Page 4 of 5 FirstFirst 12345 LastLast
Results 31 to 40 of 41

Thread: Zlob and Smitfruad C. infection.

  1. 2008-02-21, 07:52 #31
    HSwHH
    HSwHH is offline
    Member
    Join Date
    May 2007
    Posts
    39

    Default

    127.0.0.1 www.winmx-freebie.com
    127.0.0.1 winmx-music-download.com
    127.0.0.1 www.winmx-music-download.com
    127.0.0.1 winnanny.com
    127.0.0.1 www.winnanny.com
    127.0.0.1 winprotect.net
    127.0.0.1 winrar-download-now.com
    127.0.0.1 www.winrar-download-now.com
    127.0.0.1 winrar-hq.com
    127.0.0.1 www.winrar-hq.com
    127.0.0.1 winrar-stop.com
    127.0.0.1 www.winrar-stop.com
    127.0.0.1 winshow.biz
    127.0.0.1 winsoftware.com
    127.0.0.1 www.winsoftware.com
    127.0.0.1 wintvguide.com
    127.0.0.1 www.wintvguide.com
    127.0.0.1 win-virus-pro.com
    127.0.0.1 www.win-virus-pro.com
    127.0.0.1 winzip-11.com
    127.0.0.1 www.winzip-11.com
    127.0.0.1 winzip-hq.com
    127.0.0.1 www.winzip-hq.com
    127.0.0.1 wiresearch.com
    127.0.0.1 wish7.com
    127.0.0.1 wm.buhartes.info
    127.0.0.1 www.wm.buhartes.info
    127.0.0.1 wm.kannylizaciya.info
    127.0.0.1 www.wm.kannylizaciya.info
    127.0.0.1 wm.komforochka.info
    127.0.0.1 www.wm.komforochka.info
    127.0.0.1 wm.vother.info
    127.0.0.1 www.wm.vother.info
    127.0.0.1 wolfpacracing.com
    127.0.0.1 wonder-context.com
    127.0.0.1 www.wonder-context.com
    127.0.0.1 woool.100888290cs.com
    127.0.0.1 wordlist.jps.ru
    127.0.0.1 WorldAntiSpy.com
    127.0.0.1 www.WorldAntiSpy.com
    127.0.0.1 worldbestadult.com
    127.0.0.1 www.worldbestadult.com
    127.0.0.1 worldray.com
    127.0.0.1 www.worldray.com
    127.0.0.1 worldsecurityonline.biz
    127.0.0.1 www.worldsecurityonline.biz
    127.0.0.1 worldtostart.com
    127.0.0.1 www.worldtostart.com
    127.0.0.1 worldusa.com
    127.0.0.1 worldwideadvertisingservices.info
    127.0.0.1 www.worldwideadvertisingservices.info
    127.0.0.1 wowsearch.org
    127.0.0.1 www.wowsearch.org
    127.0.0.1 wpc2001.org
    127.0.0.1 wrs.mcboo.com
    127.0.0.1 wspzone.sexpornonline.com
    127.0.0.1 wsupereva.it
    127.0.0.1 www.wsupereva.it
    127.0.0.1 www.www2.p0rt2.com
    127.0.0.1 www2.p0rt2.com
    127.0.0.1 www224.paypopup.com
    127.0.0.1 www3.bigtrafficnetwork.com
    127.0.0.1 www3.hadesunharuikeya.com
    127.0.0.1 www4free.info
    127.0.0.1 www5.worldray.com
    127.0.0.1 www6.worldray.com
    127.0.0.1 www.www7.logih.com
    127.0.0.1 www7.logih.com
    127.0.0.1 wwwadobe-download-now.com
    127.0.0.1 www.www-audacity.com
    127.0.0.1 www-audacity.com
    127.0.0.1 wwwbet.net
    127.0.0.1 wwwbetting.net
    127.0.0.1 wwwCrazygirls-world.com
    127.0.0.1 wwwdownloadwizard.com
    127.0.0.1 www.www-free-tunes.com
    127.0.0.1 www-free-tunes.com
    127.0.0.1 wwwpokergames.com
    127.0.0.1 wwwpokerplayers.com
    127.0.0.1 wwwroulette.net
    127.0.0.1 www.wwwsearch.biz
    127.0.0.1 wwwsearch.biz
    127.0.0.1 wwwsearchdrive.info
    127.0.0.1 www.www-spyboot.com
    127.0.0.1 www-spyboot.com
    127.0.0.1 www.www-spybot.net
    127.0.0.1 www-spybot.net
    127.0.0.1 wwww.2211.net
    127.0.0.1 wwww.adnet-plus.com
    127.0.0.1 www.www-win-mx.com
    127.0.0.1 www-win-mx.com
    127.0.0.1 wwwxtremesoftware-ltd.com
    127.0.0.1 wwwyahoo.downloadznow.net
    127.0.0.1 www.wzdq.cn
    127.0.0.1 wzdq.cn
    127.0.0.1 x.full-tgp.net
    127.0.0.1 xads.cliks.org
    127.0.0.1 www.xat.com
    127.0.0.1 xat.com
    127.0.0.1 www.xathzesocc.com
    127.0.0.1 xathzesocc.com
    127.0.0.1 xbeta69.com
    127.0.0.1 www.xbxxrvnyes.com
    127.0.0.1 xbxxrvnyes.com
    127.0.0.1 xcomics4u.com
    127.0.0.1 xcorriere.it
    127.0.0.1 www.xcorriere.it
    127.0.0.1 x-google.net
    127.0.0.1 www.xibu315.com
    127.0.0.1 xibu315.com
    127.0.0.1 xic-bs.com
    127.0.0.1 www.xjupiter.com
    127.0.0.1 xjupiter.com
    127.0.0.1 xldr.com
    127.0.0.1 x-library.com
    127.0.0.1 xlola.underagehost.com
    127.0.0.1 xmlsearch.mygeek.com
    127.0.0.1 xorriere.it
    127.0.0.1 www.xorriere.it
    127.0.0.1 www.xosearchox.com
    127.0.0.1 xosearchox.com
    127.0.0.1 xp.attrezzi.biz
    127.0.0.1 xp18.com
    127.0.0.1 www.xpassgenerator.com
    127.0.0.1 xpassgenerator.com
    127.0.0.1 www.xpasswordmanager.com
    127.0.0.1 xpasswordmanager.com
    127.0.0.1 www.xp-vista.com
    127.0.0.1 xp-vista.com
    127.0.0.1 www.x-ratedclips.com
    127.0.0.1 x-ratedclips.com
    127.0.0.1 www.xrenoder.com
    127.0.0.1 xrenoder.com
    127.0.0.1 xrenosearch.com
    127.0.0.1 xrensmagpost.com
    127.0.0.1 www.xsec.org
    127.0.0.1 xsec.org
    127.0.0.1 xsex.ws
    127.0.0.1 www.xsremover.com
    127.0.0.1 xsremover.com
    127.0.0.1 www.xtipp.de
    127.0.0.1 xtipp.de
    127.0.0.1 xtosearch.biz
    127.0.0.1 www.xtosearch.biz
    127.0.0.1 xtragay.com
    127.0.0.1 xtremesoftware-ltd.com
    127.0.0.1 xu.pl
    127.0.0.1 xu.xu.pl
    127.0.0.1 xupiter.com
    127.0.0.1 www.xupiter.com
    127.0.0.1 www.xvgate.com
    127.0.0.1 xvgate.com
    127.0.0.1 x-webdesign.com
    127.0.0.1 www.xwebsearch.biz
    127.0.0.1 xwebsearch.biz
    127.0.0.1 xxlblog.info
    127.0.0.1 www.xxlblog.info
    127.0.0.1 xxx.com
    127.0.0.1 www.xxx.com
    127.0.0.1 www.xxxallvideo.com
    127.0.0.1 xxxallvideo.com
    127.0.0.1 xxxcategories.com
    127.0.0.1 xxxemailxxx.com
    127.0.0.1 www.xxxmovietour.com
    127.0.0.1 xxxmovietour.com
    127.0.0.1 www.xxxteenfilm.com
    127.0.0.1 xxxteenfilm.com
    127.0.0.1 xxxtoolbar.com
    127.0.0.1 www.xxxzonevideo.com
    127.0.0.1 xxxzonevideo.com
    127.0.0.1 xzoomy.com
    127.0.0.1 www.yahabags.com
    127.0.0.1 yahabags.com
    127.0.0.1 yahoo.downloadznow.net
    127.0.0.1 yahoo.panet.org
    127.0.0.1 yboeragu.com
    127.0.0.1 www.yboeragu.com
    127.0.0.1 yeak.net
    127.0.0.1 y-e-l-l-o-w.com
    127.0.0.1 yellow500.com
    127.0.0.1 yezol.com
    127.0.0.1 ygoogle.it
    127.0.0.1 www.ygoogle.it
    127.0.0.1 www.ygsondheks.info
    127.0.0.1 ygsondheks.info
    127.0.0.1 www.yim-stop.com
    127.0.0.1 yim-stop.com
    127.0.0.1 yiscali.it
    127.0.0.1 www.yiscali.it
    127.0.0.1 ymctavxiz.biz
    127.0.0.1 www.ymctavxiz.biz
    127.0.0.1 www.yoogee.com
    127.0.0.1 yoogee.com
    127.0.0.1 yoogle.it
    127.0.0.1 www.yoogle.it
    127.0.0.1 yootube.info
    127.0.0.1 www.yops.biz
    127.0.0.1 yops.biz
    127.0.0.1 youfindall.com
    127.0.0.1 youfindall.net
    127.0.0.1 yourbookmarks.info
    127.0.0.1 yourbookmarks.ws
    127.0.0.1 www.yourcodec.com
    127.0.0.1 yourcodec.com
    127.0.0.1 www.yourieprotect.com
    127.0.0.1 yourieprotect.com
    127.0.0.1 www.youriesafety.com
    127.0.0.1 youriesafety.com
    127.0.0.1 www.youriesecure.com
    127.0.0.1 youriesecure.com
    127.0.0.1 your-prescriptions.net
    127.0.0.1 www.yoursearchspace.com
    127.0.0.1 yoursearchspace.com
    127.0.0.1 yoursitebar.com
    127.0.0.1 you-search.com.ru
    127.0.0.1 you-search.com
    127.0.0.1 ypir.com
    127.0.0.1 ysa-info.net
    127.0.0.1 www.ysbweb.com
    127.0.0.1 ysbweb.com
    127.0.0.1 ytiscali.it
    127.0.0.1 www.ytiscali.it
    127.0.0.1 ytrenitalia.it
    127.0.0.1 www.ytrenitalia.it
    127.0.0.1 yukohamano.com
    127.0.0.1 yunibo.it
    127.0.0.1 www.yunibo.it
    127.0.0.1 ywebsearch.info
    127.0.0.1 www.zabywjwzlr.biz.biz
    127.0.0.1 zabywjwzlr.biz.biz
    127.0.0.1 zalitalia.it
    127.0.0.1 www.zalitalia.it
    127.0.0.1 www.zangocash.com
    127.0.0.1 zangocash.com
    127.0.0.1 zapros.com
    127.0.0.1 www.zcodec.com
    127.0.0.1 zcodec.com
    127.0.0.1 www.zdrqmpad.com
    127.0.0.1 zdrqmpad.com
    127.0.0.1 www.zelaznyworld.com
    127.0.0.1 zelaznyworld.com
    127.0.0.1 www.zenotecnico.com
    127.0.0.1 zenotecnico.com
    127.0.0.1 www.zenotecnico2.com
    127.0.0.1 zenotecnico2.com
    127.0.0.1 zero.bestmanage.org
    127.0.0.1 zero.bestmanage0.org
    127.0.0.1 zero.bestmanage1.org
    127.0.0.1 zero.bestmanage2.org
    127.0.0.1 zero.bestmanage3.org
    127.0.0.1 zero.bestmanage4.org
    127.0.0.1 zero.bestmanage5.org
    127.0.0.1 zero.bestmanage6.org
    127.0.0.1 zero.bestmanage7.org
    127.0.0.1 zero.bestmanage8.org
    127.0.0.1 zero.bestmanage9.org
    127.0.0.1 zero.serverc.org
