Windows Security Alert / Fake Spyware Applications

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Forum Guidelines

Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.

Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help

Posted Image

Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic will be looked at and responded to. So please be patient.

Posted Image

DO NOT RUN ComboFix unless requested to.

Posted Image

Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log.

Posted Image

When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc.

Posted Image

Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.

Page 1 of 1

You cannot start a new topic
This topic is locked

Windows Security Alert / Fake Spyware Applications An Active X program started problems.

#1 Nekoyasha

Member

Group: Members
Posts: 31
Joined: 12-April 07
Location:Sumter SC, USA

Posted 12 April 2007 - 09:36 PM

I downloaded some sort of "Video ActiveX Object 7.02" After downloaded this problems started appearing on my computer including a program called Windows Safety Alert that created a icon in my taskbar that will periodically say that I have spyware on my computer. "System Alert!" is what it says. I followed instructions on http://www.pchell.com/support/spylocked.shtml which included using HijackThis and I admit I was a little confused, but the problem is still on my computer after I followed instructions. Here are my HijackThis logs.

Logfile of HijackThis v1.99.1
Scan saved at 9:46:25 PM, on 4/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\system32\cleanmgr.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://us9.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AutoTKit] C:\hp\bin\AUTOTKIT.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickFinder Scheduler] "c:\Program Files\WordPerfect Office 11\Programs\QFSCHD110.EXE"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\Hewlett-Packard\Digital Imaging\bin\backupnotify.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [RealPlayer] "C:\Program Files\Real\RealOne Player\realplay.exe" /RunUPGToolCommandReBoot
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Motorola Wireless USB Adapter.lnk = ?
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: OPXPGina - C:\Program Files\Softex\OmniPass\opxpgina.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv.exe
O23 - Service: Ventrilo - Unknown owner - C:\Program Files\VentSrv\ventrilo_svc.exe
O23 - Service: Windows Network Log Manage - Unknown owner - C:\Program Files\Common Files\Microsoft Shared\MSInfo\Network.exe

I thank all who help me and beforehand I would like to say forgive me if I ask some stupid question. It happens to me a lot and I usually just need someone to say the obvious to me. Although I still live by my motto
"What I say is sealed in my words." or a variant of that. (I have it written down, trust me.)

#2 RichieUK

Malware Assassin

Group: Malware Response Team
Posts: 13,612
Joined: 13-July 06

Posted 13 April 2007 - 03:38 AM

Welcome to the BleepingComputer HijackThis forum Nekoyasha :thumbsup:

Please download DrWeb-CureIt & save it to your desktop. DO NOT perform a scan yet.

You should copy/print the following because you need to be in Safe Mode from here on.

Reboot your computer into SAFE MODE using the F8 method.
To do this,restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly.
A menu will appear with several options.
Use the arrow keys on your keyboard to navigate and select the option to run Windows in "Safe Mode".

Scan with DrWeb-CureIt as follows:
* Double-click on drweb-cureit.exe to start the program. An "Express Scan of your PC" notice will appear.
* Under "Start the Express Scan Now", Click "OK" to start. This is a short scan that will scan the files currently running in memory and when something is found, click the Yes button when it asks you if you want to cure it.
* Once the short scan has finished, Click Options > Change settings
* Choose the "Scan tab" and UNcheck "Heuristic analysis"
* Back at the main window, click "Select drives" (a red dot will show which drives have been chosen)
* Then click the "Start/Stop Scanning" button (green arrow on the right) and the scan will start.
* When done, a message will be displayed at the bottom advising if any viruses were found.
* Click "Yes to all" if it asks if you want to cure/move the file.
* When the scan has finished, look if you can see the icon next to the files found. If so, click it, then click the next icon right below and select "Move incurable".
(This will move it to the C:\Documents and Settings\userprofile\DoctorWeb\Quarantine folder if it can't be cured)
* Next, in the Dr.Web CureIt menu on top, click file and choose save report list.
* Save the DrWeb.csv report to your desktop.
* Exit Dr.Web Cureit when done.
* Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.
* After reboot, post the contents of the log from Dr.Web in your next reply. (You can use Notepad to open the DrWeb.cvs report)

*****************************

Download SmitfraudFix (by S!Ri), to your desktop.
Double click on Smitfraudfix.cmd
Select option #1 – Search, by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

*****************************

Launch HJThis,click 'Open the Misc Tools Section'.
Click 'Open Uninstall Manager'.
Click on 'Save List',save it to your desktop.
Copy and paste the content of that list into your next reply please.

Also post a new Hijackthis log please.

#3 Nekoyasha

Member

Group: Members
Posts: 31
Joined: 12-April 07
Location:Sumter SC, USA

Posted 13 April 2007 - 08:01 AM

Report from DrWeb
Process.exe;C:\Documents and Settings\Owner\Desktop\SmitfraudFix;Tool.Prockill;Incurable.Moved.;

SmitFraud Report
SmitFraudFix v2.166

Scan done at 9:00:38.03, Fri 04/13/2007
Run from C:\Documents and Settings\Owner\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\Program Files\VentSrv\ventrilo_svc.exe
C:\Program Files\VentSrv\ventrilo_srv.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\WINDOWS\System32\igfxtray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\rnathchk.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
C:\Program Files\Motorola Wireless\WU830G USB Adapter\OdHost.exe
C:\Program Files\Motorola Wireless\WU830G USB Adapter\WLUSBCfg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts

hosts file corrupted !

# [MICROSOFT.COM]

»»»»»»»»»»»»»»»»»»»»»»»» C:\

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Owner

»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Owner\Application Data

»»»»»»»»»»»»»»»»»»»»»»»» Start Menu

»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Owner\FAVORI~1

»»»»»»»»»»»»»»»»»»»»»»»» Desktop

»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys

»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{abef791f-947e-4cdf-83c3-e72a240afb67}"="frisbee"

[HKEY_CLASSES_ROOT\CLSID\{abef791f-947e-4cdf-83c3-e72a240afb67}\InProcServer32]
@="C:\WINDOWS\system32\ygjun.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{abef791f-947e-4cdf-83c3-e72a240afb67}\InProcServer32]
@="C:\WINDOWS\system32\ygjun.dll"

»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32-huy32

»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Motorola Wireless USB Adapter WU830G - Packet Scheduler Miniport
DNS Server Search Order: 24.25.5.150
DNS Server Search Order: 24.25.5.149

HKLM\SYSTEM\CCS\Services\Tcpip\..\{82C7938B-B58A-463A-BC6A-896FF4C33B7C}: DhcpNameServer=24.25.5.150 24.25.5.149
HKLM\SYSTEM\CS1\Services\Tcpip\..\{82C7938B-B58A-463A-BC6A-896FF4C33B7C}: DhcpNameServer=24.25.5.150 24.25.5.149
HKLM\SYSTEM\CS2\Services\Tcpip\..\{82C7938B-B58A-463A-BC6A-896FF4C33B7C}: DhcpNameServer=24.25.5.150 24.25.5.149
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=24.25.5.150 24.25.5.149
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=24.25.5.150 24.25.5.149
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=24.25.5.150 24.25.5.149

»»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection

»»»»»»»»»»»»»»»»»»»»»»»» End

Unistall List
µTorrent
7-Zip 4.42
Adobe Flash Player 9 ActiveX
Adobe Reader 7.0.9
BESMCG 2
Blackhawk Striker from Hewlett-Packard Desktops (remove only)
Blasterball 2 from Hewlett-Packard Desktops (remove only)
Bounce from Hewlett-Packard Desktops (remove only)
Cannonballs from Hewlett-Packard Desktops (remove only)
CCleaner (remove only)
DivX Codec
DivX Content Uploader
DivX Converter
DivX Player
DivX Web Player
Excavation from Hewlett-Packard Desktops (remove only)
Five Card Frenzy from Hewlett-Packard Desktops (remove only)
FLV Player 1.3.3
GemMaster 3 from Hewlett-Packard Desktops (remove only)
HijackThis 1.99.1
Honeycombs from Hewlett-Packard Desktops (remove only)
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB935448)
HP Deskjet Preloaded Printer Drivers
HP Instant Support
HP Organize
HP Photo & Imaging 3.0
HP Photo and Imaging 2.0 - Photosmart Cameras
HP Software Update
HPImageZone
Intel® Extreme Graphics Driver
IntelliMover Data Transfer Demo
iTunes
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 8
Java 2 Runtime Environment, SE v1.4.1_02
Java Web Start
KBD
LAN-Express IEEE 802.11b WLAN
LimeWire 4.12.6
LiveReg (Symantec Corporation)
LiveUpdate 1.80 (Symantec Corporation)
MapleStory
Mars Rover from Hewlett-Packard Desktops (remove only)
Memories Disc Creator 2.0
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft .NET Framework 2.0
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Money 2003
Microsoft Money 2003 System Pack
Microsoft National Language Support Downlevel APIs
Microsoft Plus! Digital Media Edition
Microsoft Protection Service
Microsoft Visual J# .NET Redistributable Package 1.1
Microsoft Windows Live OneCare Resources v1.5.1890.30
Microsoft Windows OneCare Live AntiSpyware and AntiVirus
Microsoft Windows OneCare Live v1.5.1890.26 Idcrl Install
Microsoft Windows OneCare Live v1.5.1890.30
Microsoft Works 7.0
mIRC
Motorola Wireless USB Adapter
Mozilla Firefox (2.0.0.3)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 Parser and SDK
MUSICMATCH® Jukebox
NVIDIA Gart Driver
NVIDIA Windows 2000/XP Display Drivers
Odyssey Client
OmniPass
Orbital from Hewlett-Packard Desktops (remove only)
Otto from Hewlett-Packard Desktops (remove only)
PC-Doctor for Windows
Photosmart 140,240,7200,7600,7700,7900 Series
Pokémon Project Studio Blue
Polar Bowler from Hewlett-Packard Desktops (remove only)
PS2
PX Engine
Python 2.2 combined Win32 extensions
Python 2.2.1
Quicken 2003 New User Edition
QuickTime
RealOne Player
RecordNow!
RogueRemover 1.15
S3Display
S3Gamma2
S3Info2
S3Overlay
Security Update for Microsoft .NET Framework 2.0 (KB917283)
Security Update for Microsoft .NET Framework 2.0 (KB922770)
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 9 (KB917734)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928090)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Slyder from Hewlett-Packard Desktops (remove only)
Snes9x
Sonic Update Manager
SpamSubtract
STX from Hewlett-Packard Desktops (remove only)
toolkit
Total Video Converter 3.10
TUGZip 3.4
Ultra Flash Video FLV Converter 2.0.2
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB908531)
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Update for Windows XP (KB914882)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB929338)
Update for Windows XP (KB931836)
Updates from HP
Ventrilo Client
Ventrilo Server
Virtual Warfare from Hewlett-Packard Desktops (remove only)
Weblink
Windows Defender
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live Messenger
Windows Live OneCare
Windows Media Format Runtime
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
Windows XP Service Pack 2
WordPerfect Office 11
World of Warcraft
Yahoo! Browser Services
Yahoo! Install Manager
Yahoo! Internet Mail
Yahoo! Messenger
Yahoo! Toolbar

Hijackthis log
Logfile of HijackThis v1.99.1
Scan saved at 9:04:57 AM, on 4/13/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\Program Files\VentSrv\ventrilo_svc.exe
C:\Program Files\VentSrv\ventrilo_srv.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\WINDOWS\System32\igfxtray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\rnathchk.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
C:\Program Files\Motorola Wireless\WU830G USB Adapter\OdHost.exe
C:\Program Files\Motorola Wireless\WU830G USB Adapter\WLUSBCfg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://us9.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AutoTKit] C:\hp\bin\AUTOTKIT.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickFinder Scheduler] "c:\Program Files\WordPerfect Office 11\Programs\QFSCHD110.EXE"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\Hewlett-Packard\Digital Imaging\bin\backupnotify.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [RealPlayer] "C:\Program Files\Real\RealOne Player\realplay.exe" /RunUPGToolCommandReBoot
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Motorola Wireless USB Adapter.lnk = ?
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: OPXPGina - C:\Program Files\Softex\OmniPass\opxpgina.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv.exe
O23 - Service: Ventrilo - Unknown owner - C:\Program Files\VentSrv\ventrilo_svc.exe
O23 - Service: Windows Network Log Manage - Unknown owner - C:\Program Files\Common Files\Microsoft Shared\MSInfo\Network.exe

This post has been edited by Nekoyasha: 13 April 2007 - 08:08 AM

#4 RichieUK

Malware Assassin

Group: Malware Response Team
Posts: 13,612
Joined: 13-July 06

Posted 13 April 2007 - 08:08 AM

Reboot your computer into SAFE MODE using the F8 method.
To do this,restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly.
A menu will appear with several options.
Use the arrow keys on your keyboard to navigate and select the option to run Windows in "Safe Mode".

Double click on Smitfraudfix.cmd
Select #2 and hit Enter to delete the infected files.
You will be prompted: 'Do you want to clean the registry?' answer Y (yes) and hit Enter in order to remove the Desktop background and clean registry keys associated with the infection.
The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found): 'Replace infected file ?' answer Y (yes) and hit Enter to restore a clean file.
A reboot may be needed to finish the cleaning process.
The report can be found at the root of the system drive, usually at C:\rapport.txt

Post the smitfraudfix report into your next reply.

*****************************

Please download Combofix and save to the desktop:
http://download.bleepingcomputer.com/sUBs/Beta/ComboFix.exe
Note:
It is important that it is saved directly to your desktop
Close any open browsers.
Double click on combofix.exe and follow the prompts.
When it's finished it will produce a log.
Post the Smitfraudfix report,the C:\ComboFix.txt,and a new Hijackthis log into your next reply.
Note:
Do not mouseclick combofix's window whilst it's running.
That may cause the program to freeze/hang.

#5 Nekoyasha

Member

Group: Members
Posts: 31
Joined: 12-April 07
Location:Sumter SC, USA

Posted 13 April 2007 - 08:53 AM

ComboFix log
"Owner" - 07-04-13 9:19:41 Service Pack 2
ComboFix 07-04-13.Vik - Running from: C:\Documents and Settings\Owner\Desktop\

(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

C:\WINDOWS\hosts

((((((((((((((((((((((((((((((( Files Created from 2007-03-13 to 2007-04-13 ))))))))))))))))))))))))))))))))))

2007-04-13 08:44 53,248 --a------ C:\WINDOWS\system32\Process.exe
2007-04-13 05:59 <DIR> d-------- C:\DOCUME~1\Owner\DoctorWeb
2007-04-12 21:28 3,126 --a------ C:\WINDOWS\system32\tmp.reg
2007-04-12 21:06 <DIR> d-------- C:\Program Files\CCleaner
2007-04-12 20:59 <DIR> d-------- C:\Program Files\RogueRemover
2007-04-12 20:57 79,360 --a------ C:\WINDOWS\system32\swxcacls.exe
2007-04-12 20:57 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-04-12 20:57 40,960 --a------ C:\WINDOWS\system32\swsc.exe
2007-04-12 20:57 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-04-12 20:57 135,168 --a------ C:\WINDOWS\system32\swreg.exe
2007-04-12 19:55 <DIR> d-a------ C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
2007-04-12 19:54 <DIR> d-------- C:\Program Files\MW
2007-04-04 08:42 <DIR> d-------- C:\DOCUME~1\Parents\APPLIC~1\Apple Computer
2007-04-02 16:38 <DIR> d-------- C:\WINDOWS\network diagnostic
2007-04-01 18:32 <DIR> d-------- C:\Program Files\Total Video Converter
2007-04-01 18:05 135,168 --a------ C:\WINDOWS\system32\DSKernel2.dll
2007-04-01 18:05 1,936,528 --a------ C:\WINDOWS\system32\ltmm15.dll
2007-04-01 18:04 737,280 --a------ C:\WINDOWS\iun6002.exe
2007-04-01 18:03 <DIR> d-------- C:\Program Files\Replay Converter
2007-03-31 21:21 178,408 --a------ C:\WINDOWS\system32\muweb.dll
2007-03-31 21:21 127,208 --a------ C:\WINDOWS\system32\mucltui.dll
2007-03-31 19:59 81,024 --a------ C:\WINDOWS\system32\drivers\msfwdrv.sys
2007-03-31 19:58 105,856 --a------ C:\WINDOWS\system32\drivers\msfwhlpr.sys
2007-03-31 19:55 67,784 --a------ C:\WINDOWS\system32\drivers\MpFilter.sys
2007-03-31 09:50 <DIR> d-------- C:\Program Files\Any Video Converter
2007-03-30 17:27 <DIR> d-------- C:\Program Files\Microsoft Windows OneCare Live
2007-03-30 07:09 <DIR> d-------- C:\Program Files\MSXML 4.0
2007-03-30 07:08 <DIR> d-------- C:\95b6d85c015c416718fe0d001757
2007-03-29 19:32 <DIR> d-------- C:\Program Files\Windows Defender
2007-03-29 19:17 <DIR> d-------- C:\WINDOWS\Prefetch
2007-03-29 17:25 <DIR> d-------- C:\WINDOWS\provisioning
2007-03-29 17:25 <DIR> d-------- C:\WINDOWS\peernet
2007-03-29 17:18 <DIR> d-------- C:\WINDOWS\ServicePackFiles
2007-03-29 17:04 <DIR> d-------- C:\WINDOWS\EHome
2007-03-29 07:36 4,569 --------- C:\WINDOWS\system32\secupd.dat
2007-03-29 07:36 11,776 --------- C:\WINDOWS\system32\spnpinst.exe
2007-03-27 22:16 <DIR> d-------- C:\Program Files\BESMCG
2007-03-27 18:10 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
2007-03-23 00:00 28,672 --a------ C:\WINDOWS\system32\AVEQT.dll
2007-03-23 00:00 242,176 --a------ C:\WINDOWS\system32\fixflash.exe
2007-03-23 00:00 129,024 --a------ C:\WINDOWS\system32\AVERM.dll
2007-03-23 00:00 <DIR> d-------- C:\Program Files\Ultra Flash Video FLV Converter
2007-03-23 00:00 <DIR> d-------- C:\Program Files\Moyea
2007-03-23 00:00 <DIR> d-------- C:\DOCUME~1\Owner\APPLIC~1\MoyeaFLV2Video
2007-03-21 13:14 <DIR> d-------- C:\DOCUME~1\Parents\APPLIC~1\Sun
2007-03-18 10:24 <DIR> dr-h----- C:\DOCUME~1\Owner\APPLIC~1\yahoo!
2007-03-13 12:10 <DIR> dr-h----- C:\DOCUME~1\Parents\APPLIC~1\yahoo!
2007-03-13 09:57 <DIR> d-------- C:\DOCUME~1\Parents\APPLIC~1\uTorrent

(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-04-12 17:26 -------- d-------- C:\DOCUME~1\Owner\APPLIC~1\utorrent
2007-04-12 10:09 7680 --a-s---- C:\WINDOWS\system32\ygjun.dll
2007-04-03 21:04 -------- d-------- C:\Program Files\Common Files\wise installation wizard
2007-04-03 18:41 -------- d-------- C:\Program Files\easy internet signup
2007-04-03 07:09 -------- d-------- C:\Program Files\stepmania
2007-04-02 04:31 -------- d-------- C:\Program Files\Common Files\symantec shared
2007-04-02 04:30 -------- d-------- C:\Program Files\symantec
2007-04-01 18:29 -------- d-------- C:\Program Files\kazaa lite revolution
2007-04-01 11:57 -------- d-------- C:\Program Files\Common Files\installshield
2007-03-31 21:35 -------- d-------- C:\Program Files\norton antivirus
2007-03-31 21:31 -------- d-------- C:\Program Files\yahoo!
2007-03-30 23:06 -------- d-------- C:\Program Files\mplayer
2007-03-30 17:15 -------- d-------- C:\Program Files\messenger
2007-03-29 21:15 -------- d-------- C:\Program Files\msn messenger
2007-03-29 17:25 -------- d-------- C:\Program Files\movie maker
2007-03-29 17:17 -------- d-------- C:\Program Files\windows nt
2007-03-17 09:43 292864 --a------ C:\WINDOWS\system32\winsrv.dll
2007-03-16 23:05 -------- d-------- C:\Program Files\divx
2007-03-08 11:36 577536 --a------ C:\WINDOWS\system32\user32.dll
2007-03-08 11:36 40960 --a------ C:\WINDOWS\system32\mf3216.dll
2007-03-08 11:36 281600 --a------ C:\WINDOWS\system32\gdi32.dll
2007-03-08 09:47 1843584 --a------ C:\WINDOWS\system32\win32k.sys
2007-02-27 17:59 56 -r-hs---- C:\WINDOWS\system32\4224736dc0.sys
2007-02-25 00:46 -------- d-------- C:\Program Files\java web start
2007-02-24 08:46 -------- d-------- C:\Program Files\quicken
2007-02-24 08:46 -------- d-------- C:\Program Files\pc-doctor for windows
2007-02-24 08:46 -------- d-------- C:\Program Files\microsoft works
2007-02-24 08:46 -------- d-------- C:\Program Files\microsoft plus! digital media edition
2007-02-24 08:46 -------- d-------- C:\Program Files\limewire
2007-02-24 08:45 -------- d-------- C:\Program Files\intellimover data transfer demo
2007-02-24 08:45 -------- d-------- C:\Program Files\encarta online
2007-02-23 00:29 524288 --a------ C:\WINDOWS\system32\divxsm.exe
2007-02-23 00:29 36624 --------- C:\WINDOWS\system32\drivers\pxhelp20.sys
2007-02-23 00:29 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2007-02-23 00:29 200704 --a------ C:\WINDOWS\system32\ssldivx.dll
2007-02-23 00:29 129784 --------- C:\WINDOWS\system32\pxafs.dll
2007-02-23 00:29 118520 --------- C:\WINDOWS\system32\pxinsi64.exe
2007-02-23 00:29 116472 --------- C:\WINDOWS\system32\pxcpyi64.exe
2007-02-23 00:29 1044480 --a------ C:\WINDOWS\system32\libdivx.dll
2007-02-23 00:25 823296 --a------ C:\WINDOWS\system32\divx_xx0c.dll
2007-02-23 00:25 823296 --a------ C:\WINDOWS\system32\divx_xx07.dll
2007-02-23 00:25 802816 --a------ C:\WINDOWS\system32\divx_xx11.dll
2007-02-23 00:25 73728 --a------ C:\WINDOWS\system32\dpl100.dll
2007-02-23 00:25 639066 --a------ C:\WINDOWS\system32\divx.dll
2007-02-23 00:25 593920 --a------ C:\WINDOWS\system32\dpugui11.dll
2007-02-23 00:25 57344 --a------ C:\WINDOWS\system32\dpv11.dll
2007-02-23 00:25 53248 --a------ C:\WINDOWS\system32\dpugui10.dll
2007-02-23 00:25 344064 --a------ C:\WINDOWS\system32\dpus11.dll
2007-02-23 00:25 294912 --a------ C:\WINDOWS\system32\dpu11.dll
2007-02-23 00:25 294912 --a------ C:\WINDOWS\system32\dpu10.dll
2007-02-23 00:25 196608 --a------ C:\WINDOWS\system32\dtu100.dll
2007-02-17 12:55 -------- d-------- C:\Program Files\techsmith
2007-02-16 22:21 -------- d-------- C:\Program Files\world of warcraft
2007-02-15 21:40 124472 --a------ C:\WINDOWS\system32\divxcodecupdatechecker.exe
2007-02-15 12:15 296 --a------ C:\WINDOWS\ereg077.dat
2007-02-15 12:00 -------- d-------- C:\Program Files\the learning company
2007-02-07 00:21 147495 --a------ C:\WINDOWS\system32\rmocx.dll
2007-02-05 16:17 185344 --a------ C:\WINDOWS\system32\upnphost.dll
2007-02-05 10:12 61678 --a------ C:\DOCUME~1\Owner\APPLIC~1\pfp110jpr.{pb
2007-02-05 10:12 12358 --a------ C:\DOCUME~1\Owner\APPLIC~1\pfp110jcm.{pb
2007-02-04 13:33 4096 --a------ C:\WINDOWS\d3dx.dat
2007-01-25 22:01 216064 --a------ C:\WINDOWS\iun3405.exe
2007-01-19 13:53 51056 --a------ C:\WINDOWS\system32\sirenacm.dll
2007-01-14 18:24 3603 --a------ C:\WINDOWS\viassary-hp.reg
2007-01-14 16:11 1168 --a------ C:\WINDOWS\mozver.dat
2007-01-14 15:54 0 --a------ C:\WINDOWS\nsreg.dat
2007-01-14 12:21 21840 --a----t- C:\WINDOWS\system32\sintfnt.dll
2007-01-14 12:21 17212 --a----t- C:\WINDOWS\system32\sintf32.dll
2007-01-14 12:21 12067 --a----t- C:\WINDOWS\system32\sintf16.dll
2007-01-13 16:51 0 --a------ C:\WINDOWS\system32\ialmcoin.dll

(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{02478D38-C3F9-4EFB-9B51-7695ECA05670} C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
{243B17DE-77C7-46BF-B94B-0B5F309A0E64} C:\Program Files\Microsoft Money\System\mnyside.dll
{5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} C:\Program Files\Yahoo!\Common\yiesrvc.dll
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"BackupNotify"="c:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\backupnotify.exe"
"NVIEW"="rundll32.exe nview.dll,nViewLoadHook"
"RealPlayer"="\"C:\\Program Files\\Real\\RealOne Player\\realplay.exe\" /RunUPGToolCommandReBoot"
"updateMgr"="C:\\Program Files\\Adobe\\Acrobat 7.0\\Reader\\AdobeUpdateManager.exe AcRdB7_0_9"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"hpsysdrv"="c:\\windows\\system\\hpsysdrv.exe"
"HotKeysCmds"="C:\\WINDOWS\\System32\\hkcmd.exe"
"CamMonitor"="c:\\Program Files\\Hewlett-Packard\\Digital Imaging\\\\Unload\\hpqcmon.exe"
"HP Software Update"="\"c:\\Program Files\\HP\\HP Software Update\\HPWuSchd.exe\""
"HPHUPD05"="c:\\Program Files\\Hewlett-Packard\\{45B6180B-DCAB-4093-8EE8-6164457517F0}\\hphupd05.exe"
"HPHmon05"="C:\\WINDOWS\\System32\\hphmon05.exe"
"KBD"="C:\\HP\\KBD\\KBD.EXE"
"StorageGuard"="\"C:\\Program Files\\Common Files\\Sonic\\Update Manager\\sgtray.exe\" /r"
"TkBellExe"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"AutoTKit"="C:\\hp\\bin\\AUTOTKIT.EXE"
"Recguard"="C:\\WINDOWS\\SMINST\\RECGUARD.EXE"
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /installquiet /keeploaded /nodetect"
"PS2"="C:\\WINDOWS\\system32\\ps2.exe"
"mmtask"="C:\\Program Files\\MUSICMATCH\\MUSICMATCH Jukebox\\mmtask.exe"
"AlcxMonitor"="ALCXMNTR.EXE"
"IgfxTray"="C:\\WINDOWS\\System32\\igfxtray.exe"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"QuickFinder Scheduler"="\"c:\\Program Files\\WordPerfect Office 11\\Programs\\QFSCHD110.EXE\""
"Windows Defender"="\"C:\\Program Files\\Windows Defender\\MSASCui.exe\" -hide"
"OneCareUI"="\"C:\\Program Files\\Microsoft Windows OneCare Live\\winssnotify.exe\""

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"DWQueuedReporting"="\"C:\\PROGRA~1\\COMMON~1\\MICROS~1\\DW\\dwtrig20.exe\" -t"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"DisableTaskMgr"=dword:00000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{abef791f-947e-4cdf-83c3-e72a240afb67}"="frisbee"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"="Microsoft AntiMalware ShellExecuteHook"
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OPXPGina

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa
Authentication Packages REG_MULTI_SZ msv1_0\0\0
Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0\0
Notification Packages REG_MULTI_SZ scecli\0\0

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\OneCareMP

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0

Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\MP Scheduled Quick Scan.job
C:\WINDOWS\tasks\MP Scheduled Scan.job
C:\WINDOWS\tasks\MP Scheduled Signature Update.job
C:\WINDOWS\tasks\Symantec NetDetect.job

********************************************************************

catchme 0.2 W2K/XP/Vista - userland rootkit detector by Gmer, 17 October 2006
http://www.gmer.net

scanning hidden processes ...

scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

********************************************************************

Completion time: 07-04-13 9:26:29
C:\ComboFix-quarantined-files.txt ... 07-04-13 09:26

Hijack logs
Logfile of HijackThis v1.99.1
Scan saved at 9:28:02 AM, on 4/13/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://us9.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AutoTKit] C:\hp\bin\AUTOTKIT.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickFinder Scheduler] "c:\Program Files\WordPerfect Office 11\Programs\QFSCHD110.EXE"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\Hewlett-Packard\Digital Imaging\bin\backupnotify.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [RealPlayer] "C:\Program Files\Real\RealOne Player\realplay.exe" /RunUPGToolCommandReBoot
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: AutoTBar.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Motorola Wireless USB Adapter.lnk = ?
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: OPXPGina - C:\Program Files\Softex\OmniPass\opxpgina.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv.exe
O23 - Service: Ventrilo - Unknown owner - C:\Program Files\VentSrv\ventrilo_svc.exe
O23 - Service: Windows Network Log Manage - Unknown owner - C:\Program Files\Common Files\Microsoft Shared\MSInfo\Network.exe

SmitFraudFix v2.166

Scan done at 9:16:54.25, Fri 04/13/2007
Run from C:\Documents and Settings\Owner\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{abef791f-947e-4cdf-83c3-e72a240afb67}"="frisbee"

[HKEY_CLASSES_ROOT\CLSID\{abef791f-947e-4cdf-83c3-e72a240afb67}\InProcServer32]
@="C:\WINDOWS\system32\ygjun.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{abef791f-947e-4cdf-83c3-e72a240afb67}\InProcServer32]
@="C:\WINDOWS\system32\ygjun.dll"

