Trojan / Fichier Hijack Fermé

Question

Bonjour,

Tout d'abord merci aux pros de ce forum qui veulent bien consacrer du temps pour aider les nazes comme moi ;-)

J'ai un (ou plus...) trojan sur mon PC. Impossible de retouver le nom, a-squared me l'a identifié mais l'a supprimé, mal je suppose mais moralité je n'ai plus le nom (pas de le fichier journal non plus.) Parmi les symptomes, le firewall windows se désactive en permanence. Je viens de quitter avast pour antivir.

J'ai lancé Hijack et voici le résultat. Si quelqu'un peut m'aider, merci d'avance !

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:59:05, on 01/12/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe
C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe
C:\Program Files\Acer\OrbiCam10\OrbiCam.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\a-squared Anti-Malware\a2guard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\System32undll32.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\ehome\ehmsas.exe
C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
C:\Users\HENRII~1\AppData\Local\Temp\RtkBtMnt.exe
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Henri III\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: QFX Software KeyScrambler - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - C:\Program Files\KeyScrambler\KeyScramblerIE.dll (file missing)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [AcerOrbicamRibbon] "C:\Program Files\Acer\OrbiCam10\OrbiCam.exe" /hide
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32
vsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [a-squared] "C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2guard.exe" /d=60
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [?????????] ??????????????e
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix: 
O15 - Trusted Zone: https://www.6play.fr/m6
O15 - Trusted Zone: http://*.professionpolitique.info
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: eNetHook.dll
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

archet9 · Answer

J AMAIS VU CETTE LIGNE.......

--O4 - HKCU\..\Run: [?????????] ??????????????e 

Télécharge SmitfraudFix (de de S!Ri, balltrap34 et moe31) : 
http://siri.urz.free.fr/Fix/SmitfraudFix.exe ou http://www.geekstogo.com/forum/files/file/6-smitfraudfix/ 

- Enregistre-le sur le bureau 

- Double-clique sur SmitfraudFix.exe et choisis l'option 1 puis Entrée 

- Un rapport sera généré, poste-le dans ta prochaine réponse. 

[*] process.exe est détecté par certains antivirus comme étant un risktool. Il ne s'agit pas d'un virus mais d'un utilitaire destiné à mettre fin à des processus.[*] 

** Ne fais l'étape 2 que si on te le demande, on doit d'abord examiner le premier rapport de 
a+

Antonio Giacomo Stradivari, souvent appelé Stradivarius (Crémone, 1644 - Crémone, 18 décembre 1737 
Le Soil (1714), considéré par beaucoup comme le meilleur instrument du monde.
peu de temps avant sa mort il cherchait encore...

grosquick · Answer

Merci pour cette réponse rapide. J'ai lancé l'option 1 et voici le rapport. Merci.

C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe
C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe
C:\Program Files\Acer\OrbiCam10\OrbiCam.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\a-squared Anti-Malware\a2guard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\System32undll32.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\ehome\ehmsas.exe
C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
C:\Users\HENRII~1\AppData\Local\Temp\RtkBtMnt.exe
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\program files\avira\antivir personaledition classic\avcenter.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\cscript.exe
C:\Windows\system32\DllHost.exe

grosquick · Answer

Malheureusement c'est tout ce que j'obtiens. Lorsque j'ai lancé la 1ère fois j'ai eu une fenetre C: qui s'est affichée avec plusieurs lignes "accès refusé" mais je n'ai pas pu tout lire. Ensuite en lançant policies.exe ca a débloqué la situation et j'ai eu enfin accès à l'écran bleu présentant le menu. J'ai choisi l'option 1 et ca a généré dans le dossier un fichier process.txt qui contenait ce que j'ai collé ci-dessous.

Y a t il une autre manip à faire pour avoir le rapport complet ?

Merci de ton aide...

grosquick · Answer

Merci pour ton suivi !

J'ai lancé findykill. Avec la fonction recherche, dans la fenetre DOS, j'ai une série de 'accès refusé' puis 'fichier introuvable' puis de nouveau une série de 'accès refusé'. 

Voilà, je ne sais pas si cela veut dire que je suis propre maintenant...

A+

grosquick · Answer

Bonsoir, merci pour les précisions.

J'ai fait exactement ce que tu m'as dit, je n'ai Elibagla intallé sur mon PC et au bout du compte par de rapport à la racine de C ni ailleurs... Décidemment, je ne sais que faire...

grosquick · Answer

Tout à fait, j'ai fait une recherche totale avec l'outil Rechercher car franchement un log ça se trouve normalement et là, rien du tout !

Je suis dégouté !

grosquick · Answer

Et bien je crois que j'avance, voici le rapport complet cette fois de SmitFraudFix. Merci !

SmitFraudFix v2.381

Scan done at  0:53:18,76, 06/12/2008
Run from C:\Users\Henri III\Desktop\Alex\SmitfraudFix
OS: Microsoft Windows [version 6.0.6001] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Soft4Ever\looknstop\LnsSvcVista.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Windows\system32\svchost.exe
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
C:\Acer\Empowering Technology\eNet\eNet Service.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Acer\Mobility Center\MobilityService.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
C:\Windows\system32\WUDFHost.exe
C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe
C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe
C:\Program Files\Acer\OrbiCam10\OrbiCam.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\a-squared Anti-Malware\a2guard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Windows\System32undll32.exe
C:\Program Files\Soft4Ever\looknstop\looknstop.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Users\HENRII~1\AppData\Local\Temp\RtkBtMnt.exe
C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
C:\Windows\ehome\ehmsas.exe
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Windows\system32\wbem\unsecapp.exe
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Windows\system32	askeng.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\conime.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts

hosts file corrupted !

127.0.0.1	www.legal-at-spybot.info
127.0.0.1	legal-at-spybot.info

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Henri III


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\HENRII~1\AppData\Local\Temp


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Henri III\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\Users\HENRII~1\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components
 
 

»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, following keys are not inevitably infected!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, following keys are not inevitably infected!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, following keys are not inevitably infected!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, following keys are not inevitably infected!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="eNetHook.dll"
"LoadAppInit_DLLs"=dword:00000001


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\Windows\system32\userinit.exe,"


»»»»»»»»»»»»»»»»»»»»»»»» RK



»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{743FF1C7-4E37-4CCE-A04F-F935BA70DE94}: DhcpNameServer=212.27.40.241 212.27.40.240


