You have a security problem et autres

Bonjour,

Depuis peut mon PC a attraper plusieurs virus (dont un disant " you have a security problem " ) l'autre je ne c pas ce que c'est et il m'est impossible de m'en débarrassé pourriez vous m'indiquer les manœuvres a suivre pour m'en débarrasser s'il vous plais ,

merci
Configuration: Windows XP (trust)

27 réponses

Résumé de la discussion

Un utilisateur de Windows XP rapporte une infection par plusieurs malwares, dont un avertissement 'you have a security problem' et un détournement DNS lié à une clé réseau, rendant l’ordinateur instable. Plusieurs outils ont été proposés pour diagnostiquer et supprimer les menaces, notamment Malwarebytes Anti-Malware, SmitfraudFix et HijackThis, afin d’isoler et supprimer les éléments malveillants du registre et des fichiers. Les échanges décrivent des résultats variés, avec des quarantaines ou suppressions de fichiers et ajustements de DNS, et soulignent l’importance d’analyser et nettoyer les rapports pour stabiliser le système. En dernière observation, l’échange insiste sur l’utilisation de sources fiables pour les outils de nettoyage et sur l’interaction prudente avec les antivirus afin d’éviter les faux positifs ou des conflits logiciels.

Bobot (l’IA à votre service)
  1. okay, mais renseigne-toi sur un pare-feu efficace...autre que celui de XP sp2

    http://www.malekal.com/menu_tutorials_logiciels.php

    Ciao

    Zor
    0
    1. c'est bon j'ai tout fait je crois mais je vais enlever online amor car au démarrage mon pc fait un écrans bleu et afiche les icône que plusieurs minutes plus tard
      0
      1. Salut,

        c'est très simple.

        Lance Hijackthis, fais "scan only". Va apparaître ensuite une liste de lignes avec une case vide à côté.
        Coche les lignes sus-mentionnées et fais "fix checked"

        A plus

        Zor
        0
        1. non je n'est plus d'annonce

          comment affiche ton cela dans Hijackthis :

          R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
          O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
          O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

          quand a Smitfraudfix je l'est effacé manuellement et donc Toolscleaner ne d'etecte que les fichier de Hijackthis

          jutilise deja ccleaner er firefox et je suis en trin d'installer ON-line Armor
          0
          1. Salut,

            on arrive à la fin...Comment se porte ton ordinateur? L'annonce est-elle toujours présente?

            1) lance Hijackthis et fixe les lignes suivantes
            R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
            O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
            O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
            O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

            2) Pour désinstaller Smitfraudfix (au sinon Antivir ne sera vraiment pas content), télécharge Toolscleaner
            http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner

            Colle un rapport à la fin de l'analyse

            3) Pour optimiser ton ordinateur
            au niveau antivirus: tu as antivir, le meilleur antivirus actuel. Il serait bon de planifier une analyse périodique en allant dans l'onglet Administration/Scheduler
            au niveau de l'antimalware: tu dois mettre cet antimalware à jour manuellement. Tu peux faire un examen rapide (environ 5') chaque jour, ou un complet toutes les semaines

            Très important, tu n'as pas de pare-feu. Je te recommande ON-line Armor, que je n'ai jamais utilisé personnellement, mais dont on dit le plus grand bien. Il est gratuit et les mises à jour sont manuelles. Il est en anglais.
            tu imprimeras le tuto avant de l'installer
            https://www.malekal.com/tutorial-online-armor-free/

            4) Utilise Firefox comme navigateur sur le net, plus sécurisant
            http://www.commentcamarche.net/telecharger/telecharger 111 firefox

            5) Enfn, CCleaner, un logiciel gratuit que tu dois toujours avoir sur toi
            - il nettoie ton ordinateur (des cookies et fichiers temporaires inutiles)
            - il nettoie ta base de registres (très important, quand tu désinstalles un logiciel)---
            - il te permet de désinstaller des programmes

            Suis le tuto ici https://www.malekal.com/tutoriel-ccleaner/

            Comme indiqué dans ce tuto, n'installe pas la "yahoo toolbar" inutile

            Pour nettoyer ton ordi, vas dans l'onglet nettoyeur/ analyse puis lancer le nettoyage (confirmer)
            Pour nettoyer ta base de registre,vas dans Registre/chercher les erreurs Réparer les erreurs

            Tiens-moi au courant...

            A plus

            Zor
            0
            1. je crois que je ne vais plus prêté mon pc a mon frère ^^ c la cata a chaque fois !!
              0
              1. Malwarebytes' Anti-Malware 1.30
                Version de la base de données: 1380
                Windows 5.1.2600 Service Pack 3, v.5512

                10/11/2008 23:49:51
                mbam-log-2008-11-10 (23-49-51).txt

                Type de recherche: Examen complet (C:\|)
                Eléments examinés: 50615
                Temps écoulé: 35 minute(s), 46 second(s)

                Processus mémoire infecté(s): 0
                Module(s) mémoire infecté(s): 0
                Clé(s) du Registre infectée(s): 1
                Valeur(s) du Registre infectée(s): 0
                Elément(s) de données du Registre infecté(s): 0
                Dossier(s) infecté(s): 0
                Fichier(s) infecté(s): 2

                Processus mémoire infecté(s):
                (Aucun élément nuisible détecté)

                Module(s) mémoire infecté(s):
                (Aucun élément nuisible détecté)

                Clé(s) du Registre infectée(s):
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\cont_offersfortoday (Adware.Agent) -> Quarantined and deleted successfully.

                Valeur(s) du Registre infectée(s):
                (Aucun élément nuisible détecté)

                Elément(s) de données du Registre infecté(s):
                (Aucun élément nuisible détecté)

                Dossier(s) infecté(s):
                (Aucun élément nuisible détecté)

                Fichier(s) infecté(s):
                C:\Program Files\Mozilla Firefox\components\nsoffersfortoday.dll (Adware.BHO) -> Quarantined and deleted successfully.
                C:\WINDOWS\system32\cont_offersfortoday-remove.exe (Adware.Agent) -> Quarantined and deleted successfully.

                Logfile of Trend Micro HijackThis v2.0.2
                Scan saved at 00:10:29, on 11/11/2008
                Platform: Windows XP SP3, v.5512 (WinNT 5.01.2600)
                MSIE: Internet Explorer v7.00 (7.00.6000.20861)
                Boot mode: Normal

                Running processes:
                C:\WINDOWS\System32\smss.exe
                C:\WINDOWS\system32\winlogon.exe
                C:\WINDOWS\system32\services.exe
                C:\WINDOWS\system32\lsass.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\System32\svchost.exe
                C:\WINDOWS\system32\spoolsv.exe
                C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                C:\WINDOWS\Explorer.EXE
                C:\Program Files\Taskix\Taskix32.exe
                C:\Program Files\VistaDriveIcon\DrvIcon.exe
                C:\WINDOWS\system32\hkcmd.exe
                C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
                C:\Program Files\LClock\LClock.exe
                C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
                C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                C:\Program Files\Mozilla Firefox\firefox.exe
                C:\Program Files\Trend Micro\HijackThis\HJT.exe

                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris
                R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
                O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                O4 - HKLM\..\Run: [Taskix] C:\Program Files\Taskix\Taskix32.exe start
                O4 - HKLM\..\Run: [DrvIcon] C:\Program Files\VistaDriveIcon\DrvIcon.exe
                O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
                O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
                O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
                O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
                O4 - HKCU\..\Run: [LClock] "C:\Program Files\LClock\LClock.exe"
                O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')
                O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                0
                1. ya eut un petit problème sa a pas tout mis (suite)