    127.0.0.1 zero.sisdotnet.com
    127.0.0.1 www.zero-codec.com
    127.0.0.1 zero-codec.com
    127.0.0.1 zesearch.com
    127.0.0.1 www.zestyfind.com
    127.0.0.1 zestyfind.com
    127.0.0.1 www.zfxaqzkevi.com
    127.0.0.1 zfxaqzkevi.com
    127.0.0.1 www.zhmbscwdgk.biz
    127.0.0.1 zhmbscwdgk.biz
    127.0.0.1 www.zipcodec.com
    127.0.0.1 zipcodec.com
    127.0.0.1 ziportal.com
    127.0.0.1 zipportal.com
    127.0.0.1 www.zippy-lookup.com
    127.0.0.1 zippy-lookup.com
    127.0.0.1 www.zjkjw.gov.cn
    127.0.0.1 zjkjw.gov.cn
    127.0.0.1 www.znext.com
    127.0.0.1 znext.com
    127.0.0.1 www.zonealarm-download-now.com
    127.0.0.1 zonealarm-download-now.com
    127.0.0.1 www.zonealarm-stop.com
    127.0.0.1 zonealarm-stop.com
    127.0.0.1 www.zone-media.com
    127.0.0.1 zone-media.com
    127.0.0.1 zoneoffreeporn.com
    127.0.0.1 zoofil.com
    127.0.0.1 zoomegasite.com
    127.0.0.1 zpwebsource.com
    127.0.0.1 www.zpwebsource.com
    127.0.0.1 zqavanjpn.biz
    127.0.0.1 www.zqavanjpn.biz
    127.0.0.1 www.z-quest.com
    127.0.0.1 z-quest.com
    127.0.0.1 zsupereva.it
    127.0.0.1 www.zsupereva.it
    127.0.0.1 www.zurrusco.com
    127.0.0.1 zurrusco.com
    127.0.0.1 zvimigdal.com
    127.0.0.1 www.zxlinks.com
    127.0.0.1 zxlinks.com
    127.0.0.1 zyban-zocor-levitra.com
    127.0.0.1 errordoctor.com
    127.0.0.1 www.errordoctor.com
    127.0.0.1 performanceoptimizer.com
    127.0.0.1 www.performanceoptimizer.com
    127.0.0.1 680180.net
    127.0.0.1 www.680180.net
    127.0.0.1 aaabesthomepage.com
    127.0.0.1 www.aaabesthomepage.com
    127.0.0.1 adlogix.com
    127.0.0.1 www.adlogix.com
    127.0.0.1 decknews.com
    127.0.0.1 www.decknews.com
    127.0.0.1 update.680180.net
    127.0.0.1 websearch24.com
    127.0.0.1 www.websearch24.com
    127.0.0.1 addioerrori.com
    127.0.0.1 www.addioerrori.com
    127.0.0.1 antivirusgereedschap.com
    127.0.0.1 www.antivirusgereedschap.com
    127.0.0.1 aucunsvirus.com
    127.0.0.1 www.aucunsvirus.com
    127.0.0.1 echterschutz.com
    127.0.0.1 www.echterschutz.com
    127.0.0.1 fiksfeil.com
    127.0.0.1 www.fiksfeil.com
    127.0.0.1 harddrevvagt.com
    127.0.0.1 www.harddrevvagt.com
    127.0.0.1 herramientadereparacion.com
    127.0.0.1 www.herramientadereparacion.com
    127.0.0.1 hukommelsesbeskytter.com
    127.0.0.1 www.hukommelsesbeskytter.com
    127.0.0.1 kyoishusei.com
    127.0.0.1 www.kyoishusei.com
    127.0.0.1 megaviruskit.com
    127.0.0.1 www.megaviruskit.com
    127.0.0.1 memoiredefenseur.com
    127.0.0.1 www.memoiredefenseur.com
    127.0.0.1 mendingtool.com
    127.0.0.1 www.mendingtool.com
    127.0.0.1 minnesverktyg.com
    127.0.0.1 www.minnesverktyg.com
    127.0.0.1 nientevirus.com
    127.0.0.1 www.nientevirus.com
    127.0.0.1 pcopschoner.com
    127.0.0.1 www.pcopschoner.com
    127.0.0.1 pcopschoningsstel.com
    127.0.0.1 www.pcopschoningsstel.com
    127.0.0.1 puliscitutto.com
    127.0.0.1 www.puliscitutto.com
    127.0.0.1 rensningverktyg.com
    127.0.0.1 www.rensningverktyg.com
    127.0.0.1 reparameacas.com
    127.0.0.1 www.reparameacas.com
    127.0.0.1 reparamenazas.com
    127.0.0.1 www.reparamenazas.com
    127.0.0.1 reparetudo.com
    127.0.0.1 www.reparetudo.com
    127.0.0.1 shufukutsuru.com
    127.0.0.1 www.shufukutsuru.com
    127.0.0.1 sicheressystem.com
    127.0.0.1 www.sicheressystem.com
    127.0.0.1 syskontroller.com
    127.0.0.1 www.syskontroller.com
    127.0.0.1 trustedantivirus.com
    127.0.0.1 www.trustedantivirus.com
    127.0.0.1 utiledeprotection.com
    127.0.0.1 www.utiledeprotection.com
    127.0.0.1 web-fastserve.com
    127.0.0.1 www.web-fastserve.com
    127.0.0.1 prettycodec.com
    127.0.0.1 www.prettycodec.com
    127.0.0.1 ricenhancement.com
    127.0.0.1 www.ricenhancement.com
    127.0.0.1 hotcodec.net
    127.0.0.1 www.hotcodec.net
    127.0.0.1 nicecodec.net
    127.0.0.1 www.nicecodec.net
    127.0.0.1 hoetechnology.com
    127.0.0.1 www.hoetechnology.com
    127.0.0.1 xyzlimited.com
    127.0.0.1 www.xyzlimited.com
    127.0.0.1 servicevah.com
    127.0.0.1 www.servicevah.com
    127.0.0.1 webspyshield.com
    127.0.0.1 www.webspyshield.com
    127.0.0.1 bestsearch.cc
    127.0.0.1 www.bestsearch.cc
    127.0.0.1 dapsol.com
    127.0.0.1 www.dapsol.com
    127.0.0.1 hacker.com.cn
    127.0.0.1 www.hacker.com.cn
    127.0.0.1 envolo.peopleonpage.com
    127.0.0.1 node2.ocslab.com
    127.0.0.1 ocslab.com
    127.0.0.1 www.ocslab.com
    127.0.0.1 peopleonpage.com
    127.0.0.1 www.peopleonpage.com
    127.0.0.1 adchannel.contextplus.net
    127.0.0.1 contextplus.net
    127.0.0.1 www.contextplus.net
    127.0.0.1 dload.contextplus.net
    127.0.0.1 download.contextplus.net
    127.0.0.1 ge.net
    127.0.0.1 www.ge.net
    127.0.0.1 70-music.com
    127.0.0.1 www.70-music.com
    127.0.0.1 80-music.com
    127.0.0.1 www.80-music.com
    127.0.0.1 90-music.com
    127.0.0.1 www.90-music.com
    127.0.0.1 addetect.com
    127.0.0.1 www.addetect.com
    127.0.0.1 adsniffer.com
    127.0.0.1 www.adsniffer.com
    127.0.0.1 adwarecommander.com
    127.0.0.1 www.adwarecommander.com
    127.0.0.1 adwaregold.com
    127.0.0.1 www.adwaregold.com
    127.0.0.1 adwarepatrol.com
    127.0.0.1 www.adwarepatrol.com
    127.0.0.1 adwareplatinum.com
    127.0.0.1 www.adwareplatinum.com
    127.0.0.1 adwareremover.ws
    127.0.0.1 www.adwareremover.ws
    127.0.0.1 adwaresafety.com
    127.0.0.1 www.adwaresafety.com
    127.0.0.1 adwarexp.com
    127.0.0.1 www.adwarexp.com
    127.0.0.1 alertspy.com
    127.0.0.1 www.alertspy.com
    127.0.0.1 americanautobargains.com
    127.0.0.1 www.americanautobargains.com
    127.0.0.1 antispamassistant.com
    127.0.0.1 www.antispamassistant.com
    127.0.0.1 antispamdeluxe.com
    127.0.0.1 www.antispamdeluxe.com
    127.0.0.1 antispyadvanced.com
    127.0.0.1 www.antispyadvanced.com
    127.0.0.1 antispywarexp.com
    127.0.0.1 www.antispywarexp.com
    127.0.0.1 antivirusadvance.com
    127.0.0.1 www.antivirusadvance.com
    127.0.0.1 antiviruspremium.com
    127.0.0.1 www.antiviruspremium.com
    127.0.0.1 ares.click-new-download.com
    127.0.0.1 www.ares.click-new-download.com
    127.0.0.1 autobargains.org
    127.0.0.1 www.autobargains.org
    127.0.0.1 autobargainsnetwork.com
    127.0.0.1 www.autobargainsnetwork.com
    127.0.0.1 avadvance.com
    127.0.0.1 www.avadvance.com
    127.0.0.1 bearshare.click-new-download.com
    127.0.0.1 www.bearshare.click-new-download.com
    127.0.0.1 bittorrent.click-new-download.com
    127.0.0.1 www.bittorrent.click-new-download.com
    127.0.0.1 burningsite.com
    127.0.0.1 www.burningsite.com
    127.0.0.1 cdcopysite.com
    127.0.0.1 www.cdcopysite.com
    127.0.0.1 cinemadownload.com
    127.0.0.1 www.cinemadownload.com
    127.0.0.1 courtrecordslookup.com
    127.0.0.1 www.courtrecordslookup.com
    127.0.0.1 dateanybabe.com
    127.0.0.1 www.dateanybabe.com
    127.0.0.1 dateanychick.com
    127.0.0.1 www.dateanychick.com
    127.0.0.1 datingdoctorsite.com
    127.0.0.1 www.datingdoctorsite.com
    127.0.0.1 detectivehound.com
    127.0.0.1 www.detectivehound.com
    127.0.0.1 detectivesearches.com
    127.0.0.1 www.detectivesearches.com
    127.0.0.1 downloadacceleratorsite.com
    127.0.0.1 www.downloadacceleratorsite.com
    127.0.0.1 downloadaresnow.com
    127.0.0.1 www.downloadaresnow.com
    127.0.0.1 dvdxgold.com
    127.0.0.1 www.dvdxgold.com
    127.0.0.1 dvdxpremium.com
    127.0.0.1 www.dvdxpremium.com
    127.0.0.1 easycdrip.com
    127.0.0.1 www.easycdrip.com
    127.0.0.1 easymovieplayer.com
    127.0.0.1 www.easymovieplayer.com
    127.0.0.1 easymus.cn
    127.0.0.1 www.easymus.cn
    127.0.0.1 easypspdownloads.com
    127.0.0.1 www.easypspdownloads.com
    127.0.0.1 e-mp3now.com
    127.0.0.1 www.e-mp3now.com
    127.0.0.1 emule.click-new-download.com
    127.0.0.1 www.emule.click-new-download.com
    127.0.0.1 etdscanner.com
    127.0.0.1 www.etdscanner.com
    127.0.0.1 ezdvdx.com
    127.0.0.1 www.ezdvdx.com
    127.0.0.1 fastmp.net
    127.0.0.1 www.fastmp.net
  2. 2008-02-21, 07:53 #32
    HSwHH
    HSwHH is offline
    Member
    Join Date
    May 2007
    Posts
    39

