Smitfraud-C.CoreService

Résolu
Tenaille -  
Bonjour,

histoire de faire original je me retrouve moi aussi avec le traditionnel Smitfraud-C.CoreService... Je ne sais pas si celui-ci st supposé engendrer la présence de pop up à foison (casino, poker en ligne, etc.) mais c'est mon cas!

Merci de votre aide!
Configuration: Dell inspiron AMD turion 64X2 mobile TL 52 1,6 GHz 896 Mo de RAM
Windows XP sp 2
Internet Explorer 7.0

21 réponses

Résumé de la discussion

Smitfraud-C.CoreService et des pop-ups publicitaires indésirables perturbent un PC Dell sous Windows XP SP2 et IE7, suscitant des inquiétudes sur l'infection et les menaces potentielles. La meilleure réponse décrit un nettoyage via ComboFix, la suppression de fichiers suspects et la création d'un point de restauration; elle détaille les résultats, dont les éléments supprimés et les avertissements affichés durant l'opération. Des éléments du HijackThis log et des processus au démarrage illustrent l'étendue de l'infection et les outils employés, tels que Spybot, Avast et ZoneAlarm, pour sécuriser et stabiliser le système. Enfin, certains rapports mentionnent des fichiers et services suspects dans les dossiers système et des entrées de démarrage modifiées, fournissant des indices utiles pour prévenir une réinfection.

Bobot (l’IA à votre service)
  1. Tenaille79
    N'y aurait-il pas moyen de virer les archives de topic ou au moins d'empêcher leur indexation dans les moteurs de recherche???
    2. Tenaille79
      3RVX.exe est un petit utilitaire (tout con) qui permet d'afficher comme sur un mac le changement de volume. C'est juste de la personnalisation visuelle! (source customxp.net)
      1. jacques.gache Contributeur sécurité
        bonsoir, si je peux me permettre je ne vois que cette ligne à fixer c'est une trace de troyen as tu passé malewarebytes comme je te l'avais proposer dans le message 2
        O4 - HKCU\..\Run: [3RVX.exe] C:\Program Files\3RVX\3RVX.exe
        3. Tenaille79
          Les soucis n'étaient pas très marqués mais en tout cas il n'y a plus de pop-up et la connexion semble bien plus rapide! Merci de ton efficacité!

          Je te remet le Hijack :

          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 23:06:48, on 08/04/2008
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16608)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\system32\ZoneLabs\vsmon.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\System32\WLTRYSVC.EXE
          C:\WINDOWS\System32\bcmwltry.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\WINDOWS\system32\brsvc01a.exe
          C:\WINDOWS\system32\brss01a.exe
          C:\WINDOWS\system32\spoolsv.exe
          c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          C:\Program Files\Bonjour\mDNSResponder.exe
          C:\Program Files\Dell Network Assistant\hnm_svc.exe
          C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
          C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
          C:\Program Files\Dell Support Center\bin\sprtsvc.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\WINDOWS\stsystra.exe
          C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
          C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
          C:\WINDOWS\system32\WLTRAY.exe
          C:\WINDOWS\System32\DLA\DLACTRLW.EXE
          C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
          C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
          C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
          C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\3RVX\3RVX.exe
          C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
          C:\Program Files\Digital Line Detect\DLG.exe
          C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
          C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
          C:\Program Files\Windows Live\Messenger\usnsvc.exe
          C:\Program Files\Google\Gmail Notifier\gnotify.exe
          C:\Program Files\Internet Explorer\IEXPLORE.EXE
          C:\Documents and Settings\Benay Anthony\Bureau\skim.exe.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.parc-marais-poitevin.fr/
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=6070104
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
          O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
          O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
          O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
          O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
          O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
          O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
          O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
          O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
          O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
          O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
          O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [3RVX.exe] C:\Program Files\3RVX\3RVX.exe
          O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
          O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
          O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
          O4 - Global Startup: Digital Line Detect.lnk = ?
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
          O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
          O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
          O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.euro.dell.com/systemprofiler/SysPro.CAB
          O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
          O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.com/s/v/27.49/uploader2.cab
          O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
          O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
          O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
          O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
          O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
          O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
          O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
          O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: Advanced Networking Service (hnmsvc) - SingleClick Systems - C:\Program Files\Dell Network Assistant\hnm_svc.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
          O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
          O23 - Service: License Management Service ESD - element5 - C:\Program Files\Fichiers communs\element5 Shared\Service\Licence Manager ESD.exe
          O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
          O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
          O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
          O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
          O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
          O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
          O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE
          1. dou-l
            ok ou en sont les soucis ???

            reposte un hijack que j'analyserais demain matin !
            1. Tenaille79
              suite :

              [b]SDFix: Version 1.167 [/b]
              Run by Benay Anthony on 08/04/2008 at 22:26

              Microsoft Windows XP [version 5.1.2600]
              Running From: C:\DOCUME~1\BENAYA~1\Bureau\SDFix

              [b]Checking Services [/b]:

              Name:
              PCIIDEXX

              Path:
              System32\drivers\pciidexx.sys

              PCIIDEXX - Deleted

              Restoring Windows Registry Values
              Restoring Windows Default Hosts File

              Rebooting

              [b]Checking Files [/b]:

              Trojan Files Found:

              C:\WINDOWS\system32\drivers\core.cache.dsk - Deleted
              C:\WINDOWS\system32\drivers\PCIIDEXX.sys - Deleted

              Removing Temp Files

              [b]ADS Check [/b]:

              [b]Final Check [/b]:

              catchme 0.3.1351.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
              Rootkit scan 2008-04-08 22:36:42
              Windows 5.1.2600 Service Pack 2 NTFS

              scanning hidden processes ...

              scanning hidden services & system hive ...

              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
              "s1"=dword:aa061037
              "s2"=dword:c5685de5
              "h0"=dword:00000002

              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
              "h0"=dword:00000000
              "ujdew"=hex:98,68,5d,c8,63,80,42,21,9c,98,02,c6,08,84,af,59,f7,d7,9b,fc,ed,..

              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
              "p0"="C:\Program Files\DAEMON Tools\"
              "h0"=dword:00000001
              "khjeh"=hex:4a,0f,b0,a4,41,30,d0,0d,bd,48,43,8d,00,3d,3d,dc,97,f6,d1,c9,5b,..

              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
              "a0"=hex:20,01,00,00,80,d6,de,e5,d1,7e,63,d7,b8,7d,05,7f,14,90,f7,e9,d6,..
              "khjeh"=hex:6b,4d,bf,a1,80,cc,cd,a7,35,ee,7b,13,78,21,8d,50,be,a1,8b,0e,59,..

              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
              "khjeh"=hex:ca,74,de,c6,aa,6a,33,f4,85,d4,df,10,6e,37,1f,a7,97,e4,77,79,21,..
              [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
              "h0"=dword:00000000
              "ujdew"=hex:98,68,5d,c8,63,80,42,21,9c,98,02,c6,08,84,af,59,f7,d7,9b,fc,ed,..
              [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
              "p0"="C:\Program Files\DAEMON Tools\"
              "h0"=dword:00000001
              "khjeh"=hex:4a,0f,b0,a4,41,30,d0,0d,bd,48,43,8d,00,3d,3d,dc,97,f6,d1,c9,5b,..

              [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
              "a0"=hex:20,01,00,00,80,d6,de,e5,d1,7e,63,d7,b8,7d,05,7f,14,90,f7,e9,d6,..
              "khjeh"=hex:6b,4d,bf,a1,80,cc,cd,a7,35,ee,7b,13,78,21,8d,50,be,a1,8b,0e,59,..

              [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
              "khjeh"=hex:ca,74,de,c6,aa,6a,33,f4,85,d4,df,10,6e,37,1f,a7,97,e4,77,79,21,..

              scanning hidden registry entries ...

              scanning hidden files ...

              scan completed successfully
              hidden processes: 0
              hidden services: 0
              hidden files: 583

              [b]Remaining Services [/b]:

              Authorized Application Key Export:

              [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
              "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
              "C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
              "C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS\\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
              "C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:*:Enabled:Ex‚cuter une DLL en tant qu'application"
              "C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
              "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
              "C:\\Program Files\\Soldier of Fortune II - Double Helix\\SoF2MP.exe"="C:\\Program Files\\Soldier of Fortune II - Double Helix\\SoF2MP.exe:*:Enabled:SoF2MP"
              "C:\\Program Files\\Dell Network Assistant\\ezi_hnm2.exe"="C:\\Program Files\\Dell Network Assistant\\ezi_hnm2.exe:*:Enabled:Home Networking Application"
              "C:\\Program Files\\Firefly Studios\\Stronghold 2\\Stronghold2.exe"="C:\\Program Files\\Firefly Studios\\Stronghold 2\\Stronghold2.exe:*:Enabled:Stronghold 2"
              "C:\\Program Files\\Azureus\\Azureus.exe"="C:\\Program Files\\Azureus\\Azureus.exe:*:Enabled:Azureus"
              "C:\\Team17\\Worms Armageddon\\WA.exe"="C:\\Team17\\Worms Armageddon\\WA.exe:*:Enabled:Worms Armageddon"
              "C:\\WINDOWS\\system32\\javaw.exe"="C:\\WINDOWS\\system32\\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
              "C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
              "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
              "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
              "C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
              "C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"

              [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
              "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
              "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
              "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
              "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

              [b]Remaining Files [/b]:

              File Backups: - C:\DOCUME~1\BENAYA~1\Bureau\SDFix\backups\backups.zip

              [b]Files with Hidden Attributes [/b]:

              Wed 10 Jan 2007 88 A.SHR --- "C:\i386\4174EB7600.sys"
              Wed 10 Jan 2007 2,828 A.SH. --- "C:\i386\KGyGaAvL.sys"
              Wed 5 Mar 2008 6,219,320 A..H. --- "C:\Program Files\Picasa2\setup.exe"
              Mon 28 Jan 2008 1,404,240 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SDUpdate.exe"
              Mon 28 Jan 2008 5,146,448 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
              Mon 28 Jan 2008 2,097,488 A.SHR --- "C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
              Fri 2 Nov 2007 168 ..SHR --- "C:\WINDOWS\system32\4174EB7600.sys"
              Fri 2 Nov 2007 5,642 A.SH. --- "C:\WINDOWS\system32\KGyGaAvL.sys"
              Tue 23 Jan 2007 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
              Thu 31 May 2007 13,918,208 ...H. --- "C:\Documents and Settings\Benay Anthony\Mes documents\~WRL2093.tmp"
              Mon 4 Jun 2007 7,403,008 ...H. --- "C:\Documents and Settings\Benay Anthony\Mes documents\~WRL2103.tmp"
              Thu 11 Jan 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
              Wed 23 Jan 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\523d056929e13eacf8392044f602e53e\BIT11.tmp"
              Wed 23 Jan 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\afa5528a2269b5106016bdbc1ea3037f\BIT10.tmp"
              Wed 23 Jan 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\f7db876e78b88fd8276fd7d29cb7e4eb\BITF.tmp"
              Mon 12 Feb 2007 3,096,576 A..H. --- "C:\Documents and Settings\Benay Anthony\Application Data\U3\temp\Launchpad Removal.exe"
              Fri 5 Jan 2007 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch1\lock.tmp"
              Fri 5 Jan 2007 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch2\lock.tmp"
              Fri 5 Jan 2007 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch3\lock.tmp"
              Fri 5 Jan 2007 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch4\lock.tmp"
              Fri 5 Jan 2007 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch5\lock.tmp"
              Fri 5 Jan 2007 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch6\lock.tmp"
              Sun 18 Nov 2007 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch7\lock.tmp"

              [b]Finished![/b]
              1. dou-l
                télécharge sdfix:

                http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

                Télécharge le sur le bureau

                -
                Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :

                -Redémarre ton ordinateur
                -Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
                -A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
                -Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
                -Choisis ton compte.
                -Déroule la liste des instructions ci-dessous :
                -Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
                -Appuie sur Y pour commencer le processus de nettoyage.
                -Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
                -Appuie sur une touche pour redémarrer le PC.
                -Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
                -Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
                -Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
                -Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
                Enfin copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum

                je revien demain matin pour voir !
                1. Tenaille79
                  C'est fait! :

                  ComboFix 08-04-08.2 - Benay Anthony 2008-04-08 20:06:15.1 - NTFSx86
                  Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.419 [GMT 2:00]
                  Endroit: C:\Documents and Settings\Benay Anthony\Bureau\Nettoyeur.exe
                  * Création d'un nouveau point de restauration

                  [color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
                  .
                  TimedOut: progfile.dat

                  (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
                  .

                  C:\WINDOWS\system32\drivers\core.cache.dsk . . . . Echec de suppression

                  .
                  ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-03-08 to 2008-04-08 ))))))))))))))))))))))))))))))))))))
                  .

                  2008-04-08 18:24 . 2008-04-08 19:41 2,916 --a------ C:\WINDOWS\system32\tmp.reg
                  2008-04-08 18:23 . 2007-09-05 23:22 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
                  2008-04-08 18:23 . 2006-04-27 16:49 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
                  2008-04-08 18:23 . 2008-03-28 23:19 86,528 --a------ C:\WINDOWS\system32\VACFix.exe
                  2008-04-08 18:23 . 2008-03-26 08:50 82,432 --a------ C:\WINDOWS\system32\IEDFix.exe
                  2008-04-08 18:23 . 2003-06-05 20:13 53,248 --a------ C:\WINDOWS\system32\Process.exe
                  2008-04-08 18:23 . 2004-07-31 17:50 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
                  2008-04-08 18:23 . 2007-10-03 23:36 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
                  2008-04-08 16:08 . 2008-04-08 16:15 <REP> d-------- C:\WINDOWS\BDOSCAN8
                  2008-04-04 22:17 . 2008-04-04 22:17 479 --a------ C:\reecmuxmkv.bat
                  2008-04-04 18:52 . 2008-04-04 20:16 7,656,116 --a------ C:\video.pass
                  2008-04-04 16:46 . 2008-04-04 16:46 <REP> d-------- C:\Program Files\Xvid
                  2008-04-04 16:46 . 2008-04-04 16:46 <REP> d-------- C:\Program Files\Haali
                  2008-04-04 16:45 . 2008-04-04 16:45 <REP> d-------- C:\Program Files\Ripp-It Codec Pack
                  2008-04-04 16:45 . 2008-04-04 16:45 <REP> d-------- C:\Program Files\AC3Filter
                  2008-04-04 14:25 . 2008-04-04 14:25 <REP> d-------- C:\Ri4m_TMP
                  2008-04-04 14:22 . 2008-04-04 14:22 <REP> d-------- C:\Program Files\AviSynth 2.5
                  2008-04-04 14:21 . 2008-04-04 16:44 <REP> d-------- C:\Program Files\Ripp-it_AM
                  2008-03-31 09:13 . 2008-03-29 19:31 75,856 --a------ C:\WINDOWS\system32\drivers\aswSP.sys
                  2008-03-31 09:13 . 2008-03-29 19:35 20,560 --a------ C:\WINDOWS\system32\drivers\aswFsBlk.sys
                  2008-03-20 22:44 . 2008-03-20 22:49 <REP> d-------- C:\Program Files\PhotoFiltre

                  .
                  (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
                  .
                  2008-04-08 18:16 932 ----a-w C:\WINDOWS\system32\drivers\core.cache.dsk
                  2008-04-05 11:36 --------- d-----w C:\Documents and Settings\Benay Anthony\Application Data\Azureus
                  2008-04-03 11:50 --------- d-----w C:\Program Files\eMule
                  2008-04-02 22:19 --------- d-----w C:\Program Files\Java
                  2008-04-02 20:59 --------- d-----w C:\Program Files\Windows Live Safety Center
                  2008-03-29 17:35 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys
                  2008-03-29 17:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys
                  2008-03-29 17:27 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys
                  2008-03-29 17:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys
                  2008-03-29 10:41 --------- d-----w C:\Program Files\Azureus
                  2008-03-28 19:45 --------- d-----w C:\Documents and Settings\Benay Anthony\Application Data\skypePM
                  2008-03-28 19:45 --------- d-----w C:\Documents and Settings\Benay Anthony\Application Data\Skype
                  2008-03-28 16:57 --------- d-----w C:\Program Files\Messenger Plus! Live
                  2008-03-24 17:10 --------- d-----w C:\Documents and Settings\Benay Anthony\Application Data\OpenOffice.org2
                  2008-03-24 00:00 695,296 ----a-w C:\WINDOWS\Internet Logs\xDB12.tmp
                  2008-03-24 00:00 4,008,448 ----a-w C:\WINDOWS\Internet Logs\xDB13.tmp
                  2008-03-22 13:11 --------- d-----w C:\Program Files\TuneUp Utilities 2008
                  2008-03-20 11:07 --------- d-----w C:\Documents and Settings\Benay Anthony\Application Data\U3
                  2008-03-18 21:14 --------- d-----w C:\Program Files\SopCast
                  2008-03-15 21:20 372,224 ----a-w C:\WINDOWS\Internet Logs\xDB10.tmp
                  2008-03-15 21:20 3,962,368 ----a-w C:\WINDOWS\Internet Logs\xDB11.tmp
                  2008-03-10 12:42 614,912 ----a-w C:\WINDOWS\Internet Logs\xDBE.tmp
                  2008-03-10 12:42 3,952,128 ----a-w C:\WINDOWS\Internet Logs\xDBF.tmp
                  2008-03-05 22:00 --------- d-----w C:\Documents and Settings\Benay Anthony\Application Data\ArcSoft
                  2008-03-05 21:59 --------- d--h--w C:\Program Files\InstallShield Installation Information
                  2008-03-05 21:59 --------- d-----w C:\Program Files\ArcSoft
                  2008-03-05 12:22 --------- d-----w C:\Program Files\Picasa2
                  2008-03-01 16:41 --------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
                  2008-02-29 22:12 961,024 ----a-w C:\WINDOWS\Internet Logs\xDBC.tmp
                  2008-02-29 22:12 3,911,680 ----a-w C:\WINDOWS\Internet Logs\xDBD.tmp
                  2008-02-29 19:42 --------- d-----w C:\Program Files\iTunes
                  2008-02-29 19:42 --------- d-----w C:\Program Files\iPod
                  2008-02-29 19:40 --------- d-----w C:\Program Files\QuickTime
                  2008-02-29 10:52 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller
                  2008-02-29 10:52 --------- d-----w C:\Program Files\Windows Live
                  2008-02-29 10:46 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
                  2008-02-26 18:56 --------- d-----w C:\Documents and Settings\All Users\Application Data\Dell
                  2008-02-25 17:37 86,144 ----a-w C:\WINDOWS\system32\drivers\pciidexx.sys
                  2008-02-25 17:34 --------- d-----w C:\Documents and Settings\Benay Anthony\Application Data\TuneUp Software
                  2008-02-25 17:33 --------- d-----w C:\Documents and Settings\All Users\Application Data\TuneUp Software
                  2008-02-25 17:32 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard
                  2008-02-17 22:34 3,875,328 ----a-w C:\WINDOWS\Internet Logs\xDBB.tmp
                  2008-02-17 22:34 1,433,088 ----a-w C:\WINDOWS\Internet Logs\xDBA.tmp
                  2008-02-16 12:24 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
                  2008-02-16 12:22 --------- d-----w C:\Program Files\Spybot - Search & Destroy
                  2008-02-16 12:21 691,545 ----a-w C:\WINDOWS\unins000.exe
                  2008-02-15 19:01 32 ----a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat
                  2008-02-15 18:58 --------- d-----w C:\Program Files\Skype
                  2008-02-15 18:58 --------- d-----w C:\Program Files\Fichiers communs\Skype
                  2008-02-15 18:58 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skype
                  2008-02-08 10:38 --------- d-----w C:\Program Files\Fichiers communs\Adobe
                  2008-02-02 12:06 3,823,104 ----a-w C:\WINDOWS\Internet Logs\xDB9.tmp
                  2008-01-22 13:25 45,568 ----a-w C:\WINDOWS\Internet Logs\xDB8.tmp
                  2008-01-22 00:01 3,786,752 ----a-w C:\WINDOWS\Internet Logs\xDB7.tmp
                  2008-01-22 00:01 2,665,984 ----a-w C:\WINDOWS\Internet Logs\xDB6.tmp
                  2008-01-09 13:01 53,248 ----a-w C:\WINDOWS\bdoscandel.exe
                  2007-12-31 09:17 3,171,978 ----a-w C:\WINDOWS\Internet Logs\tvDebug.zip
                  2007-11-18 00:22 3,076,096 ----a-w C:\WINDOWS\Internet Logs\xDB5.tmp
                  2007-09-20 19:01 2,521,088 ----a-w C:\WINDOWS\Internet Logs\xDB4.tmp
                  2007-09-20 19:01 1,748,480 ----a-w C:\WINDOWS\Internet Logs\xDB3.tmp
                  2007-09-01 12:15 1,442,304 ----a-w C:\WINDOWS\Internet Logs\xDB2.tmp
                  2007-08-05 13:49 1,385,472 ----a-w C:\WINDOWS\Internet Logs\xDB1.tmp
                  2007-01-10 18:46 0 -c--a-w C:\Documents and Settings\Benay Anthony\Application Data\wklnhst.dat
                  2007-11-02 16:58 168 -csh--r C:\WINDOWS\system32\4174EB7600.sys
                  2007-11-02 16:58 5,642 -csha-w C:\WINDOWS\system32\KGyGaAvL.sys
                  .

                  ------- Sigcheck -------

                  2007-06-13 15:22 979456 80a5400514eb32d393654768c4017e46 C:\WINDOWS\explorer.exe
                  2007-06-13 15:10 1037312 b795475444d6d57a572c14b9e1a29839 C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
                  2004-08-05 14:00 1036288 4c33e5b9a6197b6ed215f6cfba0a2daa C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
                  2007-06-13 15:22 979456 80a5400514eb32d393654768c4017e46 C:\WINDOWS\system32\dllcache\explorer.exe
                  .
                  ((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
                  .
                  .
                  REGEDIT4
                  *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

                  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                  "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 14:00 15360]
                  "3RVX.exe"="C:\Program Files\3RVX\3RVX.exe" [2007-01-28 23:46 176128]
                  "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-01-28 12:43 2097488]

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                  "SigmatelSysTrayApp"="stsystra.exe" [2006-09-22 13:06 282624 C:\WINDOWS\stsystra.exe]
                  "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-05-10 13:12 90112]
                  "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-09-22 13:47 761947]
                  "Broadcom Wireless Manager UI"="C:\WINDOWS\system32\WLTRAY.exe" [2006-11-01 06:48 1392640]
                  "DLA"="C:\WINDOWS\System32\DLA\DLACTRLW.EXE" [2005-09-08 07:20 122940]
                  "ISUSPM Startup"="C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 18:50 221184]
                  "ISUSScheduler"="C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2004-07-27 18:50 81920]
                  "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
                  "ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-03-09 00:02 919280]
                  "dscactivate"="C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-11-15 10:24 16384]
                  "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" [2007-05-09 21:09 185896]

                  [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
                  "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-05 14:00 15360]
                  "Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-10-23 23:18 443968]

                  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
                  "SENTINEL"= snti386.dll
                  "msacm.scg726"= scg726.acm
                  "msacm.alf2cd"= alf2cd.acm
                  "msacm.ac3acm"= AC3ACM.acm
                  "vidc.dvsd"= mcdvd_32.dll
                  "vidc.yv12"= yv12vfw.dll
                  "msacm.lameacm"= LameACM.acm

                  [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Dell Network Assistant.lnk]
                  path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Dell Network Assistant.lnk
                  backup=C:\WINDOWS\pss\Dell Network Assistant.lnkCommon Startup

                  [HKLM\~\startupfolder\C:^Documents and Settings^Benay Anthony^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 2.1.lnk]
                  path=C:\Documents and Settings\Benay Anthony\Menu Démarrer\Programmes\Démarrage\OpenOffice.org 2.1.lnk
                  backup=C:\WINDOWS\pss\OpenOffice.org 2.1.lnkStartup

                  [HKLM\~\startupfolder\C:^Documents and Settings^Benay Anthony^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 2.2.lnk]
                  path=C:\Documents and Settings\Benay Anthony\Menu Démarrer\Programmes\Démarrage\OpenOffice.org 2.2.lnk
                  backup=C:\WINDOWS\pss\OpenOffice.org 2.2.lnkStartup

                  [HKLM\~\startupfolder\C:^Documents and Settings^Benay Anthony^Menu Démarrer^Programmes^Démarrage^TotalReduc.lnk]
                  path=C:\Documents and Settings\Benay Anthony\Menu Démarrer\Programmes\Démarrage\TotalReduc.lnk
                  backup=C:\WINDOWS\pss\TotalReduc.lnkStartup

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware]
                  --a------ 2007-06-11 11:25 6731312 C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BedTime]
                  C:\BedTime\BedTime_control.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
                  --a------ 2006-11-12 12:48 157592 C:\Program Files\DAEMON Tools\daemon.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupport]
                  --a------ 2006-08-28 23:57 395776 C:\Program Files\Dell Support\DSAgnt.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupportCenter]
                  --a------ 2007-11-15 10:23 202544 C:\Program Files\Dell Support Center\bin\sprtcmd.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dscactivate]
                  --a------ 2007-11-15 10:24 16384 C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDLauncher]
                  -----c--- 2005-12-09 22:29 49152 C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
                  C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch]
                  --a------ 2005-03-17 20:30 40960 C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
                  --a------ 2008-02-19 14:10 267048 C:\Program Files\iTunes\iTunesHelper.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCameraAssistant]
                  --a------ 2005-12-07 10:26 489472 C:\Program Files\Logitech\Video\CameraAssistant.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideo[inspector]]
                  --a------ 2005-12-07 10:33 73728 C:\Program Files\Logitech\Video\InstallHelper.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ModemOnHold]
                  --------- 2003-09-10 04:24 20480 C:\Program Files\NetWaiting\netWaiting.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSKDetectorExe]
                  --a--c--- 2005-07-12 21:05 1117184 C:\Program Files\McAfee\SpamKiller\MSKDetct.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PaperPort PTD]
                  --a------ 2005-03-17 20:17 57393 C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication]
                  --a------ 2007-03-23 13:20 227328 C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
                  --a------ 2008-02-01 00:13 385024 C:\Program Files\QuickTime\QTTask.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
                  -ra------ 2003-10-14 11:22 155648 C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
                  --a------ 2007-01-25 23:19 171448 C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe

                  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
                  "LogitechCameraService(E)"=C:\WINDOWS\system32\ElkCtrl.exe /automation
                  "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe"
                  "TkBellExe"="C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                  "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                  "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime
                  "SetDefPrt"=C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe
                  "LVCOMSX"=C:\WINDOWS\system32\LVCOMSX.EXE

                  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
                  "DisableMonitoring"=dword:00000001

                  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
                  "DisableMonitoring"=dword:00000001

                  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
                  "DisableMonitoring"=dword:00000001

                  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
                  "EnableFirewall"= 0 (0x0)

                  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
                  "%windir%\\system32\\sessmgr.exe"=
                  "C:\\Program Files\\Messenger\\msmsgs.exe"=
                  "C:\\WINDOWS\\system32\\dpvsetup.exe"=
                  "C:\\WINDOWS\\system32\\rundll32.exe"=
                  "C:\\Program Files\\eMule\\emule.exe"=
                  "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
                  "C:\\Program Files\\Soldier of Fortune II - Double Helix\\SoF2MP.exe"=
                  "C:\\Program Files\\Dell Network Assistant\\ezi_hnm2.exe"=
                  "C:\\Program Files\\Firefly Studios\\Stronghold 2\\Stronghold2.exe"=
                  "C:\\Program Files\\Azureus\\Azureus.exe"=
                  "C:\\Team17\\Worms Armageddon\\WA.exe"=
                  "C:\\WINDOWS\\system32\\javaw.exe"=
                  "C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
                  "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
                  "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
                  "C:\\Program Files\\iTunes\\iTunes.exe"=
                  "C:\\Program Files\\Skype\\Phone\\Skype.exe"=

                  [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
                  "10421:UDP"= 10421:UDP:SingleClick Discovery Protocol
                  "10426:UDP"= 10426:UDP:SingleClick ICC

                  R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 19:31]
                  R1 pciidexx;pciidexx;C:\WINDOWS\system32\drivers\pciidexx.sys [2008-02-25 19:37]
                  R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 19:35]
                  R2 sprtsvc_dellsupportcenter;SupportSoft Sprocket Service (dellsupportcenter);C:\Program Files\Dell Support Center\bin\sprtsvc.exe [2007-11-15 10:23]
                  R2 UxTuneUp;TuneUp Extension de thème;C:\WINDOWS\System32\svchost.exe [2004-08-05 14:00]
                  R3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [2005-12-09 15:37]
                  S2 KeyP;KeyP;C:\WINDOWS\system32\Drivers\KeyP.sys [2002-09-25 14:58]
                  S3 bfastfao;bfastfao;C:\DOCUME~1\BENAYA~1\LOCALS~1\Temp\bfastfao.sys []
                  S3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\Drivers\BrScnUsb.sys [2004-10-15 13:50]
                  S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-03-22 15:11]

                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
                  UxTuneUp

                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\I]
                  \Shell\AutoRun\command - I:\LaunchU3.exe -a

                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0e448bf6-91cd-11dc-b22f-0015c5ceae04}]
                  \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL key.exe
                  \Shell\infected\command - F:\key.exe

                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1d896632-b168-11dc-b294-0015c5ceae04}]
                  \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL key.exe
                  \Shell\infected\command - key.exe

                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{208651d0-cbe3-11db-b076-0015c5ceae04}]
                  \Shell\AutoRun\command - H:\ino6.com
                  \Shell\explore\Command - H:\ino6.com
                  \Shell\open\Command - H:\ino6.com

                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{25b47bbf-ccd3-11db-b079-0015c5ceae04}]
                  \Shell\AutoRun\command - G:\LaunchU3.exe

                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5adb8f5f-f0ff-11dc-b32d-0015c5ceae04}]
                  \Shell\AutoRun\command - I:\LaunchU3.exe -a

                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5adb8f60-f0ff-11dc-b32d-0015c5ceae04}]
                  \Shell\AutoRun\command - J:\h6o0re.cmd
                  \Shell\explore\Command - J:\h6o0re.cmd
                  \Shell\open\Command - J:\h6o0re.cmd

                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a9ee7f98-9445-11dc-b23a-0015c5ceae04}]
                  \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL key.exe
                  \Shell\infected\command - key.exe

                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bae43b4a-9e5e-11dc-b25c-0015c5ceae04}]
                  \Shell\AutoRun\command - F:\LaunchU3.exe -a

                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d315195a-c820-11dc-b2b9-0015c5ceae04}]
                  \Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL key.exe
                  \Shell\infected\command - F:\key.exe

                  [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fc73d64d-ed19-11dc-b324-0015c5ceae04}]
                  \Shell\AutoRun\command - F:\wd_windows_tools\setup.exe

                  .
                  Contenu du dossier 'Scheduled Tasks/Tƒches planifi‚es'
                  "2008-04-04 15:47:17 C:\WINDOWS\Tasks\1-Click Maintenance.job"
                  - C:\Program Files\TuneUp Utilities 2008\OneClick.exe
                  "2008-01-09 07:44:03 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
                  - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
                  .
                  **************************************************************************

                  catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                  Rootkit scan 2008-04-08 20:17:24
                  Windows 5.1.2600 Service Pack 2 NTFS

                  Balayage processus cach‚s ...

                  Balayage cach‚ autostart entries ...

                  Balayage des fichiers cach‚s ...

                  Scan termin‚ avec succŠs
                  Les fichiers cach‚s: 0

                  **************************************************************************
                  .
                  --------------------- DLLs a charg‚ sous des processus courants ---------------------

                  PROCESS: C:\WINDOWS\explorer.exe
                  -> C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.dll
                  .
                  ------------------------ Other Running Processes ------------------------
                  .
                  C:\WINDOWS\system32\Ati2evxx.exe
                  C:\WINDOWS\system32\Ati2evxx.exe
                  C:\WINDOWS\System32\WLTRYSVC.EXE
                  C:\WINDOWS\System32\bcmwltry.exe
                  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashServ.exe
                  C:\WINDOWS\system32\brss01a.exe
                  c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                  C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                  C:\Program Files\Bonjour\mDNSResponder.exe
                  C:\Program Files\Dell Network Assistant\hnm_svc.exe
                  C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                  C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
                  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                  C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
                  C:\Program Files\Digital Line Detect\DLG.exe
                  C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
                  C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                  .
                  **************************************************************************
                  .
                  Temps d'accomplissement: 2008-04-08 20:25:56 - machine was rebooted
                  ComboFix-quarantined-files.txt 2008-04-08 18:25:48
                  Pre-Run: 12,121,677,824 octets libres
                  Post-Run: 14,267,490,304 octets libres
                  .
                  2008-03-13 18:02:30 --- E O F ---
                  4. dou-l
                    les host c'est bon!

                    ATTENTION : Ne te sert pas de ton ordi et désactive tes protections (antivirus et autre)

                    Télécharge Combofix de sUBs : Renomme le avant toute installation, par exemple, nomme le "KillBagle". aide ici : https://forum.pcastuces.com/sujet.asp?f=25&s=37315

                    http://download.bleepingcomputer.com/sUBs/ComboFix.exe
                    Sauvegarde le sur ton bureau et pas ailleurs !

                    Aide à l’utilisation de combofix ici: https://bibou0007.forumpro.fr/login?redirect=%2Ft121-topic

                    Double-clic sur combofix, Il va te poser une question, réponds par la touche 1 et entrée pour valider, laisse toi guider.
                    Attends que combofix ait terminé, un rapport sera créé. Poste le rapport.
                    1. Tenaille79
                      Il me demande de télécharger une version à jour (message en anglais bien sur)
                  5. dou-l
                    ok refai un smitfraud option 1 stp en mode normal
                    1. Tenaille79
                      C'est fait :

                      SmitFraudFix v2.309

                      Rapport fait à 19:41:37,75, 08/04/2008
                      Executé à partir de C:\Documents and Settings\Benay Anthony\Bureau\SmitfraudFix
                      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                      Le type du système de fichiers est NTFS
                      Fix executé en mode normal

                      »»»»»»»»»»»»»»»»»»»»»»»» Process

                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\Ati2evxx.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                      C:\WINDOWS\system32\Ati2evxx.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\WINDOWS\System32\WLTRYSVC.EXE
                      C:\WINDOWS\System32\bcmwltry.exe
                      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                      C:\Program Files\Alwil Software\Avast4\ashServ.exe
                      C:\WINDOWS\system32\brsvc01a.exe
                      C:\WINDOWS\system32\brss01a.exe
                      C:\WINDOWS\system32\spoolsv.exe
                      c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                      C:\Program Files\Bonjour\mDNSResponder.exe
                      C:\WINDOWS\system32\cisvc.exe
                      C:\Program Files\Dell Network Assistant\hnm_svc.exe
                      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                      C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
                      C:\Program Files\Dell Support Center\bin\sprtsvc.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                      C:\WINDOWS\stsystra.exe
                      C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
                      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                      C:\WINDOWS\system32\WLTRAY.exe
                      C:\WINDOWS\System32\DLA\DLACTRLW.EXE
                      C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
                      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                      C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
                      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                      C:\WINDOWS\system32\ctfmon.exe
                      C:\Program Files\3RVX\3RVX.exe
                      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                      C:\Program Files\Digital Line Detect\DLG.exe
                      C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
                      C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                      C:\Program Files\Internet Explorer\iexplore.exe
                      C:\Program Files\Google\Gmail Notifier\gnotify.exe
                      C:\WINDOWS\system32\cidaemon.exe
                      C:\WINDOWS\system32\cidaemon.exe
                      C:\Program Files\Windows Live\Messenger\usnsvc.exe
                      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                      C:\WINDOWS\system32\cmd.exe

                      »»»»»»»»»»»»»»»»»»»»»»»» hosts

                      »»»»»»»»»»»»»»»»»»»»»»»» C:\

                      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

                      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

                      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

                      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

                      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

                      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Benay Anthony

                      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Benay Anthony\Application Data

                      »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

                      »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\BENAYA~1\Favoris

                      »»»»»»»»»»»»»»»»»»»»»»»» Bureau

                      »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                      »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

                      »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

                      »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
                      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                      IEDFix
                      Credits: Malware Analysis & Diagnostic
                      Code: S!Ri

                      »»»»»»»»»»»»»»»»»»»»»»»» VACFix
                      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                      VACFix
                      Credits: Malware Analysis & Diagnostic
                      Code: S!Ri

                      »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
                      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                      SrchSTS.exe by S!Ri
                      Search SharedTaskScheduler's .dll

                      »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
                      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                      "AppInit_DLLs"=""

                      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
                      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                      "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
                      "System"=""

                      »»»»»»»»»»»»»»»»»»»»»»»» Rustock

                      »»»»»»»»»»»»»»»»»»»»»»»» DNS

                      Description: Broadcom 440x 10/100 Integrated Controller - Miniport d'ordonnancement de paquets
                      DNS Server Search Order: 192.168.1.1

                      Description: Carte Mini Dell Wireless 1390 - Miniport d'ordonnancement de paquets
                      DNS Server Search Order: 192.168.1.1

                      HKLM\SYSTEM\CCS\Services\Tcpip\..\{2753C6DA-FC93-40FE-B310-718A35DBBA86}: DhcpNameServer=192.168.1.1
                      HKLM\SYSTEM\CCS\Services\Tcpip\..\{89C0081A-33A8-4BF1-B400-40188D8C61AC}: DhcpNameServer=192.168.1.1
                      HKLM\SYSTEM\CS1\Services\Tcpip\..\{2753C6DA-FC93-40FE-B310-718A35DBBA86}: DhcpNameServer=192.168.1.1
                      HKLM\SYSTEM\CS1\Services\Tcpip\..\{89C0081A-33A8-4BF1-B400-40188D8C61AC}: DhcpNameServer=192.168.1.1
                      HKLM\SYSTEM\CS3\Services\Tcpip\..\{2753C6DA-FC93-40FE-B310-718A35DBBA86}: DhcpNameServer=192.168.1.1
                      HKLM\SYSTEM\CS3\Services\Tcpip\..\{89C0081A-33A8-4BF1-B400-40188D8C61AC}: DhcpNameServer=192.168.1.1
                      HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
                      HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
                      HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1

                      »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

                      »»»»»»»»»»»»»»»»»»»»»»»» Fin
                  6. dou-l
                    > Télécharge Zeb-Restore : http://telechargement.zebulon.fr/zeb-restore.html
                    - Mets le dans un dossier, sur ton bureau par exemple.
                    - Lance Zebrestore et coche la/les case(s) suivante(s) :

                    Réinitialiser Fichier Hosts

                    - Ne coche que la/les case(s) indiquée(s).
                    - Clique sur le bouton Restaurer.
                    - Quitte le programme puis renvoie un log HiJack,
                    1. Tenaille79
                      que voici :

                      Logfile of Trend Micro HijackThis v2.0.2
                      Scan saved at 19:22:01, on 08/04/2008
                      Platform: Windows XP SP2 (WinNT 5.01.2600)
                      MSIE: Internet Explorer v7.00 (7.00.6000.16608)
                      Boot mode: Normal

                      Running processes:
                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\Ati2evxx.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                      C:\WINDOWS\system32\Ati2evxx.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\WINDOWS\System32\WLTRYSVC.EXE
                      C:\WINDOWS\System32\bcmwltry.exe
                      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                      C:\Program Files\Alwil Software\Avast4\ashServ.exe
                      C:\WINDOWS\system32\brsvc01a.exe
                      C:\WINDOWS\system32\brss01a.exe
                      C:\WINDOWS\system32\spoolsv.exe
                      c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                      C:\Program Files\Bonjour\mDNSResponder.exe
                      C:\WINDOWS\system32\cisvc.exe
                      C:\Program Files\Dell Network Assistant\hnm_svc.exe
                      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                      C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
                      C:\Program Files\Dell Support Center\bin\sprtsvc.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                      C:\WINDOWS\stsystra.exe
                      C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
                      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                      C:\WINDOWS\system32\WLTRAY.exe
                      C:\WINDOWS\System32\DLA\DLACTRLW.EXE
                      C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
                      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                      C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
                      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                      C:\WINDOWS\system32\ctfmon.exe
                      C:\Program Files\3RVX\3RVX.exe
                      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                      C:\Program Files\Digital Line Detect\DLG.exe
                      C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
                      C:\Program Files\Microsoft Office\Office\WINWORD.EXE
                      C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                      C:\Program Files\Internet Explorer\iexplore.exe
                      C:\Program Files\Google\Gmail Notifier\gnotify.exe
                      C:\WINDOWS\system32\cidaemon.exe
                      C:\WINDOWS\system32\cidaemon.exe
                      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                      C:\Program Files\Windows Live\Messenger\usnsvc.exe
                      C:\Documents and Settings\Benay Anthony\Bureau\skim.exe.exe

                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=6070104
                      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
                      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
                      O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
                      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
                      O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
                      O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
                      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                      O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
                      O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
                      O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
                      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
                      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
                      O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
                      O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
                      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKCU\..\Run: [3RVX.exe] C:\Program Files\3RVX\3RVX.exe
                      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                      O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
                      O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
                      O4 - Global Startup: Digital Line Detect.lnk = ?
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.euro.dell.com/systemprofiler/SysPro.CAB
                      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
                      O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.com/s/v/27.49/uploader2.cab
                      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
                      O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
                      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
                      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                      O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
                      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      O23 - Service: Advanced Networking Service (hnmsvc) - SingleClick Systems - C:\Program Files\Dell Network Assistant\hnm_svc.exe
                      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
                      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                      O23 - Service: License Management Service ESD - element5 - C:\Program Files\Fichiers communs\element5 Shared\Service\Licence Manager ESD.exe
                      O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                      O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
                      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                      O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
                      O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
                      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                      O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE
                  7. dou-l
                    On continue,

                    Redémarre ton ordinateur en mode sans échec
                    Ouvre le dossier SmitfraudFix
                    Double clic sur Smitfraud.cm choisis l'option 2 et Entrée
                    Réponds O aux deux questions suivantes:
                    -Voulez-vous nettoyer le registre ?
                    -Corriger le fichier infecté ?
                    Un rapport.txt sera généré et tu le postes pour contrôle.
                    1. Tenaille79
                      Voici le rapport demandé :

                      SmitFraudFix v2.309

                      Rapport fait à 18:36:15,78, 08/04/2008
                      Executé à partir de C:\Documents and Settings\Benay Anthony\Bureau\SmitfraudFix
                      OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                      Le type du système de fichiers est NTFS
                      Fix executé en mode sans echec

                      »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
                      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                      SrchSTS.exe by S!Ri
                      Search SharedTaskScheduler's .dll

                      »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

                      »»»»»»»»»»»»»»»»»»»»»»»» hosts

                      127.0.0.1 localhost
                      127.0.0.1 www.007guard.com
                      127.0.0.1 007guard.com
                      127.0.0.1 008i.com
                      127.0.0.1 www.008k.com
                      127.0.0.1 008k.com
                      127.0.0.1 www.00hq.com
                      127.0.0.1 00hq.com
                      127.0.0.1 010402.com
                      127.0.0.1 www.032439.com
                      127.0.0.1 032439.com
                      127.0.0.1 www.1001-search.info
                      127.0.0.1 1001-search.info
                      127.0.0.1 www.100888290cs.com
                      127.0.0.1 100888290cs.com
                      127.0.0.1 www.100sexlinks.com
                      127.0.0.1 100sexlinks.com
                      127.0.0.1 www.10sek.com
                      127.0.0.1 10sek.com
                      127.0.0.1 www.123topsearch.com
                      127.0.0.1 123topsearch.com
                      127.0.0.1 www.132.com
                      127.0.0.1 132.com
                      127.0.0.1 www.136136.net
                      127.0.0.1 136136.net
                      127.0.0.1 www.139mm.com
                      127.0.0.1 139mm.com
                      127.0.0.1 www.163ns.com
                      127.0.0.1 163ns.com
                      127.0.0.1 171203.com
                      127.0.0.1 17-plus.com
                      127.0.0.1 www.1800searchonline.com
                      127.0.0.1 1800searchonline.com
                      127.0.0.1 www.180searchassistant.com
                      127.0.0.1 180searchassistant.com
                      127.0.0.1 www.180solutions.com
                      127.0.0.1 180solutions.com
                      127.0.0.1 www.181.365soft.info
                      127.0.0.1 181.365soft.info
                      127.0.0.1 www.1987324.com
                      127.0.0.1 1987324.com
                      127.0.0.1 www.1-domains-registrations.com
                      127.0.0.1 1-domains-registrations.com
                      127.0.0.1 www.1-extreme.biz
                      127.0.0.1 1-extreme.biz
                      127.0.0.1 www.1sexparty.com
                      127.0.0.1 1sexparty.com
                      127.0.0.1 www.1stantivirus.com
                      127.0.0.1 1stantivirus.com
                      127.0.0.1 www.1stpagehere.com
                      127.0.0.1 1stpagehere.com
                      127.0.0.1 www.1stsearchportal.com
                      127.0.0.1 1stsearchportal.com
                      127.0.0.1 2.82211.net
                      127.0.0.1 www.2006ooo.com
                      127.0.0.1 www.2007-download.com
                      127.0.0.1 2007-download.com
                      127.0.0.1 www.2020search.com
                      127.0.0.1 2020search.com
                      127.0.0.1 20x2p.com
                      127.0.0.1 www.24.365soft.info
                      127.0.0.1 24.365soft.info
                      127.0.0.1 www.24-7pharmacy.info
                      127.0.0.1 24-7pharmacy.info
                      127.0.0.1 www.24-7searching-and-more.com
                      127.0.0.1 24-7searching-and-more.com
                      127.0.0.1 www.24teen.com
                      127.0.0.1 24teen.com
                      127.0.0.1 www.2every.net
                      127.0.0.1 2every.net
                      127.0.0.1 2ndpower.com
                      127.0.0.1 www.2search.com
                      127.0.0.1 2search.com
                      127.0.0.1 www.2search.org
                      127.0.0.1 2search.org
                      127.0.0.1 www.2squared.com
                      127.0.0.1 2squared.com
                      127.0.0.1 www.3322.org
                      127.0.0.1 3322.org
                      127.0.0.1 365soft.info
                      127.0.0.1 www.36site.com
                      127.0.0.1 36site.com
                      127.0.0.1 3721.com
                      127.0.0.1 39-93.com
                      127.0.0.1 www.3abetterinternet.com
                      127.0.0.1 3abetterinternet.com
                      127.0.0.1 www.3bay.it
                      127.0.0.1 3bay.it
                      127.0.0.1 www.3ebay.it
                      127.0.0.1 3ebay.it
                      127.0.0.1 www.3xclipsonline.com
                      127.0.0.1 3xclipsonline.com
                      127.0.0.1 www.3xcurves.com
                      127.0.0.1 3xcurves.com
                      127.0.0.1 www.3xfestival.com
                      127.0.0.1 3xfestival.com
                      127.0.0.1 www.3x-festival.com
                      127.0.0.1 3x-festival.com
                      127.0.0.1 www.3x-galls.com
                      127.0.0.1 3x-galls.com
                      127.0.0.1 www.3xmiracle.com
                      127.0.0.1 3xmiracle.com
                      127.0.0.1 www.3xmoviesblog.com
                      127.0.0.1 3xmoviesblog.com
                      127.0.0.1 www.404dns.com
                      127.0.0.1 404dns.com
                      127.0.0.1 www.4199.com
                      127.0.0.1 4199.com
                      127.0.0.1 www.4corn.net
                      127.0.0.1 4corn.net
                      127.0.0.1 www.4ebay.it
                      127.0.0.1 4ebay.it
                      127.0.0.1 4klm.com
                      127.0.0.1 www.4mpg.com
                      127.0.0.1 4mpg.com
                      127.0.0.1 www.4repubblica.it
                      127.0.0.1 4repubblica.it
                      127.0.0.1 www.4softget.com
                      127.0.0.1 4softget.com
                      127.0.0.1 www.5iscali.it
                      127.0.0.1 5iscali.it
                      127.0.0.1 www.5repubblica.it
                      127.0.0.1 5repubblica.it
                      127.0.0.1 www.5starvideos.com
                      127.0.0.1 5starvideos.com
                      127.0.0.1 www.5tiscali.it
                      127.0.0.1 5tiscali.it
                      127.0.0.1 www.5zgmu7o20kt5d8yq.com
                      127.0.0.1 5zgmu7o20kt5d8yq.com
                      127.0.0.1 www.680180.net
                      127.0.0.1 680180.net
                      127.0.0.1 www.6iscali.it
                      127.0.0.1 6iscali.it
                      127.0.0.1 www.6njaga.com
                      127.0.0.1 6njaga.com
                      127.0.0.1 www.6sek.com
                      127.0.0.1 6sek.com
                      127.0.0.1 www.6tiscali.it
                      127.0.0.1 6tiscali.it
                      127.0.0.1 www.70-music.com
                      127.0.0.1 70-music.com
                      127.0.0.1 www.7322.com
                      127.0.0.1 7322.com
                      127.0.0.1 75tz.com
                      127.0.0.1 www.777search.com
                      127.0.0.1 777search.com
                      127.0.0.1 www.777top.com
                      127.0.0.1 777top.com
                      127.0.0.1 www.7939.com
                      127.0.0.1 7939.com
                      127.0.0.1 www.7search.com
                      127.0.0.1 7search.com
                      127.0.0.1 80gw6ry3i3x3qbrkwhxhw.032439.com
                      127.0.0.1 www.80-music.com
                      127.0.0.1 80-music.com
                      127.0.0.1 82211.net
                      127.0.0.1 8866.org
                      127.0.0.1 www.888.com
                      127.0.0.1 888.com
                      127.0.0.1 www.8ad.com
                      127.0.0.1 8ad.com
                      127.0.0.1 www.90-music.com
                      127.0.0.1 90-music.com
                      127.0.0.1 www.9505.com
                      127.0.0.1 9505.com
                      127.0.0.1 www.971searchbox.com
                      127.0.0.1 971searchbox.com
                      127.0.0.1 a.bestmanage.org
                      127.0.0.1 www.aaabesthomepage.com
                      127.0.0.1 aaabesthomepage.com
                      127.0.0.1 aaasexypics.com
                      127.0.0.1 www.aaawebfinder.com
                      127.0.0.1 aaawebfinder.com
                      127.0.0.1 www.aaqadarsztriv.com
                      127.0.0.1 aaqadarsztriv.com
                      127.0.0.1 www.aaqada-rsztriv.com
                      127.0.0.1 aaqada-rsztriv.com
                      127.0.0.1 www.aaqadaueorn.com
                      127.0.0.1 aaqadaueorn.com
                      127.0.0.1 www.aaqada-ueorn.com
                      127.0.0.1 aaqada-ueorn.com
                      127.0.0.1 www.aaqada-ygco.com
                      127.0.0.1 aaqada-ygco.com
                      127.0.0.1 www.aaqada-ymct.com
                      127.0.0.1 aaqada-ymct.com
                      127.0.0.1 aavc.com
                      127.0.0.1 www.abcdperformance.com
                      127.0.0.1 abcdperformance.com
                      127.0.0.1 www.abc-find.info
                      127.0.0.1 abc-find.info
                      127.0.0.1 www.abcsearch.com
                      127.0.0.1 abcsearch.com
                      127.0.0.1 www.abetterinternet.com
                      127.0.0.1 abetterinternet.com
                      127.0.0.1 www.abnetsoft.info
                      127.0.0.1 abnetsoft.info
                      127.0.0.1 www.aboutclicker.com
                      127.0.0.1 aboutclicker.com
                      127.0.0.1 www.abrp.net
                      127.0.0.1 abrp.net
                      127.0.0.1 www.absolutee.com
                      127.0.0.1 absolutee.com
                      127.0.0.1 www.abyssmedia.com
                      127.0.0.1 abyssmedia.com
                      127.0.0.1 www.ac66.cn
                      127.0.0.1 ac66.cn
                      127.0.0.1 access.Navinetwork.com
                      127.0.0.1 access.rapid-pass.net
                      127.0.0.1 www.accessactivexvideo.com
                      127.0.0.1 accessactivexvideo.com
                      127.0.0.1 www.accessclips.com
                      127.0.0.1 accessclips.com
                      127.0.0.1 www.access-dvd.com
                      127.0.0.1 access-dvd.com
                      127.0.0.1 www.accesskeygenerator.com
                      127.0.0.1 accesskeygenerator.com
                      127.0.0.1 www.accessorygeeks.com
                      127.0.0.1 accessorygeeks.com
                      127.0.0.1 www.accessthefuture.net
                      127.0.0.1 accessthefuture.net
                      127.0.0.1 www.accessvid.net
                      127.0.0.1 accessvid.net
                      127.0.0.1 www.acemedic.com
                      127.0.0.1 acemedic.com
                      127.0.0.1 www.ace-webmaster.com
                      127.0.0.1 ace-webmaster.com
                      127.0.0.1 acjp.com
                      127.0.0.1 www.acrobat-2007.com
                      127.0.0.1 acrobat-2007.com
                      127.0.0.1 www.acrobat-8.com
                      127.0.0.1 acrobat-8.com
                      127.0.0.1 www.acrobat-center.com
                      127.0.0.1 acrobat-center.com
                      127.0.0.1 www.acrobat-hq.com
                      127.0.0.1 acrobat-hq.com
                      127.0.0.1 www.acrobatreader-8.com
                      127.0.0.1 acrobatreader-8.com
                      127.0.0.1 www.acrobat-reader-8.de
                      127.0.0.1 acrobat-reader-8.de
                      127.0.0.1 www.acrobat-stop.com
                      127.0.0.1 acrobat-stop.com
                      127.0.0.1 www.actionbreastcancer.org
                      127.0.0.1 actionbreastcancer.org
                      127.0.0.1 www.activesearcher.info
                      127.0.0.1 activesearcher.info
                      127.0.0.1 www.activexaccessobject.com
                      127.0.0.1 activexaccessobject.com
                      127.0.0.1 www.activexaccessvideo.com
                      127.0.0.1 activexaccessvideo.com
                      127.0.0.1 www.activexemedia.com
                      127.0.0.1 activexemedia.com
                      127.0.0.1 www.activexmediaobject.com
                      127.0.0.1 activexmediaobject.com
                      127.0.0.1 www.activexmediapro.com
                      127.0.0.1 activexmediapro.com
                      127.0.0.1 www.activexmediasite.com
                      127.0.0.1 activexmediasite.com
                      127.0.0.1 www.activexmediasoftware.com
                      127.0.0.1 activexmediasoftware.com
                      127.0.0.1 www.activexmediasource.com
                      127.0.0.1 activexmediasource.com
                      127.0.0.1 www.activexmediatool.com
                      127.0.0.1 activexmediatool.com
                      127.0.0.1 www.activexmediatour.com
                      127.0.0.1 activexmediatour.com
                      127.0.0.1 www.activexsoftwares.com
                      127.0.0.1 activexsoftwares.com
                      127.0.0.1 www.activexsource.com
                      127.0.0.1 activexsource.com
                      127.0.0.1 www.activexupdate.com
                      127.0.0.1 activexupdate.com
                      127.0.0.1 www.activexvideo.com
                      127.0.0.1 activexvideo.com
                      127.0.0.1 www.activexvideotool.com
                      127.0.0.1 activexvideotool.com
                      127.0.0.1 www.ad.marketingsector.com
                      127.0.0.1 ad.marketingsector.com
                      127.0.0.1 www.ad.mokead.com
                      127.0.0.1 ad.mokead.com
                      127.0.0.1 ad.oinadserver.com
                      127.0.0.1 ad.outerinfoads.com
                      127.0.0.1 www.ad.yieldmanager.com
                      127.0.0.1 ad.yieldmanager.com
                      127.0.0.1 ad25.com
                      127.0.0.1 ad45.com
                      127.0.0.1 ad77.com
                      127.0.0.1 ad86.com
                      127.0.0.1 www.adamsupportgroup.org
                      127.0.0.1 adamsupportgroup.org
                      127.0.0.1 www.adarmor.com
                      127.0.0.1 adarmor.com
                      127.0.0.1 www.adasearch.com
                      127.0.0.1 adasearch.com
                      127.0.0.1 adaware.cc
                      127.0.0.1 www.adawarenow.com
                      127.0.0.1 adawarenow.com
                      127.0.0.1 adchannel.contextplus.net
                      127.0.0.1 www.addetect.com
                      127.0.0.1 addetect.com
                      127.0.0.1 www.addictivetechnologies.com
                      127.0.0.1 addictivetechnologies.com
                      127.0.0.1 www.addictivetechnologies.net
                      127.0.0.1 addictivetechnologies.net
                      127.0.0.1 www.addioerrori.com
                      127.0.0.1 addioerrori.com
                      127.0.0.1 www.add-manager.com
                      127.0.0.1 add-manager.com
                      127.0.0.1 www.adgate.info
                      127.0.0.1 adgate.info
                      127.0.0.1 www.adioserrores.com
                      127.0.0.1 adioserrores.com
                      127.0.0.1 www.adipics.com
                      127.0.0.1 adipics.com
                      127.0.0.1 www.adlogix.com
                      127.0.0.1 adlogix.com
                      127.0.0.1 www.admin2cash.biz
                      127.0.0.1 admin2cash.biz
                      127.0.0.1 adnet-plus.com
                      127.0.0.1 www.adnetserver.com
                      127.0.0.1 adnetserver.com
                      127.0.0.1 adobe-download-now.com
                      127.0.0.1 www.adobe-downloads.com
                      127.0.0.1 adobe-downloads.com
                      127.0.0.1 www.adobe-reader-8.fr
                      127.0.0.1 adobe-reader-8.fr
                      127.0.0.1 www.adprotect.com
                      127.0.0.1 adprotect.com
                      127.0.0.1 ads.centralmedia.ws
                      127.0.0.1 ads.k8l.info
                      127.0.0.1 ads.kmpads.com
                      127.0.0.1 ads.kw.revenue.net
                      127.0.0.1 ads.marketingsector.com
                      127.0.0.1 ads.searchingbooth.com
                      127.0.0.1 ads.z-quest.com
                      127.0.0.1 ads1.revenue.net
                      127.0.0.1 www.ads183.com
                      127.0.0.1 ads183.com
                      127.0.0.1 www.adscontex.com
                      127.0.0.1 adscontex.com
                      127.0.0.1 www.adservices1.enhance.com
                      127.0.0.1 adservices1.enhance.com
                      127.0.0.1 adservs.com
                      127.0.0.1 www.adsextend.net
                      127.0.0.1 adsextend.net
                      127.0.0.1 www.adshttp.com
                      127.0.0.1 adshttp.com
                      127.0.0.1 www.adsniffer.com
                      127.0.0.1 adsniffer.com
                      127.0.0.1 www.adsonwww.com
                      127.0.0.1 adsonwww.com
                      127.0.0.1 www.adspics.com
                      127.0.0.1 adspics.com
                      127.0.0.1 www.adsrevenue.net
                      127.0.0.1 adsrevenue.net
                      127.0.0.1 www.adtrak.net
                      127.0.0.1 adtrak.net
                      127.0.0.1 adtrgt.com
                      127.0.0.1 www.adult777search.info
                      127.0.0.1 adult777search.info
                      127.0.0.1 www.adultan.com
                      127.0.0.1 adultan.com
                      127.0.0.1 www.adult-engine-search.com
                      127.0.0.1 adult-engine-search.com
                      127.0.0.1 www.adult-erotic-guide.net
                      127.0.0.1 adult-erotic-guide.net
                      127.0.0.1 www.adultfilmsite.com
                      127.0.0.1 adultfilmsite.com
                      127.0.0.1 www.adult-friends-finder.net
                      127.0.0.1 adult-friends-finder.net
                      127.0.0.1 adultgambling.org
                      127.0.0.1 adult-host.org
                      127.0.0.1 www.adulthyperlinks.com
                      127.0.0.1 adulthyperlinks.com
                      127.0.0.1 www.adultmovieplus.com
                      127.0.0.1 adultmovieplus.com
                      127.0.0.1 www.adult-mpg.net
                      127.0.0.1 adult-mpg.net
                      127.0.0.1 adult-personal.us
                      127.0.0.1 adultsgames.net
                      127.0.0.1 www.adultsonlyvids.com
                      127.0.0.1 adultsonlyvids.com
                      127.0.0.1 www.adultsper.com
                      127.0.0.1 adultsper.com
                      127.0.0.1 www.adulttds.com
                      127.0.0.1 adulttds.com
                      127.0.0.1 www.adultzoneworld.com
                      127.0.0.1 adultzoneworld.com
                      127.0.0.1 www.advcash.biz
                      127.0.0.1 advcash.biz
                      127.0.0.1 advert.exaccess.ru
                      127.0.0.1 www.advertisemoney.info
                      127.0.0.1 advertisemoney.info
                      127.0.0.1 advertising.paltalk.com
                      127.0.0.1 www.advertising-money.info
                      127.0.0.1 advertising-money.info
                      127.0.0.1 ad-ware.cc
                      127.0.0.1 www.ad-w-a-r-e.com
                      127.0.0.1 ad-w-a-r-e.com
                      127.0.0.1 www.a-d-w-a-r-e.com
                      127.0.0.1 a-d-w-a-r-e.com
                      127.0.0.1 www.adwarebazooka.com
                      127.0.0.1 adwarebazooka.com
                      127.0.0.1 www.adwarecommander.com
                      127.0.0.1 adwarecommander.com
                      127.0.0.1 www.adwarefinder.com
                      127.0.0.1 adwarefinder.com
                      127.0.0.1 www.adwaregold.com
                      127.0.0.1 adwaregold.com
                      127.0.0.1 www.adwarepatrol.com
                      127.0.0.1 adwarepatrol.com
                      127.0.0.1 www.adwareplatinum.com
                      127.0.0.1 adwareplatinum.com
                      127.0.0.1 www.adwareprotectionsite.com
                      127.0.0.1 adwareprotectionsite.com
                      127.0.0.1 www.adwarepunisher.com
                      127.0.0.1 adwarepunisher.com
                      127.0.0.1 www.adwareremover.ws
                      127.0.0.1 adwareremover.ws
                      127.0.0.1 www.adwaresafety.com
                      127.0.0.1 adwaresafety.com
                      127.0.0.1 www.adwarexp.com
                      127.0.0.1 adwarexp.com
                      127.0.0.1 affiliate.idownload.com
                      127.0.0.1 www.aflgate.com
                      127.0.0.1 aflgate.com
                      127.0.0.1 africaspromise.org
                      127.0.0.1 agava.com
                      127.0.0.1 agava.ru
                      127.0.0.1 agentstudio.com
                      127.0.0.1 www.aginegialle.it
                      127.0.0.1 aginegialle.it
                      127.0.0.1 aifind.info
                      127.0.0.1 www.aifind.info
                      127.0.0.1 www.airtleworld.com
                      127.0.0.1 airtleworld.com
                      127.0.0.1 www.aitalia.it
                      127.0.0.1 aitalia.it
                      127.0.0.1 akamai.downloadv3.com
                      127.0.0.1 www.aklitalia.it
                      127.0.0.1 aklitalia.it
                      127.0.0.1 akril.com
                      127.0.0.1 alcatel.ws
                      127.0.0.1 www.alertspy.com
                      127.0.0.1 alertspy.com
                      127.0.0.1 www.alfacleaner.com
                      127.0.0.1 alfacleaner.com
                      127.0.0.1 alfa-search.com
                      127.0.0.1 www.alialia.it
                      127.0.0.1 alialia.it
                      127.0.0.1 www.aliotalia.it
                      127.0.0.1 aliotalia.it
                      127.0.0.1 www.alirtalia.it
                      127.0.0.1 alirtalia.it
                      127.0.0.1 www.alitaia.it
                      127.0.0.1 alitaia.it
                      127.0.0.1 www.alitaklia.it
                      127.0.0.1 alitaklia.it
                      127.0.0.1 www.alitala.it
                      127.0.0.1 alitala.it
                      127.0.0.1 www.alitali.it
                      127.0.0.1 alitali.it
                      127.0.0.1 www.alitaliaq.it
                      127.0.0.1 alitaliaq.it
                      127.0.0.1 www.alitalias.it
                      127.0.0.1 alitalias.it
                      127.0.0.1 www.alitaliaz.it
                      127.0.0.1 alitaliaz.it
                      127.0.0.1 www.alitalioa.it
                      127.0.0.1 alitalioa.it
                      127.0.0.1 www.alitalisa.it
                      127.0.0.1 alitalisa.it
                      127.0.0.1 www.alitaliua.it
                      127.0.0.1 alitaliua.it
                      127.0.0.1 www.alitalkia.it
                      127.0.0.1 alitalkia.it
                      127.0.0.1 www.alitaloia.it
                      127.0.0.1 alitaloia.it
                      127.0.0.1 www.alitaluia.it
                      127.0.0.1 alitaluia.it
                      127.0.0.1 www.alitaslia.it
                      127.0.0.1 alitaslia.it
                      127.0.0.1 www.alitlia.it
                      127.0.0.1 alitlia.it
                      127.0.0.1 www.alitralia.it
                      127.0.0.1 alitralia.it
                      127.0.0.1 www.alitsalia.it
                      127.0.0.1 alitsalia.it
                      127.0.0.1 www.aliutalia.it
                      127.0.0.1 aliutalia.it
                      127.0.0.1 www.ALL1COUNT.NET
                      127.0.0.1 ALL1COUNT.NET
                      127.0.0.1 www.all4internet.com
                      127.0.0.1 all4internet.com
                      127.0.0.1 allabtcars.com
                      127.0.0.1 allabtjeeps.com
                      127.0.0.1 www.all-bittorrent.com
                      127.0.0.1 all-bittorrent.com
                      127.0.0.1 allcybersearch.com
                      127.0.0.1 www.allcybersearch.com
                      127.0.0.1 www.alldnserrors.com
                      127.0.0.1 alldnserrors.com
                      127.0.0.1 www.all-downloads-now.com
                      127.0.0.1 all-downloads-now.com
                      127.0.0.1 www.all-edonkey.com
                      127.0.0.1 all-edonkey.com
                      127.0.0.1 www.allertaminacce.com
                      127.0.0.1 allertaminacce.com
                      127.0.0.1 allforadult.com
                      127.0.0.1 allhyperlinks.com
                      127.0.0.1 www.alliesecurity.com
                      127.0.0.1 alliesecurity.com
                      127.0.0.1 all-inet.com
                      127.0.0.1 allinternetbusiness.com
                      127.0.0.1 www.all-limewire.com
                      127.0.0.1 all-limewire.com
                      127.0.0.1 www.allmegabucks.com
                      127.0.0.1 allmegabucks.com
                      127.0.0.1 www.allprotections.com
                      127.0.0.1 allprotections.com
                      127.0.0.1 www.allresultz.net
                      127.0.0.1 allresultz.net
                      127.0.0.1 www.allsearch.us
                      127.0.0.1 allsearch.us
                      127.0.0.1 www.allsecuritynotes.com
                      127.0.0.1 allsecuritynotes.com
                      127.0.0.1 www.allsecuritysite.com
                      127.0.0.1 allsecuritysite.com
                      127.0.0.1 www.allstarsvideos.net
                      127.0.0.1 allstarsvideos.net
                      127.0.0.1 www.alltiettantivirus.com
                      127.0.0.1 alltiettantivirus.com
                      127.0.0.1 www.alltruesoftware.com
                      127.0.0.1 alltruesoftware.com
                      127.0.0.1 www.allvideoactivex.com
                      127.0.0.1 allvideoactivex.com
                      127.0.0.1 www.almanah.biz
                      127.0.0.1 almanah.biz
                      127.0.0.1 almarvideos.com
                      127.0.0.1 www.aloitalia.it
                      127.0.0.1 aloitalia.it
                      127.0.0.1 www.aluitalia.it
                      127.0.0.1 aluitalia.it
                      127.0.0.1 www.amaena.com
                      127.0.0.1 amaena.com
                      127.0.0.1 amandamountains.com
                      127.0.0.1 www.amateurliveshow.com
                      127.0.0.1 amateurliveshow.com
                      127.0.0.1 www.amediasoftware.com
                      127.0.0.1 amediasoftware.com
                      127.0.0.1 www.amediasource.com
                      127.0.0.1 amediasource.com
                      127.0.0.1 www.americanautobargains.com
                      127.0.0.1 americanautobargains.com
                      127.0.0.1 www.americancarbargains.com
                      127.0.0.1 americancarbargains.com
                      127.0.0.1 american-teens.net
                      127.0.0.1 amigeek.com
                      127.0.0.1 www.amigobore.com
                      127.0.0.1 amigobore.com
                      127.0.0.1 amisbusiness.com
                      127.0.0.1 www.ampmsearch.com
                      127.0.0.1 ampmsearch.com
                      127.0.0.1 www.analcord.com
                      127.0.0.1 analcord.com
                      127.0.0.1 analmovi.com
                      127.0.0.1 www.anarchylolita.com
                      127.0.0.1 anarchylolita.com
                      127.0.0.1 anarchyporn.com
                      127.0.0.1 www.andromedical.com
                      127.0.0.1 andromedical.com
                      127.0.0.1 www.animepornmag.com
                      127.0.0.1 animepornmag.com
                      127.0.0.1 anin.org
                      127.0.0.1 www.anjpn-avxiz.biz
                      127.0.0.1 anjpn-avxiz.biz
                      127.0.0.1 www.anjpnzqav.biz
                      127.0.0.1 anjpnzqav.biz
                      127.0.0.1 www.anjpn-zqav.biz
                      127.0.0.1 anjpn-zqav.biz
                      127.0.0.1 annaromeo.com
                      127.0.0.1 www.antiddos.us
                      127.0.0.1 antiddos.us
                      127.0.0.1 www.Antiespiadorado.com
                      127.0.0.1 Antiespiadorado.com
                      127.0.0.1 www.Antiespionspack.com
                      127.0.0.1 Antiespionspack.com
                      127.0.0.1 www.Antigusanos2008.com
                      127.0.0.1 Antigusanos2008.com
                      127.0.0.1 www.antispamassistant.com
                      127.0.0.1 antispamassistant.com
                      127.0.0.1 www.antispamdeluxe.com
                      127.0.0.1 antispamdeluxe.com
                      127.0.0.1 www.Antispionage.com
                      127.0.0.1 Antispionage.com
                      127.0.0.1 www.Antispionagepro.com
                      127.0.0.1 Antispionagepro.com
                      127.0.0.1 www.antispyadvanced.com
                      127.0.0.1 antispyadvanced.com
                      127.0.0.1 www.antispydns.biz
                      127.0.0.1 antispydns.biz
                      127.0.0.1 www.antispylab.com
                      127.0.0.1 antispylab.com
                      127.0.0.1 www.antispysolutions.com
                      127.0.0.1 antispysolutions.com
                      127.0.0.1 www.antispyware.com
                      127.0.0.1 antispyware.com
                      127.0.0.1 www.antispywareboot.com
                      127.0.0.1 antispywareboot.com
                      127.0.0.1 www.antispywarebot.com
                      127.0.0.1 antispywarebot.com
                      127.0.0.1 www.antispywarebox.com
                      127.0.0.1 antispywarebox.com
                      127.0.0.1 www.antispywaredownloads.com
                      127.0.0.1 antispywaredownloads.com
                      127.0.0.1 antispywaresuite.com
                      127.0.0.1 www.antispywaresuite.com
                      127.0.0.1 Antispywaresuite.com
                      127.0.0.1 www.Antispywaresuite.com
                      127.0.0.1 www.antispywarexp.com
                      127.0.0.1 antispywarexp.com
                      127.0.0.1 www.Antispyweb.net
                      127.0.0.1 Antispyweb.net
