Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

cws.msconfig

Gof

Par Gof
dans Analyses et éradication malwares

 Partager

Messages recommandés

  • Modérateurs
Gof Devil Member !

Gof

Posté(e)
  • Modérateurs
Posté(e) (modifié)

Bonjour à tous, et merci de vos aides diverses à tous. Ne suis pas très doué, et je m'efforce de lire et d'appliquer vos différents conseils que je parcours à longueur des forums.

 

Trendmicro cwshredder m'a trouvé une infection cws.msconfig. Lorsque je clique sur le lien pour savoir ce que c'est, voilà le résultat

CWS.Msconfig

Variant 31: - CWS.Msconfig

Approx date first sighted: February 5, 2004

Symptoms: IE pages being hijacked to www.31234.com on system startup and when changing homepage back, continuous errors about an invalid Registry script in temp2.txt, extra item in right-click menu of webpages named '??????'

Cleverness: 2/10

Manual removal difficulty: Involves a process killer, some Registry editing and restoring a Windows system file from CD

This variant uses the filename msconfig.exe which overwrites the real Windows file in Windows 98/98SE/ME. The temp2.txt file it drops is actually a Registry script, but since it's in the wrong format, Windows 9x/ME will throw up an error about an invalid Registry script. Windows 2000/XP will import it without complaining, creating the '??????' item in the IE right-click menu. The msconfig.exe file will always stay in memory, reinstalling the hijack every 5 seconds. Killing the process, deleting the file and restoring the IE homepages/search pages fixes this hijack.

 

The real Windows file msconfig.exe can be download here, if you can't restore it from your Windows Setup CD for some reason.

 

N'étant pas très doué en anglais, je crois comprendre que le fichier original a été remplacé. Puis je le fixer sans problèmes ?

 

Merci de vos réponses.

Modifié par Gof

Thanos Devil Member !

Thanos

Posté(e)
Posté(e) (modifié)

salut Gof

 

cws.msconfig est une infection qui redirige ta page de démarrage d'IE vers une adresse(un site crapuleux)

 

Sous windows 98,je traduis=>

Manual removal difficulty: Involves a process killer, some Registry editing and restoring a Windows system file from CD

This variant uses the filename msconfig.exe which overwrites the real Windows file in Windows 98/98SE/ME. The temp2.txt file it drops is actually a Registry script, but since it's in the wrong format, Windows 9x/ME will throw up an error about an invalid Registry script.

La difficulté pour l'éliminer manuellement est la suivante: ca implique de tuer un processus,quelques valeurs dans la base de registre,et la restauration d'un fichier système à l'aide du cd.

La variante prend le nom de "msconfig.exe" :elle écrase les fichiers windows légitimes sous Windows 98/98SE/ME.

Le fichier " temp2.txt " qu'elle crée,est un vrai script,mais du fait qu'il est crée sous le mauvais format,Windows 9x/ME lance un message d'erreur .Le problème est moins ennuyeux sous windows 2000/xp

 

Ce que je te conseille,Gof c'est de suivre cette procédure pour nettoyer ton pc:

 

http://forum.zebulon.fr/index.php?showtopic=83986

 

Puis on t'aidera a nettoyer le reste :P

Modifié par charles ingals
  • Modérateurs
Gof Devil Member !

Gof

Posté(e)
  • Auteur
  • Modérateurs
Posté(e)

salut Gof

 

cws.msconfig est une infection qui redirige ta page de démarrage d'IE vers une adresse(un site crapuleux)

 

Sous windows 98,je traduis=>

La difficulté pour l'éliminer manuellement est la suivante: ca implique de tuer un processus,quelques valeurs dans la base de registre,et la restauration d'un fichier système à l'aide du cd.

La variante prend le nom de "msconfig.exe" :elle écrase les fichiers windows légitimes sous Windows 98/98SE/ME.

Le fichier " temp2.txt " qu'elle crée,est un vrai script,mais du fait qu'il est crée sous le mauvais format,Windows 9x/ME lance un message d'erreur .Le problème est moins ennuyeux sous windows 2000/xp

 

Ce que je te conseille,Gof c'est de suivre cette procédure pour nettoyer ton pc:

 

http://forum.zebulon.fr/index.php?showtopic=83986

 

Puis on t'aidera a nettoyer le reste :P

 

Merci ! Je vais de ce pas suivre le lien :P

  • Modérateurs
Gof Devil Member !

Gof

Posté(e)
  • Auteur
  • Modérateurs
Posté(e)

J'ai donc suivi la procédure ; le "cleanmgr" et le scan Antivir en mode sans échec. Je me suis fait peur, il a trouvé plein de trucs...

 

Voilà le rapport de l'analyse HijackThis :

Logfile of HijackThis v1.99.1

Scan saved at 21:52:09, on 22/01/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\LEXBCES.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\LEXPPS.EXE

C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe

C:\WINDOWS\system32\slserv.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\HHVcdV7Sys\VC7SecS.exe

C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe

C:\WINDOWS\system32\ZoneLabs\vsmon.exe

C:\WINDOWS\System32\MsPMSPSv.exe

C:\WINDOWS\system32\taskmgr.exe

C:\WINDOWS\explorer.exe

C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =

 

http://www.wanadoo.fr/go/page_recherche/

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aliceadsl.fr/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

 

http://www.aliceadsl.fr

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride =

 

localhost

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} -

 

C:\PROGRA~1\Wanadoo\SEARCH~1.DLL

O1 - Hosts: symbole '#'.

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program

 

Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} -

 

C:\Program Files\SpywareGuard\dlprotect.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} -

 

C:\a\SPYBOT~1\SDHelper.dll

O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN

 

Apps\ST\01.03.0000.1005\en-xu\stmain.dll

O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program

 

Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll

O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN

 

Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll

O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe

O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [AVAUTODELETE] "C:\Documents and Settings\All Users\Application

 

Data\AntiVir PersonalEdition classic\UPGRADE\upgrade.exe" /restart

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\a\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [RegClean Expert Scheduler] "C:\Program Files\Registry Clean

 

Expert\RCScheduler.exe" /startup

O4 - HKCU\..\Run: [update Service] "C:\Program Files\Fichiers communs\Teknum

 

Systems\update.exe" /startup

O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe

O4 - Global Startup: Raccourci vers MsgPlus.exe.lnk = C:\Program Files\MessengerPlus!

 

3\MsgPlus.exe

O8 - Extra context menu item: Open With JPEGCompress - res://C:\Program

 

Files\JPEGCompress\owjc.dll/CONTEXT_HANDLE.HTM

O8 - Extra context menu item: Voir les cookies - C:\WINDOWS\web\showcookies.htm

O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} -

 

C:\a\WinHTTrack\WinHTTrackIEBar.dll

O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040}

 

- C:\a\WinHTTrack\WinHTTrackIEBar.dll

O9 - Extra button: Organise-notes - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Program

 

Files\Fichiers communs\Microsoft Shared\Encarta Researcher\EROPROJ.DLL

O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} -

 

http://www.wanadoo.fr (file missing) (HKCU)

O9 - Extra button: Alice ADSL - {509996F3-3960-479D-857F-34FAC7DB949E} -

 

http://www.aliceadsl.fr (file missing) (HKCU)

O14 - IERESET.INF: START_PAGE_URL=http://www.aliceadsl.fr

O15 - Trusted Zone: http://download.windowsupdate.com

O15 - Trusted Zone: http://*.windowsupdate.com

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation

 

Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -

 

http://update.microsoft.com/windowsupdate/...site.cab?113016

 

0010867

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -

 

http://update.microsoft.com/microsoftupdat..._site.cab?11377

 

88134032

O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) -

 

http://config.zebulon.fr/plugins/hardwaredetection.cab

O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -

 

http://acs.pandasoftware.com/activescan/as5free/asinst.cab

O16 - DPF: {A5173EA8-1337-4BAB-A67E-198C9919D9CC} -

 

http://213.11.100.7/websetup/websetup2.cab

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -

 

"C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

O20 - AppInit_DLLs: MsgPlusLoader.dll

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. -

 

C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. -

 

C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. -

 

C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. -

 

C:\WINDOWS\system32\LEXBCES.EXE

O23 - Service: Trend Micro Central Control Component (PcCtlCom) - Unknown owner -

 

C:\a\ANTIVI~1\TRENDM~1\PcCtlCom.exe (file missing)

O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Unknown owner -

 

C:\a\ANTIVI~1\TRENDM~1\Tmntsrv.exe (file missing)

O23 - Service: Trend Micro Personal Firewall (TmPfw) - Unknown owner -

 

C:\a\ANTIVI~1\TRENDM~1\TmPfw.exe (file missing)

O23 - Service: Trend Micro Proxy Service (tmproxy) - Unknown owner -

 

C:\a\ANTIVI~1\TRENDM~1\tmproxy.exe (file missing)

O23 - Service: Virtual CD v7 Management Service (VC7SecS) - H+H Software GmbH - C:\Program

 

Files\HHVcdV7Sys\VC7SecS.exe

O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH -

 

C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC -

 

C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Visiblement, il y a des lignes où les fichiers manquent, je suppose que je pourrais les fixer sans pb ? En tout cas merci d'avance.

  • Modérateurs
Gof Devil Member !

Gof

Posté(e)
  • Auteur
  • Modérateurs
Posté(e)

Bonjour à tous ! Dois-je reposter ma demande d'analyse de rapport suite à l'infection, ou je la laisse ici sur le même sujet ?

bruce lee Devil Member !

bruce lee

Posté(e)
Posté(e)

bonsoir gof et charles ingals

Bonjour à tous ! Dois-je reposter ma demande d'analyse de rapport suite à l'infection, ou je la laisse ici sur le même sujet ?

 

je ne suis pas vieux sur le forum mais je pense que tu dois le laisser ici, Charles Ingals a surement la question en surveillance.

Thanos Devil Member !

Thanos

Posté(e)
Posté(e)

salut bruce lee :P ,Gof

 

Ouaip ! Bizarre cette ligne 01 => O1 - Hosts: symbole '#'

 

Peut tu me copier (si il ne fait pas deux pages!) le contenu de ton fichier Hosts?

 

Il se trouve dans le dossier suivant(en gras) => C:\WINDOWS\system32\drivers\etc

 

Double clique sur le fichier hosts, une fenêtre apparaitra te demandant quel programme utiliser pour l'ouvrir,

 

sélectionner le Bloc-notes et clique sur OK .

 

Fais scanner ton pc par Ewido=>

 

Télécharge la version d'essai d'Ewido=>ici :

et l'installer (important: pendant l'installation, sur la page "Additional Options"

décocher les deux options "Install background guard" et "Install scan via context

menu")Met le à jour.

Lorsque tu es passé en mode sans échec, relances Ewido et cliquer sur scanner puis sur scan complet du système.

Si des fichiers infectés sont trouvés, garder l'option par défaut Supprimer (avec la ligne "Créer des copies de sauvegarde cryptées dans la quarantaine" cochée).

A la fin du scan, Sauver le rapport (Fichier/Enregistrer sous...) et l'envoyer

  • Modérateurs
Gof Devil Member !

Gof

Posté(e)
  • Auteur
  • Modérateurs
Posté(e)

Bonjour Bruce Lee et Charles Ingals,

merci de ta réponse Bruce Lee.

Merci Charles Ingals d'ajoir jeté un coup d'oeil. Je poste ce soir en rentrant du boulot ce que tu as demandé. J'ai regardé vite fait le fichier Host, j'en ai plusieurs (un fichier host de spyboot, un autre de msn, etc...) Je les mettrai tous dans le doute. Merci bonne journée ! :P

  • Modérateurs
Gof Devil Member !

Gof

Posté(e)
  • Auteur
  • Modérateurs
Posté(e)

Bonjour,

j'ai un peu traîner pour poster, j'en suis navré. J'ai recommencé la procédure de nettoyage à titre de sécurité. Et j'ai désinstallé quelques petits logiciels dont je ne me servais plus. J'ai constaté dans le rapport de l'analyse d'ANTIVIR qu'il y avait des fichiers auxquels il n'avait pas pu accéder, est-ce normal ? Dans le doute, j'ai joint le rapport d'analyse.

Ci-dessous sinon ce qui était demandé : le contenu de mes fichiers hosts, et le rapport d'analyse EWIDO. (J'ai fait également une autre analyse HijackThis, je peux également reposter la deuxième analyse s'il y a besoin).

Merci d'avance, vraiment grand merci d'y jeter un oeil, car je n'y comprends pas grand chose...! :P Désolé également de la longueur de ce post.

 

Creation date of the report file: jeudi 26 janvier 2006 07:03

 

AntiVir®/XP (2000 + NT) PersonalEdition Classic

Build 1114 of 04.11.2005

Mainprogram 6.32.00.51 of 03.11.2005

VDF file 6.33.0.162 (0) of 25.01.2006

 

 

This program is for PERSONAL USE only.

Any other use is PROHIBITED.

Informations regarding commercial versions of AntiVir may be obtained from:

www.hbedv.com.

 

 

Scanning for 292684 virus strains and unwanted programs.

 

Licensed for: AntiVir Personal Edition

Serial number: 0000149991-WURGE-0001

 

Please enter the workstation and

contact name with phone number in this form:

 

Name ___________________________________________

 

Street ___________________________________________

 

Town ___________________________________________

 

Phone/Fax ___________________________________________

 

Email ___________________________________________

 

Platform: Windows NT Workstation

Windows version: 5.1 Build 2600 (Service Pack 2)

Username: GOF

Processor: Pentium

Working memory: 490992 KB free

 

Version information:

AVWIN.DLL : 6.32.00.51 561192 04.11.2005 07:50:54

AVEWIN32.DLL : 6.33.0.77 1008128 23.01.2006 07:09:52

AVGNT.EXE : 6.32.00.02 180327 03.11.2005 17:06:56

AVGUARD.EXE : 6.32.00.12 208424 03.11.2005 17:06:58

GUARDMSG.DLL : 6.30.00.02 94248 01.02.2005 10:24:12

AVGCMSG.DLL : 6.32.00.01 295029 03.11.2005 17:06:58

AVGNTDW.SYS : 6.31.00.01 32896 29.04.2005 08:07:16

AVPACK32.DLL : 6.32.00.02 319528 03.11.2005 16:57:42

AVGETVER.DLL : 6.30.00.00 24576 28.01.2005 17:10:20

AVSHLEXT.DLL : 6.30.00.01 40960 28.01.2005 17:10:22

AVSched32.EXE : 6.32.00.01 110632 20.09.2005 14:16:26

AVSched32.DLL : 6.30.00.00 122880 01.02.2005 10:24:12

AVREG.DLL : 6.31.00.05 41000 07.09.2005 16:34:50

AVRep.DLL : 6.33.00.155 1650728 25.01.2006 12:20:24

INETUPD.EXE : 6.32.00.53 262203 04.11.2005 07:49:30

INETUPD.DLL : 6.32.00.53 143360 04.11.2005 07:49:30

CTL3D32.DLL : 2.31.000 27136 30.08.2002 12:00:00

MFC42.DLL : 6.02.4131.0 1028096 20.08.2004 00:09:30

MSVCRT.DLL : 7.0.2600.2180 (xpsp_sp2_rtm.0408

MSVCRT.DLL : 7.0.2600.2180 343040 20.08.2004 00:09:34

CTL3DV2.DLL : 2.29.000 26992 12.01.1996 01:00:00

 

Configuration file:

 

Name of configuration file: C:\Program Files\AVPersonal\AVWIN.INI

Name of report file: C:\Program Files\AVPersonal\LOGFILES\AVWIN.LOG

Start path: C:\Program Files\AVPersonal

Command line:

Start mode: Self-test

 

Mode of report file:

[ ] Do not create report

[X] Overwrite report

[ ] Append new report

 

Data in report file:

[X] Infected files

[ ] Infected files with paths

[ ] All scanned files

[ ] Full information

 

Abridge report file:

[ ] Abridge report file

 

Warnings in report:

[X] Access denied/file locked

[X] Wrong file size in directory

[X] Wrong creation time in directory

[ ] COM file is too large

[X] Invalid start address

[X] Invalid EXE header

[X] Possibly damaged

 

Summary report:

[X] Create summary report

Output file: AVWIN.ACT

Maximum number of entries: 100

 

Where to search:

[X] Memory

[X] Boot record of selected drives

[ ] Report unknown boot sectors

[X] All files

[ ] Program files

 

Response in case of a detection:

[X] Repair with prompt

[ ] Repair without prompt

[ ] Delete with prompt

[ ] Delete without prompt

[ ] Write in report file only

[X] Acoustic alarm

 

Response in case of destroyed files:

[X] Delete with prompt

[ ] Delete without prompt

[ ] Ignore

 

Response in case of destroyed files:

[X] No change

[ ] Current system time

[ ] Correct date

 

Drag&drop settings:

[X] Scan subdirectories

 

Profile settings:

[X] Scan subdirectories

 

Archive options

[X] Search archive

[X] Archive types to leave out

1002 1001 1000

 

Miscellaneous options:

Temporary path: %TEMP% -> C:\DOCUME~1\GOF\LOCALS~1\Temp

[X] Overwrite infected files

[ ] Detect idle time

[X] Allow interruptions of scan

[ ] Load AVWin®/NT Guard on System start

 

General settings:

[X] Save options on exiting AntiVir

Priority: medium

 

Initializing OK

Memory test OK

Master boot record of hard disk HD0 OK

Master boot record of hard disk HD1

Master boot record of hard disk HD2 OK

Master boot record of hard disk HD3

Boot record of drive C: OK

System files

AVG7DB_F.DAT OK

BOOT.BAK OK

BOOT.INI OK

Bootfont.bin OK

cmldr OK

IO.SYS OK

MSDOS.SYS OK

NTDETECT.COM OK

ntldr OK

pagefile.sys OK

System test: OK

Self-test: OK

 

 

Creation date of the report file: jeudi 26 janvier 2006 07:05

 

AntiVir®/XP (2000 + NT) PersonalEdition Classic

Build 1114 of 04.11.2005

Mainprogram 6.32.00.51 of 03.11.2005

VDF file 6.33.0.162 (0) of 25.01.2006

 

 

This program is for PERSONAL USE only.