    Default

    127.0.0.1 fastpspdownloads.com
    127.0.0.1 www.fastpspdownloads.com
    127.0.0.1 fasttvdownloads.com
    127.0.0.1 www.fasttvdownloads.com
    127.0.0.1 fidoproblems.com
    127.0.0.1 www.fidoproblems.com
    127.0.0.1 filesharing-downloads.com
    127.0.0.1 www.filesharing-downloads.com
    127.0.0.1 filevoom.com
    127.0.0.1 www.filevoom.com
    127.0.0.1 firewallgold.com
    127.0.0.1 www.firewallgold.com
    127.0.0.1 firewallprotectionpro.com
    127.0.0.1 www.firewallprotectionpro.com
    127.0.0.1 firewallprotectionsite.com
    127.0.0.1 www.firewallprotectionsite.com
    127.0.0.1 firewallprotector.com
    127.0.0.1 www.firewallprotector.com
    127.0.0.1 frostwire.click-new-download.com
    127.0.0.1 www.frostwire.click-new-download.com
    127.0.0.1 fullmusicdownload.com
    127.0.0.1 www.fullmusicdownload.com
    127.0.0.1 fullpaidsurveys.com
    127.0.0.1 www.fullpaidsurveys.com
    127.0.0.1 fullsoftwarecenter.com
    127.0.0.1 www.fullsoftwarecenter.com
    127.0.0.1 fulltvdownloading.com
    127.0.0.1 www.fulltvdownloading.com
    127.0.0.1 getpcmusic.com
    127.0.0.1 www.getpcmusic.com
    127.0.0.1 get-zune.com
    127.0.0.1 www.get-zune.com
    127.0.0.1 goldensurvey.com
    127.0.0.1 www.goldensurvey.com
    127.0.0.1 guyvsgirl.com
    127.0.0.1 www.guyvsgirl.com
    127.0.0.1 hotmp3download.com
    127.0.0.1 www.hotmp3download.com
    127.0.0.1 hotmp3now.com
    127.0.0.1 www.hotmp3now.com
    127.0.0.1 imesh.click-new-download.com
    127.0.0.1 www.imesh.click-new-download.com
    127.0.0.1 imp3download.com
    127.0.0.1 www.imp3download.com
    127.0.0.1 imusicadvance.com
    127.0.0.1 www.imusicadvance.com
    127.0.0.1 instantpsp.com
    127.0.0.1 www.instantpsp.com
    127.0.0.1 ipo.net
    127.0.0.1 www.ipo.net
    127.0.0.1 ipoddownloadingpro.com
    127.0.0.1 www.ipoddownloadingpro.com
    127.0.0.1 ipod-wiz.com
    127.0.0.1 www.ipod-wiz.com
    127.0.0.1 ipspdownload.com
    127.0.0.1 www.ipspdownload.com
    127.0.0.1 itvdownload.com
    127.0.0.1 www.itvdownload.com
    127.0.0.1 k9instructor.com
    127.0.0.1 www.k9instructor.com
    127.0.0.1 klitegeneration.com
    127.0.0.1 www.klitegeneration.com
    127.0.0.1 k-litepro.com
    127.0.0.1 www.k-litepro.com
    127.0.0.1 limewire.click-new-download.com
    127.0.0.1 www.limewire.click-new-download.com
    127.0.0.1 masterpsp.com
    127.0.0.1 www.masterpsp.com
    127.0.0.1 mediaburning.com
    127.0.0.1 www.mediaburning.com
    127.0.0.1 microantivirus.com
    127.0.0.1 www.microantivirus.com
    127.0.0.1 microantivirusxp.com
    127.0.0.1 www.microantivirusxp.com
    127.0.0.1 morpheus.click-new-download.com
    127.0.0.1 www.morpheus.click-new-download.com
    127.0.0.1 moviedownloadreview.biz
    127.0.0.1 www.moviedownloadreview.biz
    127.0.0.1 mp3downloadin.net
    127.0.0.1 www.mp3downloadin.net
    127.0.0.1 mp3downloadpro.com
    127.0.0.1 www.mp3downloadpro.com
    127.0.0.1 mp3downloadsnow.com
    127.0.0.1 www.mp3downloadsnow.com
    127.0.0.1 mp3easyplay.com
    127.0.0.1 www.mp3easyplay.com
    127.0.0.1 mp3musicdirect.com
    127.0.0.1 www.mp3musicdirect.com
    127.0.0.1 mp3musichit.com
    127.0.0.1 www.mp3musichit.com
    127.0.0.1 mp3must.com
    127.0.0.1 www.mp3must.com
    127.0.0.1 mp3review.biz
    127.0.0.1 www.mp3review.biz
    127.0.0.1 mp3universal.net
    127.0.0.1 www.mp3universal.net
    127.0.0.1 musicaccess.com
    127.0.0.1 www.musicaccess.com
    127.0.0.1 musicsite.com
    127.0.0.1 www.musicsite.com
    127.0.0.1 myipodaccess.com
    127.0.0.1 www.myipodaccess.com
    127.0.0.1 my-ipodaccess.com
    127.0.0.1 www.my-ipodaccess.com
    127.0.0.1 mypspcenter.com
    127.0.0.1 www.mypspcenter.com
    127.0.0.1 mypspdownloading.com
    127.0.0.1 www.mypspdownloading.com
    127.0.0.1 myvirusguardian.com
    127.0.0.1 www.myvirusguardian.com
    127.0.0.1 netdogtrainer.com
    127.0.0.1 www.netdogtrainer.com
    127.0.0.1 netfreemoney.com
    127.0.0.1 www.netfreemoney.com
    127.0.0.1 netonlineinvestigators.com
    127.0.0.1 www.netonlineinvestigators.com
    127.0.0.1 netpaidsurveys.com
    127.0.0.1 www.netpaidsurveys.com
    127.0.0.1 netpspdownloads.com
    127.0.0.1 www.netpspdownloads.com
    127.0.0.1 netpspmovies.com
    127.0.0.1 www.netpspmovies.com
    127.0.0.1 onlineinvestigator.com
    127.0.0.1 www.onlineinvestigator.com
    127.0.0.1 paidshopping.com
    127.0.0.1 www.paidshopping.com
    127.0.0.1 paidsurveys.com
    127.0.0.1 www.paidsurveys.com
    127.0.0.1 penile-enlargement.biz
    127.0.0.1 www.penile-enlargement.biz
    127.0.0.1 peoplelookup.info
    127.0.0.1 www.peoplelookup.info
    127.0.0.1 peopleregistry.info
    127.0.0.1 www.peopleregistry.info
    127.0.0.1 peoplesearchengine.info
    127.0.0.1 www.peoplesearchengine.info
    127.0.0.1 pestbot.com
    127.0.0.1 www.pestbot.com
    127.0.0.1 pestguardian.com
    127.0.0.1 www.pestguardian.com
    127.0.0.1 platinumrevi.ws
    127.0.0.1 www.platinumrevi.ws
    127.0.0.1 proadware.com
    127.0.0.1 www.proadware.com
    127.0.0.1 publicrecordlookup.com
    127.0.0.1 www.publicrecordlookup.com
    127.0.0.1 quickdvdcopy.com
    127.0.0.1 www.quickdvdcopy.com
    127.0.0.1 quickipoddownloads.com
    127.0.0.1 www.quickipoddownloads.com
    127.0.0.1 registryassistant.com
    127.0.0.1 www.registryassistant.com
    127.0.0.1 registrydebug.com
    127.0.0.1 www.registrydebug.com
    127.0.0.1 registryrepair.ws
    127.0.0.1 www.registryrepair.ws
    127.0.0.1 repocarfinder.com
    127.0.0.1 www.repocarfinder.com
    127.0.0.1 reverseindexlookup.com
    127.0.0.1 www.reverseindexlookup.com
    127.0.0.1 reversephonesite.com
    127.0.0.1 www.reversephonesite.com
    127.0.0.1 shareaza.click-new-download.com
    127.0.0.1 www.shareaza.click-new-download.com
    127.0.0.1 softwaresite.com
    127.0.0.1 www.softwaresite.com
    127.0.0.1 spyadvanced.com
    127.0.0.1 www.spyadvanced.com
    127.0.0.1 spywarecommander.com
    127.0.0.1 www.spywarecommander.com
    127.0.0.1 spywaredeluxe.com
    127.0.0.1 www.spywaredeluxe.com
    127.0.0.1 spywareremoval.ws
    127.0.0.1 www.spywareremoval.ws
    127.0.0.1 spywarexp.com
    127.0.0.1 www.spywarexp.com
    127.0.0.1 suprnova.cn
    127.0.0.1 www.suprnova.cn
    127.0.0.1 thespamblock.com
    127.0.0.1 www.thespamblock.com
    127.0.0.1 topmp3choices.com
    127.0.0.1 www.topmp3choices.com
    127.0.0.1 tvadvanced.com
    127.0.0.1 www.tvadvanced.com
    127.0.0.1 tvnowsite.com
    127.0.0.1 www.tvnowsite.com
    127.0.0.1 tvshowcollection.com
    127.0.0.1 www.tvshowcollection.com
    127.0.0.1 ultimatemp3player.com
    127.0.0.1 www.ultimatemp3player.com
    127.0.0.1 ultimatevideosite.com
    127.0.0.1 www.ultimatevideosite.com
    127.0.0.1 unknownip.com
    127.0.0.1 www.unknownip.com
    127.0.0.1 unlimite.net
    127.0.0.1 www.unlimite.net
    127.0.0.1 unlimitedmp3downloads.com
    127.0.0.1 www.unlimitedmp3downloads.com
    127.0.0.1 unlimitedtvshowdownload.com
    127.0.0.1 www.unlimitedtvshowdownload.com
    127.0.0.1 videoplayersite.com
    127.0.0.1 www.videoplayersite.com
    127.0.0.1 viruscrusher.com
    127.0.0.1 www.viruscrusher.com
    127.0.0.1 virusnuke.com
    127.0.0.1 www.virusnuke.com
    127.0.0.1 virusscansite.com
    127.0.0.1 www.virusscansite.com
    127.0.0.1 webaccelerating.com
    127.0.0.1 www.webaccelerating.com
    127.0.0.1 webinvestigator.com
    127.0.0.1 www.webinvestigator.com
    127.0.0.1 webiphoneaccess.com
    127.0.0.1 www.webiphoneaccess.com
    127.0.0.1 webiphonedownloads.com
    127.0.0.1 www.webiphonedownloads.com
    127.0.0.1 webipoddownload.com
    127.0.0.1 www.webipoddownload.com
    127.0.0.1 webpspdownload.com
    127.0.0.1 www.webpspdownload.com
    127.0.0.1 winmx.click-new-download.com
    127.0.0.1 www.winmx.click-new-download.com
    127.0.0.1 click-new-download.com
    127.0.0.1 www.click-new-download.com
    127.0.0.1 mp3mus.cn
    127.0.0.1 www.mp3mus.cn
    127.0.0.1 clckm.com
    127.0.0.1 www.clckm.com
    127.0.0.1 forseo.com
    127.0.0.1 www.forseo.com
    127.0.0.1 searchdom.net
    127.0.0.1 www.searchdom.net
    127.0.0.1 adultsonlyvids.com
    127.0.0.1 www.adultsonlyvids.com
    127.0.0.1 bestfuckvids.com
    127.0.0.1 www.bestfuckvids.com
    127.0.0.1 bestxclips.com
    127.0.0.1 www.bestxclips.com
    127.0.0.1 bestxxxmpegs.com
    127.0.0.1 www.bestxxxmpegs.com
    127.0.0.1 downloadxmoveis.com
    127.0.0.1 www.downloadxmoveis.com
    127.0.0.1 downloadxvids.com
