Very slow computer, various infections [Archive]

View Full Version : Very slow computer, various infections

cesarper

2008-05-15, 09:05

Hello, here's the info. Thanks in advance.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:11:26 PM, on 5/14/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Dell Support Center\HWDiag\bin\pcd.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Dell Support Center\HWDiag\bin\pcd.exe
C:\Program Files\Dell Support Center\HWDiag\bin\pcdrsysinfovideocapture.p5x
C:\Program Files\Dell Support Center\HWDiag\bin\pcdrsysinfovideocapture.p5x

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.media-search.net/nph-search.cgi?

track=mssb1&look=sbar1_srchbtn
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.media-search.net/nph-search.cgi?

track=mssrc&look=stmpl1&find=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://yahoo.sbc.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.media-search.net/nph-search.cgi?

track=mssrc&look=stmpl1&find=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.media-search.net/nph-search.cgi?

track=mssb1&look=sbar1_srchbtn
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.media-search.net/nph-search.cgi?

track=mssrc&look=stmpl1&find=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.media-search.net/nph-search.cgi?

track=mssrc&look=stmpl1&find=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.media-search.net/nph-search.cgi?

track=mssrc&look=stmpl1&find=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.media-search.net/nph-search.cgi?

track=mssrc&look=stmpl1&find=
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = hhttp://search.media-search.net/nph-search.cgi?

track=mssrc&look=stmpl1&find=
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!

\Companion\Installs\cpn1\yt.dll
O1 - Hosts: 216.177.73.139 search.netscape.com
O1 - Hosts: com
O1 - Hosts: 216.177.73.139 search.netscape.com
O1 - Hosts: com
O1 - Hosts: 216.177.73.139 search.netscape.com
O1 - Hosts: e.com
O1 - Hosts: e.com
O1 - Hosts: com
O1 - Hosts: com
O1 - Hosts: rch.msn.com
O1 - Hosts: indows.
O1 - Hosts: comments (such as these) may be inserted on individual
O2 - BHO: (no name) - rsion - (no file)
O2 - BHO: (no name) - {00041A26-7033-432C-94C7-6371DE343822} - (no file)
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!

\Companion\Installs\cpn1\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common

Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program

Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1

\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [diagent] "C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe" startup
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Media-Search] "C:\Program Files\msnet\v9\msnet.EXE" /H
O4 - HKLM\..\Run: [Upsfc] C:\DOCUME~1\Yvette\LOCALS~1\Temp\app25E.tmp
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0

\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O8 - Extra context menu item: &Search - ?p=ZJ
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: SirSearch - file://C:\Program Files\PWRSDP1\Cache\SelectedContextSearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\ms.exe (file missing)
O9 - Extra 'Tools' menuitem: MaxSpeed - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\ms.exe (file

missing)
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!

\Messenger\yhexbmes0411.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!

\Messenger\yhexbmes0411.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -

C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft

Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network

Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -

http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!

\Common\Yinsthelper200711281.dll
O16 - DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} (Disney Online Games ActiveX Control) -

http://disney.go.com/pirates/online/testActiveX/built/signed/DisneyOnlineGames.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -

http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1142574875812
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Toolbar) -

http://us.dl1.yimg.com/download.companion.yahoo.com/dl/toolbar/yiebio5_1_6_0.cab
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = www.lausd.k12.ca.us
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = www.lausd.k12.ca.us
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = www.lausd.k12.ca.us
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device

Support\bin\AppleMobileDeviceService.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google

Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common

Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1

\SYMANT~1\Rtvscan.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. -

C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

--
End of file - 13410 bytes

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Wednesday, May 14, 2008 8:55:33 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 15/05/2008
Kaspersky Anti-Virus database records: 774093
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 139671
Number of viruses found: 22
Number of infected objects: 43
Number of suspicious objects: 0
Duration of the scan process: 02:42:45

Infected Object Name / Virus Name / Last Action
C:\5ea51ae1b6bff1303c086d59318b97\%temp%dd_msxml_retMSI.txt Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\06d9abc039293e0f4966da9588e32af4_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\215b85c96a4d6900382185a890b1e8b8_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\33fe62925737b60e593419ebf1e74139_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3c0ff8f09c45940375bb6eb11c9ee4c4_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\49ca2d7b8a7c7df4e7094f96ef623b01_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5dd903a2071be5fd6039176957658807_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8ed98feec643ac44cb339d76fd70c864_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a75d6e554a3cdc8dbf833fe111503612_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c41f7b3daf0016563d83737790538532_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c65f26b0495f106615835222fbda4546_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f01d54c1f8ac4ef7643f56545e3b65cd_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-09012007-222018.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\SupportSoft\DellSupportCenter\SYSTEM\state\logs\sprtcmd.log Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\INDEX.DAT Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\INDEX.DAT Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\INDEX.DAT Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Lupe\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\DSAgnt.log Object is locked skipped
C:\Documents and Settings\Lupe\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\DSAgnt_GTActions.log Object is locked skipped
C:\Documents and Settings\Lupe\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\gdql_d_DSAgnt.log Object is locked skipped
C:\Documents and Settings\Lupe\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\glog.log Object is locked skipped
C:\Documents and Settings\Lupe\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\ApplicationHistory\hpqimzone.exe.3204510e.ini.inuse Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\Microsoft\Windows Defender\FileTracker\{2035D943-8493-4BB5-8106-D30915E7F258} Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\Microsoft\Windows Defender\FileTracker\{96C4080B-40A6-4C15-BC0D-9BE572EF4F56} Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\History\History.IE5\INDEX.DAT Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\History\History.IE5\MSHist012008051420080515\index.dat Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Temp\app2AD.tmp Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.e skipped
C:\Documents and Settings\Lupe\Local Settings\Temp\srtin.exe Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.c skipped
C:\Documents and Settings\Lupe\Local Settings\Temp\~DF6C52.tmp Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Temp\~DFCD10.tmp Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Lupe\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Lupe\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\app1F2.tmp/data0002/data0002 Infected: Trojan-Downloader.Win32.Keenval skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\app1F2.tmp/data0002/data0004 Infected: Trojan-Downloader.Win32.Keenval skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\app1F2.tmp/data0002/data0005 Infected: Trojan-Downloader.Win32.Keenval skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\app1F2.tmp/data0002 Infected: Trojan-Downloader.Win32.Keenval skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\app1F2.tmp/data0003 Infected: Trojan-Downloader.Win32.Keenval.b skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\app1F2.tmp/data0004 Infected: Trojan-Downloader.Win32.Keenval.e skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\app1F2.tmp NSIS: infected - 6 skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\app1F3.tmp/data0005 Infected: Trojan-Downloader.Win32.Turown.h skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\app1F3.tmp/data0007 Infected: Trojan-Downloader.Win32.Turown.g skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\app1F3.tmp/data0011 Infected: Trojan-Downloader.Win32.VB.cw skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\app1F3.tmp NSIS: infected - 3 skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\app25E.tmp Infected: Trojan-Downloader.Win32.Agent.ac skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\app2B3.tmp Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.e skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\Del559.tmp Infected: not-a-virus:AdWare.Win32.180Solutions.y skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\eltupt.exe Infected: Trojan-Downloader.Win32.OneClickNetSearch.k skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\upd4.tmp/ME.dll Infected: not-a-virus:AdWare.Win32.MediaPops.b skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\upd4.tmp CAB: infected - 1 skipped
C:\Documents and Settings\Yvette\Local Settings\Temp\vmstmp\vmstmp.exe Infected: not-a-virus:AdWare.Win32.DelphinMediaViewer.c skipped
C:\Program Files\Appliedsearch_AutoInstall\Bar.dll Infected: not-a-virus:AdWare.Win32.AdvancedSearchBar skipped
C:\Program Files\msnet\v9\msnet.DLL Infected: not-a-virus:AdWare.Win32.WindowEnhancer skipped
C:\Program Files\msnet\v9\msnet.EXE Infected: not-a-virus:AdWare.Win32.WindowEnhancer skipped
C:\Program Files\PeDevice\PeDev.dll Infected: not-a-virus:AdWare.Win32.BHO.ahp skipped
C:\System Volume Information\catalog.wci\00000002.ps1 Object is locked skipped
C:\System Volume Information\catalog.wci\00000002.ps2 Object is locked skipped
C:\System Volume Information\catalog.wci\00010001.ci Object is locked skipped
C:\System Volume Information\catalog.wci\cicat.fid Object is locked skipped
C:\System Volume Information\catalog.wci\cicat.hsh Object is locked skipped
C:\System Volume Information\catalog.wci\CiCL0001.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiP10000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiP20000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiPT0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiSL0001.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiSP0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiST0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiVP0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\INDEX.000 Object is locked skipped
C:\System Volume Information\catalog.wci\propstor.bk1 Object is locked skipped
C:\System Volume Information\catalog.wci\propstor.bk2 Object is locked skipped
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP742\change.log Object is locked skipped
C:\updaterInstall_108.exe/data0002 Infected: Trojan-Downloader.Win32.Keenval skipped
C:\updaterInstall_108.exe/data0004 Infected: Trojan-Downloader.Win32.Keenval skipped
C:\updaterInstall_108.exe/data0005 Infected: Trojan-Downloader.Win32.Keenval skipped
C:\updaterInstall_108.exe NSIS: infected - 3 skipped
C:\WINDOWS\$NtUninstallKB824141$\user32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB824141$\win32k.sys Object is locked skipped
C:\WINDOWS\$NtUninstallKB828028$\msasn1.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828035$\msgsvc.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828035$\wkssvc.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\catsrv.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\catsrvut.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\clbcatex.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\clbcatq.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\colbact.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\comadmin.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\comrepl.exe Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\comsvcs.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\comuid.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\es.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\msdtctm.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\mtxclu.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\mtxoci.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\ole32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\txflog.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\callcont.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\cmdevtgprov.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\evtgprov.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\gdi32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\h323.tsp Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\h323msp.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\lsasrv.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\mf3216.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\msgina.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\mst120.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\netapi32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\nmcom.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\rtcdll.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\schannel.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\dao360.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\expsrv.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msexch40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msexcl40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msjet40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msjetoledb40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msjint40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msjter40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msjtes40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msltus40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\mspbde40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msrd2x40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msrd3x40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msrepl40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\mstext40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\mswdat10.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\mswstr10.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msxbde40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\vbajet32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\fldrclnr.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\shell32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\sxs.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\xpsp2res.dll Object is locked skipped
C:\WINDOWS\$NtUninstallQ828026$\msdxm.ocx Object is locked skipped
C:\WINDOWS\$NtUninstallQ828026$\wmpcore.dll Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Downloaded Program Files\ycomp5_0_2_7.dll Infected: not-a-virus:AdWare.Win32.Yahoo skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{C3AA7AEA-0001-4B1B-BAE2-271F81CAA525}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\SYSTEM\BHO001.DLL Infected: not-a-virus:AdWare.Win32.IGetNet.b skipped
C:\WINDOWS\SYSTEM\Install_All.DLL Infected: not-a-virus:AdWare.Win32.IGetNet.b skipped
C:\WINDOWS\SYSTEM\RSP001.DLL Infected: not-a-virus:AdWare.Win32.IGetNet.a skipped
C:\WINDOWS\SYSTEM\Update_com.DLL Infected: not-a-virus:AdWare.Win32.IGetNet.a skipped
C:\WINDOWS\SYSTEM\Update_Hosts.DLL Infected: not-a-virus:AdWare.Win32.IGetNet.g skipped
C:\WINDOWS\SYSTEM\WinStart001.EXE Infected: not-a-virus:AdWare.Win32.IGetNet.a skipped
C:\WINDOWS\SYSTEM32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\SYSTEM32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\SYSTEM32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\CATDB Object is locked skipped
C:\WINDOWS\SYSTEM32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\CATDB Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\AppEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\Internet.evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SAM Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SecEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SysEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\H323LOG.TXT Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\setup.exe/data0002 Infected: not-a-virus:AdWare.Win32.IEDriver.a skipped
C:\WINDOWS\Temp\setup.exe/data0003 Infected: Trojan-Downloader.Win32.Agent.adz skipped
C:\WINDOWS\Temp\setup.exe NSIS: infected - 2 skipped
C:\WINDOWS\Temp\setup1036.exe/data0002 Infected: not-a-virus:AdWare.Win32.UrlSpy.b skipped
C:\WINDOWS\Temp\setup1036.exe/data0004 Infected: not-a-virus:AdWare.Win32.UrlSpy.b skipped
C:\WINDOWS\Temp\setup1036.exe/data0006 Infected: not-a-virus:AdWare.Win32.UrlSpy.b skipped
C:\WINDOWS\Temp\setup1036.exe/data0007 Infected: not-a-virus:AdWare.Win32.UrlSpy.b skipped
C:\WINDOWS\Temp\setup1036.exe NSIS: infected - 4 skipped
C:\WINDOWS\WIADEBUG.LOG Object is locked skipped
C:\WINDOWS\WIASERVC.LOG Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

pskelley

2008-05-16, 16:29

Welcome to Safer Networking, I wish to be sure you have viewed and understand this information.
"BEFORE you POST" (READ this Procedure before Requesting Assistance)
http://forums.spybot.info/showthread.php?t=288
All advice given is taken at your own risk.
Please make sure you have read this information so we are on the same page.

If you still need help, read the directions posted above and pinned (sticky) to the top of the forum. Then as you will have read, turn off "Word Wrap" in notepad and post a new HJT log that I can use.

I would also like to know if you had anything to do with the custom hosts file you can see as 01 lines in the HJT log.

Thanks

cesarper

2008-05-17, 08:40

Hello pskelley, I apologize for not following the directions. This is my parents' computer, and, as far as I know, they (nor I) had anything to do with those host files. Also, I've noticed an error message popping up every so often stating that the program is unable to connect with the webcam. My parents don't have a webcam, so I'm guessing that whatever nasty they got on their computer is trying to connect to a web cam. Here's the non-word-wrapped HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:11:26 PM, on 5/14/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Dell Support Center\HWDiag\bin\pcd.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Dell Support Center\HWDiag\bin\pcd.exe
C:\Program Files\Dell Support Center\HWDiag\bin\pcdrsysinfovideocapture.p5x
C:\Program Files\Dell Support Center\HWDiag\bin\pcdrsysinfovideocapture.p5x

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.media-search.net/nph-search.cgi?track=mssb1&look=sbar1_srchbtn
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.media-search.net/nph-search.cgi?track=mssrc&look=stmpl1&find=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://yahoo.sbc.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.media-search.net/nph-search.cgi?track=mssrc&look=stmpl1&find=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.media-search.net/nph-search.cgi?track=mssb1&look=sbar1_srchbtn
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.media-search.net/nph-search.cgi?track=mssrc&look=stmpl1&find=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.media-search.net/nph-search.cgi?track=mssrc&look=stmpl1&find=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.media-search.net/nph-search.cgi?track=mssrc&look=stmpl1&find=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.media-search.net/nph-search.cgi?track=mssrc&look=stmpl1&find=
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = hhttp://search.media-search.net/nph-search.cgi?track=mssrc&look=stmpl1&find=
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O1 - Hosts: 216.177.73.139 search.netscape.com
O1 - Hosts: com
O1 - Hosts: 216.177.73.139 search.netscape.com
O1 - Hosts: com
O1 - Hosts: 216.177.73.139 search.netscape.com
O1 - Hosts: e.com
O1 - Hosts: e.com
O1 - Hosts: com
O1 - Hosts: com
O1 - Hosts: rch.msn.com
O1 - Hosts: indows.
O1 - Hosts: comments (such as these) may be inserted on individual
O2 - BHO: (no name) - rsion - (no file)
O2 - BHO: (no name) - {00041A26-7033-432C-94C7-6371DE343822} - (no file)
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [diagent] "C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe" startup
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Media-Search] "C:\Program Files\msnet\v9\msnet.EXE" /H
O4 - HKLM\..\Run: [Upsfc] C:\DOCUME~1\Yvette\LOCALS~1\Temp\app25E.tmp
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O8 - Extra context menu item: &Search - ?p=ZJ
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: SirSearch - file://C:\Program Files\PWRSDP1\Cache\SelectedContextSearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\ms.exe (file missing)
O9 - Extra 'Tools' menuitem: MaxSpeed - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\ms.exe (file missing)
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper200711281.dll
O16 - DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} (Disney Online Games ActiveX Control) - http://disney.go.com/pirates/online/testActiveX/built/signed/DisneyOnlineGames.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1142574875812
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Toolbar) - http://us.dl1.yimg.com/download.companion.yahoo.com/dl/toolbar/yiebio5_1_6_0.cab
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = www.lausd.k12.ca.us
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = www.lausd.k12.ca.us
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = www.lausd.k12.ca.us
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

--
End of file - 13410 bytes

pskelley

2008-05-17, 12:52

Thanks for returning your HJT log, this looks like some nasty adware:
http://www.castlecops.com/o9list-55.html
http://vil.mcafeesecurity.com/vil/content/v_114578.htm

We will first have a try at removing it manually and see what happens.

1) Download the HostsXpert 4.2 - Hosts File Manager.
http://www.funkytoad.com/download/HostsXpert.zip
Unzip HostsXpert 4.2 - Hosts File Manager to a convenient folder such as C:\HostsXpert 4.2 - Hosts File Manager
Run HostsXpert 4.2 - Hosts File Manager from its new home
Click on "File Handling".
Click on "Restore MS Hosts File".
Click OK on the Confirmation box.
Click on "Make Read Only?"
Click the X to exit the program.
Note: If you were using a custom Hosts file you will need to replace any of those entries yourself.

2) How to make files and folders visible:
Click Start > Open My Computer.
Select the Tools menu and click Folder Options.
Select the View Tab. Under the Hidden files and folders heading, select Show hidden files and folders.
Uncheck: Hide file extensions for known file types
Uncheck the Hide protected operating system files (recommended) option.
Click Yes to confirm. Click OK.
You may reverse this for safety when we are finished.

3) Please download ATF Cleaner by Atribune
http://www.atribune.org/public-beta/ATF-Cleaner.exe
Save it to your Desktop. We will use this later.

4) Windows Defender: Click on "Tools"
Click on "General Settings"
Scroll down to "Real-time protection options"
Uncheck "Turn on Real-time protection (recommended)"
Click "Save"
Make sure to turn your protection back on when you finish.

5) Start > Control Panel > Add Remove Programs and uninstall msnet or media-search.net if there.

6) Open HijackThis and choose "Do a system scan only" then check the box in front of these line items:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.media-search.net/nph-search.cgi?track=mssb1&look=sbar1_srchbtn
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.media-search.net/nph-search.cgi?track=mssrc&look=stmpl1&find=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.media-search.net/nph-search.cgi?track=mssrc&look=stmpl1&find=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.media-search.net/nph-search.cgi?track=mssb1&look=sbar1_srchbtn
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.media-search.net/nph-search.cgi?track=mssrc&look=stmpl1&find=
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.media-search.net/nph-search.cgi?track=mssrc&look=stmpl1&find=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.media-search.net/nph-search.cgi?track=mssrc&look=stmpl1&find=
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.media-search.net/nph-search.cgi?track=mssrc&look=stmpl1&find=
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = hhttp://search.media-search.net/nph-search.cgi?track=mssrc&look=stmpl1&find=
(01's may be gone after running HostsXpert)
O1 - Hosts: 216.177.73.139 search.netscape.com
O1 - Hosts: com
O1 - Hosts: 216.177.73.139 search.netscape.com
O1 - Hosts: com
O1 - Hosts: 216.177.73.139 search.netscape.com
O1 - Hosts: e.com
O1 - Hosts: e.com
O1 - Hosts: com
O1 - Hosts: com
O1 - Hosts: rch.msn.com
O1 - Hosts: indows.
O1 - Hosts: comments (such as these) may be inserted on individual
O2 - BHO: (no name) - rsion - (no file)
O2 - BHO: (no name) - {00041A26-7033-432C-94C7-6371DE343822} - (no file)
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O4 - HKLM\..\Run: [Media-Search] "C:\Program Files\msnet\v9\msnet.EXE" /H
O4 - HKLM\..\Run: [Upsfc] C:\DOCUME~1\Yvette\LOCALS~1\Temp\app25E.tmp
O8 - Extra context menu item: &Search - ?p=ZJ
O8 - Extra context menu item: SirSearch - file://C:\Program Files\PWRSDP1\Cache\SelectedContextSearch.htm
O9 - Extra button: (no name) - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\ms.exe (file missing)
O9 - Extra 'Tools' menuitem: MaxSpeed - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\ms.exe (file missing)

Close all programs but HJT and all browser windows, then click on "Fix Checked"

7) Right click Start > Explore and navigate to these files/folders and delete them if there.

C:\Program Files\msnet\ <<< delete that folder and contents

C:\DOCUMENTS&SETTINGS~1\Yvette\LOCALSETTINGS~1\Temp\ <<< delete the contents of that Temp folder
(some of files may remain, not to worry)

8) Run ATF Cleaner
Double-click ATF-Cleaner.exe to run the program.
Click Select All found at the bottom of the list.
Click the Empty Selected button.
Click Exit on the Main menu to close the program.

Restart and post a new HJT log and provide feedback about performance.

Thanks

cesarper

2008-05-20, 04:51

When I try to restore the MS Hosts file, I get the following error message:

Error: Cannot create file C:\WINDOWS\system32\DRIVERS\ETC\hosts

Then it closes the program automatically.

I'm proceeding with the other steps now.

cesarper

2008-05-20, 05:33

Alright, here are the results:

Step 1: See above, unable to proceed.

Steps 2-4: Successful

Step 5: Did not find either of those two items in there. I did find other items that are somewhat suspicious. I did not remove them, but I listed them below:
(B) MS-C wordfinder
eLottoAlert version 1.0.14.4
MS B Help
MS IE assistant
MS.C help
MS.C help
Search MS.C
Sidebar Search
Your MS.C Assistant

Steps 6-8: Successful

Performance-wise, things have remarkably improved. IE is still a little slow at first, but it quickly regains normal speed, whereas it used to take 1 -2 hours to do anything before you started helping me. I still get that "Unable to connect to WebCam" error message shortly after starting up IE. Other than that, no problems.

pskelley

2008-05-20, 13:14

Thanks for returning your information and the feedback.

1) Let's see if we can get a look at what is in the hosts file like this:
To view the Hosts file:
Start -> Run -> Copy the following to the box and hit enter:
C:\WINDOWS\System32\drivers\etc\HOSTS

A window opens, choose Notepad from the list and hit OK.
A notepad document opens, copy the contents to here.

5) As long as this is your computer, you may uninsall any program that you wish. Just be sure you want it gone before uninstalling it. Google: http://www.google.com/ will usually tell you want a program is.
http://ask.metafilter.com/6283/
http://www.google.com/search?hl=en&q=MS-C+wordfinder&btnG=Google+Search
In that first link I see this information:

are all for search.media-search.net.
Which we did remove from your computer. I suggest you uninstall all of those and anything else you don't want on your computer. Just don't fool with the hotfixes and other security stuff from Windows. They will go away when Service Pack #3 wraps them all up.

You will have a few slow boots since we used ATF-Cleaner to clean the Prefetch folder, some information:
http://www.windowsnetworking.com/articles_tutorials/Gaining-Speed-Empty-Prefetch-XP.html

Here is information to help improve the overall performance:
http://users.telenet.be/bluepatchy/miekiemoes/slowcomputer.html

I still get that "Unable to connect to WebCam" error message shortly after starting up IE.
Could you look at that message and provide me with every bit of information it provides, word for word. You say you have no webcam installed? Let me look at an uninstall list but don't create it until you remove the stuff left the the search junk.

Open Hijackthis.
Click the "Open the Misc Tools" section Button.
Click the "Open Uninstall Manager" Button.
Click the "Save list..." Button.
Save it to your desktop. Copy and paste the contents into your reply.
(You may edit out Microsoft, Hotfixes, Security Update for Windows XP,
Update for Windows XP and Windows XP Hotfix to shorten the list)
I will also need to see the HJT log I reqested here:

Restart and post a new HJT log and provide feedback about performance.
The Kaspersky Online Scan (KOS) showed a lot of junk, we have no doubt removed some of it but need to remove it all. Please run a new scan and post it using these settings:
* The program will launch and then begin downloading the latest definition files:
* Once the files have been downloaded click on NEXT
* Now click on Scan Settings
* In the scan settings make that the following are selected:
* Scan using the following Anti-Virus database:
* Standard
* Scan Options:
* Scan Archives
* Scan Mail Bases
* Click OK
* Now under select a target to scan:
* Select My Computer
* This will program will start and scan your system.
* The scan will take a while so be patient and let it run.
* Once the scan is complete it will display if your system has been infected.
* Now click on the Save as Text button:
* Save the file to your desktop.

Recap: Post the hosts file information, the uninstall list, the new KOS results, a fresh HijackThis log, any additional webcam information you can, and any comments you think will help.