»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End

grosquick · Answer

Alors, voici le rapport SmitFraudFix 

SmitFraudFix v2.381

Scan done at  9:12:49,75, 06/12/2008
Run from C:\Users\Henri III\Desktop\SmitfraudFix
OS: Microsoft Windows [version 6.0.6001] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1       localhost
::1             localhost
127.0.0.1	babe.the-killer.bz
127.0.0.1	www.babe.the-killer.bz
127.0.0.1	babe.k-lined.com
127.0.0.1	www.babe.k-lined.com
127.0.0.1	did.i-used.cc
127.0.0.1	www.did.i-used.cc
127.0.0.1	coolwwwsearch.com
127.0.0.1	www.coolwwwsearch.com
127.0.0.1	coolwebsearch.com
127.0.0.1	www.coolwebsearch.com
127.0.0.1	hi.studioaperto.net
127.0.0.1	www.hi.studioaperto.net
127.0.0.1	wazzupnet.com
127.0.0.1	www.wazzupnet.com
127.0.0.1	gueb.com
127.0.0.1	www.gueb.com
127.0.0.1	kabex.com
127.0.0.1	www.kabex.com
127.0.0.1	hityou.com
127.0.0.1	www.hityou.com
127.0.0.1	miosearch.com
127.0.0.1	www.miosearch.com
127.0.0.1	213.131.225.2
127.0.0.1	blue-elefant.com
127.0.0.1	www.blue-elefant.com
127.0.0.1	babeweb.de
127.0.0.1	www.babeweb.de
127.0.0.1	start-seite.com
127.0.0.1	www.start-seite.com
127.0.0.1	sexolymp.com
127.0.0.1	www.sexolymp.com
127.0.0.1	toriii.cc
127.0.0.1	www.toriii.cc
127.0.0.1	xtipp.de
127.0.0.1	www.xtipp.de
127.0.0.1	urawa.cool.ne.jp
127.0.0.1	777search.com
127.0.0.1	www.777search.com
127.0.0.1	ace-webmaster.com
127.0.0.1	www.ace-webmaster.com
127.0.0.1	aifind.info
127.0.0.1	www.aifind.info
127.0.0.1	amateurliveshow.com
127.0.0.1	www.amateurliveshow.com
127.0.0.1	anarchylolita.com
127.0.0.1	www.anarchylolita.com
127.0.0.1	anarchyporn.com
127.0.0.1	approvedlinks.com
127.0.0.1	www.approvedlinks.com
127.0.0.1	cantfind.com
127.0.0.1	www.cantfind.com
127.0.0.1	castingsamateur.com
127.0.0.1	www.castingsamateur.com
127.0.0.1	cyberrape.com
127.0.0.1	www.cyberrape.com
127.0.0.1	dialerclub.com
127.0.0.1	www.dialerclub.com
127.0.0.1	megago.com
127.0.0.1	exit.megago.com
127.0.0.1	www.megago.com
127.0.0.1	fastmetasearch.com
127.0.0.1	www.fastmetasearch.com
127.0.0.1	findwhatevernow.com
127.0.0.1	www.findwhatevernow.com
127.0.0.1	globesearch.com
127.0.0.1	www.globesearch.com
127.0.0.1	hotfreebies.com
127.0.0.1	www.hotfreebies.com
127.0.0.1	krankin.com
127.0.0.1	www.krankin.com
127.0.0.1	begin2search.com
127.0.0.1	www.begin2search.com
127.0.0.1	mainstreamdollars.com
127.0.0.1	www.mainstreamdollars.com
127.0.0.1	live.sex-explorer.com
127.0.0.1	www.live.sex-explorer.com
127.0.0.1	loveadot.com
127.0.0.1	www.loveadot.com
127.0.0.1	megaseek.net
127.0.0.1	www.megaseek.net
127.0.0.1	mixsearch.com
127.0.0.1	www.mixsearch.com
127.0.0.1	munky.com
127.0.0.1	www.munky.com
127.0.0.1	newtopsites.com
127.0.0.1	www.newtopsites.com
127.0.0.1	noblindlinks.com
127.0.0.1	www.noblindlinks.com
127.0.0.1	babenet.com
127.0.0.1	r.babenet.com
127.0.0.1	www.babenet.com
127.0.0.1	searchresult.net
127.0.0.1	www.searchresult.net
127.0.0.1	sexarena.org
127.0.0.1	www.sexarena.org
127.0.0.1	skeech.com
127.0.0.1	www.skeech.com
127.0.0.1	superwp.by.ru
127.0.0.1	sureseeker.com
127.0.0.1	www.sureseeker.com
127.0.0.1	wethere.com
127.0.0.1	www.wethere.com
127.0.0.1	wowsearch.org
127.0.0.1	www.wowsearch.org
127.0.0.1	xxx.com
127.0.0.1	www.xxx.com
127.0.0.1	art-xxx.com
127.0.0.1	websearch.com
127.0.0.1	www.websearch.com
127.0.0.1	firehunt.com
127.0.0.1	www.firehunt.com
127.0.0.1	partner23.firehunt.com
127.0.0.1	screensaver.it
127.0.0.1	www.screensaver.it
127.0.0.1	cliks.org
127.0.0.1	www.cliks.org
127.0.0.1	xads.cliks.org
127.0.0.1	xwebsearch.biz
127.0.0.1	www.xwebsearch.biz
127.0.0.1	znext.com
127.0.0.1	www.znext.com
127.0.0.1	rawtocash.net
127.0.0.1	www.rawtocash.net
127.0.0.1	7search.com
127.0.0.1	www.7search.com
127.0.0.1	zestyfind.com
127.0.0.1	www.zestyfind.com
127.0.0.1	ntcor.com
127.0.0.1	www.ntcor.com
127.0.0.1	dev.ntcor.com
127.0.0.1	xrenoder.com
127.0.0.1	www.xrenoder.com
127.0.0.1	search.xrenoder.com
127.0.0.1	193.125.201.50
127.0.0.1	allcybersearch.com
127.0.0.1	www.allcybersearch.com
127.0.0.1	tinybar.com
127.0.0.1	www.tinybar.com
127.0.0.1	topsite.us
127.0.0.1	www.topsite.us
127.0.0.1	topsites.us
127.0.0.1	www.topsites.us
127.0.0.1	topsitez.us
127.0.0.1	www.topsitez.us
127.0.0.1	true-counter.com
127.0.0.1	www.true-counter.com
127.0.0.1	out.true-counter.com
127.0.0.1	cnetadd.com
127.0.0.1	www.cnetadd.com
127.0.0.1	okmmm.com
127.0.0.1	www.okmmm.com
127.0.0.1	008k.com
127.0.0.1	www.008k.com
127.0.0.1	00hq.com
127.0.0.1	www.00hq.com
127.0.0.1	1-domains-registrations.com
127.0.0.1	www.1-domains-registrations.com
127.0.0.1	100sexlinks.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	1sexparty.com
127.0.0.1	www.1sexparty.com
127.0.0.1	1stpagehere.com
127.0.0.1	www.1stpagehere.com
127.0.0.1	2020search.com
127.0.0.1	www.2020search.com
127.0.0.1	24teen.com
127.0.0.1	www.24teen.com
127.0.0.1	36site.com
127.0.0.1	www.36site.com
127.0.0.1	4corn.net
127.0.0.1	www.4corn.net
127.0.0.1	66.117.14.138
127.0.0.1	66.250.74.150
127.0.0.1	777top.com
127.0.0.1	www.777top.com
127.0.0.1	8ad.com
127.0.0.1	www.8ad.com
127.0.0.1	aboutclicker.com
127.0.0.1	www.aboutclicker.com
127.0.0.1	abrp.net
127.0.0.1	www.abrp.net
127.0.0.1	accessthefuture.net
127.0.0.1	www.accessthefuture.net
127.0.0.1	acemedic.com
127.0.0.1	www.acemedic.com
127.0.0.1	actionbreastcancer.org
127.0.0.1	www.actionbreastcancer.org
127.0.0.1	activexupdate.com
127.0.0.1	www.activexupdate.com
127.0.0.1	adamsupportgroup.org
127.0.0.1	www.adamsupportgroup.org
127.0.0.1	adasearch.com
127.0.0.1	www.adasearch.com
127.0.0.1	adipics.com
127.0.0.1	www.adipics.com
127.0.0.1	adspics.com
127.0.0.1	www.adspics.com
127.0.0.1	adult-engine-search.com
127.0.0.1	www.adult-engine-search.com
127.0.0.1	adult-erotic-guide.net
127.0.0.1	www.adult-erotic-guide.net
127.0.0.1	adult-friends-finder.net
127.0.0.1	www.adult-friends-finder.net
127.0.0.1	adulthyperlinks.com
127.0.0.1	www.adulthyperlinks.com
127.0.0.1	adulttds.com
127.0.0.1	www.adulttds.com
127.0.0.1	exaccess.ru
127.0.0.1	www.exaccess.ru
127.0.0.1	advert.exaccess.ru
127.0.0.1	agentstudio.com
127.0.0.1	africaspromise.org
127.0.0.1	akril.com
127.0.0.1	alcatel.ws
127.0.0.1	alfa-search.com
127.0.0.1	all-inet.com
127.0.0.1	allabtcars.com
127.0.0.1	allabtjeeps.com
127.0.0.1	allhyperlinks.com
127.0.0.1	allinternetbusiness.com
127.0.0.1	almarvideos.com
127.0.0.1	amandamountains.com
127.0.0.1	amigeek.com
127.0.0.1	amisbusiness.com
127.0.0.1	analmovi.com
127.0.0.1	anin.org
127.0.0.1	annaromeo.com
127.0.0.1	antrocity.com
127.0.0.1	anything4health.com
127.0.0.1	apsua.com
127.0.0.1	aregay.com
127.0.0.1	arheo.com
127.0.0.1	arizonaweb.org
127.0.0.1	armitageinn.com
127.0.0.1	art-func.com
127.0.0.1	artachnid.com
127.0.0.1	asiankingkong.com
127.0.0.1	ass-gals.com
127.0.0.1	athenrye.com
127.0.0.1	avian-ads.com
127.0.0.1	ayakawamura.com
127.0.0.1	ayumitaniguchi.com
127.0.0.1	bannedhost.net
127.0.0.1	barbudafarms.com
127.0.0.1	barnandfence.com
127.0.0.1	batsearch.com
127.0.0.1	baygraphicsllc.com
127.0.0.1	bb-search.com
127.0.0.1	bbbsearch.com
127.0.0.1	bedhome.com
127.0.0.1	bediadance.com
127.0.0.1	bellabasketsfl.com
127.0.0.1	bernaolatwin.com
127.0.0.1	best-counter.com
127.0.0.1	best-hardpics.com
127.0.0.1	best-winning-casino.com
127.0.0.1	bestcrawler.com
127.0.0.1	bestfor.ru
127.0.0.1	bestporngate.com
127.0.0.1	bestxporno.com
127.0.0.1	blackjack-free.net
127.0.0.1	blender.xu.pl
127.0.0.1	bodaciousbabette.com
127.0.0.1	boobdoll.com
127.0.0.1	boobsandtits.com
127.0.0.1	boobsclub.com
127.0.0.1	boredlife.com
127.0.0.1	bowlofogumbo.com
127.0.0.1	bradcoem.org
127.0.0.1	brandiyoung.com
127.0.0.1	brookeburn.com
127.0.0.1	bucps.com
127.0.0.1	burgerkingbigscreen.com
127.0.0.1	buscards.net
127.0.0.1	bustyrussell.com
127.0.0.1	buttejazz.org
127.0.0.1	buyselldomain.net
127.0.0.1	calcioturris.com
127.0.0.1	canberracricketcoaching.com
127.0.0.1	candycantaloupes.com
127.0.0.1	careers.dulcineasystems.net
127.0.0.1	carsands.com
127.0.0.1	carsrentals.net
127.0.0.1	casino-gambling-1.net
127.0.0.1	casino-gambling-2.net
127.0.0.1	casino-onlines.net
127.0.0.1	casino.com.free.game.pogo.gratisdownloads.nl
127.0.0.1	casino2win.net
127.0.0.1	casinomidas.net
127.0.0.1	casinonline.net
127.0.0.1	catallogue.com
127.0.0.1	catsss.da.ru
127.0.0.1	caxa.ru
127.0.0.1	cclebali.org
127.0.0.1	ceewawires.org
127.0.0.1	certumgroup.com
127.0.0.1	chelancatering.com
127.0.0.1	childrenvilla.com
127.0.0.1	chips-4-free.com
127.0.0.1	chrisswasey.com
127.0.0.1	chriswallace.net
127.0.0.1	ckick4thumbs.com
127.0.0.1	clackamasliteraryreview.com
127.0.0.1	clearsearch.cc
127.0.0.1	clearsearch.net
127.0.0.1	clickaire.com
127.0.0.1	clickyestoenter.net
127.0.0.1	clrsch.com
127.0.0.1	cmtapestry.com
127.0.0.1	cool-homepage.co
127.0.0.1	cool-homepage.com
127.0.0.1	cool-search.net
127.0.0.1	cool-search.netfartpost.com
127.0.0.1	cool-web-search.com
127.0.0.1	coolfetishsite.com
127.0.0.1	coolfreehost.com
127.0.0.1	coolfreepage.com
127.0.0.1	coolfreepages.com
127.0.0.1	coolmoneysearch.com
127.0.0.1	coolpornsearch.com
127.0.0.1	coolsearcher.info
127.0.0.1	coolwebsearsh.com
127.0.0.1	copmtraine.com
127.0.0.1	couldnotfind.com
127.0.0.1	count-all.com
127.0.0.1	cracks.me.uk
127.0.0.1	creamedcutties.com
127.0.0.1	creditsearchonline.com
127.0.0.1	crestring.com
127.0.0.1	crooder.com
127.0.0.1	curvedspaces.com
127.0.0.1	cvs.jps.ru
127.0.0.1	cvsymphony.com
127.0.0.1	cydom.com
127.0.0.1	daily-gals.com
127.0.0.1	dancingbabycd.com
127.0.0.1	datanotary.com
127.0.0.1	datareco.com
127.0.0.1	davemarshall.org
127.0.0.1	dcfitusa.com
127.0.0.1	defaultsearch.net
127.0.0.1	desarrollocreativo.com
127.0.0.1	develip.com
127.0.0.1	dewis.spb.ru
127.0.0.1	dewis.us
127.0.0.1	df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
127.0.0.1	dietpills4free.com
127.0.0.1	dietpussy.com
127.0.0.1	digistreamsa.com
127.0.0.1	dionforvalleycouncil.org
127.0.0.1	doctorwaldron.com
127.0.0.1	document-not-found.pornpic.org
127.0.0.1	doggyaction.com
127.0.0.1	domain-your-registration.com
127.0.0.1	domains-for-you-online.com
127.0.0.1	domains2003.net
127.0.0.1	domkrat.com
127.0.0.1	dp-host.com
127.0.0.1	dragqueen.gay-clan.com
127.0.0.1	drug-sources-exposed.com
127.0.0.1	drvvv.com
127.0.0.1	dutch-sex.com
127.0.0.1	dvdbank.org
127.0.0.1	e-localad.com
127.0.0.1	e-plus.cc
127.0.0.1	e-websitesolutions.com
127.0.0.1	eases.net
127.0.0.1	easy-search.net
127.0.0.1	easycategories.com
127.0.0.1	ecosrioplatenses.org
127.0.0.1	ecstasyporn.net
127.0.0.1	eikokoike.com
127.0.0.1	epornsex.com
127.0.0.1	euuu.com
127.0.0.1	evidence-detector.biz
127.0.0.1	evilspidercomics.com
127.0.0.1	ewebsearch.net
127.0.0.1	findloss.com
127.0.0.1	excellentsckin.com
127.0.0.1	extremeseek.net
127.0.0.1	faithstevens.com
127.0.0.1	fantasiewelten.com
127.0.0.1	farmsteadbandb.com
127.0.0.1	fartpost.com
127.0.0.1	fastwebfinder.com
127.0.0.1	faxporn.com
127.0.0.1	fickenisgeil.de
127.0.0.1	finance-loans.com
127.0.0.1	find-itnow.com
127.0.0.1	find-uk-health.co.uk
127.0.0.1	find4u.net
127.0.0.1	findit-now.com
127.0.0.1	findthesite.com
127.0.0.1	findthewebsiteyouneed.com
127.0.0.1	www.findthewebsiteyouneed.com
127.0.0.1	fionasteel.com
127.0.0.1	firstbookmark.net
127.0.0.1	fitness-free.com
127.0.0.1	foodvacations.net
127.0.0.1	forex.jps.ru
127.0.0.1	forexcredit.com
127.0.0.1	forexcredit.ru
127.0.0.1	formingfusions.com
127.0.0.1	forsythfire.net
127.0.0.1	forthline.com
127.0.0.1	free-chipes.com
127.0.0.1	free-hit.com
127.0.0.1	free-pics-and-movies.com
127.0.0.1	free-sex-movie-clips.net
127.0.0.1	free4porno.net
127.0.0.1	free64all.com
127.0.0.1	freebookmark.net
127.0.0.1	freebookmarks.net
127.0.0.1	freecategories.com
127.0.0.1	freecoolhost.com
127.0.0.1	freerbhost.com
127.0.0.1	freeshemalepics.net
127.0.0.1	freeyaho.com
127.0.0.1	freshseek.com
127.0.0.1	freshteensite.com
127.0.0.1	gabrielscott.com
127.0.0.1	galpostgirls.com
127.0.0.1	gals-for-free.com
127.0.0.1	gambling-online4you.com
127.0.0.1	gameterror.net
127.0.0.1	gay50.com
127.0.0.1	generalsmeltingofcanada.com
127.0.0.1	geteens.com
127.0.0.1	getpicshere.com
127.0.0.1	gimmezamore.com
127.0.0.1	gimnasiaer.com
127.0.0.1	girls-porn-life.com
127.0.0.1	glbdf.org
127.0.0.1	global-finder.com
127.0.0.1	globe-finder.cc
127.0.0.1	globe-finder.com
127.0.0.1	gocybersearch.com
127.0.0.1	golftennis.net
127.0.0.1	good-mortgages-calculator.com
127.0.0.1	good-mortgages.net
127.0.0.1	goodsexs.com
127.0.0.1	googlebar.jps.ru
127.0.0.1	googlf.com
127.0.0.1	gradforum.org
127.0.0.1	gratis-porn-movie.com
127.0.0.1	gratis-pornopics.com
127.0.0.1	guzzycats.com
127.0.0.1	gzphoenix.com
127.0.0.1	hallnetaccolade.com
127.0.0.1	hand-book.com
127.0.0.1	happyanal.com
127.0.0.1	hard-gals.com
127.0.0.1	hardbodytgp.com
127.0.0.1	hardcoreover.com
127.0.0.1	hardloved.com
127.0.0.1	hardwareseek.net
127.0.0.1	harukaigawa.com
127.0.0.1	hccsolanonapa.org
127.0.0.1	health-protein.com
127.0.0.1	hentai4u.net
127.0.0.1	here4search.com
127.0.0.1	heyrichy.com
127.0.0.1	hi-search.com
127.0.0.1	hiddenguides.com
127.0.0.1	hitlistlyrics.com
127.0.0.1	holidayautostr.com
127.0.0.1	homemortage.ws
127.0.0.1	hostssp.com
127.0.0.1	hot-cartoon-sex.anime.american-teens.net
127.0.0.1	hotbookmark.com
127.0.0.1	hotels-list.net
127.0.0.1	hotelxxxcams.com
127.0.0.1	hotpopup.com
127.0.0.1	hotsearchbox.com
127.0.0.1	hotsex-series.com
127.0.0.1	hotstartpage.com
127.0.0.1	hqsex.biz
127.0.0.1	hugeporn4u.net
127.0.0.1	hunacsa.com
127.0.0.1	hupacasath.com
127.0.0.1	hzsx.com
127.0.0.1	icansearch.net
127.0.0.1	idgsearch.com
127.0.0.1	ie-search.com
127.0.0.1	incestporngate.com
127.0.0.1	infodigger.net
127.0.0.1	infoglobus.com
127.0.0.1	inherhole.com
127.0.0.1	insertthiscock.com
127.0.0.1	insurance-flood.net
127.0.0.1	insuranceall.net
127.0.0.1	internetsearch.ru
127.0.0.1	ionichost.com
127.0.0.1	ionomist.com
127.0.0.1	ipsex.net
127.0.0.1	itsanal.com
127.0.0.1	itseasy.us
127.0.0.1	iweb-commerce.com
127.0.0.1	iwebland.com
127.0.0.1	jeannineoldfield.com
127.0.0.1	jethomepage.com
127.0.0.1	jetseeker.com
127.0.0.1	jmhgallery.org
127.0.0.1	joannelatham.com
127.0.0.1	judin.ru
127.0.0.1	junkysex.com
127.0.0.1	karleyt.narod.ru
127.0.0.1	kathisomers.com
127.0.0.1	kazaa-lite.ws
127.0.0.1	keithgreenpro.com
127.0.0.1	kenmccaul.com
127.0.0.1	kilosex.com
127.0.0.1	kimhines.com
127.0.0.1	kinoru.com
127.0.0.1	ksdspups.org
127.0.0.1	landrape.com
127.0.0.1	lauraroebuck.com
127.0.0.1	leannalovelace.com
127.0.0.1	lesobank.ru
127.0.0.1	libertyonlinehosting.com
127.0.0.1	lingerie-mania.com
127.0.0.1	lisamatthew.com
127.0.0.1	liveholio.com
127.0.0.1	livenewspaper.com
127.0.0.1	louiseleeds.com
127.0.0.1	love-pix.com
127.0.0.1	lovelas.com
127.0.0.1	lovelysearch.com
127.0.0.1	low-taxes.com
127.0.0.1	luckysearch.net
127.0.0.1	lunitaweb.net
127.0.0.1	lustful-porno.com
127.0.0.1	mackinnonsbrook.org
127.0.0.1	madfinder.com
127.0.0.1	madisonmoons.com
127.0.0.1	madisonoilco.com
127.0.0.1	madonalive.com
127.0.0.1	majuozawa.com
127.0.0.1	makin-do.com
127.0.0.1	male4free.com
127.0.0.1	map-quest.org
127.0.0.1	marilynchamber.com
127.0.0.1	martfinder.com
127.0.0.1	massearch.com
127.0.0.1	matetrava.com
127.0.0.1	mature50.com
127.0.0.1	matureporngate.com
127.0.0.1	maxdzines.com
127.0.0.1	mcgeeforlabor.com
127.0.0.1	mdstunisie.org
127.0.0.1	medicare-insurance.net
127.0.0.1	medicare-supplemental.com
127.0.0.1	mega-dating-tips.com
127.0.0.1	megumikanzaki.com
127.0.0.1	meshalynn.com
127.0.0.1	meta-adult.com
127.0.0.1	meta-casino.com
127.0.0.1	meta-mobile.com
127.0.0.1	meta-porn.com
127.0.0.1	metafora.ru
127.0.0.1	metapoisk.ru
127.0.0.1	michiyonakajima.com
127.0.0.1	miconsultamedica.com
127.0.0.1	mikasakamoto.com
127.0.0.1	mikoni.com
127.0.0.1	militarygods.porn4porn.net
127.0.0.1	millennialpeople.org
127.0.0.1	mipham.org
127.0.0.1	missingcommand.com
127.0.0.1	mommykiss.com
127.0.0.1	moneyhunters.com
127.0.0.1	montgomeryhospitalanesthesia.com
127.0.0.1	morflot.com
127.0.0.1	mortgage-debt.net
127.0.0.1	mortismaximus.com
127.0.0.1	moscowwhores.com
127.0.0.1	moviecategories.com
127.0.0.1	mp3-pix.com
127.0.0.1	mrtg.jps.ru
127.0.0.1	msn-info.net
127.0.0.1	multipussy.com
127.0.0.1	mundopolar.com
127.0.0.1	mustv.com
127.0.0.1	mywebsearch.net
127.0.0.1	nativehardcore.com
127.0.0.1	naturalspy.com
127.0.0.1	nbasportsbook.net
127.0.0.1	nellyslyrics.com
127.0.0.1	nepgyan.com
127.0.0.1	nesrecords.com
127.0.0.1	netshastra.net
127.0.0.1	nettime.ru
127.0.0.1	nettracker.jps.ru
127.0.0.1	netyellowpages.info
127.0.0.1	new-incest.com
127.0.0.1	newcategories.com
127.0.0.1	newcracks.com
127.0.0.1	newcracks.net
127.0.0.1	newlife-lajolla.com
127.0.0.1	newsexgate.com
127.0.0.1	newtonsracks.com
127.0.0.1	newxpics.com
127.0.0.1	nhlsportsbook.net
127.0.0.1	niagaracapital.com
127.0.0.1	niche-tv.com
127.0.0.1	nmrba.com
127.0.0.1	nocalories.net
127.0.0.1	nocensor.com
127.0.0.1	ormandcompany.com
127.0.0.1	nsbabes.com
127.0.0.1	nuclearwitness.org
127.0.0.1	nursemania.com
127.0.0.1	nvntour.com
127.0.0.1	nvphall.org
127.0.0.1	oborot.com
127.0.0.1	ocalalivestockmarket.com
127.0.0.1	ocsff.com
127.0.0.1	oeatlanta.com
127.0.0.1	oharrowsearch.com
127.0.0.1	ok-search.com
127.0.0.1	okulta.com
127.0.0.1	omegabrains.net
127.0.0.1	online-casino-1.net
127.0.0.1	online-casino-bonus.info
127.0.0.1	online-casinos-x.com
127.0.0.1	online-winning.net
127.0.0.1	onlineserverz.com
127.0.0.1	onlinetradings.net
127.0.0.1	onlycunt.com
127.0.0.1	onlyinsured.com
127.0.0.1	operanabuco.com
127.0.0.1	opsex.com
127.0.0.1	oregoncharters.org
127.0.0.1	otrlives.com
127.0.0.1	ozawamadoka.com
127.0.0.1	paigesummer.com
127.0.0.1	pamelacollections.com
127.0.0.1	panamcup.com
127.0.0.1	pantygirls4u.com
127.0.0.1	pantyhoserealm.com
127.0.0.1	pantyplace.com
127.0.0.1	pastubes.com
127.0.0.1	paulapage.com
127.0.0.1	paulhoover.com
127.0.0.1	payfortraffic.net
127.0.0.1	pedo.ws
127.0.0.1	people.1gb.ru
127.0.0.1	pervertbot.com
127.0.0.1	pharma-diet-pills.com
127.0.0.1	pharmacy2003.com
127.0.0.1	pharmalocator.com
127.0.0.1	phendimetrazine-tenuate-adipex.com
127.0.0.1	pics-videos.com
127.0.0.1	picsdir.com
127.0.0.1	picsforbucks.com
127.0.0.1	picsofseductiveladies.com
127.0.0.1	pills-birth-control.com
127.0.0.1	pillsmall.com
127.0.0.1	pilotronix.com
127.0.0.1	pixpox.com
127.0.0.1	planemusic.com
127.0.0.1	poiska.net
127.0.0.1	poker-casino-free.com
127.0.0.1	poker-games-free.net
127.0.0.1	polradiologia.com
127.0.0.1	pooi.net
127.0.0.1	porn-teacher.com
127.0.0.1	porncamz.com
127.0.0.1	pornfree.info
127.0.0.1	pornnightdreams.com
127.0.0.1	pornokopec.com
127.0.0.1	porntetris.com
127.0.0.1	porntwist.com
127.0.0.1	powerwebsearch.com
127.0.0.1	prblitz.com
127.0.0.1	pretypics.com
127.0.0.1	pribalt.com
127.0.0.1	privacy-support.biz
127.0.0.1	privateporn.net
127.0.0.1	prostactive.com
127.0.0.1	prostol.com
127.0.0.1	protect-yourself.biz
127.0.0.1	prsainlandempire.org
127.0.0.1	put-your-link-here.com
127.0.0.1	pyrocorp.com
127.0.0.1	quick-search.ws
127.0.0.1	quiksearchgenealogy.com
127.0.0.1	radfrall.org
127.0.0.1	ramgo.com
127.0.0.1	ranafrog.ne
127.0.0.1	rapegate.com
127.0.0.1	redbudbmx.com
127.0.0.1	refinance-help.com
127.0.0.1	removeearthkeepers.org
127.0.0.1	rightfinder.net
127.0.0.1	robbsproshop.com
127.0.0.1	robertferencz.com
127.0.0.1	rotocasters.com
127.0.0.1	royalsearch.net
127.0.0.1	runsearch.com
127.0.0.1	russiansponsor.com
127.0.0.1	russogay.com
127.0.0.1	s2.exocrew.com
127.0.0.1	sacitylife.com
127.0.0.1	samplegals.com
127.0.0.1	sbssurvivor.com
127.0.0.1	scarypix.com
127.0.0.1	sccdnet.com
127.0.0.1	schoolforest.com
127.0.0.1	search-1.net
127.0.0.1	search-2003.com
127.0.0.1	search-about.net
127.0.0.1	search-hawk.com
127.0.0.1	search-log.com
127.0.0.1	search-meta.com
127.0.0.1	search-safe.com
127.0.0.1	search.psn.cn
127.0.0.1	searchadultweb.com
127.0.0.1	searchbutler.com
127.0.0.1	searchbuttler.com
127.0.0.1	searchbutler.org
127.0.0.1	searchcomplete.com
127.0.0.1	searchdesire.com
127.0.0.1	searchdot.net
127.0.0.1	searchexpander.com
127.0.0.1	searchfastnet.com
127.0.0.1	searchforge.com
127.0.0.1	searching-the-net.com
127.0.0.1	searchmeta.md
127.0.0.1	searchmeta.net
127.0.0.1	searchmeta.ru
127.0.0.1	searchmeta.webhost.ru
127.0.0.1	searchnow.ws
127.0.0.1	searchonfly.com
127.0.0.1	searchv.com
127.0.0.1	searchxl.com
127.0.0.1	searchxp.com
127.0.0.1	sebot.com
127.0.0.1	securenp.org
127.0.0.1	security-warning.biz
127.0.0.1	seehardcore.com
127.0.0.1	seekwell.net
127.0.0.1	selfbookmark.com
127.0.0.1	selfbookmark.info
127.0.0.1	selfbookmark.net
127.0.0.1	sex.free4porno.net
127.0.0.1	sex-coach.com
127.0.0.1	sex-festival.com
127.0.0.1	sex-video-galleries.com
127.0.0.1	sexgalleries4all.com
127.0.0.1	sexmoviesnet.com
127.0.0.1	sexpatriot.net
127.0.0.1	sexy18.cc
127.0.0.1	sexycat.adult-host.org
127.0.0.1	sfbayfolkboats.com
127.0.0.1	sgirls.net
127.0.0.1	sharempeg.com
127.0.0.1	shopcards.net
127.0.0.1	shopknights.com
127.0.0.1	sic02.com
127.0.0.1	sintrader.com
127.0.0.1	site1.ru
127.0.0.1	sites-in-web.com
127.0.0.1	sitevictoria.com
127.0.0.1	sixroads.com
127.0.0.1	skakalka.ru
127.0.0.1	slawsearch.com
127.0.0.1	slotch.com
127.0.0.1	slotchbar.com
127.0.0.1	smartsumo.com
127.0.0.1	smutarchive.net
127.0.0.1	solongas.com
127.0.0.1	sonomaevents.com
127.0.0.1	spermatrix.com
127.0.0.1	sportbooks-free4you.com
127.0.0.1	spros.com
127.0.0.1	spyass.com
127.0.0.1	spyorgy.net
127.0.0.1	staceyowens.com
127.0.0.1	stacistaxx.com
127.0.0.1	stacystaxx.com
127.0.0.1	start-space.com
127.0.0.1	steamycock.com
127.0.0.1	sterva.com
127.0.0.1	stevecashdollar.com
127.0.0.1	stop-tracking.biz
127.0.0.1	stopvotefraud.com
127.0.0.1	stopxxxpics.com
127.0.0.1	strekoza.com
127.0.0.1	stuffstore.com
127.0.0.1	styleclickink.com
127.0.0.1	summercollins.com
127.0.0.1	summitcross.com
127.0.0.1	super-spider.com
127.0.0.1	super-websearch.com
127.0.0.1	supersexmachine.com
127.0.0.1	superwebsearch.com
127.0.0.1	supret.com
127.0.0.1	suzannebrecht.com
127.0.0.1	sweeteenz.com
127.0.0.1	tacil.org
127.0.0.1	tangounion.com
127.0.0.1	tastethemusic.com
127.0.0.1	tax-refund4you.com
127.0.0.1	tech-jobs.ws
127.0.0.1	technology-related.com
127.0.0.1	teen-biz.com
127.0.0.1	teen-pic-post.com
127.0.0.1	teenpornosex.com
127.0.0.1	teens4free.net
127.0.0.1	teensact.com
127.0.0.1	teensgate.com
127.0.0.1	teensguru.com
127.0.0.1	teenswamp.com
127.0.0.1	testosterone-birth-control.com
127.0.0.1	the-exit.com
127.0.0.1	the-huns-yellow-pages.com
127.0.0.1	thefakejournal.com
127.0.0.1	thehuy.net
127.0.0.1	theproxy.org
127.0.0.1	therealsearch.com
127.0.0.1	thesten.com
127.0.0.1	thornleygroup.com
127.0.0.1	tings.org
127.0.0.1	tit-x.com
127.0.0.1	titanvision.com
127.0.0.1	titsianna.com
127.0.0.1	toddhayes.com
127.0.0.1	toon-comics.com
127.0.0.1	tooncomics.com
127.0.0.1	topsearcher.com
127.0.0.1	trafficback.com
127.0.0.1	trafficswitcher.com
127.0.0.1	travel.picture-posters.com
127.0.0.1	true-portal.com
127.0.0.1	trytechnical.com
127.0.0.1	ufindall.click-now.net
127.0.0.1	umaxsearch.com
127.0.0.1	une-autre-france.com
127.0.0.1	unigays.com
127.0.0.1	unipages.cc
127.0.0.1	up2you.ru
127.0.0.1	urlstat.com
127.0.0.1	urlstat.ru
127.0.0.1	uralitel.ru
127.0.0.1	ursie.net
127.0.0.1	utahsweet.com
127.0.0.1	utopicportal.com
127.0.0.1	uusocialjustice.org
127.0.0.1	v61.com
127.0.0.1	vaginpics.com
127.0.0.1	valmyers.com
127.0.0.1	vegas-free.com
127.0.0.1	vegbuy.com
127.0.0.1	veloventures.com
127.0.0.1	verzila.com
127.0.0.1	victoriaadam.com
127.0.0.1	videocategories.com
127.0.0.1	vitamins-for-each.com
127.0.0.1	votehowe.org
127.0.0.1	vxebony.com
127.0.0.1	wakeupdick.com
127.0.0.1	warnomore.org
127.0.0.1	watersport-specialties.com
127.0.0.1	web-homepage.net
127.0.0.1	web-search.tk
127.0.0.1	webcoolsearch.com
127.0.0.1	websearchdot.com
127.0.0.1	weekend-movies.com
127.0.0.1	wetpornostars.com
127.0.0.1	whatsyoursearch.com
127.0.0.1	white-pages.ws
127.0.0.1	whittierblvd.com
127.0.0.1	win-in-casino.com
127.0.0.1	wiresearch.com
127.0.0.1	wolfpacracing.com
127.0.0.1	wordlist.jps.ru
127.0.0.1	wpc2001.org
127.0.0.1	wspzone.sexpornonline.com
127.0.0.1	wwwbet.net
127.0.0.1	wwwbetting.net
127.0.0.1	wwwpokergames.com
127.0.0.1	wwwpokerplayers.com
127.0.0.1	wwwroulette.net
127.0.0.1	x-library.com
127.0.0.1	x-webdesign.com
127.0.0.1	xcomics4u.com
127.0.0.1	xic-bs.com
127.0.0.1	xldr.com
127.0.0.1	xp18.com
127.0.0.1	xrenosearch.com
127.0.0.1	xtragay.com
127.0.0.1	xu.xu.pl
127.0.0.1	xxxcategories.com
127.0.0.1	xxxemailxxx.com
127.0.0.1	y-e-l-l-o-w.com
127.0.0.1	yellow500.com
127.0.0.1	yezol.com
127.0.0.1	you-search.com
127.0.0.1	you-search.com.ru
127.0.0.1	youfindall.com
127.0.0.1	youfindall.net
127.0.0.1	your-prescriptions.net
127.0.0.1	yourbookmarks.info
127.0.0.1	yourbookmarks.ws
127.0.0.1	ypir.com
127.0.0.1	ysa-info.net
127.0.0.1	yukohamano.com
127.0.0.1	ywebsearch.info
127.0.0.1	zapros.com
127.0.0.1	zesearch.com
127.0.0.1	ziportal.com
127.0.0.1	zipportal.com
127.0.0.1	zoneoffreeporn.com
127.0.0.1	zoomegasite.com
127.0.0.1	zvimigdal.com
127.0.0.1	zyban-zocor-levitra.com
127.0.0.1	t.rack.cc
127.0.0.1	omega-search.com
127.0.0.1	cool-xxx.net
127.0.0.1	revolto3.da.ru
127.0.0.1	dating-search.net
127.0.0.1	linksummary.com
127.0.0.1	duolaimi.net
127.0.0.1	ez-searching.com
127.0.0.1	freehqmovies.com
127.0.0.1	xzoomy.com
127.0.0.1	freescratchandwin.com
127.0.0.1	globalwebsearch.com
127.0.0.1	www.gocybersearch.com
127.0.0.1	mayancasino.com
127.0.0.1	www.hastalavista.com
127.0.0.1	www.free-popup-killer.com
127.0.0.1	www.digitalfan.com
127.0.0.1	google123.web1000.com
127.0.0.1	search.ieplugin.com
127.0.0.1	i-lookup.com
127.0.0.1	spidersearch.com
127.0.0.1	istarthere.com
127.0.0.1	xxxtoolbar.com
127.0.0.1	www.seekporn.org
127.0.0.1	17-plus.com
127.0.0.1	lolita4all1.xrensmagpost.com
127.0.0.1	mafiapics.com
127.0.0.1	www.teenmonster.com
127.0.0.1	ie.marketdart.com
127.0.0.1	masterbar.com
127.0.0.1	search.netzany.co
127.0.0.1	only-virgins.com
127.0.0.1	passthison.com
127.0.0.1	blondetgp.com
127.0.0.1	prolivation.com
127.0.0.1	server-au.imrworldwide.com
127.0.0.1	rocketsearch.com
127.0.0.1	.roar.com
127.0.0.1	searchaccurate.com
127.0.0.1	searchalot.com
127.0.0.1	searchandbrowse.com
127.0.0.1	gtawarehouse.com
127.0.0.1	startium.com
127.0.0.1	searchandclick.com
127.0.0.1	searchby.net
127.0.0.1	searchdot.com
127.0.0.1	search-exe.com
127.0.0.1	secret-crush.com
127.0.0.1	seekseek.com
127.0.0.1	sexarena.com
