.1 ads.elmaz.com
      127.0.0.1 now.eloqua.com #[WebBug]
      127.0.0.1 ads.eluniversal.com.mx
      127.0.0.1 hits.eluniversal.com.mx
      127.0.0.1 publicidad.eluniversal.com.mx
      127.0.0.1 elwebsearch.info #[Malicious.Links.Umax]
      127.0.0.1 wwv.elwebsearch.info
      127.0.0.1 www.elwebsearch.info
      127.0.0.1 ad1.emediate.dk
      127.0.0.1 eas.apm.emediate.eu
      127.0.0.1 ad1.emediate.se
      127.0.0.1 vcontent.e-messenger.net
      127.0.0.1 www.emoinstaller.com #[Win32/Adware.NdotNet][SiteAdvisor.emoinstaller.com]
      127.0.0.1 www.emusic.com #[Win32/Adware.Comet][MVPS.Criteria]
      127.0.0.1 dotnet.endai.com
      127.0.0.1 stats.engineseeker.com
      127.0.0.1 enjoytraffic.com
      127.0.0.1 sa.entireweb.com
      127.0.0.1 entk.net
      127.0.0.1 log.enquisite.com
      127.0.0.1 adv.entercasino.com #[Adware.Casino.V]
      127.0.0.1 ads.eog.com
      127.0.0.1 ads.e-planning.net
      127.0.0.1 ads.us.e-planning.net
      127.0.0.1 ertbirth009.info #[Spamdexing.Codec]
      127.0.0.1 adserving03.epi.es
      127.0.0.1 www.escorcher.com #[eTrust.EScorcher]
      127.0.0.1 search.etargetnet.com
      127.0.0.1 bg.search.etargetnet.com
      127.0.0.1 cz.search.etargetnet.com
      127.0.0.1 pages.etology.com
      127.0.0.1 www.etracker.de
      127.0.0.1 www.etxh.com #[Win32/Prosti.C]
      127.0.0.1 count.e-ratings.com.ua
      127.0.0.1 ads.ere.net
      127.0.0.1 ads.ero-advertising.com
      127.0.0.1 banners.ero-advertising.com
      127.0.0.1 data.ero-advertising.com
      127.0.0.1 thumbs.ero-advertising.com
      127.0.0.1 adopt.euroclick.com #[Ewido.TrackingCookie.Euroclick]
      127.0.0.1 cdn.euroclick.com
      127.0.0.1 www.euroklik.nl #[EasyBar][HJTH.SinCity Dialer]
      127.0.0.1 advert.eurotip.cz
      127.0.0.1 www.euros4click.de
      127.0.0.1 ad.eurosport.com #[oas.eurosport.com]
      127.0.0.1 www.eurowebstats.com
      127.0.0.1 www.everestpoker.com #[AdWare.Win32.Casino.t]
      127.0.0.1 advert.exaccess.ru
      127.0.0.1 dynamic.exaccess.ru
      127.0.0.1 static.exaccess.ru
      127.0.0.1 www.exchangead.com
      127.0.0.1 exchange.bg
      127.0.0.1 media.exchange.bg
      127.0.0.1 www.exchange.bg
      127.0.0.1 load.exelator.com
      127.0.0.1 tlal.exelator.net
      127.0.0.1 exitexchange.com #[SiteAdvisor.exitexchange.com]
      127.0.0.1 ads.exitexchange.com
      127.0.0.1 count.exitexchange.com #[McAfee.Cookie-Exitexchange]
      127.0.0.1 images.exitexchange.com
      127.0.0.1 www.exitexchange.com #[SpySweeper.Spy.Cookie]
      127.0.0.1 www.exittrade.com
      127.0.0.1 ads2.expatica.com
      127.0.0.1 nyton.experclick.com #[p.mii.instacontent.net]
      127.0.0.1 www.experclick.com #[SpySweeper.Spy.Cookie]
      127.0.0.1 ads.expressindia.com
      127.0.0.1 banners.expressindia.com
      127.0.0.1 cdn.eyewonder.com #[SunBelt.EyeWonder]
      127.0.0.1 cdn1.eyewonder.com
      127.0.0.1 cdn4.eyewonder.com
      127.0.0.1 pixel1097.everesttech.net
      127.0.0.1 pixel1324.everesttech.net
      127.0.0.1 pixel1370.everesttech.net
      127.0.0.1 www.evidence-eliminator.com
      127.0.0.1 www.ewebcounter.com
      127.0.0.1 ads2.exhedra.com
      127.0.0.1 ads.expedia.com
      127.0.0.1 admedia.expedia.com
      127.0.0.1 www.eyeget.com #[McAfee.Adware-EyeGet]
      127.0.0.1 feedback.eyereturn.com
      127.0.0.1 resources.eyereturn.com
      127.0.0.1 timespent.eyereturn.com
      127.0.0.1 voken.eyereturn.com
      127.0.0.1 ads.ezboard.com
      127.0.0.1 eziin.com #[Adware.Eziin]
      127.0.0.1 www.eziin.com
      127.0.0.1 www.ezurl.co.kr #[Spyware.Ezurl]
      127.0.0.1 ads.facebook.com #[facebook-ads.vo.llnwd.net]
      127.0.0.1 ads.ak.facebook.com
      127.0.0.1 www.factorygames.com #[SiteAdvisor.factorygames.com]
      127.0.0.1 banner.fairpoker.com #[AdWare.Win32.Casino.w]
      127.0.0.1 ehs.familydoctor.org #[ads.digitalhealthcare.com]
      127.0.0.1 tmp.farfly.org #[Trojan.Farfli]
      127.0.0.1 a.farlex.com
      127.0.0.1 www.fast-adv.it
      127.0.0.1 www.fastadvert.com
      127.0.0.1 www.fastfind.org #[TROJ_STARTPAG.KF][Win32/Adware.MediaBack]
      127.0.0.1 fastonlineusers.com
      127.0.0.1 fasttrack.nu
      127.0.0.1 fastwebcounter.com
      127.0.0.1 counter.fateback.com
      127.0.0.1 www.fatpenguinmedia.com
      127.0.0.1 counter1.fc2.com
      127.0.0.1 alex.fileburst.com #[Win32/TrojanDropper.Agent.NBT]
      127.0.0.1 adserver.filefront.com #[Ad-Aware.Tracking.Cookie]
      127.0.0.1 adserver.finditquick.com
      127.0.0.1 findover.org #[Spamdexing]
      127.0.0.1 search.findscout.com
      127.0.0.1 www.findscout.com #[W32/Delf.KPZ]
      127.0.0.1 ai.p.findology.com
      127.0.0.1 banner.finn.no
      127.0.0.1 ads.firingsquad.com
      127.0.0.1 ads2.firingsquad.com
      127.0.0.1 firstdor.info #[Spamdexing]
      127.0.0.1 ads.firstgrand.com
      127.0.0.1 fishclix.com
      127.0.0.1 www.fishclix.com
      127.0.0.1 www.fish-screensaver.com #[AdWare.Win32.Gator.1008]
      127.0.0.1 www.fjordbergen.com #[Win32/Spy.Banker.BIG]
      127.0.0.1 www.fjjyjy.net #[Win32/Hipigon][W32.Fijjy]
      127.0.0.1 www.flashadengine.com
      127.0.0.1 cdn.flashedmail.com #[Parked?]
      127.0.0.1 tracker1.flashedmail.com
      127.0.0.1 adserver4.fluent.ltd.uk
      127.0.0.1 adserver.fmpub.net
      127.0.0.1 dynamic.fmpub.net
      127.0.0.1 static.fmpub.net
      127.0.0.1 ads.fmwinc.com
      127.0.0.1 rnews.focus-news.net
      127.0.0.1 rpt.footlocker.com #[WebBug.eluminate]
      127.0.0.1 adcycle.footymad.net
      127.0.0.1 www.forodeortodoncia.com #[Backdoor.IRC.Zapchast]
      127.0.0.1 js.forrestersurveys.com
      127.0.0.1 socratos.forrestersurveys.com
      127.0.0.1 forso.info #[Malicious.Links.Codec]
      127.0.0.1 forvideo.at
      127.0.0.1 www.forvideo.at #[Javascript.Exploit]
      127.0.0.1 akcr.free.fr #[Win32/Spy.Bancos.U]
      127.0.0.1 googlelite.free.fr #[Spamdexing]
      127.0.0.1 ad.freecity.de
      127.0.0.1 ads05.freecity.de
      127.0.0.1 freecounters.xp.tl
      127.0.0.1 www.free-counter.com
      127.0.0.1 maurobb.freecounter.it
      127.0.0.1 www.freecounter.it
      127.0.0.1 securinews.free.fr #[Trojan.Hexem]
      127.0.0.1 www.freedownloadhq.com #[SiteAdvisor.freedownloadhq.com]
      127.0.0.1 ad.freefind.com
      127.0.0.1 adverts.freeloader.com
      127.0.0.1 adserver.freenet.de
      127.0.0.1 www.free-ranking.de
      127.0.0.1 www.freerip.com #[AdTool.Win32.MyWebSearch.ak]
      127.0.0.1 banner-server.freerun.com
      127.0.0.1 free-stats.com
      127.0.0.1 abbyssh.freestats.com
      127.0.0.1 insurancejournal.freestats.com
      127.0.0.1 banners.freett.com
      127.0.0.1 count.freett.com
      127.0.0.1 counters.freewebs.com
      127.0.0.1 ads.freeonlinegames.com
      127.0.0.1 stats.freeonlinegames.com
      127.0.0.1 error.freewebsites.com
      127.0.0.1 www.freewebsites.com
      127.0.0.1 tracking.fsjmp.com
      127.0.0.1 ftpiframer.org #[Javascript.Exploit]
      127.0.0.1 media.ftv-publicite.fr #[RealMedia]
      127.0.0.1 fullddl.com
      127.0.0.1 www.fullddl.com #[HTML/TrojanDownloader.XXXToolbar]
      127.0.0.1 404.funpic.de
      127.0.0.1 www.fusestats.com
      127.0.0.1 ads.gad-network.com
      127.0.0.1 adserver.gadu-gadu.pl
      127.0.0.1 www.gamersbanner.com
      127.0.0.1 ads.gamesbannernet.com
      127.0.0.1 ads.gameservers.com
      127.0.0.1 ads.gamespy.com #[SpySweeper.Spy.Cookie]
      127.0.0.1 adcontent.gamespy.com
      127.0.0.1 ads.gamespyid.com
      127.0.0.1 www.gameurdr.com #[Win32/TrojanDownloader.Ani.Gen][server down?]
      127.0.0.1 server.gamyun.net
      127.0.0.1 www.gamyun.net #[Adware.GamyunIeToolbar]
      127.0.0.1 ad.garantiarkadas.com
      127.0.0.1 gasan.ru #[Trojan.Codec]
      127.0.0.1 ads.gather.com
      127.0.0.1 track.gawker.com #[WebBug]
      127.0.0.1 ad.gazeta.pl
      127.0.0.1 adp.gazeta.pl
      127.0.0.1 adv.gazeta.pl
      127.0.0.1 haymarket-adserver.gcnpublishing.com
      127.0.0.1 www.gebr-wachs.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
      127.0.0.1 sda.geek.com #[AdvertPro]
      127.0.0.1 adserver.geenstijl.nl
      127.0.0.1 kassa.geenstijl.nl
      127.0.0.1 schoorsteen.geenstijl.nl
      127.0.0.1 adserver.geizkragen.de
      127.0.0.1 gnt01.generation-nt.com
      127.0.0.1 gd.geobytes.com
      127.0.0.1 geotarget.info #[Whois.Blacklisted]
      127.0.0.1 banners.geotarget.info
      127.0.0.1 www.geotarget.info
      127.0.0.1 www.geowhere.net #[SunBelt.GeoWhere Search]
      127.0.0.1 get-access.host.sk #[McAfee.StartPage-IR]
      127.0.0.1 getclicky.com
      127.0.0.1 pmetrics.getclicky.com
      127.0.0.1 static.getclicky.com
      127.0.0.1 www.getsmart.com
      127.0.0.1 dlx.getupdate.com #[AdvWare.ToolBar.VB.b][Adware.Getup]
      127.0.0.1 banner.giantvegas.com
      127.0.0.1 counters.gigya.com
      127.0.0.1 truehits.gits.net.th
      127.0.0.1 truehits1.gits.net.th
      127.0.0.1 ads.globo.com
      127.0.0.1 ads.img.globo.com
      127.0.0.1 duke.gocomics.com #[ads.uclick.com]
      127.0.0.1 www.godesktop.com #[SiteAdvisor.godesktop.com]
      127.0.0.1 adserver2.goals365.com
      127.0.0.1 banner.goldenpalace.com #[Tenebril.Tracking.Cookie]
      127.0.0.1 stage.goldkey.com #[Parking Service]
      127.0.0.1 goldstats.net
      127.0.0.1 www.goldstats.net
      127.0.0.1 www.goodhealth-search.com #[Spamdexing]
      127.0.0.1 google9.info
      127.0.0.1 www.google9.info
      127.0.0.1 www.google-hard.com #[Win32/TrojanProxy.Agent.LK]
      127.0.0.1 gooogle.info
      127.0.0.1 goooglegulp.com #[Spamdexing]
      127.0.0.1 goopssearch.com #[Google.Warning]
      127.0.0.1 www.goopssearch.com
      127.0.0.1 www.gogogo.com #[PremiumTraffic.Parking Service]
      127.0.0.1 partner.gonamic.de
      127.0.0.1 googlus.com #[Spamdexing]
      127.0.0.1 adincl.gopher.com #[InfoSpace]
      127.0.0.1 gostats.com
      127.0.0.1 as.gostats.com
      127.0.0.1 c1.gostats.com
      127.0.0.1 c2.gostats.com #[SpySweeper.Spy.Cookie]
      127.0.0.1 c3.gostats.com
      127.0.0.1 c4.gostats.com #[Panda.Spyware:Cookie/GoStats]
      127.0.0.1 ded.gostats.com
      127.0.0.1 monster.gostats.com
      127.0.0.1 webcounter.goweb.de
      127.0.0.1 ads.goyk.com
      127.0.0.1 graffitifonts.com
      127.0.0.1 www.graffitifonts.com #[Malicious.Links.Zango]
      127.0.0.1 graficastrigo.com #[Trojan.Tabela.E][server down?]
      127.0.0.1 www.gratis-counter-gratis.de
      127.0.0.1 www.gratis-toplist.de
      127.0.0.1 adv.gratuito.st
      127.0.0.1 expedia.gravitytrack.com
      127.0.0.1 www.greasypalm.co.uk #[PcTools.GreasyPalm bar]
      127.0.0.1 adserver.gruprc.ro
      127.0.0.1 ad4.gueb.com
      127.0.0.1 ad7.gueb.com
      127.0.0.1 ads.guru3d.com
      127.0.0.1 ads.gusanito.com
      127.0.0.1 www.g-wizzads.net #[adbureau.net]
      127.0.0.1 x.gxgxy.net #[Trojan-Downloader.Win32.Agent.hkc][server down?]
      127.0.0.1 www.h148.cn #[Google.Warning]
      127.0.0.1 ads2.haber3.com
      127.0.0.1 cc9905.counter.hackers.lv
      127.0.0.1 www.handyarchive.com #[SiteAdvisor.handyarchive.com]
      127.0.0.1 www.haosf128.com #[Google.Warning]
      127.0.0.1 streamit.hardwarezone.com
      127.0.0.1 ad1.hardware.no #[AdvertPro]
      127.0.0.1 adserver.hardwareanalysis.com
      127.0.0.1 ad.harmony-central.com
      127.0.0.1 ds1.harmony-central.com
      127.0.0.1 www.harmonyhollow.net #[SiteAdvisor.harmonyhollow.net]
      127.0.0.1 hartim.com
      127.0.0.1 ad0.haynet.com
      127.0.0.1 ad.hbv.de
      127.0.0.1 ads.heias.com
      127.0.0.1 www.hentaibanners.com
      127.0.0.1 www.hentaicashmachine.com
      127.0.0.1 www.hentaiclicks.com
      127.0.0.1 www.hentaicounter.com
      127.0.0.1 www.hentaihits.com
      127.0.0.1 www.hentaipop.com #[Electronic Group Dialer]
      127.0.0.1 www.hentaiseeker.com
      127.0.0.1 www.hentaitoonami.com
      127.0.0.1 www.henwo.com
      127.0.0.1 ads.herbalsmokeshop.com
      127.0.0.1 www2.hermoment.com
      127.0.0.1 www.hermoment.com
      127.0.0.1 ads.hexun.com
      127.0.0.1 www.hey.lt
      127.0.0.1 ads.highdefdigest.com
      127.0.0.1 adserver.hispanoclick.com
      127.0.0.1 www.hitscount.com
      127.0.0.1 www.hit-counter-download.com
      127.0.0.1 hithopper.com #[Adware.Hithopper]
      127.0.0.1 www.hithopper.com #[ADW_HITHOPPER.A]
      127.0.0.1 rdr.hitmngr.com #[WinFixer]
      127.0.0.1 sxp.hitmngr.com
      127.0.0.1 hitmodel.net
      127.0.0.1 www.hit-counts.com
      127.0.0.1 hit-now.com
      127.0.0.1 www.hitscreamer.com
      127.0.0.1 hitslog.com
      127.0.0.1 h1.hitslog.com
      127.0.0.1 s4.histats.com
      127.0.0.1 s10.histats.com
      127.0.0.1 s11.histats.com
      127.0.0.1 www.hitstats.co.uk
      127.0.0.1 hitstats.net
      127.0.0.1 www.hittracking.com
      127.0.0.1 images.hitwise.co.uk
      127.0.0.1 anna.homeftp.net #[W32.Linkbot.A]
      127.0.0.1 www.gontijoamaral.hpg.com.br #[Adware.Diginum]
      127.0.0.1 www.adserver.home.pl
      127.0.0.1 www.homeoffun.com #[SiteAdvisor.homeoffun.com]
      127.0.0.1 counters.honesty.com
      127.0.0.1 cgi.honesty.com #[MVPS.Criteria]
      127.0.0.1 ad.hosting.pl
      127.0.0.1 hot8888.com #[Win32/TrojanDownloader.Ani.Gen]
      127.0.0.1 hot8888.cn #[Win32/TrojanDownloader.Ani.Gen]
      127.0.0.1 ad2.hotels.com
      127.0.0.1 www.hot-lindsay.com #[Malicious.Links.Zango]
      127.0.0.1 hotlinkbanners.com
      127.0.0.1 www.hotlinkbanners.com
      127.0.0.1 cgi.hotstat.nl
      127.0.0.1 viewstat.hotstat.nl
      127.0.0.1 ad.howstuffworks.com #[RealMedia][SpySweeper.Spy.Cookie]
      127.0.0.1 hpod.com
      127.0.0.1 htepo.com #[Rogue/Suspect Affiliate.sites]
      127.0.0.1 www.htmate2.com #[Cursor.MySpace]
      127.0.0.1 adserver.html.it
      127.0.0.1 click.html.it
      127.0.0.1 ad.httpool.com
      127.0.0.1 aurelius.httpool.com
      127.0.0.1 trajan.httpool.com
      127.0.0.1 hub.com.pl
      127.0.0.1 vip.huigezi.com #[Backdoor.Graybird.Q][W32.Looked.F]
      127.0.0.1 down.hunll.com #[BDS/Agent.ahj.701]
      127.0.0.1 ads.hurra.de
      127.0.0.1 ads2000.hw.net
      127.0.0.1 dserver.hw.net
      127.0.0.1 www.hypercounter.com
      127.0.0.1 www.hypertracker.com #[SpySweeper.Spy.Cookie]
      127.0.0.1 ads.iafrica.com
      127.0.0.1 ads.iboost.com
      127.0.0.1 ads.ibox.bg
      127.0.0.1 www.iceak.net #[Javascript.Exploit]
      127.0.0.1 www.i-clicks.net
      127.0.0.1 hits.icdirect.com #[SunBelt.ICDirect.com]
      127.0.0.1 hitctr01.icdirect.com
      127.0.0.1 tracker.icerocket.com
      127.0.0.1 ictkt.com
      127.0.0.1 ads.idgnow.com.br
      127.0.0.1 banners.idg.com.br
      127.0.0.1 adidm07.idmnet.pl
      127.0.0.1 adidm.idmnet.pl
      127.0.0.1 dot.idot.cz #[WebBug]
      127.0.0.1 bar.iebar8.com #[Adware.Navihelper]
      127.0.0.1 down.iedoumi.com #[Trojan-Downloader.Win32.Delf.bpn]
      127.0.0.1 ieicon.com
      127.0.0.1 www.ieicon.com
      127.0.0.1 ie-exe.com #[AdWare.Win32.Softomate.x]
      127.0.0.1 stats.surfaid.ihost.com
      127.0.0.1 adserver.ig.com.br
      127.0.0.1 i.iinfo.cz
      127.0.0.1 k.iinfo.cz
      127.0.0.1 adserver.ilmessaggero.it
      127.0.0.1 gate.ilogbox.com
      127.0.0.1 stats.ilsemedia.nl
      127.0.0.1 ads.imeem.com
      127.0.0.1 bbn.img.com.ua
      127.0.0.1 content-ads.impactengine.com
      127.0.0.1 www.impregnable.net #[TrojanDownloader.Win32.VB.dw][Trojan.Win32.StartPage.kk]
      127.0.0.1 ads.ims.nl
      127.0.0.1 in2search.org #[JS/TrojanDropper.Tivso.gen]
      127.0.0.1 1.in2search.org
      127.0.0.1 2.in2search.org
      127.0.0.1 dns.in2search.org
      127.0.0.1 c.incomeppc.com
      127.0.0.1 s201.indexstats.com
      127.0.0.1 secure.indexstats.com
      127.0.0.1 stats.indexstats.com #[Analytics Tracking Code]
      127.0.0.1 stats.indextools.com #[eTrust.Tracking.Cookie]
      127.0.0.1 campaign.indieclick.com
      127.0.0.1 optimize.indieclick.com
      127.0.0.1 adcenter.in2.com
      127.0.0.1 juggler.inetinteractive.com
      127.0.0.1 rotator.juggler.inetinteractive.com
      127.0.0.1 banners.inetfast.com
      127.0.0.1 inetlog.ru
      127.0.0.1 www.infineo.de #[Win32/Spy.Banker.AWA]
      127.0.0.1 infospot.infocious.com
      127.0.0.1 ads.infomediainc.com
      127.0.0.1 ads.infospace.com #[ADW_DEALHELPER.C]
      127.0.0.1 msxml.infospace.com #[SpySweeper.Spy.Cookie]
      127.0.0.1 www.infotelsrl.com #[eTrust.Infotel srl]
      127.0.0.1 bimonline.insites.be
      127.0.0.1 ads.intellicast.com #[weather.com]
      127.0.0.1 strtt.interfree.it #[W32.Iberio]
      127.0.0.1 counter.internet.ge
      127.0.0.1 ad.interreklame.de
      127.0.0.1 indiads.com
      127.0.0.1 images.indiads.com
      127.0.0.1 servedby.indiads.com #[RealMedia]
      127.0.0.1 www.imiclk.com
      127.0.0.1 inexplorer.com
      127.0.0.1 local.inexplorer.com
      127.0.0.1 toolbar.inexplorer.com #[Win32/Parite.B]
      127.0.0.1 www.inexplorer.com
      127.0.0.1 www.inpopo.com #[W32.Validin][server down?]
      127.0.0.1 oc.inspectorclick.com
      127.0.0.1 trax.inspectorclick.com
      127.0.0.1 v2.inspectorclick.com
      127.0.0.1 v3.inspectorclick.com
      127.0.0.1 instantbuzz.com #[NOD32.Win32/Adware.InstantBuzz]
      127.0.0.1 www2.instantbuzz.com
      127.0.0.1 www.instantbuzz.com #[Adware.ToolBar.InstantBuzz.a]
      127.0.0.1 media.intelia.it
      127.0.0.1 anm.intelli-direct.com #[IntelliTracker]
      127.0.0.1 info.intelli-direct.com
      127.0.0.1 oxfam.intelli-direct.com
      127.0.0.1 tui.intelli-direct.com
      127.0.0.1 www.intelli-tracker.com
      127.0.0.1 newadserver.interfree.it #[Adcycle]
      127.0.0.1 ad.internetradioinc.com
      127.0.0.1 www.interstats.nl
      127.0.0.1 www.intrastats.com
      127.0.0.1 channels.intwined.com #[Adware/ToolBar.ISearch.c]
      127.0.0.1 search.intwined.com
      127.0.0.1 www.intwined.com #[McAfee.Adware-SSF!Hosts]
      127.0.0.1 ad.investor.bg
      127.0.0.1 www.invinc.com #[Troj/Dloader-J]
      127.0.0.1 www.ip530.com #[Win32/TrojanDownloader.Ani.Gen]
      127.0.0.1 www.ipcounter.de
      127.0.0.1 www.ipstats.de
      127.0.0.1 ad2.ip.ro
      127.0.0.1 ads.ipowerweb.com
      127.0.0.1 content.ipro.com #[WebBug]
      127.0.0.1 adserver.iprom.net
      127.0.0.1 central.iprom.net
      127.0.0.1 www.ipstat.com
      127.0.0.1 a.isohunt.com
      127.0.0.1 adserver1.isohunt.com
      127.0.0.1 ads.isoftmarketing.com
      127.0.0.1 banman.isoftmarketing.com
      127.0.0.1 isvhs.com
      127.0.0.1 ads1.itadnetwork.co.uk
      127.0.0.1 itcompany.com #[SunBelt.Family Cyber Alert]
      127.0.0.1 www.itcompany.com #[Symantec.Spyware.CyberAlert]
      127.0.0.1 ilead.itrack.it
      127.0.0.1 adserver.itsfogo.com
      127.0.0.1 partnerfeed.itsfogo.com
      127.0.0.1 www1.itsun.com
      127.0.0.1 www8.itsun.com
      127.0.0.1 ads.itv.com #[adbureau.net]
      127.0.0.1 barafranca.iwarp.com #[Win32/Spy.ProAgent]
      127.0.0.1 www.iwebmusic.com
      127.0.0.1 ad.jamba.de
      127.0.0.1 ad.jamba.net
      127.0.0.1 ad.jamster.com
      127.0.0.1 www.jcount.com
      127.0.0.1 www.jellycounter.com
      127.0.0.1 www.jethit.com
      127.0.0.1 t1.jfglass.net #[Trojan.Booha]
      127.0.0.1 dl.jiangmin.com #[Adware-BDSearch.dr]
      127.0.0.1 www.jm-my.com #[BackDoor-CXI]
      127.0.0.1 ad.joetec.net
      127.0.0.1 jointmediagroup.com #[Trojan-Spy.Win32.Delf.uc]
      127.0.0.1 jpedownload.joltid.com
      127.0.0.1 ads.joemonster.org
      127.0.0.1 ad.jopenqb.com #[Google.Warning]
      127.0.0.1 banners.joost.com
      127.0.0.1 ads.jossip.com
      127.0.0.1 pastorale.jpn.org #[Win32/Spy.Banker.AHY]
      127.0.0.1 www.joltid.com #[Adware.P2PNetworking][SPYW_PPNETWORK.B]
      127.0.0.1 jslib2.info
      127.0.0.1 www.jstracker.com
      127.0.0.1 ads.jt.org
      127.0.0.1 www.k265.com #[Adware.Borlan]
      127.0.0.1 stat.katalysatormedia.no
      127.0.0.1 kazantip-top.com
      127.0.0.1 www.kazantip-top.com #[HTML/Exploit.VMLFill]
      127.0.0.1 ads.webfever.kadserver.com
      127.0.0.1 ads.deblok.net.kadserver.com
      127.0.0.1 ads.zebest-3000.net.kadserver.com
      127.0.0.1 countus.get.kadserver.com
      127.0.0.1 geo113prod.kadserver.com
      127.0.0.1 get.kadserver.com
      127.0.0.1 scripts.kataweb.it
      127.0.0.1 kazaalite.pl
      127.0.0.1 www.kazaalite.pl #[MHTMLRedir.Exploit]
      127.0.0.1 gavzad.keenspot.com
      127.0.0.1 ad.kewlbox.com
      127.0.0.1 a.keyrun.com #[Adware-TargetAD]
      127.0.0.1 u.keyrun.com
      127.0.0.1 union.keyrun.com
      127.0.0.1 ww.keyrun.com
      127.0.0.1 www1.keyrun.com
      127.0.0.1 www.keyrun.com
      127.0.0.1 banner.kiev.ua
      127.0.0.1 adserve.kikizo.com
      127.0.0.1 union.db.kingsoft.com #[PopupAds]
      127.0.0.1 www.kiss-search.net
      127.0.0.1 kjsc.org #[Win32/Spy.Banker.ANV]
      127.0.0.1 ads.kleinman.com #[Adcycle]
      127.0.0.1 kt3.kliptracker.com
      127.0.0.1 kt4.kliptracker.com
      127.0.0.1 www.kliptracker.com
      127.0.0.1 ads.klixxx.com
      127.0.0.1 www.km-nyc.com #[W32.Lecna.A]
      127.0.0.1 click.kmindex.ru
      127.0.0.1 counter.kmindex.ru
      127.0.0.1 counting.kmindex.ru
      127.0.0.1 www.kmindex.ru
      127.0.0.1 images.kolmic.com
      127.0.0.1 pics.kolmic.com #[Parking Service]
      127.0.0.1 ads.komli.com
      127.0.0.1 www.kompass-intl.com #[Win32/Adware.Toolbar.PowerSearch]
      127.0.0.1 de.komtrack.com
      127.0.0.1 koolbar.net #[Adware Bundler][ADW_KOOLBAR.A]
      127.0.0.1 www.koolbar.net #[eTrust.AutoSearch]
      127.0.0.1 sitestat.kpn-is.nl
      127.0.0.1 kuaiso.com #[AdWare.Win32.Kuaiso.a][server down?]
      127.0.0.1 toolsbar.kuaiso.com #[Adware.Kuaiso]
      127.0.0.1 www.kuaiso.com
      127.0.0.1 kukkakreck.com #[Rogue/Suspect Affiliate]
      127.0.0.1 kustusch.com #[Javascript.Exploit]
      127.0.0.1 adserver.kyoceramita-europe.com
      127.0.0.1 www.kz163.net #[Win32/Virut]
      127.0.0.1 laconicsoftware.org #[Malicious.Links.Codec]
      127.0.0.1 alwaysforfriend.land.ru #[Trojan-Downloader.Win32.Banload.bdp]
      127.0.0.1 www.animacoes.land.ru #[Downloader.Swif.B]
      127.0.0.1 a.lakequincy.com
      127.0.0.1 www.latinbusca.com #[Adware-CommanderNET]
      127.0.0.1 ads.lawnsite.com
      127.0.0.1 layer-ads.de
      127.0.0.1 www.layer-ads.de
      127.0.0.1 fun.lbn.ru
      127.0.0.1 business.lbn.ru
      127.0.0.1 www.business.lbn.ru
      127.0.0.1 www.fun.lbn.ru
      127.0.0.1 234.media.lbn.ru
      127.0.0.1 banner.lbs.km.ru
      127.0.0.1 iframe.leadacceptor.com
      127.0.0.1 leakedcelebvideos.com #[Win32/TrojanDownloader.Agent.BCZ]
      127.0.0.1 www.leakedcelebvideos.com
      127.0.0.1 pubs.lemonde.fr
      127.0.0.1 www.leopardsearch.com
      127.0.0.1 www.letzebuerg.biz
      127.0.0.1 ts1.lexmark.com
      127.0.0.1 leythosthestalker.com
      127.0.0.1 www.leythosthestalker.com
      127.0.0.1 adserver.libero.it
      127.0.0.1 adv-banner.libero.it
      127.0.0.1 phpads.lime.com
      127.0.0.1 link.ru
      127.0.0.1 link.link.ru
      127.0.0.1 ads.linki.nl
      127.0.0.1 www.linkads.de
      127.0.0.1 linkbuddies.com
      127.0.0.1 banners.linkbuddies.com
      127.0.0.1 www.linkbuddies.com
      127.0.0.1 www.linkcounter.com
      127.0.0.1 linksexchange.net
      127.0.0.1 linkexchange.ru
      127.0.0.1 web.linkexchange.ru
      127.0.0.1 www.linkexchange.ru
      127.0.0.1 link4link.com
      127.0.0.1 plus.link4link.com
      127.0.0.1 www.links4trade.com
      127.0.0.1 escati.linkopp.net
      127.0.0.1 www.linkopp.net
      127.0.0.1 click.linkstattrack.com #[SiteAdvisor.linkstattrack.com]
      127.0.0.1 linktarget.com
      127.0.0.1 banner.linktech.cn
      127.0.0.1 www.linkworth.com
      127.0.0.1 ads.linuxjournal.com
      127.0.0.1 www.liveads.org
      127.0.0.1 livecounter.net
      127.0.0.1 www.livecounter.net
      127.0.0.1 image.adv.livedoor.com
      127.0.0.1 js.livehelper.com
      127.0.0.1 newbrowse.livehelper.com
      127.0.0.1 ads.livescore.com
      127.0.0.1 traffic.liveuniversenetwork.com
      127.0.0.1 trafficcdn.liveuniversenetwork.com
      127.0.0.1 traffic.livevideo.com
      127.0.0.1 broadent.vo.llnwd.net
      127.0.0.1 aa.llsging.com #[Javascript.Exploit]
      127.0.0.1 lw.lnkworld.com
      127.0.0.1 omnituretrack.local.com
      127.0.0.1 www.lojastal.com.br #[Win32/Spy.Banker.ANV]
      127.0.0.1 lol.to #[HTML/Exploit.Mht]
      127.0.0.1 err.lolipop.jp
      127.0.0.1 www.lookde5.com #[W32.Looked]
      127.0.0.1 lookoutsoft.net #[SiteAdvisor.lookoutsoft.net]
      127.0.0.1 screensavers.lookoutsoft.net
      127.0.0.1 a.loomia.com #[Tracking.Cookie]
      127.0.0.1 www.lookoutsoft.net #[AdWare.Win32.WinAD.b]
      127.0.0.1 www.lords-of-havoc.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
      127.0.0.1 ermei.loveyoushipin.com #[Google.Warning]
      127.0.0.1 niang.loveyoushipin.com
      127.0.0.1 hexusads.fluent.ltd.uk
      127.0.0.1 lunahodiki.com #[Javascript.Exploit]
      127.0.0.1 www.luxemil.com #[Google.Warning]
      127.0.0.1 ads-apsa.lvz-online.de
      127.0.0.1 www.lynxtrack.com
      127.0.0.1 m2k.ru
      127.0.0.1 ad.m5prod.net
      127.0.0.1 ad.m-adx.com
      127.0.0.1 media.m-adx.com
      127.0.0.1 www.macrcmedia.com #[Exploit.ANI]
      127.0.0.1 www.macrcmedia.net
      127.0.0.1 ads.madisonavenue.com
      127.0.0.1 resource.madisonavenue.com
      127.0.0.1 textads.madisonavenue.com
      127.0.0.1 banner.magicboxcasino.com #[AdWare.Win32.Casino.w]
      127.0.0.1 msn-sexoweb.mail15.com #[Win32/Spy.Banker.ANV]
      127.0.0.1 humortadela.mail15.com #[Win32/Spy.Banker.ANV]
      127.0.0.1 www.novogerador.mail15.com
      127.0.0.1 www.uolcard.mail15.com #[Trojan-Spy.Win32.Banker.ark]
      127.0.0.1 voegol.mail15.com #[Win32/Spy.Banker.ANV]
      127.0.0.1 humortadela0.mail333.com #[Win32/Spy.Banker.AHY]
      127.0.0.1 destino-gol.mail333.com #[Win32/Spy.Banker.BCK]
      127.0.0.1 www.messengerbeta.mail333.com #[Win32/Spy.Banker.BCK]
      127.0.0.1 mair.net #[Realtracker]
      127.0.0.1 ads.marketing-internet.com
      127.0.0.1 marketing-know-how.com #[TR/Dldr.iBill.V]
      127.0.0.1 aw.masterstats.com
      127.0.0.1 erotic.masterstats.com
      127.0.0.1 image.masterstats.com
      127.0.0.1 link.masterstats.com
      127.0.0.1 vw.masterstats.com #[Ewido.TrackingCookie.Masterstats]
      127.0.0.1 mbe.ru #[adrevolver]
      127.0.0.1 ads.affiliates.match.com

      1. RE BONJOUR

        VOILA LE RAPPORT QUE TU MA DEMANDE

        SmitFraudFix v2.378

        Rapport fait à 3:59:29,56, 26/11/2008
        Executé à partir de C:\Documents and Settings\Administrateur.48CB47796B37437\Mes documents\Downloads\Programs\SmitfraudFix
        OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
        Le type du système de fichiers est NTFS
        Fix executé en mode sans echec

        »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

        SrchSTS.exe by S!Ri
        Search SharedTaskScheduler's .dll

        »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

        »»»»»»»»»»»»»»»»»»»»»»»» hosts

        127.0.0.1 localhost

        »»»»»»»»»»»»»»»»»»»»»»»» VACFix

        VACFix
        Credits: Malware Analysis & Diagnostic
        Code: S!Ri

        »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

        S!Ri's WS2Fix: LSP not Found.

        »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

        GenericRenosFix by S!Ri

        »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

        C:\autorun.inf supprimé

        »»»»»»»»»»»»»»»»»»»»»»»» IEDFix

        IEDFix
        Credits: Malware Analysis & Diagnostic
        Code: S!Ri

        »»»»»»»»»»»»»»»»»»»»»»»» 404Fix

        404Fix
        Credits: Malware Analysis & Diagnostic
        Code: S!Ri

        »»»»»»»»»»»»»»»»»»»»»»»» RK

        »»»»»»»»»»»»»»»»»»»»»»»» DNS

        HKLM\SYSTEM\CCS\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
        HKLM\SYSTEM\CCS\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
        HKLM\SYSTEM\CS1\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
        HKLM\SYSTEM\CS2\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
        HKLM\SYSTEM\CS2\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
        HKLM\SYSTEM\CS3\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
        HKLM\SYSTEM\CS3\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
        HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
        HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
        HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
        HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0

        »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

        »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
        "System"=""

        »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

        Nettoyage terminé.

        »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

        SrchSTS.exe by S!Ri
        Search SharedTaskScheduler's .dll

        »»»»»»»»»»»»»»»»»»»»»»»» Fin

        JE TE REMERCIE.
        1. Contributeur sécurité
          Salut !!

          je ne t ai pas demandé de faire MsnFix et toolbarSD !!

          Et je vois aussi que tu n as pas fais RHosts avant de faire l option 2 de SmitfraudFix :s

          ▶ Télécharge hijackthis

          ▶ Un tutoriel est à ta disposition sur ce site pour pouvoir l'utiliser.

          ▶ Poste le rapport obtenu dans le bloc note dans ta prochaine réponse.

          Comment copier/coller le rapport :

          ▶ Quand tu as le rapport à l écran, tu fais ctrl A pour "sélectionner tout" puis ctrl C pour "copier".

          ▶ ensuite tu viens sur le forum pour me répondre et tu fais ctrl V pour "coller" le rapport.
          1. Bonsoir,
            Pourquoi faire restaurer le fichier host?

            L'internaute avait une très bonne protection vis à vis des sites malsains...
            ++
            1. Contributeur sécurité
              Salut Cyril !!

              Parce que je vois que dans le rapport de SmitfraudFix, les fichiers hosts sont corrompus :

              Fichier hosts corrompu !

              127.0.0.1 hk.digitaltrends.com
              127.0.0.1 microsoft.com.org
              127.0.0.1 www.www.microsoft.com.org
              127.0.0.1 legal-at-spybot.info
              127.0.0.1 www.legal-at-spybot.info

              Alors plutot que d avoir un rapport de 2km, il vaut mieux restaurer les fichiers hosts avant, non ??
              1. Re,
                Il n'est pas corrompu.

                Du moment que le fichier Host n'est pas conforme à celui originel de Microsoft, Smitfraudfix le détecte comme corrompu.
                Seulement,

                127.0.0.1 legal-at-spybot.info
                127.0.0.1 www.legal-at-spybot.info 

                Spybot.

                127.0.0.1 hk.digitaltrends.com
                127.0.0.1 microsoft.com.org
                127.0.0.1 www.www.microsoft.com.org 

                Autres entrées utiles.

                On voit clairement que les URLs des sites malsains sont bloquées. ( avec un commentaire d'ailleurs )

                127.0.0.1 leakedcelebvideos.com #[Win32/TrojanDownloader.Agent.BCZ] 


                Il ne fallait donc pas restaurer le fichier host ;)

                +