Windows cannot find'C:Windows\shell.exe [RESOLVED], error message when my computer starts |
![]() ![]() |
Windows cannot find'C:Windows\shell.exe [RESOLVED], error message when my computer starts |
Feb 8 2008, 11:09 AM
Post
#1
|
|
|
Member ![]() ![]() Posts: 38 OS: Windows XP |
I used Spybot S&D 1.5 for about a week and removed the program 2 days ago because I was getting messages form the Spybot Resident asking me if I wanted to make changes to my registry. After I removed the program and restarted my computer I got an error message saying "Windows cannot find 'C:\Windows\shell.exe; Make sure you typed the name correctly, and then try again. To search for a file, click the start button, and then click search." I get the same message every time I try to start my computer. I did preparation and no threats were found. Please Help!
HijackThis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:49:39 AM, on 2/8/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\brsvc01a.exe C:\WINDOWS\system32\brss01a.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS\system32\Brmfrmps.exe C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\Program Files\Dell Support Center\bin\sprtsvc.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe C:\PROGRA~1\Yahoo!\browser\ycommon.exe C:\PROGRA~1\Yahoo!\YOP\yop.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe C:\Program Files\Brother\ControlCenter2\brctrcen.exe C:\Program Files\internet explorer\iexplore.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Dell\Media Experience\DMXLauncher.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\DellSupport\DSAgnt.exe C:\Program Files\Dell Support Center\bin\sprtcmd.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Google\Google Updater\GoogleUpdater.exe C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe C:\PROGRA~1\Yahoo!\YOP\SSDK02.exe C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\msiexec.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://att.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/.../www.yahoo.com/ search/ie.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1 R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\shell.exe O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\common\yiesrvc.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe O4 - HKLM\..\Run: [YOP] C:\PROGRA~1\Yahoo!\YOP\yop.exe /autostart O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2 \brctrcen.exe /autorun O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0 \Reader\Reader_sl.exe" O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04 \bin\jusched.exe" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5 \avgas.exe" /minimized O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKCU\..\RunOnce: [] C:\Program Files\Internet Explorer\iexplore.exe http://www.symantec.com/techsupp/servlet/ProductMessages? module=2007&error=0&language=en&product=SymNRT&version=2008.0.2.17&build=Symantec&a=000 00082.00000049.000000b9&b=00000082.0000006e.00000143&c=00000082.00000096.000001da&d=000 00083.00000030.0000010e O4 - Global Startup: Digital Line Detect.lnk = ? O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10 \OSA.EXE O4 - Global Startup: Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe O8 - Extra context menu item: &Search - http://kl.bar.need2find.com/KL/menusearch.html?p=KL O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll O16 - DPF: {341FF14B-00CB-49F5-A427-A164DF1D5E1F} (MALPlaybackCtrl Class) - http://musicstore.connect.com/XSL/mb_us/ht...ALStreaming.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat.../muweb_site.cab? 1172946596421 O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...224/mcfscan.cab O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\480 \G2AWinLogon.dll O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1 \COMMON~1\AOL\ACS\AOLacsd.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\system32\Brmfrmps.exe O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\480\g2aservice.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE -- End of file - 10831 bytes Uninstall List Adobe Flash Player ActiveX Adobe Reader 8.1.1 America Online (Choose which version to remove) AOL Coach Version 1.0(Build:20040229.1 en) AOL Connectivity Services AOLIcon Apple Mobile Device Support Apple Software Update AT&T Yahoo! Applications avast! Antivirus AVG Anti-Spyware 7.5 Banctec Service Agreement Brother MFL-Pro Suite CleanUp! Conexant D850 56K V.9x DFVc Modem Corel Photo Album 6 Dell CinePlayer Dell Digital Jukebox Driver Dell Driver Reset Tool Dell Game Console Dell Support Center DellConnect DellSupport Digital Content Portal Digital Line Detect Documentation & Support Launcher EducateU ELIcon Games, Music, & Photos Launcher Get High Speed Internet! GOM Player Google Updater GoToAssist 8.0.0.480 HijackThis 2.0.2 Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB914440) Hotfix for Windows XP (KB915865) Hotfix for Windows XP (KB926239) Intel® Extreme Graphics 2 Driver Intel® PRO Network Adapters and Drivers Intel® PROSet for Wired Connections iTunes Java 6 Update 4 LimeWire 4.14.10 Macromedia Shockwave Player MCU Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Digital Image Standard 2006 Microsoft Encarta Encyclopedia Standard 2006 Microsoft Internationalized Domain Names Mitigation APIs Microsoft Money 2006 Microsoft National Language Support Downlevel APIs Microsoft Plus! Digital Media Edition Installer Microsoft Plus! Photo Story 2 LE Microsoft Streets & Trips 2006 Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Visual C++ 2005 Redistributable Microsoft Windows XP Video Decoder Checkup Utility Microsoft Word 2002 Microsoft Works Microsoft Works Suite 2006 Setup Launcher Microsoft Works Suite Add-in for Microsoft Word Modem Helper Move Networks Player for Internet Explorer MSN MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) Musicmatch® Jukebox NetWaiting PaperPort QuickTime QuickTime RealPlayer Roxio DLA Roxio RecordNow Audio Roxio RecordNow Copy Roxio RecordNow Data Search Assist Security Update for CAPICOM (KB931906) Security Update for CAPICOM (KB931906) Security Update for Step By Step Interactive Training (KB898458) Security Update for Step By Step Interactive Training (KB923723) Security Update for Windows Internet Explorer 7 (KB928090) Security Update for Windows Internet Explorer 7 (KB931768) Security Update for Windows Internet Explorer 7 (KB933566) Security Update for Windows Internet Explorer 7 (KB937143) Security Update for Windows Internet Explorer 7 (KB938127) Security Update for Windows Internet Explorer 7 (KB939653) Security Update for Windows Internet Explorer 7 (KB942615) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player 10 (KB917734) Security Update for Windows Media Player 11 (KB936782) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901190) Security Update for Windows XP (KB902400) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Security Update for Windows XP (KB911927) Security Update for Windows XP (KB913580) Security Update for Windows XP (KB914388) Security Update for Windows XP (KB914389) Security Update for Windows XP (KB916281) Security Update for Windows XP (KB917422) Security Update for Windows XP (KB917953) Security Update for Windows XP (KB918118) Security Update for Windows XP (KB919007) Security Update for Windows XP (KB920213) Security Update for Windows XP (KB920670) Security Update for Windows XP (KB920683) Security Update for Windows XP (KB920685) Security Update for Windows XP (KB921398) Security Update for Windows XP (KB921503) Security Update for Windows XP (KB922616) Security Update for Windows XP (KB922819) Security Update for Windows XP (KB923191) Security Update for Windows XP (KB923414) Security Update for Windows XP (KB923689) Security Update for Windows XP (KB923694) Security Update for Windows XP (KB923980) Security Update for Windows XP (KB924191) Security Update for Windows XP (KB924270) Security Update for Windows XP (KB924496) Security Update for Windows XP (KB924667) Security Update for Windows XP (KB925454) Security Update for Windows XP (KB925486) Security Update for Windows XP (KB925902) Security Update for Windows XP (KB926255) Security Update for Windows XP (KB926436) Security Update for Windows XP (KB927779) Security Update for Windows XP (KB927802) Security Update for Windows XP (KB928090) Security Update for Windows XP (KB928255) Security Update for Windows XP (KB928843) Security Update for Windows XP (KB929123) Security Update for Windows XP (KB930178) Security Update for Windows XP (KB931261) Security Update for Windows XP (KB931784) Security Update for Windows XP (KB932168) Security Update for Windows XP (KB933729) Security Update for Windows XP (KB935839) Security Update for Windows XP (KB935840) Security Update for Windows XP (KB936021) Security Update for Windows XP (KB938829) Security Update for Windows XP (KB941202) Security Update for Windows XP (KB941568) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB941644) Security Update for Windows XP (KB943460) Security Update for Windows XP (KB943485) Security Update for Windows XP (KB944653) Sonic Activation Module Sonic Update Manager SUPERAntiSpyware Free Edition Talking Typing Teacher Update for Windows XP (KB894391) Update for Windows XP (KB898461) Update for Windows XP (KB900485) Update for Windows XP (KB904942) Update for Windows XP (KB908531) Update for Windows XP (KB910437) Update for Windows XP (KB911280) Update for Windows XP (KB916595) Update for Windows XP (KB920872) Update for Windows XP (KB922582) Update for Windows XP (KB927891) Update for Windows XP (KB929338) Update for Windows XP (KB930916) Update for Windows XP (KB931836) Update for Windows XP (KB933360) Update for Windows XP (KB936357) Update for Windows XP (KB938828) Update for Windows XP (KB942763) URL Assistant WebCyberCoach 3.2 Dell Windows Internet Explorer 7 Windows Media Format 11 runtime Windows Media Format 11 runtime Windows Media Player 10 Windows Media Player 11 Windows Media Player 11 Windows Media Player Hotfix [See Q828026 for more information] Windows XP Hotfix - KB885836 Windows XP Hotfix - KB885884 Windows XP Hotfix - KB886185 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB890859 WinRAR archiver This post has been edited by Kizzy: Feb 8 2008, 11:13 AM |
|
|
Feb 9 2008, 10:08 AM
Post
#2
|
|
![]() GeekU Teacher Posts: 34,385 From: Dublin OS: XP |
Hello
Open notepad, click Format at the top, uncheck wordwrap Before we begin, you should save these instructions in Notepad to your desktop, or print them, for easy reference. Much of our fix will be done in Safe mode, and you will be unable to access this thread at that time. If you have questions at any point, or are unsure of the instructions, feel free to post here and ask for clarification before proceeding. Please download SmitfraudFix (by S!Ri) to your Desktop. Next, please reboot your computer in Safe Mode by doing the following :
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files. You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection. The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter". The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows. A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply. The report can also be found at the root of the system drive, usually at C:\rapport.txt Warning : running option #2 on a non infected computer will remove your Desktop background. Please download Deckard's System Scanner (DSS) and save it to your Desktop.
|
|
|
Feb 10 2008, 11:08 AM
Post
#3
|
|
|
Member ![]() ![]() Posts: 38 OS: Windows XP |
Hello Rorschach112
