Rapport genproc

Bonjour,

SmitFraudFix v2.378

Rapport fait à 2:22:09,59, 26/11/2008
Executé à partir de C:\Documents and Settings\Administrateur.48CB47796B37437\Application Data\IDM\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\ZSSnp211.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\McAfee\Common Framework\udaterui.exe
D:\iTunesHelper.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\Domino.exe
C:\WINDOWS\VMSnap23.exe
C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\McAfee\VirusScan Enterprise\EngineServer.exe
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
C:\WINDOWS\system32\mfevtps.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
C:\Program Files\McAfee\Common Framework\McTray.exe
C:\WINDOWS\system32\CNAB4RPK.EXE
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\WScript.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\cmd.exe
C:\Documents and Settings\Administrateur.48CB47796B37437\Application Data\IDM\SmitfraudFix\Policies.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts

Fichier hosts corrompu !

127.0.0.1 hk.digitaltrends.com
127.0.0.1 microsoft.com.org
127.0.0.1 www.www.microsoft.com.org
127.0.0.1 legal-at-spybot.info
127.0.0.1 www.legal-at-spybot.info

»»»»»»»»»»»»»»»»»»»»»»»» C:\

C:\autorun.inf PRESENT !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrateur.48CB47796B37437

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ADMINI~1.48C\LOCALS~1\Temp

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Administrateur.48CB47796B37437\Application Data

»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\ADMINI~1.48C\Favoris

»»»»»»»»»»»»»»»»»»»»»»»» Bureau

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Ma page d'accueil"

»»»»»»»»»»»»»»»»»»»»»»»» o4Patch
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

o4Patch
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» VACFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="userinit.exe,"
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» RK

»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Realtek RTL8169/8110 Family Gigabit Ethernet NIC - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CCS\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS2\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS2\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0

»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

»»»»»»»»»»»»»»»»»»»»»»»» Fin

merci mes amis pour votre aide.

Configuration: Windows XP
Internet Explorer 7.0

6 réponses

  • Votes
  • Date
  • Date décroissante
  1. Contributeur sécurité
    Salut Cyril !!

    Parce que je vois que dans le rapport de SmitfraudFix, les fichiers hosts sont corrompus :

    Fichier hosts corrompu !

    127.0.0.1 hk.digitaltrends.com
    127.0.0.1 microsoft.com.org
    127.0.0.1 www.www.microsoft.com.org
    127.0.0.1 legal-at-spybot.info
    127.0.0.1 www.legal-at-spybot.info

    Alors plutot que d avoir un rapport de 2km, il vaut mieux restaurer les fichiers hosts avant, non ??
    1. Re,
      Il n'est pas corrompu.

      Du moment que le fichier Host n'est pas conforme à celui originel de Microsoft, Smitfraudfix le détecte comme corrompu.
      Seulement,

      127.0.0.1 legal-at-spybot.info
      127.0.0.1 www.legal-at-spybot.info 

      Spybot.

      127.0.0.1 hk.digitaltrends.com
      127.0.0.1 microsoft.com.org
      127.0.0.1 www.www.microsoft.com.org 

      Autres entrées utiles.

      On voit clairement que les URLs des sites malsains sont bloquées. ( avec un commentaire d'ailleurs )

      127.0.0.1 leakedcelebvideos.com #[Win32/TrojanDownloader.Agent.BCZ] 


      Il ne fallait donc pas restaurer le fichier host ;)

      +
  2. Bonsoir,
    Pourquoi faire restaurer le fichier host?

    L'internaute avait une très bonne protection vis à vis des sites malsains...
    ++
    1. Contributeur sécurité
      Salut !!

      je ne t ai pas demandé de faire MsnFix et toolbarSD !!

      Et je vois aussi que tu n as pas fais RHosts avant de faire l option 2 de SmitfraudFix :s

      ▶ Télécharge hijackthis

      ▶ Un tutoriel est à ta disposition sur ce site pour pouvoir l'utiliser.

      ▶ Poste le rapport obtenu dans le bloc note dans ta prochaine réponse.

      Comment copier/coller le rapport :

      ▶ Quand tu as le rapport à l écran, tu fais ctrl A pour "sélectionner tout" puis ctrl C pour "copier".

      ▶ ensuite tu viens sur le forum pour me répondre et tu fais ctrl V pour "coller" le rapport.

      1. RE BONJOUR

        VOILA LE RAPPORT QUE TU MA DEMANDE

        SmitFraudFix v2.378

        Rapport fait à 3:59:29,56, 26/11/2008
        Executé à partir de C:\Documents and Settings\Administrateur.48CB47796B37437\Mes documents\Downloads\Programs\SmitfraudFix
        OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
        Le type du système de fichiers est NTFS
        Fix executé en mode sans echec

        »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

        SrchSTS.exe by S!Ri
        Search SharedTaskScheduler's .dll

        »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

        »»»»»»»»»»»»»»»»»»»»»»»» hosts

        127.0.0.1 localhost

        »»»»»»»»»»»»»»»»»»»»»»»» VACFix

        VACFix
        Credits: Malware Analysis & Diagnostic
        Code: S!Ri

        »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

        S!Ri's WS2Fix: LSP not Found.

        »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

        GenericRenosFix by S!Ri

        »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

        C:\autorun.inf supprimé

        »»»»»»»»»»»»»»»»»»»»»»»» IEDFix

        IEDFix
        Credits: Malware Analysis & Diagnostic
        Code: S!Ri

        »»»»»»»»»»»»»»»»»»»»»»»» 404Fix

        404Fix
        Credits: Malware Analysis & Diagnostic
        Code: S!Ri

        »»»»»»»»»»»»»»»»»»»»»»»» RK

        »»»»»»»»»»»»»»»»»»»»»»»» DNS

        HKLM\SYSTEM\CCS\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
        HKLM\SYSTEM\CCS\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
        HKLM\SYSTEM\CS1\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
        HKLM\SYSTEM\CS2\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
        HKLM\SYSTEM\CS2\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
        HKLM\SYSTEM\CS3\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: DhcpNameServer=192.168.1.1 0.0.0.0
        HKLM\SYSTEM\CS3\Services\Tcpip\..\{28599DE5-50E9-4562-8F82-1BE740749223}: NameServer=192.168.1.1
        HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
        HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
        HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0
        HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 0.0.0.0

        »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

        »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
        "System"=""

        »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

        Nettoyage terminé.

        »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

        SrchSTS.exe by S!Ri
        Search SharedTaskScheduler's .dll

        »»»»»»»»»»»»»»»»»»»»»»»» Fin

        JE TE REMERCIE.
        1. j'ai fait tout les étapes de la premiere procédure et je vais t'envoyer la 2eme

          quand je suis arriver a la 3eme étape :Etape 3/

          Double-clique sur le fichier "SmitfraudFix.exe" et choisis l'option 2, réponds oui à tout et laisse-le procéder. Sauvegarde le rapport sur ton bureau. le CLEANMGR MANQUE.

          AU 4EME ETAPE:

          Etape 4/

          Lance le fichier MSNFix.bat qui se trouve dans le dossier MSNfix, sur le bureau.
          - Exécute l'option R.
          - Si l'infection est détectée, exécute l'option N.
          - Sauvegarde ce rapport sur ton bureau.

          je pouvez rien faire :fichier introuvable :MSNFix.bat .

          voila donc les rapport:

          -----------\\ ToolBar S&D 1.2.5 XP/Vista

          Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
          X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.00GHz )
          BIOS : Award Modular BIOS v6.00PG
          USER : Administrateur ( Administrator )
          BOOT : Fail-safe boot
          Antivirus : McAfee VirusScan Enterprise 8.7.0.570 (Activated)
          A:\ (USB)
          C:\ (Local Disk) - NTFS - Total:37 Go (Free:1 Go)
          D:\ (Local Disk) - NTFS - Total:195 Go (Free:54 Go)
          E:\ (CD or DVD)
          F:\ (CD or DVD)

          "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
          Option : [2] ( 26/11/2008| 2:47 )
          C:\DOCUME~1\ADMINI~1.48C\LOCALS~1\Temp\mc24.tmp

          -----------\\ SUPPRESSION

          Supprime! - C:\DOCUME~1\ADMINI~1.48C\LOCALS~1\Temp\mc24.tmp

          -----------\\ Recherche de Fichiers / Dossiers ...

          -----------\\ Extensions

          (Admin) - {0200c2a9-70da-4f6d-b527-f5f7d7877228} => fireuploader

          (Administrateur) - {EEE6C361-6118-11DC-9C72-001320C79847} => sweetim-toolbar

          (Administrateur.48CB47796B37437) - {EEE6C361-6118-11DC-9C72-001320C79847} => sweetim-toolbar

          -----------\\ [..\Internet Explorer\Main]

          [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
          "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
          "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
          "SearchMigratedDefaultURL"="https://search.yahoo.com/web{searchTerms}&ei=utf-8&fr=b1ie7"
          "Search Bar"="https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F"
          "Start Page"="https://www.google.fr/?gws_rd=ssl"
          "Url"="http://www.microsoft.com/athome/community/rss.xml"
          "Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
          "Url"="http://www.microsoft.com/atwork/community/rss.xml"

          [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
          "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
          "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
          "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
          "Start Page"="https://www.msn.com/fr-fr/"

          --------------------\\ Recherche d'autres infections

          --------------------\\ Cracks & Keygens ..

          C:\DOCUME~1\ADMINI~1.48C\Recent\WMP11 FR CRACK.lnk

          1 - "C:\ToolBar SD\TB_1.txt" - 26/11/2008| 2:48 - Option : [2]

          -----------\\ Fin du rapport a 2:48:57,56

          SmitFraudFix v2.378

          Rapport fait à 2:51:16,92, 26/11/2008
          Executé à partir de C:\Documents and Settings\Administrateur.48CB47796B37437\Bureau\SmitfraudFix
          OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
          Le type du système de fichiers est NTFS
          Fix executé en mode sans echec

          »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
          !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

          SrchSTS.exe by S!Ri
          Search SharedTaskScheduler's .dll

          »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

          »»»»»»»»»»»»»»»»»»»»»»»» hosts

          127.0.0.1 localhost

          127.0.0.1 ad.a8.net
          127.0.0.1 asy.a8ww.net
          127.0.0.1 www.abx4.com #[Adware.ABXToolbar]
          127.0.0.1 acezip.net #[SiteAdvisor.acezip.net]
          127.0.0.1 www.acezip.net #[Win32/Adware.180Solutions]
          127.0.0.1 phpadsnew.abac.com
          127.0.0.1 a.abnad.net
          127.0.0.1 b.abnad.net
          127.0.0.1 c.abnad.net #[eTrust.Tracking.Cookie]
          127.0.0.1 d.abnad.net
          127.0.0.1 e.abnad.net
          127.0.0.1 t.abnad.net
          127.0.0.1 banners.absolpublisher.com
          127.0.0.1 tracking.absolstats.com
          127.0.0.1 adv.abv.bg
          127.0.0.1 bimg.abv.bg
          127.0.0.1 www2.a-counter.kiev.ua
          127.0.0.1 accuserveadsystem.com
          127.0.0.1 www.accuserveadsystem.com
          127.0.0.1 gtb5.acecounter.com
          127.0.0.1 gtcc1.acecounter.com
          127.0.0.1 gtp1.acecounter.com #[eTrust.Tracking.Cookie]
          127.0.0.1 acestats.com
          127.0.0.1 www.acestats.com
          127.0.0.1 achmedia.com
          127.0.0.1 ads.active.com
          127.0.0.1 am1.activemeter.com
          127.0.0.1 www.activemeter.com #[eTrust.Tracking.Cookie]
          127.0.0.1 ads.activepower.net
          127.0.0.1 stat.active24stats.nl #[eTrust.Tracking.Cookie]
          127.0.0.1 web.acumenpi.com #[AdvertPro]
          127.0.0.1 ad.ad24.ru
          127.0.0.1 at.ad2click.nl
          127.0.0.1 cms.ad2click.nl
          127.0.0.1 banner.ad.nu
          127.0.0.1 ad-up.com
          127.0.0.1 www.ad-up.com
          127.0.0.1 www.adagencypro.com
          127.0.0.1 ads.adap.tv
          127.0.0.1 vad.adbasket.net
          127.0.0.1 ad.pop1.adbn.ru
          127.0.0.1 adserv.adbonus.com
          127.0.0.1 www.adbonus.com
          127.0.0.1 james.adbutler.de #[Tenebril.TrackingCookie]
          127.0.0.1 www.adbutler.de #[SunBelt.AdButler.de]
          127.0.0.1 adc2.adcentriconline.com
          127.0.0.1 adcp.adcentriconline.com
          127.0.0.1 bell.adcentriconline.com #[Wildcard DNS]
          127.0.0.1 content.adcentriconline.com
          127.0.0.1 media.adcentriconline.com
          127.0.0.1 publicis.adcentriconline.com
          127.0.0.1 ad-clix.com
          127.0.0.1 www.ad-clix.com
          127.0.0.1 adcomplete.com
          127.0.0.1 www.adcomplete.com
          127.0.0.1 axa.addcontrol.net #[Ewido.TrackingCookie.Addcontrol]
          127.0.0.1 ads.addynamix.com #[SpySweeper.Spy.Cookie]
          127.0.0.1 e13.media.addynamix.com
          127.0.0.1 www.adeos.eu
          127.0.0.1 adcode.adengage.com
          127.0.0.1 stats2.adengage.com
          127.0.0.1 www.adengage.com
          127.0.0.1 pt.server1.adexit.com
          127.0.0.1 www.adexit.com
          127.0.0.1 www.ad4ever.com
          127.0.0.1 track.adform.net
          127.0.0.1 adfun.ru
          127.0.0.1 ad1.adfun.ru
          127.0.0.1 ad2.adfun.ru
          127.0.0.1 ad3.adfun.ru
          127.0.0.1 ad4.adfun.ru
          127.0.0.1 harvest.adgardener.com
          127.0.0.1 harvest6.adgardener.com
          127.0.0.1 harvest7.adgardener.com
          127.0.0.1 harvest8.adgardener.com
          127.0.0.1 harvest11.adgardener.com
          127.0.0.1 harvest12.adgardener.com
          127.0.0.1 harvest13.adgardener.com
          127.0.0.1 harvest163.adgardener.com
          127.0.0.1 harvest176.adgardener.com
          127.0.0.1 seeds.adgardener.com
          127.0.0.1 www.adgroups.net
          127.0.0.1 www.ad-groups.com #[Ban Man Pro Banner Code]
          127.0.0.1 host1.adhese.be #[Adhese Datamine Tag]
          127.0.0.1 host2.adhese.be
          127.0.0.1 host3.adhese.be #[ad.be.doubleclick.net]
          127.0.0.1 host4.adhese.be
          127.0.0.1 ads.adhsm.adhese.com
          127.0.0.1 pool.adhsm.adhese.com
          127.0.0.1 ssl3.adhost.com
          127.0.0.1 www2.adhost.com
          127.0.0.1 zone10.adicate.com
          127.0.0.1 www.adimpact.com
          127.0.0.1 adfarm1.adition.com
          127.0.0.1 imagesrv.adition.com
          127.0.0.1 ad.adition.net
          127.0.0.1 hosting.adjug.com
          127.0.0.1 tracking.adjug.com
          127.0.0.1 adsearch.adkontekst.pl
          127.0.0.1 community.adlandpro.com #[Ad-Aware Tracking.Cookie]
          127.0.0.1 pk.adlandpro.com
          127.0.0.1 te.adlandpro.com #[eTrust.Tracking.Cookie]
          127.0.0.1 trafficex.adlandpro.com
          127.0.0.1 www.adlandpro.com #[Ad-Aware Tracking.Cookie]
          127.0.0.1 engine.adland.ru #[eTrust.Tracking.Cookie]
          127.0.0.1 publicidad.adlead.com
          127.0.0.1 www.adlimg03.com
          127.0.0.1 classic.adlink.de
          127.0.0.1 regio.adlink.de
          127.0.0.1 west.adlink.de
          127.0.0.1 rc.de.adlink.net #[eTrust.Tracking.Cookie]
          127.0.0.1 tr.de.adlink.net
          127.0.0.1 ads3.adman.gr #[eTrust.Tracking.Cookie]
          127.0.0.1 r2d2.adman.gr
          127.0.0.1 www.adminder.com #[SpySweeper.Spy.Cookie]
          127.0.0.1 apps.admission.net #[Spotlight Ads]
          127.0.0.1 appcache.admission.net
          127.0.0.1 view.admission.net
          127.0.0.1 rms.admeta.com #[admeta.basefarm.net][eTrust.Tracking.Cookie]
          127.0.0.1 ads.admodus.com #[eTrust.Tracking.Cookie]
          127.0.0.1 ad.adnet.biz #[eTrust.Tracking.Cookie]
          127.0.0.1 engine.adnet.ru
          127.0.0.1 ad2.adnetinteractive.com
          127.0.0.1 ad.adnetwork.com.br
          127.0.0.1 agoraua.adocean.pl
          127.0.0.1 s1.ad.adocean.pl #[Ewido.Tracking.Cookie]
          127.0.0.1 s1.advicepl.adocean.pl
          127.0.0.1 s1.centrumcz.adocean.pl #[eTrust.Tracking.Cookie]
          127.0.0.1 s1.cz.adocean.pl
          127.0.0.1 s1.czgde.adocean.pl
          127.0.0.1 s1.myao.adocean.pl
          127.0.0.1 s1.pracuj.adocean.pl
          127.0.0.1 s1.skgde.adocean.pl
          127.0.0.1 s2.ad.adocean.pl
          127.0.0.1 ad01.adonspot.com
          127.0.0.1 ad02.adonspot.com
          127.0.0.1 isohunt.adonspot.com #[server down?]
          127.0.0.1 ab.adpro.com.ua
          127.0.0.1 ac.adpro.com.ua #[server down?]
          127.0.0.1 system.adquick.nl
          127.0.0.1 www.adquest.nl
          127.0.0.1 adx.adrenaline.cz
          127.0.0.1 c.adroll.com
          127.0.0.1 www.adsforindians.com
          127.0.0.1 ad.adrefer.net
          127.0.0.1 www.adreporting.com #[SunBelt.Adreporting.com]
          127.0.0.1 cntr.adrime.com
          127.0.0.1 images.adrime.com
          127.0.0.1 ad.adriver.ru
          127.0.0.1 www.adrotate.net
          127.0.0.1 serv.ad-rotator.com #[SpySweeper.Spy.Cookie]
          127.0.0.1 ad.ads8.com
          127.0.0.1 vip.ads8.com
          127.0.0.1 www.ads183.com
          127.0.0.1 antevenio.flux.ads-click.com
          127.0.0.1 acnetwork.flux.acsyndication.com
          127.0.0.1 img.ads-click.com
          127.0.0.1 ad.ads.dk
          127.0.0.1 tdkads.ads.dk
          127.0.0.1 adservercentral.com
          127.0.0.1 banners.adservercentral.com
          127.0.0.1 www.adservercentral.com #[SunBelt.adservercentral.com]
          127.0.0.1 www.adservtech.com
          127.0.0.1 adservicedomain.info
          127.0.0.1 adsfac.net #[Facilitate Tracking Code]
          127.0.0.1 images.adshuffle.com
          127.0.0.1 this.content.served.by.adshuffle.com
          127.0.0.1 adsaway.com #[HTML/TrojanDownloader.Agent.BP trojan]
          127.0.0.1 www.adsaway.com #[Google.Warning]
          127.0.0.1 adsfac.eu
          127.0.0.1 www.adshot.de
          127.0.0.1 network.adsmarket.com
          127.0.0.1 allchix.adsmax.com
          127.0.0.1 www2.adsmax.com
          127.0.0.1 www.adsodainteractive.com
          127.0.0.1 www.adspace.be
          127.0.0.1 g.adspeed.net
          127.0.0.1 ads.adsponse.de
          127.0.0.1 banner.adsrevenue.net
          127.0.0.1 creative.adsrevenue.net
          127.0.0.1 popunder.adsrevenue.net
          127.0.0.1 adserve.adster.com
          127.0.0.1 images.adster.com
          127.0.0.1 adsvert.com
          127.0.0.1 o.adtargeter.com
          127.0.0.1 ads.adtiger.de
          127.0.0.1 www.adtiger.de
          127.0.0.1 ads.adgoto.com
          127.0.0.1 adsrv.admindshare.com
          127.0.0.1 adtology.com
          127.0.0.1 adtology2.com
          127.0.0.1 adtology3.com
          127.0.0.1 www.adtology3.com
          127.0.0.1 ad.adtoma.com
          127.0.0.1 downldcl.adtoolsinc.com
          127.0.0.1 www.adtoolsinc.com
          127.0.0.1 www.adtrade.net
          127.0.0.1 www.adtrader.com
          127.0.0.1 survey.advantageresearch.com
          127.0.0.1 ad.adver.com.tw
          127.0.0.1 www.adventideas.com #[Adcycle]
          127.0.0.1 www.adversal.com
          127.0.0.1 ads.advertise.net
          127.0.0.1 www.advertisingspaces.net
          127.0.0.1 www.advertisingstats.com
          127.0.0.1 advertisingpurchase.com
          127.0.0.1 ad.adverticum.net
          127.0.0.1 img.adverticum.net
          127.0.0.1 imgs.adverticum.net
          127.0.0.1 www.advertising365.com
          127.0.0.1 ads.advertisingforyou.info
          127.0.0.1 ads.advertisingz.com
          127.0.0.1 ad.advertstream.com
          127.0.0.1 adviva.com
          127.0.0.1 www.adviva.com
          127.0.0.1 ads.adviva.net #[Panda.Spyware:Cookie/Adviva]
          127.0.0.1 de.ads.adviva.net
          127.0.0.1 adstats.adviva.net
          127.0.0.1 www.traf.advscripts.com
          127.0.0.1 ad.adworx.at
          127.0.0.1 www.ad-z.de
          127.0.0.1 banners.adzones.com
          127.0.0.1 clicks.adzones.com
          127.0.0.1 feeds.adzones.com
          127.0.0.1 www.adzones.com
          127.0.0.1 w.aeaer.com #[Google.Warning]
          127.0.0.1 aeoworld.de
          127.0.0.1 www.aeoworld.de #[W32/WMF-exploit]
          127.0.0.1 banners.affilimatch.de
          127.0.0.1 tracker.affistats.com #[msvrl.dll]
          127.0.0.1 adz.afterdawn.net
          127.0.0.1 ad.afy11.net
          127.0.0.1 stats.agent.co.il
          127.0.0.1 rmbannerserver.agestado.com.br
          127.0.0.1 stats.agentinteractive.com
          127.0.0.1 api.aggregateknowledge.com
          127.0.0.1 aams1.aim4media.com
          127.0.0.1 artwork.aim4media.com
          127.0.0.1 www.aim4media.com #[SunBelt.Adserver.aim4media]
          127.0.0.1 ads.airamerica.com
          127.0.0.1 adserver.akqa.net #[Ad-Aware Tracking.Cookie]
          127.0.0.1 download.alexa.com #[Trackware.Alexa][SPYW_ALEXA.A]
          127.0.0.1 download.china.alibaba.com #[Adware.AlibabaTB][AdWare.ToolBar.Alibabar.b]
          127.0.0.1 ad.alldanzradio.com
          127.0.0.1 tracking.allposters.com
          127.0.0.1 ad.allstar.cz
          127.0.0.1 bokee.allyes.com
          127.0.0.1 demoafp.allyes.com
          127.0.0.1 eastmoney.allyes.com
          127.0.0.1 smarttrade.allyes.com
          127.0.0.1 sroomafp.allyes.com
          127.0.0.1 taobaoafp.allyes.com
          127.0.0.1 tom.allyes.com
          127.0.0.1 uuseeafp.allyes.com
          127.0.0.1 www.almondnetworks.com
          127.0.0.1 www.almoso3h.com #[Trojan-PSW.Win32.VB.cl]
          127.0.0.1 www.alsaloumainvestment.com #[Win32/SpamTool.Gadina]
          127.0.0.1 ad.altervista.org
          127.0.0.1 pqwaker.altervista.org
          127.0.0.1 bantam.ai.net
          127.0.0.1 fiona.ai.net
          127.0.0.1 adimg.alice.it
          127.0.0.1 adv.alice.it
          127.0.0.1 altmedia101.com
          127.0.0.1 adserver.alt.com
          127.0.0.1 count1.altastat.com
          127.0.0.1 feed1.altastat.com
          127.0.0.1 www.alwayson-network.com
          127.0.0.1 rcm.amazon.com
          127.0.0.1 rcm-images.amazon.com
          127.0.0.1 ads.amdmb.com
          127.0.0.1 whos.amung.us #[WebBug]
          127.0.0.1 advert.ananzi.co.za
          127.0.0.1 advert2.ananzi.co.za
          127.0.0.1 adserver.ancestry.com #[RealMedia]
          127.0.0.1 adserver04.ancestry.com #[RealMedia]
          127.0.0.1 www.andyhoppe.com
          127.0.0.1 ads.angryape.com
          127.0.0.1 banners.ads.angryape.com
          127.0.0.1 www.antarasystems.com
          127.0.0.1 www.anticlown.com
          127.0.0.1 ads.antionline.com
          127.0.0.1 junior.apk.net
          127.0.0.1 www.arcadebannerexchange.com
          127.0.0.1 ard114.info #[Spamdexing]
          127.0.0.1 nu.arnostat.nl
          127.0.0.1 demiurge.arstechnica.com
          127.0.0.1 banner.arttoday.com
          127.0.0.1 ads.asia1.com.sg
          127.0.0.1 asimpleinternet.com #[Tenebril.SpecialOffers]
          127.0.0.1 www.asimpleinternet.com
          127.0.0.1 ads.ask.com #[sv-click.looksmart.com]
          127.0.0.1 contextual.syndication.ask.com
          127.0.0.1 www.asknew.com #[Spamdexing]
          127.0.0.1 www.askyaya.com #[SunBelt.AskYaya]
          127.0.0.1 ads.aspalliance.com
          127.0.0.1 ads.associatedcontent.com
          127.0.0.1 f.astaz.info #[Malicious.Links.Codec]
          127.0.0.1 www.ati-etailer.de
          127.0.0.1 dist.atlas-ia.com #[ADW_ATLAST.A]
          127.0.0.1 www.atlas-ia.com #[Adware.OfferAgent][Adware-Atlas]
          127.0.0.1 ads.auctionads.com
          127.0.0.1 audiogalaxy.com
          127.0.0.1 www.audiogalaxy.com
          127.0.0.1 banners.audioholics.com
          127.0.0.1 ads.auctioncity.co.nz
          127.0.0.1 ads.autotrader.co.za
          127.0.0.1 adserving.autotrader.com #[SunBelt.AdServing.AutoTrader.com]
          127.0.0.1 www.avsads.com
          127.0.0.1 engine.awaps.net
          127.0.0.1 b3a70b.t.axf8.net
          127.0.0.1 caea4e.t.axf8.net
          127.0.0.1 fdff44.r.axf8.net
          127.0.0.1 www.axill.com
          127.0.0.1 images.axill.in
          127.0.0.1 www.axill.in
          127.0.0.1 axload.to #[Adware.Webprefix][Trojan.Downloader.6588.E]
          127.0.0.1 valid.axload.to
          127.0.0.1 ayiosamvrosios.com #[Javascript.Exploit]
          127.0.0.1 www.azads.net
          127.0.0.1 azsearch.org
          127.0.0.1 adserver1.backbeatmedia.com
          127.0.0.1 adserver1-images.backbeatmedia.com
          127.0.0.1 bullseye.backbeatmedia.com
          127.0.0.1 www.badhyip.org #[Google.Warning]
          127.0.0.1 ads.badische-zeitung.de
          127.0.0.1 bar.baidu.com #[Win32/Adware.Toolbar.Baidu][Sophos.JS/BDHelper-A]
          127.0.0.1 download.baigoo.com #[AdWare.Win32.Baigoo.a][Trackware.Baigoo]
          127.0.0.1 balticaffiliate.com #[Spamdexing]
          127.0.0.1 www.baltictop.com
          127.0.0.1 adsrv.bankrate.com
          127.0.0.1 click.banneradv.com
          127.0.0.1 adserver.banneradministration.com
          127.0.0.1 www.bannerbox.cn
          127.0.0.1 bannerboxes.com #[BannerBoxes Ad Code]
          127.0.0.1 clicks.bannerboxes.com
          127.0.0.1 feeds.bannerboxes.com
          127.0.0.1 www.bannerboxes.com
          127.0.0.1 www.banner-exchange.nl
          127.0.0.1 ad.bannerhost.ru
          127.0.0.1 www.bannerhouse.ru
          127.0.0.1 banners.bannerlandia.com.ar
          127.0.0.1 www.bannermanagement.nl
          127.0.0.1 www.banneroverdrive.com
          127.0.0.1 www.bannerpromotion.it
          127.0.0.1 www.bannerspace.com
          127.0.0.1 www3.bannerspace.com #[SpySweeper.Spy.Cookie]
          127.0.0.1 www5.bannerspace.com
          127.0.0.1 www6.bannerspace.com
          127.0.0.1 www7.bannerspace.com #[Tenebril.Tracking.Cookie]
          127.0.0.1 www.bannerswap.ca
          127.0.0.1 ads.vg.basefarm.net #[RealMedia]
          127.0.0.1 ads.baz.ch
          127.0.0.1 ad2.bbmedia.cz
          127.0.0.1 bbeplayer.com #[WebBug]
          127.0.0.1 stat.bdirect.ru
          127.0.0.1 autocontext.begun.ru
          127.0.0.1 promo.begun.ru
          127.0.0.1 referal.begun.ru
          127.0.0.1 adlogger.bertgeens.be
          127.0.0.1 www.belstat.be
          127.0.0.1 www.belstat.com
          127.0.0.1 www.belstat.nl
          127.0.0.1 oas.benchmark.fr #[RealMedia]
          127.0.0.1 bestinshowjewelry.com #[HTML/TrojanDownloader.Agent.BP]
          127.0.0.1 www.bestinshowjewelry.com
          127.0.0.1 webtrends.besite.be
          127.0.0.1 www.bestofferdirect.com
          127.0.0.1 www.besttoolbars.net #[ADW_TBARWIN32.A]
          127.0.0.1 ads.betanews.com
          127.0.0.1 banner.betfred.com
          127.0.0.1 www.bettertextads.com
          127.0.0.1 big4top.com
          127.0.0.1 www.big4top.com #[IFrame.Exploit]
          127.0.0.1 stats.big-boards.com
          127.0.0.1 ad0.bigmir.net
          127.0.0.1 ad1.bigmir.net
          127.0.0.1 ad4.bigmir.net
          127.0.0.1 ad5.bigmir.net
          127.0.0.1 ad6.bigmir.net
          127.0.0.1 ad7.bigmir.net
          127.0.0.1 adi.bigmir.net
          127.0.0.1 c.bigmir.net #[SecuritySpace.WebBug]
          127.0.0.1 i.bigmir.net
          127.0.0.1 bigtracker.com
          127.0.0.1 bighits.net
          127.0.0.1 bigticker.bighits.net
          127.0.0.1 bounty.bighits.net
          127.0.0.1 www.bighits.net
          127.0.0.1 counter.bigli.ru
          127.0.0.1 bigstats.net
          127.0.0.1 banex.bikers-engine.com
          127.0.0.1 ad2.billboard.cz
          127.0.0.1 adserver.bizhat.com
          127.0.0.1 counter.bizland.com
          127.0.0.1 dc.bizjournals.com
          127.0.0.1 ads2.blastro.com
          127.0.0.1 ads3.blastro.com
          127.0.0.1 ads4.blastro.com
          127.0.0.1 ads.blick.ch
          127.0.0.1 streamstats1.blinkx.com
          127.0.0.1 ads.blizzard.com
          127.0.0.1 blogadswap.com
          127.0.0.1 tracker.blogbeat.net
          127.0.0.1 ads.blogdrive.com
          127.0.0.1 banners.blogexplosion.com
          127.0.0.1 counter.blogexplosion.com
          127.0.0.1 blogtextlinks.blogexplosion.com
          127.0.0.1 rentblog.blogexplosion.com
          127.0.0.1 mapstats.blogflux.com
          127.0.0.1 www.blogplaync.com #[Win32/TrojanDownloader.Ani.Gen][server down?]
          127.0.0.1 pcbutts1-therealtruth.blogspot.com
          127.0.0.1 t.blogreaderproject.com #[WebBug]
          127.0.0.1 blogmark.bokee.com #[Adware.BocaiToolbar]
          127.0.0.1 track.blogcounter.de
          127.0.0.1 www.blogcounter.de
          127.0.0.1 www3.bloomingdales.com #[WebBug.eluminate]
          127.0.0.1 adserver.bluewin.ch
          127.0.0.1 ie-stat.bmmetrix.com
          127.0.0.1 t.bmmetrix.com
          127.0.0.1 www.bmmetrix.com #[WebBug][Tracking.Cookie]
          127.0.0.1 ads.boardtracker.com
          127.0.0.1 ranks.boardtracker.com
          127.0.0.1 adimage.bokee.com
          127.0.0.1 ad.bol.bg
          127.0.0.1 adv.bol.bg
          127.0.0.1 ads.bomis.com
          127.0.0.1 banners.bookmaker.com
          127.0.0.1 ccc.boolans.com #[Adware.Rugo]
          127.0.0.1 err.boom.ru
          127.0.0.1 www.borlander.com.cn #[ADSPY/Boran.X.19.C]
          127.0.0.1 ads.brainiads.com
          127.0.0.1 ads.breakthru.com
          127.0.0.1 bans.bride.ru
          127.0.0.1 ads.bridgetrack.com
          127.0.0.1 cc.bridgetrack.com
          127.0.0.1 citi.bridgetrack.com #[Ad-Aware.Tracking.Cookie]
          127.0.0.1 citi.bridgetrack.com.edgesuite.net
          127.0.0.1 rccl.bridgetrack.com #[MVPS.Criteria]
          127.0.0.1 goku.brightcove.com #[WebBug]
          127.0.0.1 adsrv2.brownpride.com
          127.0.0.1 www.browserplugin.com #[HJTH.EroticAccess][wobz.de]
          127.0.0.1 bsdpng.info
          127.0.0.1 btbilgisayarkursu.com #[Win32/TrojanDownloader.Small.AWA]
          127.0.0.1 www.btbilgisayarkursu.com #[Win32/TrojanDownloader.Small.AWA]
          127.0.0.1 www.bulletads.com
          127.0.0.1 redemption.bullseye-media.net
          127.0.0.1 users.bullseye-media.net
          127.0.0.1 www.bullseye-media.net
          127.0.0.1 bunnezone.com #[Win32/Jep.Russ]
          127.0.0.1 burnsrecyclinginc.com #[Win32/TrojanDropper.Agent.NBX]
          127.0.0.1 www.burnsrecyclinginc.com
          127.0.0.1 ad1.bustcash.com
          127.0.0.1 www.buycheapadvertising.com
          127.0.0.1 buytraffic.cn
          127.0.0.1 www.buzzclick.com
          127.0.0.1 tr.buzzlogic.com
          127.0.0.1 tracking.byindia.com
          127.0.0.1 www.byip.cn #[Google.Warning]
          127.0.0.1 multi.byulcom.com #[Win32/TrojanDownloader.Small.BIV]
          127.0.0.1 ads.calgarystampede.com
          127.0.0.1 www.cambodiaoutsourcing.com
          127.0.0.1 canadianhw.ca #[VBS/Envary.A]
          127.0.0.1 www.canadianhw.ca
          127.0.0.1 ads.caniamedia.com
          127.0.0.1 canadians-health.com #[Spamdexing]
          127.0.0.1 ads.capablenet.com
          127.0.0.1 images.cashfiesta.com #[AdWare.CashFiesta.a]
          127.0.0.1 www.cashfiesta.com #[McAfee.Adware-CashFiesta]
          127.0.0.1 www.cashfiesta.net
          127.0.0.1 banner.casinoking.com #[AdWare.Win32.Casino.ae]
          127.0.0.1 ad.caradisiac.com
          127.0.0.1 ads.cars.com
          127.0.0.1 www.cbproads.com
          127.0.0.1 qi.ccbtv.net #[Google.Warning]
          127.0.0.1 blockbuster.com.7.ccg360.com
          127.0.0.1 blockbuster.med.ccg360.com
          127.0.0.1 www.cd321.com
          127.0.0.1 ads.cdfreaks.com #[eTrust.Ads.cdfreaks]
          127.0.0.1 ads.cdrinfo.com
          127.0.0.1 stats.cdrinfo.com #[WebBug]
          127.0.0.1 www.celebritypicturesarchive.com #[Trojan-Downloader.Win32.IstBar.nn]
          127.0.0.1 www.celebrity-pictures-world.com #[Trojan-Downloader.Win32.IstBar.nn]
          127.0.0.1 clicktracker.centrum.cz
          127.0.0.1 cetrk.com #[Crazy Egg]
          127.0.0.1 cesp.be #[HTML/TrojanDownloader.Agent.NAB]
          127.0.0.1 adserver.cducinema.com
          127.0.0.1 counter.cgiworld.net
          127.0.0.1 tracker.cgiworld.net
          127.0.0.1 cts.channelintelligence.com #[switch.atdmt.com]
          127.0.0.1 abc.checkm8.com
          127.0.0.1 ny.checkm8.com
          127.0.0.1 rmm1u.checkm8.com
          127.0.0.1 web.checkm8.com #[CHECKM8 AD TAGS]
          127.0.0.1 web2.checkm8.com
          127.0.0.1 ads.checkm8.co.za
          127.0.0.1 ads.china.com
          127.0.0.1 ad.chip.de
          127.0.0.1 ad.cibleclick.com #[eTrust.Cibleclick]
          127.0.0.1 www.cibleclick.com #[Ad-Aware.Tracking.Cookie]
          127.0.0.1 www.classicequipment.com #[Google.Warning]
          127.0.0.1 board.classifieds1000.com
          127.0.0.1 xp.classifieds1000.com
          127.0.0.1 www.classifieds1000.com #[SiteAdvisor.classifieds1000.com]
          127.0.0.1 images.clckm.com
          127.0.0.1 pics.clckm.com #[Parking Service]
          127.0.0.1 ads.clickad.com #[eTrust.Tracking.Cookie]
          127.0.0.1 clickbank.net #[Ad-Aware.Tracking.Cookie]
          127.0.0.1 hop.clickbank.net #[Adware.Clickbank][Adware.ClickDLoader]
          127.0.0.1 ssl.clickbank.net
          127.0.0.1 zzz.clickbank.net #[Ewido.TrackingCookie.Clickbank]
          127.0.0.1 publishers.clickbooth.com #[directleads.com]
          127.0.0.1 clickboothlnk.com
          127.0.0.1 www.clickboothlnk.com
          127.0.0.1 j.clickdensity.com
          127.0.0.1 r.clickdensity.com
          127.0.0.1 cf-db01.clickfacts.com
          127.0.0.1 server104.clickfacts.com #[ClickFacts Tracking Beacon]
          127.0.0.1 www.clickmanage.com
          127.0.0.1 clicktracks.com #[McAfee.Cookie-Clicktracks]
          127.0.0.1 stats.clicktracks.com #[Tenebril.Tracking.Cookie]
          127.0.0.1 stats1.clicktracks.com # [eTrust.Tracking.Cookie]
          127.0.0.1 stats2.clicktracks.com #[SpySweeper.Spy.Cookie]
          127.0.0.1 stats3.clicktracks.com
          127.0.0.1 stats4.clicktracks.com
          127.0.0.1 www.clicktracks.com #[SunBelt.ClickTracks]
          127.0.0.1 www.is1.clixgalore.com
          127.0.0.1 www.clixgalore.com
          127.0.0.1 hit.click2006.com
          127.0.0.1 www2.click-fr.com
          127.0.0.1 www3.click-fr.com
          127.0.0.1 www4.click-fr.com
          127.0.0.1 www.clickhouse.com #[SunBelt.ClickHouse]
          127.0.0.1 www.click-power.com #[Win32/TrojanDownloader.VB.JL][Win32.Virtumonde.by]
          127.0.0.1 www.clicksbroker.com
          127.0.0.1 ad1.clickhype.com #[Ewido.TrackingCookie.Clickhype]
          127.0.0.1 redirect.clickshield.net
          127.0.0.1 clicktorrent.info
          127.0.0.1 static.clicktorrent.info
          127.0.0.1 www.clicktorrent.info #[phpAds]
          127.0.0.1 www1.clicktorrent.info
          127.0.0.1 norbert_sirot.club.fr #[Trojan-Spy.Win32.Banker.anv]
          127.0.0.1 banner.clubdicecasino.com
          127.0.0.1 adserver.clix.pt
          127.0.0.1 ad.cmfu.com
          127.0.0.1 www.cnstats.com
          127.0.0.1 ad.coas2.co.kr
          127.0.0.1 collectiveads.net
          127.0.0.1 a.collective-media.net
          127.0.0.1 www.comclean.co.kr #[Spyware.Comclean]
          127.0.0.1 www.combimedia.nl
          127.0.0.1 bdx.comclick.com
          127.0.0.1 br.comclick.com
          127.0.0.1 ct2.comclick.com #[Tenebril.Tracking.Cookie]
          127.0.0.1 fl01.ct2.comclick.com #[Ad-Aware.Tracking.Cookie]
          127.0.0.1 ihm01.ct2.comclick.com
          127.0.0.1 www.comclick.com #[Ewido.TrackingCookie.Comclick]
          127.0.0.1 banners.commissionking.com
          127.0.0.1 members.commissionmonster.com
          127.0.0.1 www.compactads.com
          127.0.0.1 aa.connextra.com
          127.0.0.1 bb.connextra.com #[a22.g.akamai.net]
          127.0.0.1 cc.connextra.com
          127.0.0.1 dd.connextra.com
          127.0.0.1 ee.connextra.com
          127.0.0.1 ff.connextra.com #[a22.g.akamai.net]
          127.0.0.1 data.connextra.com
          127.0.0.1 linkexchange.consoleunderground.com
          127.0.0.1 www.consoleunderground.com #[Adware.Begin2search]
          127.0.0.1 ads.consumeraffairs.com
          127.0.0.1 ads.contact.md
          127.0.0.1 ads.contactmusic.com #[AdvertPro]
          127.0.0.1 servedby.contextuad.org
          127.0.0.1 svp.contextuad.org #[SunBelt.ContextuAd]
          127.0.0.1 www.contextualadv.com
          127.0.0.1 www.contextpanel.com #[searchant.com]
          127.0.0.1 ads.console.net
          127.0.0.1 banners.copyscape.com
          127.0.0.1 www.counter-x.com
          127.0.0.1 www.countit.ch
          127.0.0.1 counter.co.kz
          127.0.0.1 www.counter-gratis.com #[Ad-Aware.Tracking.Cookie]
          127.0.0.1 www.countercentral.com
          127.0.0.1 www.counterdata.com
          127.0.0.1 www.counterguide.com
          127.0.0.1 counter-shop.net
          127.0.0.1 htm-pop-ky.counterstat.net
          127.0.0.1 www.counting4free.com
          127.0.0.1 www.counter.cz
          127.0.0.1 www.counti.de
          127.0.0.1 www.countmypage.com
          127.0.0.1 log1.countomat.com
          127.0.0.1 connectionzone.com
          127.0.0.1 www.couponsandoffers.com #[Adware.TopMoxie]
          127.0.0.1 data.coremetrics.com
          127.0.0.1 test.coremetrics.com #[SpySweeper.Spy.Cookie]
          127.0.0.1 twci.coremetrics.com #[Ad-Aware.Tracking.Cookie]
          127.0.0.1 banner.coza.com
          127.0.0.1 cp16688.cn #[Win32/TrojanDownloader.Ani.Gen]
          127.0.0.1 www.cp16688.cn #[VBS/TrojanDownloader.Psyme.FM]
          127.0.0.1 www.cpaclicks.com #[Spamdexing]
          127.0.0.1 server.cpmstar.com #[ads.shizmoo.com]
          127.0.0.1 cracks.am #[eTrust.Cracks.am][ADW_CRAMTB.A]
          127.0.0.1 www.cracks.am #[fuck-portal.com][Adware.CramToolbar]
          127.0.0.1 ads.cracked.com
          127.0.0.1 track.cracked.com
          127.0.0.1 new.crashextads.co.uk
          127.0.0.1 crawl.ws
          127.0.0.1 cont.crawl.ws #[AdWare.Win32.MegaKiss.b]
          127.0.0.1 www.crawl.ws
          127.0.0.1 counter.credo.ru
          127.0.0.1 www.cridem.org #[Win32/Spy.Banker.AHY]
          127.0.0.1 ads.crosswinds.net
          127.0.0.1 ads.crucialparadigm.com
          127.0.0.1 cdn.crwdcntrl.net
          127.0.0.1 media.customeracquisitionsite.com #[customeracquisitionsite.adlegend.com]
          127.0.0.1 cmd.customink.com #[WebBug.eluminate]
          127.0.0.1 cxss358.com #[HTML/TrojanDownloader.Agent.BP]
          127.0.0.1 ads.cyberax.com
          127.0.0.1 banner.cybertechdev.com
          127.0.0.1 cybertown.ru
          127.0.0.1 search.cygo.net
          127.0.0.1 www.cygo.net #[McAfee.Adware-Cygo]
          127.0.0.1 ads.dada.it
          127.0.0.1 www.dailykeys.com #[Google.Warning]
          127.0.0.1 aj.daniweb.com
          127.0.0.1 www.data-jpn.com #[Trojan.Pajatan]
          127.0.0.1 banner.date.com #[Tenebril.Tracking.Cookie]
          127.0.0.1 www.dateclix.com #[DateClix.com Banner Exchange Code]
          127.0.0.1 datingbanners.net
          127.0.0.1 ads.datinggold.com
          127.0.0.1 ad.db3nf.com
          127.0.0.1 dcstat.com
          127.0.0.1 images.ddc.com #[Parking Service]
          127.0.0.1 ads.dealnews.com
          127.0.0.1 au.track.decideinteractive.com
          127.0.0.1 au.link.decideinteractive.com
          127.0.0.1 eu.link.decideinteractive.com
          127.0.0.1 link.decideinteractive.com
          127.0.0.1 www.decideinteractive.com
          127.0.0.1 www.decideinteractive.co.uk
          127.0.0.1 deepcom.com #[SiteAdvisor.deepcom.com]
          127.0.0.1 www.deepcom.com #[TrojanDropper.Win32.Small.gt]
          127.0.0.1 collector.deepmetrix.com
          127.0.0.1 geo.deepmetrix.com
          127.0.0.1 www.deepmetrix.com #[Microsoft]
          127.0.0.1 ads.dennisnet.co.uk
          127.0.0.1 ad.depositfiles.com
          127.0.0.1 ad.detik.com
          127.0.0.1 desire-search.com #[Spamdexing]
          127.0.0.1 ads.deviantart.com
          127.0.0.1 adsvr.deviantart.com
          127.0.0.1 phpadsnew.devstart.com
          127.0.0.1 www.dhtianyu.net #[Spamdexing]
          127.0.0.1 banners.diariodelaltoaragon.es
          127.0.0.1 track.did-it.com #[Panda.Spyware:Cookie/did-it]
          127.0.0.1 counter.dieit.de
          127.0.0.1 digiwexonline.com #[W32/Kibik.a]
          127.0.0.1 www.digink.com #[PcTools.SysCheckBop32]
          127.0.0.1 ads.digitalpoint.com
          127.0.0.1 geo.digitalpoint.com
          127.0.0.1 comm1.digits.com
          127.0.0.1 counter.digits.com
          127.0.0.1 ads.dir.bg
          127.0.0.1 banners.dir.bg
          127.0.0.1 ad.directconnect.se
          127.0.0.1 banners.directnic.com #[SecuritySpace.WebBug][MVPS.Criteria]
          127.0.0.1 dnads.directnic.com
          127.0.0.1 parked.directnic.com
          127.0.0.1 stats.directnic.com
          127.0.0.1 www.directnicparking.com
          127.0.0.1 aserve.directorym.com
          127.0.0.1 cache.directorym.com #[c2.mii.instacontent.net]
          127.0.0.1 ads.directnetadvertising.net #[SiteAdvisor.directnetadvertising.net]
          127.0.0.1 www.directnetadvertising.net #[Ad-Aware Tracking.Cookie]
          127.0.0.1 direct-web.co.kr #[Adware-DirectWeb]
          127.0.0.1 agentq.ditto.com
          127.0.0.1 js.ditto.com
          127.0.0.1 matrix.ditto.com
          127.0.0.1 media.ditto.com #[a232.x.akamai.net]
          127.0.0.1 www.ditto.com #[AdWare.Win32.Softomate.c]
          127.0.0.1 ads.djindexes.com
          127.0.0.1 openads.dlg.cz
          127.0.0.1 a.dlqm.net
          127.0.0.1 dcww.dmcast.com #[Adware-DesktopMedia]
          127.0.0.1 ad1.dmcmedia.co.kr
          127.0.0.1 dmdl.dmcast.com
          127.0.0.1 install.dmcast.com #[Adware-DesktopMedia.dr]
          127.0.0.1 track.dmipartners.com
          127.0.0.1 rotabanner.dni.ru
          127.0.0.1 searchportal.dnparking.com #[Parking Service]
          127.0.0.1 www.dnscaching.net #[SiteAdvisor.dnscaching.net]
          127.0.0.1 dnv-counter.com
          127.0.0.1 d08r.cn #[Spamdexing]
          127.0.0.1 www.domamil.cz #[Trojan.Beagooz]
          127.0.0.1 www.dodostats.com
          127.0.0.1 adv.dontcrack.com
          127.0.0.1 doorgen.com #[Spamdexing]
          127.0.0.1 www.doorgen.com
          127.0.0.1 ads.dotomi.com
          127.0.0.1 www.download-services.com #[VBA32.Trojan-Downloader.Agent.26]
          127.0.0.1 www.downseek.com #[SunBelt.DownSeek Search]
          127.0.0.1 banners.dpnet.com.br
          127.0.0.1 drmx01.net #[Spamdexing]
          127.0.0.1 www.claus.drehteile-rieche.de #[Win32.Formglieder.B]
          127.0.0.1 www.dreamadvert.com #[SunBelt.Dreamadvert]
          127.0.0.1 www.dropthehammer.com #[Win32/Spy.Banker.AHY]
          127.0.0.1 ads.drugs.com
          127.0.0.1 b.ds1.nl
          127.0.0.1 dsiworld.net
          127.0.0.1 ddd.dudu.com #[Tenebril.DuDu Accelerator]
          127.0.0.1 ulink4.dudu.com #[Adware.DDDClient][SunBelt.DuDuAccelerator]
          127.0.0.1 ulink13.dudu.com #[Win32/Adware.DM]
          127.0.0.1 www.dudu.com #[McAfee.Downloader-AVV]
          127.0.0.1 www.duenow.com
          127.0.0.1 dukasound.info #[Javascript.Exploit]
          127.0.0.1 www.dutty.de #[W32.Peerload.A]
          127.0.0.1 www.dzy520.com #[Google.Warning]
          127.0.0.1 hits.e.cl
          127.0.0.1 banners.earnunited.com
          127.0.0.1 blogads.ebanner.nl
          127.0.0.1 www.e-bannerx.com #[Ad-Aware.Tracking.Cookie]
          127.0.0.1 www.earncashontheinternet.com #[SunBelt.OpinionBar]
          127.0.0.1 click.easilyfound.com #[Tenebril.AdTraffic]
          127.0.0.1 www.easilyfound.com
          127.0.0.1 www.easycounter.com
          127.0.0.1 banners.easydns.com
          127.0.0.1 easyhitcounters.com
          127.0.0.1 beta.easyhitcounters.com
          127.0.0.1 easytrader.bg
          127.0.0.1 static.easytrader.bg
          127.0.0.1 www.ebannertraffic.com
          127.0.0.1 mailer.ebates.com
          127.0.0.1 www.ebates.com #[Adware.MoeMoney]
          127.0.0.1 ads.eccentrix.com
          127.0.0.1 b.economedia.bg #[ban.etaligent.net]
          127.0.0.1 ads.ecrush.com #[AdvertPro]
          127.0.0.1 www.eden21.net #[Win32/Haxdoor][TR/Dldr.Botol.D.1]
          127.0.0.1 c6.edgesuite.net #[RealMedia]
          127.0.0.1 einfachstarten.com #[Trojan.Firpage]
          127.0.0.1 eisenstein.dk #[tracking.ping]
          127.0.0.1 www.ejmx.com #[Adware.ElectroJMX]
          127.0.0.1 ad.e-kolay.net
          127.0.0.1 www.ek21.com #[Trojan.Chost.B]
          127.0.0.1 ads.elmaz.com
          127.0.0.1 now.eloqua.com #[WebBug]
          127.0.0.1 ads.eluniversal.com.mx
          127.0.0.1 hits.eluniversal.com.mx
          127.0.0.1 publicidad.eluniversal.com.mx
          127.0.0.1 elwebsearch.info #[Malicious.Links.Umax]
          127.0.0.1 wwv.elwebsearch.info
          127.0.0.1 www.elwebsearch.info
          127.0.0.1 ad1.emediate.dk
          127.0.0.1 eas.apm.emediate.eu
          127.0.0.1 ad1.emediate.se
          127.0.0.1 vcontent.e-messenger.net
          127.0.0.1 www.emoinstaller.com #[Win32/Adware.NdotNet][SiteAdvisor.emoinstaller.com]
          127.0.0.1 www.emusic.com #[Win32/Adware.Comet][MVPS.Criteria]
          127.0.0.1 dotnet.endai.com
          127.0.0.1 stats.engineseeker.com
          127.0.0.1 enjoytraffic.com
          127.0.0.1 sa.entireweb.com
          127.0.0.1 entk.net
          127.0.0.1 log.enquisite.com
          127.0.0.1 adv.entercasino.com #[Adware.Casino.V]
          127.0.0.1 ads.eog.com
          127.0.0.1 ads.e-planning.net
          127.0.0.1 ads.us.e-planning.net
          127.0.0.1 ertbirth009.info #[Spamdexing.Codec]
          127.0.0.1 adserving03.epi.es
          127.0.0.1 www.escorcher.com #[eTrust.EScorcher]
          127.0.0.1 search.etargetnet.com
          127.0.0.1 bg.search.etargetnet.com
          127.0.0.1 cz.search.etargetnet.com
          127.0.0.1 pages.etology.com
          127.0.0.1 www.etracker.de
          127.0.0.1 www.etxh.com #[Win32/Prosti.C]
          127.0.0.1 count.e-ratings.com.ua
          127.0.0.1 ads.ere.net
          127.0.0.1 ads.ero-advertising.com
          127.0.0.1 banners.ero-advertising.com
          127.0.0.1 data.ero-advertising.com
          127.0.0.1 thumbs.ero-advertising.com
          127.0.0.1 adopt.euroclick.com #[Ewido.TrackingCookie.Euroclick]
          127.0.0.1 cdn.euroclick.com
          127.0.0.1 www.euroklik.nl #[EasyBar][HJTH.SinCity Dialer]
          127.0.0.1 advert.eurotip.cz
          127.0.0.1 www.euros4click.de
          127.0.0.1 ad.eurosport.com #[oas.eurosport.com]
          127.0.0.1 www.eurowebstats.com
          127.0.0.1 www.everestpoker.com #[AdWare.Win32.Casino.t]
          127.0.0.1 advert.exaccess.ru
          127.0.0.1 dynamic.exaccess.ru
          127.0.0.1 static.exaccess.ru
          127.0.0.1 www.exchangead.com
          127.0.0.1 exchange.bg
          127.0.0.1 media.exchange.bg
          127.0.0.1 www.exchange.bg
          127.0.0.1 load.exelator.com
          127.0.0.1 tlal.exelator.net
          127.0.0.1 exitexchange.com #[SiteAdvisor.exitexchange.com]
          127.0.0.1 ads.exitexchange.com
          127.0.0.1 count.exitexchange.com #[McAfee.Cookie-Exitexchange]
          127.0.0.1 images.exitexchange.com
          127.0.0.1 www.exitexchange.com #[SpySweeper.Spy.Cookie]
          127.0.0.1 www.exittrade.com
          127.0.0.1 ads2.expatica.com
          127.0.0.1 nyton.experclick.com #[p.mii.instacontent.net]
          127.0.0.1 www.experclick.com #[SpySweeper.Spy.Cookie]
          127.0.0.1 ads.expressindia.com
          127.0.0.1 banners.expressindia.com
          127.0.0.1 cdn.eyewonder.com #[SunBelt.EyeWonder]
          127.0.0.1 cdn1.eyewonder.com
          127.0.0.1 cdn4.eyewonder.com
          127.0.0.1 pixel1097.everesttech.net
          127.0.0.1 pixel1324.everesttech.net
          127.0.0.1 pixel1370.everesttech.net
          127.0.0.1 www.evidence-eliminator.com
          127.0.0.1 www.ewebcounter.com
          127.0.0.1 ads2.exhedra.com
          127.0.0.1 ads.expedia.com
          127.0.0.1 admedia.expedia.com
          127.0.0.1 www.eyeget.com #[McAfee.Adware-EyeGet]
          127.0.0.1 feedback.eyereturn.com
          127.0.0.1 resources.eyereturn.com
          127.0.0.1 timespent.eyereturn.com
          127.0.0.1 voken.eyereturn.com
          127.0.0.1 ads.ezboard.com
          127.0.0.1 eziin.com #[Adware.Eziin]
          127.0.0.1 www.eziin.com
          127.0.0.1 www.ezurl.co.kr #[Spyware.Ezurl]
          127.0.0.1 ads.facebook.com #[facebook-ads.vo.llnwd.net]
          127.0.0.1 ads.ak.facebook.com
          127.0.0.1 www.factorygames.com #[SiteAdvisor.factorygames.com]
          127.0.0.1 banner.fairpoker.com #[AdWare.Win32.Casino.w]
          127.0.0.1 ehs.familydoctor.org #[ads.digitalhealthcare.com]
          127.0.0.1 tmp.farfly.org #[Trojan.Farfli]
          127.0.0.1 a.farlex.com
          127.0.0.1 www.fast-adv.it
          127.0.0.1 www.fastadvert.com
          127.0.0.1 www.fastfind.org #[TROJ_STARTPAG.KF][Win32/Adware.MediaBack]
          127.0.0.1 fastonlineusers.com
          127.0.0.1 fasttrack.nu
          127.0.0.1 fastwebcounter.com
          127.0.0.1 counter.fateback.com
          127.0.0.1 www.fatpenguinmedia.com
          127.0.0.1 counter1.fc2.com
          127.0.0.1 alex.fileburst.com #[Win32/TrojanDropper.Agent.NBT]
          127.0.0.1 adserver.filefront.com #[Ad-Aware.Tracking.Cookie]
          127.0.0.1 adserver.finditquick.com
          127.0.0.1 findover.org #[Spamdexing]
          127.0.0.1 search.findscout.com
          127.0.0.1 www.findscout.com #[W32/Delf.KPZ]
          127.0.0.1 ai.p.findology.com
          127.0.0.1 banner.finn.no
          127.0.0.1 ads.firingsquad.com
          127.0.0.1 ads2.firingsquad.com
          127.0.0.1 firstdor.info #[Spamdexing]
          127.0.0.1 ads.firstgrand.com
          127.0.0.1 fishclix.com
          127.0.0.1 www.fishclix.com
          127.0.0.1 www.fish-screensaver.com #[AdWare.Win32.Gator.1008]
          127.0.0.1 www.fjordbergen.com #[Win32/Spy.Banker.BIG]
          127.0.0.1 www.fjjyjy.net #[Win32/Hipigon][W32.Fijjy]
          127.0.0.1 www.flashadengine.com
          127.0.0.1 cdn.flashedmail.com #[Parked?]
          127.0.0.1 tracker1.flashedmail.com
          127.0.0.1 adserver4.fluent.ltd.uk
          127.0.0.1 adserver.fmpub.net
          127.0.0.1 dynamic.fmpub.net
          127.0.0.1 static.fmpub.net
          127.0.0.1 ads.fmwinc.com
          127.0.0.1 rnews.focus-news.net
          127.0.0.1 rpt.footlocker.com #[WebBug.eluminate]
          127.0.0.1 adcycle.footymad.net
          127.0.0.1 www.forodeortodoncia.com #[Backdoor.IRC.Zapchast]
          127.0.0.1 js.forrestersurveys.com
          127.0.0.1 socratos.forrestersurveys.com
          127.0.0.1 forso.info #[Malicious.Links.Codec]
          127.0.0.1 forvideo.at
          127.0.0.1 www.forvideo.at #[Javascript.Exploit]
          127.0.0.1 akcr.free.fr #[Win32/Spy.Bancos.U]
          127.0.0.1 googlelite.free.fr #[Spamdexing]
          127.0.0.1 ad.freecity.de
          127.0.0.1 ads05.freecity.de
          127.0.0.1 freecounters.xp.tl
          127.0.0.1 www.free-counter.com
          127.0.0.1 maurobb.freecounter.it
          127.0.0.1 www.freecounter.it
          127.0.0.1 securinews.free.fr #[Trojan.Hexem]
          127.0.0.1 www.freedownloadhq.com #[SiteAdvisor.freedownloadhq.com]
          127.0.0.1 ad.freefind.com
          127.0.0.1 adverts.freeloader.com
          127.0.0.1 adserver.freenet.de
          127.0.0.1 www.free-ranking.de
          127.0.0.1 www.freerip.com #[AdTool.Win32.MyWebSearch.ak]
          127.0.0.1 banner-server.freerun.com
          127.0.0.1 free-stats.com
          127.0.0.1 abbyssh.freestats.com
          127.0.0.1 insurancejournal.freestats.com
          127.0.0.1 banners.freett.com
          127.0.0.1 count.freett.com
          127.0.0.1 counters.freewebs.com
          127.0.0.1 ads.freeonlinegames.com
          127.0.0.1 stats.freeonlinegames.com
          127.0.0.1 error.freewebsites.com
          127.0.0.1 www.freewebsites.com
          127.0.0.1 tracking.fsjmp.com
          127.0.0.1 ftpiframer.org #[Javascript.Exploit]
          127.0.0.1 media.ftv-publicite.fr #[RealMedia]
          127.0.0.1 fullddl.com
          127.0.0.1 www.fullddl.com #[HTML/TrojanDownloader.XXXToolbar]
          127.0.0.1 404.funpic.de
          127.0.0.1 www.fusestats.com
          127.0.0.1 ads.gad-network.com
          127.0.0.1 adserver.gadu-gadu.pl
          127.0.0.1 www.gamersbanner.com
          127.0.0.1 ads.gamesbannernet.com
          127.0.0.1 ads.gameservers.com
          127.0.0.1 ads.gamespy.com #[SpySweeper.Spy.Cookie]
          127.0.0.1 adcontent.gamespy.com
          127.0.0.1 ads.gamespyid.com
          127.0.0.1 www.gameurdr.com #[Win32/TrojanDownloader.Ani.Gen][server down?]
          127.0.0.1 server.gamyun.net
          127.0.0.1 www.gamyun.net #[Adware.GamyunIeToolbar]
          127.0.0.1 ad.garantiarkadas.com
          127.0.0.1 gasan.ru #[Trojan.Codec]
          127.0.0.1 ads.gather.com
          127.0.0.1 track.gawker.com #[WebBug]
          127.0.0.1 ad.gazeta.pl
          127.0.0.1 adp.gazeta.pl
          127.0.0.1 adv.gazeta.pl
          127.0.0.1 haymarket-adserver.gcnpublishing.com
          127.0.0.1 www.gebr-wachs.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
          127.0.0.1 sda.geek.com #[AdvertPro]
          127.0.0.1 adserver.geenstijl.nl
          127.0.0.1 kassa.geenstijl.nl
          127.0.0.1 schoorsteen.geenstijl.nl
          127.0.0.1 adserver.geizkragen.de
          127.0.0.1 gnt01.generation-nt.com
          127.0.0.1 gd.geobytes.com
          127.0.0.1 geotarget.info #[Whois.Blacklisted]
          127.0.0.1 banners.geotarget.info
          127.0.0.1 www.geotarget.info
          127.0.0.1 www.geowhere.net #[SunBelt.GeoWhere Search]
          127.0.0.1 get-access.host.sk #[McAfee.StartPage-IR]
          127.0.0.1 getclicky.com
          127.0.0.1 pmetrics.getclicky.com
          127.0.0.1 static.getclicky.com
          127.0.0.1 www.getsmart.com
          127.0.0.1 dlx.getupdate.com #[AdvWare.ToolBar.VB.b][Adware.Getup]
          127.0.0.1 banner.giantvegas.com
          127.0.0.1 counters.gigya.com
          127.0.0.1 truehits.gits.net.th
          127.0.0.1 truehits1.gits.net.th
          127.0.0.1 ads.globo.com
          127.0.0.1 ads.img.globo.com
          127.0.0.1 duke.gocomics.com #[ads.uclick.com]
          127.0.0.1 www.godesktop.com #[SiteAdvisor.godesktop.com]
          127.0.0.1 adserver2.goals365.com
          127.0.0.1 banner.goldenpalace.com #[Tenebril.Tracking.Cookie]
          127.0.0.1 stage.goldkey.com #[Parking Service]
          127.0.0.1 goldstats.net
          127.0.0.1 www.goldstats.net
          127.0.0.1 www.goodhealth-search.com #[Spamdexing]
          127.0.0.1 google9.info
          127.0.0.1 www.google9.info
          127.0.0.1 www.google-hard.com #[Win32/TrojanProxy.Agent.LK]
          127.0.0.1 gooogle.info
          127.0.0.1 goooglegulp.com #[Spamdexing]
          127.0.0.1 goopssearch.com #[Google.Warning]
          127.0.0.1 www.goopssearch.com
          127.0.0.1 www.gogogo.com #[PremiumTraffic.Parking Service]
          127.0.0.1 partner.gonamic.de
          127.0.0.1 googlus.com #[Spamdexing]
          127.0.0.1 adincl.gopher.com #[InfoSpace]
          127.0.0.1 gostats.com
          127.0.0.1 as.gostats.com
          127.0.0.1 c1.gostats.com
          127.0.0.1 c2.gostats.com #[SpySweeper.Spy.Cookie]
          127.0.0.1 c3.gostats.com
          127.0.0.1 c4.gostats.com #[Panda.Spyware:Cookie/GoStats]
          127.0.0.1 ded.gostats.com
          127.0.0.1 monster.gostats.com
          127.0.0.1 webcounter.goweb.de
          127.0.0.1 ads.goyk.com
          127.0.0.1 graffitifonts.com
          127.0.0.1 www.graffitifonts.com #[Malicious.Links.Zango]
          127.0.0.1 graficastrigo.com #[Trojan.Tabela.E][server down?]
          127.0.0.1 www.gratis-counter-gratis.de
          127.0.0.1 www.gratis-toplist.de
          127.0.0.1 adv.gratuito.st
          127.0.0.1 expedia.gravitytrack.com
          127.0.0.1 www.greasypalm.co.uk #[PcTools.GreasyPalm bar]
          127.0.0.1 adserver.gruprc.ro
          127.0.0.1 ad4.gueb.com
          127.0.0.1 ad7.gueb.com
          127.0.0.1 ads.guru3d.com
          127.0.0.1 ads.gusanito.com
          127.0.0.1 www.g-wizzads.net #[adbureau.net]
          127.0.0.1 x.gxgxy.net #[Trojan-Downloader.Win32.Agent.hkc][server down?]
          127.0.0.1 www.h148.cn #[Google.Warning]
          127.0.0.1 ads2.haber3.com
          127.0.0.1 cc9905.counter.hackers.lv
          127.0.0.1 www.handyarchive.com #[SiteAdvisor.handyarchive.com]
          127.0.0.1 www.haosf128.com #[Google.Warning]
          127.0.0.1 streamit.hardwarezone.com
          127.0.0.1 ad1.hardware.no #[AdvertPro]
          127.0.0.1 adserver.hardwareanalysis.com
          127.0.0.1 ad.harmony-central.com
          127.0.0.1 ds1.harmony-central.com
          127.0.0.1 www.harmonyhollow.net #[SiteAdvisor.harmonyhollow.net]
          127.0.0.1 hartim.com
          127.0.0.1 ad0.haynet.com
          127.0.0.1 ad.hbv.de
          127.0.0.1 ads.heias.com
          127.0.0.1 www.hentaibanners.com
          127.0.0.1 www.hentaicashmachine.com
          127.0.0.1 www.hentaiclicks.com
          127.0.0.1 www.hentaicounter.com
          127.0.0.1 www.hentaihits.com
          127.0.0.1 www.hentaipop.com #[Electronic Group Dialer]
          127.0.0.1 www.hentaiseeker.com
          127.0.0.1 www.hentaitoonami.com
          127.0.0.1 www.henwo.com
          127.0.0.1 ads.herbalsmokeshop.com
          127.0.0.1 www2.hermoment.com
          127.0.0.1 www.hermoment.com
          127.0.0.1 ads.hexun.com
          127.0.0.1 www.hey.lt
          127.0.0.1 ads.highdefdigest.com
          127.0.0.1 adserver.hispanoclick.com
          127.0.0.1 www.hitscount.com
          127.0.0.1 www.hit-counter-download.com
          127.0.0.1 hithopper.com #[Adware.Hithopper]
          127.0.0.1 www.hithopper.com #[ADW_HITHOPPER.A]
          127.0.0.1 rdr.hitmngr.com #[WinFixer]
          127.0.0.1 sxp.hitmngr.com
          127.0.0.1 hitmodel.net
          127.0.0.1 www.hit-counts.com
          127.0.0.1 hit-now.com
          127.0.0.1 www.hitscreamer.com
          127.0.0.1 hitslog.com
          127.0.0.1 h1.hitslog.com
          127.0.0.1 s4.histats.com
          127.0.0.1 s10.histats.com
          127.0.0.1 s11.histats.com
          127.0.0.1 www.hitstats.co.uk
          127.0.0.1 hitstats.net
          127.0.0.1 www.hittracking.com
          127.0.0.1 images.hitwise.co.uk
          127.0.0.1 anna.homeftp.net #[W32.Linkbot.A]
          127.0.0.1 www.gontijoamaral.hpg.com.br #[Adware.Diginum]
          127.0.0.1 www.adserver.home.pl
          127.0.0.1 www.homeoffun.com #[SiteAdvisor.homeoffun.com]
          127.0.0.1 counters.honesty.com
          127.0.0.1 cgi.honesty.com #[MVPS.Criteria]
          127.0.0.1 ad.hosting.pl
          127.0.0.1 hot8888.com #[Win32/TrojanDownloader.Ani.Gen]
          127.0.0.1 hot8888.cn #[Win32/TrojanDownloader.Ani.Gen]
          127.0.0.1 ad2.hotels.com
          127.0.0.1 www.hot-lindsay.com #[Malicious.Links.Zango]
          127.0.0.1 hotlinkbanners.com
          127.0.0.1 www.hotlinkbanners.com
          127.0.0.1 cgi.hotstat.nl
          127.0.0.1 viewstat.hotstat.nl
          127.0.0.1 ad.howstuffworks.com #[RealMedia][SpySweeper.Spy.Cookie]
          127.0.0.1 hpod.com
          127.0.0.1 htepo.com #[Rogue/Suspect Affiliate.sites]
          127.0.0.1 www.htmate2.com #[Cursor.MySpace]
          127.0.0.1 adserver.html.it
          127.0.0.1 click.html.it
          127.0.0.1 ad.httpool.com
          127.0.0.1 aurelius.httpool.com
          127.0.0.1 trajan.httpool.com
          127.0.0.1 hub.com.pl
          127.0.0.1 vip.huigezi.com #[Backdoor.Graybird.Q][W32.Looked.F]
          127.0.0.1 down.hunll.com #[BDS/Agent.ahj.701]
          127.0.0.1 ads.hurra.de
          127.0.0.1 ads2000.hw.net
          127.0.0.1 dserver.hw.net
          127.0.0.1 www.hypercounter.com
          127.0.0.1 www.hypertracker.com #[SpySweeper.Spy.Cookie]
          127.0.0.1 ads.iafrica.com
          127.0.0.1 ads.iboost.com
          127.0.0.1 ads.ibox.bg
          127.0.0.1 www.iceak.net #[Javascript.Exploit]
          127.0.0.1 www.i-clicks.net
          127.0.0.1 hits.icdirect.com #[SunBelt.ICDirect.com]
          127.0.0.1 hitctr01.icdirect.com
          127.0.0.1 tracker.icerocket.com
          127.0.0.1 ictkt.com
          127.0.0.1 ads.idgnow.com.br
          127.0.0.1 banners.idg.com.br
          127.0.0.1 adidm07.idmnet.pl
          127.0.0.1 adidm.idmnet.pl
          127.0.0.1 dot.idot.cz #[WebBug]
          127.0.0.1 bar.iebar8.com #[Adware.Navihelper]
          127.0.0.1 down.iedoumi.com #[Trojan-Downloader.Win32.Delf.bpn]
          127.0.0.1 ieicon.com
          127.0.0.1 www.ieicon.com
          127.0.0.1 ie-exe.com #[AdWare.Win32.Softomate.x]
          127.0.0.1 stats.surfaid.ihost.com
          127.0.0.1 adserver.ig.com.br
          127.0.0.1 i.iinfo.cz
          127.0.0.1 k.iinfo.cz
          127.0.0.1 adserver.ilmessaggero.it
          127.0.0.1 gate.ilogbox.com
          127.0.0.1 stats.ilsemedia.nl
          127.0.0.1 ads.imeem.com
          127.0.0.1 bbn.img.com.ua
          127.0.0.1 content-ads.impactengine.com
          127.0.0.1 www.impregnable.net #[TrojanDownloader.Win32.VB.dw][Trojan.Win32.StartPage.kk]
          127.0.0.1 ads.ims.nl
          127.0.0.1 in2search.org #[JS/TrojanDropper.Tivso.gen]
          127.0.0.1 1.in2search.org
          127.0.0.1 2.in2search.org
          127.0.0.1 dns.in2search.org
          127.0.0.1 c.incomeppc.com
          127.0.0.1 s201.indexstats.com
          127.0.0.1 secure.indexstats.com
          127.0.0.1 stats.indexstats.com #[Analytics Tracking Code]
          127.0.0.1 stats.indextools.com #[eTrust.Tracking.Cookie]
          127.0.0.1 campaign.indieclick.com
          127.0.0.1 optimize.indieclick.com
          127.0.0.1 adcenter.in2.com
          127.0.0.1 juggler.inetinteractive.com
          127.0.0.1 rotator.juggler.inetinteractive.com
          127.0.0.1 banners.inetfast.com
          127.0.0.1 inetlog.ru
          127.0.0.1 www.infineo.de #[Win32/Spy.Banker.AWA]
          127.0.0.1 infospot.infocious.com
          127.0.0.1 ads.infomediainc.com
          127.0.0.1 ads.infospace.com #[ADW_DEALHELPER.C]
          127.0.0.1 msxml.infospace.com #[SpySweeper.Spy.Cookie]
          127.0.0.1 www.infotelsrl.com #[eTrust.Infotel srl]
          127.0.0.1 bimonline.insites.be
          127.0.0.1 ads.intellicast.com #[weather.com]
          127.0.0.1 strtt.interfree.it #[W32.Iberio]
          127.0.0.1 counter.internet.ge
          127.0.0.1 ad.interreklame.de
          127.0.0.1 indiads.com
          127.0.0.1 images.indiads.com
          127.0.0.1 servedby.indiads.com #[RealMedia]
          127.0.0.1 www.imiclk.com
          127.0.0.1 inexplorer.com
          127.0.0.1 local.inexplorer.com
          127.0.0.1 toolbar.inexplorer.com #[Win32/Parite.B]
          127.0.0.1 www.inexplorer.com
          127.0.0.1 www.inpopo.com #[W32.Validin][server down?]
          127.0.0.1 oc.inspectorclick.com
          127.0.0.1 trax.inspectorclick.com
          127.0.0.1 v2.inspectorclick.com
          127.0.0.1 v3.inspectorclick.com
          127.0.0.1 instantbuzz.com #[NOD32.Win32/Adware.InstantBuzz]
          127.0.0.1 www2.instantbuzz.com
          127.0.0.1 www.instantbuzz.com #[Adware.ToolBar.InstantBuzz.a]
          127.0.0.1 media.intelia.it
          127.0.0.1 anm.intelli-direct.com #[IntelliTracker]
          127.0.0.1 info.intelli-direct.com
          127.0.0.1 oxfam.intelli-direct.com
          127.0.0.1 tui.intelli-direct.com
          127.0.0.1 www.intelli-tracker.com
          127.0.0.1 newadserver.interfree.it #[Adcycle]
          127.0.0.1 ad.internetradioinc.com
          127.0.0.1 www.interstats.nl
          127.0.0.1 www.intrastats.com
          127.0.0.1 channels.intwined.com #[Adware/ToolBar.ISearch.c]
          127.0.0.1 search.intwined.com
          127.0.0.1 www.intwined.com #[McAfee.Adware-SSF!Hosts]
          127.0.0.1 ad.investor.bg
          127.0.0.1 www.invinc.com #[Troj/Dloader-J]
          127.0.0.1 www.ip530.com #[Win32/TrojanDownloader.Ani.Gen]
          127.0.0.1 www.ipcounter.de
          127.0.0.1 www.ipstats.de
          127.0.0.1 ad2.ip.ro
          127.0.0.1 ads.ipowerweb.com
          127.0.0.1 content.ipro.com #[WebBug]
          127.0.0.1 adserver.iprom.net
          127.0.0.1 central.iprom.net
          127.0.0.1 www.ipstat.com
          127.0.0.1 a.isohunt.com
          127.0.0.1 adserver1.isohunt.com
          127.0.0.1 ads.isoftmarketing.com
          127.0.0.1 banman.isoftmarketing.com
          127.0.0.1 isvhs.com
          127.0.0.1 ads1.itadnetwork.co.uk
          127.0.0.1 itcompany.com #[SunBelt.Family Cyber Alert]
          127.0.0.1 www.itcompany.com #[Symantec.Spyware.CyberAlert]
          127.0.0.1 ilead.itrack.it
          127.0.0.1 adserver.itsfogo.com
          127.0.0.1 partnerfeed.itsfogo.com
          127.0.0.1 www1.itsun.com
          127.0.0.1 www8.itsun.com
          127.0.0.1 ads.itv.com #[adbureau.net]
          127.0.0.1 barafranca.iwarp.com #[Win32/Spy.ProAgent]
          127.0.0.1 www.iwebmusic.com
          127.0.0.1 ad.jamba.de
          127.0.0.1 ad.jamba.net
          127.0.0.1 ad.jamster.com
          127.0.0.1 www.jcount.com
          127.0.0.1 www.jellycounter.com
          127.0.0.1 www.jethit.com
          127.0.0.1 t1.jfglass.net #[Trojan.Booha]
          127.0.0.1 dl.jiangmin.com #[Adware-BDSearch.dr]
          127.0.0.1 www.jm-my.com #[BackDoor-CXI]
          127.0.0.1 ad.joetec.net
          127.0.0.1 jointmediagroup.com #[Trojan-Spy.Win32.Delf.uc]
          127.0.0.1 jpedownload.joltid.com
          127.0.0.1 ads.joemonster.org
          127.0.0.1 ad.jopenqb.com #[Google.Warning]
          127.0.0.1 banners.joost.com
          127.0.0.1 ads.jossip.com
          127.0.0.1 pastorale.jpn.org #[Win32/Spy.Banker.AHY]
          127.0.0.1 www.joltid.com #[Adware.P2PNetworking][SPYW_PPNETWORK.B]
          127.0.0.1 jslib2.info
          127.0.0.1 www.jstracker.com
          127.0.0.1 ads.jt.org
          127.0.0.1 www.k265.com #[Adware.Borlan]
          127.0.0.1 stat.katalysatormedia.no
          127.0.0.1 kazantip-top.com
          127.0.0.1 www.kazantip-top.com #[HTML/Exploit.VMLFill]
          127.0.0.1 ads.webfever.kadserver.com
          127.0.0.1 ads.deblok.net.kadserver.com
          127.0.0.1 ads.zebest-3000.net.kadserver.com
          127.0.0.1 countus.get.kadserver.com
          127.0.0.1 geo113prod.kadserver.com
          127.0.0.1 get.kadserver.com
          127.0.0.1 scripts.kataweb.it
          127.0.0.1 kazaalite.pl
          127.0.0.1 www.kazaalite.pl #[MHTMLRedir.Exploit]
          127.0.0.1 gavzad.keenspot.com
          127.0.0.1 ad.kewlbox.com
          127.0.0.1 a.keyrun.com #[Adware-TargetAD]
          127.0.0.1 u.keyrun.com
          127.0.0.1 union.keyrun.com
          127.0.0.1 ww.keyrun.com
          127.0.0.1 www1.keyrun.com
          127.0.0.1 www.keyrun.com
          127.0.0.1 banner.kiev.ua
          127.0.0.1 adserve.kikizo.com
          127.0.0.1 union.db.kingsoft.com #[PopupAds]
          127.0.0.1 www.kiss-search.net
          127.0.0.1 kjsc.org #[Win32/Spy.Banker.ANV]
          127.0.0.1 ads.kleinman.com #[Adcycle]
          127.0.0.1 kt3.kliptracker.com
          127.0.0.1 kt4.kliptracker.com
          127.0.0.1 www.kliptracker.com
          127.0.0.1 ads.klixxx.com
          127.0.0.1 www.km-nyc.com #[W32.Lecna.A]
          127.0.0.1 click.kmindex.ru
          127.0.0.1 counter.kmindex.ru
          127.0.0.1 counting.kmindex.ru
          127.0.0.1 www.kmindex.ru
          127.0.0.1 images.kolmic.com
          127.0.0.1 pics.kolmic.com #[Parking Service]
          127.0.0.1 ads.komli.com
          127.0.0.1 www.kompass-intl.com #[Win32/Adware.Toolbar.PowerSearch]
          127.0.0.1 de.komtrack.com
          127.0.0.1 koolbar.net #[Adware Bundler][ADW_KOOLBAR.A]
          127.0.0.1 www.koolbar.net #[eTrust.AutoSearch]
          127.0.0.1 sitestat.kpn-is.nl
          127.0.0.1 kuaiso.com #[AdWare.Win32.Kuaiso.a][server down?]
          127.0.0.1 toolsbar.kuaiso.com #[Adware.Kuaiso]
          127.0.0.1 www.kuaiso.com
          127.0.0.1 kukkakreck.com #[Rogue/Suspect Affiliate]
          127.0.0.1 kustusch.com #[Javascript.Exploit]
          127.0.0.1 adserver.kyoceramita-europe.com
          127.0.0.1 www.kz163.net #[Win32/Virut]
          127.0.0.1 laconicsoftware.org #[Malicious.Links.Codec]
          127.0.0.1 alwaysforfriend.land.ru #[Trojan-Downloader.Win32.Banload.bdp]
          127.0.0.1 www.animacoes.land.ru #[Downloader.Swif.B]
          127.0.0.1 a.lakequincy.com
          127.0.0.1 www.latinbusca.com #[Adware-CommanderNET]
          127.0.0.1 ads.lawnsite.com
          127.0.0.1 layer-ads.de
          127.0.0.1 www.layer-ads.de
          127.0.0.1 fun.lbn.ru
          127.0.0.1 business.lbn.ru
          127.0.0.1 www.business.lbn.ru
          127.0.0.1 www.fun.lbn.ru
          127.0.0.1 234.media.lbn.ru
          127.0.0.1 banner.lbs.km.ru
          127.0.0.1 iframe.leadacceptor.com
          127.0.0.1 leakedcelebvideos.com #[Win32/TrojanDownloader.Agent.BCZ]
          127.0.0.1 www.leakedcelebvideos.com
          127.0.0.1 pubs.lemonde.fr
          127.0.0.1 www.leopardsearch.com
          127.0.0.1 www.letzebuerg.biz
          127.0.0.1 ts1.lexmark.com
          127.0.0.1 leythosthestalker.com
          127.0.0.1 www.leythosthestalker.com
          127.0.0.1 adserver.libero.it
          127.0.0.1 adv-banner.libero.it
          127.0.0.1 phpads.lime.com
          127.0.0.1 link.ru
          127.0.0.1 link.link.ru
          127.0.0.1 ads.linki.nl
          127.0.0.1 www.linkads.de
          127.0.0.1 linkbuddies.com
          127.0.0.1 banners.linkbuddies.com
          127.0.0.1 www.linkbuddies.com
          127.0.0.1 www.linkcounter.com
          127.0.0.1 linksexchange.net
          127.0.0.1 linkexchange.ru
          127.0.0.1 web.linkexchange.ru
          127.0.0.1 www.linkexchange.ru
          127.0.0.1 link4link.com
          127.0.0.1 plus.link4link.com
          127.0.0.1 www.links4trade.com
          127.0.0.1 escati.linkopp.net
          127.0.0.1 www.linkopp.net
          127.0.0.1 click.linkstattrack.com #[SiteAdvisor.linkstattrack.com]
          127.0.0.1 linktarget.com
          127.0.0.1 banner.linktech.cn
          127.0.0.1 www.linkworth.com
          127.0.0.1 ads.linuxjournal.com
          127.0.0.1 www.liveads.org
          127.0.0.1 livecounter.net
          127.0.0.1 www.livecounter.net
          127.0.0.1 image.adv.livedoor.com
          127.0.0.1 js.livehelper.com
          127.0.0.1 newbrowse.livehelper.com
          127.0.0.1 ads.livescore.com
          127.0.0.1 traffic.liveuniversenetwork.com
          127.0.0.1 trafficcdn.liveuniversenetwork.com
          127.0.0.1 traffic.livevideo.com
          127.0.0.1 broadent.vo.llnwd.net
          127.0.0.1 aa.llsging.com #[Javascript.Exploit]
          127.0.0.1 lw.lnkworld.com
          127.0.0.1 omnituretrack.local.com
          127.0.0.1 www.lojastal.com.br #[Win32/Spy.Banker.ANV]
          127.0.0.1 lol.to #[HTML/Exploit.Mht]
          127.0.0.1 err.lolipop.jp
          127.0.0.1 www.lookde5.com #[W32.Looked]
          127.0.0.1 lookoutsoft.net #[SiteAdvisor.lookoutsoft.net]
          127.0.0.1 screensavers.lookoutsoft.net
          127.0.0.1 a.loomia.com #[Tracking.Cookie]
          127.0.0.1 www.lookoutsoft.net #[AdWare.Win32.WinAD.b]
          127.0.0.1 www.lords-of-havoc.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
          127.0.0.1 ermei.loveyoushipin.com #[Google.Warning]
          127.0.0.1 niang.loveyoushipin.com
          127.0.0.1 hexusads.fluent.ltd.uk
          127.0.0.1 lunahodiki.com #[Javascript.Exploit]
          127.0.0.1 www.luxemil.com #[Google.Warning]
          127.0.0.1 ads-apsa.lvz-online.de
          127.0.0.1 www.lynxtrack.com
          127.0.0.1 m2k.ru
          127.0.0.1 ad.m5prod.net
          127.0.0.1 ad.m-adx.com
          127.0.0.1 media.m-adx.com
          127.0.0.1 www.macrcmedia.com #[Exploit.ANI]
          127.0.0.1 www.macrcmedia.net
          127.0.0.1 ads.madisonavenue.com
          127.0.0.1 resource.madisonavenue.com
          127.0.0.1 textads.madisonavenue.com
          127.0.0.1 banner.magicboxcasino.com #[AdWare.Win32.Casino.w]
          127.0.0.1 msn-sexoweb.mail15.com #[Win32/Spy.Banker.ANV]
          127.0.0.1 humortadela.mail15.com #[Win32/Spy.Banker.ANV]
          127.0.0.1 www.novogerador.mail15.com
          127.0.0.1 www.uolcard.mail15.com #[Trojan-Spy.Win32.Banker.ark]
          127.0.0.1 voegol.mail15.com #[Win32/Spy.Banker.ANV]
          127.0.0.1 humortadela0.mail333.com #[Win32/Spy.Banker.AHY]
          127.0.0.1 destino-gol.mail333.com #[Win32/Spy.Banker.BCK]
          127.0.0.1 www.messengerbeta.mail333.com #[Win32/Spy.Banker.BCK]
          127.0.0.1 mair.net #[Realtracker]
          127.0.0.1 ads.marketing-internet.com
          127.0.0.1 marketing-know-how.com #[TR/Dldr.iBill.V]
          127.0.0.1 aw.masterstats.com
          127.0.0.1 erotic.masterstats.com
          127.0.0.1 image.masterstats.com
          127.0.0.1 link.masterstats.com
          127.0.0.1 vw.masterstats.com #[Ewido.TrackingCookie.Masterstats]
          127.0.0.1 mbe.ru #[adrevolver]
          127.0.0.1 ads.affiliates.match.com
          1. Contributeur sécurité
            Salut !!

            Fais ce qui suit dans l ordre stp, c est important :

            ▶ Télécharge RHosts (de SiRi)

            ▶ Double clique dessus pour l'exécuter

            ▶ et cliques sur " Restore original Hosts "

            ps : c est normal que rien ne se passe

            ▶ ensuire redémarre le pc

            ensuite :

            Option 2 - Nettoyage :

            ▶ redémarre le PC en mode sans échec

            ▶ Double cliquer sur smitfraudfix

            ▶ Sélectionner 2 pour supprimer les fichiers responsables de l'infection.

            ▶ A la question Voulez-vous nettoyer le registre ? répondre O (oui) afin de débloquer le fond d'écran et supprimer les clés de démarrage automatique de l'infection.

            Le fix déterminera si le fichier wininet.dll est infecté. A la question Corriger le fichier infecté ? répondre O (oui) pour remplacer le fichier corrompu.

            ▶ Enregistre le rapport sur ton bureau

            ▶ Redémarrer en mode normal et poster le rapport.