analyse de log svp

Sécurité et insécurité. Virus, Trojans, Spywares, Failles etc. …

Modérateur: Modérateurs et Modératrices

Règles du forum
Assiste.com a suspendu l'assistance à la décontamination après presque 15 ans sur l'ancien forum puis celui-ci. Voir :

Procédure de décontamination 1 - Anti-malware
Décontamination anti-malwares

Procédure de décontamination 2 - Anti-malware et antivirus (La Manip)
La Manip - Procédure standard de décontamination

Entretien périodique d'un PC sous Windows
Entretien périodique d'un PC sous Windows

Protection des navigateurs, de la navigation et de la vie privée
Protéger le navigateur, la navigation et la vie privée

Messagede nickW » 19 Aoû 2005, 17:42

Re-bonjour,

Pour les trois lignes "Windows Security Center.FirewallDisableNotify", lire:
http://newpages.safer-networking.org/fr/faq/46.html


Pour la ligne "Log: Activity: SchedLgU.Txt", lire:
http://newpages.safer-networking.org/fr/faq/6.html


Pour la ligne "PSGuard: Réglages",
Trouvé sur le forum officiel de Spybot-S&D:
http://forums.net-integration.net/index ... 32658&st=0

1/ Version "Cette clé est totalement inactive, donc je m'en moque"

"PSGuard tripote les permissions de cette clé, ainsi elle ne peut pas être supprimée normalement. Si c'est le seul problème qui reste, je suggère de ne pas se tracasser à son sujet, c'est-à-dire de l'ignorer."

2/ Version "Je ne peux plus vivre si cette clé reste sur mon PC".

"Télécharger
http://users.pandora.be/bluepatchy/Psguardregfix.zip

Décompresser l'archive et faire un double clic sur shudder.bat. Envoyer le log en réponse."
Note importante: Je n'ai aucun moyen de tester cette solution. A tes risques et périls.

Re-salut,
nickW - Image
30/07/2012: Plus de désinfection de PC jusqu'à nouvel ordre.
Pas de demande d'analyse de log en MP (Message Privé)
Mes configs
Avatar de l’utilisateur
nickW
Modérateur
 
Messages: 21698
Inscription: 20 Mai 2004, 17:41
Localisation: Dordogne/Île de France

Messagede nickW » 19 Aoû 2005, 17:57

Re-re-re-...,

Pourrais-tu poster un rapport généré par CWShredder lorsqu'il trouve CWS MSconfig (option Scan only).

Re-re-re-...
nickW - Image
30/07/2012: Plus de désinfection de PC jusqu'à nouvel ordre.
Pas de demande d'analyse de log en MP (Message Privé)
Mes configs
Avatar de l’utilisateur
nickW
Modérateur
 
Messages: 21698
Inscription: 20 Mai 2004, 17:41
Localisation: Dordogne/Île de France

Messagede piou » 19 Aoû 2005, 18:55

Salut,

CWS MS config, il ne le trouve que quand je suis en mode sans échec...je vais te poster un rapport. Merci pour les liens concernant le "windows secutity center"; j'ai décoché les options et c'est simplement pour ça qu'il me les ressort à chaque fois au scan.

Je sais pas trop quoi penser de PSGuard...tu le laisserais sur ton pc toi?

Merci
piou
piou
 

Messagede nickW » 19 Aoû 2005, 19:29

Re-re-re-re-,

S'il s'était agi d'une clé de type "Run", "Runonce" ou "Runservice", je t'aurais dit de la supprimer (ces clés sont utilisées pour lancer l'exécution d'un programme).
Par contre, cette clé inactive peut rester sur ta machine.

Quelles sont les propriétés du fichier C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSconfig.exe
Clic droit sur le fichier, Propriétés (Dates de création, de modif, de dernier accès, taille, auteur,....)


Re-re-re-re-
nickW - Image
30/07/2012: Plus de désinfection de PC jusqu'à nouvel ordre.
Pas de demande d'analyse de log en MP (Message Privé)
Mes configs
Avatar de l’utilisateur
nickW
Modérateur
 
Messages: 21698
Inscription: 20 Mai 2004, 17:41
Localisation: Dordogne/Île de France

Messagede piou » 20 Aoû 2005, 08:33

Salut,

je suis ton conseil et je ne me tracasse plus pour PSGuard.

Voici un rapport de CWShredder en mode sans échec après avoir fais un scan:

**** Run Keys ****

RUN: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe
RUN: [SoundMan] SOUNDMAN.EXE
RUN: [AlcWzrd] ALCWZRD.EXE
RUN: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe
RUN: [RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"
RUN: [APVXDWIN] "C:\Program Files\Panda Software\Panda Titanium Antivirus 2004\APVXDWIN.EXE" /s
RUN: []
RUN: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
RUN: [Name of App] C:\Program Files\SAMSUNG\FW LiveUpdate\Liveupdate.exe
RUN: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
RUN: [DrvMon.exe] C:\WINDOWS\System32\DrvMon.exe


**** Browser Helper Objects ****

BHO: [AcroIEHlprObj Class] C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
BHO: [] C:\PROGRA~1\SPYBOT~1\SDHelper.dll


**** IE Toolbars ****



**** IE Extensions ****

IEExt: [Web Browser Applet Control] C:\WINDOWS\system32\msjava.dll
IEExt: [Recherche] C:\WINDOWS\system32\msjava.dll
IEExt: [Messenger] C:\Program Files\Messenger\msmsgs.exe