                      127.0.0.1 www.Antiver2008.com
                      127.0.0.1 Antiver2008.com
                      127.0.0.1 www.antivermins.com
                      127.0.0.1 antivermins.com
                      127.0.0.1 www.anti-vermins.com
                      127.0.0.1 anti-vermins.com
                      127.0.0.1 www.antivir2007.com
                      127.0.0.1 antivir2007.com
                      127.0.0.1 www.antivirgear.com
                      127.0.0.1 antivirgear.com
                      127.0.0.1 www.antivirus.fastfreedownload.com
                      127.0.0.1 antivirus.fastfreedownload.com
                      127.0.0.1 www.antivirusadvance.com
                      127.0.0.1 antivirusadvance.com
                      127.0.0.1 www.antivirusaskeladd.com
                      127.0.0.1 antivirusaskeladd.com
                      127.0.0.1 www.antivirusgereedschap.com
                      127.0.0.1 antivirusgereedschap.com
                      127.0.0.1 www.antivirusgolden.com
                      127.0.0.1 antivirusgolden.com
                      127.0.0.1 www.antivirus-hq.net
                      127.0.0.1 antivirus-hq.net
                      127.0.0.1 www.antiviruspcsuite.com
                      127.0.0.1 antiviruspcsuite.com
                      127.0.0.1 www.antiviruspremium.com
                      127.0.0.1 antiviruspremium.com
                      127.0.0.1 www.anti-virus-pro.com
                      127.0.0.1 anti-virus-pro.com
                      127.0.0.1 www.antivirusprotector.com
                      127.0.0.1 antivirusprotector.com
                      127.0.0.1 www.antivirusscherm.com
                      127.0.0.1 antivirusscherm.com
                      127.0.0.1 www.antivirussecuritypro.com
                      127.0.0.1 antivirussecuritypro.com
                      127.0.0.1 www.antivirus-stop.com
                      127.0.0.1 antivirus-stop.com
                      127.0.0.1 antiworm2008.com
                      127.0.0.1 www.antiworm2008.com
                      127.0.0.1 Antiworm2008.com
                      127.0.0.1 www.Antiworm2008.com
                      127.0.0.1 www.Antiwurm2008.com
                      127.0.0.1 Antiwurm2008.com
                      127.0.0.1 antrocity.com
                      127.0.0.1 www.anyofus.com
                      127.0.0.1 anyofus.com
                      127.0.0.1 www.anysn.seproger.com
                      127.0.0.1 anysn.seproger.com
                      127.0.0.1 anything4health.com
                      127.0.0.1 www.apicpreview.com
                      127.0.0.1 apicpreview.com
                      127.0.0.1 www.appealcircuit.com
                      127.0.0.1 appealcircuit.com
                      127.0.0.1 www.approvedlinks.com
                      127.0.0.1 approvedlinks.com
                      127.0.0.1 apps.deskwizz.com
                      127.0.0.1 apps.webservicehost.com
                      127.0.0.1 www.aprotectedpage.com
                      127.0.0.1 aprotectedpage.com
                      127.0.0.1 apsua.com
                      127.0.0.1 www.archivioadulti.com
                      127.0.0.1 archivioadulti.com
                      127.0.0.1 www.archiviosex.net
                      127.0.0.1 archiviosex.net
                      127.0.0.1 aregay.com
                      127.0.0.1 www.ares.click-new-download.com
                      127.0.0.1 ares.click-new-download.com
                      127.0.0.1 www.ares-freebie.com
                      127.0.0.1 ares-freebie.com
                      127.0.0.1 www.arespro2007.com
                      127.0.0.1 arespro2007.com
                      127.0.0.1 www.aresultra.com
                      127.0.0.1 aresultra.com
                      127.0.0.1 www.ares-usa.com
                      127.0.0.1 ares-usa.com
                      127.0.0.1 arheo.com
                      127.0.0.1 arizonaweb.org
                      127.0.0.1 armitageinn.com
                      127.0.0.1 www.arquivojpgs.smtp.ru
                      127.0.0.1 arquivojpgs.smtp.ru
                      127.0.0.1 artachnid.com
                      127.0.0.1 art-func.com
                      127.0.0.1 art-xxx.com
                      127.0.0.1 www.asafebrowser.com
                      127.0.0.1 asafebrowser.com
                      127.0.0.1 www.asafetyalways.com
                      127.0.0.1 asafetyalways.com
                      127.0.0.1 www.asafetynotice.com
                      127.0.0.1 asafetynotice.com
                      127.0.0.1 www.asafetypage.com
                      127.0.0.1 asafetypage.com
                      127.0.0.1 www.asdbiz.biz
                      127.0.0.1 asdbiz.biz
                      127.0.0.1 www.asdeykuddq.com
                      127.0.0.1 asdeykuddq.com
                      127.0.0.1 www.asecurebar.com
                      127.0.0.1 asecurebar.com
                      127.0.0.1 www.asecureboard.com
                      127.0.0.1 asecureboard.com
                      127.0.0.1 www.asecurevalue.com
                      127.0.0.1 asecurevalue.com
                      127.0.0.1 www.asecurityissue.com
                      127.0.0.1 asecurityissue.com
                      127.0.0.1 www.asecuritynotice.com
                      127.0.0.1 asecuritynotice.com
                      127.0.0.1 www.asecuritypaper.com
                      127.0.0.1 asecuritypaper.com
                      127.0.0.1 www.asecuritystuff.com
                      127.0.0.1 asecuritystuff.com
                      127.0.0.1 asiankingkong.com
                      127.0.0.1 www.asianpornmag.com
                      127.0.0.1 asianpornmag.com
                      127.0.0.1 www.asiantoolbar.com
                      127.0.0.1 asiantoolbar.com
                      127.0.0.1 www.asidseiupc.com
                      127.0.0.1 asidseiupc.com
                      127.0.0.1 www.aslitalia.it
                      127.0.0.1 aslitalia.it
                      127.0.0.1 ass-gals.com
                      127.0.0.1 www.assureprotection.com
                      127.0.0.1 assureprotection.com
                      127.0.0.1 asta-killer.com
                      127.0.0.1 www.asupereva.it
                      127.0.0.1 asupereva.it
                      127.0.0.1 www.ataprogram.com
                      127.0.0.1 ataprogram.com
                      127.0.0.1 athenrye.com
                      127.0.0.1 www.atotalsafety.com
                      127.0.0.1 atotalsafety.com
                      127.0.0.1 www.atrueprotection.com
                      127.0.0.1 atrueprotection.com
                      127.0.0.1 www.atruesecurity.com
                      127.0.0.1 atruesecurity.com
                      127.0.0.1 www.attackware.com
                      127.0.0.1 attackware.com
                      127.0.0.1 www.attrezzi.biz
                      127.0.0.1 attrezzi.biz
                      127.0.0.1 www.aucunsvirus.com
                      127.0.0.1 aucunsvirus.com
                      127.0.0.1 www.aulde.net
                      127.0.0.1 aulde.net
                      127.0.0.1 www.aupereva.it
                      127.0.0.1 aupereva.it
                      127.0.0.1 www.autobargains.org
                      127.0.0.1 autobargains.org
                      127.0.0.1 www.autobargainsnetwork.com
                      127.0.0.1 autobargainsnetwork.com
                      127.0.0.1 www.autocontext.begun.ru
                      127.0.0.1 autocontext.begun.ru
                      127.0.0.1 autoescrowpay.com
                      127.0.0.1 www.avadvance.com
                      127.0.0.1 avadvance.com
                      127.0.0.1 www.avast.free-software-center.com
                      127.0.0.1 avast.free-software-center.com
                      127.0.0.1 www.avast-2007.com
                      127.0.0.1 avast-2007.com
                      127.0.0.1 www.avast-downloads.com
                      127.0.0.1 avast-downloads.com
                      127.0.0.1 www.avast-hq.com
                      127.0.0.1 avast-hq.com
                      127.0.0.1 www.avforce.com
                      127.0.0.1 avforce.com
                      127.0.0.1 www.avg.grab-it-today.net
                      127.0.0.1 avg.grab-it-today.net
                      127.0.0.1 www.avg.softwarecenterz.com
                      127.0.0.1 avg.softwarecenterz.com
                      127.0.0.1 www.avg-secure.com
                      127.0.0.1 avg-secure.com
                      127.0.0.1 avian-ads.com
                      127.0.0.1 www.avideoaxaccess.com
                      127.0.0.1 avideoaxaccess.com
                      127.0.0.1 www.avideosurfer.com
                      127.0.0.1 avideosurfer.com
                      127.0.0.1 www.aviewersoft.com
                      127.0.0.1 aviewersoft.com
                      127.0.0.1 www.avpcheckupdate.com
                      127.0.0.1 avpcheckupdate.com
                      127.0.0.1 www.avsmanufacture.com
                      127.0.0.1 avsmanufacture.com
                      127.0.0.1 www.avsystemcare.com
                      127.0.0.1 avsystemcare.com
                      127.0.0.1 www.avxizaaqada.biz
                      127.0.0.1 avxizaaqada.biz
                      127.0.0.1 www.avxiz-anjpn.biz
                      127.0.0.1 avxiz-anjpn.biz
                      127.0.0.1 www.avxizueorn.biz
                      127.0.0.1 avxizueorn.biz
                      127.0.0.1 www.avxiz-ueorn.biz
                      127.0.0.1 avxiz-ueorn.biz
                      127.0.0.1 www.avxiz-vtvcp.biz
                      127.0.0.1 avxiz-vtvcp.biz
                      127.0.0.1 www.avxiz-ygco.biz
                      127.0.0.1 avxiz-ygco.biz
                      127.0.0.1 www.avxiz-zqav.biz
                      127.0.0.1 avxiz-zqav.biz
                      127.0.0.1 www.awarenesstech.com
                      127.0.0.1 awarenesstech.com
                      127.0.0.1 www.awarninglist.com
                      127.0.0.1 awarninglist.com
                      127.0.0.1 awbeta.net-nucleus.com
                      127.0.0.1 www.awesomehomepage.com
                      127.0.0.1 awesomehomepage.com
                      127.0.0.1 awmcash.biz
                      127.0.0.1 awmdabest.com
                      127.0.0.1 www.axemediasoftware.com
                      127.0.0.1 axemediasoftware.com
                      127.0.0.1 www.aximageobject.com
                      127.0.0.1 aximageobject.com
                      127.0.0.1 www.axmediaproject.com
                      127.0.0.1 axmediaproject.com
                      127.0.0.1 www.axmediasoftware.com
                      127.0.0.1 axmediasoftware.com
                      127.0.0.1 www.axmediasolutions.com
                      127.0.0.1 axmediasolutions.com
                      127.0.0.1 www.axobjectpage.com
                      127.0.0.1 axobjectpage.com
                      127.0.0.1 www.axobjectsource.com
                      127.0.0.1 axobjectsource.com
                      127.0.0.1 www.axsoftwaretool.com
                      127.0.0.1 axsoftwaretool.com
                      127.0.0.1 www.axvideoproject.com
                      127.0.0.1 axvideoproject.com
                      127.0.0.1 www.axvideosetup.com
                      127.0.0.1 axvideosetup.com
                      127.0.0.1 ayakawamura.com
                      127.0.0.1 ayb.dns-look-up.com
                      127.0.0.1 ayb.netbios-wait.com
                      127.0.0.1 ayumitaniguchi.com
                      127.0.0.1 azebar.com
                      127.0.0.1 www.azureusclub.com
                      127.0.0.1 azureusclub.com
                      127.0.0.1 www.azureus-freebie.com
                      127.0.0.1 azureus-freebie.com
                      127.0.0.1 www.azzetta.it
                      127.0.0.1 azzetta.it
                      127.0.0.1 b.casalemedia.com
                      127.0.0.1 b122.mcboo.com
                      127.0.0.1 www.babe.k-lined.com
                      127.0.0.1 babe.k-lined.com
                      127.0.0.1 www.babe.the-killer.bz
                      127.0.0.1 babe.the-killer.bz
                      127.0.0.1 www.babenet.com
                      127.0.0.1 babenet.com
                      127.0.0.1 www.babespornmag.com
                      127.0.0.1 babespornmag.com
                      127.0.0.1 www.babeweb.de
                      127.0.0.1 babeweb.de
                      127.0.0.1 www.baccarat-other.info
                      127.0.0.1 baccarat-other.info
                      127.0.0.1 www.Backstripgirls.com
                      127.0.0.1 Backstripgirls.com
                      127.0.0.1 backup.mabou.org
                      127.0.0.1 www.balotierra.com
                      127.0.0.1 balotierra.com
                      127.0.0.1 bannedhost.net
                      127.0.0.1 barbudafarms.com
                      127.0.0.1 www.bardownload.com
                      127.0.0.1 bardownload.com
                      127.0.0.1 barnandfence.com
                      127.0.0.1 batsearch.com
                      127.0.0.1 baygraphicsllc.com
                      127.0.0.1 bbbsearch.com
                      127.0.0.1 bb-search.com
                      127.0.0.1 www.bcnproduction.com
                      127.0.0.1 bcnproduction.com
                      127.0.0.1 bdsmlibrary.net
                      127.0.0.1 www.bdsmpornmag.com
                      127.0.0.1 bdsmpornmag.com
                      127.0.0.1 www.bearshare.click-new-download.com
                      127.0.0.1 bearshare.click-new-download.com
                      127.0.0.1 www.bearshare.download-me.info
                      127.0.0.1 bearshare.download-me.info
                      127.0.0.1 www.bearshare.mp3-muzic.com
                      127.0.0.1 bearshare.mp3-muzic.com
                      127.0.0.1 www.bearshare-download.org
                      127.0.0.1 bearshare-download.org
                      127.0.0.1 www.bearshare-downloads.net
                      127.0.0.1 bearshare-downloads.net
                      127.0.0.1 www.bearsharelive.co.uk
                      127.0.0.1 bearsharelive.co.uk
                      127.0.0.1 www.bearshare-music-downloads.com
                      127.0.0.1 bearshare-music-downloads.com
                      127.0.0.1 www.bearsharepro2007.com
                      127.0.0.1 bearsharepro2007.com
                      127.0.0.1 www.bearshare-usa.com
                      127.0.0.1 bearshare-usa.com
                      127.0.0.1 bedhome.com
                      127.0.0.1 bediadance.com
                      127.0.0.1 www.beebappyy.biz
                      127.0.0.1 beebappyy.biz
                      127.0.0.1 www.begin2search.com
                      127.0.0.1 begin2search.com
                      127.0.0.1 bellabasketsfl.com
                      127.0.0.1 bernaolatwin.com
                      127.0.0.1 www.beruijindegunhadesun.com
                      127.0.0.1 beruijindegunhadesun.com
                      127.0.0.1 www.best3xclips.com
                      127.0.0.1 best3xclips.com
                      127.0.0.1 www.bestadults.com
                      127.0.0.1 bestadults.com
                      127.0.0.1 best-counter.com
                      127.0.0.1 bestcrawler.com
                      127.0.0.1 www.bestdailyvids.com
                      127.0.0.1 bestdailyvids.com
                      127.0.0.1 bestfor.ru
                      127.0.0.1 www.bestfuckvids.com
                      127.0.0.1 bestfuckvids.com
                      127.0.0.1 best-hardpics.com
                      127.0.0.1 www.bestmanage.org
                      127.0.0.1 bestmanage.org
                      127.0.0.1 www.bestmanage0.org
                      127.0.0.1 bestmanage0.org
                      127.0.0.1 www.bestmanage1.org
                      127.0.0.1 bestmanage1.org
                      127.0.0.1 www.bestmanage2.org
                      127.0.0.1 bestmanage2.org
                      127.0.0.1 www.bestmanage3.org
                      127.0.0.1 bestmanage3.org
                      127.0.0.1 www.bestmanage4.org
                      127.0.0.1 bestmanage4.org
                      127.0.0.1 www.bestmanage5.org
                      127.0.0.1 bestmanage5.org
                      127.0.0.1 www.bestmanage6.org
                      127.0.0.1 bestmanage6.org
                      127.0.0.1 www.bestmanage7.org
                      127.0.0.1 bestmanage7.org
                      127.0.0.1 www.bestmanage8.org
                      127.0.0.1 bestmanage8.org
                      127.0.0.1 www.bestmanage9.org
                      127.0.0.1 bestmanage9.org
                      127.0.0.1 www.bestoffersnetworks.com
                      127.0.0.1 bestoffersnetworks.com
                      127.0.0.1 bestporngate.com
                      127.0.0.1 www.bestsafetyguide.net
                      127.0.0.1 bestsafetyguide.net
                      127.0.0.1 www.bestsearch.cc
                      127.0.0.1 bestsearch.cc
                      127.0.0.1 www.best-spyware.info
                      127.0.0.1 best-spyware.info
                      127.0.0.1 www.best-targeted-traffic.com
                      127.0.0.1 best-targeted-traffic.com
                      127.0.0.1 www.best-voyeur.info
                      127.0.0.1 best-voyeur.info
                      127.0.0.1 bestweblinks.com
                      127.0.0.1 best-winning-casino.com
                      127.0.0.1 www.bestworldgirls-for-u.net
                      127.0.0.1 bestworldgirls-for-u.net
                      127.0.0.1 www.bestxclips.com
                      127.0.0.1 bestxclips.com
                      127.0.0.1 bestxporno.com
                      127.0.0.1 www.bestxxxmpegs.com
                      127.0.0.1 bestxxxmpegs.com
                      127.0.0.1 www.bettersearch.biz
                      127.0.0.1 bettersearch.biz
                      127.0.0.1 www.bgazzetta.it
                      127.0.0.1 bgazzetta.it
                      127.0.0.1 www.bgoogle.it
                      127.0.0.1 bgoogle.it
                      127.0.0.1 www.bigtrafficnetwork.com
                      127.0.0.1 bigtrafficnetwork.com
                      127.0.0.1 www.bigwww.com
                      127.0.0.1 bigwww.com
                      127.0.0.1 bin.errorprotector.com
                      127.0.0.1 bins.media-motor.net
                      127.0.0.1 bins2.media-motor.net
                      127.0.0.1 bis.180solutions.com
                      127.0.0.1 bitchesonline.net
                      127.0.0.1 www.bitcomet-freebie.com
                      127.0.0.1 bitcomet-freebie.com
                      127.0.0.1 www.bittorrent.click-new-download.com
                      127.0.0.1 bittorrent.click-new-download.com
                      127.0.0.1 biz.biz
                      127.0.0.1 www.bkvcompany.com
                      127.0.0.1 bkvcompany.com
                      127.0.0.1 www.blackblues00.com
                      127.0.0.1 blackblues00.com
                      127.0.0.1 www.blackcodec.net
                      127.0.0.1 blackcodec.net
                      127.0.0.1 www.blackhats.tc
                      127.0.0.1 blackhats.tc
                      127.0.0.1 www.blackhawksoftware.com
                      127.0.0.1 blackhawksoftware.com
                      127.0.0.1 blackjack-free.net
                      127.0.0.1 blazefind.com
                      127.0.0.1 blender.xu.pl
                      127.0.0.1 blondetgp.com
                      127.0.0.1 www.blue-elefant.com
                      127.0.0.1 blue-elefant.com
                      127.0.0.1 www.bm.theaimonline.com
                      127.0.0.1 bm.theaimonline.com
                      127.0.0.1 www.bnmgate.com
                      127.0.0.1 bnmgate.com
                      127.0.0.1 bodaciousbabette.com
                      127.0.0.1 www.bonzi.com
                      127.0.0.1 bonzi.com
                      127.0.0.1 boobdoll.com
                      127.0.0.1 boobsandtits.com
                      127.0.0.1 boobsclub.com
                      127.0.0.1 www.bookedspace.com
                      127.0.0.1 bookedspace.com
                      127.0.0.1 www.boom.com.vn
                      127.0.0.1 boom.com.vn
                      127.0.0.1 boredlife.com
                      127.0.0.1 bowlofogumbo.com
                      127.0.0.1 www.bpfq02.com
                      127.0.0.1 bpfq02.com
                      127.0.0.1 www.bqgate.com
                      127.0.0.1 bqgate.com
                      127.0.0.1 br.errorsafe.com
                      127.0.0.1 br.winantivirus.com
                      127.0.0.1 br.winfixer.com
                      127.0.0.1 bradcoem.org
                      127.0.0.1 www.braincodec.com
                      127.0.0.1 braincodec.com
                      127.0.0.1 brandiyoung.com
                      127.0.0.1 www.bravesentry.com
                      127.0.0.1 bravesentry.com
                      127.0.0.1 www.breenten.biz
                      127.0.0.1 breenten.biz
                      127.0.0.1 www.brodbfm.net
                      127.0.0.1 brodbfm.net
                      127.0.0.1 brookeburn.com
                      127.0.0.1 www.browserwise.com
                      127.0.0.1 browserwise.com
                      127.0.0.1 bsa.safetydownload.com
                      127.0.0.1 www.bsplaycodec.com
                      127.0.0.1 bsplaycodec.com
                      127.0.0.1 bucps.com
                      127.0.0.1 buhartes.info
                      127.0.0.1 buldog-stats.com
                      127.0.0.1 www.bullseye-network.com
                      127.0.0.1 bullseye-network.com
                      127.0.0.1 burgerkingbigscreen.com
                      127.0.0.1 www.burningsite.com
                      127.0.0.1 burningsite.com
                      127.0.0.1 www.burnsrecyclinginc.com
                      127.0.0.1 burnsrecyclinginc.com
                      127.0.0.1 buscards.net
                      127.0.0.1 bustyrussell.com
                      127.0.0.1 www.busysearch.net
                      127.0.0.1 busysearch.net
                      127.0.0.1 buttejazz.org
                      127.0.0.1 www.buy-find.info
                      127.0.0.1 buy-find.info
                      127.0.0.1 buyselldomain.net
                      127.0.0.1 www.buytraff.biz
                      127.0.0.1 buytraff.biz
                      127.0.0.1 buz.ru
                      127.0.0.1 www.bvdtechinque.com
                      127.0.0.1 bvdtechinque.com
                      127.0.0.1 www.bvirgilio.it
                      127.0.0.1 bvirgilio.it
                      127.0.0.1 c.centralmedia.ws
                      127.0.0.1 www.c.enhance.com
                      127.0.0.1 c.enhance.com
                      127.0.0.1 c.goclick.com
                      127.0.0.1 www.c4tdownload.com
                      127.0.0.1 c4tdownload.com
                      127.0.0.1 www.c5.www4free.info
                      127.0.0.1 c5.www4free.info
                      127.0.0.1 www.cache.surfaccuracy.com
                      127.0.0.1 cache.surfaccuracy.com
                      127.0.0.1 cache.ysbweb.com
                      127.0.0.1 www.cadesfinjeriokas.com
                      127.0.0.1 cadesfinjeriokas.com
                      127.0.0.1 calcioturris.com
                      127.0.0.1 www.calendaralerts.net
                      127.0.0.1 calendaralerts.net
                      127.0.0.1 www.callinghome.biz
                      127.0.0.1 callinghome.biz
                      127.0.0.1 www.cameouk.co.uk
                      127.0.0.1 cameouk.co.uk
                      127.0.0.1 cameup.com
                      127.0.0.1 www.camouflageclothingonline.net
                      127.0.0.1 camouflageclothingonline.net
                      127.0.0.1 campaigns.outerinfo.net
                      127.0.0.1 camup.net
                      127.0.0.1 canberracricketcoaching.com
                      127.0.0.1 candycantaloupes.com
                      127.0.0.1 www.canidetect.org
                      127.0.0.1 canidetect.org
                      127.0.0.1 www.cantfind.com
                      127.0.0.1 cantfind.com
                      127.0.0.1 careers.dulcineasystems.net
                      127.0.0.1 carsands.com
                      127.0.0.1 carsrentals.net
                      127.0.0.1 cartoes.uol.com.br
                      127.0.0.1 www.casalemedia.com
                      127.0.0.1 casalemedia.com
                      127.0.0.1 www.cashdeluxe.net
                      127.0.0.1 cashdeluxe.net
                      127.0.0.1 www.cashengines.com
                      127.0.0.1 cashengines.com
                      127.0.0.1 cashsearch.biz
                      127.0.0.1 www.cashsurfers.com
                      127.0.0.1 cashsurfers.com
                      127.0.0.1 www.CashUnlim.com
                      127.0.0.1 CashUnlim.com
                      127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
                      127.0.0.1 casino2win.net
                      127.0.0.1 casino-gambling-1.net
                      127.0.0.1 casino-gambling-2.net
                      127.0.0.1 casinomidas.net
                      127.0.0.1 casinonline.net
                      127.0.0.1 casino-onlines.net
                      127.0.0.1 www.castingsamateur.com
                      127.0.0.1 castingsamateur.com
                      127.0.0.1 catallogue.com
                      127.0.0.1 www.catch-dc.info
                      127.0.0.1 catch-dc.info
                      127.0.0.1 categories.mygeek.com
                      127.0.0.1 catsss.da.ru
                      127.0.0.1 caxa.ru
                      127.0.0.1 cc.panet.org
                      127.0.0.1 www.ccecaedbebfcaf.com
                      127.0.0.1 ccecaedbebfcaf.com
                      127.0.0.1 cclebali.org
                      127.0.0.1 www.ccorriere.it
                      127.0.0.1 ccorriere.it
                      127.0.0.1 www.cdcopysite.com
                      127.0.0.1 cdcopysite.com
                      127.0.0.1 www.cdegate.com
                      127.0.0.1 cdegate.com
                      127.0.0.1 cdn.drivecleaner.com
                      127.0.0.1 cdn.errorsafe.com
                      127.0.0.1 cdn.movies-etc.com
                      127.0.0.1 cdn.winsoftware.com
                      127.0.0.1 cdn2.movies-etc.com
                      127.0.0.1 www.cdorriere.it
                      127.0.0.1 cdorriere.it
                      127.0.0.1 ceewawires.org
                      127.0.0.1 centralmedia.ws
                      127.0.0.1 certumgroup.com
                      127.0.0.1 www.cforriere.it
                      127.0.0.1 cforriere.it
                      127.0.0.1 www.check.jupitersatellites.biz
                      127.0.0.1 check.jupitersatellites.biz
                      127.0.0.1 www.checkin100.com
                      127.0.0.1 checkin100.com
                      127.0.0.1 www.checkssecurity.com
                      127.0.0.1 checkssecurity.com
                      127.0.0.1 chelancatering.com
                      127.0.0.1 www.chenshijituan.com
                      127.0.0.1 chenshijituan.com
                      127.0.0.1 childrenvilla.com
                      127.0.0.1 www.chilly3xvids.com
                      127.0.0.1 chilly3xvids.com
                      127.0.0.1 www.chillymovs.com
                      127.0.0.1 chillymovs.com
                      127.0.0.1 chips-4-free.com
                      127.0.0.1 chrisswasey.com
                      127.0.0.1 chriswallace.net
                      127.0.0.1 www.cia-trjn.myvnc.com
                      127.0.0.1 cia-trjn.myvnc.com
                      127.0.0.1 www.cinemadownload.com
                      127.0.0.1 cinemadownload.com
                      127.0.0.1 www.ciorriere.it
                      127.0.0.1 ciorriere.it
                      127.0.0.1 www.cirriere.it
                      127.0.0.1 cirriere.it
                      127.0.0.1 ckick4thumbs.com
                      127.0.0.1 cl55.biz
                      127.0.0.1 clackamasliteraryreview.com
                      127.0.0.1 www.clckm.com
                      127.0.0.1 clckm.com
                      127.0.0.1 www.cleancodec.com
                      127.0.0.1 cleancodec.com
                      127.0.0.1 www.cleansoftwares.com
                      127.0.0.1 cleansoftwares.com
                      127.0.0.1 clearsearch.cc
                      127.0.0.1 clearsearch.net
                      127.0.0.1 clickaire.com
                      127.0.0.1 www.click-codec.com
                      127.0.0.1 click-codec.com
                      127.0.0.1 www.clickhere4search.com
                      127.0.0.1 clickhere4search.com
                      127.0.0.1 www.click-new-download.com
                      127.0.0.1 click-new-download.com
                      127.0.0.1 click-now.net
                      127.0.0.1 www.clickspring.net
                      127.0.0.1 clickspring.net
                      127.0.0.1 www.click-to-download.com
                      127.0.0.1 click-to-download.com
                      127.0.0.1 www.clicktomakeasearch.com
                      127.0.0.1 clicktomakeasearch.com
                      127.0.0.1 clickyestoenter.net
                      127.0.0.1 client.exeupdate.com
                      127.0.0.1 client.myadultexplorer.com
                      127.0.0.1 www.cliks.org
                      127.0.0.1 cliks.org
                      127.0.0.1 www.clipsfestival.com
                      127.0.0.1 clipsfestival.com
                      127.0.0.1 www.clipsreality.com
                      127.0.0.1 clipsreality.com
                      127.0.0.1 www.clorriere.it
                      127.0.0.1 clorriere.it
                      127.0.0.1 clrsch.com
                      127.0.0.1 www.clubxxxvideo.com
                      127.0.0.1 clubxxxvideo.com
                      127.0.0.1 clusif.free.fr
                      127.0.0.1 cmtapestry.com
                      127.0.0.1 www.cnetadd.com
                      127.0.0.1 cnetadd.com
                      127.0.0.1 www.cnomy.com
                      127.0.0.1 cnomy.com
                      127.0.0.1 www.cnzz.com
                      127.0.0.1 cnzz.com
                      127.0.0.1 code.ignphrases.com
                      127.0.0.1 codec.ninoa.com
                      127.0.0.1 www.codecbsplay.com
                      127.0.0.1 codecbsplay.com
                      127.0.0.1 www.codecdvd.net