Any other use is PROHIBITED.

Informations regarding commercial versions of AntiVir may be obtained from:

www.hbedv.com.

 

 

Scanning for 292684 virus strains and unwanted programs.

 

Licensed for: AntiVir Personal Edition

Serial number: 0000149991-WURGE-0001

 

Please enter the workstation and

contact name with phone number in this form:

 

Name ___________________________________________

 

Street ___________________________________________

 

Town ___________________________________________

 

Phone/Fax ___________________________________________

 

Email ___________________________________________

 

Platform: Windows NT Workstation

Windows version: 5.1 Build 2600 (Service Pack 2)

Username: GOF

Processor: Pentium

Working memory: 490992 KB free

 

Version information:

AVWIN.DLL : 6.32.00.51 561192 04.11.2005 07:50:54

AVEWIN32.DLL : 6.33.0.77 1008128 23.01.2006 07:09:52

AVGNT.EXE : 6.32.00.02 180327 03.11.2005 17:06:56

AVGUARD.EXE : 6.32.00.12 208424 03.11.2005 17:06:58

GUARDMSG.DLL : 6.30.00.02 94248 01.02.2005 10:24:12

AVGCMSG.DLL : 6.32.00.01 295029 03.11.2005 17:06:58

AVGNTDW.SYS : 6.31.00.01 32896 29.04.2005 08:07:16

AVPACK32.DLL : 6.32.00.02 319528 03.11.2005 16:57:42

AVGETVER.DLL : 6.30.00.00 24576 28.01.2005 17:10:20

AVSHLEXT.DLL : 6.30.00.01 40960 28.01.2005 17:10:22

AVSched32.EXE : 6.32.00.01 110632 20.09.2005 14:16:26

AVSched32.DLL : 6.30.00.00 122880 01.02.2005 10:24:12

AVREG.DLL : 6.31.00.05 41000 07.09.2005 16:34:50

AVRep.DLL : 6.33.00.155 1650728 25.01.2006 12:20:24

INETUPD.EXE : 6.32.00.53 262203 04.11.2005 07:49:30

INETUPD.DLL : 6.32.00.53 143360 04.11.2005 07:49:30

CTL3D32.DLL : 2.31.000 27136 30.08.2002 12:00:00

MFC42.DLL : 6.02.4131.0 1028096 20.08.2004 00:09:30

MSVCRT.DLL : 7.0.2600.2180 (xpsp_sp2_rtm.0408

MSVCRT.DLL : 7.0.2600.2180 343040 20.08.2004 00:09:34

CTL3DV2.DLL : 2.29.000 26992 12.01.1996 01:00:00

 

Configuration file:

 

Name of configuration file: C:\Program Files\AVPersonal\AVWIN.INI

Name of report file: C:\Program Files\AVPersonal\LOGFILES\AVWIN.LOG

Start path: C:\Program Files\AVPersonal

Command line:

Start mode: unknown

 

Mode of report file:

[ ] Do not create report

[ ] Overwrite report

[X] Append new report

 

Data in report file:

[X] Infected files

[ ] Infected files with paths

[ ] All scanned files

[ ] Full information

 

Abridge report file:

[ ] Abridge report file

 

Warnings in report:

[X] Access denied/file locked

[X] Wrong file size in directory

[X] Wrong creation time in directory

[ ] COM file is too large

[X] Invalid start address

[X] Invalid EXE header

[X] Possibly damaged

 

Summary report:

[X] Create summary report

Output file: AVWIN.ACT

Maximum number of entries: 100

 

Where to search:

[X] Memory

[X] Boot record of selected drives

[ ] Report unknown boot sectors

[X] All files

[ ] Program files

 

Response in case of a detection:

[ ] Repair with prompt

[X] Repair without prompt

[ ] Delete with prompt

[ ] Delete without prompt

[ ] Write in report file only

[X] Acoustic alarm

 

Response in case of destroyed files:

[ ] Delete with prompt

[X] Delete without prompt

[ ] Ignore

 

Response in case of destroyed files:

[X] No change

[ ] Current system time

[ ] Correct date

 

Drag&drop settings:

[X] Scan subdirectories

 

Profile settings:

[X] Scan subdirectories

 

Archive options

[X] Search archive

[X] Archive types to leave out

1002 1001 1000

 

Miscellaneous options:

Temporary path: %TEMP% -> C:\DOCUME~1\GOF\LOCALS~1\Temp

[X] Overwrite infected files

[ ] Detect idle time

[X] Allow interruptions of scan

[ ] Load AVWin®/NT Guard on System start

 

General settings:

[X] Save options on exiting AntiVir

Priority: medium

 

Drives:

C: Hard disk

D: Floppy drive

E: CD-ROM

G: Floppy drive

H: Hard disk

 

Start of scan: jeudi 26 janvier 2006 07:05

 

Memory test OK

Master boot record of hard disk HD0 OK

Master boot record of hard disk HD1

The record could not be read!

Error code: 0x0015

Master boot record of hard disk HD2 OK

Master boot record of hard disk HD3

The record could not be read!

Error code: 0x0015

Boot record of drive C: OK

Boot record of drive D:

The record could not be read!

Error code: 0x0057

Boot record of drive G:

The record could not be read!

Error code: 0x0057

Boot record of drive H: OK

 

 

Access denied! Error during file opening!

Error code: 0x0002

C:\

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\a\conneries

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\a\Icones

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\a\Mes Docs\Photos\délire

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\a\Mes Docs\Photos\moi

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\a\Mes Docs\Photos\moi\ascensionnel

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\a\Mes Docs\Photos\moi\divers

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\a\Mes Docs\Photos\moi\ski nautique

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\a\Mes Docs\Photos\moi\tandem

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\a\Mes Docs\Photos\Mélanie reims

 

WARNING! Access error/file locked!

C:\a\twilight

twilight.exe

[DETECTION] Contains signature of the joke program JOKE/RaPster

WAS DELETED!

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery

Informationdedsinstallationerrone.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Informationdedsinstallationerrone1.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone1.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone10.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone11.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone12.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone13.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone14.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone15.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone16.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone17.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone18.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone19.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone2.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone20.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone21.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone22.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone23.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone24.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone25.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone26.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone27.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone28.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone29.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone3.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone30.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone31.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone32.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone33.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone34.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone35.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone36.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone37.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone38.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone39.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone4.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone40.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone41.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone42.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone43.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone44.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone45.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone46.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone47.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone48.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone49.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone5.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone50.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone51.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone52.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone53.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone54.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone55.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone56.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone57.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone58.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone59.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone6.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone60.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone61.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone62.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone63.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone64.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone65.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone66.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone67.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone68.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone69.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone7.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone8.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

Localisationerrone9.zip

ArchiveType: ZIP

NOTE! The whole archive is password protected

C:\Documents and Settings\GOF

ntuser.dat

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

ntuser.dat.LOG

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

C:\Documents and Settings\GOF\.jpi_cache\jar\1.0

EIRC1334.2.jar-5ffdfd78-2f9e6b1c.zip

ArchiveType: ZIP

C:\Documents and Settings\GOF\Local Settings\Application Data\Microsoft\Windows

UsrClass.dat

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

UsrClass.dat.LOG

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\Documents and Settings\GOF\Mes documents\Mes images

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\Documents and Settings\GOF\Mes documents\Mes images\A imprimer

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\Documents and Settings\GOF\Mes documents\Mes images\Echantillons magazines\Fonds d'écran

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\Documents and Settings\GOF\Mes documents\Mes images\Echantillons magazines\Fonds d'écran\Charme Soft

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\Documents and Settings\GOF\Mes documents\Mes images\Echantillons magazines\Fonds d'écran\Logos militaires\logos

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\Documents and Settings\GOF\Mes documents\Mes images\Echantillons magazines\Fonds d'écran\SCR

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\Documents and Settings\GOF\Mes documents\Mes vidéos

 

WARNING! Access error/file locked!

C:\Documents and Settings\NetworkService

NTUSER.DAT

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

ntuser.dat.LOG

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows

UsrClass.dat

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

UsrClass.dat.LOG

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

C:\DRIVERS\MCDBF\SOURCE1

OTHER.EXE

ArchiveType: ARJ SFX (self extracting)

NOTE! The whole archive is password protected

TSADDON.EXE

ArchiveType: ARJ SFX (self extracting)

--> UNISHHS.ARJ

ArchiveType: ARJ

NOTE! The whole archive is password protected

Access denied! Error during file opening!

Error code: 0x0002

C:\MILI\CARTES\ATLAS

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\MILI\Histoire de la cryptologie\images

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\Program Files\Logitech\Video

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\Program Files\MSN Messenger

 

WARNING! Access error/file locked!

Access denied! Error during file opening!

Error code: 0x0002

C:\Program Files\Windows NT\Pinball

 

WARNING! Access error/file locked!

C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP73

A0021459.exe

[DETECTION] Contains signature of the joke program JOKE/RaPster

WAS DELETED!

C:\WINDOWS\system32\config

DEFAULT

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

default.LOG

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

SAM

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

SAM.LOG

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

SECURITY

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

SECURITY.LOG

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

SOFTWARE

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

software.LOG

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

SYSTEM

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

system.LOG

Access denied! Error during file opening!

