Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Worm.Win32.SkyNet


  • This topic is locked This topic is locked

#16
donatbalmoral

donatbalmoral

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts

Ok, now for the second half.... Thanks for your patience.

No that is not working. I'll break this in half also.

127.0.0.1 www.mssn.it
127.0.0.1 msupdate.net
127.0.0.1 www.msupdate.net
127.0.0.1 msupdater.net
127.0.0.1 www.msupdater.net
127.0.0.1 mswn.it
127.0.0.1 www.mswn.it
127.0.0.1 msxn.it
127.0.0.1 www.msxn.it
127.0.0.1 mszn.it
127.0.0.1 www.mszn.it
127.0.0.1 mt-download.com
127.0.0.1 www.mt-download.com
127.0.0.1 MUAFK.COM
127.0.0.1 www.MUAFK.COM
127.0.0.1 multimediaobject.com
127.0.0.1 www.multimediaobject.com
127.0.0.1 multi-pops.com
127.0.0.1 www.multi-pops.com
127.0.0.1 multipussy.com
127.0.0.1 multitrader.info
127.0.0.1 www.multitrader.info
127.0.0.1 mundopolar.com
127.0.0.1 munky.com
127.0.0.1 www.munky.com
127.0.0.1 musicmatch.free-software-center.com
127.0.0.1 www.musicmatch.free-software-center.com
127.0.0.1 mustv.com
127.0.0.1 mwsn.it
127.0.0.1 www.mwsn.it
127.0.0.1 mxsn.it
127.0.0.1 www.mxsn.it
127.0.0.1 myadultexplorer.com
127.0.0.1 www.myadultexplorer.com
127.0.0.1 mybestsearch2007.com
127.0.0.1 www.mybestsearch2007.com
127.0.0.1 mycpmads.com
127.0.0.1 www.mycpmads.com
127.0.0.1 my-dedik-one.com
127.0.0.1 www.my-dedik-one.com
127.0.0.1 myeasymp3downloadsnow.com
127.0.0.1 www.myeasymp3downloadsnow.com
127.0.0.1 myexes.hk
127.0.0.1 www.myexes.hk
127.0.0.1 myexexex.com
127.0.0.1 my-finder.com
127.0.0.1 myfuncards.smileycentral.com
127.0.0.1 www.myfuncards.smileycentral.com
127.0.0.1 mygeek.com
127.0.0.1 www.mygeek.com
127.0.0.1 mylimewirenetwork.com
127.0.0.1 www.mylimewirenetwork.com
127.0.0.1 mymusicaccessories.com
127.0.0.1 www.mymusicaccessories.com
127.0.0.1 my-music-space.com
127.0.0.1 www.my-music-space.com
127.0.0.1 mypornmagpass.com
127.0.0.1 www.mypornmagpass.com
127.0.0.1 myseachexplorer.com
127.0.0.1 www.myseachexplorer.com
127.0.0.1 mysoftwareprovider.com
127.0.0.1 www.mysoftwareprovider.com
127.0.0.1 my-software-space.com
127.0.0.1 www.my-software-space.com
127.0.0.1 myspyprotector.com
127.0.0.1 www.myspyprotector.com
127.0.0.1 myspywarebot.com
127.0.0.1 www.myspywarebot.com
127.0.0.1 my-teensex.com
127.0.0.1 mytunes.lets-get-it.net
127.0.0.1 www.mytunes.lets-get-it.net
127.0.0.1 myvnc.com
127.0.0.1 mywebsearch.net
127.0.0.1 mzsn.it
127.0.0.1 www.mzsn.it
127.0.0.1 n3.net
127.0.0.1 nameservicedirect.com
127.0.0.1 www.nameservicedirect.com
127.0.0.1 nativehardcore.com
127.0.0.1 naturalspy.com
127.0.0.1 nav.mabou.org
127.0.0.1 Navinetwork.com
127.0.0.1 www.Navinetwork.com
127.0.0.1 Navi-recherche.com
127.0.0.1 www.Navi-recherche.com
127.0.0.1 nbasportsbook.net
127.0.0.1 nbbrf-hnxh.biz
127.0.0.1 www.nbbrf-hnxh.biz
127.0.0.1 nbcsearch.com
127.0.0.1 www.nbcsearch.com
127.0.0.1 ncast.cn
127.0.0.1 www.ncast.cn
127.0.0.1 ncc.sex-explorer.com
127.0.0.1 necessaryupdates.com
127.0.0.1 www.necessaryupdates.com
127.0.0.1 nellyslyrics.com
127.0.0.1 nepgyan.com
127.0.0.1 nerdwareinc.com
127.0.0.1 www.nerdwareinc.com
127.0.0.1 nesrecords.com
127.0.0.1 net.mabou.org
127.0.0.1 net.xibu315.com
127.0.0.1 netbios-wait.com
127.0.0.1 www.netbios-wait.com
127.0.0.1 netfartpost.com
127.0.0.1 net-integration.net
127.0.0.1 www.net-integration.net
127.0.0.1 net-integration.us
127.0.0.1 www.net-integration.us
127.0.0.1 net-nucleus.com
127.0.0.1 www.net-nucleus.com
127.0.0.1 netsearchsoft.com
127.0.0.1 www.netsearchsoft.com
127.0.0.1 netshastra.net
127.0.0.1 netspyprotector.com
127.0.0.1 www.netspyprotector.com
127.0.0.1 netster.com
127.0.0.1 www.netster.com
127.0.0.1 nettime.ru
127.0.0.1 nettracker.jps.ru
127.0.0.1 netyellowpages.info
127.0.0.1 netzany.com
127.0.0.1 nevest.net
127.0.0.1 new.wonder-context.com
127.0.0.1 new2sh.net
127.0.0.1 www.new2sh.net
127.0.0.1 newcategories.com
127.0.0.1 newcracks.com
127.0.0.1 newcracks.net
127.0.0.1 newiframe.biz
127.0.0.1 new-incest.com
127.0.0.1 newlife-lajolla.com
127.0.0.1 newmediaidea.com
127.0.0.1 www.newmediaidea.com
127.0.0.1 new-search.net
127.0.0.1 newsexgate.com
127.0.0.1 newtonknows.com
127.0.0.1 newtonsracks.com
127.0.0.1 newtoolbar.biz
127.0.0.1 www.newtoolbar.biz
127.0.0.1 newtopsites.com
127.0.0.1 www.newtopsites.com
127.0.0.1 newupdates.lzio.com
127.0.0.1 newvidscodec.net
127.0.0.1 www.newvidscodec.net
127.0.0.1 newxpics.com
127.0.0.1 n-glx.s-redirect.com
127.0.0.1 nhlsportsbook.net
127.0.0.1 niagaracapital.com
127.0.0.1 nibo.it
127.0.0.1 www.nibo.it
127.0.0.1 nicemoviejokes.com
127.0.0.1 www.nicemoviejokes.com
127.0.0.1 nice-movie-jokes.com
127.0.0.1 niche-tv.com
127.0.0.1 nige.it
127.0.0.1 www.nige.it
127.0.0.1 ninoa.com
127.0.0.1 nipd.it
127.0.0.1 www.nipd.it
127.0.0.1 nipg.it
127.0.0.1 www.nipg.it
127.0.0.1 nl.errorsafe.com
127.0.0.1 nmextensions.com
127.0.0.1 www.nmextensions.com
127.0.0.1 nmrba.com
127.0.0.1 nmsn.it
127.0.0.1 www.nmsn.it
127.0.0.1 noblindlinks.com
127.0.0.1 www.noblindlinks.com
127.0.0.1 nocalories.net
127.0.0.1 nocensor.com
127.0.0.1 nonameforthisdomain.com
127.0.0.1 www.nonameforthisdomain.com
127.0.0.1 noogle.it
127.0.0.1 www.noogle.it
127.0.0.1 noproblemsurf.com
127.0.0.1 northernsoulclub.com
127.0.0.1 www.northernsoulclub.com
127.0.0.1 nospywaresoft.com
127.0.0.1 www.nospywaresoft.com
127.0.0.1 notify.ifeelyou.info
127.0.0.1 nowhere.180solutions.com
127.0.0.1 nownames.org
127.0.0.1 www.nownames.org
127.0.0.1 nowsearchonline.org
127.0.0.1 www.nowsearchonline.org
127.0.0.1 nsbabes.com
127.0.0.1 ntcor.com
127.0.0.1 www.ntcor.com
127.0.0.1 nuclearwitness.org
127.0.0.1 n-udd.com
127.0.0.1 numb-soft.com
127.0.0.1 www.numb-soft.com
127.0.0.1 nunah.info
127.0.0.1 www.nunah.info
127.0.0.1 nursemania.com
127.0.0.1 nvntour.com
127.0.0.1 nvphall.org
127.0.0.1 nylonporn.com
127.0.0.1 www.nylonporn.com
127.0.0.1 nylonpornmag.com
127.0.0.1 www.nylonpornmag.com
127.0.0.1 nylonsexy.com
127.0.0.1 oaginebianche.it
127.0.0.1 www.oaginebianche.it
127.0.0.1 oborot.com
127.0.0.1 ocalalivestockmarket.com
127.0.0.1 ocsff.com
127.0.0.1 oddsjackpot.info
127.0.0.1 www.oddsjackpot.info
127.0.0.1 oeatlanta.com
127.0.0.1 offers.bullseye-network.com
127.0.0.1 www.offers.bullseye-network.com
127.0.0.1 offers.ukiee.com
127.0.0.1 official-avg-download-now.com
127.0.0.1 www.official-avg-download-now.com
127.0.0.1 official--software.com
127.0.0.1 www.official--software.com
127.0.0.1 ofuxico.uol.com.br
127.0.0.1 ogogle.it
127.0.0.1 www.ogogle.it
127.0.0.1 oharrowsearch.com
127.0.0.1 oibero.it
127.0.0.1 www.oibero.it
127.0.0.1 okataweb.it
127.0.0.1 www.okataweb.it
127.0.0.1 okmmm.com
127.0.0.1 www.okmmm.com
127.0.0.1 ok-search.com
127.0.0.1 okulta.com
127.0.0.1 oldflock.com
127.0.0.1 www.oldflock.com
127.0.0.1 olibero.it
127.0.0.1 www.olibero.it
127.0.0.1 omegabrains.net
127.0.0.1 omega-search.com
127.0.0.1 oneclicksearches.com
127.0.0.1 onemoresearch.net
127.0.0.1 onerateld.com
127.0.0.1 www.onerateld.com
127.0.0.1 onli-ne.com
127.0.0.1 www.onli-ne.com
127.0.0.1 online-casino-1.net
127.0.0.1 online-casino-bonus.info
127.0.0.1 online-casinos-x.com
127.0.0.1 onlineclick.net
127.0.0.1 online-fernsehen.tv
127.0.0.1 www.online-fernsehen.tv
127.0.0.1 online-more.com
127.0.0.1 www.online-more.com
127.0.0.1 onlineplayer.tv
127.0.0.1 www.onlineplayer.tv
127.0.0.1 onlinesafepro.com
127.0.0.1 www.onlinesafepro.com
127.0.0.1 onlinesecuritynet.com
127.0.0.1 www.onlinesecuritynet.com
127.0.0.1 onlinesecurityworld.com
127.0.0.1 www.onlinesecurityworld.com
127.0.0.1 onlineserverz.com
127.0.0.1 onlinetradings.net
127.0.0.1 onlinevideoset.com
127.0.0.1 www.onlinevideoset.com
127.0.0.1 online-winning.net
127.0.0.1 only[bleep].com
127.0.0.1 onlyinsured.com
127.0.0.1 onlysex.ws
127.0.0.1 only-virgins.com
127.0.0.1 onporn.info
127.0.0.1 www.onporn.info
127.0.0.1 oogle.it
127.0.0.1 www.oogle.it
127.0.0.1 opaginebianche.it
127.0.0.1 www.opaginebianche.it
127.0.0.1 operanabuco.com
127.0.0.1 opsex.com
127.0.0.1 Orantiespion.com
127.0.0.1 www.Orantiespion.com
127.0.0.1 orbitexplorer.com
127.0.0.1 oregoncharters.org
127.0.0.1 oridian.com
127.0.0.1 www.oridian.com
127.0.0.1 ormandcompany.com
127.0.0.1 orriere.it
127.0.0.1 www.orriere.it
127.0.0.1 ossoalice.it
127.0.0.1 www.ossoalice.it
127.0.0.1 otcmomo.com
127.0.0.1 other-baccarat.info
127.0.0.1 www.other-baccarat.info
127.0.0.1 otherchance.com
127.0.0.1 www.otherchance.com
127.0.0.1 othergold.info
127.0.0.1 www.othergold.info
127.0.0.1 otrlives.com
127.0.0.1 out.true-counter.com
127.0.0.1 outerinfo.com
127.0.0.1 www.outerinfo.com
127.0.0.1 outlook-express-utilities.com
127.0.0.1 www.outlook-express-utilities.com
127.0.0.1 overpro.com
127.0.0.1 owntibia.com
127.0.0.1 www.owntibia.com
127.0.0.1 oxfordclockrepairs.co.uk
127.0.0.1 www.oxfordclockrepairs.co.uk
127.0.0.1 ozawamadoka.com
127.0.0.1 ozonung.biz
127.0.0.1 www.ozonung.biz
127.0.0.1 p0rt2.com
127.0.0.1 p2p-heute.de
127.0.0.1 www.p2p-heute.de
127.0.0.1 p2psoft.biz
127.0.0.1 www.p2psoft.biz
127.0.0.1 paaginebianche.it
127.0.0.1 www.paaginebianche.it
127.0.0.1 pafginebianche.it
127.0.0.1 www.pafginebianche.it
127.0.0.1 pafinebianche.it
127.0.0.1 www.pafinebianche.it
127.0.0.1 pafinegialle.it
127.0.0.1 www.pafinegialle.it
127.0.0.1 pagfinebianche.it
127.0.0.1 www.pagfinebianche.it
127.0.0.1 paghinebianche.it
127.0.0.1 www.paghinebianche.it
127.0.0.1 pagibegialle.it
127.0.0.1 www.pagibegialle.it
127.0.0.1 pagiegialle.it
127.0.0.1 www.pagiegialle.it
127.0.0.1 pagiinebianche.it
127.0.0.1 www.pagiinebianche.it
127.0.0.1 pagimebianche.it
127.0.0.1 www.pagimebianche.it
127.0.0.1 pagimegialle.it
127.0.0.1 www.pagimegialle.it
127.0.0.1 pagimnebianche.it
127.0.0.1 www.pagimnebianche.it
127.0.0.1 paginbianche.it
127.0.0.1 www.paginbianche.it
127.0.0.1 paginebbianche.it
127.0.0.1 www.paginebbianche.it
127.0.0.1 paginebiaanche.it
127.0.0.1 www.paginebiaanche.it
127.0.0.1 paginebiamche.it
127.0.0.1 www.paginebiamche.it
127.0.0.1 paginebiamnche.it
127.0.0.1 www.paginebiamnche.it
127.0.0.1 paginebiancche.it
127.0.0.1 www.paginebiancche.it
127.0.0.1 paginebiancge.it
127.0.0.1 www.paginebiancge.it
127.0.0.1 paginebiancghe.it
127.0.0.1 www.paginebiancghe.it
127.0.0.1 paginebianchee.it
127.0.0.1 www.paginebianchee.it
127.0.0.1 paginebiancher.it
127.0.0.1 www.paginebiancher.it
127.0.0.1 paginebianchew.it
127.0.0.1 www.paginebianchew.it
127.0.0.1 paginebianchge.it
127.0.0.1 www.paginebianchge.it
127.0.0.1 paginebianchhe.it
127.0.0.1 www.paginebianchhe.it
127.0.0.1 paginebianchr.it
127.0.0.1 www.paginebianchr.it
127.0.0.1 paginebianchre.it
127.0.0.1 www.paginebianchre.it
127.0.0.1 paginebianchwe.it
127.0.0.1 www.paginebianchwe.it
127.0.0.1 paginebiancjhe.it
127.0.0.1 www.paginebiancjhe.it
127.0.0.1 paginebiancvhe.it
127.0.0.1 www.paginebiancvhe.it
127.0.0.1 paginebiancxhe.it
127.0.0.1 www.paginebiancxhe.it
127.0.0.1 paginebianmche.it
127.0.0.1 www.paginebianmche.it
127.0.0.1 paginebiannche.it
127.0.0.1 www.paginebiannche.it
127.0.0.1 paginebianvche.it
127.0.0.1 www.paginebianvche.it
127.0.0.1 paginebianvhe.it
127.0.0.1 www.paginebianvhe.it
127.0.0.1 paginebianxche.it
127.0.0.1 www.paginebianxche.it
127.0.0.1 paginebiasnche.it
127.0.0.1 paginebiianche.it
127.0.0.1 www.paginebiianche.it
127.0.0.1 paginebioanche.it
127.0.0.1 www.paginebioanche.it
127.0.0.1 paginebisanche.it
127.0.0.1 www.paginebisanche.it
127.0.0.1 paginebiuanche.it
127.0.0.1 www.paginebiuanche.it
127.0.0.1 paginebnianche.it
127.0.0.1 www.paginebnianche.it
127.0.0.1 pagineboianche.it
127.0.0.1 www.pagineboianche.it
127.0.0.1 paginebuanche.it
127.0.0.1 www.paginebuanche.it
127.0.0.1 paginebuianche.it
127.0.0.1 www.paginebuianche.it
127.0.0.1 pagineebianche.it
127.0.0.1 www.pagineebianche.it
127.0.0.1 paginefialle.it
127.0.0.1 www.paginefialle.it
127.0.0.1 paginegalle.it
127.0.0.1 www.paginegalle.it
127.0.0.1 paginegiaklle.it
127.0.0.1 www.paginegiaklle.it
127.0.0.1 paginegialkle.it
127.0.0.1 www.paginegialkle.it
127.0.0.1 paginegiallee.it
127.0.0.1 www.paginegiallee.it
127.0.0.1 paginegialler.it
127.0.0.1 www.paginegialler.it
127.0.0.1 paginegiallew.it
127.0.0.1 www.paginegiallew.it
127.0.0.1 paginegiallw.it
127.0.0.1 www.paginegiallw.it
127.0.0.1 paginegille.it
127.0.0.1 www.paginegille.it
127.0.0.1 paginegoalle.it
127.0.0.1 www.paginegoalle.it
127.0.0.1 paginegualle.it
127.0.0.1 www.paginegualle.it
127.0.0.1 pagineialle.it
127.0.0.1 www.pagineialle.it
127.0.0.1 pagineianche.it
127.0.0.1 www.pagineianche.it
127.0.0.1 paginenianche.it
127.0.0.1 www.paginenianche.it
127.0.0.1 paginerbianche.it
127.0.0.1 www.paginerbianche.it
127.0.0.1 paginevbianche.it
127.0.0.1 www.paginevbianche.it
127.0.0.1 paginevianche.it
127.0.0.1 www.paginevianche.it
127.0.0.1 paginewbianche.it
127.0.0.1 www.paginewbianche.it
127.0.0.1 paginnebianche.it
127.0.0.1 www.paginnebianche.it
127.0.0.1 paginrbianche.it
127.0.0.1 www.paginrbianche.it
127.0.0.1 paginrebianche.it
127.0.0.1 www.paginrebianche.it
127.0.0.1 paginrgialle.it
127.0.0.1 www.paginrgialle.it
127.0.0.1 paginwebianche.it
127.0.0.1 www.paginwebianche.it
127.0.0.1 pagionebianche.it
127.0.0.1 www.pagionebianche.it
127.0.0.1 pagiunebianche.it
127.0.0.1 www.pagiunebianche.it
127.0.0.1 pagnebianche.it
127.0.0.1 www.pagnebianche.it
127.0.0.1 pagnegialle.it
127.0.0.1 www.pagnegialle.it
127.0.0.1 pagoinebianche.it
127.0.0.1 www.pagoinebianche.it
127.0.0.1 pagonebianche.it
127.0.0.1 www.pagonebianche.it
127.0.0.1 pagonegialle.it
127.0.0.1 www.pagonegialle.it
127.0.0.1 paguinebianche.it
127.0.0.1 www.paguinebianche.it
127.0.0.1 pagunegialle.it
127.0.0.1 www.pagunegialle.it
127.0.0.1 pahginebianche.it
127.0.0.1 www.pahginebianche.it
127.0.0.1 paigesummer.com
127.0.0.1 painegialle.it
127.0.0.1 www.painegialle.it
127.0.0.1 pamelacollections.com
127.0.0.1 panamcup.com
127.0.0.1 pandaantivirus-2007.com
127.0.0.1 www.pandaantivirus-2007.com
127.0.0.1 pandadownload-now.com
127.0.0.1 www.pandadownload-now.com
127.0.0.1 panda-hq.com
127.0.0.1 www.panda-hq.com
127.0.0.1 panet.org
127.0.0.1 www.panet.org
127.0.0.1 pantygirls4u.com
127.0.0.1 pantyhoserealm.com
127.0.0.1 pantyplace.com
127.0.0.1 pardize-search.net
127.0.0.1 www.pardize-search.net
127.0.0.1 partner23.firehunt.com
127.0.0.1 party-ticket.com
127.0.0.1 www.party-ticket.com
127.0.0.1 pasginebianche.it
127.0.0.1 www.pasginebianche.it
127.0.0.1 passthison.com
127.0.0.1 passtosites.net
127.0.0.1 www.passtosites.net
127.0.0.1 pastubes.com
127.0.0.1 paulapage.com
127.0.0.1 paulhoover.com
127.0.0.1 payfortraffic.net
127.0.0.1 paypopup.com
127.0.0.1 www.paypopup.com
127.0.0.1 pcadprotector.cc
127.0.0.1 www.pcadprotector.cc
127.0.0.1 pcflashsoft.com
127.0.0.1 www.pcflashsoft.com
127.0.0.1 pcgewinnen.de
127.0.0.1 www.pcgewinnen.de
127.0.0.1 pcodec.com
127.0.0.1 www.pcodec.com
127.0.0.1 Pc-on-internet.com
127.0.0.1 www.Pc-on-internet.com
127.0.0.1 pcspyremover.com
127.0.0.1 pdesoftware.com
127.0.0.1 www.pdesoftware.com
127.0.0.1 pedo.ws
127.0.0.1 people.1gb.ru
127.0.0.1 perfectcodec.com
127.0.0.1 www.perfectcodec.com
127.0.0.1 perfectedsecurity.com
127.0.0.1 www.perfectedsecurity.com
127.0.0.1 perlink.biz
127.0.0.1 www.perlink.biz
127.0.0.1 pervertbot.com
127.0.0.1 pestcapture.com
127.0.0.1 www.pestcapture.com
127.0.0.1 pestrap.com
127.0.0.1 www.pestrap.com
127.0.0.1 pesttrap.com
127.0.0.1 www.pesttrap.com
127.0.0.1 pginegialle.it
127.0.0.1 www.pginegialle.it
127.0.0.1 pharmacy2003.com
127.0.0.1 pharma-diet-pills.com
127.0.0.1 pharmalocator.com
127.0.0.1 phendimetrazine-tenuate-adipex.com
127.0.0.1 photoshop.downloadzcentral.com
127.0.0.1 www.photoshop.downloadzcentral.com
127.0.0.1 photoshop.softwarecenterz.com
127.0.0.1 www.photoshop.softwarecenterz.com
127.0.0.1 photoshop-stop.com
127.0.0.1 www.photoshop-stop.com
127.0.0.1 pibero.it
127.0.0.1 www.pibero.it
127.0.0.1 picsdir.com
127.0.0.1 picsforbucks.com
127.0.0.1 picsofseductiveladies.com
127.0.0.1 pics-videos.com
127.0.0.1 picture-posters.com
127.0.0.1 picturesspot.com
127.0.0.1 www.picturesspot.com
127.0.0.1 pills-birth-control.com
127.0.0.1 pillsmall.com
127.0.0.1 pilotcodec.com
127.0.0.1 www.pilotcodec.com
127.0.0.1 pilotronix.com
127.0.0.1 pimasoft.com
127.0.0.1 www.pimasoft.com
127.0.0.1 pinaccesscode.com
127.0.0.1 www.pinaccesscode.com
127.0.0.1 ping.180solutions.com
127.0.0.1 pixpox.com
127.0.0.1 pizdato.biz
127.0.0.1 planemusic.com
127.0.0.1 play3w.com
127.0.0.1 www.play3w.com
127.0.0.1 playbrowse.com
127.0.0.1 www.playbrowse.com
127.0.0.1 playcodecs.com
127.0.0.1 www.playcodecs.com
127.0.0.1 player-codec.com
127.0.0.1 www.player-codec.com
127.0.0.1 playercodec.net
127.0.0.1 www.playercodec.net
127.0.0.1 player-codec.net
127.0.0.1 www.player-codec.net
127.0.0.1 playerscodec.com
127.0.0.1 www.playerscodec.com
127.0.0.1 play-lolita.com
127.0.0.1 playon.play3w.com
127.0.0.1 play-ticket.com
127.0.0.1 www.play-ticket.com
127.0.0.1 plibero.it
127.0.0.1 www.plibero.it
127.0.0.1 plus-play.com
127.0.0.1 www.plus-play.com
127.0.0.1 poaginebianche.it
127.0.0.1 www.poaginebianche.it
127.0.0.1 pochta.ru
127.0.0.1 www.pochta.ru
127.0.0.1 poiska.net
127.0.0.1 poker-casino-free.com
127.0.0.1 poker-games-free.net
127.0.0.1 polradiologia.com
127.0.0.1 pooi.net
127.0.0.1 popcodec.com
127.0.0.1 www.popcodec.com
127.0.0.1 popcorn.net
127.0.0.1 www.popcorn.net
127.0.0.1 popentertain.com
127.0.0.1 www.popentertain.com
127.0.0.1 pops.mmohsix.com
127.0.0.1 popunder.adtrgt.com
127.0.0.1 www.popunder.adtrgt.com
127.0.0.1 porn4porn.net
127.0.0.1 porncamz.com
127.0.0.1 pornfree.info
127.0.0.1 pornissex.com
127.0.0.1 www.pornissex.com
127.0.0.1 pornmagpass.com
127.0.0.1 www.pornmagpass.com
127.0.0.1 pornnightdreams.com
127.0.0.1 pornohome.net
127.0.0.1 www.pornohome.net
127.0.0.1 pornokopec.com
127.0.0.1 porn-party.net
127.0.0.1 www.porn-party.net
127.0.0.1 pornpic.org
127.0.0.1 porn-screen.com
127.0.0.1 pornstarspornmag.com
127.0.0.1 www.pornstarspornmag.com
127.0.0.1 porn-teacher.com
127.0.0.1 porntetris.com
127.0.0.1 porntwist.com
127.0.0.1 pornxxxfilm.com
127.0.0.1 www.pornxxxfilm.com
127.0.0.1 portal-ticket.com
127.0.0.1 www.portal-ticket.com
127.0.0.1 power-cleaner.com
127.0.0.1 powercodec.com
127.0.0.1 www.powercodec.com
127.0.0.1 powerdvd2007.info
127.0.0.1 www.powerdvd2007.info
127.0.0.1 powerdvd-7.com
127.0.0.1 www.powerdvd-7.com
127.0.0.1 powerwebsearch.com
127.0.0.1 ppaginebianche.it
127.0.0.1 www.ppaginebianche.it
127.0.0.1 prblitz.com
127.0.0.1 premiumtvchannels.com
127.0.0.1 www.premiumtvchannels.com
127.0.0.1 pretypics.com
127.0.0.1 pribalt.com
127.0.0.1 prime.webhancer.com
127.0.0.1 www.prime.webhancer.com
127.0.0.1 prisonbreakseason.tv
127.0.0.1 www.prisonbreakseason.tv
127.0.0.1 privacy-support.biz
127.0.0.1 privateaxsoftware.com
127.0.0.1 www.privateaxsoftware.com
127.0.0.1 private-dialer.biz
127.0.0.1 private-iframe.biz
127.0.0.1 privateporn.net
127.0.0.1 prolivation.com
127.0.0.1 promo.dollarrevenue.com
127.0.0.1 www.promo.dollarrevenue.com
127.0.0.1 prosearching.com
127.0.0.1 www.prosearching.com
127.0.0.1 prostactive.com
127.0.0.1 prostol.com
127.0.0.1 protectionssoft.com
127.0.0.1 www.protectionssoft.com
127.0.0.1 protectionwarn.com
127.0.0.1 www.protectionwarn.com
127.0.0.1 protectmypc.net
127.0.0.1 www.protectmypc.net
127.0.0.1 protect-yourself.biz
127.0.0.1 prsainlandempire.org
127.0.0.1 psaginebianche.it
127.0.0.1 www.psaginebianche.it
127.0.0.1 psginebianche.it
127.0.0.1 www.psginebianche.it
127.0.0.1 psginegialle.it
127.0.0.1 www.psginegialle.it
127.0.0.1 psn.cn
127.0.0.1 psyche-evolution.com
127.0.0.1 public.zangocash.com
127.0.0.1 www.public.zangocash.com
127.0.0.1 pussyharem.com
127.0.0.1 www.pussyharem.com
127.0.0.1 put-your-link-here.com
127.0.0.1 p-uud.com
127.0.0.1 pyrocorp.com
127.0.0.1 q36.cn
127.0.0.1 www.q36.cn
127.0.0.1 qalitalia.it
127.0.0.1 www.qalitalia.it
127.0.0.1 qippi.com
127.0.0.1 www.qippi.com
127.0.0.1 qiudheadsd.com
127.0.0.1 www.qiudheadsd.com
127.0.0.1 qmex.psyche-evolution.com
127.0.0.1 www.qmex.psyche-evolution.com
127.0.0.1 qnavigate.com
127.0.0.1 www.qnavigate.com
127.0.0.1 qualitycodec.com
127.0.0.1 www.qualitycodec.com
127.0.0.1 quick.searchfromyourbrowser.net
127.0.0.1 quickiefilez.com
127.0.0.1 www.quickiefilez.com
127.0.0.1 quicklaunch.com
127.0.0.1 quick-search.ws
127.0.0.1 quicksearch360.com
127.0.0.1 www.quicksearch360.com
127.0.0.1 quicktime.downloadzcenter.com
127.0.0.1 www.quicktime.downloadzcenter.com
127.0.0.1 quicktime-download-now.com
127.0.0.1 www.quicktime-download-now.com
127.0.0.1 quiksearchgenealogy.com
127.0.0.1 qwecompany.com
127.0.0.1 www.qwecompany.com
127.0.0.1 r.babenet.com
127.0.0.1 r16254.coolservecorp.net
127.0.0.1 rack.cc
127.0.0.1 radfrall.org
127.0.0.1 ramgo.com
127.0.0.1 ranafrog.ne
127.0.0.1 rapegate.com
127.0.0.1 rapid-pass.net
127.0.0.1 www.rapid-pass.net
127.0.0.1 rawtocash.net
127.0.0.1 www.rawtocash.net
127.0.0.1 razespyware.net
127.0.0.1 www.razespyware.net
127.0.0.1 rb37.com
127.0.0.1 rbay.it
127.0.0.1 www.rbay.it
127.0.0.1 rbnnetwork.com
127.0.0.1 www.rbnnetwork.com
127.0.0.1 rc.rizalof.com
127.0.0.1 rdepubblica.it
127.0.0.1 www.rdepubblica.it
127.0.0.1 readagreement.net
127.0.0.1 www.readagreement.net
127.0.0.1 realarea.biz
127.0.0.1 realfet.com
127.0.0.1 realm.superbahamas.com
127.0.0.1 www.realm.superbahamas.com
127.0.0.1 realphx.com
127.0.0.1 realplayer-download-now.com
127.0.0.1 www.realplayer-download-now.com
127.0.0.1 realplayer-hq.com
127.0.0.1 www.realplayer-hq.com
127.0.0.1 rebay.it
127.0.0.1 www.rebay.it
127.0.0.1 redbudbmx.com
127.0.0.1 redfunny.com
127.0.0.1 redir.ws
127.0.0.1 www.redir.ws
127.0.0.1 redirect.msupdate.net
127.0.0.1 redpubblica.it
127.0.0.1 www.redpubblica.it
127.0.0.1 reepubblica.it
127.0.0.1 www.reepubblica.it
127.0.0.1 refinance-help.com
127.0.0.1 refpubblica.it
127.0.0.1 www.refpubblica.it
127.0.0.1 regfreeze.com
127.0.0.1 registrycleanersite.com
127.0.0.1 www.registrycleanersite.com
127.0.0.1 releaseforlife.com
127.0.0.1 www.releaseforlife.com
127.0.0.1 relevantknowledge.com
127.0.0.1 www.relevantknowledge.com
127.0.0.1 relpubblica.it
127.0.0.1 www.relpubblica.it
127.0.0.1 remedyantispy.com
127.0.0.1 www.remedyantispy.com
127.0.0.1 removeearthkeepers.org
127.0.0.1 remsys.org
127.0.0.1 reopubblica.it
127.0.0.1 www.reopubblica.it
127.0.0.1 reossoalice.it
127.0.0.1 www.reossoalice.it
127.0.0.1 reoubblica.it
127.0.0.1 www.reoubblica.it
127.0.0.1 repbblica.it
127.0.0.1 www.repbblica.it
127.0.0.1 rephubblica.it
127.0.0.1 www.rephubblica.it
127.0.0.1 repibblica.it
127.0.0.1 www.repibblica.it
127.0.0.1 repiubblica.it
127.0.0.1 www.repiubblica.it
127.0.0.1 replubblica.it
127.0.0.1 www.replubblica.it
127.0.0.1 report.dropspam.com
127.0.0.1 repoubblica.it
127.0.0.1 www.repoubblica.it
127.0.0.1 repubbglica.it
127.0.0.1 www.repubbglica.it
127.0.0.1 repubbhlica.it
127.0.0.1 www.repubbhlica.it
127.0.0.1 repubbkica.it
127.0.0.1 www.repubbkica.it
127.0.0.1 repubbklica.it
127.0.0.1 www.repubbklica.it
127.0.0.1 repubblicaa.it
127.0.0.1 www.repubblicaa.it
127.0.0.1 repubblicaq.it
127.0.0.1 www.repubblicaq.it
127.0.0.1 repubblicas.it
127.0.0.1 www.repubblicas.it
127.0.0.1 repubblicca.it
127.0.0.1 www.repubblicca.it
127.0.0.1 repubblicda.it
127.0.0.1 www.repubblicda.it
127.0.0.1 repubblicfa.it
127.0.0.1 www.repubblicfa.it
127.0.0.1 repubblics.it
127.0.0.1 www.repubblics.it
127.0.0.1 repubblicsa.it
127.0.0.1 www.repubblicsa.it
127.0.0.1 repubblicva.it
127.0.0.1 www.repubblicva.it
127.0.0.1 repubblicza.it
127.0.0.1 www.repubblicza.it
127.0.0.1 repubblidca.it
127.0.0.1 www.repubblidca.it
127.0.0.1 repubblifca.it
127.0.0.1 www.repubblifca.it
127.0.0.1 repubbliica.it
127.0.0.1 www.repubbliica.it
127.0.0.1 repubblilca.it
127.0.0.1 www.repubblilca.it
127.0.0.1 repubblioca.it
127.0.0.1 www.repubblioca.it
127.0.0.1 repubbliuca.it
127.0.0.1 www.repubbliuca.it
127.0.0.1 repubbliva.it
127.0.0.1 www.repubbliva.it
127.0.0.1 repubblivca.it
127.0.0.1 www.repubblivca.it
127.0.0.1 repubblixa.it
127.0.0.1 www.repubblixa.it
127.0.0.1 repubblixca.it
127.0.0.1 www.repubblixca.it
127.0.0.1 repubbllica.it
127.0.0.1 www.repubbllica.it
127.0.0.1 repubbloca.it
127.0.0.1 www.repubbloca.it
127.0.0.1 repubbloica.it
127.0.0.1 www.repubbloica.it
127.0.0.1 repubblpica.it
127.0.0.1 www.repubblpica.it
127.0.0.1 repubbluica.it
127.0.0.1 www.repubbluica.it
127.0.0.1 repubbnlica.it
127.0.0.1 www.repubbnlica.it
127.0.0.1 repubbolica.it
127.0.0.1 www.repubbolica.it
127.0.0.1 repubbplica.it
127.0.0.1 www.repubbplica.it
127.0.0.1 repubbvlica.it
127.0.0.1 www.repubbvlica.it
127.0.0.1 repubnblica.it
127.0.0.1 www.repubnblica.it
127.0.0.1 repubnlica.it
127.0.0.1 www.repubnlica.it
127.0.0.1 repubvblica.it
127.0.0.1 www.repubvblica.it
127.0.0.1 repubvlica.it
127.0.0.1 www.repubvlica.it
127.0.0.1 repugbblica.it
127.0.0.1 www.repugbblica.it
127.0.0.1 repuhbblica.it
127.0.0.1 www.repuhbblica.it
127.0.0.1 repuibblica.it
127.0.0.1 www.repuibblica.it
127.0.0.1 repunbblica.it
127.0.0.1 www.repunbblica.it
127.0.0.1 repunblica.it
127.0.0.1 www.repunblica.it
127.0.0.1 repuubblica.it
127.0.0.1 www.repuubblica.it
127.0.0.1 repuvbblica.it
127.0.0.1 www.repuvbblica.it
127.0.0.1 repuvblica.it
127.0.0.1 www.repuvblica.it
127.0.0.1 repybblica.it
127.0.0.1 www.repybblica.it
127.0.0.1 repyubblica.it
127.0.0.1 www.repyubblica.it
127.0.0.1 rerpubblica.it
127.0.0.1 www.rerpubblica.it
127.0.0.1 Rescatedeamenazas.com
127.0.0.1 www.Rescatedeamenazas.com
127.0.0.1 reserved-company.info
127.0.0.1 www.reserved-company.info
127.0.0.1 resultplacement.com
127.0.0.1 www.resultplacement.com
127.0.0.1 reubblica.it
127.0.0.1 www.reubblica.it
127.0.0.1 review-play.com
127.0.0.1 www.review-play.com
127.0.0.1 reviewsit.net
127.0.0.1 www.reviewsit.net
127.0.0.1 revolto3.da.ru
127.0.0.1 revolt-search.com
127.0.0.1 www.revolt-search.com
127.0.0.1 rewpubblica.it
127.0.0.1 www.rewpubblica.it
127.0.0.1 rf104.com
127.0.0.1 rfepubblica.it
127.0.0.1 www.rfepubblica.it
127.0.0.1 rfthud.com
127.0.0.1 www.rfthud.com
127.0.0.1 rgepubblica.it
127.0.0.1 www.rgepubblica.it
127.0.0.1 rich777.greatbahamas.com
127.0.0.1 www.rich777.greatbahamas.com
127.0.0.1 ridewash.com
127.0.0.1 www.ridewash.com
127.0.0.1 rightfinder.net
127.0.0.1 riscali.it
127.0.0.1 www.riscali.it
127.0.0.1 ritztours.com
127.0.0.1 www.ritztours.com
127.0.0.1 rizalof.com
127.0.0.1 www.rizalof.com
127.0.0.1 rms.vapochille.com
127.0.0.1 rng650.greatbahamas.com
127.0.0.1 www.rng650.greatbahamas.com
127.0.0.1 roar.com
127.0.0.1 roassoalice.it
127.0.0.1 www.roassoalice.it
127.0.0.1 robbsproshop.com
127.0.0.1 robertferencz.com
127.0.0.1 rocketsearch.com
127.0.0.1 roissoalice.it
127.0.0.1 www.roissoalice.it
127.0.0.1 roogle.it
127.0.0.1 www.roogle.it
127.0.0.1 roossoalice.it
127.0.0.1 www.roossoalice.it
127.0.0.1 ropssoalice.it
127.0.0.1 www.ropssoalice.it
127.0.0.1 rosaoalice.it
127.0.0.1 www.rosaoalice.it
127.0.0.1 rosasoalice.it
127.0.0.1 www.rosasoalice.it
127.0.0.1 rossaoalice.it
127.0.0.1 www.rossaoalice.it
127.0.0.1 rossdoalice.it
127.0.0.1 www.rossdoalice.it
127.0.0.1 rossoaalice.it
127.0.0.1 www.rossoaalice.it
127.0.0.1 rossoaice.it
127.0.0.1 www.rossoaice.it
127.0.0.1 rossoalce.it
127.0.0.1 www.rossoalce.it
127.0.0.1 rossoalic.it
127.0.0.1 www.rossoalic.it
127.0.0.1 rossoalicce.it
127.0.0.1 www.rossoalicce.it
127.0.0.1 rossoalicee.it
127.0.0.1 www.rossoalicee.it
127.0.0.1 rossoalicer.it
127.0.0.1 www.rossoalicer.it
127.0.0.1 rossoalicew.it
127.0.0.1 www.rossoalicew.it
127.0.0.1 rossoalicr.it
127.0.0.1 www.rossoalicr.it
127.0.0.1 rossoalicre.it
127.0.0.1 www.rossoalicre.it
127.0.0.1 rossoalicve.it
127.0.0.1 www.rossoalicve.it
127.0.0.1 rossoalicw.it
127.0.0.1 www.rossoalicw.it
127.0.0.1 rossoalicwe.it
127.0.0.1 www.rossoalicwe.it
127.0.0.1 rossoalicxe.it
127.0.0.1 www.rossoalicxe.it
127.0.0.1 rossoalie.it
127.0.0.1 www.rossoalie.it
127.0.0.1 rossoaliice.it
127.0.0.1 www.rossoaliice.it
127.0.0.1 rossoalioce.it
127.0.0.1 www.rossoalioce.it
127.0.0.1 rossoalivce.it
127.0.0.1 www.rossoalivce.it
127.0.0.1 rossoalive.it
127.0.0.1 www.rossoalive.it
127.0.0.1 rossoalixce.it
127.0.0.1 www.rossoalixce.it
127.0.0.1 rossoalixe.it
127.0.0.1 www.rossoalixe.it
127.0.0.1 rossoalkice.it
127.0.0.1 www.rossoalkice.it
127.0.0.1 rossoallice.it
127.0.0.1 www.rossoallice.it
127.0.0.1 rossoaloce.it
127.0.0.1 www.rossoaloce.it
127.0.0.1 rossoaloice.it
127.0.0.1 www.rossoaloice.it
127.0.0.1 rossoaluce.it
127.0.0.1 www.rossoaluce.it
127.0.0.1 rossoaslice.it
127.0.0.1 www.rossoaslice.it
127.0.0.1 rossolice.it
127.0.0.1 www.rossolice.it
127.0.0.1 rossooalice.it
127.0.0.1 www.rossooalice.it
127.0.0.1 rossopalice.it
127.0.0.1 www.rossopalice.it
127.0.0.1 rossosalice.it
127.0.0.1 www.rossosalice.it
127.0.0.1 rosspalice.it
127.0.0.1 www.rosspalice.it
127.0.0.1 rosspoalice.it
127.0.0.1 www.rosspoalice.it
127.0.0.1 rosssoalice.it
127.0.0.1 www.rosssoalice.it
127.0.0.1 rotocasters.com
127.0.0.1 royalsearch.net
127.0.0.1 rrenitalia.it
127.0.0.1 www.rrenitalia.it
127.0.0.1 rrepubblica.it
127.0.0.1 www.rrepubblica.it
127.0.0.1 rrossoalice.it
127.0.0.1 www.rrossoalice.it
127.0.0.1 rrpubblica.it
127.0.0.1 www.rrpubblica.it
127.0.0.1 rsepubblica.it
127.0.0.1 www.rsepubblica.it
127.0.0.1 rssoalice.it
127.0.0.1 www.rssoalice.it
127.0.0.1 rsztriv-avxiz.biz
127.0.0.1 www.rsztriv-avxiz.biz
127.0.0.1 rtepubblica.it
127.0.0.1 www.rtepubblica.it
127.0.0.1 rtiscali.it
127.0.0.1 www.rtiscali.it
127.0.0.1 rtossoalice.it
127.0.0.1 www.rtossoalice.it
127.0.0.1 rtrenitalia.it
127.0.0.1 www.rtrenitalia.it
127.0.0.1 rtuttogratis.it
127.0.0.1 www.rtuttogratis.it
127.0.0.1 rub.to
127.0.0.1 runsearch.com
127.0.0.1 russiansponsor.com
127.0.0.1 russogay.com
127.0.0.1 ruworld.com
127.0.0.1 rwepubblica.it
127.0.0.1 www.rwepubblica.it
127.0.0.1 rzvonporn.com
127.0.0.1 www.rzvonporn.com
127.0.0.1 s1.bestmanage.org
127.0.0.1 s1.truth-is-out-there.org
127.0.0.1 s1s1s1search.com
127.0.0.1 www.s1s1s1search.com
127.0.0.1 s2.bestmanage.org
127.0.0.1 s2.exocrew.com
127.0.0.1 s2.truth-is-out-there.org
127.0.0.1 s3.bestmanage.org
127.0.0.1 s3.truth-is-out-there.org
127.0.0.1 s4.bestmanage.org
127.0.0.1 s4.truth-is-out-there.org
127.0.0.1 s5.bestmanage.org
127.0.0.1 s5.truth-is-out-there.org
127.0.0.1 s59.cnzz.com
127.0.0.1 s6.bestmanage.org
127.0.0.1 s6.truth-is-out-there.org
127.0.0.1 s7.bestmanage.org
127.0.0.1 s7.truth-is-out-there.org
127.0.0.1 s8.bestmanage.org
127.0.0.1 s8.truth-is-out-there.org
127.0.0.1 s9.bestmanage.org
127.0.0.1 s9.truth-is-out-there.org
127.0.0.1 sacitylife.com
127.0.0.1 safeiepage.com
127.0.0.1 www.safeiepage.com
127.0.0.1 safe-sales.biz
127.0.0.1 www.safe-sales.biz
127.0.0.1 safetydefender.com
127.0.0.1 www.safetydefender.com
127.0.0.1 safetyhall.com
127.0.0.1 www.safetyhall.com
127.0.0.1 safetyhomepage.com
127.0.0.1 www.safetyhomepage.com
127.0.0.1 safetypropage.com
127.0.0.1 www.safetypropage.com
127.0.0.1 safetyuptodate.com
127.0.0.1 www.safetyuptodate.com
127.0.0.1 salitalia.it
127.0.0.1 www.salitalia.it
127.0.0.1 samplegals.com
127.0.0.1 samz.com
127.0.0.1 sandracounter.com
127.0.0.1 www.sandracounter.com
127.0.0.1 saoe.com
127.0.0.1 saupereva.it
127.0.0.1 www.saupereva.it
127.0.0.1 savehits.com
127.0.0.1 www.savehits.com
127.0.0.1 saveli.com
127.0.0.1 www.saveli.com
127.0.0.1 sbee.com
127.0.0.1 sbjr.com
127.0.0.1 sbnl.com
127.0.0.1 sbnt.com
127.0.0.1 sbssurvivor.com
127.0.0.1 sbvr.com
127.0.0.1 scanandrepair.com
127.0.0.1 www.scanandrepair.com
127.0.0.1 scarypix.com
127.0.0.1 scbm.com
127.0.0.1 sccdnet.com
127.0.0.1 schoolforest.com
127.0.0.1 sckr.com
127.0.0.1 scoobidoo.com
127.0.0.1 screensaver.it
127.0.0.1 www.screensaver.it
127.0.0.1 scripts.downloadv3.com
127.0.0.1 scrk.com
127.0.0.1 sd.ncast.cn
127.0.0.1 www.sd.ncast.cn
127.0.0.1 sdbot.n3.net
127.0.0.1 sdl.surfsidekick.com
127.0.0.1 sdry.com
127.0.0.1 sdupereva.it
127.0.0.1 www.sdupereva.it
127.0.0.1 se.errorsafe.com
127.0.0.1 search.findthewebsiteyouneed.com
127.0.0.1 www.search.findthewebsiteyouneed.com
127.0.0.1 search.getfound.com
127.0.0.1 www.search.getfound.com
127.0.0.1 search.ieplugin.com
127.0.0.1 search.imiserver.com
127.0.0.1 search.keyword.exeupdate.com
127.0.0.1 search.netzany.com
127.0.0.1 search.psn.cn
127.0.0.1 search.rub.to
127.0.0.1 search.shopnav.com
127.0.0.1 search.xrenoder.com
127.0.0.1 search-1.net
127.0.0.1 search101online.com
127.0.0.1 www.search101online.com
127.0.0.1 search123forme.com
127.0.0.1 www.search123forme.com
127.0.0.1 search200.com
127.0.0.1 www.search200.com
127.0.0.1 search-2003.com
127.0.0.1 search2find.biz
127.0.0.1 www.search2find.biz
127.0.0.1 search345quest.com
127.0.0.1 www.search345quest.com
127.0.0.1 search-777.com
127.0.0.1 search-about.net
127.0.0.1 searchaccurate.com
127.0.0.1 searchadultweb.com
127.0.0.1 searchalot.com
127.0.0.1 searchandbrowse.com
127.0.0.1 searchandclick.com
127.0.0.1 searchbee.net
127.0.0.1 www.searchbee.net
127.0.0.1 searchbutler.com
127.0.0.1 searchbutler.org
127.0.0.1 searchbuttler.com
127.0.0.1 searchby.net
127.0.0.1 searchcentrix.com
127.0.0.1 searchclick.cc
127.0.0.1 searchclickads.net
127.0.0.1 www.searchclickads.net
127.0.0.1 searchcolours.com
127.0.0.1 www.searchcolours.com
127.0.0.1 searchcomplete.com
127.0.0.1 Search-Daily.com
127.0.0.1 www.Search-Daily.com
127.0.0.1 searchdesire.com
127.0.0.1 searchdot.com
127.0.0.1 searchdot.net
127.0.0.1 searchdrive.info
127.0.0.1 searche.info
127.0.0.1 www.searche.info
127.0.0.1 search-empire.info
127.0.0.1 www.search-empire.info
127.0.0.1 searchenhancement.com
127.0.0.1 searcher.tgpie.com
127.0.0.1 www.searcher.tgpie.com
127.0.0.1 search-exe.com
127.0.0.1 searchexpander.com
127.0.0.1 search-explorer.net
127.0.0.1 searchfastnet.com
127.0.0.1 searchfeed.com
127.0.0.1 www.searchfeed.com
127.0.0.1 searchfindsearch.com
127.0.0.1 www.searchfindsearch.com
127.0.0.1 searchforge.com
127.0.0.1 searchfromyourbrowser.net
127.0.0.1 www.searchfromyourbrowser.net
127.0.0.1 searchgateway.net
127.0.0.1 search-hawk.com
127.0.0.1 searchingbooth.com
127.0.0.1 www.searchingbooth.com
127.0.0.1 searching-the-net.com
127.0.0.1 searchinmates.org
127.0.0.1 www.searchinmates.org
127.0.0.1 search-log.com
127.0.0.1 searchmadesafe.net
127.0.0.1 search-meta.com
127.0.0.1 searchmeta.md
127.0.0.1 searchmeta.net
127.0.0.1 www.searchmeta.net
127.0.0.1 searchmeta.ru
127.0.0.1 searchmeta.webhost.ru
127.0.0.1 searchmeup.com
127.0.0.1 www.searchmeup.com
127.0.0.1 searchmiracle.com
127.0.0.1 www.searchmiracle.com
127.0.0.1 search-motor.com
127.0.0.1 searchnow.ws
127.0.0.1 searchonfly.com
127.0.0.1 searchresult.net
127.0.0.1 www.searchresult.net
127.0.0.1 search-safe.com
127.0.0.1 searchsquire.com
127.0.0.1 searchtab.net
127.0.0.1 www.searchtab.net
127.0.0.1 searchtabs.net
127.0.0.1 searchtheworld4you.com
127.0.0.1 www.searchtheworld4you.com
127.0.0.1 search-to-find.com
127.0.0.1 SEARCHTOFIND.NET
127.0.0.1 www.SEARCHTOFIND.NET
127.0.0.1 searchv.com
127.0.0.1 searchweb2.com
127.0.0.1 www.searchweb2.com
127.0.0.1 searchwebzone.com
127.0.0.1 www.searchwebzone.com
127.0.0.1 search-what.net
127.0.0.1 searchwhatuwant.com
127.0.0.1 searchxl.com
127.0.0.1 searchxp.com
127.0.0.1 sebay.it
127.0.0.1 www.sebay.it
127.0.0.1 sebot.com
127.0.0.1 secdep.info
127.0.0.1 secondpower.com
127.0.0.1 secret-crush.com
127.0.0.1 secure.drivecleaner.com
127.0.0.1 secure.errorsafe.com
127.0.0.1 secure.ucleaner.com
127.0.0.1 secure.winantispam.com
127.0.0.1 secure.winantispy.com
127.0.0.1 secure.winantivirus.com
127.0.0.1 securenp.org
127.0.0.1 secureserver3.com
127.0.0.1 www.secureserver3.com
127.0.0.1 securetoolbar.com
127.0.0.1 www.securetoolbar.com
127.0.0.1 securetoolbars.com
127.0.0.1 www.securetoolbars.com
127.0.0.1 secureyournet.biz
127.0.0.1 www.secureyournet.biz
127.0.0.1 securitybulletin.net
127.0.0.1 www.securitybulletin.net
127.0.0.1 securitycaution.com
127.0.0.1 www.securitycaution.com
127.0.0.1 securityfeature.com
127.0.0.1 www.securityfeature.com
127.0.0.1 securityindex.net
127.0.0.1 www.securityindex.net
127.0.0.1 securityplugins.com
127.0.0.1 www.securityplugins.com
127.0.0.1 securityprecaution.net
127.0.0.1 www.securityprecaution.net
127.0.0.1 securityupdatesite.com
127.0.0.1 www.securityupdatesite.com
127.0.0.1 securityuptodate.net
127.0.0.1 www.securityuptodate.net
127.0.0.1 security-warning.biz
127.0.0.1 securitywarnings.net
127.0.0.1 www.securitywarnings.net
127.0.0.1 seehardcore.com
127.0.0.1 seekporn.org
127.0.0.1 www.seekporn.org
127.0.0.1 seekseek.com
127.0.0.1 seektheglobe.com
127.0.0.1 www.seektheglobe.com
127.0.0.1 seekwell.net
127.0.0.1 sef516.greatbahamas.com
127.0.0.1 www.sef516.greatbahamas.com
127.0.0.1 seld.com
127.0.0.1 selfbookmark.com
127.0.0.1 selfbookmark.info
127.0.0.1 selfbookmark.net
127.0.0.1 selltraffic.biz
127.0.0.1 sense-super.com
127.0.0.1 www.sense-super.com
127.0.0.1 seobiz.us
127.0.0.1 www.seobiz.us
127.0.0.1 seorganisation.com
127.0.0.1 www.seorganisation.com
127.0.0.1 seproger.com
127.0.0.1 www.seproger.com
127.0.0.1 Serialplayers.com
127.0.0.1 www.Serialplayers.com
127.0.0.1 servedby.headlinesandnews.com
127.0.0.1 server-au.imrworldwide.com
127.0.0.1 serverc.org
127.0.0.1 www.serverc.org
127.0.0.1 service.multi-pops.com
127.0.0.1 settings.controlmeh.com
127.0.0.1 settings.gfxgraphics.net
127.0.0.1 settings.iconnectyou.biz
127.0.0.1 settings.imergeyou.com
127.0.0.1 settings.updatemysettings.com
127.0.0.1 setup.bestmanage.org
127.0.0.1 setup.truth-is-out-there.org
127.0.0.1 sex.free4porno.net
127.0.0.1 sex2person.info
127.0.0.1 www.sex2person.info
127.0.0.1 sexarena.com
127.0.0.1 sexarena.org
127.0.0.1 www.sexarena.org
127.0.0.1 sex-coach.com
127.0.0.1 sex-explorer.com
127.0.0.1 sex-festival.com
127.0.0.1 sexfiles.nu
127.0.0.1 sexgalleries4all.com
127.0.0.1 sexmaniack.com
127.0.0.1 sexmoviesnet.com
127.0.0.1 sexocean.play-lolita.com
127.0.0.1 sexolymp.com
127.0.0.1 www.sexolymp.com
127.0.0.1 sexpatriot.net
127.0.0.1 sexpicsporn.com
127.0.0.1 www.sexpicsporn.com
127.0.0.1 sexpornonline.com
127.0.0.1 sexunique.net
127.0.0.1 sex-video-galleries.com
127.0.0.1 sexvideopro.com
127.0.0.1 Sexxpassport.com
127.0.0.1 www.Sexxpassport.com
127.0.0.1 sexxxpassport.com
127.0.0.1 www.sexxxpassport.com
127.0.0.1 sexy18.cc
127.0.0.1 sexycat.adult-host.org
127.0.0.1 sfbayfolkboats.com
127.0.0.1 sfonditalia.biz
127.0.0.1 sfux.com
127.0.0.1 sgirls.net
127.0.0.1 www.sgrunt.biz
127.0.0.1 sgrunt.biz
127.0.0.1 sh.ncast.cn
127.0.0.1 www.sh.ncast.cn
127.0.0.1 sharedgamesite.com
127.0.0.1 www.sharedgamesite.com
127.0.0.1 sharedmoviesite.com
127.0.0.1 www.sharedmoviesite.com
127.0.0.1 sharedtvsite.com
127.0.0.1 www.sharedtvsite.com
127.0.0.1 sharempeg.com
127.0.0.1 sheat.com
127.0.0.1 shemalepornmag.com
127.0.0.1 www.shemalepornmag.com
127.0.0.1 shemalespornmag.com
127.0.0.1 www.shemalespornmag.com
127.0.0.1 shopcards.net
127.0.0.1 shopknights.com
127.0.0.1 shopnav.com
127.0.0.1 sic02.com
127.0.0.1 sidefind.com
127.0.0.1 sigmadown.biz
127.0.0.1 www.sigmadown.biz
127.0.0.1 signupprocess.com
127.0.0.1 www.signupprocess.com
127.0.0.1 silvercodec.com
127.0.0.1 www.silvercodec.com
127.0.0.1 simpaticissimo.com
127.0.0.1 www.simpaticissimo.com
127.0.0.1 sinpussy.com
127.0.0.1 sintrader.com
127.0.0.1 sipereva.it
127.0.0.1 www.sipereva.it
127.0.0.1 sipo.com
127.0.0.1 sirh0t.blackhats.tc
127.0.0.1 sisdotnet.com
127.0.0.1 www.sisdotnet.com
127.0.0.1 site.accessorygeeks.com
127.0.0.1 www.site.accessorygeeks.com
127.0.0.1 site1.ru
127.0.0.1 siteentrance.net
127.0.0.1 www.siteentrance.net
127.0.0.1 site-entrance.net
127.0.0.1 www.site-entrance.net
127.0.0.1 siteentrances.com
127.0.0.1 www.siteentrances.com
127.0.0.1 sitekeygenerator.com
127.0.0.1 www.sitekeygenerator.com
127.0.0.1 sitesearchcentral.com
127.0.0.1 www.sitesearchcentral.com
127.0.0.1 sitesentrance.com
127.0.0.1 www.sitesentrance.com
127.0.0.1 sites-entrance.com
127.0.0.1 www.sites-entrance.com
127.0.0.1 sites-entrance.net
127.0.0.1 www.sites-entrance.net
127.0.0.1 sites-in-web.com
127.0.0.1 sitesticket.net
127.0.0.1 www.sitesticket.net
127.0.0.1 sitestickets.net
127.0.0.1 www.sitestickets.net
127.0.0.1 siteticket.net
127.0.0.1 www.siteticket.net
127.0.0.1 site-ticket.net
127.0.0.1 www.site-ticket.net
127.0.0.1 sitevictoria.com
127.0.0.1 siupereva.it
127.0.0.1 www.siupereva.it
127.0.0.1 sixroads.com
127.0.0.1 skakalka.ru
127.0.0.1 skeech.com
127.0.0.1 www.skeech.com
127.0.0.1 skoobidoo.com
127.0.0.1 skype-download-now.com
127.0.0.1 www.skype-download-now.com
127.0.0.1 skype-free-calls.com
127.0.0.1 www.skype-free-calls.com
127.0.0.1 skype-hq.com
127.0.0.1 www.skype-hq.com
127.0.0.1 skype-stop.com
127.0.0.1 www.skype-stop.com
127.0.0.1 slawsearch.com
127.0.0.1 slotch.com
127.0.0.1 slotchbar.com
127.0.0.1 slutmania.biz
127.0.0.1 smartprotect.info
127.0.0.1 www.smartprotect.info
127.0.0.1 smart-security.biz
127.0.0.1 smartsumo.com
127.0.0.1 smds.com
127.0.0.1 smetsys.net
127.0.0.1 www.smetsys.net
127.0.0.1 smileycentral.com
127.0.0.1 smtp.ru
127.0.0.1 www.smtp.ru
127.0.0.1 smutarchive.net
127.0.0.1 smutserver.com
127.0.0.1 snipernet.biz
127.0.0.1 www.snipernet.biz
127.0.0.1 softcodec.com
127.0.0.1 www.softcodec.com
127.0.0.1 softomate.com
127.0.0.1 www.softomate.com
127.0.0.1 softwarecenterz.com
127.0.0.1 software-club.com
127.0.0.1 www.software-club.com
127.0.0.1 softwareprofit.com
127.0.0.1 www.softwareprofit.com
127.0.0.1 softwarereferral.com
127.0.0.1 www.softwarereferral.com
127.0.0.1 solongas.com
127.0.0.1 Some-Standards.com
127.0.0.1 www.Some-Standards.com
127.0.0.1 sonomaevents.com
127.0.0.1 souljah.com
127.0.0.1 www.souljah.com
127.0.0.1 sp2[bleep]ed.biz
127.0.0.1 specialoems.com
127.0.0.1 www.specialoems.com
127.0.0.1 spereva.it
127.0.0.1 www.spereva.it
127.0.0.1 spermatrix.com
127.0.0.1 spidersearch.com
127.0.0.1 sploso.com
127.0.0.1 www.sploso.com
127.0.0.1 sponsor2.ucmore.com
127.0.0.1 www.sponsor2.ucmore.com
127.0.0.1 sportbooks-free4you.com
127.0.0.1 spros.com
127.0.0.1 spyanalyst.com
127.0.0.1 www.spyanalyst.com
127.0.0.1 spyass.com
127.0.0.1 spyaxe.biz
127.0.0.1 www.spyaxe.biz
127.0.0.1 spyaxe.com
127.0.0.1 www.spyaxe.com
127.0.0.1 spyaxe.net
127.0.0.1 www.spyaxe.net
127.0.0.1 spyaxesupport.com
127.0.0.1 www.spyaxesupport.com
127.0.0.1 spyaxeupdate.com
127.0.0.1 www.spyaxeupdate.com
127.0.0.1 spyboot.com
127.0.0.1 www.spyboot.com
127.0.0.1 spy-bot.com
127.0.0.1 www.spy-bot.com
127.0.0.1 spybot.reviewsit.net
127.0.0.1 www.spybot.reviewsit.net
127.0.0.1 spybot2007.com
127.0.0.1 www.spybot2007.com
127.0.0.1 spybot-2007.com
127.0.0.1 www.spybot-2007.com
127.0.0.1 spybotdownload-now.com
127.0.0.1 www.spybotdownload-now.com
127.0.0.1 spybot-ib.com
127.0.0.1 www.spybot-ib.com
127.0.0.1 spybot-now.com
127.0.0.1 www.spybot-now.com
127.0.0.1 spybotremover.net
127.0.0.1 spybot-scan.com
127.0.0.1 www.spybot-scan.com
127.0.0.1 spybot-sd.net
127.0.0.1 www.spybot-sd.net
127.0.0.1 spybot-uk.com
127.0.0.1 www.spybot-uk.com
127.0.0.1 spycontra.com
127.0.0.1 www.spycontra.com
127.0.0.1 spycrush.com
127.0.0.1 www.spycrush.com
127.0.0.1 SpyCut.com
127.0.0.1 www.SpyCut.com
127.0.0.1 spydawn.com
127.0.0.1 www.spydawn.com
127.0.0.1 spydeface.com
127.0.0.1 www.spydeface.com
127.0.0.1 spydefence.com
127.0.0.1 www.spydefence.com
127.0.0.1 spydefenderpro.com
127.0.0.1 www.spydefenderpro.com
127.0.0.1 spyfalcon.com
127.0.0.1 www.spyfalcon.com
127.0.0.1 spyfalconupdate.com
127.0.0.1 www.spyfalconupdate.com
127.0.0.1 spyheal.com
127.0.0.1 www.spyheal.com
127.0.0.1 spyiblock.com
127.0.0.1 www.spyiblock.com
127.0.0.1 spylocked.com
127.0.0.1 www.spylocked.com
127.0.0.1 spylog.com
127.0.0.1 www.spylog.com
127.0.0.1 spyofficer.com
127.0.0.1 www.spyofficer.com
127.0.0.1 spyonthis.net
127.0.0.1 www.spyonthis.net
127.0.0.1 spyorgy.net
127.0.0.1 spyot.info
127.0.0.1 www.spyot.info
127.0.0.1 spy-shield.com
127.0.0.1 www.spy-shield.com
127.0.0.1 SpyShield.org
127.0.0.1 www.SpyShield.org
127.0.0.1 spy-shredder.com
127.0.0.1 spy-sniper.com
127.0.0.1 www.spy-sniper.com
127.0.0.1 spysoldier.com
127.0.0.1 www.spysoldier.com
127.0.0.1 spytrooper.com
127.0.0.1 www.spytrooper.com
127.0.0.1 spyware-best.com
127.0.0.1 www.spyware-best.com
127.0.0.1 spywarebot.com
127.0.0.1 www.spywarebot.com
127.0.0.1 spywarebott.com
127.0.0.1 www.spywarebott.com
127.0.0.1 spywarebot-t.com
127.0.0.1 www.spywarebot-t.com
127.0.0.1 spyware-browser.com
127.0.0.1 www.spyware-browser.com
127.0.0.1 spywaredisinfector.com
127.0.0.1 www.spywaredisinfector.com
127.0.0.1 spywareknight.com
127.0.0.1 www.spywareknight.com
127.0.0.1 spywarelabs.com
127.0.0.1 www.spywarelabs.com
127.0.0.1 spywareno.com
127.0.0.1 www.spywareno.com
127.0.0.1 spywarequake.com
127.0.0.1 www.spywarequake.com
127.0.0.1 spywarequake.info
127.0.0.1 www.spywarequake.info
127.0.0.1 spywareremoversite.com
127.0.0.1 www.spywareremoversite.com
127.0.0.1 SpywareScraper.com
127.0.0.1 www.SpywareScraper.com
127.0.0.1 spyware-secure.com
127.0.0.1 www.spyware-secure.com
127.0.0.1 spywaresheriff.com
127.0.0.1 www.spywaresheriff.com
127.0.0.1 spyware-stop.com
127.0.0.1 www.spyware-stop.com
127.0.0.1 spywarestrike.com
127.0.0.1 www.spywarestrike.com
127.0.0.1 spywarewizard.net
127.0.0.1 www.spywarewizard.net
127.0.0.1 spywarezapper.com
127.0.0.1 www.spywarezapper.com
127.0.0.1 sqwire.com
127.0.0.1 s-redirect.com
127.0.0.1 srfgate.com
127.0.0.1 www.srfgate.com
127.0.0.1 srib.com
127.0.0.1 srng.net
127.0.0.1 srox.com
127.0.0.1 srsf.com
127.0.0.1 srv.warez.com
127.0.0.1 ss.panet.org
127.0.0.1 ssaw.com
127.0.0.1 ssby.com
127.0.0.1 staceyowens.com
127.0.0.1 stacistaxx.com
127.0.0.1 stacystaxx.com
127.0.0.1 standardinternet.com
127.0.0.1 www.standardinternet.com
127.0.0.1 starcleaningservice.com.au
127.0.0.1 www.starcleaningservice.com.au
127.0.0.1 starsdoor.com
127.0.0.1 www.starsdoor.com
127.0.0.1 start-downloading.com
127.0.0.1 www.start-downloading.com
127.0.0.1 startium.com
127.0.0.1 start-seite.com
127.0.0.1 www.start-seite.com
127.0.0.1 start-space.com
127.0.0.1 startsurfing.com