                      127.0.0.1 codecdvd.net
                      127.0.0.1 www.codecdvi.com
                      127.0.0.1 codecdvi.com
                      127.0.0.1 www.codec-fun.com
                      127.0.0.1 codec-fun.com
                      127.0.0.1 www.codechard.com
                      127.0.0.1 codechard.com
                      127.0.0.1 www.codechot.net
                      127.0.0.1 codechot.net
                      127.0.0.1 www.codechq.net
                      127.0.0.1 codechq.net
                      127.0.0.1 www.codecmeg.net
                      127.0.0.1 codecmeg.net
                      127.0.0.1 www.codecmega.net
                      127.0.0.1 codecmega.net
                      127.0.0.1 www.codecmpg.com
                      127.0.0.1 codecmpg.com
                      127.0.0.1 www.codecnice.net
                      127.0.0.1 codecnice.net
                      127.0.0.1 www.codecops.net
                      127.0.0.1 codecops.net
                      127.0.0.1 www.codecpretty.net
                      127.0.0.1 codecpretty.net
                      127.0.0.1 www.codecpro.net
                      127.0.0.1 codecpro.net
                      127.0.0.1 www.codecsoft.net
                      127.0.0.1 codecsoft.net
                      127.0.0.1 www.codectime.com
                      127.0.0.1 codectime.com
                      127.0.0.1 www.codecultra.net
                      127.0.0.1 codecultra.net
                      127.0.0.1 www.codecvids.com
                      127.0.0.1 codecvids.com
                      127.0.0.1 www.codecvip.com
                      127.0.0.1 codecvip.com
                      127.0.0.1 www.codecviva.com
                      127.0.0.1 codecviva.com
                      127.0.0.1 www.codeczang.net
                      127.0.0.1 codeczang.net
                      127.0.0.1 www.codrriere.it
                      127.0.0.1 codrriere.it
                      127.0.0.1 www.coeriere.it
                      127.0.0.1 coeriere.it
                      127.0.0.1 www.coerriere.it
                      127.0.0.1 coerriere.it
                      127.0.0.1 www.cofrriere.it
                      127.0.0.1 cofrriere.it
                      127.0.0.1 www.cogrriere.it
                      127.0.0.1 cogrriere.it
                      127.0.0.1 www.coirriere.it
                      127.0.0.1 coirriere.it
                      127.0.0.1 command.adservs.com
                      127.0.0.1 www.commonname.com
                      127.0.0.1 www.computerpcgames.net
                      127.0.0.1 computerpcgames.net
                      127.0.0.1 www.computerrecover.com
                      127.0.0.1 computerrecover.com
                      127.0.0.1 config.180solutions.com
                      127.0.0.1 www.content.dollarrevenue.com
                      127.0.0.1 content.dollarrevenue.com
                      127.0.0.1 www.content.ireit.com
                      127.0.0.1 content.ireit.com
                      127.0.0.1 content.onerateld.com
                      127.0.0.1 www.contentmatch.net
                      127.0.0.1 contentmatch.net
                      127.0.0.1 www.contextplus.net
                      127.0.0.1 contextplus.net
                      127.0.0.1 www.contra-virus.com
                      127.0.0.1 contra-virus.com
                      127.0.0.1 www.controlmeh.com
                      127.0.0.1 controlmeh.com
                      127.0.0.1 www.convenient-search.com
                      127.0.0.1 convenient-search.com
                      127.0.0.1 www.cooldeskalert.com
                      127.0.0.1 cooldeskalert.com
                      127.0.0.1 coolfetishsite.com
                      127.0.0.1 coolfreehost.com
                      127.0.0.1 coolfreepage.com
                      127.0.0.1 coolfreepages.com
                      127.0.0.1 cool-homepage.co
                      127.0.0.1 cool-homepage.com
                      127.0.0.1 coolmoneysearch.com
                      127.0.0.1 coolpornsearch.com
                      127.0.0.1 cool-search.net
                      127.0.0.1 cool-search.netfartpost.com
                      127.0.0.1 coolsearcher.info
                      127.0.0.1 www.coolservecorp.net
                      127.0.0.1 coolservecorp.net
                      127.0.0.1 www.coolwebsearch.com
                      127.0.0.1 coolwebsearch.com
                      127.0.0.1 cool-web-search.com
                      127.0.0.1 coolwebsearsh.com
                      127.0.0.1 www.coolwwwsearch.com
                      127.0.0.1 coolwwwsearch.com
                      127.0.0.1 cool-xxx.net
                      127.0.0.1 www.coorriere.it
                      127.0.0.1 coorriere.it
                      127.0.0.1 copmtraine.com
                      127.0.0.1 www.coprriere.it
                      127.0.0.1 coprriere.it
                      127.0.0.1 www.core.psyche-evolution.com
                      127.0.0.1 core.psyche-evolution.com
                      127.0.0.1 www.coreiere.it
                      127.0.0.1 coreiere.it
                      127.0.0.1 www.coreriere.it
                      127.0.0.1 coreriere.it
                      127.0.0.1 www.corrdiere.it
                      127.0.0.1 corrdiere.it
                      127.0.0.1 www.correiere.it
                      127.0.0.1 correiere.it
                      127.0.0.1 www.corrfiere.it
                      127.0.0.1 corrfiere.it
                      127.0.0.1 www.corrgiere.it
                      127.0.0.1 corrgiere.it
                      127.0.0.1 www.corridere.it
                      127.0.0.1 corridere.it
                      127.0.0.1 www.corriedre.it
                      127.0.0.1 corriedre.it
                      127.0.0.1 www.corriee.it
                      127.0.0.1 corriee.it
                      127.0.0.1 www.corrieere.it
                      127.0.0.1 corrieere.it
                      127.0.0.1 www.corriefre.it
                      127.0.0.1 corriefre.it
                      127.0.0.1 www.corriegre.it
                      127.0.0.1 corriegre.it
                      127.0.0.1 www.corrierde.it
                      127.0.0.1 corrierde.it
                      127.0.0.1 www.corriered.it
                      127.0.0.1 corriered.it
                      127.0.0.1 www.corrieree.it
                      127.0.0.1 corrieree.it
                      127.0.0.1 www.corrieref.it
                      127.0.0.1 corrieref.it
                      127.0.0.1 www.corrierer.it
                      127.0.0.1 corrierer.it
                      127.0.0.1 www.corrieres.it
                      127.0.0.1 corrieres.it
                      127.0.0.1 www.corrierew.it
                      127.0.0.1 corrierew.it
                      127.0.0.1 www.corrierfe.it
                      127.0.0.1 corrierfe.it
                      127.0.0.1 www.corrierge.it
                      127.0.0.1 corrierge.it
                      127.0.0.1 www.corrierr.it
                      127.0.0.1 corrierr.it
                      127.0.0.1 www.corrierre.it
                      127.0.0.1 corrierre.it
                      127.0.0.1 www.corrierse.it
                      127.0.0.1 corrierse.it
                      127.0.0.1 www.corrierte.it
                      127.0.0.1 corrierte.it
                      127.0.0.1 www.corrierw.it
                      127.0.0.1 corrierw.it
                      127.0.0.1 www.corrierwe.it
                      127.0.0.1 corrierwe.it
                      127.0.0.1 www.corriesre.it
                      127.0.0.1 corriesre.it
                      127.0.0.1 www.corriete.it
                      127.0.0.1 corriete.it
                      127.0.0.1 www.corrietre.it
                      127.0.0.1 corrietre.it
                      127.0.0.1 www.corriewre.it
                      127.0.0.1 corriewre.it
                      127.0.0.1 www.corrifere.it
                      127.0.0.1 corrifere.it
                      127.0.0.1 www.corriiere.it
                      127.0.0.1 corriiere.it
                      127.0.0.1 www.corrilere.it
                      127.0.0.1 corrilere.it
                      127.0.0.1 www.corrioere.it
                      127.0.0.1 corrioere.it
                      127.0.0.1 www.corrire.it
                      127.0.0.1 corrire.it
                      127.0.0.1 www.corrirere.it
                      127.0.0.1 corrirere.it
                      127.0.0.1 www.corrirre.it
                      127.0.0.1 corrirre.it
                      127.0.0.1 www.corrisere.it
                      127.0.0.1 corrisere.it
                      127.0.0.1 www.corriuere.it
                      127.0.0.1 corriuere.it
                      127.0.0.1 www.corriwere.it
                      127.0.0.1 corriwere.it
                      127.0.0.1 www.corriwre.it
                      127.0.0.1 corriwre.it
                      127.0.0.1 www.corrliere.it
                      127.0.0.1 corrliere.it
                      127.0.0.1 www.corroere.it
                      127.0.0.1 corroere.it
                      127.0.0.1 www.corroiere.it
                      127.0.0.1 corroiere.it
                      127.0.0.1 www.corrriere.it
                      127.0.0.1 corrriere.it
                      127.0.0.1 www.corrtiere.it
                      127.0.0.1 corrtiere.it
                      127.0.0.1 www.corruere.it
                      127.0.0.1 corruere.it
                      127.0.0.1 www.corruiere.it
                      127.0.0.1 corruiere.it
                      127.0.0.1 www.cortiere.it
                      127.0.0.1 cortiere.it
                      127.0.0.1 www.cortriere.it
                      127.0.0.1 cortriere.it
                      127.0.0.1 www.costrike.com
                      127.0.0.1 costrike.com
                      127.0.0.1 www.cotriere.it
                      127.0.0.1 cotriere.it
                      127.0.0.1 www.cotrriere.it
                      127.0.0.1 cotrriere.it
                      127.0.0.1 couldnotfind.com
                      127.0.0.1 count.cc
                      127.0.0.1 count.hitscount.net
                      127.0.0.1 count-all.com
                      127.0.0.1 www.countdutycall.info
                      127.0.0.1 countdutycall.info
                      127.0.0.1 counter.sexmaniack.com
                      127.0.0.1 www.courtrecordslookup.com
                      127.0.0.1 courtrecordslookup.com
                      127.0.0.1 www.cporriere.it
                      127.0.0.1 cporriere.it
                      127.0.0.1 www.cprriere.it
                      127.0.0.1 cprriere.it
                      127.0.0.1 cpvfeed.com
                      127.0.0.1 cracks.me.uk
                      127.0.0.1 www.cracks4all.com
                      127.0.0.1 cracks4all.com
                      127.0.0.1 www.crapsgold.info
                      127.0.0.1 crapsgold.info
                      127.0.0.1 Crazygirls-world.com
                      127.0.0.1 www.crazywinnings.com
                      127.0.0.1 crazywinnings.com
                      127.0.0.1 creamedcutties.com
                      127.0.0.1 www.createaccesskey.com
                      127.0.0.1 createaccesskey.com
                      127.0.0.1 creditsearchonline.com
                      127.0.0.1 crestring.com
                      127.0.0.1 crooder.com
                      127.0.0.1 www.crriere.it
                      127.0.0.1 crriere.it
                      127.0.0.1 www.cryptdrive.com
                      127.0.0.1 cryptdrive.com
                      127.0.0.1 www.crystalysmedia.com
                      127.0.0.1 crystalysmedia.com
                      127.0.0.1 www.csx.adservs.com
                      127.0.0.1 csx.adservs.com
                      127.0.0.1 cts.180solutions.com
                      127.0.0.1 www.cuisinartoven.com
                      127.0.0.1 cuisinartoven.com
                      127.0.0.1 www.curedc.info
                      127.0.0.1 curedc.info
                      127.0.0.1 www.curepcsolutions.com
                      127.0.0.1 curepcsolutions.com
                      127.0.0.1 curvedspaces.com
                      127.0.0.1 www.cutadult.com
                      127.0.0.1 cutadult.com
                      127.0.0.1 www.cvirgilio.it
                      127.0.0.1 cvirgilio.it
                      127.0.0.1 www.cvorriere.it
                      127.0.0.1 cvorriere.it
                      127.0.0.1 cvs.jps.ru
                      127.0.0.1 cvsymphony.com
                      127.0.0.1 www.cxorriere.it
                      127.0.0.1 cxorriere.it
                      127.0.0.1 www.cyberrape.com
                      127.0.0.1 cyberrape.com
                      127.0.0.1 cydom.com
                      127.0.0.1 www.cydoor.com
                      127.0.0.1 cydoor.com
                      127.0.0.1 www.daily3xlinks.com
                      127.0.0.1 daily3xlinks.com
                      127.0.0.1 www.dailybestclips.com
                      127.0.0.1 dailybestclips.com
                      127.0.0.1 daily-gals.com
                      127.0.0.1 www.dailyhugemovs.com
                      127.0.0.1 dailyhugemovs.com
                      127.0.0.1 www.dailykeys.com
                      127.0.0.1 dailykeys.com
                      127.0.0.1 www.dailypornmag.com
                      127.0.0.1 dailypornmag.com
                      127.0.0.1 dailyteenspic.com
                      127.0.0.1 www.dailytoolbar.com
                      127.0.0.1 dailytoolbar.com
                      127.0.0.1 www.dailyxvids.com
                      127.0.0.1 dailyxvids.com
                      127.0.0.1 dancingbabycd.com
                      127.0.0.1 www.dapsol.com
                      127.0.0.1 dapsol.com
                      127.0.0.1 www.dapsolution.com
                      127.0.0.1 dapsolution.com
                      127.0.0.1 www.data-hoster.com
                      127.0.0.1 data-hoster.com
                      127.0.0.1 datanotary.com
                      127.0.0.1 datareco.com
                      127.0.0.1 www.dateanybabe.com
                      127.0.0.1 dateanybabe.com
                      127.0.0.1 www.dateanychick.com
                      127.0.0.1 dateanychick.com
                      127.0.0.1 www.datingdoctorsite.com
                      127.0.0.1 datingdoctorsite.com
                      127.0.0.1 www.dating-galaxy.info
                      127.0.0.1 dating-galaxy.info
                      127.0.0.1 dating-search.net
                      127.0.0.1 davemarshall.org
                      127.0.0.1 db105.com
                      127.0.0.1 www.dbdecicated.com
                      127.0.0.1 dbdecicated.com
                      127.0.0.1 www.dbxcompany.com
                      127.0.0.1 dbxcompany.com
                      127.0.0.1 dcdl.dmcast.com
                      127.0.0.1 dcfitusa.com
                      127.0.0.1 www.dcorriere.it
                      127.0.0.1 dcorriere.it
                      127.0.0.1 www.dcurtis.com
                      127.0.0.1 dcurtis.com
                      127.0.0.1 dcww.dmcast.com
                      127.0.0.1 de.ag
                      127.0.0.1 de.drivecleaner.com
                      127.0.0.1 de.errorsafe.com
                      127.0.0.1 de.winantivirus.com
                      127.0.0.1 de98.remsys.org
                      127.0.0.1 www.debay.it
                      127.0.0.1 debay.it
                      127.0.0.1 www.decknews.com
                      127.0.0.1 decknews.com
                      127.0.0.1 dedmazay.3322.org
                      127.0.0.1 www.dedsearch.com
                      127.0.0.1 dedsearch.com
                      127.0.0.1 defaultsearch.net
                      127.0.0.1 www.Defensaantimalware.com
                      127.0.0.1 Defensaantimalware.com
                      127.0.0.1 www.deja-rue.com
                      127.0.0.1 deja-rue.com
                      127.0.0.1 www.delficodec.com
                      127.0.0.1 delficodec.com
                      127.0.0.1 www.democodec.com
                      127.0.0.1 democodec.com
                      127.0.0.1 www.derklaif.biz
                      127.0.0.1 derklaif.biz
                      127.0.0.1 www.derrari.it
                      127.0.0.1 derrari.it
                      127.0.0.1 desarrollocreativo.com
                      127.0.0.1 www.deskbar.worldtostart.com
                      127.0.0.1 deskbar.worldtostart.com
                      127.0.0.1 www.deskwizz.com
                      127.0.0.1 deskwizz.com
                      127.0.0.1 www.destruktor.to.pl
                      127.0.0.1 destruktor.to.pl
                      127.0.0.1 www.detectivehound.com
                      127.0.0.1 detectivehound.com
                      127.0.0.1 www.detectivesearches.com
                      127.0.0.1 detectivesearches.com
                      127.0.0.1 dev.ntcor.com
                      127.0.0.1 develip.com
                      127.0.0.1 dewis.spb.ru
                      127.0.0.1 dewis.us
                      127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
                      127.0.0.1 www.dgbusiness.com
                      127.0.0.1 dgbusiness.com
                      127.0.0.1 dialer2004.com
                      127.0.0.1 www.dialerclub.com
                      127.0.0.1 dialerclub.com
                      127.0.0.1 www.dialer-shop.com
                      127.0.0.1 dialer-shop.com
                      127.0.0.1 www.dialoff.com
                      127.0.0.1 dialoff.com
                      127.0.0.1 www.did.i-used.cc
                      127.0.0.1 did.i-used.cc
                      127.0.0.1 dietpills4free.com
                      127.0.0.1 dietpussy.com
                      127.0.0.1 www.digikeygen.com
                      127.0.0.1 digikeygen.com
                      127.0.0.1 digistreamsa.com
                      127.0.0.1 www.digitalcoders.net
                      127.0.0.1 digitalcoders.net
                      127.0.0.1 www.digitalfan.com
                      127.0.0.1 digital-pornography.com
                      127.0.0.1 dionforvalleycouncil.org
                      127.0.0.1 www.directdvdpro.com
                      127.0.0.1 directdvdpro.com
                      127.0.0.1 www.directporta.info
                      127.0.0.1 directporta.info
                      127.0.0.1 www.directsearchzone.com
                      127.0.0.1 directsearchzone.com
                      127.0.0.1 www.diskretter.com
                      127.0.0.1 diskretter.com
                      127.0.0.1 dist.checkin100.com
                      127.0.0.1 dl.ad-ware.cc
                      127.0.0.1 dl.malwarewipe.com
                      127.0.0.1 dl.mcboo.com
                      127.0.0.1 www.dl.targetsaver.com
                      127.0.0.1 dl.targetsaver.com
                      127.0.0.1 dl.web-nexus.net
                      127.0.0.1 dl1.antivermins.com
                      127.0.0.1 dl1.antivirgear.com
                      127.0.0.1 dl1.spydawn.com
                      127.0.0.1 dl1.virusprotectpro.com
                      127.0.0.1 dl10.spyfalcon.com
                      127.0.0.1 dl16.spyfalcon.com
                      127.0.0.1 dl2.spyfalcon.com
                      127.0.0.1 dl2.spyheal.com
                      127.0.0.1 dl2.spywarestrike.com
                      127.0.0.1 dl3.spyfalcon.com
                      127.0.0.1 dl3.spyheal.com
                      127.0.0.1 dl3.spywarestrike.com
                      127.0.0.1 dl4.spyfalcon.com
                      127.0.0.1 dl4.spywarestrike.com
                      127.0.0.1 dl5.spyfalcon.com
                      127.0.0.1 dl5.spywarestrike.com
                      127.0.0.1 dl6.spywarestrike.com
                      127.0.0.1 dl7.spywarestrike.com
                      127.0.0.1 dl8.spyheal.com
                      127.0.0.1 dl8.spywarestrike.com
                      127.0.0.1 dl9.spyfalcon.com
                      127.0.0.1 dload.contextplus.net
                      127.0.0.1 www.dltsolution.com
                      127.0.0.1 dltsolution.com
                      127.0.0.1 www.dmcast.com
                      127.0.0.1 dmcast.com
                      127.0.0.1 www.dmqfirm.com
                      127.0.0.1 dmqfirm.com
                      127.0.0.1 www.dnaads.com
                      127.0.0.1 dnaads.com
                      127.0.0.1 dnl.mabou.org
                      127.0.0.1 www.dns-look-up.com
                      127.0.0.1 dns-look-up.com
                      127.0.0.1 doctorwaldron.com
                      127.0.0.1 document-not-found.pornpic.org
                      127.0.0.1 doggyaction.com
                      127.0.0.1 www.dogproblemswebsite.com
                      127.0.0.1 dogproblemswebsite.com
                      127.0.0.1 doktorxxx.com
                      127.0.0.1 dollarrevenue.com
                      127.0.0.1 www.domaincar.com
                      127.0.0.1 domaincar.com
                      127.0.0.1 domains2003.net
                      127.0.0.1 domains-for-you-online.com
                      127.0.0.1 domain-your-registration.com
                      127.0.0.1 domkrat.com
                      127.0.0.1 www.dotcomtoolbar.com
                      127.0.0.1 dotcomtoolbar.com
                      127.0.0.1 down.136136.net
                      127.0.0.1 download.abetterinternet.com
                      127.0.0.1 www.download.antispywarebot.com
                      127.0.0.1 download.antispywarebot.com
                      127.0.0.1 www.download.bardownload.com
                      127.0.0.1 download.bardownload.com
                      127.0.0.1 www.download.bravesentry.com
                      127.0.0.1 download.bravesentry.com
                      127.0.0.1 download.cdn.drivecleaner.com
                      127.0.0.1 download.cdn.errorsafe.com
                      127.0.0.1 download.cdn.winsoftware.com
                      127.0.0.1 download.contextplus.net
                      127.0.0.1 download.errorsafe.com
                      127.0.0.1 www.download.jupitersatellites.biz
                      127.0.0.1 download.jupitersatellites.biz
                      127.0.0.1 download.MalwareAlarm.com
                      127.0.0.1 download.searchtabs.net
                      127.0.0.1 www.download.secureyournet.biz
                      127.0.0.1 download.secureyournet.biz
                      127.0.0.1 download.spyonthis.net
                      127.0.0.1 download.spy-shredder.com
                      127.0.0.1 download.systemdoctor.com
                      127.0.0.1 download.winantispyware.com
                      127.0.0.1 download.winantivirus.com
                      127.0.0.1 download.windrivecleaner.com
                      127.0.0.1 download.winfixer.com
                      127.0.0.1 download10.spywarequake.com
                      127.0.0.1 download11.spywarequake.com
                      127.0.0.1 download12.spywarequake.com
                      127.0.0.1 download13.spywarequake.com
                      127.0.0.1 download15.spywarequake.com
                      127.0.0.1 download2.spywarequake.com
                      127.0.0.1 www.download-2007.com
                      127.0.0.1 download-2007.com
                      127.0.0.1 download3.spyaxe.com
                      127.0.0.1 download3.spywarequake.com
                      127.0.0.1 www.download3xpics.com
                      127.0.0.1 download3xpics.com
                      127.0.0.1 download4.spyaxe.com
                      127.0.0.1 download4.spywarequake.com
                      127.0.0.1 download5.spyaxe.com
                      127.0.0.1 download5.spywarequake.com
                      127.0.0.1 download6.spyaxe.com
                      127.0.0.1 download7.spywarequake.com
                      127.0.0.1 download8.spywarequake.com
                      127.0.0.1 download9.spywarequake.com
                      127.0.0.1 www.downloadacceleratorsite.com
                      127.0.0.1 downloadacceleratorsite.com
                      127.0.0.1 www.download-ad-aware.com
                      127.0.0.1 download-ad-aware.com
                      127.0.0.1 www.download-all-4-free.com
                      127.0.0.1 download-all-4-free.com
                      127.0.0.1 www.download-all-area.com
                      127.0.0.1 download-all-area.com
                      127.0.0.1 www.download-antivir.com
                      127.0.0.1 download-antivir.com
                      127.0.0.1 www.downloadanysong.com
                      127.0.0.1 downloadanysong.com
                      127.0.0.1 www.downloadaresnow.com
                      127.0.0.1 downloadaresnow.com
                      127.0.0.1 www.download-avast.com
                      127.0.0.1 download-avast.com
                      127.0.0.1 www.downloadcorporation.com
                      127.0.0.1 downloadcorporation.com
                      127.0.0.1 www.download-dvdshrink.com
                      127.0.0.1 download-dvdshrink.com
                      127.0.0.1 www.download-for-free.net
                      127.0.0.1 download-for-free.net
                      127.0.0.1 www.downloadfreesoft.com
                      127.0.0.1 downloadfreesoft.com
                      127.0.0.1 www.downloadfreeway.com
                      127.0.0.1 downloadfreeway.com
                      127.0.0.1 www.downloadimesh.com
                      127.0.0.1 downloadimesh.com
                      127.0.0.1 www.download-itunes-now.com
                      127.0.0.1 download-itunes-now.com
                      127.0.0.1 www.download-limewire.org
                      127.0.0.1 download-limewire.org
                      127.0.0.1 www.downloadlost.tv
                      127.0.0.1 downloadlost.tv
                      127.0.0.1 www.downloadmax.net
                      127.0.0.1 downloadmax.net
                      127.0.0.1 www.download-mcafee.com
                      127.0.0.1 download-mcafee.com
                      127.0.0.1 download-me.info
                      127.0.0.1 www.downloadmediaax.com
                      127.0.0.1 downloadmediaax.com
                      127.0.0.1 www.downloadpics.net
                      127.0.0.1 downloadpics.net
                      127.0.0.1 www.downloadprovider.net
                      127.0.0.1 downloadprovider.net
                      127.0.0.1 www.download-real-player.com
                      127.0.0.1 download-real-player.com
                      127.0.0.1 downloads.180solutions.com
                      127.0.0.1 downloads.adaware.cc
                      127.0.0.1 www.downloadservicearea.com
                      127.0.0.1 downloadservicearea.com
                      127.0.0.1 www.downloads-free.org
                      127.0.0.1 downloads-free.org
                      127.0.0.1 www.downloadsglobe.com
                      127.0.0.1 downloadsglobe.com
                      127.0.0.1 www.download-this.us
                      127.0.0.1 download-this.us
                      127.0.0.1 www.download-trillian.com
                      127.0.0.1 download-trillian.com
                      127.0.0.1 www.downloadv3.com
                      127.0.0.1 downloadv3.com
                      127.0.0.1 www.downloadvax.com
                      127.0.0.1 downloadvax.com
                      127.0.0.1 www.download-windvd.com
                      127.0.0.1 download-windvd.com
                      127.0.0.1 www.download-winrar.com
                      127.0.0.1 download-winrar.com
                      127.0.0.1 downloadwizard.com
                      127.0.0.1 www.downloadxmoveis.com
                      127.0.0.1 downloadxmoveis.com
                      127.0.0.1 www.downloadxvids.com
                      127.0.0.1 downloadxvids.com
                      127.0.0.1 downloadzcenter.com
                      127.0.0.1 downloadzcentral.com
                      127.0.0.1 www.downloadzfree.com
                      127.0.0.1 downloadzfree.com
                      127.0.0.1 downloadznow.net
                      127.0.0.1 www.download-zone-free.com
                      127.0.0.1 download-zone-free.com
                      127.0.0.1 www.download-zone-free.net
                      127.0.0.1 download-zone-free.net
                      127.0.0.1 dp-host.com
                      127.0.0.1 dr.mcboo.com
                      127.0.0.1 www.dr.webhancer.com
                      127.0.0.1 dr.webhancer.com
                      127.0.0.1 www.dr2.webhancer.com
                      127.0.0.1 dr2.webhancer.com
                      127.0.0.1 dr38.mcboo.com
                      127.0.0.1 dr47.mcboo.com
                      127.0.0.1 dragqueen.gay-clan.com
                      127.0.0.1 www.drepubblica.it
                      127.0.0.1 drepubblica.it
                      127.0.0.1 www.drivecleaner.com
                      127.0.0.1 drivecleaner.com
                      127.0.0.1 www.drivecleanr.com
                      127.0.0.1 drivecleanr.com
                      127.0.0.1 drocherway.com
                      127.0.0.1 www.dropspam.com
                      127.0.0.1 dropspam.com
                      127.0.0.1 drug-sources-exposed.com
                      127.0.0.1 drvvv.com
                      127.0.0.1 www.dsupereva.it
                      127.0.0.1 dsupereva.it
                      127.0.0.1 www.dtlproduct.com
                      127.0.0.1 dtlproduct.com
                      127.0.0.1 www.dudu.com
                      127.0.0.1 dudu.com
                      127.0.0.1 dulcineasystems.net
                      127.0.0.1 dumpserv.com
                      127.0.0.1 duolaimi.net
                      127.0.0.1 dutch-sex.com
                      127.0.0.1 www.dvdaccess.net
                      127.0.0.1 dvdaccess.net
                      127.0.0.1 dvdbank.org
                      127.0.0.1 www.dvdcodec.net
                      127.0.0.1 dvdcodec.net
                      127.0.0.1 www.dvdsmovies.net
                      127.0.0.1 dvdsmovies.net
                  9. dou-l
                    je continue merci ;)
                    1. jacques.gache Contributeur sécurité
                      désolé tu as posté pendant que j'écrivais @+
                    2. Tenaille79
                      Logfile of Trend Micro HijackThis v2.0.2
                      Scan saved at 18:22:44, on 08/04/2008
                      Platform: Windows XP SP2 (WinNT 5.01.2600)
                      MSIE: Internet Explorer v7.00 (7.00.6000.16608)
                      Boot mode: Normal

                      Running processes:
                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\Ati2evxx.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\Ati2evxx.exe
                      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\WINDOWS\System32\WLTRYSVC.EXE
                      C:\WINDOWS\System32\bcmwltry.exe
                      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                      C:\Program Files\Alwil Software\Avast4\ashServ.exe
                      C:\WINDOWS\system32\brsvc01a.exe
                      C:\WINDOWS\system32\brss01a.exe
                      C:\WINDOWS\system32\spoolsv.exe
                      c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                      C:\Program Files\Bonjour\mDNSResponder.exe
                      C:\WINDOWS\system32\cisvc.exe
                      C:\Program Files\Dell Network Assistant\hnm_svc.exe
                      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                      C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
                      C:\Program Files\Dell Support Center\bin\sprtsvc.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                      C:\WINDOWS\stsystra.exe
                      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                      C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
                      C:\WINDOWS\system32\WLTRAY.exe
                      C:\WINDOWS\System32\DLA\DLACTRLW.EXE
                      C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
                      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                      C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
                      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                      C:\WINDOWS\system32\ctfmon.exe
                      C:\Program Files\3RVX\3RVX.exe
                      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                      C:\Program Files\Digital Line Detect\DLG.exe
                      C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
                      C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                      C:\WINDOWS\system32\cidaemon.exe
                      C:\WINDOWS\system32\cidaemon.exe
                      C:\Program Files\Internet Explorer\iexplore.exe
                      C:\Documents and Settings\Benay Anthony\Bureau\skim.exe.exe