**** Hosts File Entries ****

HOSTS: 127.0.0.1 localhost
HOSTS: 127.0.0.1 babe.the-killer.bz
HOSTS: 127.0.0.1 babe.k-lined.com
HOSTS: 127.0.0.1 did.i-used.cc
HOSTS: 127.0.0.1 coolwwwsearch.com
HOSTS: 127.0.0.1 coolwebsearch.com
HOSTS: 127.0.0.1 hi.studioaperto.net
HOSTS: 127.0.0.1 www.webbrowser.tv
HOSTS: 127.0.0.1 www.wazzupnet.com
HOSTS: 127.0.0.1 gueb.com
HOSTS: 127.0.0.1 kabex.com
HOSTS: 127.0.0.1 www.hityou.com
HOSTS: 127.0.0.1 miosearch.com
HOSTS: 127.0.0.1 wazzupnet.com
HOSTS: 127.0.0.1 213.131.225.2
HOSTS: 127.0.0.1 www.blue-elefant.com
HOSTS: 127.0.0.1 babeweb.de
HOSTS: 127.0.0.1 start-seite.com
HOSTS: 127.0.0.1 sexolymp.com
HOSTS: 127.0.0.1 toriii.cc
HOSTS: 127.0.0.1 www.xtipp.de
HOSTS: 127.0.0.1 urawa.cool.ne.jp
HOSTS: 127.0.0.1 777search.com
HOSTS: 127.0.0.1 ace-webmaster.com
HOSTS: 127.0.0.1 aifind.info
HOSTS: 127.0.0.1 amateurliveshow.com
HOSTS: 127.0.0.1 anarchylolita.com
HOSTS: 127.0.0.1 anarchyporn.com
HOSTS: 127.0.0.1 approvedlinks.com
HOSTS: 127.0.0.1 cantfind.com
HOSTS: 127.0.0.1 castingsamateur.com
HOSTS: 127.0.0.1 cyberrape.com
HOSTS: 127.0.0.1 dialerclub.com
HOSTS: 127.0.0.1 exit.megago.com
HOSTS: 127.0.0.1 fastmetasearch.com
HOSTS: 127.0.0.1 findwhatevernow.com
HOSTS: 127.0.0.1 globesearch.com
HOSTS: 127.0.0.1 hotfreebies.com
HOSTS: 127.0.0.1 krankin.com
HOSTS: 127.0.0.1 begin2search.com
HOSTS: 127.0.0.1 mainstreamdollars.com
HOSTS: 127.0.0.1 live.sex-explorer.com
HOSTS: 127.0.0.1 loveadot.com
HOSTS: 127.0.0.1 megaseek.net
HOSTS: 127.0.0.1 mixsearch.com
HOSTS: 127.0.0.1 munky.com
HOSTS: 127.0.0.1 newtopsites.com
HOSTS: 127.0.0.1 noblindlinks.com
HOSTS: 127.0.0.1 r.babenet.com
HOSTS: 127.0.0.1 searchresult.net
HOSTS: 127.0.0.1 sexarena.org
HOSTS: 127.0.0.1 skeech.com
HOSTS: 127.0.0.1 superwp.by.ru
HOSTS: 127.0.0.1 sureseeker.com
HOSTS: 127.0.0.1 wethere.com
HOSTS: 127.0.0.1 wowsearch.org
HOSTS: 127.0.0.1 www.xxx.com
HOSTS: 127.0.0.1 www.websearch.com
HOSTS: 127.0.0.1 partner23.firehunt.com
HOSTS: 127.0.0.1 screensaver.it
HOSTS: 127.0.0.1 xads.cliks.org
HOSTS: 127.0.0.1 xwebsearch.biz
HOSTS: 127.0.0.1 znext.com
HOSTS: 127.0.0.1 rawtocash.net
HOSTS: 127.0.0.1 7search.com
HOSTS: 127.0.0.1 zestyfind.com
HOSTS: 127.0.0.1 dev.ntcor.com
HOSTS: 127.0.0.1 search.xrenoder.com
HOSTS: 127.0.0.1 193.125.201.50
HOSTS: 127.0.0.1 www.allcybersearch.com
HOSTS: 127.0.0.1 www.tinybar.com
HOSTS: 127.0.0.1 topsite.us
HOSTS: 127.0.0.1 topsites.us
HOSTS: 127.0.0.1 topsitez.us
HOSTS: 127.0.0.1 out.true-counter.com
HOSTS: 127.0.0.1 www.cnetadd.com
HOSTS: 127.0.0.1 okmmm.com
HOSTS: 127.0.0.1 www.139mm.com
HOSTS: 127.0.0.1 008k.com
HOSTS: 127.0.0.1 00hq.com
HOSTS: 127.0.0.1 1-domains-registrations.com
HOSTS: 127.0.0.1 100sexlinks.com
HOSTS: 127.0.0.1 157.238.62.14
HOSTS: 127.0.0.1 1sexparty.com
HOSTS: 127.0.0.1 1stpagehere.com
HOSTS: 127.0.0.1 2020search.com
HOSTS: 127.0.0.1 209.66.114.130
HOSTS: 127.0.0.1 24teen.com
HOSTS: 127.0.0.1 36site.com
HOSTS: 127.0.0.1 4corn.net
HOSTS: 127.0.0.1 66.117.14.138
HOSTS: 127.0.0.1 66.197.100.83
HOSTS: 127.0.0.1 66.250.107.99
HOSTS: 127.0.0.1 66.250.107.100
HOSTS: 127.0.0.1 66.250.107.101
HOSTS: 127.0.0.1 66.250.130.194
HOSTS: 127.0.0.1 66.250.170.107
HOSTS: 127.0.0.1 66.250.57.26
HOSTS: 127.0.0.1 66.250.57.27
HOSTS: 127.0.0.1 66.250.57.28
HOSTS: 127.0.0.1 66.250.74.150
HOSTS: 127.0.0.1 777top.com
HOSTS: 127.0.0.1 8ad.com
HOSTS: 127.0.0.1 aboutclicker.com
HOSTS: 127.0.0.1 abrp.net
HOSTS: 127.0.0.1 accessthefuture.net
HOSTS: 127.0.0.1 acemedic.com
HOSTS: 127.0.0.1 actionbreastcancer.org
HOSTS: 127.0.0.1 activexupdate.com
HOSTS: 127.0.0.1 adamsupportgroup.org
HOSTS: 127.0.0.1 adasearch.com
HOSTS: 127.0.0.1 adipics.com
HOSTS: 127.0.0.1 adspics.com
HOSTS: 127.0.0.1 adult-engine-search.com
HOSTS: 127.0.0.1 adult-erotic-guide.net
HOSTS: 127.0.0.1 adult-friends-finder.net
HOSTS: 127.0.0.1 adulthyperlinks.com
HOSTS: 127.0.0.1 adulttds.com
HOSTS: 127.0.0.1 advert.exaccess.ru
HOSTS: 127.0.0.1 agentstudio.com
HOSTS: 127.0.0.1 africaspromise.org
HOSTS: 127.0.0.1 akril.com
HOSTS: 127.0.0.1 alcatel.ws
HOSTS: 127.0.0.1 alfa-search.com
HOSTS: 127.0.0.1 all-inet.com
HOSTS: 127.0.0.1 allabtcars.com
HOSTS: 127.0.0.1 allabtjeeps.com
HOSTS: 127.0.0.1 allcybersearch.com
HOSTS: 127.0.0.1 allhyperlinks.com
HOSTS: 127.0.0.1 allinternetbusiness.com
HOSTS: 127.0.0.1 almarvideos.com
HOSTS: 127.0.0.1 amandamountains.com
HOSTS: 127.0.0.1 amigeek.com
HOSTS: 127.0.0.1 amisbusiness.com
HOSTS: 127.0.0.1 analmovi.com
HOSTS: 127.0.0.1 anin.org
HOSTS: 127.0.0.1 annaromeo.com
HOSTS: 127.0.0.1 antrocity.com
HOSTS: 127.0.0.1 anything4health.com
HOSTS: 127.0.0.1 apsua.com
HOSTS: 127.0.0.1 aregay.com
HOSTS: 127.0.0.1 arheo.com
HOSTS: 127.0.0.1 arizonaweb.org
HOSTS: 127.0.0.1 armitageinn.com
HOSTS: 127.0.0.1 art-func.com
HOSTS: 127.0.0.1 art-xxx.com
HOSTS: 127.0.0.1 artachnid.com
HOSTS: 127.0.0.1 asiankingkong.com
HOSTS: 127.0.0.1 ass-gals.com
HOSTS: 127.0.0.1 athenrye.com
HOSTS: 127.0.0.1 avian-ads.com
HOSTS: 127.0.0.1 ayakawamura.com
HOSTS: 127.0.0.1 ayumitaniguchi.com
HOSTS: 127.0.0.1 bannedhost.net
HOSTS: 127.0.0.1 barbudafarms.com
HOSTS: 127.0.0.1 barnandfence.com
HOSTS: 127.0.0.1 batsearch.com
HOSTS: 127.0.0.1 baygraphicsllc.com
HOSTS: 127.0.0.1 bb-search.com
HOSTS: 127.0.0.1 bbbsearch.com
HOSTS: 127.0.0.1 bedhome.com
HOSTS: 127.0.0.1 bediadance.com
HOSTS: 127.0.0.1 bellabasketsfl.com
HOSTS: 127.0.0.1 bernaolatwin.com
HOSTS: 127.0.0.1 best-counter.com
HOSTS: 127.0.0.1 best-hardpics.com
HOSTS: 127.0.0.1 best-winning-casino.com
HOSTS: 127.0.0.1 bestcrawler.com
HOSTS: 127.0.0.1 bestfor.ru
HOSTS: 127.0.0.1 bestporngate.com
HOSTS: 127.0.0.1 bestxporno.com
HOSTS: 127.0.0.1 blackjack-free.net
HOSTS: 127.0.0.1 blender.xu.pl
HOSTS: 127.0.0.1 bodaciousbabette.com
HOSTS: 127.0.0.1 boobdoll.com
HOSTS: 127.0.0.1 boobsandtits.com
HOSTS: 127.0.0.1 boobsclub.com
HOSTS: 127.0.0.1 boredlife.com
HOSTS: 127.0.0.1 bowlofogumbo.com
HOSTS: 127.0.0.1 bradcoem.org
HOSTS: 127.0.0.1 brandiyoung.com
HOSTS: 127.0.0.1 brookeburn.com
HOSTS: 127.0.0.1 bucps.com
HOSTS: 127.0.0.1 burgerkingbigscreen.com
HOSTS: 127.0.0.1 buscards.net
HOSTS: 127.0.0.1 bustyrussell.com
HOSTS: 127.0.0.1 buttejazz.org
HOSTS: 127.0.0.1 buyselldomain.net
HOSTS: 127.0.0.1 calcioturris.com
HOSTS: 127.0.0.1 canberracricketcoaching.com
HOSTS: 127.0.0.1 candycantaloupes.com
HOSTS: 127.0.0.1 careers.dulcineasystems.net
HOSTS: 127.0.0.1 carsands.com
HOSTS: 127.0.0.1 carsrentals.net
HOSTS: 127.0.0.1 casino-gambling-1.net
HOSTS: 127.0.0.1 casino-gambling-2.net
HOSTS: 127.0.0.1 casino-onlines.net
HOSTS: 127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
HOSTS: 127.0.0.1 casino2win.net
HOSTS: 127.0.0.1 casinomidas.net
HOSTS: 127.0.0.1 casinonline.net
HOSTS: 127.0.0.1 catallogue.com
HOSTS: 127.0.0.1 catsss.da.ru
HOSTS: 127.0.0.1 caxa.ru
HOSTS: 127.0.0.1 cclebali.org
HOSTS: 127.0.0.1 ceewawires.org
HOSTS: 127.0.0.1 certumgroup.com
HOSTS: 127.0.0.1 chelancatering.com
HOSTS: 127.0.0.1 childrenvilla.com
HOSTS: 127.0.0.1 chips-4-free.com
HOSTS: 127.0.0.1 chrisswasey.com
HOSTS: 127.0.0.1 chriswallace.net
HOSTS: 127.0.0.1 ckick4thumbs.com
HOSTS: 127.0.0.1 clackamasliteraryreview.com
HOSTS: 127.0.0.1 clearsearch.cc
HOSTS: 127.0.0.1 clearsearch.net
HOSTS: 127.0.0.1 clickaire.com
HOSTS: 127.0.0.1 clickyestoenter.net
HOSTS: 127.0.0.1 clrsch.com
HOSTS: 127.0.0.1 cmtapestry.com
HOSTS: 127.0.0.1 cool-homepage.co
HOSTS: 127.0.0.1 cool-homepage.com
HOSTS: 127.0.0.1 cool-search.net
HOSTS: 127.0.0.1 cool-search.netfartpost.com
HOSTS: 127.0.0.1 cool-web-search.com
HOSTS: 127.0.0.1 coolfetishsite.com
HOSTS: 127.0.0.1 coolfreehost.com