»»»»»»»»»»»»»»»»»»»»»»»» Killing process

»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 downloads.aaa1screensavers.com #[Bargin Buddy]
127.0.0.1 dl.aaascreensavers.com
127.0.0.1 abcsearch.com
127.0.0.1 admin.abcsearch.com
127.0.0.1 www3.abcsearch.com #[Browseraid]
127.0.0.1 www.abcsearch.com
127.0.0.1 abc517.net #[Trojan.Mitglieder.H]
127.0.0.1 absoluagency.com #[Trojan.StartPage.H]
127.0.0.1 acestats.com
127.0.0.1 www.acestats.com
127.0.0.1 actualnames.com #[Parasite.ActualNames][Spyware.ActualNames]
127.0.0.1 www.actualnames.com
127.0.0.1 ad-up.com
127.0.0.1 www.ad-up.com
127.0.0.1 adatom.com
127.0.0.1 aesp.adatom.com
127.0.0.1 adbest.com
127.0.0.1 adserv.adbonus.com
127.0.0.1 www.adbonus.com
127.0.0.1 ad2.adcept.net
127.0.0.1 ad3.adcept.net
127.0.0.1 www.adcept.net
127.0.0.1 adcomplete.com
127.0.0.1 www.adcomplete.com
127.0.0.1 www.adcopy.info
127.0.0.1 ads.adcorps.com
127.0.0.1 ads.addynamix.com
127.0.0.1 pt.server1.adexit.com
127.0.0.1 www.adexit.com
127.0.0.1 www.ad4ever.com
127.0.0.1 adhearus.com
127.0.0.1 display2.adhearus.com
127.0.0.1 ssl3.adhost.com
127.0.0.1 www2.adhost.com
127.0.0.1 www.addme.com
127.0.0.1 www.adinfinity.com
127.0.0.1 te.adlandpro.com
127.0.0.1 classic.adlink.de
127.0.0.1 regio.adlink.de
127.0.0.1 west.adlink.de
127.0.0.1 www.adminder.com
127.0.0.1 adsfac.net
127.0.0.1 www.adonweb.com
127.0.0.1 www.adrelevance.com #[NetRatings]
127.0.0.1 media.adrevolver.com
127.0.0.1 adroar.com
127.0.0.1 ads.adroar.com
127.0.0.1 delta.adroar.com
127.0.0.1 iads.adroar.com #[Adware.AdRoar][ADW_ADROAR.A]
127.0.0.1 lists.adroar.com
127.0.0.1 www.adroar.com
127.0.0.1 ads.adsag.com
127.0.0.1 di.adsag.com
127.0.0.1 img.adsag.com
127.0.0.1 adserv.com
127.0.0.1 www.adserv.com
127.0.0.1 ads.adtomi.com
127.0.0.1 www.adtomi.com #[Adware.Adtomi]
127.0.0.1 downldcl.adtoolsinc.com
127.0.0.1 www.adtoolsinc.com
127.0.0.1 www.adtrader.com
127.0.0.1 survey.advantageresearch.com
127.0.0.1 ad.adver.com.tw
127.0.0.1 ads.advertise.net
127.0.0.1 advertisingvision.com #[Adware.Advision]
127.0.0.1 www.advertisingvision.com
127.0.0.1 adviva.com
127.0.0.1 www.adviva.com
127.0.0.1 ads.adviva.net
127.0.0.1 adstats.adviva.net
127.0.0.1 tracker.affistats.com #[msvrl.dll]
127.0.0.1 www.affiliatefuel.com
127.0.0.1 banners.affiliatefuel.com
127.0.0.1 affiliatetarget.com
127.0.0.1 www.affiliatetarget.com
127.0.0.1 fcds.affiliatetracking.net
127.0.0.1 our.affiliatetracking.net
127.0.0.1 www.affiliatetracking.net
127.0.0.1 www.affiliatetracking.com
127.0.0.1 partner.ah-ha.com #[Troj/Subsear-A][Adware-SSF.dr]
127.0.0.1 adserver.aim4media.com
127.0.0.1 adtest.aim4media.com
127.0.0.1 pops.aim4media.com
127.0.0.1 www.aim4media.com
127.0.0.1 crs.akamai.com
127.0.0.1 soap.alexa.com #[Spyware.Alexa][Alexa Toolbar]
127.0.0.1 www.alexa.com
127.0.0.1 allcheapsolutions.com #[Backdoor-CIE]
127.0.0.1 ads.as4x.tmcs.akadns.net #[Ticketmaster]
127.0.0.1 bantam.ai.net
127.0.0.1 fiona.ai.net
127.0.0.1 ads.amazingmedia.com
127.0.0.1 bohema.amillo.net #[Trojan.Mitglieder.H]
127.0.0.1 adserver04.ancestry.com #[RealMedia]
127.0.0.1 ads.antionline.com
127.0.0.1 junior.apk.net
127.0.0.1 banner.arttoday.com
127.0.0.1 associmg.com #[amazon.com]
127.0.0.1 armbender.com #[UCSearch.ucUCSearch][W32.Adclicker.F.Trojan]
127.0.0.1 www.armbender.com #[UCSearch.ArmBender]
127.0.0.1 audiogalaxy.com
127.0.0.1 www.audiogalaxy.com #[Restricted Zone site]
127.0.0.1 adserving.autotrader.com
127.0.0.1 www.avatarresources.com #[Parasite.AutoStartup]
127.0.0.1 www.avres.net
127.0.0.1 www.aweber.com
127.0.0.1 cploving.awmhost.net #[TrojanClicker.Win32.Lopin]
127.0.0.1 bar.baidu.com #[Parasite.ClientMan]
127.0.0.1 www.baltictop.com
127.0.0.1 www.banner-mania.com
127.0.0.1 www.bannerspace.com #[Restricted Zone site]
127.0.0.1 www2.bannerspace.com
127.0.0.1 www3.bannerspace.com
127.0.0.1 www5.bannerspace.com
127.0.0.1 www6.bannerspace.com
127.0.0.1 www7.bannerspace.com
127.0.0.1 bannerswap.com
127.0.0.1 www.bannerswap.com
127.0.0.1 www.bidclix.com
127.0.0.1 bidclix.net
127.0.0.1 www.bidclix.net
127.0.0.1 bigtracker.com
127.0.0.1 bighits.net #[Restricted Zone site]
127.0.0.1 bigticker.bighits.net
127.0.0.1 bounty.bighits.net
127.0.0.1 www.bighits.net
127.0.0.1 download.bigwebportal.com #[hotwebsearch.com]
127.0.0.1 www.bigwebportal.com
127.0.0.1 counter.bizland.com
127.0.0.1 webads.bizservers.com
127.0.0.1 www.black-hole.co.uk #[Restricted Zone site]
127.0.0.1 www.blazehits.net #[gonnasearch.com]
127.0.0.1 s7.blingblingcontent.com #[Easywebinstaller Control]
127.0.0.1 ads.bmais.net #[bluemountain]
127.0.0.1 bookedspace.com #[Parasite.BookedSpace]
127.0.0.1 www.bookedspace.com #[Adware.Bookedspace]
127.0.0.1 a.boom.ro
127.0.0.1 s.boom.ro
127.0.0.1 www1.boomerank.com
127.0.0.1 boomerank.com
127.0.0.1 citi.bridgetrack.com #[Tracking Service]
127.0.0.1 rccl.bridgetrack.com
127.0.0.1 config.broadcastpc.tv #[TROJ_RVP.E]
127.0.0.1 report.broadcastpc.tv #[AdvWare.Broadcap.a]
127.0.0.1 www.broadcastpc.tv #[Adware.Broadcastpc]
127.0.0.1 www.browserplugin.com #[WebHlprObj Class]
127.0.0.1 install.browsertoolbar.com #[Backdoor.Autoupder][BrowserToolbar]
127.0.0.1 www2.browsertoolbar.com #[TROJ_SUA.A]
127.0.0.1 www.browsertoolbar.com #[Parasite.BrowserToolbar]
127.0.0.1 browserwise.com #[Parasite.Xupiter][Xupiter.BrowserWise]
127.0.0.1 www.browserwise.com
127.0.0.1 www.buildtraffic.com
127.0.0.1 casino-on-net.com
127.0.0.1 java2.casino-on-net.com
127.0.0.1 www.casino-on-net.com
127.0.0.1 cc-dt.com
127.0.0.1 ads.cc-dt.com
127.0.0.1 clickserve.cc-dt.com
127.0.0.1 www.capital-systems.net #[Troj/Ovedil-B]
127.0.0.1 ads.cars.com
127.0.0.1 www.cashforclicks.com
127.0.0.1 www.cashpile.com
127.0.0.1 ads.cdfreaks.com #[Ads.cdfreaks]
127.0.0.1 mds.centrport.net
127.0.0.1 c.clickaire.com #[CWS trojan downloads]
127.0.0.1 classifieds1000.com
127.0.0.1 www.classifieds1000.com
127.0.0.1 clearfind.com
127.0.0.1 www.clearfind.com #[Restricted Zone site]
127.0.0.1 hop.clickbank.net #[Adware.Clickbank]
127.0.0.1 zzz.clickbank.net
127.0.0.1 clickedyclick.com
127.0.0.1 www.clickexchange.ru
127.0.0.1 click2boost.com
127.0.0.1 secure.click2boost.com
127.0.0.1 service.click2boost.com
127.0.0.1 www.click2boost.com
127.0.0.1 servedby.clickexperts.net
127.0.0.1 www.clicks2you.com
127.0.0.1 stats1.clicktracks.com
127.0.0.1 www.is1.clixgalore.com
127.0.0.1 www.clixgalore.com
127.0.0.1 www1.click-fr.com
127.0.0.1 www2.click-fr.com
127.0.0.1 www3.click-fr.com
127.0.0.1 www4.click-fr.com
127.0.0.1 www.clickhouse.com
127.0.0.1 www.clicks4u.com
127.0.0.1 www.clipgenie.com
127.0.0.1 comclick.com
127.0.0.1 ct2.comclick.com
127.0.0.1 fl01.ct2.comclick.com
127.0.0.1 ihm01.ct2.comclick.com
127.0.0.1 www.comclick.com #[Restricted Zone site]
127.0.0.1 www.thecoolbar.com #[Softomate Toolbar][The Coolbar]
127.0.0.1 www.compactbanner.com
127.0.0.1 ads.console.net
127.0.0.1 coolshader.com
127.0.0.1 c.coolshader.com #[Win32.Harnig]
127.0.0.1 www.coolshader.com
127.0.0.1 counted.com
127.0.0.1 bilbo.counted.com
127.0.0.1 www.counted.com
127.0.0.1 www.counterguide.com
127.0.0.1 counter4u.de
127.0.0.1 connectionzone.com
127.0.0.1 count.casino-trade.com
127.0.0.1 www.couponica.com
127.0.0.1 www.couponsandoffers.com #[Adware.TopMoxie]
127.0.0.1 data.coremetrics.com
127.0.0.1 twci.coremetrics.com
127.0.0.1 us.cqcounter.com
127.0.0.1 zz.cqcounter.com
127.0.0.1 1us.cqcounter.com
127.0.0.1 ads.crosswinds.net
127.0.0.1 megabyte.crosswinds.net
127.0.0.1 cyberbounty.com
127.0.0.1 js.cybermonitor.com
127.0.0.1 stat3.cybermonitor.com
127.0.0.1 cytron.com #[DailyWinner][Cytron]
127.0.0.1 www.cytron.com
127.0.0.1 dailywinner.net #[Parasite.DailyWinner][ezcybersearch.com]
127.0.0.1 dw.dailywinner.net
127.0.0.1 www.dailywinner.net
127.0.0.1 www.dash.com
127.0.0.1 ads.date.com
127.0.0.1 banner.date.com
127.0.0.1 dbbsrv.com #[bserv.darkblue.com][Restricted Zone site]
127.0.0.1 freestuff.com.19828.fb.dbbsrv.com #[roar.com]
127.0.0.1 spyware.com.16871.fb.dbbsrv.com
127.0.0.1 webads.com.18345.fb.dbbsrv.com
127.0.0.1 collector.deepmetrix.com
127.0.0.1 geo.deepmetrix.com
127.0.0.1 www.deepmetrix.com
127.0.0.1 ad.ads.dk
127.0.0.1 tdkads.ads.dk
127.0.0.1 didtheyreadit.com #[email tracker]
127.0.0.1 www.didtheyreadit.com
127.0.0.1 counter.digits.com
127.0.0.1 www.divago.com #[Adware.Surfairy]
127.0.0.1 www.dnscaching.net #[stickypops.com]
127.0.0.1 www.domamil.cz #[Trojan.Beagooz]
127.0.0.1 downloadalot.com
127.0.0.1 get.downloadalot.com
127.0.0.1 www.downloadalot.com #[Restricted Zone site]
127.0.0.1 doc-tracker.com
127.0.0.1 dqmedia.net #[spam]
127.0.0.1 drmx01.net #[spam]
127.0.0.1 www.duenow.com
127.0.0.1 gfx.dvlabs.com
127.0.0.1 klipads.dvlabs.com
127.0.0.1 e2give.com #[Adware-E2Give][Spyware.e2give]
127.0.0.1 www.e2give.com
127.0.0.1 www.e-bannerx.com
127.0.0.1 adv1.eblocs.com
127.0.0.1 www.easycounter.com
127.0.0.1 banners.easydns.com
127.0.0.1 banner.easyspace.com
127.0.0.1 adserv1.ebates.com #[WebSavings]
127.0.0.1 www.ebates.com #[Adware.MoeMoney]
127.0.0.1 www.efinder.cc #[StartPage-DA]
127.0.0.1 c.enhance.com #[ah-ha.com]
127.0.0.1 enhancemysearch.com #[xzoomy.com]
127.0.0.1 www.enhancemysearch.com
127.0.0.1 epeople.com
127.0.0.1 errorpage404.com #[JS_TRAFFICHBAR.A]
127.0.0.1 www.errorpage404.com #[Parasite.TinyBar]
127.0.0.1 er.errorplace.com
127.0.0.1 www.errorplace.com
127.0.0.1 vipuk.escritorioactivo.com #[123Messenger Hijacker]
127.0.0.1 www.escorcher.com #[bogus antivirus spyware]
127.0.0.1 www.esearch.cc #[StartPage-EZ][server down?]
127.0.0.1 www.eshopads2.com
127.0.0.1 perso.estat.com
127.0.0.1 prof.estat.com
127.0.0.1 www.estat.com #[Restricted Zone site]
127.0.0.1 eu-adcenter.net
127.0.0.1 thinknyc.eu-adcenter.net
127.0.0.1 ugo.eu-adcenter.net #[evidence-eliminator.com]
127.0.0.1 www.euroklik.nl #[EasyBar][InstallerX Class]
127.0.0.1 engage.everyone.net
127.0.0.1 static.everyone.net
127.0.0.1 www.exchangead.com
127.0.0.1 exitexchange.com
127.0.0.1 count.exitexchange.com
127.0.0.1 images.exitexchange.com
127.0.0.1 www.exitexchange.com #[Restricted Zone site]
127.0.0.1 www.exittraffic.net
127.0.0.1 ezcybersearch.com #[EZCyberSearch.Surebar]
127.0.0.1 ads.ezcybersearch.com
127.0.0.1 ezcybersearch.mail.everyone.net
127.0.0.1 www.ezcybersearch.com #[Parasite.ezCyberSearch]
127.0.0.1 www.evidence-eliminator.com
127.0.0.1 www.ezhits4u.com #[EZHits4U.com]
127.0.0.1 ads.fairfax.com.au
127.0.0.1 images.ads.fairfax.com.au
127.0.0.1 redirect.fairfax.com.au
127.0.0.1 campaigns.f2.com.au
127.0.0.1 www.fast2net.com
127.0.0.1 www.fastfind.org #[SubSearch][TROJ_STARTPAG.KF][Adware.Fastfind.B]
127.0.0.1 fasttrack.nu
127.0.0.1 www.fceboard.com #[Adware.EBoard]
127.0.0.1 www.fightpopups.net #[Adware.MessStopper]
127.0.0.1 adserver.filefront.com
127.0.0.1 www.filemix.net #[Surf+]
127.0.0.1 www.fineclicks.com
127.0.0.1 firstname.com
127.0.0.1 clicks.firstname.com
127.0.0.1 flashtrack.net
127.0.0.1 ads.flashtrack.net #[Adware.Flashtrack.B]
127.0.0.1 coreg.flashtrack.net
127.0.0.1 www.flashtrack.net #[Adware.FlashEnhancer][KB312429]
127.0.0.1 flyinads.com
127.0.0.1 www.flyinads.com
127.0.0.1 ads.forbes.com
127.0.0.1 klipmart.forbes.com
127.0.0.1 www.ampira.com #[Fortunecity]
127.0.0.1 ads.fortunecity.com
127.0.0.1 ads.v3.com #[Fortunecity]
127.0.0.1 www2.fortunecity.com
127.0.0.1 ad.freefind.com
127.0.0.1 www.freehistorycleaner.com #[Adware.Fapi][ADW_HISCLEAN.A]
127.0.0.1 free-stats.com
127.0.0.1 www.freewebsites.com
127.0.0.1 ads.free-windows-games.com
127.0.0.1 www.free-windows-games.com #[Parasite.GAMsys][GamHelper]
127.0.0.1 pops.freeze.com #[[GamHelper]
127.0.0.1 ads.gamespy.com
127.0.0.1 adcontent.gamespy.com
127.0.0.1 www.gebr-wachs.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
127.0.0.1 gd.geobytes.com #[obtains users location]
127.0.0.1 www.getsmart.com
127.0.0.1 bp2.getredirect.com
127.0.0.1 4.getredirect.com #[superlogy.com]
127.0.0.1 www.getredirect.com
127.0.0.1 getupdate.com
127.0.0.1 dlx.getupdate.com #[AdvWare.ToolBar.VB.b]
127.0.0.1 www.getupdate.com #[Adware.Getup]
127.0.0.1 gigex.com
127.0.0.1 media.gigex.com #[SpeedDelivery]
127.0.0.1 www.gigex.com
127.0.0.1 globesearch.com
127.0.0.1 www.globesearch.com #[Restricted Zone site][CWS]
127.0.0.1 goclick.com
127.0.0.1 earth.goclick.com
127.0.0.1 partner1.goclick.com
127.0.0.1 www.goclick.com
127.0.0.1 banner.goldenpalace.com #[redirects]
127.0.0.1 www.goldenwebawards.com
127.0.0.1 goldstats.net
127.0.0.1 www.goldstats.net
127.0.0.1 adincl.gopher.com #[InfoSpace]
127.0.0.1 ads.gorillanation.com #[Restricted Zone site]
127.0.0.1 adserver.gorillanation.com
127.0.0.1 gostats.com
127.0.0.1 c1.gostats.com
127.0.0.1 c2.gostats.com
127.0.0.1 webcounter.goweb.de
127.0.0.1 greatstartpage.com #[parasite downloads]
127.0.0.1 www.greatstartpage.com
127.0.0.1 grokster.com #[Restricted Zone site][P2P]
127.0.0.1 dl.grokster.com
127.0.0.1 www.grokster.com
127.0.0.1 ads.guardian.co.uk
127.0.0.1 ads.guardianunlimited.co.uk
127.0.0.1 www.g-wizzads.net
127.0.0.1 hamster.com #[apps5.oingo.com]
127.0.0.1 ad0.haynet.com
127.0.0.1 www.hitboss.com
127.0.0.1 www.hit4hit.com
127.0.0.1 ads.hitcents.com
127.0.0.1 hithopper.com #[Adware.Hithopper]
127.0.0.1 www.hithopper.com
127.0.0.1 hitmodel.net
127.0.0.1 hit-now.com
127.0.0.1 loga.hit-parade.com
127.0.0.1 hit-parade.com
127.0.0.1 www.hitpointer.com
127.0.0.1 hitslink.com
127.0.0.1 counter.hitslink.com
127.0.0.1 counter2.hitslink.com
127.0.0.1 www2.hitslink.com
127.0.0.1 www.hitslink.com #[Restricted Zone site]
127.0.0.1 www.hiwire.com
127.0.0.1 ads.home.net
127.0.0.1 counters.honesty.com
127.0.0.1 banners.hotlinks.net
127.0.0.1 hotphrase.com
127.0.0.1 www.hotphrase.com #[Restricted Zone site]
127.0.0.1 hotsearch.com #[roar.com][Restricted Zone site]
127.0.0.1 www.hotsearch.com
127.0.0.1 hotsearchbar.com #[iiittt Class][SpiderSearch]
127.0.0.1 www.hotsearchbar.com
127.0.0.1 www.10s.com.br #[Trojan.Cargao]
127.0.0.1 cgi.hotstat.nl
127.0.0.1 viewstat.hotstat.nl
127.0.0.1 www.humanclick.com #[Restricted Zone site]
127.0.0.1 hc2.humanclick.com
127.0.0.1 www.hypertracker.com
127.0.0.1 ads.iafrica.com
127.0.0.1 ads.iboost.com
127.0.0.1 www.i-clicks.net
127.0.0.1 hits.icdirect.com
127.0.0.1 hitctr01.icdirect.com
127.0.0.1 image-catcher.com
127.0.0.1 stats.surfaid.ihost.com
127.0.0.1 ads.imdb.com #[amazon.com]
127.0.0.1 www.impregnable.net #[TrojanDownloader.Win32.VB.dw][Trojan.Win32.StartPage.kk]
127.0.0.1 stats.indextools.com
127.0.0.1 adserver.indieclick.com
127.0.0.1 campaign.indieclick.com
127.0.0.1 adcenter.in2.com
127.0.0.1 ads.inet1.com
127.0.0.1 ads7.inet1.com
127.0.0.1 banners.inetfast.com
127.0.0.1 ads.infospace.com
127.0.0.1 bvads.infospace.com
127.0.0.1 dpxml.infospace.com
127.0.0.1 xads.infospace.com
127.0.0.1 www.infospider.com
127.0.0.1 ads.intellicast.com
127.0.0.1 ads.intelihealth.com
127.0.0.1 ads.intermezzia.com
127.0.0.1 mjxads.internet.com
127.0.0.1 indiads.com
127.0.0.1 infostart.com
127.0.0.1 popups.infostart.com
127.0.0.1 www.intelli-tracker.com
127.0.0.1 ads.ipowerweb.com
127.0.0.1 www.ipstat.com
127.0.0.1 istarthere.com #[Troj/IEStart-C]
127.0.0.1 moviesponsor.istarthere.com
127.0.0.1 partners.istarthere.com
127.0.0.1 www.istarthere.com
127.0.0.1 adcycle.isoftmarketing.com
127.0.0.1 isurfplus.com
127.0.0.1 www.isurfplus.com #[Adware.Surebar]
127.0.0.1 www.itrafficstar.com #[Restricted Zone site]
127.0.0.1 www.jcount.com
127.0.0.1 affiliates.jeanharris.com
127.0.0.1 popup.jeanharris.com
127.0.0.1 jpedownload.joltid.com
127.0.0.1 www.joltid.com #[Adware.P2PNetworking]
127.0.0.1 ads.jpost.com
127.0.0.1 track.jpost.com
127.0.0.1 www1.kliks.nl
127.0.0.1 www2.kliks.nl
127.0.0.1 www.kliks.nl
127.0.0.1 kt3.kliptracker.com
127.0.0.1 kt4.kliptracker.com
127.0.0.1 www.kliptracker.com
127.0.0.1 stats.klsoft.com
127.0.0.1 www.kmindex.ru
127.0.0.1 ad.leadcrunch.com
127.0.0.1 ts1.lexmark.com
127.0.0.1 www.linkcounter.com
127.0.0.1 linkexchange.ru
127.0.0.1 web.linkexchange.ru
127.0.0.1 www.linkexchange.ru
127.0.0.1 link4link.com
127.0.0.1 plus.link4link.com
127.0.0.1 www.links4trade.com
127.0.0.1 escati.linkopp.net
127.0.0.1 www.linkopp.net
127.0.0.1 js.livehelper.com #[Restricted Zone site]
127.0.0.1 newbrowse.livehelper.com
127.0.0.1 liveperson.net
127.0.0.1 server.iad.liveperson.net #[Restricted Zone site]
127.0.0.1 www.liveperson.com
127.0.0.1 adserv.lwmn.net
127.0.0.1 locators.com #[object exploit]
127.0.0.1 toolbar.locators.com #[Locators Toolbar]
127.0.0.1 www.lords-of-havoc.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
127.0.0.1 luckyhomepage.com #[search.targetwords.com\1stblaze.com]
127.0.0.1 www.luckyhomepage.com #[Restricted Zone site]
127.0.0.1 adverts.lzio.com
127.0.0.1 newupdates.lzio.com
127.0.0.1 search.lzio.com
127.0.0.1 updates.lzio.com #[Downloader-LE][Adware.ZioCom]
127.0.0.1 make-deal.com
127.0.0.1 go.mailbits.com
127.0.0.1 mair.net #[Realtracker]
127.0.0.1 marnet.us #[Downloader-IU]
127.0.0.1 image.masterstats.com
127.0.0.1 link.masterstats.com
127.0.0.1 ads.affiliates.match.com
127.0.0.1 associmage.match.com
127.0.0.1 adserver.matchcraft.com
127.0.0.1 maybeyes.biz #[Trojan.Ducky]
127.0.0.1 ads.mcafee.com
127.0.0.1 directads.mcafee.com
127.0.0.1 ads.mediaodyssey.com
127.0.0.1 www.mediatickets.net
127.0.0.1 www.mt-download.com #[MediaTicketsInstaller Control]
127.0.0.1 ads.mediaturf.net
127.0.0.1 banner.meerhits.nl #[IEHIjacker.Meerhits.nl]
127.0.0.1 pokpok.meerhits.nl
127.0.0.1 exit.megago.com
127.0.0.1 www.megago.com #[typo squatter]
127.0.0.1 www.megasearchbar.com
127.0.0.1 www.megaseek.net #[Restricted Zone site]
127.0.0.1 www.memorywatcher.com #[TROJ_PEPER.A]
127.0.0.1 pubs.mgn.net #[Grolier Network]
127.0.0.1 micorsoft.com
127.0.0.1 www.micorsoft.com #[typo hijacker]
127.0.0.1 adserver.mindshare.de
127.0.0.1 www.mini-player.com #[5MOF Mini-Player]
127.0.0.1 banner.missingkids.com
127.0.0.1 ads.monster.com
127.0.0.1 adserver.monster.com
127.0.0.1 adserver.a.in.monster.com
127.0.0.1 ads.monstermoving.com
127.0.0.1 cookie.monster.com
127.0.0.1 mp3today.net
127.0.0.1 www.mp3yes.com #[C2Media\LOP]
127.0.0.1 mpamexit.com
127.0.0.1 msgtag.com
127.0.0.1 img.msgtag.com #[Restricted Zone site]
127.0.0.1 www.msgtag.com
127.0.0.1 multi1.rmuk.co.uk
127.0.0.1 multimpp.com #[MultimppObj Class][AdvWare.BiSpy.o]
127.0.0.1 www.multimpp.com
127.0.0.1 mvtracker.com
127.0.0.1 www.mvtracker.com
127.0.0.1 mvr3d.net #[NavExcel\n-CASE]
127.0.0.1 mvr.us #[Parasite.NavExcel]
127.0.0.1 www.mvr.us
127.0.0.1 www.myaffiliateprogram.com
127.0.0.1 ads.mydailyhoroscope.net
127.0.0.1 www.mydailyhoroscope.net #[Adware.Horoscope]
127.0.0.1 www.myemessenger.com
127.0.0.1 rm.myoc.com
127.0.0.1 myhitlogger.com
127.0.0.1 mypagefinder.com #[Parasite.MyPageFinder]
127.0.0.1 hit.namimedia.com
127.0.0.1 ads.nandomedia.com
127.0.0.1 neededware.com #[Adware.NeededWare]
127.0.0.1 www.neededware.com
127.0.0.1 www6.netbroadcaster.com
127.0.0.1 code.netbreak.com.au
127.0.0.1 www.netflip.com
127.0.0.1 money2.netfirms.com
127.0.0.1 partner.netmechanic.com
127.0.0.1 tracker.netmechanic.com
127.0.0.1 counter.netmore.net
127.0.0.1 www.netpoll.nl
127.0.0.1 ads.netsol.com
127.0.0.1 ads.newsint.co.uk
127.0.0.1 adq.nextag.com
127.0.0.1 newiframe.biz #[TROJ_DELF.DS]
127.0.0.1 www.newiframe.biz
127.0.0.1 www.noadware.net #[SCAM.Enigma.NoAdware]
127.0.0.1 ad.nobreak.com
127.0.0.1 nounpax.com #[spam][server down?]
127.0.0.1 nowbox.com
127.0.0.1 www.nowbox.com #[Parasite.NowBox]
127.0.0.1 mediatickets.nubela.net
127.0.0.1 www.nubela.net
127.0.0.1 nzads.net.nz
127.0.0.1 okcounter.com
127.0.0.1 www.okww.net #[Trojan.StartPage.C]
127.0.0.1 stat.onestat.com
127.0.0.1 www.onestat.com
127.0.0.1 one.ru
127.0.0.1 cnt.one.ru
127.0.0.1 stats0.one.ru
127.0.0.1 stats1.one.ru
127.0.0.1 stats2.one.ru
127.0.0.1 www.oneandonlynetwork.com #[Ticketmaster]
127.0.0.1 server1.opentracker.net
127.0.0.1 www.opinionlab.com
127.0.0.1 ccc00.opinionlab.com
127.0.0.1 rate.opinionlab.com
127.0.0.1 banner.orb.net
127.0.0.1 www.originalicons.com #[F1 Organizer Class]
127.0.0.1 geoads.osdn.com
127.0.0.1 tg-images.osdn.com
127.0.0.1 otx5.otxresearch.com
127.0.0.1 otx.ifilm.com #[OTXMedia.dll]
127.0.0.1 www.otxresearch.com #[OTXMovie Class]
127.0.0.1 adpopper.outblaze.com #[bargain-buddy.net]
127.0.0.1 www.p3marketing.com #[Zapspot]
127.0.0.1 click.payserve.com
127.0.0.1 www.pc-test.net
127.0.0.1 ad1.peel.com
127.0.0.1 ad3.peel.com
127.0.0.1 ads.peel.com
127.0.0.1 ad4.peel.com
127.0.0.1 ads5.peel.com
127.0.0.1 www.peel.com
127.0.0.1 www.peel.net
127.0.0.1 ads.pennyweb.com #[addynamix.com]
127.0.0.1 banners.pennyweb.com
127.0.0.1 www.peruvianmarket.com #[Trojan.Beagooz.D]
127.0.0.1 ads.photosight.ru
127.0.0.1 phpadsnew.com
127.0.0.1 www.phpadsnew.com
127.0.0.1 pidorasam.net #[Backdoor.Berbew.J]
127.0.0.1 ads2.playnet.com
127.0.0.1 popfind.net #[Adware.Ddpop]
127.0.0.1 www.popupads.com
127.0.0.1 www.popupad.net
127.0.0.1 popupblockade.com #[Parasite.Httper]
127.0.0.1 www.popupblockade.com
127.0.0.1 popupmoney.com #[Restricted Zone site]
127.0.0.1 server01.popupmoney.com
127.0.0.1 www.popupmoney.com
127.0.0.1 popadstop.com #[Adware.PopAdStop]
127.0.0.1 www.popadstop.com
127.0.0.1 www.popunder.info #[TROJ_CHECKIN.B]
127.0.0.1 www.popupswappers.com
127.0.0.1 ad.popupswappers.com
127.0.0.1 www.popuptop.com
127.0.0.1 www2.portdetective.com
127.0.0.1 x0x0l.pp.ru #[BKDR_CCT.A]
127.0.0.1 www.praize.com #[Adware.Praize]
127.0.0.1 1.primaryads.com
127.0.0.1 www.privacyoutpost.com #[Troj/Regldr-A]
127.0.0.1 www.prtracker.com
127.0.0.1 www.profitzone.com #[ProfitZONE Adbar]
127.0.0.1 prolivation.com #[Restricted Zone site]
127.0.0.1 www.prolivation.com
127.0.0.1 ads.pro-market.net
127.0.0.1 www.promo.com.au
127.0.0.1 www.proxylist.biz
127.0.0.1 www.prutect.com #[Spyware.e2give]
127.0.0.1 www.pstopper.com
127.0.0.1 ad.sma.punto.net
127.0.0.1 sma.punto.net
127.0.0.1 www.pureseeker.com #[C2Media\LOP]
127.0.0.1 www.pwallet.com #[Restricted Zone site]
127.0.0.1 rads01.quadrogram.com #[Adware.Quadro][Memwatcher.B][TROJ_PEPER.A]
127.0.0.1 adserv.quality-channel.de
127.0.0.1 www.quarterserver.de
127.0.0.1 questionmarket.com
127.0.0.1 amch.questionmarket.com
127.0.0.1 ch.questionmarket.com
127.0.0.1 survey.questionmarket.com
127.0.0.1 www.questionmarket.com
127.0.0.1 download.quickflicks.com #[Parasite.SVAPlayer]
127.0.0.1 www.qq886.com #[Backdoor.Semes]
127.0.0.1 ramgo.com #[Restricted Zone site]
127.0.0.1 www.ramgo.com #[Win32.Startpage.B]
127.0.0.1 www.autoraskrutka.ru #[Spyware.Acext]
127.0.0.1 www.raskrutim.ru #[Spyware.Acext]
127.0.0.1 www.realclicks.com
127.0.0.1 www.relmaxtop.com
127.0.0.1 banner.relcom.ru
127.0.0.1 adservice.recon-networks.com
127.0.0.1 rightstats.com
127.0.0.1 www.rightstats.com
127.0.0.1 m.rmbclick.com
127.0.0.1 www.rgs-rostock.de #[Trojan.Mitglieder.C][Backdoor.Gaster]
127.0.0.1 track.roiservice.com
127.0.0.1 www.sandboxer.com #[Adware.Quadro][memorywatcher.com][Memwatcher.B]
127.0.0.1 www.savehits.com
127.0.0.1 st.sageanalyst.net
127.0.0.1 scorpionsearch.com #[W32.Adclicker.C.Trojan]
127.0.0.1 www.scorpionsearch.com #[x10.com][Trojan.Clicker.NetBuie a-b]
127.0.0.1 adsremote.scripps.com
127.0.0.1 counter.search.bg
127.0.0.1 searchalot.com
127.0.0.1 cards.searchalot.com
127.0.0.1 mail.searchalot.com
127.0.0.1 search.searchalot.com
127.0.0.1 web.searchalot.com
127.0.0.1 www.searchalot.com #[Adware-Tronix]
127.0.0.1 searchandclick.com
127.0.0.1 search.searchandclick.com
127.0.0.1 www.searchandclick.com #[Browseraid][SearchAndClick]
127.0.0.1 searchby.net
127.0.0.1 www.searchby.net #[Ultimate Popup Killer]
127.0.0.1 searchfst.com #[SFUtility Class][keywordsinc.com]
127.0.0.1 www.searchfst.com
127.0.0.1 www.searchgauge.com
127.0.0.1 www.search-control.com #[TrojanDropper.Win32.Small.ig]
127.0.0.1 search-itnow.com #[Parasite.AdultLinks]
127.0.0.1 www.search-itnow.com
127.0.0.1 www.searchmachine.com
127.0.0.1 www.searchmagnifier.com
127.0.0.1 searchmiracle.com #[Adware.EliteBar]
127.0.0.1 install.searchmiracle.com
127.0.0.1 641.searchmiracle.com
127.0.0.1 10016.searchmiracle.com
127.0.0.1 9310.searchmiracle.com
127.0.0.1 www.searchresult.net #[Parasite.IgetNet]
127.0.0.1 searchseekfind.com
127.0.0.1 ads.searchseekfind.com
127.0.0.1 tp.searchseekfind.com #[Trojan.Download.Chekin][server down?]
127.0.0.1 www.searchseekfind.com
127.0.0.1 browser.secondpower.com
127.0.0.1 download.secondpower.com
127.0.0.1 www1.secondpower.com
127.0.0.1 www3.secondpower.com #[KB320159]
127.0.0.1 www.secondpower.com
127.0.0.1 adserver.securityfocus.com
127.0.0.1 www.selfsurveys.com
127.0.0.1 www.seehits.com
127.0.0.1 www.sendtraffic.com
127.0.0.1 sesso.com
127.0.0.1 www.sesso.com #[VBS.Biscuit.A@mm]
127.0.0.1 ds.serving-sys.com
127.0.0.1 quasar.sitegauge.com
127.0.0.1 tracker.sitescout.com
127.0.0.1 advertpro.sitepoint.com
127.0.0.1 www.sitestatslive.com
127.0.0.1 www.shadowcrew.com #[spam]
127.0.0.1 adserver.sharewareonline.com #[nictechnetworks.com]
127.0.0.1 www.shockcounter.com
127.0.0.1 shopathomeselect.com #[Parasite.ShopAtHomeSelect]
127.0.0.1 download1.shopathomeselect.com #[ADW_SAHAGENT.A]
127.0.0.1 downloads.shopathomeselect.com
127.0.0.1 www.shopathomeselect.com #[Adware.SAHAgent]
127.0.0.1 skeech.com
127.0.0.1 www.skeech.com #[Restricted Zone site]
127.0.0.1 smart2com.net #[Trojan.Autoproxy]
127.0.0.1 smart-browser.com
127.0.0.1 update.smart-browser.com #[Parasite.SmartBrowser]
127.0.0.1 www.smart-browser.com
127.0.0.1 smartclicks.net
127.0.0.1 www.smartclicks.net
127.0.0.1 smarter.com #[Restricted Zone site]
127.0.0.1 sidebar.smarter.com
127.0.0.1 www.smarter.com
127.0.0.1 ads.smni.com
127.0.0.1 static.smni.com
127.0.0.1 www.sonyasys.com #[Downloader.Botten]
127.0.0.1 ads.spaceports.com
127.0.0.1 www1.spaex.com #[searchboss.com]
127.0.0.1 www.specialoffersnetworks.com
127.0.0.1 www.spedia.net #[SpediaBar]
127.0.0.1 www.spyarsenal.com #[Spyware.DesktopSpy][Spyware.FamilyKeylog]
127.0.0.1 spyferret.com #[OnlinePcFix.SpyFerret]
127.0.0.1 www.spyferret.com
127.0.0.1 spyware.com #[roar.com]
127.0.0.1 www.ssppyy.com #[Spyware.Ssppyy]
127.0.0.1 www.s-tracking.com
127.0.0.1 link.startmake.com
127.0.0.1 adsintl.starwave.com
127.0.0.1 c1.statcounter.com
127.0.0.1 www.statcounter.com
127.0.0.1 js.statistici.ro
127.0.0.1 log.statistici.ro
127.0.0.1 s.statistici.ro
127.0.0.1 www.statomatic.com
127.0.0.1 reg.stats4all.com
127.0.0.1 stats4you.com
127.0.0.1 www.stats4you.com
127.0.0.1 ctgbn.stellaremperor.com #[Backdoor.Alets]
127.0.0.1 www.stickypops.com
127.0.0.1 clix.superclix.de
127.0.0.1 www.superlogy.com #[AdvWare.ToolBar.VB.b]
127.0.0.1 sqwire.com #[Adware.Sqwire][Xupiter.Sqwire]
127.0.0.1 www.sqwire.com #[Parasite.Xupiter][Adware-PornKings]
127.0.0.1 www.supaseek.com #[Spyware.Supaseek]
127.0.0.1 rd1.surfernetwork.com #[SurferNETWORK Plugin]
127.0.0.1 www.surfernetwork.com
127.0.0.1 www2.surveyfocus.com
127.0.0.1 www.surveynetworks.com
127.0.0.1 www.surveysite.com
127.0.0.1 www2.survey-poll.com #[microsoft]
127.0.0.1 swift-look.com #[phishing exploit]
127.0.0.1 www.symantic.com #[Typo Squatter]
127.0.0.1 adpick.switchboard.com
127.0.0.1 adtag.sympatico.ca
127.0.0.1 www.syspage.com #[pop-up scam]
127.0.0.1 www.sysupdates.com
127.0.0.1 www.sysupdates2.com #[TopMoxie]
127.0.0.1 ad.uk.tangozebra.com
127.0.0.1 targetsearch.info #[Trojan.StartPage.H]
127.0.0.1 adult.targetsearch.info
127.0.0.1 go.targetsearch.info
127.0.0.1 tat-neftbank.ru #[Backdoor.Berbew.H]
127.0.0.1 www.tech-marketresearch.com
127.0.0.1 www.textads.biz
127.0.0.1 a.tfag.de
127.0.0.1 ak.tfag.de
127.0.0.1 theaffiliateprogram.com
127.0.0.1 myaffiliateprogram.com
127.0.0.1 www.the-counter.net
127.0.0.1 adbot.theonion.com
127.0.0.1 www.thepokerclub.com #[SecurityRisk.ClubPoker]
127.0.0.1 thesearchmall.com #[Adware.SearchMall]
127.0.0.1 www.thesearchmall.com
127.0.0.1 tnc4u.com #[Parasite.DownloadPlus]
127.0.0.1 new.tnc4u.com
127.0.0.1 www.tnc4u.com #[Adware.DownloadPlus]
127.0.0.1 www.toilet.com
127.0.0.1 ad.tomshardware.com
127.0.0.1 tooncomics.com #[IEDLL.ToonComics][here4search.com]
127.0.0.1 www.tooncomics.com #[Downloader.Tooncom][CWS.Aff.Tooncomics]
127.0.0.1 log.trafic.ro
127.0.0.1 tool4ame.com #[TROJ_GOLID.A][Adware.IAGold]
127.0.0.1 www.toolshack.com
127.0.0.1 ads.toplayerserver.com
127.0.0.1 www1.toplayerserver.com
127.0.0.1 www.toplayerserver.com
127.0.0.1 topmoxie.com
127.0.0.1 www.topmoxie.com #[Etraffic]
127.0.0.1 toprebates.com #[webrebates]
127.0.0.1 www.toprebates.com
127.0.0.1 stat.toprefsys.com
127.0.0.1 www.top-search.com #[Adware-SSF.dr]
127.0.0.1 ad.topstat.com
127.0.0.1 nl.topstat.com #[Restricted Zone site]
127.0.0.1 s26.topstat.com
127.0.0.1 xl.topstat.com
127.0.0.1 ads.track-star.com
127.0.0.1 adserver.track-star.com
127.0.0.1 geo2.track-star.com
127.0.0.1 www.track-star.com
127.0.0.1 tradeexit.com
127.0.0.1 www.tradeexit.com #[Parasite.Winupie]
127.0.0.1 www.trafficbeamer.nl
127.0.0.1 trafficg.com #[Restricted Zone site]
127.0.0.1 www.trafficg.com
127.0.0.1 ad.trafficmp.com
127.0.0.1 images.trafficmp.com
127.0.0.1 t.trafficmp.com
127.0.0.1 www.trafficflame.com
127.0.0.1 trafficfile.com
127.0.0.1 www.trafficfile.com
127.0.0.1 trackyourstats.com
127.0.0.1 trafficmarketplace.com
127.0.0.1 get.trafficmultiplier.com
127.0.0.1 go.trafficmultiplier.com
127.0.0.1 goto.trafficmultiplier.com
127.0.0.1 a.tribalfusion.com
127.0.0.1 m.tribalfusion.com
127.0.0.1 ads.tucows.com
127.0.0.1 counts.tucows.com
127.0.0.1 google.tucows.com
127.0.0.1 www.turbomemorycharger.com #[Adware.Fapi]
127.0.0.1 users.ucmore.com #[Parasite.UCmore]
127.0.0.1 www.ucmore.com
127.0.0.1 ads.ucomics.com
127.0.0.1 image.ugo.com
127.0.0.1 mediamgr.ugo.com
127.0.0.1 www.ukbanners.com
127.0.0.1 www.ultimatepopupkiller.com #[Restricted Zone site]
127.0.0.1 ultimatecounter.com
127.0.0.1 www.ultimatecounter.com
127.0.0.1 adcontroller.unicast.com
127.0.0.1 ads.unlimitedbanners.com
127.0.0.1 ads1.updated.com
127.0.0.1 url.biz.ua #[Download.Ject.B]
127.0.0.1 config.url404.com #[Parasite.Httper]
127.0.0.1 urlblaze.com #[Adware.TurboDownload]
127.0.0.1 www.urlblaze.com
127.0.0.1 www.urlblaze.net #[IEDriver][ADW_RULEDOR.C]
127.0.0.1 usachoice.net
127.0.0.1 www.v5msn.com #[Adware.Livechat]
127.0.0.1 ads.valuead.com #[Restricted Zone site]
127.0.0.1 adnetintads.valuead.com
127.0.0.1 banners.valuead.com
127.0.0.1 cs.valuead.com
127.0.0.1 servedby.valuead.com
127.0.0.1 ad.valuehost.ru
127.0.0.1 image.versiontracker.com
127.0.0.1 spinbox.versiontracker.com
127.0.0.1 vesbiz.biz #[TROJ_DELF.DS]
127.0.0.1 www.vesbiz.biz
127.0.0.1 ads.vesperexchange.com
127.0.0.1 www.vesperexchange.com
127.0.0.1 cinnam.vibrahost.com #[PWSteal.Revcuss.C][Win32.Revcuss.C]
127.0.0.1 vivi.vibrahost.com #[PWSteal.Revcuss.A]
127.0.0.1 dns2010.vicp.net #[Backdoor.Tumag]
127.0.0.1 uygurman.vicp.net #[Trojan.Riler][Troj/Riler-B]
127.0.0.1 oas.villagevoice.com
127.0.0.1 www.vikord.com #[Download.Ject.C]
127.0.0.1 visit-link.com
127.0.0.1 www.voonda.com #[Spyware.TAFbar]
127.0.0.1 generic.vpptechnologies.com
127.0.0.1 images2.vpptechnologies.com
127.0.0.1 main.vpptechnologies.com
127.0.0.1 msxml.vpptechnologies.com
127.0.0.1 static.vpptechnologies.com #[hotsearchbar.com]
127.0.0.1 xml.vpptechnologies.com #[BlazeFind]
127.0.0.1 www.vstats.net
127.0.0.1 ads.vnuemedia.com
127.0.0.1 sevenc.vze.com #[VBS.Powcox@mm]
127.0.0.1 www.w3exit.com
127.0.0.1 ng3.ads.warnerbros.com
127.0.0.1 wazam.com
127.0.0.1 www.wazam.com #[Parasite.Wazam]
127.0.0.1 wcft.net #[Parasite.LinkReplacer]
127.0.0.1 www.wcft.net
127.0.0.1 ads.weather.com
127.0.0.1 ads.webattack.com
127.0.0.1 webcounter.com
127.0.0.1 www.webcounter.com
127.0.0.1 www.weblink.ru
127.0.0.1 adv.webmd.com
127.0.0.1 webhits.de
127.0.0.1 banners.webmasterplan.com
127.0.0.1 stat.webmedia.pl
127.0.0.1 bannervip.web1000.com
127.0.0.1 ads.webads360.com
127.0.0.1 clickcash.webpower.com

