Win antivirus pro moi aussi

Bonjour, comme beaucoup de gens qui se croient malins en informatiques et qui installent toujours pleins de trucs sans trop savoir, je suis infecté par Win Antivirsu Pro. J'ai donc suivi les première indications dasn les autres post et voic mon rapport HiJack This.
Merci d'avance a ceux qui pourront m'aider.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:01:04, on 04/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\vVX1000.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\MSNMES~1\msnmsgr.exe
C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Ensemble clavier et souris sans fil Labtec\MulMouse.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Opera\Opera.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\HiJackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\FICHIE~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [Office SturtUp] osa9.exe
O4 - HKLM\..\Run: [gfxtray] rundll32 ctccw32.dll,findwnd
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\MSNMES~1\msnmsgr.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Hotmail Popper.lnk = C:\Program Files\Hotmail Popper\hotpop.exe
O4 - Global Startup: Activer l'ensemble clavier et souris sans fil Labtec.lnk = C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Download Link Using Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{08C4A25D-DFEE-45B5-AB69-52581617005E}: NameServer = 212.27.32.176,212.27.32.177
O17 - HKLM\System\CS2\Services\Tcpip\..\{08C4A25D-DFEE-45B5-AB69-52581617005E}: NameServer = 212.27.32.176,212.27.32.177
O17 - HKLM\System\CS3\Services\Tcpip\..\{08C4A25D-DFEE-45B5-AB69-52581617005E}: NameServer = 212.27.32.176,212.27.32.177
O20 - AppInit_DLLs: C:\WINDOWS\system32\__c00E35AF.dat
O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Fichiers communs\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 8317 bytes
Configuration: Windows XP
Opera 9.24

12 réponses

  1. Bonjour,
    Alors là souci, au début, le Firewall me detectait une intrusion toutes les deux seconde, maintenant ca va sauf que je ne peux plus rien copier sur un disk externe "impossible de lire a partir du fichier ou de las diskette source"

    C'est grave docteur ?
    1. voici le rappor de OTMoveit

      File/Folder C:\WINDOWS\SYSTEM32\OSA9.EXE not found.
      File/Folder C:\WINDOWS\system32\ctccw32.dll not found.
      C:\WINDOWS\system32\__c00E35AF.dat moved successfully.
      File/Folder C:\WINDOWS\system32\mcrh.tmp not found.

      Created on 11/07/2007 11:50:30
      1. Ok, tu peux jeter smitfraudfix et Clean.

        ¤ Rien ne sera supprimé sauf si je te l'indique
        Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked". Ferme Internet Explorer avant de cliquer sur Fix checked. Autorise les modifications que Spybot va t'alerter ou plus simple, en bas à droite fais un clic droit sur le petit cadenas et chosis fermer

        R3 - ******* il y en a qu'une coche la case
        O3 - ******* il y en a qu'une idem
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
        O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
        O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
        O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
        O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
        O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\FICHIE~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
        O4 - HKLM\..\Run: [Office SturtUp] osa9.exe
        O4 - HKLM\..\Run: [gfxtray] rundll32 ctccw32.dll,findwnd
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
        O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
        O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
        O4 - Global Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
        O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
        O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

        ¤ Télécharge OTMoveIt sur ton bureau
        http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe

        Double clic sur OTMoveIt.exe
        Sélectionne et copie les lignes ci-dessous

        C:\WINDOWS\SYSTEM32\OSA9.EXE
        C:\WINDOWS\system32\ctccw32.dll
        C:\WINDOWS\system32\__c00E35AF.dat
        C:\WINDOWS\system32\mcrh.tmp

        Retourne dans OTMoveit, fais un clic droit dans la fenêtre "Paste List of Files/Folders to be moved" et choisis "coller".
        Clic sur le boutton rouge Moveit et ferme OTMoveIt
        Si un fichier ou un dossier ne peut être déplacer immédiatement il te sera demander de redémarrer ta machine pour finir l'exécution, si c'est le cas, clic sur "Yes"
        Copie et colle le rapport qu'il va te générer ici stp. Le rapport d'OTMoveit se trouve dans ce dossier : C:\_OTMoveIt\MovedFiles

        ¤ Désactive le pare-feu de Windows(SP2) il ne sert à rien puis installe celui ci pour plus de sécurité

        Kerio (pare-feu) : reste gratuit après la période d'essai en français
        ----> http://www.infos-du-net.com/telecharger/Firewall-Kerio-Personal,0301-390.html

        Regarde ce tutoriel si tu as besoin d'aide pour l'installation et la configuration de Kerio
        --> http://kerio.probb.fr/Systemesd-exploitation-c1/Logiciels-et-tutoriels-gratuits-tries-par-categorie-f6/Tutoriel-pour-Kerio-4-version-gratuite-t201.htm

        Plus d'info :
        ->https://kerio.probb.fr/

        Mets à jour Spybot et scanne totalement ton PC et supprime tout ce qu'il pourrait te trouver.
        Puis indique moi comment ça se passe ;-)
        1. Script execute en mode sans echec
          Rapport clean par Malekal_morte - http://www.malekal.com
          Script execute en mode sans echec 06/11/2007 a 19:08:32,51

          Microsoft Windows XP [version 5.1.2600]

          *** Suppression des fichiers dans C:

          *** Suppression des fichiers dans C:\WINDOWS\

          *** Suppression des fichiers dans C:\WINDOWS\system32

          *** Suppression des fichiers dans C:\Program Files

          *** Suppression des clefs du registre effectuee..
          *** Fin du rapport !

          VOILA
          1. Lol bon pas grave, rapport trop long est selon la longueur de ton fichier hosts tu vas devoir faire 30 pages, bref.

            Fais ceci avec Clean, car mon copié collé à foiré j'ai mis deux fois la même chose

            - Redémarre ton PC. Dès l'allumage de celui-ci tapote la touche F8 (ou F5 si F8 ne fonctionne pas), à l'écran qui va apparaître choisis "mode sans echec" attends un peu..
            Entre dans le dossier Clean
            Double clic sur clean ou clean.cmd et choisis l'option 2
            Dès qu'il a terminé redémarre normalement et colle le rapport ici stp
            1. voici le rapport Smitfraudfix

              SmitFraudFix v2.249

              Rapport fait ‡ 17:23:25,03, 05/11/2007

              ExecutÈ ‡ partir de C:\Documents and Settings\FOUILLAND\Bureau\SmitfraudFix

              OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT

              Le type du systËme de fichiers est NTFS

              Fix executÈ en mode sans echec

              ªªªªªªªªªªªªªªªªªªªªªªªª SharedTaskScheduler Avant SmitFraudFix

              !!!Attention, les clÈs qui suivent ne sont pas forcÈment infectÈes!!!

