I Need Help Removing Smitfraud-C. AND zlob.downloader.vcd

127.0.0.1 vaserjungenfujinas.com
127.0.0.1 www.vaulimited.com
127.0.0.1 vaulimited.com
127.0.0.1 vaxcodec.com
127.0.0.1 www.vaxcodec.com
127.0.0.1 www.vaxdownload.com
127.0.0.1 vaxdownload.com
127.0.0.1 www.vaxobject.com
127.0.0.1 vaxobject.com
127.0.0.1 www.vaxobjectinstall.com
127.0.0.1 vaxobjectinstall.com
127.0.0.1 vbirgilio.it
127.0.0.1 www.vbirgilio.it
127.0.0.1 vcirgilio.it
127.0.0.1 www.vcirgilio.it
127.0.0.1 www.vcodec.com
127.0.0.1 vcodec.com
127.0.0.1 v-codec.com
127.0.0.1 www.v-codec.com
127.0.0.1 vcodec2007.com
127.0.0.1 www.vcodec2007.com
127.0.0.1 www.vcorriere.it
127.0.0.1 vcorriere.it
127.0.0.1 vegas-free.com
127.0.0.1 vegbuy.com
127.0.0.1 veloventures.com
127.0.0.1 verkaufen.wegvonviren.com
127.0.0.1 vertionkinhunfenrunhasde.com
127.0.0.1 www.vertionkinhunfenrunhasde.com
127.0.0.1 veryeasysearch.com
127.0.0.1 verzila.com
127.0.0.1 vesbiz.biz
127.0.0.1 www.veyyhlucwa.net
127.0.0.1 veyyhlucwa.net
127.0.0.1 vfirgilio.it
127.0.0.1 www.vfirgilio.it
127.0.0.1 vgazzetta.it
127.0.0.1 www.vgazzetta.it
127.0.0.1 vgirgilio.it
127.0.0.1 www.vgirgilio.it
127.0.0.1 vgoogle.it
127.0.0.1 www.vgoogle.it
127.0.0.1 vi4gilio.it
127.0.0.1 www.vi4gilio.it
127.0.0.1 vi4rgilio.it
127.0.0.1 www.vi4rgilio.it
127.0.0.1 www.vi5gilio.it
127.0.0.1 vi5gilio.it
127.0.0.1 www.vi5rgilio.it
127.0.0.1 vi5rgilio.it
127.0.0.1 vi8rgilio.it
127.0.0.1 www.vi8rgilio.it
127.0.0.1 www.vi9rgilio.it
127.0.0.1 vi9rgilio.it
127.0.0.1 vicodec.com
127.0.0.1 www.vicodec.com
127.0.0.1 victoriaadam.com
127.0.0.1 vidaccess.net
127.0.0.1 www.vidaccess.net
127.0.0.1 www.vidcodecs.com
127.0.0.1 vidcodecs.com
127.0.0.1 www.videoaccessactivex.com
127.0.0.1 videoaccessactivex.com
127.0.0.1 www.videoactivexlist.com
127.0.0.1 videoactivexlist.com
127.0.0.1 videoactivexmode.com
127.0.0.1 www.videoactivexmode.com
127.0.0.1 videoactivexnote.com
127.0.0.1 www.videoactivexnote.com
127.0.0.1 videoactivexsetup.com
127.0.0.1 www.videoactivexsetup.com
127.0.0.1 videoactivexsoft.com
127.0.0.1 www.videoactivexsoft.com
127.0.0.1 videoactivexsoftware.com
127.0.0.1 www.videoactivexsoftware.com
127.0.0.1 videoadaptation.com
127.0.0.1 www.videoadaptation.com
127.0.0.1 www.videoaxdata.com
127.0.0.1 videoaxdata.com
127.0.0.1 www.videoaxdownload.com
127.0.0.1 videoaxdownload.com
127.0.0.1 www.videoaxobject.com
127.0.0.1 videoaxobject.com
127.0.0.1 videoaxproject.com
127.0.0.1 www.videoaxproject.com
127.0.0.1 videoaxsoftware.com
127.0.0.1 www.videoaxsoftware.com
127.0.0.1 videoaxsolution.com
127.0.0.1 www.videoaxsolution.com
127.0.0.1 videocategories.com
127.0.0.1 video-clips.in
127.0.0.1 www.video-clips.in
127.0.0.1 www.videoobjectax.com
127.0.0.1 videoobjectax.com
127.0.0.1 videoobjectmedia.com
127.0.0.1 www.videoobjectmedia.com
127.0.0.1 videoplayersite.com
127.0.0.1 www.videoplayersite.com
127.0.0.1 videos-access.com
127.0.0.1 www.videos-access.com
127.0.0.1 www.videosaccess.net
127.0.0.1 videosaccess.net
127.0.0.1 videoscodec.com
127.0.0.1 www.videoscodec.com
127.0.0.1 videosfan.com
127.0.0.1 www.videosfan.com
127.0.0.1 videosoftonline.com
127.0.0.1 www.videosoftonline.com
127.0.0.1 videosoftwareax.com
127.0.0.1 www.videosoftwareax.com
127.0.0.1 www.videossoftware.com
127.0.0.1 videossoftware.com
127.0.0.1 www.videowebproject.com
127.0.0.1 videowebproject.com
127.0.0.1 videowebsoft.com
127.0.0.1 www.videowebsoft.com
127.0.0.1 www.videozapping.com
127.0.0.1 videozapping.com
127.0.0.1 www.vidrgilio.it