  • 0

Advertisements


#17
donatbalmoral

donatbalmoral

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
[quote]Hopefully the last instalment...

127.0.0.1 static.zangocash.com
127.0.0.1 www.static.zangocash.com
127.0.0.1 stats.cashdeluxe.net
127.0.0.1 www.stats.cashdeluxe.net
127.0.0.1 statwebreports.us
127.0.0.1 www.statwebreports.us
127.0.0.1 steamycock.com
127.0.0.1 stejax.pl
127.0.0.1 www.stejax.pl
127.0.0.1 sterva.com
127.0.0.1 stevecashdollar.com
127.0.0.1 stop-tracking.biz
127.0.0.1 stopvotefraud.com
127.0.0.1 stopxxxpics.com
127.0.0.1 storage-tasp.com
127.0.0.1 strcodec.com
127.0.0.1 www.strcodec.com
127.0.0.1 streamxs.ws
127.0.0.1 www.streamxs.ws
127.0.0.1 strekoza.com
127.0.0.1 studioaperto.net
127.0.0.1 stuffstore.com
127.0.0.1 stuff-your-ipod.com
127.0.0.1 www.stuff-your-ipod.com
127.0.0.1 stvg.info
127.0.0.1 www.stvg.info
127.0.0.1 styleclickink.com
127.0.0.1 Sudoplanet.com
127.0.0.1 www.Sudoplanet.com
127.0.0.1 suereva.it
127.0.0.1 www.suereva.it
127.0.0.1 suipereva.it
127.0.0.1 www.suipereva.it
127.0.0.1 summercollins.com
127.0.0.1 summitcross.com
127.0.0.1 suoereva.it
127.0.0.1 www.suoereva.it
127.0.0.1 suopereva.it
127.0.0.1 www.suopereva.it
127.0.0.1 supeereva.it
127.0.0.1 www.supeereva.it
127.0.0.1 supeeva.it
127.0.0.1 www.supeeva.it
127.0.0.1 superadultfriend.com
127.0.0.1 www.superadultfriend.com
127.0.0.1 superbahamas.com
127.0.0.1 superbgirlz.com
127.0.0.1 www.superbgirlz.com
127.0.0.1 supercodec.com
127.0.0.1 www.supercodec.com
127.0.0.1 superea.it
127.0.0.1 www.superea.it
127.0.0.1 supereba.it
127.0.0.1 www.supereba.it
127.0.0.1 superebva.it
127.0.0.1 www.superebva.it
127.0.0.1 superecva.it
127.0.0.1 www.superecva.it
127.0.0.1 supereeva.it
127.0.0.1 www.supereeva.it
127.0.0.1 supererva.it
127.0.0.1 www.supererva.it
127.0.0.1 superev.it
127.0.0.1 www.superev.it
127.0.0.1 superevaq.it
127.0.0.1 www.superevaq.it
127.0.0.1 superevaw.it
127.0.0.1 www.superevaw.it
127.0.0.1 superevaz.it
127.0.0.1 www.superevaz.it
127.0.0.1 superevba.it
127.0.0.1 www.superevba.it
127.0.0.1 superevca.it
127.0.0.1 www.superevca.it
127.0.0.1 superevsa.it
127.0.0.1 www.superevsa.it
127.0.0.1 superevva.it
127.0.0.1 www.superevva.it
127.0.0.1 superevw.it
127.0.0.1 www.superevw.it
127.0.0.1 superevz.it
127.0.0.1 www.superevz.it
127.0.0.1 superewva.it
127.0.0.1 www.superewva.it
127.0.0.1 www.supernet.speedserv.com
127.0.0.1 superporncity.com
127.0.0.1 www.superporncity.com
127.0.0.1 superreva.it
127.0.0.1 www.superreva.it
127.0.0.1 super-servers.net
127.0.0.1 www.super-servers.net
127.0.0.1 supersexmachine.com
127.0.0.1 supersexpass.com
127.0.0.1 www.supersexpass.com
127.0.0.1 super-spider.com
127.0.0.1 superteva.it
127.0.0.1 www.superteva.it
127.0.0.1 superwebsearch.com
127.0.0.1 super-websearch.com
127.0.0.1 superweva.it
127.0.0.1 www.superweva.it
127.0.0.1 superwp.by.ru
127.0.0.1 superwva.it
127.0.0.1 www.superwva.it
127.0.0.1 supeteva.it
127.0.0.1 www.supeteva.it
127.0.0.1 supetreva.it
127.0.0.1 www.supetreva.it
127.0.0.1 supewreva.it
127.0.0.1 www.supewreva.it
127.0.0.1 supoereva.it
127.0.0.1 www.supoereva.it
127.0.0.1 suppereva.it
127.0.0.1 www.suppereva.it
127.0.0.1 support.365soft.info
127.0.0.1 www.support.365soft.info
127.0.0.1 support.winantivirus.com
127.0.0.1 suprereva.it
127.0.0.1 www.suprereva.it
127.0.0.1 supret.com
127.0.0.1 supreva.it
127.0.0.1 www.supreva.it
127.0.0.1 supwereva.it
127.0.0.1 www.supwereva.it
127.0.0.1 supwreva.it
127.0.0.1 www.supwreva.it
127.0.0.1 sureadult.com
127.0.0.1 www.sureadult.com
127.0.0.1 sureseeker.com
127.0.0.1 www.sureseeker.com
127.0.0.1 surfaccuracy.com
127.0.0.1 www.surfaccuracy.com
127.0.0.1 surferbar.com
127.0.0.1 surfsidekick.com
127.0.0.1 www.surfsidekick.com
127.0.0.1 surj.com
127.0.0.1 suupereva.it
127.0.0.1 www.suupereva.it
127.0.0.1 suypereva.it
127.0.0.1 www.suypereva.it
127.0.0.1 suzannebrecht.com
127.0.0.1 sverner.info
127.0.0.1 www.sverner.info
127.0.0.1 svideocodec.com
127.0.0.1 www.svideocodec.com
127.0.0.1 sweeteenz.com
127.0.0.1 swz2006.to.8866.org
127.0.0.1 www.swz2006.to.8866.org
127.0.0.1 sxload.com
127.0.0.1 www.sxload.com
127.0.0.1 sypereva.it
127.0.0.1 www.sypereva.it
127.0.0.1 syserrors.com
127.0.0.1 www.syserrors.com
127.0.0.1 sysnetsecurity.com
127.0.0.1 www.sysnetsecurity.com
127.0.0.1 sysnetsecurity.net
127.0.0.1 www.sysnetsecurity.net
127.0.0.1 sysprotect.com
127.0.0.1 www.sysprotect.com
127.0.0.1 syssecuritypage.com
127.0.0.1 www.syssecuritypage.com
127.0.0.1 syssecuritysite.net
127.0.0.1 www.syssecuritysite.net
127.0.0.1 systemdoctor.com
127.0.0.1 www.systemdoctor.com
127.0.0.1 systemstable.com
127.0.0.1 www.systemstable.com
127.0.0.1 systemupdates.net
127.0.0.1 www.systemupdates.net
127.0.0.1 syupereva.it
127.0.0.1 www.syupereva.it
127.0.0.1 t.rack.cc
127.0.0.1 t058.com
127.0.0.1 t8iscali.it
127.0.0.1 www.t8iscali.it
127.0.0.1 t9iscali.it
127.0.0.1 www.t9iscali.it
127.0.0.1 tacil.org
127.0.0.1 tamotua.com
127.0.0.1 www.tamotua.com
127.0.0.1 tangounion.com
127.0.0.1 targetsaver.com
127.0.0.1 www.targetsaver.com
127.0.0.1 tastethemusic.com
127.0.0.1 tax-refund4you.com
127.0.0.1 TBCODE.COM
127.0.0.1 www.TBCODE.COM
127.0.0.1 tbvg.com
127.0.0.1 tdak.com
127.0.0.1 tdko.com
127.0.0.1 tdmy.com
127.0.0.1 tech-jobs.ws
127.0.0.1 technology-related.com
127.0.0.1 teen-biz.com
127.0.0.1 teenhost.net
127.0.0.1 teenmonster.com
127.0.0.1 www.teenmonster.com
127.0.0.1 teen-pic-post.com
127.0.0.1 teenpornosex.com
127.0.0.1 teens4free.net
127.0.0.1 teensact.com
127.0.0.1 teensgate.com
127.0.0.1 teensguru.com
127.0.0.1 teenspornmag.com
127.0.0.1 www.teenspornmag.com
127.0.0.1 teenswamp.com
127.0.0.1 tefs.com
127.0.0.1 telecharger-avast.com
127.0.0.1 www.telecharger-avast.com
127.0.0.1 tepubblica.it
127.0.0.1 www.tepubblica.it
127.0.0.1 terafinder.com
127.0.0.1 Teslaplus.com
127.0.0.1 www.Teslaplus.com
127.0.0.1 spam-birth-control.com
127.0.0.1 tfil.com
127.0.0.1 tfiscali.it
127.0.0.1 www.tfiscali.it
127.0.0.1 tgazzetta.it
127.0.0.1 www.tgazzetta.it
127.0.0.1 tgiscali.it
127.0.0.1 www.tgiscali.it
127.0.0.1 tgoogle.it
127.0.0.1 www.tgoogle.it
127.0.0.1 tgp-4-you.com
127.0.0.1 tgpie.com
127.0.0.1 www.tgpie.com
127.0.0.1 the.007guard.com
127.0.0.1 www.the.007guard.com
127.0.0.1 the818search-co.com
127.0.0.1 www.the818search-co.com
127.0.0.1 theadulteye.com
127.0.0.1 www.theadulteye.com
127.0.0.1 theaimonline.com
127.0.0.1 www.theaimonline.com
127.0.0.1 the-codec.com
127.0.0.1 www.the-codec.com
127.0.0.1 the-exit.com
127.0.0.1 thefakejournal.com
127.0.0.1 theguardservices.com
127.0.0.1 www.theguardservices.com
127.0.0.1 the-huns-yellow-pages.com
127.0.0.1 thehuy.net
127.0.0.1 thelimewiredownload.com
127.0.0.1 www.thelimewiredownload.com
127.0.0.1 thenewsearch.com
127.0.0.1 theproxy.org
127.0.0.1 thereall.realfet.com
127.0.0.1 www.thereall.realfet.com
127.0.0.1 therealsearch.com
127.0.0.1 thesafebar.com
127.0.0.1 www.thesafebar.com
127.0.0.1 thesafetytool.com
127.0.0.1 www.thesafetytool.com
127.0.0.1 thespyguard.com
127.0.0.1 www.thespyguard.com
127.0.0.1 thesten.com
127.0.0.1 thesuperxxx.com
127.0.0.1 www.thesuperxxx.com
127.0.0.1 the-ticket.net
127.0.0.1 www.the-ticket.net
127.0.0.1 think-adz.com
127.0.0.1 www.think-adz.com
127.0.0.1 think-adz2.com
127.0.0.1 www.think-adz2.com
127.0.0.1 thinstall.abetterinternet.com
127.0.0.1 thiscali.it
127.0.0.1 www.thiscali.it
127.0.0.1 thko.com
127.0.0.1 thornleygroup.com
127.0.0.1 ti8scali.it
127.0.0.1 www.ti8scali.it
127.0.0.1 ti9scali.it
127.0.0.1 www.ti9scali.it
127.0.0.1 tiacali.it
127.0.0.1 www.tiacali.it
127.0.0.1 tiascali.it
127.0.0.1 www.tiascali.it
127.0.0.1 ticali.it
127.0.0.1 www.ticali.it
127.0.0.1 tidcali.it
127.0.0.1 www.tidcali.it
127.0.0.1 tidscali.it
127.0.0.1 www.tidscali.it
127.0.0.1 tiiscali.it
127.0.0.1 www.tiiscali.it
127.0.0.1 tijscali.it
127.0.0.1 www.tijscali.it
127.0.0.1 tikscali.it
127.0.0.1 www.tikscali.it
127.0.0.1 tilscali.it
127.0.0.1 www.tilscali.it
127.0.0.1 tings.org
127.0.0.1 www.tinybar.com
127.0.0.1 tinybar.com
127.0.0.1 tioscali.it
127.0.0.1 www.tioscali.it
127.0.0.1 tisacali.it
127.0.0.1 www.tisacali.it
127.0.0.1 tisacli.it
127.0.0.1 www.tisacli.it
127.0.0.1 tiscaali.it
127.0.0.1 www.tiscaali.it
127.0.0.1 tiscail.it
127.0.0.1 www.tiscail.it
127.0.0.1 tiscaki.it
127.0.0.1 www.tiscaki.it
127.0.0.1 tiscakli.it
127.0.0.1 www.tiscakli.it
127.0.0.1 tiscal8.it
127.0.0.1 www.tiscal8.it
127.0.0.1 tiscal9.it
127.0.0.1 www.tiscal9.it
127.0.0.1 tiscalii.it
127.0.0.1 www.tiscalii.it
127.0.0.1 tiscalij.it
127.0.0.1 www.tiscalij.it
127.0.0.1 tiscalik.it
127.0.0.1 www.tiscalik.it
127.0.0.1 tiscalil.it
127.0.0.1 www.tiscalil.it
127.0.0.1 tiscaliu.it
127.0.0.1 www.tiscaliu.it
127.0.0.1 tiscalji.it
127.0.0.1 www.tiscalji.it
127.0.0.1 tiscalk.it
127.0.0.1 www.tiscalk.it
127.0.0.1 tiscalki.it
127.0.0.1 www.tiscalki.it
127.0.0.1 tiscalli.it
127.0.0.1 www.tiscalli.it
127.0.0.1 tiscalo.it
127.0.0.1 www.tiscalo.it
127.0.0.1 tiscaloi.it
127.0.0.1 www.tiscaloi.it
127.0.0.1 tiscalui.it
127.0.0.1 www.tiscalui.it
127.0.0.1 tiscaoi.it
127.0.0.1 www.tiscaoi.it
127.0.0.1 tiscaoli.it
127.0.0.1 www.tiscaoli.it
127.0.0.1 tiscaqli.it
127.0.0.1 www.tiscaqli.it
127.0.0.1 tiscasli.it
127.0.0.1 www.tiscasli.it
127.0.0.1 tiscawli.it
127.0.0.1 www.tiscawli.it
127.0.0.1 tiscaxli.it
127.0.0.1 www.tiscaxli.it
127.0.0.1 tiscazli.it
127.0.0.1 www.tiscazli.it
127.0.0.1 tiscdali.it
127.0.0.1 www.tiscdali.it
127.0.0.1 tiscfali.it
127.0.0.1 www.tiscfali.it
127.0.0.1 tisclai.it
127.0.0.1 www.tisclai.it
127.0.0.1 tiscli.it
127.0.0.1 www.tiscli.it
127.0.0.1 tiscqali.it
127.0.0.1 www.tiscqali.it
127.0.0.1 tiscqli.it
127.0.0.1 www.tiscqli.it
127.0.0.1 tiscsali.it
127.0.0.1 www.tiscsali.it
127.0.0.1 tiscsli.it
127.0.0.1 www.tiscsli.it
127.0.0.1 tiscvali.it
127.0.0.1 www.tiscvali.it
127.0.0.1 tiscwali.it
127.0.0.1 www.tiscwali.it
127.0.0.1 tiscxali.it
127.0.0.1 www.tiscxali.it
127.0.0.1 tisczali.it
127.0.0.1 www.tisczali.it
127.0.0.1 tisczli.it
127.0.0.1 www.tisczli.it
127.0.0.1 tisdcali.it
127.0.0.1 www.tisdcali.it
127.0.0.1 tisecali.it
127.0.0.1 www.tisecali.it
127.0.0.1 tisfcali.it
127.0.0.1 www.tisfcali.it
127.0.0.1 tisscali.it
127.0.0.1 www.tisscali.it
127.0.0.1 tisvcali.it
127.0.0.1 www.tisvcali.it
127.0.0.1 tiswcali.it
127.0.0.1 www.tiswcali.it
127.0.0.1 tisxali.it
127.0.0.1 www.tisxali.it
127.0.0.1 tisxcali.it
127.0.0.1 www.tisxcali.it
127.0.0.1 titanmotors.com
127.0.0.1 www.titanmotors.com
127.0.0.1 titanvision.com
127.0.0.1 titsianna.com
127.0.0.1 tit-x.com
127.0.0.1 tiuscali.it
127.0.0.1 www.tiuscali.it
127.0.0.1 tiwcali.it
127.0.0.1 www.tiwcali.it
127.0.0.1 tiwscali.it
127.0.0.1 www.tiwscali.it
127.0.0.1 tixcali.it
127.0.0.1 www.tixcali.it
127.0.0.1 tixscali.it
127.0.0.1 www.tixscali.it
127.0.0.1 tizscali.it
127.0.0.1 www.tizscali.it
127.0.0.1 tjar.com
127.0.0.1 tjaw.com
127.0.0.1 tjdo.com
127.0.0.1 tjem.com
127.0.0.1 tjgo.com
127.0.0.1 tjiscali.it
127.0.0.1 www.tjiscali.it
127.0.0.1 tkiscali.it
127.0.0.1 www.tkiscali.it
127.0.0.1 tliscali.it
127.0.0.1 www.tliscali.it
127.0.0.1 tns-counter.ru
127.0.0.1 www.tns-counter.ru
127.0.0.1 todaywarnings.com
127.0.0.1 www.todaywarnings.com
127.0.0.1 toddhayes.com
127.0.0.1 toiscali.it
127.0.0.1 www.toiscali.it
127.0.0.1 toogle.it
127.0.0.1 www.toogle.it
127.0.0.1 toohs.com
127.0.0.1 www.toohs.com
127.0.0.1 toolbar.azebar.com
127.0.0.1 www.toolbar.azebar.com
127.0.0.1 toolbar.cc
127.0.0.1 www.toolbar3.trafficgeneration.biz
127.0.0.1 www.toolbar5.trafficgeneration.biz
127.0.0.1 toolbarbest.biz
127.0.0.1 www.toolbarbest.biz
127.0.0.1 toolbarbucks.biz
127.0.0.1 www.toolbarbucks.biz
127.0.0.1 toolbarcash.com
127.0.0.1 toolbardollars.biz
127.0.0.1 www.toolbardollars.biz
127.0.0.1 toolbarpartner.com
127.0.0.1 toolbartraff.biz
127.0.0.1 www.toolbartraff.biz
127.0.0.1 toolsjambo.com
127.0.0.1 www.toolsjambo.com
127.0.0.1 toolster.de
127.0.0.1 www.toolster.de
127.0.0.1 toon-comics.com
127.0.0.1 tooncomics.com
127.0.0.1 top100drugs.info
127.0.0.1 www.top100drugs.info
127.0.0.1 top-banners.com
127.0.0.1 www.top-banners.com
127.0.0.1 topbrowsing.com
127.0.0.1 www.topbrowsing.com
127.0.0.1 topconverting.com
127.0.0.1 www.topconverting.com
127.0.0.1 topsearcher.com
127.0.0.1 www.topsearcher.com
127.0.0.1 topsecuritypage.com
127.0.0.1 www.topsecuritypage.com
127.0.0.1 topsecuritysite.net
127.0.0.1 www.topsecuritysite.net
127.0.0.1 topsite.us
127.0.0.1 www.topsite.us
127.0.0.1 topsites.us
127.0.0.1 www.topsites.us
127.0.0.1 topsitez.us
127.0.0.1 www.topsitez.us
127.0.0.1 topx.cc
127.0.0.1 torc.com
127.0.0.1 toriii.cc
127.0.0.1 www.toriii.cc
127.0.0.1 toscali.it
127.0.0.1 www.toscali.it
127.0.0.1 toseeka.com
127.0.0.1 www.toseeka.com
127.0.0.1 tossoalice.it
127.0.0.1 www.tossoalice.it
127.0.0.1 totalvelocity.com
127.0.0.1 www.totalvelocity.com
127.0.0.1 touchnsearch.com
127.0.0.1 www.touchnsearch.com
127.0.0.1 trackhits.cc
127.0.0.1 www.trackhits.cc
127.0.0.1 tracktraff.cc
127.0.0.1 traff.justcount.net
127.0.0.1 traff5all.biz
127.0.0.1 www.traff5all.biz
127.0.0.1 traffbest.biz
127.0.0.1 www.traffbest.biz
127.0.0.1 traffic-acc.com
127.0.0.1 www.traffic-acc.com
127.0.0.1 trafficback.com
127.0.0.1 trafficgeneration.biz
127.0.0.1 www.trafficgeneration.biz
127.0.0.1 trafficroup.com
127.0.0.1 www.trafficroup.com
127.0.0.1 traffic-ssl1.com
127.0.0.1 www.traffic-ssl1.com
127.0.0.1 trafficswitcher.com
127.0.0.1 traffsale1.biz
127.0.0.1 www.traffsale1.biz
127.0.0.1 traffstats.biz
127.0.0.1 www.traffstats.biz
127.0.0.1 traffweb1.biz
127.0.0.1 www.traffweb1.biz
127.0.0.1 travel.picture-posters.com
127.0.0.1 trebitalia.it
127.0.0.1 www.trebitalia.it
127.0.0.1 treenitalia.it
127.0.0.1 www.treenitalia.it
127.0.0.1 treitalia.it
127.0.0.1 www.treitalia.it
127.0.0.1 tremnitalia.it
127.0.0.1 www.tremnitalia.it
127.0.0.1 treniralia.it
127.0.0.1 www.treniralia.it
127.0.0.1 trenitaalia.it
127.0.0.1 www.trenitaalia.it
127.0.0.1 trenitaia.it
127.0.0.1 www.trenitaia.it
127.0.0.1 trenitakia.it
127.0.0.1 www.trenitakia.it
127.0.0.1 trenitaliaa.it
127.0.0.1 www.trenitaliaa.it
127.0.0.1 trenitaliaq.it
127.0.0.1 www.trenitaliaq.it
127.0.0.1 trenitalias.it
127.0.0.1 www.trenitalias.it
127.0.0.1 trenitaliaz.it
127.0.0.1 www.trenitaliaz.it
127.0.0.1 trenitaliia.it
127.0.0.1 www.trenitaliia.it
127.0.0.1 trenitalis.it
127.0.0.1 www.trenitalis.it
127.0.0.1 trenitalisa.it
127.0.0.1 www.trenitalisa.it
127.0.0.1 trenitallia.it
127.0.0.1 www.trenitallia.it
127.0.0.1 trenitaloa.it
127.0.0.1 www.trenitaloa.it
127.0.0.1 trenitalua.it
127.0.0.1 www.trenitalua.it
127.0.0.1 trenitralia.it
127.0.0.1 www.trenitralia.it
127.0.0.1 trenitslia.it
127.0.0.1 www.trenitslia.it
127.0.0.1 trenittalia.it
127.0.0.1 www.trenittalia.it
127.0.0.1 treniutalia.it
127.0.0.1 www.treniutalia.it
127.0.0.1 treniyalia.it
127.0.0.1 www.treniyalia.it
127.0.0.1 trenmitalia.it
127.0.0.1 www.trenmitalia.it
127.0.0.1 trennitalia.it
127.0.0.1 www.trennitalia.it
127.0.0.1 trenotalia.it
127.0.0.1 www.trenotalia.it
127.0.0.1 trentalia.it
127.0.0.1 www.trentalia.it
127.0.0.1 trenutalia.it
127.0.0.1 www.trenutalia.it
127.0.0.1 trepubblica.it
127.0.0.1 www.trepubblica.it
127.0.0.1 trernitalia.it
127.0.0.1 www.trernitalia.it
127.0.0.1 trewnitalia.it
127.0.0.1 www.trewnitalia.it
127.0.0.1 trial.updates.winsoftware.com
127.0.0.1 triscali.it
127.0.0.1 www.triscali.it
127.0.0.1 Trojanerfilter.com
127.0.0.1 www.Trojanerfilter.com
127.0.0.1 Trojansfilter.com
127.0.0.1 www.Trojansfilter.com
127.0.0.1 Trojansfiltre.com
127.0.0.1 www.Trojansfiltre.com
127.0.0.1 troonety.biz
127.0.0.1 www.troonety.biz
127.0.0.1 trossoalice.it
127.0.0.1 www.trossoalice.it
127.0.0.1 trrenitalia.it
127.0.0.1 www.trrenitalia.it
127.0.0.1 trtenitalia.it
127.0.0.1 www.trtenitalia.it
127.0.0.1 truecodec.com
127.0.0.1 www.truecodec.com
127.0.0.1 true-counter.com
127.0.0.1 www.true-counter.com
127.0.0.1 true-portal.com
127.0.0.1 truth-is-out-there.org
127.0.0.1 www.truth-is-out-there.org
127.0.0.1 truttogratis.it
127.0.0.1 www.truttogratis.it
127.0.0.1 trytechnical.com
127.0.0.1 tscali.it
127.0.0.1 www.tscali.it
127.0.0.1 tscodec.com
127.0.0.1 www.tscodec.com
127.0.0.1 tsx.org
127.0.0.1 ttiscali.it
127.0.0.1 www.ttiscali.it
127.0.0.1 ttrenitalia.it
127.0.0.1 www.ttrenitalia.it
127.0.0.1 tttogratis.it
127.0.0.1 www.tttogratis.it
127.0.0.1 ttuttogratis.it
127.0.0.1 www.ttuttogratis.it
127.0.0.1 tuiscali.it
127.0.0.1 www.tuiscali.it
127.0.0.1 tuksolution.com
127.0.0.1 www.tuksolution.com
127.0.0.1 turtogratis.it
127.0.0.1 www.turtogratis.it
127.0.0.1 tutogratis.it
127.0.0.1 www.tutogratis.it
127.0.0.1 tutorial-hq.com
127.0.0.1 www.tutorial-hq.com
127.0.0.1 tutrogratis.it
127.0.0.1 www.tutrogratis.it
127.0.0.1 tuttgratis.it
127.0.0.1 www.tuttgratis.it
127.0.0.1 tuttofratis.it
127.0.0.1 www.tuttofratis.it
127.0.0.1 tuttogeratis.it
127.0.0.1 www.tuttogeratis.it
127.0.0.1 tuttograatis.it
127.0.0.1 www.tuttograatis.it
127.0.0.1 tuttograis.it
127.0.0.1 www.tuttograis.it
127.0.0.1 tuttograris.it
127.0.0.1 www.tuttograris.it
127.0.0.1 tuttograti.it
127.0.0.1 www.tuttograti.it
127.0.0.1 tuttogratia.it
127.0.0.1 www.tuttogratia.it
127.0.0.1 tuttogratias.it
127.0.0.1 www.tuttogratias.it
127.0.0.1 tuttogratiis.it
127.0.0.1 www.tuttogratiis.it
127.0.0.1 tuttogratisa.it
127.0.0.1 www.tuttogratisa.it
127.0.0.1 tuttogratiss.it
127.0.0.1 www.tuttogratiss.it
127.0.0.1 tuttogratos.it
127.0.0.1 www.tuttogratos.it
127.0.0.1 tuttograts.it
127.0.0.1 www.tuttograts.it
127.0.0.1 tuttograttis.it
127.0.0.1 www.tuttograttis.it
127.0.0.1 tuttogratus.it
127.0.0.1 www.tuttogratus.it
127.0.0.1 tuttograyis.it
127.0.0.1 www.tuttograyis.it
127.0.0.1 tuttogrratis.it
127.0.0.1 www.tuttogrratis.it
127.0.0.1 tuttogrstis.it
127.0.0.1 www.tuttogrstis.it
127.0.0.1 tuttogrtatis.it
127.0.0.1 www.tuttogrtatis.it
127.0.0.1 tuttogtratis.it
127.0.0.1 www.tuttogtratis.it
127.0.0.1 tuttohratis.it
127.0.0.1 www.tuttohratis.it
127.0.0.1 tuttoigratis.it
127.0.0.1 www.tuttoigratis.it
127.0.0.1 tuttoogratis.it
127.0.0.1 www.tuttoogratis.it
127.0.0.1 tuttopgratis.it
127.0.0.1 www.tuttopgratis.it
127.0.0.1 tuttoratis.it
127.0.0.1 www.tuttoratis.it
127.0.0.1 tuttpgratis.it
127.0.0.1 www.tuttpgratis.it
127.0.0.1 tutttogratis.it
127.0.0.1 www.tutttogratis.it
127.0.0.1 tuttyogratis.it
127.0.0.1 www.tuttyogratis.it
127.0.0.1 tutyogratis.it
127.0.0.1 www.tutyogratis.it
127.0.0.1 tutytogratis.it
127.0.0.1 www.tutytogratis.it
127.0.0.1 tuuttogratis.it
127.0.0.1 www.tuuttogratis.it
127.0.0.1 tuytogratis.it
127.0.0.1 www.tuytogratis.it
127.0.0.1 tv.180solutions.com
127.0.0.1 tv-auf-dem-pc.de
127.0.0.1 www.tv-auf-dem-pc.de
127.0.0.1 tvcodec.com
127.0.0.1 www.tvcodec.com
127.0.0.1 tv-codec.com
127.0.0.1 www.tv-codec.com
127.0.0.1 tv-codecs.com
127.0.0.1 www.tv-codecs.com
127.0.0.1 tv-en-pc.es
127.0.0.1 www.tv-en-pc.es
127.0.0.1 tvsatellitepourpc.com
127.0.0.1 www.tvsatellitepourpc.com
127.0.0.1 tvscodec.com
127.0.0.1 www.tvscodec.com
127.0.0.1 tv-sur-pc.com
127.0.0.1 www.tv-sur-pc.com
127.0.0.1 tyiscali.it
127.0.0.1 www.tyiscali.it
127.0.0.1 type2find.com
127.0.0.1 www.type2find.com
127.0.0.1 tyttogratis.it
127.0.0.1 www.tyttogratis.it
127.0.0.1 tzxsj.com
127.0.0.1 www.tzxsj.com
127.0.0.1 u.webbuying.net
127.0.0.1 u-239.com
127.0.0.1 u45.cx
127.0.0.1 u46.cx
127.0.0.1 u47.cc
127.0.0.1 u48.cc
127.0.0.1 u7u.cn
127.0.0.1 www.u7u.cn
127.0.0.1 ucleaner.com
127.0.0.1 www.ucleaner.com
127.0.0.1 ucmore.com
127.0.0.1 udefender.com
127.0.0.1 www.udefender.com
127.0.0.1 ueornavxiz.biz
127.0.0.1 www.ueornavxiz.biz
127.0.0.1 ueornmbkkhmf.biz
127.0.0.1 www.ueornmbkkhmf.biz
127.0.0.1 ufindall.click-now.net
127.0.0.1 ufixer.com
127.0.0.1 www.ufixer.com
127.0.0.1 uglyphotos.net
127.0.0.1 www.uglyphotos.net
127.0.0.1 uibo.it
127.0.0.1 www.uibo.it
127.0.0.1 uige.it
127.0.0.1 www.uige.it
127.0.0.1 uimi.it
127.0.0.1 www.uimi.it
127.0.0.1 uinimi.it
127.0.0.1 www.uinimi.it
127.0.0.1 uipd.it
127.0.0.1 www.uipd.it
127.0.0.1 uipg.it
127.0.0.1 www.uipg.it
127.0.0.1 uito.it
127.0.0.1 www.uito.it
127.0.0.1 ukiee.com
127.0.0.1 www.ukiee.com
127.0.0.1 ulink13.dudu.com
127.0.0.1 ulink7.dudu.com
127.0.0.1 ulog.systemdoctor.com
127.0.0.1 ulog.winantivirus.com
127.0.0.1 ultimateprotect.com
127.0.0.1 ultraload.net
127.0.0.1 umaxsearch.com
127.0.0.1 umibo.it
127.0.0.1 www.umibo.it
127.0.0.1 umige.it
127.0.0.1 www.umige.it
127.0.0.1 umimi.it
127.0.0.1 www.umimi.it
127.0.0.1 umipd.it
127.0.0.1 www.umipd.it
127.0.0.1 umipv.it
127.0.0.1 www.umipv.it
127.0.0.1 umnibo.it
127.0.0.1 www.umnibo.it
127.0.0.1 unbo.it
127.0.0.1 www.unbo.it
127.0.0.1 uncj.filetretporn.com
127.0.0.1 www.uncj.filetretporn.com
127.0.0.1 underagehost.com
127.0.0.1 une-autre-france.com
127.0.0.1 unge.it
127.0.0.1 www.unge.it
127.0.0.1 unibno.it
127.0.0.1 www.unibno.it
127.0.0.1 unie.it
127.0.0.1 www.unie.it
127.0.0.1 uniformpornmag.com
127.0.0.1 www.uniformpornmag.com
127.0.0.1 unig.it
127.0.0.1 www.unig.it
127.0.0.1 unigays.com
127.0.0.1 unii.it
127.0.0.1 www.unii.it
127.0.0.1 unini.it
127.0.0.1 www.unini.it
127.0.0.1 unionseek.com
127.0.0.1 www.unionseek.com
127.0.0.1 unionsms.net
127.0.0.1 www.unionsms.net
127.0.0.1 unipages.cc
127.0.0.1 unitedstates.rub.to
127.0.0.1 univo.it
127.0.0.1 www.univo.it
127.0.0.1 unmi.it
127.0.0.1 www.unmi.it
127.0.0.1 unmibo.it
127.0.0.1 www.unmibo.it
127.0.0.1 unobo.it
127.0.0.1 www.unobo.it
127.0.0.1 unpd.it
127.0.0.1 www.unpd.it
127.0.0.1 unpg.it
127.0.0.1 www.unpg.it
127.0.0.1 unto.it
127.0.0.1 www.unto.it
127.0.0.1 unubo.it
127.0.0.1 www.unubo.it
127.0.0.1 up2you.ru
127.0.0.1 upd.lop.com
127.0.0.1 upd.zone-media.com
127.0.0.1 updatemysettings.com
127.0.0.1 www.updatemysettings.com
127.0.0.1 updates.spywarequake.com
127.0.0.1 upereva.it
127.0.0.1 www.upereva.it
127.0.0.1 uploads.180solutions.com
127.0.0.1 upspiral.com
127.0.0.1 www.upspiral.com
127.0.0.1 uptodateprotect.com
127.0.0.1 www.uptodateprotect.com
127.0.0.1 uptodatesecurity.com
127.0.0.1 www.uptodatesecurity.com
127.0.0.1 uptofind.com
127.0.0.1 www.uptofind.com
127.0.0.1 upx.tsx.org
127.0.0.1 uralitel.ru
127.0.0.1 urgentsystemupdate.biz
127.0.0.1 www.urgentsystemupdate.biz
127.0.0.1 urgentsystemupdate.com
127.0.0.1 www.urgentsystemupdate.com
127.0.0.1 www.url.cpvfeed.com
127.0.0.1 urlstat.com
127.0.0.1 urlstat.ru
127.0.0.1 ursie.net
127.0.0.1 usecodec.com
127.0.0.1 www.usecodec.com
127.0.0.1 usefullsoft.net
127.0.0.1 use-play.com
127.0.0.1 www.use-play.com
127.0.0.1 utahsweet.com
127.0.0.1 utils.errorsafe.com
127.0.0.1 utils.winantivirus.com
127.0.0.1 utils.winfixer.com
127.0.0.1 www.utils.winfixer.com
127.0.0.1 utopicportal.com
127.0.0.1 uusocialjustice.org
127.0.0.1 uvu-channel.com
127.0.0.1 www.uvu-channel.com
127.0.0.1 uydsiygeds.com
127.0.0.1 www.uydsiygeds.com
127.0.0.1 uzoogle.com
127.0.0.1 www.uzoogle.com
127.0.0.1 v-224.com
127.0.0.1 v61.com
127.0.0.1 www.v61.com
127.0.0.1 v8irgilio.it
127.0.0.1 www.v8irgilio.it
127.0.0.1 v8rgilio.it
127.0.0.1 www.v8rgilio.it
127.0.0.1 v9irgilio.it
127.0.0.1 www.v9irgilio.it
127.0.0.1 v9rgilio.it
127.0.0.1 www.v9rgilio.it
127.0.0.1 vac-soft.com
127.0.0.1 www.vac-soft.com
127.0.0.1 vacwebsoft.com
127.0.0.1 www.vacwebsoft.com
127.0.0.1 vaginpics.com
127.0.0.1 valmyers.com
127.0.0.1 vapochille.com
127.0.0.1 www.vapochille.com
127.0.0.1 vaxcodec.com
127.0.0.1 www.vaxcodec.com
127.0.0.1 vaxdownload.com
127.0.0.1 www.vaxdownload.com
127.0.0.1 vaxobject.com
127.0.0.1 www.vaxobject.com
127.0.0.1 vaxobjectinstall.com
127.0.0.1 www.vaxobjectinstall.com
127.0.0.1 vbirgilio.it
127.0.0.1 www.vbirgilio.it
127.0.0.1 vcirgilio.it
127.0.0.1 www.vcirgilio.it
127.0.0.1 vcodec.com
127.0.0.1 www.vcodec.com
127.0.0.1 v-codec.com
127.0.0.1 www.v-codec.com
127.0.0.1 vcodec2007.com
127.0.0.1 www.vcodec2007.com
127.0.0.1 vcorriere.it
127.0.0.1 www.vcorriere.it
127.0.0.1 vegas-free.com
127.0.0.1 vegbuy.com
127.0.0.1 veloventures.com
127.0.0.1 verkaufen.wegvonviren.com
127.0.0.1 veryeasysearch.com
127.0.0.1 verzila.com
127.0.0.1 vesbiz.biz
127.0.0.1 veyyhlucwa.net
127.0.0.1 www.veyyhlucwa.net
127.0.0.1 vfirgilio.it
127.0.0.1 www.vfirgilio.it
127.0.0.1 vgazzetta.it
127.0.0.1 www.vgazzetta.it
127.0.0.1 vgirgilio.it
127.0.0.1 www.vgirgilio.it
127.0.0.1 vgoogle.it
127.0.0.1 www.vgoogle.it
127.0.0.1 vi4gilio.it
127.0.0.1 www.vi4gilio.it
127.0.0.1 vi4rgilio.it
127.0.0.1 www.vi4rgilio.it
127.0.0.1 vi5gilio.it
127.0.0.1 www.vi5gilio.it
127.0.0.1 vi5rgilio.it
127.0.0.1 www.vi5rgilio.it
127.0.0.1 vi8rgilio.it
127.0.0.1 www.vi8rgilio.it
127.0.0.1 vi9rgilio.it
127.0.0.1 www.vi9rgilio.it
127.0.0.1 vicodec.com
127.0.0.1 www.vicodec.com
127.0.0.1 victoriaadam.com
127.0.0.1 vidaccess.net
127.0.0.1 www.vidaccess.net
127.0.0.1 vidcodecs.com
127.0.0.1 www.vidcodecs.com
127.0.0.1 videoaccessactivex.com
127.0.0.1 www.videoaccessactivex.com
127.0.0.1 videoactivexlist.com
127.0.0.1 www.videoactivexlist.com
127.0.0.1 videoactivexmode.com
127.0.0.1 www.videoactivexmode.com
127.0.0.1 videoactivexnote.com
127.0.0.1 www.videoactivexnote.com
127.0.0.1 videoactivexsetup.com
127.0.0.1 www.videoactivexsetup.com
127.0.0.1 videoactivexsoft.com
127.0.0.1 www.videoactivexsoft.com
127.0.0.1 videoactivexsoftware.com
127.0.0.1 www.videoactivexsoftware.com
127.0.0.1 videoaxdata.com
127.0.0.1 www.videoaxdata.com
127.0.0.1 videoaxdownload.com
127.0.0.1 www.videoaxdownload.com
127.0.0.1 videoaxobject.com
127.0.0.1 www.videoaxobject.com
127.0.0.1 videoaxproject.com
127.0.0.1 www.videoaxproject.com
127.0.0.1 videoaxsoftware.com
127.0.0.1 www.videoaxsoftware.com
127.0.0.1 videoaxsolution.com
127.0.0.1 www.videoaxsolution.com
127.0.0.1 videocategories.com
127.0.0.1 video-clips.in
127.0.0.1 www.video-clips.in
127.0.0.1 videoobjectax.com
127.0.0.1 www.videoobjectax.com
127.0.0.1 videoobjectmedia.com
127.0.0.1 www.videoobjectmedia.com
127.0.0.1 videos-access.com
127.0.0.1 www.videos-access.com
127.0.0.1 videosaccess.net
127.0.0.1 www.videosaccess.net
127.0.0.1 videoscodec.com
127.0.0.1 www.videoscodec.com
127.0.0.1 videosfan.com
127.0.0.1 www.videosfan.com
127.0.0.1 videosoftwareax.com
127.0.0.1 www.videosoftwareax.com
127.0.0.1 videossoftware.com
127.0.0.1 www.videossoftware.com
127.0.0.1 videowebproject.com
127.0.0.1 www.videowebproject.com
127.0.0.1 videozapping.com
127.0.0.1 www.videozapping.com
127.0.0.1 vidrgilio.it
127.0.0.1 www.vidrgilio.it
127.0.0.1 vids-access.com
127.0.0.1 www.vids-access.com
127.0.0.1 vidscodec.com
127.0.0.1 www.vidscodec.com
127.0.0.1 viegilio.it
127.0.0.1 www.viegilio.it
127.0.0.1 viergilio.it
127.0.0.1 www.viergilio.it
127.0.0.1 viewimageonline.com
127.0.0.1 www.viewimageonline.com
127.0.0.1 vifgilio.it
127.0.0.1 www.vifgilio.it
127.0.0.1 vifrgilio.it
127.0.0.1 www.vifrgilio.it
127.0.0.1 vigrgilio.it
127.0.0.1 www.vigrgilio.it
127.0.0.1 vigrilio.it
127.0.0.1 www.vigrilio.it
127.0.0.1 vijrgilio.it
127.0.0.1 www.vijrgilio.it
127.0.0.1 vikrgilio.it
127.0.0.1 www.vikrgilio.it
127.0.0.1 vilrgilio.it
127.0.0.1 www.vilrgilio.it
127.0.0.1 viorgilio.it
127.0.0.1 www.viorgilio.it
127.0.0.1 vipru.com
127.0.0.1 www.vipru.com
127.0.0.1 vir4gilio.it
127.0.0.1 www.vir4gilio.it
127.0.0.1 vir5gilio.it
127.0.0.1 www.vir5gilio.it
127.0.0.1 virbgilio.it
127.0.0.1 www.virbgilio.it
127.0.0.1 virbilio.it
127.0.0.1 www.virbilio.it
127.0.0.1 virdgilio.it
127.0.0.1 www.virdgilio.it
127.0.0.1 viregilio.it
127.0.0.1 www.viregilio.it
127.0.0.1 virfgilio.it
127.0.0.1 www.virfgilio.it
127.0.0.1 virg8ilio.it
127.0.0.1 www.virg8ilio.it
127.0.0.1 virg8lio.it
127.0.0.1 www.virg8lio.it
127.0.0.1 virg9ilio.it
127.0.0.1 www.virg9ilio.it
127.0.0.1 virg9lio.it
127.0.0.1 www.virg9lio.it
127.0.0.1 virgbilio.it
127.0.0.1 www.virgbilio.it
127.0.0.1 virgfilio.it
127.0.0.1 www.virgfilio.it
127.0.0.1 virghilio.it
127.0.0.1 www.virghilio.it
127.0.0.1 virgi8lio.it
127.0.0.1 www.virgi8lio.it
127.0.0.1 virgi9lio.it
127.0.0.1 www.virgi9lio.it
127.0.0.1 virgiilo.it
127.0.0.1 www.virgiilo.it
127.0.0.1 virgiio.it
127.0.0.1 www.virgiio.it
127.0.0.1 virgijlio.it
127.0.0.1 www.virgijlio.it
127.0.0.1 virgiklio.it
127.0.0.1 www.virgiklio.it
127.0.0.1 virgil8io.it
127.0.0.1 www.virgil8io.it
127.0.0.1 virgil9io.it
127.0.0.1 www.virgil9io.it
127.0.0.1 virgili0.it
127.0.0.1 www.virgili0.it
127.0.0.1 virgili8o.it
127.0.0.1 www.virgili8o.it
127.0.0.1 virgili9.it
127.0.0.1 www.virgili9.it
127.0.0.1 virgili9o.it
127.0.0.1 www.virgili9o.it
127.0.0.1 virgilijo.it
127.0.0.1 www.virgilijo.it
127.0.0.1 virgiliko.it
127.0.0.1 www.virgiliko.it
127.0.0.1 virgilil.it
127.0.0.1 www.virgilil.it
127.0.0.1 virgililo.it
127.0.0.1 www.virgililo.it
127.0.0.1 virgilio0.it
127.0.0.1 www.virgilio0.it
127.0.0.1 virgilio9.it
127.0.0.1 www.virgilio9.it
127.0.0.1 virgilioi.it
127.0.0.1 www.virgilioi.it
127.0.0.1 virgiliok.it
127.0.0.1 www.virgiliok.it
127.0.0.1 virgiliol.it
127.0.0.1 www.virgiliol.it
127.0.0.1 virgiliop.it
127.0.0.1 www.virgiliop.it
127.0.0.1 virgilipo.it
127.0.0.1 www.virgilipo.it
127.0.0.1 virgiliuo.it
127.0.0.1 www.virgiliuo.it
127.0.0.1 virgiljio.it
127.0.0.1 www.virgiljio.it
127.0.0.1 virgilkio.it
127.0.0.1 www.virgilkio.it
127.0.0.1 virgiloio.it
127.0.0.1 www.virgiloio.it
127.0.0.1 virgiloo.it
127.0.0.1 www.virgiloo.it
127.0.0.1 virgilpio.it
127.0.0.1 www.virgilpio.it
127.0.0.1 virgiluio.it
127.0.0.1 www.virgiluio.it
127.0.0.1 virgiluo.it
127.0.0.1 www.virgiluo.it
127.0.0.1 virgin-tgp.net
127.0.0.1 virgioio.it
127.0.0.1 www.virgioio.it
127.0.0.1 virgiolio.it
127.0.0.1 www.virgiolio.it
127.0.0.1 virgiplio.it
127.0.0.1 www.virgiplio.it
127.0.0.1 virgiulio.it
127.0.0.1 www.virgiulio.it
127.0.0.1 virgjilio.it
127.0.0.1 www.virgjilio.it
127.0.0.1 virgkilio.it
127.0.0.1 www.virgkilio.it
127.0.0.1 virgklio.it
127.0.0.1 www.virgklio.it
127.0.0.1 virglilio.it
127.0.0.1 www.virglilio.it
127.0.0.1 virgoilio.it
127.0.0.1 www.virgoilio.it
127.0.0.1 virgtilio.it
127.0.0.1 www.virgtilio.it
127.0.0.1 virguilio.it
127.0.0.1 www.virguilio.it
127.0.0.1 virgvilio.it
127.0.0.1 www.virgvilio.it
127.0.0.1 virgyilio.it
127.0.0.1 www.virgyilio.it
127.0.0.1 virhgilio.it
127.0.0.1 www.virhgilio.it
127.0.0.1 virtgilio.it
127.0.0.1 www.virtgilio.it
127.0.0.1 virtilio.it
127.0.0.1 www.virtilio.it
127.0.0.1 virtualcodec.com
127.0.0.1 www.virtualcodec.com
127.0.0.1 virtual-ticket.net
127.0.0.1 www.virtual-ticket.net
127.0.0.1 virusburst.com
127.0.0.1 www.virusburst.com
127.0.0.1 virusprotectpro.com
127.0.0.1 virusrescue.com
127.0.0.1 www.virusrescue.com
127.0.0.1 virvgilio.it
127.0.0.1 www.virvgilio.it
127.0.0.1 virvilio.it
127.0.0.1 www.virvilio.it
127.0.0.1 virygilio.it
127.0.0.1 www.virygilio.it
127.0.0.1 vitamins-for-each.com
127.0.0.1 vitrgilio.it
127.0.0.1 www.vitrgilio.it
127.0.0.1 viurgilio.it
127.0.0.1 www.viurgilio.it
127.0.0.1 vjirgilio.it
127.0.0.1 www.vjirgilio.it
127.0.0.1 vkirgilio.it
127.0.0.1 www.vkirgilio.it
127.0.0.1 vkrgilio.it
127.0.0.1 www.vkrgilio.it
127.0.0.1 vlirgilio.it
127.0.0.1 www.vlirgilio.it
127.0.0.1 voghp.com
127.0.0.1 www.voghp.com
127.0.0.1 void.truth-is-out-there.org
127.0.0.1 voirgilio.it
127.0.0.1 www.voirgilio.it
127.0.0.1 vorriere.it
127.0.0.1 www.vorriere.it
127.0.0.1 votehowe.org
127.0.0.1 vother.info
127.0.0.1 www.vother.info
127.0.0.1 votreenton.biz
127.0.0.1 www.votreenton.biz
127.0.0.1 vparivalka.com
127.0.0.1 vse-moe.biz
127.0.0.1 vskeylogger.nazwa.pl
127.0.0.1 www.vskeylogger.nazwa.pl
127.0.0.1 vuirgilio.it
127.0.0.1 www.vuirgilio.it
127.0.0.1 vxebony.com
127.0.0.1 wabq.com
127.0.0.1 wabu.com
127.0.0.1 wakeupdick.com
127.0.0.1 walitalia.it
127.0.0.1 www.walitalia.it
127.0.0.1 wanfuchina.com
127.0.0.1 www.wanfuchina.com
127.0.0.1 ware2006.com
127.0.0.1 www.ware2006.com
127.0.0.1 warez.com
127.0.0.1 www.warez.com
127.0.0.1 warningiepage.com
127.0.0.1 www.warningiepage.com
127.0.0.1 warnomore.org
127.0.0.1 watchonline.tv
127.0.0.1 www.watchonline.tv
127.0.0.1 watersport-specialties.com
127.0.0.1 wazzupnet.com
127.0.0.1 www.wazzupnet.com
127.0.0.1 wbay.it
127.0.0.1 www.wbay.it
127.0.0.1 wbkb.com
127.0.0.1 web.links4all.biz
127.0.0.1 web1000.com
127.0.0.1 webbuying.net
127.0.0.1 www.webbuying.net
127.0.0.1 web-codec.com
127.0.0.1 www.web-codec.com
127.0.0.1 webcoolsearch.com
127.0.0.1 web-entrance.co
127.0.0.1 webhancer.com
127.0.0.1 www.webhancer.com
127.0.0.1 web-homepage.net
127.0.0.1 Web-mediaplayer.com
127.0.0.1 www.Web-mediaplayer.com
127.0.0.1 webnetinfo.net
127.0.0.1 www.webnetinfo.net
127.0.0.1 web-nexus.net
127.0.0.1 websearch.com
127.0.0.1 www.websearch.com
127.0.0.1 web-search.tk
127.0.0.1 websearchdot.com
127.0.0.1 websopot.com
127.0.0.1 www.websopot.com
127.0.0.1 webtop100.net
127.0.0.1 www.webtop100.net
127.0.0.1 webtopsecurity.com
127.0.0.1 www.webtopsecurity.com
127.0.0.1 weekend-movies.com
127.0.0.1 wegvonviren.com
127.0.0.1 www.wegvonviren.com
127.0.0.1 wethere.com
127.0.0.1 www.wethere.com
127.0.0.1 wetpornostars.com
127.0.0.1 wfix.com
127.0.0.1 wflu.com
127.0.0.1 wg581.com
127.0.0.1 www.wg581.com
127.0.0.1 whatmetodonow.org
127.0.0.1 www.whatmetodonow.org
127.0.0.1 whatsyoursearch.com
127.0.0.1 whazit.com
127.0.0.1 white-pages.ws
127.0.0.1 whitescat.com
127.0.0.1 www.whitescat.com
127.0.0.1 whittierblvd.com
127.0.0.1 whoisprivacyprotect.com
127.0.0.1 www.whoisprivacyprotect.com
127.0.0.1 winamp2007.com
127.0.0.1 www.winamp2007.com
127.0.0.1 winamp-download-now.com
127.0.0.1 www.winamp-download-now.com
127.0.0.1 winamp-hq.com
127.0.0.1 www.winamp-hq.com
127.0.0.1 winantispam.com
127.0.0.1 www.winantispam.com
127.0.0.1 winantispy.com
127.0.0.1 www.winantispy.com
127.0.0.1 winantispyware.com
127.0.0.1 www.winantispyware.com
127.0.0.1 winantivirus.com
127.0.0.1 www.winantivirus.com
127.0.0.1 winantiviruspro.com
127.0.0.1 www.winantiviruspro.com
127.0.0.1 win-anti-virus-pro.com
127.0.0.1 www.win-anti-virus-pro.com
127.0.0.1 windowenhancer.com
127.0.0.1 windrivecleaner.com
127.0.0.1 www.windrivecleaner.com
127.0.0.1 windrivesafe.com
127.0.0.1 www.windrivesafe.com
127.0.0.1 windupdates.com
127.0.0.1 winfirewall.com
127.0.0.1 www.winfirewall.com
127.0.0.1 winfixer.com
127.0.0.1 www.winfixer.com
127.0.0.1 winfixer2006.com
127.0.0.1 www.winfixer2006.com
127.0.0.1 win-in-casino.com
127.0.0.1 winmediacodec.com
127.0.0.1 www.winmediacodec.com
127.0.0.1 winmsn.com
127.0.0.1 winmxfrance.com
127.0.0.1 www.winmxfrance.com
127.0.0.1 winmx-freebie.com
127.0.0.1 www.winmx-freebie.com
127.0.0.1 winmx-music-download.com
127.0.0.1 www.winmx-music-download.com
127.0.0.1 winnanny.com
127.0.0.1 www.winnanny.com
127.0.0.1 winprotect.net
127.0.0.1 winrar-download-now.com
127.0.0.1 www.winrar-download-now.com
127.0.0.1 winrar-hq.com
127.0.0.1 www.winrar-hq.com
127.0.0.1 winrar-stop.com
127.0.0.1 www.winrar-stop.com
127.0.0.1 winshow.biz
127.0.0.1 winsoftware.com
127.0.0.1 www.winsoftware.com
127.0.0.1 wintvguide.com
127.0.0.1 www.wintvguide.com
127.0.0.1 win-virus-pro.com
127.0.0.1 www.win-virus-pro.com
127.0.0.1 winzip-11.com
127.0.0.1 www.winzip-11.com
127.0.0.1 winzip-hq.com
127.0.0.1 www.winzip-hq.com
127.0.0.1 wiresearch.com
127.0.0.1 wish7.com
127.0.0.1 wm.buhartes.info
127.0.0.1 www.wm.buhartes.info
127.0.0.1 wm.kannylizaciya.info
127.0.0.1 www.wm.kannylizaciya.info
127.0.0.1 wm.komforochka.info
127.0.0.1 www.wm.komforochka.info
127.0.0.1 wm.vother.info
127.0.0.1 www.wm.vother.info
127.0.0.1 wolfpacracing.com
127.0.0.1 wonder-context.com
127.0.0.1 www.wonder-context.com
127.0.0.1 woool.100888290cs.com
127.0.0.1 wordlist.jps.ru
127.0.0.1 WorldAntiSpy.com
127.0.0.1 www.WorldAntiSpy.com
127.0.0.1 worldbestadult.com
127.0.0.1 www.worldbestadult.com
127.0.0.1 worldray.com
127.0.0.1 www.worldray.com
127.0.0.1 worldsecurityonline.biz
127.0.0.1 www.worldsecurityonline.biz
127.0.0.1 worldtostart.com
127.0.0.1 www.worldtostart.com
127.0.0.1 worldusa.com
127.0.0.1 worldwideadvertisingservices.info
127.0.0.1 www.worldwideadvertisingservices.info
127.0.0.1 wowsearch.org
127.0.0.1 www.wowsearch.org
127.0.0.1 wpc2001.org
127.0.0.1 wrs.mcboo.com
127.0.0.1 wspzone.sexpornonline.com
127.0.0.1 wsupereva.it
127.0.0.1 www.wsupereva.it
127.0.0.1 www.www2.p0rt2.com
127.0.0.1 www2.p0rt2.com
127.0.0.1 www224.paypopup.com
127.0.0.1 www3.bigtrafficnetwork.com
127.0.0.1 www3.hadesunharuikeya.com
127.0.0.1 www4free.info
127.0.0.1 www5.worldray.com
127.0.0.1 www6.worldray.com
127.0.0.1 www.www7.logih.com
127.0.0.1 www7.logih.com
127.0.0.1 wwwadobe-download-now.com
127.0.0.1 www.www-audacity.com
127.0.0.1 www-audacity.com
127.0.0.1 wwwbet.net
127.0.0.1 wwwbetting.net
127.0.0.1 wwwCrazygirls-world.com
127.0.0.1 wwwdownloadwizard.com
127.0.0.1 www.www-free-tunes.com
127.0.0.1 www-free-tunes.com
127.0.0.1 wwwpokergames.com
127.0.0.1 wwwpokerplayers.com
127.0.0.1 wwwroulette.net
127.0.0.1 www.wwwsearch.biz
127.0.0.1 wwwsearch.biz
127.0.0.1 wwwsearchdrive.info
127.0.0.1 www.www-spyboot.com
127.0.0.1 www-spyboot.com
127.0.0.1 www.www-spybot.net
127.0.0.1 www-spybot.net
127.0.0.1 wwww.2211.net
127.0.0.1 wwww.adnet-plus.com
127.0.0.1 www.www-win-mx.com
127.0.0.1 www-win-mx.com
127.0.0.1 wwwxtremesoftware-ltd.com
127.0.0.1 wwwyahoo.downloadznow.net
127.0.0.1 www.wzdq.cn
127.0.0.1 wzdq.cn
127.0.0.1 x.full-tgp.net
127.0.0.1 xads.cliks.org
127.0.0.1 www.xathzesocc.com
127.0.0.1 xathzesocc.com
127.0.0.1 xbeta69.com
127.0.0.1 www.xbxxrvnyes.com
127.0.0.1 xbxxrvnyes.com
127.0.0.1 xcomics4u.com
127.0.0.1 xcorriere.it
127.0.0.1 www.xcorriere.it
127.0.0.1 x-google.net
127.0.0.1 www.xibu315.com
127.0.0.1 xibu315.com
127.0.0.1 xic-bs.com
127.0.0.1 www.xjupiter.com
127.0.0.1 xjupiter.com
127.0.0.1 xldr.com
127.0.0.1 x-library.com
127.0.0.1 xlola.underagehost.com
127.0.0.1 xmlsearch.mygeek.com
127.0.0.1 xorriere.it
127.0.0.1 www.xorriere.it
127.0.0.1 www.xosearchox.com
127.0.0.1 xosearchox.com
127.0.0.1 xp.attrezzi.biz
127.0.0.1 xp18.com
127.0.0.1 www.xpassgenerator.com
127.0.0.1 xpassgenerator.com
127.0.0.1 www.xpasswordmanager.com
127.0.0.1 xpasswordmanager.com
127.0.0.1 www.xp-vista.com
127.0.0.1 xp-vista.com
127.0.0.1 www.x-ratedclips.com
127.0.0.1 x-ratedclips.com
127.0.0.1 www.xrenoder.com
127.0.0.1 xrenoder.com
127.0.0.1 xrenosearch.com
127.0.0.1 xrensmagpost.com
127.0.0.1 www.xsec.org
127.0.0.1 xsec.org
127.0.0.1 xsex.ws
127.0.0.1 www.xsremover.com
127.0.0.1 xsremover.com
127.0.0.1 www.xtipp.de
127.0.0.1 xtipp.de
127.0.0.1 xtosearch.biz
127.0.0.1 www.xtosearch.biz
127.0.0.1 xtragay.com
127.0.0.1 xtremesoftware-ltd.com
127.0.0.1 xu.pl
127.0.0.1 xu.xu.pl
127.0.0.1 xupiter.com
127.0.0.1 www.xupiter.com
127.0.0.1 www.xvgate.com
127.0.0.1 xvgate.com
127.0.0.1 x-webdesign.com
127.0.0.1 www.xwebsearch.biz
127.0.0.1 xwebsearch.biz
127.0.0.1 xxlblog.info
127.0.0.1 www.xxlblog.info
127.0.0.1 xxx.com
127.0.0.1 www.xxx.com
127.0.0.1 www.xxxallvideo.com
127.0.0.1 xxxallvideo.com
127.0.0.1 xxxcategories.com
127.0.0.1 xxxemailxxx.com
127.0.0.1 www.xxxmovietour.com
127.0.0.1 xxxmovietour.com
127.0.0.1 www.xxxteenfilm.com
127.0.0.1 xxxteenfilm.com
127.0.0.1 xxxtoolbar.com
127.0.0.1 www.xxxzonevideo.com
127.0.0.1 xxxzonevideo.com
127.0.0.1 xzoomy.com
127.0.0.1 www.yahabags.com
127.0.0.1 yahabags.com
127.0.0.1 yahoo.downloadznow.net
127.0.0.1 yahoo.panet.org
127.0.0.1 yboeragu.com
127.0.0.1 www.yboeragu.com
127.0.0.1 yeak.net
127.0.0.1 y-e-l-l-o-w.com
127.0.0.1 yellow500.com
127.0.0.1 yezol.com
127.0.0.1 ygoogle.it
127.0.0.1 www.ygoogle.it
127.0.0.1 www.ygsondheks.info
127.0.0.1 ygsondheks.info
127.0.0.1 www.yim-stop.com
127.0.0.1 yim-stop.com
127.0.0.1 yiscali.it
127.0.0.1 www.yiscali.it
127.0.0.1 ymctavxiz.biz
127.0.0.1 www.ymctavxiz.biz
127.0.0.1 www.yoogee.com
127.0.0.1 yoogee.com
127.0.0.1 yoogle.it
127.0.0.1 www.yoogle.it
127.0.0.1 yootube.info
127.0.0.1 www.yops.biz
127.0.0.1 yops.biz
127.0.0.1 youfindall.com
127.0.0.1 youfindall.net
127.0.0.1 yourbookmarks.info
127.0.0.1 yourbookmarks.ws
127.0.0.1 www.yourcodec.com
127.0.0.1 yourcodec.com
127.0.0.1 www.yourieprotect.com
127.0.0.1 yourieprotect.com
127.0.0.1 www.youriesafety.com
127.0.0.1 youriesafety.com
127.0.0.1 www.youriesecure.com
127.0.0.1 youriesecure.com
127.0.0.1 your-prescriptions.net
127.0.0.1 www.yoursearchspace.com
127.0.0.1 yoursearchspace.com
127.0.0.1 yoursitebar.com
127.0.0.1 you-search.com.ru
127.0.0.1 you-search.com
127.0.0.1 ypir.com
127.0.0.1 ysa-info.net
127.0.0.1 www.ysbweb.com
127.0.0.1 ysbweb.com
127.0.0.1 ytiscali.it
127.0.0.1 www.ytiscali.it
127.0.0.1 ytrenitalia.it
127.0.0.1 www.ytrenitalia.it
127.0.0.1 yukohamano.com
127.0.0.1 yunibo.it
127.0.0.1 www.yunibo.it
127.0.0.1 ywebsearch.info
127.0.0.1 www.zabywjwzlr.biz.biz
127.0.0.1 zabywjwzlr.biz.biz
127.0.0.1 zalitalia.it
127.0.0.1 www.zalitalia.it
127.0.0.1 www.zangocash.com
127.0.0.1 zangocash.com
127.0.0.1 zapros.com
127.0.0.1 www.zcodec.com
127.0.0.1 zcodec.com
127.0.0.1 www.zdrqmpad.com
127.0.0.1 zdrqmpad.com
127.0.0.1 www.zelaznyworld.com
127.0.0.1 zelaznyworld.com
127.0.0.1 www.zenotecnico.com
127.0.0.1 zenotecnico.com
127.0.0.1 www.zenotecnico2.com
127.0.0.1 zenotecnico2.com
127.0.0.1 zero.bestmanage.org
127.0.0.1 zero.bestmanage0.org
127.0.0.1 zero.bestmanage1.org
127.0.0.1 zero.bestmanage2.org
127.0.0.1 zero.bestmanage3.org
127.0.0.1 zero.bestmanage4.org
127.0.0.1 zero.bestmanage5.org
127.0.0.1 zero.bestmanage6.org
127.0.0.1 zero.bestmanage7.org
127.0.0.1 zero.bestmanage8.org
127.0.0.1 zero.bestmanage9.org
127.0.0.1 zero.serverc.org
127.0.0.1 zero.sisdotnet.com
127.0.0.1 www.zero-codec.com
127.0.0.1 zero-codec.com
127.0.0.1 zesearch.com
127.0.0.1 www.zestyfind.com
127.0.0.1 zestyfind.com
127.0.0.1 www.zfxaqzkevi.com
127.0.0.1 zfxaqzkevi.com
127.0.0.1 www.zhmbscwdgk.biz
127.0.0.1 zhmbscwdgk.biz
127.0.0.1 www.zipcodec.com
127.0.0.1 zipcodec.com
127.0.0.1 ziportal.com
127.0.0.1 zipportal.com
127.0.0.1 www.zippy-lookup.com
127.0.0.1 zippy-lookup.com
127.0.0.1 www.zjkjw.gov.cn
127.0.0.1 zjkjw.gov.cn
127.0.0.1 www.znext.com
127.0.0.1 znext.com
127.0.0.1 www.zonealarm-download-now.com
127.0.0.1 zonealarm-download-now.com
127.0.0.1 www.zonealarm-stop.com
127.0.0.1 zonealarm-stop.com
127.0.0.1 www.zone-media.com
127.0.0.1 zone-media.com
127.0.0.1 zoneoffreeporn.com
127.0.0.1 zoofil.com
127.0.0.1 zoomegasite.com
127.0.0.1 zpwebsource.com
127.0.0.1 www.zpwebsource.com
127.0.0.1 zqavanjpn.biz
127.0.0.1 www.zqavanjpn.biz
127.0.0.1 www.z-quest.com
127.0.0.1 z-quest.com
127.0.0.1 zsupereva.it
127.0.0.1 www.zsupereva.it
127.0.0.1 www.zurrusco.com
127.0.0.1 zurrusco.com
127.0.0.1 zvimigdal.com
127.0.0.1 www.zxlinks.com
127.0.0.1 zxlinks.com
127.0.0.1 zyban-zocor-levitra.com
127.0.0.1 errordoctor.com
127.0.0.1 www.errordoctor.com
127.0.0.1 680180.net
127.0.0.1 www.680180.net
127.0.0.1 aaabesthomepage.com
127.0.0.1 www.aaabesthomepage.com
127.0.0.1 adlogix.com
127.0.0.1 www.adlogix.com
127.0.0.1 decknews.com
127.0.0.1 www.decknews.com
127.0.0.1 update.680180.net
127.0.0.1 websearch24.com
127.0.0.1 www.websearch24.com
127.0.0.1 addioerrori.com
127.0.0.1 www.addioerrori.com
127.0.0.1 antivirusgereedschap.com
127.0.0.1 www.antivirusgereedschap.com
127.0.0.1 aucunsvirus.com
127.0.0.1 www.aucunsvirus.com
127.0.0.1 echterschutz.com
127.0.0.1 www.echterschutz.com
127.0.0.1 fiksfeil.com
127.0.0.1 www.fiksfeil.com
127.0.0.1 harddrevvagt.com
127.0.0.1 www.harddrevvagt.com
127.0.0.1 herramientadereparacion.com
127.0.0.1 www.herramientadereparacion.com
127.0.0.1 hukommelsesbeskytter.com
127.0.0.1 www.hukommelsesbeskytter.com
127.0.0.1 kyoishusei.com
127.0.0.1 www.kyoishusei.com
127.0.0.1 megaviruskit.com
127.0.0.1 www.megaviruskit.com
127.0.0.1 memoiredefenseur.com
127.0.0.1 www.memoiredefenseur.com
127.0.0.1 mendingtool.com
127.0.0.1 www.mendingtool.com
127.0.0.1 minnesverktyg.com
127.0.0.1 www.minnesverktyg.com
127.0.0.1 nientevirus.com
127.0.0.1 www.nientevirus.com
127.0.0.1 pcopschoner.com
127.0.0.1 www.pcopschoner.com
127.0.0.1 pcopschoningsstel.com
127.0.0.1 www.pcopschoningsstel.com
127.0.0.1 puliscitutto.com
127.0.0.1 www.puliscitutto.com
127.0.0.1 rensningverktyg.com
127.0.0.1 www.rensningverktyg.com
127.0.0.1 reparameacas.com
127.0.0.1 www.reparameacas.com
127.0.0.1 reparamenazas.com
127.0.0.1 www.reparamenazas.com
127.0.0.1 reparetudo.com
127.0.0.1 www.reparetudo.com
127.0.0.1 shufukutsuru.com
127.0.0.1 www.shufukutsuru.com
127.0.0.1 sicheressystem.com
127.0.0.1 www.sicheressystem.com
127.0.0.1 syskontroller.com
127.0.0.1 www.syskontroller.com
127.0.0.1 trustedantivirus.com
127.0.0.1 www.trustedantivirus.com
127.0.0.1 utiledeprotection.com
127.0.0.1 www.utiledeprotection.com
127.0.0.1 web-fastserve.com
127.0.0.1 www.web-fastserve.com
127.0.0.1 prettycodec.com
127.0.0.1 www.prettycodec.com
127.0.0.1 ricenhancement.com
127.0.0.1 www.ricenhancement.com
127.0.0.1 hotcodec.net
127.0.0.1 www.hotcodec.net
127.0.0.1 nicecodec.net
127.0.0.1 www.nicecodec.net
127.0.0.1 hoetechnology.com
127.0.0.1 www.hoetechnology.com
127.0.0.1 xyzlimited.com
127.0.0.1 www.xyzlimited.com
127.0.0.1 servicevah.com
127.0.0.1 www.servicevah.com
127.0.0.1 webspyshield.com
127.0.0.1 www.webspyshield.com
127.0.0.1 bestsearch.cc
127.0.0.1 www.bestsearch.cc
127.0.0.1 dapsol.com
127.0.0.1 www.dapsol.com
127.0.0.1 hacker.com.cn
127.0.0.1 www.hacker.com.cn
127.0.0.1 envolo.peopleonpage.com
127.0.0.1 node2.ocslab.com
127.0.0.1 ocslab.com
127.0.0.1 www.ocslab.com
127.0.0.1 peopleonpage.com
127.0.0.1 www.peopleonpage.com
127.0.0.1 adchannel.contextplus.net
127.0.0.1 contextplus.net
127.0.0.1 www.contextplus.net
127.0.0.1 dload.contextplus.net
127.0.0.1 download.contextplus.net
127.0.0.1 ge.net
127.0.0.1 www.ge.net
127.0.0.1 70-music.com
127.0.0.1 www.70-music.com
127.0.0.1 80-music.com
127.0.0.1 www.80-music.com
127.0.0.1 90-music.com
127.0.0.1 www.90-music.com
127.0.0.1 addetect.com
127.0.0.1 www.addetect.com
127.0.0.1 adsniffer.com
127.0.0.1 www.adsniffer.com
127.0.0.1 adwarecommander.com
127.0.0.1 www.adwarecommander.com
127.0.0.1 adwaregold.com
127.0.0.1 www.adwaregold.com
127.0.0.1 adwarepatrol.com
127.0.0.1 www.adwarepatrol.com
127.0.0.1 adwareplatinum.com
127.0.0.1 www.adwareplatinum.com
127.0.0.1 adwareremover.ws
127.0.0.1 www.adwareremover.ws
127.0.0.1 adwaresafety.com
127.0.0.1 www.adwaresafety.com
127.0.0.1 adwarexp.com
127.0.0.1 www.adwarexp.com
127.0.0.1 alertspy.com
127.0.0.1 www.alertspy.com
127.0.0.1 americanautobargains.com
127.0.0.1 www.americanautobargains.com
127.0.0.1 antispamassistant.com
127.0.0.1 www.antispamassistant.com
127.0.0.1 antispamdeluxe.com
127.0.0.1 www.antispamdeluxe.com
127.0.0.1 antispyadvanced.com
127.0.0.1 www.antispyadvanced.com
127.0.0.1 antispywarexp.com
127.0.0.1 www.antispywarexp.com
127.0.0.1 antivirusadvance.com
127.0.0.1 www.antivirusadvance.com
127.0.0.1 antiviruspremium.com
127.0.0.1 www.antiviruspremium.com
127.0.0.1 ares.click-new-download.com
127.0.0.1 www.ares.click-new-download.com
127.0.0.1 autobargains.org
127.0.0.1 www.autobargains.org
127.0.0.1 autobargainsnetwork.com
127.0.0.1 www.autobargainsnetwork.com
127.0.0.1 avadvance.com
127.0.0.1 www.avadvance.com
127.0.0.1 bearshare.click-new-download.com
127.0.0.1 www.bearshare.click-new-download.com
127.0.0.1 bittorrent.click-new-download.com
127.0.0.1 www.bittorrent.click-new-download.com
127.0.0.1 burningsite.com
127.0.0.1 www.burningsite.com
127.0.0.1 cdcopysite.com
127.0.0.1 www.cdcopysite.com
127.0.0.1 cinemadownload.com
127.0.0.1 www.cinemadownload.com
127.0.0.1 courtrecordslookup.com
127.0.0.1 www.courtrecordslookup.com
127.0.0.1 dateanybabe.com
127.0.0.1 www.dateanybabe.com
127.0.0.1 dateanychick.com
127.0.0.1 www.dateanychick.com
127.0.0.1 datingdoctorsite.com
127.0.0.1 www.datingdoctorsite.com
127.0.0.1 detectivehound.com
127.0.0.1 www.detectivehound.com
127.0.0.1 detectivesearches.com
127.0.0.1 www.detectivesearches.com
127.0.0.1 downloadacceleratorsite.com
127.0.0.1 www.downloadacceleratorsite.com
127.0.0.1 downloadaresnow.com
127.0.0.1 www.downloadaresnow.com
127.0.0.1 dvdxgold.com
127.0.0.1 www.dvdxgold.com
127.0.0.1 dvdxpremium.com
127.0.0.1 www.dvdxpremium.com
127.0.0.1 easycdrip.com
127.0.0.1 www.easycdrip.com
127.0.0.1 easymovieplayer.com
127.0.0.1 www.easymovieplayer.com
127.0.0.1 easymus.cn
127.0.0.1 www.easymus.cn
127.0.0.1 easypspdownloads.com
127.0.0.1 www.easypspdownloads.com
127.0.0.1 e-mp3now.com
127.0.0.1 www.e-mp3now.com
127.0.0.1 emule.click-new-download.com
127.0.0.1 www.emule.click-new-download.com
127.0.0.1 etdscanner.com
127.0.0.1 www.etdscanner.com
127.0.0.1 ezdvdx.com
127.0.0.1 www.ezdvdx.com
127.0.0.1 fastmp.net
127.0.0.1 www.fastmp.net
127.0.0.1 fastpspdownloads.com
127.0.0.1 www.fastpspdownloads.com
127.0.0.1 fasttvdownloads.com
127.0.0.1 www.fasttvdownloads.com
127.0.0.1 fidoproblems.com
127.0.0.1 www.fidoproblems.com
127.0.0.1 filesharing-downloads.com
127.0.0.1 www.filesharing-downloads.com
127.0.0.1 filevoom.com
127.0.0.1 www.filevoom.com
127.0.0.1 firewallgold.com
127.0.0.1 www.firewallgold.com
127.0.0.1 firewallprotectionpro.com
127.0.0.1 www.firewallprotectionpro.com
127.0.0.1 firewallprotectionsite.com
127.0.0.1 www.firewallprotectionsite.com
127.0.0.1 firewallprotector.com
127.0.0.1 www.firewallprotector.com
127.0.0.1 frostwire.click-new-download.com
127.0.0.1 www.frostwire.click-new-download.com
127.0.0.1 fullmusicdownload.com
127.0.0.1 www.fullmusicdownload.com
127.0.0.1 fullpaidsurveys.com
127.0.0.1 www.fullpaidsurveys.com
127.0.0.1 fullsoftwarecenter.com
127.0.0.1 www.fullsoftwarecenter.com
127.0.0.1 fulltvdownloading.com
127.0.0.1 www.fulltvdownloading.com
127.0.0.1 getpcmusic.com
127.0.0.1 www.getpcmusic.com
127.0.0.1 get-zune.com
127.0.0.1 www.get-zune.com
127.0.0.1 goldensurvey.com
127.0.0.1 www.goldensurvey.com
127.0.0.1 guyvsgirl.com
127.0.0.1 www.guyvsgirl.com
127.0.0.1 hotmp3download.com
127.0.0.1 www.hotmp3download.com
127.0.0.1 hotmp3now.com
127.0.0.1 www.hotmp3now.com
127.0.0.1 imesh.click-new-download.com
127.0.0.1 www.imesh.click-new-download.com
127.0.0.1 imp3download.com
127.0.0.1 www.imp3download.com
127.0.0.1 imusicadvance.com
127.0.0.1 www.imusicadvance.com
127.0.0.1 instantpsp.com
127.0.0.1 www.instantpsp.com
127.0.0.1 ipo.net
127.0.0.1 www.ipo.net
127.0.0.1 ipoddownloadingpro.com
127.0.0.1 www.ipoddownloadingpro.com
127.0.0.1 ipod-wiz.com
127.0.0.1 www.ipod-wiz.com
127.0.0.1 ipspdownload.com
127.0.0.1 www.ipspdownload.com
127.0.0.1 itvdownload.com
127.0.0.1 www.itvdownload.com
127.0.0.1 k9instructor.com
127.0.0.1 www.k9instructor.com
127.0.0.1 klitegeneration.com
127.0.0.1 www.klitegeneration.com
127.0.0.1 k-litegold.com
127.0.0.1 klitepro.com
127.0.0.1 k-litepro.com
127.0.0.1 www.k-litepro.com
127.0.0.1 k-litetk.com
127.0.0.1 limewire.click-new-download.com
127.0.0.1 www.limewire.click-new-download.com
127.0.0.1 masterpsp.com
127.0.0.1 www.masterpsp.com
127.0.0.1 mediaburning.com
127.0.0.1 www.mediaburning.com
127.0.0.1 microantivirus.com
127.0.0.1 www.microantivirus.com
127.0.0.1 microantivirusxp.com
127.0.0.1 www.microantivirusxp.com
127.0.0.1 morpheus.click-new-download.com
127.0.0.1 www.morpheus.click-new-download.com
127.0.0.1 moviedownloadreview.biz
127.0.0.1 www.moviedownloadreview.biz
127.0.0.1 mp3downloadin.net
127.0.0.1 www.mp3downloadin.net
127.0.0.1 mp3downloadpro.com
127.0.0.1 www.mp3downloadpro.com
127.0.0.1 mp3downloadsnow.com
127.0.0.1 www.mp3downloadsnow.com
127.0.0.1 mp3easyplay.com
127.0.0.1 www.mp3easyplay.com
127.0.0.1 mp3musicdirect.com
127.0.0.1 www.mp3musicdirect.com
127.0.0.1 mp3musichit.com
127.0.0.1 www.mp3musichit.com
127.0.0.1 mp3must.com
127.0.0.1 www.mp3must.com
127.0.0.1 mp3review.biz
127.0.0.1 www.mp3review.biz
127.0.0.1 mp3universal.net
127.0.0.1 www.mp3universal.net
127.0.0.1 musicaccess.com
127.0.0.1 www.musicaccess.com
127.0.0.1 musicsite.com
127.0.0.1 www.musicsite.com
127.0.0.1 myipodaccess.com
127.0.0.1 www.myipodaccess.com
127.0.0.1 my-ipodaccess.com
127.0.0.1 www.my-ipodaccess.com
127.0.0.1 mypspcenter.com
127.0.0.1 www.mypspcenter.com
127.0.0.1 mypspdownloading.com
127.0.0.1 www.mypspdownloading.com
127.0.0.1 myvirusguardian.com
127.0.0.1 www.myvirusguardian.com
127.0.0.1 netdogtrainer.com
127.0.0.1 www.netdogtrainer.com
127.0.0.1 netfreemoney.com
127.0.0.1 www.netfreemoney.com
127.0.0.1 netonlineinvestigators.com
127.0.0.1 www.netonlineinvestigators.com
127.0.0.1 netpaidsurveys.com
127.0.0.1 www.netpaidsurveys.com
127.0.0.1 netpspdownloads.com
127.0.0.1 www.netpspdownloads.com
127.0.0.1 netpspmovies.com
127.0.0.1 www.netpspmovies.com
127.0.0.1 onlineinvestigator.com
127.0.0.1 www.onlineinvestigator.com
127.0.0.1 paidshopping.com
127.0.0.1 www.paidshopping.com
127.0.0.1 paidsurveys.com
127.0.0.1 www.paidsurveys.com
127.0.0.1 penile-enlargement.biz
127.0.0.1 www.penile-enlargement.biz
127.0.0.1 peoplelookup.info
127.0.0.1 www.peoplelookup.info
127.0.0.1 peopleregistry.info
127.0.0.1 www.peopleregistry.info
127.0.0.1 peoplesearchengine.info
127.0.0.1 www.peoplesearchengine.info
127.0.0.1 pestbot.com
127.0.0.1 www.pestbot.com
127.0.0.1 pestguardian.com
127.0.0.1 www.pestguardian.com
127.0.0.1 platinumrevi.ws
127.0.0.1 www.platinumrevi.ws
127.0.0.1 proadware.com
127.0.0.1 www.proadware.com
127.0.0.1 publicrecordlookup.com
127.0.0.1 www.publicrecordlookup.com
127.0.0.1 quickdvdcopy.com
127.0.0.1 www.quickdvdcopy.com
127.0.0.1 quickipoddownloads.com
127.0.0.1 www.quickipoddownloads.com
127.0.0.1 registryassistant.com
127.0.0.1 www.registryassistant.com
127.0.0.1 registrydebug.com
127.0.0.1 www.registrydebug.com
127.0.0.1 registryrepair.ws
127.0.0.1 www.registryrepair.ws
127.0.0.1 repocarfinder.com
127.0.0.1 www.repocarfinder.com
127.0.0.1 reverseindexlookup.com
127.0.0.1 www.reverseindexlookup.com
127.0.0.1 reversephonesite.com
127.0.0.1 www.reversephonesite.com
127.0.0.1 shareaza.click-new-download.com
127.0.0.1 www.shareaza.click-new-download.com
127.0.0.1 softwaresite.com
127.0.0.1 www.softwaresite.com
127.0.0.1 spyadvanced.com
127.0.0.1 www.spyadvanced.com
127.0.0.1 spywarecommander.com
127.0.0.1 www.spywarecommander.com
127.0.0.1 spywaredeluxe.com
127.0.0.1 www.spywaredeluxe.com
127.0.0.1 spywareremoval.ws
127.0.0.1 www.spywareremoval.ws
127.0.0.1 spywarexp.com
127.0.0.1 www.spywarexp.com
127.0.0.1 suprnova.cn
127.0.0.1 www.suprnova.cn
127.0.0.1 thespamblock.com
127.0.0.1 www.thespamblock.com
127.0.0.1 topmp3choices.com
127.0.0.1 www.topmp3choices.com
127.0.0.1 tvadvanced.com
127.0.0.1 www.tvadvanced.com
127.0.0.1 tvnowsite.com
127.0.0.1 www.tvnowsite.com
127.0.0.1 tvshowcollection.com
127.0.0.1 www.tvshowcollection.com
127.0.0.1 ultimatemp3player.com
127.0.0.1 www.ultimatemp3player.com
127.0.0.1 ultimatevideosite.com
127.0.0.1 www.ultimatevideosite.com
127.0.0.1 unknownip.com
127.0.0.1 www.unknownip.com
127.0.0.1 unlimite.net
127.0.0.1 www.unlimite.net
127.0.0.1 unlimitedmp3downloads.com
127.0.0.1 www.unlimitedmp3downloads.com
127.0.0.1 unlimitedtvshowdownload.com
127.0.0.1 www.unlimitedtvshowdownload.com
127.0.0.1 videoplayersite.com
127.0.0.1 www.videoplayersite.com
127.0.0.1 viruscrusher.com
127.0.0.1 www.viruscrusher.com
127.0.0.1 virusnuke.com
127.0.0.1 www.virusnuke.com
127.0.0.1 virusscansite.com
127.0.0.1 www.virusscansite.com
127.0.0.1 webaccelerating.com
127.0.0.1 www.webaccelerating.com
127.0.0.1 webinvestigator.com
127.0.0.1 www.webinvestigator.com
127.0.0.1 webiphoneaccess.com
127.0.0.1 www.webiphoneaccess.com
127.0.0.1 webiphonedownloads.com
127.0.0.1 www.webiphonedownloads.com
127.0.0.1 webipoddownload.com
127.0.0.1 www.webipoddownload.com
127.0.0.1 webpspdownload.com
127.0.0.1 www.webpspdownload.com
127.0.0.1 winmx.click-new-download.com
127.0.0.1 www.winmx.click-new-download.com
127.0.0.1 click-new-download.com
127.0.0.1 www.click-new-download.com
127.0.0.1 mp3mus.cn
127.0.0.1 www.mp3mus.cn
127.0.0.1 clckm.com
127.0.0.1 www.clckm.com
127.0.0.1 forseo.com
127.0.0.1 www.forseo.com
127.0.0.1 searchdom.net
127.0.0.1 www.searchdom.net
127.0.0.1 www.www-Spybot.net
127.0.0.1 adultsonlyvids.com
127.0.0.1 www.adultsonlyvids.com
127.0.0.1 best[bleep]vids.com
127.0.0.1 www.best[bleep]vids.com
127.0.0.1 bestxclips.com
127.0.0.1 www.bestxclips.com
127.0.0.1 bestxxxmpegs.com
127.0.0.1 www.bestxxxmpegs.com
127.0.0.1 downloadxmoveis.com
127.0.0.1 www.downloadxmoveis.com
127.0.0.1 downloadxvids.com
127.0.0.1 www.downloadxvids.com
127.0.0.1 dvicodec.com
127.0.0.1 www.dvicodec.com
127.0.0.1 efcsoftware.com
127.0.0.1 www.efcsoftware.com
127.0.0.1 exclusiv
  • 0

#18
Kenny94

Kenny94

    Member 1K

  • Member
  • PipPipPipPip
  • 1,595 posts
Lets do this, run superantispyware on your computer donatbalmoral..

Please download SUPERAntiSpyware Home Edition (free version)
  • Install it and double-click the icon on your desktop to run it.
  • It will ask if you want to update the program definitions, click Yes.
  • Under Configuration and Preferences, click the Preferences button.
  • Click the Scanning Control tab.
  • Under Scanner Options make sure the following are checked:
    • Close browsers before scanning
    • Scan for tracking cookies
    • Terminate memory threats before quarantining.
    • Please leave the others unchecked.
    • Click the Close button to leave the control center screen.
  • On the main screen, under Scan for Harmful Software click Scan your computer.
  • On the left check C:\Fixed Drive.
  • On the right, under Complete Scan, choose Perform Complete Scan.
  • Click Next to start the scan. Please be patient while it scans your computer.
  • After the scan is complete a summary box will appear. Click OK.
  • Make sure everything in the white box has a check next to it, then click Next.
  • It will quarantine what it found and if it asks if you want to reboot, click Yes.
  • To retrieve the removal information for me please do the following:
    • After reboot, double-click the SUPERAntispyware icon on your desktop.
    • Click Preferences. Click the Statistics/Logs tab.
    • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    • It will open in your default text editor (such as Notepad/Wordpad).
    • Please highlight everything in the notepad, then right-click and choose copy.
  • Click close and close again to exit the program.
  • Save the log information. And paste this info along with your HijackThis log.

  • 0

#19
Kenny94

Kenny94

    Member 1K

  • Member
  • PipPipPipPip
  • 1,595 posts
Hi donatbalmoral

I left this out on my last post. Run superantispyware and then SDFix.exe. Thanks!

Download SDFix and save it to your Desktop.

Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

Please then reboot your computer in Safe Mode by doing the following :
  • Restart your computer
  • After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
  • Instead of Windows loading as normal, the Advanced Options Menu should appear;
  • Select the first option, to run Windows in Safe Mode, then press Enter.
  • Choose your usual account.
  • Open the extracted SDFix folder and double click RunThis.bat to start the script.
  • Type Y to begin the cleanup process.
  • It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
  • Press any Key and it will restart the PC.
  • When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
  • Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt
    (Report.txt will also be copied to Clipboard ready for posting back on the forum).
  • Finally paste the contents of the Report.txt back on the forum with a new HijackThis log


In your next reply, please include these log(s):

* Superantispyware scan report
* Report.tx (SDFix)
* HijackThis log (new)

  • 0

#20
Kenny94

Kenny94

    Member 1K

  • Member
  • PipPipPipPip
  • 1,595 posts
donatbalmoral, the blank post issue has been fix. No need to use wrap in quotes tags... :)
  • 0

#21
donatbalmoral

donatbalmoral

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
Hi Kenny94, Thanks again for all your great help!

Superantispyware scan report below. I am now going on to do the SDFix stuff and will revert with the Report.txt and HijackThis log.

Best regards,


SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 12/14/2007 at 09:21 PM

Application Version : 3.9.1008

Core Rules Database Version : 3361
Trace Rules Database Version: 1360

Scan type : Complete Scan
Total Scan Time : 01:46:00

Memory items scanned : 644
Memory threats detected : 0
Registry items scanned : 7032
Registry threats detected : 119
File items scanned : 108682
File threats detected : 24

Adware.Tracking Cookie
C:\Documents and Settings\Don\Cookies\don@atdmt[1].txt
C:\Documents and Settings\Don\Cookies\don@imrworldwide[2].txt
C:\Documents and Settings\Don\Cookies\don@overture[1].txt
C:\Documents and Settings\Don\Cookies\[email protected][2].txt
C:\Documents and Settings\Don\Desktop\Old PC\Local Disk (F)\WINDOWS\Cookies\[email protected][1].txt
C:\Documents and Settings\Don\Desktop\Old PC\Local Disk (F)\WINDOWS\Cookies\[email protected][1].txt
C:\Documents and Settings\Don\Desktop\Old PC\Local Disk (F)\WINDOWS\Cookies\[email protected][2].txt
C:\Documents and Settings\Don\Desktop\Old PC\Local Disk (F)\WINDOWS\Cookies\anyuser@atdmt[1].txt
C:\Documents and Settings\Don\Desktop\Old PC\Local Disk (F)\WINDOWS\Cookies\anyuser@doubleclick[1].txt
C:\Documents and Settings\Don\Desktop\Old PC\Local Disk (F)\WINDOWS\Profiles\dg.green\Cookies\[email protected][1].txt
C:\Documents and Settings\Don\Desktop\Old PC\Local Disk (F)\WINDOWS\Profiles\dg.green\Cookies\[email protected][1].txt
C:\Documents and Settings\Don\Desktop\Old PC\Local Disk (F)\WINDOWS\Profiles\dg.green\Cookies\[email protected][2].txt
C:\Documents and Settings\Don\Desktop\Old PC\Local Disk (F)\WINDOWS\Profiles\dg.green\Cookies\anyuser@atdmt[1].txt
C:\Documents and Settings\Don\Desktop\Old PC\Local Disk (F)\WINDOWS\Profiles\dg.green\Cookies\anyuser@doubleclick[1].txt
C:\Documents and Settings\LocalService\Cookies\system@2o7[1].txt
C:\WINDOWS\Temp\Cookies\[email protected][1].txt
C:\WINDOWS\Temp\Cookies\[email protected][1].txt

Browser Hijacker.Internet Explorer Settings Hijack
HKU\S-1-5-21-974040889-2070146034-147808962-1008\Software\Microsoft\Internet Explorer\Main#Start Page [ http://softwarerefer...=...6Ojg5&lid=2 ]

Malware.VirusHeal
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\Dmscw
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\fBledMxgqyp
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\FileListInfo
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\FileListInfo#RegFormat
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\FileListInfo#ButtonText
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\FileListInfo#ButtonTip
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\FileListInfo#ButtonImage
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\FileListInfo#MenuBasic
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\FileListInfo#DefaultMenuItem
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\FileListInfo#OptionSupport
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\FileListInfo#OptionTooltip
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\FileListInfo#Order
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\FileListInfo#ByRegKey
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\FileListInfo#ByAsking
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\FileListInfo#ByOSVersion
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\FileListInfo#ByCameraFeature
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\FileListInfo#ByCameraFunction
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\FileListInfo#ByCameraCategory
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\FileListInfo#ByPluggedInCameraFeature
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\hIwvcUlzsqa
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\Implemented Categories
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\Implemented Categories\{F0AB87BF-FE66-4BD7-BC71-43D811AA1BCB}
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\InprocServer32
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\InprocServer32#ThreadingModel
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\jNYhMpu
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\mnjhwwJDc
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\nsqlhOypiuow
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\ProgID
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\rluytbiezi
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\shnnyYtm
HKCR\CLSID\{FA222968-C5BA-FA9F-6458-C63131328081}\VersionIndependentProgID

Malware.MalwareBurn
HKCR\TypeLib\{DB7B7B16-AC9F-46D4-833A-757CEF63E95A}
HKCR\TypeLib\{DB7B7B16-AC9F-46D4-833A-757CEF63E95A}\1.0
HKCR\TypeLib\{DB7B7B16-AC9F-46D4-833A-757CEF63E95A}\1.0\0
HKCR\TypeLib\{DB7B7B16-AC9F-46D4-833A-757CEF63E95A}\1.0\0\win32
HKCR\TypeLib\{DB7B7B16-AC9F-46D4-833A-757CEF63E95A}\1.0\FLAGS
HKCR\TypeLib\{DB7B7B16-AC9F-46D4-833A-757CEF63E95A}\1.0\HELPDIR
HKCR\Interface\{111E76CD-5697-4AB1-B565-5EEEE0C4D32C}
HKCR\Interface\{111E76CD-5697-4AB1-B565-5EEEE0C4D32C}\ProxyStubClsid
HKCR\Interface\{111E76CD-5697-4AB1-B565-5EEEE0C4D32C}\ProxyStubClsid32
HKCR\Interface\{111E76CD-5697-4AB1-B565-5EEEE0C4D32C}\TypeLib
HKCR\Interface\{111E76CD-5697-4AB1-B565-5EEEE0C4D32C}\TypeLib#Version
HKCR\Interface\{1DD6C99E-1633-44A4-A79B-F94025B84464}
HKCR\Interface\{1DD6C99E-1633-44A4-A79B-F94025B84464}\ProxyStubClsid
HKCR\Interface\{1DD6C99E-1633-44A4-A79B-F94025B84464}\ProxyStubClsid32
HKCR\Interface\{1DD6C99E-1633-44A4-A79B-F94025B84464}\TypeLib
HKCR\Interface\{1DD6C99E-1633-44A4-A79B-F94025B84464}\TypeLib#Version
HKCR\Interface\{27FDB0C3-B5D9-4DA0-8C34-F98D0D7F3070}
HKCR\Interface\{27FDB0C3-B5D9-4DA0-8C34-F98D0D7F3070}\ProxyStubClsid
HKCR\Interface\{27FDB0C3-B5D9-4DA0-8C34-F98D0D7F3070}\ProxyStubClsid32
HKCR\Interface\{27FDB0C3-B5D9-4DA0-8C34-F98D0D7F3070}\TypeLib
HKCR\Interface\{27FDB0C3-B5D9-4DA0-8C34-F98D0D7F3070}\TypeLib#Version
HKCR\Interface\{304C8263-A779-444B-BCC7-C7A4571089B9}
HKCR\Interface\{304C8263-A779-444B-BCC7-C7A4571089B9}\ProxyStubClsid
HKCR\Interface\{304C8263-A779-444B-BCC7-C7A4571089B9}\ProxyStubClsid32
HKCR\Interface\{304C8263-A779-444B-BCC7-C7A4571089B9}\TypeLib
HKCR\Interface\{304C8263-A779-444B-BCC7-C7A4571089B9}\TypeLib#Version
HKCR\Interface\{43F5D878-F503-4A42-BB8C-757AA4FE5EF2}
HKCR\Interface\{43F5D878-F503-4A42-BB8C-757AA4FE5EF2}\ProxyStubClsid
HKCR\Interface\{43F5D878-F503-4A42-BB8C-757AA4FE5EF2}\ProxyStubClsid32
HKCR\Interface\{43F5D878-F503-4A42-BB8C-757AA4FE5EF2}\TypeLib
HKCR\Interface\{43F5D878-F503-4A42-BB8C-757AA4FE5EF2}\TypeLib#Version
HKCR\Interface\{44CF1AB5-66DB-41B6-A603-B0491E3D77E1}
HKCR\Interface\{44CF1AB5-66DB-41B6-A603-B0491E3D77E1}\ProxyStubClsid
HKCR\Interface\{44CF1AB5-66DB-41B6-A603-B0491E3D77E1}\ProxyStubClsid32
HKCR\Interface\{44CF1AB5-66DB-41B6-A603-B0491E3D77E1}\TypeLib
HKCR\Interface\{44CF1AB5-66DB-41B6-A603-B0491E3D77E1}\TypeLib#Version
HKCR\Interface\{55439BEC-53C8-40B1-A887-00DC19881D05}
HKCR\Interface\{55439BEC-53C8-40B1-A887-00DC19881D05}\ProxyStubClsid
HKCR\Interface\{55439BEC-53C8-40B1-A887-00DC19881D05}\ProxyStubClsid32
HKCR\Interface\{55439BEC-53C8-40B1-A887-00DC19881D05}\TypeLib
HKCR\Interface\{55439BEC-53C8-40B1-A887-00DC19881D05}\TypeLib#Version
HKCR\Interface\{5C2529F3-212C-4071-A3B2-BCE187C05BA4}
HKCR\Interface\{5C2529F3-212C-4071-A3B2-BCE187C05BA4}\ProxyStubClsid
HKCR\Interface\{5C2529F3-212C-4071-A3B2-BCE187C05BA4}\ProxyStubClsid32
HKCR\Interface\{5C2529F3-212C-4071-A3B2-BCE187C05BA4}\TypeLib
HKCR\Interface\{5C2529F3-212C-4071-A3B2-BCE187C05BA4}\TypeLib#Version
HKCR\Interface\{66690145-C842-4277-98AA-2DFB6E3C9ED0}
HKCR\Interface\{66690145-C842-4277-98AA-2DFB6E3C9ED0}\ProxyStubClsid
HKCR\Interface\{66690145-C842-4277-98AA-2DFB6E3C9ED0}\ProxyStubClsid32
HKCR\Interface\{66690145-C842-4277-98AA-2DFB6E3C9ED0}\TypeLib
HKCR\Interface\{66690145-C842-4277-98AA-2DFB6E3C9ED0}\TypeLib#Version
HKCR\Interface\{7EBEB35D-5C00-45DF-950D-5B88AAF99970}
HKCR\Interface\{7EBEB35D-5C00-45DF-950D-5B88AAF99970}\ProxyStubClsid
HKCR\Interface\{7EBEB35D-5C00-45DF-950D-5B88AAF99970}\ProxyStubClsid32
HKCR\Interface\{7EBEB35D-5C00-45DF-950D-5B88AAF99970}\TypeLib
HKCR\Interface\{7EBEB35D-5C00-45DF-950D-5B88AAF99970}\TypeLib#Version
HKCR\Interface\{8AAEFEE3-F0F1-48D2-B4AF-1140C2CF0084}
HKCR\Interface\{8AAEFEE3-F0F1-48D2-B4AF-1140C2CF0084}\ProxyStubClsid
HKCR\Interface\{8AAEFEE3-F0F1-48D2-B4AF-1140C2CF0084}\ProxyStubClsid32
HKCR\Interface\{8AAEFEE3-F0F1-48D2-B4AF-1140C2CF0084}\TypeLib
HKCR\Interface\{8AAEFEE3-F0F1-48D2-B4AF-1140C2CF0084}\TypeLib#Version
HKCR\Interface\{98405BD6-42C5-4ED7-BA88-66B148CF6384}
HKCR\Interface\{98405BD6-42C5-4ED7-BA88-66B148CF6384}\ProxyStubClsid
HKCR\Interface\{98405BD6-42C5-4ED7-BA88-66B148CF6384}\ProxyStubClsid32
HKCR\Interface\{98405BD6-42C5-4ED7-BA88-66B148CF6384}\TypeLib
HKCR\Interface\{98405BD6-42C5-4ED7-BA88-66B148CF6384}\TypeLib#Version
HKCR\Interface\{D5AAE7D9-9B3E-434E-86FE-32099CBEFBF6}
HKCR\Interface\{D5AAE7D9-9B3E-434E-86FE-32099CBEFBF6}\ProxyStubClsid
HKCR\Interface\{D5AAE7D9-9B3E-434E-86FE-32099CBEFBF6}\ProxyStubClsid32
HKCR\Interface\{D5AAE7D9-9B3E-434E-86FE-32099CBEFBF6}\TypeLib
HKCR\Interface\{D5AAE7D9-9B3E-434E-86FE-32099CBEFBF6}\TypeLib#Version
HKCR\Interface\{F1B71EAF-B846-4AD4-B24F-1A60E2B591EB}
HKCR\Interface\{F1B71EAF-B846-4AD4-B24F-1A60E2B591EB}\ProxyStubClsid
HKCR\Interface\{F1B71EAF-B846-4AD4-B24F-1A60E2B591EB}\ProxyStubClsid32
HKCR\Interface\{F1B71EAF-B846-4AD4-B24F-1A60E2B591EB}\TypeLib
HKCR\Interface\{F1B71EAF-B846-4AD4-B24F-1A60E2B591EB}\TypeLib#Version
HKCR\Interface\{F6951C72-5C71-4C23-BA63-FAB949FE18FF}
HKCR\Interface\{F6951C72-5C71-4C23-BA63-FAB949FE18FF}\ProxyStubClsid
HKCR\Interface\{F6951C72-5C71-4C23-BA63-FAB949FE18FF}\ProxyStubClsid32
HKCR\Interface\{F6951C72-5C71-4C23-BA63-FAB949FE18FF}\TypeLib
HKCR\Interface\{F6951C72-5C71-4C23-BA63-FAB949FE18FF}\TypeLib#Version
HKCR\Interface\{F9E0F1D4-1CDD-4287-B282-BB22CE2B2966}
HKCR\Interface\{F9E0F1D4-1CDD-4287-B282-BB22CE2B2966}\ProxyStubClsid
HKCR\Interface\{F9E0F1D4-1CDD-4287-B282-BB22CE2B2966}\ProxyStubClsid32
HKCR\Interface\{F9E0F1D4-1CDD-4287-B282-BB22CE2B2966}\TypeLib
HKCR\Interface\{F9E0F1D4-1CDD-4287-B282-BB22CE2B2966}\TypeLib#Version

Malware.LocusSoftware Inc/ConfidentSurf
C:\Program Files\Common Files\ConfidentSurf\mc.exe
C:\Program Files\Common Files\ConfidentSurf

Malware.LocusSoftware Inc/ErrClean
C:\DOCUMENTS AND SETTINGS\VANESSA\LOCAL SETTINGS\TEMP\NI.UGDC_0001_N122M2610\SETUP.EXE

Malware.LocusSoftware Inc/Gen
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP925\A0053346.EXE

Rogue.PCPrivacyTools/Component
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP925\A0053347.EXE

Rogue.StorageProtector/Trace
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP930\A0063060.EXE

Trojan.Net-MSV/VPS-H
C:\SYSTEM VOLUME INFORMATION\_RESTORE{46DE8921-1D39-44D2-A9E9-64119261F211}\RP940\A0066156.DLL
  • 0

#22
Kenny94

Kenny94

    Member 1K

  • Member
  • PipPipPipPip
  • 1,595 posts

I am now going on to do the SDFix stuff and will revert with the Report.txt and HijackThis log.

:) But be sure you run SDFix first.. :)
  • 0

#23
donatbalmoral

donatbalmoral

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
Hi Kenny94,

I ran SDFix last night per your directions. Below is the report.txt and also the new HijackThis log.

Best regards,


SDFix: Version 1.118

Run by Don on Fri 14/12/2007 at 09:50 PM

Microsoft Windows XP [Version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files:

Trojan Files Found:

C:\WINDOWS\nethop.exe - Deleted
C:\WINDOWS\rs.txt - Deleted
C:\WINDOWS\search_res.txt - Deleted




Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

catchme 0.3.1262.1 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-14 21:58:23
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

C:\Program Files\Microsoft Windows OneCare Live\ClientSD\Ent.dat 4279 bytes
C:\Program Files\Microsoft Windows OneCare Live\ClientSD\Prov
C:\Program Files\Microsoft Windows OneCare Live\ClientSD\Prov\prov.xml 282 bytes
C:\Program Files\Microsoft Windows OneCare Live\ClientSD\Prov\service.xml 6803 bytes
C:\Program Files\Microsoft Windows OneCare Live\ClientSD\Prov\service.xml.bak 6803 bytes
C:\Program Files\Microsoft Windows OneCare Live\ClientSD\Prov\user.xml 1614 bytes
C:\Program Files\Microsoft Windows OneCare Live\ClientSD\Prov\user.xml.bak 1614 bytes
C:\Program Files\Microsoft Windows OneCare Live\ClientSD\StartupCleaner
C:\Program Files\Microsoft Windows OneCare Live\ClientSD\StartupCleaner\Backup
C:\Program Files\Microsoft Windows OneCare Live\ClientSD\SubInfo.xml 0 bytes

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 10


Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Telstra\\Cable Login\\bpcService.exe"="C:\\Program Files\\Telstra\\Cable Login\\bpcService.exe:*:Enabled:BigPond Cable Client (running as a service)"
"D:\\Setup\\HPZnet01.exe"="D:\\Setup\\HPZnet01.exe:*:Enabled:ICE Network Plug in"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:HP Digital Imaging Monitor (CUE)"
"C:\\Program Files\\Microsoft ActiveSync\\WCESCOMM.EXE"="C:\\Program Files\\Microsoft ActiveSync\\WCESCOMM.EXE:*:Enabled:ActiveSync Connection Manager"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\TEMP\\DeviceUpdate\\Oj7300+7400_VR3_2053_to_4001\\hpzfwu01.exe"="C:\\TEMP\\DeviceUpdate\\Oj7300+7400_VR3_2053_to_4001\\hpzfwu01.exe:*:Enabled:Device Update Wizard application"
"C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\\Program Files\\Telstra\\Cable Login\\bpcable.exe"="C:\\Program Files\\Telstra\\Cable Login\\bpcable.exe:*:Enabled:BigPond Cable Client"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"="C:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"="C:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

Remaining Files:
---------------

File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes:

Sat 17 Jun 2006 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Sat 28 Jul 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Don\Local Settings\Temp\BITC.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Don\Local Settings\Temp\BITEC.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT100.tmp"
Wed 8 Aug 2007 85,946 ...H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT101.tmp"
Wed 8 Aug 2007 85,946 ...H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT102.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT103.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT104.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT105.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT106.tmp"
Wed 5 Dec 2007 85,946 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT107.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT108.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT109.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT10A.tmp"
Wed 5 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT10B.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT10C.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT10D.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT10E.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT10F.tmp"
Mon 10 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT110.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT111.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT112.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT113.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT114.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT115.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT116.tmp"
Wed 12 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT117.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT118.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT119.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT11A.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT11B.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT11C.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT11D.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT11E.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT11F.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT120.tmp"
Wed 8 Aug 2007 85,946 ...H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT121.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT122.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT123.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT124.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT125.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT126.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT127.tmp"
Wed 8 Aug 2007 85,946 ...H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT128.tmp"
Wed 5 Dec 2007 85,946 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT129.tmp"
Wed 8 Aug 2007 85,946 ...H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT12A.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT12B.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT12C.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT12D.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT12E.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT12F.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT130.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT131.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT132.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT133.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT134.tmp"
Wed 5 Dec 2007 85,946 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT135.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT136.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT137.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT138.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT139.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT13A.tmp"
Thu 13 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT13B.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT13C.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT13D.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT13E.tmp"
Wed 5 Dec 2007 85,946 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT13F.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT140.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT141.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT142.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT143.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT144.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT145.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT146.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT147.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT148.tmp"
Wed 8 Aug 2007 85,946 ...H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT149.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT14A.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT14B.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT14C.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT14D.tmp"
Wed 5 Dec 2007 85,946 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT14E.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT14F.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT150.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT151.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT152.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT153.tmp"
Wed 8 Aug 2007 85,946 ...H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT154.tmp"
Wed 5 Dec 2007 85,946 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT155.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT156.tmp"
Wed 5 Dec 2007 85,946 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT157.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT158.tmp"
Wed 5 Dec 2007 85,946 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT159.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT15A.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT15B.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT15C.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT15D.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT15E.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT15F.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT16.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT160.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT163.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT164.tmp"
Wed 8 Aug 2007 85,946 ...H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT166.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT168.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT16B.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT16C.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT171.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT175.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT177.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT180.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT182.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT183.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT184.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT187.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT189.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT18F.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT190.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT191.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT193.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT197.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT198.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT19B.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT19F.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1A.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1A0.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1A3.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1A6.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1A7.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1A8.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1AA.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1AC.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1AE.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1AF.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1B1.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1B3.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1B5.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1B7.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1C.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1C5.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1CA.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1D.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT1F.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT20.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT26.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT270.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT28.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT291.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT29D.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT2AD.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT2B0.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT2B3.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT2B8.tmp"
Sun 9 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT2BE.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT2DD.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT2EB.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT2F1.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT2F9.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT2FB.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT2FD.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT2FF.tmp"
Wed 8 Aug 2007 85,946 ...H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT3.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT301.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT303.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT305.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT308.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT30A.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT30C.tmp"
Wed 12 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT313.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT315.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT317.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT31D.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT31F.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT321.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT323.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT325.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT3C.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT43.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BIT9.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITB.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITC.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITD.tmp"
Wed 8 Aug 2007 85,946 ...H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITDB.tmp"
Mon 3 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITDD.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITE.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITE2.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITE3.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITE4.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITE5.tmp"
Tue 11 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITE6.tmp"
Wed 12 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITE7.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITE8.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITEA.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITEB.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITEC.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITED.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITEE.tmp"
Tue 27 Nov 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITEF.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITF.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITF0.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITF1.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITF2.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITF3.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITF4.tmp"
Tue 11 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITF5.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITF6.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITF7.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITF8.tmp"
Wed 8 Aug 2007 85,946 ...H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITF9.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITFA.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITFB.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITFC.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITFD.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITFE.tmp"
Fri 14 Dec 2007 0 A..H. --- "C:\Documents and Settings\Vanessa\Local Settings\Temp\BITFF.tmp"
Fri 19 Dec 2003 1,676 ..SHR --- "C:\Documents and Settings\Don\Desktop\Old PC\Local Disk (F)\MSDOS.BAK"
Tue 8 Feb 2005 21,504 ...H. --- "C:\Documents and Settings\Vanessa\My Documents\Vanessa\Scarlett & Alannah\~WRL3744.tmp"
Wed 28 Nov 2007 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\Microsoft\OC\Channels\ch1\lock.tmp"
Wed 28 Nov 2007 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\Microsoft\OC\Channels\ch2\lock.tmp"
Wed 28 Nov 2007 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\Microsoft\OC\Channels\ch3\lock.tmp"
Wed 28 Nov 2007 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\Microsoft\OC\Channels\ch4\lock.tmp"
Wed 28 Nov 2007 8 A..H. --- "C:\Documents and Settings\All Users\Application Data\Microsoft\OC\Channels\ch5\lock.tmp"
Fri 23 Apr 1999 53,248 ...H. --- "C:\Documents and Settings\Don\Desktop\Old PC\Local Disk (F)\Program Files\Accessories\mspcx32.dll"
Sun 28 Nov 2004 21,504 ...H. --- "C:\Documents and Settings\Don\Desktop\Old PC\Local Disk (F)\WINDOWS\TEMP\~WRL3025.tmp"
Fri 23 Apr 1999 40,960 ...H. --- "C:\Documents and Settings\Don\Desktop\Old PC\Local Disk (F)\Program Files\Accessories\HyperTerminal\hticons.dll"
Fri 23 Apr 1999 491,520 ...H. --- "C:\Documents and Settings\Don\Desktop\Old PC\Local Disk (F)\Program Files\Accessories\HyperTerminal\hypertrm.dll"
Fri 27 Sep 1996 198,144 ...H. --- "C:\Documents and Settings\Don\Desktop\Old PC\Local Disk (F)\Program Files\DreamWorks Interactive\Horrorland\setup95.exe"

Finished!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:29:04 PM, on 15/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\dvd43\dvd43_tray.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Sony Corporation\Image Transfer\SonyTray.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\HPZinw12.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [BigPondCable] "C:\Program Files\Telstra\Cable Login\bpcable.exe" /r
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [dvd43] C:\Program Files\dvd43\dvd43_tray.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Image Transfer.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1E2941E3-8E63-11D4-9D5A-00902742D6E0} (iNotes Class) - https://extraweb-apa...aweb/iNotes.cab
O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) - https://extraweb-apa...01/iNotes6W.cab
O16 - DPF: {EA1B8527-E422-4909-825A-70BE0694F18E} (PortfolioManagerWT ProfileManager Class) - https://online.westp...iomanagerwt.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BigPond Broadband Cable Login (bpcService) - Unknown owner - C:\Program Files\Telstra\Cable Login\bpcService.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Unknown owner - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe (file missing)

--
End of file - 9064 bytes
  • 0

#24
Kenny94

Kenny94

    Member 1K

  • Member
  • PipPipPipPip
  • 1,595 posts
Hi donatbalmora

I want to make sure there no Vundo. HJT log show evidence of it and with a lot of pop ups as well.

***If you already have VundoFix on your computer, please delete it. We need to be sure you have the latest version.***

Please download VundoFix.exe to your desktop
  • Double-click VundoFix.exe to run it.
  • Click the Scan for Vundo button.
  • Once it's done scanning, click the Remove Vundo button.
  • You will receive a prompt asking if you want to remove the files, click YES
  • Once you click yes, your desktop will go blank as it starts removing Vundo.
  • When completed, it will prompt that it will reboot your computer, click OK.
  • Please post the contents of C:\vundofix.txt and a new HiJackThis log in a reply to this thread.
Note: It is possible that VundoFix encountered a file it could not remove. In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button" when VundoFix appears upon rebooting.

Please download ComboFix and save it to your desktop.
Double click combofix.exe and follow the prompts.
When it's done running it will produce a log for you. Please post that log in your next reply.

Important Note - Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

In your next reply, please include these log(s):

* vundofix.txt
* ComboFix log
* HijackThis log (new)


Also, please let me know how things are running now and if you encountered any problems while you were following the instructions I posted.

Edited by Kenny94, 15 December 2007 - 12:54 PM.

  • 0

#25
donatbalmoral

donatbalmoral

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
Hi Kenny94,

I ran VundoFix.exe and thankfully it did not find any infections. I then tried to run ComboFix.exe but unfortuneatley it would not run and returned the message: "C:\Documents and Settings\Don\Desktop\ComboFix.exe is not a valid Win32 application"? Hope I have not done it incorrectly.

VundoFix and HijackThis logs below.

Best regards,

VundoFix V6.7.5

Checking Java version...

Scan started at 12:29:55 PM 16/12/2007

Listing files found while scanning....

No infected files were found.


Beginning removal...


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:49:36 PM, on 16/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\dvd43\dvd43_tray.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Sony Corporation\Image Transfer\SonyTray.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\HPZinw12.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [BigPondCable] "C:\Program Files\Telstra\Cable Login\bpcable.exe" /r
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [dvd43] C:\Program Files\dvd43\dvd43_tray.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-21-974040889-2070146034-147808962-1008\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Vanessa')
O4 - HKUS\S-1-5-21-974040889-2070146034-147808962-1008\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized (User 'Vanessa')
O4 - HKUS\S-1-5-21-974040889-2070146034-147808962-1008\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" (User 'Vanessa')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Image Transfer.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1E2941E3-8E63-11D4-9D5A-00902742D6E0} (iNotes Class) - https://extraweb-apa...aweb/iNotes.cab
O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) - https://extraweb-apa...01/iNotes6W.cab
O16 - DPF: {EA1B8527-E422-4909-825A-70BE0694F18E} (PortfolioManagerWT ProfileManager Class) - https://online.westp...iomanagerwt.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BigPond Broadband Cable Login (bpcService) - Unknown owner - C:\Program Files\Telstra\Cable Login\bpcService.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Unknown owner - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe (file missing)

--
End of file - 9500 bytes
  • 0

Advertisements


#26
Kenny94

Kenny94

    Member 1K

  • Member
  • PipPipPipPip
  • 1,595 posts
Lets do this donatbalmoral. Lets download it again with the link below: Because it never installed. And run as in my previous post.

http://download.blee...Bs/ComboFix.exe

In your next reply, please include these log(s):

* ComboFix log
* HijackThis log (new)



Also, please let me know how things are running now and if you encountered any problems while you were following the instructions I posted.

Edited by Kenny94, 16 December 2007 - 09:41 AM.

  • 0

#27
donatbalmoral

donatbalmoral

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
Hi Kenny94

I have now run ComboFix.

The ComboFix and HijackThis logs are below.

Things seem to be running well now, in general, although this evening, a few odd things have happened. One of my pre-GTG attempts at fixing the infection was to get Spybot - Search & Destroy "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /advancedmode , and it is still running. When I logged on the the pc this evening it ran a scan and identified a few entries, including: Microsoft.Windows.SecurityCentre.FirewallDisabled and Smitfraud-C.MSVPS, which it then fixed. However, I was concerned that these appeared as it might indicate that all is not well yet! I shall try to find a log and send it to you. Also I am wondering whether I need to reset my internet options when at last we get rid of the infection, so my IE can return to what it was so I can do things like on-line banking, etc?

Best regards,

ComboFix 07-12-16.4 - Don 2007-12-17 21:10:24.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.357 [GMT 11:00]
Running from: C:\Documents and Settings\Don\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Don\err.log
C:\Documents and Settings\Vanessa\Favorites\Error Cleaner.url
C:\Documents and Settings\Vanessa\Favorites\Privacy Protector.url
C:\Documents and Settings\Vanessa\Favorites\Spyware&Malware Protection.url
C:\Program Files\VirusHeal 4.1

.
((((((((((((((((((((((((( Files Created from 2007-11-17 to 2007-12-17 )))))))))))))))))))))))))))))))
.

2007-12-16 12:29 . 2007-12-16 12:29 <DIR> d-------- C:\VundoFix Backups
2007-12-14 21:49 . 2007-12-14 21:49 <DIR> d-------- C:\WINDOWS\ERUNT
2007-12-14 19:29 . 2007-12-14 19:29 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2007-12-14 19:28 . 2007-12-14 21:28 <DIR> d-------- C:\Program Files\SUPERAntiSpyware
2007-12-14 19:28 . 2007-12-14 19:28 <DIR> d-------- C:\Documents and Settings\Don\Application Data\SUPERAntiSpyware.com
2007-12-13 23:31 . 2007-12-13 23:31 3,872 --a------ C:\WINDOWS\SYSTEM32\tmp.reg
2007-12-13 22:09 . 2007-12-13 22:09 <DIR> d-------- C:\Program Files\Trend Micro
2007-12-09 14:47 . 2007-12-09 14:47 <DIR> d--hs---- C:\Documents and Settings\Default User\UserData
2007-11-29 21:01 . 2007-11-29 21:11 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2007-11-28 08:40 . 2007-11-28 08:40 2,888 --a------ C:\WINDOWS\SYSTEM32\OEMINFO.PNF
2007-11-28 00:46 . 2007-09-21 10:35 116,416 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\msfwhlpr.sys
2007-11-28 00:46 . 2007-09-21 10:35 91,328 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\msfwdrv.sys
2007-11-28 00:45 . 2007-11-28 00:45 <DIR> d-------- C:\WINDOWS\SYSTEM32\bits
2007-11-28 00:45 . 2007-07-06 16:09 70,928 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\MpFilter.sys
2007-11-28 00:44 . 2007-03-29 23:56 409,600 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\qmgr.dll
2007-11-28 00:44 . 2007-03-29 23:56 18,944 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\qmgrprxy.dll
2007-11-28 00:44 . 2007-03-29 23:56 8,192 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\bitsprx2.dll
2007-11-28 00:44 . 2007-03-29 23:56 7,168 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\bitsprx4.dll
2007-11-28 00:44 . 2007-03-29 23:56 7,168 --------- C:\WINDOWS\SYSTEM32\DLLCACHE\bitsprx3.dll
2007-11-28 00:44 . 2007-03-29 23:56 7,168 --------- C:\WINDOWS\SYSTEM32\bitsprx4.dll
2007-11-28 00:41 . 2007-12-17 21:11 <DIR> d-------- C:\Program Files\Microsoft Windows OneCare Live
2007-11-28 00:04 . 2007-11-28 00:04 <DIR> d-------- C:\Program Files\Windows Defender
2007-11-27 23:51 . 2007-11-27 23:51 <DIR> d-------- C:\Documents and Settings\Vanessa\Application Data\ConfidentSurf
2007-11-27 23:46 . 2007-11-27 23:46 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\ConfidentSurf
2007-11-25 02:22 . 2007-11-27 23:35 0 --a------ C:\Documents and Settings\Don\ignorelist.dat
2007-11-24 09:41 . 2007-11-24 09:41 <DIR> d-------- C:\Program Files\Eureka
2007-11-24 09:41 . 2007-11-24 09:41 100 --a------ C:\WINDOWS\Mamh11.ini
2007-11-21 22:55 . 2007-11-21 22:55 <DIR> d-------- C:\Program Files\Sudoku-BB88xx
2007-11-21 22:48 . 2007-11-21 22:55 22 --a------ C:\Program Files\sudoku-bb88xx210384.zip
2007-11-21 22:29 . 2007-12-09 00:11 256 --a------ C:\WINDOWS\SYSTEM32\pool.bin
2007-11-21 22:24 . 2007-11-21 22:24 <DIR> d-------- C:\Documents and Settings\Don\Application Data\dualogy systems
2007-11-21 22:21 . 2007-11-21 22:21 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Sonic
2007-11-21 22:21 . 2007-11-21 22:21 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\InstallShield
2007-11-21 22:19 . 2007-12-09 00:17 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Roxio
2007-11-21 22:18 . 2007-12-09 00:18 <DIR> d-------- C:\Program Files\Common Files\Roxio Shared
2007-11-21 22:15 . 2007-01-18 10:24 26,496 -ra------ C:\WINDOWS\SYSTEM32\DRIVERS\RimSerial.sys
2007-11-21 22:07 . 2007-11-21 22:07 <DIR> d--hs---- C:\WINDOWS\ftpcache
2007-11-21 00:41 . 2007-11-21 00:41 <DIR> d-------- C:\Program Files\SuDoku Pro Trial Version
2007-11-21 00:40 . 2007-11-21 00:40 770,600 --a------ C:\Program Files\sudoku-pro trial_en.exe
2007-11-21 00:35 . 2007-11-21 00:35 147,460 --a------ C:\Program Files\sudoku_pagoda.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-12-17 09:56 --------- d-----w C:\Documents and Settings\Vanessa\Application Data\Skype
2007-12-14 08:26 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2007-12-13 12:17 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-12-13 12:17 --------- d-----w C:\Program Files\Logitech
2007-12-13 12:15 --------- d-----w C:\Program Files\Java
2007-12-09 04:00 --------- d-----w C:\Program Files\Microsoft ActiveSync
2007-12-08 13:22 --------- d-----w C:\Program Files\Yahoo!
2007-12-08 13:17 --------- d-----w C:\Program Files\Common Files\Sonic Shared
2007-11-27 13:39 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2007-11-21 11:19 --------- d-----w C:\Program Files\Common Files\InstallShield
2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
2007-11-13 09:16 --------- d-----w C:\Documents and Settings\Don\Application Data\Canon
2007-10-30 23:42 3,590,656 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\mshtml.dll
2007-10-29 22:43 1,287,680 ----a-w C:\WINDOWS\SYSTEM32\quartz.dll
2007-10-29 22:43 1,287,680 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\quartz.dll
2007-10-27 06:40 222,720 ----a-w C:\WINDOWS\SYSTEM32\wmasf.dll
2007-10-27 06:40 222,720 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\wmasf.dll
2007-10-26 03:34 8,460,288 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\shell32.dll
2007-10-10 23:56 824,832 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\wininet.dll
2007-10-10 23:56 232,960 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\webcheck.dll
2007-10-10 23:56 1,159,680 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\urlmon.dll
2007-10-10 23:55 671,232 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\mstime.dll
2007-10-10 23:55 63,488 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\icardie.dll
2007-10-10 23:55 6,065,664 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\ieframe.dll
2007-10-10 23:55 52,224 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\msfeedsbs.dll
2007-10-10 23:55 478,208 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\mshtmled.dll
2007-10-10 23:55 459,264 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\msfeeds.dll
2007-10-10 23:55 44,544 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\iernonce.dll
2007-10-10 23:55 384,512 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\iedkcs32.dll
2007-10-10 23:55 383,488 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\ieapfltr.dll
2007-10-10 23:55 27,648 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\jsproxy.dll
2007-10-10 23:55 267,776 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\iertutil.dll
2007-10-10 23:55 230,400 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\ieaksie.dll
2007-10-10 23:55 214,528 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\dxtrans.dll
2007-10-10 23:55 193,024 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\msrating.dll
2007-10-10 23:55 153,088 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\ieakeng.dll
2007-10-10 23:55 132,608 ----a-w C:\WINDOWS\SYSTEM32\DLLCACHE\extmgr.dll
2007-10-10 23:55 124,928 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\advpack.dll
2007-10-10 23:55 105,984 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\url.dll
2007-10-10 23:55 102,400 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\occache.dll
2007-10-10 10:59 70,656 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\ie4uinit.exe
2007-10-10 10:59 625,152 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\iexplore.exe
2007-10-10 10:59 13,824 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\ieudinit.exe
2007-10-10 05:46 161,792 ------w C:\WINDOWS\SYSTEM32\DLLCACHE\ieakui.dll
2006-10-25 12:33 19,972,080 ----a-w C:\Program Files\GoogleSketchUpWEN.exe
2006-08-12 14:00 526,018 ----a-w C:\Program Files\DVD43_3-9-0_Setup.exe
2005-03-12 02:59 5,180,760 ------w C:\Documents and Settings\Don\CONFIGW.EXE
2004-04-07 06:51 295,183 ----a-w C:\Program Files\Clearwtr.box
2004-04-07 06:51 2,916,352 ----a-w C:\Program Files\Clearwtr.dat
2004-04-05 06:20 151,552 ----a-w C:\Program Files\TemplatesUpgrader.exe
2004-03-24 23:26 1,124,347 ----a-w C:\Program Files\tutorial.pdf
2004-03-24 01:32 331,776 ----a-w C:\Program Files\MYOBMSC.exe
2004-03-24 01:32 1,937,408 ----a-w C:\Program Files\MYOBMSC.dll
2004-03-24 01:28 143,360 ----a-w C:\Program Files\PrnEng.dll
2004-03-11 22:16 229,376 ----a-w C:\Program Files\MyobPOpt.exe
2004-03-11 22:06 7,977 ----a-w C:\Program Files\MYOBPOpt.RES
2004-03-11 00:02 1,412,044 ----a-w C:\Program Files\MYOBRES.RES
2004-03-11 00:01 754,084 ----a-w C:\Program Files\MYOBESN.RES
2004-03-10 23:57 7,868,416 ----a-w C:\Program Files\Myob14.exe
2004-03-10 23:48 630,784 ----a-r C:\Program Files\xerces.dll
2004-03-10 23:48 344,064 ----a-r C:\Program Files\ctmyob32.dll
2004-03-10 23:48 217,088 ----a-r C:\Program Files\CPdf.dll
2004-03-10 23:48 192,512 ----a-r C:\Program Files\MYOBSp32.dll
2004-03-10 07:15 258,048 ----a-w C:\Program Files\MYOBUpg.exe
2004-03-10 06:07 241,664 ----a-w C:\Program Files\FtoP.dll
2004-03-10 06:07 225,280 ----a-w C:\Program Files\MtoP.dll
2004-03-10 06:06 307,200 ----a-w C:\Program Files\PtoP.dll
2004-03-10 05:19 22,960 ----a-w C:\Program Files\MYOBUpg.res
2004-03-10 05:18 31,960 ----a-w C:\Program Files\PtoP.res
2004-03-10 05:17 37,647 ----a-w C:\Program Files\MtoP.res
2004-03-10 05:14 37,540 ----a-w C:\Program Files\FtoP.res
2004-02-23 08:16 294,912 ----a-w C:\Program Files\MtoM.dll
2004-02-23 08:07 29,980 ----a-w C:\Program Files\MtoM.res
2003-12-09 23:52 5,225 ----a-w C:\Program Files\MYOBMSC.jar
2003-10-27 00:14 1,916,928 ----a-w C:\Program Files\Xerces2.dll
2003-05-30 02:20 323,584 ----a-w C:\Program Files\ctreestd.dll
2001-03-13 21:37 57,344 ----a-w C:\Program Files\drvxl32.exe
2001-03-13 21:33 40,960 ----a-w C:\Program Files\SWDrv32.dll
1999-10-11 05:19 32,768 ----a-w C:\Program Files\MYOBIn32.dll
1999-10-11 03:43 40,960 ----a-w C:\Program Files\drvwd32.exe
1999-06-17 06:40 126,976 ----a-w C:\Program Files\dzip32.dll
1999-06-17 06:40 110,592 ----a-w C:\Program Files\dunzip32.dll
1997-07-01 03:03 317,440 ----a-w C:\Program Files\CFX2032.DLL
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechSoftwareUpdate"="C:\Program Files\Logitech\Video\ManifestEngine.exe" [2005-01-18 18:07]
"H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe" [2005-11-15 19:44]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-06-21 14:06]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PCMService"="C:\Program Files\Dell\Media Experience\PCMService.exe" [2004-04-11 23:15]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-08-25 15:52]
"DVDLauncher"="C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" [2004-10-12 19:54]
"RealTray"="C:\Program Files\Real\RealPlayer\RealPlay.exe" [2005-02-25 22:03]
"dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2004-08-13 04:05]
"UpdateManager"="C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" [2004-01-07 04:01]
"BigPondCable"="C:\Program Files\Telstra\Cable Login\bpcable.exe" [2004-08-18 17:53]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2005-01-12 15:54]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-02-16 23:11]
"dvd43"="C:\Program Files\dvd43\dvd43_tray.exe" [2006-05-22 14:26]
"LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [2004-10-08 12:52]
"LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2005-01-18 18:47]
"LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2005-01-18 18:37]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-07-10 10:18]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 19:20]
"OneCareUI"="C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe" [2007-10-31 13:18]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2004-05-28 22:31:38]
HP Image Zone Fast Start.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe [2004-05-28 23:06:36]
Image Transfer.lnk - C:\Program Files\Sony Corporation\Image Transfer\SonyTray.exe [2005-03-12 14:52:37]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\OneCareMP]
@="Service"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"KernelFaultCheck"=%systemroot%\system32\dumprep 0 -k
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" -atboottime
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

R1 MSFWHLPR;MSFWHLPR;C:\WINDOWS\system32\DRIVERS\msfwhlpr.sys
R2 MSFWDrv;MSFWDrv;C:\WINDOWS\system32\DRIVERS\msfwdrv.sys
R2 msfwsvc;OneCare Firewall;"C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe"
R2 OneCareMP;OneCare AntiSpyware and AntiVirus;"C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe"
R3 MpFilter;Microsoft Malware Protection Driver;C:\WINDOWS\system32\DRIVERS\MpFilter.sys
S3 bpcService;BigPond Broadband Cable Login;"C:\Program Files\Telstra\Cable Login\bpcService.exe"

*Newly Created Service* - PROCEXP90
.
Contents of the 'Scheduled Tasks' folder
"2007-12-17 05:36:00 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2007-12-13 15:00:00 C:\WINDOWS\Tasks\Don Fri.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-16 15:00:00 C:\WINDOWS\Tasks\Don Mon.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-14 15:00:00 C:\WINDOWS\Tasks\Don Sat.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-15 15:00:00 C:\WINDOWS\Tasks\Don Sun.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-12 15:00:00 C:\WINDOWS\Tasks\Don Thur.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-10 15:00:00 C:\WINDOWS\Tasks\Don Tue.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-11 15:00:00 C:\WINDOWS\Tasks\Don Wed.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-14 04:00:00 C:\WINDOWS\Tasks\Norton Security Scan.job"
- C:\Program Files\Norton Security Scan\Nss.exe
"2007-12-17 10:03:52 C:\WINDOWS\Tasks\Spybot - Search & Destroy - Scheduled Task.job"
- C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
"2007-12-13 16:35:00 C:\WINDOWS\Tasks\Study PC 2007 Photos Fri.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-16 16:40:00 C:\WINDOWS\Tasks\Study PC 2007 Photos Mon.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-14 16:37:00 C:\WINDOWS\Tasks\Study PC 2007 Photos Sat.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-15 16:38:00 C:\WINDOWS\Tasks\Study PC 2007 Photos Sun.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-12 16:34:00 C:\WINDOWS\Tasks\Study PC 2007 Photos Thur.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-10 16:41:00 C:\WINDOWS\Tasks\Study PC 2007 Photos Tue.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-11 16:42:00 C:\WINDOWS\Tasks\Study PC 2007 Photos Wed.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-13 16:00:00 C:\WINDOWS\Tasks\Study PC Balance Fri.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-16 16:00:00 C:\WINDOWS\Tasks\Study PC Balance Mon.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-14 16:00:00 C:\WINDOWS\Tasks\Study PC Balance Sat.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-15 16:00:00 C:\WINDOWS\Tasks\Study PC Balance Sun.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-12 16:00:00 C:\WINDOWS\Tasks\Study PC Balance Thur.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-10 16:00:00 C:\WINDOWS\Tasks\Study PC Balance Tue.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
"2007-12-11 16:00:00 C:\WINDOWS\Tasks\Study PC Balance Wed.job"
- C:\WINDOWS\system32\NTBACKUP.EXE
.
**************************************************************************

catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-17 21:13:02
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-12-17 21:13:49
.
2007-11-15 16:03:21 --- E O F ---




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:36:49 PM, on 17/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\dvd43\dvd43_tray.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Sony Corporation\Image Transfer\SonyTray.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [BigPondCable] "C:\Program Files\Telstra\Cable Login\bpcable.exe" /r
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [dvd43] C:\Program Files\dvd43\dvd43_tray.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Image Transfer.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1E2941E3-8E63-11D4-9D5A-00902742D6E0} (iNotes Class) - https://extraweb-apa...aweb/iNotes.cab
O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) - https://extraweb-apa...01/iNotes6W.cab
O16 - DPF: {EA1B8527-E422-4909-825A-70BE0694F18E} (PortfolioManagerWT ProfileManager Class) - https://online.westp...iomanagerwt.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BigPond Broadband Cable Login (bpcService) - Unknown owner - C:\Program Files\Telstra\Cable Login\bpcService.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Unknown owner - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe (file missing)

--
End of file - 8997 bytes
  • 0

#28
donatbalmoral

donatbalmoral

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
Hi Kenny94.

Have copied below the SkyBot Search & Destroy "fixes" logs of yesterday and today. Hope they are helpful.

Best regards,


--- Report generated: 2007-12-16 21:38 ---

Microsoft.WindowsSecurityCenter.FirewallDisabled: [SBI $29AE0E3B] Settings (Registry change, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windowsfirewall\domainprofile\enablefirewall

Microsoft.WindowsSecurityCenter.FirewallDisabled: [SBI $99843A42] Settings (Registry change, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windowsfirewall\standardprofile\enablefirewall

Smitfraud-C.MSVPS: [SBI $5137EC54] User settings (Registry key, fixed)
HKEY_USERS\S-1-5-21-974040889-2070146034-147808962-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{48F763FA-3001-4C76-90E5-61FD87440AC8}

TagASaurus: [SBI $61F39AC8] Tracking cookie (Internet Explorer: Don) (Cookie, fixed)


DoubleClick: [SBI $61F39AC8] Tracking cookie (Internet Explorer: Don) (Cookie, fixed)



--- Spybot - Search & Destroy version: 1.5 (build: 20070830) ---

2007-08-31 blindman.exe (1.0.0.6)
2007-08-31 SDMain.exe (1.0.0.4)
2007-08-31 SDUpdate.exe (1.0.6.4)
2007-08-31 SDWinSec.exe (1.0.0.8)
2007-08-31 SpybotSD.exe (1.5.1.15)
2007-08-31 TeaTimer.exe (1.5.0.9)
2007-11-29 unins000.exe (51.46.0.0)
2007-08-31 Update.exe (1.4.0.5)
2007-08-31 advcheck.dll (1.5.3.0)
2007-04-02 aports.dll (2.1.0.0)
2007-04-02 DelZip179.dll (1.79.5.3)
2007-08-31 SDHelper.dll (1.5.0.8)
2007-08-31 Tools.dll (2.1.2.0)
2007-12-12 Includes\Cookies.sbi (*)
2007-10-31 Includes\Dialer.sbi (*)
2007-12-12 Includes\DialerC.sbi (*)
2007-11-07 Includes\Hijackers.sbi (*)
2007-12-12 Includes\HijackersC.sbi (*)
2007-10-04 Includes\Keyloggers.sbi (*)
2007-12-12 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2007-11-07 Includes\Malware.sbi (*)
2007-12-12 Includes\MalwareC.sbi (*)
2007-10-24 Includes\PUPS.sbi (*)
2007-12-12 Includes\PUPSC.sbi (*)
2007-12-12 Includes\Revision.sbi (*)
2007-05-30 Includes\Security.sbi (*)
2007-12-12 Includes\SecurityC.sbi (*)
2007-11-07 Includes\Spybots.sbi (*)
2007-12-12 Includes\SpybotsC.sbi (*)
2007-11-06 Includes\Tracks.uti
2007-12-12 Includes\Trojans.sbi (*)
2007-12-12 Includes\TrojansC.sbi (*)
2008-12-24 Plugins\TCPIPAddress.dll



--- Report generated: 2007-12-17 23:02 ---

Microsoft.WindowsSecurityCenter.FirewallDisabled: [SBI $29AE0E3B] Settings (Registry change, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windowsfirewall\domainprofile\enablefirewall

Microsoft.WindowsSecurityCenter.FirewallDisabled: [SBI $99843A42] Settings (Registry change, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\windowsfirewall\standardprofile\enablefirewall


--- Spybot - Search & Destroy version: 1.5 (build: 20070830) ---

2007-08-31 blindman.exe (1.0.0.6)
2007-08-31 SDMain.exe (1.0.0.4)
2007-08-31 SDUpdate.exe (1.0.6.4)
2007-08-31 SDWinSec.exe (1.0.0.8)
2007-08-31 SpybotSD.exe (1.5.1.15)
2007-08-31 TeaTimer.exe (1.5.0.9)
2007-11-29 unins000.exe (51.46.0.0)
2007-08-31 Update.exe (1.4.0.5)
2007-08-31 advcheck.dll (1.5.3.0)
2007-04-02 aports.dll (2.1.0.0)
2007-04-02 DelZip179.dll (1.79.5.3)
2007-08-31 SDHelper.dll (1.5.0.8)
2007-08-31 Tools.dll (2.1.2.0)
2007-12-12 Includes\Cookies.sbi (*)
2007-10-31 Includes\Dialer.sbi (*)
2007-12-12 Includes\DialerC.sbi (*)
2007-11-07 Includes\Hijackers.sbi (*)
2007-12-12 Includes\HijackersC.sbi (*)
2007-10-04 Includes\Keyloggers.sbi (*)
2007-12-12 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2007-11-07 Includes\Malware.sbi (*)
2007-12-12 Includes\MalwareC.sbi (*)
2007-10-24 Includes\PUPS.sbi (*)
2007-12-12 Includes\PUPSC.sbi (*)
2007-12-12 Includes\Revision.sbi (*)
2007-05-30 Includes\Security.sbi (*)
2007-12-12 Includes\SecurityC.sbi (*)
2007-11-07 Includes\Spybots.sbi (*)
2007-12-12 Includes\SpybotsC.sbi (*)
2007-11-06 Includes\Tracks.uti
2007-12-12 Includes\Trojans.sbi (*)
2007-12-12 Includes\TrojansC.sbi (*)
2008-12-24 Plugins\TCPIPAddress.dll
  • 0

#29
Kenny94

Kenny94

    Member 1K

  • Member
  • PipPipPipPip
  • 1,595 posts
Hi donatbalmoral

Download Dr.Web CureIt to the desktop:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
  • Doubleclick the drweb-cureit.exe file and Allow to run the express scan
  • This will scan the files currently running in memory and when something is found, click the yes button when it asks you if you want to cure it. This is only a short scan.
  • Once the short scan has finished, mark the drives that you want to scan.
  • Select all drives. A red dot shows which drives have been chosen.
  • Click the green arrow at the right, and the scan will start.
  • Click 'Yes to all' if it asks if you want to cure/move the file.
  • When the scan has finished, in the menu, click file and choose save report list
  • Save the report to your desktop. The report will be called DrWeb.csv
  • Close Dr.Web Cureit.

  • 0

#30
Kenny94

Kenny94

    Member 1K

  • Member
  • PipPipPipPip
  • 1,595 posts
Sorry did not get a chance to answer your questions. I had to take my son to school.

One of my pre-GTG attempts at fixing the infection was to get Spybot - Search & Destroy "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /advancedmode , and it is still running.

I really do not use Spybot anymore. Let me check into this.


Also I am wondering whether I need to reset my internet options when at last we get rid of the infection, so my IE can return to what it was so I can do things like on-line banking, etc?

We'll do this after we are done. I see Spybot is picking up a Dialer. Dr.Web CureIt will show us if this is true. Run Dr.Web CureIt and be sure to post it here.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP