Au secours!! Spyware secure + pubs

Question

Bonjour,
Comme bcp de personnes j'ai pa mal de problème avec spyware secure et des pub intempestives!! je n'arrive pa a m'en débarasser.

Qq'un pourrait me venir en aide svp? 

Merci d'avance!

fiat500 · Answer

bonsoir et bienvenu

fais ca:

Fais un clic droit sur ce lien : (IL-MAFIOSO)
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie-colle l'intégralité dans une réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt) 

ety:

télécharge Lop S&D.exe sur ton Bureau.https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

* Double-clique dessus pour lancer l'installation
* Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Séléctionne la langue souhaitée , puis choisis l'option 1 (Recherche)
* Patiente jusqu'à la fin du scan
* Poste le rapport généré (C:\lopR.txt)
---

seb39 · Answer

Merci Fiat500 pour ton aide!!

Alors, voila un peu plus bas le bloc note obtenu avec Navilog1

Est ce ke maintenant j'effectue l'action suivante ou j'atend ta reponse?


Search Navipromo version 3.6.0 commencé le 01/07/2008 à 18:30:21,60

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "Sébastien" 

Mise à jour le 27.06.2008 à 23h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11 
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

Favorit

*** Recherche dossiers dans "C:\WINDOWS" ***


*** Recherche dossiers dans "C:\Program Files" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\menudÉ~1\progra~1" ***


*** Recherche dossiers dans "C:\Documents and Settings\Sébastien\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\INVIT~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\Sébastien\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\Sébastien\menudm~1\progra~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" *** 


*** Recherche dossiers dans "C:\DOCUME~1\INVIT~1\menudm~1\progra~1" *** 

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé


*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\Sébastien\locals~1\applic~1" * 

Fichiers trouvés :

sokqw.exe trouvé ! 
sokqw.dat trouvé ! 
sokqw_nav.dat trouvé ! 
sokqw_navps.dat trouvé ! 

* Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" * 

* Recherche dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" * 



*** Recherche fichiers *** 



*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé ! 

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\Sébastien\locals~1\applic~1" : 

akwjt_nav.dat trouvé !
akwjt_navps.dat trouvé !
hbnbxkbud.dat trouvé !
hbnbxkbud_nav.dat trouvé !
hbnbxkbud_navps.dat trouvé !
sokqw.dat trouvé !
sokqw_nav.dat trouvé !
sokqw_navps.dat trouvé !

* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" : 


* Dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" : 


3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 01/07/2008 à 18:36:01,84 ***

seb39 · Answer

Voila le rapport obtenu avec lop S&D...
   


-----------------------[  Lop S&D 4.2.1-9  XP/Vista  ]---------------------

   [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
   [ USER : S‚bastien ] [ "C:\Lop SD" ] [ Selection : 1 ]
   [ 01/07/2008 | 18:54:55,45 ] [ PC : SN048431220516 ]
   [ MAJ : 01-07-2008 | 00:25 ]
 
   -------------[ Listing des dossiers dans Application Data ]------------  

   [16/08/2004|17:55] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
   [16/08/2004|18:19] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
   [24/04/2006|19:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
   [16/08/2004|17:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [24/04/2006|19:37] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
   [24/04/2006|19:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
   [24/04/2006|19:39] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec
   [24/04/2006|19:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver

   [24/04/2006|19:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [24/04/2006|20:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
   [11/02/2007|16:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
   [24/04/2006|19:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [16/08/2004|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [07/06/2006|13:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EggsHideMessMeow
   [14/09/2006|07:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [14/04/2008|11:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
   [12/02/2008|21:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
   [23/05/2006|22:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [15/05/2006|19:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [17/05/2006|18:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2
   [26/02/2008|09:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Tools
   [17/07/2006|14:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [16/08/2004|18:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [01/07/2008|18:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [22/02/2008|16:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [01/07/2008|16:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [08/05/2008|22:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TrackMania
   [24/04/2006|19:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
   [27/06/2006|23:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [25/04/2006|19:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

   [16/08/2004|17:55] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [16/08/2004|18:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [24/04/2006|19:36] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
   [16/08/2004|17:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [24/04/2006|19:37] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
   [24/04/2006|19:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
   [24/04/2006|19:39] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
   [24/04/2006|19:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

   [16/08/2004|17:55] C:\DOCUME~1\INVIT~1\APPLIC~1\desktop.ini
   [16/08/2004|18:19] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
   [06/08/2007|01:45] C:\DOCUME~1\INVIT~1\APPLIC~1\Logitech
   [24/04/2006|19:36] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
   [06/08/2007|01:43] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
   [24/04/2006|19:37] C:\DOCUME~1\INVIT~1\APPLIC~1\Real
   [24/04/2006|19:28] C:\DOCUME~1\INVIT~1\APPLIC~1\Sun
   [24/04/2006|19:39] C:\DOCUME~1\INVIT~1\APPLIC~1\Symantec
   [24/04/2006|19:45] C:\DOCUME~1\INVIT~1\APPLIC~1\You've Got Pictures Screensaver

   [26/02/2008|08:55] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
   [10/01/2007|12:52] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [23/04/2007|01:41] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec

   [16/08/2004|17:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

   [07/02/2008|02:15] C:\DOCUME~1\SBASTI~1\APPLIC~1\Adobe
   [05/11/2006|21:58] C:\DOCUME~1\SBASTI~1\APPLIC~1\AdobeUM
   [08/07/2007|04:47] C:\DOCUME~1\SBASTI~1\APPLIC~1\ArcSoft
   [23/05/2007|19:41] C:\DOCUME~1\SBASTI~1\APPLIC~1\ConvertTemp
   [21/11/2006|21:19] C:\DOCUME~1\SBASTI~1\APPLIC~1\CyberLink
   [16/08/2004|17:55] C:\DOCUME~1\SBASTI~1\APPLIC~1\desktop.ini
   [19/12/2007|22:58] C:\DOCUME~1\SBASTI~1\APPLIC~1\DivX
   [11/02/2007|22:15] C:\DOCUME~1\SBASTI~1\APPLIC~1\Google
   [17/06/2007|22:05] C:\DOCUME~1\SBASTI~1\APPLIC~1\Help
   [16/08/2004|18:19] C:\DOCUME~1\SBASTI~1\APPLIC~1\Identities
   [18/06/2008|19:06] C:\DOCUME~1\SBASTI~1\APPLIC~1\IDS_COMPANY
   [11/10/2007|23:18] C:\DOCUME~1\SBASTI~1\APPLIC~1\InstallShield
   [24/06/2006|11:19] C:\DOCUME~1\SBASTI~1\APPLIC~1\Leadertech
   [29/06/2008|21:11] C:\DOCUME~1\SBASTI~1\APPLIC~1\LimeWire
   [23/04/2007|18:33] C:\DOCUME~1\SBASTI~1\APPLIC~1\Logitech
   [24/04/2006|20:19] C:\DOCUME~1\SBASTI~1\APPLIC~1\Macromedia
   [16/06/2008|11:25] C:\DOCUME~1\SBASTI~1\APPLIC~1\Microsoft
   [08/06/2006|20:59] C:\DOCUME~1\SBASTI~1\APPLIC~1\Microsoft Web Folders
   [14/04/2008|11:22] C:\DOCUME~1\SBASTI~1\APPLIC~1\Nikon
   [24/04/2006|20:47] C:\DOCUME~1\SBASTI~1\APPLIC~1\OD2
   [28/03/2007|20:11] C:\DOCUME~1\SBASTI~1\APPLIC~1\OFFICE One v6
   [22/06/2007|19:50] C:\DOCUME~1\SBASTI~1\APPLIC~1\Real
   [23/05/2007|19:40] C:\DOCUME~1\SBASTI~1\APPLIC~1\Samsung
   [08/06/2008|13:10] C:\DOCUME~1\SBASTI~1\APPLIC~1\SolwaySoftware
   [24/06/2006|11:20] C:\DOCUME~1\SBASTI~1\APPLIC~1\Sonic
   [24/04/2006|19:28] C:\DOCUME~1\SBASTI~1\APPLIC~1\Sun
   [28/03/2007|20:11] C:\DOCUME~1\SBASTI~1\APPLIC~1\sversion.ini
   [26/05/2008|21:13] C:\DOCUME~1\SBASTI~1\APPLIC~1\Symantec
   [31/05/2008|17:39] C:\DOCUME~1\SBASTI~1\APPLIC~1\TaoUSign
   [25/02/2008|16:02] C:\DOCUME~1\SBASTI~1\APPLIC~1	eamspeak2
   [26/05/2008|21:13] C:\DOCUME~1\SBASTI~1\APPLIC~1\Temporary
   [28/03/2007|20:11] C:\DOCUME~1\SBASTI~1\APPLIC~1\user60.rdb
   [03/07/2007|16:37] C:\DOCUME~1\SBASTI~1\APPLIC~1\vlc
 
   ----------------[ Tâches planifiées dans C:\WINDOWS	asks ]---------------

   [01/07/2008 17:15][--a------] C:\WINDOWS	asks\Symantec NetDetect.job
   [01/07/2008 17:16][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 14:00][-r-h-----] C:\WINDOWS	asks\desktop.ini
 
   ---------------[ Listing des dossiers dans C:\Program Files ]--------------
 
   [24/04/2006|19:46] C:\Program Files\Adobe
   [25/04/2006|15:24] C:\Program Files\Ahead
   [22/02/2008|15:13] C:\Program Files\Alwil Software
   [24/04/2006|19:24] C:\Program Files\AMD
   [24/04/2006|20:26] C:\Program Files\AOL 9.0
   [24/04/2006|19:45] C:\Program Files\AOL Compagnon
   [27/04/2006|16:40] C:\Program Files\ArcSoft
   [24/04/2006|19:27] C:\Program Files\AvRack
   [26/02/2008|08:28] C:\Program Files\Casperlab Software
   [26/05/2008|23:00] C:\Program Files\CCleaner
   [25/04/2006|21:18] C:\Program Files\Common Files
   [16/08/2004|18:05] C:\Program Files\ComPlus Applications
   [24/04/2006|19:34] C:\Program Files\CyberLink
   [04/04/2008|13:00] C:\Program Files\DIFX
   [12/04/2008|00:59] C:\Program Files\DivX
   [29/06/2008|14:01] C:\Program Files\eMule
   [01/07/2008|16:37] C:\Program Files\Fichiers communs
   [12/02/2008|00:43] C:\Program Files\Google
   [07/06/2008|16:28] C:\Program Files\Image-Line
   [19/06/2008|23:56] C:\Program Files\InstallShield Installation Information
   [01/07/2008|16:31] C:\Program Files\Internet Explorer
   [01/10/2006|14:32] C:\Program Files\ISSENDIS
   [03/04/2008|18:14] C:\Program Files\Java
   [17/09/2006|19:37] C:\Program Files\Kit ADSL(2)
   [27/12/2006|17:23] C:\Program Files\Kit ADSL(3)
   [27/12/2006|17:23] C:\Program Files\Kit ADSL(4)
   [18/03/2007|11:29] C:\Program Files\Kit ADSL(5)
   [12/10/2007|00:15] C:\Program Files\Lavalys
   [24/04/2006|19:45] C:\Program Files\Learn2.com
   [28/06/2008|00:06] C:\Program Files\LimeWire
   [23/04/2007|18:25] C:\Program Files\Logitech
   [25/10/2007|17:35] C:\Program Files\Messager Wanadoo
   [16/08/2004|18:03] C:\Program Files\Messenger
   [24/05/2006|14:17] C:\Program Files\MessengerPlus! 3(2)
   [07/06/2006|18:11] C:\Program Files\MessengerPlus! 3(3)
   [08/05/2007|20:31] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [08/06/2006|20:59] C:\Program Files\microsoft frontpage
   [06/06/2006|21:12] C:\Program Files\Microsoft Office
   [16/08/2004|18:06] C:\Program Files\Movie Maker
   [16/08/2004|18:03] C:\Program Files\MSN
   [16/08/2004|18:03] C:\Program Files\MSN Gaming Zone
   [28/03/2007|19:53] C:\Program Files\MSN Messenger
   [05/03/2007|23:04] C:\Program Files\MSXML 4.0
   [16/06/2008|12:06] C:\Program Files\Mumble
   [01/07/2008|18:41] C:\Program Files\Navilog1
   [16/08/2004|18:06] C:\Program Files\NetMeeting
   [17/10/2007|11:58] C:\Program Files\Neuf
   [27/04/2006|16:41] C:\Program Files\Nikon
   [08/06/2008|13:18] C:\Program Files\Odebit Multim‚dia
   [28/03/2007|20:02] C:\Program Files\OFFICE ONE6.5
   [16/08/2004|18:03] C:\Program Files\Online Services
   [17/06/2007|16:16] C:\Program Files\Outlook Express
   [24/04/2006|19:45] C:\Program Files\QuickTime
   [19/06/2008|23:56] C:\Program Files\Razer
   [28/03/2007|20:02] C:\Program Files\Readiris Pro 8
   [20/02/2007|10:17] C:\Program Files\Real
   [04/02/2008|20:45] C:\Program Files\Realtek
   [24/04/2006|19:27] C:\Program Files\Realtek Sound Manager
   [23/05/2007|19:10] C:\Program Files\Samsung
   [16/08/2004|18:07] C:\Program Files\Services en ligne
   [03/02/2008|04:31] C:\Program Files\Sonic
   [01/07/2008|18:16] C:\Program Files\Spybot - Search & Destroy
   [01/07/2008|16:37] C:\Program Files\Spyware Doctor
   [26/02/2008|08:26] C:\Program Files\Spyware Terminator
   [30/06/2008|21:58] C:\Program Files\Steam
   [25/02/2008|16:02] C:\Program Files\Teamspeak2_RC2
   [08/06/2008|12:15] C:\Program Files\TVAnts
   [16/08/2004|18:19] C:\Program Files\Uninstall Information
   [29/11/2006|11:34] C:\Program Files\USB Driver-Express
   [24/04/2006|19:26] C:\Program Files\VIA
   [03/07/2007|16:35] C:\Program Files\VideoLAN
   [24/04/2006|19:45] C:\Program Files\Viewpoint
   [07/06/2008|16:30] C:\Program Files\VstPlugins
   [01/07/2008|17:10] C:\Program Files\WebPopupKiller
   [08/07/2007|04:47] C:\Program Files\Windows Media Connect 2
   [08/07/2007|04:47] C:\Program Files\Windows Media Player
   [16/08/2004|18:03] C:\Program Files\Windows NT
   [16/08/2004|18:07] C:\Program Files\WindowsUpdate
   [17/06/2007|22:05] C:\Program Files\WinRAR
   [03/10/2006|15:32] C:\Program Files\WinZip
   [16/08/2004|18:11] C:\Program Files\xerox
   [25/04/2006|15:24] C:\Program Files\Yahoo!
   [07/05/2007|17:59] C:\Program Files\YesMessenger
  
   ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
   
   [24/04/2006|19:46] C:\Program Files\Fichiers communs\Adobe
   [25/04/2006|14:54] C:\Program Files\Fichiers communs\Ahead
   [24/04/2006|19:45] C:\Program Files\Fichiers communs\AOL
   [24/04/2006|19:45] C:\Program Files\Fichiers communs\aolshare
   [11/02/2007|16:40] C:\Program Files\Fichiers communs\BOONTY Shared
   [24/04/2006|19:24] C:\Program Files\Fichiers communs\InstallShield
   [24/04/2006|19:28] C:\Program Files\Fichiers communs\Java
   [23/04/2007|18:25] C:\Program Files\Fichiers communs\Logitech
   [01/07/2008|14:34] C:\Program Files\Fichiers communs\Microsoft Shared
   [16/08/2004|18:06] C:\Program Files\Fichiers communs\MSSoap
   [14/04/2008|11:22] C:\Program Files\Fichiers communs\Nikon
   [24/04/2006|19:45] C:\Program Files\Fichiers communs\Nullsoft
   [16/08/2004|17:57] C:\Program Files\Fichiers communs\ODBC
   [08/06/2008|15:04] C:\Program Files\Fichiers communs\Real
   [16/08/2004|18:06] C:\Program Files\Fichiers communs\Services
   [24/04/2006|19:47] C:\Program Files\Fichiers communs\Sonic Shared
   [16/08/2004|17:56] C:\Program Files\Fichiers communs\SpeechEngines
   [22/02/2008|16:33] C:\Program Files\Fichiers communs\Symantec Shared
   [17/06/2007|16:16] C:\Program Files\Fichiers communs\System
   [08/06/2008|15:04] C:\Program Files\Fichiers communs\xing shared

   ---------------------------[ Process ]--------------------------

   ... 49

   iexplore.exe ~ [3472]

   ----------------------[ Recherche avec S_Lop ]---------------------

   Aucun fichier / dossier Lop trouvé ! 
 
   -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

   C:\DOCUME~1\SBASTI~1\Cookies\sébastien@adopt.euroclick[1].txt
 
   ----------------------[ Verification du Registre ]----------------------
 
   ..... OK !

   --------------------[ Verification du fichier Hosts ]---------------------

   Fichier Hosts PROPRE


   ----------------[ Recherche de fichiers avec Catchme ]-----------------
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-07-01 18:55:56
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0


 --------------------[ Recherche d'autres infections ]---------------------

   C:\DOCUME~1\SBASTI~1\LOCALS~1\APPLIC~1\akwjt_navps.dat  
   C:\DOCUME~1\SBASTI~1\LOCALS~1\APPLIC~1\hbnbxkbud_navps.dat  
   C:\DOCUME~1\SBASTI~1\LOCALS~1\APPLIC~1\sokqw_navps.dat  
   C:\DOCUME~1\SBASTI~1\LOCALS~1\APPLIC~1\sokqw.exe  
   C:\DOCUME~1\SBASTI~1\LOCALS~1\APPLIC~1\sokqw.dat 
   C:\DOCUME~1\SBASTI~1\LOCALS~1\APPLIC~1\akwjt_nav.dat 
   C:\DOCUME~1\SBASTI~1\LOCALS~1\APPLIC~1\hbnbxkbud_nav.dat 
   C:\DOCUME~1\SBASTI~1\LOCALS~1\APPLIC~1\sokqw_nav.dat 
   [b]! EGDACCESS !/b
 


   [F:5][D:2]-> C:\DOCUME~1\SBASTI~1\LOCALS~1\Temp
   [F:58][D:0]-> C:\DOCUME~1\SBASTI~1\Cookies
   [F:3017][D:6]-> C:\DOCUME~1\SBASTI~1\LOCALS~1\TEMPOR~1\content.IE5

   --------------------[ Fin du rapport a 18:56:19,32  ]----------------------

fiat500 · Answer

ok 

pour navilog lance l'option 2 

et lop sd:

pour virer ce qui est trouvé:

* Choisis cette fois ci l'Option 2 (Suppression)
* Ne ferme pas la fenêtre lors de la suppression !
* Poste le rapport généré (C:\lopR.txt)

seb39 · Answer

Navilog me demande de redémarré!

Jle fais maintenant ou d'abord je lance la suppression avec lop sd?

MAM29 · Answer

win Spyware Protect m'embête la vie!!
J'ai lancé une analyse Navilog1, la voici :

Search Navipromo version 3.6.0 commencé le 01/07/2008 à 16:43:32,04

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "Propriétaire" 

Mise à jour le 27.06.2008 à 23h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 6.0.2900.2180 
Système de fichiers : NTFS

Recherche executé en mode normal

*** Recherche Programmes installés ***

WebMediaPlayer

*** Recherche dossiers dans "C:\WINDOWS" ***

C:\WINDOWS\mslagent trouvé !

*** Recherche dossiers dans "C:\Program Files" ***

C:\Program Files\WebMediaPlayer trouvé !

*** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Recherche dossiers dans "c:\docume~1\alluse~1\menudm~1\progra~1" ***

...\WebMediaPlayer trouvé !

*** Recherche dossiers dans "C:\Documents and Settings\Propriétaire\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\Propriétaire\locals~1\applic~1" *** 


*** Recherche dossiers dans "C:\Documents and Settings\Propriétaire\menudm~1\progra~1" *** 

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

Aucun Fichier trouvé


*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\WINDOWS\system32" *

* Recherche dans "C:\Documents and Settings\Propriétaire\locals~1\applic~1" * 



*** Recherche fichiers *** 


C:\WINDOWS\Downloaded Program Files\EGAUTH.inf trouvé !
C:\WINDOWS\Downloaded Program Files
ethv32.inf trouvé !
C:\WINDOWS\ExeDialer.exe trouvé !
C:\WINDOWS	mlpcert2005 trouvé !
C:\WINDOWS\system32\msegcompid.dll trouvé !
C:\WINDOWS\system32\mseggrpid.dll trouvé !

*** Recherche clés spécifiques dans le Registre ***

HKEY_CURRENT_USER\Software\Lanconfig trouvé ! 
HKEY_CURRENT_USER\Software\mc trouvé ! 

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :


2)Recherche Heuristique :

* Dans "C:\WINDOWS\system32" :


* Dans "C:\Documents and Settings\Propriétaire\locals~1\applic~1" : 

daqgftjhdt.dat trouvé !
daqgftjhdt_nav.dat trouvé !
daqgftjhdt_navps.dat trouvé !

3)Recherche Certificats :

Certificat Egroup trouvé !
Certificat Electronic-Group trouvé !
Certificat OOO-Favorit trouvé !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche fichiers connus :



*** Analyse terminée le 01/07/2008 à 16:49:53,31 ***


Grand merci d'avance à qui peut m'aider.

fiat500 · Answer

redemmare l'ordi maintenant

seb39 · Answer

Voila d'abord le rapport ke g eu apres redemarrage:


Clean Navipromo version 3.6.0 commencé le 01/07/2008 à 19:12:24,90

Outil exécuté depuis C:\Program Files
avilog1
Session actuelle : "Sébastien" 

Mise à jour le 27.06.2008 à 23h00 par IL-MAFIOSO


Microsoft Windows XP [version 5.1.2600]
Internet Explorer : 7.0.5730.11
Système de fichiers : NTFS

Mode suppression automatique 
avec prise en charge résultats Catchme et GNS


Nettoyage exécuté au redémarrage de l'ordinateur

 
*** fsbl1.txt non trouvé ***
(Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)
 

*** Suppression avec sauvegardes résultats GenericNaviSearch ***

* Suppression dans "C:\WINDOWS\System32" *

C:\WINDOWS\prefetch\sokqw*.pf trouvé !
Copie C:\WINDOWS\prefetch\sokqw*.pf réalisée avec succès !
C:\WINDOWS\prefetch\sokqw*.pf supprimé !


* Suppression dans "C:\Documents and Settings\Sébastien\locals~1\applic~1" * 

sokqw.exe trouvé !
Copie sokqw.exe réalisée avec succès !
sokqw.exe supprimé !

sokqw.dat trouvé !
Copie sokqw.dat réalisée avec succès !
sokqw.dat supprimé !

sokqw_nav.dat trouvé !
Copie sokqw_nav.dat réalisée avec succès !
sokqw_nav.dat supprimé !

sokqw_navps.dat trouvé !
Copie sokqw_navps.dat réalisée avec succès !
sokqw_navps.dat supprimé !


* Suppression dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" * 


* Suppression dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" * 



*** Suppression dossiers dans "C:\WINDOWS" ***


*** Suppression dossiers dans "C:\Program Files" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1\menudÉ~1\progra~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Sébastien\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\INVIT~1\applic~1" *** 


*** Suppression dossiers dans "C:\Documents and Settings\Sébastien\locals~1\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" *** 


*** Suppression dossiers dans "C:\Documents and Settings\Sébastien\menudm~1\progra~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" *** 


*** Suppression dossiers dans "C:\DOCUME~1\INVIT~1\menudm~1\progra~1" *** 



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\S‚bastien\locals~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\WINDOWS\system32" *


* Dans "C:\Documents and Settings\Sébastien\locals~1\applic~1" * 

hbnbxkbud.dat trouvé !
Copie hbnbxkbud.dat réalisée avec succès !
hbnbxkbud.dat supprimé !

akwjt_nav.dat trouvé !
Copie akwjt_nav.dat réalisée avec succès !
akwjt_nav.dat supprimé !

hbnbxkbud_nav.dat trouvé !
Copie hbnbxkbud_nav.dat réalisée avec succès !
hbnbxkbud_nav.dat supprimé !

akwjt_navps.dat trouvé !
Copie akwjt_navps.dat réalisée avec succès !
akwjt_navps.dat supprimé !

hbnbxkbud_navps.dat trouvé !
Copie hbnbxkbud_navps.dat réalisée avec succès !
hbnbxkbud_navps.dat supprimé !

akwjt.dat trouvé !
Copie akwjt.dat réalisée avec succès !
akwjt.dat supprimé !


* Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" * 


* Dans "C:\DOCUME~1\INVIT~1\locals~1\applic~1" * 


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup supprimé !
Certificat Electronic-Group supprimé !
Certificat OOO-Favorit supprimé !
Certificat Sunny-Day-Design-Ltdt absent !

*** Nettoyage terminé le 01/07/2008 à 19:27:50,10 ***u apres redemarrage:

seb39 · Answer

Et ensuite avec lop:
  


   -----------------------[  Lop S&D 4.2.1-9  XP/Vista  ]---------------------

   [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
   [ USER : S‚bastien ] [ "C:\Lop SD" ] [ Selection : 2 ]
   [ 01/07/2008 | 19:29:55,78 ] [ PC : SN048431220516 ]
   [ MAJ : 01-07-2008 | 00:25 ]


   \\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////

   Supprime! - C:\DOCUME~1\SBASTI~1\Cookies\sébastien@adopt.euroclick[1].txt 
   RestaurÚ! - Fichier Hosts
 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\ 

   Supprime! - C:\Program Files\Viewpoint
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\Viewpoint
 
   //////////////////////////////////////-\\\\\\\\\\\\\\\\\\\\

 
   -------------[ Listing des dossiers dans Application Data ]------------  

   [16/08/2004|17:55] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
   [16/08/2004|18:19] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
   [24/04/2006|19:36] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
   [16/08/2004|17:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
   [24/04/2006|19:37] C:\DOCUME~1\ADMINI~1\APPLIC~1\Real
   [24/04/2006|19:28] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
   [24/04/2006|19:39] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec
   [24/04/2006|19:45] C:\DOCUME~1\ADMINI~1\APPLIC~1\You've Got Pictures Screensaver

   [24/04/2006|19:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [24/04/2006|20:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AOL
   [11/02/2007|16:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\BOONTY
   [24/04/2006|19:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
   [16/08/2004|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
   [07/06/2006|13:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\EggsHideMessMeow
   [14/09/2006|07:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [14/04/2008|11:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\LauncherAccess.dt
   [12/02/2008|21:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
   [23/05/2006|22:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [15/05/2006|19:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [17/05/2006|18:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\OD2
   [26/02/2008|09:05] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Tools
   [17/07/2006|14:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
   [16/08/2004|18:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
   [01/07/2008|18:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [22/02/2008|16:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
   [01/07/2008|16:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
   [08/05/2008|22:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TrackMania
   [27/06/2006|23:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [25/04/2006|19:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion

   [16/08/2004|17:55] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
   [16/08/2004|18:19] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
   [24/04/2006|19:36] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
   [16/08/2004|17:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
   [24/04/2006|19:37] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Real
   [24/04/2006|19:28] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
   [24/04/2006|19:39] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec
   [24/04/2006|19:45] C:\DOCUME~1\DEFAUL~1\APPLIC~1\You've Got Pictures Screensaver

   [16/08/2004|17:55] C:\DOCUME~1\INVIT~1\APPLIC~1\desktop.ini
   [16/08/2004|18:19] C:\DOCUME~1\INVIT~1\APPLIC~1\Identities
   [06/08/2007|01:45] C:\DOCUME~1\INVIT~1\APPLIC~1\Logitech
   [24/04/2006|19:36] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia
   [06/08/2007|01:43] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft
   [24/04/2006|19:37] C:\DOCUME~1\INVIT~1\APPLIC~1\Real
   [24/04/2006|19:28] C:\DOCUME~1\INVIT~1\APPLIC~1\Sun
   [24/04/2006|19:39] C:\DOCUME~1\INVIT~1\APPLIC~1\Symantec
   [24/04/2006|19:45] C:\DOCUME~1\INVIT~1\APPLIC~1\You've Got Pictures Screensaver

   [26/02/2008|08:55] C:\DOCUME~1\LOCALS~1\APPLIC~1\Adobe
   [10/01/2007|12:52] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
   [23/04/2007|01:41] C:\DOCUME~1\LOCALS~1\APPLIC~1\Symantec

   [16/08/2004|17:54] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

   [07/02/2008|02:15] C:\DOCUME~1\SBASTI~1\APPLIC~1\Adobe
   [05/11/2006|21:58] C:\DOCUME~1\SBASTI~1\APPLIC~1\AdobeUM
   [08/07/2007|04:47] C:\DOCUME~1\SBASTI~1\APPLIC~1\ArcSoft
   [23/05/2007|19:41] C:\DOCUME~1\SBASTI~1\APPLIC~1\ConvertTemp
   [21/11/2006|21:19] C:\DOCUME~1\SBASTI~1\APPLIC~1\CyberLink
   [16/08/2004|17:55] C:\DOCUME~1\SBASTI~1\APPLIC~1\desktop.ini
   [19/12/2007|22:58] C:\DOCUME~1\SBASTI~1\APPLIC~1\DivX
   [11/02/2007|22:15] C:\DOCUME~1\SBASTI~1\APPLIC~1\Google
   [17/06/2007|22:05] C:\DOCUME~1\SBASTI~1\APPLIC~1\Help
   [16/08/2004|18:19] C:\DOCUME~1\SBASTI~1\APPLIC~1\Identities
   [18/06/2008|19:06] C:\DOCUME~1\SBASTI~1\APPLIC~1\IDS_COMPANY
   [11/10/2007|23:18] C:\DOCUME~1\SBASTI~1\APPLIC~1\InstallShield
   [24/06/2006|11:19] C:\DOCUME~1\SBASTI~1\APPLIC~1\Leadertech
   [29/06/2008|21:11] C:\DOCUME~1\SBASTI~1\APPLIC~1\LimeWire
   [23/04/2007|18:33] C:\DOCUME~1\SBASTI~1\APPLIC~1\Logitech
   [24/04/2006|20:19] C:\DOCUME~1\SBASTI~1\APPLIC~1\Macromedia
   [16/06/2008|11:25] C:\DOCUME~1\SBASTI~1\APPLIC~1\Microsoft
   [08/06/2006|20:59] C:\DOCUME~1\SBASTI~1\APPLIC~1\Microsoft Web Folders
   [14/04/2008|11:22] C:\DOCUME~1\SBASTI~1\APPLIC~1\Nikon
   [24/04/2006|20:47] C:\DOCUME~1\SBASTI~1\APPLIC~1\OD2
   [28/03/2007|20:11] C:\DOCUME~1\SBASTI~1\APPLIC~1\OFFICE One v6
   [22/06/2007|19:50] C:\DOCUME~1\SBASTI~1\APPLIC~1\Real
   [23/05/2007|19:40] C:\DOCUME~1\SBASTI~1\APPLIC~1\Samsung
   [08/06/2008|13:10] C:\DOCUME~1\SBASTI~1\APPLIC~1\SolwaySoftware
   [24/06/2006|11:20] C:\DOCUME~1\SBASTI~1\APPLIC~1\Sonic
   [24/04/2006|19:28] C:\DOCUME~1\SBASTI~1\APPLIC~1\Sun
   [28/03/2007|20:11] C:\DOCUME~1\SBASTI~1\APPLIC~1\sversion.ini
   [26/05/2008|21:13] C:\DOCUME~1\SBASTI~1\APPLIC~1\Symantec
   [31/05/2008|17:39] C:\DOCUME~1\SBASTI~1\APPLIC~1\TaoUSign
   [25/02/2008|16:02] C:\DOCUME~1\SBASTI~1\APPLIC~1	eamspeak2
   [26/05/2008|21:13] C:\DOCUME~1\SBASTI~1\APPLIC~1\Temporary
   [28/03/2007|20:11] C:\DOCUME~1\SBASTI~1\APPLIC~1\user60.rdb
   [03/07/2007|16:37] C:\DOCUME~1\SBASTI~1\APPLIC~1\vlc
 
   ----------------[ Tâches planifiées dans C:\WINDOWS	asks ]---------------

   [01/07/2008 17:15][--a------] C:\WINDOWS	asks\Symantec NetDetect.job
   [01/07/2008 19:26][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 14:00][-r-h-----] C:\WINDOWS	asks\desktop.ini
 
   ---------------[ Listing des dossiers dans C:\Program Files ]--------------
 
   [24/04/2006|19:46] C:\Program Files\Adobe
   [25/04/2006|15:24] C:\Program Files\Ahead
   [22/02/2008|15:13] C:\Program Files\Alwil Software
   [24/04/2006|19:24] C:\Program Files\AMD
   [24/04/2006|20:26] C:\Program Files\AOL 9.0
   [24/04/2006|19:45] C:\Program Files\AOL Compagnon
   [27/04/2006|16:40] C:\Program Files\ArcSoft
   [24/04/2006|19:27] C:\Program Files\AvRack
   [26/02/2008|08:28] C:\Program Files\Casperlab Software
   [26/05/2008|23:00] C:\Program Files\CCleaner
   [25/04/2006|21:18] C:\Program Files\Common Files
   [16/08/2004|18:05] C:\Program Files\ComPlus Applications
   [24/04/2006|19:34] C:\Program Files\CyberLink
   [04/04/2008|13:00] C:\Program Files\DIFX
   [12/04/2008|00:59] C:\Program Files\DivX
   [29/06/2008|14:01] C:\Program Files\eMule
   [01/07/2008|16:37] C:\Program Files\Fichiers communs
   [12/02/2008|00:43] C:\Program Files\Google
   [07/06/2008|16:28] C:\Program Files\Image-Line
   [19/06/2008|23:56] C:\Program Files\InstallShield Installation Information
   [01/07/2008|16:31] C:\Program Files\Internet Explorer
   [01/10/2006|14:32] C:\Program Files\ISSENDIS
   [03/04/2008|18:14] C:\Program Files\Java
   [17/09/2006|19:37] C:\Program Files\Kit ADSL(2)
   [27/12/2006|17:23] C:\Program Files\Kit ADSL(3)
   [27/12/2006|17:23] C:\Program Files\Kit ADSL(4)
   [18/03/2007|11:29] C:\Program Files\Kit ADSL(5)
   [12/10/2007|00:15] C:\Program Files\Lavalys
   [24/04/2006|19:45] C:\Program Files\Learn2.com
   [28/06/2008|00:06] C:\Program Files\LimeWire
   [23/04/2007|18:25] C:\Program Files\Logitech
   [25/10/2007|17:35] C:\Program Files\Messager Wanadoo
   [16/08/2004|18:03] C:\Program Files\Messenger
   [24/05/2006|14:17] C:\Program Files\MessengerPlus! 3(2)
   [07/06/2006|18:11] C:\Program Files\MessengerPlus! 3(3)
   [08/05/2007|20:31] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [08/06/2006|20:59] C:\Program Files\microsoft frontpage
   [06/06/2006|21:12] C:\Program Files\Microsoft Office
   [16/08/2004|18:06] C:\Program Files\Movie Maker
   [16/08/2004|18:03] C:\Program Files\MSN
   [16/08/2004|18:03] C:\Program Files\MSN Gaming Zone
   [28/03/2007|19:53] C:\Program Files\MSN Messenger
   [05/03/2007|23:04] C:\Program Files\MSXML 4.0
   [16/06/2008|12:06] C:\Program Files\Mumble
   [01/07/2008|19:27] C:\Program Files\Navilog1
   [16/08/2004|18:06] C:\Program Files\NetMeeting
   [17/10/2007|11:58] C:\Program Files\Neuf
   [27/04/2006|16:41] C:\Program Files\Nikon
   [08/06/2008|13:18] C:\Program Files\Odebit Multim‚dia
   [28/03/2007|20:02] C:\Program Files\OFFICE ONE6.5
   [16/08/2004|18:03] C:\Program Files\Online Services
   [17/06/2007|16:16] C:\Program Files\Outlook Express
   [24/04/2006|19:45] C:\Program Files\QuickTime
   [19/06/2008|23:56] C:\Program Files\Razer
   [28/03/2007|20:02] C:\Program Files\Readiris Pro 8
   [20/02/2007|10:17] C:\Program Files\Real
   [04/02/2008|20:45] C:\Program Files\Realtek
   [24/04/2006|19:27] C:\Program Files\Realtek Sound Manager
   [23/05/2007|19:10] C:\Program Files\Samsung
   [16/08/2004|18:07] C:\Program Files\Services en ligne
   [03/02/2008|04:31] C:\Program Files\Sonic
   [01/07/2008|18:16] C:\Program Files\Spybot - Search & Destroy
   [01/07/2008|16:37] C:\Program Files\Spyware Doctor
   [26/02/2008|08:26] C:\Program Files\Spyware Terminator
   [30/06/2008|21:58] C:\Program Files\Steam
   [25/02/2008|16:02] C:\Program Files\Teamspeak2_RC2
   [08/06/2008|12:15] C:\Program Files\TVAnts
   [16/08/2004|18:19] C:\Program Files\Uninstall Information
   [29/11/2006|11:34] C:\Program Files\USB Driver-Express
   [24/04/2006|19:26] C:\Program Files\VIA
   [03/07/2007|16:35] C:\Program Files\VideoLAN
   [07/06/2008|16:30] C:\Program Files\VstPlugins
   [01/07/2008|17:10] C:\Program Files\WebPopupKiller
   [08/07/2007|04:47] C:\Program Files\Windows Media Connect 2
   [08/07/2007|04:47] C:\Program Files\Windows Media Player
   [16/08/2004|18:03] C:\Program Files\Windows NT
   [16/08/2004|18:07] C:\Program Files\WindowsUpdate
   [17/06/2007|22:05] C:\Program Files\WinRAR
   [03/10/2006|15:32] C:\Program Files\WinZip
   [16/08/2004|18:11] C:\Program Files\xerox
   [25/04/2006|15:24] C:\Program Files\Yahoo!
   [07/05/2007|17:59] C:\Program Files\YesMessenger
  
   ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------
   
   [24/04/2006|19:46] C:\Program Files\Fichiers communs\Adobe
   [25/04/2006|14:54] C:\Program Files\Fichiers communs\Ahead
   [24/04/2006|19:45] C:\Program Files\Fichiers communs\AOL
   [24/04/2006|19:45] C:\Program Files\Fichiers communs\aolshare
   [11/02/2007|16:40] C:\Program Files\Fichiers communs\BOONTY Shared
   [24/04/2006|19:24] C:\Program Files\Fichiers communs\InstallShield
   [24/04/2006|19:28] C:\Program Files\Fichiers communs\Java
   [23/04/2007|18:25] C:\Program Files\Fichiers communs\Logitech
   [01/07/2008|14:34] C:\Program Files\Fichiers communs\Microsoft Shared
   [16/08/2004|18:06] C:\Program Files\Fichiers communs\MSSoap
   [14/04/2008|11:22] C:\Program Files\Fichiers communs\Nikon
   [24/04/2006|19:45] C:\Program Files\Fichiers communs\Nullsoft
   [16/08/2004|17:57] C:\Program Files\Fichiers communs\ODBC
   [08/06/2008|15:04] C:\Program Files\Fichiers communs\Real
   [16/08/2004|18:06] C:\Program Files\Fichiers communs\Services
   [24/04/2006|19:47] C:\Program Files\Fichiers communs\Sonic Shared
   [16/08/2004|17:56] C:\Program Files\Fichiers communs\SpeechEngines
   [22/02/2008|16:33] C:\Program Files\Fichiers communs\Symantec Shared
   [17/06/2007|16:16] C:\Program Files\Fichiers communs\System
   [08/06/2008|15:04] C:\Program Files\Fichiers communs\xing shared

   ---------------------------[ Process ]--------------------------

   ... 49

   ... OK !

   ----------------------[ Recherche avec S_Lop ]---------------------

   Aucun fichier / dossier Lop trouvé ! 
 
   -----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

   Aucun fichier / dossier Lop trouvé ! 
 
   ----------------------[ Verification du Registre ]----------------------
 
   ..... OK !

   --------------------[ Verification du fichier Hosts ]---------------------

   Fichier Hosts PROPRE


   ----------------[ Recherche de fichiers avec Catchme ]-----------------
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2008-07-01 19:30:56
   Windows 5.1.2600 Service Pack 2 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------[ Recherche d'autres infections ]---------------------


   Aucune autre infection trouvée  !

   [F:2][D:2]-> C:\DOCUME~1\SBASTI~1\LOCALS~1\Temp
   [F:57][D:0]-> C:\DOCUME~1\SBASTI~1\Cookies
   [F:3126][D:6]-> C:\DOCUME~1\SBASTI~1\LOCALS~1\TEMPOR~1\content.IE5

   --------------------[ Fin du rapport a 19:31:31,37  ]----------------------

fiat500 · Answer

ok

fais ca:

https://kerio.probb.fr/t673-bitdefender-antivirus-en-ligne

seb39 · Answer

bah ca marche pa, apres avoir accepté la licence ca me di: "vos parametres de securite ne vous permettent pa aux sites web d'utiliser les controle activeX installés sur cet ordi" 

kes ke jpeu faire?

seb39 · Answer

Ca y est finalement jm'en sui sorti!!!!^^

Ke dois je faire apres l'analyse de bitdefender?

fiat500 · Answer

poste moi le rapport

seb39 · Answer

Bah malheureusemment je n'ai pa le rapport de bitdefender mais ca me disait qu'aucun pb n'avait été trouvé!!

fiat500 · Answer

ben c'est fini alors prob resolue

^^Marie^^ · Answer

Slt

Es-tu sur qu'il est résolu ??

fiat500 · Answer

oui je pense mais il faudrais un log hijackthis ?

seb39 · Answer

Désolé jai un peu tardé a rep^^

Pour l'instant je n'ai plus aucun pb et je t'en remercie fiat500.

Par contre c'est quoi un log hijackthis?

fiat500 · Answer

regarde ici:

https://forums.cnetfrance.fr

seb39 · Answer

Voila le rapport:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:19:44, on 04/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\system32
vsvc32.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\PROGRA~1\MESSAG~1\StartMessager.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\apps\ABoard\AOSD.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Razer\Diamondback 3Gazerhid.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\Razer\Diamondback 3Gazertra.exe
C:\Program Files\Razer\Diamondback 3Gazerofa.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\OFFICE ONE6.5\OFFICE One Zip v6\OFFICE One Zip v6.exe
C:\Documents and Settings\Sébastien\Mes documents\OFFICE One Zip\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60327
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://neufportail.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Diamondback] C:\Program Files\Razer\Diamondback 3Gazerhid.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-3-48.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: bw+0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {ADD68A65-E6A2-4357-BA08-3469C5A2DA04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe

seb39 · Answer

Merci marie de ton aide^^

voila mon rapport AVG
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	21:02:03 04/07/2008

 + Résultat de l'analyse:	



HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\WhenUSave -> Adware.SaveNow : Nettoyé.
C:\Lop SD\Backup-Lop\DOCUME~1\SBASTI~1\Cookies\sébastien@adopt.euroclick[1].txt -> TrackingCookie.Euroclick : Nettoyé.


Fin du rapport

Je continue a effecter les actions suivantes, a toute!!

seb39 · Answer

Et maintenant mon rapport hijackthis!!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:21:18, on 04/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\Explorer.EXE
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\VTTimer.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\apps\ABoard\AOSD.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Razer\Diamondback 3Gazerhid.exe
C:\Program Files\Razer\Diamondback 3Gazertra.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\Razer\Diamondback 3Gazerofa.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Sébastien\Mes documents\OFFICE One Zip\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60327
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://neufportail.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [Diamondback] C:\Program Files\Razer\Diamondback 3Gazerhid.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} - 
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - 
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} - 
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - 
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - 
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: MysqlInventime - Unknown owner - C:\Apps\INVENT~1\mysql\bin\mysqld-nt.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe

^^Marie^^ · Answer

Installe le pare feu

Télécharge SmitfraudFix
Utilitaire de S!Ri: Moe et balltrap34
http://siri.urz.free.fr/Fix/SmitfraudFix.php 

http://www.malekal.com/tutorial_SmitFraudfix.php 
et télécharge SmitfraudFix.exe.

Regarde le tuto

Exécute le en choisissant l’option 1,
il va générer un rapport
Copie/colle le sur le poste stp.

Bon courage
A++

seb39 · Answer

Voila marie mon rapport, ++!!


SmitFraudFix v2.329

Rapport fait à 21:44:06,37, 04/07/2008
Executé à partir de C:\Documents and Settings\S‚bastien\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process


»»»»»»»»»»»»»»»»»»»»»»»» hosts

Fichier hosts corrompu !

127.0.0.1	www.legal-at-spybot.info
127.0.0.1	legal-at-spybot.info

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\S‚bastien


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\S‚bastien\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» 


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"
 

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\WINDOWS\SYSTEM32\userinit.exe,"
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS



»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin

^^Marie^^ · Answer

Démarre en mode sans échec : 
Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter. 
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée. 
Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal ! 
(Si F8 ne marche pas utilise la touche F5). 

http://www.coupdepoucepc.com/modules/news/article.php?storyid=253 
 https://www.micro-astuce.com/depannage/demarrer-mode-sans-echec.php

---------------------------------------------------------------------------- 
Relance le programme Smitfraud, 
Cette fois choisit l’option 2, répond oui a tous ; 
Sauvegarde le rapport, Redémarre en mode normal, 
copie/colle le rapport sauvegardé  

S'il est trop long tu le coupes ;;)

seb39 · Answer

ok je fais ca ;)

seb39 · Answer

Bon, voila encore un rapport^^

Mais par contre depuis ke g redémarré mon fond d'ecran est tout bleu et quand j'ouvre internet, je ne tombe plus sur le site de mon fournisseur d'acces, mais sur msn!! est ce normal?

SmitFraudFix v2.329

Rapport fait à 22:08:55,43, 04/07/2008
Executé à partir de C:\Documents and Settings\S‚bastien\Mes documents\Programmes\Smitfraud\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode sans echec

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus


»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1       localhost
127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.1001-search.info
127.0.0.1	1001-search.info
127.0.0.1	www.100888290cs.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	www.10sek.com
127.0.0.1	10sek.com
127.0.0.1	www.123topsearch.com
127.0.0.1	123topsearch.com
127.0.0.1	www.132.com
127.0.0.1	132.com
127.0.0.1	www.136136.net
127.0.0.1	136136.net
127.0.0.1	www.139mm.com
127.0.0.1	139mm.com
127.0.0.1	www.163ns.com
127.0.0.1	163ns.com
127.0.0.1	171203.com
127.0.0.1	17-plus.com
127.0.0.1	www.1800searchonline.com
127.0.0.1	1800searchonline.com
127.0.0.1	www.180searchassistant.com
127.0.0.1	180searchassistant.com
127.0.0.1	www.180solutions.com
127.0.0.1	180solutions.com
127.0.0.1	www.181.365soft.info
127.0.0.1	181.365soft.info
127.0.0.1	www.1987324.com
127.0.0.1	1987324.com
127.0.0.1	www.1-domains-registrations.com
127.0.0.1	1-domains-registrations.com
127.0.0.1	www.1-extreme.biz
127.0.0.1	1-extreme.biz
127.0.0.1	www.1sexparty.com
127.0.0.1	1sexparty.com
127.0.0.1	www.1stantivirus.com
127.0.0.1	1stantivirus.com
127.0.0.1	www.1stpagehere.com
127.0.0.1	1stpagehere.com
127.0.0.1	www.1stsearchportal.com
127.0.0.1	1stsearchportal.com
127.0.0.1	2.82211.net
127.0.0.1	www.2006ooo.com
127.0.0.1	2006ooo.com
127.0.0.1	www.2007-download.com
127.0.0.1	2007-download.com
127.0.0.1	www.2020search.com
127.0.0.1	2020search.com
127.0.0.1	20x2p.com
127.0.0.1	www.24.365soft.info
127.0.0.1	24.365soft.info
127.0.0.1	www.24-7pharmacy.info
127.0.0.1	24-7pharmacy.info
127.0.0.1	www.24-7searching-and-more.com
127.0.0.1	24-7searching-and-more.com
127.0.0.1	www.24teen.com
127.0.0.1	24teen.com
127.0.0.1	www.2every.net
127.0.0.1	2every.net
127.0.0.1	2ndpower.com
127.0.0.1	www.2search.com
127.0.0.1	2search.com
127.0.0.1	www.2search.org
127.0.0.1	2search.org
127.0.0.1	www.2squared.com
127.0.0.1	2squared.com
127.0.0.1	www.3322.org
127.0.0.1	3322.org
127.0.0.1	365soft.info
127.0.0.1	www.36site.com
127.0.0.1	36site.com
127.0.0.1	3721.com
127.0.0.1	39-93.com
127.0.0.1	www.3abetterinternet.com
127.0.0.1	3abetterinternet.com
127.0.0.1	www.3bay.it
127.0.0.1	3bay.it
127.0.0.1	www.3ebay.it
127.0.0.1	3ebay.it
127.0.0.1	www.3xclipsonline.com
127.0.0.1	3xclipsonline.com
127.0.0.1	www.3xcurves.com
127.0.0.1	3xcurves.com
127.0.0.1	www.3xfestival.com
127.0.0.1	3xfestival.com
127.0.0.1	www.3x-festival.com
127.0.0.1	3x-festival.com
127.0.0.1	www.3x-galls.com
127.0.0.1	3x-galls.com
127.0.0.1	www.3xmiracle.com
127.0.0.1	3xmiracle.com
127.0.0.1	www.3xmoviesblog.com
127.0.0.1	3xmoviesblog.com
127.0.0.1	www.404dns.com
127.0.0.1	404dns.com
127.0.0.1	www.4199.com
127.0.0.1	4199.com
127.0.0.1	www.4corn.net
127.0.0.1	4corn.net
127.0.0.1	www.4ebay.it
127.0.0.1	4ebay.it
127.0.0.1	4klm.com
127.0.0.1	www.4mpg.com
127.0.0.1	4mpg.com
127.0.0.1	www.4repubblica.it
127.0.0.1	4repubblica.it
127.0.0.1	www.4softget.com
127.0.0.1	4softget.com
127.0.0.1	www.59cn.cn
127.0.0.1	59cn.cn
127.0.0.1	www.5iscali.it
127.0.0.1	5iscali.it
127.0.0.1	www.5repubblica.it
127.0.0.1	5repubblica.it
127.0.0.1	www.5starvideos.com
127.0.0.1	5starvideos.com
127.0.0.1	www.5tiscali.it
127.0.0.1	5tiscali.it
127.0.0.1	www.5zgmu7o20kt5d8yq.com
127.0.0.1	5zgmu7o20kt5d8yq.com
127.0.0.1	www.680180.net
127.0.0.1	680180.net
127.0.0.1	www.6iscali.it
127.0.0.1	6iscali.it
127.0.0.1	www.6njaga.com
127.0.0.1	6njaga.com
127.0.0.1	www.6sek.com
127.0.0.1	6sek.com
127.0.0.1	www.6tiscali.it
127.0.0.1	6tiscali.it
127.0.0.1	www.70-music.com
127.0.0.1	70-music.com
127.0.0.1	www.7322.com
127.0.0.1	7322.com
127.0.0.1	www.745970.com
127.0.0.1	745970.com
127.0.0.1	75tz.com
127.0.0.1	www.777search.com
127.0.0.1	777search.com
127.0.0.1	www.777top.com
127.0.0.1	777top.com
127.0.0.1	www.7939.com
127.0.0.1	7939.com
127.0.0.1	www.7search.com
127.0.0.1	7search.com
127.0.0.1	80gw6ry3i3x3qbrkwhxhw.032439.com
127.0.0.1	www.80-music.com
127.0.0.1	80-music.com
127.0.0.1	82211.net
127.0.0.1	8866.org
127.0.0.1	www.88vcd.com
127.0.0.1	88vcd.com
127.0.0.1	www.8ad.com
127.0.0.1	8ad.com
127.0.0.1	www.90-music.com
127.0.0.1	90-music.com
127.0.0.1	www.9505.com
127.0.0.1	9505.com
127.0.0.1	www.971searchbox.com
127.0.0.1	971searchbox.com
127.0.0.1	9mmporn.com
127.0.0.1	a.bestmanage.org
127.0.0.1	www.aaabesthomepage.com
127.0.0.1	aaabesthomepage.com
127.0.0.1	aaasexypics.com
127.0.0.1	www.aaawebfinder.com
127.0.0.1	aaawebfinder.com
127.0.0.1	www.aaqadarsztriv.com
127.0.0.1	aaqadarsztriv.com
127.0.0.1	www.aaqada-rsztriv.com
127.0.0.1	aaqada-rsztriv.com
127.0.0.1	www.aaqadaueorn.com
127.0.0.1	aaqadaueorn.com
127.0.0.1	www.aaqada-ueorn.com
127.0.0.1	aaqada-ueorn.com
127.0.0.1	www.aaqada-ygco.com
127.0.0.1	aaqada-ygco.com
127.0.0.1	www.aaqada-ymct.com
127.0.0.1	aaqada-ymct.com
127.0.0.1	aavc.com
127.0.0.1	www.abccodec.com
127.0.0.1	abccodec.com
127.0.0.1	www.abcdperformance.com
127.0.0.1	abcdperformance.com
127.0.0.1	www.abc-find.info
127.0.0.1	abc-find.info
127.0.0.1	www.abcsearch.com
127.0.0.1	abcsearch.com
127.0.0.1	www.abetterinternet.com
127.0.0.1	abetterinternet.com
127.0.0.1	www.abnetsoft.info
127.0.0.1	abnetsoft.info
127.0.0.1	www.about-adult.net
127.0.0.1	about-adult.net
127.0.0.1	www.aboutclicker.com
127.0.0.1	aboutclicker.com
127.0.0.1	www.abrp.net
127.0.0.1	abrp.net
127.0.0.1	www.absolutee.com
127.0.0.1	absolutee.com
127.0.0.1	www.abyssmedia.com
127.0.0.1	abyssmedia.com
127.0.0.1	www.ac66.cn
127.0.0.1	ac66.cn
127.0.0.1	access.navinetwork.com
127.0.0.1	access.rapid-pass.net
127.0.0.1	www.accessactivexvideo.com
127.0.0.1	accessactivexvideo.com
127.0.0.1	www.accessclips.com
127.0.0.1	accessclips.com
127.0.0.1	www.access-dvd.com
127.0.0.1	access-dvd.com
127.0.0.1	www.accesskeygenerator.com
127.0.0.1	accesskeygenerator.com
127.0.0.1	www.accessthefuture.net
127.0.0.1	accessthefuture.net
127.0.0.1	www.accessvid.net
127.0.0.1	accessvid.net
127.0.0.1	www.acemedic.com
127.0.0.1	acemedic.com
127.0.0.1	www.ace-webmaster.com
127.0.0.1	ace-webmaster.com
127.0.0.1	acjp.com
127.0.0.1	www.acrobat-2007.com
127.0.0.1	acrobat-2007.com
127.0.0.1	www.acrobat-8.com
127.0.0.1	acrobat-8.com
127.0.0.1	www.acrobat-center.com
127.0.0.1	acrobat-center.com
127.0.0.1	www.acrobat-hq.com
127.0.0.1	acrobat-hq.com
127.0.0.1	www.acrobatreader-8.com
127.0.0.1	acrobatreader-8.com
127.0.0.1	www.acrobat-reader-8.de
127.0.0.1	acrobat-reader-8.de
127.0.0.1	www.acrobat-stop.com
127.0.0.1	acrobat-stop.com
127.0.0.1	www.actionbreastcancer.org
127.0.0.1	actionbreastcancer.org
127.0.0.1	www.activesearcher.info
127.0.0.1	activesearcher.info
127.0.0.1	www.activexaccessobject.com
127.0.0.1	activexaccessobject.com
127.0.0.1	www.activexaccessvideo.com
127.0.0.1	activexaccessvideo.com
127.0.0.1	www.activexemedia.com
127.0.0.1	activexemedia.com
127.0.0.1	www.activexmediaobject.com
127.0.0.1	activexmediaobject.com
127.0.0.1	www.activexmediapro.com
127.0.0.1	activexmediapro.com
127.0.0.1	www.activexmediasite.com
127.0.0.1	activexmediasite.com
127.0.0.1	www.activexmediasoftware.com
127.0.0.1	activexmediasoftware.com
127.0.0.1	www.activexmediasource.com
127.0.0.1	activexmediasource.com
127.0.0.1	www.activexmediatool.com
127.0.0.1	activexmediatool.com
127.0.0.1	www.activexmediatour.com
127.0.0.1	activexmediatour.com
127.0.0.1	www.activexsoftwares.com
127.0.0.1	activexsoftwares.com
127.0.0.1	www.activexsource.com
127.0.0.1	activexsource.com
127.0.0.1	www.activexupdate.com
127.0.0.1	activexupdate.com
127.0.0.1	www.activexvideo.com
127.0.0.1	activexvideo.com
127.0.0.1	www.activexvideotool.com
127.0.0.1	activexvideotool.com
127.0.0.1	www.ad.marketingsector.com
127.0.0.1	ad.marketingsector.com
127.0.0.1	www.ad.mokead.com
127.0.0.1	ad.mokead.com
127.0.0.1	ad.oinadserver.com
127.0.0.1	ad.outerinfoads.com
127.0.0.1	www.ad25.com
127.0.0.1	ad25.com
127.0.0.1	www.ad45.com
127.0.0.1	ad45.com
127.0.0.1	www.ad77.com
127.0.0.1	ad77.com
127.0.0.1	www.ad86.com
127.0.0.1	ad86.com
127.0.0.1	www.adamsupportgroup.org
127.0.0.1	adamsupportgroup.org
127.0.0.1	www.adarmor.com
127.0.0.1	adarmor.com
127.0.0.1	www.adasearch.com
127.0.0.1	adasearch.com
127.0.0.1	adaware.cc
127.0.0.1	www.adawarenow.com
127.0.0.1	adawarenow.com
127.0.0.1	adchannel.contextplus.net
127.0.0.1	www.addetect.com
127.0.0.1	addetect.com
127.0.0.1	www.add-hhh.info
127.0.0.1	add-hhh.info
127.0.0.1	www.addictivetechnologies.com
127.0.0.1	addictivetechnologies.com
127.0.0.1	www.addictivetechnologies.net
127.0.0.1	addictivetechnologies.net
127.0.0.1	www.addioerrori.com
127.0.0.1	addioerrori.com
127.0.0.1	www.add-manager.com
127.0.0.1	add-manager.com
127.0.0.1	www.adgate.info
127.0.0.1	adgate.info
127.0.0.1	www.adintelligence.net
127.0.0.1	adintelligence.net
127.0.0.1	www.adioserrores.com
127.0.0.1	adioserrores.com
127.0.0.1	www.adipics.com
127.0.0.1	adipics.com
127.0.0.1	www.adlogix.com
127.0.0.1	adlogix.com
127.0.0.1	www.admin2cash.biz
127.0.0.1	admin2cash.biz
127.0.0.1	adnet-plus.com
127.0.0.1	www.adnetserver.com
127.0.0.1	adnetserver.com
127.0.0.1	adobe-download-now.com
127.0.0.1	www.adobe-downloads.com
127.0.0.1	adobe-downloads.com
127.0.0.1	www.adobe-reader-8.fr
127.0.0.1	adobe-reader-8.fr
127.0.0.1	www.adprotect.com
127.0.0.1	adprotect.com
127.0.0.1	ads.centralmedia.ws
127.0.0.1	ads.k8l.info
127.0.0.1	ads.kmpads.com
127.0.0.1	ads.kw.revenue.net
127.0.0.1	ads.marketingsector.com
127.0.0.1	ads.searchingbooth.com
127.0.0.1	ads.z-quest.com
127.0.0.1	ads1.revenue.net
127.0.0.1	www.ads183.com
127.0.0.1	ads183.com
127.0.0.1	www.adscontex.com
127.0.0.1	adscontex.com
127.0.0.1	www.adservices1.enhance.com
127.0.0.1	adservices1.enhance.com
127.0.0.1	adservs.com
127.0.0.1	www.adsextend.net
127.0.0.1	adsextend.net
127.0.0.1	www.adshttp.com
127.0.0.1	adshttp.com
127.0.0.1	www.adsniffer.com
127.0.0.1	adsniffer.com
127.0.0.1	www.adsonwww.com
127.0.0.1	adsonwww.com
127.0.0.1	www.adspics.com
127.0.0.1	adspics.com
127.0.0.1	www.adsrevenue.net
127.0.0.1	adsrevenue.net
127.0.0.1	www.adtrak.net
127.0.0.1	adtrak.net
127.0.0.1	adtrgt.com
127.0.0.1	www.adult18codec.com
127.0.0.1	adult18codec.com
127.0.0.1	www.adult777search.info
127.0.0.1	adult777search.info
127.0.0.1	www.adultan.com
127.0.0.1	adultan.com
127.0.0.1	www.adultcodec-2008.com
127.0.0.1	adultcodec-2008.com
127.0.0.1	www.adultcodecstars.com
127.0.0.1	adultcodecstars.com
127.0.0.1	www.adult-engine-search.com
127.0.0.1	adult-engine-search.com
127.0.0.1	www.adult-erotic-guide.net
127.0.0.1	adult-erotic-guide.net
127.0.0.1	www.adultfilmsite.com
127.0.0.1	adultfilmsite.com
127.0.0.1	www.adult-friends-finder.net
127.0.0.1	adult-friends-finder.net
127.0.0.1	adultgambling.org
127.0.0.1	adult-host.org
127.0.0.1	www.adulthyperlinks.com
127.0.0.1	adulthyperlinks.com
127.0.0.1	www.adultmovieplus.com
127.0.0.1	adultmovieplus.com
127.0.0.1	www.adult-mpg.net
127.0.0.1	adult-mpg.net
127.0.0.1	adult-personal.us
127.0.0.1	adultsgames.net
127.0.0.1	www.adultsonlyvids.com
127.0.0.1	adultsonlyvids.com
127.0.0.1	www.adultsper.com
127.0.0.1	adultsper.com
127.0.0.1	www.adulttds.com
127.0.0.1	adulttds.com
127.0.0.1	www.adultzoneworld.com
127.0.0.1	adultzoneworld.com
127.0.0.1	www.advancedcleaner.com
127.0.0.1	advancedcleaner.com
127.0.0.1	www.advcash.biz
127.0.0.1	advcash.biz
127.0.0.1	advert.exaccess.ru
127.0.0.1	www.advertisemoney.info
127.0.0.1	advertisemoney.info
127.0.0.1	advertising.paltalk.com
127.0.0.1	www.advertising-money.info
127.0.0.1	advertising-money.info
127.0.0.1	ad-ware.cc
127.0.0.1	www.ad-w-a-r-e.com
127.0.0.1	ad-w-a-r-e.com
127.0.0.1	www.a-d-w-a-r-e.com
127.0.0.1	a-d-w-a-r-e.com
127.0.0.1	www.adware.pro
127.0.0.1	adware.pro
127.0.0.1	www.adwarealert.com
127.0.0.1	adwarealert.com
127.0.0.1	www.ad-warealert.com
127.0.0.1	ad-warealert.com
127.0.0.1	www.adwarearrest.com
127.0.0.1	adwarearrest.com
127.0.0.1	www.adwarebazooka.com
127.0.0.1	adwarebazooka.com
127.0.0.1	www.adwarecommander.com
127.0.0.1	adwarecommander.com
127.0.0.1	www.adwarefinder.com
127.0.0.1	adwarefinder.com
127.0.0.1	www.adwaregold.com
127.0.0.1	adwaregold.com
127.0.0.1	www.adwarepatrol.com
127.0.0.1	adwarepatrol.com
127.0.0.1	www.adwareplatinum.com
127.0.0.1	adwareplatinum.com
127.0.0.1	www.adwareprotectionsite.com
127.0.0.1	adwareprotectionsite.com
127.0.0.1	www.adwarepunisher.com
127.0.0.1	adwarepunisher.com
127.0.0.1	www.adwareremover.ws
127.0.0.1	adwareremover.ws
127.0.0.1	www.adwaresafety.com
127.0.0.1	adwaresafety.com
127.0.0.1	www.adwarexp.com
127.0.0.1	adwarexp.com
127.0.0.1	affiliate.idownload.com
127.0.0.1	www.aflgate.com
127.0.0.1	aflgate.com
127.0.0.1	africaspromise.org
127.0.0.1	agava.com
127.0.0.1	agava.ru
127.0.0.1	agentstudio.com
127.0.0.1	www.ageofconans.net
127.0.0.1	ageofconans.net
127.0.0.1	www.aginegialle.it
127.0.0.1	aginegialle.it
127.0.0.1	www.ahnenforschung.de
127.0.0.1	ahnenforschung.de
127.0.0.1	www.aifind.info
127.0.0.1	aifind.info
127.0.0.1	www.airtleworld.com
127.0.0.1	airtleworld.com
127.0.0.1	www.aitalia.it
127.0.0.1	aitalia.it
127.0.0.1	akamai.downloadv3.com
127.0.0.1	www.aklitalia.it
127.0.0.1	aklitalia.it
127.0.0.1	akril.com
127.0.0.1	alcatel.ws
127.0.0.1	www.alertspy.com
127.0.0.1	alertspy.com
127.0.0.1	www.alfacleaner.com
127.0.0.1	alfacleaner.com
127.0.0.1	alfa-search.com
127.0.0.1	www.alialia.it
127.0.0.1	alialia.it
127.0.0.1	www.aliotalia.it
127.0.0.1	aliotalia.it
127.0.0.1	www.alirtalia.it
127.0.0.1	alirtalia.it
127.0.0.1	www.alitaia.it
127.0.0.1	alitaia.it
127.0.0.1	www.alitaklia.it
127.0.0.1	alitaklia.it
127.0.0.1	www.alitala.it
127.0.0.1	alitala.it
127.0.0.1	www.alitali.it
127.0.0.1	alitali.it
127.0.0.1	www.alitaliaq.it
127.0.0.1	alitaliaq.it
127.0.0.1	www.alitalias.it
127.0.0.1	alitalias.it
127.0.0.1	www.alitaliaz.it
127.0.0.1	alitaliaz.it
127.0.0.1	www.alitalioa.it
127.0.0.1	alitalioa.it
127.0.0.1	www.alitalisa.it
127.0.0.1	alitalisa.it
127.0.0.1	www.alitaliua.it
127.0.0.1	alitaliua.it
127.0.0.1	www.alitalkia.it
127.0.0.1	alitalkia.it
127.0.0.1	www.alitaloia.it
127.0.0.1	alitaloia.it
127.0.0.1	www.alitaluia.it
127.0.0.1	alitaluia.it
127.0.0.1	www.alitaslia.it
127.0.0.1	alitaslia.it
127.0.0.1	www.alitlia.it
127.0.0.1	alitlia.it
127.0.0.1	www.alitralia.it
127.0.0.1	alitralia.it
127.0.0.1	www.alitsalia.it
127.0.0.1	alitsalia.it
127.0.0.1	www.aliutalia.it
127.0.0.1	aliutalia.it
127.0.0.1	www.all1count.net
127.0.0.1	all1count.net
127.0.0.1	www.all4internet.com
127.0.0.1	all4internet.com
127.0.0.1	allabtcars.com
127.0.0.1	allabtjeeps.com
127.0.0.1	www.all-bittorrent.com
127.0.0.1	all-bittorrent.com
127.0.0.1	www.allcollisions.com
127.0.0.1	allcollisions.com
127.0.0.1	www.allcybersearch.com
127.0.0.1	allcybersearch.com
127.0.0.1	www.alldnserrors.com
127.0.0.1	alldnserrors.com
127.0.0.1	www.all-downloads-now.com
127.0.0.1	all-downloads-now.com
127.0.0.1	www.all-edonkey.com
127.0.0.1	all-edonkey.com
127.0.0.1	www.allertaminacce.com
127.0.0.1	allertaminacce.com
127.0.0.1	allforadult.com
127.0.0.1	allhyperlinks.com
127.0.0.1	www.alliesecurity.com
127.0.0.1	alliesecurity.com
127.0.0.1	all-inet.com
127.0.0.1	allinternetbusiness.com
127.0.0.1	www.all-limewire.com
127.0.0.1	all-limewire.com
127.0.0.1	www.allmegabucks.com
127.0.0.1	allmegabucks.com
127.0.0.1	www.allprotections.com
127.0.0.1	allprotections.com
127.0.0.1	www.allresultz.net
127.0.0.1	allresultz.net
127.0.0.1	www.allsearch.us
127.0.0.1	allsearch.us
127.0.0.1	www.allsecuritynotes.com
127.0.0.1	allsecuritynotes.com
127.0.0.1	www.allsecuritysite.com
127.0.0.1	allsecuritysite.com
127.0.0.1	www.allstarsvideos.net
127.0.0.1	allstarsvideos.net
127.0.0.1	www.alltiettantivirus.com
127.0.0.1	alltiettantivirus.com
127.0.0.1	www.alltruesoftware.com
127.0.0.1	alltruesoftware.com
127.0.0.1	www.allvideoactivex.com
127.0.0.1	allvideoactivex.com
127.0.0.1	www.almanah.biz
127.0.0.1	almanah.biz
127.0.0.1	almarvideos.com
127.0.0.1	www.aloitalia.it
127.0.0.1	aloitalia.it
127.0.0.1	www.aluitalia.it
127.0.0.1	aluitalia.it
127.0.0.1	www.amaena.com
127.0.0.1	amaena.com
127.0.0.1	amandamountains.com
127.0.0.1	www.amateurliveshow.com
127.0.0.1	amateurliveshow.com
127.0.0.1	www.amediasoftware.com
127.0.0.1	amediasoftware.com
127.0.0.1	www.amediasource.com
127.0.0.1	amediasource.com
127.0.0.1	www.americanautobargains.com
127.0.0.1	americanautobargains.com
127.0.0.1	www.americancarbargains.com
127.0.0.1	americancarbargains.com
127.0.0.1	american-teens.net
127.0.0.1	amigeek.com
127.0.0.1	www.amigobore.com
127.0.0.1	amigobore.com
127.0.0.1	amisbusiness.com
127.0.0.1	www.ampmsearch.com
127.0.0.1	ampmsearch.com
127.0.0.1	www.analcord.com
127.0.0.1	analcord.com
127.0.0.1	analmovi.com
127.0.0.1	www.anarchylolita.com
127.0.0.1	anarchylolita.com
127.0.0.1	anarchyporn.com
127.0.0.1	www.andromedical.com
127.0.0.1	andromedical.com
127.0.0.1	www.animepornmag.com
127.0.0.1	animepornmag.com
127.0.0.1	anin.org
127.0.0.1	www.anjpn-avxiz.biz
127.0.0.1	anjpn-avxiz.biz
127.0.0.1	www.anjpnzqav.biz
127.0.0.1	anjpnzqav.biz
127.0.0.1	www.anjpn-zqav.biz
127.0.0.1	anjpn-zqav.biz
127.0.0.1	annaromeo.com
127.0.0.1	www.antiddos.us
127.0.0.1	antiddos.us
127.0.0.1	www.antiespiadorado.com
127.0.0.1	antiespiadorado.com
127.0.0.1	www.antiespionspack.com
127.0.0.1	antiespionspack.com
127.0.0.1	www.antigusanos2008.com
127.0.0.1	antigusanos2008.com
127.0.0.1	www.antispamassistant.com
127.0.0.1	antispamassistant.com
127.0.0.1	www.antispamdeluxe.com
127.0.0.1	antispamdeluxe.com
127.0.0.1	www.antispionage.com
127.0.0.1	antispionage.com
127.0.0.1	www.antispionagepro.com
127.0.0.1	antispionagepro.com
127.0.0.1	www.antispyadvanced.com
127.0.0.1	antispyadvanced.com
127.0.0.1	www.antispydns.biz
127.0.0.1	antispydns.biz
127.0.0.1	www.antispykit.com
127.0.0.1	antispykit.com
127.0.0.1	www.antispylab.com
127.0.0.1	antispylab.com
127.0.0.1	www.antispyshield.com
127.0.0.1	antispyshield.com
127.0.0.1	www.antispysolutions.com
127.0.0.1	antispysolutions.com
127.0.0.1	www.antispyware.com
127.0.0.1	antispyware.com
127.0.0.1	www.antispywareboot.com
127.0.0.1	antispywareboot.com
127.0.0.1	www.antispywarebot.com
127.0.0.1	antispywarebot.com
127.0.0.1	www.antispywarebox.com
127.0.0.1	antispywarebox.com
127.0.0.1	www.antispywaredownloads.com
127.0.0.1	antispywaredownloads.com
127.0.0.1	www.antispywaresuite.com
127.0.0.1	antispywaresuite.com
127.0.0.1	www.antispywareupdates.net
127.0.0.1	antispywareupdates.net
127.0.0.1	www.antispywarexp.com
127.0.0.1	antispywarexp.com
127.0.0.1	www.antispyweb.net
127.0.0.1	antispyweb.net
127.0.0.1	www.antiver2008.com
127.0.0.1	antiver2008.com
127.0.0.1	www.antivermins.com
127.0.0.1	antivermins.com
127.0.0.1	www.anti-vermins.com
127.0.0.1	anti-vermins.com
127.0.0.1	www.antivir2007.com
127.0.0.1	antivir2007.com
127.0.0.1	www.antivirgear.com
127.0.0.1	antivirgear.com
127.0.0.1	www.antivirprotect.com
127.0.0.1	antivirprotect.com
127.0.0.1	www.antivirus.fastfreedownload.com
127.0.0.1	antivirus.fastfreedownload.com
127.0.0.1	www.antivirus2008pro.com
127.0.0.1	antivirus2008pro.com
127.0.0.1	www.antivirus-2008pro.com
127.0.0.1	antivirus-2008pro.com
127.0.0.1	www.antivirus-2008-pro.com
127.0.0.1	antivirus-2008-pro.com
127.0.0.1	www.antivirus2008pro.info
127.0.0.1	antivirus2008pro.info
127.0.0.1	www.antivirus-2008pro.info
127.0.0.1	antivirus-2008pro.info
127.0.0.1	www.antivirus-2008-pro.info
127.0.0.1	antivirus-2008-pro.info
127.0.0.1	www.antivirus2008pro.net
127.0.0.1	antivirus2008pro.net
127.0.0.1	www.antivirus-2008pro.net
127.0.0.1	antivirus-2008pro.net
127.0.0.1	www.antivirus-2008-pro.net
127.0.0.1	antivirus-2008-pro.net
127.0.0.1	www.antivirus2008pro.org
127.0.0.1	antivirus2008pro.org
127.0.0.1	www.antivirus-2008pro.org
127.0.0.1	antivirus-2008pro.org
127.0.0.1	www.antivirus-2008-pro.org
127.0.0.1	antivirus-2008-pro.org
127.0.0.1	www.antivirus2008x.com
127.0.0.1	antivirus2008x.com
127.0.0.1	www.antivirusadvance.com
127.0.0.1	antivirusadvance.com
127.0.0.1	www.antivirusaskeladd.com
127.0.0.1	antivirusaskeladd.com
127.0.0.1	www.antivirusgereedschap.com
127.0.0.1	antivirusgereedschap.com
127.0.0.1	www.antivirusgolden.com
127.0.0.1	antivirusgolden.com
127.0.0.1	www.antivirus-hq.net
127.0.0.1	antivirus-hq.net
127.0.0.1	www.antiviruspcsuite.com
127.0.0.1	antiviruspcsuite.com
127.0.0.1	www.antiviruspremium.com
127.0.0.1	antiviruspremium.com
127.0.0.1	www.anti-virus-pro.com
127.0.0.1	anti-virus-pro.com
127.0.0.1	www.antivirusprotector.com
127.0.0.1	antivirusprotector.com
127.0.0.1	www.antivirus-scanner.com
127.0.0.1	antivirus-scanner.com
127.0.0.1	www.antivirusscherm.com
127.0.0.1	antivirusscherm.com
127.0.0.1	www.antivirussecuritypro.com
127.0.0.1	antivirussecuritypro.com
127.0.0.1	www.antivirus-stop.com
127.0.0.1	antivirus-stop.com
127.0.0.1	www.antivirussuite.com
127.0.0.1	antivirussuite.com
127.0.0.1	www.antiworm2008.com
127.0.0.1	antiworm2008.com
127.0.0.1	www.antiwurm2008.com
127.0.0.1	antiwurm2008.com
127.0.0.1	antrocity.com
127.0.0.1	www.anyofus.com
127.0.0.1	anyofus.com
127.0.0.1	www.anysn.seproger.com
127.0.0.1	anysn.seproger.com
127.0.0.1	anything4health.com
127.0.0.1	www.apicpreview.com
127.0.0.1	apicpreview.com
127.0.0.1	www.appealcircuit.com
127.0.0.1	appealcircuit.com
127.0.0.1	www.approvedlinks.com
127.0.0.1	approvedlinks.com
127.0.0.1	apps.deskwizz.com
127.0.0.1	apps.webservicehost.com
127.0.0.1	www.aprotectedpage.com
127.0.0.1	aprotectedpage.com
127.0.0.1	apsua.com
127.0.0.1	www.archivioadulti.com
127.0.0.1	archivioadulti.com
127.0.0.1	www.archiviosex.net
127.0.0.1	archiviosex.net
127.0.0.1	aregay.com
127.0.0.1	www.ares.click-new-download.com
127.0.0.1	ares.click-new-download.com
127.0.0.1	www.ares-freebie.com
127.0.0.1	ares-freebie.com
127.0.0.1	www.arespro2007.com
127.0.0.1	arespro2007.com
127.0.0.1	www.aresultra.com
127.0.0.1	aresultra.com
127.0.0.1	www.ares-usa.com
127.0.0.1	ares-usa.com
127.0.0.1	arheo.com
127.0.0.1	arizonaweb.org
127.0.0.1	armitageinn.com
127.0.0.1	www.arquivojpgs.smtp.ru
127.0.0.1	arquivojpgs.smtp.ru
127.0.0.1	artachnid.com
127.0.0.1	art-func.com
127.0.0.1	art-xxx.com
127.0.0.1	www.asafebrowser.com
127.0.0.1	asafebrowser.com
127.0.0.1	www.asafetyalways.com
127.0.0.1	asafetyalways.com
127.0.0.1	www.asafetynote.com
127.0.0.1	asafetynote.com
127.0.0.1	www.asafetynotice.com
127.0.0.1	asafetynotice.com
127.0.0.1	www.asafetypage.com
127.0.0.1	asafetypage.com
127.0.0.1	www.asdbiz.biz
127.0.0.1	asdbiz.biz
127.0.0.1	www.asdeykuddq.com
127.0.0.1	asdeykuddq.com
127.0.0.1	www.asecurebar.com
127.0.0.1	asecurebar.com
127.0.0.1	www.asecureboard.com
127.0.0.1	asecureboard.com
127.0.0.1	www.asecurevalue.com
127.0.0.1	asecurevalue.com
127.0.0.1	www.asecurityissue.com
127.0.0.1	asecurityissue.com
127.0.0.1	www.asecuritynotice.com
127.0.0.1	asecuritynotice.com
127.0.0.1	www.asecuritypaper.com
127.0.0.1	asecuritypaper.com
127.0.0.1	www.asecuritystuff.com
127.0.0.1	asecuritystuff.com
127.0.0.1	www.asfadaptation.com
127.0.0.1	asfadaptation.com
127.0.0.1	asiankingkong.com
127.0.0.1	www.asianpornmag.com
127.0.0.1	asianpornmag.com
127.0.0.1	www.asiantoolbar.com
127.0.0.1	asiantoolbar.com
127.0.0.1	www.asidseiupc.com
127.0.0.1	asidseiupc.com
127.0.0.1	www.aslitalia.it
127.0.0.1	aslitalia.it
127.0.0.1	ass-gals.com
127.0.0.1	www.assureprotection.com
127.0.0.1	assureprotection.com
127.0.0.1	asta-killer.com
127.0.0.1	www.astrologie-server.com
127.0.0.1	astrologie-server.com
127.0.0.1	www.asupereva.it
127.0.0.1	asupereva.it
127.0.0.1	www.ataprogram.com
127.0.0.1	ataprogram.com
127.0.0.1	athenrye.com
127.0.0.1	www.atotalsafety.com
127.0.0.1	atotalsafety.com
127.0.0.1	www.atrueprotection.com
127.0.0.1	atrueprotection.com
127.0.0.1	www.atruesecurity.com
127.0.0.1	atruesecurity.com
127.0.0.1	www.attackware.com
127.0.0.1	attackware.com
127.0.0.1	www.attrezzi.biz
127.0.0.1	attrezzi.biz
127.0.0.1	www.aucunsvirus.com
127.0.0.1	aucunsvirus.com
127.0.0.1	www.aulde.net
127.0.0.1	aulde.net
127.0.0.1	www.aupereva.it
127.0.0.1	aupereva.it
127.0.0.1	www.autobargains.org
127.0.0.1	autobargains.org
127.0.0.1	www.autobargainsnetwork.com
127.0.0.1	autobargainsnetwork.com
127.0.0.1	www.autocontext.begun.ru
127.0.0.1	autocontext.begun.ru
127.0.0.1	autoescrowpay.com
127.0.0.1	www.avadvance.com
127.0.0.1	avadvance.com
127.0.0.1	www.avast.free-software-center.com
127.0.0.1	avast.free-software-center.com
127.0.0.1	www.avast-2007.com
127.0.0.1	avast-2007.com
127.0.0.1	www.avast-downloads.com
127.0.0.1	avast-downloads.com
127.0.0.1	www.avast-hq.com
127.0.0.1	avast-hq.com
127.0.0.1	www.avforce.com
127.0.0.1	avforce.com
127.0.0.1	www.avg.grab-it-today.net
127.0.0.1	avg.grab-it-today.net
127.0.0.1	www.avg.softwarecenterz.com
127.0.0.1	avg.softwarecenterz.com
127.0.0.1	www.avg-secure.com
127.0.0.1	avg-secure.com
127.0.0.1	www.aviadaptation.com
127.0.0.1	aviadaptation.com
127.0.0.1	avian-ads.com
127.0.0.1	www.avicoupler.com
127.0.0.1	avicoupler.com
127.0.0.1	www.avideoaxaccess.com
127.0.0.1	avideoaxaccess.com
127.0.0.1	www.avideosurfer.com
127.0.0.1	avideosurfer.com
127.0.0.1	www.avidirection.com
127.0.0.1	avidirection.com
127.0.0.1	www.aviewersoft.com
127.0.0.1	aviewersoft.com
127.0.0.1	www.aviexecution.com
127.0.0.1	aviexecution.com
127.0.0.1	www.avihelper.com
127.0.0.1	avihelper.com
127.0.0.1	www.aviinstrument.com
127.0.0.1	aviinstrument.com
127.0.0.1	www.avitool.com
127.0.0.1	avitool.com
127.0.0.1	www.avpcheckupdate.com
127.0.0.1	avpcheckupdate.com
127.0.0.1	www.avsmanufacture.com
127.0.0.1	avsmanufacture.com
127.0.0.1	www.avsystemcare.com
127.0.0.1	avsystemcare.com
127.0.0.1	www.avxizaaqada.biz
127.0.0.1	avxizaaqada.biz
127.0.0.1	www.avxiz-anjpn.biz
127.0.0.1	avxiz-anjpn.biz
127.0.0.1	www.avxizueorn.biz
127.0.0.1	avxizueorn.biz
127.0.0.1	www.avxiz-ueorn.biz
127.0.0.1	avxiz-ueorn.biz
127.0.0.1	www.avxiz-vtvcp.biz
127.0.0.1	avxiz-vtvcp.biz
127.0.0.1	www.avxiz-ygco.biz
127.0.0.1	avxiz-ygco.biz
127.0.0.1	www.avxiz-zqav.biz
127.0.0.1	avxiz-zqav.biz
127.0.0.1	www.awarenesstech.com
127.0.0.1	awarenesstech.com
127.0.0.1	www.awarninglist.com
127.0.0.1	awarninglist.com
127.0.0.1	awbeta.net-nucleus.com
127.0.0.1	www.awesomehomepage.com
127.0.0.1	awesomehomepage.com
127.0.0.1	awmcash.biz
127.0.0.1	awmdabest.com
127.0.0.1	www.axemediasoftware.com
127.0.0.1	axemediasoftware.com
127.0.0.1	www.aximageobject.com
127.0.0.1	aximageobject.com
127.0.0.1	www.axmediaproject.com
127.0.0.1	axmediaproject.com
127.0.0.1	www.axmediasoftware.com
127.0.0.1	axmediasoftware.com
127.0.0.1	www.axmediasolutions.com
127.0.0.1	axmediasolutions.com
127.0.0.1	www.axobjectpage.com
127.0.0.1	axobjectpage.com
127.0.0.1	www.axobjectsource.com
127.0.0.1	axobjectsource.com
127.0.0.1	www.axsoftwaretool.com
127.0.0.1	axsoftwaretool.com
127.0.0.1	www.axvideoproject.com
127.0.0.1	axvideoproject.com
127.0.0.1	www.axvideosetup.com
127.0.0.1	axvideosetup.com
127.0.0.1	ayakawamura.com
127.0.0.1	ayb.dns-look-up.com
127.0.0.1	ayb.netbios-wait.com
127.0.0.1	ayumitaniguchi.com
127.0.0.1	azebar.com
127.0.0.1	www.azureusclub.com
127.0.0.1	azureusclub.com
127.0.0.1	www.azureus-freebie.com
127.0.0.1	azureus-freebie.com
127.0.0.1	www.azzetta.it
127.0.0.1	azzetta.it
127.0.0.1	b.casalemedia.com
127.0.0.1	b122.mcboo.com
127.0.0.1	www.babe.k-lined.com
127.0.0.1	babe.k-lined.com
127.0.0.1	www.babe.the-killer.bz
127.0.0.1	babe.the-killer.bz
127.0.0.1	www.babenet.com
127.0.0.1	babenet.com
127.0.0.1	www.babespornmag.com
127.0.0.1	babespornmag.com
127.0.0.1	www.babeweb.de
127.0.0.1	babeweb.de
127.0.0.1	www.baccarat-other.info
127.0.0.1	baccarat-other.info
127.0.0.1	www.backstripgirls.com
127.0.0.1	backstripgirls.com
127.0.0.1	backup.mabou.org
127.0.0.1	www.baiduqqsina.cn
127.0.0.1	baiduqqsina.cn
127.0.0.1	www.balotierra.com
127.0.0.1	balotierra.com
127.0.0.1	bannedhost.net
127.0.0.1	barbudafarms.com
127.0.0.1	www.bardownload.com
127.0.0.1	bardownload.com
127.0.0.1	barnandfence.com
127.0.0.1	batsearch.com
127.0.0.1	baygraphicsllc.com
127.0.0.1	bb.wudiliuliang.com
127.0.0.1	bbbsearch.com
127.0.0.1	bb-search.com
127.0.0.1	www.bcnproduction.com
127.0.0.1	bcnproduction.com
127.0.0.1	bdsmlibrary.net
127.0.0.1	www.bdsmpornmag.com
127.0.0.1	bdsmpornmag.com
127.0.0.1	www.bealent.com
127.0.0.1	bealent.com
127.0.0.1	www.bearshare.click-new-download.com
127.0.0.1	bearshare.click-new-download.com
127.0.0.1	www.bearshare.download-me.info
127.0.0.1	bearshare.download-me.info
127.0.0.1	www.bearshare.mp3-muzic.com
127.0.0.1	bearshare.mp3-muzic.com
127.0.0.1	www.bearshare-download.org
127.0.0.1	bearshare-download.org
127.0.0.1	www.bearshare-downloads.net
127.0.0.1	bearshare-downloads.net
127.0.0.1	www.bearsharelive.co.uk
127.0.0.1	bearsharelive.co.uk
127.0.0.1	www.bearshare-music-downloads.com
127.0.0.1	bearshare-music-downloads.com
127.0.0.1	www.bearsharepro2007.com
127.0.0.1	bearsharepro2007.com
127.0.0.1	www.bearshare-usa.com
127.0.0.1	bearshare-usa.com
127.0.0.1	bedhome.com
127.0.0.1	bediadance.com
127.0.0.1	www.beebappyy.biz
127.0.0.1	beebappyy.biz
127.0.0.1	www.begin2search.com
127.0.0.1	begin2search.com
127.0.0.1	bellabasketsfl.com
127.0.0.1	bernaolatwin.com
127.0.0.1	www.berufe-jobs.de
127.0.0.1	berufe-jobs.de
127.0.0.1	www.berufe-server.de
127.0.0.1	berufe-server.de
127.0.0.1	www.berufe-welt.de
127.0.0.1	berufe-welt.de
127.0.0.1	www.berufs-wahl.de
127.0.0.1	berufs-wahl.de
127.0.0.1	www.beruijindegunhadesun.com
127.0.0.1	beruijindegunhadesun.com
127.0.0.1	www.best3xclips.com
127.0.0.1	best3xclips.com
127.0.0.1	www.bestadults.com
127.0.0.1	bestadults.com
127.0.0.1	best-counter.com
127.0.0.1	bestcrawler.com
127.0.0.1	www.bestdailyvids.com
127.0.0.1	bestdailyvids.com
127.0.0.1	bestfor.ru
127.0.0.1	www.bestfuckvids.com
127.0.0.1	bestfuckvids.com
127.0.0.1	best-hardpics.com
127.0.0.1	www.bestmanage.org
127.0.0.1	bestmanage.org
127.0.0.1	www.bestmanage0.org
127.0.0.1	bestmanage0.org
127.0.0.1	www.bestmanage1.org
127.0.0.1	bestmanage1.org
127.0.0.1	www.bestmanage2.org
127.0.0.1	bestmanage2.org
127.0.0.1	www.bestmanage3.org
127.0.0.1	bestmanage3.org
127.0.0.1	www.bestmanage4.org
127.0.0.1	bestmanage4.org
127.0.0.1	www.bestmanage5.org
127.0.0.1	bestmanage5.org
127.0.0.1	www.bestmanage6.org
127.0.0.1	bestmanage6.org
127.0.0.1	www.bestmanage7.org
127.0.0.1	bestmanage7.org
127.0.0.1	www.bestmanage8.org
127.0.0.1	bestmanage8.org
127.0.0.1	www.bestmanage9.org
127.0.0.1	bestmanage9.org
127.0.0.1	www.bestmovszone.com
127.0.0.1	bestmovszone.com
127.0.0.1	www.bestoffersnetworks.com
127.0.0.1	bestoffersnetworks.com
127.0.0.1	www.best-porncollection.com
127.0.0.1	best-porncollection.com
127.0.0.1	bestporngate.com
127.0.0.1	www.bestsafetyguide.net
127.0.0.1	bestsafetyguide.net
127.0.0.1	www.bestsearch.cc
127.0.0.1	bestsearch.cc
127.0.0.1	www.bestsearchworld.info
127.0.0.1	bestsearchworld.info
127.0.0.1	www.best-spyware.info
127.0.0.1	best-spyware.info
127.0.0.1	www.best-targeted-traffic.com
127.0.0.1	best-targeted-traffic.com
127.0.0.1	www.best-voyeur.info
127.0.0.1	best-voyeur.info
127.0.0.1	bestweblinks.com
127.0.0.1	best-winning-casino.com
127.0.0.1	www.bestworldgirls-for-u.net
127.0.0.1	bestworldgirls-for-u.net
127.0.0.1	www.bestxclips.com
127.0.0.1	bestxclips.com
127.0.0.1	bestxporno.com
127.0.0.1	www.bestxxxmpegs.com
127.0.0.1	bestxxxmpegs.com
127.0.0.1	www.bettersearch.biz
127.0.0.1	bettersearch.biz
127.0.0.1	www.bgazzetta.it
127.0.0.1	bgazzetta.it
127.0.0.1	www.bgoogle.it
127.0.0.1	bgoogle.it
127.0.0.1	www.bigcodecadult.com
127.0.0.1	bigcodecadult.com
127.0.0.1	www.bigcodecadult2008.com
127.0.0.1	bigcodecadult2008.com
127.0.0.1	www.bigcodecadult2008-17.com
127.0.0.1	bigcodecadult2008-17.com
127.0.0.1	www.bighot18adult2008.com
127.0.0.1	bighot18adult2008.com
127.0.0.1	www.bighot18-adult2008.com
127.0.0.1	bighot18-adult2008.com
127.0.0.1	www.bighot18codec2008.com
127.0.0.1	bighot18codec2008.com
127.0.0.1	www.bighot18-codec2008.com
127.0.0.1	bighot18-codec2008.com
127.0.0.1	www.bigtrafficnetwork.com
127.0.0.1	bigtrafficnetwork.com
127.0.0.1	www.bigwww.com
127.0.0.1	bigwww.com
127.0.0.1	www.bill.de
127.0.0.1	bill.de
127.0.0.1	bin.errorprotector.com
127.0.0.1	bins.media-motor.net
127.0.0.1	bins2.media-motor.net
127.0.0.1	bis.180solutions.com
127.0.0.1	bitchesonline.net
127.0.0.1	www.bitcomet-freebie.com
127.0.0.1	bitcomet-freebie.com
127.0.0.1	www.bittorrent.click-new-download.com
127.0.0.1	bittorrent.click-new-download.com
127.0.0.1	biz.biz
127.0.0.1	www.bkvcompany.com
127.0.0.1	bkvcompany.com
127.0.0.1	www.blackblues00.com
127.0.0.1	blackblues00.com
127.0.0.1	www.blackcodec.com
127.0.0.1	blackcodec.com
127.0.0.1	www.black-codec.com
127.0.0.1	black-codec.com
127.0.0.1	www.blackcodec.net
127.0.0.1	blackcodec.net
127.0.0.1	www.blackhats.tc
127.0.0.1	blackhats.tc
127.0.0.1	www.blackhawksoftware.com
127.0.0.1	blackhawksoftware.com
127.0.0.1	blackjack-free.net
127.0.0.1	www.blacklegion.info
127.0.0.1	blacklegion.info
127.0.0.1	blazefind.com
127.0.0.1	blender.xu.pl
127.0.0.1	www.blockcheckercontrol.com
127.0.0.1	blockcheckercontrol.com
127.0.0.1	blondetgp.com
127.0.0.1	www.blue-elefant.com
127.0.0.1	blue-elefant.com
127.0.0.1	www.bm.theaimonline.com
127.0.0.1	bm.theaimonline.com
127.0.0.1	www.bnmgate.com
127.0.0.1	bnmgate.com
127.0.0.1	bodaciousbabette.com
127.0.0.1	www.bonzi.com
127.0.0.1	bonzi.com
127.0.0.1	boobdoll.com
127.0.0.1	boobsandtits.com
127.0.0.1	boobsclub.com
127.0.0.1	www.bookedspace.com
127.0.0.1	bookedspace.com
127.0.0.1	www.boom.com.vn
127.0.0.1	boom.com.vn
127.0.0.1	www.boomgirltv.com
127.0.0.1	boomgirltv.com
127.0.0.1	boredlife.com
127.0.0.1	bowlofogumbo.com
127.0.0.1	www.bpfq02.com
127.0.0.1	bpfq02.com
127.0.0.1	www.bqgate.com
127.0.0.1	bqgate.com
127.0.0.1	br.errorsafe.com
127.0.0.1	br.winantivirus.com
127.0.0.1	br.winfixer.com
127.0.0.1	bradcoem.org
127.0.0.1	www.braincodec.com
127.0.0.1	braincodec.com
127.0.0.1	www.brakecodec.com
127.0.0.1	brakecodec.com
127.0.0.1	brandiyoung.com
127.0.0.1	www.bravesentry.com
127.0.0.1	bravesentry.com
127.0.0.1	www.breenten.biz
127.0.0.1	breenten.biz
127.0.0.1	www.brodbfm.net
127.0.0.1	brodbfm.net
127.0.0.1	brookeburn.com
127.0.0.1	www.browserwise.com
127.0.0.1	browserwise.com
127.0.0.1	bsa.safetydownload.com
127.0.0.1	www.bsplaycodec.com
127.0.0.1	bsplaycodec.com
127.0.0.1	bucps.com
127.0.0.1	buhartes.info
127.0.0.1	buldog-stats.com
127.0.0.1	www.bullseye-network.com
127.0.0.1	bullseye-network.com
127.0.0.1	burgerkingbigscreen.com
127.0.0.1	www.burningsite.com
127.0.0.1	burningsite.com
127.0.0.1	www.burnsrecyclinginc.com
127.0.0.1	burnsrecyclinginc.com
127.0.0.1	buscards.net
127.0.0.1	bustyrussell.com
127.0.0.1	www.busysearch.net
127.0.0.1	busysearch.net
127.0.0.1	buttejazz.org
127.0.0.1	www.buy-find.info
127.0.0.1	buy-find.info
127.0.0.1	buyselldomain.net
127.0.0.1	www.buytraff.biz
127.0.0.1	buytraff.biz
127.0.0.1	buz.ru
127.0.0.1	www.bvdtechinque.com
127.0.0.1	bvdtechinque.com
127.0.0.1	www.bvirgilio.it
127.0.0.1	bvirgilio.it
127.0.0.1	www.bye-spyware.com
127.0.0.1	bye-spyware.com
127.0.0.1	c.centralmedia.ws
127.0.0.1	www.c.enhance.com
127.0.0.1	c.enhance.com
127.0.0.1	c.goclick.com
127.0.0.1	www.c4tdownload.com
127.0.0.1	c4tdownload.com
127.0.0.1	www.c5.www4free.info
127.0.0.1	c5.www4free.info
127.0.0.1	www.cache.surfaccuracy.com
127.0.0.1	cache.surfaccuracy.com
127.0.0.1	cache.ysbweb.com
127.0.0.1	www.cadesfinjeriokas.com
127.0.0.1	cadesfinjeriokas.com
127.0.0.1	calcioturris.com
127.0.0.1	www.calendaralerts.net
127.0.0.1	calendaralerts.net
127.0.0.1	www.callinghome.biz
127.0.0.1	callinghome.biz
127.0.0.1	www.cameouk.co.uk
127.0.0.1	cameouk.co.uk
127.0.0.1	cameup.com
127.0.0.1	www.camouflageclothingonline.net
127.0.0.1	camouflageclothingonline.net
127.0.0.1	campaigns.outerinfo.net
127.0.0.1	camup.net
127.0.0.1	canberracricketcoaching.com
127.0.0.1	candycantaloupes.com
127.0.0.1	www.canidetect.org
127.0.0.1	canidetect.org
127.0.0.1	www.cantfind.com
127.0.0.1	cantfind.com
127.0.0.1	careers.dulcineasystems.net
127.0.0.1	carsands.com
127.0.0.1	carsrentals.net
127.0.0.1	cartoes.uol.com.br
127.0.0.1	www.casalemedia.com
127.0.0.1	casalemedia.com
127.0.0.1	www.cashdeluxe.net
127.0.0.1	cashdeluxe.net
127.0.0.1	www.cashengines.com
127.0.0.1	cashengines.com
127.0.0.1	cashsearch.biz
127.0.0.1	www.cashsurfers.com
127.0.0.1	cashsurfers.com
127.0.0.1	www.cashunlim.com
127.0.0.1	cashunlim.com
127.0.0.1	casino.com.free.game.pogo.gratisdownloads.nl
127.0.0.1	casino2win.net
127.0.0.1	casino-gambling-1.net
127.0.0.1	casino-gambling-2.net
127.0.0.1	casinomidas.net
127.0.0.1	casinonline.net
127.0.0.1	casino-onlines.net
127.0.0.1	www.castingsamateur.com
127.0.0.1	castingsamateur.com
127.0.0.1	catallogue.com
127.0.0.1	www.catch-dc.info
127.0.0.1	catch-dc.info
127.0.0.1	categories.mygeek.com
127.0.0.1	catsss.da.ru
127.0.0.1	caxa.ru
127.0.0.1	cazygirls-world.com
127.0.0.1	cc.panet.org
127.0.0.1	www.ccecaedbebfcaf.com
127.0.0.1	ccecaedbebfcaf.com
127.0.0.1	cclebali.org
127.0.0.1	www.ccorriere.it
127.0.0.1	ccorriere.it
127.0.0.1	www.cdcopysite.com
127.0.0.1	cdcopysite.com
127.0.0.1	www.cdegate.com
127.0.0.1	cdegate.com
127.0.0.1	cdn.drivecleaner.com
127.0.0.1	cdn.errorsafe.com
127.0.0.1	cdn.movies-etc.com
127.0.0.1	cdn.winsoftware.com
127.0.0.1	cdn2.movies-etc.com
127.0.0.1	www.cdorriere.it
127.0.0.1	cdorriere.it
127.0.0.1	ceewawires.org
127.0.0.1	centralmedia.ws
127.0.0.1	certumgroup.com
127.0.0.1	www.cforriere.it
127.0.0.1	cforriere.it
127.0.0.1	www.check.jupitersatellites.biz
127.0.0.1	check.jupitersatellites.biz
127.0.0.1	www.checkin100.com
127.0.0.1	checkin100.com
127.0.0.1	www.checkssecurity.com
127.0.0.1	checkssecurity.com
127.0.0.1	chelancatering.com
127.0.0.1	www.chenshijituan.com
127.0.0.1	chenshijituan.com
127.0.0.1	childrenvilla.com
127.0.0.1	www.chilly3xvids.com
127.0.0.1	chilly3xvids.com
127.0.0.1	www.chillymovs.com
127.0.0.1	chillymovs.com
127.0.0.1	chips-4-free.com
127.0.0.1	chrisswasey.com
127.0.0.1	chriswallace.net
127.0.0.1	www.cia-trjn.myvnc.com
127.0.0.1	cia-trjn.myvnc.com
127.0.0.1	www.cinemadownload.com
127.0.0.1	cinemadownload.com
127.0.0.1	www.ciorriere.it
127.0.0.1	ciorriere.it
127.0.0.1	www.cirriere.it
127.0.0.1	cirriere.it
127.0.0.1	www.citycodec.com
127.0.0.1	citycodec.com
127.0.0.1	ckick4thumbs.com
127.0.0.1	cl55.biz
127.0.0.1	clackamasliteraryreview.com
127.0.0.1	www.clckm.com
127.0.0.1	clckm.com
127.0.0.1	www.cleancodec.com
127.0.0.1	cleancodec.com
127.0.0.1	www.cleansoftwares.com
127.0.0.1	cleansoftwares.com
127.0.0.1	clearsearch.cc
127.0.0.1	clearsearch.net
127.0.0.1	clickaire.com
127.0.0.1	www.click-codec.com
127.0.0.1	click-codec.com
127.0.0.1	www.clickhere4search.com
127.0.0.1	clickhere4search.com
127.0.0.1	www.click-new-download.com
127.0.0.1	click-new-download.com
127.0.0.1	click-now.net
127.0.0.1	www.clickspring.net
127.0.0.1	clickspring.net
127.0.0.1	www.click-to-download.com
127.0.0.1	click-to-download.com
127.0.0.1	www.clicktomakeasearch.com
127.0.0.1	clicktomakeasearch.com
127.0.0.1	clickyestoenter.net
127.0.0.1	client.exeupdate.com
127.0.0.1	client.myadultexplorer.com
127.0.0.1	www.cliks.org
127.0.0.1	cliks.org
127.0.0.1	www.clipsfestival.com
127.0.0.1	clipsfestival.com
127.0.0.1	www.clipsreality.com
127.0.0.1	clipsreality.com
127.0.0.1	www.clorriere.it
127.0.0.1	clorriere.it
127.0.0.1	clrsch.com
127.0.0.1	www.clubxxxvideo.com
127.0.0.1	clubxxxvideo.com
127.0.0.1	clusif.free.fr
127.0.0.1	cmtapestry.com
127.0.0.1	www.cnetadd.com
127.0.0.1	cnetadd.com
127.0.0.1	www.cnomy.com
127.0.0.1	cnomy.com
127.0.0.1	www.cnzz.com
127.0.0.1	cnzz.com
127.0.0.1	www.cocktails-ideen.de
127.0.0.1	cocktails-ideen.de
127.0.0.1	code.ignphrases.com
127.0.0.1	codec.ninoa.com
127.0.0.1	www.codecadult18.com
127.0.0.1	codecadult18.com
127.0.0.1	www.codecbest.com
127.0.0.1	codecbest.com
127.0.0.1	www.codecbsplay.com
127.0.0.1	codecbsplay.com
127.0.0.1	www.codecdemo.com
127.0.0.1	codecdemo.com
127.0.0.1	www.codecdvd.net
127.0.0.1	codecdvd.net
127.0.0.1	www.codecdvi.com
127.0.0.1	codecdvi.com
127.0.0.1	www.codec-fun.com
127.0.0.1	codec-fun.com
127.0.0.1	www.codechard.com
127.0.0.1	codechard.com
127.0.0.1	www.codechot.net
127.0.0.1	codechot.net
127.0.0.1	www.codechq.net
127.0.0.1	codechq.net
127.0.0.1	www.codecmeg.net
127.0.0.1	codecmeg.net
127.0.0.1	www.codecmega.com
127.0.0.1	codecmega.com
127.0.0.1	www.codecmega.net
127.0.0.1	codecmega.net
127.0.0.1	www.codecmoon.com
127.0.0.1	codecmoon.com
127.0.0.1	www.codecmpg.com
127.0.0.1	codecmpg.com
127.0.0.1	www.codecnice.net
127.0.0.1	codecnice.net
127.0.0.1	www.codecnitro.com
127.0.0.1	codecnitro.com
127.0.0.1	www.codecops.net
127.0.0.1	codecops.net
127.0.0.1	www.codecplay.com
127.0.0.1	codecplay.com
127.0.0.1	www.codecpretty.net
127.0.0.1	codecpretty.net
127.0.0.1	www.codecpro.net
127.0.0.1	codecpro.net
127.0.0.1	www.codecred.net
127.0.0.1	codecred.net
127.0.0.1	www.codecsoft.net
127.0.0.1	codecsoft.net
127.0.0.1	www.codecthe.com
127.0.0.1	codecthe.com
127.0.0.1	www.codectime.com
127.0.0.1	codectime.com
127.0.0.1	www.codecultra.net
127.0.0.1	codecultra.net
127.0.0.1	www.codecvids.com
127.0.0.1	codecvids.com
127.0.0.1	www.codecvip.com
127.0.0.1	codecvip.com
127.0.0.1	www.codecviva.com
127.0.0.1	codecviva.com
127.0.0.1	www.codeczang.net
127.0.0.1	codeczang.net
127.0.0.1	www.codrriere.it
127.0.0.1	codrriere.it
127.0.0.1	www.coeriere.it
127.0.0.1	coeriere.it
127.0.0.1	www.coerriere.it
127.0.0.1	coerriere.it
127.0.0.1	www.cofrriere.it
127.0.0.1	cofrriere.it
127.0.0.1	www.cogrriere.it
127.0.0.1	cogrriere.it
127.0.0.1	www.coirriere.it
127.0.0.1	coirriere.it
127.0.0.1	command.adservs.com
127.0.0.1	www.commonname.com
127.0.0.1	commonname.com
127.0.0.1	www.computerpcgames.net
127.0.0.1	computerpcgames.net
127.0.0.1	www.computerrecover.com
127.0.0.1	computerrecover.com
127.0.0.1	config.180solutions.com
127.0.0.1	www.congtouzailai.net
127.0.0.1	congtouzailai.net
127.0.0.1	www.content.dollarrevenue.com
127.0.0.1	content.dollarrevenue.com
127.0.0.1	www.content.ireit.com
127.0.0.1	content.ireit.com
127.0.0.1	content.onerateld.com
127.0.0.1	www.contentmatch.net
127.0.0.1	contentmatch.net
127.0.0.1	www.contextplus.net
127.0.0.1	contextplus.net
127.0.0.1	www.contra-virus.com
127.0.0.1	contra-virus.com
127.0.0.1	www.controlmeh.com
127.0.0.1	controlmeh.com
127.0.0.1	www.convenient-search.com
127.0.0.1	convenient-search.com
127.0.0.1	www.cookingluck.com
127.0.0.1	cookingluck.com
127.0.0.1	www.cooldeskalert.com
127.0.0.1	cooldeskalert.com
127.0.0.1	coolfetishsite.com
127.0.0.1	coolfreehost.com
127.0.0.1	coolfreepage.com
127.0.0.1	coolfreepages.com
127.0.0.1	cool-homepage.co
127.0.0.1	cool-homepage.com
127.0.0.1	coolmoneysearch.com
127.0.0.1	www.coolonlinebusiness.com
127.0.0.1	coolonlinebusiness.com
127.0.0.1	coolpornsearch.com
127.0.0.1	cool-search.net
127.0.0.1	cool-search.netfartpost.com
127.0.0.1	coolsearcher.info
127.0.0.1	www.coolservecorp.net
127.0.0.1	coolservecorp.net
127.0.0.1	www.coolwebsearch.com
127.0.0.1	coolwebsearch.com
127.0.0.1	cool-web-search.com
127.0.0.1	coolwebsearsh.com
127.0.0.1	www.coolwwwsearch.com
127.0.0.1	coolwwwsearch.com
127.0.0.1	cool-xxx.net
127.0.0.1	www.coorriere.it
127.0.0.1	coorriere.it
127.0.0.1	copmtraine.com
127.0.0.1	www.coprriere.it
127.0.0.1	coprriere.it
127.0.0.1	www.core.psyche-evolution.com
127.0.0.1	core.psyche-evolution.com
127.0.0.1	www.coreiere.it
127.0.0.1	coreiere.it
127.0.0.1	www.coreriere.it
127.0.0.1	coreriere.it
127.0.0.1	www.corrdiere.it
127.0.0.1	corrdiere.it
127.0.0.1	www.correiere.it
127.0.0.1	correiere.it
127.0.0.1	www.corrfiere.it
127.0.0.1	corrfiere.it
127.0.0.1	www.corrgiere.it
127.0.0.1	corrgiere.it
127.0.0.1	www.corridere.it
127.0.0.1	corridere.it
127.0.0.1	www.corriedre.it
127.0.0.1	corriedre.it
127.0.0.1	www.corriee.it
127.0.0.1	corriee.it
127.0.0.1	www.corrieere.it
127.0.0.1	corrieere.it
127.0.0.1	www.corriefre.it
127.0.0.1	corriefre.it
127.0.0.1	www.corriegre.it
127.0.0.1	corriegre.it
127.0.0.1	www.corrierde.it
127.0.0.1	corrierde.it
127.0.0.1	www.corriered.it
127.0.0.1	corriered.it
127.0.0.1	www.corrieree.it
127.0.0.1	corrieree.it
127.0.0.1	www.corrieref.it
127.0.0.1	corrieref.it
127.0.0.1	www.corrierer.it
127.0.0.1	corrierer.it
127.0.0.1	www.corrieres.it
127.0.0.1	corrieres.it
127.0.0.1	www.corrierew.it
127.0.0.1	corrierew.it
127.0.0.1	www.corrierfe.it
127.0.0.1	corrierfe.it
127.0.0.1	www.corrierge.it
127.0.0.1	corrierge.it
127.0.0.1	www.corrierr.it
127.0.0.1	corrierr.it
127.0.0.1	www.corrierre.it
127.0.0.1	corrierre.it
127.0.0.1	www.corrierse.it
127.0.0.1	corrierse.it
127.0.0.1	www.corrierte.it
127.0.0.1	corrierte.it
127.0.0.1	www.corrierw.it
127.0.0.1	corrierw.it
127.0.0.1	www.corrierwe.it
127.0.0.1	corrierwe.it
127.0.0.1	www.corriesre.it
127.0.0.1	corriesre.it
127.0.0.1	www.corriete.it
127.0.0.1	corriete.it
127.0.0.1	www.corrietre.it
127.0.0.1	corrietre.it
127.0.0.1	www.corriewre.it
127.0.0.1	corriewre.it
127.0.0.1	www.corrifere.it
127.0.0.1	corrifere.it
127.0.0.1	www.corriiere.it
127.0.0.1	corriiere.it
127.0.0.1	www.corrilere.it
127.0.0.1	corrilere.it
127.0.0.1	www.corrioere.it
127.0.0.1	corrioere.it
127.0.0.1	www.corrire.it
127.0.0.1	corrire.it
127.0.0.1	www.corrirere.it
127.0.0.1	corrirere.it
127.0.0.1	www.corrirre.it
127.0.0.1	corrirre.it
127.0.0.1	www.corrisere.it
127.0.0.1	corrisere.it
127.0.0.1	www.corriuere.it
127.0.0.1	corriuere.it
127.0.0.1	www.corriwere.it
127.0.0.1	corriwere.it
127.0.0.1	www.corriwre.it
127.0.0.1	corriwre.it
127.0.0.1	www.corrliere.it
127.0.0.1	corrliere.it
127.0.0.1	www.corroere.it
127.0.0.1	corroere.it
127.0.0.1	www.corroiere.it
127.0.0.1	corroiere.it
127.0.0.1	www.corrriere.it
127.0.0.1	corrriere.it
127.0.0.1	www.corrtiere.it
127.0.0.1	corrtiere.it
127.0.0.1	www.corruere.it
127.0.0.1	corruere.it
127.0.0.1	www.corruiere.it
127.0.0.1	corruiere.it
127.0.0.1	www.cortiere.it
127.0.0.1	cortiere.it
127.0.0.1	www.cortriere.it
127.0.0.1	cortriere.it
127.0.0.1	www.costrike.com
127.0.0.1	costrike.com
127.0.0.1	www.cotriere.it
127.0.0.1	cotriere.it
127.0.0.1	www.cotrriere.it
127.0.0.1	cotrriere.it
127.0.0.1	couldnotfind.com
127.0.0.1	count.cc
127.0.0.1	count.hitscount.net
127.0.0.1	count-all.com
127.0.0.1	www.countdutycall.info
127.0.0.1	countdutycall.info
127.0.0.1	counter.sexmaniack.com
127.0.0.1	www.courtrecordslookup.com
127.0.0.1	courtrecordslookup.com
127.0.0.1	www.cporriere.it
127.0.0.1	cporriere.it
127.0.0.1	www.cprriere.it
127.0.0.1	cprriere.it
127.0.0.1	cpvfeed.com
127.0.0.1	cracks.me.uk
127.0.0.1	www.cracks4all.com
127.0.0.1	cracks4all.com
127.0.0.1	www.crapsgold.info
127.0.0.1	crapsgold.info
127.0.0.1	www.crazygirls-world.com
127.0.0.1	crazygirls-world.com
127.0.0.1	www.crazywinnings.com
127.0.0.1	crazywinnings.com
127.0.0.1	creamedcutties.com
127.0.0.1	www.createaccesskey.com
127.0.0.1	createaccesskey.com
127.0.0.1	www.creatonsoft.com
127.0.0.1	creatonsoft.com
127.0.0.1	creditsearchonline.com
127.0.0.1	crestring.com
127.0.0.1	crooder.com
127.0.0.1	www.crriere.it
127.0.0.1	crriere.it
127.0.0.1	www.cryptdrive.com
127.0.0.1	cryptdrive.com
127.0.0.1	www.crystalysmedia.com
127.0.0.1	crystalysmedia.com
127.0.0.1	www.csx.adservs.com
127.0.0.1	csx.adservs.com
127.0.0.1	cts.180solutions.com
127.0.0.1	www.cuisinartoven.com
127.0.0.1	cuisinartoven.com
127.0.0.1	www.curedc.info
127.0.0.1	curedc.info
127.0.0.1	www.curepcsolutions.com
127.0.0.1	curepcsolutions.com
127.0.0.1	curvedspaces.com
127.0.0.1	www.cutadult.com
127.0.0.1	cutadult.com
127.0.0.1	www.cutoffspyware.com
127.0.0.1	cutoffspyware.com
127.0.0.1	www.cvirgilio.it
127.0.0.1	cvirgilio.it
127.0.0.1	www.cvorriere.it
127.0.0.1	cvorriere.it
127.0.0.1	cvs.jps.ru
127.0.0.1	cvsymphony.com
127.0.0.1	www.cxorriere.it
127.0.0.1	cxorriere.it
127.0.0.1	www.cyberrape.com
127.0.0.1	cyberrape.com
127.0.0.1	cydom.com
127.0.0.1	www.cydoor.com
127.0.0.1	cydoor.com
127.0.0.1	d34s.qfdfqawd.cn
127.0.0.1	www.daily3xlinks.com
127.0.0.1	daily3xlinks.com
127.0.0.1	www.dailybestclips.com
127.0.0.1	dailybestclips.com
127.0.0.1	daily-gals.com
127.0.0.1	www.dailyhugemovs.com
127.0.0.1	dailyhugemovs.com
127.0.0.1	www.dailykeys.com
127.0.0.1	dailykeys.com
127.0.0.1	www.dailypornmag.com
127.0.0.1	dailypornmag.com
127.0.0.1	dailyteenspic.com
127.0.0.1	www.dailytoolbar.com
127.0.0.1	dailytoolbar.com
127.0.0.1	www.dailyxvids.com
127.0.0.1	dailyxvids.com
127.0.0.1	dancingbabycd.com
127.0.0.1	www.dapsol.com
127.0.0.1	dapsol.com
127.0.0.1	www.dapsolution.com
127.0.0.1	dapsolution.com
127.0.0.1	www.data-hoster.com
127.0.0.1	data-hoster.com
127.0.0.1	datanotary.com
127.0.0.1	datareco.com
127.0.0.1	www.dateanybabe.com
127.0.0.1	dateanybabe.com
127.0.0.1	www.dateanychick.com
127.0.0.1	dateanychick.com
127.0.0.1	www.datingdoctorsite.com
127.0.0.1	datingdoctorsite.com
127.0.0.1	www.dating-galaxy.info
127.0.0.1	dating-galaxy.info
127.0.0.1	dating-search.net
127.0.0.1	davemarshall.org
127.0.0.1	db105.com
127.0.0.1	www.dbdecicated.com
127.0.0.1	dbdecicated.com
127.0.0.1	www.dbxcompany.com
127.0.0.1	dbxcompany.com
127.0.0.1	dcdl.dmcast.com
127.0.0.1	dcfitusa.com
127.0.0.1	www.dcorriere.it
127.0.0.1	dcorriere.it
127.0.0.1	www.dcurtis.com
127.0.0.1	dcurtis.com
127.0.0.1	dcww.dmcast.com
127.0.0.1	de.ag
127.0.0.1	de.drivecleaner.com
127.0.0.1	de.errorsafe.com
127.0.0.1	de.winantivirus.com
127.0.0.1	de98.remsys.org
127.0.0.1	www.debay.it
127.0.0.1	debay.it
127.0.0.1	www.decknews.com
127.0.0.1	decknews.com
127.0.0.1	dedmazay.3322.org
127.0.0.1	www.dedsearch.com
127.0.0.1	dedsearch.com
127.0.0.1	defaultsearch.net
127.0.0.1	www.defensaantimalware.com
127.0.0.1	defensaantimalware.com
127.0.0.1	www.deja-rue.com
127.0.0.1	deja-rue.com
127.0.0.1	www.delficodec.com
127.0.0.1	delficodec.com
127.0.0.1	www.democodec.com
127.0.0.1	democodec.com
127.0.0.1	www.derklaif.biz
127.0.0.1	derklaif.biz
127.0.0.1	www.derrari.it
127.0.0.1	derrari.it
127.0.0.1	desarrollocreativo.com
127.0.0.1	www.deskbar.worldtostart.com
127.0.0.1	deskbar.worldtostart.com
127.0.0.1	www.deskwizz.com
127.0.0.1	deskwizz.com
127.0.0.1	www.destroy-spyware.net
127.0.0.1	destroy-spyware.net
127.0.0.1	www.destruktor.to.pl
127.0.0.1	destruktor.to.pl
127.0.0.1	www.detectivehound.com
127.0.0.1	detectivehound.com
127.0.0.1	www.detectivesearches.com
127.0.0.1	detectivesearches.com
127.0.0.1	dev.ntcor.com
127.0.0.1	develip.com
127.0.0.1	dewis.spb.ru
127.0.0.1	dewis.us
127.0.0.1	df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
127.0.0.1	www.dgbusiness.com
127.0.0.1	dgbusiness.com
127.0.0.1	dialer2004.com
127.0.0.1	www.dialerclub.com
127.0.0.1	dialerclub.com
127.0.0.1	www.dialer-shop.com
127.0.0.1	dialer-shop.com
127.0.0.1	www.dialoff.com
127.0.0.1	dialoff.com
127.0.0.1	www.did.i-used.cc
127.0.0.1	did.i-used.cc
127.0.0.1	dietpills4free.com
127.0.0.1	dietpussy.com
127.0.0.1	www.digikeygen.com
127.0.0.1	digikeygen.com
127.0.0.1	digistreamsa.com
127.0.0.1	www.digitalcoders.net
127.0.0.1	digitalcoders.net
127.0.0.1	www.digitalfan.com
127.0.0.1	digitalfan.com
127.0.0.1	digital-pornography.com
127.0.0.1	dionforvalleycouncil.org
127.0.0.1	www.directdvdpro.com
127.0.0.1	directdvdpro.com
127.0.0.1	www.directnameservice.com
127.0.0.1	directnameservice.com
127.0.0.1	www.directporta.info
127.0.0.1	directporta.info
127.0.0.1	www.directsearchzone.com
127.0.0.1	directsearchzone.com
127.0.0.1	www.diskretter.com
127.0.0.1	diskretter.com
127.0.0.1	dist.checkin100.com
127.0.0.1	dl.ad-ware.cc
127.0.0.1	dl.malwarewipe.com
127.0.0.1	dl.mcboo.com
127.0.0.1	www.dl.targetsaver.com
127.0.0.1	dl.targetsaver.com
127.0.0.1	dl.web-nexus.net
127.0.0.1	dl1.antivermins.com
127.0.0.1	dl1.antivirgear.com
127.0.0.1	dl1.spydawn.com
127.0.0.1	dl1.virusprotectpro.com
127.0.0.1	dl10.spyfalcon.com
127.0.0.1	dl16.spyfalcon.com
127.0.0.1	dl2.spyfalcon.com
127.0.0.1	dl2.spyheal.com
127.0.0.1	dl2.spywarestrike.com
127.0.0.1	dl3.spyfalcon.com
127.0.0.1	dl3.spyheal.com
127.0.0.1	dl3.spywarestrike.com
127.0.0.1	dl4.spyfalcon.com
127.0.0.1	dl4.spywarestrike.com
127.0.0.1	dl5.spyfalcon.com
127.0.0.1	dl5.spywarestrike.com
127.0.0.1	dl6.spywarestrike.com
127.0.0.1	dl7.spywarestrike.com
127.0.0.1	dl8.spyheal.com
127.0.0.1	dl8.spywarestrike.com
127.0.0.1	dl9.spyfalcon.com
127.0.0.1	dload.contextplus.net
127.0.0.1	www.dltsolution.com
127.0.0.1	dltsolution.com
127.0.0.1	www.dmcast.com
127.0.0.1	dmcast.com
127.0.0.1	www.dmqfirm.com
127.0.0.1	dmqfirm.com
127.0.0.1	www.dnaads.com
127.0.0.1	dnaads.com
127.0.0.1	dnl.mabou.org
127.0.0.1	www.dns-look-up.com
127.0.0.1	dns-look-up.com
127.0.0.1	doctorwaldron.com
127.0.0.1	document-not-found.pornpic.org
127.0.0.1	doggyaction.com
127.0.0.1	www.dogproblemswebsite.com
12

^^Marie^^ · Answer

Bingo ;;))

Télécharge Zeb-Restore 

http://telechargement.zebulon.fr/zeb-restore.html 

enregistre ce fichier sur le bureau. 

-Clic droit Zeb-Restore.zip ==> Extraire tout choisis comme lieu d'enregistrement le bureau. 
-Ouvre le dossier ZR_1.0.0.37 ==> double clic sur Zeb-Restore.exe 
- Coche la case devant : Réinitialiser Fichier Hosts 
- Ne coche aucune autre case 
-Clique sur Restaurer 
-Redémarre ton PC+++

Tu referas un smitfraud option 2 en MSE dans la foulée

++++

seb39 · Answer

ok encore merci ++++++++

seb39 · Answer

ok, bonne nuit et a demain^^ ;););)

Au secours!! Spyware secure + pubs

30 réponses

Discussions similaires

Newsletters