HOSTS: 127.0.0.1 coolfreepage.com
HOSTS: 127.0.0.1 coolfreepages.com
HOSTS: 127.0.0.1 coolmoneysearch.com
HOSTS: 127.0.0.1 coolpornsearch.com
HOSTS: 127.0.0.1 coolsearcher.info
HOSTS: 127.0.0.1 coolwebsearch.
HOSTS: 127.0.0.1 coolwebsearsh.com
HOSTS: 127.0.0.1 coolwwwsearch.
HOSTS: 127.0.0.1 copmtraine.com
HOSTS: 127.0.0.1 couldnotfind.com
HOSTS: 127.0.0.1 count-all.com
HOSTS: 127.0.0.1 cracks.me.uk
HOSTS: 127.0.0.1 creamedcutties.com
HOSTS: 127.0.0.1 creditsearchonline.com
HOSTS: 127.0.0.1 crestring.com
HOSTS: 127.0.0.1 crooder.com
HOSTS: 127.0.0.1 curvedspaces.com
HOSTS: 127.0.0.1 cvs.jps.ru
HOSTS: 127.0.0.1 cvsymphony.com
HOSTS: 127.0.0.1 cydom.com
HOSTS: 127.0.0.1 daily-gals.com
HOSTS: 127.0.0.1 dancingbabycd.com
HOSTS: 127.0.0.1 datanotary.com
HOSTS: 127.0.0.1 datareco.com
HOSTS: 127.0.0.1 davemarshall.org
HOSTS: 127.0.0.1 dcfitusa.com
HOSTS: 127.0.0.1 defaultsearch.net
HOSTS: 127.0.0.1 desarrollocreativo.com
HOSTS: 127.0.0.1 develip.com
HOSTS: 127.0.0.1 dewis.spb.ru
HOSTS: 127.0.0.1 dewis.us
HOSTS: 127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
HOSTS: 127.0.0.1 dietpills4free.com
HOSTS: 127.0.0.1 dietpussy.com
HOSTS: 127.0.0.1 digistreamsa.com
HOSTS: 127.0.0.1 dionforvalleycouncil.org
HOSTS: 127.0.0.1 doctorwaldron.com
HOSTS: 127.0.0.1 document-not-found.pornpic.org
HOSTS: 127.0.0.1 doggyaction.com
HOSTS: 127.0.0.1 domain-your-registration.com
HOSTS: 127.0.0.1 domains-for-you-online.com
HOSTS: 127.0.0.1 domains2003.net
HOSTS: 127.0.0.1 domkrat.com
HOSTS: 127.0.0.1 dp-host.com
HOSTS: 127.0.0.1 dragqueen.gay-clan.com
HOSTS: 127.0.0.1 drug-sources-exposed.com
HOSTS: 127.0.0.1 drvvv.com
HOSTS: 127.0.0.1 dutch-sex.com
HOSTS: 127.0.0.1 dvdbank.org
HOSTS: 127.0.0.1 e-localad.com
HOSTS: 127.0.0.1 e-plus.cc
HOSTS: 127.0.0.1 e-websitesolutions.com
HOSTS: 127.0.0.1 eases.net
HOSTS: 127.0.0.1 easy-search.net
HOSTS: 127.0.0.1 easycategories.com
HOSTS: 127.0.0.1 ecosrioplatenses.org
HOSTS: 127.0.0.1 ecstasyporn.net
HOSTS: 127.0.0.1 eikokoike.com
HOSTS: 127.0.0.1 epornsex.com
HOSTS: 127.0.0.1 euuu.com
HOSTS: 127.0.0.1 evidence-detector.biz
HOSTS: 127.0.0.1 evilspidercomics.com
HOSTS: 127.0.0.1 ewebsearch.net
HOSTS: 127.0.0.1 findloss.com
HOSTS: 127.0.0.1 excellentsckin.com
HOSTS: 127.0.0.1 extremeseek.net
HOSTS: 127.0.0.1 f*ckdenniss.com
HOSTS: 127.0.0.1 f*cknicepics.com
HOSTS: 127.0.0.1 faithstevens.com
HOSTS: 127.0.0.1 fantasiewelten.com
HOSTS: 127.0.0.1 farmsteadbandb.com
HOSTS: 127.0.0.1 fartpost.com
HOSTS: 127.0.0.1 fastwebfinder.com
HOSTS: 127.0.0.1 faxporn.com
HOSTS: 127.0.0.1 fickenisgeil.de
HOSTS: 127.0.0.1 finance-loans.com
HOSTS: 127.0.0.1 find-itnow.com
HOSTS: 127.0.0.1 find-uk-health.co.uk
HOSTS: 127.0.0.1 find4u.net
HOSTS: 127.0.0.1 findit-now.com
HOSTS: 127.0.0.1 findthesite.com
HOSTS: 127.0.0.1 findthewebsiteyouneed.com
HOSTS: 127.0.0.1 fionasteel.com
HOSTS: 127.0.0.1 firstbookmark.net
HOSTS: 127.0.0.1 fitness-free.com
HOSTS: 127.0.0.1 foodvacations.net
HOSTS: 127.0.0.1 forex.jps.ru
HOSTS: 127.0.0.1 forexcredit.com
HOSTS: 127.0.0.1 forexcredit.ru
HOSTS: 127.0.0.1 formingfusions.com
HOSTS: 127.0.0.1 forsythfire.net
HOSTS: 127.0.0.1 forthline.com
HOSTS: 127.0.0.1 free-chipes.com
HOSTS: 127.0.0.1 free-f*cking-video.com
HOSTS: 127.0.0.1 free-hit.com
HOSTS: 127.0.0.1 free-pics-and-movies.com
HOSTS: 127.0.0.1 free-sex-movie-clips.net
HOSTS: 127.0.0.1 free4porno.net
HOSTS: 127.0.0.1 free64all.com
HOSTS: 127.0.0.1 freebookmark.net
HOSTS: 127.0.0.1 freebookmarks.net
HOSTS: 127.0.0.1 freecategories.com
HOSTS: 127.0.0.1 freecoolhost.com
HOSTS: 127.0.0.1 freerbhost.com
HOSTS: 127.0.0.1 freeshemalepics.net
HOSTS: 127.0.0.1 freeyaho.com
HOSTS: 127.0.0.1 freshseek.com
HOSTS: 127.0.0.1 freshteensite.com
HOSTS: 127.0.0.1 gabrielscott.com
HOSTS: 127.0.0.1 galpostgirls.com
HOSTS: 127.0.0.1 gals-for-free.com
HOSTS: 127.0.0.1 gambling-online4you.com
HOSTS: 127.0.0.1 gameterror.net
HOSTS: 127.0.0.1 gay50.com
HOSTS: 127.0.0.1 generalsmeltingofcanada.com
HOSTS: 127.0.0.1 geteens.com
HOSTS: 127.0.0.1 getpicshere.com
HOSTS: 127.0.0.1 gimmezamore.com
HOSTS: 127.0.0.1 gimnasiaer.com
HOSTS: 127.0.0.1 girls-porn-life.com
HOSTS: 127.0.0.1 glbdf.org
HOSTS: 127.0.0.1 global-finder.com
HOSTS: 127.0.0.1 globe-finder.cc
HOSTS: 127.0.0.1 globe-finder.com
HOSTS: 127.0.0.1 gocybersearch.com
HOSTS: 127.0.0.1 golftennis.net
HOSTS: 127.0.0.1 good-mortgages-calculator.com
HOSTS: 127.0.0.1 good-mortgages.net
HOSTS: 127.0.0.1 goodsexs.com
HOSTS: 127.0.0.1 googlebar.jps.ru
HOSTS: 127.0.0.1 googlf.com
HOSTS: 127.0.0.1 gradforum.org
HOSTS: 127.0.0.1 gratis-porn-movie.com
HOSTS: 127.0.0.1 gratis-pornopics.com
HOSTS: 127.0.0.1 guzzycats.com
HOSTS: 127.0.0.1 gzphoenix.com
HOSTS: 127.0.0.1 hallnetaccolade.com
HOSTS: 127.0.0.1 hand-book.com
HOSTS: 127.0.0.1 happyanal.com
HOSTS: 127.0.0.1 hard-gals.com
HOSTS: 127.0.0.1 hardbodytgp.com
HOSTS: 127.0.0.1 hardcoreover.com
HOSTS: 127.0.0.1 hardloved.com
HOSTS: 127.0.0.1 hardwareseek.net
HOSTS: 127.0.0.1 harukaigawa.com
HOSTS: 127.0.0.1 hccsolanonapa.org
HOSTS: 127.0.0.1 health-protein.com
HOSTS: 127.0.0.1 hentai4u.net
HOSTS: 127.0.0.1 here4search.com
HOSTS: 127.0.0.1 heyrichy.com
HOSTS: 127.0.0.1 hi-search.com
HOSTS: 127.0.0.1 hiddenguides.com
HOSTS: 127.0.0.1 hitlistlyrics.com
HOSTS: 127.0.0.1 holidayautostr.com
HOSTS: 127.0.0.1 homemortage.ws
HOSTS: 127.0.0.1 hostssp.com
HOSTS: 127.0.0.1 hot-cartoon-sex.anime.american-teens.net
HOSTS: 127.0.0.1 hotbookmark.com
HOSTS: 127.0.0.1 hotels-list.net
HOSTS: 127.0.0.1 hotelxxxcams.com
HOSTS: 127.0.0.1 hotpopup.com
HOSTS: 127.0.0.1 hotsearchbox.com
HOSTS: 127.0.0.1 hotsex-series.com
HOSTS: 127.0.0.1 hotstartpage.com
HOSTS: 127.0.0.1 hqsex.biz
HOSTS: 127.0.0.1 hugeporn4u.net
HOSTS: 127.0.0.1 hunacsa.com
HOSTS: 127.0.0.1 hupacasath.com
HOSTS: 127.0.0.1 hzsx.com
HOSTS: 127.0.0.1 icansearch.net
HOSTS: 127.0.0.1 idgsearch.com
HOSTS: 127.0.0.1 ie-search.com
HOSTS: 127.0.0.1 incestporngate.com
HOSTS: 127.0.0.1 infodigger.net
HOSTS: 127.0.0.1 infoglobus.com
HOSTS: 127.0.0.1 inherhole.com
HOSTS: 127.0.0.1 insertthiscock.com
HOSTS: 127.0.0.1 insurance-flood.net
HOSTS: 127.0.0.1 insuranceall.net
HOSTS: 127.0.0.1 internetsearch.ru
HOSTS: 127.0.0.1 ionichost.com
HOSTS: 127.0.0.1 ionomist.com
HOSTS: 127.0.0.1 ipsex.net
HOSTS: 127.0.0.1 itsanal.com
HOSTS: 127.0.0.1 itseasy.us
HOSTS: 127.0.0.1 iweb-commerce.com
HOSTS: 127.0.0.1 iwebland.com
HOSTS: 127.0.0.1 jeannineoldfield.com
HOSTS: 127.0.0.1 jethomepage.com
HOSTS: 127.0.0.1 jetseeker.com
HOSTS: 127.0.0.1 jmhgallery.org
HOSTS: 127.0.0.1 joannelatham.com
HOSTS: 127.0.0.1 judin.ru
HOSTS: 127.0.0.1 junkysex.com
HOSTS: 127.0.0.1 karleyt.narod.ru
HOSTS: 127.0.0.1 kathisomers.com
HOSTS: 127.0.0.1 kazaa-lite.ws
HOSTS: 127.0.0.1 keithgreenpro.com
HOSTS: 127.0.0.1 kenmccaul.com
HOSTS: 127.0.0.1 kilosex.com
HOSTS: 127.0.0.1 kimhines.com
HOSTS: 127.0.0.1 kinoru.com
HOSTS: 127.0.0.1 ksdspups.org
HOSTS: 127.0.0.1 landrape.com
HOSTS: 127.0.0.1 lauraroebuck.com
HOSTS: 127.0.0.1 leannalovelace.com
HOSTS: 127.0.0.1 lesobank.ru
HOSTS: 127.0.0.1 libertyonlinehosting.com
HOSTS: 127.0.0.1 lingerie-mania.com
HOSTS: 127.0.0.1 lisamatthew.com
HOSTS: 127.0.0.1 liveholio.com
HOSTS: 127.0.0.1 livenewspaper.com
HOSTS: 127.0.0.1 louiseleeds.com
HOSTS: 127.0.0.1 love-pix.com
HOSTS: 127.0.0.1 lovelas.com
HOSTS: 127.0.0.1 lovelysearch.com
HOSTS: 127.0.0.1 low-taxes.com
HOSTS: 127.0.0.1 luckysearch.net
HOSTS: 127.0.0.1 lunitaweb.net
HOSTS: 127.0.0.1 lustful-porno.com
HOSTS: 127.0.0.1 mackinnonsbrook.org
HOSTS: 127.0.0.1 madfinder.com
HOSTS: 127.0.0.1 madisonmoons.com
