Vundo wml.exe abebot pccleaner ,helpppp.
Bonjour,
après avoir scanné vireé rescanné vundofixé spydoctoré kasperskysé spyboté msnfixé etc etc ,j'en ai marre , j'ai tout essayé en mode normal en sans echec en sessios admin et normale etc etc , rien a faire, j'ai a nouveau les message d'avertissement qui accourent, un coup c'est c:/windows/wml.exe l'autre c'est pccleaner,apres l'avertissement pub qui t'envoie sur pc spyware etc etc g fait un hijackt y a deux minutes parce que là ca me gonfle vraiment , la seule chose positive c'est que je pense avoir eu la peau de virtumonde, mais j'en suis meme pas certain, donc jpousse le cri du jour, helppppppppppp me , svp mdrrrrrr merci ,je colle direct le log hijackt et j'attend que vos lumieres milluminent merciiiiiiii
_______________________________________________________________________________________________
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:15:15, on 14/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
e:\Glary Utilities\Integrator.exe
C:\Documents and Settings\All Users.WINDOWS\Application Data\evsjgtsb\wjehapsv.exe
C:\WINDOWS\system32\sistray.EXE
C:\WINDOWS\system32\keyhook.exe
E:\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\vsnpstd3.exe
C:\Program Files\Belgacom\bin\sprtcmd.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\zedahsvm.exe
C:\WINDOWS\system32\svchost.exe
E:\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
E:\HP\Digital Imaging\bin\hpqtra08.exe
E:\WinZip\WZQKPICK.EXE
E:\HP\Digital Imaging\bin\hpqimzone.exe
E:\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {8D35DD6F-E933-4AC7-9F04-4EC47E75B4AC} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AD2D53E7-8491-4497-80B9-31A1F2B64ABB} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] E:\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [Belgacom] "C:\Program Files\Belgacom\bin\sprtcmd.exe" /P Belgacom
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\RunOnce: [SpybotDeletingC8168] cmd /c del "C:\Documents and Settings\eff.EFF-CF77F548B73\Bureau\Spyware&Malware Protection.url"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [tyfvuaqx] C:\WINDOWS\system32\zedahsvm.exe
O4 - HKCU\..\Run: [qqjyeask] C:\WINDOWS\system32\mxsbqvqv.exe
O4 - HKLM\..\Policies\Explorer\Run: [tIVlFTkB2R] C:\Documents and Settings\All Users.WINDOWS\Application Data\evsjgtsb\wjehapsv.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Contrôleur de calendrier Ulead.lnk = E:\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = E:\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = E:\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk.disabled
O4 - Global Startup: Microsoft Office.lnk = E:\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk.disabled
O4 - Global Startup: WinZip Quick Pick.lnk = E:\WinZip\WZQKPICK.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O9 - Extra button: Flash Saver - {09EA1F80-F40A-11D1-B792-444553540001} - E:\FLASHS~1.0\save.htm
O9 - Extra 'Tools' menuitem: Flash Saver - {09EA1F80-F40A-11D1-B792-444553540001} - E:\FLASHS~1.0\save.htm
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://uniffacoworld.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} (Contrôleur de DownloadManager) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.1.6.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: ddcDsRJc - ddcDsRJc.dll (file missing)
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
--
End of file - 9013 bytes
____________________________________________________________________________________________
après avoir scanné vireé rescanné vundofixé spydoctoré kasperskysé spyboté msnfixé etc etc ,j'en ai marre , j'ai tout essayé en mode normal en sans echec en sessios admin et normale etc etc , rien a faire, j'ai a nouveau les message d'avertissement qui accourent, un coup c'est c:/windows/wml.exe l'autre c'est pccleaner,apres l'avertissement pub qui t'envoie sur pc spyware etc etc g fait un hijackt y a deux minutes parce que là ca me gonfle vraiment , la seule chose positive c'est que je pense avoir eu la peau de virtumonde, mais j'en suis meme pas certain, donc jpousse le cri du jour, helppppppppppp me , svp mdrrrrrr merci ,je colle direct le log hijackt et j'attend que vos lumieres milluminent merciiiiiiii
_______________________________________________________________________________________________
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:15:15, on 14/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
e:\Glary Utilities\Integrator.exe
C:\Documents and Settings\All Users.WINDOWS\Application Data\evsjgtsb\wjehapsv.exe
C:\WINDOWS\system32\sistray.EXE
C:\WINDOWS\system32\keyhook.exe
E:\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\vsnpstd3.exe
C:\Program Files\Belgacom\bin\sprtcmd.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\zedahsvm.exe
C:\WINDOWS\system32\svchost.exe
E:\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
E:\HP\Digital Imaging\bin\hpqtra08.exe
E:\WinZip\WZQKPICK.EXE
E:\HP\Digital Imaging\bin\hpqimzone.exe
E:\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {8D35DD6F-E933-4AC7-9F04-4EC47E75B4AC} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AD2D53E7-8491-4497-80B9-31A1F2B64ABB} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] E:\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [Belgacom] "C:\Program Files\Belgacom\bin\sprtcmd.exe" /P Belgacom
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\RunOnce: [SpybotDeletingC8168] cmd /c del "C:\Documents and Settings\eff.EFF-CF77F548B73\Bureau\Spyware&Malware Protection.url"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [tyfvuaqx] C:\WINDOWS\system32\zedahsvm.exe
O4 - HKCU\..\Run: [qqjyeask] C:\WINDOWS\system32\mxsbqvqv.exe
O4 - HKLM\..\Policies\Explorer\Run: [tIVlFTkB2R] C:\Documents and Settings\All Users.WINDOWS\Application Data\evsjgtsb\wjehapsv.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Contrôleur de calendrier Ulead.lnk = E:\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = E:\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = E:\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk.disabled
O4 - Global Startup: Microsoft Office.lnk = E:\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk.disabled
O4 - Global Startup: WinZip Quick Pick.lnk = E:\WinZip\WZQKPICK.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O9 - Extra button: Flash Saver - {09EA1F80-F40A-11D1-B792-444553540001} - E:\FLASHS~1.0\save.htm
O9 - Extra 'Tools' menuitem: Flash Saver - {09EA1F80-F40A-11D1-B792-444553540001} - E:\FLASHS~1.0\save.htm
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://uniffacoworld.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} (Contrôleur de DownloadManager) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.1.6.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: ddcDsRJc - ddcDsRJc.dll (file missing)
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
--
End of file - 9013 bytes
____________________________________________________________________________________________
Configuration: Windows XP Internet Explorer 7.0
71 réponses
Résumé de la discussion
Infection logicielle persistante sous Windows XP, malgré de multiples scans et l'utilisation d'outils antivirus et antispyware, avec des avertissements pointant des éléments suspects comme des processus ou des composants système. Des menaces incluent des noms comme virtumonde, des exécutions liées à c:/windows et alertes publicitaires, tandis que l'auteur décrit avoir tenté le mode normal et le mode sans échec sans succès. En réponse, des conseils suggèrent d'éliminer des versions obsolètes d'outils, puis d'utiliser un outil dédié et fiable pour une désinfection plus complète, tout en vérifiant les services et les démarrages. D'autres éléments évoquent aussi la vérification des processus en cours et dépendances logicielles, ainsi que la nécessité de renommer et rétablir des outils fiables après suppression des composants indésirables.
-
Contributeur sécuritéBonsoir
Attention ==> Accepte les alertes de ton Kaspersky Internet Security 7.0
Supprime éventuellement toute ancienne version de ComboFix de ton PC.
Télécharge ComboFix.exe (par sUBs) sur ton Bureau:
Clic-droit sur ce lien < http://download.bleepingcomputer.com/sUBs/ComboFix.exe >
Puis choisis "Enregistrer sous .." ==> vers le 'bureau"
==> Attention : renomme-le sous le nom « TRISTAN.EXE » (très important).
==> < http://img212.imageshack.us/img212/3087/screenshot327qh5.png >
Tu le nommes à ce moment-là, et non pas après l'avoir enregistré ; ce serait trop tard.
Puis clic sur [Enregistrer]
==> Déconnecte ton PC d'Internet et referme les fenêtres de tous les programmes en cours.
==> Désactive provisoirement (et seulement le temps de l'utilisation de ComboFix), la protection en temps réel de ton Antivirus et de ton Antispywares, (activés, ils pourraient gêner fortement la procédure de recherche et de nettoyage de l'outil). ==> donc, > Désactive le Tea-Timer de Spybot en passant par les options de Spybot: une fois dans le logiciel, il faut aller dans le menu "Mode" => coche "Mode avancé" => "Outils"(en bas de page)=> "Résident" => et tu décoches cette case: "Résident Teatimer" . Tu ne dois plus voir l'icône du Tea- Timer dans la barre de tâches!
- Double clique sur l'icône de ComboFix.exe (TRISTAN.EXE) du bureau, [Exécuter] et suis les invites.
- Réponds oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.
Laisse se dérouler le scan.
/!\ Pendant la durée de cette étape, ne te sers pas du pc et n'ouvre aucun programme.
Soit patient (même si tu penses que le PC est arrêté) ; les temps « d'arrêt apparent » sont parfois de plusieurs minutes (il y a ± 40 étapes d’analyse)./i\
- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisse-le faire.
- Un rapport s'ouvrira ensuite dans le bloc-notes sur le bureau.
(Attention : Il est très probable que l'outil bloque à la fenêtre "Find3M" ; si c'est le cas, appuie simultanément sur les touches CTRL + ALT + DEL (Sup.), clique sur l'un des deux CF#####.exe (où ##### sont des chiffres aléatoires) et le rapport sera généré !)
•- ==> Réactive la protection en temps réel de ton Antivirus et de ton Antispywares, avant de te reconnecter à Internet.
Note: ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)
Tu copies et colles ce rapport sur le forum
Merci
Al.
PS: As-tu trouvé chaussure, ici http://www.commentcamarche.net/forum/affich 3969629 site resume livre#12 ?? -
Contributeur sécuritéSalut eff,
Je disais, plus avant:
- « Télécharger RHosts de SiRi: http://siri.urz.free.fr/RHosts.php
Double cliquer dessus pour l'exécuter; et cliquer sur " Restore original Hosts "
Tu sais vérifier toi-même ton fichier "hosts" là C:\WINDOWS\system32\drivers\etc <-- dans ce répertoire).
Fais m'en un copier/coller. ==> après passage de RHosts de SiRi ( le concepteur de SmitfraudFix) »
- Aussi ceci: « J'ai aussi un doute ici:
O9 - Extra button: Flash Saver - {09EA1F80-F40A-11D1-B792-444553540001} - E:\FLASHS~1.0\save.htm
O9 - Extra 'Tools' menuitem: Flash Saver - {09EA1F80-F40A-11D1-B792-444553540001} - E:\FLASHS~1.0\save.htm
==> Note: File is located under C:\Program Files\FlashSaver\ »
Connais-tu FlashSaver ? Merci
Une dernière question.
Je vois: [Vcs support / Vcs][Running/Auto Start]
<\??\C:\WINDOWS\system32\Drivers\Vcs.sys><N/A>
.vcs de chez vCalendar ! (VCS signifiant vCalendar Schedule)
Lire < https://addons.thunderbird.net/fr/thunderbird/addon/vcs-support/ >
Mais as-tu l'usage de "Thunderbird" ?
N'utilises-tu pas plutôt OE6 ?
Merci
Al.
-
tiens j'avais cru apercevoir autre chose qu'un 127.0.0.1 , j'ai du me tromper, j'ai plein de chiffre de trop dans les pupilles depuis quelques jours sans doutes, désolé de t'avoir deranger inutilement al et encore merci pour tout , a bientot j'espere mais plutot devant une biere et un paquet de frites hé ;)
-
et part 2
127.0.0.1 www.tuuttogratis.it
127.0.0.1 tuvcompany.com
127.0.0.1 www.tuvcompany.com
127.0.0.1 tuytogratis.it
127.0.0.1 www.tuytogratis.it
127.0.0.1 tv.180solutions.com
127.0.0.1 tvadvanced.com
127.0.0.1 www.tvadvanced.com
127.0.0.1 tv-auf-dem-pc.de
127.0.0.1 www.tv-auf-dem-pc.de
127.0.0.1 tvcodec.com
127.0.0.1 www.tvcodec.com
127.0.0.1 tv-codec.com
127.0.0.1 www.tv-codec.com
127.0.0.1 tv-codecs.com
127.0.0.1 www.tv-codecs.com
127.0.0.1 tv-en-pc.es
127.0.0.1 www.tv-en-pc.es
127.0.0.1 tvnowsite.com
127.0.0.1 www.tvnowsite.com
127.0.0.1 tvsatellitepourpc.com
127.0.0.1 www.tvsatellitepourpc.com
127.0.0.1 tvscodec.com
127.0.0.1 www.tvscodec.com
127.0.0.1 tvshowcollection.com
127.0.0.1 www.tvshowcollection.com
127.0.0.1 tv-sur-pc.com
127.0.0.1 www.tv-sur-pc.com
127.0.0.1 tw7890.com
127.0.0.1 www.tw7890.com
127.0.0.1 tyiscali.it
127.0.0.1 www.tyiscali.it
127.0.0.1 type2find.com
127.0.0.1 www.type2find.com
127.0.0.1 tyttogratis.it
127.0.0.1 www.tyttogratis.it
127.0.0.1 tzxsj.com
127.0.0.1 www.tzxsj.com
127.0.0.1 u.webbuying.net
127.0.0.1 u-239.com
127.0.0.1 u45.cx
127.0.0.1 u46.cx
127.0.0.1 u47.cc
127.0.0.1 u48.cc
127.0.0.1 u7u.cn
127.0.0.1 www.u7u.cn
127.0.0.1 uc8010.com
127.0.0.1 www.uc8010.com
127.0.0.1 ucleaner.com
127.0.0.1 www.ucleaner.com
127.0.0.1 ucmal.com
127.0.0.1 www.ucmal.com
127.0.0.1 ucmore.com
127.0.0.1 udefender.com
127.0.0.1 www.udefender.com
127.0.0.1 ueornaaqada.com
127.0.0.1 www.ueornaaqada.com
127.0.0.1 ueornavxiz.biz
127.0.0.1 www.ueornavxiz.biz
127.0.0.1 ueornmbkkhmf.biz
127.0.0.1 www.ueornmbkkhmf.biz
127.0.0.1 ueorn-rsztriv.com
127.0.0.1 www.ueorn-rsztriv.com
127.0.0.1 ueorn-vtvcp.com
127.0.0.1 www.ueorn-vtvcp.com
127.0.0.1 ueornygco.com
127.0.0.1 www.ueornygco.com
127.0.0.1 ueornymct.com
127.0.0.1 www.ueornymct.com
127.0.0.1 ufindall.click-now.net
127.0.0.1 ufixer.com
127.0.0.1 www.ufixer.com
127.0.0.1 uglyphotos.net
127.0.0.1 www.uglyphotos.net
127.0.0.1 uibo.it
127.0.0.1 www.uibo.it
127.0.0.1 uige.it
127.0.0.1 www.uige.it
127.0.0.1 uimi.it
127.0.0.1 www.uimi.it
127.0.0.1 uincodec.com
127.0.0.1 www.uincodec.com
127.0.0.1 uinimi.it
127.0.0.1 www.uinimi.it
127.0.0.1 uipd.it
127.0.0.1 www.uipd.it
127.0.0.1 uipg.it
127.0.0.1 www.uipg.it
127.0.0.1 uito.it
127.0.0.1 www.uito.it
127.0.0.1 ukiee.com
127.0.0.1 www.ukiee.com
127.0.0.1 ulink13.dudu.com
127.0.0.1 ulink7.dudu.com
127.0.0.1 ulog.systemdoctor.com
127.0.0.1 ulog.winantivirus.com
127.0.0.1 ultimatemp3player.com
127.0.0.1 www.ultimatemp3player.com
127.0.0.1 ultimateprotect.com
127.0.0.1 ultimatevideosite.com
127.0.0.1 www.ultimatevideosite.com
127.0.0.1 ultracodec.com
127.0.0.1 www.ultracodec.com
127.0.0.1 ultrahqcodec.com
127.0.0.1 www.ultrahqcodec.com
127.0.0.1 ultraload.net
127.0.0.1 umaxsearch.com
127.0.0.1 umibo.it
127.0.0.1 www.umibo.it
127.0.0.1 umige.it
127.0.0.1 www.umige.it
127.0.0.1 umimi.it
127.0.0.1 www.umimi.it
127.0.0.1 umipd.it
127.0.0.1 www.umipd.it
127.0.0.1 umipv.it
127.0.0.1 www.umipv.it
127.0.0.1 umnibo.it
127.0.0.1 www.umnibo.it
127.0.0.1 unbo.it
127.0.0.1 www.unbo.it
127.0.0.1 uncj.filetretporn.com
127.0.0.1 www.uncj.filetretporn.com
127.0.0.1 underagehost.com
127.0.0.1 une-autre-france.com
127.0.0.1 unge.it
127.0.0.1 www.unge.it
127.0.0.1 unibno.it
127.0.0.1 www.unibno.it
127.0.0.1 unie.it
127.0.0.1 www.unie.it
127.0.0.1 uniformpornmag.com
127.0.0.1 www.uniformpornmag.com
127.0.0.1 unig.it
127.0.0.1 www.unig.it
127.0.0.1 unigays.com
127.0.0.1 unii.it
127.0.0.1 www.unii.it
127.0.0.1 unini.it
127.0.0.1 www.unini.it
127.0.0.1 unionseek.com
127.0.0.1 www.unionseek.com
127.0.0.1 unionsms.net
127.0.0.1 www.unionsms.net
127.0.0.1 unipages.cc
127.0.0.1 unitedstates.rub.to
127.0.0.1 univo.it
127.0.0.1 www.univo.it
127.0.0.1 unknownip.com
127.0.0.1 www.unknownip.com
127.0.0.1 unlimite.net
127.0.0.1 www.unlimite.net
127.0.0.1 unlimitedmp3downloads.com
127.0.0.1 www.unlimitedmp3downloads.com
127.0.0.1 unlimitedtvshowdownload.com
127.0.0.1 www.unlimitedtvshowdownload.com
127.0.0.1 unmi.it
127.0.0.1 www.unmi.it
127.0.0.1 unmibo.it
127.0.0.1 www.unmibo.it
127.0.0.1 unobo.it
127.0.0.1 www.unobo.it
127.0.0.1 unpd.it
127.0.0.1 www.unpd.it
127.0.0.1 unpg.it
127.0.0.1 www.unpg.it
127.0.0.1 unto.it
127.0.0.1 www.unto.it
127.0.0.1 unubo.it
127.0.0.1 www.unubo.it
127.0.0.1 up2you.ru
127.0.0.1 upd.lop.com
127.0.0.1 upd.zone-media.com
127.0.0.1 update.680180.net
127.0.0.1 update.shareaza.com
127.0.0.1 updatemysettings.com
127.0.0.1 www.updatemysettings.com
127.0.0.1 updates.spywarequake.com
127.0.0.1 upereva.it
127.0.0.1 www.upereva.it
127.0.0.1 uploads.180solutions.com
127.0.0.1 upspiral.com
127.0.0.1 www.upspiral.com
127.0.0.1 uptodateprotect.com
127.0.0.1 www.uptodateprotect.com
127.0.0.1 uptodatesecurity.com
127.0.0.1 www.uptodatesecurity.com
127.0.0.1 uptofind.com
127.0.0.1 www.uptofind.com
127.0.0.1 upx.tsx.org
127.0.0.1 uralitel.ru
127.0.0.1 urgentsystemupdate.biz
127.0.0.1 www.urgentsystemupdate.biz
127.0.0.1 urgentsystemupdate.com
127.0.0.1 www.urgentsystemupdate.com
127.0.0.1 www.url.cpvfeed.com
127.0.0.1 urlstat.com
127.0.0.1 urlstat.ru
127.0.0.1 ursie.net
127.0.0.1 usecodec.com
127.0.0.1 www.usecodec.com
127.0.0.1 usefullsoft.net
127.0.0.1 use-play.com
127.0.0.1 www.use-play.com
127.0.0.1 utahsweet.com
127.0.0.1 utiledeprotection.com
127.0.0.1 www.utiledeprotection.com
127.0.0.1 utils.errorsafe.com
127.0.0.1 utils.winantivirus.com
127.0.0.1 utils.winfixer.com
127.0.0.1 www.utils.winfixer.com
127.0.0.1 utopicportal.com
127.0.0.1 uusocialjustice.org
127.0.0.1 uvu-channel.com
127.0.0.1 www.uvu-channel.com
127.0.0.1 uydsiygeds.com
127.0.0.1 www.uydsiygeds.com
127.0.0.1 uzoogle.com
127.0.0.1 www.uzoogle.com
127.0.0.1 v-224.com
127.0.0.1 v61.com
127.0.0.1 www.v61.com
127.0.0.1 v8irgilio.it
127.0.0.1 www.v8irgilio.it
127.0.0.1 v8rgilio.it
127.0.0.1 www.v8rgilio.it
127.0.0.1 v9irgilio.it
127.0.0.1 www.v9irgilio.it
127.0.0.1 v9rgilio.it
127.0.0.1 www.v9rgilio.it
127.0.0.1 vac-soft.com
127.0.0.1 www.vac-soft.com
127.0.0.1 vacwebsoft.com
127.0.0.1 www.vacwebsoft.com
127.0.0.1 vadesrunhdefunnjansdeikin.com
127.0.0.1 www.vadesrunhdefunnjansdeikin.com
127.0.0.1 vaginpics.com
127.0.0.1 valmyers.com
127.0.0.1 vapochille.com
127.0.0.1 www.vapochille.com
127.0.0.1 vaserjungenfujinas.com
127.0.0.1 www.vaserjungenfujinas.com
127.0.0.1 vaulimited.com
127.0.0.1 www.vaulimited.com
127.0.0.1 vaxcodec.com
127.0.0.1 www.vaxcodec.com
127.0.0.1 vaxdownload.com
127.0.0.1 www.vaxdownload.com
127.0.0.1 vaxobject.com
127.0.0.1 www.vaxobject.com
127.0.0.1 vaxobjectinstall.com
127.0.0.1 www.vaxobjectinstall.com
127.0.0.1 vbirgilio.it
127.0.0.1 www.vbirgilio.it
127.0.0.1 vcirgilio.it
127.0.0.1 www.vcirgilio.it
127.0.0.1 vcodec.com
127.0.0.1 www.vcodec.com
127.0.0.1 v-codec.com
127.0.0.1 www.v-codec.com
127.0.0.1 vcodec2007.com
127.0.0.1 www.vcodec2007.com
127.0.0.1 vcorriere.it
127.0.0.1 www.vcorriere.it
127.0.0.1 vegas-free.com
127.0.0.1 vegbuy.com
127.0.0.1 veloventures.com
127.0.0.1 verkaufen.wegvonviren.com
127.0.0.1 verkehrsprofi.com
127.0.0.1 www.verkehrsprofi.com
127.0.0.1 vertionkinhunfenrunhasde.com
127.0.0.1 www.vertionkinhunfenrunhasde.com
127.0.0.1 verwandschafts-test.de
127.0.0.1 www.verwandschafts-test.de
127.0.0.1 veryeasysearch.com
127.0.0.1 verzila.com
127.0.0.1 vesbiz.biz
127.0.0.1 veyyhlucwa.net
127.0.0.1 www.veyyhlucwa.net
127.0.0.1 vfirgilio.it
127.0.0.1 www.vfirgilio.it
127.0.0.1 vgazzetta.it
127.0.0.1 www.vgazzetta.it
127.0.0.1 vgirgilio.it
127.0.0.1 www.vgirgilio.it
127.0.0.1 vgoogle.it
127.0.0.1 www.vgoogle.it
127.0.0.1 vi4gilio.it
127.0.0.1 www.vi4gilio.it
127.0.0.1 vi4rgilio.it
127.0.0.1 www.vi4rgilio.it
127.0.0.1 vi5gilio.it
127.0.0.1 www.vi5gilio.it
127.0.0.1 vi5rgilio.it
127.0.0.1 www.vi5rgilio.it
127.0.0.1 vi8rgilio.it
127.0.0.1 www.vi8rgilio.it
127.0.0.1 vi9rgilio.it
127.0.0.1 www.vi9rgilio.it
127.0.0.1 vicodec.com
127.0.0.1 www.vicodec.com
127.0.0.1 victoriaadam.com
127.0.0.1 vidaccess.net
127.0.0.1 www.vidaccess.net
127.0.0.1 vidcodecs.com
127.0.0.1 www.vidcodecs.com
127.0.0.1 videoaccessactivex.com
127.0.0.1 www.videoaccessactivex.com
127.0.0.1 videoactivexlist.com
127.0.0.1 www.videoactivexlist.com
127.0.0.1 videoactivexmode.com
127.0.0.1 www.videoactivexmode.com
127.0.0.1 videoactivexnote.com
127.0.0.1 www.videoactivexnote.com
127.0.0.1 videoactivexsetup.com
127.0.0.1 www.videoactivexsetup.com
127.0.0.1 videoactivexsoft.com
127.0.0.1 www.videoactivexsoft.com
127.0.0.1 videoactivexsoftware.com
127.0.0.1 www.videoactivexsoftware.com
127.0.0.1 videoadaptation.com
127.0.0.1 www.videoadaptation.com
127.0.0.1 videoaxdata.com
127.0.0.1 www.videoaxdata.com
127.0.0.1 videoaxdownload.com
127.0.0.1 www.videoaxdownload.com
127.0.0.1 videoaxobject.com
127.0.0.1 www.videoaxobject.com
127.0.0.1 videoaxproject.com
127.0.0.1 www.videoaxproject.com
127.0.0.1 videoaxsoftware.com
127.0.0.1 www.videoaxsoftware.com
127.0.0.1 videoaxsolution.com
127.0.0.1 www.videoaxsolution.com
127.0.0.1 videocategories.com
127.0.0.1 video-clips.in
127.0.0.1 www.video-clips.in
127.0.0.1 videoobjectax.com
127.0.0.1 www.videoobjectax.com
127.0.0.1 videoobjectmedia.com
127.0.0.1 www.videoobjectmedia.com
127.0.0.1 videoplayersite.com
127.0.0.1 www.videoplayersite.com
127.0.0.1 videos-access.com
127.0.0.1 www.videos-access.com
127.0.0.1 videosaccess.net
127.0.0.1 www.videosaccess.net
127.0.0.1 videoscodec.com
127.0.0.1 www.videoscodec.com
127.0.0.1 videosfan.com
127.0.0.1 www.videosfan.com
127.0.0.1 videosoftonline.com
127.0.0.1 www.videosoftonline.com
127.0.0.1 videosoftwareax.com
127.0.0.1 www.videosoftwareax.com
127.0.0.1 videossoftware.com
127.0.0.1 www.videossoftware.com
127.0.0.1 videowebproject.com
127.0.0.1 www.videowebproject.com
127.0.0.1 videowebsoft.com
127.0.0.1 www.videowebsoft.com
127.0.0.1 videozapping.com
127.0.0.1 www.videozapping.com
127.0.0.1 vidrgilio.it
127.0.0.1 www.vidrgilio.it
127.0.0.1 vids-access.com
127.0.0.1 www.vids-access.com
127.0.0.1 vidscodec.com
127.0.0.1 www.vidscodec.com
127.0.0.1 vidsfest.com
127.0.0.1 www.vidsfest.com
127.0.0.1 viegilio.it
127.0.0.1 www.viegilio.it
127.0.0.1 viergilio.it
127.0.0.1 www.viergilio.it
127.0.0.1 viewdevice.com
127.0.0.1 www.viewdevice.com
127.0.0.1 viewimageonline.com
127.0.0.1 www.viewimageonline.com
127.0.0.1 viewmpgdevice.com
127.0.0.1 www.viewmpgdevice.com
127.0.0.1 viewutility.com
127.0.0.1 www.viewutility.com
127.0.0.1 vifgilio.it
127.0.0.1 www.vifgilio.it
127.0.0.1 vifrgilio.it
127.0.0.1 www.vifrgilio.it
127.0.0.1 vigrgilio.it
127.0.0.1 www.vigrgilio.it
127.0.0.1 vigrilio.it
127.0.0.1 www.vigrilio.it
127.0.0.1 vijrgilio.it
127.0.0.1 www.vijrgilio.it
127.0.0.1 vikrgilio.it
127.0.0.1 www.vikrgilio.it
127.0.0.1 vilrgilio.it
127.0.0.1 www.vilrgilio.it
127.0.0.1 viorgilio.it
127.0.0.1 www.viorgilio.it
127.0.0.1 vipcodecvip.com
127.0.0.1 www.vipcodecvip.com
127.0.0.1 vipru.com
127.0.0.1 www.vipru.com
127.0.0.1 vir4gilio.it
127.0.0.1 www.vir4gilio.it
127.0.0.1 vir5gilio.it
127.0.0.1 www.vir5gilio.it
127.0.0.1 virbgilio.it
127.0.0.1 www.virbgilio.it
127.0.0.1 virbilio.it
127.0.0.1 www.virbilio.it
127.0.0.1 virdgilio.it
127.0.0.1 www.virdgilio.it
127.0.0.1 viregilio.it
127.0.0.1 www.viregilio.it
127.0.0.1 virfgilio.it
127.0.0.1 www.virfgilio.it
127.0.0.1 virg8ilio.it
127.0.0.1 www.virg8ilio.it
127.0.0.1 virg8lio.it
127.0.0.1 www.virg8lio.it
127.0.0.1 virg9ilio.it
127.0.0.1 www.virg9ilio.it
127.0.0.1 virg9lio.it
127.0.0.1 www.virg9lio.it
127.0.0.1 virgbilio.it
127.0.0.1 www.virgbilio.it
127.0.0.1 virgfilio.it
127.0.0.1 www.virgfilio.it
127.0.0.1 virghilio.it
127.0.0.1 www.virghilio.it
127.0.0.1 virgi8lio.it
127.0.0.1 www.virgi8lio.it
127.0.0.1 virgi9lio.it
127.0.0.1 www.virgi9lio.it
127.0.0.1 virgiilo.it
127.0.0.1 www.virgiilo.it
127.0.0.1 virgiio.it
127.0.0.1 www.virgiio.it
127.0.0.1 virgijlio.it
127.0.0.1 www.virgijlio.it
127.0.0.1 virgiklio.it
127.0.0.1 www.virgiklio.it
127.0.0.1 virgil8io.it
127.0.0.1 www.virgil8io.it
127.0.0.1 virgil9io.it
127.0.0.1 www.virgil9io.it
127.0.0.1 virgili0.it
127.0.0.1 www.virgili0.it
127.0.0.1 virgili8o.it
127.0.0.1 www.virgili8o.it
127.0.0.1 virgili9.it
127.0.0.1 www.virgili9.it
127.0.0.1 virgili9o.it
127.0.0.1 www.virgili9o.it
127.0.0.1 virgilijo.it
127.0.0.1 www.virgilijo.it
127.0.0.1 virgiliko.it
127.0.0.1 www.virgiliko.it
127.0.0.1 virgilil.it
127.0.0.1 www.virgilil.it
127.0.0.1 virgililo.it
127.0.0.1 www.virgililo.it
127.0.0.1 virgilio0.it
127.0.0.1 www.virgilio0.it
127.0.0.1 virgilio9.it
127.0.0.1 www.virgilio9.it
127.0.0.1 virgilioi.it
127.0.0.1 www.virgilioi.it
127.0.0.1 virgiliok.it
127.0.0.1 www.virgiliok.it
127.0.0.1 virgiliol.it
127.0.0.1 www.virgiliol.it
127.0.0.1 virgiliop.it
127.0.0.1 www.virgiliop.it
127.0.0.1 virgilipo.it
127.0.0.1 www.virgilipo.it
127.0.0.1 virgiliuo.it
127.0.0.1 www.virgiliuo.it
127.0.0.1 virgiljio.it
127.0.0.1 www.virgiljio.it
127.0.0.1 virgilkio.it
127.0.0.1 www.virgilkio.it
127.0.0.1 virgiloio.it
127.0.0.1 www.virgiloio.it
127.0.0.1 virgiloo.it
127.0.0.1 www.virgiloo.it
127.0.0.1 virgilpio.it
127.0.0.1 www.virgilpio.it
127.0.0.1 virgiluio.it
127.0.0.1 www.virgiluio.it
127.0.0.1 virgiluo.it
127.0.0.1 www.virgiluo.it
127.0.0.1 virgin-tgp.net
127.0.0.1 virgioio.it
127.0.0.1 www.virgioio.it
127.0.0.1 virgiolio.it
127.0.0.1 www.virgiolio.it
127.0.0.1 virgiplio.it
127.0.0.1 www.virgiplio.it
127.0.0.1 virgiulio.it
127.0.0.1 www.virgiulio.it
127.0.0.1 virgjilio.it
127.0.0.1 www.virgjilio.it
127.0.0.1 virgkilio.it
127.0.0.1 www.virgkilio.it
127.0.0.1 virgklio.it
127.0.0.1 www.virgklio.it
127.0.0.1 virglilio.it
127.0.0.1 www.virglilio.it
127.0.0.1 virgoilio.it
127.0.0.1 www.virgoilio.it
127.0.0.1 virgtilio.it
127.0.0.1 www.virgtilio.it
127.0.0.1 virguilio.it
127.0.0.1 www.virguilio.it
127.0.0.1 virgvilio.it
127.0.0.1 www.virgvilio.it
127.0.0.1 virgyilio.it
127.0.0.1 www.virgyilio.it
127.0.0.1 virhgilio.it
127.0.0.1 www.virhgilio.it
127.0.0.1 virprotect.com
127.0.0.1 www.virprotect.com
127.0.0.1 virtgilio.it
127.0.0.1 www.virtgilio.it
127.0.0.1 virtilio.it
127.0.0.1 www.virtilio.it
127.0.0.1 virtualcodec.com
127.0.0.1 www.virtualcodec.com
127.0.0.1 virtual-ticket.net
127.0.0.1 www.virtual-ticket.net
127.0.0.1 virusburst.com
127.0.0.1 www.virusburst.com
127.0.0.1 viruscrusher.com
127.0.0.1 www.viruscrusher.com
127.0.0.1 virusdifesa.com
127.0.0.1 www.virusdifesa.com
127.0.0.1 virusforsvar.com
127.0.0.1 www.virusforsvar.com
127.0.0.1 virusgarde.com
127.0.0.1 www.virusgarde.com
127.0.0.1 virusheat.com
127.0.0.1 www.virusheat.com
127.0.0.1 virushunter.com
127.0.0.1 www.virushunter.com
127.0.0.1 virusnuke.com
127.0.0.1 www.virusnuke.com
127.0.0.1 virusprotectpro.com
127.0.0.1 virusranger.com
127.0.0.1 www.virusranger.com
127.0.0.1 virusrescue.com
127.0.0.1 www.virusrescue.com
127.0.0.1 virusscansite.com
127.0.0.1 www.virusscansite.com
127.0.0.1 virusschlacht.com
127.0.0.1 www.virusschlacht.com
127.0.0.1 virusvakt.com
127.0.0.1 www.virusvakt.com
127.0.0.1 virvgilio.it
127.0.0.1 www.virvgilio.it
127.0.0.1 virvilio.it
127.0.0.1 www.virvilio.it
127.0.0.1 virygilio.it
127.0.0.1 www.virygilio.it
127.0.0.1 vitamins-for-each.com
127.0.0.1 vitrgilio.it
127.0.0.1 www.vitrgilio.it
127.0.0.1 viurgilio.it
127.0.0.1 www.viurgilio.it
127.0.0.1 vivacodec.net
127.0.0.1 www.vivacodec.net
127.0.0.1 vjirgilio.it
127.0.0.1 www.vjirgilio.it
127.0.0.1 vkirgilio.it
127.0.0.1 www.vkirgilio.it
127.0.0.1 vkrgilio.it
127.0.0.1 www.vkrgilio.it
127.0.0.1 vlirgilio.it
127.0.0.1 www.vlirgilio.it
127.0.0.1 voghp.com
127.0.0.1 www.voghp.com
127.0.0.1 void.truth-is-out-there.org
127.0.0.1 voirgilio.it
127.0.0.1 www.voirgilio.it
127.0.0.1 vorlagen-archiv.com
127.0.0.1 www.vorlagen-archiv.com
127.0.0.1 vorlagen-paradies.de
127.0.0.1 www.vorlagen-paradies.de
127.0.0.1 vorlagen-world.de
127.0.0.1 www.vorlagen-world.de
127.0.0.1 vorriere.it
127.0.0.1 www.vorriere.it
127.0.0.1 votehowe.org
127.0.0.1 vother.info
127.0.0.1 www.vother.info
127.0.0.1 votreenton.biz
127.0.0.1 www.votreenton.biz
127.0.0.1 vparivalka.com
127.0.0.1 vplprocedure.com
127.0.0.1 www.vplprocedure.com
127.0.0.1 vse-moe.biz
127.0.0.1 vskeylogger.nazwa.pl
127.0.0.1 www.vskeylogger.nazwa.pl
127.0.0.1 vtvcp-ueorn.com
127.0.0.1 www.vtvcp-ueorn.com
127.0.0.1 vtvcp-ymct.com
127.0.0.1 www.vtvcp-ymct.com
127.0.0.1 vuirgilio.it
127.0.0.1 www.vuirgilio.it
127.0.0.1 vxebony.com
127.0.0.1 wabq.com
127.0.0.1 wabu.com
127.0.0.1 wakeupdick.com
127.0.0.1 walitalia.it
127.0.0.1 www.walitalia.it
127.0.0.1 wanfuchina.com
127.0.0.1 www.wanfuchina.com
127.0.0.1 ware2006.com
127.0.0.1 www.ware2006.com
127.0.0.1 warez.com
127.0.0.1 www.warez.com
127.0.0.1 warningiepage.com
127.0.0.1 www.warningiepage.com
127.0.0.1 warnomore.org
127.0.0.1 watchonline.tv
127.0.0.1 www.watchonline.tv
127.0.0.1 watersport-specialties.com
127.0.0.1 wazzupnet.com
127.0.0.1 www.wazzupnet.com
127.0.0.1 wbay.it
127.0.0.1 www.wbay.it
127.0.0.1 wbkb.com
127.0.0.1 web.links4all.biz
127.0.0.1 web1000.com
127.0.0.1 webaccelerating.com
127.0.0.1 www.webaccelerating.com
127.0.0.1 webbuying.net
127.0.0.1 www.webbuying.net
127.0.0.1 web-codec.com
127.0.0.1 www.web-codec.com
127.0.0.1 webcoolsearch.com
127.0.0.1 web-entrance.co
127.0.0.1 web-fastserve.com
127.0.0.1 www.web-fastserve.com
127.0.0.1 webhancer.com
127.0.0.1 www.webhancer.com
127.0.0.1 web-homepage.net
127.0.0.1 webinvestigator.com
127.0.0.1 www.webinvestigator.com
127.0.0.1 webiphoneaccess.com
127.0.0.1 www.webiphoneaccess.com
127.0.0.1 webiphonedownloads.com
127.0.0.1 www.webiphonedownloads.com
127.0.0.1 webipoddownload.com
127.0.0.1 www.webipoddownload.com
127.0.0.1 webloyalty.com
127.0.0.1 www.webloyalty.com
127.0.0.1 web-mediaplayer.com
127.0.0.1 www.web-mediaplayer.com
127.0.0.1 webnetinfo.net
127.0.0.1 www.webnetinfo.net
127.0.0.1 web-nexus.net
127.0.0.1 webpspdownload.com
127.0.0.1 www.webpspdownload.com
127.0.0.1 websearch.com
127.0.0.1 www.websearch.com
127.0.0.1 web-search.tk
127.0.0.1 websearch24.com
127.0.0.1 www.websearch24.com
127.0.0.1 websearchdot.com
127.0.0.1 websoft-a.com
127.0.0.1 www.websoft-a.com
127.0.0.1 websoftcodecdriver.com
127.0.0.1 www.websoftcodecdriver.com
127.0.0.1 websoftcodecdriver2.com
127.0.0.1 www.websoftcodecdriver2.com
127.0.0.1 websopot.com
127.0.0.1 www.websopot.com
127.0.0.1 webspyshield.com
127.0.0.1 www.webspyshield.com
127.0.0.1 webtop100.net
127.0.0.1 www.webtop100.net
127.0.0.1 webtopsecurity.com
127.0.0.1 www.webtopsecurity.com
127.0.0.1 weekend-movies.com
127.0.0.1 weeproject.com
127.0.0.1 www.weeproject.com
127.0.0.1 wegvonviren.com
127.0.0.1 www.wegvonviren.com
127.0.0.1 wer-bumst-mich.de
127.0.0.1 www.wer-bumst-mich.de
127.0.0.1 wethere.com
127.0.0.1 www.wethere.com
127.0.0.1 wetpornostars.com
127.0.0.1 wfix.com
127.0.0.1 wflu.com
127.0.0.1 wg581.com
127.0.0.1 www.wg581.com
127.0.0.1 whatmetodonow.org
127.0.0.1 www.whatmetodonow.org
127.0.0.1 whatsyoursearch.com
127.0.0.1 whazit.com
127.0.0.1 whitecodec.com
127.0.0.1 www.whitecodec.com
127.0.0.1 white-pages.ws
127.0.0.1 whitescat.com
127.0.0.1 www.whitescat.com
127.0.0.1 whittierblvd.com
127.0.0.1 whoisprivacyprotect.com
127.0.0.1 www.whoisprivacyprotect.com
127.0.0.1 winamp2007.com
127.0.0.1 www.winamp2007.com
127.0.0.1 winamp-download-now.com
127.0.0.1 www.winamp-download-now.com
127.0.0.1 winamp-hq.com
127.0.0.1 www.winamp-hq.com
127.0.0.1 winantispam.com
127.0.0.1 www.winantispam.com
127.0.0.1 winantispy.com
127.0.0.1 www.winantispy.com
127.0.0.1 winantispyware.com
127.0.0.1 www.winantispyware.com
127.0.0.1 winantivirus.com
127.0.0.1 www.winantivirus.com
127.0.0.1 winantiviruspro.com
127.0.0.1 www.winantiviruspro.com
127.0.0.1 win-anti-virus-pro.com
127.0.0.1 www.win-anti-virus-pro.com
127.0.0.1 windefender.com
127.0.0.1 www.windefender.com
127.0.0.1 windowenhancer.com
127.0.0.1 windrivecleaner.com
127.0.0.1 www.windrivecleaner.com
127.0.0.1 windrivesafe.com
127.0.0.1 www.windrivesafe.com
127.0.0.1 windupdates.com
127.0.0.1 winfirewall.com
127.0.0.1 www.winfirewall.com
127.0.0.1 winfixer.com
127.0.0.1 www.winfixer.com
127.0.0.1 winfixer2006.com
127.0.0.1 www.winfixer2006.com
127.0.0.1 win-in-casino.com
127.0.0.1 winmediacodec.com
127.0.0.1 www.winmediacodec.com
127.0.0.1 winmsn.com
127.0.0.1 winmx.click-new-download.com
127.0.0.1 www.winmx.click-new-download.com
127.0.0.1 winmxfrance.com
127.0.0.1 www.winmxfrance.com
127.0.0.1 winmx-freebie.com
127.0.0.1 www.winmx-freebie.com
127.0.0.1 winmx-music-download.com
127.0.0.1 www.winmx-music-download.com
127.0.0.1 winnanny.com
127.0.0.1 www.winnanny.com
127.0.0.1 winprotect.net
127.0.0.1 winrar-download-now.com
127.0.0.1 www.winrar-download-now.com
127.0.0.1 winrar-hq.com
127.0.0.1 www.winrar-hq.com
127.0.0.1 winrar-stop.com
127.0.0.1 www.winrar-stop.com
127.0.0.1 winshow.biz
127.0.0.1 winsoftware.com
127.0.0.1 www.winsoftware.com
127.0.0.1 wintvguide.com
127.0.0.1 www.wintvguide.com
127.0.0.1 win-virus-pro.com
127.0.0.1 www.win-virus-pro.com
127.0.0.1 winxpspeedup.com
127.0.0.1 www.winxpspeedup.com
127.0.0.1 winzip-11.com
127.0.0.1 www.winzip-11.com
127.0.0.1 winzip-hq.com
127.0.0.1 www.winzip-hq.com
127.0.0.1 wiresearch.com
127.0.0.1 wish7.com
127.0.0.1 wm.buhartes.info
127.0.0.1 www.wm.buhartes.info
127.0.0.1 wm.kannylizaciya.info
127.0.0.1 www.wm.kannylizaciya.info
127.0.0.1 wm.komforochka.info
127.0.0.1 www.wm.komforochka.info
127.0.0.1 wm.vother.info
127.0.0.1 www.wm.vother.info
127.0.0.1 wmaassistant.com
127.0.0.1 www.wmaassistant.com
127.0.0.1 wmvappliance.com
127.0.0.1 www.wmvappliance.com
127.0.0.1 wmvsolution.com
127.0.0.1 www.wmvsolution.com
127.0.0.1 wolfpacracing.com
127.0.0.1 wonder-context.com
127.0.0.1 www.wonder-context.com
127.0.0.1 woool.100888290cs.com
127.0.0.1 wordlist.jps.ru
127.0.0.1 worldantispy.com
127.0.0.1 www.worldantispy.com
127.0.0.1 worldbestadult.com
127.0.0.1 www.worldbestadult.com
127.0.0.1 worldray.com
127.0.0.1 www.worldray.com
127.0.0.1 worldsecurityonline.biz
127.0.0.1 www.worldsecurityonline.biz
127.0.0.1 worldtostart.com
127.0.0.1 www.worldtostart.com
127.0.0.1 worldusa.com
127.0.0.1 worldwideadvertisingservices.info
127.0.0.1 www.worldwideadvertisingservices.info
127.0.0.1 wowsearch.org
127.0.0.1 www.wowsearch.org
127.0.0.1 wpc2001.org
127.0.0.1 wr.mcboo.com
127.0.0.1 wrs.mcboo.com
127.0.0.1 wspzone.sexpornonline.com
127.0.0.1 wsupereva.it
127.0.0.1 www.wsupereva.it
127.0.0.1 www1.beruijindegunhadesun.com
127.0.0.1 www.www2.p0rt2.com
127.0.0.1 www2.p0rt2.com
127.0.0.1 www224.paypopup.com
127.0.0.1 www3.bigtrafficnetwork.com
127.0.0.1 www3.hadesunharuikeya.com
127.0.0.1 www4free.info
127.0.0.1 www5.worldray.com
127.0.0.1 www6.worldray.com
127.0.0.1 www.www7.logih.com
127.0.0.1 www7.logih.com
127.0.0.1 wwwadobe-download-now.com
127.0.0.1 www.www-audacity.com
127.0.0.1 www-audacity.com
127.0.0.1 wwwbet.net
127.0.0.1 wwwbetting.net
127.0.0.1 wwwcrazygirls-world.com
127.0.0.1 wwwdownloadwizard.com
127.0.0.1 www.www-free-tunes.com
127.0.0.1 www-free-tunes.com
127.0.0.1 wwwpokergames.com
127.0.0.1 wwwpokerplayers.com
127.0.0.1 wwwroulette.net
127.0.0.1 www.wwwsearch.biz
127.0.0.1 wwwsearch.biz
127.0.0.1 www.www-spyboot.com
127.0.0.1 www-spyboot.com
127.0.0.1 www-spybot.net
127.0.0.1 www.www-spybot.net
127.0.0.1 www-spybotcom.com
127.0.0.1 www.www-spybotcom.com
127.0.0.1 www-spybot-info.com
127.0.0.1 www.www-spybot-info.com
127.0.0.1 www-spywarebot.org
127.0.0.1 www.www-spywarebot.org
127.0.0.1 wwww.2211.net
127.0.0.1 wwww.adnet-plus.com
127.0.0.1 www.www-win-mx.com
127.0.0.1 www-win-mx.com
127.0.0.1 wwwxtremesoftware-ltd.com
127.0.0.1 wwwyahoo.downloadznow.net
127.0.0.1 www.wzdq.cn
127.0.0.1 wzdq.cn
127.0.0.1 x.full-tgp.net
127.0.0.1 xads.cliks.org
127.0.0.1 www.xathzesocc.com
127.0.0.1 xathzesocc.com
127.0.0.1 xbeta69.com
127.0.0.1 www.xbxxrvnyes.com
127.0.0.1 xbxxrvnyes.com
127.0.0.1 xcomics4u.com
127.0.0.1 xcorriere.it
127.0.0.1 www.xcorriere.it
127.0.0.1 xerocodec.com
127.0.0.1 www.xerocodec.com
127.0.0.1 xerocodec.net
127.0.0.1 www.xerocodec.net
127.0.0.1 x-google.net
127.0.0.1 xhcodec.com
127.0.0.1 www.xhcodec.com
127.0.0.1 www.xibu315.com
127.0.0.1 xibu315.com
127.0.0.1 xic-bs.com
127.0.0.1 www.xjupiter.com
127.0.0.1 xjupiter.com
127.0.0.1 xlarea.com
127.0.0.1 www.xlarea.com
127.0.0.1 xldd.com
127.0.0.1 www.xldd.com
127.0.0.1 xldr.com
127.0.0.1 x-library.com
127.0.0.1 xlola.underagehost.com
127.0.0.1 xmlsearch.mygeek.com
127.0.0.1 xorriere.it
127.0.0.1 www.xorriere.it
127.0.0.1 www.xosearchox.com
127.0.0.1 xosearchox.com
127.0.0.1 xp.attrezzi.biz
127.0.0.1 xp18.com
127.0.0.1 xpantiviruspro.com
127.0.0.1 www.xpantiviruspro.com
127.0.0.1 www.xpassgenerator.com
127.0.0.1 xpassgenerator.com
127.0.0.1 www.xpasswordmanager.com
127.0.0.1 xpasswordmanager.com
127.0.0.1 xponlinescanner.com
127.0.0.1 www.xponlinescanner.com
127.0.0.1 x-porngalleries.com
127.0.0.1 www.x-porngalleries.com
127.0.0.1 x-pornmoviez.com
127.0.0.1 www.x-pornmoviez.com
127.0.0.1 x-pornmovz.com
127.0.0.1 www.x-pornmovz.com
127.0.0.1 xp-protect-2008.com
127.0.0.1 www.xp-protect-2008.com
127.0.0.1 x-prnmoviez.com
127.0.0.1 www.x-prnmoviez.com
127.0.0.1 www.xp-vista.com
127.0.0.1 xp-vista.com
127.0.0.1 www.x-ratedclips.com
127.0.0.1 x-ratedclips.com
127.0.0.1 xrdenterprise.com
127.0.0.1 www.xrdenterprise.com
127.0.0.1 www.xrenoder.com
127.0.0.1 xrenoder.com
127.0.0.1 xrenosearch.com
127.0.0.1 xrensmagpost.com
127.0.0.1 www.xsec.org
127.0.0.1 xsec.org
127.0.0.1 xsex.ws
127.0.0.1 www.xsremover.com
127.0.0.1 xsremover.com
127.0.0.1 www.xtipp.de
127.0.0.1 xtipp.de
127.0.0.1 xtosearch.biz
127.0.0.1 www.xtosearch.biz
127.0.0.1 xtragay.com
127.0.0.1 xtravideos.com
127.0.0.1 www.xtravideos.com
127.0.0.1 xtremesoftware-ltd.com
127.0.0.1 xu.pl
127.0.0.1 xu.xu.pl
127.0.0.1 xupiter.com
127.0.0.1 www.xupiter.com
127.0.0.1 www.xvgate.com
127.0.0.1 xvgate.com
127.0.0.1 xvidscollection.com
127.0.0.1 www.xvidscollection.com
127.0.0.1 xvsenterprise.com
127.0.0.1 www.xvsenterprise.com
127.0.0.1 x-webdesign.com
127.0.0.1 www.x-webdesign.com
127.0.0.1 www.xwebsearch.biz
127.0.0.1 xwebsearch.biz
127.0.0.1 xxlblog.info
127.0.0.1 www.xxlblog.info
127.0.0.1 xxx.com
127.0.0.1 www.xxx.com
127.0.0.1 www.xxxallvideo.com
127.0.0.1 xxxallvideo.com
127.0.0.1 xxxcategories.com
127.0.0.1 xxxemailxxx.com
127.0.0.1 www.xxxmovietour.com
127.0.0.1 xxxmovietour.com
127.0.0.1 xxxpornmovs.com
127.0.0.1 www.xxxpornmovs.com
127.0.0.1 www.xxxteenfilm.com
127.0.0.1 xxxteenfilm.com
127.0.0.1 xxxtoolbar.com
127.0.0.1 www.xxxzonevideo.com
127.0.0.1 xxxzonevideo.com
127.0.0.1 xyzlimited.com
127.0.0.1 www.xyzlimited.com
127.0.0.1 xyzsolution.com
127.0.0.1 www.xyzsolution.com
127.0.0.1 xzoomy.com
127.0.0.1 www.yahabags.com
127.0.0.1 yahabags.com
127.0.0.1 yahoo.downloadznow.net
127.0.0.1 yahoo.panet.org
127.0.0.1 yboeragu.com
127.0.0.1 www.yboeragu.com
127.0.0.1 ydaproject.com
127.0.0.1 www.ydaproject.com
127.0.0.1 yeak.net
127.0.0.1 y-e-l-l-o-w.com
127.0.0.1 yellow500.com
127.0.0.1 yezol.com
127.0.0.1 ygcoueorn.com
127.0.0.1 www.ygcoueorn.com
127.0.0.1 ygcovtvcp.com
127.0.0.1 www.ygcovtvcp.com
127.0.0.1 ygoogle.it
127.0.0.1 www.ygoogle.it
127.0.0.1 www.ygsondheks.info
127.0.0.1 ygsondheks.info
127.0.0.1 www.yim-stop.com
127.0.0.1 yim-stop.com
127.0.0.1 yiscali.it
127.0.0.1 www.yiscali.it
127.0.0.1 ymctaaqada.com
127.0.0.1 www.ymctaaqada.com
127.0.0.1 ymct-aaqada.com
127.0.0.1 www.ymct-aaqada.com
127.0.0.1 ymctavxiz.biz
127.0.0.1 www.ymctavxiz.biz
127.0.0.1 ynotube.com
127.0.0.1 www.ynotube.com
127.0.0.1 www.yoogee.com
127.0.0.1 yoogee.com
127.0.0.1 yoogle.it
127.0.0.1 www.yoogle.it
127.0.0.1 yootube.info
127.0.0.1 www.yops.biz
127.0.0.1 yops.biz
127.0.0.1 youfindall.com
127.0.0.1 youfindall.net
127.0.0.1 youlikehere.com
127.0.0.1 www.youlikehere.com
127.0.0.1 youniyouwo.com
127.0.0.1 www.youniyouwo.com
127.0.0.1 yourbookmarks.info
127.0.0.1 yourbookmarks.ws
127.0.0.1 yourchillyvids.com
127.0.0.1 www.yourchillyvids.com
127.0.0.1 www.yourcodec.com
127.0.0.1 yourcodec.com
127.0.0.1 www.yourieprotect.com
127.0.0.1 yourieprotect.com
127.0.0.1 www.youriesafety.com
127.0.0.1 youriesafety.com
127.0.0.1 www.youriesecure.com
127.0.0.1 youriesecure.com
127.0.0.1 yourphotozone.com
127.0.0.1 www.yourphotozone.com
127.0.0.1 your-prescriptions.net
127.0.0.1 www.yoursearchspace.com
127.0.0.1 yoursearchspace.com
127.0.0.1 yoursitebar.com
127.0.0.1 you-search.com.ru
127.0.0.1 you-search.com
127.0.0.1 ypir.com
127.0.0.1 ysa-info.net
127.0.0.1 www.ysbweb.com
127.0.0.1 ysbweb.com
127.0.0.1 ytiscali.it
127.0.0.1 www.ytiscali.it
127.0.0.1 ytrenitalia.it
127.0.0.1 www.ytrenitalia.it
127.0.0.1 yukohamano.com
127.0.0.1 yunibo.it
127.0.0.1 www.yunibo.it
127.0.0.1 ywebsearch.info
127.0.0.1 www.zabywjwzlr.biz.biz
127.0.0.1 zabywjwzlr.biz.biz
127.0.0.1 zalitalia.it
127.0.0.1 www.zalitalia.it
127.0.0.1 zangcodec.net
127.0.0.1 www.zangcodec.net
127.0.0.1 www.zangocash.com
127.0.0.1 zangocash.com
127.0.0.1 zapros.com
127.0.0.1 www.zcodec.com
127.0.0.1 zcodec.com
127.0.0.1 www.zdrqmpad.com
127.0.0.1 zdrqmpad.com
127.0.0.1 www.zelaznyworld.com
127.0.0.1 zelaznyworld.com
127.0.0.1 www.zenotecnico.com
127.0.0.1 zenotecnico.com
127.0.0.1 www.zenotecnico2.com
127.0.0.1 zenotecnico2.com
127.0.0.1 zero.bestmanage.org
127.0.0.1 zero.bestmanage0.org
127.0.0.1 zero.bestmanage1.org
127.0.0.1 zero.bestmanage2.org
127.0.0.1 zero.bestmanage3.org
127.0.0.1 zero.bestmanage4.org
127.0.0.1 zero.bestmanage5.org
127.0.0.1 zero.bestmanage6.org
127.0.0.1 zero.bestmanage7.org
127.0.0.1 zero.bestmanage8.org
127.0.0.1 zero.bestmanage9.org
127.0.0.1 zero.serverc.org
127.0.0.1 zero.sisdotnet.com
127.0.0.1 zerocodec.com
127.0.0.1 www.zerocodec.com
127.0.0.1 www.zero-codec.com
127.0.0.1 zero-codec.com
127.0.0.1 zesearch.com
127.0.0.1 www.zestyfind.com
127.0.0.1 zestyfind.com
127.0.0.1 www.zfxaqzkevi.com
127.0.0.1 zfxaqzkevi.com
127.0.0.1 www.zhmbscwdgk.biz
127.0.0.1 zhmbscwdgk.biz
127.0.0.1 www.zipcodec.com
127.0.0.1 zipcodec.com
127.0.0.1 ziportal.com
127.0.0.1 zipportal.com
127.0.0.1 www.zippy-lookup.com
127.0.0.1 zippy-lookup.com
127.0.0.1 www.zjkjw.gov.cn
127.0.0.1 zjkjw.gov.cn
127.0.0.1 www.znext.com
127.0.0.1 znext.com
127.0.0.1 www.zonealarm-download-now.com
127.0.0.1 zonealarm-download-now.com
127.0.0.1 www.zonealarm-stop.com
127.0.0.1 zonealarm-stop.com
127.0.0.1 www.zone-media.com
127.0.0.1 zone-media.com
127.0.0.1 zoneoffreeporn.com
127.0.0.1 zoofil.com
127.0.0.1 zoomegasite.com
127.0.0.1 zpwebsource.com
127.0.0.1 www.zpwebsource.com
127.0.0.1 zqavanjpn.biz
127.0.0.1 www.zqavanjpn.biz
127.0.0.1 www.z-quest.com
127.0.0.1 z-quest.com
127.0.0.1 zsupereva.it
127.0.0.1 www.zsupereva.it
127.0.0.1 zsvcompany.com
127.0.0.1 www.zsvcompany.com
127.0.0.1 www.zurrusco.com
127.0.0.1 zurrusco.com
127.0.0.1 zvimigdal.com
127.0.0.1 zxcsolution.com
127.0.0.1 www.zxcsolution.com
127.0.0.1 www.zxlinks.com
127.0.0.1 zxlinks.com
127.0.0.1 zyban-zocor-levitra.com
127.0.0.1 www.meine-grusskarten.de
127.0.0.1 meine-grusskarten.de
==================================
Process Privileges Scan
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1644, C:\WINDOWS\SYSTEM32\SISTRAY.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1660, C:\WINDOWS\SYSTEM32\KEYHOOK.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1704, E:\HP\HP SOFTWARE UPDATE\HPWUSCHD2.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1740, C:\WINDOWS\VSNPSTD3.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1752, C:\PROGRAM FILES\BELGACOM\BIN\SPRTCMD.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 472, E:\ULEAD SYSTEMS\ULEAD PHOTO EXPRESS 4.0 SE\CALCHECK.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 3016, E:\HP\DIGITAL IMAGING\BIN\HPQIMZONE.EXE]
==================================
API HOOK
RVA Error: LoadLibraryA (Dangerous Level: High, Hooked by Module: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA Error: LoadLibraryExA (Dangerous Level: High, Hooked by Module: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA Error: LoadLibraryExW (Dangerous Level: High, Hooked by Module: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA Error: LoadLibraryW (Dangerous Level: High, Hooked by Module: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA Error: GetProcAddress (Dangerous Level: High, Hooked by Module: \??\C:\WINDOWS\system32\drivers\klif.sys)
==================================
Hidden Process
N/A
==================================
/CODE -
Contributeur sécuritéraphaelfargeon
Ton message est transféré là
http://www.commentcamarche.net/forum/affich 5995414 raphaelfargeon infections sous vista
Salut DllD
Tu me fais trop d'honneur.
Réellement, je connais très peu.
Bonne journée
Al.-
hello al , comment vas tu? voila j'ai un peu laissé souffler le pc , j'ai pas eu le temps de beaucoup surfer non plus juste ouvert quelques pages sans aucunes specificité style hotmail msn etc... je poste le log demandé , dis moi ce que tu en pense parce que moi j'ai un doute,meme si le pc est cool en apparences certaines choses dans le host me font tiquer, je poste part 1
[CODE]
2008-04-19,00:11:42
System Repair Engineer 2.5.16.900
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed
Follow item(s) have been choosed:
All Boot Items (Including Registry, Startup Folders, Services and so on)
Browser Add-ons
Runing Processes (Including process model information)
File Associations
Winsock Provider
Autorun.Inf
HOSTS File
Process Privileges Scan
Boot Items
Registry
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Component Publisher]
<MsnMsgr><"C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background> [(Verified)Microsoft Corporation]
<SpybotSD TeaTimer><C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe> [(Verified)Safer Networking Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows Publisher]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Windows Publisher]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Windows Publisher]
<SiSUSBRG><C:\WINDOWS\SiSUSBrg.exe> [Silicon Integrated Systems Corp.]
<SiS Tray><C:\WINDOWS\system32\sistray.EXE> [Silicon Integrated Systems Corporation]
<SiS Windows KeyHook><C:\WINDOWS\system32\keyhook.exe> [Silicon Integrated Systems Corporation]
<NeroFilterCheck><C:\WINDOWS\system32\NeroCheck.exe> [Ahead Software Gmbh]
<HP Software Update><E:\HP\HP Software Update\HPWuSchd2.exe> [Hewlett-Packard Development Company, L.P.]
<PinnacleDriverCheck><C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg> []
<snpstd3><C:\WINDOWS\vsnpstd3.exe> []
<Belgacom><"C:\Program Files\Belgacom\bin\sprtcmd.exe" /P Belgacom> [SupportSoft, Inc.]
<DAEMON Tools><"C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033> [(Verified)DAEMON Tools Code Signing Services]
<Adobe Reader Speed Launcher><"E:\Adobe\Reader 8.0\Reader\Reader_sl.exe"> [(Verified)"Adobe Systems, Incorporated"]
<AVP><"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"> [(Verified)Kaspersky Lab]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Publisher]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll> [(Verified)Kaspersky Lab]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
<IE7 Uninstall Stub><C:\WINDOWS\system32\ieudinit.exe> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
<Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
<Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
<Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
<NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
<Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
<Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
<Carnet d'adresses 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
<N/A><C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install> [Microsoft Corporation]
==================================
Startup Folders
[Contrôleur de calendrier Ulead]
<C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Contrôleur de calendrier Ulead.lnk --> E:\ULEADS~1\ULEADP~1.0SE\CalCheck.exe [Ulead Systems, Inc.]><N>
[Démarrage rapide de HP Photosmart Premier]
<C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Démarrage rapide de HP Photosmart Premier.lnk --> E:\HP\DIGITA~1\bin\hpqthb08.exe [Hewlett-Packard Development Company, L.P.]><N>
[HP Digital Imaging Monitor]
<C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\HP Digital Imaging Monitor.lnk --> E:\HP\DIGITA~1\bin\hpqtra08.exe [Hewlett-Packard Development Company, L.P.]><N>
[InterVideo WinCinema Manager.lnk.disa]
<C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\InterVideo WinCinema Manager.lnk.disabled --> E:\INTERV~1\Common\Bin\WINCIN~1.EXE []><N>
[Microsoft Office]
<C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk --> E:\MICROS~1\Office10\OSA.EXE [Microsoft Corporation]><N>
[Outil de mise à jour Google.lnk.disa]
<C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Outil de mise à jour Google.lnk.disabled --> C:\Program Files\Google\Google Updater\GoogleUpdater.exe [N/A]><N>
[WinZip Quick Pick]
<C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\WinZip Quick Pick.lnk --> E:\WinZip\WZQKPICK.EXE [WinZip Computing, S.L.]><N>
==================================
Services
[Kaspersky Internet Security 7.0 / AVP][Running/Auto Start]
<"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" -r><Kaspersky Lab>
/ Bonjour Service[Running/Auto Start]
<"C:\Program Files\Bonjour\mDNSResponder.exe"><Apple Computer, Inc.>
[Pml Driver HPZ12 / Pml Driver HPZ12][Running/Auto Start]
<C:\WINDOWS\system32\HPZipm12.exe><HP>
[PC Tools Auxiliary Service / sdAuxService][Stopped/Manual Start]
<C:\Program Files\Spyware Doctor\pctsAuxs.exe><PC Tools>
[PC Tools Security Service / sdCoreService][Stopped/Manual Start]
<C:\Program Files\Spyware Doctor\pctsSvc.exe><PC Tools>
[Windows Live Setup Service / WLSetupSvc][Stopped/Manual Start]
<"C:\Program Files\Windows Live\installer\WLSetupSvc.exe"><Microsoft Corporation>
==================================
Drivers
[ASAPIW2k / ASAPIW2k][Running/Manual Start]
<system32\drivers\ASAPIW2k.sys><Pinnacle Systems GmbH>
[Bluetooth Audio Service / BlueletAudio][Running/Manual Start]
<system32\DRIVERS\blueletaudio.sys><IVT Corporation.>
[Bluetooth SCO Audio Service / BlueletSCOAudio][Running/Manual Start]
<system32\DRIVERS\BlueletSCOAudio.sys><IVT Corporation.>
[BootScreen / BootScreen][Running/Boot Start]
<\SystemRoot\\SystemRoot\System32\drivers\vidstub.sys><N/A>
[Bluetooth PAN Network Adapter / BT][Stopped/Manual Start]
<system32\DRIVERS\btnetdrv.sys><IVT Corporation.>
[Bluetooth USB For Bluetooth Service / Btcsrusb][Stopped/Manual Start]
<System32\Drivers\btcusb.sys><IVT Corporation.>
[Bluetooth HID Enumerator / BTHidEnum][Running/Boot Start]
<\SystemRoot\System32\Drivers\vbtenum.sys><IVT Corporation.>
[Bluetooth HID Manager Service / BTHidMgr][Running/Boot Start]
<\SystemRoot\System32\Drivers\BTHidMgr.sys><IVT Corporation.>
[catchme / catchme][Stopped/Manual Start]
<\??\C:\DOCUME~1\EFF~1.EFF\LOCALS~1\Temp\catchme.sys><N/A>
[C-Media WDM Audio Interface / cmuda][Running/Manual Start]
<system32\drivers\cmuda.sys><C-Media Inc>
[Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet / FETNDIS][Stopped/Manual Start]
<system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.>
[IEEE-1284.4 Driver HPZid412 / HPZid412][Running/Manual Start]
<system32\DRIVERS\HPZid412.sys><HP>
[Print Class Driver for IEEE-1284.4 HPZipr12 / HPZipr12][Running/Manual Start]
<system32\DRIVERS\HPZipr12.sys><HP>
[USB to IEEE-1284.4 Translation Driver HPZius12 / HPZius12][Running/Manual Start]
<system32\DRIVERS\HPZius12.sys><HP>
[File Security Driver / IKFileSec][Stopped/Manual Start]
<\SystemRoot\system32\drivers\ikfilesec.sys><PCTools Research Pty Ltd.>
[System Filter Driver / IKSysFlt][Stopped/Manual Start]
<system32\drivers\iksysflt.sys><PCTools Research Pty Ltd.>
[System Security Driver / IKSysSec][Stopped/Manual Start]
<system32\drivers\iksyssec.sys><PCTools Research Pty Ltd.>
[kl1 / kl1][Running/Boot Start]
<\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
[klif / klif][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
[Kaspersky Anti-Virus NDIS Filter / klim5][Running/Manual Start]
<system32\DRIVERS\klim5.sys><Kaspersky Lab>
[Secdrv / Secdrv][Running/Auto Start]
<system32\DRIVERS\secdrv.sys><N/A>
[SiS315 / SiS315][Running/Manual Start]
<system32\DRIVERS\sisgrp.sys><Silicon Integrated Systems Corporation>
[SiS AGP Filter / SISAGP][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\SISAGPX.sys><Silicon Integrated Systems Corporation>
[SiSkp / SiSkp][Running/System Start]
<system32\DRIVERS\srvkp.sys><Silicon Integrated Systems Corporation>
[SiS PCI Fast Ethernet Adapter Driver / SISNIC][Running/Manual Start]
<system32\DRIVERS\sisnic.sys><SiS Corporation>
[USB PC Camera (SNPSTD3) / SNPSTD3][Running/Manual Start]
<system32\DRIVERS\snpstd3.sys><>
[sptd / sptd][Running/Boot Start]
<\SystemRoot\System32\Drivers\sptd.sys><N/A>
[Virtual Serial port driver / VComm][Running/Manual Start]
<system32\DRIVERS\VComm.sys><IVT Corporation.>
[Bluetooth VComm Manager Service / VcommMgr][Running/Manual Start]
<System32\Drivers\VcommMgr.sys><IVT Corporation.>
[Vcs support / Vcs][Running/Auto Start]
<\??\C:\WINDOWS\system32\Drivers\Vcs.sys><N/A>
[Codec Teletext standard / WSTCODEC][Stopped/Manual Start]
<system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
==================================
Browser Add-ons
[Aide pour le lien d'Adobe PDF Reader]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Spybot-S&D IE Protection]
{53707962-6F74-2D53-2644-206D7942484F} <C:\PROGRA~1\SPYBOT~1\SDHelper.dll, Safer Networking Limited>
[Programme d'aide de l'Assistant de connexion Windows Live]
{9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[Flash Saver]
{09EA1F80-F40A-11D1-B792-444553540001} <, N/A>
[Statistiques d’Anti-Virus Internet]
{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll, Kaspersky Lab>
[]
{85d1f590-48f4-11d9-9669-0800200c9a66} <%windir%\bdoscandel.exe, N/A>
[Spybot-S&D IE Protection]
{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} <C:\PROGRA~1\SPYBOT~1\SDHelper.dll, Safer Networking Limited>
[]
{e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, N/A>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[Microsoft Office Template and Media Control]
{02BCC737-B171-4746-94C9-0D8A0B2C0089} <C:\WINDOWS\Downloaded Program Files\IEAWSDC.DLL, >
[Office Genuine Advantage Validation Tool]
{05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} <C:\WINDOWS\system32\OGACheckControl.DLL, >
[BDSCANONLINE Control]
{5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} <C:\WINDOWS\DOWNLO~1\CONFLICT.1\oscan8.ocx, SOFTWIN>
[SupportSoft SmartIssue]
{01010E00-5E80-11D8-9E86-0007E96C65AE} <C:\Program Files\Fichiers communs\Supportsoft\bin\tgctlsi.dll, SupportSoft, Inc.>
[Microsoft Office Template and Media Control]
{02BCC737-B171-4746-94C9-0D8A0B2C0089} <C:\WINDOWS\Downloaded Program Files\IEAWSDC.DLL, >
[Office Genuine Advantage Validation Tool]
{05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} <C:\WINDOWS\system32\OGACheckControl.DLL, >
[Aide pour le lien d'Adobe PDF Reader]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Web Browser Applet Control]
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\WINDOWS\system32\msjava.dll, Microsoft Corporation>
[InformationCardSigninHelper Class]
{19916E01-B44E-4E31-94A4-4696DF46157B} <C:\WINDOWS\system32\icardie.dll, Microsoft Corporation>
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[XSL Template]
{2933BF94-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\system32\msxml3.dll, N/A>
[HtmlDlgSafeHelper Class]
{3050F819-98B5-11CF-BB82-00AA00BDCE0B} <C:\WINDOWS\system32\mshtmled.dll, Microsoft Corporation>
[Tabular Data Control]
{333C7BC4-460F-11D0-BC04-0080C7055A83} <C:\WINDOWS\system32\tdc.ocx, Microsoft Corporation>
[]
{4F07F79F-087F-42CF-8B36-7A88D06088E9} <C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGSC8~1.DLL, Microsoft Corporation>
[Spybot-S&D IE Protection]
{53707962-6F74-2D53-2644-206D7942484F} <C:\PROGRA~1\SPYBOT~1\SDHelper.dll, Safer Networking Limited>
[BDSCANONLINE Control]
{5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} <C:\WINDOWS\DOWNLO~1\CONFLICT.1\oscan8.ocx, SOFTWIN>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Active Desktop Mover]
{72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
[Microsoft Web Browser]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\ieframe.dll, Microsoft Corporation>
[XML DOM Document 4.0]
{88D969C0-F192-11D4-A65F-0040963251E5} <%SystemRoot%\system32\msxml4.dll, N/A>
[Free Threaded XML DOM Document 4.0]
{88D969C1-F192-11D4-A65F-0040963251E5} <%SystemRoot%\system32\msxml4.dll, N/A>
[XML Schema Cache 4.0]
{88D969C2-F192-11D4-A65F-0040963251E5} <%SystemRoot%\system32\msxml4.dll, N/A>
[XSL Template 4.0]
{88D969C3-F192-11D4-A65F-0040963251E5} <%SystemRoot%\system32\msxml4.dll, N/A>
[XML Data Source Object 4.0]
{88D969C4-F192-11D4-A65F-0040963251E5} <%SystemRoot%\system32\msxml4.dll, N/A>
[XML HTTP 4.0]
{88D969C5-F192-11D4-A65F-0040963251E5} <%SystemRoot%\system32\msxml4.dll, N/A>
[Programme d'aide de l'Assistant de connexion Windows Live]
{9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[RDS.DataSpace]
{BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Fichiers communs\System\msadc\msadco.dll, Microsoft Corporation>
[Adobe PDF Reader]
{CA8A9780-280D-11CF-A24D-444553540000} <C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroPDF.dll, Adobe Systems, Inc.>
[Msxml]
{CFC399AF-D876-11D0-9C10-00C04FC99C8E} <%SystemRoot%\system32\msxml3.dll, N/A>
[Contrôle de l'Assistant de connexion Windows Live]
{D2517915-48CE-4286-970F-921E881B8C5C} <C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx, Adobe Systems, Inc.>
[]
{E1771B7F-98BE-407F-BA67-AA16ADA5D0C5} <C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGSC8~1.DLL, Microsoft Corporation>
[XML HTTP Request]
{ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\system32\msxml3.dll, N/A>
[]
{F06608C7-1874-4EEA-B3B2-DF99EBB144B8} <C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGSC8~1.DLL, Microsoft Corporation>
[Free Threaded XML DOM Document 3.0]
{F5078F33-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A>
[XML Schema Cache 3.0]
{F5078F34-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A>
[XSL Template 3.0]
{F5078F36-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A>
[XML Data Source Object 3.0]
{F5078F39-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A>
[Free Threaded XML DOM Document]
{F6D90F12-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A>
[XML Data Source Object ]
{F6D90F14-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A>
[XML HTTP]
{F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A>
[Ajouter à Kaspersky Anti-Bannière]
<C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm, N/A>
==================================
Running Processes
[PID: 828][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 904][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 928][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\klogon.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 972][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\AppPatch\AcAdProc.dll] [Microsoft Corporation, 5.1.2600.3008 (xpsp.061004-0027)]
[PID: 984][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1148][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1236][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1336][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
[PID: 1372][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[c:\windows\system32\wudfsvc.dll] [Microsoft Corporation, 6.0.5716.32 (winmain(wmbla).060928-1756)]
[c:\windows\system32\WUDFPlatform.dll] [Microsoft Corporation, 6.0.5716.32 (winmain(wmbla).060928-1756)]
[PID: 1540][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1648][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[PID: 1820][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\hpz3l4pi.dll] [Hewlett-Packard Company, 60.061.243.00]
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\hpzpp4pi.dll] [Hewlett-Packard Corporation, 60.061.243.00]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[PID: 1960][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\ieframe.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\WINDOWS\system32\WPDShServiceObj.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
[C:\WINDOWS\system32\PortableDeviceTypes.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
[C:\WINDOWS\system32\PortableDeviceApi.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 8.0.0.2006102200]
[C:\PROGRA~1\SPYBOT~1\SDHelper.dll] [Safer Networking Limited, 1, 5, 0, 11]
[C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 8.1.0.0]
[E:\Microsoft Office\Office10\msohev.dll] [Microsoft Corporation, 10.0.2609]
[C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.FRA] [Adobe Systems, Inc., 8.0.0.0]
[PID: 296][C:\Program Files\Bonjour\mDNSResponder.exe] [Apple Computer, Inc., 1,0,3,1]
[PID: 396][C:\WINDOWS\system32\HPZipm12.exe] [HP, 10, 1, 1, 5]
[C:\WINDOWS\system32\HPZidr12.dll] [HP, 10, 1, 1, 5]
[PID: 536][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\Vizmicro.dll] [Visioneer Corporation, 1, 0, 0, 61]
[PID: 1644][C:\WINDOWS\system32\sistray.EXE] [Silicon Integrated Systems Corporation, 0.0.0.3540]
[C:\WINDOWS\system32\SiSApCom.dll] [Silicon Integrated Systems Corporation, 0.0.0.3540]
[C:\WINDOWS\system32\SiSBase.dll] [Silicon Integrated Systems Corporation, 6.14.10.3540]
[C:\WINDOWS\system32\InstFunc.dll] [Silicon Integrated Systems Corporation, 6.14.10.3540]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\WINDOWS\system32\SiSParse.dll] [Silicon Integrated Systems Corporation, 6.14.10.3540]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 1660][C:\WINDOWS\system32\keyhook.exe] [Silicon Integrated Systems Corporation, 0.0.0.3540]
[C:\WINDOWS\system32\SiSApCom.dll] [Silicon Integrated Systems Corporation, 0.0.0.3540]
[C:\WINDOWS\system32\SiSBase.dll] [Silicon Integrated Systems Corporation, 6.14.10.3540]
[C:\WINDOWS\system32\InstFunc.dll] [Silicon Integrated Systems Corporation, 6.14.10.3540]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\WINDOWS\system32\SiSParse.dll] [Silicon Integrated Systems Corporation, 6.14.10.3540]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 1704][E:\HP\HP Software Update\HPWuSchd2.exe] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 1740][C:\WINDOWS\vsnpstd3.exe] [, 1, 0, 2, 2]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 1752][C:\Program Files\Belgacom\bin\sprtcmd.exe] [SupportSoft, Inc., 6,7,1257,0]
[C:\Program Files\Belgacom\bin\sprtsched.dll] [SupportSoft, Inc., 6,7,1035,0]
[C:\Program Files\Belgacom\bin\sprtevent.dll] [SupportSoft, Inc., 6,7,1257,0]
[C:\Program Files\Belgacom\bin\sprtfod.dll] [SupportSoft, Inc., 6,7,1257,0]
[C:\Program Files\Belgacom\bin\LIBEAY32.dll] [SupportSoft, Inc., 0, 9, 7, 3]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\Program Files\Belgacom\bin\sprtsync.dll] [SupportSoft, Inc., 6,7,1257,0]
[C:\Program Files\Belgacom\bin\sprtui.dll] [SupportSoft, Inc., 6,7,1154,0]
[C:\Program Files\Belgacom\bin\sprttrigger.dll] [SupportSoft, Inc., 6,7,1515,0]
[C:\Program Files\Belgacom\bin\sprtupdate.dll] [SupportSoft, Inc., 6,7,1035,0]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 1900][C:\Program Files\DAEMON Tools\daemon.exe] [DT Soft Ltd., 4.06.0.0]
[C:\Program Files\DAEMON Tools\daemon.dll] [DT Soft Ltd., 4.06.0.0]
[C:\Program Files\DAEMON Tools\PFCTOC.DLL] [Padus(R), Inc., 1, 0, 0, 12]
[C:\Program Files\DAEMON Tools\Plugins\Images\bw5mount.dll] [, 1.1.0.0]
[C:\Program Files\DAEMON Tools\Plugins\Images\ccdmount.dll] [GENERIC, 1.10.0.0]
[C:\Program Files\DAEMON Tools\Plugins\Images\cuemount.dll] [DT Soft Ltd., 1.0.0.0]
[C:\Program Files\DAEMON Tools\Plugins\Images\mdsmount.dll] [DT Soft Ltd., 1.16.0.0]
[C:\Program Files\DAEMON Tools\Plugins\Images\nrgmount.dll] [GENERIC, 1.11.0.0]
[C:\Program Files\DAEMON Tools\Plugins\Images\pdimount.dll] [GENERIC, 1.01.0.0]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 320][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 348][C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe] [Microsoft Corporation, 8.5.1302.1018]
[C:\Program Files\Windows Live\Messenger\MSIMG32.dll] [Patchou, 4, 50, 0, 312]
[C:\Program Files\Windows Live\Messenger\MSNCore.dll] [Microsoft Corporation, 8.5.1302.1018]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\Program Files\Windows Live\Messenger\msidcrl40.dll] [Microsoft Corporation, 4.100.313.1]
[C:\Program Files\Windows Live\Messenger\ContactsUX.dll] [Microsoft Corporation, 8.5.1302.1018]
[C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll] [Patchou, 4, 50, 0, 312]
[C:\Program Files\Messenger Plus! Live\Detoured.dll] [N/A, ]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Windows Live\Messenger\msgslang.8.5.1302.1018.dll] [Microsoft Corporation, 8.5.1302.1018]
[C:\Program Files\Windows Live\Messenger\msgsres.dll] [Microsoft Corporation, 8.5.1302.1018]
[C:\Program Files\Messenger Plus! Live\MsgPlusLiveRes.dll] [Patchou, 4, 50, 0, 312]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[C:\Program Files\Windows Live\Messenger\custsat.dll] [Microsoft Corporation, 9.0.3790.2428 (srv03_sp1_qfe.050422-1043)]
[C:\Program Files\Windows Live\Messenger\lcapi.dll] [Microsoft Corporation, 1.7.256.0 (RTC Version 4.3.5371.0) built by: msn8.0(rtbldlab)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[C:\Program Files\Windows Live\Messenger\lcres.dll] [Microsoft Corp., 1.7.109.0 (RTC Version 4.3.5371.0) built by: msn8.0(rtbldlab)]
[C:\Program Files\Windows Live\Messenger\RTMPLTFM.dll] [Microsoft Corporation, 3.0.5774.0 built by: media_msn80]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Windows Live\Messenger\MSGSWCAM.dll] [Microsoft Corporation, 8.5.1302.1018]
[C:\WINDOWS\system32\sirenacm.dll] [Microsoft Corporation, 8.5.1302.1018]
[C:\WINDOWS\vsnpstd3.dll] [ , 1, 0, 1, 6]
