You have a security problem !

Bonjour,

Ce message apparait sans cesse "You have a security problem !"
Après avoir nettoyer le système comme indiqué dans le forum "Analyser, interpréter un log HijackThis et agir en conséquence" publié par Jeff ( Bravo pour la clarté du Tutoriel ! )
Voici le rapport Hijackthis

Je vous remercie d'avance de me tirer d'embarras

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:54:57, on 24/11/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16757)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\vsnp2std.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\conime.exe
C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
C:\Users\Tony\AppData\Local\Temp\~tmpa.exe
C:\Windows\system32\regsvr32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: searchersmart search enhancer - {247E05CF-35BE-C43A-A61D-51BC4B11B5D8} - C:\Windows\system32\lfmbvmqfkntoibp.dll
O2 - BHO: 892267 helper - {25E0128D-AAFC-49FF-AB11-1F12C2FCC391} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O2 - BHO: offersfortoday browser enhancer - {EE01C848-FBCD-9D47-66D3-BD284CB5FFC6} - C:\Windows\system32\pudyiuallzdcw.dll
O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O3 - Toolbar: (no name) - {92162A1C-A9E3-4C0C-BCDC-2996E8406887} - (no file)
O3 - Toolbar: (no name) - {70CC76D5-A4EE-4F25-9931-B109A63E298E} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O4 - HKLM\..\Run: [snp2std] C:\Windows\vsnp2std.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\Windows\system32\spool\drivers\w32x86\3\hpztsb06.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [kshfqjugwa] C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\pudyiuallzdcw.dll"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [lphcep2j0elfc] C:\Windows\system32\lphcep2j0elfc.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Cognac] C:\Users\Tony\AppData\Local\Temp\~tmpb.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [MSFox] C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O17 - HKLM\System\CCS\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
O17 - HKLM\System\CCS\Services\Tcpip\..\{F555EB53-4738-4A5E-97EF-74029A4200DA}: NameServer = 212.27.54.252,212.27.53.252
O17 - HKLM\System\CS1\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O21 - SSODL: bmlvqkn - {E5C9FD6F-D3F8-4704-8FE2-C37A27A7107F} - (no file)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\Windows\SYSTEM32\crypserv.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--
End of file - 12431 bytes
Configuration: Windows Vista
Firefox 2.0.0.18

28 réponses

Résumé de la discussion

Le problème central est l'apparition répétée du message "You have a security problem !" et l’analyse d’un log HijackThis pour identifier les éléments potentiellement malveillants. Plusieurs éléments relevés dans le rapport suggèrent des extensions et des services tiers indésirables, notamment des barres d’outils et des composants de navigateur, nécessitant un nettoyage approfondi. En cas de nettoyage, il est recommandé de suivre le tutoriel et de traiter les éléments détectés par HijackThis, avec des actions sur les pages et les programmes lancés au démarrage. Une information utile est que le rapport recense des services et processus variés, issus de logiciels légitimes et de programmes potentiellement compromis, ce qui nécessite d’examiner les autorisations et de vérifier les solutions antivirus.

Bobot (l’IA à votre service)
  1. Pour info drHouse, la remarque de feelgod n'a rien de déplacé !
    De plus ( là tu ne vois plus ce que tu as écrit mais moi si, et je te cite :"Explique moi le fait d'avoir un nouvelle hijackthis changerais .................."


    alors que tu l'as demandé cet hijackthis !!!

    Et pour repondre à ton interrogation, sache qu'une infection peut en cacher une autre, et le fait d'en detruire une peut la faire apparaitre, c'est pour cela que des rapports neufs sont important ( et surtout après reboot), ainsi que plusieurs yeux sur un problème.

    Cela ne se voit s'en doute pas sur le forum mais nous sommes un certains nombre à travailler ensemble si nous avons des doutes; ce n'est pas chacun dans son coin, et c'est une très bonne manière de progresser pour chacun, faut -il encore avoir envi de faire parti d'une communauté .
    Et comme dans la vrai vie, certain se font exclure par eux même en fonction de leur comportement

    Ici nous sommes sur un forum d'entraide , et l'entraide ne vas pas que dans le sens demandeur-aideur mais egalement entre les intervenants afin d'aider chacun , les débutants en desinfection egalement, et même les confirmés à l'occasion , personne n'etant à l'abris d'une erreur!

    Parcontre une chose qui ne se fait pas , c'est d'envoyer promener les personnes qui viennent te signaler que tu es passé à coté de quelquechose , surtout dans ce cas là, avec une certaine mauvaise foi.

    J'arrete là, j'espere que tu auras compris le but de ceci.
    1. Hi,

      =>< Désactive le « contrôle des comptes utilisateurs = UAC »
      (tu le réactiveras après ta désinfection): Ne pas oublier !!
      Désactiver l'UAC est nécessaire pour pouvoir faire fonctionner certains programmes sous Vista.
      - Vas dans Démarrer puis panneau de configuration
      - Double Clique sur l'icône "Comptes d'utilisateurs"
      - Clique ensuite sur désactiver et valide.

      Installe [- Télécharge SmitfraudFix (de de S!Ri, balltrap34 et moe31) :
      http://siri.urz.free.fr/Fix/SmitfraudFix.exe smitfraudfix]

      Option:1 => Recherche:

      * Double cliquer sur SmitfraudFix.exe

      * Sélectionner 1 et pressez =>Entrée dans le menu pour créer

      un rapport des fichiers responsables de l'infection. Le rapport se trouve à la racine du disque

      système

      C:\rapport.txt

      ==>et colle le rapport génèrer sur le forum.

      *=>Ne pas faire l'option 2 sans un avis d'une personne compétente*<=

      Alut.
      1. SmitFraudFix v2.376

        Scan done at 17:03:51,28, 24/11/2008
        Run from C:\Users\Tony\Desktop\SmitfraudFix
        OS: Microsoft Windows [version 6.0.6000] - Windows_NT
        The filesystem type is NTFS
        Fix run in normal mode

        »»»»»»»»»»»»»»»»»»»»»»»» Process

        C:\Windows\system32\csrss.exe
        C:\Windows\system32\wininit.exe
        C:\Windows\system32\csrss.exe
        C:\Windows\system32\services.exe
        C:\Windows\system32\lsass.exe
        C:\Windows\system32\lsm.exe
        C:\Windows\system32\winlogon.exe
        C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe
        C:\Windows\System32\svchost.exe
        C:\Windows\System32\svchost.exe
        C:\Windows\System32\svchost.exe
        C:\Windows\system32\svchost.exe
        C:\Windows\system32\SLsvc.exe
        C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe
        C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        C:\Program Files\Alwil Software\Avast4\ashServ.exe
        C:\Windows\System32\spoolsv.exe
        C:\Windows\system32\svchost.exe
        C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        C:\Windows\system32\crypserv.exe
        C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
        C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
        C:\Windows\system32\PnkBstrA.exe
        C:\Windows\system32\svchost.exe
        C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
        C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
        C:\Windows\system32\svchost.exe
        C:\Windows\System32\svchost.exe
        C:\Windows\system32\SearchIndexer.exe
        C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        C:\Windows\system32\taskeng.exe
        C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
        C:\Windows\system32\Dwm.exe
        C:\Windows\system32\taskeng.exe
        C:\Windows\Explorer.EXE
        C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
        C:\Program Files\WebMediaViewer\qttask.exe
        C:\Program Files\WebMediaViewer\hpmon.exe
        C:\Windows\vsnp2std.exe
        C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
        C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
        C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
        C:\Program Files\Alwil Software\Avast4\ashDisp.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
        C:\Program Files\Logitech\QuickCam\Quickcam.exe
        C:\Windows\System32\regsvr32.exe
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
        C:\Program Files\Windows Media Player\wmpnscfg.exe
        C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
        C:\Program Files\Windows Media Player\wmpnetwk.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Windows\system32\wbem\unsecapp.exe
        C:\Windows\system32\wbem\wmiprvse.exe
        C:\Windows\system32\ctfmon.exe
        C:\Program Files\WebMediaViewer\qttaskm.exe
        C:\Program Files\WebMediaViewer\hpmom.exe
        C:\Program Files\iPod\bin\iPodService.exe
        C:\Windows\system32\conime.exe
        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
        C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
        C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
        C:\Users\Tony\AppData\Local\Temp\~tmpd.exe
        C:\Program Files\Windows Live Toolbar\msn_sl.exe
        C:\Windows\system32\wbem\wmiprvse.exe
        C:\Windows\system32\cmd.exe
        C:\Windows\system32\wuauclt.exe
        C:\Windows\servicing\TrustedInstaller.exe

        »»»»»»»»»»»»»»»»»»»»»»»» hosts

        hosts file corrupted !

        127.0.0.1 legal-at-spybot.info
        127.0.0.1 www.legal-at-spybot.info

        »»»»»»»»»»»»»»»»»»»»»»»» C:\

        »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows

        »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system

        »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\Web

        »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32

        C:\Windows\system32\msxml71.dll FOUND !

        »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32\LogFiles

        »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Tony

        »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Tony\AppData\Local\Temp

        »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Tony\Application Data

        »»»»»»»»»»»»»»»»»»»»»»»» Start Menu

        »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Tony\FAVORI~1

        C:\Users\Tony\FAVORI~1\Antivirus Scan.url FOUND !

        »»»»»»»»»»»»»»»»»»»»»»»» Desktop

        »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

        C:\Program Files\Google\googletoolbar1.dll FOUND !

        »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys

        »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

        »»»»»»»»»»»»»»»»»»»»»»»» o4Patch
        !!!Attention, following keys are not inevitably infected!!!

        o4Patch
        Credits: Malware Analysis & Diagnostic
        Code: S!Ri

        »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
        !!!Attention, following keys are not inevitably infected!!!

        IEDFix
        Credits: Malware Analysis & Diagnostic
        Code: S!Ri

        »»»»»»»»»»»»»»»»»»»»»»»» VACFix
        !!!Attention, following keys are not inevitably infected!!!

        VACFix
        Credits: Malware Analysis & Diagnostic
        Code: S!Ri

        »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
        !!!Attention, following keys are not inevitably infected!!!

        404Fix
        Credits: Malware Analysis & Diagnostic
        Code: S!Ri
        +--------------------------------------------------+
        [!] Suspicious: 512686.dll
        BHO: 512686 Class - {51B15F5A-E98B-4658-B9CB-9307B74773A7}
        BHO CLSID TypeLib: {E63648F7-3933-440E-AAAA-A8584DD7B7EB}
        Corrected TypeLib: {E63648F7-3933-440E-B4F6-A8584DD7B7EB}
        Interface: {F7D09218-46D7-4D3D-9B7F-315204CD0836}

        »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
        !!!Attention, following keys are not inevitably infected!!!

        SrchSTS.exe by S!Ri
        Search SharedTaskScheduler's .dll

        »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
        !!!Attention, following keys are not inevitably infected!!!

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
        "AppInit_DLLs"="C:\\PROGRA~1\\Google\\GOOGLE~1\\GOEC62~1.DLL"
        "LoadAppInit_DLLs"=dword:00000001

        »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
        !!!Attention, following keys are not inevitably infected!!!

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
        "Userinit"="C:\\Windows\\system32\\userinit.exe,"

        »»»»»»»»»»»»»»»»»»»»»»»» RK

        »»»»»»»»»»»»»»»»»»»»»»»» DNS

        Description: Contrôleur intégré Broadcom 440x 10/100
        DNS Server Search Order: 212.27.54.252
        DNS Server Search Order: 212.27.53.252

        HKLM\SYSTEM\CCS\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer=212.27.32.176,212.27.32.177
        HKLM\SYSTEM\CCS\Services\Tcpip\..\{F555EB53-4738-4A5E-97EF-74029A4200DA}: NameServer=212.27.54.252,212.27.53.252
        HKLM\SYSTEM\CS1\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer=212.27.32.176,212.27.32.177
        HKLM\SYSTEM\CS1\Services\Tcpip\..\{F555EB53-4738-4A5E-97EF-74029A4200DA}: NameServer=212.27.54.252,212.27.53.252
        HKLM\SYSTEM\CS3\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer=212.27.32.176,212.27.32.177
        HKLM\SYSTEM\CS3\Services\Tcpip\..\{F555EB53-4738-4A5E-97EF-74029A4200DA}: NameServer=212.27.54.252,212.27.53.252

        »»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection

        »»»»»»»»»»»»»»»»»»»»»»»» End
    2. Hi,

      Maintenant fait ceci:

      2) Nettoyage:

      * Redemarrer l'ordinateur en mode sans échec:

      * Double cliquer sur smitfraudix:

      * Sélectionner 2 et pressez Entrée dans le menu pour supprimer les fichiers responsables de l'infection.

      * A la question: Voulez-vous nettoyer le registre ? répondre O (oui) et pressez Entrée afin de débloquer le fond d'écran et supprimer les clés de registre de l'infection:.

      * Le fix déterminera si le fichier wininet.dll est infecté. A la question: Corriger le fichier infecté ? répondre O (oui) et pressez Entrée pour remplacer le fichier corrompu:.

      * Un redemarrage sera peut être necessaire pour terminer la procedure de nettoyage. Le rapport se trouve à la racine du disque système C:\rapport.txt:

      Option::

      * Pour effacer la liste des sites de confiance et sensibles, sélectionner 3 et pressez Entrée dans le menu.

      * A la question: Réinitialiser la liste des sites de confiance et sensibles ? répondre O (oui) et pressez Entrée afin de restaurer les zones de confiances et sensibles:.

      :FAUX POSITIF::

      process.exe est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

      Alut.
      1. Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 14:54:57, on 24/11/2008
        Platform: Windows Vista (WinNT 6.00.1904)
        MSIE: Internet Explorer v7.00 (7.00.6000.16757)
        Boot mode: Normal

        Running processes:
        C:\Windows\system32\taskeng.exe
        C:\Windows\system32\Dwm.exe
        C:\Windows\Explorer.EXE
        C:\Windows\vsnp2std.exe
        C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
        C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
        C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
        C:\Program Files\Alwil Software\Avast4\ashDisp.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
        C:\Program Files\Logitech\QuickCam\Quickcam.exe
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        C:\Program Files\Windows Media Player\wmpnscfg.exe
        C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
        C:\Windows\system32\wbem\unsecapp.exe
        C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
        C:\Windows\system32\wuauclt.exe
        C:\Windows\system32\conime.exe
        C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
        C:\Users\Tony\AppData\Local\Temp\~tmpa.exe
        C:\Windows\system32\regsvr32.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
        C:\Windows\system32\taskeng.exe
        C:\Program Files\Mozilla Firefox\firefox.exe
        C:\Windows\system32\SearchFilterHost.exe
        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
        R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
        O1 - Hosts: ::1 localhost
        O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
        O2 - BHO: searchersmart search enhancer - {247E05CF-35BE-C43A-A61D-51BC4B11B5D8} - C:\Windows\system32\lfmbvmqfkntoibp.dll
        O2 - BHO: 892267 helper - {25E0128D-AAFC-49FF-AB11-1F12C2FCC391} - (no file)
        O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
        O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
        O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
        O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
        O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
        O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
        O2 - BHO: offersfortoday browser enhancer - {EE01C848-FBCD-9D47-66D3-BD284CB5FFC6} - C:\Windows\system32\pudyiuallzdcw.dll
        O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
        O3 - Toolbar: (no name) - {92162A1C-A9E3-4C0C-BCDC-2996E8406887} - (no file)
        O3 - Toolbar: (no name) - {70CC76D5-A4EE-4F25-9931-B109A63E298E} - (no file)
        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
        O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
        O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
        O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
        O4 - HKLM\..\Run: [snp2std] C:\Windows\vsnp2std.exe
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
        O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
        O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
        O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\Windows\system32\spool\drivers\w32x86\3\hpztsb06.exe
        O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
        O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
        O4 - HKLM\..\Run: [kshfqjugwa] C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\pudyiuallzdcw.dll"
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [lphcep2j0elfc] C:\Windows\system32\lphcep2j0elfc.exe
        O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
        O4 - HKCU\..\Run: [Cognac] C:\Users\Tony\AppData\Local\Temp\~tmpb.exe
        O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
        O4 - HKCU\..\Run: [MSFox] C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
        O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
        O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
        O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
        O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
        O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
        O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
        O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
        O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
        O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
        O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
        O13 - Gopher Prefix:
        O17 - HKLM\System\CCS\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
        O17 - HKLM\System\CCS\Services\Tcpip\..\{F555EB53-4738-4A5E-97EF-74029A4200DA}: NameServer = 212.27.54.252,212.27.53.252
        O17 - HKLM\System\CS1\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
        O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
        O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
        O21 - SSODL: bmlvqkn - {E5C9FD6F-D3F8-4704-8FE2-C37A27A7107F} - (no file)
        O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
        O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
        O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\Windows\SYSTEM32\crypserv.exe
        O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
        O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
        O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
        O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
        O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
        O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
        O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
        O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
        O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
        O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
        1. Hi,

          Il me mannque le rapport de smithfraudix option 2.