HOSTS: 127.0.0.1 madisonoilco.com
HOSTS: 127.0.0.1 madonalive.com
HOSTS: 127.0.0.1 majuozawa.com
HOSTS: 127.0.0.1 makin-do.com
HOSTS: 127.0.0.1 male4free.com
HOSTS: 127.0.0.1 map-quest.org
HOSTS: 127.0.0.1 marilynchamber.com
HOSTS: 127.0.0.1 martfinder.com
HOSTS: 127.0.0.1 massearch.com
HOSTS: 127.0.0.1 matetrava.com
HOSTS: 127.0.0.1 mature50.com
HOSTS: 127.0.0.1 matureporngate.com
HOSTS: 127.0.0.1 maxdzines.com
HOSTS: 127.0.0.1 mcgeeforlabor.com
HOSTS: 127.0.0.1 mdstunisie.org
HOSTS: 127.0.0.1 medicare-insurance.net
HOSTS: 127.0.0.1 medicare-supplemental.com
HOSTS: 127.0.0.1 mega-dating-tips.com
HOSTS: 127.0.0.1 megumikanzaki.com
HOSTS: 127.0.0.1 meshalynn.com
HOSTS: 127.0.0.1 meta-adult.com
HOSTS: 127.0.0.1 meta-casino.com
HOSTS: 127.0.0.1 meta-mobile.com
HOSTS: 127.0.0.1 meta-porn.com
HOSTS: 127.0.0.1 metafora.ru
HOSTS: 127.0.0.1 metapoisk.ru
HOSTS: 127.0.0.1 michiyonakajima.com
HOSTS: 127.0.0.1 miconsultamedica.com
HOSTS: 127.0.0.1 mikasakamoto.com
HOSTS: 127.0.0.1 mikoni.com
HOSTS: 127.0.0.1 militarygods.porn4porn.net
HOSTS: 127.0.0.1 millennialpeople.org
HOSTS: 127.0.0.1 mipham.org
HOSTS: 127.0.0.1 missingcommand.com
HOSTS: 127.0.0.1 mommykiss.com
HOSTS: 127.0.0.1 moneyhunters.com
HOSTS: 127.0.0.1 montgomeryhospitalanesthesia.com
HOSTS: 127.0.0.1 morflot.com
HOSTS: 127.0.0.1 mortgage-debt.net
HOSTS: 127.0.0.1 mortismaximus.com
HOSTS: 127.0.0.1 moscowwhores.com
HOSTS: 127.0.0.1 moviecategories.com
HOSTS: 127.0.0.1 mp3-pix.com
HOSTS: 127.0.0.1 mrtg.jps.ru
HOSTS: 127.0.0.1 msn-info.net
HOSTS: 127.0.0.1 multipussy.com
HOSTS: 127.0.0.1 mundopolar.com
HOSTS: 127.0.0.1 mustv.com
HOSTS: 127.0.0.1 mywebsearch.net
HOSTS: 127.0.0.1 nativehardcore.com
HOSTS: 127.0.0.1 naturalspy.com
HOSTS: 127.0.0.1 nbasportsbook.net
HOSTS: 127.0.0.1 needf*cknow.com
HOSTS: 127.0.0.1 nellyslyrics.com
HOSTS: 127.0.0.1 nepgyan.com
HOSTS: 127.0.0.1 nesrecords.com
HOSTS: 127.0.0.1 netshastra.net
HOSTS: 127.0.0.1 nettime.ru
HOSTS: 127.0.0.1 nettracker.jps.ru
HOSTS: 127.0.0.1 netyellowpages.info
HOSTS: 127.0.0.1 new-incest.com
HOSTS: 127.0.0.1 newcategories.com
HOSTS: 127.0.0.1 newcracks.com
HOSTS: 127.0.0.1 newcracks.net
HOSTS: 127.0.0.1 newlife-lajolla.com
HOSTS: 127.0.0.1 newsexgate.com
HOSTS: 127.0.0.1 newtonsracks.com
HOSTS: 127.0.0.1 newxpics.com
HOSTS: 127.0.0.1 nhlsportsbook.net
HOSTS: 127.0.0.1 niagaracapital.com
HOSTS: 127.0.0.1 niche-tv.com
HOSTS: 127.0.0.1 nmrba.com
HOSTS: 127.0.0.1 nocalories.net
HOSTS: 127.0.0.1 nocensor.com
HOSTS: 127.0.0.1 ormandcompany.com
HOSTS: 127.0.0.1 nsbabes.com
HOSTS: 127.0.0.1 nuclearwitness.org
HOSTS: 127.0.0.1 nursemania.com
HOSTS: 127.0.0.1 nvntour.com
HOSTS: 127.0.0.1 nvphall.org
HOSTS: 127.0.0.1 oborot.com
HOSTS: 127.0.0.1 ocalalivestockmarket.com
HOSTS: 127.0.0.1 ocsff.com
HOSTS: 127.0.0.1 oeatlanta.com
HOSTS: 127.0.0.1 oharrowsearch.com
HOSTS: 127.0.0.1 ok-search.com
HOSTS: 127.0.0.1 okulta.com
HOSTS: 127.0.0.1 omegabrains.net
HOSTS: 127.0.0.1 online-casino-1.net
HOSTS: 127.0.0.1 online-casino-bonus.info
HOSTS: 127.0.0.1 online-casinos-x.com
HOSTS: 127.0.0.1 online-winning.net
HOSTS: 127.0.0.1 onlineserverz.com
HOSTS: 127.0.0.1 onlinetradings.net
HOSTS: 127.0.0.1 onlycunt.com
HOSTS: 127.0.0.1 onlyinsured.com
HOSTS: 127.0.0.1 operanabuco.com
HOSTS: 127.0.0.1 opsex.com
HOSTS: 127.0.0.1 oregoncharters.org
HOSTS: 127.0.0.1 otrlives.com
HOSTS: 127.0.0.1 ozawamadoka.com
HOSTS: 127.0.0.1 paigesummer.com
HOSTS: 127.0.0.1 pamelacollections.com
HOSTS: 127.0.0.1 panamcup.com
HOSTS: 127.0.0.1 pantygirls4u.com
HOSTS: 127.0.0.1 pantyhoserealm.com
HOSTS: 127.0.0.1 pantyplace.com
HOSTS: 127.0.0.1 pastubes.com
HOSTS: 127.0.0.1 paulapage.com
HOSTS: 127.0.0.1 paulhoover.com
HOSTS: 127.0.0.1 payfortraffic.net
HOSTS: 127.0.0.1 pedo.ws
HOSTS: 127.0.0.1 people.1gb.ru
HOSTS: 127.0.0.1 pervertbot.com
HOSTS: 127.0.0.1 pharma-diet-pills.com
HOSTS: 127.0.0.1 pharmacy2003.com
HOSTS: 127.0.0.1 pharmalocator.com
HOSTS: 127.0.0.1 phendimetrazine-tenuate-adipex.com
HOSTS: 127.0.0.1 pics-videos.com
HOSTS: 127.0.0.1 picsdir.com
HOSTS: 127.0.0.1 picsforbucks.com
HOSTS: 127.0.0.1 picsofseductiveladies.com
HOSTS: 127.0.0.1 pills-birth-control.com
HOSTS: 127.0.0.1 pillsmall.com
HOSTS: 127.0.0.1 pilotronix.com
HOSTS: 127.0.0.1 pixpox.com
HOSTS: 127.0.0.1 planemusic.com
HOSTS: 127.0.0.1 poiska.net
HOSTS: 127.0.0.1 poker-casino-free.com
HOSTS: 127.0.0.1 poker-games-free.net
HOSTS: 127.0.0.1 polradiologia.com
HOSTS: 127.0.0.1 pooi.net
HOSTS: 127.0.0.1 porn-teacher.com
HOSTS: 127.0.0.1 porncamz.com
HOSTS: 127.0.0.1 pornfree.info
HOSTS: 127.0.0.1 pornnightdreams.com
HOSTS: 127.0.0.1 pornokopec.com
HOSTS: 127.0.0.1 porntetris.com
HOSTS: 127.0.0.1 porntwist.com
HOSTS: 127.0.0.1 powerwebsearch.com
HOSTS: 127.0.0.1 prblitz.com
HOSTS: 127.0.0.1 pretypics.com
HOSTS: 127.0.0.1 pribalt.com
HOSTS: 127.0.0.1 privacy-support.biz
HOSTS: 127.0.0.1 privateporn.net
HOSTS: 127.0.0.1 prostactive.com
HOSTS: 127.0.0.1 prostol.com
HOSTS: 127.0.0.1 protect-yourself.biz
HOSTS: 127.0.0.1 prsainlandempire.org
HOSTS: 127.0.0.1 put-your-link-here.com
HOSTS: 127.0.0.1 pyrocorp.com
HOSTS: 127.0.0.1 quick-search.ws
HOSTS: 127.0.0.1 quiksearchgenealogy.com
HOSTS: 127.0.0.1 radfrall.org
HOSTS: 127.0.0.1 ramgo.com
HOSTS: 127.0.0.1 ranafrog.ne
HOSTS: 127.0.0.1 rapegate.com
HOSTS: 127.0.0.1 redbudbmx.com
HOSTS: 127.0.0.1 refinance-help.com
HOSTS: 127.0.0.1 removeearthkeepers.org
HOSTS: 127.0.0.1 rightfinder.net
HOSTS: 127.0.0.1 robbsproshop.com
HOSTS: 127.0.0.1 robertferencz.com
HOSTS: 127.0.0.1 rotocasters.com
HOSTS: 127.0.0.1 royalsearch.net
HOSTS: 127.0.0.1 runsearch.com
HOSTS: 127.0.0.1 russiansponsor.com
HOSTS: 127.0.0.1 russogay.com
HOSTS: 127.0.0.1 s2.exocrew.com
HOSTS: 127.0.0.1 sacitylife.com
HOSTS: 127.0.0.1 samplegals.com
HOSTS: 127.0.0.1 satisf*cktion.net
HOSTS: 127.0.0.1 sbssurvivor.com
HOSTS: 127.0.0.1 scarypix.com
HOSTS: 127.0.0.1 sccdnet.com
HOSTS: 127.0.0.1 schoolforest.com
HOSTS: 127.0.0.1 search-1.net
HOSTS: 127.0.0.1 search-2003.com
HOSTS: 127.0.0.1 search-about.net
HOSTS: 127.0.0.1 search-hawk.com
HOSTS: 127.0.0.1 search-log.com
HOSTS: 127.0.0.1 search-meta.com
HOSTS: 127.0.0.1 search-safe.com
HOSTS: 127.0.0.1 search.psn.cn
HOSTS: 127.0.0.1 searchadultweb.com
HOSTS: 127.0.0.1 searchbutler.com
HOSTS: 127.0.0.1 searchbuttler.com
HOSTS: 127.0.0.1 searchbutler.org
HOSTS: 127.0.0.1 searchcomplete.com
HOSTS: 127.0.0.1 searchdesire.com
HOSTS: 127.0.0.1 searchdot.net
HOSTS: 127.0.0.1 searchexpander.com
HOSTS: 127.0.0.1 searchfastnet.com
HOSTS: 127.0.0.1 searchforge.com
HOSTS: 127.0.0.1 searching-the-net.com
HOSTS: 127.0.0.1 searchmeta.md
HOSTS: 127.0.0.1 searchmeta.net
HOSTS: 127.0.0.1 searchmeta.ru
HOSTS: 127.0.0.1 searchmeta.webhost.ru
HOSTS: 127.0.0.1 searchnow.ws
HOSTS: 127.0.0.1 searchonfly.com
HOSTS: 127.0.0.1 searchv.com
HOSTS: 127.0.0.1 searchxl.com
HOSTS: 127.0.0.1 searchxp.com
HOSTS: 127.0.0.1 sebot.com
HOSTS: 127.0.0.1 securenp.org
HOSTS: 127.0.0.1 security-warning.biz
HOSTS: 127.0.0.1 seehardcore.com
HOSTS: 127.0.0.1 seekwell.net
HOSTS: 127.0.0.1 selfbookmark.com
HOSTS: 127.0.0.1 selfbookmark.info
HOSTS: 127.0.0.1 selfbookmark.net
HOSTS: 127.0.0.1 sex.free4porno.net
HOSTS: 127.0.0.1 sex-coach.com
HOSTS: 127.0.0.1 sex-festival.com
HOSTS: 127.0.0.1 sex-video-galleries.com
HOSTS: 127.0.0.1 sexgalleries4all.com
HOSTS: 127.0.0.1 sexmoviesnet.com
HOSTS: 127.0.0.1 sexpatriot.net
HOSTS: 127.0.0.1 sexy18.cc
HOSTS: 127.0.0.1 sexycat.adult-host.org
HOSTS: 127.0.0.1 sfbayfolkboats.com
HOSTS: 127.0.0.1 sgirls.net
HOSTS: 127.0.0.1 sharempeg.com
HOSTS: 127.0.0.1 shopcards.net
HOSTS: 127.0.0.1 shopknights.com
HOSTS: 127.0.0.1 sic02.com
HOSTS: 127.0.0.1 sintrader.com
HOSTS: 127.0.0.1 site1.ru
HOSTS: 127.0.0.1 sites-in-web.com
HOSTS: 127.0.0.1 sitevictoria.com
HOSTS: 127.0.0.1 sixroads.com
HOSTS: 127.0.0.1 skakalka.ru
HOSTS: 127.0.0.1 slawsearch.com
HOSTS: 127.0.0.1 slotch.com
HOSTS: 127.0.0.1 smartsumo.com
HOSTS: 127.0.0.1 smutarchive.net
HOSTS: 127.0.0.1 solongas.com
HOSTS: 127.0.0.1 sonomaevents.com
HOSTS: 127.0.0.1 spermatrix.com
HOSTS: 127.0.0.1 sportbooks-free4you.com
HOSTS: 127.0.0.1 spros.com
HOSTS: 127.0.0.1 spyass.com
HOSTS: 127.0.0.1 spyorgy.net
HOSTS: 127.0.0.1 staceyowens.com
HOSTS: 127.0.0.1 stacistaxx.com
HOSTS: 127.0.0.1 stacystaxx.com
HOSTS: 127.0.0.1 start-space.com
HOSTS: 127.0.0.1 steamycock.com
HOSTS: 127.0.0.1 sterva.com
HOSTS: 127.0.0.1 stevecashdollar.com
HOSTS: 127.0.0.1 stop-tracking.biz
HOSTS: 127.0.0.1 stopvotefraud.com
HOSTS: 127.0.0.1 stopxxxpics.com
HOSTS: 127.0.0.1 strekoza.com
HOSTS: 127.0.0.1 stuffstore.com
HOSTS: 127.0.0.1 styleclickink.com
HOSTS: 127.0.0.1 summercollins.com
HOSTS: 127.0.0.1 summitcross.com
HOSTS: 127.0.0.1 super-spider.com
HOSTS: 127.0.0.1 super-websearch.com
HOSTS: 127.0.0.1 supersexmachine.com
HOSTS: 127.0.0.1 superwebsearch.com
HOSTS: 127.0.0.1 supret.com
HOSTS: 127.0.0.1 suzannebrecht.com
HOSTS: 127.0.0.1 sweeteenz.com
HOSTS: 127.0.0.1 tacil.org
HOSTS: 127.0.0.1 tangounion.com
HOSTS: 127.0.0.1 tastethemusic.com
HOSTS: 127.0.0.1 tax-refund4you.com
HOSTS: 127.0.0.1 tech-jobs.ws
HOSTS: 127.0.0.1 technology-related.com
HOSTS: 127.0.0.1 teen-biz.com
HOSTS: 127.0.0.1 teen-pic-post.com
HOSTS: 127.0.0.1 teenpornosex.com
HOSTS: 127.0.0.1 teens4free.net
HOSTS: 127.0.0.1 teensact.com
HOSTS: 127.0.0.1 teensgate.com
HOSTS: 127.0.0.1 teensguru.com
HOSTS: 127.0.0.1 teenswamp.com
HOSTS: 127.0.0.1 testosterone-birth-control.com
HOSTS: 127.0.0.1 the-exit.com
HOSTS: 127.0.0.1 the-huns-yellow-pages.com
HOSTS: 127.0.0.1 thefakejournal.com
HOSTS: 127.0.0.1 thehuy.net
HOSTS: 127.0.0.1 theproxy.org
HOSTS: 127.0.0.1 therealsearch.com
HOSTS: 127.0.0.1 thesten.com
HOSTS: 127.0.0.1 thornleygroup.com
HOSTS: 127.0.0.1 tings.org
HOSTS: 127.0.0.1 tinybar.com
HOSTS: 127.0.0.1 tit-x.com
HOSTS: 127.0.0.1 titanvision.com
HOSTS: 127.0.0.1 titsianna.com
HOSTS: 127.0.0.1 toddhayes.com
HOSTS: 127.0.0.1 toon-comics.com
HOSTS: 127.0.0.1 tooncomics.com
HOSTS: 127.0.0.1 topsearcher.com
HOSTS: 127.0.0.1 trafficback.com
HOSTS: 127.0.0.1 trafficswitcher.com
HOSTS: 127.0.0.1 travel.picture-posters.com
HOSTS: 127.0.0.1 true-counter.com
HOSTS: 127.0.0.1 true-portal.com
HOSTS: 127.0.0.1 trytechnical.com
HOSTS: 127.0.0.1 ufindall.click-now.net
HOSTS: 127.0.0.1 umaxsearch.com
HOSTS: 127.0.0.1 une-autre-france.com
HOSTS: 127.0.0.1 unigays.com
HOSTS: 127.0.0.1 unipages.cc
HOSTS: 127.0.0.1 up2you.ru
HOSTS: 127.0.0.1 urlstat.com
HOSTS: 127.0.0.1 urlstat.ru
HOSTS: 127.0.0.1 uralitel.ru
HOSTS: 127.0.0.1 ursie.net
HOSTS: 127.0.0.1 utahsweet.com
HOSTS: 127.0.0.1 utopicportal.com
HOSTS: 127.0.0.1 uusocialjustice.org
HOSTS: 127.0.0.1 v61.com
HOSTS: 127.0.0.1 vaginpics.com
HOSTS: 127.0.0.1 valmyers.com
HOSTS: 127.0.0.1 vegas-free.com
HOSTS: 127.0.0.1 vegbuy.com
HOSTS: 127.0.0.1 veloventures.com
HOSTS: 127.0.0.1 verzila.com
HOSTS: 127.0.0.1 victoriaadam.com
HOSTS: 127.0.0.1 videocategories.com
HOSTS: 127.0.0.1 vitamins-for-each.com
HOSTS: 127.0.0.1 votehowe.org
HOSTS: 127.0.0.1 vxebony.com
HOSTS: 127.0.0.1 wakeupdick.com
HOSTS: 127.0.0.1 warnomore.org
HOSTS: 127.0.0.1 watersport-specialties.com
HOSTS: 127.0.0.1 web-homepage.net
HOSTS: 127.0.0.1 web-search.tk
HOSTS: 127.0.0.1 webcoolsearch.com
HOSTS: 127.0.0.1 websearchdot.com
HOSTS: 127.0.0.1 weekend-movies.com
HOSTS: 127.0.0.1 wetpornostars.com
HOSTS: 127.0.0.1 whatsyoursearch.com
HOSTS: 127.0.0.1 white-pages.ws
HOSTS: 127.0.0.1 whittierblvd.com
HOSTS: 127.0.0.1 win-in-casino.com
HOSTS: 127.0.0.1 wiresearch.com
HOSTS: 127.0.0.1 wolfpacracing.com
HOSTS: 127.0.0.1 wordlist.jps.ru
HOSTS: 127.0.0.1 wpc2001.org
HOSTS: 127.0.0.1 wspzone.sexpornonline.com
HOSTS: 127.0.0.1 wwwbet.net
HOSTS: 127.0.0.1 wwwbetting.net
HOSTS: 127.0.0.1 wwwpokergames.com
HOSTS: 127.0.0.1 wwwpokerplayers.com
HOSTS: 127.0.0.1 wwwroulette.net
HOSTS: 127.0.0.1 x-library.com
HOSTS: 127.0.0.1 x-webdesign.com
HOSTS: 127.0.0.1 xcomics4u.com
HOSTS: 127.0.0.1 xic-bs.com
HOSTS: 127.0.0.1 xldr.com
HOSTS: 127.0.0.1 xp18.com
HOSTS: 127.0.0.1 xrenosearch.com
HOSTS: 127.0.0.1 xtragay.com
HOSTS: 127.0.0.1 xu.xu.pl
HOSTS: 127.0.0.1 xxxcategories.com
HOSTS: 127.0.0.1 xxxemailxxx.com
HOSTS: 127.0.0.1 y-e-l-l-o-w.com
HOSTS: 127.0.0.1 yellow500.com
HOSTS: 127.0.0.1 yezol.com
HOSTS: 127.0.0.1 you-search.com
HOSTS: 127.0.0.1 you-search.com.ru
HOSTS: 127.0.0.1 youfindall.com
HOSTS: 127.0.0.1 youfindall.net
HOSTS: 127.0.0.1 your-prescriptions.net
HOSTS: 127.0.0.1 yourbookmarks.info
HOSTS: 127.0.0.1 yourbookmarks.ws
HOSTS: 127.0.0.1 ypir.com
HOSTS: 127.0.0.1 ysa-info.net
HOSTS: 127.0.0.1 yukohamano.com
HOSTS: 127.0.0.1 ywebsearch.info
HOSTS: 127.0.0.1 zapros.com
HOSTS: 127.0.0.1 zesearch.com
HOSTS: 127.0.0.1 ziportal.com
HOSTS: 127.0.0.1 zipportal.com
HOSTS: 127.0.0.1 zoneoffreeporn.com
HOSTS: 127.0.0.1 zoomegasite.com
HOSTS: 127.0.0.1 zvimigdal.com
HOSTS: 127.0.0.1 zyban-zocor-levitra.com
HOSTS: 127.0.0.1 t.rack.cc
HOSTS: 127.0.0.1 omega-search.com
HOSTS: 127.0.0.1 cool-xxx.net
HOSTS: 127.0.0.1 revolto3.da.ru
HOSTS: 127.0.0.1 dating-search.net
HOSTS: 127.0.0.1 linksummary.com
HOSTS: 127.0.0.1 duolaimi.net
HOSTS: 127.0.0.1 ez-searching.com
HOSTS: 127.0.0.1 freehqmovies.com
HOSTS: 127.0.0.1 xzoomy.com
HOSTS: 127.0.0.1 freescratchandwin.com
HOSTS: 127.0.0.1 fickenisgeil.de
HOSTS: 127.0.0.1 globalwebsearch.com
HOSTS: 127.0.0.1 www.gocybersearch.com
HOSTS: 127.0.0.1 mayancasino.com
HOSTS: 127.0.0.1 www.hastalavista.com
HOSTS: 127.0.0.1 www.free-popup-killer.com
HOSTS: 127.0.0.1 www.digitalfan.com
HOSTS: 127.0.0.1 google123.web1000.com
HOSTS: 127.0.0.1 search.ieplugin.com
HOSTS: 127.0.0.1 i-lookup.com
HOSTS: 127.0.0.1 spidersearch.com
HOSTS: 127.0.0.1 istarthere.com
HOSTS: 127.0.0.1 xxxtoolbar.com
HOSTS: 127.0.0.1 www.seekporn.org
HOSTS: 127.0.0.1 17-plus.com
HOSTS: 127.0.0.1 lolita4all1.xrensmagpost.com
HOSTS: 127.0.0.1 mafiapics.com
HOSTS: 127.0.0.1 www.teenmonster.com
HOSTS: 127.0.0.1 ie.marketdart.com
HOSTS: 127.0.0.1 masterbar.com
HOSTS: 127.0.0.1 search.netzany.co
HOSTS: 127.0.0.1 only-virgins.com
HOSTS: 127.0.0.1 passthison.com
HOSTS: 127.0.0.1 blondetgp.com
HOSTS: 127.0.0.1 prolivation.com
HOSTS: 127.0.0.1 server-au.imrworldwide.com
HOSTS: 127.0.0.1 .roar.com
HOSTS: 127.0.0.1 rocketsearch.com
HOSTS: 127.0.0.1 searchaccurate.com
HOSTS: 127.0.0.1 searchalot.com
HOSTS: 127.0.0.1 searchandbrowse.com
HOSTS: 127.0.0.1 gtawarehouse.com
HOSTS: 127.0.0.1 startium.com
HOSTS: 127.0.0.1 searchandclick.com
HOSTS: 127.0.0.1 searchby.net
HOSTS: 127.0.0.1 searchdot.com
HOSTS: 127.0.0.1 search-exe.com
HOSTS: 127.0.0.1 secret-crush.com
HOSTS: 127.0.0.1 seekseek.com
HOSTS: 127.0.0.1 sexarena.com
HOSTS: 127.0.0.1 sexocean.play-lolita.com
HOSTS: 127.0.0.1 startsurfing.com
HOSTS: 127.0.0.1 66.197.138.235
HOSTS: 127.0.0.1 srng.net
HOSTS: 127.0.0.1 apps.webservicehost.com
HOSTS: 127.0.0.1 search.shopnav.com
HOSTS: 127.0.0.1 wish7.com
HOSTS: 127.0.0.1 216.65.3.68
HOSTS: 127.0.0.1 www.supersexpass.com
HOSTS: 127.0.0.1 surferbar.com
HOSTS: 127.0.0.1 xlola.underagehost.com
HOSTS: 127.0.0.1 hotlolitas.underagehost.com
HOSTS: 127.0.0.1 loading-lolita.com
HOSTS: 127.0.0.1 www.xupiter.com
HOSTS: 127.0.0.1 xjupiter.com
HOSTS: 127.0.0.1 www.xjupiter.com
HOSTS: 127.0.0.1 www.browserwise.com
HOSTS: 127.0.0.1 sqwire.com
HOSTS: 127.0.0.1 orbitexplorer.com
HOSTS: 127.0.0.1 searchcentrix.com
HOSTS: 127.0.0.1 categories.mygeek.com
HOSTS: 127.0.0.1 web-entrance.co
HOSTS: 127.0.0.1 whazit.com
HOSTS: 127.0.0.1 windowenhancer.com
HOSTS: 127.0.0.1 buz.ru
HOSTS: 127.0.0.1 iwon.com
HOSTS: 127.0.0.1 www.bonzi.com
HOSTS: 127.0.0.1 featured-results.com
HOSTS: 127.0.0.1 searchmadesafe.net
HOSTS: 127.0.0.1 quicklaunch.com
HOSTS: 127.0.0.1 www.cashsurfers.com
HOSTS: 127.0.0.1 .lop.com
HOSTS: 127.0.0.1 .tjdo.com
HOSTS: 127.0.0.1 /tjdo.com
HOSTS: 127.0.0.1 .ebav.com
HOSTS: 127.0.0.1 /ebav.com
HOSTS: 127.0.0.1 .ebgo.com
HOSTS: 127.0.0.1 /ebgo.com
HOSTS: 127.0.0.1 .ebaw.com
HOSTS: 127.0.0.1 /ebaw.com
HOSTS: 127.0.0.1 .ebkb.com
HOSTS: 127.0.0.1 /ebkb.com
HOSTS: 127.0.0.1 .ebmu.com
HOSTS: 127.0.0.1 /ebmu.com
HOSTS: 127.0.0.1 .ecmp.com
HOSTS: 127.0.0.1 /ecmp.com
HOSTS: 127.0.0.1 .edhq.com
HOSTS: 127.0.0.1 /edhq.com
HOSTS: 127.0.0.1 .edty.com
HOSTS: 127.0.0.1 /edty.com
HOSTS: 127.0.0.1 .sbee.com
HOSTS: 127.0.0.1 /sbee.com
HOSTS: 127.0.0.1 .aavc.com
HOSTS: 127.0.0.1 /aavc.com
HOSTS: 127.0.0.1 .acjp.com
HOSTS: 127.0.0.1 /acjp.com
HOSTS: 127.0.0.1 .ecmh.com
HOSTS: 127.0.0.1 /ecmh.com
HOSTS: 127.0.0.1 .emch.com
HOSTS: 127.0.0.1 /emch.com
HOSTS: 127.0.0.1 .ecpm.com
HOSTS: 127.0.0.1 /ecpm.com
HOSTS: 127.0.0.1 .wabu.com
HOSTS: 127.0.0.1 /wabu.com
HOSTS: 127.0.0.1 .wabq.com
HOSTS: 127.0.0.1 .wabq.com
HOSTS: 127.0.0.1 /wabq.com
HOSTS: 127.0.0.1 .ebch.com
HOSTS: 127.0.0.1 /ebch.com
HOSTS: 127.0.0.1 .ebdv.com
HOSTS: 127.0.0.1 /ebdv.com
HOSTS: 127.0.0.1 .ebdw.com
HOSTS: 127.0.0.1 /ebdw.com
HOSTS: 127.0.0.1 .ebjp.com
HOSTS: 127.0.0.1 /ebjp.com
HOSTS: 127.0.0.1 .ebkn.com
HOSTS: 127.0.0.1 /ebkn.com
HOSTS: 127.0.0.1 .ebky.com
HOSTS: 127.0.0.1 /ebky.com
HOSTS: 127.0.0.1 .eblv.com
HOSTS: 127.0.0.1 /eblv.com
HOSTS: 127.0.0.1 .wbkb.com
HOSTS: 127.0.0.1 /wbkb.com
HOSTS: 127.0.0.1 .ebvr.com
HOSTS: 127.0.0.1 /ebvr.com
HOSTS: 127.0.0.1 .ecwz.com
HOSTS: 127.0.0.1 /ecwz.com
HOSTS: 127.0.0.1 .ecyb.com
HOSTS: 127.0.0.1 /ecyb.com
HOSTS: 127.0.0.1 .eduy.com
HOSTS: 127.0.0.1 /eduy.com
HOSTS: 127.0.0.1 .eeev.com
HOSTS: 127.0.0.1 /eeev.com
HOSTS: 127.0.0.1 .farse.com
HOSTS: 127.0.0.1 /farse.com
HOSTS: 127.0.0.1 .ibmx.com
HOSTS: 127.0.0.1 /ibmx.com
HOSTS: 127.0.0.1 .icwb.com
HOSTS: 127.0.0.1 /icwb.com
HOSTS: 127.0.0.1 .icwo.com
HOSTS: 127.0.0.1 /icwo.com
HOSTS: 127.0.0.1 .icwp.com
HOSTS: 127.0.0.1 /icwp.com
HOSTS: 127.0.0.1 .iddh.com
HOSTS: 127.0.0.1 /iddh.com
HOSTS: 127.0.0.1 .idhh.com
HOSTS: 127.0.0.1 /idhh.com
HOSTS: 127.0.0.1 .ifiz.com
HOSTS: 127.0.0.1 /ifiz.com
HOSTS: 127.0.0.1 .iguu.com
HOSTS: 127.0.0.1 /iguu.com
HOSTS: 127.0.0.1 .samz.com
HOSTS: 127.0.0.1 /samz.com
HOSTS: 127.0.0.1 .saoe.com
HOSTS: 127.0.0.1 /saoe.com
HOSTS: 127.0.0.1 .sbjr.com
HOSTS: 127.0.0.1 /sbjr.com
HOSTS: 127.0.0.1 .sbnl.com
HOSTS: 127.0.0.1 /sbnl.com
HOSTS: 127.0.0.1 .sbnt.com
HOSTS: 127.0.0.1 /sbnt.com
HOSTS: 127.0.0.1 .sbvr.com
HOSTS: 127.0.0.1 /sbvr.com
HOSTS: 127.0.0.1 .scbm.com
HOSTS: 127.0.0.1 /scbm.com
HOSTS: 127.0.0.1 .sckr.com
HOSTS: 127.0.0.1 /sckr.com
HOSTS: 127.0.0.1 .scrk.com
HOSTS: 127.0.0.1 /scrk.com
HOSTS: 127.0.0.1 .sdry.com
HOSTS: 127.0.0.1 /sdry.com
HOSTS: 127.0.0.1 .seld.com
HOSTS: 127.0.0.1 /seld.com
HOSTS: 127.0.0.1 .sfux.com
HOSTS: 127.0.0.1 /sfux.com
HOSTS: 127.0.0.1 .sheat.com
HOSTS: 127.0.0.1 /sheat.com
HOSTS: 127.0.0.1 .sipo.com
HOSTS: 127.0.0.1 /sipo.com
HOSTS: 127.0.0.1 .smds.com
HOSTS: 127.0.0.1 /smds.com
HOSTS: 127.0.0.1 .srib.com
HOSTS: 127.0.0.1 /srib.com
HOSTS: 127.0.0.1 .srox.com
HOSTS: 127.0.0.1 /srox.com
HOSTS: 127.0.0.1 .srsf.com
HOSTS: 127.0.0.1 /srsf.com
HOSTS: 127.0.0.1 .ssaw.com
HOSTS: 127.0.0.1 /ssaw.com
HOSTS: 127.0.0.1 .ssby.com
HOSTS: 127.0.0.1 /ssby.com
HOSTS: 127.0.0.1 .surj.com
HOSTS: 127.0.0.1 /surj.com
HOSTS: 127.0.0.1 .tbvg.com
HOSTS: 127.0.0.1 /tbvg.com
HOSTS: 127.0.0.1 .tdak.com
HOSTS: 127.0.0.1 /tdak.com
HOSTS: 127.0.0.1 .tdmy.com
HOSTS: 127.0.0.1 /tdmy.com
HOSTS: 127.0.0.1 .tefs.com
HOSTS: 127.0.0.1 /tefs.com
HOSTS: 127.0.0.1 .tfil.com
HOSTS: 127.0.0.1 /tfil.com
HOSTS: 127.0.0.1 .tjar.com
HOSTS: 127.0.0.1 /tjar.com
HOSTS: 127.0.0.1 .tjaw.com
HOSTS: 127.0.0.1 /tjaw.com
HOSTS: 127.0.0.1 .tjgo.com
HOSTS: 127.0.0.1 /tjgo.com
HOSTS: 127.0.0.1 .tjem.com
HOSTS: 127.0.0.1 /tjem.com
HOSTS: 127.0.0.1 .torc.com
HOSTS: 127.0.0.1 /torc.com
HOSTS: 127.0.0.1 .wfix.com
HOSTS: 127.0.0.1 /wfix.com
HOSTS: 127.0.0.1 .wflu.com
HOSTS: 127.0.0.1 /wflu.com
HOSTS: 127.0.0.1 .tdko.com
HOSTS: 127.0.0.1 /tdko.com
HOSTS: 127.0.0.1 .thko.com
HOSTS: 127.0.0.1 /thko.com
HOSTS: 127.0.0.1 H24413.tfil.com
HOSTS: 127.0.0.1 germany.rub.to
HOSTS: 127.0.0.1 search.rub.to
HOSTS: 127.0.0.1 unitedstates.rub.to
HOSTS: 127.0.0.1 www.commonname.com
HOSTS: 127.0.0.1 www.ezcybersearch.com
HOSTS: 127.0.0.1 www.jethomepage.com
HOSTS: 127.0.0.1 www.gohip.com
HOSTS: 127.0.0.1 hotbar.com
HOSTS: 127.0.0.1 www.huntbar.com
HOSTS: 127.0.0.1 search.imiserver.com
HOSTS: 127.0.0.1 infospace.com/blsrch.dp.toolbar
HOSTS: 127.0.0.1 searchenhancement.com
HOSTS: 127.0.0.1 newtonknows.com
HOSTS: 127.0.0.1 search-explorer.net
HOSTS: 127.0.0.1 searchsquire.com
HOSTS: 127.0.0.1 secondpower.com
HOSTS: 127.0.0.1 2ndpower.com
HOSTS: 127.0.0.1 searchgateway.net
HOSTS: 127.0.0.1 worldusa.com
HOSTS: 127.0.0.1 www.topsearcher.com
HOSTS: 127.0.0.1 smutserver.com
HOSTS: 127.0.0.1 searchmeup.com
HOSTS: 127.0.0.1 cameup.com
HOSTS: 127.0.0.1 kliksearch.com
HOSTS: 127.0.0.1 realphx.com
HOSTS: 127.0.0.1 blazefind.com
HOSTS: 127.0.0.1 66.40.16.198
HOSTS: 127.0.0.1 zoofil.com
HOSTS: 127.0.0.1 terafinder.com
HOSTS: 127.0.0.1 008i.com
HOSTS: 127.0.0.1 171203.com
HOSTS: 127.0.0.1 39-93.com
HOSTS: 127.0.0.1 adult-personal.us
HOSTS: 127.0.0.1 cashsearch.biz
HOSTS: 127.0.0.1 cl55.biz
HOSTS: 127.0.0.1 dailyteenspic.com
HOSTS: 127.0.0.1 dialer2004.com
HOSTS: 127.0.0.1 digital-pornography.com
HOSTS: 127.0.0.1 eager-sex.com
HOSTS: 127.0.0.1 ergosites.com
HOSTS: 127.0.0.1 freecj.com
HOSTS: 127.0.0.1 greg-search.com
HOSTS: 127.0.0.1 incest-host.com
HOSTS: 127.0.0.1 ironcarteam.com
HOSTS: 127.0.0.1 is-best.com
HOSTS: 127.0.0.1 killerpornstars.com
HOSTS: 127.0.0.1 lollitop.com
HOSTS: 127.0.0.1 love-host.com
HOSTS: 127.0.0.1 myexexex.com
HOSTS: 127.0.0.1 my-finder.com
HOSTS: 127.0.0.1 onlineclick.net
HOSTS: 127.0.0.1 onlysex.ws
HOSTS: 127.0.0.1 regfreeze.com
HOSTS: 127.0.0.1 ruworld.com
HOSTS: 127.0.0.1 selltraffic.biz
HOSTS: 127.0.0.1 sexunique.net
HOSTS: 127.0.0.1 sinpussy.com
HOSTS: 127.0.0.1 teenhost.net
HOSTS: 127.0.0.1 ultraload.net
HOSTS: 127.0.0.1 vse-moe.biz
HOSTS: 127.0.0.1 xsex.ws
HOSTS: 127.0.0.1 .75tz.com
HOSTS: 127.0.0.1 /75tz.com
HOSTS: 127.0.0.1 .iefeadsl.com
HOSTS: 127.0.0.1 /iefeadsl.com
HOSTS: 127.0.0.1 /rf104.com
HOSTS: 127.0.0.1 .rf104.com
HOSTS: 127.0.0.1 www.v61.com
HOSTS: 127.0.0.1 .00hq.com
HOSTS: 127.0.0.1 /00hq.com
HOSTS: 127.0.0.1 ads.centralmedia.ws
HOSTS: 127.0.0.1 c.centralmedia.ws
HOSTS: 127.0.0.1 .count.cc
HOSTS: 127.0.0.1 /count.cc
HOSTS: 127.0.0.1 .topx.cc
HOSTS: 127.0.0.1 /topx.cc
HOSTS: 127.0.0.1 www.sidefind.com
HOSTS: 127.0.0.1 thenewsearch.com
HOSTS: 127.0.0.1 new-search.net
HOSTS: 127.0.0.1 x-google.net
HOSTS: 127.0.0.1 adultgambling.org
HOSTS: 127.0.0.1 bitchesonline.net
HOSTS: 127.0.0.1 girls4rent.net
HOSTS: 127.0.0.1 usefullsoft.net
HOSTS: 127.0.0.1 livegambling.com
HOSTS: 127.0.0.1 adultsgames.net
HOSTS: 127.0.0.1 easyantispy.com
HOSTS: 127.0.0.1 spybotremover.net
HOSTS: 127.0.0.1 winprotect.net
HOSTS: 127.0.0.1 funny-girls.com
HOSTS: 127.0.0.1 winmsn.com


**** IE Settings ****

Default Page: http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
Default Search: http://www.microsoft.com/isapi/redir.dl ... r=iesearch
Local Page: C:\WINDOWS\system32\blank.htm
Search Page: http://www.microsoft.com/isapi/redir.dl ... r=iesearch


**** IE Context Menu (Right click) ****

IEContext: [E&xporter vers Microsoft Excel] res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000


**** Layered Service Providers ****

LSP: PAV_LAYERED over [MSAFD Tcpip [TCP/IP]]
LSP: PAV_LAYERED over [MSAFD Tcpip [UDP/IP]]
LSP: MSAFD Tcpip [TCP/IP]
LSP: MSAFD Tcpip [UDP/IP]
LSP: RSVP UDP Service Provider
LSP: RSVP TCP Service Provider
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{E11178EE-71BE-4BDB-9452-B590B3840F13}] SEQPACKET 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{E11178EE-71BE-4BDB-9452-B590B3840F13}] DATAGRAM 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{850CAE2E-7362-4FFC-943A-9CCEAAC0CB5F}] SEQPACKET 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{850CAE2E-7362-4FFC-943A-9CCEAAC0CB5F}] DATAGRAM 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A1E42722-EA8C-436F-8FF7-0B1BF57FF9F1}] SEQPACKET 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A1E42722-EA8C-436F-8FF7-0B1BF57FF9F1}] DATAGRAM 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{64939F86-3916-49A8-96E6-5265E107D89B}] SEQPACKET 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{64939F86-3916-49A8-96E6-5265E107D89B}] DATAGRAM 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{15A499C2-821B-4880-8092-B100E8A615F3}] SEQPACKET 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{15A499C2-821B-4880-8092-B100E8A615F3}] DATAGRAM 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{8CC1A5AE-F6F4-4DEA-9A9B-E235B5628F10}] SEQPACKET 5
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{8CC1A5AE-F6F4-4DEA-9A9B-E235B5628F10}] DATAGRAM 5
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{313D7377-A112-43E1-A45D-01D498835DE5}] SEQPACKET 6
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{313D7377-A112-43E1-A45D-01D498835DE5}] DATAGRAM 6


**** Blocked Control Panel Items ****

BLOCKED: [ncpa.cpl] No
BLOCKED: [odbccp32.cpl] No


**** Downloaded Program Files ****

Dexia netbanking [http://netbanking.dexia.be/PC//Dynamic/Shared/Applet//DexiaIIA.cab]
Microsoft XML Parser for Java [file://C:\WINDOWS\Java\classes\xmldso.cab]
{0000000A-0000-0010-8000-00AA00389B71} [http://download.microsoft.com/download/d/4/4/d446e8a9-3a86-4b59-bb19-f5bd11b40367/wmavax.CAB]
{33564D57-0000-0010-8000-00AA00389B71} [http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB]
{6414512B-B978-451D-A0D8-FCFDF33E833C} [http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1122142441015] C:\WINDOWS\System32\wuweb.dll
{8AD9C840-044E-11D1-B3E9-00805F499D93} [http://java.sun.com/update/1.5.0/jinstall-1_5_0_04-windows-i586.cab]
{B38870E4-7ECB-40DA-8C6A-595F0A5519FF} [http://messenger.msn.com/download/msnmessengersetupdownloader.cab]
{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA} [http://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab]
{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} [http://java.sun.com/update/1.5.0/jinstall-1_5_0_04-windows-i586.cab]
{D27CDB6E-AE6D-11CF-96B8-444553540000} [http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab]


**** Windows Services ****

[Alerter] %SystemRoot%\System32\svchost.exe -k LocalService
[ALG] %SystemRoot%\System32\alg.exe
[AppMgmt] %SystemRoot%\system32\svchost.exe -k netsvcs
[aspnet_state] %SystemRoot%\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
[Ati HotKey Poller] %SystemRoot%\System32\Ati2evxx.exe
[ATI Smart] C:\WINDOWS\system32\ati2sgag.exe
[AudioSrv] %SystemRoot%\System32\svchost.exe -k netsvcs
[BITS] %SystemRoot%\System32\svchost.exe -k netsvcs
[Browser] %SystemRoot%\System32\svchost.exe -k netsvcs
[CiSvc] %SystemRoot%\system32\cisvc.exe
[ClipSrv] %SystemRoot%\system32\clipsrv.exe
[COMSysApp] C:\WINDOWS\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
[CryptSvc] %SystemRoot%\system32\svchost.exe -k netsvcs
[DcomLaunch] %SystemRoot%\system32\svchost -k DcomLaunch
[Dhcp] %SystemRoot%\System32\svchost.exe -k netsvcs
[dmadmin] %SystemRoot%\System32\dmadmin.exe /com
[dmserver] %SystemRoot%\System32\svchost.exe -k netsvcs
[Dnscache] %SystemRoot%\System32\svchost.exe -k NetworkService
[ERSvc] %SystemRoot%\System32\svchost.exe -k netsvcs
[Eventlog] %SystemRoot%\system32\services.exe
[EventSystem] C:\WINDOWS\System32\svchost.exe -k netsvcs
[FastUserSwitchingCompatibility] %SystemRoot%\System32\svchost.exe -k netsvcs
[helpsvc] %SystemRoot%\System32\svchost.exe -k netsvcs
[HidServ] %SystemRoot%\System32\svchost.exe -k netsvcs
[HTTPFilter] %SystemRoot%\System32\svchost.exe -k HTTPFilter
[ImapiService] C:\WINDOWS\System32\imapi.exe
[lanmanserver] %SystemRoot%\System32\svchost.exe -k netsvcs
[lanmanworkstation] %SystemRoot%\System32\svchost.exe -k netsvcs
[LmHosts] %SystemRoot%\System32\svchost.exe -k LocalService
[MDM] "C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE"
[Messenger] %SystemRoot%\System32\svchost.exe -k netsvcs
[mnmsrvc] C:\WINDOWS\System32\mnmsrvc.exe
[MSDTC] C:\WINDOWS\System32\msdtc.exe
[MSIServer] C:\WINDOWS\System32\msiexec.exe /V
[NetDDE] %SystemRoot%\system32\netdde.exe
[NetDDEdsdm] %SystemRoot%\system32\netdde.exe
[Netlogon] %SystemRoot%\System32\lsass.exe
[Netman] %SystemRoot%\System32\svchost.exe -k netsvcs
[Nla] %SystemRoot%\System32\svchost.exe -k netsvcs
[NtLmSsp] %SystemRoot%\System32\lsass.exe
[NtmsSvc] %SystemRoot%\system32\svchost.exe -k netsvcs
[ose] "C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE"
[PavPrSrv] "C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe"
[PAVSRV] "C:\Program Files\Panda Software\Panda Titanium Antivirus 2004\pavsrv51.exe"
[PlugPlay] %SystemRoot%\system32\services.exe
[Pml Driver HPZ12] C:\WINDOWS\System32\HPZipm12.exe
[PolicyAgent] %SystemRoot%\System32\lsass.exe
[ProtectedStorage] %SystemRoot%\system32\lsass.exe
[PSIMSVC] "C:\Program Files\Panda Software\Panda Titanium Antivirus 2004\PsImSvc.exe"
[RasAuto] %SystemRoot%\System32\svchost.exe -k netsvcs
[RasMan] %SystemRoot%\System32\svchost.exe -k netsvcs
[RDSessMgr] C:\WINDOWS\system32\sessmgr.exe
[RemoteAccess] %SystemRoot%\System32\svchost.exe -k netsvcs
[RemoteRegistry] %SystemRoot%\system32\svchost.exe -k LocalService
[RpcLocator] %SystemRoot%\System32\locator.exe
[RpcSs] %SystemRoot%\system32\svchost -k rpcss
[RSVP] %SystemRoot%\System32\rsvp.exe
[SamSs] %SystemRoot%\system32\lsass.exe
[SCardSvr] %SystemRoot%\System32\SCardSvr.exe
[Schedule] %SystemRoot%\System32\svchost.exe -k netsvcs
[seclogon] %SystemRoot%\System32\svchost.exe -k netsvcs
[SENS] %SystemRoot%\system32\svchost.exe -k netsvcs
[SharedAccess] %SystemRoot%\System32\svchost.exe -k netsvcs
[ShellHWDetection] %SystemRoot%\System32\svchost.exe -k netsvcs
[Spooler] %SystemRoot%\system32\spoolsv.exe
[srservice] %SystemRoot%\System32\svchost.exe -k netsvcs
[SSDPSRV] %SystemRoot%\System32\svchost.exe -k LocalService
[stisvc] %SystemRoot%\System32\svchost.exe -k imgsvc
[SwPrv] C:\WINDOWS\System32\dllhost.exe /Processid:{F305CE2B-4767-4873-892A-595835780BA9}
[SysmonLog] %SystemRoot%\system32\smlogsvc.exe
[TapiSrv] %SystemRoot%\System32\svchost.exe -k netsvcs
[TermService] %SystemRoot%\System32\svchost -k DComLaunch
[Themes] %SystemRoot%\System32\svchost.exe -k netsvcs
[TlntSvr] C:\WINDOWS\System32\tlntsvr.exe
[TrkWks] %SystemRoot%\system32\svchost.exe -k netsvcs
[UMWdf] C:\WINDOWS\System32\wdfmgr.exe
[upnphost] %SystemRoot%\System32\svchost.exe -k LocalService
[UPS] %SystemRoot%\System32\ups.exe
[VSS] %SystemRoot%\System32\vssvc.exe
[W32Time] %SystemRoot%\System32\svchost.exe -k netsvcs
[WebClient] %SystemRoot%\System32\svchost.exe -k LocalService
[winmgmt] %systemroot%\system32\svchost.exe -k netsvcs
[WmdmPmSN] %SystemRoot%\System32\svchost.exe -k netsvcs
[Wmi] %SystemRoot%\System32\svchost.exe -k netsvcs
[WmiApSrv] C:\WINDOWS\System32\wbem\wmiapsrv.exe
[wscsvc] %SystemRoot%\System32\svchost.exe -k netsvcs
[wuauserv] %systemroot%\system32\svchost.exe -k netsvcs
[WZCSVC] %SystemRoot%\System32\svchost.exe -k netsvcs
[xmlprov] %SystemRoot%\System32\svchost.exe -k netsvcs


**** Custom IE Search Items ****

SEARCH: [SearchAssistant] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
SEARCH: [CustomizeSearch] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
SEARCH: [Default_Search_URL] http://www.microsoft.com/isapi/redir.dl ... r=iesearch


**** Complete IE Options ****

IEOPT: [NoUpdateCheck]
IEOPT: [NoJITSetup]
IEOPT: [Disable Script Debugger] yes
IEOPT: [Show_ChannelBand] No
IEOPT: [Anchor Underline] yes
IEOPT: [Cache_Update_Frequency] Once_Per_Session
IEOPT: [Display Inline Images] yes
IEOPT: [Do404Search]
IEOPT: [Local Page] C:\WINDOWS\system32\blank.htm
IEOPT: [Save_Session_History_On_Exit] no
IEOPT: [Show_FullURL] no
IEOPT: [Show_StatusBar] yes
IEOPT: [Show_ToolBar] yes
IEOPT: [Show_URLinStatusBar] yes
IEOPT: [Show_URLToolBar] yes
IEOPT: [Start Page] http://www.tiscali.be/
IEOPT: [Use_DlgBox_Colors] yes
IEOPT: [Search Page] http://www.microsoft.com/isapi/redir.dl ... r=iesearch
IEOPT: [Error Dlg Displayed On Every Error] no
IEOPT: [Error Dlg Details Pane Open] no
IEOPT: [FullScreen] no
IEOPT: [Window_Placement] ,
IEOPT: [NotifyDownloadComplete] yes
IEOPT: [Use FormSuggest] no
IEOPT: [AddToFavoritesExpanded]
IEOPT: [ShowedCheckBrowser] Yes
IEOPT: [Check_Associations] No
IEOPT: [Use Custom Search URL]
IEOPT: [AutoSearch]
IEOPT: [Default_Page_URL] http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
IEOPT: [Default_Search_URL] http://www.microsoft.com/isapi/redir.dl ... r=iesearch
IEOPT: [Search Page] http://www.microsoft.com/isapi/redir.dl ... r=iesearch
IEOPT: [Enable_Disk_Cache] yes
IEOPT: [Cache_Percent_of_Disk]
IEOPT: [Delete_Temp_Files_On_Exit] yes
IEOPT: [Local Page] %SystemRoot%\system32\blank.htm
IEOPT: [Anchor_Visitation_Horizon]
IEOPT: [Use_Async_DNS] yes
IEOPT: [Placeholder_Width]
IEOPT: [Placeholder_Height]
IEOPT: [Start Page] http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
IEOPT: [CompanyName] Microsoft Corporation
IEOPT: [Custom_Key] MICROSO
IEOPT: [Wizard_Version] 6.0.2600.0000
IEOPT: [FullScreen] no


J'ai également une ligne vide dans MSconfig>démarrage...

Mon pc prend vraiment du temps au lancement avant que les icônes du bureau soient actives.

voici les propriétés du fichier demandé:

Taille: 157 Ko (160 768 octets)
Taille sur le disque: 160 Ko (163 840 octets
Crée le: lundi 20 juin 2005, 09:20:27
Modifié le: vendredi 20 août 2004, 01:09:58 (???)
dernier accès: samedi 20 août 2005, 09:21:29
Version: 5.1.2600.2180
Copyright: © Microsoft Corporation. Tous droits réservés

Merci pour ton aide,
piou
piou
 

Messagede nickW » 20 Aoû 2005, 12:24

Bonjour,

Le parasite CWS a créé une variante baptisée CWS.Msconfig, qui se caractérise par:
1/ L'existence d'un fichier msconfig.exe dans C:\WINDOWS\SYSTEM
2/ L'existence d'un fichier openme.htm dans C:\WINDOWS\system32
3/ La présence dans le log HijackThis de trois lignes:
O4 - HKLM\..\Run: [msconfig] C:\WINDOWS\SYSTEM\msconfig.exe
O4 - HKCU\..\Run: [msconfig] C:\WINDOWS\SYSTEM\msconfig.exe
O8 - Extra context menu item: ?????? - C:\WINDOWS\system32\openme.htm


Lorsque tu redémarres ton PC en mode sans échec, Windows crée dans le démarrage une ligne dont le but est de te rappeler que ton démarrage n'est pas "normal" (démarrage sélectif).
Cette ligne se retrouve dans le log HijackThis sous la forme:
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto


J'ai la très nette impression que le programme CWShredder de InterMute/TrendMicro se plante, et annonce un faux positif.

Si tu avais réellement CWS.MSconfig, tu pourrais retrouver les deux fichiers mentionnés ci-dessus, l'infection serait aussi détectée en mode normal et tu aurais des messages d'erreur concernant MSConfig.

Salut,
nickW - Image
30/07/2012: Plus de désinfection de PC jusqu'à nouvel ordre.
Pas de demande d'analyse de log en MP (Message Privé)
Mes configs
Avatar de l’utilisateur
nickW
Modérateur
 
Messages: 21698
Inscription: 20 Mai 2004, 17:41
Localisation: Dordogne/Île de France

Messagede piou » 20 Aoû 2005, 12:46

Salut,

dois je en conclure que, au vu de mon log hijackthis et du fait que ad aware ne trouve rien, Panda non plus, a² non plus et Spybot non plus>>>mon PC est totalement sain???

Comment se fait il alors qu'il charge beaucoup plus au démarrage qu'avant, et que je dois maintenant attendre près d'une minute une fois arrivé sur le bureau pour pouvoir lancer un programme, ce qu'il ne faisait pas avant.

Sinon il est vrai que je ne rencontre aucun calage, ni mauvais fonctionnement de programme.Parfois juste mon pc travaille énormément alors que je ne lui demande rien.

Merci
piou
piou
 

Messagede Vazkor » 20 Aoû 2005, 18:13

Bonsoir,

Pour ton problème de PC qui met du temps à démarrer et semble turbiner:
Tu devrais vérifier sil n'y a pas trop de services qui tournent inutilement.
Dans Démarrer > Exécuter, tape services.msc et regarde ce qui est démarré.
Si tu vois que tu as des services démarrés concerant des matériels que tu n'as pas (liaison IR, sans fil, onduleur) ou des applications que tu n'utilises pas, arrrête les et passe les en mode Manuel s'ils sont en Automatique.

C'est d'ailleurs une astuce citée par McPeter pour tous les services douteux. Les arrêter et les mettre en manuel. Voir de temps en temps si Windows les a démarrés. Les repasser en Automatique si c'est le cas. Si certains ne sont jamais démarrés, on peut sans trop de crainte les Désactiver.

Avec HijackThis, tu peux franchement fixer ces deux lignes. Ces applications ne doivent pas être lancées systématiquement au démarrage.
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [Name of App] C:\Program Files\SAMSUNG\FW LiveUpdate\Liveupdate.exe
->Toujours préferer faire ses updates manuellement
Vérifie avec la liste de Pacman, l'utilité de ces programmes:
O4 - HKCU\..\Run: [DrvMon.exe] C:\WINDOWS\System32\DrvMon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
[le dernier me paraît tout à fait inutile]


[quote=NickW"]
2/ Version "Je ne peux plus vivre si cette clé reste sur mon PC".

"Télécharger
http://users.pandora.be/bluepatchy/Psguardregfix.zip

Décompresser l'archive et faire un double clic sur shudder.bat. Envoyer le log en réponse."
Note importante: Je n'ai aucun moyen de tester cette solution. A tes risques et périls.
[/quote]

Je m'y suis risqué -
- après avoir copié reg.exe (de XP) dans mon dossier System32 de Windows 2000.
- en modifiant le fichier bat pour créer d'abord une clé à détecter et tenter de la supprimer
Code: Tout sélectionner
REM Ajout pour tester sur ma machine, qui est saine
reg add HKEY_LOCAL_MACHINE\SOFTWARE\ShudderLTD
REM Fin d'ajout


Tout se passe bien sauf que je lis, dans le shudder.txt créé
Adding Dummyhive ...........
Error: The operation could not be completed

Quand je lance regedit, je constate que les deux clés
HKEY_LOCAL_MACHINE\SOFTWARE\ShudderLTD
HKEY_LOCAL_MACHINE\SOFTWARE\ShudderLTDDummy sont toujours là.
Mais elles sont vides et je peux les supprimer manuellement via regedit.

Ma conclusion:
Tu peux tester ce Psguardregfix. Il est sans risque.

Si cela ne marche pas, tu peux tenter de modifier manuellement les autorisations de la clé
HKEY_LOCAL_MACHINE\SOFTWARE\ShudderLTD.
Sous Windows 2000, je ne peux y accéder que via regedt32, déployer la clé et utiliser Sécurité > Autorisations.
Je crois savoir que sous Windows XP, c'est possible directement depuis regedit.

A suivre,
Avatar de l’utilisateur
Vazkor
 
Messages: 9810
Inscription: 05 Nov 2002, 23:39
Localisation: Ans, BE

Messagede piou » 20 Aoû 2005, 18:34

salut,

je viens de passer un coup de l'utilitaire pour fixer PSGuard.Voici le rapport qu'il m'affiche:

Testing presence of HKEY_LOCAL_MACHINE\SOFTWARE\ShudderLTD ...........


! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SOFTWARE\ShudderLTD

HKEY_LOCAL_MACHINE\SOFTWARE\ShudderLTD\PSGuard
Creating dummy ..........

L'opération s'est bien déroulée

Hiving Dummy / Saving Dummyhive ..........

L'opération s'est bien déroulée

Deleting Dummy ..........

L'opération s'est bien déroulée

Adding Dummyhive ...........

L'opération s'est bien déroulée
Deleting ShudderLTD ...........

L'opération s'est bien déroulée
Checking if ShudderLTD is still present ..........


Deleting leftovers in registry ..........

Leftovers deleted!

Je vous dirai si Spybot trouve encore PSGuard ou non demain.
Je vais m'occuper de fixer les lignes HJT.

Pour les services, y'en a une volée qui sont démarré automatiquement mais je connais pas fort bien les antrailles de ma amchine et j'ai peur de désactivé des trucs indispensables à son bon fonctionnement!
Mais c'est quand même bizare que ça ne le faisait pas avant alors que ces mêmes services étaient probablement déjà actifs...

Merci
piou
piou
 

Messagede nickW » 20 Aoû 2005, 18:39

Bonsoir,

J'ai recherché un programme d'analyse du boot pour XP, et n'ai trouvé que Boot Log XP de GREATIS Software, en version d'évaluation de 30 jours:
http://www.greatis.com/utilities/bootlogxp/

(Ah, le bon vieux temps de Windows 9x, pour lesquels existait pour ce faire un très bon programme gratuit! :wink: )

A essayer si tu ne trouves aucune autre solution.

Salut,
nickW - Image
30/07/2012: Plus de désinfection de PC jusqu'à nouvel ordre.
Pas de demande d'analyse de log en MP (Message Privé)
Mes configs
Avatar de l’utilisateur
nickW
Modérateur
 
Messages: 21698
Inscription: 20 Mai 2004, 17:41
Localisation: Dordogne/Île de France

PrécédenteSuivante

Retourner vers Sécurité (Contamination - Décontamination)

Qui est en ligne

Utilisateurs parcourant ce forum: Aucun utilisateur enregistré et 20 invités