[PID: 408][C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe] [Safer Networking Limited, 1, 5, 2, 16]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[C:\Program Files\Spybot - Search & Destroy\advcheck.dll] [Safer Networking Limited, 1, 5, 4, 5]
[PID: 472][E:\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe] [Ulead Systems, Inc., 4, 0, 0, 0]
[E:\Ulead Systems\Ulead Photo Express 4.0 SE\u32Cfg.dll] [Ulead Systems, Inc., 4, 0, 0, 0]
[E:\Ulead Systems\Ulead Photo Express 4.0 SE\u32sn.dll] [Ulead Systems, Inc., 7.0.0.0]
[E:\Ulead Systems\Ulead Photo Express 4.0 SE\u32Prod.dll] [Ulead Systems, Inc., 4.0]
[E:\Ulead Systems\Ulead Photo Express 4.0 SE\u32Comm.dll] [Ulead Systems, Inc., 7.0.0.0]
[E:\Ulead Systems\Ulead Photo Express 4.0 SE\CalRemi.dll] [Ulead Systems, Inc., 4, 0, 0, 0]
[E:\Ulead Systems\Ulead Photo Express 4.0 SE\PEBase.dll] [Ulead Systems, Inc., 4, 0, 0, 0]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[E:\Ulead Systems\Ulead Photo Express 4.0 SE\ipeConst.dll] [Ulead Systems, Inc., 4, 0, 0, 0]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 1100][E:\HP\Digital Imaging\bin\hpqtra08.exe] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[E:\HP\Digital Imaging\bin\hpqcxm08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpquio08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpqtra08.rsc] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpqtao08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\Unload\hpnkhTA.dll] [Hewlett-Packard, 7.0.0.229]
[C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\WINDOWS\system32\ATL71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MFC71FRA.DLL] [Microsoft Corporation, 7.10.3077.0]
[E:\HP\Digital Imaging\bin\hpqrif08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpqmif08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpotradd.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\Bin\hphtra09.dll] [Hewlett-Packard, 60,0,114,000]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[E:\HP\Digital Imaging\bin\hpocxi08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpqcob08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpodio08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpodvd09.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpoddcomm09.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[C:\WINDOWS\system32\hpzipr12.dll] [HP, 10, 1, 1, 5]
[E:\HP\Digital Imaging\bin\hpqusg.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\WINDOWS\system32\hpzidr12.dll] [HP, 10, 1, 1, 5]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[PID: 2104][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2404][E:\WinZip\WZQKPICK.EXE] [WinZip Computing, S.L., 1.0 (32-bit)]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 3016][E:\HP\Digital Imaging\bin\hpqimzone.exe] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.573]
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.573]
[c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.573]
[c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_2ea82469\mscorlib.dll] [N/A, ]
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.573]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[c:\windows\assembly\gac\hpqiface\4.0.0.0__a53cf5803f4c3827\hpqiface.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.573]
[c:\windows\assembly\nativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_cb983c23\system.windows.forms.dll] [N/A, ]
[c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.573]
[c:\windows\assembly\nativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_cd5a871d\system.drawing.dll] [N/A, ]
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.573]
[c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.573]
[c:\windows\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_8e3bd234\system.dll] [N/A, ]
[c:\windows\assembly\gac\hpqcc2\3.0.0.0__a53cf5803f4c3827\hpqcc2.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqutils\4.0.0.0__a53cf5803f4c3827\hpqutils.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqfmrsc\4.0.0.0__a53cf5803f4c3827\hpqfmrsc.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqtray\4.0.0.0__a53cf5803f4c3827\hpqtray.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqovskn\3.0.0.0__a53cf5803f4c3827\hpqovskn.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqthumb\3.0.0.0__a53cf5803f4c3827\hpqthumb.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqimvlt\3.0.0.0__a53cf5803f4c3827\hpqimvlt.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqimgrc\4.0.0.0__a53cf5803f4c3827\hpqimgrc.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[e:\hp\digital imaging\bin\fr\hpqimzone.resources.dll] [ , 065.000.099.000]
[c:\windows\assembly\gac\hpqntrop\4.0.0.0__a53cf5803f4c3827\hpqntrop.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\interop.hpqcxm08\3.0.0.0__a53cf5803f4c3827\interop.hpqcxm08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpqcxm08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.573]
[c:\windows\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_4373231d\system.xml.dll] [N/A, ]
[c:\windows\assembly\gac\lead\13.0.0.113__9cf889f53ea9b907\lead.dll] [LEAD Technologies, Inc., 13.0.0.113]
[c:\windows\assembly\gac\lead.wrapper\13.0.0.113__9cf889f53ea9b907\lead.wrapper.dll] [LEAD Technologies, Inc., 13.0.0.113]
[E:\HP\Digital Imaging\bin\ltkrn13n.dll] [LEAD Technologies, Inc., 13.0.0.098]
[c:\windows\assembly\gac\hpqtray.resources\4.0.0.0_fr_a53cf5803f4c3827\hpqtray.resources.dll] [ , 065.000.099.000]
[c:\windows\assembly\gac\hpqfmrsc.resources\4.0.0.0_fr_a53cf5803f4c3827\hpqfmrsc.resources.dll] [ , 065.000.099.000]
[c:\windows\assembly\gac\lead.windows.forms\13.0.0.113__9cf889f53ea9b907\lead.windows.forms.dll] [LEAD Technologies, Inc., 13.0.0.113]
[c:\windows\assembly\gac\lead.drawing\13.0.0.113__9cf889f53ea9b907\lead.drawing.dll] [LEAD Technologies, Inc., 13.0.0.113]
[c:\windows\assembly\gac\interop.hpqimgr\4.0.0.0__a53cf5803f4c3827\interop.hpqimgr.dll] [ , 4.0.0.0]
[E:\HP\Digital Imaging\Bin\hpqimgr.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\ATL71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MFC71FRA.DLL] [Microsoft Corporation, 7.10.3077.0]
[c:\windows\assembly\gac\hpqasset\4.0.0.0__a53cf5803f4c3827\hpqasset.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[e:\hp\digital imaging\bin\hpqmirsc.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[e:\hp\digital imaging\bin\fr\hpqmirsc.resources.dll] [ , 065.000.099.000]
[c:\windows\assembly\gac\hpqedit\3.0.0.0__a53cf5803f4c3827\hpqedit.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqvideo\3.0.0.0__a53cf5803f4c3827\hpqvideo.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\lead.windows.forms.drawingcontainer\13.0.0.113__9cf889f53ea9b907\lead.windows.forms.drawingcontainer.dll] [LEAD Technologies, Inc., 13.0.0.113]
[c:\windows\assembly\gac\hpqmdmr\4.0.0.0__a53cf5803f4c3827\hpqmdmr.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\lead.drawing.imaging.imageprocessing\13.0.0.113__9cf889f53ea9b907\lead.drawing.imaging.imageprocessing.dll] [LEAD Technologies, Inc., 13.0.0.113]
[c:\windows\assembly\gac\hpqimlib\3.0.0.0__a53cf5803f4c3827\hpqimlib.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqedit.resources\3.0.0.0_fr_a53cf5803f4c3827\hpqedit.resources.dll] [ , 065.000.099.000]
==================================
File Associations
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG Error. [regedit.exe "%1" %*]
.BAT OK. ["%1" %*]
.SCR Error. ["%1" %*]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock Provider
N/A
==================================
Autorun.Inf
N/A
==================================
HOSTS File
127.0.0.1 www.syupereva.it
127.0.0.1 t.rack.cc
127.0.0.1 t058.com
127.0.0.1 t8iscali.it
127.0.0.1 www.t8iscali.it
127.0.0.1 t9iscali.it
127.0.0.1 www.t9iscali.it
127.0.0.1 tacil.org
127.0.0.1 tamotua.com
127.0.0.1 www.tamotua.com
127.0.0.1 tangounion.com
127.0.0.1 targetsaver.com
127.0.0.1 www.targetsaver.com
127.0.0.1 tastethemusic.com
127.0.0.1 tattoo-paradies.de
127.0.0.1 www.tattoo-paradies.de
127.0.0.1 tattoo-server.com
127.0.0.1 www.tattoo-server.com
127.0.0.1 tattoos-paradies.de
127.0.0.1 www.tattoos-paradies.de
127.0.0.1 tax-refund4you.com
127.0.0.1 tbcode.com
127.0.0.1 www.tbcode.com
127.0.0.1 tbvg.com
127.0.0.1 tdak.com
127.0.0.1 tdko.com
127.0.0.1 tdmy.com
127.0.0.1 tech-jobs.ws
127.0.0.1 technicalcontact.com
127.0.0.1 www.technicalcontact.com
127.0.0.1 technology-related.com
127.0.0.1 teen-biz.com
127.0.0.1 teenhost.net
127.0.0.1 teenmonster.com
127.0.0.1 www.teenmonster.com
127.0.0.1 teen-pic-post.com
127.0.0.1 teenpornosex.com
127.0.0.1 teens4free.net
127.0.0.1 teensact.com
127.0.0.1 teensexfans.com
127.0.0.1 www.teensexfans.com
127.0.0.1 teensgate.com
127.0.0.1 teensguru.com
127.0.0.1 teenspornmag.com
127.0.0.1 www.teenspornmag.com
127.0.0.1 teenswamp.com
127.0.0.1 tefs.com
127.0.0.1 telecharger-avast.com
127.0.0.1 www.telecharger-avast.com
127.0.0.1 temptationclips.com
127.0.0.1 www.temptationclips.com
127.0.0.1 tepubblica.it
127.0.0.1 www.tepubblica.it
127.0.0.1 terafinder.com
127.0.0.1 teslaplus.com
127.0.0.1 www.teslaplus.com
127.0.0.1 testosterone-birth-control.com
127.0.0.1 tfil.com
127.0.0.1 tfiscali.it
127.0.0.1 www.tfiscali.it
127.0.0.1 tgazzetta.it
127.0.0.1 www.tgazzetta.it
127.0.0.1 tgiscali.it
127.0.0.1 www.tgiscali.it
127.0.0.1 tgoogle.it
127.0.0.1 www.tgoogle.it
127.0.0.1 tgp-4-you.com
127.0.0.1 tgpie.com
127.0.0.1 www.tgpie.com
127.0.0.1 the.007guard.com
127.0.0.1 www.the.007guard.com
127.0.0.1 the818search-co.com
127.0.0.1 www.the818search-co.com
127.0.0.1 theadulteye.com
127.0.0.1 www.theadulteye.com
127.0.0.1 theaimonline.com
127.0.0.1 www.theaimonline.com
127.0.0.1 the-codec.com
127.0.0.1 www.the-codec.com
127.0.0.1 the-exit.com
127.0.0.1 thefakejournal.com
127.0.0.1 theguardservices.com
127.0.0.1 www.theguardservices.com
127.0.0.1 the-huns-yellow-pages.com
127.0.0.1 thehuy.net
127.0.0.1 thelimewiredownload.com
127.0.0.1 www.thelimewiredownload.com
127.0.0.1 themymoviessite.com
127.0.0.1 www.themymoviessite.com
127.0.0.1 thenewsearch.com
127.0.0.1 theoreon.com
127.0.0.1 www.theoreon.com
127.0.0.1 theproxy.org
127.0.0.1 thereall.realfet.com
127.0.0.1 www.thereall.realfet.com
127.0.0.1 therealsearch.com
127.0.0.1 thesafebar.com
127.0.0.1 www.thesafebar.com
127.0.0.1 thesafetytool.com
127.0.0.1 www.thesafetytool.com
127.0.0.1 thesearchs.com
127.0.0.1 www.thesearchs.com
127.0.0.1 thespamblock.com
127.0.0.1 www.thespamblock.com
127.0.0.1 thespybot.com
127.0.0.1 www.thespybot.com
127.0.0.1 thespyguard.com
127.0.0.1 www.thespyguard.com
127.0.0.1 thesten.com
127.0.0.1 thesuperxxx.com
127.0.0.1 www.thesuperxxx.com
127.0.0.1 the-ticket.net
127.0.0.1 www.the-ticket.net
127.0.0.1 thezirius.com
127.0.0.1 www.thezirius.com
127.0.0.1 think-adz.com
127.0.0.1 www.think-adz.com
127.0.0.1 think-adz2.com
127.0.0.1 www.think-adz2.com
127.0.0.1 thinstall.abetterinternet.com
127.0.0.1 thiscali.it
127.0.0.1 www.thiscali.it
127.0.0.1 thisfreemovies.com
127.0.0.1 www.thisfreemovies.com
127.0.0.1 thko.com
127.0.0.1 thornleygroup.com
127.0.0.1 ti8scali.it
127.0.0.1 www.ti8scali.it
127.0.0.1 ti9scali.it
127.0.0.1 www.ti9scali.it
127.0.0.1 tiacali.it
127.0.0.1 www.tiacali.it
127.0.0.1 tiascali.it
127.0.0.1 www.tiascali.it
127.0.0.1 ticali.it
127.0.0.1 www.ticali.it
127.0.0.1 tidcali.it
127.0.0.1 www.tidcali.it
127.0.0.1 tidscali.it
127.0.0.1 www.tidscali.it
127.0.0.1 tiere-infos.de
127.0.0.1 www.tiere-infos.de
127.0.0.1 tiiscali.it
127.0.0.1 www.tiiscali.it
127.0.0.1 tijscali.it
127.0.0.1 www.tijscali.it
127.0.0.1 tikscali.it
127.0.0.1 www.tikscali.it
127.0.0.1 tilscali.it
127.0.0.1 www.tilscali.it
127.0.0.1 tings.org
127.0.0.1 www.tinybar.com
127.0.0.1 tinybar.com
127.0.0.1 tioscali.it
127.0.0.1 www.tioscali.it
127.0.0.1 tisacali.it
127.0.0.1 www.tisacali.it
127.0.0.1 tisacli.it
127.0.0.1 www.tisacli.it
127.0.0.1 tiscaali.it
127.0.0.1 www.tiscaali.it
127.0.0.1 tiscail.it
127.0.0.1 www.tiscail.it
127.0.0.1 tiscaki.it
127.0.0.1 www.tiscaki.it
127.0.0.1 tiscakli.it
127.0.0.1 www.tiscakli.it
127.0.0.1 tiscal8.it
127.0.0.1 www.tiscal8.it
127.0.0.1 tiscal9.it
127.0.0.1 www.tiscal9.it
127.0.0.1 tiscalii.it
127.0.0.1 www.tiscalii.it
127.0.0.1 tiscalij.it
127.0.0.1 www.tiscalij.it
127.0.0.1 tiscalik.it
127.0.0.1 www.tiscalik.it
127.0.0.1 tiscalil.it
127.0.0.1 www.tiscalil.it
127.0.0.1 tiscaliu.it
127.0.0.1 www.tiscaliu.it
127.0.0.1 tiscalji.it
127.0.0.1 www.tiscalji.it
127.0.0.1 tiscalk.it
127.0.0.1 www.tiscalk.it
127.0.0.1 tiscalki.it
127.0.0.1 www.tiscalki.it
127.0.0.1 tiscalli.it
127.0.0.1 www.tiscalli.it
127.0.0.1 tiscalo.it
127.0.0.1 www.tiscalo.it
127.0.0.1 tiscaloi.it
127.0.0.1 www.tiscaloi.it
127.0.0.1 tiscalui.it
127.0.0.1 www.tiscalui.it
127.0.0.1 tiscaoi.it
127.0.0.1 www.tiscaoi.it
127.0.0.1 tiscaoli.it
127.0.0.1 www.tiscaoli.it
127.0.0.1 tiscaqli.it
127.0.0.1 www.tiscaqli.it
127.0.0.1 tiscasli.it
127.0.0.1 www.tiscasli.it
127.0.0.1 tiscawli.it
127.0.0.1 www.tiscawli.it
127.0.0.1 tiscaxli.it
127.0.0.1 www.tiscaxli.it
127.0.0.1 tiscazli.it
127.0.0.1 www.tiscazli.it
127.0.0.1 tiscdali.it
127.0.0.1 www.tiscdali.it
127.0.0.1 tiscfali.it
127.0.0.1 www.tiscfali.it
127.0.0.1 tisclai.it
127.0.0.1 www.tisclai.it
127.0.0.1 tiscli.it
127.0.0.1 www.tiscli.it
127.0.0.1 tiscqali.it
127.0.0.1 www.tiscqali.it
127.0.0.1 tiscqli.it
127.0.0.1 www.tiscqli.it
127.0.0.1 tiscsali.it
127.0.0.1 www.tiscsali.it
127.0.0.1 tiscsli.it
127.0.0.1 www.tiscsli.it
127.0.0.1 tiscvali.it
127.0.0.1 www.tiscvali.it
127.0.0.1 tiscwali.it
127.0.0.1 www.tiscwali.it
127.0.0.1 tiscxali.it
127.0.0.1 www.tiscxali.it
127.0.0.1 tisczali.it
127.0.0.1 www.tisczali.it
127.0.0.1 tisczli.it
127.0.0.1 www.tisczli.it
127.0.0.1 tisdcali.it
127.0.0.1 www.tisdcali.it
127.0.0.1 tisecali.it
127.0.0.1 www.tisecali.it
127.0.0.1 tisfcali.it
127.0.0.1 www.tisfcali.it
127.0.0.1 tisscali.it
127.0.0.1 www.tisscali.it
127.0.0.1 tisvcali.it
127.0.0.1 www.tisvcali.it
127.0.0.1 tiswcali.it
127.0.0.1 www.tiswcali.it
127.0.0.1 tisxali.it
127.0.0.1 www.tisxali.it
127.0.0.1 tisxcali.it
127.0.0.1 www.tisxcali.it
127.0.0.1 titanmotors.com
127.0.0.1 www.titanmotors.com
127.0.0.1 titanvision.com
127.0.0.1 titsianna.com
127.0.0.1 tit-x.com
127.0.0.1 tiuscali.it
127.0.0.1 www.tiuscali.it
127.0.0.1 tiwcali.it
127.0.0.1 www.tiwcali.it
127.0.0.1 tiwscali.it
127.0.0.1 www.tiwscali.it
127.0.0.1 tixcali.it
127.0.0.1 www.tixcali.it
127.0.0.1 tixscali.it
127.0.0.1 www.tixscali.it
127.0.0.1 tizscali.it
127.0.0.1 www.tizscali.it
127.0.0.1 tjar.com
127.0.0.1 tjaw.com
127.0.0.1 tjdo.com
127.0.0.1 tjem.com
127.0.0.1 tjgo.com
127.0.0.1 tjiscali.it
127.0.0.1 www.tjiscali.it
127.0.0.1 tkiscali.it
127.0.0.1 www.tkiscali.it
127.0.0.1 tliscali.it
127.0.0.1 www.tliscali.it
127.0.0.1 tns-counter.ru
127.0.0.1 www.tns-counter.ru
127.0.0.1 todays3xmovies.com
127.0.0.1 www.todays3xmovies.com
127.0.0.1 todaysfreeclips.com
127.0.0.1 www.todaysfreeclips.com
127.0.0.1 todaywarnings.com
127.0.0.1 www.todaywarnings.com
127.0.0.1 toddhayes.com
127.0.0.1 toiscali.it
127.0.0.1 www.toiscali.it
127.0.0.1 toogle.it
127.0.0.1 www.toogle.it
127.0.0.1 toohs.com
127.0.0.1 www.toohs.com
127.0.0.1 toolbar.azebar.com
127.0.0.1 www.toolbar.azebar.com
127.0.0.1 toolbar.cc
127.0.0.1 www.toolbar3.trafficgeneration.biz
127.0.0.1 www.toolbar5.trafficgeneration.biz
127.0.0.1 toolbarbest.biz
127.0.0.1 www.toolbarbest.biz
127.0.0.1 toolbarbucks.biz
127.0.0.1 www.toolbarbucks.biz
127.0.0.1 toolbarcash.com
127.0.0.1 toolbardollars.biz
127.0.0.1 www.toolbardollars.biz
127.0.0.1 toolbarpartner.com
127.0.0.1 toolbartraff.biz
127.0.0.1 www.toolbartraff.biz
127.0.0.1 toolsjambo.com
127.0.0.1 www.toolsjambo.com
127.0.0.1 toolster.de
127.0.0.1 www.toolster.de
127.0.0.1 toon-comics.com
127.0.0.1 tooncomics.com
127.0.0.1 top100drugs.info
127.0.0.1 www.top100drugs.info
127.0.0.1 top-banners.com
127.0.0.1 www.top-banners.com
127.0.0.1 topbrowsing.com
127.0.0.1 www.topbrowsing.com
127.0.0.1 topconverting.com
127.0.0.1 www.topconverting.com
127.0.0.1 topmovzonline.com
127.0.0.1 www.topmovzonline.com
127.0.0.1 topmp3choices.com
127.0.0.1 www.topmp3choices.com
127.0.0.1 topportalsite.org
127.0.0.1 www.topportalsite.org
127.0.0.1 topsearcher.com
127.0.0.1 www.topsearcher.com
127.0.0.1 topsecuritypage.com
127.0.0.1 www.topsecuritypage.com
127.0.0.1 topsecuritysite.net
127.0.0.1 www.topsecuritysite.net
127.0.0.1 topsite.us
127.0.0.1 www.topsite.us
127.0.0.1 topsites.us
127.0.0.1 www.topsites.us
127.0.0.1 topsitez.us
127.0.0.1 www.topsitez.us
127.0.0.1 topsmutclips.com
127.0.0.1 www.topsmutclips.com
127.0.0.1 topsoftwarefeed.com
127.0.0.1 www.topsoftwarefeed.com
127.0.0.1 topx.cc
127.0.0.1 topxxxvidz.com
127.0.0.1 www.topxxxvidz.com
127.0.0.1 torc.com
127.0.0.1 toriii.cc
127.0.0.1 www.toriii.cc
127.0.0.1 toscali.it
127.0.0.1 www.toscali.it
127.0.0.1 toseeka.com
127.0.0.1 www.toseeka.com
127.0.0.1 tossoalice.it
127.0.0.1 www.tossoalice.it
127.0.0.1 totalvelocity.com
127.0.0.1 www.totalvelocity.com
127.0.0.1 touchnsearch.com
127.0.0.1 www.touchnsearch.com
127.0.0.1 trackhits.cc
127.0.0.1 www.trackhits.cc
127.0.0.1 tracktraff.cc
127.0.0.1 traff.justcount.net
127.0.0.1 traff5all.biz
127.0.0.1 www.traff5all.biz
127.0.0.1 traffbest.biz
127.0.0.1 www.traffbest.biz
127.0.0.1 traffic-acc.com
127.0.0.1 www.traffic-acc.com
127.0.0.1 trafficback.com
127.0.0.1 trafficgeneration.biz
127.0.0.1 www.trafficgeneration.biz
127.0.0.1 trafficroup.com
127.0.0.1 www.trafficroup.com
127.0.0.1 traffic-ssl1.com
127.0.0.1 www.traffic-ssl1.com
127.0.0.1 trafficswitcher.com
127.0.0.1 traffsale1.biz
127.0.0.1 www.traffsale1.biz
127.0.0.1 traffstats.biz
127.0.0.1 www.traffstats.biz
127.0.0.1 traffweb1.biz
127.0.0.1 www.traffweb1.biz
127.0.0.1 transaction-id.com
127.0.0.1 www.transaction-id.com
127.0.0.1 trauergedichte.de
127.0.0.1 www.trauergedichte.de
127.0.0.1 travel.picture-posters.com
127.0.0.1 trebitalia.it
127.0.0.1 www.trebitalia.it
127.0.0.1 treenitalia.it
127.0.0.1 www.treenitalia.it
127.0.0.1 treitalia.it
127.0.0.1 www.treitalia.it
127.0.0.1 tremnitalia.it
127.0.0.1 www.tremnitalia.it
127.0.0.1 treniralia.it
127.0.0.1 www.treniralia.it
127.0.0.1 trenitaalia.it
127.0.0.1 www.trenitaalia.it
127.0.0.1 trenitaia.it
127.0.0.1 www.trenitaia.it
127.0.0.1 trenitakia.it
127.0.0.1 www.trenitakia.it
127.0.0.1 trenitaliaa.it
127.0.0.1 www.trenitaliaa.it
127.0.0.1 trenitaliaq.it
127.0.0.1 www.trenitaliaq.it
127.0.0.1 trenitalias.it
127.0.0.1 www.trenitalias.it
127.0.0.1 trenitaliaz.it
127.0.0.1 www.trenitaliaz.it
127.0.0.1 trenitaliia.it
127.0.0.1 www.trenitaliia.it
127.0.0.1 trenitalis.it
127.0.0.1 www.trenitalis.it
127.0.0.1 trenitalisa.it
127.0.0.1 www.trenitalisa.it
127.0.0.1 trenitallia.it
127.0.0.1 www.trenitallia.it
127.0.0.1 trenitaloa.it
127.0.0.1 www.trenitaloa.it
127.0.0.1 trenitalua.it
127.0.0.1 www.trenitalua.it
127.0.0.1 trenitralia.it
127.0.0.1 www.trenitralia.it
127.0.0.1 trenitslia.it
127.0.0.1 www.trenitslia.it
127.0.0.1 trenittalia.it
127.0.0.1 www.trenittalia.it
127.0.0.1 treniutalia.it
127.0.0.1 www.treniutalia.it
127.0.0.1 treniyalia.it
127.0.0.1 www.treniyalia.it
127.0.0.1 trenmitalia.it
127.0.0.1 www.trenmitalia.it
127.0.0.1 trennitalia.it
127.0.0.1 www.trennitalia.it
127.0.0.1 trenotalia.it
127.0.0.1 www.trenotalia.it
127.0.0.1 trentalia.it
127.0.0.1 www.trentalia.it
127.0.0.1 trenutalia.it
127.0.0.1 www.trenutalia.it
127.0.0.1 trepubblica.it
127.0.0.1 www.trepubblica.it
127.0.0.1 trernitalia.it
127.0.0.1 www.trernitalia.it
127.0.0.1 trewnitalia.it
127.0.0.1 www.trewnitalia.it
127.0.0.1 trial.updates.winsoftware.com
127.0.0.1 triscali.it
127.0.0.1 www.triscali.it
127.0.0.1 trojanerfilter.com
127.0.0.1 www.trojanerfilter.com
127.0.0.1 trojansfilter.com
127.0.0.1 www.trojansfilter.com
127.0.0.1 trojansfiltre.com
127.0.0.1 www.trojansfiltre.com
127.0.0.1 troonety.biz
127.0.0.1 www.troonety.biz
127.0.0.1 trossoalice.it
127.0.0.1 www.trossoalice.it
127.0.0.1 trrenitalia.it
127.0.0.1 www.trrenitalia.it
127.0.0.1 trtenitalia.it
127.0.0.1 www.trtenitalia.it
127.0.0.1 truecodec.com
127.0.0.1 www.truecodec.com
127.0.0.1 true-counter.com
127.0.0.1 www.true-counter.com
127.0.0.1 true-portal.com
127.0.0.1 trustedantivirus.com
127.0.0.1 www.trustedantivirus.com
127.0.0.1 truth-is-out-there.org
127.0.0.1 www.truth-is-out-there.org
127.0.0.1 truttogratis.it
127.0.0.1 www.truttogratis.it
127.0.0.1 trytechnical.com
127.0.0.1 tscali.it
127.0.0.1 www.tscali.it
127.0.0.1 tscodec.com
127.0.0.1 www.tscodec.com
127.0.0.1 tsmfirm.com
127.0.0.1 www.tsmfirm.com
127.0.0.1 tsx.org
127.0.0.1 ttiscali.it
127.0.0.1 www.ttiscali.it
127.0.0.1 ttrenitalia.it
127.0.0.1 www.ttrenitalia.it
127.0.0.1 tttogratis.it
127.0.0.1 www.tttogratis.it
127.0.0.1 ttuttogratis.it
127.0.0.1 www.ttuttogratis.it
127.0.0.1 tuiscali.it
127.0.0.1 www.tuiscali.it
127.0.0.1 tuksolution.com
127.0.0.1 www.tuksolution.com
127.0.0.1 turbocodec.com
127.0.0.1 www.turbocodec.com
127.0.0.1 turbocodec.net
127.0.0.1 www.turbocodec.net
127.0.0.1 turtogratis.it
127.0.0.1 www.turtogratis.it
127.0.0.1 tutogratis.it
127.0.0.1 www.tutogratis.it
127.0.0.1 tutorial-hq.com
127.0.0.1 www.tutorial-hq.com
127.0.0.1 tutrogratis.it
127.0.0.1 www.tutrogratis.it
127.0.0.1 tuttgratis.it
127.0.0.1 www.tuttgratis.it
127.0.0.1 tuttoavolonta.com
127.0.0.1 www.tuttoavolonta.com
127.0.0.1 tuttofratis.it
127.0.0.1 www.tuttofratis.it
127.0.0.1 tuttogeratis.it
127.0.0.1 www.tuttogeratis.it
127.0.0.1 tuttograatis.it
127.0.0.1 www.tuttograatis.it
127.0.0.1 tuttograis.it
127.0.0.1 www.tuttograis.it
127.0.0.1 tuttograris.it
127.0.0.1 www.tuttogr
-
-
Bonjour j'ai EXACTEMENT le meme probleme je vous poste ici mon log :
ComboFix 08-04-17.1 - Raphael 2008-04-18 11:10:40.1 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1534 [GMT 2:00]
Running from: C:\Users\Raphael\Desktop\TRISTAN.exe
* Created a new restore point
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\ProgramData\Microsoft\Network\Downloader\qmgr0.dat
C:\ProgramData\Microsoft\Network\Downloader\qmgr1.dat
----- BITS: Possible infected sites -----
hxxp://sl.tf1.fr
.
((((((((((((((((((((((((( Files Created from 2008-03-18 to 2008-04-18 )))))))))))))))))))))))))))))))
.
2008-04-18 11:04 . 2008-04-18 11:05 524,288 --ahs---- C:\ntuser.dat{4e364916-0d17-11dd-8ecc-001f3adfd0a2}.TMContainer00000000000000000002.regtrans-ms
2008-04-18 11:04 . 2008-04-18 11:05 524,288 --ahs---- C:\ntuser.dat{4e364916-0d17-11dd-8ecc-001f3adfd0a2}.TMContainer00000000000000000001.regtrans-ms
2008-04-18 11:04 . 2008-04-18 11:05 65,536 --ahs---- C:\ntuser.dat{4e364916-0d17-11dd-8ecc-001f3adfd0a2}.TM.blf
2008-04-18 10:51 . 2008-04-18 11:04 262,144 --a------ C:\ntuser.dat
2008-04-18 10:51 . 2008-04-18 11:04 5,120 --ah----- C:\ntuser.dat.LOG1
2008-04-18 10:51 . 2008-04-18 11:04 0 --ah----- C:\ntuser.dat.LOG2
2008-04-18 10:44 . 2007-03-21 20:39 1,060,864 --a------ C:\Windows\System32\MFC71.DL1
2008-04-18 10:44 . 2007-03-21 20:33 503,808 --a------ C:\Windows\System32\MSVCP71.DL1
2008-04-18 10:44 . 2007-03-21 20:33 348,160 --a------ C:\Windows\System32\MSVCR71.DL1
2008-04-18 10:43 . 2008-04-18 10:43 <DIR> d-------- C:\Users\All Users\Symantec
2008-04-18 10:43 . 2008-04-18 10:43 <DIR> d-------- C:\ProgramData\Symantec
2008-04-18 10:43 . 2008-04-18 10:43 <DIR> d-------- C:\Program Files\Symantec
2008-04-18 10:43 . 2008-04-18 10:43 <DIR> d-------- C:\Program Files\Common Files\Symantec Shared
2008-04-18 10:24 . 2008-04-18 10:16 512,096 --a------ C:\Windows\System32\drivers\amon.sys
2008-04-18 10:23 . 2008-04-18 10:13 15,424 --a------ C:\Windows\System32\drivers\nod32drv.sys
2008-04-18 10:11 . 2008-04-18 10:24 <DIR> d-------- C:\Program Files\ESET
2008-04-18 10:04 . 2008-04-18 10:05 <DIR> d-------- C:\Users\All Users\Lavasoft
2008-04-18 10:04 . 2008-04-18 10:05 <DIR> d-------- C:\ProgramData\Lavasoft
2008-04-18 10:04 . 2008-04-18 10:04 <DIR> d-------- C:\Program Files\Lavasoft
2008-04-18 10:00 . 2008-04-18 10:01 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-04-18 09:37 . 2008-04-18 09:51 <DIR> d-------- C:\Users\All Users\Spybot - Search & Destroy
2008-04-18 09:37 . 2008-04-18 09:51 <DIR> d-------- C:\ProgramData\Spybot - Search & Destroy
2008-04-18 09:37 . 2008-04-18 09:37 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
2008-04-18 08:42 . 2008-04-18 08:42 <DIR> d-------- C:\Users\All Users\Grisoft
2008-04-18 08:42 . 2008-04-18 08:42 <DIR> d-------- C:\ProgramData\Grisoft
2008-04-18 06:22 . 2008-04-18 06:44 96,645 --a------ C:\Windows\System32\drivers\klin.dat
2008-04-18 06:22 . 2008-04-18 06:44 87,941 --a------ C:\Windows\System32\drivers\klick.dat
2008-04-18 06:21 . 2008-04-18 09:46 <DIR> d-------- C:\Users\All Users\Kaspersky Lab
2008-04-18 06:21 . 2008-04-18 09:46 <DIR> d-------- C:\ProgramData\Kaspersky Lab
2008-04-18 06:21 . 2008-04-18 06:21 <DIR> d-------- C:\Program Files\Kaspersky Lab
2008-04-18 06:21 . 2008-04-18 11:12 21,538,080 --ahs---- C:\Windows\System32\drivers\fidbox.dat
2008-04-18 06:21 . 2008-04-18 07:50 146,216 --ahs---- C:\Windows\System32\drivers\fidbox.idx
2008-04-18 06:19 . 2008-04-18 06:19 <DIR> d-------- C:\kav
2008-04-18 06:04 . 2008-04-18 06:05 <DIR> d-------- C:\ComboFix
2008-04-18 05:02 . 2008-04-18 05:02 <DIR> d-------- C:\VundoFix Backups
2008-04-18 04:54 . 2008-04-18 04:54 1,152 --a------ C:\Windows\System32\windrv.sys
2008-04-18 03:44 . 2008-04-18 03:44 262,144 --a------ C:\Windows\System32\wrap_oal.dll
2008-04-18 03:44 . 2008-04-18 03:44 86,016 --a------ C:\Windows\System32\OpenAL32.dll
2008-04-18 03:42 . 2008-04-18 03:42 <DIR> d-------- C:\Windows\System32\Futuremark
2008-04-18 03:42 . 2007-09-07 14:55 27,672 --a------ C:\Windows\System32\drivers\Entech.sys
2008-04-18 03:42 . 2007-09-07 14:55 12,744 --a------ C:\Windows\System32\drivers\Entech64.sys
2008-04-18 03:42 . 2007-09-07 14:55 6,173 --a------ C:\Windows\System32\drivers\Entech.vxd
2008-04-18 03:42 . 2001-11-19 20:05 3,972 --a------ C:\Windows\System32\drivers\PciBus.sys
2008-04-18 03:41 . 2008-04-18 03:41 <DIR> d-------- C:\Program Files\Futuremark
2008-04-18 02:22 . 2008-04-18 02:22 <DIR> d-------- C:\Users\All Users\twfozwlv
2008-04-18 02:22 . 2008-04-18 02:22 <DIR> d-------- C:\Users\All Users\qfkjovip
2008-04-18 02:22 . 2008-04-18 02:22 <DIR> d-------- C:\ProgramData\twfozwlv
2008-04-18 02:22 . 2008-04-18 02:22 <DIR> d-------- C:\ProgramData\qfkjovip
2008-04-18 02:11 . 2008-04-18 02:11 14 --a------ C:\Windows\System32\SysEngine.SYS
2008-04-17 20:16 . 2008-04-17 20:16 <DIR> d-------- C:\Program Files\Apple Software Update
2008-04-17 16:27 . 2008-04-17 16:27 <DIR> d-------- C:\Program Files\Zattoo
2008-04-17 15:38 . 2008-04-17 15:38 <DIR> d-------- C:\Users\All Users\Microsoft Corporation
2008-04-17 15:38 . 2008-04-17 15:38 <DIR> d-------- C:\ProgramData\Microsoft Corporation
2008-04-17 15:38 . 2008-04-17 15:38 <DIR> d-------- C:\Program Files\Microsoft Windows Vista Upgrade Advisor
2008-04-16 11:55 . 2008-04-16 11:55 107,888 --a------ C:\Windows\System32\CmdLineExt.dll
2008-04-16 10:28 . 2008-04-16 10:28 <DIR> d-------- C:\Users\All Users\POP3Profiles
2008-04-16 10:28 . 2008-04-16 10:28 <DIR> d-------- C:\ProgramData\POP3Profiles
2008-04-16 09:55 . 2008-04-16 10:13 <DIR> d-------- C:\Users\All Users\POPWWPROFILES
2008-04-16 09:55 . 2008-04-16 10:13 <DIR> d-------- C:\ProgramData\POPWWPROFILES
2008-04-16 08:13 . 2008-04-16 08:25 <DIR> d-------- C:\Program Files\GameSpy Arcade
2008-04-16 07:37 . 2008-04-16 07:37 <DIR> d-------- C:\Program Files\StreamboxVcrSuite2
2008-04-16 05:29 . 2008-04-16 07:27 <DIR> d-------- C:\Program Files\Windows Live Safety Center
2008-04-15 07:05 . 2008-04-15 07:05 0 --ah----- C:\Windows\System32\drivers\Msft_Kernel_xusb21_01001.Wdf
2008-04-15 07:04 . 2008-04-15 07:04 <DIR> d-------- C:\Program Files\Microsoft Xbox 360 Accessories
2008-04-15 06:24 . 2008-04-15 06:24 98,304 --a------ C:\Windows\system32CmdLineExt.dll
2008-04-15 06:11 . 2008-04-16 10:24 <DIR> d-------- C:\Program Files\Ubisoft
2008-04-15 06:02 . 2008-04-15 06:04 <DIR> d--h----- C:\Windows\msdownld.tmp
2008-04-15 05:15 . 2008-04-15 05:15 <DIR> d-------- C:\Program Files\Eidos
2008-04-15 04:47 . 2008-04-15 04:47 <DIR> d-------- C:\Users\Public\CyberLink
2008-04-15 04:42 . 2008-04-15 04:42 <DIR> d-------- C:\Program Files\Common Files\CyberLink
2008-04-15 04:31 . 2001-05-04 12:05 505,104 --a------ C:\Windows\System32\msxml.dll
2008-04-15 04:31 . 2000-05-22 01:00 140,488 --a------ C:\Windows\System32\comdlg32.ocx
2008-04-15 04:31 . 1998-06-18 01:00 89,360 --a------ C:\Windows\System32\VB5DB.DLL
2008-04-15 04:31 . 2000-03-17 09:21 69,632 --a------ C:\Windows\System32\xmltok.dll
2008-04-15 04:31 . 2000-03-17 09:21 36,864 --a------ C:\Windows\System32\xmlparse.dll
2008-04-15 04:31 . 2002-04-24 13:43 35,840 --a------ C:\Windows\System32\comdlg32.oca
2008-04-15 04:31 . 2002-04-09 18:23 29,184 --a------ C:\Windows\System32\MSINET.oca
2008-04-15 04:31 . 2001-05-04 12:05 28,432 --a------ C:\Windows\System32\msxmlr.dll
2008-04-15 04:31 . 2002-10-17 11:35 26,096 --a------ C:\Windows\System32\xmlinst.exe
2008-04-15 02:29 . 2008-04-15 02:29 0 --ah----- C:\Windows\System32\drivers\Msft_Kernel_xusb21_01005.Wdf
2008-04-15 02:24 . 2008-04-15 02:24 <DIR> d-------- C:\Windows\System32\Age of Empires III - War Chiefs dir
2008-04-15 02:24 . 2008-04-15 02:24 532,480 --a------ C:\Windows\System32\Age of Empires III - War Chiefs.scr
2008-04-12 00:43 . 2008-04-12 00:43 <DIR> d-------- C:\VFS
2008-04-11 06:10 . 2008-04-11 06:10 <DIR> d-------- C:\Users\Raphael\AppData\Roaming\acccore
2008-04-11 06:09 . 2008-04-11 06:09 <DIR> d-------- C:\Users\All Users\Viewpoint
2008-04-11 06:09 . 2008-04-11 06:11 <DIR> d-------- C:\Users\All Users\AOL OCP
2008-04-11 06:09 . 2008-04-11 06:09 <DIR> d-------- C:\Users\All Users\AOL
2008-04-11 06:09 . 2008-04-11 06:09 <DIR> d-------- C:\ProgramData\Viewpoint
2008-04-11 06:09 . 2008-04-11 06:11 <DIR> d-------- C:\ProgramData\AOL OCP
2008-04-11 06:09 . 2008-04-11 06:09 <DIR> d-------- C:\ProgramData\AOL
2008-04-11 06:09 . 2008-04-11 06:09 <DIR> d-------- C:\Program Files\Viewpoint
2008-04-11 06:09 . 2008-04-12 00:50 <DIR> d-------- C:\Program Files\Common Files\AOL
2008-04-11 06:09 . 2008-04-11 06:10 367 --ah----- C:\IPH.PH
2008-04-09 21:50 . 2008-04-09 21:50 <DIR> d-------- C:\Users\Raphael\AppData\Roaming\tmp
2008-04-09 21:50 . 2008-04-09 21:50 <DIR> d-------- C:\Users\Raphael\AppData\Roaming\Reallusion
2008-04-09 21:40 . 2008-04-09 21:50 <DIR> d-------- C:\Users\Raphael\AppData\Roaming\AVSMedia
2008-04-09 21:40 . 2008-04-09 21:40 <DIR> d-------- C:\Users\All Users\AVS4YOU
2008-04-09 21:40 . 2008-04-09 21:40 <DIR> d-------- C:\ProgramData\AVS4YOU
2008-04-09 21:40 . 2008-04-09 21:51 <DIR> d-------- C:\Program Files\Common Files\AVSMedia
2008-04-08 21:47 . 2008-02-29 06:21 2,032,128 --a------ C:\Windows\System32\win32k.sys
2008-04-08 20:11 . 2008-04-08 20:11 0 --a------ C:\Users\Raphael\AppData\Roaming\wklnhst.dat
2008-04-08 06:21 . 2008-04-08 06:21 <DIR> d-------- C:\Windows\System32\Dell
2008-04-08 02:45 . 2008-04-08 02:45 <DIR> dr-h----- C:\Users\Raphael\AppData\Roaming\SecuROM
2008-04-08 02:16 . 2008-04-08 02:29 1,208 --a------ C:\Windows\Radio_Fr.ini
2008-04-08 02:15 . 2008-04-08 02:23 <DIR> d-------- C:\Program Files\Radio Fr Solo
2008-04-07 21:15 . 2008-04-07 21:15 <DIR> d-------- C:\Program Files\Combined Community Codec Pack
2008-04-07 07:07 . 2008-04-07 07:07 0 --ah----- C:\Windows\System32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2008-04-06 21:38 . 2008-04-06 21:51 <DIR> d-------- C:\Program Files\MSECache
2008-04-06 21:32 . 2008-04-15 06:21 <DIR> d-------- C:\Program Files\RADVideo
2008-04-05 00:07 . 2008-04-18 08:12 28,029 --a------ C:\Users\All Users\nvModes.dat
2008-04-05 00:07 . 2008-04-18 08:12 28,029 --a------ C:\ProgramData\nvModes.dat
2008-04-04 23:06 . 2008-04-04 23:06 <DIR> d-------- C:\Users\Raphael\AppData\Roaming\PeerNetworking
2008-04-04 04:54 . 2008-04-04 04:54 <DIR> d-------- C:\Program Files\Picasa2
2008-04-04 04:24 . 2008-04-04 04:24 0 --ah----- C:\Users\Raphael.LOG2
2008-04-04 04:24 . 2008-04-04 04:24 0 --ah----- C:\Users\Raphael.LOG1
2008-04-04 04:23 . 2008-04-10 06:05 <DIR> d-------- C:\Users\Raphael\SecurityScans
2008-04-04 04:17 . 2008-04-04 04:17 <DIR> d-------- C:\Program Files\Microsoft Baseline Security Analyzer 2
2008-04-03 20:59 . 2008-04-18 08:20 <DIR> d-------- C:\Users\Raphael\AppData\Roaming\Browzar
2008-04-03 20:38 . 2008-04-03 20:38 <DIR> d-------- C:\Program Files\Skype Recorder
2008-04-03 06:52 . 2008-04-03 06:52 <DIR> d-------- C:\Program Files\iTunes
2008-04-03 06:52 . 2008-04-03 06:52 <DIR> d-------- C:\Program Files\iPod
2008-04-03 06:51 . 2008-04-03 06:51 <DIR> d-------- C:\Program Files\QuickTime
2008-04-03 01:25 . 2008-04-03 01:25 203,776 --a------ C:\Windows\System32\clrviddc.dll
2008-04-03 01:25 . 1999-09-10 13:06 45,056 --a------ C:\Windows\System32\wnaspi32.dll
2008-04-03 01:25 . 1999-09-10 13:06 25,244 --a------ C:\Windows\System32\drivers\aspi32.sys
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-04-08 20:30 --------- d-----w C:\Program Files\Windows Mail
2008-04-08 00:41 --------- d-----w C:\Program Files\Microsoft Games
2008-04-01 04:45 174 --sha-w C:\Program Files\desktop.ini
2008-04-01 04:36 --------- d-----w C:\Program Files\Windows Sidebar
2008-04-01 04:36 --------- d-----w C:\Program Files\Windows Photo Gallery
2008-04-01 04:36 --------- d-----w C:\Program Files\Windows Journal
2008-04-01 04:36 --------- d-----w C:\Program Files\Windows Defender
2008-04-01 04:36 --------- d-----w C:\Program Files\Windows Collaboration
2008-04-01 04:36 --------- d-----w C:\Program Files\Windows Calendar
2008-04-01 04:09 82,432 ----a-w C:\Windows\System32\axaltocm.dll
2008-04-01 04:09 101,888 ----a-w C:\Windows\System32\ifxcardm.dll
2008-03-31 21:50 --------- d-sh--w C:\ProgramData\Templates
2008-03-31 21:50 --------- d-sh--w C:\ProgramData\Start Menu
2008-03-31 21:50 --------- d-sh--w C:\ProgramData\Favorites
2008-03-31 21:50 --------- d-sh--w C:\ProgramData\Documents
2008-03-31 21:50 --------- d-sh--w C:\ProgramData\Desktop
2008-03-31 21:50 --------- d-sh--w C:\ProgramData\Application Data
2008-03-25 12:32 25,784 ------w C:\Windows\system32\drivers\msahci.sys
2008-03-25 12:32 20,152 ------w C:\Windows\system32\drivers\viaide.sys
2008-03-25 12:32 19,128 ------w C:\Windows\system32\drivers\cmdide.sys
2008-03-25 12:32 18,104 ------w C:\Windows\system32\drivers\amdide.sys
2008-03-25 12:32 17,592 ----a-w C:\Windows\system32\drivers\intelide.sys
2008-03-25 12:32 17,592 ------w C:\Windows\system32\drivers\aliide.sys
2008-03-25 12:26 12,800 ------w C:\Windows\system32\drivers\sffp_mmc.sys
2008-03-25 12:21 58,472 ------w C:\Windows\system32\drivers\ULIAGPKX.SYS
2008-03-25 12:21 54,888 ------w C:\Windows\system32\drivers\AMDAGP.SYS
2008-03-25 12:21 54,376 ------w C:\Windows\system32\drivers\VIAAGP.SYS
2008-03-25 12:21 53,864 ------w C:\Windows\system32\drivers\AGP440.sys
2008-03-25 12:21 53,352 ------w C:\Windows\system32\drivers\SISAGP.SYS
2008-03-25 12:21 47,208 ------w C:\Windows\system32\drivers\isapnp.sys
2008-03-25 12:21 242,688 ------w C:\Windows\system32\drivers\rdpdr.sys
2008-03-25 12:21 106,600 ------w C:\Windows\system32\drivers\NV_AGP.SYS
2008-03-05 21:03 479,752 ----a-w C:\Windows\System32\XAudio2_0.dll
2008-03-05 21:03 238,088 ----a-w C:\Windows\System32\xactengine3_0.dll
2008-03-05 21:00 25,608 ----a-w C:\Windows\System32\X3DAudio1_3.dll
2008-03-05 20:56 3,786,760 ----a-w C:\Windows\System32\D3DX9_37.dll
2008-03-05 20:56 1,420,824 ----a-w C:\Windows\System32\D3DCompiler_37.dll
2008-03-04 17:33 7,680 ----a-w C:\Windows\System32\ff_vfw.dll
2008-03-04 03:53 78,336 ----a-w C:\Windows\System32\ieencode.dll
2008-03-04 03:52 830,464 ----a-w C:\Windows\System32\wininet.dll
2008-03-04 03:52 47,616 ----a-w C:\Windows\AppPatch\iebrshim.dll
2008-03-04 03:52 41,984 ----a-w C:\Windows\System32\licmgr10.dll
2008-03-04 03:52 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2008-03-04 03:52 20,480 ----a-w C:\Windows\System32\PDMSetup.exe
2008-03-04 03:52 17,920 ----a-w C:\Windows\System32\corpol.dll
2008-03-04 03:52 142,848 ----a-w C:\Windows\System32\IESetting.dll
2008-03-04 03:52 13,824 ----a-w C:\Windows\System32\SetIEInstalledDate.exe
2008-03-04 03:52 13,824 ----a-w C:\Windows\System32\SetDepNx.exe
2008-03-04 03:51 69,120 ----a-w C:\Windows\System32\iesetup.dll
2008-03-04 03:51 69,120 ----a-w C:\Windows\System32\admparse.dll
2008-03-04 03:51 66,560 ----a-w C:\Windows\System32\wextract.exe
2008-03-04 03:51 168,448 ----a-w C:\Windows\System32\iexpress.exe
2008-03-04 03:50 48,128 ----a-w C:\Windows\System32\mshtmler.dll
2008-03-04 03:50 45,568 ----a-w C:\Windows\System32\mshta.exe
2008-03-04 03:50 36,352 ----a-w C:\Windows\System32\imgutil.dll
2008-02-29 07:14 19,000 ----a-w C:\Windows\System32\kd1394.dll
2008-02-29 07:11 988,216 ----a-w C:\Windows\System32\winload.exe
2008-02-29 07:11 927,288 ----a-w C:\Windows\System32\winresume.exe
2008-02-29 06:53 46,592 ----a-w C:\Windows\System32\setbcdlocale.dll
2008-02-29 06:53 40,960 ----a-w C:\Windows\System32\srclient.dll
2008-02-29 06:53 378,368 ----a-w C:\Windows\System32\srcore.dll
2008-02-29 06:35 6,656 ----a-w C:\Windows\System32\kbd106n.dll
2008-02-29 04:12 318,464 ----a-w C:\Windows\System32\rstrui.exe
2008-02-29 04:12 14,848 ----a-w C:\Windows\System32\srdelayed.exe
2008-02-22 12:46 360,448 ----a-w C:\Windows\System32\nvuninst.exe
2008-02-22 05:05 615,992 ----a-w C:\Windows\System32\ci.dll
2008-02-22 04:57 295,936 ----a-w C:\Windows\System32\gdi32.dll
2008-02-08 16:37 219,664 ----a-w C:\Windows\System32\klogon.dll
2008-02-06 04:07 462,864 ----a-w C:\Windows\System32\d3dx10_37.dll
2008-02-01 16:11 586,240 ----a-w C:\Windows\WLXPGSS.SCR
2008-01-29 17:02 107,368 ----a-w C:\Windows\System32\GEARAspi.dll
2008-01-19 07:43 376,376 ----a-w C:\Windows\System32\mcupdate_GenuineIntel.dll
2008-01-19 07:43 3,600,440 ----a-w C:\Windows\System32\ntkrnlpa.exe
2008-01-19 07:43 3,548,728 ----a-w C:\Windows\System32\ntoskrnl.exe
2008-01-19 07:42 94,776 ----a-w C:\Windows\System32\MigAutoPlay.exe
2008-01-19 07:42 51,768 ----a-w C:\Windows\System32\PSHED.DLL
2008-01-19 07:42 247,352 ----a-w C:\Windows\System32\clfs.sys
2008-01-19 07:42 177,208 ----a-w C:\Windows\System32\halmacpi.dll
2008-01-19 07:42 141,880 ----a-w C:\Windows\System32\halacpi.dll
2008-01-19 07:41 24,120 ----a-w C:\Windows\System32\BOOTVID.DLL
2008-01-19 07:41 21,560 ----a-w C:\Windows\System32\kdusb.dll
2008-01-19 07:41 19,512 ----a-w C:\Windows\System32\kdcom.dll
2008-01-19 07:38 46,080 ----a-w C:\Windows\System32\NAPCRYPT.DLL
2008-01-19 07:38 4,595,712 ----a-w C:\Windows\System32\AuthFWSnapin.dll
2008-01-19 07:38 242,744 ----a-w C:\Windows\System32\rsaenh.dll
2008-01-19 07:38 155,704 ----a-w C:\Windows\System32\dssenh.dll
2008-01-19 07:38 131,640 ----a-w C:\Windows\System32\basecsp.dll
2008-01-19 07:38 103,936 ----a-w C:\Windows\System32\NAPHLPR.DLL
2008-01-19 07:38 1,203,792 ----a-w C:\Windows\System32\ntdll.dll
2008-01-19 07:36 996,352 ----a-w C:\Windows\System32\WMNetMgr.dll
2008-01-19 07:35 98,304 ----a-w C:\Windows\System32\mssitlb.dll
2008-01-19 07:34 98,816 ----a-w C:\Windows\System32\mfps.dll
2008-01-19 07:33 98,304 ----a-w C:\Windows\System32\makecab.exe
2008-01-19 07:32 879,616 ----a-w C:\Windows\System32\Bubbles.scr
2008-01-19 07:32 704,512 ----a-w C:\Windows\System32\PhotoScreensaver.scr
2008-01-19 07:32 5,714,432 ----a-w C:\Windows\System32\logon.scr
2008-01-19 07:32 258,048 ----a-w C:\Windows\System32\winspool.drv
2008-01-19 07:32 221,184 ----a-w C:\Windows\System32\Mystify.scr
2008-01-19 07:32 220,672 ----a-w C:\Windows\System32\Ribbons.scr
2008-01-19 07:32 21,504 ----a-w C:\Windows\System32\msacm32.drv
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DellSupportCenter"="C:\Program Files\Dell Support Center\bin\sprtcmd.exe" [2008-02-14 02:21 202544]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-04-01 05:45 68856]
"Dell DataSafe Scheduler"="C:\Program Files\Dell DataSafe Online\Bin\DataSafeOnlineScheduler.exe" [2007-12-02 23:30 308464]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2008-01-19 09:33 125952]
"Sidebar"="C:\Program Files\Windows Sidebar\SideBar.exe" [2008-01-19 09:33 1233920]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2008-02-26 03:23 443968]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 09:33 202240]
"DVDXGhost"="" []
"twfozwlv"="C:\ProgramData\twfozwlv\urclmpcd.exe" [2008-04-18 02:22 114688]
"QjynTOxaFV"="C:\ProgramData\qfkjovip\qlyrchkx.exe" [2008-04-18 02:22 38912]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2008-01-19 09:38 1008184]
"ECenter"="C:\Dell\E-Center\EULALauncher.exe" [2008-01-18 13:40 17920]
"Apoint"="C:\Program Files\DellTPad\Apoint.exe" [2007-09-24 11:27 159744]
"OEM02Mon.exe"="C:\Windows\OEM02Mon.exe" [2007-12-03 07:58 36864]
"DELL Webcam Manager"="C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" [2007-07-27 23:43 118784]
"dscactivate"="C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" [2008-02-14 02:21 16384]
"PCMService"="C:\Program Files\Dell\MediaDirect\PCMService.exe" [2007-12-21 17:58 184320]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2008-04-01 01:14 185896]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-12 05:16 39792]
"SigmatelSysTrayApp"="C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe" [2008-01-02 06:37 405504]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 11:25 144784]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-03-29 06:37 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 17:36 267048]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [2008-02-22 12:46 166432]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2008-02-22 12:46 13515296]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2008-02-22 12:46 92704]
"NVHotkey"="C:\Windows\system32\nvHotkey.dll" [2008-02-22 12:46 92704]
"XboxStat"="C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2007-09-27 01:05 734264]
"RemoteControl8"="C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe" [2008-03-20 20:23 83240]
"PDVD8LanguageShortcut"="C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe" [2007-12-14 11:36 50472]
"BDRegion"="C:\Program Files\Cyberlink\Shared Files\brs.exe" [2008-03-21 10:21 91432]
"AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" [2008-02-08 18:36 227856]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2006-11-04 00:55:50 703280]
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2008-03-25 06:55:31 50688]
Google Updater.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2008-04-01 05:45:03 124400]
QuickSet.lnk - C:\Program Files\Dell\QuickSet\quickset.exe [2007-07-21 01:13:26 1180952]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\KASPER~1\KASPER~1.0\r3hook.dll,C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)
"DefaultOutboundAction"= 0 (0x0)
"DefaultInboundAction"= 1 (0x1)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{76DA977C-861D-43E5-8882-EB454F7E21AB}"= C:\Program Files\Dell\MediaDirect\MediaDirect.exe:Dell MediaDirect
"{59C2E67E-F723-4135-BD49-EFB612485ABE}"= C:\Program Files\Dell\MediaDirect\PCMService.exe:CyberLink PowerCinema Resident Program
"{C66515D9-C831-4696-BAD2-F280652CB65F}"= C:\Program Files\Dell\MediaDirect\Kernel\DMP\CLBrowserEngine.exe:Cyberlink Media Server Browser Engine
"{AC41AEAB-EF94-4F1C-B038-393C4E55C6F9}"= C:\Program Files\Dell\MediaDirect\Kernel\DMS\CLMSService.exe:CyberLink Media Server
"{984E39B4-DA6B-4F95-A84B-6979AE644E58}"= UDP:C:\Program Files\Microsoft Games\Age of Empires III\age3x.exe:Age of Empires III - The WarChiefs
"{1843B27A-0166-48B5-9AF9-5E65FCF6A3CE}"= TCP:C:\Program Files\Microsoft Games\Age of Empires III\age3x.exe:Age of Empires III - The WarChiefs
"{25535982-CD5F-413D-93B7-58B4D05169E2}"= UDP:C:\Program Files\Microsoft Games\Age of Empires III\age3y.exe:Age of Empires III - The Asian Dynasties
"{2FB1E516-3CB8-4AA5-B15F-B2F660DE9E61}"= TCP:C:\Program Files\Microsoft Games\Age of Empires III\age3y.exe:Age of Empires III - The Asian Dynasties
"{14382281-59B9-4D0B-89DA-B1FF59FF594F}"= UDP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
"{9853543C-F7F6-4E50-97B0-D413FB8A1351}"= TCP:C:\Program Files\Bonjour\mDNSResponder.exe:Bonjour
"{475B4256-5712-43BF-9BE3-4A8375B1E0E9}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{3CF5077C-56C5-475A-A52D-A294FC650401}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes
"{75F26E18-094A-42A8-AB3A-2A74D81B6064}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes
"TCP Query User{F59DC85A-0DEB-4EA3-9F74-FD29C9BB0CE9}C:\\program files\\utorrent\\utorrent.exe"= UDP:C:\program files\utorrent\utorrent.exe:uTorrent
"UDP Query User{91EC0818-A85E-4A33-BBBC-D93DB0E83619}C:\\program files\\utorrent\\utorrent.exe"= TCP:C:\program files\utorrent\utorrent.exe:uTorrent
"TCP Query User{6387A782-7C42-4727-8EC9-89E9C82B6B8D}C:\\program files\\skype\\phone\\skype.exe"= UDP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"UDP Query User{CF1649D9-A3F2-4A1F-ACFE-56A70CE39DF2}C:\\program files\\skype\\phone\\skype.exe"= TCP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"{F20A2D2A-8B28-45AE-ADD7-94C814828BAA}"= UDP:C:\Program Files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{A3A01CBB-60C2-4E1A-B566-9D471E350BED}"= TCP:C:\Program Files\Common Files\AOL\Loader\aolload.exe:AOL Loader
"{CC36F84A-341E-4369-910E-07A9A7537F7C}"= UDP:C:\Program Files\AIM6\aim6.exe:AIM
"{8192F573-055C-46AF-AE44-EFAA3AB6B7E6}"= TCP:C:\Program Files\AIM6\aim6.exe:AIM
"TCP Query User{82286092-0AAC-4DD5-B1FB-870B6775CA00}C:\\program files\\real\\realplayer\\realplay.exe"= UDP:C:\program files\real\realplayer\realplay.exe:RealPlayer
"UDP Query User{C1B1BBD7-D761-4D65-8307-74305A08D368}C:\\program files\\real\\realplayer\\realplay.exe"= TCP:C:\program files\real\realplayer\realplay.exe:RealPlayer
"TCP Query User{9ECB292A-DB07-4E0C-8A8A-5F039770B3BA}C:\\program files\\internet explorer\\iexplore.exe"= UDP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
"UDP Query User{0A2C65B4-B6FC-484F-88EC-7F13FF8C48D8}C:\\program files\\internet explorer\\iexplore.exe"= TCP:C:\program files\internet explorer\iexplore.exe:Internet Explorer
"TCP Query User{D222B459-F307-4F78-8464-09A0CC2ACF03}C:\\program files\\real\\realplayer\\realplay.exe"= UDP:C:\program files\real\realplayer\realplay.exe:RealPlayer
"UDP Query User{440C4195-BD98-4BD5-B8EC-0C06F2805697}C:\\program files\\real\\realplayer\\realplay.exe"= TCP:C:\program files\real\realplayer\realplay.exe:RealPlayer
"TCP Query User{4700E488-2976-406B-84D7-6FEE376F2030}C:\\program files\\radio fr solo\\radio_fr_solo.exe"= UDP:C:\program files\radio fr solo\radio_fr_solo.exe:Radio Fr Solo
"UDP Query User{6E403CD7-2AB5-4ED6-BE9B-D14CE1606A24}C:\\program files\\radio fr solo\\radio_fr_solo.exe"= TCP:C:\program files\radio fr solo\radio_fr_solo.exe:Radio Fr Solo
"TCP Query User{E212E7BD-8887-4277-8153-5CE904BDAA58}C:\\program files\\skype\\phone\\skype.exe"= UDP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"UDP Query User{2F20E469-1501-4CA8-BEB6-AFF72B2AB9F7}C:\\program files\\skype\\phone\\skype.exe"= TCP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"TCP Query User{0189394F-236E-4A8C-BC73-C1B4E613A5B8}C:\\program files\\utorrent\\utorrent.exe"= UDP:C:\program files\utorrent\utorrent.exe:uTorrent
"UDP Query User{38B4FDC4-F0CB-4A92-871B-DD563B436135}C:\\program files\\utorrent\\utorrent.exe"= TCP:C:\program files\utorrent\utorrent.exe:uTorrent
"TCP Query User{AAD2CB15-97B6-4891-8F24-57478A53D420}C:\\program files\\eidos\\hitman blood money\\hitmanbloodmoney.exe"= UDP:C:\program files\eidos\hitman blood money\hitmanbloodmoney.exe:HitmanBloodMoney
"UDP Query User{773EB266-0084-4B11-B899-8E23218F4A52}C:\\program files\\eidos\\hitman blood money\\hitmanbloodmoney.exe"= TCP:C:\program files\eidos\hitman blood money\hitmanbloodmoney.exe:HitmanBloodMoney
"TCP Query User{7B1A3F53-17E8-4AE6-8B3B-A9F217D15783}C:\\program files\\emule\\emule.exe"= UDP:C:\program files\emule\emule.exe:eMule
"UDP Query User{8AB26922-0E81-4966-9616-BB8007E1C1F7}C:\\program files\\emule\\emule.exe"= TCP:C:\program files\emule\emule.exe:eMule
"{B941B8D4-9E90-44D9-B58E-CCAFD1C5E87D}"= C:\Program Files\CyberLink\PowerDVD8\PowerDVD8.EXE:CyberLink PowerDVD 8.0
"TCP Query User{8FB15B9D-7B7B-4F7D-83EC-14D0D627A996}C:\\program files\\ubisoft\\crytek\\far cry\\bin32\\farcry.exe"= UDP:C:\program files\ubisoft\crytek\far cry\bin32\farcry.exe:Far Cry
"UDP Query User{1B89515B-C90C-4D6D-9D68-0C1AEC7F8C66}C:\\program files\\ubisoft\\crytek\\far cry\\bin32\\farcry.exe"= TCP:C:\program files\ubisoft\crytek\far cry\bin32\farcry.exe:Far Cry
"TCP Query User{775B7129-F9CC-4315-9F13-28EF3F4D74D5}C:\\program files\\microsoft games\\age of empires iii\\age3y.exe"= UDP:C:\program files\microsoft games\age of empires iii\age3y.exe:Age of Empires III Expansion 2
"UDP Query User{552F566D-4018-4808-BBAE-E60BBF918DD6}C:\\program files\\microsoft games\\age of empires iii\\age3y.exe"= TCP:C:\program files\microsoft games\age of empires iii\age3y.exe:Age of Empires III Expansion 2
"{58EE0E58-A85E-4F2F-8D4C-69A9103E930A}"= UDP:C:\Program Files\GameSpy Arcade\Aphex.exe:GameSpy Arcade
"{F85F709F-60B5-4453-844E-B3AD6B046F87}"= TCP:C:\Program Files\GameSpy Arcade\Aphex.exe:GameSpy Arcade
"TCP Query User{A9A7C5AF-2A6C-435C-BA71-68DD1E56D74F}C:\\program files\\lucasarts\\swkotor2\\swupdate.exe"= UDP:C:\program files\lucasarts\swkotor2\swupdate.exe:Star Wars: Knights of the Old Republic II: The Sith Lords Update Program
"UDP Query User{DD4D54A6-C346-46F6-9514-C9C8759714EB}C:\\program files\\lucasarts\\swkotor2\\swupdate.exe"= TCP:C:\program files\lucasarts\swkotor2\swupdate.exe:Star Wars: Knights of the Old Republic II: The Sith Lords Update Program
"TCP Query User{E0AAE5CA-DB92-40D7-85BE-C8C6387659AC}C:\\program files\\zattoo\\zattood.exe"= UDP:C:\program files\zattoo\zattood.exe:zattood
"UDP Query User{841419BD-C227-4457-AF3B-AEC70DD3C702}C:\\program files\\zattoo\\zattood.exe"= TCP:C:\program files\zattoo\zattood.exe:zattood
"TCP Query User{01E7C78E-9C8A-4807-9A1C-DC9C368FC790}C:\\program files\\zattoo\\zattoo.exe"= UDP:C:\program files\zattoo\zattoo.exe:
"UDP Query User{DB88E94B-E8D5-40F5-B657-1B47D5259DE2}C:\\program files\\zattoo\\zattoo.exe"= TCP:C:\program files\zattoo\zattoo.exe:
"TCP Query User{FAB9510A-8B42-46F4-9973-30C5BD711CB6}C:\\kav\\kis7.0\\english\\setup.exe"= UDP:C:\kav\kis7.0\english\setup.exe:Kaspersky Internet Security 7.0 Setup
"UDP Query User{DFE850CF-2627-4D8E-9F9A-821E7887109E}C:\\kav\\kis7.0\\english\\setup.exe"= TCP:C:\kav\kis7.0\english\setup.exe:Kaspersky Internet Security 7.0 Setup
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)
"DefaultOutboundAction"= 0 (0x0)
"DefaultInboundAction"= 1 (0x1)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)
"DefaultOutboundAction"= 0 (0x0)
"DefaultInboundAction"= 1 (0x1)
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;C:\Windows\system32\DRIVERS\klim6.sys [2007-10-16 11:05]
R2 {2E444BE9-B8EC-4CE6-8C2B-6536FB7F4FB7};{2E444BE9-B8EC-4CE6-8C2B-6536FB7F4FB7};C:\Program Files\Dell\MediaDirect\[u]0/u00.fcl [2007-09-07 07:29]
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};C:\Program Files\CyberLink\PowerDVD8\[u]0/u00.fcl [2008-02-01 17:24]
R2 AESTFilters;Andrea ST Filters Service;C:\Windows\system32\aestsrv.exe [2008-01-02 06:37]
R2 SBSDWSCService;SBSD Security Center Service;C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2008-01-28 11:43]
R2 sprtsvc_dellsupportcenter;SupportSoft Sprocket Service (dellsupportcenter);C:\Program Files\Dell Support Center\bin\sprtsvc.exe [2008-02-14 02:21]
R2 Viewpoint Manager Service;Viewpoint Manager Service;"C:\Program Files\Viewpoint\Common\ViewpointService.exe" [2007-01-04 23:38]
R2 XAudio;XAudio;C:\Windows\system32\DRIVERS\xaudio.sys [2006-08-05 02:39]
R3 btwaudio;Bluetooth Audio Device Service;C:\Windows\system32\drivers\btwaudio.sys [2006-11-07 03:37]
R3 btwavdt;Bluetooth AVDT;C:\Windows\system32\drivers\btwavdt.sys [2006-11-07 01:13]
R3 btwrchid;btwrchid;C:\Windows\system32\DRIVERS\btwrchid.sys [2006-11-07 01:13]
R3 OEM02Dev;Creative Camera OEM002 Driver;C:\Windows\system32\DRIVERS\OEM02Dev.sys [2007-12-03 07:58]
R3 OEM02Vfx;Creative Camera OEM002 Video VFX Driver;C:\Windows\system32\DRIVERS\OEM02Vfx.sys [2007-12-03 07:59]
S3 R300;R300;C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 09:36]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ddb94028-fa24-11dc-bcfd-806e6f6e6963}]
\shell\AutoRun\command - E:\FarCryAutoCD.exe
*Newly Created Service* - AVGASCLN
*Newly Created Service* - CATCHME
.
Contents of the 'Scheduled Tasks' folder
"2008-04-01 03:28:36 C:\Windows\Tasks\Check Updates for Windows Live Toolbar.job"
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
"2008-04-18 06:12:48 C:\Windows\Tasks\User_Feed_Synchronization-{6CCFE6C3-7092-487F-B340-98ED72BCB6F8}.job"
- C:\Windows\system32\msfeedssync.exe
.
**************************************************************************
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-18 11:12:32
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-04-18 11:13:34
ComboFix-quarantined-files.txt 2008-04-18 09:13:12
Pre-Run: 208,799,424,512 bytes free
Post-Run: 209,459,249,152 bytes free
.
2008-04-16 04:51:12 --- E O F ---
Que dois-je faire ? S'il vous plait repondez moi ! -
Bonjour vous deux,
pardonnez mon intrusion mais je ne peux m'empêcher...
Eff, petit chanceux, tu viens de tomber sur l'un des meilleurs intervenants de CCM (je pense même le meilleur dans le domaine virus/sécurité). Ton PC va être plus propre que sorti d'usine (oui, certains spywares sont installés 'd'office' avec certains programmes légitimes...).
Al. ... décidément... chapeau bas (et pas du black hat ;)) : non seulement tu résous les problèmes, mais de plus tu donnes des conseils et expliques ta démarche. Je suis sidéré : j'ai dévoré votre discussion avec peur de cligner des yeux et d'en perdre un brin.
Aller, j'arrête de jouer les importuns et je vous laisse finir en beauté.
Bonne fin de nettoyage,
et encore merci.
Dl.-
je te remercie de ton intervention dl , je te remercie aussi pour al ainsi que tout les autres intervenant ici ou ailleur, tout ces gens qui donnent de leur temps et de leur personne sans jamais rien attendre en retour , c'est cela, la veritable générosité de l'etre humain, et effectivement j'ai eu la chance de tomber sur un de leurs meilleurs représentant , voila j'en dis pas plus, sinon il va attraper les chevilles trop grosses pour ses bottines ,;)))
-
-
Contributeur sécurité"laisser la case décochée"
Attends, je te montre ce que contient mon Fichier Hosts:
# Copyright (c) 1993-1999 Microsoft Corp.
#
# Ceci est un exemple de fichier HOSTS utilisé par Microsoft TCP/IP
# pour Windows.
#
# Ce fichier contient les correspondances des adresses IP aux noms d'hôtes.
# Chaque entrée doit être sur une ligne propre. L'adresse IP doit être placée
# dans la première colonne, suivie par le nom d'hôte correspondant. L'adresse
# IP et le nom d'hôte doivent être séparés par au moins un espace.
#
# De plus, des commentaires (tels que celui-ci) peuvent être insérés sur des
# lignes propres ou après le nom d'ordinateur. Ils sont indiqué par le
# symbole '#'.
#
# Par exemple :
#
# 102.54.94.97 rhino.acme.com # serveur source
# 38.25.63.10 x.acme.com # hôte client x
127.0.0.1 localhost <-- seulement cette ligne.
Cette liste d'interdiction, pourquoi ne l'a-t-on pas vue plus tôt dans les rapports ??
Ce que tu dois savoir:
Dans le fichier hosts, pour interdire un site, on fait ceci: 127.0.0.1 https://www.youtube.com/?gl=FR
Pour accélérer l'accès à un site on fait ceci (exemple avec Google.fr) : 6.249.93.104 www.google.fr
Ceci interdit l'accès à google.fr : 127.0.0.1 www.google.fr
Compris ? Simple, non ?
Mais si ce n'est pas toi qui a placé cette liste en hosts, c'est que c'est une infection qui l'y a placée !!
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
Es-tu seul sur ton PC ?
Est-il connecté en réseau ? (type Univ. ou FAC) <-- étudiants
Lecture: http://www.libellules.ch/...
Lecture: https://www.malekal.com/virus-securite/
C'est pourquoi j'ai écrit « Laisse faire une période d'observation durant 15 jours. »
Tu sais vérifier toi-même ton fichier "hosts" là C:\WINDOWS\system32\drivers\etc <-- dans ce répertoire).
Fais m'en un copier/coller. ==> après passage de RHosts de SiRi ( le concepteur de SmitfraudFix)
Merci
-
oui il y a des choses que je n'ai pas voulues en effet
style
www.virusscansite.com
127.0.0.1 virusscansite.com
127.0.0.1 www.virusschlacht.com
127.0.0.1 virusschlacht.com
127.0.0.1 www.virusvakt.com
127.0.0.1 virusvakt.com
127.0.0.1 www.virvgilio.it
127.0.0.1 virvgilio.it
127.0.0.1 www.virvilio.it
127.0.0.1 virvilio.it
127.0.0.1 www.virygilio.it
127.0.0.1 virygilio.it
127.0.0.1 vitamins-for-each.com
127.0.0.1 vitrgilio.it
;))
mais je voudrais quand meme que tu m'explique ce que c'est (la contenance d'adresse web ("speciale" ou autres)dans ce dossier d'ou vient t'elle? et le pourquoi elle change en deux minutes sans ouvrir d'autres pages web.)
et 2°- Dans Spybot S&D, il ne faut pas oublier de décocher la case “Verrouiller le fichier hosts en lecture seule...”, dans “Outils” – “Ajustements IE”.
tout est fait mais apres avoir modifier le fichier host avec spybot dois je laisser la case décochée ou dois je la recocher???
merci d'avance al -
Contributeur sécuritéBonsoir eff,
Le bilan semble correct.
Sauf ce fichier HOSTS (qui dans le PC se trouve là C:\WINDOWS\system32\drivers\etc <-- dans ce répertoire).
Je lis des choses que tu n'as certainement pas voulues:
127.0.0.1 zangocash.com
127.0.0.1 www.zangocash.com
127.0.0.1 www.xxx.com
127.0.0.1 xxx.com
127.0.0.1 xxxallvideo.com
127.0.0.1 www.xxxallvideo.com
127.0.0.1 xxxcategories.com
127.0.0.1 xxxemailxxx.com
127.0.0.1 xxxmovietour.com
127.0.0.1 www.xxxmovietour.com
127.0.0.1 www.xxxpornmovs.com
127.0.0.1 xxxpornmovs.com
127.0.0.1 xxxteenfilm.com
127.0.0.1 www.xxxteenfilm.com
127.0.0.1 xxxtoolbar.com
Termine comme ceci:
1°- Télécharger RHosts de SiRi: http://siri.urz.free.fr/RHosts.php
Double cliquer dessus pour l'exécuter; et cliquer sur " Restore original Hosts "
2°- Dans Spybot S&D, il ne faut pas oublier de décocher la case “Verrouiller le fichier hosts en lecture seule...”, dans “Outils” – “Ajustements IE”.
3°- Pour etre plus complet et te permettre d'empecher la propagation d'information par certains "spyware".
Comme ceci:
-ouvre Spybot S&D
-clique sur "mode" en haut, puis sur "mode avancé"
-clique sur "outil" à gauche
-dans la fenetre de droite, clique sur "Fichier hosts"
-ensuite clique sur la "croix verte" en haut
Cela modifiera le fichier hosts pour empêcher les connections "entrantes ou sortantes" à destination des sites l'utilisant, ou aux destinataires des infos transmises par beaucoup de spyware dont look2mee et spysheriff
Bonne soirée.
Laisse faire une période d'observation durant 15 jours.
Reviens quand tu veux.
Je ferai un bilan également, s'il y a lieu.
Merci pour l'explication au sujet de Kis7; je comprends mieux.
Al.
-
suite du 2eme log
127.0.0.1 www.xvsenterprise.com
127.0.0.1 xvsenterprise.com
127.0.0.1 www.x-webdesign.com
127.0.0.1 x-webdesign.com
127.0.0.1 xwebsearch.biz
127.0.0.1 www.xwebsearch.biz
127.0.0.1 www.xxlblog.info
127.0.0.1 xxlblog.info
127.0.0.1 www.xxx.com
127.0.0.1 xxx.com
127.0.0.1 xxxallvideo.com
127.0.0.1 www.xxxallvideo.com
127.0.0.1 xxxcategories.com
127.0.0.1 xxxemailxxx.com
127.0.0.1 xxxmovietour.com
127.0.0.1 www.xxxmovietour.com
127.0.0.1 www.xxxpornmovs.com
127.0.0.1 xxxpornmovs.com
127.0.0.1 xxxteenfilm.com
127.0.0.1 www.xxxteenfilm.com
127.0.0.1 xxxtoolbar.com
127.0.0.1 xxxzonevideo.com
127.0.0.1 www.xxxzonevideo.com
127.0.0.1 www.xyzlimited.com
127.0.0.1 xyzlimited.com
127.0.0.1 www.xyzsolution.com
127.0.0.1 xyzsolution.com
127.0.0.1 xzoomy.com
127.0.0.1 yahabags.com
127.0.0.1 www.yahabags.com
127.0.0.1 yahoo.downloadznow.net
127.0.0.1 yahoo.panet.org
127.0.0.1 www.yboeragu.com
127.0.0.1 yboeragu.com
127.0.0.1 www.ydaproject.com
127.0.0.1 ydaproject.com
127.0.0.1 yeak.net
127.0.0.1 y-e-l-l-o-w.com
127.0.0.1 yellow500.com
127.0.0.1 yezol.com
127.0.0.1 www.ygcoueorn.com
127.0.0.1 ygcoueorn.com
127.0.0.1 www.ygcovtvcp.com
127.0.0.1 ygcovtvcp.com
127.0.0.1 www.ygoogle.it
127.0.0.1 ygoogle.it
127.0.0.1 ygsondheks.info
127.0.0.1 www.ygsondheks.info
127.0.0.1 yim-stop.com
127.0.0.1 www.yim-stop.com
127.0.0.1 www.yiscali.it
127.0.0.1 yiscali.it
127.0.0.1 www.ymctaaqada.com
127.0.0.1 ymctaaqada.com
127.0.0.1 www.ymct-aaqada.com
127.0.0.1 ymct-aaqada.com
127.0.0.1 www.ymctavxiz.biz
127.0.0.1 ymctavxiz.biz
127.0.0.1 www.ynotube.com
127.0.0.1 ynotube.com
127.0.0.1 yoogee.com
127.0.0.1 www.yoogee.com
127.0.0.1 www.yoogle.it
127.0.0.1 yoogle.it
127.0.0.1 yootube.info
127.0.0.1 yops.biz
127.0.0.1 www.yops.biz
127.0.0.1 youfindall.com
127.0.0.1 youfindall.net
127.0.0.1 www.youlikehere.com
127.0.0.1 youlikehere.com
127.0.0.1 www.youniyouwo.com
127.0.0.1 youniyouwo.com
127.0.0.1 yourbookmarks.info
127.0.0.1 yourbookmarks.ws
127.0.0.1 www.yourchillyvids.com
127.0.0.1 yourchillyvids.com
127.0.0.1 yourcodec.com
127.0.0.1 www.yourcodec.com
127.0.0.1 yourieprotect.com
127.0.0.1 www.yourieprotect.com
127.0.0.1 youriesafety.com
127.0.0.1 www.youriesafety.com
127.0.0.1 youriesecure.com
127.0.0.1 www.youriesecure.com
127.0.0.1 www.yourphotozone.com
127.0.0.1 yourphotozone.com
127.0.0.1 your-prescriptions.net
127.0.0.1 yoursearchspace.com
127.0.0.1 www.yoursearchspace.com
127.0.0.1 yoursitebar.com
127.0.0.1 you-search.com
127.0.0.1 you-search.com.ru
127.0.0.1 ypir.com
127.0.0.1 ysa-info.net
127.0.0.1 ysbweb.com
127.0.0.1 www.ysbweb.com
127.0.0.1 ytiscali.it
127.0.0.1 www.ytiscali.it
127.0.0.1 www.ytrenitalia.it
127.0.0.1 ytrenitalia.it
127.0.0.1 yukohamano.com
127.0.0.1 www.yunibo.it
127.0.0.1 yunibo.it
127.0.0.1 ywebsearch.info
127.0.0.1 zabywjwzlr.biz.biz
127.0.0.1 www.zabywjwzlr.biz.biz
127.0.0.1 www.zalitalia.it
127.0.0.1 zalitalia.it
127.0.0.1 www.zangcodec.net
127.0.0.1 zangcodec.net
127.0.0.1 zangocash.com
127.0.0.1 www.zangocash.com
127.0.0.1 zapros.com
127.0.0.1 zcodec.com
127.0.0.1 www.zcodec.com
127.0.0.1 zdrqmpad.com
127.0.0.1 www.zdrqmpad.com
127.0.0.1 zelaznyworld.com
127.0.0.1 www.zelaznyworld.com
127.0.0.1 zenotecnico.com
127.0.0.1 www.zenotecnico.com
127.0.0.1 zenotecnico2.com
127.0.0.1 www.zenotecnico2.com
127.0.0.1 zero.bestmanage.org
127.0.0.1 zero.bestmanage0.org
127.0.0.1 zero.bestmanage1.org
127.0.0.1 zero.bestmanage2.org
127.0.0.1 zero.bestmanage3.org
127.0.0.1 zero.bestmanage4.org
127.0.0.1 zero.bestmanage5.org
127.0.0.1 zero.bestmanage6.org
127.0.0.1 zero.bestmanage7.org
127.0.0.1 zero.bestmanage8.org
127.0.0.1 zero.bestmanage9.org
127.0.0.1 zero.serverc.org
127.0.0.1 zero.sisdotnet.com
127.0.0.1 www.zerocodec.com
127.0.0.1 zerocodec.com
127.0.0.1 zero-codec.com
127.0.0.1 www.zero-codec.com
127.0.0.1 zesearch.com
127.0.0.1 zestyfind.com
127.0.0.1 www.zestyfind.com
127.0.0.1 zfxaqzkevi.com
127.0.0.1 www.zfxaqzkevi.com
127.0.0.1 zhmbscwdgk.biz
127.0.0.1 www.zhmbscwdgk.biz
127.0.0.1 zipcodec.com
127.0.0.1 www.zipcodec.com
127.0.0.1 ziportal.com
127.0.0.1 zipportal.com
127.0.0.1 zippy-lookup.com
127.0.0.1 www.zippy-lookup.com
127.0.0.1 zjkjw.gov.cn
127.0.0.1 www.zjkjw.gov.cn
127.0.0.1 znext.com
127.0.0.1 www.znext.com
127.0.0.1 zonealarm-download-now.com
127.0.0.1 www.zonealarm-download-now.com
127.0.0.1 www.zonealarm-stop.com
127.0.0.1 zonealarm-stop.com
127.0.0.1 zone-media.com
127.0.0.1 www.zone-media.com
127.0.0.1 zoneoffreeporn.com
127.0.0.1 zoofil.com
127.0.0.1 zoomegasite.com
127.0.0.1 www.zpwebsource.com
127.0.0.1 zpwebsource.com
127.0.0.1 www.zqavanjpn.biz
127.0.0.1 zqavanjpn.biz
127.0.0.1 z-quest.com
127.0.0.1 www.z-quest.com
127.0.0.1 www.zsupereva.it
127.0.0.1 zsupereva.it
127.0.0.1 www.zsvcompany.com
127.0.0.1 zsvcompany.com
127.0.0.1 zurrusco.com
127.0.0.1 www.zurrusco.com
127.0.0.1 zvimigdal.com
127.0.0.1 www.zxcsolution.com
127.0.0.1 zxcsolution.com
127.0.0.1 zxlinks.com
127.0.0.1 www.zxlinks.com
127.0.0.1 zyban-zocor-levitra.com
==================================
Process Privileges Scan
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1732, C:\WINDOWS\SYSTEM32\SISTRAY.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1744, C:\WINDOWS\SYSTEM32\KEYHOOK.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1772, E:\HP\HP SOFTWARE UPDATE\HPWUSCHD2.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1800, C:\WINDOWS\VSNPSTD3.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1808, C:\PROGRAM FILES\BELGACOM\BIN\SPRTCMD.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1444, E:\ULEAD SYSTEMS\ULEAD PHOTO EXPRESS 4.0 SE\CALCHECK.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 3000, E:\HP\DIGITAL IMAGING\BIN\HPQIMZONE.EXE]
==================================
API HOOK
RVA Error: LoadLibraryA (Dangerous Level: High, Hooked by Module: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA Error: LoadLibraryExA (Dangerous Level: High, Hooked by Module: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA Error: LoadLibraryExW (Dangerous Level: High, Hooked by Module: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA Error: LoadLibraryW (Dangerous Level: High, Hooked by Module: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA Error: GetProcAddress (Dangerous Level: High, Hooked by Module: \??\C:\WINDOWS\system32\drivers\klif.sys)
==================================
Hidden Process
N/A
==================================
/CODE -
al c'est normal que les host files aient changée en deux minutes entre deux scan et ceci sans rien ouvrir d'autre que la page du forum??
HOSTS File
127.0.0.1 spacecodec.com
127.0.0.1 www.specialoems.com
127.0.0.1 specialoems.com
127.0.0.1 www.spereva.it
127.0.0.1 spereva.it
127.0.0.1 spermatrix.com
127.0.0.1 www.spicypornvideos.com
127.0.0.1 spicypornvideos.com
127.0.0.1 spidersearch.com
127.0.0.1 www.sploso.com
127.0.0.1 sploso.com
127.0.0.1 www.sponsor2.ucmore.com
127.0.0.1 sponsor2.ucmore.com
127.0.0.1 sportbooks-free4you.com
127.0.0.1 spros.com
127.0.0.1 www.spyadvanced.com
127.0.0.1 spyadvanced.com
127.0.0.1 www.spyanalyst.com
127.0.0.1 spyanalyst.com
127.0.0.1 spyass.com
127.0.0.1 www.spyaxe.biz
127.0.0.1 spyaxe.biz
127.0.0.1 www.spyaxe.com
127.0.0.1 spyaxe.com
127.0.0.1 www.spyaxe.net
127.0.0.1 spyaxe.net
127.0.0.1 www.spyaxesupport.com
127.0.0.1 spyaxesupport.com
127.0.0.1 www.spyaxeupdate.com
127.0.0.1 spyaxeupdate.com
127.0.0.1 spyboot.com
127.0.0.1 www.spyboot.com
127.0.0.1 www.spy-bot.com
127.0.0.1 spy-bot.com
127.0.0.1 www.spybot.reviewsit.net
127.0.0.1 spybot.reviewsit.net
127.0.0.1 www.spybot2007.com
127.0.0.1 spybot2007.com
127.0.0.1 www.spybot-2007.com
127.0.0.1 spybot-2007.com
127.0.0.1 www.spybotcom.com
127.0.0.1 spybotcom.com
127.0.0.1 www.spybotdownload-now.com
127.0.0.1 spybotdownload-now.com
127.0.0.1 www.spybot-free.com
127.0.0.1 spybot-free.com
127.0.0.1 www.spybot-free-scan.com
127.0.0.1 spybot-free-scan.com
127.0.0.1 www.spybot-ib.com
127.0.0.1 spybot-ib.com
127.0.0.1 www.spybot-now.com
127.0.0.1 spybot-now.com
127.0.0.1 spybotremover.net
127.0.0.1 www.spybot-scan.com
127.0.0.1 spybot-scan.com
127.0.0.1 www.spybot-sd.net
127.0.0.1 spybot-sd.net
127.0.0.1 www.spybot-sd-info.com
127.0.0.1 spybot-sd-info.com
127.0.0.1 spybotsearchudestroy.mega-downloads.net
127.0.0.1 www.spybot-uk.com
127.0.0.1 spybot-uk.com
127.0.0.1 www.spycontra.com
127.0.0.1 spycontra.com
127.0.0.1 www.spycrush.com
127.0.0.1 spycrush.com
127.0.0.1 www.SpyCut.com
127.0.0.1 SpyCut.com
127.0.0.1 www.spydawn.com
127.0.0.1 spydawn.com
127.0.0.1 www.spydeface.com
127.0.0.1 spydeface.com
127.0.0.1 www.spydefence.com
127.0.0.1 spydefence.com
127.0.0.1 www.spydefenderpro.com
127.0.0.1 spydefenderpro.com
127.0.0.1 www.spyfalcon.com
127.0.0.1 spyfalcon.com
127.0.0.1 www.spyfalconupdate.com
127.0.0.1 spyfalconupdate.com
127.0.0.1 www.spyheal.com
127.0.0.1 spyheal.com
127.0.0.1 www.spyiblock.com
127.0.0.1 spyiblock.com
127.0.0.1 www.spylocked.com
127.0.0.1 spylocked.com
127.0.0.1 www.spylog.com
127.0.0.1 spylog.com
127.0.0.1 www.spyofficer.com
127.0.0.1 spyofficer.com
127.0.0.1 www.spyonthis.net
127.0.0.1 spyonthis.net
127.0.0.1 spyorgy.net
127.0.0.1 www.spyot.info
127.0.0.1 spyot.info
127.0.0.1 www.spy-shield.com
127.0.0.1 spy-shield.com
127.0.0.1 www.SpyShield.org
127.0.0.1 SpyShield.org
127.0.0.1 spy-shredder.com
127.0.0.1 www.spy-sniper.com
127.0.0.1 spy-sniper.com
127.0.0.1 www.spysoldier.com
127.0.0.1 spysoldier.com
127.0.0.1 www.spytrooper.com
127.0.0.1 spytrooper.com
127.0.0.1 www.spywareavenger.com
127.0.0.1 spywareavenger.com
127.0.0.1 www.spyware-best.com
127.0.0.1 spyware-best.com
127.0.0.1 www.spywarebot.com
127.0.0.1 spywarebot.com
127.0.0.1 www.spywarebott.com
127.0.0.1 spywarebott.com
127.0.0.1 www.spywarebot-t.com
127.0.0.1 spywarebot-t.com
127.0.0.1 www.spyware-browser.com
127.0.0.1 spyware-browser.com
127.0.0.1 www.spywarecommander.com
127.0.0.1 spywarecommander.com
127.0.0.1 www.spywaredeluxe.com
127.0.0.1 spywaredeluxe.com
127.0.0.1 www.spywaredisinfector.com
127.0.0.1 spywaredisinfector.com
127.0.0.1 www.spywareisolator.com
127.0.0.1 spywareisolator.com
127.0.0.1 www.spywareknight.com
127.0.0.1 spywareknight.com
127.0.0.1 www.spywarelabs.com
127.0.0.1 spywarelabs.com
127.0.0.1 www.spywareno.com
127.0.0.1 spywareno.com
127.0.0.1 www.spywarequake.com
127.0.0.1 spywarequake.com
127.0.0.1 www.spywarequake.info
127.0.0.1 spywarequake.info
127.0.0.1 www.spywareremoval.ws
127.0.0.1 spywareremoval.ws
127.0.0.1 www.spywareremover.com
127.0.0.1 spywareremover.com
127.0.0.1 www.spywareremoversite.com
127.0.0.1 spywareremoversite.com
127.0.0.1 www.SpywareScraper.com
127.0.0.1 SpywareScraper.com
127.0.0.1 www.spyware-secure.com
127.0.0.1 spyware-secure.com
127.0.0.1 www.spywaresheriff.com
127.0.0.1 spywaresheriff.com
127.0.0.1 www.spywarestop.com
127.0.0.1 spywarestop.com
127.0.0.1 www.spyware-stop.com
127.0.0.1 spyware-stop.com
127.0.0.1 www.spywarestrike.com
127.0.0.1 spywarestrike.com
127.0.0.1 www.spywarewizard.net
127.0.0.1 spywarewizard.net
127.0.0.1 www.spywarexp.com
127.0.0.1 spywarexp.com
127.0.0.1 www.spywarezapper.com
127.0.0.1 spywarezapper.com
127.0.0.1 sqwire.com
127.0.0.1 s-redirect.com
127.0.0.1 www.srfgate.com
127.0.0.1 srfgate.com
127.0.0.1 srib.com
127.0.0.1 srng.net
127.0.0.1 srox.com
127.0.0.1 srsf.com
127.0.0.1 srv.warez.com
127.0.0.1 ss.panet.org
127.0.0.1 ssaw.com
127.0.0.1 ssby.com
127.0.0.1 st.bestoffersnetworks.com
127.0.0.1 www.stable2.com
127.0.0.1 stable2.com
127.0.0.1 staceyowens.com
127.0.0.1 stacistaxx.com
127.0.0.1 stacystaxx.com
127.0.0.1 www.standardinternet.com
127.0.0.1 standardinternet.com
127.0.0.1 www.starcleaningservice.com.au
127.0.0.1 starcleaningservice.com.au
127.0.0.1 www.starsdoor.com
127.0.0.1 starsdoor.com
127.0.0.1 www.start-downloading.com
127.0.0.1 start-downloading.com
127.0.0.1 www.startguard.net
127.0.0.1 startguard.net
127.0.0.1 startium.com
127.0.0.1 www.start-seite.com
127.0.0.1 start-seite.com
127.0.0.1 start-space.com
127.0.0.1 startsurfing.com
127.0.0.1 www.starzvideos.net
127.0.0.1 starzvideos.net
127.0.0.1 static.callinghome.biz
127.0.0.1 www.static.zangocash.com
127.0.0.1 static.zangocash.com
127.0.0.1 www.stats.cashdeluxe.net
127.0.0.1 stats.cashdeluxe.net
127.0.0.1 www.statwebreports.us
127.0.0.1 statwebreports.us
127.0.0.1 steamycock.com
127.0.0.1 www.stejax.pl
127.0.0.1 stejax.pl
127.0.0.1 sterva.com
127.0.0.1 stevecashdollar.com
127.0.0.1 stop-tracking.biz
127.0.0.1 stopvotefraud.com
127.0.0.1 stopxxxpics.com
127.0.0.1 storage-tasp.com
127.0.0.1 www.stormcodec.net
127.0.0.1 stormcodec.net
127.0.0.1 www.strcodec.com
127.0.0.1 strcodec.com
127.0.0.1 www.streampornvideos.com
127.0.0.1 streampornvideos.com
127.0.0.1 www.streamxs.ws
127.0.0.1 streamxs.ws
127.0.0.1 strekoza.com
127.0.0.1 www.stromverbrauch.de
127.0.0.1 stromverbrauch.de
127.0.0.1 stromverbrauch.de
127.0.0.1 studioaperto.net
127.0.0.1 stuffstore.com
127.0.0.1 stuff-your-ipod.com
127.0.0.1 www.stuff-your-ipod.com
127.0.0.1 www.stvfirm.com
127.0.0.1 stvfirm.com
127.0.0.1 www.stvg.info
127.0.0.1 stvg.info
127.0.0.1 styleclickink.com
127.0.0.1 www.sudoku.de
127.0.0.1 sudoku.de
127.0.0.1 sudoku.de
127.0.0.1 sudoku-jetzt.de
127.0.0.1 sudoku-jetzt.de
127.0.0.1 www.sudoku-jetzt.de
127.0.0.1 sudoku-welt.com
127.0.0.1 sudoku-welt.com
127.0.0.1 www.sudoku-welt.com
127.0.0.1 Sudoplanet.com
127.0.0.1 www.Sudoplanet.com
127.0.0.1 www.suereva.it
127.0.0.1 suereva.it
127.0.0.1 suipereva.it
127.0.0.1 www.suipereva.it
127.0.0.1 summercollins.com
127.0.0.1 summitcross.com
127.0.0.1 www.suoereva.it
127.0.0.1 suoereva.it
127.0.0.1 www.suopereva.it
127.0.0.1 suopereva.it
127.0.0.1 supeereva.it
127.0.0.1 www.supeereva.it
127.0.0.1 www.supeeva.it
127.0.0.1 supeeva.it
127.0.0.1 www.superadultfriend.com
127.0.0.1 superadultfriend.com
127.0.0.1 superbahamas.com
127.0.0.1 www.superbgirlz.com
127.0.0.1 superbgirlz.com
127.0.0.1 www.supercocklol.com
127.0.0.1 supercocklol.com
127.0.0.1 supercodec.com
127.0.0.1 www.supercodec.com
127.0.0.1 www.superea.it
127.0.0.1 superea.it
127.0.0.1 supereba.it
127.0.0.1 www.supereba.it
127.0.0.1 superebva.it
127.0.0.1 www.superebva.it
127.0.0.1 superecva.it
127.0.0.1 www.superecva.it
127.0.0.1 supereeva.it
127.0.0.1 www.supereeva.it
127.0.0.1 www.supererva.it
127.0.0.1 supererva.it
127.0.0.1 www.superev.it
127.0.0.1 superev.it
127.0.0.1 superevaq.it
127.0.0.1 www.superevaq.it
127.0.0.1 www.superevaw.it
127.0.0.1 superevaw.it
127.0.0.1 www.superevaz.it
127.0.0.1 superevaz.it
127.0.0.1 www.superevba.it
127.0.0.1 superevba.it
127.0.0.1 superevca.it
127.0.0.1 www.superevca.it
127.0.0.1 superevsa.it
127.0.0.1 www.superevsa.it
127.0.0.1 www.superevva.it
127.0.0.1 superevva.it
127.0.0.1 www.superevw.it
127.0.0.1 superevw.it
127.0.0.1 superevz.it
127.0.0.1 www.superevz.it
127.0.0.1 superewva.it
127.0.0.1 www.superewva.it
127.0.0.1 www.supernet.speedserv.com
127.0.0.1 www.superporncity.com
127.0.0.1 superporncity.com
127.0.0.1 www.superreva.it
127.0.0.1 superreva.it
127.0.0.1 www.super-servers.net
127.0.0.1 super-servers.net
127.0.0.1 supersexmachine.com
127.0.0.1 supersexpass.com
127.0.0.1 www.supersexpass.com
127.0.0.1 super-spider.com
127.0.0.1 superteva.it
127.0.0.1 www.superteva.it
127.0.0.1 superwebsearch.com
127.0.0.1 super-websearch.com
127.0.0.1 superweva.it
127.0.0.1 www.superweva.it
127.0.0.1 superwp.by.ru
127.0.0.1 www.superwva.it
127.0.0.1 superwva.it
127.0.0.1 www.supeteva.it
127.0.0.1 supeteva.it
127.0.0.1 www.supetreva.it
127.0.0.1 supetreva.it
127.0.0.1 www.supewreva.it
127.0.0.1 supewreva.it
127.0.0.1 www.supoereva.it
127.0.0.1 supoereva.it
127.0.0.1 suppereva.it
127.0.0.1 www.suppereva.it
127.0.0.1 www.support.365soft.info
127.0.0.1 support.365soft.info
127.0.0.1 support.winantivirus.com
127.0.0.1 www.suprereva.it
127.0.0.1 suprereva.it
127.0.0.1 supret.com
127.0.0.1 www.supreva.it
127.0.0.1 supreva.it
127.0.0.1 www.suprnova.cn
127.0.0.1 suprnova.cn
127.0.0.1 www.supwereva.it
127.0.0.1 supwereva.it
127.0.0.1 www.supwreva.it
127.0.0.1 supwreva.it
127.0.0.1 www.sureadult.com
127.0.0.1 sureadult.com
127.0.0.1 www.sureseeker.com
127.0.0.1 sureseeker.com
127.0.0.1 www.surfaccuracy.com
127.0.0.1 surfaccuracy.com
127.0.0.1 surferbar.com
127.0.0.1 www.surfsidekick.com
127.0.0.1 surfsidekick.com
127.0.0.1 surj.com
127.0.0.1 www.suupereva.it
127.0.0.1 suupereva.it
127.0.0.1 www.suypereva.it
127.0.0.1 suypereva.it
127.0.0.1 suzannebrecht.com
127.0.0.1 www.sverner.info
127.0.0.1 sverner.info
127.0.0.1 www.svideocodec.com
127.0.0.1 svideocodec.com
127.0.0.1 sweeteenz.com
127.0.0.1 www.swz2006.to.8866.org
127.0.0.1 swz2006.to.8866.org
127.0.0.1 www.sxload.com
127.0.0.1 sxload.com
127.0.0.1 www.sypereva.it
127.0.0.1 sypereva.it
127.0.0.1 www.sysdepannage.com
127.0.0.1 sysdepannage.com
127.0.0.1 www.syserrors.com
127.0.0.1 syserrors.com
127.0.0.1 www.syskontroller.com
127.0.0.1 syskontroller.com
127.0.0.1 www.syslibero.com
127.0.0.1 syslibero.com
127.0.0.1 www.sysnetsecurity.com
127.0.0.1 sysnetsecurity.com
127.0.0.1 www.sysnetsecurity.net
127.0.0.1 sysnetsecurity.net
127.0.0.1 www.sysprocedure.com
127.0.0.1 sysprocedure.com
127.0.0.1 www.sysprotect.com
127.0.0.1 sysprotect.com
127.0.0.1 www.syssecuritypage.com
127.0.0.1 syssecuritypage.com
127.0.0.1 www.syssecuritysite.net
127.0.0.1 syssecuritysite.net
127.0.0.1 www.systemdoctor.com
127.0.0.1 systemdoctor.com
127.0.0.1 www.systemordnare.com
127.0.0.1 systemordnare.com
127.0.0.1 www.systemstable.com
127.0.0.1 systemstable.com
127.0.0.1 www.systemupdates.net
127.0.0.1 systemupdates.net
127.0.0.1 www.syupereva.it
127.0.0.1 syupereva.it
127.0.0.1 t.rack.cc
127.0.0.1 t058.com
127.0.0.1 www.t8iscali.it
127.0.0.1 t8iscali.it
127.0.0.1 www.t9iscali.it
127.0.0.1 t9iscali.it
127.0.0.1 tacil.org
127.0.0.1 www.tamotua.com
127.0.0.1 tamotua.com
127.0.0.1 tangounion.com
127.0.0.1 targetsaver.com
127.0.0.1 www.targetsaver.com
127.0.0.1 tastethemusic.com
127.0.0.1 tattoo-paradies.de
127.0.0.1 tattoo-paradies.de
127.0.0.1 www.tattoo-paradies.de
127.0.0.1 tattoo-server.com
127.0.0.1 www.tattoo-server.com
127.0.0.1 tattoo-server.com
127.0.0.1 Tattoos-paradies.de
127.0.0.1 www.Tattoos-paradies.de
127.0.0.1 Tattoos-paradies.de
127.0.0.1 tax-refund4you.com
127.0.0.1 www.TBCODE.COM
127.0.0.1 TBCODE.COM
127.0.0.1 tbvg.com
127.0.0.1 tdak.com
127.0.0.1 tdko.com
127.0.0.1 tdmy.com
127.0.0.1 tech-jobs.ws
127.0.0.1 www.technicalcontact.com
127.0.0.1 technicalcontact.com
127.0.0.1 technology-related.com
127.0.0.1 teen-biz.com
127.0.0.1 teenhost.net
127.0.0.1 www.teenmonster.com
127.0.0.1 teenmonster.com
127.0.0.1 teen-pic-post.com
127.0.0.1 teenpornosex.com
127.0.0.1 teens4free.net
127.0.0.1 teensact.com
127.0.0.1 www.teensexfans.com
127.0.0.1 teensexfans.com
127.0.0.1 teensgate.com
127.0.0.1 teensguru.com
127.0.0.1 www.teenspornmag.com
127.0.0.1 teenspornmag.com
127.0.0.1 teenswamp.com
127.0.0.1 tefs.com
127.0.0.1 www.telecharger-avast.com
127.0.0.1 telecharger-avast.com
127.0.0.1 www.temptationclips.com
127.0.0.1 temptationclips.com
127.0.0.1 www.tepubblica.it
127.0.0.1 tepubblica.it
127.0.0.1 terafinder.com
127.0.0.1 www.Teslaplus.com
127.0.0.1 Teslaplus.com
127.0.0.1 testosterone-birth-control.com
127.0.0.1 tfil.com
127.0.0.1 www.tfiscali.it
127.0.0.1 tfiscali.it
127.0.0.1 www.tgazzetta.it
127.0.0.1 tgazzetta.it
127.0.0.1 www.tgiscali.it
127.0.0.1 tgiscali.it
127.0.0.1 www.tgoogle.it
127.0.0.1 tgoogle.it
127.0.0.1 tgp-4-you.com
127.0.0.1 www.tgpie.com
127.0.0.1 tgpie.com
127.0.0.1 www.the.007guard.com
127.0.0.1 the.007guard.com
127.0.0.1 www.the818search-co.com
127.0.0.1 the818search-co.com
127.0.0.1 www.theadulteye.com
127.0.0.1 theadulteye.com
127.0.0.1 www.theaimonline.com
127.0.0.1 theaimonline.com
127.0.0.1 www.the-codec.com
127.0.0.1 the-codec.com
127.0.0.1 the-exit.com
127.0.0.1 thefakejournal.com
127.0.0.1 www.theguardservices.com
127.0.0.1 theguardservices.com
127.0.0.1 the-huns-yellow-pages.com
127.0.0.1 thehuy.net
127.0.0.1 www.thelimewiredownload.com
127.0.0.1 thelimewiredownload.com
127.0.0.1 www.themymoviessite.com
127.0.0.1 themymoviessite.com
127.0.0.1 thenewsearch.com
127.0.0.1 www.theoreon.com
127.0.0.1 theoreon.com
127.0.0.1 theproxy.org
127.0.0.1 thereall.realfet.com
127.0.0.1 www.thereall.realfet.com
127.0.0.1 therealsearch.com
127.0.0.1 www.thesafebar.com
127.0.0.1 thesafebar.com
127.0.0.1 www.thesafetytool.com
127.0.0.1 thesafetytool.com
127.0.0.1 www.thesearchs.com
127.0.0.1 thesearchs.com
127.0.0.1 www.thespamblock.com
127.0.0.1 thespamblock.com
127.0.0.1 www.thespybot.com
127.0.0.1 thespybot.com
127.0.0.1 www.thespyguard.com
127.0.0.1 thespyguard.com
127.0.0.1 thesten.com
127.0.0.1 www.thesuperxxx.com
127.0.0.1 thesuperxxx.com
127.0.0.1 www.the-ticket.net
127.0.0.1 the-ticket.net
127.0.0.1 www.thezirius.com
127.0.0.1 thezirius.com
127.0.0.1 www.think-adz.com
127.0.0.1 think-adz.com
127.0.0.1 www.think-adz2.com
127.0.0.1 think-adz2.com
127.0.0.1 thinstall.abetterinternet.com
127.0.0.1 www.thiscali.it
127.0.0.1 thiscali.it
127.0.0.1 www.thisfreemovies.com
127.0.0.1 thisfreemovies.com
127.0.0.1 thko.com
127.0.0.1 thornleygroup.com
127.0.0.1 www.ti8scali.it
127.0.0.1 ti8scali.it
127.0.0.1 www.ti9scali.it
127.0.0.1 ti9scali.it
127.0.0.1 tiacali.it
127.0.0.1 www.tiacali.it
127.0.0.1 tiascali.it
127.0.0.1 www.tiascali.it
127.0.0.1 www.ticali.it
127.0.0.1 ticali.it
127.0.0.1 www.tidcali.it
127.0.0.1 tidcali.it
127.0.0.1 www.tidscali.it
127.0.0.1 tidscali.it
127.0.0.1 www.tiere-infos.de
127.0.0.1 tiere-infos.de
127.0.0.1 tiere-infos.de
127.0.0.1 tiiscali.it
127.0.0.1 www.tiiscali.it
127.0.0.1 www.tijscali.it
127.0.0.1 tijscali.it
127.0.0.1 www.tikscali.it
127.0.0.1 tikscali.it
127.0.0.1 tilscali.it
127.0.0.1 www.tilscali.it
127.0.0.1 tings.org
127.0.0.1 www.tinybar.com
127.0.0.1 tinybar.com
127.0.0.1 tioscali.it
127.0.0.1 www.tioscali.it
127.0.0.1 tisacali.it
127.0.0.1 www.tisacali.it
127.0.0.1 www.tisacli.it
127.0.0.1 tisacli.it
127.0.0.1 www.tiscaali.it
127.0.0.1 tiscaali.it
127.0.0.1 tiscail.it
127.0.0.1 www.tiscail.it
127.0.0.1 www.tiscaki.it
127.0.0.1 tiscaki.it
127.0.0.1 www.tiscakli.it
127.0.0.1 tiscakli.it
127.0.0.1 tiscal8.it
127.0.0.1 www.tiscal8.it
127.0.0.1 tiscal9.it
127.0.0.1 www.tiscal9.it
127.0.0.1 www.tiscalii.it
127.0.0.1 tiscalii.it
127.0.0.1 tiscalij.it
127.0.0.1 www.tiscalij.it
127.0.0.1 www.tiscalik.it
127.0.0.1 tiscalik.it
127.0.0.1 tiscalil.it
127.0.0.1 www.tiscalil.it
127.0.0.1 www.tiscaliu.it
127.0.0.1 tiscaliu.it
127.0.0.1 tiscalji.it
127.0.0.1 www.tiscalji.it
127.0.0.1 tiscalk.it
127.0.0.1 www.tiscalk.it
127.0.0.1 tiscalki.it
127.0.0.1 www.tiscalki.it
127.0.0.1 www.tiscalli.it
127.0.0.1 tiscalli.it
127.0.0.1 tiscalo.it
127.0.0.1 www.tiscalo.it
127.0.0.1 tiscaloi.it
127.0.0.1 www.tiscaloi.it
127.0.0.1 www.tiscalui.it
127.0.0.1 tiscalui.it
127.0.0.1 tiscaoi.it
127.0.0.1 www.tiscaoi.it
127.0.0.1 tiscaoli.it
127.0.0.1 www.tiscaoli.it
127.0.0.1 tiscaqli.it
127.0.0.1 www.tiscaqli.it
127.0.0.1 tiscasli.it
127.0.0.1 www.tiscasli.it
127.0.0.1 www.tiscawli.it
127.0.0.1 tiscawli.it
127.0.0.1 www.tiscaxli.it
127.0.0.1 tiscaxli.it
127.0.0.1 www.tiscazli.it
127.0.0.1 tiscazli.it
127.0.0.1 tiscdali.it
127.0.0.1 www.tiscdali.it
127.0.0.1 tiscfali.it
127.0.0.1 www.tiscfali.it
127.0.0.1 www.tisclai.it
127.0.0.1 tisclai.it
127.0.0.1 www.tiscli.it
127.0.0.1 tiscli.it
127.0.0.1 tiscqali.it
127.0.0.1 www.tiscqali.it
127.0.0.1 tiscqli.it
127.0.0.1 www.tiscqli.it
127.0.0.1 www.tiscsali.it
127.0.0.1 tiscsali.it
127.0.0.1 www.tiscsli.it
127.0.0.1 tiscsli.it
127.0.0.1 tiscvali.it
127.0.0.1 www.tiscvali.it
127.0.0.1 www.tiscwali.it
127.0.0.1 tiscwali.it
127.0.0.1 www.tiscxali.it
127.0.0.1 tiscxali.it
127.0.0.1 tisczali.it
127.0.0.1 www.tisczali.it
127.0.0.1 www.tisczli.it
127.0.0.1 tisczli.it
127.0.0.1 www.tisdcali.it
127.0.0.1 tisdcali.it
127.0.0.1 tisecali.it
127.0.0.1 www.tisecali.it
127.0.0.1 www.tisfcali.it
127.0.0.1 tisfcali.it
127.0.0.1 www.tisscali.it
127.0.0.1 tisscali.it
127.0.0.1 tisvcali.it
127.0.0.1 www.tisvcali.it
127.0.0.1 tiswcali.it
127.0.0.1 www.tiswcali.it
127.0.0.1 www.tisxali.it
127.0.0.1 tisxali.it
127.0.0.1 www.tisxcali.it
127.0.0.1 tisxcali.it
127.0.0.1 titanmotors.com
127.0.0.1 www.titanmotors.com
127.0.0.1 titanvision.com
127.0.0.1 titsianna.com
127.0.0.1 tit-x.com
127.0.0.1 www.tiuscali.it
127.0.0.1 tiuscali.it
127.0.0.1 tiwcali.it
127.0.0.1 www.tiwcali.it
127.0.0.1 www.tiwscali.it
127.0.0.1 tiwscali.it
127.0.0.1 www.tixcali.it
127.0.0.1 tixcali.it
127.0.0.1 tixscali.it
127.0.0.1 www.tixscali.it
127.0.0.1 tizscali.it
127.0.0.1 www.tizscali.it
127.0.0.1 tjar.com
127.0.0.1 tjaw.com
127.0.0.1 tjdo.com
127.0.0.1 tjem.com
127.0.0.1 tjgo.com
127.0.0.1 www.tjiscali.it
127.0.0.1 tjiscali.it
127.0.0.1 www.tkiscali.it
127.0.0.1 tkiscali.it
127.0.0.1 www.tliscali.it
127.0.0.1 tliscali.it
127.0.0.1 www.tns-counter.ru
127.0.0.1 tns-counter.ru
127.0.0.1 www.todays3xmovies.com
127.0.0.1 todays3xmovies.com
127.0.0.1 www.todaysfreeclips.com
127.0.0.1 todaysfreeclips.com
127.0.0.1 www.todaywarnings.com
127.0.0.1 todaywarnings.com
127.0.0.1 toddhayes.com
127.0.0.1 www.toiscali.it
127.0.0.1 toiscali.it
127.0.0.1 www.toogle.it
127.0.0.1 toogle.it
127.0.0.1 www.toohs.com
127.0.0.1 toohs.com
127.0.0.1 www.toolbar.azebar.com
127.0.0.1 toolbar.azebar.com
127.0.0.1 toolbar.cc
127.0.0.1 www.toolbar3.trafficgeneration.biz
127.0.0.1 www.toolbar5.trafficgeneration.biz
127.0.0.1 www.toolbarbest.biz
127.0.0.1 toolbarbest.biz
127.0.0.1 www.toolbarbucks.biz
127.0.0.1 toolbarbucks.biz
127.0.0.1 toolbarcash.com
127.0.0.1 www.toolbardollars.biz
127.0.0.1 toolbardollars.biz
127.0.0.1 toolbarpartner.com
127.0.0.1 www.toolbartraff.biz
127.0.0.1 toolbartraff.biz
127.0.0.1 www.toolsjambo.com
127.0.0.1 toolsjambo.com
127.0.0.1 www.toolster.de
127.0.0.1 toolster.de
127.0.0.1 tooncomics.com
127.0.0.1 toon-comics.com
127.0.0.1 www.top100drugs.info
127.0.0.1 top100drugs.info
127.0.0.1 www.top-banners.com
127.0.0.1 top-banners.com
127.0.0.1 www.topbrowsing.com
127.0.0.1 topbrowsing.com
127.0.0.1 www.topconverting.com
127.0.0.1 topconverting.com
127.0.0.1 www.topmovzonline.com
127.0.0.1 topmovzonline.com
127.0.0.1 www.topmp3choices.com
127.0.0.1 topmp3choices.com
127.0.0.1 www.topportalsite.org
127.0.0.1 topportalsite.org
127.0.0.1 www.topsearcher.com
127.0.0.1 topsearcher.com
127.0.0.1 www.topsecuritypage.com
127.0.0.1 topsecuritypage.com
127.0.0.1 www.topsecuritysite.net
127.0.0.1 topsecuritysite.net
127.0.0.1 www.topsite.us
127.0.0.1 topsite.us
127.0.0.1 www.topsites.us
127.0.0.1 topsites.us
127.0.0.1 www.topsitez.us
127.0.0.1 topsitez.us
127.0.0.1 www.topsmutclips.com
127.0.0.1 topsmutclips.com
127.0.0.1 www.topsoftwarefeed.com
127.0.0.1 topsoftwarefeed.com
127.0.0.1 topx.cc
127.0.0.1 www.topxxxvidz.com
127.0.0.1 topxxxvidz.com
127.0.0.1 torc.com
127.0.0.1 toriii.cc
127.0.0.1 www.toriii.cc
127.0.0.1 toscali.it
127.0.0.1 www.toscali.it
127.0.0.1 toseeka.com
127.0.0.1 www.toseeka.com
127.0.0.1 tossoalice.it
127.0.0.1 www.tossoalice.it
127.0.0.1 totalvelocity.com
127.0.0.1 www.totalvelocity.com
127.0.0.1 touchnsearch.com
127.0.0.1 www.touchnsearch.com
127.0.0.1 trackhits.cc
127.0.0.1 www.trackhits.cc
127.0.0.1 tracktraff.cc
127.0.0.1 traff.justcount.net
127.0.0.1 traff5all.biz
127.0.0.1 www.traff5all.biz
127.0.0.1 traffbest.biz
127.0.0.1 www.traffbest.biz
127.0.0.1 traffic-acc.com
127.0.0.1 www.traffic-acc.com
127.0.0.1 trafficback.com
127.0.0.1 trafficgeneration.biz
127.0.0.1 www.trafficgeneration.biz
127.0.0.1 trafficroup.com
127.0.0.1 www.trafficroup.com
127.0.0.1 traffic-ssl1.com
127.0.0.1 www.traffic-ssl1.com
127.0.0.1 trafficswitcher.com
127.0.0.1 traffsale1.biz
127.0.0.1 www.traffsale1.biz
127.0.0.1 traffstats.biz
127.0.0.1 www.traffstats.biz
127.0.0.1 traffweb1.biz
127.0.0.1 www.traffweb1.biz
127.0.0.1 www.transaction-id.com
127.0.0.1 transaction-id.com
127.0.0.1 trauergedichte.de
127.0.0.1 trauergedichte.de
127.0.0.1 www.trauergedichte.de
127.0.0.1 travel.picture-posters.com
127.0.0.1 www.trebitalia.it
127.0.0.1 trebitalia.it
127.0.0.1 www.treenitalia.it
127.0.0.1 treenitalia.it
127.0.0.1 www.treitalia.it
127.0.0.1 treitalia.it
127.0.0.1 www.tremnitalia.it
127.0.0.1 tremnitalia.it
127.0.0.1 www.treniralia.it
127.0.0.1 treniralia.it
127.0.0.1 www.trenitaalia.it
127.0.0.1 trenitaalia.it
127.0.0.1 www.trenitaia.it
127.0.0.1 trenitaia.it
127.0.0.1 www.trenitakia.it
127.0.0.1 trenitakia.it
127.0.0.1 www.trenitaliaa.it
127.0.0.1 trenitaliaa.it
127.0.0.1 www.trenitaliaq.it
127.0.0.1 trenitaliaq.it
127.0.0.1 www.trenitalias.it
127.0.0.1 trenitalias.it
127.0.0.1 www.trenitaliaz.it
127.0.0.1 trenitaliaz.it
127.0.0.1 www.trenitaliia.it
127.0.0.1 trenitaliia.it
127.0.0.1 www.trenitalis.it
127.0.0.1 trenitalis.it
127.0.0.1 www.trenitalisa.it
127.0.0.1 trenitalisa.it
127.0.0.1 www.trenitallia.it
127.0.0.1 trenitallia.it
127.0.0.1 www.trenitaloa.it
127.0.0.1 trenitaloa.it
127.0.0.1 www.trenitalua.it
127.0.0.1 trenitalua.it
127.0.0.1 www.trenitralia.it
127.0.0.1 trenitralia.it
127.0.0.1 trenitslia.it
127.0.0.1 www.trenitslia.it
127.0.0.1 trenittalia.it
127.0.0.1 www.trenittalia.it
127.0.0.1 www.treniutalia.it
127.0.0.1 treniutalia.it
127.0.0.1 treniyalia.it
127.0.0.1 www.treniyalia.it
127.0.0.1 www.trenmitalia.it
127.0.0.1 trenmitalia.it
127.0.0.1 www.trennitalia.it
127.0.0.1 trennitalia.it
127.0.0.1 www.trenotalia.it
127.0.0.1 trenotalia.it
127.0.0.1 trentalia.it
127.0.0.1 www.trentalia.it
127.0.0.1 www.trenutalia.it
127.0.0.1 trenutalia.it
127.0.0.1 www.trepubblica.it
127.0.0.1 trepubblica.it
127.0.0.1 www.trernitalia.it
127.0.0.1 trernitalia.it
127.0.0.1 www.trewnitalia.it
127.0.0.1 trewnitalia.it
127.0.0.1 trial.updates.winsoftware.com
127.0.0.1 www.triscali.it
127.0.0.1 triscali.it
127.0.0.1 www.Trojanerfilter.com
127.0.0.1 Trojanerfilter.com
127.0.0.1 trojansfilter.com
127.0.0.1 www.trojansfilter.com
127.0.0.1 www.Trojansfiltre.com
127.0.0.1 Trojansfiltre.com
127.0.0.1 www.troonety.biz
127.0.0.1 troonety.biz
127.0.0.1 www.trossoalice.it
127.0.0.1 trossoalice.it
127.0.0.1 www.trrenitalia.it
127.0.0.1 trrenitalia.it
127.0.0.1 www.trtenitalia.it
127.0.0.1 trtenitalia.it
127.0.0.1 www.truecodec.com
127.0.0.1 truecodec.com
127.0.0.1 www.true-counter.com
127.0.0.1 true-counter.com
127.0.0.1 true-portal.com
127.0.0.1 www.trustedantivirus.com
127.0.0.1 trustedantivirus.com
127.0.0.1 www.truth-is-out-there.org
127.0.0.1 truth-is-out-there.org
127.0.0.1 www.truttogratis.it
127.0.0.1 truttogratis.it
127.0.0.1 trytechnical.com
127.0.0.1 www.tscali.it
127.0.0.1 tscali.it
127.0.0.1 www.tscodec.com
127.0.0.1 tscodec.com
127.0.0.1 www.tsmfirm.com
127.0.0.1 tsmfirm.com
127.0.0.1 tsx.org
127.0.0.1 www.ttiscali.it
127.0.0.1 ttiscali.it
127.0.0.1 www.ttrenitalia.it
127.0.0.1 ttrenitalia.it
127.0.0.1 www.tttogratis.it
127.0.0.1 tttogratis.it
127.0.0.1 www.ttuttogratis.it
127.0.0.1 ttuttogratis.it
127.0.0.1 www.tuiscali.it
127.0.0.1 tuiscali.it
127.0.0.1 www.tuksolution.com
127.0.0.1 tuksolution.com
127.0.0.1 www.turbocodec.com
127.0.0.1 turbocodec.com
127.0.0.1 www.turbocodec.net
127.0.0.1 turbocodec.net
127.0.0.1 www.turtogratis.it
127.0.0.1 turtogratis.it
127.0.0.1 www.tutogratis.it
127.0.0.1 tutogratis.it
127.0.0.1 www.tutorial-hq.com
127.0.0.1 tutorial-hq.com
127.0.0.1 www.tutrogratis.it
127.0.0.1 tutrogratis.it
127.0.0.1 www.tuttgratis.it
127.0.0.1 tuttgratis.it
127.0.0.1 www.tuttoavolonta.com
127.0.0.1 tuttoavolonta.com
127.0.0.1 www.tuttofratis.it
127.0.0.1 tuttofratis.it
127.0.0.1 www.tuttogeratis.it
127.0.0.1 tuttogeratis.it
127.0.0.1 www.tuttograatis.it
127.0.0.1 tuttograatis.it
127.0.0.1 www.tuttograis.it
127.0.0.1 tuttograis.it
127.0.0.1 www.tuttograris.it
127.0.0.1 tuttograris.it
127.0.0.1 www.tuttograti.it
127.0.0.1 tuttograti.it
127.0.0.1 www.tuttogratia.it
127.0.0.1 tuttogratia.it
127.0.0.1 www.tuttogratias.it
127.0.0.1 tuttogratias.it
127.0.0.1 www.tuttogratiis.it
127.0.0.1 tuttogratiis.it
127.0.0.1 www.tuttogratisa.it
127.0.0.1 tuttogratisa.it
127.0.0.1 www.tuttogratiss.it
127.0.0.1 tuttogratiss.it
127.0.0.1 www.tuttogratos.it
127.0.0.1 tuttogratos.it
127.0.0.1 www.tuttograts.it
127.0.0.1 tuttograts.it
127.0.0.1 www.tuttograttis.it
127.0.0.1 tuttograttis.it
127.0.0.1 www.tuttogratus.it
127.0.0.1 tuttogratus.it
127.0.0.1 www.tuttograyis.it
127.0.0.1 tuttograyis.it
127.0.0.1 tuttogrratis.it
127.0.0.1 www.tuttogrratis.it
127.0.0.1 www.tuttogrstis.it
127.0.0.1 tuttogrstis.it
127.0.0.1 www.tuttogrtatis.it
127.0.0.1 tuttogrtatis.it
127.0.0.1 www.tuttogtratis.it
127.0.0.1 tuttogtratis.it