Thanks...Phil

cesarper

2008-05-24, 04:51

#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#

127.0.0.1 localhost

[EDITED OUT A LONG BLANK SPACE HERE]

# Start of entries inserted by Spybot - Search & Destroy
127.0.0.1 www.1001-search.info
127.0.0.1 1001-search.info
127.0.0.1 www.136136.net
127.0.0.1 136136.net
127.0.0.1 www.181.365soft.info
127.0.0.1 181.365soft.info
127.0.0.1 www.1-extreme.biz
127.0.0.1 1-extreme.biz
127.0.0.1 2.82211.net
127.0.0.1 www.24.365soft.info
127.0.0.1 24.365soft.info
127.0.0.1 www.24-7pharmacy.info
127.0.0.1 24-7pharmacy.info
127.0.0.1 www.2every.net
127.0.0.1 2every.net
127.0.0.1 www.2search.org
127.0.0.1 2search.org
127.0.0.1 www.3322.org
127.0.0.1 3322.org
127.0.0.1 365soft.info
127.0.0.1 www.3bay.it
127.0.0.1 3bay.it
127.0.0.1 www.3ebay.it
127.0.0.1 3ebay.it
127.0.0.1 www.4corn.net
127.0.0.1 4corn.net
127.0.0.1 www.4ebay.it
127.0.0.1 4ebay.it
127.0.0.1 www.4repubblica.it
127.0.0.1 4repubblica.it
127.0.0.1 www.5iscali.it
127.0.0.1 5iscali.it
127.0.0.1 www.5repubblica.it
127.0.0.1 5repubblica.it
127.0.0.1 www.5tiscali.it
127.0.0.1 5tiscali.it
127.0.0.1 www.680180.net
127.0.0.1 680180.net
127.0.0.1 www.6iscali.it
127.0.0.1 6iscali.it
127.0.0.1 www.6tiscali.it
127.0.0.1 6tiscali.it
127.0.0.1 82211.net
127.0.0.1 8866.org
127.0.0.1 a.bestmanage.org
127.0.0.1 www.abc-find.info
127.0.0.1 abc-find.info
127.0.0.1 www.abnetsoft.info
127.0.0.1 abnetsoft.info
127.0.0.1 www.abrp.net
127.0.0.1 abrp.net
127.0.0.1 www.ac66.cn
127.0.0.1 ac66.cn
127.0.0.1 access.rapid-pass.net
127.0.0.1 www.accessthefuture.net
127.0.0.1 accessthefuture.net
127.0.0.1 www.accessvid.net
127.0.0.1 accessvid.net
127.0.0.1 www.acrobat-reader-8.de
127.0.0.1 acrobat-reader-8.de
127.0.0.1 www.actionbreastcancer.org
127.0.0.1 actionbreastcancer.org
127.0.0.1 www.activesearcher.info
127.0.0.1 activesearcher.info
127.0.0.1 www.adamsupportgroup.org
127.0.0.1 adamsupportgroup.org
127.0.0.1 adaware.cc
127.0.0.1 adchannel.contextplus.net
127.0.0.1 www.addictivetechnologies.net
127.0.0.1 addictivetechnologies.net
127.0.0.1 www.adgate.info
127.0.0.1 adgate.info
127.0.0.1 www.admin2cash.biz
127.0.0.1 admin2cash.biz
127.0.0.1 www.adobe-reader-8.fr
127.0.0.1 adobe-reader-8.fr
127.0.0.1 ads.centralmedia.ws
127.0.0.1 ads.k8l.info
127.0.0.1 ads.kw.revenue.net
127.0.0.1 ads1.revenue.net
127.0.0.1 www.adsextend.net
127.0.0.1 adsextend.net
127.0.0.1 www.adsrevenue.net
127.0.0.1 adsrevenue.net
127.0.0.1 www.adtrak.net
127.0.0.1 adtrak.net
127.0.0.1 www.adult777search.info
127.0.0.1 adult777search.info
127.0.0.1 www.adult-erotic-guide.net
127.0.0.1 adult-erotic-guide.net
127.0.0.1 www.adult-friends-finder.net
127.0.0.1 adult-friends-finder.net
127.0.0.1 adultgambling.org
127.0.0.1 adult-host.org
127.0.0.1 www.adult-mpg.net
127.0.0.1 adult-mpg.net
127.0.0.1 adult-personal.us
127.0.0.1 adultsgames.net
127.0.0.1 www.advcash.biz
127.0.0.1 advcash.biz
127.0.0.1 advert.exaccess.ru
127.0.0.1 www.advertisemoney.info
127.0.0.1 advertisemoney.info
127.0.0.1 www.advertising-money.info
127.0.0.1 advertising-money.info
127.0.0.1 ad-ware.cc
127.0.0.1 www.adwareremover.ws
127.0.0.1 adwareremover.ws
127.0.0.1 africaspromise.org
127.0.0.1 agava.ru
127.0.0.1 www.aginegialle.it
127.0.0.1 aginegialle.it
127.0.0.1 aifind.info
127.0.0.1 www.aifind.info
127.0.0.1 www.aitalia.it
127.0.0.1 aitalia.it
127.0.0.1 www.aklitalia.it
127.0.0.1 aklitalia.it
127.0.0.1 alcatel.ws
127.0.0.1 www.alialia.it
127.0.0.1 alialia.it
127.0.0.1 www.aliotalia.it
127.0.0.1 aliotalia.it
127.0.0.1 www.alirtalia.it
127.0.0.1 alirtalia.it
127.0.0.1 www.alitaia.it
127.0.0.1 alitaia.it
127.0.0.1 www.alitaklia.it
127.0.0.1 alitaklia.it
127.0.0.1 www.alitala.it
127.0.0.1 alitala.it
127.0.0.1 www.alitali.it
127.0.0.1 alitali.it
127.0.0.1 www.alitaliaq.it
127.0.0.1 alitaliaq.it
127.0.0.1 www.alitalias.it
127.0.0.1 alitalias.it
127.0.0.1 www.alitaliaz.it
127.0.0.1 alitaliaz.it
127.0.0.1 www.alitalioa.it
127.0.0.1 alitalioa.it
127.0.0.1 www.alitalisa.it
127.0.0.1 alitalisa.it
127.0.0.1 www.alitaliua.it
127.0.0.1 alitaliua.it
127.0.0.1 www.alitalkia.it
127.0.0.1 alitalkia.it
127.0.0.1 www.alitaloia.it
127.0.0.1 alitaloia.it
127.0.0.1 www.alitaluia.it
127.0.0.1 alitaluia.it
127.0.0.1 www.alitaslia.it
127.0.0.1 alitaslia.it
127.0.0.1 www.alitlia.it
127.0.0.1 alitlia.it
127.0.0.1 www.alitralia.it
127.0.0.1 alitralia.it
127.0.0.1 www.alitsalia.it
127.0.0.1 alitsalia.it
127.0.0.1 www.aliutalia.it
127.0.0.1 aliutalia.it
127.0.0.1 www.ALL1COUNT.NET
127.0.0.1 ALL1COUNT.NET
127.0.0.1 www.allresultz.net
127.0.0.1 allresultz.net
127.0.0.1 www.allsearch.us
127.0.0.1 allsearch.us
127.0.0.1 www.allstarsvideos.net
127.0.0.1 allstarsvideos.net
127.0.0.1 www.almanah.biz
127.0.0.1 almanah.biz
127.0.0.1 www.aloitalia.it
127.0.0.1 aloitalia.it
127.0.0.1 www.aluitalia.it
127.0.0.1 aluitalia.it
127.0.0.1 american-teens.net
127.0.0.1 anin.org
127.0.0.1 www.anjpn-avxiz.biz
127.0.0.1 anjpn-avxiz.biz
127.0.0.1 www.anjpnzqav.biz
127.0.0.1 anjpnzqav.biz
127.0.0.1 www.anjpn-zqav.biz
127.0.0.1 anjpn-zqav.biz
127.0.0.1 www.antiddos.us
127.0.0.1 antiddos.us
127.0.0.1 www.antispydns.biz
127.0.0.1 antispydns.biz
127.0.0.1 www.Antispyweb.net
127.0.0.1 Antispyweb.net
127.0.0.1 www.antivirus-hq.net
127.0.0.1 antivirus-hq.net
127.0.0.1 www.archiviosex.net
127.0.0.1 archiviosex.net
127.0.0.1 arizonaweb.org
127.0.0.1 www.arquivojpgs.smtp.ru
127.0.0.1 arquivojpgs.smtp.ru
127.0.0.1 www.asdbiz.biz
127.0.0.1 asdbiz.biz
127.0.0.1 www.aslitalia.it
127.0.0.1 aslitalia.it
127.0.0.1 www.asupereva.it
127.0.0.1 asupereva.it
127.0.0.1 www.attrezzi.biz
127.0.0.1 attrezzi.biz
127.0.0.1 www.aulde.net
127.0.0.1 aulde.net
127.0.0.1 www.aupereva.it
127.0.0.1 aupereva.it
127.0.0.1 www.autobargains.org
127.0.0.1 autobargains.org
127.0.0.1 www.autocontext.begun.ru
127.0.0.1 autocontext.begun.ru
127.0.0.1 www.avg.grab-it-today.net
127.0.0.1 avg.grab-it-today.net
127.0.0.1 www.avxizaaqada.biz
127.0.0.1 avxizaaqada.biz
127.0.0.1 www.avxiz-anjpn.biz
127.0.0.1 avxiz-anjpn.biz
127.0.0.1 www.avxizueorn.biz
127.0.0.1 avxizueorn.biz
127.0.0.1 www.avxiz-ueorn.biz
127.0.0.1 avxiz-ueorn.biz
127.0.0.1 www.avxiz-vtvcp.biz
127.0.0.1 avxiz-vtvcp.biz
127.0.0.1 www.avxiz-ygco.biz
127.0.0.1 avxiz-ygco.biz
127.0.0.1 www.avxiz-zqav.biz
127.0.0.1 avxiz-zqav.biz
127.0.0.1 awmcash.biz
127.0.0.1 www.azzetta.it
127.0.0.1 azzetta.it
127.0.0.1 www.babe.the-killer.bz
127.0.0.1 babe.the-killer.bz
127.0.0.1 www.babeweb.de
127.0.0.1 babeweb.de
127.0.0.1 www.baccarat-other.info
127.0.0.1 baccarat-other.info
127.0.0.1 backup.mabou.org
127.0.0.1 bannedhost.net
127.0.0.1 bdsmlibrary.net
127.0.0.1 www.bearshare.download-me.info
127.0.0.1 bearshare.download-me.info
127.0.0.1 www.bearshare-download.org
127.0.0.1 bearshare-download.org
127.0.0.1 www.bearshare-downloads.net
127.0.0.1 bearshare-downloads.net
127.0.0.1 www.bearsharelive.co.uk
127.0.0.1 bearsharelive.co.uk
127.0.0.1 www.beebappyy.biz
127.0.0.1 beebappyy.biz
127.0.0.1 bestfor.ru
127.0.0.1 www.bestmanage.org
127.0.0.1 bestmanage.org
127.0.0.1 www.bestmanage0.org
127.0.0.1 bestmanage0.org
127.0.0.1 www.bestmanage1.org
127.0.0.1 bestmanage1.org
127.0.0.1 www.bestmanage2.org
127.0.0.1 bestmanage2.org
127.0.0.1 www.bestmanage3.org
127.0.0.1 bestmanage3.org
127.0.0.1 www.bestmanage4.org
127.0.0.1 bestmanage4.org
127.0.0.1 www.bestmanage5.org
127.0.0.1 bestmanage5.org
127.0.0.1 www.bestmanage6.org
127.0.0.1 bestmanage6.org
127.0.0.1 www.bestmanage7.org
127.0.0.1 bestmanage7.org
127.0.0.1 www.bestmanage8.org
127.0.0.1 bestmanage8.org
127.0.0.1 www.bestmanage9.org
127.0.0.1 bestmanage9.org
127.0.0.1 www.bestsafetyguide.net
127.0.0.1 bestsafetyguide.net
127.0.0.1 www.bestsearch.cc
127.0.0.1 bestsearch.cc
127.0.0.1 www.best-spyware.info
127.0.0.1 best-spyware.info
127.0.0.1 www.best-voyeur.info
127.0.0.1 best-voyeur.info
127.0.0.1 www.bestworldgirls-for-u.net
127.0.0.1 bestworldgirls-for-u.net
127.0.0.1 www.bettersearch.biz
127.0.0.1 bettersearch.biz
127.0.0.1 www.bgazzetta.it
127.0.0.1 bgazzetta.it
127.0.0.1 www.bgoogle.it
127.0.0.1 bgoogle.it
127.0.0.1 bins.media-motor.net
127.0.0.1 bins2.media-motor.net
127.0.0.1 bitchesonline.net
127.0.0.1 biz.biz
127.0.0.1 www.blackcodec.net
127.0.0.1 blackcodec.net
127.0.0.1 www.blackhats.tc
127.0.0.1 blackhats.tc
127.0.0.1 blackjack-free.net
127.0.0.1 blender.xu.pl
127.0.0.1 bradcoem.org
127.0.0.1 www.breenten.biz
127.0.0.1 breenten.biz
127.0.0.1 www.brodbfm.net
127.0.0.1 brodbfm.net
127.0.0.1 buhartes.info
127.0.0.1 buscards.net
127.0.0.1 www.busysearch.net
127.0.0.1 busysearch.net
127.0.0.1 buttejazz.org
127.0.0.1 www.buy-find.info
127.0.0.1 buy-find.info
127.0.0.1 buyselldomain.net
127.0.0.1 www.buytraff.biz
127.0.0.1 buytraff.biz
127.0.0.1 buz.ru
127.0.0.1 www.bvirgilio.it
127.0.0.1 bvirgilio.it
127.0.0.1 c.centralmedia.ws
127.0.0.1 www.c5.www4free.info
127.0.0.1 c5.www4free.info
127.0.0.1 www.calendaralerts.net
127.0.0.1 calendaralerts.net
127.0.0.1 www.callinghome.biz
127.0.0.1 callinghome.biz
127.0.0.1 www.cameouk.co.uk
127.0.0.1 cameouk.co.uk
127.0.0.1 www.camouflageclothingonline.net
127.0.0.1 camouflageclothingonline.net
127.0.0.1 campaigns.outerinfo.net
127.0.0.1 camup.net
127.0.0.1 www.canidetect.org
127.0.0.1 canidetect.org
127.0.0.1 careers.dulcineasystems.net
127.0.0.1 carsrentals.net
127.0.0.1 www.cashdeluxe.net
127.0.0.1 cashdeluxe.net
127.0.0.1 cashsearch.biz
127.0.0.1 casino2win.net
127.0.0.1 casino-gambling-1.net
127.0.0.1 casino-gambling-2.net
127.0.0.1 casinomidas.net
127.0.0.1 casinonline.net
127.0.0.1 casino-onlines.net
127.0.0.1 www.catch-dc.info
127.0.0.1 catch-dc.info
127.0.0.1 catsss.da.ru
127.0.0.1 caxa.ru
127.0.0.1 cc.panet.org
127.0.0.1 cclebali.org
127.0.0.1 www.ccorriere.it
127.0.0.1 ccorriere.it
127.0.0.1 www.cdorriere.it
127.0.0.1 cdorriere.it
127.0.0.1 ceewawires.org
127.0.0.1 centralmedia.ws
127.0.0.1 www.cforriere.it
127.0.0.1 cforriere.it
127.0.0.1 www.check.jupitersatellites.biz
127.0.0.1 check.jupitersatellites.biz
127.0.0.1 chriswallace.net
127.0.0.1 www.ciorriere.it
127.0.0.1 ciorriere.it
127.0.0.1 www.cirriere.it
127.0.0.1 cirriere.it
127.0.0.1 cl55.biz
127.0.0.1 clearsearch.cc
127.0.0.1 clearsearch.net
127.0.0.1 click-now.net
127.0.0.1 www.clickspring.net
127.0.0.1 clickspring.net
127.0.0.1 clickyestoenter.net
127.0.0.1 www.cliks.org
127.0.0.1 cliks.org
127.0.0.1 www.clorriere.it
127.0.0.1 clorriere.it
127.0.0.1 clusif.free.fr
127.0.0.1 www.codecdvd.net
127.0.0.1 codecdvd.net
127.0.0.1 www.codechot.net
127.0.0.1 codechot.net
127.0.0.1 www.codechq.net
127.0.0.1 codechq.net
127.0.0.1 www.codecmeg.net
127.0.0.1 codecmeg.net
127.0.0.1 www.codecmega.net
127.0.0.1 codecmega.net
127.0.0.1 www.codecnice.net
127.0.0.1 codecnice.net
127.0.0.1 www.codecops.net
127.0.0.1 codecops.net
127.0.0.1 www.codecpretty.net
127.0.0.1 codecpretty.net
127.0.0.1 www.codecpro.net
127.0.0.1 codecpro.net
127.0.0.1 www.codecsoft.net
127.0.0.1 codecsoft.net
127.0.0.1 www.codecultra.net
127.0.0.1 codecultra.net
127.0.0.1 www.codeczang.net
127.0.0.1 codeczang.net
127.0.0.1 www.codrriere.it
127.0.0.1 codrriere.it
127.0.0.1 www.coeriere.it
127.0.0.1 coeriere.it
127.0.0.1 www.coerriere.it
127.0.0.1 coerriere.it
127.0.0.1 www.cofrriere.it
127.0.0.1 cofrriere.it
127.0.0.1 www.cogrriere.it
127.0.0.1 cogrriere.it
127.0.0.1 www.coirriere.it
127.0.0.1 coirriere.it
127.0.0.1 www.contentmatch.net
127.0.0.1 contentmatch.net
127.0.0.1 www.contextplus.net
127.0.0.1 contextplus.net
127.0.0.1 cool-homepage.co
127.0.0.1 cool-search.net
127.0.0.1 coolsearcher.info
127.0.0.1 www.coolservecorp.net
127.0.0.1 coolservecorp.net
127.0.0.1 cool-xxx.net
127.0.0.1 www.coorriere.it
127.0.0.1 coorriere.it
127.0.0.1 www.coprriere.it
127.0.0.1 coprriere.it
127.0.0.1 www.coreiere.it
127.0.0.1 coreiere.it
127.0.0.1 www.coreriere.it
127.0.0.1 coreriere.it
127.0.0.1 www.corrdiere.it
127.0.0.1 corrdiere.it
127.0.0.1 www.correiere.it
127.0.0.1 correiere.it
127.0.0.1 www.corrfiere.it
127.0.0.1 corrfiere.it
127.0.0.1 www.corrgiere.it
127.0.0.1 corrgiere.it
127.0.0.1 www.corridere.it
127.0.0.1 corridere.it
127.0.0.1 www.corriedre.it
127.0.0.1 corriedre.it
127.0.0.1 www.corriee.it
127.0.0.1 corriee.it
127.0.0.1 www.corrieere.it
127.0.0.1 corrieere.it
127.0.0.1 www.corriefre.it
127.0.0.1 corriefre.it
127.0.0.1 www.corriegre.it
127.0.0.1 corriegre.it
127.0.0.1 www.corrierde.it
127.0.0.1 corrierde.it
127.0.0.1 www.corriered.it
127.0.0.1 corriered.it
127.0.0.1 www.corrieree.it
127.0.0.1 corrieree.it
127.0.0.1 www.corrieref.it
127.0.0.1 corrieref.it
127.0.0.1 www.corrierer.it
127.0.0.1 corrierer.it
127.0.0.1 www.corrieres.it
127.0.0.1 corrieres.it
127.0.0.1 www.corrierew.it
127.0.0.1 corrierew.it
127.0.0.1 www.corrierfe.it
127.0.0.1 corrierfe.it
127.0.0.1 www.corrierge.it
127.0.0.1 corrierge.it
127.0.0.1 www.corrierr.it
127.0.0.1 corrierr.it
127.0.0.1 www.corrierre.it
127.0.0.1 corrierre.it
127.0.0.1 www.corrierse.it
127.0.0.1 corrierse.it
127.0.0.1 www.corrierte.it
127.0.0.1 corrierte.it
127.0.0.1 www.corrierw.it
127.0.0.1 corrierw.it
127.0.0.1 www.corrierwe.it
127.0.0.1 corrierwe.it
127.0.0.1 www.corriesre.it
127.0.0.1 corriesre.it
127.0.0.1 www.corriete.it
127.0.0.1 corriete.it
127.0.0.1 www.corrietre.it
127.0.0.1 corrietre.it
127.0.0.1 www.corriewre.it
127.0.0.1 corriewre.it
127.0.0.1 www.corrifere.it
127.0.0.1 corrifere.it
127.0.0.1 www.corriiere.it
127.0.0.1 corriiere.it
127.0.0.1 www.corrilere.it
127.0.0.1 corrilere.it
127.0.0.1 www.corrioere.it
127.0.0.1 corrioere.it
127.0.0.1 www.corrire.it
127.0.0.1 corrire.it
127.0.0.1 www.corrirere.it
127.0.0.1 corrirere.it
127.0.0.1 www.corrirre.it
127.0.0.1 corrirre.it
127.0.0.1 www.corrisere.it
127.0.0.1 corrisere.it
127.0.0.1 www.corriuere.it
127.0.0.1 corriuere.it
127.0.0.1 www.corriwere.it
127.0.0.1 corriwere.it
127.0.0.1 www.corriwre.it
127.0.0.1 corriwre.it
127.0.0.1 www.corrliere.it
127.0.0.1 corrliere.it
127.0.0.1 www.corroere.it
127.0.0.1 corroere.it
127.0.0.1 www.corroiere.it
127.0.0.1 corroiere.it
127.0.0.1 www.corrriere.it
127.0.0.1 corrriere.it
127.0.0.1 www.corrtiere.it
127.0.0.1 corrtiere.it
127.0.0.1 www.corruere.it
127.0.0.1 corruere.it
127.0.0.1 www.corruiere.it
127.0.0.1 corruiere.it
127.0.0.1 www.cortiere.it
127.0.0.1 cortiere.it
127.0.0.1 www.cortriere.it
127.0.0.1 cortriere.it
127.0.0.1 www.cotriere.it
127.0.0.1 cotriere.it
127.0.0.1 www.cotrriere.it
127.0.0.1 cotrriere.it
127.0.0.1 count.cc
127.0.0.1 count.hitscount.net
127.0.0.1 www.countdutycall.info
127.0.0.1 countdutycall.info
127.0.0.1 www.cporriere.it
127.0.0.1 cporriere.it
127.0.0.1 www.cprriere.it
127.0.0.1 cprriere.it
127.0.0.1 cracks.me.uk
127.0.0.1 www.crapsgold.info
127.0.0.1 crapsgold.info
127.0.0.1 www.crriere.it
127.0.0.1 crriere.it
127.0.0.1 www.curedc.info
127.0.0.1 curedc.info
127.0.0.1 www.cvirgilio.it
127.0.0.1 cvirgilio.it
127.0.0.1 www.cvorriere.it
127.0.0.1 cvorriere.it
127.0.0.1 cvs.jps.ru
127.0.0.1 www.cxorriere.it
127.0.0.1 cxorriere.it
127.0.0.1 www.dating-galaxy.info
127.0.0.1 dating-galaxy.info
127.0.0.1 dating-search.net
127.0.0.1 davemarshall.org
127.0.0.1 www.dcorriere.it
127.0.0.1 dcorriere.it
127.0.0.1 de.ag
127.0.0.1 de98.remsys.org
127.0.0.1 www.debay.it
127.0.0.1 debay.it
127.0.0.1 dedmazay.3322.org
127.0.0.1 defaultsearch.net
127.0.0.1 www.derklaif.biz
127.0.0.1 derklaif.biz
127.0.0.1 www.derrari.it
127.0.0.1 derrari.it
127.0.0.1 www.destruktor.to.pl
127.0.0.1 destruktor.to.pl
127.0.0.1 dewis.spb.ru
127.0.0.1 dewis.us
127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
127.0.0.1 www.did.i-used.cc
127.0.0.1 did.i-used.cc
127.0.0.1 www.digitalcoders.net
127.0.0.1 digitalcoders.net
127.0.0.1 dionforvalleycouncil.org
127.0.0.1 www.directporta.info
127.0.0.1 directporta.info
127.0.0.1 dl.ad-ware.cc
127.0.0.1 dl.web-nexus.net
127.0.0.1 dload.contextplus.net
127.0.0.1 dnl.mabou.org
127.0.0.1 document-not-found.pornpic.org
127.0.0.1 domains2003.net
127.0.0.1 down.136136.net
127.0.0.1 download.contextplus.net
127.0.0.1 www.download.jupitersatellites.biz
127.0.0.1 download.jupitersatellites.biz
127.0.0.1 download.searchtabs.net
127.0.0.1 www.download.secureyournet.biz
127.0.0.1 download.secureyournet.biz
127.0.0.1 download.spyonthis.net
127.0.0.1 www.download-for-free.net
127.0.0.1 download-for-free.net
127.0.0.1 www.download-limewire.org
127.0.0.1 download-limewire.org
127.0.0.1 www.downloadlost.tv
127.0.0.1 downloadlost.tv
127.0.0.1 www.downloadmax.net
127.0.0.1 downloadmax.net
127.0.0.1 download-me.info
127.0.0.1 www.downloadpics.net
127.0.0.1 downloadpics.net
127.0.0.1 www.downloadprovider.net
127.0.0.1 downloadprovider.net
127.0.0.1 downloads.adaware.cc
127.0.0.1 www.downloads-free.org
127.0.0.1 downloads-free.org
127.0.0.1 www.download-this.us
127.0.0.1 download-this.us
127.0.0.1 downloadznow.net
127.0.0.1 www.download-zone-free.net
127.0.0.1 download-zone-free.net
127.0.0.1 www.drepubblica.it
127.0.0.1 drepubblica.it
127.0.0.1 www.dsupereva.it
127.0.0.1 dsupereva.it
127.0.0.1 dulcineasystems.net
127.0.0.1 duolaimi.net
127.0.0.1 www.dvdaccess.net
127.0.0.1 dvdaccess.net
127.0.0.1 dvdbank.org
127.0.0.1 www.dvdcodec.net
127.0.0.1 dvdcodec.net
127.0.0.1 www.dvdsmovies.net
127.0.0.1 dvdsmovies.net
127.0.0.1 www.dvdsvideos.net
127.0.0.1 dvdsvideos.net
127.0.0.1 www.e3bay.it
127.0.0.1 e3bay.it
127.0.0.1 www.e4bay.it
127.0.0.1 e4bay.it
127.0.0.1 www.earthllnk.net
127.0.0.1 earthllnk.net
127.0.0.1 eases.net
127.0.0.1 www.easymus.cn
127.0.0.1 easymus.cn
127.0.0.1 www.easy-pharmacy.info
127.0.0.1 easy-pharmacy.info
127.0.0.1 easy-search.net
127.0.0.1 www.easywww.info
127.0.0.1 easywww.info
127.0.0.1 www.eba6y.it
127.0.0.1 eba6y.it
127.0.0.1 www.eba7y.it
127.0.0.1 eba7y.it
127.0.0.1 www.ebaay.it
127.0.0.1 ebaay.it
127.0.0.1 www.ebagy.it
127.0.0.1 ebagy.it
127.0.0.1 www.ebahy.it
127.0.0.1 ebahy.it
127.0.0.1 www.ebajy.it
127.0.0.1 ebajy.it
127.0.0.1 www.ebaqy.it
127.0.0.1 ebaqy.it
127.0.0.1 www.ebasy.it
127.0.0.1 ebasy.it
127.0.0.1 www.ebaty.it
127.0.0.1 ebaty.it
127.0.0.1 www.ebauy.it
127.0.0.1 ebauy.it
127.0.0.1 www.ebawy.it
127.0.0.1 ebawy.it
127.0.0.1 www.ebaxy.it
127.0.0.1 ebaxy.it
127.0.0.1 www.ebay6.it
127.0.0.1 ebay6.it
127.0.0.1 www.ebay7.it
127.0.0.1 ebay7.it
127.0.0.1 www.ebayg.it
127.0.0.1 ebayg.it
127.0.0.1 www.ebayh.it
127.0.0.1 ebayh.it
127.0.0.1 www.ebayj.it
127.0.0.1 ebayj.it
127.0.0.1 www.ebayt.it
127.0.0.1 ebayt.it
127.0.0.1 www.ebayu.it
127.0.0.1 ebayu.it
127.0.0.1 www.ebazy.it
127.0.0.1 ebazy.it
127.0.0.1 www.ebestfind.org
127.0.0.1 ebestfind.org
127.0.0.1 www.ebgay.it
127.0.0.1 ebgay.it
127.0.0.1 www.ebhay.it
127.0.0.1 ebhay.it
127.0.0.1 www.ebnay.it
127.0.0.1 ebnay.it
127.0.0.1 www.ebqay.it
127.0.0.1 ebqay.it
127.0.0.1 www.ebsay.it
127.0.0.1 ebsay.it
127.0.0.1 www.ebsy.it
127.0.0.1 ebsy.it
127.0.0.1 www.ebvay.it
127.0.0.1 ebvay.it
127.0.0.1 www.ebway.it
127.0.0.1 ebway.it
127.0.0.1 www.ebxay.it
127.0.0.1 ebxay.it
127.0.0.1 www.ebzay.it
127.0.0.1 ebzay.it
127.0.0.1 ecosrioplatenses.org
127.0.0.1 ecstasyporn.net
127.0.0.1 www.edbay.it
127.0.0.1 edbay.it
127.0.0.1 www.eebay.it
127.0.0.1 eebay.it
127.0.0.1 www.eepubblica.it
127.0.0.1 eepubblica.it
127.0.0.1 www.efbay.it
127.0.0.1 efbay.it
127.0.0.1 www.egbay.it
127.0.0.1 egbay.it
127.0.0.1 www.ehbay.it
127.0.0.1 ehbay.it
127.0.0.1 www.elitemediagroup.net
127.0.0.1 elitemediagroup.net
127.0.0.1 www.elseif.biz
127.0.0.1 elseif.biz
127.0.0.1 www.emailicon.org
127.0.0.1 emailicon.org
127.0.0.1 www.enay.it
127.0.0.1 enay.it
127.0.0.1 www.enbay.it
127.0.0.1 enbay.it
127.0.0.1 enitinvest.net
127.0.0.1 www.entertainsite.net
127.0.0.1 entertainsite.net
127.0.0.1 e-plus.cc
127.0.0.1 www.erbay.it
127.0.0.1 erbay.it
127.0.0.1 www.erepubblica.it
127.0.0.1 erepubblica.it
127.0.0.1 www.erossoalice.it
127.0.0.1 erossoalice.it
127.0.0.1 www.errari.it
127.0.0.1 errari.it
127.0.0.1 www.error404site.net
127.0.0.1 error404site.net
127.0.0.1 www.esbay.it
127.0.0.1 esbay.it
127.0.0.1 www.esupereva.it
127.0.0.1 esupereva.it
127.0.0.1 www.evbay.it
127.0.0.1 evbay.it
127.0.0.1 evidence-detector.biz
127.0.0.1 www.evko.biz
127.0.0.1 evko.biz
127.0.0.1 www.ewbay.it
127.0.0.1 ewbay.it
127.0.0.1 ewebsearch.net
127.0.0.1 ewizard.cc
127.0.0.1 www.exaccess.ru
127.0.0.1 exaccess.ru
127.0.0.1 www.exflow.org
127.0.0.1 exflow.org
127.0.0.1 extremeseek.net
127.0.0.1 f1.bestmanage.org
127.0.0.1 f1.truth-is-out-there.org
127.0.0.1 f2.bestmanage.org
127.0.0.1 f2.truth-is-out-there.org
127.0.0.1 f3.bestmanage.org
127.0.0.1 f3.truth-is-out-there.org
127.0.0.1 f4.bestmanage.org
127.0.0.1 f4.truth-is-out-there.org
127.0.0.1 f5.bestmanage.org
127.0.0.1 f5.truth-is-out-there.org
127.0.0.1 f6.bestmanage.org
127.0.0.1 f7.bestmanage.org
127.0.0.1 f7.truth-is-out-there.org
127.0.0.1 f8.bestmanage.org
127.0.0.1 f8.truth-is-out-there.org
127.0.0.1 f9.bestmanage.org
127.0.0.1 f9.truth-is-out-there.org
127.0.0.1 farmacept32.phpnet.us
127.0.0.1 www.fastmp.net
127.0.0.1 fastmp.net
127.0.0.1 www.fazzetta.it
127.0.0.1 fazzetta.it
127.0.0.1 www.fcorriere.it
127.0.0.1 fcorriere.it
127.0.0.1 www.febay.it
127.0.0.1 febay.it
127.0.0.1 www.feeds2.2search.org
127.0.0.1 feeds2.2search.org
127.0.0.1 www.ferraeri.it
127.0.0.1 ferraeri.it
127.0.0.1 www.ferrai.it
127.0.0.1 ferrai.it
127.0.0.1 www.ferrarei.it
127.0.0.1 ferrarei.it
127.0.0.1 www.ferrarti.it
127.0.0.1 ferrarti.it
127.0.0.1 www.ferrasri.it
127.0.0.1 ferrasri.it
127.0.0.1 www.ferratri.it
127.0.0.1 ferratri.it
127.0.0.1 www.ferreari.it
127.0.0.1 ferreari.it
127.0.0.1 www.ferrri.it
127.0.0.1 ferrri.it
127.0.0.1 www.ferrsari.it
127.0.0.1 ferrsari.it
127.0.0.1 www.ferrtari.it
127.0.0.1 ferrtari.it
127.0.0.1 www.fetrrari.it
127.0.0.1 fetrrari.it
127.0.0.1 www.fgazzetta.it
127.0.0.1 fgazzetta.it
127.0.0.1 www.fgoogle.it
127.0.0.1 fgoogle.it
127.0.0.1 fhg.panet.org
127.0.0.1 fickenisgeil.de
127.0.0.1 file.unionsms.net
127.0.0.1 find4u.net
127.0.0.1 www.findanyshow.org
127.0.0.1 findanyshow.org
127.0.0.1 www.find-find-777.net
127.0.0.1 find-find-777.net
127.0.0.1 find-uk-health.co.uk
127.0.0.1 www.findwapsite.org
127.0.0.1 findwapsite.org
127.0.0.1 fined.biz
127.0.0.1 fine-search.net
127.0.0.1 www.firgilio.it
127.0.0.1 firgilio.it
127.0.0.1 firstbookmark.net
127.0.0.1 flashflashmx.3322.org
127.0.0.1 www.flrx-tools.net
127.0.0.1 flrx-tools.net
127.0.0.1 foodvacations.net
127.0.0.1 forex.jps.ru
127.0.0.1 forexcredit.ru
127.0.0.1 forsythfire.net
127.0.0.1 fp.outerinfo.net
127.0.0.1 free4porno.net
127.0.0.1 www.free-avg.org
127.0.0.1 free-avg.org
127.0.0.1 freebookmark.net
127.0.0.1 freebookmarks.net
127.0.0.1 www.freecat.biz
127.0.0.1 freecat.biz
127.0.0.1 www.free-porn-movies.info
127.0.0.1 free-porn-movies.info
127.0.0.1 free-sex-movie-clips.net
127.0.0.1 freeshemalepics.net
127.0.0.1 www.frepubblica.it
127.0.0.1 frepubblica.it
127.0.0.1 fric.cn
127.0.0.1 www.frrari.it
127.0.0.1 frrari.it
127.0.0.1 www.frrrari.it
127.0.0.1 frrrari.it
127.0.0.1 www.ftiscali.it
127.0.0.1 ftiscali.it
127.0.0.1 www.ftrenitalia.it
127.0.0.1 ftrenitalia.it
127.0.0.1 www.ftuttogratis.it
127.0.0.1 ftuttogratis.it
127.0.0.1 full-search.net
127.0.0.1 full-tgp.net
127.0.0.1 www.fvirgilio.it
127.0.0.1 fvirgilio.it
127.0.0.1 www.fwrrari.it
127.0.0.1 fwrrari.it
127.0.0.1 www.g0oogle.it
127.0.0.1 g0oogle.it
127.0.0.1 www.g9oogle.it
127.0.0.1 g9oogle.it
127.0.0.1 www.gaazzetta.it
127.0.0.1 gaazzetta.it
127.0.0.1 www.galleryclick.net
127.0.0.1 galleryclick.net
127.0.0.1 www.gallerypictures.net
127.0.0.1 gallerypictures.net
127.0.0.1 www.game4all.biz
127.0.0.1 game4all.biz
127.0.0.1 www.games.de.ag
127.0.0.1 games.de.ag
127.0.0.1 gameterror.net
127.0.0.1 www.gaqzzetta.it
127.0.0.1 gaqzzetta.it
127.0.0.1 www.gaszzetta.it
127.0.0.1 gaszzetta.it
127.0.0.1 www.gaxzetta.it
127.0.0.1 gaxzetta.it
127.0.0.1 www.gaxzzetta.it
127.0.0.1 gaxzzetta.it
127.0.0.1 www.gazxetta.it
127.0.0.1 gazxetta.it
127.0.0.1 www.gazxzetta.it
127.0.0.1 gazxzetta.it
127.0.0.1 www.gazzaetta.it
127.0.0.1 gazzaetta.it
127.0.0.1 www.gazzdetta.it
127.0.0.1 gazzdetta.it
127.0.0.1 www.gazzedtta.it
127.0.0.1 gazzedtta.it
127.0.0.1 www.gazzeetta.it
127.0.0.1 gazzeetta.it
127.0.0.1 www.gazzeftta.it
127.0.0.1 gazzeftta.it
127.0.0.1 www.gazzegtta.it
127.0.0.1 gazzegtta.it
127.0.0.1 www.gazzehtta.it
127.0.0.1 gazzehtta.it
127.0.0.1 www.gazzerta.it
127.0.0.1 gazzerta.it
127.0.0.1 www.gazzertta.it
127.0.0.1 gazzertta.it
127.0.0.1 www.gazzestta.it
127.0.0.1 gazzestta.it
127.0.0.1 www.gazzetra.it
127.0.0.1 gazzetra.it
127.0.0.1 www.gazzett.it
127.0.0.1 gazzett.it
127.0.0.1 www.gazzettaa.it
127.0.0.1 gazzettaa.it
127.0.0.1 www.gazzettaq.it
127.0.0.1 gazzettaq.it
127.0.0.1 www.gazzettas.it
127.0.0.1 gazzettas.it
127.0.0.1 www.gazzettaz.it
127.0.0.1 gazzettaz.it
127.0.0.1 www.gazzettfa.it
127.0.0.1 gazzettfa.it
127.0.0.1 www.gazzettga.it
127.0.0.1 gazzettga.it
127.0.0.1 www.gazzettha.it
127.0.0.1 gazzettha.it
127.0.0.1 www.gazzettqa.it
127.0.0.1 gazzettqa.it
127.0.0.1 www.gazzettra.it
127.0.0.1 gazzettra.it
127.0.0.1 www.gazzetts.it
127.0.0.1 gazzetts.it
127.0.0.1 www.gazzettsa.it
127.0.0.1 gazzettsa.it
127.0.0.1 www.gazzettya.it
127.0.0.1 gazzettya.it
127.0.0.1 www.gazzettza.it
127.0.0.1 gazzettza.it
127.0.0.1 www.gazzetya.it
127.0.0.1 gazzetya.it
127.0.0.1 www.gazzetyta.it
127.0.0.1 gazzetyta.it
127.0.0.1 www.gazzeyta.it
127.0.0.1 gazzeyta.it
127.0.0.1 www.gazzeytta.it
127.0.0.1 gazzeytta.it
127.0.0.1 www.gazzfetta.it
127.0.0.1 gazzfetta.it
127.0.0.1 www.gazzretta.it
127.0.0.1 gazzretta.it
127.0.0.1 www.gazzrtta.it
127.0.0.1 gazzrtta.it
127.0.0.1 www.gazzsetta.it
127.0.0.1 gazzsetta.it
127.0.0.1 www.gazztta.it
127.0.0.1 gazztta.it
127.0.0.1 www.gazzwetta.it
127.0.0.1 gazzwetta.it
127.0.0.1 www.gazzwtta.it
127.0.0.1 gazzwtta.it
127.0.0.1 www.gazzxetta.it
127.0.0.1 gazzxetta.it
127.0.0.1 www.gbazzetta.it
127.0.0.1 gbazzetta.it
127.0.0.1 www.gboogle.it
127.0.0.1 gboogle.it
127.0.0.1 www.ge.net
127.0.0.1 ge.net
127.0.0.1 www.geil-de.info
127.0.0.1 geil-de.info
127.0.0.1 germany.rub.to
127.0.0.1 www.gerrari.it
127.0.0.1 gerrari.it
127.0.0.1 www.get-access.host.sk
127.0.0.1 www.getbestloanrate.info
127.0.0.1 getbestloanrate.info
127.0.0.1 www.getpatytoday.info
127.0.0.1 getpatytoday.info
127.0.0.1 www.gfazzetta.it
127.0.0.1 gfazzetta.it
127.0.0.1 www.gfoogle.it
127.0.0.1 gfoogle.it
127.0.0.1 www.gfxgraphics.net
127.0.0.1 gfxgraphics.net
127.0.0.1 www.ggazzetta.it
127.0.0.1 ggazzetta.it
127.0.0.1 www.ghazzetta.it
127.0.0.1 ghazzetta.it
127.0.0.1 www.ghoogle.it
127.0.0.1 ghoogle.it
127.0.0.1 www.giangho.biz
127.0.0.1 giangho.biz
127.0.0.1 www.gigacodec.net
127.0.0.1 gigacodec.net
127.0.0.1 www.gigaz.info
127.0.0.1 gigaz.info
127.0.0.1 www.giogle.it
127.0.0.1 giogle.it
127.0.0.1 www.gioogle.it
127.0.0.1 gioogle.it
127.0.0.1 www.girgilio.it
127.0.0.1 girgilio.it
127.0.0.1 girls4rent.net
127.0.0.1 www.giscali.it
127.0.0.1 giscali.it
127.0.0.1 www.givecnt.info
127.0.0.1 givecnt.info
127.0.0.1 www.gkoogle.it
127.0.0.1 gkoogle.it
127.0.0.1 www.gl.secdep.info
127.0.0.1 gl.secdep.info
127.0.0.1 glbdf.org
127.0.0.1 globe-finder.cc
127.0.0.1 www.glogle.it
127.0.0.1 glogle.it
127.0.0.1 www.go0ogle.it
127.0.0.1 go0ogle.it
127.0.0.1 www.go9ogle.it
127.0.0.1 go9ogle.it
127.0.0.1 www.goigle.it
127.0.0.1 goigle.it
127.0.0.1 www.goiogle.it
127.0.0.1 goiogle.it
127.0.0.1 www.gokogle.it
127.0.0.1 gokogle.it
127.0.0.1 goldbaccarat.info
127.0.0.1 www.gold-craps.info
127.0.0.1 gold-craps.info
127.0.0.1 goldengr.hypermart.net
127.0.0.1 golftennis.net
127.0.0.1 www.golgle.it
127.0.0.1 golgle.it
127.0.0.1 www.gologle.it
127.0.0.1 gologle.it
127.0.0.1 www.goo0gle.it
127.0.0.1 goo0gle.it
127.0.0.1 www.goo9gle.it
127.0.0.1 goo9gle.it
127.0.0.1 www.goobgle.it
127.0.0.1 goobgle.it
127.0.0.1 www.gooble.it
127.0.0.1 gooble.it
127.0.0.1 www.good-casino.net
127.0.0.1 good-casino.net
127.0.0.1 good-mortgages.net
127.0.0.1 www.goofgle.it
127.0.0.1 goofgle.it
127.0.0.1 www.googble.it
127.0.0.1 googble.it
127.0.0.1 www.googel.it
127.0.0.1 googel.it
127.0.0.1 www.googfle.it
127.0.0.1 googfle.it
127.0.0.1 www.googhle.it
127.0.0.1 googhle.it
127.0.0.1 www.googkle.it
127.0.0.1 googkle.it
127.0.0.1 www.googl3e.it
127.0.0.1 googl3e.it
127.0.0.1 www.googl4e.it
127.0.0.1 googl4e.it
127.0.0.1 www.googld.it
127.0.0.1 googld.it
127.0.0.1 www.googlde.it
127.0.0.1 googlde.it
127.0.0.1 google.panet.org
127.0.0.1 www.google3.it
127.0.0.1 google3.it
127.0.0.1 www.google4.it
127.0.0.1 google4.it
127.0.0.1 googlebar.jps.ru
127.0.0.1 www.googled.it
127.0.0.1 googled.it
127.0.0.1 www.googlef.it
127.0.0.1 googlef.it
127.0.0.1 www.googler.it
127.0.0.1 googler.it
127.0.0.1 www.googles.it
127.0.0.1 googles.it
127.0.0.1 www.googlew.it
127.0.0.1 googlew.it
127.0.0.1 www.googlf.it
127.0.0.1 googlf.it
127.0.0.1 www.googlfe.it
127.0.0.1 googlfe.it
127.0.0.1 www.googlke.it
127.0.0.1 googlke.it
127.0.0.1 www.googloe.it
127.0.0.1 googloe.it
127.0.0.1 www.googlpe.it
127.0.0.1 googlpe.it
127.0.0.1 www.googlre.it
127.0.0.1 googlre.it
127.0.0.1 www.googlse.it
127.0.0.1 googlse.it
127.0.0.1 www.googlwe.it
127.0.0.1 googlwe.it
127.0.0.1 www.googole.it
127.0.0.1 googole.it
127.0.0.1 www.googple.it
127.0.0.1 googple.it
127.0.0.1 www.googtle.it
127.0.0.1 googtle.it
127.0.0.1 www.googvle.it
127.0.0.1 googvle.it
127.0.0.1 www.googyle.it
127.0.0.1 googyle.it
127.0.0.1 www.goohgle.it
127.0.0.1 goohgle.it
127.0.0.1 www.goohle.it
127.0.0.1 goohle.it
127.0.0.1 www.gooigle.it
127.0.0.1 gooigle.it
127.0.0.1 www.gookgle.it
127.0.0.1 gookgle.it
127.0.0.1 www.gooogle.bz
127.0.0.1 gooogle.bz
127.0.0.1 www.goopgle.it
127.0.0.1 goopgle.it
127.0.0.1 www.gootgle.it
127.0.0.1 gootgle.it
127.0.0.1 www.gootle.it
127.0.0.1 gootle.it
127.0.0.1 www.goovgle.it
127.0.0.1 goovgle.it
127.0.0.1 www.goovle.it
127.0.0.1 goovle.it
127.0.0.1 www.gooygle.it
127.0.0.1 gooygle.it
127.0.0.1 www.gopgle.it
127.0.0.1 gopgle.it
127.0.0.1 www.gopogle.it
127.0.0.1 gopogle.it
127.0.0.1 www.gpogle.it
127.0.0.1 gpogle.it
127.0.0.1 www.gpoogle.it
127.0.0.1 gpoogle.it
127.0.0.1 www.gqazzetta.it
127.0.0.1 gqazzetta.it
127.0.0.1 grab-it-today.net
127.0.0.1 www.graceinthedesert.org
127.0.0.1 graceinthedesert.org
127.0.0.1 gradforum.org
127.0.0.1 gratisdownloads.nl
127.0.0.1 www.great-ticket.net
127.0.0.1 great-ticket.net
127.0.0.1 www.grepubblica.it
127.0.0.1 grepubblica.it
127.0.0.1 www.gsazzetta.it
127.0.0.1 gsazzetta.it
127.0.0.1 www.gszzetta.it
127.0.0.1 gszzetta.it
127.0.0.1 www.gtazzetta.it
127.0.0.1 gtazzetta.it
127.0.0.1 www.gtiscali.it
127.0.0.1 gtiscali.it
127.0.0.1 www.gtoogle.it
127.0.0.1 gtoogle.it
127.0.0.1 www.gtrenitalia.it
127.0.0.1 gtrenitalia.it
127.0.0.1 www.gtuttogratis.it
127.0.0.1 gtuttogratis.it
127.0.0.1 www.gvazzetta.it
127.0.0.1 gvazzetta.it
127.0.0.1 www.gvirgilio.it
127.0.0.1 gvirgilio.it
127.0.0.1 www.gvoogle.it
127.0.0.1 gvoogle.it
127.0.0.1 www.gyoogle.it
127.0.0.1 gyoogle.it
127.0.0.1 www.gzazzetta.it
127.0.0.1 gzazzetta.it
127.0.0.1 www.gzzetta.it
127.0.0.1 gzzetta.it
127.0.0.1 hardwareseek.net
127.0.0.1 havy.biz
127.0.0.1 www.hazzetta.it
127.0.0.1 hazzetta.it
127.0.0.1 hccsolanonapa.org
127.0.0.1 hentai4u.net
127.0.0.1 www.here4search.biz
127.0.0.1 here4search.biz
127.0.0.1 here4search.biz
127.0.0.1 www.hgazzetta.it
127.0.0.1 hgazzetta.it
127.0.0.1 www.hgoogle.it
127.0.0.1 hgoogle.it
127.0.0.1 www.hi.studioaperto.net
127.0.0.1 hi.studioaperto.net
127.0.0.1 www.hijack-this.net
127.0.0.1 hijack-this.net
127.0.0.1 himen.biz
127.0.0.1 www.hiscali.it
127.0.0.1 hiscali.it
127.0.0.1 hitscount.net
127.0.0.1 www.homelandnetwork.COM
127.0.0.1 homelandnetwork.COM
127.0.0.1 homemortage.ws
127.0.0.1 www.hoogle.it
127.0.0.1 hoogle.it
127.0.0.1 host.sk
127.0.0.1 www.hostance.net
127.0.0.1 hostance.net
127.0.0.1 hot-cartoon-sex.anime.american-teens.net
127.0.0.1 www.hotcodec.net
127.0.0.1 hotcodec.net
127.0.0.1 hotels-list.net
127.0.0.1 www.hqcodectime.net
127.0.0.1 hqcodectime.net
127.0.0.1 hqsex.biz
127.0.0.1 www.htiscali.it
127.0.0.1 htiscali.it
127.0.0.1 hu15.ru
127.0.0.1 hugeporn4u.net
127.0.0.1 hut1.ru
127.0.0.1 www.ibankis.org
127.0.0.1 ibankis.org
127.0.0.1 icansearch.net
127.0.0.1 www.iconnectyou.biz
127.0.0.1 iconnectyou.biz
127.0.0.1 www.ifeelyou.info
127.0.0.1 ifeelyou.info
127.0.0.1 iframe.biz
127.0.0.1 www.ikataweb.it
127.0.0.1 ikataweb.it
127.0.0.1 www.ilbero.it
127.0.0.1 ilbero.it
127.0.0.1 infodigger.net
127.0.0.1 www.inibo.it
127.0.0.1 inibo.it
127.0.0.1 install.searchtab.net
127.0.0.1 insuranceall.net
127.0.0.1 insurance-flood.net
127.0.0.1 www.internet-explorer.name
127.0.0.1 internet-explorer.name
127.0.0.1 internetsearch.ru
127.0.0.1 www.ipo.net
127.0.0.1 ipo.net
127.0.0.1 www.ipointyou.hk
127.0.0.1 ipointyou.hk
127.0.0.1 ipsex.net
127.0.0.1 iqsearch.net
127.0.0.1 www.iscali.it
127.0.0.1 iscali.it
127.0.0.1 www.itfindout.org
127.0.0.1 itfindout.org
127.0.0.1 www.itknown.net
127.0.0.1 itknown.net
127.0.0.1 itseasy.us
127.0.0.1 www.iunibo.it
127.0.0.1 iunibo.it
127.0.0.1 www.iunige.it
127.0.0.1 iunige.it
127.0.0.1 www.iunimi.it
127.0.0.1 iunimi.it
127.0.0.1 www.iunipd.it
127.0.0.1 iunipd.it
127.0.0.1 www.iunipg.it
127.0.0.1 iunipg.it
127.0.0.1 www.iunipv.it
127.0.0.1 iunipv.it
127.0.0.1 www.iunito.it
127.0.0.1 iunito.it
127.0.0.1 i-used.cc
127.0.0.1 www.iwantsearch.net
127.0.0.1 iwantsearch.net
127.0.0.1 www.jackpot-advertising.info
127.0.0.1 jackpot-advertising.info
127.0.0.1 www.jackpotcheck.info
127.0.0.1 jackpotcheck.info
127.0.0.1 www.jkataweb.it
127.0.0.1 jkataweb.it
127.0.0.1 jmhgallery.org
127.0.0.1 www.jmsn.it
127.0.0.1 jmsn.it
127.0.0.1 jps.ru
127.0.0.1 js.megalocast.net
127.0.0.1 judin.ru
127.0.0.1 www.jupitersatellites.biz
127.0.0.1 jupitersatellites.biz
127.0.0.1 www.justcount.net
127.0.0.1 justcount.net
127.0.0.1 k8l.info
127.0.0.1 www.kaaweb.it
127.0.0.1 kaaweb.it
127.0.0.1 www.kaftaweb.it
127.0.0.1 kaftaweb.it
127.0.0.1 www.kagtaweb.it
127.0.0.1 kagtaweb.it
127.0.0.1 www.kahtaweb.it
127.0.0.1 kahtaweb.it
127.0.0.1 kalmarte.zapto.org
127.0.0.1 kannylizaciya.info
127.0.0.1 www.kaqtaweb.it
127.0.0.1 kaqtaweb.it
127.0.0.1 www.karachun.biz
127.0.0.1 karachun.biz
127.0.0.1 www.karaweb.it
127.0.0.1 karaweb.it
127.0.0.1 karleyt.narod.ru
127.0.0.1 www.kartaweb.it
127.0.0.1 kartaweb.it
127.0.0.1 www.kastaweb.it
127.0.0.1 kastaweb.it
127.0.0.1 www.kataaweb.it
127.0.0.1 kataaweb.it
127.0.0.1 www.katadweb.it
127.0.0.1 katadweb.it
127.0.0.1 www.kataeb.it
127.0.0.1 kataeb.it
127.0.0.1 www.kataeeb.it
127.0.0.1 kataeeb.it
127.0.0.1 www.kataewb.it
127.0.0.1 kataewb.it
127.0.0.1 www.kataeweb.it
127.0.0.1 kataeweb.it
127.0.0.1 www.kataqeb.it
127.0.0.1 kataqeb.it
127.0.0.1 www.kataqweb.it
127.0.0.1 kataqweb.it
127.0.0.1 www.katasweb.it
127.0.0.1 katasweb.it
127.0.0.1 www.katawaeb.it
127.0.0.1 katawaeb.it
127.0.0.1 www.katawb.it
127.0.0.1 katawb.it
127.0.0.1 www.katawdeb.it
127.0.0.1 katawdeb.it
127.0.0.1 www.katawe.it
127.0.0.1 katawe.it
127.0.0.1 www.katawebb.it
127.0.0.1 katawebb.it
127.0.0.1 www.katawebg.it
127.0.0.1 katawebg.it
127.0.0.1 www.katawebh.it
127.0.0.1 katawebh.it
127.0.0.1 www.katawebn.it
127.0.0.1 katawebn.it
127.0.0.1 www.katawebv.it
127.0.0.1 katawebv.it
127.0.0.1 www.katawedb.it
127.0.0.1 katawedb.it
127.0.0.1 www.kataweeb.it
127.0.0.1 kataweeb.it
127.0.0.1 www.katawefb.it
127.0.0.1 katawefb.it
127.0.0.1 www.katawegb.it
127.0.0.1 katawegb.it
127.0.0.1 www.katawehb.it
127.0.0.1 katawehb.it
127.0.0.1 www.katawenb.it
127.0.0.1 katawenb.it
127.0.0.1 www.katawerb.it
127.0.0.1 katawerb.it
127.0.0.1 www.katawesb.it
127.0.0.1 katawesb.it
127.0.0.1 www.katawev.it
127.0.0.1 katawev.it
127.0.0.1 www.katawevb.it
127.0.0.1 katawevb.it
127.0.0.1 www.katawfeb.it
127.0.0.1 katawfeb.it
127.0.0.1 www.katawqeb.it
127.0.0.1 katawqeb.it
127.0.0.1 www.katawrb.it
127.0.0.1 katawrb.it
127.0.0.1 www.katawreb.it
127.0.0.1 katawreb.it
127.0.0.1 www.katawseb.it
127.0.0.1 katawseb.it
127.0.0.1 www.katawwb.it
127.0.0.1 katawwb.it
127.0.0.1 www.katawweb.it
127.0.0.1 katawweb.it
127.0.0.1 www.katazweb.it
127.0.0.1 katazweb.it
127.0.0.1 www.katfaweb.it
127.0.0.1 katfaweb.it
127.0.0.1 www.katgaweb.it
127.0.0.1 katgaweb.it
127.0.0.1 www.kathaweb.it
127.0.0.1 kathaweb.it
127.0.0.1 www.katqaweb.it
127.0.0.1 katqaweb.it
127.0.0.1 www.katraweb.it
127.0.0.1 katraweb.it
127.0.0.1 www.katsaweb.it
127.0.0.1 katsaweb.it
127.0.0.1 www.katsweb.it
127.0.0.1 katsweb.it
127.0.0.1 www.kattaweb.it
127.0.0.1 kattaweb.it
127.0.0.1 www.katweb.it
127.0.0.1 katweb.it
127.0.0.1 www.katzaweb.it
127.0.0.1 katzaweb.it
127.0.0.1 www.kayaweb.it
127.0.0.1 kayaweb.it
127.0.0.1 kazaa-lite.ws
127.0.0.1 www.kaztaweb.it
127.0.0.1 kaztaweb.it
127.0.0.1 www.keratomir.biz
127.0.0.1 keratomir.biz
127.0.0.1 www.keratomir2.biz
127.0.0.1 keratomir2.biz
127.0.0.1 www.kiataweb.it
127.0.0.1 kiataweb.it
127.0.0.1 www.kibero.it
127.0.0.1 kibero.it
127.0.0.1 www.kjataweb.it
127.0.0.1 kjataweb.it
127.0.0.1 www.kkataweb.it
127.0.0.1 kkataweb.it
127.0.0.1 www.klataweb.it
127.0.0.1 klataweb.it
127.0.0.1 www.klibero.it
127.0.0.1 klibero.it
127.0.0.1 www.kmataweb.it
127.0.0.1 kmataweb.it
127.0.0.1 www.kmsn.it
127.0.0.1 kmsn.it
127.0.0.1 www.koataweb.it
127.0.0.1 koataweb.it
127.0.0.1 www.komforochka.info
127.0.0.1 komforochka.info
127.0.0.1 www.kqataweb.it
127.0.0.1 kqataweb.it
127.0.0.1 www.ksataweb.it
127.0.0.1 ksataweb.it
127.0.0.1 ksdspups.org
127.0.0.1 www.kstaweb.it
127.0.0.1 kstaweb.it
127.0.0.1 www.ktaweb.it
127.0.0.1 ktaweb.it
127.0.0.1 www.kzataweb.it
127.0.0.1 kzataweb.it
127.0.0.1 l.mezzicodec.net
127.0.0.1 www.l8bero.it
127.0.0.1 l8bero.it
127.0.0.1 www.l8ibero.it
127.0.0.1 l8ibero.it
127.0.0.1 www.l9bero.it
127.0.0.1 l9bero.it
127.0.0.1 www.l9ibero.it
127.0.0.1 l9ibero.it
127.0.0.1 www.lbero.it
127.0.0.1 lbero.it
127.0.0.1 www.lbiero.it
127.0.0.1 lbiero.it
127.0.0.1 www.lebenstest.de
127.0.0.1 lebenstest.de
127.0.0.1 www.legal-at-spybot.info
127.0.0.1 legal-at-spybot.info
127.0.0.1 lesobank.ru
127.0.0.1 www.lets-get-it.info
127.0.0.1 lets-get-it.info
127.0.0.1 lets-get-it.net
127.0.0.1 www.lets-get-it.org
127.0.0.1 lets-get-it.org
127.0.0.1 www.lfxmsc.gov.cn
127.0.0.1 lfxmsc.gov.cn
127.0.0.1 www.li8bero.it
127.0.0.1 li8bero.it
127.0.0.1 www.li9bero.it
127.0.0.1 li9bero.it
127.0.0.1 www.lib3ero.it
127.0.0.1 lib3ero.it
127.0.0.1 www.lib3ro.it
127.0.0.1 lib3ro.it
127.0.0.1 www.lib4ero.it
127.0.0.1 lib4ero.it
127.0.0.1 www.lib4ro.it
127.0.0.1 lib4ro.it
127.0.0.1 www.libdero.it
127.0.0.1 libdero.it
127.0.0.1 www.libdro.it
127.0.0.1 libdro.it
127.0.0.1 www.libe3ro.it
127.0.0.1 libe3ro.it
127.0.0.1 www.libe4o.it
127.0.0.1 libe4o.it
127.0.0.1 www.libe4ro.it
127.0.0.1 libe4ro.it
127.0.0.1 www.libe5o.it
127.0.0.1 libe5o.it
127.0.0.1 www.libe5ro.it
127.0.0.1 libe5ro.it
127.0.0.1 www.libedro.it
127.0.0.1 libedro.it
127.0.0.1 www.libeeo.it
127.0.0.1 libeeo.it
127.0.0.1 www.libeero.it
127.0.0.1 libeero.it
127.0.0.1 www.libefro.it
127.0.0.1 libefro.it
127.0.0.1 www.libegro.it
127.0.0.1 libegro.it
127.0.0.1 www.liber0.it
127.0.0.1 liber0.it
127.0.0.1 www.liber0o.it
127.0.0.1 liber0o.it
127.0.0.1 www.liber4o.it
127.0.0.1 liber4o.it
127.0.0.1 www.liber5o.it
127.0.0.1 liber5o.it
127.0.0.1 www.liber9.it
127.0.0.1 liber9.it
127.0.0.1 www.liberdo.it
127.0.0.1 liberdo.it
127.0.0.1 www.libereo.it
127.0.0.1 libereo.it
127.0.0.1 www.liberfo.it
127.0.0.1 liberfo.it
127.0.0.1 www.libergo.it
127.0.0.1 libergo.it
127.0.0.1 www.liberko.it
127.0.0.1 liberko.it
127.0.0.1 www.liberl.it
127.0.0.1 liberl.it
127.0.0.1 www.liberlo.it
127.0.0.1 liberlo.it
127.0.0.1 www.libero0.it
127.0.0.1 libero0.it
127.0.0.1 www.libero9.it
127.0.0.1 libero9.it
127.0.0.1 www.liberoi.it
127.0.0.1 liberoi.it
127.0.0.1 www.liberok.it
127.0.0.1 liberok.it
127.0.0.1 www.liberol.it
127.0.0.1 liberol.it
127.0.0.1 www.liberop.it
127.0.0.1 liberop.it
127.0.0.1 www.liberpo.it
127.0.0.1 liberpo.it
127.0.0.1 www.liberro.it
127.0.0.1 liberro.it
127.0.0.1 www.libesro.it
127.0.0.1 libesro.it
127.0.0.1 www.libetro.it
127.0.0.1 libetro.it
127.0.0.1 www.libewro.it
127.0.0.1 libewro.it
127.0.0.1 www.libfero.it
127.0.0.1 libfero.it
127.0.0.1 www.libfro.it
127.0.0.1 libfro.it
127.0.0.1 www.libgero.it
127.0.0.1 libgero.it
127.0.0.1 www.libhero.it
127.0.0.1 libhero.it
127.0.0.1 www.libnero.it
127.0.0.1 libnero.it
127.0.0.1 www.libreo.it
127.0.0.1 libreo.it
127.0.0.1 www.librero.it
127.0.0.1 librero.it
127.0.0.1 www.libsero.it
127.0.0.1 libsero.it
127.0.0.1 www.libsro.it
127.0.0.1 libsro.it
127.0.0.1 www.libvero.it
127.0.0.1 libvero.it
127.0.0.1 www.libwero.it
127.0.0.1 libwero.it
127.0.0.1 www.libwro.it
127.0.0.1 libwro.it
127.0.0.1 www.ligbero.it
127.0.0.1 ligbero.it
127.0.0.1 www.ligero.it
127.0.0.1 ligero.it
127.0.0.1 www.lightcodec.net
127.0.0.1 lightcodec.net
127.0.0.1 www.lightspeedsearch.net
127.0.0.1 lightspeedsearch.net
127.0.0.1 www.lihbero.it
127.0.0.1 lihbero.it
127.0.0.1 www.lihero.it
127.0.0.1 lihero.it
127.0.0.1 www.liibero.it
127.0.0.1 liibero.it
127.0.0.1 www.lijbero.it
127.0.0.1 lijbero.it
127.0.0.1 www.likbero.it
127.0.0.1 likbero.it
127.0.0.1 www.lilbero.it
127.0.0.1 lilbero.it
127.0.0.1 www.limewire2007pro.info
127.0.0.1 limewire2007pro.info
127.0.0.1 www.linbero.it
127.0.0.1 linbero.it
127.0.0.1 www.linero.it
127.0.0.1 linero.it
127.0.0.1 links4all.biz
127.0.0.1 www.liobero.it
127.0.0.1 liobero.it
127.0.0.1 www.little-download.net
127.0.0.1 little-download.net
127.0.0.1 www.liubero.it
127.0.0.1 liubero.it
127.0.0.1 www.livbero.it
127.0.0.1 livbero.it
127.0.0.1 www.liveplayer.tv
127.0.0.1 liveplayer.tv
127.0.0.1 www.ljbero.it
127.0.0.1 ljbero.it
127.0.0.1 www.ljibero.it
127.0.0.1 ljibero.it
127.0.0.1 www.lkataweb.it
127.0.0.1 lkataweb.it
127.0.0.1 www.lkbero.it
127.0.0.1 lkbero.it
127.0.0.1 www.lkibero.it
127.0.0.1 lkibero.it
127.0.0.1 www.llibero.it
127.0.0.1 llibero.it
127.0.0.1 www.login.fric.cn
127.0.0.1 login.fric.cn
127.0.0.1 logs.media-motor.net
127.0.0.1 www.loibero.it
127.0.0.1 loibero.it
127.0.0.1 lookfor.cc
127.0.0.1 looking-for.cc
127.0.0.1 www.lordoftibia.pl
127.0.0.1 lordoftibia.pl
127.0.0.1 www.lpibero.it
127.0.0.1 lpibero.it
127.0.0.1 luckysearch.net
127.0.0.1 www.luibero.it
127.0.0.1 luibero.it
127.0.0.1 lunitaweb.net
127.0.0.1 www.mabou.org
127.0.0.1 mabou.org
127.0.0.1 mackinnonsbrook.org
127.0.0.1 www.magicsearch.ws
127.0.0.1 magicsearch.ws
127.0.0.1 map-quest.org
127.0.0.1 www.masn.it
127.0.0.1 masn.it
127.0.0.1 www.master69.biz
127.0.0.1 master69.biz
127.0.0.1 www.master70.biz
127.0.0.1 master70.biz
127.0.0.1 www.master71.biz
127.0.0.1 master71.biz
127.0.0.1 www.mcdial.biz
127.0.0.1 mcdial.biz
127.0.0.1 mdstunisie.org
127.0.0.1 media.rapid-pass.net
127.0.0.1 www.mediacodec.net
127.0.0.1 mediacodec.net
127.0.0.1 www.media-codec.net
127.0.0.1 media-codec.net
127.0.0.1 www.mediacount.net
127.0.0.1 mediacount.net
127.0.0.1 media-motor.net
127.0.0.1 www.mediaplayer-download.org
127.0.0.1 mediaplayer-download.org
127.0.0.1 medicare-insurance.net
127.0.0.1 www.megalocast.net
127.0.0.1 megalocast.net
127.0.0.1 www.megaseek.net
127.0.0.1 megaseek.net
127.0.0.1 www.mesn.it
127.0.0.1 mesn.it
127.0.0.1 metafora.ru
127.0.0.1 metapoisk.ru
127.0.0.1 www.methasearch.info
127.0.0.1 methasearch.info
127.0.0.1 www.mezzicodec.net
127.0.0.1 mezzicodec.net
127.0.0.1 www.miaminews365.net
127.0.0.1 miaminews365.net
127.0.0.1 www.microsoftantispyware.net
127.0.0.1 microsoftantispyware.net
127.0.0.1 www.midlets.biz
127.0.0.1 midlets.biz
127.0.0.1 militarygods.porn4porn.net
127.0.0.1 millennialpeople.org
127.0.0.1 mipham.org
127.0.0.1 www.mjsn.it
127.0.0.1 mjsn.it
127.0.0.1 www.mkataweb.it
127.0.0.1 mkataweb.it
127.0.0.1 www.mksn.it
127.0.0.1 mksn.it
127.0.0.1 mmm.elitemediagroup.net
127.0.0.1 mmm.media-motor.net
127.0.0.1 www.mnsn.it
127.0.0.1 mnsn.it
127.0.0.1 www.money-advertise.info
127.0.0.1 money-advertise.info
127.0.0.1 mortgage-debt.net
127.0.0.1 www.moviecodec.net
127.0.0.1 moviecodec.net
127.0.0.1 www.moviecodecs.net
127.0.0.1 moviecodecs.net
127.0.0.1 www.moviedownloadreview.biz
127.0.0.1 moviedownloadreview.biz
127.0.0.1 www.moviesdvds.net
127.0.0.1 moviesdvds.net
127.0.0.1 www.mp3downloadin.net
127.0.0.1 mp3downloadin.net
127.0.0.1 www.mp3mus.cn
127.0.0.1 mp3mus.cn
127.0.0.1 www.mp3review.biz
127.0.0.1 mp3review.biz
127.0.0.1 www.mp3universal.net
127.0.0.1 mp3universal.net
127.0.0.1 www.mpegcodec.net
127.0.0.1 mpegcodec.net
127.0.0.1 www.mpgcodec.net
127.0.0.1 mpgcodec.net
127.0.0.1 mrtg.jps.ru
127.0.0.1 www.msan.it
127.0.0.1 msan.it
127.0.0.1 www.msbn.it
127.0.0.1 msbn.it
127.0.0.1 www.msen.it
127.0.0.1 msen.it
127.0.0.1 www.mshn.it
127.0.0.1 mshn.it
127.0.0.1 www.msjn.it
127.0.0.1 msjn.it
127.0.0.1 www.msmn.it
127.0.0.1 msmn.it
127.0.0.1 www.msnb.it
127.0.0.1 msnb.it
127.0.0.1 msnguard.cc
127.0.0.1 www.msnh.it
127.0.0.1 msnh.it
127.0.0.1 msn-info.net
127.0.0.1 www.msnj.it
127.0.0.1 msnj.it
127.0.0.1 www.msnm.it
127.0.0.1 msnm.it
127.0.0.1 www.mssn.it
127.0.0.1 mssn.it
127.0.0.1 www.msupdate.net
127.0.0.1 msupdate.net
127.0.0.1 www.msupdater.net
127.0.0.1 msupdater.net
127.0.0.1 www.mswn.it
127.0.0.1 mswn.it
127.0.0.1 www.msxn.it
127.0.0.1 msxn.it
127.0.0.1 www.mszn.it
127.0.0.1 mszn.it
127.0.0.1 www.MUAFK.COM
127.0.0.1 MUAFK.COM
127.0.0.1 www.multitrader.info
127.0.0.1 multitrader.info
127.0.0.1 www.mwsn.it
127.0.0.1 mwsn.it
127.0.0.1 www.mxsn.it
127.0.0.1 mxsn.it
127.0.0.1 www.myexes.hk
127.0.0.1 myexes.hk
127.0.0.1 www.mytunes.lets-get-it.net
127.0.0.1 mytunes.lets-get-it.net
127.0.0.1 mywebsearch.net
127.0.0.1 www.mzsn.it
127.0.0.1 mzsn.it
127.0.0.1 n3.net
127.0.0.1 nav.mabou.org
127.0.0.1 nbasportsbook.net
127.0.0.1 www.nbbrf-hnxh.biz
127.0.0.1 nbbrf-hnxh.biz
127.0.0.1 www.ncast.cn
127.0.0.1 ncast.cn
127.0.0.1 net.mabou.org
127.0.0.1 www.net-integration.net
127.0.0.1 net-integration.net
127.0.0.1 www.net-integration.us
127.0.0.1 net-integration.us
127.0.0.1 netshastra.net
127.0.0.1 nettime.ru
127.0.0.1 nettracker.jps.ru
127.0.0.1 netyellowpages.info
127.0.0.1 nevest.net
127.0.0.1 www.new2sh.net
127.0.0.1 new2sh.net
127.0.0.1 www.new3sh.net
127.0.0.1 new3sh.net
127.0.0.1 newcracks.net
127.0.0.1 newiframe.biz
127.0.0.1 new-search.net
127.0.0.1 www.newtoolbar.biz
127.0.0.1 newtoolbar.biz
127.0.0.1 www.newvidscodec.net
127.0.0.1 newvidscodec.net
127.0.0.1 nf.outerinfo.net
127.0.0.1 nhlsportsbook.net
127.0.0.1 www.nibo.it
127.0.0.1 nibo.it
127.0.0.1 www.nicecodec.net
127.0.0.1 nicecodec.net
127.0.0.1 www.nige.it
127.0.0.1 nige.it
127.0.0.1 www.nipd.it
127.0.0.1 nipd.it
127.0.0.1 www.nipg.it
127.0.0.1 nipg.it
127.0.0.1 www.nmsn.it
127.0.0.1 nmsn.it
127.0.0.1 nocalories.net
127.0.0.1 www.noogle.it
127.0.0.1 noogle.it
127.0.0.1 notify.ifeelyou.info
127.0.0.1 www.nownames.org
127.0.0.1 nownames.org
127.0.0.1 www.nowsearchonline.org
127.0.0.1 nowsearchonline.org
127.0.0.1 nuclearwitness.org
127.0.0.1 www.nunah.info
127.0.0.1 nunah.info
127.0.0.1 nvphall.org
127.0.0.1 www.oaginebianche.it
127.0.0.1 oaginebianche.it
127.0.0.1 www.oddsjackpot.info
127.0.0.1 oddsjackpot.info
127.0.0.1 www.ogogle.it
127.0.0.1 ogogle.it
127.0.0.1 www.oibero.it
127.0.0.1 oibero.it
127.0.0.1 www.okataweb.it
127.0.0.1 okataweb.it
127.0.0.1 www.olibero.it
127.0.0.1 olibero.it
127.0.0.1 omegabrains.net
127.0.0.1 onemoresearch.net
127.0.0.1 online-casino-1.net
127.0.0.1 online-casino-bonus.info
127.0.0.1 onlineclick.net
127.0.0.1 www.online-fernsehen.tv
127.0.0.1 online-fernsehen.tv
127.0.0.1 www.onlineplayer.tv
127.0.0.1 onlineplayer.tv
127.0.0.1 onlinetradings.net
127.0.0.1 online-winning.net
127.0.0.1 onlysex.ws
127.0.0.1 www.onporn.info
127.0.0.1 onporn.info
127.0.0.1 www.oogle.it
127.0.0.1 oogle.it
127.0.0.1 www.opaginebianche.it
127.0.0.1 opaginebianche.it
127.0.0.1 oregoncharters.org
127.0.0.1 www.orriere.it
127.0.0.1 orriere.it
127.0.0.1 www.ossoalice.it
127.0.0.1 ossoalice.it
127.0.0.1 www.other-baccarat.info
127.0.0.1 other-baccarat.info
127.0.0.1 www.othergold.info
127.0.0.1 othergold.info
127.0.0.1 www.outerinfo.net
127.0.0.1 outerinfo.net
127.0.0.1 www.oxfordclockrepairs.co.uk
127.0.0.1 oxfordclockrepairs.co.uk
127.0.0.1 www.ozonung.biz
127.0.0.1 ozonung.biz
127.0.0.1 www.p2p-heute.de
127.0.0.1 p2p-heute.de
127.0.0.1 www.p2psoft.biz
127.0.0.1 p2psoft.biz
127.0.0.1 www.paaginebianche.it
127.0.0.1 paaginebianche.it
127.0.0.1 www.pafginebianche.it
127.0.0.1 pafginebianche.it
127.0.0.1 www.pafinebianche.it
127.0.0.1 pafinebianche.it
127.0.0.1 www.pafinegialle.it
127.0.0.1 pafinegialle.it
127.0.0.1 www.pagfinebianche.it
127.0.0.1 pagfinebianche.it
127.0.0.1 www.paghinebianche.it
127.0.0.1 paghinebianche.it
127.0.0.1 www.pagibegialle.it
127.0.0.1 pagibegialle.it
127.0.0.1 www.pagiegialle.it
127.0.0.1 pagiegialle.it
127.0.0.1 www.pagiinebianche.it
127.0.0.1 pagiinebianche.it
127.0.0.1 www.pagimebianche.it
127.0.0.1 pagimebianche.it
127.0.0.1 www.pagimegialle.it
127.0.0.1 pagimegialle.it
127.0.0.1 www.pagimnebianche.it
127.0.0.1 pagimnebianche.it
127.0.0.1 www.paginbianche.it
127.0.0.1 paginbianche.it
127.0.0.1 www.paginebbianche.it
127.0.0.1 paginebbianche.it
127.0.0.1 www.paginebiaanche.it
127.0.0.1 paginebiaanche.it
127.0.0.1 www.paginebiamche.it
127.0.0.1 paginebiamche.it
127.0.0.1 www.paginebiamnche.it
127.0.0.1 paginebiamnche.it
127.0.0.1 www.paginebiancche.it
127.0.0.1 paginebiancche.it
127.0.0.1 www.paginebiancge.it
127.0.0.1 paginebiancge.it
127.0.0.1 www.paginebiancghe.it
127.0.0.1 paginebiancghe.it
127.0.0.1 www.paginebianchee.it
127.0.0.1 paginebianchee.it
127.0.0.1 www.paginebiancher.it
127.0.0.1 paginebiancher.it
127.0.0.1 www.paginebianchew.it
127.0.0.1 paginebianchew.it
127.0.0.1 www.paginebianchge.it
127.0.0.1 paginebianchge.it
127.0.0.1 www.paginebianchhe.it
127.0.0.1 paginebianchhe.it
127.0.0.1 www.paginebianchr.it
127.0.0.1 paginebianchr.it
127.0.0.1 www.paginebianchre.it
127.0.0.1 paginebianchre.it
127.0.0.1 www.paginebianchwe.it
127.0.0.1 paginebianchwe.it
127.0.0.1 www.paginebiancjhe.it
127.0.0.1 paginebiancjhe.it
127.0.0.1 www.paginebiancvhe.it
127.0.0.1 paginebiancvhe.it
127.0.0.1 www.paginebiancxhe.it
127.0.0.1 paginebiancxhe.it
127.0.0.1 www.paginebianmche.it
127.0.0.1 paginebianmche.it
127.0.0.1 www.paginebiannche.it
127.0.0.1 paginebiannche.it
127.0.0.1 www.paginebianvche.it
127.0.0.1 paginebianvche.it
127.0.0.1 www.paginebianvhe.it
127.0.0.1 paginebianvhe.it
127.0.0.1 www.paginebianxche.it
127.0.0.1 paginebianxche.it
127.0.0.1 paginebiasnche.it
127.0.0.1 www.paginebiianche.it
127.0.0.1 paginebiianche.it
127.0.0.1 www.paginebioanche.it
127.0.0.1 paginebioanche.it
127.0.0.1 www.paginebisanche.it
127.0.0.1 paginebisanche.it
127.0.0.1 www.paginebiuanche.it
127.0.0.1 paginebiuanche.it
127.0.0.1 www.paginebnianche.it
127.0.0.1 paginebnianche.it
127.0.0.1 www.pagineboianche.it
127.0.0.1 pagineboianche.it
127.0.0.1 www.paginebuanche.it
127.0.0.1 paginebuanche.it
127.0.0.1 www.paginebuianche.it
127.0.0.1 paginebuianche.it
127.0.0.1 www.pagineebianche.it
127.0.0.1 pagineebianche.it
127.0.0.1 www.paginefialle.it
127.0.0.1 paginefialle.it
127.0.0.1 www.paginegalle.it
127.0.0.1 paginegalle.it
127.0.0.1 www.paginegiaklle.it
127.0.0.1 paginegiaklle.it
127.0.0.1 www.paginegialkle.it
127.0.0.1 paginegialkle.it
127.0.0.1 www.paginegiallee.it
127.0.0.1 paginegiallee.it
127.0.0.1 www.paginegialler.it
127.0.0.1 paginegialler.it
127.0.0.1 www.paginegiallew.it
127.0.0.1 paginegiallew.it
127.0.0.1 www.paginegiallw.it
127.0.0.1 paginegiallw.it
127.0.0.1 www.paginegille.it
127.0.0.1 paginegille.it
127.0.0.1 www.paginegoalle.it
127.0.0.1 paginegoalle.it
127.0.0.1 www.paginegualle.it
127.0.0.1 paginegualle.it
127.0.0.1 www.pagineialle.it
127.0.0.1 pagineialle.it
127.0.0.1 www.pagineianche.it
127.0.0.1 pagineianche.it
127.0.0.1 www.paginenianche.it
127.0.0.1 paginenianche.it
127.0.0.1 www.paginerbianche.it
127.0.0.1 paginerbianche.it
127.0.0.1 www.paginevbianche.it
127.0.0.1 paginevbianche.it
127.0.0.1 www.paginevianche.it
127.0.0.1 paginevianche.it
127.0.0.1 www.paginewbianche.it
127.0.0.1 paginewbianche.it
127.0.0.1 www.paginnebianche.it
127.0.0.1 paginnebianche.it
127.0.0.1 www.paginrbianche.it
127.0.0.1 paginrbianche.it

cesarper

2008-05-24, 04:56

127.0.0.1 www.paginrebianche.it
127.0.0.1 paginrebianche.it
127.0.0.1 www.paginrgialle.it
127.0.0.1 paginrgialle.it
127.0.0.1 www.paginwebianche.it
127.0.0.1 paginwebianche.it
127.0.0.1 www.pagionebianche.it
127.0.0.1 pagionebianche.it
127.0.0.1 www.pagiunebianche.it
127.0.0.1 pagiunebianche.it
127.0.0.1 www.pagnebianche.it
127.0.0.1 pagnebianche.it
127.0.0.1 www.pagnegialle.it
127.0.0.1 pagnegialle.it
127.0.0.1 www.pagoinebianche.it
127.0.0.1 pagoinebianche.it
127.0.0.1 www.pagonebianche.it
127.0.0.1 pagonebianche.it
127.0.0.1 www.pagonegialle.it
127.0.0.1 pagonegialle.it
127.0.0.1 www.paguinebianche.it
127.0.0.1 paguinebianche.it
127.0.0.1 www.pagunegialle.it
127.0.0.1 pagunegialle.it
127.0.0.1 www.pahginebianche.it
127.0.0.1 pahginebianche.it
127.0.0.1 www.painegialle.it
127.0.0.1 painegialle.it
127.0.0.1 www.panet.org
127.0.0.1 panet.org
127.0.0.1 www.pardize-search.net
127.0.0.1 pardize-search.net
127.0.0.1 www.pasginebianche.it
127.0.0.1 pasginebianche.it
127.0.0.1 www.passtosites.net
127.0.0.1 passtosites.net
127.0.0.1 payfortraffic.net
127.0.0.1 www.pcadprotector.cc
127.0.0.1 pcadprotector.cc
127.0.0.1 www.pcgewinnen.de
127.0.0.1 pcgewinnen.de
127.0.0.1 pedo.ws
127.0.0.1 www.penile-enlargement.biz
127.0.0.1 penile-enlargement.biz
127.0.0.1 people.1gb.ru
127.0.0.1 www.peoplelookup.info
127.0.0.1 peoplelookup.info
127.0.0.1 www.peopleregistry.info
127.0.0.1 peopleregistry.info
127.0.0.1 www.peoplesearchengine.info
127.0.0.1 peoplesearchengine.info
127.0.0.1 www.perlink.biz
127.0.0.1 perlink.biz
127.0.0.1 www.pginegialle.it
127.0.0.1 pginegialle.it
127.0.0.1 www.pibero.it
127.0.0.1 pibero.it
127.0.0.1 www.piramisu.biz
127.0.0.1 piramisu.biz
127.0.0.1 pizdato.biz
127.0.0.1 www.platinumrevi.ws
127.0.0.1 platinumrevi.ws
127.0.0.1 www.playcodec.net
127.0.0.1 playcodec.net
127.0.0.1 www.playercodec.net
127.0.0.1 playercodec.net
127.0.0.1 www.player-codec.net
127.0.0.1 player-codec.net
127.0.0.1 www.plibero.it
127.0.0.1 plibero.it
127.0.0.1 www.poaginebianche.it
127.0.0.1 poaginebianche.it
127.0.0.1 www.pochta.ru
127.0.0.1 pochta.ru
127.0.0.1 poiska.net
127.0.0.1 poker-games-free.net
127.0.0.1 pooi.net
127.0.0.1 www.popcodec.net
127.0.0.1 popcodec.net
127.0.0.1 www.popcorn.net
127.0.0.1 popcorn.net
127.0.0.1 popunder.adsrevenue.net
127.0.0.1 porn4porn.net
127.0.0.1 pornfree.info
127.0.0.1 www.pornohome.net
127.0.0.1 pornohome.net
127.0.0.1 www.porn-party.net
127.0.0.1 porn-party.net
127.0.0.1 pornpic.org
127.0.0.1 www.powerdvd2007.info
127.0.0.1 powerdvd2007.info
127.0.0.1 www.ppaginebianche.it
127.0.0.1 ppaginebianche.it
127.0.0.1 www.prisonbreakseason.tv
127.0.0.1 prisonbreakseason.tv
127.0.0.1 privacy-support.biz
127.0.0.1 private-dialer.biz
127.0.0.1 private-iframe.biz
127.0.0.1 privateporn.net
127.0.0.1 www.procodec.net
127.0.0.1 procodec.net
127.0.0.1 www.protectmypc.net
127.0.0.1 protectmypc.net
127.0.0.1 protect-yourself.biz
127.0.0.1 prsainlandempire.org
127.0.0.1 www.psaginebianche.it
127.0.0.1 psaginebianche.it
127.0.0.1 www.psginebianche.it
127.0.0.1 psginebianche.it
127.0.0.1 www.psginegialle.it
127.0.0.1 psginegialle.it
127.0.0.1 psn.cn
127.0.0.1 www.q36.cn
127.0.0.1 q36.cn
127.0.0.1 www.qalitalia.it
127.0.0.1 qalitalia.it
127.0.0.1 www.qazcodec.net
127.0.0.1 qazcodec.net
127.0.0.1 quick.searchfromyourbrowser.net
127.0.0.1 quick-search.ws
127.0.0.1 r16254.coolservecorp.net
127.0.0.1 rack.cc
127.0.0.1 radfrall.org
127.0.0.1 ranafrog.ne
127.0.0.1 www.rapid-pass.net
127.0.0.1 rapid-pass.net
127.0.0.1 www.rawtocash.net
127.0.0.1 rawtocash.net
127.0.0.1 www.razespyware.net
127.0.0.1 razespyware.net
127.0.0.1 www.rbay.it
127.0.0.1 rbay.it
127.0.0.1 www.rdepubblica.it
127.0.0.1 rdepubblica.it
127.0.0.1 www.readagreement.net
127.0.0.1 readagreement.net
127.0.0.1 realarea.biz
127.0.0.1 www.rebay.it
127.0.0.1 rebay.it
127.0.0.1 www.redcodec.net
127.0.0.1 redcodec.net
127.0.0.1 www.redir.ws
127.0.0.1 redir.ws
127.0.0.1 redirect.msupdate.net
127.0.0.1 www.redpubblica.it
127.0.0.1 redpubblica.it
127.0.0.1 www.reepubblica.it
127.0.0.1 reepubblica.it
127.0.0.1 www.refpubblica.it
127.0.0.1 refpubblica.it
127.0.0.1 www.registryrepair.ws
127.0.0.1 registryrepair.ws
127.0.0.1 www.relpubblica.it
127.0.0.1 relpubblica.it
127.0.0.1 removeearthkeepers.org
127.0.0.1 remsys.org
127.0.0.1 www.reopubblica.it
127.0.0.1 reopubblica.it
127.0.0.1 www.reossoalice.it
127.0.0.1 reossoalice.it
127.0.0.1 www.reoubblica.it
127.0.0.1 reoubblica.it
127.0.0.1 www.repbblica.it
127.0.0.1 repbblica.it
127.0.0.1 www.rephubblica.it
127.0.0.1 rephubblica.it
127.0.0.1 www.repibblica.it
127.0.0.1 repibblica.it
127.0.0.1 www.repiubblica.it
127.0.0.1 repiubblica.it
127.0.0.1 www.replubblica.it
127.0.0.1 replubblica.it
127.0.0.1 www.repoubblica.it
127.0.0.1 repoubblica.it
127.0.0.1 www.repubbglica.it
127.0.0.1 repubbglica.it
127.0.0.1 www.repubbhlica.it
127.0.0.1 repubbhlica.it
127.0.0.1 www.repubbkica.it
127.0.0.1 repubbkica.it
127.0.0.1 www.repubbklica.it
127.0.0.1 repubbklica.it
127.0.0.1 www.repubblicaa.it
127.0.0.1 repubblicaa.it
127.0.0.1 www.repubblicaq.it
127.0.0.1 repubblicaq.it
127.0.0.1 www.repubblicas.it
127.0.0.1 repubblicas.it
127.0.0.1 www.repubblicca.it
127.0.0.1 repubblicca.it
127.0.0.1 www.repubblicda.it
127.0.0.1 repubblicda.it
127.0.0.1 www.repubblicfa.it
127.0.0.1 repubblicfa.it
127.0.0.1 www.repubblics.it
127.0.0.1 repubblics.it
127.0.0.1 www.repubblicsa.it
127.0.0.1 repubblicsa.it
127.0.0.1 www.repubblicva.it
127.0.0.1 repubblicva.it
127.0.0.1 www.repubblicza.it
127.0.0.1 repubblicza.it
127.0.0.1 www.repubblidca.it
127.0.0.1 repubblidca.it
127.0.0.1 www.repubblifca.it
127.0.0.1 repubblifca.it
127.0.0.1 www.repubbliica.it
127.0.0.1 repubbliica.it
127.0.0.1 www.repubblilca.it
127.0.0.1 repubblilca.it
127.0.0.1 www.repubblioca.it
127.0.0.1 repubblioca.it
127.0.0.1 www.repubbliuca.it
127.0.0.1 repubbliuca.it
127.0.0.1 www.repubbliva.it
127.0.0.1 repubbliva.it
127.0.0.1 www.repubblivca.it
127.0.0.1 repubblivca.it
127.0.0.1 www.repubblixa.it
127.0.0.1 repubblixa.it
127.0.0.1 www.repubblixca.it
127.0.0.1 repubblixca.it
127.0.0.1 www.repubbllica.it
127.0.0.1 repubbllica.it
127.0.0.1 www.repubbloca.it
127.0.0.1 repubbloca.it
127.0.0.1 www.repubbloica.it
127.0.0.1 repubbloica.it
127.0.0.1 www.repubblpica.it
127.0.0.1 repubblpica.it
127.0.0.1 www.repubbluica.it
127.0.0.1 repubbluica.it
127.0.0.1 www.repubbnlica.it
127.0.0.1 repubbnlica.it
127.0.0.1 www.repubbolica.it
127.0.0.1 repubbolica.it
127.0.0.1 www.repubbplica.it
127.0.0.1 repubbplica.it
127.0.0.1 www.repubbvlica.it
127.0.0.1 repubbvlica.it
127.0.0.1 www.repubnblica.it
127.0.0.1 repubnblica.it
127.0.0.1 www.repubnlica.it
127.0.0.1 repubnlica.it
127.0.0.1 www.repubvblica.it
127.0.0.1 repubvblica.it
127.0.0.1 www.repubvlica.it
127.0.0.1 repubvlica.it
127.0.0.1 www.repugbblica.it
127.0.0.1 repugbblica.it
127.0.0.1 www.repuhbblica.it
127.0.0.1 repuhbblica.it
127.0.0.1 www.repuibblica.it
127.0.0.1 repuibblica.it
127.0.0.1 www.repunbblica.it
127.0.0.1 repunbblica.it
127.0.0.1 www.repunblica.it
127.0.0.1 repunblica.it
127.0.0.1 www.repuubblica.it
127.0.0.1 repuubblica.it
127.0.0.1 www.repuvbblica.it
127.0.0.1 repuvbblica.it
127.0.0.1 www.repuvblica.it
127.0.0.1 repuvblica.it
127.0.0.1 www.repybblica.it
127.0.0.1 repybblica.it
127.0.0.1 www.repyubblica.it
127.0.0.1 repyubblica.it
127.0.0.1 www.rerpubblica.it
127.0.0.1 rerpubblica.it
127.0.0.1 www.reubblica.it
127.0.0.1 reubblica.it
127.0.0.1 www.reviewsit.net
127.0.0.1 reviewsit.net
127.0.0.1 revolto3.da.ru
127.0.0.1 www.rewpubblica.it
127.0.0.1 rewpubblica.it
127.0.0.1 www.rfepubblica.it
127.0.0.1 rfepubblica.it
127.0.0.1 www.rgepubblica.it
127.0.0.1 rgepubblica.it
127.0.0.1 rightfinder.net
127.0.0.1 www.riscali.it
127.0.0.1 riscali.it
127.0.0.1 www.roassoalice.it
127.0.0.1 roassoalice.it
127.0.0.1 www.roissoalice.it
127.0.0.1 roissoalice.it
127.0.0.1 www.roogle.it
127.0.0.1 roogle.it
127.0.0.1 www.roossoalice.it
127.0.0.1 roossoalice.it
127.0.0.1 www.ropssoalice.it
127.0.0.1 ropssoalice.it
127.0.0.1 www.rosaoalice.it
127.0.0.1 rosaoalice.it
127.0.0.1 www.rosasoalice.it
127.0.0.1 rosasoalice.it
127.0.0.1 www.rossaoalice.it
127.0.0.1 rossaoalice.it
127.0.0.1 www.rossdoalice.it
127.0.0.1 rossdoalice.it
127.0.0.1 www.rossoaalice.it
127.0.0.1 rossoaalice.it
127.0.0.1 www.rossoaice.it
127.0.0.1 rossoaice.it
127.0.0.1 www.rossoalce.it
127.0.0.1 rossoalce.it
127.0.0.1 www.rossoalic.it
127.0.0.1 rossoalic.it
127.0.0.1 www.rossoalicce.it
127.0.0.1 rossoalicce.it
127.0.0.1 www.rossoalicee.it
127.0.0.1 rossoalicee.it
127.0.0.1 www.rossoalicer.it
127.0.0.1 rossoalicer.it
127.0.0.1 www.rossoalicew.it
127.0.0.1 rossoalicew.it
127.0.0.1 www.rossoalicr.it
127.0.0.1 rossoalicr.it
127.0.0.1 www.rossoalicre.it
127.0.0.1 rossoalicre.it
127.0.0.1 www.rossoalicve.it
127.0.0.1 rossoalicve.it
127.0.0.1 www.rossoalicw.it
127.0.0.1 rossoalicw.it
127.0.0.1 www.rossoalicwe.it
127.0.0.1 rossoalicwe.it
127.0.0.1 www.rossoalicxe.it
127.0.0.1 rossoalicxe.it
127.0.0.1 www.rossoalie.it
127.0.0.1 rossoalie.it
127.0.0.1 www.rossoaliice.it
127.0.0.1 rossoaliice.it
127.0.0.1 www.rossoalioce.it
127.0.0.1 rossoalioce.it
127.0.0.1 www.rossoalivce.it
127.0.0.1 rossoalivce.it
127.0.0.1 www.rossoalive.it
127.0.0.1 rossoalive.it
127.0.0.1 www.rossoalixce.it
127.0.0.1 rossoalixce.it
127.0.0.1 www.rossoalixe.it
127.0.0.1 rossoalixe.it
127.0.0.1 www.rossoalkice.it
127.0.0.1 rossoalkice.it
127.0.0.1 www.rossoallice.it
127.0.0.1 rossoallice.it
127.0.0.1 www.rossoaloce.it
127.0.0.1 rossoaloce.it
127.0.0.1 www.rossoaloice.it
127.0.0.1 rossoaloice.it
127.0.0.1 www.rossoaluce.it
127.0.0.1 rossoaluce.it
127.0.0.1 www.rossoaslice.it
127.0.0.1 rossoaslice.it
127.0.0.1 www.rossolice.it
127.0.0.1 rossolice.it
127.0.0.1 www.rossooalice.it
127.0.0.1 rossooalice.it
127.0.0.1 www.rossopalice.it
127.0.0.1 rossopalice.it
127.0.0.1 www.rossosalice.it
127.0.0.1 rossosalice.it
127.0.0.1 www.rosspalice.it
127.0.0.1 rosspalice.it
127.0.0.1 www.rosspoalice.it
127.0.0.1 rosspoalice.it
127.0.0.1 www.rosssoalice.it
127.0.0.1 rosssoalice.it
127.0.0.1 royalsearch.net
127.0.0.1 www.rrenitalia.it
127.0.0.1 rrenitalia.it
127.0.0.1 www.rrepubblica.it
127.0.0.1 rrepubblica.it
127.0.0.1 www.rrossoalice.it
127.0.0.1 rrossoalice.it
127.0.0.1 www.rrpubblica.it
127.0.0.1 rrpubblica.it
127.0.0.1 www.rsepubblica.it
127.0.0.1 rsepubblica.it
127.0.0.1 www.rssoalice.it
127.0.0.1 rssoalice.it
127.0.0.1 www.rsztriv-avxiz.biz
127.0.0.1 rsztriv-avxiz.biz
127.0.0.1 www.rtepubblica.it
127.0.0.1 rtepubblica.it
127.0.0.1 www.rtiscali.it
127.0.0.1 rtiscali.it
127.0.0.1 www.rtossoalice.it
127.0.0.1 rtossoalice.it
127.0.0.1 www.rtrenitalia.it
127.0.0.1 rtrenitalia.it
127.0.0.1 www.rtuttogratis.it
127.0.0.1 rtuttogratis.it
127.0.0.1 rub.to
127.0.0.1 www.rwepubblica.it
127.0.0.1 rwepubblica.it
127.0.0.1 s1.bestmanage.org
127.0.0.1 s1.truth-is-out-there.org
127.0.0.1 s2.bestmanage.org
127.0.0.1 s2.truth-is-out-there.org
127.0.0.1 s3.bestmanage.org
127.0.0.1 s3.truth-is-out-there.org
127.0.0.1 s4.bestmanage.org
127.0.0.1 s4.truth-is-out-there.org
127.0.0.1 s5.bestmanage.org
127.0.0.1 s5.truth-is-out-there.org
127.0.0.1 s6.bestmanage.org
127.0.0.1 s6.truth-is-out-there.org
127.0.0.1 s7.bestmanage.org
127.0.0.1 s7.truth-is-out-there.org
127.0.0.1 s8.bestmanage.org
127.0.0.1 s8.truth-is-out-there.org
127.0.0.1 s9.bestmanage.org
127.0.0.1 s9.truth-is-out-there.org
127.0.0.1 www.safe-sales.biz
127.0.0.1 safe-sales.biz
127.0.0.1 www.salitalia.it
127.0.0.1 salitalia.it
127.0.0.1 www.saupereva.it
127.0.0.1 saupereva.it
127.0.0.1 www.screensaver.it
127.0.0.1 screensaver.it
127.0.0.1 www.sd.ncast.cn
127.0.0.1 sd.ncast.cn
127.0.0.1 sdbot.n3.net
127.0.0.1 www.sdupereva.it
127.0.0.1 sdupereva.it
127.0.0.1 search.psn.cn
127.0.0.1 search.rub.to
127.0.0.1 search-1.net
127.0.0.1 www.search2find.biz
127.0.0.1 search2find.biz
127.0.0.1 search-about.net
127.0.0.1 www.searchbee.net
127.0.0.1 searchbee.net
127.0.0.1 searchbutler.org
127.0.0.1 searchby.net
127.0.0.1 searchclick.cc
127.0.0.1 www.searchclickads.net
127.0.0.1 searchclickads.net
127.0.0.1 www.searchdom.net
127.0.0.1 searchdom.net
127.0.0.1 searchdot.net
127.0.0.1 searchdrive.info
127.0.0.1 www.searche.info
127.0.0.1 searche.info
127.0.0.1 www.search-empire.info
127.0.0.1 search-empire.info
127.0.0.1 search-explorer.net
127.0.0.1 www.searchfromyourbrowser.net
127.0.0.1 searchfromyourbrowser.net
127.0.0.1 searchgateway.net
127.0.0.1 www.searchinmates.org
127.0.0.1 searchinmates.org
127.0.0.1 searchmadesafe.net
127.0.0.1 searchmeta.md
127.0.0.1 www.searchmeta.net
127.0.0.1 searchmeta.net
127.0.0.1 searchmeta.ru
127.0.0.1 searchmeta.webhost.ru
127.0.0.1 www.searchmeup.biz
127.0.0.1 searchmeup.biz
127.0.0.1 searchnow.ws
127.0.0.1 www.searchresult.net
127.0.0.1 searchresult.net
127.0.0.1 www.searchtab.net
127.0.0.1 searchtab.net
127.0.0.1 searchtabs.net
127.0.0.1 www.SEARCHTOFIND.NET
127.0.0.1 SEARCHTOFIND.NET
127.0.0.1 search-what.net
127.0.0.1 www.sebay.it
127.0.0.1 sebay.it
127.0.0.1 secdep.info
127.0.0.1 securenp.org
127.0.0.1 www.secureyournet.biz
127.0.0.1 secureyournet.biz
127.0.0.1 www.securitybulletin.net
127.0.0.1 securitybulletin.net
127.0.0.1 www.securityindex.net
127.0.0.1 securityindex.net
127.0.0.1 www.securityprecaution.net
127.0.0.1 securityprecaution.net
127.0.0.1 www.securityuptodate.net
127.0.0.1 securityuptodate.net
127.0.0.1 security-warning.biz
127.0.0.1 www.securitywarnings.net
127.0.0.1 securitywarnings.net
127.0.0.1 www.seekporn.org
127.0.0.1 seekporn.org
127.0.0.1 seekwell.net
127.0.0.1 selfbookmark.info
127.0.0.1 selfbookmark.net
127.0.0.1 selltraffic.biz
127.0.0.1 www.seobiz.us
127.0.0.1 seobiz.us
127.0.0.1 www.serverc.org
127.0.0.1 serverc.org
127.0.0.1 settings.gfxgraphics.net
127.0.0.1 settings.iconnectyou.biz
127.0.0.1 setup.bestmanage.org
127.0.0.1 setup.truth-is-out-there.org
127.0.0.1 sex.free4porno.net
127.0.0.1 www.sex2person.info
127.0.0.1 sex2person.info
127.0.0.1 www.sexarena.org
127.0.0.1 sexarena.org
127.0.0.1 sexfiles.nu
127.0.0.1 sexpatriot.net
127.0.0.1 sexunique.net
127.0.0.1 sexy18.cc
127.0.0.1 sexycat.adult-host.org
127.0.0.1 sfonditalia.biz
127.0.0.1 sgirls.net
127.0.0.1 sgrunt.biz
127.0.0.1 www.sgrunt.biz
127.0.0.1 www.sh.ncast.cn
127.0.0.1 sh.ncast.cn
127.0.0.1 shopcards.net
127.0.0.1 www.sigmacode.biz
127.0.0.1 sigmacode.biz
127.0.0.1 www.sigmadown.biz
127.0.0.1 sigmadown.biz
127.0.0.1 www.sipereva.it
127.0.0.1 sipereva.it
127.0.0.1 sirh0t.blackhats.tc
127.0.0.1 site1.ru
127.0.0.1 www.siteentrance.net
127.0.0.1 siteentrance.net
127.0.0.1 www.site-entrance.net
127.0.0.1 site-entrance.net
127.0.0.1 www.sites-entrance.net
127.0.0.1 sites-entrance.net
127.0.0.1 www.sitesticket.net
127.0.0.1 sitesticket.net
127.0.0.1 www.sitestickets.net
127.0.0.1 sitestickets.net
127.0.0.1 www.siteticket.net
127.0.0.1 siteticket.net
127.0.0.1 www.site-ticket.net
127.0.0.1 site-ticket.net
127.0.0.1 www.siupereva.it
127.0.0.1 siupereva.it
127.0.0.1 skakalka.ru
127.0.0.1 slutmania.biz
127.0.0.1 www.smartprotect.info
127.0.0.1 smartprotect.info
127.0.0.1 www.smart-security.biz
127.0.0.1 smart-security.biz
127.0.0.1 smart-security.biz
127.0.0.1 www.smetsys.net
127.0.0.1 smetsys.net
127.0.0.1 www.smtp.ru
127.0.0.1 smtp.ru
127.0.0.1 smutarchive.net
127.0.0.1 www.snipernet.biz
127.0.0.1 snipernet.biz
127.0.0.1 sp2fucked.biz
127.0.0.1 www.spereva.it
127.0.0.1 spereva.it
127.0.0.1 www.spyaxe.biz
127.0.0.1 spyaxe.biz
127.0.0.1 www.spyaxe.net
127.0.0.1 spyaxe.net
127.0.0.1 www.spybot.reviewsit.net
127.0.0.1 spybot.reviewsit.net
127.0.0.1 spybotremover.net
127.0.0.1 www.spybot-sd.net
127.0.0.1 spybot-sd.net
127.0.0.1 www.spyonthis.net
127.0.0.1 spyonthis.net
127.0.0.1 spyorgy.net
127.0.0.1 www.spyot.info
127.0.0.1 spyot.info
127.0.0.1 www.SpyShield.org
127.0.0.1 SpyShield.org
127.0.0.1 www.spywarequake.info
127.0.0.1 spywarequake.info
127.0.0.1 www.spywareremoval.ws
127.0.0.1 spywareremoval.ws
127.0.0.1 www.spywarewizard.net
127.0.0.1 spywarewizard.net
127.0.0.1 srng.net
127.0.0.1 ss.panet.org
127.0.0.1 www.startguard.net
127.0.0.1 startguard.net
127.0.0.1 static.callinghome.biz
127.0.0.1 www.stats.cashdeluxe.net
127.0.0.1 stats.cashdeluxe.net
127.0.0.1 www.statwebreports.us
127.0.0.1 statwebreports.us
127.0.0.1 www.stejax.pl
127.0.0.1 stejax.pl
127.0.0.1 stop-tracking.biz
127.0.0.1 www.stormcodec.net
127.0.0.1 stormcodec.net
127.0.0.1 www.streamxs.ws
127.0.0.1 streamxs.ws
127.0.0.1 studioaperto.net
127.0.0.1 www.stvg.info
127.0.0.1 stvg.info
127.0.0.1 www.suereva.it
127.0.0.1 suereva.it
127.0.0.1 www.suipereva.it
127.0.0.1 suipereva.it
127.0.0.1 www.suoereva.it
127.0.0.1 suoereva.it
127.0.0.1 www.suopereva.it
127.0.0.1 suopereva.it
127.0.0.1 www.supeereva.it
127.0.0.1 supeereva.it
127.0.0.1 www.supeeva.it
127.0.0.1 supeeva.it
127.0.0.1 www.superea.it
127.0.0.1 superea.it
127.0.0.1 www.supereba.it
127.0.0.1 supereba.it
127.0.0.1 www.superebva.it
127.0.0.1 superebva.it
127.0.0.1 www.superecva.it
127.0.0.1 superecva.it
127.0.0.1 www.supereeva.it
127.0.0.1 supereeva.it
127.0.0.1 www.supererva.it
127.0.0.1 supererva.it
127.0.0.1 www.superev.it
127.0.0.1 superev.it
127.0.0.1 www.superevaq.it
127.0.0.1 superevaq.it
127.0.0.1 www.superevaw.it
127.0.0.1 superevaw.it
127.0.0.1 www.superevaz.it
127.0.0.1 superevaz.it
127.0.0.1 www.superevba.it
127.0.0.1 superevba.it
127.0.0.1 www.superevca.it
127.0.0.1 superevca.it
127.0.0.1 www.superevsa.it
127.0.0.1 superevsa.it
127.0.0.1 www.superevva.it
127.0.0.1 superevva.it
127.0.0.1 www.superevw.it
127.0.0.1 superevw.it
127.0.0.1 www.superevz.it
127.0.0.1 superevz.it
127.0.0.1 www.superewva.it
127.0.0.1 superewva.it
127.0.0.1 www.superreva.it
127.0.0.1 superreva.it
127.0.0.1 www.super-servers.net
127.0.0.1 super-servers.net
127.0.0.1 www.superteva.it
127.0.0.1 superteva.it
127.0.0.1 www.superweva.it
127.0.0.1 superweva.it
127.0.0.1 superwp.by.ru
127.0.0.1 www.superwva.it
127.0.0.1 superwva.it
127.0.0.1 www.supeteva.it
127.0.0.1 supeteva.it
127.0.0.1 www.supetreva.it
127.0.0.1 supetreva.it
127.0.0.1 www.supewreva.it
127.0.0.1 supewreva.it
127.0.0.1 www.supoereva.it
127.0.0.1 supoereva.it
127.0.0.1 www.suppereva.it
127.0.0.1 suppereva.it
127.0.0.1 www.support.365soft.info
127.0.0.1 support.365soft.info
127.0.0.1 www.suprereva.it
127.0.0.1 suprereva.it
127.0.0.1 www.supreva.it
127.0.0.1 supreva.it
127.0.0.1 www.suprnova.cn
127.0.0.1 suprnova.cn
127.0.0.1 www.supwereva.it
127.0.0.1 supwereva.it
127.0.0.1 www.supwreva.it
127.0.0.1 supwreva.it
127.0.0.1 www.suupereva.it
127.0.0.1 suupereva.it
127.0.0.1 www.suypereva.it
127.0.0.1 suypereva.it
127.0.0.1 www.sverner.info
127.0.0.1 sverner.info
127.0.0.1 www.swz2006.to.8866.org
127.0.0.1 swz2006.to.8866.org
127.0.0.1 www.sypereva.it
127.0.0.1 sypereva.it
127.0.0.1 www.sysnetsecurity.net
127.0.0.1 sysnetsecurity.net
127.0.0.1 www.syssecuritysite.net
127.0.0.1 syssecuritysite.net
127.0.0.1 www.systemupdates.net
127.0.0.1 systemupdates.net
127.0.0.1 www.syupereva.it
127.0.0.1 syupereva.it
127.0.0.1 t.rack.cc
127.0.0.1 www.t8iscali.it
127.0.0.1 t8iscali.it
127.0.0.1 www.t9iscali.it
127.0.0.1 t9iscali.it
127.0.0.1 tacil.org
127.0.0.1 www.TBCODE.COM
127.0.0.1 TBCODE.COM
127.0.0.1 tech-jobs.ws
127.0.0.1 teenhost.net
127.0.0.1 teens4free.net
127.0.0.1 www.tepubblica.it
127.0.0.1 tepubblica.it
127.0.0.1 www.tfiscali.it
127.0.0.1 tfiscali.it
127.0.0.1 www.tgazzetta.it
127.0.0.1 tgazzetta.it
127.0.0.1 www.tgiscali.it
127.0.0.1 tgiscali.it
127.0.0.1 www.tgoogle.it
127.0.0.1 tgoogle.it
127.0.0.1 thehuy.net
127.0.0.1 theproxy.org
127.0.0.1 www.the-ticket.net
127.0.0.1 the-ticket.net
127.0.0.1 www.thiscali.it
127.0.0.1 thiscali.it
127.0.0.1 www.ti8scali.it
127.0.0.1 ti8scali.it
127.0.0.1 www.ti9scali.it
127.0.0.1 ti9scali.it
127.0.0.1 www.tiacali.it
127.0.0.1 tiacali.it
127.0.0.1 www.tiascali.it
127.0.0.1 tiascali.it
127.0.0.1 www.ticali.it
127.0.0.1 ticali.it
127.0.0.1 www.tidcali.it
127.0.0.1 tidcali.it
127.0.0.1 www.tidscali.it
127.0.0.1 tidscali.it
127.0.0.1 www.tiiscali.it
127.0.0.1 tiiscali.it
127.0.0.1 www.tijscali.it
127.0.0.1 tijscali.it
127.0.0.1 www.tikscali.it
127.0.0.1 tikscali.it
127.0.0.1 www.tilscali.it
127.0.0.1 tilscali.it
127.0.0.1 tings.org
127.0.0.1 www.tioscali.it
127.0.0.1 tioscali.it
127.0.0.1 www.tisacali.it
127.0.0.1 tisacali.it
127.0.0.1 www.tisacli.it
127.0.0.1 tisacli.it
127.0.0.1 www.tiscaali.it
127.0.0.1 tiscaali.it
127.0.0.1 www.tiscail.it
127.0.0.1 tiscail.it
127.0.0.1 www.tiscaki.it
127.0.0.1 tiscaki.it
127.0.0.1 www.tiscakli.it
127.0.0.1 tiscakli.it
127.0.0.1 www.tiscal8.it
127.0.0.1 tiscal8.it
127.0.0.1 www.tiscal9.it
127.0.0.1 tiscal9.it
127.0.0.1 www.tiscalii.it
127.0.0.1 tiscalii.it
127.0.0.1 www.tiscalij.it
127.0.0.1 tiscalij.it
127.0.0.1 www.tiscalik.it
127.0.0.1 tiscalik.it
127.0.0.1 www.tiscalil.it
127.0.0.1 tiscalil.it
127.0.0.1 www.tiscaliu.it
127.0.0.1 tiscaliu.it
127.0.0.1 www.tiscalji.it
127.0.0.1 tiscalji.it
127.0.0.1 www.tiscalk.it
127.0.0.1 tiscalk.it
127.0.0.1 www.tiscalki.it
127.0.0.1 tiscalki.it
127.0.0.1 www.tiscalli.it
127.0.0.1 tiscalli.it
127.0.0.1 www.tiscalo.it
127.0.0.1 tiscalo.it
127.0.0.1 www.tiscaloi.it
127.0.0.1 tiscaloi.it
127.0.0.1 www.tiscalui.it
127.0.0.1 tiscalui.it
127.0.0.1 www.tiscaoi.it
127.0.0.1 tiscaoi.it
127.0.0.1 www.tiscaoli.it
127.0.0.1 tiscaoli.it
127.0.0.1 www.tiscaqli.it
127.0.0.1 tiscaqli.it
127.0.0.1 www.tiscasli.it
127.0.0.1 tiscasli.it
127.0.0.1 www.tiscawli.it
127.0.0.1 tiscawli.it
127.0.0.1 www.tiscaxli.it
127.0.0.1 tiscaxli.it
127.0.0.1 www.tiscazli.it
127.0.0.1 tiscazli.it
127.0.0.1 www.tiscdali.it
127.0.0.1 tiscdali.it
127.0.0.1 www.tiscfali.it
127.0.0.1 tiscfali.it
127.0.0.1 www.tisclai.it
127.0.0.1 tisclai.it
127.0.0.1 www.tiscli.it
127.0.0.1 tiscli.it
127.0.0.1 www.tiscqali.it
127.0.0.1 tiscqali.it
127.0.0.1 www.tiscqli.it
127.0.0.1 tiscqli.it
127.0.0.1 www.tiscsali.it
127.0.0.1 tiscsali.it
127.0.0.1 www.tiscsli.it
127.0.0.1 tiscsli.it
127.0.0.1 www.tiscvali.it
127.0.0.1 tiscvali.it
127.0.0.1 www.tiscwali.it
127.0.0.1 tiscwali.it
127.0.0.1 www.tiscxali.it
127.0.0.1 tiscxali.it
127.0.0.1 www.tisczali.it
127.0.0.1 tisczali.it
127.0.0.1 www.tisczli.it
127.0.0.1 tisczli.it
127.0.0.1 www.tisdcali.it
127.0.0.1 tisdcali.it
127.0.0.1 www.tisecali.it
127.0.0.1 tisecali.it
127.0.0.1 www.tisfcali.it
127.0.0.1 tisfcali.it
127.0.0.1 www.tisscali.it
127.0.0.1 tisscali.it
127.0.0.1 www.tisvcali.it
127.0.0.1 tisvcali.it
127.0.0.1 www.tiswcali.it
127.0.0.1 tiswcali.it
127.0.0.1 www.tisxali.it
127.0.0.1 tisxali.it
127.0.0.1 www.tisxcali.it
127.0.0.1 tisxcali.it
127.0.0.1 www.tiuscali.it
127.0.0.1 tiuscali.it
127.0.0.1 www.tiwcali.it
127.0.0.1 tiwcali.it
127.0.0.1 www.tiwscali.it
127.0.0.1 tiwscali.it
127.0.0.1 www.tixcali.it
127.0.0.1 tixcali.it
127.0.0.1 www.tixscali.it
127.0.0.1 tixscali.it
127.0.0.1 www.tizscali.it
127.0.0.1 tizscali.it
127.0.0.1 www.tjiscali.it
127.0.0.1 tjiscali.it
127.0.0.1 www.tkiscali.it
127.0.0.1 tkiscali.it
127.0.0.1 www.tliscali.it
127.0.0.1 tliscali.it
127.0.0.1 www.tns-counter.ru
127.0.0.1 tns-counter.ru
127.0.0.1 www.toiscali.it
127.0.0.1 toiscali.it
127.0.0.1 www.toogle.it
127.0.0.1 toogle.it
127.0.0.1 toolbar.cc
127.0.0.1 www.toolbar3.trafficgeneration.biz
127.0.0.1 www.toolbar5.trafficgeneration.biz
127.0.0.1 www.toolbarbest.biz
127.0.0.1 toolbarbest.biz
127.0.0.1 www.toolbarbucks.biz
127.0.0.1 toolbarbucks.biz
127.0.0.1 www.toolbardollars.biz
127.0.0.1 toolbardollars.biz
127.0.0.1 www.toolbartraff.biz
127.0.0.1 toolbartraff.biz
127.0.0.1 www.toolster.de
127.0.0.1 toolster.de
127.0.0.1 www.top100drugs.info
127.0.0.1 top100drugs.info
127.0.0.1 www.topportalsite.org
127.0.0.1 topportalsite.org
127.0.0.1 www.topsecuritysite.net
127.0.0.1 topsecuritysite.net
127.0.0.1 www.topsite.us
127.0.0.1 topsite.us
127.0.0.1 www.topsites.us
127.0.0.1 topsites.us
127.0.0.1 www.topsitez.us
127.0.0.1 topsitez.us
127.0.0.1 topx.cc
127.0.0.1 www.toriii.cc
127.0.0.1 toriii.cc
127.0.0.1 www.toscali.it
127.0.0.1 toscali.it
127.0.0.1 www.tossoalice.it
127.0.0.1 tossoalice.it
127.0.0.1 www.trackhits.cc
127.0.0.1 trackhits.cc
127.0.0.1 tracktraff.cc
127.0.0.1 traff.justcount.net
127.0.0.1 www.traff5all.biz
127.0.0.1 traff5all.biz
127.0.0.1 www.traffbest.biz
127.0.0.1 traffbest.biz
127.0.0.1 www.trafficgeneration.biz
127.0.0.1 trafficgeneration.biz
127.0.0.1 www.traffsale1.biz
127.0.0.1 traffsale1.biz
127.0.0.1 www.traffstats.biz
127.0.0.1 traffstats.biz
127.0.0.1 www.traffweb1.biz
127.0.0.1 traffweb1.biz
127.0.0.1 www.trebitalia.it
127.0.0.1 trebitalia.it
127.0.0.1 www.treenitalia.it
127.0.0.1 treenitalia.it
127.0.0.1 www.treitalia.it
127.0.0.1 treitalia.it
127.0.0.1 www.tremnitalia.it
127.0.0.1 tremnitalia.it
127.0.0.1 www.treniralia.it
127.0.0.1 treniralia.it
127.0.0.1 www.trenitaalia.it
127.0.0.1 trenitaalia.it
127.0.0.1 www.trenitaia.it
127.0.0.1 trenitaia.it
127.0.0.1 www.trenitakia.it
127.0.0.1 trenitakia.it
127.0.0.1 www.trenitaliaa.it
127.0.0.1 trenitaliaa.it
127.0.0.1 www.trenitaliaq.it
127.0.0.1 trenitaliaq.it
127.0.0.1 www.trenitalias.it
127.0.0.1 trenitalias.it
127.0.0.1 www.trenitaliaz.it
127.0.0.1 trenitaliaz.it
127.0.0.1 www.trenitaliia.it
127.0.0.1 trenitaliia.it
127.0.0.1 www.trenitalis.it
127.0.0.1 trenitalis.it
127.0.0.1 www.trenitalisa.it
127.0.0.1 trenitalisa.it
127.0.0.1 www.trenitallia.it
127.0.0.1 trenitallia.it
127.0.0.1 www.trenitaloa.it
127.0.0.1 trenitaloa.it
127.0.0.1 www.trenitalua.it
127.0.0.1 trenitalua.it
127.0.0.1 www.trenitralia.it
127.0.0.1 trenitralia.it
127.0.0.1 www.trenitslia.it
127.0.0.1 trenitslia.it
127.0.0.1 www.trenittalia.it
127.0.0.1 trenittalia.it
127.0.0.1 www.treniutalia.it
127.0.0.1 treniutalia.it
127.0.0.1 www.treniyalia.it
127.0.0.1 treniyalia.it
127.0.0.1 www.trenmitalia.it
127.0.0.1 trenmitalia.it
127.0.0.1 www.trennitalia.it
127.0.0.1 trennitalia.it
127.0.0.1 www.trenotalia.it
127.0.0.1 trenotalia.it
127.0.0.1 www.trentalia.it
127.0.0.1 trentalia.it
127.0.0.1 www.trenutalia.it
127.0.0.1 trenutalia.it
127.0.0.1 www.trepubblica.it
127.0.0.1 trepubblica.it
127.0.0.1 www.trernitalia.it
127.0.0.1 trernitalia.it
127.0.0.1 www.trewnitalia.it
127.0.0.1 trewnitalia.it
127.0.0.1 www.triscali.it
127.0.0.1 triscali.it
127.0.0.1 www.troonety.biz
127.0.0.1 troonety.biz
127.0.0.1 www.trossoalice.it
127.0.0.1 trossoalice.it
127.0.0.1 www.trrenitalia.it
127.0.0.1 trrenitalia.it
127.0.0.1 www.trtenitalia.it
127.0.0.1 trtenitalia.it
127.0.0.1 www.truth-is-out-there.org
127.0.0.1 truth-is-out-there.org
127.0.0.1 www.truttogratis.it
127.0.0.1 truttogratis.it
127.0.0.1 www.tscali.it
127.0.0.1 tscali.it
127.0.0.1 tsx.org
127.0.0.1 www.ttiscali.it
127.0.0.1 ttiscali.it
127.0.0.1 www.ttrenitalia.it
127.0.0.1 ttrenitalia.it
127.0.0.1 www.tttogratis.it
127.0.0.1 tttogratis.it
127.0.0.1 www.ttuttogratis.it
127.0.0.1 ttuttogratis.it
127.0.0.1 www.tuiscali.it
127.0.0.1 tuiscali.it
127.0.0.1 www.turbocodec.net
127.0.0.1 turbocodec.net
127.0.0.1 www.turtogratis.it
127.0.0.1 turtogratis.it
127.0.0.1 www.tutogratis.it
127.0.0.1 tutogratis.it
127.0.0.1 www.tutrogratis.it
127.0.0.1 tutrogratis.it
127.0.0.1 www.tuttgratis.it
127.0.0.1 tuttgratis.it
127.0.0.1 www.tuttofratis.it
127.0.0.1 tuttofratis.it
127.0.0.1 www.tuttogeratis.it
127.0.0.1 tuttogeratis.it
127.0.0.1 www.tuttograatis.it
127.0.0.1 tuttograatis.it
127.0.0.1 www.tuttograis.it
127.0.0.1 tuttograis.it
127.0.0.1 www.tuttograris.it
127.0.0.1 tuttograris.it
127.0.0.1 www.tuttograti.it
127.0.0.1 tuttograti.it
127.0.0.1 www.tuttogratia.it
127.0.0.1 tuttogratia.it
127.0.0.1 www.tuttogratias.it
127.0.0.1 tuttogratias.it
127.0.0.1 www.tuttogratiis.it
127.0.0.1 tuttogratiis.it
127.0.0.1 www.tuttogratisa.it
127.0.0.1 tuttogratisa.it
127.0.0.1 www.tuttogratiss.it
127.0.0.1 tuttogratiss.it
127.0.0.1 www.tuttogratos.it
127.0.0.1 tuttogratos.it
127.0.0.1 www.tuttograts.it
127.0.0.1 tuttograts.it
127.0.0.1 www.tuttograttis.it
127.0.0.1 tuttograttis.it
127.0.0.1 www.tuttogratus.it
127.0.0.1 tuttogratus.it
127.0.0.1 www.tuttograyis.it
127.0.0.1 tuttograyis.it
127.0.0.1 www.tuttogrratis.it
127.0.0.1 tuttogrratis.it
127.0.0.1 www.tuttogrstis.it
127.0.0.1 tuttogrstis.it
127.0.0.1 www.tuttogrtatis.it
127.0.0.1 tuttogrtatis.it
127.0.0.1 www.tuttogtratis.it
127.0.0.1 tuttogtratis.it
127.0.0.1 www.tuttohratis.it
127.0.0.1 tuttohratis.it
127.0.0.1 www.tuttoigratis.it
127.0.0.1 tuttoigratis.it
127.0.0.1 www.tuttoogratis.it
127.0.0.1 tuttoogratis.it
127.0.0.1 www.tuttopgratis.it
127.0.0.1 tuttopgratis.it
127.0.0.1 www.tuttoratis.it
127.0.0.1 tuttoratis.it
127.0.0.1 www.tuttpgratis.it
127.0.0.1 tuttpgratis.it
127.0.0.1 www.tutttogratis.it
127.0.0.1 tutttogratis.it
127.0.0.1 www.tuttyogratis.it
127.0.0.1 tuttyogratis.it
127.0.0.1 www.tutyogratis.it
127.0.0.1 tutyogratis.it
127.0.0.1 www.tutytogratis.it
127.0.0.1 tutytogratis.it
127.0.0.1 www.tuuttogratis.it
127.0.0.1 tuuttogratis.it
127.0.0.1 www.tuytogratis.it
127.0.0.1 tuytogratis.it
127.0.0.1 www.tv-auf-dem-pc.de
127.0.0.1 tv-auf-dem-pc.de
127.0.0.1 www.tv-en-pc.es
127.0.0.1 tv-en-pc.es
127.0.0.1 www.tyiscali.it
127.0.0.1 tyiscali.it
127.0.0.1 www.tyttogratis.it
127.0.0.1 tyttogratis.it
127.0.0.1 u.webbuying.net
127.0.0.1 u45.cx
127.0.0.1 u46.cx
127.0.0.1 u47.cc
127.0.0.1 u48.cc
127.0.0.1 www.u7u.cn
127.0.0.1 u7u.cn
127.0.0.1 www.ueornavxiz.biz
127.0.0.1 ueornavxiz.biz
127.0.0.1 www.ueornmbkkhmf.biz
127.0.0.1 ueornmbkkhmf.biz
127.0.0.1 ufindall.click-now.net
127.0.0.1 www.uglyphotos.net
127.0.0.1 uglyphotos.net
127.0.0.1 www.uibo.it
127.0.0.1 uibo.it
127.0.0.1 www.uige.it
127.0.0.1 uige.it
127.0.0.1 www.uimi.it
127.0.0.1 uimi.it
127.0.0.1 www.uinimi.it
127.0.0.1 uinimi.it
127.0.0.1 www.uipd.it
127.0.0.1 uipd.it
127.0.0.1 www.uipg.it
127.0.0.1 uipg.it
127.0.0.1 www.uito.it
127.0.0.1 uito.it
127.0.0.1 ultraload.net
127.0.0.1 www.umibo.it
127.0.0.1 umibo.it
127.0.0.1 www.umige.it
127.0.0.1 umige.it
127.0.0.1 www.umimi.it
127.0.0.1 umimi.it
127.0.0.1 www.umipd.it
127.0.0.1 umipd.it
127.0.0.1 www.umipv.it
127.0.0.1 umipv.it
127.0.0.1 www.umnibo.it
127.0.0.1 umnibo.it
127.0.0.1 www.unbo.it
127.0.0.1 unbo.it
127.0.0.1 www.unge.it
127.0.0.1 unge.it
127.0.0.1 www.unibno.it
127.0.0.1 unibno.it
127.0.0.1 www.unie.it
127.0.0.1 unie.it
127.0.0.1 www.unig.it
127.0.0.1 unig.it
127.0.0.1 www.unii.it
127.0.0.1 unii.it
127.0.0.1 www.unini.it
127.0.0.1 unini.it
127.0.0.1 www.unionsms.net
127.0.0.1 unionsms.net
127.0.0.1 unipages.cc
127.0.0.1 unitedstates.rub.to
127.0.0.1 www.univo.it
127.0.0.1 univo.it
127.0.0.1 www.unlimite.net
127.0.0.1 unlimite.net
127.0.0.1 www.unmi.it
127.0.0.1 unmi.it
127.0.0.1 www.unmibo.it
127.0.0.1 unmibo.it
127.0.0.1 www.unobo.it
127.0.0.1 unobo.it
127.0.0.1 www.unpd.it
127.0.0.1 unpd.it
127.0.0.1 www.unpg.it
127.0.0.1 unpg.it
127.0.0.1 www.unto.it
127.0.0.1 unto.it
127.0.0.1 www.unubo.it
127.0.0.1 unubo.it
127.0.0.1 up2you.ru
127.0.0.1 update.680180.net
127.0.0.1 www.upereva.it
127.0.0.1 upereva.it
127.0.0.1 upx.tsx.org
127.0.0.1 uralitel.ru
127.0.0.1 www.urgentsystemupdate.biz
127.0.0.1 urgentsystemupdate.biz
127.0.0.1 urlstat.ru
127.0.0.1 ursie.net
127.0.0.1 usefullsoft.net
127.0.0.1 uusocialjustice.org
127.0.0.1 www.v8irgilio.it
127.0.0.1 v8irgilio.it
127.0.0.1 www.v8rgilio.it
127.0.0.1 v8rgilio.it
127.0.0.1 www.v9irgilio.it
127.0.0.1 v9irgilio.it
127.0.0.1 www.v9rgilio.it
127.0.0.1 v9rgilio.it
127.0.0.1 www.vbirgilio.it
127.0.0.1 vbirgilio.it
127.0.0.1 www.vcirgilio.it
127.0.0.1 vcirgilio.it
127.0.0.1 www.vcorriere.it
127.0.0.1 vcorriere.it
127.0.0.1 vesbiz.biz
127.0.0.1 www.veyyhlucwa.net
127.0.0.1 veyyhlucwa.net
127.0.0.1 www.vfirgilio.it
127.0.0.1 vfirgilio.it
127.0.0.1 www.vgazzetta.it
127.0.0.1 vgazzetta.it
127.0.0.1 www.vgirgilio.it
127.0.0.1 vgirgilio.it
127.0.0.1 www.vgoogle.it
127.0.0.1 vgoogle.it
127.0.0.1 www.vi4gilio.it
127.0.0.1 vi4gilio.it
127.0.0.1 www.vi4rgilio.it
127.0.0.1 vi4rgilio.it
127.0.0.1 www.vi5gilio.it
127.0.0.1 vi5gilio.it
127.0.0.1 www.vi5rgilio.it
127.0.0.1 vi5rgilio.it
127.0.0.1 www.vi8rgilio.it
127.0.0.1 vi8rgilio.it
127.0.0.1 www.vi9rgilio.it
127.0.0.1 vi9rgilio.it
127.0.0.1 www.vidaccess.net
127.0.0.1 vidaccess.net
127.0.0.1 www.video-clips.in
127.0.0.1 video-clips.in
127.0.0.1 www.videosaccess.net
127.0.0.1 videosaccess.net
127.0.0.1 www.vidrgilio.it
127.0.0.1 vidrgilio.it
127.0.0.1 www.viegilio.it
127.0.0.1 viegilio.it
127.0.0.1 www.viergilio.it
127.0.0.1 viergilio.it
127.0.0.1 www.vifgilio.it
127.0.0.1 vifgilio.it
127.0.0.1 www.vifrgilio.it
127.0.0.1 vifrgilio.it
127.0.0.1 www.vigrgilio.it
127.0.0.1 vigrgilio.it
127.0.0.1 www.vigrilio.it
127.0.0.1 vigrilio.it
127.0.0.1 www.vijrgilio.it
127.0.0.1 vijrgilio.it
127.0.0.1 www.vikrgilio.it
127.0.0.1 vikrgilio.it
127.0.0.1 www.vilrgilio.it
127.0.0.1 vilrgilio.it
127.0.0.1 www.viorgilio.it
127.0.0.1 viorgilio.it
127.0.0.1 www.vir4gilio.it
127.0.0.1 vir4gilio.it
127.0.0.1 www.vir5gilio.it
127.0.0.1 vir5gilio.it
127.0.0.1 www.virbgilio.it
127.0.0.1 virbgilio.it
127.0.0.1 www.virbilio.it
127.0.0.1 virbilio.it
127.0.0.1 www.virdgilio.it
127.0.0.1 virdgilio.it
127.0.0.1 www.viregilio.it
127.0.0.1 viregilio.it
127.0.0.1 www.virfgilio.it
127.0.0.1 virfgilio.it
127.0.0.1 www.virg8ilio.it
127.0.0.1 virg8ilio.it
127.0.0.1 www.virg8lio.it
127.0.0.1 virg8lio.it
127.0.0.1 www.virg9ilio.it
127.0.0.1 virg9ilio.it
127.0.0.1 www.virg9lio.it
127.0.0.1 virg9lio.it
127.0.0.1 www.virgbilio.it
127.0.0.1 virgbilio.it
127.0.0.1 www.virgfilio.it
127.0.0.1 virgfilio.it
127.0.0.1 www.virghilio.it
127.0.0.1 virghilio.it
127.0.0.1 www.virgi8lio.it
127.0.0.1 virgi8lio.it
127.0.0.1 www.virgi9lio.it
127.0.0.1 virgi9lio.it
127.0.0.1 www.virgiilo.it
127.0.0.1 virgiilo.it
127.0.0.1 www.virgiio.it
127.0.0.1 virgiio.it
127.0.0.1 www.virgijlio.it
127.0.0.1 virgijlio.it
127.0.0.1 www.virgiklio.it
127.0.0.1 virgiklio.it
127.0.0.1 www.virgil8io.it
127.0.0.1 virgil8io.it
127.0.0.1 www.virgil9io.it
127.0.0.1 virgil9io.it
127.0.0.1 www.virgili0.it
127.0.0.1 virgili0.it
127.0.0.1 www.virgili8o.it
127.0.0.1 virgili8o.it
127.0.0.1 www.virgili9.it
127.0.0.1 virgili9.it
127.0.0.1 www.virgili9o.it
127.0.0.1 virgili9o.it
127.0.0.1 www.virgilijo.it
127.0.0.1 virgilijo.it
127.0.0.1 www.virgiliko.it
127.0.0.1 virgiliko.it
127.0.0.1 www.virgilil.it
127.0.0.1 virgilil.it
127.0.0.1 www.virgililo.it
127.0.0.1 virgililo.it
127.0.0.1 www.virgilio0.it
127.0.0.1 virgilio0.it
127.0.0.1 www.virgilio9.it
127.0.0.1 virgilio9.it
127.0.0.1 www.virgilioi.it
127.0.0.1 virgilioi.it
127.0.0.1 www.virgiliok.it
127.0.0.1 virgiliok.it
127.0.0.1 www.virgiliol.it
127.0.0.1 virgiliol.it
127.0.0.1 www.virgiliop.it
127.0.0.1 virgiliop.it
127.0.0.1 www.virgilipo.it
127.0.0.1 virgilipo.it
127.0.0.1 www.virgiliuo.it
127.0.0.1 virgiliuo.it
127.0.0.1 www.virgiljio.it
127.0.0.1 virgiljio.it
127.0.0.1 www.virgilkio.it
127.0.0.1 virgilkio.it
127.0.0.1 www.virgiloio.it
127.0.0.1 virgiloio.it
127.0.0.1 www.virgiloo.it
127.0.0.1 virgiloo.it
127.0.0.1 www.virgilpio.it
127.0.0.1 virgilpio.it
127.0.0.1 www.virgiluio.it
127.0.0.1 virgiluio.it
127.0.0.1 www.virgiluo.it
127.0.0.1 virgiluo.it
127.0.0.1 virgin-tgp.net
127.0.0.1 www.virgioio.it
127.0.0.1 virgioio.it
127.0.0.1 www.virgiolio.it
127.0.0.1 virgiolio.it
127.0.0.1 www.virgiplio.it
127.0.0.1 virgiplio.it
127.0.0.1 www.virgiulio.it
127.0.0.1 virgiulio.it
127.0.0.1 www.virgjilio.it
127.0.0.1 virgjilio.it
127.0.0.1 www.virgkilio.it
127.0.0.1 virgkilio.it
127.0.0.1 www.virgklio.it
127.0.0.1 virgklio.it
127.0.0.1 www.virglilio.it
127.0.0.1 virglilio.it
127.0.0.1 www.virgoilio.it
127.0.0.1 virgoilio.it
127.0.0.1 www.virgtilio.it
127.0.0.1 virgtilio.it
127.0.0.1 www.virguilio.it
127.0.0.1 virguilio.it
127.0.0.1 www.virgvilio.it
127.0.0.1 virgvilio.it
127.0.0.1 www.virgyilio.it
127.0.0.1 virgyilio.it
127.0.0.1 www.virhgilio.it
127.0.0.1 virhgilio.it
127.0.0.1 www.virtgilio.it
127.0.0.1 virtgilio.it
127.0.0.1 www.virtilio.it
127.0.0.1 virtilio.it
127.0.0.1 www.virtual-ticket.net
127.0.0.1 virtual-ticket.net
127.0.0.1 www.virvgilio.it
127.0.0.1 virvgilio.it
127.0.0.1 www.virvilio.it
127.0.0.1 virvilio.it
127.0.0.1 www.virygilio.it
127.0.0.1 virygilio.it
127.0.0.1 www.vitrgilio.it
127.0.0.1 vitrgilio.it
127.0.0.1 www.viurgilio.it
127.0.0.1 viurgilio.it
127.0.0.1 www.vivacodec.net
127.0.0.1 vivacodec.net
127.0.0.1 www.vjirgilio.it
127.0.0.1 vjirgilio.it
127.0.0.1 www.vkirgilio.it
127.0.0.1 vkirgilio.it
127.0.0.1 www.vkrgilio.it
127.0.0.1 vkrgilio.it
127.0.0.1 www.vlirgilio.it
127.0.0.1 vlirgilio.it
127.0.0.1 void.truth-is-out-there.org
127.0.0.1 www.voirgilio.it
127.0.0.1 voirgilio.it
127.0.0.1 www.vorriere.it
127.0.0.1 vorriere.it
127.0.0.1 votehowe.org
127.0.0.1 www.vother.info
127.0.0.1 vother.info
127.0.0.1 www.votreenton.biz
127.0.0.1 votreenton.biz
127.0.0.1 vse-moe.biz
127.0.0.1 www.vskeylogger.nazwa.pl
127.0.0.1 vskeylogger.nazwa.pl
127.0.0.1 www.vuirgilio.it
127.0.0.1 vuirgilio.it
127.0.0.1 www.walitalia.it
127.0.0.1 walitalia.it
127.0.0.1 warnomore.org
127.0.0.1 www.watchonline.tv
127.0.0.1 watchonline.tv
127.0.0.1 www.wbay.it
127.0.0.1 wbay.it
127.0.0.1 web.links4all.biz
127.0.0.1 www.webbuying.net
127.0.0.1 webbuying.net
127.0.0.1 web-entrance.co
127.0.0.1 web-homepage.net
127.0.0.1 www.webnetinfo.net
127.0.0.1 webnetinfo.net
127.0.0.1 web-nexus.net
127.0.0.1 web-search.tk
127.0.0.1 www.webtop100.net
127.0.0.1 webtop100.net
127.0.0.1 www.whatmetodonow.org
127.0.0.1 whatmetodonow.org
127.0.0.1 white-pages.ws
127.0.0.1 winprotect.net
127.0.0.1 winshow.biz
127.0.0.1 www.wm.buhartes.info
127.0.0.1 wm.buhartes.info
127.0.0.1 www.wm.kannylizaciya.info
127.0.0.1 wm.kannylizaciya.info
127.0.0.1 www.wm.komforochka.info
127.0.0.1 wm.komforochka.info
127.0.0.1 www.wm.vother.info
127.0.0.1 wm.vother.info
127.0.0.1 wordlist.jps.ru
127.0.0.1 www.worldsecurityonline.biz
127.0.0.1 worldsecurityonline.biz
127.0.0.1 www.worldwideadvertisingservices.info
127.0.0.1 worldwideadvertisingservices.info
127.0.0.1 www.wowsearch.org
127.0.0.1 wowsearch.org
127.0.0.1 wpc2001.org
127.0.0.1 www.wsupereva.it
127.0.0.1 wsupereva.it
127.0.0.1 www4free.info
127.0.0.1 wwwbet.net
127.0.0.1 wwwbetting.net
127.0.0.1 wwwroulette.net
127.0.0.1 wwwsearch.biz
127.0.0.1 www.wwwsearch.biz
127.0.0.1 wwwsearchdrive.info
127.0.0.1 www.www-Spybot.net
127.0.0.1 www-spybot.net
127.0.0.1 www-Spybot.net
127.0.0.1 www.www-spybot.net
127.0.0.1 www.www-SpywareBot.org
127.0.0.1 www-SpywareBot.org
127.0.0.1 wwww.2211.net
127.0.0.1 wwwyahoo.downloadznow.net
127.0.0.1 wzdq.cn
127.0.0.1 www.wzdq.cn
127.0.0.1 x.full-tgp.net
127.0.0.1 xads.cliks.org
127.0.0.1 www.xcorriere.it
127.0.0.1 xcorriere.it
127.0.0.1 www.xerocodec.net
127.0.0.1 xerocodec.net
127.0.0.1 x-google.net
127.0.0.1 www.xorriere.it
127.0.0.1 xorriere.it
127.0.0.1 xp.attrezzi.biz
127.0.0.1 xsec.org
127.0.0.1 www.xsec.org
127.0.0.1 xsex.ws
127.0.0.1 xtipp.de
127.0.0.1 www.xtipp.de
127.0.0.1 www.xtosearch.biz
127.0.0.1 xtosearch.biz
127.0.0.1 xu.pl
127.0.0.1 xu.xu.pl
127.0.0.1 xwebsearch.biz
127.0.0.1 www.xwebsearch.biz
127.0.0.1 www.xxlblog.info
127.0.0.1 xxlblog.info
127.0.0.1 yahoo.downloadznow.net
127.0.0.1 yahoo.panet.org
127.0.0.1 yeak.net
127.0.0.1 www.ygoogle.it
127.0.0.1 ygoogle.it
127.0.0.1 ygsondheks.info
127.0.0.1 www.ygsondheks.info
127.0.0.1 www.yiscali.it
127.0.0.1 yiscali.it
127.0.0.1 www.ymctavxiz.biz
127.0.0.1 ymctavxiz.biz
127.0.0.1 www.yoogle.it
127.0.0.1 yoogle.it
127.0.0.1 yootube.info
127.0.0.1 yops.biz
127.0.0.1 www.yops.biz
127.0.0.1 youfindall.net
127.0.0.1 yourbookmarks.info
127.0.0.1 yourbookmarks.ws
127.0.0.1 your-prescriptions.net
127.0.0.1 ysa-info.net
127.0.0.1 www.ytiscali.it
127.0.0.1 ytiscali.it
127.0.0.1 www.ytrenitalia.it
127.0.0.1 ytrenitalia.it
127.0.0.1 www.yunibo.it
127.0.0.1 yunibo.it
127.0.0.1 ywebsearch.info
127.0.0.1 zabywjwzlr.biz.biz
127.0.0.1 www.zabywjwzlr.biz.biz
127.0.0.1 www.zalitalia.it
127.0.0.1 zalitalia.it
127.0.0.1 www.zangcodec.net
127.0.0.1 zangcodec.net
127.0.0.1 zero.bestmanage.org
127.0.0.1 zero.bestmanage0.org
127.0.0.1 zero.bestmanage1.org
127.0.0.1 zero.bestmanage2.org
127.0.0.1 zero.bestmanage3.org
127.0.0.1 zero.bestmanage4.org
127.0.0.1 zero.bestmanage5.org
127.0.0.1 zero.bestmanage6.org
127.0.0.1 zero.bestmanage7.org
127.0.0.1 zero.bestmanage8.org
127.0.0.1 zero.bestmanage9.org
127.0.0.1 zero.serverc.org
127.0.0.1 zhmbscwdgk.biz
127.0.0.1 www.zhmbscwdgk.biz
127.0.0.1 zjkjw.gov.cn
127.0.0.1 www.zjkjw.gov.cn
127.0.0.1 www.zqavanjpn.biz
127.0.0.1 zqavanjpn.biz
127.0.0.1 www.zsupereva.it
127.0.0.1 zsupereva.it
# This list is Copyright 2000-2008 Safer Networking Limited
127.0.0.1 www.add-hhh.info
127.0.0.1 add-hhh.info
127.0.0.1 www.adintelligence.net
127.0.0.1 adintelligence.net
127.0.0.1 www.adware.pro
127.0.0.1 adware.pro
127.0.0.1 www.ahnenforschung.de
127.0.0.1 ahnenforschung.de
127.0.0.1 www.antispywareupdates.net
127.0.0.1 antispywareupdates.net
127.0.0.1 www.berufe-jobs.de
127.0.0.1 berufe-jobs.de
127.0.0.1 www.berufe-server.de
127.0.0.1 berufe-server.de
127.0.0.1 www.berufe-welt.de
127.0.0.1 berufe-welt.de
127.0.0.1 www.berufs-wahl.de
127.0.0.1 berufs-wahl.de
127.0.0.1 www.bill.de
127.0.0.1 bill.de
127.0.0.1 www.blacklegion.info
127.0.0.1 blacklegion.info
127.0.0.1 www.cocktails-ideen.de
127.0.0.1 cocktails-ideen.de
127.0.0.1 download.adintelligence.net
127.0.0.1 www.dvden.de
127.0.0.1 dvden.de
127.0.0.1 www.esims.ch
127.0.0.1 esims.ch
127.0.0.1 www.explorertool.net
127.0.0.1 explorertool.net
127.0.0.1 www.fabrik-verkauf.de
127.0.0.1 fabrik-verkauf.de
127.0.0.1 www.games-u-spiele.de
127.0.0.1 games-u-spiele.de
127.0.0.1 www.gasan.ru
127.0.0.1 gasan.ru
127.0.0.1 www.geburtstag-infos.de
127.0.0.1 geburtstag-infos.de
127.0.0.1 www.geburtstags-info.de
127.0.0.1 geburtstags-info.de
127.0.0.1 www.geburtstags-infos.de
127.0.0.1 geburtstags-infos.de
127.0.0.1 www.gedichte.de
127.0.0.1 gedichte.de
127.0.0.1 www.gehalt-berechnung.de
127.0.0.1 gehalt-berechnung.de
127.0.0.1 www.gehaltsrechner.de
127.0.0.1 gehaltsrechner.de
127.0.0.1 www.gehalts-rechner.de
127.0.0.1 gehalts-rechner.de
127.0.0.1 www.genealogie.de
127.0.0.1 genealogie.de
127.0.0.1 www.germanys-best-topmodel.de
127.0.0.1 germanys-best-topmodel.de
127.0.0.1 www.gifs-u-cliparts.de
127.0.0.1 gifs-u-cliparts.de
127.0.0.1 www.gratisdvd.net
127.0.0.1 gratisdvd.net
127.0.0.1 www.hausaufgaben.de
127.0.0.1 hausaufgaben.de
127.0.0.1 www.hausaufgaben-referate.de
127.0.0.1 hausaufgaben–referate.de
127.0.0.1 www.hochzeitsgedichte.de
127.0.0.1 hochzeitsgedichte.de
127.0.0.1 www.igfight.de
127.0.0.1 igfight.de
127.0.0.1 www.infostore.org
127.0.0.1 infostore.org
127.0.0.1 www.iqfight.de
127.0.0.1 iqfight.de
127.0.0.1 www.iqtest.de
127.0.0.1 iqtest.de
127.0.0.1 www.ixcodec.net
127.0.0.1 ixcodec.net
127.0.0.1 www.jobusiness.org
127.0.0.1 jobusiness.org
127.0.0.1 www.kochrezepte-net.de
127.0.0.1 kochrezepte-net.de
127.0.0.1 www.landkarte.de
127.0.0.1 landkarte.de
127.0.0.1 www.lebenserwartung-online.de
127.0.0.1 lebenserwartung-online.de
127.0.0.1 www.lebensprognose.de
127.0.0.1 lebensprognose.de
127.0.0.1 www.lyrik.de
127.0.0.1 lyrik.de
127.0.0.1 www.mega-downloads.net
127.0.0.1 mega-downloads.net
127.0.0.1 www.meine-grafiken.de
127.0.0.1 meine-grafiken.de
127.0.0.1 www.meine-grusskarten.de
127.0.0.1 meine-grusskarten.de
127.0.0.1 www.members-site.net
127.0.0.1 members-site.net
127.0.0.1 www.millonenquiz.de
127.0.0.1 millonenquiz.de
127.0.0.1 www.mitfahr-portal.de
127.0.0.1 mitfahr-portal.de
127.0.0.1 www.my-tiere.de
127.0.0.1 my-tiere.de
127.0.0.1 www.namens-bedeutung.de
127.0.0.1 namens-bedeutung.de
127.0.0.1 www.namens-info.de
127.0.0.1 namens-info.de
127.0.0.1 www.namen-und-ahnen.de
127.0.0.1 namen-und-ahnen.de
127.0.0.1 www.nimimit.de
127.0.0.1 nimimit.de
127.0.0.1 www.online-flirten.de
127.0.0.1 online-flirten.de
127.0.0.1 www.online-iq-test.de
127.0.0.1 online-iq-test.de
127.0.0.1 www.online-routenplaner.de
127.0.0.1 online-routenplaner.de
127.0.0.1 www.p2p.ag
127.0.0.1 p2p.ag
127.0.0.1 www.pc-games.de
127.0.0.1 pc-games.de
127.0.0.1 www.porn-youtube-08.org
127.0.0.1 porn-youtube-08.org
127.0.0.1 www.profi-routenplaner.de
127.0.0.1 profi-routenplaner.de
127.0.0.1 www.pruefung-beginnen.net
127.0.0.1 pruefung-beginnen.net
127.0.0.1 www.remover.org
127.0.0.1 remover.org
127.0.0.1 www.routenplaner-online.de
127.0.0.1 routenplaner-online.de
127.0.0.1 www.schuldentipps.de
127.0.0.1 schuldentipps.de
127.0.0.1 www.searchdrive.info
127.0.0.1 setup.jobusiness.org
127.0.0.1 www.shuixian.net
127.0.0.1 shuixian.net
127.0.0.1 spybotsearchudestroy.mega-downloads.net
127.0.0.1 www.starzvideos.net
127.0.0.1 starzvideos.net
127.0.0.1 www.stromverbrauch.de
127.0.0.1 stromverbrauch.de
127.0.0.1 www.sudoku.de
127.0.0.1 sudoku.de
127.0.0.1 www.sudoku-jetzt.de
127.0.0.1 sudoku-jetzt.de
127.0.0.1 www.tattoo-paradies.de
127.0.0.1 tattoo-paradies.de
127.0.0.1 www.tattoos-paradies.de
127.0.0.1 tattoos-paradies.de
127.0.0.1 www.tiere-infos.de
127.0.0.1 tiere-infos.de
127.0.0.1 www.trauergedichte.de
127.0.0.1 trauergedichte.de
127.0.0.1 trojansfiltre.co
127.0.0.1 www.verwandschafts-test.de
127.0.0.1 verwandschafts-test.de
127.0.0.1 www.vorlagen-paradies.de
127.0.0.1 vorlagen-paradies.de
127.0.0.1 www.vorlagen-world.de
127.0.0.1 vorlagen-world.de
127.0.0.1 www.wer-bumst-mich.de
127.0.0.1 wer-bumst-mich.de
# End of entries inserted by Spybot - Search & Destroy