          Alut.
          1. voici le rapport SmithFraudix option 2

            IMPORTANT : Il apparait un triangle de signalisation Jaune avec point d'exclamation dans la barre des taches. Le message suivant est Warning ! Spyware threat

            SmitFraudFix v2.376

            Scan done at 17:39:14,47, 24/11/2008
            Run from C:\Users\Tony\Desktop\SmitfraudFix
            OS: Microsoft Windows [version 6.0.6000] - Windows_NT
            The filesystem type is NTFS
            Fix run in safe mode

            »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
            !!!Attention, following keys are not inevitably infected!!!

            SrchSTS.exe by S!Ri
            Search SharedTaskScheduler's .dll

            »»»»»»»»»»»»»»»»»»»»»»»» Killing process

            »»»»»»»»»»»»»»»»»»»»»»»» hosts

            127.0.0.1 localhost
            ::1 localhost
            127.0.0.1 007guard.com
            127.0.0.1 www.007guard.com
            127.0.0.1 008i.com
            127.0.0.1 008k.com
            127.0.0.1 www.008k.com
            127.0.0.1 00hq.com
            127.0.0.1 www.00hq.com
            127.0.0.1 010402.com
            127.0.0.1 032439.com
            127.0.0.1 www.032439.com
            127.0.0.1 1001-search.info
            127.0.0.1 www.1001-search.info
            127.0.0.1 100888290cs.com
            127.0.0.1 www.100888290cs.com
            127.0.0.1 100sexlinks.com
            127.0.0.1 www.100sexlinks.com
            127.0.0.1 10sek.com
            127.0.0.1 www.10sek.com
            127.0.0.1 123topsearch.com
            127.0.0.1 www.123topsearch.com
            127.0.0.1 132.com
            127.0.0.1 www.132.com
            127.0.0.1 136136.net
            127.0.0.1 www.136136.net
            127.0.0.1 139mm.com
            127.0.0.1 www.139mm.com
            127.0.0.1 163ns.com
            127.0.0.1 www.163ns.com
            127.0.0.1 171203.com
            127.0.0.1 17-plus.com
            127.0.0.1 1800searchonline.com
            127.0.0.1 www.1800searchonline.com
            127.0.0.1 180searchassistant.com
            127.0.0.1 www.180searchassistant.com
            127.0.0.1 180solutions.com
            127.0.0.1 www.180solutions.com
            127.0.0.1 181.365soft.info
            127.0.0.1 www.181.365soft.info
            127.0.0.1 1987324.com
            127.0.0.1 www.1987324.com
            127.0.0.1 1-domains-registrations.com
            127.0.0.1 www.1-domains-registrations.com
            127.0.0.1 1-extreme.biz
            127.0.0.1 www.1-extreme.biz
            127.0.0.1 1sexparty.com
            127.0.0.1 www.1sexparty.com
            127.0.0.1 1stantivirus.com
            127.0.0.1 www.1stantivirus.com
            127.0.0.1 1stpagehere.com
            127.0.0.1 www.1stpagehere.com
            127.0.0.1 1stsearchportal.com
            127.0.0.1 www.1stsearchportal.com
            127.0.0.1 2.82211.net
            127.0.0.1 www.2006ooo.com
            127.0.0.1 2007-download.com
            127.0.0.1 www.2007-download.com
            127.0.0.1 2020search.com
            127.0.0.1 www.2020search.com
            127.0.0.1 20x2p.com
            127.0.0.1 24.365soft.info
            127.0.0.1 www.24.365soft.info
            127.0.0.1 24-7pharmacy.info
            127.0.0.1 www.24-7pharmacy.info
            127.0.0.1 24-7searching-and-more.com
            127.0.0.1 www.24-7searching-and-more.com
            127.0.0.1 24teen.com
            127.0.0.1 www.24teen.com
            127.0.0.1 2every.net
            127.0.0.1 www.2every.net
            127.0.0.1 2ndpower.com
            127.0.0.1 2search.com
            127.0.0.1 www.2search.com
            127.0.0.1 2search.org
            127.0.0.1 www.2search.org
            127.0.0.1 2squared.com
            127.0.0.1 www.2squared.com
            127.0.0.1 3322.org
            127.0.0.1 www.3322.org
            127.0.0.1 365soft.info
            127.0.0.1 36site.com
            127.0.0.1 www.36site.com
            127.0.0.1 3721.com
            127.0.0.1 39-93.com
            127.0.0.1 3abetterinternet.com
            127.0.0.1 www.3abetterinternet.com
            127.0.0.1 3bay.it
            127.0.0.1 www.3bay.it
            127.0.0.1 3ebay.it
            127.0.0.1 www.3ebay.it
            127.0.0.1 404dns.com
            127.0.0.1 www.404dns.com
            127.0.0.1 4199.com
            127.0.0.1 www.4199.com
            127.0.0.1 4corn.net
            127.0.0.1 www.4corn.net
            127.0.0.1 4ebay.it
            127.0.0.1 www.4ebay.it
            127.0.0.1 4klm.com
            127.0.0.1 4repubblica.it
            127.0.0.1 www.4repubblica.it
            127.0.0.1 4softget.com
            127.0.0.1 www.4softget.com
            127.0.0.1 5iscali.it
            127.0.0.1 www.5iscali.it
            127.0.0.1 5repubblica.it
            127.0.0.1 www.5repubblica.it
            127.0.0.1 5starvideos.com
            127.0.0.1 www.5starvideos.com
            127.0.0.1 5tiscali.it
            127.0.0.1 www.5tiscali.it
            127.0.0.1 5zgmu7o20kt5d8yq.com
            127.0.0.1 www.5zgmu7o20kt5d8yq.com
            127.0.0.1 6iscali.it
            127.0.0.1 www.6iscali.it
            127.0.0.1 6sek.com
            127.0.0.1 www.6sek.com
            127.0.0.1 6tiscali.it
            127.0.0.1 www.6tiscali.it
            127.0.0.1 7322.com
            127.0.0.1 www.7322.com
            127.0.0.1 75tz.com
            127.0.0.1 777search.com
            127.0.0.1 www.777search.com
            127.0.0.1 777top.com
            127.0.0.1 www.777top.com
            127.0.0.1 7939.com
            127.0.0.1 www.7939.com
            127.0.0.1 7search.com
            127.0.0.1 www.7search.com
            127.0.0.1 80gw6ry3i3x3qbrkwhxhw.032439.com
            127.0.0.1 82211.net
            127.0.0.1 8866.org
            127.0.0.1 888.com
            127.0.0.1 www.888.com
            127.0.0.1 images.888.com
            127.0.0.1 8ad.com
            127.0.0.1 www.8ad.com
            127.0.0.1 9505.com
            127.0.0.1 www.9505.com
            127.0.0.1 971searchbox.com
            127.0.0.1 www.971searchbox.com
            127.0.0.1 a.bestmanage.org
            127.0.0.1 aaasexypics.com
            127.0.0.1 aaawebfinder.com
            127.0.0.1 www.aaawebfinder.com
            127.0.0.1 aavc.com
            127.0.0.1 abc-find.info
            127.0.0.1 www.abc-find.info
            127.0.0.1 abetterinternet.com
            127.0.0.1 www.abetterinternet.com
            127.0.0.1 abnetsoft.info
            127.0.0.1 www.abnetsoft.info
            127.0.0.1 aboutclicker.com
            127.0.0.1 www.aboutclicker.com
            127.0.0.1 abrp.net
            127.0.0.1 www.abrp.net
            127.0.0.1 absolutee.com
            127.0.0.1 www.absolutee.com
            127.0.0.1 abyssmedia.com
            127.0.0.1 www.abyssmedia.com
            127.0.0.1 ac66.cn
            127.0.0.1 www.ac66.cn
            127.0.0.1 access.Navinetwork.com
            127.0.0.1 access.rapid-pass.net
            127.0.0.1 accessactivexvideo.com
            127.0.0.1 www.accessactivexvideo.com
            127.0.0.1 accessclips.com
            127.0.0.1 www.accessclips.com
            127.0.0.1 access-dvd.com
            127.0.0.1 www.access-dvd.com
            127.0.0.1 accesskeygenerator.com
            127.0.0.1 www.accesskeygenerator.com
            127.0.0.1 accessorygeeks.com
            127.0.0.1 www.accessorygeeks.com
            127.0.0.1 accessthefuture.net
            127.0.0.1 www.accessthefuture.net
            127.0.0.1 accessvid.net
            127.0.0.1 www.accessvid.net
            127.0.0.1 acemedic.com
            127.0.0.1 www.acemedic.com
            127.0.0.1 ace-webmaster.com
            127.0.0.1 www.ace-webmaster.com
            127.0.0.1 acjp.com
            127.0.0.1 acrobat-2007.com
            127.0.0.1 www.acrobat-2007.com
            127.0.0.1 acrobat-8.com
            127.0.0.1 www.acrobat-8.com
            127.0.0.1 acrobat-center.com
            127.0.0.1 www.acrobat-center.com
            127.0.0.1 acrobat-hq.com
            127.0.0.1 www.acrobat-hq.com
            127.0.0.1 acrobatreader-8.com
            127.0.0.1 www.acrobatreader-8.com
            127.0.0.1 acrobat-reader-8.de
            127.0.0.1 www.acrobat-reader-8.de
            127.0.0.1 acrobat-stop.com
            127.0.0.1 www.acrobat-stop.com
            127.0.0.1 actionbreastcancer.org
            127.0.0.1 www.actionbreastcancer.org
            127.0.0.1 activesearcher.info
            127.0.0.1 www.activesearcher.info
            127.0.0.1 activexaccessobject.com
            127.0.0.1 www.activexaccessobject.com
            127.0.0.1 activexaccessvideo.com
            127.0.0.1 www.activexaccessvideo.com
            127.0.0.1 activexemedia.com
            127.0.0.1 www.activexemedia.com
            127.0.0.1 activexmediaobject.com
            127.0.0.1 www.activexmediaobject.com
            127.0.0.1 activexmediapro.com
            127.0.0.1 www.activexmediapro.com
            127.0.0.1 activexmediasite.com
            127.0.0.1 www.activexmediasite.com
            127.0.0.1 activexmediasoftware.com
            127.0.0.1 www.activexmediasoftware.com
            127.0.0.1 activexmediasource.com
            127.0.0.1 www.activexmediasource.com
            127.0.0.1 activexmediatool.com
            127.0.0.1 www.activexmediatool.com
            127.0.0.1 activexmediatour.com
            127.0.0.1 www.activexmediatour.com
            127.0.0.1 activexsoftwares.com
            127.0.0.1 www.activexsoftwares.com
            127.0.0.1 activexsource.com
            127.0.0.1 www.activexsource.com
            127.0.0.1 activexupdate.com
            127.0.0.1 www.activexupdate.com
            127.0.0.1 activexvideo.com
            127.0.0.1 www.activexvideo.com
            127.0.0.1 activexvideotool.com
            127.0.0.1 www.activexvideotool.com
            127.0.0.1 ad.marketingsector.com
            127.0.0.1 www.ad.marketingsector.com
            127.0.0.1 ad.mokead.com
            127.0.0.1 www.ad.mokead.com
            127.0.0.1 ad.yieldmanager.com
            127.0.0.1 www.ad.yieldmanager.com
            127.0.0.1 ad25.com
            127.0.0.1 ad45.com
            127.0.0.1 ad77.com
            127.0.0.1 ad86.com
            127.0.0.1 adamsupportgroup.org
            127.0.0.1 www.adamsupportgroup.org
            127.0.0.1 adarmor.com
            127.0.0.1 www.adarmor.com
            127.0.0.1 adasearch.com
            127.0.0.1 www.adasearch.com
            127.0.0.1 adaware.cc
            127.0.0.1 adawarenow.com
            127.0.0.1 www.adawarenow.com
            127.0.0.1 addictivetechnologies.com
            127.0.0.1 www.addictivetechnologies.com
            127.0.0.1 addictivetechnologies.net
            127.0.0.1 www.addictivetechnologies.net
            127.0.0.1 add-manager.com
            127.0.0.1 www.add-manager.com
            127.0.0.1 adgate.info
            127.0.0.1 www.adgate.info
            127.0.0.1 adipics.com
            127.0.0.1 www.adipics.com
            127.0.0.1 admin2cash.biz
            127.0.0.1 www.admin2cash.biz
            127.0.0.1 adnet-plus.com
            127.0.0.1 adobe-download-now.com
            127.0.0.1 adobe-downloads.com
            127.0.0.1 www.adobe-downloads.com
            127.0.0.1 adobe-reader-8.fr
            127.0.0.1 www.adobe-reader-8.fr
            127.0.0.1 adprotect.com
            127.0.0.1 www.adprotect.com
            127.0.0.1 ads.centralmedia.ws
            127.0.0.1 ads.k8l.info
            127.0.0.1 ads.kmpads.com
            127.0.0.1 ads.marketingsector.com
            127.0.0.1 ads.searchingbooth.com
            127.0.0.1 ads.z-quest.com
            127.0.0.1 ads183.com
            127.0.0.1 www.ads183.com
            127.0.0.1 adscontex.com
            127.0.0.1 www.adscontex.com
            127.0.0.1 adservices1.enhance.com
            127.0.0.1 www.adservices1.enhance.com
            127.0.0.1 adservs.com
            127.0.0.1 adsextend.net
            127.0.0.1 www.adsextend.net
            127.0.0.1 adshttp.com
            127.0.0.1 www.adshttp.com
            127.0.0.1 adsonwww.com
            127.0.0.1 www.adsonwww.com
            127.0.0.1 adspics.com
            127.0.0.1 www.adspics.com
            127.0.0.1 adtrak.net
            127.0.0.1 www.adtrak.net
            127.0.0.1 adtrgt.com
            127.0.0.1 adult777search.info
            127.0.0.1 www.adult777search.info
            127.0.0.1 adultan.com
            127.0.0.1 www.adultan.com
            127.0.0.1 adult-engine-search.com
            127.0.0.1 www.adult-engine-search.com
            127.0.0.1 adult-erotic-guide.net
            127.0.0.1 www.adult-erotic-guide.net
            127.0.0.1 adultfilmsite.com
            127.0.0.1 www.adultfilmsite.com
            127.0.0.1 adult-friends-finder.net
            127.0.0.1 www.adult-friends-finder.net
            127.0.0.1 adultgambling.org
            127.0.0.1 adult-host.org
            127.0.0.1 adulthyperlinks.com
            127.0.0.1 www.adulthyperlinks.com
            127.0.0.1 adultmovieplus.com
            127.0.0.1 www.adultmovieplus.com
            127.0.0.1 adult-personal.us
            127.0.0.1 adultsgames.net
            127.0.0.1 adultsper.com
            127.0.0.1 www.adultsper.com
            127.0.0.1 adulttds.com
            127.0.0.1 www.adulttds.com
            127.0.0.1 adultzoneworld.com
            127.0.0.1 www.adultzoneworld.com
            127.0.0.1 advcash.biz
            127.0.0.1 www.advcash.biz
            127.0.0.1 advert.exaccess.ru
            127.0.0.1 advertisemoney.info
            127.0.0.1 www.advertisemoney.info
            127.0.0.1 advertising.paltalk.com
            127.0.0.1 advertising-money.info
            127.0.0.1 www.advertising-money.info
            127.0.0.1 ad-ware.cc
            127.0.0.1 ad-w-a-r-e.com
            127.0.0.1 www.ad-w-a-r-e.com
            127.0.0.1 a-d-w-a-r-e.com
            127.0.0.1 www.a-d-w-a-r-e.com
            127.0.0.1 adwarebazooka.com
            127.0.0.1 www.adwarebazooka.com
            127.0.0.1 adwarefinder.com
            127.0.0.1 www.adwarefinder.com
            127.0.0.1 adwareprotectionsite.com
            127.0.0.1 www.adwareprotectionsite.com
            127.0.0.1 adwarepunisher.com
            127.0.0.1 www.adwarepunisher.com
            127.0.0.1 aflgate.com
            127.0.0.1 www.aflgate.com
            127.0.0.1 africaspromise.org
            127.0.0.1 agava.com
            127.0.0.1 agava.ru
            127.0.0.1 agentstudio.com
            127.0.0.1 aginegialle.it
            127.0.0.1 www.aginegialle.it
            127.0.0.1 www.aifind.info
            127.0.0.1 aifind.info
            127.0.0.1 airtleworld.com
            127.0.0.1 www.airtleworld.com
            127.0.0.1 aitalia.it
            127.0.0.1 www.aitalia.it
            127.0.0.1 akamai.downloadv3.com
            127.0.0.1 aklitalia.it