127.0.0.1 www.tuttohratis.it
127.0.0.1 tuttohratis.it
127.0.0.1 www.tuttoigratis.it
127.0.0.1 tuttoigratis.it
127.0.0.1 www.tuttoogratis.it
127.0.0.1 tuttoogratis.it
127.0.0.1 www.tuttopgratis.it
127.0.0.1 tuttopgratis.it
127.0.0.1 www.tuttoratis.it
127.0.0.1 tuttoratis.it
127.0.0.1 www.tuttpgratis.it
127.0.0.1 tuttpgratis.it
127.0.0.1 www.tutttogratis.it
127.0.0.1 tutttogratis.it
127.0.0.1 www.tuttyogratis.it
127.0.0.1 tuttyogratis.it
127.0.0.1 www.tutyogratis.it
127.0.0.1 tutyogratis.it
127.0.0.1 www.tutytogratis.it
127.0.0.1 tutytogratis.it
127.0.0.1 www.tuuttogratis.it
127.0.0.1 tuuttogratis.it
127.0.0.1 www.tuvcompany.com
127.0.0.1 tuvcompany.com
127.0.0.1 www.tuytogratis.it
127.0.0.1 tuytogratis.it
127.0.0.1 tv.180solutions.com
127.0.0.1 www.tvadvanced.com
127.0.0.1 tvadvanced.com
127.0.0.1 www.tv-auf-dem-pc.de
127.0.0.1 tv-auf-dem-pc.de
127.0.0.1 www.tvcodec.com
127.0.0.1 tvcodec.com
127.0.0.1 www.tv-codec.com
127.0.0.1 tv-codec.com
127.0.0.1 www.tv-codecs.com
127.0.0.1 tv-codecs.com
127.0.0.1 www.tv-en-pc.es
127.0.0.1 tv-en-pc.es
127.0.0.1 www.tvnowsite.com
127.0.0.1 tvnowsite.com
127.0.0.1 www.tvsatellitepourpc.com
127.0.0.1 tvsatellitepourpc.com
127.0.0.1 www.tvscodec.com
127.0.0.1 tvscodec.com
127.0.0.1 www.tvshowcollection.com
127.0.0.1 tvshowcollection.com
127.0.0.1 www.tv-sur-pc.com
127.0.0.1 tv-sur-pc.com
127.0.0.1 www.tw7890.com
127.0.0.1 tw7890.com
127.0.0.1 www.tyiscali.it
127.0.0.1 tyiscali.it
127.0.0.1 www.type2find.com
127.0.0.1 type2find.com
127.0.0.1 www.tyttogratis.it
127.0.0.1 tyttogratis.it
127.0.0.1 www.tzxsj.com
127.0.0.1 tzxsj.com
127.0.0.1 u.webbuying.net
127.0.0.1 u-239.com
127.0.0.1 u45.cx
127.0.0.1 u46.cx
127.0.0.1 u47.cc
127.0.0.1 u48.cc
127.0.0.1 www.u7u.cn
127.0.0.1 u7u.cn
127.0.0.1 www.uc8010.com
127.0.0.1 uc8010.com
127.0.0.1 www.ucleaner.com
127.0.0.1 ucleaner.com
127.0.0.1 www.ucmal.com
127.0.0.1 ucmal.com
127.0.0.1 ucmore.com
127.0.0.1 www.udefender.com
127.0.0.1 udefender.com
127.0.0.1 www.ueornaaqada.com
127.0.0.1 ueornaaqada.com
127.0.0.1 www.ueornavxiz.biz
127.0.0.1 ueornavxiz.biz
127.0.0.1 www.ueornmbkkhmf.biz
127.0.0.1 ueornmbkkhmf.biz
127.0.0.1 www.ueorn-rsztriv.com
127.0.0.1 ueorn-rsztriv.com
127.0.0.1 www.ueorn-vtvcp.com
127.0.0.1 ueorn-vtvcp.com
127.0.0.1 www.ueornygco.com
127.0.0.1 ueornygco.com
127.0.0.1 www.ueornymct.com
127.0.0.1 ueornymct.com
127.0.0.1 ufindall.click-now.net
127.0.0.1 www.ufixer.com
127.0.0.1 ufixer.com
127.0.0.1 www.uglyphotos.net
127.0.0.1 uglyphotos.net
127.0.0.1 www.uibo.it
127.0.0.1 uibo.it
127.0.0.1 www.uige.it
127.0.0.1 uige.it
127.0.0.1 www.uimi.it
127.0.0.1 uimi.it
127.0.0.1 www.uincodec.com
127.0.0.1 uincodec.com
127.0.0.1 www.uinimi.it
127.0.0.1 uinimi.it
127.0.0.1 www.uipd.it
127.0.0.1 uipd.it
127.0.0.1 www.uipg.it
127.0.0.1 uipg.it
127.0.0.1 www.uito.it
127.0.0.1 uito.it
127.0.0.1 www.ukiee.com
127.0.0.1 ukiee.com
127.0.0.1 ulink13.dudu.com
127.0.0.1 ulink7.dudu.com
127.0.0.1 ulog.systemdoctor.com
127.0.0.1 ulog.winantivirus.com
127.0.0.1 www.ultimatemp3player.com
127.0.0.1 ultimatemp3player.com
127.0.0.1 ultimateprotect.com
127.0.0.1 www.ultimatevideosite.com
127.0.0.1 ultimatevideosite.com
127.0.0.1 www.ultracodec.com
127.0.0.1 ultracodec.com
127.0.0.1 www.ultrahqcodec.com
127.0.0.1 ultrahqcodec.com
127.0.0.1 ultraload.net
127.0.0.1 umaxsearch.com
127.0.0.1 www.umibo.it
127.0.0.1 umibo.it
127.0.0.1 www.umige.it
127.0.0.1 umige.it
127.0.0.1 www.umimi.it
127.0.0.1 umimi.it
127.0.0.1 www.umipd.it
127.0.0.1 umipd.it
127.0.0.1 www.umipv.it
127.0.0.1 umipv.it
127.0.0.1 www.umnibo.it
127.0.0.1 umnibo.it
127.0.0.1 www.unbo.it
127.0.0.1 unbo.it
127.0.0.1 www.uncj.filetretporn.com
127.0.0.1 uncj.filetretporn.com
127.0.0.1 underagehost.com
127.0.0.1 une-autre-france.com
127.0.0.1 www.unge.it
127.0.0.1 unge.it
127.0.0.1 www.unibno.it
127.0.0.1 unibno.it
127.0.0.1 www.unie.it
127.0.0.1 unie.it
127.0.0.1 www.uniformpornmag.com
127.0.0.1 uniformpornmag.com
127.0.0.1 www.unig.it
127.0.0.1 unig.it
127.0.0.1 unigays.com
127.0.0.1 www.unii.it
127.0.0.1 unii.it
127.0.0.1 www.unini.it
127.0.0.1 unini.it
127.0.0.1 www.unionseek.com
127.0.0.1 unionseek.com
127.0.0.1 www.unionsms.net
127.0.0.1 unionsms.net
127.0.0.1 unipages.cc
127.0.0.1 unitedstates.rub.to
127.0.0.1 www.univo.it
127.0.0.1 univo.it
127.0.0.1 www.unknownip.com
127.0.0.1 unknownip.com
127.0.0.1 www.unlimite.net
127.0.0.1 unlimite.net
127.0.0.1 www.unlimitedmp3downloads.com
127.0.0.1 unlimitedmp3downloads.com
127.0.0.1 www.unlimitedtvshowdownload.com
127.0.0.1 unlimitedtvshowdownload.com
127.0.0.1 www.unmi.it
127.0.0.1 unmi.it
127.0.0.1 www.unmibo.it
127.0.0.1 unmibo.it
127.0.0.1 www.unobo.it
127.0.0.1 unobo.it
127.0.0.1 www.unpd.it
127.0.0.1 unpd.it
127.0.0.1 www.unpg.it
127.0.0.1 unpg.it
127.0.0.1 www.unto.it
127.0.0.1 unto.it
127.0.0.1 www.unubo.it
127.0.0.1 unubo.it
127.0.0.1 up2you.ru
127.0.0.1 upd.lop.com
127.0.0.1 upd.zone-media.com
127.0.0.1 update.680180.net
127.0.0.1 update.shareaza.com
127.0.0.1 www.updatemysettings.com
127.0.0.1 updatemysettings.com
127.0.0.1 updates.spywarequake.com
127.0.0.1 www.upereva.it
127.0.0.1 upereva.it
127.0.0.1 uploads.180solutions.com
127.0.0.1 www.upspiral.com
127.0.0.1 upspiral.com
127.0.0.1 www.uptodateprotect.com
127.0.0.1 uptodateprotect.com
127.0.0.1 www.uptodatesecurity.com
127.0.0.1 uptodatesecurity.com
127.0.0.1 www.uptofind.com
127.0.0.1 uptofind.com
127.0.0.1 upx.tsx.org
127.0.0.1 uralitel.ru
127.0.0.1 www.urgentsystemupdate.biz
127.0.0.1 urgentsystemupdate.biz
127.0.0.1 www.urgentsystemupdate.com
127.0.0.1 urgentsystemupdate.com
127.0.0.1 www.url.cpvfeed.com
127.0.0.1 urlstat.com
127.0.0.1 urlstat.ru
127.0.0.1 ursie.net
127.0.0.1 www.usecodec.com
127.0.0.1 usecodec.com
127.0.0.1 usefullsoft.net
127.0.0.1 www.use-play.com
127.0.0.1 use-play.com
127.0.0.1 utahsweet.com
127.0.0.1 www.utiledeprotection.com
127.0.0.1 utiledeprotection.com
127.0.0.1 utils.errorsafe.com
127.0.0.1 utils.winantivirus.com
127.0.0.1 www.utils.winfixer.com
127.0.0.1 utils.winfixer.com
127.0.0.1 utopicportal.com
127.0.0.1 uusocialjustice.org
127.0.0.1 www.uvu-channel.com
127.0.0.1 uvu-channel.com
127.0.0.1 www.uydsiygeds.com
127.0.0.1 uydsiygeds.com
127.0.0.1 www.uzoogle.com
127.0.0.1 uzoogle.com
127.0.0.1 v-224.com
127.0.0.1 www.v61.com
127.0.0.1 v61.com
127.0.0.1 www.v8irgilio.it
127.0.0.1 v8irgilio.it
127.0.0.1 www.v8rgilio.it
127.0.0.1 v8rgilio.it
127.0.0.1 www.v9irgilio.it
127.0.0.1 v9irgilio.it
127.0.0.1 www.v9rgilio.it
127.0.0.1 v9rgilio.it
127.0.0.1 www.vac-soft.com
127.0.0.1 vac-soft.com
127.0.0.1 www.vacwebsoft.com
127.0.0.1 vacwebsoft.com
127.0.0.1 www.vadesrunhdefunnjansdeikin.com
127.0.0.1 vadesrunhdefunnjansdeikin.com
127.0.0.1 vaginpics.com
127.0.0.1 valmyers.com
127.0.0.1 www.vapochille.com
127.0.0.1 vapochille.com
127.0.0.1 www.vaserjungenfujinas.com
127.0.0.1 vaserjungenfujinas.com
127.0.0.1 www.vaulimited.com
127.0.0.1 vaulimited.com
127.0.0.1 www.vaxcodec.com
127.0.0.1 vaxcodec.com
127.0.0.1 www.vaxdownload.com
127.0.0.1 vaxdownload.com
127.0.0.1 www.vaxobject.com
127.0.0.1 vaxobject.com
127.0.0.1 www.vaxobjectinstall.com
127.0.0.1 vaxobjectinstall.com
127.0.0.1 www.vbirgilio.it
127.0.0.1 vbirgilio.it
127.0.0.1 vcirgilio.it
127.0.0.1 www.vcirgilio.it
127.0.0.1 vcodec.com
127.0.0.1 www.vcodec.com
127.0.0.1 v-codec.com
127.0.0.1 www.v-codec.com
127.0.0.1 www.vcodec2007.com
127.0.0.1 vcodec2007.com
127.0.0.1 www.vcorriere.it
127.0.0.1 vcorriere.it
127.0.0.1 vegas-free.com
127.0.0.1 vegbuy.com
127.0.0.1 veloventures.com
127.0.0.1 verkaufen.wegvonviren.com
127.0.0.1 verkehrsprofi.com
127.0.0.1 verkehrsprofi.com
127.0.0.1 www.verkehrsprofi.com
127.0.0.1 www.vertionkinhunfenrunhasde.com
127.0.0.1 vertionkinhunfenrunhasde.com
127.0.0.1 www.verwandschafts-test.de
127.0.0.1 verwandschafts-test.de
127.0.0.1 verwandschafts-test.de
127.0.0.1 veryeasysearch.com
127.0.0.1 verzila.com
127.0.0.1 vesbiz.biz
127.0.0.1 veyyhlucwa.net
127.0.0.1 www.veyyhlucwa.net
127.0.0.1 vfirgilio.it
127.0.0.1 www.vfirgilio.it
127.0.0.1 vgazzetta.it
127.0.0.1 www.vgazzetta.it
127.0.0.1 www.vgirgilio.it
127.0.0.1 vgirgilio.it
127.0.0.1 vgoogle.it
127.0.0.1 www.vgoogle.it
127.0.0.1 www.vi4gilio.it
127.0.0.1 vi4gilio.it
127.0.0.1 vi4rgilio.it
127.0.0.1 www.vi4rgilio.it
127.0.0.1 vi5gilio.it
127.0.0.1 www.vi5gilio.it
127.0.0.1 www.vi5rgilio.it
127.0.0.1 vi5rgilio.it
127.0.0.1 vi8rgilio.it
127.0.0.1 www.vi8rgilio.it
127.0.0.1 vi9rgilio.it
127.0.0.1 www.vi9rgilio.it
127.0.0.1 vicodec.com
127.0.0.1 www.vicodec.com
127.0.0.1 victoriaadam.com
127.0.0.1 vidaccess.net
127.0.0.1 www.vidaccess.net
127.0.0.1 www.vidcodecs.com
127.0.0.1 vidcodecs.com
127.0.0.1 videoaccessactivex.com
127.0.0.1 www.videoaccessactivex.com
127.0.0.1 www.videoactivexlist.com
127.0.0.1 videoactivexlist.com
127.0.0.1 videoactivexmode.com
127.0.0.1 www.videoactivexmode.com
127.0.0.1 videoactivexnote.com
127.0.0.1 www.videoactivexnote.com
127.0.0.1 www.videoactivexsetup.com
127.0.0.1 videoactivexsetup.com
127.0.0.1 videoactivexsoft.com
127.0.0.1 www.videoactivexsoft.com
127.0.0.1 videoactivexsoftware.com
127.0.0.1 www.videoactivexsoftware.com
127.0.0.1 videoadaptation.com
127.0.0.1 www.videoadaptation.com
127.0.0.1 videoaxdata.com
127.0.0.1 www.videoaxdata.com
127.0.0.1 videoaxdownload.com
127.0.0.1 www.videoaxdownload.com
127.0.0.1 videoaxobject.com
127.0.0.1 www.videoaxobject.com
127.0.0.1 videoaxproject.com
127.0.0.1 www.videoaxproject.com
127.0.0.1 videoaxsoftware.com
127.0.0.1 www.videoaxsoftware.com
127.0.0.1 www.videoaxsolution.com
127.0.0.1 videoaxsolution.com
127.0.0.1 videocategories.com
127.0.0.1 www.video-clips.in
127.0.0.1 video-clips.in
127.0.0.1 videoobjectax.com
127.0.0.1 www.videoobjectax.com
127.0.0.1 www.videoobjectmedia.com
127.0.0.1 videoobjectmedia.com
127.0.0.1 www.videoplayersite.com
127.0.0.1 videoplayersite.com
127.0.0.1 www.videos-access.com
127.0.0.1 videos-access.com
127.0.0.1 www.videosaccess.net
127.0.0.1 videosaccess.net
127.0.0.1 www.videoscodec.com
127.0.0.1 videoscodec.com
127.0.0.1 www.videosfan.com
127.0.0.1 videosfan.com
127.0.0.1 www.videosoftonline.com
127.0.0.1 videosoftonline.com
127.0.0.1 www.videosoftwareax.com
127.0.0.1 videosoftwareax.com
127.0.0.1 www.videossoftware.com
127.0.0.1 videossoftware.com
127.0.0.1 www.videowebproject.com
127.0.0.1 videowebproject.com
127.0.0.1 www.videowebsoft.com
127.0.0.1 videowebsoft.com
127.0.0.1 www.videozapping.com
127.0.0.1 videozapping.com
127.0.0.1 www.vidrgilio.it
127.0.0.1 vidrgilio.it
127.0.0.1 www.vids-access.com
127.0.0.1 vids-access.com
127.0.0.1 www.vidscodec.com
127.0.0.1 vidscodec.com
127.0.0.1 www.vidsfest.com
127.0.0.1 vidsfest.com
127.0.0.1 www.viegilio.it
127.0.0.1 viegilio.it
127.0.0.1 www.viergilio.it
127.0.0.1 viergilio.it
127.0.0.1 www.viewdevice.com
127.0.0.1 viewdevice.com
127.0.0.1 www.viewimageonline.com
127.0.0.1 viewimageonline.com
127.0.0.1 www.viewmpgdevice.com
127.0.0.1 viewmpgdevice.com
127.0.0.1 www.viewutility.com
127.0.0.1 viewutility.com
127.0.0.1 www.vifgilio.it
127.0.0.1 vifgilio.it
127.0.0.1 www.vifrgilio.it
127.0.0.1 vifrgilio.it
127.0.0.1 www.vigrgilio.it
127.0.0.1 vigrgilio.it
127.0.0.1 www.vigrilio.it
127.0.0.1 vigrilio.it
127.0.0.1 www.vijrgilio.it
127.0.0.1 vijrgilio.it
127.0.0.1 www.vikrgilio.it
127.0.0.1 vikrgilio.it
127.0.0.1 www.vilrgilio.it
127.0.0.1 vilrgilio.it
127.0.0.1 www.viorgilio.it
127.0.0.1 viorgilio.it
127.0.0.1 www.vipcodecvip.com
127.0.0.1 vipcodecvip.com
127.0.0.1 www.vipru.com
127.0.0.1 vipru.com
127.0.0.1 www.vir4gilio.it
127.0.0.1 vir4gilio.it
127.0.0.1 www.vir5gilio.it
127.0.0.1 vir5gilio.it
127.0.0.1 www.virbgilio.it
127.0.0.1 virbgilio.it
127.0.0.1 www.virbilio.it
127.0.0.1 virbilio.it
127.0.0.1 www.virdgilio.it
127.0.0.1 virdgilio.it
127.0.0.1 www.viregilio.it
127.0.0.1 viregilio.it
127.0.0.1 www.virfgilio.it
127.0.0.1 virfgilio.it
127.0.0.1 www.virg8ilio.it
127.0.0.1 virg8ilio.it
127.0.0.1 www.virg8lio.it
127.0.0.1 virg8lio.it
127.0.0.1 www.virg9ilio.it
127.0.0.1 virg9ilio.it
127.0.0.1 www.virg9lio.it
127.0.0.1 virg9lio.it
127.0.0.1 www.virgbilio.it
127.0.0.1 virgbilio.it
127.0.0.1 www.virgfilio.it
127.0.0.1 virgfilio.it
127.0.0.1 www.virghilio.it
127.0.0.1 virghilio.it
127.0.0.1 www.virgi8lio.it
127.0.0.1 virgi8lio.it
127.0.0.1 www.virgi9lio.it
127.0.0.1 virgi9lio.it
127.0.0.1 www.virgiilo.it
127.0.0.1 virgiilo.it
127.0.0.1 www.virgiio.it
127.0.0.1 virgiio.it
127.0.0.1 www.virgijlio.it
127.0.0.1 virgijlio.it
127.0.0.1 www.virgiklio.it
127.0.0.1 virgiklio.it
127.0.0.1 www.virgil8io.it
127.0.0.1 virgil8io.it
127.0.0.1 www.virgil9io.it
127.0.0.1 virgil9io.it
127.0.0.1 www.virgili0.it
127.0.0.1 virgili0.it
127.0.0.1 www.virgili8o.it
127.0.0.1 virgili8o.it
127.0.0.1 www.virgili9.it
127.0.0.1 virgili9.it
127.0.0.1 www.virgili9o.it
127.0.0.1 virgili9o.it
127.0.0.1 www.virgilijo.it
127.0.0.1 virgilijo.it
127.0.0.1 www.virgiliko.it
127.0.0.1 virgiliko.it
127.0.0.1 www.virgilil.it
127.0.0.1 virgilil.it
127.0.0.1 www.virgililo.it
127.0.0.1 virgililo.it
127.0.0.1 virgilio0.it
127.0.0.1 www.virgilio0.it
127.0.0.1 www.virgilio9.it
127.0.0.1 virgilio9.it
127.0.0.1 www.virgilioi.it
127.0.0.1 virgilioi.it
127.0.0.1 www.virgiliok.it
127.0.0.1 virgiliok.it
127.0.0.1 www.virgiliol.it
127.0.0.1 virgiliol.it
127.0.0.1 www.virgiliop.it
127.0.0.1 virgiliop.it
127.0.0.1 www.virgilipo.it
127.0.0.1 virgilipo.it
127.0.0.1 www.virgiliuo.it
127.0.0.1 virgiliuo.it
127.0.0.1 www.virgiljio.it
127.0.0.1 virgiljio.it
127.0.0.1 www.virgilkio.it
127.0.0.1 virgilkio.it
127.0.0.1 www.virgiloio.it
127.0.0.1 virgiloio.it
127.0.0.1 www.virgiloo.it
127.0.0.1 virgiloo.it
127.0.0.1 www.virgilpio.it
127.0.0.1 virgilpio.it
127.0.0.1 www.virgiluio.it
127.0.0.1 virgiluio.it
127.0.0.1 www.virgiluo.it
127.0.0.1 virgiluo.it
127.0.0.1 virgin-tgp.net
127.0.0.1 www.virgioio.it
127.0.0.1 virgioio.it
127.0.0.1 www.virgiolio.it
127.0.0.1 virgiolio.it
127.0.0.1 www.virgiplio.it
127.0.0.1 virgiplio.it
127.0.0.1 www.virgiulio.it
127.0.0.1 virgiulio.it
127.0.0.1 www.virgjilio.it
127.0.0.1 virgjilio.it
127.0.0.1 www.virgkilio.it
127.0.0.1 virgkilio.it
127.0.0.1 www.virgklio.it
127.0.0.1 virgklio.it
127.0.0.1 www.virglilio.it
127.0.0.1 virglilio.it
127.0.0.1 www.virgoilio.it
127.0.0.1 virgoilio.it
127.0.0.1 www.virgtilio.it
127.0.0.1 virgtilio.it
127.0.0.1 www.virguilio.it
127.0.0.1 virguilio.it
127.0.0.1 www.virgvilio.it
127.0.0.1 virgvilio.it
127.0.0.1 www.virgyilio.it
127.0.0.1 virgyilio.it
127.0.0.1 www.virhgilio.it
127.0.0.1 virhgilio.it
127.0.0.1 www.virprotect.com
127.0.0.1 virprotect.com
127.0.0.1 www.virtgilio.it
127.0.0.1 virtgilio.it
127.0.0.1 www.virtilio.it
127.0.0.1 virtilio.it
127.0.0.1 www.virtualcodec.com
127.0.0.1 virtualcodec.com
127.0.0.1 www.virtual-ticket.net
127.0.0.1 virtual-ticket.net
127.0.0.1 www.virusburst.com
127.0.0.1 virusburst.com
127.0.0.1 www.viruscrusher.com
127.0.0.1 viruscrusher.com
127.0.0.1 www.virusdifesa.com
127.0.0.1 virusdifesa.com
127.0.0.1 virusforsvar.com
127.0.0.1 www.virusforsvar.com
127.0.0.1 virusgarde.com
127.0.0.1 www.virusgarde.com
127.0.0.1 www.virusheat.com
127.0.0.1 virusheat.com
127.0.0.1 www.virushunter.com
127.0.0.1 virushunter.com
127.0.0.1 www.virusnuke.com
127.0.0.1 virusnuke.com
127.0.0.1 virusprotectpro.com
127.0.0.1 www.virusranger.com
127.0.0.1 virusranger.com
127.0.0.1 www.virusrescue.com
127.0.0.1 virusrescue.com
127.0.0.1 www.virusscansite.com
127.0.0.1 virusscansite.com
127.0.0.1 www.virusschlacht.com
127.0.0.1 virusschlacht.com
127.0.0.1 www.virusvakt.com
127.0.0.1 virusvakt.com
127.0.0.1 www.virvgilio.it
127.0.0.1 virvgilio.it
127.0.0.1 www.virvilio.it
127.0.0.1 virvilio.it
127.0.0.1 www.virygilio.it
127.0.0.1 virygilio.it
127.0.0.1 vitamins-for-each.com
127.0.0.1 vitrgilio.it
127.0.0.1 www.vitrgilio.it
127.0.0.1 viurgilio.it
127.0.0.1 www.viurgilio.it
127.0.0.1 vivacodec.net
127.0.0.1 www.vivacodec.net
127.0.0.1 vjirgilio.it
127.0.0.1 www.vjirgilio.it
127.0.0.1 www.vkirgilio.it
127.0.0.1 vkirgilio.it
127.0.0.1 www.vkrgilio.it
127.0.0.1 vkrgilio.it
127.0.0.1 www.vlirgilio.it
127.0.0.1 vlirgilio.it
127.0.0.1 www.voghp.com
127.0.0.1 voghp.com
127.0.0.1 void.truth-is-out-there.org
127.0.0.1 www.voirgilio.it
127.0.0.1 voirgilio.it
127.0.0.1 vorlagen-archiv.com
127.0.0.1 www.vorlagen-archiv.com
127.0.0.1 vorlagen-archiv.com
127.0.0.1 vorlagen-paradies.de
127.0.0.1 vorlagen-paradies.de
127.0.0.1 www.vorlagen-paradies.de
127.0.0.1 vorlagen-world.de
127.0.0.1 www.vorlagen-world.de
127.0.0.1 vorlagen-world.de
127.0.0.1 www.vorriere.it
127.0.0.1 vorriere.it
127.0.0.1 votehowe.org
127.0.0.1 vother.info
127.0.0.1 www.vother.info
127.0.0.1 votreenton.biz
127.0.0.1 www.votreenton.biz
127.0.0.1 vparivalka.com
127.0.0.1 vplprocedure.com
127.0.0.1 www.vplprocedure.com
127.0.0.1 vse-moe.biz
127.0.0.1 www.vskeylogger.nazwa.pl
127.0.0.1 vskeylogger.nazwa.pl
127.0.0.1 www.vtvcp-ueorn.com
127.0.0.1 vtvcp-ueorn.com
127.0.0.1 www.vtvcp-ymct.com
127.0.0.1 vtvcp-ymct.com
127.0.0.1 vuirgilio.it
127.0.0.1 www.vuirgilio.it
127.0.0.1 vxebony.com
127.0.0.1 wabq.com
127.0.0.1 wabu.com
127.0.0.1 wakeupdick.com
127.0.0.1 walitalia.it
127.0.0.1 www.walitalia.it
127.0.0.1 www.wanfuchina.com
127.0.0.1 wanfuchina.com
127.0.0.1 www.ware2006.com
127.0.0.1 ware2006.com
127.0.0.1 www.warez.com
127.0.0.1 warez.com
127.0.0.1 warningiepage.com
127.0.0.1 www.warningiepage.com
127.0.0.1 warnomore.org
127.0.0.1 watchonline.tv
127.0.0.1 www.watchonline.tv
127.0.0.1 watersport-specialties.com
127.0.0.1 www.wazzupnet.com
127.0.0.1 wazzupnet.com
127.0.0.1 wbay.it
127.0.0.1 www.wbay.it
127.0.0.1 wbkb.com
127.0.0.1 web.links4all.biz
127.0.0.1 web1000.com
127.0.0.1 webaccelerating.com
127.0.0.1 www.webaccelerating.com
127.0.0.1 webbuying.net
127.0.0.1 www.webbuying.net
127.0.0.1 www.web-codec.com
127.0.0.1 web-codec.com
127.0.0.1 webcoolsearch.com
127.0.0.1 web-entrance.co
127.0.0.1 web-fastserve.com
127.0.0.1 www.web-fastserve.com
127.0.0.1 webhancer.com
127.0.0.1 www.webhancer.com
127.0.0.1 web-homepage.net
127.0.0.1 webinvestigator.com
127.0.0.1 www.webinvestigator.com
127.0.0.1 webiphoneaccess.com
127.0.0.1 www.webiphoneaccess.com
127.0.0.1 webiphonedownloads.com
127.0.0.1 www.webiphonedownloads.com
127.0.0.1 www.webipoddownload.com
127.0.0.1 webipoddownload.com
127.0.0.1 www.webloyalty.com
127.0.0.1 webloyalty.com
127.0.0.1 www.Web-mediaplayer.com
127.0.0.1 Web-mediaplayer.com
127.0.0.1 webnetinfo.net
127.0.0.1 www.webnetinfo.net
127.0.0.1 web-nexus.net
127.0.0.1 webpspdownload.com
127.0.0.1 www.webpspdownload.com
127.0.0.1 websearch.com
127.0.0.1 www.websearch.com
127.0.0.1 web-search.tk
127.0.0.1 www.websearch24.com
127.0.0.1 websearch24.com
127.0.0.1 websearchdot.com
127.0.0.1 websoft-a.com
127.0.0.1 www.websoft-a.com
127.0.0.1 websoftcodecdriver.com
127.0.0.1 www.websoftcodecdriver.com
127.0.0.1 www.websoftcodecdriver2.com
127.0.0.1 websoftcodecdriver2.com
127.0.0.1 www.websopot.com
127.0.0.1 websopot.com
127.0.0.1 www.webspyshield.com
127.0.0.1 webspyshield.com
127.0.0.1 www.webtop100.net
127.0.0.1 webtop100.net
127.0.0.1 www.webtopsecurity.com
127.0.0.1 webtopsecurity.com
127.0.0.1 weekend-movies.com
127.0.0.1 weeproject.com
127.0.0.1 www.weeproject.com
127.0.0.1 wegvonviren.com
127.0.0.1 www.wegvonviren.com
127.0.0.1 www.wer-bumst-mich.de
127.0.0.1 wer-bumst-mich.de
127.0.0.1 www.wethere.com
127.0.0.1 wethere.com
127.0.0.1 wetpornostars.com
127.0.0.1 wfix.com
127.0.0.1 wflu.com
127.0.0.1 wg581.com
127.0.0.1 www.wg581.com
127.0.0.1 www.whatmetodonow.org
127.0.0.1 whatmetodonow.org
127.0.0.1 whatsyoursearch.com
127.0.0.1 whazit.com
127.0.0.1 whitecodec.com
127.0.0.1 www.whitecodec.com
127.0.0.1 white-pages.ws
127.0.0.1 www.whitescat.com
127.0.0.1 whitescat.com
127.0.0.1 whittierblvd.com
127.0.0.1 whoisprivacyprotect.com
127.0.0.1 www.whoisprivacyprotect.com
127.0.0.1 www.winamp2007.com
127.0.0.1 winamp2007.com
127.0.0.1 winamp-download-now.com
127.0.0.1 www.winamp-download-now.com
127.0.0.1 winamp-hq.com
127.0.0.1 www.winamp-hq.com
127.0.0.1 winantispam.com
127.0.0.1 www.winantispam.com
127.0.0.1 www.winantispy.com
127.0.0.1 winantispy.com
127.0.0.1 winantispyware.com
127.0.0.1 www.winantispyware.com
127.0.0.1 winantivirus.com
127.0.0.1 www.winantivirus.com
127.0.0.1 winantiviruspro.com
127.0.0.1 www.winantiviruspro.com
127.0.0.1 win-anti-virus-pro.com
127.0.0.1 www.win-anti-virus-pro.com
127.0.0.1 windefender.com
127.0.0.1 www.windefender.com
127.0.0.1 windowenhancer.com
127.0.0.1 windrivecleaner.com
127.0.0.1 www.windrivecleaner.com
127.0.0.1 windrivesafe.com
127.0.0.1 www.windrivesafe.com
127.0.0.1 windupdates.com
127.0.0.1 winfirewall.com
127.0.0.1 www.winfirewall.com
127.0.0.1 www.winfixer.com
127.0.0.1 winfixer.com
127.0.0.1 winfixer2006.com
127.0.0.1 www.winfixer2006.com
127.0.0.1 win-in-casino.com
127.0.0.1 winmediacodec.com
127.0.0.1 www.winmediacodec.com
127.0.0.1 winmsn.com
127.0.0.1 winmx.click-new-download.com
127.0.0.1 www.winmx.click-new-download.com
127.0.0.1 winmxfrance.com
127.0.0.1 www.winmxfrance.com
127.0.0.1 winmx-freebie.com
127.0.0.1 www.winmx-freebie.com
127.0.0.1 www.winmx-music-download.com
127.0.0.1 winmx-music-download.com
127.0.0.1 www.winnanny.com
127.0.0.1 winnanny.com
127.0.0.1 winprotect.net
127.0.0.1 winrar-download-now.com
127.0.0.1 www.winrar-download-now.com
127.0.0.1 winrar-hq.com
127.0.0.1 www.winrar-hq.com
127.0.0.1 winrar-stop.com
127.0.0.1 www.winrar-stop.com
127.0.0.1 winshow.biz
127.0.0.1 winsoftware.com
127.0.0.1 www.winsoftware.com
127.0.0.1 wintvguide.com
127.0.0.1 www.wintvguide.com
127.0.0.1 www.win-virus-pro.com
127.0.0.1 win-virus-pro.com
127.0.0.1 winxpspeedup.com
127.0.0.1 www.winxpspeedup.com
127.0.0.1 www.winzip-11.com
127.0.0.1 winzip-11.com
127.0.0.1 winzip-hq.com
127.0.0.1 www.winzip-hq.com
127.0.0.1 wiresearch.com
127.0.0.1 wish7.com
127.0.0.1 wm.buhartes.info
127.0.0.1 www.wm.buhartes.info
127.0.0.1 wm.kannylizaciya.info
127.0.0.1 www.wm.kannylizaciya.info
127.0.0.1 wm.komforochka.info
127.0.0.1 www.wm.komforochka.info
127.0.0.1 wm.vother.info
127.0.0.1 www.wm.vother.info
127.0.0.1 www.wmaassistant.com
127.0.0.1 wmaassistant.com
127.0.0.1 wmvappliance.com
127.0.0.1 www.wmvappliance.com
127.0.0.1 wmvsolution.com
127.0.0.1 www.wmvsolution.com
127.0.0.1 wolfpacracing.com
127.0.0.1 wonder-context.com
127.0.0.1 www.wonder-context.com
127.0.0.1 woool.100888290cs.com
127.0.0.1 wordlist.jps.ru
127.0.0.1 WorldAntiSpy.com
127.0.0.1 www.WorldAntiSpy.com
127.0.0.1 worldbestadult.com
127.0.0.1 www.worldbestadult.com
127.0.0.1 worldray.com
127.0.0.1 www.worldray.com
127.0.0.1 www.worldsecurityonline.biz
127.0.0.1 worldsecurityonline.biz
127.0.0.1 www.worldtostart.com
127.0.0.1 worldtostart.com
127.0.0.1 worldusa.com
127.0.0.1 www.worldwideadvertisingservices.info
127.0.0.1 worldwideadvertisingservices.info
127.0.0.1 www.wowsearch.org
127.0.0.1 wowsearch.org
127.0.0.1 wpc2001.org
127.0.0.1 wr.mcboo.com
127.0.0.1 wrs.mcboo.com
127.0.0.1 wspzone.sexpornonline.com
127.0.0.1 www.wsupereva.it
127.0.0.1 wsupereva.it
127.0.0.1 www1.beruijindegunhadesun.com
127.0.0.1 www2.p0rt2.com
127.0.0.1 www.www2.p0rt2.com
127.0.0.1 www224.paypopup.com
127.0.0.1 www3.bigtrafficnetwork.com
127.0.0.1 www3.hadesunharuikeya.com
127.0.0.1 www4free.info
127.0.0.1 www5.worldray.com
127.0.0.1 www6.worldray.com
127.0.0.1 www7.logih.com
127.0.0.1 www.www7.logih.com
127.0.0.1 wwwadobe-download-now.com
127.0.0.1 www-audacity.com
127.0.0.1 www.www-audacity.com
127.0.0.1 wwwbet.net
127.0.0.1 wwwbetting.net
127.0.0.1 wwwCrazygirls-world.com
127.0.0.1 wwwdownloadwizard.com
127.0.0.1 www-free-tunes.com
127.0.0.1 www.www-free-tunes.com
127.0.0.1 wwwpokergames.com
127.0.0.1 wwwpokerplayers.com
127.0.0.1 wwwroulette.net
127.0.0.1 wwwsearch.biz
127.0.0.1 www.wwwsearch.biz
127.0.0.1 wwwsearchdrive.info
127.0.0.1 www-spyboot.com
127.0.0.1 www.www-spyboot.com
127.0.0.1 www.www-spybot.net
127.0.0.1 www-Spybot.net
127.0.0.1 www.www-spybotcom.com
127.0.0.1 www-spybotcom.com
127.0.0.1 www.www-spybot-info.com
127.0.0.1 www-spybot-info.com
127.0.0.1 www.www-SpywareBot.org
127.0.0.1 www-SpywareBot.org
127.0.0.1 wwww.2211.net
127.0.0.1 wwww.adnet-plus.com
127.0.0.1 www-win-mx.com
127.0.0.1 www.www-win-mx.com
127.0.0.1 wwwxtremesoftware-ltd.com
127.0.0.1 wwwyahoo.downloadznow.net
127.0.0.1 www.wzdq.cn
127.0.0.1 wzdq.cn
127.0.0.1 x.full-tgp.net
127.0.0.1 xads.cliks.org
127.0.0.1 www.xathzesocc.com
127.0.0.1 xathzesocc.com
127.0.0.1 xbeta69.com
127.0.0.1 xbxxrvnyes.com
127.0.0.1 www.xbxxrvnyes.com
127.0.0.1 xcomics4u.com
127.0.0.1 xcorriere.it
127.0.0.1 www.xcorriere.it
127.0.0.1 www.xerocodec.com
127.0.0.1 xerocodec.com
127.0.0.1 xerocodec.net
127.0.0.1 www.xerocodec.net
127.0.0.1 x-google.net
127.0.0.1 xhcodec.com
127.0.0.1 www.xhcodec.com
127.0.0.1 xibu315.com
127.0.0.1 www.xibu315.com
127.0.0.1 xic-bs.com
127.0.0.1 xjupiter.com
127.0.0.1 www.xjupiter.com
127.0.0.1 xlarea.com
127.0.0.1 www.xlarea.com
127.0.0.1 xldd.com
127.0.0.1 www.xldd.com
127.0.0.1 xldr.com
127.0.0.1 x-library.com
127.0.0.1 xlola.underagehost.com
127.0.0.1 xmlsearch.mygeek.com
127.0.0.1 www.xorriere.it
127.0.0.1 xorriere.it
127.0.0.1 xosearchox.com
127.0.0.1 www.xosearchox.com
127.0.0.1 xp.attrezzi.biz
127.0.0.1 xp18.com
127.0.0.1 www.xpantiviruspro.com
127.0.0.1 xpantiviruspro.com
127.0.0.1 xpassgenerator.com
127.0.0.1 www.xpassgenerator.com
127.0.0.1 xpasswordmanager.com
127.0.0.1 www.xpasswordmanager.com
127.0.0.1 www.xponlinescanner.com
127.0.0.1 xponlinescanner.com
127.0.0.1 www.x-porngalleries.com
127.0.0.1 x-porngalleries.com
127.0.0.1 www.x-pornmoviez.com
127.0.0.1 x-pornmoviez.com
127.0.0.1 www.x-pornmovz.com
127.0.0.1 x-pornmovz.com
127.0.0.1 www.xp-protect-2008.com
127.0.0.1 xp-protect-2008.com
127.0.0.1 www.x-prnmoviez.com
127.0.0.1 x-prnmoviez.com
127.0.0.1 xp-vista.com
127.0.0.1 www.xp-vista.com
127.0.0.1 x-ratedclips.com
127.0.0.1 www.x-ratedclips.com
127.0.0.1 www.xrdenterprise.com
127.0.0.1 xrdenterprise.com
127.0.0.1 xrenoder.com
127.0.0.1 www.xrenoder.com
127.0.0.1 xrenosearch.com
127.0.0.1 xrensmagpost.com
127.0.0.1 xsec.org
127.0.0.1 www.xsec.org
127.0.0.1 xsex.ws
127.0.0.1 xsremover.com
127.0.0.1 www.xsremover.com
127.0.0.1 xtipp.de
127.0.0.1 www.xtipp.de
127.0.0.1 www.xtosearch.biz
127.0.0.1 xtosearch.biz
127.0.0.1 xtragay.com
127.0.0.1 www.xtravideos.com
127.0.0.1 xtravideos.com
127.0.0.1 xtremesoftware-ltd.com
127.0.0.1 xu.pl
127.0.0.1 xu.xu.pl
127.0.0.1 www.xupiter.com
127.0.0.1 xupiter.com
127.0.0.1 xvgate.com
127.0.0.1 www.xvgate.com
127.0.0.1 www.xvidscollection.com
127.0.0.1 xvidscollection.com
127.0.0.1 www.xvsenterprise.com
127.0.0 -
et part 2
HOSTS File
127.0.0.1 videoactivexmode.com
127.0.0.1 www.videoactivexmode.com
127.0.0.1 videoactivexnote.com
127.0.0.1 www.videoactivexnote.com
127.0.0.1 www.videoactivexsetup.com
127.0.0.1 videoactivexsetup.com
127.0.0.1 videoactivexsoft.com
127.0.0.1 www.videoactivexsoft.com
127.0.0.1 videoactivexsoftware.com
127.0.0.1 www.videoactivexsoftware.com
127.0.0.1 videoadaptation.com
127.0.0.1 www.videoadaptation.com
127.0.0.1 videoaxdata.com
127.0.0.1 www.videoaxdata.com
127.0.0.1 videoaxdownload.com
127.0.0.1 www.videoaxdownload.com
127.0.0.1 videoaxobject.com
127.0.0.1 www.videoaxobject.com
127.0.0.1 videoaxproject.com
127.0.0.1 www.videoaxproject.com
127.0.0.1 videoaxsoftware.com
127.0.0.1 www.videoaxsoftware.com
127.0.0.1 www.videoaxsolution.com
127.0.0.1 videoaxsolution.com
127.0.0.1 videocategories.com
127.0.0.1 www.video-clips.in
127.0.0.1 video-clips.in
127.0.0.1 videoobjectax.com
127.0.0.1 www.videoobjectax.com
127.0.0.1 www.videoobjectmedia.com
127.0.0.1 videoobjectmedia.com
127.0.0.1 www.videoplayersite.com
127.0.0.1 videoplayersite.com
127.0.0.1 www.videos-access.com
127.0.0.1 videos-access.com
127.0.0.1 www.videosaccess.net
127.0.0.1 videosaccess.net
127.0.0.1 www.videoscodec.com
127.0.0.1 videoscodec.com
127.0.0.1 www.videosfan.com
127.0.0.1 videosfan.com
127.0.0.1 www.videosoftonline.com
127.0.0.1 videosoftonline.com
127.0.0.1 www.videosoftwareax.com
127.0.0.1 videosoftwareax.com
127.0.0.1 www.videossoftware.com
127.0.0.1 videossoftware.com
127.0.0.1 www.videowebproject.com
127.0.0.1 videowebproject.com
127.0.0.1 www.videowebsoft.com
127.0.0.1 videowebsoft.com
127.0.0.1 www.videozapping.com
127.0.0.1 videozapping.com
127.0.0.1 www.vidrgilio.it
127.0.0.1 vidrgilio.it
127.0.0.1 www.vids-access.com
127.0.0.1 vids-access.com
127.0.0.1 www.vidscodec.com
127.0.0.1 vidscodec.com
127.0.0.1 www.vidsfest.com
127.0.0.1 vidsfest.com
127.0.0.1 www.viegilio.it
127.0.0.1 viegilio.it
127.0.0.1 www.viergilio.it
127.0.0.1 viergilio.it
127.0.0.1 www.viewdevice.com
127.0.0.1 viewdevice.com
127.0.0.1 www.viewimageonline.com
127.0.0.1 viewimageonline.com
127.0.0.1 www.viewmpgdevice.com
127.0.0.1 viewmpgdevice.com
127.0.0.1 www.viewutility.com
127.0.0.1 viewutility.com
127.0.0.1 www.vifgilio.it
127.0.0.1 vifgilio.it
127.0.0.1 www.vifrgilio.it
127.0.0.1 vifrgilio.it
127.0.0.1 www.vigrgilio.it
127.0.0.1 vigrgilio.it
127.0.0.1 www.vigrilio.it
127.0.0.1 vigrilio.it
127.0.0.1 www.vijrgilio.it
127.0.0.1 vijrgilio.it
127.0.0.1 www.vikrgilio.it
127.0.0.1 vikrgilio.it
127.0.0.1 www.vilrgilio.it
127.0.0.1 vilrgilio.it
127.0.0.1 www.viorgilio.it
127.0.0.1 viorgilio.it
127.0.0.1 www.vipcodecvip.com
127.0.0.1 vipcodecvip.com
127.0.0.1 www.vipru.com
127.0.0.1 vipru.com
127.0.0.1 www.vir4gilio.it
127.0.0.1 vir4gilio.it
127.0.0.1 www.vir5gilio.it
127.0.0.1 vir5gilio.it
127.0.0.1 www.virbgilio.it
127.0.0.1 virbgilio.it
127.0.0.1 www.virbilio.it
127.0.0.1 virbilio.it
127.0.0.1 www.virdgilio.it
127.0.0.1 virdgilio.it
127.0.0.1 www.viregilio.it
127.0.0.1 viregilio.it
127.0.0.1 www.virfgilio.it
127.0.0.1 virfgilio.it
127.0.0.1 www.virg8ilio.it
127.0.0.1 virg8ilio.it
127.0.0.1 www.virg8lio.it
127.0.0.1 virg8lio.it
127.0.0.1 www.virg9ilio.it
127.0.0.1 virg9ilio.it
127.0.0.1 www.virg9lio.it
127.0.0.1 virg9lio.it
127.0.0.1 www.virgbilio.it
127.0.0.1 virgbilio.it
127.0.0.1 www.virgfilio.it
127.0.0.1 virgfilio.it
127.0.0.1 www.virghilio.it
127.0.0.1 virghilio.it
127.0.0.1 www.virgi8lio.it
127.0.0.1 virgi8lio.it
127.0.0.1 www.virgi9lio.it
127.0.0.1 virgi9lio.it
127.0.0.1 www.virgiilo.it
127.0.0.1 virgiilo.it
127.0.0.1 www.virgiio.it
127.0.0.1 virgiio.it
127.0.0.1 www.virgijlio.it
127.0.0.1 virgijlio.it
127.0.0.1 www.virgiklio.it
127.0.0.1 virgiklio.it
127.0.0.1 www.virgil8io.it
127.0.0.1 virgil8io.it
127.0.0.1 www.virgil9io.it
127.0.0.1 virgil9io.it
127.0.0.1 www.virgili0.it
127.0.0.1 virgili0.it
127.0.0.1 www.virgili8o.it
127.0.0.1 virgili8o.it
127.0.0.1 www.virgili9.it
127.0.0.1 virgili9.it
127.0.0.1 www.virgili9o.it
127.0.0.1 virgili9o.it
127.0.0.1 www.virgilijo.it
127.0.0.1 virgilijo.it
127.0.0.1 www.virgiliko.it
127.0.0.1 virgiliko.it
127.0.0.1 www.virgilil.it
127.0.0.1 virgilil.it
127.0.0.1 www.virgililo.it
127.0.0.1 virgililo.it
127.0.0.1 virgilio0.it
127.0.0.1 www.virgilio0.it
127.0.0.1 www.virgilio9.it
127.0.0.1 virgilio9.it
127.0.0.1 www.virgilioi.it
127.0.0.1 virgilioi.it
127.0.0.1 www.virgiliok.it
127.0.0.1 virgiliok.it
127.0.0.1 www.virgiliol.it
127.0.0.1 virgiliol.it
127.0.0.1 www.virgiliop.it
127.0.0.1 virgiliop.it
127.0.0.1 www.virgilipo.it
127.0.0.1 virgilipo.it
127.0.0.1 www.virgiliuo.it
127.0.0.1 virgiliuo.it
127.0.0.1 www.virgiljio.it
127.0.0.1 virgiljio.it
127.0.0.1 www.virgilkio.it
127.0.0.1 virgilkio.it
127.0.0.1 www.virgiloio.it
127.0.0.1 virgiloio.it
127.0.0.1 www.virgiloo.it
127.0.0.1 virgiloo.it
127.0.0.1 www.virgilpio.it
127.0.0.1 virgilpio.it
127.0.0.1 www.virgiluio.it
127.0.0.1 virgiluio.it
127.0.0.1 www.virgiluo.it
127.0.0.1 virgiluo.it
127.0.0.1 virgin-tgp.net
127.0.0.1 www.virgioio.it
127.0.0.1 virgioio.it
127.0.0.1 www.virgiolio.it
127.0.0.1 virgiolio.it
127.0.0.1 www.virgiplio.it
127.0.0.1 virgiplio.it
127.0.0.1 www.virgiulio.it
127.0.0.1 virgiulio.it
127.0.0.1 www.virgjilio.it
127.0.0.1 virgjilio.it
127.0.0.1 www.virgkilio.it
127.0.0.1 virgkilio.it
127.0.0.1 www.virgklio.it
127.0.0.1 virgklio.it
127.0.0.1 www.virglilio.it
127.0.0.1 virglilio.it
127.0.0.1 www.virgoilio.it
127.0.0.1 virgoilio.it
127.0.0.1 www.virgtilio.it
127.0.0.1 virgtilio.it
127.0.0.1 www.virguilio.it
127.0.0.1 virguilio.it
127.0.0.1 www.virgvilio.it
127.0.0.1 virgvilio.it
127.0.0.1 www.virgyilio.it
127.0.0.1 virgyilio.it
127.0.0.1 www.virhgilio.it
127.0.0.1 virhgilio.it
127.0.0.1 www.virprotect.com
127.0.0.1 virprotect.com
127.0.0.1 www.virtgilio.it
127.0.0.1 virtgilio.it
127.0.0.1 www.virtilio.it
127.0.0.1 virtilio.it
127.0.0.1 www.virtualcodec.com
127.0.0.1 virtualcodec.com
127.0.0.1 www.virtual-ticket.net
127.0.0.1 virtual-ticket.net
127.0.0.1 www.virusburst.com
127.0.0.1 virusburst.com
127.0.0.1 www.viruscrusher.com
127.0.0.1 viruscrusher.com
127.0.0.1 www.virusdifesa.com
127.0.0.1 virusdifesa.com
127.0.0.1 virusforsvar.com
127.0.0.1 www.virusforsvar.com
127.0.0.1 virusgarde.com
127.0.0.1 www.virusgarde.com
127.0.0.1 www.virusheat.com
127.0.0.1 virusheat.com
127.0.0.1 www.virushunter.com
127.0.0.1 virushunter.com
127.0.0.1 www.virusnuke.com
127.0.0.1 virusnuke.com
127.0.0.1 virusprotectpro.com
127.0.0.1 www.virusranger.com
127.0.0.1 virusranger.com
127.0.0.1 www.virusrescue.com
127.0.0.1 virusrescue.com
127.0.0.1 www.virusscansite.com
127.0.0.1 virusscansite.com
127.0.0.1 www.virusschlacht.com
127.0.0.1 virusschlacht.com
127.0.0.1 www.virusvakt.com
127.0.0.1 virusvakt.com
127.0.0.1 www.virvgilio.it
127.0.0.1 virvgilio.it
127.0.0.1 www.virvilio.it
127.0.0.1 virvilio.it
127.0.0.1 www.virygilio.it
127.0.0.1 virygilio.it
127.0.0.1 vitamins-for-each.com
127.0.0.1 vitrgilio.it
127.0.0.1 www.vitrgilio.it
127.0.0.1 viurgilio.it
127.0.0.1 www.viurgilio.it
127.0.0.1 vivacodec.net
127.0.0.1 www.vivacodec.net
127.0.0.1 vjirgilio.it
127.0.0.1 www.vjirgilio.it
127.0.0.1 www.vkirgilio.it
127.0.0.1 vkirgilio.it
127.0.0.1 www.vkrgilio.it
127.0.0.1 vkrgilio.it
127.0.0.1 www.vlirgilio.it
127.0.0.1 vlirgilio.it
127.0.0.1 www.voghp.com
127.0.0.1 voghp.com
127.0.0.1 void.truth-is-out-there.org
127.0.0.1 www.voirgilio.it
127.0.0.1 voirgilio.it
127.0.0.1 vorlagen-archiv.com
127.0.0.1 www.vorlagen-archiv.com
127.0.0.1 vorlagen-archiv.com
127.0.0.1 vorlagen-paradies.de
127.0.0.1 vorlagen-paradies.de
127.0.0.1 www.vorlagen-paradies.de
127.0.0.1 vorlagen-world.de
127.0.0.1 www.vorlagen-world.de
127.0.0.1 vorlagen-world.de
127.0.0.1 www.vorriere.it
127.0.0.1 vorriere.it
127.0.0.1 votehowe.org
127.0.0.1 vother.info
127.0.0.1 www.vother.info
127.0.0.1 votreenton.biz
127.0.0.1 www.votreenton.biz
127.0.0.1 vparivalka.com
127.0.0.1 vplprocedure.com
127.0.0.1 www.vplprocedure.com
127.0.0.1 vse-moe.biz
127.0.0.1 www.vskeylogger.nazwa.pl
127.0.0.1 vskeylogger.nazwa.pl
127.0.0.1 www.vtvcp-ueorn.com
127.0.0.1 vtvcp-ueorn.com
127.0.0.1 www.vtvcp-ymct.com
127.0.0.1 vtvcp-ymct.com
127.0.0.1 vuirgilio.it
127.0.0.1 www.vuirgilio.it
127.0.0.1 vxebony.com
127.0.0.1 wabq.com
127.0.0.1 wabu.com
127.0.0.1 wakeupdick.com
127.0.0.1 walitalia.it
127.0.0.1 www.walitalia.it
127.0.0.1 www.wanfuchina.com
127.0.0.1 wanfuchina.com
127.0.0.1 www.ware2006.com
127.0.0.1 ware2006.com
127.0.0.1 www.warez.com
127.0.0.1 warez.com
127.0.0.1 warningiepage.com
127.0.0.1 www.warningiepage.com
127.0.0.1 warnomore.org
127.0.0.1 watchonline.tv
127.0.0.1 www.watchonline.tv
127.0.0.1 watersport-specialties.com
127.0.0.1 www.wazzupnet.com
127.0.0.1 wazzupnet.com
127.0.0.1 wbay.it
127.0.0.1 www.wbay.it
127.0.0.1 wbkb.com
127.0.0.1 web.links4all.biz
127.0.0.1 web1000.com
127.0.0.1 webaccelerating.com
127.0.0.1 www.webaccelerating.com
127.0.0.1 webbuying.net
127.0.0.1 www.webbuying.net
127.0.0.1 www.web-codec.com
127.0.0.1 web-codec.com
127.0.0.1 webcoolsearch.com
127.0.0.1 web-entrance.co
127.0.0.1 web-fastserve.com
127.0.0.1 www.web-fastserve.com
127.0.0.1 webhancer.com
127.0.0.1 www.webhancer.com
127.0.0.1 web-homepage.net
127.0.0.1 webinvestigator.com
127.0.0.1 www.webinvestigator.com
127.0.0.1 webiphoneaccess.com
127.0.0.1 www.webiphoneaccess.com
127.0.0.1 webiphonedownloads.com
127.0.0.1 www.webiphonedownloads.com
127.0.0.1 www.webipoddownload.com
127.0.0.1 webipoddownload.com
127.0.0.1 www.webloyalty.com
127.0.0.1 webloyalty.com
127.0.0.1 www.Web-mediaplayer.com
127.0.0.1 Web-mediaplayer.com
127.0.0.1 webnetinfo.net
127.0.0.1 www.webnetinfo.net
127.0.0.1 web-nexus.net
127.0.0.1 webpspdownload.com
127.0.0.1 www.webpspdownload.com
127.0.0.1 websearch.com
127.0.0.1 www.websearch.com
127.0.0.1 web-search.tk
127.0.0.1 www.websearch24.com
127.0.0.1 websearch24.com
127.0.0.1 websearchdot.com
127.0.0.1 websoft-a.com
127.0.0.1 www.websoft-a.com
127.0.0.1 websoftcodecdriver.com
127.0.0.1 www.websoftcodecdriver.com
127.0.0.1 www.websoftcodecdriver2.com
127.0.0.1 websoftcodecdriver2.com
127.0.0.1 www.websopot.com
127.0.0.1 websopot.com
127.0.0.1 www.webspyshield.com
127.0.0.1 webspyshield.com
127.0.0.1 www.webtop100.net
127.0.0.1 webtop100.net
127.0.0.1 www.webtopsecurity.com
127.0.0.1 webtopsecurity.com
127.0.0.1 weekend-movies.com
127.0.0.1 weeproject.com
127.0.0.1 www.weeproject.com
127.0.0.1 wegvonviren.com
127.0.0.1 www.wegvonviren.com
127.0.0.1 www.wer-bumst-mich.de
127.0.0.1 wer-bumst-mich.de
127.0.0.1 www.wethere.com
127.0.0.1 wethere.com
127.0.0.1 wetpornostars.com
127.0.0.1 wfix.com
127.0.0.1 wflu.com
127.0.0.1 wg581.com
127.0.0.1 www.wg581.com
127.0.0.1 www.whatmetodonow.org
127.0.0.1 whatmetodonow.org
127.0.0.1 whatsyoursearch.com
127.0.0.1 whazit.com
127.0.0.1 whitecodec.com
127.0.0.1 www.whitecodec.com
127.0.0.1 white-pages.ws
127.0.0.1 www.whitescat.com
127.0.0.1 whitescat.com
127.0.0.1 whittierblvd.com
127.0.0.1 whoisprivacyprotect.com
127.0.0.1 www.whoisprivacyprotect.com
127.0.0.1 www.winamp2007.com
127.0.0.1 winamp2007.com
127.0.0.1 winamp-download-now.com
127.0.0.1 www.winamp-download-now.com
127.0.0.1 winamp-hq.com
127.0.0.1 www.winamp-hq.com
127.0.0.1 winantispam.com
127.0.0.1 www.winantispam.com
127.0.0.1 www.winantispy.com
127.0.0.1 winantispy.com
127.0.0.1 winantispyware.com
127.0.0.1 www.winantispyware.com
127.0.0.1 winantivirus.com
127.0.0.1 www.winantivirus.com
127.0.0.1 winantiviruspro.com
127.0.0.1 www.winantiviruspro.com
127.0.0.1 win-anti-virus-pro.com
127.0.0.1 www.win-anti-virus-pro.com
127.0.0.1 windefender.com
127.0.0.1 www.windefender.com
127.0.0.1 windowenhancer.com
127.0.0.1 windrivecleaner.com
127.0.0.1 www.windrivecleaner.com
127.0.0.1 windrivesafe.com
127.0.0.1 www.windrivesafe.com
127.0.0.1 windupdates.com
127.0.0.1 winfirewall.com
127.0.0.1 www.winfirewall.com
127.0.0.1 www.winfixer.com
127.0.0.1 winfixer.com
127.0.0.1 winfixer2006.com
127.0.0.1 www.winfixer2006.com
127.0.0.1 win-in-casino.com
127.0.0.1 winmediacodec.com
127.0.0.1 www.winmediacodec.com
127.0.0.1 winmsn.com
127.0.0.1 winmx.click-new-download.com
127.0.0.1 www.winmx.click-new-download.com
127.0.0.1 winmxfrance.com
127.0.0.1 www.winmxfrance.com
127.0.0.1 winmx-freebie.com
127.0.0.1 www.winmx-freebie.com
127.0.0.1 www.winmx-music-download.com
127.0.0.1 winmx-music-download.com
127.0.0.1 www.winnanny.com
127.0.0.1 winnanny.com
127.0.0.1 winprotect.net
127.0.0.1 winrar-download-now.com
127.0.0.1 www.winrar-download-now.com
127.0.0.1 winrar-hq.com
127.0.0.1 www.winrar-hq.com
127.0.0.1 winrar-stop.com
127.0.0.1 www.winrar-stop.com
127.0.0.1 winshow.biz
127.0.0.1 winsoftware.com
127.0.0.1 www.winsoftware.com
127.0.0.1 wintvguide.com
127.0.0.1 www.wintvguide.com
127.0.0.1 www.win-virus-pro.com
127.0.0.1 win-virus-pro.com
127.0.0.1 winxpspeedup.com
127.0.0.1 www.winxpspeedup.com
127.0.0.1 www.winzip-11.com
127.0.0.1 winzip-11.com
127.0.0.1 winzip-hq.com
127.0.0.1 www.winzip-hq.com
127.0.0.1 wiresearch.com
127.0.0.1 wish7.com
127.0.0.1 wm.buhartes.info
127.0.0.1 www.wm.buhartes.info
127.0.0.1 wm.kannylizaciya.info
127.0.0.1 www.wm.kannylizaciya.info
127.0.0.1 wm.komforochka.info
127.0.0.1 www.wm.komforochka.info
127.0.0.1 wm.vother.info
127.0.0.1 www.wm.vother.info
127.0.0.1 www.wmaassistant.com
127.0.0.1 wmaassistant.com
127.0.0.1 wmvappliance.com
127.0.0.1 www.wmvappliance.com
127.0.0.1 wmvsolution.com
127.0.0.1 www.wmvsolution.com
127.0.0.1 wolfpacracing.com
127.0.0.1 wonder-context.com
127.0.0.1 www.wonder-context.com
127.0.0.1 woool.100888290cs.com
127.0.0.1 wordlist.jps.ru
127.0.0.1 WorldAntiSpy.com
127.0.0.1 www.WorldAntiSpy.com
127.0.0.1 worldbestadult.com
127.0.0.1 www.worldbestadult.com
127.0.0.1 worldray.com
127.0.0.1 www.worldray.com
127.0.0.1 www.worldsecurityonline.biz
127.0.0.1 worldsecurityonline.biz
127.0.0.1 www.worldtostart.com
127.0.0.1 worldtostart.com
127.0.0.1 worldusa.com
127.0.0.1 www.worldwideadvertisingservices.info
127.0.0.1 worldwideadvertisingservices.info
127.0.0.1 www.wowsearch.org
127.0.0.1 wowsearch.org
127.0.0.1 wpc2001.org
127.0.0.1 wr.mcboo.com
127.0.0.1 wrs.mcboo.com
127.0.0.1 wspzone.sexpornonline.com
127.0.0.1 www.wsupereva.it
127.0.0.1 wsupereva.it
127.0.0.1 www1.beruijindegunhadesun.com
127.0.0.1 www2.p0rt2.com
127.0.0.1 www.www2.p0rt2.com
127.0.0.1 www224.paypopup.com
127.0.0.1 www3.bigtrafficnetwork.com
127.0.0.1 www3.hadesunharuikeya.com
127.0.0.1 www4free.info
127.0.0.1 www5.worldray.com
127.0.0.1 www6.worldray.com
127.0.0.1 www7.logih.com
127.0.0.1 www.www7.logih.com
127.0.0.1 wwwadobe-download-now.com
127.0.0.1 www-audacity.com
127.0.0.1 www.www-audacity.com
127.0.0.1 wwwbet.net
127.0.0.1 wwwbetting.net
127.0.0.1 wwwCrazygirls-world.com
127.0.0.1 wwwdownloadwizard.com
127.0.0.1 www-free-tunes.com
127.0.0.1 www.www-free-tunes.com
127.0.0.1 wwwpokergames.com
127.0.0.1 wwwpokerplayers.com
127.0.0.1 wwwroulette.net
127.0.0.1 wwwsearch.biz
127.0.0.1 www.wwwsearch.biz
127.0.0.1 wwwsearchdrive.info
127.0.0.1 www-spyboot.com
127.0.0.1 www.www-spyboot.com
127.0.0.1 www.www-spybot.net
127.0.0.1 www-Spybot.net
127.0.0.1 www.www-spybotcom.com
127.0.0.1 www-spybotcom.com
127.0.0.1 www.www-spybot-info.com
127.0.0.1 www-spybot-info.com
127.0.0.1 www.www-SpywareBot.org
127.0.0.1 www-SpywareBot.org
127.0.0.1 wwww.2211.net
127.0.0.1 wwww.adnet-plus.com
127.0.0.1 www-win-mx.com
127.0.0.1 www.www-win-mx.com
127.0.0.1 wwwxtremesoftware-ltd.com
127.0.0.1 wwwyahoo.downloadznow.net
127.0.0.1 www.wzdq.cn
127.0.0.1 wzdq.cn
127.0.0.1 x.full-tgp.net
127.0.0.1 xads.cliks.org
127.0.0.1 www.xathzesocc.com
127.0.0.1 xathzesocc.com
127.0.0.1 xbeta69.com
127.0.0.1 xbxxrvnyes.com
127.0.0.1 www.xbxxrvnyes.com
127.0.0.1 xcomics4u.com
127.0.0.1 xcorriere.it
127.0.0.1 www.xcorriere.it
127.0.0.1 www.xerocodec.com
127.0.0.1 xerocodec.com
127.0.0.1 xerocodec.net
127.0.0.1 www.xerocodec.net
127.0.0.1 x-google.net
127.0.0.1 xhcodec.com
127.0.0.1 www.xhcodec.com
127.0.0.1 xibu315.com
127.0.0.1 www.xibu315.com
127.0.0.1 xic-bs.com
127.0.0.1 xjupiter.com
127.0.0.1 www.xjupiter.com
127.0.0.1 xlarea.com
127.0.0.1 www.xlarea.com
127.0.0.1 xldd.com
127.0.0.1 www.xldd.com
127.0.0.1 xldr.com
127.0.0.1 x-library.com
127.0.0.1 xlola.underagehost.com
127.0.0.1 xmlsearch.mygeek.com
127.0.0.1 www.xorriere.it
127.0.0.1 xorriere.it
127.0.0.1 xosearchox.com
127.0.0.1 www.xosearchox.com
127.0.0.1 xp.attrezzi.biz
127.0.0.1 xp18.com
127.0.0.1 www.xpantiviruspro.com
127.0.0.1 xpantiviruspro.com
127.0.0.1 xpassgenerator.com
127.0.0.1 www.xpassgenerator.com
127.0.0.1 xpasswordmanager.com
127.0.0.1 www.xpasswordmanager.com
127.0.0.1 www.xponlinescanner.com
127.0.0.1 xponlinescanner.com
127.0.0.1 www.x-porngalleries.com
127.0.0.1 x-porngalleries.com
127.0.0.1 www.x-pornmoviez.com
127.0.0.1 x-pornmoviez.com
127.0.0.1 www.x-pornmovz.com
127.0.0.1 x-pornmovz.com
127.0.0.1 www.xp-protect-2008.com
127.0.0.1 xp-protect-2008.com
127.0.0.1 www.x-prnmoviez.com
127.0.0.1 x-prnmoviez.com
127.0.0.1 xp-vista.com
127.0.0.1 www.xp-vista.com
127.0.0.1 x-ratedclips.com
127.0.0.1 www.x-ratedclips.com
127.0.0.1 www.xrdenterprise.com
127.0.0.1 xrdenterprise.com
127.0.0.1 xrenoder.com
127.0.0.1 www.xrenoder.com
127.0.0.1 xrenosearch.com
127.0.0.1 xrensmagpost.com
127.0.0.1 xsec.org
127.0.0.1 www.xsec.org
127.0.0.1 xsex.ws
127.0.0.1 xsremover.com
127.0.0.1 www.xsremover.com
127.0.0.1 xtipp.de
127.0.0.1 www.xtipp.de
127.0.0.1 www.xtosearch.biz
127.0.0.1 xtosearch.biz
127.0.0.1 xtragay.com
127.0.0.1 www.xtravideos.com
127.0.0.1 xtravideos.com
127.0.0.1 xtremesoftware-ltd.com
127.0.0.1 xu.pl
127.0.0.1 xu.xu.pl
127.0.0.1 www.xupiter.com
127.0.0.1 xupiter.com
127.0.0.1 xvgate.com
127.0.0.1 www.xvgate.com
127.0.0.1 www.xvidscollection.com
127.0.0.1 xvidscollection.com
127.0.0.1 www.xvsenterprise.com
127.0.0.1 xvsenterprise.com
127.0.0.1 www.x-webdesign.com
127.0.0.1 x-webdesign.com
127.0.0.1 xwebsearch.biz
127.0.0.1 www.xwebsearch.biz
127.0.0.1 www.xxlblog.info
127.0.0.1 xxlblog.info
127.0.0.1 www.xxx.com
127.0.0.1 xxx.com
127.0.0.1 xxxallvideo.com
127.0.0.1 www.xxxallvideo.com
127.0.0.1 xxxcategories.com
127.0.0.1 xxxemailxxx.com
127.0.0.1 xxxmovietour.com
127.0.0.1 www.xxxmovietour.com
127.0.0.1 www.xxxpornmovs.com
127.0.0.1 xxxpornmovs.com
127.0.0.1 xxxteenfilm.com
127.0.0.1 www.xxxteenfilm.com
127.0.0.1 xxxtoolbar.com
127.0.0.1 xxxzonevideo.com
127.0.0.1 www.xxxzonevideo.com
127.0.0.1 www.xyzlimited.com
127.0.0.1 xyzlimited.com
127.0.0.1 www.xyzsolution.com
127.0.0.1 xyzsolution.com
127.0.0.1 xzoomy.com
127.0.0.1 yahabags.com
127.0.0.1 www.yahabags.com
127.0.0.1 yahoo.downloadznow.net
127.0.0.1 yahoo.panet.org
127.0.0.1 www.yboeragu.com
127.0.0.1 yboeragu.com
127.0.0.1 www.ydaproject.com
127.0.0.1 ydaproject.com
127.0.0.1 yeak.net
127.0.0.1 y-e-l-l-o-w.com
127.0.0.1 yellow500.com
127.0.0.1 yezol.com
127.0.0.1 www.ygcoueorn.com
127.0.0.1 ygcoueorn.com
127.0.0.1 www.ygcovtvcp.com
127.0.0.1 ygcovtvcp.com
127.0.0.1 www.ygoogle.it
127.0.0.1 ygoogle.it
127.0.0.1 ygsondheks.info
127.0.0.1 www.ygsondheks.info
127.0.0.1 yim-stop.com
127.0.0.1 www.yim-stop.com
127.0.0.1 www.yiscali.it
127.0.0.1 yiscali.it
127.0.0.1 www.ymctaaqada.com
127.0.0.1 ymctaaqada.com
127.0.0.1 www.ymct-aaqada.com
127.0.0.1 ymct-aaqada.com
127.0.0.1 www.ymctavxiz.biz
127.0.0.1 ymctavxiz.biz
127.0.0.1 www.ynotube.com
127.0.0.1 ynotube.com
127.0.0.1 yoogee.com
127.0.0.1 www.yoogee.com
127.0.0.1 www.yoogle.it
127.0.0.1 yoogle.it
127.0.0.1 yootube.info
127.0.0.1 yops.biz
127.0.0.1 www.yops.biz
127.0.0.1 youfindall.com
127.0.0.1 youfindall.net
127.0.0.1 www.youlikehere.com
127.0.0.1 youlikehere.com
127.0.0.1 www.youniyouwo.com
127.0.0.1 youniyouwo.com
127.0.0.1 yourbookmarks.info
127.0.0.1 yourbookmarks.ws
127.0.0.1 www.yourchillyvids.com
127.0.0.1 yourchillyvids.com
127.0.0.1 yourcodec.com
127.0.0.1 www.yourcodec.com
127.0.0.1 yourieprotect.com
127.0.0.1 www.yourieprotect.com
127.0.0.1 youriesafety.com
127.0.0.1 www.youriesafety.com
127.0.0.1 youriesecure.com
127.0.0.1 www.youriesecure.com
127.0.0.1 www.yourphotozone.com
127.0.0.1 yourphotozone.com
127.0.0.1 your-prescriptions.net
127.0.0.1 yoursearchspace.com
127.0.0.1 www.yoursearchspace.com
127.0.0.1 yoursitebar.com
127.0.0.1 you-search.com
127.0.0.1 you-search.com.ru
127.0.0.1 ypir.com
127.0.0.1 ysa-info.net
127.0.0.1 ysbweb.com
127.0.0.1 www.ysbweb.com
127.0.0.1 ytiscali.it
127.0.0.1 www.ytiscali.it
127.0.0.1 www.ytrenitalia.it
127.0.0.1 ytrenitalia.it
127.0.0.1 yukohamano.com
127.0.0.1 www.yunibo.it
127.0.0.1 yunibo.it
127.0.0.1 ywebsearch.info
127.0.0.1 zabywjwzlr.biz.biz
127.0.0.1 www.zabywjwzlr.biz.biz
127.0.0.1 www.zalitalia.it
127.0.0.1 zalitalia.it
127.0.0.1 www.zangcodec.net
127.0.0.1 zangcodec.net
127.0.0.1 zangocash.com
127.0.0.1 www.zangocash.com
127.0.0.1 zapros.com
127.0.0.1 zcodec.com
127.0.0.1 www.zcodec.com
127.0.0.1 zdrqmpad.com
127.0.0.1 www.zdrqmpad.com
127.0.0.1 zelaznyworld.com
127.0.0.1 www.zelaznyworld.com
127.0.0.1 zenotecnico.com
127.0.0.1 www.zenotecnico.com
127.0.0.1 zenotecnico2.com
127.0.0.1 www.zenotecnico2.com
127.0.0.1 zero.bestmanage.org
127.0.0.1 zero.bestmanage0.org
127.0.0.1 zero.bestmanage1.org
127.0.0.1 zero.bestmanage2.org
127.0.0.1 zero.bestmanage3.org
127.0.0.1 zero.bestmanage4.org
127.0.0.1 zero.bestmanage5.org
127.0.0.1 zero.bestmanage6.org
127.0.0.1 zero.bestmanage7.org
127.0.0.1 zero.bestmanage8.org
127.0.0.1 zero.bestmanage9.org
127.0.0.1 zero.serverc.org
127.0.0.1 zero.sisdotnet.com
127.0.0.1 www.zerocodec.com
127.0.0.1 zerocodec.com
127.0.0.1 zero-codec.com
127.0.0.1 www.zero-codec.com
127.0.0.1 zesearch.com
127.0.0.1 zestyfind.com
127.0.0.1 www.zestyfind.com
127.0.0.1 zfxaqzkevi.com
127.0.0.1 www.zfxaqzkevi.com
127.0.0.1 zhmbscwdgk.biz
127.0.0.1 www.zhmbscwdgk.biz
127.0.0.1 zipcodec.com
127.0.0.1 www.zipcodec.com
127.0.0.1 ziportal.com
127.0.0.1 zipportal.com
127.0.0.1 zippy-lookup.com
127.0.0.1 www.zippy-lookup.com
127.0.0.1 zjkjw.gov.cn
127.0.0.1 www.zjkjw.gov.cn
127.0.0.1 znext.com
127.0.0.1 www.znext.com
127.0.0.1 zonealarm-download-now.com
127.0.0.1 www.zonealarm-download-now.com
127.0.0.1 www.zonealarm-stop.com
127.0.0.1 zonealarm-stop.com
127.0.0.1 zone-media.com
127.0.0.1 www.zone-media.com
127.0.0.1 zoneoffreeporn.com
127.0.0.1 zoofil.com
127.0.0.1 zoomegasite.com
127.0.0.1 www.zpwebsource.com
127.0.0.1 zpwebsource.com
127.0.0.1 www.zqavanjpn.biz
127.0.0.1 zqavanjpn.biz
127.0.0.1 z-quest.com
127.0.0.1 www.z-quest.com
127.0.0.1 www.zsupereva.it
127.0.0.1 zsupereva.it
127.0.0.1 www.zsvcompany.com
127.0.0.1 zsvcompany.com
127.0.0.1 zurrusco.com
127.0.0.1 www.zurrusco.com
127.0.0.1 zvimigdal.com
127.0.0.1 www.zxcsolution.com
127.0.0.1 zxcsolution.com
127.0.0.1 zxlinks.com
127.0.0.1 www.zxlinks.com
127.0.0.1 zyban-zocor-levitra.com
==================================
Process Privileges Scan
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1732, C:\WINDOWS\SYSTEM32\SISTRAY.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1744, C:\WINDOWS\SYSTEM32\KEYHOOK.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1772, E:\HP\HP SOFTWARE UPDATE\HPWUSCHD2.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1800, C:\WINDOWS\VSNPSTD3.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1808, C:\PROGRAM FILES\BELGACOM\BIN\SPRTCMD.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 1444, E:\ULEAD SYSTEMS\ULEAD PHOTO EXPRESS 4.0 SE\CALCHECK.EXE]
Special Privilege Enabled: SeLoadDriverPrivilege [PID = 3000, E:\HP\DIGITAL IMAGING\BIN\HPQIMZONE.EXE]
==================================
API HOOK
N/A
==================================
Hidden Process
N/A
==================================
/CODE -
part 1 du log sreng
[CODE]
2008-04-17,20:15:23
System Repair Engineer 2.5.16.900
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed
Follow item(s) have been choosed:
All Boot Items (Including Registry, Startup Folders, Services and so on)
Browser Add-ons
Runing Processes (Including process model information)
File Associations
Winsock Provider
Autorun.Inf
HOSTS File
Process Privileges Scan
Boot Items
Registry
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher]
<MsnMsgr><"C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background> [(Verified)Microsoft Corporation]
<SpybotSD TeaTimer><C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe> [(Verified)Safer Networking Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Corporation]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Windows Publisher]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Windows Publisher]
<SiSUSBRG><C:\WINDOWS\SiSUSBrg.exe> [Silicon Integrated Systems Corp.]
<SiS Tray><C:\WINDOWS\system32\sistray.EXE> [Silicon Integrated Systems Corporation]
<SiS Windows KeyHook><C:\WINDOWS\system32\keyhook.exe> [Silicon Integrated Systems Corporation]
<NeroFilterCheck><C:\WINDOWS\system32\NeroCheck.exe> [Ahead Software Gmbh]
<HP Software Update><E:\HP\HP Software Update\HPWuSchd2.exe> [Hewlett-Packard Development Company, L.P.]
<PinnacleDriverCheck><C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg> []
<snpstd3><C:\WINDOWS\vsnpstd3.exe> []
<Belgacom><"C:\Program Files\Belgacom\bin\sprtcmd.exe" /P Belgacom> [SupportSoft, Inc.]
<DAEMON Tools><"C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033> [(Verified)DAEMON Tools Code Signing Services]
<Adobe Reader Speed Launcher><"E:\Adobe\Reader 8.0\Reader\Reader_sl.exe"> [(Verified)"Adobe Systems, Incorporated"]
<AVP><"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"> [(Verified)Kaspersky Lab]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Publisher]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll> [(Verified)Kaspersky Lab]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
<WinlogonNotify: klogon><C:\WINDOWS\system32\klogon.dll> [(Verified)Kaspersky Lab]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
<IE7 Uninstall Stub><C:\WINDOWS\system32\ieudinit.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
<Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
<Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
<Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
<NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
<Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
<Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
<Carnet d'adresses 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
<N/A><C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install> [Microsoft Corporation]
==================================
Startup Folders
[Contrôleur de calendrier Ulead]
<C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Contrôleur de calendrier Ulead.lnk --> E:\ULEADS~1\ULEADP~1.0SE\CalCheck.exe [Ulead Systems, Inc.]><N>
[Démarrage rapide de HP Photosmart Premier]
<C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Démarrage rapide de HP Photosmart Premier.lnk --> E:\HP\DIGITA~1\bin\hpqthb08.exe [Hewlett-Packard Development Company, L.P.]><N>
[HP Digital Imaging Monitor]
<C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\HP Digital Imaging Monitor.lnk --> E:\HP\DIGITA~1\bin\hpqtra08.exe [Hewlett-Packard Development Company, L.P.]><N>
[InterVideo WinCinema Manager.lnk.disa]
<C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\InterVideo WinCinema Manager.lnk.disabled --> E:\INTERV~1\Common\Bin\WINCIN~1.EXE []><N>
[Microsoft Office]
<C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Microsoft Office.lnk --> E:\MICROS~1\Office10\OSA.EXE [Microsoft Corporation]><N>
[Outil de mise à jour Google.lnk.disa]
<C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Outil de mise à jour Google.lnk.disabled --> C:\PROGRA~1\Google\GOOGLE~1\GOOGLE~1.EXE [Google]><N>
[WinZip Quick Pick]
<C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\WinZip Quick Pick.lnk --> E:\WinZip\WZQKPICK.EXE [WinZip Computing, S.L.]><N>
==================================
Services
[Kaspersky Internet Security 7.0 / AVP][Running/Auto Start]
<"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" -r><Kaspersky Lab>
/ Bonjour Service[Running/Auto Start]
<"C:\Program Files\Bonjour\mDNSResponder.exe"><Apple Computer, Inc.>
[Pml Driver HPZ12 / Pml Driver HPZ12][Running/Auto Start]
<C:\WINDOWS\system32\HPZipm12.exe><HP>
[PC Tools Auxiliary Service / sdAuxService][Stopped/Manual Start]
<C:\Program Files\Spyware Doctor\pctsAuxs.exe><PC Tools>
[PC Tools Security Service / sdCoreService][Stopped/Manual Start]
<C:\Program Files\Spyware Doctor\pctsSvc.exe><PC Tools>
[Windows Live Setup Service / WLSetupSvc][Stopped/Manual Start]
<"C:\Program Files\Windows Live\installer\WLSetupSvc.exe"><Microsoft Corporation>
==================================
Drivers
[ASAPIW2k / ASAPIW2k][Running/Manual Start]
<system32\drivers\ASAPIW2k.sys><Pinnacle Systems GmbH>
[Bluetooth Audio Service / BlueletAudio][Running/Manual Start]
<system32\DRIVERS\blueletaudio.sys><IVT Corporation.>
[Bluetooth SCO Audio Service / BlueletSCOAudio][Running/Manual Start]
<system32\DRIVERS\BlueletSCOAudio.sys><IVT Corporation.>
[BootScreen / BootScreen][Running/Boot Start]
<\SystemRoot\\SystemRoot\System32\drivers\vidstub.sys><N/A>
[Bluetooth PAN Network Adapter / BT][Stopped/Manual Start]
<system32\DRIVERS\btnetdrv.sys><IVT Corporation.>
[Bluetooth USB For Bluetooth Service / Btcsrusb][Stopped/Manual Start]
<System32\Drivers\btcusb.sys><IVT Corporation.>
[Bluetooth HID Enumerator / BTHidEnum][Running/Boot Start]
<\SystemRoot\System32\Drivers\vbtenum.sys><IVT Corporation.>
[Bluetooth HID Manager Service / BTHidMgr][Running/Boot Start]
<\SystemRoot\System32\Drivers\BTHidMgr.sys><IVT Corporation.>
[catchme / catchme][Stopped/Manual Start]
<\??\C:\DOCUME~1\EFF~1.EFF\LOCALS~1\Temp\catchme.sys><N/A>
[C-Media WDM Audio Interface / cmuda][Running/Manual Start]
<system32\drivers\cmuda.sys><C-Media Inc>
[Pilote NT de carte VIA PCI 10/100Mo Fast Ethernet / FETNDIS][Stopped/Manual Start]
<system32\DRIVERS\fetnd5.sys><VIA Technologies, Inc.>
[IEEE-1284.4 Driver HPZid412 / HPZid412][Running/Manual Start]
<system32\DRIVERS\HPZid412.sys><HP>
[Print Class Driver for IEEE-1284.4 HPZipr12 / HPZipr12][Running/Manual Start]
<system32\DRIVERS\HPZipr12.sys><HP>
[USB to IEEE-1284.4 Translation Driver HPZius12 / HPZius12][Running/Manual Start]
<system32\DRIVERS\HPZius12.sys><HP>
[File Security Driver / IKFileSec][Stopped/Manual Start]
<\SystemRoot\system32\drivers\ikfilesec.sys><PCTools Research Pty Ltd.>
[System Filter Driver / IKSysFlt][Stopped/Manual Start]
<system32\drivers\iksysflt.sys><PCTools Research Pty Ltd.>
[System Security Driver / IKSysSec][Stopped/Manual Start]
<system32\drivers\iksyssec.sys><PCTools Research Pty Ltd.>
[kl1 / kl1][Running/Boot Start]
<\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
[klif / klif][Running/System Start]
<\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
[Kaspersky Anti-Virus NDIS Filter / klim5][Running/Manual Start]
<system32\DRIVERS\klim5.sys><Kaspersky Lab>
[Pilote de liaison parallèle directe / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[PxHelp20 / PxHelp20][Running/Boot Start]
<\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions>
[Virtual Serial port driver / VComm][Running/Manual Start]
<system32\DRIVERS\VComm.sys><IVT Corporation.>
[Bluetooth VComm Manager Service / VcommMgr][Running/Manual Start]
<System32\Drivers\VcommMgr.sys><IVT Corporation.>
[Vcs support / Vcs][Running/Auto Start]
<\??\C:\WINDOWS\system32\Drivers\Vcs.sys><N/A>
[Codec Teletext standard / WSTCODEC][Stopped/Manual Start]
<system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
==================================
Browser Add-ons
[Aide pour le lien d'Adobe PDF Reader]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Spybot-S&D IE Protection]
{53707962-6F74-2D53-2644-206D7942484F} <C:\PROGRA~1\SPYBOT~1\SDHelper.dll, Safer Networking Limited>
[Programme d'aide de l'Assistant de connexion Windows Live]
{9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[Google Toolbar Notifier BHO]
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll, Google Inc.>
[Flash Saver]
{09EA1F80-F40A-11D1-B792-444553540001} <, N/A>
[Statistiques d’Anti-Virus Internet]
{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll, Kaspersky Lab>
[]
{85d1f590-48f4-11d9-9669-0800200c9a66} <%windir%\bdoscandel.exe, N/A>
[Spybot-S&D IE Protection]
{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} <C:\PROGRA~1\SPYBOT~1\SDHelper.dll, Safer Networking Limited>
[]
{e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, N/A>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[Microsoft Office Template and Media Control]
{02BCC737-B171-4746-94C9-0D8A0B2C0089} <C:\WINDOWS\Downloaded Program Files\IEAWSDC.DLL, >
[Office Genuine Advantage Validation Tool]
{05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} <C:\WINDOWS\system32\OGACheckControl.DLL, >
[BDSCANONLINE Control]
{5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} <C:\WINDOWS\DOWNLO~1\CONFLICT.1\oscan8.ocx, SOFTWIN>
[SupportSoft SmartIssue]
{01010E00-5E80-11D8-9E86-0007E96C65AE} <C:\Program Files\Fichiers communs\Supportsoft\bin\tgctlsi.dll, SupportSoft, Inc.>
[Microsoft Office Template and Media Control]
{02BCC737-B171-4746-94C9-0D8A0B2C0089} <C:\WINDOWS\Downloaded Program Files\IEAWSDC.DLL, >
[Office Genuine Advantage Validation Tool]
{05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} <C:\WINDOWS\system32\OGACheckControl.DLL, >
[Aide pour le lien d'Adobe PDF Reader]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Web Browser Applet Control]
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\WINDOWS\system32\msjava.dll, Microsoft Corporation>
[InformationCardSigninHelper Class]
{19916E01-B44E-4E31-94A4-4696DF46157B} <C:\WINDOWS\system32\icardie.dll, Microsoft Corporation>
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[XSL Template]
{2933BF94-7B36-11D2-B20E-00C04F983E60} <%SystemRoot%\system32\msxml3.dll, N/A>
[HtmlDlgSafeHelper Class]
{3050F819-98B5-11CF-BB82-00AA00BDCE0B} <C:\WINDOWS\system32\mshtmled.dll, Microsoft Corporation>
[Tabular Data Control]
{333C7BC4-460F-11D0-BC04-0080C7055A83} <C:\WINDOWS\system32\tdc.ocx, Microsoft Corporation>
[]
{4F07F79F-087F-42CF-8B36-7A88D06088E9} <C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGSC8~1.DLL, Microsoft Corporation>
[Spybot-S&D IE Protection]
{53707962-6F74-2D53-2644-206D7942484F} <C:\PROGRA~1\SPYBOT~1\SDHelper.dll, Safer Networking Limited>
[BDSCANONLINE Control]
{5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} <C:\WINDOWS\DOWNLO~1\CONFLICT.1\oscan8.ocx, SOFTWIN>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Active Desktop Mover]
{72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
[Microsoft Web Browser]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\ieframe.dll, Microsoft Corporation>
[XML DOM Document 4.0]
{88D969C0-F192-11D4-A65F-0040963251E5} <%SystemRoot%\system32\msxml4.dll, N/A>
[Free Threaded XML DOM Document 4.0]
{88D969C1-F192-11D4-A65F-0040963251E5} <%SystemRoot%\system32\msxml4.dll, N/A>
[XML Schema Cache 4.0]
{88D969C2-F192-11D4-A65F-0040963251E5} <%SystemRoot%\system32\msxml4.dll, N/A>
[XSL Template 4.0]
{88D969C3-F192-11D4-A65F-0040963251E5} <%SystemRoot%\system32\msxml4.dll, N/A>
[XML Data Source Object 4.0]
{88D969C4-F192-11D4-A65F-0040963251E5} <%SystemRoot%\system32\msxml4.dll, N/A>
[XML HTTP 4.0]
{88D969C5-F192-11D4-A65F-0040963251E5} <%SystemRoot%\system32\msxml4.dll, N/A>
[Programme d'aide de l'Assistant de connexion Windows Live]
{9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[Google Toolbar Notifier BHO]
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} <C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll, Google Inc.>
[RDS.DataSpace]
{BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Fichiers communs\System\msadc\msadco.dll, Microsoft Corporation>
[Msxml]
{CFC399AF-D876-11D0-9C10-00C04FC99C8E} <%SystemRoot%\system32\msxml3.dll, N/A>
[Contrôle de l'Assistant de connexion Windows Live]
{D2517915-48CE-4286-970F-921E881B8C5C} <C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx, Adobe Systems, Inc.>
[]
{E1771B7F-98BE-407F-BA67-AA16ADA5D0C5} <C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGSC8~1.DLL, Microsoft Corporation>
[XML HTTP Request]
{ED8C108E-4349-11D2-91A4-00C04F7969E8} <%SystemRoot%\system32\msxml3.dll, N/A>
[]
{F06608C7-1874-4EEA-B3B2-DF99EBB144B8} <C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGSC8~1.DLL, Microsoft Corporation>
[Free Threaded XML DOM Document 3.0]
{F5078F33-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A>
[XML Schema Cache 3.0]
{F5078F34-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A>
[XSL Template 3.0]
{F5078F36-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A>
[XML Data Source Object 3.0]
{F5078F39-C551-11D3-89B9-0000F81FE221} <%SystemRoot%\system32\msxml3.dll, N/A>
[Free Threaded XML DOM Document]
{F6D90F12-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A>
[XML Data Source Object ]
{F6D90F14-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A>
[XML HTTP]
{F6D90F16-9C73-11D3-B32E-00C04F990BB4} <%SystemRoot%\system32\msxml3.dll, N/A>
[Ajouter à Kaspersky Anti-Bannière]
<C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm, N/A>
==================================
Running Processes
[PID: 800][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 908][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 932][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\klogon.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 976][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\AppPatch\AcAdProc.dll] [Microsoft Corporation, 5.1.2600.3008 (xpsp.061004-0027)]
[PID: 988][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1156][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1244][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1344][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.0.6000.381 (winmain(wmbla).070730-1740)]
[PID: 1380][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[c:\windows\system32\wudfsvc.dll] [Microsoft Corporation, 6.0.5716.32 (winmain(wmbla).060928-1756)]
[c:\windows\system32\WUDFPlatform.dll] [Microsoft Corporation, 6.0.5716.32 (winmain(wmbla).060928-1756)]
[PID: 1552][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1692][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[PID: 1908][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\hpz3l4pi.dll] [Hewlett-Packard Company, 60.061.243.00]
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\hpzpp4pi.dll] [Hewlett-Packard Corporation, 60.061.243.00]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[PID: 1928][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\ieframe.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\WINDOWS\system32\WPDShServiceObj.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
[C:\WINDOWS\system32\PortableDeviceTypes.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
[C:\WINDOWS\system32\PortableDeviceApi.dll] [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 8.0.0.2006102200]
[C:\PROGRA~1\SPYBOT~1\SDHelper.dll] [Safer Networking Limited, 1, 5, 0, 11]
[E:\Microsoft Office\Office10\msohev.dll] [Microsoft Corporation, 10.0.2609]
[C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 8.1.0.0]
[C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.FRA] [Adobe Systems, Inc., 8.0.0.0]
[PID: 300][C:\Program Files\Bonjour\mDNSResponder.exe] [Apple Computer, Inc., 1,0,3,1]
[PID: 352][C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe] [Google, 2.2.824.5515.beta]
[PID: 392][C:\WINDOWS\system32\HPZipm12.exe] [HP, 10, 1, 1, 5]
[C:\WINDOWS\system32\HPZidr12.dll] [HP, 10, 1, 1, 5]
[PID: 548][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\Vizmicro.dll] [Visioneer Corporation, 1, 0, 0, 61]
[PID: 1732][C:\WINDOWS\system32\sistray.EXE] [Silicon Integrated Systems Corporation, 0.0.0.3540]
[C:\WINDOWS\system32\SiSApCom.dll] [Silicon Integrated Systems Corporation, 0.0.0.3540]
[C:\WINDOWS\system32\SiSBase.dll] [Silicon Integrated Systems Corporation, 6.14.10.3540]
[C:\WINDOWS\system32\InstFunc.dll] [Silicon Integrated Systems Corporation, 6.14.10.3540]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\WINDOWS\system32\SiSParse.dll] [Silicon Integrated Systems Corporation, 6.14.10.3540]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 1744][C:\WINDOWS\system32\keyhook.exe] [Silicon Integrated Systems Corporation, 0.0.0.3540]
[C:\WINDOWS\system32\SiSApCom.dll] [Silicon Integrated Systems Corporation, 0.0.0.3540]
[C:\WINDOWS\system32\SiSBase.dll] [Silicon Integrated Systems Corporation, 6.14.10.3540]
[C:\WINDOWS\system32\InstFunc.dll] [Silicon Integrated Systems Corporation, 6.14.10.3540]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\WINDOWS\system32\SiSParse.dll] [Silicon Integrated Systems Corporation, 6.14.10.3540]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 1772][E:\HP\HP Software Update\HPWuSchd2.exe] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 1800][C:\WINDOWS\vsnpstd3.exe] [, 1, 0, 2, 2]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 1808][C:\Program Files\Belgacom\bin\sprtcmd.exe] [SupportSoft, Inc., 6,7,1257,0]
[C:\Program Files\Belgacom\bin\sprtsched.dll] [SupportSoft, Inc., 6,7,1035,0]
[C:\Program Files\Belgacom\bin\sprtevent.dll] [SupportSoft, Inc., 6,7,1257,0]
[C:\Program Files\Belgacom\bin\sprtfod.dll] [SupportSoft, Inc., 6,7,1257,0]
[C:\Program Files\Belgacom\bin\LIBEAY32.dll] [SupportSoft, Inc., 0, 9, 7, 3]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\Program Files\Belgacom\bin\sprtsync.dll] [SupportSoft, Inc., 6,7,1257,0]
[C:\Program Files\Belgacom\bin\sprtui.dll] [SupportSoft, Inc., 6,7,1154,0]
[C:\Program Files\Belgacom\bin\sprttrigger.dll] [SupportSoft, Inc., 6,7,1515,0]
[C:\Program Files\Belgacom\bin\sprtupdate.dll] [SupportSoft, Inc., 6,7,1035,0]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 1828][C:\Program Files\DAEMON Tools\daemon.exe] [DT Soft Ltd., 4.06.0.0]
[C:\Program Files\DAEMON Tools\daemon.dll] [DT Soft Ltd., 4.06.0.0]
[C:\Program Files\DAEMON Tools\PFCTOC.DLL] [Padus(R), Inc., 1, 0, 0, 12]
[C:\Program Files\DAEMON Tools\Plugins\Images\bw5mount.dll] [, 1.1.0.0]
[C:\Program Files\DAEMON Tools\Plugins\Images\ccdmount.dll] [GENERIC, 1.10.0.0]
[C:\Program Files\DAEMON Tools\Plugins\Images\cuemount.dll] [DT Soft Ltd., 1.0.0.0]
[C:\Program Files\DAEMON Tools\Plugins\Images\mdsmount.dll] [DT Soft Ltd., 1.16.0.0]
[C:\Program Files\DAEMON Tools\Plugins\Images\nrgmount.dll] [GENERIC, 1.11.0.0]
[C:\Program Files\DAEMON Tools\Plugins\Images\pdimount.dll] [GENERIC, 1.01.0.0]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 1864][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 1984][C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe] [Microsoft Corporation, 8.5.1302.1018]
[C:\Program Files\Windows Live\Messenger\MSIMG32.dll] [Patchou, 4, 50, 0, 312]
[C:\Program Files\Windows Live\Messenger\MSNCore.dll] [Microsoft Corporation, 8.5.1302.1018]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\Program Files\Windows Live\Messenger\msidcrl40.dll] [Microsoft Corporation, 4.100.313.1]
[C:\Program Files\Windows Live\Messenger\ContactsUX.dll] [Microsoft Corporation, 8.5.1302.1018]
[C:\Program Files\Messenger Plus! Live\MsgPlusLive.dll] [Patchou, 4, 50, 0, 312]
[C:\Program Files\Messenger Plus! Live\Detoured.dll] [N/A, ]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Windows Live\Messenger\msgslang.8.5.1302.1018.dll] [Microsoft Corporation, 8.5.1302.1018]
[C:\Program Files\Windows Live\Messenger\msgsres.dll] [Microsoft Corporation, 8.5.1302.1018]
[C:\Program Files\Messenger Plus! Live\MsgPlusLiveRes.dll] [Patchou, 4, 50, 0, 312]
[C:\Program Files\Windows Live\Messenger\custsat.dll] [Microsoft Corporation, 9.0.3790.2428 (srv03_sp1_qfe.050422-1043)]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[C:\Program Files\Windows Live\Messenger\lcapi.dll] [Microsoft Corporation, 1.7.256.0 (RTC Version 4.3.5371.0) built by: msn8.0(rtbldlab)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[C:\Program Files\Windows Live\Messenger\lcres.dll] [Microsoft Corp., 1.7.109.0 (RTC Version 4.3.5371.0) built by: msn8.0(rtbldlab)]
[C:\Program Files\Windows Live\Messenger\RTMPLTFM.dll] [Microsoft Corporation, 3.0.5774.0 built by: media_msn80]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Windows Live\Messenger\MSGSWCAM.dll] [Microsoft Corporation, 8.5.1302.1018]
[C:\WINDOWS\system32\sirenacm.dll] [Microsoft Corporation, 8.5.1302.1018]
[C:\WINDOWS\vsnpstd3.dll] [ , 1, 0, 1, 6]
[PID: 292][C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe] [Safer Networking Limited, 1, 5, 2, 16]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[C:\Program Files\Spybot - Search & Destroy\advcheck.dll] [Safer Networking Limited, 1, 5, 4, 5]
[PID: 1444][E:\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe] [Ulead Systems, Inc., 4, 0, 0, 0]
[E:\Ulead Systems\Ulead Photo Express 4.0 SE\u32Cfg.dll] [Ulead Systems, Inc., 4, 0, 0, 0]
[E:\Ulead Systems\Ulead Photo Express 4.0 SE\u32sn.dll] [Ulead Systems, Inc., 7.0.0.0]
[E:\Ulead Systems\Ulead Photo Express 4.0 SE\u32Prod.dll] [Ulead Systems, Inc., 4.0]
[E:\Ulead Systems\Ulead Photo Express 4.0 SE\u32Comm.dll] [Ulead Systems, Inc., 7.0.0.0]
[E:\Ulead Systems\Ulead Photo Express 4.0 SE\CalRemi.dll] [Ulead Systems, Inc., 4, 0, 0, 0]
[E:\Ulead Systems\Ulead Photo Express 4.0 SE\PEBase.dll] [Ulead Systems, Inc., 4, 0, 0, 0]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[E:\Ulead Systems\Ulead Photo Express 4.0 SE\ipeConst.dll] [Ulead Systems, Inc., 4, 0, 0, 0]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 2368][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2624][E:\HP\Digital Imaging\bin\hpqtra08.exe] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[E:\HP\Digital Imaging\bin\hpqcxm08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpquio08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpqtra08.rsc] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpqtao08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\Unload\hpnkhTA.dll] [Hewlett-Packard, 7.0.0.229]
[C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\WINDOWS\system32\ATL71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MFC71FRA.DLL] [Microsoft Corporation, 7.10.3077.0]
[E:\HP\Digital Imaging\bin\hpqrif08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpqmif08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpotradd.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\Bin\hphtra09.dll] [Hewlett-Packard, 60,0,114,000]
[E:\HP\Digital Imaging\bin\hpocxi08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpqcob08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpodio08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpodvd09.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpoddcomm09.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[C:\WINDOWS\system32\hpzipr12.dll] [HP, 10, 1, 1, 5]
[E:\HP\Digital Imaging\bin\hpqusg.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\WINDOWS\system32\hpzidr12.dll] [HP, 10, 1, 1, 5]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[PID: 2828][E:\WinZip\WZQKPICK.EXE] [WinZip Computing, S.L., 1.0 (32-bit)]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[PID: 3000][E:\HP\Digital Imaging\bin\hpqimzone.exe] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)]
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll] [Microsoft Corporation, 1.1.4322.573]
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll] [Microsoft Corporation, 1.1.4322.573]
[c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll] [Microsoft Corporation, 1.1.4322.573]
[c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_2ea82469\mscorlib.dll] [N/A, ]
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll] [Microsoft Corporation, 1.1.4322.573]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[c:\windows\assembly\gac\hpqiface\4.0.0.0__a53cf5803f4c3827\hpqiface.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll] [Microsoft Corporation, 1.1.4322.573]
[c:\windows\assembly\nativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_cb983c23\system.windows.forms.dll] [N/A, ]
[c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll] [Microsoft Corporation, 1.1.4322.573]
[c:\windows\assembly\nativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_cd5a871d\system.drawing.dll] [N/A, ]
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL] [Microsoft Corporation, 1.1.4322.573]
[c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll] [Microsoft Corporation, 1.1.4322.573]
[c:\windows\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_8e3bd234\system.dll] [N/A, ]
[c:\windows\assembly\gac\hpqcc2\3.0.0.0__a53cf5803f4c3827\hpqcc2.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqutils\4.0.0.0__a53cf5803f4c3827\hpqutils.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqfmrsc\4.0.0.0__a53cf5803f4c3827\hpqfmrsc.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqtray\4.0.0.0__a53cf5803f4c3827\hpqtray.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqovskn\3.0.0.0__a53cf5803f4c3827\hpqovskn.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqthumb\3.0.0.0__a53cf5803f4c3827\hpqthumb.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqimvlt\3.0.0.0__a53cf5803f4c3827\hpqimvlt.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqimgrc\4.0.0.0__a53cf5803f4c3827\hpqimgrc.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[e:\hp\digital imaging\bin\fr\hpqimzone.resources.dll] [ , 065.000.099.000]
[c:\windows\assembly\gac\hpqntrop\4.0.0.0__a53cf5803f4c3827\hpqntrop.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\interop.hpqcxm08\3.0.0.0__a53cf5803f4c3827\interop.hpqcxm08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpqcxm08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll] [Microsoft Corporation, 1.1.4322.573]
[c:\windows\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_4373231d\system.xml.dll] [N/A, ]
[c:\windows\assembly\gac\lead\13.0.0.113__9cf889f53ea9b907\lead.dll] [LEAD Technologies, Inc., 13.0.0.113]
[c:\windows\assembly\gac\lead.wrapper\13.0.0.113__9cf889f53ea9b907\lead.wrapper.dll] [LEAD Technologies, Inc., 13.0.0.113]
[E:\HP\Digital Imaging\bin\ltkrn13n.dll] [LEAD Technologies, Inc., 13.0.0.098]
[c:\windows\assembly\gac\hpqtray.resources\4.0.0.0_fr_a53cf5803f4c3827\hpqtray.resources.dll] [ , 065.000.099.000]
[c:\windows\assembly\gac\hpqfmrsc.resources\4.0.0.0_fr_a53cf5803f4c3827\hpqfmrsc.resources.dll] [ , 065.000.099.000]
[c:\windows\assembly\gac\lead.windows.forms\13.0.0.113__9cf889f53ea9b907\lead.windows.forms.dll] [LEAD Technologies, Inc., 13.0.0.113]
[c:\windows\assembly\gac\lead.drawing\13.0.0.113__9cf889f53ea9b907\lead.drawing.dll] [LEAD Technologies, Inc., 13.0.0.113]
[c:\windows\assembly\gac\interop.hpqimgr\4.0.0.0__a53cf5803f4c3827\interop.hpqimgr.dll] [ , 4.0.0.0]
[E:\HP\Digital Imaging\Bin\hpqimgr.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\ATL71.DLL] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0]
[C:\WINDOWS\system32\MFC71FRA.DLL] [Microsoft Corporation, 7.10.3077.0]
[c:\windows\assembly\gac\hpqasset\4.0.0.0__a53cf5803f4c3827\hpqasset.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[e:\hp\digital imaging\bin\hpqmirsc.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[e:\hp\digital imaging\bin\fr\hpqmirsc.resources.dll] [ , 065.000.099.000]
[c:\windows\assembly\gac\hpqedit\3.0.0.0__a53cf5803f4c3827\hpqedit.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqvideo\3.0.0.0__a53cf5803f4c3827\hpqvideo.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\lead.windows.forms.drawingcontainer\13.0.0.113__9cf889f53ea9b907\lead.windows.forms.drawingcontainer.dll] [LEAD Technologies, Inc., 13.0.0.113]
[c:\windows\assembly\gac\hpqmdmr\4.0.0.0__a53cf5803f4c3827\hpqmdmr.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\lead.drawing.imaging.imageprocessing\13.0.0.113__9cf889f53ea9b907\lead.drawing.imaging.imageprocessing.dll] [LEAD Technologies, Inc., 13.0.0.113]
[c:\windows\assembly\gac\hpqimlib\3.0.0.0__a53cf5803f4c3827\hpqimlib.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqedit.resources\3.0.0.0_fr_a53cf5803f4c3827\hpqedit.resources.dll] [ , 065.000.099.000]
[c:\windows\assembly\gac\hpqglutl\4.0.0.0__a53cf5803f4c3827\hpqglutl.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqcc2.resources\3.0.0.0_fr_a53cf5803f4c3827\hpqcc2.resources.dll] [ , 065.000.099.000]
[e:\hp\digital imaging\bin\fr\hpqvideo.resources.dll] [ , 065.000.099.000]
[c:\windows\assembly\gac\interop.hpqvideo\4.0.0.0__a53cf5803f4c3827\interop.hpqvideo.dll] [ , 4.0.0.0]
[E:\HP\Digital Imaging\bin\hpqvdcom.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\accessibility\1.0.5000.0__b03f5f7f11d50a3a\accessibility.dll] [Microsoft Corporation, 1.1.4322.573]
[c:\windows\assembly\gac\hpqprrsc\4.0.0.0__a53cf5803f4c3827\hpqprrsc.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqprrsc.resources\4.0.0.0_fr_a53cf5803f4c3827\hpqprrsc.resources.dll] [ , 065.000.099.000]
[c:\windows\assembly\gac\interop.hprblog\3.0.0.0__a53cf5803f4c3827\interop.hprblog.dll] [ , 3.0.0.0]
[c:\windows\assembly\gac\hpqcprsc\3.0.0.0__a53cf5803f4c3827\hpqcprsc.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqcprsc.resources\3.0.0.0_fr_a53cf5803f4c3827\hpqcprsc.resources.dll] [ , 065.000.099.000]
[c:\windows\assembly\gac\hpqisrtb\4.0.0.0__a53cf5803f4c3827\hpqisrtb.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqisrtb.resources\4.0.0.0_fr_a53cf5803f4c3827\hpqisrtb.resources.dll] [ , 065.000.099.000]
[c:\windows\assembly\gac\hpqbakup\3.0.0.0__a53cf5803f4c3827\hpqbakup.dll] [Hewlett-Packard Development Company, L.P., 065.000.117.000]
[c:\windows\assembly\gac\hpqbakup.resources\3.0.0.0_fr_a53cf5803f4c3827\hpqbakup.resources.dll] [ , 065.000.099.000]
[c:\windows\assembly\gac\lead.drawing.imaging.codecs\13.0.0.113__9cf889f53ea9b907\lead.drawing.imaging.codecs.dll] [LEAD Technologies, Inc., 13.0.0.113]
[E:\HP\Digital Imaging\bin\ltfil13n.dll] [LEAD Technologies, Inc., 13.0.0.113]
[PID: 3888][E:\HP\Digital Imaging\bin\hpqSTE08.exe] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpqmfc09.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpqtap08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[E:\HP\Digital Imaging\bin\hpqcxm08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpqSTE08.rsc] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[C:\WINDOWS\system32\ieframe.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[E:\HP\Digital Imaging\bin\hpqsti08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpqcob08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpqstp08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpodio08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpocxi08.dll] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[E:\HP\Digital Imaging\bin\hpqsem08.rsc] [Hewlett-Packard Development Company, L.P., 70.0.170.000]
[C:\WINDOWS\system32\hpzipr12.dll] [HP, 10, 1, 1, 5]
[E:\HP\Digital Imaging\bin\crm\hpqcrmcm.dll] [Hewlett-Packard Company, 70.0.78.000]
[E:\HP\Digital Imaging\bin\crm\xmlparse.dll] [, 1, 0, 0, 1]
[E:\HP\Digital Imaging\bin\crm\xmltok.dll] [, 1, 0, 0, 1]
[E:\HP\Digital Imaging\bin\dbghelp.dll] [Microsoft Corporation, 6.2.0013.1 (DbgBuild.030619-2209)]
[PID: 2480][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\IEFRAME.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[C:\WINDOWS\system32\IEUI.dll] [Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130)]
[C:\WINDOWS\system32\xmllite.dll] [Microsoft Corporation, 1.00.1018.0]
[E:\Microsoft Office\Office10\msohev.dll] [Microsoft Corporation, 10.0.2609]
[C:\Program Files\Internet Explorer\ieproxy.dll] [Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130)]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 8.0.0.2006102200]
[C:\PROGRA~1\SPYBOT~1\SDHelper.dll] [Safer Networking Limited, 1, 5, 0, 11]
[C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll] [Microsoft Corporation, 4.200.520.1]
[C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll] [Google Inc., 2, 1, 1119, 1736]
[C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\msidcrl40.dll] [Microsoft Corporation, 4.200.520.1]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[C:\WINDOWS\system32\ieapfltr.dll] [Microsoft Corporation, 7.0.6000.16461]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\klscav.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prremote.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prloader.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prkernel.ppl] [Kaspersky Lab, 7.0.0.125]
[c:\program files\kaspersky lab\kaspersky internet security 7.0\params.ppl] [Kaspersky Lab, 7.0.0.125]
[c:\program files\kaspersky lab\kaspersky internet security 7.0\pxstub.ppl] [Kaspersky Lab, 7.0.0.125]
[c:\program files\kaspersky lab\kaspersky internet security 7.0\tempfile.ppl] [Kaspersky Lab, 7.0.0.125]
[c:\program files\kaspersky lab\kaspersky internet security 7.0\nfio.ppl] [Kaspersky Lab, 7.0.0.125]
[c:\program files\kaspersky lab\kaspersky internet security 7.0\fsdrvplg.ppl] [Kaspersky Lab, 7.0.0.125]
[c:\program files\kaspersky lab\kaspersky internet security 7.0\basegui.ppl] [Kaspersky Lab, 7.0.0.125]
[c:\program files\kaspersky lab\kaspersky internet security 7.0\thpimpl.ppl] [Kaspersky Lab, 7.0.0.125]
[c:\program files\kaspersky lab\kaspersky internet security 7.0\FSSync.dll] [Kaspersky Lab, 7.0.5.125]
[c:\program files\kaspersky lab\kaspersky internet security 7.0\winreg.ppl] [Kaspersky Lab, 7.0.0.125]
[C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx] [Adobe Systems, Inc., 9,0,115,0]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1516][C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe] [Microsoft Corporation, 4.200.520.1]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\msidcrl40.dll] [Microsoft Corporation, 4.200.520.1]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 3900][C:\Documents and Settings\eff.EFF-CF77F548B73\Bureau\sreng2\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900]
[C:\WINDOWS\system32\Normaliz.dll] [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll] [Microsoft Corporation, 7.00.6000.16544 (vista_gdr.070814-1500)]
[C:\Program Files\Belgacom\bin\sprthook.dll] [SupportSoft, Inc., 6,7,1658,0]
[C:\Documents and Settings\eff.EFF-CF77F548B73\Bureau\sreng2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[C:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
==================================
File Associations
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG Error. [regedit.exe "%1" %*]
.BAT OK. ["%1" %*]
.SCR Error. ["%1" %*]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock Provider
N/A
==================================
Autorun.Inf
N/A
================================== -
Contributeur sécuritéRe,
Rapidement
J'étais déjà au lit
Ne crions pas victoire trop vite
Donc, pour se débarrasser des outils utilisés à l'occasion, et devenus particulièrement caducs et obsolètes (parce que ce sont parfois des outils dangereux lorsqu'ils ne sont pas mis à jour), il y a lieu d'appliquer ceci:
Télécharge ToolsCleaner (de A.Rothstein) à l’aide de ce lien :
< http://pagesperso-orange.fr/AceRothstein/ToolsCleaner2.exe >, et enregistre-le sur le “Bureau”.
Et exécute-le.
Clique sur Recherche et laisse le scan se terminer.
Clique sur Suppression pour finaliser.
Clique sur Quitter, pour que le rapport puisse se créer.
Poste-moi le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur (C:\).
Voici son champ d'action http://pagesperso-orange.fr/AceRothstein/changelog/ChangelogTC.html
Supprime aussi cet outil dangereux ==> IceSword.
Garde bien Malwarebyte's Anti-Malware
Demain, nous nous occuperons de Norton/Symantec.
Et tu relanceras une analyse SREng.
Je n'admets pas que Kis7 ait pu laisser passer une telle infection.
Elle fait partie des toutes dernières invasions de Malwares.
Relis bien les conséquences de téléchargements de cracks (sans protection).
Bonne nuit
À demain
Dis-toi bien que sans ta patience et ta générosité, je n'y serais pas arrivé.
Touchons du bois.
Al.-
bonsoir al ,enfin terminé le boulot , il était temps , j'en avais marre aujourdhui,bref, donc j'ai executer tool cleaner deja et voici le log
-->- Recherche:
C:\Vundofix backups: trouvé !
C:\Qoobox: trouvé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\MsnFix: trouvé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\MSNFix\MSNFix.lnk: trouvé !
C:\Documents and Settings\eff.EFF-CF77F548B73\Bureau\HijackThis.lnk: trouvé !
C:\Documents and Settings\eff.EFF-CF77F548B73\Bureau\BtFix.zip: trouvé !
C:\Documents and Settings\eff.EFF-CF77F548B73\Bureau\vundoFix.exe: trouvé !
C:\Documents and Settings\eff.EFF-CF77F548B73\Bureau\HJTInstall.exe: trouvé !
C:\Documents and Settings\eff.EFF-CF77F548B73\Bureau\Btfix: trouvé !
C:\Documents and Settings\eff.EFF-CF77F548B73\Bureau\SmitFraudfix: trouvé !
C:\Documents and Settings\eff.EFF-CF77F548B73\Bureau\BTFix\Btfix: trouvé !
C:\Documents and Settings\eff.EFF-CF77F548B73\Recent\MSNFix.lnk: trouvé !
C:\Documents and Settings\eff.EFF-CF77F548B73\Recent\HijackThis.lnk: trouvé !
C:\Program Files\MsnFix: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\QooBox\Quarantine\D\mes programmes\SmitFraudfix: trouvé !
C:\QooBox\Quarantine\D\mes programmes\SmitfraudFix\SmitFraudfix: trouvé !
C:\QooBox\Quarantine\D\mes programmes\SmitfraudFix\SmitfraudFix\SmitFraudfix: trouvé !
C:\QooBox\Quarantine\R\prog et crack\SmitFraudfix: trouvé !
C:\QooBox\Quarantine\R\prog et crack\SmitfraudFix\SmitFraudfix: trouvé !
---------------------------------
-->- Suppression:
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\MSNFix\MSNFix.lnk: supprimé !
C:\Documents and Settings\eff.EFF-CF77F548B73\Bureau\HijackThis.lnk: supprimé !
C:\Documents and Settings\eff.EFF-CF77F548B73\Bureau\BtFix.zip: supprimé !
C:\Documents and Settings\eff.EFF-CF77F548B73\Bureau\vundoFix.exe: supprimé !
C:\Documents and Settings\eff.EFF-CF77F548B73\Bureau\HJTInstall.exe: supprimé !
C:\Documents and Settings\eff.EFF-CF77F548B73\Recent\MSNFix.lnk: supprimé !
C:\Documents and Settings\eff.EFF-CF77F548B73\Recent\HijackThis.lnk: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\Vundofix backups: supprimé !
C:\Qoobox: supprimé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\MsnFix: supprimé !
C:\Documents and Settings\eff.EFF-CF77F548B73\Bureau\Btfix: supprimé !
C:\Documents and Settings\eff.EFF-CF77F548B73\Bureau\SmitFraudfix: supprimé !
C:\Program Files\MsnFix: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !
en ce qui concerne kis7 , apparemment , soit il a faillit a sa tache soit ces tites bebetes sont deja presentes depuis un certain temps et se sont decidées y a peu de temps, je signale qu'avant kis7 j'utilisais fsecure internet security , et j'ai utilisé quelques jours avast entre la fin de license fsecure et l'achat de kis7 , donc est ce vraiment kis7 qui a faillit a sa tache ?????, dans le doute je dirai rien mais j'ai plutot une autre idée que je tiendrai pour moi ;)
bon je lance un scan sreng et je poste le log
a propos al, que serais la patience sans la bonne volonté des personnes qui se dévouent a d'autres sans rien demander , c'est moi qui te remercie al
-
-
log ice sword
Started Service:
Service Name:ALG Display Name:Service de la passerelle de la couche Application
Service Name:AudioSrv Display Name:Audio Windows
Service Name:AVP Display Name:Kaspersky Internet Security 7.0
Service Name:BITS Display Name:Service de transfert intelligent en arrière-plan
Service Name:Bonjour Service Display Name:##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##
Service Name:CryptSvc Display Name:Services de cryptographie
Service Name:DcomLaunch Display Name:Lanceur de processus serveur DCOM
Service Name:Dhcp Display Name:Client DHCP
Service Name:dmserver Display Name:Gestionnaire de disque logique
Service Name:Dnscache Display Name:Client DNS
Service Name:ERSvc Display Name:Error Reporting Service
Service Name:Eventlog Display Name:Journal des événements
Service Name:EventSystem Display Name:Système d'événements de COM+
Service Name:gusvc Display Name:Google Updater Service
Service Name:helpsvc Display Name:Aide et support
Service Name:HidServ Display Name:HID Input Service
Service Name:LmHosts Display Name:Assistance TCP/IP NetBIOS
Service Name:Netman Display Name:Connexions réseau
Service Name:Nla Display Name:NLA (Network Location Awareness)
Service Name:PlugPlay Display Name:Plug-and-Play
Service Name:Pml Driver HPZ12 Display Name:Pml Driver HPZ12
Service Name:ProtectedStorage Display Name:Emplacement protégé
Service Name:RasMan Display Name:Gestionnaire de connexions d'accès distant
Service Name:RemoteRegistry Display Name:Accès à distance au Registre
Service Name:RpcSs Display Name:Appel de procédure distante (RPC)
Service Name:SamSs Display Name:Gestionnaire de comptes de sécurité
Service Name:Schedule Display Name:Planificateur de tâches
Service Name:seclogon Display Name:Connexion secondaire
Service Name:SENS Display Name:Notification d'événement système
Service Name:SharedAccess Display Name:Pare-feu Windows / Partage de connexion Internet
Service Name:ShellHWDetection Display Name:Détection matériel noyau
Service Name:Spooler Display Name:Spouleur d'impression
Service Name:stisvc Display Name:Acquisition d'image Windows (WIA)
Service Name:TapiSrv Display Name:Téléphonie
Service Name:Themes Display Name:Thèmes
Service Name:TrkWks Display Name:Client de suivi de lien distribué
Service Name:W32Time Display Name:Horloge Windows
Service Name:WebClient Display Name:WebClient
Service Name:winmgmt Display Name:Infrastructure de gestion Windows
Service Name:wscsvc Display Name:Centre de sécurité
Service Name:wuauserv Display Name:Mises à jour automatiques
Service Name:WudfSvc Display Name:Windows Driver Foundation - User-mode Driver Framework
Service Name:WZCSVC Display Name:Configuration automatique sans fil
-
re al , je me trompe peut etre mais apres redemarrage j'ai refait un hijackt et en lisant le log, je me pose la question," al n'y serait t'on pas arrivé là ????"
je colle le log
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:34:50, on 17/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\sistray.EXE
C:\WINDOWS\system32\keyhook.exe
E:\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\vsnpstd3.exe
C:\Program Files\Belgacom\bin\sprtcmd.exe
C:\Program Files\DAEMON Tools\daemon.exe
E:\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
E:\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
E:\HP\Digital Imaging\bin\hpqtra08.exe
E:\WinZip\WZQKPICK.EXE
E:\HP\Digital Imaging\bin\hpqimzone.exe
E:\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] E:\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [Belgacom] "C:\Program Files\Belgacom\bin\sprtcmd.exe" /P Belgacom
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Contrôleur de calendrier Ulead.lnk = E:\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = E:\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = E:\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk.disabled
O4 - Global Startup: Microsoft Office.lnk = E:\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk.disabled
O4 - Global Startup: WinZip Quick Pick.lnk = E:\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O9 - Extra button: Flash Saver - {09EA1F80-F40A-11D1-B792-444553540001} - E:\FLASHS~1.0\save.htm
O9 - Extra 'Tools' menuitem: Flash Saver - {09EA1F80-F40A-11D1-B792-444553540001} - E:\FLASHS~1.0\save.htm
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} -
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} -
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} -
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} -
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} -
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} -
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} -
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} -
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} -
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} -
O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} -
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
-
je redemarre et je re al , a de suite
-
Contributeur sécuritéBonsoir eff,
A)- Contredis-moi si je me trompe.
-Je vois que tu utilises encore O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} - Symantec
-Je t'ai donné le lien TotalUninstal (post # 45) comme logiciel de télechargement convenable.
Or je vois que tu utilises encore O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} - akamai pour télécharger un logiciel inutile SoloSentry
-Je vois que tu joues durant la désinfection O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - jeu MSN
B)- Télécharge IceSword sur ton Bureau (durée ± 5 minutes), du lien suivant :
http://202.38.64.10/%7Ejfpan/download/IceSword120_en.zip
Choisir la version 1.22 http://img293.imageshack.us/img293/7438/screenshot343yg2.png
1) Double-clique sur le fichier du bureau IceSword122_en.zip pour obtenir cette page http://img503.imageshack.us/img503/7100/screenshot322an1.png ; puis, comme sur l'image, au menu "Fichier" choisir "Extraire tout". On obtient une nouvelle page IceSword122_en http://img260.imageshack.us/img260/7798/screenshot323yv2.png ; là, comme sur l'image, clic-droit sur le dossier dézippé IceSword120_en , puis "Explorer" pour obtenir le contenu sur une nouvelle page .
2) Clic-droit sur l'icône "épée" > Créer un raccourci IceSword.exe et le déplacer sur le bureau >
puis double-clic dessus pour lancer l'outil. Clic ensuite sur [Exécuter]
(Autoriser et accepter les alertes successives des protections PC installées).
3) Agrandir la fenêtre de l'outil en plein écran.
4) Regarde bien cette capture écran http://img223.imageshack.us/img223/4756/screenshot324nb2.png .
Dans le menu de gauche, vers le haut, appuie sur la touche [Functions] pour les développer; tu peux t'aider du curseur vertical pour faciliter la lecture de son total contenu.
- Note: Tu peux agrandir le volet de gauche (en déplaçant la ligne de séparation verticale), afin de mieux visualiser son contenu (juste le nécessaire; sinon ce sera au détriment de la lecture de la plage de droite).
5) Choisis le bouton radio [Win32 Services], laisse afficher tous les services dans la plage de droite.
Ensuite retrouve cette saleté de ddcDsRJc que tu supprimes.
Si tu vois d'autres services de couleur rouge, rapporte-les moi.
6) Au bas de ce menu gauche, cliquer sur le bouton radio [File]
- Il faut naviguer (clic sur les + devant répertoires ad hoc) dans l'arborescence (volet de gauche) jusquà atteindre le dossier contenant les fichiers infectés à supprimer.
•- Pour D:\4b51a3a458aa15a6e0aef4a7\i386\compdata\nv_agp.htm
(Clic sur + devant D:\, puis + devant 4b51a3a458aa15a6e0aef4a7\, puis + devant i386\, puis clic sur le dossier compdata\ ( ATTENTION : je n'ai pas dit de cliquer sur le + devant compdata\ !!) pour l'ouvrir
==> tu vois ainsi tous ses fichiers dans la plage de droite ==> retrouve les fichiers nv_agp.htm et krnlchk.htm (vérification) ==> faire un clic-droit dessus et choisir "Delete".
•- Fais la même procédure en suivant le chemin de ce fichier ( sois méticuleux par prudence ) :
R:\prog et crack\CEDP-Stealer-Setup.exe <-- le fichier à supprimer.
7) Termine par celles-ci (en gras):
-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D35DD6F-E933-4AC7-9F04-4EC47E75B4AC}
-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AD2D53E7-8491-4497-80B9-31A1F2B64ABB}
-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ddcDsRJc
Comme ceci: au bas du menu des fonctions, appuie sur la touche [Registry].
Tu vois s'afficher l'arborescence de la base de registres dans laquelle il faut naviguer, comme ceci:
1°- Pour la première ligne ( et la seconde ligne) : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D35DD6F-E933-4AC7-9F04-4EC47E75B4AC}
- en cliquant sur le signe + devant HKEY_LOCAL_MACHINE,
puis descendre jusque SOFTWARE > et cliquer sur +,
puis descendre jusque Microsoft > et cliquer sur +,
puis descendre jusque Windows > +
puis CurrentVersion > +
puis Explorer > +
puis Browser Helper Objects > +
puis cherche la sous-clé {8D35DD6F-E933-4AC7-9F04-4EC47E75B4AC} ==> clic-droit > supprimer
puis cherche la sous-clé {AD2D53E7-8491-4497-80B9-31A1F2B64ABB} ==> clic-droit > supprimer
2°- Pour celle-ci :
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ddcDsRJc
C’est la même chose :
- en cliquant sur le signe + devant HKEY_LOCAL_MACHINE,
puis descendre jusque SOFTWARE > et cliquer sur +,
puis descendre jusque Microsoft > et cliquer sur +,
puis descendre jusque Windows NT > +
puis descendre jusque Winlogon > +
puis descendre jusque Notify > +
puis cherche la sous-clé ddcDsRJc si elle existe ==> supprime.
ATTENTION : Si ce n'est pas le cas, ouvre " Notify " et regarde dans la plage de droite si tu trouves ddcDsRJc sous "Nom" (en valeur) ==> idem: clic-droit dessus et supprime). ==> rapporte-moi cette étape, svp.
Poste le rapport obtenu s’il y en a un. (je n’en sais rien).
7)- Quitter IceSword
8)- Poste aussi un nouveau rapport HijackThis après avoir fixé ces lignes :
O2 - BHO: (no name) - {8D35DD6F-E933-4AC7-9F04-4EC47E75B4AC} - (no file)
O2 - BHO: (no name) - {AD2D53E7-8491-4497-80B9-31A1F2B64ABB} - (no file)
O4 - HKLM\..\Run: [SoloSentry] C:\SRNMIC~1\SOLOSENT.EXE
O4 - HKLM\..\Run: [SoloSchedule] C:\SRNMIC~1\SOLOCFG.EXE
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - <https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} -
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} -
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} -
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - <http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab>
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} -
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} -
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} -
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737}
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072}
O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1}
O20 - Winlogon Notify: ddcDsRJc - C:\WINDOWS\
Bonne soirée
Merci
Al.
-
bonsoir al, je vais peut etre te contredire en effet
symantec je pense que c'est norton,or je n'ai jamais installé et je n'emploie jamais norton sauf parfois lors d'un scan en ligne, je n'emploie pas non plus de logiciel de telechargement specifique lorsque je telecharge un programme comme solo entry que j'ai testé tout a l'heure ,et en ce qui concerne les jeux msn ,desolé déja en temps normal c'est tres peu pour moi cela donc en période de desinfection la question ne se pose meme pas.
retrouve les fichiers nv_agp.htm et krnlchk.htm (vérification) ==> faire un clic-droit dessus et choisir "Delete".
krnlchk.htm
est bel et bien mort et nv_agp.htm je l'ai deja fait,et j'ai scanné on line avec bit et kasper le dique D: et en particulier le dossier D:\4b51a3a458aa15a6e0aef4a7 et resultat BitDefender Online Scanner - Rapport virus en temps réelBitDefender Online
Scanner - Rapport virus en temps réel
Généré à: Wed, Apr 16, 2008 - 21:49:20
Info d'analyse
Fichiers scannés29830
Infectés Fichiers0
Virus Détectés
Aucun virus trouvé.
Ce sommaire du processus d'analyse sera utilisé par les laboratoires
Antivirus BitDefender pour créer des statistiques agréguées sur l'activité
des virus dans le monde.
j'ai donc enchainé sur le dd E: et là egalement resultat sain BitDefender Online Scanner
Rapport d'analyse généré à: Wed, Apr 16, 2008 - 22:25:27
Voie d'analyse: E:\Cucusoft;E:\Devious Codeworks;E:\DivX;E:\Documents and Settings;E:\EtiketaGoGo;E:\Finale 2007;E:\flash disk;E:\Flash Menu Builder;E:\Flash saver 5.0;E:\Flash Slideshow Maker Professional;E:\Free Audio Pack;E:\Free Window Registry Repair;E:\Glary Utilities;E:\Harmony Assistant;E:\High-Logic;E:\HP;E:\IVT Corporation;E:\Konvertor;E:\Lightwave5;E:\Lightwave7;E:\Lightwave8;E:\Maïdo Production;E:\Micro Application;E:\MP3 Player Utilities 4.15;E:\music;E:\NRJ;E:\Pinnacle;E:\Popims;E:\Program Files;E:\psp;E:\Studio V5;E:\SWFText;E:\VideoLAN;E:\WebAnimé;E:\WOLFGANG;
Statistiques
Temps
00:01:27
Fichiers
4899
Directoires
1016
Secteurs de boot
7
Archives
79
Paquets programmes
753
Résultats
Virus identifiés
0
Fichiers infectés
0
Fichiers suspects
0
Avertissements
0
Désinfectés
0
Fichiers effacés
0
Info sur les moteurs
Définition virus
1148657
Version des moteurs
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
Analyse des plugins
16
Archive des plugins
41
Unpack des plugins
7
E-mail plugins
6
Système plugins
5
Paramètres d'analyse
Première action
Désinfecté
Seconde Action
Message
Heuristique
Oui
Acceptez les avertissements
Oui
Extensions analysées
exe;com;dll;ocx;scr;bin;dat;386;vxd;sys;wdm;cla;class;ovl;ole;hlp;doc;dot;xls;ppt;wbk;wiz;pot;ppa;xla;xlt;vbs;vbe;mdb;rtf;htm;hta;html;xml;xtp;php;asp;js;shs;chm;lnk;pif;prc;url;smm;pfd;msi;ini;csc;cmd;bas;
Excludez les extensions
Analyse d'emails
Oui
Analyse des Archives
Oui
Analyser paquets programmes
Oui
Analyse des fichiers
Oui
Analyse de boot
Oui
Fichier analysé
Statut
Aucun virus trouvé.
j'ai fait le scan malware pour le dd E: et resultat Malwarebytes' Anti-Malware 1.11
Version de la base de données: 635
Type de recherche: Examen rapide
Eléments examinés: 39010
Temps écoulé: 5 minute(s), 33 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
je vais donc deja virer cedp stealer dans l'immediat de la meme manieresuppression reussiteet la verification manuelle confirme la suppression
ca marche nickel ce malwarebytes pour virer les dossier verrouillé,j'ai telechargé ice word pour verifier et etre certain , resultat ok tout est viré
le regedit nickel les clés demandé sont partie , et voila le log hijackt qui te confirme tout cela je pense
___________________________________________________________________________________________
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:15:46, on 17/04/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\sistray.EXE
C:\WINDOWS\system32\keyhook.exe
E:\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\vsnpstd3.exe
C:\Program Files\Belgacom\bin\sprtcmd.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
E:\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
E:\HP\Digital Imaging\bin\hpqtra08.exe
E:\WinZip\WZQKPICK.EXE
E:\HP\Digital Imaging\bin\hpqimzone.exe
E:\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] E:\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [Belgacom] "C:\Program Files\Belgacom\bin\sprtcmd.exe" /P Belgacom
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Contrôleur de calendrier Ulead.lnk = E:\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = E:\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = E:\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk.disabled
O4 - Global Startup: Microsoft Office.lnk = E:\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Outil de mise à jour Google.lnk.disabled
O4 - Global Startup: WinZip Quick Pick.lnk = E:\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O9 - Extra button: Flash Saver - {09EA1F80-F40A-11D1-B792-444553540001} - E:\FLASHS~1.0\save.htm
O9 - Extra 'Tools' menuitem: Flash Saver - {09EA1F80-F40A-11D1-B792-444553540001} - E:\FLASHS~1.0\save.htm
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
-
-
log malwarebytes
Malwarebytes' Anti-Malware 1.11
Version de la base de données: 635
Type de recherche: Examen rapide
Eléments examinés: 39010
Temps écoulé: 5 minute(s), 33 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
(Aucun élément nuisible détecté)
- 1
- 2
- 3
- 4
Suivant