cesarper

2008-05-24, 05:07

3D Home Architect(r) Deluxe 3.0
A Series of Unfortunate Events (remove only)
Adobe Acrobat 4.0
Adobe Flash Player ActiveX
Adobe Reader 8.1.2
Adobe Shockwave Player
Adobe® Photoshop® Album Starter Edition 3.0
Alice Greenfingers (remove only)
America Online (Choose which version to remove)
AOL Coach Version 1.0(Build:20030807.3)
AOL Deskbar
Apple Mobile Device Support
Apple Software Update
ArcGIS ArcObjects Developer Kit
ArcGIS Desktop
ArcGIS Tutorial Data
ArcSoft Camera Suite
Atlantis (remove only)
BCM V.92 56K Modem
BroadJump Client Foundation
Buzz Lightyear Astro Blasters
Cake Mania
Classic PhoneTools
Dell Modem-On-Hold
Dell Picture Studio - Dell Image Expert
Dell Solution Center
Dell Support Center
DellSupport
Digital Line Detect
Docker Sokoban
Double Digger
Dream Day Wedding (remove only)
Dress Shop Hop (remove only)
DVDSentry
EA.COM
Easy CD Creator 5 Basic
eLottoAlert version 1.0.14.4
Escape From Paradise (remove only)
FAERIES MENAGERIE
Fairy Godmother Tycoon (remove only)
FlatOut Demo
Google Earth
Google Toolbar for Internet Explorer
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.0 (KB932471)
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK [MULTIPLE]
Hotfix for Windows XP [MULTIPLE]
HP Document Viewer 5.3
HP Image Zone 5.3
HP Imaging Device Functions 5.3
HP PSC & OfficeJet 5.3.B
HP Software Update
HP Solution Center & Imaging Support Tools 5.3
Intel(R) PRO Ethernet Adapter and Software
Intel(R) PROSet II
InterActual Player
iPod for Windows 2005-06-26
IrfanView (remove only)
iTunes
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 11
Java(TM) 6 Update 2
Java(TM) 6 Update 3
Java(TM) 6 Update 5
Jojo's Fashion Show (remove only)
Kaspersky Online Scanner
Kazaa Media Desktop 2.0.2
Learn2 Player (Uninstall Only)
LG USB Drivers
LiveUpdate 1.80 (Symantec Corporation)
Macromedia Flash Player
Microsoft .NET Framework (English)
Microsoft .NET Framework (English) v1.0.3705
Microsoft .NET Framework 1.0 Hotfix (KB928367)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft .NET Framework 3.0 Service Pack 1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Data Access Components KB870669
Microsoft Encarta Encyclopedia Standard 2002
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Money 2002
Microsoft Money 2002 System Pack
Microsoft National Language Support Downlevel APIs
Microsoft Office Professional Edition 2003
Microsoft Office XP Media Content
Microsoft Picture It! Photo 2002
Microsoft Silverlight
Microsoft Streets and Trips 2002
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Works 6.0
Microsoft Works Suite Add-in for Microsoft Word
Modem Helper
MSN Music Assistant
MSXML 4.0 SP2 (KB936181)
MSXML 6.0 Parser (KB933579)
MUSICMATCH Jukebox
MySpaceIM
Myst III: Exile
Myst Masterpiece Edition
Norton Security Scan
NVIDIA Display Driver
NVIDIA Windows 2000/XP Display Drivers
Paint Shop Pro 7
Plant Tycoon (remove only)
PowerDVD
QuickTime
RealArcade
RealPlayer Basic
Rhapsody Player Engine
Riven
Sally's Salon (remove only)
SBC Yahoo! Applications
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Step By Step Interactive Training [TWO]
Security Update for Windows Internet Explorer 7 [MULTIPLE]
Security Update for Windows Media Player [MULTIPLE]
Security Update for Windows XP [MULTIPLE]
Shockwave
Sony Picture Utility
Sony USB Driver
Sound Blaster Live!
Spelling Dictionaries Support For Adobe Reader 8
Spybot - Search & Destroy
Spybot - Search & Destroy 1.5.2.20
Symantec AntiVirus Client
The Egyptian Prophecy
Update for Windows XP [MULTIPLE]
V CAST Music
Viewpoint Media Player
Virtual Villagers 2 - The Lost Children (remove only)
Wedding Dash (remove only)
Windows Defender
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Windows Presentation Foundation
Windows XP Hotfix - [MULTIPLE]
Windows XP Service Pack 2
WinZip
Yahoo! Search Protection

cesarper

2008-05-24, 05:10

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Wednesday, May 21, 2008 6:39:20 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 20/05/2008
Kaspersky Anti-Virus database records: 703457
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 124951
Number of viruses found: 1
Number of infected objects: 4
Number of suspicious objects: 0
Duration of the scan process: 02:20:47

Infected Object Name / Virus Name / Last Action
C:\5ea51ae1b6bff1303c086d59318b97\%temp%dd_msxml_retMSI.txt Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\06d9abc039293e0f4966da9588e32af4_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\215b85c96a4d6900382185a890b1e8b8_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\33fe62925737b60e593419ebf1e74139_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\3c0ff8f09c45940375bb6eb11c9ee4c4_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\49ca2d7b8a7c7df4e7094f96ef623b01_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\5dd903a2071be5fd6039176957658807_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\8ed98feec643ac44cb339d76fd70c864_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\a75d6e554a3cdc8dbf833fe111503612_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c41f7b3daf0016563d83737790538532_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\c65f26b0495f106615835222fbda4546_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys\f01d54c1f8ac4ef7643f56545e3b65cd_7b71fbce-dff3-42c2-9259-d2367eb8daa9 Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-09012007-222018.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\SupportSoft\DellSupportCenter\SYSTEM\state\logs\sprtcmd.log Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\INDEX.DAT Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Lupe\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\DSAgnt.log Object is locked skipped
C:\Documents and Settings\Lupe\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\DSAgnt_GTActions.log Object is locked skipped
C:\Documents and Settings\Lupe\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\gdql_d_DSAgnt.log Object is locked skipped
C:\Documents and Settings\Lupe\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\glog.log Object is locked skipped
C:\Documents and Settings\Lupe\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\ApplicationHistory\hpqimzone.exe.3204510e.ini.inuse Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\propertiesTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Application Data\SupportSoft\DellSupportCenter\Lupe\state\logs\sprtcmd.log Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\History\History.IE5\INDEX.DAT Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\History\History.IE5\MSHist012008052020080521\index.dat Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Temp\hpodvd09.log Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Temp\~DF1EFD.tmp Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Temp\~DFC3CD.tmp Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Temp\~DFF413.tmp Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Temp\~DFF430.tmp Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Lupe\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Lupe\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Lupe\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\System Volume Information\catalog.wci\00000002.ps1 Object is locked skipped
C:\System Volume Information\catalog.wci\00000002.ps2 Object is locked skipped
C:\System Volume Information\catalog.wci\00010001.ci Object is locked skipped
C:\System Volume Information\catalog.wci\cicat.fid Object is locked skipped
C:\System Volume Information\catalog.wci\cicat.hsh Object is locked skipped
C:\System Volume Information\catalog.wci\CiCL0001.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiP10000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiP20000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiPT0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiSL0001.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiSP0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiST0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\CiVP0000.000 Object is locked skipped
C:\System Volume Information\catalog.wci\INDEX.000 Object is locked skipped
C:\System Volume Information\catalog.wci\propstor.bk1 Object is locked skipped
C:\System Volume Information\catalog.wci\propstor.bk2 Object is locked skipped
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP748\change.log Object is locked skipped
C:\updaterInstall_108.exe/data0002 Infected: Trojan-Downloader.Win32.Keenval skipped
C:\updaterInstall_108.exe/data0004 Infected: Trojan-Downloader.Win32.Keenval skipped
C:\updaterInstall_108.exe/data0005 Infected: Trojan-Downloader.Win32.Keenval skipped
C:\updaterInstall_108.exe NSIS: infected - 3 skipped
C:\WINDOWS\$NtUninstallKB824141$\user32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB824141$\win32k.sys Object is locked skipped
C:\WINDOWS\$NtUninstallKB828028$\msasn1.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828035$\msgsvc.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828035$\wkssvc.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\catsrv.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\catsrvut.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\clbcatex.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\clbcatq.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\colbact.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\comadmin.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\comrepl.exe Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\comsvcs.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\comuid.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\es.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\msdtctm.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\mtxclu.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\mtxoci.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\ole32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB828741$\txflog.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\callcont.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\cmdevtgprov.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\evtgprov.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\gdi32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\h323.tsp Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\h323msp.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\lsasrv.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\mf3216.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\msgina.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\mst120.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\netapi32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\nmcom.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\rtcdll.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB835732$\schannel.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\dao360.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\expsrv.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msexch40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msexcl40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msjet40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msjetoledb40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msjint40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msjter40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msjtes40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msltus40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\mspbde40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msrd2x40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msrd3x40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msrepl40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\mstext40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\mswdat10.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\mswstr10.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\msxbde40.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB837001$\vbajet32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\fldrclnr.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\shell32.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\sxs.dll Object is locked skipped
C:\WINDOWS\$NtUninstallKB839645$\xpsp2res.dll Object is locked skipped
C:\WINDOWS\$NtUninstallQ828026$\msdxm.ocx Object is locked skipped
C:\WINDOWS\$NtUninstallQ828026$\wmpcore.dll Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\SYSTEM32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\SYSTEM32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\AppEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\Internet.evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SAM Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SecEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SysEvent.Evt Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM Object is locked skipped
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG Object is locked skipped
C:\WINDOWS\SYSTEM32\H323LOG.TXT Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\SYSTEM32\WBEM\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\WIADEBUG.LOG Object is locked skipped
C:\WINDOWS\WIASERVC.LOG Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:07:21 PM, on 5/23/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://yahoo.sbc.com/dsl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [diagent] "C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe" startup
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper200711281.dll
O16 - DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} (Disney Online Games ActiveX Control) - http://disney.go.com/pirates/online/testActiveX/built/signed/DisneyOnlineGames.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1142574875812
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Toolbar) - http://us.dl1.yimg.com/download.companion.yahoo.com/dl/toolbar/yiebio5_1_6_0.cab
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = www.lausd.k12.ca.us
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = www.lausd.k12.ca.us
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = www.lausd.k12.ca.us
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

--
End of file - 10673 bytes

cesarper

2008-05-24, 05:20

Ok, the error message pops up and goes away about 30 seconds later. I've managed to capture most of the message. In the title bar of the window that pops up, it says, "Failed to connect to camera". In the message part of the window, it says, "Please close the program, restart the camera and then restart the application to reconnect to WebCam support." Or something very similar to that (I tried to type it out before it went away, but it beat me). The way web cam is written (WebCam) is the way I saw it. I'll try to get that error message to pop up again so I could get the wording more accurate.

When I tried to uninstall the eLottoAlert program, I got the following error message:

Runtime Error (at -1:0):
Cannot Import dll:C:\Program Files\Winfall Publishing\eLottoAlert\Preparation.dll.

As you can see from the Uninstall List, it is still there.

Otherwise, the computer is running good, except when first starting up the computer and IE. It takes about 3-4 minutes for it to clear up, but once it does, it is ok. I've had the task manager open during this, and the CPU Usage is at 100% for most of the time during the slowdown. After the slowdown clears up, the CPU Usage shows a very low number (between 0%-20%).

Thanks again for all your help.

cesarper

2008-05-24, 06:03

Ok, I finally got that message transcribed. It says: "Failed to connect to camera" in the title bar, then, below the title bar, next to a red circle with a white X it says: "Please close the application, restart the camera and then restart the application to enable WebCAM support" It pops up shortly after opening IE and after whatever is causing the CPU to run at 100% dies down.

Also, I've noticed something in Task Manager. In the Processes tab, I noticed a "Image Name" titled " wowexec.exe" (space in front is intentional). I googled this and found conflicting statements about it (http://help.lockergnome.com/windows/wowexec-exe-trojan-virus-ftopict556825.html). As far as I know, nothing should be loading up in DOS, so maybe it is an indicator that there is another virus or trojan still in the computer. Hope this helps.

pskelley

2008-05-24, 14:35

Thanks for returning your information, trying to cover everything, if I miss anything, please call it to my attenton.

1) The hosts files is fine, here is some information:
http://www.accs-net.com/hosts/what_is_hosts.html
http://www.mvps.org/winhelp2002/hosts.htm

2) This item of malware >>> C:\updaterInstall_108.exe/data0002 ------> Trojan-Downloader.Win32.Keenval
Is showing in the last KOS and it could easily casuing the issue.
http://research.sunbelt-software.com/threatdisplay.aspx?name=Trojan-Downloader.Win32.Keenval&threatid=95221
Delete that file in red

3) Uninstall List

J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 11
Java(TM) 6 Update 2
Java(TM) 6 Update 3
Java(TM) 6 Update 5
See this: http://forums.spybot.info/showpost.php?p=12880&postcount=2

4) Viewpoint Media Player
For your information, Viewpoint is installed by aol probably without your knowledge. I suggest you uninstall this resource waster in Add Remove programs.
http://www.greatis.com/appdata/u/v/viewmgr.exe.htm
http://www.spywareinfo.com/newsletter/archives/2005/nov4.php#viewpoint
http://www.clickz.com/news/article.php/3561546

5) Check this, if that instance of Spybot with no number is an old version, uninstall it.
Spybot - Search & Destroy
Spybot - Search & Destroy 1.5.2.20

I can't spot anything that looks like a WebCam, have a look yourself, many programs I have no idea what they are. I suggest you make sure there is nothing there you do not know and I would remove anything you no longer need,

ArcSoft Camera Suite <<< could be this?

http://www.google.com/search?hl=en&q=Failed+to+connect+to+camera&btnG=Search
http://www.google.com/search?hl=en&q=Please+close+the+program%2C+restart+the+camera+and+then+restart+the+application+to+reconnect+to+WebCam+support&btnG=Search
http://www.liutilities.com/products/wintaskspro/processlibrary/wowexec/

As far as I know, nothing should be loading up in DOS, so maybe it is an indicator that there is another virus or trojan still in the computer. Hope this helps.
The problem is I left my troubleshooting behind years ago when I decided to concentrate on removing malware so my knowledge is limited.
Here is a good site to help with troubleshooting and high CPU usage:
http://kadaitcha.cx/index.html

A few things I see in the HJT log for your consideration:
Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 7:07:21 PM, on 5/23/2008
see this information which may benefit you:
http://www.netsquirrel.com/msconfig/msconfig_xp.html

The possibility the message could originate within these programs which you have running all of the time? Try turning them off in MSConfig and see if the message stops.
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe

C:\Program Files\Java\jre1.6.0_05\ <<< check Java for an update:
http://forums.spybot.info/showpost.php?p=12880&postcount=2

When I tried to uninstall the eLottoAlert program, I got the following error message:
Runtime Error (at -1:0):
Cannot Import dll:C:\Program Files\Winfall Publishing\eLottoAlert\Preparation.dll.
Navigate to the folder in red and see if you can just delete all of the junk.

Let me know if any of this information helps.

Thanks

cesarper

2008-05-30, 08:49

Ok, did a whole bunch of uninstalls of unnecessary items/games, removed the files that you told me to remove, and tried turning off those items in msconfig. I still get that initial lag when first logging into the computer, but it doesn't last as long. I've noticed that the 100% CPU usage ends when that webcam error message pops up. Which reminds me, not only do I still get that error message, but now it pops up every 10-15 minutes, whereas, before, it would only pop up once. Otherwise, everything seems to be running ok. Let me know.

pskelley

2008-05-30, 14:35

I've noticed that the 100% CPU usage ends when that webcam error message pops up.
Thanks for the feedback, this is not what I do but I will give it my best before I call it a day. If we are to stop this, we need more information. In reviewing the information so far, the KOS scan shows only this:

C:\updaterInstall_108.exe <<< be very sure that file has been deleted
Trojan-Downloader.Win32.Keenval
http://www.google.com/search?hl=en&q=Trojan-Downloader.Win32.Keenval&btnG=Google+Search

WebCam Error Message <<< can you get a screenshot of the error message in .jpeg and attach it to your next post?

Also, I've noticed something in Task Manager. In the Processes tab, I noticed a "Image Name" titled " wowexec.exe"
as I am sure you saw, there are many possibles this could be:
http://www.google.com/search?hl=en&q=wowexec.exe&btnG=Search

I've noticed that the 100% CPU usage ends when that webcam error message pops upSee if you can get a screenshot of Task Manager when it is running at 100% and post it also.

Let's try a MBAM scan to see if that program spots anything:
Download Malwarebytes' Anti-Malware to your desktop.
http://www.besttechie.net/tools/mbam-setup.exe

* Double-click mbam-setup.exe and follow the prompts to install the program.
* Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform FULL SCAN, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt
* Please post contents of that file & a new HJT log in your next reply.

Thanks

cesarper

2008-06-01, 04:04

Ok, here's the MBAM scan. It found quite a few things. I haven't been able to get the screenshots you asked for. I'll post them when I get them.

Malwarebytes' Anti-Malware 1.14
Database version: 811

7:02:35 PM 5/31/2008
mbam-log-5-31-2008 (19-02-25).txt

Scan type: Full Scan (C:\|)
Objects scanned: 173168
Time elapsed: 1 hour(s), 19 minute(s), 17 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 37
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 5
Files Infected: 17

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\mp.mediapops (Adware.Delphinmediaviewer) -> No action taken.
HKEY_CLASSES_ROOT\mp.mediapops.1 (Adware.Delphinmediaviewer) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{4438a5dc-e00b-41a0-b0e6-b63fd3b86eee} (Adware.Delphinmediaviewer) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{4767c447-ef15-42f2-8809-68adb7fa76f1} (Adware.Delphinmediaviewer) -> No action taken.
HKEY_CLASSES_ROOT\pae_bho.pedev_ielistener (Adware.Popups) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{5e47627b-d89e-442b-82a6-f2fab368621b} (Adware.Popups) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{e1412445-4ff8-410e-8d24-f2cf86b171a4} (Adware.Popups) -> No action taken.
HKEY_CLASSES_ROOT\pae_bho.pedev_ielistener.1 (Adware.Popups) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{90c61707-c8f8-43db-a25c-c1f4b18ee41e} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\puk.pukbho (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\puk.pukbho.1 (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{da0882fb-49a3-4a9e-bb09-5e15347b5647} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{edc4193f-34ad-4d07-aa87-e3fdb89e3e76} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{3c0c31a2-70a2-11d1-b69e-444553540000} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{1e587528-41aa-4f19-97e8-bb75acc3035c} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{2fcfb3fd-7184-4c42-aed3-30fff0119964} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{34fdd882-5530-4a90-89cd-416612c8855e} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{58c59f56-ca66-4b5d-9132-ecea5193be5a} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{665abe65-2c16-4341-b4b8-01ff799e8f4c} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{788e0d0e-caf7-473b-9183-76be6d30dc9a} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{7aa7d1c3-f0f8-460c-936d-b5886d0928eb} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{832786ec-9632-4919-8972-59f79d621c87} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{97284959-a553-4576-859c-b3b3ff283de0} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{a0ca55a1-a112-11d3-80d6-00500487b1c5} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{a4b977f5-1efc-4da0-b9c2-67c53cba140f} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{a9e67cbe-7a42-47be-962a-c07e73c34fba} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{aeb17fc4-2a52-4945-9866-81cc343a59e3} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{b0e9399e-fe6f-43b0-98d3-2f47080dde4a} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{bfcbf73b-6eb2-49c1-adca-cf0cd589b140} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{c4d86dc8-b73b-4470-9914-3dac14ee6f95} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{dc86768f-5adf-4d84-9de8-fd047b1fe8f5} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{ddd1e8ca-678d-4c9a-a472-ce9578b14dc5} (Spyware.Comet.Cursor) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{5d2d50f6-6be2-41a0-b827-1accd3e2e2f7} (Spyware.Comet.Cursor) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Screensavers.com (Adware.Comet) -> No action taken.
HKEY_CURRENT_USER\Software\MediaLoads (Adware.Medload) -> No action taken.

Registry Values Infected:
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{d49e9d35-254c-4c6a-9d17-95018d228ff5} (Adware.Starware) -> No action taken.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\Program Files\Screensavers.com (Adware.Comet) -> No action taken.
C:\Program Files\Screensavers.com\Wallpaper (Adware.Comet) -> No action taken.
C:\Program Files\PeDevice (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\tmp (Adware.Popups) -> No action taken.
C:\Program Files\MyWay (Adware.MyWay) -> No action taken.

Files Infected:
C:\Program Files\PeDevice\PeDev.dll (Adware.Popups) -> No action taken.
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP757\A0283528.exe (Trojan.KeenValue) -> No action taken.
C:\System Volume Information\_restore{987E0331-0F01-427C-A58A-7A2E4AABF84D}\RP757\A0284307.exe (Trojan.KeenValue) -> No action taken.
C:\Program Files\Screensavers.com\Wallpaper\Pink Rose.jpg (Adware.Comet) -> No action taken.
C:\Program Files\Screensavers.com\Wallpaper\swpstart.exe (Adware.Comet) -> No action taken.
C:\Program Files\PeDevice\communication.xml (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\Domain.Watchlist.txt (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\Downloader.exe (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\pae-options.xml (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\pae_url.xml (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\PeDev.exe (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\pedevPS.dll (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\Preparation.dll (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\search.watchlist.txt (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\statistic.xml (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\watchlist.xml (Adware.Popups) -> No action taken.
C:\Program Files\PeDevice\tmp\tmp.html (Adware.Popups) -> No action taken.

cesarper

2008-06-01, 04:09

As you can tell by the post above, I hadn't clicked on the remove all yet. But I did after I posted the log above. All were quaratined and deleted successfully.

Below is the HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:08:58 PM, on 5/31/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://yahoo.sbc.com/dsl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.sbc.com/dsl
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [diagent] "C:\Program Files\Creative\SBLive\Diagnostics\diagent.exe" startup
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0411.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper200711281.dll
O16 - DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} (Disney Online Games ActiveX Control) - http://disney.go.com/pirates/online/testActiveX/built/signed/DisneyOnlineGames.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1142574875812
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Toolbar) - http://us.dl1.yimg.com/download.companion.yahoo.com/dl/toolbar/yiebio5_1_6_0.cab
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = www.lausd.k12.ca.us
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = www.lausd.k12.ca.us
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = www.lausd.k12.ca.us
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe

--
End of file - 10541 bytes

cesarper

2008-06-01, 04:11

Oh, and yes, I made sure that file (C:\updaterInstall_108.exe) was deleted.

pskelley

2008-06-04, 13:03

Thanks for that information, Yahoo Messenger, MSNIM and Windows Messenger all have webcam software as part of the programs. You might try turning them off in System Configuration Utility (MSConfig) one at a time, then watch to see if the issue has stopped.
http://www.netsquirrel.com/msconfig/msconfig_xp.html

Some good information for you:
http://users.telenet.be/bluepatchy/miekiemoes/slowcomputer.html
http://www.microsoft.com/windowsxp/using/helpandsupport/learnmore/tips/mcgill1.mspx

Here is some great information from experts in this field that will help you stay clean and safe online.
http://users.telenet.be/bluepatchy/miekiemoes/prevention.html
http://forums.spybot.info/showthread.php?t=279
http://russelltexas.com/malware/allclear.htm
http://forum.malwareremoval.com/viewtopic.php?t=14
http://www.bleepingcomputer.com/forums/topict2520.html
http://cybercoyote.org/security/not-admin.shtml

http://www.malwarecomplaints.info/

Thanks...pskelley
Safer Networking Forums
http://www.spybot.info/en/donate/index.html
If you are reading this information...thank a teacher,
If you are reading it in English...thank a soldier.