              SrchSTS.exe by S!Ri

              Search SharedTaskScheduler's .dll

              ªªªªªªªªªªªªªªªªªªªªªªªª Arret des processus

              ªªªªªªªªªªªªªªªªªªªªªªªª hosts

              127.0.0.1 localhost

              127.0.0.1 hityou.com

              127.0.0.1 www.hityou.com

              127.0.0.1 180searchassistant.com

              127.0.0.1 www.180searchassistant.com

              127.0.0.1 180solutions.com

              127.0.0.1 www.180solutions.com

              127.0.0.1 bis.180solutions.com

              127.0.0.1 config.180solutions.com

              127.0.0.1 cts.180solutions.com

              127.0.0.1 downloads.180solutions.com

              127.0.0.1 installs.180solutions.com

              127.0.0.1 nowhere.180solutions.com

              127.0.0.1 ping.180solutions.com

              127.0.0.1 tv.180solutions.com

              127.0.0.1 uploads.180solutions.com

              127.0.0.1 public.zangocash.com

              127.0.0.1 www.public.zangocash.com

              127.0.0.1 static.zangocash.com

              127.0.0.1 www.static.zangocash.com

              127.0.0.1 www.zangocash.com

              127.0.0.1 zangocash.com

              127.0.0.1 007guard.com

              127.0.0.1 www.007guard.com

              127.0.0.1 2search.com

              127.0.0.1 www.2search.com

              127.0.0.1 2search.org

              127.0.0.1 www.2search.org

              127.0.0.1 bardownload.com

              127.0.0.1 www.bardownload.com

              127.0.0.1 download.bardownload.com

              127.0.0.1 www.download.bardownload.com

              127.0.0.1 feeds.2search.com

              127.0.0.1 www.feeds.2search.com

              127.0.0.1 feeds2.2search.org

              127.0.0.1 www.feeds2.2search.org

              127.0.0.1 install.007guard.com

              127.0.0.1 www.install.007guard.com

              127.0.0.1 the.007guard.com

              127.0.0.1 www.the.007guard.com

              127.0.0.1 topbrowsing.com

              127.0.0.1 www.topbrowsing.com

              127.0.0.1 2squared.com

              127.0.0.1 www.2squared.com

              127.0.0.1 play3w.com

              127.0.0.1 www.play3w.com

              127.0.0.1 playon.play3w.com

              127.0.0.1 7search.com

              127.0.0.1 www.7search.com

              127.0.0.1 3abetterinternet.com

              127.0.0.1 www.3abetterinternet.com

              127.0.0.1 abetterinternet.com

              127.0.0.1 www.abetterinternet.com

              127.0.0.1 bigtrafficnetwork.com

              127.0.0.1 www.bigtrafficnetwork.com

              127.0.0.1 download.abetterinternet.com

              127.0.0.1 thinstall.abetterinternet.com

              127.0.0.1 www.toolbar3.trafficgeneration.biz

              127.0.0.1 www.toolbar5.trafficgeneration.biz

              127.0.0.1 trafficgeneration.biz

              127.0.0.1 www.trafficgeneration.biz

              127.0.0.1 www3.bigtrafficnetwork.com

              127.0.0.1 iframebiz.com

              127.0.0.1 www.iframebiz.com

              127.0.0.1 absolutee.com

              127.0.0.1 www.absolutee.com

              127.0.0.1 pornohome.net

              127.0.0.1 www.pornohome.net

              127.0.0.1 adarmor.com

              127.0.0.1 www.adarmor.com

              127.0.0.1 addictivetechnologies.com

              127.0.0.1 www.addictivetechnologies.com

              127.0.0.1 addictivetechnologies.net

              127.0.0.1 www.addictivetechnologies.net

              127.0.0.1 admin2cash.biz

              127.0.0.1 www.admin2cash.biz

              127.0.0.1 ad.mokead.com

              127.0.0.1 www.ad.mokead.com

              127.0.0.1 mokead.com

              127.0.0.1 www.mokead.com

              127.0.0.1 adprotect.com

              127.0.0.1 www.adprotect.com

              127.0.0.1 adscontex.com

              127.0.0.1 www.adscontex.com

              127.0.0.1 miaminews365.net

              127.0.0.1 www.miaminews365.net

              127.0.0.1 redir.ws

              127.0.0.1 www.redir.ws

              127.0.0.1 www.zestyfind.com

              127.0.0.1 zestyfind.com

              127.0.0.1 miosearch.com

              127.0.0.1 www.miosearch.com

              127.0.0.1 advcash.biz

              127.0.0.1 www.advcash.biz

              127.0.0.1 adwarebazooka.com

              127.0.0.1 www.adwarebazooka.com

              127.0.0.1 get.adwarebazooka.com

              127.0.0.1 adwarefinder.com

              127.0.0.1 www.adwarefinder.com

              127.0.0.1 nbcsearch.com

              127.0.0.1 www.nbcsearch.com

              127.0.0.1 adwarepunisher.com

              127.0.0.1 www.adwarepunisher.com

              127.0.0.1 agava.com

              127.0.0.1 agava.ru

              127.0.0.1 hu15.ru

              127.0.0.1 hut1.ru

              127.0.0.1 all4internet.com

              127.0.0.1 www.all4internet.com

              127.0.0.1 www.allcybersearch.com

              127.0.0.1 www.tinybar.com

              127.0.0.1 babe.k-lined.com

              127.0.0.1 www.babe.k-lined.com

              127.0.0.1 babe.the-killer.bz

              127.0.0.1 www.babe.the-killer.bz

              127.0.0.1 did.i-used.cc

              127.0.0.1 www.did.i-used.cc

              127.0.0.1 i-used.cc

              127.0.0.1 k-lined.com

              127.0.0.1 antispyware.com

              127.0.0.1 www.antispyware.com

              127.0.0.1 spysoldier.com

              127.0.0.1 www.spysoldier.com

              127.0.0.1 antivermins.com

              127.0.0.1 www.antivermins.com

              127.0.0.1 anti-vermins.com

              127.0.0.1 www.anti-vermins.com

              127.0.0.1 dl1.antivermins.com

              127.0.0.1 antivirgear.com

              127.0.0.1 www.antivirgear.com

              127.0.0.1 dl1.antivirgear.com

              127.0.0.1 sigmadown.biz

              127.0.0.1 www.sigmadown.biz

              127.0.0.1 anti-virus-pro.com

              127.0.0.1 www.anti-virus-pro.com

              127.0.0.1 iwon.com

              127.0.0.1 goldenfreehost.com

              127.0.0.1 www.goldenfreehost.com

              127.0.0.1 logs.vapochille.com

              127.0.0.1 www.logs.vapochille.com

              127.0.0.1 asta-killer.com

              127.0.0.1 realphx.com

              127.0.0.1 antivirusgolden.com

              127.0.0.1 www.antivirusgolden.com

              127.0.0.1 azebar.com

              127.0.0.1 toolbar.azebar.com

              127.0.0.1 www.toolbar.azebar.com

              127.0.0.1 n3.net

              127.0.0.1 sdbot.n3.net

              127.0.0.1 www.supernet.speedserv.com

              127.0.0.1 topsite.us

              127.0.0.1 www.topsite.us

              127.0.0.1 topsites.us

              127.0.0.1 www.topsites.us

              127.0.0.1 topsitez.us

              127.0.0.1 www.topsitez.us

              127.0.0.1 lfxmsc.gov.cn

              127.0.0.1 www.lfxmsc.gov.cn

              127.0.0.1 www.zjkjw.gov.cn

              127.0.0.1 zjkjw.gov.cn

              127.0.0.1 multitrader.info

              127.0.0.1 www.multitrader.info

              127.0.0.1 arquivojpgs.smtp.ru

              127.0.0.1 www.arquivojpgs.smtp.ru

              127.0.0.1 pochta.ru

              127.0.0.1 www.pochta.ru

              127.0.0.1 smtp.ru

              127.0.0.1 www.smtp.ru

              127.0.0.1 cartoes.uol.com.br

              127.0.0.1 hobbypesca.com.br

              127.0.0.1 www.hobbypesca.com.br

              127.0.0.1 ofuxico.uol.com.br

              127.0.0.1 newmediaidea.com

              127.0.0.1 www.newmediaidea.com

              127.0.0.1 bettersearch.biz

              127.0.0.1 www.bettersearch.biz

              127.0.0.1 asdeykuddq.com

              127.0.0.1 www.asdeykuddq.com

              127.0.0.1 asidseiupc.com

              127.0.0.1 www.asidseiupc.com

              127.0.0.1 fjsynebcod.com

              127.0.0.1 www.fjsynebcod.com

              127.0.0.1 qiudheadsd.com

              127.0.0.1 www.qiudheadsd.com

              127.0.0.1 superbgirlz.com

              127.0.0.1 www.superbgirlz.com

              127.0.0.1 blazefind.com

              127.0.0.1 jerrynews.com

              127.0.0.1 www.jerrynews.com

              127.0.0.1 bonzi.com

              127.0.0.1 www.bonzi.com

              127.0.0.1 bookedspace.com

              127.0.0.1 www.bookedspace.com

              127.0.0.1 bravesentry.com

              127.0.0.1 www.bravesentry.com

              127.0.0.1 download.bravesentry.com

              127.0.0.1 www.download.bravesentry.com

              127.0.0.1 featured-results.com

              127.0.0.1 searchmadesafe.net

              127.0.0.1 quicklaunch.com

              127.0.0.1 aavc.com

              127.0.0.1 acjp.com

              127.0.0.1 ebav.com

              127.0.0.1 ebaw.com

              127.0.0.1 ebch.com

              127.0.0.1 ebdv.com

              127.0.0.1 ebdw.com

              127.0.0.1 ebgo.com

              127.0.0.1 ebjp.com

              127.0.0.1 ebkb.com

              127.0.0.1 ebkn.com

              127.0.0.1 ebky.com

              127.0.0.1 eblv.com

              127.0.0.1 ebmu.com

              127.0.0.1 ebvr.com

              127.0.0.1 ecmh.com

              127.0.0.1 ecmp.com

              127.0.0.1 ecpm.com

              127.0.0.1 ecwz.com

              127.0.0.1 ecyb.com

              127.0.0.1 edhq.com

              127.0.0.1 edty.com

              127.0.0.1 eduy.com

              127.0.0.1 eeev.com

              127.0.0.1 emch.com

              127.0.0.1 farse.com

              127.0.0.1 germany.rub.to

              127.0.0.1 H24413.tfil.com

              127.0.0.1 ibmx.com

              127.0.0.1 icwb.com

              127.0.0.1 icwo.com

              127.0.0.1 icwp.com

              127.0.0.1 iddh.com

              127.0.0.1 idhh.com

              127.0.0.1 ifiz.com

              127.0.0.1 iguu.com

              127.0.0.1 lop.com

              127.0.0.1 rub.to

              127.0.0.1 samz.com

              127.0.0.1 saoe.com

              127.0.0.1 sbee.com

              127.0.0.1 sbjr.com

              127.0.0.1 sbnl.com

              127.0.0.1 sbnt.com

              127.0.0.1 sbvr.com

              127.0.0.1 scbm.com

              127.0.0.1 sckr.com

              127.0.0.1 scrk.com

              127.0.0.1 sdry.com

              127.0.0.1 search.rub.to

              127.0.0.1 seld.com

              127.0.0.1 sfux.com

              127.0.0.1 sheat.com

              127.0.0.1 sipo.com

              127.0.0.1 smds.com

              127.0.0.1 srib.com

              127.0.0.1 srox.com

              127.0.0.1 srsf.com

              127.0.0.1 ssaw.com

              127.0.0.1 ssby.com

              127.0.0.1 surj.com

              127.0.0.1 tbvg.com

              127.0.0.1 tdak.com

              127.0.0.1 tdko.com

              127.0.0.1 tdmy.com

              127.0.0.1 tefs.com

              127.0.0.1 tfil.com

              127.0.0.1 thko.com

              127.0.0.1 tjar.com

              127.0.0.1 tjaw.com

              127.0.0.1 tjdo.com

              127.0.0.1 tjem.com

              127.0.0.1 tjgo.com

              127.0.0.1 torc.com

              127.0.0.1 unitedstates.rub.to

              127.0.0.1 wabq.com

              127.0.0.1 wabu.com

              127.0.0.1 wbkb.com

              127.0.0.1 wethere.com

              127.0.0.1 www.wethere.com

              127.0.0.1 wfix.com

              127.0.0.1 wflu.com

              127.0.0.1 c4tdownload.com

              127.0.0.1 www.c4tdownload.com

              127.0.0.1 hostance.net

              127.0.0.1 www.hostance.net

              127.0.0.1 b.casalemedia.com

              127.0.0.1 casalemedia.com

              127.0.0.1 www.casalemedia.com

              127.0.0.1 cashsurfers.com

              127.0.0.1 www.cashsurfers.com

              127.0.0.1 cashdeluxe.net

              127.0.0.1 www.cashdeluxe.net

              127.0.0.1 CashUnlim.com

              127.0.0.1 www.CashUnlim.com

              127.0.0.1 stats.cashdeluxe.net

              127.0.0.1 www.stats.cashdeluxe.net

              127.0.0.1 tsx.org

              127.0.0.1 upx.tsx.org

              127.0.0.1 888.com

              127.0.0.1 www.888.com

              127.0.0.1 images.888.com

              127.0.0.1 whoisprivacyprotect.com

              127.0.0.1 www.whoisprivacyprotect.com

              127.0.0.1 data-hoster.com

              127.0.0.1 www.data-hoster.com

              127.0.0.1 netsearchsoft.com

              127.0.0.1 www.netsearchsoft.com

              127.0.0.1 pcgewinnen.de

              127.0.0.1 www.pcgewinnen.de

              127.0.0.1 breenten.biz

              127.0.0.1 www.breenten.biz

              127.0.0.1 ozonung.biz

              127.0.0.1 www.ozonung.biz

              127.0.0.1 troonety.biz

              127.0.0.1 www.troonety.biz

              127.0.0.1 votreenton.biz

              127.0.0.1 www.votreenton.biz

              127.0.0.1 www.zurrusco.com

              127.0.0.1 zurrusco.com

              127.0.0.1 1987324.com

              127.0.0.1 www.1987324.com

              127.0.0.1 out.true-counter.com

              127.0.0.1 ads.centralmedia.ws

              127.0.0.1 c.centralmedia.ws

              127.0.0.1 centralmedia.ws

              127.0.0.1 Sexxpassport.com

              127.0.0.1 www.Sexxpassport.com

              127.0.0.1 clickspring.net

              127.0.0.1 www.clickspring.net

              127.0.0.1 100888290cs.com

              127.0.0.1 www.100888290cs.com

              127.0.0.1 132.com

              127.0.0.1 www.132.com

              127.0.0.1 136136.net

              127.0.0.1 www.136136.net

              127.0.0.1 163ns.com

              127.0.0.1 www.163ns.com

              127.0.0.1 ac66.cn

              127.0.0.1 www.ac66.cn

              127.0.0.1 bigwww.com

              127.0.0.1 www.bigwww.com

              127.0.0.1 chenshijituan.com

              127.0.0.1 www.chenshijituan.com

              127.0.0.1 cnzz.com

              127.0.0.1 www.cnzz.com

              127.0.0.1 down.136136.net

              127.0.0.1 ert0003.e76.163ns.com