127.0.0.1 vidrgilio.it
127.0.0.1 vids-access.com
127.0.0.1 www.vids-access.com
127.0.0.1 www.vidscodec.com
127.0.0.1 vidscodec.com
127.0.0.1 www.vidsfest.com
127.0.0.1 vidsfest.com
127.0.0.1 viegilio.it
127.0.0.1 www.viegilio.it
127.0.0.1 www.viergilio.it
127.0.0.1 viergilio.it
127.0.0.1 www.viewdevice.com
127.0.0.1 viewdevice.com
127.0.0.1 www.viewimageonline.com
127.0.0.1 viewimageonline.com
127.0.0.1 viewutility.com
127.0.0.1 www.viewutility.com
127.0.0.1 vifgilio.it
127.0.0.1 www.vifgilio.it
127.0.0.1 www.vifrgilio.it
127.0.0.1 vifrgilio.it
127.0.0.1 vigrgilio.it
127.0.0.1 www.vigrgilio.it
127.0.0.1 vigrilio.it
127.0.0.1 www.vigrilio.it
127.0.0.1 vijrgilio.it
127.0.0.1 www.vijrgilio.it
127.0.0.1 vikrgilio.it
127.0.0.1 www.vikrgilio.it
127.0.0.1 vilrgilio.it
127.0.0.1 www.vilrgilio.it
127.0.0.1 viorgilio.it
127.0.0.1 www.viorgilio.it
127.0.0.1 www.vipcodecvip.com
127.0.0.1 vipcodecvip.com
127.0.0.1 www.vipru.com
127.0.0.1 vipru.com
127.0.0.1 www.vir4gilio.it
127.0.0.1 vir4gilio.it
127.0.0.1 vir5gilio.it
127.0.0.1 www.vir5gilio.it
127.0.0.1 virbgilio.it
127.0.0.1 www.virbgilio.it
127.0.0.1 virbilio.it
127.0.0.1 www.virbilio.it
127.0.0.1 virdgilio.it
127.0.0.1 www.virdgilio.it
127.0.0.1 viregilio.it
127.0.0.1 www.viregilio.it
127.0.0.1 virfgilio.it
127.0.0.1 www.virfgilio.it
127.0.0.1 www.virg8ilio.it
127.0.0.1 virg8ilio.it
127.0.0.1 www.virg8lio.it
127.0.0.1 virg8lio.it
127.0.0.1 virg9ilio.it
127.0.0.1 www.virg9ilio.it
127.0.0.1 www.virg9lio.it
127.0.0.1 virg9lio.it
127.0.0.1 www.virgbilio.it
127.0.0.1 virgbilio.it
127.0.0.1 virgfilio.it
127.0.0.1 www.virgfilio.it
127.0.0.1 www.virghilio.it
127.0.0.1 virghilio.it
127.0.0.1 www.virgi8lio.it
127.0.0.1 virgi8lio.it
127.0.0.1 virgi9lio.it
127.0.0.1 www.virgi9lio.it
127.0.0.1 www.virgiilo.it
127.0.0.1 virgiilo.it
127.0.0.1 www.virgiio.it
127.0.0.1 virgiio.it
127.0.0.1 virgijlio.it
127.0.0.1 www.virgijlio.it
127.0.0.1 www.virgiklio.it
127.0.0.1 virgiklio.it
127.0.0.1 www.virgil8io.it
127.0.0.1 virgil8io.it
127.0.0.1 www.virgil9io.it
127.0.0.1 virgil9io.it
127.0.0.1 virgili0.it
127.0.0.1 www.virgili0.it
127.0.0.1 virgili8o.it
127.0.0.1 www.virgili8o.it
127.0.0.1 www.virgili9.it
127.0.0.1 virgili9.it
127.0.0.1 www.virgili9o.it
127.0.0.1 virgili9o.it
127.0.0.1 virgilijo.it
127.0.0.1 www.virgilijo.it
127.0.0.1 www.virgiliko.it
127.0.0.1 virgiliko.it
127.0.0.1 virgilil.it
127.0.0.1 www.virgilil.it
127.0.0.1 virgililo.it
127.0.0.1 www.virgililo.it
127.0.0.1 virgilio0.it
127.0.0.1 www.virgilio0.it
127.0.0.1 www.virgilio9.it
127.0.0.1 virgilio9.it
127.0.0.1 virgilioi.it
127.0.0.1 www.virgilioi.it
127.0.0.1 virgiliok.it
127.0.0.1 www.virgiliok.it
127.0.0.1 virgiliol.it
127.0.0.1 www.virgiliol.it
127.0.0.1 virgiliop.it
127.0.0.1 www.virgiliop.it
127.0.0.1 virgilipo.it
127.0.0.1 www.virgilipo.it
127.0.0.1 virgiliuo.it
127.0.0.1 www.virgiliuo.it
127.0.0.1 www.virgiljio.it
127.0.0.1 virgiljio.it
127.0.0.1 www.virgilkio.it
127.0.0.1 virgilkio.it
127.0.0.1 www.virgiloio.it
127.0.0.1 virgiloio.it
127.0.0.1 www.virgiloo.it
127.0.0.1 virgiloo.it
127.0.0.1 www.virgilpio.it
127.0.0.1 virgilpio.it
127.0.0.1 virgiluio.it
127.0.0.1 www.virgiluio.it
127.0.0.1 virgiluo.it
127.0.0.1 www.virgiluo.it
127.0.0.1 virgin-tgp.net
127.0.0.1 virgioio.it
127.0.0.1 www.virgioio.it
127.0.0.1 virgiolio.it
127.0.0.1 www.virgiolio.it
127.0.0.1 www.virgiplio.it
127.0.0.1 virgiplio.it
127.0.0.1 www.virgiulio.it
127.0.0.1 virgiulio.it
127.0.0.1 virgjilio.it
127.0.0.1 www.virgjilio.it