            127.0.0.1 www.aklitalia.it
            127.0.0.1 akril.com
            127.0.0.1 alcatel.ws
            127.0.0.1 alfacleaner.com
            127.0.0.1 www.alfacleaner.com
            127.0.0.1 alfa-search.com
            127.0.0.1 alialia.it
            127.0.0.1 www.alialia.it
            127.0.0.1 aliotalia.it
            127.0.0.1 www.aliotalia.it
            127.0.0.1 alirtalia.it
            127.0.0.1 www.alirtalia.it
            127.0.0.1 alitaia.it
            127.0.0.1 www.alitaia.it
            127.0.0.1 alitaklia.it
            127.0.0.1 www.alitaklia.it
            127.0.0.1 alitala.it
            127.0.0.1 www.alitala.it
            127.0.0.1 alitali.it
            127.0.0.1 www.alitali.it
            127.0.0.1 alitaliaq.it
            127.0.0.1 www.alitaliaq.it
            127.0.0.1 alitalias.it
            127.0.0.1 www.alitalias.it
            127.0.0.1 alitaliaz.it
            127.0.0.1 www.alitaliaz.it
            127.0.0.1 alitalioa.it
            127.0.0.1 www.alitalioa.it
            127.0.0.1 alitalisa.it
            127.0.0.1 www.alitalisa.it
            127.0.0.1 alitaliua.it
            127.0.0.1 www.alitaliua.it
            127.0.0.1 alitalkia.it
            127.0.0.1 www.alitalkia.it
            127.0.0.1 alitaloia.it
            127.0.0.1 www.alitaloia.it
            127.0.0.1 alitaluia.it
            127.0.0.1 www.alitaluia.it
            127.0.0.1 alitaslia.it
            127.0.0.1 www.alitaslia.it
            127.0.0.1 alitlia.it
            127.0.0.1 www.alitlia.it
            127.0.0.1 alitralia.it
            127.0.0.1 www.alitralia.it
            127.0.0.1 alitsalia.it
            127.0.0.1 www.alitsalia.it
            127.0.0.1 aliutalia.it
            127.0.0.1 www.aliutalia.it
            127.0.0.1 ALL1COUNT.NET
            127.0.0.1 www.ALL1COUNT.NET
            127.0.0.1 all4internet.com
            127.0.0.1 www.all4internet.com
            127.0.0.1 allabtcars.com
            127.0.0.1 allabtjeeps.com
            127.0.0.1 all-bittorrent.com
            127.0.0.1 www.all-bittorrent.com
            127.0.0.1 www.allcybersearch.com
            127.0.0.1 allcybersearch.com
            127.0.0.1 alldnserrors.com
            127.0.0.1 www.alldnserrors.com
            127.0.0.1 all-downloads-now.com
            127.0.0.1 www.all-downloads-now.com
            127.0.0.1 all-edonkey.com
            127.0.0.1 www.all-edonkey.com
            127.0.0.1 allforadult.com
            127.0.0.1 allhyperlinks.com
            127.0.0.1 alliesecurity.com
            127.0.0.1 www.alliesecurity.com
            127.0.0.1 all-inet.com
            127.0.0.1 allinternetbusiness.com
            127.0.0.1 all-limewire.com
            127.0.0.1 www.all-limewire.com
            127.0.0.1 allmegabucks.com
            127.0.0.1 www.allmegabucks.com
            127.0.0.1 allprotections.com
            127.0.0.1 www.allprotections.com
            127.0.0.1 allresultz.net
            127.0.0.1 www.allresultz.net
            127.0.0.1 allsecuritynotes.com
            127.0.0.1 www.allsecuritynotes.com
            127.0.0.1 allsecuritysite.com
            127.0.0.1 www.allsecuritysite.com
            127.0.0.1 allstarsvideos.net
            127.0.0.1 www.allstarsvideos.net
            127.0.0.1 alltruesoftware.com
            127.0.0.1 www.alltruesoftware.com
            127.0.0.1 allvideoactivex.com
            127.0.0.1 www.allvideoactivex.com
            127.0.0.1 almanah.biz
            127.0.0.1 www.almanah.biz
            127.0.0.1 almarvideos.com
            127.0.0.1 aloitalia.it
            127.0.0.1 www.aloitalia.it
            127.0.0.1 aluitalia.it
            127.0.0.1 www.aluitalia.it
            127.0.0.1 amaena.com
            127.0.0.1 www.amaena.com
            127.0.0.1 amandamountains.com
            127.0.0.1 amateurliveshow.com
            127.0.0.1 www.amateurliveshow.com
            127.0.0.1 amediasoftware.com
            127.0.0.1 www.amediasoftware.com
            127.0.0.1 amediasource.com
            127.0.0.1 www.amediasource.com
            127.0.0.1 americancarbargains.com
            127.0.0.1 www.americancarbargains.com
            127.0.0.1 american-teens.net
            127.0.0.1 amigeek.com
            127.0.0.1 amisbusiness.com
            127.0.0.1 ampmsearch.com
            127.0.0.1 www.ampmsearch.com
            127.0.0.1 analcord.com
            127.0.0.1 www.analcord.com
            127.0.0.1 analmovi.com
            127.0.0.1 anarchylolita.com
            127.0.0.1 www.anarchylolita.com
            127.0.0.1 anarchyporn.com
            127.0.0.1 andromedical.com
            127.0.0.1 www.andromedical.com
            127.0.0.1 animepornmag.com
            127.0.0.1 www.animepornmag.com
            127.0.0.1 anin.org
            127.0.0.1 anjpn-avxiz.biz
            127.0.0.1 www.anjpn-avxiz.biz
            127.0.0.1 anjpnzqav.biz
            127.0.0.1 www.anjpnzqav.biz
            127.0.0.1 anjpn-zqav.biz
            127.0.0.1 www.anjpn-zqav.biz
            127.0.0.1 annaromeo.com
            127.0.0.1 antiddos.us
            127.0.0.1 www.antiddos.us
            127.0.0.1 Antiespiadorado.com
            127.0.0.1 www.Antiespiadorado.com
            127.0.0.1 Antiespionspack.com
            127.0.0.1 www.Antiespionspack.com
            127.0.0.1 Antigusanos2008.com
            127.0.0.1 www.Antigusanos2008.com
            127.0.0.1 Antispionage.com
            127.0.0.1 www.Antispionage.com
            127.0.0.1 Antispionagepro.com
            127.0.0.1 www.Antispionagepro.com
            127.0.0.1 antispydns.biz
            127.0.0.1 www.antispydns.biz
            127.0.0.1 antispylab.com
            127.0.0.1 www.antispylab.com
            127.0.0.1 antispysolutions.com
            127.0.0.1 www.antispysolutions.com
            127.0.0.1 antispyware.com
            127.0.0.1 www.antispyware.com
            127.0.0.1 antispywarebot.com
            127.0.0.1 www.antispywarebot.com
            127.0.0.1 antispywarebox.com
            127.0.0.1 www.antispywarebox.com
            127.0.0.1 antispywaredownloads.com
            127.0.0.1 www.antispywaredownloads.com
            127.0.0.1 Antispywaresuite.com
            127.0.0.1 www.Antispywaresuite.com
            127.0.0.1 Antispyweb.net
            127.0.0.1 www.Antispyweb.net
            127.0.0.1 Antiver2008.com
            127.0.0.1 www.Antiver2008.com
            127.0.0.1 antivermins.com
            127.0.0.1 www.antivermins.com
            127.0.0.1 anti-vermins.com
            127.0.0.1 www.anti-vermins.com
            127.0.0.1 antivir2007.com
            127.0.0.1 www.antivir2007.com
            127.0.0.1 antivirgear.com
            127.0.0.1 www.antivirgear.com
            127.0.0.1 antivirus.fastfreedownload.com
            127.0.0.1 www.antivirus.fastfreedownload.com
            127.0.0.1 antivirusgolden.com
            127.0.0.1 www.antivirusgolden.com
            127.0.0.1 antivirus-hq.net
            127.0.0.1 www.antivirus-hq.net
            127.0.0.1 anti-virus-pro.com
            127.0.0.1 www.anti-virus-pro.com
            127.0.0.1 antivirusprotector.com
            127.0.0.1 www.antivirusprotector.com
            127.0.0.1 antivirussecuritypro.com
            127.0.0.1 www.antivirussecuritypro.com
            127.0.0.1 antivirus-stop.com
            127.0.0.1 www.antivirus-stop.com
            127.0.0.1 Antiworm2008.com
            127.0.0.1 www.Antiworm2008.com
            127.0.0.1 Antiwurm2008.com
            127.0.0.1 www.Antiwurm2008.com
            127.0.0.1 antrocity.com
            127.0.0.1 anyofus.com
            127.0.0.1 www.anyofus.com
            127.0.0.1 anysn.seproger.com
            127.0.0.1 www.anysn.seproger.com
            127.0.0.1 anything4health.com
            127.0.0.1 apicpreview.com
            127.0.0.1 www.apicpreview.com
            127.0.0.1 appealcircuit.com
            127.0.0.1 www.appealcircuit.com
            127.0.0.1 approvedlinks.com
            127.0.0.1 www.approvedlinks.com
            127.0.0.1 apps.deskwizz.com
            127.0.0.1 apps.webservicehost.com
            127.0.0.1 aprotectedpage.com
            127.0.0.1 www.aprotectedpage.com
            127.0.0.1 apsua.com
            127.0.0.1 archiviosex.net
            127.0.0.1 www.archiviosex.net
            127.0.0.1 aregay.com
            127.0.0.1 ares-freebie.com
            127.0.0.1 www.ares-freebie.com
            127.0.0.1 arespro2007.com
            127.0.0.1 www.arespro2007.com
            127.0.0.1 aresultra.com
            127.0.0.1 www.aresultra.com
            127.0.0.1 ares-usa.com
            127.0.0.1 www.ares-usa.com
            127.0.0.1 arheo.com
            127.0.0.1 arizonaweb.org
            127.0.0.1 armitageinn.com
            127.0.0.1 arquivojpgs.smtp.ru
            127.0.0.1 www.arquivojpgs.smtp.ru
            127.0.0.1 artachnid.com
            127.0.0.1 art-func.com
            127.0.0.1 art-xxx.com
            127.0.0.1 asafebrowser.com
            127.0.0.1 www.asafebrowser.com
            127.0.0.1 asafetynotice.com
            127.0.0.1 www.asafetynotice.com
            127.0.0.1 asafetypage.com
            127.0.0.1 www.asafetypage.com
            127.0.0.1 asdbiz.biz
            127.0.0.1 www.asdbiz.biz
            127.0.0.1 asdeykuddq.com
            127.0.0.1 www.asdeykuddq.com
            127.0.0.1 asecurebar.com
            127.0.0.1 www.asecurebar.com
            127.0.0.1 asecureboard.com
            127.0.0.1 www.asecureboard.com
            127.0.0.1 asecurevalue.com
            127.0.0.1 www.asecurevalue.com
            127.0.0.1 asecurityissue.com
            127.0.0.1 www.asecurityissue.com
            127.0.0.1 asecuritynotice.com
            127.0.0.1 www.asecuritynotice.com
            127.0.0.1 asecuritypaper.com
            127.0.0.1 www.asecuritypaper.com
            127.0.0.1 asecuritystuff.com
            127.0.0.1 www.asecuritystuff.com
            127.0.0.1 asiankingkong.com
            127.0.0.1 asianpornmag.com
            127.0.0.1 www.asianpornmag.com
            127.0.0.1 asiantoolbar.com
            127.0.0.1 www.asiantoolbar.com
            127.0.0.1 asidseiupc.com
            127.0.0.1 www.asidseiupc.com
            127.0.0.1 aslitalia.it
            127.0.0.1 www.aslitalia.it
            127.0.0.1 ass-gals.com
            127.0.0.1 assureprotection.com
            127.0.0.1 www.assureprotection.com
            127.0.0.1 asta-killer.com
            127.0.0.1 asupereva.it
            127.0.0.1 www.asupereva.it
            127.0.0.1 athenrye.com
            127.0.0.1 atotalsafety.com
            127.0.0.1 www.atotalsafety.com
            127.0.0.1 atrueprotection.com
            127.0.0.1 www.atrueprotection.com
            127.0.0.1 atruesecurity.com
            127.0.0.1 www.atruesecurity.com
            127.0.0.1 attackware.com
            127.0.0.1 www.attackware.com
            127.0.0.1 attrezzi.biz
            127.0.0.1 www.attrezzi.biz
            127.0.0.1 aulde.net
            127.0.0.1 www.aulde.net
            127.0.0.1 aupereva.it
            127.0.0.1 www.aupereva.it
            127.0.0.1 autocontext.begun.ru
            127.0.0.1 www.autocontext.begun.ru
            127.0.0.1 autoescrowpay.com
            127.0.0.1 avast.free-software-center.com
            127.0.0.1 www.avast.free-software-center.com
            127.0.0.1 avast-2007.com
            127.0.0.1 www.avast-2007.com
            127.0.0.1 avast-downloads.com
            127.0.0.1 www.avast-downloads.com
            127.0.0.1 avast-hq.com
            127.0.0.1 www.avast-hq.com
            127.0.0.1 avforce.com
            127.0.0.1 www.avforce.com
            127.0.0.1 avg.grab-it-today.net
            127.0.0.1 www.avg.grab-it-today.net
            127.0.0.1 avg.softwarecenterz.com
            127.0.0.1 www.avg.softwarecenterz.com
            127.0.0.1 avg-secure.com
            127.0.0.1 www.avg-secure.com
            127.0.0.1 avian-ads.com
            127.0.0.1 avideoaxaccess.com
            127.0.0.1 www.avideoaxaccess.com
            127.0.0.1 avideosurfer.com
            127.0.0.1 www.avideosurfer.com
            127.0.0.1 aviewersoft.com
            127.0.0.1 www.aviewersoft.com
            127.0.0.1 avpcheckupdate.com
            127.0.0.1 www.avpcheckupdate.com
            127.0.0.1 avxizaaqada.biz
            127.0.0.1 www.avxizaaqada.biz
            127.0.0.1 avxiz-anjpn.biz
            127.0.0.1 www.avxiz-anjpn.biz
            127.0.0.1 avxizueorn.biz
            127.0.0.1 www.avxizueorn.biz
            127.0.0.1 avxiz-ueorn.biz
            127.0.0.1 www.avxiz-ueorn.biz
            127.0.0.1 avxiz-vtvcp.biz
            127.0.0.1 www.avxiz-vtvcp.biz
            127.0.0.1 avxiz-ygco.biz
            127.0.0.1 www.avxiz-ygco.biz
            127.0.0.1 avxiz-zqav.biz
            127.0.0.1 www.avxiz-zqav.biz
            127.0.0.1 awarninglist.com
            127.0.0.1 www.awarninglist.com
            127.0.0.1 awbeta.net-nucleus.com
            127.0.0.1 awesomehomepage.com
            127.0.0.1 www.awesomehomepage.com
            127.0.0.1 awmcash.biz
            127.0.0.1 awmdabest.com
            127.0.0.1 axemediasoftware.com
            127.0.0.1 www.axemediasoftware.com
            127.0.0.1 aximageobject.com
            127.0.0.1 www.aximageobject.com
            127.0.0.1 axmediaproject.com
            127.0.0.1 www.axmediaproject.com
            127.0.0.1 axmediasoftware.com
            127.0.0.1 www.axmediasoftware.com
            127.0.0.1 axmediasolutions.com
            127.0.0.1 www.axmediasolutions.com
            127.0.0.1 axobjectpage.com
            127.0.0.1 www.axobjectpage.com
            127.0.0.1 axobjectsource.com
            127.0.0.1 www.axobjectsource.com
            127.0.0.1 axsoftwaretool.com
            127.0.0.1 www.axsoftwaretool.com
            127.0.0.1 axvideoproject.com
            127.0.0.1 www.axvideoproject.com
            127.0.0.1 axvideosetup.com
            127.0.0.1 www.axvideosetup.com
            127.0.0.1 ayakawamura.com
            127.0.0.1 ayb.dns-look-up.com
            127.0.0.1 ayb.netbios-wait.com
            127.0.0.1 ayumitaniguchi.com
            127.0.0.1 azebar.com
            127.0.0.1 azureusclub.com
            127.0.0.1 www.azureusclub.com
            127.0.0.1 azureus-freebie.com
            127.0.0.1 www.azureus-freebie.com
            127.0.0.1 azzetta.it
            127.0.0.1 www.azzetta.it
            127.0.0.1 b.casalemedia.com
            127.0.0.1 babe.k-lined.com
            127.0.0.1 www.babe.k-lined.com
            127.0.0.1 babe.the-killer.bz
            127.0.0.1 www.babe.the-killer.bz
            127.0.0.1 babenet.com
            127.0.0.1 www.babenet.com
            127.0.0.1 babespornmag.com
            127.0.0.1 www.babespornmag.com
            127.0.0.1 babeweb.de
            127.0.0.1 www.babeweb.de
            127.0.0.1 baccarat-other.info
            127.0.0.1 www.baccarat-other.info
            127.0.0.1 Backstripgirls.com
            127.0.0.1 www.Backstripgirls.com
            127.0.0.1 backup.mabou.org
            127.0.0.1 balotierra.com
            127.0.0.1 www.balotierra.com
            127.0.0.1 bannedhost.net
            127.0.0.1 barbudafarms.com
            127.0.0.1 bardownload.com
            127.0.0.1 www.bardownload.com
            127.0.0.1 barnandfence.com
            127.0.0.1 batsearch.com
            127.0.0.1 baygraphicsllc.com
            127.0.0.1 bbbsearch.com
            127.0.0.1 bb-search.com
            127.0.0.1 bdsmlibrary.net
            127.0.0.1 bdsmpornmag.com
            127.0.0.1 www.bdsmpornmag.com
            127.0.0.1 bearshare.download-me.info
            127.0.0.1 www.bearshare.download-me.info
            127.0.0.1 bearshare.mp3-muzic.com
            127.0.0.1 www.bearshare.mp3-muzic.com
            127.0.0.1 bearshare-download.org
            127.0.0.1 www.bearshare-download.org
            127.0.0.1 bearshare-downloads.net
            127.0.0.1 www.bearshare-downloads.net
            127.0.0.1 bearsharelive.co.uk
            127.0.0.1 www.bearsharelive.co.uk
            127.0.0.1 bearshare-music-downloads.com
            127.0.0.1 www.bearshare-music-downloads.com
            127.0.0.1 bearsharepro2007.com
            127.0.0.1 www.bearsharepro2007.com
            127.0.0.1 bearshare-usa.com
            127.0.0.1 www.bearshare-usa.com
            127.0.0.1 bedhome.com
            127.0.0.1 bediadance.com
            127.0.0.1 beebappyy.biz
            127.0.0.1 www.beebappyy.biz
            127.0.0.1 begin2search.com
            127.0.0.1 www.begin2search.com
            127.0.0.1 bellabasketsfl.com
            127.0.0.1 bernaolatwin.com
            127.0.0.1 best-counter.com
            127.0.0.1 bestcrawler.com
            127.0.0.1 bestfor.ru
            127.0.0.1 best-hardpics.com
            127.0.0.1 bestmanage.org
            127.0.0.1 www.bestmanage.org
            127.0.0.1 bestmanage0.org
            127.0.0.1 www.bestmanage0.org
            127.0.0.1 bestmanage1.org
            127.0.0.1 www.bestmanage1.org
            127.0.0.1 bestmanage2.org
            127.0.0.1 www.bestmanage2.org
            127.0.0.1 bestmanage3.org
            127.0.0.1 www.bestmanage3.org
            127.0.0.1 bestmanage4.org
            127.0.0.1 www.bestmanage4.org
            127.0.0.1 bestmanage5.org
            127.0.0.1 www.bestmanage5.org
            127.0.0.1 bestmanage6.org
            127.0.0.1 www.bestmanage6.org
            127.0.0.1 bestmanage7.org
            127.0.0.1 www.bestmanage7.org
            127.0.0.1 bestmanage8.org
            127.0.0.1 www.bestmanage8.org
            127.0.0.1 bestmanage9.org
            127.0.0.1 www.bestmanage9.org
            127.0.0.1 bestporngate.com
            127.0.0.1 bestsafetyguide.net
            127.0.0.1 www.bestsafetyguide.net
            127.0.0.1 best-spyware.info
            127.0.0.1 www.best-spyware.info
            127.0.0.1 best-targeted-traffic.com
            127.0.0.1 www.best-targeted-traffic.com
            127.0.0.1 best-voyeur.info
            127.0.0.1 www.best-voyeur.info
            127.0.0.1 bestweblinks.com
            127.0.0.1 best-winning-casino.com
            127.0.0.1 bestworldgirls-for-u.net
            127.0.0.1 www.bestworldgirls-for-u.net
            127.0.0.1 bestxporno.com
            127.0.0.1 bettersearch.biz
            127.0.0.1 www.bettersearch.biz
            127.0.0.1 bgazzetta.it
            127.0.0.1 www.bgazzetta.it
            127.0.0.1 bgoogle.it
            127.0.0.1 www.bgoogle.it
            127.0.0.1 bigtrafficnetwork.com
            127.0.0.1 www.bigtrafficnetwork.com
            127.0.0.1 bigwww.com
            127.0.0.1 www.bigwww.com
            127.0.0.1 bin.errorprotector.com
            127.0.0.1 bins.media-motor.net
            127.0.0.1 bins2.media-motor.net
            127.0.0.1 bis.180solutions.com
            127.0.0.1 bitchesonline.net
            127.0.0.1 bitcomet-freebie.com
            127.0.0.1 www.bitcomet-freebie.com
            127.0.0.1 biz.biz
            127.0.0.1 blackblues00.com
            127.0.0.1 www.blackblues00.com
            127.0.0.1 blackhats.tc
            127.0.0.1 www.blackhats.tc
            127.0.0.1 blackhawksoftware.com
            127.0.0.1 www.blackhawksoftware.com
            127.0.0.1 blackjack-free.net
            127.0.0.1 blazefind.com
            127.0.0.1 blender.xu.pl
            127.0.0.1 blondetgp.com
            127.0.0.1 blue-elefant.com
            127.0.0.1 www.blue-elefant.com
            127.0.0.1 bm.theaimonline.com
            127.0.0.1 www.bm.theaimonline.com
            127.0.0.1 bnmgate.com
            127.0.0.1 www.bnmgate.com
            127.0.0.1 bodaciousbabette.com
            127.0.0.1 bonzi.com
            127.0.0.1 www.bonzi.com
            127.0.0.1 boobdoll.com
            127.0.0.1 boobsandtits.com
            127.0.0.1 boobsclub.com
            127.0.0.1 bookedspace.com
            127.0.0.1 www.bookedspace.com
            127.0.0.1 boom.com.vn
            127.0.0.1 www.boom.com.vn
            127.0.0.1 boredlife.com
            127.0.0.1 bowlofogumbo.com
            127.0.0.1 bpfq02.com
            127.0.0.1 www.bpfq02.com
            127.0.0.1 bqgate.com
            127.0.0.1 www.bqgate.com
            127.0.0.1 br.errorsafe.com
            127.0.0.1 br.winantivirus.com
            127.0.0.1 br.winfixer.com
            127.0.0.1 bradcoem.org
            127.0.0.1 braincodec.com
            127.0.0.1 www.braincodec.com
            127.0.0.1 brandiyoung.com
            127.0.0.1 bravesentry.com
            127.0.0.1 www.bravesentry.com
            127.0.0.1 breenten.biz
            127.0.0.1 www.breenten.biz
            127.0.0.1 brodbfm.net
            127.0.0.1 www.brodbfm.net
            127.0.0.1 brookeburn.com
            127.0.0.1 browserwise.com
            127.0.0.1 www.browserwise.com
            127.0.0.1 bucps.com
            127.0.0.1 buhartes.info
            127.0.0.1 buldog-stats.com
            127.0.0.1 bullseye-network.com
            127.0.0.1 www.bullseye-network.com
            127.0.0.1 burgerkingbigscreen.com
            127.0.0.1 burnsrecyclinginc.com
            127.0.0.1 www.burnsrecyclinginc.com
            127.0.0.1 buscards.net
            127.0.0.1 bustyrussell.com
            127.0.0.1 busysearch.net
            127.0.0.1 www.busysearch.net
            127.0.0.1 buttejazz.org
            127.0.0.1 buy-find.info
            127.0.0.1 www.buy-find.info
            127.0.0.1 buyselldomain.net
            127.0.0.1 buytraff.biz
            127.0.0.1 www.buytraff.biz
            127.0.0.1 buz.ru
            127.0.0.1 bvirgilio.it
            127.0.0.1 www.bvirgilio.it
            127.0.0.1 c.centralmedia.ws
            127.0.0.1 c.enhance.com
            127.0.0.1 www.c.enhance.com
            127.0.0.1 c.goclick.com
            127.0.0.1 c4tdownload.com
            127.0.0.1 www.c4tdownload.com
            127.0.0.1 c5.www4free.info
            127.0.0.1 www.c5.www4free.info
            127.0.0.1 cache.surfaccuracy.com
            127.0.0.1 www.cache.surfaccuracy.com
            127.0.0.1 cache.ysbweb.com
            127.0.0.1 calcioturris.com
            127.0.0.1 calendaralerts.net
            127.0.0.1 www.calendaralerts.net
            127.0.0.1 cameouk.co.uk
            127.0.0.1 www.cameouk.co.uk
            127.0.0.1 cameup.com
            127.0.0.1 camouflageclothingonline.net
            127.0.0.1 www.camouflageclothingonline.net
            127.0.0.1 camup.net
            127.0.0.1 canberracricketcoaching.com
            127.0.0.1 candycantaloupes.com
            127.0.0.1 canidetect.org
            127.0.0.1 www.canidetect.org
            127.0.0.1 cantfind.com
            127.0.0.1 www.cantfind.com
            127.0.0.1 careers.dulcineasystems.net
            127.0.0.1 carsands.com
            127.0.0.1 carsrentals.net
            127.0.0.1 cartoes.uol.com.br
            127.0.0.1 casalemedia.com
            127.0.0.1 www.casalemedia.com
            127.0.0.1 cashdeluxe.net
            127.0.0.1 www.cashdeluxe.net
            127.0.0.1 cashengines.com
            127.0.0.1 www.cashengines.com
            127.0.0.1 cashsearch.biz
            127.0.0.1 cashsurfers.com
            127.0.0.1 www.cashsurfers.com
            127.0.0.1 CashUnlim.com
            127.0.0.1 www.CashUnlim.com
            127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
            127.0.0.1 casino2win.net
            127.0.0.1 casino-gambling-1.net
            127.0.0.1 casino-gambling-2.net
            127.0.0.1 casinomidas.net
            127.0.0.1 casinonline.net
            127.0.0.1 casino-onlines.net
            127.0.0.1 castingsamateur.com
            127.0.0.1 www.castingsamateur.com
            127.0.0.1 catallogue.com
            127.0.0.1 catch-dc.info
            127.0.0.1 www.catch-dc.info
            127.0.0.1 categories.mygeek.com
            127.0.0.1 catsss.da.ru
            127.0.0.1 caxa.ru
            127.0.0.1 cc.panet.org
            127.0.0.1 ccecaedbebfcaf.com
            127.0.0.1 www.ccecaedbebfcaf.com
            127.0.0.1 cclebali.org
            127.0.0.1 ccorriere.it
            127.0.0.1 www.ccorriere.it
            127.0.0.1 cdegate.com
            127.0.0.1 www.cdegate.com
            127.0.0.1 cdn.drivecleaner.com
            127.0.0.1 cdn.errorsafe.com
            127.0.0.1 cdn.movies-etc.com
            127.0.0.1 cdn.winsoftware.com
            127.0.0.1 cdn2.movies-etc.com
            127.0.0.1 cdorriere.it
            127.0.0.1 www.cdorriere.it
            127.0.0.1 ceewawires.org
            127.0.0.1 centralmedia.ws
            127.0.0.1 certumgroup.com
            127.0.0.1 cforriere.it
            127.0.0.1 www.cforriere.it
            127.0.0.1 check.jupitersatellites.biz
            127.0.0.1 www.check.jupitersatellites.biz
            127.0.0.1 checkin100.com
            127.0.0.1 www.checkin100.com
            127.0.0.1 checkssecurity.com
            127.0.0.1 www.checkssecurity.com
            127.0.0.1 chelancatering.com
            127.0.0.1 chenshijituan.com
            127.0.0.1 www.chenshijituan.com
            127.0.0.1 childrenvilla.com
            127.0.0.1 chips-4-free.com
            127.0.0.1 chrisswasey.com
            127.0.0.1 chriswallace.net
            127.0.0.1 cia-trjn.myvnc.com
            127.0.0.1 www.cia-trjn.myvnc.com
            127.0.0.1 ciorriere.it
            127.0.0.1 www.ciorriere.it
            127.0.0.1 cirriere.it
            127.0.0.1 www.cirriere.it
            127.0.0.1 ckick4thumbs.com
            127.0.0.1 cl55.biz
            127.0.0.1 clackamasliteraryreview.com
            127.0.0.1 cleansoftwares.com
            127.0.0.1 www.cleansoftwares.com
            127.0.0.1 clearsearch.cc
            127.0.0.1 clearsearch.net
            127.0.0.1 clickaire.com
            127.0.0.1 click-codec.com
            127.0.0.1 www.click-codec.com
            127.0.0.1 clickhere4search.com
            127.0.0.1 www.clickhere4search.com
            127.0.0.1 click-now.net
            127.0.0.1 clickspring.net
            127.0.0.1 www.clickspring.net
            127.0.0.1 click-to-download.com
            127.0.0.1 www.click-to-download.com
            127.0.0.1 clicktomakeasearch.com
            127.0.0.1 www.clicktomakeasearch.com
            127.0.0.1 clickyestoenter.net
            127.0.0.1 client.exeupdate.com
            127.0.0.1 client.myadultexplorer.com
            127.0.0.1 cliks.org
            127.0.0.1 www.cliks.org
            127.0.0.1 clorriere.it
            127.0.0.1 www.clorriere.it
            127.0.0.1 clrsch.com
            127.0.0.1 clubxxxvideo.com
            127.0.0.1 www.clubxxxvideo.com
            127.0.0.1 clusif.free.fr
            127.0.0.1 cmtapestry.com
            127.0.0.1 cnetadd.com
            127.0.0.1 www.cnetadd.com
            127.0.0.1 cnzz.com
            127.0.0.1 www.cnzz.com
            127.0.0.1 code.ignphrases.com
            127.0.0.1 codec.ninoa.com
            127.0.0.1 codecdvd.net
            127.0.0.1 www.codecdvd.net
            127.0.0.1 codec-fun.com
            127.0.0.1 www.codec-fun.com
            127.0.0.1 codecsoft.net
            127.0.0.1 www.codecsoft.net
            127.0.0.1 codrriere.it
            127.0.0.1 www.codrriere.it
            127.0.0.1 coeriere.it
            127.0.0.1 www.coeriere.it
            127.0.0.1 coerriere.it
            127.0.0.1 www.coerriere.it
            127.0.0.1 cofrriere.it
            127.0.0.1 www.cofrriere.it
            127.0.0.1 cogrriere.it
            127.0.0.1 www.cogrriere.it
            127.0.0.1 coirriere.it
            127.0.0.1 www.coirriere.it
            127.0.0.1 command.adservs.com
            127.0.0.1 www.commonname.com
            127.0.0.1 computerpcgames.net
            127.0.0.1 www.computerpcgames.net
            127.0.0.1 computerrecover.com
            127.0.0.1 www.computerrecover.com
            127.0.0.1 config.180solutions.com
            127.0.0.1 content.dollarrevenue.com
            127.0.0.1 www.content.dollarrevenue.com
            127.0.0.1 content.ireit.com
            127.0.0.1 www.content.ireit.com
            127.0.0.1 content.onerateld.com
            127.0.0.1 contentmatch.net
            127.0.0.1 www.contentmatch.net
            127.0.0.1 contra-virus.com
            127.0.0.1 www.contra-virus.com
            127.0.0.1 controlmeh.com
            127.0.0.1 www.controlmeh.com
            127.0.0.1 cooldeskalert.com
            127.0.0.1 www.cooldeskalert.com
            127.0.0.1 coolfetishsite.com
            127.0.0.1 coolfreehost.com
            127.0.0.1 coolfreepage.com
            127.0.0.1 coolfreepages.com
            127.0.0.1 cool-homepage.co
            127.0.0.1 cool-homepage.com
            127.0.0.1 coolmoneysearch.com
            127.0.0.1 coolpornsearch.com
            127.0.0.1 cool-search.net
            127.0.0.1 cool-search.netfartpost.com
            127.0.0.1 coolsearcher.info
            127.0.0.1 coolservecorp.net
            127.0.0.1 www.coolservecorp.net
            127.0.0.1 coolwebsearch.com
            127.0.0.1 www.coolwebsearch.com
            127.0.0.1 cool-web-search.com
            127.0.0.1 coolwebsearsh.com
            127.0.0.1 coolwwwsearch.com
            127.0.0.1 www.coolwwwsearch.com
            127.0.0.1 cool-xxx.net
            127.0.0.1 coorriere.it
            127.0.0.1 www.coorriere.it
            127.0.0.1 copmtraine.com
            127.0.0.1 coprriere.it
            127.0.0.1 www.coprriere.it
            127.0.0.1 core.psyche-evolution.com
            127.0.0.1 www.core.psyche-evolution.com
            127.0.0.1 coreiere.it
            127.0.0.1 www.coreiere.it
            127.0.0.1 coreriere.it
            127.0.0.1 www.coreriere.it
            127.0.0.1 corrdiere.it
            127.0.0.1 www.corrdiere.it
            127.0.0.1 correiere.it
            127.0.0.1 www.correiere.it
            127.0.0.1 corrfiere.it
            127.0.0.1 www.corrfiere.it
            127.0.0.1 corrgiere.it
            127.0.0.1 www.corrgiere.it
            127.0.0.1 corridere.it
            127.0.0.1 www.corridere.it
            127.0.0.1 corriedre.it
            127.0.0.1 www.corriedre.it
            127.0.0.1 corriee.it
            127.0.0.1 www.corriee.it
            127.0.0.1 corrieere.it
            127.0.0.1 www.corrieere.it
            127.0.0.1 corriefre.it
            127.0.0.1 www.corriefre.it
            127.0.0.1 corriegre.it
            127.0.0.1 www.corriegre.it
            127.0.0.1 corrierde.it
            127.0.0.1 www.corrierde.it
            127.0.0.1 corriered.it
            127.0.0.1 www.corriered.it
            127.0.0.1 corrieree.it
            127.0.0.1 www.corrieree.it
            127.0.0.1 corrieref.it
            127.0.0.1 www.corrieref.it
            127.0.0.1 corrierer.it
            127.0.0.1 www.corrierer.it
            127.0.0.1 corrieres.it
            127.0.0.1 www.corrieres.it
            127.0.0.1 corrierew.it
            127.0.0.1 www.corrierew.it
            127.0.0.1 corrierfe.it
            127.0.0.1 www.corrierfe.it
            127.0.0.1 corrierge.it
            127.0.0.1 www.corrierge.it
            127.0.0.1 corrierr.it
            127.0.0.1 www.corrierr.it
            127.0.0.1 corrierre.it
            127.0.0.1 www.corrierre.it
            127.0.0.1 corrierse.it
            127.0.0.1 www.corrierse.it
            127.0.0.1 corrierte.it
            127.0.0.1 www.corrierte.it
            127.0.0.1 corrierw.it
            127.0.0.1 www.corrierw.it
            127.0.0.1 corrierwe.it
            127.0.0.1 www.corrierwe.it
            127.0.0.1 corriesre.it
            127.0.0.1 www.corriesre.it
            127.0.0.1 corriete.it
            127.0.0.1 www.corriete.it
            127.0.0.1 corrietre.it
            127.0.0.1 www.corrietre.it
            127.0.0.1 corriewre.it
            127.0.0.1 www.corriewre.it
            127.0.0.1 corrifere.it
            127.0.0.1 www.corrifere.it
            127.0.0.1 corriiere.it
            127.0.0.1 www.corriiere.it
            127.0.0.1 corrilere.it
            127.0.0.1 www.corrilere.it
            127.0.0.1 corrioere.it
            127.0.0.1 www.corrioere.it
            127.0.0.1 corrire.it
            127.0.0.1 www.corrire.it
            127.0.0.1 corrirere.it
            127.0.0.1 www.corrirere.it
            127.0.0.1 corrirre.it
            127.0.0.1 www.corrirre.it
            127.0.0.1 corrisere.it
            127.0.0.1 www.corrisere.it
            127.0.0.1 corriuere.it
            127.0.0.1 www.corriuere.it
            127.0.0.1 corriwere.it
            127.0.0.1 www.corriwere.it
            127.0.0.1 corriwre.it
            127.0.0.1 www.corriwre.it
            127.0.0.1 corrliere.it
            127.0.0.1 www.corrliere.it
            127.0.0.1 corroere.it
            127.0.0.1 www.corroere.it
            127.0.0.1 corroiere.it
            127.0.0.1 www.corroiere.it
            127.0.0.1 corrriere.it
            127.0.0.1 www.corrriere.it
            127.0.0.1 corrtiere.it
            127.0.0.1 www.corrtiere.it
            127.0.0.1 corruere.it
            127.0.0.1 www.corruere.it
            127.0.0.1 corruiere.it
            127.0.0.1 www.corruiere.it
            127.0.0.1 cortiere.it
            127.0.0.1 www.cortiere.it
            127.0.0.1 cortriere.it
            127.0.0.1 www.cortriere.it
            127.0.0.1 costrike.com
            127.0.0.1 www.costrike.com
            127.0.0.1 cotriere.it
            127.0.0.1 www.cotriere.it
            127.0.0.1 cotrriere.it
            127.0.0.1 www.cotrriere.it
            127.0.0.1 couldnotfind.com
            127.0.0.1 count.cc
            127.0.0.1 count.hitscount.net
            127.0.0.1 count-all.com
            127.0.0.1 countdutycall.info
            127.0.0.1 www.countdutycall.info
            127.0.0.1 counter.sexmaniack.com
            127.0.0.1 cporriere.it
            127.0.0.1 www.cporriere.it
            127.0.0.1 cprriere.it
            127.0.0.1 www.cprriere.it
            127.0.0.1 cpvfeed.com
            127.0.0.1 cracks.me.uk
            127.0.0.1 cracks4all.com
            127.0.0.1 www.cracks4all.com
            127.0.0.1 crapsgold.info
            127.0.0.1 www.crapsgold.info
            127.0.0.1 Crazygirls-world.com
            127.0.0.1 crazywinnings.com
            127.0.0.1 www.crazywinnings.com
            127.0.0.1 creamedcutties.com
            127.0.0.1 createaccesskey.com
            127.0.0.1 www.createaccesskey.com
            127.0.0.1 creditsearchonline.com
            127.0.0.1 crestring.com
            127.0.0.1 crooder.com
            127.0.0.1 crriere.it
            127.0.0.1 www.crriere.it
            127.0.0.1 crystalysmedia.com
            127.0.0.1 www.crystalysmedia.com
            127.0.0.1 csx.adservs.com
            127.0.0.1 www.csx.adservs.com
            127.0.0.1 cts.180solutions.com
            127.0.0.1 cuisinartoven.com
            127.0.0.1 www.cuisinartoven.com
            127.0.0.1 curedc.info
            127.0.0.1 www.curedc.info
            127.0.0.1 curepcsolutions.com
            127.0.0.1 www.curepcsolutions.com
            127.0.0.1 curvedspaces.com
            127.0.0.1 cutadult.com
            127.0.0.1 www.cutadult.com
            127.0.0.1 cvirgilio.it
            127.0.0.1 www.cvirgilio.it
            127.0.0.1 cvorriere.it
            127.0.0.1 www.cvorriere.it
            127.0.0.1 cvs.jps.ru
            127.0.0.1 cvsymphony.com
            127.0.0.1 cxorriere.it
            127.0.0.1 www.cxorriere.it
            127.0.0.1 cyberrape.com
            127.0.0.1 www.cyberrape.com
            127.0.0.1 cydom.com
            127.0.0.1 cydoor.com
            127.0.0.1 www.cydoor.com
            127.0.0.1 daily-gals.com
            127.0.0.1 dailypornmag.com
            127.0.0.1 www.dailypornmag.com
            127.0.0.1 dailyteenspic.com
            127.0.0.1 dailytoolbar.com
            127.0.0.1 www.dailytoolbar.com
            127.0.0.1 dancingbabycd.com
            127.0.0.1 data-hoster.com
            127.0.0.1 www.data-hoster.com
            127.0.0.1 datanotary.com
            127.0.0.1 datareco.com
            127.0.0.1 dating-galaxy.info
            127.0.0.1 www.dating-galaxy.info
            127.0.0.1 dating-search.net
            127.0.0.1 davemarshall.org
            127.0.0.1 db105.com
            127.0.0.1 dbdecicated.com
            127.0.0.1 www.dbdecicated.com
            127.0.0.1 dbxcompany.com
            127.0.0.1 www.dbxcompany.com
            127.0.0.1 dcdl.dmcast.com
            127.0.0.1 dcfitusa.com
            127.0.0.1 dcorriere.it
            127.0.0.1 www.dcorriere.it
            127.0.0.1 dcurtis.com
            127.0.0.1 www.dcurtis.com
            127.0.0.1 dcww.dmcast.com
            127.0.0.1 de.ag
            127.0.0.1 de.drivecleaner.com
            127.0.0.1 de.errorsafe.com
            127.0.0.1 de.winantivirus.com
            127.0.0.1 de98.remsys.org
            127.0.0.1 debay.it
            127.0.0.1 www.debay.it
            127.0.0.1 dedmazay.3322.org
            127.0.0.1 dedsearch.com
            127.0.0.1 www.dedsearch.com
            127.0.0.1 defaultsearch.net
            127.0.0.1 Defensaantimalware.com
            127.0.0.1 www.Defensaantimalware.com
            127.0.0.1 deja-rue.com
            127.0.0.1 www.deja-rue.com
            127.0.0.1 derklaif.biz
            127.0.0.1 www.derklaif.biz
            127.0.0.1 derrari.it
            127.0.0.1 www.derrari.it
            127.0.0.1 desarrollocreativo.com
            127.0.0.1 deskbar.worldtostart.com
            127.0.0.1 www.deskbar.worldtostart.com
            127.0.0.1 deskwizz.com
            127.0.0.1 www.deskwizz.com
            127.0.0.1 dev.ntcor.com
            127.0.0.1 develip.com
            127.0.0.1 dewis.spb.ru
            127.0.0.1 dewis.us
            127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
            127.0.0.1 dgbusiness.com
            127.0.0.1 www.dgbusiness.com
            127.0.0.1 dialer2004.com
            127.0.0.1 dialerclub.com
            127.0.0.1 www.dialerclub.com
            127.0.0.1 dialer-shop.com
            127.0.0.1 www.dialer-shop.com
            127.0.0.1 dialoff.com
            127.0.0.1 www.dialoff.com
            127.0.0.1 did.i-used.cc
            127.0.0.1 www.did.i-used.cc
            127.0.0.1 dietpills4free.com
            127.0.0.1 dietpussy.com
            127.0.0.1 digikeygen.com
            127.0.0.1 www.digikeygen.com
            127.0.0.1 digistreamsa.com
            127.0.0.1 digitalcoders.net
            127.0.0.1 www.digitalcoders.net
            127.0.0.1 www.digitalfan.com
            127.0.0.1 digital-pornography.com
            127.0.0.1 dionforvalleycouncil.org
            127.0.0.1 directdvdpro.com
            127.0.0.1 www.directdvdpro.com
            127.0.0.1 directporta.info
            127.0.0.1 www.directporta.info
            127.0.0.1 directsearchzone.com
            127.0.0.1 www.directsearchzone.com
            127.0.0.1 dist.checkin100.com
            127.0.0.1 dl.ad-ware.cc
            127.0.0.1 dl.malwarewipe.com
            127.0.0.1 dl.targetsaver.com
            127.0.0.1 www.dl.targetsaver.com
            127.0.0.1 dl.web-nexus.net
            127.0.0.1 dl1.antivermins.com
            127.0.0.1 dl1.antivirgear.com
            127.0.0.1 dl1.spydawn.com
            127.0.0.1 dl1.virusprotectpro.com
            127.0.0.1 dl10.spyfalcon.com
            127.0.0.1 dl16.spyfalcon.com
            127.0.0.1 dl2.spyfalcon.com
            127.0.0.1 dl2.spyheal.com
            127.0.0.1 dl2.spywarestrike.com
            127.0.0.1 dl3.spyfalcon.com
            127.0.0.1 dl3.spyheal.com
            127.0.0.1 dl3.spywarestrike.com
            127.0.0.1 dl4.spyfalcon.com
            127.0.0.1 dl4.spywarestrike.com
            127.0.0.1 dl5.spyfalcon.com
            127.0.0.1 dl5.spywarestrike.com
            127.0.0.1 dl6.spywarestrike.com
            127.0.0.1 dl7.spywarestrike.com
            127.0.0.1 dl8.spyheal.com
            127.0.0.1 dl8.spywarestrike.com
            127.0.0.1 dl9.spyfalcon.com
            127.0.0.1 dmcast.com
            127.0.0.1 www.dmcast.com
            127.0.0.1 dnaads.com
            127.0.0.1 www.dnaads.com
            127.0.0.1 dnl.mabou.org
            127.0.0.1 dns-look-up.com
            127.0.0.1 www.dns-look-up.com
            127.0.0.1 doctorwaldron.com
            127.0.0.1 document-not-found.pornpic.org
            127.0.0.1 doggyaction.com
            127.0.0.1 dogproblemswebsite.com
            127.0.0.1 www.dogproblemswebsite.com
            127.0.0.1 doktorxxx.com
            127.0.0.1 dollarrevenue.com
            127.0.0.1 domaincar.com
            127.0.0.1 www.domaincar.com
            127.0.0.1 domains2003.net
            127.0.0.1 domains-for-you-online.com
            127.0.0.1 domain-your-registration.com
            127.0.0.1 domkrat.com
            127.0.0.1 dotcomtoolbar.com
            127.0.0.1 www.dotcomtoolbar.com
            127.0.0.1 down.136136.net
            127.0.0.1 download.abetterinternet.com
            127.0.0.1 download.antispywarebot.com
            127.0.0.1 www.download.antispywarebot.com
            127.0.0.1 download.bardownload.com
            127.0.0.1 www.download.bardownload.com
            127.0.0.1 download.bravesentry.com
            127.0.0.1 www.download.bravesentry.com
            127.0.0.1 download.cdn.drivecleaner.com
            127.0.0.1 download.cdn.errorsafe.com
            127.0.0.1 download.cdn.winsoftware.com
            127.0.0.1 download.errorsafe.com
            127.0.0.1 download.jupitersatellites.biz
            127.0.0.1 www.download.jupitersatellites.biz
            127.0.0.1 download.searchtabs.net
            127.0.0.1 download.secureyournet.biz
            127.0.0.1 www.download.secureyournet.biz
            127.0.0.1 download.spyonthis.net
            127.0.0.1 download.spy-shredder.com
            127.0.0.1 download.systemdoctor.com
            127.0.0.1 download.winantispyware.com
            127.0.0.1 download.winantivirus.com
            127.0.0.1 download.windrivecleaner.com
            127.0.0.1 download.winfixer.com
            127.0.0.1 download10.spywarequake.com
            127.0.0.1 download11.spywarequake.com
            127.0.0.1 download12.spywarequake.com
            127.0.0.1 download13.spywarequake.com
            127.0.0.1 download15.spywarequake.com
            127.0.0.1 download2.spywarequake.com
            127.0.0.1 download-2007.com
            127.0.0.1 www.download-2007.com
            127.0.0.1 download3.spyaxe.com
            127.0.0.1 download3.spywarequake.com
            127.0.0.1 download4.spyaxe.com
            127.0.0.1 download4.spywarequake.com
            127.0.0.1 download5.spyaxe.com
            127.0.0.1 download5.spywarequake.com
            127.0.0.1 download6.spyaxe.com
            127.0.0.1 download7.spywarequake.com
            127.0.0.1 download8.spywarequake.com
            127.0.0.1 download9.spywarequake.com
            127.0.0.1 download-ad-aware.com
            127.0.0.1 www.download-ad-aware.com
            127.0.0.1 download-all-4-free.com
            127.0.0.1 www.download-all-4-free.com
            127.0.0.1 download-all-area.com
            127.0.0.1 www.download-all-area.com
            127.0.0.1 download-antivir.com
            127.0.0.1 www.download-antivir.com
            127.0.0.1 downloadanysong.com
            127.0.0.1 www.downloadanysong.com
            127.0.0.1 download-avast.com
            127.0.0.1 www.download-avast.com
            127.0.0.1 downloadcorporation.com
            127.0.0.1 www.downloadcorporation.com
            127.0.0.1 download-dvdshrink.com
            127.0.0.1 www.download-dvdshrink.com
            127.0.0.1 download-for-free.net
            127.0.0.1 www.download-for-free.net
            127.0.0.1 downloadfreesoft.com
            127.0.0.1 www.downloadfreesoft.com
            127.0.0.1 downloadfreeway.com
            127.0.0.1 www.downloadfreeway.com
            127.0.0.1 downloadimesh.com
            127.0.0.1 www.downloadimesh.com
            127.0.0.1 download-itunes-now.com
            127.0.0.1 www.download-itunes-now.com
            127.0.0.1 download-limewire.org
            127.0.0.1 www.download-limewire.org
            127.0.0.1 downloadlost.tv
            127.0.0.1 www.downloadlost.tv
            127.0.0.1 downloadmax.net
            127.0.0.1 www.downloadmax.net
            127.0.0.1 download-mcafee.com
            127.0.0.1 www.download-mcafee.com
            127.0.0.1 download-me.info
            127.0.0.1 downloadmediaax.com
            127.0.0.1 www.downloadmediaax.com
            127.0.0.1 downloadpics.net
            127.0.0.1 www.downloadpics.net
            127.0.0.1 download-real-player.com
            127.0.0.1 www.download-real-player.com
            127.0.0.1 downloads.180solutions.com
            127.0.0.1 downloads.adaware.cc
            127.0.0.1 downloadservicearea.com
            127.0.0.1 www.downloadservicearea.com
            127.0.0.1 downloads-free.org
            127.0.0.1 www.downloads-free.org
            127.0.0.1 downloadsglobe.com
            127.0.0.1 www.downloadsglobe.com
            127.0.0.1 download-this.us
            127.0.0.1 www.download-this.us
            127.0.0.1 download-trillian.com
            127.0.0.1 www.download-trillian.com
            127.0.0.1 downloadv3.com
            127.0.0.1 www.downloadv3.com
            127.0.0.1 downloadvax.com
            127.0.0.1 www.downloadvax.com
            127.0.0.1 download-windvd.com
            127.0.0.1 www.download-windvd.com
            127.0.0.1 download-winrar.com
            127.0.0.1 www.download-winrar.com
            127.0.0.1 downloadwizard.com
            127.0.0.1 downloadzcenter.com
            127.0.0.1 downloadzcentral.com
            127.0.0.1 downloadzfree.com
            127.0.0.1 www.downloadzfree.com
            127.0.0.1 downloadznow.net
            127.0.0.1 download-zone-free.com
            127.0.0.1 www.download-zone-free.com
            127.0.0.1 download-zone-free.net
            127.0.0.1 www.download-zone-free.net
            127.0.0.1 dp-host.com
            127.0.0.1 dr.mcboo.com
            127.0.0.1 dr.webhancer.com
            127.0.0.1 www.dr.webhancer.com
            127.0.0.1 dr2.webhancer.com
            127.0.0.1 www.dr2.webhancer.com
            127.0.0.1 dr38.mcboo.com
            127.0.0.1 dr47.mcboo.com
            127.0.0.1 dragqueen.gay-clan.com
            127.0.0.1 drepubblica.it
            127.0.0.1 www.drepubblica.it
            127.0.0.1 drivecleaner.com
            127.0.0.1 www.drivecleaner.com
            127.0.0.1 drivecleanr.com
            127.0.0.1 www.drivecleanr.com
            127.0.0.1 drocherway.com
            127.0.0.1 dropspam.com
            127.0.0.1 www.dropspam.com
            127.0.0.1 drug-sources-exposed.com
            127.0.0.1 drvvv.com
            127.0.0.1 dsupereva.it
            127.0.0.1 www.dsupereva.it
            127.0.0.1 dtlproduct.com
            127.0.0.1 www.dtlproduct.com
            127.0.0.1 dudu.com
            127.0.0.1 www.dudu.com
            127.0.0.1 dulcineasystems.net
            127.0.0.1 dumpserv.com
            127.0.0.1 duolaimi.net
            127.0.0.1 dutch-sex.com
            127.0.0.1 dvdaccess.net
            127.0.0.1 www.dvdaccess.net
            127.0.0.1 dvdbank.org
            127.0.0.1 dvdcodec.net
            127.0.0.1 www.dvdcodec.net
            127.0.0.1 dvdsmovies.net
            127.0.0.1 www.dvdsmovies.net
            127.0.0.1 dvdsvideos.net
            127.0.0.1 www.dvdsvideos.net
            127.0.0.1 dvdtocdsite.com
            127.0.0.1 www.dvdtocdsite.com
            127.0.0.1 dynamique.drivecleaner.com
            127.0.0.1 e3bay.it
            127.0.0.1 www.e3bay.it
            127.0.0.1 e4bay.it
            127.0.0.1 www.e4bay.it
            127.0.0.1 eager-sex.com
            127.0.0.1 earthllnk.net
            127.0.0.1 www.earthllnk.net
            127.0.0.1 eases.net
            127.0.0.1 easyantispy.com
            127.0.0.1 easybestdeals.com
            127.0.0.1 www.easybestdeals.com
            127.0.0.1 easycategories.com
            127.0.0.1 easymp3musicnow.com
            127.0.0.1 www.easymp3musicnow.com
            127.0.0.1 easy-pharmacy.info
            127.0.0.1 www.easy-pharmacy.info
            127.0.0.1 easy-search.net
            127.0.0.1 easysearch4you.com
            127.0.0.1 www.easysearch4you.com
            127.0.0.1 easysearchingtips.com
            127.0.0.1 easyspyware.com
            127.0.0.1 www.easyspyware.com
            127.0.0.1 easywww.info
            127.0.0.1 www.easywww.info
            127.0.0.1 eba6y.it
            127.0.0.1 www.eba6y.it
            127.0.0.1 eba7y.it
            127.0.0.1 www.eba7y.it
            127.0.0.1 ebaay.it
            127.0.0.1 www.ebaay.it
            127.0.0.1 ebagy.it
            127.0.0.1 www.ebagy.it
            127.0.0.1 ebahy.it
            127.0.0.1 www.ebahy.it
            127.0.0.1 ebajy.it
            127.0.0.1 www.ebajy.it
            127.0.0.1 ebaqy.it
            127.0.0.1 www.ebaqy.it
            127.0.0.1 ebasy.it
            127.0.0.1 www.ebasy.it
            127.0.0.1 ebaty.it
            127.0.0.1 www.ebaty.it
            127.0.0.1 ebauy.it
            127.0.0.1 www.ebauy.it
            127.0.0.1 ebav.com
            127.0.0.1 ebaw.com
            127.0.0.1 ebawy.it
            127.0.0.1 www.ebawy.it
            127.0.0.1 ebaxy.it
            127.0.0.1 www.ebaxy.it
            127.0.0.1 ebay6.it
            127.0.0.1 www.ebay6.it
            127.0.0.1 ebay7.it
            127.0.0.1 www.ebay7.it
            127.0.0.1 ebayg.it
            127.0.0.1 www.ebayg.it
            127.0.0.1 ebayh.it
            127.0.0.1 www.ebayh.it
            127.0.0.1 ebayj.it
            127.0.0.1 www.ebayj.it
            127.0.0.1 ebayt.it
            127.0.0.1 www.ebayt.it
            127.0.0.1 ebayu.it
            127.0.0.1 www.ebayu.it
            127.0.0.1 ebazy.it
            127.0.0.1 www.ebazy.it
            127.0.0.1 ebch.com
            127.0.0.1 ebdv.com
            127.0.0.1 ebdw.com
            127.0.0.1 ebestfind.org
            127.0.0.1 www.ebestfind.org
            127.0.0.1 ebgay.it
            127.0.0.1 www.ebgay.it
            127.0.0.1 ebgo.com
            127.0.0.1 ebhay.it
            127.0.0.1 www.ebhay.it
            127.0.0.1 ebjp.com
            127.0.0.1 ebkb.com
            127.0.0.1 ebkn.com
            127.0.0.1 ebky.com
            127.0.0.1 eblv.com
            127.0.0.1 ebmu.com
            127.0.0.1 ebnay.it
            127.0.0.1 www.ebnay.it
            127.0.0.1 ebony-pornmag.com
            127.0.0.1 www.ebony-pornmag.com
            127.0.0.1 ebonypornmag.com
            127.0.0.1 www.ebonypornmag.com
            127.0.0.1 ebqay.it
            127.0.0.1 www.ebqay.it
            127.0.0.1 ebsay.it
            127.0.0.1 www.ebsay.it
            127.0.0.1 ebsy.it
            127.0.0.1 www.ebsy.it
            127.0.0.1 ebvay.it
            127.0.0.1 www.ebvay.it
            127.0.0.1 ebvr.com
            127.0.0.1 ebway.it
            127.0.0.1 www.ebway.it
            127.0.0.1 ebxay.it
            127.0.0.1 www.ebxay.it
            127.0.0.1 ebzay.it
            127.0.0.1 www.ebzay.it
            127.0.0.1 ecmh.com
            127.0.0.1 ecmp.com
            127.0.0.1 ecosrioplatenses.org
            127.0.0.1 ecpm.com
            127.0.0.1 ecstasyporn.net
            127.0.0.1 ecwz.com
            127.0.0.1 ecyb.com
            127.0.0.1 edbay.it
            127.0.0.1 www.edbay.it
            127.0.0.1 edhq.com
            127.0.0.1 edietprogram.com
            127.0.0.1 www.edietprogram.com
            127.0.0.1 edty.com
            127.0.0.1 eduy.com
            127.0.0.1 eebay.it
            127.0.0.1 www.eebay.it
            127.0.0.1 eeev.com
            127.0.0.1 eepubblica.it
            127.0.0.1 www.eepubblica.it
            127.0.0.1 efbay.it
            127.0.0.1 www.efbay.it
            127.0.0.1 egbay.it
            127.0.0.1 www.egbay.it
            127.0.0.1 ehbay.it
            127.0.0.1 www.ehbay.it
            127.0.0.1 eikokoike.com
            127.0.0.1 elitecodec.com
            127.0.0.1 www.elitecodec.com
            127.0.0.1 elitemediagroup.net
            127.0.0.1 www.elitemediagroup.net
            127.0.0.1 e-localad.com
            127.0.0.1 emailicon.org
            127.0.0.1 www.emailicon.org
            127.0.0.1 emch.com
            127.0.0.1 emcodec.com
            127.0.0.1 www.emcodec.com
            127.0.0.1 emediacodec.com
            127.0.0.1 www.emediacodec.com
            127.0.0.1 emule.mp3-muzic.com
            127.0.0.1 www.emule.mp3-muzic.com
            127.0.0.1 emuledownloadhome.com
            127.0.0.1 www.emuledownloadhome.com
            127.0.0.1 emule-freebie.com
            127.0.0.1 www.emule-freebie.com
            127.0.0.1 enay.it
            127.0.0.1 www.enay.it
            127.0.0.1 enbay.it
            127.0.0.1 www.enbay.it
            127.0.0.1 energy-factor.com
            127.0.0.1 www.energy-factor.com
            127.0.0.1 engineplay.com
            127.0.0.1 www.engineplay.com
            127.0.0.1 engine-ticket.com
            127.0.0.1 www.engine-ticket.com
            127.0.0.1 enhance.com
            127.0.0.1 www.enhance.com
            127.0.0.1 enhancevideos.com
            127.0.0.1 www.enhancevideos.com
            127.0.0.1 enitinvest.net
            127.0.0.1 enjoywebsurf.com
            127.0.0.1 entertainsite.net
            127.0.0.1 www.entertainsite.net
            127.0.0.1 enterthesearch.com
            127.0.0.1 www.enterthesearch.com
            127.0.0.1 e-plus.cc
            127.0.0.1 epornsex.com
            127.0.0.1 eprotectionline.com
            127.0.0.1 www.eprotectionline.com
            127.0.0.1 eprotectpage.com
            127.0.0.1 www.eprotectpage.com
            127.0.0.1 erbay.it
            127.0.0.1 www.erbay.it
            127.0.0.1 erepubblica.it
            127.0.0.1 www.erepubblica.it
            127.0.0.1 ergosites.com
            127.0.0.1 erossoalice.it
            127.0.0.1 www.erossoalice.it
            127.0.0.1 errari.it
            127.0.0.1 www.errari.it
            127.0.0.1 error404site.com
            127.0.0.1 www.error404site.com
            127.0.0.1 error404site.net
            127.0.0.1 www.error404site.net
            127.0.0.1 errorkiller.com
            127.0.0.1 www.errorkiller.com
            127.0.0.1 errorprotector.com
            127.0.0.1 www.errorprotector.com
            127.0.0.1 errorsafe.com
            127.0.0.1 www.errorsafe.com
            127.0.0.1 errorsdns.com
            127.0.0.1 www.errorsdns.com
            127.0.0.1 ert0003.e76.163ns.com
            127.0.0.1 ertikadeswiokinganfujas.com
            127.0.0.1 www.ertikadeswiokinganfujas.com
            127.0.0.1 es.winantivirus.com
            127.0.0.1 es0-www.5zgmu7o20kt5d8yq.com
            127.0.0.1 es1-www.5zgmu7o20kt5d8yq.com
            127.0.0.1 es2-www.5zgmu7o20kt5d8yq.com
            127.0.0.1 es3-www.5zgmu7o20kt5d8yq.com
            127.0.0.1 es4-www.5zgmu7o20kt5d8yq.com
            127.0.0.1 es5-www.5zgmu7o20kt5d8yq.com
            127.0.0.1 es6-www.5zgmu7o20kt5d8yq.com
            127.0.0.1 es7-www.5zgmu7o20kt5d8yq.com
            127.0.0.1 es8-www.5zgmu7o20kt5d8yq.com
            127.0.0.1 es9-www.5zgmu7o20kt5d8yq.com
            127.0.0.1 esafetylist.com
            127.0.0.1 www.esafetylist.com
            127.0.0.1 esafetypage.com
            127.0.0.1 www.esafetypage.com
            127.0.0.1 esbay.it
            127.0.0.1 www.esbay.it
            127.0.0.1 esearch2005.com
            127.0.0.1 www.esearch2005.com
            127.0.0.1 esecuritynote.com
            127.0.0.1 www.esecuritynote.com
            127.0.0.1 esecuritypage.com
            127.0.0.1 www.esecuritypage.com
            127.0.0.1 esupereva.it
            127.0.0.1 www.esupereva.it
            127.0.0.1 etomi.all-downloads-now.com
            127.0.0.1 www.etomi.all-downloads-now.com
            127.0.0.1 eupdatepage.com
            127.0.0.1 www.eupdatepage.com
            127.0.0.1 euuu.com
            127.0.0.1 evbay.it
            127.0.0.1 www.evbay.it
            127.0.0.1 evidence-detector.biz
            127.0.0.1 evilspidercomics.com
            127.0.0.1 evko.biz
            127.0.0.1 www.evko.biz
            127.0.0.1 ewbay.it
            127.0.0.1 www.ewbay.it
            127.0.0.1 ewebsearch.net
            127.0.0.1 e-websitesolutions.com
            127.0.0.1 ewizard.cc
            127.0.0.1 exaccess.ru
            127.0.0.1 www.exaccess.ru
            127.0.0.1 excellentsckin.com
            127.0.0.1 exeupdate.com
            127.0.0.1 www.exeupdate.com
            127.0.0.1 exflow.org
            127.0.0.1 www.exflow.org
            127.0.0.1 exit.megago.com
            127.0.0.1 expandvideo.com
            127.0.0.1 www.expandvideo.com
            127.0.0.1 exportplay.com
            127.0.0.1 www.exportplay.com
            127.0.0.1 extremepaidsurveys.com
            127.0.0.1 www.extremepaidsurveys.com
            127.0.0.1 extremeseek.net
            127.0.0.1 eza1netsearch.com
            127.0.0.1 www.eza1netsearch.com
            127.0.0.1 ezcybersearch.com
            127.0.0.1 www.ezcybersearch.com
            127.0.0.1 ez-searching.com
            127.0.0.1 ezwebsearching.com
            127.0.0.1 www.ezwebsearching.com
            127.0.0.1 f1.bestmanage.org
            127.0.0.1 f1.truth-is-out-there.org
            127.0.0.1 f1organizer.com
            127.0.0.1 www.f1organizer.com
            127.0.0.1 f2.bestmanage.org
            127.0.0.1 f2.truth-is-out-there.org
            127.0.0.1 f3.bestmanage.org
            127.0.0.1 f3.truth-is-out-there.org
            127.0.0.1 f4.bestmanage.org
            127.0.0.1 f4.truth-is-out-there.org
            127.0.0.1 f5.bestmanage.org
            127.0.0.1 f5.truth-is-out-there.org
            127.0.0.1 f6.bestmanage.org
            127.0.0.1 f7.bestmanage.org
            127.0.0.1 f7.truth-is-out-there.org
            127.0.0.1 f8.bestmanage.org
            127.0.0.1 f8.truth-is-out-there.org
            127.0.0.1 f9.bestmanage.org
            127.0.0.1 f9.truth-is-out-there.org
            127.0.0.1 fairsearcher.com
            127.0.0.1 www.fairsearcher.com
            127.0.0.1 faithstevens.com
            127.0.0.1 fantasiewelten.com
            127.0.0.1 farmacept32.phpnet.us
            127.0.0.1 farmsteadbandb.com
            127.0.0.1 farse.com
            127.0.0.1 fartpost.com
            127.0.0.1 fastfreedownload.com
            127.0.0.1 fastmetasearch.com
            127.0.0.1 www.fastmetasearch.com
            127.0.0.1 fastssearch.com
            127.0.0.1 www.fastssearch.com
            127.0.0.1 fastwebfinder.com
            127.0.0.1 faxporn.com
            127.0.0.1 fazzetta.it
            127.0.0.1 www.fazzetta.it
            127.0.0.1 fcorriere.it
            127.0.0.1 www.fcorriere.it
            127.0.0.1 featured-results.com
            127.0.0.1 febay.it
            127.0.0.1 www.febay.it
            127.0.0.1 feed.dedsearch.com
            127.0.0.1 feeds.2search.com
            127.0.0.1 www.feeds.2search.com
            127.0.0.1 feeds2.2search.org
            127.0.0.1 www.feeds2.2search.org
            127.0.0.1 ferraeri.it
            127.0.0.1 www.ferraeri.it
            127.0.0.1 ferrai.it
            127.0.0.1 www.ferrai.it
            127.0.0.1 ferrarei.it
            127.0.0.1 www.ferrarei.it
            127.0.0.1 ferrarti.it
            127.0.0.1 www.ferrarti.it
            127.0.0.1 ferrasri.it
            127.0.0.1 www.ferrasri.it
            127.0.0.1 ferratri.it
            127.
            1. Salut pour suivre ... pour info c'est un rookti TSServer qui fait ca...
              1. Bonjour,

                Comme demandé, ci-dessous le rapport Hijackthis
                Merci

                Logfile of Trend Micro HijackThis v2.0.2
                Scan saved at 14:54:57, on 24/11/2008
                Platform: Windows Vista (WinNT 6.00.1904)
                MSIE: Internet Explorer v7.00 (7.00.6000.16757)
                Boot mode: Normal

                Running processes:
                C:\Windows\system32\taskeng.exe
                C:\Windows\system32\Dwm.exe
                C:\Windows\Explorer.EXE
                C:\Windows\vsnp2std.exe
                C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
                C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                C:\Program Files\iTunes\iTunesHelper.exe
                C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
                C:\Program Files\Logitech\QuickCam\Quickcam.exe
                C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                C:\Program Files\Windows Media Player\wmpnscfg.exe
                C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                C:\Windows\system32\wbem\unsecapp.exe
                C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
                C:\Windows\system32\wuauclt.exe
                C:\Windows\system32\conime.exe
                C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
                C:\Users\Tony\AppData\Local\Temp\~tmpa.exe
                C:\Windows\system32\regsvr32.exe
                C:\Program Files\Internet Explorer\iexplore.exe
                C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
                C:\Windows\system32\taskeng.exe
                C:\Program Files\Mozilla Firefox\firefox.exe
                C:\Windows\system32\SearchFilterHost.exe
                C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                O1 - Hosts: ::1 localhost
                O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                O2 - BHO: searchersmart search enhancer - {247E05CF-35BE-C43A-A61D-51BC4B11B5D8} - C:\Windows\system32\lfmbvmqfkntoibp.dll
                O2 - BHO: 892267 helper - {25E0128D-AAFC-49FF-AB11-1F12C2FCC391} - (no file)
                O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
                O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
                O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
                O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
                O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
                O2 - BHO: offersfortoday browser enhancer - {EE01C848-FBCD-9D47-66D3-BD284CB5FFC6} - C:\Windows\system32\pudyiuallzdcw.dll
                O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                O3 - Toolbar: (no name) - {92162A1C-A9E3-4C0C-BCDC-2996E8406887} - (no file)
                O3 - Toolbar: (no name) - {70CC76D5-A4EE-4F25-9931-B109A63E298E} - (no file)
                O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
                O4 - HKLM\..\Run: [snp2std] C:\Windows\vsnp2std.exe
                O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
                O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
                O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\Windows\system32\spool\drivers\w32x86\3\hpztsb06.exe
                O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
                O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
                O4 - HKLM\..\Run: [kshfqjugwa] C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\pudyiuallzdcw.dll"
                O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                O4 - HKCU\..\Run: [lphcep2j0elfc] C:\Windows\system32\lphcep2j0elfc.exe
                O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                O4 - HKCU\..\Run: [Cognac] C:\Users\Tony\AppData\Local\Temp\~tmpb.exe
                O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                O4 - HKCU\..\Run: [MSFox] C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
                O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
                O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
                O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
                O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
                O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
                O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
                O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                O13 - Gopher Prefix:
                O17 - HKLM\System\CCS\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
                O17 - HKLM\System\CCS\Services\Tcpip\..\{F555EB53-4738-4A5E-97EF-74029A4200DA}: NameServer = 212.27.54.252,212.27.53.252
                O17 - HKLM\System\CS1\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
                O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
                O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
                O21 - SSODL: bmlvqkn - {E5C9FD6F-D3F8-4704-8FE2-C37A27A7107F} - (no file)
                O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\Windows\SYSTEM32\crypserv.exe
                O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
                O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
                O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
                O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
                O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
                O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
                O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
                O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
                O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
                1. Hi,

                  maintenant fait ceci:

                  ==>>Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.<<===

                  Toolbar-S&D

                  !! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

                  * double-cliques sur l'.exe pour lancer l'installe et laisses toi guider ...

                  * Une fois fait, cliques sur le raccourci créé sur ton bureau pour lancer l'outil .

                  * Choisis l'option 1 ( "recherche") et tapes "entrée" .

                  * Une fois le scan finit , un rapport va apparaître, copie/colles l'intégralité
                  de son contenu dans ta prochaine réponse ...

                  ( le rapport est en outre sauvegardé ici -> C:\TB.txt )

                  Alut.
                  1. Salut, pour info : le rapport hijackthis est celui d'hier avant le nettoyage de Smitfraudfix, donc c'est pour cela que l'infection a toujours l'air d'etre présente... Peux-tu envoyer un nouveau log hijackthis ! il a 3 jours son rapport!
                  2. -----------\\ ToolBar S&D 1.2.5 XP/Vista

                    Microsoft® Windows Vista™ Professionnel ( v6.0.6001 ) Service Pack 1
                    X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4600+ )
                    BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
                    USER : Tony ( Not Administrator ! )
                    BOOT : Normal boot
                    Antivirus : avast! antivirus 4.8.1201 [VPS 081124-0] 4.8.1201 (Activated)
                    C:\ (Local Disk) - NTFS - Total:222 Go (Free:146 Go)
                    D:\ (Local Disk) - NTFS - Total:9 Go (Free:6 Go)
                    E:\ (CD or DVD)

                    "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
                    Option : [1] ( 27/11/2008|11:12 )

                    [ UAC => 1 ]

                    -----------\\ Recherche de Fichiers / Dossiers ...

                    C:\Program Files\AskTBar
                    C:\Program Files\AskTBar\bar
                    C:\Program Files\AskTBar\PopSwatr
                    C:\Program Files\AskTBar\SrchAstt
                    C:\Program Files\AskTBar\bar\1.bin
                    C:\Program Files\AskTBar\bar\Cache
                    C:\Program Files\AskTBar\bar\History
                    C:\Program Files\AskTBar\bar\Settings
                    C:\Program Files\AskTBar\bar\1.bin\A5POPSWT.DLL
                    C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                    C:\Program Files\AskTBar\bar\Cache\004B3E1A
                    C:\Program Files\AskTBar\bar\Cache\004B422F
                    C:\Program Files\AskTBar\bar\Cache\004B4403.bin
                    C:\Program Files\AskTBar\bar\Cache\004B45B8.bin
                    C:\Program Files\AskTBar\bar\Cache\004B471E.bin
                    C:\Program Files\AskTBar\bar\Cache\files.ini
                    C:\Program Files\AskTBar\bar\History\search2
                    C:\Program Files\AskTBar\bar\Settings\prevcfg2.htm
                    C:\Program Files\AskTBar\PopSwatr\History
                    C:\Program Files\AskTBar\PopSwatr\History\allowed
                    C:\Program Files\AskTBar\PopSwatr\History\notallow
                    C:\Program Files\AskTBar\SrchAstt\1.bin
                    C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                    C:\Users\Tony\AppData\Roaming\MICROS~1\Windows\Cookies\tony@mysearch[2].txt

                    -----------\\ [..\Internet Explorer\Main]

                    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                    "Local Page"="C:\\Windows\\system32\\blank.htm"
                    "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                    "Start Page"="about:blank"
                    "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                    "Url"="https://www.msn.com/fr-fr/actualite/"

                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                    "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"
                    "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
                    "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                    "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                    "Local Page"="C:\\windows\\system32\\blank.htm"

                    --------------------\\ Recherche d'autres infections

                    C:\Program Files\InternetGameBox
                    C:\Program Files\InternetGameBox\Conditions g‚n‚rales.url
                    C:\Program Files\InternetGameBox\Confidentialit‚.url
                    C:\Program Files\InternetGameBox\language
                    C:\Program Files\InternetGameBox\ressources
                    C:\Program Files\InternetGameBox\skins
                    C:\Program Files\InternetGameBox\Website.url
                    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox
                    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Conditions g‚n‚rales.lnk
                    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Confidentialit‚.lnk
                    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\InternetGameBox.lnk
                    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Website.lnk

                    C:\Users\Tony\AppData\Local\pdxpqpitva.dat
                    C:\Users\Tony\AppData\Local\pdxpqpitva_nav.dat
                    C:\Users\Tony\AppData\Local\pdxpqpitva_navps.dat
                    [b]==> EGDACCESS <==/b

                    --------------------\\ ROGUES ..

                    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\AntiSpyGolden 5.1
                    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Spyware-Secure
                    C:\Users\Tony\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Spyware-Secure

                    --------------------\\ Cracks & Keygens ..

                    C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul
                    C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\maxsea10-mapmedia crack.rar
                    C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul
                    C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\INSTALL.LOG
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Crack Isobourse & Infos Confidentielles Investir + Boursier.com + Gagner en Bourse en 2007 !.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\CrackMapMediaMaps.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\IsoBourse + Crack + Serial + Infos Confidentielles Investir + Boursier.com + Bons Plans Trades pour 2007 !.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 10.1.3.2_ full + crack (PERFECT & EASY) (2).lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 10.1.3.2_ full + crack (PERFECT & EASY).lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\MAXSEA 10.132. + CRACK + WORLDWIDE VECTOR.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\MAXSEA 10.132. + CRACK + WORLDWIDE VECTOR.RAR.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 12 , Le Crack Qui Fonctionne !!! Fr.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 12 Keygen.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea v 12.1.1.6+crack v plaisance.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\MaxSea v12 CRACK CODES (2).lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea v12 Crack Codes.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\maxsea10-mapmedia crack (2).lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\maxsea10-mapmedia crack.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\[Crack] Maxsea 12 Keygen (Ok).lnk
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132. + CRACK + WORLDWIDE VECTOR.RAR
                    C:\Users\Tony\Downloads\eMule\Incoming\Maxsea v 12.1.1.6+crack v plaisance.rar
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\CrackMapMediaMaps.txt
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\maxsea10-mapmedia crack.rar
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\MaxSea10MapMediaCrack.exe
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\CMengDriver.dll
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\MAXSEA10Full.REG
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SENTEMUL.EXE
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuDel.bat
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuInst.bat
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuStart.bat
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuStop.bat
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\INSTALL.LOG
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\SentEmul.sys

                    [ UAC => 1 ]

                    1 - "C:\ToolBar SD\TB_1.txt" - 27/11/2008|11:13 - Option : [1]

                    -----------\\ Fin du rapport a 11:13:35,59
                2. Hi,

                  Nettoyage avec ToolBar S&D :

                  !! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

                  Relances Toolbar-S&D en double-cliquant sur le raccourci.
                  -->Tapes sur l'option 2 ( "nettoyage" ) puis tapes sur "Entrée".

                  Note : ne touches à rien lors de la suppression !

                  Un rapport sera généré à la fin du processus : postes son contenu dans ta prochaine réponse

                  accompagné d'un nouveau rapport hijackthis pour analyse ... =>un nouveau cette fois ci.

                  merci
                  1. ci-dessous Rapport Toolbar + rapport Hijackthis
                    Merci

                    -----------\\ ToolBar S&D 1.2.5 XP/Vista

                    Microsoft® Windows Vista™ Professionnel ( v6.0.6001 ) Service Pack 1
                    X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4600+ )
                    BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
                    USER : Tony ( Not Administrator ! )
                    BOOT : Normal boot
                    Antivirus : avast! antivirus 4.8.1201 [VPS 081124-0] 4.8.1201 (Activated)
                    C:\ (Local Disk) - NTFS - Total:222 Go (Free:146 Go)
                    D:\ (Local Disk) - NTFS - Total:9 Go (Free:6 Go)
                    E:\ (CD or DVD)

                    "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
                    Option : [1] ( 27/11/2008|11:12 )

                    [ UAC => 1 ]

                    -----------\\ Recherche de Fichiers / Dossiers ...

                    C:\Program Files\AskTBar
                    C:\Program Files\AskTBar\bar
                    C:\Program Files\AskTBar\PopSwatr
                    C:\Program Files\AskTBar\SrchAstt
                    C:\Program Files\AskTBar\bar\1.bin
                    C:\Program Files\AskTBar\bar\Cache
                    C:\Program Files\AskTBar\bar\History
                    C:\Program Files\AskTBar\bar\Settings
                    C:\Program Files\AskTBar\bar\1.bin\A5POPSWT.DLL
                    C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                    C:\Program Files\AskTBar\bar\Cache\004B3E1A
                    C:\Program Files\AskTBar\bar\Cache\004B422F
                    C:\Program Files\AskTBar\bar\Cache\004B4403.bin
                    C:\Program Files\AskTBar\bar\Cache\004B45B8.bin
                    C:\Program Files\AskTBar\bar\Cache\004B471E.bin
                    C:\Program Files\AskTBar\bar\Cache\files.ini
                    C:\Program Files\AskTBar\bar\History\search2
                    C:\Program Files\AskTBar\bar\Settings\prevcfg2.htm
                    C:\Program Files\AskTBar\PopSwatr\History
                    C:\Program Files\AskTBar\PopSwatr\History\allowed
                    C:\Program Files\AskTBar\PopSwatr\History\notallow
                    C:\Program Files\AskTBar\SrchAstt\1.bin
                    C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                    C:\Users\Tony\AppData\Roaming\MICROS~1\Windows\Cookies\tony@mysearch[2].txt

                    -----------\\ [..\Internet Explorer\Main]

                    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                    "Local Page"="C:\\Windows\\system32\\blank.htm"
                    "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                    "Start Page"="about:blank"
                    "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                    "Url"="https://www.msn.com/fr-fr/actualite/"

                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                    "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"
                    "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
                    "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                    "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                    "Local Page"="C:\\windows\\system32\\blank.htm"

                    --------------------\\ Recherche d'autres infections

                    C:\Program Files\InternetGameBox
                    C:\Program Files\InternetGameBox\Conditions g‚n‚rales.url
                    C:\Program Files\InternetGameBox\Confidentialit‚.url
                    C:\Program Files\InternetGameBox\language
                    C:\Program Files\InternetGameBox\ressources
                    C:\Program Files\InternetGameBox\skins
                    C:\Program Files\InternetGameBox\Website.url
                    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox
                    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Conditions g‚n‚rales.lnk
                    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Confidentialit‚.lnk
                    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\InternetGameBox.lnk
                    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\InternetGameBox\Website.lnk

                    C:\Users\Tony\AppData\Local\pdxpqpitva.dat
                    C:\Users\Tony\AppData\Local\pdxpqpitva_nav.dat
                    C:\Users\Tony\AppData\Local\pdxpqpitva_navps.dat
                    [b]==> EGDACCESS <==/b

                    --------------------\\ ROGUES ..

                    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\AntiSpyGolden 5.1
                    C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\Spyware-Secure
                    C:\Users\Tony\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Spyware-Secure

                    --------------------\\ Cracks & Keygens ..

                    C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul
                    C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\maxsea10-mapmedia crack.rar
                    C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul
                    C:\Users\Tony\AppData\Local\VirtualStore\Program Files\MaxSea\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\INSTALL.LOG
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Crack Isobourse & Infos Confidentielles Investir + Boursier.com + Gagner en Bourse en 2007 !.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\CrackMapMediaMaps.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\IsoBourse + Crack + Serial + Infos Confidentielles Investir + Boursier.com + Bons Plans Trades pour 2007 !.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 10.1.3.2_ full + crack (PERFECT & EASY) (2).lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 10.1.3.2_ full + crack (PERFECT & EASY).lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\MAXSEA 10.132. + CRACK + WORLDWIDE VECTOR.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\MAXSEA 10.132. + CRACK + WORLDWIDE VECTOR.RAR.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 12 , Le Crack Qui Fonctionne !!! Fr.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea 12 Keygen.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea v 12.1.1.6+crack v plaisance.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\MaxSea v12 CRACK CODES (2).lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\Maxsea v12 Crack Codes.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\maxsea10-mapmedia crack (2).lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\maxsea10-mapmedia crack.lnk
                    C:\Users\Tony\AppData\Roaming\Microsoft\Windows\Recent\[Crack] Maxsea 12 Keygen (Ok).lnk
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132. + CRACK + WORLDWIDE VECTOR.RAR
                    C:\Users\Tony\Downloads\eMule\Incoming\Maxsea v 12.1.1.6+crack v plaisance.rar
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\CrackMapMediaMaps.txt
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\maxsea10-mapmedia crack.rar
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\MaxSea10MapMediaCrack.exe
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\CMengDriver.dll
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\MAXSEA10Full.REG
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SENTEMUL.EXE
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuDel.bat
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuInst.bat
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuStart.bat
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\EmuStop.bat
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\INSTALL.LOG
                    C:\Users\Tony\Downloads\eMule\Incoming\MAXSEA 10.132\Crack MaxSea 10.1.3.2 seul\SentEmul\SentEmul.sys

                    [ UAC => 1 ]

                    1 - "C:\ToolBar SD\TB_1.txt" - 27/11/2008|11:13 - Option : [1]

                    -----------\\ Fin du rapport a 11:13:35,59

                    Logfile of Trend Micro HijackThis v2.0.2
                    Scan saved at 14:54:57, on 24/11/2008
                    Platform: Windows Vista (WinNT 6.00.1904)
                    MSIE: Internet Explorer v7.00 (7.00.6000.16757)
                    Boot mode: Normal

                    Running processes:
                    C:\Windows\system32\taskeng.exe
                    C:\Windows\system32\Dwm.exe
                    C:\Windows\Explorer.EXE
                    C:\Windows\vsnp2std.exe
                    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
                    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                    C:\Program Files\iTunes\iTunesHelper.exe
                    C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
                    C:\Program Files\Logitech\QuickCam\Quickcam.exe
                    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                    C:\Program Files\Windows Media Player\wmpnscfg.exe
                    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                    C:\Windows\system32\wbem\unsecapp.exe
                    C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
                    C:\Windows\system32\wuauclt.exe
                    C:\Windows\system32\conime.exe
                    C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
                    C:\Users\Tony\AppData\Local\Temp\~tmpa.exe
                    C:\Windows\system32\regsvr32.exe
                    C:\Program Files\Internet Explorer\iexplore.exe
                    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
                    C:\Windows\system32\taskeng.exe
                    C:\Program Files\Mozilla Firefox\firefox.exe
                    C:\Windows\system32\SearchFilterHost.exe
                    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                    R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                    O1 - Hosts: ::1 localhost
                    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                    O2 - BHO: searchersmart search enhancer - {247E05CF-35BE-C43A-A61D-51BC4B11B5D8} - C:\Windows\system32\lfmbvmqfkntoibp.dll
                    O2 - BHO: 892267 helper - {25E0128D-AAFC-49FF-AB11-1F12C2FCC391} - (no file)
                    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                    O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
                    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
                    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                    O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
                    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                    O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
                    O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
                    O2 - BHO: offersfortoday browser enhancer - {EE01C848-FBCD-9D47-66D3-BD284CB5FFC6} - C:\Windows\system32\pudyiuallzdcw.dll
                    O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                    O3 - Toolbar: (no name) - {92162A1C-A9E3-4C0C-BCDC-2996E8406887} - (no file)
                    O3 - Toolbar: (no name) - {70CC76D5-A4EE-4F25-9931-B109A63E298E} - (no file)
                    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                    O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                    O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                    O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
                    O4 - HKLM\..\Run: [snp2std] C:\Windows\vsnp2std.exe
                    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
                    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
                    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\Windows\system32\spool\drivers\w32x86\3\hpztsb06.exe
                    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
                    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
                    O4 - HKLM\..\Run: [kshfqjugwa] C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\pudyiuallzdcw.dll"
                    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                    O4 - HKCU\..\Run: [lphcep2j0elfc] C:\Windows\system32\lphcep2j0elfc.exe
                    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                    O4 - HKCU\..\Run: [Cognac] C:\Users\Tony\AppData\Local\Temp\~tmpb.exe
                    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                    O4 - HKCU\..\Run: [MSFox] C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
                    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
                    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
                    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
                    O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                    O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                    O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
                    O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
                    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
                    O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
                    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                    O13 - Gopher Prefix:
                    O17 - HKLM\System\CCS\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
                    O17 - HKLM\System\CCS\Services\Tcpip\..\{F555EB53-4738-4A5E-97EF-74029A4200DA}: NameServer = 212.27.54.252,212.27.53.252
                    O17 - HKLM\System\CS1\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
                    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
                    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
                    O21 - SSODL: bmlvqkn - {E5C9FD6F-D3F8-4704-8FE2-C37A27A7107F} - (no file)
                    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                    O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\Windows\SYSTEM32\crypserv.exe
                    O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
                    O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
                    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
                    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
                    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
                    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
                    O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
                    O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
                    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
                3. Hi;

                  Ben vous laisse terminer ce topic du fait que c'est la rebellion sur ce topic.

                  Bonne bourre.

                  Alut.
                  1. Bien vu !!

                    belle réaction d'adulte.

                    Franchement , si tu n'acceptes rien des autres , je ne vois pas ce que tu fais sur un forum d'entraide. ET si tu veux un coup de main pour continuer dans ta solitude , il n'y a qu'à demander, je vais t'aider !!

                4. Hi,

                  POUR INFO LORSQUE JE DOUTE JE DEMANDE.

                  ENSUITE LE TOOLBARD ETAIT PREVUE .

                  ET ENSUITE JE REDEMANDE TOUJOURS UN HIJACKTHIS.

                  DE PLUS MEME SI INFECTION APRES PASSAGE DE TEL OU TEL OUTILS JE LE VERRAIS TRES BIEN.

                  MAINTENANT LES REMARQUES VENANT DE CERTAINS SUR CE FORUM ET DE PLUS PITOYABLE LORSQUE L'ON VOIT LE RESULTAT.

                5. Hi,

                  A oué je ne croit pas et la loin de la.

                  Car je m'explique au puis non regarde le mp que je t'es faits.
                  1. Pourquoi veux-tu t'expliquer en MP... La preuve est là, devant nous ! le " helpé " depuis le début t'as envoyé 3 fois le meme rapport hijackthis et tu ne l'as pas vu ! il n'y a aucun complot ( tu appelles ça " rebellion, je crois???), je te l'ai juste fais remarqué gentiment dans le but de t'aider, mais surtout d'aider le " helpé ".
                  2. @Utilisateur anonymeBonjour Feelgood1

                    Je suis resté en plan avec mon problème depuis hier midi .
                    Puis-je, s'il te plait, te soumettre mon problème ?
                    A bientôt.
                  3. @tyfuSalut Tyfu, ce que tu peux faire, c'est envoyer un Nouveau rapport Hijackthis, il faut refaire à chaque demande de rapport une nouvelle manipulation " Do a scan and save a logfile" >>> un nouveau rapport >> copie/colle le dans ta reponse !
                  4. @Utilisateur anonymeLogfile of Trend Micro HijackThis v2.0.2
                    Scan saved at 14:54:57, on 24/11/2008
                    Platform: Windows Vista (WinNT 6.00.1904)
                    MSIE: Internet Explorer v7.00 (7.00.6000.16757)
                    Boot mode: Normal

                    Running processes:
                    C:\Windows\system32\taskeng.exe
                    C:\Windows\system32\Dwm.exe
                    C:\Windows\Explorer.EXE
                    C:\Windows\vsnp2std.exe
                    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
                    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
                    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                    C:\Program Files\iTunes\iTunesHelper.exe
                    C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
                    C:\Program Files\Logitech\QuickCam\Quickcam.exe
                    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                    C:\Program Files\Windows Media Player\wmpnscfg.exe
                    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                    C:\Windows\system32\wbem\unsecapp.exe
                    C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
                    C:\Windows\system32\wuauclt.exe
                    C:\Windows\system32\conime.exe
                    C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
                    C:\Users\Tony\AppData\Local\Temp\~tmpa.exe
                    C:\Windows\system32\regsvr32.exe
                    C:\Program Files\Internet Explorer\iexplore.exe
                    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
                    C:\Windows\system32\taskeng.exe
                    C:\Program Files\Mozilla Firefox\firefox.exe
                    C:\Windows\system32\SearchFilterHost.exe
                    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/ig/dell?hl=fr&client=dell-row&channel=fr&ibd=4070221
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                    R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                    R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                    O1 - Hosts: ::1 localhost
                    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                    O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                    O2 - BHO: searchersmart search enhancer - {247E05CF-35BE-C43A-A61D-51BC4B11B5D8} - C:\Windows\system32\lfmbvmqfkntoibp.dll
                    O2 - BHO: 892267 helper - {25E0128D-AAFC-49FF-AB11-1F12C2FCC391} - (no file)
                    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                    O2 - BHO: EoBho Class - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll (file missing)
                    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
                    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                    O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
                    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
                    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                    O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
                    O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
                    O2 - BHO: offersfortoday browser enhancer - {EE01C848-FBCD-9D47-66D3-BD284CB5FFC6} - C:\Windows\system32\pudyiuallzdcw.dll
                    O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                    O3 - Toolbar: (no name) - {92162A1C-A9E3-4C0C-BCDC-2996E8406887} - (no file)
                    O3 - Toolbar: (no name) - {70CC76D5-A4EE-4F25-9931-B109A63E298E} - (no file)
                    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                    O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                    O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
                    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                    O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
                    O4 - HKLM\..\Run: [snp2std] C:\Windows\vsnp2std.exe
                    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
                    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
                    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
                    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\Windows\system32\spool\drivers\w32x86\3\hpztsb06.exe
                    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
                    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
                    O4 - HKLM\..\Run: [kshfqjugwa] C:\Windows\System32\regsvr32.exe /s "C:\Windows\system32\pudyiuallzdcw.dll"
                    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                    O4 - HKCU\..\Run: [lphcep2j0elfc] C:\Windows\system32\lphcep2j0elfc.exe
                    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                    O4 - HKCU\..\Run: [Cognac] C:\Users\Tony\AppData\Local\Temp\~tmpb.exe
                    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
                    O4 - HKCU\..\Run: [MSFox] C:\Users\Tony\AppData\Local\Temp\xxx8227.exe
                    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
                    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
                    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~3.0_0\bin\ssv.dll
                    O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                    O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
                    O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
                    O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.gateietool.com/redirect.php (file missing)
                    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
                    O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
                    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                    O13 - Gopher Prefix:
                    O17 - HKLM\System\CCS\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
                    O17 - HKLM\System\CCS\Services\Tcpip\..\{F555EB53-4738-4A5E-97EF-74029A4200DA}: NameServer = 212.27.54.252,212.27.53.252
                    O17 - HKLM\System\CS1\Services\Tcpip\..\{2BD24680-F08B-402A-96AB-0909D55D91A9}: NameServer = 212.27.32.176,212.27.32.177
                    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
                    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
                    O21 - SSODL: bmlvqkn - {E5C9FD6F-D3F8-4704-8FE2-C37A27A7107F} - (no file)
                    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
                    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                    O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\Windows\SYSTEM32\crypserv.exe
                    O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
                    O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
                    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                    O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
                    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
                    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
                    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
                    O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
                    O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
                    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
                  5. @tyfuTu n'as rien compris, je t'ai demandé de refaire la Manipulation avec Hijackthis afin d'obtenir un nouveau rapport Hijacthis, le tien est daté du 24/11 !
                6. T'as la mémoire courte?

                  Tu veux que je restaure les posts

                  Je te cite :

                  Et pour info dégage.cela ne change en rien la désinfection.
                  
                  
                  Tais toi donc vas changer ta couche et de plus il et l'heure de prendre ton biberont ..........


                  BRAVO !!

                  1. Hi,

                    Fait le moi personnellement je dit ce que je pense et puis c'est tout.

                    Sa plait ou plait pas......................

                    Je n'ai aucun reproche sur ce coup la.

                    Alut.

                    PS;tout ce que sa fait c'est de pourrir un topic pour rien.

                    1. Hi,

                      Vous laisse tranquille maintenant.

                      Alut.

                      PS:Le mp envoyer a noctambule:http://www.commentcamarche.net/forum/message 248169 un probleme?#3
                      1. Tu sais pourquoi cela s'appelle des MP ?
                        C'est parce que c'est privé, donc il n'y a que toi et moi qui puissions le voir, donc le lien est bien inutile pour les autres.
                    2. salut

                      T'es plus infecté encore qu'hier

                      refait smitfraud ,option 1et 2, et ensuite tu reboot, et ensuite tu fais un hijackthis neuf.

                      je passerais voir tard dans la soirée
                      • 1
                      • 2