              127.0.0.1 jhzjyj.bigwww.com

              127.0.0.1 mir.100888290cs.com

              127.0.0.1 q36.cn

              127.0.0.1 www.q36.cn

              127.0.0.1 s59.cnzz.com

              127.0.0.1 tzxsj.com

              127.0.0.1 www.tzxsj.com

              127.0.0.1 u7u.cn

              127.0.0.1 www.u7u.cn

              127.0.0.1 wg581.com

              127.0.0.1 www.wg581.com

              127.0.0.1 woool.100888290cs.com

              127.0.0.1 cnetadd.com

              127.0.0.1 www.cnetadd.com

              127.0.0.1 3721.com

              127.0.0.1 139mm.com

              127.0.0.1 www.139mm.com

              127.0.0.1 okmmm.com

              127.0.0.1 www.okmmm.com

              127.0.0.1 adservs.com

              127.0.0.1 command.adservs.com

              127.0.0.1 csx.adservs.com

              127.0.0.1 www.csx.adservs.com

              127.0.0.1 nonameforthisdomain.com

              127.0.0.1 www.nonameforthisdomain.com

              127.0.0.1 www.commonname.com

              127.0.0.1 contentmatch.net

              127.0.0.1 www.contentmatch.net

              127.0.0.1 contra-virus.com

              127.0.0.1 www.contra-virus.com

              127.0.0.1 008k.com

              127.0.0.1 www.008k.com

              127.0.0.1 00hq.com

              127.0.0.1 www.00hq.com

              127.0.0.1 010402.com

              127.0.0.1 100sexlinks.com

              127.0.0.1 www.100sexlinks.com

              127.0.0.1 10sek.com

              127.0.0.1 www.10sek.com

              127.0.0.1 1-domains-registrations.com

              127.0.0.1 www.1-domains-registrations.com

              127.0.0.1 1-extreme.biz

              127.0.0.1 www.1-extreme.biz

              127.0.0.1 1sexparty.com

              127.0.0.1 www.1sexparty.com

              127.0.0.1 1stpagehere.com

              127.0.0.1 www.1stpagehere.com

              127.0.0.1 2020search.com

              127.0.0.1 www.2020search.com

              127.0.0.1 20x2p.com

              127.0.0.1 24teen.com

              127.0.0.1 www.24teen.com

              127.0.0.1 36site.com

              127.0.0.1 www.36site.com

              127.0.0.1 4corn.net

              127.0.0.1 www.4corn.net

              127.0.0.1 4klm.com

              127.0.0.1 6sek.com

              127.0.0.1 www.6sek.com

              127.0.0.1 75tz.com

              127.0.0.1 777top.com

              127.0.0.1 www.777top.com

              127.0.0.1 8ad.com

              127.0.0.1 www.8ad.com

              127.0.0.1 aboutclicker.com

              127.0.0.1 www.aboutclicker.com

              127.0.0.1 abrp.net

              127.0.0.1 www.abrp.net

              127.0.0.1 accessthefuture.net

              127.0.0.1 www.accessthefuture.net

              127.0.0.1 acemedic.com

              127.0.0.1 www.acemedic.com

              127.0.0.1 actionbreastcancer.org

              127.0.0.1 www.actionbreastcancer.org

              127.0.0.1 activexupdate.com

              127.0.0.1 www.activexupdate.com

              127.0.0.1 ad25.com

              127.0.0.1 ad45.com

              127.0.0.1 ad77.com

              127.0.0.1 ad86.com

              127.0.0.1 adamsupportgroup.org

              127.0.0.1 www.adamsupportgroup.org

              127.0.0.1 adasearch.com

              127.0.0.1 www.adasearch.com

              127.0.0.1 adipics.com

              127.0.0.1 www.adipics.com

              127.0.0.1 adspics.com

              127.0.0.1 www.adspics.com

              127.0.0.1 adult-engine-search.com

              127.0.0.1 www.adult-engine-search.com

              127.0.0.1 adult-erotic-guide.net

              127.0.0.1 www.adult-erotic-guide.net

              127.0.0.1 adult-friends-finder.net

              127.0.0.1 www.adult-friends-finder.net

              127.0.0.1 adultgambling.org

              127.0.0.1 adult-host.org

              127.0.0.1 adulthyperlinks.com

              127.0.0.1 www.adulthyperlinks.com

              127.0.0.1 adultsgames.net

              127.0.0.1 adulttds.com

              127.0.0.1 www.adulttds.com

              127.0.0.1 advert.exaccess.ru

              127.0.0.1 africaspromise.org

              127.0.0.1 agentstudio.com

              127.0.0.1 akril.com

              127.0.0.1 alcatel.ws

              127.0.0.1 alfa-search.com

              127.0.0.1 allabtcars.com

              127.0.0.1 allabtjeeps.com

              127.0.0.1 allcybersearch.com

              127.0.0.1 allhyperlinks.com

              127.0.0.1 all-inet.com

              127.0.0.1 allinternetbusiness.com

              127.0.0.1 almarvideos.com

              127.0.0.1 amandamountains.com

              127.0.0.1 american-teens.net

              127.0.0.1 amigeek.com

              127.0.0.1 amisbusiness.com

              127.0.0.1 analmovi.com

              127.0.0.1 anin.org

              127.0.0.1 annaromeo.com

              127.0.0.1 antrocity.com

              127.0.0.1 anything4health.com

              127.0.0.1 approvedlinks.com

              127.0.0.1 www.approvedlinks.com

              127.0.0.1 apsua.com

              127.0.0.1 aregay.com

              127.0.0.1 arheo.com

              127.0.0.1 arizonaweb.org

              127.0.0.1 armitageinn.com

              127.0.0.1 artachnid.com

              127.0.0.1 art-func.com

              127.0.0.1 art-xxx.com

              127.0.0.1 asdbiz.biz

              127.0.0.1 www.asdbiz.biz

              127.0.0.1 asiankingkong.com

              127.0.0.1 ass-gals.com

              127.0.0.1 athenrye.com

              127.0.0.1 avian-ads.com

              127.0.0.1 ayakawamura.com

              127.0.0.1 ayumitaniguchi.com

              127.0.0.1 backup.mabou.org

              127.0.0.1 bannedhost.net

              127.0.0.1 barbudafarms.com

              127.0.0.1 barnandfence.com

              127.0.0.1 batsearch.com

              127.0.0.1 baygraphicsllc.com

              127.0.0.1 bbbsearch.com

              127.0.0.1 bb-search.com

              127.0.0.1 bdsmlibrary.net

              127.0.0.1 bedhome.com

              127.0.0.1 bediadance.com

              127.0.0.1 bellabasketsfl.com

              127.0.0.1 bernaolatwin.com

              127.0.0.1 best-counter.com

              127.0.0.1 bestcrawler.com

              127.0.0.1 bestfor.ru

              127.0.0.1 best-hardpics.com

              127.0.0.1 bestporngate.com

              127.0.0.1 best-winning-casino.com

              127.0.0.1 bestxporno.com

              127.0.0.1 bitchesonline.net

              127.0.0.1 blackjack-free.net

              127.0.0.1 blender.xu.pl

              127.0.0.1 bodaciousbabette.com

              127.0.0.1 boobdoll.com

              127.0.0.1 boobsandtits.com

              127.0.0.1 boobsclub.com

              127.0.0.1 boredlife.com

              127.0.0.1 bowlofogumbo.com

              127.0.0.1 bradcoem.org

              127.0.0.1 brandiyoung.com

              127.0.0.1 brookeburn.com

              127.0.0.1 bucps.com

              127.0.0.1 burgerkingbigscreen.com

              127.0.0.1 buscards.net

              127.0.0.1 bustyrussell.com

              127.0.0.1 buttejazz.org

              127.0.0.1 buyselldomain.net

              127.0.0.1 calcioturris.com

              127.0.0.1 camup.net

              127.0.0.1 canberracricketcoaching.com

              127.0.0.1 candycantaloupes.com

              127.0.0.1 cantfind.com

              127.0.0.1 careers.dulcineasystems.net

              127.0.0.1 carsands.com

              127.0.0.1 carsrentals.net

              127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl

              127.0.0.1 casino2win.net

              127.0.0.1 casino-gambling-1.net

              127.0.0.1 casino-gambling-2.net

              127.0.0.1 casinomidas.net

              127.0.0.1 casinonline.net

              127.0.0.1 casino-onlines.net

              127.0.0.1 catallogue.com

              127.0.0.1 catsss.da.ru

              127.0.0.1 caxa.ru

              127.0.0.1 cc.panet.org

              127.0.0.1 ccecaedbebfcaf.com

              127.0.0.1 www.ccecaedbebfcaf.com

              127.0.0.1 cclebali.org

              127.0.0.1 ceewawires.org

              127.0.0.1 certumgroup.com

              127.0.0.1 chelancatering.com

              127.0.0.1 childrenvilla.com

              127.0.0.1 chips-4-free.com

              127.0.0.1 chrisswasey.com

              127.0.0.1 chriswallace.net

              127.0.0.1 ckick4thumbs.com

              127.0.0.1 clackamasliteraryreview.com

              127.0.0.1 clearsearch.cc

              127.0.0.1 clearsearch.net

              127.0.0.1 clickaire.com

              127.0.0.1 click-now.net

              127.0.0.1 clickyestoenter.net

              127.0.0.1 clrsch.com

              127.0.0.1 cmtapestry.com

              127.0.0.1 coolfetishsite.com

              127.0.0.1 coolfreehost.com

              127.0.0.1 coolfreepage.com

              127.0.0.1 coolfreepages.com

              127.0.0.1 cool-homepage.co

              127.0.0.1 cool-homepage.com

              127.0.0.1 coolmoneysearch.com

              127.0.0.1 coolpornsearch.com

              127.0.0.1 cool-search.net

              127.0.0.1 cool-search.netfartpost.com

              127.0.0.1 coolsearcher.info

              127.0.0.1 coolservecorp.net

              127.0.0.1 www.coolservecorp.net

              127.0.0.1 coolwebsearch.com

              127.0.0.1 www.coolwebsearch.com

              127.0.0.1 cool-web-search.com

              127.0.0.1 coolwebsearsh.com

              127.0.0.1 coolwwwsearch.com

              127.0.0.1 www.coolwwwsearch.com

              127.0.0.1 copmtraine.com

              127.0.0.1 couldnotfind.com

              127.0.0.1 count.cc

              127.0.0.1 count-all.com

              127.0.0.1 cracks.me.uk

              127.0.0.1 creamedcutties.com

              127.0.0.1 creditsearchonline.com

              127.0.0.1 crestring.com

              127.0.0.1 crooder.com

              127.0.0.1 curvedspaces.com

              127.0.0.1 cvs.jps.ru

              127.0.0.1 cvsymphony.com

              127.0.0.1 cydom.com

              127.0.0.1 daily-gals.com

              127.0.0.1 dancingbabycd.com

              127.0.0.1 datanotary.com

              127.0.0.1 datareco.com

              127.0.0.1 davemarshall.org

              127.0.0.1 db105.com

              127.0.0.1 dcfitusa.com

              127.0.0.1 defaultsearch.net

              127.0.0.1 derklaif.biz

              127.0.0.1 www.derklaif.biz

              127.0.0.1 desarrollocreativo.com

              127.0.0.1 dev.ntcor.com

              127.0.0.1 develip.com

              127.0.0.1 dewis.spb.ru

              127.0.0.1 dewis.us

              127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz

              127.0.0.1 dietpills4free.com

              127.0.0.1 dietpussy.com

              127.0.0.1 digistreamsa.com

              127.0.0.1 dionforvalleycouncil.org

              127.0.0.1 dnl.mabou.org

              127.0.0.1 doctorwaldron.com

              127.0.0.1 document-not-found.pornpic.org

              127.0.0.1 doggyaction.com

              127.0.0.1 domains2003.net

              127.0.0.1 domains-for-you-online.com

              127.0.0.1 domain-your-registration.com

              127.0.0.1 domkrat.com

              127.0.0.1 download.secureyournet.biz

              127.0.0.1 www.download.secureyournet.biz

              127.0.0.1 dp-host.com

              127.0.0.1 dragqueen.gay-clan.com

              127.0.0.1 drug-sources-exposed.com

              127.0.0.1 drvvv.com

              127.0.0.1 dulcineasystems.net

              127.0.0.1 dutch-sex.com

              127.0.0.1 dvdbank.org

              127.0.0.1 eases.net

              127.0.0.1 easyantispy.com

              127.0.0.1 easycategories.com

              127.0.0.1 easy-search.net

              127.0.0.1 easysearchingtips.com

              127.0.0.1 ecosrioplatenses.org

              127.0.0.1 ecstasyporn.net

              127.0.0.1 eikokoike.com

              127.0.0.1 e-localad.com

              127.0.0.1 enjoywebsurf.com

              127.0.0.1 e-plus.cc

              127.0.0.1 epornsex.com

              127.0.0.1 euuu.com

              127.0.0.1 evidence-detector.biz

              127.0.0.1 evilspidercomics.com

              127.0.0.1 evko.biz

              127.0.0.1 www.evko.biz

              127.0.0.1 ewebsearch.net

              127.0.0.1 e-websitesolutions.com

              127.0.0.1 ewizard.cc

              127.0.0.1 exaccess.ru

              127.0.0.1 www.exaccess.ru

              127.0.0.1 excellentsckin.com

              127.0.0.1 extremeseek.net

              127.0.0.1 faithstevens.com

              127.0.0.1 fantasiewelten.com

              127.0.0.1 farmsteadbandb.com

              127.0.0.1 fartpost.com

              127.0.0.1 fastwebfinder.com

              127.0.0.1 faxporn.com

              127.0.0.1 fhg.panet.org

              127.0.0.1 finance-loans.com

              127.0.0.1 find4u.net

              127.0.0.1 find-itnow.com

              127.0.0.1 findit-now.com

              127.0.0.1 findloss.com

              127.0.0.1 findthesite.com

              127.0.0.1 find-uk-health.co.uk

              127.0.0.1 fine-search.net

              127.0.0.1 fionasteel.com

              127.0.0.1 firstbookmark.net

              127.0.0.1 fitness-free.com

              127.0.0.1 foodvacations.net

              127.0.0.1 forex.jps.ru

              127.0.0.1 forexcredit.com

              127.0.0.1 forexcredit.ru

              127.0.0.1 formingfusions.com

              127.0.0.1 forsythfire.net

              127.0.0.1 forthline.com

              127.0.0.1 free4porno.net

              127.0.0.1 free64all.com

              127.0.0.1 freebookmark.net

              127.0.0.1 freebookmarks.net

              127.0.0.1 freecategories.com

              127.0.0.1 free-chipes.com

              127.0.0.1 freecoolhost.com

              127.0.0.1 free-hit.com

              127.0.0.1 free-pics-and-movies.com

              127.0.0.1 freerbhost.com

              127.0.0.1 free-sex-movie-clips.net

              127.0.0.1 freeshemalepics.net