127.0.0.1	sexocean.play-lolita.com
127.0.0.1	startsurfing.com
127.0.0.1	srng.net
127.0.0.1	apps.webservicehost.com
127.0.0.1	search.shopnav.com
127.0.0.1	wish7.com
127.0.0.1	216.65.3.68
127.0.0.1	www.supersexpass.com
127.0.0.1	surferbar.com
127.0.0.1	xlola.underagehost.com
127.0.0.1	hotlolitas.underagehost.com
127.0.0.1	loading-lolita.com
127.0.0.1	www.xupiter.com
127.0.0.1	xjupiter.com
127.0.0.1	www.xjupiter.com
127.0.0.1	www.browserwise.com
127.0.0.1	sqwire.com
127.0.0.1	orbitexplorer.com
127.0.0.1	searchcentrix.com
127.0.0.1	categories.mygeek.com
127.0.0.1	web-entrance.co
127.0.0.1	whazit.com
127.0.0.1	windowenhancer.com
127.0.0.1	buz.ru
127.0.0.1	iwon.com
127.0.0.1	www.bonzi.com
127.0.0.1	featured-results.com
127.0.0.1	searchmadesafe.net
127.0.0.1	quicklaunch.com
127.0.0.1	www.cashsurfers.com
127.0.0.1	.lop.com
127.0.0.1	.tjdo.com
127.0.0.1	/tjdo.com
127.0.0.1	.ebav.com
127.0.0.1	/ebav.com
127.0.0.1	.ebgo.com
127.0.0.1	/ebgo.com
127.0.0.1	.ebaw.com
127.0.0.1	/ebaw.com
127.0.0.1	.ebkb.com
127.0.0.1	/ebkb.com
127.0.0.1	.ebmu.com
127.0.0.1	/ebmu.com
127.0.0.1	.ecmp.com
127.0.0.1	/ecmp.com
127.0.0.1	.edhq.com
127.0.0.1	/edhq.com
127.0.0.1	.edty.com
127.0.0.1	/edty.com
127.0.0.1	.sbee.com
127.0.0.1	/sbee.com
127.0.0.1	.aavc.com
127.0.0.1	/aavc.com
127.0.0.1	.acjp.com
127.0.0.1	/acjp.com
127.0.0.1	.ecmh.com
127.0.0.1	/ecmh.com
127.0.0.1	.emch.com
127.0.0.1	/emch.com
127.0.0.1	.ecpm.com
127.0.0.1	/ecpm.com
127.0.0.1	.wabu.com
127.0.0.1	/wabu.com
127.0.0.1	.wabq.com
127.0.0.1	/wabq.com
127.0.0.1	.ebch.com
127.0.0.1	/ebch.com
127.0.0.1	.ebdv.com
127.0.0.1	/ebdv.com
127.0.0.1	.ebdw.com
127.0.0.1	/ebdw.com
127.0.0.1	.ebjp.com
127.0.0.1	/ebjp.com
127.0.0.1	.ebkn.com
127.0.0.1	/ebkn.com
127.0.0.1	.ebky.com
127.0.0.1	/ebky.com
127.0.0.1	.eblv.com
127.0.0.1	/eblv.com
127.0.0.1	.wbkb.com
127.0.0.1	/wbkb.com
127.0.0.1	.ebvr.com
127.0.0.1	/ebvr.com
127.0.0.1	.ecwz.com
127.0.0.1	/ecwz.com
127.0.0.1	.ecyb.com
127.0.0.1	/ecyb.com
127.0.0.1	.eduy.com
127.0.0.1	/eduy.com
127.0.0.1	.eeev.com
127.0.0.1	/eeev.com
127.0.0.1	.farse.com
127.0.0.1	/farse.com
127.0.0.1	.ibmx.com
127.0.0.1	/ibmx.com
127.0.0.1	.icwb.com
127.0.0.1	/icwb.com
127.0.0.1	.icwo.com
127.0.0.1	/icwo.com
127.0.0.1	.icwp.com
127.0.0.1	/icwp.com
127.0.0.1	.iddh.com
127.0.0.1	/iddh.com
127.0.0.1	.idhh.com
127.0.0.1	/idhh.com
127.0.0.1	.ifiz.com
127.0.0.1	/ifiz.com
127.0.0.1	.iguu.com
127.0.0.1	/iguu.com
127.0.0.1	.samz.com
127.0.0.1	/samz.com
127.0.0.1	.saoe.com
127.0.0.1	/saoe.com
127.0.0.1	.sbjr.com
127.0.0.1	/sbjr.com
127.0.0.1	.sbnl.com
127.0.0.1	/sbnl.com
127.0.0.1	.sbnt.com
127.0.0.1	/sbnt.com
127.0.0.1	.sbvr.com
127.0.0.1	/sbvr.com
127.0.0.1	.scbm.com
127.0.0.1	/scbm.com
127.0.0.1	.sckr.com
127.0.0.1	/sckr.com
127.0.0.1	.scrk.com
127.0.0.1	/scrk.com
127.0.0.1	.sdry.com
127.0.0.1	/sdry.com
127.0.0.1	.seld.com
127.0.0.1	/seld.com
127.0.0.1	.sfux.com
127.0.0.1	/sfux.com
127.0.0.1	.sheat.com
127.0.0.1	/sheat.com
127.0.0.1	.sipo.com
127.0.0.1	/sipo.com
127.0.0.1	.smds.com
127.0.0.1	/smds.com
127.0.0.1	.srib.com
127.0.0.1	/srib.com
127.0.0.1	.srox.com
127.0.0.1	/srox.com
127.0.0.1	.srsf.com
127.0.0.1	/srsf.com
127.0.0.1	.ssaw.com
127.0.0.1	/ssaw.com
127.0.0.1	.ssby.com
127.0.0.1	/ssby.com
127.0.0.1	.surj.com
127.0.0.1	/surj.com
127.0.0.1	.tbvg.com
127.0.0.1	/tbvg.com
127.0.0.1	.tdak.com
127.0.0.1	/tdak.com
127.0.0.1	.tdmy.com
127.0.0.1	/tdmy.com
127.0.0.1	.tefs.com
127.0.0.1	/tefs.com
127.0.0.1	.tfil.com
127.0.0.1	/tfil.com
127.0.0.1	.tjar.com
127.0.0.1	/tjar.com
127.0.0.1	.tjaw.com
127.0.0.1	/tjaw.com
127.0.0.1	.tjgo.com
127.0.0.1	/tjgo.com
127.0.0.1	.tjem.com
127.0.0.1	/tjem.com
127.0.0.1	.torc.com
127.0.0.1	/torc.com
127.0.0.1	.wfix.com
127.0.0.1	/wfix.com
127.0.0.1	.wflu.com
127.0.0.1	/wflu.com
127.0.0.1	.tdko.com
127.0.0.1	/tdko.com
127.0.0.1	.thko.com
127.0.0.1	/thko.com
127.0.0.1	H24413.tfil.com
127.0.0.1	germany.rub.to
127.0.0.1	search.rub.to
127.0.0.1	unitedstates.rub.to
127.0.0.1	www.commonname.com
127.0.0.1	www.ezcybersearch.com
127.0.0.1	www.jethomepage.com
127.0.0.1	www.gohip.com
127.0.0.1	hotbar.com
127.0.0.1	www.huntbar.com
127.0.0.1	search.imiserver.com
127.0.0.1	searchenhancement.com
127.0.0.1	newtonknows.com
127.0.0.1	search-explorer.net
127.0.0.1	searchsquire.com
127.0.0.1	secondpower.com
127.0.0.1	2ndpower.com
127.0.0.1	searchgateway.net
127.0.0.1	worldusa.com
127.0.0.1	www.topsearcher.com
127.0.0.1	smutserver.com
127.0.0.1	searchmeup.com
127.0.0.1	cameup.com
127.0.0.1	kliksearch.com
127.0.0.1	realphx.com
127.0.0.1	blazefind.com
127.0.0.1	zoofil.com
127.0.0.1	terafinder.com
127.0.0.1	008i.com
127.0.0.1	171203.com
127.0.0.1	39-93.com
127.0.0.1	adult-personal.us
127.0.0.1	cashsearch.biz
127.0.0.1	cl55.biz
127.0.0.1	dailyteenspic.com
127.0.0.1	dialer2004.com
127.0.0.1	digital-pornography.com
127.0.0.1	eager-sex.com
127.0.0.1	ergosites.com
127.0.0.1	freecj.com
127.0.0.1	greg-search.com
127.0.0.1	incest-host.com
127.0.0.1	ironcarteam.com
127.0.0.1	is-best.com
127.0.0.1	killerpornstars.com
127.0.0.1	lollitop.com
127.0.0.1	love-host.com
127.0.0.1	myexexex.com
127.0.0.1	my-finder.com
127.0.0.1	onlineclick.net
127.0.0.1	onlysex.ws
127.0.0.1	regfreeze.com
127.0.0.1	ruworld.com
127.0.0.1	selltraffic.biz
127.0.0.1	sexunique.net
127.0.0.1	sinpussy.com
127.0.0.1	teenhost.net
127.0.0.1	ultraload.net
127.0.0.1	vse-moe.biz
127.0.0.1	xsex.ws
127.0.0.1	.75tz.com
127.0.0.1	/75tz.com
127.0.0.1	.iefeadsl.com
127.0.0.1	/iefeadsl.com
127.0.0.1	.rf104.com
127.0.0.1	/rf104.com
127.0.0.1	www.v61.com
127.0.0.1	ads.centralmedia.ws
127.0.0.1	c.centralmedia.ws
127.0.0.1	.count.cc
127.0.0.1	/count.cc
127.0.0.1	.topx.cc
127.0.0.1	/topx.cc
127.0.0.1	sidefind.com
127.0.0.1	thenewsearch.com
127.0.0.1	new-search.net
127.0.0.1	x-google.net
127.0.0.1	adultgambling.org
127.0.0.1	bitchesonline.net
127.0.0.1	girls4rent.net
127.0.0.1	usefullsoft.net
127.0.0.1	livegambling.com
127.0.0.1	adultsgames.net
127.0.0.1	easyantispy.com
127.0.0.1	spybotremover.net
127.0.0.1	winprotect.net
127.0.0.1	funny-girls.com
127.0.0.1	winmsn.com
127.0.0.1	oneclicksearches.com
127.0.0.1	bestweblinks.com
127.0.0.1	iqsearch.net
127.0.0.1	dumpserv.com
127.0.0.1	helpyoursearch.com
127.0.0.1	sgrunt.biz
127.0.0.1	yeak.net
127.0.0.1	u45.cx
127.0.0.1	u46.cx
127.0.0.1	u47.cc
127.0.0.1	u48.cc
127.0.0.1	sfonditalia.biz
127.0.0.1	realarea.biz
127.0.0.1	archiviosex.net
127.0.0.1	agava.com
127.0.0.1	agava.ru
127.0.0.1	hut1.ru
127.0.0.1	hu15.ru
127.0.0.1	winfixer.com
127.0.0.1	3721.com
127.0.0.1	easysearchingtips.com
127.0.0.1	fine-search.net
127.0.0.1	noproblemsurf.com
127.0.0.1	pcspyremover.com
127.0.0.1	search-motor.com
127.0.0.1	searchwhatuwant.com
127.0.0.1	ad25.com
127.0.0.1	ad45.com
127.0.0.1	ad77.com
127.0.0.1	ad86.com
127.0.0.1	full-search.net
127.0.0.1	go2-search.com
127.0.0.1	onemoresearch.net
127.0.0.1	search-777.com
127.0.0.1	search-to-find.com
127.0.0.1	search-what.net
127.0.0.1	winshow.biz
127.0.0.1	lookfor.cc
127.0.0.1	looking-for.cc
127.0.0.1	tgp-4-you.com
127.0.0.1	veryeasysearch.com
127.0.0.1	010402.com
127.0.0.1	20x2p.com
127.0.0.1	db105.com
127.0.0.1	ga31.com
127.0.0.1	mpeg-look.com
127.0.0.1	n-udd.com
127.0.0.1	p-uud.com
127.0.0.1	porn-screen.com
127.0.0.1	rb37.com
127.0.0.1	t058.com
127.0.0.1	u-239.com
127.0.0.1	v-224.com
127.0.0.1	trackhits.cc
127.0.0.1	tracktraff.cc
127.0.0.1	power-cleaner.com
127.0.0.1	yoursitebar.com
127.0.0.1	ysbweb.com
127.0.0.1	www.ysbweb.com
127.0.0.1	installcash.com
127.0.0.1	toolbarcash.com
127.0.0.1	enjoywebsurf.com
127.0.0.1	msnguard.cc
127.0.0.1	searchclick.cc
127.0.0.1	havy.biz
127.0.0.1	ewizard.cc
127.0.0.1	4klm.com
127.0.0.1	camup.net
127.0.0.1	bdsmlibrary.net
127.0.0.1	n-glx.s-redirect.com
127.0.0.1	aaasexypics.com
127.0.0.1	allforadult.com
127.0.0.1	autoescrowpay.com
127.0.0.1	awmcash.biz
127.0.0.1	awmdabest.com
127.0.0.1	buldog-stats.com
127.0.0.1	counter.sexmaniack.com
127.0.0.1	fregat.drocherway.com
127.0.0.1	greg-tut.com
127.0.0.1	iframe.biz
127.0.0.1	megapornix.com
127.0.0.1	newiframe.biz
127.0.0.1	nylonsexy.com
127.0.0.1	pizdato.biz
127.0.0.1	sexfiles.nu
127.0.0.1	slutmania.biz
127.0.0.1	sp2fucked.biz
127.0.0.1	toolbarpartner.com
127.0.0.1	vesbiz.biz
127.0.0.1	virgin-tgp.net
127.0.0.1	vparivalka.com
127.0.0.1	x.full-tgp.net
127.0.0.1	toolbar.cc
127.0.0.1	himen.biz
127.0.0.1	msupdater.net
127.0.0.1	www.msupdater.net
127.0.0.1	1800searchonline.com
127.0.0.1	www.1800searchonline.com
127.0.0.1	1stsearchportal.com
127.0.0.1	www.1stsearchportal.com
127.0.0.1	24-7searching-and-more.com
127.0.0.1	www.24-7searching-and-more.com
127.0.0.1	971searchbox.com
127.0.0.1	www.971searchbox.com
127.0.0.1	aaawebfinder.com
127.0.0.1	www.aaawebfinder.com
127.0.0.1	ampmsearch.com
127.0.0.1	www.ampmsearch.com
127.0.0.1	clickhere4search.com
127.0.0.1	www.clickhere4search.com
127.0.0.1	clicktomakeasearch.com
127.0.0.1	www.clicktomakeasearch.com
127.0.0.1	directsearchzone.com
127.0.0.1	www.directsearchzone.com
127.0.0.1	easysearch4you.com
127.0.0.1	www.easysearch4you.com
127.0.0.1	enterthesearch.com
127.0.0.1	www.enterthesearch.com
127.0.0.1	esearch2005.com
127.0.0.1	www.esearch2005.com
127.0.0.1	eza1netsearch.com
127.0.0.1	www.eza1netsearch.com
127.0.0.1	ezwebsearching.com
127.0.0.1	www.ezwebsearching.com
127.0.0.1	globalefinder.com
127.0.0.1	www.globalefinder.com
127.0.0.1	go2realsearch.com
127.0.0.1	www.go2realsearch.com
127.0.0.1	myseachexplorer.com
127.0.0.1	www.myseachexplorer.com
127.0.0.1	quicksearch360.com
127.0.0.1	www.quicksearch360.com
127.0.0.1	s1s1s1search.com
127.0.0.1	www.s1s1s1search.com
127.0.0.1	search101online.com
127.0.0.1	www.search101online.com
127.0.0.1	search123forme.com
127.0.0.1	www.search123forme.com
127.0.0.1	search345quest.com
127.0.0.1	www.search345quest.com
127.0.0.1	searchmiracle.com
127.0.0.1	www.searchmiracle.com
127.0.0.1	searchtheworld4you.com
127.0.0.1	www.searchtheworld4you.com
127.0.0.1	searchwebzone.com
127.0.0.1	www.searchwebzone.com
127.0.0.1	seektheglobe.com
127.0.0.1	www.seektheglobe.com
127.0.0.1	sitesearchcentral.com
127.0.0.1	www.sitesearchcentral.com
127.0.0.1	the818search-co.com
127.0.0.1	www.the818search-co.com
127.0.0.1	type2find.com
127.0.0.1	www.type2find.com
127.0.0.1	xosearchox.com
127.0.0.1	www.xosearchox.com
127.0.0.1	yoursearchspace.com
127.0.0.1	www.yoursearchspace.com
127.0.0.1	httpwwwads.com
127.0.0.1	www.httpwwwads.com
127.0.0.1	adshttp.com
127.0.0.1	www.adshttp.com
127.0.0.1	adsonwww.com
127.0.0.1	www.adsonwww.com
127.0.0.1	216.152.240.14
127.0.0.1	216.152.240.13
127.0.0.1	216.152.240.10
127.0.0.1	dnaads.com
127.0.0.1	www.dnaads.com
127.0.0.1	marketengines.com
127.0.0.1	www.marketengines.com
127.0.0.1	ad-w-a-r-e.com
127.0.0.1	www.ad-w-a-r-e.com
127.0.0.1	a-d-w-a-r-e.com
127.0.0.1	www.a-d-w-a-r-e.com
127.0.0.1	securityindex.net
127.0.0.1	www.securityindex.net
127.0.0.1	sexpicsporn.com
127.0.0.1	www.sexpicsporn.com
127.0.0.1	free-spybot.com
127.0.0.1	www.free-spybot.com
127.0.0.1	cashengines.com
127.0.0.1	www.cashengines.com
127.0.0.1	microsoftantispyware.net
127.0.0.1	www.microsoftantispyware.net
127.0.0.1	mircosoftantispy.com
127.0.0.1	www.mircosoftantispy.com
127.0.0.1	msantispy.com
127.0.0.1	www.msantispy.com
127.0.0.1	netspyprotector.com
127.0.0.1	www.netspyprotector.com
127.0.0.1	avforce.com
127.0.0.1	www.avforce.com
127.0.0.1	savehits.com
127.0.0.1	www.savehits.com
127.0.0.1	saveli.com
127.0.0.1	www.saveli.com
127.0.0.1	metastop.com
127.0.0.1	www.metastop.com
127.0.0.1	perlink.biz
127.0.0.1	www.perlink.biz
127.0.0.1	highdialer.com
127.0.0.1	www.highdialer.com
127.0.0.1	66.230.175.129
127.0.0.1	online-more.com
127.0.0.1	www.online-more.com
127.0.0.1	www.syserrors.com
127.0.0.1	www.vcodec.com
127.0.0.1	toolbartraff.biz
127.0.0.1	www.toolbartraff.biz
127.0.0.1	pcadprotector.cc
127.0.0.1	www.pcadprotector.cc
127.0.0.1	airtleworld.com
127.0.0.1	www.airtleworld.com
127.0.0.1	domaincar.com
127.0.0.1	www.domaincar.com
127.0.0.1	worldray.com
127.0.0.1	www.worldray.com
127.0.0.1	www5.worldray.com
127.0.0.1	www6.worldray.com
127.0.0.1	www.spytrooper.com
127.0.0.1	spytrooper.com
127.0.0.1	dl.ad-ware.cc
127.0.0.1	ad-ware.cc
127.0.0.1	downloads.adaware.cc
127.0.0.1	adaware.cc
127.0.0.1	hitscount.net
127.0.0.1	count.hitscount.net
127.0.0.1	fined.biz
127.0.0.1	de.ag
127.0.0.1	games.de.ag
127.0.0.1	www.games.de.ag
127.0.0.1	little-download.net
127.0.0.1	www.little-download.net
127.0.0.1	little-help.com
127.0.0.1	www.little-help.com
127.0.0.1	www.spyaxe.net
127.0.0.1	www.spyaxe.com
127.0.0.1	www.spyaxe.biz
127.0.0.1	www.malwarewipe.com
127.0.0.1	dl.malwarewipe.com
127.0.0.1	www.malwarewipeupdate.com
127.0.0.1	unionseek.com
127.0.0.1	www.unionseek.com
127.0.0.1	sirh0t.blackhats.tc
127.0.0.1	blackhats.tc
127.0.0.1	www.blackhats.tc
127.0.0.1	ritztours.com
127.0.0.1	www.ritztours.com
127.0.0.1	flashflashmx.3322.org
127.0.0.1	3322.org
127.0.0.1	www.3322.org
127.0.0.1	jupitersatellites.biz
127.0.0.1	www.jupitersatellites.biz
127.0.0.1	yops.biz
127.0.0.1	www.yops.biz
127.0.0.1	69.50.171.122
127.0.0.1	goldengr.hypermart.net
127.0.0.1	web-nexus.net
127.0.0.1	safe-sales.biz
127.0.0.1	www.safe-sales.biz
127.0.0.1	jerrynews.com
127.0.0.1	www.jerrynews.com
127.0.0.1	Teslaplus.com
127.0.0.1	www.Teslaplus.com
127.0.0.1	WorldAntiSpy.com
127.0.0.1	www.WorldAntiSpy.com
127.0.0.1	www.securitycaution.com
127.0.0.1	securitycaution.com
127.0.0.1	adservs.com
127.0.0.1	csx.adservs.com
127.0.0.1	www.csx.adservs.com
127.0.0.1	toolbarbest.biz
127.0.0.1	www.toolbarbest.biz
127.0.0.1	65.75.151.192
127.0.0.1	game4all.biz
127.0.0.1	www.game4all.biz
127.0.0.1	wm.kannylizaciya.info
127.0.0.1	www.wm.kannylizaciya.info
127.0.0.1	wm.buhartes.info
127.0.0.1	www.wm.buhartes.info
127.0.0.1	login.fric.cn
127.0.0.1	www.login.fric.cn
127.0.0.1	xsremover.com
127.0.0.1	www.xsremover.com
127.0.0.1	spydeface.com
127.0.0.1	www.spydeface.com
127.0.0.1	alfacleaner.com
127.0.0.1	www.alfacleaner.com
127.0.0.1	innovagest2000.com
127.0.0.1	www.innovagest2000.com
127.0.0.1	www.thespyguard.com
127.0.0.1	thespyguard.com
127.0.0.1	www.adwarepunisher.com
127.0.0.1	adwarepunisher.com
127.0.0.1	www.spyiblock.com
127.0.0.1	spyiblock.com
127.0.0.1	www.uvu-channel.com
127.0.0.1	uvu-channel.com
127.0.0.1	www.hachimitsu-lemon.com
127.0.0.1	hachimitsu-lemon.com
127.0.0.1	SEARCHTOFIND.NET
127.0.0.1	www.SEARCHTOFIND.NET
127.0.0.1	www.pestrap.com
127.0.0.1	pestrap.com
127.0.0.1	uptodatesecurity.com
127.0.0.1	www.uptodatesecurity.com
127.0.0.1	thinstall.abetterinternet.com
127.0.0.1	download.abetterinternet.com
127.0.0.1	www.abetterinternet.com
127.0.0.1	216.255.179.234
127.0.0.1	qmex.psyche-evolution.com
127.0.0.1	www.qmex.psyche-evolution.com
127.0.0.1	core.psyche-evolution.com
127.0.0.1	www.core.psyche-evolution.com
127.0.0.1	1stantivirus.com
127.0.0.1	www.1stantivirus.com
127.0.0.1	scanandrepair.com
127.0.0.1	www.scanandrepair.com
127.0.0.1	uydsiygeds.com
127.0.0.1	www.uydsiygeds.com
127.0.0.1	pesttrap.com
127.0.0.1	www.pesttrap.com
127.0.0.1	adwarebazooka.com
127.0.0.1	get.adwarebazooka.com
127.0.0.1	www.adwarebazooka.com
127.0.0.1	kliksoftware.com
127.0.0.1	www.kliksoftware.com
127.0.0.1	hitvirus.com
127.0.0.1	get.hitvirus.com
127.0.0.1	www.hitvirus.com
127.0.0.1	promo.dollarrevenue.com
127.0.0.1	www.promo.dollarrevenue.com
127.0.0.1	maxifile.com
127.0.0.1	www.maxifile.com
127.0.0.1	targetsaver.com
127.0.0.1	www.targetsaver.com
127.0.0.1	dl.targetsaver.com
127.0.0.1	www.dl.targetsaver.com
127.0.0.1	nonameforthisdomain.com
127.0.0.1	www.nonameforthisdomain.com
127.0.0.1	hypoteches.com
127.0.0.1	www.hypoteches.com
127.0.0.1	www.earthllnk.net
127.0.0.1	earthllnk.net
127.0.0.1	hostance.net
127.0.0.1	www.hostance.net
127.0.0.1	my-dedik-one.com
127.0.0.1	www.my-dedik-one.com
127.0.0.1	10sek.com
127.0.0.1	www.10sek.com
127.0.0.1	6sek.com
127.0.0.1	www.6sek.com
127.0.0.1	cashdeluxe.net
127.0.0.1	www.cashdeluxe.net
127.0.0.1	stats.cashdeluxe.net
127.0.0.1	www.stats.cashdeluxe.net
127.0.0.1	www.2006ooo.com
127.0.0.1	www.spyware-stop.com
127.0.0.1	spyware-stop.com
127.0.0.1	www.SpyShield.org
127.0.0.1	SpyShield.org
127.0.0.1	utils.winfixer.com
127.0.0.1	www.utils.winfixer.com
127.0.0.1	toolbarbucks.biz
127.0.0.1	www.toolbarbucks.biz
127.0.0.1	derklaif.biz
127.0.0.1	www.derklaif.biz
127.0.0.1	www.v-codec.com
127.0.0.1	v-codec.com
127.0.0.1	www.emediacodec.com
127.0.0.1	emediacodec.com
127.0.0.1	www.popentertain.com
127.0.0.1	popentertain.com
127.0.0.1	softwareprofit.com
127.0.0.1	www.softwareprofit.com
127.0.0.1	de.winantivirus.com
127.0.0.1	download.winantivirus.com
127.0.0.1	winantivirus.com
127.0.0.1	www.winantivirus.com
127.0.0.1	205.209.152.121
127.0.0.1	offers.bullseye-network.com
127.0.0.1	www.offers.bullseye-network.com
127.0.0.1	bullseye-network.com
127.0.0.1	www.bullseye-network.com
127.0.0.1	sponsor2.ucmore.com
127.0.0.1	www.sponsor2.ucmore.com
127.0.0.1	hostthesky.com
127.0.0.1	www.hostthesky.com
127.0.0.1	dbdecicated.com
127.0.0.1	www.dbdecicated.com
127.0.0.1	readagreement.net
127.0.0.1	www.readagreement.net
127.0.0.1	gl.secdep.info
127.0.0.1	www.gl.secdep.info
127.0.0.1	spyfalcon.com
127.0.0.1	www.spyfalcon.com
127.0.0.1	spyfalconupdate.com
127.0.0.1	www.spyfalconupdate.com
127.0.0.1	spy-shield.com
127.0.0.1	www.spy-shield.com
127.0.0.1	winnanny.com
127.0.0.1	www.winnanny.com
127.0.0.1	winsoftware.com
127.0.0.1	www.winsoftware.com
127.0.0.1	winfirewall.com
127.0.0.1	www.winfirewall.com
127.0.0.1	winantispyware.com
127.0.0.1	www.winantispyware.com
127.0.0.1	udefender.com
127.0.0.1	www.udefender.com
127.0.0.1	bravesentry.com
127.0.0.1	www.bravesentry.com
127.0.0.1	content.dollarrevenue.com
127.0.0.1	www.content.dollarrevenue.com
127.0.0.1	toolbar.azebar.com
127.0.0.1	www.toolbar.azebar.com
127.0.0.1	traffsale1.biz
127.0.0.1	www.traffsale1.biz
127.0.0.1	spywaredisinfector.com
127.0.0.1	www.spywaredisinfector.com
127.0.0.1	SpyCut.com
127.0.0.1	www.SpyCut.com
127.0.0.1	almanah.biz
127.0.0.1	www.almanah.biz
127.0.0.1	antispydns.biz
127.0.0.1	www.antispydns.biz
127.0.0.1	spyaxeupdate.com
127.0.0.1	www.spyaxeupdate.com
127.0.0.1	malwarewipesupport.com
127.0.0.1	www.malwarewipesupport.com
127.0.0.1	remedyantispy.com
127.0.0.1	www.remedyantispy.com
127.0.0.1	systemstable.com
127.0.0.1	www.systemstable.com
127.0.0.1	whoisprivacyprotect.com
127.0.0.1	www.whoisprivacyprotect.com
127.0.0.1	85.249.22.240
127.0.0.1	prime.webhancer.com
127.0.0.1	www.prime.webhancer.com
127.0.0.1	webhancer.com
127.0.0.1	www.webhancer.com
127.0.0.1	dr.webhancer.com
127.0.0.1	www.dr.webhancer.com
127.0.0.1	dr2.webhancer.com
127.0.0.1	www.dr2.webhancer.com
127.0.0.1	www.onli-ne.com
127.0.0.1	spycontra.com
127.0.0.1	www.spycontra.com
127.0.0.1	anti-virus-pro.com
127.0.0.1	www.anti-virus-pro.com
127.0.0.1	check.jupitersatellites.biz
127.0.0.1	www.check.jupitersatellites.biz
127.0.0.1	necessaryupdates.com
127.0.0.1	www.necessaryupdates.com
127.0.0.1	bestworldgirls-for-u.net
127.0.0.1	www.bestworldgirls-for-u.net
127.0.0.1	stejax.pl
127.0.0.1	www.stejax.pl
127.0.0.1	kitehosting.com
127.0.0.1	www.kitehosting.com
127.0.0.1	ware2006.com
127.0.0.1	www.ware2006.com
127.0.0.1	filestore.com
127.0.0.1	www.filestore.com
127.0.0.1	systemupdates.net
127.0.0.1	www.systemupdates.net
127.0.0.1	logs.vapochille.com
127.0.0.1	www.logs.vapochille.com
127.0.0.1	goldenfreehost.com
127.0.0.1	www.goldenfreehost.com
127.0.0.1	todaywarnings.com
127.0.0.1	www.todaywarnings.com
127.0.0.1	spywarequake.com
127.0.0.1	spywarequake.info
127.0.0.1	www.spywarequake.info
127.0.0.1	www.spywarequake.com
127.0.0.1	download2.spywarequake.com
127.0.0.1	download3.spywarequake.com
127.0.0.1	download4.spywarequake.com
127.0.0.1	download5.spywarequake.com
127.0.0.1	download7.spywarequake.com
127.0.0.1	download8.spywarequake.com
127.0.0.1	download9.spywarequake.com
127.0.0.1	download10.spywarequake.com
127.0.0.1	download11.spywarequake.com
127.0.0.1	download12.spywarequake.com
127.0.0.1	download13.spywarequake.com
127.0.0.1	download15.spywarequake.com
127.0.0.1	updates.spywarequake.com
127.0.0.1	206.161.124.98
127.0.0.1	69.31.131.82
127.0.0.1	207.226.162.34
127.0.0.1	urgentsystemupdate.com
127.0.0.1	www.urgentsystemupdate.com
127.0.0.1	dl2.spywarestrike.com
127.0.0.1	dl3.spywarestrike.com
127.0.0.1	dl4.spywarestrike.com
127.0.0.1	dl5.spywarestrike.com
127.0.0.1	dl6.spywarestrike.com
127.0.0.1	dl7.spywarestrike.com
127.0.0.1	dl8.spywarestrike.com
127.0.0.1	nospywaresoft.com
127.0.0.1	spywarestrike.com
127.0.0.1	www.nospywaresoft.com
127.0.0.1	www.spywarestrike.com
127.0.0.1	spyaxesupport.com
127.0.0.1	www.spyaxesupport.com
127.0.0.1	download3.spyaxe.com
127.0.0.1	download4.spyaxe.com
127.0.0.1	download5.spyaxe.com
127.0.0.1	download6.spyaxe.com
127.0.0.1	dl2.spyfalcon.com
127.0.0.1	dl3.spyfalcon.com
127.0.0.1	dl4.spyfalcon.com
127.0.0.1	dl5.spyfalcon.com
127.0.0.1	dl9.spyfalcon.com
127.0.0.1	dl10.spyfalcon.com
127.0.0.1	dl16.spyfalcon.com
127.0.0.1	www.sgrunt.biz
127.0.0.1	traffbest.biz
127.0.0.1	www.traffbest.biz
127.0.0.1	securityfeature.com
127.0.0.1	www.securityfeature.com
127.0.0.1	pimasoft.com
127.0.0.1	www.pimasoft.com
127.0.0.1	blackhawksoftware.com
127.0.0.1	www.blackhawksoftware.com
127.0.0.1	spy-sniper.com
127.0.0.1	www.spy-sniper.com
127.0.0.1	safetydefender.com
127.0.0.1	www.safetydefender.com
127.0.0.1	securitywarnings.net
127.0.0.1	www.securitywarnings.net
127.0.0.1	urgentsystemupdate.biz
127.0.0.1	www.urgentsystemupdate.biz
127.0.0.1	antispylab.com
127.0.0.1	www.antispylab.com
127.0.0.1	spywaresheriff.com
127.0.0.1	www.spywaresheriff.com
127.0.0.1	allmegabucks.com
127.0.0.1	www.allmegabucks.com
127.0.0.1	rizalof.com
127.0.0.1	www.rizalof.com
127.0.0.1	rc.rizalof.com
127.0.0.1	media-codec.com
127.0.0.1	www.media-codec.com
127.0.0.1	SpywareScraper.com
127.0.0.1	www.SpywareScraper.com
127.0.0.1	crystalysmedia.com
127.0.0.1	www.crystalysmedia.com
127.0.0.1	180solutions.com
127.0.0.1	cts.180solutions.com
127.0.0.1	bis.180solutions.com
127.0.0.1	downloads.180solutions.com
127.0.0.1	uploads.180solutions.com
127.0.0.1	installs.180solutions.com
127.0.0.1	config.180solutions.com
127.0.0.1	ping.180solutions.com
127.0.0.1	tv.180solutions.com
127.0.0.1	nowhere.180solutions.com
127.0.0.1	www.180solutions.com
127.0.0.1	180searchassistant.com
127.0.0.1	www.180searchassistant.com
127.0.0.1	theguardservices.com
127.0.0.1	www.theguardservices.com
127.0.0.1	securitybulletin.net
127.0.0.1	www.securitybulletin.net
127.0.0.1	www.supernet.speedserv.com
127.0.0.1	spyonthis.net
127.0.0.1	download.spyonthis.net
127.0.0.1	www.spyonthis.net
127.0.0.1	hijack-this.net
127.0.0.1	www.hijack-this.net
127.0.0.1	errorsafe.com
127.0.0.1	de.errorsafe.com
127.0.0.1	download.errorsafe.com
127.0.0.1	www.errorsafe.com
127.0.0.1	amaena.com
127.0.0.1	trial.updates.winsoftware.com
127.0.0.1	instlog.winfixer.com
127.0.0.1	winfixer2006.com
127.0.0.1	www.winfixer2006.com
127.0.0.1	webtopsecurity.com
127.0.0.1	www.webtopsecurity.com
127.0.0.1	traff5all.biz
127.0.0.1	www.traff5all.biz
127.0.0.1	download.bravesentry.com
127.0.0.1	www.download.bravesentry.com
127.0.0.1	evko.biz
127.0.0.1	www.evko.biz
127.0.0.1	lavasoftupdate.com
127.0.0.1	www.lavasoftupdate.com
127.0.0.1	download.secureyournet.biz
127.0.0.1	www.download.secureyournet.biz
127.0.0.1	secureyournet.biz
127.0.0.1	www.secureyournet.biz
127.0.0.1	windupdates.com
127.0.0.1	asdbiz.biz
127.0.0.1	www.asdbiz.biz
127.0.0.1	spywarelabs.com
127.0.0.1	www.spywarelabs.com
127.0.0.1	traffweb1.biz
127.0.0.1	www.traffweb1.biz
127.0.0.1	newtoolbar.biz
127.0.0.1	www.newtoolbar.biz
127.0.0.1	buytraff.biz
127.0.0.1	www.buytraff.biz
127.0.0.1	safetyuptodate.com
127.0.0.1	www.safetyuptodate.com
127.0.0.1	crazywinnings.com
127.0.0.1	frame.crazywinnings.com
127.0.0.1	www.crazywinnings.com
127.0.0.1	topconverting.com
127.0.0.1	www.topconverting.com
127.0.0.1	casalemedia.com
127.0.0.1	b.casalemedia.com
127.0.0.1	www.casalemedia.com
127.0.0.1	addictivetechnologies.com
127.0.0.1	www.addictivetechnologies.com
127.0.0.1	addictivetechnologies.net
127.0.0.1	www.addictivetechnologies.net
127.0.0.1	admin2cash.biz
127.0.0.1	www.admin2cash.biz
127.0.0.1	advcash.biz
127.0.0.1	www.advcash.biz
127.0.0.1	all4internet.com
127.0.0.1	www.all4internet.com
127.0.0.1	bettersearch.biz
127.0.0.1	www.bettersearch.biz
127.0.0.1	c4tdownload.com
127.0.0.1	www.c4tdownload.com
127.0.0.1	clickspring.net
127.0.0.1	www.clickspring.net
127.0.0.1	contentmatch.net
127.0.0.1	www.contentmatch.net
127.0.0.1	dialer-shop.com
127.0.0.1	www.dialer-shop.com
127.0.0.1	dialoff.com
127.0.0.1	www.dialoff.com
127.0.0.1	energy-factor.com
127.0.0.1	www.energy-factor.com
127.0.0.1	hardcorefantasyland.com
127.0.0.1	www.hardcorefantasyland.com
127.0.0.1	hardfootballbabes.com
127.0.0.1	www.hardfootballbabes.com
127.0.0.1	linkautomatici.com
127.0.0.1	www.linkautomatici.com
127.0.0.1	master69.biz
127.0.0.1	www.master69.biz
127.0.0.1	master70.biz
127.0.0.1	www.master70.biz
127.0.0.1	master71.biz
127.0.0.1	www.master71.biz
127.0.0.1	mcdial.biz
127.0.0.1	www.mcdial.biz
127.0.0.1	mt-download.com
127.0.0.1	www.mt-download.com
127.0.0.1	my-teensex.com
127.0.0.1	overpro.com
127.0.0.1	private-dialer.biz
127.0.0.1	private-iframe.biz
127.0.0.1	redfunny.com
127.0.0.1	scoobidoo.com
127.0.0.1	skoobidoo.com
127.0.0.1	sexvideopro.com
127.0.0.1	storage-tasp.com
127.0.0.1	xbeta69.com
127.0.0.1	securityuptodate.net
127.0.0.1	www.securityuptodate.net
127.0.0.1	troonety.biz
127.0.0.1	www.troonety.biz
127.0.0.1	zurrusco.com
127.0.0.1	www.zurrusco.com
127.0.0.1	breenten.biz
127.0.0.1	www.breenten.biz
127.0.0.1	votreenton.biz
127.0.0.1	www.votreenton.biz
127.0.0.1	ozonung.biz
127.0.0.1	www.ozonung.biz
127.0.0.1	213.21.215.186
127.0.0.1	digikeygen.com
127.0.0.1	www.digikeygen.com
127.0.0.1	moviereality.com
127.0.0.1	www.moviereality.com
127.0.0.1	perfectedsecurity.com
127.0.0.1	www.perfectedsecurity.com
127.0.0.1	securityprecaution.net
127.0.0.1	www.securityprecaution.net
127.0.0.1	securityupdatesite.com
127.0.0.1	www.securityupdatesite.com
127.0.0.1	dns-look-up.com
127.0.0.1	www.dns-look-up.com
127.0.0.1	ayb.dns-look-up.com
127.0.0.1	search200.com
127.0.0.1	www.search200.com
127.0.0.1	404dns.com
127.0.0.1	www.404dns.com
127.0.0.1	mcboo.com
127.0.0.1	dr.mcboo.co

grosquick · Answer

Et le rapport Toolbar S&D :


   -----------\  ToolBar S&D 1.2.6   XP/Vista

   Microsoft® Windows Vista™ Édition Familiale Premium  ( v6.0.6001 ) Service Pack 1
   X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU           T2250  @ 1.73GHz )
   BIOS : Ver 1.00PARTTBLP
   USER : Henri III ( Administrator )
   BOOT : Normal boot
   Firewall  : Look 'n' Stop 2.06p3 (Soft4Ever) 2.06p3 (Activated)
   C:\ (Local Disk) - NTFS - Total:70 Go (Free:24 Go)
   D:\ (Local Disk) - NTFS - Total:70 Go (Free:70 Go)
   E:\ (CD or DVD)
   F:\ (USB) - FAT - Total:235 Mo (Free:0 Go)

   "C:\ToolBar SD" ( MAJ : 04-12-2008|20:40 )
   Option : [1] ( 06/12/2008| 9:24 )

   [ UAC => 1 ]

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "SEARCH PAGE"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Local Page"="C:\windows\system32\blank.htm"
   "Url"="https://www.msn.com/fr-fr/actualite/"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"
   "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Local Page"="C:\windows\system32\blank.htm"


   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [ UAC => 1 ]


   1 - "C:\ToolBar SD\TB_1.txt" - 06/12/2008| 9:26 - Option : [1]

   -----------\  Fin du rapport a  9:26:07,38

grosquick · Answer

Désolé, voici le rapport SmitFraudFix en entier....

SmitFraudFix v2.381

Scan done at  9:12:49,75, 06/12/2008
Run from C:\Users\Henri III\Desktop\SmitfraudFix
OS: Microsoft Windows [version 6.0.6001] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1       localhost
::1             localhost
127.0.0.1	babe.the-killer.bz
127.0.0.1	www.babe.the-killer.bz
127.0.0.1	babe.k-lined.com
127.0.0.1	www.babe.k-lined.com
127.0.0.1	did.i-used.cc
127.0.0.1	www.did.i-used.cc
127.0.0.1	coolwwwsearch.com
127.0.0.1	www.coolwwwsearch.com
127.0.0.1	coolwebsearch.com
127.0.0.1	www.coolwebsearch.com
127.0.0.1	hi.studioaperto.net
127.0.0.1	www.hi.studioaperto.net
127.0.0.1	wazzupnet.com
127.0.0.1	www.wazzupnet.com
127.0.0.1	gueb.com
127.0.0.1	www.gueb.com
127.0.0.1	kabex.com
127.0.0.1	www.kabex.com
127.0.0.1	hityou.com
127.0.0.1	www.hityou.com
127.0.0.1	miosearch.com
127.0.0.1	www.miosearch.com
127.0.0.1	213.131.225.2
127.0.0.1	blue-elefant.com
127.0.0.1	www.blue-elefant.com
127.0.0.1	babeweb.de
127.0.0.1	www.babeweb.de
127.0.0.1	start-seite.com
127.0.0.1	www.start-seite.com
127.0.0.1	sexolymp.com
127.0.0.1	www.sexolymp.com
127.0.0.1	toriii.cc
127.0.0.1	www.toriii.cc
127.0.0.1	xtipp.de
127.0.0.1	www.xtipp.de
127.0.0.1	urawa.cool.ne.jp
127.0.0.1	777search.com
127.0.0.1	www.777search.com
127.0.0.1	ace-webmaster.com
127.0.0.1	www.ace-webmaster.com
127.0.0.1	aifind.info
127.0.0.1	www.aifind.info
127.0.0.1	amateurliveshow.com
127.0.0.1	www.amateurliveshow.com
127.0.0.1	anarchylolita.com
127.0.0.1	www.anarchylolita.com
127.0.0.1	anarchyporn.com
127.0.0.1	approvedlinks.com
127.0.0.1	www.approvedlinks.com
127.0.0.1	cantfind.com
127.0.0.1	www.cantfind.com
127.0.0.1	castingsamateur.com
127.0.0.1	www.castingsamateur.com
127.0.0.1	cyberrape.com
127.0.0.1	www.cyberrape.com
127.0.0.1	dialerclub.com
127.0.0.1	www.dialerclub.com
127.0.0.1	megago.com
127.0.0.1	exit.megago.com
127.0.0.1	www.megago.com
127.0.0.1	fastmetasearch.com
127.0.0.1	www.fastmetasearch.com
127.0.0.1	findwhatevernow.com
127.0.0.1	www.findwhatevernow.com
127.0.0.1	globesearch.com
127.0.0.1	www.globesearch.com
127.0.0.1	hotfreebies.com
127.0.0.1	www.hotfreebies.com
127.0.0.1	krankin.com
127.0.0.1	www.krankin.com
127.0.0.1	begin2search.com
127.0.0.1	www.begin2search.com
127.0.0.1	mainstreamdollars.com
127.0.0.1	www.mainstreamdollars.com
127.0.0.1	live.sex-explorer.com
127.0.0.1	www.live.sex-explorer.com
127.0.0.1	loveadot.com
127.0.0.1	www.loveadot.com
127.0.0.1	megaseek.net
127.0.0.1	www.megaseek.net
127.0.0.1	mixsearch.com
127.0.0.1	www.mixsearch.com
127.0.0.1	munky.com
127.0.0.1	www.munky.com
127.0.0.1	newtopsites.com
127.0.0.1	www.newtopsites.com
127.0.0.1	noblindlinks.com
127.0.0.1	www.noblindlinks.com
127.0.0.1	babenet.com
127.0.0.1	r.babenet.com
127.0.0.1	www.babenet.com
127.0.0.1	searchresult.net
127.0.0.1	www.searchresult.net
127.0.0.1	sexarena.org
127.0.0.1	www.sexarena.org
127.0.0.1	skeech.com
127.0.0.1	www.skeech.com
127.0.0.1	superwp.by.ru
127.0.0.1	sureseeker.com
127.0.0.1	www.sureseeker.com
127.0.0.1	wethere.com
127.0.0.1	www.wethere.com
127.0.0.1	wowsearch.org
127.0.0.1	www.wowsearch.org
127.0.0.1	xxx.com
127.0.0.1	www.xxx.com
127.0.0.1	art-xxx.com
127.0.0.1	websearch.com
127.0.0.1	www.websearch.com
127.0.0.1	firehunt.com
127.0.0.1	www.firehunt.com
127.0.0.1	partner23.firehunt.com
127.0.0.1	screensaver.it
127.0.0.1	www.screensaver.it
127.0.0.1	cliks.org
127.0.0.1	www.cliks.org
127.0.0.1	xads.cliks.org
127.0.0.1	xwebsearch.biz
127.0.0.1	www.xwebsearch.biz
127.0.0.1	znext.com
127.0.0.1	www.znext.com
127.0.0.1	rawtocash.net
127.0.0.1	www.rawtocash.net
127.0.0.1	7search.com
127.0.0.1	www.7search.com
127.0.0.1	zestyfind.com
127.0.0.1	www.zestyfind.com
127.0.0.1	ntcor.com
127.0.0.1	www.ntcor.com
127.0.0.1	dev.ntcor.com
127.0.0.1	xrenoder.com
127.0.0.1	www.xrenoder.com
127.0.0.1	search.xrenoder.com
127.0.0.1	193.125.201.50
127.0.0.1	allcybersearch.com
127.0.0.1	www.allcybersearch.com
127.0.0.1	tinybar.com
127.0.0.1	www.tinybar.com
127.0.0.1	topsite.us
127.0.0.1	www.topsite.us
127.0.0.1	topsites.us
127.0.0.1	www.topsites.us
127.0.0.1	topsitez.us
127.0.0.1	www.topsitez.us
127.0.0.1	true-counter.com
127.0.0.1	www.true-counter.com
127.0.0.1	out.true-counter.com
127.0.0.1	cnetadd.com
127.0.0.1	www.cnetadd.com
127.0.0.1	okmmm.com
127.0.0.1	www.okmmm.com
127.0.0.1	008k.com
127.0.0.1	www.008k.com
127.0.0.1	00hq.com
127.0.0.1	www.00hq.com
127.0.0.1	1-domains-registrations.com
127.0.0.1	www.1-domains-registrations.com
127.0.0.1	100sexlinks.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	1sexparty.com
127.0.0.1	www.1sexparty.com
127.0.0.1	1stpagehere.com
127.0.0.1	www.1stpagehere.com
127.0.0.1	2020search.com
127.0.0.1	www.2020search.com
127.0.0.1	24teen.com
127.0.0.1	www.24teen.com
127.0.0.1	36site.com
127.0.0.1	www.36site.com
127.0.0.1	4corn.net
127.0.0.1	www.4corn.net
127.0.0.1	66.117.14.138
127.0.0.1	66.250.74.150
127.0.0.1	777top.com
127.0.0.1	www.777top.com
127.0.0.1	8ad.com
127.0.0.1	www.8ad.com
127.0.0.1	aboutclicker.com
127.0.0.1	www.aboutclicker.com
127.0.0.1	abrp.net
127.0.0.1	www.abrp.net
127.0.0.1	accessthefuture.net
127.0.0.1	www.accessthefuture.net
127.0.0.1	acemedic.com
127.0.0.1	www.acemedic.com
127.0.0.1	actionbreastcancer.org
127.0.0.1	www.actionbreastcancer.org
127.0.0.1	activexupdate.com
127.0.0.1	www.activexupdate.com
127.0.0.1	adamsupportgroup.org
127.0.0.1	www.adamsupportgroup.org
127.0.0.1	adasearch.com
127.0.0.1	www.adasearch.com
127.0.0.1	adipics.com
127.0.0.1	www.adipics.com
127.0.0.1	adspics.com
127.0.0.1	www.adspics.com
127.0.0.1	adult-engine-search.com
127.0.0.1	www.adult-engine-search.com
127.0.0.1	adult-erotic-guide.net
127.0.0.1	www.adult-erotic-guide.net
127.0.0.1	adult-friends-finder.net
127.0.0.1	www.adult-friends-finder.net
127.0.0.1	adulthyperlinks.com
127.0.0.1	www.adulthyperlinks.com
127.0.0.1	adulttds.com
127.0.0.1	www.adulttds.com
127.0.0.1	exaccess.ru
127.0.0.1	www.exaccess.ru
127.0.0.1	advert.exaccess.ru
127.0.0.1	agentstudio.com
127.0.0.1	africaspromise.org
127.0.0.1	akril.com
127.0.0.1	alcatel.ws
127.0.0.1	alfa-search.com
127.0.0.1	all-inet.com
127.0.0.1	allabtcars.com
127.0.0.1	allabtjeeps.com
127.0.0.1	allhyperlinks.com
127.0.0.1	allinternetbusiness.com
127.0.0.1	almarvideos.com
127.0.0.1	amandamountains.com
127.0.0.1	amigeek.com
127.0.0.1	amisbusiness.com
127.0.0.1	analmovi.com
127.0.0.1	anin.org
127.0.0.1	annaromeo.com
127.0.0.1	antrocity.com
127.0.0.1	anything4health.com
127.0.0.1	apsua.com
127.0.0.1	aregay.com
127.0.0.1	arheo.com
127.0.0.1	arizonaweb.org
127.0.0.1	armitageinn.com
127.0.0.1	art-func.com
127.0.0.1	artachnid.com
127.0.0.1	asiankingkong.com
127.0.0.1	ass-gals.com
127.0.0.1	athenrye.com
127.0.0.1	avian-ads.com
127.0.0.1	ayakawamura.com
127.0.0.1	ayumitaniguchi.com
127.0.0.1	bannedhost.net
127.0.0.1	barbudafarms.com
127.0.0.1	barnandfence.com
127.0.0.1	batsearch.com
127.0.0.1	baygraphicsllc.com
127.0.0.1	bb-search.com
127.0.0.1	bbbsearch.com
127.0.0.1	bedhome.com
127.0.0.1	bediadance.com
127.0.0.1	bellabasketsfl.com
127.0.0.1	bernaolatwin.com
127.0.0.1	best-counter.com
127.0.0.1	best-hardpics.com
127.0.0.1	best-winning-casino.com
127.0.0.1	bestcrawler.com
127.0.0.1	bestfor.ru
127.0.0.1	bestporngate.com
127.0.0.1	bestxporno.com
127.0.0.1	blackjack-free.net
127.0.0.1	blender.xu.pl
127.0.0.1	bodaciousbabette.com
127.0.0.1	boobdoll.com
127.0.0.1	boobsandtits.com
127.0.0.1	boobsclub.com
127.0.0.1	boredlife.com
127.0.0.1	bowlofogumbo.com
127.0.0.1	bradcoem.org
127.0.0.1	brandiyoung.com
127.0.0.1	brookeburn.com
127.0.0.1	bucps.com
127.0.0.1	burgerkingbigscreen.com
127.0.0.1	buscards.net
127.0.0.1	bustyrussell.com
127.0.0.1	buttejazz.org
127.0.0.1	buyselldomain.net
127.0.0.1	calcioturris.com
127.0.0.1	canberracricketcoaching.com
127.0.0.1	candycantaloupes.com
127.0.0.1	careers.dulcineasystems.net
127.0.0.1	carsands.com
127.0.0.1	carsrentals.net
127.0.0.1	casino-gambling-1.net
127.0.0.1	casino-gambling-2.net
127.0.0.1	casino-onlines.net
127.0.0.1	casino.com.free.game.pogo.gratisdownloads.nl
127.0.0.1	casino2win.net
127.0.0.1	casinomidas.net
127.0.0.1	casinonline.net
127.0.0.1	catallogue.com
127.0.0.1	catsss.da.ru
127.0.0.1	caxa.ru
127.0.0.1	cclebali.org
127.0.0.1	ceewawires.org
127.0.0.1	certumgroup.com
127.0.0.1	chelancatering.com
127.0.0.1	childrenvilla.com
127.0.0.1	chips-4-free.com
127.0.0.1	chrisswasey.com
127.0.0.1	chriswallace.net
127.0.0.1	ckick4thumbs.com
127.0.0.1	clackamasliteraryreview.com
127.0.0.1	clearsearch.cc
127.0.0.1	clearsearch.net
127.0.0.1	clickaire.com
127.0.0.1	clickyestoenter.net
127.0.0.1	clrsch.com
127.0.0.1	cmtapestry.com
127.0.0.1	cool-homepage.co
127.0.0.1	cool-homepage.com
127.0.0.1	cool-search.net
127.0.0.1	cool-search.netfartpost.com
127.0.0.1	cool-web-search.com
127.0.0.1	coolfetishsite.com
127.0.0.1	coolfreehost.com
127.0.0.1	coolfreepage.com
127.0.0.1	coolfreepages.com
127.0.0.1	coolmoneysearch.com
127.0.0.1	coolpornsearch.com
127.0.0.1	coolsearcher.info
127.0.0.1	coolwebsearsh.com
127.0.0.1	copmtraine.com
127.0.0.1	couldnotfind.com
127.0.0.1	count-all.com
127.0.0.1	cracks.me.uk
127.0.0.1	creamedcutties.com
127.0.0.1	creditsearchonline.com
127.0.0.1	crestring.com
127.0.0.1	crooder.com
127.0.0.1	curvedspaces.com
127.0.0.1	cvs.jps.ru
127.0.0.1	cvsymphony.com
127.0.0.1	cydom.com
127.0.0.1	daily-gals.com
127.0.0.1	dancingbabycd.com
127.0.0.1	datanotary.com
127.0.0.1	datareco.com
127.0.0.1	davemarshall.org
127.0.0.1	dcfitusa.com
127.0.0.1	defaultsearch.net
127.0.0.1	desarrollocreativo.com
127.0.0.1	develip.com
127.0.0.1	dewis.spb.ru
127.0.0.1	dewis.us
127.0.0.1	df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
127.0.0.1	dietpills4free.com
127.0.0.1	dietpussy.com
127.0.0.1	digistreamsa.com
127.0.0.1	dionforvalleycouncil.org
127.0.0.1	doctorwaldron.com
127.0.0.1	document-not-found.pornpic.org
127.0.0.1	doggyaction.com
127.0.0.1	domain-your-registration.com
127.0.0.1	domains-for-you-online.com
127.0.0.1	domains2003.net
127.0.0.1	domkrat.com
127.0.0.1	dp-host.com
127.0.0.1	dragqueen.gay-clan.com
127.0.0.1	drug-sources-exposed.com
127.0.0.1	drvvv.com
127.0.0.1	dutch-sex.com
127.0.0.1	dvdbank.org
127.0.0.1	e-localad.com
127.0.0.1	e-plus.cc
127.0.0.1	e-websitesolutions.com
127.0.0.1	eases.net
127.0.0.1	easy-search.net
127.0.0.1	easycategories.com
127.0.0.1	ecosrioplatenses.org
127.0.0.1	ecstasyporn.net
127.0.0.1	eikokoike.com
127.0.0.1	epornsex.com
127.0.0.1	euuu.com
127.0.0.1	evidence-detector.biz
127.0.0.1	evilspidercomics.com
127.0.0.1	ewebsearch.net
127.0.0.1	findloss.com
127.0.0.1	excellentsckin.com
127.0.0.1	extremeseek.net
127.0.0.1	faithstevens.com
127.0.0.1	fantasiewelten.com
127.0.0.1	farmsteadbandb.com
127.0.0.1	fartpost.com
127.0.0.1	fastwebfinder.com
127.0.0.1	faxporn.com
127.0.0.1	fickenisgeil.de
127.0.0.1	finance-loans.com
127.0.0.1	find-itnow.com
127.0.0.1	find-uk-health.co.uk
127.0.0.1	find4u.net
127.0.0.1	findit-now.com
127.0.0.1	findthesite.com
127.0.0.1	findthewebsiteyouneed.com
127.0.0.1	www.findthewebsiteyouneed.com
127.0.0.1	fionasteel.com
127.0.0.1	firstbookmark.net
127.0.0.1	fitness-free.com
127.0.0.1	foodvacations.net
127.0.0.1	forex.jps.ru
127.0.0.1	forexcredit.com
127.0.0.1	forexcredit.ru
127.0.0.1	formingfusions.com
127.0.0.1	forsythfire.net
127.0.0.1	forthline.com
127.0.0.1	free-chipes.com
127.0.0.1	free-hit.com
127.0.0.1	free-pics-and-movies.com
127.0.0.1	free-sex-movie-clips.net
127.0.0.1	free4porno.net
127.0.0.1	free64all.com
127.0.0.1	freebookmark.net
127.0.0.1	freebookmarks.net
127.0.0.1	freecategories.com
127.0.0.1	freecoolhost.com
127.0.0.1	freerbhost.com
127.0.0.1	freeshemalepics.net
127.0.0.1	freeyaho.com
127.0.0.1	freshseek.com
127.0.0.1	freshteensite.com
127.0.0.1	gabrielscott.com
127.0.0.1	galpostgirls.com
127.0.0.1	gals-for-free.com
127.0.0.1	gambling-online4you.com
127.0.0.1	gameterror.net
127.0.0.1	gay50.com
127.0.0.1	generalsmeltingofcanada.com
127.0.0.1	geteens.com
127.0.0.1	getpicshere.com
127.0.0.1	gimmezamore.com
127.0.0.1	gimnasiaer.com
127.0.0.1	girls-porn-life.com
127.0.0.1	glbdf.org
127.0.0.1	global-finder.com
127.0.0.1	globe-finder.cc
127.0.0.1	globe-finder.com
127.0.0.1	gocybersearch.com
127.0.0.1	golftennis.net
127.0.0.1	good-mortgages-calculator.com
127.0.0.1	good-mortgages.net
127.0.0.1	goodsexs.com
127.0.0.1	googlebar.jps.ru
127.0.0.1	googlf.com
127.0.0.1	gradforum.org
127.0.0.1	gratis-porn-movie.com
127.0.0.1	gratis-pornopics.com
127.0.0.1	guzzycats.com
127.0.0.1	gzphoenix.com
127.0.0.1	hallnetaccolade.com
127.0.0.1	hand-book.com
127.0.0.1	happyanal.com
127.0.0.1	hard-gals.com
127.0.0.1	hardbodytgp.com
127.0.0.1	hardcoreover.com
127.0.0.1	hardloved.com
127.0.0.1	hardwareseek.net
127.0.0.1	harukaigawa.com
127.0.0.1	hccsolanonapa.org
127.0.0.1	health-protein.com
127.0.0.1	hentai4u.net
127.0.0.1	here4search.com
127.0.0.1	heyrichy.com
127.0.0.1	hi-search.com
127.0.0.1	hiddenguides.com
127.0.0.1	hitlistlyrics.com
127.0.0.1	holidayautostr.com
127.0.0.1	homemortage.ws
127.0.0.1	hostssp.com
127.0.0.1	hot-cartoon-sex.anime.american-teens.net
127.0.0.1	hotbookmark.com
127.0.0.1	hotels-list.net
127.0.0.1	hotelxxxcams.com
127.0.0.1	hotpopup.com
127.0.0.1	hotsearchbox.com
127.0.0.1	hotsex-series.com
127.0.0.1	hotstartpage.com
127.0.0.1	hqsex.biz
127.0.0.1	hugeporn4u.net
127.0.0.1	hunacsa.com
127.0.0.1	hupacasath.com
127.0.0.1	hzsx.com
127.0.0.1	icansearch.net
127.0.0.1	idgsearch.com
127.0.0.1	ie-search.com
127.0.0.1	incestporngate.com
127.0.0.1	infodigger.net
127.0.0.1	infoglobus.com
127.0.0.1	inherhole.com
127.0.0.1	insertthiscock.com
127.0.0.1	insurance-flood.net
127.0.0.1	insuranceall.net
127.0.0.1	internetsearch.ru
127.0.0.1	ionichost.com
127.0.0.1	ionomist.com
127.0.0.1	ipsex.net
127.0.0.1	itsanal.com
127.0.0.1	itseasy.us
127.0.0.1	iweb-commerce.com
127.0.0.1	iwebland.com
127.0.0.1	jeannineoldfield.com
127.0.0.1	jethomepage.com
127.0.0.1	jetseeker.com
127.0.0.1	jmhgallery.org
127.0.0.1	joannelatham.com
127.0.0.1	judin.ru
127.0.0.1	junkysex.com
127.0.0.1	karleyt.narod.ru
127.0.0.1	kathisomers.com
127.0.0.1	kazaa-lite.ws
127.0.0.1	keithgreenpro.com
127.0.0.1	kenmccaul.com
127.0.0.1	kilosex.com
127.0.0.1	kimhines.com
127.0.0.1	kinoru.com
127.0.0.1	ksdspups.org
127.0.0.1	landrape.com
127.0.0.1	lauraroebuck.com
127.0.0.1	leannalovelace.com
127.0.0.1	lesobank.ru
127.0.0.1	libertyonlinehosting.com
127.0.0.1	lingerie-mania.com
127.0.0.1	lisamatthew.com
127.0.0.1	liveholio.com
127.0.0.1	livenewspaper.com
127.0.0.1	louiseleeds.com
127.0.0.1	love-pix.com
127.0.0.1	lovelas.com
127.0.0.1	lovelysearch.com
127.0.0.1	low-taxes.com
127.0.0.1	luckysearch.net
127.0.0.1	lunitaweb.net
127.0.0.1	lustful-porno.com
127.0.0.1	mackinnonsbrook.org
127.0.0.1	madfinder.com
127.0.0.1	madisonmoons.com
127.0.0.1	madisonoilco.com
127.0.0.1	madonalive.com
127.0.0.1	majuozawa.com
127.0.0.1	makin-do.com
127.0.0.1	male4free.com
127.0.0.1	map-quest.org
127.0.0.1	marilynchamber.com
127.0.0.1	martfinder.com
127.0.0.1	massearch.com
127.0.0.1	matetrava.com
127.0.0.1	mature50.com
127.0.0.1	matureporngate.com
127.0.0.1	maxdzines.com
127.0.0.1	mcgeeforlabor.com
127.0.0.1	mdstunisie.org
127.0.0.1	medicare-insurance.net
127.0.0.1	medicare-supplemental.com
127.0.0.1	mega-dating-tips.com
127.0.0.1	megumikanzaki.com
127.0.0.1	meshalynn.com
127.0.0.1	meta-adult.com
127.0.0.1	meta-casino.com
127.0.0.1	meta-mobile.com
127.0.0.1	meta-porn.com
127.0.0.1	metafora.ru
127.0.0.1	metapoisk.ru
127.0.0.1	michiyonakajima.com
127.0.0.1	miconsultamedica.com
127.0.0.1	mikasakamoto.com
127.0.0.1	mikoni.com
127.0.0.1	militarygods.porn4porn.net
127.0.0.1	millennialpeople.org
127.0.0.1	mipham.org
127.0.0.1	missingcommand.com
127.0.0.1	mommykiss.com
127.0.0.1	moneyhunters.com
127.0.0.1	montgomeryhospitalanesthesia.com
127.0.0.1	morflot.com
127.0.0.1	mortgage-debt.net
127.0.0.1	mortismaximus.com
127.0.0.1	moscowwhores.com
127.0.0.1	moviecategories.com
127.0.0.1	mp3-pix.com
127.0.0.1	mrtg.jps.ru
127.0.0.1	msn-info.net
127.0.0.1	multipussy.com
127.0.0.1	mundopolar.com
127.0.0.1	mustv.com
127.0.0.1	mywebsearch.net
127.0.0.1	nativehardcore.com
127.0.0.1	naturalspy.com
127.0.0.1	nbasportsbook.net
127.0.0.1	nellyslyrics.com
127.0.0.1	nepgyan.com
127.0.0.1	nesrecords.com
127.0.0.1	netshastra.net
127.0.0.1	nettime.ru
127.0.0.1	nettracker.jps.ru
127.0.0.1	netyellowpages.info
127.0.0.1	new-incest.com
127.0.0.1	newcategories.com
127.0.0.1	newcracks.com
127.0.0.1	newcracks.net
127.0.0.1	newlife-lajolla.com
127.0.0.1	newsexgate.com
127.0.0.1	newtonsracks.com
127.0.0.1	newxpics.com
127.0.0.1	nhlsportsbook.net
127.0.0.1	niagaracapital.com
127.0.0.1	niche-tv.com
127.0.0.1	nmrba.com
127.0.0.1	nocalories.net
127.0.0.1	nocensor.com
127.0.0.1	ormandcompany.com
127.0.0.1	nsbabes.com
127.0.0.1	nuclearwitness.org
127.0.0.1	nursemania.com
127.0.0.1	nvntour.com
127.0.0.1	nvphall.org
127.0.0.1	oborot.com
127.0.0.1	ocalalivestockmarket.com
127.0.0.1	ocsff.com
127.0.0.1	oeatlanta.com
127.0.0.1	oharrowsearch.com
127.0.0.1	ok-search.com
127.0.0.1	okulta.com
127.0.0.1	omegabrains.net
127.0.0.1	online-casino-1.net
127.0.0.1	online-casino-bonus.info
127.0.0.1	online-casinos-x.com
127.0.0.1	online-winning.net
127.0.0.1	onlineserverz.com
127.0.0.1	onlinetradings.net
127.0.0.1	onlycunt.com
127.0.0.1	onlyinsured.com
127.0.0.1	operanabuco.com
127.0.0.1	opsex.com
127.0.0.1	oregoncharters.org
127.0.0.1	otrlives.com
127.0.0.1	ozawamadoka.com
127.0.0.1	paigesummer.com
127.0.0.1	pamelacollections.com
127.0.0.1	panamcup.com
127.0.0.1	pantygirls4u.com
127.0.0.1	pantyhoserealm.com
127.0.0.1	pantyplace.com
127.0.0.1	pastubes.com
127.0.0.1	paulapage.com
127.0.0.1	paulhoover.com
127.0.0.1	payfortraffic.net
127.0.0.1	pedo.ws
127.0.0.1	people.1gb.ru
127.0.0.1	pervertbot.com
127.0.0.1	pharma-diet-pills.com
127.0.0.1	pharmacy2003.com
127.0.0.1	pharmalocator.com
127.0.0.1	phendimetrazine-tenuate-adipex.com
127.0.0.1	pics-videos.com
127.0.0.1	picsdir.com
127.0.0.1	picsforbucks.com
127.0.0.1	picsofseductiveladies.com
127.0.0.1	pills-birth-control.com
127.0.0.1	pillsmall.com
127.0.0.1	pilotronix.com
127.0.0.1	pixpox.com
127.0.0.1	planemusic.com
127.0.0.1	poiska.net
127.0.0.1	poker-casino-free.com
127.0.0.1	poker-games-free.net
127.0.0.1	polradiologia.com
127.0.0.1	pooi.net
127.0.0.1	porn-teacher.com
127.0.0.1	porncamz.com
127.0.0.1	pornfree.info
127.0.0.1	pornnightdreams.com
127.0.0.1	pornokopec.com
127.0.0.1	porntetris.com
127.0.0.1	porntwist.com
127.0.0.1	powerwebsearch.com
127.0.0.1	prblitz.com
127.0.0.1	pretypics.com
127.0.0.1	pribalt.com
127.0.0.1	privacy-support.biz
127.0.0.1	privateporn.net
127.0.0.1	prostactive.com
127.0.0.1	prostol.com
127.0.0.1	protect-yourself.biz
127.0.0.1	prsainlandempire.org
127.0.0.1	put-your-link-here.com
127.0.0.1	pyrocorp.com
127.0.0.1	quick-search.ws
127.0.0.1	quiksearchgenealogy.com
127.0.0.1	radfrall.org
127.0.0.1	ramgo.com
127.0.0.1	ranafrog.ne
127.0.0.1	rapegate.com
127.0.0.1	redbudbmx.com
127.0.0.1	refinance-help.com
127.0.0.1	removeearthkeepers.org
127.0.0.1	rightfinder.net
127.0.0.1	robbsproshop.com
127.0.0.1	robertferencz.com
127.0.0.1	rotocasters.com
127.0.0.1	royalsearch.net
127.0.0.1	runsearch.com
127.0.0.1	russiansponsor.com
127.0.0.1	russogay.com
127.0.0.1	s2.exocrew.com
127.0.0.1	sacitylife.com
127.0.0.1	samplegals.com
127.0.0.1	sbssurvivor.com
127.0.0.1	scarypix.com
127.0.0.1	sccdnet.com
127.0.0.1	schoolforest.com
127.0.0.1	search-1.net
127.0.0.1	search-2003.com
127.0.0.1	search-about.net
127.0.0.1	search-hawk.com
127.0.0.1	search-log.com
127.0.0.1	search-meta.com
127.0.0.1	search-safe.com
127.0.0.1	search.psn.cn
127.0.0.1	searchadultweb.com
127.0.0.1	searchbutler.com
127.0.0.1	searchbuttler.com
127.0.0.1	searchbutler.org
127.0.0.1	searchcomplete.com
127.0.0.1	searchdesire.com
127.0.0.1	searchdot.net
127.0.0.1	searchexpander.com
127.0.0.1	searchfastnet.com
127.0.0.1	searchforge.com
127.0.0.1	searching-the-net.com
127.0.0.1	searchmeta.md
127.0.0.1	searchmeta.net
127.0.0.1	searchmeta.ru
127.0.0.1	searchmeta.webhost.ru
127.0.0.1	searchnow.ws
127.0.0.1	searchonfly.com
127.0.0.1	searchv.com
127.0.0.1	searchxl.com
127.0.0.1	searchxp.com
127.0.0.1	sebot.com
127.0.0.1	securenp.org
127.0.0.1	security-warning.biz
127.0.0.1	seehardcore.com
127.0.0.1	seekwell.net
127.0.0.1	selfbookmark.com
127.0.0.1	selfbookmark.info
127.0.0.1	selfbookmark.net
127.0.0.1	sex.free4porno.net
127.0.0.1	sex-coach.com
127.0.0.1	sex-festival.com
127.0.0.1	sex-video-galleries.com
127.0.0.1	sexgalleries4all.com
127.0.0.1	sexmoviesnet.com
127.0.0.1	sexpatriot.net
127.0.0.1	sexy18.cc
127.0.0.1	sexycat.adult-host.org
127.0.0.1	sfbayfolkboats.com
127.0.0.1	sgirls.net
127.0.0.1	sharempeg.com
127.0.0.1	shopcards.net
127.0.0.1	shopknights.com
127.0.0.1	sic02.com
127.0.0.1	sintrader.com
127.0.0.1	site1.ru
127.0.0.1	sites-in-web.com
127.0.0.1	sitevictoria.com
127.0.0.1	sixroads.com
127.0.0.1	skakalka.ru
127.0.0.1	slawsearch.com
127.0.0.1	slotch.com
127.0.0.1	slotchbar.com
127.0.0.1	smartsumo.com
127.0.0.1	smutarchive.net
127.0.0.1	solongas.com
127.0.0.1	sonomaevents.com
127.0.0.1	spermatrix.com
127.0.0.1	sportbooks-free4you.com
127.0.0.1	spros.com
127.0.0.1	spyass.com
127.0.0.1	spyorgy.net
127.0.0.1	staceyowens.com
127.0.0.1	stacistaxx.com
127.0.0.1	stacystaxx.com
127.0.0.1	start-space.com
127.0.0.1	steamycock.com
127.0.0.1	sterva.com
127.0.0.1	stevecashdollar.com
127.0.0.1	stop-tracking.biz
127.0.0.1	stopvotefraud.com
127.0.0.1	stopxxxpics.com
127.0.0.1	strekoza.com
127.0.0.1	stuffstore.com
127.0.0.1	styleclickink.com
127.0.0.1	summercollins.com
127.0.0.1	summitcross.com
127.0.0.1	super-spider.com
127.0.0.1	super-websearch.com
127.0.0.1	supersexmachine.com
127.0.0.1	superwebsearch.com
127.0.0.1	supret.com
127.0.0.1	suzannebrecht.com
127.0.0.1	sweeteenz.com
127.0.0.1	tacil.org
127.0.0.1	tangounion.com
127.0.0.1	tastethemusic.com
127.0.0.1	tax-refund4you.com
127.0.0.1	tech-jobs.ws
127.0.0.1	technology-related.com
127.0.0.1	teen-biz.com
127.0.0.1	teen-pic-post.com
127.0.0.1	teenpornosex.com
127.0.0.1	teens4free.net
127.0.0.1	teensact.com
127.0.0.1	teensgate.com
127.0.0.1	teensguru.com
127.0.0.1	teenswamp.com
127.0.0.1	testosterone-birth-control.com
127.0.0.1	the-exit.com
127.0.0.1	the-huns-yellow-pages.com
127.0.0.1	thefakejournal.com
127.0.0.1	thehuy.net
127.0.0.1	theproxy.org
127.0.0.1	therealsearch.com
127.0.0.1	thesten.com
127.0.0.1	thornleygroup.com
127.0.0.1	tings.org
127.0.0.1	tit-x.com
127.0.0.1	titanvision.com
127.0.0.1	titsianna.com
127.0.0.1	toddhayes.com
127.0.0.1	toon-comics.com
127.0.0.1	tooncomics.com
127.0.0.1	topsearcher.com
127.0.0.1	trafficback.com
127.0.0.1	trafficswitcher.com
127.0.0.1	travel.picture-posters.com
127.0.0.1	true-portal.com
127.0.0.1	trytechnical.com
127.0.0.1	ufindall.click-now.net
127.0.0.1	umaxsearch.com
127.0.0.1	une-autre-france.com
127.0.0.1	unigays.com
127.0.0.1	unipages.cc
127.0.0.1	up2you.ru
127.0.0.1	urlstat.com
127.0.0.1	urlstat.ru
127.0.0.1	uralitel.ru
127.0.0.1	ursie.net
127.0.0.1	utahsweet.com
127.0.0.1	utopicportal.com
127.0.0.1	uusocialjustice.org
127.0.0.1	v61.com
127.0.0.1	vaginpics.com
127.0.0.1	valmyers.com
127.0.0.1	vegas-free.com
127.0.0.1	vegbuy.com
127.0.0.1	veloventures.com
127.0.0.1	verzila.com
127.0.0.1	victoriaadam.com
127.0.0.1	videocategories.com
127.0.0.1	vitamins-for-each.com
127.0.0.1	votehowe.org
127.0.0.1	vxebony.com
127.0.0.1	wakeupdick.com
127.0.0.1	warnomore.org
127.0.0.1	watersport-specialties.com
127.0.0.1	web-homepage.net
127.0.0.1	web-search.tk
127.0.0.1	webcoolsearch.com
127.0.0.1	websearchdot.com
127.0.0.1	weekend-movies.com
127.0.0.1	wetpornostars.com
127.0.0.1	whatsyoursearch.com
127.0.0.1	white-pages.ws
127.0.0.1	whittierblvd.com
127.0.0.1	win-in-casino.com
127.0.0.1	wiresearch.com
127.0.0.1	wolfpacracing.com
127.0.0.1	wordlist.jps.ru
127.0.0.1	wpc2001.org
127.0.0.1	wspzone.sexpornonline.com
127.0.0.1	wwwbet.net
127.0.0.1	wwwbetting.net
127.0.0.1	wwwpokergames.com
127.0.0.1	wwwpokerplayers.com
127.0.0.1	wwwroulette.net
127.0.0.1	x-library.com
127.0.0.1	x-webdesign.com
127.0.0.1	xcomics4u.com
127.0.0.1	xic-bs.com
127.0.0.1	xldr.com
127.0.0.1	xp18.com
127.0.0.1	xrenosearch.com
127.0.0.1	xtragay.com
127.0.0.1	xu.xu.pl
127.0.0.1	xxxcategories.com
127.0.0.1	xxxemailxxx.com
127.0.0.1	y-e-l-l-o-w.com
127.0.0.1	yellow500.com
127.0.0.1	yezol.com
127.0.0.1	you-search.com
127.0.0.1	you-search.com.ru
127.0.0.1	youfindall.com
127.0.0.1	youfindall.net
127.0.0.1	your-prescriptions.net
127.0.0.1	yourbookmarks.info
127.0.0.1	yourbookmarks.ws
127.0.0.1	ypir.com
127.0.0.1	ysa-info.net
127.0.0.1	yukohamano.com
127.0.0.1	ywebsearch.info
127.0.0.1	zapros.com
127.0.0.1	zesearch.com
127.0.0.1	ziportal.com
127.0.0.1	zipportal.com
127.0.0.1	zoneoffreeporn.com
127.0.0.1	zoomegasite.com
127.0.0.1	zvimigdal.com
127.0.0.1	zyban-zocor-levitra.com
127.0.0.1	t.rack.cc
127.0.0.1	omega-search.com
127.0.0.1	cool-xxx.net
127.0.0.1	revolto3.da.ru
127.0.0.1	dating-search.net
127.0.0.1	linksummary.com
127.0.0.1	duolaimi.net
127.0.0.1	ez-searching.com
127.0.0.1	freehqmovies.com
127.0.0.1	xzoomy.com
127.0.0.1	freescratchandwin.com
127.0.0.1	globalwebsearch.com
127.0.0.1	www.gocybersearch.com
127.0.0.1	mayancasino.com
127.0.0.1	www.hastalavista.com
127.0.0.1	www.free-popup-killer.com
127.0.0.1	www.digitalfan.com
127.0.0.1	google123.web1000.com
127.0.0.1	search.ieplugin.com
127.0.0.1	i-lookup.com
127.0.0.1	spidersearch.com
127.0.0.1	istarthere.com
127.0.0.1	xxxtoolbar.com
127.0.0.1	www.seekporn.org
127.0.0.1	17-plus.com
127.0.0.1	lolita4all1.xrensmagpost.com
127.0.0.1	mafiapics.com
127.0.0.1	www.teenmonster.com
127.0.0.1	ie.marketdart.com
127.0.0.1	masterbar.com
127.0.0.1	search.netzany.co
127.0.0.1	only-virgins.com
127.0.0.1	passthison.com
127.0.0.1	blondetgp.com
127.0.0.1	prolivation.com
127.0.0.1	server-au.imrworldwide.com
127.0.0.1	rocketsearch.com
127.0.0.1	.roar.com
127.0.0.1	searchaccurate.com
127.0.0.1	searchalot.com
127.0.0.1	searchandbrowse.com
127.0.0.1	gtawarehouse.com
127.0.0.1	startium.com
127.0.0.1	searchandclick.com
127.0.0.1	searchby.net
127.0.0.1	searchdot.com
127.0.0.1	search-exe.com
127.0.0.1	secret-crush.com
127.0.0.1	seekseek.com
127.0.0.1	sexarena.com
127.0.0.1	sexocean.play-lolita.com
127.0.0.1	startsurfing.com
127.0.0.1	srng.net
127.0.0.1	apps.webservicehost.com
127.0.0.1	search.shopnav.com
127.0.0.1	wish7.com
127.0.0.1	216.65.3.68
127.0.0.1	www.supersexpass.com
127.0.0.1	surferbar.com
127.0.0.1	xlola.underagehost.com
127.0.0.1	hotlolitas.underagehost.com
127.0.0.1	loading-lolita.com
127.0.0.1	www.xupiter.com
127.0.0.1	xjupiter.com
127.0.0.1	www.xjupiter.com
127.0.0.1	www.browserwise.com
127.0.0.1	sqwire.com
127.0.0.1	orbitexplorer.com
127.0.0.1	searchcentrix.com
127.0.0.1	categories.mygeek.com
127.0.0.1	web-entrance.co
127.0.0.1	whazit.com
127.0.0.1	windowenhancer.com
127.0.0.1	buz.ru
127.0.0.1	iwon.com
127.0.0.1	www.bonzi.com
127.0.0.1	featured-results.com
127.0.0.1	searchmadesafe.net
127.0.0.1	quicklaunch.com
127.0.0.1	www.cashsurfers.com
127.0.0.1	.lop.com
127.0.0.1	.tjdo.com
127.0.0.1	/tjdo.com
127.0.0.1	.ebav.com
127.0.0.1	/ebav.com
127.0.0.1	.ebgo.com
127.0.0.1	/ebgo.com
127.0.0.1	.ebaw.com
127.0.0.1	/ebaw.com
127.0.0.1	.ebkb.com
127.0.0.1	/ebkb.com
127.0.0.1	.ebmu.com
127.0.0.1	/ebmu.com
127.0.0.1	.ecmp.com
127.0.0.1	/ecmp.com
127.0.0.1	.edhq.com
127.0.0.1	/edhq.com
127.0.0.1	.edty.com
127.0.0.1	/edty.com
127.0.0.1	.sbee.com
127.0.0.1	/sbee.com
127.0.0.1	.aavc.com
127.0.0.1	/aavc.com
127.0.0.1	.acjp.com
127.0.0.1	/acjp.com
127.0.0.1	.ecmh.com
127.0.0.1	/ecmh.com
127.0.0.1	.emch.com
127.0.0.1	/emch.com
127.0.0.1	.ecpm.com
127.0.0.1	/ecpm.com
127.0.0.1	.wabu.com
127.0.0.1	/wabu.com
127.0.0.1	.wabq.com
127.0.0.1	/wabq.com
127.0.0.1	.ebch.com
127.0.0.1	/ebch.com
127.0.0.1	.ebdv.com
127.0.0.1	/ebdv.com
127.0.0.1	.ebdw.com
127.0.0.1	/ebdw.com
127.0.0.1	.ebjp.com
127.0.0.1	/ebjp.com
127.0.0.1	.ebkn.com
127.0.0.1	/ebkn.com
127.0.0.1	.ebky.com
127.0.0.1	/ebky.com
127.0.0.1	.eblv.com
127.0.0.1	/eblv.com
127.0.0.1	.wbkb.com
127.0.0.1	/wbkb.com
127.0.0.1	.ebvr.com
127.0.0.1	/ebvr.com
127.0.0.1	.ecwz.com
127.0.0.1	/ecwz.com
127.0.0.1	.ecyb.com
127.0.0.1	/ecyb.com
127.0.0.1	.eduy.com
127.0.0.1	/eduy.com
127.0.0.1	.eeev.com
127.0.0.1	/eeev.com
127.0.0.1	.farse.com
127.0.0.1	/farse.com
127.0.0.1	.ibmx.com
127.0.0.1	/ibmx.com
127.0.0.1	.icwb.com
127.0.0.1	/icwb.com
127.0.0.1	.icwo.com
127.0.0.1	/icwo.com
127.0.0.1	.icwp.com
127.0.0.1	/icwp.com
127.0.0.1	.iddh.com
127.0.0.1	/iddh.com
127.0.0.1	.idhh.com
127.0.0.1	/idhh.com
127.0.0.1	.ifiz.com
127.0.0.1	/ifiz.com
127.0.0.1	.iguu.com
127.0.0.1	/iguu.com
127.0.0.1	.samz.com
127.0.0.1	/samz.com
127.0.0.1	.saoe.com
127.0.0.1	/saoe.com
127.0.0.1	.sbjr.com
127.0.0.1	/sbjr.com
127.0.0.1	.sbnl.com
127.0.0.1	/sbnl.com
127.0.0.1	.sbnt.com
127.0.0.1	/sbnt.com
127.0.0.1	.sbvr.com
127.0.0.1	/sbvr.com
127.0.0.1	.scbm.com
127.0.0.1	/scbm.com
127.0.0.1	.sckr.com
127.0.0.1	/sckr.com
127.0.0.1	.scrk.com
127.0.0.1	/scrk.com
127.0.0.1	.sdry.com
127.0.0.1	/sdry.com
127.0.0.1	.seld.com
127.0.0.1	/seld.com
127.0.0.1	.sfux.com
127.0.0.1	/sfux.com
127.0.0.1	.sheat.com
127.0.0.1	/sheat.com
127.0.0.1	.sipo.com
127.0.0.1	/sipo.com
127.0.0.1	.smds.com
127.0.0.1	/smds.com
127.0.0.1	.srib.com
127.0.0.1	/srib.com
127.0.0.1	.srox.com
127.0.0.1	/srox.com
127.0.0.1	.srsf.com
127.0.0.1	/srsf.com
127.0.0.1	.ssaw.com
127.0.0.1	/ssaw.com
127.0.0.1	.ssby.com
127.0.0.1	/ssby.com
127.0.0.1	.surj.com
127.0.0.1	/surj.com
127.0.0.1	.tbvg.com
127.0.0.1	/tbvg.com
127.0.0.1	.tdak.com
127.0.0.1	/tdak.com
127.0.0.1	.tdmy.com
127.0.0.1	/tdmy.com
127.0.0.1	.tefs.com
127.0.0.1	/tefs.com
127.0.0.1	.tfil.com
127.0.0.1	/tfil.com
127.0.0.1	.tjar.com
127.0.0.1	/tjar.com
127.0.0.1	.tjaw.com
127.0.0.1	/tjaw.com
127.0.0.1	.tjgo.com
127.0.0.1	/tjgo.com
127.0.0.1	.tjem.com
127.0.0.1	/tjem.com
127.0.0.1	.torc.com
127.0.0.1	/torc.com
127.0.0.1	.wfix.com
127.0.0.1	/wfix.com
127.0.0.1	.wflu.com
127.0.0.1	/wflu.com
127.0.0.1	.tdko.com
127.0.0.1	/tdko.com
127.0.0.1	.thko.com
127.0.0.1	/thko.com
127.0.0.1	H24413.tfil.com
127.0.0.1	germany.rub.to
127.0.0.1	search.rub.to
127.0.0.1	unitedstates.rub.to
127.0.0.1	www.commonname.com
127.0.0.1	www.ezcybersearch.com
127.0.0.1	www.jethomepage.com
127.0.0.1	www.gohip.com
127.0.0.1	hotbar.com
127.0.0.1	www.huntbar.com
127.0.0.1	search.imiserver.com
127.0.0.1	searchenhancement.com
127.0.0.1	newtonknows.com
127.0.0.1	search-explorer.net
127.0.0.1	searchsquire.com
127.0.0.1	secondpower.com
127.0.0.1	2ndpower.com
127.0.0.1	searchgateway.net
127.0.0.1	worldusa.com
127.0.0.1	www.topsearcher.com
127.0.0.1	smutserver.com
127.0.0.1	searchmeup.com
127.0.0.1	cameup.com
127.0.0.1	kliksearch.com
127.0.0.1	realphx.com
127.0.0.1	blazefind.com
127.0.0.1	zoofil.com
127.0.0.1	terafinder.com
127.0.0.1	008i.com
127.0.0.1	171203.com
127.0.0.1	39-93.com
127.0.0.1	adult-personal.us
127.0.0.1	cashsearch.biz
127.0.0.1	cl55.biz
127.0.0.1	dailyteenspic.com
127.0.0.1	dialer2004.com
127.0.0.1	digital-pornography.com
127.0.0.1	eager-sex.com
127.0.0.1	ergosites.com
127.0.0.1	freecj.com
127.0.0.1	greg-search.com
127.0.0.1	incest-host.com
127.0.0.1	ironcarteam.com
127.0.0.1	is-best.com
127.0.0.1	killerpornstars.com
127.0.0.1	lollitop.com
127.0.0.1	love-host.com
127.0.0.1	myexexex.com
127.0.0.1	my-finder.com
127.0.0.1	onlineclick.net
127.0.0.1	onlysex.ws
127.0.0.1	regfreeze.com
127.0.0.1	ruworld.com
127.0.0.1	selltraffic.biz
127.0.0.1	sexunique.net
127.0.0.1	sinpussy.com
127.0.0.1	teenhost.net
127.0.0.1	ultraload.net
127.0.0.1	vse-moe.biz
127.0.0.1	xsex.ws
127.0.0.1	.75tz.com
127.0.0.1	/75tz.com
127.0.0.1	.iefeadsl.com
127.0.0.1	/iefeadsl.com
127.0.0.1	.rf104.com
127.0.0.1	/rf104.com
127.0.0.1	www.v61.com
127.0.0.1	ads.centralmedia.ws
127.0.0.1	c.centralmedia.ws
127.0.0.1	.count.cc
127.0.0.1	/count.cc
127.0.0.1	.topx.cc
127.0.0.1	/topx.cc
127.0.0.1	sidefind.com
127.0.0.1	thenewsearch.com
127.0.0.1	new-search.net
127.0.0.1	x-google.net
127.0.0.1	adultgambling.org
127.0.0.1	bitchesonline.net
127.0.0.1	girls4rent.net
127.0.0.1	usefullsoft.net
127.0.0.1	livegambling.com
127.0.0.1	adultsgames.net
127.0.0.1	easyantispy.com
127.0.0.1	spybotremover.net
127.0.0.1	winprotect.net
127.0.0.1	funny-girls.com
127.0.0.1	winmsn.com
127.0.0.1	oneclicksearches.com
127.0.0.1	bestweblinks.com
127.0.0.1	iqsearch.net
127.0.0.1	dumpserv.com
127.0.0.1	helpyoursearch.com
127.0.0.1	sgrunt.biz
127.0.0.1	yeak.net
127.0.0.1	u45.cx
127.0.0.1	u46.cx
127.0.0.1	u47.cc
127.0.0.1	u48.cc
127.0.0.1	sfonditalia.biz
127.0.0.1	realarea.biz
127.0.0.1	archiviosex.net
127.0.0.1	agava.com
127.0.0.1	agava.ru
127.0.0.1	hut1.ru
127.0.0.1	hu15.ru
127.0.0.1	winfixer.com
127.0.0.1	3721.com
127.0.0.1	easysearchingtips.com
127.0.0.1	fine-search.net
127.0.0.1	noproblemsurf.com
127.0.0.1	pcspyremover.com
127.0.0.1	search-motor.com
127.0.0.1	searchwhatuwant.com
127.0.0.1	ad25.com
127.0.0.1	ad45.com
127.0.0.1	ad77.com
127.0.0.1	ad86.com
127.0.0.1	full-search.net
127.0.0.1	go2-search.com
127.0.0.1	onemoresearch.net
127.0.0.1	search-777.com
127.0.0.1	search-to-find.com
127.0.0.1	search-what.net
127.0.0.1	winshow.biz
127.0.0.1	lookfor.cc
127.0.0.1	looking-for.cc
127.0.0.1	tgp-4-you.com
127.0.0.1	veryeasysearch.com
127.0.0.1	010402.com
127.0.0.1	20x2p.com
127.0.0.1	db105.com
127.0.0.1	ga31.com
127.0.0.1	mpeg-look.com
127.0.0.1	n-udd.com
127.0.0.1	p-uud.com
127.0.0.1	porn-screen.com
127.0.0.1	rb37.com
127.0.0.1	t058.com
127.0.0.1	u-239.com
127.0.0.1	v-224.com
127.0.0.1	trackhits.cc
127.0.0.1	tracktraff.cc
127.0.0.1	power-cleaner.com
127.0.0.1	yoursitebar.com
127.0.0.1	ysbweb.com
127.0.0.1	www.ysbweb.com
127.0.0.1	installcash.com
127.0.0.1	toolbarcash.com
127.0.0.1	enjoywebsurf.com
127.0.0.1	msnguard.cc
127.0.0.1	searchclick.cc
127.0.0.1	havy.biz
127.0.0.1	ewizard.cc
127.0.0.1	4klm.com
127.0.0.1	camup.net
127.0.0.1	bdsmlibrary.net
127.0.0.1	n-glx.s-redirect.com
127.0.0.1	aaasexypics.com
127.0.0.1	allforadult.com
127.0.0.1	autoescrowpay.com
127.0.0.1	awmcash.biz
127.0.0.1	awmdabest.com
127.0.0.1	buldog-stats.com
127.0.0.1	counter.sexmaniack.com
127.0.0.1	fregat.drocherway.com
127.0.0.1	greg-tut.com
127.0.0.1	iframe.biz
127.0.0.1	megapornix.com
127.0.0.1	newiframe.biz
127.0.0.1	nylonsexy.com
127.0.0.1	pizdato.biz
127.0.0.1	sexfiles.nu
127.0.0.1	slutmania.biz
127.0.0.1	sp2fucked.biz
127.0.0.1	toolbarpartner.com
127.0.0.1	vesbiz.biz
127.0.0.1	virgin-tgp.net
127.0.0.1	vparivalka.com
127.0.0.1	x.full-tgp.net
127.0.0.1	toolbar.cc
127.0.0.1	himen.biz
127.0.0.1	msupdater.net
127.0.0.1	www.msupdater.net
127.0.0.1	1800searchonline.com
127.0.0.1	www.1800searchonline.com
127.0.0.1	1stsearchportal.com
127.0.0.1	www.1stsearchportal.com
127.0.0.1	24-7searching-and-more.com
127.0.0.1	www.24-7searching-and-more.com
127.0.0.1	971searchbox.com
127.0.0.1	www.971searchbox.com
127.0.0.1	aaawebfinder.com
127.0.0.1	www.aaawebfinder.com
127.0.0.1	ampmsearch.com
127.0.0.1	www.ampmsearch.com
127.0.0.1	clickhere4search.com
127.0.0.1	www.clickhere4search.com
127.0.0.1	clicktomakeasearch.com
127.0.0.1	www.clicktomakeasearch.com
127.0.0.1	directsearchzone.com
127.0.0.1	www.directsearchzone.com
127.0.0.1	easysearch4you.com
127.0.0.1	www.easysearch4you.com
127.0.0.1	enterthesearch.com
127.0.0.1	www.enterthesearch.com
127.0.0.1	esearch2005.com
127.0.0.1	www.esearch2005.com
127.0.0.1	eza1netsearch.com
127.0.0.1	www.eza1netsearch.com
127.0.0.1	ezwebsearching.com
127.0.0.1	www.ezwebsearching.com
127.0.0.1	globalefinder.com
127.0.0.1	www.globalefinder.com
127.0.0.1	go2realsearch.com
127.0.0.1	www.go2realsearch.com
127.0.0.1	myseachexplorer.com
127.0.0.1	www.myseachexplorer.com
127.0.0.1	quicksearch360.com
127.0.0.1	www.quicksearch360.com
127.0.0.1	s1s1s1search.com
127.0.0.1	www.s1s1s1search.com
127.0.0.1	search101online.com
127.0.0.1	www.search101online.com
127.0.0.1	search123forme.com
127.0.0.1	www.search123forme.com
127.0.0.1	search345quest.com
127.0.0.1	www.search345quest.com
127.0.0.1	searchmiracle.com
127.0.0.1	www.searchmiracle.com
127.0.0.1	searchtheworld4you.com
127.0.0.1	www.searchtheworld4you.com
127.0.0.1	searchwebzone.com
127.0.0.1	www.searchwebzone.com
127.0.0.1	seektheglobe.com
127.0.0.1	www.seektheglobe.com
127.0.0.1	sitesearchcentral.com
127.0.0.1	www.sitesearchcentral.com
127.0.0.1	the818search-co.com
127.0.0.1	www.the818search-co.com
127.0.0.1	type2find.com
127.0.0.1	www.type2find.com
127.0.0.1	xosearchox.com
127.0.0.1	www.xosearchox.com
127.0.0.1	yoursearchspace.com
127.0.0.1	www.yoursearchspace.com
127.0.0.1	httpwwwads.com
127.0.0.1	www.httpwwwads.com
127.0.0.1	adshttp.com
127.0.0.1	www.adshttp.com
127.0.0.1	adsonwww.com
127.0.0.1	www.adsonwww.com
127.0.0.1	216.152.240.14
127.0.0.1	216.152.240.13
127.0.0.1	216.152.240.10
127.0.0.1	dnaads.com
127.0.0.1	www.dnaads.com
127.0.0.1	marketengines.com
127.0.0.1	www.marketengines.com
127.0.0.1	ad-w-a-r-e.com
127.0.0.1	www.ad-w-a-r-e.com
127.0.0.1	a-d-w-a-r-e.com
127.0.0.1	www.a-d-w-a-r-e.com
127.0.0.1	securityindex.net
127.0.0.1	www.securityindex.net
127.0.0.1	sexpicsporn.com
127.0.0.1	www.sexpicsporn.com
127.0.0.1	free-spybot.com
127.0.0.1	www.free-spybot.com
127.0.0.1	cashengines.com
127.0.0.1	www.cashengines.com
127.0.0.1	microsoftantispyware.net
127.0.0.1	www.microsoftantispyware.net
127.0.0.1	mircosoftantispy.com
127.0.0.1	www.mircosoftantispy.com
127.0.0.1	msantispy.com
127.0.0.1	www.msantispy.com
127.0.0.1	netspyprotector.com
127.0.0.1	www.netspyprotector.com
127.0.0.1	avforce.com
127.0.0.1	www.avforce.com
127.0.0.1	savehits.com
127.0.0.1	www.savehits.com
127.0.0.1	saveli.com
127.0.0.1	www.saveli.com
127.0.0.1	metastop.com
127.0.0.1	www.metastop.com
127.0.0.1	perlink.biz
127.0.0.1	www.perlink.biz
127.0.0.1	highdialer.com
127.0.0.1	www.highdialer.com
127.0.0.1	66.230.175.129
127.0.0.1	online-more.com
127.0.0.1	www.online-more.com
127.0.0.1	www.syserrors.com
127.0.0.1	www.vcodec.com
127.0.0.1	toolbartraff.biz
127.0.0.1	www.toolbartraff.biz
127.0.0.1	pcadprotector.cc
127.0.0.1	www.pcadprotector.cc
127.0.0.1	airtleworld.com
127.0.0.1	www.airtleworld.com
127.0.0.1	domaincar.com
127.0.0.1	www.domaincar.com
127.0.0.1	worldray.com
127.0.0.1	www.worldray.com
127.0.0.1	www5.worldray.com
127.0.0.1	www6.worldray.com
127.0.0.1	www.spytrooper.com
127.0.0.1	spytrooper.com
127.0.0.1	dl.ad-ware.cc
127.0.0.1	ad-ware.cc
127.0.0.1	downloads.adaware.cc
127.0.0.1	adaware.cc
127.0.0.1	hitscount.net
127.0.0.1	count.hitscount.net
127.0.0.1	fined.biz
127.0.0.1	de.ag
127.0.0.1	games.de.ag
127.0.0.1	www.games.de.ag
127.0.0.1	little-download.net
127.0.0.1	www.little-download.net
127.0.0.1	little-help.com
127.0.0.1	www.little-help.com
127.0.0.1	www.spyaxe.net
127.0.0.1	www.spyaxe.com
127.0.0.1	www.spyaxe.biz
127.0.0.1	www.malwarewipe.com
127.0.0.1	dl.malwarewipe.com
127.0.0.1	www.malwarewipeupdate.com
127.0.0.1	unionseek.com
127.0.0.1	www.unionseek.com
127.0.0.1	sirh0t.blackhats.tc
127.0.0.1	blackhats.tc
127.0.0.1	www.blackhats.tc
127.0.0.1	ritztours.com
127.0.0.1	www.ritztours.com
127.0.0.1	flashflashmx.3322.org
127.0.0.1	3322.org
127.0.0.1	www.3322.org
127.0.0.1	jupitersatellites.biz
127.0.0.1	www.jupitersatellites.biz
127.0.0.1	yops.biz
127.0.0.1	www.yops.biz
127.0.0.1	69.50.171.122
127.0.0.1	goldengr.hypermart.net
127.0.0.1	web-nexus.net
127.0.0.1	safe-sales.biz
127.0.0.1	www.safe-sales.biz
127.0.0.1	jerrynews.com
127.0.0.1	www.jerrynews.com
127.0.0.1	Teslaplus.com
127.0.0.1	www.Teslaplus.com
127.0.0.1	WorldAntiSpy.com
127.0.0.1	www.WorldAntiSpy.com
127.0.0.1	www.securitycaution.com
127.0.0.1	securitycaution.com
127.0.0.1	adservs.com
127.0.0.1	csx.adservs.com
127.0.0.1	www.csx.adservs.com
127.0.0.1	toolbarbest.biz
127.0.0.1	www.toolbarbest.biz
127.0.0.1	65.75.151.192
127.0.0.1	game4all.biz
127.0.0.1	www.game4all.biz
127.0.0.1	wm.kannylizaciya.info
127.0.0.1	www.wm.kannylizaciya.info
127.0.0.1	wm.buhartes.info
127.0.0.1	www.wm.buhartes.info
127.0.0.1	login.fric.cn
127.0.0.1	www.login.fric.cn
127.0.0.1	xsremover.com
127.0.0.1	www.xsremover.com
127.0.0.1	spydeface.com
127.0.0.1	www.spydeface.com
127.0.0.1	alfacleaner.com
127.0.0.1	www.alfacleaner.com
127.0.0.1	innovagest2000.com
127.0.0.1	www.innovagest2000.com
127.0.0.1	www.thespyguard.com
127.0.0.1	thespyguard.com
127.0.0.1	www.adwarepunisher.com
127.0.0.1	adwarepunisher.com
127.0.0.1	www.spyiblock.com
127.0.0.1	spyiblock.com
127.0.0.1	www.uvu-channel.com
127.0.0.1	uvu-channel.com
127.0.0.1	www.hachimitsu-lemon.com
127.0.0.1	hachimitsu-lemon.com
127.0.0.1	SEARCHTOFIND.NET
127.0.0.1	www.SEARCHTOFIND.NET
127.0.0.1	www.pestrap.com
127.0.0.1	pestrap.com
127.0.0.1	uptodatesecurity.com
127.0.0.1	www.uptodatesecurity.com
127.0.0.1	thinstall.abetterinternet.com
127.0.0.1	download.abetterinternet.com
127.0.0.1	www.abetterinternet.com
127.0.0.1	216.255.179.234
127.0.0.1	qmex.psyche-evolution.com
127.0.0.1	www.qmex.psyche-evolution.com
127.0.0.1	core.psyche-evolution.com
127.0.0.1	www.core.psyche-evolution.com
127.0.0.1	1stantivirus.com
127.0.0.1	www.1stantivirus.com
127.0.0.1	scanandrepair.com
127.0.0.1	www.scanandrepair.com
127.0.0.1	uydsiygeds.com
127.0.0.1	www.uydsiygeds.com
127.0.0.1	pesttrap.com
127.0.0.1	www.pesttrap.com
127.0.0.1	adwarebazooka.com
127.0.0.1	get.adwarebazooka.com
127.0.0.1	www.adwarebazooka.com
127.0.0.1	kliksoftware.com
127.0.0.1	www.kliksoftware.com
127.0.0.1	hitvirus.com
127.0.0.1	get.hitvirus.com
127.0.0.1	www.hitvirus.com
127.0.0.1	promo.dollarrevenue.com
127.0.0.1	www.promo.dollarrevenue.com
127.0.0.1	maxifile.com
127.0.0.1	www.maxifile.com
127.0.0.1	targetsaver.com
127.0.0.1	www.targetsaver.com
127.0.0.1	dl.targetsaver.com
127.0.0.1	www.dl.targetsaver.com
127.0.0.1	nonameforthisdomain.com
127.0.0.1	www.nonameforthisdomain.com
127.0.0.1	hypoteches.com
127.0.0.1	www.hypoteches.com
127.0.0.1	www.earthllnk.net
127.0.0.1	earthllnk.net
127.0.0.1	hostance.net
127.0.0.1	www.hostance.net
127.0.0.1	my-dedik-one.com
127.0.0.1	www.my-dedik-one.com
127.0.0.1	10sek.com
127.0.0.1	www.10sek.com
127.0.0.1	6sek.com
127.0.0.1	www.6sek.com
127.0.0.1	cashdeluxe.net
127.0.0.1	www.cashdeluxe.net
127.0.0.1	stats.cashdeluxe.net
127.0.0.1	www.stats.cashdeluxe.net
127.0.0.1	www.2006ooo.com
127.0.0.1	www.spyware-stop.com
127.0.0.1	spyware-stop.com
127.0.0.1	www.SpyShield.org
127.0.0.1	SpyShield.org
127.0.0.1	utils.winfixer.com
127.0.0.1	www.utils.winfixer.com
127.0.0.1	toolbarbucks.biz
127.0.0.1	www.toolbarbucks.biz
127.0.0.1	derklaif.biz
127.0.0.1	www.derklaif.biz
127.0.0.1	www.v-codec.com
127.0.0.1	v-codec.com
127.0.0.1	www.emediacodec.com
127.0.0.1	emediacodec.com
127.0.0.1	www.popentertain.com
127.0.0.1	popentertain.com
127.0.0.1	softwareprofit.com
127.0.0.1	www.softwareprofit.com
127.0.0.1	de.winantivirus.com
127.0.0.1	download.winantivirus.com
127.0.0.1	winantivirus.com
127.0.0.1	www.winantivirus.com
127.0.0.1	205.209.152.121
127.0.0.1	offers.bullseye-network.com
127.0.0.1	www.offers.bullseye-network.com
127.0.0.1	bullseye-network.com
127.0.0.1	www.bullseye-network.com
127.0.0.1	sponsor2.ucmore.com
127.0.0.1	www.sponsor2.ucmore.com
127.0.0.1	hostthesky.com
127.0.0.1	www.hostthesky.com
127.0.0.1	dbdecicated.com
127.0.0.1	www.dbdecicated.com
127.0.0.1	readagreement.net
127.0.0.1	www.readagreement.net
127.0.0.1	gl.secdep.info
127.0.0.1	www.gl.secdep.info
127.0.0.1	spyfalcon.com
127.0.0.1	www.spyfalcon.com
127.0.0.1	spyfalconupdate.com
127.0.0.1	www.spyfalconupdate.com
127.0.0.1	spy-shield.com
127.0.0.1	www.spy-shield.com
127.0.0.1	winnanny.com
127.0.0.1	www.winnanny.com
127.0.0.1	winsoftware.com
127.0.0.1	www.winsoftware.com
127.0.0.1	winfirewall.com
127.0.0.1	www.winfirewall.com
127.0.0.1	winantispyware.com
127.0.0.1	www.winantispyware.com
127.0.0.1	udefender.com
127.0.0.1	www.udefender.com
127.0.0.1	bravesentry.com
127.0.0.1	www.bravesentry.com
127.0.0.1	content.dollarrevenue.com
127.0.0.1	www.content.dollarrevenue.com
127.0.0.1	toolbar.azebar.com
127.0.0.1	www.toolbar.azebar.com
127.0.0.1	traffsale1.biz
127.0.0.1	www.traffsale1.biz
127.0.0.1	spywaredisinfector.com
127.0.0.1	www.spywaredisinfector.com
127.0.0.1	SpyCut.com
127.0.0.1	www.SpyCut.com
127.0.0.1	almanah.biz
127.0.0.1	www.almanah.biz
127.0.0.1	antispydns.biz
127.0.0.1	www.antispydns.biz
127.0.0.1	spyaxeupdate.com
127.0.0.1	www.spyaxeupdate.com
127.0.0.1	malwarewipesupport.com
127.0.0.1	www.malwarewipesupport.com
127.0.0.1	remedyantispy.com
127.0.0.1	www.remedyantispy.com
127.0.0.1	systemstable.com
127.0.0.1	www.systemstable.com
127.0.0.1	whoisprivacyprotect.com
127.0.0.1	www.whoisprivacyprotect.com
127.0.0.1	85.249.22.240
127.0.0.1	prime.webhancer.com
127.0.0.1	www.prime.webhancer.com
127.0.0.1	webhancer.com
127.0.0.1	www.webhancer.com
127.0.0.1	dr.webhancer.com
127.0.0.1	www.dr.webhancer.com
127.0.0.1	dr2.webhancer.com
127.0.0.1	www.dr2.webhancer.com
127.0.0.1	www.onli-ne.com
127.0.0.1	spycontra.com
127.0.0.1	www.spycontra.com
127.0.0.1	anti-virus-pro.com
127.0.0.1	www.anti-virus-pro.com
127.0.0.1	check.jupitersatellites.biz
127.0.0.1	www.check.jupitersatellites.biz
127.0.0.1	necessaryupdates.com
127.0.0.1	www.necessaryupdates.com
127.0.0.1	bestworldgirls-for-u.net
127.0.0.1	www.bestworldgirls-for-u.net
127.0.0.1	stejax.pl
127.0.0.1	www.stejax.pl
127.0.0.1	kitehosting.com
127.0.0.1	www.kitehosting.com
127.0.0.1	ware2006.com
127.0.0.1	www.ware2006.com
127.0.0.1	filestore.com
127.0.0.1	www.filestore.com
127.0.0.1	systemupdates.net
127.0.0.1	www.systemupdates.net
127.0.0.1	logs.vapochille.com
127.0.0.1	www.logs.vapochille.com
127.0.0.1	goldenfreehost.com
127.0.0.1	www.goldenfreehost.com
127.0.0.1	todaywarnings.com
127.0.0.1	www.todaywarnings.com
127.0.0.1	spywarequake.com
127.0.0.1	spywarequake.info
127.0.0.1	www.spywarequake.info
127.0.0.1	www.spywarequake.com
127.0.0.1	download2.spywarequake.com
127.0.0.1	download3.spywarequake.com
127.0.0.1	download4.spywarequake.com
127.0.0.1	download5.spywarequake.com
127.0.0.1	download7.spywarequake.com
127.0.0.1	download8.spywarequake.com
127.0.0.1	download9.spywarequake.com
127.0.0.1	download10.spywarequake.com
127.0.0.1	download11.spywarequake.com
127.0.0.1	download12.spywarequake.com
127.0.0.1	download13.spywarequake.com
127.0.0.1	download15.spywarequake.com
127.0.0.1	updates.spywarequake.com
127.0.0.1	206.161.124.98
127.0.0.1	69.31.131.82
127.0.0.1	207.226.162.34
127.0.0.1	urgentsystemupdate.com
127.0.0.1	www.urgentsystemupdate.com
127.0.0.1	dl2.spywarestrike.com
127.0.0.1	dl3.spywarestrike.com
127.0.0.1	dl4.spywarestrike.com
127.0.0.1	dl5.spywarestrike.com
127.0.0.1	dl6.spywarestrike.com
127.0.0.1	dl7.spywarestrike.com
127.0.0.1	dl8.spywarestrike.com
127.0.0.1	nospywaresoft.com
127.0.0.1	spywarestrike.com
127.0.0.1	www.nospywaresoft.com
127.0.0.1	www.spywarestrike.com
127.0.0.1	spyaxesupport.com
127.0.0.1	www.spyaxesupport.com
127.0.0.1	download3.spyaxe.com
127.0.0.1	download4.spyaxe.com
127.0.0.1	download5.spyaxe.com
127.0.0.1	download6.spyaxe.com
127.0.0.1	dl2.spyfalcon.com
127.0.0.1	dl3.spyfalcon.com
127.0.0.1	dl4.spyfalcon.com
127.0.0.1	dl5.spyfalcon.com
127.0.0.1	dl9.spyfalcon.com
127.0.0.1	dl10.spyfalcon.com
127.0.0.1	dl16.spyfalcon.com
127.0.0.1	www.sgrunt.biz
127.0.0.1	traffbest.biz
127.0.0.1	www.traffbest.biz
127.0.0.1	securityfeature.com
127.0.0.1	www.securityfeature.com
127.0.0.1	pimasoft.com
127.0.0.1	www.pimasoft.com
127.0.0.1	blackhawksoftware.com
127.0.0.1	www.blackhawksoftware.com
127.0.0.1	spy-sniper.com
127.0.0.1	www.spy-sniper.com
127.0.0.1	safetydefender.com
127.0.0.1	www.safetydefender.com
127.0.0.1	securitywarnings.net
127.0.0.1	www.securitywarnings.net
127.0.0.1	urgentsystemupdate.biz
127.0.0.1	www.urgentsystemupdate.biz
127.0.0.1	antispylab.com
127.0.0.1	www.antispylab.com
127.0.0.1	spywaresheriff.com
127.0.0.1	www.spywaresheriff.com
127.0.0.1	allmegabucks.com
127.0.0.1	www.allmegabucks.com
127.0.0.1	rizalof.com
127.0.0.1	www.rizalof.com
127.0.0.1	rc.rizalof.com
127.0.0.1	media-codec.com
127.0.0.1	www.media-codec.com
127.0.0.1	SpywareScraper.com
127.0.0.1	www.SpywareScraper.com
127.0.0.1	crystalysmedia.com
127.0.0.1	www.crystalysmedia.com
127.0.0.1	180solutions.com
127.0.0.1	cts.180solutions.com
127.0.0.1	bis.180solutions.com
127.0.0.1	downloads.180solutions.com
127.0.0.1	uploads.180solutions.com
127.0.0.1	installs.180solutions.com
127.0.0.1	config.180solutions.com
127.0.0.1	ping.180solutions.com
127.0.0.1	tv.180solutions.com
127.0.0.1	nowhere.180solutions.com
127.0.0.1	www.180solutions.com
127.0.0.1	180searchassistant.com
127.0.0.1	www.180searchassistant.com
127.0.0.1	theguardservices.com
127.0.0.1	www.theguardservices.com
127.0.0.1	securitybulletin.net
127.0.0.1	www.securitybulletin.net
127.0.0.1	www.supernet.speedserv.com
127.0.0.1	spyonthis.net
127.0.0.1	download.spyonthis.net
127.0.0.1	www.spyonthis.net
127.0.0.1	hijack-this.net
127.0.0.1	www.hijack-this.net
127.0.0.1	errorsafe.com
127.0.0.1	de.errorsafe.com
127.0.0.1	download.errorsafe.com
127.0.0.1	www.errorsafe.com
127.0.0.1	amaena.com
127.0.0.1	trial.updates.winsoftware.com
127.0.0.1	instlog.winfixer.com
127.0.0.1	winfixer2006.com
127.0.0.1	www.winfixer2006.com
127.0.0.1	webtopsecurity.com
127.0.0.1	www.webtopsecurity.com
127.0.0.1	traff5all.biz
127.0.0.1	www.traff5all.biz
127.0.0.1	download.bravesentry.com
127.0.0.1	www.download.bravesentry.com
127.0.0.1	evko.biz
127.0.0.1	www.evko.biz
127.0.0.1	lavasoftupdate.com
127.0.0.1	www.lavasoftupdate.com
127.0.0.1	download.secureyournet.biz
127.0.0.1	www.download.secureyournet.biz
127.0.0.1	secureyournet.biz
127.0.0.1	www.secureyournet.biz
127.0.0.1	windupdates.com
127.0.0.1	asdbiz.biz
127.0.0.1	www.asdbiz.biz
127.0.0.1	spywarelabs.com
127.0.0.1	www.spywarelabs.com
127.0.0.1	traffweb1.biz
127.0.0.1	www.traffweb1.biz
127.0.0.1	newtoolbar.biz
127.0.0.1	www.newtoolbar.biz
127.0.0.1	buytraff.biz
127.0.0.1	www.buytraff.biz
127.0.0.1	safetyuptodate.com
127.0.0.1	www.safetyuptodate.com
127.0.0.1	crazywinnings.com
127.0.0.1	frame.crazywinnings.com
127.0.0.1	www.crazywinnings.com
127.0.0.1	topconverting.com
127.0.0.1	www.topconverting.com
127.0.0.1	casalemedia.com
127.0.0.1	b.casalemedia.com
127.0.0.1	www.casalemedia.com
127.0.0.1	addictivetechnologies.com
127.0.0.1	www.addictivetechnologies.com
127.0.0.1	addictivetechnologies.net
127.0.0.1	www.addictivetechnologies.net
127.0.0.1	admin2cash.biz
127.0.0.1	www.admin2cash.biz
127.0.0.1	advcash.biz
127.0.0.1	www.advcash.biz
127.0.0.1	all4internet.com
127.0.0.1	www.all4internet.com
127.0.0.1	bettersearch.biz
127.0.0.1	www.bettersearch.biz
127.0.0.1	c4tdownload.com
127.0.0.1	www.c4tdownload.com
127.0.0.1	clickspring.net
127.0.0.1	www.clickspring.net
127.0.0.1	contentmatch.net
127.0.0.1	www.contentmatch.net
127.0.0.1	dialer-shop.com
127.0.0.1	www.dialer-shop.com
127.0.0.1	dialoff.com
127.0.0.1	www.dialoff.com
127.0.0.1	energy-factor.com
127.0.0.1	www.energy-factor.com
127.0.0.1	hardcorefantasyland.com
127.0.0.1	www.hardcorefantasyland.com
127.0.0.1	hardfootballbabes.com
127.0.0.1	www.hardfootballbabes.com
127.0.0.1	linkautomatici.com
127.0.0.1	www.linkautomatici.com
127.0.0.1	master69.biz
127.0.0.1	www.master69.biz
127.0.0.1	master70.biz
127.0.0.1	www.master70.biz
127.0.0.1	master71.biz
127.0.0.1	www.master71.biz
127.0.0.1	mcdial.biz
127.0.0.1	www.mcdial.biz
127.0.0.1	mt-download.com
127.0.0.1	www.mt-download.com
127.0.0.1	my-teensex.com
127.0.0.1	overpro.com
127.0.0.1	private-dialer.biz
127.0.0.1	private-iframe.biz
127.0.0.1	redfunny.com
127.0.0.1	scoobidoo.com
127.0.0.1	skoobidoo.com
127.0.0.1	sexvideopro.com
127.0.0.1	storage-tasp.com
127.0.0.1	xbeta69.com
127.0.0.1	securityuptodate.net
127.0.0.1	www.securityuptodate.net
127.0.0.1	troonety.biz
127.0.0.1	www.troonety.biz
127.0.0.1	zurrusco.com
127.0.0.1	www.zurrusco.com
127.0.0.1	breenten.biz
127.0.0.1	www.breenten.biz
127.0.0.1	votreenton.biz
127.0.0.1	www.votreenton.biz
127.0.0.1	ozonung.biz
127.0.0.1	www.ozonung.biz
127.0.0.1	213.21.215.186
127.0.0.1	digikeygen.com
127.0.0.1	www.digikeygen.com
127.0.0.1	moviereality.com
127.0.0.1	www.moviereality.com
127.0.0.1	perfectedsecurity.com
127.0.0.1	www.perfectedsecurity.com
127.0.0.1	securityprecaution.net
127.0.0.1	www.securityprecaution.net
127.0.0.1	securityupdatesite.com
127.0.0.1	www.securityupdatesite.com
127.0.0.1	dns-look-up.com
127.0.0.1	www.dns-look-up.com
127.0.0.1	ayb.dns-look-up.com
127.0.0.1	search200.com
127.0.0.1	www.search200.com
127.0.0.1	404dns.com
127.0.0.1	www.404dns.com
127.0.0.1	mcboo.com
127.0.0

grosquick · Answer

Je viens de comprendre que le rapport SmitFraud est trop long pour tenir dans un seul message : voici la fin du rapport donc : 

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files


»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» RK


»»»»»»»»»»»»»»»»»»»»»»»» DNS



»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]


»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning
 
Registry Cleaning done. 
 
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» End

grosquick · Answer

Le souci c'est que lorsque je lance RHosts, une fenêtre me dit "windows 98/2000/ME/XP requis" : et mon pc tourne avec vista. J'ai cru que ça avait marché mais manifestement le programme ne se lance pas sur ma machine...

Comment faire ? 

Merci beaucoup !

grosquick · Answer

Hello, j'ai fait la manip mais pas de bol je me retrouve encore avec le même message. Il ne veut donc pas se lancer...

archet9 · Answer

tant pis...
ceci maintenant:
Suite de la manipe ( nettoyage ), fais exactement ce qui suit : 

* Impératif : Redémarrer l'ordinateur en mode sans échec . 
Comment aller en Mode sans échec 
1) Redémarre ton ordi 
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" 
3) Tu verras un écran avec options de démarrage apparaître 
4) Choisis la première option : Sans Échec, et valide avec "Entrée" 
5) Choisis ton compte habituel, et non Administrateur (si besoin ... ) 
( ps : n'oublies pas , en mode sans échec , pas de connexion ! Donc copies ou imprimes bien les info ci-dessous ...) 

*Double click sur SmitfraudFix.exe 

* Sélectionnes 2 et presses "Entrée" dans le menu pour supprimer les fichiers responsables de l'infection. 

-> Si besion : 
* A la question: Voulez-vous nettoyer le registre ? répondre O (oui) et presser Entrée afin de débloquer le fond d'écran et supprimer les clés de registre de l'infection. 

( Le correctif déterminera si le fichier wininet.dll est infecté.) 

* A la question: "Corriger le fichier infecté ?" répondre O (oui) et presser Entrée 
pour remplacer le fichier corrompu. 

* Un redémarrage sera peut être nécessaire pour terminer la procédure de nettoyage ( sinon fais le manuellement ) 

Le rapport se trouve à la racine de C\: 
(dans le fichier "rapport.txt") 

Postes moi ce dernier rapport ... Attention , il va être trop long pour être poster entièrement sur le forum 
--> donc postes moi seulement le début et la fin ( coupes la listes des "fichiers hosts" ) 


a+

grosquick · Answer

Voilà le rapport issu de l'action de smitfraud option nettoyage en mode sans echec et non-admin.

Pour ton info, le soft a une réaction bizarre : il y a eu toute une série d'"accès refusé" et à la fin du scan la fenetre de commande s'est fermée et mon bureau a disparu  obligé de faire un ctrl+alt+suppr pour redemarrer.

SmitFraudFix v2.381

Scan done at  9:12:49,75, 06/12/2008
Run from C:\Users\Henri III\Desktop\SmitfraudFix
OS: Microsoft Windows [version 6.0.6001] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix

!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process


»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found. 
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files


»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» RK


»»»»»»»»»»»»»»»»»»»»»»»» DNS



»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]


»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning
 
Registry Cleaning done. 
 
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» End

grosquick · Answer

Salut, merci pour ton suivi, voici un nouveau rapport Hijack :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:31:46, on 10/12/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Soft4Ever\looknstop\LnsSvcVista.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Windows\system32\svchost.exe
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
C:\Acer\Empowering Technology\eNet\eNet Service.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Acer\Mobility Center\MobilityService.exe
C:\Windows\system32\svchost.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe
C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe
C:\Program Files\Acer\OrbiCam10\OrbiCam.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\a-squared Anti-Malware\a2guard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Soft4Ever\looknstop\looknstop.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\System32undll32.exe
C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Users\HENRII~1\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\system32	askeng.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32
etsh.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32
etsh.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Henri III\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: QFX Software KeyScrambler - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [AcerOrbicamRibbon] "C:\Program Files\Acer\OrbiCam10\OrbiCam.exe" /hide
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32
vsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [a-squared] "C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2guard.exe" /d=60
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [?????????] ??????????????e
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix: 
O15 - Trusted Zone: https://www.6play.fr/m6
O15 - Trusted Zone: http://*.professionpolitique.info
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: eNetHook.dll
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Look 'n' Stop Service (lnssvcVista) - Unknown owner - C:\Program Files\Soft4Ever\looknstop\LnsSvcVista.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

archet9 · Answer

desactives tes comptes d utiilisateurs
et fais ceci :

---> Télécharge ComboFix.exe de sUBs sur ton Bureau : 
http://download.bleepingcomputer.com/sUBs/ComboFix.exe 

/!\ Déconnecte-toi du net et ferme toutes les applications, antivirus et antispyware y compris /!\ 
---> Double-clique sur Combofix.exe 
Un "pop-up" va apparaître qui dit que "ComboFix est utilisé à vos risques et avec aucune garantie...". 
Accepte en cliquant sur "Oui" 

---> Mets-le en langue française F 
Tape sur la touche 1 (Yes) pour démarrer le scan. 

/!\ Ne touche à rien tant que le scan n'est pas terminé. /!\ meme pas a ta souris....
En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire. 

Une fois le scan achevé, un rapport va s'afficher : Poste son contenu 

/!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\ 

Note : Le rapport se trouve également là : C:\ComboFix.txt

--a+
Antonio Giacomo Stradivari, souvent appelé Stradivarius (Crémone, 1644 - Crémone, 18 décembre 1737 
Le Soil (1714), considéré par beaucoup comme le meilleur instrument du monde.
peu de temps avant sa mort il cherchait encore...

grosquick · Answer

voici le rapport combofix :

ComboFix 08-12-09.03 - Henri III 2008-12-11 1:26:51.1 - NTFSx86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6001.1.1252.1.1036.18.223 [GMT 1:00]
Lancé depuis: c:\users\Henri III\Desktop\ComboFix.exe
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\404Fix.exe
c:\windows\system32\AutoRun.inf
c:\windows\system32\dumphive.exe
c:\windows\system32\IEDFix.C.exe
c:\windows\system32\IEDFix.exe
c:\windows\system32\o4Patch.exe
c:\windows\system32\Process.exe
c:\windows\system32\SrchSTS.exe
c:\windows\system32\tmp.reg
c:\windows\system32\VACFix.exe
c:\windows\system32\VCCLSID.exe
c:\windows\system32\WS2Fix.exe

.
((((((((((((((((((((((((((((( Fichiers créés du 2008-11-11 au 2008-12-11 ))))))))))))))))))))))))))))))))))))
.

2008-12-07 21:38 . 2008-12-07 21:38 268 --ah----- C:\sqmdata12.sqm
2008-12-07 21:38 . 2008-12-07 21:38 244 --ah----- C:\sqmnoopt12.sqm
2008-12-07 21:26 . 2008-12-07 21:26 <REP> dr------- c:\users\Alex\Searches
2008-12-07 21:25 . 2008-12-07 21:25 <REP> dr------- c:\users\Alex\Contacts
2008-12-07 21:19 . 2008-12-07 21:26 <REP> dr------- c:\users\Alex\Videos
2008-12-07 21:19 . 2008-12-07 21:26 <REP> dr------- c:\users\Alex\Saved Games
2008-12-07 21:19 . 2008-12-07 21:26 <REP> dr------- c:\users\Alex\Pictures
2008-12-07 21:19 . 2008-12-07 21:26 <REP> dr------- c:\users\Alex\Music
2008-12-07 21:19 . 2008-12-07 21:26 <REP> dr------- c:\users\Alex\Links
2008-12-07 21:19 . 2008-12-07 21:37 <REP> dr------- c:\users\Alex\Downloads
2008-12-07 21:19 . 2008-12-07 21:26 <REP> dr------- c:\users\Alex\Documents
2008-12-07 21:19 . 2006-11-02 13:37 <REP> d-------- c:\users\Alex\AppData\Roaming\Media Center Programs
2008-12-07 21:19 . 2008-12-07 21:26 <REP> d--h----- c:\users\Alex\AppData
2008-12-07 21:19 . 2008-12-07 21:26 <REP> d-------- c:\users\Alex
2008-12-06 09:24 . 2008-12-07 22:03 <REP> d-------- C:\ToolBar SD
2008-12-06 09:13 . 2008-12-06 09:13 691 --a------ c:\users\Henri III\AppData\Roaming\GetValue.vbs
2008-12-06 09:13 . 2008-12-06 09:13 35 --a------ c:\users\Henri III\AppData\Roaming\SetValue.bat
2008-12-06 09:08 . 2008-12-06 09:08 268 --ah----- C:\sqmdata11.sqm
2008-12-06 09:08 . 2008-12-06 09:08 244 --ah----- C:\sqmnoopt11.sqm
2008-12-06 00:56 . 2008-12-06 00:56 268 --ah----- C:\sqmdata10.sqm
2008-12-06 00:56 . 2008-12-06 00:56 244 --ah----- C:\sqmnoopt10.sqm
2008-12-06 00:24 . 2008-12-06 00:26 <REP> d-------- c:\program files\Soft4Ever
2008-12-06 00:24 . 2008-12-06 00:24 79,232 --a------ c:\windows\System32\drivers\lnsfw1.sys
2008-12-06 00:24 . 2008-12-06 00:24 58,232 --a------ c:\windows\System32\drivers\lnsfw.sys
2008-12-06 00:24 . 2008-12-06 00:24 36,864 --a------ c:\windows\System32\fwapi.dll
2008-12-01 22:12 . 2008-12-02 05:16 <REP> d-------- c:\program files\FindyKill
2008-12-01 20:06 . 2008-12-01 20:06 <REP> d-------- c:\users\Henri III\AppData\Roaming\Malwarebytes
2008-12-01 20:06 . 2008-12-01 20:06 <REP> d-------- c:\users\All Users\Malwarebytes
2008-12-01 20:06 . 2008-12-01 20:06 <REP> d-------- c:\programdata\Malwarebytes
2008-12-01 20:06 . 2008-12-01 20:06 <REP> d-------- c:\program files\Malwarebytes' Anti-Malware
2008-12-01 20:06 . 2008-10-22 16:10 38,496 --a------ c:\windows\System32\drivers\mbamswissarmy.sys
2008-12-01 20:06 . 2008-10-22 16:10 15,504 --a------ c:\windows\System32\drivers\mbam.sys
2008-12-01 02:52 . 2008-12-01 02:55 100 --a------ C:\index.ini
2008-12-01 02:44 . 2008-12-01 02:44 <REP> d-------- c:\users\All Users\WindowsSearch
2008-12-01 02:44 . 2008-12-01 02:44 <REP> d-------- c:\programdata\WindowsSearch
2008-12-01 01:54 . 2008-12-01 01:54 <REP> d-------- c:\users\All Users\Avira
2008-12-01 01:54 . 2008-12-01 01:54 <REP> d-------- c:\programdata\Avira
2008-12-01 01:54 . 2008-12-01 01:54 <REP> d-------- c:\program files\Avira
2008-12-01 01:39 . 2008-12-01 01:50 250 --a------ c:\windows\gmer.ini
2008-11-30 23:27 . 2008-12-06 01:58 <REP> d-------- c:\program files\a-squared Anti-Malware
2008-11-30 22:25 . 2008-11-30 22:28 <REP> d-------- c:\program files\TrojanHunter 5.0
2008-11-30 22:25 . 2008-11-30 22:26 32 --a------ c:\windows\System32\thxcfg.ini
2008-11-28 13:06 . 2008-11-28 13:06 159,724 --------- c:\windows\hpoins14.dat.temp
2008-11-28 13:06 . 2007-06-06 00:07 2,000 --------- c:\windows\hpomdl14.dat.temp
2008-11-26 09:25 . 2008-10-21 06:25 1,645,568 --a------ c:\windows\System32\connect.dll
2008-11-26 09:25 . 2008-08-28 04:40 712,704 --a------ c:\windows\System32\WindowsCodecs.dll
2008-11-26 09:25 . 2008-08-28 04:40 425,472 --a------ c:\windows\System32\PhotoMetadataHandler.dll
2008-11-26 09:25 . 2008-08-28 04:40 347,136 --a------ c:\windows\System32\WindowsCodecsExt.dll
2008-11-26 09:25 . 2008-10-22 04:57 241,152 --a------ c:\windows\System32\PortableDeviceApi.dll
2008-11-19 01:30 . 2008-11-19 01:31 <REP> d-------- c:\users\Henri III\AppData\Roaming\SecondLife
2008-11-19 00:36 . 2008-10-16 22:13 1,809,944 --a------ c:\windows\System32\wuaueng.dll
2008-11-19 00:36 . 2008-10-16 21:56 1,524,736 --a------ c:\windows\System32\wucltux.dll
2008-11-19 00:36 . 2008-10-16 22:12 561,688 --a------ c:\windows\System32\wuapi.dll
2008-11-19 00:36 . 2008-10-16 21:55 83,456 --a------ c:\windows\System32\wudriver.dll
2008-11-19 00:36 . 2008-10-16 22:09 51,224 --a------ c:\windows\System32\wuauclt.exe
2008-11-19 00:36 . 2008-10-16 22:09 43,544 --a------ c:\windows\System32\wups2.dll
2008-11-19 00:36 . 2008-10-16 22:08 34,328 --a------ c:\windows\System32\wups.dll
2008-11-19 00:35 . 2008-10-16 14:08 162,064 --a------ c:\windows\System32\wuwebv.dll
2008-11-19 00:35 . 2008-10-16 13:56 31,232 --a------ c:\windows\System32\wuapp.exe
2008-11-13 09:27 . 2008-09-10 04:40 1,334,272 --a------ c:\windows\System32\msxml6.dll
2008-11-13 09:27 . 2008-09-05 06:14 1,191,936 --a------ c:\windows\System32\msxml3.dll
2008-11-13 09:26 . 2008-08-27 02:05 212,480 --a------ c:\windows\System32\drivers\mrxsmb10.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-10 08:46 13,213 ----a-w c:\users\Henri III\AppData\Roaming\nvModes.dat
2008-12-01 04:07 --------- d-----w c:\programdata\Spybot - Search & Destroy
2008-12-01 01:35 --------- d---a-w c:\programdata\TEMP
2008-11-30 21:45 --------- d-----w c:\program files\SpywareBlaster
2008-11-30 21:23 --------- d-----w c:\program files\Spybot - Search & Destroy
2008-11-10 23:52 --------- d-----w c:\users\Henri III\AppData\Roaming\Skype
2008-11-10 23:16 --------- d-----w c:\users\Henri III\AppData\Roaming\skypePM
2008-11-09 02:02 --------- d-----w c:\program files\CheshireCat
2008-11-01 21:03 --------- d-----w c:\program files\Microsoft Silverlight
2008-11-01 21:00 --------- d-----w c:\program files\Windows Mail
2008-10-28 06:34 --------- d-----w c:\program files\Oxin's Style!
2008-10-02 03:49 827,392 ----a-w c:\windows\System32\wininet.dll
2008-09-30 15:43 1,286,152 ----a-w c:\windows\System32\msxml4.dll
2008-09-18 05:09 3,601,464 ----a-w c:\windows\System32\ntkrnlpa.exe
2008-09-18 05:09 3,549,240 ----a-w c:\windows\System32\ntoskrnl.exe
2008-09-18 04:56 147,456 ----a-w c:\windows\System32\Faultrep.dll
2008-09-18 04:56 125,952 ----a-w c:\windows\System32\wersvc.dll
2008-09-18 02:16 2,032,640 ----a-w c:\windows\System32\win32k.sys
2008-09-17 06:12 3,532 ----a-w C:\drmHeader.bin
2008-03-29 16:15 174 --sha-w c:\program files\desktop.ini
2007-06-04 21:32 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
2007-06-04 21:32 32,768 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
2007-06-04 21:32 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"????r"="" [?]
"?????????"="??????????????e" [?]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 1833296]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-10-23 815104]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-01-02 464168]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2006-12-08 614400]
"WarReg_PopUp"="c:\acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 57344]
"LogitechCommunicationsManager"="c:\program files\Common Files\Logitech\LComMgr\Communications_Helper.exe" [2006-10-31 304664]
"LVCOMSX"="c:\program files\Common Files\Logitech\LComMgr\LVComSX.exe" [2006-11-28 244512]
"AcerOrbicamRibbon"="c:\program files\Acer\OrbiCam10\OrbiCam.exe" [2006-11-28 754712]
"Acer Tour Reminder"="c:\acer\AcerTour\Reminder.exe" [2007-01-14 151552]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 132496]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-03-11 49152]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2006-12-20 90191]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-12-20 7766016]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-12-20 81920]
"a-squared"="c:\program files\A-SQUARED ANTI-MALWARE\a2guard.exe" [2008-11-20 2780816]
"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
"Look 'n' Stop"="c:\program files\Soft4Ever\looknstop\looknstop.exe" [2008-12-06 557056]
"RtHDVCpl"="RtHDVCpl.exe" [2006-12-01 c:\windows\RtHDVCpl.exe]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2007-01-19 528384]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-03-11 210520]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"="0x00000000"
"UpdatesDisableNotify"="0x00000000"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{8410BB38-ED07-4682-81D4-A8C3641CA69C}"= UDP:c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\MCE Deluxe Suite.exe:CyberLink MCE Deluxe Suite
"{49C96AEE-9A70-49B0-8FEA-75F8E0F1022A}"= TCP:c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\MCE Deluxe Suite.exe:CyberLink MCE Deluxe Suite
"{E8616391-D19C-4A38-85BF-CFF450A656C4}"= UDP:c:\program files\Alwil Software\Avast4\ashAvast.exe:avast! Antivirus
"{F4E64129-5FE3-492D-8AC9-E42FA37C09EF}"= TCP:c:\program files\Alwil Software\Avast4\ashAvast.exe:avast! Antivirus
"{37374372-0216-4C04-B6B4-FA7C7AF83E96}"= UDP:c:\program files\Mozilla Firefox\firefox.exe:Mozilla Firefox
"{FACFD52E-CCBC-443D-A199-724F6DF2BE84}"= TCP:c:\program files\Mozilla Firefox\firefox.exe:Mozilla Firefox
"{E75F98EE-1FFA-43C8-BB51-621606BA4B0C}"= UDP:c:\program files\WinRAR\WinRAR.exe:WinRAR
"{48B68B76-BADF-4686-863E-EFB72CE96625}"= TCP:c:\program files\WinRAR\WinRAR.exe:WinRAR
"{3E69789A-E7CF-434E-B5A7-8257B814FAA9}"= UDP:c:\program files\VideoLAN\VLC\vlc.exe:VLC media player
"{DAB4ABA1-B4B6-4209-8549-B3216D92514F}"= TCP:c:\program files\VideoLAN\VLC\vlc.exe:VLC media player
"{3A9E575E-61A1-4FD2-94DE-77539C55297F}"= UDP:c:\acer\Empowering Technology\eLock\Acer eLock Management.exe:Acer eLock Management
"{DC947254-C3EC-4DC5-9B1A-2C9C0BEA1AA8}"= TCP:c:\acer\Empowering Technology\eLock\Acer eLock Management.exe:Acer eLock Management
"TCP Query User{8DCDC020-18F5-44D6-8D2A-92EF8C3862E9}c:\\program files\\mozilla firefox\\firefox.exe"= UDP:c:\program files\mozilla firefox\firefox.exe:Firefox
"UDP Query User{A6BDEA3F-69D8-418C-9743-6B409FC933AB}c:\\program files\\mozilla firefox\\firefox.exe"= TCP:c:\program files\mozilla firefox\firefox.exe:Firefox
"TCP Query User{6BE3357C-3D55-428A-99E1-F5D7EC19AAFF}c:\\program files\\emule\\emule.exe"= UDP:c:\program files\emule\emule.exe:eMule
"UDP Query User{06D7582E-B7A8-4A47-97DD-1611F1745163}c:\\program files\\emule\\emule.exe"= TCP:c:\program files\emule\emule.exe:eMule
"TCP Query User{0AF3174D-9EDB-445C-9273-D4BA30E139DF}c:\\program files\\emule\\emule.exe"= UDP:c:\program files\emule\emule.exe:eMule
"UDP Query User{789E4D1C-BBA6-445B-911A-03C60A82EAB9}c:\\program files\\emule\\emule.exe"= TCP:c:\program files\emule\emule.exe:eMule
"TCP Query User{DCE6DDAB-1AB3-403C-B888-3D893B434662}c:\\program files\\media player classic\\mplayerc.exe"= UDP:c:\program files\media player classic\mplayerc.exe:Media Player Classic
"UDP Query User{AF0540E4-5FCD-47C8-B36A-DEE185C4E114}c:\\program files\\media player classic\\mplayerc.exe"= TCP:c:\program files\media player classic\mplayerc.exe:Media Player Classic
"{2E7861F7-6094-4FF5-8301-336C12A94EC4}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{2FBE8B07-C6DF-4DF4-915C-2BA5090C5609}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{287D0902-B15A-4657-A0E9-31C862B7B6C6}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{A4CE2458-D0F1-48CA-9D50-0E84A92C8B85}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{A941E25A-AC11-45E1-8A0D-C25FEC05AF02}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"TCP Query User{3AB47EE5-7DBC-4DFB-930A-856C1FC8ABC1}c:\\program files\\videolan\\vlc\\vlc.exe"= UDP:c:\program files\videolan\vlc\vlc.exe:VLC media player
"UDP Query User{C7F3AC92-3111-4A5C-9F87-2C30521F27CB}c:\\program files\\videolan\\vlc\\vlc.exe"= TCP:c:\program files\videolan\vlc\vlc.exe:VLC media player
"{49AD18CF-38AA-48F4-B307-F301D000AB8F}"= c:\program files\Skype\Phone\Skype.exe:Skype

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

R1 lnsfw1;lnsfw1;c:\windows\system32\drivers\lnsfw1.sys [2008-12-06 79232]
R3 KeyScrambler;KeyScrambler;c:\windows\system32\drivers\keyscrambler.sys [2007-08-10 113896]
R3 lv321av;Logitech USB PC Camera (VC0321);c:\windows\system32\DRIVERS\lv321av.sys [2007-01-19 847392]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\b57nd60x.sys [2006-11-02 167936]
S3 SMSCIRDA;SMSC Infrared Device Driver;c:\windows\system32\DRIVERS\SMSCirda.sys [2007-01-19 31232]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

*Newly Created Service* - PROCEXP90
.
Contenu du dossier 'Tâches planifiées'

2008-12-10 c:\windows\Tasks\User_Feed_Synchronization-{0DB285EE-EC7A-4AE0-A80C-FC5F9D897C6A}.job
- c:\windows\system32\msfeedssync.exe [2008-01-19 08:33]
.
- - - - ORPHELINS SUPPRIMES - - - -

HKLM-Run-Acer Tour - (no file)
HKLM-Run-SetPanel - (no file)
HKLM-Run-eRecoveryService - (no file)

.
------- Examen supplémentaire -------
.
uInternet Settings,ProxyOverride = *.local;<local>
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FireFox -: Profile - c:\users\Henri III\AppData\Roaming\Mozilla\Firefox\Profiles\glqlvaxn.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.fr/
FF -: plugin - c:\program files\iTunes\Mozilla Plugins\npitunes.dll
FF -: plugin - c:\program files\Microsoft Silverlight\2.0.31005.0\npctrl.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-11 01:29:54
Windows 6.0.6001 Service Pack 1 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

c:\users\HENRII~1\AppData\Local\Temp\catchme.dll 53248 bytes executable

Scan terminé avec succès
Fichiers cachés: 1

**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(756)
c:\windows\system32\eNetHook.dll

- - - - - - - > 'lsass.exe'(672)
c:\windows\system32\eNetHook.dll
.
Heure de fin: 2008-12-11 1:30:50
ComboFix-quarantined-files.txt 2008-12-11 00:30:44

Avant-CF: 25 801 994 240 octets libres
Après-CF: 25,780,375,552 octets libres

245 --- E O F --- 2008-12-10 02:04:45

grosquick · Answer

Et voici enfin le rapport Malwarebytes :

Malwarebytes' Anti-Malware 1.31
Version de la base de données: 1502
Windows 6.0.6001 Service Pack 1

20/12/2008 07:07:40
mbam-log-2008-12-20 (07-07-40).txt

Type de recherche: Examen rapide
Eléments examinés: 50442
Temps écoulé: 3 minute(s), 48 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

grosquick · Answer

Et bien ça à l'air d'aller. J'ai changé de firewall pour mettre look n' stop à la place du windows d'origine : plus de désactivation intempestive. Tu crois que c'est bon désormais ?

grosquick · Answer

Salut et bonne année, 

J'étais en vacances et ne me suis pas connecté depuis un moment. Voici le rapport :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:08:10, on 05/01/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe
C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe
C:\Program Files\Acer\OrbiCam10\OrbiCam.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Soft4Ever\looknstop\looknstop.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\ehome\ehmsas.exe
C:\Acer\Empowering Technology\ENET\ENMTRAY.EXE
C:\Windows\System32undll32.exe
C:\Acer\Empowering Technology\EPOWER\EPOWER_DMC.EXE
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Users\HENRII~1\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Henri III\Desktop\Alex\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: QFX Software KeyScrambler - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [AcerOrbicamRibbon] "C:\Program Files\Acer\OrbiCam10\OrbiCam.exe" /hide
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32
vsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [?????????] ??????????????e
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix: 
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eNet Service - Acer Inc. - C:\Acer\Empowering Technology\eNet\eNet Service.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Look 'n' Stop Service (lnssvcVista) - Unknown owner - C:\Program Files\Soft4Ever\looknstop\LnsSvcVista.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ePower Service (WMIService) - acer - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

Trojan / Fichier Hijack

21 réponses

Discussions similaires