127.0.0.1 www.virgkilio.it
127.0.0.1 virgkilio.it
127.0.0.1 www.virgklio.it
127.0.0.1 virgklio.it
127.0.0.1 www.virglilio.it
127.0.0.1 virglilio.it
127.0.0.1 virgoilio.it
127.0.0.1 www.virgoilio.it
127.0.0.1 virgtilio.it
127.0.0.1 www.virgtilio.it
127.0.0.1 www.virguilio.it
127.0.0.1 virguilio.it
127.0.0.1 www.virgvilio.it
127.0.0.1 virgvilio.it
127.0.0.1 virgyilio.it
127.0.0.1 www.virgyilio.it
127.0.0.1 www.virhgilio.it
127.0.0.1 virhgilio.it
127.0.0.1 virprotect.com
127.0.0.1 www.virprotect.com
127.0.0.1 virtgilio.it
127.0.0.1 www.virtgilio.it
127.0.0.1 virtilio.it
127.0.0.1 www.virtilio.it
127.0.0.1 www.virtualcodec.com
127.0.0.1 virtualcodec.com
127.0.0.1 virtual-ticket.net
127.0.0.1 www.virtual-ticket.net
127.0.0.1 virusburst.com
127.0.0.1 www.virusburst.com
127.0.0.1 viruscrusher.com
127.0.0.1 www.viruscrusher.com
127.0.0.1 virusdifesa.com
127.0.0.1 www.virusdifesa.com
127.0.0.1 virusforsvar.com
127.0.0.1 www.virusforsvar.com
127.0.0.1 virusgarde.com
127.0.0.1 www.virusgarde.com
127.0.0.1 www.virusheat.com
127.0.0.1 virusheat.com
127.0.0.1 www.virushunter.com
127.0.0.1 virushunter.com
127.0.0.1 virusnuke.com
127.0.0.1 www.virusnuke.com
127.0.0.1 virusprotectpro.com
127.0.0.1 virusranger.com
127.0.0.1 www.virusranger.com
127.0.0.1 www.virusrescue.com
127.0.0.1 virusrescue.com
127.0.0.1 virusscansite.com
127.0.0.1 www.virusscansite.com
127.0.0.1 www.virusschlacht.com
127.0.0.1 virusschlacht.com
127.0.0.1 www.virusvakt.com
127.0.0.1 virusvakt.com
127.0.0.1 www.virvgilio.it
127.0.0.1 virvgilio.it
127.0.0.1 virvilio.it
127.0.0.1 www.virvilio.it
127.0.0.1 virygilio.it
127.0.0.1 www.virygilio.it
127.0.0.1 vitamins-for-each.com
127.0.0.1 www.vitrgilio.it
127.0.0.1 vitrgilio.it
127.0.0.1 viurgilio.it
127.0.0.1 www.viurgilio.it
127.0.0.1 vivacodec.net
127.0.0.1 www.vivacodec.net
127.0.0.1 vjirgilio.it
127.0.0.1 www.vjirgilio.it
127.0.0.1 www.vkirgilio.it
127.0.0.1 vkirgilio.it
127.0.0.1 www.vkrgilio.it
127.0.0.1 vkrgilio.it
127.0.0.1 vlirgilio.it
127.0.0.1 www.vlirgilio.it
127.0.0.1 voghp.com
127.0.0.1 www.voghp.com
127.0.0.1 void.truth-is-out-there.org
127.0.0.1 www.voirgilio.it
127.0.0.1 voirgilio.it
127.0.0.1 vorriere.it
127.0.0.1 www.vorriere.it
127.0.0.1 votehowe.org
127.0.0.1 www.vother.info
127.0.0.1 vother.info
127.0.0.1 votreenton.biz
127.0.0.1 www.votreenton.biz
127.0.0.1 vparivalka.com
127.0.0.1 vplprocedure.com
127.0.0.1 www.vplprocedure.com
127.0.0.1 vse-moe.biz
127.0.0.1 www.vskeylogger.nazwa.pl
127.0.0.1 vskeylogger.nazwa.pl
127.0.0.1 www.vtvcp-ueorn.com
127.0.0.1 vtvcp-ueorn.com
127.0.0.1 vtvcp-ymct.com
127.0.0.1 www.vtvcp-ymct.com
127.0.0.1 vuirgilio.it
127.0.0.1 www.vuirgilio.it
127.0.0.1 vxebony.com
127.0.0.1 wabq.com
127.0.0.1 wabu.com
127.0.0.1 wakeupdick.com
127.0.0.1 www.walitalia.it
127.0.0.1 walitalia.it
127.0.0.1 wanfuchina.com
127.0.0.1 www.wanfuchina.com
127.0.0.1 ware2006.com
127.0.0.1 www.ware2006.com
127.0.0.1 www.warez.com
127.0.0.1 warez.com
127.0.0.1 www.warningiepage.com
127.0.0.1 warningiepage.com
127.0.0.1 warnomore.org
127.0.0.1 watchonline.tv
127.0.0.1 www.watchonline.tv
127.0.0.1 watersport-specialties.com
127.0.0.1 www.wazzupnet.com
127.0.0.1 wazzupnet.com
127.0.0.1 wbay.it
127.0.0.1 www.wbay.it
127.0.0.1 wbkb.com
127.0.0.1 web.links4all.biz
127.0.0.1 web1000.com
127.0.0.1 webaccelerating.com
127.0.0.1 www.webaccelerating.com
127.0.0.1 www.webbuying.net
127.0.0.1 webbuying.net
127.0.0.1 web-codec.com
127.0.0.1 www.web-codec.com
127.0.0.1 webcoolsearch.com
127.0.0.1 web-entrance.co
127.0.0.1 www.web-fastserve.com
127.0.0.1 web-fastserve.com
127.0.0.1 www.webhancer.com
127.0.0.1 webhancer.com
127.0.0.1 web-homepage.net
127.0.0.1 www.webinvestigator.com
127.0.0.1 webinvestigator.com
127.0.0.1 www.webiphoneaccess.com
127.0.0.1 webiphoneaccess.com
127.0.0.1 www.webiphonedownloads.com
127.0.0.1 webiphonedownloads.com
127.0.0.1 webipoddownload.com
127.0.0.1 www.webipoddownload.com
127.0.0.1 Web-mediaplayer.com
127.0.0.1 www.Web-mediaplayer.com
127.0.0.1 www.webnetinfo.net
127.0.0.1 webnetinfo.net
127.0.0.1 web-nexus.net
127.0.0.1 webpspdownload.com
127.0.0.1 www.webpspdownload.com
127.0.0.1 websearch.com
127.0.0.1 www.websearch.com
127.0.0.1 web-search.tk
127.0.0.1 www.websearch24.com
127.0.0.1 websearch24.com
127.0.0.1 websearchdot.com
127.0.0.1 websoft-a.com
127.0.0.1 www.websoft-a.com
127.0.0.1 websopot.com
127.0.0.1 www.websopot.com
127.0.0.1 www.webspyshield.com
127.0.0.1 webspyshield.com
127.0.0.1 www.webtop100.net
127.0.0.1 webtop100.net
127.0.0.1 webtopsecurity.com
127.0.0.1 www.webtopsecurity.com
127.0.0.1 weekend-movies.com
127.0.0.1 weeproject.com
127.0.0.1 www.weeproject.com
127.0.0.1 www.wegvonviren.com
127.0.0.1 wegvonviren.com
127.0.0.1 wethere.com
127.0.0.1 www.wethere.com
127.0.0.1 wetpornostars.com
127.0.0.1 wfix.com
127.0.0.1 wflu.com
127.0.0.1 wg581.com
127.0.0.1 www.wg581.com
127.0.0.1 www.whatmetodonow.org
127.0.0.1 whatmetodonow.org
127.0.0.1 whatsyoursearch.com
127.0.0.1 whazit.com
127.0.0.1 whitecodec.com
127.0.0.1 www.whitecodec.com
127.0.0.1 white-pages.ws
127.0.0.1 www.whitescat.com
127.0.0.1 whitescat.com
127.0.0.1 whittierblvd.com
127.0.0.1 whoisprivacyprotect.com
127.0.0.1 www.whoisprivacyprotect.com
127.0.0.1 winamp2007.com
127.0.0.1 www.winamp2007.com
127.0.0.1 winamp-download-now.com
127.0.0.1 www.winamp-download-now.com
127.0.0.1 www.winamp-hq.com
127.0.0.1 winamp-hq.com
127.0.0.1 www.winantispam.com
127.0.0.1 winantispam.com
127.0.0.1 winantispy.com
127.0.0.1 www.winantispy.com
127.0.0.1 winantispyware.com
127.0.0.1 www.winantispyware.com
127.0.0.1 winantivirus.com
127.0.0.1 www.winantivirus.com
127.0.0.1 winantiviruspro.com
127.0.0.1 www.winantiviruspro.com
127.0.0.1 www.win-anti-virus-pro.com
127.0.0.1 win-anti-virus-pro.com
127.0.0.1 www.windefender.com
127.0.0.1 windefender.com
127.0.0.1 windowenhancer.com
127.0.0.1 windrivecleaner.com
127.0.0.1 www.windrivecleaner.com
127.0.0.1 www.windrivesafe.com
127.0.0.1 windrivesafe.com
127.0.0.1 windupdates.com
127.0.0.1 winfirewall.com
127.0.0.1 www.winfirewall.com
127.0.0.1 winfixer.com
127.0.0.1 www.winfixer.com
127.0.0.1 winfixer2006.com
127.0.0.1 www.winfixer2006.com
127.0.0.1 win-in-casino.com
127.0.0.1 winmediacodec.com
127.0.0.1 www.winmediacodec.com
127.0.0.1 winmsn.com
127.0.0.1 www.winmx.click-new-download.com
127.0.0.1 winmx.click-new-download.com
127.0.0.1 www.winmxfrance.com
127.0.0.1 winmxfrance.com
127.0.0.1 www.winmx-freebie.com
127.0.0.1 winmx-freebie.com
127.0.0.1 winmx-music-download.com
127.0.0.1 www.winmx-music-download.com
127.0.0.1 winnanny.com
127.0.0.1 www.winnanny.com
127.0.0.1 winprotect.net
127.0.0.1 winrar-download-now.com
127.0.0.1 www.winrar-download-now.com
127.0.0.1 www.winrar-hq.com
127.0.0.1 winrar-hq.com
127.0.0.1 winrar-stop.com
127.0.0.1 www.winrar-stop.com
127.0.0.1 winshow.biz
127.0.0.1 winsoftware.com
127.0.0.1 www.winsoftware.com
127.0.0.1 www.wintvguide.com
127.0.0.1 wintvguide.com
127.0.0.1 www.win-virus-pro.com
127.0.0.1 win-virus-pro.com
 
