I am NOT having any (known) problems now but I note the WindowsFY process in C:\ shows up in a "WhatsRunning" scan. It appears as a startup item but does not seem to actually run.

It this a threat? Can I just disable it as a startup application? Should I simply delete the file wp.exe? Suggestions please?

Here's my HJT scan log.

Logfile of HijackThis v1.99.1
Scan saved at 4:15:37 PM, on 1/19/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Winamp\Winampa.exe
C:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\HDD Health\HDDHealth.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\AWS\WEATHE~1\Weather.exe
C:\Program Files\Messenger\MSMSGS.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Netscape\Netscape\Netscp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
A:\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.makemesearch.com/?said=364
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.makemesearch.com/?said=364
N3 - Netscape 7: user_pref("browser.startup.homepage", "file:///C:/DWeaverSites/DE%20Netscape%20Home%20Page/DEWWWPortalDW.htm"); (C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Cls - {CF021F40-3E14-23A5-CBA2-717765728274} - C:\WINDOWS\System32\wer8274.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [Norton Ghost 9.0] C:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [HDDHealth] C:\Program Files\HDD Health\HDDHealth.exe -wl
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\PROGRA~1\NETSCAPE\NETSCAPE\NETSCP.EXE" -aim
O4 - HKCU\..\Run: [Weather] C:\PROGRA~1\AWS\WEATHE~1\Weather.exe 1
O4 - HKCU\..\Run: [WindowsFY] c:\wp.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra button: Microsoft AntiSpyware helper - {1B4EAA86-3CC6-47CF-A156-FF49DEF3ABE6} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {1B4EAA86-3CC6-47CF-A156-FF49DEF3ABE6} - (no file) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {732D680D-D159-48C0-B3FB-F6BADC6708DA} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {732D680D-D159-48C0-B3FB-F6BADC6708DA} - (no file) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {7F79A0F9-CD26-40A5-AD42-CC7DE4A36C2E} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {7F79A0F9-CD26-40A5-AD42-CC7DE4A36C2E} - (no file) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {CACEE034-DB32-486E-8D33-865A0F8695B1} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {CACEE034-DB32-486E-8D33-865A0F8695B1} - (no file) (HKCU)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1162854852734
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

Hello Dennise, and welcome to BleepingComputer. My name is Charles and I will be dealing with your log today.
Please print off a copy of these instructions, and also save them to a Notepad file on your desktop, so they are easily accessible.
We are going to boot into Safe Mode later in the fix, and there is no internet access.

Yes, this is actually a malware entry, and there seems to be few more in your log as well, which need cleaning up.

Please disable Spybot's "TeaTimer" function as it may hinder the removal of the infection:
Open Spybot and click on Mode and check Advanced Mode
Check Yes to next window.
Click on Tools in bottom left hand corner.
Press on System Startup icon.
Uncheck Teatimer box.
Click Allow Change box.

Please remember to re-enable it after you're clean.

Go to Start | Control Panel | Add/Remove Programs and remove the following (if they exist):

WeatherBug
WeatherBug is a system tray icon that offers weather information and includes built-in ads. WeatherBug is controlled by AWS Convergence Technologies (weatherbugmedia.com).
There is some controversy over whether WeatherBug should be targeted by anti-parasite software. AWS strongly deny their software is ‘spyware’, and by the definition used here, it is not, as it does not leak information back to its controlling servers.
However, WeatherBug has in the past been silently installed by the FavoriteMan parasite and Freeze.com screensavers, and more recently has been bundled by software such as AIM and Blubster. This makes it ‘unsolicited’, and since it is installed to raise money for its creators through the built-in ads it is certainly ‘commercial’. So it does meet the definition for ‘parasite’: unsolicited commercial software. It is nonetheless listed as a borderline case because it is not overtly harmful and many people do install it deliberately.
WeatherBug bundles the MySearch parasite in its standalone distribution and has in the past, installed Gator and SVAPlayer.

Scan again with HijackThis and put a checkmark next to each of the following entries (if present):

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.makemesearch.com/?said=364
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.makemesearch.com/?said=364
O2 - BHO: Cls - {CF021F40-3E14-23A5-CBA2-717765728274} - C:\WINDOWS\System32\wer8274.dll (file missing)
O4 - HKCU\..\Run: [Weather] C:\PROGRA~1\AWS\WEATHE~1\Weather.exe 1
O4 - HKCU\..\Run: [WindowsFY] c:\wp.exe
O9 - Extra button: Microsoft AntiSpyware helper - {1B4EAA86-3CC6-47CF-A156-FF49DEF3ABE6} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {1B4EAA86-3CC6-47CF-A156-FF49DEF3ABE6} - (no file) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {732D680D-D159-48C0-B3FB-F6BADC6708DA} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {732D680D-D159-48C0-B3FB-F6BADC6708DA} - (no file) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {7F79A0F9-CD26-40A5-AD42-CC7DE4A36C2E} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {7F79A0F9-CD26-40A5-AD42-CC7DE4A36C2E} - (no file) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {CACEE034-DB32-486E-8D33-865A0F8695B1} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {CACEE034-DB32-486E-8D33-865A0F8695B1} - (no file) (HKCU)

Note: the entry highlighted in blue is for WeatherBug; if you decided to remove it, please also check that entry.

Then close all other windows--you should only see HijackThis on your Desktop--and click the Fix Checked button.

Now, please reboot your computer into Safe Mode.
This is done by rebooting Windows and pressing F8 at boot/Windows startup, usually right after the beep.
Then select Safe Mode from the list.

Set your system to show all files.
Navigate to Start | My Computer | Tools | Folder Options.
Select the View tab. Under the "Hidden Files and Folders" heading, select "Show hidden files and folders".
Uncheck: Hide file extensions for known file types
Uncheck the Hide protected operating system files (recommended) option.
Click Yes to confirm.

Next, please find and delete the following files (if present):

C:\WINDOWS\System32\wer8274.dll
C:\wp.exe

Also delete this folder if you removed WeatherBug:

C:\Program Files\AWS

Reboot into Normal Mode.
Please run Panda's ActiveScan.
Once you are on the Panda site click the Scan your PC button
A new window will open, click the Check Now button.
Enter your personal details.
Click the big Scan Now button.
It will ask to install various content - please allow this.
It will start downloading the files it requires for the scan, which may take a while.
When download is complete, click on Local Disks to start the scan.
When the scan completes, click the See Report button.
Click Save Report and save the file to your Desktop, so you can post this log in your next reply.

Please post me back the Panda report, and with a new HijackThis log.
Thanks,
Charles

Rookie147,

Thanks for looking at my HJT log file. Before I proceed, I have a question.

You said "Then close all other windows--you should only see HijackThis on your Desktop--and click the Fix Checked button." Now, I was advised NOT install and run HJT from my hard drive. Accordingly, I installed an run HJT from a floppy disc.

Does this notably change your suggested procedure to clean my PC?

Dennise

Basically, in order for HijackThis to work fine, it needs to be in a folder. Running HJT directly from your C:\ drive is not advised, but running it from a folder located somewhere is fine. Similarly, if you are running it directly off of your floppy drive this can be bad, but placing it in a folder will do.
This is quite difficult to explain; I hope I did so well enough...
Charles

OK. I should run HJT from it's own folder. Yes.

Which is preferred?

A: The HJT folder should be on the hard drive (C:).

or

B. The HJT folder should be on the floppy drive (A:).

A or B?

Dennis

Either one, it really doesn't matter..

OK, I'll leave it on a floppy disc.

I'll be leaving town soon, so I plan to try your procedure in a few days.

Dennise

Thanks for letting me know, I look forward to your reply when you return.

OK, I followed your procedure. HJT and Panda report logs follow below.

First though, a few notes:

1. I decided to keep Weatherbug
2. I did NOT find C:\WINDOWS\System32\wer8274.dll but instead found wer8274.ini and wer8274.tmp. I did NOT delete these.
3. I did NOT find C:\wp.exe but instead found wp.bmp. I did NOT delete this file.
4. Panda would NOT run with my FireFox browser, so I ran it from IE 6.x PandaScan found lots of stuff. How much of it is serious?

Thanks in advance for taking a look at these.

Here's my HJT log AFTER I made your changes:

Logfile of HijackThis v1.99.1
Scan saved at 5:20:08 PM, on 1/25/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Winamp\Winampa.exe
C:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\HDD Health\HDDHealth.exe
C:\PROGRA~1\AWS\WEATHE~1\Weather.exe
C:\Program Files\Messenger\MSMSGS.EXE
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Utilities\Security\HiJackThis\HijackThis.exe

N3 - Netscape 7: user_pref("browser.startup.homepage", "file:///C:/DWeaverSites/DE%20Netscape%20Home%20Page/DEWWWPortalDW.htm"); (C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\prefs.js)
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CSBWeb_01.src"); (C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\prefs.js)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [Norton Ghost 9.0] C:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [HDDHealth] C:\Program Files\HDD Health\HDDHealth.exe -wl
O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\PROGRA~1\NETSCAPE\NETSCAPE\NETSCP.EXE" -aim
O4 - HKCU\..\Run: [Weather] C:\PROGRA~1\AWS\WEATHE~1\Weather.exe 1
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1162854852734
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)


Here's the Panda Scan AFTER I made your changes:

Incident Status Location

Hacktool:Exploit/URLSpoof Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0000531.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0002251.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0002316.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0002346.~]
Virus:Trj/Goldun.IP Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[setup.zip][Setup.exe]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0002647.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0003055.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0003291.~]
Hacktool:Exploit/URLSpoof Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0003319.~]
Virus:Trj/Goldun.Q Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[setup.rar][SecurityEgold.EXE]
Virus:Trj/Mitglieder.BO Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[345556.rar][dddd.exe]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0003383.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0003538.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0003591.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0004625.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0004686.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0005006.~]
Virus:W32/Sober.U.worm!CME-414 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[your_text.zip][mail.document.Datex-packed.exe]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0005206.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0005613.~]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[error-mail_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[account_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[our_secret.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[error-mail_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[account_info-text.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[error-mail_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[mail_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[account_info-text.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[our_secret.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[account_info-text.zip][Winzipped-Text_Data.txt .pif]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0006782.~]
Virus:W32/Bagle.ER.worm Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[new__price.zip][06.exe]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0009842.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0013063.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0016416.~]
Adware:adware/cws Not disinfected C:\Documents and Settings\All Users\Favorites\Download Free Spyware Remover.url
Hacktool:Exploit/ByteVerify Not disinfected C:\Documents and Settings\Dennis\.jpi_cache\file\1.0\Dummy.class-5db50b5e-48120a14.class
Virus:Trj/Java.Binny.A Disinfected C:\Documents and Settings\Dennis\.jpi_cache\jar\1.0\archive.jar-60d4ac05-5e04d544.zip[Mein.class]
Virus:Trj/Java.Binny.A Disinfected C:\Documents and Settings\Dennis\.jpi_cache\jar\1.0\archive.jar-60d4ac05-5e04d544.zip[Beyond.class]
Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.hitbox.com/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.2o7.net/]
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.atwola.com/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.com.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/bravenetA Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.bravenet.com/]
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[statse.webtrendslive.com/]
Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.trafficmp.com/]
Spyware:Cookie/Hitslink Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[counter.hitslink.com/]
Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.overture.com/]
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.questionmarket.com/]
Spyware:Cookie/Falkag Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.as-us.falkag.net/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.adtech.de/]
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.ads.pointroll.com/]
Spyware:Cookie/Humanclick Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[hc2.humanclick.com/]
Spyware:Cookie/Humanclick Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[hc2.humanclick.com/hc/74139060]
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.target.com/]
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.atwola.com/]
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.questionmarket.com/]
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[statse.webtrendslive.com/]
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.target.com/]
Spyware:Cookie/Humanclick Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[hc2.humanclick.com/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.2o7.net/]
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.target.com/]
Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.overture.com/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.atdmt.com/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.2o7.net/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.advertising.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.adtech.de/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.fastclick.net/]
Spyware:Cookie/Hitslink Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[counter.hitslink.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Falkag Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.as-us.falkag.net/]
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.ads.pointroll.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.2o7.net/]
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.com.com/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.2o7.net/]
Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.hitbox.com/]
Spyware:Cookie/Humanclick Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[hc2.humanclick.com/hc/74139060]
Hacktool:Exploit/URLSpoof Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0000531.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0002251.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0002316.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0002346.~]
Virus:Trj/Goldun.IP Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[setup.zip][Setup.exe]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0002647.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0003055.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0003291.~]
Hacktool:Exploit/URLSpoof Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0003319.~]
Virus:Trj/Goldun.Q Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[setup.rar][SecurityEgold.EXE]
Virus:Trj/Mitglieder.BO Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[345556.rar][dddd.exe]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0003383.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0003538.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0003591.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0004625.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0004686.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0005006.~]
Virus:W32/Sober.U.worm!CME-414 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[your_text.zip][mail.document.Datex-packed.exe]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0005206.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0005613.~]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[error-mail_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[account_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[our_secret.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[error-mail_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[account_info-text.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[error-mail_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[mail_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[account_info-text.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[our_secret.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[account_info-text.zip][Winzipped-Text_Data.txt .pif]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0006782.~]
Virus:W32/Bagle.ER.worm Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[new__price.zip][06.exe]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0009842.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0013063.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0016416.~]
Virus:Trj/Haxdoor.LZ Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[WC2905036.zip][WC2905036.exe]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Dennis\Cookies\dennis@ad.yieldmanager[2].txt
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Dennis\Cookies\dennis@atwola[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Dennis\Cookies\dennis@belnk[1].txt
Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Dennis\Cookies\dennis@burstnet[2].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Dennis\Cookies\dennis@dist.belnk[2].txt
Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\Dennis\Cookies\dennis@www.burstbeacon[2].txt
Adware:Adware/Tubby Not disinfected C:\WINDOWS\system32\MTC.ini
Adware:Adware/TopSpyware Not disinfected C:\WINDOWS\system32\spoolsrv32.exe
Adware:adware/bluescreenwarning Not disinfected C:\wp.bmp
Spyware:Cookie/Atlas DMT Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.atdmt.com/]
Spyware:Cookie/Statcounter Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.statcounter.com/]
Spyware:Cookie/Maxserving Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.maxserving.com/]
Spyware:Cookie/FastClick Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.fastclick.net/]
Spyware:Cookie/Hitbox Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.hitbox.com/]
Spyware:Cookie/Casalemedia Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.casalemedia.com/]
Spyware:Cookie/Advertising Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.advertising.com/]
Spyware:Cookie/2o7 Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.2o7.net/]
Spyware:Cookie/Doubleclick Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Mediaplex Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.mediaplex.com/]
Spyware:Cookie/Com.com Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.com.com/]
Spyware:Cookie/Bluestreak Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.bluestreak.com/]
Spyware:Cookie/2o7 Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.2o7.net/]
Spyware:Cookie/Serving-sys Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.serving-sys.com

I don't think you posted the full Panda log, to me it seems some has got cut off. Can you post me the whole log again please, using more than one reply if necessary.
Thanks,
Charles

Panda Scan Part 1


Incident Status Location

Hacktool:Exploit/URLSpoof Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0000531.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0002251.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0002316.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0002346.~]
Virus:Trj/Goldun.IP Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[setup.zip][Setup.exe]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0002647.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0003055.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0003291.~]
Hacktool:Exploit/URLSpoof Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0003319.~]
Virus:Trj/Goldun.Q Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[setup.rar][SecurityEgold.EXE]
Virus:Trj/Mitglieder.BO Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[345556.rar][dddd.exe]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0003383.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0003538.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0003591.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0004625.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0004686.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0005006.~]
Virus:W32/Sober.U.worm!CME-414 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[your_text.zip][mail.document.Datex-packed.exe]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0005206.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0005613.~]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[error-mail_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[account_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[our_secret.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[error-mail_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[account_info-text.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[error-mail_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[mail_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[account_info-text.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[our_secret.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[account_info-text.zip][Winzipped-Text_Data.txt .pif]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0006782.~]
Virus:W32/Bagle.ER.worm Disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[new__price.zip][06.exe]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0009842.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0013063.~]
Hacktool:Exploit/iFrame Not disinfected C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox[~0016416.~]
Adware:adware/cws Not disinfected C:\Documents and Settings\All Users\Favorites\Download Free Spyware Remover.url
Hacktool:Exploit/ByteVerify Not disinfected C:\Documents and Settings\Dennis\.jpi_cache\file\1.0\Dummy.class-5db50b5e-48120a14.class
Virus:Trj/Java.Binny.A Disinfected C:\Documents and Settings\Dennis\.jpi_cache\jar\1.0\archive.jar-60d4ac05-5e04d544.zip[Mein.class]
Virus:Trj/Java.Binny.A Disinfected C:\Documents and Settings\Dennis\.jpi_cache\jar\1.0\archive.jar-60d4ac05-5e04d544.zip[Beyond.class]
Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.hitbox.com/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.2o7.net/]
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.atwola.com/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.advertising.com/]
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.com.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.atdmt.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.fastclick.net/]
Spyware:Cookie/bravenetA Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.bravenet.com/]
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[statse.webtrendslive.com/]
Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.trafficmp.com/]
Spyware:Cookie/Hitslink Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[counter.hitslink.com/]
Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.overture.com/]
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.questionmarket.com/]
Spyware:Cookie/Falkag Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.as-us.falkag.net/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.adtech.de/]
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.ads.pointroll.com/]
Spyware:Cookie/Humanclick Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[hc2.humanclick.com/]
Spyware:Cookie/Humanclick Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[hc2.humanclick.com/hc/74139060]
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt[.target.com/]
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.atwola.com/]
Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.questionmarket.com/]
Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[statse.webtrendslive.com/]
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.target.com/]
Spyware:Cookie/Humanclick Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[hc2.humanclick.com/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.2o7.net/]
Spyware:Cookie/Target Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.target.com/]
Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.overture.com/]
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.atdmt.com/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.2o7.net/]
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.advertising.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.adtech.de/]
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.fastclick.net/]
Spyware:Cookie/Hitslink Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[counter.hitslink.com/]
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Falkag Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.as-us.falkag.net/]
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.ads.pointroll.com/]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[ad.yieldmanager.com/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.2o7.net/]
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.com.com/]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.2o7.net/]
Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.hitbox.com/]
Spyware:Cookie/Humanclick Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[hc2.humanclick.com/hc/74139060]
Hacktool:Exploit/URLSpoof Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0000531.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0002251.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0002316.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0002346.~]
Virus:Trj/Goldun.IP Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[setup.zip][Setup.exe]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0002647.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0003055.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0003291.~]
Hacktool:Exploit/URLSpoof Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0003319.~]
Virus:Trj/Goldun.Q Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[setup.rar][SecurityEgold.EXE]
Virus:Trj/Mitglieder.BO Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[345556.rar][dddd.exe]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0003383.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0003538.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0003591.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0004625.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0004686.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0005006.~]
Virus:W32/Sober.U.worm!CME-414 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[your_text.zip][mail.document.Datex-packed.exe]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0005206.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0005613.~]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[error-mail_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[account_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[our_secret.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[error-mail_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[account_info-text.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[error-mail_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[mail_info.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[account_info-text.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[our_secret.zip][Winzipped-Text_Data.txt .pif]
Virus:W32/Sober.V.worm!CME-456 Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[account_info-text.zip][Winzipped-Text_Data.txt .pif]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0006782.~]
Virus:W32/Bagle.ER.worm Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[new__price.zip][06.exe]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0009842.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0013063.~]
Hacktool:Exploit/iFrame Not disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[~0016416.~]
Virus:Trj/Haxdoor.LZ Disinfected C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox[WC2905036.zip][WC2905036.exe]
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Dennis\Cookies\dennis@ad.yieldmanager[2].txt

End PandaScan part 1.

PandaScan paert 2 of 2

Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Dennis\Cookies\dennis@atwola[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Dennis\Cookies\dennis@belnk[1].txt
Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Dennis\Cookies\dennis@burstnet[2].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Dennis\Cookies\dennis@dist.belnk[2].txt
Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\Dennis\Cookies\dennis@www.burstbeacon[2].txt
Adware:Adware/Tubby Not disinfected C:\WINDOWS\system32\MTC.ini
Adware:Adware/TopSpyware Not disinfected C:\WINDOWS\system32\spoolsrv32.exe
Adware:adware/bluescreenwarning Not disinfected C:\wp.bmp
Spyware:Cookie/Atlas DMT Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.atdmt.com/]
Spyware:Cookie/Statcounter Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.statcounter.com/]
Spyware:Cookie/Maxserving Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.maxserving.com/]
Spyware:Cookie/FastClick Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.fastclick.net/]
Spyware:Cookie/Hitbox Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.hitbox.com/]
Spyware:Cookie/Casalemedia Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.casalemedia.com/]
Spyware:Cookie/Advertising Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.advertising.com/]
Spyware:Cookie/2o7 Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.2o7.net/]
Spyware:Cookie/Doubleclick Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.doubleclick.net/]
Spyware:Cookie/Mediaplex Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.mediaplex.com/]
Spyware:Cookie/Com.com Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.com.com/]
Spyware:Cookie/Bluestreak Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.bluestreak.com/]
Spyware:Cookie/2o7 Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.2o7.net/]
Spyware:Cookie/Serving-sys Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.serving-sys.com/]
Spyware:Cookie/2o7 Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.2o7.net/]
Spyware:Cookie/Atwola Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.atwola.com/]
Spyware:Cookie/bravenetA Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.bravenet.com/]
Spyware:Cookie/2o7 Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.2o7.net/]
Spyware:Cookie/bravenetA Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.bravenet.com/]
Spyware:Cookie/Zedo Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.zedo.com/]
Spyware:Cookie/2o7 Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.2o7.net/]
Spyware:Cookie/Reliablestats Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[stats1.reliablestats.com/]
Spyware:Cookie/360i Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.ct.360i.com/]
Spyware:Cookie/Reliablestats Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[stats1.reliablestats.com/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[server.iad.liveperson.net/]
Spyware:Cookie/CentrPort Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.centrport.net/]
Spyware:Cookie/Bfast Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[.bfast.com/]
Spyware:Cookie/Server.iad.Liveperson Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[server.iad.liveperson.net/hc/LPearthlink2]
Spyware:Cookie/WebtrendsLive Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[statse.webtrendslive.com/S005-01-8-22-269153-98647]
Spyware:Cookie/WebtrendsLive Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[statse.webtrendslive.com/dcsklxjd7oifwzramfu7ehxd9_2j2f]
Spyware:Cookie/WebtrendsLive Not disinfected D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt[statse.webtrendslive.com/dcsi8dupuerp17vzhd59b2lwc_8u5u]

End PandaScan part 2 of 2

Hey there,
It looks to me like you have a lot of infected emails, and this could have been where your infection came from in the first place. Therefore, I would reccommend you go through all your emails and delete any unknown ones, or any that you don't trust the sender 100%.
Please print off a copy of these instructions, and also save them to a Notepad file on your desktop, so they are easily accessible.
We are going to boot into Safe Mode later in the fix, and there is no internet access.

Please download AVG Anti-Spyware to your Desktop.
Start the set-up program by double clicking the installer.
Follow the on screen instructions to install the program, making sure that "Launch AVG Anti-Spyware" is checked.
Click the Update tab then select Start update; a progress bar will show the updates being installed.
Now press the Scanner icon, and click the Settings tab.
Click Recommended actions, then set it to Quarantine.
Close the program now, we will scan with it later on.

Now, please reboot your computer into Safe Mode.
This is done by rebooting Windows and pressing F8 at boot/Windows startup, usually right after the beep.
Then select Safe Mode from the list.

Let's clean out your temporary internet files:
Close all open windows before we start.
Go to Start | Control Panel | Internet Options | General.
Click the Delete Cookies button.
Next to it, click the Delete Files button.
When prompted, place a check in: 'Delete all offline content', click OK

If you have Firefox installed, we need to clean out these temporary files as well:
Go to Tools | Options.
Click Privacy.
Press the Clear button located to the right of each option (History, Cookies, Cache).
Click OK to finish, before closing it.
Alternatively, you can clear all information stored while browsing by clicking Clear All.
A confirmation dialog box will be shown before clearing the information.

Now we'll clean other temporary files and your Recycle Bin:
Go to Start | Run | type: cleanmgr | OK.
Let it scan your system for files to remove.
Make sure 'Temporary Files', 'Temporary Internet Files', and 'Recycle Bin' are the only things checked.
Press OK to remove them.

Click Start | Control Panel.
Double click the Java icon.
Click Settings under "Temporary Internet Files".
Press Delete Files.
A window will open with three options to clear the cache.
- Delete Files
- View Applications
- View Applets
Click OK on "Delete Temporary Files" window.
Note: This deletes all the Downloaded Applications and Applets from the cache.
Click OK on "Temporary Files Settings" window.

Find and delete the following files:

C:\Documents and Settings\All Users\Favorites\Download Free Spyware Remover.url
C:\WINDOWS\system32\MTC.ini
C:\WINDOWS\system32\spoolsrv32.exe
C:\wp.bmp

Launch AVG Anti-Spyware by double clicking the icon on your Desktop.
Press the Scanner icon.
Then click on the Complete System Scan button.
If any infections are found, you will be asked for an action; select Apply all actions.
Now press the Reports icon at the top.
Choose Save report as and save the text file to your Desktop.
Please post this log in your next reply.

Reboot into Normal Mode again.

Please post me back the AVG report, and let me know- how are things running?
Thanks,
Charles

Due to lack of feedback, this topic is now closed.

If you need this topic reopened, please request this by sending me a Personal Message including a link to your thread.
This applies only to the original topic starter.

Everyone else please begin a New Topic.

Re-opened...

Hi Charles,


I completed your last set of recommendations with the following notes and results.

As regards your recommendations, the following detail a couple problems I had with them.

1. I did NOT do the "clean-up" associated with the Control Panel-Java Icon because when I double clicked the icon, the screens that appeared were not close enough to follow your procedure. I saw NO "Temporary Internet Files" when I doubled clicked the Jave Icon. My Java Plug-in is version 1.4.0_01.

2. I only found a "Download Free Spyware Remover (.url?) SHORTCUT, and it was located in My User NOT All Users. I did delete the shortcut.

3. I followed the other recommendations with little trouble.

As regards the AVG scan, please note the following:

1. I only ran it on my C drive as my D drive is used as a backup and is simply a mirror of C. I use Norton Ghost 9.0 for this. This is why you will see a manual stop in the AVG "report".

2. My AVG Free Edition release is 7.5.432. I could NOT find any report save feature. Instead I saved a report screen shot which I'll send to you in an email. I don't otherwise know how to put it in a BleepingComputer post.



Otherwise my PC is running fine. I really never had any actual symptoms ,just that suspect windowsfy in my startup and the suspect wp.bmp file in my C root.

Is this all I need to do?

Dennise

Hey Dennise,

This is all OK.


Hmm, I get the option to save a report, however, posting a picture will be fine. Please upload your screenshot at a site like ImageShack, and just post me the link it will give you to your picture.
Thanks,
Charles

Here's the link to my AVG Free scan report:

http://img254.imageshack.us/my.php?image=a...port2507nd8.png


Dennise

That's from AVG Antivirus, you were meant to be running a scan from AVG Antispyware. Please follow my previous instructions to run a scan from Safe Mode, posting me back the log it creates.
Thanks,
Charles

OK, I ran the AVG Anti-Spyware but with two problems.

1.AVG Anti-Spyware stalled out after scanning about 91,000 objects. It stalled out on some older "files" that I used to help recover from a hard drive crash a while back (I was using a utility called GetDataBack). Somehow, AVG Anti-Spyware hangs up when it tries to scan these, and I had a hard time even ending the program when AVG stalled. I note that when Norton Ghost backs up my C drive to my D drive, it ignores these same "files".

2. When I restart in normal mode (after Safe Mode), Spybot tells me that something tries to modify my registry and put Windowsfy, Wp.exe and MakeMeSearch back in! Of course I don't allow these changes. What is responsible for these attempts?

Anyway, a AVG Anti-Spyware report was created and follows below.

BTW, thanks for sticking with this.

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 4:16:20 PM 2/7/2007

+ Scan result:



:mozilla.135:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.136:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.142:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.143:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.158:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.166:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.169:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.170:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.173:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.176:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.228:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.39:C:\Documents and Settings\Dennis\Application Data\Mozilla\Firefox\Profiles\5rhvumn1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.68:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.73:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.85:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.86:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.74:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.75:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.76:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.78:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.72:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.150:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.108:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.118:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.87:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.10:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.183:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.184:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.61:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.105:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Hitslink : Cleaned.
:mozilla.71:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.122:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.123:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.124:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.28:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.29:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.126:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.127:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.128:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.131:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.80:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.81:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.82:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.83:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.84:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.171:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.174:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.175:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.37:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.125:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.132:C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\Dennis\.jpi_cache\file\1.0\Dummy.class-5db50b5e-48120a14.class -> Trojan.ClassLoader.Dummy.d : Cleaned with backup (quarantined).


::Report end

Go to Start | Control Panel | Add/Remove Programs and remove the following (if they exist):

GetDataBack
Since this is causing AVG to stall, I'd like you to remove it if you do not currently use it. There are lots of other programs that do a similar job anyway, so you could download an alternative one instead. Then delete the associated folder in "C:\Program Files" which will probably be called GetDataBack.

Please reboot your computer into Safe Mode.
This is done by rebooting Windows and pressing F8 at boot/Windows startup, usually right after the beep.
Then select Safe Mode from the list.

Let's clean out your temporary internet files:
Close all open windows before we start.
Go to Start | Control Panel | Internet Options | General.
Click the Delete Cookies button.
Next to it, click the Delete Files button.
When prompted, place a check in: 'Delete all offline content', click OK

If you have Firefox installed, we need to clean out these temporary files as well:
Go to Tools | Options.
Click Privacy.
Press the Clear button located to the right of each option (History, Cookies, Cache).
Click OK to finish, before closing it.
Alternatively, you can clear all information stored while browsing by clicking Clear All.
A confirmation dialog box will be shown before clearing the information.

Now we'll clean other temporary files and your Recycle Bin:
Go to Start | Run | type: cleanmgr | OK.
Let it scan your system for files to remove.
Make sure 'Temporary Files', 'Temporary Internet Files', and 'Recycle Bin' are the only things checked.
Press OK to remove them.

Click Start | Control Panel.
Double click the Java icon.
Click Settings under "Temporary Internet Files".
Press Delete Files.
A window will open with three options to clear the cache.
- Delete Files
- View Applications
- View Applets
Click OK on "Delete Temporary Files" window.
Note: This deletes all the Downloaded Applications and Applets from the cache.
Click OK on "Temporary Files Settings" window.

Reboot into Normal Mode again.

Please try running AVG again, using my previous set of instructions if necessary (just making sure you leave out the "boot into safe mode" steps.) Save the log it creates and post it in your next reply.

Download F-Secure Blacklight and save it to your Desktop.
Double click on blbeta.exe to start the program.
Accept the user agreement and click Next.
Click Scan. You will then see a list of all the items found.
Do not choose to rename any yet! I want to see the log first because legitimate items can also be present.
BlackLight will have created a log on your Desktop named "fsbl-xxxxxxx.log" (the xxxxxxx will be the date and time of the scan).
Post that log in your next reply.

Please do an online scan with Kaspersky WebScanner
You will be promted to install an ActiveX component from Kaspersky, Click Yes.
The program will launch and then begin downloading the latest definition files:
Once the files have been downloaded click on Next
Select a target to scan; click on My Computer
The scan will take a while so be patient and let it run.
Once the scan is complete choose the option to Save as Text
Post these results in your next reply.

Please post me back the AVG log, Kaspersky report, along with the BlackLight log.
Thanks,
Charles

I'm following your latest recommendations today and will post results later today.

Dennise

Okay, thanks...I look forward to your reply

OK, I followed your recommendations in post # 21. Looks like you were right about some troublesome emails.

Here are the three reports:

1. AVG AntiVirus:
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 11:16:12 AM 2/12/2007

+ Scan result:



C:\System Volume Information\_restore{91B40562-13AF-45C5-808F-22142853156D}\RP318\A0053986.exe -> Adware.FindSpy : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{91B40562-13AF-45C5-808F-22142853156D}\RP300\A0052253.dll -> Backdoor.Agent.en : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{91B40562-13AF-45C5-808F-22142853156D}\RP300\A0052249.dll -> Downloader.Agent.rm : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{91B40562-13AF-45C5-808F-22142853156D}\RP300\A0052250.dll -> Downloader.Agent.rm : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{91B40562-13AF-45C5-808F-22142853156D}\RP300\A0052251.exe -> Dropper.Small.uy : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{91B40562-13AF-45C5-808F-22142853156D}\RP300\A0052248.exe -> Dropper.Small.zp : Cleaned with backup (quarantined).
:mozilla.23:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.48:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.49:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.58:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.66:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.73:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.74:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.77:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.89:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.22:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.6:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.156:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.45:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.15:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.153:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Centrport : Cleaned.
:mozilla.34:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.35:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.32:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.10:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.119:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.13:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.146:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.14:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.111:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.129:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.157:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.158:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.159:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.160:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.162:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.163:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.33:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.100:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Pro-market : Cleaned.
:mozilla.101:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Pro-market : Cleaned.
:mozilla.102:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.103:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.104:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.105:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.127:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.128:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.51:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.52:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.53:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.54:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.88:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.8:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.164:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.165:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.166:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.168:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.72:D:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\cookies.txt -> TrackingCookie.Zedo : Cleaned.
C:\System Volume Information\_restore{91B40562-13AF-45C5-808F-22142853156D}\RP300\A0052254.exe -> Trojan.Agent.ct : Cleaned with backup (quarantined).


::Report end

2. Blacklight found no problems. Here's the "report" but it doesn't show very much.

02/12/07 11:18:51 [Info]: BlackLight Engine 1.0.55 initialized
02/12/07 11:18:51 [Info]: OS: 5.1 build 2600 (Service Pack 1)
02/12/07 11:18:51 [Note]: 7019 4
02/12/07 11:18:51 [Note]: 7005 0
02/12/07 11:19:06 [Note]: 7006 0
02/12/07 11:19:06 [Note]: 7011 1960
02/12/07 11:19:06 [Note]: 7026 0
02/12/07 11:19:07 [Note]: 7026 0
02/12/07 11:19:24 [Note]: FSRAW library version 1.7.1021
02/12/07 11:19:26 [Note]: 4013 10097
02/12/07 11:19:26 [Note]: 4020 9103 65536
02/12/07 11:19:26 [Note]: 4020 9103 65536
02/12/07 11:19:26 [Note]: 4018 9103 65536
02/12/07 11:19:26 [Note]: 4013 10097
02/12/07 11:19:26 [Note]: 4020 9103 65536
02/12/07 11:19:26 [Note]: 4018 9103 65536
02/12/07 11:25:44 [Note]: 7007 0



3. Lastly, here's the Kaspersky report; part 1/2. By the way, what is the meaning of "Object is Locked"?

KASPERSKY ONLINE SCANNER REPORT
Monday, February 12, 2007 6:38:38 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 1 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 13/02/2007
Kaspersky Anti-Virus database records: 252172
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 72645
Number of viruses found: 3
Number of infected objects: 48 / 0
Number of suspicious objects: 120
Duration of the scan process: 02:02:34

Infected Object Name / Virus Name / Last Action
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From MikeW <m .. ... /[From "Storage System" <masterrobot@microsoft.com>][Date Thu, 7 Apr 2005 23:12:38 +0200 (added by postmaster@pne.skanova.net)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From MikeW <m ... /[From "Storage System" <masterrobot@microsoft.com>][Date Thu, 7 Apr 2005 23:12:38 +0200 (added by postmaster@pne.skanova.net)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From MikeW <mswpa@earthlink.net>][Dat ... /[From EarthLink Customer Experience Team <benefits@earthlink.net>][Date Thu, 07 Apr 2005 10:46:56 PDT]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From MikeW <mswpa@earthlink.net>][Date Thu, 7 Apr 2005 12:47:54 -0400 (GMT-04:00)]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From "Microsoft Public Services" <bojxa ... /[From "MS Internet Mail System" <emailrobot@puremail.com>][Date Sat, 9 Apr 2005 10:00:15 +0300 (EEST)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From "Microsoft Public Services" <bojxaypbpn_okpz@newsl ... /[From "Mohamed Melton" <Mlvtr@glasscity.net>][Date Sat, 09 Apr 2005 01:47:43 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From "Microsoft Public Services" <bojxaypbpn_okpz@newsl . ... /[ ... /[From schmader@webtv.net (southwest2)][Date Fri, 8 Apr 2005 15:00:13 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From "Microsoft Public Services" <bojxaypbpn_okpz@newsl . ... /[From "Pete Bennett" <petebennett@hotmail.com>][Date Fri, 08 Apr 2005 20:52:50 +0000]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From "Microsoft Public Services" <bojxaypbpn_okpz@newsl ... /[From "Davidson Andrews" <dandrews@mpinet.net>][Date Fri, 8 Apr 2005 09:01:51 -0400]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From "Microsoft Public Services" <bojxaypbpn_okpz@newsletters_ms.com>][Date Fri, 8 Apr 2005 13:11:21 +0300 (EEST)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 16 Apr 2005 17:41:24 -0400]/te .. ... /[From "network email storage system" <imailservice@aol.net>][Date Mon, 18 Apr 2005 20:00:07 +0200 (added by postmaster@pne.skanova.net)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 16 Apr 2005 17:41:24 -0400]/te ... /[From "network email storage system" <imailservice@aol.net>][Date Mon, 18 Apr 2005 20:00:07 +0200 (added by postmaster@pne.skanova. ... /UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 16 Apr 2005 17:41:24 -0400]/te ... /[From "network email storage system" <imailservice@aol.net>][Date Mon, 18 Apr 2005 20:00:07 +0200 (added by postmaster@pne.skanova.net)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 16 Apr 2005 17:41:24 -0400]/text/[From "Jordan Wray" <Wtaxwpx@exoticity.com>][Date Mo ... /[From "geniesearch" <geniesearch@verizon.net>][Date Mon, 18 Apr 2005 13:24:23 -0400]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 16 Apr 2005 17:41:24 -0400]/text/[From "Jordan Wray" <Wtaxwpx@exoticity.com>][Date Mon, 18 Apr 2005 10:13:35 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 16 Apr 2005 17:41:24 -0400]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Thu, 05 May 2005 16:15:29 -0400]/html/[From WolfordGen@aol.com][Date Fri, 6 May 2005 ... /[From "eBay Member: redhogsnapper" <member@ebay.com>][Date Sun, 8 May 2005 08:13:11 -0700]/text Infected: Trojan-Spy.HTML.Bayfraud.ib skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Thu, 05 May 2005 16:15:29 -0400]/html/[From WolfordGen@aol.com][Date Fri, 6 May 2005 21:52:37 EDT]/text/[From Over71@aol.com][Date Sat, 7 May 2005 21:23:04 EDT]/UNNAMED Infected: Trojan-Spy.HTML.Bayfraud.ib skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Thu, 05 May 2005 16:15:29 -0400]/html/[From WolfordGen@aol.com][Date Fri, 6 May 2005 21:52:37 EDT]/text Infected: Trojan-Spy.HTML.Bayfraud.ib skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Thu, 05 May 2005 16:15:29 -0400]/html Infected: Trojan-Spy.HTML.Bayfraud.ib skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sun, 15 May 2005 19:51:21 -0400]/text/[From Greg and Cheryl Campfield <gacampfield@y ... /[From "Administrator" <umailengine@puremail.com>][Date Sat, 21 May 2005 23:50:12 +000 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sun, 15 May 2005 19:51:21 -0400]/text/[From Greg and Cheryl Campfield <gacampfield@y ... /[From "Administrator" <umailengine@puremail.com>][Date Sat, 21 May 2005 23:50:12 +0000]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sun, 15 May 2005 19:51:21 -0400]/text/[From Greg and Cheryl Campfield <gacampfield@yahoo.com>][Date ... /[From "G. ... /[From Checfam@aol.com][Date Sat, 21 May 2005 17:09:42 EDT]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sun, 15 May 2005 19:51:21 -0400]/text/[From Greg and Cheryl Campfield <gacampfield@yahoo.com>][Date ... /[From "G. Lee Hearl" <glh@naxs.com>][Date Sat, 21 May 2005 16:38:47 -0400]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sun, 15 May 2005 19:51:21 -0400]/text/[From Greg and Cheryl Campfield <gacampfield@yahoo.com>][Date Fri, 20 M ... /[From <piper@zoner.com>][Date Sat, 21 May 2005 20:17:23 +0200]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sun, 15 May 2005 19:51:21 -0400]/text/[From Greg and Cheryl Campfield <gacampfield@yahoo.com>][Date Fri, 20 May 2005 04:47:15 -0700 (PDT)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sun, 15 May 2005 19:51:21 -0400]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from . ... /[F ... /[From "PayPal" <service@paypal.com>][Date Sun, 06 Nov 2005 18:50:09 +060 ... /html Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from . ... /[F ... /[From "PayPal" <service@paypal.com>][Date Sun, 06 Nov 2005 18:50:09 +0600]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from . ... /[From "Maude Swift" <bwgcaPedro@warsnet.pl>][Date Wed, 05 Sep 2001 01:47:44 +0200]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... /[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 05 Nov 2005 08:36:10 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... /[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 05 Nov 2005 08:33:06 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... /[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 05 Nov 2005 08:27:56 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... /[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 05 Nov 2005 08:25:17 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... . ... /[From "earl helmick" <ehelmick1@cfl.rr.com>][Date Tue, 4 Oct 2005 14:06:56 -0700]/text Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... ... ... /[From <completed@orlandosentinel.com>][Date Tue, 4 Oct 2005 08:38:55 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... ... /[From "Larry Spoon" <spoonb@bellsouth.net>][Date Tue, 4 Oct 2005 07:00:11 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... / ... /[From "Cody Booth" <codyt@pflanzenoel.ch>][Date Tue, 4 Oct 2005 01:34:41 -0500]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... /[From "Davidson Andrews ... /[From AWllmsJr@aol.com][Date Fri, 30 Sep 2005 22:22:33 EDT]/text Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... /[From "Davidson Andrews" <dandrews@mpinet.net>][Date Wed, 21 Sep 2005 17:52:37 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from Davidson and Rowan Co's][Date Tue, 20 Sep 2005 21:28:15 -0500]/text Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Mona Anderson <roadqueen1340@yahoo.com>][Date Tue, 29 Nov 2005 07:55:06 -0800 (PST)]/text/[From "Janice Keeter" <linjan@msys.net>][Date Fri, 2 Dec 2005 17:33:59 -0500]/text/[From "Elva Pearce" <U0_Day@accglobal.net>][Date Sat, 03 Dec 2005 04:41:17 -0300]/UNNAMED/[From "Bernard Covington" <gzalkgaaiv@level3.net>][Date Sat, 03 Dec 2005 10:46:50 +0300]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Mona Anderson <roadqueen1340@yahoo.com>][Date Tue, 29 Nov 2005 07:55:06 -0800 (PST)]/text/[From "Janice Keeter" <linjan@msys.net>][Date Fri, 2 Dec 2005 17:33:59 -0500]/text/[From "Elva Pearce" <U0_Day@accglobal.net>][Date Sat, 03 Dec 2005 04:41:17 -0300]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Mona Anderson <roadqueen1340@yahoo.com>][Date Tue, 29 Nov 2005 07:55:06 -0800 (PST)]/text/[From "Janice Keeter" <linjan@msys.net>][Date Fri, 2 Dec 2005 17:33:59 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Mona Anderson <roadqueen1340@yahoo.com>][Date Tue, 29 Nov 2005 07:55:06 -0800 (PST)]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From these vulnerabilities, the most serious of which could][Date Fri, 3 Feb 2006 17:47:48 +1030]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From " ... ... /[From "Joan Semper" ... /[From Mkwaw@aol.com][Date Fri, 3 Feb 2006 00:08:20 EST]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From " ... ... /[From "Joan Semper" <jsemper@earthlink.net>][Date Thu, 2 Feb 2006 18:46:23 -0800]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From " ... ... /[From "flowerchild" <flowerchild@epix.net>][Date Thu, 2 Feb 2006 16:46:28 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From " ... ... /[From "DOROTHY MICHAEL" <dotjuan1@msn.com>][Date Tue, 31 Jan 2006 20:26:46 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From " ... /[From "Bu ... /[From "Sandy" <sandy-h@rrt.net>][Date Mon, 30 Jan 2006 16:19:04 -0600]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From " ... /[From "Butch ... /[From <jad331@bellsouth.net>][Date Mon, 30 Jan 2006 7:55:00 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From " ... /[From "Butch Helmick" <bhelmick@adacel.com>][Date Fri, 27 Jan 2006 08:42:55 -0500]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From "Meg S ... /[From Jozy Ray <gdohdr@arizonahub.com>][Date Fri, 27 Jan 2006 16:58:38 +0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From "Meg Scrivens" <TAndres_zVonSemmlere@magmacom.com>][Date Fri, 27 Jan 2006 01:46:11 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... / ... /[From "Horton Kaefer" <fellfgutEula@global2000.net>][Date Fri, 27 Jan 2006 04:00:52 -0400]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From "Camile Bastien" <OGallard_dPlmcoopu@highfiber.com>][Date Fri, 27 Jan 2006 12:14:45 +0500]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 Jan 2 ... /[From "Pierre Rabie" <JbRamonMcDonoughb@westol.com>][Date Fri, 27 Jan 2006 09:10:42 +0300]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 Jan 2006 02:45:34 -0500]/text/[From Ray Atkinson <n33ufr@gmail.com>][Date Thu, 26 Jan 2006 06:11:51 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 Jan 2006 02:45:34 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped

Here's the Kaspersky report; part 2/2:

C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED/[From "Elaine Holmes" <FMitzigig@reefnet.com.au>][Date Tue, 04 Apr 2006 00:23:10 -0800]/UNNAMED/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 04 Apr 2006 10:55:37 -0400]/UN ... /[From "Microsoft Email Storage Service" <mailprogram@aol.com>][Date Sun, 9 Apr 2006 16:00:07 +0800 (CST)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED/[From "Elaine Holmes" <FMitzigig@reefnet.com.au>][Date Tue, 04 Apr 2006 00:23:10 -0800]/UNNAMED/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 04 Apr 2006 10:55:37 -0400]/UNNAMED/[ ... /[From "Tisha M ... /[From notifications-noreply@lunarpages.com][Date Wed, 5 Apr 2006 20:24:27 -0700]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED/[From "Elaine Holmes" <FMitzigig@reefnet.com.au>][Date Tue, 04 Apr 2006 00:23:10 -0800]/UNNAMED/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 04 Apr 2006 10:55:37 -0400]/UNNAMED/[ ... /[From "Tisha Morris" <JdehumidifyTanner@derbycounty.co.uk>][Date Wed, 05 Apr 2006 19:58:54 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED/[From "Elaine Holmes" <FMitzigig@reefnet.com.au>][Date Tue, 04 Apr 2006 00:23:10 -0800]/UNNAMED/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 04 Apr 2006 10:55:37 -0400]/UNNAMED/[ ... /[From "Hollie Jolly" <GHumbertonortheastern@huddcoll.ac.uk>][Date Wed, 05 Apr 2006 16:55:02 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED/[From "Elaine Holmes" <FMitzigig@reefnet.com.au>][Date Tue, 04 Apr 2006 00:23:10 -0800]/UNNAMED/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 04 Apr 2006 10:55:37 -0400]/UNNAMED/[From Helen _ ... /[From Alamo Rent A Car <Alamo@alamo.com>][Date Wed, 5 Apr 2006 10:48:05 -0700 (PDT)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED/[From "Elaine Holmes" <FMitzigig@reefnet.com.au>][Date Tue, 04 Apr 2006 00:23:10 -0800]/UNNAMED/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 04 Apr 2006 10:55:37 -0400]/UNNAMED/[From Helen _Ohio <ladyhollyvalentine@yahoo.com>][Date Wed, 5 Apr 2006 03:32:35 -0700 (PDT)]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED/[From "Elaine Holmes" <FMitzigig@reefnet.com.au>][Date Tue, 04 Apr 2006 00:23:10 -0800]/UNNAMED/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 04 Apr 2006 10:55:37 -0400]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED/[From "Elaine Holmes" <FMitzigig@reefnet.com.au>][Date Tue, 04 Apr 2006 00:23:10 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Data\BackUp Stuff\Netscape\Mail\mail.earthlink.net\Inbox Mail Berkeley mbox: infected - 23, suspicious - 60 skipped
C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped
C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From MikeW <m .. ... /[From "Storage System" <masterrobot@microsoft.com>][Date Thu, 7 Apr 2005 23:12:38 +0200 (added by postmaster@pne.skanova.net)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From MikeW <m ... /[From "Storage System" <masterrobot@microsoft.com>][Date Thu, 7 Apr 2005 23:12:38 +0200 (added by postmaster@pne.skanova.net)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From MikeW <mswpa@earthlink.net>][Dat ... /[From EarthLink Customer Experience Team <benefits@earthlink.net>][Date Thu, 07 Apr 2005 10:46:56 PDT]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From MikeW <mswpa@earthlink.net>][Date Thu, 7 Apr 2005 12:47:54 -0400 (GMT-04:00)]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From "Microsoft Public Services" <bojxa ... /[From "MS Internet Mail System" <emailrobot@puremail.com>][Date Sat, 9 Apr 2005 10:00:15 +0300 (EEST)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From "Microsoft Public Services" <bojxaypbpn_okpz@newsl ... /[From "Mohamed Melton" <Mlvtr@glasscity.net>][Date Sat, 09 Apr 2005 01:47:43 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From "Microsoft Public Services" <bojxaypbpn_okpz@newsl . ... /[ ... /[From schmader@webtv.net (southwest2)][Date Fri, 8 Apr 2005 15:00:13 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From "Microsoft Public Services" <bojxaypbpn_okpz@newsl . ... /[From "Pete Bennett" <petebennett@hotmail.com>][Date Fri, 08 Apr 2005 20:52:50 +0000]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From "Microsoft Public Services" <bojxaypbpn_okpz@newsl ... /[From "Davidson Andrews" <dandrews@mpinet.net>][Date Fri, 8 Apr 2005 09:01:51 -0400]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text/[From "Microsoft Public Services" <bojxaypbpn_okpz@newsletters_ms.com>][Date Fri, 8 Apr 2005 13:11:21 +0300 (EEST)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED/[From "L Culbertson" <lculbertson@verizon.net>][Date Thu, 31 Mar 2005 13:24:06 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED/[From melissa.horan@chgcompanies.com][Date Thu, 31 Mar 2005 11:06:50 -0500]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text/[From <steaming@bellsouth.net>][Date Thu, 31 Mar 2005 06:45:12 -0500]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "J.E. Bean" <jebean1@sbcglobal.net>][Date Sat, 19 Mar 2005 18:59:25 -0600]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 16 Apr 2005 17:41:24 -0400]/te .. ... /[From "network email storage system" <imailservice@aol.net>][Date Mon, 18 Apr 2005 20:00:07 +0200 (added by postmaster@pne.skanova.net)]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 16 Apr 2005 17:41:24 -0400]/te ... /[From "network email storage system" <imailservice@aol.net>][Date Mon, 18 Apr 2005 20:00:07 +0200 (added by postmaster@pne.skanova. ... /UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 16 Apr 2005 17:41:24 -0400]/te ... /[From "network email storage system" <imailservice@aol.net>][Date Mon, 18 Apr 2005 20:00:07 +0200 (added by postmaster@pne.skanova.net)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 16 Apr 2005 17:41:24 -0400]/text/[From "Jordan Wray" <Wtaxwpx@exoticity.com>][Date Mo ... /[From "geniesearch" <geniesearch@verizon.net>][Date Mon, 18 Apr 2005 13:24:23 -0400]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 16 Apr 2005 17:41:24 -0400]/text/[From "Jordan Wray" <Wtaxwpx@exoticity.com>][Date Mon, 18 Apr 2005 10:13:35 -0600]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 16 Apr 2005 17:41:24 -0400]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Thu, 05 May 2005 16:15:29 -0400]/html/[From WolfordGen@aol.com][Date Fri, 6 May 2005 ... /[From "eBay Member: redhogsnapper" <member@ebay.com>][Date Sun, 8 May 2005 08:13:11 -0700]/text Infected: Trojan-Spy.HTML.Bayfraud.ib skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Thu, 05 May 2005 16:15:29 -0400]/html/[From WolfordGen@aol.com][Date Fri, 6 May 2005 21:52:37 EDT]/text/[From Over71@aol.com][Date Sat, 7 May 2005 21:23:04 EDT]/UNNAMED Infected: Trojan-Spy.HTML.Bayfraud.ib skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Thu, 05 May 2005 16:15:29 -0400]/html/[From WolfordGen@aol.com][Date Fri, 6 May 2005 21:52:37 EDT]/text Infected: Trojan-Spy.HTML.Bayfraud.ib skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Thu, 05 May 2005 16:15:29 -0400]/html Infected: Trojan-Spy.HTML.Bayfraud.ib skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sun, 15 May 2005 19:51:21 -0400]/text/[From Greg and Cheryl Campfield <gacampfield@y ... /[From "Administrator" <umailengine@puremail.com>][Date Sat, 21 May 2005 23:50:12 +000 ... /html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sun, 15 May 2005 19:51:21 -0400]/text/[From Greg and Cheryl Campfield <gacampfield@y ... /[From "Administrator" <umailengine@puremail.com>][Date Sat, 21 May 2005 23:50:12 +0000]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sun, 15 May 2005 19:51:21 -0400]/text/[From Greg and Cheryl Campfield <gacampfield@yahoo.com>][Date ... /[From "G. ... /[From Checfam@aol.com][Date Sat, 21 May 2005 17:09:42 EDT]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sun, 15 May 2005 19:51:21 -0400]/text/[From Greg and Cheryl Campfield <gacampfield@yahoo.com>][Date ... /[From "G. Lee Hearl" <glh@naxs.com>][Date Sat, 21 May 2005 16:38:47 -0400]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sun, 15 May 2005 19:51:21 -0400]/text/[From Greg and Cheryl Campfield <gacampfield@yahoo.com>][Date Fri, 20 M ... /[From <piper@zoner.com>][Date Sat, 21 May 2005 20:17:23 +0200]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sun, 15 May 2005 19:51:21 -0400]/text/[From Greg and Cheryl Campfield <gacampfield@yahoo.com>][Date Fri, 20 May 2005 04:47:15 -0700 (PDT)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Sun, 15 May 2005 19:51:21 -0400]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from . ... /[F ... /[From "PayPal" <service@paypal.com>][Date Sun, 06 Nov 2005 18:50:09 +060 ... /html Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from . ... /[F ... /[From "PayPal" <service@paypal.com>][Date Sun, 06 Nov 2005 18:50:09 +0600]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from . ... /[From "Maude Swift" <bwgcaPedro@warsnet.pl>][Date Wed, 05 Sep 2001 01:47:44 +0200]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... /[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 05 Nov 2005 08:36:10 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... /[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 05 Nov 2005 08:33:06 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... /[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 05 Nov 2005 08:27:56 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... /[From Dennis Edinger <dennise9@earthlink.net>][Date Sat, 05 Nov 2005 08:25:17 -0800]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... . ... /[From "earl helmick" <ehelmick1@cfl.rr.com>][Date Tue, 4 Oct 2005 14:06:56 -0700]/text Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... ... ... /[From <completed@orlandosentinel.com>][Date Tue, 4 Oct 2005 08:38:55 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... ... /[From "Larry Spoon" <spoonb@bellsouth.net>][Date Tue, 4 Oct 2005 07:00:11 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... / ... /[From "Cody Booth" <codyt@pflanzenoel.ch>][Date Tue, 4 Oct 2005 01:34:41 -0500]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... /[From "Davidson Andrews ... /[From AWllmsJr@aol.com][Date Fri, 30 Sep 2005 22:22:33 EDT]/text Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from ... /[From "Davidson Andrews" <dandrews@mpinet.net>][Date Wed, 21 Sep 2005 17:52:37 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED/[From [RowanRoots] Moore Family from Davidson and Rowan Co's][Date Tue, 20 Sep 2005 21:28:15 -0500]/text Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 20 Sep 2005 11:53:09 -0400]/UNNAMED Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text/[From "Marianne Fisher" <mlfisher@corlink.com>][Date Wed, 13 Apr 2005 21:01:30 -0400]/text Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text/[From "Janet Lindblom" <janology@cableaz.com>][Date Tue, 12 Apr 2005 17:51:13 -0700]/text Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From hvezda <hvezda@epix.net>][Date Mon, 11 Apr 2005 22:28:05 -0700]/text Infected: Trojan-Spy.HTML.Paylap.ev skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Mona Anderson <roadqueen1340@yahoo.com>][Date Tue, 29 Nov 2005 07:55:06 -0800 (PST)]/text/[From "Janice Keeter" <linjan@msys.net>][Date Fri, 2 Dec 2005 17:33:59 -0500]/text/[From "Elva Pearce" <U0_Day@accglobal.net>][Date Sat, 03 Dec 2005 04:41:17 -0300]/UNNAMED/[From "Bernard Covington" <gzalkgaaiv@level3.net>][Date Sat, 03 Dec 2005 10:46:50 +0300]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Mona Anderson <roadqueen1340@yahoo.com>][Date Tue, 29 Nov 2005 07:55:06 -0800 (PST)]/text/[From "Janice Keeter" <linjan@msys.net>][Date Fri, 2 Dec 2005 17:33:59 -0500]/text/[From "Elva Pearce" <U0_Day@accglobal.net>][Date Sat, 03 Dec 2005 04:41:17 -0300]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Mona Anderson <roadqueen1340@yahoo.com>][Date Tue, 29 Nov 2005 07:55:06 -0800 (PST)]/text/[From "Janice Keeter" <linjan@msys.net>][Date Fri, 2 Dec 2005 17:33:59 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Mona Anderson <roadqueen1340@yahoo.com>][Date Tue, 29 Nov 2005 07:55:06 -0800 (PST)]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From these vulnerabilities, the most serious of which could][Date Fri, 3 Feb 2006 17:47:48 +1030]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From " ... ... /[From "Joan Semper" ... /[From Mkwaw@aol.com][Date Fri, 3 Feb 2006 00:08:20 EST]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From " ... ... /[From "Joan Semper" <jsemper@earthlink.net>][Date Thu, 2 Feb 2006 18:46:23 -0800]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From " ... ... /[From "flowerchild" <flowerchild@epix.net>][Date Thu, 2 Feb 2006 16:46:28 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From " ... ... /[From "DOROTHY MICHAEL" <dotjuan1@msn.com>][Date Tue, 31 Jan 2006 20:26:46 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From " ... /[From "Bu ... /[From "Sandy" <sandy-h@rrt.net>][Date Mon, 30 Jan 2006 16:19:04 -0600]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From " ... /[From "Butch ... /[From <jad331@bellsouth.net>][Date Mon, 30 Jan 2006 7:55:00 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From " ... /[From "Butch Helmick" <bhelmick@adacel.com>][Date Fri, 27 Jan 2006 08:42:55 -0500]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From "Meg S ... /[From Jozy Ray <gdohdr@arizonahub.com>][Date Fri, 27 Jan 2006 16:58:38 +0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From "Meg Scrivens" <TAndres_zVonSemmlere@magmacom.com>][Date Fri, 27 Jan 2006 01:46:11 -0700]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... / ... /[From "Horton Kaefer" <fellfgutEula@global2000.net>][Date Fri, 27 Jan 2006 04:00:52 -0400]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 ... /[From "Camile Bastien" <OGallard_dPlmcoopu@highfiber.com>][Date Fri, 27 Jan 2006 12:14:45 +0500]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 Jan 2 ... /[From "Pierre Rabie" <JbRamonMcDonoughb@westol.com>][Date Fri, 27 Jan 2006 09:10:42 +0300]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 Jan 2006 02:45:34 -0500]/text/[From Ray Atkinson <n33ufr@gmail.com>][Date Thu, 26 Jan 2006 06:11:51 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text/[From "L Jemmett" <ljemmettt@hotmail.com>][Date Thu, 26 Jan 2006 02:45:34 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text/[From Dennis Edinger <dennise9@earthlink.net>][Date Wed, 25 Jan 2006 17:28:50 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED/[From "Ray Barr" <raylbarr@comcast.net>][Date Mon, 16 Jan 2006 14:17:36 -0500]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text/[From Ralph Self <ufwpnyvi@xsetera.com>][Date Tue, 17 Jan 2006 15:32:57 +0100]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From Chasgustaf@aol.com][Date Sat, 14 Jan 2006 11:59:43 EST]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED/[From "Elaine Holmes" <FMitzigig@reefnet.com.au>][Date Tue, 04 Apr 2006 00:23:10 -0800]/UNNAMED/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 04 Apr 2006 10:55:37 -0400]/UN ... /[From "Microsoft Email Storage Service" <mailprogram@aol.com>][Date Sun, 9 Apr 2006 16:00:07 +0800 (CST)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED/[From "Elaine Holmes" <FMitzigig@reefnet.com.au>][Date Tue, 04 Apr 2006 00:23:10 -0800]/UNNAMED/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 04 Apr 2006 10:55:37 -0400]/UNNAMED/[ ... /[From "Tisha M ... /[From notifications-noreply@lunarpages.com][Date Wed, 5 Apr 2006 20:24:27 -0700]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED/[From "Elaine Holmes" <FMitzigig@reefnet.com.au>][Date Tue, 04 Apr 2006 00:23:10 -0800]/UNNAMED/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 04 Apr 2006 10:55:37 -0400]/UNNAMED/[ ... /[From "Tisha Morris" <JdehumidifyTanner@derbycounty.co.uk>][Date Wed, 05 Apr 2006 19:58:54 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED/[From "Elaine Holmes" <FMitzigig@reefnet.com.au>][Date Tue, 04 Apr 2006 00:23:10 -0800]/UNNAMED/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 04 Apr 2006 10:55:37 -0400]/UNNAMED/[ ... /[From "Hollie Jolly" <GHumbertonortheastern@huddcoll.ac.uk>][Date Wed, 05 Apr 2006 16:55:02 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED/[From "Elaine Holmes" <FMitzigig@reefnet.com.au>][Date Tue, 04 Apr 2006 00:23:10 -0800]/UNNAMED/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 04 Apr 2006 10:55:37 -0400]/UNNAMED/[From Helen _ ... /[From Alamo Rent A Car <Alamo@alamo.com>][Date Wed, 5 Apr 2006 10:48:05 -0700 (PDT)]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED/[From "Elaine Holmes" <FMitzigig@reefnet.com.au>][Date Tue, 04 Apr 2006 00:23:10 -0800]/UNNAMED/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 04 Apr 2006 10:55:37 -0400]/UNNAMED/[From Helen _Ohio <ladyhollyvalentine@yahoo.com>][Date Wed, 5 Apr 2006 03:32:35 -0700 (PDT)]/text Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED/[From "Elaine Holmes" <FMitzigig@reefnet.com.au>][Date Tue, 04 Apr 2006 00:23:10 -0800]/UNNAMED/[From Dennis Edinger <dennise9@earthlink.net>][Date Tue, 04 Apr 2006 10:55:37 -0400]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED/[From "Elaine Holmes" <FMitzigig@reefnet.com.au>][Date Tue, 04 Apr 2006 00:23:10 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html/[From "Estella Grover" <TVinsonbiggs@firstalliance.mb.ca>][Date Mon, 03 Apr 2006 23:36:42 -0800]/UNNAMED Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox/[From "Lavonne" <gomzeay@uk.worldpay.com>][Date Sat, 25 Mar 2006 20:55:12 -0500]/html Suspicious: Exploit.HTML.Iframe.FileDownload skipped
C:\Documents and Settings\Dennis\Application Data\Mozilla\Profiles\default\0d3iakhl.slt\Mail\mail.earthlink.net\Inbox Mail Berkeley mbox: infected - 23, suspicious - 60 skipped
C:\Documents and Settings\Dennis\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Dennis\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Dennis\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Dennis\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Dennis\Local Settings\Temp\Perflib_Perfdata_17c.dat Object is locked skipped
C:\Documents and Settings\Dennis\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Dennis\ntuser.dat Object is locked skipped
C:\Documents and Settings\Dennis\NTUSER.DAT.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked

Hey Denisse,
It looks to me like we were right that you have a lot of infected emails, and this could have been where your infection came from in the first place. Therefore, I would recommend you go through all your emails and delete any unknown ones, or any that you don't trust the sender 100%.

We need to purge your infected system restore points.
On the Desktop, right-click My Computer, then click Properties.
Click the System Restore tab near the top of the window.
Check Turn off System Restore, click Apply, and then click OK.
More information on how to disable your system restore can be found here.

We want to create a new, clean restore point. Please first reboot your computer.
On the Desktop, right-click My Computer, then click Properties.
Click the System Restore tab near the top of the window.
Uncheck "Turn off System Restore", click Apply, and then click OK.

Click Start > All Programs > Accessories > System Tools, and select System Restore.
In the System Restore wizard, select the box next the text labeled "Create a restore point" and click the Next button.
Type a description for your new restore point - Something like "After trojan/spyware cleanup".
Click Create, and after it has created the restore point, click "Close".
Further instructions on creating a restore point can be found here

Please download ATF Cleaner.

Double click ATF-Cleaner.exe to run the program.
Under Main choose Select All
Click the Empty Selected button.

If you use Firefox browser
Click Firefox at the top and choose Select All
Click the Empty Selected button.
Note: If you would like to keep your saved passwords, please click "No" at the prompt.

If you use Opera browser
Click Opera at the top and choose: Select All
Click the Empty Selected button.
Note: If you would like to keep your saved passwords, please click "No" at the prompt.

Click Exit on the main menu to close the program.

Then let me know- how's your PC running?
Thanks,
Charles

Well, after all the scans and cleanup tasks, I still have the same original problem .............. which is to say there's no symtomatic problem right now (PC is running fine).

But as I said in post #1:

"I am NOT having any (known) problems now but I note the WindowsFY process in C:\ shows up in a "WhatsRunning" scan (http://www.whatsrunning.net/whatsrunning/main.aspx). WindowsFY appears as a startup item but does not seem to actually run."

WindowsFY is still there, but still not causing any noticable problems at present. Do you know much about this specific "WindowsFY" threat and how to get rid of it?

Dennise

Hey Dennise,
WindowsFY is part of a SmitFraud infection, so we can run a scan that will hopefully remove this file from your system. I've never really used "WhatsRunning" to be honest, but does this file doesn't show up in the running processes in any of your logs...
Please download SmitfraudFix (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.
Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1, and press Enter.
A text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.
Thanks,
Charles

Charles,

Here's the SmitfraudFix report:


SmitFraudFix v2.142

Scan done at 10:21:42.98, Wed 02/14/2007
Run from C:\Downloads\Security\WindowsFYFix\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» hosts

hosts file corrupted !

127.0.0.1 microsoft.com.org #[IE-SpyAd]
127.0.0.1 www.www.microsoft.com.org

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

C:\WINDOWS\Web\desktop.html FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Dennis


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Dennis\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Dennis\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components



»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32-huy32


»»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End

Looks like my WindowsFY problem has something to do with my hosts file.

Dennise

Hey Dennise,
Please reboot your computer into Safe Mode.
This is done by rebooting Windows and pressing F8 at boot/Windows startup, usually right after the beep.
Then select Safe Mode from the list.

Find and delete this file:
C:\wp.exe

Open the SmitfraudFix folder again.
Double-click smitfraudfix.cmd.
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.
You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.
The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".
The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.
A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply.
The report can also be found at the root of the system drive, usually at C:\rapport.txt
Warning : running option #2 on a non infected computer will remove your Desktop background.

Post me back the rapport.txt, and also let me know if it still appears for you?
Thanks,
Charles

EDIT: Typos

Well, we have new twist! But first, here's what happened when I followed your procedure:

1. I could NOT find wp.exe anywhere, including my root.
2. Running smitfraudfix.cmd, there was NO notification at all about wininet.dll.
3. smitfraudfix.cmd indeed removed my Desktop background.
4. smitfraudfix.cmd's report follows on next post(s).

Now here's the new twist. When rebooting (manually) into normal mode, Spybot warns about 5 registry changes as summarizied below:

1
-value deleted
entry: windowsFY
old data: c:\WP.exe
new data: grayed out

2.
-value deleted
entry: Local Page
old data: C:\WINDOWS\system32\blank.htm
new data: C:\windows\system32\blank.htm

3.
-value changed
entry: Start Page
old data: http://www.makemesearch.com/?said=364
new data: http://www.microsoft.com/isiapi/redir.dll?prd=

4.
-value changed
entry: Start Page
old data: %systemroot%\system32\blank.htm
new data: C:\windows\system32\blank.htm

5.
-value changed
entry: Start Page
old data: http://www.makemesearch.com/?said=364
new data: http://www.microsoft.com/isiapi/redir.dll?prd=


Not knowing how to handle these reported registry changes, but assuming smitfraudfix.cmd made these (valid) changes, I selected "allow" changes in Spybot for each one.

My "WhatsRunning" program now does NOT show WindowsFY or WP.exe in Startup.

BUT and I repeat BUT!!!!

Every time I boot up now, SpyBot always reports these same 5 registry changes. Even if I allow them each time I boot, on the next boot the same registry changes are reported by SpyBot. ARGH ................... something is still in there messing about with my registry. HELP!

Dennise

Here's the smitfraud.com report 1/3:

SmitFraudFix v2.142

Scan done at 15:53:28.06, Wed 02/14/2007
Run from C:\Downloads\Security\WindowsFYFix\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1 localhost

127.0.0.1 asy.a8ww.net
127.0.0.1 adserver.adbunker.com
127.0.0.1 phpadsnew.abac.com
127.0.0.1 a.abnad.net
127.0.0.1 b.abnad.net
127.0.0.1 d.abnad.net
127.0.0.1 e.abnad.net
127.0.0.1 t.abnad.net
127.0.0.1 adv.abv.bg
127.0.0.1 bimg.abv.bg
127.0.0.1 gtcc1.acecounter.com
127.0.0.1 gtp1.acecounter.com
127.0.0.1 acestats.com
127.0.0.1 www.acestats.com
127.0.0.1 ads.active.com
127.0.0.1 am1.activemeter.com
127.0.0.1 www.activemeter.com
127.0.0.1 at.ad2click.nl
127.0.0.1 cms.ad2click.nl
127.0.0.1 banner.ad.nu
127.0.0.1 ad-up.com
127.0.0.1 www.ad-up.com
127.0.0.1 ad.adbest.com
127.0.0.1 www.adbonus.com
127.0.0.1 www.adcomplete.com
127.0.0.1 www.adcopy.info
127.0.0.1 e13.media.addynamix.com
127.0.0.1 ad2.adecn.com
127.0.0.1 adcode.adengage.com
127.0.0.1 stats2.adengage.com
127.0.0.1 www.adengage.com
127.0.0.1 pt.server1.adexit.com
127.0.0.1 track.adform.net
127.0.0.1 www.adgroups.net
127.0.0.1 www.adgauge.com
127.0.0.1 host2.adhese.be
127.0.0.1 host4.adhese.be
127.0.0.1 www2.adhost.com
127.0.0.1 ads.adhostingsolutions.com
127.0.0.1 www.adimpact.com
127.0.0.1 adinterax.com
127.0.0.1 ad0.adinterax.com
127.0.0.1 mi.adinterax.com
127.0.0.1 tr.adinterax.com
127.0.0.1 www.adinterax.com
127.0.0.1 adsearch.adkontekst.pl
127.0.0.1 pk.adlandpro.com
127.0.0.1 trafficex.adlandpro.com
127.0.0.1 engine.adland.ru
127.0.0.1 publicidad.adlead.com
127.0.0.1 media.adlegend.com
127.0.0.1 regio.adlink.de
127.0.0.1 west.adlink.de
127.0.0.1 ad.adnet.biz
127.0.0.1 ad2.adnetinteractive.com
127.0.0.1 ad.adnetwork.com.br
127.0.0.1 s2.ad.adocean.pl
127.0.0.1 ad02.adonspot.com
127.0.0.1 isohunt.adonspot.com
127.0.0.1 ab.adpro.com.ua
127.0.0.1 ac.adpro.com.ua
127.0.0.1 www.adquest.nl
127.0.0.1 adx.adrenaline.cz
127.0.0.1 www.adsforindians.com
127.0.0.1 gambling911.adrevolver.com
127.0.0.1 cntr.adrime.com
127.0.0.1 images.adrime.com
127.0.0.1 ad.adriver.ru
127.0.0.1 ad.ads8.com
127.0.0.1 vip.ads8.com
127.0.0.1 tdkads.ads.dk
127.0.0.1 di.adsag.com
127.0.0.1 img.adsag.com
127.0.0.1 37.adsonar.com
127.0.0.1 ads.adsonar.com
127.0.0.1 foxnews.adsonar.com
127.0.0.1 js.adsonar.com
127.0.0.1 redir.adsonar.com
127.0.0.1 serv.adspeed.com
127.0.0.1 ads.adsponse.de
127.0.0.1 creative.adsrevenue.net
127.0.0.1 popunder.adsrevenue.net
127.0.0.1 adserve.adster.com
127.0.0.1 images.adster.com
127.0.0.1 adtology.com
127.0.0.1 adtology2.com
127.0.0.1 ad.adtoma.com
127.0.0.1 downldcl.adtoolsinc.com
127.0.0.1 www.adtrade.net
127.0.0.1 ad.adver.com.tw
127.0.0.1 www.adversal.com
127.0.0.1 www.adversalservers.com
127.0.0.1 advertisingpurchase.com
127.0.0.1 ads.advertisingz.com
127.0.0.1 www.adviva.com
127.0.0.1 adstats.adviva.net
127.0.0.1 banners.adzones.com
127.0.0.1 aeoworld.de
127.0.0.1 adz.afterdawn.net
127.0.0.1 ad.afy11.net
127.0.0.1 stats.agentinteractive.com
127.0.0.1 aams1.aim4media.com
127.0.0.1 adcodes.aim4media.com
127.0.0.1 artwork.aim4media.com
127.0.0.1 pops.aim4media.com
127.0.0.1 adlik2.akavita.com
127.0.0.1 tracking.allposters.com
127.0.0.1 www.almondnetworks.com
127.0.0.1 ads3.alternate-url-ads.com
127.0.0.1 fiona.ai.net
127.0.0.1 adimg.alice.it
127.0.0.1 adv.alice.it
127.0.0.1 c0.amazingcounters.com
127.0.0.1 c1.amazingcounters.com
127.0.0.1 c2.amazingcounters.com
127.0.0.1 c3.amazingcounters.com
127.0.0.1 c4.amazingcounters.com
127.0.0.1 c5.amazingcounters.com
127.0.0.1 c6.amazingcounters.com
127.0.0.1 c7.amazingcounters.com
127.0.0.1 www.amazingcounters.com
127.0.0.1 ads.amdmb.com
127.0.0.1 advert.ananzi.co.za
127.0.0.1 advert2.ananzi.co.za
127.0.0.1 www.antarasystems.com
127.0.0.1 www.anticlown.com
127.0.0.1 ads.antionline.com
127.0.0.1 junior.apk.net
127.0.0.1 www.arcadebanners.com
127.0.0.1 demiurge.arstechnica.com
127.0.0.1 banner.arttoday.com
127.0.0.1 ads.asia1.com.sg
127.0.0.1 ads.aspalliance.com
127.0.0.1 www.elitegaming.ath.cx
127.0.0.1 audiogalaxy.com
127.0.0.1 www.audiogalaxy.com
127.0.0.1 ads.autotrader.co.za
127.0.0.1 www.axill.com
127.0.0.1 valid.axload.to
127.0.0.1 www.baltictop.com
127.0.0.1 adserver.banneradministration.com
127.0.0.1 clicks.bannerboxes.com
127.0.0.1 feeds.bannerboxes.com
127.0.0.1 www.bannerboxes.com
127.0.0.1 bannerbg.com
127.0.0.1 ad.bannerconnect.net
127.0.0.1 bannercpm.com
127.0.0.1 www.bannercpm.com
127.0.0.1 ad.bannerhost.ru
127.0.0.1 www.bannerout.com
127.0.0.1 www.banneroverdrive.com
127.0.0.1 www.banner-mania.com
127.0.0.1 www5.bannerspace.com
127.0.0.1 www6.bannerspace.com
127.0.0.1 www.bannerswap.ca
127.0.0.1 www.bannerswap.com
127.0.0.1 bardownload.com
127.0.0.1 media.baventures.com
127.0.0.1 www.belstat.be
127.0.0.1 bestfour.com
127.0.0.1 ads.betanews.com
127.0.0.1 www.bidclix.com
127.0.0.1 www.bidclix.net
127.0.0.1 bdv.bidvertiser.com
127.0.0.1 www.bidvertiser.com
127.0.0.1 ad0.bigmir.net
127.0.0.1 ad1.bigmir.net
127.0.0.1 ad4.bigmir.net
127.0.0.1 ad7.bigmir.net
127.0.0.1 adi.bigmir.net
127.0.0.1 i.bigmir.net
127.0.0.1 bigtracker.com
127.0.0.1 bigticker.bighits.net
127.0.0.1 bounty.bighits.net
127.0.0.1 www.bighits.net
127.0.0.1 adserver.bizhat.com
127.0.0.1 counter.bizland.com
127.0.0.1 webads.bizservers.com
127.0.0.1 www.black-hole.co.uk
127.0.0.1 ads.blick.ch
127.0.0.1 banners.blogads.com
127.0.0.1 cache.blogads.com
127.0.0.1 images.blogads.com
127.0.0.1 images2.blogads.com
127.0.0.1 proxy.blogads.com
127.0.0.1 lg.proxy.blogads.com
127.0.0.1 weblog.blogads.com
127.0.0.1 www.blogads.com
127.0.0.1 blogadswap.com
127.0.0.1 tracker.blogbeat.net
127.0.0.1 ads.blogdrive.com
127.0.0.1 counter.blogexplosion.com
127.0.0.1 www.blogpatrol.com
127.0.0.1 count.blogscout.de
127.0.0.1 track.blogcounter.de
127.0.0.1 www.blogcounter.de
127.0.0.1 images.bmnq.com
127.0.0.1 ad.bol.bg
127.0.0.1 adv.bol.bg
127.0.0.1 ads.bomis.com
127.0.0.1 www.borlander.com.cn
127.0.0.1 support.bravesentry.com
127.0.0.1 citi.bridgetrack.com.edgesuite.net
127.0.0.1 stats.broadbandpublisher.com
127.0.0.1 admanager2.broadbandpublisher.com
127.0.0.1 banners.broadwayworld.com
127.0.0.1 redemption.bullseye-media.net
127.0.0.1 users.bullseye-media.net
127.0.0.1 www.burnsrecyclinginc.com
127.0.0.1 ad1.bustcash.com
127.0.0.1 www.cashfiesta.net
127.0.0.1 www.cashventure.com
127.0.0.1 deliver.castads.com
127.0.0.1 images.castads.com
127.0.0.1 serve.castads.com
127.0.0.1 ads.cars.com
127.0.0.1 www.cd321.com
127.0.0.1 tracker.cgiworld.net
127.0.0.1 abc.checkm8.com
127.0.0.1 rmm1u.checkm8.com
127.0.0.1 ads.checkm8.co.za
127.0.0.1 ads.chellomedia.com
127.0.0.1 ad.chip.de
127.0.0.1 board.classifieds1000.com
127.0.0.1 xp.classifieds1000.com
127.0.0.1 clearfind.com
127.0.0.1 ssl.clickbank.net
127.0.0.1 clickboothlnk.com
127.0.0.1 www.clickboothlnk.com
127.0.0.1 j.clickdensity.com
127.0.0.1 r.clickdensity.com
127.0.0.1 dsml.clickexperts.net
127.0.0.1 secure.click2boost.com
127.0.0.1 service.click2boost.com
127.0.0.1 www.click2boost.com
127.0.0.1 www.is1.clixgalore.com
127.0.0.1 www2.click-fr.com
127.0.0.1 www3.click-fr.com
127.0.0.1 www4.click-fr.com
127.0.0.1 www.clicksbroker.com
127.0.0.1 clickthru.net
127.0.0.1 ads.clickthru.net
127.0.0.1 icon.clickthru.net
127.0.0.1 clicktorrent.info
127.0.0.1 static.clicktorrent.info
127.0.0.1 www1.clicktorrent.info
127.0.0.1 banner.clubdicecasino.com
127.0.0.1 www.cnstats.com
127.0.0.1 ads.cobrad.com
127.0.0.1 admanager3.collegepublisher.com
127.0.0.1 localads.collegepublisher.com
127.0.0.1 bdx.comclick.com
127.0.0.1 br.comclick.com
127.0.0.1 ihm01.ct2.comclick.com
127.0.0.1 aa.connextra.com
127.0.0.1 cc.connextra.com
127.0.0.1 dd.connextra.com
127.0.0.1 ee.connextra.com
127.0.0.1 data.connextra.com
127.0.0.1 linkexchange.consoleunderground.com
127.0.0.1 ads.console.net
127.0.0.1 banners.copyscape.com
127.0.0.1 www.counted.com
127.0.0.1 www.countercentral.com
127.0.0.1 www.counterguide.com
127.0.0.1 www.countmypage.com
127.0.0.1 connectionzone.com
127.0.0.1 new.crashextads.co.uk
127.0.0.1 crawl.ws
127.0.0.1 www.crawl.ws
127.0.0.1 counter.credo.ru
127.0.0.1 ads.crosswinds.net
127.0.0.1 megabyte.crosswinds.net
127.0.0.1 ads.crucialparadigm.com
127.0.0.1 stat3.cybermonitor.com
127.0.0.1 banner.cybertechdev.com
127.0.0.1 search.cygo.net
127.0.0.1 www.cytron.com
127.0.0.1 ads.datinggold.com
127.0.0.1 ad.db3nf.com
127.0.0.1 au.track.decideinteractive.com
127.0.0.1 au.link.decideinteractive.com
127.0.0.1 eu.link.decideinteractive.com
127.0.0.1 link.decideinteractive.com
127.0.0.1 www.decideinteractive.com
127.0.0.1 www.decideinteractive.co.uk
127.0.0.1 collector.deepmetrix.com
127.0.0.1 geo.deepmetrix.com
127.0.0.1 ads.dennisnet.co.uk
127.0.0.1 ad.detik.com
127.0.0.1 ads.deviantart.com
127.0.0.1 phpadsnew.devstart.com
127.0.0.1 ads.digitalpoint.com
127.0.0.1 geo.digitalpoint.com
127.0.0.1 comm1.digits.com
127.0.0.1 ads.dir.bg
127.0.0.1 banners.dir.bg
127.0.0.1 ad.directconnect.se
127.0.0.1 dnads.directnic.com
127.0.0.1 parked.directnic.com
127.0.0.1 stats.directnic.com
127.0.0.1 ads.directnetadvertising.net
127.0.0.1 ad.displayadsmedia.com
127.0.0.1 agentq.ditto.com
127.0.0.1 dmdl.dmcast.com
127.0.0.1 track.dmipartners.com
127.0.0.1 ads.dmnews.com
127.0.0.1 ad.dmpi.net
127.0.0.1 ad2.dmpi.net
127.0.0.1 ad3.dmpi.net
127.0.0.1 ad4.dmpi.net
127.0.0.1 ubnm.dmpi.net
127.0.0.1 www.dodostats.com
127.0.0.1 ads.dotomi.com
127.0.0.1 www.donotchangeme.com
127.0.0.1 www.dreamadvert.com
127.0.0.1 ads.drugs.com
127.0.0.1 www.duenow.com
127.0.0.1 klipads.dvlabs.com
127.0.0.1 www.e2give.com
127.0.0.1 hits.e.cl
127.0.0.1 www.eastworldnetwork.com
127.0.0.1 banners.easydns.com
127.0.0.1 beta.easyhitcounters.com
127.0.0.1 mailer.ebates.com
127.0.0.1 ads.edirectme.com
127.0.0.1 ad1.emediate.dk
127.0.0.1 dotnet.endai.com
127.0.0.1 entk.net
127.0.0.1 ads.eog.com
127.0.0.1 www.eshopads2.com
127.0.0.1 www.estat.com
127.0.0.1 gtb.etology.com
127.0.0.1 pages.etology.com
127.0.0.1 www.etracker.de
127.0.0.1 ads.ero-advertising.com
127.0.0.1 cdn.euroclick.com
127.0.0.1 www.euros4click.de
127.0.0.1 engage.everyone.net
127.0.0.1 ezcybersearch.mail.everyone.net
127.0.0.1 advert.exaccess.ru
127.0.0.1 exchange.bg
127.0.0.1 www.exchange.bg
127.0.0.1 exeloads.info
127.0.0.1 images.exitexchange.com
127.0.0.1 www.exittrade.com
127.0.0.1 ads.expressindia.com
127.0.0.1 banners.expressindia.com
127.0.0.1 www.evidence-eliminator.com
127.0.0.1 ads.ezboard.com
127.0.0.1 www.eziin.com
127.0.0.1 www.fast-adv.it
127.0.0.1 www.fast2net.com
127.0.0.1 ads.fastpay.ro
127.0.0.1 fasttrack.nu
127.0.0.1 fastwebcounter.com
127.0.0.1 counter.fateback.com
127.0.0.1 search.findscout.com
127.0.0.1 ai.p.findology.com
127.0.0.1 ads.firingsquad.com
127.0.0.1 ads2.firingsquad.com
127.0.0.1 ads.firstgrand.com
127.0.0.1 clicks.firstname.com
127.0.0.1 fishclix.com
127.0.0.1 www.fishclix.com
127.0.0.1 www.flyinads.com
127.0.0.1 adserver.fmpub.net
127.0.0.1 dynamic.fmpub.net
127.0.0.1 static.fmpub.net
127.0.0.1 adcycle.footymad.net
127.0.0.1 js.forrestersurveys.com
127.0.0.1 socratos.forrestersurveys.com
127.0.0.1 freecounters.xp.tl
127.0.0.1 www.freecounter.it
127.0.0.1 ad.freefind.com
127.0.0.1 freelogs.com
127.0.0.1 bar.freelogs.com
127.0.0.1 goo.freelogs.com
127.0.0.1 htm.freelogs.com
127.0.0.1 ico.freelogs.com
127.0.0.1 joe.freelogs.com
127.0.0.1 mom.freelogs.com
127.0.0.1 xyz.freelogs.com
127.0.0.1 adserver.freenet.de
127.0.0.1 free-stats.com
127.0.0.1 www.freestats.ws
127.0.0.1 counters.freewebs.com
127.0.0.1 ads.freeonlinegames.com
127.0.0.1 stats.freeonlinegames.com
127.0.0.1 www.freewebsites.com
127.0.0.1 www.funppc.com
127.0.0.1 ads.futurenetworkusa.com
127.0.0.1 adserver.gadu-gadu.pl
127.0.0.1 adcontent.gamespy.com
127.0.0.1 ads.gamespyid.com
127.0.0.1 server.gamyun.net
127.0.0.1 ads.gather.com
127.0.0.1 adserver.geenstijl.nl
127.0.0.1 kassa.geenstijl.nl
127.0.0.1 banners.geotarget.info
127.0.0.1 www.geotarget.info
127.0.0.1 www.getsmart.com
127.0.0.1 banner.giantvegas.com
127.0.0.1 truehits1.gits.net.th
127.0.0.1 adserver2.goals365.com
127.0.0.1 www.goldstats.net
127.0.0.1 www.gogogo.com
127.0.0.1 partner.gonamic.de
127.0.0.1 www.goodcounter.com
127.0.0.1 stat.org.gosite.ws
127.0.0.1 as.gostats.com
127.0.0.1 c1.gostats.com
127.0.0.1 c3.gostats.com
127.0.0.1 ded.gostats.com
127.0.0.1 monster.gostats.com
127.0.0.1 www.greatstartpage.com
127.0.0.1 ads.guardian.co.uk
127.0.0.1 ads.guru3d.com
127.0.0.1 streamit.hardwarezone.com
127.0.0.1 adserver.hardwareanalysis.com
127.0.0.1 hartim.com
127.0.0.1 ad0.haynet.com
127.0.0.1 www.hentaibanners.com
127.0.0.1 www.hentaicashmachine.com
127.0.0.1 www.hentaicounter.com
127.0.0.1 www.hentaiseeker.com
127.0.0.1 www.hentaitoonami.com
127.0.0.1 ads.herbalsmokeshop.com
127.0.0.1 www.herbalsmokeshops.com
127.0.0.1 www2.hermoment.com
127.0.0.1 www.hermoment.com
127.0.0.1 www.hiperstat.com
127.0.0.1 adserver.hispanoclick.com
127.0.0.1 hits-counter.com
127.0.0.1 www.hitlogger.com
127.0.0.1 hitmodel.net
127.0.0.1 www.hit-counts.com
127.0.0.1 hit-now.com
127.0.0.1 hit-parade.com
127.0.0.1 loga.hit-parade.com
127.0.0.1 logp.hit-parade.com
127.0.0.1 www.hitscreamer.com
127.0.0.1 hitslog.com
127.0.0.1 h1.hitslog.com
127.0.0.1 www.hitstats.co.uk
127.0.0.1 hitstats.net
127.0.0.1 images.hitwise.co.uk
127.0.0.1 adserver.hostfinderguy.com
127.0.0.1 ads.hothardware.com
127.0.0.1 counters.honesty.com
127.0.0.1 ad.hosting.pl
127.0.0.1 ad2.hotels.com
127.0.0.1 viewstat.hotstat.nl
127.0.0.1 ads.iafrica.com
127.0.0.1 www.i-clicks.net
127.0.0.1 hitctr01.icdirect.com
127.0.0.1 content.iconadserver.com
127.0.0.1 adidm07.idmnet.pl
127.0.0.1 image-catcher.com
127.0.0.1 gate.ilogbox.com
127.0.0.1 bbn.img.com.ua
127.0.0.1 ads.ims.nl
127.0.0.1 s201.indexstats.com
127.0.0.1 campaign.indieclick.com
127.0.0.1 adcenter.in2.com
127.0.0.1 ads.inet1.com
127.0.0.1 ads7.inet1.com
127.0.0.1 juggler.inetinteractive.com
127.0.0.1 rotator.juggler.inetinteractive.com
127.0.0.1 banners.inetfast.com
127.0.0.1 infospot.infocious.com
127.0.0.1 bimonline.insites.be
127.0.0.1 images.indiads.com
127.0.0.1 oc.inspectorclick.com
127.0.0.1 v2.inspectorclick.com
127.0.0.1 v3.inspectorclick.com
127.0.0.1 www.instadia.net
127.0.0.1 www2.instantbuzz.com
127.0.0.1 media.intelia.it
127.0.0.1 info.intelli-direct.com
127.0.0.1 oxfam.intelli-direct.com
127.0.0.1 tui.intelli-direct.com
127.0.0.1 www.intelli-tracker.com
127.0.0.1 search.intwined.com
127.0.0.1 ad2.ip.ro
127.0.0.1 ads.ipowerweb.com
127.0.0.1 adzones.ircspy.com
127.0.0.1 a.isohunt.com
127.0.0.1 adserver1.isohunt.com
127.0.0.1 ads.isoftmarketing.com
127.0.0.1 banman.isoftmarketing.com
127.0.0.1 ads1.itadnetwork.co.uk
127.0.0.1 ilead.itrack.it
127.0.0.1 adserver.itsfogo.com
127.0.0.1 partnerfeed.itsfogo.com
127.0.0.1 www.iwebmusic.com
127.0.0.1 www.iwebtunes.com
127.0.0.1 ad.jamster.com
127.0.0.1 www.jellycounter.com
127.0.0.1 www.jethit.com
127.0.0.1 ads.jokaroo.com
127.0.0.1 jpedownload.joltid.com
127.0.0.1 promotion.jpds.com
127.0.0.1 kazantip-top.com
127.0.0.1 ads.webfever.kadserver.com
127.0.0.1 ads.deblok.net.kadserver.com
127.0.0.1 ads.zebest-3000.net.kadserver.com
127.0.0.1 countus.get.kadserver.com
127.0.0.1 geo113prod.kadserver.com
127.0.0.1 get.kadserver.com
127.0.0.1 kazaalite.pl
127.0.0.1 banner.kiev.ua
127.0.0.1 adserve.kikizo.com
127.0.0.1 ads.kleinman.com
127.0.0.1 affiliates.kliks.nl
127.0.0.1 www2.kliks.nl
127.0.0.1 www.kliks.nl
127.0.0.1 kt4.kliptracker.com
127.0.0.1 www.kliptracker.com
127.0.0.1 click.kmindex.ru
127.0.0.1 counter.kmindex.ru
127.0.0.1 counting.kmindex.ru
127.0.0.1 www.kmindex.ru
127.0.0.1 de.komtrack.com
127.0.0.1 www.krvkr.com
127.0.0.1 www.kuaiso.com
127.0.0.1 layer-ads.de
127.0.0.1 www.layer-ads.de
127.0.0.1 banner.lbs.km.ru
127.0.0.1 www.leopardsearch.com
127.0.0.1 ts1.lexmark.com
127.0.0.1 adserver.libero.it
127.0.0.1 adv-banner.libero.it
127.0.0.1 adv-ckbanner.libero.it
127.0.0.1 link.ru
127.0.0.1 link.link.ru
127.0.0.1 lindr.net
127.0.0.1 banners.linkbuddies.com
127.0.0.1 www.linkbuddies.com
127.0.0.1 www.linkcounter.com
127.0.0.1 linksexchange.net
127.0.0.1 web.linkexchange.ru
127.0.0.1 www.linkexchange.ru
127.0.0.1 plus.link4link.com
127.0.0.1 www.linkopp.net
127.0.0.1 links4all.biz
127.0.0.1 go.links4all.biz
127.0.0.1 www.links4all.biz
127.0.0.1 ads.linuxjournal.com
127.0.0.1 newbrowse.livehelper.com
127.0.0.1 ads.livescore.com
127.0.0.1 adverts.loadedinc.com
127.0.0.1 screensavers.lookoutsoft.net
127.0.0.1 hexusads.fluent.ltd.uk
127.0.0.1 counter.lyricsdownload.com
127.0.0.1 m2k.ru
127.0.0.1 ad.m-adx.com
127.0.0.1 media.m-adx.com
127.0.0.1 www.novogerador.mail15.com
127.0.0.1 aw.masterstats.com
127.0.0.1 erotic.masterstats.com
127.0.0.1 link.masterstats.com
127.0.0.1 ads.affiliates.match.com
127.0.0.1 adserver.matchcraft.com
127.0.0.1 ads.mcafee.com
127.0.0.1 ads.mdchoice.com
127.0.0.1 matrix.mediavantage.de
127.0.0.1 adland.medialand.ru
127.0.0.1 adnet.medialand.ru
127.0.0.1 content.medialand.ru
127.0.0.1 data.irr.medialand.ru
127.0.0.1 ads.mediaodyssey.com
127.0.0.1 acvs.mediaonenetwork.net
127.0.0.1 acvsrv.mediaonenetwork.net
127.0.0.1 ads1.mediaops.com.br
127.0.0.1 ad2.pl.mediainter.net
127.0.0.1 media-servers.net
127.0.0.1 megaswaiter.info
127.0.0.1 www.mercuras.com
127.0.0.1 adserv2.meritdesigns.com
127.0.0.1 ads.metropol.dk
127.0.0.1 line02.metriweb.be
127.0.0.1 line03.metriweb.be
127.0.0.1 line05.metriweb.be
127.0.0.1 line06.metriweb.be
127.0.0.1 line08.metriweb.be
127.0.0.1 line09.metriweb.be
127.0.0.1 line10.metriweb.be
127.0.0.1 line11.metriweb.be
127.0.0.1 line12.metriweb.be
127.0.0.1 line13.metriweb.be
127.0.0.1 line14.metriweb.be
127.0.0.1 line15.metriweb.be
127.0.0.1 line16.metriweb.be
127.0.0.1 line17.metriweb.be
127.0.0.1 line18.metriweb.be
127.0.0.1 line19.metriweb.be
127.0.0.1 line20.metriweb.be
127.0.0.1 adc1.mingpao.com
127.0.0.1 banner.missingkids.com
127.0.0.1 www.mlclick.com
127.0.0.1 smile.modchipstore.com
127.0.0.1 survey2.modernmindsoftware.com
127.0.0.1 ad.mokead.com
127.0.0.1 w5.mokead.com
127.0.0.1 ads.monster.com
127.0.0.1 adserver.a.in.monster.com
127.0.0.1 ads.monstermoving.com
127.0.0.1 mp3today.net
127.0.0.1 mpamexit.com
127.0.0.1 adfarm.mserve.ca
127.0.0.1 msgtag.com
127.0.0.1 www.msgtag.com
127.0.0.1 www.mvr3d.net
127.0.0.1 www.mvr.us
127.0.0.1 track.mybloglog.com
127.0.0.1 www.mybloglog.com
127.0.0.1 www.myemessenger.com
127.0.0.1 www.myfriendspy.com
127.0.0.1 rm.myoc.com
127.0.0.1 www.myspacetracer.com
127.0.0.1 www2.mystats.nl
127.0.0.1 c.mystat-in.net
127.0.0.1 c1.navrcholu.cz
127.0.0.1 popsearch.nbcsearch.com
127.0.0.1 xml.nbcsearch.com
127.0.0.1 www.ndparking.com
127.0.0.1 ads.neogen.bg
127.0.0.1 ads.neogen.ro
127.0.0.1 ads.neowin.net
127.0.0.1 banners.netcraft.com
127.0.0.1 www.netdirect.nl
127.0.0.1 ssl-hints.netflame.cc
127.0.0.1 adv.netinfo.bg
127.0.0.1 tracker.netklix.com
127.0.0.1 webstats.netlogics.nl
127.0.0.1 counter.netmore.net
127.0.0.1 ads.netrition.com
127.0.0.1 www.net-stat.net
127.0.0.1 www1.nuseek.com
127.0.0.1 ads.newsint.co.uk
127.0.0.1 www.newvidscodec.net
127.0.0.1 nextgenstats.com
127.0.0.1 www.nextgenstats.com
127.0.0.1 ads.nordichardware.com
127.0.0.1 ads.nordichardware.se
127.0.0.1 ad1.nozonedata.com
127.0.0.1 cdn.nvero.net
127.0.0.1 e.nvero.net
127.0.0.1 nzads.net.nz
127.0.0.1 adserver.o2.pl
127.0.0.1 banner.oddcast.com
127.0.0.1 ads.oneplace.com
127.0.0.1 www.onestatfree.com
127.0.0.1 one.ru
127.0.0.1 cnt.one.ru
127.0.0.1 stats0.one.ru
127.0.0.1 stats1.one.ru
127.0.0.1 stats2.one.ru
127.0.0.1 ads.oneandonlynetwork.com
127.0.0.1 ads.onemodelplace.com
127.0.0.1 reklama.onet.pl
127.0.0.1 online-service.cc
127.0.0.1 adserver.online-tech.com
127.0.0.1 s27.opentracker.net
127.0.0.1 server1.opentracker.net
127.0.0.1 server10.opentracker.net
127.0.0.1 ccc00.opinionlab.com
127.0.0.1 rate.opinionlab.com
127.0.0.1 by.optimost.com
127.0.0.1 optmedia.jp
127.0.0.1 ad.orbitel.bg
127.0.0.1 ads.orsm.net
127.0.0.1 otx5.otxresearch.com
127.0.0.1 adp4.us4.outblaze.com
127.0.0.1 adserver.hk.outblaze.com
127.0.0.1 adserver.us.outblaze.com
127.0.0.1 ad1.pamedia.com.au
127.0.0.1 ad2.pamedia.com.au
127.0.0.1 images.parked.com
127.0.0.1 ads.partnerlogic.net
127.0.0.1 static.partnerlogic.net
127.0.0.1 b1.perfb.com
127.0.0.1 ads.pcper.com
127.0.0.1 www.pc-test.net
127.0.0.1 ad1.peel.com
127.0.0.1 ads.peel.com
127.0.0.1 ads5.peel.com
127.0.0.1 freeps3.peel.com
127.0.0.1 www.peel.net
127.0.0.1 pluginx.perfectgonzo.com
127.0.0.1 metrics.performancing.com
127.0.0.1 ads.photosight.ru
127.0.0.1 phpadsnew.com
127.0.0.1 www.phpadsnew.com
127.0.0.1 ads.planetactive.com
127.0.0.1 ads.plantyours.com
127.0.0.1 ads2.playnet.com
127.0.0.1 counter.plugin.ws
127.0.0.1 ad2.pop.com.br
127.0.0.1 server01.popupmoney.com
127.0.0.1 www.popupmoney.com
127.0.0.1 www.popadstop.com
127.0.0.1 www2.portdetective.com
127.0.0.1 ad2.postroller.com
127.0.0.1 ad3.postroller.com
127.0.0.1 adview.ppro.de
127.0.0.1 ads.primeinteractive.net
127.0.0.1 ad.pro-advertising.com
127.0.0.1 cdn1.pro-advertising.com
127.0.0.1 adv.profantasysports.com
127.0.0.1 ad.profiwin.de
127.0.0.1 bn.profiwin.de
127.0.0.1 www.promarketingclub.com
127.0.0.1 www.prtracker.com
127.0.0.1 www.promo.com.au
127.0.0.1 ad.prv.pl
127.0.0.1 xml1.psefeed.com
127.0.0.1 www.psefeed.com
127.0.0.1 ads.psxextreme.com
127.0.0.1 www.pulsix.com
127.0.0.1 ad.sma.punto.net
127.0.0.1 sma.punto.net
127.0.0.1 exchange.qclix.com
127.0.0.1 adserv.quality-channel.de
127.0.0.1 ads-205.quarterserver.de
127.0.0.1 ads.radioactive.se
127.0.0.1 reportinstaller.random-logic.com
127.0.0.1 www.random-logic.com
127.0.0.1 www.ranking-hits.de
127.0.0.1 counter.rapidcounter.com
127.0.0.1 www.rapidcounter.com
127.0.0.1 count.rbc.ru
127.0.0.1 www.realclicks.com
127.0.0.1 ads.rediff.com
127.0.0.1 adworks.rediff.com
127.0.0.1 imadworks.rediff.com
127.0.0.1 visit.referralware.com
127.0.0.1 ads.register.com
127.0.0.1 www.registrarads.com
127.0.0.1 counter.relmaxtop.com
127.0.0.1 www.relmaxtop.com
127.0.0.1 banner.relcom.ru
127.0.0.1 adservice.recon-networks.com
127.0.0.1 flnet.research-int.se
127.0.0.1 sn.research-int.se
127.0.0.1 tradera.research-int.se
127.0.0.1 banners.resultonline.com
127.0.0.1 click.revenuepilot.com
127.0.0.1 search.revenuepilot.com
127.0.0.1 ads.revenews.com
127.0.0.1 www.reversecontext.com
127.0.0.1 ad.rd06.com
127.0.0.1 r.rd06.com
127.0.0.1 rightstats.com
127.0.0.1 www.rightstats.com
127.0.0.1 show.roogoo.com
127.0.0.1 banner.royaldice.com
127.0.0.1 ru-traffic.com
127.0.0.1 judo.salon.com
127.0.0.1 oas.salon.com
127.0.0.1 amp.st.sageanalyst.net
127.0.0.1 te.scripps.com
127.0.0.1 ads.search.bg
127.0.0.1 banner.search.bg
127.0.0.1 banex.search.bg
127.0.0.1 www.search3.com
127.0.0.1 ads.searchextreme.com
127.0.0.1 imagesak.secureserver.net
127.0.0.1 www.seehits.com
127.0.0.1 ads.seekingalpha.com
127.0.0.1 ad.sensismediasmart.com.au
127.0.0.1 www.serialkey.net
127.0.0.1 www.serveads.com
127.0.0.1 ads2.slickdeals.net
127.0.0.1 images.sidestep.com
127.0.0.1 adimages.sina.com.hk
127.0.0.1 jsads.sina.com.hk
127.0.0.1 startpunt.nu.site-id.nl
127.0.0.1 www.site-id.nl
127.0.0.1 advertpro.sitepoint.com
127.0.0.1 www.sitestatslive.com
127.0.0.1 ads.sina.com
127.0.0.1 www.smartclicks.net
127.0.0.1 sidebar.smarter.com
127.0.0.1 ads.sn.se
127.0.0.1 ivox.socratos.net
127.0.0.1 a.softpedia.com
127.0.0.1 adserver.softwareonline.com
127.0.0.1 www.someads.com
127.0.0.1 www.sponsorads.de
127.0.0.1 sitestat3.sport1.de
127.0.0.1 www.speedcounter.net
127.0.0.1 bannerads.standard.net
127.0.0.1 ads.stardoll.com
127.0.0.1 adsintl.starwave.com
127.0.0.1 js.statistici.ro
127.0.0.1 log.statistici.ro
127.0.0.1 statistik-gallup.net
127.0.0.1 www.stats4free.de
127.0.0.1 reg.stats4all.com
127.0.0.1 www.statsmachine.com
127.0.0.1 www.statsector.hu
127.0.0.1 i.stealfrommvps.org
127.0.0.1 cleo.step57.info
127.0.0.1 exp.step57.info
127.0.0.1 me.step57.info
127.0.0.1 www.step57.info
127.0.0.1 gsorder.berlin.strato.de
127.0.0.1 www.sublimemedia.net
127.0.0.1 counter.surfcounters.com
127.0.0.1 www.superclix.de
127.0.0.1 adidm.supermedia.pl
127.0.0.1 stat.superstat.info
127.0.0.1 www.superstat.info
127.0.0.1 adsuccess.surehits.com
127.0.0.1 adv.surinter.net
127.0.0.1 www.surfernetwork.com
127.0.0.1 www.surveynetworks.com
127.0.0.1 adpick.switchboard.com
127.0.0.1 adtag.sympatico.ca
127.0.0.1 hkvn99.t35.com
127.0.0.1 nolko.t35.com
127.0.0.1 vbs.t35.com
127.0.0.1 bs.t-redirect.com
127.0.0.1 ads.tagword.com
127.0.0.1 ad.uk.tangozebra.com
127.0.0.1 dev.targetpoint.com
127.0.0.1 srs.targetpoint.com
127.0.0.1 stat-counter.tass-online.ru
127.0.0.1 ad.tbn.ru
127.0.0.1 ad.gen.tbn.ru
127.0.0.1 ad.100.tbn.ru
127.0.0.1 ad.120-gen.tbn.ru
127.0.0.1 ad.text.tbn.ru
127.0.0.1 www.tdstats.com
127.0.0.1 www.tech-counter.com
127.0.0.1 www.tenmonkey.com
127.0.0.1 adserver1.teracent.net
127.0.0.1 dy.testnet.nl
127.0.0.1 www.textads.biz
127.0.0.1 www.text-link-ads.com
127.0.0.1 www.textlinkads.com
127.0.0.1 a.tfag.de
127.0.0.1 ak.tfag.de
127.0.0.1 theaffiliateprogram.com
127.0.0.1 ads.the-bikini.com
127.0.0.1 adbot.theonion.com
127.0.0.1 therichmedia.com
127.0.0.1 mycounter.tinycounter.com
127.0.0.1 ad.tiscali.com
127.0.0.1 ad-cz.tiscali.com
127.0.0.1 ad-de.tiscali.com
127.0.0.1 ad-it.tiscali.com
127.0.0.1 ad-nl.tiscali.com
127.0.0.1 ad-sc.tiscali.com
127.0.0.1 ad-uk.tiscali.com
127.0.0.1 adsweb.tiscali.cz
127.0.0.1 ads.as4x.tmcs.net
127.0.0.1 new.tnc4u.com
127.0.0.1 tns-counter.ru
127.0.0.1 www.tns-counter.ru
127.0.0.1 ads.tolshop.com
127.0.0.1 toplist.cz
127.0.0.1 www.toplist.cz
127.0.0.1 storage.trafic.ro
127.0.0.1 ad.topstat.com
127.0.0.1 s26.topstat.com
127.0.0.1 xl.topstat.com
127.0.0.1 banners.toteme.com
127.0.0.1 cachebanners.toteme.com
127.0.0.1 trackalyzer.com
127.0.0.1 t2.trackalyzer.com
127.0.0.1 adserver.track-star.com
127.0.0.1 www.track-star.com
127.0.0.1 tracksy.com
127.0.0.1 ads.tradermedia.co.uk
127.0.0.1 textad.traficdublu.ro
127.0.0.1 www.traffic4u.com
127.0.0.1 www.trafficbeamer.com
127.0.0.1 www.trafficbeamer.nl
127.0.0.1 www.trafficg.com
127.0.0.1 www.trafficfile.com
127.0.0.1 www.trafficflame.com
127.0.0.1 trafficflare.com
127.0.0.1 www.trackyourstats.com
127.0.0.1 hit.traxdb.net
127.0.0.1 media.travelzoo.com
127.0.0.1 media2.travelzoo.com
127.0.0.1 trfcnt.com
127.0.0.1 ads.triada.bg
127.0.0.1 truefindpage.com
127.0.0.1 tracker.truehits.net
127.0.0.1 adclient1.tucows.com
127.0.0.1 counts.tucows.com
127.0.0.1 google.tucows.com
127.0.0.1 images.tumri.net
127.0.0.1 www.tumri.net
127.0.0.1 ad.turn.com
127.0.0.1 tvbad1.tvb.com
127.0.0.1 ads.tweakxp.com
127.0.0.1 ads1.tyroo.com
127.0.0.1 serve.tyroo.com
127.0.0.1 image.ugo.com
127.0.0.1 creativos.ads.uigc.net
127.0.0.1 www.undertonenetworks.com
127.0.0.1 ads.unison.ie
127.0.0.1 track.untd.com
127.0.0.1 ads1.updated.com
127.0.0.1 i.cannot.undo.it
127.0.0.1 banner.usacasino.com
127.0.0.1 adsnew.userfriendly.org
127.0.0.1 ads.ussearch.com
127.0.0.1 beacon.valeoip.com
127.0.0.1 counters.vendio.com
127.0.0.1 www.view4cash.de
127.0.0.1 oas.villagevoice.com
127.0.0.1 banners.vipprofits.com
127.0.0.1 update.virussky.com
127.0.0.1 sniff.visistat.com
127.0.0.1 www.w3exit.com
127.0.0.1 ad.wanderlist.com
127.0.0.1 ng3.ads.warnerbros.com
127.0.0.1 ads.weather.com
127.0.0.1 adserver.webads.it
127.0.0.1 images.webads.it
127.0.0.1 ad.webadvertising.ch
127.0.0.1 adv.webadvertising.ch
127.0.0.1 www.wecounthits.com
127.0.0.1 www.webcounter.com
127.0.0.1 partners.webmasterplan.com
127.0.0.1 fc.webmasterpro.de
127.0.0.1 adv.webmd.com
127.0.0.1 banner.webmersion.com
127.0.0.1 img1.webring.com
127.0.0.1 ss.webring.com
127.0.0.1 www.webstat.net
127.0.0.1 fry.webtistic.com
127.0.0.1 www.web-url.de
127.0.0.1 partner1.whatsfind.com
127.0.0.1 cache.winhundred.com
127.0.0.1 join1.winhundred.com
127.0.0.1 join2.winhundred.com
127.0.0.1 secure.winhundred.com
127.0.0.1 ads1.winhelp2002.net
127.0.0.1 www.wisecounter.com
127.0.0.1 ads.winsite.com
127.0.0.1 www.winstream.com
127.0.0.1 clicktrack.wnu.com
127.0.0.1 wowsearch.org
127.0.0.1 www.wowsearch.org
127.0.0.1 adsearch.wp.pl
127.0.0.1 x0x.biz
127.0.0.1 xcounters.com
127.0.0.1 a.xcounters.com
127.0.0.1 nedstats.xs4all.nl
127.0.0.1 casino.xthehun.com
127.0.0.1 gambling.xthehun.com
127.0.0.1 online.xthehun.com
127.0.0.1 ads.xtra.co.nz
127.0.0.1 ads.yadio.com
127.0.0.1 dl.yadio.com
127.0.0.1 www.yadio.com
127.0.0.1 www.yfdmedia.com
127.0.0.1 adplus.yonhapnews.co.kr
127.0.0.1 ad.yourmedia.com
127.0.0.1 ad1.yourmedia.com
127.0.0.1 www.ysearchus.com
127.0.0.1 ad.zanox.com
127.0.0.1 zanox-affiliate.de
127.0.0.1 www.zanox-affiliate.de
127.0.0.1 banners.zbs.ru
127.0.0.1 www.zcounter.com
127.0.0.1 counter.zone.ee
127.0.0.1 bannerads.zwire.com
127.0.0.1 banner.0catch.com
127.0.0.1 s4.0stats.com
127.0.0.1 www.0stats.com
127.0.0.1 banner.1und1.com
127.0.0.1 banner.1and1.co.uk
127.0.0.1 ad2.163.com
127.0.0.1 adclient.163.com
127.0.0.1 images.163.com
127.0.0.1 popme.163.com
127.0.0.1 www.241hits.com
127.0.0.1 pop10.2z0o.net
127.0.0.1 ad.37.com
127.0.0.1 adserver.4clicks.org
127.0.0.1 r.4at1.com
127.0.0.1 banners.4d5.net
127.0.0.1 ad.stat.4u.pl
127.0.0.1 msncheck.41m.com
127.0.0.1 www.41m.com
127.0.0.1 count8.51yes.com
127.0.0.1 count24.51yes.com
127.0.0.1 5sec.info
127.0.0.1 www.5sec.info
127.0.0.1 5sec.org
127.0.0.1 ads.7days.ae
127.0.0.1 banners.dot.tk
127.0.0.1 www.9ringtone.com
127.0.0.1 www.123banners.com
127.0.0.1 ftp.123banners.com
127.0.0.1 123go.com
127.0.0.1 ns1.123go.net
127.0.0.1 180solutions.com
127.0.0.1 ads.180solutions.com
127.0.0.1 bisads.180solutions.com
127.0.0.1 cts.180solutions.com
127.0.0.1 his.180solutions.com
127.0.0.1 installs.180solutions.com
127.0.0.1 ping.180solutions.com
127.0.0.1 tv.180solutions.com
127.0.0.1 tvf.180solutions.com
127.0.0.1 www.180solutions.net
127.0.0.1 powered-by.180searchassistant.com
127.0.0.1 searchresults.180searchassistant.com
127.0.0.1 www.abcfreedownloads.com
127.0.0.1 www.abcfreegames.com
127.0.0.1 findwhatevernow.blazefind.com
127.0.0.1 xml.blazefind.com
127.0.0.1 www.captioncity.com
127.0.0.1 freegamesclub.com
127.0.0.1 www.fullarmorstudios.com
127.0.0.1 www.games4good.net
127.0.0.1 origin-cached.licenseacquisition.org
127.0.0.1 preview.licenseacquisition.org
127.0.0.1 loudcash.com
127.0.0.1 partners.loudcash.com
127.0.0.1 www.loudcash.com
127.0.0.1 metricsdirect.com
127.0.0.1 ads.metricsdirect.com
127.0.0.1 cts.metricsdirect.com
127.0.0.1 reports.metricsdirect.com
127.0.0.1 www.metricsdirect.com
127.0.0.1 www.myfreegamedownloads.com
127.0.0.1 n-case.com
127.0.0.1 page-not-found.org
127.0.0.1 allofthevideos.powered-by.seekmo.com
127.0.0.1 config.seekmo.com
127.0.0.1 cts.seekmo.com
127.0.0.1 downloads.seekmo.com
127.0.0.1 installs.seekmo.com
127.0.0.1 powered-by.seekmo.com
127.0.0.1 tvf.seekmo.com
127.0.0.1 funberry.powered-by.seekmo.com
127.0.0.1 pariswallpapers.powered-by.seekmo.com
127.0.0.1 slutmatrixfree.powered-by.seekmo.com
127.0.0.1 wallpapernudes.powered-by.seekmo.com
127.0.0.1 www.seekmo.com
127.0.0.1 tons-of-free-downloads.com
127.0.0.1 tons-of-free-games.com
127.0.0.1 www.tonsoffreedownloads.com
127.0.0.1 www.tonsoffreegames.com
127.0.0.1 www.totallycoolfreedownloads.com
127.0.0.1 www.totallyfreeadultstuff.com
127.0.0.1 www.totallyfreeadultvideos.com
127.0.0.1 totallyfunfreegames.com
127.0.0.1 www.totallyfunfreegames.com
127.0.0.1 white.totallyfunfreestuff.com
127.0.0.1 www.totallyfunfreestuff.com
127.0.0.1 winadclient.com
127.0.0.1 eula.winadclient.com
127.0.0.1 www.winadclient.com
127.0.0.1 windowssr.com
127.0.0.1 zango.com
127.0.0.1 cds.zango.com
127.0.0.1 acces.powered-by.zango.com
127.0.0.1 animeim.powered-by.zango.com
127.0.0.1 annakournikova.powered-by.zango.com
127.0.0.1 clickpixcursors.powered-by.zango.com
127.0.0.1 coolvuurwerk.powered-by.zango.com
127.0.0.1 dane-cook.powered-by.zango.com
127.0.0.1 davesemu.com.powered-by.zango.com
127.0.0.1 deansplanet.com.powered-by.zango.com
127.0.0.1 dollavs.powered-by.zango.com
127.0.0.1 factorygames.powered-by.zango.com
127.0.0.1 fightvideos.powered-by.zango.com
127.0.0.1 fightvids.powered-by.zango.com
127.0.0.1 flashaddictinggames.powered-by.zango.com
127.0.0.1 frazoogames.powered-by.zango.com
127.0.0.1 free.karaoke.songs.powered-by.zango.com
127.0.0.1 freesudokus.powered-by.zango.com
127.0.0.1 freetoplay.ath.cx.powered-by.zango.com
127.0.0.1 games.byethost32.powered-by.zango.com
127.0.0.1 gate1.powered-by.zango.com
127.0.0.1 gate2.powered-by.zango.com
127.0.0.1 gate3.powered-by.zango.com
127.0.0.1 gate4.powered-by.zango.com
127.0.0.1 gate5.powered-by.zango.com
127.0.0.1 gate6.powered-by.zango.com
127.0.0.1 gate7.powered-by.zango.com
127.0.0.1 gate8.powered-by.zango.com
127.0.0.1 gate9.powered-by.zango.com
127.0.0.1 gate10.powered-by.zango.com
127.0.0.1 gate11.powered-by.zango.com
127.0.0.1 gate12.powered-by.zango.com
127.0.0.1 gauntletvideos.powered-by.zango.com
127.0.0.1 getmusicvideocodes.powered-by.zango.com
127.0.0.1 glittergraphics.powered-by.zango.com
127.0.0.1 hot-lindsay.powered-by.zango.com
127.0.0.1 iconcave.powered-by.zango.com
127.0.0.1 idrink.powered-by.zango.com
127.0.0.1 lavacards.powered-by.zango.com
127.0.0.1 martinahingis.powered-by.zango.com
127.0.0.1 maratsafin.powered-by.zango.com
127.0.0.1 mediagecko.powered-by.zango.com
127.0.0.1 midis.powered-by.zango.com
127.0.0.1 mmocenter.org.powered-by.zango.com
127.0.0.1 musicvideocodes.powered-by.zango.com
127.0.0.1 mvcodezone.powered-by.zango.com
127.0.0.1 mydisplayimage.powered-by.zango.com
127.0.0.1 myfriendspy.powered-by.zango.com
127.0.0.1 mymoneymakers.powered-by.zango.com
127.0.0.1 myspace.powered-by.zango.com
127.0.0.1 myspace-backgrounds.powered-by.zango.com
127.0.0.1 myspace-codes.powered-by.zango.com
127.0.0.1 myspacegraphics.powered-by.zango.com
127.0.0.1 myspacegraphicsx.powered-by.zango.com
127.0.0.1 myspaceicons.powered-by.zango.com
127.0.0.1 myspaceiconsorg.powered-by.zango.com
127.0.0.1 myspacelayouts.powered-by.zango.com
127.0.0.1 mytop12.com.powered-by.zango.com
127.0.0.1 narutowallpaper.powered-by.zango.com
127.0.0.1 pbxanime.powered-by.zango.com
127.0.0.1 people2people.powered-by.zango.com
127.0.0.1 phoenixpeople.powered-by.zango.com
127.0.0.1 planet.nana.co.il.powered-by.zango.com
127.0.0.1 pokemonporn.powered-by.zango.com
127.0.0.1 screensaverparadise.powered-by.zango.com
127.0.0.1 sfondigratis.powered-by.zango.com
127.0.0.1 stacy-keibler-pictures.powered-by.zango.com
127.0.0.1 snapshot.powered-by.zango.com
127.0.0.1 theamazingracist.powered-by.zango.com
127.0.0.1 trenchracing.powered-by.zango.com
127.0.0.1 vcc.powered-by.zango.com
127.0.0.1 vimalonline.powered-by.zango.com
127.0.0.1 videocodesworld.powered-by.zango.com
127.0.0.1 whatsthatcode.com.powered-by.zango.com
127.0.0.1 wwedivas.powered-by.zango.com
127.0.0.1 xtreme-cheats.powered-by.zango.com
127.0.0.1 imp.games.zango.com
127.0.0.1 messenger.zango.com
127.0.0.1 partner.zango.com
127.0.0.1 powered-by.zango.com
127.0.0.1 shared.zango.com
127.0.0.1 tv.zango.com
127.0.0.1 partner.zangocash.com
127.0.0.1 public.zangocash.com
127.0.0.1 syndication.zangocash.com
127.0.0.1 www.zangogames.com
127.0.0.1 www.zangomessenger.com
127.0.0.1 www.zangopartner.com
127.0.0.1 www.zangopartner.net
127.0.0.1 geo.precisionclick.com
127.0.0.1 servedby.precisionclick.com
127.0.0.1 cnsmin.3721.com
127.0.0.1 count.3721.yahoo.com
127.0.0.1 ad.411web.com
127.0.0.1 adtracker.411web.com
127.0.0.1 hits.411web.com
127.0.0.1 overture.411web.com
127.0.0.1 search.411web.com
127.0.0.1 static.411web.com
127.0.0.1 xml.411web.com
127.0.0.1 www.411web.com
127.0.0.1 search.letssearch.com
127.0.0.1 sidebysidesearch.com
127.0.0.1 go.sidebysidesearch.com
127.0.0.1 fstrack.7search.com
127.0.0.1 ia1.7search.com
127.0.0.1 mainws2.7search.com
127.0.0.1 meta.7search.com
127.0.0.1 impression.7search.com
127.0.0.1 img.7meta.com
127.0.0.1 www.7metasearch.com
127.0.0.1 www.a1fax.com
127.0.0.1 bannerx.adtactics.com
127.0.0.1 www.adtactics.com
127.0.0.1 advertisingagent.com
127.0.0.1 bestsearch.com
127.0.0.1 scripts.bestsearch.com
127.0.0.1 www.bestsearch.com
127.0.0.1 data.browseraccelerator.com
127.0.0.1 download.browseraccelerator.com
127.0.0.1 client.browseraccelerator.com
127.0.0.1 www.buscamundo.com
127.0.0.1 bannersxchange.com
127.0.0.1 www.bannersxchange.com
127.0.0.1 internetsecurity.com
127.0.0.1 www.internetsecurity.com
127.0.0.1 www.linkstoyou.com
127.0.0.1 www.payperranking.com
127.0.0.1 www.pay-per-search.com
127.0.0.1 paypertext.com
127.0.0.1 predictivesearch.com
127.0.0.1 seal.ranking.com
127.0.0.1 www.ranking.com
127.0.0.1 ftp.sevenmetasearch.com
127.0.0.1 www.sevenmetasearch.com
127.0.0.1 tracking.spiderbait.com
127.0.0.1 www.spiderbait.com
127.0.0.1 www.textadvertising.com
127.0.0.1 www.thetop10.com
127.0.0.1 trustgauge.com
127.0.0.1 www.trustgauge.com
127.0.0.1 seal.validatedsite.com
127.0.0.1 www.validatedsite.com
127.0.0.1 www.watch24.com
127.0.0.1 clicks.about.com
127.0.0.1 f.about.com
127.0.0.1 home.about.com
127.0.0.1 js.get.about.com
127.0.0.1 images.about.com
127.0.0.1 lunafetch.about.com
127.0.0.1 pixel3.about.com
127.0.0.1 sprinks-clicks.about.com
127.0.0.1 statistics.s5.com
127.0.0.1 ad.aboutwebservices.com
127.0.0.1 cas.clickability.com
127.0.0.1 imp.clickability.com
127.0.0.1 s.clickability.com
127.0.0.1 adops.adbureau.net
127.0.0.1 asn.adbureau.net
127.0.0.1 cent.adbureau.net
127.0.0.1 creview.adbureau.net
127.0.0.1 granada.adbureau.net
127.0.0.1 granada-images.adbureau.net
127.0.0.1 haynet-images.adbureau.net
127.0.0.1 ieee.adbureau.net
127.0.0.1 ieee-images.adbureau.net
127.0.0.1 imediac.adbureau.net
127.0.0.1 inl.adbureau.net
127.0.0.1 katu.adbureau.net
127.0.0.1 mediapst.adbureau.net
127.0.0.1 ozone-images.adbureau.net
127.0.0.1 pntm.adbureau.net
127.0.0.1 sportsad.adbureau.net
127.0.0.1 studenti.adbureau.net
127.0.0.1 tripadv-images.adbureau.net
127.0.0.1 united.adbureau.net
127.0.0.1 www.adbureau.net
127.0.0.1 www.accoona.cn
127.0.0.1 search.accoona.com
127.0.0.1 www.accoonachess.com
127.0.0.1 s1.acez.com
127.0.0.1 www.acezsoftware.com
127.0.0.1 www.screengizmos.com
127.0.0.1 1.adbrite.com
127.0.0.1 3.adbrite.com
127.0.0.1 4.adbrite.com
127.0.0.1 ads.adbrite.com
127.0.0.1 click.adbrite.com
127.0.0.1 files.adbrite.com
127.0.0.1 site.www.adbrite.com
127.0.0.1 stats.adbrite.com
127.0.0.1 www.adbrite.com
127.0.0.1 2.marketbanker.com
127.0.0.1 www.marketbanker.com
127.0.0.1 bidsystem.adknowledge.com
127.0.0.1 ak1.cc
127.0.0.1 dyn.ak1.cc
127.0.0.1 updates.desktop.ak-networks.com
127.0.0.1 dev.adorigin.com
127.0.0.1 servedby.adorigin.com
127.0.0.1 msxml.blowsearch.com
127.0.0.1 www.1-viagra-on-line.com
127.0.0.1 www.all-casinos.org
127.0.0.1 www.all-lyrics.org
127.0.0.1 www.best-poker.biz
127.0.0.1 www.chenjesu.com
127.0.0.1 www.spycounter.net
127.0.0.1 www.start-page.net
127.0.0.1 www.start-page.org
127.0.0.1 the-roulette.net
127.0.0.1 www.usa-phendimetrazine.com
127.0.0.1 bilbob.com
127.0.0.1 didtal.com
127.0.0.1 quinst.com
127.0.0.1 cb.adprofile.net
127.0.0.1 content.adprofile.net
127.0.0.1 tx.adprofile.net
127.0.0.1 adteractive.com
127.0.0.1 www.adteractive.com
127.0.0.1 icc.intellisrv.net
127.0.0.1 adtegrity.com
127.0.0.1 www.adtegrity.com
127.0.0.1 webalize.net
127.0.0.1 www.webalize.net
127.0.0.1 webalize.mygeek.com
127.0.0.1 adtomi.com
127.0.0.1 cards.searchalot.com
127.0.0.1 mail.searchalot.com
127.0.0.1 search.searchalot.com
127.0.0.1 web.searchalot.com
127.0.0.1 searchalot.net
127.0.0.1 www.searchalot.net
127.0.0.1 www.searchtheinter.net
127.0.0.1 800comm.advertserve.com
127.0.0.1 aalbc.advertserve.com
127.0.0.1 bayoubuzz.advertserve.com
127.0.0.1 candlefind.advertserve.com
127.0.0.1 circuit.advertserve.com
127.0.0.1 d2.advertserve.com
127.0.0.1 divavillage.advertserve.com
127.0.0.1 ecnext.advertserve.com
127.0.0.1 endi.advertserve.com
127.0.0.1 ergoweb.advertserve.com
127.0.0.1 findbliss.advertserve.com
127.0.0.1 fishandfly.advertserve.com
127.0.0.1 fx-charts.advertserve.com
127.0.0.1 gazetteextra.advertserve.com
127.0.0.1 glide.advertserve.com
127.0.0.1 himss.advertserve.com
127.0.0.1 ipt.advertserve.com
127.0.0.1 ipt-ltd.advertserve.com
127.0.0.1 iresources.advertserve.com
127.0.0.1 lan.advertserve.com
127.0.0.1 medbanner.advertserve.com
127.0.0.1 monstersandcritics.advertserve.com
127.0.0.1 musictowers.advertserve.com
127.0.0.1 observer.advertserve.com
127.0.0.1 oppknocks.advertserve.com
127.0.0.1 projectorreviews.advertserve.com
127.0.0.1 pscreen.advertserve.com
127.0.0.1 reseller.advertserve.com
127.0.0.1 smartcpc.advertserve.com
127.0.0.1 switzerland.advertserve.com
127.0.0.1 topica.advertserve.com
127.0.0.1 tradearabia.advertserve.com
127.0.0.1 trucking.advertserve.com
127.0.0.1 unleash.advertserve.com
127.0.0.1 www.advertserve.com
127.0.0.1 install.007guard.com
127.0.0.1 the.007guard.com
127.0.0.1 feeds.2search.org
127.0.0.1 emoticons.hotmsnnames.com
127.0.0.1 www.hotmsnnames.com
127.0.0.1 www.hottestgames.net
127.0.0.1 adserver.shizzlehost.com
127.0.0.1 domains.shizzlehost.com
127.0.0.1 www.shizzlelyrics.com
127.0.0.1 www.shizzletraffic.com
127.0.0.1 webmasterz.biz
127.0.0.1 www.webmasterz.biz
127.0.0.1 www.xyfex.com
127.0.0.1 www.getsudoku4free.com
127.0.0.1 pbid.pro-market.net
127.0.0.1 www.think-adz2.com
127.0.0.1 ads.zenotecnico.com
127.0.0.1 ads3.zenotecnico.com
127.0.0.1 ads4.zenotecnico.com
127.0.0.1 amigeek.com
127.0.0.1 www.amigeek.com
127.0.0.1 www.clickyestoenter.net
127.0.0.1 www.gay50.com
127.0.0.1 gocybersearch.com
127.0.0.1 www.gocybersearch.com
127.0.0.1 hotpopup.com
127.0.0.1 search.hotpopup.com
127.0.0.1 www.hotpopup.com
127.0.0.1 www.hotsearchbox.com
127.0.0.1 www.jetseeker.com
127.0.0.1 search--here.info
127.0.0.1 www.searchxl.com
127.0.0.1 tinybar.com
127.0.0.1 adforce.adtech.de
127.0.0.1 im.adtech.de
127.0.0.1 imageserv.adtech.de
127.0.0.1 x86adserv001.adtech.de
127.0.0.1 x86adserv002.adtech.de
127.0.0.1 x86adserv004.adtech.de
127.0.0.1 x86adserv005.adtech.de
127.0.0.1 x86adserv006.adtech.de
127.0.0.1 x86adserv008.adtech.de
127.0.0.1 x86adserv009.adtech.de
127.0.0.1 x86adserv010.adtech.de
127.0.0.1 x86adserv012.adtech.de
127.0.0.1 x86adserv013.adtech.de
127.0.0.1 x86adserv014.adtech.de
127.0.0.1 x86adserv016.adtech.de
127.0.0.1 x86adserv017.adtech.de
127.0.0.1 x86adserv018.adtech.de
127.0.0.1 cdn1.adsdk.com
127.0.0.1 advertising.com
127.0.0.1 adserve.advertising.com
127.0.0.1 dbs.advertising.com
127.0.0.1 demo.advertising.com
127.0.0.1 opera1-servedby.advertising.com
127.0.0.1 rd.advertising.com
127.0.0.1 wap.advertising.com
127.0.0.1 clk4.com
127.0.0.1 dev.clk4.com
127.0.0.1 www.clk4.com
127.0.0.1 www.contextualclicks.com
127.0.0.1 www.fastseeker.com
127.0.0.1 bf.mocda1.com
127.0.0.1 www.thesearchster.com
127.0.0.1 t.ign.com
127.0.0.1 tracker.ign.com
127.0.0.1 adserver.snowball.com
127.0.0.1 polls.snowball.com
127.0.0.1 t.snowball.com
127.0.0.1 tracker.snowball.com
127.0.0.1 flowers.7art-screensavers.com
127.0.0.1 www.7art-screensavers.com
127.0.0.1 www.silveragesoftware.com
127.0.0.1 www.gad-network.com
127.0.0.1 www.go-turf.com
127.0.0.1 www.gomusic.com
127.0.0.1 www.gorecord.com
127.0.0.1 www.mail-skinner.com
127.0.0.1 www.navi-recherche.com
127.0.0.1 www.navi-search.com
127.0.0.1 www.videozapping.com
127.0.0.1 altnet.com
127.0.0.1 file.altnet.com
127.0.0.1 media.altnet.com
127.0.0.1 ts.altnet.com
127.0.0.1 tss.altnet.com
127.0.0.1 pm.altnet.com
127.0.0.1 www.altnetp2p.com
127.0.0.1 st.brilliantdigital.com
127.0.0.1 b3d.com
127.0.0.1 bde3d.com
127.0.0.1 www.b3d.com
127.0.0.1 www.bypass-censorship.com
127.0.0.1 www.firewall-tunnel.com
127.0.0.1 www.free-proxy.org
127.0.0.1 www.get-around-firwall.com
127.0.0.1 www.hide-ip.com
127.0.0.1 www.hide-ip.net
127.0.0.1 www.http-proxy.com
127.0.0.1 www.http-tunnel.org
127.0.0.1 www.http-tunnel.net
127.0.0.1 www.http-tunneling.com
127.0.0.1 www.irc-proxy.com
127.0.0.1 www.kazaa-firewall.com
127.0.0.1 www.kazaa-proxy.com
127.0.0.1 www.kill-firewall.com
127.0.0.1 www.msn-firewall.com
127.0.0.1 www.msn-proxy.com
127.0.0.1 www.proxy-bypass.com
127.0.0.1 www.proxy-tunnel.com
127.0.0.1 www.socks-proxy.org
127.0.0.1 xiti.com
127.0.0.1 logc13.xiti.com
127.0.0.1 logc14.xiti.com
127.0.0.1 logc15.xiti.com
127.0.0.1 logc16.xiti.com
127.0.0.1 logc19.xiti.com
127.0.0.1 logi6.xiti.com
127.0.0.1 logi7.xiti.com
127.0.0.1 logv1.xiti.com
127.0.0.1 logv2.xiti.com
127.0.0.1 logv4.xiti.com
127.0.0.1 logv5.xiti.com
127.0.0.1 logv6.xiti.com
127.0.0.1 logv7.xiti.com
127.0.0.1 logv8.xiti.com
127.0.0.1 logv9.xiti.com
127.0.0.1 logv10.xiti.com
127.0.0.1 logv11.xiti.com
127.0.0.1 logv12.xiti.com
127.0.0.1 logv13.xiti.com
127.0.0.1 logv14.xiti.com
127.0.0.1 logv17.xiti.com
127.0.0.1 logv19.xiti.com
127.0.0.1 logv20.xiti.com
127.0.0.1 logv21.xiti.com
127.0.0.1 logv22.xiti.com
127.0.0.1 logv23.xiti.com
127.0.0.1 logv24.xiti.com
127.0.0.1 logv25.xiti.com
127.0.0.1 logv26.xiti.com
127.0.0.1 logv27.xiti.com
127.0.0.1 logv28.xiti.com
127.0.0.1 logv29.xiti.com
127.0.0.1 logv30.xiti.com
127.0.0.1 logp.xiti.com
127.0.0.1 trafic.xiti.com
127.0.0.1 www.xiti.com
127.0.0.1 www.avenuea.com
127.0.0.1 image.atdmt.com
127.0.0.1 spe.atdmt.com
127.0.0.1 srch.atdmt.com
127.0.0.1 www.atlasdmt.com
127.0.0.1 www.avenueainc.com
127.0.0.1 ads.toplayerserver.com
127.0.0.1 www1.toplayerserver.com
127.0.0.1 www.toplayerserver.com
127.0.0.1 spyware-removal.net
127.0.0.1 www.bestsexycelebs.com
127.0.0.1 www.hunkymalecelebs.com
127.0.0.1 missdanicapatrick.com
127.0.0.1 missjessicasimpson.com
127.0.0.1 adrianalima.sexybabesx.com
127.0.0.1 amandabynes.sexybabesx.com
127.0.0.1 angelina.sexybabesx.com
127.0.0.1 annakournikova.sexybabesx.com
127.0.0.1 annapaquin.sexybabesx.com
127.0.0.1 annehathaway.sexybabesx.com
127.0.0.1 ashanti.sexybabesx.com
127.0.0.1 ashleesimpson.sexybabesx.com
127.0.0.1 ashleyolsen.sexybabesx.com
127.0.0.1 audreytautou.sexybabesx.com
127.0.0.1 avrillavigne.sexybabesx.com
127.0.0.1 beyonce.sexybabesx.com
127.0.0.1 brianabanks.sexybabesx.com
127.0.0.1 britney.sexybabesx.com
127.0.0.1 brooke.sexybabesx.com
127.0.0.1 brookeburns.sexybabesx.com
127.0.0.1 cameron.sexybabesx.com
127.0.0.1 carmen.sexybabesx.com
127.0.0.1 charlizetheron.sexybabesx.com
127.0.0.1 christina.sexybabesx.com
127.0.0.1 christinaricci.sexybabesx.com
127.0.0.1 ciara.sexybabesx.com
127.0.0.1 danicapatrick.sexybabesx.com
127.0.0.1 danielahantuchova.sexybabesx.com
127.0.0.1 demimoore.sexybabesx.com
127.0.0.1 denise.sexybabesx.com
127.0.0.1 elishacuthbert.sexybabesx.com
127.0.0.1 emmawatson.sexybabesx.com
127.0.0.1 ericablasberg.sexybabesx.com
127.0.0.1 evagreen.sexybabesx.com
127.0.0.1 evalongoria.sexybabesx.com
127.0.0.1 gellar.sexybabesx.com
127.0.0.1 giselebundchen.sexybabesx.com
127.0.0.1 gwenstefani.sexybabesx.com
127.0.0.1 gwynethpaltrow.sexybabesx.com
127.0.0.1 halleberry.sexybabesx.com
127.0.0.1 heathergraham.sexybabesx.com
127.0.0.1 heatherlocklear.sexybabesx.com
127.0.0.1 heidiklum.sexybabesx.com
127.0.0.1 hilaryduff.sexybabesx.com
127.0.0.1 hilaryswank.sexybabesx.com
127.0.0.1 janetjackson.sexybabesx.com
127.0.0.1 jennajameson.sexybabesx.com
127.0.0.1 jenniferaniston.sexybabesx.com
127.0.0.1 jenniferellison.sexybabesx.com
127.0.0.1 jennifergarner.sexybabesx.com
127.0.0.1 jenniferlopez.sexybabesx.com
127.0.0.1 hewitt.sexybabesx.com
127.0.0.1 jessicaalba.sexybabesx.com
127.0.0.1 jessicabiel.sexybabesx.com
127.0.0.1 jessicasimpson.sexybabesx.com
127.0.0.1 jojo.sexybabesx.com
127.0.0.1 josiemaran.sexybabesx.com
127.0.0.1 jossstone.sexybabesx.com
127.0.0.1 juliaroberts.sexybabesx.com
127.0.0.1 juliastiles.sexybabesx.com
127.0.0.1 katebeckinsale.sexybabesx.com
127.0.0.1 katehudson.sexybabesx.com
127.0.0.1 katemoss.sexybabesx.com
127.0.0.1 katewinslet.sexybabesx.com
127.0.0.1 katieholmes.sexybabesx.com
127.0.0.1 keiraknightley.sexybabesx.com
127.0.0.1 kellyclarkson.sexybabesx.com
127.0.0.1 kirsten.sexybabesx.com
127.0.0.1 kristinkreuk.sexybabesx.com
127.0.0.1 leeleesobieski.sexybabesx.com
127.0.0.1 livtyler.sexybabesx.com
127.0.0.1 lucyliu.sexybabesx.com
127.0.0.1 lucypinder.sexybabesx.com
127.0.0.1 madonna.sexybabesx.com
127.0.0.1 mandy.sexybabesx.com
127.0.0.1 sharapova.sexybabesx.com
127.0.0.1 mariahcarey.sexybabesx.com
127.0.0.1 marisamiller.sexybabesx.com
127.0.0.1 menasuvari.sexybabesx.com
127.0.0.1 michellerodriguez.sexybabesx.com
127.0.0.1 milakunis.sexybabesx.com
127.0.0.1 millajovovich.sexybabesx.com
127.0.0.1 mischabarton.sexybabesx.com
127.0.0.1 monicabellucci.sexybabesx.com
127.0.0.1 naomicampbell.sexybabesx.com
127.0.0.1 naomiwatts.sexybabesx.com
127.0.0.1 nataliegulbis.sexybabesx.com
127.0.0.1 natalieportman.sexybabesx.com
127.0.0.1 nevecampbell.sexybabesx.com
127.0.0.1 nickyhilton.sexybabesx.com
127.0.0.1 nicolekidman.sexybabesx.com
127.0.0.1 nicolerichie.sexybabesx.com
127.0.0.1 nicolevaidisova.sexybabesx.com
127.0.0.1 pamela.sexybabesx.com
127.0.0.1 parishilton.sexybabesx.com
127.0.0.1 penelope.sexybabesx.com
127.0.0.1 rachelbilson.sexybabesx.com
127.0.0.1 rachelmcadams.sexybabesx.com
127.0.0.1 rachelstevens.sexybabesx.com
127.0.0.1 rachelweisz.sexybabesx.com
127.0.0.1 reese.sexybabesx.com
127.0.0.1 renee.sexybabesx.com
127.0.0.1 roselynsanchez.sexybabesx.com
127.0.0.1 salma.sexybabesx.com
127.0.0.1 samairearmstrong.sexybabesx.com
127.0.0.1 sandra.sexybabesx.com
127.0.0.1 saniamirza.sexybabesx.com
127.0.0.1 sashacohen.sexybabesx.com
127.0.0.1 scarlett.sexybabesx.com
127.0.0.1 selitaebanks.sexybabesx.com
127.0.0.1 serenawilliams.sexybabesx.com
127.0.0.1 shakira.sexybabesx.com
127.0.0.1 shannendoherty.sexybabesx.com
127.0.0.1 sharonstone.sexybabesx.com
127.0.0.1 sherylcrow.sexybabesx.com
127.0.0.1 siennamiller.sexybabesx.com
127.0.0.1 sophiabush.sexybabesx.com
127.0.0.1 stacykeibler.sexybabesx.com
127.0.0.1 terapatrick.sexybabesx.com
127.0.0.1 terihatcher.sexybabesx.com
127.0.0.1 thorabirch.sexybabesx.com
127.0.0.1 tyrabanks.sexybabesx.com
127.0.0.1 umathurman.sexybabesx.com
127.0.0.1 venuswilliams.sexybabesx.com
127.0.0.1 active-alert-server.com
127.0.0.1 amnv.net
127.0.0.1 www.amnv.net
127.0.0.1 avenuemedia.com
127.0.0.1 www.avenuemedia.com
127.0.0.1 dyntraq.climaxbucks.com
127.0.0.1 mt1.climaxbucks.com
127.0.0.1 mt23.climaxbucks.com
127.0.0.1 mt32.climaxbucks.com
127.0.0.1 mt35.climaxbucks.com
127.0.0.1 mt122.climaxbucks.com
127.0.0.1 securei.climaxbucks.com
127.0.0.1 xbs.climaxbucks.com
127.0.0.1 www.climaxbucks.com
127.0.0.1 cocktailcash.com
127.0.0.1 www.cocktailcash.com
127.0.0.1 www.lunasearch.com
127.0.0.1 movies-etc.com
127.0.0.1 cdn2.movies-etc.com
127.0.0.1 www.movies-etc.com
127.0.0.1 i.1100i.com
127.0.0.1 images.1100i.com
127.0.0.1 i.azjmp.com
127.0.0.1 www.azjmp.com
127.0.0.1 images.azoogleads.com
127.0.0.1 images.azooimages.com
127.0.0.1 www.azoogleads.com
127.0.0.1 b1.bluetime.com
127.0.0.1 www.bluetime.com
127.0.0.1 www.giftfox.com
127.0.0.1 images.hostimages.net
127.0.0.1 images.imagesbyaz.com
127.0.0.1 images.imgehost.com
127.0.0.1 impulseleads.com
127.0.0.1 www.impulseleads.com
127.0.0.1 images.imgserver.net
127.0.0.1 www.merchantportal.com
127.0.0.1 www.mport.com
127.0.0.1 www.mydishprovider.com
127.0.0.1 noadware.biz
127.0.0.1 c.qckjmp.com
127.0.0.1 visit-link.com
127.0.0.1 home.artella.biz
127.0.0.1 www.artella.biz
127.0.0.1 www2.click2begin.com
127.0.0.1 www3.click2begin.com
127.0.0.1 www.clickfast.biz
127.0.0.1 desktoptraffic.net
127.0.0.1 toolbar.desktoptraffic.net
127.0.0.1 www2.hooowah.com
127.0.0.1 www3.hooowah.com
127.0.0.1 www4.hooowah.com
127.0.0.1 www5.hooowah.com
127.0.0.1 www6.hooowah.com
127.0.0.1 www7.hooowah.com
127.0.0.1 www8.hooowah.com
127.0.0.1 www9.hooowah.com
127.0.0.1 www10.hooowah.com
127.0.0.1 iconads.biz
127.0.0.1 www1.pops-stop.com
127.0.0.1 popupsearches.com
127.0.0.1 www2.popupsearches.com
127.0.0.1 trafficgeneration.biz
127.0.0.1 toolbar2.trafficgeneration.biz
127.0.0.1 toolbar3.trafficgeneration.biz
127.0.0.1 toolbar4.trafficgeneration.biz
127.0.0.1 toolbar5.trafficgeneration.biz
127.0.0.1 toolbar6.trafficgeneration.biz
127.0.0.1 www.trafficgeneration.biz
127.0.0.1 www2.1evidencekiller.com
127.0.0.1 www2.1historyeraser.com
127.0.0.1 www3.1spywarekiller.com
127.0.0.1 www.adultmegaporn.com
127.0.0.1 www.eaffiliateinc.com
127.0.0.1 www.globaladserver.com
127.0.0.1 goldmembersarea.com
127.0.0.1 www.goldmembersarea.com
127.0.0.1 www.gophersearch.com
127.0.0.1 secure.ivirtualcard.com
127.0.0.1 secure.memberareaplus.com
127.0.0.1 www.mnetpower.com
127.0.0.1 secure.pinkpays.com
127.0.0.1 www.pinkpays.com
127.0.0.1 vroomsearch.com
127.0.0.1 www.vroomsearch.com
127.0.0.1 www.600.net
127.0.0.1 www.funnyjoke.net
127.0.0.1 www.ratepic.com
127.0.0.1 1cat.com
127.0.0.1 i.1cat.com
127.0.0.1 www.1cat.com
127.0.0.1 gr1.cc
127.0.0.1 gr2.cc
127.0.0.1 gr4.cc
127.0.0.1 selectbonus.com
127.0.0.1 www.selectbonus.com
127.0.0.1 www.shopathome.com
127.0.0.1 adcounter.theglobeandmail.com
127.0.0.1 adrates.theglobeandmail.com
127.0.0.1 ads.globeandmail.com
127.0.0.1 ads1.theglobeandmail.com
127.0.0.1 visit.theglobeandmail.com
127.0.0.1 www1.theglobeandmail.com
127.0.0.1 ak.bluestreak.com
127.0.0.1 ion.bluestreak.com
127.0.0.1 s0b.bluestreak.com
127.0.0.1 s3.bluestreak.com
127.0.0.1 s4.bluestreak.com
127.0.0.1 s6.bluestreak.com
127.0.0.1 www.bluestreak.com
127.0.0.1 dxcdirect.com
127.0.0.1 ads.dxcdirect.com
127.0.0.1 dl.dxcdirect.com
127.0.0.1 media.dxcdirect.com
127.0.0.1 search.dxcdirect.com
127.0.0.1 www.dxcdirect.com
127.0.0.1 www.mycustomersdirect.com
127.0.0.1 www.filefront.net
127.0.0.1 www.torrentsearcher.net
127.0.0.1 www.xcode.info
127.0.0.1 pr.xeol.net
127.0.0.1 download.bonzi.com
127.0.0.1 images.bonzi.com
127.0.0.1 www.bonzibuddy.com
127.0.0.1 counter1.bravenet.com
127.0.0.1 counter2.bravenet.com
127.0.0.1 counter3.bravenet.com
127.0.0.1 counter4.bravenet.com
127.0.0.1 counter5.bravenet.com
127.0.0.1 counter6.bravenet.com
127.0.0.1 counter7.bravenet.com
127.0.0.1 counter8.bravenet.com
127.0.0.1 counter9.bravenet.com
127.0.0.1 counter10.bravenet.com
127.0.0.1 counter11.bravenet.com
127.0.0.1 counter12.bravenet.com
127.0.0.1 counter13.bravenet.com
127.0.0.1 counter14.bravenet.com
127.0.0.1 counter15.bravenet.com
127.0.0.1 counter16.bravenet.com
127.0.0.1 counter17.bravenet.com
127.0.0.1 counter18.bravenet.com
127.0.0.1 counter19.bravenet.com
127.0.0.1 counter20.bravenet.com
127.0.0.1 counter21.bravenet.com
127.0.0.1 counter22.bravenet.com
127.0.0.1 counter23.bravenet.com
127.0.0.1 counter24.bravenet.com
127.0.0.1 counter25.bravenet.com
127.0.0.1 counter26.bravenet.com
127.0.0.1 counter27.bravenet.com
127.0.0.1 counter28.bravenet.com
127.0.0.1 counter29.bravenet.com
127.0.0.1 counter30.bravenet.com
127.0.0.1 counter31.bravenet.com
127.0.0.1 counter32.bravenet.com
127.0.0.1 counter33.bravenet.com
127.0.0.1 counter34.bravenet.com
127.0.0.1 counter35.bravenet.com
127.0.0.1 counter36.bravenet.com
127.0.0.1 counter37.bravenet.com
127.0.0.1 counter38.bravenet.com
127.0.0.1 counter39.bravenet.com
127.0.0.1 counter40.bravenet.com
127.0.0.1 counter41.bravenet.com
127.0.0.1 counter42.bravenet.com
127.0.0.1 counter43.bravenet.com
127.0.0.1 counter44.bravenet.com
127.0.0.1 coun

smitfraud.cmd report 2/3:

127.0.0.1 www.1200land.com
127.0.0.1 find777.com
127.0.0.1 www.find777.com
127.0.0.1 boobscategory.com
127.0.0.1 onlyfatchiks.com
127.0.0.1 www.crackdb.com
127.0.0.1 www.cracksplanet.com
127.0.0.1 warewz.ws
127.0.0.1 www.adware-bazooka.com
127.0.0.1 www.adware-punisher.com
127.0.0.1 www.hit-virus.com
127.0.0.1 www.spy-iblock.com
127.0.0.1 www.the-spy-guard.com
127.0.0.1 www.antincsoft.com
127.0.0.1 www.betting-cards-games.com
127.0.0.1 www.cardsgames.net
127.0.0.1 delpyware.com
127.0.0.1 easyantispy.com
127.0.0.1 www.easysurfe.com
127.0.0.1 free2xsite.com
127.0.0.1 www.free2xsite.com
127.0.0.1 www.funnygirls.com
127.0.0.1 girl4sex.org
127.0.0.1 girls4rent.net
127.0.0.1 www.girlsforsex.net
127.0.0.1 homesearcheuro.com
127.0.0.1 www.meet-wet-holes.com
127.0.0.1 meet-your-love.net
127.0.0.1 pickup-ur-girl.net
127.0.0.1 pickup-ur-girl.com
127.0.0.1 protectsoft.net
127.0.0.1 www.protectsoft.net
127.0.0.1 realitycasino.net
127.0.0.1 rooms4poker.com
127.0.0.1 sexygirlfriends.org
127.0.0.1 softantispy.com
127.0.0.1 www.softantispy.com
127.0.0.1 spybotremover.net
127.0.0.1 www.spybotremover.net
127.0.0.1 www.spyprotect.org
127.0.0.1 www.spywaremustdie.com
127.0.0.1 spywarewasher.net
127.0.0.1 www.spywarewasher.net
127.0.0.1 takethischiks.com
127.0.0.1 www.thequicklink.com
127.0.0.1 www.topxxxdvd.net
127.0.0.1 usefulholes.com
127.0.0.1 usefulholes.net
127.0.0.1 www.usefullsoft.com
127.0.0.1 usefullsoft.net
127.0.0.1 windowprotectorkit.com
127.0.0.1 www.yourblackjack.com
127.0.0.1 www.adultfreegals.com
127.0.0.1 www.adultweetplace.com
127.0.0.1 www.bestadultgals.com
127.0.0.1 admintds.megatds.com
127.0.0.1 tds.megatds.com
127.0.0.1 www.megatds.com
127.0.0.1 pornothumbgals.com
127.0.0.1 www.404dnserror.net
127.0.0.1 www.entertaintool.com
127.0.0.1 entertaintool.net
127.0.0.1 www.entertaintool.net
127.0.0.1 givegate.com
127.0.0.1 www.givegate.net
127.0.0.1 www.safetyhomepage.com
127.0.0.1 www.safetyhomepage.net
127.0.0.1 www.testonsecurity.com
127.0.0.1 thesecuritypages.net
127.0.0.1 www.thesecuritypages.net
127.0.0.1 thesecuritytool.com
127.0.0.1 www.thesecuritytool.com
127.0.0.1 www.thesecuritytool.net
127.0.0.1 www.theuptodatesafety.net
127.0.0.1 www.theuptodatesecurity.com
127.0.0.1 www.theuptodatesecurity.net
127.0.0.1 www.uptodateprotection.net
127.0.0.1 www.uptodatesafety.com
127.0.0.1 www.uptodatesafety.net
127.0.0.1 www.adult-trade.net
127.0.0.1 www.alfasearch.net
127.0.0.1 www.22pics.com
127.0.0.1 www.alexa69.com
127.0.0.1 www.free-video-post.com
127.0.0.1 www.iframestat.com
127.0.0.1 www.nude-live-cams.com
127.0.0.1 www.paris-hilton-movies.com
127.0.0.1 www.pornbook.net
127.0.0.1 www.pornhit.net
127.0.0.1 www.pornwoods.com
127.0.0.1 www.sitesell.biz
127.0.0.1 www.video-post.org
127.0.0.1 www.worldsex.co.yu
127.0.0.1 www.bestsearchsite.net
127.0.0.1 teenpics.lookforthe.net
127.0.0.1 www.searchgo.us
127.0.0.1 callmachine.com
127.0.0.1 www.callmachine.com
127.0.0.1 www.callmachine.net
127.0.0.1 drantispy.com
127.0.0.1 globalhostinc.com
127.0.0.1 nightbleepers.com
127.0.0.1 www.specialgoods.info
127.0.0.1 targettraff.com
127.0.0.1 vibramtmedia.com
127.0.0.1 wmsource.net
127.0.0.1 www.emilythumbs.com
127.0.0.1 www.emmathumbs.com
127.0.0.1 www.ginamemedia.com
127.0.0.1 www.jacobporn.com
127.0.0.1 www.joshuaporn.com
127.0.0.1 www.madisonthumbs.com
127.0.0.1 www.oliviathumbs.com
127.0.0.1 ls0.net
127.0.0.1 4-v.net
127.0.0.1 getthis4free.com
127.0.0.1 www.getthis4free.com
127.0.0.1 terra.hbison.com
127.0.0.1 hcworld.com
127.0.0.1 free.hcworld.com
127.0.0.1 kloun.com
127.0.0.1 web-cams-chat.com
127.0.0.1 aka-root.com
127.0.0.1 crimeacash.com
127.0.0.1 dancefox.net
127.0.0.1 www.lineika.net
127.0.0.1 nafleite.com
127.0.0.1 www.taksiug.com
127.0.0.1 theprav.com
127.0.0.1 up-host.com
127.0.0.1 www.x-kernel.com
127.0.0.1 urgentsystemupdate.com
127.0.0.1 www.urgentsystemupdate.com
127.0.0.1 www.juicymatures.com
127.0.0.1 www.transparty.net
127.0.0.1 xxx-mom.com
127.0.0.1 www.thepopway.com
127.0.0.1 here4search.biz
127.0.0.1 vip-se.com
127.0.0.1 www.vip-se.com
127.0.0.1 5starvideos.com
127.0.0.1 bdsm.5starvideos.com
127.0.0.1 bigtits.5starvideos.com
127.0.0.1 ebonymovies.5starvideos.com
127.0.0.1 galls.5starvideos.com
127.0.0.1 gaysmovies.5starvideos.com
127.0.0.1 transsexualmovies.5starvideos.com
127.0.0.1 www.allstarsvideos.com
127.0.0.1 moviestemptation.com
127.0.0.1 www.moviestemptation.com
127.0.0.1 www.pornmagbucks.com
127.0.0.1 todaysfreevideo.com
127.0.0.1 www.todaysfreevideo.com
127.0.0.1 www.videoscash.com
127.0.0.1 videosgalleries.com
127.0.0.1 www.videosgalleries.com
127.0.0.1 vidscollection.com
127.0.0.1 www.yourfreevids.com
127.0.0.1 www.animepornmag.com
127.0.0.1 www1.animepornmag.com
127.0.0.1 www.asianpornmag.com
127.0.0.1 www1.asianpornmag.com
127.0.0.1 www.babespornmag.com
127.0.0.1 www1.babespornmag.com
127.0.0.1 www.bdsmpornmag.com
127.0.0.1 www.bigtitspornmag.com
127.0.0.1 www1.bigtitspornmag.com
127.0.0.1 www.dailypornmag.com
127.0.0.1 www.ebony-pornmag.com
127.0.0.1 www1.gayspornmag.com
127.0.0.1 www.hardcorepornmag.com
127.0.0.1 www1.hardcorepornmag.com
127.0.0.1 www.hairypornmag.com
127.0.0.1 www1.hairypornmag.com
127.0.0.1 www.lesbianspornmag.com
127.0.0.1 www1.lesbianspornmag.com
127.0.0.1 www.maturespornmag.com
127.0.0.1 www1.maturespornmag.com
127.0.0.1 www.nylonpornmag.com
127.0.0.1 www1.nylonpornmag.com
127.0.0.1 pornmaggalleries.com
127.0.0.1 www.pornmaggalleries.com
127.0.0.1 pornmagthumbs.com
127.0.0.1 www.pornmagthumbs.com
127.0.0.1 www.pornstarspornmag.com
127.0.0.1 www1.pornstarspornmag.com
127.0.0.1 www.shemalespornmag.com
127.0.0.1 www1.shemalespornmag.com
127.0.0.1 www.teenspornmag.com
127.0.0.1 www1.teenspornmag.com
127.0.0.1 www.uniformpornmag.com
127.0.0.1 www1.uniformpornmag.com
127.0.0.1 estserv01.com
127.0.0.1 www.estserv01.com
127.0.0.1 www.feelsomepleasure.com
127.0.0.1 www.newdumpsev.com
127.0.0.1 www.smutiedreams.com
127.0.0.1 www.goldcodec.com
127.0.0.1 www.fast-web-search.com
127.0.0.1 hqsearch.net
127.0.0.1 mega7porn.com
127.0.0.1 get.adarmor.com
127.0.0.1 advancedfixer.com
127.0.0.1 get.adwarebazooka.com
127.0.0.1 www.adwarepunisher.com
127.0.0.1 antispyguide.com
127.0.0.1 www.awmteam.com
127.0.0.1 get.breakspyware.com
127.0.0.1 www.breakspyware.com
127.0.0.1 get.fixerantispy.com
127.0.0.1 www.fixerantispy.com
127.0.0.1 help.hitvirus.com
127.0.0.1 support.hitvirus.com
127.0.0.1 klikfeed.com
127.0.0.1 xml.klikfeed.com
127.0.0.1 www.klikfeed.com
127.0.0.1 www.klikrevenue.com
127.0.0.1 kliksoftware.com
127.0.0.1 www.kliksoftware.com
127.0.0.1 www.nelroyltd.com
127.0.0.1 www.remedyantispy.com
127.0.0.1 get.spyanalyst.com
127.0.0.1 www.spyanalyst.com
127.0.0.1 get.spydefence.com
127.0.0.1 www.spydefence.com
127.0.0.1 get.spyiblock.com
127.0.0.1 spyofficer.com
127.0.0.1 get.spyofficer.com
127.0.0.1 www.spyofficer.com
127.0.0.1 get.spywaredisinfector.com
127.0.0.1 help.spywaredisinfector.com
127.0.0.1 support.spywaredisinfector.com
127.0.0.1 thespyguard.com
127.0.0.1 winfixtools.com
127.0.0.1 700xxx.com
127.0.0.1 www.700xxx.com
127.0.0.1 alphaerotica.com
127.0.0.1 capitalhardcores.com
127.0.0.1 search-end.com
127.0.0.1 search4www.net
127.0.0.1 searchinwww.net
127.0.0.1 777mp3.com
127.0.0.1 a7p7.com
127.0.0.1 lalasearch.com
127.0.0.1 www.lalasearch.com
127.0.0.1 mp3traffic.net
127.0.0.1 www.painterppc.com
127.0.0.1 www.painterdialer.com
127.0.0.1 paintertraffic.com
127.0.0.1 help.razespyware.net
127.0.0.1 www.sharpspyware.com
127.0.0.1 www.spywaredollars.com
127.0.0.1 idnserror.com
127.0.0.1 www.idnserror.com
127.0.0.1 iednserror.com
127.0.0.1 www.iednserror.com
127.0.0.1 iesafepage.com
127.0.0.1 www.iesafepage.com
127.0.0.1 iewarning.com
127.0.0.1 www.iewarning.com
127.0.0.1 www.isecuritypage.com
127.0.0.1 iesecurepage.com
127.0.0.1 www.iesecurepage.com
127.0.0.1 ieuptodate.com
127.0.0.1 www.ieuptodate.com
127.0.0.1 iupdatepage.com
127.0.0.1 www.iupdatepage.com
127.0.0.1 allteenmodel.com
127.0.0.1 www.allteenmodel.com
127.0.0.1 browsezilla.biz
127.0.0.1 browsezilla.com
127.0.0.1 browsezilla.info
127.0.0.1 browsezilla.net
127.0.0.1 coolteenpussy.com
127.0.0.1 www.coolteenpussy.com
127.0.0.1 sexiw.com
127.0.0.1 sexlt.com
127.0.0.1 sexpu.com
127.0.0.1 sexyyoungpics.com
127.0.0.1 www.sexyyoungpics.com
127.0.0.1 somesexpics.com
127.0.0.1 www.somesexpics.com
127.0.0.1 www.sweet4all.com
127.0.0.1 sweetschoolgirl.com
127.0.0.1 www.sweetschoolgirl.com
127.0.0.1 teenpussymania.com
127.0.0.1 www.teensexualitypics.com
127.0.0.1 teensspace.com
127.0.0.1 thumbstower.com
127.0.0.1 www.thumbstower.com
127.0.0.1 wsexi.com
127.0.0.1 x-drugs.com
127.0.0.1 www.perfectcodec.com
127.0.0.1 www.forexseek.com
127.0.0.1 www.giowanni.com
127.0.0.1 www.xzgames.com
127.0.0.1 download.regfreeze.net
127.0.0.1 www.sheriffcash.com
127.0.0.1 www.imlooking.net
127.0.0.1 looking-for.net
127.0.0.1 www.searchno.com
127.0.0.1 www.smartsearchworld.com
127.0.0.1 vipse.org
127.0.0.1 wwwhunter.net
127.0.0.1 spyheal.biz
127.0.0.1 www.spyheal.biz
127.0.0.1 www.spyheal.com
127.0.0.1 www.xmirror.us
127.0.0.1 mostimportant.org
127.0.0.1 1.tnssearch.com
127.0.0.1 8.tnssearch.com
127.0.0.1 10.tnssearch.com
127.0.0.1 12.tnssearch.com
127.0.0.1 12.topnssearch.com
127.0.0.1 26.topnssearch.com
127.0.0.1 60.topnssearch.com
127.0.0.1 movies.allmoviegalleries.com
127.0.0.1 www.free-video-preview.com
127.0.0.1 gpisoft.com
127.0.0.1 www.gpisoft.com
127.0.0.1 1computerspiele.net
127.0.0.1 www.1001-search.com
127.0.0.1 www.1800-search.com
127.0.0.1 www.2005-search.com
127.0.0.1 2udating.com
127.0.0.1 adultmac.com
127.0.0.1 adult-incest.com
127.0.0.1 afrochicksbleep.com
127.0.0.1 amanti.org
127.0.0.1 amateurukporn.com
127.0.0.1 anale-sesso.com
127.0.0.1 anali.org
127.0.0.1 analliz.com
127.0.0.1 asiansexpage.com
127.0.0.1 asiansoftcorepics.com
127.0.0.1 www.asiansoftcorepics.com
127.0.0.1 balabolka.biz
127.0.0.1 beastsex-movies.com
127.0.0.1 bellybuilders.org
127.0.0.1 www.bestgall.net
127.0.0.1 braguitas.org
127.0.0.1 bustyqueens.net
127.0.0.1 bustytart.com
127.0.0.1 buy-search.biz
127.0.0.1 buy-search.info
127.0.0.1 buy-search.org
127.0.0.1 canadult.com
127.0.0.1 cjtalk.net
127.0.0.1 coolteenpics.com
127.0.0.1 cumriver.com
127.0.0.1 cuteporns.com
127.0.0.1 datingaction.net
127.0.0.1 datingbank.net
127.0.0.1 datingfavorite.com
127.0.0.1 datingfavorite.net
127.0.0.1 datingfirst.net
127.0.0.1 datinggallery.net
127.0.0.1 datinggate.net
127.0.0.1 datingleader.net
127.0.0.1 datingmachine.net
127.0.0.1 datingvirtual.net
127.0.0.1 donne-ciccione.com
127.0.0.1 ebonyadultsex.com
127.0.0.1 ebony-stars.com
127.0.0.1 every-search.com
127.0.0.1 every-search.net
127.0.0.1 fetite.org
127.0.0.1 find-search.info
127.0.0.1 fingerfuns.com
127.0.0.1 folladas.org
127.0.0.1 foto-porno-amatoriale.com
127.0.0.1 foto-porno-gallerie.com
127.0.0.1 foto-spagnole.com
127.0.0.1 foto-troie-incinta.com
127.0.0.1 freeblonde.net
127.0.0.1 freewhore.net
127.0.0.1 free-xxxgals.com
127.0.0.1 freshpornolinks.com
127.0.0.1 bleepthegranny.com
127.0.0.1 get-search.org
127.0.0.1 gingersex.net
127.0.0.1 girl-topless.org
127.0.0.1 girlmakeblowjob.com
127.0.0.1 gotico.org
127.0.0.1 grandbleep.com
127.0.0.1 hardsex-mania.com
127.0.0.1 hardsex-now.com
127.0.0.1 hardsex-party.com
127.0.0.1 hitparadegay.com
127.0.0.1 hotadults.net
127.0.0.1 hot-date-list.com
127.0.0.1 hotstair.com
127.0.0.1 hqdating.net
127.0.0.1 hustlerstars.com
127.0.0.1 idealsearch.info
127.0.0.1 interrucial.com
127.0.0.1 iwstudio.net
127.0.0.1 justspicysex.com
127.0.0.1 kingdating.net
127.0.0.1 lacemuscle.com
127.0.0.1 leaderdating.net
127.0.0.1 leamx.com
127.0.0.1 lesby.org
127.0.0.1 lickingasians.com
127.0.0.1 livexxxmature.com
127.0.0.1 loverchicks.com
127.0.0.1 madrus.org
127.0.0.1 maindating.net
127.0.0.1 mamando.org
127.0.0.1 matgals.com
127.0.0.1 mature-clits.com
127.0.0.1 mature-whores.net
127.0.0.1 more-search.net
127.0.0.1 more-search.org
127.0.0.1 naturalorna.com
127.0.0.1 oggetti-nella-fica.com
127.0.0.1 olderpornobabes.com
127.0.0.1 only-hardcore-sex.net
127.0.0.1 pantyhosecollection.net
127.0.0.1 pantyhosespace.com
127.0.0.1 penectomy.org
127.0.0.1 piedi-feticismo.com
127.0.0.1 piedi-fetish-sesso.com
127.0.0.1 pornolink.org
127.0.0.1 porno-holic.com
127.0.0.1 pornostar-foto-video.com
127.0.0.1 posingebony.com
127.0.0.1 puttane-grandi-tette.com
127.0.0.1 ramalan.org
127.0.0.1 rape-fantasy-pics.com
127.0.0.1 realcrazybleeps.com
127.0.0.1 sborrate-in-faccia.com
127.0.0.1 search-biz.info
127.0.0.1 search-biz.org
127.0.0.1 search-and-more.net
127.0.0.1 search-buy.biz
127.0.0.1 search-buy.info
127.0.0.1 search-buy.net
127.0.0.1 search-buy.org
127.0.0.1 search-club.net
127.0.0.1 search-free.net
127.0.0.1 search-free.org
127.0.0.1 search-galaxy.biz
127.0.0.1 sesso-orale-gratis.net
127.0.0.1 sesso-racconti.com
127.0.0.1 sexfantasy-show.com
127.0.0.1 sex-here.biz
127.0.0.1 sister-tabl.com
127.0.0.1 sorella.org
127.0.0.1 tammad.org
127.0.0.1 teensgangbang.net
127.0.0.1 www.teensgangbang.net
127.0.0.1 teen-giovani-ragazze.com
127.0.0.1 teenshot.net
127.0.0.1 testiculos.net
127.0.0.1 totaldating.net
127.0.0.1 travelorgy.com
127.0.0.1 travestito.org
127.0.0.1 vevrier.org
127.0.0.1 video-porno-lesbiche.com
127.0.0.1 voyeur-guardoni.com
127.0.0.1 wetteenager.com
127.0.0.1 wholevideos.com
127.0.0.1 wildxxxpussy.com
127.0.0.1 xoxota.org
127.0.0.1 xtratits-in-action.com
127.0.0.1 zoo-sex-pics.com
127.0.0.1 chebacj.com
127.0.0.1 enetcap.com
127.0.0.1 enetsite.com
127.0.0.1 www.forlink.biz
127.0.0.1 www.netincap.com
127.0.0.1 onlinefactory.biz
127.0.0.1 colinsdialer.com
127.0.0.1 www.colinsdialer.com
127.0.0.1 freematureporn.org
127.0.0.1 www.mature-shop.com
127.0.0.1 www.topmatureporn.org
127.0.0.1 webse-arch.com
127.0.0.1 img.webse-arch.com
127.0.0.1 xml.webse-arch.com
127.0.0.1 www.fetish-pix.com
127.0.0.1 www.mybans.com
127.0.0.1 www.adultgambling.org
127.0.0.1 allspyremover.com
127.0.0.1 allspyremover.net
127.0.0.1 bleepesonline.net
127.0.0.1 www.bleepesonline.net
127.0.0.1 www.cleanbrowser.org
127.0.0.1 datingwcats.com
127.0.0.1 ms.euniverseads.com
127.0.0.1 dartimg.intermix.com
127.0.0.1 de.imixserver.com
127.0.0.1 debnb.imixserver.com
127.0.0.1 debnt.imixserver.com
127.0.0.1 delb.imixserver.com
127.0.0.1 demr.imixserver.com
127.0.0.1 demr2.imixserver.com
127.0.0.1 depl.imixserver.com
127.0.0.1 depopen.imixserver.com
127.0.0.1 depopex.imixserver.com
127.0.0.1 desky.imixserver.com
127.0.0.1 desky2.imixserver.com
127.0.0.1 www.imixserver.com
127.0.0.1 de.mspaceads.com
127.0.0.1 debr.mspaceads.com
127.0.0.1 defb.mspaceads.com
127.0.0.1 defp.mspaceads.com
127.0.0.1 dehp.mspaceads.com
127.0.0.1 delb.mspaceads.com
127.0.0.1 demr.mspaceads.com
127.0.0.1 derdb.mspaceads.com
127.0.0.1 desk.mspaceads.com
127.0.0.1 ads.partner2profit.com
127.0.0.1 imp.partner2profit.com
127.0.0.1 www.partner2profit.com
127.0.0.1 www.bloghotspot.com
127.0.0.1 direct.combocash.com
127.0.0.1 www.eventuresnv.com
127.0.0.1 search.findwhatevernow.com
127.0.0.1 direct.nastychannels.com
127.0.0.1 exits.nastychannels.com
127.0.0.1 www.nastychannels.com
127.0.0.1 devcnt.rapidblaster.com
127.0.0.1 gay.rapidblaster.com
127.0.0.1 banner.simpletraffic.com
127.0.0.1 banners.simpletraffic.com
127.0.0.1 direct.simpletraffic.com
127.0.0.1 media.simpletraffic.com
127.0.0.1 track.simpletraffic.com
127.0.0.1 affiliate.smsdollar.com
127.0.0.1 direct.smsdollar.com
127.0.0.1 ig.vx55.com
127.0.0.1 www.vx55.com
127.0.0.1 www.vx56.com
127.0.0.1 my.dropspam.com
127.0.0.1 sidesearch.dropspam.com
127.0.0.1 service2.bargain-buddy.net
127.0.0.1 service3.bargain-buddy.net
127.0.0.1 service4.bargain-buddy.net
127.0.0.1 service5.bargain-buddy.net
127.0.0.1 service6.bargain-buddy.net
127.0.0.1 service7.bargain-buddy.net
127.0.0.1 www.benews.net
127.0.0.1 images.brainfox.com
127.0.0.1 search.brainfox.com
127.0.0.1 www.brainfox.com
127.0.0.1 download.bullseye-network.com
127.0.0.1 service.bullseye-network.com
127.0.0.1 www.bullseye-network.net
127.0.0.1 results.cafefind.net
127.0.0.1 www.dealbandit.com
127.0.0.1 www.exactadvertising.com
127.0.0.1 www.exact-advertising.com
127.0.0.1 search.exactmatches.com
127.0.0.1 exactsearch.net
127.0.0.1 ww3.exactsearch.net
127.0.0.1 www.exitcity.com
127.0.0.1 www.fungamedownloads.com
127.0.0.1 www.funwebapps.com
127.0.0.1 www.instantnavigation.com
127.0.0.1 leadgenetwork.com
127.0.0.1 www.leadgenetwork.com
127.0.0.1 www.navisearch.net
127.0.0.1 track.searchignite.com
127.0.0.1 www.searchignite.com
127.0.0.1 www.searchfish.com
127.0.0.1 domain.siteparker.com
127.0.0.1 search.siteparker.com
127.0.0.1 ads.textplussolutions.com
127.0.0.1 www.yubilee.com
127.0.0.1 e0.extreme-dm.com
127.0.0.1 e1.extreme-dm.com
127.0.0.1 reports.extreme-dm.com
127.0.0.1 t.extreme-dm.com
127.0.0.1 t0.extreme-dm.com
127.0.0.1 t1.extreme-dm.com
127.0.0.1 u.extreme-dm.com
127.0.0.1 u0.extreme-dm.com
127.0.0.1 v.extreme-dm.com
127.0.0.1 v0.extreme-dm.com
127.0.0.1 v1.extreme-dm.com
127.0.0.1 w.extreme-dm.com
127.0.0.1 w0.extreme-dm.com
127.0.0.1 w1.extreme-dm.com
127.0.0.1 x3.extreme-dm.com
127.0.0.1 y0.extreme-dm.com
127.0.0.1 y1.extreme-dm.com
127.0.0.1 z.extreme-dm.com
127.0.0.1 z0.extreme-dm.com
127.0.0.1 z1.extreme-dm.com
127.0.0.1 www.adultfriendsearch.com
127.0.0.1 logo.affiliatebot.com
127.0.0.1 link.affiliatebot.com
127.0.0.1 affiliate.friendsearch.com
127.0.0.1 dating.friendsearch.com
127.0.0.1 partner.friendsearch.com
127.0.0.1 www.friendsearch.com
127.0.0.1 ads.free-banners.com
127.0.0.1 affiliate.free-banners.com
127.0.0.1 home.free-banners.com
127.0.0.1 www.free-banners.com
127.0.0.1 ads.freevisits.com
127.0.0.1 search.hotplugins.com
127.0.0.1 www.hotplugins.com
127.0.0.1 a.as-eu.falkag.net
127.0.0.1 a.as-eu1.falkag.net
127.0.0.1 admin.as-eu.falkag.net
127.0.0.1 bw.as-eu.falkag.net
127.0.0.1 c.as-eu.falkag.net
127.0.0.1 data.as-eu.falkag.net
127.0.0.1 f.as-eu.falkag.net
127.0.0.1 origin.as-eu.falkag.net
127.0.0.1 red01.as-eu.falkag.net
127.0.0.1 sel.as-eu.falkag.net
127.0.0.1 bw.as-test.falkag.net
127.0.0.1 red.as-test.falkag.net
127.0.0.1 sel.as-test.falkag.net
127.0.0.1 b.as-us.falkag.net
127.0.0.1 data.as-us.falkag.net
127.0.0.1 origin.as-us.falkag.net
127.0.0.1 red.as-us.falkag.net
127.0.0.1 red01.as-us.falkag.net
127.0.0.1 s.as-us.falkag.net
127.0.0.1 sel.as-us.falkag.net
127.0.0.1 www.falkag.de
127.0.0.1 ad1.adsolution.de
127.0.0.1 admin.ads.t-online.de
127.0.0.1 bw.ads.t-online.de
127.0.0.1 data.ads.t-online.de
127.0.0.1 red.ads.t-online.de
127.0.0.1 s.ads.t-online.de
127.0.0.1 count.passul.t-online.de
127.0.0.1 813aw0nr01jsxfj374ca.com
127.0.0.1 www.adsforsite.com
127.0.0.1 www.consoleads.com
127.0.0.1 www.fandl.net
127.0.0.1 www.finditanyway.com
127.0.0.1 www.freeserials.net
127.0.0.1 www.googlecaches.com
127.0.0.1 www.liporn.com
127.0.0.1 www.mswindowssearch.com
127.0.0.1 clicks.trustclicks.com
127.0.0.1 dating.trustclicks.com
127.0.0.1 www.trustclicks.com
127.0.0.1 trustincash.com
127.0.0.1 www.trustincash.com
127.0.0.1 assistant.trustinsearch.com
127.0.0.1 toolbar.trustinsearch.com
127.0.0.1 pages2start.com
127.0.0.1 searchsuggestions.com
127.0.0.1 www.404-errorpage.com
127.0.0.1 sr.adwave.com
127.0.0.1 www.bestjobsguide.com
127.0.0.1 www.bestphonesguide.com
127.0.0.1 www.funscreensaverscentral.com
127.0.0.1 screensavers.funutilities.com
127.0.0.1 ws.funutilities.com
127.0.0.1 www.globalwebpass.com
127.0.0.1 www.ibis.com
127.0.0.1 www.ibis.cz
127.0.0.1 www.myscreensaverlink.com
127.0.0.1 www.spyterm.com
127.0.0.1 www.spywarelinkcentral.com
127.0.0.1 distribution.trafficsyndicate.com
127.0.0.1 search.trafficsyndicate.com
127.0.0.1 xml.trafficsyndicate.com
127.0.0.1 xml2.trafficsyndicate.com
127.0.0.1 www.trafficsyndicate.com
127.0.0.1 ads.crawler.com
127.0.0.1 demo.crawler.com
127.0.0.1 dnl.crawler.com
127.0.0.1 i30.crawler.com
127.0.0.1 is1.crawler.com
127.0.0.1 ranking.crawler.com
127.0.0.1 rs.crawler.com
127.0.0.1 spell.crawler.com
127.0.0.1 www.seekerbar.com
127.0.0.1 senkypl.com
127.0.0.1 games.websearch.com
127.0.0.1 is1.websearch.com
127.0.0.1 is2.websearch.com
127.0.0.1 ranking.websearch.com
127.0.0.1 rs.websearch.com
127.0.0.1 skins.websearch.com
127.0.0.1 sr.websearch.com
127.0.0.1 ws.websearch.com
127.0.0.1 www.websearch.com.au
127.0.0.1 websearch.co.uk
127.0.0.1 www.websearch.net
127.0.0.1 dnl.websecurityguard.com
127.0.0.1 www.win-tools.com
127.0.0.1 quasar.sitegauge.com
127.0.0.1 a.flashpoint.bm
127.0.0.1 c.flashpoint.bm
127.0.0.1 www.flashpoint.bm
127.0.0.1 www.flashpointmediagroup.com
127.0.0.1 www.flashpointmodelsearch.com
127.0.0.1 coreg.flashtrack.net
127.0.0.1 www.downaload.com
127.0.0.1 buddies.funbuddyicons.com
127.0.0.1 www.historyswatter.com
127.0.0.1 c4.iwon.com
127.0.0.1 docs1.iwon.com
127.0.0.1 efc.iwon.com
127.0.0.1 image.i1img.com
127.0.0.1 i1img.com
127.0.0.1 my.iwon.com
127.0.0.1 plus.iwon.com
127.0.0.1 prizemachine.games.iwon.com
127.0.0.1 search.iwon.com
127.0.0.1 searchassistant.iwon.com
127.0.0.1 bar.mytotalsearch.com
127.0.0.1 www.mytotalsearch.com
127.0.0.1 mn.myquicksearch.com
127.0.0.1 mr.myquicksearch.com
127.0.0.1 img.maxserving.com
127.0.0.1 sc4.maxserving.com
127.0.0.1 cfg.myglobalsearch.com
127.0.0.1 edits.mywebsearch.com
127.0.0.1 weatherbugbrowserbar.mywebsearch.com
127.0.0.1 img.focalex.com
127.0.0.1 load.focalex.com
127.0.0.1 p.focalex.com
127.0.0.1 pluto.focalex.com
127.0.0.1 solutions.focalex.com
127.0.0.1 tafbar.focalex.com
127.0.0.1 tafmaster-p.focalex.com
127.0.0.1 tafmaster-s.focalex.com
127.0.0.1 tafmaster-t.focalex.com
127.0.0.1 tafmaster-v.focalex.com
127.0.0.1 tafmaster-v2.focalex.com
127.0.0.1 tafmaster-v3.focalex.com
127.0.0.1 tafmaster-v4.focalex.com
127.0.0.1 tafmaster-v5.focalex.com
127.0.0.1 tafmaster-v6.focalex.com
127.0.0.1 tafmaster-v7.focalex.com
127.0.0.1 tafmaster-v8.focalex.com
127.0.0.1 tafmaster-v9.focalex.com
127.0.0.1 tafmaster-v10.focalex.com
127.0.0.1 tafmaster-v11.focalex.com
127.0.0.1 tafmaster-v12.focalex.com
127.0.0.1 tafmaster-v14.focalex.com
127.0.0.1 tafmaster-v15.focalex.com
127.0.0.1 tafmaster-v16.focalex.com
127.0.0.1 thankyou.focalex.com
127.0.0.1 thankyou-v2.focalex.com
127.0.0.1 thankyou-v3.focalex.com
127.0.0.1 thankyou-v4.focalex.com
127.0.0.1 thankyou-v5.focalex.com
127.0.0.1 thankyou-v6.focalex.com
127.0.0.1 webgames.focalex.com
127.0.0.1 webgames-a.focalex.com
127.0.0.1 webgames-v1.focalex.com
127.0.0.1 s.tafbar.com
127.0.0.1 tafmaster.com
127.0.0.1 public.tafmaster.com
127.0.0.1 www.tafmaster.com
127.0.0.1 downloadware.net
127.0.0.1 fordaleltd.com
127.0.0.1 config.fordaleltd.com
127.0.0.1 www.fordaleltd.com
127.0.0.1 www.ampira.com
127.0.0.1 ads.v3.com
127.0.0.1 www.fmnmedia.com
127.0.0.1 www.freemyname.com
127.0.0.1 www.free-games-online.com
127.0.0.1 rdt.free-lyrics-online.com
127.0.0.1 register.free-lyrics-online.com
127.0.0.1 ads.freeze.com
127.0.0.1 adman.freeze.com
127.0.0.1 download.freeze.com
127.0.0.1 download2.freeze.com
127.0.0.1 img.freeze.com
127.0.0.1 lan.freeze.com
127.0.0.1 off.freeze.com
127.0.0.1 register.freeze.com
127.0.0.1 regman.freeze.com
127.0.0.1 search.freeze.com
127.0.0.1 www.freezemedia.com
127.0.0.1 rdt2.ringtone.com
127.0.0.1 www.ringtone.com
127.0.0.1 www.risoftsystems.com
127.0.0.1 off.screensaver.com
127.0.0.1 rdt.screensaver.com
127.0.0.1 off.wallpapers.com
127.0.0.1 www.wallpapers.com
127.0.0.1 www.wallpapervault.com
127.0.0.1 newads1.com
127.0.0.1 newads2.com
127.0.0.1 www.newads2.com
127.0.0.1 ads.adpowerzone.com
127.0.0.1 easy.adpowerzone.com
127.0.0.1 ss.adpowerzone.com
127.0.0.1 servedby.headlinesandnews.com
127.0.0.1 adsby.uzoogle.com
127.0.0.1 games.uzoogle.com
127.0.0.1 ads.z-quest.com
127.0.0.1 www.zquest.com
127.0.0.1 cards.cardfountain.com
127.0.0.1 cards.free.cardfountain.com
127.0.0.1 www.cardfountain.com
127.0.0.1 www.enmarketing.com
127.0.0.1 www.funnytaf.com
127.0.0.1 www.celebrity-wallpaper.com
127.0.0.1 www.funskins.com
127.0.0.1 www.my-free-ringtones.com
127.0.0.1 www.ordercd.com
127.0.0.1 www.wallpaperworld.com
127.0.0.1 www.wrestling1.com
127.0.0.1 bannermaster.geektech.com
127.0.0.1 www.boxfrog.com
127.0.0.1 affiliate.getspace.com
127.0.0.1 enter.hypercount.com
127.0.0.1 adclick.hit.gemius.pl
127.0.0.1 adlt.hit.gemius.pl
127.0.0.1 adnet.hit.gemius.pl
127.0.0.1 arbo.hit.gemius.pl
127.0.0.1 allegro.hit.gemius.pl
127.0.0.1 gadu.hit.gemius.pl
127.0.0.1 idm.hit.gemius.pl
127.0.0.1 kon.hit.gemius.pl
127.0.0.1 onet.hit.gemius.pl
127.0.0.1 pro.hit.gemius.pl
127.0.0.1 st1.hit.gemius.pl
127.0.0.1 wp.hit.gemius.pl
127.0.0.1 s1.hit.stat.pl
127.0.0.1 s2.hit.stat.pl
127.0.0.1 s3.hit.stat.pl
127.0.0.1 s4.hit.stat.pl
127.0.0.1 sisco.hit.stat.pl
127.0.0.1 spir.hit.gemius.pl
127.0.0.1 banner1.axelsfun.com
127.0.0.1 banner3.axelsfun.com
127.0.0.1 bannerus2.axelsfun.com
127.0.0.1 bannerus3.axelsfun.com
127.0.0.1 crazybleep.axelsfun.com
127.0.0.1 etology.axelsfun.com
127.0.0.1 etology1.axelsfun.com
127.0.0.1 p138920c.axelsfun.com
127.0.0.1 p165535.axelsfun.com
127.0.0.1 sexyfunn.axelsfun.com
127.0.0.1 vogue007.axelsfun.com
127.0.0.1 www.addictivegamez.com
127.0.0.1 www.dailyflashgames.com
127.0.0.1 www.123stat.com
127.0.0.1 server3.web-stat.com
127.0.0.1 server4.web-stat.com
127.0.0.1 www.web-stat.com
127.0.0.1 count.webtrackingservices.com
127.0.0.1 seomatrix.webtrackingservices.com
127.0.0.1 pagead.googlesyndication.com
127.0.0.1 adservices.google.com
127.0.0.1 imageads1.googleadservices.com
127.0.0.1 imageads2.googleadservices.com
127.0.0.1 imageads3.googleadservices.com
127.0.0.1 imageads4.googleadservices.com
127.0.0.1 imageads5.googleadservices.com
127.0.0.1 imageads6.googleadservices.com
127.0.0.1 imageads7.googleadservices.com
127.0.0.1 imageads8.googleadservices.com
127.0.0.1 imageads9.googleadservices.com
127.0.0.1 www.googleadservices.com
127.0.0.1 www.appliedsemantics.com
127.0.0.1 greenhorse.com
127.0.0.1 tickerbar.info
127.0.0.1 graphics.tickerbar.info
127.0.0.1 2youx.net
127.0.0.1 www.alldialer.com
127.0.0.1 www.highdialer.com
127.0.0.1 ultradialer.com
127.0.0.1 ads.geoads.net
127.0.0.1 gs.geoads.net
127.0.0.1 hb.geoads.net
127.0.0.1 ib.geoads.net
127.0.0.1 images.geoads.net
127.0.0.1 overture.geoads.net
127.0.0.1 delivery.publicidad.net
127.0.0.1 hitexchange.net
127.0.0.1 gif.hitexchange.net
127.0.0.1 img.hitexchange.net
127.0.0.1 www.hitexchange.net
127.0.0.1 hitx.net
127.0.0.1 gif.hitx.net
127.0.0.1 www.hitx.net
127.0.0.1 dailydealjunky.com
127.0.0.1 www.dailynewsjunky.com
127.0.0.1 www.all-hotels-motels.com
127.0.0.1 www.search-world.biz
127.0.0.1 smart-search.biz
127.0.0.1 www.smart-search.biz
127.0.0.1 stats.homestead.com
127.0.0.1 track.homestead.com
127.0.0.1 track2.homestead.com
127.0.0.1 www.datez.com
127.0.0.1 www.dateznews.com
127.0.0.1 emoticons4us.com
127.0.0.1 www.emoticons4us.com
127.0.0.1 www.estationary.com
127.0.0.1 www.estationery.com
127.0.0.1 www.ezaza.com
127.0.0.1 e-zaza.com
127.0.0.1 www.e-zaza.com
127.0.0.1 fastutilities.com
127.0.0.1 www.fastutilities.com
127.0.0.1 www.fofom.com
127.0.0.1 www.hotbar-inc.com
127.0.0.1 cs.hotbar.com
127.0.0.1 dynamic.hotbar.com
127.0.0.1 dynmenu.hotbar.com
127.0.0.1 hbmd.hotbar.com
127.0.0.1 license.hotbar.com
127.0.0.1 partners.hotbar.com
127.0.0.1 promos.hotbar.com
127.0.0.1 puv.hotbar.com
127.0.0.1 reports.hotbar.com
127.0.0.1 searchdisp.hotbar.com
127.0.0.1 skins.hotbar.com
127.0.0.1 tooltips.hotbar.com
127.0.0.1 updates.hotbar.com
127.0.0.1 vip-farm1.hotbar.com
127.0.0.1 vip-farm2.hotbar.com
127.0.0.1 vip-farm1v.hotbar.com
127.0.0.1 vip-farm2v.hotbar.com
127.0.0.1 vip-farm5v.hotbar.com
127.0.0.1 vip-farm31v.hotbar.com
127.0.0.1 www.hotbar2.com
127.0.0.1 www.hotbar.net
127.0.0.1 hotbarmemberdirectory.com
127.0.0.1 net-offers.net
127.0.0.1 www.pcpolish.com
127.0.0.1 priceshield.com
127.0.0.1 www.priceshield.com
127.0.0.1 cfg.shopperreports.com
127.0.0.1 code.shopperreports.com
127.0.0.1 dynamic.shopperreports.com
127.0.0.1 updates.shopperreports.com
127.0.0.1 upgrades.shopperreports.com
127.0.0.1 installs.smartshopper.com
127.0.0.1 www.smartshopper.com
127.0.0.1 www.smartshoppernetworks.com
127.0.0.1 software4thenet.com
127.0.0.1 www.software4thenet.com
127.0.0.1 spamblockerutility.com
127.0.0.1 www.spamfree.com
127.0.0.1 resultsmaster.com
127.0.0.1 wowpapers.com
127.0.0.1 ad.hotlog.ru
127.0.0.1 click.hotlog.ru
127.0.0.1 globalstats.hotlog.ru
127.0.0.1 hit1.hotlog.ru
127.0.0.1 hit2.hotlog.ru
127.0.0.1 hit3.hotlog.ru
127.0.0.1 hit5.hotlog.ru
127.0.0.1 hit6.hotlog.ru
127.0.0.1 hit7.hotlog.ru
127.0.0.1 hit9.hotlog.ru
127.0.0.1 hit10.hotlog.ru
127.0.0.1 hit11.hotlog.ru
127.0.0.1 hit12.hotlog.ru
127.0.0.1 hit14.hotlog.ru
127.0.0.1 hit15.hotlog.ru
127.0.0.1 hit16.hotlog.ru
127.0.0.1 hit20.hotlog.ru
127.0.0.1 img.hotlog.ru
127.0.0.1 www1.hotlog.ru
127.0.0.1 www3.hotlog.ru
127.0.0.1 www4.hotlog.ru
127.0.0.1 www5.hotlog.ru
127.0.0.1 www7.hotlog.ru
127.0.0.1 www8.hotlog.ru
127.0.0.1 www9.hotlog.ru
127.0.0.1 www10.hotlog.ru
127.0.0.1 www11.hotlog.ru
127.0.0.1 www12.hotlog.ru
127.0.0.1 www14.hotlog.ru
127.0.0.1 www.hotlog.ru
127.0.0.1 www.4netrevenue.com
127.0.0.1 www.huladirect.com
127.0.0.1 www.looking-younger.com
127.0.0.1 www.rebateretriever.com
127.0.0.1 www.worldmercado.com
127.0.0.1 www.youcouldwinthis.com
127.0.0.1 hyperbanner.net
127.0.0.1 ads01.hyperbanner.net
127.0.0.1 ads03.hyperbanner.net
127.0.0.1 ads05.hyperbanner.net
127.0.0.1 ads06.hyperbanner.net
127.0.0.1 ads07.hyperbanner.net
127.0.0.1 ads08.hyperbanner.net
127.0.0.1 ads09.hyperbanner.net
127.0.0.1 ads11.hyperbanner.net
127.0.0.1 ads12.hyperbanner.net
127.0.0.1 ads13.hyperbanner.net
127.0.0.1 ads14.hyperbanner.net
127.0.0.1 ads15.hyperbanner.net
127.0.0.1 ads16.hyperbanner.net
127.0.0.1 ads17.hyperbanner.net
127.0.0.1 ads18.hyperbanner.net
127.0.0.1 ads19.hyperbanner.net
127.0.0.1 ads20.hyperbanner.net
127.0.0.1 siterank.hypermart.net
127.0.0.1 spms.hyperbanner.net
127.0.0.1 ads05.bpath.com
127.0.0.1 ads06.bpath.com
127.0.0.1 ads08.bpath.com
127.0.0.1 ads09.bpath.com
127.0.0.1 ads10.bpath.com
127.0.0.1 ads12.bpath.com
127.0.0.1 ads13.bpath.com
127.0.0.1 ads14.bpath.com
127.0.0.1 ads16.bpath.com
127.0.0.1 ads17.bpath.com
127.0.0.1 ads18.bpath.com
127.0.0.1 ads19.bpath.com
127.0.0.1 ads21.bpath.com
127.0.0.1 ads22.bpath.com
127.0.0.1 ads23.bpath.com
127.0.0.1 ads24.bpath.com
127.0.0.1 ads25.bpath.com
127.0.0.1 ads26.bpath.com
127.0.0.1 ads27.bpath.com
127.0.0.1 ads28.bpath.com
127.0.0.1 ads49.bpath.com
127.0.0.1 australia.bpath.com
127.0.0.1 holland.bpath.com
127.0.0.1 spms.bpath.com
127.0.0.1 usa.bpath.com
127.0.0.1 www.bpath.com
127.0.0.1 billingsupportcenter.com
127.0.0.1 www.billingsupportcenter.com
127.0.0.1 getclicksnow.com
127.0.0.1 www.getclicksnow.com
127.0.0.1 pur9.killevidence.com
127.0.0.1 www3.killevidence.com
127.0.0.1 www9.killevidence.com
127.0.0.1 www.killevidence.com
127.0.0.1 www3.killinternetpopups.com
127.0.0.1 www.killinternetpopups.com
127.0.0.1 mainstreamdollars.com
127.0.0.1 www2.mainstreamdollars.com
127.0.0.1 www9.megapornbucks.com
127.0.0.1 www.megapornbucks.com
127.0.0.1 032439.com
127.0.0.1 1188224372.com
127.0.0.1 124365.com
127.0.0.1 202124388.com
127.0.0.1 82430.com
127.0.0.1 82435.com
127.0.0.1 872435.com
127.0.0.1 www.adserv.com
127.0.0.1 csxiwwwcom.net
127.0.0.1 e8675309.com
127.0.0.1 ekads.com
127.0.0.1 equalitylinks.net
127.0.0.1 www.errordns.com
127.0.0.1 www.findstuffsearch.com
127.0.0.1 in.hushware.com
127.0.0.1 www.hushware.com
127.0.0.1 idbl.idblg.com
127.0.0.1 affiliate.idownload.com
127.0.0.1 beta.idownload.com
127.0.0.1 cftrack.idownload.com
127.0.0.1 md.idownload.com
127.0.0.1 secure.idownload.com
127.0.0.1 in.interboost.com
127.0.0.1 www.interboost.com
127.0.0.1 auto.origin.isearch.com
127.0.0.1 nutpond.com
127.0.0.1 www.popblocker.com
127.0.0.1 in.securefavorites.com
127.0.0.1 www.securefavorites.com
127.0.0.1 in.spywareavenger.com
127.0.0.1 www.spywareavenger.com
127.0.0.1 tilde75.com
127.0.0.1 in.virushunter.com
127.0.0.1 in.wmkiller.com
127.0.0.1 www.wmkiller.com
127.0.0.1 aj.600z.com
127.0.0.1 text-link-ads.ientry.com
127.0.0.1 action.ientry.net
127.0.0.1 aj.ientry.net
127.0.0.1 ca.ientry.net
127.0.0.1 img1.ientry.net
127.0.0.1 tracking.ientry.net
127.0.0.1 ieplugin.com
127.0.0.1 badurl.ieplugin.com
127.0.0.1 sysupdate.ieplugin.com
127.0.0.1 welcome.ieplugin.com
127.0.0.1 wwa.ieplugin.com
127.0.0.1 wwd.ieplugin.com
127.0.0.1 ww2.ieplugin.com
127.0.0.1 ww3.ieplugin.com
127.0.0.1 general-guide.com
127.0.0.1 www.keywordsinc.com
127.0.0.1 keywordstech.com
127.0.0.1 activity.serving-sys.com
127.0.0.1 datacapture.serving-sys.com
127.0.0.1 www.3dstats.com
127.0.0.1 top.addfreestats.com
127.0.0.1 www.addfreestats.com
127.0.0.1 www2.addfreestats.com
127.0.0.1 www3.addfreestats.com
127.0.0.1 www4.addfreestats.com
127.0.0.1 www5.addfreestats.com
127.0.0.1 www6.addfreestats.com
127.0.0.1 www7.addfreestats.com
127.0.0.1 www8.addfreestats.com
127.0.0.1 banner.beerchurchpoker.com
127.0.0.1 banner.casinodelrio.com
127.0.0.1 banner.europacasino.com
127.0.0.1 measurement.redsheriff.com
127.0.0.1 www.redsheriff.it
127.0.0.1 www.redsheriff.com
127.0.0.1 www.redsheriff.com.au
127.0.0.1 www.RedSheRRif.com
127.0.0.1 devfw.imrworldwide.com
127.0.0.1 lycos-eu.imrworldwide.com
127.0.0.1 ninemsn.imrworldwide.com
127.0.0.1 secure-au.imrworldwide.com
127.0.0.1 secure-dk.imrworldwide.com
127.0.0.1 secure-jp.imrworldwide.com
127.0.0.1 secure-nz.imrworldwide.com
127.0.0.1 secure-uk.imrworldwide.com
127.0.0.1 secure-us.imrworldwide.com
127.0.0.1 secure-za.imrworldwide.com
127.0.0.1 server-au.imrworldwide.com
127.0.0.1 server-br.imrworldwide.com
127.0.0.1 server-by.imrworldwide.com
127.0.0.1 server-dk.imrworldwide.com
127.0.0.1 server-ee.imrworldwide.com
127.0.0.1 server-fi.imrworldwide.com
127.0.0.1 server-it.imrworldwide.com
127.0.0.1 server-jp.imrworldwide.com
127.0.0.1 server-lv.imrworldwide.com
127.0.0.1 server-lt.imrworldwide.com
127.0.0.1 server-no.imrworldwide.com
127.0.0.1 server-nz.imrworldwide.com
127.0.0.1 server-oslo.imrworldwide.com
127.0.0.1 server-pl.imrworldwide.com
127.0.0.1 server-se.imrworldwide.com
127.0.0.1 server-sg.imrworldwide.com
127.0.0.1 server-stockh.imrworldwide.com
127.0.0.1 server-uk.imrworldwide.com
127.0.0.1 server-us.imrworldwide.com
127.0.0.1 survey1-au.imrworldwide.com
127.0.0.1 telstra.imrworldwide.com
127.0.0.1 www.blogfaces.com
127.0.0.1 www.blogpopunder.com
127.0.0.1 www.blogvisitors.com
127.0.0.1 www.link2blogs.com
127.0.0.1 www.theblogcompany.com
127.0.0.1 park.ireit.com
127.0.0.1 park2.ireit.com
127.0.0.1 webdocs.ireit.com
127.0.0.1 lb5.netster.com
127.0.0.1 www.freehomepages.com
127.0.0.1 www.gameroom.com
127.0.0.1 inet-traffic.com
127.0.0.1 ads.inet-traffic.com
127.0.0.1 banner1.inet-traffic.com
127.0.0.1 banner3.inet-traffic.com
127.0.0.1 phplive.inet-traffic.com
127.0.0.1 www.inet-traffic.com
127.0.0.1 www.inetraffic.com
127.0.0.1 www.inettraffic.com
127.0.0.1 news.searchit.com
127.0.0.1 www.tadpolls.com
127.0.0.1 browseraid.com
127.0.0.1 pops.browseraid.com
127.0.0.1 updates.browseraid.com
127.0.0.1 browserpal.com
127.0.0.1 www.browserpal.com
127.0.0.1 featured-results.com
127.0.0.1 www.quicklaunch.com
127.0.0.1 searchandclick.com
127.0.0.1 search.searchandclick.com
127.0.0.1 startium.com
127.0.0.1 search.startium.com
127.0.0.1 www.startium.com
127.0.0.1 ad.insightexpress.com
127.0.0.1 invite.insightexpress.com
127.0.0.1 ad.insightexpressai.com
127.0.0.1 ai004.insightexpressai.com
127.0.0.1 ai006.insightexpressai.com
127.0.0.1 ai007.insightexpressai.com
127.0.0.1 ai008.insightexpressai.com
127.0.0.1 ai010.insightexpressai.com
127.0.0.1 ai011.insightexpressai.com
127.0.0.1 ai017.insightexpressai.com
127.0.0.1 ai020.insightexpressai.com
127.0.0.1 ai022.insightexpressai.com
127.0.0.1 ai030.insightexpressai.com
127.0.0.1 ai031.insightexpressai.com
127.0.0.1 ai036.insightexpressai.com
127.0.0.1 ai048.insightexpressai.com
127.0.0.1 ai053.insightexpressai.com
127.0.0.1 ai056.insightexpressai.com
127.0.0.1 ai057.insightexpressai.com
127.0.0.1 ai059.insightexpressai.com
127.0.0.1 ai066.insightexpressai.com
127.0.0.1 ai067.insightexpressai.com
127.0.0.1 ai131.insightexpressai.com
127.0.0.1 ai089.insightexpress.com
127.0.0.1 ehg-idg.hitbox.com
127.0.0.1 ehg-idgentertainment.hitbox.com
127.0.0.1 tracker.idg.co.uk
127.0.0.1 qs.ivwbox.de
127.0.0.1 tecchan.ivwbox.de
127.0.0.1 ign.us.intellitxt.com
127.0.0.1 babes.ign.us.intellitxt.com
127.0.0.1 cars.ign.us.intellitxt.com
127.0.0.1 comics.ign.us.intellitxt.com
127.0.0.1 cube.ign.us.intellitxt.com
127.0.0.1 ds.ign.us.intellitxt.com
127.0.0.1 filmforcedvd.ign.us.intellitxt.com
127.0.0.1 gameboy.ign.us.intellitxt.com
127.0.0.1 gear.ign.us.intellitxt.com
127.0.0.1 golem.de.intellitxt.com
127.0.0.1 music.ign.us.intellitxt.com
127.0.0.1 pcwelt.de.intellitxt.com
127.0.0.1 psp.ign.us.intellitxt.com
127.0.0.1 ps2.ign.us.intellitxt.com
127.0.0.1 ps3.ign.us.intellitxt.com
127.0.0.1 psx.ign.us.intellitxt.com
127.0.0.1 revolution.ign.us.intellitxt.com
127.0.0.1 sports.ign.us.intellitxt.com
127.0.0.1 wireless.ign.us.intellitxt.com
127.0.0.1 xbox.ign.us.intellitxt.com
127.0.0.1 xbox360.ign.us.intellitxt.com
127.0.0.1 nbc.interpolls.com
127.0.0.1 ps2.interpolls.com
127.0.0.1 ps.interpolls.com
127.0.0.1 sp.interpolls.com
127.0.0.1 sw.interpolls.com
127.0.0.1 wb.interpolls.com
127.0.0.1 chewbacca.cybereps.com
127.0.0.1 ds.cybereps.com
127.0.0.1 images.cybereps.com
127.0.0.1 yoda.cybereps.com
127.0.0.1 admin.abcsearch.com
127.0.0.1 www.abcsearch.com
127.0.0.1 abosearch.com
127.0.0.1 www.abosearch.com
127.0.0.1 cashclicks.com
127.0.0.1 www.cashclicks.com
127.0.0.1 www.searchwho.com
127.0.0.1 www.weather7.com
127.0.0.1 ads.iboost.com
127.0.0.1 sonicsearch.subportal.com
127.0.0.1 searchsprint.subportal.com
127.0.0.1 www.adcycle.com
127.0.0.1 www.exchange-it.com
127.0.0.1 media.exchange-it.com
127.0.0.1 metacount.com
127.0.0.1 stats.metacount.com
127.0.0.1 www.metacount.com
127.0.0.1 popunder.com
127.0.0.1 media.popunder.com
127.0.0.1 www.popunder.com
127.0.0.1 ad.bannerbank.ru
127.0.0.1 ad1.bannerbank.ru
127.0.0.1 ad2.bannerbank.ru
127.0.0.1 ad3.bannerbank.ru
127.0.0.1 ad4.bannerbank.ru
127.0.0.1 ad5.bannerbank.ru
127.0.0.1 ad7.bannerbank.ru
127.0.0.1 ad8.bannerbank.ru
127.0.0.1 ad9.bannerbank.ru
127.0.0.1 ad10.bannerbank.ru
127.0.0.1 ad11.bannerbank.ru
127.0.0.1 ad12.bannerbank.ru
127.0.0.1 crd1.bannerbank.ru
127.0.0.1 ad.ir.ru
127.0.0.1 resellerstats.payoutpal.com
127.0.0.1 www.payoutpal.com
127.0.0.1 www.contextpro.com
127.0.0.1 chat.ezula.com
127.0.0.1 app.ezula.com
127.0.0.1 kabanga.com
127.0.0.1 www.kabanga.com
127.0.0.1 dc.kontera.com
127.0.0.1 kona2.kontera.com
127.0.0.1 kona3.kontera.com
127.0.0.1 kona4.kontera.com
127.0.0.1 kona5.kontera.com
127.0.0.1 te.kontera.com
127.0.0.1 te100.kontera.com
127.0.0.1 www.kontera.com
127.0.0.1 goi.com
127.0.0.1 nav.goi.com
127.0.0.1 nav.hitq.com
127.0.0.1 hitq.com
127.0.0.1 db2.net-filter.com
127.0.0.1 db3.net-filter.com
127.0.0.1 db4.net-filter.com
127.0.0.1 db5.net-filter.com
127.0.0.1 db6.net-filter.com
127.0.0.1 db7.net-filter.com
127.0.0.1 db0.sitestats.com
127.0.0.1 db1.sitestats.com
127.0.0.1 db2.sitestats.com
127.0.0.1 db3.sitestats.com
127.0.0.1 db4.sitestats.com
127.0.0.1 db5.sitestats.com
127.0.0.1 db6.sitestats.com
127.0.0.1 db7.sitestats.com
127.0.0.1 www.sitestats.com
127.0.0.1 smartpops.com
127.0.0.1 download.targetnetworks.net
127.0.0.1 www.linkshare.com
127.0.0.1 ad1.lbe.ru
127.0.0.1 list.ru
127.0.0.1 host1.list.ru
127.0.0.1 host3.list.ru
127.0.0.1 host4.list.ru
127.0.0.1 host7.list.ru
127.0.0.1 host11.list.ru
127.0.0.1 host12.list.ru
127.0.0.1 host13.list.ru
127.0.0.1 host14.list.ru
127.0.0.1 top.list.ru
127.0.0.1 top1.list.ru
127.0.0.1 www.little-help.com
127.0.0.1 www.little-download.net
127.0.0.1 games.de.ag
127.0.0.1 www.liveperson.com
127.0.0.1 www.livetechnology.com
127.0.0.1 www.404errorpage.com
127.0.0.1 bigclicks.com
127.0.0.1 search.bigclicks.com
127.0.0.1 www.bigclicks.com
127.0.0.1 link.exitdirect.com
127.0.0.1 www.exitdirect.com
127.0.0.1 dev.gohip.com
127.0.0.1 foundry.gohip.com
127.0.0.1 previewstage.gohip.com
127.0.0.1 search.gohip.com
127.0.0.1 stage.gohip.com
127.0.0.1 stats.gohip.com
127.0.0.1 wmservera.gohip.com
127.0.0.1 internetfuel.com
127.0.0.1 addev.internetfuel.com
127.0.0.1 adserv.internetfuel.com
127.0.0.1 adserv1.internetfuel.com
127.0.0.1 adserv3.internetfuel.com
127.0.0.1 adserv4.internetfuel.com
127.0.0.1 adserv6.internetfuel.com
127.0.0.1 banserv.internetfuel.com
127.0.0.1 banserver.internetfuel.com
127.0.0.1 download.internetfuel.com
127.0.0.1 turbo.internetfuel.com
127.0.0.1 staging.netbroadcaster.com
127.0.0.1 searchfuel.com
127.0.0.1 search.searchfuel.com
127.0.0.1 wwwdev.searchfuel.com
127.0.0.1 staging.weirdontheweb.net
127.0.0.1 search.winnings.com
127.0.0.1 download.accessmedia.tv
127.0.0.1 images.accessmedia.tv
127.0.0.1 members.accessmedia.tv
127.0.0.1 secure.accessmedia.tv
127.0.0.1 staging.accessmedia.tv
127.0.0.1 toolbar.accessmedia.tv
127.0.0.1 www.accessmedia.tv
127.0.0.1 notifier.altbill.com
127.0.0.1 www.broadcaster.com
127.0.0.1 download.movieland.com
127.0.0.1 members.movieland.com
127.0.0.1 track.movieland.com
127.0.0.1 images.moviepass.tv
127.0.0.1 members.moviepass.tv
127.0.0.1 staging.download.mediapipe.tv
127.0.0.1 popcorn.net
127.0.0.1 download.popcorn.net
127.0.0.1 members.popcorn.net
127.0.0.1 track.popcorn.net
127.0.0.1 www.sexbroadcaster.com
127.0.0.1 www.voddirect.com
127.0.0.1 ads.webmastersdirect.com
127.0.0.1 search.media-search.net
127.0.0.1 www.media-search.net
127.0.0.1 search.scourweb.net
127.0.0.1 search.search-assist.net
127.0.0.1 search.searchenhancement.com
127.0.0.1 search.search-exe.com
127.0.0.1 search.sidebarsearch.com
127.0.0.1 icache.getrelevant.com
127.0.0.1 ads.lycos.com
127.0.0.1 cm8.lycos.com
127.0.0.1 guestworld.tripod.lycos.com
127.0.0.1 sidesearch.lycos.com
127.0.0.1 ads.lycos-europe.com
127.0.0.1 fe.lea.lycos.de
127.0.0.1 ads.multimania.lycos.fr
127.0.0.1 ads.tripod.lycos.es
127.0.0.1 ads.tripod.lycos.co.uk
127.0.0.1 oreo.matchmaker.com
127.0.0.1 fe.lea.spray.se
127.0.0.1 nedstat.tripod.com
127.0.0.1 titan.guestworld.tripod.lycos.com
127.0.0.1 awrz.net
127.0.0.1 d.m3.net
127.0.0.1 d.ak.m3.net
127.0.0.1 i.m3.net
127.0.0.1 focusin.com
127.0.0.1 www-401.focusin.com
127.0.0.1 www.focusin.com
127.0.0.1 ad2.mamma.com
127.0.0.1 fad-401.mtl4.targetnet.com
127.0.0.1 fad-403.mtl4.targetnet.com
127.0.0.1 fad-404.mtl4.targetnet.com
127.0.0.1 fad-406.mtl4.targetnet.com
127.0.0.1 fad-408.mtl4.targetnet.com
127.0.0.1 fad-412.mtl4.targetnet.com
127.0.0.1 fad-413.mtl4.targetnet.com
127.0.0.1 fad-1104.nyc1.targetnet.com
127.0.0.1 fad-1105.nyc1.targetnet.com
127.0.0.1 fad-1106.nyc1.targetnet.com
127.0.0.1 fad-1107.nyc1.targetnet.com
127.0.0.1 fad-1110.nyc1.targetnet.com
127.0.0.1 fad-1111.nyc1.targetnet.com
127.0.0.1 fad-1112.nyc1.targetnet.com
127.0.0.1 fad-1113.nyc1.targetnet.com
127.0.0.1 fad-1114.nyc1.targetnet.com
127.0.0.1 fad-1115.nyc1.targetnet.com
127.0.0.1 ads.ah-ha.com
127.0.0.1 ads2.ah-ha.com
127.0.0.1 cp.ah-ha.com
127.0.0.1 secure.ah-ha.com
127.0.0.1 drivelinemedia.com
127.0.0.1 ads.drivelinemedia.com
127.0.0.1 ads2.drivelinemedia.com
127.0.0.1 images.drivelinemedia.com
127.0.0.1 www.drivelinemedia.com
127.0.0.1 www.enhance.com
127.0.0.1 goclick.com
127.0.0.1 earth.goclick.com
127.0.0.1 venus.goclick.com
127.0.0.1 ilinks.industrybrains.com
127.0.0.1 mdnhinc.com
127.0.0.1 c.mdnhinc.com
127.0.0.1 ads.trafficleader.com
127.0.0.1 images.ultsearch.com
127.0.0.1 www.ultsearch.com
127.0.0.1 www.adwarepro.com
127.0.0.1 click.cashengines.com
127.0.0.1 www.cashengines.com
127.0.0.1 defenza.com
127.0.0.1 www.defenza.com
127.0.0.1 drmengines.com
127.0.0.1 www.dvdsoftwarereview.info
127.0.0.1 fixwinmx.com
127.0.0.1 helpdesk.marketbill.com
127.0.0.1 www.marketbill.com
127.0.0.1 download2.marketengines.com
127.0.0.1 secure.marketengines.com
127.0.0.1 secure3.marketengines.com
127.0.0.1 www.mp3downloading.com
127.0.0.1 mp3guard.com
127.0.0.1 p2psupport.net
127.0.0.1 www.powercompress.com
127.0.0.1 richwebmedia.com
127.0.0.1 scripts.richwebmedia.com
127.0.0.1 www.richwebmedia.com
127.0.0.1 www.spywarewizard.com
127.0.0.1 madserver.net
127.0.0.1 ad.madserver.net
127.0.0.1 imp.madserver.net
127.0.0.1 media.madserver.net
127.0.0.1 www.adoptim.com
127.0.0.1 de.ariboo.com
127.0.0.1 dk.ariboo.com
127.0.0.1 es.ariboo.com
127.0.0.1 fr.ariboo.com
127.0.0.1 www.ariboo.fr
127.0.0.1 nl.ariboo.com
127.0.0.1 www.ariboo.com
127.0.0.1 www.freeprod.com
127.0.0.1 greatmemo.com
127.0.0.1 jouezgagnant.com
127.0.0.1 activex.matcash.com
127.0.0.1 connect.matcash.com
127.0.0.1 dynmedia.matcash.com
127.0.0.1 www.matcash.com
127.0.0.1 maxifiles.com
127.0.0.1 network.maxifiles.com
127.0.0.1 search.maxifiles.com
127.0.0.1 xml.maxifiles.com
127.0.0.1 referenco.com
127.0.0.1 www.iboard.com
127.0.0.1 www.kestralcom.com
127.0.0.1 mirarsearch.com
127.0.0.1 static.mirarsearch.com
127.0.0.1 ads.deskwizz.com
127.0.0.1 media.deskwizz.com
127.0.0.1 www.deskwizz.com
127.0.0.1 www.finditlive.com
127.0.0.1 www.jumptothat.com
127.0.0.1 www.link-hunter.com
127.0.0.1 www.my-stats.com
127.0.0.1 www.seek-zone.com
127.0.0.1 www.cleanthispc.com
127.0.0.1 www.dlpatch.com
127.0.0.1 secure.branchsoftware.com
127.0.0.1 www.registrycleanerexpress.com
127.0.0.1 www.registrycleanergold.com
127.0.0.1 www.blockmessengerspam.com
127.0.0.1 www.blockthesepopups.com
127.0.0.1 www.endmessenger.com
127.0.0.1 www.messengersoft.com
127.0.0.1 www.freespywarescan.org
127.0.0.1 www.magicphotoshow.com
127.0.0.1 www.popupbegone.com
127.0.0.1 www.searchgateway.net
127.0.0.1 www.spywarebegone.com
127.0.0.1 www.zipitfast.com
127.0.0.1 fcstats.bcentral.com
127.0.0.1 revenue.bcentral.com
127.0.0.1 submitit.bcentral.com
127.0.0.1 linkexchange.com
127.0.0.1 image.linkexchange.com
127.0.0.1 leader.linkexchange.com
127.0.0.1 www.linkexchange.com
127.0.0.1 ads.expedia.com
127.0.0.1 ads.msn.com
127.0.0.1 ads1.msn.com
127.0.0.1 ads.eu.msn.com
127.0.0.1 ads.ninemsn.com.au
127.0.0.1 arc2.msn.com
127.0.0.1 arc3.msn.com
127.0.0.1 arc9.msn.com
127.0.0.1 di.image.eshop.msn.com
127.0.0.1 eshopxml.msn.com
127.0.0.1 image.eshop.msn.com
127.0.0.1 popup.msn.com
127.0.0.1 b.rad.msn.com
127.0.0.1 rmads.msn.com
127.0.0.1 rmads.eu.msn.com
127.0.0.1 a.global.msads.net
127.0.0.1 global.msads.net
127.0.0.1 ft.mvtracker.com
127.0.0.1 www.mvtracker.com
127.0.0.1 c.mii.instacontent.net
127.0.0.1 cserver.mii.instacontent.net
127.0.0.1 p.mii.instacontent.net
127.0.0.1 pd.mii.instacontent.net
127.0.0.1 pdownload.mii.instacontent.net
127.0.0.1 pserver.mii.instacontent.net
127.0.0.1 secure.instacontent.net
127.0.0.1 www.karmamedia.com
127.0.0.1 www.marketdart.com
127.0.0.1 feed.peakclick.com
127.0.0.1 veryfastsearch.com
127.0.0.1 www.veryfastsearch.com
127.0.0.1 oss-adtest.marketscore.com
127.0.0.1 oss-survey.marketscore.com
127.0.0.1 proxycfg.ia3.marketscore.com
127.0.0.1 proxy.ia3.marketscore.com
127.0.0.1 proxy.ia4.marketscore.com
127.0.0.1 proxy.sj3.marketscore.com
127.0.0.1 proxy.sj4.marketscore.com
127.0.0.1 www.permissionresearch.com
127.0.0.1 relevantknowledge.com
127.0.0.1 rules.securestudies.com
127.0.0.1 www.surveyscore.com
127.0.0.1 www.surveysite.com
127.0.0.1 web.survey-poll.com
127.0.0.1 www2.survey-poll.com
127.0.0.1 815.hittail.com
127.0.0.1 922.hittail.com
127.0.0.1 1262.hittail.com
127.0.0.1 3415.hittail.com
127.0.0.1 3918.hittail.com
127.0.0.1 3957.hittail.com
127.0.0.1 4560.hittail.com
127.0.0.1 9394.hittail.com
127.0.0.1 9547.hittail.com
127.0.0.1 10006.hittail.com
127.0.0.1 117.mylongtail.com
127.0.0.1 dv-networks.com
127.0.0.1 www.minutegroup.com
127.0.0.1 www.bandofbuddies.com
127.0.0.1 bandofbuddys.com
127.0.0.1 cometcursors.com
127.0.0.1 christmascursors.cometsystems.com
127.0.0.1 cometcursor.cometsystems.com
127.0.0.1 cometzone.cometsystems.com
127.0.0.1 content.cometsystems.com
127.0.0.1 files.cc.cometsystems.com
127.0.0.1 files.cometsystems.com
127.0.0.1 mcc.cometsystems.com
127.0.0.1 rd.yn.cometsystems.com
127.0.0.1 search2.cometsystems.com
127.0.0.1 cometzone.com
127.0.0.1 www.cursorcafe.com
127.0.0.1 adrevenue.findwhat.com
127.0.0.1 cache.screensavers.com
127.0.0.1 as.searchrover.net
127.0.0.1 files.searchrover.net
127.0.0.1 www.smileytown.com
127.0.0.1 files-pl.starware.com
127.0.0.1 try.starware.com
127.0.0.1 files.weatherstudio.com
127.0.0.1 esearchmaster.info
127.0.0.1 searchaccess.info
127.0.0.1 adonlist.com
127.0.0.1 adonlistings.com
127.0.0.1 www.adondirect.com
127.0.0.1 context.adontext.com
127.0.0.1 context2.adontext.com
127.0.0.1 testing.adontext.com
127.0.0.1 www.adonnetwork.com
127.0.0.1 campaign.cpvfeed.com
127.0.0.1 conversion.cpvfeed.com
127.0.0.1 cpvtext.cpvfeed.com
127.0.0.1 keyword.cpvfeed.com
127.0.0.1 url.cpvfeed.com
127.0.0.1 toolbar.gograph.com
127.0.0.1 mbkwbar.com
127.0.0.1 ads.mbkwbar.com
127.0.0.1 www.mbkwbar.com
127.0.0.1 offeroptimizer.mygeek.com
127.0.0.1 searchhippo.mygeek.com
127.0.0.1 tp.mygeek.com
127.0.0.1 xmlsearch.mygeek.com
127.0.0.1 www.mygeekdirect.com
127.0.0.1 www.mygeeksearch.com
127.0.0.1 pinche.org
127.0.0.1 internetfuel.searchcentrix.com
127.0.0.1 vmn.net
127.0.0.1 seek4freetoolbar.mygeek.com
127.0.0.1 www.x2revenue.com
127.0.0.1 www.x2revenuesearch.com
127.0.0.1 2o7.com
127.0.0.1 www.2o7.com
127.0.0.1 wdc.15x.net
127.0.0.1 ws1.15x.net
127.0.0.1 ws2.15x.net
127.0.0.1 ws3.15x.net
127.0.0.1 www.clearsearch.com
127.0.0.1 www.exitfuel.com
127.0.0.1 www.factcheck.com
127.0.0.1 www2.linkz.com
127.0.0.1 www.linkz.com
127.0.0.1 www.licenseverify.com
127.0.0.1 munky.com
127.0.0.1 www.munky.com
127.0.0.1 nameadmininc.com
127.0.0.1 www.nameadmininc.com
127.0.0.1 www.nameadministration.com
127.0.0.1 namedia.com
127.0.0.1 www.pagina.com
127.0.0.1 pimpout.com
127.0.0.1 www.pimpout.com
127.0.0.1 popupsearch.com
127.0.0.1 www2.popupsearch.com
127.0.0.1 www.popupsearch.com
127.0.0.1 www.searchmagnifier.com
127.0.0.1 virtumondo.com
127.0.0.1 www.netiq.com
127.0.0.1 clicz.com
127.0.0.1 cz3.clickzs.com
127.0.0.1 cz4.clickzs.com
127.0.0.1 cz5.clickzs.com
127.0.0.1 cz6.clickzs.com
127.0.0.1 cz8.clickzs.com
127.0.0.1 cz9.clickzs.com
127.0.0.1 cz11.clickzs.com
127.0.0.1 js4.clickzs.com
127.0.0.1 js5.clickzs.com
127.0.0.1 js6.clickzs.com
127.0.0.1 js7.clickzs.com
127.0.0.1 js8.clickzs.com
127.0.0.1 vip.clickzs.com
127.0.0.1 www.clicz.com
127.0.0.1 www.hit-now.com
127.0.0.1 www.nedstat.com
127.0.0.1 be.nedstat.net
127.0.0.1 es.nedstat.net
127.0.0.1 de.sitestat.nedstat.net
127.0.0.1 uk.nedstat.net
127.0.0.1 usa.nedstat.net
127.0.0.1 nedstat.nl
127.0.0.1 nedstat.s0.nl
127.0.0.1 www.nedstat.nl
127.0.0.1 m1.nedstatbasic.net
127.0.0.1 nl.nedstatbasic.net
127.0.0.1 usa.nedstatbasic.net
127.0.0.1 v1.nedstatbasic.net
127.0.0.1 www.nedstatbasic.net
127.0.0.1 nl.nedstatpro.net
127.0.0.1 uk.nedstatpro.net
127.0.0.1 www.nedstat.co.uk
127.0.0.1 sitestat.com
127.0.0.1 be.sitestat.com
127.0.0.1 de.sitestat.com
127.0.0.1 es.sitestat.com
127.0.0.1 fr.sitestat.com
127.0.0.1 nl.sitestat.com
127.0.0.1 uk.sitestat.com
127.0.0.1 nbasic.sitestat.net
127.0.0.1 www.sitestat.com
127.0.0.1 m1.webstats4u.com
127.0.0.1 www.webstats4u.com
127.0.0.1 adserver.ads360.com
127.0.0.1 creatives.ads360.com
127.0.0.1 dynaserv.ads360.com
127.0.0.1 stats.ads360.com
127.0.0.1 ads.netsol.com
127.0.0.1 ads.networksolutions.com
127.0.0.1 code.superstats.com
127.0.0.1 adireland.com
127.0.0.1 www3.adireland.com
127.0.0.1 aa.oasfile.aftenposten.no
127.0.0.1 adcache.aftenposten.no
127.0.0.1 webhit.aftenposten.no
127.0.0.1 ads1.ami-admin.com
127.0.0.1 ads.mm.ap.org
127.0.0.1 adnet.asahi.com
127.0.0.1 q.azcentral.com
127.0.0.1 ads.bangkokpost.co.th
127.0.0.1 stats.bbc.co.uk
127.0.0.1 ads.bcnewsgroup.com
127.0.0.1 mysa.belointeractive.com
127.0.0.1 te.belointeractive.com
127.0.0.1 ads.bloomberg.com
127.0.0.1 rmedia.boston.com
127.0.0.1 ads5.canoe.ca
127.0.0.1 ads4.clearchannel.com
127.0.0.1 adtrack.cimedia.net
127.0.0.1 realaudio.cimedia.net
127.0.0.1 ads.cosmosmagazine.com
127.0.0.1 webtrendssdc.covers.com
127.0.0.1 ads.digitalhealthcare.com
127.0.0.1 ads.digitalmedianet.com
127.0.0.1 adserver.digitalmedianet.com
127.0.0.1 adverts.digitalspy.co.uk
127.0.0.1 adserver.expatica.nxs.nl
127.0.0.1 adverts.f-1.com
127.0.0.1 campaigns.f2.com.au
127.0.0.1 ads.fairfax.com.au
127.0.0.1 images.ads.fairfax.com.au
127.0.0.1 redirect.fairfax.com.au
127.0.0.1 ad1.firehousezone.com
127.0.0.1 klipmart.forbes.com
127.0.0.1 ads.fredericksburg.com
127.0.0.1 ads.ft.com
127.0.0.1 secureads.ft.com
127.0.0.1 adimage.guardian.co.uk
127.0.0.1 adserver1.harvestadsdepot.com
127.0.0.1 insightxe.inq7.net
127.0.0.1 adsrv.iol.co.za
127.0.0.1 track.jpost.com
127.0.0.1 te.king5.com
127.0.0.1 ads.ljworld.com
127.0.0.1 ads2.ljworld.com
127.0.0.1 v7.stats.load.com
127.0.0.1 stats.macworld.com
127.0.0.1 ads.madison.com
127.0.0.1 ads1.moneycontrol.com
127.0.0.1 adserver.monstersandcritics.com
127.0.0.1 ad.moscowtimes.ru
127.0.0.1 ads.movieweb.com
127.0.0.1 collector.newsx.cc
127.0.0.1 www2.northjersey.com
127.0.0.1 ads.nwsource.com
127.0.0.1 ads.nypost.com
127.0.0.1 ads.nytimes.com
127.0.0.1 adcount.ohmynews.com
127.0.0.1 pathcontrol-att.pni.com
127.0.0.1 pathcontrol-xo.pni.com
127.0.0.1 q.pni.com
127.0.0.1 ads.realcities.com
127.0.0.1 krd.realcities.com
127.0.0.1 ads.roanoke.com
127.0.0.1 ads.ruralpress.com
127.0.0.1 maxads.ruralpress.com
127.0.0.1 ads.sabah.com.tr
127.0.0.1 ads.schwabtrader.com
127.0.0.1 ads.seattletimes.com
127.0.0.1 ads.soush.com
127.0.0.1 ads1.sptimes.com
127.0.0.1 ads.stephensmedia.com
127.0.0.1 adzone.stltoday.com
127.0.0.1 banners.sys-con.com
127.0.0.1 ads.swiftnews.com
127.0.0.1 ads.technologyguide.com
127.0.0.1 ads.thestar.com
127.0.0.1 te.thestar.com
127.0.0.1 mercury.tiser.com.au
127.0.0.1 adsys.townnews.com
127.0.0.1 ads.udc.advance.net
127.0.0.1 ads1.udc.advance.net
127.0.0.1 ads2.udc.advance.net
127.0.0.1 ads3.udc.advance.net
127.0.0.1 ads4.udc.advance.net
127.0.0.1 ads5.udc.advance.net
127.0.0.1 ads6.udc.advance.net
127.0.0.1 ads7.udc.advance.net
127.0.0.1 ads8.udc.advance.net
127.0.0.1 ads9.udc.advance.net
127.0.0.1 ads10.udc.advance.net
127.0.0.1 ads11.udc.advance.net
127.0.0.1 ads12.udc.advance.net
127.0.0.1 ads13.udc.advance.net
127.0.0.1 ads14.udc.advance.net
127.0.0.1 ads15.udc.advance.net
127.0.0.1 ads16.udc.advance.net
127.0.0.1 te.advance.net
127.0.0.1 ads.silive.com
127.0.0.1 gcirm.cincinnati.com
127.0.0.1 gcirm.citizen-times.com
127.0.0.1 gcirm.clarionledger.com
127.0.0.1 gcirm.gannett-tv.com
127.0.0.1 ads.indystar.com
127.0.0.1 gcirm.ozarksnow.com
127.0.0.1 gcirm.tennessean.com
127.0.0.1 gcirm.theithacajournal.com
127.0.0.1 gcirm.tucson.com
127.0.0.1 ad.usatoday.com
127.0.0.1 ads.usatoday.com
127.0.0.1 c.usatoday.com
127.0.0.1 te.businessweek.com
127.0.0.1 te.chron.com
127.0.0.1 te.dallasnews.com
127.0.0.1 tste.esquire.com
127.0.0.1 tste.hamptonroads.com
127.0.0.1 te.mysanantonio.com
127.0.0.1 te.pe.com
127.0.0.1 te.courant.com
127.0.0.1 te.ctnow.com
127.0.0.1 te.dailypress.com
127.0.0.1 te.greenwichtime.com
127.0.0.1 te.latimes.com
127.0.0.1 te.mcall.com
127.0.0.1 te.newsday.com
127.0.0.1 te.orlandosentinel.com
127.0.0.1 te.sunspot.net
127.0.0.1 te.stamfordadvocate.com

Final smitfraud.cmd report 3/3:

127.0.0.1 www.spydestroy.com
127.0.0.1 unknownip.com
127.0.0.1 www.unknownip.com
127.0.0.1 erornuker.com
127.0.0.1 msoftware.info
127.0.0.1 secure.msoftware.info
127.0.0.1 www.msoftware.info
127.0.0.1 online-scan.com
127.0.0.1 www.repair-pc.net
127.0.0.1 www.repair-registry.net
127.0.0.1 www.scanpc.org
127.0.0.1 yieldmenager.com
127.0.0.1 www.maxionsoftware.com
127.0.0.1 www.palsol.com
127.0.0.1 www.palsol.net
127.0.0.1 www.palsoftwareworks.com
127.0.0.1 www.palsolutions.com
127.0.0.1 www.palspywareremover.com
127.0.0.1 www.spy-spyware.com
127.0.0.1 pcsafe.com
127.0.0.1 download02.pcsafe.com
127.0.0.1 www.pcsafe.com
127.0.0.1 www.errorfixerdownload.com
127.0.0.1 www.popuppadlock.com
127.0.0.1 www.privacy-please.com
127.0.0.1 www.speed-surfer.net
127.0.0.1 antispydns.biz
127.0.0.1 www.antispydns.biz
127.0.0.1 dl.malwarewipe.com
127.0.0.1 dl3.malwarewipe.com
127.0.0.1 dl4.malwarewipe.com
127.0.0.1 dl5.malwarewipe.com
127.0.0.1 dl9.malwarewipe.com
127.0.0.1 partners.malwarewipe.com
127.0.0.1 www.malwarewipeupdate.com
127.0.0.1 securecheck.biz
127.0.0.1 spyaxe.biz
127.0.0.1 www.spyaxe.biz
127.0.0.1 download.spyaxe.com
127.0.0.1 download3.spyaxe.net
127.0.0.1 download4.spyaxe.net
127.0.0.1 download5.spyaxe.net
127.0.0.1 download7.spyaxe.net
127.0.0.1 download8.spyaxe.net
127.0.0.1 img.spyaxe.net
127.0.0.1 www.spyaxeupdate.com
127.0.0.1 img.spyfalcon.com
127.0.0.1 dl3.spyfalcon.com
127.0.0.1 dl4.spyfalcon.com
127.0.0.1 dl5.spyfalcon.com
127.0.0.1 dl9.spyfalcon.com
127.0.0.1 www.spyfalcon.com
127.0.0.1 www.spyfalconupdate.com
127.0.0.1 img.spywarestrike.com
127.0.0.1 sqcontrol.biz
127.0.0.1 tokiodrift.biz
127.0.0.1 www.yourguardonline.biz
127.0.0.1 genuinestats.com
127.0.0.1 www.spywarequake.info
127.0.0.1 www.urgentwindowsupdate.biz
127.0.0.1 virusburst.com
127.0.0.1 dl3.virusburst.com
127.0.0.1 dl7.virusburst.com
127.0.0.1 dl8.virusburst.com
127.0.0.1 dl9.virusburst.com
127.0.0.1 download2.virusburst.com
127.0.0.1 download3.virusburst.com
127.0.0.1 download4.virusburst.com
127.0.0.1 download5.virusburst.com
127.0.0.1 download7.virusburst.com
127.0.0.1 download8.virusburst.com
127.0.0.1 download9.virusburst.com
127.0.0.1 download10.virusburst.com
127.0.0.1 download11.virusburst.com
127.0.0.1 download12.virusburst.com
127.0.0.1 download13.virusburst.com
127.0.0.1 download15.virusburst.com
127.0.0.1 download16.virusburst.com
127.0.0.1 dl1.virusbursters.com
127.0.0.1 dl2.virusbursters.com
127.0.0.1 dl3.virusbursters.com
127.0.0.1 dl7.virusbursters.com
127.0.0.1 dl8.virusbursters.com
127.0.0.1 dl9.virusbursters.com
127.0.0.1 download2.virusbursters.com
127.0.0.1 download3.virusbursters.com
127.0.0.1 download4.virusbursters.com
127.0.0.1 download5.virusbursters.com
127.0.0.1 download7.virusbursters.com
127.0.0.1 download8.virusbursters.com
127.0.0.1 download9.virusbursters.com
127.0.0.1 download10.virusbursters.com
127.0.0.1 download11.virusbursters.com
127.0.0.1 download12.virusbursters.com
127.0.0.1 download13.virusbursters.com
127.0.0.1 download15.virusbursters.com
127.0.0.1 download16.virusbursters.com
127.0.0.1 www.virusbursters.com
127.0.0.1 qry.netword.com
127.0.0.1 reg.netword.com
127.0.0.1 www.netword.com
127.0.0.1 js.revsci.net
127.0.0.1 jsl.revsci.net
127.0.0.1 rsi.nasdaq.com
127.0.0.1 rsi.webmd.com
127.0.0.1 http100.content.ru4.com
127.0.0.1 http300.content.ru4.com
127.0.0.1 http1.edge.ru4.com
127.0.0.1 http2.edge.ru4.com
127.0.0.1 http4.edge.ru4.com
127.0.0.1 http6.edge.ru4.com
127.0.0.1 http7.edge.ru4.com
127.0.0.1 http9.edge.ru4.com
127.0.0.1 http201.edge.ru4.com
127.0.0.1 vpdc.ru4.com
127.0.0.1 www.bajasexo.com
127.0.0.1 alternativos.iw-advertising.com
127.0.0.1 ads.contextclick.com
127.0.0.1 impact.contextclick.com
127.0.0.1 www.techlinks100.com
127.0.0.1 www.kazaa-tools.com
127.0.0.1 www.popupdefence.com
127.0.0.1 www.safeguardprotect.com
127.0.0.1 www.adsedo.com
127.0.0.1 sedoparking.com
127.0.0.1 img.sedoparking.com
127.0.0.1 www1.sedoparking.com
127.0.0.1 www.sedotracker.com
127.0.0.1 download.happytofind.com
127.0.0.1 search.happytofind.com
127.0.0.1 www.affiliates.topinstalls.com
127.0.0.1 www.seedcornadvertising.com
127.0.0.1 www.seedcornadv.com
127.0.0.1 click3.ekahfmal.com
127.0.0.1 app2.jkahfmal.com
127.0.0.1 banners.kanoodle.com
127.0.0.1 bt1.kanoodle.com
127.0.0.1 clickthrough.kanoodle.com
127.0.0.1 context1.kanoodle.com
127.0.0.1 context2.kanoodle.com
127.0.0.1 context3.kanoodle.com
127.0.0.1 context4.kanoodle.com
127.0.0.1 context5.kanoodle.com
127.0.0.1 safe.kanoodle.com
127.0.0.1 webmail.kanoodle.com
127.0.0.1 404ads.net
127.0.0.1 www.adconduit.net
127.0.0.1 tag2b.ads55.com
127.0.0.1 www.ads55.com
127.0.0.1 fcds.affiliatetracking.net
127.0.0.1 our.affiliatetracking.net
127.0.0.1 playteen.centralserver.net
127.0.0.1 www.keywordbarn.com
127.0.0.1 www.mixmaxmedia.com
127.0.0.1 www.searchclickads.net
127.0.0.1 www.sparxads.com
127.0.0.1 www.zappbrannigan.com
127.0.0.1 windowsupdate4.iviewsystem.com
127.0.0.1 zup.iviewsystem.com
127.0.0.1 www.iviewsystem.com
127.0.0.1 www.izbar.com
127.0.0.1 www.windowsupdate4.com
127.0.0.1 www.doggyshock.com
127.0.0.1 www.massive-action.biz
127.0.0.1 www.supermonica.biz
127.0.0.1 bestoffers.activeshopper.com
127.0.0.1 mini.activeshopper.com
127.0.0.1 mobile.activeshopper.com
127.0.0.1 search.activshopper.com
127.0.0.1 uk.activeshopper.com
127.0.0.1 www.shelrongroup.com
127.0.0.1 www.bushleaguegame.com
127.0.0.1 www.mynetcompanion.com
127.0.0.1 ads.sitemeter.com
127.0.0.1 sm1.sitemeter.com
127.0.0.1 sm3.sitemeter.com
127.0.0.1 sm4.sitemeter.com
127.0.0.1 sm5.sitemeter.com
127.0.0.1 sm6.sitemeter.com
127.0.0.1 sm7.sitemeter.com
127.0.0.1 sm8.sitemeter.com
127.0.0.1 sm9.sitemeter.com
127.0.0.1 s10.sitemeter.com
127.0.0.1 s11.sitemeter.com
127.0.0.1 s12.sitemeter.com
127.0.0.1 s13.sitemeter.com
127.0.0.1 s14.sitemeter.com
127.0.0.1 s15.sitemeter.com
127.0.0.1 s16.sitemeter.com
127.0.0.1 s17.sitemeter.com
127.0.0.1 s18.sitemeter.com
127.0.0.1 s19.sitemeter.com
127.0.0.1 s20.sitemeter.com
127.0.0.1 s21.sitemeter.com
127.0.0.1 s22.sitemeter.com
127.0.0.1 s23.sitemeter.com
127.0.0.1 s24.sitemeter.com
127.0.0.1 s25.sitemeter.com
127.0.0.1 s26.sitemeter.com
127.0.0.1 s27.sitemeter.com
127.0.0.1 s28.sitemeter.com
127.0.0.1 www.sitemeter.com
127.0.0.1 kazaa.com
127.0.0.1 download.kazaa.com
127.0.0.1 images.kazaa.com
127.0.0.1 www.kazaa.com
127.0.0.1 kazaa.adserver.co.il
127.0.0.1 www.zingysearch.com
127.0.0.1 codice.shinystat.com
127.0.0.1 codiceisp.shinystat.com
127.0.0.1 s1.shinystat.com
127.0.0.1 s2.shinystat.com
127.0.0.1 s3.shinystat.com
127.0.0.1 s4.shinystat.com
127.0.0.1 www.shinystat.com
127.0.0.1 codiceisp.shinystat.it
127.0.0.1 s1.shinystat.it
127.0.0.1 s3.shinystat.it
127.0.0.1 s4.shinystat.it
127.0.0.1 www.shinystat.it
127.0.0.1 ws1.2020search.com
127.0.0.1 appswebservice.com
127.0.0.1 ws1.appswebservice.com
127.0.0.1 404.drsnsrch.com
127.0.0.1 kw.drsnsrch.com
127.0.0.1 ron.drsnsrch.com
127.0.0.1 search.drsnsrch.com
127.0.0.1 search2.drsnsrch.com
127.0.0.1 toolbar.drsnsrch.com
127.0.0.1 welcome.drsnsrch.com
127.0.0.1 www.drsnsrch.com
127.0.0.1 www.redzip.com
127.0.0.1 shopnav.com
127.0.0.1 apps.shopnav.com
127.0.0.1 soda.shopnav.com
127.0.0.1 websearch.shopnav.com
127.0.0.1 www.shopnav.com
127.0.0.1 gsim.webservicehosts.com
127.0.0.1 www.favicon.com
127.0.0.1 wazam.com
127.0.0.1 ia.spinbox.net
127.0.0.1 netcomm.spinbox.net
127.0.0.1 spin.spinbox.net
127.0.0.1 www.spinbox.net
127.0.0.1 blue.sexer.com
127.0.0.1 hello.sexer.com
127.0.0.1 white.sexer.com
127.0.0.1 ramgo.com
127.0.0.1 www.venusseek.com
127.0.0.1 www.diyp2p.com
127.0.0.1 www.dustat.com
127.0.0.1 www.gevamobile.com
127.0.0.1 www.malwhere.com
127.0.0.1 www.processid.com
127.0.0.1 www.rangeva.com
127.0.0.1 www.sigster.com
127.0.0.1 www.yadaware.com
127.0.0.1 www.downloadfree-games.com
127.0.0.1 www.download-free-screensavers.com
127.0.0.1 www.freecomputer-games.com
127.0.0.1 www.free-games-screensavers-wallpaper.com
127.0.0.1 www.free-games.to
127.0.0.1 www.freepc-games.com
127.0.0.1 adaaware.com
127.0.0.1 adawae.com
127.0.0.1 adawair.com
127.0.0.1 www.adnuker.com
127.0.0.1 www.adstriker.com
127.0.0.1 www.adwarecops.com
127.0.0.1 download.bulletproofsoft.com
127.0.0.1 software.bulletproofsoft.com
127.0.0.1 spywareremoval.bulletproofsoft.com
127.0.0.1 www.bulletproofsoft.net
127.0.0.1 www.cleanbrowser.com
127.0.0.1 www.downloadupload.com
127.0.0.1 www.filehog.com
127.0.0.1 download.gigatechsoftware.com
127.0.0.1 www.gigatechsoftware.com
127.0.0.1 www.spywarestriker.com
127.0.0.1 ads.osdn.com
127.0.0.1 sfads.osdn.com
127.0.0.1 images-aud-pg.osdn.com
127.0.0.1 tg-images.osdn.com
127.0.0.1 images-aud.freshmeat.net
127.0.0.1 images-aud.slashdot.org
127.0.0.1 images-aud.sourceforge.net
127.0.0.1 adrotator.com
127.0.0.1 www.adrotator.com
127.0.0.1 counter.sparklit.com
127.0.0.1 vote.sparklit.com
127.0.0.1 webpoll.sparklit.com
127.0.0.1 specificclick.net
127.0.0.1 images.specificclick.net
127.0.0.1 specificmedia.com
127.0.0.1 cxtad.specificmedia.com
127.0.0.1 ac2.valuead.com
127.0.0.1 adsignal.valuead.com
127.0.0.1 redux.valuead.com
127.0.0.1 videodetectivenetwork.valuead.com
127.0.0.1 vdn.valuead.com
127.0.0.1 ads.downloadaccelerator.com
127.0.0.1 ad1.speedbit.com
127.0.0.1 ad2.speedbit.com
127.0.0.1 ad3.speedbit.com
127.0.0.1 ad4.speedbit.com
127.0.0.1 ad5.speedbit.com
127.0.0.1 ad6.speedbit.com
127.0.0.1 ad7.speedbit.com
127.0.0.1 ad8.speedbit.com
127.0.0.1 ad9.speedbit.com
127.0.0.1 ad10.speedbit.com
127.0.0.1 ads1.speedbit.com
127.0.0.1 ads2.speedbit.com
127.0.0.1 ads3.speedbit.com
127.0.0.1 ads4.speedbit.com
127.0.0.1 ads5.speedbit.com
127.0.0.1 ads6.speedbit.com
127.0.0.1 ads7.speedbit.com
127.0.0.1 ads8.speedbit.com
127.0.0.1 ads9.speedbit.com
127.0.0.1 ads10.speedbit.com
127.0.0.1 mirrorsearch.speedbit.com
127.0.0.1 bridgetrack.speedera.r3h.net
127.0.0.1 anon.doubleclick.speedera.net
127.0.0.1 spd.atdmt.speedera.net
127.0.0.1 falk.speedera.net
127.0.0.1 fms2.pointroll.speedera.net
127.0.0.1 app.whenu.speedera.net
127.0.0.1 weather.whenu.speedera.net
127.0.0.1 agentq.vpptechnologies.com
127.0.0.1 js.vpptechnologies.com
127.0.0.1 media-0.vpptechnologies.com
127.0.0.1 media-1.vpptechnologies.com
127.0.0.1 media-4.vpptechnologies.com
127.0.0.1 media-5.vpptechnologies.com
127.0.0.1 media-6.vpptechnologies.com
127.0.0.1 media-b.vpptechnologies.com
127.0.0.1 media-d.vpptechnologies.com
127.0.0.1 media-e.vpptechnologies.com
127.0.0.1 media-f.vpptechnologies.com
127.0.0.1 msxml.vpptechnologies.com
127.0.0.1 spytrack.tic.ru
127.0.0.1 banners.spylog.com
127.0.0.1 my.spylog.com
127.0.0.1 stats.spylog.com
127.0.0.1 www.spylog.com
127.0.0.1 spylog.ru
127.0.0.1 dir.spylog.ru
127.0.0.1 dir1.spylog.ru
127.0.0.1 gs.spylog.ru
127.0.0.1 info.spylog.ru
127.0.0.1 www.spylog.ru
127.0.0.1 counter.aport.ru
127.0.0.1 spywarelabs.fileburst.com
127.0.0.1 xml.spywarelabs.com
127.0.0.1 www.postalmanager.com
127.0.0.1 spywareremover.spybouncer.com
127.0.0.1 www.stingware.com
127.0.0.1 adserv.net
127.0.0.1 ugl.adtrak.net
127.0.0.1 www.adtrak.net
127.0.0.1 cgistorehouse.com
127.0.0.1 www.cgistorehouse.com
127.0.0.1 www.claxonmedia.com
127.0.0.1 popbehinds.com
127.0.0.1 www.popbehinds.com
127.0.0.1 media2.popuptraffic.com
127.0.0.1 www.popuptraffic.com
127.0.0.1 sictalk.com
127.0.0.1 standees.com
127.0.0.1 www.standees.com
127.0.0.1 www.goodsitesguide.com
127.0.0.1 adserver.startnow.com
127.0.0.1 go.startnow.com
127.0.0.1 search.startnow.com
127.0.0.1 srch.startnow.com
127.0.0.1 www.webtracknow.com
127.0.0.1 www.wyzo.com
127.0.0.1 c4.statcounter.com
127.0.0.1 c7.statcounter.com
127.0.0.1 c10.statcounter.com
127.0.0.1 c12.statcounter.com
127.0.0.1 c13.statcounter.com
127.0.0.1 c14.statcounter.com
127.0.0.1 c15.statcounter.com
127.0.0.1 c16.statcounter.com
127.0.0.1 c17.statcounter.com
127.0.0.1 c18.statcounter.com
127.0.0.1 c19.statcounter.com
127.0.0.1 my.statcounter.com
127.0.0.1 secure.statcounter.com
127.0.0.1 www.allstargaming.net
127.0.0.1 www.electricroms.com
127.0.0.1 onlinecheck.antispywaredetector.org
127.0.0.1 update.firefoxupdatecenter.net
127.0.0.1 rizzo.bashchelik.com
127.0.0.1 srv02.bashchelik.com
127.0.0.1 dl1.debelizombi.com
127.0.0.1 mildred.debelizombi.com
127.0.0.1 srv01.debelizombi.com
127.0.0.1 www.stickylogic.com
127.0.0.1 click.lab17.com
127.0.0.1 secure.lab17.com
127.0.0.1 browser.secondpower.com
127.0.0.1 www1.secondpower.com
127.0.0.1 www.addrive.com
127.0.0.1 hpu.bluezipper.com
127.0.0.1 www.bluezipper.com
127.0.0.1 www.freeslide.com
127.0.0.1 jdaf.com
127.0.0.1 sbase30.com
127.0.0.1 precisionpop.com
127.0.0.1 adserve.precisionpop.com
127.0.0.1 context.precisionpop.com
127.0.0.1 subscriberbase.com
127.0.0.1 www.weeklysurveys.com
127.0.0.1 www.anthraxalarm.com
127.0.0.1 www.bestpopupkiller.com
127.0.0.1 www.historykill.com
127.0.0.1 www.historykillcash.com
127.0.0.1 www.hkpopupkiller.com
127.0.0.1 www.killercash.com
127.0.0.1 www.surfmask.com
127.0.0.1 www.swanksoft.com
127.0.0.1 www.trustsoft.com
127.0.0.1 www.winprivacy.com
127.0.0.1 sysini.com
127.0.0.1 www.sysini.com
127.0.0.1 turboinet.com
127.0.0.1 www.turboinet.com
127.0.0.1 ad.t2t2.com
127.0.0.1 bookmark.t2t2.com
127.0.0.1 stat.t2t2.com
127.0.0.1 vip2.t2t2.com
127.0.0.1 www.t2t2.com
127.0.0.1 stat1.vipstat.com
127.0.0.1 anrtx.tacoda.net
127.0.0.1 tribune.tacoda.net
127.0.0.1 adimgs.com
127.0.0.1 c.adverpages.com
127.0.0.1 www.rxwebsearch.com
127.0.0.1 farm.thinktarget.com
127.0.0.1 g.thinktarget.com
127.0.0.1 search.thinktarget.com
127.0.0.1 www.quicksweeper.com
127.0.0.1 a.targetsaver.com
127.0.0.1 www.targetweather.com
127.0.0.1 ads.adnet-plus.com
127.0.0.1 www.adnet-plus.com
127.0.0.1 geads.us.publicus.com
127.0.0.1 gr.us.publicus.com
127.0.0.1 lladinserts.us.publicus.com
127.0.0.1 www.ad.denguru.com
127.0.0.1 www.ad.mobilityguru.com
127.0.0.1 www.ad.tgdaily.com
127.0.0.1 ad.tomshardware.com
127.0.0.1 www.ad.tomshardware.com
127.0.0.1 www.ad.twitchguru.com
127.0.0.1 ads.delfinproject.com
127.0.0.1 www.elottoalert.com
127.0.0.1 storage.savingshound.com
127.0.0.1 www.winfallpublishing.com
127.0.0.1 3ps.go.com
127.0.0.1 ad.go.com
127.0.0.1 adimages.go.com
127.0.0.1 ngads.go.com
127.0.0.1 ad.infoseek.com
127.0.0.1 adsatt.abcnews.starwave.com
127.0.0.1 adsatt.disney.starwave.com
127.0.0.1 adsatt.espn.go.com
127.0.0.1 adsatt.espn.starwave.com
127.0.0.1 odc.starwave.com
127.0.0.1 r1.affiliatefuel.com
127.0.0.1 aftrk.com
127.0.0.1 banners.aftrk.com
127.0.0.1 image.adjuggler.com
127.0.0.1 imgall.adjuggler.com
127.0.0.1 image.dex.adjuggler.com
127.0.0.1 rotator.adjuggler.com
127.0.0.1 rotator.dex.adjuggler.com
127.0.0.1 thunderbolt.adjuggler.com
127.0.0.1 traffic.adjuggler.com
127.0.0.1 www.adjuggler.com
127.0.0.1 adshttp.com
127.0.0.1 img1.adshttp.com
127.0.0.1 adsonwww.com
127.0.0.1 dnaads.com
127.0.0.1 empnads.com
127.0.0.1 httpwwwads.com
127.0.0.1 ads.realtechnetwork.net
127.0.0.1 network.realtechnetwork.net
127.0.0.1 thruport.com
127.0.0.1 adj50.thruport.com
127.0.0.1 adj54.thruport.com
127.0.0.1 imageserver1.thruport.com
127.0.0.1 www.thruport.com
127.0.0.1 www.e-traffic.com
127.0.0.1 www.etraffic.com
127.0.0.1 www.sysupdates.com
127.0.0.1 www.sysupdates2.com
127.0.0.1 support.topmoxie.com
127.0.0.1 toprebate.com
127.0.0.1 www.toprebate.com
127.0.0.1 www.memorymeter.com
127.0.0.1 www.totalvelocity.com
127.0.0.1 clk.tradedoubler.com
127.0.0.1 clkuk.tradedoubler.com
127.0.0.1 hstes.tradedoubler.com
127.0.0.1 hstfr.tradedoubler.com
127.0.0.1 hstgb.tradedoubler.com
127.0.0.1 hstit.tradedoubler.com
127.0.0.1 hstpl.tradedoubler.com
127.0.0.1 hstus.tradedoubler.com
127.0.0.1 img.tradedoubler.com
127.0.0.1 impch.tradedoubler.com
127.0.0.1 impde.tradedoubler.com
127.0.0.1 impdk.tradedoubler.com
127.0.0.1 impes.tradedoubler.com
127.0.0.1 impfi.tradedoubler.com
127.0.0.1 impfr.tradedoubler.com
127.0.0.1 impit.tradedoubler.com
127.0.0.1 implt.tradedoubler.com
127.0.0.1 impnl.tradedoubler.com
127.0.0.1 impno.tradedoubler.com
127.0.0.1 imppl.tradedoubler.com
127.0.0.1 impse.tradedoubler.com
127.0.0.1 pf.tradedoubler.com
127.0.0.1 www.1adult.com
127.0.0.1 11zz.com
127.0.0.1 i.11zz.com
127.0.0.1 in.11zz.com
127.0.0.1 www.11zz.com
127.0.0.1 adultlinksco.com
127.0.0.1 www.adultlinksco.com
127.0.0.1 cashcount.com
127.0.0.1 www.cashcount.com
127.0.0.1 cecash.com
127.0.0.1 image.cecash.com
127.0.0.1 tats.cecash.com
127.0.0.1 www.cecash.com
127.0.0.1 coolwebstats.com
127.0.0.1 www.coolwebstats.com
127.0.0.1 in.cybererotica.com
127.0.0.1 tats.cybererotica.com
127.0.0.1 tour.cybererotica.com
127.0.0.1 www.cybererotica.com
127.0.0.1 in.ff5.com
127.0.0.1 lz.mainentrypoint.com
127.0.0.1 secure.mainentrypoint.com
127.0.0.1 vad.mainentrypoint.com
127.0.0.1 tgp.pornsponsors.com
127.0.0.1 www.pornsponsors.com
127.0.0.1 in.riskymail4free.com
127.0.0.1 www.riskymail4free.com
127.0.0.1 adserv.680130.net
127.0.0.1 update.680130.net
127.0.0.1 www.680130.net
127.0.0.1 www.onestopbargains.com
127.0.0.1 ads.trafficaces.com
127.0.0.1 server.trafficaces.com
127.0.0.1 findology.mail.everyone.net
127.0.0.1 trafficads.com
127.0.0.1 www.trafficads.com
127.0.0.1 adc.aavalue.com
127.0.0.1 adserv.aavalue.com
127.0.0.1 atlaseducation.aavalue.com
127.0.0.1 ezgreets.aavalue.com
127.0.0.1 getmusicfree.aavalue.com
127.0.0.1 greatoffers.aavalue.com
127.0.0.1 grouplotto.aavalue.com
127.0.0.1 lottofanatic.aavalue.com
127.0.0.1 prizeamerica.aavalue.com
127.0.0.1 trynewgames.aavalue.com
127.0.0.1 www.clearflow.com
127.0.0.1 www.clickhelp.net
127.0.0.1 www.ez-screensavers.com
127.0.0.1 freemusic.ez-tracks.com
127.0.0.1 ww2.ez-tracks.com
127.0.0.1 www.ez-tracks.com
127.0.0.1 gamefiesta.com
127.0.0.1 cardgames.gamefiesta.com
127.0.0.1 search.gamefiesta.com
127.0.0.1 www.gamefiesta.com
127.0.0.1 cache.grouplotto.com
127.0.0.1 register7.grouplotto.com
127.0.0.1 www.grouplotto.com
127.0.0.1 www.infiads.com
127.0.0.1 search.mrsupergames.com
127.0.0.1 www.mrsupergames-jump.com
127.0.0.1 tbdev.pickoftheweb.com
127.0.0.1 mailpop.pickoftheweb.com
127.0.0.1 ww1.reciperewards.com
127.0.0.1 searchinaflash.com
127.0.0.1 ezgreets.searchinaflash.com
127.0.0.1 eztracks.searchinaflash.com
127.0.0.1 www.searchinaflash.com
127.0.0.1 track.sendtraffic.com
127.0.0.1 www.sendtraffic.com
127.0.0.1 123.fluxads.com
127.0.0.1 ctxt.tribalfusion.com
127.0.0.1 m.tribalfusion.com
127.0.0.1 www.twistedhumor.com
127.0.0.1 www.em5000.com
127.0.0.1 ping1.unicast.com
127.0.0.1 r3.chkdat.com
127.0.0.1 r6.chksvc.com
127.0.0.1 r7.chksvc.com
127.0.0.1 clear-search.com
127.0.0.1 r2.clrsch.com
127.0.0.1 r3.clrsch.com
127.0.0.1 r4.clrsch.com
127.0.0.1 www.clrsch.com
127.0.0.1 s1.qckads.com
127.0.0.1 s2.qckads.com
127.0.0.1 s3.qckads.com
127.0.0.1 s4.qckads.com
127.0.0.1 s5.qckads.com
127.0.0.1 s6.qckads.com
127.0.0.1 s7.qckads.com
127.0.0.1 sds.qckads.com
127.0.0.1 status.qckads.com
127.0.0.1 r6.svcmgr.com
127.0.0.1 www.anrdoezrs.net
127.0.0.1 cj.com
127.0.0.1 www.dpbolvw.net
127.0.0.1 www.emjcd.com
127.0.0.1 www.jdoqocy.com
127.0.0.1 www.kqzyfj.com
127.0.0.1 qksrv.com
127.0.0.1 click.search123.com
127.0.0.1 cgi.search123.com
127.0.0.1 partners.search123.com
127.0.0.1 www.qksz.net
127.0.0.1 www.tkqlhce.com
127.0.0.1 www2.valueclick.com
127.0.0.1 oz.valueclick.ne.jp
127.0.0.1 ads.blp.valueclick.net
127.0.0.1 ads.fhm.valueclick.net
127.0.0.1 ads.hnet.valueclick.net
127.0.0.1 ads.mplx.valueclick.net
127.0.0.1 ads.mtv.valueclick.net
127.0.0.1 ads.mv.valueclick.net
127.0.0.1 ads.npr.valueclick.net
127.0.0.1 ads.scot.valueclick.net
127.0.0.1 cdn.valueclick.net
127.0.0.1 www.yceml.net
127.0.0.1 js.zmedia.com
127.0.0.1 banners3.webclients.net
127.0.0.1 www.webclients.net
127.0.0.1 ads.websponsors.com
127.0.0.1 ocs.websponsors.com
127.0.0.1 www.websponsors.com
127.0.0.1 adserver.com
127.0.0.1 www.adserver.com
127.0.0.1 fastclick.com
127.0.0.1 www.fastclick.com
127.0.0.1 cdn.fastclick.net
127.0.0.1 code.fastclick.net
127.0.0.1 images.fastclick.net
127.0.0.1 media.fastclick.net
127.0.0.1 media1.fastclick.net
127.0.0.1 media2.fastclick.net
127.0.0.1 media3.fastclick.net
127.0.0.1 media5.fastclick.net
127.0.0.1 media6.fastclick.net
127.0.0.1 media7.fastclick.net
127.0.0.1 media8.fastclick.net
127.0.0.1 media12.fastclick.net
127.0.0.1 media13.fastclick.net
127.0.0.1 media14.fastclick.net
127.0.0.1 media15.fastclick.net
127.0.0.1 media16.fastclick.net
127.0.0.1 media17.fastclick.net
127.0.0.1 media18.fastclick.net
127.0.0.1 media19.fastclick.net
127.0.0.1 media20.fastclick.net
127.0.0.1 media21.fastclick.net
127.0.0.1 media23.fastclick.net
127.0.0.1 media24.fastclick.net
127.0.0.1 media25.fastclick.net
127.0.0.1 media26.fastclick.net
127.0.0.1 media27.fastclick.net
127.0.0.1 media29.fastclick.net
127.0.0.1 media30.fastclick.net
127.0.0.1 media31.fastclick.net
127.0.0.1 media32.fastclick.net
127.0.0.1 media33.fastclick.net
127.0.0.1 media34.fastclick.net
127.0.0.1 media35.fastclick.net
127.0.0.1 media36.fastclick.net
127.0.0.1 media37.fastclick.net
127.0.0.1 media38.fastclick.net
127.0.0.1 media39.fastclick.net
127.0.0.1 media40.fastclick.net
127.0.0.1 media41.fastclick.net
127.0.0.1 media42.fastclick.net
127.0.0.1 media43.fastclick.net
127.0.0.1 media44.fastclick.net
127.0.0.1 media45.fastclick.net
127.0.0.1 media46.fastclick.net
127.0.0.1 media47.fastclick.net
127.0.0.1 media48.fastclick.net
127.0.0.1 media49.fastclick.net
127.0.0.1 media55.fastclick.net
127.0.0.1 media70.fastclick.net
127.0.0.1 media72.fastclick.net
127.0.0.1 media73.fastclick.net
127.0.0.1 media74.fastclick.net
127.0.0.1 media78.fastclick.net
127.0.0.1 media80.fastclick.net
127.0.0.1 media81.fastclick.net
127.0.0.1 media83.fastclick.net
127.0.0.1 media84.fastclick.net
127.0.0.1 media85.fastclick.net
127.0.0.1 media90.fastclick.net
127.0.0.1 media91.fastclick.net
127.0.0.1 media92.fastclick.net
127.0.0.1 media93.fastclick.net
127.0.0.1 media94.fastclick.net
127.0.0.1 media96.fastclick.net
127.0.0.1 media97.fastclick.net
127.0.0.1 media98.fastclick.net
127.0.0.1 media99.fastclick.net
127.0.0.1 secure.fastclick.net
127.0.0.1 info.browserdirect.net
127.0.0.1 casalamedia.com
127.0.0.1 hit.elevonsearch.com
127.0.0.1 www.elevonsearch.com
127.0.0.1 clicks.emarketmakers.com
127.0.0.1 search.findsall.info
127.0.0.1 hit.getyourdatahere.com
127.0.0.1 find.greatsearch.info
127.0.0.1 result.goodsearch.info
127.0.0.1 www.esearchandfind.org
127.0.0.1 clicks.jackpot.com
127.0.0.1 www.myphonebillsavings.com
127.0.0.1 www.mysearchnet.org
127.0.0.1 www.new.chat.new.net
127.0.0.1 eps.new.search.new.net
127.0.0.1 client.newdotnet.net
127.0.0.1 client.new.tech.new.net
127.0.0.1 www.firstlook.movie.new.net
127.0.0.1 upgrade.newdotnet.net
127.0.0.1 upgrade.new.tech.new.net
127.0.0.1 www.onestepsearch.net
127.0.0.1 www.onestepsearch.biz
127.0.0.1 blue.qsrch.net
127.0.0.1 pjn.qsrch.net
127.0.0.1 search.qsrch.net
127.0.0.1 bgw.qsrch.com
127.0.0.1 hp.qsrch.com
127.0.0.1 moniker.qsrch.com
127.0.0.1 nnsearch.qsrch.com
127.0.0.1 regfly.qsrch.com
127.0.0.1 rg.qsrch.com
127.0.0.1 search.qsrch.com
127.0.0.1 worldwide.qsrch.com
127.0.0.1 qtbc.qsrch.info
127.0.0.1 upgrade.qsrch.info
127.0.0.1 data.quicksearches.net
127.0.0.1 sp.trafficmarketplace.com
127.0.0.1 www.trafficmarketplace.com
127.0.0.1 ads.uproar.com
127.0.0.1 adimages.vendaregroup.com
127.0.0.1 dpweb.vendaregroup.com
127.0.0.1 registration.vendaregroup.com
127.0.0.1 hit.virtualsearches.net
127.0.0.1 web.yoursearchfinder.com
127.0.0.1 www.bigtags.com
127.0.0.1 www.cpalist.com
127.0.0.1 www.ddupdates.com
127.0.0.1 integrated-ventures.com
127.0.0.1 www.integrated-ventures.com
127.0.0.1 www.net-check.net
127.0.0.1 www.nextern.net
127.0.0.1 www.newinf.net
127.0.0.1 rcom2.seek2.com
127.0.0.1 search.seek2.com
127.0.0.1 www.seek2.com
127.0.0.1 search1.srch-results.com
127.0.0.1 landings.trafficz.com
127.0.0.1 rcom.trafficz.com
127.0.0.1 verticaltheories.com
127.0.0.1 www.verticaltheories.com
127.0.0.1 www.verschk.com
127.0.0.1 ads.adcorps.com
127.0.0.1 ads2.adcorps.com
127.0.0.1 intellitxt.com
127.0.0.1 de.intellitxt.com
127.0.0.1 uk.intellitxt.com
127.0.0.1 us.intellitxt.com
127.0.0.1 www.intellitxt.com
127.0.0.1 computerbase.de.intellitxt.com
127.0.0.1 computerhilfen.de.intellitxt.com
127.0.0.1 computerwoche.de.intellitxt.com
127.0.0.1 inquake.de.intellitxt.com
127.0.0.1 macwelt.de.intellitxt.com
127.0.0.1 php-mag.de.intellitxt.com
127.0.0.1 php-magnet.de.intellitxt.com
127.0.0.1 softonic.de.intellitxt.com
127.0.0.1 supportnet.de.intellitxt.com
127.0.0.1 tecchannel.de.intellitxt.com
127.0.0.1 generation-nt.fr.intellitxt.com
127.0.0.1 memoclic.fr.intellitxt.com
127.0.0.1 neteco.fr.intellitxt.com
127.0.0.1 programme-tv.fr.intellitxt.com
127.0.0.1 tomshardware.fr.intellitxt.com
127.0.0.1 vtrhardware.fr.intellitxt.com
127.0.0.1 telefonino.it.intellitxt.com
127.0.0.1 carview.jp.intellitxt.com
127.0.0.1 topdownloads.nl.intellitxt.com
127.0.0.1 4thegame.uk.intellitxt.com
127.0.0.1 bink.uk.intellitxt.com
127.0.0.1 biosmagazine.uk.intellitxt.com
127.0.0.1 cbronline.uk.intellitxt.com
127.0.0.1 computeractive.uk.intellitxt.com
127.0.0.1 contactmusic.uk.intellitxt.com
127.0.0.1 digit-life.uk.intellitxt.com
127.0.0.1 footymad.uk.intellitxt.com
127.0.0.1 freedownloadcenter.uk.intellitxt.com
127.0.0.1 freedownloadmanager.uk.intellitxt.com
127.0.0.1 freewarepalm.uk.intellitxt.com
127.0.0.1 gamesindustry.uk.intellitxt.com
127.0.0.1 hexus.uk.intellitxt.com
127.0.0.1 itreviews.uk.intellitxt.com
127.0.0.1 lse.uk.intellitxt.com
127.0.0.1 monstersandcritics.uk.intellitxt.com
127.0.0.1 pcadvisor.uk.intellitxt.com
127.0.0.1 physorg.uk.intellitxt.com
127.0.0.1 playfuls.uk.intellitxt.com
127.0.0.1 pocketlint.uk.intellitxt.com
127.0.0.1 softpedia.uk.intellitxt.com
127.0.0.1 squarefootball.uk.intellitxt.com
127.0.0.1 tcmagazine.uk.intellitxt.com
127.0.0.1 teamtalk.uk.intellitxt.com
127.0.0.1 thehollywoodnews.uk.intellitxt.com
127.0.0.1 vnunet.uk.intellitxt.com
127.0.0.1 webuser.uk.intellitxt.com
127.0.0.1 wi-fitechnology.uk.intellitxt.com
127.0.0.1 worldtravelguide.uk.intellitxt.com
127.0.0.1 1src.us.intellitxt.com
127.0.0.1 1up.us.intellitxt.com
127.0.0.1 2spyware.us.intellitxt.com
127.0.0.1 411mania.us.intellitxt.com
127.0.0.1 4w-wrestling.us.intellitxt.com
127.0.0.1 5starsupport.us.intellitxt.com
127.0.0.1 9down.us.intellitxt.com
127.0.0.1 able2know.us.intellitxt.com
127.0.0.1 aclasscelebs.us.intellitxt.com
127.0.0.1 activewin.us.intellitxt.com
127.0.0.1 actionscript.us.intellitxt.com
127.0.0.1 advancedmn.us.intellitxt.com
127.0.0.1 afterdawn.us.intellitxt.com
127.0.0.1 akihabaranews.us.intellitxt.com
127.0.0.1 albinoblacksheep.us.intellitxt.com
127.0.0.1 alive.us.intellitxt.com
127.0.0.1 allhiphop.us.intellitxt.com
127.0.0.1 allrefer.us.intellitxt.com
127.0.0.1 amdzone.us.intellitxt.com
127.0.0.1 americanmedia.us.intellitxt.com
127.0.0.1 andpop.us.intellitxt.com
127.0.0.1 artistdirect.us.intellitxt.com
127.0.0.1 askmen.us.intellitxt.com
127.0.0.1 askmen2.us.intellitxt.com
127.0.0.1 aquasoft.us.intellitxt.com
127.0.0.1 architecturaldesigns.us.intellitxt.com
127.0.0.1 autoforumuniverse.us.intellitxt.com
127.0.0.1 away.us.intellitxt.com
127.0.0.1 aximsite.us.intellitxt.com
127.0.0.1 bargainpda.us.intellitxt.com
127.0.0.1 betanews.us.intellitxt.com
127.0.0.1 beyondhollywood.us.intellitxt.com
127.0.0.1 bigsoccer.us.intellitxt.com
127.0.0.1 blastro.us.intellitxt.com
127.0.0.1 bleepingcomputer.us.intellitxt.com
127.0.0.1 bluechillies.us.intellitxt.com
127.0.0.1 boxofficeprophets.us.intellitxt.com
127.0.0.1 businessknowhow.us.intellitxt.com
127.0.0.1 bolt.us.intellitxt.com
127.0.0.1 canmag.us.intellitxt.com
127.0.0.1 cdreviews.us.intellitxt.com
127.0.0.1 celebrity-babies.us.intellitxt.com
127.0.0.1 celebritywonder.us.intellitxt.com
127.0.0.1 cheatcc.us.intellitxt.com
127.0.0.1 cheatingdome.us.intellitxt.com
127.0.0.1 clearchannel.us.intellitxt.com
127.0.0.1 cmp.us.intellitxt.com
127.0.0.1 cnet.us.intellitxt.com
127.0.0.1 collegefootballnews.us.intellitxt.com
127.0.0.1 compnet.us.intellitxt.com
127.0.0.1 consumerreview.us.intellitxt.com
127.0.0.1 cooksrecipes.us.intellitxt.com
127.0.0.1 countryweekly.us.intellitxt.com
127.0.0.1 crmbuyer.us.intellitxt.com
127.0.0.1 csharpcorner.us.intellitxt.com
127.0.0.1 csnation.us.intellitxt.com
127.0.0.1 ctv.us.intellitxt.com
127.0.0.1 dabcc.us.intellitxt.com
127.0.0.1 daniweb.us.intellitxt.com
127.0.0.1 darkhorizons.us.intellitxt.com
127.0.0.1 darlamack.us.intellitxt.com
127.0.0.1 demonews.us.intellitxt.com
127.0.0.1 denguru.us.intellitxt.com
127.0.0.1 designtechnica.us.intellitxt.com
127.0.0.1 devshed.us.intellitxt.com
127.0.0.1 digitaltrends.us.intellitxt.com
127.0.0.1 dlmag.us.intellitxt.com
127.0.0.1 drdobbs.us.intellitxt.com
127.0.0.1 drugscom.us.intellitxt.com
127.0.0.1 ecanadanow.us.intellitxt.com
127.0.0.1 ecommercetimes.us.intellitxt.com
127.0.0.1 eepn.us.intellitxt.com
127.0.0.1 efanguide.us.intellitxt.com
127.0.0.1 ehomeupgrade.us.intellitxt.com
127.0.0.1 entrepreneur.us.intellitxt.com
127.0.0.1 estelle.us.intellitxt.com
127.0.0.1 eten-users.us.intellitxt.com
127.0.0.1 examnotes.us.intellitxt.com
127.0.0.1 excite.us.intellitxt.com
127.0.0.1 experts.us.intellitxt.com
127.0.0.1 extntechnologies.us.intellitxt.com
127.0.0.1 eztracks.us.intellitxt.com
127.0.0.1 fangoria.us.intellitxt.com
127.0.0.1 faqts.us.intellitxt.com
127.0.0.1 fatfreekitchen.us.intellitxt.com
127.0.0.1 filedudes.us.intellitxt.com
127.0.0.1 filmstew.us.intellitxt.com
127.0.0.1 firingsquad.us.intellitxt.com
127.0.0.1 flashmagazine.us.intellitxt.com
127.0.0.1 flexbeta.us.intellitxt.com
127.0.0.1 forbes.us.intellitxt.com
127.0.0.1 foxnews.us.intellitxt.com
127.0.0.1 foxtv.us.intellitxt.com
127.0.0.1 freecodecs.us.intellitxt.com
127.0.0.1 freewarefiles.us.intellitxt.com
127.0.0.1 freewarehome.us.intellitxt.com
127.0.0.1 friendtest.us.intellitxt.com
127.0.0.1 futurelooks.us.intellitxt.com
127.0.0.1 g2.us.intellitxt.com
127.0.0.1 g3.us.intellitxt.com
127.0.0.1 g4.us.intellitxt.com
127.0.0.1 g5.us.intellitxt.com
127.0.0.1 gamedev.us.intellitxt.com
127.0.0.1 gamesradar.us.intellitxt.com
127.0.0.1 gamerstemple.us.intellitxt.com
127.0.0.1 geekstogo.us.intellitxt.com
127.0.0.1 gonintendo.us.intellitxt.com
127.0.0.1 gsmarena.us.intellitxt.com
127.0.0.1 gtmedia.us.intellitxt.com
127.0.0.1 gtrforums.us.intellitxt.com
127.0.0.1 guru3d.us.intellitxt.com
127.0.0.1 hackedgadgets.us.intellitxt.com
127.0.0.1 hardcoreware.us.intellitxt.com
127.0.0.1 hardocp.us.intellitxt.com
127.0.0.1 hardwareanalysis.us.intellitxt.com
127.0.0.1 hardwarezone.us.intellitxt.com
127.0.0.1 hiphopdx.us.intellitxt.com
127.0.0.1 hitsquad.us.intellitxt.com
127.0.0.1 hollywood.us.intellitxt.com
127.0.0.1 hometheaterhifi.us.intellitxt.com
127.0.0.1 hoopsworld.us.intellitxt.com
127.0.0.1 hoovers.us.intellitxt.com
127.0.0.1 hothardware.us.intellitxt.com
127.0.0.1 hotonlinenews.us.intellitxt.com
127.0.0.1 howardchui.us.intellitxt.com
127.0.0.1 htmlcenter.us.intellitxt.com
127.0.0.1 iamnotageek.us.intellitxt.com
127.0.0.1 icentric.us.intellitxt.com
127.0.0.1 ichef.us.intellitxt.com
127.0.0.1 idontlikeyouinthatway.us.intellitxt.com
127.0.0.1 iesb.us.intellitxt.com
127.0.0.1 i-hacked.us.intellitxt.com
127.0.0.1 impactwrestling.us.intellitxt.com
127.0.0.1 insidemacgames.us.intellitxt.com
127.0.0.1 intermix.us.intellitxt.com
127.0.0.1 ittoolbox.us.intellitxt.com
127.0.0.1 itxt2.us.intellitxt.com
127.0.0.1 itxt3.us.intellitxt.com
127.0.0.1 ivillage.us.intellitxt.com
127.0.0.1 s.ivillage.us.intellitxt.com
127.0.0.1 iwon.us.intellitxt.com
127.0.0.1 javaworld.us.intellitxt.com
127.0.0.1 jkontherun.us.intellitxt.com
127.0.0.1 joblo.us.intellitxt.com
127.0.0.1 jupiter.us.intellitxt.com
127.0.0.1 justmovietrailers.us.intellitxt.com
127.0.0.1 kaboose.us.intellitxt.com
127.0.0.1 knac.us.intellitxt.com
127.0.0.1 laboroflove.us.intellitxt.com
127.0.0.1 laptoplogic.us.intellitxt.com
127.0.0.1 laptopmag.us.intellitxt.com
127.0.0.1 latinoreview.us.intellitxt.com
127.0.0.1 linuxdevcenter.us.intellitxt.com
127.0.0.1 linuxjournal.us.intellitxt.com
127.0.0.1 lmcd.us.intellitxt.com
127.0.0.1 lockergnome.us.intellitxt.com
127.0.0.1 longhornblogs.us.intellitxt.com
127.0.0.1 lxer.us.intellitxt.com
127.0.0.1 macdailynews.us.intellitxt.com
127.0.0.1 macnn.us.intellitxt.com
127.0.0.1 macgamefiles.us.intellitxt.com
127.0.0.1 macmegasite.us.intellitxt.com
127.0.0.1 mazdaworld.us.intellitxt.com
127.0.0.1 medicinenet.us.intellitxt.com
127.0.0.1 medindia.us.intellitxt.com
127.0.0.1 methodshop.us.intellitxt.com
127.0.0.1 mobile9.us.intellitxt.com
127.0.0.1 mobileburn.us.intellitxt.com
127.0.0.1 mobiletechreview.us.intellitxt.com
127.0.0.1 mobilewhack.us.intellitxt.com
127.0.0.1 mobilityguru.us.intellitxt.com
127.0.0.1 movie-list.us.intellitxt.com
127.0.0.1 movieweb.us.intellitxt.com
127.0.0.1 muscleandfitnesshers.us.intellitxt.com
127.0.0.1 myfavoritegames.us.intellitxt.com
127.0.0.1 naturalhealth.us.intellitxt.com
127.0.0.1 neoseeker.us.intellitxt.com
127.0.0.1 neowin.us.intellitxt.com
127.0.0.1 ngohq.us.intellitxt.com
127.0.0.1 nihoncar.us.intellitxt.com
127.0.0.1 ntcompatible.us.intellitxt.com
127.0.0.1 obgyn.us.intellitxt.com
127.0.0.1 octools.us.intellitxt.com
127.0.0.1 onlamp.us.intellitxt.com
127.0.0.1 oocenter.us.intellitxt.com
127.0.0.1 ocworkbench.us.intellitxt.com
127.0.0.1 ostg.us.intellitxt.com
127.0.0.1 overclockersonline.us.intellitxt.com
127.0.0.1 pcmag.us.intellitxt.com
127.0.0.1 pcper.us.intellitxt.com
127.0.0.1 pencomputing.us.intellitxt.com
127.0.0.1 penton.us.intellitxt.com
127.0.0.1 pimprig.us.intellitxt.com
127.0.0.1 planetgamecube.us.intellitxt.com
127.0.0.1 planet-source-code.us.intellitxt.com
127.0.0.1 popoholic.us.intellitxt.com
127.0.0.1 popmechanics.us.intellitxt.com
127.0.0.1 popularmechanics.us.intellitxt.com
127.0.0.1 postchronicle.us.intellitxt.com
127.0.0.1 priusonline.us.intellitxt.com
127.0.0.1 profootballweekly.us.intellitxt.com
127.0.0.1 punchjump.us.intellitxt.com
127.0.0.1 recipegoldmine.us.intellitxt.com
127.0.0.1 recipeland.us.intellitxt.com
127.0.0.1 roadcatalogs.us.intellitxt.com
127.0.0.1 rojakpot.us.intellitxt.com
127.0.0.1 rpg.us.intellitxt.com
127.0.0.1 rx8club.us.intellitxt.com
127.0.0.1 rydium.us.intellitxt.com
127.0.0.1 screensavers.us.intellitxt.com
127.0.0.1 sdtimes.us.intellitxt.com
127.0.0.1 siliconera.us.intellitxt.com
127.0.0.1 slashphone.us.intellitxt.com
127.0.0.1 soccergaming.us.intellitxt.com
127.0.0.1 soft32.us.intellitxt.com
127.0.0.1 sohh.us.intellitxt.com
127.0.0.1 soundslam.us.intellitxt.com
127.0.0.1 speedtv.us.intellitxt.com
127.0.0.1 sprintusers.us.intellitxt.com
127.0.0.1 spymac.us.intellitxt.com
127.0.0.1 sqlservercentral.us.intellitxt.com
127.0.0.1 starpulse.us.intellitxt.com
127.0.0.1 storknet.us.intellitxt.com
127.0.0.1 supercars.us.intellitxt.com
127.0.0.1 surebaby.us.intellitxt.com
127.0.0.1 symbianone.us.intellitxt.com
127.0.0.1 symbian-freak.us.intellitxt.com
127.0.0.1 techeblog.us.intellitxt.com
127.0.0.1 techgage.us.intellitxt.com
127.0.0.1 techpowerup.us.intellitxt.com
127.0.0.1 techspot.us.intellitxt.com
127.0.0.1 technewsworld.us.intellitxt.com
127.0.0.1 tenmagazines.us.intellitxt.com
127.0.0.1 thecelebritycafe.us.intellitxt.com
127.0.0.1 theeldergeek.us.intellitxt.com
127.0.0.1 thefinalfantasy.us.intellitxt.com
127.0.0.1 theforce.us.intellitxt.com
127.0.0.1 thefutoncritic.us.intellitxt.com
127.0.0.1 themanroom.us.intellitxt.com
127.0.0.1 theonenetwork.us.intellitxt.com
127.0.0.1 thetechlounge.us.intellitxt.com
127.0.0.1 thetechzone.us.intellitxt.com
127.0.0.1 theunwired.us.intellitxt.com
127.0.0.1 thinkcomputers.us.intellitxt.com
127.0.0.1 thoughtsmedia.us.intellitxt.com
127.0.0.1 threadwatch.us.intellitxt.com
127.0.0.1 toms.us.intellitxt.com
127.0.0.1 tomsforumz.us.intellitxt.com
127.0.0.1 tomsnetworking.us.intellitxt.com
127.0.0.1 top40-charts.us.intellitxt.com
127.0.0.1 tribal.us.intellitxt.com
127.0.0.1 tutorialoutpost.us.intellitxt.com
127.0.0.1 tweaktown.us.intellitxt.com
127.0.0.1 twitchguru.us.intellitxt.com
127.0.0.1 vault9.us.intellitxt.com
127.0.0.1 vidnet.us.intellitxt.com
127.0.0.1 voodoofiles.us.intellitxt.com
127.0.0.1 warcry.us.intellitxt.com
127.0.0.1 winmatrix.us.intellitxt.com
127.0.0.1 wm5fixsite.us.intellitxt.com
127.0.0.1 womensforum.us.intellitxt.com
127.0.0.1 xmlpitstop.us.intellitxt.com
127.0.0.1 yeeeah.us.intellitxt.com
127.0.0.1 zatznotfunny.us.intellitxt.com
127.0.0.1 betanews.us.smarttargetting.com
127.0.0.1 xbitlabs.us.smarttargetting.com
127.0.0.1 www.smarttargetting.com
127.0.0.1 www.smarttargetting.net
127.0.0.1 itxt.vibrantmedia.com
127.0.0.1 usads.vibrantmedia.com
127.0.0.1 usnews.vibrantmedia.com
127.0.0.1 www.vibrantmedia.com
127.0.0.1 view1.vioclicks.com
127.0.0.1 hit1.xstats.com
127.0.0.1 view1.xstats.com
127.0.0.1 ads3.virtumundo.com
127.0.0.1 ads4.virtumundo.com
127.0.0.1 my.virtumundo.com
127.0.0.1 pchi-vtrk.virtumundo.com
127.0.0.1 privacy.virtumundo.com
127.0.0.1 redirect.virtumundo.com
127.0.0.1 vtrack.virtumundo.com
127.0.0.1 vmadmin.com
127.0.0.1 www.vtarget.com
127.0.0.1 topmoviezone.com
127.0.0.1 www.topmoviezone.com
127.0.0.1 nowfind.biz
127.0.0.1 www.nowfind.biz
127.0.0.1 unimax.us
127.0.0.1 www.unimax.us
127.0.0.1 telgids.adsolutions.nl
127.0.0.1 adserver.webads.nl
127.0.0.1 images.webads.nl
127.0.0.1 funskins.ezthemes.com
127.0.0.1 galtthemes.ezthemes.com
127.0.0.1 themexp.ezthemes.com
127.0.0.1 topdesktop.ezthemes.com
127.0.0.1 dl2.themexp.org
127.0.0.1 www.realenduser.com
127.0.0.1 d.webhancer.com
127.0.0.1 d2.webhancer.com
127.0.0.1 d3.webhancer.com
127.0.0.1 download.webhancer.com
127.0.0.1 dr2.webhancer.com
127.0.0.1 prime.webhancer.com
127.0.0.1 reports.webhancer.com
127.0.0.1 server.webhancer.com
127.0.0.1 b1-v2-bell.webhancer.com
127.0.0.1 b2-v1-bell.webhancer.com
127.0.0.1 b3-v1-bell.webhancer.com
127.0.0.1 secondary.webhancer.com
127.0.0.1 vr1-v1.webhancer.com
127.0.0.1 bannerco-op.com
127.0.0.1 bannersgomlm.com
127.0.0.1 www.bannersgomlm.com
127.0.0.1 bannersgomlm.buildreferrals.com
127.0.0.1 banner.50megs.com
127.0.0.1 free-counter.5u.com
127.0.0.1 hit-counter.5u.com
127.0.0.1 web-counter.5u.com
127.0.0.1 aboutwebservices.com
127.0.0.1 freestats.com
127.0.0.1 banner.freeservers.com
127.0.0.1 free-stats.i8.com
127.0.0.1 site-stats.i8.com
127.0.0.1 sitetracker.com
127.0.0.1 www.sitetracker.com
127.0.0.1 www2a.sitetracker.com
127.0.0.1 hitbox.com
127.0.0.1 ai.hitbox.com
127.0.0.1 aibg.hitbox.com
127.0.0.1 counter.hitbox.com
127.0.0.1 ehg-aarp.hitbox.com
127.0.0.1 ehg-adteractive.hitbox.com
127.0.0.1 ehg-adversitement.hitbox.com
127.0.0.1 ehg-akagourmet.hitbox.com
127.0.0.1 ehg-alt64.hitbox.com
127.0.0.1 ehg-associatednewmedia.hitbox.com
127.0.0.1 ehg-ati.hitbox.com
127.0.0.1 ehg-att2.hitbox.com
127.0.0.1 ehg-attcorp.hitbox.com
127.0.0.1 ehg-autotrader.hitbox.com
127.0.0.1 ehg-bandwidth.hitbox.com
127.0.0.1 ehg-barclaysglobal.hitbox.com
127.0.0.1 ehg-bareweb.hitbox.com
127.0.0.1 ehg-bbc.hitbox.com
127.0.0.1 ehg-bestbuy.hitbox.com
127.0.0.1 ehg-bestwestern.hitbox.com
127.0.0.1 ehg-bizjournals.hitbox.com
127.0.0.1 ehg-bskyb.hitbox.com
127.0.0.1 ehg-cafepress.hitbox.com
127.0.0.1 ehg-campmor.hitbox.com
127.0.0.1 ehg-cbc.hitbox.com
127.0.0.1 ehg-cbs.hitbox.com
127.0.0.1 ehg-centaur.hitbox.com
127.0.0.1 ehg-chartercommunications.hitbox.com
127.0.0.1 ehg-chcf.hitbox.com
127.0.0.1 ehg-chrysler.hitbox.com
127.0.0.1 ehg-citrixonline.hitbox.com
127.0.0.1 ehg-classifiedventures.hitbox.com
127.0.0.1 ehg-clearchannel.hitbox.com
127.0.0.1 ehg-comcast.hitbox.com
127.0.0.1 ehg-cometsystems.hitbox.com
127.0.0.1 ehg-commjun.hitbox.com
127.0.0.1 ehg-corusentertainment.hitbox.com
127.0.0.1 ehg-crain.hitbox.com
127.0.0.1 ehg-ctv.hitbox.com
127.0.0.1 ehg-cygnusbm.hitbox.com
127.0.0.1 ehg-danskin.hitbox.com
127.0.0.1 ehg-darksideprod.hitbox.com
127.0.0.1 ehg-deltatre.hitbox.com
127.0.0.1 ehg-digg.hitbox.com
127.0.0.1 ehg-eline.hitbox.com
127.0.0.1 ehg-findlaw.hitbox.com
127.0.0.1 ehg-foxinteractive.hitbox.com
127.0.0.1 ehg-foxmovies.hitbox.com
127.0.0.1 ehg-foxsports.hitbox.com
127.0.0.1 ehg-freshpairllc.hitbox.com
127.0.0.1 ehg-futurepub.hitbox.com
127.0.0.1 ehg-fxcm.hitbox.com
127.0.0.1 ehg-gamedaily.hitbox.com
127.0.0.1 ehg-gamespot.hitbox.com
127.0.0.1 ehg-gatehousemedia.hitbox.com
127.0.0.1 ehg-globalgamingleague.hitbox.com
127.0.0.1 ehg-groupernetworks.hitbox.com
127.0.0.1 ehg-harleydavidson.hitbox.com
127.0.0.1 ehg-hollywoodmedia.hitbox.com
127.0.0.1 ehg-hollywood.hitbox.com
127.0.0.1 ehg-ignitemedia.hitbox.com
127.0.0.1 ehg-imedia.hitbox.com
127.0.0.1 ehg-intellextinc.hitbox.com
127.0.0.1 ehg-itworldcanada.hitbox.com
127.0.0.1 ehg-iwantoneofthose.hitbox.com
127.0.0.1 ehg-jaygroup.hitbox.com
127.0.0.1 ehg-kingstontechnology.hitbox.com
127.0.0.1 ehg-knightridder.hitbox.com
127.0.0.1 ehg-kodak.hitbox.com
127.0.0.1 ehg-ladbrokes.hitbox.com
127.0.0.1 ehg-leapfrog.hitbox.com
127.0.0.1 ehg-legacy.hitbox.com
127.0.0.1 ehg-legonewyorkinc.hitbox.com
127.0.0.1 ehg-lexmark.hitbox.com
127.0.0.1 ehg-linksys.hitbox.com
127.0.0.1 ehg-lls.hitbox.com
127.0.0.1 ehg-majorbaseball.hitbox.com
127.0.0.1 ehg-maniatv.hitbox.com
127.0.0.1 ehg-mattress.hitbox.com
127.0.0.1 ehg-mccormick.hitbox.com
127.0.0.1 ehg-mgnlimited.hitbox.com
127.0.0.1 ehg-mh.hitbox.com
127.0.0.1 ehg-micron.hitbox.com
127.0.0.1 ehg-minglematch.hitbox.com
127.0.0.1 ehg-mshanken.hitbox.com
127.0.0.1 ehg-mtv.hitbox.com
127.0.0.1 ehg-nbif.hitbox.com
127.0.0.1 ehg-nestlepurinapetcare.hitbox.com
127.0.0.1 ehg-nestleusainc.hitbox.com
127.0.0.1 ehg-netapparel.hitbox.com
127.0.0.1 ehg-newegg.hitbox.com
127.0.0.1 ehg-nike.hitbox.com
127.0.0.1 ehg-nokiafin.hitbox.com
127.0.0.1 ehg-northjerseymediagroup.hitbox.com
127.0.0.1 ehg-nvidia.hitbox.com
127.0.0.1 ehg-orangecountyregister.hitbox.com
127.0.0.1 ehg-oreilly.hitbox.com
127.0.0.1 ehg-pcsecurityshield.hitbox.com
127.0.0.1 ehg-pennwell.hitbox.com
127.0.0.1 ehg-pharmacia.hitbox.com
127.0.0.1 ehg-pizzahut.hitbox.com
127.0.0.1 ehg-proflowers.hitbox.com
127.0.0.1 ehg-randomhouse.hitbox.com
127.0.0.1 ehg-redherring.hitbox.com
127.0.0.1 ehg-rodale.hitbox.com
127.0.0.1 ehg-salonmedia.hitbox.com
127.0.0.1 ehg-samsungusa.hitbox.com
127.0.0.1 ehg-schwannssales.hitbox.com
127.0.0.1 ehg-sharpelectronic.hitbox.com
127.0.0.1 ehg-shoes.hitbox.com
127.0.0.1 ehg-shopathome.hitbox.com
127.0.0.1 ehg-silverpop.hitbox.com
127.0.0.1 ehg-sixapart.hitbox.com
127.0.0.1 ehg-sonyelec.hitbox.com
127.0.0.1 ehg-sonyesolutions.hitbox.com
127.0.0.1 ehg-sonyeu.hitbox.com
127.0.0.1 ehg-sonyny.hitbox.com
127.0.0.1 ehg-speakeasy.hitbox.com
127.0.0.1 ehg-stampsdotcom.hitbox.com
127.0.0.1 ehg-studentuniverse.hitbox.com
127.0.0.1 ehg-suite101.hitbox.com
127.0.0.1 ehg-superwarehouse.hitbox.com
127.0.0.1 ehg-systemax.hitbox.com
127.0.0.1 ehg-techtarget.hitbox.com
127.0.0.1 ehg-tempurpedic.hitbox.com
127.0.0.1 ehg-tfl.hitbox.com
127.0.0.1 ehg-thegazette.hitbox.com
127.0.0.1 ehg-theheritagefoundation.hitbox.com
127.0.0.1 ehg-theviptour.hitbox.com
127.0.0.1 ehg-thomas.hitbox.com
127.0.0.1 ehg-ti.hitbox.com
127.0.0.1 ehg-tigerdirect2.hitbox.com
127.0.0.1 ehg-timeinc.hitbox.com
127.0.0.1 ehg-tmgolf.hitbox.com
127.0.0.1 ehg-toditocorp.hitbox.com
127.0.0.1 ehg-topps.hitbox.com
127.0.0.1 ehg-traderpublishing.hitbox.com
127.0.0.1 ehg-traderelectronicmedia.hitbox.com
127.0.0.1 ehg-twi.hitbox.com
127.0.0.1 ehg-ubid.hitbox.com
127.0.0.1 ehg-ubisoft.hitbox.com
127.0.0.1 ehg-uniontrib.hitbox.com
127.0.0.1 ehg-veohnetworksinc.hitbox.com
127.0.0.1 ehg-viacom.hitbox.com
127.0.0.1 ehg-vonage.hitbox.com
127.0.0.1 ehg-wachovia.hitbox.com
127.0.0.1 ehg-warnerbrothers.hitbox.com
127.0.0.1 ehg-webchutney.hitbox.com
127.0.0.1 ehg-websense.hitbox.com
127.0.0.1 ehg-wsseurope.hitbox.com
127.0.0.1 ehg-wetseal.hitbox.com
127.0.0.1 ehg-wizardsofthecoast.hitbox.com
127.0.0.1 ehg-worldvision.hitbox.com
127.0.0.1 ehg-xandria.hitbox.com
127.0.0.1 ehg-y2m.hitbox.com
127.0.0.1 ehg-yakpak.hitbox.com
127.0.0.1 ehg-zazzle.hitbox.com
127.0.0.1 ehg-zentropypartners.hitbox.com
127.0.0.1 ehg-zoom.hitbox.com
127.0.0.1 evwr.hitbox.com
127.0.0.1 get.hitbox.com
127.0.0.1 hitboxcentral.com
127.0.0.1 ias.hitbox.com
127.0.0.1 ibg.hitbox.com
127.0.0.1 ics.hitbox.com
127.0.0.1 js1.hitbox.com
127.0.0.1 phg.hitbox.com
127.0.0.1 resources.hitbox.com
127.0.0.1 rd1.hitbox.com
127.0.0.1 sitesearch.hitbox.com
127.0.0.1 stats.hitbox.com
127.0.0.1 tools.hitbox.com
127.0.0.1 tools2.hitbox.com
127.0.0.1 vwr1.hitbox.com
127.0.0.1 vwr2.hitbox.com
127.0.0.1 vwr3.hitbox.com
127.0.0.1 w1.hitbox.com
127.0.0.1 w2.hitbox.com
127.0.0.1 w3.hitbox.com
127.0.0.1 w4.hitbox.com
127.0.0.1 w6.hitbox.com
127.0.0.1 w7.hitbox.com
127.0.0.1 w8.hitbox.com
127.0.0.1 w9.hitbox.com
127.0.0.1 w10.hitbox.com
127.0.0.1 w11.hitbox.com
127.0.0.1 w12.hitbox.com
127.0.0.1 w13.hitbox.com
127.0.0.1 w14.hitbox.com
127.0.0.1 w15.hitbox.com
127.0.0.1 w16.hitbox.com
127.0.0.1 w17.hitbox.com
127.0.0.1 w18.hitbox.com
127.0.0.1 w19.hitbox.com
127.0.0.1 w20.hitbox.com
127.0.0.1 w21.hitbox.com
127.0.0.1 w22.hitbox.com
127.0.0.1 w23.hitbox.com
127.0.0.1 w24.hitbox.com
127.0.0.1 w25.hitbox.com
127.0.0.1 w26.hitbox.com
127.0.0.1 w27.hitbox.com
127.0.0.1 w28.hitbox.com
127.0.0.1 w29.hitbox.com
127.0.0.1 w30.hitbox.com
127.0.0.1 w31.hitbox.com
127.0.0.1 w32.hitbox.com
127.0.0.1 w33.hitbox.com
127.0.0.1 w101.hitbox.com
127.0.0.1 w117.hitbox.com
127.0.0.1 w118.hitbox.com
127.0.0.1 w119.hitbox.com
127.0.0.1 w120.hitbox.com
127.0.0.1 ww2.hitbox.com
127.0.0.1 ww3.hitbox.com
127.0.0.1 wwa.hitbox.com
127.0.0.1 wwc.hitbox.com
127.0.0.1 wwd.hitbox.com
127.0.0.1 www.hitbox.com
127.0.0.1 statmarket.com
127.0.0.1 stats.statmarket.com
127.0.0.1 websidestory.com
127.0.0.1 support.websidestory.com
127.0.0.1 dce.nextstat.com
127.0.0.1 bill.dce.nextstat.com
127.0.0.1 hits.nextstat.com
127.0.0.1 randy.dce.nextstat.com
127.0.0.1 adserver.webstat.com
127.0.0.1 euroseek.com
127.0.0.1 www.euroseek.com
127.0.0.1 www.euroseek.net
127.0.0.1 usseek.com
127.0.0.1 www.usseek.com
127.0.0.1 www.uslocalweather.com
127.0.0.1 www.wsel.net
127.0.0.1 www.whistlesoftware.com
127.0.0.1 webconnect.net
127.0.0.1 wexchange.webconnect.net
127.0.0.1 remote.webconnect.net
127.0.0.1 reporting.webconnect.net
127.0.0.1 secure.webconnect.net
127.0.0.1 www.worldata.com
127.0.0.1 a1964.g.akamai.net
127.0.0.1 www.crunchgames.com
127.0.0.1 www.crunchtoolbar.com
127.0.0.1 getweathercast.com
127.0.0.1 pricebandit.com
127.0.0.1 akapp.whenu.com
127.0.0.1 akdwl.whenu.com
127.0.0.1 akweb.whenu.com
127.0.0.1 app.whenu.com
127.0.0.1 bidtxt.whenu.com
127.0.0.1 chromium.whenu.com
127.0.0.1 clock.whenu.com
127.0.0.1 download.whenu.com
127.0.0.1 mercury.whenu.com
127.0.0.1 spapp.whenu.com
127.0.0.1 spweather.whenu.com
127.0.0.1 tin.whenu.com
127.0.0.1 titanium.whenu.com
127.0.0.1 web.whenu.com
127.0.0.1 weather.whenu.com
127.0.0.1 zinc.whenu.com
127.0.0.1 whenushop.whenu.com
127.0.0.1 www.whenudownloads.com
127.0.0.1 www.whenu.com.edgesuite.net
127.0.0.1 server1.103092804.com
127.0.0.1 server2.103092804.com
127.0.0.1 server3.103092804.com
127.0.0.1 ads345.com
127.0.0.1 www.ads345.com
127.0.0.1 ftp.adsrve.com
127.0.0.1 server1.adsrve.com
127.0.0.1 server3.adsrve.com
127.0.0.1 server4.adsrve.com
127.0.0.1 www.contextualchoice.com
127.0.0.1 www.getmaxspeed.com
127.0.0.1 a1.interclick.com
127.0.0.1 www.interclick.com
127.0.0.1 www.spiderpilot.com
127.0.0.1 www.turbodownload.net
127.0.0.1 www.wildarcade.com
127.0.0.1 www.beautifulworldsavers.com
127.0.0.1 www.custommotorcyclesavers.com
127.0.0.1 www.getsafeguard.com
127.0.0.1 www.sexybikinisavers.com
127.0.0.1 gmail.com.org
127.0.0.1 lycos.com.org
127.0.0.1 orbitcycle.com
127.0.0.1 banners.orbitcycle.com
127.0.0.1 shagorgag.orbitcycle.com
127.0.0.1 www.orbitcycle.com
127.0.0.1 www.shops.com
127.0.0.1 www.trips.com
127.0.0.1 www.wish7.com
127.0.0.1 your.wishbone.com
127.0.0.1 wapd.wishbone.com
127.0.0.1 www.wishbone.com
127.0.0.1 www.yeah.com
127.0.0.1 www.your.com
127.0.0.1 adfeat.com
127.0.0.1 adleads.com
127.0.0.1 images.adleads.com
127.0.0.1 net.adleads.com
127.0.0.1 www.makeavatars.com
127.0.0.1 wizteen.com
127.0.0.1 www.wizclick.net
127.0.0.1 ads-aa.wunderground.com
127.0.0.1 ads3.wunderground.com
127.0.0.1 as5000.wunderground.com
127.0.0.1 server.as5000.com
127.0.0.1 server2.as5000.com
127.0.0.1 chip.ivwbox.de
127.0.0.1 ciao.ivwbox.de
127.0.0.1 gmx.ivwbox.de
127.0.0.1 heise.ivwbox.de
127.0.0.1 kabel1.ivwbox.de
127.0.0.1 lycos.ivwbox.de
127.0.0.1 mclient.ivwbox.de
127.0.0.1 mp3world.ivwbox.de
127.0.0.1 msn.ivwbox.de
127.0.0.1 ntv.ivwbox.de
127.0.0.1 pro7.ivwbox.de
127.0.0.1 rtl.ivwbox.de
127.0.0.1 sat1.ivwbox.de
127.0.0.1 spiegel.ivwbox.de
127.0.0.1 sport1.ivwbox.de
127.0.0.1 sueddeut.ivwbox.de
127.0.0.1 swr.ivwbox.de
127.0.0.1 tagessch.ivwbox.de
127.0.0.1 toi.ivwbox.de
127.0.0.1 webdessl.ivwbox.de
127.0.0.1 wetter.ivwbox.de
127.0.0.1 wetteronl.ivwbox.de
127.0.0.1 yahoo.ivwbox.de
127.0.0.1 zdf.ivwbox.de
127.0.0.1 www.301c.com
127.0.0.1 qksrv.growhope.com
127.0.0.1 www.growhope.com
127.0.0.1 urm.lxsystems.com
127.0.0.1 web.lxsystems.com
127.0.0.1 www.peerimpact.com
127.0.0.1 ins.rdxrp.com
127.0.0.1 www.wurldmedia.net
127.0.0.1 contest.x10.com
127.0.0.1 ftp.x10.com
127.0.0.1 graphics.x10.com
127.0.0.1 images.x10.com
127.0.0.1 site.x10.com
127.0.0.1 software.x10.com
127.0.0.1 store.x10.com
127.0.0.1 x10-beta.com
127.0.0.1 x10.com
127.0.0.1 www.x10.com
127.0.0.1 pic.geocities.com
127.0.0.1 visit.geocities.com
127.0.0.1 cm.cbsnews.overture.com
127.0.0.1 cm.ibs.overture.com
127.0.0.1 cmhtml.cbsnews.overture.com
127.0.0.1 cmhtml.de.overture.com
127.0.0.1 cmxml.nationalgeo.overture.com
127.0.0.1 cmhtml.revenuescience.overture.com
127.0.0.1 cmhtml.uk.overture.com
127.0.0.1 cmhtml.vendare.overture.com
127.0.0.1 data2.perf.overture.com
127.0.0.1 data4.perf.overture.com
127.0.0.1 dmxml.smartname.overture.com
127.0.0.1 html.overture.com
127.0.0.1 perf.overture.com
127.0.0.1 ypn-100.overture.com
127.0.0.1 clicksor.com
127.0.0.1 ads.clicksor.com
127.0.0.1 main.clicksor.com
127.0.0.1 mci12.clicksor.com
127.0.0.1 search.clicksor.com
127.0.0.1 track.clicksor.com
127.0.0.1 www.e-mailpromotion.com
127.0.0.1 goadbar.com
127.0.0.1 www.infinityads.com
127.0.0.1 www1.multipops.com
127.0.0.1 www2.multipops.com
127.0.0.1 www.multipops.com
127.0.0.1 service.multi-pops.com
127.0.0.1 gopopup.com
127.0.0.1 www.gopopup.com
127.0.0.1 banner.paypopup.com
127.0.0.1 central.paypopup.com
127.0.0.1 central2.paypopup.com
127.0.0.1 creative.paypopup.com
127.0.0.1 popunder.paypopup.com
127.0.0.1 www1.paypopup.com
127.0.0.1 www3.paypopup.com
127.0.0.1 www4.paypopup.com
127.0.0.1 www5.paypopup.com
127.0.0.1 www6.paypopup.com
127.0.0.1 www7.paypopup.com
127.0.0.1 www8.paypopup.com
127.0.0.1 www10.paypopup.com
127.0.0.1 www20.paypopup.com
127.0.0.1 www210.paypopup.com
127.0.0.1 www211.paypopup.com
127.0.0.1 www212.paypopup.com
127.0.0.1 www213.paypopup.com
127.0.0.1 www214.paypopup.com
127.0.0.1 www215.paypopup.com
127.0.0.1 www216.paypopup.com
127.0.0.1 www217.paypopup.com
127.0.0.1 www218.paypopup.com
127.0.0.1 www219.paypopup.com
127.0.0.1 www220.paypopup.com
127.0.0.1 www221.paypopup.com
127.0.0.1 www.popinads.com
127.0.0.1 www.xxxwebtraffic.com
127.0.0.1 yesadvertising.com
127.0.0.1 test.yesadvertising.com
127.0.0.1 www1.yesadvertising.com
127.0.0.1 www3.yesadvertising.com
127.0.0.1 www4.yesadvertising.com
127.0.0.1 www5.yesadvertising.com
127.0.0.1 www6.yesadvertising.com
127.0.0.1 www7.yesadvertising.com
127.0.0.1 www8.yesadvertising.com
127.0.0.1 www9.yesadvertising.com
127.0.0.1 www10.yesadvertising.com
127.0.0.1 www11.yesadvertising.com
127.0.0.1 www12.yesadvertising.com
127.0.0.1 www13.yesadvertising.com
127.0.0.1 www14.yesadvertising.com
127.0.0.1 www15.yesadvertising.com
127.0.0.1 www215.yesadvertising.com
127.0.0.1 www216.yesadvertising.com
127.0.0.1 www217.yesadvertising.com
127.0.0.1 www218.yesadvertising.com
127.0.0.1 www219.yesadvertising.com
127.0.0.1 www220.yesadvertising.com
127.0.0.1 www221.yesadvertising.com
127.0.0.1 yesup.com
127.0.0.1 bt.yesup.com
127.0.0.1 reseller.yesup.com
127.0.0.1 us.yesup.com
127.0.0.1 www2.yesup.com
127.0.0.1 www.yesup.com
127.0.0.1 forum.yesup.net
127.0.0.1 www.yesup.net
127.0.0.1 yourstats.net
127.0.0.1 www.yourstats.net
127.0.0.1 ap.net-blue.net
127.0.0.1 images.dp.yfdirect.com
127.0.0.1 path.yfdirect.com
127.0.0.1 www.p3marketing.com
127.0.0.1 c3.zedo.com
127.0.0.1 c5.zedo.com
127.0.0.1 c6.zedo.com
127.0.0.1 c7.zedo.com
127.0.0.1 freeze.zedo.com
127.0.0.1 gw.zedo.com
127.0.0.1 l2.zedo.com
127.0.0.1 l3.zedo.com
127.0.0.1 l5.zedo.com
127.0.0.1 l7.zedo.com
127.0.0.1 l8.zedo.com
127.0.0.1 ss1.zedo.com
127.0.0.1 ss2.zedo.com
127.0.0.1 xads.zedo.com
127.0.0.1 adserver.affiliatemg.com
127.0.0.1 amaena.com
127.0.0.1 www.amxtravel.com
127.0.0.1 www.antivirus-comparison.com
127.0.0.1 www.antivirusproshop.com
127.0.0.1 ads2desk.com
127.0.0.1 www.bestofonlinesearch.com
127.0.0.1 www.bestsearchnet.com
127.0.0.1 betbonus.com
127.0.0.1 www.betbonus.com
127.0.0.1 www.billingcomplete.com
127.0.0.1 secure.billingnow.com
127.0.0.1 www.billingnow.com
127.0.0.1 stats.bookmyfares.com
127.0.0.1 www.bookmyfares.com
127.0.0.1 www.cannis.org
127.0.0.1 www.casinoaceking.com
127.0.0.1 www.clickwwwsearch.com
127.0.0.1 www.completebilling.com
127.0.0.1 www.computershield.com
127.0.0.1 www.creditsecretguide.com
127.0.0.1 drivecleaner.com
127.0.0.1 dynamique.drivecleaner.com
127.0.0.1 secure.drivecleaner.com
127.0.0.1 www.driveprotector.com
127.0.0.1 www.enhanceyourbust.com
127.0.0.1 www.epinioncash.com
127.0.0.1 br.errorsafe.com
127.0.0.1 de.errorsafe.com
127.0.0.1 go.errorsafe.com
127.0.0.1 kb.errorsafe.com
127.0.0.1 nl.errorsafe.com
127.0.0.1 secure.errorsafe.com
127.0.0.1 www.ezmp3downloads.com
127.0.0.1 www.fileprotector.com
127.0.0.1 www.genericscanner.com
127.0.0.1 members.us.homecs.com
127.0.0.1 locator.imagesrvr.com
127.0.0.1 www.incrediseek.com
127.0.0.1 www.innovativemarketing.com
127.0.0.1 www.internetantispy.com
127.0.0.1 www.jobdrill.com
127.0.0.1 www.kpremium.com
127.0.0.1 www.maxkb.com
127.0.0.1 mp3u.com
127.0.0.1 download.mp3u.com
127.0.0.1 www.mp3u.com
127.0.0.1 www.mp3asap.com
127.0.0.1 www.mp3asap.net
127.0.0.1 www.multimediafixer.com
127.0.0.1 www.nortoncomparison.com
127.0.0.1 www.onestoponlineshop.net
127.0.0.1 tools.opensols.com
127.0.0.1 www.pcsupercharger.com
127.0.0.1 popupavenger.com
127.0.0.1 www.popupavenger.com
127.0.0.1 images.popupguard.com
127.0.0.1 www.popupguard.com
127.0.0.1 www.qualitysoftware.com
127.0.0.1 www.review-software.com
127.0.0.1 search42.com
127.0.0.1 www.search42.com
127.0.0.1 www.searchfindsearch.com
127.0.0.1 setupahost.net
127.0.0.1 noc.setupahost.net
127.0.0.1 www.setupahost.net
127.0.0.1 smileydistrict.com
127.0.0.1 ads.softwareoutfit.com
127.0.0.1 www.softwareprofit.com
127.0.0.1 www.symantecreview.com
127.0.0.1 sysprotect.com
127.0.0.1 download.sysprotect.com
127.0.0.1 scanner.sysprotect.com
127.0.0.1 utils.sysprotect.com
127.0.0.1 de.systemdoctor.com
127.0.0.1 es.systemdoctor.com
127.0.0.1 fr.systemdoctor.com
127.0.0.1 instlog.systemdoctor.com
127.0.0.1 www.tattoobleepes.com
127.0.0.1 www.theringtonesource.com
127.0.0.1 billing.vantagesoftware.com
127.0.0.1 www.viptravelagent.com
127.0.0.1 www.virusguard.com
127.0.0.1 www.virussoftwarereview.com
127.0.0.1 www.virussw.com
127.0.0.1 www.wantprofit.com
127.0.0.1 www.webinvestigator.com
127.0.0.1 go.winadblocker.com
127.0.0.1 secure.winadblocker.com
127.0.0.1 www.winadblocker.com
127.0.0.1 secure.winantispam.com
127.0.0.1 www.winantispam.com
127.0.0.1 secure.winantispy.com
127.0.0.1 www.winantispy.com
127.0.0.1 winantivirus.com
127.0.0.1 br.winantivirus.com
127.0.0.1 de.winantivirus.com
127.0.0.1 es.winantivirus.com
127.0.0.1 fr.winantivirus.com
127.0.0.1 go.winantivirus.com
127.0.0.1 kb.winantivirus.com
127.0.0.1 hk.winantivirus.com
127.0.0.1 in

Looks like my smitfraud.cmd report didn't past everything! Here's the final bit:

127.0.0.1 www.fpctraffic2.com
127.0.0.1 join4free.com
127.0.0.1 asians.join4free.com
127.0.0.1 apps.clickcash.com
127.0.0.1 www.clickcash.com
127.0.0.1 cc.webpower.com

»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files


»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» End

Please download HostsXpert from here
Unzip HostsXpert.zip
Open HostsXpert.exe
Then click on "Restore Microsoft's Host File", followed by OK at the prompt.
Close the program when complete.

Can you also try uninstalling Spybot and then re-installing it again for me. Then reboot your PC, if it asks about the changes, please allow them. Reboot a second time- hopefully you should not see these changes again.
Let me know if this works for you.
Thanks,
Charles

Hi Charles,

Well it looks as though WindowsFY is history. And after a Spybot reinstall, Spybot no longer detects (false?) registry changes. It also seems like I had a bad "Hosts" file wouldn't you say?

Now, how can I get a good uncorrupted hosts file? The one replaced by "HostsXpert" has no sites listed to avoid. It appears to be a generic Microsoft file with no content. The Hosts file that I had been using was I believe from the MVPS site: http://www.mvps.org/winhelp2002/hosts.txt

Can you recommend an alternate hosts file? Or is MVPS an acceptable source ......... and my Hosts file was likely corrupted somehow AFTER I downloaded it from MVPS?

Dennise

You Hosts file was quite badly affected by the malware you had on your computer, but the various tools we ran helped to get rid of them.
MVPS is the hosts file that we generally recommend to download, so it would be a good idea to use that one. A tutorial about hosts files and using the MVPS hosts file can be found here.

Now that you're free from malware, please follow these simple steps to decrease the likelihood of getting re-infected again:

Set your system to not show all files.
Navigate to Start | My Computer | Tools | Folder Options.
Select the View tab. Under the "Hidden Files and Folders" heading, select "Show hidden files and folders".
Check: Hide file extensions for known file types
Check the Hide protected operating system files (recommended) option.
Click Yes to confirm.

Please navigate to http://windowsupdate.microsoft.com and download all the "critical updates" for Windows. This can patch many of the security holes through which attackers can gain access to your computer.
Either enable 'Automatic Updates' under Start | Control Panel | Automatic Updates, or get into the habit of checking for Windows updates regularly. I cannot stress enough how important this is.

In order to protect yourself against spyware, you should consider installing and running the following free programs:
Ad-Aware SE
A tutorial on using Ad-Aware to remove spyware from your computer may be found here.
Spybot-Search & Destroy
A tutorial on using Spybot to remove spyware from your computer may be found here. Please also remember to enable Spybot's "Immunize" and "TeaTimer" features.
SpywareBlaster
A tutorial on using SpywareBlaster to prevent spyware from ever installing on your computer may be found here.
Make sure to keep these programs up-to-date and to run them regularly, as this can prevent a great deal of spyware hassle.

Please also read Tony Klein's excellent article: How I got Infected in the First Place
If, of course, you encounter any more problems, please let me know and I'll try my best to sort them out for you.
Thanks and happy computing,
Charles

Thanks Charles,

All's well and WindowsFY is "out of there".

Now I have to figure out how to get my wifi working with WEP encryption .......... but that's another problem.

Dennise

I suggest you post that in one of the other forums, the experts there will be able to help you better than I can

Since this issue appears resolved, this topic is now closed.

If you need this topic reopened, please request this by sending me a Personal Message including a link to your thread.
This applies only to the original topic starter.

Everyone else please begin a New Topic.