    127.0.0.1 www.downloadxvids.com
    127.0.0.1 dvicodec.com
    127.0.0.1 www.dvicodec.com
    127.0.0.1 efcsoftware.com
    127.0.0.1 www.efcsoftware.com
    127.0.0.1 exclusivexxxclips.com
    127.0.0.1 www.exclusivexxxclips.com
    127.0.0.1 freeclipoftheday.com
    127.0.0.1 www.freeclipoftheday.com
    127.0.0.1 freefuckmovs.com
    127.0.0.1 www.freefuckmovs.com
    127.0.0.1 fulltimevideos.com
    127.0.0.1 www.fulltimevideos.com
    127.0.0.1 getdailyimages.com
    127.0.0.1 www.getdailyimages.com
    127.0.0.1 getfreepornvideo.com
    127.0.0.1 www.getfreepornvideo.com
    127.0.0.1 getpornvideoz.com
    127.0.0.1 www.getpornvideoz.com
    127.0.0.1 getxmovies.com
    127.0.0.1 www.getxmovies.com
    127.0.0.1 gigacodec.net
    127.0.0.1 www.gigacodec.net
    127.0.0.1 givemepornvids.com
    127.0.0.1 www.givemepornvids.com
    127.0.0.1 hqadultvideos.com
    127.0.0.1 www.hqadultvideos.com
    127.0.0.1 hqexplicitvids.com
    127.0.0.1 www.hqexplicitvids.com
    127.0.0.1 hugefreevids.com
    127.0.0.1 www.hugefreevids.com
    127.0.0.1 imagesezine.com
    127.0.0.1 www.imagesezine.com
    127.0.0.1 morexvids.com
    127.0.0.1 www.morexvids.com
    127.0.0.1 mpegcodec.net
    127.0.0.1 www.mpegcodec.net
    127.0.0.1 mpeghouse.com
    127.0.0.1 www.mpeghouse.com
    127.0.0.1 newpornmovs.com
    127.0.0.1 www.newpornmovs.com
    127.0.0.1 onlybestpornmovies.com
    127.0.0.1 www.onlybestpornmovies.com
    127.0.0.1 pbaperformance.com
    127.0.0.1 www.pbaperformance.com
    127.0.0.1 pornclipstube.com
    127.0.0.1 www.pornclipstube.com
    127.0.0.1 pornmoviesindex.com
    127.0.0.1 www.pornmoviesindex.com
    127.0.0.1 privatexclips.com
    127.0.0.1 www.privatexclips.com
    127.0.0.1 sexclipsdownload.com
    127.0.0.1 www.sexclipsdownload.com
    127.0.0.1 smutgates.com
    127.0.0.1 www.smutgates.com
    127.0.0.1 spicypornvideos.com
    127.0.0.1 www.spicypornvideos.com
    127.0.0.1 topsmutclips.com
    127.0.0.1 www.topsmutclips.com
    127.0.0.1 x-porngalleries.com
    127.0.0.1 www.x-porngalleries.com
    127.0.0.1 x-pornmoviez.com
    127.0.0.1 www.x-pornmoviez.com
    127.0.0.1 xrdenterprise.com
    127.0.0.1 www.xrdenterprise.com
    127.0.0.1 xtravideos.com
    127.0.0.1 www.xtravideos.com
    127.0.0.1 xvidscollection.com
    127.0.0.1 www.xvidscollection.com
    127.0.0.1 xxxpornmovs.com
    127.0.0.1 www.xxxpornmovs.com
    127.0.0.1 yourphotozone.com
    127.0.0.1 www.yourphotozone.com
    127.0.0.1 ibsprogram.com
    127.0.0.1 wwwibsprogram.com
    127.0.0.1 nfzsolution.com
    127.0.0.1 www.nfzsolution.com
    127.0.0.1 ixcodec.com
    127.0.0.1 www.ixcodec.com
    127.0.0.1 delficodec.com
    127.0.0.1 www.delficodec.com
    127.0.0.1 www.ibsprogram.com
    127.0.0.1 affiliate.idownload.com
    127.0.0.1 hushware.com
    127.0.0.1 www.hushware.com
    127.0.0.1 idbl.idblg.com
    127.0.0.1 idblg.com
    127.0.0.1 www.idblg.com
    127.0.0.1 idownload.com
    127.0.0.1 www.idownload.com
    127.0.0.1 in.hushware.com
    127.0.0.1 in.popupblocker.com
    127.0.0.1 in.spywareavenger.com
    127.0.0.1 popupblocker.com
    127.0.0.1 www.popupblocker.com
    127.0.0.1 spywareavenger.com
    127.0.0.1 www.spywareavenger.com
    127.0.0.1 virushunter.com
    127.0.0.1 www.virushunter.com
    127.0.0.1 bestoffersnetworks.com
    127.0.0.1 www.bestoffersnetworks.com
    127.0.0.1 callinghome.biz
    127.0.0.1 www.callinghome.biz
    127.0.0.1 st.bestoffersnetworks.com
    127.0.0.1 static.callinghome.biz
    127.0.0.1 virusranger.com
    127.0.0.1 www.virusranger.com
    127.0.0.1 file.qqhelper.com
    127.0.0.1 file0.qqhelper.com
    127.0.0.1 file1.qqhelper.com
    127.0.0.1 file2.qqhelper.com
    127.0.0.1 file3.qqhelper.com
    127.0.0.1 file4.qqhelper.com
    127.0.0.1 file5.qqhelper.com
    127.0.0.1 file6.qqhelper.com
    127.0.0.1 file7.qqhelper.com
    127.0.0.1 file8.qqhelper.com
    127.0.0.1 file9.qqhelper.com
    127.0.0.1 qqhelper.com
    127.0.0.1 www.qqhelper.com
    127.0.0.1 adnetserver.com
    127.0.0.1 www.adnetserver.com
    127.0.0.1 internetanonymizer.com
    127.0.0.1 www.internetanonymizer.com
    127.0.0.1 cryptdrive.com
    127.0.0.1 www.cryptdrive.com
    127.0.0.1 fileprotector.com
    127.0.0.1 www.fileprotector.com
    127.0.0.1 installprovider.com
    127.0.0.1 www.installprovider.com
    127.0.0.1 netturbopro.com
    127.0.0.1 www.netturbopro.com
    127.0.0.1 freepcsecure.com
    127.0.0.1 www.freepcsecure.com
    127.0.0.1 popupnukerpro.com
    127.0.0.1 www.popupnukerpro.com
    127.0.0.1 windefender.com
    127.0.0.1 www.windefender.com
    127.0.0.1 dmqfirm.com
    127.0.0.1 www.dmqfirm.com
    127.0.0.1 ebwmanufacture.com
    127.0.0.1 www.ebwmanufacture.com
    127.0.0.1 ezycontract.com
    127.0.0.1 www.ezycontract.com
    127.0.0.1 ads1.revenue.net
    127.0.0.1 ads.kw.revenue.net
    127.0.0.1 safetydownload.com
    127.0.0.1 bsa.safetydownload.com
    127.0.0.1 www.safetydownload.com
    127.0.0.1 diskretter.com
    127.0.0.1 www.diskretter.com
    127.0.0.1 secretz.diskretter.com
    127.0.0.1 popadprovider.com
    127.0.0.1 www.popadprovider.com
    127.0.0.1 blackcodec.net
    127.0.0.1 www.blackcodec.net
    127.0.0.1 cleancodec.com
    127.0.0.1 www.cleancodec.com
    127.0.0.1 democodec.com
    127.0.0.1 www.democodec.com
    127.0.0.1 endcodec.com
    127.0.0.1 www.endcodec.com
    127.0.0.1 ictprivate.com
    127.0.0.1 www.ictprivate.com
    127.0.0.1 jetcodec.com
    127.0.0.1 www.jetcodec.com
    127.0.0.1 lightcodec.net
    127.0.0.1 www.lightcodec.net
    127.0.0.1 megcodec.com
    127.0.0.1 www.megcodec.com
    127.0.0.1 mmcodecs.com
    127.0.0.1 www.mmcodecs.com
    127.0.0.1 mooncodec.com
    127.0.0.1 www.mooncodec.com
    127.0.0.1 mpgcodec.net
    127.0.0.1 www.mpgcodec.net
    127.0.0.1 nicecodec.com
    127.0.0.1 www.nicecodec.com
    127.0.0.1 popcodec.net
    127.0.0.1 www.popcodec.net
    127.0.0.1 procodec.net
    127.0.0.1 www.procodec.net
    127.0.0.1 qazcodec.com
    127.0.0.1 www.qazcodec.com
    127.0.0.1 redcodec.net
    127.0.0.1 www.redcodec.net
    127.0.0.1 sigmacode.biz
    127.0.0.1 www.sigmacode.biz
    127.0.0.1 stormcodec.net
    127.0.0.1 www.stormcodec.net
    127.0.0.1 thisfreemovies.com
    127.0.0.1 www.thisfreemovies.com
    127.0.0.1 todaysfreeclips.com
    127.0.0.1 www.todaysfreeclips.com
    127.0.0.1 turbocodec.net
    127.0.0.1 www.turbocodec.net
    127.0.0.1 uincodec.com
    127.0.0.1 www.uincodec.com
    127.0.0.1 ultracodec.com
    127.0.0.1 www.ultracodec.com
    127.0.0.1 videowebsoft.com
    127.0.0.1 www.videowebsoft.com
    127.0.0.1 whitecodec.com
    127.0.0.1 www.whitecodec.com
    127.0.0.1 xerocodec.com
    127.0.0.1 www.xerocodec.com
    127.0.0.1 ydaproject.com
    127.0.0.1 www.ydaproject.com
    127.0.0.1 youlikehere.com
    127.0.0.1 www.youlikehere.com
    127.0.0.1 destruktor.to.pl
    127.0.0.1 www.destruktor.to.pl
    127.0.0.1 xhcodec.com
    127.0.0.1 www.xhcodec.com
    127.0.0.1 vivacodec.net
    127.0.0.1 www.vivacodec.net
    127.0.0.1 vaulimited.com
    127.0.0.1 www.vaulimited.com
    127.0.0.1 mojtechnology.com
    127.0.0.1 www.mojtechnology.com
    127.0.0.1 ocnservice.com
    127.0.0.1 www.ocnservice.com
    127.0.0.1 zsvcompany.com
    127.0.0.1 www.zsvcompany.com
    127.0.0.1 bcnproduction.com
    127.0.0.1 www.bcnproduction.com
    127.0.0.1 adioserrores.com
    127.0.0.1 www.adioserrores.com
    127.0.0.1 allertaminacce.com
    127.0.0.1 www.allertaminacce.com
    127.0.0.1 alltiettantivirus.com
    127.0.0.1 www.alltiettantivirus.com
    127.0.0.1 antivirusaskeladd.com
    127.0.0.1 www.antivirusaskeladd.com
    127.0.0.1 antiviruspcsuite.com
    127.0.0.1 www.antiviruspcsuite.com
    127.0.0.1 antivirusscherm.com
    127.0.0.1 www.antivirusscherm.com
    127.0.0.1 avsystemcare.com
    127.0.0.1 www.avsystemcare.com
    127.0.0.1 errclean.com
    127.0.0.1 www.errclean.com
    127.0.0.1 errorfri.com
    127.0.0.1 www.errorfri.com
    127.0.0.1 errorout.com
    127.0.0.1 www.errorout.com
    127.0.0.1 errorskydd.com
    127.0.0.1 www.errorskydd.com
    127.0.0.1 errorsoshi.com
    127.0.0.1 www.errorsoshi.com
    127.0.0.1 nowayvirus.com
    127.0.0.1 www.nowayvirus.com
    127.0.0.1 pcvirusless.com
    127.0.0.1 www.pcvirusless.com
    127.0.0.1 sysdepannage.com
    127.0.0.1 www.sysdepannage.com
    127.0.0.1 syslibero.com
  3. 2008-02-21, 07:54 #33
    HSwHH
    HSwHH is offline
    Member
    Join Date
    May 2007
    Posts
    39

