Winsecure

Bonjour,
J'ai un message qui ne cesse de s'afficher
winsecure
Trial software registred! Remember to install correct software version before to patch or crack will not works correctly.

N'étant pas specialiste en informatique, je prefere demander l'avis de personne compétente.
J'ai lu pas mal de chose sur le forum et j'ai donc telechargé Hijackthis.
Merci pour votre aide

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:52:54, on 15/03/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
D:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
C:\Program Files\QuickTime\qttask.exe
D:\Program Files\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Users\Stephane\AppData\Roaming\smss.exe
C:\Users\Stephane\AppData\Roaming\smvss.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\System32\WinSecure.exe
C:\Windows\System32\WinSecure.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.playonlinegames4free.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ycomp/defaults/su/*https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - D:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - D:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Apanel] C:\ACERSW\config\NewSetApanel.cmd
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\System32\msconfig.exe" /auto
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "D:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "D:\Program Files\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [.nvsvc] C:\Users\Stephane\AppData\Roaming\smss.exe /w
O4 - HKCU\..\Run: [devenv] C:\Users\Stephane\AppData\Roaming\smvss.exe /w
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Policies\Explorer\Run: [Windows Security Tool] WinSecure.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: Adobe Reader Synchronizer.lnk = D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Office\Office\OSA9.EXE
O4 - Global Startup: PCM Media Sharing.lnk = C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
O8 - Extra context menu item: Ajouter au fichier PDF existant - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir en Adobe PDF - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en Adobe PDF - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O23 - Service: Adobe Version Cue CS3 {fr_FR} (Adobe Version Cue CS3) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

--
End of file - 11844 bytes
Configuration: Windows Vista
Firefox 2.0.0.12

7 réponses

  1. salut steph,

    Bienvenue dans la communauté CCM,

    Merci pour les détails.

    Pour commencer
    ------------------------
    - Cliquer sur Spybot pour télécharger la dernière version 1.5 (septembre 2007)
    Après installation cliquer sur Rechercher les Mises à Jour, cocher les MàJ , télécharger les MàJ.

    > Redémarrer en mode sans échec : après le bip avant le logo windows tapoter sur la touche F8 (ou F5): image. Si problème : Tuto ici


    Redémarrer Spybot, cliquer sur Vérifier tout, Purger les éléments sélectionner, puis ***Vacciner***

    Le tutorial très complet http://www.tutoriaux-excalibur.com/spybot.htm (merci excalibur)

    ------------------------
    Comme tu es sous Vista, désactiver l'UAC (User Account Control) le temps de la désinfection (tu le réactiveras après ta désinfection):
    • Va dans Panneau de Configuration puis Comptes d'Utilisateurs.
    • Clique sur Activer ou désactiver le contrôle des comptes utilisateurs.
    • Décoche la case Utiliser le contrôle des comptes utilisateurs pour vous aider à protéger votre ordinateur.
    • Clique sur OK pour enregistrer la modification et redémarre le PC lorsque ça t'est demandé.

    ------------------------
    Télécharger SmitfraudFix - S!Ri -> http://siri.urz.free.fr/Fix/SmitfraudFix.php
    Dézipper la totalité de l'archive smitfraudfix.zip.
    Option 1 - Recherche :
    Double cliquer sur smitfraudfix.cmd
    Sélectionner 1 pour créer un rapport des fichiers responsables de l'infection.
    Poster le rapport dans ton prochain message.

    A+

    Denis
    0
    1. Bonjour Denis
      Merci pour ton aide
      Voici le rapport suite à tes directives.
      SmitFraudFix v2.305

      Scan done at 10:39:00,84, 16/03/2008
      Run from C:\Users\Stephane\Desktop\SmitfraudFix
      OS: Microsoft Windows [version 6.0.6000] - Windows_NT
      The filesystem type is NTFS
      Fix run in normal mode

      »»»»»»»»»»»»»»»»»»»»»»»» Process

      C:\Windows\system32\csrss.exe
      C:\Windows\system32\wininit.exe
      C:\Windows\system32\csrss.exe
      C:\Windows\system32\services.exe
      C:\Windows\system32\lsass.exe
      C:\Windows\system32\lsm.exe
      C:\Windows\system32\svchost.exe
      C:\Windows\system32\winlogon.exe
      C:\Windows\system32\svchost.exe
      C:\Windows\System32\svchost.exe
      C:\Windows\system32\Ati2evxx.exe
      C:\Windows\System32\svchost.exe
      C:\Windows\System32\svchost.exe
      C:\Windows\system32\svchost.exe
      C:\Windows\system32\SLsvc.exe
      C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\Windows\system32\Ati2evxx.exe
      C:\Windows\system32\Dwm.exe
      C:\Windows\System32\spoolsv.exe
      C:\Windows\system32\svchost.exe
      C:\Windows\system32\taskeng.exe
      C:\Windows\Explorer.EXE
      C:\Program Files\Windows Defender\MSASCui.exe
      C:\Windows\RtHDVCpl.exe
      C:\Acer\Empowering Technology\SysMonitor.exe
      C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
      C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
      C:\Program Files\Alwil Software\Avast4\ashDisp.exe
      C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
      D:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
      D:\Program Files\iTunesHelper.exe
      C:\Windows\System32\WinSecure.exe
      C:\Windows\System32\WinSecure.exe
      C:\Program Files\Windows Sidebar\sidebar.exe
      C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
      C:\Windows\ehome\ehtray.exe
      C:\Windows\ehome\ehmsas.exe
      C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
      C:\Users\Stephane\AppData\Roaming\smss.exe
      C:\Users\Stephane\AppData\Roaming\smvss.exe
      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
      C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
      C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe
      C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe
      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
      C:\Program Files\Windows Media Player\wmplayer.exe
      C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
      C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
      C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
      C:\Program Files\Common Files\LightScribe\LSSrvc.exe
      C:\Windows\system32\svchost.exe
      C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      C:\Windows\system32\svchost.exe
      C:\Windows\System32\svchost.exe
      C:\Windows\system32\SearchIndexer.exe
      C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
      C:\Windows\system32\WUDFHost.exe
      C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Windows\system32\taskeng.exe
      C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
      C:\Windows\system32\wbem\wmiprvse.exe
      C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
      C:\Windows\system32\svchost.exe
      C:\Program Files\Windows Live\Messenger\usnsvc.exe
      C:\Windows\system32\conime.exe
      C:\Windows\system32\svchost.exe
      C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
      C:\Windows\system32\taskeng.exe
      C:\Windows\servicing\TrustedInstaller.exe
      C:\Windows\system32\SearchProtocolHost.exe
      C:\Windows\system32\SearchFilterHost.exe
      C:\Windows\system32\cmd.exe

      »»»»»»»»»»»»»»»»»»»»»»»» hosts

      hosts file corrupted !

      127.0.0.1 www.legal-at-spybot.info
      127.0.0.1 legal-at-spybot.info

      »»»»»»»»»»»»»»»»»»»»»»»» C:\

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\Web

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32\LogFiles

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Stephane

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Stephane\Application Data

      »»»»»»»»»»»»»»»»»»»»»»»» Start Menu

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Stephane\FAVORI~1

      »»»»»»»»»»»»»»»»»»»»»»»» Desktop

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

      »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys

      »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

      »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
      !!!Attention, following keys are not inevitably infected!!!

      IEDFix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri

      »»»»»»»»»»»»»»»»»»»»»»»» VACFix
      !!!Attention, following keys are not inevitably infected!!!

      VACFix
      Credits: Malware Analysis & Diagnostic
      Code: S!Ri

      »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
      !!!Attention, following keys are not inevitably infected!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
      !!!Attention, following keys are not inevitably infected!!!

      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
      !!!Attention, following keys are not inevitably infected!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

      »»»»»»»»»»»»»»»»»»»»»»»» Rustock

      »»»»»»»»»»»»»»»»»»»»»»»» DNS

      Description: Generic Marvell Yukon 88E8056 based Ethernet Controller
      DNS Server Search Order: 192.168.1.1

      HKLM\SYSTEM\CCS\Services\Tcpip\..\{169CEE27-4969-46D2-AB0F-0C9722446995}: DhcpNameServer=192.168.1.1
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{169CEE27-4969-46D2-AB0F-0C9722446995}: DhcpNameServer=192.168.1.1
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{169CEE27-4969-46D2-AB0F-0C9722446995}: DhcpNameServer=192.168.1.1
      HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
      HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
      HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1

      »»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection

      »»»»»»»»»»»»»»»»»»»»»»»» End

      a+
      0
      1. Re steph16,

        - Spybot a t-il détecté et nettoyé des infection (Vacciner).

        Pour continuer
        - Option 2 - Nettoyage :
        Redémarrer l'ordinateur en mode sans échec, pour de l’aide clic sur Tutoriel Symantec.

        Double cliquer sur smitfraudfix.cmd

        Sélectionner 2 pour supprimer les fichiers responsables de l'infection.
        A la question Voulez-vous nettoyer le registre ? répondre O (oui) afin de débloquer le fond d'écran et supprimer les clés de démarrage automatique de l'infection.
        Le fix déterminera si le fichier wininet.dll est infecté. A la question Corriger le fichier infecté ? Répondre O (oui) pour remplacer le fichier corrompu.
        Redémarrer en mode normal et poster le rapport dans ton prochain message avec un autre log HJthis.
        N.B.: Cette étape élimine les fichiers infectieux détectés à l'étape #1
        Attention que l'option 2 de l'outil supprime le fond d'écran !

        En attendant moi dodo time,

        A+

        Denis
        0
        1. Le fichier wininet.dll ne doit pas etre infecté car le fix ne m'a pas demandé de corriger le probleme.
          Voici le rapport
          SmitFraudFix v2.305

          Scan done at 11:28:21,71, 16/03/2008
          Run from C:\Users\Stephane\Desktop\SmitfraudFix
          OS: Microsoft Windows [version 6.0.6000] - Windows_NT
          The filesystem type is NTFS
          Fix run in safe mode

          »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
          !!!Attention, following keys are not inevitably infected!!!