                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=6070104
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://geoarchi.univ-brest.fr/sited/vakekpar.php
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=6070104
                      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                      O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
                      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
                      O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
                      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
                      O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
                      O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
                      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                      O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
                      O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
                      O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
                      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
                      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
                      O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
                      O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
                      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKCU\..\Run: [3RVX.exe] C:\Program Files\3RVX\3RVX.exe
                      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                      O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
                      O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
                      O4 - Global Startup: Digital Line Detect.lnk = ?
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
                      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.euro.dell.com/systemprofiler/SysPro.CAB
                      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
                      O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.com/s/v/27.49/uploader2.cab
                      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
                      O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
                      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
                      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                      O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
                      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      O23 - Service: Advanced Networking Service (hnmsvc) - SingleClick Systems - C:\Program Files\Dell Network Assistant\hnm_svc.exe
                      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
                      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                      O23 - Service: License Management Service ESD - element5 - C:\Program Files\Fichiers communs\element5 Shared\Service\Licence Manager ESD.exe
                      O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                      O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
                      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                      O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
                      O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
                      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                      O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE
                  10. jacques.gache Contributeur sécurité
                    bonjour, passe smitfaudfix http://www.malekal.com/tutorial_SmitFraudfix.php
                    et puis passes malewarebytes suivi de ccleaner dans c'est deux modes nettoyeur et registre et un scan anti -virus en ligne avec bitdéfender en utilisant internet explorer et poste le rapport de bitdefender
                    1) malewarebytes : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
                    2) ccleaner : https://www.malekal.com/tutoriel-ccleaner/
                    3) scan en ligne : http://www.commentcamarche.net/faq/sujet 8872 scanner en ligne avec bitdefender
                    lis bien les tutoriels pour bien les appliquer tu les passes dans l'ordre merci
                    • 1
                    • 2

                    Discussions similaires

                    Smitfraud-C
                    Lasto97

                    25 réponses
                    [XP] Desinfection smitfraud
                    titelea

                    9 réponses
                    message de securité smitfraud
                    fuertes

                    59 réponses
                    comment enlever command service et smitfraud-
                    cathyves1

                    28 réponses