#6 Nekoyasha

Member

Group: Members
Posts: 31
Joined: 12-April 07
Location:Sumter SC, USA

Posted 13 April 2007 - 08:58 AM

127.0.0.1 orders.webpower.com
127.0.0.1 img.webring.com
127.0.0.1 img1.webring.com
127.0.0.1 ads.webshots.com
127.0.0.1 websponsors.com
127.0.0.1 a.websponsors.com
127.0.0.1 ads.websponsors.com
127.0.0.1 g.websponsors.com
127.0.0.1 www.websponsors.com
127.0.0.1 www.webstars2000.com
127.0.0.1 hits.webstat.com
127.0.0.1 www.wenksdisdkjeilsow.com #[Parasite.AutoStartup][Download.Trojan]
127.0.0.1 wetrack.it
127.0.0.1 st.wetrack.it
127.0.0.1 partner1.whatsfind.com
127.0.0.1 www.whatsfind.com #[HTML_STARTPAGE.C]
127.0.0.1 window1.com
127.0.0.1 ads.winhelp2002.com
127.0.0.1 ads.winsite.com
127.0.0.1 winstream.com #[Parasite.Searchex]
127.0.0.1 www.winstream.com
127.0.0.1 clicktrack.wnu.com
127.0.0.1 www.wowweb.net #[Adware.WWWBar]
127.0.0.1 www.wurldmedia.com #[Adware.Wurldmedia][WurldMedia][KB321923]
127.0.0.1 x0x.biz
127.0.0.1 www.x0x.biz #[Backdoor.Berbew.D]
127.0.0.1 xtra.co.nz
127.0.0.1 nedstats.xs4all.nl
127.0.0.1 hit1.xstats.com
127.0.0.1 view1.xstats.com
127.0.0.1 ads.xtra.co.nz
127.0.0.1 bs.yandex.ru
127.0.0.1 counter.yadro.ru
127.0.0.1 crsky2004.yeah.net #[Backdoor.Singu.B]
127.0.0.1 yourspecialoffers.com #[FavoriteMan]
127.0.0.1 www.yourspecialoffers.com
127.0.0.1 ysearchus.com #[Parasite.TinyBar]
127.0.0.1 www.ysearchus.com
127.0.0.1 zuvio.com #[UCSearch.ucUCSearch]
127.0.0.1 www.zuvio.com #[Adware.OpenSite][OpenSite]
127.0.0.1 bannerads.zwire.com
127.0.0.1 www.0stats.com
127.0.0.1 www.123counts.com #[hitslink.com]
127.0.0.1 www.123mania.com #[SrchHook Class][Parasite.123Mania]
127.0.0.1 123stat.com
127.0.0.1 1234.2bro.com #[Adware.Satbo]
127.0.0.1 www.241hits.com
127.0.0.1 up.isp.2ch.net #[Trojan.Upchan]
127.0.0.1 www.321search.com #[SearchAssistant.dll]
127.0.0.1 ct.360i.com
127.0.0.1 www.ff.iij4u.or.jp #[Trojan.Upchan]
127.0.0.1 download.35mb.com #[impregnable.net]
127.0.0.1 www.35mb.com #[download_35mb_com.applet]
127.0.0.1 1000stars.ru
127.0.0.1 xxxwwwjjjhd.20forfree.com #[W32.Autex.Worm]
127.0.0.1 www.xxxwwwjjjhd.20forfree.com
127.0.0.1 ad.37.com
127.0.0.1 2jm.com
127.0.0.1 7adpower.com
127.0.0.1 www.7adpower.com #[Svezia.Dialer][VacPro.UserControl1]
127.0.0.1 7am.com
127.0.0.1 www.777search.com #[LOP]
127.0.0.1 ad2.163.com
127.0.0.1 adclient.163.com
127.0.0.1 popme.163.com
127.0.0.1 smtp.163.com #[Trojan.PSW.Ajim_bbs]
127.0.0.1 ajim.delphibbs.com #[Trojan.PSW.Ajim_bbs]
127.0.0.1 14713804A.l2m.net #[LiveTechnology]
127.0.0.1 banner.50megs.com
127.0.0.1 guannan.3322.net #[Restricted Zone site]
127.0.0.1 www.fan8.com
127.0.0.1 banners.dot.tk
127.0.0.1 topsites.us #[Parasite.eStart]
127.0.0.1 0-ol1oiz-xolxii1-oxli10ozl1l1-o-l-11-iizxp-l-0o-oll11iz0oil-ol.com
127.0.0.1 www.123banners.com
127.0.0.1 ftp.123banners.com
127.0.0.1 123go.com
127.0.0.1 ns1.123go.net
127.0.0.1 n-case.com
127.0.0.1 www.n-case.com
127.0.0.1 180solutions.com #[KB320162][NCase]
127.0.0.1 ads.180solutions.com
127.0.0.1 ax.180solutions.com #[180SAInstaller Class]
127.0.0.1 bis.180solutions.com #[nCaseInstaller Class]
127.0.0.1 bisads.180solutions.com
127.0.0.1 downloads.180solutions.com
127.0.0.1 installs.180solutions.com
127.0.0.1 ping.180solutions.com
127.0.0.1 tv.180solutions.com
127.0.0.1 www.180solutions.com #[Parasite.nCase]
127.0.0.1 www.180searchassistant.com #[Adware.180Search]
127.0.0.1 www.surfassistant.com #[Adware.SurfAssistant]
127.0.0.1 downloads.zango.com
127.0.0.1 games.zango.com
127.0.0.1 infinity.zango.com #[ZangoInstaller Class]
127.0.0.1 messenger.zango.com
127.0.0.1 showtimes.zango.com
127.0.0.1 www.zango.com
127.0.0.1 www.zangomessenger.com
127.0.0.1 www.zangoshowtimes.com
127.0.0.1 address.3721.com
127.0.0.1 agent.3721.com
127.0.0.1 assistant.3721.com
127.0.0.1 cns.3721.com
127.0.0.1 cnsmin.3721.com
127.0.0.1 corp.3721.com
127.0.0.1 dir.3721.com
127.0.0.1 download.3721.com
127.0.0.1 express.3721.com
127.0.0.1 img.3721.com
127.0.0.1 magic.3721.com
127.0.0.1 mark.3721.com
127.0.0.1 meta.3721.com
127.0.0.1 msearch.3721.com
127.0.0.1 sbox.3721.com
127.0.0.1 shanghai.3721.com
127.0.0.1 sina.3721.com
127.0.0.1 user.3721.com
127.0.0.1 wap.3721.com
127.0.0.1 www.3721.com #[Adware.Chinet]
127.0.0.1 yahoo.3721.com
127.0.0.1 3721.com
127.0.0.1 download.feiyang.com
127.0.0.1 adtracker.411web.com
127.0.0.1 hits.411web.com
127.0.0.1 overture.411web.com
127.0.0.1 static.411web.com
127.0.0.1 xml.411web.com
127.0.0.1 search.letssearch.com
127.0.0.1 search2.letssearch.com
127.0.0.1 www.letssearch.com #[BrowserAid.LetsSearch]
127.0.0.1 7search.com #[Parasite.7FaSSt Search]
127.0.0.1 www.7search.com
127.0.0.1 fstrack.7search.com
127.0.0.1 impression.7search.com
127.0.0.1 img.7meta.com
127.0.0.1 www.7metasearch.com
127.0.0.1 bannerx.adtactics.com
127.0.0.1 adtactics.com
127.0.0.1 www.adtactics.com
127.0.0.1 ajokeaday.com
127.0.0.1 bannersxchange.com
127.0.0.1 img.bannersxchange.com
127.0.0.1 www.linkstoyou.com
127.0.0.1 www.payperranking.com
127.0.0.1 www.pay-per-search.com
127.0.0.1 paypertext.com
127.0.0.1 predictivesearch.com
127.0.0.1 tracking.roispy.com
127.0.0.1 www.roispy.com
127.0.0.1 tracking.spiderbait.com
127.0.0.1 www.spiderbait.com
127.0.0.1 advertisingagent.com
127.0.0.1 clicks.about.com
127.0.0.1 f.about.com
127.0.0.1 home.about.com
127.0.0.1 js.get.about.com
127.0.0.1 images.about.com
127.0.0.1 lunafetch.about.com
127.0.0.1 pixel3.about.com
127.0.0.1 sprinks-clicks.about.com
127.0.0.1 statistics.s5.com
127.0.0.1 ad.aboutwebservices.com
127.0.0.1 abroadsoftware.com #[EzSearchBar]
127.0.0.1 allsubtitles.exits.ro
127.0.0.1 best.exits.ro
127.0.0.1 books.exits.ro
127.0.0.1 www.exits.ro
127.0.0.1 superwebsearch.com #[Parasite.ILookup][Adware.ILookup]
127.0.0.1 www.superwebsearch.com
127.0.0.1 adops.adbureau.net
127.0.0.1 etype.adbureau.net
127.0.0.1 www.adbureau.net
127.0.0.1 accipiter.speedera.net
127.0.0.1 ad-blaster.com
127.0.0.1 www.ad-blaster.com
127.0.0.1 promote4profit.com
127.0.0.1 www.promote4profit.com
127.0.0.1 addfreestats.com
127.0.0.1 top.addfreestats.com
127.0.0.1 www.addfreestats.com
127.0.0.1 www.3dstats.com
127.0.0.1 www1.addfreestats.com
127.0.0.1 www2.addfreestats.com
127.0.0.1 www3.addfreestats.com
127.0.0.1 adlogix.com #[InPop.InControl][IEEnhancer]
127.0.0.1 lasagne.adlogix.com
127.0.0.1 publisher.adlogix.com
127.0.0.1 traffic.adlogix.com
127.0.0.1 trafficsource.adlogix.com
127.0.0.1 www.adlogix.com
127.0.0.1 getpopped.com
127.0.0.1 www.getpopped.com
127.0.0.1 hitgo.com #[IPU][InPop.InControl]
127.0.0.1 www.hitgo.com
127.0.0.1 popmonster.com #[IEFeature Class]
127.0.0.1 www.popmonster.com #[TROJ_POPMON.A]
127.0.0.1 r2.trafficserverstats.com
127.0.0.1 ads.adorigin.com
127.0.0.1 dev.adorigin.com
127.0.0.1 www.adorigin.com
127.0.0.1 blowsearch.com
127.0.0.1 msxml.blowsearch.com
127.0.0.1 web.blowsearch.com #[infospace.com]
127.0.0.1 www.blowsearch.com
127.0.0.1 cb.adprofile.net
127.0.0.1 content.adprofile.net
127.0.0.1 tx.adprofile.net
127.0.0.1 w2-ver.adprofile.net
127.0.0.1 adteractive.com
127.0.0.1 www.adteractive.com
127.0.0.1 adtegrity.com
127.0.0.1 www.adtegrity.com
127.0.0.1 webalize.com #[SearchCentrix][VisiCom.SearchCentric]
127.0.0.1 toolbar.webalize.com #[downloads.searchcentrix.com]
127.0.0.1 www.webalize.com #[Visicom Media Toolbar]
127.0.0.1 webalize.net
127.0.0.1 www.webalize.net
127.0.0.1 webalize.mygeek.com
127.0.0.1 advertisementbanners.com
127.0.0.1 ads.specificclick.com
127.0.0.1 www.specificclick.com
127.0.0.1 specificpop.com
127.0.0.1 ads.specificpop.com
127.0.0.1 banners.specificpop.com
127.0.0.1 www.specificpop.com
127.0.0.1 adopt.specificclick.net
127.0.0.1 images.specificclick.net
127.0.0.1 image.adjuggler.com
127.0.0.1 rotator.adjuggler.com
127.0.0.1 www.adjuggler.com
127.0.0.1 thruport.com
127.0.0.1 adj54.thruport.com
127.0.0.1 imageserver1.thruport.com
127.0.0.1 www.thruport.com
127.0.0.1 alset.com #[WIN32/HXDL AL]
127.0.0.1 www.alset.com
127.0.0.1 aveo.com
127.0.0.1 www.aveo.com
127.0.0.1 allcybersearch.com #[REG_STARTPAGE.A]
127.0.0.1 www.allcybersearch.com
127.0.0.1 amigeek.com
127.0.0.1 www.amigeek.com
127.0.0.1 clickyestoenter.net
127.0.0.1 www.clickyestoenter.net
127.0.0.1 www.gay50.com
127.0.0.1 gocybersearch.com
127.0.0.1 www.gocybersearch.com
127.0.0.1 www.hotelxxxcams.com
127.0.0.1 hotpopup.com
127.0.0.1 search.hotpopup.com
127.0.0.1 www.hotpopup.com
127.0.0.1 hotsearchbox.com #[JAVA_STARTPAGE.F]
127.0.0.1 www.hotsearchbox.com
127.0.0.1 i--search.com
127.0.0.1 www.i--search.com
127.0.0.1 jethomepage.com #[JS.Exception.Exploit]
127.0.0.1 www.jethomepage.com #[Troj/JetHome-B]
127.0.0.1 jetseeker.com #[CWS.Bootconf]
127.0.0.1 www.jetseeker.com
127.0.0.1 searchxl.com #[Adware.ZeroPopUpBar]
127.0.0.1 www.searchxl.com
127.0.0.1 tinybar.com
127.0.0.1 www.tinybar.com #[Parasite.TinyBar]
127.0.0.1 topsearcher.com #[JV/Goplanet]
127.0.0.1 www.topsearcher.com #[Troj/JetHome-J]
127.0.0.1 trixscripts.com
127.0.0.1 www.trixscripts.com
127.0.0.1 zeropopup.com #[Parasite.ZeroPopUp]
127.0.0.1 www.zeropopup.com #[Tellafriend.Trojan]
127.0.0.1 znext.com #[JS_TRAFFICHBAR.A][Parasite.TinyBar]
127.0.0.1 www.znext.com #[Parasite.ZeroPopUp][App/P0P-A]
127.0.0.1 adpowerzone.com #[SearchExplorerBar]
127.0.0.1 ads.adpowerzone.com
127.0.0.1 easy.adpowerzone.com
127.0.0.1 tb.adpowerzone.com
127.0.0.1 tb-static.adpowerzone.com #[Adware.Websearch]
127.0.0.1 www.adpowerzone.com #[Adware.Searchexplorer]
127.0.0.1 adserver.adsincontext.com
127.0.0.1 ns1.adsincontext.com
127.0.0.1 srv01.adsincontext.com
127.0.0.1 srv02.adsincontext.com
127.0.0.1 srv03.adsincontext.com
127.0.0.1 srv04.adsincontext.com
127.0.0.1 srv05.adsincontext.com
127.0.0.1 srv07.adsincontext.com
127.0.0.1 adgoblin.com #[Adware.AdGoblin]
127.0.0.1 crossroad.adgoblin.com
127.0.0.1 www.adgoblin.com #[AdGoblin.foontext]
127.0.0.1 adforce.adtech.de
127.0.0.1 adserver.adtech.de
127.0.0.1 adserv003.adtech.de
127.0.0.1 imageserv.adtech.de
127.0.0.1 livingnet.adtech.de
127.0.0.1 cdn1.adsdk.com
127.0.0.1 cdn2.adsdk.com #[VirtualBouncer]
127.0.0.1 advertising.com
127.0.0.1 adserve.advertising.com
127.0.0.1 bannerfarm.ace.advertising.com
127.0.0.1 demo.advertising.com
127.0.0.1 opera1-servedby.advertising.com
127.0.0.1 servedby.advertising.com
127.0.0.1 rd.advertising.com
127.0.0.1 wap.advertising.com
127.0.0.1 www.advertising.com
127.0.0.1 clk4.com
127.0.0.1 www.clk4.com
127.0.0.1 www.contextualclicks.com
127.0.0.1 fastseeker.com #[Adware.FastSeek]
127.0.0.1 www.fastseeker.com
127.0.0.1 spyblast.com #[Parasite.SpyBlast]
127.0.0.1 www.spyblast.com #[SBFullInst Control]
127.0.0.1 ads.ign.com
127.0.0.1 adserver.ign.com
127.0.0.1 t.ign.com
127.0.0.1 tracker.ign.com
127.0.0.1 adserver.snowball.com
127.0.0.1 polls.snowball.com
127.0.0.1 scripts.snowball.com
127.0.0.1 t.snowball.com
127.0.0.1 tracker.snowball.com
127.0.0.1 altnet.com
127.0.0.1 file.altnet.com
127.0.0.1 media.altnet.com
127.0.0.1 ts.altnet.com
127.0.0.1 tss.altnet.com
127.0.0.1 pm.altnet.com
127.0.0.1 www.altnet.com
127.0.0.1 www.altnetp2p.com
127.0.0.1 brilliantdigital.com #[Parasite.BDE]
127.0.0.1 st.brilliantdigital.com
127.0.0.1 www.brilliantdigital.com
127.0.0.1 b3d.com
127.0.0.1 www.b3d.com
127.0.0.1 bde3d.com
127.0.0.1 xiti.com
127.0.0.1 loga.xiti.com
127.0.0.1 logc13.xiti.com
127.0.0.1 logi6.xiti.com
127.0.0.1 logi7.xiti.com
127.0.0.1 logv3.xiti.com
127.0.0.1 logv18.xiti.com
127.0.0.1 logv20.xiti.com
127.0.0.1 logp.xiti.com
127.0.0.1 trafic.xiti.com
127.0.0.1 www.xiti.com
127.0.0.1 adintelligence.net
127.0.0.1 acc.adintelligence.net
127.0.0.1 adchannel.adintelligence.net
127.0.0.1 creatives.adintelligence.net
127.0.0.1 download.adintelligence.net #[SysAI]
127.0.0.1 www.adintelligence.net
127.0.0.1 adchannel.contextplus.net #[Parasite.AproposMedia]
127.0.0.1 www.contextplus.net
127.0.0.1 www.contextplus.com
127.0.0.1 adv.peopleonpage.com
127.0.0.1 app.peopleonpage.com
127.0.0.1 download.peopleonpage.com #[POP Loader]
127.0.0.1 envolo.peopleonpage.com
127.0.0.1 img.peopleonpage.com
127.0.0.1 srv.peopleonpage.com
127.0.0.1 www.peopleonpage.com #[Apropos.bho][PeopleOnPage.Apropos]
127.0.0.1 image.avenuea.com
127.0.0.1 www.avenuea.com
127.0.0.1 www.atdmt.com
127.0.0.1 click.atdmt.com
127.0.0.1 clk.atdmt.com
127.0.0.1 spd.atdmt.com
127.0.0.1 spe.atdmt.com
127.0.0.1 switch.atdmt.com
127.0.0.1 view.atdmt.com
127.0.0.1 atlasdmt.com
127.0.0.1 www.atlasdmt.com
127.0.0.1 www.avenueainc.com
127.0.0.1 active-alert-server.com
127.0.0.1 www.active-alert-server.com
127.0.0.1 amnv.net
127.0.0.1 www.amnv.net
127.0.0.1 avenuemedia.com
127.0.0.1 www.avenuemedia.com
127.0.0.1 climaxbucks.com #[ClimaxBucks.InternetOptimizer]
127.0.0.1 cdn.climaxbucks.com
127.0.0.1 mt1.climaxbucks.com
127.0.0.1 mt23.climaxbucks.com
127.0.0.1 xbs.climaxbucks.com
127.0.0.1 www.climaxbucks.com
127.0.0.1 xbs.cocktailcash.com
127.0.0.1 cocktailcash.com
127.0.0.1 www.cocktailcash.com
127.0.0.1 ads.internet-optimizer.com #[Parasite.Internet Optimizer]
127.0.0.1 internet-optimizer.com #[Downloader.Dyfcia.F]
127.0.0.1 help.internet-optimizer.com
127.0.0.1 www.internet-optimizer.com #[Adware.NetOptimizer]
127.0.0.1 www.lunasearch.com
127.0.0.1 movies-etc.com
127.0.0.1 cdn.movies-etc.com
127.0.0.1 www.movies-etc.com
127.0.0.1 yoogee.com #[Parasite.Internet Optimizer]
127.0.0.1 www.yoogee.com
127.0.0.1 c.azjmp.com
127.0.0.1 images.azoogleads.com
127.0.0.1 www.azoogleads.com
127.0.0.1 www.giftfox.com
127.0.0.1 images.imgehost.com
127.0.0.1 c.qckjmp.com
127.0.0.1 google.begin2search.com
127.0.0.1 toolbar.begin2search.com
127.0.0.1 www.begin2search.com #[Adware.Begin2search][iiittt Class]
127.0.0.1 click2findnow.com
127.0.0.1 www.click2findnow.com
127.0.0.1 www.eaffiliateinc.com
127.0.0.1 globalwebsearch.com #[Parasite.ILookup]
127.0.0.1 toolbar.globalwebsearch.com #[I-Lookup.GWS]
127.0.0.1 toolbar2.globalwebsearch.com #[iiittt Class]
127.0.0.1 www.globalwebsearch.com #[Adware.ILookup]
127.0.0.1 hotwebsearch.com
127.0.0.1 www.hotwebsearch.com
127.0.0.1 www.toonxxxfantasies.com
127.0.0.1 worldanywhere.com
127.0.0.1 toolbar.worldanywhere.com
127.0.0.1 www.worldanywhere.com
127.0.0.1 adcounter.theglobeandmail.com
127.0.0.1 adrates.theglobeandmail.com
127.0.0.1 ads.globeandmail.com
127.0.0.1 ads1.theglobeandmail.com
127.0.0.1 visit.theglobeandmail.com
127.0.0.1 www1.theglobeandmail.com
127.0.0.1 adbot.com
127.0.0.1 w1.adbot.com
127.0.0.1 www.adbot.com
127.0.0.1 counter.bloke.com
127.0.0.1 www1.counter.bloke.com
127.0.0.1 www3.counter.bloke.com
127.0.0.1 www4.counter.bloke.com
127.0.0.1 www5.counter.bloke.com
127.0.0.1 www6.counter.bloke.com
127.0.0.1 www7.counter.bloke.com
127.0.0.1 counterbot.com
127.0.0.1 cb1.counterbot.com
127.0.0.1 ak.bluestreak.com
127.0.0.1 ca1.bluestreak.com
127.0.0.1 s0.bluestreak.com
127.0.0.1 s0b.bluestreak.com
127.0.0.1 s1.bluestreak.com
127.0.0.1 s2.bluestreak.com
127.0.0.1 s3.bluestreak.com
127.0.0.1 s4.bluestreak.com
127.0.0.1 s5.bluestreak.com
127.0.0.1 s6.bluestreak.com
127.0.0.1 s7.bluestreak.com
127.0.0.1 s8.bluestreak.com
127.0.0.1 www.bluestreak.com
127.0.0.1 download.bonzi.com
127.0.0.1 images.bonzi.com
127.0.0.1 www.bonzi.com
127.0.0.1 www.bonzibuddy.com
127.0.0.1 bravenet.com
127.0.0.1 adserv.bravenet.com
127.0.0.1 images.bravenet.com
127.0.0.1 linktrack.bravenet.com
127.0.0.1 pub1.bravenet.com
127.0.0.1 www.bravenet.com
127.0.0.1 belgiandip.com #[ITS Protocol exploit]
127.0.0.1 www.belgiandip.com
127.0.0.1 fassia.net #[Parasite.AutoSearch]
127.0.0.1 www.fassia.net
127.0.0.1 flipperkeys.com
127.0.0.1 www.flipperkeys.com
127.0.0.1 www.illtemperedguppys.com
127.0.0.1 manipulatingtheicesurface.com
127.0.0.1 www.manipulatingtheicesurface.com
127.0.0.1 www.no-beba-el-agua.com
127.0.0.1 smokeandapancake.org #[Adware.Winpup]
127.0.0.1 www.smokeandapancake.org #[AdClicker-O][Troj/Psyme-C]
127.0.0.1 www.undergroundlair.net #[Troj/AdClick-N]
127.0.0.1 www2.undergroundlair.net
127.0.0.1 www.00z70az77mnsa-00swj1zzprh.com #[www2.undergroundlair.net]
127.0.0.1 www.funcionamiento-con-la-tijera.com #[undergroundlair.net]
127.0.0.1 www.pshnw6510990nmo-34nue7700.net
127.0.0.1 burstmedia.com
127.0.0.1 web.burstmedia.com
127.0.0.1 roscoe.burstmedia.com
127.0.0.1 ads.burstnet.com
127.0.0.1 gifs.burstnet.com
127.0.0.1 sj.burstnet.com
127.0.0.1 te.burstnet.com
127.0.0.1 www.burstnet.com
127.0.0.1 www2.burstnet.com
127.0.0.1 www3.burstnet.com
127.0.0.1 www4.burstnet.com
127.0.0.1 www5.burstnet.com
127.0.0.1 www6.burstnet.com
127.0.0.1 www.burstnet.akadns.net
127.0.0.1 casalemedia.com
127.0.0.1 as.casalemedia.com
127.0.0.1 asg01.casalemedia.com
127.0.0.1 asg02.casalemedia.com
127.0.0.1 asg03.casalemedia.com
127.0.0.1 asg04.casalemedia.com
127.0.0.1 asg05.casalemedia.com
127.0.0.1 asg06.casalemedia.com
127.0.0.1 asg07.casalemedia.com
127.0.0.1 asg08.casalemedia.com
127.0.0.1 asg09.casalemedia.com
127.0.0.1 asg10.casalemedia.com
127.0.0.1 asg11.casalemedia.com
127.0.0.1 asg12.casalemedia.com
127.0.0.1 asg13.casalemedia.com
127.0.0.1 aslg01.casalemedia.com
127.0.0.1 aslg02.casalemedia.com
127.0.0.1 aslg03.casalemedia.com
127.0.0.1 aslg04.casalemedia.com
127.0.0.1 aslg05.casalemedia.com
127.0.0.1 aslg06.casalemedia.com
127.0.0.1 aslg07.casalemedia.com
127.0.0.1 aslg08.casalemedia.com
127.0.0.1 aslg09.casalemedia.com
127.0.0.1 aslg10.casalemedia.com
127.0.0.1 c.casalemedia.com
127.0.0.1 i.casalemedia.com
127.0.0.1 is.casalemedia.com
127.0.0.1 isg01.casalemedia.com
127.0.0.1 isg02.casalemedia.com
127.0.0.1 isg03.casalemedia.com
127.0.0.1 isg04.casalemedia.com
127.0.0.1 isg05.casalemedia.com
127.0.0.1 isg06.casalemedia.com
127.0.0.1 isg07.casalemedia.com
127.0.0.1 isg08.casalemedia.com
127.0.0.1 isg09.casalemedia.com
127.0.0.1 isg10.casalemedia.com
127.0.0.1 r.casalemedia.com
127.0.0.1 www.casalemedia.com
127.0.0.1 www.noadwarenow.com
127.0.0.1 www.spywarestormer.com #[CInstall Class]
127.0.0.1 active-max.com
127.0.0.1 search.active-max.com
127.0.0.1 www.active-max.com
127.0.0.1 allaboutsearching.com
127.0.0.1 www.allaboutsearching.com
127.0.0.1 amazingautossearch.com
127.0.0.1 www.amazingautossearch.com
127.0.0.1 contexualsearch.com
127.0.0.1 www.contexualsearch.com
127.0.0.1 www.dialup2.com
127.0.0.1 ecpm.com
127.0.0.1 www.ecpm.com
127.0.0.1 find-quick.com
127.0.0.1 www.find-quick.com
127.0.0.1 look-today.com
127.0.0.1 www.look-today.com
127.0.0.1 lop.com
127.0.0.1 ao.lop.com
127.0.0.1 ayb.lop.com
127.0.0.1 bins.lop.com
127.0.0.1 k17177.bins.lop.com
127.0.0.1 img.lop.com
127.0.0.1 sue.lop.com
127.0.0.1 srch.lop.com #[Parasite.LOP]
127.0.0.1 www1.lop.com
127.0.0.1 www.lop.com
127.0.0.1 maxexp.com
127.0.0.1 www.mp3search.com
127.0.0.1 mysearchnow.com
127.0.0.1 search200.com
127.0.0.1 www.search200.com
127.0.0.1 search.mysearchnow.com
127.0.0.1 www.mysearchnow.com
127.0.0.1 netsearchsoft.com
127.0.0.1 www.netsearchsoft.com
127.0.0.1 omegasearch.com
127.0.0.1 www.omegasearch.com
127.0.0.1 prosearching.com
127.0.0.1 www.prosearching.com
127.0.0.1 www.rub.to
127.0.0.1 sbvr.com
127.0.0.1 www.sbvr.com
127.0.0.1 searchexe.com
127.0.0.1 www.searchexe.com
127.0.0.1 searchweb2.com
127.0.0.1 www.searchweb2.com
127.0.0.1 spawnet.com
127.0.0.1 www.spawnet.com
127.0.0.1 tdmy.com #[TrojanDownloader.Win32.Swizzor.h]
127.0.0.1 tefs.com
127.0.0.1 tfil.com
127.0.0.1 www.tfil.com
127.0.0.1 tdko.com
127.0.0.1 www.tdko.com
127.0.0.1 wfix.com #[super-spider.com]
127.0.0.1 installdollars.com #[affiliate]
127.0.0.1 download.msgplus.net
127.0.0.1 files.msgplus.net
127.0.0.1 plugins.msgplus.net
127.0.0.1 www.msgplus.net
127.0.0.1 www.msgpluszone.com
127.0.0.1 www.patchou.com
127.0.0.1 clickxchange.com
127.0.0.1 caweb1.clickxchange.com
127.0.0.1 caweb2.clickxchange.com
127.0.0.1 www.clickxchange.com
127.0.0.1 public.americandaytrading.com
127.0.0.1 blazefind.com #[IE SearchBar]
127.0.0.1 omniscient.blazefind.com #[TROJ_BLAZEFIND.A]
127.0.0.1 xml.blazefind.com
127.0.0.1 www.blazefind.com #[Adware.BlazeFind]
127.0.0.1 cdtnet.net
127.0.0.1 anne.cdtnet.net
127.0.0.1 caroline.cdtnet.net
127.0.0.1 flingstone.com #[TROJ_WINFAVS.A]
127.0.0.1 redirect.flingstone.com
127.0.0.1 static.flingstone.com #[brdg Class]
127.0.0.1 www.flingstone.com #[Adware.WinFavorites.B]
127.0.0.1 www2.flingstone.com #[brdg Class][Win32/Bryss.Spy.Trojan]
127.0.0.1 homepagecash.com
127.0.0.1 www.homepagecash.com
127.0.0.1 loudcash.com
127.0.0.1 partners.loudcash.com
127.0.0.1 www.loudcash.com
127.0.0.1 searchbarcash.com
127.0.0.1 public.searchbarcash.com #[WinFavorites][DownloadUL Class]
127.0.0.1 www.searchbarcash.com #[Parasite.TinyBar]
127.0.0.1 searchbrowser.com
127.0.0.1 findwhatevernow.searchbrowser.com
127.0.0.1 skoobidoo.com
127.0.0.1 www.skoobidoo.com
127.0.0.1 www2.skoobidoo.com #[Downloader.MSCache]
127.0.0.1 public.windupdates.com #[Windows SyncroAd]
127.0.0.1 www.windupdates.com #[AdvWare.WinAD]
127.0.0.1 counterstrike.server.us #[Downloader.CDT]
127.0.0.1 bannerexchange.cjb.net
127.0.0.1 coder3862004.cjb.net #[Trojan.Bansap]
127.0.0.1 pop.mircx.com #[Trojan.Bansap]
127.0.0.1 searchwww.com
127.0.0.1 search.searchwww.com #[Parasite.SearchWWW]
127.0.0.1 vbs.searchwww.com
127.0.0.1 www.searchwww.com
127.0.0.1 dafinder.com
127.0.0.1 www2.dafinder.com
127.0.0.1 www3.dafinder.com
127.0.0.1 adult.getmoviesonline.com
127.0.0.1 www.getmoviesonline.com
127.0.0.1 ourlinklist.com
127.0.0.1 searchaccurate.com #[Parasite.TinyBar]
127.0.0.1 www.searchaccurate.com
127.0.0.1 ads.web.aol.com
127.0.0.1 affiliate.aol.com
127.0.0.1 aim.aol.com
127.0.0.1 dynamic.aol.com
127.0.0.1 free.aol.com
127.0.0.1 usaol.com
127.0.0.1 ar.atwola.com
127.0.0.1 pr.atwola.com
127.0.0.1 ads.newline.aol.com
127.0.0.1 p.specialoffers.aol.com
127.0.0.1 adremote.pathfinder.com
127.0.0.1 adremote.timeinc.net
127.0.0.1 aolwpnscom.112.2o7.net
127.0.0.1 aolwpnswhatsnew.112.2o7.net
127.0.0.1 adimg.cnet.com
127.0.0.1 remotead-internal.cnet.com
127.0.0.1 remotead.cnet.com
127.0.0.1 ads.com.com
127.0.0.1 adimg.com.com
127.0.0.1 adlog.com.com
127.0.0.1 cj.com
127.0.0.1 www.cj.com
127.0.0.1 www.commission-junction.com
127.0.0.1 qksrv.com
127.0.0.1 www.qksrv.net
127.0.0.1 www.qksz.net
127.0.0.1 secure.comodo.net
127.0.0.1 www.comodo.net #[certificate issuer]
127.0.0.1 www.instantssl.com
127.0.0.1 trusttoolbar.com
127.0.0.1 www.trusttoolbar.com
127.0.0.1 commonname.com
127.0.0.1 www.commonname.com
127.0.0.1 commonnames.com
127.0.0.1 www.commonnames.com
127.0.0.1 xpsn.com
127.0.0.1 www.xpsn.com
127.0.0.1 mn104.coolsavings.com
127.0.0.1 www101.coolsavings.com
127.0.0.1 www102.coolsavings.com
127.0.0.1 www105.coolsavings.com
127.0.0.1 www108.coolsavings.com
127.0.0.1 www109.coolsavings.com
127.0.0.1 www112.coolsavings.com #[CMV5 Class]
127.0.0.1 www113.coolsavings.com
127.0.0.1 coolwebsearch.com
127.0.0.1 stats.coolwebsearch.com
127.0.0.1 www.coolwebsearch.com #[CWS/IEFeats]
127.0.0.1 0websearch.com
127.0.0.1 1-se.com #[CWS.Aboutblank][W32.Tuoba.Trojan]
127.0.0.1 www.1-se.com #[VBS.Startpage.C]
127.0.0.1 1stpagehere.com
127.0.0.1 www.1stpagehere.com
127.0.0.1 www.31234.com #[CWS.Msconfig]
127.0.0.1 4-counter.com #[CWS.Winproc32][icanfindit.net]
127.0.0.1 a-search.biz
127.0.0.1 adasearch.com
127.0.0.1 www.adasearch.com
127.0.0.1 adulthyperlinks.com #[Parasite.CoolWebSearch]
127.0.0.1 www.adulthyperlinks.com
127.0.0.1 acc.count-all.com #[CWS.Tapicfg]
127.0.0.1 aifind.info #[CWS.Xmlmimefilter][Trojan.Bookmarker.B,F]
127.0.0.1 allhyperlinks.com #[CWS.DNSRelay]
127.0.0.1 www.allhyperlinks.com #[CWS.OSLogo][CWS.Oemsyspnp]
127.0.0.1 alfa-search.com #[CWS.Alfasearch]
127.0.0.1 www.alfa-search.com
127.0.0.1 allneedsearch.com #[TROJ_STARTPAGE.B][find-itnow.com]
127.0.0.1 approvedlinks.com #[super-spider.com]
127.0.0.1 best-search.info #[CWS.Smartfinder.2]
127.0.0.1 www.clearsearch.net
127.0.0.1 www.coolfreehost.com
127.0.0.1 coolsearch.biz #[Trojan.Win32.StartPage.po]
127.0.0.1 www.coolsearch.biz
127.0.0.1 www.crooder.com
127.0.0.1 defaultsearching.com #[CWS.Sounddrv][searchmeup.com]
127.0.0.1 drusearch.com #[Download.Ject.B]
127.0.0.1 easy-search.biz #[Adware.EasySearch]
127.0.0.1 www.e-finder.cc #[CWS.Addclass.2][StartPage-DA]
127.0.0.1 ehttp.cc #[CWS.Addclass][TROJ_STARTPAGE.D, F][Spyware.CWSAddClass]
127.0.0.1 enjoysearch.info #[CWS.Xxxvideo]
127.0.0.1 www.enjoysearch.info
127.0.0.1 e-plus.cc #[Adware.WorldSearch]
127.0.0.1 www.e-plus.cc
127.0.0.1 fastwebfinder.com #[App/FastWeb-A][Adware.Fastwebfinder]
127.0.0.1 www.fastwebfinder.com #[CWS.Aff.Tooncomics.2][search.targetwords.com]
127.0.0.1 find-itnow.com #[W32.Bizten][CWS.Alfasearch.2]
127.0.0.1 just.find-itnow.com #[StartPage-AU]
127.0.0.1 www.find-itnow.com #[W32.Hostidel.Trojan][TROJ_HOSTIDEL.A]
127.0.0.1 findloss.com #[umaxsearch.com]
127.0.0.1 www.findloss.com
127.0.0.1 find-online.net #[TROJ_STARTPAG.GY]
127.0.0.1 www.find-online.net
127.0.0.1 firstbookmark.com #[Parasite.ClientMan]
127.0.0.1 www.firstbookmark.com
127.0.0.1 www.geo-traffic.com #[redirects to search.msmn.com]
127.0.0.1 globe-finder.cc #[Win32.Startpage.N]
127.0.0.1 globe-finder.net #[clearsearch.net]
127.0.0.1 www.globe-finder.net
127.0.0.1 global-finder.com #[CWS.Msinfo]
127.0.0.1 www.global-finder.com
127.0.0.1 gonnasearch.com #[CWS.Gonnasearch]
127.0.0.1 www.gonnasearch.com #[supaseek.com]
127.0.0.1 greg-search.com #[TrojanDropper.Win32.Small.cw]
127.0.0.1 www.greg-search.com
127.0.0.1 www.heretofind.com
127.0.0.1 hotbookmark.com #[Troj/IEStart-F]
127.0.0.1 www.hotbookmark.com
127.0.0.1 idgsearch.com #[GoogleMS Search Helper][CWS.Googlems]
127.0.0.1 www.idgsearch.com #[Trojan.Digits]
127.0.0.1 icansearch.net
127.0.0.1 www.icansearch.net
127.0.0.1 www.i-search.us
127.0.0.1 ie-search.com #[CWS.Loadbat][umaxsearch.com]
127.0.0.1 www.ie-search.com
127.0.0.1 iefeadsl.com #[Win32.Winshow.G]
127.0.0.1 www.iefeadsl.com
127.0.0.1 luckysearch.net #[CWS.Tapicfg]
127.0.0.1 www.luckysearch.net
127.0.0.1 lustler.com
127.0.0.1 www.lustler.com
127.0.0.1 www.makemesearch.com
127.0.0.1 martfinder.com #[Adware.StartPage][Troj/StartPa-GH]
127.0.0.1 www.martfinder.com
127.0.0.1 microsoit.com #[QUrl-2]
127.0.0.1 www.microsoit.com
127.0.0.1 404.msmn.com
127.0.0.1 search.msmn.com
127.0.0.1 gotosearch.msmn.com
127.0.0.1 bjvvhk.t.muxa.cc #[Adware.Raxums][random sub-domains]
127.0.0.1 myexexex.com #[CWS.Jsconsole]
127.0.0.1 www.myexexex.com
127.0.0.1 www.mywebsearch.net
127.0.0.1 ntsearch.com
127.0.0.1 www.ntsearch.com #[Trojan.Win32.Spooner.d][Adware-NSearch]
127.0.0.1 omega-search.com #[CWS.Olehelp][Trojan.Bookmarker.D]
127.0.0.1 best.omega-search.com
127.0.0.1 www.omega-search.com
127.0.0.1 payfortraffic.net #[CWS.Dnsrelay.3][CWS.Msole]
127.0.0.1 www.payfortraffic.net
127.0.0.1 power-search.info #[Trojan.Bookmarker.G]
127.0.0.1 www.power-search.info
127.0.0.1 real-yellow-page.com #[CWS.Realyellowpage]
127.0.0.1 rdposters.com #[Trojan.Win32.Adex.a]
127.0.0.1 rightfinder.net #[CWS.Addclass.2]
127.0.0.1 www.rightfinder.net #[Troj/StartPg-AY]
127.0.0.1 riviera.cc
127.0.0.1 opti.riviera.cc
127.0.0.1 runsearch.com #[CWS.Mupdate]
127.0.0.1 www.runsearch.com
127.0.0.1 www.searchbar.info #[Neo Toolbar]
127.0.0.1 searchcentral.cc
127.0.0.1 searchdesire.com
127.0.0.1 search-dot.com #[CWS.Systeminit][Adware.Searchdot]
127.0.0.1 www.search-dot.com
127.0.0.1 www.search-for-you.com #[Troj/StartPa-IC][searchmeup.com]
127.0.0.1 searchx.cc #[CWS.Searchx][Trojan.Win32.StartPage.fw]
127.0.0.1 www.searchmeup.cc
127.0.0.1 searchpage.cc
127.0.0.1 search-town.net #[riviera.cc]
127.0.0.1 slawsearch.com #[CWS.Svchost32]
127.0.0.1 www.slawsearch.com #[CWS.Ctfmon32]
127.0.0.1 www.smart-security.info
127.0.0.1 solongas.com #[CWS.Hputi]
127.0.0.1 speed-search.biz