          SrchSTS.exe by S!Ri
          Search SharedTaskScheduler's .dll

          »»»»»»»»»»»»»»»»»»»»»»»» Killing process

          »»»»»»»»»»»»»»»»»»»»»»»» hosts

          127.0.0.1 localhost
          ::1 localhost
          127.0.0.1 www.007guard.com
          127.0.0.1 007guard.com
          127.0.0.1 008i.com
          127.0.0.1 www.008k.com
          127.0.0.1 008k.com
          127.0.0.1 www.00hq.com
          127.0.0.1 00hq.com
          127.0.0.1 010402.com
          127.0.0.1 www.032439.com
          127.0.0.1 032439.com
          127.0.0.1 www.1001-search.info
          127.0.0.1 1001-search.info
          127.0.0.1 www.100888290cs.com
          127.0.0.1 100888290cs.com
          127.0.0.1 www.100sexlinks.com
          127.0.0.1 100sexlinks.com
          127.0.0.1 www.10sek.com
          127.0.0.1 10sek.com
          127.0.0.1 www.123topsearch.com
          127.0.0.1 123topsearch.com
          127.0.0.1 www.132.com
          127.0.0.1 132.com
          127.0.0.1 www.136136.net
          127.0.0.1 136136.net
          127.0.0.1 www.139mm.com
          127.0.0.1 139mm.com
          127.0.0.1 www.163ns.com
          127.0.0.1 163ns.com
          127.0.0.1 171203.com
          127.0.0.1 17-plus.com
          127.0.0.1 www.1800searchonline.com
          127.0.0.1 1800searchonline.com
          127.0.0.1 www.180searchassistant.com
          127.0.0.1 180searchassistant.com
          127.0.0.1 www.180solutions.com
          127.0.0.1 180solutions.com
          127.0.0.1 www.181.365soft.info
          127.0.0.1 181.365soft.info
          127.0.0.1 www.1987324.com
          127.0.0.1 1987324.com
          127.0.0.1 www.1-domains-registrations.com
          127.0.0.1 1-domains-registrations.com
          127.0.0.1 www.1-extreme.biz
          127.0.0.1 1-extreme.biz
          127.0.0.1 www.1sexparty.com
          127.0.0.1 1sexparty.com
          127.0.0.1 www.1stantivirus.com
          127.0.0.1 1stantivirus.com
          127.0.0.1 www.1stpagehere.com
          127.0.0.1 1stpagehere.com
          127.0.0.1 www.1stsearchportal.com
          127.0.0.1 1stsearchportal.com
          127.0.0.1 2.82211.net
          127.0.0.1 www.2006ooo.com
          127.0.0.1 www.2007-download.com
          127.0.0.1 2007-download.com
          127.0.0.1 www.2020search.com
          127.0.0.1 2020search.com
          127.0.0.1 20x2p.com
          127.0.0.1 www.24.365soft.info
          127.0.0.1 24.365soft.info
          127.0.0.1 www.24-7pharmacy.info
          127.0.0.1 24-7pharmacy.info
          127.0.0.1 www.24-7searching-and-more.com
          127.0.0.1 24-7searching-and-more.com
          127.0.0.1 www.24teen.com
          127.0.0.1 24teen.com
          127.0.0.1 www.2every.net
          127.0.0.1 2every.net
          127.0.0.1 2ndpower.com
          127.0.0.1 www.2search.com
          127.0.0.1 2search.com
          127.0.0.1 www.2search.org
          127.0.0.1 2search.org
          127.0.0.1 www.2squared.com
          127.0.0.1 2squared.com
          127.0.0.1 www.3322.org
          127.0.0.1 3322.org
          127.0.0.1 365soft.info
          127.0.0.1 www.36site.com
          127.0.0.1 36site.com
          127.0.0.1 3721.com
          127.0.0.1 39-93.com
          127.0.0.1 www.3abetterinternet.com
          127.0.0.1 3abetterinternet.com
          127.0.0.1 www.3bay.it
          127.0.0.1 3bay.it
          127.0.0.1 www.3ebay.it
          127.0.0.1 3ebay.it
          127.0.0.1 www.3xclipsonline.com
          127.0.0.1 3xclipsonline.com
          127.0.0.1 www.3xcurves.com
          127.0.0.1 3xcurves.com
          127.0.0.1 www.3xfestival.com
          127.0.0.1 3xfestival.com
          127.0.0.1 www.3x-festival.com
          127.0.0.1 3x-festival.com
          127.0.0.1 www.3x-galls.com
          127.0.0.1 3x-galls.com
          127.0.0.1 www.3xmiracle.com
          127.0.0.1 3xmiracle.com
          127.0.0.1 www.3xmoviesblog.com
          127.0.0.1 3xmoviesblog.com
          127.0.0.1 www.404dns.com
          127.0.0.1 404dns.com
          127.0.0.1 www.4199.com
          127.0.0.1 4199.com
          127.0.0.1 www.4corn.net
          127.0.0.1 4corn.net
          127.0.0.1 www.4ebay.it
          127.0.0.1 4ebay.it
          127.0.0.1 4klm.com
          127.0.0.1 www.4mpg.com
          127.0.0.1 4mpg.com
          127.0.0.1 www.4repubblica.it
          127.0.0.1 4repubblica.it
          127.0.0.1 www.4softget.com
          127.0.0.1 4softget.com
          127.0.0.1 www.5iscali.it
          127.0.0.1 5iscali.it
          127.0.0.1 www.5repubblica.it
          127.0.0.1 5repubblica.it
          127.0.0.1 www.5starvideos.com
          127.0.0.1 5starvideos.com
          127.0.0.1 www.5tiscali.it
          127.0.0.1 5tiscali.it
          127.0.0.1 www.5zgmu7o20kt5d8yq.com
          127.0.0.1 5zgmu7o20kt5d8yq.com
          127.0.0.1 www.680180.net
          127.0.0.1 680180.net
          127.0.0.1 www.6iscali.it
          127.0.0.1 6iscali.it
          127.0.0.1 www.6njaga.com
          127.0.0.1 6njaga.com
          127.0.0.1 www.6sek.com
          127.0.0.1 6sek.com
          127.0.0.1 www.6tiscali.it
          127.0.0.1 6tiscali.it
          127.0.0.1 www.70-music.com
          127.0.0.1 70-music.com
          127.0.0.1 www.7322.com
          127.0.0.1 7322.com
          127.0.0.1 75tz.com
          127.0.0.1 www.777search.com
          127.0.0.1 777search.com
          127.0.0.1 www.777top.com
          127.0.0.1 777top.com
          127.0.0.1 www.7939.com
          127.0.0.1 7939.com
          127.0.0.1 www.7search.com
          127.0.0.1 7search.com
          127.0.0.1 80gw6ry3i3x3qbrkwhxhw.032439.com
          127.0.0.1 www.80-music.com
          127.0.0.1 80-music.com
          127.0.0.1 82211.net
          127.0.0.1 8866.org
          127.0.0.1 www.888.com
          127.0.0.1 888.com
          127.0.0.1 www.8ad.com
          127.0.0.1 8ad.com
          127.0.0.1 www.90-music.com
          127.0.0.1 90-music.com
          127.0.0.1 www.9505.com
          127.0.0.1 9505.com
          127.0.0.1 www.971searchbox.com
          127.0.0.1 971searchbox.com
          127.0.0.1 a.bestmanage.org
          127.0.0.1 www.aaabesthomepage.com
          127.0.0.1 aaabesthomepage.com
          127.0.0.1 aaasexypics.com
          127.0.0.1 www.aaawebfinder.com
          127.0.0.1 aaawebfinder.com
          127.0.0.1 www.aaqadarsztriv.com
          127.0.0.1 aaqadarsztriv.com
          127.0.0.1 www.aaqada-rsztriv.com
          127.0.0.1 aaqada-rsztriv.com
          127.0.0.1 www.aaqadaueorn.com
          127.0.0.1 aaqadaueorn.com
          127.0.0.1 www.aaqada-ueorn.com
          127.0.0.1 aaqada-ueorn.com
          127.0.0.1 www.aaqada-ygco.com
          127.0.0.1 aaqada-ygco.com
          127.0.0.1 www.aaqada-ymct.com
          127.0.0.1 aaqada-ymct.com
          127.0.0.1 aavc.com
          127.0.0.1 www.abcdperformance.com
          127.0.0.1 abcdperformance.com
          127.0.0.1 www.abc-find.info
          127.0.0.1 abc-find.info
          127.0.0.1 www.abcsearch.com
          127.0.0.1 abcsearch.com
          127.0.0.1 www.abetterinternet.com
          127.0.0.1 abetterinternet.com
          127.0.0.1 www.abnetsoft.info
          127.0.0.1 abnetsoft.info
          127.0.0.1 www.aboutclicker.com
          127.0.0.1 aboutclicker.com
          127.0.0.1 www.abrp.net
          127.0.0.1 abrp.net
          127.0.0.1 www.absolutee.com
          127.0.0.1 absolutee.com
          127.0.0.1 www.abyssmedia.com
          127.0.0.1 abyssmedia.com
          127.0.0.1 www.ac66.cn
          127.0.0.1 ac66.cn
          127.0.0.1 access.Navinetwork.com
          127.0.0.1 access.rapid-pass.net
          127.0.0.1 www.accessactivexvideo.com
          127.0.0.1 accessactivexvideo.com
          127.0.0.1 www.accessclips.com
          127.0.0.1 accessclips.com
          127.0.0.1 www.access-dvd.com
          127.0.0.1 access-dvd.com
          127.0.0.1 www.accesskeygenerator.com
          127.0.0.1 accesskeygenerator.com
          127.0.0.1 www.accessorygeeks.com
          127.0.0.1 accessorygeeks.com
          127.0.0.1 www.accessthefuture.net
          127.0.0.1 accessthefuture.net
          127.0.0.1 www.accessvid.net
          127.0.0.1 accessvid.net
          127.0.0.1 www.acemedic.com
          127.0.0.1 acemedic.com
          127.0.0.1 www.ace-webmaster.com
          127.0.0.1 ace-webmaster.com
          127.0.0.1 acjp.com
          127.0.0.1 www.acrobat-2007.com
          127.0.0.1 acrobat-2007.com
          127.0.0.1 www.acrobat-8.com
          127.0.0.1 acrobat-8.com
          127.0.0.1 www.acrobat-center.com
          127.0.0.1 acrobat-center.com
          127.0.0.1 www.acrobat-hq.com
          127.0.0.1 acrobat-hq.com
          127.0.0.1 www.acrobatreader-8.com
          127.0.0.1 acrobatreader-8.com
          127.0.0.1 www.acrobat-reader-8.de
          127.0.0.1 acrobat-reader-8.de
          127.0.0.1 www.acrobat-stop.com
          127.0.0.1 acrobat-stop.com
          127.0.0.1 www.actionbreastcancer.org
          127.0.0.1 actionbreastcancer.org
          127.0.0.1 www.activesearcher.info
          127.0.0.1 activesearcher.info
          127.0.0.1 www.activexaccessobject.com
          127.0.0.1 activexaccessobject.com
          127.0.0.1 www.activexaccessvideo.com
          127.0.0.1 activexaccessvideo.com
          127.0.0.1 www.activexemedia.com
          127.0.0.1 activexemedia.com
          127.0.0.1 www.activexmediaobject.com
          127.0.0.1 activexmediaobject.com
          127.0.0.1 www.activexmediapro.com
          127.0.0.1 activexmediapro.com
          127.0.0.1 www.activexmediasite.com
          127.0.0.1 activexmediasite.com
          127.0.0.1 www.activexmediasoftware.com
          127.0.0.1 activexmediasoftware.com
          127.0.0.1 www.activexmediasource.com
          127.0.0.1 activexmediasource.com
          127.0.0.1 www.activexmediatool.com
          127.0.0.1 activexmediatool.com
          127.0.0.1 www.activexmediatour.com
          127.0.0.1 activexmediatour.com
          127.0.0.1 www.activexsoftwares.com
          127.0.0.1 activexsoftwares.com
          127.0.0.1 www.activexsource.com
          127.0.0.1 activexsource.com
          127.0.0.1 www.activexupdate.com
          127.0.0.1 activexupdate.com
          127.0.0.1 www.activexvideo.com
          127.0.0.1 activexvideo.com
          127.0.0.1 www.activexvideotool.com
          127.0.0.1 activexvideotool.com
          127.0.0.1 www.ad.marketingsector.com
          127.0.0.1 ad.marketingsector.com
          127.0.0.1 www.ad.mokead.com
          127.0.0.1 ad.mokead.com
          127.0.0.1 ad.oinadserver.com
          127.0.0.1 ad.outerinfoads.com
          127.0.0.1 www.ad25.com
          127.0.0.1 ad25.com
          127.0.0.1 www.ad45.com
          127.0.0.1 ad45.com
          127.0.0.1 www.ad77.com
          127.0.0.1 ad77.com
          127.0.0.1 www.ad86.com
          127.0.0.1 ad86.com
          127.0.0.1 www.adamsupportgroup.org
          127.0.0.1 adamsupportgroup.org
          127.0.0.1 www.adarmor.com
          127.0.0.1 adarmor.com
          127.0.0.1 www.adasearch.com
          127.0.0.1 adasearch.com
          127.0.0.1 adaware.cc
          127.0.0.1 www.adawarenow.com
          127.0.0.1 adawarenow.com
          127.0.0.1 adchannel.contextplus.net
          127.0.0.1 www.addetect.com
          127.0.0.1 addetect.com
          127.0.0.1 www.add-hhh.info
          127.0.0.1 add-hhh.info
          127.0.0.1 www.addictivetechnologies.com
          127.0.0.1 addictivetechnologies.com
          127.0.0.1 www.addictivetechnologies.net
          127.0.0.1 addictivetechnologies.net
          127.0.0.1 www.addioerrori.com
          127.0.0.1 addioerrori.com
          127.0.0.1 www.add-manager.com
          127.0.0.1 add-manager.com
          127.0.0.1 www.adgate.info
          127.0.0.1 adgate.info
          127.0.0.1 www.adintelligence.net
          127.0.0.1 adintelligence.net
          127.0.0.1 www.adioserrores.com
          127.0.0.1 adioserrores.com
          127.0.0.1 www.adipics.com
          127.0.0.1 adipics.com
          127.0.0.1 www.adlogix.com
          127.0.0.1 adlogix.com
          127.0.0.1 www.admin2cash.biz
          127.0.0.1 admin2cash.biz
          127.0.0.1 adnet-plus.com
          127.0.0.1 www.adnetserver.com
          127.0.0.1 adnetserver.com
          127.0.0.1 adobe-download-now.com
          127.0.0.1 www.adobe-downloads.com
          127.0.0.1 adobe-downloads.com
          127.0.0.1 www.adobe-reader-8.fr
          127.0.0.1 adobe-reader-8.fr
          127.0.0.1 www.adprotect.com
          127.0.0.1 adprotect.com
          127.0.0.1 ads.centralmedia.ws
          127.0.0.1 ads.k8l.info
          127.0.0.1 ads.kmpads.com
          127.0.0.1 ads.kw.revenue.net
          127.0.0.1 ads.marketingsector.com
          127.0.0.1 ads.searchingbooth.com
          127.0.0.1 ads.z-quest.com
          127.0.0.1 ads1.revenue.net
          127.0.0.1 www.ads183.com
          127.0.0.1 ads183.com
          127.0.0.1 www.adscontex.com
          127.0.0.1 adscontex.com
          127.0.0.1 www.adservices1.enhance.com
          127.0.0.1 adservices1.enhance.com
          127.0.0.1 adservs.com
          127.0.0.1 www.adsextend.net
          127.0.0.1 adsextend.net
          127.0.0.1 www.adshttp.com
          127.0.0.1 adshttp.com
          127.0.0.1 www.adsniffer.com
          127.0.0.1 adsniffer.com
          127.0.0.1 www.adsonwww.com
          127.0.0.1 adsonwww.com
          127.0.0.1 www.adspics.com
          127.0.0.1 adspics.com
          127.0.0.1 www.adsrevenue.net
          127.0.0.1 adsrevenue.net
          127.0.0.1 www.adtrak.net
          127.0.0.1 adtrak.net
          127.0.0.1 adtrgt.com
          127.0.0.1 www.adult777search.info
          127.0.0.1 adult777search.info
          127.0.0.1 www.adultan.com
          127.0.0.1 adultan.com
          127.0.0.1 www.adult-engine-search.com
          127.0.0.1 adult-engine-search.com
          127.0.0.1 www.adult-erotic-guide.net
          127.0.0.1 adult-erotic-guide.net
          127.0.0.1 www.adultfilmsite.com
          127.0.0.1 adultfilmsite.com
          127.0.0.1 www.adult-friends-finder.net
          127.0.0.1 adult-friends-finder.net
          127.0.0.1 adultgambling.org
          127.0.0.1 adult-host.org
          127.0.0.1 www.adulthyperlinks.com
          127.0.0.1 adulthyperlinks.com
          127.0.0.1 www.adultmovieplus.com
          127.0.0.1 adultmovieplus.com
          127.0.0.1 www.adult-mpg.net
          127.0.0.1 adult-mpg.net
          127.0.0.1 adult-personal.us
          127.0.0.1 adultsgames.net
          127.0.0.1 www.adultsonlyvids.com
          127.0.0.1 adultsonlyvids.com
          127.0.0.1 www.adultsper.com
          127.0.0.1 adultsper.com
          127.0.0.1 www.adulttds.com
          127.0.0.1 adulttds.com
          127.0.0.1 www.adultzoneworld.com
          127.0.0.1 adultzoneworld.com
          127.0.0.1 www.advcash.biz
          127.0.0.1 advcash.biz
          127.0.0.1 advert.exaccess.ru
          127.0.0.1 www.advertisemoney.info
          127.0.0.1 advertisemoney.info
          127.0.0.1 advertising.paltalk.com
          127.0.0.1 www.advertising-money.info
          127.0.0.1 advertising-money.info
          127.0.0.1 ad-ware.cc
          127.0.0.1 www.ad-w-a-r-e.com
          127.0.0.1 ad-w-a-r-e.com
          127.0.0.1 www.a-d-w-a-r-e.com
          127.0.0.1 a-d-w-a-r-e.com
          127.0.0.1 www.adware.pro
          127.0.0.1 adware.pro
          127.0.0.1 www.adwarealert.com
          127.0.0.1 adwarealert.com
          127.0.0.1 www.ad-warealert.com
          127.0.0.1 ad-warealert.com
          127.0.0.1 www.adwarearrest.com
          127.0.0.1 adwarearrest.com
          127.0.0.1 www.adwarebazooka.com
          127.0.0.1 adwarebazooka.com
          127.0.0.1 www.adwarecommander.com
          127.0.0.1 adwarecommander.com
          127.0.0.1 www.adwarefinder.com
          127.0.0.1 adwarefinder.com
          127.0.0.1 www.adwaregold.com
          127.0.0.1 adwaregold.com
          127.0.0.1 www.adwarepatrol.com
          127.0.0.1 adwarepatrol.com
          127.0.0.1 www.adwareplatinum.com
          127.0.0.1 adwareplatinum.com
          127.0.0.1 www.adwareprotectionsite.com
          127.0.0.1 adwareprotectionsite.com
          127.0.0.1 www.adwarepunisher.com
          127.0.0.1 adwarepunisher.com
          127.0.0.1 www.adwareremover.ws
          127.0.0.1 adwareremover.ws
          127.0.0.1 www.adwaresafety.com
          127.0.0.1 adwaresafety.com
          127.0.0.1 www.adwarexp.com
          127.0.0.1 adwarexp.com
          127.0.0.1 affiliate.idownload.com
          127.0.0.1 www.aflgate.com
          127.0.0.1 aflgate.com
          127.0.0.1 africaspromise.org
          127.0.0.1 agava.com
          127.0.0.1 agava.ru
          127.0.0.1 agentstudio.com
          127.0.0.1 www.aginegialle.it
          127.0.0.1 aginegialle.it
          127.0.0.1 aifind.info
          127.0.0.1 www.aifind.info
          127.0.0.1 www.airtleworld.com
          127.0.0.1 airtleworld.com
          127.0.0.1 www.aitalia.it
          127.0.0.1 aitalia.it
          127.0.0.1 akamai.downloadv3.com
          127.0.0.1 www.aklitalia.it
          127.0.0.1 aklitalia.it
          127.0.0.1 akril.com
          127.0.0.1 alcatel.ws
          127.0.0.1 www.alertspy.com
          127.0.0.1 alertspy.com
          127.0.0.1 www.alfacleaner.com
          127.0.0.1 alfacleaner.com
          127.0.0.1 alfa-search.com
          127.0.0.1 www.alialia.it
          127.0.0.1 alialia.it
          127.0.0.1 www.aliotalia.it
          127.0.0.1 aliotalia.it
          127.0.0.1 www.alirtalia.it
          127.0.0.1 alirtalia.it
          127.0.0.1 www.alitaia.it
          127.0.0.1 alitaia.it
          127.0.0.1 www.alitaklia.it
          127.0.0.1 alitaklia.it
          127.0.0.1 www.alitala.it
          127.0.0.1 alitala.it
          127.0.0.1 www.alitali.it
          127.0.0.1 alitali.it
          127.0.0.1 www.alitaliaq.it
          127.0.0.1 alitaliaq.it
          127.0.0.1 www.alitalias.it
          127.0.0.1 alitalias.it
          127.0.0.1 www.alitaliaz.it
          127.0.0.1 alitaliaz.it
          127.0.0.1 www.alitalioa.it
          127.0.0.1 alitalioa.it
          127.0.0.1 www.alitalisa.it
          127.0.0.1 alitalisa.it
          127.0.0.1 www.alitaliua.it
          127.0.0.1 alitaliua.it
          127.0.0.1 www.alitalkia.it
          127.0.0.1 alitalkia.it
          127.0.0.1 www.alitaloia.it
          127.0.0.1 alitaloia.it
          127.0.0.1 www.alitaluia.it
          127.0.0.1 alitaluia.it
          127.0.0.1 www.alitaslia.it
          127.0.0.1 alitaslia.it
          127.0.0.1 www.alitlia.it
          127.0.0.1 alitlia.it
          127.0.0.1 www.alitralia.it
          127.0.0.1 alitralia.it
          127.0.0.1 www.alitsalia.it
          127.0.0.1 alitsalia.it
          127.0.0.1 www.aliutalia.it
          127.0.0.1 aliutalia.it
          127.0.0.1 www.ALL1COUNT.NET
          127.0.0.1 ALL1COUNT.NET
          127.0.0.1 www.all4internet.com
          127.0.0.1 all4internet.com
          127.0.0.1 allabtcars.com
          127.0.0.1 allabtjeeps.com
          127.0.0.1 www.all-bittorrent.com
          127.0.0.1 all-bittorrent.com
          127.0.0.1 www.allcollisions.com
          127.0.0.1 allcollisions.com
          127.0.0.1 allcybersearch.com
          127.0.0.1 www.allcybersearch.com
          127.0.0.1 www.alldnserrors.com
          127.0.0.1 alldnserrors.com
          127.0.0.1 www.all-downloads-now.com
          127.0.0.1 all-downloads-now.com
          127.0.0.1 www.all-edonkey.com
          127.0.0.1 all-edonkey.com
          127.0.0.1 www.allertaminacce.com
          127.0.0.1 allertaminacce.com
          127.0.0.1 allforadult.com
          127.0.0.1 allhyperlinks.com
          127.0.0.1 www.alliesecurity.com
          127.0.0.1 alliesecurity.com
          127.0.0.1 all-inet.com
          127.0.0.1 allinternetbusiness.com
          127.0.0.1 www.all-limewire.com
          127.0.0.1 all-limewire.com
          127.0.0.1 www.allmegabucks.com
          127.0.0.1 allmegabucks.com
          127.0.0.1 www.allprotections.com
          127.0.0.1 allprotections.com
          127.0.0.1 www.allresultz.net
          127.0.0.1 allresultz.net
          127.0.0.1 www.allsearch.us
          127.0.0.1 allsearch.us
          127.0.0.1 www.allsecuritynotes.com
          127.0.0.1 allsecuritynotes.com
          127.0.0.1 www.allsecuritysite.com
          127.0.0.1 allsecuritysite.com
          127.0.0.1 www.allstarsvideos.net
          127.0.0.1 allstarsvideos.net
          127.0.0.1 www.alltiettantivirus.com
          127.0.0.1 alltiettantivirus.com
          127.0.0.1 www.alltruesoftware.com
          127.0.0.1 alltruesoftware.com
          127.0.0.1 www.allvideoactivex.com
          127.0.0.1 allvideoactivex.com
          127.0.0.1 www.almanah.biz
          127.0.0.1 almanah.biz
          127.0.0.1 almarvideos.com
          127.0.0.1 www.aloitalia.it
          127.0.0.1 aloitalia.it
          127.0.0.1 www.aluitalia.it
          127.0.0.1 aluitalia.it
          127.0.0.1 www.amaena.com
          127.0.0.1 amaena.com
          127.0.0.1 amandamountains.com
          127.0.0.1 www.amateurliveshow.com
          127.0.0.1 amateurliveshow.com
          127.0.0.1 www.amediasoftware.com
          127.0.0.1 amediasoftware.com
          127.0.0.1 www.amediasource.com
          127.0.0.1 amediasource.com
          127.0.0.1 www.americanautobargains.com
          127.0.0.1 americanautobargains.com
          127.0.0.1 www.americancarbargains.com
          127.0.0.1 americancarbargains.com
          127.0.0.1 american-teens.net
          127.0.0.1 amigeek.com
          127.0.0.1 www.amigobore.com
          127.0.0.1 amigobore.com
          127.0.0.1 amisbusiness.com
          127.0.0.1 www.ampmsearch.com
          127.0.0.1 ampmsearch.com
          127.0.0.1 www.analcord.com
          127.0.0.1 analcord.com
          127.0.0.1 analmovi.com
          127.0.0.1 www.anarchylolita.com
          127.0.0.1 anarchylolita.com
          127.0.0.1 anarchyporn.com
          127.0.0.1 www.andromedical.com
          127.0.0.1 andromedical.com
          127.0.0.1 www.animepornmag.com
          127.0.0.1 animepornmag.com
          127.0.0.1 anin.org
          127.0.0.1 www.anjpn-avxiz.biz
          127.0.0.1 anjpn-avxiz.biz
          127.0.0.1 www.anjpnzqav.biz
          127.0.0.1 anjpnzqav.biz
          127.0.0.1 www.anjpn-zqav.biz
          127.0.0.1 anjpn-zqav.biz
          127.0.0.1 annaromeo.com
          127.0.0.1 www.antiddos.us
          127.0.0.1 antiddos.us
          127.0.0.1 www.Antiespiadorado.com
          127.0.0.1 Antiespiadorado.com
          127.0.0.1 www.Antiespionspack.com
          127.0.0.1 Antiespionspack.com
          127.0.0.1 www.Antigusanos2008.com
          127.0.0.1 Antigusanos2008.com
          127.0.0.1 www.antispamassistant.com
          127.0.0.1 antispamassistant.com
          127.0.0.1 www.antispamdeluxe.com
          127.0.0.1 antispamdeluxe.com
          127.0.0.1 www.Antispionage.com
          127.0.0.1 Antispionage.com
          127.0.0.1 www.Antispionagepro.com
          127.0.0.1 Antispionagepro.com
          127.0.0.1 www.antispyadvanced.com
          127.0.0.1 antispyadvanced.com
          127.0.0.1 www.antispydns.biz
          127.0.0.1 antispydns.biz
          127.0.0.1 www.antispylab.com
          127.0.0.1 antispylab.com
          127.0.0.1 www.antispysolutions.com
          127.0.0.1 antispysolutions.com
          127.0.0.1 www.antispyware.com
          127.0.0.1 antispyware.com
          127.0.0.1 www.antispywareboot.com
          127.0.0.1 antispywareboot.com
          127.0.0.1 www.antispywarebot.com
          127.0.0.1 antispywarebot.com
          127.0.0.1 www.antispywarebox.com
          127.0.0.1 antispywarebox.com
          127.0.0.1 www.antispywaredownloads.com
          127.0.0.1 antispywaredownloads.com
          127.0.0.1 antispywaresuite.com
          127.0.0.1 www.antispywaresuite.com
          127.0.0.1 Antispywaresuite.com
          127.0.0.1 www.Antispywaresuite.com
          127.0.0.1 www.antispywareupdates.net
          127.0.0.1 antispywareupdates.net
          127.0.0.1 www.antispywarexp.com
          127.0.0.1 antispywarexp.com
          127.0.0.1 www.Antispyweb.net
          127.0.0.1 Antispyweb.net
          127.0.0.1 www.Antiver2008.com
          127.0.0.1 Antiver2008.com
          127.0.0.1 www.antivermins.com
          127.0.0.1 antivermins.com
          127.0.0.1 www.anti-vermins.com
          127.0.0.1 anti-vermins.com
          127.0.0.1 www.antivir2007.com
          127.0.0.1 antivir2007.com
          127.0.0.1 www.antivirgear.com
          127.0.0.1 antivirgear.com
          127.0.0.1 www.antivirus.fastfreedownload.com
          127.0.0.1 antivirus.fastfreedownload.com
          127.0.0.1 www.antivirusadvance.com
          127.0.0.1 antivirusadvance.com
          127.0.0.1 www.antivirusaskeladd.com
          127.0.0.1 antivirusaskeladd.com
          127.0.0.1 www.antivirusgereedschap.com
          127.0.0.1 antivirusgereedschap.com
          127.0.0.1 www.antivirusgolden.com
          127.0.0.1 antivirusgolden.com
          127.0.0.1 www.antivirus-hq.net
          127.0.0.1 antivirus-hq.net
          127.0.0.1 www.antiviruspcsuite.com
          127.0.0.1 antiviruspcsuite.com
          127.0.0.1 www.antiviruspremium.com
          127.0.0.1 antiviruspremium.com
          127.0.0.1 www.anti-virus-pro.com
          127.0.0.1 anti-virus-pro.com
          127.0.0.1 www.antivirusprotector.com
          127.0.0.1 antivirusprotector.com
          127.0.0.1 www.antivirusscherm.com
          127.0.0.1 antivirusscherm.com
          127.0.0.1 www.antivirussecuritypro.com
          127.0.0.1 antivirussecuritypro.com
          127.0.0.1 www.antivirus-stop.com
          127.0.0.1 antivirus-stop.com
          127.0.0.1 antiworm2008.com
          127.0.0.1 www.antiworm2008.com
          127.0.0.1 Antiworm2008.com
          127.0.0.1 www.Antiworm2008.com
          127.0.0.1 www.Antiwurm2008.com
          127.0.0.1 Antiwurm2008.com
          127.0.0.1 antrocity.com
          127.0.0.1 www.anyofus.com
          127.0.0.1 anyofus.com
          127.0.0.1 www.anysn.seproger.com
          127.0.0.1 anysn.seproger.com
          127.0.0.1 anything4health.com
          127.0.0.1 www.apicpreview.com
          127.0.0.1 apicpreview.com
          127.0.0.1 www.appealcircuit.com
          127.0.0.1 appealcircuit.com
          127.0.0.1 www.approvedlinks.com
          127.0.0.1 approvedlinks.com
          127.0.0.1 apps.deskwizz.com
          127.0.0.1 apps.webservicehost.com
          127.0.0.1 www.aprotectedpage.com
          127.0.0.1 aprotectedpage.com
          127.0.0.1 apsua.com
          127.0.0.1 www.archivioadulti.com
          127.0.0.1 archivioadulti.com
          127.0.0.1 www.archiviosex.net
          127.0.0.1 archiviosex.net
          127.0.0.1 aregay.com
          127.0.0.1 www.ares.click-new-download.com
          127.0.0.1 ares.click-new-download.com
          127.0.0.1 www.ares-freebie.com
          127.0.0.1 ares-freebie.com
          127.0.0.1 www.arespro2007.com
          127.0.0.1 arespro2007.com
          127.0.0.1 www.aresultra.com
          127.0.0.1 aresultra.com
          127.0.0.1 www.ares-usa.com
          127.0.0.1 ares-usa.com
          127.0.0.1 arheo.com
          127.0.0.1 arizonaweb.org
          127.0.0.1 armitageinn.com
          127.0.0.1 www.arquivojpgs.smtp.ru
          127.0.0.1 arquivojpgs.smtp.ru
          127.0.0.1 artachnid.com
          127.0.0.1 art-func.com
          127.0.0.1 art-xxx.com
          127.0.0.1 www.asafebrowser.com
          127.0.0.1 asafebrowser.com
          127.0.0.1 www.asafetyalways.com
          127.0.0.1 asafetyalways.com
          127.0.0.1 www.asafetynotice.com
          127.0.0.1 asafetynotice.com
          127.0.0.1 www.asafetypage.com
          127.0.0.1 asafetypage.com
          127.0.0.1 www.asdbiz.biz
          127.0.0.1 asdbiz.biz
          127.0.0.1 www.asdeykuddq.com
          127.0.0.1 asdeykuddq.com
          127.0.0.1 www.asecurebar.com
          127.0.0.1 asecurebar.com
          127.0.0.1 www.asecureboard.com
          127.0.0.1 asecureboard.com
          127.0.0.1 www.asecurevalue.com
          127.0.0.1 asecurevalue.com
          127.0.0.1 www.asecurityissue.com
          127.0.0.1 asecurityissue.com
          127.0.0.1 www.asecuritynotice.com
          127.0.0.1 asecuritynotice.com
          127.0.0.1 www.asecuritypaper.com
          127.0.0.1 asecuritypaper.com
          127.0.0.1 www.asecuritystuff.com
          127.0.0.1 asecuritystuff.com
          127.0.0.1 asiankingkong.com
          127.0.0.1 www.asianpornmag.com
          127.0.0.1 asianpornmag.com
          127.0.0.1 www.asiantoolbar.com
          127.0.0.1 asiantoolbar.com
          127.0.0.1 www.asidseiupc.com
          127.0.0.1 asidseiupc.com
          127.0.0.1 www.aslitalia.it
          127.0.0.1 aslitalia.it
          127.0.0.1 ass-gals.com
          127.0.0.1 www.assureprotection.com
          127.0.0.1 assureprotection.com
          127.0.0.1 asta-killer.com
          127.0.0.1 www.asupereva.it
          127.0.0.1 asupereva.it
          127.0.0.1 www.ataprogram.com
          127.0.0.1 ataprogram.com
          127.0.0.1 athenrye.com
          127.0.0.1 www.atotalsafety.com
          127.0.0.1 atotalsafety.com
          127.0.0.1 www.atrueprotection.com
          127.0.0.1 atrueprotection.com
          127.0.0.1 www.atruesecurity.com
          127.0.0.1 atruesecurity.com
          127.0.0.1 www.attackware.com
          127.0.0.1 attackware.com
          127.0.0.1 www.attrezzi.biz
          127.0.0.1 attrezzi.biz
          127.0.0.1 www.aucunsvirus.com
          127.0.0.1 aucunsvirus.com
          127.0.0.1 www.aulde.net
          127.0.0.1 aulde.net
          127.0.0.1 www.aupereva.it
          127.0.0.1 aupereva.it
          127.0.0.1 www.autobargains.org
          127.0.0.1 autobargains.org
          127.0.0.1 www.autobargainsnetwork.com
          127.0.0.1 autobargainsnetwork.com
          127.0.0.1 www.autocontext.begun.ru
          127.0.0.1 autocontext.begun.ru
          127.0.0.1 autoescrowpay.com
          127.0.0.1 www.avadvance.com
          127.0.0.1 avadvance.com
          127.0.0.1 www.avast.free-software-center.com
          127.0.0.1 avast.free-software-center.com
          127.0.0.1 www.avast-2007.com
          127.0.0.1 avast-2007.com
          127.0.0.1 www.avast-downloads.com
          127.0.0.1 avast-downloads.com
          127.0.0.1 www.avast-hq.com
          127.0.0.1 avast-hq.com
          127.0.0.1 www.avforce.com
          127.0.0.1 avforce.com
          127.0.0.1 www.avg.grab-it-today.net
          127.0.0.1 avg.grab-it-today.net
          127.0.0.1 www.avg.softwarecenterz.com
          127.0.0.1 avg.softwarecenterz.com
          127.0.0.1 www.avg-secure.com
          127.0.0.1 avg-secure.com
          127.0.0.1 avian-ads.com
          127.0.0.1 www.avideoaxaccess.com
          127.0.0.1 avideoaxaccess.com
          127.0.0.1 www.avideosurfer.com
          127.0.0.1 avideosurfer.com
          127.0.0.1 www.aviewersoft.com
          127.0.0.1 aviewersoft.com
          127.0.0.1 www.avpcheckupdate.com
          127.0.0.1 avpcheckupdate.com
          127.0.0.1 www.avsmanufacture.com
          127.0.0.1 avsmanufacture.com
          127.0.0.1 www.avsystemcare.com
          127.0.0.1 avsystemcare.com
          127.0.0.1 www.avxizaaqada.biz
          127.0.0.1 avxizaaqada.biz
          127.0.0.1 www.avxiz-anjpn.biz
          127.0.0.1 avxiz-anjpn.biz
          127.0.0.1 www.avxizueorn.biz
          127.0.0.1 avxizueorn.biz
          127.0.0.1 www.avxiz-ueorn.biz
          127.0.0.1 avxiz-ueorn.biz
          127.0.0.1 www.avxiz-vtvcp.biz
          127.0.0.1 avxiz-vtvcp.biz
          127.0.0.1 www.avxiz-ygco.biz
          127.0.0.1 avxiz-ygco.biz
          127.0.0.1 www.avxiz-zqav.biz
          127.0.0.1 avxiz-zqav.biz
          127.0.0.1 www.awarenesstech.com
          127.0.0.1 awarenesstech.com
          127.0.0.1 www.awarninglist.com
          127.0.0.1 awarninglist.com
          127.0.0.1 awbeta.net-nucleus.com
          127.0.0.1 www.awesomehomepage.com
          127.0.0.1 awesomehomepage.com
          127.0.0.1 awmcash.biz
          127.0.0.1 awmdabest.com
          127.0.0.1 www.axemediasoftware.com
          127.0.0.1 axemediasoftware.com
          127.0.0.1 www.aximageobject.com
          127.0.0.1 aximageobject.com
          127.0.0.1 www.axmediaproject.com
          127.0.0.1 axmediaproject.com
          127.0.0.1 www.axmediasoftware.com
          127.0.0.1 axmediasoftware.com
          127.0.0.1 www.axmediasolutions.com
          127.0.0.1 axmediasolutions.com
          127.0.0.1 www.axobjectpage.com
          127.0.0.1 axobjectpage.com
          127.0.0.1 www.axobjectsource.com
          127.0.0.1 axobjectsource.com
          127.0.0.1 www.axsoftwaretool.com
          127.0.0.1 axsoftwaretool.com
          127.0.0.1 www.axvideoproject.com
          127.0.0.1 axvideoproject.com
          127.0.0.1 www.axvideosetup.com
          127.0.0.1 axvideosetup.com
          127.0.0.1 ayakawamura.com
          127.0.0.1 ayb.dns-look-up.com
          127.0.0.1 ayb.netbios-wait.com
          127.0.0.1 ayumitaniguchi.com
          127.0.0.1 azebar.com
          127.0.0.1 www.azureusclub.com
          127.0.0.1 azureusclub.com
          127.0.0.1 www.azureus-freebie.com
          127.0.0.1 azureus-freebie.com
          127.0.0.1 www.azzetta.it
          127.0.0.1 azzetta.it
          127.0.0.1 b.casalemedia.com
          127.0.0.1 b122.mcboo.com
          127.0.0.1 www.babe.k-lined.com
          127.0.0.1 babe.k-lined.com
          127.0.0.1 www.babe.the-killer.bz
          127.0.0.1 babe.the-killer.bz
          127.0.0.1 www.babenet.com
          127.0.0.1 babenet.com
          127.0.0.1 www.babespornmag.com
          127.0.0.1 babespornmag.com
          127.0.0.1 www.babeweb.de
          127.0.0.1 babeweb.de
          127.0.0.1 www.baccarat-other.info
          127.0.0.1 baccarat-other.info
          127.0.0.1 www.Backstripgirls.com
          127.0.0.1 Backstripgirls.com
          127.0.0.1 backup.mabou.org
          127.0.0.1 www.balotierra.com
          127.0.0.1 balotierra.com
          127.0.0.1 bannedhost.net
          127.0.0.1 barbudafarms.com
          127.0.0.1 www.bardownload.com
          127.0.0.1 bardownload.com
          127.0.0.1 barnandfence.com
          127.0.0.1 batsearch.com
          127.0.0.1 baygraphicsllc.com
          127.0.0.1 bbbsearch.com
          127.0.0.1 bb-search.com
          127.0.0.1 www.bcnproduction.com
          127.0.0.1 bcnproduction.com
          127.0.0.1 bdsmlibrary.net
          127.0.0.1 www.bdsmpornmag.com
          127.0.0.1 bdsmpornmag.com
          127.0.0.1 www.bearshare.click-new-download.com
          127.0.0.1 bearshare.click-new-download.com
          127.0.0.1 www.bearshare.download-me.info
          127.0.0.1 bearshare.download-me.info
          127.0.0.1 www.bearshare.mp3-muzic.com
          127.0.0.1 bearshare.mp3-muzic.com
          127.0.0.1 www.bearshare-download.org
          127.0.0.1 bearshare-download.org
          127.0.0.1 www.bearshare-downloads.net
          127.0.0.1 bearshare-downloads.net
          127.0.0.1 www.bearsharelive.co.uk
          127.0.0.1 bearsharelive.co.uk
          127.0.0.1 www.bearshare-music-downloads.com
          127.0.0.1 bearshare-music-downloads.com
          127.0.0.1 www.bearsharepro2007.com
          127.0.0.1 bearsharepro2007.com
          127.0.0.1 www.bearshare-usa.com
          127.0.0.1 bearshare-usa.com
          127.0.0.1 bedhome.com
          127.0.0.1 bediadance.com
          127.0.0.1 www.beebappyy.biz
          127.0.0.1 beebappyy.biz
          127.0.0.1 www.begin2search.com
          127.0.0.1 begin2search.com
          127.0.0.1 bellabasketsfl.com
          127.0.0.1 bernaolatwin.com
          127.0.0.1 www.beruijindegunhadesun.com
          127.0.0.1 beruijindegunhadesun.com
          127.0.0.1 www.best3xclips.com
          127.0.0.1 best3xclips.com
          127.0.0.1 www.bestadults.com
          127.0.0.1 bestadults.com
          127.0.0.1 best-counter.com
          127.0.0.1 bestcrawler.com
          127.0.0.1 www.bestdailyvids.com
          127.0.0.1 bestdailyvids.com
          127.0.0.1 bestfor.ru
          127.0.0.1 www.bestfuckvids.com
          127.0.0.1 bestfuckvids.com
          127.0.0.1 best-hardpics.com
          127.0.0.1 www.bestmanage.org
          127.0.0.1 bestmanage.org
          127.0.0.1 www.bestmanage0.org
          127.0.0.1 bestmanage0.org
          127.0.0.1 www.bestmanage1.org
          127.0.0.1 bestmanage1.org
          127.0.0.1 www.bestmanage2.org
          127.0.0.1 bestmanage2.org
          127.0.0.1 www.bestmanage3.org
          127.0.0.1 bestmanage3.org
          127.0.0.1 www.bestmanage4.org
          127.0.0.1 bestmanage4.org
          127.0.0.1 www.bestmanage5.org
          127.0.0.1 bestmanage5.org
          127.0.0.1 www.bestmanage6.org
          127.0.0.1 bestmanage6.org
          127.0.0.1 www.bestmanage7.org
          127.0.0.1 bestmanage7.org
          127.0.0.1 www.bestmanage8.org
          127.0.0.1 bestmanage8.org
          127.0.0.1 www.bestmanage9.org
          127.0.0.1 bestmanage9.org
          127.0.0.1 www.bestoffersnetworks.com
          127.0.0.1 bestoffersnetworks.com
          127.0.0.1 bestporngate.com
          127.0.0.1 www.bestsafetyguide.net
          127.0.0.1 bestsafetyguide.net
          127.0.0.1 www.bestsearch.cc
          127.0.0.1 bestsearch.cc
          127.0.0.1 www.best-spyware.info
          127.0.0.1 best-spyware.info
          127.0.0.1 www.best-targeted-traffic.com
          127.0.0.1 best-targeted-traffic.com
          127.0.0.1 www.best-voyeur.info
          127.0.0.1 best-voyeur.info
          127.0.0.1 bestweblinks.com
          127.0.0.1 best-winning-casino.com
          127.0.0.1 www.bestworldgirls-for-u.net
          127.0.0.1 bestworldgirls-for-u.net
          127.0.0.1 www.bestxclips.com
          127.0.0.1 bestxclips.com
          127.0.0.1 bestxporno.com
          127.0.0.1 www.bestxxxmpegs.com
          127.0.0.1 bestxxxmpegs.com
          127.0.0.1 www.bettersearch.biz
          127.0.0.1 bettersearch.biz
          127.0.0.1 www.bgazzetta.it
          127.0.0.1 bgazzetta.it
          127.0.0.1 www.bgoogle.it
          127.0.0.1 bgoogle.it
          127.0.0.1 www.bigtrafficnetwork.com
          127.0.0.1 bigtrafficnetwork.com
          127.0.0.1 www.bigwww.com
          127.0.0.1 bigwww.com
          127.0.0.1 bin.errorprotector.com
          127.0.0.1 bins.media-motor.net
          127.0.0.1 bins2.media-motor.net
          127.0.0.1 bis.180solutions.com
          127.0.0.1 bitchesonline.net
          127.0.0.1 www.bitcomet-freebie.com
          127.0.0.1 bitcomet-freebie.com
          127.0.0.1 www.bittorrent.click-new-download.com
          127.0.0.1 bittorrent.click-new-download.com
          127.0.0.1 biz.biz
          127.0.0.1 www.bkvcompany.com
          127.0.0.1 bkvcompany.com
          127.0.0.1 www.blackblues00.com
          127.0.0.1 blackblues00.com
          127.0.0.1 www.blackcodec.com
          127.0.0.1 blackcodec.com
          127.0.0.1 www.blackcodec.net
          127.0.0.1 blackcodec.net
          127.0.0.1 www.blackhats.tc
          127.0.0.1 blackhats.tc
          127.0.0.1 www.blackhawksoftware.com
          127.0.0.1 blackhawksoftware.com
          127.0.0.1 blackjack-free.net
          127.0.0.1 blazefind.com
          127.0.0.1 blender.xu.pl
          127.0.0.1 www.blockcheckercontrol.com
          127.0.0.1 blockcheckercontrol.com
          127.0.0.1 blondetgp.com
          127.0.0.1 www.blue-elefant.com
          127.0.0.1 blue-elefant.com
          127.0.0.1 www.bm.theaimonline.com
          127.0.0.1 bm.theaimonline.com
          127.0.0.1 www.bnmgate.com
          127.0.0.1 bnmgate.com
          127.0.0.1 bodaciousbabette.com
          127.0.0.1 www.bonzi.com
          127.0.0.1 bonzi.com
          127.0.0.1 boobdoll.com
          127.0.0.1 boobsandtits.com
          127.0.0.1 boobsclub.com
          127.0.0.1 www.bookedspace.com
          127.0.0.1 bookedspace.com
          127.0.0.1 www.boom.com.vn
          127.0.0.1 boom.com.vn
          127.0.0.1 boredlife.com
          127.0.0.1 bowlofogumbo.com
          127.0.0.1 www.bpfq02.com
          127.0.0.1 bpfq02.com
          127.0.0.1 www.bqgate.com
          127.0.0.1 bqgate.com
          127.0.0.1 br.errorsafe.com
          127.0.0.1 br.winantivirus.com
          127.0.0.1 br.winfixer.com
          127.0.0.1 bradcoem.org
          127.0.0.1 www.braincodec.com
          127.0.0.1 braincodec.com
          127.0.0.1 brandiyoung.com
          127.0.0.1 www.bravesentry.com
          127.0.0.1 bravesentry.com
          127.0.0.1 www.breenten.biz
          127.0.0.1 breenten.biz
          127.0.0.1 www.brodbfm.net
          127.0.0.1 brodbfm.net
          127.0.0.1 brookeburn.com
          127.0.0.1 www.browserwise.com
          127.0.0.1 browserwise.com
          127.0.0.1 bsa.safetydownload.com
          127.0.0.1 www.bsplaycodec.com
          127.0.0.1 bsplaycodec.com
          127.0.0.1 bucps.com
          127.0.0.1 buhartes.info
          127.0.0.1 buldog-stats.com
          127.0.0.1 www.bullseye-network.com
          127.0.0.1 bullseye-network.com
          127.0.0.1 burgerkingbigscreen.com
          127.0.0.1 www.burningsite.com
          127.0.0.1 burningsite.com
          127.0.0.1 www.burnsrecyclinginc.com
          127.0.0.1 burnsrecyclinginc.com
          127.0.0.1 buscards.net
          127.0.0.1 bustyrussell.com
          127.0.0.1 www.busysearch.net
          127.0.0.1 busysearch.net
          127.0.0.1 buttejazz.org
          127.0.0.1 www.buy-find.info
          127.0.0.1 buy-find.info
          127.0.0.1 buyselldomain.net
          127.0.0.1 www.buytraff.biz
          127.0.0.1 buytraff.biz
          127.0.0.1 buz.ru
          127.0.0.1 www.bvdtechinque.com
          127.0.0.1 bvdtechinque.com
          127.0.0.1 www.bvirgilio.it
          127.0.0.1 bvirgilio.it
          127.0.0.1 c.centralmedia.ws
          127.0.0.1 www.c.enhance.com
          127.0.0.1 c.enhance.com
          127.0.0.1 c.goclick.com
          127.0.0.1 www.c4tdownload.com
          127.0.0.1 c4tdownload.com
          127.0.0.1 www.c5.www4free.info
          127.0.0.1 c5.www4free.info
          127.0.0.1 www.cache.surfaccuracy.com
          127.0.0.1 cache.surfaccuracy.com
          127.0.0.1 cache.ysbweb.com
          127.0.0.1 www.cadesfinjeriokas.com
          127.0.0.1 cadesfinjeriokas.com
          127.0.0.1 calcioturris.com
          127.0.0.1 www.calendaralerts.net
          127.0.0.1 calendaralerts.net
          127.0.0.1 www.callinghome.biz
          127.0.0.1 callinghome.biz
          127.0.0.1 www.cameouk.co.uk
          127.0.0.1 cameouk.co.uk
          127.0.0.1 cameup.com
          127.0.0.1 www.camouflageclothingonline.net
          127.0.0.1 camouflageclothingonline.net
          127.0.0.1 campaigns.outerinfo.net
          127.0.0.1 camup.net
          127.0.0.1 canberracricketcoaching.com
          127.0.0.1 candycantaloupes.com
          127.0.0.1 www.canidetect.org
          127.0.0.1 canidetect.org
          127.0.0.1 www.cantfind.com
          127.0.0.1 cantfind.com
          127.0.0.1 careers.dulcineasystems.net
          127.0.0.1 carsands.com
          127.0.0.1 carsrentals.net
          127.0.0.1 cartoes.uol.com.br
          127.0.0.1 www.casalemedia.com
          127.0.0.1 casalemedia.com
          127.0.0.1 www.cashdeluxe.net
          127.0.0.1 cashdeluxe.net
          127.0.0.1 www.cashengines.com
          127.0.0.1 cashengines.com
          127.0.0.1 cashsearch.biz
          127.0.0.1 www.cashsurfers.com
          127.0.0.1 cashsurfers.com
          127.0.0.1 www.CashUnlim.com
          127.0.0.1 CashUnlim.com
          127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
          127.0.0.1 casino2win.net
          127.0.0.1 casino-gambling-1.net
          127.0.0.1 casino-gambling-2.net
          127.0.0.1 casinomidas.net
          127.0.0.1 casinonline.net
          127.0.0.1 casino-onlines.net
          127.0.0.1 www.castingsamateur.com
          127.0.0.1 castingsamateur.com
          127.0.0.1 catallogue.com
          127.0.0.1 www.catch-dc.info
          127.0.0.1 catch-dc.info
          127.0.0.1 categories.mygeek.com
          127.0.0.1 catsss.da.ru
          127.0.0.1 caxa.ru
          127.0.0.1 cc.panet.org
          127.0.0.1 www.ccecaedbebfcaf.com
          127.0.0.1 ccecaedbebfcaf.com
          127.0.0.1 cclebali.org
          127.0.0.1 www.ccorriere.it
          127.0.0.1 ccorriere.it
          127.0.0.1 www.cdcopysite.com
          127.0.0.1 cdcopysite.com
          127.0.0.1 www.cdegate.com
          127.0.0.1 cdegate.com
          127.0.0.1 cdn.drivecleaner.com
          127.0.0.1 cdn.errorsafe.com
          127.0.0.1 cdn.movies-etc.com
          127.0.0.1 cdn.winsoftware.com
          127.0.0.1 cdn2.movies-etc.com
          127.0.0.1 www.cdorriere.it
          127.0.0.1 cdorriere.it
          127.0.0.1 ceewawires.org
          127.0.0.1 centralmedia.ws
          127.0.0.1 certumgroup.com
          127.0.0.1 www.cforriere.it
          127.0.0.1 cforriere.it
          127.0.0.1 www.check.jupitersatellites.biz
          127.0.0.1 check.jupitersatellites.biz
          127.0.0.1 www.checkin100.com
          127.0.0.1 checkin100.com
          127.0.0.1 www.checkssecurity.com
          127.0.0.1 checkssecurity.com
          127.0.0.1 chelancatering.com
          127.0.0.1 www.chenshijituan.com
          127.0.0.1 chenshijituan.com
          127.0.0.1 childrenvilla.com
          127.0.0.1 www.chilly3xvids.com
          127.0.0.1 chilly3xvids.com
          127.0.0.1 www.chillymovs.com
          127.0.0.1 chillymovs.com
          127.0.0.1 chips-4-free.com
          127.0.0.1 chrisswasey.com
          127.0.0.1 chriswallace.net
          127.0.0.1 www.cia-trjn.myvnc.com
          127.0.0.1 cia-trjn.myvnc.com
          127.0.0.1 www.cinemadownload.com
          127.0.0.1 cinemadownload.com
          127.0.0.1 www.ciorriere.it
          127.0.0.1 ciorriere.it
          127.0.0.1 www.cirriere.it
          127.0.0.1 cirriere.it
          127.0.0.1 ckick4thumbs.com
          127.0.0.1 cl55.biz
          127.0.0.1 clackamasliteraryreview.com
          127.0.0.1 www.clckm.com
          127.0.0.1 clckm.com
          127.0.0.1 www.cleancodec.com
          127.0.0.1 cleancodec.com
          127.0.0.1 www.cleansoftwares.com
          127.0.0.1 cleansoftwares.com
          127.0.0.1 clearsearch.cc
          127.0.0.1 clearsearch.net
          127.0.0.1 clickaire.com
          127.0.0.1 www.click-codec.com
          127.0.0.1 click-codec.com
          127.0.0.1 www.clickhere4search.com
          127.0.0.1 clickhere4search.com
          127.0.0.1 www.click-new-download.com
          127.0.0.1 click-new-download.com
          127.0.0.1 click-now.net
          127.0.0.1 www.clickspring.net
          127.0.0.1 clickspring.net
          127.0.0.1 www.click-to-download.com
          127.0.0.1 click-to-download.com
          127.0.0.1 www.clicktomakeasearch.com
          127.0.0.1 clicktomakeasearch.com
          127.0.0.1 clickyestoenter.net
          127.0.0.1 client.exeupdate.com
          127.0.0.1 client.myadultexplorer.com
          127.0.0.1 www.cliks.org
          127.0.0.1 cliks.org
          127.0.0.1 www.clipsfestival.com
          127.0.0.1 clipsfestival.com
          127.0.0.1 www.clipsreality.com
          127.0.0.1 clipsreality.com
          127.0.0.1 www.clorriere.it
          127.0.0.1 clorriere.it
          127.0.0.1 clrsch.com
          127.0.0.1 www.clubxxxvideo.com
          127.0.0.1 clubxxxvideo.com
          127.0.0.1 clusif.free.fr
          127.0.0.1 cmtapestry.com
          127.0.0.1 www.cnetadd.com
          127.0.0.1 cnetadd.com
          127.0.0.1 www.cnomy.com
          127.0.0.1 cnomy.com
          127.0.0.1 www.cnzz.com
          127.0.0.1 cnzz.com
          127.0.0.1 code.ignphrases.com
          127.0.0.1 codec.ninoa.com
          127.0.0.1 www.codecbsplay.com
          127.0.0.1 codecbsplay.com
          127.0.0.1 www.codecdvd.net
          127.0.0.1 codecdvd.net
          127.0.0.1 www.codecdvi.com
          127.0.0.1 codecdvi.com
          127.0.0.1 www.codec-fun.com
          127.0.0.1 codec-fun.com
          127.0.0.1 www.codechard.com
          127.0.0.1 codechard.com
          127.0.0.1 www.codechot.net
          127.0.0.1 codechot.net
          127.0.0.1 www.codechq.net
          127.0.0.1 codechq.net
          127.0.0.1 www.codecmeg.net
          127.0.0.1 codecmeg.net
          127.0.0.1 www.codecmega.net
          127.0.0.1 codecmega.net
          127.0.0.1 www.codecmoon.com
          127.0.0.1 codecmoon.com
          127.0.0.1 www.codecmpg.com
          127.0.0.1 codecmpg.com
          127.0.0.1 www.codecnice.net
          127.0.0.1 codecnice.net
          127.0.0.1 www.codecops.net
          127.0.0.1 codecops.net
          127.0.0.1 www.codecplay.com
          127.0.0.1 codecplay.com
          127.0.0.1 www.codecpretty.net
          127.0.0.1 codecpretty.net
          127.0.0.1 www.codecpro.net
          127.0.0.1 codecpro.net
          127.0.0.1 www.codecsoft.net
          127.0.0.1 codecsoft.net
          127.0.0.1 www.codectime.com
          127.0.0.1 codectime.com
          127.0.0.1 www.codecultra.net
          127.0.0.1 codecultra.net
          127.0.0.1 www.codecvids.com
          127.0.0.1 codecvids.com
          127.0.0.1 www.codecvip.com
          127.0.0.1 codecvip.com
          127.0.0.1 www.codecviva.com
          127.0.0.1 codecviva.com
          127.0.0.1 www.codeczang.net
          127.0.0.1 codeczang.net
          127.0.0.1 www.codrriere.it
          127.0.0.1 codrriere.it
          127.0.0.1 www.coeriere.it
          127.0.0.1 coeriere.it
          127.0.0.1 www.coerriere.it
          127.0.0.1 coerriere.it
          127.0.0.1 www.cofrriere.it
          127.0.0.1 cofrriere.it
          127.0.0.1 www.cogrriere.it
          127.0.0.1 cogrriere.it
          127.0.0.1 www.coirriere.it
          127.0.0.1 coirriere.it
          127.0.0.1 command.adservs.com
          127.0.0.1 www.commonname.com
          127.0.0.1 www.computerpcgames.net
          127.0.0.1 computerpcgames.net
          127.0.0.1 www.computerrecover.com
          127.0.0.1 computerrecover.com
          127.0.0.1 config.180solutions.com
          127.0.0.1 www.content.dollarrevenue.com
          127.0.0.1 content.dollarrevenue.com
          127.0.0.1 www.content.ireit.com
          127.0.0.1 content.ireit.com
          127.0.0.1 content.onerateld.com
          127.0.0.1 www.contentmatch.net
          127.0.0.1 contentmatch.net
          127.0.0.1 www.contextplus.net
          127.0.0.1 contextplus.net
          127.0.0.1 www.contra-virus.com
          127.0.0.1 contra-virus.com
          127.0.0.1 www.controlmeh.com
          127.0.0.1 controlmeh.com
          127.0.0.1 www.convenient-search.com
          127.0.0.1 convenient-search.com
          127.0.0.1 www.cooldeskalert.com
          127.0.0.1 cooldeskalert.com
          127.0.0.1 coolfetishsite.com
          127.0.0.1 coolfreehost.com
          127.0.0.1 coolfreepage.com
          127.0.0.1 coolfreepages.com
          127.0.0.1 cool-homepage.co
          127.0.0.1 cool-homepage.com
          127.0.0.1 coolmoneysearch.com
          127.0.0.1 coolpornsearch.com
          127.0.0.1 cool-search.net
          127.0.0.1 cool-search.netfartpost.com
          127.0.0.1 coolsearcher.info
          127.0.0.1 www.coolservecorp.net
          127.0.0.1 coolservecorp.net
          127.0.0.1 www.coolwebsearch.com
          127.0.0.1 coolwebsearch.com
          127.0.0.1 cool-web-search.com
          127.0.0.1 coolwebsearsh.com
          127.0.0.1 www.coolwwwsearch.com
          127.0.0.1 coolwwwsearch.com
          127.0.0.1 cool-xxx.net
          127.0.0.1 www.coorriere.it
          127.0.0.1 coorriere.it
          127.0.0.1 copmtraine.com
          127.0.0.1 www.coprriere.it
          127.0.0.1 coprriere.it
          127.0.0.1 www.core.psyche-evolution.com
          127.0.0.1 core.psyche-evolution.com
          127.0.0.1 www.coreiere.it
          127.0.0.1 coreiere.it
          127.0.0.1 www.coreriere.it
          127.0.0.1 coreriere.it
          127.0.0.1 www.corrdiere.it
          127.0.0.1 corrdiere.it
          127.0.0.1 www.correiere.it
          127.0.0.1 correiere.it
          127.0.0.1 www.corrfiere.it
          127.0.0.1 corrfiere.it
          127.0.0.1 www.corrgiere.it
          127.0.0.1 corrgiere.it
          127.0.0.1 www.corridere.it
          127.0.0.1 corridere.it
          127.0.0.1 www.corriedre.it
          127.0.0.1 corriedre.it
          127.0.0.1 www.corriee.it
          127.0.0.1 corriee.it
          127.0.0.1 www.corrieere.it
          127.0.0.1 corrieere.it
          127.0.0.1 www.corriefre.it
          127.0.0.1 corriefre.it
          127.0.0.1 www.corriegre.it
          127.0.0.1 corriegre.it
          127.0.0.1 www.corrierde.it
          127.0.0.1 corrierde.it
          127.0.0.1 www.corriered.it
          127.0.0.1 corriered.it
          127.0.0.1 www.corrieree.it
          127.0.0.1 corrieree.it
          127.0.0.1 www.corrieref.it
          127.0.0.1 corrieref.it
          127.0.0.1 www.corrierer.it
          127.0.0.1 corrierer.it
          127.0.0.1 www.corrieres.it
          127.0.0.1 corrieres.it
          127.0.0.1 www.corrierew.it
          127.0.0.1 corrierew.it
          127.0.0.1 www.corrierfe.it
          127.0.0.1 corrierfe.it
          127.0.0.1 www.corrierge.it
          127.0.0.1 corrierge.it
          127.0.0.1 www.corrierr.it
          127.0.0.1 corrierr.it
          127.0.0.1 www.corrierre.it
          127.0.0.1 corrierre.it
          127.0.0.1 www.corrierse.it
          127.0.0.1 corrierse.it
          127.0.0.1 www.corrierte.it
          127.0.0.1 corrierte.it
          127.0.0.1 www.corrierw.it
          127.0.0.1 corrierw.it
          127.0.0.1 www.corrierwe.it
          127.0.0.1 corrierwe.it
          127.0.0.1 www.corriesre.it
          127.0.0.1 corriesre.it
          127.0.0.1 www.corriete.it
          127.0.0.1 corriete.it
          127.0.0.1 www.corrietre.it
          127.0.0.1 corrietre.it
          127.0.0.1 www.corriewre.it
          127.0.0.1 corriewre.it
          127.0.0.1 www.corrifere.it
          127.0.0.1 corrifere.it
          127.0.0.1 www.corriiere.it
          127.0.0.1 corriiere.it
          127.0.0.1 www.corrilere.it
          127.0.0.1 corrilere.it
          127.0.0.1 www.corrioere.it
          127.0.0.1 corrioere.it
          127.0.0.1 www.corrire.it
          127.0.0.1 corrire.it
          127.0.0.1 www.corrirere.it
          127.0.0.1 corrirere.it
          127.0.0.1 www.corrirre.it
          127.0.0.1 corrirre.it
          127.0.0.1 www.corrisere.it
          127.0.0.1 corrisere.it
          127.0.0.1 www.corriuere.it
          127.0.0.1 corriuere.it
          127.0.0.1 www.corriwere.it
          127.0.0.1 corriwere.it
          127.0.0.1 www.corriwre.it
          127.0.0.1 corriwre.it
          127.0.0.1 www.corrliere.it
          127.0.0.1 corrliere.it
          127.0.0.1 www.corroere.it
          127.0.0.1 corroere.it
          127.0.0.1 www.corroiere.it
          127.0.0.1 corroiere.it
          127.0.0.1 www.corrriere.it
          127.0.0.1 corrriere.it
          127.0.0.1 www.corrtiere.it
          127.0.0.1 corrtiere.it
          127.0.0.1 www.corruere.it
          127.0.0.1 corruere.it
          127.0.0.1 www.corruiere.it
          127.0.0.1 corruiere.it
          127.0.0.1 www.cortiere.it
          127.0.0.1 cortiere.it
          127.0.0.1 www.cortriere.it
          127.0.0.1 cortriere.it
          127.0.0.1 www.costrike.com
          127.0.0.1 costrike.com
          127.0.0.1 www.cotriere.it
          127.0.0.1 cotriere.it
          127.0.0.1 www.cotrriere.it
          127.0.0.1 cotrriere.it
          127.0.0.1 couldnotfind.com
          127.0.0.1 count.cc
          127.0.0.1 count.hitscount.net
          127.0.0.1 count-all.com
          127.0.0.1 www.countdutycall.info
          127.0.0.1 countdutycall.info
          127.0.0.1 counter.sexmaniack.com
          127.0.0.1 www.courtrecordslookup.com
          127.0.0.1 courtrecordslookup.com
          127.0.0.1 www.cporriere.it
          127.0.0.1 cporriere.it
          127.0.0.1 www.cprriere.it
          127.0.0.1 cprriere.it
          127.0.0.1 cpvfeed.com
          127.0.0.1 cracks.me.uk
          127.0.0.1 www.cracks4all.com
          127.0.0.1 cracks4all.com
          127.0.0.1 www.crapsgold.info
          127.0.0.1 crapsgold.info
          127.0.0.1 Crazygirls-world.com
          127.0.0.1 www.crazywinnings.com
          127.0.0.1 crazywinnings.com
          127.0.0.1 creamedcutties.com
          127.0.0.1 www.createaccesskey.com
          127.0.0.1 createaccesskey.com
          127.0.0.1 www.creatonsoft.com
          127.0.0.1 creatonsoft.com
          127.0.0.1 creditsearchonline.com
          127.0.0.1 crestring.com
          127.0.0.1 crooder.com
          127.0.0.1 www.crriere.it
          127.0.0.1 crriere.it
          127.0.0.1 www.cryptdrive.com
          127.0.0.1 cryptdrive.com
          127.0.0.1 www.crystalysmedia.com
          127.0.0.1 crystalysmedia.com
          127.0.0.1 www.csx.adservs.com
          127.0.0.1 csx.adservs.com
          127.0.0.1 cts.180solutions.com
          127.0.0.1 www.cuisinartoven.com
          127.0.0.1 cuisinartoven.com
          127.0.0.1 www.curedc.info
          127.0.0.1 curedc.info
          127.0.0.1 www.curepcsolutions.com
          127.0.0.1 curepcsolutions.com
          127.0.0.1 curvedspaces.com
          127.0.0.1 www.cutadult.com
          127.0.0.1 cutadult.com
          127.0.0.1 www.cvirgilio.it
          127.0.0.1 cvirgilio.it
          127.0.0.1 www.cvorriere.it
          127.0.0.1 cvorriere.it
          127.0.0.1 cvs.jps.ru
          127.0.0.1 cvsymphony.com
          127.0.0.1 www.cxorriere.it
          127.0.0.1 cxorriere.it
          127.0.0.1 www.cyberrape.com
          127.0.0.1 cyberrape.com
          127.0.0.1 cydom.com
          127.0.0.1 www.cydoor.com
          127.0.0.1 cydoor.com
          127.0.0.1 www.daily3xlinks.com
          127.0.0.1 daily3xlinks.com
          127.0.0.1 www.dailybestclips.com
          127.0.0.1 dailybestclips.com
          127.0.0.1 daily-gals.com
          127.0.0.1 www.dailyhugemovs.com
          127.0.0.1 dailyhugemovs.com
          127.0.0.1 www.dailykeys.com
          127.0.0.1 dailykeys.com
          127.0.0.1 www.dailypornmag.com
          127.0.0.1 dailypornmag.com
          127.0.0.1 dailyteenspic.com
          127.0.0.1 www.dailytoolbar.com
          127.0.0.1 dailytoolbar.com
          127.0.0.1 www.dailyxvids.com
          127.0.0.1 dailyxvids.com
          127.0.0.1 dancingbabycd.com
          127.0.0.1 www.dapsol.com
          127.0.0.1 dapsol.com
          127.0.0.1 www.dapsolution.com
          127.0.0.1 dapsolution.com
          127.0.0.1 www.data-hoster.com
          127.0.0.1 data-hoster.com
          127.0.0.1 datanotary.com
          127.0.0.1 datareco.com
          127.0.0.1 www.dateanybabe.com
          127.0.0.1 dateanybabe.com
          127.0.0.1 www.dateanychick.com
          127.0.0.1 dateanychick.com
          127.0.0.1 www.datingdoctorsite.com
          127.0.0.1 datingdoctorsite.com
          127.0.0.1 www.dating-galaxy.info
          127.0.0.1 dating-galaxy.info
          127.0.0.1 dating-search.net
          127.0.0.1 davemarshall.org
          127.0.0.1 db105.com
          127.0.0.1 www.dbdecicated.com
          127.0.0.1 dbdecicated.com
          127.0.0.1 www.dbxcompany.com
          127.0.0.1 dbxcompany.com
          127.0.0.1 dcdl.dmcast.com
          127.0.0.1 dcfitusa.com
          127.0.0.1 www.dcorriere.it
          127.0.0.1 dcorriere.it
          127.0.0.1 www.dcurtis.com
          127.0.0.1 dcurtis.com
          127.0.0.1 dcww.dmcast.com
          127.0.0.1 de.ag
          127.0.0.1 de.drivecleaner.com
          127.0.0.1 de.errorsafe.com
          127.0.0.1 de.winantivirus.com
          127.0.0.1 de98.remsys.org
          127.0.0.1 www.debay.it
          127.0.0.1 debay.it
          127.0.0.1 www.decknews.com
          127.0.0.1 decknews.com
          127.0.0.1 dedmazay.3322.org
          127.0.0.1 www.dedsearch.com
          127.0.0.1 dedsearch.com
          127.0.0.1 defaultsearch.net
          127.0.0.1 www.Defensaantimalware.com
          127.0.0.1 Defensaantimalware.com
          127.0.0.1 www.deja-rue.com
          127.0.0.1 deja-rue.com
          127.0.0.1 www.delficodec.com
          127.0.0.1 delficodec.com
          127.0.0.1 www.democodec.com
          127.0.0.1 democodec.com
          127.0.0.1 www.derklaif.biz
          127.0.0.1 derklaif.biz
          127.0.0.1 www.derrari.it
          127.0.0.1 derrari.it
          127.0.0.1 desarrollocreativo.com
          127.0.0.1 www.deskbar.worldtostart.com
          127.0.0.1 deskbar.worldtostart.com
          127.0.0.1 www.deskwizz.com
          127.0.0.1 deskwizz.com
          127.0.0.1 www.destruktor.to.pl
          127.0.0.1 destruktor.to.pl
          127.0.0.1 www.detectivehound.com
          127.0.0.1 detectivehound.com
          127.0.0.1 www.detectivesearches.com
          127.0.0.1 detectivesearches.com
          127.0.0.1 dev.ntcor.com
          127.0.0.1 develip.com
          127.0.0.1 dewis.spb.ru
          127.0.0.1 dewis.us
          127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
          127.0.0.1 www.dgbusiness.com
          127.0.0.1 dgbusiness.com
          127.0.0.1 dialer2004.com
          127.0.0.1 www.dialerclub.com
          127.0.0.1 dialerclub.com
          127.0.0.1 www.dialer-shop.com
          127.0.0.1 dialer-shop.com
          127.0.0.1 www.dialoff.com
          127.0.0.1 dialoff.com
          127.0.0.1 www.did.i-used.cc
          127.0.0.1 did.i-used.cc
          127.0.0.1 dietpills4free.com
          127.0.0.1 dietpussy.com
          127.0.0.1 www.digikeygen.com
          127.0.0.1 digikeygen.com
          127.0.0.1 digistreamsa.com
          127.0.0.1 www.digitalcoders.net
          127.0.0.1 digitalcoders.net
          127.0.0.1 www.digitalfan.com
          127.0.0.1 digital-pornography.com
          127.0.0.1 dionforvalleycouncil.org
          127.0.0.1 www.directdvdpro.com
          127.0.0.1 directdvdpro.com
          127.0.0.1 www.directporta.info
          127.0.0.1 directporta.info
          127.0.0.1 www.directsearchzone.com
          127.0.0.1 directsearchzone.com
          127.0.0.1 www.diskretter.com
          127.0.0.1 diskretter.com
          127.0.0.1 dist.checkin100.com
          127.0.0.1 dl.ad-ware.cc
          127.0.0.1 dl.malwarewipe.com
          127.0.0.1 dl.mcboo.com
          127.0.0.1 www.dl.targetsaver.com
          127.0.0.1 dl.targetsaver.com
          127.0.0.1 dl.web-nexus.net
          127.0.0.1 dl1.antivermins.com
          127.0.0.1 dl1.antivirgear.com
          127.0.0.1 dl1.spydawn.com
          127.0.0.1 dl1.virusprotectpro.com
          127.0.0.1 dl10.spyfalcon.com
          127.0.0.1 dl16.spyfalcon.com
          127.0.0.1 dl2.spyfalcon.com
          127.0.0.1 dl2.spyheal.com
          127.0.0.1 dl2.spywarestrike.com
          127.0.0.1 dl3.spyfalcon.com
          127.0.0.1 dl3.spyheal.com
          127.0.0.1 dl3.spywarestrike.com
          127.0.0.1 dl4.spyfalcon.com
          127.0.0.1 dl4.spywarestrike.com
          127.0.0.1 dl5.spyfalcon.com
          127.0.0.1 dl5.spywarestrike.com
          127.0.0.1 dl6.spywarestrike.com
          127.0.0.1 dl7.spywarestrike.com
          127.0.0.1 dl8.spyheal.com
          127.0.0.1 dl8.spywarestrike.com
          127.0.0.1 dl9.spyfalcon.com
          127.0.0.1 dload.contextplus.net
          127.0.0.1 www.dltsolution.com
          127.0.0.1 dltsolution.com
          127.0.0.1 www.dmcast.com
          127.0.0.1 dmcast.com
          127.0.0.1 www.dmqfirm.com
          127.0.0.1 dmqfirm.com
          127.0.0.1 www.dnaads.com
          127.0.0.1 dnaads.com
          127.0.0.1 dnl.mabou.org
          127.0.0.1 www.dns-look-up.com
          127.0.0.1 dns-look-up.com
          127.0.0.1 doctorwaldron.com
          127.0.0.1 document-not-found.pornpic.org
          127.0.0.1 doggyaction.com
          127.0.0.1 www.dogproblemswebsite.com
          127.0.0.1 dogproblemswebsite.com
          127.0.0.1 doktorxxx.com
          127.0.0.1 dollarrevenue.com
          127.0.0.1 www.domaincar.com
          127.0.0.1 domaincar.com
          127.0.0.1 domains2003.net
          127.0.0.1 domains-for-you-online.com
          127.0.0.1 domain-your-registration.com
          127.0.0.1 domkrat.com
          127.0.0.1 www.doofo.com
          127.0.0.1 doofo.com
          127.0.0.1 www.dotcomtoolbar.com
          127.0.0.1 dotcomtoolbar.com
          127.0.0.1 down.136136.net
          127.0.0.1 download.abetterinternet.com
          127.0.0.1 download.adintelligence.net
          127.0.0.1 www.download.antispywarebot.com
          127.0.0.1 download.antispywarebot.com
          127.0.0.1 www.download.bardownload.com
          127.0.0.1 download.bardownload.com
          127.0.0.1 www.download.bravesentry.com
          127.0.0.1 download.bravesentry.com
          127.0.0.1 download.cdn.drivecleaner.com
          127.0.0.1 download.cdn.errorsafe.com
          127.0.0.1 download.cdn.winsoftware.com
          127.0.0.1 download.contextplus.net
          127.0.0.1 download.errorsafe.com
          127.0.0.1 www.download.jupitersatellites.biz
          127.0.0.1 download.jupitersatellites.biz
          127.0.0.1 download.MalwareAlarm.com
          127.0.0.1 download.searchtabs.net
          127.0.0.1 www.download.secureyournet.biz
          127.0.0.1 download.secureyournet.biz
          127.0.0.1 download.spyonthis.net
          127.0.0.1 download.spy-shredder.com
          127.0.0.1 download.systemdoctor.com
          127.0.0.1 download.winantispyware.com
          127.0.0.1 download.winantivirus.com
          127.0.0.1 download.windrivecleaner.com
          127.0.0.1 download.winfixer.com
          127.0.0.1 download10.spywarequake.com
          127.0.0.1 download11.spywarequake.com
          127.0.0.1 download12.spywarequake.com
          127.0.0.1 download13.spywarequake.com
          127.0.0.1 download15.spywarequake.com
          127.0.0.1 download2.spywarequake.com
          127.0.0.1 www.download-2007.com
          127.0.0.1 download-2007.com
          127.0.0.1 download3.spyaxe.com
          127.0.0.1 download3.spywarequake.com
          127.0.0.1 www.download3xpics.com
          127.0.0.1 download3xpics.com
          127.0.0.1 download4.spyaxe.com
          127.0.0.1 download4.spywarequake.com
          127.0.0.1 download5.spyaxe.com
          127.0.0.1 download5.spywarequake.com
          127.0.0.1 download6.spyaxe.com
          127.0.0.1 download7.spywarequake.com
          127.0.0.1 download8.spywarequake.com
          127.0.0.1 download9.spywarequake.com
          127.0.0.1 www.downloadacceleratorsite.com
          127.0.0.1 downloadacceleratorsite.com
          127.0.0.1 www.download-ad-aware.com
          127.0.0.1 download-ad-aware.com
          127.0.0.1 www.download-all-4-free.com
          127.0.0.1 download-all-4-free.com
          127.0.0.1 www.download-all-area.com
          127.0.0.1 download-all-area.com
          127.0.0.1 www.download-antivir.com
          127.0.0.1 download-antivir.com
          127.0.0.1 www.downloadanysong.com
          127.0.0.1 downloadanysong.com
          127.0.0.1 www.downloadaresnow.com
          127.0.0.1 downloadaresnow.com
          127.0.0.1 www.download-avast.com
          127.0.0.1 download-avast.com
          127.0.0.1 www.downloadcorporation.com
          127.0.0.1 downloadcorporation.com
          127.0.0.1 www.download-dvdshrink.com
          127.0.0.1 download-dvdshrink.com
          127.0.0.1 www.download-for-free.net
          127.0.0.1 download-for-free.net
          127.0.0.1 www.downloadfreesoft.com
          127.0.0.1 downloadfreesoft.com
          127.0.0.1 www.downloadfreeway.com
          127.0.0.1 downloadfreeway.com
          127.0.0.1 www.downloadimesh.com
          127.0.0.1 downloadimesh.com
          127.0.0.1 www.download-itunes-now.com
          127.0.0.1 download-itunes-now.com
          127.0.0.1 www.download-limewire.org
          127.0.0.1 download-limewire.org
          127.0.0.1 www.downloadlost.tv
          127.0.0.1 downloadlost.tv
          127.0.0.1 www.downloadmax.net
          127.0.0.1 downloadmax.net
          127.0.0.1 www.download-mcafee.com
          127.0.0.1 download-mcafee.com
          127.0.0.1 download-me.info
          127.0.0.1 www.downloadmediaax.com
          127.0.0.1 downloadmediaax.com
          127.0.0.1 www.downloadpics.net
          127.0.0.1 downloadpics.net
          127.0.0.1 www.downloadprovider.net
          127.0.0.1 downloadprovider.net
          127.0.0.1 www.download-real-player.com
          127.0.0.1 download-real-player.com
          127.0.0.1 downloads.180solutions.com
          127.0.0.1 downloads.adaware.cc
          127.0.0.1 www.downloadservicearea.com
          127.0.0.1 downloadservicearea.com
          127.0.0.1 www.downloads-free.org
          127.0.0.1 downloads-free.org
          127.0.0.1 www.downloadsglobe.com
          127.0.0.1 downloadsglobe.com
          127.0.0.1 www.download-this.us
          127.0.0.1 download-this.us
          127.0.0.1 www.download-trillian.com
          127.0.0.1 download-trillian.com
          127.0.0.1 www.downloadv3.com
          127.0.0.1 downloadv3.com
          127.0.0.1 www.downloadvax.com
          127.0.0.1 downloadvax.com
          127.0.0.1 www.download-windvd.com
          127.0.0.1 download-windvd.com
          127.0.0.1 www.download-winrar.com
          127.0.0.1 download-winrar.com
          127.0.0.1 downloadwizard.com
          127.0.0.1 www.downloadxmoveis.com
          127.0.0.1 downloadxmoveis.com
          127.0.0.1 www.downloadxvids.com
          127.0.0.1 downloadxvids.com
          127.0.0.1 downloadzcenter.com
          127.0.0.1 downloadzcentral.com
          127.0.0.1 www.downloadzfree.com
          127.0.0.1 downloadzfree.com
          127.0.0.1 downloadznow.net
          127.0.0.1 www.download-zone-free.com
          127.0.0.1 download-zone-free.com
          127.0.0.1 www.download-zone-free.net
          127.0.0.1 download-zone-free.net
          127.0.0.1 dp-host.com
          127.0.0.1 dr.mcboo.com
          127.0.0.1 www.dr.webhancer.com
          0
          1. Re steph16,

            Il manque la fin du rapport Smitfraufix.
            Le rapport étant extrêmement long, renvoyer surtout la fin.

            Spybot a détecté quelque chose?

            Renvoyer aussi un autre rapport HJThis.

            A+
            0
            1. Spybot n'a rien detecté.
              fin du rapport de smitfraufix


              »»»»»»»»»»»»»»»»»»»»»»»» VACFix

              VACFix
              Credits: Malware Analysis & Diagnostic
              Code: S!Ri

              »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

              S!Ri's WS2Fix: LSP not Found.

              »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

              GenericRenosFix by S!Ri

              »»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

              »»»»»»»»»»»»»»»»»»»»»»»» IEDFix

              IEDFix
              Credits: Malware Analysis & Diagnostic
              Code: S!Ri

              »»»»»»»»»»»»»»»»»»»»»»»» DNS

              HKLM\SYSTEM\CCS\Services\Tcpip\..\{169CEE27-4969-46D2-AB0F-0C9722446995}: DhcpNameServer=192.168.1.1
              HKLM\SYSTEM\CS1\Services\Tcpip\..\{169CEE27-4969-46D2-AB0F-0C9722446995}: DhcpNameServer=192.168.1.1
              HKLM\SYSTEM\CS3\Services\Tcpip\..\{169CEE27-4969-46D2-AB0F-0C9722446995}: DhcpNameServer=192.168.1.1
              HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
              HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
              HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1

              »»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files

              »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
              !!!Attention, following keys are not inevitably infected!!!

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

              »»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

              Registry Cleaning done.

              »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
              !!!Attention, following keys are not inevitably infected!!!

              SrchSTS.exe by S!Ri
              Search SharedTaskScheduler's .dll

              »»»»»»»»»»»»»»»»»»»»»»»» End

              Rapport de HJThis
              Logfile of Trend Micro HijackThis v2.0.2
              Scan saved at 20:24:00, on 16/03/2008
              Platform: Windows Vista (WinNT 6.00.1904)
              MSIE: Internet Explorer v7.00 (7.00.6000.16609)
              Boot mode: Normal

              Running processes:
              C:\Windows\system32\Dwm.exe
              C:\Windows\Explorer.EXE
              C:\Windows\system32\taskeng.exe
              C:\Program Files\Windows Defender\MSASCui.exe
              C:\Windows\RtHDVCpl.exe
              C:\Acer\Empowering Technology\SysMonitor.exe
              C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
              C:\Program Files\Alwil Software\Avast4\ashDisp.exe
              C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
              D:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
              D:\Program Files\iTunesHelper.exe
              C:\Windows\System32\WinSecure.exe
              C:\Windows\System32\WinSecure.exe
              C:\Program Files\Windows Sidebar\sidebar.exe
              C:\Windows\ehome\ehtray.exe
              C:\Users\Stephane\AppData\Roaming\smss.exe
              C:\Users\Stephane\AppData\Roaming\smvss.exe
              C:\Program Files\Windows Live\Messenger\msnmsgr.exe
              C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
              C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe
              C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
              C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe
              C:\Program Files\Windows Media Player\wmpnscfg.exe
              C:\Windows\ehome\ehmsas.exe
              C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
              C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
              C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
              C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
              C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
              C:\Windows\System32\mobsync.exe
              C:\Program Files\eMule\emule.exe
              C:\Windows\system32\conime.exe
              C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
              C:\Windows\system32\SearchFilterHost.exe
              C:\HijackThis.exe

              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
              R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
              O1 - Hosts: ::1 localhost
              O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
              O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - D:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll
              O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
              O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Windows\system32\ActiveToolBand.dll
              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
              O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
              O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
              O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
              O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
              O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - D:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll
              O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
              O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
              O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
              O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
              O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
              O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
              O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
              O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "D:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
              O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
              O4 - HKLM\..\Run: [iTunesHelper] "D:\Program Files\iTunesHelper.exe"
              O4 - HKLM\..\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
              O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
              O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
              O4 - HKCU\..\Run: [.nvsvc] C:\Users\Stephane\AppData\Roaming\smss.exe /w
              O4 - HKCU\..\Run: [devenv] C:\Users\Stephane\AppData\Roaming\smvss.exe /w
              O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
              O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
              O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
              O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
              O4 - HKCU\..\Run: [Uniblue RegistryBooster 2] c:\program files\uniblue\registrybooster 2\StartRegistryBooster.exe
              O4 - HKCU\..\Run: [Uniblue SpyEraser] "C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe" -m
              O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
              O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
              O4 - HKCU\..\Policies\Explorer\Run: [Windows Security Tool] WinSecure.exe
              O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
              O4 - Startup: iPhoneRingToneMaker.lnk = D:\Program Files\iPhoneRingToneMaker\iPhoneRingToneMaker.exe
              O4 - Global Startup: Adobe Reader Synchronizer.lnk = D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
              O4 - Global Startup: Empowering Technology Launcher.lnk = ?
              O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?
              O4 - Global Startup: Microsoft Office.lnk = D:\Office\Office\OSA9.EXE
              O4 - Global Startup: PCM Media Sharing.lnk = C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
              O8 - Extra context menu item: Ajouter au fichier PDF existant - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
              O8 - Extra context menu item: Convertir en Adobe PDF - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
              O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
              O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
              O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
              O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
              O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
              O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://D:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
              O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
              O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
              O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
              O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
              O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
              O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
              O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
              O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
              O13 - Gopher Prefix:
              O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
              O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
              O23 - Service: Adobe Version Cue CS3 {fr_FR} (Adobe Version Cue CS3) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
              O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
              O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
              O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
              O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
              O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
              O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
              O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
              O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
              O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
              O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
              O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
              0
              1. steph16,

                On va y aller plus directement alors.

                ----------------------
                - Télécharger OTMoveIt2(de Old_Timer) sur le Bureau. http://download.bleepingcomputer.com/oldtimer/OTMoveIt2.exe

                Double cliquer sur OTMoveIt2.exe pour le lancer.
                Copier la liste de fichier ou de dossier qui se trouve en gras ci-dessous,
                et coller-la dans le cadre de gauche de OTMoveIt :
                Paste List of Files/Folders to be moved.


                C:\Windows\System32\WinSecure.exe
                C:\Users\Stephane\AppData\Roaming\smss.exe
                C:\Users\Stephane\AppData\Roaming\smvss.exe


                Cliquer sur MoveIt! pour lancer la suppression.
                Le résultat apparaîtra dans le cadre Results.
                Cliquer sur Exit pour fermer.

                Il sera peut-être demander de redémarrer le pc pour achever la suppression.
                Si c'est le cas accepter par Yes
                .

                --> Poster le rapport d'OTMoveIt situé dans C:\_OTMoveIt\MovedFiles (contenu du fichier C:\_OTMoveIt\MovedFiles\********_******.log - les *** sont des chiffres représentant la date et l'heure)

                ----------------------
                - Relancer HiJackthis cliquer sur Do a scan only et cocher les lignes en gras:


                O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "D:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
                O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
                O4 - HKCU\..\Run: [.nvsvc] C:\Users\Stephane\AppData\Roaming\smss.exe /w
                O4 - HKCU\..\Run: [devenv] C:\Users\Stephane\AppData\Roaming\smvss.exe /w
                O4 - HKCU\..\Policies\Explorer\Run: [Windows Security Tool] WinSecure.exe
                O4 - Startup: iPhoneRingToneMaker.lnk = D:\Program Files\iPhoneRingToneMaker\iPhoneRingToneMaker.exe
                O4 - Global Startup: Empowering Technology Launcher.lnk = ?
                O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?
                O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
                O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe


                Comment fixer une ligne: (Merci a Balltrap34 pour cette réalisation vidéo)
                -> http://pageperso.aol.fr/balltrap34/demohijack.htm
                Fermer toutes tes applications et ton navigateur puis fix checked.

                ------------------------
                - Cliquer CCleaner (en français) pour nettoyer les fichiers temporaires, cookies... ainsi que les clefs de la base de registre inutile.

                Pendant l'installation si vous avez déjà une barre de recherche, alors décocher l'ajout de la barre yahoo.
                Son tutorial ICI
                Ensuite dans Options / Avancés, décocher : effacer uniquement les fichiers du répertoires temp de Windows de plus vieux que 48h.

                Bouton Nettoyer (s’assurer que dans l’onglet Windows la case Avancé est décoché), cliquer sur Analyse laisser travailler cela peut être très long ensuite cliquer sur Lancer le nettoyage.

                Ensuite sur le bouton Registre (s’assurer que Intégrité du registre est coché) répéter 2 fois les étapes suivantes:
                Chercher les erreurs- Réparer les erreurs sélectionnées
                Ne pas oublier de sauvegarder au cas où il supprimerait une mauvaise clef (peu probable).

                À effacer ensuite s’il n’y a pas de problème par la suite.

                -----------------------
                - Concernant Firefox:

                * Pour les cookies s'assurer de tout est correctement configurer, Outils / Options / Vie privée >
                * Cookies / Les conserver jusqu'à : la fermeture de firefox.
                * Vie privée cocher : Toujours effacer mes informations personnelles à la fermeture de Firefox.

                Voici un lien pour encore mieux optimiser la vitesse de navigation:
                http://www.commentcamarche.net/faq/sujet 852 firefox optimisation ameliorer les performances
                ou automatiquement regarder ici:
                https://www.01net.com/telecharger/windows/Internet/navigateur/fiches/31802.html

                ------------------------
                - Mises à jours en particulier Java, Adobe, Flash…
                C’est en anglais mais il y a juste 1 ou 2 boutons à cliquer.
                https://www.flexera.com/products/operations/software-vulnerability-management.html
                une petite explication dans ce lien (merci malekal).

                Et bien entendu windows update:
                http://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=fr

                A+
                0

                Discussions similaires

                winsecure

                7 réponses