Thank you for responding to my post. Here are the results of my scans. SmitFraudFix v2.286 Scan done at 10:25:51.76, Sun 02/10/2008 Run from C:\Documents and Settings\Kirsten\Desktop\SmitfraudFix OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT The filesystem type is NTFS Fix run in safe mode »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» Killing process »»»»»»»»»»»»»»»»»»»»»»»» hosts 127.0.0.1 localhost 127.0.0.1 007guard.com 127.0.0.1 www.007guard.com 127.0.0.1 008i.com 127.0.0.1 008k.com 127.0.0.1 www.008k.com 127.0.0.1 00hq.com 127.0.0.1 www.00hq.com 127.0.0.1 010402.com 127.0.0.1 032439.com 127.0.0.1 www.032439.com 127.0.0.1 1001-search.info 127.0.0.1 www.1001-search.info 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 100sexlinks.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 10sek.com 127.0.0.1 www.10sek.com 127.0.0.1 123topsearch.com 127.0.0.1 www.123topsearch.com 127.0.0.1 132.com 127.0.0.1 www.132.com 127.0.0.1 136136.net 127.0.0.1 www.136136.net 127.0.0.1 139mm.com 127.0.0.1 www.139mm.com 127.0.0.1 163ns.com 127.0.0.1 www.163ns.com 127.0.0.1 171203.com 127.0.0.1 17-plus.com 127.0.0.1 1800searchonline.com 127.0.0.1 www.1800searchonline.com 127.0.0.1 180searchassistant.com 127.0.0.1 www.180searchassistant.com 127.0.0.1 180solutions.com 127.0.0.1 www.180solutions.com 127.0.0.1 181.365soft.info 127.0.0.1 www.181.365soft.info 127.0.0.1 1987324.com 127.0.0.1 www.1987324.com 127.0.0.1 1-domains-registrations.com 127.0.0.1 www.1-domains-registrations.com 127.0.0.1 1-extreme.biz 127.0.0.1 www.1-extreme.biz 127.0.0.1 1sexparty.com 127.0.0.1 www.1sexparty.com 127.0.0.1 1stantivirus.com 127.0.0.1 www.1stantivirus.com 127.0.0.1 1stpagehere.com 127.0.0.1 www.1stpagehere.com 127.0.0.1 1stsearchportal.com 127.0.0.1 www.1stsearchportal.com 127.0.0.1 2.82211.net 127.0.0.1 www.2006ooo.com 127.0.0.1 2007-download.com 127.0.0.1 www.2007-download.com 127.0.0.1 2020search.com 127.0.0.1 www.2020search.com 127.0.0.1 20x2p.com 127.0.0.1 24.365soft.info 127.0.0.1 www.24.365soft.info 127.0.0.1 24-7pharmacy.info 127.0.0.1 www.24-7pharmacy.info 127.0.0.1 24-7searching-and-more.com 127.0.0.1 www.24-7searching-and-more.com 127.0.0.1 24teen.com 127.0.0.1 www.24teen.com 127.0.0.1 2every.net 127.0.0.1 www.2every.net 127.0.0.1 2ndpower.com 127.0.0.1 2search.com 127.0.0.1 www.2search.com 127.0.0.1 2search.org 127.0.0.1 www.2search.org 127.0.0.1 2squared.com 127.0.0.1 www.2squared.com 127.0.0.1 3322.org 127.0.0.1 www.3322.org 127.0.0.1 365soft.info 127.0.0.1 36site.com 127.0.0.1 www.36site.com 127.0.0.1 3721.com 127.0.0.1 39-93.com 127.0.0.1 3abetterinternet.com 127.0.0.1 www.3abetterinternet.com 127.0.0.1 3bay.it 127.0.0.1 www.3bay.it 127.0.0.1 3ebay.it 127.0.0.1 www.3ebay.it 127.0.0.1 3xclipsonline.com 127.0.0.1 www.3xclipsonline.com 127.0.0.1 3xcurves.com 127.0.0.1 www.3xcurves.com 127.0.0.1 3xfestival.com 127.0.0.1 www.3xfestival.com 127.0.0.1 3x-festival.com 127.0.0.1 www.3x-festival.com 127.0.0.1 3x-galls.com 127.0.0.1 www.3x-galls.com 127.0.0.1 3xmiracle.com 127.0.0.1 www.3xmiracle.com 127.0.0.1 3xmoviesblog.com 127.0.0.1 www.3xmoviesblog.com 127.0.0.1 404dns.com 127.0.0.1 www.404dns.com 127.0.0.1 4199.com 127.0.0.1 www.4199.com 127.0.0.1 4corn.net 127.0.0.1 www.4corn.net 127.0.0.1 4ebay.it 127.0.0.1 www.4ebay.it 127.0.0.1 4klm.com 127.0.0.1 4mpg.com 127.0.0.1 www.4mpg.com 127.0.0.1 4repubblica.it 127.0.0.1 www.4repubblica.it 127.0.0.1 4softget.com 127.0.0.1 www.4softget.com 127.0.0.1 5iscali.it 127.0.0.1 www.5iscali.it 127.0.0.1 5repubblica.it 127.0.0.1 www.5repubblica.it 127.0.0.1 5starvideos.com 127.0.0.1 www.5starvideos.com 127.0.0.1 5tiscali.it 127.0.0.1 www.5tiscali.it 127.0.0.1 5zgmu7o20kt5d8yq.com 127.0.0.1 www.5zgmu7o20kt5d8yq.com 127.0.0.1 680180.net 127.0.0.1 www.680180.net 127.0.0.1 6iscali.it 127.0.0.1 www.6iscali.it 127.0.0.1 6njaga.com 127.0.0.1 www.6njaga.com 127.0.0.1 6sek.com 127.0.0.1 www.6sek.com 127.0.0.1 6tiscali.it 127.0.0.1 www.6tiscali.it 127.0.0.1 70-music.com 127.0.0.1 www.70-music.com 127.0.0.1 7322.com 127.0.0.1 www.7322.com 127.0.0.1 75tz.com 127.0.0.1 777search.com 127.0.0.1 www.777search.com 127.0.0.1 777top.com 127.0.0.1 www.777top.com 127.0.0.1 7939.com 127.0.0.1 www.7939.com 127.0.0.1 7search.com 127.0.0.1 www.7search.com 127.0.0.1 80gw6ry3i3x3qbrkwhxhw.032439.com 127.0.0.1 80-music.com 127.0.0.1 www.80-music.com 127.0.0.1 82211.net 127.0.0.1 8866.org 127.0.0.1 888.com 127.0.0.1 www.888.com 127.0.0.1 8ad.com 127.0.0.1 www.8ad.com 127.0.0.1 90-music.com 127.0.0.1 www.90-music.com 127.0.0.1 9505.com 127.0.0.1 www.9505.com 127.0.0.1 971searchbox.com 127.0.0.1 www.971searchbox.com 127.0.0.1 a.bestmanage.org 127.0.0.1 aaabesthomepage.com 127.0.0.1 www.aaabesthomepage.com 127.0.0.1 aaasexypics.com 127.0.0.1 aaawebfinder.com 127.0.0.1 www.aaawebfinder.com 127.0.0.1 aaqadarsztriv.com 127.0.0.1 www.aaqadarsztriv.com 127.0.0.1 aaqada-rsztriv.com 127.0.0.1 www.aaqada-rsztriv.com 127.0.0.1 aaqadaueorn.com 127.0.0.1 www.aaqadaueorn.com 127.0.0.1 aaqada-ueorn.com 127.0.0.1 www.aaqada-ueorn.com 127.0.0.1 aaqada-ygco.com 127.0.0.1 www.aaqada-ygco.com 127.0.0.1 aaqada-ymct.com 127.0.0.1 www.aaqada-ymct.com 127.0.0.1 aavc.com 127.0.0.1 abcdperformance.com 127.0.0.1 www.abcdperformance.com 127.0.0.1 abc-find.info 127.0.0.1 www.abc-find.info 127.0.0.1 abcsearch.com 127.0.0.1 www.abcsearch.com 127.0.0.1 abetterinternet.com 127.0.0.1 www.abetterinternet.com 127.0.0.1 abnetsoft.info 127.0.0.1 www.abnetsoft.info 127.0.0.1 aboutclicker.com 127.0.0.1 www.aboutclicker.com 127.0.0.1 abrp.net 127.0.0.1 www.abrp.net 127.0.0.1 absolutee.com 127.0.0.1 www.absolutee.com 127.0.0.1 abyssmedia.com 127.0.0.1 www.abyssmedia.com 127.0.0.1 ac66.cn 127.0.0.1 www.ac66.cn 127.0.0.1 access.Navinetwork.com 127.0.0.1 access.rapid-pass.net 127.0.0.1 accessactivexvideo.com 127.0.0.1 www.accessactivexvideo.com 127.0.0.1 accessclips.com 127.0.0.1 www.accessclips.com 127.0.0.1 access-dvd.com 127.0.0.1 www.access-dvd.com 127.0.0.1 accesskeygenerator.com 127.0.0.1 www.accesskeygenerator.com 127.0.0.1 accessorygeeks.com 127.0.0.1 www.accessorygeeks.com 127.0.0.1 accessthefuture.net 127.0.0.1 www.accessthefuture.net 127.0.0.1 accessvid.net 127.0.0.1 www.accessvid.net 127.0.0.1 acemedic.com 127.0.0.1 www.acemedic.com 127.0.0.1 ace-webmaster.com 127.0.0.1 www.ace-webmaster.com 127.0.0.1 acjp.com 127.0.0.1 acrobat-2007.com 127.0.0.1 www.acrobat-2007.com 127.0.0.1 acrobat-8.com 127.0.0.1 www.acrobat-8.com 127.0.0.1 acrobat-center.com 127.0.0.1 www.acrobat-center.com 127.0.0.1 acrobat-hq.com 127.0.0.1 www.acrobat-hq.com 127.0.0.1 acrobatreader-8.com 127.0.0.1 www.acrobatreader-8.com 127.0.0.1 acrobat-reader-8.de 127.0.0.1 www.acrobat-reader-8.de 127.0.0.1 acrobat-stop.com 127.0.0.1 www.acrobat-stop.com 127.0.0.1 actionbreastcancer.org 127.0.0.1 www.actionbreastcancer.org 127.0.0.1 activesearcher.info 127.0.0.1 www.activesearcher.info 127.0.0.1 activexaccessobject.com 127.0.0.1 www.activexaccessobject.com 127.0.0.1 activexaccessvideo.com 127.0.0.1 www.activexaccessvideo.com 127.0.0.1 activexemedia.com 127.0.0.1 www.activexemedia.com 127.0.0.1 activexmediaobject.com 127.0.0.1 www.activexmediaobject.com 127.0.0.1 activexmediapro.com 127.0.0.1 www.activexmediapro.com 127.0.0.1 activexmediasite.com 127.0.0.1 www.activexmediasite.com 127.0.0.1 activexmediasoftware.com 127.0.0.1 www.activexmediasoftware.com 127.0.0.1 activexmediasource.com 127.0.0.1 www.activexmediasource.com 127.0.0.1 activexmediatool.com 127.0.0.1 www.activexmediatool.com 127.0.0.1 activexmediatour.com 127.0.0.1 www.activexmediatour.com 127.0.0.1 activexsoftwares.com 127.0.0.1 www.activexsoftwares.com 127.0.0.1 activexsource.com 127.0.0.1 www.activexsource.com 127.0.0.1 activexupdate.com 127.0.0.1 www.activexupdate.com 127.0.0.1 activexvideo.com 127.0.0.1 www.activexvideo.com 127.0.0.1 activexvideotool.com 127.0.0.1 www.activexvideotool.com 127.0.0.1 ad.marketingsector.com 127.0.0.1 www.ad.marketingsector.com 127.0.0.1 ad.mokead.com 127.0.0.1 www.ad.mokead.com 127.0.0.1 ad.oinadserver.com 127.0.0.1 ad.outerinfoads.com 127.0.0.1 ad.yieldmanager.com 127.0.0.1 www.ad.yieldmanager.com 127.0.0.1 ad25.com 127.0.0.1 ad45.com 127.0.0.1 ad77.com 127.0.0.1 ad86.com 127.0.0.1 adamsupportgroup.org 127.0.0.1 www.adamsupportgroup.org 127.0.0.1 adarmor.com 127.0.0.1 www.adarmor.com 127.0.0.1 adasearch.com 127.0.0.1 www.adasearch.com 127.0.0.1 adaware.cc 127.0.0.1 adawarenow.com 127.0.0.1 www.adawarenow.com 127.0.0.1 adchannel.contextplus.net 127.0.0.1 addetect.com 127.0.0.1 www.addetect.com 127.0.0.1 addictivetechnologies.com 127.0.0.1 www.addictivetechnologies.com 127.0.0.1 addictivetechnologies.net 127.0.0.1 www.addictivetechnologies.net 127.0.0.1 addioerrori.com 127.0.0.1 www.addioerrori.com 127.0.0.1 add-manager.com 127.0.0.1 www.add-manager.com 127.0.0.1 adgate.info 127.0.0.1 www.adgate.info 127.0.0.1 adioserrores.com 127.0.0.1 www.adioserrores.com 127.0.0.1 adipics.com 127.0.0.1 www.adipics.com 127.0.0.1 adlogix.com 127.0.0.1 www.adlogix.com 127.0.0.1 admin2cash.biz 127.0.0.1 www.admin2cash.biz 127.0.0.1 adnet-plus.com 127.0.0.1 adnetserver.com 127.0.0.1 www.adnetserver.com 127.0.0.1 adobe-download-now.com 127.0.0.1 adobe-downloads.com 127.0.0.1 www.adobe-downloads.com 127.0.0.1 adobe-reader-8.fr 127.0.0.1 www.adobe-reader-8.fr 127.0.0.1 adprotect.com 127.0.0.1 www.adprotect.com 127.0.0.1 ads.centralmedia.ws 127.0.0.1 ads.k8l.info 127.0.0.1 ads.kmpads.com 127.0.0.1 ads.kw.revenue.net 127.0.0.1 ads.marketingsector.com 127.0.0.1 ads.searchingbooth.com 127.0.0.1 ads.z-quest.com 127.0.0.1 ads1.revenue.net 127.0.0.1 ads183.com 127.0.0.1 www.ads183.com 127.0.0.1 adscontex.com 127.0.0.1 www.adscontex.com 127.0.0.1 adservices1.enhance.com 127.0.0.1 www.adservices1.enhance.com 127.0.0.1 adservs.com 127.0.0.1 adsextend.net 127.0.0.1 www.adsextend.net 127.0.0.1 adshttp.com 127.0.0.1 www.adshttp.com 127.0.0.1 adsniffer.com 127.0.0.1 www.adsniffer.com 127.0.0.1 adsonwww.com 127.0.0.1 www.adsonwww.com 127.0.0.1 adspics.com 127.0.0.1 www.adspics.com 127.0.0.1 adsrevenue.net 127.0.0.1 www.adsrevenue.net 127.0.0.1 adtrak.net 127.0.0.1 www.adtrak.net 127.0.0.1 adtrgt.com 127.0.0.1 adult777search.info 127.0.0.1 www.adult777search.info 127.0.0.1 adultan.com 127.0.0.1 www.adultan.com 127.0.0.1 adult-engine-search.com 127.0.0.1 www.adult-engine-search.com 127.0.0.1 adult-erotic-guide.net 127.0.0.1 www.adult-erotic-guide.net 127.0.0.1 adultfilmsite.com 127.0.0.1 www.adultfilmsite.com 127.0.0.1 adult-friends-finder.net 127.0.0.1 www.adult-friends-finder.net 127.0.0.1 adultgambling.org 127.0.0.1 adult-host.org 127.0.0.1 adulthyperlinks.com 127.0.0.1 www.adulthyperlinks.com 127.0.0.1 adultmovieplus.com 127.0.0.1 www.adultmovieplus.com 127.0.0.1 adult-mpg.net 127.0.0.1 www.adult-mpg.net 127.0.0.1 adult-personal.us 127.0.0.1 adultsgames.net 127.0.0.1 adultsonlyvids.com 127.0.0.1 www.adultsonlyvids.com 127.0.0.1 adultsper.com 127.0.0.1 www.adultsper.com 127.0.0.1 adulttds.com 127.0.0.1 www.adulttds.com 127.0.0.1 adultzoneworld.com 127.0.0.1 www.adultzoneworld.com 127.0.0.1 advcash.biz 127.0.0.1 www.advcash.biz 127.0.0.1 advert.exaccess.ru 127.0.0.1 advertisemoney.info 127.0.0.1 www.advertisemoney.info 127.0.0.1 advertising.paltalk.com 127.0.0.1 advertising-money.info 127.0.0.1 www.advertising-money.info 127.0.0.1 ad-ware.cc 127.0.0.1 ad-w-a-r-e.com 127.0.0.1 www.ad-w-a-r-e.com 127.0.0.1 a-d-w-a-r-e.com 127.0.0.1 www.a-d-w-a-r-e.com 127.0.0.1 adwarebazooka.com 127.0.0.1 www.adwarebazooka.com 127.0.0.1 adwarecommander.com 127.0.0.1 www.adwarecommander.com 127.0.0.1 adwarefinder.com 127.0.0.1 www.adwarefinder.com 127.0.0.1 adwaregold.com 127.0.0.1 www.adwaregold.com 127.0.0.1 adwarepatrol.com 127.0.0.1 www.adwarepatrol.com 127.0.0.1 adwareplatinum.com 127.0.0.1 www.adwareplatinum.com 127.0.0.1 adwareprotectionsite.com 127.0.0.1 www.adwareprotectionsite.com 127.0.0.1 adwarepunisher.com 127.0.0.1 www.adwarepunisher.com 127.0.0.1 adwareremover.ws 127.0.0.1 www.adwareremover.ws 127.0.0.1 adwaresafety.com 127.0.0.1 www.adwaresafety.com 127.0.0.1 adwarexp.com 127.0.0.1 www.adwarexp.com 127.0.0.1 affiliate.idownload.com 127.0.0.1 aflgate.com 127.0.0.1 www.aflgate.com 127.0.0.1 africaspromise.org 127.0.0.1 agava.com 127.0.0.1 agava.ru 127.0.0.1 agentstudio.com 127.0.0.1 aginegialle.it 127.0.0.1 www.aginegialle.it 127.0.0.1 www.aifind.info 127.0.0.1 aifind.info 127.0.0.1 airtleworld.com 127.0.0.1 www.airtleworld.com 127.0.0.1 aitalia.it 127.0.0.1 www.aitalia.it 127.0.0.1 akamai.downloadv3.com 127.0.0.1 aklitalia.it 127.0.0.1 www.aklitalia.it 127.0.0.1 akril.com 127.0.0.1 alcatel.ws 127.0.0.1 alertspy.com 127.0.0.1 www.alertspy.com 127.0.0.1 alfacleaner.com 127.0.0.1 www.alfacleaner.com 127.0.0.1 alfa-search.com 127.0.0.1 alialia.it 127.0.0.1 www.alialia.it 127.0.0.1 aliotalia.it 127.0.0.1 www.aliotalia.it 127.0.0.1 alirtalia.it 127.0.0.1 www.alirtalia.it 127.0.0.1 alitaia.it 127.0.0.1 www.alitaia.it 127.0.0.1 alitaklia.it 127.0.0.1 www.alitaklia.it 127.0.0.1 alitala.it 127.0.0.1 www.alitala.it 127.0.0.1 alitali.it 127.0.0.1 www.alitali.it 127.0.0.1 alitaliaq.it 127.0.0.1 www.alitaliaq.it 127.0.0.1 alitalias.it 127.0.0.1 www.alitalias.it 127.0.0.1 alitaliaz.it 127.0.0.1 www.alitaliaz.it 127.0.0.1 alitalioa.it 127.0.0.1 www.alitalioa.it 127.0.0.1 alitalisa.it 127.0.0.1 www.alitalisa.it 127.0.0.1 alitaliua.it 127.0.0.1 www.alitaliua.it 127.0.0.1 alitalkia.it 127.0.0.1 www.alitalkia.it 127.0.0.1 alitaloia.it 127.0.0.1 www.alitaloia.it 127.0.0.1 alitaluia.it 127.0.0.1 www.alitaluia.it 127.0.0.1 alitaslia.it 127.0.0.1 www.alitaslia.it 127.0.0.1 alitlia.it 127.0.0.1 www.alitlia.it 127.0.0.1 alitralia.it 127.0.0.1 www.alitralia.it 127.0.0.1 alitsalia.it 127.0.0.1 www.alitsalia.it 127.0.0.1 aliutalia.it 127.0.0.1 www.aliutalia.it 127.0.0.1 ALL1COUNT.NET 127.0.0.1 www.ALL1COUNT.NET 127.0.0.1 all4internet.com 127.0.0.1 www.all4internet.com 127.0.0.1 allabtcars.com 127.0.0.1 allabtjeeps.com 127.0.0.1 all-bittorrent.com 127.0.0.1 www.all-bittorrent.com 127.0.0.1 www.allcybersearch.com 127.0.0.1 allcybersearch.com 127.0.0.1 alldnserrors.com 127.0.0.1 www.alldnserrors.com 127.0.0.1 all-downloads-now.com 127.0.0.1 www.all-downloads-now.com 127.0.0.1 all-edonkey.com 127.0.0.1 www.all-edonkey.com 127.0.0.1 allertaminacce.com 127.0.0.1 www.allertaminacce.com 127.0.0.1 allforadult.com 127.0.0.1 allhyperlinks.com 127.0.0.1 alliesecurity.com 127.0.0.1 www.alliesecurity.com 127.0.0.1 all-inet.com 127.0.0.1 allinternetbusiness.com 127.0.0.1 all-limewire.com 127.0.0.1 www.all-limewire.com 127.0.0.1 allmegabucks.com 127.0.0.1 www.allmegabucks.com 127.0.0.1 allprotections.com 127.0.0.1 www.allprotections.com 127.0.0.1 allresultz.net 127.0.0.1 www.allresultz.net 127.0.0.1 allsearch.us 127.0.0.1 www.allsearch.us 127.0.0.1 allsecuritynotes.com 127.0.0.1 www.allsecuritynotes.com 127.0.0.1 allsecuritysite.com 127.0.0.1 www.allsecuritysite.com 127.0.0.1 allstarsvideos.net 127.0.0.1 www.allstarsvideos.net 127.0.0.1 alltiettantivirus.com 127.0.0.1 www.alltiettantivirus.com 127.0.0.1 alltruesoftware.com 127.0.0.1 www.alltruesoftware.com 127.0.0.1 allvideoactivex.com 127.0.0.1 www.allvideoactivex.com 127.0.0.1 almanah.biz 127.0.0.1 www.almanah.biz 127.0.0.1 almarvideos.com 127.0.0.1 aloitalia.it 127.0.0.1 www.aloitalia.it 127.0.0.1 aluitalia.it 127.0.0.1 www.aluitalia.it 127.0.0.1 amaena.com 127.0.0.1 www.amaena.com 127.0.0.1 amandamountains.com 127.0.0.1 amateurliveshow.com 127.0.0.1 www.amateurliveshow.com 127.0.0.1 amediasoftware.com 127.0.0.1 www.amediasoftware.com 127.0.0.1 amediasource.com 127.0.0.1 www.amediasource.com 127.0.0.1 americanautobargains.com 127.0.0.1 www.americanautobargains.com 127.0.0.1 americancarbargains.com 127.0.0.1 www.americancarbargains.com 127.0.0.1 american-teens.net 127.0.0.1 amigeek.com 127.0.0.1 amigobore.com 127.0.0.1 www.amigobore.com 127.0.0.1 amisbusiness.com 127.0.0.1 ampmsearch.com 127.0.0.1 www.ampmsearch.com 127.0.0.1 analcord.com 127.0.0.1 www.analcord.com 127.0.0.1 analmovi.com 127.0.0.1 anarchylolita.com 127.0.0.1 www.anarchylolita.com 127.0.0.1 anarchyporn.com 127.0.0.1 andromedical.com 127.0.0.1 www.andromedical.com 127.0.0.1 animepornmag.com 127.0.0.1 www.animepornmag.com 127.0.0.1 anin.org 127.0.0.1 anjpn-avxiz.biz 127.0.0.1 www.anjpn-avxiz.biz 127.0.0.1 anjpnzqav.biz 127.0.0.1 www.anjpnzqav.biz 127.0.0.1 anjpn-zqav.biz 127.0.0.1 www.anjpn-zqav.biz 127.0.0.1 annaromeo.com 127.0.0.1 antiddos.us 127.0.0.1 www.antiddos.us 127.0.0.1 Antiespiadorado.com 127.0.0.1 www.Antiespiadorado.com 127.0.0.1 Antiespionspack.com 127.0.0.1 www.Antiespionspack.com 127.0.0.1 Antigusanos2008.com 127.0.0.1 www.Antigusanos2008.com 127.0.0.1 antispamassistant.com 127.0.0.1 www.antispamassistant.com 127.0.0.1 antispamdeluxe.com 127.0.0.1 www.antispamdeluxe.com 127.0.0.1 Antispionage.com 127.0.0.1 www.Antispionage.com 127.0.0.1 Antispionagepro.com 127.0.0.1 www.Antispionagepro.com 127.0.0.1 antispyadvanced.com 127.0.0.1 www.antispyadvanced.com 127.0.0.1 antispydns.biz 127.0.0.1 www.antispydns.biz 127.0.0.1 antispylab.com 127.0.0.1 www.antispylab.com 127.0.0.1 antispysolutions.com 127.0.0.1 www.antispysolutions.com 127.0.0.1 antispyware.com 127.0.0.1 www.antispyware.com 127.0.0.1 antispywareboot.com 127.0.0.1 www.antispywareboot.com 127.0.0.1 antispywarebot.com 127.0.0.1 www.antispywarebot.com 127.0.0.1 antispywarebox.com 127.0.0.1 www.antispywarebox.com 127.0.0.1 antispywaredownloads.com 127.0.0.1 www.antispywaredownloads.com 127.0.0.1 Antispywaresuite.com 127.0.0.1 www.Antispywaresuite.com 127.0.0.1 antispywaresuite.com 127.0.0.1 www.antispywaresuite.com 127.0.0.1 antispywarexp.com 127.0.0.1 www.antispywarexp.com 127.0.0.1 Antispyweb.net 127.0.0.1 www.Antispyweb.net 127.0.0.1 Antiver2008.com 127.0.0.1 www.Antiver2008.com 127.0.0.1 antivermins.com 127.0.0.1 www.antivermins.com 127.0.0.1 anti-vermins.com 127.0.0.1 www.anti-vermins.com 127.0.0.1 antivir2007.com 127.0.0.1 www.antivir2007.com 127.0.0.1 antivirgear.com 127.0.0.1 www.antivirgear.com 127.0.0.1 antivirus.fastfreedownload.com 127.0.0.1 www.antivirus.fastfreedownload.com 127.0.0.1 antivirusadvance.com 127.0.0.1 www.antivirusadvance.com 127.0.0.1 antivirusaskeladd.com 127.0.0.1 www.antivirusaskeladd.com 127.0.0.1 antivirusgereedschap.com 127.0.0.1 www.antivirusgereedschap.com 127.0.0.1 antivirusgolden.com 127.0.0.1 www.antivirusgolden.com 127.0.0.1 antivirus-hq.net 127.0.0.1 www.antivirus-hq.net 127.0.0.1 antiviruspcsuite.com 127.0.0.1 www.antiviruspcsuite.com 127.0.0.1 antiviruspremium.com 127.0.0.1 www.antiviruspremium.com 127.0.0.1 anti-virus-pro.com 127.0.0.1 www.anti-virus-pro.com 127.0.0.1 antivirusprotector.com 127.0.0.1 www.antivirusprotector.com 127.0.0.1 antivirusscherm.com 127.0.0.1 www.antivirusscherm.com 127.0.0.1 antivirussecuritypro.com 127.0.0.1 www.antivirussecuritypro.com 127.0.0.1 antivirus-stop.com 127.0.0.1 www.antivirus-stop.com 127.0.0.1 Antiworm2008.com 127.0.0.1 www.Antiworm2008.com 127.0.0.1 antiworm2008.com 127.0.0.1 www.antiworm2008.com 127.0.0.1 Antiwurm2008.com 127.0.0.1 www.Antiwurm2008.com 127.0.0.1 antrocity.com 127.0.0.1 anyofus.com 127.0.0.1 www.anyofus.com 127.0.0.1 anysn.seproger.com 127.0.0.1 www.anysn.seproger.com 127.0.0.1 anything4health.com 127.0.0.1 apicpreview.com 127.0.0.1 www.apicpreview.com 127.0.0.1 appealcircuit.com 127.0.0.1 www.appealcircuit.com 127.0.0.1 approvedlinks.com 127.0.0.1 www.approvedlinks.com 127.0.0.1 apps.deskwizz.com 127.0.0.1 apps.webservicehost.com 127.0.0.1 aprotectedpage.com 127.0.0.1 www.aprotectedpage.com 127.0.0.1 apsua.com 127.0.0.1 archivioadulti.com 127.0.0.1 www.archivioadulti.com 127.0.0.1 archiviosex.net 127.0.0.1 www.archiviosex.net 127.0.0.1 aregay.com 127.0.0.1 ares.click-new-download.com 127.0.0.1 www.ares.click-new-download.com 127.0.0.1 ares-freebie.com 127.0.0.1 www.ares-freebie.com 127.0.0.1 arespro2007.com 127.0.0.1 www.arespro2007.com 127.0.0.1 aresultra.com 127.0.0.1 www.aresultra.com 127.0.0.1 ares-usa.com 127.0.0.1 www.ares-usa.com 127.0.0.1 arheo.com 127.0.0.1 arizonaweb.org 127.0.0.1 armitageinn.com 127.0.0.1 arquivojpgs.smtp.ru 127.0.0.1 www.arquivojpgs.smtp.ru 127.0.0.1 artachnid.com 127.0.0.1 art-func.com 127.0.0.1 art-xxx.com 127.0.0.1 asafebrowser.com 127.0.0.1 www.asafebrowser.com 127.0.0.1 asafetyalways.com 127.0.0.1 www.asafetyalways.com 127.0.0.1 asafetynotice.com 127.0.0.1 www.asafetynotice.com 127.0.0.1 asafetypage.com 127.0.0.1 www.asafetypage.com 127.0.0.1 asdbiz.biz 127.0.0.1 www.asdbiz.biz 127.0.0.1 asdeykuddq.com 127.0.0.1 www.asdeykuddq.com 127.0.0.1 asecurebar.com 127.0.0.1 www.asecurebar.com 127.0.0.1 asecureboard.com 127.0.0.1 www.asecureboard.com 127.0.0.1 asecurevalue.com 127.0.0.1 www.asecurevalue.com 127.0.0.1 asecurityissue.com 127.0.0.1 www.asecurityissue.com 127.0.0.1 asecuritynotice.com 127.0.0.1 www.asecuritynotice.com 127.0.0.1 asecuritypaper.com 127.0.0.1 www.asecuritypaper.com 127.0.0.1 asecuritystuff.com 127.0.0.1 www.asecuritystuff.com 127.0.0.1 asiankingkong.com 127.0.0.1 asianpornmag.com 127.0.0.1 www.asianpornmag.com 127.0.0.1 asiantoolbar.com 127.0.0.1 www.asiantoolbar.com 127.0.0.1 asidseiupc.com 127.0.0.1 www.asidseiupc.com 127.0.0.1 aslitalia.it 127.0.0.1 www.aslitalia.it 127.0.0.1 [bleep]-gals.com 127.0.0.1 assureprotection.com 127.0.0.1 www.assureprotection.com 127.0.0.1 asta-killer.com 127.0.0.1 asupereva.it 127.0.0.1 www.asupereva.it 127.0.0.1 ataprogram.com 127.0.0.1 www.ataprogram.com 127.0.0.1 athenrye.com 127.0.0.1 atotalsafety.com 127.0.0.1 www.atotalsafety.com 127.0.0.1 atrueprotection.com 127.0.0.1 www.atrueprotection.com 127.0.0.1 atruesecurity.com 127.0.0.1 www.atruesecurity.com 127.0.0.1 attackware.com 127.0.0.1 www.attackware.com 127.0.0.1 attrezzi.biz 127.0.0.1 www.attrezzi.biz 127.0.0.1 aucunsvirus.com 127.0.0.1 www.aucunsvirus.com 127.0.0.1 aulde.net 127.0.0.1 www.aulde.net 127.0.0.1 aupereva.it 127.0.0.1 www.aupereva.it 127.0.0.1 autobargains.org 127.0.0.1 www.autobargains.org 127.0.0.1 autobargainsnetwork.com 127.0.0.1 www.autobargainsnetwork.com 127.0.0.1 autocontext.begun.ru 127.0.0.1 www.autocontext.begun.ru 127.0.0.1 autoescrowpay.com 127.0.0.1 avadvance.com 127.0.0.1 www.avadvance.com 127.0.0.1 avast.free-software-center.com 127.0.0.1 www.avast.free-software-center.com 127.0.0.1 avast-2007.com 127.0.0.1 www.avast-2007.com 127.0.0.1 avast-downloads.com 127.0.0.1 www.avast-downloads.com 127.0.0.1 avast-hq.com 127.0.0.1 www.avast-hq.com 127.0.0.1 avforce.com 127.0.0.1 www.avforce.com 127.0.0.1 avg.grab-it-today.net 127.0.0.1 www.avg.grab-it-today.net 127.0.0.1 avg.softwarecenterz.com 127.0.0.1 www.avg.softwarecenterz.com 127.0.0.1 avg-secure.com 127.0.0.1 www.avg-secure.com 127.0.0.1 avian-ads.com 127.0.0.1 avideoaxaccess.com 127.0.0.1 www.avideoaxaccess.com 127.0.0.1 avideosurfer.com 127.0.0.1 www.avideosurfer.com 127.0.0.1 aviewersoft.com 127.0.0.1 www.aviewersoft.com 127.0.0.1 avpcheckupdate.com 127.0.0.1 www.avpcheckupdate.com 127.0.0.1 avsmanufacture.com 127.0.0.1 www.avsmanufacture.com 127.0.0.1 avsystemcare.com 127.0.0.1 www.avsystemcare.com 127.0.0.1 avxizaaqada.biz 127.0.0.1 www.avxizaaqada.biz 127.0.0.1 avxiz-anjpn.biz 127.0.0.1 www.avxiz-anjpn.biz 127.0.0.1 avxizueorn.biz 127.0.0.1 www.avxizueorn.biz 127.0.0.1 avxiz-ueorn.biz 127.0.0.1 www.avxiz-ueorn.biz 127.0.0.1 avxiz-vtvcp.biz 127.0.0.1 www.avxiz-vtvcp.biz 127.0.0.1 avxiz-ygco.biz 127.0.0.1 www.avxiz-ygco.biz 127.0.0.1 avxiz-zqav.biz 127.0.0.1 www.avxiz-zqav.biz 127.0.0.1 awarenesstech.com 127.0.0.1 www.awarenesstech.com 127.0.0.1 awarninglist.com 127.0.0.1 www.awarninglist.com 127.0.0.1 awbeta.net-nucleus.com 127.0.0.1 awesomehomepage.com 127.0.0.1 www.awesomehomepage.com 127.0.0.1 awmcash.biz 127.0.0.1 awmdabest.com 127.0.0.1 axemediasoftware.com 127.0.0.1 www.axemediasoftware.com 127.0.0.1 aximageobject.com 127.0.0.1 www.aximageobject.com 127.0.0.1 axmediaproject.com 127.0.0.1 www.axmediaproject.com 127.0.0.1 axmediasoftware.com 127.0.0.1 www.axmediasoftware.com 127.0.0.1 axmediasolutions.com 127.0.0.1 www.axmediasolutions.com 127.0.0.1 axobjectpage.com 127.0.0.1 www.axobjectpage.com 127.0.0.1 axobjectsource.com 127.0.0.1 www.axobjectsource.com 127.0.0.1 axsoftwaretool.com 127.0.0.1 www.axsoftwaretool.com 127.0.0.1 axvideoproject.com 127.0.0.1 www.axvideoproject.com 127.0.0.1 axvideosetup.com 127.0.0.1 www.axvideosetup.com 127.0.0.1 ayakawamura.com 127.0.0.1 ayb.dns-look-up.com 127.0.0.1 ayb.netbios-wait.com 127.0.0.1 ayumitaniguchi.com 127.0.0.1 azebar.com 127.0.0.1 azureusclub.com 127.0.0.1 www.azureusclub.com 127.0.0.1 azureus-freebie.com 127.0.0.1 www.azureus-freebie.com 127.0.0.1 azzetta.it 127.0.0.1 www.azzetta.it 127.0.0.1 b.casalemedia.com 127.0.0.1 b122.mcboo.com 127.0.0.1 babe.k-lined.com 127.0.0.1 www.babe.k-lined.com 127.0.0.1 babe.the-killer.bz 127.0.0.1 www.babe.the-killer.bz 127.0.0.1 babenet.com 127.0.0.1 www.babenet.com 127.0.0.1 babespornmag.com 127.0.0.1 www.babespornmag.com 127.0.0.1 babeweb.de 127.0.0.1 www.babeweb.de 127.0.0.1 baccarat-other.info 127.0.0.1 www.baccarat-other.info 127.0.0.1 Backstripgirls.com 127.0.0.1 www.Backstripgirls.com 127.0.0.1 backup.mabou.org 127.0.0.1 balotierra.com 127.0.0.1 www.balotierra.com 127.0.0.1 bannedhost.net 127.0.0.1 barbudafarms.com 127.0.0.1 bardownload.com 127.0.0.1 www.bardownload.com 127.0.0.1 barnandfence.com 127.0.0.1 batsearch.com 127.0.0.1 baygraphicsllc.com 127.0.0.1 bbbsearch.com 127.0.0.1 bb-search.com 127.0.0.1 bcnproduction.com 127.0.0.1 www.bcnproduction.com 127.0.0.1 bdsmlibrary.net 127.0.0.1 bdsmpornmag.com 127.0.0.1 www.bdsmpornmag.com 127.0.0.1 bearshare.click-new-download.com 127.0.0.1 www.bearshare.click-new-download.com 127.0.0.1 bearshare.download-me.info 127.0.0.1 www.bearshare.download-me.info 127.0.0.1 bearshare.mp3-muzic.com 127.0.0.1 www.bearshare.mp3-muzic.com 127.0.0.1 bearshare-download.org 127.0.0.1 www.bearshare-download.org 127.0.0.1 bearshare-downloads.net 127.0.0.1 www.bearshare-downloads.net 127.0.0.1 bearsharelive.co.uk 127.0.0.1 www.bearsharelive.co.uk 127.0.0.1 bearshare-music-downloads.com 127.0.0.1 www.bearshare-music-downloads.com 127.0.0.1 bearsharepro2007.com 127.0.0.1 www.bearsharepro2007.com 127.0.0.1 bearshare-usa.com 127.0.0.1 www.bearshare-usa.com 127.0.0.1 bedhome.com 127.0.0.1 bediadance.com 127.0.0.1 beebappyy.biz 127.0.0.1 www.beebappyy.biz 127.0.0.1 begin2search.com 127.0.0.1 www.begin2search.com 127.0.0.1 bellabasketsfl.com 127.0.0.1 bernaolatwin.com 127.0.0.1 beruijindegunhadesun.com 127.0.0.1 www.beruijindegunhadesun.com 127.0.0.1 best3xclips.com 127.0.0.1 www.best3xclips.com 127.0.0.1 bestadults.com 127.0.0.1 www.bestadults.com 127.0.0.1 best-counter.com 127.0.0.1 bestcrawler.com 127.0.0.1 bestdailyvids.com 127.0.0.1 www.bestdailyvids.com 127.0.0.1 bestfor.ru 127.0.0.1 best[bleep]vids.com 127.0.0.1 www.best[bleep]vids.com 127.0.0.1 best-hardpics.com 127.0.0.1 bestmanage.org 127.0.0.1 www.bestmanage.org 127.0.0.1 bestmanage0.org 127.0.0.1 www.bestmanage0.org 127.0.0.1 bestmanage1.org 127.0.0.1 www.bestmanage1.org 127.0.0.1 bestmanage2.org 127.0.0.1 www.bestmanage2.org 127.0.0.1 bestmanage3.org 127.0.0.1 www.bestmanage3.org 127.0.0.1 bestmanage4.org 127.0.0.1 www.bestmanage4.org 127.0.0.1 bestmanage5.org 127.0.0.1 www.bestmanage5.org 127.0.0.1 bestmanage6.org 127.0.0.1 www.bestmanage6.org 127.0.0.1 bestmanage7.org 127.0.0.1 www.bestmanage7.org 127.0.0.1 bestmanage8.org 127.0.0.1 www.bestmanage8.org 127.0.0.1 bestmanage9.org 127.0.0.1 www.bestmanage9.org 127.0.0.1 bestoffersnetworks.com 127.0.0.1 www.bestoffersnetworks.com 127.0.0.1 bestporngate.com 127.0.0.1 bestsafetyguide.net 127.0.0.1 www.bestsafetyguide.net 127.0.0.1 bestsearch.cc 127.0.0.1 www.bestsearch.cc 127.0.0.1 best-spyware.info 127.0.0.1 www.best-spyware.info 127.0.0.1 best-targeted-traffic.com 127.0.0.1 www.best-targeted-traffic.com 127.0.0.1 best-voyeur.info 127.0.0.1 www.best-voyeur.info 127.0.0.1 bestweblinks.com 127.0.0.1 best-winning-casino.com 127.0.0.1 bestworldgirls-for-u.net 127.0.0.1 www.bestworldgirls-for-u.net 127.0.0.1 bestxclips.com 127.0.0.1 www.bestxclips.com 127.0.0.1 bestxporno.com 127.0.0.1 bestxxxmpegs.com 127.0.0.1 www.bestxxxmpegs.com 127.0.0.1 bettersearch.biz 127.0.0.1 www.bettersearch.biz 127.0.0.1 bgazzetta.it 127.0.0.1 www.bgazzetta.it 127.0.0.1 bgoogle.it 127.0.0.1 www.bgoogle.it 127.0.0.1 bigtrafficnetwork.com 127.0.0.1 www.bigtrafficnetwork.com 127.0.0.1 bigwww.com 127.0.0.1 www.bigwww.com 127.0.0.1 bin.errorprotector.com 127.0.0.1 bins.media-motor.net 127.0.0.1 bins2.media-motor.net 127.0.0.1 bis.180solutions.com 127.0.0.1 [bleep]esonline.net 127.0.0.1 bitcomet-freebie.com 127.0.0.1 www.bitcomet-freebie.com 127.0.0.1 bittorrent.click-new-download.com 127.0.0.1 www.bittorrent.click-new-download.com 127.0.0.1 biz.biz 127.0.0.1 bkvcompany.com 127.0.0.1 www.bkvcompany.com 127.0.0.1 blackblues00.com 127.0.0.1 www.blackblues00.com 127.0.0.1 blackcodec.net 127.0.0.1 www.blackcodec.net 127.0.0.1 blackhats.tc 127.0.0.1 www.blackhats.tc 127.0.0.1 blackhawksoftware.com 127.0.0.1 www.blackhawksoftware.com 127.0.0.1 blackjack-free.net 127.0.0.1 blazefind.com 127.0.0.1 blender.xu.pl 127.0.0.1 blondetgp.com 127.0.0.1 blue-elefant.com 127.0.0.1 www.blue-elefant.com 127.0.0.1 bm.theaimonline.com 127.0.0.1 www.bm.theaimonline.com 127.0.0.1 bnmgate.com 127.0.0.1 www.bnmgate.com 127.0.0.1 bodaciousbabette.com 127.0.0.1 bonzi.com 127.0.0.1 www.bonzi.com 127.0.0.1 boobdoll.com 127.0.0.1 boobsandtits.com 127.0.0.1 boobsclub.com 127.0.0.1 bookedspace.com 127.0.0.1 www.bookedspace.com 127.0.0.1 boom.com.vn 127.0.0.1 www.boom.com.vn 127.0.0.1 boredlife.com 127.0.0.1 bowlofogumbo.com 127.0.0.1 bpfq02.com 127.0.0.1 www.bpfq02.com 127.0.0.1 bqgate.com 127.0.0.1 www.bqgate.com 127.0.0.1 br.errorsafe.com 127.0.0.1 br.winantivirus.com 127.0.0.1 br.winfixer.com 127.0.0.1 bradcoem.org 127.0.0.1 braincodec.com 127.0.0.1 www.braincodec.com 127.0.0.1 brandiyoung.com 127.0.0.1 bravesentry.com 127.0.0.1 www.bravesentry.com 127.0.0.1 breenten.biz 127.0.0.1 www.breenten.biz 127.0.0.1 brodbfm.net 127.0.0.1 www.brodbfm.net 127.0.0.1 brookeburn.com 127.0.0.1 browserwise.com 127.0.0.1 www.browserwise.com 127.0.0.1 bsa.safetydownload.com 127.0.0.1 bsplaycodec.com 127.0.0.1 www.bsplaycodec.com 127.0.0.1 bucps.com 127.0.0.1 buhartes.info 127.0.0.1 buldog-stats.com 127.0.0.1 bullseye-network.com 127.0.0.1 www.bullseye-network.com 127.0.0.1 burgerkingbigscreen.com 127.0.0.1 burningsite.com 127.0.0.1 www.burningsite.com 127.0.0.1 burnsrecyclinginc.com 127.0.0.1 www.burnsrecyclinginc.com 127.0.0.1 buscards.net 127.0.0.1 bustyrussell.com 127.0.0.1 busysearch.net 127.0.0.1 www.busysearch.net 127.0.0.1 buttejazz.org 127.0.0.1 buy-find.info 127.0.0.1 www.buy-find.info 127.0.0.1 buyselldomain.net 127.0.0.1 buytraff.biz 127.0.0.1 www.buytraff.biz 127.0.0.1 buz.ru 127.0.0.1 bvdtechinque.com 127.0.0.1 www.bvdtechinque.com 127.0.0.1 bvirgilio.it 127.0.0.1 www.bvirgilio.it 127.0.0.1 c.centralmedia.ws 127.0.0.1 c.enhance.com 127.0.0.1 www.c.enhance.com 127.0.0.1 c.goclick.com 127.0.0.1 c4tdownload.com 127.0.0.1 www.c4tdownload.com 127.0.0.1 c5.www4free.info 127.0.0.1 www.c5.www4free.info 127.0.0.1 cache.surfaccuracy.com 127.0.0.1 www.cache.surfaccuracy.com 127.0.0.1 cache.ysbweb.com 127.0.0.1 cadesfinjeriokas.com 127.0.0.1 www.cadesfinjeriokas.com 127.0.0.1 calcioturris.com 127.0.0.1 calendaralerts.net 127.0.0.1 www.calendaralerts.net 127.0.0.1 callinghome.biz 127.0.0.1 www.callinghome.biz 127.0.0.1 cameouk.co.uk 127.0.0.1 www.cameouk.co.uk 127.0.0.1 cameup.com 127.0.0.1 camouflageclothingonline.net 127.0.0.1 www.camouflageclothingonline.net 127.0.0.1 campaigns.outerinfo.net 127.0.0.1 camup.net 127.0.0.1 canberracricketcoaching.com 127.0.0.1 candycantaloupes.com 127.0.0.1 canidetect.org 127.0.0.1 www.canidetect.org 127.0.0.1 cantfind.com 127.0.0.1 www.cantfind.com 127.0.0.1 careers.dulcineasystems.net 127.0.0.1 carsands.com 127.0.0.1 carsrentals.net 127.0.0.1 cartoes.uol.com.br 127.0.0.1 casalemedia.com 127.0.0.1 www.casalemedia.com 127.0.0.1 cashdeluxe.net 127.0.0.1 www.cashdeluxe.net 127.0.0.1 cashengines.com 127.0.0.1 www.cashengines.com 127.0.0.1 cashsearch.biz 127.0.0.1 cashsurfers.com 127.0.0.1 www.cashsurfers.com 127.0.0.1 CashUnlim.com 127.0.0.1 www.CashUnlim.com 127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl 127.0.0.1 casino2win.net 127.0.0.1 casino-gambling-1.net 127.0.0.1 casino-gambling-2.net 127.0.0.1 casinomidas.net 127.0.0.1 casinonline.net 127.0.0.1 casino-onlines.net 127.0.0.1 castingsamateur.com 127.0.0.1 www.castingsamateur.com 127.0.0.1 catallogue.com 127.0.0.1 catch-dc.info 127.0.0.1 www.catch-dc.info 127.0.0.1 categories.mygeek.com 127.0.0.1 catsss.da.ru 127.0.0.1 caxa.ru 127.0.0.1 cc.panet.org 127.0.0.1 ccecaedbebfcaf.com 127.0.0.1 www.ccecaedbebfcaf.com 127.0.0.1 cclebali.org 127.0.0.1 ccorriere.it 127.0.0.1 www.ccorriere.it 127.0.0.1 cdcopysite.com 127.0.0.1 www.cdcopysite.com 127.0.0.1 cdegate.com 127.0.0.1 www.cdegate.com 127.0.0.1 cdn.drivecleaner.com 127.0.0.1 cdn.errorsafe.com 127.0.0.1 cdn.movies-etc.com 127.0.0.1 cdn.winsoftware.com 127.0.0.1 cdn2.movies-etc.com 127.0.0.1 cdorriere.it 127.0.0.1 www.cdorriere.it 127.0.0.1 ceewawires.org 127.0.0.1 centralmedia.ws 127.0.0.1 certumgroup.com 127.0.0.1 cforriere.it 127.0.0.1 www.cforriere.it 127.0.0.1 check.jupitersatellites.biz 127.0.0.1 www.check.jupitersatellites.biz 127.0.0.1 checkin100.com 127.0.0.1 www.checkin100.com 127.0.0.1 checkssecurity.com 127.0.0.1 www.checkssecurity.com 127.0.0.1 chelancatering.com 127.0.0.1 chenshijituan.com 127.0.0.1 www.chenshijituan.com 127.0.0.1 childrenvilla.com 127.0.0.1 chilly3xvids.com 127.0.0.1 www.chilly3xvids.com 127.0.0.1 chillymovs.com 127.0.0.1 www.chillymovs.com 127.0.0.1 chips-4-free.com 127.0.0.1 chrisswasey.com 127.0.0.1 chriswallace.net 127.0.0.1 cia-trjn.myvnc.com 127.0.0.1 www.cia-trjn.myvnc.com 127.0.0.1 cinemadownload.com 127.0.0.1 www.cinemadownload.com 127.0.0.1 ciorriere.it 127.0.0.1 www.ciorriere.it 127.0.0.1 cirriere.it 127.0.0.1 www.cirriere.it 127.0.0.1 ckick4thumbs.com 127.0.0.1 cl55.biz 127.0.0.1 clackamasliteraryreview.com 127.0.0.1 clckm.com 127.0.0.1 www.clckm.com 127.0.0.1 cleancodec.com 127.0.0.1 www.cleancodec.com 127.0.0.1 cleansoftwares.com 127.0.0.1 www.cleansoftwares.com 127.0.0.1 clearsearch.cc 127.0.0.1 clearsearch.net 127.0.0.1 clickaire.com 127.0.0.1 click-codec.com 127.0.0.1 www.click-codec.com 127.0.0.1 clickhere4search.com 127.0.0.1 www.clickhere4search.com 127.0.0.1 click-new-download.com 127.0.0.1 www.click-new-download.com 127.0.0.1 click-now.net 127.0.0.1 clickspring.net 127.0.0.1 www.clickspring.net 127.0.0.1 click-to-download.com 127.0.0.1 www.click-to-download.com 127.0.0.1 clicktomakeasearch.com 127.0.0.1 www.clicktomakeasearch.com 127.0.0.1 clickyestoenter.net 127.0.0.1 client.exeupdate.com 127.0.0.1 client.myadultexplorer.com 127.0.0.1 cliks.org 127.0.0.1 www.cliks.org 127.0.0.1 clipsfestival.com 127.0.0.1 www.clipsfestival.com 127.0.0.1 clipsreality.com 127.0.0.1 www.clipsreality.com 127.0.0.1 clorriere.it 127.0.0.1 www.clorriere.it 127.0.0.1 clrsch.com 127.0.0.1 clubxxxvideo.com 127.0.0.1 www.clubxxxvideo.com 127.0.0.1 clusif.free.fr 127.0.0.1 cmtapestry.com 127.0.0.1 cnetadd.com 127.0.0.1 www.cnetadd.com 127.0.0.1 cnomy.com 127.0.0.1 www.cnomy.com 127.0.0.1 cnzz.com 127.0.0.1 www.cnzz.com 127.0.0.1 code.ignphrases.com 127.0.0.1 codec.ninoa.com 127.0.0.1 codecbsplay.com 127.0.0.1 www.codecbsplay.com 127.0.0.1 codecdvd.net 127.0.0.1 www.codecdvd.net 127.0.0.1 codecdvi.com 127.0.0.1 www.codecdvi.com 127.0.0.1 codec-fun.com 127.0.0.1 www.codec-fun.com 127.0.0.1 codechard.com 127.0.0.1 www.codechard.com 127.0.0.1 codechot.net 127.0.0.1 www.codechot.net 127.0.0.1 codechq.net 127.0.0.1 www.codechq.net 127.0.0.1 codecmeg.net 127.0.0.1 www.codecmeg.net 127.0.0.1 codecmega.net 127.0.0.1 www.codecmega.net 127.0.0.1 codecmpg.com 127.0.0.1 www.codecmpg.com 127.0.0.1 codecnice.net 127.0.0.1 www.codecnice.net 127.0.0.1 codecops.net 127.0.0.1 www.codecops.net 127.0.0.1 codecpretty.net 127.0.0.1 www.codecpretty.net 127.0.0.1 codecpro.net 127.0.0.1 www.codecpro.net 127.0.0.1 codecsoft.net 127.0.0.1 www.codecsoft.net 127.0.0.1 codectime.com 127.0.0.1 www.codectime.com 127.0.0.1 codecultra.net 127.0.0.1 www.codecultra.net 127.0.0.1 codecvids.com 127.0.0.1 www.codecvids.com 127.0.0.1 codecvip.com 127.0.0.1 www.codecvip.com 127.0.0.1 codecviva.com 127.0.0.1 www.codecviva.com 127.0.0.1 codeczang.net 127.0.0.1 www.codeczang.net 127.0.0.1 codrriere.it 127.0.0.1 www.codrriere.it 127.0.0.1 coeriere.it 127.0.0.1 www.coeriere.it 127.0.0.1 coerriere.it 127.0.0.1 www.coerriere.it 127.0.0.1 cofrriere.it 127.0.0.1 www.cofrriere.it 127.0.0.1 cogrriere.it 127.0.0.1 www.cogrriere.it 127.0.0.1 coirriere.it 127.0.0.1 www.coirriere.it 127.0.0.1 command.adservs.com 127.0.0.1 www.commonname.com 127.0.0.1 computerpcgames.net 127.0.0.1 www.computerpcgames.net 127.0.0.1 computerrecover.com 127.0.0.1 www.computerrecover.com 127.0.0.1 config.180solutions.com 127.0.0.1 content.dollarrevenue.com 127.0.0.1 www.content.dollarrevenue.com 127.0.0.1 content.ireit.com 127.0.0.1 www.content.ireit.com 127.0.0.1 content.onerateld.com 127.0.0.1 contentmatch.net 127.0.0.1 www.contentmatch.net 127.0.0.1 contextplus.net 127.0.0.1 www.contextplus.net 127.0.0.1 contra-virus.com 127.0.0.1 www.contra-virus.com 127.0.0.1 controlmeh.com 127.0.0.1 www.controlmeh.com 127.0.0.1 convenient-search.com 127.0.0.1 www.convenient-search.com 127.0.0.1 cooldeskalert.com 127.0.0.1 www.cooldeskalert.com 127.0.0.1 coolfetishsite.com 127.0.0.1 coolfreehost.com 127.0.0.1 coolfreepage.com 127.0.0.1 coolfreepages.com 127.0.0.1 cool-homepage.co 127.0.0.1 cool-homepage.com 127.0.0.1 coolmoneysearch.com 127.0.0.1 coolpornsearch.com 127.0.0.1 cool-search.net 127.0.0.1 cool-search.netfartpost.com 127.0.0.1 coolsearcher.info 127.0.0.1 coolservecorp.net 127.0.0.1 www.coolservecorp.net 127.0.0.1 coolwebsearch.com 127.0.0.1 www.coolwebsearch.com 127.0.0.1 cool-web-search.com 127.0.0.1 coolwebsearsh.com 127.0.0.1 coolwwwsearch.com 127.0.0.1 www.coolwwwsearch.com 127.0.0.1 cool-xxx.net 127.0.0.1 coorriere.it 127.0.0.1 www.coorriere.it 127.0.0.1 copmtraine.com 127.0.0.1 coprriere.it 127.0.0.1 www.coprriere.it 127.0.0.1 core.psyche-evolution.com 127.0.0.1 www.core.psyche-evolution.com 127.0.0.1 coreiere.it 127.0.0.1 www.coreiere.it 127.0.0.1 coreriere.it 127.0.0.1 www.coreriere.it 127.0.0.1 corrdiere.it 127.0.0.1 www.corrdiere.it 127.0.0.1 correiere.it 127.0.0.1 www.correiere.it 127.0.0.1 corrfiere.it 127.0.0.1 www.corrfiere.it 127.0.0.1 corrgiere.it 127.0.0.1 www.corrgiere.it 127.0.0.1 corridere.it 127.0.0.1 www.corridere.it 127.0.0.1 corriedre.it 127.0.0.1 www.corriedre.it 127.0.0.1 corriee.it 127.0.0.1 www.corriee.it 127.0.0.1 corrieere.it 127.0.0.1 www.corrieere.it 127.0.0.1 corriefre.it 127.0.0.1 www.corriefre.it 127.0.0.1 corriegre.it 127.0.0.1 www.corriegre.it 127.0.0.1 corrierde.it 127.0.0.1 www.corrierde.it 127.0.0.1 corriered.it 127.0.0.1 www.corriered.it 127.0.0.1 corrieree.it 127.0.0.1 www.corrieree.it 127.0.0.1 corrieref.it 127.0.0.1 www.corrieref.it 127.0.0.1 corrierer.it 127.0.0.1 www.corrierer.it 127.0.0.1 corrieres.it 127.0.0.1 www.corrieres.it 127.0.0.1 corrierew.it 127.0.0.1 www.corrierew.it 127.0.0.1 corrierfe.it 127.0.0.1 www.corrierfe.it 127.0.0.1 corrierge.it 127.0.0.1 www.corrierge.it 127.0.0.1 corrierr.it 127.0.0.1 www.corrierr.it 127.0.0.1 corrierre.it 127.0.0.1 www.corrierre.it 127.0.0.1 corrierse.it 127.0.0.1 www.corrierse.it 127.0.0.1 corrierte.it 127.0.0.1 www.corrierte.it 127.0.0.1 corrierw.it 127.0.0.1 www.corrierw.it 127.0.0.1 corrierwe.it 127.0.0.1 www.corrierwe.it 127.0.0.1 corriesre.it 127.0.0.1 www.corriesre.it 127.0.0.1 corriete.it 127.0.0.1 www.corriete.it 127.0.0.1 corrietre.it 127.0.0.1 www.corrietre.it 127.0.0.1 corriewre.it 127.0.0.1 www.corriewre.it 127.0.0.1 corrifere.it 127.0.0.1 www.corrifere.it 127.0.0.1 corriiere.it 127.0.0.1 www.corriiere.it 127.0.0.1 corrilere.it 127.0.0.1 www.corrilere.it 127.0.0.1 corrioere.it 127.0.0.1 www.corrioere.it 127.0.0.1 corrire.it 127.0.0.1 www.corrire.it 127.0.0.1 corrirere.it 127.0.0.1 www.corrirere.it 127.0.0.1 corrirre.it 127.0.0.1 www.corrirre.it 127.0.0.1 corrisere.it 127.0.0.1 www.corrisere.it 127.0.0.1 corriuere.it 127.0.0.1 www.corriuere.it 127.0.0.1 corriwere.it 127.0.0.1 www.corriwere.it 127.0.0.1 corriwre.it 127.0.0.1 www.corriwre.it 127.0.0.1 corrliere.it 127.0.0.1 www.corrliere.it 127.0.0.1 corroere.it 127.0.0.1 www.corroere.it 127.0.0.1 corroiere.it 127.0.0.1 www.corroiere.it 127.0.0.1 corrriere.it 127.0.0.1 www.corrriere.it 127.0.0.1 corrtiere.it 127.0.0.1 www.corrtiere.it 127.0.0.1 corruere.it 127.0.0.1 www.corruere.it 127.0.0.1 corruiere.it 127.0.0.1 www.corruiere.it 127.0.0.1 cortiere.it 127.0.0.1 www.cortiere.it 127.0.0.1 cortriere.it 127.0.0.1 www.cortriere.it 127.0.0.1 costrike.com 127.0.0.1 www.costrike.com 127.0.0.1 cotriere.it 127.0.0.1 www.cotriere.it 127.0.0.1 cotrriere.it 127.0.0.1 www.cotrriere.it 127.0.0.1 couldnotfind.com 127.0.0.1 count.cc 127.0.0.1 count.hitscount.net 127.0.0.1 count-all.com 127.0.0.1 countdutycall.info 127.0.0.1 www.countdutycall.info 127.0.0.1 counter.sexmaniack.com 127.0.0.1 courtrecordslookup.com 127.0.0.1 www.courtrecordslookup.com 127.0.0.1 cporriere.it 127.0.0.1 www.cporriere.it 127.0.0.1 cprriere.it 127.0.0.1 www.cprriere.it 127.0.0.1 cpvfeed.com 127.0.0.1 cracks.me.uk 127.0.0.1 cracks4all.com 127.0.0.1 www.cracks4all.com 127.0.0.1 crapsgold.info 127.0.0.1 www.crapsgold.info 127.0.0.1 Crazygirls-world.com 127.0.0.1 crazywinnings.com 127.0.0.1 www.crazywinnings.com 127.0.0.1 creamedcutties.com 127.0.0.1 createaccesskey.com 127.0.0.1 www.createaccesskey.com 127.0.0.1 creditsearchonline.com 127.0.0.1 crestring.com 127.0.0.1 crooder.com 127.0.0.1 crriere.it 127.0.0.1 www.crriere.it 127.0.0.1 cryptdrive.com 127.0.0.1 www.cryptdrive.com 127.0.0.1 crystalysmedia.com 127.0.0.1 www.crystalysmedia.com 127.0.0.1 csx.adservs.com 127.0.0.1 www.csx.adservs.com 127.0.0.1 cts.180solutions.com 127.0.0.1 cuisinartoven.com 127.0.0.1 www.cuisinartoven.com 127.0.0.1 curedc.info 127.0.0.1 www.curedc.info 127.0.0.1 curepcsolutions.com 127.0.0.1 www.curepcsolutions.com 127.0.0.1 curvedspaces.com 127.0.0.1 cutadult.com 127.0.0.1 www.cutadult.com 127.0.0.1 cvirgilio.it 127.0.0.1 www.cvirgilio.it 127.0.0.1 cvorriere.it 127.0.0.1 www.cvorriere.it 127.0.0.1 cvs.jps.ru 127.0.0.1 cvsymphony.com 127.0.0.1 cxorriere.it 127.0.0.1 www.cxorriere.it 127.0.0.1 cyberrape.com 127.0.0.1 www.cyberrape.com 127.0.0.1 cydom.com 127.0.0.1 cydoor.com 127.0.0.1 www.cydoor.com 127.0.0.1 daily3xlinks.com 127.0.0.1 www.daily3xlinks.com 127.0.0.1 dailybestclips.com 127.0.0.1 www.dailybestclips.com 127.0.0.1 daily-gals.com 127.0.0.1 dailyhugemovs.com 127.0.0.1 www.dailyhugemovs.com 