              127.0.0.1 freeyaho.com

              127.0.0.1 freshseek.com

              127.0.0.1 freshteensite.com

              127.0.0.1 full-search.net

              127.0.0.1 funny-girls.com

              127.0.0.1 ga31.com

              127.0.0.1 gabrielscott.com

              127.0.0.1 galpostgirls.com

              127.0.0.1 gals-for-free.com

              127.0.0.1 gambling-online4you.com

              127.0.0.1 gameterror.net

              127.0.0.1 gay50.com

              127.0.0.1 gay-clan.com

              127.0.0.1 generalsmeltingofcanada.com

              127.0.0.1 geteens.com

              127.0.0.1 getpicshere.com

              127.0.0.1 gimmezamore.com

              127.0.0.1 gimnasiaer.com

              127.0.0.1 girls4rent.net

              127.0.0.1 girls-porn-life.com

              127.0.0.1 glbdf.org

              127.0.0.1 global-finder.com

              127.0.0.1 globe-finder.cc

              127.0.0.1 globe-finder.com

              127.0.0.1 globesearch.com

              127.0.0.1 www.globesearch.com

              127.0.0.1 go2-search.com

              127.0.0.1 gocybersearch.com

              127.0.0.1 golftennis.net

              127.0.0.1 good-mortgages.net

              127.0.0.1 good-mortgages-calculator.com

              127.0.0.1 goodsexs.com

              127.0.0.1 google.panet.org

              127.0.0.1 googlebar.jps.ru

              127.0.0.1 googlf.com

              127.0.0.1 gradforum.org

              127.0.0.1 gratisdownloads.nl

              127.0.0.1 gratis-porn-movie.com

              127.0.0.1 gratis-pornopics.com

              127.0.0.1 guzzycats.com

              127.0.0.1 gzphoenix.com

              127.0.0.1 hallnetaccolade.com

              127.0.0.1 hand-book.com

              127.0.0.1 happyanal.com

              127.0.0.1 hardbodytgp.com

              127.0.0.1 hardcoreover.com

              127.0.0.1 hard-gals.com

              127.0.0.1 hardloved.com

              127.0.0.1 hardwareseek.net

              127.0.0.1 harukaigawa.com

              127.0.0.1 havy.biz

              127.0.0.1 hccsolanonapa.org

              127.0.0.1 health-protein.com

              127.0.0.1 hentai4u.net

              127.0.0.1 here4search.com

              127.0.0.1 heyrichy.com

              127.0.0.1 hi.studioaperto.net

              127.0.0.1 www.hi.studioaperto.net

              127.0.0.1 hiddenguides.com

              127.0.0.1 himen.biz

              127.0.0.1 hi-search.com

              127.0.0.1 hitlistlyrics.com

              127.0.0.1 holidayautostr.com

              127.0.0.1 homemortage.ws

              127.0.0.1 hostssp.com

              127.0.0.1 hotbookmark.com

              127.0.0.1 hot-cartoon-sex.anime.american-teens.net

              127.0.0.1 hotels-list.net

              127.0.0.1 hotelxxxcams.com

              127.0.0.1 hotfreebies.com

              127.0.0.1 www.hotfreebies.com

              127.0.0.1 hotpopup.com

              127.0.0.1 hotsearchbox.com

              127.0.0.1 hotsex-series.com

              127.0.0.1 hotstartpage.com

              127.0.0.1 hqsex.biz

              127.0.0.1 hugeporn4u.net

              127.0.0.1 hunacsa.com

              127.0.0.1 hupacasath.com

              127.0.0.1 hzsx.com

              127.0.0.1 icansearch.net

              127.0.0.1 iefeadsl.com

              127.0.0.1 ie-search.com

              127.0.0.1 incestporngate.com

              127.0.0.1 infodigger.net

              127.0.0.1 infoglobus.com

              127.0.0.1 inherhole.com

              127.0.0.1 insertthiscock.com

              127.0.0.1 insuranceall.net

              127.0.0.1 insurance-flood.net

              127.0.0.1 internetsearch.ru

              127.0.0.1 ionichost.com

              127.0.0.1 ionomist.com

              127.0.0.1 ipsex.net

              127.0.0.1 itsanal.com

              127.0.0.1 itseasy.us

              127.0.0.1 iweb-commerce.com

              127.0.0.1 iwebland.com

              127.0.0.1 jeannineoldfield.com

              127.0.0.1 jetseeker.com

              127.0.0.1 jmhgallery.org

              127.0.0.1 joannelatham.com

              127.0.0.1 jps.ru

              127.0.0.1 judin.ru

              127.0.0.1 junkysex.com

              127.0.0.1 karleyt.narod.ru

              127.0.0.1 kathisomers.com

              127.0.0.1 kazaa-lite.ws

              127.0.0.1 keithgreenpro.com

              127.0.0.1 kenmccaul.com

              127.0.0.1 kilosex.com

              127.0.0.1 kimhines.com

              127.0.0.1 kinoru.com

              127.0.0.1 ksdspups.org

              127.0.0.1 landrape.com

              127.0.0.1 lauraroebuck.com

              127.0.0.1 lavasoftupdate.com

              127.0.0.1 www.lavasoftupdate.com

              127.0.0.1 leannalovelace.com

              127.0.0.1 lesobank.ru

              127.0.0.1 libertyonlinehosting.com

              127.0.0.1 lingerie-mania.com

              127.0.0.1 lisamatthew.com

              127.0.0.1 livegambling.com

              127.0.0.1 liveholio.com

              127.0.0.1 livenewspaper.com

              127.0.0.1 lookfor.cc

              127.0.0.1 looking-for.cc

              127.0.0.1 louiseleeds.com

              127.0.0.1 lovelas.com

              127.0.0.1 lovelysearch.com

              127.0.0.1 love-pix.com

              127.0.0.1 low-taxes.com

              127.0.0.1 luckysearch.net

              127.0.0.1 lunitaweb.net

              127.0.0.1 lustful-porno.com

              127.0.0.1 mabou.org

              127.0.0.1 www.mabou.org

              127.0.0.1 mackinnonsbrook.org

              127.0.0.1 madfinder.com

              127.0.0.1 madisonmoons.com

              127.0.0.1 madisonoilco.com

              127.0.0.1 madonalive.com

              127.0.0.1 majuozawa.com

              127.0.0.1 makin-do.com

              127.0.0.1 male4free.com

              127.0.0.1 map-quest.org

              127.0.0.1 marilynchamber.com

              127.0.0.1 martfinder.com

              127.0.0.1 massearch.com

              127.0.0.1 matetrava.com

              127.0.0.1 mature50.com

              127.0.0.1 matureporngate.com

              127.0.0.1 maxdzines.com

              127.0.0.1 mcgeeforlabor.com

              127.0.0.1 mdstunisie.org

              127.0.0.1 medicare-insurance.net

              127.0.0.1 medicare-supplemental.com

              127.0.0.1 mega-dating-tips.com

              127.0.0.1 megumikanzaki.com

              127.0.0.1 meshalynn.com

              127.0.0.1 meta-adult.com

              127.0.0.1 meta-casino.com

              127.0.0.1 metafora.ru

              127.0.0.1 meta-mobile.com

              127.0.0.1 metapoisk.ru

              127.0.0.1 meta-porn.com

              127.0.0.1 michiyonakajima.com

              127.0.0.1 miconsultamedica.com

              127.0.0.1 mikasakamoto.com

              127.0.0.1 mikoni.com

              127.0.0.1 militarygods.porn4porn.net

              127.0.0.1 millennialpeople.org

              127.0.0.1 mipham.org

              127.0.0.1 missingcommand.com

              127.0.0.1 mommykiss.com

              127.0.0.1 moneyhunters.com

              127.0.0.1 montgomeryhospitalanesthesia.com

              127.0.0.1 morflot.com

              127.0.0.1 mortgage-debt.net

              127.0.0.1 mortismaximus.com

              127.0.0.1 moscowwhores.com

              127.0.0.1 moviecategories.com

              127.0.0.1 mp3-pix.com

              127.0.0.1 mpeg-look.com

              127.0.0.1 mrtg.jps.ru

              127.0.0.1 msnguard.cc

              127.0.0.1 msn-info.net

              127.0.0.1 multipussy.com

              127.0.0.1 mundopolar.com

              127.0.0.1 mustv.com

              127.0.0.1 mywebsearch.net

              127.0.0.1 nativehardcore.com

              127.0.0.1 naturalspy.com

              127.0.0.1 nav.mabou.org

              127.0.0.1 nbasportsbook.net

              127.0.0.1 nellyslyrics.com

              127.0.0.1 nepgyan.com

              127.0.0.1 nesrecords.com

              127.0.0.1 net.mabou.org

              127.0.0.1 net.xibu315.com

              127.0.0.1 netfartpost.com

              127.0.0.1 netshastra.net

              127.0.0.1 nettime.ru

              127.0.0.1 nettracker.jps.ru

              127.0.0.1 netyellowpages.info

              127.0.0.1 nevest.net

              127.0.0.1 newcategories.com

              127.0.0.1 newcracks.com

              127.0.0.1 newcracks.net

              127.0.0.1 new-incest.com

              127.0.0.1 newlife-lajolla.com

              127.0.0.1 new-search.net

              127.0.0.1 newsexgate.com

              127.0.0.1 newtonsracks.com

              127.0.0.1 newxpics.com

              127.0.0.1 nhlsportsbook.net

              127.0.0.1 niagaracapital.com

              127.0.0.1 niche-tv.com

              127.0.0.1 nmrba.com

              127.0.0.1 noblindlinks.com

              127.0.0.1 www.noblindlinks.com

              127.0.0.1 nocalories.net

              127.0.0.1 nocensor.com

              127.0.0.1 noproblemsurf.com

              127.0.0.1 nsbabes.com

              127.0.0.1 ntcor.com

              127.0.0.1 www.ntcor.com

              127.0.0.1 nuclearwitness.org

              127.0.0.1 n-udd.com

              127.0.0.1 nursemania.com

              127.0.0.1 nvntour.com

              127.0.0.1 nvphall.org

              127.0.0.1 oborot.com

              127.0.0.1 ocalalivestockmarket.com

              127.0.0.1 ocsff.com

              127.0.0.1 oeatlanta.com

              127.0.0.1 oharrowsearch.com

              127.0.0.1 ok-search.com

              127.0.0.1 okulta.com

              127.0.0.1 omegabrains.net

              127.0.0.1 onemoresearch.net

              127.0.0.1 online-casino-1.net

              127.0.0.1 online-casino-bonus.info

              127.0.0.1 online-casinos-x.com

              127.0.0.1 onlineserverz.com

              127.0.0.1 onlinetradings.net

              127.0.0.1 online-winning.net

              127.0.0.1 onlycunt.com

              127.0.0.1 onlyinsured.com

              127.0.0.1 operanabuco.com

              127.0.0.1 opsex.com

              127.0.0.1 oregoncharters.org

              127.0.0.1 ormandcompany.com

              127.0.0.1 otrlives.com

              127.0.0.1 ozawamadoka.com

              127.0.0.1 paigesummer.com

              127.0.0.1 pamelacollections.com

              127.0.0.1 panamcup.com

              127.0.0.1 panet.org

              127.0.0.1 www.panet.org

              127.0.0.1 pantygirls4u.com

              127.0.0.1 pantyhoserealm.com

              127.0.0.1 pantyplace.com

              127.0.0.1 pastubes.com

              127.0.0.1 paulapage.com

              127.0.0.1 paulhoover.com

              127.0.0.1 payfortraffic.net

              127.0.0.1 pcspyremover.com

              127.0.0.1 pedo.ws

              127.0.0.1 people.1gb.ru

              127.0.0.1 pervertbot.com

              127.0.0.1 pharmacy2003.com

              127.0.0.1 pharma-diet-pills.com

              127.0.0.1 pharmalocator.com

              127.0.0.1 phendimetrazine-tenuate-adipex.com

              127.0.0.1 picsdir.com

              127.0.0.1 picsforbucks.com

              127.0.0.1 picsofseductiveladies.com

              127.0.0.1 pics-videos.com

              127.0.0.1 picture-posters.com

              127.0.0.1 pills-birth-control.com

              127.0.0.1 pillsmall.com

              127.0.0.1 pilotronix.com

              127.0.0.1 pixpox.com

              127.0.0.1 planemusic.com

              127.0.0.1 poiska.net

              127.0.0.1 poker-casino-free.com

              127.0.0.1 poker-games-free.net

              127.0.0.1 polradiologia.com

              127.0.0.1 pooi.net

              127.0.0.1 porn4porn.net

              127.0.0.1 porncamz.com

              127.0.0.1 pornfree.info

              127.0.0.1 pornnightdreams.com

              127.0.0.1 pornokopec.com

              127.0.0.1 pornpic.org

              127.0.0.1 porn-screen.com

              127.0.0.1 porn-teacher.com

              127.0.0.1 porntetris.com

              127.0.0.1 porntwist.com

              127.0.0.1 powerwebsearch.com

              127.0.0.1 prblitz.com

              127.0.0.1 pretypics.com

              127.0.0.1 pribalt.com

              127.0.0.1 privacy-support.biz

              127.0.0.1 privateporn.net

              127.0.0.1 prosearching.com

              127.0.0.1 www.prosearching.com

              127.0.0.1 prostactive.com

              127.0.0.1 prostol.com

              127.0.0.1 protect-yourself.biz

              127.0.0.1 prsainlandempire.org

              127.0.0.1 psn.cn

              127.0.0.1 put-your-link-here.com

              127.0.0.1 p-uud.com

              127.0.0.1 pyrocorp.com

              127.0.0.1 quick-search.ws

              127.0.0.1 quiksearchgenealogy.com

              127.0.0.1 r16254.coolservecorp.net

              127.0.0.1 rack.cc

              127.0.0.1 radfrall.org

              127.0.0.1 ramgo.com

              127.0.0.1 ranafrog.ne

              127.0.0.1 rapegate.com

              127.0.0.1 rb37.com

              127.0.0.1 redbudbmx.com

              127.0.0.1 refinance-help.com

              127.0.0.1 removeearthkeepers.org

              127.0.0.1 rf104.com

              127.0.0.1 rightfinder.net

              127.0.0.1 robbsproshop.com

              127.0.0.1 robertferencz.com

              127.0.0.1 rotocasters.com

              127.0.0.1 royalsearch.net

              127.0.0.1 runsearch.com

              127.0.0.1 russiansponsor.com

              127.0.0.1 russogay.com

              127.0.0.1 s2.exocrew.com

              127.0.0.1 sacitylife.com

              127.0.0.1 samplegals.com

              127.0.0.1 sbssurvivor.com

              127.0.0.1 scarypix.com

              127.0.0.1 sccdnet.com

              127.0.0.1 schoolforest.com

              127.0.0.1 search.psn.cn

              127.0.0.1 search.xrenoder.com

              127.0.0.1 search-1.net

              127.0.0.1 search-2003.com

              127.0.0.1 search-777.com

              127.0.0.1 search-about.net