127.0.0.1 www.speed-search.biz
127.0.0.1 www.sp2admin.biz #[Trojan.Win32.StartPage.po]
127.0.0.1 ssearch.biz
127.0.0.1 supersearch.com
127.0.0.1 www.supersearch.com #[CWS.Msoffice.3]
127.0.0.1 super-spider.com #[CWS.Control][TROJ_KREPPER.I]
127.0.0.1 tadstore.cc #[CWS.Addclass.2][rightfinder.net]
127.0.0.1 t.rack.cc #[TROJ_SEEKER.B]
127.0.0.1 roquvp.t.rack.cc
127.0.0.1 teen-biz.com #[Trojan.Win32.StartPage.bh]
127.0.0.1 thebestse.com #[searchmeup.com]
127.0.0.1 www.thebestse.com
127.0.0.1 the-exit.com #[server down?]
127.0.0.1 www.the-exit.com
127.0.0.1 www.the-huns-yellow-pages.com
127.0.0.1 thenewsearch.com #[Adware.SearchNew][StartPage-DB]
127.0.0.1 other.thenewsearch.com
127.0.0.1 www.thenewsearch.com
127.0.0.1 topfivesearch.com
127.0.0.1 www.topfivesearch.com
127.0.0.1 toteen.com #[Trojan.Bookmarker.G]
127.0.0.1 out.true-counter.com #[Trojan.Bootconf][CWS.Msinfo]
127.0.0.1 true-counter.com #[Trojan.Slog]
127.0.0.1 www.true-counter.com
127.0.0.1 download.vladzone.com #[TROJ_SMALL.LY]
127.0.0.1 in.webcounter.cc #[CWS.Tapicfg.2][Adware.SearchCounter]
127.0.0.1 www.wholeworldmarket.com #[CWS.Systeminit.2]
127.0.0.1 win-eto.com
127.0.0.1 www.windowws.cc #[CWS.Control][search2004.net]
127.0.0.1 www.wow-access.com
127.0.0.1 yellow-pages.ws #[searchmeup.com]
127.0.0.1 adult.yellow-pages.ws
127.0.0.1 search.yellow-pages.ws
127.0.0.1 www.yellow500.com #[Troj/IEStart-F]
127.0.0.1 www.youfindall.com #[CWS.Aff.Winshow]
127.0.0.1 www.your-search.info #[Trojan.Bookmarker.Gen][CWS.Systeminit]
127.0.0.1 zloeboogle.biz #[ssearch.biz]
127.0.0.1 search-1.net
127.0.0.1 search-about.net
127.0.0.1 www.search-about.net
127.0.0.1 search-aid.com
127.0.0.1 www.search-aid.com #[CoolWebSearch.iefeatsl]
127.0.0.1 search-click.com
127.0.0.1 www.search-click.com
127.0.0.1 search-company.com
127.0.0.1 www.search-company.com
127.0.0.1 search-direct.net
127.0.0.1 www.search-direct.net
127.0.0.1 www.search-and-find.net
127.0.0.1 audioseek.net
127.0.0.1 music-downloads.audioseek.net
127.0.0.1 www.audioseek.net
127.0.0.1 conspy.com
127.0.0.1 conf.conspy.com
127.0.0.1 www.conspy.com
127.0.0.1 hangoutspot.com
127.0.0.1 www.hangoutspot.com
127.0.0.1 searchmyrequest.com #[StartPage-BS]
127.0.0.1 conf.searchmyrequest.com #[CWS.Therealsearch.2]
127.0.0.1 therealsearch.com #[CWS.Therealsearch]
127.0.0.1 conf.therealsearch.com
127.0.0.1 www.therealsearch.com #[fastwebfinder.com][Trojan.Realsrch.A]
127.0.0.1 all-websearch.com
127.0.0.1 www.all-websearch.com
127.0.0.1 conyc.com
127.0.0.1 on-search.com
127.0.0.1 www.on-search.com
127.0.0.1 searchportal.info #[StartPage-EM]
127.0.0.1 count.cc
127.0.0.1 js.count.cc
127.0.0.1 oz.msie.tv
127.0.0.1 th.msie.tv
127.0.0.1 vn.msie.tv
127.0.0.1 c1dcon.ewizard.cc
127.0.0.1 s12ds1.ewizard.cc
127.0.0.1 s1di.ewizard.cc
127.0.0.1 any-find.com
127.0.0.1 www.any-find.com
127.0.0.1 bizonio.com
127.0.0.1 www.bizonio.com
127.0.0.1 dubolom.com
127.0.0.1 www.dubolom.com
127.0.0.1 find4u.net #[CWS.IEengine]
127.0.0.1 www.find4u.net
127.0.0.1 free-spy-cam.net
127.0.0.1 getthis4free.com
127.0.0.1 www.getthis4free.com
127.0.0.1 terra.hbison.com
127.0.0.1 hcworld.com
127.0.0.1 free.hcworld.com
127.0.0.1 terra.hcworld.com
127.0.0.1 klounada.com
127.0.0.1 www.klounada.com
127.0.0.1 my-find.com
127.0.0.1 www.my-find.com
127.0.0.1 mypoisk.com
127.0.0.1 mypoiskovik.com
127.0.0.1 www.mypoiskovik.com
127.0.0.1 quick-searcher.com
127.0.0.1 topotun.com #[Adware.Topotun]
127.0.0.1 www.topotun.com
127.0.0.1 web-cams-chat.com
127.0.0.1 yourpoiskovik.com
127.0.0.1 www.yourpoiskovik.com
127.0.0.1 your-searcher.com #[CWS.IEengine][StartPage-DQ]
127.0.0.1 ls0.net
127.0.0.1 0cj.net
127.0.0.1 www.cannotfind.net #[Adult Search bar]
127.0.0.1 ez-finder.com #[server down?]
127.0.0.1 www.iwantsearch.com
127.0.0.1 www.kliksearch.com #[CWS.Aff.Toolband]
127.0.0.1 6410.directwebsearch.net
127.0.0.1 7842.directwebsearch.net
127.0.0.1 dinamo.directwebsearch.net
127.0.0.1 dka.directwebsearch.net
127.0.0.1 get.directwebsearch.net
127.0.0.1 gkn.directwebsearch.net
127.0.0.1 mega.directwebsearch.net
127.0.0.1 realtime.directwebsearch.net
127.0.0.1 solar.directwebsearch.net
127.0.0.1 supacoopa.directwebsearch.net
127.0.0.1 weba.directwebsearch.net
127.0.0.1 woar.directwebsearch.net
127.0.0.1 zond.directwebsearch.net
127.0.0.1 blanksearch.biz
127.0.0.1 cashsearch.biz
127.0.0.1 greatsearch.biz
127.0.0.1 adult-friends-finder.net
127.0.0.1 coolsearcher.info #[CoolSearcher ToolBar]
127.0.0.1 www.coolsearcher.info
127.0.0.1 www.coolwebsearch.org
127.0.0.1 fdadfswr.com #[Adware.FreeComm]
127.0.0.1 www.fdadfswr.com
127.0.0.1 www.netcross.cz #[NetCross.cz ToolBar]
127.0.0.1 searchcomplete.com #[Adware.YellowPages]
127.0.0.1 www.searchcomplete.com
127.0.0.1 searchforge.com
127.0.0.1 www.searchforge.com
127.0.0.1 05p.com
127.0.0.1 www.05p.com
127.0.0.1 6o9.com #[Win32.Winshow.N]
127.0.0.1 www.6o9.com
127.0.0.1 cc20foreva.com
127.0.0.1 mig29here.com #[PWSteal.Revcuss.C]
127.0.0.1 t34rulit.com #[Adware.SuperSpider]
127.0.0.1 171203.com
127.0.0.1 www.171203.com
127.0.0.1 356563.net #[Win32.Winshow.G]
127.0.0.1 www.356563.net
127.0.0.1 8ad.com #[Parasite.Winshow]
127.0.0.1 www.8ad.com
127.0.0.1 75tz.com #[Win32.Winshow.G]
127.0.0.1 www.75tz.com
127.0.0.1 ad25.com
127.0.0.1 ad45.com
127.0.0.1 ad77.com
127.0.0.1 ad86.com
127.0.0.1 fine-search.net
127.0.0.1 www.fine-search.net
127.0.0.1 full-search.net
127.0.0.1 lookfor.cc #[TROJ_IEFEATS.A]
127.0.0.1 www.lookfor.cc
127.0.0.1 looking-for.cc
127.0.0.1 search-all-fast.com #[Win32.Winshow.N]
127.0.0.1 search-to-find.com #[searchxp.com]
127.0.0.1 coolpage.cc #[CWS.Realyellowpage]
127.0.0.1 ww11.coolpage.cc
127.0.0.1 here4search.com #[Downloader.Tooncom][CWS.Aff.Tooncomics]
127.0.0.1 www.here4search.com
127.0.0.1 icanfindit.net
127.0.0.1 www.icanfindit.net #[CWS.Winproc32]
127.0.0.1 list2004.com #[CWS.Realyellowpage]
127.0.0.1 linklist.cc #[CWS.Realyellowpage][Adware.Raxums][coolpage.cc]
127.0.0.1 ww9.linklist.cc
127.0.0.1 www.linklist.cc
127.0.0.1 www.search-and-go.com
127.0.0.1 searchmeup.com #[CWS.Svcinit.3]
127.0.0.1 www.searchmeup.com
127.0.0.1 searchmeup.net
127.0.0.1 www.searchmeup.net
127.0.0.1 thesten.com #[CWS.Aff.Winshow.3]
127.0.0.1 www.topsearch10.com
127.0.0.1 umaxsearch.com #[TROJ_ESEPOR.A][CWS.Xplugin]
127.0.0.1 affiliates.umaxsearch.com
127.0.0.1 www.umaxsearch.com #[Adware.Umaxsearch]
127.0.0.1 00hq.com #[Adware.Winshow][Parasite.Winshow]
127.0.0.1 www.00hq.com
127.0.0.1 008k.com
127.0.0.1 www.008k.com
127.0.0.1 008i.com
127.0.0.1 www.008i.com
127.0.0.1 opsex.com
127.0.0.1 www.opsex.com
127.0.0.1 searchv.com #[TROJ_STARTPAGE.U][CWS.Mupdate]
127.0.0.1 www.searchv.com #[CWS.Bootconf][SearchV.WinShow]
127.0.0.1 searchxp.com #[CWS.Bootconf]
127.0.0.1 www.searchxp.com
127.0.0.1 t73.com
127.0.0.1 www.t73.com
127.0.0.1 v61.com #[Win32.Winshow.G]
127.0.0.1 www.v61.com
127.0.0.1 windowupdate.ws #[CWS.Aboutblank]
127.0.0.1 winshow.biz
127.0.0.1 www.winshow.biz
127.0.0.1 adscpm.com
127.0.0.1 www.adscpm.com
127.0.0.1 servedby.adscpm.com
127.0.0.1 freescratchandwin.com #[Parasite.FreeScratchAndWin]
127.0.0.1 www.freescratchandwin.com
127.0.0.1 free-scratch-cards.com
127.0.0.1 www.free-scratch-cards.com
127.0.0.1 fsc2k.com
127.0.0.1 www.fsc2k.com
127.0.0.1 newtopsites.com
127.0.0.1 servedby.newtopsites.com
127.0.0.1 www.newtopsites.com
127.0.0.1 2nd-thought.com #[Parasite.Pugi][Trojan.Win32.SecondThought.c]
127.0.0.1 www.2nd-thought.com #[ADW_SECTHOUGHT.A][Adware.SecondThought]
127.0.0.1 xzoomy.com #[Adware.FreeScratchWin]
127.0.0.1 www.xzoomy.com #[NGD Systems Dialer]
127.0.0.1 frame.crazywinnings.com
127.0.0.1 pacman.crazywinnings.com
127.0.0.1 static.crazywinnings.com
127.0.0.1 static.topconverting.com #[Loader2 Control]
127.0.0.1 update.topconverting.com
127.0.0.1 www.topconverting.com
127.0.0.1 www.adwareremovergold.com
127.0.0.1 www.datashreddergold.com
127.0.0.1 iquicksearch.net
127.0.0.1 www.iquicksearch.net
127.0.0.1 www.pcspeedbooster.com
127.0.0.1 seekio.com
127.0.0.1 sureseeker.com #[JS.Trojan.Seeker.b]
127.0.0.1 www.sureseeker.com
127.0.0.1 botw.topbucks.com
127.0.0.1 cluster-03.topbucks.com
127.0.0.1 referral.topbucks.com
127.0.0.1 www.topcash.com
127.0.0.1 jcontent.bns1.net
127.0.0.1 www.bns1.net
127.0.0.1 www.bns2.net
127.0.0.1 cjt1.net
127.0.0.1 j800banners.cjt1.net
127.0.0.1 jadlogix.cjt1.net
127.0.0.1 jadtegrity.cjt1.net
127.0.0.1 jaimmedia.cjt1.net
127.0.0.1 javatar.cjt1.net
127.0.0.1 jbeet.cjt1.net
127.0.0.1 jbigpops.cjt1.net
127.0.0.1 jbouncetek.cjt1.net
127.0.0.1 jbravenet.cjt1.net
127.0.0.1 jcdcover.cjt1.net
127.0.0.1 jclickspring.cjt1.net
127.0.0.1 jcollegehumor.cjt1.net
127.0.0.1 jdownloadacc.cjt1.net
127.0.0.1 jedonkey.cjt1.net
127.0.0.1 jeuniverse.cjt1.net
127.0.0.1 jhot.cjt1.net
127.0.0.1 jicmedia.cjt1.net
127.0.0.1 jicq.cjt1.net
127.0.0.1 jieplugin.cjt1.net
127.0.0.1 jinternetoptimizer.cjt1.net
127.0.0.1 jmediabuy1.cjt1.net
127.0.0.1 jmediabuyad.cjt1.net
127.0.0.1 jmindset.cjt1.net
127.0.0.1 jmindsettest.cjt1.net
127.0.0.1 jnictech.cjt1.net
127.0.0.1 jpiolet.cjt1.net
127.0.0.1 jsanboxer.cjt1.net
127.0.0.1 jthedelfin.cjt1.net
127.0.0.1 jwarezp2p.cjt1.net
127.0.0.1 jwildmedia.cjt1.net
127.0.0.1 mediabuy-nic.cjt1.net
127.0.0.1 j.2004cms.com
127.0.0.1 www.cms1.net
127.0.0.1 www.cms2.net
127.0.0.1 ct.cydoor.com
127.0.0.1 jcms.cydoor.com
127.0.0.1 jbns2.cydoor.com
127.0.0.1 redirect.cydoor.com
127.0.0.1 www.cydoor.com
127.0.0.1 www.rgs1.net
127.0.0.1 www.rgs2.net
127.0.0.1 topicks.com #[TOPicks.B]
127.0.0.1 tpdownload.topicks.com #[Parasite.TOPicks]
127.0.0.1 tpcms.topicks.com
127.0.0.1 tpreport.topicks.com #[Adware.Topicks]
127.0.0.1 www.topicks.com
127.0.0.1 search.123-search.net #[search-exe.com]
127.0.0.1 search.media-search.net
127.0.0.1 www.media-search.net
127.0.0.1 search.scourweb.net
127.0.0.1 search.search-assist.net
127.0.0.1 search.searchduckie.net
127.0.0.1 searchenhancement.com #[Parasite.SCBar]
127.0.0.1 adserv.searchenhancement.com #[Parasite.Network Essentials]
127.0.0.1 search.searchenhancement.com
127.0.0.1 www.searchenhancement.com
127.0.0.1 search.search-exe.com
127.0.0.1 www.search-exe.com
127.0.0.1 search.sidebarsearch.com
127.0.0.1 adserv.windowenhancer.com #[Adware.WindowEnhancer]
127.0.0.1 search.windowenhancer.com #[Parasite.SCBar]
127.0.0.1 www.windowenhancer.com
127.0.0.1 ads.dealhelper.com #[DHUtility Class]
127.0.0.1 www.dealhelper.com
127.0.0.1 www.timesynchronize.com
127.0.0.1 www.weather7.com
127.0.0.1 directcoupons.com
127.0.0.1 directleads.com
127.0.0.1 track.directleads.com
127.0.0.1 ads.directstuff.com
127.0.0.1 directtrack.com
127.0.0.1 images.directtrack.com
127.0.0.1 offersquest.directtrack.com
127.0.0.1 www.directtrack.com
127.0.0.1 keywordmax.com
127.0.0.1 www.keywordmax.com
127.0.0.1 static.hitfarm.com
127.0.0.1 hightrafficads.com
127.0.0.1 searchco.com #[Mouse Hunt]
127.0.0.1 toolbar.searchco.com
127.0.0.1 www.3uz.net #[Win32.Sced]
127.0.0.1 pops.404search.com #[Parasite.404Search]
127.0.0.1 secure.404search.com
127.0.0.1 www.404search.com
127.0.0.1 adblaster2.info
127.0.0.1 www.adblaster2.info
127.0.0.1 adsvr.net #[thepowerstrip.com]
127.0.0.1 www.adsvr.net #[Retriever Class]
127.0.0.1 static.callinghome.biz #[Downloader-KL][Adware.Binet.DL]
127.0.0.1 www.callinghome.biz #[TROJ_AGENT.AE][mxTarget.dll]
127.0.0.1 www.contextpanel.com #[searchant.com]
127.0.0.1 www.couponage.com #[searchant.com]
127.0.0.1 www.danetport.com #[BackDoor-BDI][Win32.Daqa.C]
127.0.0.1 f1organizer.com #[Parasite.FavoriteMan]
127.0.0.1 www.f1organizer.com #[Adware.FOne]
127.0.0.1 www.infport.com #[BackDoor-BDI]
127.0.0.1 navexcel.com #[Parasite.NavExcel][Adware.NavHelper]
127.0.0.1 www.navexcel.com
127.0.0.1 ads.onwebmedia.com #[TROJ_CHECKIN.B]
127.0.0.1 onwebmedia.com #[TrojanDownloader.Win32.Checkin]
127.0.0.1 www.onwebmedia.com
127.0.0.1 thepowerstrip.com
127.0.0.1 www.thepowerstrip.com #[Adware.PStrip][Parasite.PowerStrip]
127.0.0.1 searchant.com
127.0.0.1 app.searchant.com
127.0.0.1 www.searchant.com
127.0.0.1 searchingall.com
127.0.0.1 www.searchingall.com
127.0.0.1 seekseek.com #[ADW_SCANPORTAL.A]
127.0.0.1 www.seekseek.com #[SeekSeek Class][Spyware.Seekseek]
127.0.0.1 www.serverlogic3.com #[Hyperlinker]
127.0.0.1 ads.versaworks.net
127.0.0.1 verschk.com #[Parasite.PowerStrip]
127.0.0.1 www.verschk.com
127.0.0.1 www.webnetinfo.net #[BackDoor-BDI]
127.0.0.1 dclk.net
127.0.0.1 doubleclick.net
127.0.0.1 ad.doubleclick.net
127.0.0.1 ad2.doubleclick.net
127.0.0.1 ad.ae.doubleclick.net
127.0.0.1 ad.au.doubleclick.net
127.0.0.1 ad.be.doubleclick.net
127.0.0.1 ad.br.doubleclick.net
127.0.0.1 ad.ca.doubleclick.net
127.0.0.1 ad.cl.doubleclick.net
127.0.0.1 ad.cn.doubleclick.net
127.0.0.1 ad.de.doubleclick.net
127.0.0.1 ad.dk.doubleclick.net
127.0.0.1 ad.es.doubleclick.net
127.0.0.1 ad.fi.doubleclick.net
127.0.0.1 ad.fr.doubleclick.net
127.0.0.1 ad.hu.doubleclick.net
127.0.0.1 ad.jp.doubleclick.net
127.0.0.1 ad.kr.doubleclick.net
127.0.0.1 ad.it.doubleclick.net
127.0.0.1 ad.nl.doubleclick.net
127.0.0.1 ad.no.doubleclick.net
127.0.0.1 ad.nz.doubleclick.net
127.0.0.1 ad.pl.doubleclick.net
127.0.0.1 ad.pt.doubleclick.net
127.0.0.1 ad.ru.doubleclick.net
127.0.0.1 ad.se.doubleclick.net
127.0.0.1 ad.terra.doubleclick.net
127.0.0.1 ad.tw.doubleclick.net
127.0.0.1 ad.uk.doubleclick.net
127.0.0.1 ad.us.doubleclick.net
127.0.0.1 ad.za.doubleclick.net
127.0.0.1 ad.n2434.doubleclick.net
127.0.0.1 de1.doubleclick.net
127.0.0.1 dfp.doubleclick.net
127.0.0.1 fr1.doubleclick.net
127.0.0.1 ir.doubleclick.net
127.0.0.1 iv.doubleclick.net
127.0.0.1 ln.doubleclick.net
127.0.0.1 m.doubleclick.net
127.0.0.1 m2.doubleclick.net
127.0.0.1 m3.doubleclick.net
127.0.0.1 mi.doubleclick.net
127.0.0.1 m.us.doubleclick.net
127.0.0.1 n479ad.doubleclick.net
127.0.0.1 optout.doubleclick.net
127.0.0.1 rd.intl.doubleclick.net
127.0.0.1 rd.kr.doubleclick.net
127.0.0.1 se1.doubleclick.net
127.0.0.1 sg1.doubleclick.net
127.0.0.1 uk1.doubleclick.net
127.0.0.1 doubleclick.ne.jp
127.0.0.1 www3.doubleclick.net
127.0.0.1 www.doubleclick.net
127.0.0.1 doubleclick.com
127.0.0.1 www2.doubleclick.com
127.0.0.1 www3.doubleclick.com
127.0.0.1 www.doubleclick.com
127.0.0.1 www.messagemedia.com
127.0.0.1 image.0mm.com
127.0.0.1 w3bldr.0mm.com
127.0.0.1 www.0mm.com
127.0.0.1 buy.rpts.net
127.0.0.1 dclkcorp.rpts.net
127.0.0.1 orbitz.rpts.net
127.0.0.1 doubleclick.shockwave.com
127.0.0.1 anon.doubleclick.speedera.net
127.0.0.1 download.rfwnad.com #[ddm_download.ddm_control]
127.0.0.1 scripts.rfwnad.com #[Adware.DynamicUpdater]
127.0.0.1 searchsprint.subportal.com
127.0.0.1 searchsprint1.community.everyone.net
127.0.0.1 www.media-motor.com
127.0.0.1 bins2.media-motor.net #[TROJ_VB.DO]
127.0.0.1 cabs.media-motor.net #[IObjSafety.DemoCtl]
127.0.0.1 logs.media-motor.net
127.0.0.1 mmm.media-motor.net
127.0.0.1 www.media-motor.net
127.0.0.1 tar.popuppers.com
127.0.0.1 www.popuppers.com #[Adware.Roimoi]
127.0.0.1 bins.roings.com #[jimmyloader.jimmyform]
127.0.0.1 cabs.roings.com #[IObjSafety.DemoCtl]
127.0.0.1 logs.roings.com
127.0.0.1 mmm.roings.com #[limmyloding.limmyform]
127.0.0.1 www.roings.com #[Roings Search Enhancment]
127.0.0.1 cxoadfarm.dyndns.info
127.0.0.1 cxoads.dyndns.info
127.0.0.1 cxoreport.dnsalias.net
127.0.0.1 adserver.buttonware.net #[Parasite.DownloadReceiver]
127.0.0.1 alfhilde.buttonware.net
127.0.0.1 www2.buttonware.net
127.0.0.1 www3.buttonware.net
127.0.0.1 www4.buttonware.net
127.0.0.1 www5.buttonware.net
127.0.0.1 www7.buttonware.net
127.0.0.1 webcelerator.com #[Adware.Downreceive]
127.0.0.1 www.webcelerator.com
127.0.0.1 t4c.eacceleration.com
127.0.0.1 dh02-001.eacceleration.com
127.0.0.1 dh02-002.eacceleration.com
127.0.0.1 dh02-003.eacceleration.com
127.0.0.1 dh02-004.eacceleration.com
127.0.0.1 dh02-005.eacceleration.com
127.0.0.1 dh02-006.eacceleration.com
127.0.0.1 dh02-009.eacceleration.com
127.0.0.1 dh02-010.eacceleration.com
127.0.0.1 www.eacceleration.com
127.0.0.1 www.eanthology.net
127.0.0.1 homepageware.com
127.0.0.1 www.homepageware.com
127.0.0.1 stop-sign.com #[StopSign]
127.0.0.1 www.stop-sign.com
127.0.0.1 veloz.com
127.0.0.1 defender.veloz.com
127.0.0.1 raven.veloz.com
127.0.0.1 www.veloz.com
127.0.0.1 yourportal.com
127.0.0.1 lbvh2.ttsg.com
127.0.0.1 search-2003.com #[Parasite.Xupiter]
127.0.0.1 www.search-2003.com
127.0.0.1 sharempeg.com #[firstbookmark.com]
127.0.0.1 www.sharempeg.com
127.0.0.1 bestcrawler.com #[firstbookmark.com]
127.0.0.1 einets.com
127.0.0.1 banner.einets.com
127.0.0.1 bs0.einets.com
127.0.0.1 bs1.einets.com
127.0.0.1 bs2.einets.com
127.0.0.1 bs3.einets.com
127.0.0.1 bs4.einets.com
127.0.0.1 bs5.einets.com
127.0.0.1 bs6.einets.com
127.0.0.1 bs7.einets.com
127.0.0.1 bs8.einets.com
127.0.0.1 bs9.einets.com
127.0.0.1 bs10.einets.com
127.0.0.1 elicanada.com
127.0.0.1 www.elicanada.com #[browserwise.com]
127.0.0.1 search-explorer.net
127.0.0.1 www.search-explorer.net
127.0.0.1 search-explorer.com
127.0.0.1 www.search-explorer.com
127.0.0.1 ads.enliven.com
127.0.0.1 effect001.enliven.com
127.0.0.1 enliven.com
127.0.0.1 www.enliven.com
127.0.0.1 cache.unicast.com
127.0.0.1 a853.xc.akamai.net
127.0.0.1 www.unicast.com
127.0.0.1 ads.euniverseads.com
127.0.0.1 media.euniverse.com
127.0.0.1 i.flowgo.com
127.0.0.1 www2.flowgo.com
127.0.0.1 search.grip.com
127.0.0.1 www.grip.com
127.0.0.1 infobeat.com
127.0.0.1 www.infobeat.com
127.0.0.1 incredifind.com #[Parasite.KeenValue]
127.0.0.1 www.incredifind.com #[KeenValue][eUniverse.IncrediFind]
127.0.0.1 popups.ad-logics.com
127.0.0.1 keenvalue.com #[Adware.Keenval]
127.0.0.1 secure.keenvalue.com
127.0.0.1 www.keenvalue.com #[Keenware]
127.0.0.1 www.mycoolscreen.com
127.0.0.1 perfectnav.com #[PerfectNavBHO][KeenValue.PerfectNav]
127.0.0.1 search.perfectnav.com
127.0.0.1 www.perfectnav.com #[PerfectNavBHO Class]
127.0.0.1 sirsearch.com
127.0.0.1 www.sirsearch.com
127.0.0.1 thunderdownloads.com
127.0.0.1 tracking.thunderdownloads.com #[TrojanDownloader.Win32.Keenval.f]
127.0.0.1 update.thunderdownloads.com #[KeenValue.Updater]
127.0.0.1 update2.thunderdownloads.com
127.0.0.1 www.thunderdownloads.com
127.0.0.1 eventuresnv.com
127.0.0.1 scripts.eventuresnv.com
127.0.0.1 www.eventuresnv.com
127.0.0.1 qidion.com #[findwhatevernow.com]
127.0.0.1 direct.simpletraffic.com
127.0.0.1 track.qidion.com
127.0.0.1 www.qidion.com #[ISTbar.Qidion]
127.0.0.1 rapidblaster.com #[Parasite.RapidBlaster]
127.0.0.1 cnt.rapidblaster.com #[TROJ_ISTBAR.F][AInst Class]
127.0.0.1 devcnt.rapidblaster.com
127.0.0.1 gay.rapidblaster.com
127.0.0.1 www.rapidblaster.com #[Dialer.Rapidblaster]
127.0.0.1 freemp3blaster.com #[installs RapidBlaster]
127.0.0.1 dlsearchbar.com
127.0.0.1 download.dlsearchbar.com
127.0.0.1 track.dlsearchbar.com
127.0.0.1 dlstats.eurodnsservices.com #[CQD2Loader Object]
127.0.0.1 findwhatevernow.com #[Parasite.Pugi]
127.0.0.1 search.findwhatevernow.com
127.0.0.1 www.findwhatevernow.com
127.0.0.1 smartdownloader.com
127.0.0.1 www.smartdownloader.com #[CQD2Loader Object]
127.0.0.1 www.bargain-buddy.net
127.0.0.1 www.bestoftheweb.cc
127.0.0.1 www.brainfox.com
127.0.0.1 results.cafefind.net
127.0.0.1 www.cashbackbuddy.com
127.0.0.1 www.dealbandit.com
127.0.0.1 www.exactadvertising.com
127.0.0.1 www.exactsearch.net
127.0.0.1 exactsearchbar.com #[Adware.Exactbar][SPYW_EXACTBAR.A]
127.0.0.1 www.exactsearchbar.com #[Parasite.eXactSearch]
127.0.0.1 adp.ikena.com
127.0.0.1 searchbandit.net
127.0.0.1 www.searchbandit.net #[searchfeed.com]
127.0.0.1 extreme-dm.com
127.0.0.1 reports.extreme-dm.com
127.0.0.1 t.extreme-dm.com
127.0.0.1 t0.extreme-dm.com
127.0.0.1 t1.extreme-dm.com
127.0.0.1 u0.extreme-dm.com
127.0.0.1 u.extreme-dm.com
127.0.0.1 u1.extreme-dm.com
127.0.0.1 v.extreme-dm.com
127.0.0.1 v0.extreme-dm.com
127.0.0.1 v1.extreme-dm.com
127.0.0.1 w0.extreme-dm.com
127.0.0.1 w1.extreme-dm.com
127.0.0.1 x3.extreme-dm.com
127.0.0.1 y.extreme-dm.com
127.0.0.1 y0.extreme-dm.com
127.0.0.1 y1.extreme-dm.com
127.0.0.1 z.extreme-dm.com
127.0.0.1 z0.extreme-dm.com
127.0.0.1 z1.extreme-dm.com
127.0.0.1 www.adultfriendsearch.com
127.0.0.1 logo.affiliatebot.com
127.0.0.1 link.affiliatebot.com
127.0.0.1 affiliate.friendsearch.com
127.0.0.1 dating.friendsearch.com
127.0.0.1 partner.friendsearch.com
127.0.0.1 www.friendsearch.com
127.0.0.1 ads.free-banners.com
127.0.0.1 affiliate.free-banners.com
127.0.0.1 home.free-banners.com
127.0.0.1 www.free-banners.com
127.0.0.1 ads.freevisits.com
127.0.0.1 search.hotplugins.com
127.0.0.1 www.hotplugins.com
127.0.0.1 toolbar.push.com #[searchv2.dll]
127.0.0.1 a.as-eu.falkag.net
127.0.0.1 data.as-eu.falkag.net
127.0.0.1 a.as-us.falkag.net
127.0.0.1 b.as-us.falkag.net
127.0.0.1 c.as-us.falkag.net
127.0.0.1 e.as-us.falkag.net
127.0.0.1 red01.as-us.falkag.net #[obtains user IP]
127.0.0.1 s.as-us.falkag.net
127.0.0.1 sel.as-us.falkag.net
127.0.0.1 f.as-eu.falkag.net
127.0.0.1 red01.as-eu.falkag.net
127.0.0.1 as1.falkag.de
127.0.0.1 www.falkag.de
127.0.0.1 ad1.adsolution.de
127.0.0.1 falk.speedera.net
127.0.0.1 falk2.speedera.net
127.0.0.1 adserver.com
127.0.0.1 asm3.z1.adserver.com
127.0.0.1 z1.adserver.com
127.0.0.1 www.adserver.com
127.0.0.1 fastclick.com
127.0.0.1 www.fastclick.com
127.0.0.1 code.fastclick.net
127.0.0.1 images.fastclick.net
127.0.0.1 media.fastclick.net
127.0.0.1 media1.fastclick.net
127.0.0.1 media2.fastclick.net
127.0.0.1 media3.fastclick.net
127.0.0.1 media4.fastclick.net
127.0.0.1 media5.fastclick.net
127.0.0.1 media6.fastclick.net
127.0.0.1 media7.fastclick.net
127.0.0.1 media8.fastclick.net
127.0.0.1 media9.fastclick.net
127.0.0.1 media10.fastclick.net
127.0.0.1 media11.fastclick.net
127.0.0.1 media12.fastclick.net
127.0.0.1 media13.fastclick.net
127.0.0.1 media14.fastclick.net
127.0.0.1 media15.fastclick.net
127.0.0.1 media16.fastclick.net
127.0.0.1 media17.fastclick.net
127.0.0.1 media18.fastclick.net
127.0.0.1 media19.fastclick.net
127.0.0.1 media20.fastclick.net
127.0.0.1 media21.fastclick.net
127.0.0.1 media22.fastclick.net
127.0.0.1 media23.fastclick.net
127.0.0.1 media24.fastclick.net
127.0.0.1 media25.fastclick.net
127.0.0.1 media26.fastclick.net
127.0.0.1 media27.fastclick.net
127.0.0.1 media28.fastclick.net
127.0.0.1 media29.fastclick.net
127.0.0.1 media30.fastclick.net
127.0.0.1 media31.fastclick.net
127.0.0.1 media32.fastclick.net
127.0.0.1 media47.fastclick.net
127.0.0.1 media71.fastclick.net
127.0.0.1 media73.fastclick.net
127.0.0.1 media79.fastclick.net
127.0.0.1 media87.fastclick.net
127.0.0.1 media97.fastclick.net
127.0.0.1 fastclick.com.edgesuite.net
127.0.0.1 metacount.com
127.0.0.1 ns1.metacount.com
127.0.0.1 stats.metacount.com
127.0.0.1 www.metacount.com
127.0.0.1 firehunt.com
127.0.0.1 static.firehunt.com
127.0.0.1 partnerns1.firehunt.com
127.0.0.1 partnerns2.firehunt.com
127.0.0.1 partnerns3.firehunt.com
127.0.0.1 partnerns4.firehunt.com
127.0.0.1 partnerns5.firehunt.com
127.0.0.1 partnerns6.firehunt.com
127.0.0.1 partnerns7.firehunt.com
127.0.0.1 partnerns8.firehunt.com
127.0.0.1 partnerns9.firehunt.com
127.0.0.1 partnerns10.firehunt.com
127.0.0.1 partnerns11.firehunt.com
127.0.0.1 partnerns12.firehunt.com
127.0.0.1 partnerns13.firehunt.com
127.0.0.1 partnerns14.firehunt.com
127.0.0.1 partnerns15.firehunt.com
127.0.0.1 partnerns16.firehunt.com
127.0.0.1 www.firehunt.com
127.0.0.1 partner11.firehunt.com
127.0.0.1 partner47.firehunt.com
127.0.0.1 huntbar.com
127.0.0.1 search.huntbar.com
127.0.0.1 www.huntbar.com #[Adware.Huntbar.B]
127.0.0.1 adserver.trafficsyndicate.com
127.0.0.1 distribution.trafficsyndicate.com
127.0.0.1 dst.trafficsyndicate.com #[Parasite.HuntBar]
127.0.0.1 search.trafficsyndicate.com
127.0.0.1 xml.trafficsyndicate.com
127.0.0.1 xml2.trafficsyndicate.com
127.0.0.1 www.trafficsyndicate.com
127.0.0.1 is1.crawler.com
127.0.0.1 mb.crawler.com
127.0.0.1 websearch.com #[Adware.Huntbar]
127.0.0.1 download.websearch.com #[WinTools]
127.0.0.1 is1.websearch.com
127.0.0.1 is2.websearch.com
127.0.0.1 ranking.websearch.com
127.0.0.1 rs.websearch.com
127.0.0.1 www.websearch.com #[WebSearch Toolbar.Emailplug]
127.0.0.1 focalex.com
127.0.0.1 img.focalex.com
127.0.0.1 load.focalex.com
127.0.0.1 rd.focalex.com
127.0.0.1 tafbar.focalex.com
127.0.0.1 tafmaster-p.focalex.com
127.0.0.1 tafmaster-s.focalex.com
127.0.0.1 tafmaster-t.focalex.com
127.0.0.1 tafmaster-v.focalex.com
127.0.0.1 tafmaster-v2.focalex.com
127.0.0.1 tafmaster-v3.focalex.com
127.0.0.1 tafmaster-v4.focalex.com
127.0.0.1 tafmaster-v5.focalex.com
127.0.0.1 tafmaster-v6.focalex.com
127.0.0.1 tafmaster-v7.focalex.com
127.0.0.1 tafmaster-v8.focalex.com
127.0.0.1 tafmaster-v9.focalex.com
127.0.0.1 tafmaster-v10.focalex.com
127.0.0.1 tafmaster-v11.focalex.com
127.0.0.1 tafbar.com #[Spyware.TAFbar]
127.0.0.1 s.tafbar.com
127.0.0.1 www.tafbar.com
127.0.0.1 tafmaster.com
127.0.0.1 www.tafmaster.com
127.0.0.1 downloadware.net
127.0.0.1 www.downloadware.net #[Parasite.DownloadWare]
127.0.0.1 fordaleltd.com
127.0.0.1 config.fordaleltd.com
127.0.0.1 www.fordaleltd.com
127.0.0.1 friendcards.com
127.0.0.1 www.friendcards.com
127.0.0.1 friendfinder.com
127.0.0.1 ads.friendfinder.com
127.0.0.1 graphics.friendfinder.com
127.0.0.1 www.friendsgreetings.com
127.0.0.1 graphics.nicecards.com
127.0.0.1 www.nicecards.com
127.0.0.1 content.dashbar.com
127.0.0.1 results.dashbar.com #[DashBar Toolbar]
127.0.0.1 www.dashbar.com
127.0.0.1 www.date-manager.com
127.0.0.1 www.gator.com
127.0.0.1 www.gatorcorporation.com
127.0.0.1 www.gatoradvertisinginformationnetwork.com
127.0.0.1 bannerserver.gator.com
127.0.0.1 bg.gator.com
127.0.0.1 bi.gator.com
127.0.0.1 coupons.gator.com
127.0.0.1 gator29.gator.com
127.0.0.1 gatorcme.gator.com
127.0.0.1 gatortime.gator.com
127.0.0.1 gbs.gator.com
127.0.0.1 gi.gator.com
127.0.0.1 gs.gator.com
127.0.0.1 images.gator.com
127.0.0.1 map.gator.com
127.0.0.1 rs.gator.com
127.0.0.1 patchserver.gator.com
127.0.0.1 patchserver2.gator.com
127.0.0.1 regserver.gator.com
127.0.0.1 scriptserver.gator.com
127.0.0.1 search.gator.com
127.0.0.1 ss.gator.com
127.0.0.1 ssbackup.gator.com
127.0.0.1 trickle.gator.com
127.0.0.1 updateserver.gator.com
127.0.0.1 web.balance.gator.com
127.0.0.1 webpdp.gator.com #[DFRun Class][HDPluginCtrl Class]
127.0.0.1 xmlsearch.gator.com
127.0.0.1 xmlsearch.balance.gator.com
127.0.0.1 www.offercompanion.com
127.0.0.1 www.precision-time.com
127.0.0.1 results.searchscout.com
127.0.0.1 www.searchscout.com #[Adware.SearchScout]
127.0.0.1 www.tgcsearch.com
127.0.0.1 www.weatherscope.com #[WeatherScope]
127.0.0.1 bannermaster.geektech.com
127.0.0.1 www.boxfrog.com
127.0.0.1 pageload2.babenet.com
127.0.0.1 affiliate.getspace.com
127.0.0.1 enter.hypercount.com
127.0.0.1 hypercount.com
127.0.0.1 www.hypercount.com
127.0.0.1 123count.com
127.0.0.1 www.123count.com
127.0.0.1 www.123stat.com
127.0.0.1 web-stat.com
127.0.0.1 server3.web-stat.com
127.0.0.1 www.web-stat.com
127.0.0.1 dev.gohip.com
127.0.0.1 foundry.gohip.com
127.0.0.1 previewstage.gohip.com
127.0.0.1 search.gohip.com
127.0.0.1 stage.gohip.com
127.0.0.1 stats.gohip.com
127.0.0.1 wmservera.gohip.com
127.0.0.1 gohip.com
127.0.0.1 www.gohip.com
127.0.0.1 Ad.go.com
127.0.0.1 adimages.go.com
127.0.0.1 3ps.go.com
127.0.0.1 dcapps.disney.go.com #[web bug]
127.0.0.1 ehg-espn.hitbox.com
127.0.0.1 ngads.go.com
127.0.0.1 x.go.com
127.0.0.1 ad.infoseek.com
127.0.0.1 adsatt.abcnews.starwave.com
127.0.0.1 adsatt.espn.starwave.com
127.0.0.1 adwords.google.com
127.0.0.1 pagead.googlesyndication.com
127.0.0.1 pagead2.googlesyndication.com
127.0.0.1 adservices.google.com
127.0.0.1 www.googleadservices.com

#7 Nekoyasha

Member

Group: Members
Posts: 31
Joined: 12-April 07
Location:Sumter SC, USA

Posted 13 April 2007 - 08:59 AM

127.0.0.1 apps5.oingo.com
127.0.0.1 greenhorse.com
127.0.0.1 www.greenhorse.com
127.0.0.1 tickerbar.info
127.0.0.1 graphics.tickerbar.info
127.0.0.1 hitbox.com
127.0.0.1 ai.hitbox.com
127.0.0.1 aibg.hitbox.com
127.0.0.1 counter.hitbox.com
127.0.0.1 ehg.hitbox.com
127.0.0.1 evwr.hitbox.com
127.0.0.1 get.hitbox.com
127.0.0.1 hg1.hitbox.com
127.0.0.1 hitboxcentral.com
127.0.0.1 ias.hitbox.com
127.0.0.1 ibg.hitbox.com
127.0.0.1 js1.hitbox.com
127.0.0.1 phg.hitbox.com
127.0.0.1 resources.hitbox.com
127.0.0.1 rd1.hitbox.com
127.0.0.1 sitesearch.hitbox.com
127.0.0.1 stats.hitbox.com
127.0.0.1 tools.hitbox.com
127.0.0.1 tools2.hitbox.com
127.0.0.1 vwr1.hitbox.com
127.0.0.1 vwr2.hitbox.com
127.0.0.1 vwr3.hitbox.com
127.0.0.1 w1.hitbox.com
127.0.0.1 w2.hitbox.com
127.0.0.1 w3.hitbox.com
127.0.0.1 w4.hitbox.com
127.0.0.1 w5.hitbox.com
127.0.0.1 w6.hitbox.com
127.0.0.1 w7.hitbox.com
127.0.0.1 w8.hitbox.com
127.0.0.1 w9.hitbox.com
127.0.0.1 w10.hitbox.com
127.0.0.1 w11.hitbox.com
127.0.0.1 w12.hitbox.com
127.0.0.1 w13.hitbox.com
127.0.0.1 w14.hitbox.com
127.0.0.1 w15.hitbox.com
127.0.0.1 w16.hitbox.com
127.0.0.1 w17.hitbox.com
127.0.0.1 w18.hitbox.com
127.0.0.1 w19.hitbox.com
127.0.0.1 w20.hitbox.com
127.0.0.1 w21.hitbox.com
127.0.0.1 w22.hitbox.com
127.0.0.1 w23.hitbox.com
127.0.0.1 w24.hitbox.com
127.0.0.1 w25.hitbox.com
127.0.0.1 w26.hitbox.com
127.0.0.1 w27.hitbox.com
127.0.0.1 w28.hitbox.com
127.0.0.1 w29.hitbox.com
127.0.0.1 w30.hitbox.com
127.0.0.1 w31.hitbox.com
127.0.0.1 w32.hitbox.com
127.0.0.1 w33.hitbox.com
127.0.0.1 w101.hitbox.com
127.0.0.1 ww2.hitbox.com
127.0.0.1 ww3.hitbox.com
127.0.0.1 wwa.hitbox.com
127.0.0.1 wwb.hitbox.com
127.0.0.1 wwc.hitbox.com
127.0.0.1 wwd.hitbox.com
127.0.0.1 www.hitbox.com
127.0.0.1 hitexchange.net
127.0.0.1 gif.hitexchange.net
127.0.0.1 img.hitexchange.net
127.0.0.1 www.hitexchange.net
127.0.0.1 ns1.hitx.net
127.0.0.1 www.hitx.net
127.0.0.1 stats.homestead.com
127.0.0.1 track.homestead.com
127.0.0.1 track2.homestead.com
127.0.0.1 hotbar.com
127.0.0.1 adopt.hotbar.com
127.0.0.1 ads.hotbar.com
127.0.0.1 cs.hotbar.com
127.0.0.1 dynamic.hotbar.com
127.0.0.1 dynmenu.hotbar.com
127.0.0.1 installs.hotbar.com #[HbInstObj Class]
127.0.0.1 license.hotbar.com
127.0.0.1 promos.hotbar.com
127.0.0.1 puv.hotbar.com
127.0.0.1 reports.hotbar.com
127.0.0.1 searchdisp.hotbar.com
127.0.0.1 skins.hotbar.com
127.0.0.1 tooltips.hotbar.com
127.0.0.1 updates.hotbar.com
127.0.0.1 vip-farm1.hotbar.com
127.0.0.1 vip-farm2.hotbar.com
127.0.0.1 vip-farm1v.hotbar.com
127.0.0.1 vip-farm2v.hotbar.com
127.0.0.1 vip-farm5v.hotbar.com
127.0.0.1 vip-farm31v.hotbar.com
127.0.0.1 www.hotbar.com
127.0.0.1 resultsmaster.com
127.0.0.1 www.resultsmaster.com
127.0.0.1 ad.hotlog.ru
127.0.0.1 click.hotlog.ru
127.0.0.1 globalstats.hotlog.ru
127.0.0.1 hit.hotlog.ru
127.0.0.1 hit1.hotlog.ru
127.0.0.1 hit2.hotlog.ru
127.0.0.1 hit3.hotlog.ru
127.0.0.1 hit4.hotlog.ru
127.0.0.1 hit5.hotlog.ru
127.0.0.1 hit6.hotlog.ru
127.0.0.1 hit7.hotlog.ru
127.0.0.1 hit8.hotlog.ru
127.0.0.1 hit9.hotlog.ru
127.0.0.1 www1.hotlog.ru
127.0.0.1 www2.hotlog.ru
127.0.0.1 www3.hotlog.ru
127.0.0.1 www4.hotlog.ru
127.0.0.1 www.hotlog.ru
127.0.0.1 hyperbanner.net
127.0.0.1 ads.hyperbanner.net
127.0.0.1 ads10.hyperbanner.net
127.0.0.1 ads11.hyperbanner.net
127.0.0.1 ads12.hyperbanner.net
127.0.0.1 ads13.hyperbanner.net
127.0.0.1 ads14.hyperbanner.net
127.0.0.1 ads15.hyperbanner.net
127.0.0.1 ads16.hyperbanner.net
127.0.0.1 ads17.hyperbanner.net
127.0.0.1 ads18.hyperbanner.net
127.0.0.1 ads19.hyperbanner.net
127.0.0.1 ads20.hyperbanner.net
127.0.0.1 siterank.hypermart.net
127.0.0.1 spms.hyperbanner.net
127.0.0.1 ads05.bpath.com
127.0.0.1 ads06.bpath.com
127.0.0.1 ads07.bpath.com
127.0.0.1 ads08.bpath.com
127.0.0.1 ads09.bpath.com
127.0.0.1 ads10.bpath.com
127.0.0.1 ads12.bpath.com
127.0.0.1 ads13.bpath.com
127.0.0.1 ads14.bpath.com
127.0.0.1 ads15.bpath.com
127.0.0.1 ads16.bpath.com
127.0.0.1 ads17.bpath.com
127.0.0.1 ads18.bpath.com
127.0.0.1 ads19.bpath.com
127.0.0.1 ads20.bpath.com
127.0.0.1 ads21.bpath.com
127.0.0.1 ads22.bpath.com
127.0.0.1 ads23.bpath.com
127.0.0.1 ads24.bpath.com
127.0.0.1 ads25.bpath.com
127.0.0.1 ads26.bpath.com
127.0.0.1 ads27.bpath.com
127.0.0.1 ads28.bpath.com
127.0.0.1 ads29.bpath.com
127.0.0.1 australia.bpath.com
127.0.0.1 spms.bpath.com
127.0.0.1 usa.bpath.com
127.0.0.1 www.bpath.com
127.0.0.1 auto.isearch.com
127.0.0.1 toolbar.isearch.com #[iSearch Toolbar][Spyware.ISearch]
127.0.0.1 www.isearch.com
127.0.0.1 cftrack.idownload.com
127.0.0.1 secure.idownload.com
127.0.0.1 www.idownload.com
127.0.0.1 www.popupblocker.com
127.0.0.1 spywareavenger.com
127.0.0.1 in.spywareavenger.com
127.0.0.1 www.spywareavenger.com
127.0.0.1 cftrack.uninstaller.com
127.0.0.1 www.uninstaller.com
127.0.0.1 www.virushunter.com
127.0.0.1 www.wmkiller.com
127.0.0.1 ieplugin.com
127.0.0.1 badurl.ieplugin.com
127.0.0.1 search.ieplugin.com #[IEPlugin.Search]
127.0.0.1 sysupdate.ieplugin.com
127.0.0.1 wwa.ieplugin.com
127.0.0.1 wwd.ieplugin.com
127.0.0.1 ww2.ieplugin.com
127.0.0.1 ww3.ieplugin.com
127.0.0.1 www.ieplugin.com
127.0.0.1 almightysearch.com
127.0.0.1 www.almightysearch.com
127.0.0.1 www.ignkeywords.com
127.0.0.1 igetnet.com #[Backdoor.GetNet]
127.0.0.1 www.igetnet.com
127.0.0.1 code.ignphrases.com
127.0.0.1 www.ignphrases.com
127.0.0.1 plugusin4cash.com
127.0.0.1 www.plugusin4cash.com
127.0.0.1 www.qcksearch.com
127.0.0.1 rspsearch.com
127.0.0.1 www.rspsearch.com
127.0.0.1 measurement.redsheriff.com
127.0.0.1 www.redsheriff.it
127.0.0.1 www.redsheriff.com
127.0.0.1 www.redsheriff.com.au
127.0.0.1 www.RedSheRRif.com
127.0.0.1 devfw.imrworldwide.com
127.0.0.1 lycos-eu.imrworldwide.com
127.0.0.1 ninemsn.imrworldwide.com
127.0.0.1 secure-au.imrworldwide.com
127.0.0.1 secure-jp.imrworldwide.com
127.0.0.1 secure-uk.imrworldwide.com
127.0.0.1 secure-us.imrworldwide.com
127.0.0.1 secure-za.imrworldwide.com
127.0.0.1 server-au.imrworldwide.com
127.0.0.1 server-br.imrworldwide.com
127.0.0.1 server-by.imrworldwide.com
127.0.0.1 secure-cn.imrworldwide.com
127.0.0.1 server-de.imrworldwide.com
127.0.0.1 server-dk.imrworldwide.com
127.0.0.1 server-ee.imrworldwide.com
127.0.0.1 server-fi.imrworldwide.com
127.0.0.1 server-it.imrworldwide.com
127.0.0.1 server-jp.imrworldwide.com
127.0.0.1 server-lv.imrworldwide.com
127.0.0.1 server-lt.imrworldwide.com
127.0.0.1 server-no.imrworldwide.com
127.0.0.1 server-nz.imrworldwide.com
127.0.0.1 server-oslo.imrworldwide.com
127.0.0.1 server-pl.imrworldwide.com
127.0.0.1 server-se.imrworldwide.com
127.0.0.1 server-sg.imrworldwide.com
127.0.0.1 server-uk.imrworldwide.com
127.0.0.1 server-us.imrworldwide.com
127.0.0.1 survey1-au.imrworldwide.com
127.0.0.1 telstra.imrworldwide.com
127.0.0.1 www.imrworldwide.com
127.0.0.1 inet-traffic.com
127.0.0.1 banner1.inet-traffic.com
127.0.0.1 delivery.inet-traffic.com #[Parasite.Pugi][Adware.IntDel]
127.0.0.1 phplive.inet-traffic.com
127.0.0.1 www.inet-traffic.com
127.0.0.1 news.searchit.com
127.0.0.1 searchit.com #[Parasite.Pugi]
127.0.0.1 www.searchit.com
127.0.0.1 browseraid.com
127.0.0.1 pops.browseraid.com
127.0.0.1 st.browseraid.com #[WebDownloader]
127.0.0.1 updates.browseraid.com
127.0.0.1 uptodate.browseraid.com #[App/QuickL-A]
127.0.0.1 www.browseraid.com
127.0.0.1 browserpal.com
127.0.0.1 info.browserpal.com #[App/Bpinst-A]
127.0.0.1 www.browserpal.com
127.0.0.1 featured-results.com
127.0.0.1 www.featured-results.com #[BrowserAid.FeaturesResults]
127.0.0.1 www.usercount.com
127.0.0.1 quickcrawler.com
127.0.0.1 search.quickcrawler.com
127.0.0.1 www.quickcrawler.com
127.0.0.1 www.quicklaunch.com
127.0.0.1 startium.com
127.0.0.1 search.startium.com
127.0.0.1 www.startium.com
127.0.0.1 search.dogpile.com
127.0.0.1 www.dogpile.com
127.0.0.1 click.go2net.com
127.0.0.1 clickit.go2net.com
127.0.0.1 images.go2net.com
127.0.0.1 bigclicks.com
127.0.0.1 search.bigclicks.com
127.0.0.1 www.bigclicks.com
127.0.0.1 exitfuel.com
127.0.0.1 ifcol.exitfuel.com
127.0.0.1 join.exitfuel.com
127.0.0.1 nitrous.exitfuel.com
127.0.0.1 www.exitfuel.com
127.0.0.1 link.exitdirect.com
127.0.0.1 www.exitdirect.com
127.0.0.1 internetfuel.com
127.0.0.1 addev.internetfuel.com
127.0.0.1 adserv.internetfuel.com #[ExitFuel]
127.0.0.1 adserv1.internetfuel.com
127.0.0.1 adserv2.internetfuel.com
127.0.0.1 adserv3.internetfuel.com
127.0.0.1 adserv4.internetfuel.com
127.0.0.1 adserv5.internetfuel.com
127.0.0.1 adserv6.internetfuel.com
127.0.0.1 banserv.internetfuel.com
127.0.0.1 download.internetfuel.com
127.0.0.1 turbo.internetfuel.com
127.0.0.1 searchfuel.com
127.0.0.1 search.searchfuel.com
127.0.0.1 wwwdev.searchfuel.com
127.0.0.1 404errorpage.com
127.0.0.1 www.404errorpage.com
127.0.0.1 search.winnings.com
127.0.0.1 chewbacca.cybereps.com
127.0.0.1 ds.cybereps.com
127.0.0.1 images.cybereps.com
127.0.0.1 www.cybereps.com
127.0.0.1 yoda.cybereps.com
127.0.0.1 pluto.adcycle.com
127.0.0.1 www.adcycle.com
127.0.0.1 www.exchange-it.com
127.0.0.1 media.exchange-it.com
127.0.0.1 popunder.com
127.0.0.1 media.popunder.com
127.0.0.1 www.popunder.com
127.0.0.1 www.popunders.com #[server down?]
127.0.0.1 download.funwebproducts.com
127.0.0.1 www.funwebproducts.com
127.0.0.1 c4.iwon.com
127.0.0.1 cc.iwon.com
127.0.0.1 docs1.iwon.com
127.0.0.1 efc.iwon.com
127.0.0.1 home.iwon.com
127.0.0.1 image.i1img.com
127.0.0.1 i1img.com
127.0.0.1 my.iwon.com
127.0.0.1 plus.iwon.com
127.0.0.1 prizemachine.games.iwon.com
127.0.0.1 search.iwon.com
127.0.0.1 searchassistant.iwon.com
127.0.0.1 www1.iwon.com
127.0.0.1 www.iwon.com #[Adware.IWon]
127.0.0.1 imgfarm.com #[Fun Web Products Installer Start]
127.0.0.1 ak.imgfarm.com #[FunWebProducts]
127.0.0.1 image.imgfarm.com
127.0.0.1 bar.mytotalsearch.com
127.0.0.1 www.mytotalsearch.com
127.0.0.1 mn.myquicksearch.com
127.0.0.1 mr.myquicksearch.com
127.0.0.1 www.myquicksearch.com
127.0.0.1 c4.maxserving.com
127.0.0.1 c4.mysearch.com #[Parasite.MySearch]
127.0.0.1 www.mysearch.com #[Adware.Mybar]
127.0.0.1 help.mysearch.com
127.0.0.1 mywebsearch.com
127.0.0.1 bar.mywebsearch.com
127.0.0.1 cfg.mywebsearch.com #[Parasite.MySearch]
127.0.0.1 www.mywebsearch.com
127.0.0.1 speedbar.myway.com #[MyWay.MyBar]
127.0.0.1 www.casinopalazzo.com
127.0.0.1 download3.payoutpal.com #[TROJ_ZEROLIN.A]
127.0.0.1 download4.payoutpal.com #[Adware.Cax][CAX Object]
127.0.0.1 resellerstats.payoutpal.com
127.0.0.1 www.payoutpal.com
127.0.0.1 pointroll.com
127.0.0.1 ads.pointroll.com
127.0.0.1 media.pointroll.com
127.0.0.1 mirror.pointroll.com
127.0.0.1 speed.pointroll.com
127.0.0.1 track.pointroll.com
127.0.0.1 www.pointroll.com
127.0.0.1 chat.ezula.com
127.0.0.1 app.ezula.com
127.0.0.1 www.ezula.com
127.0.0.1 kabanga.com
127.0.0.1 xml.browservillage.com #[Parasite.404Search]
127.0.0.1 www.browservillage.com
127.0.0.1 banners.kanoodle.com
127.0.0.1 safe.kanoodle.com
127.0.0.1 webmail.kanoodle.com
127.0.0.1 www.kanoodle.com
127.0.0.1 kazaa.com
127.0.0.1 www.kazaa.com
127.0.0.1 desktop.kazaa.com
127.0.0.1 update.kazaa.com
127.0.0.1 kazaa.adserver.co.il
127.0.0.1 www.kazaa.net.cn #[AdInstaller Control]
127.0.0.1 goi.com
127.0.0.1 nav.goi.com
127.0.0.1 nav.hitq.com
127.0.0.1 hitq.com
127.0.0.1 adsrve.com #[App/IEDriver-A][Adware-Verticity]
127.0.0.1 server1.adsrve.com
127.0.0.1 server2.adsrve.com
127.0.0.1 server3.adsrve.com
127.0.0.1 www.adsrve.com
127.0.0.1 turbodownload.net
127.0.0.1 www.turbodownload.net
127.0.0.1 db0.net-filter.com
127.0.0.1 db2.net-filter.com
127.0.0.1 db3.net-filter.com
127.0.0.1 db4.net-filter.com
127.0.0.1 db5.net-filter.com
127.0.0.1 db6.net-filter.com
127.0.0.1 db7.net-filter.com
127.0.0.1 sitestats.com
127.0.0.1 db0.sitestats.com
127.0.0.1 db1.sitestats.com
127.0.0.1 db2.sitestats.com
127.0.0.1 db3.sitestats.com
127.0.0.1 db4.sitestats.com
127.0.0.1 db5.sitestats.com
127.0.0.1 db6.sitestats.com
127.0.0.1 db7.sitestats.com
127.0.0.1 www.sitestats.com
127.0.0.1 www.aadserver.net
127.0.0.1 medialoads.com
127.0.0.1 config.medialoads.com
127.0.0.1 dldw.medialoads.com
127.0.0.1 dldwb1.medialoads.com
127.0.0.1 mp.medialoads.com
127.0.0.1 www.medialoads.com
127.0.0.1 www.satellitepop.com
127.0.0.1 smartpops.com
127.0.0.1 download.smartpops.com #[SmartPops Class]
127.0.0.1 www.smartpops.com #[Adware.SmartPops.B]
127.0.0.1 ad.linksynergy.com
127.0.0.1 click.linksynergy.com
127.0.0.1 ssl.linksynergy.com
127.0.0.1 www.linkshare.com
127.0.0.1 ad1.lbe.ru
127.0.0.1 host1.list.ru
127.0.0.1 host3.list.ru
127.0.0.1 host4.list.ru
127.0.0.1 host7.list.ru
127.0.0.1 host11.list.ru
127.0.0.1 host12.list.ru
127.0.0.1 host13.list.ru
127.0.0.1 host14.list.ru
127.0.0.1 top.list.ru
127.0.0.1 list.ru
127.0.0.1 livestat.com
127.0.0.1 jmm.livestat.com
127.0.0.1 www.livestat.com
127.0.0.1 www.livetechnology.com
127.0.0.1 active.macromedia.com
127.0.0.1 download.macromedia.com
127.0.0.1 sdc.shockwave.com
127.0.0.1 macromedia.speedera.net
127.0.0.1 download.getmirar.com #[NN_Bar_Helper][Adware.Mirar]
127.0.0.1 www.getmirar.com
127.0.0.1 awbeta.net-nucleus.com
127.0.0.1 www.net-nucleus.com
127.0.0.1 apps.deskwizz.com
127.0.0.1 letsgofind.com
127.0.0.1 www.letsgofind.com
127.0.0.1 media.top-banners.com
127.0.0.1 www.top-banners.com #[Adware.QuickBrowser]
127.0.0.1 www.ugosearch.com
127.0.0.1 www.freespywarescan.org
127.0.0.1 searchgateway.net #[Parasite.SearchGateway]
127.0.0.1 www.searchgateway.net
127.0.0.1 www.secure-processingcenter.com
127.0.0.1 showbehind.com #[Adware.ShowBehind]
127.0.0.1 www.showbehind.com
127.0.0.1 www.spywarebegone.com
127.0.0.1 www.worldusa.com
127.0.0.1 ad.linkexchange.com
127.0.0.1 fastcounter.linkexchange.com
127.0.0.1 leader.linkexchange.com
127.0.0.1 image.linkexchange.com
127.0.0.1 linkexchange.com
127.0.0.1 www.linkexchange.com
127.0.0.1 listbot.com
127.0.0.1 fastcounter.bcentral.com
127.0.0.1 fcstats.bcentral.com
127.0.0.1 keywords.bcentral.com
127.0.0.1 revenue.bcentral.com
127.0.0.1 submitit.bcentral.com
127.0.0.1 ulogin.bcentral.com
127.0.0.1 c.mii.instacontent.net
127.0.0.1 cserver.mii.instacontent.net
127.0.0.1 p.mii.instacontent.net
127.0.0.1 pdownload.mii.instacontent.net
127.0.0.1 pserver.mii.instacontent.net
127.0.0.1 mailwiper.com
127.0.0.1 mail.mailwiper.com
127.0.0.1 www.mailwiper.com
127.0.0.1 spydeleter.com
127.0.0.1 www.spydeleter.com
127.0.0.1 www.atelys.com #[SpeedCtrl Class]
127.0.0.1 jraun.com #[WinEssential][Adware.Jraun]
127.0.0.1 venus.jraun.com
127.0.0.1 www.jraun.com #[KeyActivex Control]
127.0.0.1 karmajunction.com
127.0.0.1 www.karmamedia.com
127.0.0.1 marketdart.com
127.0.0.1 ie.marketdart.com #[MD IE Plugin]
127.0.0.1 www.marketdart.com
127.0.0.1 marketscore.com
127.0.0.1 oss-survey.marketscore.com
127.0.0.1 proxycfg.marketscore.com
127.0.0.1 proxyhttp.netsetter.com
127.0.0.1 proxy.ia2.marketscore.com
127.0.0.1 proxy.ia3.marketscore.com
127.0.0.1 proxy.ia4.marketscore.com
127.0.0.1 proxy.or3.marketscore.com
127.0.0.1 proxy.or4.marketscore.com
127.0.0.1 proxy.sj3.marketscore.com
127.0.0.1 proxy.sj4.marketscore.com
127.0.0.1 www.marketscore.com
127.0.0.1 proxycfg.netsetter.com
127.0.0.1 proxycfg.wip.netsetter.com
127.0.0.1 c.moreover.com
127.0.0.1 d.moreover.com
127.0.0.1 i.moreover.com
127.0.0.1 p.moreover.com
127.0.0.1 w.moreover.com
127.0.0.1 webmaster.moreover.com
127.0.0.1 wap.moreover.com
127.0.0.1 www.moreover.com
127.0.0.1 musiccity.streamcastnetworks.com
127.0.0.1 ads.musiccity.com
127.0.0.1 dbcventures.com
127.0.0.1 easytoolbar.com
127.0.0.1 www.mp3university.com #[Reactivator Class]
127.0.0.1 ads.expedia.com
127.0.0.1 ads.msn.com
127.0.0.1 ads.eu.msn.com
127.0.0.1 ads.ninemsn.com.au
127.0.0.1 arc2.msn.com
127.0.0.1 arc3.msn.com
127.0.0.1 arc9.msn.com
127.0.0.1 di.image.eshop.msn.com
127.0.0.1 eshopxml.msn.com
127.0.0.1 h.msn.com
127.0.0.1 image.eshop.msn.com
127.0.0.1 popup.msn.com
127.0.0.1 rmads.msn.com
127.0.0.1 rmads.eu.msn.com
127.0.0.1 famulus.msnbc.com
127.0.0.1 global.msads.net
127.0.0.1 mycomputer.com
127.0.0.1 123counter.mycomputer.com
127.0.0.1 bannerexchange.mycomputer.com
127.0.0.1 counter.mycomputer.com
127.0.0.1 enterprise.mycomputer.com
127.0.0.1 phoenix-mc-adrunner.mycomputer.com
127.0.0.1 siteminer.mycomputer.com
127.0.0.1 192.168.112.2o7.net #[www.omniture.com]
127.0.0.1 autobytel.112.2o7.net
127.0.0.1 gpaper123.112.2O7.net
127.0.0.1 gpaper158.112.2O7.net
127.0.0.1 omniture.112.2o7.net
127.0.0.1 verisignwildcard.112.2o7.net #[sitefinder.verisign.com]
127.0.0.1 vintacom.112.2o7.net
127.0.0.1 beta.superstats.com
127.0.0.1 chart.superstats.com
127.0.0.1 code.superstats.com
127.0.0.1 enterprise.superstats.com
127.0.0.1 media.superstats.com
127.0.0.1 stats.superstats.com
127.0.0.1 v2.superstats.com
127.0.0.1 adblock.linkz.com #[AdBlock APInstaller Class]
127.0.0.1 clearsearch.com
127.0.0.1 www.clearsearch.com
127.0.0.1 wdc.15x.net
127.0.0.1 ws1.15x.net
127.0.0.1 ws2.15x.net
127.0.0.1 webtrendslive.com
127.0.0.1 statse.webtrendslive.com
127.0.0.1 statse.webtrendslive.netiq.akadns.net
127.0.0.1 dcs.wtlive.com
127.0.0.1 dcs.wtlive.netiq.akadns.net
127.0.0.1 www.webtrends.net
127.0.0.1 www.netiq.com
127.0.0.1 clicz.com
127.0.0.1 cz2.clickzs.com
127.0.0.1 cz3.clickzs.com
127.0.0.1 cz4.clickzs.com
127.0.0.1 cz5.clickzs.com
127.0.0.1 cz6.clickzs.com
127.0.0.1 cz7.clickzs.com
127.0.0.1 cz8.clickzs.com
127.0.0.1 cz9.clickzs.com
127.0.0.1 js3.clickzs.com
127.0.0.1 js6.clickzs.com
127.0.0.1 js7.clickzs.com
127.0.0.1 js8.clickzs.com
127.0.0.1 www.clicz.com
127.0.0.1 nedstat.net
127.0.0.1 be.nedstat.net
127.0.0.1 es.nedstat.net
127.0.0.1 uk.nedstat.net
127.0.0.1 nedstat.nl
127.0.0.1 nedstat.s0.nl
127.0.0.1 www.nedstat.nl
127.0.0.1 nedstatbasic.net
127.0.0.1 m1.nedstatbasic.net
127.0.0.1 nl.viewstat.nedstatbasic.net
127.0.0.1 v1.nedstatbasic.net
127.0.0.1 www.nedstatbasic.net
127.0.0.1 nl.nedstatpro.net
127.0.0.1 uk.nedstatpro.net
127.0.0.1 www.nedstat.co.uk
127.0.0.1 sitestat.com
127.0.0.1 be.sitestat.com
127.0.0.1 fr.sitestat.com
127.0.0.1 int.sitestat.com
127.0.0.1 nl.sitestat.com
127.0.0.1 uk.sitestat.com
127.0.0.1 www.nedstat.com
127.0.0.1 nbasic.sitestat.net
127.0.0.1 de.sitestat.nedstat.net
127.0.0.1 ads.ads360.com
127.0.0.1 adserver.ads360.com
127.0.0.1 adserv2.ads360.com
127.0.0.1 adserv3.ads360.com
127.0.0.1 adserv4.ads360.com
127.0.0.1 banners.ads360.com
127.0.0.1 creatives.ads360.com
127.0.0.1 dynaserv.ads360.com
127.0.0.1 stats.ads360.com
127.0.0.1 nytbglobe.112.2O7.net
127.0.0.1 ads1.advance.net #[RealMedia]
127.0.0.1 adserver.anm.co.uk
127.0.0.1 ads.mm.ap.org
127.0.0.1 q.azcentral.com
127.0.0.1 ads.belointeractive.com
127.0.0.1 ads.bloomberg.com
127.0.0.1 rmedia.boston.com
127.0.0.1 te.boston.com
127.0.0.1 ads.businessweek.com
127.0.0.1 te.businessweek.com
127.0.0.1 te.chicagotribune.com
127.0.0.1 ads4.clearchannel.com
127.0.0.1 adtrack.cimedia.net
127.0.0.1 realaudio.cimedia.net
127.0.0.1 te.ctnow.com
127.0.0.1 te.dailypress.com
127.0.0.1 oas.foxnews.com #[RealMedia]
127.0.0.1 gcirm.gannett-tv.com
127.0.0.1 te.greenwichtime.com
127.0.0.1 ads.indystar.com
127.0.0.1 te.latimes.com
127.0.0.1 ads.madison.com
127.0.0.1 te.mcall.com
127.0.0.1 te.newsday.com
127.0.0.1 adserver.news.com.au
127.0.0.1 www2.northjersey.com
127.0.0.1 ads.nwsource.com
127.0.0.1 mjx.ads.nwsource.com #[RealMedia]
127.0.0.1 ads.nypost.com
127.0.0.1 ads.nytimes.com
127.0.0.1 nyttechnology.112.2O7.net
127.0.0.1 te.orlandosentinel.com
127.0.0.1 ads.pilotonline.com
127.0.0.1 q.pni.com
127.0.0.1 ads.realcities.com
127.0.0.1 krd.realcities.com
127.0.0.1 ads.roanoke.com
127.0.0.1 ads.seattletimes.com
127.0.0.1 ads1.sptimes.com
127.0.0.1 te.sunspot.net
127.0.0.1 a3.suntimes.com
127.0.0.1 te.suntimes.com #[web bug]
127.0.0.1 te.stamfordadvocate.com
127.0.0.1 te.sun-sentinel.com
127.0.0.1 ads.telegraph.co.uk
127.0.0.1 adcreative.tribuneinteractive.com
127.0.0.1 adserver.trb.com
127.0.0.1 adserver.tribuneinteractive.com
127.0.0.1 ad.usatoday.com
127.0.0.1 ads.usatoday.com
127.0.0.1 c.usatoday.com
127.0.0.1 viewer.usatoday.com
127.0.0.1 info.browserdirect.net
127.0.0.1 www.elevonsearch.com
127.0.0.1 search.findsall.info
127.0.0.1 www.findallresults.net #[qsrch.net]
127.0.0.1 find.greatsearch.info
127.0.0.1 result.goodsearch.info
127.0.0.1 www.esearchandfind.org
127.0.0.1 hit.lookupanything.biz #[qsrch.net]
127.0.0.1 www.mysearchnet.org
127.0.0.1 www.new.chat.new.net
127.0.0.1 eps.new.search.new.net
127.0.0.1 client.newdotnet.net
127.0.0.1 upgrade.newdotnet.net
127.0.0.1 www.newdotnet.com
127.0.0.1 www.new.net #[Adware.NDotNet]
127.0.0.1 www.onestepsearch.net
127.0.0.1 www.onestepsearch.biz
127.0.0.1 pjn.qsrch.net
127.0.0.1 search.qsrch.net
127.0.0.1 www.qsrch.net #[Spyware.QuickSearch]
127.0.0.1 bgw.qsrch.com
127.0.0.1 hp.qsrch.com
127.0.0.1 moniker.qsrch.com
127.0.0.1 newnet.qsrch.com
127.0.0.1 regfly.qsrch.com
127.0.0.1 rg.qsrch.com
127.0.0.1 worldwide.qsrch.com
127.0.0.1 www.qsrch.com
127.0.0.1 qtbc.qsrch.info
127.0.0.1 upgrade.qsrch.info
127.0.0.1 data.quicksearches.net
127.0.0.1 find.reliableresults.info
127.0.0.1 web.yoursearchfinder.com
127.0.0.1 windowpatch.info
127.0.0.1 windowpatch.net
127.0.0.1 searchsquire.com #[Parasite.SearchSquire]
127.0.0.1 ad.searchsquire.com
127.0.0.1 search.searchsquire.com
127.0.0.1 update.searchsquire.com #[Squire Class]
127.0.0.1 www.searchsquire.com #[Adware.Searchsquire]
127.0.0.1 download.opistat.com
127.0.0.1 premeter.opistat.com
127.0.0.1 server.opistat.com
127.0.0.1 srv-fr.opistat.com
127.0.0.1 uk.opistat.com
127.0.0.1 uk2.opistat.com
127.0.0.1 www.opistat.com
127.0.0.1 www.eroticdialer.com #[Trojan.Win32.Toras]
127.0.0.1 portalsearching.com #[BHO.clsInetSpeak]
127.0.0.1 www.portalsearching.com #[abcsearch.com]
127.0.0.1 sexxx-direct.com #[TrojanDownloader.Win32.VB.bf]
127.0.0.1 sites.sexxx-direct.com
127.0.0.1 www.sexxx-direct.com
127.0.0.1 cmhtml.overture.com
127.0.0.1 ctxtads.overture.com
127.0.0.1 html.overture.com
127.0.0.1 inventory.overture.com
127.0.0.1 redir.overture.com
127.0.0.1 www3.overture.com
127.0.0.1 www5.overture.com
127.0.0.1 www6.overture.com
127.0.0.1 www7.overture.com
127.0.0.1 www8.overture.com
127.0.0.1 www20.overture.com
127.0.0.1 www21.overture.com
127.0.0.1 www.content.overture.com #[AltaVista Toolbar]
127.0.0.1 overture.reporting.net
127.0.0.1 pixpox.com #[JS/Fortnight-B worm]
127.0.0.1 www.pixpox.com
127.0.0.1 1stblaze.com #[Parasite.ClientMan]
127.0.0.1 ads.1stblaze.com
127.0.0.1 counter.1stblaze.com
127.0.0.1 www.1stblaze.com
127.0.0.1 js.domainsponsor.com
127.0.0.1 landing.domainsponsor.com
127.0.0.1 search.domainsponsor.com
127.0.0.1 www.domainsponsor.com
127.0.0.1 www.gtawarehouse.com
127.0.0.1 staging.inboxrewards.com
127.0.0.1 inboxrewards.com
127.0.0.1 www.inboxrewards.com
127.0.0.1 dp.information.com #[donotchangeit.com]
127.0.0.1 search.information.com
127.0.0.1 ads.linksponsor.com
127.0.0.1 stats.linksponsor.com
127.0.0.1 track.newslettersponsor.com
127.0.0.1 www.newslettersponsor.com
127.0.0.1 oversee.net
127.0.0.1 beta.oversee.net
127.0.0.1 darin.eq5.oversee.net
127.0.0.1 domainsponsor.oversee.net
127.0.0.1 sponsormatch.oversee.net
127.0.0.1 popupsponsor.com #[Parasite.ClientMan]
127.0.0.1 ads.popupsponsor.com
127.0.0.1 admin.popupsponsor.com
127.0.0.1 console.popupsponsor.com
127.0.0.1 count.popupsponsor.com
127.0.0.1 i.popupsponsor.com
127.0.0.1 mediatrack.popupsponsor.com
127.0.0.1 view.popupsponsor.com
127.0.0.1 www.popupsponsor.com
127.0.0.1 proredirect.com
127.0.0.1 www.proredirect.com
127.0.0.1 revenue.net
127.0.0.1 ads.revenue.net
127.0.0.1 ads1.revenue.net
127.0.0.1 ads2.revenue.net
127.0.0.1 count.revenue.net #[popupsponsor.com]
127.0.0.1 mediatrack.revenue.net
127.0.0.1 view.revenue.net
127.0.0.1 www.revenue.net
127.0.0.1 domainimages.targetwords.com
127.0.0.1 domainimages2.targetwords.com
127.0.0.1 domainlanding.targetwords.com
127.0.0.1 ie.targetwords.com
127.0.0.1 images.targetwords.com
127.0.0.1 impress.targetwords.com
127.0.0.1 search.targetwords.com
127.0.0.1 targetwords.com
127.0.0.1 www.targetwords.com
127.0.0.1 ie.twrds.com
127.0.0.1 windowpatch.com
127.0.0.1 www.windowpatch.com
127.0.0.1 hastalavista.com
127.0.0.1 www.hastalavista.com
127.0.0.1 www.judysearch.com
127.0.0.1 wowsearch.org
127.0.0.1 safesearch.com
127.0.0.1 www.safesearch.com
127.0.0.1 www.dotcomtoolbar.com #[Spyware.Dotcomtoolbar]
127.0.0.1 linksummary.com
127.0.0.1 demon1.linksummary.com
127.0.0.1 demon2.linksummary.com
127.0.0.1 click.dotcomtoolbar.com #[SPW_DCTOOLBAR.A]
127.0.0.1 redirect.linksummary.com
127.0.0.1 searchbar.linksummary.com
127.0.0.1 www.linksummary.com
127.0.0.1 findthewebsiteyouneed.com #[Trojan JAVA_NEEDY.A]
127.0.0.1 click.findthewebsiteyouneed.com
127.0.0.1 searchbar.findthewebsiteyouneed.com #[BackDoor.Afcore.AL]
127.0.0.1 www.findthewebsiteyouneed.com #[Java.Shinwow]
127.0.0.1 1.adbrite.com
127.0.0.1 2.adbrite.com
127.0.0.1 3.adbrite.com
127.0.0.1 1.marketbanker.com
127.0.0.1 2.marketbanker.com
127.0.0.1 3.marketbanker.com
127.0.0.1 alibabanet.net #[Backdoor.IRC.Aladinz]
127.0.0.1 www.alibabanet.net
127.0.0.1 maximuncash.com
127.0.0.1 www.maximuncash.com
127.0.0.1 abacus.netster.com
127.0.0.1 about.netster.com
127.0.0.1 addtosite.netster.com
127.0.0.1 customize.netster.com
127.0.0.1 hardy.netster.com
127.0.0.1 home.netster.com
127.0.0.1 in.netster.com
127.0.0.1 laurel.netster.com
127.0.0.1 mail.netster.com
127.0.0.1 main.netster.com
127.0.0.1 maps.netster.com
127.0.0.1 netster.xmlsearch.findwhat.com
127.0.0.1 ns1.netster.net
127.0.0.1 search.netster.com
127.0.0.1 smartbrowse.netster.com #[InitScript Class]
127.0.0.1 travel.netster.com
127.0.0.1 yo.netster.com
127.0.0.1 cu.clickspring.net
127.0.0.1 fp.clickspring.net #[Adware.PurityScan.C]
127.0.0.1 metroid.clickspring.net #[Parasite.PurityScan]
127.0.0.1 pisces.clickspring.net
127.0.0.1 www.clickspring.net #[TROJ_MENDWAR.A]
127.0.0.1 purityscan.com #[Adware.Purityscan]
127.0.0.1 www.purityscan.com #[TROJ_MENDWAR.A]
127.0.0.1 jimmysurf.com #[JimmySurf]
127.0.0.1 www.jimmysurf.com
127.0.0.1 www2.jimmysurf.com
127.0.0.1 ucbill.com
127.0.0.1 www.ucbill.com
127.0.0.1 www.lyricsdomain.com
127.0.0.1 www.negativebeats.com #[Downloader.Small][C2Media\LOP]
127.0.0.1 buddylinks.net
127.0.0.1 origin.buddylinks.net
127.0.0.1 www.buddylinks.net
127.0.0.1 www.clkoptimizer.com
127.0.0.1 www.qoolaid.com
127.0.0.1 qoologic.com
127.0.0.1 adsrv.qoologic.com
127.0.0.1 www.qoologic.com
127.0.0.1 ad.rambler.ru
127.0.0.1 ad2.rambler.ru
127.0.0.1 counter.rambler.ru
127.0.0.1 images.rambler.ru
127.0.0.1 top100.rambler.ru
127.0.0.1 outwar.com
127.0.0.1 www.outwar.com #[Trojan.Win32.VB.iy]
127.0.0.1 ads.rampidads.com
127.0.0.1 gallery.rampid.com
127.0.0.1 www.rampidads.com
127.0.0.1 banner.clickfinders.com
127.0.0.1 images.clickfinders.com
127.0.0.1 search.clickfinders.com
127.0.0.1 tracking.clickfinders.com
127.0.0.1 tracker.clickfinders.com
127.0.0.1 www.clickfinders.com
127.0.0.1 realnetworks.com
127.0.0.1 ad.realmedia.co.kr
127.0.0.1 realmedia.com
127.0.0.1 adv.247realmedia.com
127.0.0.1 247realmedia.com
127.0.0.1 icover.realmedia.com
127.0.0.1 mserv1.realmedia.com
127.0.0.1 network.realmedia.com
127.0.0.1 oad.realmedia.com
127.0.0.1 oas-central.realmedia.com
127.0.0.1 retaildirect.realmedia.com
127.0.0.1 va04.247media.com
127.0.0.1 realmedia-a800.d4p.net
127.0.0.1 ads.realmedia.ro
127.0.0.1 realtracker.com
127.0.0.1 adserver1.realtracker.com
127.0.0.1 adserver2.realtracker.com
127.0.0.1 business.realtracker.com
127.0.0.1 free.realtracker.com
127.0.0.1 layout1.realtracker.com
127.0.0.1 project2.realtracker.com
127.0.0.1 talkcity.realtracker.com
127.0.0.1 tpl1.realtracker.com
127.0.0.1 tpl2.realtracker.com
127.0.0.1 web1.realtracker.com
127.0.0.1 web2.realtracker.com
127.0.0.1 web3.realtracker.com
127.0.0.1 web4.realtracker.com
127.0.0.1 free1.usa.realtracker.com
127.0.0.1 www.realtracker.com
127.0.0.1 free1.realtrackernl.com
127.0.0.1 free.realtrackernl.com
127.0.0.1 11.rtcode.com
127.0.0.1 www.nethit-free.nl
127.0.0.1 i.real.com
127.0.0.1 realguide.real.com
127.0.0.1 chillout.real.com
127.0.0.1 outpost.real.com
127.0.0.1 games-dl.real.com #[RealArcadeRdxIE Class]
127.0.0.1 software-dl.real.com #[RdxIE Class]
127.0.0.1 take5.real.com
127.0.0.1 www.realld.com
127.0.0.1 conf.redswoosh.com
127.0.0.1 download.redswoosh.com #[rsinstaller.cab]
127.0.0.1 edn.redswoosh.com
127.0.0.1 install.redswoosh.com
127.0.0.1 www.redswoosh.com
127.0.0.1 redswoosh.net #[Red Swoosh EDN Client]
127.0.0.1 conf.redswoosh.net
127.0.0.1 download.redswoosh.net #[InstallCtl Class]
127.0.0.1 edn.redswoosh.net
127.0.0.1 els.redswoosh.net
127.0.0.1 install.redswoosh.net
127.0.0.1 www.redswoosh.net
127.0.0.1 a.rn11.com
127.0.0.1 e.rn11.com
127.0.0.1 i.rn11.com
127.0.0.1 img.rn11.com
127.0.0.1 rn11.com
127.0.0.1 www.rn11.com
127.0.0.1 internetwasher.com
127.0.0.1 alerts.internetwasher.com
127.0.0.1 download.internetwasher.com
127.0.0.1 download-ak.internetwasher.com
127.0.0.1 www.internetwasher.com
127.0.0.1 systemsoap.com #[Parasite.Zipclix and Httper]
127.0.0.1 alerts.systemsoap.com
127.0.0.1 download-ak.systemsoap.com
127.0.0.1 e.systemsoap.com
127.0.0.1 secure.systemsoap.com
127.0.0.1 www.systemsoap.com
127.0.0.1 ba2.systemsoap.net
127.0.0.1 secure.systemsoap.net
127.0.0.1 es.1clickspyclean.com
127.0.0.1 www.malwhere.com
127.0.0.1 mynetprotector.com #[bundled malware]
127.0.0.1 www.mynetprotector.com
127.0.0.1 www.scumware-remover.org
127.0.0.1 www.smartestsearch.com
127.0.0.1 www.softbulldog.com
127.0.0.1 spyassassin.com #[AdBlocker.dll]
127.0.0.1 www.spyassassin.com
127.0.0.1 lsjmp.com
127.0.0.1 www.pmstats.com
127.0.0.1 www.postalmanager.com
127.0.0.1 www.spybouncer.com #[SpyBouncer.SBDownloader]
127.0.0.1 http.edge.ru4.com
127.0.0.1 http1.edge.ru4.com
127.0.0.1 http2.edge.ru4.com
127.0.0.1 http3.edge.ru4.com
127.0.0.1 http4.edge.ru4.com
127.0.0.1 http5.edge.ru4.com
127.0.0.1 http6.edge.ru4.com
127.0.0.1 http7.edge.ru4.com
127.0.0.1 http8.edge.ru4.com
127.0.0.1 http9.edge.ru4.com
127.0.0.1 http10.edge.ru4.com
127.0.0.1 http201.edge.ru4.com
127.0.0.1 http300.edge.ru4.com
127.0.0.1 http300.content.ru4.com
127.0.0.1 vpdc.ru4.com
127.0.0.1 ad-flow.com
127.0.0.1 ads.ad-flow.com
127.0.0.1 content.ad-flow.com
127.0.0.1 images.ad-flow.com
127.0.0.1 net.ad-flow.com
127.0.0.1 download.sidestep.com #[SideStep IE Inst]
127.0.0.1 hotels.sidestep.com
127.0.0.1 traveldeals.sidestep.com #[Trojan.Mitglieder.M]
127.0.0.1 www.sidestep.com
127.0.0.1 ads.sitemeter.com
127.0.0.1 sitemeter.com
127.0.0.1 sm2.sitemeter.com
127.0.0.1 sm3.sitemeter.com
127.0.0.1 sm4.sitemeter.com
127.0.0.1 sm5.sitemeter.com
127.0.0.1 sm6.sitemeter.com
127.0.0.1 sm7.sitemeter.com
127.0.0.1 sm8.sitemeter.com
127.0.0.1 sm9.sitemeter.com
127.0.0.1 s10.sitemeter.com
127.0.0.1 s11.sitemeter.com
127.0.0.1 s12.sitemeter.com
127.0.0.1 s13.sitemeter.com
127.0.0.1 s14.sitemeter.com
127.0.0.1 s15.sitemeter.com
127.0.0.1 www.sitemeter.com
127.0.0.1 www.jetpad.com
127.0.0.1 static.appliedsemantics.com #[New.net Auto-search Control]
127.0.0.1 www.appliedsemantics.com #[Google]
127.0.0.1 dlkw.drsnsrch.com
127.0.0.1 kw.drsnsrch.com
127.0.0.1 search2.drsnsrch.com
127.0.0.1 websearch.drsnsrch.com #[Spyware.Shopnav.dl]
127.0.0.1 shopnav.com
127.0.0.1 apps.shopnav.com
127.0.0.1 search.shopnav.com #[Sypware.Shopnav]
127.0.0.1 soda.shopnav.com
127.0.0.1 www.shopnav.com
127.0.0.1 srng.net
127.0.0.1 apps.webservicehost.com #[Google]
127.0.0.1 2020search.com #[Trojan.Digits][Downloader Class]
127.0.0.1 www.2020search.com #[CWS.Googlems.2][CWS.Winres]
127.0.0.1 pop.popuptoast.com #[Spyware.2020search]
127.0.0.1 aboutwebservices.com
127.0.0.1 sitetracker.com
127.0.0.1 www.sitetracker.com
127.0.0.1 www2a.sitetracker.com
127.0.0.1 free-stats.i8.com
127.0.0.1 site-stats.i8.com
127.0.0.1 free-counter.5u.com
127.0.0.1 hit-counter.5u.com
127.0.0.1 web-counter.5u.com
127.0.0.1 freestats.com
127.0.0.1 banner.freeservers.com
127.0.0.1 adtegrity.spinbox.net
127.0.0.1 ia.spinbox.net
127.0.0.1 netcomm.spinbox.net
127.0.0.1 spin.spinbox.net
127.0.0.1 vsii.spinbox.net
127.0.0.1 www.spinbox.net
127.0.0.1 banner-server-usa-english.com #[server down?]
127.0.0.1 www.banner-server-usa-english.com
127.0.0.1 default-homepage-network.com #[bundled parasites]
127.0.0.1 downloads.default-homepage-network.com
127.0.0.1 si1.default-homepage-network.com
127.0.0.1 www.default-homepage-network.com #[JS.Startpage.DK]
127.0.0.1 passthison.com #[VBS.PassOn]
127.0.0.1 object.passthison.com #[default-homepage-network.com]
127.0.0.1 server274.passthison.com
127.0.0.1 www.passthison.com
127.0.0.1 server224.smartbotpro.net #[JS.Startpage.DK]
127.0.0.1 www.smartbotpro.net
127.0.0.1 bluehavenmedia.com
127.0.0.1 www.bluehavenmedia.com
127.0.0.1 download.bulletproofsoft.com
127.0.0.1 www.bulletproofsoft.com
127.0.0.1 bigbrother.gigatechsoftware.com
127.0.0.1 download.gigatechsoftware.com
127.0.0.1 www.gigatechsoftware.com
127.0.0.1 www.greasycow.com
127.0.0.1 softwareds.com
127.0.0.1 download.softwareds.com
127.0.0.1 www.softwareds.com
127.0.0.1 www.porn-gizmo.com
127.0.0.1 www.topeleven.net
127.0.0.1 ads.osdn.com
127.0.0.1 sfads.osdn.com
127.0.0.1 images-aud-pg.osdn.com
127.0.0.1 images-aud.freshmeat.net
127.0.0.1 images-aud.slashdot.org
127.0.0.1 images-aud.sourceforge.net
127.0.0.1 imgserv.adbutler.com
127.0.0.1 adrotator.com
127.0.0.1 www.adrotator.com
127.0.0.1 www.sparkimg.com
127.0.0.1 counter.sparklit.com
127.0.0.1 vote.sparklit.com
127.0.0.1 webpoll.sparklit.com
127.0.0.1 downloadaccelerator.com #[Adware.DAP]
127.0.0.1 ads.downloadaccelerator.com
127.0.0.1 search.downloadaccelerator.com
127.0.0.1 update.downloadaccelerator.com
127.0.0.1 webmaster.downloadaccelerator.com
127.0.0.1 downloadaccelerator.net
127.0.0.1 lidan.com
127.0.0.1 www.speedbit.com
127.0.0.1 redir.speedbit.com
127.0.0.1 ad4.speedbit.com
127.0.0.1 ad7.speedbit.com
127.0.0.1 ads1.speedbit.com
127.0.0.1 ads2.speedbit.com
127.0.0.1 ads3.speedbit.com
127.0.0.1 ads4.speedbit.com
127.0.0.1 ads7.speedbit.com
127.0.0.1 ads8.speedbit.com
127.0.0.1 ads9.speedbit.com
127.0.0.1 ads10.speedbit.com
127.0.0.1 download1.speedbit.com
127.0.0.1 download2.speedbit.com
127.0.0.1 download3.speedbit.com
127.0.0.1 images.speedbit.com
127.0.0.1 mirrorsearch.speedbit.com
127.0.0.1 www3.speedbit.com
127.0.0.1 spylog.com
127.0.0.1 banners.spylog.com
127.0.0.1 gstats.spylog.com
127.0.0.1 hits.spylog.com
127.0.0.1 my.spylog.com
127.0.0.1 stats.spylog.com
127.0.0.1 www.spylog.com
127.0.0.1 spylog.ru
127.0.0.1 dir.spylog.ru
127.0.0.1 dir1.spylog.ru
127.0.0.1 gs.spylog.ru
127.0.0.1 info.spylog.ru
127.0.0.1 present.spylog.ru
127.0.0.1 www.spylog.ru
127.0.0.1 counter.aport.ru
127.0.0.1 spywarelabs.com #[Adware.VirtualBouncer]
127.0.0.1 download.spywarelabs.com
127.0.0.1 downloads.spywarelabs.com #[VirtualBouncer]
127.0.0.1 install.spywarelabs.com
127.0.0.1 spywarelabs.fileburst.com
127.0.0.1 xml.spywarelabs.com
127.0.0.1 www.spywarelabs.com
127.0.0.1 achtungachtung.com #[TROJ_REVOP.A]
127.0.0.1 www.achtungachtung.com
127.0.0.1 adserv.net
127.0.0.1 adtrak.net
127.0.0.1 ugl.adtrak.net
127.0.0.1 www.adtrak.net
127.0.0.1 allclicks.com
127.0.0.1 www.allclicks.com
127.0.0.1 atoque.com
127.0.0.1 www.atoque.com
127.0.0.1 bulkclicks.com
127.0.0.1 cashpile.com
127.0.0.1 www.cgistorehouse.com
127.0.0.1 www.clickhereforcellphones.com
127.0.0.1 www.clickheretofind.com
127.0.0.1 clickthrunet.net
127.0.0.1 ads.clickthru.net
127.0.0.1 clickthru.net
127.0.0.1 icon.clickthru.net
127.0.0.1 clickthrutraffic.com
127.0.0.1 www.clickthrutraffic.com
127.0.0.1 mojo.com #[CustomToolbar.Setup]
127.0.0.1 www.mojo.com #[Parasite.CustomToolbar]
127.0.0.1 mojosearch.com
127.0.0.1 www.mojosearch.com
127.0.0.1 popuptraffic.com
127.0.0.1 media.popuptraffic.com
127.0.0.1 media2.popuptraffic.com
127.0.0.1 stats.popuptraffic.com
127.0.0.1 www.popuptraffic.com
127.0.0.1 searchtraffic.com
127.0.0.1 www.searchtraffic.com
127.0.0.1 www.standardinternet.com
127.0.0.1 stopannoyingpopups.com #[Parasite.AutoSearch]
127.0.0.1 www.stopannoyingpopups.com
127.0.0.1 sictalk.com
127.0.0.1 www.textlinks.com
127.0.0.1 tunders.com
127.0.0.1 www.tunders.com #[Parasite.AutoSearch]
127.0.0.1 search.turbofind.com
127.0.0.1 www.turbofind.com
127.0.0.1 go.startnow.com
127.0.0.1 minisearch.startnow.com
127.0.0.1 nav.startnow.com
127.0.0.1 search.startnow.com
127.0.0.1 srch.startnow.com
127.0.0.1 www.startnow.com
127.0.0.1 admin.startsurfing.com
127.0.0.1 download.startsurfing.com
127.0.0.1 rev.startsurfing.com
127.0.0.1 search.startsurfing.com
127.0.0.1 startsurfing.com #[search123.com]
127.0.0.1 www.startsurfing.com
127.0.0.1 cometcursor.com #[KB316085]
127.0.0.1 cometcursors.com
127.0.0.1 www.cometcursors.com
127.0.0.1 cometsystems.com
127.0.0.1 christmascursors.cometsystems.com
127.0.0.1 cometcursor.cometsystems.com
127.0.0.1 cometzone.cometsystems.com
127.0.0.1 content.cometsystems.com
127.0.0.1 dm.cometsystems.com #[DMProxyCtl Class]
127.0.0.1 download.cometsystems.com
127.0.0.1 f2.cometsystems.com
127.0.0.1 files.cc.cometsystems.com
127.0.0.1 files.cometsystems.com
127.0.0.1 log.cc.cometsystems.com #[Spyware.CometCursor]
127.0.0.1 mcc-fd.cometsystems.com
127.0.0.1 rd.yn.cometsystems.com
127.0.0.1 search2.cometsystems.com
127.0.0.1 webmail.cometsystems.com
127.0.0.1 cometzone.com
127.0.0.1 www.addrive.com
127.0.0.1 bluezipper.com
127.0.0.1 hpu.bluezipper.com
127.0.0.1 www.bluezipper.com
127.0.0.1 exceip.com
127.0.0.1 www.freeslide.com
127.0.0.1 jdaf.com
127.0.0.1 sbx1.com
127.0.0.1 jp1.sb01.com
127.0.0.1 sbase30.com
127.0.0.1 mx253.sb03.com
127.0.0.1 lc.squarepath.com
127.0.0.1 www.precisionpop.com #[Adware.PrecisionPop]
127.0.0.1 subscriberbase.com
127.0.0.1 www.weeklysurveys.com
127.0.0.1 targetnet.com
127.0.0.1 adpulse.ads.targetnet.com
127.0.0.1 fad-404.mtl4.targetnet.com
127.0.0.1 fad-407.mtl4.targetnet.com
127.0.0.1 fad-410.mtl4.targetnet.com
127.0.0.1 fad-1103.nyc1.targetnet.com
127.0.0.1 fad-1104.nyc1.targetnet.com
127.0.0.1 fad-1106.nyc1.targetnet.com
127.0.0.1 fad-1109.nyc1.targetnet.com #[SpyAssult]
127.0.0.1 fad-1105.nyc1.targetnet.com
127.0.0.1 focusin.ads.targetnet.com
127.0.0.1 www.targetnet.com
127.0.0.1 focusin.com
127.0.0.1 www-401.focusin.com
127.0.0.1 www.focusin.com
127.0.0.1 ads.mamma.com
127.0.0.1 www.orbitexplorer.com #[Xupiter.OrbitExplorer][Parasite.Xupiter]
127.0.0.1 delfinproject.com
127.0.0.1 content.delfinproject.com
127.0.0.1 mm.delfinproject.com #[DelFin Media Viewer]
127.0.0.1 www.delfinproject.com #[PromulGate][KB811270]
127.0.0.1 pgate-basic.com #[PGATE-BASIC]
127.0.0.1 www.pgate-basic.com
127.0.0.1 centralmedia.ws #[flashlightsearch.com]
127.0.0.1 ads.centralmedia.ws
127.0.0.1 c.centralmedia.ws
127.0.0.1 www.centralmedia.ws
127.0.0.1 memorymeter.com #[Adware-TVelocity][TotalVelocity.MemoryMeter]
127.0.0.1 www.memorymeter.com
127.0.0.1 totalvelocity.com #[TV T-Media Display]
127.0.0.1 www.totalvelocity.com
127.0.0.1 zsearchresults.com
127.0.0.1 www.zsearchresults.com #[Spyware.zSearch]
127.0.0.1 zsearchtoolbar.com
127.0.0.1 www.zsearchtoolbar.com
127.0.0.1 tradedoubler.com
127.0.0.1 impfr.tradedoubler.com
127.0.0.1 impgb.tradedoubler.com
127.0.0.1 impit.tradedoubler.com
127.0.0.1 impse.tradedoubler.com
127.0.0.1 tracker.tradedoubler.com
127.0.0.1 mainentrypoint.com
127.0.0.1 in.mainentrypoint.com
127.0.0.1 lz.mainentrypoint.com
127.0.0.1 secure.mainentrypoint.com
127.0.0.1 vad.mainentrypoint.com
127.0.0.1 www.mainentrypoint.com #[Adware.AdultLinks]
127.0.0.1 ftp.clicktracking.info
127.0.0.1 www.clicktracking.info #[AdPopper]
127.0.0.1 ez-searching.com
127.0.0.1 www.ez-searching.com
127.0.0.1 www.findology.com
127.0.0.1 findology.mail.everyone.net
127.0.0.1 www.special-t-travel.com
127.0.0.1 congratulations.travelengine.net
127.0.0.1 www.travelengine.net
127.0.0.1 www.nuker.com #[NetSource101]
127.0.0.1 www.trekblue.com
127.0.0.1 crossroad.trekdata.com
127.0.0.1 www.spywarenuker.com #[Adware.SpywareNuker]
127.0.0.1 linktracker.angelfire.com
127.0.0.1 icache.getrelevant.com
127.0.0.1 ads.lycos.com
127.0.0.1 cm8.lycos.com
127.0.0.1 guestworld.tripod.lycos.com
127.0.0.1 install.sidesearch.lycos.com #[Lycos SideSearch][Adware.SideSearch]
127.0.0.1 ads.tripod.lycos.co.uk
127.0.0.1 dl.lygo.com #[SideSearch]
127.0.0.1 oreo.matchmaker.com
127.0.0.1 ads.tripod.com
127.0.0.1 ads1.tripod.com
127.0.0.1 build.tripod.com
127.0.0.1 linktracker.tripod.com
127.0.0.1 nedstat.tripod.com
127.0.0.1 titan.guestworld.tripod.lycos.com
127.0.0.1 twistedhumor.com #[Parasite.CometCursor/Toolbar]
127.0.0.1 www.twistedhumor.com
127.0.0.1 www.crazydrinks.com
127.0.0.1 www.em5000.com
127.0.0.1 www.rankyou.com
127.0.0.1 www.wayweird.com
127.0.0.1 www.all2save.com
127.0.0.1 includes.all2save.com
127.0.0.1 andr.com
127.0.0.1 www.andr.com
127.0.0.1 bigsexvideos.com
127.0.0.1 www.bigsexvideos.com
127.0.0.1 www.casinoxo.com #[CasinoXOSetup]
127.0.0.1 duolaimi.net
127.0.0.1 www.duolaimi.net
127.0.0.1 eimg.com
127.0.0.1 www.eimg.com
127.0.0.1 glintbill.com
127.0.0.1 www.glintbill.com
127.0.0.1 gorefer.com
127.0.0.1 www.gorefer.com
127.0.0.1 hotqueens.com
127.0.0.1 banners.hotqueens.com
127.0.0.1 pix.hotqueens.com
127.0.0.1 www.hotqueens.com
127.0.0.1 www.loading-lolita.com
127.0.0.1 loveadot.com #[Trojan.Lovead]
127.0.0.1 www.loveadot.com
127.0.0.1 mycpworld.com
127.0.0.1 www.mycpworld.com
127.0.0.1 mysearches.com
127.0.0.1 www.mysearches.com
127.0.0.1 mysearchstart.com
127.0.0.1 www.mysearchstart.com
127.0.0.1 quickfindit.net
127.0.0.1 www.quickfindit.net
127.0.0.1 searching.net
127.0.0.1 www.searching.net
127.0.0.1 searchscavenger.com
127.0.0.1 www.searchscavenger.com
127.0.0.1 www.sexarena.com
127.0.0.1 startingsearch.com
127.0.0.1 www.startingsearch.com
127.0.0.1 www.ultsearch.com
127.0.0.1 ultimatesearch.com
127.0.0.1 www.ultimatesearch.com
127.0.0.1 xjupiter.com #[Xupiter]
127.0.0.1 www.xjupiter.com
127.0.0.1 clear-search.com
127.0.0.1 clrsch.com #[Adware.ClearSearch][CWS]
127.0.0.1 r2.clrsch.com
127.0.0.1 sds.clrsch.com #[TROJ_SMALL.GO]
127.0.0.1 status.clrsch.com
127.0.0.1 www.clrsch.com
127.0.0.1 clr-sch.com
127.0.0.1 sds.qckads.com
127.0.0.1 status.qckads.com
127.0.0.1 ads.bfast.com
127.0.0.1 bst.bfast.com
127.0.0.1 service.bfast.com
127.0.0.1 service2.bfast.com
127.0.0.1 www.yourcontrolpanel.com
127.0.0.1 befree.webdialogs.com
127.0.0.1 search123.com
127.0.0.1 click.search123.com
127.0.0.1 cgi.search123.com
127.0.0.1 partners.search123.com
127.0.0.1 www.search123.com
127.0.0.1 clickagents.com
127.0.0.1 ads.clickagents.com
127.0.0.1 st.clickagents.com
127.0.0.1 www.clickagents.com
127.0.0.1 mediaplex.com
127.0.0.1 adfarm.mediaplex.com
127.0.0.1 adfarm.snv.mediaplex.com
127.0.0.1 altfarm.mediaplex.com #[prevents login -ebay.co.uk]
127.0.0.1 img.mediaplex.com
127.0.0.1 img-iad.mediaplex.com
127.0.0.1 img-cdn.mediaplex.com
127.0.0.1 img-snv.mediaplex.com
127.0.0.1 mimg-snv.mediaplex.com
127.0.0.1 mojofarm.mediaplex.com
127.0.0.1 mojoworks.mediaplex.com
127.0.0.1 www.mediaplex.com
127.0.0.1 valueclick.com
127.0.0.1 adclst03.valueclick.com
127.0.0.1 js.valueclick.com
127.0.0.1 kansas.valueclick.com
127.0.0.1 lbrain.valueclick.com
127.0.0.1 lbrain.la.valueclick.com
127.0.0.1 intra.valueclick.com
127.0.0.1 oz.valueclick.com
127.0.0.1 st.valueclick.com
127.0.0.1 st.la.valueclick.com
127.0.0.1 www.valueclick.com
127.0.0.1 ads.123m.valueclick.net
127.0.0.1 ads.6fig.valueclick.net
127.0.0.1 ads.baby.valueclick.net
127.0.0.1 ads.big.valueclick.net
127.0.0.1 ads.hdn.valueclick.net
127.0.0.1 ads.hlwd.valueclick.net
127.0.0.1 ads.hnet.valueclick.net
127.0.0.1 ads.huma.valueclick.net
127.0.0.1 ads.mb.valueclick.net
127.0.0.1 ads.pg.valueclick.net
127.0.0.1 ads.smm.valueclick.net
127.0.0.1 ads.pas.valueclick.net
127.0.0.1 ads.qcns.valueclick.net
127.0.0.1 ads.usta.valueclick.net
127.0.0.1 compnet.us.intellitxt.com
127.0.0.1 devshed.us.intellitxt.com
127.0.0.1 examnotes.us.intellitxt.com
127.0.0.1 experts.us.intellitxt.com
127.0.0.1 forbes.us.intellitxt.com
127.0.0.1 icentric.us.intellitxt.com
127.0.0.1 lmcd.us.intellitxt.com
127.0.0.1 rydium.us.intellitxt.com
127.0.0.1 toms.us.intellitxt.com
127.0.0.1 tribal.us.intellitxt.com
127.0.0.1 vibrantmedia.com
127.0.0.1 itxt.vibrantmedia.com
127.0.0.1 usads.vibrantmedia.com
127.0.0.1 usnews.vibrantmedia.com
127.0.0.1 www.vibrantmedia.com
127.0.0.1 toolbar.gograph.com
127.0.0.1 categories.mygeek.com
127.0.0.1 tp.mygeek.com
127.0.0.1 xmlsearch.mygeek.com
127.0.0.1 searchcentrix.com #[Adware.SideBar][SearchCentrix]
127.0.0.1 downloads.searchcentrix.com #[SomaticCAB.Setup]
127.0.0.1 if.searchcentrix.com
127.0.0.1 www.searchcentrix.com #[VisiCom.SearchCentric]
127.0.0.1 search-o-matic2000.com
127.0.0.1 www.search-o-matic2000.com
127.0.0.1 vmn.net
127.0.0.1 seek4freetoolbar.mygeek.com
127.0.0.1 toolbar.pickoftheweb.com
127.0.0.1 app.desktop.ak-networks.com #[aklsp.dll][TrojanDownloader.Win32.Agent.br]
127.0.0.1 updates.desktop.ak-networks.com
127.0.0.1 vlogic.ak-networks.com #[lspak.dll]
127.0.0.1 www.newtonknows.com #[Newton Knows.Bar]
127.0.0.1 virtumundo.com #[Virtumonde.C]
127.0.0.1 ads3.virtumundo.com
127.0.0.1 ads4.virtumundo.com
127.0.0.1 dyn.virtumundo.com
127.0.0.1 pchi-vtrk.virtumundo.com
127.0.0.1 privacy.virtumundo.com
127.0.0.1 updates.desktop.virtumundo.com #[TrojanDownloader.Win32.Virtumonde.a]
127.0.0.1 vtrack.virtumundo.com
127.0.0.1 www.virtumundo.com #[TargetSoft.winhost32]
127.0.0.1 vmadmin.com
127.0.0.1 www.webhancer.com
127.0.0.1 a1.webhancer.com
127.0.0.1 d.webhancer.com
127.0.0.1 d2.webhancer.com
127.0.0.1 d3.webhancer.com
127.0.0.1 download.webhancer.com
127.0.0.1 dr1.webhancer.com
127.0.0.1 dr2.webhancer.com
127.0.0.1 prime.webhancer.com
127.0.0.1 reports.webhancer.com
127.0.0.1 server.webhancer.com
127.0.0.1 update.webhancer.com
127.0.0.1 b1-v2-bell.webhancer.com
127.0.0.1 vr1-v1.webhancer.com
127.0.0.1 vws-1.webhancer.com
127.0.0.1 www.realenduser.com
127.0.0.1 bannerco-op.com
127.0.0.1 bannersgomlm.com
127.0.0.1 www.bannersgomlm.com
127.0.0.1 bannersgomlm.buildreferrals.com
127.0.0.1 websidestory.com
127.0.0.1 support.websidestory.com
127.0.0.1 www.websidestory.com
127.0.0.1 statmarket.com
127.0.0.1 stats.statmarket.com
127.0.0.1 webconnect.net
127.0.0.1 wexchange.webconnect.net
127.0.0.1 remote.webconnect.net
127.0.0.1 reporting.webconnect.net
127.0.0.1 secure.webconnect.net
127.0.0.1 www.webconnect.net
127.0.0.1 www.worldata.com
127.0.0.1 a1964.g.akamai.net
127.0.0.1 www.clock-sync.com #[ClockSync]
127.0.0.1 akapp.whenu.com
127.0.0.1 akdwl.whenu.com
127.0.0.1 akweb.whenu.com
127.0.0.1 app.whenu.com
127.0.0.1 bidtxt.whenu.com
127.0.0.1 chromium.whenu.com
127.0.0.1 download.whenu.com
127.0.0.1 mercury.whenu.com
127.0.0.1 spweather.whenu.com
127.0.0.1 spweb.whenu.com
127.0.0.1 tin.whenu.com
127.0.0.1 titanium.whenu.com
127.0.0.1 web.whenu.com
127.0.0.1 weather.whenu.com
127.0.0.1 zinc.whenu.com
127.0.0.1 whenushop.whenu.com
127.0.0.1 whenu.com #[Adware.WhenU][KB321966]
127.0.0.1 www.whenu.com
127.0.0.1 getweathercast.com
127.0.0.1 www.getweathercast.com #[Adware.Weathercast][Trojan.Win32.VB.fk]
127.0.0.1 pricebandit.com
127.0.0.1 www.pricebandit.com
127.0.0.1 www.whenushop.com
127.0.0.1 www.whenu.com.edgesuite.net
127.0.0.1 app.whenu.speedera.net
127.0.0.1 weather.whenu.speedera.net
127.0.0.1 web.whenu.speedera.net
127.0.0.1 whenusearch.com
127.0.0.1 www.whenusearch.com
127.0.0.1 download.ads234.com #[WinPage Affiliate][midaddle.dll]
127.0.0.1 www.ads234.com
127.0.0.1 origin.midaddle.com #[WinPage Affiliate]
127.0.0.1 www.midaddle.com
127.0.0.1 www.netspry.com #[CWinPagePlayer Object]
127.0.0.1 download.statblaster.com #[Parasite.WildMedia][TROJ_STILEN.A]
127.0.0.1 origin.statblaster.com
127.0.0.1 www.statblaster.com #[Adware.StatBlaster][StatBlaster]
127.0.0.1 data.overpro.com
127.0.0.1 download.overpro.com #[WMService Class]
127.0.0.1 www.overpro.com
127.0.0.1 www.playminigolf.com #[StopZilla Class]
127.0.0.1 download.wildarcade.com #[Adware.OverPro]
127.0.0.1 www.wildarcade.com
127.0.0.1 aimgames.wildtangent.com
127.0.0.1 aiminstaller.wildtangent.com
127.0.0.1 download.wildtangent.com
127.0.0.1 dl.dna.wildtangent.com
127.0.0.1 install.wildtangent.com #[WildTangent Active Launcher]
127.0.0.1 register.wildtangent.com
127.0.0.1 updaterservice.wildtangent.com
127.0.0.1 www.wildtangent.com #[WTHoster Class]
127.0.0.1 lycos.com.org
127.0.0.1 orbitcycle.com
127.0.0.1 banners.orbitcycle.com
127.0.0.1 shagorgag.orbitcycle.com
127.0.0.1 www.orbitcycle.com
127.0.0.1 wish7.com
127.0.0.1 www.wish7.com
127.0.0.1 toolbar.wishbone.com #[WBMInstaller Class]
127.0.0.1 your.wishbone.com
127.0.0.1 wapd.wishbone.com
127.0.0.1 www.wishbone.com
127.0.0.1 yeah.com
127.0.0.1 www.yeah.com
127.0.0.1 your.com #[digimedia.com]
127.0.0.1 www.your.com
127.0.0.1 ads3.wunderground.com
127.0.0.1 ads.wunderground.com
127.0.0.1 as5000.wunderground.com
127.0.0.1 server.as5000.com
127.0.0.1 server2.as5000.com
127.0.0.1 riversoftware.net #[ClearStream Accelerator]
127.0.0.1 www.riversoftware.net #[accel Class]
127.0.0.1 ads.x10.com
127.0.0.1 contest.x10.com
127.0.0.1 control.x10.com
127.0.0.1 graphics.x10.com
127.0.0.1 images.x10.com
127.0.0.1 reports.x10.com
127.0.0.1 software.x10.com
127.0.0.1 store.x10.com
127.0.0.1 x10-beta.com
127.0.0.1 x10.com
127.0.0.1 www.x10.com
127.0.0.1 pic.geocities.com
127.0.0.1 visit.geocities.com
127.0.0.1 hostingprod.com
127.0.0.1 www.clicksor.com
127.0.0.1 www.infinityads.com
127.0.0.1 multipops.com
127.0.0.1 www1.multipops.com
127.0.0.1 www.multipops.com
127.0.0.1 gopopup.com
127.0.0.1 www.gopopup.com
127.0.0.1 paypopup.com
127.0.0.1 central.paypopup.com
127.0.0.1 central2.paypopup.com
127.0.0.1 www1.paypopup.com
127.0.0.1 www2.paypopup.com
127.0.0.1 www3.paypopup.com
127.0.0.1 www4.paypopup.com
127.0.0.1 www5.paypopup.com
127.0.0.1 www6.paypopup.com
127.0.0.1 www7.paypopup.com
127.0.0.1 www8.paypopup.com
127.0.0.1 www9.paypopup.com #[toolbar.cab]
127.0.0.1 www10.paypopup.com
127.0.0.1 www.paypopup.com
127.0.0.1 popinads.com
127.0.0.1 www.popinads.com
127.0.0.1 ads.zdnet.com
127.0.0.1 newads.cmpnet.com
127.0.0.1 datapop.cmpnet.com
127.0.0.1 cookies.cmpnet.com
127.0.0.1 com.com
127.0.0.1 ads.techtv.com
127.0.0.1 zedo.com
127.0.0.1 ads.zedo.com
127.0.0.1 c1.zedo.com
127.0.0.1 c2.zedo.com
127.0.0.1 c3.zedo.com
127.0.0.1 c4.zedo.com
127.0.0.1 c5.zedo.com
127.0.0.1 c6.zedo.com
127.0.0.1 c7.zedo.com
127.0.0.1 g.zedo.com
127.0.0.1 l1.zedo.com
127.0.0.1 l5.zedo.com
127.0.0.1 simg.zedo.com
127.0.0.1 xads.zedo.com
127.0.0.1 www.zedo.com
127.0.0.1 adserver.affiliatemg.com
127.0.0.1 secure.billingnow.com
127.0.0.1 www.buysmarter.com
127.0.0.1 genericscanner.com
127.0.0.1 www.genericscanner.com
127.0.0.1 alpha.gigaisp.net #[server down?]
127.0.0.1 stats1.iad1.gigaisp.net
127.0.0.1 locator.imagesrvr.com
127.0.0.1 innovativemarketing.com
127.0.0.1 www.innovativemarketing.com
127.0.0.1 internetantispy.com
127.0.0.1 www.internetantispy.com
127.0.0.1 www.kazaaplatinum.com
127.0.0.1 www.mp3u.com
127.0.0.1 ns2.iad1.nssrv.com
127.0.0.1 www.popupguard.com
127.0.0.1 stats1.reliablestats.com
127.0.0.1 stopguard.com #[Rogue/Suspect]
127.0.0.1 www.stopguard.com
127.0.0.1 supportcs.com
127.0.0.1 www.supportcs.com #[server down?]
127.0.0.1 ads.softwareoutfit.com
127.0.0.1 vantagesoftware.com
127.0.0.1 www.vantagesoftware.com
127.0.0.1 virtumonde.com #[Adware.VirtuMonde][TROJ_AGENT.BV]
127.0.0.1 updates.virtumonde.com #[TrojanDownloader.Win32.Rahitor]
127.0.0.1 www.virtumonde.com #[Download.Ject][CATLEvents Object]
127.0.0.1 http.edge.vru4.com
127.0.0.1 www.winantivirus.com #[Rogue/Suspect]
127.0.0.1 winfirewall.com
127.0.0.1 www.winfirewall.com
127.0.0.1 www.winpopupguard.com
127.0.0.1 ads.offeroptimizer.com
127.0.0.1 reports.offeroptimizer.com
127.0.0.1 xads.offeroptimizer.com #[Twain Tech]
127.0.0.1 xadso.offeroptimizer.com
127.0.0.1 ximages.offeroptimizer.com
127.0.0.1 xlime.offeroptimizer.com
127.0.0.1 www.offeroptimizer.com
127.0.0.1 abetterinternet.com #[Downloader.Stubby.A]
127.0.0.1 belt.abetterinternet.com
127.0.0.1 c.abetterinternet.com #[Adware-BetterInet application]
127.0.0.1 download.abetterinternet.com #[Adware.StopPopupAdsNow]
127.0.0.1 download2.abetterinternet.com #[Parasite.Transponder]
127.0.0.1 s.abetterinternet.com
127.0.0.1 thinstall.abetterinternet.com
127.0.0.1 www.abetterinternet.com
127.0.0.1 cleangetaway.biz #[ABetterInternet.D]
127.0.0.1 www.cleangetaway.biz
127.0.0.1 msview.cc #[Parasite.Transponder]
127.0.0.1 www.msview.cc #[Adware.MSView]
127.0.0.1 mypanicbutton.com #[ABetterInternet.C]
127.0.0.1 stop-popup-ads-now.com #[Parasite.Transponder]
127.0.0.1 cr.stop-popup-ads-now.com
127.0.0.1 update.stop-popup-ads-now.com
127.0.0.1 www.stop-popup-ads-now.com #[Adware.Binet]
127.0.0.1 www.tps108.org #[Parasite.Transponder]
127.0.0.1 1000funnyvideos.com
127.0.0.1 www.1000funnyvideos.com
127.0.0.1 www.aadcom.com
127.0.0.1 addictivetechnologies.net
127.0.0.1 www.addictivetechnologies.net #[FavoriteMan]
127.0.0.1 www.acustat.com
127.0.0.1 at-games.com
127.0.0.1 www.at-games.com
127.0.0.1 www.flyordie.com #[Microsoft VM]
127.0.0.1 www.mindsetinteractive.com
127.0.0.1 mindseti.com #[Parasite.Transponder]
127.0.0.1 www.mindseti.com
127.0.0.1 banners.netpalgames.com
127.0.0.1 www.netpalgames.com
127.0.0.1 netpalnow.com #[Adware.Netpal]
127.0.0.1 www.netpalnow.com
127.0.0.1 netpaloffers.net #[Parasite.NetPal]
127.0.0.1 www.netpaloffers.net
127.0.0.1 internal.vx2.cc
127.0.0.1 mail.vx2.cc
127.0.0.1 transctl.vx2.cc
127.0.0.1 transctl-dev.vx2.cc
127.0.0.1 ns1.vx2.cc
127.0.0.1 ns2.vx2.cc
127.0.0.1 z1.vx2.cc
127.0.0.1 www.enconfidence.com
127.0.0.1 www.ileadmedia.com
127.0.0.1 www.searchenginebar.com #[Parasite.RXToolbar]
127.0.0.1 a-d-w-a-r-e.com
127.0.0.1 www.a-d-w-a-r-e.com
127.0.0.1 ad-w-a-r-e.com
127.0.0.1 www.ad-w-a-r-e.com
127.0.0.1 kudd.com
127.0.0.1 www.kudd.com
127.0.0.1 look2me.com #[Spyware.Look2Me]
127.0.0.1 www.look2me.com #[Trojan.Loome][Download.Look2Me]
127.0.0.1 www.look2me1.com
127.0.0.1 www.look2me2.com
127.0.0.1 www.look2me4.com
127.0.0.1 www.lovetraffic.com
127.0.0.1 nictechnetworks.com
127.0.0.1 www.nictechnetworks.com
127.0.0.1 similarsingles.com
127.0.0.1 www.similarsingles.com
127.0.0.1 zestyfind.com #[Adtomi.YahooStocks][Adware.Adtomi]
127.0.0.1 www.zestyfind.com #[Adware.ZestyFind]
127.0.0.1 datastorm.biz
127.0.0.1 ipend.datastorm.biz #[Parasite.ClientMan]
127.0.0.1 www.datastorm.biz
127.0.0.1 kazanon.com #[Kazanon]
127.0.0.1 www.kazanon.com
127.0.0.1 omi-update.net #[Win32.Small.Trojan]
127.0.0.1 www.omi-update.net #[Win32.Siboco.A][Adware.OMI]
127.0.0.1 messagebroadcaster.net #[messenger pop-up scam]
127.0.0.1 www.messagebroadcaster.net
127.0.0.1 odysseusmarketing.com
127.0.0.1 www.odysseusmarketing.com
127.0.0.1 searchassistant.net
127.0.0.1 alpha.searchassistant.net #[7search.com]
127.0.0.1 beta.searchassistant.net #[goclick.com]
127.0.0.1 cassandra.searchassistant.net
127.0.0.1 epsilon.searchassistant.net #[goclick.com]
127.0.0.1 www.searchassistant.net
127.0.0.1 spywarehelp.net
127.0.0.1 www.spywarehelp.net
127.0.0.1 www.unitedvending.net #[affiliate]
127.0.0.1 www.world-portal.com
127.0.0.1 clickalchemy.com
127.0.0.1 checkin.clickalchemy.com
127.0.0.1 www.clickalchemy.com #[Adware.ClickAlchemy]
127.0.0.1 www.conscorr.com #[TrojanDownloader.stubby.c]
127.0.0.1 grandstreetinteractive.com
127.0.0.1 badurl.grandstreetinteractive.com
127.0.0.1 config.grandstreetinteractive.com #[GSIM Uninstaller]
127.0.0.1 sysupdate.grandstreetinteractive.com
127.0.0.1 www.grandstreetinteractive.com
127.0.0.1 ipinsight.com #[Flashtrack][Adware.Ipinsight]
127.0.0.1 www.ipinsight.com
127.0.0.1 download.ipinsight.net
127.0.0.1 sentrymon.ipinsight.net
127.0.0.1 server.ipinsight.net
127.0.0.1 stubmon.ipinsight.net #[Parasite.IPInsight]
127.0.0.1 www.ipinsight.net
127.0.0.1 localnrd.com #[ADW_NRD.A]
127.0.0.1 drk.localnrd.com
127.0.0.1 www.mypanicbutton.com
127.0.0.1 www.mypctuneup.com
127.0.0.1 master.mx-targeting.com #[Adware.MXTarget.B]
127.0.0.1 www.mx-targeting.com #[Adware.MXTarget]
127.0.0.1 www.searchrabbit.com
127.0.0.1 thinkingmedia.net
127.0.0.1 www.thinkingmedia.net
127.0.0.1 ctl.twain-tech.com #[Adware.Twaintec.B]
127.0.0.1 www.twain-tech.com #[Adware.Twaintec]
127.0.0.1 680180.net
127.0.0.1 update.680180.net
127.0.0.1 www.680180.net
127.0.0.1 www.aimdolls.com #[F1 Organizer Class]
127.0.0.1 www.aimphuck.com
127.0.0.1 www.bc777.com #[Transponder/SiteHlpr]
127.0.0.1 bundleware.com
127.0.0.1 www.bundleware.com #[Look2Me]
127.0.0.1 www.imbum.com #[F1 Organizer Class]
127.0.0.1 www.imbum.net #[Look2Me]
127.0.0.1 spotresults.com
127.0.0.1 www.spotresults.com
127.0.0.1 www.websearch24.com
127.0.0.1 www.accerispartners.com #[worldxchange.com][Dialer.Paydial]
127.0.0.1 www.accesoplugin.com #[PremiumHTML Dialer]
127.0.0.1 www.aconti.net #[Dialer.Aconti]
127.0.0.1 www.adultoweb.com
127.0.0.1 www.advnt01.com #[7adpower][VacPro.canada_ver3]
127.0.0.1 www.bloiscom.net
127.0.0.1 www.contenidospc.com #[Ruboskizo Dialer]
127.0.0.1 crosskirk.com #[Dialer.Crosskirk]
127.0.0.1 d.crackedearth.com #[Parasite.CrackedEarth]
127.0.0.1 www.crackedearth.com
127.0.0.1 www.cyberzine.com #[CamGirlsLive ToolBar]
127.0.0.1 www.date.se #[SMS Dialer][Date Regon]
127.0.0.1 direct.data-line.us #[Date-Line Dialer]
127.0.0.1 d.dialer2004.com #[TrojanDropper.Win32.Small.cw]
127.0.0.1 dialeraccess.com
127.0.0.1 dialercom.com
127.0.0.1 www.dialercom.com
127.0.0.1 dialerclub.com
1