127.0.0.1 www.winzip-11.com
127.0.0.1 winzip-11.com
127.0.0.1 winzip-hq.com
127.0.0.1 www.winzip-hq.com
127.0.0.1 wiresearch.com
127.0.0.1 wish7.com
127.0.0.1 www.wm.buhartes.info
127.0.0.1 wm.buhartes.info
127.0.0.1 www.wm.kannylizaciya.info
127.0.0.1 wm.kannylizaciya.info
127.0.0.1 wm.komforochka.info
127.0.0.1 www.wm.komforochka.info
127.0.0.1 wm.vother.info
127.0.0.1 www.wm.vother.info
127.0.0.1 wolfpacracing.com
127.0.0.1 wonder-context.com
127.0.0.1 www.wonder-context.com
127.0.0.1 woool.100888290cs.com
127.0.0.1 wordlist.jps.ru
127.0.0.1 WorldAntiSpy.com
127.0.0.1 www.WorldAntiSpy.com
127.0.0.1 www.worldbestadult.com
127.0.0.1 worldbestadult.com
127.0.0.1 worldray.com
127.0.0.1 www.worldray.com
127.0.0.1 worldsecurityonline.biz
127.0.0.1 www.worldsecurityonline.biz
127.0.0.1 www.worldtostart.com
127.0.0.1 worldtostart.com
127.0.0.1 worldusa.com
127.0.0.1 www.worldwideadvertisingservices.info
127.0.0.1 worldwideadvertisingservices.info
127.0.0.1 www.wowsearch.org
127.0.0.1 wowsearch.org
127.0.0.1 wpc2001.org
127.0.0.1 wr.mcboo.com
127.0.0.1 wrs.mcboo.com
127.0.0.1 wspzone.sexpornonline.com
127.0.0.1 wsupereva.it
127.0.0.1 www.wsupereva.it
127.0.0.1 www1.beruijindegunhadesun.com
127.0.0.1 www.www2.p0rt2.com
127.0.0.1 www2.p0rt2.com
127.0.0.1 www224.paypopup.com
127.0.0.1 www3.bigtrafficnetwork.com
127.0.0.1 www3.hadesunharuikeya.com
127.0.0.1 www4free.info
127.0.0.1 www5.worldray.com
127.0.0.1 www6.worldray.com
127.0.0.1 www.www7.logih.com
127.0.0.1 www7.logih.com
127.0.0.1 wwwadobe-download-now.com
127.0.0.1 www-audacity.com
127.0.0.1 www.www-audacity.com
127.0.0.1 wwwbet.net
127.0.0.1 wwwbetting.net
127.0.0.1 wwwCrazygirls-world.com
127.0.0.1 wwwdownloadwizard.com
127.0.0.1 www-free-tunes.com
127.0.0.1 www.www-free-tunes.com
127.0.0.1 wwwpokergames.com
127.0.0.1 wwwpokerplayers.com
127.0.0.1 wwwroulette.net
127.0.0.1 wwwsearch.biz
127.0.0.1 www.wwwsearch.biz
127.0.0.1 wwwsearchdrive.info
127.0.0.1 www.www-spyboot.com
127.0.0.1 www-spyboot.com
127.0.0.1 www-Spybot.net
127.0.0.1 www.www-spybot.net
127.0.0.1 www-spybot.net
127.0.0.1 www.www-spybotcom.com
127.0.0.1 www-spybotcom.com
127.0.0.1 www.www-SpywareBot.org
127.0.0.1 www-SpywareBot.org
127.0.0.1 wwww.2211.net
127.0.0.1 wwww.adnet-plus.com
127.0.0.1 www.www-win-mx.com
127.0.0.1 www-win-mx.com
127.0.0.1 wwwxtremesoftware-ltd.com
127.0.0.1 wwwyahoo.downloadznow.net
127.0.0.1 www.wzdq.cn
127.0.0.1 wzdq.cn
127.0.0.1 x.full-tgp.net
127.0.0.1 xads.cliks.org
127.0.0.1 www.xathzesocc.com
127.0.0.1 xathzesocc.com
127.0.0.1 xbeta69.com
127.0.0.1 www.xbxxrvnyes.com
127.0.0.1 xbxxrvnyes.com
127.0.0.1 xcomics4u.com
127.0.0.1 xcorriere.it
127.0.0.1 www.xcorriere.it
127.0.0.1 www.xerocodec.com
127.0.0.1 xerocodec.com
127.0.0.1 xerocodec.net
127.0.0.1 www.xerocodec.net
127.0.0.1 x-google.net
127.0.0.1 xhcodec.com
127.0.0.1 www.xhcodec.com
127.0.0.1 xibu315.com
127.0.0.1 www.xibu315.com
127.0.0.1 xic-bs.com
127.0.0.1 www.xjupiter.com
127.0.0.1 xjupiter.com
127.0.0.1 xldr.com
127.0.0.1 x-library.com
127.0.0.1 xlola.underagehost.com
127.0.0.1 xmlsearch.mygeek.com
127.0.0.1 xorriere.it
127.0.0.1 www.xorriere.it
127.0.0.1 www.xosearchox.com
127.0.0.1 xosearchox.com
127.0.0.1 xp.attrezzi.biz
127.0.0.1 xp18.com
127.0.0.1 xpassgenerator.com
127.0.0.1 www.xpassgenerator.com
127.0.0.1 www.xpasswordmanager.com
127.0.0.1 xpasswordmanager.com
127.0.0.1 www.x-porngalleries.com
127.0.0.1 x-porngalleries.com
127.0.0.1 www.x-pornmoviez.com
127.0.0.1 x-pornmoviez.com
127.0.0.1 www.x-pornmovz.com
127.0.0.1 x-pornmovz.com
127.0.0.1 x-prnmoviez.com
127.0.0.1 www.x-prnmoviez.com
127.0.0.1 www.xp-vista.com
127.0.0.1 xp-vista.com
127.0.0.1 x-ratedclips.com
127.0.0.1 www.x-ratedclips.com
127.0.0.1 www.xrdenterprise.com
127.0.0.1 xrdenterprise.com
127.0.0.1 www.xrenoder.com
127.0.0.1 xrenoder.com
127.0.0.1 xrenosearch.com
127.0.0.1 xrensmagpost.com
127.0.0.1 www.xsec.org
127.0.0.1 xsec.org
127.0.0.1 xsex.ws
127.0.0.1 www.xsremover.com
127.0.0.1 xsremover.com
127.0.0.1 www.xtipp.de
127.0.0.1 xtipp.de
127.0.0.1 www.xtosearch.biz
127.0.0.1 xtosearch.biz
127.0.0.1 xtragay.com
127.0.0.1 xtravideos.com
127.0.0.1 www.xtravideos.com
127.0.0.1 xtremesoftware-ltd.com
127.0.0.1 xu.pl
127.0.0.1 xu.xu.pl
127.0.0.1 www.xupiter.com
127.0.0.1 xupiter.com
127.0.0.1 www.xvgate.com
127.0.0.1 xvgate.com
127.0.0.1 xvidscollection.com
127.0.0.1 www.xvidscollection.com
127.0.0.1 xvsenterprise.com
127.0.0.1 www.xvsenterprise.com
127.0.0.1 x-webdesign.com
127.0.0.1 www.xwebsearch.biz
127.0.0.1 xwebsearch.biz
127.0.0.1 xxlblog.info
127.0.0.1 www.xxlblog.info
127.0.0.1 www.xxx.com
127.0.0.1 xxx.com
127.0.0.1 www.xxxallvideo.com
127.0.0.1 xxxallvideo.com