              127.0.0.1 searchadultweb.com

              127.0.0.1 searchbutler.com

              127.0.0.1 searchbutler.org

              127.0.0.1 searchbuttler.com

              127.0.0.1 searchclick.cc

              127.0.0.1 searchcomplete.com

              127.0.0.1 searchdesire.com

              127.0.0.1 searchdot.net

              127.0.0.1 searchexpander.com

              127.0.0.1 searchfastnet.com

              127.0.0.1 searchforge.com

              127.0.0.1 search-hawk.com

              127.0.0.1 searching-the-net.com

              127.0.0.1 search-log.com

              127.0.0.1 search-meta.com

              127.0.0.1 searchmeta.md

              127.0.0.1 searchmeta.net

              127.0.0.1 www.searchmeta.net

              127.0.0.1 searchmeta.ru

              127.0.0.1 searchmeta.webhost.ru

              127.0.0.1 search-motor.com

              127.0.0.1 searchnow.ws

              127.0.0.1 searchonfly.com

              127.0.0.1 search-safe.com

              127.0.0.1 search-to-find.com

              127.0.0.1 SEARCHTOFIND.NET

              127.0.0.1 www.SEARCHTOFIND.NET

              127.0.0.1 search-what.net

              127.0.0.1 searchwhatuwant.com

              127.0.0.1 searchxp.com

              127.0.0.1 sebot.com

              127.0.0.1 securenp.org

              127.0.0.1 secureyournet.biz

              127.0.0.1 www.secureyournet.biz

              127.0.0.1 security-warning.biz

              127.0.0.1 seehardcore.com

              127.0.0.1 seekwell.net

              127.0.0.1 selfbookmark.com

              127.0.0.1 selfbookmark.info

              127.0.0.1 selfbookmark.net

              127.0.0.1 sex.free4porno.net

              127.0.0.1 sex-coach.com

              127.0.0.1 sex-festival.com

              127.0.0.1 sexgalleries4all.com

              127.0.0.1 sexmoviesnet.com

              127.0.0.1 sexpatriot.net

              127.0.0.1 sexpornonline.com

              127.0.0.1 sex-video-galleries.com

              127.0.0.1 sexy18.cc

              127.0.0.1 sexycat.adult-host.org

              127.0.0.1 sfbayfolkboats.com

              127.0.0.1 sgirls.net

              127.0.0.1 sharempeg.com

              127.0.0.1 shopcards.net

              127.0.0.1 shopknights.com

              127.0.0.1 sic02.com

              127.0.0.1 sintrader.com

              127.0.0.1 site1.ru

              127.0.0.1 sites-in-web.com

              127.0.0.1 sitevictoria.com

              127.0.0.1 sixroads.com

              127.0.0.1 skakalka.ru

              127.0.0.1 slawsearch.com

              127.0.0.1 smartsumo.com

              127.0.0.1 smutarchive.net

              127.0.0.1 solongas.com

              127.0.0.1 sonomaevents.com

              127.0.0.1 spermatrix.com

              127.0.0.1 sportbooks-free4you.com

              127.0.0.1 spros.com

              127.0.0.1 spyass.com

              127.0.0.1 spybotremover.net

              127.0.0.1 spyorgy.net

              127.0.0.1 ss.panet.org

              127.0.0.1 staceyowens.com

              127.0.0.1 stacistaxx.com

              127.0.0.1 stacystaxx.com

              127.0.0.1 start-space.com

              127.0.0.1 steamycock.com

              127.0.0.1 sterva.com

              127.0.0.1 stevecashdollar.com

              127.0.0.1 stop-tracking.biz

              127.0.0.1 stopvotefraud.com

              127.0.0.1 stopxxxpics.com

              127.0.0.1 strekoza.com

              127.0.0.1 studioaperto.net

              127.0.0.1 stuffstore.com

              127.0.0.1 styleclickink.com

              127.0.0.1 summercollins.com

              127.0.0.1 summitcross.com

              127.0.0.1 supersexmachine.com

              127.0.0.1 superwebsearch.com

              127.0.0.1 super-websearch.com

              127.0.0.1 supret.com

              127.0.0.1 suzannebrecht.com

              127.0.0.1 sweeteenz.com

              127.0.0.1 t.rack.cc

              127.0.0.1 t058.com

              127.0.0.1 tacil.org

              127.0.0.1 tangounion.com

              127.0.0.1 tastethemusic.com

              127.0.0.1 tax-refund4you.com

              127.0.0.1 tech-jobs.ws

              127.0.0.1 technology-related.com

              127.0.0.1 teen-biz.com

              127.0.0.1 teen-pic-post.com

              127.0.0.1 teenpornosex.com

              127.0.0.1 teens4free.net

              127.0.0.1 teensact.com

              127.0.0.1 teensgate.com

              127.0.0.1 teensguru.com

              127.0.0.1 teenswamp.com

              127.0.0.1 testosterone-birth-control.com

              127.0.0.1 tgp-4-you.com

              127.0.0.1 the-exit.com

              127.0.0.1 thefakejournal.com

              127.0.0.1 the-huns-yellow-pages.com

              127.0.0.1 thehuy.net

              127.0.0.1 theproxy.org

              127.0.0.1 therealsearch.com

              127.0.0.1 thesten.com

              127.0.0.1 thornleygroup.com

              127.0.0.1 tings.org

              127.0.0.1 tinybar.com

              127.0.0.1 titanvision.com

              127.0.0.1 titsianna.com

              127.0.0.1 tit-x.com

              127.0.0.1 toddhayes.com

              127.0.0.1 toolbar.cc

              127.0.0.1 toolbarbucks.biz

              127.0.0.1 www.toolbarbucks.biz

              127.0.0.1 toon-comics.com

              127.0.0.1 topx.cc

              127.0.0.1 trackhits.cc

              127.0.0.1 tracktraff.cc

              127.0.0.1 traff5all.biz

              127.0.0.1 www.traff5all.biz

              127.0.0.1 trafficback.com

              127.0.0.1 trafficswitcher.com

              127.0.0.1 travel.picture-posters.com

              127.0.0.1 true-counter.com

              127.0.0.1 www.true-counter.com

              127.0.0.1 true-portal.com

              127.0.0.1 trytechnical.com

              127.0.0.1 u-239.com

              127.0.0.1 u45.cx

              127.0.0.1 u46.cx

              127.0.0.1 u47.cc

              127.0.0.1 u48.cc

              127.0.0.1 ufindall.click-now.net

              127.0.0.1 umaxsearch.com

              127.0.0.1 une-autre-france.com

              127.0.0.1 unigays.com

              127.0.0.1 unipages.cc

              127.0.0.1 up2you.ru

              127.0.0.1 uralitel.ru

              127.0.0.1 urlstat.com

              127.0.0.1 urlstat.ru

              127.0.0.1 ursie.net

              127.0.0.1 usefullsoft.net

              127.0.0.1 utahsweet.com

              127.0.0.1 utopicportal.com

              127.0.0.1 uusocialjustice.org

              127.0.0.1 uydsiygeds.com

              127.0.0.1 www.uydsiygeds.com

              127.0.0.1 v-224.com

              127.0.0.1 v61.com

              127.0.0.1 www.v61.com

              127.0.0.1 vaginpics.com

              127.0.0.1 valmyers.com

              127.0.0.1 vegas-free.com

              127.0.0.1 vegbuy.com

              127.0.0.1 veloventures.com

              127.0.0.1 veryeasysearch.com

              127.0.0.1 verzila.com

              127.0.0.1 victoriaadam.com

              127.0.0.1 videocategories.com

              127.0.0.1 vipru.com

              127.0.0.1 www.vipru.com

              127.0.0.1 vitamins-for-each.com

              127.0.0.1 votehowe.org

              127.0.0.1 vxebony.com

              127.0.0.1 wakeupdick.com

              127.0.0.1 warnomore.org

              127.0.0.1 watersport-specialties.com

              127.0.0.1 webcoolsearch.com

              127.0.0.1 web-homepage.net

              127.0.0.1 web-search.tk

              127.0.0.1 websearchdot.com

              127.0.0.1 weekend-movies.com

              127.0.0.1 wetpornostars.com

              127.0.0.1 whatsyoursearch.com

              127.0.0.1 white-pages.ws

              127.0.0.1 whittierblvd.com

              127.0.0.1 win-in-casino.com

              127.0.0.1 winmsn.com

              127.0.0.1 winprotect.net

              127.0.0.1 winshow.biz

              127.0.0.1 wiresearch.com

              127.0.0.1 wolfpacracing.com

              127.0.0.1 wordlist.jps.ru

              127.0.0.1 wpc2001.org

              127.0.0.1 wspzone.sexpornonline.com

              127.0.0.1 wwwbet.net

              127.0.0.1 wwwbetting.net

              127.0.0.1 wwwpokergames.com

              127.0.0.1 wwwpokerplayers.com

              127.0.0.1 wwwroulette.net

              127.0.0.1 xcomics4u.com

              127.0.0.1 x-google.net

              127.0.0.1 www.xibu315.com

              127.0.0.1 xibu315.com

              127.0.0.1 xic-bs.com

              127.0.0.1 xldr.com

              127.0.0.1 x-library.com

              127.0.0.1 xp18.com

              127.0.0.1 www.xrenoder.com

              127.0.0.1 xrenoder.com

              127.0.0.1 xrenosearch.com

              127.0.0.1 xtragay.com

              127.0.0.1 xu.pl

              127.0.0.1 xu.xu.pl

              127.0.0.1 x-webdesign.com

              127.0.0.1 www.xwebsearch.biz

              127.0.0.1 xwebsearch.biz

              127.0.0.1 xxxcategories.com

              127.0.0.1 xxxemailxxx.com

              127.0.0.1 yahoo.panet.org

              127.0.0.1 y-e-l-l-o-w.com

              127.0.0.1 yellow500.com

              127.0.0.1 yezol.com

              127.0.0.1 youfindall.com

              127.0.0.1 youfindall.net

              127.0.0.1 yourbookmarks.info

              127.0.0.1 yourbookmarks.ws

              127.0.0.1 your-prescriptions.net

              127.0.0.1 you-search.com.ru

              127.0.0.1 you-search.com

              127.0.0.1 ypir.com

              127.0.0.1 ysa-info.net

              127.0.0.1 yukohamano.com

              127.0.0.1 ywebsearch.info

              127.0.0.1 zapros.com

              127.0.0.1 www.zelaznyworld.com

              127.0.0.1 zelaznyworld.com

              127.0.0.1 zesearch.com

              127.0.0.1 ziportal.com

              127.0.0.1 zipportal.com

              127.0.0.1 www.znext.com

              127.0.0.1 znext.com

              127.0.0.1 zoneoffreeporn.com

              127.0.0.1 zoomegasite.com

              127.0.0.1 zvimigdal.com

              127.0.0.1 zyban-zocor-levitra.com

              127.0.0.1 idgsearch.com

              127.0.0.1 cameup.com

              127.0.0.1 kliksearch.com

              127.0.0.1 searchmeup.com

              127.0.0.1 msupdate.net

              127.0.0.1 www.msupdate.net

              127.0.0.1 redirect.msupdate.net

              127.0.0.1 omega-search.com

              127.0.0.1 adaware.cc

              127.0.0.1 ad-ware.cc

              127.0.0.1 count.hitscount.net

              127.0.0.1 dl.ad-ware.cc

              127.0.0.1 downloads.adaware.cc

              127.0.0.1 fined.biz

              127.0.0.1 hitscount.net

              127.0.0.1 magicsearch.ws

              127.0.0.1 www.magicsearch.ws

              127.0.0.1 aulde.net

              127.0.0.1 www.aulde.net

              127.0.0.1 searchdrive.info

              127.0.0.1 wwwsearchdrive.info

              127.0.0.1 tooncomics.com

              127.0.0.1 hervam.com

              127.0.0.1 www.hervam.com

              127.0.0.1 komforochka.info

              127.0.0.1 www.komforochka.info

              127.0.0.1 nunah.info

              127.0.0.1 www.nunah.info

              127.0.0.1 vother.info

              127.0.0.1 www.vother.info

              127.0.0.1 wm.komforochka.info

              127.0.0.1 www.wm.komforochka.info

              127.0.0.1 wm.vother.info

              127.0.0.1 www.wm.vother.info

              127.0.0.1 cool-xxx.net

              127.0.0.1 www.cantfind.com

              127.0.0.1 crazywinnings.com

              127.0.0.1 www.crazywinnings.com

              127.0.0.1 frame.crazywinnings.com

              127.0.0.1 topconverting.com

              127.0.0.1 www.topconverting.com

              127.0.0.1 crystalysmedia.com

              127.0.0.1 www.crystalysmedia.com

              127.0.0.1 curepcsolutions.com

              127.0.0.1 www.curepcsolutions.com

              127.0.0.1 pcflashsoft.com

              127.0.0.1 www.pcflashsoft.com

              127.0.0.1 spylog.com

              127.0.0.1 www.spylog.com

              127.0.0.1 game4all.biz

              127.0.0.1 www.game4all.biz

              127.0.0.1 canidetect.org

              127.0.0.1 www.canidetect.org

              127.0.0.1 ebestfind.org

              127.0.0.1 www.ebestfind.org

              127.0.0.1 findanyshow.org

              127.0.0.1 www.findanyshow.org

              127.0.0.1 findwapsite.org

              127.0.0.1 www.findwapsite.org

              127.0.0.1 itfindout.org

              127.0.0.1 www.itfindout.org

              127.0.0.1 nowsearchonline.org

              127.0.0.1 www.nowsearchonline.org

              127.0.0.1 asianpornmag.com

              127.0.0.1 www.asianpornmag.com

              127.0.0.1 ebony-pornmag.com

              127.0.0.1 www.ebony-pornmag.com

              127.0.0.1 lesbianspornmag.com

              127.0.0.1 www.lesbianspornmag.com

              127.0.0.1 nylonpornmag.com

              127.0.0.1 www.nylonpornmag.com

              127.0.0.1 shemalespornmag.com

              127.0.0.1 www.shemalespornmag.com

              127.0.0.1 asiantoolbar.com

              127.0.0.1 www.asiantoolbar.com

              127.0.0.1 dailytoolbar.com

              127.0.0.1 www.dailytoolbar.com

              127.0.0.1 maturetoolbar.com

              127.0.0.1 www.maturetoolbar.com

              127.0.0.1 revolto3.da.ru

              127.0.0.1 dating-search.net

              127.0.0.1 andromedical.com

              127.0.0.1 www.andromedical.com

              127.0.0.1 deskbar.worldtostart.com

              127.0.0.1 www.deskbar.worldtostart.com

              127.0.0.1 worldtostart.com

              127.0.0.1 www.worldtostart.com

              127.0.0.1 dialer-shop.com

              127.0.0.1 www.dialer-shop.com

              127.0.0.1 dialoff.com

              127.0.0.1 www.dialoff.com

              127.0.0.1 5starvideos.com

              127.0.0.1 www.5starvideos.com

              127.0.0.1 digikeygen.com

              127.0.0.1 www.digikeygen.com

              127.0.0.1 moviereality.com

              127.0.0.1 www.moviereality.com

              127.0.0.1 securityindex.net

              127.0.0.1 www.securityindex.net

              127.0.0.1 sexpicsporn.com

              127.0.0.1 www.sexpicsporn.com

              127.0.0.1 dcdl.dmcast.com

              127.0.0.1 dcww.dmcast.com

              127.0.0.1 dmcast.com

              127.0.0.1 www.dmcast.com

              127.0.0.1 dudu.com

              127.0.0.1 www.dudu.com

              127.0.0.1 ibm.dmcast.com

              127.0.0.1 ulink13.dudu.com

              127.0.0.1 ulink7.dudu.com

              127.0.0.1 wazzupnet.com

              127.0.0.1 www.wazzupnet.com

              127.0.0.1 dotcomtoolbar.com

              127.0.0.1 www.dotcomtoolbar.com

              127.0.0.1 easywww.info

              127.0.0.1 www.easywww.info

              127.0.0.1 search.findthewebsiteyouneed.com

              127.0.0.1 www.search.findthewebsiteyouneed.com

              127.0.0.1 linksummary.com

              127.0.0.1 downloadmax.net

              127.0.0.1 www.downloadmax.net

              127.0.0.1 flrxtools.greatnuke.com

              127.0.0.1 flrx-tools.net

              127.0.0.1 www.flrx-tools.net

              127.0.0.1 de.drivecleaner.com

              127.0.0.1 fr.drivecleaner.com

              127.0.0.1 www.fr.drivecleaner.com

              127.0.0.1 gomyron.com

              127.0.0.1 www.gomyron.com

              127.0.0.1 helpyourpcnow.com

              127.0.0.1 www.helpyourpcnow.com

              127.0.0.1 best-targeted-traffic.com

              127.0.0.1 www.best-targeted-traffic.com

              127.0.0.1 www.xsec.org

              127.0.0.1 xsec.org

              127.0.0.1 wanfuchina.com

              127.0.0.1 www.wanfuchina.com

              127.0.0.1 www.zxlinks.com

              127.0.0.1 zxlinks.com

              127.0.0.1 duolaimi.net

              127.0.0.1 cdn.movies-etc.com

              127.0.0.1 cdn2.movies-etc.com

              127.0.0.1 internet-optimizer.com

              127.0.0.1 www.internet-optimizer.com

              127.0.0.1 movies-etc.com

              127.0.0.1 www.yoogee.com

              127.0.0.1 yoogee.com

              127.0.0.1 de.ag

              127.0.0.1 games.de.ag

              127.0.0.1 www.games.de.ag

              127.0.0.1 little-download.net

              127.0.0.1 www.little-download.net

              127.0.0.1 little-help.com

              127.0.0.1 www.little-help.com

              127.0.0.1 toolbarbest.biz

              127.0.0.1 www.toolbarbest.biz

              127.0.0.1 1800searchonline.com

              127.0.0.1 www.1800searchonline.com

              127.0.0.1 1stsearchportal.com

              127.0.0.1 www.1stsearchportal.com

              127.0.0.1 24-7searching-and-more.com

              127.0.0.1 www.24-7searching-and-more.com

              127.0.0.1 971searchbox.com

              127.0.0.1 www.971searchbox.com

              127.0.0.1 aaawebfinder.com

              127.0.0.1 www.aaawebfinder.com

              127.0.0.1 adshttp.com

              127.0.0.1 www.adshttp.com

              127.0.0.1 adsonwww.com

              127.0.0.1 www.adsonwww.com

              127.0.0.1 ampmsearch.com

              127.0.0.1 www.ampmsearch.com

              127.0.0.1 clickhere4search.com

              127.0.0.1 www.clickhere4search.com

              127.0.0.1 clicktomakeasearch.com

              127.0.0.1 www.clicktomakeasearch.com

              127.0.0.1 directsearchzone.com

              127.0.0.1 www.directsearchzone.com

              127.0.0.1 dnaads.com

              127.0.0.1 www.dnaads.com

              127.0.0.1 easysearch4you.com

              127.0.0.1 www.easysearch4you.com

              127.0.0.1 enterthesearch.com

              127.0.0.1 www.enterthesearch.com

              127.0.0.1 esearch2005.com

              127.0.0.1 www.esearch2005.com

              127.0.0.1 eza1netsearch.com

              127.0.0.1 www.eza1netsearch.com

              127.0.0.1 ezwebsearching.com

              127.0.0.1 www.ezwebsearching.com

              127.0.0.1 globalefinder.com

              127.0.0.1 www.globalefinder.com

              127.0.0.1 go2realsearch.com

              127.0.0.1 www.go2realsearch.com

              127.0.0.1 httpwwwads.com

              127.0.0.1 www.httpwwwads.com

              127.0.0.1 msupdater.net

              127.0.0.1 www.msupdater.net

              127.0.0.1 myseachexplorer.com

              127.0.0.1 www.myseachexplorer.com

              127.0.0.1 quicksearch360.com

              127.0.0.1 www.quicksearch360.com

              127.0.0.1 s1s1s1search.com

              127.0.0.1 www.s1s1s1search.com

              127.0.0.1 search101online.com

              127.0.0.1 www.search101online.com

              127.0.0.1 search123forme.com

              127.0.0.1 www.search123forme.com

              127.0.0.1 search345quest.com

              127.0.0.1 www.search345quest.com

              127.0.0.1 searchmiracle.com

              127.0.0.1 www.searchmiracle.com

              127.0.0.1 searchtheworld4you.com

              127.0.0.1 www.searchtheworld4you.com

              127.0.0.1 searchwebzone.com

              127.0.0.1 www.searchwebzone.com

              127.0.0.1 seektheglobe.com

              127.0.0.1 www.seektheglobe.com

              127.0.0.1 sitesearchcentral.com

              127.0.0.1 www.sitesearchcentral.com

              127.0.0.1 the818search-co.com

              127.0.0.1 www.the818search-co.com

              127.0.0.1 type2find.com

              127.0.0.1 www.type2find.com

              127.0.0.1 www.xosearchox.com

              127.0.0.1 xosearchox.com

              127.0.0.1 www.yoursearchspace.com

              127.0.0.1 yoursearchspace.com

              127.0.0.1 savehits.com

              127.0.0.1 www.savehits.com

              127.0.0.1 energy-factor.com

              127.0.0.1 www.energy-factor.com

              127.0.0.1 errorkiller.com

              127.0.0.1 www.errorkiller.com

              127.0.0.1 bin.errorprotector.com

              127.0.0.1 errorprotector.com

              127.0.0.1 www.errorprotector.com

              127.0.0.1 404dns.com

              127.0.0.1 www.404dns.com

              127.0.0.1 br.errorsafe.com

              127.0.0.1 cdn.errorsafe.com

              127.0.0.1 de.errorsafe.com

              127.0.0.1 download.cdn.errorsafe.com

              127.0.0.1 download.errorsafe.com

              127.0.0.1 errorsafe.com

              127.0.0.1 www.errorsafe.com

              127.0.0.1 errorsdns.com

              127.0.0.1 www.errorsdns.com

              127.0.0.1 go.errorsafe.com

              127.0.0.1 idnserror.com

              127.0.0.1 www.idnserror.com

              127.0.0.1 iednserror.com

              127.0.0.1 www.iednserror.com

              127.0.0.1 iesecurepage.com

              127.0.0.1 www.iesecurepage.com

              127.0.0.1 instlog.errorsafe.com

              127.0.0.1 kb.errorsafe.com

              127.0.0.1 nl.errorsafe.com

              127.0.0.1 se.errorsafe.com

              127.0.0.1 secure.errorsafe.com

              127.0.0.1 utils.errorsafe.com

              127.0.0.1 kr62.com

              127.0.0.1 www.kr62.com

              127.0.0.1 bullseye-network.com

              127.0.0.1 www.bullseye-network.com

              127.0.0.1 offers.bullseye-network.com

              127.0.0.1 www.offers.bullseye-network.com

              127.0.0.1 ezcybersearch.com

              127.0.0.1 www.ezcybersearch.com

              127.0.0.1 www.jethomepage.com

              127.0.0.1 otcmomo.com

              127.0.0.1 ez-searching.com

              127.0.0.1 geil-de.info

              127.0.0.1 www.geil-de.info

              127.0.0.1 souljah.com

              127.0.0.1 www.souljah.com

              127.0.0.1 cameouk.co.uk

              127.0.0.1 www.cameouk.co.uk

              127.0.0.1 floorsovertexas.com

              127.0.0.1 www.floorsovertexas.com

              127.0.0.1 graceinthedesert.org

              127.0.0.1 www.graceinthedesert.org

              127.0.0.1 hiboss.com

              127.0.0.1 www.hiboss.com

              127.0.0.1 northernsoulclub.com

              127.0.0.1 www.northernsoulclub.com

              127.0.0.1 oxfordclockrepairs.co.uk

              127.0.0.1 www.oxfordclockrepairs.co.uk

              127.0.0.1 releaseforlife.com

              127.0.0.1 www.releaseforlife.com

              127.0.0.1 starcleaningservice.com.au

              127.0.0.1 www.starcleaningservice.com.au

              127.0.0.1 airtleworld.com

              127.0.0.1 www.airtleworld.com

              127.0.0.1 domaincar.com

              127.0.0.1 www.domaincar.com

              127.0.0.1 worldray.com

              127.0.0.1 www.worldray.com

              127.0.0.1 www5.worldray.com

              127.0.0.1 www6.worldray.com

              127.0.0.1 lavl-vicky.com

              127.0.0.1 www.lavl-vicky.com

              127.0.0.1 marketing-know-how.com

              127.0.0.1 www.marketing-know-how.com

              127.0.0.1 findthewebsiteyouneed.com

              127.0.0.1 www.findthewebsiteyouneed.com

              127.0.0.1 fixerantispy.com

              127.0.0.1 www.fixerantispy.com

              127.0.0.1 flashdollars.com

              127.0.0.1 www.flashdollars.com

              127.0.0.1 signupprocess.com

              127.0.0.1 www.signupprocess.com

              127.0.0.1 americancarbargains.com

              127.0.0.1 www.americancarbargains.com

              127.0.0.1 dogproblemswebsite.com

              127.0.0.1 www.dogproblemswebsite.com

              127.0.0.1 dvdtocdsite.com

              127.0.0.1 www.dvdtocdsite.com

              127.0.0.1 edietprogram.com

              127.0.0.1 www.edietprogram.com

              127.0.0.1 extremepaidsurveys.com

              127.0.0.1 www.extremepaidsurveys.com

              127.0.0.1 hotmp3music.com

              127.0.0.1 www.hotmp3music.com

              127.0.0.1 sharedgamesite.com

              127.0.0.1 www.sharedgamesite.com

              127.0.0.1 sharedmoviesite.com

              127.0.0.1 www.sharedmoviesite.com

              127.0.0.1 sharedtvsite.com

              127.0.0.1 www.sharedtvsite.com

              127.0.0.1 adwareprotectionsite.com

              127.0.0.1 www.adwareprotectionsite.com

              127.0.0.1 antivirusprotector.com

              127.0.0.1 www.antivirusprotector.com

              127.0.0.1 registrycleanersite.com

              127.0.0.1 www.registrycleanersite.com

              127.0.0.1 spywareremoversite.com

              127.0.0.1 www.spywareremoversite.com

              127.0.0.1 freehqmovies.com

              127.0.0.1 freescratchandwin.com

              127.0.0.1 xzoomy.com

              127.0.0.1 myfuncards.smileycentral.com

              127.0.0.1 www.myfuncards.smileycentral.com

              127.0.0.1 smileycentral.com

              127.0.0.1 findwhatevernow.com

              127.0.0.1 www.findwhatevernow.com

              127.0.0.1 fickenisgeil.de

              127.0.0.1 www.gocybersearch.com

              127.0.0.1 gohip.com

              127.0.0.1 www.gohip.com

              127.0.0.1 goldengr.hypermart.net

              127.0.0.1 antiddos.us

              127.0.0.1 www.antiddos.us

              127.0.0.1 earthllnk.net

              127.0.0.1 www.earthllnk.net

              127.0.0.1 getpatytoday.info

              127.0.0.1 www.getpatytoday.info

              127.0.0.1 my-dedik-one.com

              127.0.0.1 www.my-dedik-one.com

              127.0.0.1 mayancasino.com

              127.0.0.1 hachimitsu-lemon.com

              127.0.0.1 www.hachimitsu-lemon.com

              127.0.0.1 hardcorefantasyland.com

              127.0.0.1 www.hardcorefantasyland.com

              127.0.0.1 hardfootballbabes.com

              127.0.0.1 www.hardfootballbabes.com

              127.0.0.1 www.digitalfan.com

              127.0.0.1 free-popup-killer.com

              127.0.0.1 www.free-popup-killer.com

              127.0.0.1 hastalavista.com

              127.0.0.1 www.hastalavista.com

              127.0.0.1 ibankis.org

              127.0.0.1 www.ibankis.org

              127.0.0.1 get.hitvirus.com

              127.0.0.1 hitvirus.com

              127.0.0.1 www.hitvirus.com

              127.0.0.1 homelandnetwork.COM

              127.0.0.1 www.homelandnetwork.COM

              127.0.0.1 google123.web1000.com

              127.0.0.1 web1000.com

              127.0.0.1 hotbar.com

              127.0.0.1 begin2search.com

              127.0.0.1 www.begin2search.com

              127.0.0.1 mainstreamdollars.com

              127.0.0.1 www.mainstreamdollars.com

              127.0.0.1 huntbar.com

              127.0.0.1 www.huntbar.com

              127.0.0.1 infport.com

              127.0.0.1 www.infport.com

              127.0.0.1 srfgate.com

              127.0.0.1 www.srfgate.com

              127.0.0.1 totalvelocity.com

              127.0.0.1 www.totalvelocity.com

              127.0.0.1 webnetinfo.net

              127.0.0.1 www.webnetinfo.net

              127.0.0.1 imiserver.com

              127.0.0.1 search.imiserver.com

              127.0.0.1 ieplugin.com

              127.0.0.1 search.ieplugin.com

              127.0.0.1 onlinesecurityworld.com

              127.0.0.1 www.onlinesecurityworld.com

              127.0.0.1 smutserver.com

              127.0.0.1 code.ignphrases.com

              127.0.0.1 igetnet.com

              127.0.0.1 www.igetnet.com

              127.0.0.1 ignphrases.com

              127.0.0.1 www.ignphrases.com

              127.0.0.1 i-lookup.com

              127.0.0.1 spidersearch.com

              127.0.0.1 globalwebsearch.com

              127.0.0.1 innovagest2000.com

              127.0.0.1 www.innovagest2000.com

              127.0.0.1 1stantivirus.com

              127.0.0.1 www.1stantivirus.com

              127.0.0.1 alfacleaner.com

              127.0.0.1 www.alfacleaner.com

              127.0.0.1 spydeface.com

              127.0.0.1 www.spydeface.com

              12
              1. Où télécharges-tu tes jeux en flash ? N'y mets plus les pieds et ne télécharge plus rien tout est infecté !

                Continue avec ceci avec Smitfraudfix et Clean

                Redémarre le PC en mode sans échec : tu tapotes sur la touche F8 de ton clavier (ou F5 ) dès le démarrage et tu choisis le mode sans échec)

                - Ouvre le dossier "SmitfraudFix" et double clique sur "Smitfraudfix.cmd", choisit l 'option 2 et tu réponds oui à tout.

                Enregistre le rapport puis Copie/colle le rapport sur le forum

                ET

                Redémarre le PC en mode sans échec : tu tapotes sur la touche F8 de ton clavier (ou F5 ) dès le démarrage et tu choisis le mode sans échec)

                - Ouvre le dossier "SmitfraudFix" et double clique sur "Smitfraudfix.cmd", choisit l 'option 2 et tu réponds oui à tout.

                Enregistre le rapport puis Copie/colle le rapport sur le forum stp.
                1. voici le rapport de Clean

                  05/11/2007 a 10:39:23,78

                  *** Recherche des fichiers dans C:

                  *** Recherche des fichiers dans C:\WINDOWS\

                  *** Recherche des fichiers dans C:\WINDOWS\system32
                  C:\WINDOWS\system32\mcrh.tmp FOUND

                  *** Recherche des fichiers dans C:\Program Files
                  *** Fin du rapport !
                  --------------------------------------------------------------------------------------------------------------------------------------------------------

                  Voici le rapport de SmitFraudfix

                  SmitFraudFix v2.248

                  Rapport fait à 10:44:18,95, 05/11/2007
                  Executé à partir de C:\Documents and Settings\FOUILLAND\Bureau\SmitfraudFix
                  OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                  Le type du système de fichiers est NTFS
                  Fix executé en mode normal

                  »»»»»»»»»»»»»»»»»»»»»»»» Process

                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashServ.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                  C:\Program Files\Bonjour\mDNSResponder.exe
                  C:\Program Files\Microsoft LifeCam\MSCamS32.exe
                  C:\WINDOWS\system32\nvsvc32.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\RunDLL32.exe
                  C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
                  C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
                  C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                  C:\WINDOWS\vVX1000.exe
                  C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                  C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                  C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
                  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                  C:\Program Files\Ensemble clavier et souris sans fil Labtec\MulMouse.exe
                  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                  C:\Program Files\MSN Messenger\usnsvc.exe
                  C:\Program Files\Mozilla Thunderbird\thunderbird.exe
                  C:\Program Files\Opera\Opera.exe
                  C:\WINDOWS\system32\rundll32.exe
                  C:\WINDOWS\system32\cmd.exe

                  »»»»»»»»»»»»»»»»»»»»»»»» hosts

                  Fichier hosts corrompu !

                  127.0.0.1 legal-at-spybot.info
                  127.0.0.1 www.legal-at-spybot.info

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\FOUILLAND

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\FOUILLAND\Application Data

                  »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\FOUILL~1\Favoris

                  »»»»»»»»»»»»»»»»»»»»»»»» Bureau

                  »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                  »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

                  »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

                  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
                  "Source"="About:Home"
                  "SubscribedURL"="About:Home"
                  "FriendlyName"="Ma page d'accueil"

                  »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
                  !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                  SrchSTS.exe by S!Ri
                  Search SharedTaskScheduler's .dll

                  »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
                  !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                  "AppInit_DLLs"="C:\\WINDOWS\\system32\\__c007A110.dat"
                  "LoadAppInit_DLLs"=dword:00000001

                  »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
                  !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                  "System"=""

                  »»»»»»»»»»»»»»»»»»»»»»»» Rustock

                  »»»»»»»»»»»»»»»»»»»»»»»» DNS

                  Description: Carte Fast Ethernet FA311 NETGEAR - Miniport d'ordonnancement de paquets
                  DNS Server Search Order: 212.27.32.176
                  DNS Server Search Order: 212.27.32.177

                  HKLM\SYSTEM\CCS\Services\Tcpip\..\{08C4A25D-DFEE-45B5-AB69-52581617005E}: NameServer=212.27.32.176,212.27.32.177
                  HKLM\SYSTEM\CS1\Services\Tcpip\..\{08C4A25D-DFEE-45B5-AB69-52581617005E}: DhcpNameServer=192.168.2.1
                  HKLM\SYSTEM\CS2\Services\Tcpip\..\{08C4A25D-DFEE-45B5-AB69-52581617005E}: NameServer=212.27.32.176,212.27.32.177
                  HKLM\SYSTEM\CS3\Services\Tcpip\..\{08C4A25D-DFEE-45B5-AB69-52581617005E}: NameServer=212.27.32.176,212.27.32.177
                  HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.2.1

                  »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

                  »»»»»»»»»»»»»»»»»»»»»»»» Fin

                  ---------------------------------------------------------------------------------------------------------------------------------------------------------
                  ET voici le rapport de Bit Defender

                  <HTML>
                  <HEAD>
                  <TITLE>BitDefender Online Scanner - Rapport d'analyse</TITLE>
                  <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
                  </HEAD>
                  <BODY BGCOLOR=#FFFFFF leftmargin="10" marginwidth="0" topmargin="20" marginheight="0" >

                  <table align="center" border="0" cellpadding="0" cellspacing="0" width="90%">
                  <tr>
                  <td width="458">
                  <p><font face="Arial" color=red><span style="font-size:14pt;"><b>BitDefender Online Scanner</b></span></font></p>
                  </td>
                  <td width="40%">
                  <p> </p>
                  </td>
                  <td width="10%">
                  <p> </p>
                  </td>
                  </tr>
                  <tr>
                  <td colspan="3" width="912">
                  <p><font face="Arial"><span style="font-size:11pt;"><B>Rapport d'analyse généré à: Mon, Nov 05, 2007 - 16:37:41</b></span></font></p>
                  </td>
                  </tr>

                  <tr>
                  <td width="458">
                  <p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
                  </td>
                  <td width="40%">
                  <p> </p>
                  </td>
                  <td width="10%">
                  <p> </p>
                  </td>
                  </tr>

                  <tr>
                  <td width="458">
                  <p><font face="Arial"><span style="font-size:11pt;"><B>Voie d'analyse: </b></span><span style="font-size:10pt;">A:\;C:\;D:\;E:\;F:\;H:\;</span></font></p>
                  </td>
                  <td width="40%">
                  <p> </p>
                  </td>
                  <td width="10%">
                  <p> </p>
                  </td>
                  </tr>

                  <tr>
                  <td width="458">
                  <p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
                  </td>
                  <td width="40%">
                  <p> </p>
                  </td>
                  <td width="10%">
                  <p> </p>
                  </td>
                  </tr>

                  <tr>
                  <td width="458">
                  <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
                  <tr>
                  <td width="451" colspan="2" bgcolor="#CCCCCC">
                  <p><font face="Arial" size="2"><B>Statistiques</b></font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Temps</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">05:47:34</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Fichiers</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">741153</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Directoires</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">10037</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Secteurs de boot</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">3</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Archives</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">33465</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Paquets programmes</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">76018</font></p>
                  </td>
                  </tr>
                  </table>
                  </td>
                  <td width="40%">
                  <p> </p>
                  </td>
                  <td width="10%">
                  <p> </p>
                  </td>
                  </tr>

                  <tr>
                  <td width="458">
                  <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
                  <tr>
                  <td width="451" colspan="2" bgcolor="#CCCCCC">
                  <p><font face="Arial" size="2"><B>Résultats</b></font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Virus identifiés</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">13</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Fichiers infectés</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">147</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Fichiers suspects</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">0</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Avertissements</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">0</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Désinfectés</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">0</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Fichiers effacés</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">146</font></p>
                  </td>
                  </tr>
                  </table>
                  </td>
                  <td width="40%">
                  <p> </p>
                  </td>
                  <td width="10%">
                  <p> </p>
                  </td>
                  </tr>

                  <tr>
                  <td width="458">
                  <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
                  <tr>
                  <td width="451" colspan="2" bgcolor="#CCCCCC">
                  <p><font face="Arial" size="2"><B>Info sur les moteurs</b></font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Définition virus</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">860282</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Version des moteurs</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Analyse des plugins</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">14</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Archive des plugins</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">38</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Unpack des plugins</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">7</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">E-mail plugins</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">6</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Système plugins</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">1</font></p>
                  </td>
                  </tr>
                  </table>
                  </td>
                  <td width="40%">
                  <p> </p>
                  </td>
                  <td width="10%">
                  <p> </p>
                  </td>
                  </tr>

                  <tr>
                  <td width="458">
                  <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
                  <tr>
                  <td width="451" colspan="2" bgcolor="#CCCCCC">
                  <p><font face="Arial" size="2"><B>Paramètres d'analyse</b></font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Première action</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">Désinfecté</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Seconde Action</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Heuristique</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">Oui</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Acceptez les avertissements</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">Oui</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Extensions analysées</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">*;</font></p>
                  </td>
                  </tr>

                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Excludez les extensions</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2"> </font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Analyse d'emails</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">Oui</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Analyse des Archives</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">Oui</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Analyser paquets programmes</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">Oui</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Analyse des fichiers</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">Oui</font></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">Analyse de boot</font></p>
                  </td>
                  <td width="43%" align="right">
                  <p><font face="Arial" size="2">Oui</font></p>
                  </td>
                  </tr>
                  </table>
                  </td>
                  <td width="40%">
                  <p> </p>
                  </td>
                  <td width="10%">
                  <p> </p>
                  </td>
                  </tr>

                  <tr>
                  <td colspan=2>  
                  <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
                  <tr>
                  <td width="252" bgcolor="#CCCCCC">
                  <p><font face="Arial" size="2"><B>Fichier analysé</b></font></p>
                  </td>
                  <td width="195" bgcolor="#CCCCCC" align="right">
                  <p align="left"><b><font size="2" face="Arial"> Statut</font></b></p>
                  </td>
                  </tr>
                  <tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\3dtunnel.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\3dtunnel.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\3dtunnel.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\alphaforce.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\alphaforce.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\alphaforce.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BattlePong.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BattlePong.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BattlePong.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BlobLander.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BlobLander.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BlobLander.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BoubleTrouble.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BoubleTrouble.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BoubleTrouble.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\bowman.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\bowman.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\bowman.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BreakIt.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BreakIt.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BreakIt.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\bullettimefight.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\bullettimefight.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\bullettimefight.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\choper.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\choper.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\choper.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\CircleBreaker.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\CircleBreaker.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\CircleBreaker.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\curveball.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\curveball.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\curveball.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\fireballs.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\fireballs.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\fireballs.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\fishy.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\fishy.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\fishy.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\MoonLander.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\MoonLander.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\MoonLander.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\pacxon.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\pacxon.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\pacxon.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\ParachuteRetro.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\ParachuteRetro.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\ParachuteRetro.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\qbeart.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\qbeart.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\qbeart.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\RaidenX.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\RaidenX.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\RaidenX.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Rong.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Rong.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Rong.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Sonic.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Sonic.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Sonic.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Starball.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Starball.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Starball.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\tanks.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\tanks.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\tanks.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\tankwars.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\tankwars.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\tankwars.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\territorywar.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\territorywar.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\territorywar.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Classics\Asteroids.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Classics\Asteroids.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Classics\Asteroids.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Supprimé</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Classics\Frogger.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Classics\Frogger.exe</font></p>
                  </td>
                  <td width="43%" align="left">
                  <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                  </td>
                  </tr><tr>
                  <td width="57%">
                  <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Classics\Frogger.exe</font&gt
                  1. voici le rapport de Clean

                    05/11/2007 a 10:39:23,78

                    *** Recherche des fichiers dans C:

                    *** Recherche des fichiers dans C:\WINDOWS\

                    *** Recherche des fichiers dans C:\WINDOWS\system32
                    C:\WINDOWS\system32\mcrh.tmp FOUND

                    *** Recherche des fichiers dans C:\Program Files
                    *** Fin du rapport !
                    --------------------------------------------------------------------------------------------------------------------------------------------------------

                    Voici le rapport de SmitFraudfix

                    SmitFraudFix v2.248

                    Rapport fait à 10:44:18,95, 05/11/2007
                    Executé à partir de C:\Documents and Settings\FOUILLAND\Bureau\SmitfraudFix
                    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                    Le type du système de fichiers est NTFS
                    Fix executé en mode normal

                    »»»»»»»»»»»»»»»»»»»»»»»» Process

                    C:\WINDOWS\System32\smss.exe
                    C:\WINDOWS\system32\winlogon.exe
                    C:\WINDOWS\system32\services.exe
                    C:\WINDOWS\system32\lsass.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\WINDOWS\System32\svchost.exe
                    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                    C:\Program Files\Alwil Software\Avast4\ashServ.exe
                    C:\WINDOWS\system32\spoolsv.exe
                    C:\WINDOWS\Explorer.EXE
                    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                    C:\Program Files\Bonjour\mDNSResponder.exe
                    C:\Program Files\Microsoft LifeCam\MSCamS32.exe
                    C:\WINDOWS\system32\nvsvc32.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\WINDOWS\system32\RunDLL32.exe
                    C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
                    C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
                    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                    C:\WINDOWS\vVX1000.exe
                    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                    C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
                    C:\WINDOWS\system32\ctfmon.exe
                    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                    C:\Program Files\Ensemble clavier et souris sans fil Labtec\MagicKey.exe
                    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                    C:\Program Files\Ensemble clavier et souris sans fil Labtec\MulMouse.exe
                    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                    C:\Program Files\MSN Messenger\usnsvc.exe
                    C:\Program Files\Mozilla Thunderbird\thunderbird.exe
                    C:\Program Files\Opera\Opera.exe
                    C:\WINDOWS\system32\rundll32.exe
                    C:\WINDOWS\system32\cmd.exe

                    »»»»»»»»»»»»»»»»»»»»»»»» hosts

                    Fichier hosts corrompu !

                    127.0.0.1 legal-at-spybot.info
                    127.0.0.1 www.legal-at-spybot.info

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\FOUILLAND

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\FOUILLAND\Application Data

                    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\FOUILL~1\Favoris

                    »»»»»»»»»»»»»»»»»»»»»»»» Bureau

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

                    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

                    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
                    "Source"="About:Home"
                    "SubscribedURL"="About:Home"
                    "FriendlyName"="Ma page d'accueil"

                    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    SrchSTS.exe by S!Ri
                    Search SharedTaskScheduler's .dll

                    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                    "AppInit_DLLs"="C:\\WINDOWS\\system32\\__c007A110.dat"
                    "LoadAppInit_DLLs"=dword:00000001

                    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                    "System"=""

                    »»»»»»»»»»»»»»»»»»»»»»»» Rustock

                    »»»»»»»»»»»»»»»»»»»»»»»» DNS

                    Description: Carte Fast Ethernet FA311 NETGEAR - Miniport d'ordonnancement de paquets
                    DNS Server Search Order: 212.27.32.176
                    DNS Server Search Order: 212.27.32.177

                    HKLM\SYSTEM\CCS\Services\Tcpip\..\{08C4A25D-DFEE-45B5-AB69-52581617005E}: NameServer=212.27.32.176,212.27.32.177
                    HKLM\SYSTEM\CS1\Services\Tcpip\..\{08C4A25D-DFEE-45B5-AB69-52581617005E}: DhcpNameServer=192.168.2.1
                    HKLM\SYSTEM\CS2\Services\Tcpip\..\{08C4A25D-DFEE-45B5-AB69-52581617005E}: NameServer=212.27.32.176,212.27.32.177
                    HKLM\SYSTEM\CS3\Services\Tcpip\..\{08C4A25D-DFEE-45B5-AB69-52581617005E}: NameServer=212.27.32.176,212.27.32.177
                    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.2.1

                    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

                    »»»»»»»»»»»»»»»»»»»»»»»» Fin

                    ---------------------------------------------------------------------------------------------------------------------------------------------------------
                    ET voici le rapport de Bit Defender

                    <HTML>
                    <HEAD>
                    <TITLE>BitDefender Online Scanner - Rapport d'analyse</TITLE>
                    <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
                    </HEAD>
                    <BODY BGCOLOR=#FFFFFF leftmargin="10" marginwidth="0" topmargin="20" marginheight="0" >

                    <table align="center" border="0" cellpadding="0" cellspacing="0" width="90%">
                    <tr>
                    <td width="458">
                    <p><font face="Arial" color=red><span style="font-size:14pt;"><b>BitDefender Online Scanner</b></span></font></p>
                    </td>
                    <td width="40%">
                    <p> </p>
                    </td>
                    <td width="10%">
                    <p> </p>
                    </td>
                    </tr>
                    <tr>
                    <td colspan="3" width="912">
                    <p><font face="Arial"><span style="font-size:11pt;"><B>Rapport d'analyse généré à: Mon, Nov 05, 2007 - 16:37:41</b></span></font></p>
                    </td>
                    </tr>

                    <tr>
                    <td width="458">
                    <p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
                    </td>
                    <td width="40%">
                    <p> </p>
                    </td>
                    <td width="10%">
                    <p> </p>
                    </td>
                    </tr>

                    <tr>
                    <td width="458">
                    <p><font face="Arial"><span style="font-size:11pt;"><B>Voie d'analyse: </b></span><span style="font-size:10pt;">A:\;C:\;D:\;E:\;F:\;H:\;</span></font></p>
                    </td>
                    <td width="40%">
                    <p> </p>
                    </td>
                    <td width="10%">
                    <p> </p>
                    </td>
                    </tr>

                    <tr>
                    <td width="458">
                    <p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
                    </td>
                    <td width="40%">
                    <p> </p>
                    </td>
                    <td width="10%">
                    <p> </p>
                    </td>
                    </tr>

                    <tr>
                    <td width="458">
                    <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
                    <tr>
                    <td width="451" colspan="2" bgcolor="#CCCCCC">
                    <p><font face="Arial" size="2"><B>Statistiques</b></font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Temps</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">05:47:34</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Fichiers</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">741153</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Directoires</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">10037</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Secteurs de boot</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">3</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Archives</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">33465</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Paquets programmes</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">76018</font></p>
                    </td>
                    </tr>
                    </table>
                    </td>
                    <td width="40%">
                    <p> </p>
                    </td>
                    <td width="10%">
                    <p> </p>
                    </td>
                    </tr>

                    <tr>
                    <td width="458">
                    <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
                    <tr>
                    <td width="451" colspan="2" bgcolor="#CCCCCC">
                    <p><font face="Arial" size="2"><B>Résultats</b></font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Virus identifiés</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">13</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Fichiers infectés</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">147</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Fichiers suspects</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">0</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Avertissements</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">0</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Désinfectés</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">0</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Fichiers effacés</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">146</font></p>
                    </td>
                    </tr>
                    </table>
                    </td>
                    <td width="40%">
                    <p> </p>
                    </td>
                    <td width="10%">
                    <p> </p>
                    </td>
                    </tr>

                    <tr>
                    <td width="458">
                    <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
                    <tr>
                    <td width="451" colspan="2" bgcolor="#CCCCCC">
                    <p><font face="Arial" size="2"><B>Info sur les moteurs</b></font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Définition virus</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">860282</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Version des moteurs</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Analyse des plugins</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">14</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Archive des plugins</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">38</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Unpack des plugins</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">7</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">E-mail plugins</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">6</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Système plugins</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">1</font></p>
                    </td>
                    </tr>
                    </table>
                    </td>
                    <td width="40%">
                    <p> </p>
                    </td>
                    <td width="10%">
                    <p> </p>
                    </td>
                    </tr>

                    <tr>
                    <td width="458">
                    <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
                    <tr>
                    <td width="451" colspan="2" bgcolor="#CCCCCC">
                    <p><font face="Arial" size="2"><B>Paramètres d'analyse</b></font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Première action</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">Désinfecté</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Seconde Action</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Heuristique</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">Oui</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Acceptez les avertissements</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">Oui</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Extensions analysées</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">*;</font></p>
                    </td>
                    </tr>

                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Excludez les extensions</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2"> </font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Analyse d'emails</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">Oui</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Analyse des Archives</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">Oui</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Analyser paquets programmes</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">Oui</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Analyse des fichiers</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">Oui</font></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">Analyse de boot</font></p>
                    </td>
                    <td width="43%" align="right">
                    <p><font face="Arial" size="2">Oui</font></p>
                    </td>
                    </tr>
                    </table>
                    </td>
                    <td width="40%">
                    <p> </p>
                    </td>
                    <td width="10%">
                    <p> </p>
                    </td>
                    </tr>

                    <tr>
                    <td colspan=2>  
                    <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
                    <tr>
                    <td width="252" bgcolor="#CCCCCC">
                    <p><font face="Arial" size="2"><B>Fichier analysé</b></font></p>
                    </td>
                    <td width="195" bgcolor="#CCCCCC" align="right">
                    <p align="left"><b><font size="2" face="Arial"> Statut</font></b></p>
                    </td>
                    </tr>
                    <tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\3dtunnel.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\3dtunnel.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\3dtunnel.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\alphaforce.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\alphaforce.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\alphaforce.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BattlePong.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BattlePong.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BattlePong.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BlobLander.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BlobLander.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BlobLander.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BoubleTrouble.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BoubleTrouble.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BoubleTrouble.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\bowman.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\bowman.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\bowman.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BreakIt.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BreakIt.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\BreakIt.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\bullettimefight.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\bullettimefight.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\bullettimefight.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\choper.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\choper.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\choper.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\CircleBreaker.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\CircleBreaker.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\CircleBreaker.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\curveball.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\curveball.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\curveball.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\fireballs.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\fireballs.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\fireballs.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\fishy.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\fishy.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\fishy.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\MoonLander.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\MoonLander.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\MoonLander.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\pacxon.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\pacxon.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\pacxon.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\ParachuteRetro.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\ParachuteRetro.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\ParachuteRetro.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\qbeart.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\qbeart.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\qbeart.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\RaidenX.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\RaidenX.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\RaidenX.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Rong.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Rong.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Rong.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Sonic.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Sonic.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Sonic.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Starball.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Starball.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\Starball.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\tanks.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\tanks.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\tanks.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\tankwars.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\tankwars.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\tankwars.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\territorywar.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\territorywar.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Arcade\territorywar.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Classics\Asteroids.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Classics\Asteroids.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Classics\Asteroids.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Supprimé</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Classics\Frogger.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Infecté par: Trojan.Generic.4264</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Classics\Frogger.exe</font></p>
                    </td>
                    <td width="43%" align="left">
                    <p><font face="Arial" size="2">Echec de la désinfection</font></p>
                    </td>
                    </tr><tr>
                    <td width="57%">
                    <p><font face="Arial" size="2">C:\Documents and Settings\FOUILLAND\Bureau\Jeux\Flash Games\Classics\Frogger.exe</font&gt
                    1. Ok, fais ceci :

                      ¤ Télécharge Clean
                      ----> http://www.malekal.com/download/clean.zip

                      Dézippe tout le contenu dans le même dossier. Double clic sur clean ou clean.cmd choisissez l'option 1.
                      Un rapport va s'ouvrir, copie et colle le contenu ici

                      ¤ Télécharge SmitfraudFix et enregistre le sur le bureau. Si ton anti-virus t'alerte d'un virus, désactive-le.
                      http://siri.urz.free.fr/Fix/SmitfraudFix.zip

                      décompresse SmitfraudFix
                      Lance le fichier SmitfraudFix ou SmitfraudFix.cmd et choisit l option 1 copie le rapport ici stp

                      N'attends pas scanne directement ton PC comme indiqué ci-dessous

                      ¤ Fais ce scan anti-virus en ligne avec Bitdefender, puis colle le rapport au format texte ici, une fois qu'il a terminé. Tout est expliqué ci-dessous
                      ----> https://kerio.probb.fr/t673-bitdefender-antivirus-en-ligne

                      Puis envoie moi les trois rapports dès que tu le peux A++
                      1. tout est fait voici le rapport de AVG anti-spyware (au fait ton lien est mort je crois)

                        ---------------------------------------------------------
                        AVG Anti-Spyware - Rapport d'analyse
                        ---------------------------------------------------------

                        + Créé à: 23:52:15 04/11/2007

                        + Résultat de l'analyse:

                        C:\Documents and Settings\FOUILLAND\Cookies\fouilland@adbrite[1].txt -> TrackingCookie.Adbrite : Aucune action entreprise.
                        C:\Documents and Settings\FOUILLAND\Cookies\fouilland@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
                        C:\Documents and Settings\FOUILLAND\Cookies\fouilland@bluestreak[1].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
                        C:\Documents and Settings\FOUILLAND\Cookies\fouilland@doubleclick[2].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
                        C:\Documents and Settings\FOUILLAND\Cookies\fouilland@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
                        C:\Documents and Settings\FOUILLAND\Cookies\fouilland@serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.

                        Fin du rapport
                        1. Bonjour

                          Désinstalle via ajouter/supprimer des programmes :

                          - SweetIMBarForIE (saloperie)

                          Télécharge et exécute sur ton PC ce logiciel
                          https://www.clubic.com/telecharger-fiche28630-rogueremover-free.html

                          Puis utilise AVG anti-spywares, colle le rapport ici à la fin du scan ça ne sera pas terminé.

                          AVG anti-spyware : reste gratuit après la période d'essai en français
                          ---->http://www.infos-du-net.com/telecharger/Anti-Spyware-AVG,0301-7063.html

                          Si tu as besoin d'aide avec Ewido(devenu AVG-antispyware) regarde ce tutoriel:
                          --> http://kerio.probb.fr/Chasser-les-virus-et-spywares-de-votre-systeme-f1/Tutoriel-AVG-anti-spyware-anti-spyware-t701.htm