                  127.0.0.1 offeroptimizer.com
                  127.0.0.1 oinadserve.com
                  127.0.0.1 oinadserver.com
                  127.0.0.1 ojdinteractiva.com
                  127.0.0.1 omniture.com
                  127.0.0.1 oneandonlynetwork.com
                  127.0.0.1 onenetworkdirect.com
                  127.0.0.1 onestat.com
                  127.0.0.1 onewaylinkexchange.net
                  127.0.0.1 onlinecash.com
                  127.0.0.1 onlinerewardcenter.com
                  127.0.0.1 onresponse.com
                  127.0.0.1 openad.infobel.com
                  127.0.0.1 openad.travelnow.com
                  127.0.0.1 openads.friendfinder.com
                  127.0.0.1 openclick.com
                  127.0.0.1 openx.cz
                  127.0.0.1 operaadfilter.com
                  127.0.0.1 ota.cartrawler.com
                  127.0.0.1 overpeer.com
                  127.0.0.1 overture.com
                  127.0.0.1 owebmoney.ru
                  127.0.0.1 oxado.com
                  127.0.0.1 oxcash.com
                  127.0.0.1 p5.omaha.com
                  127.0.0.1 pa.penny-arcade.com
                  127.0.0.1 pagead2.googlesyndication.com
                  127.0.0.1 partage-facile.com
                  127.0.0.1 partner-ads.com
                  127.0.0.1 partner.gonamic.de
                  127.0.0.1 partner.pelikan.cz
                  127.0.0.1 partner.topcities.com
                  127.0.0.1 partner2profit.com
                  127.0.0.1 partnerkonto.de
                  127.0.0.1 partners.priceline.com
                  127.0.0.1 partners.starnetsystems.net
                  127.0.0.1 partnerz.gada.be
                  127.0.0.1 passion-4.com
                  127.0.0.1 passion-4.net
                  127.0.0.1 passport.baidu.com
                  127.0.0.1 pay-ads.com
                  127.0.0.1 pay-to-promote.com
                  127.0.0.1 paycounter.com
                  127.0.0.1 paydayasap.com
                  127.0.0.1 paypopup.com
                  127.0.0.1 payserve.com
                  127.0.0.1 pbnet.ru
                  127.0.0.1 pcash.imlive.com
                  127.0.0.1 pcekspert.com
                  127.0.0.1 pcwizz.com
                  127.0.0.1 pennyweb.com
                  127.0.0.1 pepperjamnetwork.com
                  127.0.0.1 performancing.com
                  127.0.0.1 pgpartner.com
                  127.0.0.1 phoenix-adrunner.mycomputer.com
                  127.0.0.1 phpadsnew.new.natuurpark.nl
                  127.0.0.1 pillscash.com
                  127.0.0.1 pimproll.com
                  127.0.0.1 planetactive.com
                  127.0.0.1 play4traffic.com
                  127.0.0.1 plugrush.com
                  127.0.0.1 pointroll.com
                  127.0.0.1 pop-under.ru
                  127.0.0.1 pop6.com
                  127.0.0.1 pops.freeze.com
                  127.0.0.1 popub.com
                  127.0.0.1 popularix.com
                  127.0.0.1 popunder.ru
                  127.0.0.1 popup.msn.com
                  127.0.0.1 popupad.net
                  127.0.0.1 popupmoney.com
                  127.0.0.1 popupnation.com
                  127.0.0.1 popups.infostart.com
                  127.0.0.1 popups.ru
                  127.0.0.1 popupsponsor.com
                  127.0.0.1 popuptraffic.com
                  127.0.0.1 porngraph.com
                  127.0.0.1 porntrack.com
                  127.0.0.1 postmasterbannernet.com
                  127.0.0.1 potenza.cz
                  127.0.0.1 prchecker.info
                  127.0.0.1 precisionclick.com
                  127.0.0.1 precisioncounter.com
                  127.0.0.1 predictad.com
                  127.0.0.1 premium-offers.com
                  127.0.0.1 premiumcash.de
                  127.0.0.1 primaryads.com
                  127.0.0.1 primetime.net
                  127.0.0.1 prisjakt.research-int.se
                  127.0.0.1 privatecash.com
                  127.0.0.1 pro-advertising.com
                  127.0.0.1 pro-market.net
                  127.0.0.1 pro.i-doctor.co.kr
                  127.0.0.1 proaffili.net
                  127.0.0.1 profero.com
                  127.0.0.1 professorbanner.com
                  127.0.0.1 profiler.engagd.com
                  127.0.0.1 projectwonderful.com
                  127.0.0.1 promo.badoink.com
                  127.0.0.1 promo.elitepvpers.com
                  127.0.0.1 promo1.webcams.nl
                  127.0.0.1 promobenef.com
                  127.0.0.1 promos.fling.com
                  127.0.0.1 promote.opera.com
                  127.0.0.1 promote.pair.com
                  127.0.0.1 promotionpalace.com
                  127.0.0.1 promozia.de
                  127.0.0.1 pronetadvertising.com
                  127.0.0.1 proton-tm.com
                  127.0.0.1 provexia.com
                  127.0.0.1 prsitecheck.com
                  127.0.0.1 psstt.com
                  127.0.0.1 pub-g.ifrance.com
                  127.0.0.1 pub.chez.com
                  127.0.0.1 pub.club-internet.fr
                  127.0.0.1 pub.hardware.fr
                  127.0.0.1 pub.opt.pf
                  127.0.0.1 pub.realmedia.fr
                  127.0.0.1 publi.grupocorreo.es
                  127.0.0.1 publi2.grupocorreo.es
                  127.0.0.1 publiads.com
                  127.0.0.1 publicidad.elmundo.es
                  127.0.0.1 publicidad.ya.com
                  127.0.0.1 publisher.to
                  127.0.0.1 pubs.branchez-vous.com
                  127.0.0.1 pubs.lemonde.fr
                  127.0.0.1 q.azcentral.com
                  127.0.0.1 qckjmp.com
                  127.0.0.1 qctop.com
                  127.0.0.1 qksrv.net
                  127.0.0.1 quantcast.com
                  127.0.0.1 quantserve.com
                  127.0.0.1 quarterserver.de
                  127.0.0.1 questaffiliates.net
                  127.0.0.1 quigo.com
                  127.0.0.1 quinst.com
                  127.0.0.1 rad.msn.com
                  127.0.0.1 radiate.com
                  127.0.0.1 rampidads.com
                  127.0.0.1 rank.ivws.net
                  127.0.0.1 ranking-charts.de
                  127.0.0.1 ranking-hits.de
                  127.0.0.1 ranking-liste.de
                  127.0.0.1 rankyou.com
                  127.0.0.1 rapidcounter.com
                  127.0.0.1 rate.ru
                  127.0.0.1 rb1.design.ru
                  127.0.0.1 realads.realmedia.com
                  127.0.0.1 realcastmedia.com
                  127.0.0.1 realclix.com
                  127.0.0.1 realmedia-a800.d4p.net
                  127.0.0.1 realtechnetwork.com
                  127.0.0.1 realtechnetwork.net
                  127.0.0.1 realtracker.com
                  127.0.0.1 redsherriff.com
                  127.0.0.1 reduxmedia.com
                  127.0.0.1 reefaquarium.biz
                  127.0.0.1 referralware.com
                  127.0.0.1 regnow.com
                  127.0.0.1 reklam.prisjakt.nu
                  127.0.0.1 reklam.rfsl.se
                  127.0.0.1 reklama.mironet.cz
                  127.0.0.1 reklama.reflektor.cz
                  127.0.0.1 reklamcsere.hu
                  127.0.0.1 reklame.unwired-i.net
                  127.0.0.1 reklamer.com.ua
                  127.0.0.1 reliablebanners.com
                  127.0.0.1 relmaxtop.com
                  127.0.0.1 remotead.cnet.com
                  127.0.0.1 reply.mediatris.net
                  127.0.0.1 republika.onet.pl
                  127.0.0.1 retaildirect.realmedia.com
                  127.0.0.1 revenue.net
                  127.0.0.1 revenuedirect.com
                  127.0.0.1 revenuegateway.net
                  127.0.0.1 revenuepilot.com
                  127.0.0.1 revsci.net
                  127.0.0.1 revstats.com
                  127.0.0.1 rewardster.com
                  127.0.0.1 richmails.com
                  127.0.0.1 richmedia.yimg.com
                  127.0.0.1 richwebmaster.com
                  127.0.0.1 richwebmedia.com
                  127.0.0.1 ricollect.research-int.se
                  127.0.0.1 rightmedia.net
                  127.0.0.1 rightstats.com
                  127.0.0.1 rl.auto.ru
                  127.0.0.1 rle.ru
                  127.0.0.1 rmads.msn.com
                  127.0.0.1 rmedia.boston.com
                  127.0.0.1 rmxads.com
                  127.0.0.1 rnd.yxo.ru
                  127.0.0.1 roar.com
                  127.0.0.1 robotreplay.com
                  127.0.0.1 roia.biz
                  127.0.0.1 roings.com
                  127.0.0.1 roiservice.com
                  127.0.0.1 rok.com.com
                  127.0.0.1 rose.ixbt.com
                  127.0.0.1 rotabanner.auto.ru
                  127.0.0.1 rotabanner.com
                  127.0.0.1 rotabanner.izvestia.ru
                  127.0.0.1 rotabanner.rian.ru
                  127.0.0.1 rotator.juggler.inetinteractive.com
                  127.0.0.1 rpts.net
                  127.0.0.1 ru-traffic.com
                  127.0.0.1 ru4.com
                  127.0.0.1 sacserv.com
                  127.0.0.1 safelists.com
                  127.0.0.1 sageanalyst.net
                  127.0.0.1 sbx.pagesjaunes.fr
                  127.0.0.1 scopelight.com
                  127.0.0.1 searchbar.us
                  127.0.0.1 searchfeast.com
                  127.0.0.1 searchmarketing.com
                  127.0.0.1 searchramp.com
                  127.0.0.1 secure.webconnect.net
                  127.0.0.1 secureads.ft.com
                  127.0.0.1 sedoparking.com
                  127.0.0.1 sedotracker.com
                  127.0.0.1 seeq.com
                  127.0.0.1 sensismediasmart.com.au
                  127.0.0.1 seo4india.com
                  127.0.0.1 separtnership.com
                  127.0.0.1 serv0.com
                  127.0.0.1 servedby.netshelter.net
                  127.0.0.1 servethis.com
                  127.0.0.1 serving-sys.com
                  127.0.0.1 sexcounter.com
                  127.0.0.1 sexlist.com
                  127.0.0.1 sextracker.com
                  127.0.0.1 sexystat.com
                  127.0.0.1 sfads.osdn.com
                  127.0.0.1 shareasale.com
                  127.0.0.1 sher.index.hu
                  127.0.0.1 shinystat.com
                  127.0.0.1 shinystat.it
                  127.0.0.1 shoppingads.com
                  127.0.0.1 siccash.com
                  127.0.0.1 sidebar.angelfire.com
                  127.0.0.1 sinoa.com
                  127.0.0.1 sitebrand.geeks.com
                  127.0.0.1 sitelifter.com
                  127.0.0.1 sitemerkezi.net
                  127.0.0.1 sitemeter.com
                  127.0.0.1 sitestat.com
                  127.0.0.1 sm.aport.ru
                  127.0.0.1 sma.punto.net
                  127.0.0.1 smartadserver.com
                  127.0.0.1 smartbizsearch.com
                  127.0.0.1 smartmeds.com
                  127.0.0.1 smfgroup.cjb.net
                  127.0.0.1 smile.modchipstore.com
                  127.0.0.1 snoobi.com
                  127.0.0.1 socialspark.com
                  127.0.0.1 softclick.com.br
                  127.0.0.1 software.global-netcom.de
                  127.0.0.1 softwaresponsor.com
                  127.0.0.1 spa.snap.com
                  127.0.0.1 spacash.com
                  127.0.0.1 sparkstudios.com
                  127.0.0.1 specificclick.net
                  127.0.0.1 specificpop.com
                  127.0.0.1 spezialreporte.de
                  127.0.0.1 spinbox.net
                  127.0.0.1 spinbox.techtracker.com
                  127.0.0.1 spinbox.versiontracker.com
                  127.0.0.1 sponsor4you.net
                  127.0.0.1 sponsorads.de
                  127.0.0.1 sponsoradulto.com
                  127.0.0.1 sponsorpro.de
                  127.0.0.1 sponsors.thoughtsmedia.com
                  127.0.0.1 spottt.com
                  127.0.0.1 sprinks-clicks.about.com
                  127.0.0.1 spylog.com
                  127.0.0.1 spywarelabs.com
                  127.0.0.1 spywarenuker.com
                  127.0.0.1 spywords.com
                  127.0.0.1 ssads.osdn.com
                  127.0.0.1 starffa.com
                  127.0.0.1 start.freeze.com
                  127.0.0.1 stat.dealtime.com
                  127.0.0.1 stat.doxod.net
                  127.0.0.1 stat.pl
                  127.0.0.1 stat.tudou.com
                  127.0.0.1 stat.webmedia.pl
                  127.0.0.1 stat.zenon.net
                  127.0.0.1 statcounter.com
                  127.0.0.1 statgep.hu
                  127.0.0.1 static.fmpub.net
                  127.0.0.1 static.itrack.it
                  127.0.0.1 staticads.btopenworld.com
                  127.0.0.1 statisfy.net
                  127.0.0.1 statistics.ro
                  127.0.0.1 statistik-gallup.net
                  127.0.0.1 statistik.motorpresse.de
                  127.0.0.1 stats.big-boards.com
                  127.0.0.1 stats.blogger.com
                  127.0.0.1 stats.cts-bv.nl
                  127.0.0.1 stats.darkbluesea.com
                  127.0.0.1 stats.directnic.com
                  127.0.0.1 stats.hyperinzerce.cz
                  127.0.0.1 stats.klsoft.com
                  127.0.0.1 stats.surfaid.ihost.com
                  127.0.0.1 stats.unwired-i.net
                  127.0.0.1 stats.wordpress.com
                  127.0.0.1 stats4all.com
                  127.0.0.1 statxpress.com
                  127.0.0.1 stormpay.com
                  127.0.0.1 streamit.hardwarezone.com
                  127.0.0.1 sugoicounter.com
                  127.0.0.1 superclix.de
                  127.0.0.1 superpremium.us
                  127.0.0.1 superstats.com
                  127.0.0.1 supertop.ru
                  127.0.0.1 supertop100.com
                  127.0.0.1 surfmusik-adserver.de
                  127.0.0.1 synergiinteractive.com
                  127.0.0.1 sys.war-online.ru
                  127.0.0.1 tacoda.net
                  127.0.0.1 tangerinenet.biz
                  127.0.0.1 tangozebra.com
                  127.0.0.1 targad.de
                  127.0.0.1 targetnet.com
                  127.0.0.1 targetpoint.com
                  127.0.0.1 targetsaver.com
                  127.0.0.1 targetshop.com
                  127.0.0.1 tcads.net
                  127.0.0.1 teknosurf2.com
                  127.0.0.1 teknosurf3.com
                  127.0.0.1 tenbux.somethingawful.com
                  127.0.0.1 teracent.net
                  127.0.0.1 test.com
                  127.0.0.1 text-link-ads.com
                  127.0.0.1 textad.sexsearch.com
                  127.0.0.1 textads.biz
                  127.0.0.1 textads.opera.com
                  127.0.0.1 textlinks.com
                  127.0.0.1 tfag.de
                  127.0.0.1 theanswerto.com
                  127.0.0.1 thebugs.ws
                  127.0.0.1 thecounter.com
                  127.0.0.1 thefreesitez.com
                  127.0.0.1 therapistla.com
                  127.0.0.1 therichkids.com
                  127.0.0.1 thevictorynetwork.com
                  127.0.0.1 thinkingmedia.net
                  127.0.0.1 thisbanner.com
                  127.0.0.1 thruport.com
                  127.0.0.1 tier1network.com
                  127.0.0.1 tinybar.com
                  127.0.0.1 tizers.net
                  127.0.0.1 tkqlhce.com
                  127.0.0.1 tmpinvalidpheedo.com
                  127.0.0.1 tmsads.tribune.com
                  127.0.0.1 toads.osdn.com
                  127.0.0.1 toolbar.netscape.com
                  127.0.0.1 top-site-list.com
                  127.0.0.1 top.list.ru
                  127.0.0.1 top.mail.ru
                  127.0.0.1 top.one.ru
                  127.0.0.1 top.proext.com
                  127.0.0.1 top.stileproject.com
                  127.0.0.1 top100-images.rambler.ru
                  127.0.0.1 top100.kontraband.com
                  127.0.0.1 top100.mafia.ru
                  127.0.0.1 top100arcades.com
                  127.0.0.1 top100pcgamesites.com
                  127.0.0.1 top123.ro
                  127.0.0.1 top20.com
                  127.0.0.1 top20free.com
                  127.0.0.1 top66.ro
                  127.0.0.1 top90.ro
                  127.0.0.1 topbarh.box.sk
                  127.0.0.1 topblogarea.se
                  127.0.0.1 topbloglists.com
                  127.0.0.1 topbucks.com
                  127.0.0.1 topforall.com
                  127.0.0.1 topgamesites.net
                  127.0.0.1 toplist.cz
                  127.0.0.1 toplist.pornhost.com
                  127.0.0.1 toplista.mw.hu
                  127.0.0.1 toplistcity.com
                  127.0.0.1 toplisted.in
                  127.0.0.1 topmango.com
                  127.0.0.1 topmmorpgsites.com
                  127.0.0.1 topping.com.ua
                  127.0.0.1 topprofits.info
                  127.0.0.1 toprebates.com
                  127.0.0.1 topsearcher.com
                  127.0.0.1 topshop-counter.rambler.ru
                  127.0.0.1 topsir.com
                  127.0.0.1 topsites.com.br
                  127.0.0.1 topstats.com
                  127.0.0.1 topstats.net
                  127.0.0.1 totemcash.com
                  127.0.0.1 tour.brazzers.com
                  127.0.0.1 tps108.org
                  127.0.0.1 tqlkg.com
                  127.0.0.1 track.anchorfree.com
                  127.0.0.1 track.collegehumor.com
                  127.0.0.1 track.freexxxhost.net
                  127.0.0.1 track.mybloglog.com
                  127.0.0.1 track2.mybloglog.com
                  127.0.0.1 tracker.icerocket.com
                  127.0.0.1 tracking.frantic.com
                  127.0.0.1 tracking.yourfilehost.com
                  127.0.0.1 tracking101.com
                  127.0.0.1 trackingsoft.com
                  127.0.0.1 trackmysales.com
                  127.0.0.1 tradedoubler.com
                  127.0.0.1 traffic-exchange.com
                  127.0.0.1 traffic.liveuniversenetwork.com
                  127.0.0.1 trafficcdn.liveuniversenetwork.com
                  127.0.0.1 trafficholder.com
                  127.0.0.1 trafficleader.com
                  127.0.0.1 trafficmasterz.net
                  127.0.0.1 trafficmaxx.de
                  127.0.0.1 trafficmp.com
                  127.0.0.1 trafficsecrets.com
                  127.0.0.1 trafficstrategies.com
                  127.0.0.1 trafficswarm.com
                  127.0.0.1 trafficsyndicate.com
                  127.0.0.1 traffictrader.net
                  127.0.0.1 trafficvenue.net
                  127.0.0.1 trafic.ro
                  127.0.0.1 traficdublu.ro
                  127.0.0.1 trakkerd.net
                  127.0.0.1 travis.bosscasinos.com
                  127.0.0.1 trax.channelgator.com
                  127.0.0.1 trekblue.com
                  127.0.0.1 trekdata.com
                  127.0.0.1 tribalfusion.com
                  127.0.0.1 trix.net
                  127.0.0.1 trk.advisor.com
                  127.0.0.1 truehits.net
                  127.0.0.1 truehits1.gits.net.th
                  127.0.0.1 truehits2.gits.net.th
                  127.0.0.1 tsms-ad.tsms.com
                  127.0.0.1 tyroo.com
                  127.0.0.1 u9nation.com
                  127.0.0.1 ubt.ign.com
                  127.0.0.1 ukaffiliates2.com
                  127.0.0.1 ukbanners.com
                  127.0.0.1 ultimate-freestuff.com
                  127.0.0.1 ultsearch.com
                  127.0.0.1 untd.com
                  127.0.0.1 updated.com
                  127.0.0.1 upspiral.com
                  127.0.0.1 urlcash.net
                  127.0.0.1 us.a1.yimg.com
                  127.0.0.1 usapromotravel.com
                  127.0.0.1 usmsad.tom.com
                  127.0.0.1 utarget.co.uk
                  127.0.0.1 utils.mediageneral.net
                  127.0.0.1 v1.cnzz.com
                  127.0.0.1 validclick.com
                  127.0.0.1 valuead.com
                  127.0.0.1 valueclick.com
                  127.0.0.1 valueclick.net
                  127.0.0.1 valueclickmedia.com
                  127.0.0.1 valuecommerce.com
                  127.0.0.1 valuesponsor.com
                  127.0.0.1 veille-referencement.com
                  127.0.0.1 vendaregroup.com
                  127.0.0.1 vericlick.com
                  127.0.0.1 vg.ad.asap-asp.net
                  127.0.0.1 vibrantmedia.com
                  127.0.0.1 video-stats.video.google.com
                  127.0.0.1 view4cash.de
                  127.0.0.1 viewpoint.com
                  127.0.0.1 vipermailer.com
                  127.0.0.1 viprhealthcare.typepad.com
                  127.0.0.1 visistat.com
                  127.0.0.1 visit.webhosting.yahoo.com
                  127.0.0.1 visitorprofiler.com
                  127.0.0.1 vrs.cz
                  127.0.0.1 vs.tucows.com
                  127.0.0.1 w3exit.com
                  127.0.0.1 wads.webteh.com
                  127.0.0.1 warlog.info
                  127.0.0.1 warlog.ru
                  127.0.0.1 web-stat.com
                  127.0.0.1 web2.deja.com
                  127.0.0.1 webads.co.nz
                  127.0.0.1 webads.nl
                  127.0.0.1 webangel.ru
                  127.0.0.1 webcash.nl
                  127.0.0.1 webcounter.cz
                  127.0.0.1 webcounter.goweb.de
                  127.0.0.1 webmasterplan.com
                  127.0.0.1 webpower.com
                  127.0.0.1 webreseau.com
                  127.0.0.1 websidestory.com
                  127.0.0.1 websponsors.com
                  127.0.0.1 webstat.com
                  127.0.0.1 webstat.dk
                  127.0.0.1 webstat.net
                  127.0.0.1 webtrack.it
                  127.0.0.1 webtraxx.de
                  127.0.0.1 webtrendslive.com
                  127.0.0.1 wegcash.com
                  127.0.0.1 werbung.meteoxpress.com
                  127.0.0.1 werbung.world4you.com
                  127.0.0.1 wetrack.it
                  127.0.0.1 whenu.com
                  127.0.0.1 whispa.com
                  127.0.0.1 whoisonline.net
                  127.0.0.1 wiadomosci.onet.pl
                  127.0.0.1 widgetbucks.com
                  127.0.0.1 wikia-ads.wikia.com
                  127.0.0.1 window.nixnet.cz
                  127.0.0.1 wintricksbanner.googlepages.com
                  127.0.0.1 wipub.com
                  127.0.0.1 witch-counter.de
                  127.0.0.1 wmirk.ru
                  127.0.0.1 wondoads.de
                  127.0.0.1 woopra.com
                  127.0.0.1 worldbe.com
                  127.0.0.1 worldofwarcraft100.com
                  127.0.0.1 wtlive.com
                  127.0.0.1 wustat.windows.com
                  127.0.0.1 www-banner.chat.ru
                  127.0.0.1 www-google-analytics.l.google.com
                  127.0.0.1 www.adsxchange.lv
                  127.0.0.1 www.banner-link.com.br
                  127.0.0.1 www.dnps.com
                  127.0.0.1 www.kaplanindex.com
                  127.0.0.1 www.money4exit.de
                  127.0.0.1 www.photo-ads.co.uk
                  127.0.0.1 www.sponsor2002.de
                  127.0.0.1 x-traceur.com
                  127.0.0.1 x.mycity.com
                  127.0.0.1 x6.yakiuchi.com
                  127.0.0.1 xbanner.cz
                  127.0.0.1 xchange.awmcenter.eu
                  127.0.0.1 xchange.ro
                  127.0.0.1 xclicks.net
                  127.0.0.1 xiti.com
                  127.0.0.1 xponsor.com
                  127.0.0.1 xq1.net
                  127.0.0.1 xrea.com
                  127.0.0.1 xtremetop100.com
                  127.0.0.1 xtrocash.org
                  127.0.0.1 xxxcounter.com
                  127.0.0.1 xxxtoolbar.com
                  127.0.0.1 xzoomy.com
                  127.0.0.1 y.ibsys.com
                  127.0.0.1 yadro.ru
                  127.0.0.1 yandex.ru
                  127.0.0.1 yceml.net
                  127.0.0.1 yesadvertising.com
                  127.0.0.1 yieldmanager.com
                  127.0.0.1 yieldmanager.edgesuite.net
                  127.0.0.1 youclick2earn.com
                  127.0.0.1 yournetaccess.com
                  127.0.0.1 yourtracking.net
                  127.0.0.1 z.times.lv
                  127.0.0.1 z5x.net
                  127.0.0.1 zangocash.com
                  127.0.0.1 zanox-affiliate.de
                  127.0.0.1 zanox.com
                  127.0.0.1 zeads.com
                  127.0.0.1 zedo.com
                  127.0.0.1 zencudo.co.uk
                  127.0.0.1 zenzuu.com
                  127.0.0.1 zeus.developershed.com
                  127.0.0.1 zintext.com
                  127.0.0.1 zmedia.com

                  »»»»»»»»»»»»»»»»»»»»»»»» VACFix

                  VACFix
                  Credits: Malware Analysis & Diagnostic
                  Code: S!Ri

                  »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

                  S!Ri's WS2Fix: LSP not Found.

                  »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

                  GenericRenosFix by S!Ri

                  »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

                  »»»»»»»»»»»»»»»»»»»»»»»» IEDFix

                  IEDFix
                  Credits: Malware Analysis & Diagnostic
                  Code: S!Ri

                  »»»»»»»»»»»»»»»»»»»»»»»» 404Fix

                  404Fix
                  Credits: Malware Analysis & Diagnostic
                  Code: S!Ri

                  »»»»»»»»»»»»»»»»»»»»»»»» RK

                  »»»»»»»»»»»»»»»»»»»»»»»» DNS

                  Description: SAGEM Wi-Fi 11g USB adapter - Miniport d'ordonnancement de paquets
                  DNS Server Search Order: 192.168.1.1

                  HKLM\SYSTEM\CCS\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: DhcpNameServer=192.168.1.1

                  »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

                  »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
                  !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                  "System"="lsass.exe"

                  »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

                  Nettoyage terminé.