    Default

    127.0.0.1 www.syslibero.com
    127.0.0.1 systemordnare.com
    127.0.0.1 www.systemordnare.com
    127.0.0.1 virusdifesa.com
    127.0.0.1 www.virusdifesa.com
    127.0.0.1 virusforsvar.com
    127.0.0.1 www.virusforsvar.com
    127.0.0.1 virusgarde.com
    127.0.0.1 www.virusgarde.com
    127.0.0.1 virusschlacht.com
    127.0.0.1 www.virusschlacht.com
    127.0.0.1 virusvakt.com
    127.0.0.1 www.virusvakt.com
    127.0.0.1 dailykeys.com
    127.0.0.1 www.dailykeys.com
    127.0.0.1 videosoftonline.com
    127.0.0.1 www.videosoftonline.com
    127.0.0.1 xerocodec.net
    127.0.0.1 www.xerocodec.net
    127.0.0.1 newoutserv.com
    127.0.0.1 www.newoutserv.com
    127.0.0.1 mzdsoftware.com
    127.0.0.1 www.mzdsoftware.com
    127.0.0.1 pkbsolution.com
    127.0.0.1 www.pkbsolution.com
    127.0.0.1 ndcperformance.com
    127.0.0.1 www.ndcperformance.com
    127.0.0.1 xvsenterprise.com
    127.0.0.1 www.xvsenterprise.com
    127.0.0.1 gneprogram.com
    127.0.0.1 www.gneprogram.com
    127.0.0.1 zerocodec.com
    127.0.0.1 www.zerocodec.com
    127.0.0.1 4mpg.com
    127.0.0.1 www.4mpg.com
    127.0.0.1 adult-mpg.net
    127.0.0.1 www.adult-mpg.net
    127.0.0.1 allsearch.us
    127.0.0.1 www.allsearch.us
    127.0.0.1 bestadults.com
    127.0.0.1 www.bestadults.com
    127.0.0.1 cnomy.com
    127.0.0.1 www.cnomy.com
    127.0.0.1 megashopes.com
    127.0.0.1 www.megashopes.com
    127.0.0.1 rape--sex.com
    127.0.0.1 www.rape--sex.com
    127.0.0.1 searchs.com
    127.0.0.1 www.searchs.com
    127.0.0.1 teensexfans.com
    127.0.0.1 www.teensexfans.com
    127.0.0.1 thesearchs.com
    127.0.0.1 www.thesearchs.com
    127.0.0.1 zangcodec.net
    127.0.0.1 www.zangcodec.net
    127.0.0.1 newbieadguide.com
    127.0.0.1 www.newbieadguide.com
    127.0.0.1 iedefender.com
    127.0.0.1 www.iedefender.com
    127.0.0.1 playcodec.net
    127.0.0.1 www.playcodec.net
    127.0.0.1 startguard.net
    127.0.0.1 www.startguard.net
    127.0.0.1 malware-scanner.com
    127.0.0.1 www.malware-scanner.com
    127.0.0.1 bsplaycodec.com
    127.0.0.1 www.bsplaycodec.com
    127.0.0.1 stvfirm.com
    127.0.0.1 www.stvfirm.com
    127.0.0.1 ictmanufacture.com
    127.0.0.1 www.ictmanufacture.com
    127.0.0.1 dltsolution.com
    127.0.0.1 www.dltsolution.com
    127.0.0.1 elseif.biz
    127.0.0.1 www.elseif.biz
    127.0.0.1 ultrahqcodec.com
    127.0.0.1 www.ultrahqcodec.com
    127.0.0.1 3xclipsonline.com
    127.0.0.1 www.3xclipsonline.com
    127.0.0.1 3xcurves.com
    127.0.0.1 www.3xcurves.com
    127.0.0.1 3xfestival.com
    127.0.0.1 www.3xfestival.com
    127.0.0.1 3x-festival.com
    127.0.0.1 www.3x-festival.com
    127.0.0.1 3x-galls.com
    127.0.0.1 www.3x-galls.com
    127.0.0.1 3xmiracle.com
    127.0.0.1 www.3xmiracle.com
    127.0.0.1 3xmoviesblog.com
    127.0.0.1 www.3xmoviesblog.com
    127.0.0.1 best3xclips.com
    127.0.0.1 www.best3xclips.com
    127.0.0.1 bvdtechinque.com
    127.0.0.1 www.bvdtechinque.com
    127.0.0.1 chilly3xvids.com
    127.0.0.1 www.chilly3xvids.com
    127.0.0.1 chillymovs.com
    127.0.0.1 www.chillymovs.com
    127.0.0.1 clipsfestival.com
    127.0.0.1 www.clipsfestival.com
    127.0.0.1 clipsreality.com
    127.0.0.1 www.clipsreality.com
    127.0.0.1 codechq.net
    127.0.0.1 www.codechq.net
    127.0.0.1 codecvip.com
    127.0.0.1 www.codecvip.com
    127.0.0.1 daily3xlinks.com
    127.0.0.1 www.daily3xlinks.com
    127.0.0.1 dailybestclips.com
    127.0.0.1 www.dailybestclips.com
    127.0.0.1 dailyhugemovs.com
    127.0.0.1 www.dailyhugemovs.com
    127.0.0.1 dailyxvids.com
    127.0.0.1 www.dailyxvids.com
    127.0.0.1 download3xpics.com
    127.0.0.1 www.download3xpics.com
    127.0.0.1 entirexxx.com
    127.0.0.1 www.entirexxx.com
    127.0.0.1 free3xclips.com
    127.0.0.1 www.free3xclips.com
    127.0.0.1 freerealityvidz.com
    127.0.0.1 www.freerealityvidz.com
    127.0.0.1 freexxxmpegz.com
    127.0.0.1 www.freexxxmpegz.com
    127.0.0.1 galleriesforporn.com
    127.0.0.1 www.galleriesforporn.com
    127.0.0.1 gallsforporn.com
    127.0.0.1 www.gallsforporn.com
    127.0.0.1 getxxxphotos.com
    127.0.0.1 www.getxxxphotos.com
    127.0.0.1 hotnchilly.com
    127.0.0.1 www.hotnchilly.com
    127.0.0.1 picturesheap.com
    127.0.0.1 www.picturesheap.com
    127.0.0.1 pornxxxvideoz.com
    127.0.0.1 www.pornxxxvideoz.com
    127.0.0.1 realmovieszone.com
    127.0.0.1 www.realmovieszone.com
    127.0.0.1 streampornvideos.com
    127.0.0.1 www.streampornvideos.com
    127.0.0.1 temptationclips.com
    127.0.0.1 www.temptationclips.com
    127.0.0.1 themymoviessite.com
    127.0.0.1 www.themymoviessite.com
    127.0.0.1 todays3xmovies.com
    127.0.0.1 www.todays3xmovies.com
    127.0.0.1 topmovzonline.com
    127.0.0.1 www.topmovzonline.com
    127.0.0.1 topsoftwarefeed.com
    127.0.0.1 www.topsoftwarefeed.com
    127.0.0.1 topxxxvidz.com
    127.0.0.1 www.topxxxvidz.com
    127.0.0.1 vidsfest.com
    127.0.0.1 www.vidsfest.com
    127.0.0.1 vplprocedure.com
    127.0.0.1 www.vplprocedure.com
    127.0.0.1 x-pornmovz.com
    127.0.0.1 www.x-pornmovz.com
    127.0.0.1 x-prnmoviez.com
    127.0.0.1 www.x-prnmoviez.com
    127.0.0.1 yourchillyvids.com
    127.0.0.1 www.yourchillyvids.com
    127.0.0.1 piramisu.biz
    127.0.0.1 www.piramisu.biz
    127.0.0.1 virprotect.com
    127.0.0.1 www.virprotect.com
    127.0.0.1 beruijindegunhadesun.com
    127.0.0.1 www.beruijindegunhadesun.com
    127.0.0.1 cadesfinjeriokas.com
    127.0.0.1 www.cadesfinjeriokas.com
    127.0.0.1 jinkinyunhdefunkasderun.com
    127.0.0.1 www.jinkinyunhdefunkasderun.com
    127.0.0.1 kintunhdefunhganmdesun.com
    127.0.0.1 www.kintunhdefunhganmdesun.com
    127.0.0.1 kuturoisus.com
    127.0.0.1 www.kuturoisus.com
    127.0.0.1 lerunjinkfeunhadesun.com
    127.0.0.1 www.lerunjinkfeunhadesun.com
    127.0.0.1 maseruijintunhangdnsfungans.com
    127.0.0.1 www.maseruijintunhangdnsfungans.com
    127.0.0.1 pazmogutionsa.com
    127.0.0.1 www.pazmogutionsa.com
    127.0.0.1 pmerunjdefinjadesunherun.com
    127.0.0.1 www.pmerunjdefinjadesunherun.com
    127.0.0.1 saretionhenfunhaandsuikin.com
    127.0.0.1 www.saretionhenfunhaandsuikin.com
    127.0.0.1 vadesrunhdefunnjansdeikin.com
    127.0.0.1 www.vadesrunhdefunnjansdeikin.com
    127.0.0.1 vaserjungenfujinas.com
    127.0.0.1 www.vaserjungenfujinas.com
    127.0.0.1 vertionkinhunfenrunhasde.com
    127.0.0.1 www.vertionkinhunfenrunhasde.com
    127.0.0.1 www1.beruijindegunhadesun.com
    127.0.0.1 spybot-sd-info.com
    127.0.0.1 www.spybot-sd-info.com
    127.0.0.1 b122.mcboo.com
    127.0.0.1 dl.mcboo.com
    127.0.0.1 ert47.a1.wrs.mcboo.com
    127.0.0.1 wr.mcboo.com
    127.0.0.1 ghktoolkit.com
    127.0.0.1 www.ghktoolkit.com
    127.0.0.1 zxcsolution.com
    127.0.0.1 www.zxcsolution.com
    127.0.0.1 codectime.com
    127.0.0.1 www.codectime.com
    127.0.0.1 codecvids.com
    127.0.0.1 www.codecvids.com
    127.0.0.1 tsmfirm.com
    127.0.0.1 www.tsmfirm.com
    127.0.0.1 somcompany.com