Error code: 0x000D

WARNING! Access error/file locked!

 

 

H:\Logiciels\Eidos Interactive\IO Interactive\Hitman - tueur à gages\C5_Sanitarium

Guard_Call_Professor.zip

ArchiveType: ZIP

 

 

 

End of scan: jeudi 26 janvier 2006 12:28

Time taken: 323:36 min

 

 

8766 directories were scanned

190898 files were scanned

40 warning messages were issued

2 files were deleted

0 files were repaired

2 detections

 

CONTENUS DES FICHIERS HOSTS

 

Dans Hosts

 

# Copyright © 1993-1999 Microsoft Corp.

#

# Ceci est un exemple de fichier HOSTS utilisé par Microsoft TCP/IP

# pour Windows.

#

# Ce fichier contient les correspondances des adresses IP aux noms d'hôtes.

# Chaque entrée doit être sur une ligne propre. L'adresse IP doit être placée

# dans la première colonne, suivie par le nom d'hôte correspondant. L'adresse

# IP et le nom d'hôte doivent être séparés par au moins un espace.

#

# De plus, des commentaires (tels que celui-ci) peuvent être insérés sur des

# lignes propres ou après le nom d'ordinateur. Ils sont indiqué par le

symbole '#'.

#

# Par exemple :

#

# 102.54.94.97 rhino.acme.com # serveur source

# 38.25.63.10 x.acme.com # hôte client x

127.0.0.1 localhost

 

 