127.0.0.1 dailykeys.com 127.0.0.1 www.dailykeys.com 127.0.0.1 dailypornmag.com 127.0.0.1 www.dailypornmag.com 127.0.0.1 dailyteenspic.com 127.0.0.1 dailytoolbar.com 127.0.0.1 www.dailytoolbar.com 127.0.0.1 dailyxvids.com 127.0.0.1 www.dailyxvids.com 127.0.0.1 dancingbabycd.com 127.0.0.1 dapsol.com 127.0.0.1 www.dapsol.com 127.0.0.1 dapsolution.com 127.0.0.1 www.dapsolution.com 127.0.0.1 data-hoster.com 127.0.0.1 www.data-hoster.com 127.0.0.1 datanotary.com 127.0.0.1 datareco.com 127.0.0.1 dateanybabe.com 127.0.0.1 www.dateanybabe.com 127.0.0.1 dateanychick.com 127.0.0.1 www.dateanychick.com 127.0.0.1 datingdoctorsite.com 127.0.0.1 www.datingdoctorsite.com 127.0.0.1 dating-galaxy.info 127.0.0.1 www.dating-galaxy.info 127.0.0.1 dating-search.net 127.0.0.1 davemarshall.org 127.0.0.1 db105.com 127.0.0.1 dbdecicated.com 127.0.0.1 www.dbdecicated.com 127.0.0.1 dbxcompany.com 127.0.0.1 www.dbxcompany.com 127.0.0.1 dcdl.dmcast.com 127.0.0.1 dcfitusa.com 127.0.0.1 dcorriere.it 127.0.0.1 www.dcorriere.it 127.0.0.1 dcurtis.com 127.0.0.1 www.dcurtis.com 127.0.0.1 dcww.dmcast.com 127.0.0.1 de.ag 127.0.0.1 de.drivecleaner.com 127.0.0.1 de.errorsafe.com 127.0.0.1 de.winantivirus.com 127.0.0.1 de98.remsys.org 127.0.0.1 debay.it 127.0.0.1 www.debay.it 127.0.0.1 decknews.com 127.0.0.1 www.decknews.com 127.0.0.1 dedmazay.3322.org 127.0.0.1 dedsearch.com 127.0.0.1 www.dedsearch.com 127.0.0.1 defaultsearch.net 127.0.0.1 Defensaantimalware.com 127.0.0.1 www.Defensaantimalware.com 127.0.0.1 deja-rue.com 127.0.0.1 www.deja-rue.com 127.0.0.1 delficodec.com 127.0.0.1 www.delficodec.com 127.0.0.1 democodec.com 127.0.0.1 www.democodec.com 127.0.0.1 derklaif.biz 127.0.0.1 www.derklaif.biz 127.0.0.1 derrari.it 127.0.0.1 www.derrari.it 127.0.0.1 desarrollocreativo.com 127.0.0.1 deskbar.worldtostart.com 127.0.0.1 www.deskbar.worldtostart.com 127.0.0.1 deskwizz.com 127.0.0.1 www.deskwizz.com 127.0.0.1 destruktor.to.pl 127.0.0.1 www.destruktor.to.pl 127.0.0.1 detectivehound.com 127.0.0.1 www.detectivehound.com 127.0.0.1 detectivesearches.com 127.0.0.1 www.detectivesearches.com 127.0.0.1 dev.ntcor.com 127.0.0.1 develip.com 127.0.0.1 dewis.spb.ru 127.0.0.1 dewis.us 127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz 127.0.0.1 dgbusiness.com 127.0.0.1 www.dgbusiness.com 127.0.0.1 dialer2004.com 127.0.0.1 dialerclub.com 127.0.0.1 www.dialerclub.com 127.0.0.1 dialer-shop.com 127.0.0.1 www.dialer-shop.com 127.0.0.1 dialoff.com 127.0.0.1 www.dialoff.com 127.0.0.1 did.i-used.cc 127.0.0.1 www.did.i-used.cc 127.0.0.1 dietpills4free.com 127.0.0.1 dietpussy.com 127.0.0.1 digikeygen.com 127.0.0.1 www.digikeygen.com 127.0.0.1 digistreamsa.com 127.0.0.1 digitalcoders.net 127.0.0.1 www.digitalcoders.net 127.0.0.1 www.digitalfan.com 127.0.0.1 digital-pornography.com 127.0.0.1 dionforvalleycouncil.org 127.0.0.1 directdvdpro.com 127.0.0.1 www.directdvdpro.com 127.0.0.1 directporta.info 127.0.0.1 www.directporta.info 127.0.0.1 directsearchzone.com 127.0.0.1 www.directsearchzone.com 127.0.0.1 diskretter.com 127.0.0.1 www.diskretter.com 127.0.0.1 dist.checkin100.com 127.0.0.1 dl.ad-ware.cc 127.0.0.1 dl.malwarewipe.com 127.0.0.1 dl.mcboo.com 127.0.0.1 dl.targetsaver.com 127.0.0.1 www.dl.targetsaver.com 127.0.0.1 dl.web-nexus.net 127.0.0.1 dl1.antivermins.com 127.0.0.1 dl1.antivirgear.com 127.0.0.1 dl1.spydawn.com 127.0.0.1 dl1.virusprotectpro.com 127.0.0.1 dl10.spyfalcon.com 127.0.0.1 dl16.spyfalcon.com 127.0.0.1 dl2.spyfalcon.com 127.0.0.1 dl2.spyheal.com 127.0.0.1 dl2.spywarestrike.com 127.0.0.1 dl3.spyfalcon.com 127.0.0.1 dl3.spyheal.com 127.0.0.1 dl3.spywarestrike.com 127.0.0.1 dl4.spyfalcon.com 127.0.0.1 dl4.spywarestrike.com 127.0.0.1 dl5.spyfalcon.com 127.0.0.1 dl5.spywarestrike.com 127.0.0.1 dl6.spywarestrike.com 127.0.0.1 dl7.spywarestrike.com 127.0.0.1 dl8.spyheal.com 127.0.0.1 dl8.spywarestrike.com 127.0.0.1 dl9.spyfalcon.com 127.0.0.1 dload.contextplus.net 127.0.0.1 dltsolution.com 127.0.0.1 www.dltsolution.com 127.0.0.1 dmcast.com 127.0.0.1 www.dmcast.com 127.0.0.1 dmqfirm.com 127.0.0.1 www.dmqfirm.com 127.0.0.1 dnaads.com 127.0.0.1 www.dnaads.com 127.0.0.1 dnl.mabou.org 127.0.0.1 dns-look-up.com 127.0.0.1 www.dns-look-up.com 127.0.0.1 doctorwaldron.com 127.0.0.1 document-not-found.pornpic.org 127.0.0.1 doggyaction.com 127.0.0.1 dogproblemswebsite.com 127.0.0.1 www.dogproblemswebsite.com 127.0.0.1 doktorxxx.com 127.0.0.1 dollarrevenue.com 127.0.0.1 domaincar.com 127.0.0.1 www.domaincar.com 127.0.0.1 domains2003.net 127.0.0.1 domains-for-you-online.com 127.0.0.1 domain-your-registration.com 127.0.0.1 domkrat.com 127.0.0.1 dotcomtoolbar.com 127.0.0.1 www.dotcomtoolbar.com 127.0.0.1 down.136136.net 127.0.0.1 download.abetterinternet.com 127.0.0.1 download.antispywarebot.com 127.0.0.1 www.download.antispywarebot.com 127.0.0.1 download.bardownload.com 127.0.0.1 www.download.bardownload.com 127.0.0.1 download.bravesentry.com 127.0.0.1 www.download.bravesentry.com 127.0.0.1 download.cdn.drivecleaner.com 127.0.0.1 download.cdn.errorsafe.com 127.0.0.1 download.cdn.winsoftware.com 127.0.0.1 download.contextplus.net 127.0.0.1 download.errorsafe.com 127.0.0.1 download.jupitersatellites.biz 127.0.0.1 www.download.jupitersatellites.biz 127.0.0.1 download.MalwareAlarm.com 127.0.0.1 download.searchtabs.net 127.0.0.1 download.secureyournet.biz 127.0.0.1 www.download.secureyournet.biz 127.0.0.1 download.spyonthis.net 127.0.0.1 download.spy-shredder.com 127.0.0.1 download.systemdoctor.com 127.0.0.1 download.winantispyware.com 127.0.0.1 download.winantivirus.com 127.0.0.1 download.windrivecleaner.com 127.0.0.1 download.winfixer.com 127.0.0.1 download10.spywarequake.com 127.0.0.1 download11.spywarequake.com 127.0.0.1 download12.spywarequake.com 127.0.0.1 download13.spywarequake.com 127.0.0.1 download15.spywarequake.com 127.0.0.1 download2.spywarequake.com 127.0.0.1 download-2007.com 127.0.0.1 www.download-2007.com 127.0.0.1 download3.spyaxe.com 127.0.0.1 download3.spywarequake.com 127.0.0.1 download3xpics.com 127.0.0.1 www.download3xpics.com 127.0.0.1 download4.spyaxe.com 127.0.0.1 download4.spywarequake.com 127.0.0.1 download5.spyaxe.com 127.0.0.1 download5.spywarequake.com 127.0.0.1 download6.spyaxe.com 127.0.0.1 download7.spywarequake.com 127.0.0.1 download8.spywarequake.com 127.0.0.1 download9.spywarequake.com 127.0.0.1 downloadacceleratorsite.com 127.0.0.1 www.downloadacceleratorsite.com 127.0.0.1 download-ad-aware.com 127.0.0.1 www.download-ad-aware.com 127.0.0.1 download-all-4-free.com 127.0.0.1 www.download-all-4-free.com 127.0.0.1 download-all-area.com 127.0.0.1 www.download-all-area.com 127.0.0.1 download-antivir.com 127.0.0.1 www.download-antivir.com 127.0.0.1 downloadanysong.com 127.0.0.1 www.downloadanysong.com 127.0.0.1 downloadaresnow.com 127.0.0.1 www.downloadaresnow.com 127.0.0.1 download-avast.com 127.0.0.1 www.download-avast.com 127.0.0.1 downloadcorporation.com 127.0.0.1 www.downloadcorporation.com 127.0.0.1 download-dvdshrink.com 127.0.0.1 www.download-dvdshrink.com 127.0.0.1 download-for-free.net 127.0.0.1 www.download-for-free.net 127.0.0.1 downloadfreesoft.com 127.0.0.1 www.downloadfreesoft.com 127.0.0.1 downloadfreeway.com 127.0.0.1 www.downloadfreeway.com 127.0.0.1 downloadimesh.com 127.0.0.1 www.downloadimesh.com 127.0.0.1 download-itunes-now.com 127.0.0.1 www.download-itunes-now.com 127.0.0.1 download-limewire.org 127.0.0.1 www.download-limewire.org 127.0.0.1 downloadlost.tv 127.0.0.1 www.downloadlost.tv 127.0.0.1 downloadmax.net 127.0.0.1 www.downloadmax.net 127.0.0.1 download-mcafee.com 127.0.0.1 www.download-mcafee.com 127.0.0.1 download-me.info 127.0.0.1 downloadmediaax.com 127.0.0.1 www.downloadmediaax.com 127.0.0.1 downloadpics.net 127.0.0.1 www.downloadpics.net 127.0.0.1 downloadprovider.net 127.0.0.1 www.downloadprovider.net 127.0.0.1 download-real-player.com 127.0.0.1 www.download-real-player.com 127.0.0.1 downloads.180solutions.com 127.0.0.1 downloads.adaware.cc 127.0.0.1 downloadservicearea.com 127.0.0.1 www.downloadservicearea.com 127.0.0.1 downloads-free.org 127.0.0.1 www.downloads-free.org 127.0.0.1 downloadsglobe.com 127.0.0.1 www.downloadsglobe.com 127.0.0.1 download-this.us 127.0.0.1 www.download-this.us 127.0.0.1 download-trillian.com 127.0.0.1 www.download-trillian.com 127.0.0.1 downloadv3.com 127.0.0.1 www.downloadv3.com 127.0.0.1 downloadvax.com 127.0.0.1 www.downloadvax.com 127.0.0.1 download-windvd.com 127.0.0.1 www.download-windvd.com 127.0.0.1 download-winrar.com 127.0.0.1 www.download-winrar.com 127.0.0.1 downloadwizard.com 127.0.0.1 downloadxmoveis.com 127.0.0.1 www.downloadxmoveis.com 127.0.0.1 downloadxvids.com 127.0.0.1 www.downloadxvids.com 127.0.0.1 downloadzcenter.com 127.0.0.1 downloadzcentral.com 127.0.0.1 downloadzfree.com 127.0.0.1 www.downloadzfree.com 127.0.0.1 downloadznow.net 127.0.0.1 download-zone-free.com 127.0.0.1 www.download-zone-free.com 127.0.0.1 download-zone-free.net 127.0.0.1 www.download-zone-free.net 127.0.0.1 dp-host.com 127.0.0.1 dr.mcboo.com 127.0.0.1 dr.webhancer.com 127.0.0.1 www.dr.webhancer.com 127.0.0.1 dr2.webhancer.com 127.0.0.1 www.dr2.webhancer.com 127.0.0.1 dr38.mcboo.com 127.0.0.1 dr47.mcboo.com 127.0.0.1 dragqueen.gay-clan.com 127.0.0.1 drepubblica.it 127.0.0.1 www.drepubblica.it 127.0.0.1 drivecleaner.com 127.0.0.1 www.drivecleaner.com 127.0.0.1 drivecleanr.com 127.0.0.1 www.drivecleanr.com 127.0.0.1 drocherway.com 127.0.0.1 dropspam.com 127.0.0.1 www.dropspam.com 127.0.0.1 drug-sources-exposed.com 127.0.0.1 drvvv.com 127.0.0.1 dsupereva.it 127.0.0.1 www.dsupereva.it 127.0.0.1 dtlproduct.com 127.0.0.1 www.dtlproduct.com 127.0.0.1 dudu.com 127.0.0.1 www.dudu.com 127.0.0.1 dulcineasystems.net 127.0.0.1 dumpserv.com 127.0.0.1 duolaimi.net 127.0.0.1 dutch-sex.com 127.0.0.1 dvdaccess.net 127.0.0.1 www.dvdaccess.net 127.0.0.1 dvdbank.org 127.0.0.1 dvdcodec.net 127.0.0.1 www.dvdcodec.net 127.0.0.1 dvdsmovies.net 127.0.0.1 www.dvdsmovies.net 127.0.0.1 dvdsvideos.net 127.0.0.1 www.dvdsvideos.net 127.0.0.1 dvdtocdsite.com 127.0.0.1 www.dvdtocdsite.com 127.0.0.1 dvdxgold.com 127.0.0.1 www.dvdxgold.com 127.0.0.1 dvdxpremium.com 127.0.0.1 www.dvdxpremium.com 127.0.0.1 dvicodec.com 127.0.0.1 www.dvicodec.com 127.0.0.1 dynamique.drivecleaner.com 127.0.0.1 e3bay.it 127.0.0.1 www.e3bay.it 127.0.0.1 e4bay.it 127.0.0.1 www.e4bay.it 127.0.0.1 eager-sex.com 127.0.0.1 earthllnk.net 127.0.0.1 www.earthllnk.net 127.0.0.1 eases.net 127.0.0.1 easyantispy.com 127.0.0.1 easybestdeals.com 127.0.0.1 www.easybestdeals.com 127.0.0.1 easycategories.com 127.0.0.1 easycdrip.com 127.0.0.1 www.easycdrip.com 127.0.0.1 easymovieplayer.com 127.0.0.1 www.easymovieplayer.com 127.0.0.1 easymp3musicnow.com 127.0.0.1 www.easymp3musicnow.com 127.0.0.1 easymus.cn 127.0.0.1 www.easymus.cn 127.0.0.1 easy-pharmacy.info 127.0.0.1 www.easy-pharmacy.info 127.0.0.1 easypspdownloads.com 127.0.0.1 www.easypspdownloads.com 127.0.0.1 easy-search.net 127.0.0.1 easysearch4you.com 127.0.0.1 www.easysearch4you.com 127.0.0.1 easysearchingtips.com 127.0.0.1 easyspyware.com 127.0.0.1 www.easyspyware.com 127.0.0.1 easywww.info 127.0.0.1 www.easywww.info 127.0.0.1 eba6y.it 127.0.0.1 www.eba6y.it 127.0.0.1 eba7y.it 127.0.0.1 www.eba7y.it 127.0.0.1 ebaay.it 127.0.0.1 www.ebaay.it 127.0.0.1 ebagy.it 127.0.0.1 www.ebagy.it 127.0.0.1 ebahy.it 127.0.0.1 www.ebahy.it 127.0.0.1 ebajy.it 127.0.0.1 www.ebajy.it 127.0.0.1 ebaqy.it 127.0.0.1 www.ebaqy.it 127.0.0.1 ebasy.it 127.0.0.1 www.ebasy.it 127.0.0.1 ebaty.it 127.0.0.1 www.ebaty.it 127.0.0.1 ebauy.it 127.0.0.1 www.ebauy.it 127.0.0.1 ebav.com 127.0.0.1 ebaw.com 127.0.0.1 ebawy.it 127.0.0.1 www.ebawy.it 127.0.0.1 ebaxy.it 127.0.0.1 www.ebaxy.it 127.0.0.1 ebay6.it 127.0.0.1 www.ebay6.it 127.0.0.1 ebay7.it 127.0.0.1 www.ebay7.it 127.0.0.1 ebayg.it 127.0.0.1 www.ebayg.it 127.0.0.1 ebayh.it 127.0.0.1 www.ebayh.it 127.0.0.1 ebayj.it 127.0.0.1 www.ebayj.it 127.0.0.1 ebayt.it 127.0.0.1 www.ebayt.it 127.0.0.1 ebayu.it 127.0.0.1 www.ebayu.it 127.0.0.1 ebazy.it 127.0.0.1 www.ebazy.it 127.0.0.1 ebch.com 127.0.0.1 ebdv.com 127.0.0.1 ebdw.com 127.0.0.1 ebestfind.org 127.0.0.1 www.ebestfind.org 127.0.0.1 ebgay.it 127.0.0.1 www.ebgay.it 127.0.0.1 ebgo.com 127.0.0.1 ebhay.it 127.0.0.1 www.ebhay.it 127.0.0.1 ebjp.com 127.0.0.1 ebkb.com 127.0.0.1 ebkn.com 127.0.0.1 ebky.com 127.0.0.1 eblv.com 127.0.0.1 ebmu.com 127.0.0.1 ebnay.it 127.0.0.1 www.ebnay.it 127.0.0.1 ebony-pornmag.com 127.0.0.1 www.ebony-pornmag.com 127.0.0.1 ebonypornmag.com 127.0.0.1 www.ebonypornmag.com 127.0.0.1 ebqay.it 127.0.0.1 www.ebqay.it 127.0.0.1 ebsay.it 127.0.0.1 www.ebsay.it 127.0.0.1 ebsy.it 127.0.0.1 www.ebsy.it 127.0.0.1 ebvay.it 127.0.0.1 www.ebvay.it 127.0.0.1 ebvr.com 127.0.0.1 ebway.it 127.0.0.1 www.ebway.it 127.0.0.1 ebwmanufacture.com 127.0.0.1 www.ebwmanufacture.com 127.0.0.1 ebxay.it 127.0.0.1 www.ebxay.it 127.0.0.1 ebzay.it 127.0.0.1 www.ebzay.it 127.0.0.1 echterschutz.com 127.0.0.1 www.echterschutz.com 127.0.0.1 ecmh.com 127.0.0.1 |
|
|
Feb 10 2008, 12:13 PM
Post
#4
|
|
![]() GeekU Teacher Posts: 34,385 From: Dublin OS: XP |
Can you attach the SmitfraudFix report, and post the DSS logs
|
|
|
Feb 10 2008, 12:42 PM
Post
#5
|
|
|
Member ![]() ![]() Posts: 38 OS: Windows XP |
I have attached the SmitfraudFix report and here are the DSS main.txt and extra.txt logs.
Deckard's System Scanner v20071014.68 Run by Kirsten on 2008-02-10 10:53:00 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- Successfully created a Deckard's System Scanner Restore Point. -- Last 5 Restore Point(s) -- 9: 2008-02-10 16:53:12 UTC - RP10 - Deckard's System Scanner Restore Point 8: 2008-02-08 19:06:55 UTC - RP9 - System Checkpoint 7: 2008-02-07 02:32:47 UTC - RP8 - Removed Ad-Aware 2007 6: 2008-02-07 01:51:30 UTC - RP7 - Installed SUPERAntiSpyware Free Edition 5: 2008-02-06 22:27:16 UTC - RP6 - Installed Windows XP KB906569. -- First Restore Point -- 1: 2008-02-04 02:31:06 UTC - RP2 - System Checkpoint Backed up registry hives. Performed disk cleanup. Total Physical Memory: 254 MiB (512 MiB recommended). -- HijackThis (run as Kirsten.exe) --------------------------------------------- Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:55:16 AM, on 2/10/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\brsvc01a.exe C:\WINDOWS\system32\brss01a.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\WINDOWS\system32\Brmfrmps.exe C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\Program Files\Dell Support Center\bin\sprtsvc.exe C:\WINDOWS\system32\svchost.exe C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe C:\PROGRA~1\Yahoo!\YOP\yop.exe C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\PROGRA~1\Yahoo!\browser\ycommon.exe C:\Program Files\Brother\ControlCenter2\brctrcen.exe C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\Dell\Media Experience\DMXLauncher.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\DellSupport\DSAgnt.exe C:\Program Files\Dell Support Center\bin\sprtcmd.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Google\Google Updater\GoogleUpdater.exe C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe C:\Program Files\iPod\bin\iPodService.exe C:\PROGRA~1\Yahoo!\YOP\SSDK02.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\msiexec.exe C:\Documents and Settings\Kirsten\Desktop\dss.exe C:\PROGRA~1\TRENDM~1\HIJACK~1\Kirsten.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1 R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\common\yiesrvc.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll O4 - HKLM\..\Run: [YBrowser] C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe O4 - HKLM\..\Run: [YOP] C:\PROGRA~1\Yahoo!\YOP\yop.exe /autostart O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKCU\..\RunOnce: [] C:\Program Files\Internet Explorer\iexplore.exe http://www.symantec.com/techsupp/servlet/P...000030.0000010e O4 - Global Startup: Digital Line Detect.lnk = ? O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe O8 - Extra context menu item: &Search - http://kl.bar.need2find.com/KL/menusearch.html?p=KL O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll O16 - DPF: {341FF14B-00CB-49F5-A427-A164DF1D5E1F} (MALPlaybackCtrl Class) - http://musicstore.connect.com/XSL/mb_us/ht...ALStreaming.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1172946596421 O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/...224/mcfscan.cab O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Brother Popup Suspend service for Resource manager (brmfrmps) - Brother Industries, Ltd. - C:\WINDOWS\system32\Brmfrmps.exe O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\480\g2aservice.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE -- End of file - 9964 bytes -- HijackThis Fixed Entries (C:\PROGRA~1\TRENDM~1\HIJACK~1\backups\) ----------- backup-20080203-161709-168 O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll (file missing) backup-20080203-161709-250 O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file) backup-20080203-161709-947 O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file) -- File Associations ----------------------------------------------------------- All associations okay. -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- R1 SASDIFSV - c:\program files\superantispyware\sasdifsv.sys R1 SASKUTIL - c:\program files\superantispyware\saskutil.sys R3 DSproct - c:\program files\dellsupport\gtaction\triggers\dsproct.sys <Not Verified; Gteko Ltd.; processt> R3 SASENUM - c:\program files\superantispyware\sasenum.sys <Not Verified; SuperAdBlocker, Inc.; SuperAntiSpyware> S3 pcouffin (VSO Software pcouffin) - c:\windows\system32\drivers\pcouffin.sys <Not Verified; VSO Software; Patin couffin engine> S3 SDTHOOK - c:\windows\system32\drivers\sdthook.sys <Not Verified; Panda Software; Panda® Antivirus> -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- R2 Apple Mobile Device - "c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe" <Not Verified; Apple, Inc.; Apple Mobile Device Service> R2 sprtsvc_dellsupportcenter (SupportSoft Sprocket Service (dellsupportcenter)) - c:\program files\dell support center\bin\sprtsvc.exe /service /p dellsupportcenter S3 YPCService - c:\windows\system32\ypcser~1.exe <Not Verified; Yahoo! Inc.; YPCService Module> -- Device Manager: Disabled ---------------------------------------------------- No disabled devices found. -- Scheduled Tasks ------------------------------------------------------------- 2008-02-04 20:00:01 626 --a------ C:\WINDOWS\Tasks\Norton Internet Security - Run Full System Scan - Kirsten.job 2008-02-01 10:16:13 284 --a------ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job -- Files created between 2008-01-10 and 2008-02-10 ----------------------------- 2008-02-10 10:26:25 4214 --a------ C:\WINDOWS\system32\tmp.reg 2008-02-10 10:24:43 25600 --a------ C:\WINDOWS\system32\WS2Fix.exe 2008-02-10 10:24:43 289144 --a------ C:\WINDOWS\system32\VCCLSID.exe <Not Verified; S!Ri; > 2008-02-10 10:24:43 85504 --a------ C:\WINDOWS\system32\VACFix.exe <Not Verified; S!Ri.URZ; VACFix> 2008-02-10 10:24:43 288417 --a------ C:\WINDOWS\system32\SrchSTS.exe <Not Verified; S!Ri; SrchSTS> 2008-02-10 10:24:43 53248 --a------ C:\WINDOWS\system32\Process.exe <Not Verified; http://www.beyondlogic.org; Command Line Process Utility> 2008-02-10 10:24:43 82432 --a------ C:\WINDOWS\system32\IEDFix.exe <Not Verified; S!Ri.URZ; IEDFix> 2008-02-10 10:24:43 51200 --a------ C:\WINDOWS\system32\dumphive.exe 2008-02-07 19:45:36 0 d-------- C:\Documents and Settings\Kirsten\Application Data\Grisoft 2008-02-06 19:51:32 0 d-------- C:\Program Files\SUPERAntiSpyware 2008-02-06 19:48:26 0 d-------- C:\Program Files\Alwil Software 2008-02-06 16:37:17 0 d-------- C:\WINDOWS\McAfee.com 2008-02-05 20:23:14 0 d-------- C:\Program Files\Common Files\Wise Installation Wizard 2008-02-05 17:35:41 0 d-------- C:\Documents and Settings\Guest\Application Data\ultra 2008-02-03 21:17:29 0 d-------- C:\Documents and Settings\All Users\Application Data\Google Updater 2008-02-02 14:34:36 0 d-------- C:\Program Files\Common Files\Java 2008-02-02 13:40:33 0 d-------- C:\Documents and Settings\All Users\Application Data\Avg7 2008-01-30 22:21:48 0 d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-01-30 09:49:41 0 d-------- C:\Documents and Settings\Guest\Application Data\Grisoft 2008-01-29 23:38:46 0 d-------- C:\Program Files\Trend Micro 2008-01-28 08:07:07 0 d-------- C:\WINDOWS\E80F62FF5D3C4A1984099721F2928206.TMP 2008-01-27 23:34:49 44928 --a------ C:\WINDOWS\system32\drivers\SDTHOOK.SYS <Not Verified; Panda Software; Panda® Antivirus> 2008-01-27 19:33:59 0 d-------- C:\Documents and Settings\Administrator\Application Data\Grisoft 2008-01-27 19:00:12 0 d-------- C:\Documents and Settings\All Users\Application Data\Grisoft 2008-01-27 05:34:09 0 d-------- C:\Program Files\iPod 2008-01-27 05:31:57 0 d-------- C:\Program Files\iTunes 2008-01-26 06:22:21 0 d-------- C:\Documents and Settings\All Users\Application Data\SupportSoft 2008-01-26 06:21:20 0 d-------- C:\Program Files\Dell Support Center 2008-01-26 06:21:03 0 d-------- C:\Program Files\Common Files\supportsoft 2008-01-26 05:52:14 0 d-------- C:\Documents and Settings\All Users\Application Data\Dell 2008-01-26 05:14:57 0 d-------- C:\Documents and Settings\Administrator\Application Data\Macromedia 2008-01-26 05:14:57 0 d-------- C:\Documents and Settings\Administrator\Application Data\Identities 2008-01-26 05:14:57 0 d-------- C:\Documents and Settings\Administrator\Application Data\Apple Computer 2008-01-26 05:14:57 0 d-------- C:\Documents and Settings\Administrator\Application Data\AOL 2008-01-26 05:14:56 0 d--h----- C:\Documents and Settings\Administrator\Templates 2008-01-26 05:14:56 0 dr------- C:\Documents and Settings\Administrator\Start Menu 2008-01-26 05:14:56 0 dr-h----- C:\Documents and Settings\Administrator\SendTo 2008-01-26 05:14:56 0 dr-h----- C:\Documents and Settings\Administrator\Recent 2008-01-26 05:14:56 0 d--h----- C:\Documents and Settings\Administrator\PrintHood 2008-01-26 05:14:56 0 d--h----- C:\Documents and Settings\Administrator\NetHood 2008-01-26 05:14:56 0 dr------- C:\Documents and Settings\Administrator\My Documents 2008-01-26 05:14:56 0 d--h----- C:\Documents and Settings\Administrator\Local Settings 2008-01-26 05:14:56 0 dr------- C:\Documents and Settings\Administrator\Favorites 2008-01-26 05:14:56 0 d-------- C:\Documents and Settings\Administrator\Desktop 2008-01-26 05:14:56 0 d--hs---- C:\Documents and Settings\Administrator\Cookies 2008-01-26 05:14:56 0 dr-h----- C:\Documents and Settings\Administrator\Application Data 2008-01-26 05:14:56 0 d-------- C:\Documents and Settings\Administrator\Application Data\Symantec 2008-01-26 05:14:56 0 d-------- C:\Documents and Settings\Administrator\Application Data\Sun 2008-01-26 05:14:56 0 d---s---- C:\Documents and Settings\Administrator\Application Data\Microsoft 2008-01-26 05:14:55 1048576 --a------ C:\Documents and Settings\Administrator\NTUSER.DAT -- Find3M Report --------------------------------------------------------------- 2008-02-07 17:01:52 3652 --a----c- C:\Documents and Settings\Kirsten\Application Data\wklnhst.dat 2008-02-06 20:32:56 0 d-------- C:\Program Files\Lavasoft 2008-02-06 19:51:32 0 d-------- C:\Documents and Settings\Kirsten\Application Data\SUPERAntiSpyware.com 2008-02-05 20:23:14 0 d-------- C:\Program Files\Common Files 2008-02-05 15:41:05 0 d-------- C:\Program Files\QuickTime 2008-02-03 23:33:24 0 d-------- C:\Program Files\Google 2008-02-02 14:37:29 0 d-------- C:\Program Files\Java 2008-01-31 00:36:35 0 d-------- C:\Program Files\America Online 9.0 2008-01-29 23:02:35 0 d-------- C:\Program Files\DellSupport 2008-01-29 23:02:16 0 d-------- C:\Program Files\Digital Line Detect 2008-01-28 10:18:07 0 d-------- C:\Program Files\Common Files\Symantec Shared 2008-01-04 23:22:08 2984 --a------ C:\cc_20080104_2321.reg 2008-01-04 22:58:37 8772 --a------ C:\cc_20080104_2258.reg 2008-01-04 22:58:08 266458 --a------ C:\cc_20080104_2257.reg 2008-01-04 22:03:07 0 d-------- C:\Program Files\Citrix 2008-01-04 14:20:58 3072 --a----c- C:\Documents and Settings\Kirsten\Application Data\dvd.bmk 2008-01-01 12:25:57 0 d-------- C:\Documents and Settings\Kirsten\Application Data\GRETECH 2008-01-01 12:25:20 0 d-------- C:\Program Files\GRETECH 2008-01-01 03:32:50 0 d--h----- C:\Program Files\InstallShield Installation Information 2008-01-01 01:59:52 0 d-------- C:\Documents and Settings\Kirsten\Application Data\CyberLink 2007-12-31 23:36:40 0 d-------- C:\Documents and Settings\Kirsten\Application Data\WinRAR 2007-12-26 00:36:20 0 d-------- C:\Documents and Settings\Kirsten\Application Data\LimeWire 2007-12-23 18:06:36 0 d-------- C:\Program Files\Windows Sidebar 2007-12-19 12:18:24 0 d-------- C:\Documents and Settings\Kirsten\Application Data\Yahoo! 2007-12-19 12:11:32 0 d-------- C:\Program Files\Yahoo! 2007-12-11 12:15:40 0 d-------- C:\Documents and Settings\Kirsten\Application Data\Vso 2007-12-11 12:15:40 47360 --a------ C:\Documents and Settings\Kirsten\Application Data\pcouffin.sys <Not Verified; VSO Software; Patin couffin engine> 2007-12-11 12:15:40 55 --a------ C:\Documents and Settings\Kirsten\Application Data\pcouffin.log 2007-12-11 12:15:40 1144 --a------ C:\Documents and Settings\Kirsten\Application Data\pcouffin.inf 2007-12-11 12:15:40 7887 --a------ C:\Documents and Settings\Kirsten\Application Data\pcouffin.cat 2007-12-10 21:47:41 3350 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys 2007-12-10 21:47:23 88 -r-hs---- C:\WINDOWS\system32\9B8DD435AC.sys -- Registry Dump --------------------------------------------------------------- *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "YBrowser"="C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe" [07/21/2006 04:19 PM] "YOP"="C:\PROGRA~1\Yahoo!\YOP\yop.exe" [10/26/2007 03:42 PM] "SSBkgdUpdate"="C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [10/14/2003 10:22 AM] "PaperPort PTD"="C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe" [04/14/2004 02:46 PM] "IndexSearch"="C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe" [04/14/2004 03:04 PM] "SetDefPrt"="C:\Program Files\Brother\Brmfl04a\BrStDvPt.exe" [05/25/2004 09:16 AM] "ControlCenter2.0"="C:\Program Files\Brother\ControlCenter2\brctrcen.exe" [07/20/2004 09:34 AM] "SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [10/14/2004 06:42 PM] "ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [06/10/2005 09:44 AM] "ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" [06/10/2005 09:44 AM] "DMXLauncher"="C:\Program Files\Dell\Media Experience\DMXLauncher.exe" [10/05/2005 02:12 AM] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [10/10/2007 07:51 PM] "dscactivate"="C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" [11/15/2007 09:24 AM] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [01/10/2008 03:27 PM] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [01/15/2008 03:22 AM] "MSKDetectorExe"="C:\Program Files\McAfee\SpamKiller\MSKDetct.exe" [] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe" [12/14/2007 03:42 AM] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [12/04/2007 07:00 AM] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [06/11/2007 03:25 AM] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DellSupport"="C:\Program Files\DellSupport\DSAgnt.exe" [03/15/2007 10:09 AM] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 04:00 AM] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [10/13/2004 10:24 AM] "DellSupportCenter"="C:\Program Files\Dell Support Center\bin\sprtcmd.exe" [11/15/2007 09:23 AM] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [02/03/2008 09:17 PM] "SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [06/21/2007 02:06 PM] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce] @=C:\Program Files\Internet Explorer\iexplore.exe http://www.symantec.com/techsupp/servlet/P...000030.0000010e C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [8/2/2006 7:09:24 PM] Google Updater.lnk - C:\Program Files\Google\Google Updater\GoogleUpdater.exe [2/3/2008 9:17:29 PM] Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2/13/2001 12:01:04 AM] Status Monitor.lnk - C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [1/19/2007 7:27:14 PM] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableRegistryTools"=0 (0x0) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [12/20/2006 01:55 PM 77824] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon] C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 04/19/2007 01:41 PM 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist] C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll 01/04/2008 10:02 PM 10792 C:\Program Files\Citrix\GoToAssist\480\g2awinlogon.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "AVGEMS"=2 (0x2) "Avg7UpdSvc"=2 (0x2) "Avg7Alrt"=2 (0x2) -- Hosts ----------------------------------------------------------------------- 127.0.0.1 007guard.com 127.0.0.1 www.007guard.com 127.0.0.1 008i.com 127.0.0.1 008k.com 127.0.0.1 www.008k.com 127.0.0.1 00hq.com 127.0.0.1 www.00hq.com 127.0.0.1 010402.com 127.0.0.1 032439.com 127.0.0.1 www.032439.com 7885 more entries in hosts file. -- End of Deckard's System Scanner: finished at 2008-02-10 10:57:10 ------------ Deckard's System Scanner v20071014.68 Extra logfile - please post this as an attachment with your post. -------------------------------------------------------------------------------- -- System Information ---------------------------------------------------------- Microsoft Windows XP Home Edition (build 2600) SP 2.0 Architecture: X86; Language: English CPU 0: Intel® Celeron® CPU 2.53GHz Percentage of Memory in Use: 82% Physical Memory (total/avail): 253.98 MiB / 44.38 MiB Pagefile Memory (total/avail): 3640.93 MiB / 3195.48 MiB Virtual Memory (total/avail): 2047.88 MiB / 1930.79 MiB C: is Fixed (NTFS) - 52.7 GiB total, 30.41 GiB free. D: is Fixed (NTFS) - 18.05 GiB total, 17.98 GiB free. E: is CDROM (No Media) F: is Removable (No Media) \\.\PHYSICALDRIVE0 - HDS728080PLAT20 - 74.5 GiB - 4 partitions \PARTITION0 - Unknown - 39.19 MiB \PARTITION1 (bootable) - Installable File System - 52.7 GiB - C: \PARTITION2 - Installable File System - 18.05 GiB - D: \PARTITION3 - Unknown - 3.71 GiB \\.\PHYSICALDRIVE1 - Brother MFC-210C USB Device -- Security Center ------------------------------------------------------------- AUOptions is scheduled to auto-install. Windows Internal Firewall is enabled. FirstRunDisabled is set. AV: avast! antivirus 4.7.1098 [VPS 080209-0] v4.7.1098 (ALWIL Software) [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] -- Environment Variables ------------------------------------------------------- ALLUSERSPROFILE=C:\Documents and Settings\All Users APPDATA=C:\Documents and Settings\Kirsten\Application Data CLASSPATH=.;C:\Program Files\Java\jre1.5.0_11\lib\ext\QTJava.zip CLIENTNAME=Console CommonProgramFiles=C:\Program Files\Common Files COMPUTERNAME=DAVISFAMILY ComSpec=C:\WINDOWS\system32\cmd.exe FP_NO_HOST_CHECK=NO HOMEDRIVE=C: HOMEPATH=\Documents and Settings\Kirsten LOGONSERVER=\\DAVISFAMILY NUMBER_OF_PROCESSORS=1 OS=Windows_NT Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\QuickTime\QTSystem;C:\Program Files\QuickTime\QTSystem\ PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 9, GenuineIntel PROCESSOR_LEVEL=15 PROCESSOR_REVISION=0409 ProgramFiles=C:\Program Files PROMPT=$P$G QTJAVA=C:\Program Files\Java\jre1.5.0_11\lib\ext\QTJava.zip SESSIONNAME=Console SonicCentral=C:\Program Files\Common Files\Sonic Shared\Sonic Central\ SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\DOCUME~1\Kirsten\LOCALS~1\Temp TMP=C:\DOCUME~1\Kirsten\LOCALS~1\Temp USERDOMAIN=DAVISFAMILY USERNAME=Kirsten USERPROFILE=C:\Documents and Settings\Kirsten windir=C:\WINDOWS -- User Profiles --------------------------------------------------------------- Kirsten (admin) Administrator (admin) Guest (guest) -- Add/Remove Programs --------------------------------------------------------- --> C:\PROGRA~1\Yahoo!\Common\unyt.exe --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0 --> C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\orun32.isu --> C:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205} --> C:\WINDOWS\system32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6} --> C:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382} --> C:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629} --> MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095} --> MsiExec.exe /I{8A42F680-2DD6-11D4-9A8C-0040F6982C20} --> MsiExec.exe /I{A2529672-574A-4A99-86A5-C1770A0E31FE} --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf Adobe Flash Player ActiveX --> C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe Adobe Reader 8.1.1 --> MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A81000000003} America Online (Choose which version to remove) --> C:\Program Files\Common Files\aolshare\Aolunins_us.exe AOL Coach Version 1.0(Build:20040229.1 en) --> C:\Program Files\Common Files\aolshare\Coach\AolCInUn.exe AOL Connectivity Services --> C:\PROGRA~1\COMMON~1\AOL\ACS\AcsUninstall.exe /c AOLIcon --> MsiExec.exe /I{62BD0AE0-4EB1-4BBB-8F43-B6400C8FEB2C} Apple Mobile Device Support --> MsiExec.exe /I{D8AB8F0C-CEEB-4A29-8EF5-219B064813F4} Apple Software Update --> MsiExec.exe /I{B74F042E-E1B9-4A5B-8D46-387BB172F0A4} AT&T Yahoo! Applications --> C:\PROGRA~1\Yahoo!\common\uninstall.exe avast! Antivirus --> rundll32 C:\PROGRA~1\ALWILS~1\Avast4\Setup\setiface.dll,RunSetup AVG Anti-Spyware 7.5 --> C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Uninstall.exe Banctec Service Agreement --> MsiExec.exe /X{4B9F45E8-E3CE-40B4-9463-80A9B3481DEF} Brother MFL-Pro Suite --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{40A6C96D-808E-41DD-8716-617AB6B0F1F1}\Setup.exe" -l0x9 Brunin03.dllBrunin03.dll CleanUp! --> C:\Program Files\CleanUp!\uninstall.exe Conexant D850 56K V.9x DFVc Modem --> C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200F14F1\HXFSETUP.EXE -U -Idel200fk.inf Corel Photo Album 6 --> MsiExec.exe /X{8A9B8148-DDD7-448F-BD6C-358386D32354} Dell CinePlayer --> MsiExec.exe /I{43CAC9A1-1993-4F65-9096-7C9AFC2BBF54} Dell Digital Jukebox Driver --> C:\Program Files\Dell\Digital Jukebox Drivers\DrvUnins.exe /s Dell Driver Reset Tool --> MsiExec.exe /I{5905F42D-3F5F-4916-ADA6-94A3646AEE76} Dell Game Console --> "C:\Program Files\WildTangent\Apps\Dell Game Console\Uninstall.exe" Dell Support Center --> MsiExec.exe /X{E3BFEE55-39E2-4BE0-B966-89FE583822C1} DellConnect --> MsiExec.exe /X{52D56C42-8C69-4882-A661-39695537C9CF} DellSupport --> MsiExec.exe /X{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D} Digital Content Portal --> MsiExec.exe /I{6D5FCA42-1486-4E32-AFE8-1B7E2AA59D33} Digital Line Detect --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanelAnyText Documentation & Support Launcher --> MsiExec.exe /X{B0DF58A2-40DF-4465-AA56-38623EC9938C} EducateU --> MsiExec.exe /I{A683A2C0-821C-486F-858C-FA634DB5E864} ELIcon --> MsiExec.exe /I{4667B940-BB01-428B-986E-A0CC46497BF7} Games, Music, & Photos Launcher --> MsiExec.exe /X{B6884A07-0305-47AE-9969-8F26FADC17DE} Get High Speed Internet! --> MsiExec.exe /I{7A3F0566-5E05-4919-9C98-456F6B5CF831} GOM Player --> "C:\Program Files\GRETECH\GomPlayer\Uninstall.exe" Google Updater --> "C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall GoToAssist 8.0.0.480 --> C:\Program Files\Citrix\GoToAssist\480\G2AUninstaller.exe /uninstall HijackThis 2.0.2 --> "C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall Hotfix for Windows Media Format 11 SDK (KB929399) --> "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe" Intel® Extreme Graphics 2 Driver --> RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx PCI\VEN_8086&DEV_2572 Intel® PRO Network Adapters and Drivers --> Prounstl.exe Intel® PROSet for Wired Connections --> MsiExec.exe /I{17334AAF-C9E7-483B-9F45-E3FCAF07FFA7} iTunes --> MsiExec.exe /I{B85C4D19-6CEB-48CF-BD98-C887AC8C6F94} Java 6 Update 4 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160040} LimeWire 4.14.10 --> "C:\Program Files\LimeWire\uninstall.exe" Macromedia Shockwave Player --> C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log MCU --> MsiExec.exe /I{D2988E9B-C73F-422C-AD4B-A66EBE257120} Microsoft Compression Client Pack 1.0 for Windows XP --> "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe" Microsoft Digital Image Standard 2006 --> "C:\Program Files\Common Files\Microsoft Shared\Picture It!\RmvSuite.exe" ADDREMOVE=1 SKU=PREM VERSION=11 Microsoft Encarta Encyclopedia Standard 2006 --> MsiExec.exe /I{06040048-3E21-46D6-9A91-D927BA08F41D} Microsoft Money 2006 --> "C:\Program Files\Microsoft Money 2006\MNYCoreFiles\Setup\uninst.exe" /s:120 Microsoft Plus! Digital Media Edition Installer --> MsiExec.exe /X{6E45BA47-383C-4C1E-8ED0-0D4845C293D7} Microsoft Plus! Photo Story 2 LE --> MsiExec.exe /X{0EB5D9B7-8E6C-4A9E-B74F-16B7EE89A67B} Microsoft Streets & Trips 2006 --> MsiExec.exe /I{83ED1E80-A1B7-4226-BCF1-AC4A88151A6B} Microsoft User-Mode Driver Framework Feature Pack 1.0 --> "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe" Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Word 2002 --> MsiExec.exe /I{911B0409-6000-11D3-8CFE-0050048383C9} Microsoft Works --> MsiExec.exe /I{6D52C408-B09A-4520-9B18-475B81D393F1} Microsoft Works Suite 2006 Setup Launcher --> C:\Program Files\Microsoft Works Suite 2006\Setup\Launcher.exe /ARP E:\ Microsoft Works Suite Add-in for Microsoft Word --> MsiExec.exe /I{17E3A651-12B9-4149-BAE8-E6FB9A5ADC4F} Modem Helper --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7F142D56-3326-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanel Move Networks Player for Internet Explorer --> "C:\Documents and Settings\Kirsten\Application Data\Move Networks\ie_bin\unins000.exe" MSN --> C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP Musicmatch® Jukebox --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{85D3CC30-8859-481A-9654-FD9B74310BEF}\setup.exe" -l0x9 -uninst NetWaiting --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe" -l0x9 ControlPanelAnyText PaperPort --> MsiExec.exe /I{A17EABB6-D0C6-44E5-820C-72DC7F495064} QuickTime --> C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log QuickTime --> MsiExec.exe /I{6EC874C2-F950-4B7E-A5B7-B1066D6B74AA} RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0 Roxio DLA --> MsiExec.exe /I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6} Roxio RecordNow Audio --> MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382} Roxio RecordNow Copy --> MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629} Roxio RecordNow Data --> MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205} Search Assist --> MsiExec.exe /X{DF6A589A-7A1A-430C-9FF2-A0BDB42669DC} Security Update for CAPICOM (KB931906) --> MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for CAPICOM (KB931906) --> MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} Security Update for Step By Step Interactive Training (KB898458) --> "C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe" Security Update for Step By Step Interactive Training (KB923723) --> "C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe" Sonic Activation Module --> MsiExec.exe /I{5B6BE547-21E2-49CA-B2E2-6A5F470593B1} Sonic Update Manager --> MsiExec.exe /I{30465B6C-B53F-49A1-9EBA-A3F187AD502E} SUPERAntiSpyware Free Edition --> MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA} Talking Typing Teacher --> C:\WINDOWS\uninst.exe -f"C:\Program Files\Cosmi\Talking Typing Teacher\DeIsL1.isu" -c"C:\Program Files\Cosmi\Talking Typing Teacher\_ISREG32.DLL" URL Assistant --> regsvr32 /u /s "C:\Program Files\BAE\BAE.dll" WebCyberCoach 3.2 Dell --> "C:\Program Files\WebCyberCoach\b_Dell\WCC_Wipe.exe" "WebCyberCoach ext\wtrb" /inf "engine.inf,RealUninstallSection,,4" /infcfg "enginecf.inf,RealUninstallSection,,4" Windows Media Format 11 runtime --> "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe" WinRAR archiver --> C:\Program Files\WinRAR\uninstall.exe -- Application Event Log ------------------------------------------------------- Event Record #/Type14916 / Error Event Submitted/Written: 02/10/2008 10:47:34 AM Event ID/Source: 1002 / MsiInstaller Event Description: Unexpected or missing value (name: 'PackageName', value: '') in key 'HKLM\Software\Classes\Installer\Products\B97CF7F995034624490593BE63E82352\SourceList' Event Record #/Type14915 / Error Event Submitted/Written: 02/10/2008 10:46:39 AM Event ID/Source: 1002 / MsiInstaller Event Description: Unexpected or missing value (name: 'PackageName', value: '') in key 'HKU\S-1-5-18\Software\Microsoft\Installer\Products\B97CF7F995034624490593BE63E82352\SourceList' Event Record #/Type14907 / Warning Event Submitted/Written: 02/10/2008 10:21:04 AM Event ID/Source: 1524 / Userenv Event Description: Windows cannot unload your classes registry file - it is still in use by other applications or services. The file will be unloaded when it is no longer in use. Event Record #/Type14906 / Error Event Submitted/Written: 02/10/2008 10:19:55 AM Event ID/Source: 1002 / MsiInstaller Event Description: Unexpected or missing value (name: 'PackageName', value: '') in key 'HKU\S-1-5-18\Software\Microsoft\Installer\Products\B97CF7F995034624490593BE63E82352\SourceList' Event Record #/Type14900 / Error Event Submitted/Written: 02/10/2008 09:56:36 AM Event ID/Source: 1002 / MsiInstaller Event Description: Unexpected or missing value (name: 'PackageName', value: '') in key 'HKLM\Software\Classes\Installer\Products\B97CF7F995034624490593BE63E82352\SourceList' -- Security Event Log ---------------------------------------------------------- No Errors/Warnings found. -- System Event Log ------------------------------------------------------------ Event Record #/Type34490 / Error Event Submitted/Written: 02/10/2008 10:55:41 AM Event ID/Source: 7016 / Service Control Manager Event Description: The BrSplService service has reported an invalid current state 0. Event Record #/Type34455 / Error Event Submitted/Written: 02/10/2008 10:36:02 AM Event ID/Source: 10005 / DCOM Event Description: DCOM got error "%%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF} Event Record #/Type34454 / Error Event Submitted/Written: 02/10/2008 10:33:25 AM Event ID/Source: 10005 / DCOM Event Description: DCOM got error "%%1084" attempting to start the service netman with arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E} Event Record #/Type34453 / Error Event Submitted/Written: 02/10/2008 10:24:10 AM Event ID/Source: 7026 / Service Control Manager Event Description: The following boot-start or system-start driver(s) failed to load: Aavmker4 AFD aswTdi AVG Anti-Spyware Driver Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss SASDIFSV SASKUTIL Tcpip Event Record #/Type34452 / Error Event Submitted/Written: 02/10/2008 10:24:10 AM Event ID/Source: 7001 / Service Control Manager Event Description: The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error: %%31 -- End of Deckard's System Scanner: finished at 2008-02-10 10:57:10 ------------ |
|
|
Feb 10 2008, 01:56 PM
Post
#6
|
|
![]() GeekU Teacher Posts: 34,385 From: Dublin OS: XP |
Hello
Please do an online scan with Kaspersky WebScanner Click on Kaspersky Online Scanner and click Accept You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
Scan Mail Bases
Also tell me how your PC is running |
|
|
Feb 10 2008, 03:22 PM
Post
#7
|
|
|
Member ![]() ![]() Posts: 38 OS: Windows XP |
My computer is working well but I'm having trouble running the Kaspersky WebScanner. I have accepted the agreement, installed the ActiveX component but the program never launches. Could my antivirus software of spyware protection be the cause of this problem?
|
|
|
Feb 10 2008, 03:25 PM
Post
#8
|
|
|
Member ![]() ![]() Posts: 38 OS: Windows XP |
Ignore the last post. The scanner is working now.
|
|
|
Feb 10 2008, 04:56 PM
Post
#9
|
|
|
Member ![]() ![]() Posts: 38 OS: Windows XP |
Hello,
Here is the report from the Kaspersky Scan. 4 viruses and 18 infected objects were found. ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT Sunday, February 10, 2008 4:51:01 PM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 10/02/2008 Kaspersky Anti-Virus database records: 556132 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: C:\ D:\ E:\ F:\ Scan Statistics: Total number of scanned objects: 68744 Number of viruses found: 4 Number of infected objects: 18 Number of suspicious objects: 0 Duration of the scan process: 01:03:01 Infected Object Name / Virus Name / Last Action C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtumondeCrack1.zip/printer.exe Infected: Trojan.Win32.Qhost.aes skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtumondeCrack1.zip ZIP: infected - 1 skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtumondeCrack2.zip/findfast.exe Infected: Trojan.Win32.Qhost.aes skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtumondeCrack2.zip ZIP: infected - 1 skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtumondeCrack3.zip/findfast.exe Infected: Trojan.Win32.Qhost.aes skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtumondeCrack3.zip ZIP: infected - 1 skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtumondeCrack4.zip/spoolvs.exe Infected: Trojan.Win32.Qhost.aes skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtumondeCrack4.zip ZIP: infected - 1 skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtumondeCrack5.zip/shell.exe Infected: Trojan.Win32.Qhost.aes skipped C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtumondeCrack5.zip ZIP: infected - 1 skipped C:\Documents and Settings\All Users\Application Data\SupportSoft\DellSupportCenter\SYSTEM\state\logs\sprtcmd.log Object is locked skipped C:\Documents and Settings\Guest\Local Settings\temp\jar_cache25183.tmp Infected: not-a-virus:FraudTool.Win32.UltimateDefender.am skipped C:\Documents and Settings\Guest\Local Settings\temp\us0105.exe Infected: not-a-virus:FraudTool.Win32.UltimateDefender.am skipped C:\Documents and Settings\Guest\Local Settings\Temporary Internet Files\Content.IE5\5HPLEA3R\in[1].htm Infected: Trojan-Downloader.JS.Psyme.wi skipped C:\Documents and Settings\Guest\Local Settings\Temporary Internet Files\Content.IE5\8S18AFZO\install[1] Infected: not-a-virus:FraudTool.Win32.UltimateDefender.am skipped C:\Documents and Settings\Kirsten\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\DSAgnt.log Object is locked skipped C:\Documents and Settings\Kirsten\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\DSAgnt_GTActions.log Object is locked skipped C:\Documents and Settings\Kirsten\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\gdql_d_DSAgnt.log Object is locked skipped C:\Documents and Settings\Kirsten\Application Data\Gtek\GTUpdate\AUpdate\DellSupport\glog.log Object is locked skipped C:\Documents and Settings\Kirsten\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SUPERANTISPYWARE.LOG Object is locked skipped C:\Documents and Settings\Kirsten\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Kirsten\Desktop\SmitfraudFix\Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\Documents and Settings\Kirsten\Desktop\SmitfraudFix.exe/data.rar/SmitfraudFix/Reboot.exe Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\Documents and Settings\Kirsten\Desktop\SmitfraudFix.exe/data.rar Infected: not-a-virus:RiskTool.Win32.Reboot.f skipped C:\Documents and Settings\Kirsten\Desktop\SmitfraudFix.exe RarSFX: infected - 2 skipped C:\Documents and Settings\Kirsten\Local Settings\Application Data\ApplicationHistory\sprtcmd.exe.63e7480d.ini.inuse Object is locked skipped C:\Documents and Settings\Kirsten\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Kirsten\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Kirsten\Local Settings\Application Data\SupportSoft\DellSupportCenter\Kirsten\state\logs\sprtcmd.log Object is locked skipped C:\Documents and Settings\Kirsten\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Kirsten\Local Settings\History\History.IE5\MSHist012008021020080211\index.dat Object is locked skipped C:\Documents and Settings\Kirsten\Local Settings\Temp\Perflib_Perfdata_654.dat Object is locked skipped C:\Documents and Settings\Kirsten\Local Settings\Temp\~DFE58A.tmp Object is locked skipped C:\Documents and Settings\Kirsten\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped C:\Documents and Settings\Kirsten\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Kirsten\ntuser.dat Object is locked skipped C:\Documents and Settings\Kirsten\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\temp\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\temp\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat Object is locked skipped C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db Object is locked skipped C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws Object is locked skipped C:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log Object is locked skipped C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log Object is locked skipped C:\Program Files\Alwil Software\Avast4\DATA\report\Resident protection.txt Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP10\change.log Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\DEFAULT Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\Internet.evt Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SYSTEM Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\TEMP\Perflib_Perfdata_5b0.dat Object is locked skipped C:\WINDOWS\TEMP\_avast4_\Webshlock.txt Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped D:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP10\change.log Object is locked skipped Scan process completed. |
|
|
Feb 10 2008, 04:58 PM
Post
#10
|
|
![]() GeekU Teacher Posts: 34,385 From: Dublin OS: XP |
Hello
Please download ATF Cleaner by Atribune. This program is for XP and Windows 2000 only
Under Main choose: Select All Click the Empty Selected button.
Click the Empty Selected button. NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click the Empty Selected button. NOTE: If you would like to keep your saved passwords, please click No at the prompt. Then reboot and tell me how your PC is running |
|
|
Feb 10 2008, 05:30 PM
Post
#11
|
|
|
Member ![]() ![]() Posts: 38 OS: Windows XP |
I ran the ATF cleaner and emptied all selected files. My computer is working great and when I restart my computer I nolonger get the C:\Windows\shell.exe message.
|
|
|
Feb 10 2008, 06:44 PM
Post
#12
|
|
![]() GeekU Teacher Posts: 34,385 From: Dublin OS: XP |
Your logs are clean ! We need to do a few things
You can delete the tools that we used Now we need to create a new System Restore point. Click Start Menu > Run > type (or copy and paste) %SystemRoot%\System32\restore\rstrui.exe Press OK. Choose Create a Restore Point then click Next. Name it and click Create, when the confirmation screen shows the restore point has been created click Close. Next goto Start Menu > Run > type cleanmgr Click OK, Disk Cleanup will open and start calculating the amount of space that can be freed, Once thats finished it will open the Disk Cleanup options screen, click the More Options tab then click Clean up on the system restore area and choose Yes at the confirmation window which will remove all the restore points except the one we just created. To close Disk Cleanup and remove the Temporary Internet Files detected in the initial scan click OK then choose Yes on the confirmation window. Below I have included a number of recommendations for how to protect your computer against malware infections. * Keep Windows updated by regularly checking their website at : http://windowsupdate.microsoft.com/ This will ensure your computer has always the latest security updates available installed on your computer. * To reduce re-infection for malware in the future, I strongly recommend installing these free programs: SpywareBlaster protects against bad ActiveX IE-SPYAD puts over 5000 sites in your restricted zone so you'll be protected when you visit innocent-looking sites that aren't actually innocent at all Have a look at this tutorial for IE-Spyad here * SpywareGuard offers realtime protection from spyware installation attempts. Make Internet Explorer more secure
* MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future. * Please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built-in pop up blocker (as an added benefit!) that I have ever seen. If you are interested, Firefox may be downloaded from Here * Take a good look at the following suggestions for malware prevention by reading Tony Klein’s article 'How Did I Get Infected In The First Place' Here Thank you for your patience, and performing all of the procedures requested. |
|
|
Feb 11 2008, 09:14 AM
Post
#13
|
|
|
Member ![]() ![]() Posts: 38 OS: Windows XP |
I created a new restore point and got rid of the old ones. I also downloaded SpywareBlaster and SpywareGuard. I would have to read more about IE Spyad to see how it works before I download it. Thank you for all of you help with geting my computer back on track. My computer is working great with no problems.
|
|
|
Feb 11 2008, 10:02 AM
Post
#14
|
|
![]() GeekU Teacher Posts: 34,385 From: Dublin OS: XP |
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.
If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic. |
|
|
![]() ![]() |
Similar Topics
| Topic Title | Replies / Views | Topic Information | |||||
|---|---|---|---|---|---|---|---|
![]() |
19 / 1,810 | 20th April 2008 - 10:50 PM loupa started - last by JSntgRvr |
|||||
![]() |
7 / 1,625 | 29th December 2008 - 06:33 PM smplynik started - last by greyknight17 |
|||||
![]() |
0 / 1,779 | 29th December 2008 - 05:45 PM Jarheadz started - last by Jarheadz |
|||||
![]() |
14 / 1,599 | 9th January 2009 - 04:47 PM Rik111 started - last by Rorschach112 |
|||||
|
Time is now: 8th November 2009 - 01:19 AM |
Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks mentioned on this page are the property of their respective owners.
© Geeks to Go, Inc. | All Rights Reserved | Privacy Policy | Advertising