127.0.0.1 xxxcategories.com
127.0.0.1 xxxemailxxx.com
127.0.0.1 xxxmovietour.com
127.0.0.1 www.xxxmovietour.com
127.0.0.1 www.xxxpornmovs.com
127.0.0.1 xxxpornmovs.com
127.0.0.1 xxxteenfilm.com
127.0.0.1 www.xxxteenfilm.com
127.0.0.1 xxxtoolbar.com
127.0.0.1 www.xxxzonevideo.com
127.0.0.1 xxxzonevideo.com
127.0.0.1 xyzlimited.com
127.0.0.1 www.xyzlimited.com
127.0.0.1 xyzsolution.com
127.0.0.1 www.xyzsolution.com
127.0.0.1 xzoomy.com
127.0.0.1 www.yahabags.com
127.0.0.1 yahabags.com
127.0.0.1 yahoo.downloadznow.net
127.0.0.1 yahoo.panet.org
127.0.0.1 yboeragu.com
127.0.0.1 www.yboeragu.com
127.0.0.1 www.ydaproject.com
127.0.0.1 ydaproject.com
127.0.0.1 yeak.net
127.0.0.1 y-e-l-l-o-w.com
127.0.0.1 yellow500.com
127.0.0.1 yezol.com
127.0.0.1 www.ygcoueorn.com
127.0.0.1 ygcoueorn.com
127.0.0.1 www.ygcovtvcp.com
127.0.0.1 ygcovtvcp.com
127.0.0.1 www.ygoogle.it
127.0.0.1 ygoogle.it
127.0.0.1 www.ygsondheks.info
127.0.0.1 ygsondheks.info
127.0.0.1 www.yim-stop.com
127.0.0.1 yim-stop.com
127.0.0.1 www.yiscali.it
127.0.0.1 yiscali.it
127.0.0.1 www.ymctaaqada.com
127.0.0.1 ymctaaqada.com
127.0.0.1 ymct-aaqada.com
127.0.0.1 www.ymct-aaqada.com
127.0.0.1 ymctavxiz.biz
127.0.0.1 www.ymctavxiz.biz
127.0.0.1 ynotube.com
127.0.0.1 www.ynotube.com
127.0.0.1 www.yoogee.com
127.0.0.1 yoogee.com
127.0.0.1 yoogle.it
127.0.0.1 www.yoogle.it
127.0.0.1 yootube.info
127.0.0.1 yops.biz
127.0.0.1 www.yops.biz
127.0.0.1 youfindall.com
127.0.0.1 youfindall.net
127.0.0.1 youlikehere.com
127.0.0.1 www.youlikehere.com
127.0.0.1 youniyouwo.com
127.0.0.1 www.youniyouwo.com
127.0.0.1 yourbookmarks.info
127.0.0.1 yourbookmarks.ws
127.0.0.1 yourchillyvids.com
127.0.0.1 www.yourchillyvids.com
127.0.0.1 www.yourcodec.com
127.0.0.1 yourcodec.com
127.0.0.1 yourieprotect.com
127.0.0.1 www.yourieprotect.com
127.0.0.1 youriesafety.com
127.0.0.1 www.youriesafety.com
127.0.0.1 www.youriesecure.com
127.0.0.1 youriesecure.com
127.0.0.1 www.yourphotozone.com
127.0.0.1 yourphotozone.com
127.0.0.1 your-prescriptions.net
127.0.0.1 www.yoursearchspace.com
127.0.0.1 yoursearchspace.com
127.0.0.1 yoursitebar.com
127.0.0.1 you-search.com
127.0.0.1 you-search.com.ru
127.0.0.1 ypir.com
127.0.0.1 ysa-info.net
127.0.0.1 ysbweb.com
127.0.0.1 www.ysbweb.com
127.0.0.1 www.ytiscali.it
127.0.0.1 ytiscali.it
127.0.0.1 ytrenitalia.it
127.0.0.1 www.ytrenitalia.it
127.0.0.1 yukohamano.com
127.0.0.1 www.yunibo.it
127.0.0.1 yunibo.it
127.0.0.1 ywebsearch.info
127.0.0.1 www.zabywjwzlr.biz.biz
127.0.0.1 zabywjwzlr.biz.biz
127.0.0.1 www.zalitalia.it
127.0.0.1 zalitalia.it
127.0.0.1 www.zangcodec.net
127.0.0.1 zangcodec.net
127.0.0.1 zangocash.com
127.0.0.1 www.zangocash.com
127.0.0.1 zapros.com
127.0.0.1 zcodec.com
127.0.0.1 www.zcodec.com
127.0.0.1 zdrqmpad.com
127.0.0.1 www.zdrqmpad.com
127.0.0.1 zelaznyworld.com
127.0.0.1 www.zelaznyworld.com
127.0.0.1 www.zenotecnico.com
127.0.0.1 zenotecnico.com
127.0.0.1 www.zenotecnico2.com
127.0.0.1 zenotecnico2.com
127.0.0.1 zero.bestmanage.org
127.0.0.1 zero.bestmanage0.org
127.0.0.1 zero.bestmanage1.org
127.0.0.1 zero.bestmanage2.org
127.0.0.1 zero.bestmanage3.org
127.0.0.1 zero.bestmanage4.org
127.0.0.1 zero.bestmanage5.org
127.0.0.1 zero.bestmanage6.org
127.0.0.1 zero.bestmanage7.org
127.0.0.1 zero.bestmanage8.org
127.0.0.1 zero.bestmanage9.org
127.0.0.1 zero.serverc.org
127.0.0.1 zero.sisdotnet.com
127.0.0.1 zerocodec.com
127.0.0.1 www.zerocodec.com
127.0.0.1 zero-codec.com
127.0.0.1 www.zero-codec.com
127.0.0.1 zesearch.com
127.0.0.1 www.zestyfind.com
127.0.0.1 zestyfind.com
127.0.0.1 www.zfxaqzkevi.com
127.0.0.1 zfxaqzkevi.com
127.0.0.1 zhmbscwdgk.biz
127.0.0.1 www.zhmbscwdgk.biz
127.0.0.1 zipcodec.com
127.0.0.1 www.zipcodec.com
127.0.0.1 ziportal.com
127.0.0.1 zipportal.com
127.0.0.1 www.zippy-lookup.com
127.0.0.1 zippy-lookup.com
127.0.0.1 www.zjkjw.gov.cn
127.0.0.1 zjkjw.gov.cn
127.0.0.1 znext.com
127.0.0.1 www.znext.com
127.0.0.1 zonealarm-download-now.com
127.0.0.1 www.zonealarm-download-now.com
127.0.0.1 www.zonealarm-stop.com
127.0.0.1 zonealarm-stop.com
127.0.0.1 zone-media.com
127.0.0.1 www.zone-media.com
127.0.0.1 zoneoffreeporn.com
127.0.0.1 zoofil.com
127.0.0.1 zoomegasite.com
127.0.0.1 zpwebsource.com
127.0.0.1 www.zpwebsource.com
127.0.0.1 zqavanjpn.biz
127.0.0.1 www.zqavanjpn.biz
127.0.0.1 z-quest.com
127.0.0.1 www.z-quest.com
127.0.0.1 www.zsupereva.it
127.0.0.1 zsupereva.it
127.0.0.1 zsvcompany.com
127.0.0.1 www.zsvcompany.com
127.0.0.1 www.zurrusco.com
127.0.0.1 zurrusco.com
127.0.0.1 zvimigdal.com
127.0.0.1 www.zxcsolution.com
127.0.0.1 zxcsolution.com
127.0.0.1 www.zxlinks.com
127.0.0.1 zxlinks.com
127.0.0.1 zyban-zocor-levitra.com

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files


»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{5A32C5CF-7879-4390-8C16-133BD3AB2169}: DhcpNameServer=68.87.71.226 68.87.73.242
HKLM\SYSTEM\CCS\Services\Tcpip\..\{9E73513C-FB75-4F11-924F-08EBE84CA741}: NameServer=67.20.159.100 67.20.159.101
HKLM\SYSTEM\CCS\Services\Tcpip\..\{F570FCA5-D4B7-43AF-84DC-89199EB0E53A}: NameServer=67.20.159.100 67.20.159.101
HKLM\SYSTEM\CS1\Services\Tcpip\..\{5A32C5CF-7879-4390-8C16-133BD3AB2169}: DhcpNameServer=68.87.71.226 68.87.73.242
HKLM\SYSTEM\CS1\Services\Tcpip\..\{9E73513C-FB75-4F11-924F-08EBE84CA741}: NameServer=67.20.159.100 67.20.159.101
HKLM\SYSTEM\CS1\Services\Tcpip\..\{F570FCA5-D4B7-43AF-84DC-89199EB0E53A}: NameServer=67.20.159.100 67.20.159.101
HKLM\SYSTEM\CS3\Services\Tcpip\..\{5A32C5CF-7879-4390-8C16-133BD3AB2169}: DhcpNameServer=68.87.71.226 68.87.73.242
HKLM\SYSTEM\CS3\Services\Tcpip\..\{9E73513C-FB75-4F11-924F-08EBE84CA741}: NameServer=67.20.159.100 67.20.159.101
HKLM\SYSTEM\CS3\Services\Tcpip\..\{F570FCA5-D4B7-43AF-84DC-89199EB0E53A}: NameServer=67.20.159.100 67.20.159.101
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=68.87.71.226 68.87.73.242
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: NameServer=67.20.159.100 67.20.159.101
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=68.87.71.226 68.87.73.242
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: NameServer=67.20.159.100 67.20.159.101
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=68.87.71.226 68.87.73.242
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: NameServer=67.20.159.100 67.20.159.101


»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» End
 
SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 03/24/2008 at 01:47 AM

Application Version : 4.0.1154

Core Rules Database Version : 3423
Trace Rules Database Version: 1415

Scan type : Complete Scan
Total Scan Time : 00:45:43

Memory items scanned : 192
Memory threats detected : 0
Registry items scanned : 5615
Registry threats detected : 0
File items scanned : 14379
File threats detected : 0


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:58:48 AM, on 3/24/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\program files\common files\mcafee\mna\mcnasvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
C:\Program Files\McAfee\MSK\MskSrver.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\SiteAdvisor\6253\SAService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\McAfee\MPS\mpsevh.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\AOL\1145315460\ee\AOLSoftware.exe
C:\Program Files\Dell Photo AIO Printer 964\dlcjmon.exe
C:\Program Files\Dell Photo AIO Printer 964\memcard.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Program Files\McAfee\MSK\MskAgent.exe
C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\dlcjcoms.exe
C:\Program Files\Common Files\AOL\Loader\aolload.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.netflix.com/
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptcl.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\Program Files\GoogleAFE\GoogleAE.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1145315460\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [DLCJCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCJtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [dlcjmon.exe] "C:\Program Files\Dell Photo AIO Printer 964\dlcjmon.exe"
O4 - HKLM\..\Run: [MemoryCardManager] "C:\Program Files\Dell Photo AIO Printer 964\memcard.exe"
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Common Files\AOL\IPHSend\IPHSend.exe
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe" -s
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Search - ?p=ZJfox000
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{9E73513C-FB75-4F11-924F-08EBE84CA741}: NameServer = 67.20.159.100 67.20.159.101
O17 - HKLM\System\CCS\Services\Tcpip\..\{F570FCA5-D4B7-43AF-84DC-89199EB0E53A}: NameServer = 67.20.159.100 67.20.159.101
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 67.20.159.100 67.20.159.101
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 67.20.159.100 67.20.159.101
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O21 - SSODL: altvxvm - {6CE8F133-8425-4197-8BDB-7373ED77E0ED} - C:\WINDOWS\altvxvm.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: dlcj_device - Unknown owner - C:\WINDOWS\system32\dlcjcoms.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\6253\SAService.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--
End of file - 13953 bytes
 
Hello, FINALLY i finished posting that huge RAPPORT log. Took way more than 10 posts to finish it. I can clearly see that the spyware and malware is gone but I did notice my internet going a little slow. Can you help with that?? Also PLEASE tell me how to restore my start taskbar and my folder and internet windows. They are the older windows 98 look not my original windows xp look. Please help with that. Thanks so much for your help. Your friend, Rob
 
Hi

Yes, smitfraudfix listed contents of entire hosts file, that's why it was so big.

"Also PLEASE tell me how to restore my start taskbar and my folder and internet windows. They are the older windows 98 look not my original windows xp look. Please help with that."

Go to Control Panel - Display - Themes and choose windows XP from it.

Did it help?
 
Hello, MY GOD you are the SMARTEST MAN IN THE WORLD!!! I LOVE YOU!! Yes that was it for some reason it changed my theme. So i changed it back to windows xp and im all back to normal!! So you looked at the logs and everything looks normal and NON-infected right? Please let me know if everything looks good and then we will close this post and list it as problem solved. You are a god and a lifesavor. Thanks for everything. Your friend, Rob
 
Hi

We're not done yet :)

Please do an online scan with Kaspersky Online Scanner. You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then start to download the latest definition files.
  • Once the scanner is installed and the definitions downloaded, click Next.
  • Now click on Scan Settings
  • In the scan settings make sure that the following are selected:

    o Scan using the following Anti-Virus database:

    + Extended (If available otherwise Standard)

    o Scan Options:

    + Scan Archives
    + Scan Mail Bases
  • Click OK
  • Now under select a target to scan select My Computer
  • The scan will take a while so be patient and let it run. Once the scan is complete it will display if your system has been infected.
  • Please do not use your computer while the scan is running. Once the scan is complete it will display if your system has been infected.
  • Click the Save Report As... button (see red arrow below)
    Kas-SaveReport-1.gif
  • In the Save as... prompt, select Desktop
  • In the File name box, name the file KasScan-ddmmyy (or similar)
  • In the Save as type prompt, select Text file (see below)
    Kas-Savetxt.gif
  • Now click on the Save as Text button
  • Savethe file to your desktop.
  • Copy and paste that information in your next post.

Note: This scanner will work with Internet Explorer Only! Keep ALL other programs closed during the scan

Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the license, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license accepted, reset to 100%.

Post:

- a fresh HijackThis log
- kaspersky report
 
Due to the lack of feedback this Topic is closed.

If it has been five days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.

If it has been less than five days since your last response and you need the thread re-opened, please send a private message (pm). A valid, working link to the closed topic is required.

Everyone else please begin a New Topic.
 
You must log in or register to reply here.
Back
Top