                  »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
                  !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                  SrchSTS.exe by S!Ri
                  Search SharedTaskScheduler's .dll

                  »»»»»»»»»»»»»»»»»»»»»»»» Fin
                  0
                  1. SmitFraudFix v2.373

                    Rapport fait à 23:02:08,81, 10/11/2008
                    Executé à partir de C:\Documents and Settings\Miminou\Bureau\T‚l‚chargements\SmitfraudFix
                    OS: Console - Windows Trust 3.0 (Service Pack 3: v5512) - Windows_NT
                    Le type du système de fichiers est NTFS
                    Fix executé en mode normal

                    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
                    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                    SrchSTS.exe by S!Ri
                    Search SharedTaskScheduler's .dll

                    »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

                    »»»»»»»»»»»»»»»»»»»»»»»» hosts

                    127.0.0.1 localhost
                    127.0.0.1 rad.msn.com
                    127.0.0.1 rad.live.com
                    127.0.0.1 ads1.msn.com
                    127.0.0.1 adfarm.mediaplex.com
                    127.0.0.1 101com.com
                    127.0.0.1 101order.com
                    127.0.0.1 103bees.com
                    127.0.0.1 1100i.com
                    127.0.0.1 123banners.com
                    127.0.0.1 123found.com
                    127.0.0.1 123pagerank.com
                    127.0.0.1 180searchassistant.com
                    127.0.0.1 180solutions.com
                    127.0.0.1 207.net
                    127.0.0.1 247media.com
                    127.0.0.1 247realmedia.com
                    127.0.0.1 24pm-affiliation.com
                    127.0.0.1 2log.com
                    127.0.0.1 2mdn.net
                    127.0.0.1 2o7.net
                    127.0.0.1 4affiliate.net
                    127.0.0.1 4d5.net
                    127.0.0.1 50websads.com
                    127.0.0.1 518ad.com
                    127.0.0.1 555-0134.com
                    127.0.0.1 600z.com
                    127.0.0.1 777partner.com
                    127.0.0.1 777seo.com
                    127.0.0.1 7adpower.com
                    127.0.0.1 7search.com
                    127.0.0.1 911promotion.com
                    127.0.0.1 99count.com
                    127.0.0.1 a-counter.kiev.ua
                    127.0.0.1 a.consumer.net
                    127.0.0.1 a.gismeteo.ru
                    127.0.0.1 a.mktw.net
                    127.0.0.1 a.softpedia.com
                    127.0.0.1 a.ucoz.ru
                    127.0.0.1 a.windowsitpro.com
                    127.0.0.1 a.wowinterface.com
                    127.0.0.1 a.xanga.com
                    127.0.0.1 a32.g.a.yimg.com
                    127.0.0.1 aaddzz.com
                    127.0.0.1 abacho.net
                    127.0.0.1 abcnews.footprint.net
                    127.0.0.1 absurdprofits.com
                    127.0.0.1 abz.com
                    127.0.0.1 ac.rnm.ca
                    127.0.0.1 accelerator-media.com
                    127.0.0.1 accounts.pkr.com
                    127.0.0.1 acsseo.com
                    127.0.0.1 action.ientry.net
                    127.0.0.1 actionsplash.com
                    127.0.0.1 actualdeals.com
                    127.0.0.1 ad-flow.com
                    127.0.0.1 ad-images.suntimes.com
                    127.0.0.1 ad-logics.com
                    127.0.0.1 ad-rotator.com
                    127.0.0.1 ad-server.gulasidorna.se
                    127.0.0.1 ad-souk.com
                    127.0.0.1 ad-space.net
                    127.0.0.1 ad-tech.com
                    127.0.0.1 ad-universe.com
                    127.0.0.1 ad-up.com
                    127.0.0.1 ad.100.tbn.ru
                    127.0.0.1 ad.37.com
                    127.0.0.1 ad.71i.de
                    127.0.0.1 ad.980x.com
                    127.0.0.1 ad.a8.net
                    127.0.0.1 ad.abcnews.com
                    127.0.0.1 ad.abctv.com
                    127.0.0.1 ad.about.com
                    127.0.0.1 ad.aboutit.de
                    127.0.0.1 ad.aboutwebservices.com
                    127.0.0.1 ad.abum.com
                    127.0.0.1 ad.aftenposten.no
                    127.0.0.1 ad.aftonbladet.se
                    127.0.0.1 ad.allstar.cz
                    127.0.0.1 ad.altervista.org
                    127.0.0.1 ad.anuntis.com
                    127.0.0.1 ad.asap-asp.net
                    127.0.0.1 ad.bondage.com
                    127.0.0.1 ad.centrum.cz
                    127.0.0.1 ad.cgi.cz
                    127.0.0.1 ad.chip.de
                    127.0.0.1 ad.choiceradio.com
                    127.0.0.1 ad.clix.pt
                    127.0.0.1 ad.digitallook.com
                    127.0.0.1 ad.directconnect.se
                    127.0.0.1 ad.disney.go.com
                    127.0.0.1 ad.domainfactory.de
                    127.0.0.1 ad.dvdforum.nu
                    127.0.0.1 ad.e-kolay.net
                    127.0.0.1 ad.e-not.net
                    127.0.0.1 ad.eurosport.com
                    127.0.0.1 ad.fragzone.se
                    127.0.0.1 ad.free6.com
                    127.0.0.1 ad.freecity.de
                    127.0.0.1 ad.gate24.ch
                    127.0.0.1 ad.grafika.cz
                    127.0.0.1 ad.harmony-central.com
                    127.0.0.1 ad.hbv.de
                    127.0.0.1 ad.howstuffworks.com
                    127.0.0.1 ad.hyena.cz
                    127.0.0.1 ad.iinfo.cz
                    127.0.0.1 ad.infoseek.com
                    127.0.0.1 ad.investopedia.com
                    127.0.0.1 ad.ir.ru
                    127.0.0.1 ad.isohunt.com
                    127.0.0.1 ad.jamba.net
                    127.0.0.1 ad.jetsoftware.com
                    127.0.0.1 ad.keenspace.com
                    127.0.0.1 ad.krutilka.ru
                    127.0.0.1 ad.liveinternet.ru
                    127.0.0.1 ad.lupa.cz
                    127.0.0.1 ad.media-servers.net
                    127.0.0.1 ad.mediastorm.hu
                    127.0.0.1 ad.mgd.de
                    127.0.0.1 ad.moscowtimes.ru
                    127.0.0.1 ad.musicmatch.com
                    127.0.0.1 ad.nachtagenten.de
                    127.0.0.1 ad.nozonedata.com
                    127.0.0.1 ad.nrk.no
                    127.0.0.1 ad.nttnavi.co.jp
                    127.0.0.1 ad.nwt.cz
                    127.0.0.1 ad.pbs.bb.ru
                    127.0.0.1 ad.pdassi.de
                    127.0.0.1 ad.playground.ru
                    127.0.0.1 ad.preferances.com
                    127.0.0.1 ad.profiwin.de
                    127.0.0.1 ad.prv.pl
                    127.0.0.1 ad.rambler.ru
                    127.0.0.1 ad.reunion.com
                    127.0.0.1 ad.sensismediasmart.com.au
                    127.0.0.1 ad.seznam.cz
                    127.0.0.1 ad.simgames.net
                    127.0.0.1 ad.slutload.com
                    127.0.0.1 ad.specificmedia.com
                    127.0.0.1 ad.surfsecret.com
                    127.0.0.1 ad.t2t2.com
                    127.0.0.1 ad.tbn.ru
                    127.0.0.1 ad.tiscali.com
                    127.0.0.1 ad.tisnet.net.tw
                    127.0.0.1 ad.tomshardware.com
                    127.0.0.1 ad.top50.to
                    127.0.0.1 ad.tv2.no
                    127.0.0.1 ad.tweakpc.de
                    127.0.0.1 ad.twitchguru.com
                    127.0.0.1 ad.usatoday.com
                    127.0.0.1 ad.virtual-nights.com
                    127.0.0.1 ad.warcraftmovies.com
                    127.0.0.1 ad.watch.impress.co.jp
                    127.0.0.1 ad.wavu.hu
                    127.0.0.1 ad.way.cz
                    127.0.0.1 ad.weatherbug.com
                    127.0.0.1 ad.wz.cz
                    127.0.0.1 ad.yadro.ru
                    127.0.0.1 ad.yourmedia.com
                    127.0.0.1 ad0.bigmir.net
                    127.0.0.1 ad01.mediacorpsingapore.com
                    127.0.0.1 ad1.emediate.dk
                    127.0.0.1 ad1.emule-project.org
                    127.0.0.1 ad1.gamezone.com
                    127.0.0.1 ad1.hardware.no
                    127.0.0.1 ad1.kde.cz
                    127.0.0.1 ad1.lbe.ru
                    127.0.0.1 ad1.pamedia.com.au
                    127.0.0.1 ad1.zendmedia.com
                    127.0.0.1 ad2.atlas.cz
                    127.0.0.1 ad2.bb.ru
                    127.0.0.1 ad2.doublepimp.com
                    127.0.0.1 ad2.iinfo.cz
                    127.0.0.1 ad2.ip.ro
                    127.0.0.1 ad2.lbe.ru
                    127.0.0.1 ad2.linxcz.cz
                    127.0.0.1 ad2.lupa.cz
                    127.0.0.1 ad2.mamma.com
                    127.0.0.1 ad2.pamedia.com.au
                    127.0.0.1 ad2.seznam.cz
                    127.0.0.1 ad2.tisnet.net.tw
                    127.0.0.1 ad2flash.com
                    127.0.0.1 ad3.iinfo.cz
                    127.0.0.1 ad3.pamedia.com.au
                    127.0.0.1 ad3.tisnet.net.tw
                    127.0.0.1 ad4.atlas.cz
                    127.0.0.1 ad4.tisnet.net.tw
                    127.0.0.1 ad41.atlas.cz
                    127.0.0.1 ad4ex.com
                    127.0.0.1 adaos-ads.net
                    127.0.0.1 adbaaz.com
                    127.0.0.1 adbanner.ro
                    127.0.0.1 adbard.net
                    127.0.0.1 adboost.de.vu
                    127.0.0.1 adboost.net
                    127.0.0.1 adbot.com
                    127.0.0.1 adbrite.com
                    127.0.0.1 adbunker.com
                    127.0.0.1 adbureau.net
                    127.0.0.1 adbutler.com
                    127.0.0.1 adbutler.de
                    127.0.0.1 adbuyer3.lycos.com
                    127.0.0.1 adcell.de
                    127.0.0.1 adcenter.mdf.se
                    127.0.0.1 adcenter.net
                    127.0.0.1 adcenter.rxpg.com
                    127.0.0.1 adcentriconline.com
                    127.0.0.1 adcept.net
                    127.0.0.1 adclick.com
                    127.0.0.1 adclick.gamespy.com
                    127.0.0.1 adclick.ro
                    127.0.0.1 adclient.rottentomatoes.com
                    127.0.0.1 adclient1.tucows.com
                    127.0.0.1 adcomplete.com
                    127.0.0.1 adconion.com
                    127.0.0.1 adcontent.gamespy.com
                    127.0.0.1 adcorps.com
                    127.0.0.1 adcycle.com
                    127.0.0.1 add.newmedia.cz
                    127.0.0.1 addcontrol.net
                    127.0.0.1 addesktop.com
                    127.0.0.1 addfreestats.com
                    127.0.0.1 addme.com
                    127.0.0.1 addynamix.com
                    127.0.0.1 adecn.com
                    127.0.0.1 ademails.com
                    127.0.0.1 adengage.com
                    127.0.0.1 adext.inkclub.com
                    127.0.0.1 adfarm.mediaplex.com
                    127.0.0.1 adfiles.api.no
                    127.0.0.1 adflight.com
                    127.0.0.1 adfly.com
                    127.0.0.1 adforce.com
                    127.0.0.1 adform.com
                    127.0.0.1 adgardener.com
                    127.0.0.1 adgoto.com
                    127.0.0.1 adgridwork.com
                    127.0.0.1 adhostcenter.com
                    127.0.0.1 adi.mainichi.co.jp
                    127.0.0.1 adimage.asiaone.com.sg
                    127.0.0.1 adimages.been.com
                    127.0.0.1 adimages.carsoup.com
                    127.0.0.1 adimages.go.com
                    127.0.0.1 adimages.homestore.com
                    127.0.0.1 adimages.sanomawsoy.fi
                    127.0.0.1 adimg.cnet.com
                    127.0.0.1 adimg.com.com
                    127.0.0.1 adimg1.chosun.com
                    127.0.0.1 adimgs.sapo.pt
                    127.0.0.1 adincl.gopher.com
                    127.0.0.1 adinjector.net
                    127.0.0.1 adinterax.com
                    127.0.0.1 adisfy.com
                    127.0.0.1 adition.com
                    127.0.0.1 adition.de
                    127.0.0.1 adition.net
                    127.0.0.1 adjug.com
                    127.0.0.1 adjuggler.yourdictionary.com
                    127.0.0.1 adjustnetwork.com
                    127.0.0.1 adlegend.com
                    127.0.0.1 adlink.de
                    127.0.0.1 adlog.com.com
                    127.0.0.1 adlogix.net
                    127.0.0.1 adm.ad.asap-asp.net
                    127.0.0.1 adman.freeze.com
                    127.0.0.1 admanagement.ch
                    127.0.0.1 admanager.btopenworld.com
                    127.0.0.1 admanager.carsoup.com
                    127.0.0.1 admarketplace.net
                    127.0.0.1 admaximize.com
                    127.0.0.1 admedia.ro
                    127.0.0.1 admeta.com
                    127.0.0.1 admex.com
                    127.0.0.1 adminder.com
                    127.0.0.1 adminshop.com
                    127.0.0.1 admonitor.com
                    127.0.0.1 admonitor.net
                    127.0.0.1 admotion.com.ar
                    127.0.0.1 adnet.asahi.com
                    127.0.0.1 adnet.biz
                    127.0.0.1 adnet.ru
                    127.0.0.1 adnews.maddog2000.de
                    127.0.0.1 adocean.pl
                    127.0.0.1 adonspot.com
                    127.0.0.1 adorigin.com
                    127.0.0.1 adpepper.dk
                    127.0.0.1 adpick.switchboard.com
                    127.0.0.1 adpost.com
                    127.0.0.1 adprofile.net
                    127.0.0.1 adprojekt.pl
                    127.0.0.1 adpush.dreamscape.com
                    127.0.0.1 adq.nextag.com
                    127.0.0.1 adreactor.com
                    127.0.0.1 adredirect.com
                    127.0.0.1 adremedy.com
                    127.0.0.1 adrenaline.cz
                    127.0.0.1 adrenalinesk.sk
                    127.0.0.1 adreporting.com
                    127.0.0.1 adres.internet.com
                    127.0.0.1 adrevolver.com
                    127.0.0.1 adriver.ru
                    127.0.0.1 adrotate.de
                    127.0.0.1 adrotator.net
                    127.0.0.1 ads-205.quarterserver.de
                    127.0.0.1 ads-click.com
                    127.0.0.1 ads-de.spray.net
                    127.0.0.1 ads-dev.youporn.com
                    127.0.0.1 ads.100asians.com
                    127.0.0.1 ads.20minutos.es
                    127.0.0.1 ads.5ci.lt
                    127.0.0.1 ads.aceweb.net
                    127.0.0.1 ads.administrator.de
                    127.0.0.1 ads.adshareware.net
                    127.0.0.1 ads.adultfriendfinder.com
                    127.0.0.1 ads.adultking.com
                    127.0.0.1 ads.advance.net
                    127.0.0.1 ads.adverline.com
                    127.0.0.1 ads.affiliates.match.com
                    127.0.0.1 ads.allsites.com
                    127.0.0.1 ads.alt.com
                    127.0.0.1 ads.alwayson-network.com
                    127.0.0.1 ads.amdmb.com
                    127.0.0.1 ads.amigos.com
                    127.0.0.1 ads.anm.co.uk
                    127.0.0.1 ads.aol.com
                    127.0.0.1 ads.archivefree.com
                    127.0.0.1 ads.as4x.tmcs.net
                    127.0.0.1 ads.asia1.com.sg
                    127.0.0.1 ads.asiafriendfinder.com
                    127.0.0.1 ads.aspalliance.com
                    127.0.0.1 ads.beenetworks.net
                    127.0.0.1 ads.belointeractive.com
                    127.0.0.1 ads.berlinonline.de
                    127.0.0.1 ads.betanews.com
                    127.0.0.1 ads.bigchurch.com
                    127.0.0.1 ads.bigcitytools.com
                    127.0.0.1 ads.bigfoot.com
                    127.0.0.1 ads.billiton.de
                    127.0.0.1 ads.bitsonthewire.com
                    127.0.0.1 ads.blick.ch
                    127.0.0.1 ads.bloomberg.com
                    127.0.0.1 ads.bluemountain.com
                    127.0.0.1 ads.box.sk
                    127.0.0.1 ads.brabys.com
                    127.0.0.1 ads.businessweek.com
                    127.0.0.1 ads.canalblog.com
                    127.0.0.1 ads.canoe.ca
                    127.0.0.1 ads.cavello.com
                    127.0.0.1 ads.cbc.ca
                    127.0.0.1 ads.cc-dt.com
                    127.0.0.1 ads.cdfreaks.com
                    127.0.0.1 ads.centraliprom.com
                    127.0.0.1 ads.cgnetworks.com
                    127.0.0.1 ads.channel4.com
                    127.0.0.1 ads.cimedia.com
                    127.0.0.1 ads.clanservers.com
                    127.0.0.1 ads.clearchannel.com
                    127.0.0.1 ads.cnn.com
                    127.0.0.1 ads.codebetter.com
                    127.0.0.1 ads.collegclub.com
                    127.0.0.1 ads.com.com
                    127.0.0.1 ads.cooperhosting.com
                    127.0.0.1 ads.cooperhosting.net
                    127.0.0.1 ads.creativematch.com
                    127.0.0.1 ads.currantbun.com
                    127.0.0.1 ads.cyberfight.ru
                    127.0.0.1 ads.cybersales.cz
                    127.0.0.1 ads.dada.it
                    127.0.0.1 ads.danworld.net
                    127.0.0.1 ads.datinggold.com
                    127.0.0.1 ads.datingyes.com
                    127.0.0.1 ads.dazoot.ro
                    127.0.0.1 ads.dbforums.com
                    127.0.0.1 ads.ddj.com
                    127.0.0.1 ads.deltha.hu
                    127.0.0.1 ads.dennisnet.co.uk
                    127.0.0.1 ads.desmoinesregister.com
                    127.0.0.1 ads.detelefoongids.nl
                    127.0.0.1 ads.developershed.com
                    127.0.0.1 ads.deviantart.com
                    127.0.0.1 ads.digital-digest.com
                    127.0.0.1 ads.digitalmedianet.com
                    127.0.0.1 ads.digitalpoint.com
                    127.0.0.1 ads.directionsmag.com
                    127.0.0.1 ads.discovery.com
                    127.0.0.1 ads.dk
                    127.0.0.1 ads.domeus.com
                    127.0.0.1 ads.edbindex.dk
                    127.0.0.1 ads.einmedia.com
                    127.0.0.1 ads.electrocelt.com
                    127.0.0.1 ads.elitetrader.com
                    127.0.0.1 ads.erotism.com
                    127.0.0.1 ads.esam.ro
                    127.0.0.1 ads.esmas.com
                    127.0.0.1 ads.eu.msn.com
                    127.0.0.1 ads.eudora.com
                    127.0.0.1 ads.exhedra.com
                    127.0.0.1 ads.expedia.com
                    127.0.0.1 ads.ezboard.com
                    127.0.0.1 ads.fairfax.com.au
                    127.0.0.1 ads.ferianc.com
                    127.0.0.1 ads.filmup.com
                    127.0.0.1 ads.firingsquad.com
                    127.0.0.1 ads.flooble.com
                    127.0.0.1 ads.fool.com
                    127.0.0.1 ads.football.co.uk
                    127.0.0.1 ads.forbes.com
                    127.0.0.1 ads.forbes.net
                    127.0.0.1 ads.forium.de
                    127.0.0.1 ads.fortunecity.com
                    127.0.0.1 ads.foxkidseurope.net
                    127.0.0.1 ads.freecity.de
                    127.0.0.1 ads.freeze.com
                    127.0.0.1 ads.friendfinder.com
                    127.0.0.1 ads.ft.com
                    127.0.0.1 ads.game.net
                    127.0.0.1 ads.gamecity.net
                    127.0.0.1 ads.gameforgeads.de
                    127.0.0.1 ads.gamershell.com
                    127.0.0.1 ads.gamespy.com
                    127.0.0.1 ads.gamespyid.com
                    127.0.0.1 ads.gamigo.de
                    127.0.0.1 ads.gaming-universe.de
                    127.0.0.1 ads.garagegames.com
                    127.0.0.1 ads.gawker.com
                    127.0.0.1 ads.globeandmail.com
                    127.0.0.1 ads.goyk.com
                    127.0.0.1 ads.gradfinder.com
                    127.0.0.1 ads.grindinggears.com
                    127.0.0.1 ads.guardian.co.uk
                    127.0.0.1 ads.guardianunlimited.co.uk
                    127.0.0.1 ads.guru3d.com
                    127.0.0.1 ads.harpers.org
                    127.0.0.1 ads.hbv.de
                    127.0.0.1 ads.heartlight.org
                    127.0.0.1 ads.hollywood.com
                    127.0.0.1 ads.humorbua.no
                    127.0.0.1 ads.iafrica.com
                    127.0.0.1 ads.ibest.com.br
                    127.0.0.1 ads.iboost.com
                    127.0.0.1 ads.icq.com
                    127.0.0.1 ads.ign.com
                    127.0.0.1 ads.imdb.com
                    127.0.0.1 ads.img.co.za
                    127.0.0.1 ads.indiatimes.com
                    127.0.0.1 ads.inetfast.com
                    127.0.0.1 ads.inetinteractive.com
                    127.0.0.1 ads.infi.net
                    127.0.0.1 ads.infomediaindia.com
                    127.0.0.1 ads.infospace.com
                    127.0.0.1 ads.ingame.de
                    127.0.0.1 ads.internic.co.il
                    127.0.0.1 ads.inthemix.com.au
                    127.0.0.1 ads.ipowerweb.com
                    127.0.0.1 ads.isoftmarketing.com
                    127.0.0.1 ads.itv.com
                    127.0.0.1 ads.iwon.com
                    127.0.0.1 ads.jamba.cz
                    127.0.0.1 ads.jewishfriendfinder.com
                    127.0.0.1 ads.jimworld.com
                    127.0.0.1 ads.jobsite.co.uk
                    127.0.0.1 ads.jpost.com
                    127.0.0.1 ads.jubii.dk
                    127.0.0.1 ads.kaktuz.net
                    127.0.0.1 ads.kinobox.cz
                    127.0.0.1 ads.kinxxx.com
                    127.0.0.1 ads.krawall.de
                    127.0.0.1 ads.lamp-solutions.de
                    127.0.0.1 ads.linuxjournal.com
                    127.0.0.1 ads.linuxsecurity.com
                    127.0.0.1 ads.lnkworld.com
                    127.0.0.1 ads.localnow.com
                    127.0.0.1 ads.lvz-online.de
                    127.0.0.1 ads.lycos-europe.com
                    127.0.0.1 ads.lycos.com
                    127.0.0.1 ads.macapper.com
                    127.0.0.1 ads.macupdate.com
                    127.0.0.1 ads.madison.com
                    127.0.0.1 ads.mambocommunities.com
                    127.0.0.1 ads.mariuana.it
                    127.0.0.1 ads.mcafee.com
                    127.0.0.1 ads.mediaodyssey.com
                    127.0.0.1 ads.mediaturf.net
                    127.0.0.1 ads.metropol.dk
                    127.0.0.1 ads.mgnetwork.com
                    127.0.0.1 ads.mobygames.com
                    127.0.0.1 ads.monster.com
                    127.0.0.1 ads.msn.com
                    127.0.0.1 ads.multimania.lycos.fr
                    127.0.0.1 ads.myguysolutions.com
                    127.0.0.1 ads.neoseeker.com
                    127.0.0.1 ads.neowin.net
                    127.0.0.1 ads.netclusive.de
                    127.0.0.1 ads.netmechanic.com
                    127.0.0.1 ads.newcity.com
                    127.0.0.1 ads.newcitynet.com
                    127.0.0.1 ads.newdream.net
                    127.0.0.1 ads.newmedia.cz
                    127.0.0.1 ads.newsint.co.uk
                    127.0.0.1 ads.newsquest.co.uk
                    127.0.0.1 ads.newtimes.com
                    127.0.0.1 ads.ninemsn.com.au
                    127.0.0.1 ads.nola.com
                    127.0.0.1 ads.nordichardware.com
                    127.0.0.1 ads.nordichardware.se
                    127.0.0.1 ads.nwsource.com
                    127.0.0.1 ads.nyi.net
                    127.0.0.1 ads.nypost.com
                    127.0.0.1 ads.nytimes.com
                    127.0.0.1 ads.nyx.cz
                    127.0.0.1 ads.nzcity.co.nz
                    127.0.0.1 ads.ole.com
                    127.0.0.1 ads.oneplace.com
                    127.0.0.1 ads.optusnet.com.au
                    127.0.0.1 ads.osdn.com
                    127.0.0.1 ads.ourbrisbane.com
                    127.0.0.1 ads.outpersonals.com
                    127.0.0.1 ads.overclockers.at
                    127.0.0.1 ads.passion.com
                    127.0.0.1 ads.pastemagazine.com
                    127.0.0.1 ads.pcper.com
                    127.0.0.1 ads.peel.com
                    127.0.0.1 ads.penny-arcade.com
                    127.0.0.1 ads.phpclasses.org
                    127.0.0.1 ads.pittsburghlive.com
                    127.0.0.1 ads.planet.nl
                    127.0.0.1 ads.planetactive.com
                    127.0.0.1 ads.planetamd64.com
                    127.0.0.1 ads.pni.com
                    127.0.0.1 ads.powweb.com
                    127.0.0.1 ads.primeinteractive.net
                    127.0.0.1 ads.prisacom.com
                    127.0.0.1 ads.pro-market.net
                    127.0.0.1 ads.quoka.de
                    127.0.0.1 ads.realcities.com
                    127.0.0.1 ads.realmedia.de
                    127.0.0.1 ads.recoletos.es
                    127.0.0.1 ads.rediff.com
                    127.0.0.1 ads.redtube.com
                    127.0.0.1 ads.resoom.de
                    127.0.0.1 ads.rivals.net
                    127.0.0.1 ads.rockstargames.com
                    127.0.0.1 ads.rottentomatoes.com
                    127.0.0.1 ads.rpgdot.com
                    127.0.0.1 ads.rpgui.com
                    127.0.0.1 ads.satyamonline.com
                    127.0.0.1 ads.savannahnow.com
                    127.0.0.1 ads.scifi.com
                    127.0.0.1 ads.seniorfriendfinder.com
                    127.0.0.1 ads.shareprovider.com
                    127.0.0.1 ads.shizmoo.com
                    127.0.0.1 ads.sify.com
                    127.0.0.1 ads.simtel.net
                    127.0.0.1 ads.skins.be
                    127.0.0.1 ads.slim.com
                    127.0.0.1 ads.smartclick.com
                    127.0.0.1 ads.soft32.com
                    127.0.0.1 ads.sourcelabs.com
                    127.0.0.1 ads.space.com
                    127.0.0.1 ads.sptimes.com
                    127.0.0.1 ads.spyderbyte.com
                    127.0.0.1 ads.stationplay.com
                    127.0.0.1 ads.stileproject.com
                    127.0.0.1 ads.storagereview.net
                    127.0.0.1 ads.stratics.com
                    127.0.0.1 ads.sumotorrent.com
                    127.0.0.1 ads.sun.com
                    127.0.0.1 ads.switchboard.com
                    127.0.0.1 ads.t-online.de
                    127.0.0.1 ads.tahono.com
                    127.0.0.1 ads.techtv.com
                    127.0.0.1 ads.telegraaf.nl
                    127.0.0.1 ads.telegraph.co.uk
                    127.0.0.1 ads.tentonhammer.com
                    127.0.0.1 ads.theglobeandmail.com
                    127.0.0.1 ads.thestar.com
                    127.0.0.1 ads.thestranger.com
                    127.0.0.1 ads.thewebfreaks.com
                    127.0.0.1 ads.tmcs.net
                    127.0.0.1 ads.top500.org
                    127.0.0.1 ads.torrentreactor.net
                    127.0.0.1 ads.totallyfreestuff.com
                    127.0.0.1 ads.townhall.com
                    127.0.0.1 ads.tripod.com
                    127.0.0.1 ads.tripod.lycos.co.uk
                    127.0.0.1 ads.tripod.lycos.de
                    127.0.0.1 ads.tripod.lycos.es
                    127.0.0.1 ads.tripod.lycos.it
                    127.0.0.1 ads.tripod.lycos.nl
                    127.0.0.1 ads.tripod.spray.se
                    127.0.0.1 ads.ucomics.com
                    127.0.0.1 ads.uigc.net
                    127.0.0.1 ads.unixathome.org
                    127.0.0.1 ads.urli.net
                    127.0.0.1 ads.us.e-planning.net
                    127.0.0.1 ads.usatoday.com
                    127.0.0.1 ads.v3.com
                    127.0.0.1 ads.vesperexchange.com
                    127.0.0.1 ads.vg.basefarm.net
                    127.0.0.1 ads.virtual-nights.com
                    127.0.0.1 ads.virtualcountries.com
                    127.0.0.1 ads.vnumedia.com
                    127.0.0.1 ads.weather.ca
                    127.0.0.1 ads.web.aol.com
                    127.0.0.1 ads.web.cs.com
                    127.0.0.1 ads.web.de
                    127.0.0.1 ads.web21.com
                    127.0.0.1 ads.weblogssl.com
                    127.0.0.1 ads.webnet.advance.net
                    127.0.0.1 ads.whi.co.nz
                    127.0.0.1 ads.wikia.nocookie.net
                    127.0.0.1 ads.winsite.com
                    127.0.0.1 ads.wowscreenies.com
                    127.0.0.1 ads.wunderground.com
                    127.0.0.1 ads.x10.com
                    127.0.0.1 ads.xtra.co.nz
                    127.0.0.1 ads.y-0.net
                    127.0.0.1 ads.yimg.com
                    127.0.0.1 ads.yourfreedvds.com
                    127.0.0.1 ads.zdnet.com
                    127.0.0.1 ads1.canoe.ca
                    127.0.0.1 ads1.conjelco.com
                    127.0.0.1 ads1.erotism.com
                    127.0.0.1 ads1.mediacapital.pt
                    127.0.0.1 ads1.msn.com
                    127.0.0.1 ads1.rne.com
                    127.0.0.1 ads1.theglobeandmail.com
                    127.0.0.1 ads1.virtual-nights.com
                    127.0.0.1 ads10.speedbit.com
                    127.0.0.1 ads180.com
                    127.0.0.1 ads2.advance.net
                    127.0.0.1 ads2.clearchannel.com
                    127.0.0.1 ads2.collegclub.com
                    127.0.0.1 ads2.collegeclub.com
                    127.0.0.1 ads2.conjelco.com
                    127.0.0.1 ads2.exhedra.com
                    127.0.0.1 ads2.firingsquad.com
                    127.0.0.1 ads2.gamecity.net
                    127.0.0.1 ads2.jubii.dk
                    127.0.0.1 ads2.oneplace.com
                    127.0.0.1 ads2.osdn.com
                    127.0.0.1 ads2.rne.com
                    127.0.0.1 ads2.virtual-nights.com
                    127.0.0.1 ads2004.treiberupdate.de
                    127.0.0.1 ads3.advance.net
                    127.0.0.1 ads3.flabber.nl
                    127.0.0.1 ads3.gamecity.net
                    127.0.0.1 ads3.virtual-nights.com
                    127.0.0.1 ads4.advance.net
                    127.0.0.1 ads4.clearchannel.com
                    127.0.0.1 ads4.gamecity.net
                    127.0.0.1 ads4.virtual-nights.com
                    127.0.0.1 ads4homes.com
                    127.0.0.1 ads5.advance.net
                    127.0.0.1 ads5.canoe.ca
                    127.0.0.1 ads5.virtual-nights.com
                    127.0.0.1 ads6.advance.net
                    127.0.0.1 ads6.gamecity.net
                    127.0.0.1 ads7.gamecity.net
                    127.0.0.1 ads8.com
                    127.0.0.1 ads9.udc.advance.net
                    127.0.0.1 adsag.com
                    127.0.0.1 adsatt.abc.starwave.com
                    127.0.0.1 Adsatt.ABCNews.starwave.com
                    127.0.0.1 adsatt.espn.go.com
                    127.0.0.1 adsatt.espn.starwave.com
                    127.0.0.1 Adsatt.go.starwave.com
                    127.0.0.1 adsbrite.com
                    127.0.0.1 adscholar.com
                    127.0.0.1 adscpm.com
                    127.0.0.1 adsdaq.com
                    127.0.0.1 adsdk.com
                    127.0.0.1 adsend.de
                    127.0.0.1 adserv.evo-x.de
                    127.0.0.1 adserv.gamezone.de
                    127.0.0.1 adserv.geocomm.com
                    127.0.0.1 adserv.happypuppy.com
                    127.0.0.1 adserv.iafrica.com
                    127.0.0.1 adserv.muchosucko.com
                    127.0.0.1 adserv.qconline.com
                    127.0.0.1 adserv.quality-channel.de
                    127.0.0.1 adserv.tacticalgamer.com
                    127.0.0.1 adserv1.winboard.org
                    127.0.0.1 adserver.00web.com
                    127.0.0.1 adserver.3digit.de
                    127.0.0.1 adserver.43plc.com
                    127.0.0.1 adserver.71i.de
                    127.0.0.1 adserver.adultfriendfinder.com
                    127.0.0.1 adserver.aidameter.com
                    127.0.0.1 adserver.allerinternett.com
                    127.0.0.1 adserver.aseanhosting.com
                    127.0.0.1 adserver.ath.cx
                    127.0.0.1 adserver.barrapunto.com
                    127.0.0.1 adserver.betandwin.de
                    127.0.0.1 adserver.billiger-surfen.de
                    127.0.0.1 adserver.billiger-telefonieren.de
                    127.0.0.1 adserver.bizhat.com
                    127.0.0.1 adserver.bluewin.ch
                    127.0.0.1 adserver.cams.com
                    127.0.0.1 adserver.colleges.com
                    127.0.0.1 adserver.com
                    127.0.0.1 adserver.conjelco.com
                    127.0.0.1 adserver.designertoday.com
                    127.0.0.1 adserver.digitoday.com
                    127.0.0.1 adserver.dotcommedia.de
                    127.0.0.1 adserver.eudora.com
                    127.0.0.1 adserver.filefront.com
                    127.0.0.1 adserver.fmpub.net
                    127.0.0.1 adserver.freecity.de
                    127.0.0.1 adserver.freenet.de
                    127.0.0.1 adserver.friendfinder.com
                    127.0.0.1 adserver.fuckaroo.org
                    127.0.0.1 adserver.gb2.motorpresse.de
                    127.0.0.1 adserver.gb3.motorpresse.de
                    127.0.0.1 adserver.geizkragen.de
                    127.0.0.1 adserver.gr
                    127.0.0.1 adserver.hardwareanalysis.com
                    127.0.0.1 adserver.hispavista.com
                    127.0.0.1 adserver.html.it
                    127.0.0.1 adserver.ifmagazine.com
                    127.0.0.1 adserver.incgamers.com
                    127.0.0.1 adserver.itsfogo.com
                    127.0.0.1 adserver.janes.com
                    127.0.0.1 adserver.jolt.co.uk
                    127.0.0.1 adserver.journalinteractive.com
                    127.0.0.1 adserver.karizmaoffers.com
                    127.0.0.1 adserver.kyoceramita-europe.com
                    127.0.0.1 adserver.legacy-network.com
                    127.0.0.1 adserver.libero.it
                    127.0.0.1 adserver.monster.com
                    127.0.0.1 adserver.motorpresse.de
                    127.0.0.1 adserver.n9nedegrees.com
                    127.0.0.1 adserver.news.com.au
                    127.0.0.1 adserver.ngz-network.de
                    127.0.0.1 adserver.nydailynews.com
                    127.0.0.1 adserver.o2.pl
                    127.0.0.1 adserver.pl
                    127.0.0.1 adserver.plhb.com
                    127.0.0.1 adserver.portalofevil.com
                    127.0.0.1 adserver.portugalmail.net
                    127.0.0.1 adserver.portugalmail.pt
                    127.0.0.1 adserver.realhomesex.net
                    127.0.0.1 adserver.ro
                    127.0.0.1 adserver.sanomawsoy.fi
                    127.0.0.1 adserver.securityfocus.com
                    127.0.0.1 adserver.sharewareonline.com
                    127.0.0.1 adserver.snowball.com
                    127.0.0.1 adserver.spankaway.com
                    127.0.0.1 adserver.startnow.com
                    127.0.0.1 adserver.terra.es
                    127.0.0.1 adserver.theonering.net
                    127.0.0.1 adserver.track-star.com
                    127.0.0.1 adserver.ugo.com
                    127.0.0.1 adserver.visions.de
                    127.0.0.1 adserver.webhostlist.de
                    127.0.0.1 adserver.yahoo.com
                    127.0.0.1 adserver01.de
                    127.0.0.1 adserver1-images.backbeatmedia.com
                    127.0.0.1 adserver1.backbeatmedia.com
                    127.0.0.1 adserver1.mediainsight.de
                    127.0.0.1 adserver1.mindshare.de
                    127.0.0.1 adserver1.ogilvy-interactive.de
                    127.0.0.1 adserver1.shareconnector.com
                    127.0.0.1 adserver2.mediainsight.de
                    127.0.0.1 adserver2.mindshare.de
                    127.0.0.1 adserver2.popdata.de
                    127.0.0.1 adserver3.eudora.com
                    127.0.0.1 adserver4.eudora.com
                    127.0.0.1 adserversolutions.com
                    127.0.0.1 adservertoo.com
                    127.0.0.1 adservervv.geizkragen.de
                    127.0.0.1 adserving.eleven-agency.com
                    127.0.0.1 adservingcentral.com
                    127.0.0.1 adservinginternational.com
                    127.0.0.1 adsfac.net
                    127.0.0.1 adsklick.de
                    127.0.0.1 adsmart.co.uk
                    127.0.0.1 adsmart.com
                    127.0.0.1 adsmart.net
                    127.0.0.1 adsmusic.com
                    127.0.0.1 adsnew.userfriendly.org
                    127.0.0.1 adsoftware.com
                    127.0.0.1 adsoldier.com
                    127.0.0.1 adsonar.com
                    127.0.0.1 adspace.ro
                    127.0.0.1 adsponse.de
                    127.0.0.1 adsremote.scripps.com
                    127.0.0.1 adsrevenue.net
                    127.0.0.1 adsrv.bankrate.com
                    127.0.0.1 adsrv.iol.co.za
                    127.0.0.1 adstat.4u.pl
                    127.0.0.1 adstest.weather.com
                    127.0.0.1 adsweb.tiscali.cz
                    127.0.0.1 adsynergy.com
                    127.0.0.1 adsystem.tt-forums.net
                    127.0.0.1 adtech.de
                    127.0.0.1 adtiger.de
                    127.0.0.1 adtoll.com
                    127.0.0.1 adtology.com
                    127.0.0.1 adtology3.com
                    127.0.0.1 adtoma.com
                    127.0.0.1 adtrackerelite.com
                    127.0.0.1 adtrade.net
                    127.0.0.1 adtrading.de
                    127.0.0.1 adtrak.net
                    127.0.0.1 adtrgt.com
                    127.0.0.1 adtrix.com
                    127.0.0.1 adult-adv.com
                    127.0.0.1 adv-banner.libero.it
                    127.0.0.1 adv.for-ua.com
                    127.0.0.1 adv.freeonline.it
                    127.0.0.1 adv.hwupgrade.it
                    127.0.0.1 adv.isdn.cz
                    127.0.0.1 adv.livedoor.com
                    127.0.0.1 adv.surinter.net
                    127.0.0.1 adv.webmd.com
                    127.0.0.1 adv.wp.pl
                    127.0.0.1 adv.yo.cz
                    127.0.0.1 adv1.videoprofessor.com
                    127.0.0.1 advariant.com
                    127.0.0.1 adventory.com
                    127.0.0.1 adverity.com
                    127.0.0.1 adverlinkz.com
                    127.0.0.1 adverserve.net
                    127.0.0.1 advert.bayarea.com
                    127.0.0.1 advert.hi-media.com
                    127.0.0.1 advert.hu
                    127.0.0.1 adverticum.com
                    127.0.0.1 adverticum.net
                    127.0.0.1 advertiseireland.com
                    127.0.0.1 advertising-department.com
                    127.0.0.1 advertising.com
                    127.0.0.1 advertising.guildlaunch.net
                    127.0.0.1 advertising.se
                    127.0.0.1 advertisingbanners.com
                    127.0.0.1 advertisingbox.com
                    127.0.0.1 advertmarket.com
                    127.0.0.1 advertmedia.de
                    127.0.0.1 advertpro.sitepoint.com
                    127.0.0.1 advertpro.ya.com
                    127.0.0.1 adverts.carltononline.com
                    127.0.0.1 adverts.digitalspy.co.uk
                    127.0.0.1 advertserve.com
                    127.0.0.1 advertstream.com
                    127.0.0.1 advertwizard.com
                    127.0.0.1 adview.ppro.de
                    127.0.0.1 adviva.net
                    127.0.0.1 advnt.com
                    127.0.0.1 advnt02.com
                    127.0.0.1 advnt04.com
                    127.0.0.1 adware.hu
                    127.0.0.1 adwareremovergold.com
                    127.0.0.1 adweb.integctr.com
                    127.0.0.1 adworldnetwork.com
                    127.0.0.1 adworx.at
                    127.0.0.1 adx.allstar.cz
                    127.0.0.1 adx.arip.co.th
                    127.0.0.1 adx.atnext.com
                    127.0.0.1 adx.gainesvillesun.com
                    127.0.0.1 adx.nu
                    127.0.0.1 adyea.com
                    127.0.0.1 adz.afterdawn.net
                    127.0.0.1 adzones.com
                    127.0.0.1 afcyhf.com
                    127.0.0.1 affiliate-europe.com
                    127.0.0.1 affiliate.1800flowers.com
                    127.0.0.1 affiliate.7host.com
                    127.0.0.1 affiliate.doubleyourdating.com
                    127.0.0.1 affiliate.dtiserv.com
                    127.0.0.1 affiliate.gamestop.com
                    127.0.0.1 affiliate.grasscity.com
                    127.0.0.1 affiliate.kitapyurdu.com
                    127.0.0.1 affiliate.mercola.com
                    127.0.0.1 affiliate.mogs.com
                    127.0.0.1 affiliate.offgamers.com
                    127.0.0.1 affiliate.travelnow.com
                    127.0.0.1 affiliate.viator.com
                    127.0.0.1 affiliatebrand.com
                    127.0.0.1 affiliatefuel.com
                    127.0.0.1 affiliatefuture.com
                    127.0.0.1 affiliates.allposters.com
                    127.0.0.1 affiliates.digitalriver.com
                    127.0.0.1 affiliates.eroticy.com
                    127.0.0.1 affiliates.globat.com
                    127.0.0.1 affiliates.ige.com
                    127.0.0.1 affiliates.internationaljock.com
                    127.0.0.1 affiliates.jlist.com
                    127.0.0.1 affiliates.quintura.com
                    127.0.0.1 affiliates.streamray.com
                    127.0.0.1 affiliates.thrixxx.com
                    127.0.0.1 affiliatetracking.com
                    127.0.0.1 affiliatetracking.net
                    127.0.0.1 affiliatewindow.com
                    127.0.0.1 affiliplus.de
                    127.0.0.1 afiliados.submarino.com.br
                    127.0.0.1 afy11.net
                    127.0.0.1 ah-ha.com
                    127.0.0.1 aidu-ads.de
                    127.0.0.1 aim4media.com
                    127.0.0.1 ajouter.net
                    127.0.0.1 alclick.com
                    127.0.0.1 alexa-sitestats.s3.amazonaws.com
                    127.0.0.1 all4spy.com
                    127.0.0.1 alladvantage.com
                    127.0.0.1 allosponsor.com
                    127.0.0.1 allotraffic.com
                    127.0.0.1 allthe-waytothebank.com
                    127.0.0.1 amazingcounters.com
                    127.0.0.1 amung.us
                    127.0.0.1 an.tacoda.net
                    127.0.0.1 anahtars.com
                    127.0.0.1 analytics.live.com
                    127.0.0.1 analyze.yourfilehost.com
                    127.0.0.1 anchorfreesearch.com
                    127.0.0.1 anm.intelli-direct.com
                    127.0.0.1 annonser.dagbladet.no
                    127.0.0.1 aolcdn.com.example.com
                    127.0.0.1 api.intensifier.de
                    127.0.0.1 app.lstdesign.com
                    127.0.0.1 arc1.msn.com
                    127.0.0.1 arcadebanners.com
                    127.0.0.1 ard.xxxblackbook.com
                    127.0.0.1 as.cmpnet.com
                    127.0.0.1 as.fotexnet.hu
                    127.0.0.1 as.nu.nl
                    127.0.0.1 as1.advfn.com
                    127.0.0.1 as1.falkag.de
                    127.0.0.1 as2.advfn.com
                    127.0.0.1 as2.falkag.de
                    127.0.0.1 as3.falkag.de
                    127.0.0.1 as4.falkag.de
                    127.0.0.1 as5000.com
                    127.0.0.1 assets.loomia.com
                    127.0.0.1 assoc-amazon.com
                    127.0.0.1 asv.gameplanet.co.nz
                    127.0.0.1 atdmt.com
                    127.0.0.1 ati-etailer.de
                    127.0.0.1 atopsites.com
                    127.0.0.1 atwola.com
                    127.0.0.1 au2m8.com
                    127.0.0.1 auctionads.com
                    127.0.0.1 auctionads.net
                    127.0.0.1 audit.median.hu
                    127.0.0.1 audit.webinform.hu
                    127.0.0.1 auto-bannertausch.de
                    127.0.0.1 autohits.dk
                    127.0.0.1 avenuea.com
                    127.0.0.1 avpa.javalobby.org
                    127.0.0.1 avres.net
                    127.0.0.1 avsads.com
                    127.0.0.1 awarez.net
                    127.0.0.1 awempire.com
                    127.0.0.1 awin1.com
                    127.0.0.1 aws.sitepoint.com
                    127.0.0.1 axelsfun.com
                    127.0.0.1 azebar.com
                    127.0.0.1 azfront.com
                    127.0.0.1 azjmp.com
                    127.0.0.1 azoogleads.com
                    127.0.0.1 ba.afl.rakuten.co.jp
                    127.0.0.1 babs.tv2.dk
                    127.0.0.1 backbeatmedia.com
                    127.0.0.1 bamboobiz.net
                    127.0.0.1 banik.redigy.cz
                    127.0.0.1 banner-exchange-24.de
                    127.0.0.1 banner.1and1.com
                    127.0.0.1 banner.ad.nu
                    127.0.0.1 banner.alphacool.de
                    127.0.0.1 banner.amitize.com
                    127.0.0.1 banner.blogranking.net
                    127.0.0.1 banner.buempliz-online.ch
                    127.0.0.1 banner.casino.net
                    127.0.0.1 banner.casinodelrio.com
                    127.0.0.1 banner.coza.com
                    127.0.0.1 banner.cz
                    127.0.0.1 banner.easyspace.com
                    127.0.0.1 banner.elisa.net
                    127.0.0.1 banner.getgo.de
                    127.0.0.1 banner.goldenpalace.com
                    127.0.0.1 banner.img.co.za
                    127.0.0.1 banner.inyourpocket.com
                    127.0.0.1 banner.jobsahead.com
                    127.0.0.1 banner.kiev.ua
                    127.0.0.1 banner.linux.se
                    127.0.0.1 banner.media-system.de
                    127.0.0.1 banner.mindshare.de
                    127.0.0.1 banner.musikmedia.de
                    127.0.0.1 banner.nixnet.cz
                    127.0.0.1 banner.noblepoker.com
                    127.0.0.1 banner.northsky.com
                    127.0.0.1 banner.orb.net
                    127.0.0.1 banner.penguin.cz
                    127.0.0.1 banner.relcom.ru
                    127.0.0.1 banner.rojakpot.com
                    127.0.0.1 banner.supereva.it
                    127.0.0.1 banner.tanto.de
                    127.0.0.1 banner.titan-dsl.de
                    127.0.0.1 banner.tpage.com
                    127.0.0.1 banner.vadian.net
                    127.0.0.1 banner.webdmz.tv2.dk
                    127.0.0.1 banner.webmersion.com
                    127.0.0.1 banner.wirenode.com
                    127.0.0.1 banner4all.dk
                    127.0.0.1 bannerads.de
                    127.0.0.1 bannerads.zwire.com
                    127.0.0.1 bannerbank.ru
                    127.0.0.1 bannerbox.hu
                    127.0.0.1 bannerboxes.com
                    127.0.0.1 bannercommunity.de
                    127.0.0.1 bannerconnect.com
                    127.0.0.1 bannerconnect.net
                    127.0.0.1 bannerexchange.cjb.net
                    127.0.0.1 bannerhost.com
                    127.0.0.1 bannerimage.com
                    127.0.0.1 bannerlandia.com.ar
                    127.0.0.1 bannermall.com
                    127.0.0.1 bannermarkt.nl
                    127.0.0.1 bannerpower.com
                    127.0.0.1 banners.adultfriendfinder.com
                    127.0.0.1 banners.amigos.com
                    127.0.0.1 banners.arachne.cz
                    127.0.0.1 banners.asiafriendfinder.com
                    127.0.0.1 banners.babylon-x.com
                    127.0.0.1 banners.babylonbucks.com
                    127.0.0.1 banners.bol.com.br
                    127.0.0.1 banners.cams.com
                    127.0.0.1 banners.clubseventeen.com
                    127.0.0.1 banners.czi.cz
                    127.0.0.1 banners.de.clara.net
                    127.0.0.1 banners.direction-x.com
                    127.0.0.1 banners.directnic.com
                    127.0.0.1 banners.easydns.com
                    127.0.0.1 banners.ebay.com
                    127.0.0.1 banners.expressindia.com
                    127.0.0.1 banners.freett.com
                    127.0.0.1 banners.friendfinder.com
                    127.0.0.1 banners.friendsfinder.com
                    127.0.0.1 banners.hawh.com
                    127.0.0.1 banners.helpmij.nl
                    127.0.0.1 banners.iq.pl
                    127.0.0.1 banners.isoftmarketing.com
                    127.0.0.1 banners.kfmb.com
                    127.0.0.1 banners.lifeserv.com
                    127.0.0.1 banners.linkbuddies.com
                    127.0.0.1 banners.netcraft.com
                    127.0.0.1 banners.passion.com
                    127.0.0.1 banners.resultonline.com
                    127.0.0.1 banners.revenuegateway.net
                    127.0.0.1 banners.sexsearch.com
                    127.0.0.1 banners.stilenet.com
                    127.0.0.1 banners.sugeridos.com
                    127.0.0.1 banners.sys-con.com
                    127.0.0.1 banners.touteslesvideosx.com
                    127.0.0.1 banners.uk.clara.net
                    127.0.0.1 banners.videosz.com
                    127.0.0.1 banners.virtuagirlhd.com
                    127.0.0.1 banners.wunderground.com
                    127.0.0.1 bannerserver.com
                    127.0.0.1 bannersgomlm.com
                    127.0.0.1 bannershotlink.perfectgonzo.com
                    127.0.0.1 bannersng.yell.com
                    127.0.0.1 bannerspace.com
                    127.0.0.1 bannerswap.com
                    127.0.0.1 bannertesting.com
                    127.0.0.1 bannery.cz
                    127.0.0.1 bannieres.acces-contenu.com
                    127.0.0.1 bans.adserver.co.il
                    127.0.0.1 bans.bride.ru
                    127.0.0.1 bansrv1.n1media.com
                    127.0.0.1 barnesandnoble.bfast.com
                    127.0.0.1 bbmedia.cz
                    127.0.0.1 bbn.img.com.ua
                    127.0.0.1 begun.ru
                    127.0.0.1 belinked.info
                    127.0.0.1 belstat.com
                    127.0.0.1 belstat.nl
                    127.0.0.1 best-top.ro
                    127.0.0.1 bestsearch.net
                    127.0.0.1 betarget.net
                    127.0.0.1 bidclix.com
                    127.0.0.1 bidclix.net
                    127.0.0.1 bidvertiser.com
                    127.0.0.1 bigads.guj.de
                    127.0.0.1 bigbangmedia.com
                    127.0.0.1 bigtits4u.info
                    127.0.0.1 billboard.cz
                    127.0.0.1 bizad.nikkeibp.co.jp
                    127.0.0.1 bizban.net
                    127.0.0.1 bizrate.com
                    127.0.0.1 blast4traffic.com
                    127.0.0.1 blingbucks.com
                    127.0.0.1 blogads.com
                    127.0.0.1 blogcounter.de
                    127.0.0.1 blogrush.com
                    127.0.0.1 blogtoplist.se
                    127.0.0.1 blogtoppen.se
                    127.0.0.1 blogtopsites.com
                    127.0.0.1 blueadvertise.com
                    127.0.0.1 bluehornet.com
                    127.0.0.1 bluestreak.com
                    127.0.0.1 bluetime.com
                    127.0.0.1 bluewhaleweb.com
                    127.0.0.1 bm.annonce.cz
                    127.0.0.1 bn.bfast.com
                    127.0.0.1 bnr.volgocity.ru
                    127.0.0.1 boersego-ads.de
                    127.0.0.1 books.zenofeller.com
                    127.0.0.1 boom.ro
                    127.0.0.1 box.anchorfree.net
                    127.0.0.1 bpath.com
                    127.0.0.1 braincash.com
                    127.0.0.1 bravenet.com
                    127.0.0.1 bridesservice.com
                    127.0.0.1 bridgetrack.com
                    127.0.0.1 british-banners.com
                    127.0.0.1 bs.yandex.ru
                    127.0.0.1 budsinc.com
                    127.0.0.1 bulletads.com
                    127.0.0.1 bullseye.backbeatmedia.com
                    127.0.0.1 burstnet.com
                    127.0.0.1 bux-jungle.com
                    127.0.0.1 buyhitscheap.com
                    127.0.0.1 buysellads.com
                    127.0.0.1 bvalphaserver.com
                    127.0.0.1 bwp.download.com
                    127.0.0.1 c-planet.net
                    127.0.0.1 c.bigmir.net
                    127.0.0.1 c1.nowlinux.com
                    127.0.0.1 canadatop.com
                    127.0.0.1 caniamedia.com
                    127.0.0.1 casalemedia.com
                    127.0.0.1 casalmedia.com
                    127.0.0.1 cash4banner.com
                    127.0.0.1 cash4banner.de
                    127.0.0.1 cash4members.com
                    127.0.0.1 cash4popup.de
                    127.0.0.1 cashcrate.com
                    127.0.0.1 cashengines.com
                    127.0.0.1 cashfiesta.com
                    127.0.0.1 cashlayer.com
                    127.0.0.1 cashpartner.com
                    127.0.0.1 cashpartner.net
                    127.0.0.1 casinogames.com
                    127.0.0.1 casinopays.com
                    127.0.0.1 casinorewards.com
                    127.0.0.1 casinotraffic.com
                    127.0.0.1 casinotreasure.com
                    127.0.0.1 cat.clx.ru
                    127.0.0.1 cbanners.virtuagirlhd.com
                    127.0.0.1 cben1.net
                    127.0.0.1 cbmall.com
                    127.0.0.1 cbx.net
                    127.0.0.1 ceskydomov.alias.ngs.modry.cz
                    127.0.0.1 cetrk.com
                    127.0.0.1 cgicounter.puretec.de
                    127.0.0.1 ch.questionmarket.com
                    127.0.0.1 channelintelligence.com
                    127.0.0.1 chart.dk
                    127.0.0.1 checkm8.com
                    127.0.0.1 checkstat.nl
                    127.0.0.1 chestionar.ro
                    127.0.0.1 chitika.net
                    127.0.0.1 ciaoclick.com
                    127.0.0.1 cibleclick.com
                    127.0.0.1 cityads.telus.net
                    127.0.0.1 cj.com
                    127.0.0.1 cjbmanagement.com
                    127.0.0.1 claria.com
                    127.0.0.1 clckm.com
                    127.0.0.1 click-fr.com
                    127.0.0.1 click.absoluteagency.com
                    127.0.0.1 click.fool.co.uk
                    127.0.0.1 click.fool.com
                    127.0.0.1 click.go2net.com
                    127.0.0.1 click2freemoney.com
                    127.0.0.1 click2paid.com
                    127.0.0.1 clickability.com
                    127.0.0.1 clickagents.com
                    127.0.0.1 clickaider.com
                    127.0.0.1 clickbank.com
                    127.0.0.1 clickbank.net
                    127.0.0.1 clickbooth.com
                    127.0.0.1 clickboothlnk.com
                    127.0.0.1 clickbrokers.com
                    127.0.0.1 clickconsultingltd.com
                    127.0.0.1 clickdensity.com
                    127.0.0.1 clickedyclick.com
                    127.0.0.1 clickfinders.com
                    127.0.0.1 clickforwebmasters.com
                    127.0.0.1 clickhere.foronlinegames.com
                    127.0.0.1 clickhereforcellphones.com
                    127.0.0.1 clickhouse.com
                    127.0.0.1 clickhype.com
                    127.0.0.1 clicklink.jp
                    127.0.0.1 clickmedia.ro
                    127.0.0.1 clicks.equantum.com
                    127.0.0.1 clicks.jackpot.com
                    127.0.0.1 clicks.mods.de
                    127.0.0.1 clicks.stripsaver.com
                    127.0.0.1 clickserve.cc-dt.com
                    127.0.0.1 clicksor.com
                    127.0.0.1 clickthrucash.com
                    127.0.0.1 clickthruserver.com
                    127.0.0.1 clickthrutraffic.com
                    127.0.0.1 clicktorrent.info
                    127.0.0.1 clicktrace.info
                    127.0.0.1 clicktrack.ziyu.net
                    127.0.0.1 clicktracks.com
                    127.0.0.1 clicktrade.com
                    127.0.0.1 clickxchange.com
                    127.0.0.1 clickz.com
                    127.0.0.1 clicmanager.fr
                    127.0.0.1 clictrafic.com
                    127.0.0.1 client.alexa.com
                    127.0.0.1 clients.tbo.com
                    127.0.0.1 clixgalore.com
                    127.0.0.1 clixsta.com
                    127.0.0.1 cluster.adultworld.com
                    127.0.0.1 clustrmaps.com
                    127.0.0.1 cnomy.com
                    127.0.0.1 cnt.one.ru
                    127.0.0.1 cnt1.pocitadlo.cz
                    127.0.0.1 code-server.biz
                    127.0.0.1 colonize.com
                    127.0.0.1 comclick.com
                    127.0.0.1 commission-junction.com
                    127.0.0.1 commissionmonster.com
                    127.0.0.1 commonname.com
                    127.0.0.1 compactbanner.com
                    127.0.0.1 comprabanner.it
                    127.0.0.1 connextra.com
                    127.0.0.1 constantcontact.com
                    127.0.0.1 contextweb.com
                    127.0.0.1 conversionruler.com
                    127.0.0.1 cookies.cmpnet.com
                    127.0.0.1 coremetrics.com
                    127.0.0.1 count.hypem.com
                    127.0.0.1 count.rin.ru
                    127.0.0.1 count.west263.com
                    127.0.0.1 countall.com
                    127.0.0.1 countall.net
                    127.0.0.1 counted.com
                    127.0.0.1 counter.bloke.com
                    127.0.0.1 counter.cgiworld.net
                    127.0.0.1 counter.cnw.cz
                    127.0.0.1 counter.cz
                    127.0.0.1 counter.dreamhost.com
                    127.0.0.1 counter.fateback.com
                    127.0.0.1 counter.mirohost.net
                    127.0.0.1 counter.nowlinux.com
                    127.0.0.1 counter.rambler.ru
                    127.0.0.1 counter.search.bg
                    127.0.0.1 counter.times.lv
                    127.0.0.1 counter.webtrends.net
                    127.0.0.1 counter.yadro.ru
                    127.0.0.1 counters.honesty.com
                    127.0.0.1 counts.tucows.com
                    127.0.0.1 coupling-media.de
                    127.0.0.1 cpays.com
                    127.0.0.1 cpmstar.com
                    127.0.0.1 cpxinteractive.com
                    127.0.0.1 cqcounter.com
                    127.0.0.1 crakmedia.com
                    127.0.0.1 crawlability.com
                    127.0.0.1 crazypopups.com
                    127.0.0.1 creative.paypopup.com
                    127.0.0.1 creative.whi.co.nz
                    127.0.0.1 creatives.as4x.tmcs.net
                    127.0.0.1 crispads.com
                    127.0.0.1 crtv.mate1.com
                    127.0.0.1 crwdcntrl.net
                    127.0.0.1 cserver.mii.instacontent.net
                    127.0.0.1 ctnetwork.hu
                    127.0.0.1 ctxtads.overture.com
                    127.0.0.1 custom-click.com
                    127.0.0.1 customad.cnn.com
                    127.0.0.1 cxoreport.dnsalias.net
                    127.0.0.1 cyberbounty.com
                    127.0.0.1 cybercount.com
                    127.0.0.1 cybereps.com
                    127.0.0.1 cybermonitor.com
                    127.0.0.1 cyberwing.co.jp
                    127.0.0.1 cydoor.com
                    127.0.0.1 danban.com
                    127.0.0.1 datashreddergold.com
                    127.0.0.1 datingadvertising.com
                    127.0.0.1 dbbsrv.com
                    127.0.0.1 dclk.net
                    127.0.0.1 de.rottentomatoes.com
                    127.0.0.1 dealdotcom.com
                    127.0.0.1 debtbusterloans.com
                    127.0.0.1 debtreductioncenter.com
                    127.0.0.1 default-homepage-network.com
                    127.0.0.1 deloo.de
                    127.0.0.1 depilflash.tv
                    127.0.0.1 desktop.kazaa.com
                    127.0.0.1 dgm2.com
                    127.0.0.1 dgmaustralia.com
                    127.0.0.1 dialerporn.com
                    127.0.0.1 didtheyreadit.com
                    127.0.0.1 digits.com
                    127.0.0.1 direct-revenue.com
                    127.0.0.1 direct-xxx-access.com
                    127.0.0.1 direct.lbe.ru
                    127.0.0.1 directaclick.com
                    127.0.0.1 directivepub.com
                    127.0.0.1 directleads.com
                    127.0.0.1 directorym.com
                    127.0.0.1 directtrack.com
                    127.0.0.1 directwebsearch.net
                    127.0.0.1 discountclick.com
                    127.0.0.1 displayadsmedia.com
                    127.0.0.1 dist.belnk.com
                    127.0.0.1 divicash.com
                    127.0.0.1 dmtracking.alibaba.com
                    127.0.0.1 dmtracking2.alibaba.com
                    127.0.0.1 dnads.directnic.com
                    127.0.0.1 domainsponsor.com
                    127.0.0.1 domainsteam.de
                    127.0.0.1 donorschoose.org
                    127.0.0.1 doubleclick.com
                    127.0.0.1 doubleclick.de
                    127.0.0.1 doubleclick.net
                    127.0.0.1 dpbolvw.net
                    127.0.0.1 drumcash.com
                    127.0.0.1 dynamic.fmpub.net
                    127.0.0.1 e-bannerx.com
                    127.0.0.1 e-debtconsolidation.com
                    127.0.0.1 e-m.fr
                    127.0.0.1 e-planning.net
                    127.0.0.1 e.kde.cz
                    127.0.0.1 e2give.com
                    127.0.0.1 eadexchange.com
                    127.0.0.1 easy-ad.info
                    127.0.0.1 easyad.info
                    127.0.0.1 easyadjob.com
                    127.0.0.1 ecircle-ag.com
                    127.0.0.1 ecoupons.com
                    127.0.0.1 edgefcs.net
                    127.0.0.1 edgeio.com
                    127.0.0.1 efektiv.net
                    127.0.0.1 elitetoplist.com
                    127.0.0.1 em.aveno.net
                    127.0.0.1 emarketer.com
                    127.0.0.1 emarketmakers.com
                    127.0.0.1 emediate.dk
                    127.0.0.1 emonitor.takeit.cz
                    127.0.0.1 engage.everyone.net
                    127.0.0.1 engage.omaha.com
                    127.0.0.1 engine.awaps.net
                    127.0.0.1 engine.espace.netavenir.com
                    127.0.0.1 enginenetwork.com
                    127.0.0.1 entercasino.com
                    127.0.0.1 epiccash.com
                    127.0.0.1 ero-advertising.com
                    127.0.0.1 erotic-ad.com
                    127.0.0.1 escati.linkopp.net
                    127.0.0.1 esellerate.net
                    127.0.0.1 eshopads2.com
                    127.0.0.1 espotting.com
                    127.0.0.1 estat.com
                    127.0.0.1 estats.com
                    127.0.0.1 etargetnet.com
                    127.0.0.1 etology.com
                    127.0.0.1 etracker.de
                    127.0.0.1 eu-adcenter.net
                    127.0.0.1 euniverseads.com
                    127.0.0.1 eur.a1.yimg.com
                    127.0.0.1 eurekster.com
                    127.0.0.1 euro4banner.com
                    127.0.0.1 euroclick.com
                    127.0.0.1 europeanbanners.com
                    127.0.0.1 europebanner.net
                    127.0.0.1 euros4click.de
                    127.0.0.1 eusta.de
                    127.0.0.1 evidencecleanergold.com
                    127.0.0.1 exchange-it.com
                    127.0.0.1 exchange.bg
                    127.0.0.1 exchangead.com
                    127.0.0.1 exchangeclicksonline.com
                    127.0.0.1 exit76.com
                    127.0.0.1 exitexchange.com
                    127.0.0.1 exitfuel.com
                    127.0.0.1 exoclick.com
                    127.0.0.1 expoactive.com
                    127.0.0.1 exponential.com
                    127.0.0.1 extads.web.de
                    127.0.0.1 extractorandburner.com
                    127.0.0.1 extreme-dm.com
                    127.0.0.1 eyeblaster-bs.com
                    127.0.0.1 eyeblaster.com
                    127.0.0.1 eyewonder.com
                    127.0.0.1 ezula.com
                    127.0.0.1 f1organizer.com
                    127.0.0.1 f5biz.com
                    127.0.0.1 falkag.de
                    127.0.0.1 falkag.net
                    127.0.0.1 fast-adv.it
                    127.0.0.1 fastclick.com
                    127.0.0.1 fastclick.com.edgesuite.net
                    127.0.0.1 fastclick.net
                    127.0.0.1 fastcounter.bcentral.com
                    127.0.0.1 fc.webmasterpro.de
                    127.0.0.1 feedbackresearch.com
                    127.0.0.1 feedjit.com
                    127.0.0.1 ffxcam.fairfax.com.au
                    127.0.0.1 filitrac.com
                    127.0.0.1 fimserve.com
                    127.0.0.1 findcommerce.com
                    127.0.0.1 findyourcasino.com
                    127.0.0.1 fineclicks.com
                    127.0.0.1 first.nova.cz
                    127.0.0.1 firstadsolution.com
                    127.0.0.1 flabberads.flabber.nl
                    127.0.0.1 fleshlightcash.com
                    127.0.0.1 flexbanner.com
                    127.0.0.1 flowgo.com
                    127.0.0.1 fmads.osdn.com
                    127.0.0.1 focalex.com
                    127.0.0.1 foo.cosmocode.de
                    127.0.0.1 forex-affiliate.net
                    127.0.0.1 fpctraffic.com
                    127.0.0.1 fragmentserv.iac-online.de
                    127.0.0.1 francetop.com
                    127.0.0.1 free-banners.com
                    127.0.0.1 freebanner.com
                    127.0.0.1 freelogs.com
                    127.0.0.1 freeonlineusers.com
                    127.0.0.1 freepay.com
                    127.0.0.1 freestat.pl
                    127.0.0.1 freestats.com
                    127.0.0.1 freestats.tv
                    127.0.0.1 freewebcounter.com
                    127.0.0.1 ftjcfx.com
                    127.0.0.1 fuck-access.com
                    127.0.0.1 funklicks.com
                    127.0.0.1 funpageexchange.com
                    127.0.0.1 fusionquest.com
                    127.0.0.1 fxstyle.net
                    127.0.0.1 g-wizzads.net
                    127.0.0.1 galaxien.com
                    127.0.0.1 gamblingbanner.com
                    127.0.0.1 game-advertising-online.com
                    127.0.0.1 gamehouse.com
                    127.0.0.1 gamesites100.net
                    127.0.0.1 gamesites200.com
                    127.0.0.1 gamesitestop100.com
                    127.0.0.1 gator.com
                    127.0.0.1 gbanners.hornymatches.com
                    127.0.0.1 gcads.osdn.com
                    127.0.0.1 gemius.pl
                    127.0.0.1 geo.digitalpoint.com
                    127.0.0.1 geovisite.com
                    127.0.0.1 getclicky.com
                    127.0.0.1 getfreecounter.com
                    127.0.0.1 gg.daqi.com
                    127.0.0.1 giftsky.org
                    127.0.0.1 globalismedia.com
                    127.0.0.1 globaltrack.com
                    127.0.0.1 go-clicks.de
                    127.0.0.1 go-rank.de
                    127.0.0.1 goingplatinum.com
                    127.0.0.1 gold.weborama.fr
                    127.0.0.1 goldstats.com
                    127.0.0.1 google-analytics.com
                    127.0.0.1 googleadservices.com
                    127.0.0.1 googlesyndication.com
                    127.0.0.1 gorillanation.com
                    127.0.0.1 gostats.com
                    127.0.0.1 gp.dejanews.com
                    127.0.0.1 gpr.hu
                    127.0.0.1 grafstat.ro
                    127.0.0.1 grantmedia.com
                    127.0.0.1 gtop.ro
                    127.0.0.1 gtop100.com
                    127.0.0.1 hbmediapro.com
                    127.0.0.1 head.imho.ru
                    127.0.0.1 hentaicounter.com
                    127.0.0.1 herbalaffiliateprogram.com
                    127.0.0.1 hexusads.fluent.ltd.uk
                    127.0.0.1 highconvert.com
                    127.0.0.1 hightrafficads.com
                    127.0.0.1 histats.com
                    127.0.0.1 hit-parade.com
                    127.0.0.1 hit.bg
                    127.0.0.1 hit.ua
                    127.0.0.1 hit.webcentre.lycos.co.uk
                    127.0.0.1 hitbox.com
                    127.0.0.1 hitcents.com
                    127.0.0.1 hitexchange.net
                    127.0.0.1 hitfarm.com
                    127.0.0.1 hitiz.com
                    127.0.0.1 hitlist.ru
                    127.0.0.1 hitlounge.com
                    127.0.0.1 hitometer.com
                    127.0.0.1 hits4me.com
                    127.0.0.1 hits4pay.com
                    127.0.0.1 hitsdriving.com
                    127.0.0.1 hitslink.com
                    127.0.0.1 hittail.com
                    127.0.0.1 hollandbusinessadvertising.nl
                    127.0.0.1 horyzonix.sdv.fr
                    127.0.0.1 hostedads.realitykings.com
                    127.0.0.1 hotlog.ru
                    127.0.0.1 hotrank.com.tw
                    127.0.0.1 hotstatistics.com
                    127.0.0.1 httpads.com
                    127.0.0.1 httpool.com
                    127.0.0.1 humanclick.com
                    127.0.0.1 hurricanedigitalmedia.com
                    127.0.0.1 hydramedia.com
                    127.0.0.1 hyperbanner.net
                    127.0.0.1 hypertracker.com
                    127.0.0.1 i-clicks.net
                    127.0.0.1 i-lookup.com
                    127.0.0.1 i1img.com
                    127.0.0.1 i1media.no
                    127.0.0.1 ia.iinfo.cz
                    127.0.0.1 iad.anm.co.uk
                    127.0.0.1 iadnet.com
                    127.0.0.1 iconadserver.com
                    127.0.0.1 icptrack.com
                    127.0.0.1 idcounter.com
                    127.0.0.1 idot.cz
                    127.0.0.1 idregie.com
                    127.0.0.1 ientrymail.com
                    127.0.0.1 iesnare.com
                    127.0.0.1 ifptp.com
                    127.0.0.1 igads.no.publicus.com
                    127.0.0.1 ilbanner.com
                    127.0.0.1 ilead.itrack.it
                    127.0.0.1 iliillliO00OO0.321.cn
                    127.0.0.1 image.ugo.com
                    127.0.0.1 imageads.canoe.ca
                    127.0.0.1 imagecash.net
                    127.0.0.1 images-pw.secureserver.net
                    127.0.0.1 images.v3.com
                    127.0.0.1 imaginemedia.com
                    127.0.0.1 img.bannersxchange.com
                    127.0.0.1 img.pheedo.com
                    127.0.0.1 img.prohardver.hu
                    127.0.0.1 imonitor.nethost.cz
                    127.0.0.1 impact-ad.jp
                    127.0.0.1 impact.as
                    127.0.0.1 imprese.cz
                    127.0.0.1 impressionmedia.cz
                    127.0.0.1 impressionz.co.uk
                    127.0.0.1 imrworldwide.com
                    127.0.0.1 inboxdollars.com
                    127.0.0.1 inc.com
                    127.0.0.1 incentaclick.com
                    127.0.0.1 indexlink.ro
                    127.0.0.1 indexstats.com
                    127.0.0.1 indieclick.com
                    127.0.0.1 industrybrains.com
                    127.0.0.1 inet-traffic.com
                    127.0.0.1 infinite-ads.com
                    127.0.0.1 infiniteadds.com
                    127.0.0.1 infiniteadds.org
                    127.0.0.1 information.com
                    127.0.0.1 initgroup.com
                    127.0.0.1 inringtone.com
                    127.0.0.1 insightexpress.com
                    127.0.0.1 insightexpressai.com
                    127.0.0.1 inspectorclick.com
                    127.0.0.1 instadia.com
                    127.0.0.1 instadia.net
                    127.0.0.1 instantmadness.com
                    127.0.0.1 intelliads.com
                    127.0.0.1 intellitxt.com
                    127.0.0.1 interclick.com
                    127.0.0.1 internet-optimizer.com
                    127.0.0.1 internetfuel.com
                    127.0.0.1 interreklame.de
                    127.0.0.1 interstat.hu
                    127.0.0.1 ip.ro
                    127.0.0.1 ipro.com
                    127.0.0.1 ireklama.cz
                    127.0.0.1 itadnetwork.co.uk
                    127.0.0.1 itbannerexchange.com
                    127.0.0.1 itfarm.com
                    127.0.0.1 itop.cz
                    127.0.0.1 itsptp.com
                    127.0.0.1 ivwbox.de
                    127.0.0.1 jaco.box.sk
                    127.0.0.1 jbeet.cjt1.net
                    127.0.0.1 jcontent.bns1.net
                    127.0.0.1 jcount.com
                    127.0.0.1 jdoqocy.com
                    127.0.0.1 jedonkey.cjt1.net
                    127.0.0.1 jinisearch.co.uk
                    127.0.0.1 jinkads.de
                    127.0.0.1 jkazaa.cjt1.net
                    127.0.0.1 jnova.cjt1.net
                    127.0.0.1 joetec.net
                    127.0.0.1 jokedollars.com
                    127.0.0.1 js.users.51.la
                    127.0.0.1 juggler.inetinteractive.com
                    127.0.0.1 just-hitz.org
                    127.0.0.1 justwebads.com
                    127.0.0.1 k.iinfo.cz
                    127.0.0.1 kanoodle.com
                    127.0.0.1 keymedia.hu
                    127.0.0.1 kliks.nl
                    127.0.0.1 klipads.dvlabs.com
                    127.0.0.1 kliptracker.com
                    127.0.0.1 klix.cz
                    127.0.0.1 kontera.com
                    127.0.0.1 kqzyfj.com
                    127.0.0.1 ktu.sv2.biz
                    127.0.0.1 laih.com
                    127.0.0.1 lakequincy.com
                    127.0.0.1 layer-ad.de
                    127.0.0.1 layer-ads.de
                    127.0.0.1 lbn.ru
                    127.0.0.1 lduhtrp.net
                    127.0.0.1 leadclick.com
                    127.0.0.1 leadingedgecash.com
                    127.0.0.1 lightningcast.net
                    127.0.0.1 lightspeedcash.com
                    127.0.0.1 link4ads.com
                    127.0.0.1 linkbuddies.com
                    127.0.0.1 linkexchange.com
                    127.0.0.1 linkexchange.ru
                    127.0.0.1 linkpositions.com
                    127.0.0.1 linkprice.com
                    127.0.0.1 linkrain.com
                    127.0.0.1 linkreferral.com
                    127.0.0.1 linkshighway.com
                    127.0.0.1 linkshighway.net
                    127.0.0.1 linkswaper.com
                    127.0.0.1 linksynergy.com
                    127.0.0.1 linktarget.com
                    127.0.0.1 liquidad.narrowcastmedia.com
                    127.0.0.1 lnads.osdn.com
                    127.0.0.1 log.btopenworld.com
                    127.0.0.1 logging.to
                    127.0.0.1 logs.erasmas.com
                    127.0.0.1 lookery.com
                    127.0.0.1 lop.com
                    127.0.0.1 lynxtrack.com
                    127.0.0.1 m.webtrends.com
                    127.0.0.1 m4n.nl
                    127.0.0.1 madisonavenue.com
                    127.0.0.1 mads.cnet.com
                    127.0.0.1 mads.gamespot.com
                    127.0.0.1 mailusnow123.com
                    127.0.0.1 mainos2.mtv3.fi
                    127.0.0.1 malware-scan.com
                    127.0.0.1 malwaredomainlist.com
                    127.0.0.1 malwaredomains.com
                    127.0.0.1 marchex.com
                    127.0.0.1 marketbanker.com
                    127.0.0.1 marketing.3fn.net
                    127.0.0.1 marketing.888.com
                    127.0.0.1 marketing.beatport.net
                    127.0.0.1 marketing.nyi.net
                    127.0.0.1 marketing.osijek031.com
                    127.0.0.1 marketingsolutions.yahoo.com
                    127.0.0.1 marketscore.com
                    127.0.0.1 mas.sector.sk
                    127.0.0.1 masterbanners.com
                    127.0.0.1 mastermind.com
                    127.0.0.1 masterstats.com
                    127.0.0.1 matchcraft.com
                    127.0.0.1 max.i12.de
                    127.0.0.1 maximumcash.com
                    127.0.0.1 maxserving.com
                    127.0.0.1 mbs.megaroticlive.com
                    127.0.0.1 mbuyu.nl
                    127.0.0.1 measuremap.com
                    127.0.0.1 media-adrunner.mycomputer.com
                    127.0.0.1 media-servers.net
                    127.0.0.1 media.ftv-publicite.fr
                    127.0.0.1 media.funpic.de
                    127.0.0.1 mediacharger.com
                    127.0.0.1 mediadvertising.ro
                    127.0.0.1 mediageneral.com
                    127.0.0.1 mediamayhemcorp.com
                    127.0.0.1 mediamgr.ugo.com
                    127.0.0.1 mediaplazza.com
                    127.0.0.1 mediaplex.com
                    127.0.0.1 mediascale.de
                    127.0.0.1 mediatext.com
                    127.0.0.1 mediavantage.de
                    127.0.0.1 megacash.de
                    127.0.0.1 megago.com
                    127.0.0.1 megastats.com
                    127.0.0.1 megawerbung.de
                    127.0.0.1 memorix.sdv.fr
                    127.0.0.1 metaad.econet.hu
                    127.0.0.1 metaffiliation.com
                    127.0.0.1 metafilliation.com
                    127.0.0.1 methodcash.com
                    127.0.0.1 metrics.windowsitpro.com
                    127.0.0.1 miarroba.com
                    127.0.0.1 microstatic.pl
                    127.0.0.1 microticker.com
                    127.0.0.1 milky.stileproject.com
                    127.0.0.1 mindseti.com
                    127.0.0.1 minhembio.research-int.se
                    127.0.0.1 mirror.qkimg.net
                    127.0.0.1 misstrends.com
                    127.0.0.1 miva.com
                    127.0.0.1 mixtraffic.com
                    127.0.0.1 mjxads.internet.com
                    127.0.0.1 mkt.cz
                    127.0.0.1 mochiads.com
                    127.0.0.1 modemspeedbooster.com
                    127.0.0.1 mojobucks.com
                    127.0.0.1 moneyexpert.com
                    127.0.0.1 monsterpops.com
                    127.0.0.1 ms-links.com
                    127.0.0.1 msads.net
                    127.0.0.1 mtree.com
                    127.0.0.1 multi1.rmuk.co.uk
                    127.0.0.1 musiccounter.ru
                    127.0.0.1 muwmedia.com
                    127.0.0.1 mvoe.cn
                    127.0.0.1 my1ads.com
                    127.0.0.1 myaffiliateprogram.com
                    127.0.0.1 mybloglog.com
                    127.0.0.1 mypagerank.net
                    127.0.0.1 mypowermall.com
                    127.0.0.1 myrating.ljseek.com
                    127.0.0.1 mystat-in.net
                    127.0.0.1 mystat.pl
                    127.0.0.1 mytop-in.net
                    127.0.0.1 mytrix.com
                    127.0.0.1 n69.com
                    127.0.0.1 naj.sk
                    127.0.0.1 namimedia.com
                    127.0.0.1 nastydollars.com
                    127.0.0.1 navrcholu.cz
                    127.0.0.1 navstevnost.cz
                    127.0.0.1 nbjmp.com
                    127.0.0.1 ndparking.com
                    127.0.0.1 nedstat.com
                    127.0.0.1 nedstat.nl
                    127.0.0.1 nedstatbasic.net
                    127.0.0.1 nedstatpro.net
                    127.0.0.1 neocounter.neoworx-blog-tools.net
                    127.0.0.1 neocounter.net
                    127.0.0.1 neoffic.com
                    127.0.0.1 net-filter.com
                    127.0.0.1 netads.sohu.com
                    127.0.0.1 netaffiliation.com
                    127.0.0.1 netagent.cz
                    127.0.0.1 netdirect.nl
                    127.0.0.1 neteu.eu
                    127.0.0.1 netincap.com
                    127.0.0.1 netpool.netbookia.net
                    127.0.0.1 netvertising.be
                    127.0.0.1 network.business.com
                    127.0.0.1 network.realmedia.com
                    127.0.0.1 networkadvertising.org
                    127.0.0.1 new-ads.eurogamer.net
                    127.0.0.1 new.50bang.com
                    127.0.0.1 newbie.com
                    127.0.0.1 newnet.qsrch.com
                    127.0.0.1 newnudecash.com
                    127.0.0.1 newt1.adultadworld.com
                    127.0.0.1 newtopsites.com
                    127.0.0.1 ng3.ads.warnerbros.com
                    127.0.0.1 ngadcenter.net
                    127.0.0.1 ngs.impress.co.jp
                    127.0.0.1 nitroclicks.com
                    127.0.0.1 nscpcdn.com.example.com
                    127.0.0.1 numax.nu-1.com
                    127.0.0.1 nuseek.com
                    127.0.0.1 oa.techcrunch.com
                    127.0.0.1 oas-central.realmedia.com
                    127.0.0.1 oas.benchmark.fr
                    127.0.0.1 oas.blick.ch
                    127.0.0.1 oas.foxnews.com
                    127.0.0.1 oas.heise.de
                    127.0.0.1 oas.repubblica.it
                    127.0.0.1 oas.roanoke.com
                    127.0.0.1 oas.salon.com
                    127.0.0.1 oas.signonsandiego.com
                    127.0.0.1 oas.toronto.com
                    127.0.0.1 oas.uniontrib.com
                    127.0.0.1 oas.villagevoice.com
                    127.0.0.1 oas.wwwheise.de
                    127.0.0.1 oascentral.businessweek.com
                    127.0.0.1 oascentral.chicagobusiness.com
                    127.0.0.1 oascentral.dilbert.com
                    127.0.0.1 oascentral.encyclopedia.com
                    127.0.0.1 oascentral.fortunecity.com
                    127.0.0.1 oascentral.ggl.com
                    127.0.0.1 oascentral.redherring.com
                    127.0.0.1 oascentral.reference.com
                    127.0.0.1 oascentral.register.com
                    127.0.0.1 oascentral.theonion.com
                    127.0.0.1 oascentral.thesmokinggun.com
                    127.0.0.1 observer.cz
                    127.0.0.1 oewa.at
                    127.0.0.1 oewabox.at
                    127.0.0.1 offerforge.com
                    127.0.0.1 offermatica.com
                    127.0.0.1 offeroptimizer.com
                    127.0.0.1 oinadserve.com
                    127.0.0.1 oinadserver.com
                    127.0.0.1 ojdinteractiva.com
                    127.0.0.1 omniture.com
                    127.0.0.1 oneandonlynetwork.com
                    127.0.0.1 onenetworkdirect.com
                    127.0.0.1 onestat.com
                    127.0.0.1 onewaylinkexchange.net
                    127.0.0.1 onlinecash.com
                    127.0.0.1 onlinerewardcenter.com
                    127.0.0.1 onresponse.com
                    127.0.0.1 openad.infobel.com
                    127.0.0.1 openad.travelnow.com
                    127.0.0.1 openads.friendfinder.com
                    127.0.0.1 openclick.com
                    127.0.0.1 openx.cz
                    127.0.0.1 operaadfilter.com
                    127.0.0.1 ota.cartrawler.com
                    127.0.0.1 overpeer.com
                    127.0.0.1 overture.com
                    127.0.0.1 owebmoney.ru
                    127.0.0.1 oxado.com
                    127.0.0.1 oxcash.com
                    127.0.0.1 p5.omaha.com
                    127.0.0.1 pa.penny-arcade.com
                    127.0.0.1 pagead2.googlesyndication.com
                    127.0.0.1 partage-facile.com
                    127.0.0.1 partner-ads.com
                    127.0.0.1 partner.gonamic.de
                    127.0.0.1 partner.pelikan.cz
                    127.0.0.1 partner.topcities.com
                    127.0.0.1 partner2profit.com
                    127.0.0.1 partnerkonto.de
                    127.0.0.1 partners.priceline.com
                    127.0.0.1 partners.starnetsystems.net
                    127.0.0.1 partnerz.gada.be
                    127.0.0.1 passion-4.com
                    127.0.0.1 passion-4.net
                    127.0.0.1 passport.baidu.com
                    127.0.0.1 pay-ads.com
                    127.0.0.1 pay-to-promote.com
                    127.0.0.1 paycounter.com
                    127.0.0.1 paydayasap.com
                    127.0.0.1 paypopup.com
                    127.0.0.1 payserve.com
                    127.0.0.1 pbnet.ru
                    127.0.0.1 pcash.imlive.com
                    127.0.0.1 pcekspert.com
                    127.0.0.1 pcwizz.com
                    127.0.0.1 pennyweb.com
                    127.0.0.1 pepperjamnetwork.com
                    127.0.0.1 performancing.com
                    127.0.0.1 pgpartner.com
                    127.0.0.1 phoenix-adrunner.mycomputer.com
                    127.0.0.1 phpadsnew.new.natuurpark.nl
                    127.0.0.1 pillscash.com
                    127.0.0.1 pimproll.com
                    127.0.0.1 planetactive.com
                    127.0.0.1 play4traffic.com
                    127.0.0.1 plugrush.com
                    127.0.0.1 pointroll.com
                    127.0.0.1 pop-under.ru
                    127.0.0.1 pop6.com
                    127.0.0.1 pops.freeze.com
                    127.0.0.1 popub.com
                    127.0.0.1 popularix.com
                    127.0.0.1 popunder.ru
                    127.0.0.1 popup.msn.com
                    127.0.0.1 popupad.net
                    127.0.0.1 popupmoney.com
                    127.0.0.1 popupnation.com
                    127.0.0.1 popups.infostart.com
                    127.0.0.1 popups.ru
                    127.0.0.1 popupsponsor.com
                    127.0.0.1 popuptraffic.com
                    127.0.0.1 porngraph.com
                    127.0.0.1 porntrack.com
                    127.0.0.1 postmasterbannernet.com
                    127.0.0.1 potenza.cz
                    127.0.0.1 prchecker.info
                    127.0.0.1 precisionclick.com
                    127.0.0.1 precisioncounter.com
                    127.0.0.1 predictad.com
                    127.0.0.1 premium-offers.com
                    127.0.0.1 premiumcash.de
                    127.0.0.1 primaryads.com
                    127.0.0.1 primetime.net
                    127.0.0.1 prisjakt.research-int.se
                    127.0.0.1 privatecash.com
                    127.0.0.1 pro-advertising.com
                    127.0.0.1 pro-market.net
                    127.0.0.1 pro.i-doctor.co.kr
                    127.0.0.1 proaffili.net
                    127.0.0.1 profero.com
                    127.0.0.1 professorbanner.com
                    127.0.0.1 profiler.engagd.com
                    127.0.0.1 projectwonderful.com
                    127.0.0.1 promo.badoink.com
                    127.0.0.1 promo.elitepvpers.com
                    127.0.0.1 promo1.webcams.nl
                    127.0.0.1 promobenef.com
                    127.0.0.1 promos.fling.com
                    127.0.0.1 promote.opera.com
                    127.0.0.1 promote.pair.com
                    127.0.0.1 promotionpalace.com
                    127.0.0.1 promozia.de
                    127.0.0.1 pronetadvertising.com
                    127.0.0.1 proton-tm.com
                    127.0.0.1 provexia.com
                    127.0.0.1 prsitecheck.com
                    127.0.0.1 psstt.com
                    127.0.0.1 pub-g.ifrance.com
                    127.0.0.1 pub.chez.com
                    127.0.0.1 pub.club-internet.fr
                    127.0.0.1 pub.hardware.fr
                    127.0.0.1 pub.opt.pf
                    127.0.0.1 pub.realmedia.fr
                    127.0.0.1 publi.grupocorreo.es
                    127.0.0.1
                    0
                    1. Salut,

                      1) où se trouve le rapport smitfraudfix, après nettoyage (option 2)?

                      2) A la fin l'examen avec malwarebytes antimalware, et comme cela l'est indiqué dans le tuto, il est indiqué "Afficher les résultats", tu dois alors faire "supprimer la sélection" pour éliminer les malware.

                      Vas dans l'onglet quarantaine, supprime tout ce qui s'y trouve et colle u nouveau rapport Malware

                      3) Colle un nouveau rapport Hijackthis

                      On arrive à la fin, courage

                      Zor
                      0
                      1. Malwarebytes' Anti-Malware 1.30
                        Version de la base de données: 1380
                        Windows 5.1.2600 Service Pack 3, v.5512

                        10/11/2008 20:44:33
                        mbam-log-2008-11-10 (20-44-18).txt

                        Type de recherche: Examen complet (C:\|)
                        Eléments examinés: 50333
                        Temps écoulé: 35 minute(s), 45 second(s)

                        Processus mémoire infecté(s): 0
                        Module(s) mémoire infecté(s): 0
                        Clé(s) du Registre infectée(s): 1
                        Valeur(s) du Registre infectée(s): 0
                        Elément(s) de données du Registre infecté(s): 3
                        Dossier(s) infecté(s): 0
                        Fichier(s) infecté(s): 2

                        Processus mémoire infecté(s):
                        (Aucun élément nuisible détecté)

                        Module(s) mémoire infecté(s):
                        (Aucun élément nuisible détecté)

                        Clé(s) du Registre infectée(s):
                        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\cont_offersfortoday (Adware.Agent) -> No action taken.

                        Valeur(s) du Registre infectée(s):
                        (Aucun élément nuisible détecté)

                        Elément(s) de données du Registre infecté(s):
                        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{1267d457-eef7-48fa-9fe7-bb22988956fd}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.223;85.255.112.105 -> No action taken.
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{1267d457-eef7-48fa-9fe7-bb22988956fd}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.223;85.255.112.105 -> No action taken.
                        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{1267d457-eef7-48fa-9fe7-bb22988956fd}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.223;85.255.112.105 -> No action taken.

                        Dossier(s) infecté(s):
                        (Aucun élément nuisible détecté)

                        Fichier(s) infecté(s):
                        C:\Program Files\Mozilla Firefox\components\nsoffersfortoday.dll (Adware.BHO) -> No action taken.
                        C:\WINDOWS\system32\cont_offersfortoday-remove.exe (Adware.Agent) -> No action taken.

                        Logfile of Trend Micro HijackThis v2.0.2
                        Scan saved at 21:17:33, on 10/11/2008
                        Platform: Windows XP SP3, v.5512 (WinNT 5.01.2600)
                        MSIE: Internet Explorer v7.00 (7.00.6000.20861)
                        Boot mode: Normal

                        Running processes:
                        C:\WINDOWS\System32\smss.exe
                        C:\WINDOWS\system32\winlogon.exe
                        C:\WINDOWS\system32\services.exe
                        C:\WINDOWS\system32\lsass.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\WINDOWS\system32\spoolsv.exe
                        C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                        C:\WINDOWS\Explorer.EXE
                        C:\Program Files\Taskix\Taskix32.exe
                        C:\Program Files\VistaDriveIcon\DrvIcon.exe
                        C:\WINDOWS\system32\hkcmd.exe
                        C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
                        C:\Program Files\LClock\LClock.exe
                        C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
                        C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                        C:\Program Files\Trend Micro\HijackThis\HJT.exe

                        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris
                        R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
                        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                        O4 - HKLM\..\Run: [Taskix] C:\Program Files\Taskix\Taskix32.exe start
                        O4 - HKLM\..\Run: [DrvIcon] C:\Program Files\VistaDriveIcon\DrvIcon.exe
                        O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
                        O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
                        O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
                        O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
                        O4 - HKCU\..\Run: [LClock] "C:\Program Files\LClock\LClock.exe"
                        O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                        O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')
                        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                        O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                        O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                        0
                        1. passe à l'option 2 et accepte la reconfiguration...
                          0
                          1. En lançant l'option 2 de Smitfraudfix ce message c'est affiché ( votre ordinateur est certainement victime d'un détournement DNS Sagem Wifi 11g USB adaptateur Miniport d'ordonnance de paquets voulez vous reconfigurer votre réseau avec des IP dynamiques - DHCP )
                            0
                            1. 1) Parfait, tu peux relancer Smitfraudfix et lancer l'option 2 (désinfection) cette fois.

                              2) Ensuite, télécharge malwarebytes antimalware
                              http://www.commentcamarche.net/telecharger/telecharger 34055379 malwarebytes anti malware

                              Fais un scan complet de ton ordi en mode sans échec
                              Démarrage en mode sans échec

                              tuto logiciel: https://forums.cnetfrance.fr

                              Colle le rapport d'analyse

                              3) colle un rapport Hijackthis (après redémarrage de l'ordinateur)

                              Comment se comporte ton ordi?

                              A plus

                              Zor
                              0
                              1. voila les rapport,

                                SmitFraudFix v2.373

                                Rapport fait à 15:58:06,12, 10/11/2008
                                Executé à partir de C:\Documents and Settings\Miminou\Bureau\T‚l‚chargements\SmitfraudFix
                                OS: Console - Windows Trust 3.0 (Service Pack 3: v5512) - Windows_NT
                                Le type du système de fichiers est NTFS
                                Fix executé en mode normal

                                »»»»»»»»»»»»»»»»»»»»»»»» Process

                                C:\WINDOWS\System32\smss.exe
                                C:\WINDOWS\system32\winlogon.exe
                                C:\WINDOWS\system32\services.exe
                                C:\WINDOWS\system32\lsass.exe
                                C:\WINDOWS\system32\svchost.exe
                                C:\WINDOWS\System32\svchost.exe
                                C:\WINDOWS\system32\spoolsv.exe
                                C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                                C:\WINDOWS\Explorer.EXE
                                C:\Program Files\Taskix\Taskix32.exe
                                C:\Program Files\VistaDriveIcon\DrvIcon.exe
                                C:\WINDOWS\system32\hkcmd.exe
                                C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
                                C:\Program Files\LClock\LClock.exe
                                C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                                C:\Program Files\Mozilla Firefox\firefox.exe
                                C:\WINDOWS\system32\cmd.exe

                                »»»»»»»»»»»»»»»»»»»»»»»» hosts

                                Fichier hosts corrompu !

                                127.0.0.1 mpa.one.microsoft.com
                                127.0.0.1 ads.techguy.org

                                »»»»»»»»»»»»»»»»»»»»»»»» C:\

                                C:\resycled\ PRESENT !

                                »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

                                »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

                                »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

                                »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

                                C:\WINDOWS\system32\split.exe PRESENT !

                                »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Miminou

                                »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Miminou\LOCALS~1\Temp

                                »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Miminou\Application Data

                                »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

                                »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Miminou\Favoris

                                »»»»»»»»»»»»»»»»»»»»»»»» Bureau

                                »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                                »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

                                »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

                                [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
                                "Source"="About:Home"
                                "SubscribedURL"="About:Home"
                                "FriendlyName"="Ma page d'accueil"

                                »»»»»»»»»»»»»»»»»»»»»»»» o4Patch
                                !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                o4Patch
                                Credits: Malware Analysis & Diagnostic
                                Code: S!Ri

                                »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
                                !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                IEDFix
                                Credits: Malware Analysis & Diagnostic
                                Code: S!Ri

                                »»»»»»»»»»»»»»»»»»»»»»»» VACFix
                                !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                VACFix
                                Credits: Malware Analysis & Diagnostic
                                Code: S!Ri

                                »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
                                !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                404Fix
                                Credits: Malware Analysis & Diagnostic
                                Code: S!Ri

                                »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
                                !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                SrchSTS.exe by S!Ri
                                Search SharedTaskScheduler's .dll

                                »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
                                !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                                "AppInit_DLLs"=""

                                »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
                                !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                                "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
                                "System"="lsass.exe"

                                »»»»»»»»»»»»»»»»»»»»»»»» RK

                                »»»»»»»»»»»»»»»»»»»»»»»» DNS

                                Votre ordinateur est certainement victime d'un détournement de DNS: 85.255.x.x détecté !

                                Description: SAGEM Wi-Fi 11g USB adapter - Miniport d'ordonnancement de paquets
                                DNS Server Search Order: 85.255.112.223;85.255.112.105

                                HKLM\SYSTEM\CCS\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: DhcpNameServer=192.168.1.1
                                HKLM\SYSTEM\CCS\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: NameServer=85.255.112.223;85.255.112.105
                                HKLM\SYSTEM\CS1\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: DhcpNameServer=192.168.1.1
                                HKLM\SYSTEM\CS1\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: NameServer=85.255.112.223;85.255.112.105
                                HKLM\SYSTEM\CS3\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: DhcpNameServer=192.168.1.1
                                HKLM\SYSTEM\CS3\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: NameServer=85.255.112.223;85.255.112.105
                                HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
                                HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
                                HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1

                                »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

                                »»»»»»»»»»»»»»»»»»»»»»»» Fin

                                Logfile of Trend Micro HijackThis v2.0.2
                                Scan saved at 16:02:12, on 10/11/2008
                                Platform: Windows XP SP3, v.5512 (WinNT 5.01.2600)
                                MSIE: Internet Explorer v7.00 (7.00.6000.20861)
                                Boot mode: Normal

                                Running processes:
                                C:\WINDOWS\System32\smss.exe
                                C:\WINDOWS\system32\winlogon.exe
                                C:\WINDOWS\system32\services.exe
                                C:\WINDOWS\system32\lsass.exe
                                C:\WINDOWS\system32\svchost.exe
                                C:\WINDOWS\System32\svchost.exe
                                C:\WINDOWS\system32\spoolsv.exe
                                C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                                C:\WINDOWS\Explorer.EXE
                                C:\Program Files\Taskix\Taskix32.exe
                                C:\Program Files\VistaDriveIcon\DrvIcon.exe
                                C:\WINDOWS\system32\hkcmd.exe
                                C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
                                C:\Program Files\LClock\LClock.exe
                                C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                                C:\Program Files\Mozilla Firefox\firefox.exe
                                C:\Program Files\Trend Micro\HijackThis\HJT.exe

                                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr/?gws_rd=ssl
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.fr/?gws_rd=ssl
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
                                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris
                                R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
                                O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                                O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                O4 - HKLM\..\Run: [Taskix] C:\Program Files\Taskix\Taskix32.exe start
                                O4 - HKLM\..\Run: [DrvIcon] C:\Program Files\VistaDriveIcon\DrvIcon.exe
                                O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
                                O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
                                O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
                                O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
                                O4 - HKCU\..\Run: [LClock] "C:\Program Files\LClock\LClock.exe"
                                O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                                O4 - HKCU\..\Run: [MSFox] C:\DOCUME~1\Miminou\LOCALS~1\Temp\xxx5155.exe
                                O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')
                                O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                                O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                                O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                O17 - HKLM\System\CCS\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: NameServer = 85.255.112.223;85.255.112.105
                                O17 - HKLM\System\CS1\Services\Tcpip\..\{1267D457-EEF7-48FA-9FE7-BB22988956FD}: NameServer = 85.255.112.223;85.255.112.105
                                O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
                                O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
                                0
                                1. oui, tu dois temporairement désactiver l'antivirus pour le téléchargement...D'autres logiciels le reconnaissent comme trojan (Nod32 aussi pour ne pas le citer)...
                                  0
                                  1. est-ce normal que quand je télécharge smitfraudfix antivir détecte automatiquement des dropper ?
                                    0
                                    1. ...ainsi qu'un nouveau rapport Hijackthis...évidemment
                                      0
                                      1. Okay,

                                        antivir n'a rien détecté: c'est déjà cela.

                                        Comme indiqué ci-dessus, télécharge smitfraudfix et colle un rapport d'analyse.

                                        A plus

                                        Zor
                                        0
                                        1. je croit que j'ai effacer les virus mais j'en suis pas sur, jugez par vous même ( si il en reste encore comment les effacer ?) :

                                          Avira AntiVir Personal
                                          Report file date: lundi 10 novembre 2008 14:06

                                          Scanning for 1023599 virus strains and unwanted programs.

                                          Licensed to: Avira AntiVir PersonalEdition Classic
                                          Serial number: 0000149996-ADJIE-0001
                                          Platform: Windows XP
                                          Windows version: (Service Pack 3, v.5512) [5.1.2600]
                                          Boot mode: Normally booted
                                          Username: Dark-Akuma
                                          Computer name: TRUS-4EA1E3C776

                                          Version information:
                                          BUILD.DAT : 8.2.0.334 16933 Bytes 16/10/2008 14:55:00
                                          AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 09:57:53
                                          AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 08:56:40
                                          LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 13:44:19
                                          LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 08:58:52
                                          ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 12:19:15
                                          ANTIVIR1.VDF : 7.1.0.56 411136 Bytes 09/11/2008 12:19:16
                                          ANTIVIR2.VDF : 7.1.0.57 2048 Bytes 09/11/2008 12:19:17
                                          ANTIVIR3.VDF : 7.1.0.62 35840 Bytes 10/11/2008 13:05:29
                                          Engineversion : 8.2.0.29
                                          AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 11:05:56
                                          AESCRIPT.DLL : 8.1.1.13 332156 Bytes 10/11/2008 12:19:25
                                          AESCN.DLL : 8.1.1.5 123251 Bytes 10/11/2008 12:19:24
                                          AERDL.DLL : 8.1.1.3 438645 Bytes 10/11/2008 12:19:24
                                          AEPACK.DLL : 8.1.3.3 393591 Bytes 10/11/2008 12:19:23
                                          AEOFFICE.DLL : 8.1.0.30 196986 Bytes 10/11/2008 12:19:22
                                          AEHEUR.DLL : 8.1.0.71 1487222 Bytes 10/11/2008 12:19:21
                                          AEHELP.DLL : 8.1.1.3 119157 Bytes 10/11/2008 12:19:19
                                          AEGEN.DLL : 8.1.1.0 319859 Bytes 10/11/2008 12:19:19
                                          AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 11:05:56
                                          AECORE.DLL : 8.1.4.1 172405 Bytes 10/11/2008 12:19:18
                                          AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 11:05:56
                                          AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 09:40:05
                                          AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 10:28:01
                                          AVREP.DLL : 8.0.0.2 98344 Bytes 10/11/2008 12:19:18
                                          AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 12:26:40
                                          AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 09:29:23
                                          AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 13:27:49
                                          SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 18:28:02
                                          SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 13:49:40
                                          NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 13:05:10
                                          RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 14:48:07
                                          RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 14:34:37

                                          Configuration settings for the scan:
                                          Jobname..........................: Local Drives
                                          Configuration file...............: C:\Program Files\Avira\AntiVir PersonalEdition Classic\alldrives.avp
                                          Logging..........................: low
                                          Primary action...................: interactive
                                          Secondary action.................: ignore
                                          Scan master boot sector..........: on
                                          Scan boot sector.................: on
                                          Boot sectors.....................: C:, A:, D:,
                                          Process scan.....................: on
                                          Scan registry....................: on
                                          Search for rootkits..............: off
                                          Scan all files...................: Intelligent file selection
                                          Scan archives....................: on
                                          Recursion depth..................: 20
                                          Smart extensions.................: on
                                          Macro heuristic..................: on
                                          File heuristic...................: medium

                                          Start of the scan: lundi 10 novembre 2008 14:06

                                          The scan of running processes will be started
                                          Scan process 'avscan.exe' - '1' Module(s) have been scanned
                                          Scan process 'avcenter.exe' - '1' Module(s) have been scanned
                                          Scan process 'avguard.exe' - '1' Module(s) have been scanned
                                          Scan process 'firefox.exe' - '1' Module(s) have been scanned
                                          Scan process 'LClock.exe' - '1' Module(s) have been scanned
                                          Scan process 'avgnt.exe' - '1' Module(s) have been scanned
                                          Scan process 'hkcmd.exe' - '1' Module(s) have been scanned
                                          Scan process 'DrvIcon.exe' - '1' Module(s) have been scanned
                                          Scan process 'Taskix32.exe' - '1' Module(s) have been scanned
                                          Scan process 'explorer.exe' - '1' Module(s) have been scanned
                                          Scan process 'sched.exe' - '1' Module(s) have been scanned
                                          Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
                                          Scan process 'svchost.exe' - '1' Module(s) have been scanned
                                          Scan process 'svchost.exe' - '1' Module(s) have been scanned
                                          Scan process 'svchost.exe' - '1' Module(s) have been scanned
                                          Scan process 'svchost.exe' - '1' Module(s) have been scanned
                                          Scan process 'lsass.exe' - '1' Module(s) have been scanned
                                          Scan process 'services.exe' - '1' Module(s) have been scanned
                                          Scan process 'winlogon.exe' - '1' Module(s) have been scanned
                                          Scan process 'csrss.exe' - '1' Module(s) have been scanned
                                          Scan process 'smss.exe' - '1' Module(s) have been scanned
                                          21 processes with 21 modules were scanned

                                          Starting master boot sector scan:
                                          Master boot sector HD0
                                          [INFO] No virus was found!

                                          Start scanning boot sectors:
                                          Boot sector 'C:\'
                                          [INFO] No virus was found!
                                          Boot sector 'A:\'
                                          [INFO] In the drive 'A:\' no data medium is inserted!

                                          Starting to scan the registry.
                                          The registry was scanned ( '48' files ).

                                          Starting the file scan:

                                          Begin scan in 'C:\'
                                          C:\pagefile.sys
                                          [WARNING] The file could not be opened!
                                          Begin scan in 'A:\'
                                          Search path A:\ could not be opened!
                                          System error [21]: Le périphérique n'est pas prêt.
                                          Begin scan in 'D:\'
                                          Search path D:\ could not be opened!
                                          System error [21]: Le périphérique n'est pas prêt.

                                          End of the scan: lundi 10 novembre 2008 14:18
                                          Used time: 11:44 Minute(s)

                                          The scan has been done completely.

                                          1779 Scanning directories
                                          63550 Files were scanned
                                          0 viruses and/or unwanted programs were found
                                          0 Files were classified as suspicious:
                                          0 files were deleted
                                          0 files were repaired
                                          0 files were moved to quarantine
                                          0 files were renamed
                                          1 Files cannot be scanned
                                          63549 Files not concerned
                                          364 Archives were scanned
                                          1 Warnings
                                          0 Notes
                                          0
                                          • 1
                                          • 2