#8 Nekoyasha

Member

Group: Members
Posts: 31
Joined: 12-April 07
Location:Sumter SC, USA

Posted 13 April 2007 - 09:01 AM

127.0.0.1 www.dialerfactory.com
127.0.0.1 www.dialerplatform.com #[Trojan.Ibiza]
127.0.0.1 www.dialers2k.com #[Restricted Zone site]
127.0.0.1 preview.dialer411.com #[Restricted Zone site]
127.0.0.1 www.dinerotica.com #[SCDataDialer Class]
127.0.0.1 www.ebs-ag.com
127.0.0.1 www.eingang69.de
127.0.0.1 www.eops.de #[Parasite.XDiver]
127.0.0.1 www.e-sexcash.com
127.0.0.1 www.erostars.de #[Dialer.Erostars]
127.0.0.1 plugin.euro-infomedia.com #[EuroInfoMedia Dialer]
127.0.0.1 www.filmy.porno.pl #[Dialer.Connect]
127.0.0.1 www.gagne-un-max.com #[WWWInstall Class][Edipole Dialer]
127.0.0.1 run.gibnetmaster.com #[Adware.Cax][CAX Object]
127.0.0.1 download.globaldialer.net #[Dialer.Global]
127.0.0.1 global-netcom.de #[Parasite.GlobalNetcom]
127.0.0.1 install.global-netcom.de #[IELoaderCtl Class]
127.0.0.1 software.global-netcom.de
127.0.0.1 www.global-netcom.de #[Dialer.Coder]
127.0.0.1 www.goindirect.com #[Dialer.Goin][Parasite.DialerActiveX]
127.0.0.1 www.goindirect.nu
127.0.0.1 secure.goodthinxx.com
127.0.0.1 www.gxplugin.com #[Adult Content Dialer][plug Class]
127.0.0.1 www.holistyc.com
127.0.0.1 www.hotactiondating.com #[HotActionDating]
127.0.0.1 www.humorcash.com
127.0.0.1 www.humorcash.nl
127.0.0.1 www.ibs-clearing.ch #[IBS-Dialer]
127.0.0.1 www.ics900.com
127.0.0.1 www.infodialer3000.com #[IntPagomaster Class]
127.0.0.1 www.intercheck.co.uk #[Restricted Zone site]
127.0.0.1 66-128-204-6.rev.intercom.com
127.0.0.1 www.ip-tool.com
127.0.0.1 sessa.isprime.com #[Dialer Class]
127.0.0.1 access.juicyteenporn.com #[Dialer.Juicyteen][directplugin.com]
127.0.0.1 econnect.libereco.net
127.0.0.1 libereco.net #[Restricted Zone site]
127.0.0.1 www.libereco.net #[Parasite.OnlineDialer]
127.0.0.1 www.livecams.nl #[Dialer.LiveCams]
127.0.0.1 faq.mainpean.de
127.0.0.1 voicecall.mainpean.de
127.0.0.1 www.mainpean.de #[Dailer.Megateens]
127.0.0.1 www.manga-erotico.com #[Rubuskizo Dialer]
127.0.0.1 acceso.masminutos.com #[Marcador][Matrix Class]
127.0.0.1 masterdialer.de #[Parasite.MasterDialer]
127.0.0.1 www.masterdialer.de
127.0.0.1 www.mediapay.de
127.0.0.1 www.netcom.net.uk
127.0.0.1 www.netmails.com
127.0.0.1 netpond.com #[Dialer.Holistyc]
127.0.0.1 www.netpond.com
127.0.0.1 netvenda.com #[NVDialer]
127.0.0.1 content.netvenda.com
127.0.0.1 espana.netvenda.com #[WwwPlugin Class]
127.0.0.1 espana01.netvenda.com #[IntRuboskizo2 Class]
127.0.0.1 www.netvenda.com
127.0.0.1 www.parisvoyeur.com #[Dialer.Pornosex][Sesso]
127.0.0.1 www.plugins.com #[Restricted Zone site][bloke.com]
127.0.0.1 pluginaccess.com #[Restricted Zone site]
127.0.0.1 www.pluginaccess.com
127.0.0.1 www.powerdialler.com #[Dialer.AdultBrowser]
127.0.0.1 stream.pussyharem.com
127.0.0.1 www.pussyharem.com #[_Multimedia Player]
127.0.0.1 real-euros.com #[ePlugin Dialer]
127.0.0.1 info.securegetaway.com #[Adware.Cax][CAX Object]
127.0.0.1 x.secureloader.com #[Adware.Cax][CAX Object]
127.0.0.1 www.sexfiles.nu #[SMS Dialer][Date Regon]
127.0.0.1 www.sexop.tv #[SinCity Dialer]
127.0.0.1 01.sharedsource.org
127.0.0.1 03.sharedsource.org #[UDConnect Class]
127.0.0.1 05.sharedsource.org
127.0.0.1 09.sharedsource.org
127.0.0.1 17.sharedsource.org
127.0.0.1 18.sharedsource.org
127.0.0.1 19.sharedsource.org
127.0.0.1 20.sharedsource.org
127.0.0.1 22.sharedsource.org
127.0.0.1 www.sharedsource.org
127.0.0.1 www.sponsoradulto.com #[SysWebTelecomInt Class]
127.0.0.1 help.stardialer.de #[Parasite.StarDialer]
127.0.0.1 install.stardialer.de
127.0.0.1 www.stardialer.de #[Dialer.Stardial]
127.0.0.1 www.thepaymentcentre.com #[Holistyc Dialer]
127.0.0.1 www.thismedia.com #[IntSfTx Class]
127.0.0.1 stat.trafficadvance.net
127.0.0.1 download.tscash.com #[TSCPlugin Class]
127.0.0.1 webinstall.tscash.com #[Troj/Tinytest-A][WebPlugin Class]
127.0.0.1 www.worldxchange.com #[Dialer.Paydial]
127.0.0.1 4netmedia.com #[Parasite.OnlineDialer]
127.0.0.1 www.4netmedia.com #[Restricted Zone site]
127.0.0.1 24start.com #[Dialer.SwitchDialer]
127.0.0.1 www.24start.com #[Dialer.Lohan]
127.0.0.1 x0.nl #[dialXS]
127.0.0.1 www.coulomb.co.uk #[Dialer.Flatfive\Girlshost\Pornpaq]
127.0.0.1 cmi.ibill.com
127.0.0.1 secure.ibill.com
127.0.0.1 dl.dialerssolution.com #[Adware.Cax][CAX Object]
127.0.0.1 online-dialer.com
127.0.0.1 connect.online-dialer.com #[Moniker32 Class]
127.0.0.1 download.online-dialer.com
127.0.0.1 start.online-dialer.com #[Downloader.Istbar.V]
127.0.0.1 0190-dialer.com
127.0.0.1 download1.0190-dialer.com
127.0.0.1 download2.0190-dialer.com
127.0.0.1 download1.0190-dialers.com
127.0.0.1 download2.0190-dialers.com
127.0.0.1 accessplugin.com #[DialerCon Class]
127.0.0.1 www.accessplugin.com
127.0.0.1 connect.andlotsmore.com
127.0.0.1 www.crontel.com
127.0.0.1 diallerplugin.com
127.0.0.1 www.diallerplugin.com
127.0.0.1 ebony.andlotsmore.com
127.0.0.1 ebonyplugin.com
127.0.0.1 www.ebonyplugin.com
127.0.0.1 entryplugin.com
127.0.0.1 www.entryplugin.com
127.0.0.1 access.gamesplayground.com #[NGD Systems Dialer]
127.0.0.1 gaming.gamesplayground.com
127.0.0.1 games.andlotsmore.com #[NGD Systems Dialer]
127.0.0.1 gayplugin.com
127.0.0.1 www.gayplugin.com
127.0.0.1 great.andlotsmore.com
127.0.0.1 greatplugin.com
127.0.0.1 www.greatplugin.com
127.0.0.1 logoplugin.com
127.0.0.1 www.logoplugin.com
127.0.0.1 membersplugin.com
127.0.0.1 www.membersplugin.com
127.0.0.1 quickplugin.com
127.0.0.1 www.quickplugin.com
127.0.0.1 sexyplugin.com
127.0.0.1 www.sexyplugin.com
127.0.0.1 www.thebestplugin.com
127.0.0.1 webcam.andlotsmore.com
127.0.0.1 www.andlotsmore.com
127.0.0.1 akamai.downloadv3.com #[EGP2ECOM Class][InstantAccess]
127.0.0.1 scripts.downloadv3.com
127.0.0.1 fr4-scripts.downloadv3.com
127.0.0.1 usa-scripts.downloadv3.com
127.0.0.1 mirrors.egwn.net
127.0.0.1 pubvideo.egwn.net
127.0.0.1 pubvideo.us2.egwn.net
127.0.0.1 server02.us2.egwn.net
127.0.0.1 www.e-group.org
127.0.0.1 forum.electronic-group.com
127.0.0.1 www.electronic-group.com #[Win32.Wintrim.U]
127.0.0.1 legal.electronic-group.com
127.0.0.1 redirect01.fr4.egwn.net
127.0.0.1 ispdialer.com #[Parasite.ACXInstall]
127.0.0.1 www.ispdialer.com
127.0.0.1 access.rapid-pass.net #[network.nocreditcard.com]
127.0.0.1 media.rapid-pass.net
127.0.0.1 www.rapid-pass.net #[Dialer.InstantAccess]
127.0.0.1 iclicks.net
127.0.0.1 www.iclicks.net
127.0.0.1 megapornbucks.com #[i-lookup.com]
127.0.0.1 www9.megapornbucks.com
127.0.0.1 www.megapornbucks.com
127.0.0.1 megaporn.cf.mtreexxx.net
127.0.0.1 exits.freepornpics.com #[i-lookup.com]
127.0.0.1 sa.secure-firewall.com #[Trojan.Simcss]
127.0.0.1 ams-download.nocreditcard.com
127.0.0.1 ams-download.nocreditcardgay.com
127.0.0.1 banners.nocreditcardgay.com
127.0.0.1 instant-access.nocreditcardgay.com
127.0.0.1 download.nocreditcardgay.com
127.0.0.1 network.nocreditcardgay.com
127.0.0.1 usa-download.nocreditcardgay.com #[IEDial Class]
127.0.0.1 usa-network.nocreditcardgay.com
127.0.0.1 www.nocreditcardgay.com
127.0.0.1 banners.nocreditcard.com
127.0.0.1 dev-download.nocreditcard.com #[TROJ_MAGICON.A]
127.0.0.1 download.nocreditcard.com
127.0.0.1 fr4-network.nocreditcard.com
127.0.0.1 nocreditcard.com #[TROJ_ISBAR.A]
127.0.0.1 instant-access.nocreditcard.com #[Parasite.MagicControl]
127.0.0.1 usa-network.nocreditcard.com
127.0.0.1 webmaster.nocreditcard.com
127.0.0.1 nocreditcard.net #[ACXInstall]
127.0.0.1 fr4-download.nocreditcard.net
127.0.0.1 instant-access.nocreditcard.net
127.0.0.1 network.nocreditcard.net
127.0.0.1 usa-download.nocreditcard.net #[HTMLAccess Class]
127.0.0.1 www.nocreditcard.net
127.0.0.1 www.one2one.com #[One2One Viewer]
127.0.0.1 instant-access.sex-explorer.com
127.0.0.1 live.sex-explorer.com
127.0.0.1 lives.sex-explorer.com
127.0.0.1 network.strip-player.com
127.0.0.1 usa-download.strip-player.com #[EGStripDownload Class]
127.0.0.1 fr4-download.strip-player.com
127.0.0.1 fr4-download.stripplayer.com
127.0.0.1 stripplayer.com #[Parasite.StripPlayer]
127.0.0.1 download.stripplayer.com
127.0.0.1 usa-download.stripplayer.com
127.0.0.1 network.stripplayer.com
127.0.0.1 webmaster.stripplayer.com
127.0.0.1 www.strip-player.com
127.0.0.1 mediacharger.com
127.0.0.1 devfast.mediacharger.com
127.0.0.1 download.mediacharger.com
127.0.0.1 fast.mediacharger.com #[MediaCharger\MoviePlace]
127.0.0.1 www.pml.mediacharger.com
127.0.0.1 join.movienetworks.com
127.0.0.1 www.movienetworks.com
127.0.0.1 popcorn.net
127.0.0.1 join.popcorn.net
127.0.0.1 mp3.popcorn.net
127.0.0.1 www.real-tens.com
127.0.0.1 members.swimsuitnetwork.com
127.0.0.1 www.swimsuitnetwork.com
127.0.0.1 dialeradmin.com #[TROJ_PORNDIAL.BP][Dialer.WSV]
127.0.0.1 www.dialeradmin.com
127.0.0.1 directplugin.com
127.0.0.1 go-in-now.com
127.0.0.1 goinnow.com
127.0.0.1 www.goinnow.com
127.0.0.1 movie-browser.com
127.0.0.1 www.movie-browser.com
127.0.0.1 statsbank.com
127.0.0.1 tibsystems.com #[Parasite.SmartBrowser]
127.0.0.1 download.tibsystems.com #[Dial/WSV-A]
127.0.0.1 images.tibsystems.com
127.0.0.1 stats.tibsystems.com
127.0.0.1 sg1.tibsystems.com
127.0.0.1 us-sg1.tibsystems.com
127.0.0.1 www.tibsystems.com
127.0.0.1 ultimateplugin.com #[TIBSLoader Class]
127.0.0.1 80pictures.com #[Runet.A][CHM exploit]
127.0.0.1 aakro.nl
127.0.0.1 counter.adultcheck.com
127.0.0.1 adserver.adultfriendfinder.com
127.0.0.1 banners.adultfriendfinder.com
127.0.0.1 guest.adultfriendfinder.com
127.0.0.1 banners.asiafriendfinder.com
127.0.0.1 www.adultbrowser.com
127.0.0.1 adultlinksco.com
127.0.0.1 www.adultlinksco.com
127.0.0.1 www.adultprofitcenter.com #[Coolbar]
127.0.0.1 dn.adzerver.com
127.0.0.1 temp.adzerver.com
127.0.0.1 ctc.amateurpages.com
127.0.0.1 ads.asexstories.com
127.0.0.1 clicks.asianamateurpages.com
127.0.0.1 images.atweb.com
127.0.0.1 www.1adexchange.com
127.0.0.1 www.count24.de #[Restricted Zone site]
127.0.0.1 www.callingpay.de #[Restricted Zone site]
127.0.0.1 www.anne.cc
127.0.0.1 banners.babylon-x.com
127.0.0.1 beech-info2.com #[ByteVerify.exploit]
127.0.0.1 blacksnake.com
127.0.0.1 www.blacksnake.com #[IRC.Trojan.Fgt]
127.0.0.1 www.buddypicture.net #[BuddyPicture][HTA\exploit]
127.0.0.1 cashcount.com
127.0.0.1 www.cashcount.com
127.0.0.1 cashclicks.com
127.0.0.1 www.cashclicks.com
127.0.0.1 stats.cashring.com
127.0.0.1 cashtour.com
127.0.0.1 www.cashtour.com
127.0.0.1 refer.ccbill.com
127.0.0.1 button.clickability.com
127.0.0.1 apps.clickcash.com
127.0.0.1 www.clickcash.com
127.0.0.1 counter4all.dk
127.0.0.1 banner-exchange.directbanners.com
127.0.0.1 clicks.equantum.com
127.0.0.1 www.exitmoney.com
127.0.0.1 ad.erasercash.com
127.0.0.1 www.erasercash.com
127.0.0.1 www.exitforcash.com
127.0.0.1 adult.exitreturn.com
127.0.0.1 adserv.exxxit.com
127.0.0.1 amateur.freegayspace.com #[Trojan.Downloader.Aphe]
127.0.0.1 freexxxplace.com
127.0.0.1 www.freexxxplace.com #[VBS/Seeker-C]
127.0.0.1 freeticketcash.com
127.0.0.1 adserver.friendfinder.com
127.0.0.1 banners.friendfinder.com
127.0.0.1 e89.friendfinder.com
127.0.0.1 frontpagecash.com
127.0.0.1 www.frontpagecash.com
127.0.0.1 www.fpctraffic.com
127.0.0.1 fpctraffic2.com
127.0.0.1 www.fpctraffic2.com
127.0.0.1 c.fsx.com
127.0.0.1 gaysexswap.com
127.0.0.1 cgi.gaysexswap.com
127.0.0.1 arsconsole.global-intermedia.com
127.0.0.1 feeds.global-intermedia.com
127.0.0.1 www.hornyhits.biz
127.0.0.1 adcluster.humaniq.com
127.0.0.1 exitstitial.infospacehosting.net
127.0.0.1 banners.internetsexprovider.com
127.0.0.1 server2.internetdump.com
127.0.0.1 www.japanese-porns.com #[IEplugin Class]
127.0.0.1 asians.join4free.com
127.0.0.1 join4free.com
127.0.0.1 banners.largecash.com
127.0.0.1 listincestsites.com #[StartPage-AU]
127.0.0.1 www.love-world.de #[Troj/Tps]
127.0.0.1 www.M27Power.com
127.0.0.1 nub9r.maisonx.com #[BKDR_WOMANIZ.H]
127.0.0.1 adult.master-tv.net
127.0.0.1 www1.massivepass.com
127.0.0.1 mass-traffic.com
127.0.0.1 www.megacounter.de
127.0.0.1 resources.maxcash.com
127.0.0.1 stats.maximumcash.com
127.0.0.1 www.maximumcash.com
127.0.0.1 www.mysexweb.com #[Trojan.Treb]
127.0.0.1 ad.naked-celebs.com
127.0.0.1 clicks.nastydollars.com
127.0.0.1 grab.nastydollars.com
127.0.0.1 dev.ntcor.com #[CWS][Adware.AdultLinks][search-itnow.com]
127.0.0.1 www.nzads.net.nz
127.0.0.1 www.okmmm.com
127.0.0.1 exit.onlineexit.com #[Backdoor.Autoupder][Downloader-W]
127.0.0.1 onlysex.ws
127.0.0.1 www.onlysex.ws #[Troj/IEStart-F]
127.0.0.1 oxcash.com
127.0.0.1 clicks2.oxcash.com
127.0.0.1 popup.oxcash.com
127.0.0.1 track.oxcash.com
127.0.0.1 paycounter.com
127.0.0.1 count.paycounter.com #[Restricted Zone site]
127.0.0.1 images1.paycounter.com
127.0.0.1 in.paycounter.com
127.0.0.1 stats.paycounter.com
127.0.0.1 www.paycounter.com
127.0.0.1 pinkcount.com
127.0.0.1 www.pinkcount.com
127.0.0.1 www.pinkyellow.com
127.0.0.1 banners.playboystore.com
127.0.0.1 www.pornmail.com #[CrackedEarth]
127.0.0.1 c.porngraph.com
127.0.0.1 pornosite.com #[Downloader.Dluca.H]
127.0.0.1 pornography.com #[Downloader.Dluca.H][All-In-One Telcom]
127.0.0.1 prostol.com #[JS.Fortnight.B]
127.0.0.1 www.prostol.com
127.0.0.1 purebleep.com
127.0.0.1 ads.purebleep.com
127.0.0.1 stats1.pussypayments.com
127.0.0.1 banners.pythonvideo.com
127.0.0.1 banners2.pythonvideo.com
127.0.0.1 tracker.pythonvideo.com
127.0.0.1 www.pythonpays.com #[Restricted Zone site]
127.0.0.1 link.rawtocash.net #[JS_FORTNIGHT]
127.0.0.1 www.rawtocash.net
127.0.0.1 stream10k.redhotnetworks.com #[Video Class]
127.0.0.1 streamhc.redhotnetworks.com #[Video Class]
127.0.0.1 search-q.com #[Restricted Zone site]
127.0.0.1 www.search-q.com #[Adware.Searchq]
127.0.0.1 exit.sellyourexit.com
127.0.0.1 www.sellyourexit.com
127.0.0.1 ct.sexadnet.com
127.0.0.1 stats.sexcheck.com
127.0.0.1 hits.sexcites.com
127.0.0.1 adv.sexcounter.com
127.0.0.1 cs.sexcounter.com
127.0.0.1 www.sexhit.com
127.0.0.1 sexprovider.com #[BHO.clsUrlSearch][SubSearch]
127.0.0.1 members.sexroulette.com
127.0.0.1 sex-true.com #[xxxtoolbar.com\umaxsearch.com]
127.0.0.1 www.sex-true.com
127.0.0.1 ads.sexplanets.com
127.0.0.1 ads.sexspaces.com
127.0.0.1 sexswap.com
127.0.0.1 cgi.sexswap.com
127.0.0.1 cgi.sexswap2.com
127.0.0.1 cgi.sexswap2000.com
127.0.0.1 hestia.sextrail.com
127.0.0.1 codice.shinystat.it
127.0.0.1 link.siccash.com
127.0.0.1 www.silvercash.com
127.0.0.1 click.silvercash.com
127.0.0.1 exit.silvercash.com
127.0.0.1 stats.smartbucks.com
127.0.0.1 ds.starmedia.com
127.0.0.1 sexyque.com
127.0.0.1 www.sexyque.com #[Restricted Zone site]
127.0.0.1 stickylist.com
127.0.0.1 super-gals.com #[CHM exploit]
127.0.0.1 supersexpass.com
127.0.0.1 www.supersexpass.com #[Restricted Zone site]
127.0.0.1 lstat.susanin.com
127.0.0.1 teens3.com #[Trojan.Niska][Troj/Myss-C][pluginaccess.com]
127.0.0.1 more.teens3.com
127.0.0.1 pics.teens3.com
127.0.0.1 www.teens3.com
127.0.0.1 www.teocash.com #[W32.Hostidel.Trojan]
127.0.0.1 thehun.net #[Restricted Zone site]
127.0.0.1 www.thehun.net
127.0.0.1 thestas.com #[Downloader-OT]
127.0.0.1 stats.trafficasap.com
127.0.0.1 www.trafficstandard.com
127.0.0.1 trickys.com
127.0.0.1 banners.truecash.com
127.0.0.1 streaming.tv69.com
127.0.0.1 www.tv69.com #[JS/NoClose-G]
127.0.0.1 freecounter.unms.com
127.0.0.1 hit1.vioclicks.com
127.0.0.1 view1.vioclicks.com
127.0.0.1 www.vioclicks.com #[Restricted Zone site]
127.0.0.1 www.web-exit.com
127.0.0.1 free.wegcash.com #[Restricted Zone site]
127.0.0.1 programs.wegcash.com
127.0.0.1 ads.xbiz.com
127.0.0.1 xlocator.com
127.0.0.1 www.xlocator.com #[XLocator]
127.0.0.1 www.xsex.ws #[Troj/IEStart-F]
127.0.0.1 counter.xxxcool.com
127.0.0.1 www.xxx-exits.com
127.0.0.1 www.xxxposition.net #[Trojan.Hazzer]
127.0.0.1 benjamin.xww.de #[W32/Kazoa.B]
127.0.0.1 voyour-cams.xww.de #[W32.DSS.Trojan][KB810981]
127.0.0.1 www.anal-oral.net
127.0.0.1 xrenoder.com
127.0.0.1 cj.xrenoder.com
127.0.0.1 cons.xrenoder.com
127.0.0.1 search.xrenoder.com #[Search.Xrenoder]
127.0.0.1 scripts.xrenoder.com
127.0.0.1 www.xrenoder.com #[CWS.Bootconf]
127.0.0.1 xrenosearch.com
127.0.0.1 www.xrenosearch.com
127.0.0.1 www.z69.com
127.0.0.1 ziportal.com #[here4search.com]
127.0.0.1 www.ziportal.com
127.0.0.1 www.7days.ws #[Troj/IEStart-F]
127.0.0.1 700k.com #[Troj/IEStart-F]
127.0.0.1 www.700k.com
127.0.0.1 clicks.adultplex.com
127.0.0.1 images.adultplex.com
127.0.0.1 stats.adultplex.com
127.0.0.1 signup.adultplex.com
127.0.0.1 www.mythumbz.com
127.0.0.1 www.animetoolbar.com
127.0.0.1 authorizedsearchagents.com
127.0.0.1 www.asiantoolbar.com #[IEToolbarCab]
127.0.0.1 www.bdsmtoolbar.com
127.0.0.1 www.bigtitstoolbar.com
127.0.0.1 www.dailytoolbar.com
127.0.0.1 www.ebonytoolbar.com
127.0.0.1 ebtmarketing.com
127.0.0.1 www.ebtmarketing.com
127.0.0.1 www.fetishtoolbar.com
127.0.0.1 www.gayxxxtoolbar.com
127.0.0.1 www.hardcoretoolbar.com
127.0.0.1 www.lesbiantoolbar.com #[IEToolbarCab]
127.0.0.1 www.maturetoolbar.com
127.0.0.1 nichetoolbars.com
127.0.0.1 www.nichetoolbars.com
127.0.0.1 www.shemaletoolbar.com
127.0.0.1 www.twinktoolbar.com
127.0.0.1 www.topsearchdog.com #[Parasite.DailyToolbar]
127.0.0.1 ads.adultcash.com
127.0.0.1 home.adultcash.com
127.0.0.1 www.crazyprotocol.com
127.0.0.1 www.spidersearch.com #[home.adultcash.com]
127.0.0.1 traffichog.com #[Inst Class]
127.0.0.1 www.traffichog.com
127.0.0.1 cgi.sexlist.com
127.0.0.1 vis.sexlist.com
127.0.0.1 lobby.sexlist.com
127.0.0.1 xit.sexlist.com
127.0.0.1 thecounter.com
127.0.0.1 c1.thecounter.com
127.0.0.1 c2.thecounter.com
127.0.0.1 c3.thecounter.com
127.0.0.1 www.TheCounter.com
127.0.0.1 couldnotfind.com
127.0.0.1 www.couldnotfind.com
127.0.0.1 advertising.gammae.com
127.0.0.1 hourly.gammae.com
127.0.0.1 php.gammae.com
127.0.0.1 isearchtech.com
127.0.0.1 power-cleaner.com
127.0.0.1 www.power-cleaner.com
127.0.0.1 sidefind.com
127.0.0.1 www.sidefind.com
127.0.0.1 slotch.com #[TROJ_ISTBAR.B,K][ISTbar.Slotch]
127.0.0.1 adult.slotch.com
127.0.0.1 www.slotch.com
127.0.0.1 slotchbar.com #[Troj/IstBar-N]
127.0.0.1 www.slotchbar.com
127.0.0.1 toolbarcash.com #[Parasite.ISTbar]
127.0.0.1 xxxtoolbar.com
127.0.0.1 install.xxxtoolbar.com #[TROJ_ISTBAR.D,I]
127.0.0.1 www.xxxtoolbar.com
127.0.0.1 www.ysbweb.com #[Win32.Secdrop.AW][Installer Class]
127.0.0.1 amateur.xxxcounter.com
127.0.0.1 c1.xxxcounter.com
127.0.0.1 c2.xxxcounter.com
127.0.0.1 c3.xxxcounter.com
127.0.0.1 free.xxxcounter.com
127.0.0.1 grafix.xxxcounter.com
127.0.0.1 mature.xxxcounter.com
127.0.0.1 other.xxxcounter.com
127.0.0.1 rr1.xxxcounter.com
127.0.0.1 rr2.xxxcounter.com
127.0.0.1 rr3.xxxcounter.com
127.0.0.1 rr4.xxxcounter.com
127.0.0.1 rr5.xxxcounter.com
127.0.0.1 exit.xpays.com
127.0.0.1 www.xpays.com
127.0.0.1 adrevservice.com
127.0.0.1 adult.adrevservice.com
127.0.0.1 stats.adrevservice.com #[Linkzilla Control]
127.0.0.1 www.adrevservice.com
127.0.0.1 www.adultrevenueservice.com
127.0.0.1 clicktraq.mtree.com
127.0.0.1 dyntraq.mtree.com
127.0.0.1 mtree.com #[Parasite.MoneyTree]
127.0.0.1 mt1.mtree.com
127.0.0.1 mt2.mtree.com
127.0.0.1 mt19.mtree.com
127.0.0.1 mt20.mtree.com
127.0.0.1 mt21.mtree.com
127.0.0.1 mt22.mtree.com
127.0.0.1 mt23.mtree.com
127.0.0.1 mt31.mtree.com
127.0.0.1 mt32.mtree.com
127.0.0.1 mt33.mtree.com
127.0.0.1 mt34.mtree.com
127.0.0.1 mt37.mtree.com
127.0.0.1 mt44.mtree.com
127.0.0.1 mt78.mtree.com
127.0.0.1 mt90.mtree.com
127.0.0.1 mt94.mtree.com
127.0.0.1 mt111.mtree.com
127.0.0.1 mt112.mtree.com
127.0.0.1 mt113.mtree.com
127.0.0.1 mt123.mtree.com
127.0.0.1 porn.mtree.com
127.0.0.1 psy.mtree.com
127.0.0.1 ss.mtree.com
127.0.0.1 the.mtree.com
127.0.0.1 wm.mtree.com
127.0.0.1 xbs.mtree.com #[Downloader.Dyfica.N]
127.0.0.1 xbs.nyc.mtree.com #[MoneyTree Dialer]
127.0.0.1 xbs.pao.mtree.com #[MoneyTree Dialer]
127.0.0.1 xbs.sea.mtree.com #[MoneyTree Dialer]
127.0.0.1 mtreexxx.net
127.0.0.1 freelivesex.cf.mtreexxx.net
127.0.0.1 freeticketcash.cf.mtreexxx.net
127.0.0.1 join4free.cf.mtreexxx.net
127.0.0.1 image2000.mtreexxx.net
127.0.0.1 xxx.mtreexxx.net
127.0.0.1 www7.mtreexxx.net
127.0.0.1 www.mtreexxx.net
127.0.0.1 xbs.mtreexxx.nl #[Parasite.MoneyTree][MoneyTree Dialer]
127.0.0.1 www.mtreexxx.nl
127.0.0.1 banners.outster.com
127.0.0.1 c1.outster.com
127.0.0.1 c2.outster.com
127.0.0.1 links.outster.com
127.0.0.1 misc.outster.com
127.0.0.1 start.outster.com
127.0.0.1 stats.outster.com
127.0.0.1 aphrodite.porntrack.com
127.0.0.1 stats1.porntrack.com
127.0.0.1 stats3.porntrack.com
127.0.0.1 sextracker.com
127.0.0.1 the.sextracker.com
127.0.0.1 adserver.sextracker.com
127.0.0.1 banners.sextracker.com
127.0.0.1 cbird.sextracker.com
127.0.0.1 cbird6.sextracker.com
127.0.0.1 counter1.sextracker.com
127.0.0.1 counter2.sextracker.com
127.0.0.1 counter3.sextracker.com
127.0.0.1 counter4.sextracker.com
127.0.0.1 counter5.sextracker.com
127.0.0.1 counter6.sextracker.com
127.0.0.1 counter7.sextracker.com
127.0.0.1 counter8.sextracker.com
127.0.0.1 counter9.sextracker.com
127.0.0.1 counter10.sextracker.com
127.0.0.1 counter11.sextracker.com
127.0.0.1 counter12.sextracker.com
127.0.0.1 counter13.sextracker.com
127.0.0.1 counter14.sextracker.com
127.0.0.1 counter15.sextracker.com
127.0.0.1 counter16.sextracker.com
127.0.0.1 clit.sextracker.com
127.0.0.1 clit1.sextracker.com
127.0.0.1 clit2.sextracker.com
127.0.0.1 clit3.sextracker.com
127.0.0.1 clit4.sextracker.com
127.0.0.1 clit5.sextracker.com
127.0.0.1 clit6.sextracker.com
127.0.0.1 clit7.sextracker.com
127.0.0.1 clit8.sextracker.com
127.0.0.1 clit9.sextracker.com
127.0.0.1 clit10.sextracker.com
127.0.0.1 clit11.sextracker.com
127.0.0.1 clit12.sextracker.com
127.0.0.1 clit13.sextracker.com
127.0.0.1 clit14.sextracker.com
127.0.0.1 clit15.sextracker.com
127.0.0.1 graphics1.sextracker.com
127.0.0.1 graphics2.sextracker.com
127.0.0.1 hosting.sextracker.com
127.0.0.1 links.sextracker.com
127.0.0.1 mau.sextracker.com
127.0.0.1 stat1.sextracker.com
127.0.0.1 start.sextracker.com
127.0.0.1 stx.sextracker.com
127.0.0.1 stx1.sextracker.com
127.0.0.1 stx2.sextracker.com
127.0.0.1 stx3.sextracker.com
127.0.0.1 stx4.sextracker.com
127.0.0.1 stx5.sextracker.com
127.0.0.1 stx6.sextracker.com
127.0.0.1 stx7.sextracker.com
127.0.0.1 stx8.sextracker.com
127.0.0.1 stx9.sextracker.com
127.0.0.1 stx10.sextracker.com
127.0.0.1 stx11.sextracker.com
127.0.0.1 stx12.sextracker.com
127.0.0.1 stx13.sextracker.com
127.0.0.1 stx14.sextracker.com
127.0.0.1 stx15.sextracker.com
127.0.0.1 stxbans.sextracker.com
127.0.0.1 webmasters.sextracker.com
127.0.0.1 stx.banners.sextracker.com
127.0.0.1 wm.banners.sextracker.com
127.0.0.1 track.adultdialersolution.com
127.0.0.1 adultrevenueservice.com
127.0.0.1 counter.adultrevenueservice.com
127.0.0.1 stats.adultrevenueservice.com
127.0.0.1 banners.leadingedgecash.com
127.0.0.1 www.leadingedgecash.com
127.0.0.1 www.albiondrugs.com
127.0.0.1 adshooter.com
127.0.0.1 www.adshooter.com
127.0.0.1 www.customersupporthelp.com
127.0.0.1 www.searchforit.com #[Adware.Searchforit]

»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri

»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{82C7938B-B58A-463A-BC6A-896FF4C33B7C}: DhcpNameServer=24.25.5.150 24.25.5.149
HKLM\SYSTEM\CS1\Services\Tcpip\..\{82C7938B-B58A-463A-BC6A-896FF4C33B7C}: DhcpNameServer=24.25.5.150 24.25.5.149
HKLM\SYSTEM\CS2\Services\Tcpip\..\{82C7938B-B58A-463A-BC6A-896FF4C33B7C}: DhcpNameServer=24.25.5.150 24.25.5.149
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=24.25.5.150 24.25.5.149
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=24.25.5.150 24.25.5.149
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=24.25.5.150 24.25.5.149

»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files

»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""

»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{abef791f-947e-4cdf-83c3-e72a240afb67}"="frisbee"

[HKEY_CLASSES_ROOT\CLSID\{abef791f-947e-4cdf-83c3-e72a240afb67}\InProcServer32]
@="C:\WINDOWS\system32\ygjun.dll"

[HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{abef791f-947e-4cdf-83c3-e72a240afb67}\InProcServer32]
@="C:\WINDOWS\system32\ygjun.dll"

»»»»»»»»»»»»»»»»»»»»»»»» End

Sorry about the posts, but I couldn't get the report to fit into one post.

#9 RichieUK

Malware Assassin

Group: Malware Response Team
Posts: 13,612
Joined: 13-July 06

Posted 13 April 2007 - 09:26 AM

Download KillBox,unzip/extract it to your desktop.
http://download.bleepingcomputer.com/spyware/KillBox.zip
Start up Killbox and place a check in 'Delete on Reboot'.
In the 'Full path of file to delete' box,copy and paste:

C:\WINDOWS\system32\ygjun.dll

Then press the red button with the white cross.
It will then provide a window for you to confirm the delete.
Next it will ask if you now wish to reboot,select YES.
Allow it to reboot.
If it does'nt reboot automatically,reboot manually.

Post a new Hijackthis log into your next reply.
Let me know how your pc is running now please.

#10 Nekoyasha

Member

Group: Members
Posts: 31
Joined: 12-April 07
Location:Sumter SC, USA

Posted 13 April 2007 - 09:47 AM

Logfile of HijackThis v1.99.1
Scan saved at 10:42:41 AM, on 4/13/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
C:\Program Files\VentSrv\ventrilo_svc.exe
C:\Program Files\VentSrv\ventrilo_srv.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
C:\Program Files\Microsoft Windows OneCare Live\winss.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\WINDOWS\System32\hphmon05.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\WINDOWS\System32\igfxtray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
C:\Program Files\Motorola Wireless\WU830G USB Adapter\OdHost.exe
C:\Program Files\Motorola Wireless\WU830G USB Adapter\WLUSBCfg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Common Files\Real\Update_OB\rnathchk.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://us9.hpwis.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [HP Software Update] "c:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AutoTKit] C:\hp\bin\AUTOTKIT.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickFinder Scheduler] "c:\Program Files\WordPerfect Office 11\Programs\QFSCHD110.EXE"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\Hewlett-Packard\Digital Imaging\bin\backupnotify.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [RealPlayer] "C:\Program Files\Real\RealOne Player\realplay.exe" /RunUPGToolCommandReBoot
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Motorola Wireless USB Adapter.lnk = ?
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: OPXPGina - C:\Program Files\Softex\OmniPass\opxpgina.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv.exe
O23 - Service: Ventrilo - Unknown owner - C:\Program Files\VentSrv\ventrilo_svc.exe
O23 - Service: Windows Network Log Manage - Unknown owner - C:\Program Files\Common Files\Microsoft Shared\MSInfo\Network.exe

My computer is now running as normal. The so called "Windows Safety Alert" is now gone. Thank you for all of your help RichieUK.

#11 RichieUK

Malware Assassin

Group: Malware Response Team
Posts: 13,612
Joined: 13-July 06

Posted 13 April 2007 - 09:57 AM

Please run the F-Secure online virus/spyware scan using Internet Explorer:
http://support.f-secure.com/enu/home/ols.shtml
Follow the directions in the F-Secure page for proper Installation.
Accept the License Agreement.
Once the ActiveX installs,Click ‘Custom Scan’ and be sure the following are checked:
1.Scan whole System
2.Scan all files
3.Scan whole system for rootkits
4.Scan whole system for spyware
5.Scan inside archives
6.Use advanced heuristics
Once the download completes,the scan will begin automatically.
The scan will take some time to finish,so please be patient.
When the scan completes, click the ‘I want to decide item by item’ button.
For each item found,Select ‘Disinfect’ and click ‘Next’.
Click the ‘Show Report’ button,then copy and paste the entire report into your next reply.

#12 Nekoyasha

Member

Group: Members
Posts: 31
Joined: 12-April 07
Location:Sumter SC, USA

Posted 13 April 2007 - 10:56 AM

I believe the scan downloaded okay but every time I try to keep going I get a message saying "An error has occured! Please close the scanner and your browser, then try again. (Id:24)." I tried repeating this, but I get the same error even after closing all other windows. :thumbsup:

#13 RichieUK

Malware Assassin

Group: Malware Response Team
Posts: 13,612
Joined: 13-July 06

Posted 13 April 2007 - 11:53 AM

Ok,forget that then,please do the following:

Download HostsXpert 3.8:
http://www.funkytoad.com/download/HostsXpert.zip
1. Extract the zip file to your desktop or a permanent folder on your hard drive.
2. Open the folder and double-click on the Hoster.exe
3. Press "Restore Microsofts Original Hosts File"
4. Press "OK" and exit the program.

Go to:
C:\WINDOWS\System32\drivers\etc\HOSTS.
1) Right-click on the HOSTS file
2) Click Properties
3) You will see a window open,look at the bottom of the window.To the right of Attributes,check the box that says 'Read-only'.
4) Click Apply/OK.

***************************

If all's ok,please do the following:

Click on Start/All Programs/Accessories/System Tools/System Restore.
In the 'System Restore' window,click on the 'Create a Restore Point' button,then click 'Next'.
In the window that appears,enter a description\name for the Restore Point,then click on 'Create',wait,then click 'Close'.
The date and time will be created automatically.

Next click on Start/All Programs/Accessories/System Tools/Disk Cleanup.
The 'Select Drive' box will appear,click on Ok.
The 'Disk Cleanup for [C:]' box will appear,click on the 'More Options' tab.
At the bottom in the 'System Restore' window,click on the 'Clean up...' button.
A box will pop up 'Are you sure you want to delete all but the most recent restore point?',click on 'Yes'.
Click on 'Yes' at 'Are you sure you want to perform these actions?'.
Now wait until 'Disk Cleanup' finishes and the box disappears.

Read through the information found here,to help you prevent any possible future infections.
'How to prevent Malware' by miekiemoes:
http://users.telenet.be/bluepatchy/miekiem...prevention.html

Please Note:
Your version of Sun Java is out of date.
Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older versions of Sun Java,and then update.
1. Download the latest version of Java Runtime Environment (JRE)
2. Scroll down to where it says 'Java Runtime Environment (JRE) 6u1'.
3. Click the "Download" button to the right.
4. Check the box that says: "Accept License Agreement".
5. The page will refresh.
6. Click on the link to download 'Windows Offline Installation, Multi-language' and save to your desktop.
7. Close any programs you may have running - especially your web browser.
8. Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
9. Check any item with Java Runtime Environment (JRE or J2SE) in the name.
10. Click the Change/Remove button.
11. Repeat as many times as necessary to remove each Java versions.
12. Reboot your computer once all Java components are removed.
13. Then from your desktop double-click on jre-6u1-windows-i586-p.exe to install the newest version.

#14 Nekoyasha

Member

Group: Members
Posts: 31
Joined: 12-April 07
Location:Sumter SC, USA

Posted 13 April 2007 - 01:13 PM

Thanks, everything seems to be running back to what my computer will consider normal. Thanks again for your help with my problem.

#15 RichieUK

Malware Assassin

Group: Malware Response Team
Posts: 13,612
Joined: 13-July 06

Posted 13 April 2007 - 02:25 PM

You're most welcome Nekoyasha :thumbsup:

Since your problem appears to be resolved, this thread will now be closed.
If you need this topic reopened, please contact a member of the HJT Team and we will reopen it for you. Include the address of this thread in your request. If you should have a new issue, please start a new topic. This applies only to the original topic starter.
Everyone else please begin a New Topic.