# Start of entries inserted by Spybot - Search & Destroy

127.0.0.1 babe.the-killer.bz

127.0.0.1 www.babe.the-killer.bz

127.0.0.1 babe.k-lined.com

127.0.0.1 www.babe.k-lined.com

127.0.0.1 did.i-used.cc

127.0.0.1 www.did.i-used.cc

127.0.0.1 coolwwwsearch.com

127.0.0.1 www.coolwwwsearch.com

127.0.0.1 coolwebsearch.com

127.0.0.1 www.coolwebsearch.com

127.0.0.1 hi.studioaperto.net

127.0.0.1 www.hi.studioaperto.net

127.0.0.1 webbrowser.tv

127.0.0.1 www.webbrowser.tv

127.0.0.1 wazzupnet.com

127.0.0.1 www.wazzupnet.com

127.0.0.1 gueb.com

127.0.0.1 www.gueb.com

127.0.0.1 kabex.com

127.0.0.1 www.kabex.com

127.0.0.1 hityou.com

127.0.0.1 www.hityou.com

127.0.0.1 miosearch.com

127.0.0.1 www.miosearch.com

127.0.0.1 213.131.225.2

127.0.0.1 blue-elefant.com

127.0.0.1 www.blue-elefant.com

127.0.0.1 babeweb.de

127.0.0.1 www.babeweb.de

127.0.0.1 start-seite.com

127.0.0.1 www.start-seite.com

127.0.0.1 sexolymp.com

127.0.0.1 www.sexolymp.com

127.0.0.1 toriii.cc

127.0.0.1 www.toriii.cc

127.0.0.1 xtipp.de

127.0.0.1 www.xtipp.de

127.0.0.1 urawa.cool.ne.jp

127.0.0.1 777search.com

127.0.0.1 www.777search.com

127.0.0.1 ace-webmaster.com

127.0.0.1 www.ace-webmaster.com

127.0.0.1 aifind.info

127.0.0.1 www.aifind.info

127.0.0.1 amateurliveshow.com

127.0.0.1 www.amateurliveshow.com

127.0.0.1 anarchylolita.com

127.0.0.1 www.anarchylolita.com

127.0.0.1 anarchyporn.com

127.0.0.1 approvedlinks.com

127.0.0.1 www.approvedlinks.com

127.0.0.1 cantfind.com

127.0.0.1 www.cantfind.com

127.0.0.1 castingsamateur.com

127.0.0.1 www.castingsamateur.com

127.0.0.1 cyberrape.com

127.0.0.1 www.cyberrape.com

127.0.0.1 dialerclub.com

127.0.0.1 www.dialerclub.com

127.0.0.1 megago.com

127.0.0.1 exit.megago.com

127.0.0.1 www.megago.com

127.0.0.1 fastmetasearch.com

127.0.0.1 www.fastmetasearch.com

127.0.0.1 findwhatevernow.com

127.0.0.1 www.findwhatevernow.com

127.0.0.1 globesearch.com

127.0.0.1 www.globesearch.com

127.0.0.1 hotfreebies.com

127.0.0.1 www.hotfreebies.com

127.0.0.1 krankin.com

127.0.0.1 www.krankin.com

127.0.0.1 begin2search.com

127.0.0.1 www.begin2search.com

127.0.0.1 mainstreamdollars.com

127.0.0.1 www.mainstreamdollars.com

127.0.0.1 live.sex-explorer.com

127.0.0.1 www.live.sex-explorer.com

127.0.0.1 loveadot.com

127.0.0.1 www.loveadot.com

127.0.0.1 megaseek.net

127.0.0.1 www.megaseek.net

127.0.0.1 mixsearch.com

127.0.0.1 www.mixsearch.com

127.0.0.1 munky.com

127.0.0.1 www.munky.com

127.0.0.1 newtopsites.com

127.0.0.1 www.newtopsites.com

127.0.0.1 noblindlinks.com

127.0.0.1 www.noblindlinks.com

127.0.0.1 babenet.com

127.0.0.1 r.babenet.com

127.0.0.1 www.babenet.com

127.0.0.1 searchresult.net

127.0.0.1 www.searchresult.net

127.0.0.1 sexarena.org

127.0.0.1 www.sexarena.org

127.0.0.1 skeech.com

127.0.0.1 www.skeech.com

127.0.0.1 by.ru

127.0.0.1 www.by.ru

127.0.0.1 superwp.by.ru

127.0.0.1 sureseeker.com

127.0.0.1 www.sureseeker.com

127.0.0.1 wethere.com

127.0.0.1 www.wethere.com

127.0.0.1 wowsearch.org

127.0.0.1 www.wowsearch.org

127.0.0.1 xxx.com

127.0.0.1 www.xxx.com

127.0.0.1 art-xxx.com

127.0.0.1 websearch.com

127.0.0.1 www.websearch.com

127.0.0.1 firehunt.com

127.0.0.1 www.firehunt.com

127.0.0.1 partner23.firehunt.com

127.0.0.1 screensaver.it

127.0.0.1 www.screensaver.it

127.0.0.1 cliks.org

127.0.0.1 www.cliks.org

127.0.0.1 xads.cliks.org

127.0.0.1 xwebsearch.biz

127.0.0.1 www.xwebsearch.biz

127.0.0.1 znext.com

127.0.0.1 www.znext.com

127.0.0.1 rawtocash.net

127.0.0.1 www.rawtocash.net

127.0.0.1 7search.com

127.0.0.1 www.7search.com

127.0.0.1 zestyfind.com

127.0.0.1 www.zestyfind.com

127.0.0.1 ntcor.com

127.0.0.1 www.ntcor.com

127.0.0.1 dev.ntcor.com

127.0.0.1 xrenoder.com

127.0.0.1 www.xrenoder.com

127.0.0.1 search.xrenoder.com

127.0.0.1 193.125.201.50

127.0.0.1 allcybersearch.com

127.0.0.1 www.allcybersearch.com

127.0.0.1 tinybar.com

127.0.0.1 www.tinybar.com

127.0.0.1 topsite.us

127.0.0.1 www.topsite.us

127.0.0.1 topsites.us

127.0.0.1 www.topsites.us

127.0.0.1 topsitez.us

127.0.0.1 www.topsitez.us

127.0.0.1 true-counter.com

127.0.0.1 www.true-counter.com

127.0.0.1 out.true-counter.com

127.0.0.1 cnetadd.com

127.0.0.1 www.cnetadd.com

127.0.0.1 okmmm.com

127.0.0.1 www.okmmm.com

127.0.0.1 139mm.com

127.0.0.1 www.139mm.com

127.0.0.1 008k.com

127.0.0.1 www.008k.com

127.0.0.1 00hq.com

127.0.0.1 www.00hq.com

127.0.0.1 .00hq.com

127.0.0.1 /00hq.com

127.0.0.1 1-domains-registrations.com

127.0.0.1 www.1-domains-registrations.com

127.0.0.1 100sexlinks.com

127.0.0.1 www.100sexlinks.com

127.0.0.1 157.238.62.14

127.0.0.1 1sexparty.com

127.0.0.1 www.1sexparty.com

127.0.0.1 1stpagehere.com

127.0.0.1 www.1stpagehere.com

127.0.0.1 2020search.com

127.0.0.1 www.2020search.com

127.0.0.1 209.66.114.130

127.0.0.1 24teen.com

127.0.0.1 www.24teen.com

127.0.0.1 36site.com

127.0.0.1 www.36site.com

127.0.0.1 4corn.net

127.0.0.1 www.4corn.net

127.0.0.1 66.117.14.138

127.0.0.1 66.197.100.83

127.0.0.1 66.250.107.99

127.0.0.1 66.250.107.100

127.0.0.1 66.250.107.101

127.0.0.1 66.250.130.194

127.0.0.1 66.250.170.107

127.0.0.1 66.250.57.26

127.0.0.1 66.250.57.27

127.0.0.1 66.250.57.28

127.0.0.1 66.250.74.150

127.0.0.1 777top.com

127.0.0.1 www.777top.com

127.0.0.1 8ad.com

127.0.0.1 www.8ad.com

127.0.0.1 aboutclicker.com

127.0.0.1 www.aboutclicker.com

127.0.0.1 abrp.net

127.0.0.1 www.abrp.net

127.0.0.1 accessthefuture.net

127.0.0.1 www.accessthefuture.net

127.0.0.1 acemedic.com

127.0.0.1 www.acemedic.com

127.0.0.1 actionbreastcancer.org

127.0.0.1 www.actionbreastcancer.org

127.0.0.1 activexupdate.com

127.0.0.1 www.activexupdate.com

127.0.0.1 adamsupportgroup.org

127.0.0.1 www.adamsupportgroup.org

127.0.0.1 adasearch.com

127.0.0.1 www.adasearch.com

127.0.0.1 adipics.com

127.0.0.1 www.adipics.com

127.0.0.1 adspics.com

127.0.0.1 www.adspics.com

127.0.0.1 adult-engine-search.com

127.0.0.1 www.adult-engine-search.com

127.0.0.1 adult-erotic-guide.net

127.0.0.1 www.adult-erotic-guide.net

127.0.0.1 adult-friends-finder.net

127.0.0.1 www.adult-friends-finder.net

127.0.0.1 adulthyperlinks.com

127.0.0.1 www.adulthyperlinks.com

127.0.0.1 adulttds.com

127.0.0.1 www.adulttds.com

127.0.0.1 exaccess.ru

127.0.0.1 www.exaccess.ru

127.0.0.1 advert.exaccess.ru

127.0.0.1 agentstudio.com

127.0.0.1 africaspromise.org

127.0.0.1 akril.com

127.0.0.1 alcatel.ws

127.0.0.1 alfa-search.com

127.0.0.1 all-inet.com

127.0.0.1 allabtcars.com

127.0.0.1 allabtjeeps.com

127.0.0.1 allhyperlinks.com

127.0.0.1 allinternetbusiness.com

127.0.0.1 almarvideos.com

127.0.0.1 amandamountains.com

127.0.0.1 amigeek.com

127.0.0.1 amisbusiness.com

127.0.0.1 analmovi.com

127.0.0.1 anin.org

127.0.0.1 annaromeo.com

127.0.0.1 antrocity.com

127.0.0.1 anything4health.com

127.0.0.1 apsua.com

127.0.0.1 aregay.com

127.0.0.1 arheo.com

127.0.0.1 arizonaweb.org

127.0.0.1 armitageinn.com

127.0.0.1 art-func.com

127.0.0.1 artachnid.com

127.0.0.1 asiankingkong.com

127.0.0.1 ass-gals.com

127.0.0.1 athenrye.com

127.0.0.1 avian-ads.com

127.0.0.1 ayakawamura.com

127.0.0.1 ayumitaniguchi.com

127.0.0.1 bannedhost.net

127.0.0.1 barbudafarms.com

127.0.0.1 barnandfence.com

127.0.0.1 batsearch.com

127.0.0.1 baygraphicsllc.com

127.0.0.1 bb-search.com

127.0.0.1 bbbsearch.com

127.0.0.1 bedhome.com

127.0.0.1 bediadance.com

127.0.0.1 bellabasketsfl.com

127.0.0.1 bernaolatwin.com

127.0.0.1 best-counter.com

127.0.0.1 best-hardpics.com

127.0.0.1 best-winning-casino.com

127.0.0.1 bestcrawler.com

127.0.0.1 bestfor.ru

127.0.0.1 bestporngate.com

127.0.0.1 bestxporno.com

127.0.0.1 blackjack-free.net

127.0.0.1 blender.xu.pl

127.0.0.1 bodaciousbabette.com

127.0.0.1 boobdoll.com

127.0.0.1 boobsandtits.com

127.0.0.1 boobsclub.com

127.0.0.1 boredlife.com

127.0.0.1 bowlofogumbo.com

127.0.0.1 bradcoem.org

127.0.0.1 brandiyoung.com

127.0.0.1 brookeburn.com

127.0.0.1 bucps.com

127.0.0.1 burgerkingbigscreen.com

127.0.0.1 buscards.net

127.0.0.1 bustyrussell.com

127.0.0.1 buttejazz.org

127.0.0.1 buyselldomain.net

127.0.0.1 calcioturris.com

127.0.0.1 canberracricketcoaching.com

127.0.0.1 candycantaloupes.com

127.0.0.1 careers.dulcineasystems.net

127.0.0.1 carsands.com

127.0.0.1 carsrentals.net

127.0.0.1 casino-gambling-1.net

127.0.0.1 casino-gambling-2.net

127.0.0.1 casino-onlines.net

127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl

127.0.0.1 casino2win.net

127.0.0.1 casinomidas.net

127.0.0.1 casinonline.net

127.0.0.1 catallogue.com

127.0.0.1 catsss.da.ru

127.0.0.1 caxa.ru

127.0.0.1 cclebali.org

127.0.0.1 ceewawires.org

127.0.0.1 certumgroup.com

127.0.0.1 chelancatering.com

127.0.0.1 childrenvilla.com

127.0.0.1 chips-4-free.com

127.0.0.1 chrisswasey.com

127.0.0.1 chriswallace.net

127.0.0.1 ckick4thumbs.com

127.0.0.1 clackamasliteraryreview.com

127.0.0.1 clearsearch.cc

127.0.0.1 clearsearch.net

127.0.0.1 clickaire.com

127.0.0.1 clickyestoenter.net

127.0.0.1 clrsch.com

127.0.0.1 cmtapestry.com

127.0.0.1 cool-homepage.co

127.0.0.1 cool-homepage.com

127.0.0.1 cool-search.net

127.0.0.1 cool-search.netfartpost.com

127.0.0.1 cool-web-search.com

127.0.0.1 coolfetishsite.com

127.0.0.1 coolfreehost.com

127.0.0.1 coolfreepage.com

127.0.0.1 coolfreepages.com

127.0.0.1 coolmoneysearch.com

127.0.0.1 coolpornsearch.com

127.0.0.1 coolsearcher.info

127.0.0.1 coolwebsearch.

127.0.0.1 coolwebsearsh.com

127.0.0.1 coolwwwsearch.

127.0.0.1 copmtraine.com

127.0.0.1 couldnotfind.com

127.0.0.1 count-all.com

127.0.0.1 cracks.me.uk

127.0.0.1 creamedcutties.com

127.0.0.1 creditsearchonline.com

127.0.0.1 crestring.com

127.0.0.1 crooder.com

127.0.0.1 curvedspaces.com

127.0.0.1 cvs.jps.ru

127.0.0.1 cvsymphony.com

127.0.0.1 cydom.com

127.0.0.1 daily-gals.com

127.0.0.1 dancingbabycd.com

127.0.0.1 datanotary.com

127.0.0.1 datareco.com

127.0.0.1 davemarshall.org

127.0.0.1 dcfitusa.com

127.0.0.1 defaultsearch.net

127.0.0.1 desarrollocreativo.com

127.0.0.1 develip.com

127.0.0.1 dewis.spb.ru

127.0.0.1 dewis.us

127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz

127.0.0.1 dietpills4free.com

127.0.0.1 dietpussy.com

127.0.0.1 digistreamsa.com

127.0.0.1 dionforvalleycouncil.org

127.0.0.1 doctorwaldron.com

127.0.0.1 document-not-found.pornpic.org

127.0.0.1 doggyaction.com

127.0.0.1 domain-your-registration.com

127.0.0.1 domains-for-you-online.com

127.0.0.1 domains2003.net

127.0.0.1 domkrat.com

127.0.0.1 dp-host.com

127.0.0.1 dragqueen.gay-clan.com

127.0.0.1 drug-sources-exposed.com

127.0.0.1 drvvv.com

127.0.0.1 dutch-sex.com

127.0.0.1 dvdbank.org

127.0.0.1 e-localad.com

127.0.0.1 e-plus.cc

127.0.0.1 e-websitesolutions.com

127.0.0.1 eases.net

127.0.0.1 easy-search.net

127.0.0.1 easycategories.com

127.0.0.1 ecosrioplatenses.org

127.0.0.1 ecstasyporn.net

127.0.0.1 eikokoike.com

127.0.0.1 epornsex.com

127.0.0.1 euuu.com

127.0.0.1 evidence-detector.biz

127.0.0.1 evilspidercomics.com

127.0.0.1 ewebsearch.net

127.0.0.1 findloss.com

127.0.0.1 excellentsckin.com

127.0.0.1 extremeseek.net

127.0.0.1 f*ckdenniss.com

127.0.0.1 f*cknicepics.com

127.0.0.1 faithstevens.com

127.0.0.1 fantasiewelten.com

127.0.0.1 farmsteadbandb.com

127.0.0.1 fartpost.com

127.0.0.1 fastwebfinder.com

127.0.0.1 faxporn.com

127.0.0.1 fickenisgeil.de

127.0.0.1 finance-loans.com

127.0.0.1 find-itnow.com

127.0.0.1 find-uk-health.co.uk

127.0.0.1 find4u.net

127.0.0.1 findit-now.com

127.0.0.1 findthesite.com

127.0.0.1 findthewebsiteyouneed.com

127.0.0.1 fionasteel.com

127.0.0.1 firstbookmark.net

127.0.0.1 fitness-free.com

127.0.0.1 foodvacations.net

127.0.0.1 forex.jps.ru

127.0.0.1 forexcredit.com

127.0.0.1 forexcredit.ru

127.0.0.1 formingfusions.com

127.0.0.1 forsythfire.net

127.0.0.1 forthline.com

127.0.0.1 free-chipes.com

127.0.0.1 free-f*cking-video.com

127.0.0.1 free-hit.com

127.0.0.1 free-pics-and-movies.com

127.0.0.1 free-sex-movie-clips.net

127.0.0.1 free4porno.net

127.0.0.1 free64all.com

127.0.0.1 freebookmark.net

127.0.0.1 freebookmarks.net

127.0.0.1 freecategories.com

127.0.0.1 freecoolhost.com

127.0.0.1 freerbhost.com

127.0.0.1 freeshemalepics.net

127.0.0.1 freeyaho.com

127.0.0.1 freshseek.com

127.0.0.1 freshteensite.com

127.0.0.1 gabrielscott.com

127.0.0.1 galpostgirls.com

127.0.0.1 gals-for-free.com

127.0.0.1 gambling-online4you.com

127.0.0.1 gameterror.net

127.0.0.1 gay50.com

127.0.0.1 generalsmeltingofcanada.com

127.0.0.1 geteens.com

127.0.0.1 getpicshere.com

127.0.0.1 gimmezamore.com

127.0.0.1 gimnasiaer.com

127.0.0.1 girls-porn-life.com

127.0.0.1 glbdf.org

127.0.0.1 global-finder.com

127.0.0.1 globe-finder.cc

127.0.0.1 globe-finder.com

127.0.0.1 gocybersearch.com

127.0.0.1 golftennis.net

127.0.0.1 good-mortgages-calculator.com

127.0.0.1 good-mortgages.net

127.0.0.1 goodsexs.com

127.0.0.1 googlebar.jps.ru

127.0.0.1 googlf.com

127.0.0.1 gradforum.org

127.0.0.1 gratis-porn-movie.com

127.0.0.1 gratis-pornopics.com

127.0.0.1 guzzycats.com

127.0.0.1 gzphoenix.com

127.0.0.1 hallnetaccolade.com

127.0.0.1 hand-book.com

127.0.0.1 happyanal.com

127.0.0.1 hard-gals.com

127.0.0.1 hardbodytgp.com

127.0.0.1 hardcoreover.com

127.0.0.1 hardloved.com

127.0.0.1 hardwareseek.net

127.0.0.1 harukaigawa.com

127.0.0.1 hccsolanonapa.org

127.0.0.1 health-protein.com

127.0.0.1 hentai4u.net

127.0.0.1 here4search.com

127.0.0.1 heyrichy.com

127.0.0.1 hi-search.com

127.0.0.1 hiddenguides.com

127.0.0.1 hitlistlyrics.com

127.0.0.1 holidayautostr.com

127.0.0.1 homemortage.ws

127.0.0.1 hostssp.com

127.0.0.1 hot-cartoon-sex.anime.american-teens.net

127.0.0.1 hotbookmark.com

127.0.0.1 hotels-list.net

127.0.0.1 hotelxxxcams.com

127.0.0.1 hotpopup.com

127.0.0.1 hotsearchbox.com

127.0.0.1 hotsex-series.com

127.0.0.1 hotstartpage.com

127.0.0.1 hqsex.biz

127.0.0.1 hugeporn4u.net

127.0.0.1 hunacsa.com

127.0.0.1 hupacasath.com

127.0.0.1 hzsx.com

127.0.0.1 icansearch.net

127.0.0.1 idgsearch.com

127.0.0.1 ie-search.com

127.0.0.1 incestporngate.com

127.0.0.1 infodigger.net

127.0.0.1 infoglobus.com

127.0.0.1 inherhole.com

127.0.0.1 insertthiscock.com

127.0.0.1 insurance-flood.net

127.0.0.1 insuranceall.net

127.0.0.1 internetsearch.ru

127.0.0.1 ionichost.com

127.0.0.1 ionomist.com

127.0.0.1 ipsex.net

127.0.0.1 itsanal.com

127.0.0.1 itseasy.us

127.0.0.1 iweb-commerce.com

127.0.0.1 iwebland.com

127.0.0.1 jeannineoldfield.com

127.0.0.1 jethomepage.com

127.0.0.1 jetseeker.com

127.0.0.1 jmhgallery.org

127.0.0.1 joannelatham.com

127.0.0.1 judin.ru

127.0.0.1 junkysex.com

127.0.0.1 karleyt.narod.ru

127.0.0.1 kathisomers.com

127.0.0.1 kazaa-lite.ws

127.0.0.1 keithgreenpro.com

127.0.0.1 kenmccaul.com

127.0.0.1 kilosex.com

127.0.0.1 kimhines.com

127.0.0.1 kinoru.com

127.0.0.1 ksdspups.org

127.0.0.1 landrape.com

127.0.0.1 lauraroebuck.com

127.0.0.1 leannalovelace.com

127.0.0.1 lesobank.ru

127.0.0.1 libertyonlinehosting.com

127.0.0.1 lingerie-mania.com

127.0.0.1 lisamatthew.com

127.0.0.1 liveholio.com

127.0.0.1 livenewspaper.com

127.0.0.1 louiseleeds.com

127.0.0.1 love-pix.com

127.0.0.1 lovelas.com

127.0.0.1 lovelysearch.com

127.0.0.1 low-taxes.com

127.0.0.1 luckysearch.net

127.0.0.1 lunitaweb.net

127.0.0.1 lustful-porno.com

127.0.0.1 mackinnonsbrook.org

127.0.0.1 madfinder.com

127.0.0.1 madisonmoons.com

127.0.0.1 madisonoilco.com

127.0.0.1 madonalive.com

127.0.0.1 majuozawa.com

127.0.0.1 makin-do.com

127.0.0.1 male4free.com

127.0.0.1 map-quest.org

127.0.0.1 marilynchamber.com

127.0.0.1 martfinder.com

127.0.0.1 massearch.com

127.0.0.1 matetrava.com

127.0.0.1 mature50.com

127.0.0.1 matureporngate.com

127.0.0.1 maxdzines.com

127.0.0.1 mcgeeforlabor.com

127.0.0.1 mdstunisie.org

127.0.0.1 medicare-insurance.net

127.0.0.1 medicare-supplemental.com

127.0.0.1 mega-dating-tips.com

127.0.0.1 megumikanzaki.com

127.0.0.1 meshalynn.com

127.0.0.1 meta-adult.com

127.0.0.1 meta-casino.com

127.0.0.1 meta-mobile.com

127.0.0.1 meta-porn.com

127.0.0.1 metafora.ru

127.0.0.1 metapoisk.ru

127.0.0.1 michiyonakajima.com

127.0.0.1 miconsultamedica.com

127.0.0.1 mikasakamoto.com

127.0.0.1 mikoni.com

127.0.0.1 militarygods.porn4porn.net

127.0.0.1 millennialpeople.org

127.0.0.1 mipham.org

127.0.0.1 missingcommand.com

127.0.0.1 mommykiss.com

127.0.0.1 moneyhunters.com

127.0.0.1 montgomeryhospitalanesthesia.com

127.0.0.1 morflot.com

127.0.0.1 mortgage-debt.net

127.0.0.1 mortismaximus.com

127.0.0.1 moscowwhores.com

127.0.0.1 moviecategories.com

127.0.0.1 mp3-pix.com

127.0.0.1 mrtg.jps.ru

127.0.0.1 msn-info.net

127.0.0.1 multipussy.com

127.0.0.1 mundopolar.com

127.0.0.1 mustv.com

127.0.0.1 mywebsearch.net

127.0.0.1 nativehardcore.com

127.0.0.1 naturalspy.com

127.0.0.1 nbasportsbook.net

127.0.0.1 needf*cknow.com

127.0.0.1 nellyslyrics.com

127.0.0.1 nepgyan.com

127.0.0.1 nesrecords.com

127.0.0.1 netshastra.net

127.0.0.1 nettime.ru

127.0.0.1 nettracker.jps.ru

127.0.0.1 netyellowpages.info

127.0.0.1 new-incest.com

127.0.0.1 newcategories.com

127.0.0.1 newcracks.com

127.0.0.1 newcracks.net

127.0.0.1 newlife-lajolla.com

127.0.0.1 newsexgate.com

127.0.0.1 newtonsracks.com

127.0.0.1 newxpics.com

127.0.0.1 nhlsportsbook.net

127.0.0.1 niagaracapital.com

127.0.0.1 niche-tv.com

127.0.0.1 nmrba.com

127.0.0.1 nocalories.net

127.0.0.1 nocensor.com

127.0.0.1 ormandcompany.com

127.0.0.1 nsbabes.com

127.0.0.1 nuclearwitness.org

127.0.0.1 nursemania.com

127.0.0.1 nvntour.com

127.0.0.1 nvphall.org

127.0.0.1 oborot.com

127.0.0.1 ocalalivestockmarket.com

127.0.0.1 ocsff.com

127.0.0.1 oeatlanta.com

127.0.0.1 oharrowsearch.com

127.0.0.1 ok-search.com

127.0.0.1 okulta.com

127.0.0.1 omegabrains.net

127.0.0.1 online-casino-1.net

127.0.0.1 online-casino-bonus.info

127.0.0.1 online-casinos-x.com

127.0.0.1 online-winning.net

127.0.0.1 onlineserverz.com

127.0.0.1 onlinetradings.net

127.0.0.1 onlycunt.com

127.0.0.1 onlyinsured.com

127.0.0.1 operanabuco.com

127.0.0.1 opsex.com

127.0.0.1 oregoncharters.org

127.0.0.1 otrlives.com

127.0.0.1 ozawamadoka.com

127.0.0.1 paigesummer.com

127.0.0.1 pamelacollections.com

127.0.0.1 panamcup.com

127.0.0.1 pantygirls4u.com

127.0.0.1 pantyhoserealm.com

127.0.0.1 pantyplace.com

127.0.0.1 pastubes.com

127.0.0.1 paulapage.com

127.0.0.1 paulhoover.com

127.0.0.1 payfortraffic.net

127.0.0.1 pedo.ws

127.0.0.1 people.1gb.ru

127.0.0.1 pervertbot.com

127.0.0.1 pharma-diet-pills.com

127.0.0.1 pharmacy2003.com

127.0.0.1 pharmalocator.com

127.0.0.1 phendimetrazine-tenuate-adipex.com

127.0.0.1 pics-videos.com

127.0.0.1 picsdir.com

127.0.0.1 picsforbucks.com

127.0.0.1 picsofseductiveladies.com

127.0.0.1 pills-birth-control.com

127.0.0.1 pillsmall.com

127.0.0.1 pilotronix.com

127.0.0.1 pixpox.com

127.0.0.1 planemusic.com

127.0.0.1 poiska.net

127.0.0.1 poker-casino-free.com

127.0.0.1 poker-games-free.net

127.0.0.1 polradiologia.com

127.0.0.1 pooi.net

127.0.0.1 porn-teacher.com

127.0.0.1 porncamz.com

127.0.0.1 pornfree.info

127.0.0.1 pornnightdreams.com

127.0.0.1 pornokopec.com

127.0.0.1 porntetris.com

127.0.0.1 porntwist.com

127.0.0.1 powerwebsearch.com

127.0.0.1 prblitz.com

127.0.0.1 pretypics.com

127.0.0.1 pribalt.com

127.0.0.1 privacy-support.biz

127.0.0.1 privateporn.net

127.0.0.1 prostactive.com

127.0.0.1 prostol.com

127.0.0.1 protect-yourself.biz

127.0.0.1 prsainlandempire.org

127.0.0.1 put-your-link-here.com

127.0.0.1 pyrocorp.com

127.0.0.1 quick-search.ws

127.0.0.1 quiksearchgenealogy.com

127.0.0.1 radfrall.org

127.0.0.1 ramgo.com

127.0.0.1 ranafrog.ne

127.0.0.1 rapegate.com

127.0.0.1 redbudbmx.com

127.0.0.1 refinance-help.com

127.0.0.1 removeearthkeepers.org

127.0.0.1 rightfinder.net

127.0.0.1 robbsproshop.com

127.0.0.1 robertferencz.com

127.0.0.1 rotocasters.com

127.0.0.1 royalsearch.net

127.0.0.1 runsearch.com

127.0.0.1 russiansponsor.com

127.0.0.1 russogay.com

127.0.0.1 s2.exocrew.com

127.0.0.1 sacitylife.com

127.0.0.1 samplegals.com

127.0.0.1 satisf*cktion.net

127.0.0.1 sbssurvivor.com

127.0.0.1 scarypix.com

127.0.0.1 sccdnet.com

127.0.0.1 schoolforest.com

127.0.0.1 search-1.net

127.0.0.1 search-2003.com

127.0.0.1 search-about.net

127.0.0.1 search-hawk.com

127.0.0.1 search-log.com

127.0.0.1 search-meta.com

127.0.0.1 search-safe.com

127.0.0.1 search.psn.cn

127.0.0.1 searchadultweb.com

127.0.0.1 searchbutler.com

127.0.0.1 searchbuttler.com

127.0.0.1 searchbutler.org

127.0.0.1 searchcomplete.com

127.0.0.1 searchdesire.com

127.0.0.1 searchdot.net

127.0.0.1 searchexpander.com

127.0.0.1 searchfastnet.com

127.0.0.1 searchforge.com

127.0.0.1 searching-the-net.com

127.0.0.1 searchmeta.md

127.0.0.1 searchmeta.net

127.0.0.1 searchmeta.ru

127.0.0.1 searchmeta.webhost.ru

127.0.0.1 searchnow.ws

127.0.0.1 searchonfly.com

127.0.0.1 searchv.com

127.0.0.1 searchxl.com

127.0.0.1 searchxp.com

127.0.0.1 sebot.com

127.0.0.1 securenp.org

127.0.0.1 security-warning.biz

127.0.0.1 seehardcore.com

127.0.0.1 seekwell.net

127.0.0.1 selfbookmark.com

127.0.0.1 selfbookmark.info

127.0.0.1 selfbookmark.net

127.0.0.1 sex.free4porno.net

127.0.0.1 sex-coach.com

127.0.0.1 sex-festival.com

127.0.0.1 sex-video-galleries.com

127.0.0.1 sexgalleries4all.com

127.0.0.1 sexmoviesnet.com

127.0.0.1 sexpatriot.net

127.0.0.1 sexy18.cc

127.0.0.1 sexycat.adult-host.org

127.0.0.1 sfbayfolkboats.com

127.0.0.1 sgirls.net

127.0.0.1 sharempeg.com

127.0.0.1 shopcards.net

127.0.0.1 shopknights.com

127.0.0.1 sic02.com

127.0.0.1 sintrader.com

127.0.0.1 site1.ru

127.0.0.1 sites-in-web.com

127.0.0.1 sitevictoria.com

127.0.0.1 sixroads.com

127.0.0.1 skakalka.ru

127.0.0.1 slawsearch.com

127.0.0.1 slotch.com

127.0.0.1 slotchbar.com

127.0.0.1 smartsumo.com

127.0.0.1 smutarchive.net

127.0.0.1 solongas.com

127.0.0.1 sonomaevents.com

127.0.0.1 spermatrix.com

127.0.0.1 sportbooks-free4you.com

127.0.0.1 spros.com

127.0.0.1 spyass.com

127.0.0.1 spyorgy.net

127.0.0.1 staceyowens.com

127.0.0.1 stacistaxx.com

127.0.0.1 stacystaxx.com

127.0.0.1 start-space.com

127.0.0.1 steamycock.com

127.0.0.1 sterva.com

127.0.0.1 stevecashdollar.com

127.0.0.1 stop-tracking.biz

127.0.0.1 stopvotefraud.com

127.0.0.1 stopxxxpics.com

127.0.0.1 strekoza.com

127.0.0.1 stuffstore.com

127.0.0.1 styleclickink.com

127.0.0.1 summercollins.com

127.0.0.1 summitcross.com

127.0.0.1 super-spider.com

127.0.0.1 super-websearch.com

127.0.0.1 supersexmachine.com

127.0.0.1 superwebsearch.com

127.0.0.1 supret.com

127.0.0.1 suzannebrecht.com

127.0.0.1 sweeteenz.com

127.0.0.1 tacil.org

127.0.0.1 tangounion.com

127.0.0.1 tastethemusic.com

127.0.0.1 tax-refund4you.com

127.0.0.1 tech-jobs.ws

127.0.0.1 technology-related.com

127.0.0.1 teen-biz.com

127.0.0.1 teen-pic-post.com

127.0.0.1 teenpornosex.com

127.0.0.1 teens4free.net

127.0.0.1 teensact.com

127.0.0.1 teensgate.com

127.0.0.1 teensguru.com

127.0.0.1 teenswamp.com

127.0.0.1 testosterone-birth-control.com

127.0.0.1 the-exit.com

127.0.0.1 the-huns-yellow-pages.com

127.0.0.1 thefakejournal.com

127.0.0.1 thehuy.net

127.0.0.1 theproxy.org

127.0.0.1 therealsearch.com

127.0.0.1 thesten.com

127.0.0.1 thornleygroup.com

127.0.0.1 tings.org

127.0.0.1 tit-x.com

127.0.0.1 titanvision.com

127.0.0.1 titsianna.com

127.0.0.1 toddhayes.com

127.0.0.1 toon-comics.com

127.0.0.1 tooncomics.com

127.0.0.1 topsearcher.com

127.0.0.1 trafficback.com

127.0.0.1 trafficswitcher.com

127.0.0.1 travel.picture-posters.com

127.0.0.1 true-portal.com

127.0.0.1 trytechnical.com

127.0.0.1 ufindall.click-now.net

127.0.0.1 umaxsearch.com

127.0.0.1 une-autre-france.com

127.0.0.1 unigays.com

127.0.0.1 unipages.cc

127.0.0.1 up2you.ru

127.0.0.1 urlstat.com

127.0.0.1 urlstat.ru

127.0.0.1 uralitel.ru

127.0.0.1 ursie.net

127.0.0.1 utahsweet.com

127.0.0.1 utopicportal.com

127.0.0.1 uusocialjustice.org

127.0.0.1 v61.com

127.0.0.1 vaginpics.com

127.0.0.1 valmyers.com

127.0.0.1 vegas-free.com

127.0.0.1 vegbuy.com

127.0.0.1 veloventures.com

127.0.0.1 verzila.com

127.0.0.1 victoriaadam.com

127.0.0.1 videocategories.com

127.0.0.1 vitamins-for-each.com

127.0.0.1 votehowe.org

127.0.0.1 vxebony.com

127.0.0.1 wakeupdick.com

127.0.0.1 warnomore.org

127.0.0.1 watersport-specialties.com

127.0.0.1 web-homepage.net

127.0.0.1 web-search.tk

127.0.0.1 webcoolsearch.com

127.0.0.1 websearchdot.com

127.0.0.1 weekend-movies.com

127.0.0.1 wetpornostars.com

127.0.0.1 whatsyoursearch.com

127.0.0.1 white-pages.ws

127.0.0.1 whittierblvd.com

127.0.0.1 win-in-casino.com

127.0.0.1 wiresearch.com

127.0.0.1 wolfpacracing.com

127.0.0.1 wordlist.jps.ru

127.0.0.1 wpc2001.org

127.0.0.1 wspzone.sexpornonline.com

127.0.0.1 wwwbet.net

127.0.0.1 wwwbetting.net

127.0.0.1 wwwpokergames.com

127.0.0.1 wwwpokerplayers.com

127.0.0.1 wwwroulette.net

127.0.0.1 x-library.com

127.0.0.1 x-webdesign.com

127.0.0.1 xcomics4u.com

127.0.0.1 xic-bs.com

127.0.0.1 xldr.com

127.0.0.1 xp18.com

127.0.0.1 xrenosearch.com

127.0.0.1 xtragay.com

127.0.0.1 xu.xu.pl

127.0.0.1 xxxcategories.com

127.0.0.1 xxxemailxxx.com

127.0.0.1 y-e-l-l-o-w.com

127.0.0.1 yellow500.com

127.0.0.1 yezol.com

127.0.0.1 you-search.com

127.0.0.1 you-search.com.ru

127.0.0.1 youfindall.com

127.0.0.1 youfindall.net

127.0.0.1 your-prescriptions.net

127.0.0.1 yourbookmarks.info

127.0.0.1 yourbookmarks.ws

127.0.0.1 ypir.com

127.0.0.1 ysa-info.net

127.0.0.1 yukohamano.com

127.0.0.1 ywebsearch.info

127.0.0.1 zapros.com

127.0.0.1 zesearch.com

127.0.0.1 ziportal.com

127.0.0.1 zipportal.com

127.0.0.1 zoneoffreeporn.com

127.0.0.1 zoomegasite.com

127.0.0.1 zvimigdal.com

127.0.0.1 zyban-zocor-levitra.com

127.0.0.1 t.rack.cc

127.0.0.1 omega-search.com

127.0.0.1 cool-xxx.net

127.0.0.1 revolto3.da.ru

127.0.0.1 dating-search.net

127.0.0.1 linksummary.com

127.0.0.1 duolaimi.net

127.0.0.1 ez-searching.com

127.0.0.1 freehqmovies.com

127.0.0.1 xzoomy.com

127.0.0.1 freescratchandwin.com

127.0.0.1 fickenisgeil.de

127.0.0.1 globalwebsearch.com

127.0.0.1 www.gocybersearch.com

127.0.0.1 mayancasino.com

127.0.0.1 www.hastalavista.com

127.0.0.1 www.free-popup-killer.com

127.0.0.1 www.digitalfan.com

127.0.0.1 google123.web1000.com

127.0.0.1 search.ieplugin.com

127.0.0.1 i-lookup.com

127.0.0.1 spidersearch.com

127.0.0.1 istarthere.com

127.0.0.1 xxxtoolbar.com

127.0.0.1 www.seekporn.org

127.0.0.1 17-plus.com

127.0.0.1 lolita4all1.xrensmagpost.com

127.0.0.1 mafiapics.com

127.0.0.1 www.teenmonster.com

127.0.0.1 ie.marketdart.com

127.0.0.1 masterbar.com

127.0.0.1 search.netzany.co

127.0.0.1 only-virgins.com

127.0.0.1 passthison.com

127.0.0.1 blondetgp.com

127.0.0.1 prolivation.com

127.0.0.1 server-au.imrworldwide.com

127.0.0.1 rocketsearch.com

127.0.0.1 .roar.com

127.0.0.1 searchaccurate.com

127.0.0.1 searchalot.com

127.0.0.1 searchandbrowse.com

127.0.0.1 gtawarehouse.com

127.0.0.1 startium.com

127.0.0.1 searchandclick.com

127.0.0.1 searchby.net

127.0.0.1 searchdot.com

127.0.0.1 search-exe.com

127.0.0.1 secret-crush.com

127.0.0.1 seekseek.com

127.0.0.1 sexarena.com

127.0.0.1 sexocean.play-lolita.com

127.0.0.1 startsurfing.com

127.0.0.1 66.197.138.235

127.0.0.1 srng.net

127.0.0.1 apps.webservicehost.com

127.0.0.1 search.shopnav.com

127.0.0.1 wish7.com

127.0.0.1 216.65.3.68

127.0.0.1 www.supersexpass.com

127.0.0.1 surferbar.com

127.0.0.1 xlola.underagehost.com

127.0.0.1 hotlolitas.underagehost.com

127.0.0.1 loading-lolita.com

127.0.0.1 www.xupiter.com

127.0.0.1 xjupiter.com

127.0.0.1 www.xjupiter.com

127.0.0.1 www.browserwise.com

127.0.0.1 sqwire.com

127.0.0.1 orbitexplorer.com

127.0.0.1 searchcentrix.com

127.0.0.1 categories.mygeek.com

127.0.0.1 web-entrance.co

127.0.0.1 whazit.com

127.0.0.1 windowenhancer.com

127.0.0.1 buz.ru

127.0.0.1 iwon.com

127.0.0.1 www.bonzi.com

127.0.0.1 featured-results.com

127.0.0.1 searchmadesafe.net

127.0.0.1 quicklaunch.com

127.0.0.1 www.cashsurfers.com

127.0.0.1 .lop.com

127.0.0.1 .tjdo.com

127.0.0.1 /tjdo.com

127.0.0.1 .ebav.com

127.0.0.1 /ebav.com

127.0.0.1 .ebgo.com

127.0.0.1 /ebgo.com

127.0.0.1 .ebaw.com

127.0.0.1 /ebaw.com

127.0.0.1 .ebkb.com

127.0.0.1 /ebkb.com

127.0.0.1 .ebmu.com

127.0.0.1 /ebmu.com

127.0.0.1 .ecmp.com

127.0.0.1 /ecmp.com

127.0.0.1 .edhq.com

127.0.0.1 /edhq.com

127.0.0.1 .edty.com

127.0.0.1 /edty.com

127.0.0.1 .sbee.com

127.0.0.1 /sbee.com

127.0.0.1 .aavc.com

127.0.0.1 /aavc.com

127.0.0.1 .acjp.com

127.0.0.1 /acjp.com

127.0.0.1 .ecmh.com

127.0.0.1 /ecmh.com

127.0.0.1 .emch.com

127.0.0.1 /emch.com

127.0.0.1 .ecpm.com

127.0.0.1 /ecpm.com

127.0.0.1 .wabu.com

127.0.0.1 /wabu.com

127.0.0.1 .wabq.com

127.0.0.1 .wabq.com

127.0.0.1 /wabq.com

127.0.0.1 .ebch.com

127.0.0.1 /ebch.com

127.0.0.1 .ebdv.com

127.0.0.1 /ebdv.com

127.0.0.1 .ebdw.com

127.0.0.1 /ebdw.com

127.0.0.1 .ebjp.com

127.0.0.1 /ebjp.com

127.0.0.1 .ebkn.com

127.0.0.1 /ebkn.com

127.0.0.1 .ebky.com

127.0.0.1 /ebky.com

127.0.0.1 .eblv.com

127.0.0.1 /eblv.com

127.0.0.1 .wbkb.com

127.0.0.1 /wbkb.com

127.0.0.1 .ebvr.com

127.0.0.1 /ebvr.com

127

Thanos Devil Member !

Thanos

Posté(e)
Posté(e)

Salut Gof :P

J'ai constaté dans le rapport de l'analyse d'ANTIVIR qu'il y avait des fichiers auxquels il n'avait pas pu accéder, est-ce normal ?

Oui tout a fait normal,ne t'inquiêtes pas!

 

Ton fichier hosts est bon. Par contre peut tu poster le rapport d'Ewido stp?

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...