    127.0.0.1 www.somcompany.com
    127.0.0.1 powermpeg.com
    127.0.0.1 www.powermpeg.com
    127.0.0.1 codecmega.net
    127.0.0.1 www.codecmega.net
    127.0.0.1 softwebvideo.com
    127.0.0.1 www.softwebvideo.com
    127.0.0.1 weeproject.com
    127.0.0.1 www.weeproject.com
    127.0.0.1 www.codechard.com
    127.0.0.1 downloadprovider.net
    127.0.0.1 www.downloadprovider.net
    127.0.0.1 codechard.com
    127.0.0.1 www.codechard.com
    127.0.0.1 6njaga.com
    127.0.0.1 www.6njaga.com
    127.0.0.1 aaqadarsztriv.com
    127.0.0.1 www.aaqadarsztriv.com
    127.0.0.1 aaqada-rsztriv.com
    127.0.0.1 www.aaqada-rsztriv.com
    127.0.0.1 aaqadaueorn.com
    127.0.0.1 www.aaqadaueorn.com
    127.0.0.1 aaqada-ueorn.com
    127.0.0.1 www.aaqada-ueorn.com
    127.0.0.1 aaqada-ygco.com
    127.0.0.1 www.aaqada-ygco.com
    127.0.0.1 aaqada-ymct.com
    127.0.0.1 www.aaqada-ymct.com
    127.0.0.1 abcsearch.com
    127.0.0.1 www.abcsearch.com
    127.0.0.1 adsrevenue.net
    127.0.0.1 www.adsrevenue.net
    127.0.0.1 convenient-search.com
    127.0.0.1 www.convenient-search.com
    127.0.0.1 download.MalwareAlarm.com
    127.0.0.1 f0.thezirius.com
    127.0.0.1 f1.thezirius.com
    127.0.0.1 f2.thezirius.com
    127.0.0.1 f3.thezirius.com
    127.0.0.1 f4.thezirius.com
    127.0.0.1 f5.thezirius.com
    127.0.0.1 f6.thezirius.com
    127.0.0.1 f7.thezirius.com
    127.0.0.1 f8.thezirius.com
    127.0.0.1 f9.thezirius.com
    127.0.0.1 finditquick.com
    127.0.0.1 www.finditquick.com
    127.0.0.1 iwantsearch.net
    127.0.0.1 www.iwantsearch.net
    127.0.0.1 lskdfjlerjvm.com
    127.0.0.1 www.lskdfjlerjvm.com
    127.0.0.1 new3sh.net
    127.0.0.1 www.new3sh.net
    127.0.0.1 partner.finditquick.com
    127.0.0.1 popunder.adsrevenue.net
    127.0.0.1 rsztriv-aaqada.com
    127.0.0.1 www.rsztriv-aaqada.com
    127.0.0.1 s0.thezirius.com
    127.0.0.1 s1.thezirius.com
    127.0.0.1 s2.thezirius.com
    127.0.0.1 s2fnew.com
    127.0.0.1 www.s2fnew.com
    127.0.0.1 s3.thezirius.com
    127.0.0.1 s4.thezirius.com
    127.0.0.1 s5.thezirius.com
    127.0.0.1 s6.thezirius.com
    127.0.0.1 s7.thezirius.com
    127.0.0.1 s8.thezirius.com
    127.0.0.1 s9.thezirius.com
    127.0.0.1 searchmeup.biz
    127.0.0.1 www.searchmeup.biz
    127.0.0.1 search-true.com
    127.0.0.1 www.search-true.com
    127.0.0.1 setup.theoreon.com
    127.0.0.1 www.smart-security.biz
    127.0.0.1 theoreon.com
    127.0.0.1 www.theoreon.com
    127.0.0.1 thezirius.com
    127.0.0.1 www.thezirius.com
    127.0.0.1 topportalsite.org
    127.0.0.1 www.topportalsite.org
    127.0.0.1 ueornaaqada.com
    127.0.0.1 www.ueornaaqada.com
    127.0.0.1 ueorn-rsztriv.com
    127.0.0.1 www.ueorn-rsztriv.com
    127.0.0.1 ueorn-vtvcp.com
    127.0.0.1 www.ueorn-vtvcp.com
    127.0.0.1 ueornygco.com
    127.0.0.1 www.ueornygco.com
    127.0.0.1 ueornymct.com
    127.0.0.1 www.ueornymct.com
    127.0.0.1 vtvcp-ueorn.com
    127.0.0.1 www.vtvcp-ueorn.com
    127.0.0.1 vtvcp-ymct.com
    127.0.0.1 www.vtvcp-ymct.com
    127.0.0.1 ygcoueorn.com
    127.0.0.1 www.ygcoueorn.com
    127.0.0.1 ygcovtvcp.com
    127.0.0.1 www.ygcovtvcp.com
    127.0.0.1 ymctaaqada.com
    127.0.0.1 www.ymctaaqada.com
    127.0.0.1 ymct-aaqada.com
    127.0.0.1 www.ymct-aaqada.com
    127.0.0.1 youniyouwo.com
    127.0.0.1 www.youniyouwo.com
    127.0.0.1 livetds.com
    127.0.0.1 www.livetds.com
    127.0.0.1 xyzsolution.com
    127.0.0.1 www.xyzsolution.com
    127.0.0.1 abcdperformance.com
    127.0.0.1 www.abcdperformance.com
    127.0.0.1 codechot.net
    127.0.0.1 www.codechot.net
    127.0.0.1 ataprogram.com
    127.0.0.1 www.ataprogram.com
    127.0.0.1 codecdvi.com
    127.0.0.1 www.codecdvi.com
    127.0.0.1 codecnice.net
    127.0.0.1 www.codecnice.net
    127.0.0.1 codecpretty.net
    127.0.0.1 www.codecpretty.net
    127.0.0.1 dapsolution.com
    127.0.0.1 www.dapsolution.com
    127.0.0.1 flycodecs.com
    127.0.0.1 www.flycodecs.com
    127.0.0.1 pmffprogram.com
    127.0.0.1 www.pmffprogram.com
    127.0.0.1 shockbabetv.com
    127.0.0.1 www.shockbabetv.com
    127.0.0.1 bestdailyvids.com
    127.0.0.1 www.bestdailyvids.com
    127.0.0.1 ad.oinadserver.com
    127.0.0.1 oinadserver.com
    127.0.0.1 www.oinadserver.com
    127.0.0.1 ad.outerinfoads.com
    127.0.0.1 outerinfoads.com
    127.0.0.1 www.outerinfoads.com
    127.0.0.1 campaigns.outerinfo.net
    127.0.0.1 fp.outerinfo.net
    127.0.0.1 nf.outerinfo.net
    127.0.0.1 outerinfo.net
    127.0.0.1 www.outerinfo.net
    127.0.0.1 shareaza.com
    127.0.0.1 www.shareaza.com
    127.0.0.1 avsmanufacture.com
    127.0.0.1 www.avsmanufacture.com
    127.0.0.1 codecmeg.net
    127.0.0.1 www.codecmeg.net
    127.0.0.1 codecmpg.com
    127.0.0.1 www.codecmpg.com
    127.0.0.1 codecops.net
    127.0.0.1 www.codecops.net
    127.0.0.1 codecultra.net
    127.0.0.1 www.codecultra.net
    127.0.0.1 mymetavids.com
    127.0.0.1 www.mymetavids.com
    127.0.0.1 sysprocedure.com
    127.0.0.1 www.sysprocedure.com
    127.0.0.1 uc8010.com
    127.0.0.1 www.uc8010.com
    127.0.0.1 ucmal.com
    127.0.0.1 www.ucmal.com
    127.0.0.1 antispywareboot.com
    127.0.0.1 www.antispywareboot.com
    127.0.0.1 spybotcom.com
    127.0.0.1 www.spybotcom.com
    127.0.0.1 awarenesstech.com
    127.0.0.1 www.awarenesstech.com
    127.0.0.1 amigobore.com
    127.0.0.1 www.amigobore.com
    127.0.0.1 bkvcompany.com
    127.0.0.1 www.bkvcompany.com
    127.0.0.1 codecbsplay.com
    127.0.0.1 www.codecbsplay.com
    127.0.0.1 codecpro.net
    127.0.0.1 www.codecpro.net
    127.0.0.1 codecviva.com
    127.0.0.1 www.codecviva.com
    127.0.0.1 codeczang.net
    127.0.0.1 www.codeczang.net
    127.0.0.1 mvvproduction.com
    127.0.0.1 www.mvvproduction.com
    127.0.0.1 siiprogram.com
    127.0.0.1 www.siiprogram.com
    127.0.0.1 sisperformance.com
    127.0.0.1 www.sisperformance.com
    127.0.0.1 katasearch.com
    127.0.0.1 www.katasearch.com
    127.0.0.1 preferiti-windows.com
    127.0.0.1 www.preferiti-windows.com
    127.0.0.1 tuttoavolonta.com
    127.0.0.1 www.tuttoavolonta.com
    127.0.0.1 archivioadulti.com
    127.0.0.1 www.archivioadulti.com
    127.0.0.1 qoogler.com
    127.0.0.1 www.asafetyalways.com
    127.0.0.1 asafetyalways.com
    127.0.0.1 www.errorsweeper.com
    127.0.0.1 errorsweeper.com
    127.0.0.1 www.garfirm.com
    127.0.0.1 garfirm.com
    127.0.0.1 www.hqcodectime.net
    127.0.0.1 hqcodectime.net
    127.0.0.1 www.mymysticporn.com
    127.0.0.1 mymysticporn.com
    127.0.0.1 www.pcprivacytool.com
    127.0.0.1 pcprivacytool.com
    127.0.0.1 www.qazcodec.net
    127.0.0.1 qazcodec.net
    127.0.0.1 www.somenudefuck.com
    127.0.0.1 somenudefuck.com
    127.0.0.1 www.spybot-free.com
    127.0.0.1 spybot-free.com
    127.0.0.1 www.stable2.com
    127.0.0.1 stable2.com
    127.0.0.1 www.tuvcompany.com
    127.0.0.1 tuvcompany.com
    127.0.0.1 www.www-spybotcom.com
    127.0.0.1 www-spybotcom.com
    127.0.0.1 www.www-SpywareBot.org
    127.0.0.1 www-SpywareBot.org
    127.0.0.1 www.qoogler.com

    VACFix

    VACFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    Winsock2 Fix

    S!Ri's WS2Fix: LSP not Found.


    Generic Renos Fix

    GenericRenosFix by S!Ri


    Deleting infected files

    C:\DOCUME~1\ALLUSE~1\STARTM~1\Online Security Guide.url Deleted
    C:\DOCUME~1\ALLUSE~1\STARTM~1\Security Troubleshooting.url Deleted
    C:\Program Files\Helper\ Deleted
    C:\Program Files\NetProject\ Deleted
    C:\Program Files\Sotfone\ Deleted
    C:\Program Files\VirusHeat 3.9\ Deleted

    IEDFix

    IEDFix
    Credits: Malware Analysis & Diagnostic
    Code: S!Ri


    DNS

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{E1FF2B38-5FD7-439E-A47A-B4F05AFDA089}: DhcpNameServer=192.168.1.254
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{E1FF2B38-5FD7-439E-A47A-B4F05AFDA089}: DhcpNameServer=192.168.1.254
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{E1FF2B38-5FD7-439E-A47A-B4F05AFDA089}: DhcpNameServer=192.168.1.254
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.254
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.254
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.254


    Deleting Temp Files


    Winlogon.System
    !!!Attention, following keys are not inevitably infected!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"=""


    Registry Cleaning

    Registry Cleaning done.

    SharedTaskScheduler After SmitFraudFix
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll


    End
  4. 2008-02-21, 07:59 #34
    HSwHH
    HSwHH is offline
    Member
    Join Date
    May 2007
    Posts
    39

    Default

    And here's the new HJT log.

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 1:56:45 AM, on 2/21/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16608)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
    C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
    c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\McAfee\MPF\MPFSrv.exe
    C:\Program Files\McAfee\MSK\MskSrver.exe
    C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
    C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Viewpoint\Common\ViewpointService.exe
    C:\PROGRA~1\McAfee.com\Agent\mcagent.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Digital Media Reader\readericon45G.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Common Files\AOL\1154369075\ee\AOLSoftware.exe
    C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
    C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Lexmark X74-X75\lxbbbmon.exe
    C:\Program Files\SiteAdvisor\6172\SiteAdv.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\Program Files\CASIO\Photo Loader\Plauto.exe
    C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
    O2 - BHO: (no name) - `@68ED8-4CFF-4115-88A6-6EBB8AF19000} - (no file)
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - C:\Program Files\McAfee\MSK\mcapbho.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.1121.2472\swg.dll
    O2 - BHO: (no name) - @8ED58-01DD-4d91-8333-CF10577473F7} - (no file)
    O2 - BHO: (no name) - @319C0-31B7-401E-A518-A07C3DB8F777} - (no file)
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
    O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [readericon] C:\Program Files\Digital Media Reader\readericon45G.exe
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1154369075\ee\AOLSoftware.exe
    O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe"
    O4 - HKLM\..\Run: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [Reminder] %WINDIR%\Creator\Remind_XP.exe
    O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
    O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
    O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6172\SiteAdv.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [Power2GoExpress] NA
    O4 - HKCU\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
    O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\bigfix.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: Photo Loader supervisory.lnk = C:\Program Files\CASIO\Photo Loader\Plauto.exe
    O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english...an_unicode.cab
    O16 - DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} (Disney Online Games ActiveX Control) - http://disney.go.com/pirates/online/...nlineGames.cab
    O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/sh...1/mcinsctl.cab
    O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/...toUploader.cab
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} -
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: McAfee Application Installer Cleanup (0289741203540124) (0289741203540124mcinstcleanup) - Unknown owner - C:\WINDOWS\TEMP\028974~1.EXE (file missing)
    O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
    O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
    O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
    O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
    O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

    --
    End of file - 11544 bytes
  5. 2008-02-21, 08:11 #35
    HSwHH
    HSwHH is offline
    Member
    Join Date
    May 2007
    Posts
    39

    Default

    While following your instructions I also got the following error messages, I thought they might be relevant.

    Heading: Local Settings

    Body: C:\Documents and Settings\Homolicious\Local Settings\Temp is not accessible

    Access is denied.


    Heading: rundll32.exe - Application Error

    Body: The instruction at "0x7473c7d6" referenced memory at "0x00000052". The memory could not be "read".
    Click on OK to terminate the program.



    Heading: Error Deleting File or Folder

    Body: Cannot delete mcmsc_aidqSuMc5UmMS8j: It is being used by another person or program.
    Close any programs that might be using the file and try again.

    Additionally on that last one, the file in question showed a size of 0 kilobytes.
  6. 2008-02-21, 10:41 #36
    Shaba
    Shaba is offline
    Security Expert: Emeritus
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    29,374

    Default

    Hi

    Have those error messages re-occured?

    Open HijackThis, click do a system scan only and checkmark these:

    O2 - BHO: (no name) - `@68ED8-4CFF-4115-88A6-6EBB8AF19000} - (no file)
    O2 - BHO: (no name) - @8ED58-01DD-4d91-8333-CF10577473F7} - (no file)
    O2 - BHO: (no name) - @319C0-31B7-401E-A518-A07C3DB8F777} - (no file)

    Close all windows including browser and press fix checked.

    Reboot.

    Re-scan with kaspersky.

    Post:

    - a fresh HijackThis log
    - kaspersky report
    Microsoft MVP Consumer Security 2008-2011

    Member of ASAP and UNITE since 2006
  7. 2008-02-25, 06:27 #37
    HSwHH
    HSwHH is offline
    Member
    Join Date
    May 2007
    Posts
    39

    Default

    Hi, Here's the HJT Log.

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 12:25:07 AM, on 2/25/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16608)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
    C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
    c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    C:\Program Files\McAfee\MPF\MPFSrv.exe
    C:\Program Files\McAfee\MSK\MskSrver.exe
    C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTSMLBIZ\Binn\sqlservr.exe
    C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Viewpoint\Common\ViewpointService.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    C:\PROGRA~1\McAfee.com\Agent\mcagent.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
    C:\Program Files\Digital Media Reader\readericon45G.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Common Files\AOL\1154369075\ee\AOLSoftware.exe
    C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe
    C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
    C:\Program Files\Lexmark X74-X75\lxbbbmon.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
    C:\Program Files\SiteAdvisor\6172\SiteAdv.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\Program Files\CASIO\Photo Loader\Plauto.exe
    C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - C:\Program Files\McAfee\MSK\mcapbho.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.1121.2472\swg.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
    O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
    O4 - HKLM\..\Run: [readericon] C:\Program Files\Digital Media Reader\readericon45G.exe
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1154369075\ee\AOLSoftware.exe
    O4 - HKLM\..\Run: [AOL Spyware Protection] "C:\PROGRA~1\COMMON~1\AOL\AOLSPY~1\AOLSP Scheduler.exe"
    O4 - HKLM\..\Run: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [Reminder] %WINDIR%\Creator\Remind_XP.exe
    O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
    O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
    O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6172\SiteAdv.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKCU\..\Run: [Power2GoExpress] NA
    O4 - HKCU\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
    O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\bigfix.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: Photo Loader supervisory.lnk = C:\Program Files\CASIO\Photo Loader\Plauto.exe
    O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english...an_unicode.cab
    O16 - DPF: {3DCEC959-378A-4922-AD7E-FD5C925D927F} (Disney Online Games ActiveX Control) - http://disney.go.com/pirates/online/...nlineGames.cab
    O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/sh...1/mcinsctl.cab
    O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/...toUploader.cab
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} -
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
    O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
    O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
    O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
    O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
    O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
    O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

    --
    End of file - 11157 bytes
  8. 2008-02-25, 06:32 #38
    HSwHH
    HSwHH is offline
    Member
    Join Date
    May 2007
    Posts
    39

    Default

    Here's the Kaspersky log, with all locked objects edited out.

    -------------------------------------------------------------------------------
    KASPERSKY ONLINE SCANNER REPORT
    Sunday, February 24, 2008 11:22:38 PM
    Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
    Kaspersky Online Scanner version: 5.0.98.0
    Kaspersky Anti-Virus database last update: 25/02/2008
    Kaspersky Anti-Virus database records: 578854
    -------------------------------------------------------------------------------

    Scan Settings:
    Scan using the following antivirus database: extended
    Scan Archives: true
    Scan Mail Bases: true

    Scan Target - My Computer:
    C:\
    D:\
    E:\
    F:\
    G:\
    H:\
    I:\

    Scan Statistics:
    Total number of scanned objects: 99151
    Number of viruses found: 8
    Number of infected objects: 10
    Number of suspicious objects: 0
    Duration of the scan process: 01:56:52

    Infected Object Name / Virus Name / Last Action
    C:\Documents and Settings\Marco\Desktop\SmitfraudFix.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
    C:\Documents and Settings\Marco\Desktop\SmitfraudFix.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped
    C:\Documents and Settings\Marco\Desktop\SmitfraudFix.exe RarSFX: infected - 2 skipped
    C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP366\A0049518.dll Infected: not-a-virus:AdWare.Win32.Mostofate.aa skipped
    C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP378\A0050443.exe Infected: Trojan-Downloader.Win32.Zlob.hpr skipped
    C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP384\A0053775.dll Infected: Trojan-Downloader.Win32.Zlob.hox skipped
    C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP384\A0053778.exe Infected: Trojan-Downloader.Win32.Zlob.hor skipped
    C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP384\A0053779.exe Infected: Trojan-Downloader.Win32.Zlob.hot skipped
    C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP384\A0053780.exe Infected: Trojan-Downloader.Win32.Zlob.hph skipped
    C:\System Volume Information\_restore{4E015214-6BB0-4181-B365-456CF1DEC069}\RP384\A0053783.exe Infected: Trojan-Downloader.Win32.Zlob.hov skipped
  9. 2008-02-25, 11:05 #39
    Shaba
    Shaba is offline
    Security Expert: Emeritus
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    29,374

    Default

    Hi

    Logs look good.

    All viruses are in system restore and inactive.

    I give you later instructions how to empty it.

    Other than that, any problems left?
    Microsoft MVP Consumer Security 2008-2011

    Member of ASAP and UNITE since 2006
  10. 2008-03-01, 11:30 #40
    Shaba
    Shaba is offline
    Security Expert: Emeritus
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    29,374

    Default

    Due to the lack of feedback this Topic is closed.

    If it has been five days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.

    If it has been less than five days since your last response and you need the thread re-opened, please send a private message (pm). A valid, working link to the closed topic is required.

    Everyone else please begin a New Topic.
    Microsoft MVP Consumer Security 2008-2011

    Member of ASAP and UNITE since 2006
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules