Rapport genproc

aldofadi1968 Messages postés 3 Statut Membre -  
 Utilisateur anonyme -
Bonjour,

SmitFraudFix v2.378

Rapport fait à 2:22:09,59, 26/11/2008
Executé à partir de C:\Documents and Settings\Administrateur.48CB47796B37437\Application Data\IDM\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\ZSSnp211.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\McAfee\Common Framework\udaterui.exe
D:\iTunesHelper.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\Domino.exe
C:\WINDOWS\VMSnap23.exe
C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\McAfee\VirusScan Enterprise\EngineServer.exe
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
C:\WINDOWS\system32\mfevtps.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
C:\Program Files\McAfee\Common Framework\McTray.exe
C:\WINDOWS\system32\CNAB4RPK.EXE
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\WScript.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\cmd.exe
C:\Documents and Settings\Administrateur.48CB47796B37437\Application Data\IDM\SmitfraudFix\Policies.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts

Fichier hosts corrompu !

127.0.0.1 hk.digitaltrends.com
127.0.0.1 microsoft.com.org
127.0.0.1 www.www.microsoft.com.org
127.0.0.1 legal-at-spybot.info
127.0.0.1 www.legal-at-spybot.info

»»»»»»»»»»»»»»»»»»»»»»»» C:\

C:\autorun.inf PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrateur.48CB47796B37437

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ADMINI~1.48C\LOCALS~1\Temp

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrateur.48CB47796B37437\Application Data

»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ADMINI~1.48C\Favoris

»»»»»»»»»»»»»»»»»»»»»»»» Bureau

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"

»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="userinit.exe,"
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» RK

»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Realtek RTL8169/8110 Family Gigabit Ethernet NIC - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CCS\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS2\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS2\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin

merci mes amis pour votre aide.

Configuration: Windows XP
Internet Explorer 7.0

6 réponses

  1. geoffrey5 Messages postés 14008 Statut Contributeur sécurité 10
     
    Salut !!

    Fais ce qui suit dans l ordre stp, c est important :

    ▶ Télécharge RHosts (de SiRi)

    ▶ Double clique dessus pour l'exécuter

    ▶ et cliques sur " Restore original Hosts "

    ps : c est normal que rien ne se passe

    ▶ ensuire redémarre le pc

    ensuite :

    Option 2 - Nettoyage :

    redémarre le PC en mode sans échec

    ▶ Double cliquer sur smitfraudfix

    ▶ Sélectionner 2 pour supprimer les fichiers responsables de l'infection.

    ▶ A la question Voulez-vous nettoyer le registre ? répondre O (oui) afin de débloquer le fond d'écran et supprimer les clés de démarrage automatique de l'infection.

    Le fix déterminera si le fichier wininet.dll est infecté. A la question Corriger le fichier infecté ? répondre O (oui) pour remplacer le fichier corrompu.

    ▶ Enregistre le rapport sur ton bureau

    ▶ Redémarrer en mode normal et poster le rapport.
    0
  2. aldofadi1968 Messages postés 3 Statut Membre
     
    j'ai fait tout les étapes de la premiere procédure et je vais t'envoyer la 2eme

    quand je suis arriver a la 3eme étape :Etape 3/

    Double-clique sur le fichier "SmitfraudFix.exe" et choisis l'option 2, réponds oui à tout et laisse-le procéder. Sauvegarde le rapport sur ton bureau. le CLEANMGR MANQUE.

    AU 4EME ETAPE:

    Etape 4/

    Lance le fichier MSNFix.bat qui se trouve dans le dossier MSNfix, sur le bureau.
    - Exécute l'option R.
    - Si l'infection est détectée, exécute l'option N.
    - Sauvegarde ce rapport sur ton bureau.

    je pouvez rien faire :fichier introuvable :MSNFix.bat .

    voila donc les rapport:

    -----------\\ ToolBar S&D 1.2.5 XP/Vista

    Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.00GHz )
    BIOS : Award Modular BIOS v6.00PG
    USER : Administrateur ( Administrator )
    BOOT : Fail-safe boot
    Antivirus : McAfee VirusScan Enterprise 8.7.0.570 (Activated)
    A:\ (USB)
    C:\ (Local Disk) - NTFS - Total:37 Go (Free:1 Go)
    D:\ (Local Disk) - NTFS - Total:195 Go (Free:54 Go)
    E:\ (CD or DVD)
    F:\ (CD or DVD)

    "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
    Option : [2] ( 26/11/2008| 2:47 )
    C:\DOCUME~1\ADMINI~1.48C\LOCALS~1\Temp\mc24.tmp

    -----------\\ SUPPRESSION

    Supprime! - C:\DOCUME~1\ADMINI~1.48C\LOCALS~1\Temp\mc24.tmp

    -----------\\ Recherche de Fichiers / Dossiers ...

    -----------\\ Extensions

    (Admin) - {0200c2a9-70da-4f6d-b527-f5f7d7877228} => fireuploader

    (Administrateur) - {EEE6C361-6118-11DC-9C72-001320C79847} => sweetim-toolbar

    (Administrateur.48CB47796B37437) - {EEE6C361-6118-11DC-9C72-001320C79847} => sweetim-toolbar

    -----------\\ [..\Internet Explorer\Main]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
    "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
    "SearchMigratedDefaultURL"="https://search.yahoo.com/web{searchTerms}&ei=utf-8&fr=b1ie7"
    "Search Bar"="https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F"
    "Start Page"="https://www.google.fr/?gws_rd=ssl"
    "Url"="http://www.microsoft.com/athome/community/rss.xml"
    "Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
    "Url"="http://www.microsoft.com/atwork/community/rss.xml"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
    "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
    "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
    "Start Page"="https://www.msn.com/fr-fr/"

    --------------------\\ Recherche d'autres infections

    --------------------\\ Cracks & Keygens ..

    C:\DOCUME~1\ADMINI~1.48C\Recent\WMP11 FR CRACK.lnk

    1 - "C:\ToolBar SD\TB_1.txt" - 26/11/2008| 2:48 - Option : [2]

    -----------\\ Fin du rapport a 2:48:57,56

    SmitFraudFix v2.378

    Rapport fait à 2:51:16,92, 26/11/2008
    Executé à partir de C:\Documents and Settings\Administrateur.48CB47796B37437\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode sans echec

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    127.0.0.1 localhost

    127.0.0.1 ad.a8.net
    127.0.0.1 asy.a8ww.net
    127.0.0.1 www.abx4.com #[Adware.ABXToolbar]
    127.0.0.1 acezip.net #[SiteAdvisor.acezip.net]
    127.0.0.1 www.acezip.net #[Win32/Adware.180Solutions]
    127.0.0.1 phpadsnew.abac.com
    127.0.0.1 a.abnad.net
    127.0.0.1 b.abnad.net
    127.0.0.1 c.abnad.net #[eTrust.Tracking.Cookie]
    127.0.0.1 d.abnad.net
    127.0.0.1 e.abnad.net
    127.0.0.1 t.abnad.net
    127.0.0.1 banners.absolpublisher.com
    127.0.0.1 tracking.absolstats.com
    127.0.0.1 adv.abv.bg
    127.0.0.1 bimg.abv.bg
    127.0.0.1 www2.a-counter.kiev.ua
    127.0.0.1 accuserveadsystem.com
    127.0.0.1 www.accuserveadsystem.com
    127.0.0.1 gtb5.acecounter.com
    127.0.0.1 gtcc1.acecounter.com
    127.0.0.1 gtp1.acecounter.com #[eTrust.Tracking.Cookie]
    127.0.0.1 acestats.com
    127.0.0.1 www.acestats.com
    127.0.0.1 achmedia.com
    127.0.0.1 ads.active.com
    127.0.0.1 am1.activemeter.com
    127.0.0.1 www.activemeter.com #[eTrust.Tracking.Cookie]
    127.0.0.1 ads.activepower.net
    127.0.0.1 stat.active24stats.nl #[eTrust.Tracking.Cookie]
    127.0.0.1 web.acumenpi.com #[AdvertPro]
    127.0.0.1 ad.ad24.ru
    127.0.0.1 at.ad2click.nl
    127.0.0.1 cms.ad2click.nl
    127.0.0.1 banner.ad.nu
    127.0.0.1 ad-up.com
    127.0.0.1 www.ad-up.com
    127.0.0.1 www.adagencypro.com
    127.0.0.1 ads.adap.tv
    127.0.0.1 vad.adbasket.net
    127.0.0.1 ad.pop1.adbn.ru
    127.0.0.1 adserv.adbonus.com
    127.0.0.1 www.adbonus.com
    127.0.0.1 james.adbutler.de #[Tenebril.TrackingCookie]
    127.0.0.1 www.adbutler.de #[SunBelt.AdButler.de]
    127.0.0.1 adc2.adcentriconline.com
    127.0.0.1 adcp.adcentriconline.com
    127.0.0.1 bell.adcentriconline.com #[Wildcard DNS]
    127.0.0.1 content.adcentriconline.com
    127.0.0.1 media.adcentriconline.com
    127.0.0.1 publicis.adcentriconline.com
    127.0.0.1 ad-clix.com
    127.0.0.1 www.ad-clix.com
    127.0.0.1 adcomplete.com
    127.0.0.1 www.adcomplete.com
    127.0.0.1 axa.addcontrol.net #[Ewido.TrackingCookie.Addcontrol]
    127.0.0.1 ads.addynamix.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 e13.media.addynamix.com
    127.0.0.1 www.adeos.eu
    127.0.0.1 adcode.adengage.com
    127.0.0.1 stats2.adengage.com
    127.0.0.1 www.adengage.com
    127.0.0.1 pt.server1.adexit.com
    127.0.0.1 www.adexit.com
    127.0.0.1 www.ad4ever.com
    127.0.0.1 track.adform.net
    127.0.0.1 adfun.ru
    127.0.0.1 ad1.adfun.ru
    127.0.0.1 ad2.adfun.ru
    127.0.0.1 ad3.adfun.ru
    127.0.0.1 ad4.adfun.ru
    127.0.0.1 harvest.adgardener.com
    127.0.0.1 harvest6.adgardener.com
    127.0.0.1 harvest7.adgardener.com
    127.0.0.1 harvest8.adgardener.com
    127.0.0.1 harvest11.adgardener.com
    127.0.0.1 harvest12.adgardener.com
    127.0.0.1 harvest13.adgardener.com
    127.0.0.1 harvest163.adgardener.com
    127.0.0.1 harvest176.adgardener.com
    127.0.0.1 seeds.adgardener.com
    127.0.0.1 www.adgroups.net
    127.0.0.1 www.ad-groups.com #[Ban Man Pro Banner Code]
    127.0.0.1 host1.adhese.be #[Adhese Datamine Tag]
    127.0.0.1 host2.adhese.be
    127.0.0.1 host3.adhese.be #[ad.be.doubleclick.net]
    127.0.0.1 host4.adhese.be
    127.0.0.1 ads.adhsm.adhese.com
    127.0.0.1 pool.adhsm.adhese.com
    127.0.0.1 ssl3.adhost.com
    127.0.0.1 www2.adhost.com
    127.0.0.1 zone10.adicate.com
    127.0.0.1 www.adimpact.com
    127.0.0.1 adfarm1.adition.com
    127.0.0.1 imagesrv.adition.com
    127.0.0.1 ad.adition.net
    127.0.0.1 hosting.adjug.com
    127.0.0.1 tracking.adjug.com
    127.0.0.1 adsearch.adkontekst.pl
    127.0.0.1 community.adlandpro.com #[Ad-Aware Tracking.Cookie]
    127.0.0.1 pk.adlandpro.com
    127.0.0.1 te.adlandpro.com #[eTrust.Tracking.Cookie]
    127.0.0.1 trafficex.adlandpro.com
    127.0.0.1 www.adlandpro.com #[Ad-Aware Tracking.Cookie]
    127.0.0.1 engine.adland.ru #[eTrust.Tracking.Cookie]
    127.0.0.1 publicidad.adlead.com
    127.0.0.1 www.adlimg03.com
    127.0.0.1 classic.adlink.de
    127.0.0.1 regio.adlink.de
    127.0.0.1 west.adlink.de
    127.0.0.1 rc.de.adlink.net #[eTrust.Tracking.Cookie]
    127.0.0.1 tr.de.adlink.net
    127.0.0.1 ads3.adman.gr #[eTrust.Tracking.Cookie]
    127.0.0.1 r2d2.adman.gr
    127.0.0.1 www.adminder.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 apps.admission.net #[Spotlight Ads]
    127.0.0.1 appcache.admission.net
    127.0.0.1 view.admission.net
    127.0.0.1 rms.admeta.com #[admeta.basefarm.net][eTrust.Tracking.Cookie]
    127.0.0.1 ads.admodus.com #[eTrust.Tracking.Cookie]
    127.0.0.1 ad.adnet.biz #[eTrust.Tracking.Cookie]
    127.0.0.1 engine.adnet.ru
    127.0.0.1 ad2.adnetinteractive.com
    127.0.0.1 ad.adnetwork.com.br
    127.0.0.1 agoraua.adocean.pl
    127.0.0.1 s1.ad.adocean.pl #[Ewido.Tracking.Cookie]
    127.0.0.1 s1.advicepl.adocean.pl
    127.0.0.1 s1.centrumcz.adocean.pl #[eTrust.Tracking.Cookie]
    127.0.0.1 s1.cz.adocean.pl
    127.0.0.1 s1.czgde.adocean.pl
    127.0.0.1 s1.myao.adocean.pl
    127.0.0.1 s1.pracuj.adocean.pl
    127.0.0.1 s1.skgde.adocean.pl
    127.0.0.1 s2.ad.adocean.pl
    127.0.0.1 ad01.adonspot.com
    127.0.0.1 ad02.adonspot.com
    127.0.0.1 isohunt.adonspot.com #[server down?]
    127.0.0.1 ab.adpro.com.ua
    127.0.0.1 ac.adpro.com.ua #[server down?]
    127.0.0.1 system.adquick.nl
    127.0.0.1 www.adquest.nl
    127.0.0.1 adx.adrenaline.cz
    127.0.0.1 c.adroll.com
    127.0.0.1 www.adsforindians.com
    127.0.0.1 ad.adrefer.net
    127.0.0.1 www.adreporting.com #[SunBelt.Adreporting.com]
    127.0.0.1 cntr.adrime.com
    127.0.0.1 images.adrime.com
    127.0.0.1 ad.adriver.ru
    127.0.0.1 www.adrotate.net
    127.0.0.1 serv.ad-rotator.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ad.ads8.com
    127.0.0.1 vip.ads8.com
    127.0.0.1 www.ads183.com
    127.0.0.1 antevenio.flux.ads-click.com
    127.0.0.1 acnetwork.flux.acsyndication.com
    127.0.0.1 img.ads-click.com
    127.0.0.1 ad.ads.dk
    127.0.0.1 tdkads.ads.dk
    127.0.0.1 adservercentral.com
    127.0.0.1 banners.adservercentral.com
    127.0.0.1 www.adservercentral.com #[SunBelt.adservercentral.com]
    127.0.0.1 www.adservtech.com
    127.0.0.1 adservicedomain.info
    127.0.0.1 adsfac.net #[Facilitate Tracking Code]
    127.0.0.1 images.adshuffle.com
    127.0.0.1 this.content.served.by.adshuffle.com
    127.0.0.1 adsaway.com #[HTML/TrojanDownloader.Agent.BP trojan]
    127.0.0.1 www.adsaway.com #[Google.Warning]
    127.0.0.1 adsfac.eu
    127.0.0.1 www.adshot.de
    127.0.0.1 network.adsmarket.com
    127.0.0.1 allchix.adsmax.com
    127.0.0.1 www2.adsmax.com
    127.0.0.1 www.adsodainteractive.com
    127.0.0.1 www.adspace.be
    127.0.0.1 g.adspeed.net
    127.0.0.1 ads.adsponse.de
    127.0.0.1 banner.adsrevenue.net
    127.0.0.1 creative.adsrevenue.net
    127.0.0.1 popunder.adsrevenue.net
    127.0.0.1 adserve.adster.com
    127.0.0.1 images.adster.com
    127.0.0.1 adsvert.com
    127.0.0.1 o.adtargeter.com
    127.0.0.1 ads.adtiger.de
    127.0.0.1 www.adtiger.de
    127.0.0.1 ads.adgoto.com
    127.0.0.1 adsrv.admindshare.com
    127.0.0.1 adtology.com
    127.0.0.1 adtology2.com
    127.0.0.1 adtology3.com
    127.0.0.1 www.adtology3.com
    127.0.0.1 ad.adtoma.com
    127.0.0.1 downldcl.adtoolsinc.com
    127.0.0.1 www.adtoolsinc.com
    127.0.0.1 www.adtrade.net
    127.0.0.1 www.adtrader.com
    127.0.0.1 survey.advantageresearch.com
    127.0.0.1 ad.adver.com.tw
    127.0.0.1 www.adventideas.com #[Adcycle]
    127.0.0.1 www.adversal.com
    127.0.0.1 ads.advertise.net
    127.0.0.1 www.advertisingspaces.net
    127.0.0.1 www.advertisingstats.com
    127.0.0.1 advertisingpurchase.com
    127.0.0.1 ad.adverticum.net
    127.0.0.1 img.adverticum.net
    127.0.0.1 imgs.adverticum.net
    127.0.0.1 www.advertising365.com
    127.0.0.1 ads.advertisingforyou.info
    127.0.0.1 ads.advertisingz.com
    127.0.0.1 ad.advertstream.com
    127.0.0.1 adviva.com
    127.0.0.1 www.adviva.com
    127.0.0.1 ads.adviva.net #[Panda.Spyware:Cookie/Adviva]
    127.0.0.1 de.ads.adviva.net
    127.0.0.1 adstats.adviva.net
    127.0.0.1 www.traf.advscripts.com
    127.0.0.1 ad.adworx.at
    127.0.0.1 www.ad-z.de
    127.0.0.1 banners.adzones.com
    127.0.0.1 clicks.adzones.com
    127.0.0.1 feeds.adzones.com
    127.0.0.1 www.adzones.com
    127.0.0.1 w.aeaer.com #[Google.Warning]
    127.0.0.1 aeoworld.de
    127.0.0.1 www.aeoworld.de #[W32/WMF-exploit]
    127.0.0.1 banners.affilimatch.de
    127.0.0.1 tracker.affistats.com #[msvrl.dll]
    127.0.0.1 adz.afterdawn.net
    127.0.0.1 ad.afy11.net
    127.0.0.1 stats.agent.co.il
    127.0.0.1 rmbannerserver.agestado.com.br
    127.0.0.1 stats.agentinteractive.com
    127.0.0.1 api.aggregateknowledge.com
    127.0.0.1 aams1.aim4media.com
    127.0.0.1 artwork.aim4media.com
    127.0.0.1 www.aim4media.com #[SunBelt.Adserver.aim4media]
    127.0.0.1 ads.airamerica.com
    127.0.0.1 adserver.akqa.net #[Ad-Aware Tracking.Cookie]
    127.0.0.1 download.alexa.com #[Trackware.Alexa][SPYW_ALEXA.A]
    127.0.0.1 download.china.alibaba.com #[Adware.AlibabaTB][AdWare.ToolBar.Alibabar.b]
    127.0.0.1 ad.alldanzradio.com
    127.0.0.1 tracking.allposters.com
    127.0.0.1 ad.allstar.cz
    127.0.0.1 bokee.allyes.com
    127.0.0.1 demoafp.allyes.com
    127.0.0.1 eastmoney.allyes.com
    127.0.0.1 smarttrade.allyes.com
    127.0.0.1 sroomafp.allyes.com
    127.0.0.1 taobaoafp.allyes.com
    127.0.0.1 tom.allyes.com
    127.0.0.1 uuseeafp.allyes.com
    127.0.0.1 www.almondnetworks.com
    127.0.0.1 www.almoso3h.com #[Trojan-PSW.Win32.VB.cl]
    127.0.0.1 www.alsaloumainvestment.com #[Win32/SpamTool.Gadina]
    127.0.0.1 ad.altervista.org
    127.0.0.1 pqwaker.altervista.org
    127.0.0.1 bantam.ai.net
    127.0.0.1 fiona.ai.net
    127.0.0.1 adimg.alice.it
    127.0.0.1 adv.alice.it
    127.0.0.1 altmedia101.com
    127.0.0.1 adserver.alt.com
    127.0.0.1 count1.altastat.com
    127.0.0.1 feed1.altastat.com
    127.0.0.1 www.alwayson-network.com
    127.0.0.1 rcm.amazon.com
    127.0.0.1 rcm-images.amazon.com
    127.0.0.1 ads.amdmb.com
    127.0.0.1 whos.amung.us #[WebBug]
    127.0.0.1 advert.ananzi.co.za
    127.0.0.1 advert2.ananzi.co.za
    127.0.0.1 adserver.ancestry.com #[RealMedia]
    127.0.0.1 adserver04.ancestry.com #[RealMedia]
    127.0.0.1 www.andyhoppe.com
    127.0.0.1 ads.angryape.com
    127.0.0.1 banners.ads.angryape.com
    127.0.0.1 www.antarasystems.com
    127.0.0.1 www.anticlown.com
    127.0.0.1 ads.antionline.com
    127.0.0.1 junior.apk.net
    127.0.0.1 www.arcadebannerexchange.com
    127.0.0.1 ard114.info #[Spamdexing]
    127.0.0.1 nu.arnostat.nl
    127.0.0.1 demiurge.arstechnica.com
    127.0.0.1 banner.arttoday.com
    127.0.0.1 ads.asia1.com.sg
    127.0.0.1 asimpleinternet.com #[Tenebril.SpecialOffers]
    127.0.0.1 www.asimpleinternet.com
    127.0.0.1 ads.ask.com #[sv-click.looksmart.com]
    127.0.0.1 contextual.syndication.ask.com
    127.0.0.1 www.asknew.com #[Spamdexing]
    127.0.0.1 www.askyaya.com #[SunBelt.AskYaya]
    127.0.0.1 ads.aspalliance.com
    127.0.0.1 ads.associatedcontent.com
    127.0.0.1 f.astaz.info #[Malicious.Links.Codec]
    127.0.0.1 www.ati-etailer.de
    127.0.0.1 dist.atlas-ia.com #[ADW_ATLAST.A]
    127.0.0.1 www.atlas-ia.com #[Adware.OfferAgent][Adware-Atlas]
    127.0.0.1 ads.auctionads.com
    127.0.0.1 audiogalaxy.com
    127.0.0.1 www.audiogalaxy.com
    127.0.0.1 banners.audioholics.com
    127.0.0.1 ads.auctioncity.co.nz
    127.0.0.1 ads.autotrader.co.za
    127.0.0.1 adserving.autotrader.com #[SunBelt.AdServing.AutoTrader.com]
    127.0.0.1 www.avsads.com
    127.0.0.1 engine.awaps.net
    127.0.0.1 b3a70b.t.axf8.net
    127.0.0.1 caea4e.t.axf8.net
    127.0.0.1 fdff44.r.axf8.net
    127.0.0.1 www.axill.com
    127.0.0.1 images.axill.in
    127.0.0.1 www.axill.in
    127.0.0.1 axload.to #[Adware.Webprefix][Trojan.Downloader.6588.E]
    127.0.0.1 valid.axload.to
    127.0.0.1 ayiosamvrosios.com #[Javascript.Exploit]
    127.0.0.1 www.azads.net
    127.0.0.1 azsearch.org
    127.0.0.1 adserver1.backbeatmedia.com
    127.0.0.1 adserver1-images.backbeatmedia.com
    127.0.0.1 bullseye.backbeatmedia.com
    127.0.0.1 www.badhyip.org #[Google.Warning]
    127.0.0.1 ads.badische-zeitung.de
    127.0.0.1 bar.baidu.com #[Win32/Adware.Toolbar.Baidu][Sophos.JS/BDHelper-A]
    127.0.0.1 download.baigoo.com #[AdWare.Win32.Baigoo.a][Trackware.Baigoo]
    127.0.0.1 balticaffiliate.com #[Spamdexing]
    127.0.0.1 www.baltictop.com
    127.0.0.1 adsrv.bankrate.com
    127.0.0.1 click.banneradv.com
    127.0.0.1 adserver.banneradministration.com
    127.0.0.1 www.bannerbox.cn
    127.0.0.1 bannerboxes.com #[BannerBoxes Ad Code]
    127.0.0.1 clicks.bannerboxes.com
    127.0.0.1 feeds.bannerboxes.com
    127.0.0.1 www.bannerboxes.com
    127.0.0.1 www.banner-exchange.nl
    127.0.0.1 ad.bannerhost.ru
    127.0.0.1 www.bannerhouse.ru
    127.0.0.1 banners.bannerlandia.com.ar
    127.0.0.1 www.bannermanagement.nl
    127.0.0.1 www.banneroverdrive.com
    127.0.0.1 www.bannerpromotion.it
    127.0.0.1 www.bannerspace.com
    127.0.0.1 www3.bannerspace.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 www5.bannerspace.com
    127.0.0.1 www6.bannerspace.com
    127.0.0.1 www7.bannerspace.com #[Tenebril.Tracking.Cookie]
    127.0.0.1 www.bannerswap.ca
    127.0.0.1 ads.vg.basefarm.net #[RealMedia]
    127.0.0.1 ads.baz.ch
    127.0.0.1 ad2.bbmedia.cz
    127.0.0.1 bbeplayer.com #[WebBug]
    127.0.0.1 stat.bdirect.ru
    127.0.0.1 autocontext.begun.ru
    127.0.0.1 promo.begun.ru
    127.0.0.1 referal.begun.ru
    127.0.0.1 adlogger.bertgeens.be
    127.0.0.1 www.belstat.be
    127.0.0.1 www.belstat.com
    127.0.0.1 www.belstat.nl
    127.0.0.1 oas.benchmark.fr #[RealMedia]
    127.0.0.1 bestinshowjewelry.com #[HTML/TrojanDownloader.Agent.BP]
    127.0.0.1 www.bestinshowjewelry.com
    127.0.0.1 webtrends.besite.be
    127.0.0.1 www.bestofferdirect.com
    127.0.0.1 www.besttoolbars.net #[ADW_TBARWIN32.A]
    127.0.0.1 ads.betanews.com
    127.0.0.1 banner.betfred.com
    127.0.0.1 www.bettertextads.com
    127.0.0.1 big4top.com
    127.0.0.1 www.big4top.com #[IFrame.Exploit]
    127.0.0.1 stats.big-boards.com
    127.0.0.1 ad0.bigmir.net
    127.0.0.1 ad1.bigmir.net
    127.0.0.1 ad4.bigmir.net
    127.0.0.1 ad5.bigmir.net
    127.0.0.1 ad6.bigmir.net
    127.0.0.1 ad7.bigmir.net
    127.0.0.1 adi.bigmir.net
    127.0.0.1 c.bigmir.net #[SecuritySpace.WebBug]
    127.0.0.1 i.bigmir.net
    127.0.0.1 bigtracker.com
    127.0.0.1 bighits.net
    127.0.0.1 bigticker.bighits.net
    127.0.0.1 bounty.bighits.net
    127.0.0.1 www.bighits.net
    127.0.0.1 counter.bigli.ru
    127.0.0.1 bigstats.net
    127.0.0.1 banex.bikers-engine.com
    127.0.0.1 ad2.billboard.cz
    127.0.0.1 adserver.bizhat.com
    127.0.0.1 counter.bizland.com
    127.0.0.1 dc.bizjournals.com
    127.0.0.1 ads2.blastro.com
    127.0.0.1 ads3.blastro.com
    127.0.0.1 ads4.blastro.com
    127.0.0.1 ads.blick.ch
    127.0.0.1 streamstats1.blinkx.com
    127.0.0.1 ads.blizzard.com
    127.0.0.1 blogadswap.com
    127.0.0.1 tracker.blogbeat.net
    127.0.0.1 ads.blogdrive.com
    127.0.0.1 banners.blogexplosion.com
    127.0.0.1 counter.blogexplosion.com
    127.0.0.1 blogtextlinks.blogexplosion.com
    127.0.0.1 rentblog.blogexplosion.com
    127.0.0.1 mapstats.blogflux.com
    127.0.0.1 www.blogplaync.com #[Win32/TrojanDownloader.Ani.Gen][server down?]
    127.0.0.1 pcbutts1-therealtruth.blogspot.com
    127.0.0.1 t.blogreaderproject.com #[WebBug]
    127.0.0.1 blogmark.bokee.com #[Adware.BocaiToolbar]
    127.0.0.1 track.blogcounter.de
    127.0.0.1 www.blogcounter.de
    127.0.0.1 www3.bloomingdales.com #[WebBug.eluminate]
    127.0.0.1 adserver.bluewin.ch
    127.0.0.1 ie-stat.bmmetrix.com
    127.0.0.1 t.bmmetrix.com
    127.0.0.1 www.bmmetrix.com #[WebBug][Tracking.Cookie]
    127.0.0.1 ads.boardtracker.com
    127.0.0.1 ranks.boardtracker.com
    127.0.0.1 adimage.bokee.com
    127.0.0.1 ad.bol.bg
    127.0.0.1 adv.bol.bg
    127.0.0.1 ads.bomis.com
    127.0.0.1 banners.bookmaker.com
    127.0.0.1 ccc.boolans.com #[Adware.Rugo]
    127.0.0.1 err.boom.ru
    127.0.0.1 www.borlander.com.cn #[ADSPY/Boran.X.19.C]
    127.0.0.1 ads.brainiads.com
    127.0.0.1 ads.breakthru.com
    127.0.0.1 bans.bride.ru
    127.0.0.1 ads.bridgetrack.com
    127.0.0.1 cc.bridgetrack.com
    127.0.0.1 citi.bridgetrack.com #[Ad-Aware.Tracking.Cookie]
    127.0.0.1 citi.bridgetrack.com.edgesuite.net
    127.0.0.1 rccl.bridgetrack.com #[MVPS.Criteria]
    127.0.0.1 goku.brightcove.com #[WebBug]
    127.0.0.1 adsrv2.brownpride.com
    127.0.0.1 www.browserplugin.com #[HJTH.EroticAccess][wobz.de]
    127.0.0.1 bsdpng.info
    127.0.0.1 btbilgisayarkursu.com #[Win32/TrojanDownloader.Small.AWA]
    127.0.0.1 www.btbilgisayarkursu.com #[Win32/TrojanDownloader.Small.AWA]
    127.0.0.1 www.bulletads.com
    127.0.0.1 redemption.bullseye-media.net
    127.0.0.1 users.bullseye-media.net
    127.0.0.1 www.bullseye-media.net
    127.0.0.1 bunnezone.com #[Win32/Jep.Russ]
    127.0.0.1 burnsrecyclinginc.com #[Win32/TrojanDropper.Agent.NBX]
    127.0.0.1 www.burnsrecyclinginc.com
    127.0.0.1 ad1.bustcash.com
    127.0.0.1 www.buycheapadvertising.com
    127.0.0.1 buytraffic.cn
    127.0.0.1 www.buzzclick.com
    127.0.0.1 tr.buzzlogic.com
    127.0.0.1 tracking.byindia.com
    127.0.0.1 www.byip.cn #[Google.Warning]
    127.0.0.1 multi.byulcom.com #[Win32/TrojanDownloader.Small.BIV]
    127.0.0.1 ads.calgarystampede.com
    127.0.0.1 www.cambodiaoutsourcing.com
    127.0.0.1 canadianhw.ca #[VBS/Envary.A]
    127.0.0.1 www.canadianhw.ca
    127.0.0.1 ads.caniamedia.com
    127.0.0.1 canadians-health.com #[Spamdexing]
    127.0.0.1 ads.capablenet.com
    127.0.0.1 images.cashfiesta.com #[AdWare.CashFiesta.a]
    127.0.0.1 www.cashfiesta.com #[McAfee.Adware-CashFiesta]
    127.0.0.1 www.cashfiesta.net
    127.0.0.1 banner.casinoking.com #[AdWare.Win32.Casino.ae]
    127.0.0.1 ad.caradisiac.com
    127.0.0.1 ads.cars.com
    127.0.0.1 www.cbproads.com
    127.0.0.1 qi.ccbtv.net #[Google.Warning]
    127.0.0.1 blockbuster.com.7.ccg360.com
    127.0.0.1 blockbuster.med.ccg360.com
    127.0.0.1 www.cd321.com
    127.0.0.1 ads.cdfreaks.com #[eTrust.Ads.cdfreaks]
    127.0.0.1 ads.cdrinfo.com
    127.0.0.1 stats.cdrinfo.com #[WebBug]
    127.0.0.1 www.celebritypicturesarchive.com #[Trojan-Downloader.Win32.IstBar.nn]
    127.0.0.1 www.celebrity-pictures-world.com #[Trojan-Downloader.Win32.IstBar.nn]
    127.0.0.1 clicktracker.centrum.cz
    127.0.0.1 cetrk.com #[Crazy Egg]
    127.0.0.1 cesp.be #[HTML/TrojanDownloader.Agent.NAB]
    127.0.0.1 adserver.cducinema.com
    127.0.0.1 counter.cgiworld.net
    127.0.0.1 tracker.cgiworld.net
    127.0.0.1 cts.channelintelligence.com #[switch.atdmt.com]
    127.0.0.1 abc.checkm8.com
    127.0.0.1 ny.checkm8.com
    127.0.0.1 rmm1u.checkm8.com
    127.0.0.1 web.checkm8.com #[CHECKM8 AD TAGS]
    127.0.0.1 web2.checkm8.com
    127.0.0.1 ads.checkm8.co.za
    127.0.0.1 ads.china.com
    127.0.0.1 ad.chip.de
    127.0.0.1 ad.cibleclick.com #[eTrust.Cibleclick]
    127.0.0.1 www.cibleclick.com #[Ad-Aware.Tracking.Cookie]
    127.0.0.1 www.classicequipment.com #[Google.Warning]
    127.0.0.1 board.classifieds1000.com
    127.0.0.1 xp.classifieds1000.com
    127.0.0.1 www.classifieds1000.com #[SiteAdvisor.classifieds1000.com]
    127.0.0.1 images.clckm.com
    127.0.0.1 pics.clckm.com #[Parking Service]
    127.0.0.1 ads.clickad.com #[eTrust.Tracking.Cookie]
    127.0.0.1 clickbank.net #[Ad-Aware.Tracking.Cookie]
    127.0.0.1 hop.clickbank.net #[Adware.Clickbank][Adware.ClickDLoader]
    127.0.0.1 ssl.clickbank.net
    127.0.0.1 zzz.clickbank.net #[Ewido.TrackingCookie.Clickbank]
    127.0.0.1 publishers.clickbooth.com #[directleads.com]
    127.0.0.1 clickboothlnk.com
    127.0.0.1 www.clickboothlnk.com
    127.0.0.1 j.clickdensity.com
    127.0.0.1 r.clickdensity.com
    127.0.0.1 cf-db01.clickfacts.com
    127.0.0.1 server104.clickfacts.com #[ClickFacts Tracking Beacon]
    127.0.0.1 www.clickmanage.com
    127.0.0.1 clicktracks.com #[McAfee.Cookie-Clicktracks]
    127.0.0.1 stats.clicktracks.com #[Tenebril.Tracking.Cookie]
    127.0.0.1 stats1.clicktracks.com # [eTrust.Tracking.Cookie]
    127.0.0.1 stats2.clicktracks.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 stats3.clicktracks.com
    127.0.0.1 stats4.clicktracks.com
    127.0.0.1 www.clicktracks.com #[SunBelt.ClickTracks]
    127.0.0.1 www.is1.clixgalore.com
    127.0.0.1 www.clixgalore.com
    127.0.0.1 hit.click2006.com
    127.0.0.1 www2.click-fr.com
    127.0.0.1 www3.click-fr.com
    127.0.0.1 www4.click-fr.com
    127.0.0.1 www.clickhouse.com #[SunBelt.ClickHouse]
    127.0.0.1 www.click-power.com #[Win32/TrojanDownloader.VB.JL][Win32.Virtumonde.by]
    127.0.0.1 www.clicksbroker.com
    127.0.0.1 ad1.clickhype.com #[Ewido.TrackingCookie.Clickhype]
    127.0.0.1 redirect.clickshield.net
    127.0.0.1 clicktorrent.info
    127.0.0.1 static.clicktorrent.info
    127.0.0.1 www.clicktorrent.info #[phpAds]
    127.0.0.1 www1.clicktorrent.info
    127.0.0.1 norbert_sirot.club.fr #[Trojan-Spy.Win32.Banker.anv]
    127.0.0.1 banner.clubdicecasino.com
    127.0.0.1 adserver.clix.pt
    127.0.0.1 ad.cmfu.com
    127.0.0.1 www.cnstats.com
    127.0.0.1 ad.coas2.co.kr
    127.0.0.1 collectiveads.net
    127.0.0.1 a.collective-media.net
    127.0.0.1 www.comclean.co.kr #[Spyware.Comclean]
    127.0.0.1 www.combimedia.nl
    127.0.0.1 bdx.comclick.com
    127.0.0.1 br.comclick.com
    127.0.0.1 ct2.comclick.com #[Tenebril.Tracking.Cookie]
    127.0.0.1 fl01.ct2.comclick.com #[Ad-Aware.Tracking.Cookie]
    127.0.0.1 ihm01.ct2.comclick.com
    127.0.0.1 www.comclick.com #[Ewido.TrackingCookie.Comclick]
    127.0.0.1 banners.commissionking.com
    127.0.0.1 members.commissionmonster.com
    127.0.0.1 www.compactads.com
    127.0.0.1 aa.connextra.com
    127.0.0.1 bb.connextra.com #[a22.g.akamai.net]
    127.0.0.1 cc.connextra.com
    127.0.0.1 dd.connextra.com
    127.0.0.1 ee.connextra.com
    127.0.0.1 ff.connextra.com #[a22.g.akamai.net]
    127.0.0.1 data.connextra.com
    127.0.0.1 linkexchange.consoleunderground.com
    127.0.0.1 www.consoleunderground.com #[Adware.Begin2search]
    127.0.0.1 ads.consumeraffairs.com
    127.0.0.1 ads.contact.md
    127.0.0.1 ads.contactmusic.com #[AdvertPro]
    127.0.0.1 servedby.contextuad.org
    127.0.0.1 svp.contextuad.org #[SunBelt.ContextuAd]
    127.0.0.1 www.contextualadv.com
    127.0.0.1 www.contextpanel.com #[searchant.com]
    127.0.0.1 ads.console.net
    127.0.0.1 banners.copyscape.com
    127.0.0.1 www.counter-x.com
    127.0.0.1 www.countit.ch
    127.0.0.1 counter.co.kz
    127.0.0.1 www.counter-gratis.com #[Ad-Aware.Tracking.Cookie]
    127.0.0.1 www.countercentral.com
    127.0.0.1 www.counterdata.com
    127.0.0.1 www.counterguide.com
    127.0.0.1 counter-shop.net
    127.0.0.1 htm-pop-ky.counterstat.net
    127.0.0.1 www.counting4free.com
    127.0.0.1 www.counter.cz
    127.0.0.1 www.counti.de
    127.0.0.1 www.countmypage.com
    127.0.0.1 log1.countomat.com
    127.0.0.1 connectionzone.com
    127.0.0.1 www.couponsandoffers.com #[Adware.TopMoxie]
    127.0.0.1 data.coremetrics.com
    127.0.0.1 test.coremetrics.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 twci.coremetrics.com #[Ad-Aware.Tracking.Cookie]
    127.0.0.1 banner.coza.com
    127.0.0.1 cp16688.cn #[Win32/TrojanDownloader.Ani.Gen]
    127.0.0.1 www.cp16688.cn #[VBS/TrojanDownloader.Psyme.FM]
    127.0.0.1 www.cpaclicks.com #[Spamdexing]
    127.0.0.1 server.cpmstar.com #[ads.shizmoo.com]
    127.0.0.1 cracks.am #[eTrust.Cracks.am][ADW_CRAMTB.A]
    127.0.0.1 www.cracks.am #[fuck-portal.com][Adware.CramToolbar]
    127.0.0.1 ads.cracked.com
    127.0.0.1 track.cracked.com
    127.0.0.1 new.crashextads.co.uk
    127.0.0.1 crawl.ws
    127.0.0.1 cont.crawl.ws #[AdWare.Win32.MegaKiss.b]
    127.0.0.1 www.crawl.ws
    127.0.0.1 counter.credo.ru
    127.0.0.1 www.cridem.org #[Win32/Spy.Banker.AHY]
    127.0.0.1 ads.crosswinds.net
    127.0.0.1 ads.crucialparadigm.com
    127.0.0.1 cdn.crwdcntrl.net
    127.0.0.1 media.customeracquisitionsite.com #[customeracquisitionsite.adlegend.com]
    127.0.0.1 cmd.customink.com #[WebBug.eluminate]
    127.0.0.1 cxss358.com #[HTML/TrojanDownloader.Agent.BP]
    127.0.0.1 ads.cyberax.com
    127.0.0.1 banner.cybertechdev.com
    127.0.0.1 cybertown.ru
    127.0.0.1 search.cygo.net
    127.0.0.1 www.cygo.net #[McAfee.Adware-Cygo]
    127.0.0.1 ads.dada.it
    127.0.0.1 www.dailykeys.com #[Google.Warning]
    127.0.0.1 aj.daniweb.com
    127.0.0.1 www.data-jpn.com #[Trojan.Pajatan]
    127.0.0.1 banner.date.com #[Tenebril.Tracking.Cookie]
    127.0.0.1 www.dateclix.com #[DateClix.com Banner Exchange Code]
    127.0.0.1 datingbanners.net
    127.0.0.1 ads.datinggold.com
    127.0.0.1 ad.db3nf.com
    127.0.0.1 dcstat.com
    127.0.0.1 images.ddc.com #[Parking Service]
    127.0.0.1 ads.dealnews.com
    127.0.0.1 au.track.decideinteractive.com
    127.0.0.1 au.link.decideinteractive.com
    127.0.0.1 eu.link.decideinteractive.com
    127.0.0.1 link.decideinteractive.com
    127.0.0.1 www.decideinteractive.com
    127.0.0.1 www.decideinteractive.co.uk
    127.0.0.1 deepcom.com #[SiteAdvisor.deepcom.com]
    127.0.0.1 www.deepcom.com #[TrojanDropper.Win32.Small.gt]
    127.0.0.1 collector.deepmetrix.com
    127.0.0.1 geo.deepmetrix.com
    127.0.0.1 www.deepmetrix.com #[Microsoft]
    127.0.0.1 ads.dennisnet.co.uk
    127.0.0.1 ad.depositfiles.com
    127.0.0.1 ad.detik.com
    127.0.0.1 desire-search.com #[Spamdexing]
    127.0.0.1 ads.deviantart.com
    127.0.0.1 adsvr.deviantart.com
    127.0.0.1 phpadsnew.devstart.com
    127.0.0.1 www.dhtianyu.net #[Spamdexing]
    127.0.0.1 banners.diariodelaltoaragon.es
    127.0.0.1 track.did-it.com #[Panda.Spyware:Cookie/did-it]
    127.0.0.1 counter.dieit.de
    127.0.0.1 digiwexonline.com #[W32/Kibik.a]
    127.0.0.1 www.digink.com #[PcTools.SysCheckBop32]
    127.0.0.1 ads.digitalpoint.com
    127.0.0.1 geo.digitalpoint.com
    127.0.0.1 comm1.digits.com
    127.0.0.1 counter.digits.com
    127.0.0.1 ads.dir.bg
    127.0.0.1 banners.dir.bg
    127.0.0.1 ad.directconnect.se
    127.0.0.1 banners.directnic.com #[SecuritySpace.WebBug][MVPS.Criteria]
    127.0.0.1 dnads.directnic.com
    127.0.0.1 parked.directnic.com
    127.0.0.1 stats.directnic.com
    127.0.0.1 www.directnicparking.com
    127.0.0.1 aserve.directorym.com
    127.0.0.1 cache.directorym.com #[c2.mii.instacontent.net]
    127.0.0.1 ads.directnetadvertising.net #[SiteAdvisor.directnetadvertising.net]
    127.0.0.1 www.directnetadvertising.net #[Ad-Aware Tracking.Cookie]
    127.0.0.1 direct-web.co.kr #[Adware-DirectWeb]
    127.0.0.1 agentq.ditto.com
    127.0.0.1 js.ditto.com
    127.0.0.1 matrix.ditto.com
    127.0.0.1 media.ditto.com #[a232.x.akamai.net]
    127.0.0.1 www.ditto.com #[AdWare.Win32.Softomate.c]
    127.0.0.1 ads.djindexes.com
    127.0.0.1 openads.dlg.cz
    127.0.0.1 a.dlqm.net
    127.0.0.1 dcww.dmcast.com #[Adware-DesktopMedia]
    127.0.0.1 ad1.dmcmedia.co.kr
    127.0.0.1 dmdl.dmcast.com
    127.0.0.1 install.dmcast.com #[Adware-DesktopMedia.dr]
    127.0.0.1 track.dmipartners.com
    127.0.0.1 rotabanner.dni.ru
    127.0.0.1 searchportal.dnparking.com #[Parking Service]
    127.0.0.1 www.dnscaching.net #[SiteAdvisor.dnscaching.net]
    127.0.0.1 dnv-counter.com
    127.0.0.1 d08r.cn #[Spamdexing]
    127.0.0.1 www.domamil.cz #[Trojan.Beagooz]
    127.0.0.1 www.dodostats.com
    127.0.0.1 adv.dontcrack.com
    127.0.0.1 doorgen.com #[Spamdexing]
    127.0.0.1 www.doorgen.com
    127.0.0.1 ads.dotomi.com
    127.0.0.1 www.download-services.com #[VBA32.Trojan-Downloader.Agent.26]
    127.0.0.1 www.downseek.com #[SunBelt.DownSeek Search]
    127.0.0.1 banners.dpnet.com.br
    127.0.0.1 drmx01.net #[Spamdexing]
    127.0.0.1 www.claus.drehteile-rieche.de #[Win32.Formglieder.B]
    127.0.0.1 www.dreamadvert.com #[SunBelt.Dreamadvert]
    127.0.0.1 www.dropthehammer.com #[Win32/Spy.Banker.AHY]
    127.0.0.1 ads.drugs.com
    127.0.0.1 b.ds1.nl
    127.0.0.1 dsiworld.net
    127.0.0.1 ddd.dudu.com #[Tenebril.DuDu Accelerator]
    127.0.0.1 ulink4.dudu.com #[Adware.DDDClient][SunBelt.DuDuAccelerator]
    127.0.0.1 ulink13.dudu.com #[Win32/Adware.DM]
    127.0.0.1 www.dudu.com #[McAfee.Downloader-AVV]
    127.0.0.1 www.duenow.com
    127.0.0.1 dukasound.info #[Javascript.Exploit]
    127.0.0.1 www.dutty.de #[W32.Peerload.A]
    127.0.0.1 www.dzy520.com #[Google.Warning]
    127.0.0.1 hits.e.cl
    127.0.0.1 banners.earnunited.com
    127.0.0.1 blogads.ebanner.nl
    127.0.0.1 www.e-bannerx.com #[Ad-Aware.Tracking.Cookie]
    127.0.0.1 www.earncashontheinternet.com #[SunBelt.OpinionBar]
    127.0.0.1 click.easilyfound.com #[Tenebril.AdTraffic]
    127.0.0.1 www.easilyfound.com
    127.0.0.1 www.easycounter.com
    127.0.0.1 banners.easydns.com
    127.0.0.1 easyhitcounters.com
    127.0.0.1 beta.easyhitcounters.com
    127.0.0.1 easytrader.bg
    127.0.0.1 static.easytrader.bg
    127.0.0.1 www.ebannertraffic.com
    127.0.0.1 mailer.ebates.com
    127.0.0.1 www.ebates.com #[Adware.MoeMoney]
    127.0.0.1 ads.eccentrix.com
    127.0.0.1 b.economedia.bg #[ban.etaligent.net]
    127.0.0.1 ads.ecrush.com #[AdvertPro]
    127.0.0.1 www.eden21.net #[Win32/Haxdoor][TR/Dldr.Botol.D.1]
    127.0.0.1 c6.edgesuite.net #[RealMedia]
    127.0.0.1 einfachstarten.com #[Trojan.Firpage]
    127.0.0.1 eisenstein.dk #[tracking.ping]
    127.0.0.1 www.ejmx.com #[Adware.ElectroJMX]
    127.0.0.1 ad.e-kolay.net
    127.0.0.1 www.ek21.com #[Trojan.Chost.B]
    127.0.0.1 ads.elmaz.com
    127.0.0.1 now.eloqua.com #[WebBug]
    127.0.0.1 ads.eluniversal.com.mx
    127.0.0.1 hits.eluniversal.com.mx
    127.0.0.1 publicidad.eluniversal.com.mx
    127.0.0.1 elwebsearch.info #[Malicious.Links.Umax]
    127.0.0.1 wwv.elwebsearch.info
    127.0.0.1 www.elwebsearch.info
    127.0.0.1 ad1.emediate.dk
    127.0.0.1 eas.apm.emediate.eu
    127.0.0.1 ad1.emediate.se
    127.0.0.1 vcontent.e-messenger.net
    127.0.0.1 www.emoinstaller.com #[Win32/Adware.NdotNet][SiteAdvisor.emoinstaller.com]
    127.0.0.1 www.emusic.com #[Win32/Adware.Comet][MVPS.Criteria]
    127.0.0.1 dotnet.endai.com
    127.0.0.1 stats.engineseeker.com
    127.0.0.1 enjoytraffic.com
    127.0.0.1 sa.entireweb.com
    127.0.0.1 entk.net
    127.0.0.1 log.enquisite.com
    127.0.0.1 adv.entercasino.com #[Adware.Casino.V]
    127.0.0.1 ads.eog.com
    127.0.0.1 ads.e-planning.net
    127.0.0.1 ads.us.e-planning.net
    127.0.0.1 ertbirth009.info #[Spamdexing.Codec]
    127.0.0.1 adserving03.epi.es
    127.0.0.1 www.escorcher.com #[eTrust.EScorcher]
    127.0.0.1 search.etargetnet.com
    127.0.0.1 bg.search.etargetnet.com
    127.0.0.1 cz.search.etargetnet.com
    127.0.0.1 pages.etology.com
    127.0.0.1 www.etracker.de
    127.0.0.1 www.etxh.com #[Win32/Prosti.C]
    127.0.0.1 count.e-ratings.com.ua
    127.0.0.1 ads.ere.net
    127.0.0.1 ads.ero-advertising.com
    127.0.0.1 banners.ero-advertising.com
    127.0.0.1 data.ero-advertising.com
    127.0.0.1 thumbs.ero-advertising.com
    127.0.0.1 adopt.euroclick.com #[Ewido.TrackingCookie.Euroclick]
    127.0.0.1 cdn.euroclick.com
    127.0.0.1 www.euroklik.nl #[EasyBar][HJTH.SinCity Dialer]
    127.0.0.1 advert.eurotip.cz
    127.0.0.1 www.euros4click.de
    127.0.0.1 ad.eurosport.com #[oas.eurosport.com]
    127.0.0.1 www.eurowebstats.com
    127.0.0.1 www.everestpoker.com #[AdWare.Win32.Casino.t]
    127.0.0.1 advert.exaccess.ru
    127.0.0.1 dynamic.exaccess.ru
    127.0.0.1 static.exaccess.ru
    127.0.0.1 www.exchangead.com
    127.0.0.1 exchange.bg
    127.0.0.1 media.exchange.bg
    127.0.0.1 www.exchange.bg
    127.0.0.1 load.exelator.com
    127.0.0.1 tlal.exelator.net
    127.0.0.1 exitexchange.com #[SiteAdvisor.exitexchange.com]
    127.0.0.1 ads.exitexchange.com
    127.0.0.1 count.exitexchange.com #[McAfee.Cookie-Exitexchange]
    127.0.0.1 images.exitexchange.com
    127.0.0.1 www.exitexchange.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 www.exittrade.com
    127.0.0.1 ads2.expatica.com
    127.0.0.1 nyton.experclick.com #[p.mii.instacontent.net]
    127.0.0.1 www.experclick.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ads.expressindia.com
    127.0.0.1 banners.expressindia.com
    127.0.0.1 cdn.eyewonder.com #[SunBelt.EyeWonder]
    127.0.0.1 cdn1.eyewonder.com
    127.0.0.1 cdn4.eyewonder.com
    127.0.0.1 pixel1097.everesttech.net
    127.0.0.1 pixel1324.everesttech.net
    127.0.0.1 pixel1370.everesttech.net
    127.0.0.1 www.evidence-eliminator.com
    127.0.0.1 www.ewebcounter.com
    127.0.0.1 ads2.exhedra.com
    127.0.0.1 ads.expedia.com
    127.0.0.1 admedia.expedia.com
    127.0.0.1 www.eyeget.com #[McAfee.Adware-EyeGet]
    127.0.0.1 feedback.eyereturn.com
    127.0.0.1 resources.eyereturn.com
    127.0.0.1 timespent.eyereturn.com
    127.0.0.1 voken.eyereturn.com
    127.0.0.1 ads.ezboard.com
    127.0.0.1 eziin.com #[Adware.Eziin]
    127.0.0.1 www.eziin.com
    127.0.0.1 www.ezurl.co.kr #[Spyware.Ezurl]
    127.0.0.1 ads.facebook.com #[facebook-ads.vo.llnwd.net]
    127.0.0.1 ads.ak.facebook.com
    127.0.0.1 www.factorygames.com #[SiteAdvisor.factorygames.com]
    127.0.0.1 banner.fairpoker.com #[AdWare.Win32.Casino.w]
    127.0.0.1 ehs.familydoctor.org #[ads.digitalhealthcare.com]
    127.0.0.1 tmp.farfly.org #[Trojan.Farfli]
    127.0.0.1 a.farlex.com
    127.0.0.1 www.fast-adv.it
    127.0.0.1 www.fastadvert.com
    127.0.0.1 www.fastfind.org #[TROJ_STARTPAG.KF][Win32/Adware.MediaBack]
    127.0.0.1 fastonlineusers.com
    127.0.0.1 fasttrack.nu
    127.0.0.1 fastwebcounter.com
    127.0.0.1 counter.fateback.com
    127.0.0.1 www.fatpenguinmedia.com
    127.0.0.1 counter1.fc2.com
    127.0.0.1 alex.fileburst.com #[Win32/TrojanDropper.Agent.NBT]
    127.0.0.1 adserver.filefront.com #[Ad-Aware.Tracking.Cookie]
    127.0.0.1 adserver.finditquick.com
    127.0.0.1 findover.org #[Spamdexing]
    127.0.0.1 search.findscout.com
    127.0.0.1 www.findscout.com #[W32/Delf.KPZ]
    127.0.0.1 ai.p.findology.com
    127.0.0.1 banner.finn.no
    127.0.0.1 ads.firingsquad.com
    127.0.0.1 ads2.firingsquad.com
    127.0.0.1 firstdor.info #[Spamdexing]
    127.0.0.1 ads.firstgrand.com
    127.0.0.1 fishclix.com
    127.0.0.1 www.fishclix.com
    127.0.0.1 www.fish-screensaver.com #[AdWare.Win32.Gator.1008]
    127.0.0.1 www.fjordbergen.com #[Win32/Spy.Banker.BIG]
    127.0.0.1 www.fjjyjy.net #[Win32/Hipigon][W32.Fijjy]
    127.0.0.1 www.flashadengine.com
    127.0.0.1 cdn.flashedmail.com #[Parked?]
    127.0.0.1 tracker1.flashedmail.com
    127.0.0.1 adserver4.fluent.ltd.uk
    127.0.0.1 adserver.fmpub.net
    127.0.0.1 dynamic.fmpub.net
    127.0.0.1 static.fmpub.net
    127.0.0.1 ads.fmwinc.com
    127.0.0.1 rnews.focus-news.net
    127.0.0.1 rpt.footlocker.com #[WebBug.eluminate]
    127.0.0.1 adcycle.footymad.net
    127.0.0.1 www.forodeortodoncia.com #[Backdoor.IRC.Zapchast]
    127.0.0.1 js.forrestersurveys.com
    127.0.0.1 socratos.forrestersurveys.com
    127.0.0.1 forso.info #[Malicious.Links.Codec]
    127.0.0.1 forvideo.at
    127.0.0.1 www.forvideo.at #[Javascript.Exploit]
    127.0.0.1 akcr.free.fr #[Win32/Spy.Bancos.U]
    127.0.0.1 googlelite.free.fr #[Spamdexing]
    127.0.0.1 ad.freecity.de
    127.0.0.1 ads05.freecity.de
    127.0.0.1 freecounters.xp.tl
    127.0.0.1 www.free-counter.com
    127.0.0.1 maurobb.freecounter.it
    127.0.0.1 www.freecounter.it
    127.0.0.1 securinews.free.fr #[Trojan.Hexem]
    127.0.0.1 www.freedownloadhq.com #[SiteAdvisor.freedownloadhq.com]
    127.0.0.1 ad.freefind.com
    127.0.0.1 adverts.freeloader.com
    127.0.0.1 adserver.freenet.de
    127.0.0.1 www.free-ranking.de
    127.0.0.1 www.freerip.com #[AdTool.Win32.MyWebSearch.ak]
    127.0.0.1 banner-server.freerun.com
    127.0.0.1 free-stats.com
    127.0.0.1 abbyssh.freestats.com
    127.0.0.1 insurancejournal.freestats.com
    127.0.0.1 banners.freett.com
    127.0.0.1 count.freett.com
    127.0.0.1 counters.freewebs.com
    127.0.0.1 ads.freeonlinegames.com
    127.0.0.1 stats.freeonlinegames.com
    127.0.0.1 error.freewebsites.com
    127.0.0.1 www.freewebsites.com
    127.0.0.1 tracking.fsjmp.com
    127.0.0.1 ftpiframer.org #[Javascript.Exploit]
    127.0.0.1 media.ftv-publicite.fr #[RealMedia]
    127.0.0.1 fullddl.com
    127.0.0.1 www.fullddl.com #[HTML/TrojanDownloader.XXXToolbar]
    127.0.0.1 404.funpic.de
    127.0.0.1 www.fusestats.com
    127.0.0.1 ads.gad-network.com
    127.0.0.1 adserver.gadu-gadu.pl
    127.0.0.1 www.gamersbanner.com
    127.0.0.1 ads.gamesbannernet.com
    127.0.0.1 ads.gameservers.com
    127.0.0.1 ads.gamespy.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 adcontent.gamespy.com
    127.0.0.1 ads.gamespyid.com
    127.0.0.1 www.gameurdr.com #[Win32/TrojanDownloader.Ani.Gen][server down?]
    127.0.0.1 server.gamyun.net
    127.0.0.1 www.gamyun.net #[Adware.GamyunIeToolbar]
    127.0.0.1 ad.garantiarkadas.com
    127.0.0.1 gasan.ru #[Trojan.Codec]
    127.0.0.1 ads.gather.com
    127.0.0.1 track.gawker.com #[WebBug]
    127.0.0.1 ad.gazeta.pl
    127.0.0.1 adp.gazeta.pl
    127.0.0.1 adv.gazeta.pl
    127.0.0.1 haymarket-adserver.gcnpublishing.com
    127.0.0.1 www.gebr-wachs.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
    127.0.0.1 sda.geek.com #[AdvertPro]
    127.0.0.1 adserver.geenstijl.nl
    127.0.0.1 kassa.geenstijl.nl
    127.0.0.1 schoorsteen.geenstijl.nl
    127.0.0.1 adserver.geizkragen.de
    127.0.0.1 gnt01.generation-nt.com
    127.0.0.1 gd.geobytes.com
    127.0.0.1 geotarget.info #[Whois.Blacklisted]
    127.0.0.1 banners.geotarget.info
    127.0.0.1 www.geotarget.info
    127.0.0.1 www.geowhere.net #[SunBelt.GeoWhere Search]
    127.0.0.1 get-access.host.sk #[McAfee.StartPage-IR]
    127.0.0.1 getclicky.com
    127.0.0.1 pmetrics.getclicky.com
    127.0.0.1 static.getclicky.com
    127.0.0.1 www.getsmart.com
    127.0.0.1 dlx.getupdate.com #[AdvWare.ToolBar.VB.b][Adware.Getup]
    127.0.0.1 banner.giantvegas.com
    127.0.0.1 counters.gigya.com
    127.0.0.1 truehits.gits.net.th
    127.0.0.1 truehits1.gits.net.th
    127.0.0.1 ads.globo.com
    127.0.0.1 ads.img.globo.com
    127.0.0.1 duke.gocomics.com #[ads.uclick.com]
    127.0.0.1 www.godesktop.com #[SiteAdvisor.godesktop.com]
    127.0.0.1 adserver2.goals365.com
    127.0.0.1 banner.goldenpalace.com #[Tenebril.Tracking.Cookie]
    127.0.0.1 stage.goldkey.com #[Parking Service]
    127.0.0.1 goldstats.net
    127.0.0.1 www.goldstats.net
    127.0.0.1 www.goodhealth-search.com #[Spamdexing]
    127.0.0.1 google9.info
    127.0.0.1 www.google9.info
    127.0.0.1 www.google-hard.com #[Win32/TrojanProxy.Agent.LK]
    127.0.0.1 gooogle.info
    127.0.0.1 goooglegulp.com #[Spamdexing]
    127.0.0.1 goopssearch.com #[Google.Warning]
    127.0.0.1 www.goopssearch.com
    127.0.0.1 www.gogogo.com #[PremiumTraffic.Parking Service]
    127.0.0.1 partner.gonamic.de
    127.0.0.1 googlus.com #[Spamdexing]
    127.0.0.1 adincl.gopher.com #[InfoSpace]
    127.0.0.1 gostats.com
    127.0.0.1 as.gostats.com
    127.0.0.1 c1.gostats.com
    127.0.0.1 c2.gostats.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 c3.gostats.com
    127.0.0.1 c4.gostats.com #[Panda.Spyware:Cookie/GoStats]
    127.0.0.1 ded.gostats.com
    127.0.0.1 monster.gostats.com
    127.0.0.1 webcounter.goweb.de
    127.0.0.1 ads.goyk.com
    127.0.0.1 graffitifonts.com
    127.0.0.1 www.graffitifonts.com #[Malicious.Links.Zango]
    127.0.0.1 graficastrigo.com #[Trojan.Tabela.E][server down?]
    127.0.0.1 www.gratis-counter-gratis.de
    127.0.0.1 www.gratis-toplist.de
    127.0.0.1 adv.gratuito.st
    127.0.0.1 expedia.gravitytrack.com
    127.0.0.1 www.greasypalm.co.uk #[PcTools.GreasyPalm bar]
    127.0.0.1 adserver.gruprc.ro
    127.0.0.1 ad4.gueb.com
    127.0.0.1 ad7.gueb.com
    127.0.0.1 ads.guru3d.com
    127.0.0.1 ads.gusanito.com
    127.0.0.1 www.g-wizzads.net #[adbureau.net]
    127.0.0.1 x.gxgxy.net #[Trojan-Downloader.Win32.Agent.hkc][server down?]
    127.0.0.1 www.h148.cn #[Google.Warning]
    127.0.0.1 ads2.haber3.com
    127.0.0.1 cc9905.counter.hackers.lv
    127.0.0.1 www.handyarchive.com #[SiteAdvisor.handyarchive.com]
    127.0.0.1 www.haosf128.com #[Google.Warning]
    127.0.0.1 streamit.hardwarezone.com
    127.0.0.1 ad1.hardware.no #[AdvertPro]
    127.0.0.1 adserver.hardwareanalysis.com
    127.0.0.1 ad.harmony-central.com
    127.0.0.1 ds1.harmony-central.com
    127.0.0.1 www.harmonyhollow.net #[SiteAdvisor.harmonyhollow.net]
    127.0.0.1 hartim.com
    127.0.0.1 ad0.haynet.com
    127.0.0.1 ad.hbv.de
    127.0.0.1 ads.heias.com
    127.0.0.1 www.hentaibanners.com
    127.0.0.1 www.hentaicashmachine.com
    127.0.0.1 www.hentaiclicks.com
    127.0.0.1 www.hentaicounter.com
    127.0.0.1 www.hentaihits.com
    127.0.0.1 www.hentaipop.com #[Electronic Group Dialer]
    127.0.0.1 www.hentaiseeker.com
    127.0.0.1 www.hentaitoonami.com
    127.0.0.1 www.henwo.com
    127.0.0.1 ads.herbalsmokeshop.com
    127.0.0.1 www2.hermoment.com
    127.0.0.1 www.hermoment.com
    127.0.0.1 ads.hexun.com
    127.0.0.1 www.hey.lt
    127.0.0.1 ads.highdefdigest.com
    127.0.0.1 adserver.hispanoclick.com
    127.0.0.1 www.hitscount.com
    127.0.0.1 www.hit-counter-download.com
    127.0.0.1 hithopper.com #[Adware.Hithopper]
    127.0.0.1 www.hithopper.com #[ADW_HITHOPPER.A]
    127.0.0.1 rdr.hitmngr.com #[WinFixer]
    127.0.0.1 sxp.hitmngr.com
    127.0.0.1 hitmodel.net
    127.0.0.1 www.hit-counts.com
    127.0.0.1 hit-now.com
    127.0.0.1 www.hitscreamer.com
    127.0.0.1 hitslog.com
    127.0.0.1 h1.hitslog.com
    127.0.0.1 s4.histats.com
    127.0.0.1 s10.histats.com
    127.0.0.1 s11.histats.com
    127.0.0.1 www.hitstats.co.uk
    127.0.0.1 hitstats.net
    127.0.0.1 www.hittracking.com
    127.0.0.1 images.hitwise.co.uk
    127.0.0.1 anna.homeftp.net #[W32.Linkbot.A]
    127.0.0.1 www.gontijoamaral.hpg.com.br #[Adware.Diginum]
    127.0.0.1 www.adserver.home.pl
    127.0.0.1 www.homeoffun.com #[SiteAdvisor.homeoffun.com]
    127.0.0.1 counters.honesty.com
    127.0.0.1 cgi.honesty.com #[MVPS.Criteria]
    127.0.0.1 ad.hosting.pl
    127.0.0.1 hot8888.com #[Win32/TrojanDownloader.Ani.Gen]
    127.0.0.1 hot8888.cn #[Win32/TrojanDownloader.Ani.Gen]
    127.0.0.1 ad2.hotels.com
    127.0.0.1 www.hot-lindsay.com #[Malicious.Links.Zango]
    127.0.0.1 hotlinkbanners.com
    127.0.0.1 www.hotlinkbanners.com
    127.0.0.1 cgi.hotstat.nl
    127.0.0.1 viewstat.hotstat.nl
    127.0.0.1 ad.howstuffworks.com #[RealMedia][SpySweeper.Spy.Cookie]
    127.0.0.1 hpod.com
    127.0.0.1 htepo.com #[Rogue/Suspect Affiliate.sites]
    127.0.0.1 www.htmate2.com #[Cursor.MySpace]
    127.0.0.1 adserver.html.it
    127.0.0.1 click.html.it
    127.0.0.1 ad.httpool.com
    127.0.0.1 aurelius.httpool.com
    127.0.0.1 trajan.httpool.com
    127.0.0.1 hub.com.pl
    127.0.0.1 vip.huigezi.com #[Backdoor.Graybird.Q][W32.Looked.F]
    127.0.0.1 down.hunll.com #[BDS/Agent.ahj.701]
    127.0.0.1 ads.hurra.de
    127.0.0.1 ads2000.hw.net
    127.0.0.1 dserver.hw.net
    127.0.0.1 www.hypercounter.com
    127.0.0.1 www.hypertracker.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 ads.iafrica.com
    127.0.0.1 ads.iboost.com
    127.0.0.1 ads.ibox.bg
    127.0.0.1 www.iceak.net #[Javascript.Exploit]
    127.0.0.1 www.i-clicks.net
    127.0.0.1 hits.icdirect.com #[SunBelt.ICDirect.com]
    127.0.0.1 hitctr01.icdirect.com
    127.0.0.1 tracker.icerocket.com
    127.0.0.1 ictkt.com
    127.0.0.1 ads.idgnow.com.br
    127.0.0.1 banners.idg.com.br
    127.0.0.1 adidm07.idmnet.pl
    127.0.0.1 adidm.idmnet.pl
    127.0.0.1 dot.idot.cz #[WebBug]
    127.0.0.1 bar.iebar8.com #[Adware.Navihelper]
    127.0.0.1 down.iedoumi.com #[Trojan-Downloader.Win32.Delf.bpn]
    127.0.0.1 ieicon.com
    127.0.0.1 www.ieicon.com
    127.0.0.1 ie-exe.com #[AdWare.Win32.Softomate.x]
    127.0.0.1 stats.surfaid.ihost.com
    127.0.0.1 adserver.ig.com.br
    127.0.0.1 i.iinfo.cz
    127.0.0.1 k.iinfo.cz
    127.0.0.1 adserver.ilmessaggero.it
    127.0.0.1 gate.ilogbox.com
    127.0.0.1 stats.ilsemedia.nl
    127.0.0.1 ads.imeem.com
    127.0.0.1 bbn.img.com.ua
    127.0.0.1 content-ads.impactengine.com
    127.0.0.1 www.impregnable.net #[TrojanDownloader.Win32.VB.dw][Trojan.Win32.StartPage.kk]
    127.0.0.1 ads.ims.nl
    127.0.0.1 in2search.org #[JS/TrojanDropper.Tivso.gen]
    127.0.0.1 1.in2search.org
    127.0.0.1 2.in2search.org
    127.0.0.1 dns.in2search.org
    127.0.0.1 c.incomeppc.com
    127.0.0.1 s201.indexstats.com
    127.0.0.1 secure.indexstats.com
    127.0.0.1 stats.indexstats.com #[Analytics Tracking Code]
    127.0.0.1 stats.indextools.com #[eTrust.Tracking.Cookie]
    127.0.0.1 campaign.indieclick.com
    127.0.0.1 optimize.indieclick.com
    127.0.0.1 adcenter.in2.com
    127.0.0.1 juggler.inetinteractive.com
    127.0.0.1 rotator.juggler.inetinteractive.com
    127.0.0.1 banners.inetfast.com
    127.0.0.1 inetlog.ru
    127.0.0.1 www.infineo.de #[Win32/Spy.Banker.AWA]
    127.0.0.1 infospot.infocious.com
    127.0.0.1 ads.infomediainc.com
    127.0.0.1 ads.infospace.com #[ADW_DEALHELPER.C]
    127.0.0.1 msxml.infospace.com #[SpySweeper.Spy.Cookie]
    127.0.0.1 www.infotelsrl.com #[eTrust.Infotel srl]
    127.0.0.1 bimonline.insites.be
    127.0.0.1 ads.intellicast.com #[weather.com]
    127.0.0.1 strtt.interfree.it #[W32.Iberio]
    127.0.0.1 counter.internet.ge
    127.0.0.1 ad.interreklame.de
    127.0.0.1 indiads.com
    127.0.0.1 images.indiads.com
    127.0.0.1 servedby.indiads.com #[RealMedia]
    127.0.0.1 www.imiclk.com
    127.0.0.1 inexplorer.com
    127.0.0.1 local.inexplorer.com
    127.0.0.1 toolbar.inexplorer.com #[Win32/Parite.B]
    127.0.0.1 www.inexplorer.com
    127.0.0.1 www.inpopo.com #[W32.Validin][server down?]
    127.0.0.1 oc.inspectorclick.com
    127.0.0.1 trax.inspectorclick.com
    127.0.0.1 v2.inspectorclick.com
    127.0.0.1 v3.inspectorclick.com
    127.0.0.1 instantbuzz.com #[NOD32.Win32/Adware.InstantBuzz]
    127.0.0.1 www2.instantbuzz.com
    127.0.0.1 www.instantbuzz.com #[Adware.ToolBar.InstantBuzz.a]
    127.0.0.1 media.intelia.it
    127.0.0.1 anm.intelli-direct.com #[IntelliTracker]
    127.0.0.1 info.intelli-direct.com
    127.0.0.1 oxfam.intelli-direct.com
    127.0.0.1 tui.intelli-direct.com
    127.0.0.1 www.intelli-tracker.com
    127.0.0.1 newadserver.interfree.it #[Adcycle]
    127.0.0.1 ad.internetradioinc.com
    127.0.0.1 www.interstats.nl
    127.0.0.1 www.intrastats.com
    127.0.0.1 channels.intwined.com #[Adware/ToolBar.ISearch.c]
    127.0.0.1 search.intwined.com
    127.0.0.1 www.intwined.com #[McAfee.Adware-SSF!Hosts]
    127.0.0.1 ad.investor.bg
    127.0.0.1 www.invinc.com #[Troj/Dloader-J]
    127.0.0.1 www.ip530.com #[Win32/TrojanDownloader.Ani.Gen]
    127.0.0.1 www.ipcounter.de
    127.0.0.1 www.ipstats.de
    127.0.0.1 ad2.ip.ro
    127.0.0.1 ads.ipowerweb.com
    127.0.0.1 content.ipro.com #[WebBug]
    127.0.0.1 adserver.iprom.net
    127.0.0.1 central.iprom.net
    127.0.0.1 www.ipstat.com
    127.0.0.1 a.isohunt.com
    127.0.0.1 adserver1.isohunt.com
    127.0.0.1 ads.isoftmarketing.com
    127.0.0.1 banman.isoftmarketing.com
    127.0.0.1 isvhs.com
    127.0.0.1 ads1.itadnetwork.co.uk
    127.0.0.1 itcompany.com #[SunBelt.Family Cyber Alert]
    127.0.0.1 www.itcompany.com #[Symantec.Spyware.CyberAlert]
    127.0.0.1 ilead.itrack.it
    127.0.0.1 adserver.itsfogo.com
    127.0.0.1 partnerfeed.itsfogo.com
    127.0.0.1 www1.itsun.com
    127.0.0.1 www8.itsun.com
    127.0.0.1 ads.itv.com #[adbureau.net]
    127.0.0.1 barafranca.iwarp.com #[Win32/Spy.ProAgent]
    127.0.0.1 www.iwebmusic.com
    127.0.0.1 ad.jamba.de
    127.0.0.1 ad.jamba.net
    127.0.0.1 ad.jamster.com
    127.0.0.1 www.jcount.com
    127.0.0.1 www.jellycounter.com
    127.0.0.1 www.jethit.com
    127.0.0.1 t1.jfglass.net #[Trojan.Booha]
    127.0.0.1 dl.jiangmin.com #[Adware-BDSearch.dr]
    127.0.0.1 www.jm-my.com #[BackDoor-CXI]
    127.0.0.1 ad.joetec.net
    127.0.0.1 jointmediagroup.com #[Trojan-Spy.Win32.Delf.uc]
    127.0.0.1 jpedownload.joltid.com
    127.0.0.1 ads.joemonster.org
    127.0.0.1 ad.jopenqb.com #[Google.Warning]
    127.0.0.1 banners.joost.com
    127.0.0.1 ads.jossip.com
    127.0.0.1 pastorale.jpn.org #[Win32/Spy.Banker.AHY]
    127.0.0.1 www.joltid.com #[Adware.P2PNetworking][SPYW_PPNETWORK.B]
    127.0.0.1 jslib2.info
    127.0.0.1 www.jstracker.com
    127.0.0.1 ads.jt.org
    127.0.0.1 www.k265.com #[Adware.Borlan]
    127.0.0.1 stat.katalysatormedia.no
    127.0.0.1 kazantip-top.com
    127.0.0.1 www.kazantip-top.com #[HTML/Exploit.VMLFill]
    127.0.0.1 ads.webfever.kadserver.com
    127.0.0.1 ads.deblok.net.kadserver.com
    127.0.0.1 ads.zebest-3000.net.kadserver.com
    127.0.0.1 countus.get.kadserver.com
    127.0.0.1 geo113prod.kadserver.com
    127.0.0.1 get.kadserver.com
    127.0.0.1 scripts.kataweb.it
    127.0.0.1 kazaalite.pl
    127.0.0.1 www.kazaalite.pl #[MHTMLRedir.Exploit]
    127.0.0.1 gavzad.keenspot.com
    127.0.0.1 ad.kewlbox.com
    127.0.0.1 a.keyrun.com #[Adware-TargetAD]
    127.0.0.1 u.keyrun.com
    127.0.0.1 union.keyrun.com
    127.0.0.1 ww.keyrun.com
    127.0.0.1 www1.keyrun.com
    127.0.0.1 www.keyrun.com
    127.0.0.1 banner.kiev.ua
    127.0.0.1 adserve.kikizo.com
    127.0.0.1 union.db.kingsoft.com #[PopupAds]
    127.0.0.1 www.kiss-search.net
    127.0.0.1 kjsc.org #[Win32/Spy.Banker.ANV]
    127.0.0.1 ads.kleinman.com #[Adcycle]
    127.0.0.1 kt3.kliptracker.com
    127.0.0.1 kt4.kliptracker.com
    127.0.0.1 www.kliptracker.com
    127.0.0.1 ads.klixxx.com
    127.0.0.1 www.km-nyc.com #[W32.Lecna.A]
    127.0.0.1 click.kmindex.ru
    127.0.0.1 counter.kmindex.ru
    127.0.0.1 counting.kmindex.ru
    127.0.0.1 www.kmindex.ru
    127.0.0.1 images.kolmic.com
    127.0.0.1 pics.kolmic.com #[Parking Service]
    127.0.0.1 ads.komli.com
    127.0.0.1 www.kompass-intl.com #[Win32/Adware.Toolbar.PowerSearch]
    127.0.0.1 de.komtrack.com
    127.0.0.1 koolbar.net #[Adware Bundler][ADW_KOOLBAR.A]
    127.0.0.1 www.koolbar.net #[eTrust.AutoSearch]
    127.0.0.1 sitestat.kpn-is.nl
    127.0.0.1 kuaiso.com #[AdWare.Win32.Kuaiso.a][server down?]
    127.0.0.1 toolsbar.kuaiso.com #[Adware.Kuaiso]
    127.0.0.1 www.kuaiso.com
    127.0.0.1 kukkakreck.com #[Rogue/Suspect Affiliate]
    127.0.0.1 kustusch.com #[Javascript.Exploit]
    127.0.0.1 adserver.kyoceramita-europe.com
    127.0.0.1 www.kz163.net #[Win32/Virut]
    127.0.0.1 laconicsoftware.org #[Malicious.Links.Codec]
    127.0.0.1 alwaysforfriend.land.ru #[Trojan-Downloader.Win32.Banload.bdp]
    127.0.0.1 www.animacoes.land.ru #[Downloader.Swif.B]
    127.0.0.1 a.lakequincy.com
    127.0.0.1 www.latinbusca.com #[Adware-CommanderNET]
    127.0.0.1 ads.lawnsite.com
    127.0.0.1 layer-ads.de
    127.0.0.1 www.layer-ads.de
    127.0.0.1 fun.lbn.ru
    127.0.0.1 business.lbn.ru
    127.0.0.1 www.business.lbn.ru
    127.0.0.1 www.fun.lbn.ru
    127.0.0.1 234.media.lbn.ru
    127.0.0.1 banner.lbs.km.ru
    127.0.0.1 iframe.leadacceptor.com
    127.0.0.1 leakedcelebvideos.com #[Win32/TrojanDownloader.Agent.BCZ]
    127.0.0.1 www.leakedcelebvideos.com
    127.0.0.1 pubs.lemonde.fr
    127.0.0.1 www.leopardsearch.com
    127.0.0.1 www.letzebuerg.biz
    127.0.0.1 ts1.lexmark.com
    127.0.0.1 leythosthestalker.com
    127.0.0.1 www.leythosthestalker.com
    127.0.0.1 adserver.libero.it
    127.0.0.1 adv-banner.libero.it
    127.0.0.1 phpads.lime.com
    127.0.0.1 link.ru
    127.0.0.1 link.link.ru
    127.0.0.1 ads.linki.nl
    127.0.0.1 www.linkads.de
    127.0.0.1 linkbuddies.com
    127.0.0.1 banners.linkbuddies.com
    127.0.0.1 www.linkbuddies.com
    127.0.0.1 www.linkcounter.com
    127.0.0.1 linksexchange.net
    127.0.0.1 linkexchange.ru
    127.0.0.1 web.linkexchange.ru
    127.0.0.1 www.linkexchange.ru
    127.0.0.1 link4link.com
    127.0.0.1 plus.link4link.com
    127.0.0.1 www.links4trade.com
    127.0.0.1 escati.linkopp.net
    127.0.0.1 www.linkopp.net
    127.0.0.1 click.linkstattrack.com #[SiteAdvisor.linkstattrack.com]
    127.0.0.1 linktarget.com
    127.0.0.1 banner.linktech.cn
    127.0.0.1 www.linkworth.com
    127.0.0.1 ads.linuxjournal.com
    127.0.0.1 www.liveads.org
    127.0.0.1 livecounter.net
    127.0.0.1 www.livecounter.net
    127.0.0.1 image.adv.livedoor.com
    127.0.0.1 js.livehelper.com
    127.0.0.1 newbrowse.livehelper.com
    127.0.0.1 ads.livescore.com
    127.0.0.1 traffic.liveuniversenetwork.com
    127.0.0.1 trafficcdn.liveuniversenetwork.com
    127.0.0.1 traffic.livevideo.com
    127.0.0.1 broadent.vo.llnwd.net
    127.0.0.1 aa.llsging.com #[Javascript.Exploit]
    127.0.0.1 lw.lnkworld.com
    127.0.0.1 omnituretrack.local.com
    127.0.0.1 www.lojastal.com.br #[Win32/Spy.Banker.ANV]
    127.0.0.1 lol.to #[HTML/Exploit.Mht]
    127.0.0.1 err.lolipop.jp
    127.0.0.1 www.lookde5.com #[W32.Looked]
    127.0.0.1 lookoutsoft.net #[SiteAdvisor.lookoutsoft.net]
    127.0.0.1 screensavers.lookoutsoft.net
    127.0.0.1 a.loomia.com #[Tracking.Cookie]
    127.0.0.1 www.lookoutsoft.net #[AdWare.Win32.WinAD.b]
    127.0.0.1 www.lords-of-havoc.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
    127.0.0.1 ermei.loveyoushipin.com #[Google.Warning]
    127.0.0.1 niang.loveyoushipin.com
    127.0.0.1 hexusads.fluent.ltd.uk
    127.0.0.1 lunahodiki.com #[Javascript.Exploit]
    127.0.0.1 www.luxemil.com #[Google.Warning]
    127.0.0.1 ads-apsa.lvz-online.de
    127.0.0.1 www.lynxtrack.com
    127.0.0.1 m2k.ru
    127.0.0.1 ad.m5prod.net
    127.0.0.1 ad.m-adx.com
    127.0.0.1 media.m-adx.com
    127.0.0.1 www.macrcmedia.com #[Exploit.ANI]
    127.0.0.1 www.macrcmedia.net
    127.0.0.1 ads.madisonavenue.com
    127.0.0.1 resource.madisonavenue.com
    127.0.0.1 textads.madisonavenue.com
    127.0.0.1 banner.magicboxcasino.com #[AdWare.Win32.Casino.w]
    127.0.0.1 msn-sexoweb.mail15.com #[Win32/Spy.Banker.ANV]
    127.0.0.1 humortadela.mail15.com #[Win32/Spy.Banker.ANV]
    127.0.0.1 www.novogerador.mail15.com
    127.0.0.1 www.uolcard.mail15.com #[Trojan-Spy.Win32.Banker.ark]
    127.0.0.1 voegol.mail15.com #[Win32/Spy.Banker.ANV]
    127.0.0.1 humortadela0.mail333.com #[Win32/Spy.Banker.AHY]
    127.0.0.1 destino-gol.mail333.com #[Win32/Spy.Banker.BCK]
    127.0.0.1 www.messengerbeta.mail333.com #[Win32/Spy.Banker.BCK]
    127.0.0.1 mair.net #[Realtracker]
    127.0.0.1 ads.marketing-internet.com
    127.0.0.1 marketing-know-how.com #[TR/Dldr.iBill.V]
    127.0.0.1 aw.masterstats.com
    127.0.0.1 erotic.masterstats.com
    127.0.0.1 image.masterstats.com
    127.0.0.1 link.masterstats.com
    127.0.0.1 vw.masterstats.com #[Ewido.TrackingCookie.Masterstats]
    127.0.0.1 mbe.ru #[adrevolver]
    127.0.0.1 ads.affiliates.match.com
    0
  3. aldofadi1968 Messages postés 3 Statut Membre
     

    RE BONJOUR

    VOILA LE RAPPORT QUE TU MA DEMANDE

    SmitFraudFix v2.378

    Rapport fait à 3:59:29,56, 26/11/2008
    Executé à partir de C:\Documents and Settings\Administrateur.48CB47796B37437\Mes documents\Downloads\Programs\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Le type du système de fichiers est NTFS
    Fix executé en mode sans echec

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

    »»»»»»»»»»»»»»»»»»»»»»»» hosts

    127.0.0.1 localhost

    »»»»»»»»»»»»»»»»»»»»»»»» VACFix

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

    S!Ri's WS2Fix: LSP not Found.

    »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

    GenericRenosFix by S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

    C:\autorun.inf supprimé

    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix

    404Fix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri

    »»»»»»»»»»»»»»»»»»»»»»»» RK

    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
    HKLM\SYSTEM\CS3\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
    HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0

    »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"=""

    »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

    Nettoyage terminé.

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Fin

    JE TE REMERCIE.
    0
  4. geoffrey5 Messages postés 14008 Statut Contributeur sécurité 10
     
    Salut !!

    je ne t ai pas demandé de faire MsnFix et toolbarSD !!

    Et je vois aussi que tu n as pas fais RHosts avant de faire l option 2 de SmitfraudFix :s

    ▶ Télécharge hijackthis

    ▶ Un tutoriel est à ta disposition sur ce site pour pouvoir l'utiliser.

    ▶ Poste le rapport obtenu dans le bloc note dans ta prochaine réponse.

    Comment copier/coller le rapport :

    ▶ Quand tu as le rapport à l écran, tu fais ctrl A pour "sélectionner tout" puis ctrl C pour "copier".

    ▶ ensuite tu viens sur le forum pour me répondre et tu fais ctrl V pour "coller" le rapport.
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Utilisateur anonyme
     
    Bonsoir,
    Pourquoi faire restaurer le fichier host?

    L'internaute avait une très bonne protection vis à vis des sites malsains...
    ++
    0
  7. geoffrey5 Messages postés 14008 Statut Contributeur sécurité 10
     
    Salut Cyril !!

    Parce que je vois que dans le rapport de SmitfraudFix, les fichiers hosts sont corrompus :

    Fichier hosts corrompu !

    127.0.0.1 hk.digitaltrends.com
    127.0.0.1 microsoft.com.org
    127.0.0.1 www.www.microsoft.com.org
    127.0.0.1 legal-at-spybot.info
    127.0.0.1 www.legal-at-spybot.info

    Alors plutot que d avoir un rapport de 2km, il vaut mieux restaurer les fichiers hosts avant, non ??
    0
    1. Utilisateur anonyme
       
      Re,
      Il n'est pas corrompu.

      Du moment que le fichier Host n'est pas conforme à celui originel de Microsoft, Smitfraudfix le détecte comme corrompu.
      Seulement,

      127.0.0.1 legal-at-spybot.info
      127.0.0.1 www.legal-at-spybot.info 

      Spybot.

      127.0.0.1 hk.digitaltrends.com
      127.0.0.1 microsoft.com.org
      127.0.0.1 www.www.microsoft.com.org 

      Autres entrées utiles.

      On voit clairement que les URLs des sites malsains sont bloquées. ( avec un commentaire d'ailleurs )

      127.0.0.1 leakedcelebvideos.com #[Win32/TrojanDownloader.Agent.BCZ] 


      Il ne fallait donc pas restaurer le fichier host ;)

      +
      0