Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Multiple Spyware Infections


  • This topic is locked This topic is locked
13 replies to this topic

#1 builder2818

builder2818

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:02:43 PM

Posted 25 February 2007 - 05:34 AM

I need some help. Normally when I receive some form of spyware I am able to eliminate it with the help of websites like these. However, today I am left stuck. I have about 3 main viruses that I cannot remove. One is known as winAntivirus, the other is UltimateDefender and another one is some form of advertising called outerinfo.

I have tried all the obvious attempts at removing these such as add or remove programs and antispyware programs such as spy sweeper, AD aware SE personal, spybot and spyware doctor. While these all came up with viruses that i deleted I still have an annoying icon which is a red circle with a yellow exclamation point in the system tray that tells me that my computer may be infected. Also I get a window pop up telling me my computer is infected "click next to run a scan". I also have annoying pop up advertising and my computer is running ridiculously slow.

Here is my HiJack this log:

Logfile of HijackThis v1.99.1
Scan saved at 9:23:44 PM, on 25/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\WinAntiSpyware 2006\was6cw.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HijackThis\HijackThis.exe

R3 - URLSearchHook: (no name) - - (no file)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll (file missing)
O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] "C:\PROGRA~1\SYMNET~1\SNDMon.exe" /Consumer
O4 - HKLM\..\Run: [EPSON PictureMate 500] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9TE.EXE /P21 "EPSON PictureMate 500" /O6 "USB002" /M "PictureMate 500"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k
O4 - HKLM\..\Run: [was6cw] "C:\Program Files\Common Files\WinAntiSpyware 2006\was6cw.exe" -c
O4 - HKLM\..\Run: [omynywh.dll] "C:\WINDOWS\system32\rundll32.exe" "C:\Documents and Settings\User\Local Settings\Application Data\omynywh.dll",huvlsrd
O4 - HKLM\..\Run: [SNM] C:\Program Files\SpyNoMore\SNM.exe /startup
O4 - HKLM\..\Run: [gthfjmd.dll] "C:\WINDOWS\system32\rundll32.exe" "C:\Documents and Settings\User\Local Settings\Application Data\gthfjmd.dll",egdbnre
O4 - HKLM\..\Run: [CTDrive] "rundll32.exe" C:\WINDOWS\system32\drvnew.dll,startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] "C:\Program Files\Windows Media Player\WMPNSCFG.exe"
O4 - Startup: .protected
O4 - Global Startup: .protected
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Secreset.lnk = C:\WINDOWS\system32\config\secreset.bat
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by106fd.bay106.hotmail.msn.com/resources/MsnPUpld.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

Any help would be appreciated.

BC AdBot (Login to Remove)

 


m

#2 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:04:43 AM

Posted 25 February 2007 - 05:56 AM

Hello,
It's a pity to see that you are using a pirated version of XP. You won't be able to update so your system stays vulnerable.
In such cases malware will always reinstall again. No wonder that your system is so terribly infected.

Problem with these infections nowadays is, it causes a lot of damage. Even if we clean the malware off your system, I can't guarantee that your system will be clean afterwards, because these infections/bundles leave a lot of leftovers behind that most scanners won't even recognise and logs won't show.
Also, I can't promise you we can repair all the damage it caused... Even after cleaning the malware, you can still get errors afterwards because of the damage. Solving these is not always possible since it will be searching for a needle in a haystack to find the right cause and solution.
So, we can try to clean this up and do what we can, but keep in mind that we can't solve ALL problems this malware already caused.

It is important you don't miss a step and perform everything in the right order!!

* Go to start > controlpanel > software > add/remove programs and uninstall next programs if present:

WinAntiSpyware 2006
DriveCleaner


Reboot afterwards. Important!

* Please download VundoFix.exe to your C:\.
  • Double-click VundoFix.exe to run it.
  • Click the Scan for Vundo button.
  • Once it's done scanning, click the Remove Vundo button.
  • You will receive a prompt asking if you want to remove the files, click YES
  • Once you click yes, your desktop will go blank as it starts removing Vundo.
  • When completed, it will prompt that it will shutdown your computer, click OK.
  • Turn your computer back on.
Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button." when VundoFix appears at reboot.

---------------------

* Please download SmitfraudFix (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.
Don't use it yet.

---------------------

Please download, install, and update AVG Anti-Spyware
  • Load AVG Anti-Spyware and then click the Update tab at the top. Under Manual Update click Start update.
  • After the update finishes (the status bar at the bottom will display "Update successful")
  • Close AVG Anti-Spyware. Do not run it yet.
-------------------------

* Reboot into Safe Mode`: ( without networking support !)
°To get into the Safe mode as the computer is booting press and hold your "F8 Key". Use your arrow keys to move to "Safe Mode" and press your Enter key.

* Start HijackThis, close all open windows leaving only HijackThis running. Place a check against each of the following if still present (some entries won't be present anymore):

R3 - URLSearchHook: (no name) - - (no file)
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll (file missing)
O4 - HKLM\..\Run: [KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k
O4 - HKLM\..\Run: [was6cw] "C:\Program Files\Common Files\WinAntiSpyware 2006\was6cw.exe" -c
O4 - HKLM\..\Run: [omynywh.dll] "C:\WINDOWS\system32\rundll32.exe" "C:\Documents and Settings\User\Local Settings\Application Data\omynywh.dll",huvlsrd
O4 - HKLM\..\Run: [gthfjmd.dll] "C:\WINDOWS\system32\rundll32.exe" "C:\Documents and Settings\User\Local Settings\Application Data\gthfjmd.dll",egdbnre
O4 - HKLM\..\Run: [CTDrive] "rundll32.exe" C:\WINDOWS\system32\drvnew.dll,startup
O4 - Startup: .protected
O4 - Global Startup: .protected


* Click on Fix Checked when finished and exit HijackThis.
Make sure your Internet Explorer is closed when you click Fix Checked!
Don't worry if some entries won't go away, we'll deal with that later...

-------------------------
  • load AVG Anti-Spyware and click on the Scanner tab at the top. Click the "Settings" tab and then change the recommended action to Quarantine and click Automatically generate report after every scan. Click back to the "Scan" tab and then click on Complete System Scan. This scan can take quite a while to run, so be prepared.
  • AVG Anti-Spyware will list any infections found on the left hand side. When the scan has finished, it will automatically set the recommended action. Click the Apply all actions button. AVG Anti-Spyware will display "All actions have been applied" on the right hand side.
  • Click on "Save Report", then "Save Report As". This will create a text file. Make sure you know where to find this file again (like on the Desktop).
  • Close AVG Anti-Spyware.
-------------------------

* Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

(Warning : running option #2 on a non infected computer will remove your Desktop background and set it blank again. But you can reapply your desktop background again afterwards

You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".

The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.
A text file will appear onscreen, with results from the cleaning process. I need that log later.

---------------------------------

* Download ComboScan to your Desktop.
  • Close all applications and windows.
  • Double-click on comboscan.exe to run it, and follow the prompts.
  • The scan may take a minute. When the scan is complete, a text file will open - ComboScan.txt
Extra Note: When running Comboscan, some firewalls may warn that sigcheck.exe is trying to access the internet - please ensure that you allow sigcheck.exe permission to do so. Also, it may happen that your Antivirus flags Comboscan as suspicious. Please allow the Comboscan to run and don't let your Antivirus delete it. (In this case, it may be better to temporary disable your Antivirus)

Post next logs in your following reply:
  • Log from Comboscan (Comboscan.txt)
  • Log from Vundofix (vundofix.txt)
  • Log from AVG Antispyware
  • Log from Smitfraudfix (rapport.txt)
You may need several replies to post the logs in case they won't fit in one reply.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#3 builder2818

builder2818
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:02:43 PM

Posted 26 February 2007 - 05:35 AM

Hello, thanks for taking the time to look into my problems. Here is the list of things you asked for:
my comboscan log txt file :

ComboScan v20070221.16 run by User on 2007-02-26 at 21:17:52
Computer is in Normal Mode.
--------------------------------------------------------------------------------

Successfully created restore point.
Performed disk cleanup.


-- HijackThis (run as User.exe) -------------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 9:19:19 PM, on 26/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe
C:\Documents and Settings\User\Desktop\comboscan.exe
C:\Program Files\HijackThis\User.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1859A5B4-7811-4FE1-B557-740A480AA83C} - C:\WINDOWS\system32\oppnn.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: (no name) - {614FF1F1-34E1-458B-9D26-9E9870BF3FCD} - C:\WINDOWS\system32\byvwv.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll (file missing)
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {E03C740E-BB24-4d3c-B92A-6F84DE1DD99C} - C:\WINDOWS\system32\uuwldpoc.dll (file missing)
O2 - BHO: (no name) - {ED72B5A7-562D-4639-93A0-45CE3643CF0D} - C:\WINDOWS\system32\yayvstu.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] "C:\PROGRA~1\SYMNET~1\SNDMon.exe" /Consumer
O4 - HKLM\..\Run: [EPSON PictureMate 500] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9TE.EXE /P21 "EPSON PictureMate 500" /O6 "USB002" /M "PictureMate 500"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SNM] C:\Program Files\SpyNoMore\SNM.exe /startup
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] "C:\Program Files\Windows Media Player\WMPNSCFG.exe"
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Secreset.lnk = C:\WINDOWS\system32\config\secreset.bat
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by106fd.bay106.hotmail.msn.com/resources/MsnPUpld.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: byvwv - C:\WINDOWS\system32\byvwv.dll (file missing)
O20 - Winlogon Notify: oppnn - C:\WINDOWS\system32\oppnn.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O20 - Winlogon Notify: winzjc32 - winzjc32.dll (file missing)
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O20 - Winlogon Notify: yayvstu - yayvstu.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe


-- HijackThis Fixed Entries (C:\Program Files\HijackThis\backups\) --------------

backup-20070226-160904-191 O4 - HKLM\..\Run: [KernelFaultCheck] C:\WINDOWS\system32\dumprep 0 -k
backup-20070226-160904-281 O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll (file missing)
backup-20070226-160904-294 O4 - HKLM\..\Run: [omynywh.dll] "C:\WINDOWS\system32\rundll32.exe" "C:\Documents and Settings\User\Local Settings\Application Data\omynywh.dll",huvlsrd
backup-20070226-160904-501 O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
backup-20070226-160904-584 R3 - URLSearchHook: (no name) - - (no file)
backup-20070226-160904-710 O4 - Global Startup: .protected
backup-20070226-160904-828 O4 - HKLM\..\Run: [was6cw] "C:\Program Files\Common Files\WinAntiSpyware 2006\was6cw.exe" -c
backup-20070226-160904-956 O4 - Startup: .protected
backup-20070226-160904-962 O4 - HKLM\..\Run: [gthfjmd.dll] "C:\WINDOWS\system32\rundll32.exe" "C:\Documents and Settings\User\Local Settings\Application Data\gthfjmd.dll",egdbnre

-- File Associations ------------------------------------------------------------

.bat - batfile - "%1" %*
.chm - chm.file - "C:\WINDOWS\hh.exe" %1
.cmd - cmdfile - "%1" %*
.com - comfile - "%1" %*
.exe - exefile - "%1" %*
.hlp - hlpfile - %SystemRoot%\System32\winhlp32.exe %1
.inf - inffile - %SystemRoot%\System32\NOTEPAD.EXE %1
.ini - inifile - %SystemRoot%\System32\NOTEPAD.EXE %1
.js - JSFile - %SystemRoot%\System32\WScript.exe "%1" %*
.lnk - lnkfile - {00021401-0000-0000-C000-000000000046}
.pif - piffile - "%1" %*
.reg - regfile - regedit.exe "%1"
.scr - scrfile - "%1" /S
.txt - txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1
.vbs - VBSFile - %SystemRoot%\System32\WScript.exe "%1" %*


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ----------------------

1R AFS2K - C:\WINDOWS\system32\drivers\AFS2K.SYS
3R aliadwdm (ALi Audio Accelerator WDM driver) - C:\WINDOWS\system32\drivers\ac97ali.sys
3R ALiIRDA (ALi Infrared Device Driver) - C:\WINDOWS\system32\drivers\alifir.sys
3S Arp1394 (1394 ARP Client Protocol) - C:\WINDOWS\system32\drivers\arp1394.sys
3R ati2mtag - C:\WINDOWS\system32\drivers\ati2mtag.sys
1R AVG Anti-Spyware Driver - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys
1R AvgAsCln (AVG Anti-Spyware Clean Driver) - C:\WINDOWS\system32\drivers\AvgAsCln.sys
3S basic2 - C:\WINDOWS\system32\drivers\HSF_BSC2.sys
3S CCDECODE (Closed Caption Decoder) - C:\WINDOWS\system32\drivers\CCDECODE.sys
2R Fallback - C:\WINDOWS\system32\drivers\HSF_FALL.sys
2R Fsks - C:\WINDOWS\system32\drivers\HSF_FSKS.sys
3S GEARAspiWDM (GEAR CDRom Filter) - C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
3S HidUsb (Microsoft HID Class Driver) - C:\WINDOWS\system32\drivers\hidusb.sys
3S HPZid412 (IEEE-1284.4 Driver HPZid412) - C:\WINDOWS\system32\drivers\hpzid412.sys
3S HPZipr12 (Print Class Driver for IEEE-1284.4 HPZipr12) - C:\WINDOWS\system32\drivers\HPZipr12.sys
3S HPZius12 (USB to IEEE-1284.4 Translation Driver HPZius12) - C:\WINDOWS\system32\drivers\HPZius12.sys
3R HSFHWBS2 - C:\WINDOWS\system32\drivers\hsfbs2s2.sys
3R HSF_DP - C:\WINDOWS\system32\drivers\hsfdpsp2.sys
3S hsf_msft - C:\WINDOWS\system32\drivers\HSF_MSFT.sys
1R ikhfile (File Security Kernel Anti-Spyware Driver) - C:\WINDOWS\system32\drivers\ikhfile.sys
1R ikhlayer (Kernel Anti-Spyware Driver) - C:\WINDOWS\system32\drivers\ikhlayer.sys
1R intelppm (Intel Processor Driver) - C:\WINDOWS\system32\drivers\intelppm.sys
2R irda (IrDA Protocol) - C:\WINDOWS\system32\drivers\irda.sys
2R K56 - C:\WINDOWS\system32\drivers\HSF_K56K.sys
2R mdmxsdk - C:\WINDOWS\system32\drivers\mdmxsdk.sys
3S mouhid (Mouse HID Driver) - C:\WINDOWS\system32\drivers\mouhid.sys
3S MSIRCOMM (Microsoft IR Communications Driver) - C:\WINDOWS\system32\drivers\MSIRCOMM.sys
3S MSTEE (Microsoft Streaming Tee/Sink-to-Sink Converter) - C:\WINDOWS\system32\drivers\MSTEE.sys
3S NABTSFEC (NABTS/FEC VBI Codec) - C:\WINDOWS\system32\drivers\NABTSFEC.sys
3R NAVENG - C:\Program Files\Common Files\Symantec Shared\VirusDefs\20061206.016\NAVENG.SYS
3R NAVEX15 - C:\Program Files\Common Files\Symantec Shared\VirusDefs\20061206.016\NAVEX15.SYS
3S NdisIP (Microsoft TV/Video Connection) - C:\WINDOWS\system32\drivers\NdisIP.sys
3S NIC1394 (1394 Net Driver) - C:\WINDOWS\system32\drivers\nic1394.sys
0R ohci1394 (Texas Instruments OHCI Compliant IEEE 1394 Host Controller) - C:\WINDOWS\system32\drivers\ohci1394.sys
2R pmem - C:\WINDOWS\system32\drivers\pmemnt.sys
3R Rasirda (WAN Miniport (IrDA)) - C:\WINDOWS\system32\drivers\rasirda.sys
3S Rksample - C:\WINDOWS\system32\drivers\HSF_SAMP.sys
3R rtl8139 (Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver) - C:\WINDOWS\system32\drivers\rtl8139.sys
3R SAVRT - C:\WINDOWS\system32\drivers\SAVRT.SYS
2R SAVRTPEL - C:\WINDOWS\system32\drivers\SAVRTPEL.SYS
3S SLIP (BDA Slip De-Framer) - C:\WINDOWS\system32\drivers\SLIP.sys
2R SoftFax - C:\WINDOWS\system32\drivers\HSF_FAXX.sys
0R SSFS0509 (Spy Sweeper File System Filer Driver: 0509) - C:\WINDOWS\system32\drivers\SSFS0509.sys
0R SSHRMD (Spy Sweeper Hookrack MiniDriver) - C:\WINDOWS\system32\drivers\sshrmd.sys
0R SSIDRV (Spy Sweeper Interdiction Driver) - C:\WINDOWS\system32\drivers\ssidrv.sys
3R SSKBFD (Webroot Spy Sweeper Keylogger Shield Keyboard Filter) - C:\WINDOWS\system32\drivers\sskbfd.sys
3S streamip (BDA IPSink) - C:\WINDOWS\system32\drivers\StreamIP.sys
3R SymEvent - C:\Program Files\Symantec\SYMEVENT.SYS
3R SYMREDRV - C:\WINDOWS\system32\drivers\symredrv.sys
1R SYMTDI - C:\WINDOWS\system32\drivers\symtdi.sys
3R SynTP (Synaptics TouchPad Driver) - C:\WINDOWS\system32\drivers\SynTP.sys
2R Tones - C:\WINDOWS\system32\drivers\HSF_TONE.sys
3S usbaudio (USB Audio Driver (WDM)) - C:\WINDOWS\system32\drivers\USBAUDIO.sys
3S usbccgp (Microsoft USB Generic Parent Driver) - C:\WINDOWS\system32\drivers\usbccgp.sys
3R usbehci (Microsoft USB 2.0 Enhanced Host Controller Miniport Driver) - C:\WINDOWS\system32\drivers\usbehci.sys
3R usbohci (Microsoft USB Open Host Controller Miniport Driver) - C:\WINDOWS\system32\drivers\usbohci.sys
3S usbprint (Microsoft USB PRINTER Class) - C:\WINDOWS\system32\drivers\usbprint.sys
3S usbscan (USB Scanner Driver) - C:\WINDOWS\system32\drivers\usbscan.sys
3S USBSTOR (USB Mass Storage Driver) - C:\WINDOWS\system32\drivers\USBSTOR.SYS
3S usbvideo (USB Video Device (WDM)) - C:\WINDOWS\system32\drivers\usbvideo.sys
2R V124 - C:\WINDOWS\system32\drivers\HSF_V124.sys
3R winachsf - C:\WINDOWS\system32\drivers\hsfcxts2.sys
3S WSTCODEC (World Standard Teletext Codec) - C:\WINDOWS\system32\drivers\WSTCODEC.SYS
3S WudfPf (Windows Driver Foundation - User-mode Driver Framework Platform Driver) - C:\WINDOWS\system32\drivers\WudfPf.sys
3S WudfRd (Windows Driver Foundation - User-mode Driver Framework Reflector) - C:\WINDOWS\system32\drivers\WudfRd.sys


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

3S Adobe LM Service - "C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"
4S Alerter - C:\WINDOWS\System32\svchost.exe -k LocalService
3R ALG (Application Layer Gateway Service) - C:\WINDOWS\System32\alg.exe
3S AppMgmt (Application Management) - C:\WINDOWS\system32\svchost.exe -k netsvcs
2R AudioSrv (Windows Audio) - C:\WINDOWS\System32\svchost.exe -k netsvcs
2R AVG Anti-Spyware Guard - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
2R BITS (Background Intelligent Transfer Service) - C:\WINDOWS\System32\svchost.exe -k netsvcs
2S Browser (Computer Browser) - C:\WINDOWS\System32\svchost.exe -k netsvcs
2R ccEvtMgr (Symantec Event Manager) - "C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
3S ccPwdSvc (Symantec Password Validation Service) - "C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe"
3S CiSvc (Indexing Service) - C:\WINDOWS\system32\cisvc.exe
4S ClipSrv (ClipBook) - C:\WINDOWS\system32\clipsrv.exe
3S COMSysApp (COM+ System Application) - C:\WINDOWS\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
2R CryptSvc (Cryptographic Services) - C:\WINDOWS\system32\svchost.exe -k netsvcs
2R DcomLaunch (DCOM Server Process Launcher) - C:\WINDOWS\system32\svchost -k DcomLaunch
2R Dhcp (DHCP Client) - C:\WINDOWS\System32\svchost.exe -k netsvcs
3S dmadmin (Logical Disk Manager Administrative Service) - C:\WINDOWS\System32\dmadmin.exe /com
2R dmserver (Logical Disk Manager) - C:\WINDOWS\System32\svchost.exe -k netsvcs
2R Dnscache (DNS Client) - C:\WINDOWS\System32\svchost.exe -k NetworkService
4S ERSvc (Error Reporting Service) - C:\WINDOWS\System32\svchost.exe -k netsvcs
2R Eventlog (Event Log) - C:\WINDOWS\system32\services.exe
3R EventSystem (COM+ Event System) - C:\WINDOWS\System32\svchost.exe -k netsvcs
3R FastUserSwitchingCompatibility (Fast User Switching Compatibility) - C:\WINDOWS\System32\svchost.exe -k netsvcs
2R helpsvc (Help and Support) - C:\WINDOWS\System32\svchost.exe -k netsvcs
4S HidServ (Human Interface Device Access) - C:\WINDOWS\System32\svchost.exe -k netsvcs
3R HTTPFilter (HTTP SSL) - C:\WINDOWS\System32\svchost.exe -k HTTPFilter
3S IDriverT (InstallDriver Table Manager) - "C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe"
3S ImapiService (IMAPI CD-Burning COM Service) - C:\WINDOWS\System32\imapi.exe
3R iPodService - C:\Program Files\iPod\bin\iPodService.exe
2R Irmon (Infrared Monitor) - C:\WINDOWS\System32\svchost.exe -k netsvcs
2R lanmanserver (Server) - C:\WINDOWS\System32\svchost.exe -k netsvcs
2R lanmanworkstation (Workstation) - C:\WINDOWS\System32\svchost.exe -k netsvcs
2R LmHosts (TCP/IP NetBIOS Helper) - C:\WINDOWS\System32\svchost.exe -k LocalService
4S Messenger - C:\WINDOWS\System32\svchost.exe -k netsvcs
3S mnmsrvc (NetMeeting Remote Desktop Sharing) - C:\WINDOWS\System32\mnmsrvc.exe
3S MSDTC (Distributed Transaction Coordinator) - C:\WINDOWS\System32\msdtc.exe
3S MSIServer (Windows Installer) - C:\WINDOWS\system32\msiexec.exe /V
2R navapsvc (Norton AntiVirus Auto Protect Service) - "C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe"
4S NetDDE (Network DDE) - C:\WINDOWS\system32\netdde.exe
4S NetDDEdsdm (Network DDE DSDM) - C:\WINDOWS\system32\netdde.exe
3S Netlogon (Net Logon) - C:\WINDOWS\System32\lsass.exe
3R Netman (Network Connections) - C:\WINDOWS\System32\svchost.exe -k netsvcs
3R Nla (Network Location Awareness (NLA)) - C:\WINDOWS\System32\svchost.exe -k netsvcs
3S NtLmSsp (NT LM Security Support Provider) - C:\WINDOWS\System32\lsass.exe
3S NtmsSvc (Removable Storage) - C:\WINDOWS\system32\svchost.exe -k netsvcs
3S ose (Office Source Engine) - "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
2R PlugPlay (Plug and Play) - C:\WINDOWS\system32\services.exe
3S Pml Driver HPZ12 - C:\WINDOWS\system32\HPZipm12.exe
2R PolicyAgent (IPSEC Services) - C:\WINDOWS\System32\lsass.exe
2R ProtectedStorage (Protected Storage) - C:\WINDOWS\system32\lsass.exe
3S RasAuto (Remote Access Auto Connection Manager) - C:\WINDOWS\System32\svchost.exe -k netsvcs
3R RasMan (Remote Access Connection Manager) - C:\WINDOWS\System32\svchost.exe -k netsvcs
3S RDSessMgr (Remote Desktop Help Session Manager) - C:\WINDOWS\system32\sessmgr.exe
4S RemoteAccess (Routing and Remote Access) - C:\WINDOWS\System32\svchost.exe -k netsvcs
2R RemoteRegistry (Remote Registry) - C:\WINDOWS\system32\svchost.exe -k LocalService
3S RpcLocator (Remote Procedure Call (RPC) Locator) - C:\WINDOWS\System32\locator.exe
2R RpcSs (Remote Procedure Call (RPC)) - C:\WINDOWS\system32\svchost -k rpcss
3S RSVP (QoS RSVP) - C:\WINDOWS\System32\rsvp.exe
2R SamSs (Security Accounts Manager) - C:\WINDOWS\system32\lsass.exe
2S SBService (ScriptBlocking Service) - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
3S SCardSvr (Smart Card) - C:\WINDOWS\System32\SCardSvr.exe
2R Schedule (Task Scheduler) - C:\WINDOWS\System32\svchost.exe -k netsvcs
2R SDhelper (PC Tools Spyware Doctor) - C:\Program Files\Spyware Doctor\sdhelp.exe
2R seclogon (Secondary Logon) - C:\WINDOWS\System32\svchost.exe -k netsvcs
2R SENS (System Event Notification) - C:\WINDOWS\system32\svchost.exe -k netsvcs
2R SharedAccess (Windows Firewall/Internet Connection Sharing (ICS)) - C:\WINDOWS\System32\svchost.exe -k netsvcs
2R ShellHWDetection (Shell Hardware Detection) - C:\WINDOWS\System32\svchost.exe -k netsvcs
3S SNDSrvc (Symantec Network Drivers Service) - "C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"
2R Spooler (Print Spooler) - C:\WINDOWS\system32\spoolsv.exe
2R srservice (System Restore Service) - C:\WINDOWS\System32\svchost.exe -k netsvcs
3R SSDPSRV (SSDP Discovery Service) - C:\WINDOWS\System32\svchost.exe -k LocalService
2R stisvc (Windows Image Acquisition (WIA)) - C:\WINDOWS\System32\svchost.exe -k imgsvc
3S SwPrv (MS Software Shadow Copy Provider) - C:\WINDOWS\System32\dllhost.exe /Processid:{74F53555-4EB1-459F-956B-A4FDAA5D7AF7}
2R SymWSC (SymWMI Service) - "C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe"
3S SysmonLog (Performance Logs and Alerts) - C:\WINDOWS\system32\smlogsvc.exe
3R TapiSrv (Telephony) - C:\WINDOWS\System32\svchost.exe -k netsvcs
3R TermService (Terminal Services) - C:\WINDOWS\System32\svchost -k DComLaunch
2R Themes - C:\WINDOWS\System32\svchost.exe -k netsvcs
4S TlntSvr (Telnet) - C:\WINDOWS\System32\tlntsvr.exe
2R TrkWks (Distributed Link Tracking Client) - C:\WINDOWS\system32\svchost.exe -k netsvcs
4S upnphost (Universal Plug and Play Device Host) - C:\WINDOWS\System32\svchost.exe -k LocalService
3S UPS (Uninterruptible Power Supply) - C:\WINDOWS\System32\ups.exe
3S VSS (Volume Shadow Copy) - C:\WINDOWS\System32\vssvc.exe
2R W32Time (Windows Time) - C:\WINDOWS\System32\svchost.exe -k netsvcs
2R WebClient - C:\WINDOWS\System32\svchost.exe -k LocalService
2S WebrootSpySweeperService (Webroot Spy Sweeper Engine) - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
2R winmgmt (Windows Management Instrumentation) - C:\WINDOWS\system32\svchost.exe -k netsvcs
3S WmdmPmSN (Portable Media Serial Number Service) - C:\WINDOWS\System32\svchost.exe -k netsvcs
3S Wmi (Windows Management Instrumentation Driver Extensions) - C:\WINDOWS\System32\svchost.exe -k netsvcs
3S WmiApSrv (WMI Performance Adapter) - C:\WINDOWS\System32\wbem\wmiapsrv.exe
2S WMPNetworkSvc (Windows Media Player Network Sharing Service) - "C:\Program Files\Windows Media Player\WMPNetwk.exe"
2R wscsvc (Security Center) - C:\WINDOWS\System32\svchost.exe -k netsvcs
2R wuauserv (Automatic Updates) - C:\WINDOWS\system32\svchost.exe -k netsvcs
3S WudfSvc (Windows Driver Foundation - User-mode Driver Framework) - C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
2R WZCSVC (Wireless Zero Configuration) - C:\WINDOWS\System32\svchost.exe -k netsvcs
3S xmlprov (Network Provisioning Service) - C:\WINDOWS\System32\svchost.exe -k netsvcs


-- Scheduled Tasks --------------------------------------------------------------

2007-02-26 21:18:50 410 --a------ C:\WINDOWS\Tasks\Symantec NetDetect.job<SYMANT~1.JOB>
2007-02-26 02:00:49 1376 --a------ C:\WINDOWS\Tasks\wrSpySweeperTrialSweep.job<WRSPYS~1.JOB>
2007-02-23 20:00:57 480 --a------ C:\WINDOWS\Tasks\Norton AntiVirus - Scan my computer.job<NORTON~2.JOB>
2007-02-16 17:30:06 278 --a------ C:\WINDOWS\Tasks\Norton SystemWorks One Button Checkup.job<NORTON~1.JOB>
2006-09-04 17:25:26 340 --a------ C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1149229448.job<FRUTAS~1.JOB>


-- Files created between 2007-01-26 and 2007-02-26 ------------------------------

2007-02-26 20:49:18 2752 --a------ C:\WINDOWS\system32\tmp.reg
2007-02-26 16:00:03 0 d-------- C:\Documents and Settings\NetworkService\Application Data\Webroot
2007-02-26 15:50:54 3968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-02-26 15:50:36 0 d-------- C:\Program Files\Grisoft
2007-02-26 15:44:07 24576 --a------ C:\WINDOWS\system32\VundoFixSVC.exe<VUNDOF~1.EXE>
2007-02-26 15:25:45 0 d-------- C:\VundoFix Backups<VUNDOF~1>
2007-02-25 23:50:34 92160 --a------ C:\VundoFix.exe
2007-02-25 23:41:55 81920 --a------ C:\WINDOWS\system32\dwahimg.dll
2007-02-25 22:49:04 0 d-------- C:\Program Files\Common Files\??sks
2007-02-25 22:47:55 81408 --a------ C:\WINDOWS\system32\zqgndnb.dll
2007-02-25 19:05:12 0 d-------- C:\Program Files\HijackThis<HIJACK~1>
2007-02-25 18:51:09 0 d-------- C:\Documents and Settings\LocalService\Application Data\Webroot
2007-02-25 18:50:58 144448 --a------ C:\WINDOWS\system32\drivers\ssidrv.sys
2007-02-25 18:50:58 20544 --a------ C:\WINDOWS\system32\drivers\SSFS0509.sys
2007-02-25 18:50:57 21056 --a------ C:\WINDOWS\system32\drivers\sskbfd.sys
2007-02-25 18:50:57 22080 --a------ C:\WINDOWS\system32\drivers\sshrmd.sys
2007-02-25 18:50:07 0 d-------- C:\Program Files\Webroot
2007-02-25 18:50:07 0 d-------- C:\Documents and Settings\All Users\Application Data\Webroot
2007-02-25 18:47:49 0 d-------- C:\Documents and Settings\User\Application Data\Webroot
2007-02-25 18:22:55 450406 ---hs---- C:\WINDOWS\system32\pqqss.bak1<PQQSS~1.BAK>
2007-02-25 17:59:17 0 d-------- C:\WINDOWS\system32\??stem32
2007-02-25 17:57:50 57856 --a------ C:\WINDOWS\system32\hfclzpf.dll
2007-02-25 17:57:36 81408 --a------ C:\WINDOWS\system32\gthfjmd.dll
2007-02-25 17:45:39 467487 ---hs---- C:\WINDOWS\system32\vwvyb.ini2<VWVYB~1.INI>
2007-02-25 17:31:24 0 d-------- C:\Documents and Settings\User\Application Data\WinAntiSpyware 2006<WINANT~1>
2007-02-25 16:53:12 1060864 --a------ C:\WINDOWS\system32\mfc71.dll
2007-02-25 16:53:12 89088 --a------ C:\WINDOWS\system32\atl71.dll
2007-02-25 16:11:09 1152 --a------ C:\WINDOWS\system32\windrv.sys
2007-02-25 16:10:34 0 d-------- C:\Program Files\Common Files\Download Manager<DOWNLO~1>
2007-02-25 15:47:09 0 d-------- C:\Program Files\?asks
2007-02-25 10:57:47 0 d-------- C:\Program Files\Cake Mania<CAKEMA~1>
2007-02-25 10:57:29 0 d-------- C:\Program Files\ReflexiveArcade<REFLEX~1>
2007-02-25 10:47:28 450366 ---hs---- C:\WINDOWS\system32\vwvyb.bak1<VWVYB~1.BAK>
2007-02-25 10:36:08 81408 --a------ C:\WINDOWS\system32\omynywh.dll
2007-02-25 10:36:08 57856 --a------ C:\WINDOWS\system32\ekuefub.dll
2007-02-19 21:29:16 20481 --a------ C:\WINDOWS\system32\SystemsHook.dll<SYSTEM~1.DLL>
2007-02-19 21:29:16 192512 --a------ C:\WINDOWS\system32\ssresources.dll<SSRESO~1.DLL>
2007-02-19 21:29:16 49152 --a------ C:\WINDOWS\system32\AIMDL.exe
2007-02-19 21:29:15 0 d-------- C:\Program Files\XAimer
2007-02-11 12:29:43 0 d-------- C:\Documents and Settings\All Users\Application Data\Sandlot Games<SANDLO~1>
2007-02-11 12:28:49 0 d-------- C:\Documents and Settings\All Users\Application Data\BOONTY
2007-02-11 12:28:39 0 d-------- C:\Program Files\Common Files\BOONTY Shared<BOONTY~1>
2007-02-01 17:14:29 0 d-------- C:\Program Files\ImTOO


-- Find3M Report ----------------------------------------------------------------

2007-02-26 20:59:24 0 d-------- C:\Program Files\Common Files\Symantec Shared<SYMANT~1>
2007-02-26 20:44:09 0 d-------- C:\Program Files\Common Files\WinAntiSpyware 2006<WINANT~1>
2007-02-26 05:52:25 0 d-------- C:\Program Files\Common Files\{04708DED-0954-3081-1002-02020821003d}<{04708~1>
2007-02-25 11:40:13 0 d-------- C:\Program Files\Nokia
2007-02-16 22:51:58 0 d-------- C:\Program Files\dvdSanta
2007-01-29 19:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe
2007-01-02 12:23:40 0 d-------- C:\Program Files\MSN Messenger<MSNMES~1>
2006-12-23 15:56:03 325510 --a------ C:\WINDOWS\wagaspooky.scr<WAGASP~1.SCR>
2006-12-23 15:56:03 392350 --a------ C:\WINDOWS\wagaspooky.exe<WAGASP~1.EXE>
2006-12-23 15:56:03 40960 --a------ C:\WINDOWS\wagaspooky.dll<WAGASP~1.DLL>
2006-12-23 15:56:03 18192 --a------ C:\WINDOWS\wagaspooky.dat<WAGASP~1.DAT>
2006-12-20 08:52:18 134656 --a------ C:\WINDOWS\system32\shsvcs.dll
2006-12-20 05:16:47 333824 --a------ C:\WINDOWS\system32\wiaservc.dll
2006-11-28 01:54:06 433152 --a------ C:\WINDOWS\system32\riched20.dll
2006-11-28 01:54:06 539136 --a------ C:\WINDOWS\system32\msftedit.dll


-- Registry Dump ----------------------------------------------------------------


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"WMPNSCFG"="\"C:\\Program Files\\Windows Media Player\\WMPNSCFG.exe\""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"SynTPLpr"="\"C:\\Program Files\\Synaptics\\SynTP\\SynTPLpr.exe\""
"SynTPEnh"="\"C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe\""
"ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
"ccRegVfy"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccRegVfy.exe\""
"Symantec NetDriver Monitor"="\"C:\\PROGRA~1\\SYMNET~1\\SNDMon.exe\" /Consumer"
"EPSON PictureMate 500"="C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\E_FATI9TE.EXE /P21 \"EPSON PictureMate 500\" /O6 \"USB002\" /M \"PictureMate 500\""
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"SNM"="C:\\Program Files\\SpyNoMore\\SNM.exe /startup"
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="NeroCheck"
"hkey"="HKLM"
"command"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="PDVDServ"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\CyberLink\\PowerDVD\\PDVDServ.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="jusched"
"hkey"="HKLM"
"command"="C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Xicon]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="xicon"
"hkey"="HKLM"
"command"="C:\\PROGRA~1\\Xpoint\\agent\\xicon.exe"
"inimapping"="0"


[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{ED72B5A7-562D-4639-93A0-45CE3643CF0D}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"Spyware Doctor"="\"C:\\Program Files\\Spyware Doctor\\swdoctor.exe\" /Q"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"Spyware Doctor"="\"C:\\Program Files\\Spyware Doctor\\swdoctor.exe\" /Q"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]
"{04708DED-0954-3081-1002-02020821003d}"="\"C:\\Program Files\\Common Files\\{04708DED-0954-3081-1002-02020821003d}\\Update.exe\" mc-110-12-0000272"

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\byvwv
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\oppnn
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winzjc32
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\yayvstu

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\WebrootSpySweeperService

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0



-- End of ComboScan: finished at 2007-02-26 at 21:20:13 -------------------------

#4 builder2818

builder2818
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:02:43 PM

Posted 26 February 2007 - 05:37 AM

there was a supplementary comboscan file too which i can send to you if you need. Anyhow, here is my vundofix.txt log:


VundoFix V6.3.9

Checking Java version...

Java version is 1.5.0.5

Java version is 1.5.0.6

Scan started at 3:25:45 PM 26/02/2007

Listing files found while scanning....

C:\WINDOWS\system32\armdmwtb.ini
C:\WINDOWS\system32\btwmdmra.dll
C:\WINDOWS\system32\byvwv.dll
C:\WINDOWS\system32\ibgqvuhk.dll
C:\WINDOWS\system32\mhuarqbr.dll
C:\WINDOWS\system32\oppnn.dll
C:\WINDOWS\system32\ukacwqhi.dll
C:\WINDOWS\system32\uuwldpoc.dll

Beginning removal...

Attempting to delete C:\WINDOWS\system32\armdmwtb.ini
C:\WINDOWS\system32\armdmwtb.ini Has been deleted!

Attempting to delete C:\WINDOWS\system32\btwmdmra.dll
C:\WINDOWS\system32\btwmdmra.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\ibgqvuhk.dll
C:\WINDOWS\system32\ibgqvuhk.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\mhuarqbr.dll
C:\WINDOWS\system32\mhuarqbr.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\ukacwqhi.dll
C:\WINDOWS\system32\ukacwqhi.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\uuwldpoc.dll
C:\WINDOWS\system32\uuwldpoc.dll Has been deleted!

Performing Repairs to the registry.
Done!


[b]And here is the log from AVG Antispyware:

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 8:44:29 PM 26/02/2007

+ Scan result:



HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Security Add-On -> Adware.Generic : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Explorer Security Plugin 2006 -> Adware.IntCodec : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP621\A0105189.dll -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP623\A0105477.dll -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP623\A0105603.dll -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP621\A0105159.exe -> Adware.SystemDoctor : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP623\A0105503.exe -> Adware.SystemDoctor : Cleaned with backup (quarantined).
C:\WINDOWS\system32\fccddee.dll -> Adware.Virtumonde : Cleaned with backup (quarantined).
C:\WINDOWS\system32\iifeccy.dll -> Adware.Virtumonde : Cleaned with backup (quarantined).
C:\WINDOWS\system32\opnonlk.dll -> Adware.Virtumonde : Cleaned with backup (quarantined).
C:\WINDOWS\system32\vtuusqn.dll -> Adware.Virtumonde : Cleaned with backup (quarantined).
C:\WINDOWS\system32\yayvstu.dll -> Adware.Virtumonde : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP621\A0105177.exe -> Adware.WinAntiSpyware : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP621\A0105179.exe -> Adware.WinAntiSpyware : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP621\A0105188.dll -> Adware.WinAntiSpyware : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP622\A0105376.exe -> Adware.WinAntiSpyware : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP623\A0105502.exe -> Adware.WinAntiSpyware : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP623\A0105506.exe -> Adware.WinAntiSpyware : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP623\A0105524.dll -> Adware.WinAntiSpyware : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP623\A0105614.dll -> Adware.WinAntiSpyware : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\WASPChk.WASPChk -> Adware.WinAntiSpyware : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\WASPChk.WASPChk\CLSID -> Adware.WinAntiSpyware : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP621\A0105168.exe -> Adware.WinAntiVirus : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP622\A0105365.exe -> Adware.WinAntiVirus : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP623\A0105505.exe -> Adware.WinAntiVirus : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP623\A0105609.exe -> Downloader.Agent.bgn : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\win10E.tmp.exe -> Downloader.Agent.bgn : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\win139.tmp.exe -> Downloader.Agent.bgn : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\win19D.tmp.exe -> Downloader.Agent.bgn : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\win1E3.tmp.exe -> Downloader.Agent.bgn : Cleaned with backup (quarantined).
C:\Documents and Settings\User\Local Settings\Temp\sdexe.exe -> Downloader.PurityScan.dx : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP623\A0105608.exe -> Downloader.PurityScan.dx : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP622\A0105387.exe -> Downloader.Tiny.fk : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\win108.tmp.exe -> Downloader.Tiny.fk : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\win133.tmp.exe -> Downloader.Tiny.fk : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\win189.tmp.exe -> Downloader.Tiny.fk : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\win1DD.tmp.exe -> Downloader.Tiny.fk : Cleaned with backup (quarantined).
C:\WINDOWS\system32\v6.exe -> Downloader.Tiny.fk : Cleaned with backup (quarantined).
C:\Program Files\Common Files\WinAntiSpyware 2006\was6cw.exe -> Not-A-Virus.Downloader.Win32.WinFixer.t : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP622\A0105377.exe -> Not-A-Virus.Downloader.Win32.WinFixer.t : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP621\A0105195.dll -> Trojan.Agent.qt : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\mst114.tmp -> Trojan.Agent.qt : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\mst144.tmp -> Trojan.Agent.qt : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\mst1AA.tmp -> Trojan.Agent.qt : Cleaned with backup (quarantined).
C:\WINDOWS\Temp\mst1EA.tmp -> Trojan.Agent.qt : Cleaned with backup (quarantined).
C:\WINDOWS\system32\drvnew.dll -> Trojan.Agent.qt : Cleaned with backup (quarantined).
C:\WINDOWS\system32\drvnog.dll -> Trojan.Agent.qt : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP622\A0105391.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP623\A0105574.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP623\A0105592.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{0829D999-9A2B-4E75-8191-228564193CF3}\RP623\A0105599.dll -> Trojan.Small : Cleaned with backup (quarantined).
C:\WINDOWS\system32\wintsu.exe -> Trojan.Small : Cleaned with backup (quarantined).


::Report end

#5 builder2818

builder2818
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:02:43 PM

Posted 26 February 2007 - 05:41 AM

And lastly, here is the Smitfraudfix (rapport.txt) log:

SmitFraudFix v2.144

Scan done at 20:48:51.12, Mon 26/02/2007
Run from C:\Documents and Settings\User\Desktop\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process


»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 dl.aaascreensavers.com
127.0.0.1 abcsearch.com
127.0.0.1 admin.abcsearch.com
127.0.0.1 www.abcsearch.com
127.0.0.1 acestats.com
127.0.0.1 www.acestats.com
127.0.0.1 www.actualnames.com
127.0.0.1 ad-up.com
127.0.0.1 www.ad-up.com
127.0.0.1 adatom.com
127.0.0.1 aesp.adatom.com
127.0.0.1 adbest.com
127.0.0.1 adserv.adbonus.com
127.0.0.1 www.adbonus.com
127.0.0.1 ad2.adcept.net
127.0.0.1 ad3.adcept.net
127.0.0.1 www.adcept.net
127.0.0.1 adcomplete.com
127.0.0.1 www.adcomplete.com
127.0.0.1 www.adcopy.info
127.0.0.1 ads.adcorps.com
127.0.0.1 ads.addynamix.com
127.0.0.1 pt.server1.adexit.com
127.0.0.1 www.adexit.com
127.0.0.1 www.ad4ever.com
127.0.0.1 adhearus.com
127.0.0.1 display2.adhearus.com
127.0.0.1 ssl3.adhost.com
127.0.0.1 www2.adhost.com
127.0.0.1 www.addme.com
127.0.0.1 www.adinfinity.com
127.0.0.1 te.adlandpro.com
127.0.0.1 classic.adlink.de
127.0.0.1 regio.adlink.de
127.0.0.1 west.adlink.de
127.0.0.1 www.adminder.com
127.0.0.1 adsfac.net
127.0.0.1 www.adonweb.com
127.0.0.1 media.adrevolver.com
127.0.0.1 adroar.com
127.0.0.1 ads.adroar.com
127.0.0.1 delta.adroar.com
127.0.0.1 lists.adroar.com
127.0.0.1 www.adroar.com
127.0.0.1 ads.adsag.com
127.0.0.1 di.adsag.com
127.0.0.1 img.adsag.com
127.0.0.1 adserv.com
127.0.0.1 www.adserv.com
127.0.0.1 ads.adtomi.com
127.0.0.1 downldcl.adtoolsinc.com
127.0.0.1 www.adtoolsinc.com
127.0.0.1 www.adtrader.com
127.0.0.1 survey.advantageresearch.com
127.0.0.1 ad.adver.com.tw
127.0.0.1 ads.advertise.net
127.0.0.1 www.advertisingvision.com
127.0.0.1 adviva.com
127.0.0.1 www.adviva.com
127.0.0.1 ads.adviva.net
127.0.0.1 adstats.adviva.net
127.0.0.1 www.affiliatefuel.com
127.0.0.1 banners.affiliatefuel.com
127.0.0.1 affiliatetarget.com
127.0.0.1 www.affiliatetarget.com
127.0.0.1 fcds.affiliatetracking.net
127.0.0.1 our.affiliatetracking.net
127.0.0.1 www.affiliatetracking.net
127.0.0.1 www.affiliatetracking.com
127.0.0.1 adserver.aim4media.com
127.0.0.1 adtest.aim4media.com
127.0.0.1 pops.aim4media.com
127.0.0.1 www.aim4media.com
127.0.0.1 crs.akamai.com
127.0.0.1 www.alexa.com
127.0.0.1 bantam.ai.net
127.0.0.1 fiona.ai.net
127.0.0.1 ads.amazingmedia.com
127.0.0.1 ads.antionline.com
127.0.0.1 junior.apk.net
127.0.0.1 banner.arttoday.com
127.0.0.1 audiogalaxy.com
127.0.0.1 adserving.autotrader.com
127.0.0.1 www.avres.net
127.0.0.1 www.aweber.com
127.0.0.1 www.baltictop.com
127.0.0.1 www.banner-mania.com
127.0.0.1 www2.bannerspace.com
127.0.0.1 www3.bannerspace.com
127.0.0.1 www5.bannerspace.com
127.0.0.1 www6.bannerspace.com
127.0.0.1 www7.bannerspace.com
127.0.0.1 bannerswap.com
127.0.0.1 www.bannerswap.com
127.0.0.1 www.bidclix.com
127.0.0.1 bidclix.net
127.0.0.1 www.bidclix.net
127.0.0.1 bigtracker.com
127.0.0.1 bigticker.bighits.net
127.0.0.1 bounty.bighits.net
127.0.0.1 www.bighits.net
127.0.0.1 www.bigwebportal.com
127.0.0.1 counter.bizland.com
127.0.0.1 webads.bizservers.com
127.0.0.1 a.boom.ro
127.0.0.1 s.boom.ro
127.0.0.1 www1.boomerank.com
127.0.0.1 boomerank.com
127.0.0.1 rccl.bridgetrack.com
127.0.0.1 www.browserwise.com
127.0.0.1 www.buildtraffic.com
127.0.0.1 casino-on-net.com
127.0.0.1 java2.casino-on-net.com
127.0.0.1 www.casino-on-net.com
127.0.0.1 cc-dt.com
127.0.0.1 ads.cc-dt.com
127.0.0.1 clickserve.cc-dt.com
127.0.0.1 ads.cars.com
127.0.0.1 www.cashforclicks.com
127.0.0.1 www.cashpile.com

#6 builder2818

builder2818
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:02:43 PM

Posted 26 February 2007 - 05:44 AM

127.0.0.1 mds.centrport.net
127.0.0.1 classifieds1000.com
127.0.0.1 www.classifieds1000.com
127.0.0.1 clearfind.com
127.0.0.1 zzz.clickbank.net
127.0.0.1 clickedyclick.com
127.0.0.1 www.clickexchange.ru
127.0.0.1 click2boost.com
127.0.0.1 secure.click2boost.com
127.0.0.1 service.click2boost.com
127.0.0.1 www.click2boost.com
127.0.0.1 servedby.clickexperts.net
127.0.0.1 www.clicks2you.com
127.0.0.1 stats1.clicktracks.com
127.0.0.1 www.is1.clixgalore.com
127.0.0.1 www.clixgalore.com
127.0.0.1 www1.click-fr.com
127.0.0.1 www2.click-fr.com
127.0.0.1 www3.click-fr.com
127.0.0.1 www4.click-fr.com
127.0.0.1 www.clickhouse.com
127.0.0.1 www.clicks4u.com
127.0.0.1 www.clipgenie.com
127.0.0.1 comclick.com
127.0.0.1 ct2.comclick.com
127.0.0.1 fl01.ct2.comclick.com
127.0.0.1 ihm01.ct2.comclick.com
127.0.0.1 www.compactbanner.com
127.0.0.1 ads.console.net
127.0.0.1 coolshader.com
127.0.0.1 www.coolshader.com
127.0.0.1 counted.com
127.0.0.1 bilbo.counted.com
127.0.0.1 www.counted.com
127.0.0.1 www.counterguide.com
127.0.0.1 counter4u.de
127.0.0.1 connectionzone.com
127.0.0.1 count.casino-trade.com
127.0.0.1 www.couponica.com
127.0.0.1 data.coremetrics.com
127.0.0.1 twci.coremetrics.com
127.0.0.1 us.cqcounter.com
127.0.0.1 zz.cqcounter.com
127.0.0.1 1us.cqcounter.com
127.0.0.1 ads.crosswinds.net
127.0.0.1 megabyte.crosswinds.net
127.0.0.1 cyberbounty.com
127.0.0.1 js.cybermonitor.com
127.0.0.1 stat3.cybermonitor.com
127.0.0.1 www.cytron.com
127.0.0.1 dw.dailywinner.net
127.0.0.1 www.dailywinner.net
127.0.0.1 www.dash.com
127.0.0.1 ads.date.com
127.0.0.1 banner.date.com
127.0.0.1 spyware.com.16871.fb.dbbsrv.com
127.0.0.1 webads.com.18345.fb.dbbsrv.com
127.0.0.1 collector.deepmetrix.com
127.0.0.1 geo.deepmetrix.com
127.0.0.1 www.deepmetrix.com
127.0.0.1 ad.ads.dk
127.0.0.1 tdkads.ads.dk
127.0.0.1 www.didtheyreadit.com
127.0.0.1 counter.digits.com
127.0.0.1 downloadalot.com
127.0.0.1 get.downloadalot.com
127.0.0.1 doc-tracker.com
127.0.0.1 www.duenow.com
127.0.0.1 gfx.dvlabs.com
127.0.0.1 klipads.dvlabs.com
127.0.0.1 www.e2give.com
127.0.0.1 www.e-bannerx.com
127.0.0.1 adv1.eblocs.com
127.0.0.1 www.easycounter.com
127.0.0.1 banners.easydns.com
127.0.0.1 banner.easyspace.com
127.0.0.1 www.enhancemysearch.com
127.0.0.1 epeople.com
127.0.0.1 er.errorplace.com
127.0.0.1 www.errorplace.com
127.0.0.1 www.eshopads2.com
127.0.0.1 perso.estat.com
127.0.0.1 prof.estat.com
127.0.0.1 eu-adcenter.net
127.0.0.1 thinknyc.eu-adcenter.net
127.0.0.1 engage.everyone.net
127.0.0.1 static.everyone.net
127.0.0.1 www.exchangead.com
127.0.0.1 exitexchange.com
127.0.0.1 count.exitexchange.com
127.0.0.1 images.exitexchange.com
127.0.0.1 www.exittraffic.net
127.0.0.1 ads.ezcybersearch.com
127.0.0.1 ezcybersearch.mail.everyone.net
127.0.0.1 www.evidence-eliminator.com
127.0.0.1 ads.fairfax.com.au
127.0.0.1 images.ads.fairfax.com.au
127.0.0.1 redirect.fairfax.com.au
127.0.0.1 campaigns.f2.com.au
127.0.0.1 www.fast2net.com
127.0.0.1 fasttrack.nu
127.0.0.1 adserver.filefront.com
127.0.0.1 www.fineclicks.com
127.0.0.1 firstname.com
127.0.0.1 clicks.firstname.com
127.0.0.1 flashtrack.net
127.0.0.1 coreg.flashtrack.net
127.0.0.1 flyinads.com
127.0.0.1 www.flyinads.com
127.0.0.1 ads.forbes.com
127.0.0.1 klipmart.forbes.com
127.0.0.1 ads.fortunecity.com
127.0.0.1 www2.fortunecity.com
127.0.0.1 ad.freefind.com
127.0.0.1 free-stats.com
127.0.0.1 www.freewebsites.com
127.0.0.1 ads.free-windows-games.com
127.0.0.1 ads.gamespy.com
127.0.0.1 adcontent.gamespy.com
127.0.0.1 www.getsmart.com
127.0.0.1 bp2.getredirect.com
127.0.0.1 www.getredirect.com
127.0.0.1 getupdate.com
127.0.0.1 gigex.com
127.0.0.1 www.gigex.com
127.0.0.1 globesearch.com
127.0.0.1 goclick.com
127.0.0.1 earth.goclick.com
127.0.0.1 partner1.goclick.com
127.0.0.1 www.goclick.com
127.0.0.1 www.goldenwebawards.com
127.0.0.1 goldstats.net
127.0.0.1 www.goldstats.net
127.0.0.1 adserver.gorillanation.com
127.0.0.1 gostats.com
127.0.0.1 c1.gostats.com
127.0.0.1 c2.gostats.com
127.0.0.1 webcounter.goweb.de
127.0.0.1 www.greatstartpage.com
127.0.0.1 dl.grokster.com
127.0.0.1 www.grokster.com
127.0.0.1 ads.guardian.co.uk
127.0.0.1 ads.guardianunlimited.co.uk
127.0.0.1 www.g-wizzads.net
127.0.0.1 ad0.haynet.com
127.0.0.1 www.hitboss.com
127.0.0.1 www.hit4hit.com
127.0.0.1 ads.hitcents.com
127.0.0.1 www.hithopper.com
127.0.0.1 hitmodel.net
127.0.0.1 hit-now.com
127.0.0.1 loga.hit-parade.com
127.0.0.1 hit-parade.com
127.0.0.1 www.hitpointer.com
127.0.0.1 hitslink.com
127.0.0.1 counter.hitslink.com
127.0.0.1 counter2.hitslink.com
127.0.0.1 www2.hitslink.com
127.0.0.1 www.hiwire.com
127.0.0.1 ads.home.net
127.0.0.1 counters.honesty.com
127.0.0.1 banners.hotlinks.net
127.0.0.1 hotphrase.com
127.0.0.1 www.hotsearch.com
127.0.0.1 www.hotsearchbar.com
127.0.0.1 cgi.hotstat.nl
127.0.0.1 viewstat.hotstat.nl
127.0.0.1 hc2.humanclick.com
127.0.0.1 www.hypertracker.com
127.0.0.1 ads.iafrica.com
127.0.0.1 ads.iboost.com
127.0.0.1 www.i-clicks.net
127.0.0.1 hits.icdirect.com
127.0.0.1 hitctr01.icdirect.com
127.0.0.1 image-catcher.com
127.0.0.1 stats.surfaid.ihost.com
127.0.0.1 stats.indextools.com
127.0.0.1 adserver.indieclick.com
127.0.0.1 campaign.indieclick.com
127.0.0.1 adcenter.in2.com
127.0.0.1 ads.inet1.com
127.0.0.1 ads7.inet1.com
127.0.0.1 banners.inetfast.com
127.0.0.1 ads.infospace.com
127.0.0.1 bvads.infospace.com
127.0.0.1 dpxml.infospace.com
127.0.0.1 xads.infospace.com
127.0.0.1 www.infospider.com
127.0.0.1 ads.intellicast.com
127.0.0.1 ads.intelihealth.com
127.0.0.1 ads.intermezzia.com
127.0.0.1 mjxads.internet.com
127.0.0.1 indiads.com
127.0.0.1 infostart.com
127.0.0.1 popups.infostart.com
127.0.0.1 www.intelli-tracker.com
127.0.0.1 ads.ipowerweb.com
127.0.0.1 www.ipstat.com
127.0.0.1 moviesponsor.istarthere.com
127.0.0.1 partners.istarthere.com
127.0.0.1 www.istarthere.com
127.0.0.1 adcycle.isoftmarketing.com
127.0.0.1 isurfplus.com
127.0.0.1 www.jcount.com
127.0.0.1 affiliates.jeanharris.com
127.0.0.1 popup.jeanharris.com
127.0.0.1 jpedownload.joltid.com
127.0.0.1 ads.jpost.com
127.0.0.1 track.jpost.com
127.0.0.1 www1.kliks.nl
127.0.0.1 www2.kliks.nl
127.0.0.1 www.kliks.nl
127.0.0.1 kt3.kliptracker.com
127.0.0.1 kt4.kliptracker.com
127.0.0.1 www.kliptracker.com
127.0.0.1 stats.klsoft.com
127.0.0.1 www.kmindex.ru
127.0.0.1 ad.leadcrunch.com
127.0.0.1 ts1.lexmark.com
127.0.0.1 www.linkcounter.com
127.0.0.1 linkexchange.ru
127.0.0.1 web.linkexchange.ru
127.0.0.1 www.linkexchange.ru
127.0.0.1 link4link.com
127.0.0.1 plus.link4link.com
127.0.0.1 www.links4trade.com
127.0.0.1 escati.linkopp.net
127.0.0.1 www.linkopp.net
127.0.0.1 newbrowse.livehelper.com
127.0.0.1 liveperson.net
127.0.0.1 www.liveperson.com
127.0.0.1 adserv.lwmn.net
127.0.0.1 adverts.lzio.com
127.0.0.1 newupdates.lzio.com
127.0.0.1 search.lzio.com
127.0.0.1 make-deal.com
127.0.0.1 go.mailbits.com
127.0.0.1 image.masterstats.com
127.0.0.1 link.masterstats.com
127.0.0.1 ads.affiliates.match.com
127.0.0.1 associmage.match.com
127.0.0.1 adserver.matchcraft.com
127.0.0.1 ads.mcafee.com
127.0.0.1 directads.mcafee.com
127.0.0.1 ads.mediaodyssey.com
127.0.0.1 www.mediatickets.net
127.0.0.1 ads.mediaturf.net
127.0.0.1 pokpok.meerhits.nl
127.0.0.1 exit.megago.com
127.0.0.1 www.megasearchbar.com
127.0.0.1 micorsoft.com
127.0.0.1 adserver.mindshare.de
127.0.0.1 banner.missingkids.com
127.0.0.1 ads.monster.com
127.0.0.1 adserver.monster.com
127.0.0.1 adserver.a.in.monster.com
127.0.0.1 ads.monstermoving.com
127.0.0.1 cookie.monster.com
127.0.0.1 mp3today.net
127.0.0.1 mpamexit.com
127.0.0.1 msgtag.com
127.0.0.1 www.msgtag.com
127.0.0.1 multi1.rmuk.co.uk
127.0.0.1 www.multimpp.com
127.0.0.1 mvtracker.com
127.0.0.1 www.mvtracker.com
127.0.0.1 www.mvr.us
127.0.0.1 www.myaffiliateprogram.com
127.0.0.1 ads.mydailyhoroscope.net
127.0.0.1 www.myemessenger.com
127.0.0.1 rm.myoc.com
127.0.0.1 myhitlogger.com
127.0.0.1 hit.namimedia.com
127.0.0.1 ads.nandomedia.com
127.0.0.1 www.neededware.com
127.0.0.1 www6.netbroadcaster.com
127.0.0.1 code.netbreak.com.au
127.0.0.1 www.netflip.com
127.0.0.1 money2.netfirms.com
127.0.0.1 partner.netmechanic.com
127.0.0.1 tracker.netmechanic.com
127.0.0.1 counter.netmore.net
127.0.0.1 www.netpoll.nl
127.0.0.1 ads.netsol.com
127.0.0.1 ads.newsint.co.uk
127.0.0.1 adq.nextag.com
127.0.0.1 www.newiframe.biz
127.0.0.1 ad.nobreak.com
127.0.0.1 nowbox.com
127.0.0.1 mediatickets.nubela.net
127.0.0.1 www.nubela.net
127.0.0.1 nzads.net.nz
127.0.0.1 okcounter.com
127.0.0.1 stat.onestat.com
127.0.0.1 www.onestat.com
127.0.0.1 one.ru
127.0.0.1 cnt.one.ru
127.0.0.1 stats0.one.ru
127.0.0.1 stats1.one.ru
127.0.0.1 stats2.one.ru
127.0.0.1 server1.opentracker.net
127.0.0.1 www.opinionlab.com
127.0.0.1 ccc00.opinionlab.com
127.0.0.1 rate.opinionlab.com
127.0.0.1 banner.orb.net
127.0.0.1 geoads.osdn.com
127.0.0.1 tg-images.osdn.com
127.0.0.1 otx5.otxresearch.com
127.0.0.1 click.payserve.com
127.0.0.1 www.pc-test.net
127.0.0.1 ad1.peel.com
127.0.0.1 ad3.peel.com
127.0.0.1 ads.peel.com
127.0.0.1 ad4.peel.com
127.0.0.1 ads5.peel.com
127.0.0.1 www.peel.com
127.0.0.1 www.peel.net
127.0.0.1 banners.pennyweb.com
127.0.0.1 ads.photosight.ru
127.0.0.1 phpadsnew.com
127.0.0.1 www.phpadsnew.com
127.0.0.1 ads2.playnet.com
127.0.0.1 www.popupads.com
127.0.0.1 www.popupad.net
127.0.0.1 www.popupblockade.com
127.0.0.1 server01.popupmoney.com
127.0.0.1 www.popupmoney.com
127.0.0.1 www.popadstop.com
127.0.0.1 www.popupswappers.com
127.0.0.1 ad.popupswappers.com
127.0.0.1 www.popuptop.com
127.0.0.1 www2.portdetective.com
127.0.0.1 1.primaryads.com
127.0.0.1 www.prtracker.com
127.0.0.1 www.prolivation.com
127.0.0.1 ads.pro-market.net
127.0.0.1 www.promo.com.au
127.0.0.1 www.proxylist.biz
127.0.0.1 www.pstopper.com
127.0.0.1 ad.sma.punto.net
127.0.0.1 sma.punto.net
127.0.0.1 adserv.quality-channel.de
127.0.0.1 www.quarterserver.de
127.0.0.1 questionmarket.com
127.0.0.1 amch.questionmarket.com
127.0.0.1 ch.questionmarket.com
127.0.0.1 survey.questionmarket.com
127.0.0.1 www.questionmarket.com
127.0.0.1 www.realclicks.com
127.0.0.1 www.relmaxtop.com
127.0.0.1 banner.relcom.ru
127.0.0.1 adservice.recon-networks.com
127.0.0.1 rightstats.com
127.0.0.1 www.rightstats.com
127.0.0.1 m.rmbclick.com
127.0.0.1 track.roiservice.com
127.0.0.1 www.savehits.com
127.0.0.1 st.sageanalyst.net
127.0.0.1 adsremote.scripps.com
127.0.0.1 counter.search.bg
127.0.0.1 searchalot.com
127.0.0.1 cards.searchalot.com
127.0.0.1 mail.searchalot.com
127.0.0.1 search.searchalot.com
127.0.0.1 web.searchalot.com
127.0.0.1 searchandclick.com
127.0.0.1 search.searchandclick.com
127.0.0.1 searchby.net
127.0.0.1 www.searchfst.com
127.0.0.1 www.searchgauge.com
127.0.0.1 www.search-itnow.com
127.0.0.1 www.searchmachine.com
127.0.0.1 www.searchmagnifier.com
127.0.0.1 install.searchmiracle.com
127.0.0.1 641.searchmiracle.com
127.0.0.1 10016.searchmiracle.com
127.0.0.1 9310.searchmiracle.com
127.0.0.1 searchseekfind.com
127.0.0.1 ads.searchseekfind.com
127.0.0.1 www.searchseekfind.com
127.0.0.1 browser.secondpower.com
127.0.0.1 download.secondpower.com
127.0.0.1 www1.secondpower.com
127.0.0.1 www.secondpower.com
127.0.0.1 adserver.securityfocus.com
127.0.0.1 www.selfsurveys.com
127.0.0.1 www.seehits.com
127.0.0.1 www.sendtraffic.com
127.0.0.1 sesso.com
127.0.0.1 ds.serving-sys.com
127.0.0.1 quasar.sitegauge.com
127.0.0.1 tracker.sitescout.com
127.0.0.1 advertpro.sitepoint.com
127.0.0.1 www.sitestatslive.com
127.0.0.1 www.shockcounter.com
127.0.0.1 downloads.shopathomeselect.com
127.0.0.1 skeech.com
127.0.0.1 smart-browser.com
127.0.0.1 www.smart-browser.com
127.0.0.1 smartclicks.net
127.0.0.1 www.smartclicks.net
127.0.0.1 sidebar.smarter.com
127.0.0.1 www.smarter.com
127.0.0.1 ads.smni.com
127.0.0.1 static.smni.com
127.0.0.1 ads.spaceports.com
127.0.0.1 www.specialoffersnetworks.com
127.0.0.1 www.spyferret.com
127.0.0.1 www.s-tracking.com
127.0.0.1 link.startmake.com
127.0.0.1 adsintl.starwave.com
127.0.0.1 c1.statcounter.com
127.0.0.1 www.statcounter.com
127.0.0.1 js.statistici.ro
127.0.0.1 log.statistici.ro
127.0.0.1 s.statistici.ro
127.0.0.1 www.statomatic.com
127.0.0.1 reg.stats4all.com
127.0.0.1 stats4you.com
127.0.0.1 www.stats4you.com
127.0.0.1 www.stickypops.com
127.0.0.1 clix.superclix.de
127.0.0.1 www.surfernetwork.com
127.0.0.1 www2.surveyfocus.com
127.0.0.1 www.surveynetworks.com
127.0.0.1 www.surveysite.com
127.0.0.1 adpick.switchboard.com
127.0.0.1 adtag.sympatico.ca
127.0.0.1 www.sysupdates.com
127.0.0.1 ad.uk.tangozebra.com
127.0.0.1 adult.targetsearch.info
127.0.0.1 go.targetsearch.info
127.0.0.1 www.tech-marketresearch.com
127.0.0.1 www.textads.biz
127.0.0.1 a.tfag.de
127.0.0.1 ak.tfag.de
127.0.0.1 theaffiliateprogram.com
127.0.0.1 myaffiliateprogram.com
127.0.0.1 www.the-counter.net
127.0.0.1 adbot.theonion.com
127.0.0.1 www.thesearchmall.com
127.0.0.1 new.tnc4u.com
127.0.0.1 www.toilet.com
127.0.0.1 ad.tomshardware.com
127.0.0.1 log.trafic.ro
127.0.0.1 www.toolshack.com
127.0.0.1 ads.toplayerserver.com
127.0.0.1 www1.toplayerserver.com
127.0.0.1 www.toplayerserver.com
127.0.0.1 topmoxie.com
127.0.0.1 www.toprebates.com
127.0.0.1 stat.toprefsys.com
127.0.0.1 ad.topstat.com
127.0.0.1 s26.topstat.com
127.0.0.1 xl.topstat.com
127.0.0.1 ads.track-star.com
127.0.0.1 adserver.track-star.com
127.0.0.1 geo2.track-star.com
127.0.0.1 www.track-star.com
127.0.0.1 tradeexit.com
127.0.0.1 www.trafficbeamer.nl
127.0.0.1 www.trafficg.com
127.0.0.1 ad.trafficmp.com
127.0.0.1 images.trafficmp.com
127.0.0.1 t.trafficmp.com
127.0.0.1 www.trafficflame.com
127.0.0.1 trafficfile.com
127.0.0.1 www.trafficfile.com
127.0.0.1 trackyourstats.com
127.0.0.1 trafficmarketplace.com
127.0.0.1 get.trafficmultiplier.com
127.0.0.1 go.trafficmultiplier.com
127.0.0.1 goto.trafficmultiplier.com
127.0.0.1 a.tribalfusion.com
127.0.0.1 m.tribalfusion.com
127.0.0.1 ads.tucows.com
127.0.0.1 counts.tucows.com
127.0.0.1 google.tucows.com
127.0.0.1 www.ucmore.com
127.0.0.1 ads.ucomics.com
127.0.0.1 image.ugo.com
127.0.0.1 mediamgr.ugo.com
127.0.0.1 www.ukbanners.com
127.0.0.1 ultimatecounter.com
127.0.0.1 www.ultimatecounter.com
127.0.0.1 adcontroller.unicast.com
127.0.0.1 ads.unlimitedbanners.com
127.0.0.1 ads1.updated.com
127.0.0.1 www.urlblaze.com
127.0.0.1 usachoice.net
127.0.0.1 adnetintads.valuead.com
127.0.0.1 banners.valuead.com
127.0.0.1 cs.valuead.com
127.0.0.1 servedby.valuead.com
127.0.0.1 ad.valuehost.ru
127.0.0.1 image.versiontracker.com
127.0.0.1 spinbox.versiontracker.com
127.0.0.1 www.vesbiz.biz
127.0.0.1 ads.vesperexchange.com
127.0.0.1 www.vesperexchange.com
127.0.0.1 oas.villagevoice.com
127.0.0.1 visit-link.com
127.0.0.1 generic.vpptechnologies.com
127.0.0.1 images2.vpptechnologies.com
127.0.0.1 main.vpptechnologies.com
127.0.0.1 msxml.vpptechnologies.com
127.0.0.1 www.vstats.net
127.0.0.1 ads.vnuemedia.com
127.0.0.1 www.w3exit.com
127.0.0.1 ng3.ads.warnerbros.com
127.0.0.1 wazam.com
127.0.0.1 www.wcft.net
127.0.0.1 ads.weather.com
127.0.0.1 ads.webattack.com
127.0.0.1 webcounter.com
127.0.0.1 www.webcounter.com
127.0.0.1 www.weblink.ru
127.0.0.1 adv.webmd.com
127.0.0.1 webhits.de
127.0.0.1 banners.webmasterplan.com
127.0.0.1 stat.webmedia.pl
127.0.0.1 bannervip.web1000.com
127.0.0.1 ads.webads360.com
127.0.0.1 clickcash.webpower.com
127.0.0.1 orders.webpower.com
127.0.0.1 img.webring.com
127.0.0.1 img1.webring.com
127.0.0.1 ads.webshots.com
127.0.0.1 websponsors.com
127.0.0.1 a.websponsors.com
127.0.0.1 ads.websponsors.com
127.0.0.1 g.websponsors.com
127.0.0.1 www.websponsors.com
127.0.0.1 www.webstars2000.com
127.0.0.1 hits.webstat.com
127.0.0.1 wetrack.it
127.0.0.1 st.wetrack.it
127.0.0.1 partner1.whatsfind.com
127.0.0.1 window1.com
127.0.0.1 ads.winhelp2002.com
127.0.0.1 ads.winsite.com
127.0.0.1 www.winstream.com
127.0.0.1 clicktrack.wnu.com
127.0.0.1 x0x.biz
127.0.0.1 xtra.co.nz
127.0.0.1 nedstats.xs4all.nl
127.0.0.1 hit1.xstats.com
127.0.0.1 view1.xstats.com
127.0.0.1 ads.xtra.co.nz
127.0.0.1 bs.yandex.ru
127.0.0.1 counter.yadro.ru
127.0.0.1 www.yourspecialoffers.com
127.0.0.1 www.ysearchus.com
127.0.0.1 bannerads.zwire.com
127.0.0.1 www.0stats.com
127.0.0.1 123stat.com
127.0.0.1 www.241hits.com
127.0.0.1 ct.360i.com
127.0.0.1 1000stars.ru
127.0.0.1 www.xxxwwwjjjhd.20forfree.com
127.0.0.1 ad.37.com
127.0.0.1 2jm.com
127.0.0.1 7adpower.com
127.0.0.1 7am.com
127.0.0.1 ad2.163.com
127.0.0.1 adclient.163.com
127.0.0.1 popme.163.com
127.0.0.1 banner.50megs.com
127.0.0.1 www.fan8.com
127.0.0.1 banners.dot.tk
127.0.0.1 0-ol1oiz-xolxii1-oxli10ozl1l1-o-l-11-iizxp-l-0o-oll11iz0oil-ol.com
127.0.0.1 www.123banners.com
127.0.0.1 ftp.123banners.com
127.0.0.1 123go.com
127.0.0.1 ns1.123go.net
127.0.0.1 n-case.com
127.0.0.1 www.n-case.com
127.0.0.1 ads.180solutions.com
127.0.0.1 bisads.180solutions.com
127.0.0.1 downloads.180solutions.com
127.0.0.1 installs.180solutions.com
127.0.0.1 ping.180solutions.com
127.0.0.1 tv.180solutions.com
127.0.0.1 downloads.zango.com
127.0.0.1 games.zango.com
127.0.0.1 messenger.zango.com
127.0.0.1 showtimes.zango.com
127.0.0.1 www.zango.com
127.0.0.1 www.zangomessenger.com
127.0.0.1 www.zangoshowtimes.com
127.0.0.1 address.3721.com
127.0.0.1 agent.3721.com
127.0.0.1 assistant.3721.com
127.0.0.1 cns.3721.com
127.0.0.1 cnsmin.3721.com
127.0.0.1 corp.3721.com
127.0.0.1 dir.3721.com
127.0.0.1 download.3721.com
127.0.0.1 express.3721.com
127.0.0.1 img.3721.com
127.0.0.1 magic.3721.com
127.0.0.1 mark.3721.com
127.0.0.1 meta.3721.com
127.0.0.1 msearch.3721.com
127.0.0.1 sbox.3721.com
127.0.0.1 shanghai.3721.com
127.0.0.1 sina.3721.com
127.0.0.1 user.3721.com
127.0.0.1 wap.3721.com
127.0.0.1 yahoo.3721.com
127.0.0.1 3721.com
127.0.0.1 download.feiyang.com
127.0.0.1 adtracker.411web.com
127.0.0.1 hits.411web.com
127.0.0.1 overture.411web.com
127.0.0.1 static.411web.com
127.0.0.1 xml.411web.com
127.0.0.1 search.letssearch.com
127.0.0.1 search2.letssearch.com
127.0.0.1 www.7search.com
127.0.0.1 fstrack.7search.com
127.0.0.1 impression.7search.com
127.0.0.1 img.7meta.com
127.0.0.1 www.7metasearch.com
127.0.0.1 bannerx.adtactics.com
127.0.0.1 adtactics.com
127.0.0.1 www.adtactics.com
127.0.0.1 ajokeaday.com
127.0.0.1 bannersxchange.com
127.0.0.1 img.bannersxchange.com
127.0.0.1 www.linkstoyou.com
127.0.0.1 www.payperranking.com
127.0.0.1 www.pay-per-search.com
127.0.0.1 paypertext.com
127.0.0.1 predictivesearch.com
127.0.0.1 tracking.roispy.com
127.0.0.1 www.roispy.com
127.0.0.1 tracking.spiderbait.com
127.0.0.1 www.spiderbait.com
127.0.0.1 advertisingagent.com
127.0.0.1 clicks.about.com
127.0.0.1 f.about.com
127.0.0.1 home.about.com
127.0.0.1 js.get.about.com
127.0.0.1 images.about.com
127.0.0.1 lunafetch.about.com
127.0.0.1 pixel3.about.com
127.0.0.1 sprinks-clicks.about.com
127.0.0.1 statistics.s5.com
127.0.0.1 ad.aboutwebservices.com
127.0.0.1 allsubtitles.exits.ro
127.0.0.1 best.exits.ro
127.0.0.1 books.exits.ro
127.0.0.1 www.exits.ro
127.0.0.1 www.superwebsearch.com
127.0.0.1 adops.adbureau.net
127.0.0.1 etype.adbureau.net
127.0.0.1 www.adbureau.net
127.0.0.1 accipiter.speedera.net
127.0.0.1 ad-blaster.com
127.0.0.1 www.ad-blaster.com
127.0.0.1 promote4profit.com
127.0.0.1 www.promote4profit.com
127.0.0.1 addfreestats.com
127.0.0.1 top.addfreestats.com
127.0.0.1 www.addfreestats.com
127.0.0.1 www.3dstats.com
127.0.0.1 www1.addfreestats.com
127.0.0.1 www2.addfreestats.com
127.0.0.1 www3.addfreestats.com
127.0.0.1 lasagne.adlogix.com
127.0.0.1 publisher.adlogix.com
127.0.0.1 traffic.adlogix.com
127.0.0.1 trafficsource.adlogix.com
127.0.0.1 www.adlogix.com
127.0.0.1 getpopped.com
127.0.0.1 www.getpopped.com
127.0.0.1 www.hitgo.com
127.0.0.1 r2.trafficserverstats.com
127.0.0.1 ads.adorigin.com
127.0.0.1 dev.adorigin.com
127.0.0.1 www.adorigin.com
127.0.0.1 blowsearch.com
127.0.0.1 msxml.blowsearch.com
127.0.0.1 www.blowsearch.com
127.0.0.1 cb.adprofile.net
127.0.0.1 content.adprofile.net
127.0.0.1 tx.adprofile.net
127.0.0.1 w2-ver.adprofile.net
127.0.0.1 adteractive.com
127.0.0.1 www.adteractive.com
127.0.0.1 adtegrity.com
127.0.0.1 www.adtegrity.com
127.0.0.1 webalize.net
127.0.0.1 www.webalize.net
127.0.0.1 webalize.mygeek.com
127.0.0.1 advertisementbanners.com
127.0.0.1 ads.specificclick.com
127.0.0.1 www.specificclick.com
127.0.0.1 specificpop.com
127.0.0.1 ads.specificpop.com
127.0.0.1 banners.specificpop.com
127.0.0.1 www.specificpop.com
127.0.0.1 adopt.specificclick.net
127.0.0.1 images.specificclick.net
127.0.0.1 image.adjuggler.com
127.0.0.1 rotator.adjuggler.com
127.0.0.1 www.adjuggler.com
127.0.0.1 thruport.com
127.0.0.1 adj54.thruport.com
127.0.0.1 imageserver1.thruport.com
127.0.0.1 www.thruport.com
127.0.0.1 www.alset.com
127.0.0.1 aveo.com
127.0.0.1 www.aveo.com
127.0.0.1 www.allcybersearch.com
127.0.0.1 amigeek.com
127.0.0.1 www.amigeek.com
127.0.0.1 clickyestoenter.net
127.0.0.1 www.clickyestoenter.net
127.0.0.1 www.gay50.com
127.0.0.1 gocybersearch.com
127.0.0.1 www.gocybersearch.com
127.0.0.1 www.hotelxxxcams.com
127.0.0.1 hotpopup.com
127.0.0.1 search.hotpopup.com
127.0.0.1 www.hotpopup.com
127.0.0.1 www.hotsearchbox.com
127.0.0.1 i--search.com
127.0.0.1 www.i--search.com
127.0.0.1 www.jetseeker.com
127.0.0.1 www.searchxl.com
127.0.0.1 tinybar.com
127.0.0.1 trixscripts.com
127.0.0.1 www.trixscripts.com
127.0.0.1 ads.adpowerzone.com
127.0.0.1 easy.adpowerzone.com
127.0.0.1 tb.adpowerzone.com
127.0.0.1 adserver.adsincontext.com
127.0.0.1 ns1.adsincontext.com
127.0.0.1 srv01.adsincontext.com
127.0.0.1 srv02.adsincontext.com
127.0.0.1 srv03.adsincontext.com
127.0.0.1 srv04.adsincontext.com
127.0.0.1 srv05.adsincontext.com
127.0.0.1 srv07.adsincontext.com
127.0.0.1 crossroad.adgoblin.com
127.0.0.1 adforce.adtech.de
127.0.0.1 adserver.adtech.de
127.0.0.1 adserv003.adtech.de
127.0.0.1 imageserv.adtech.de
127.0.0.1 livingnet.adtech.de
127.0.0.1 cdn1.adsdk.com
127.0.0.1 advertising.com
127.0.0.1 adserve.advertising.com
127.0.0.1 bannerfarm.ace.advertising.com
127.0.0.1 demo.advertising.com
127.0.0.1 opera1-servedby.advertising.com
127.0.0.1 servedby.advertising.com
127.0.0.1 rd.advertising.com
127.0.0.1 wap.advertising.com
127.0.0.1 www.advertising.com
127.0.0.1 clk4.com
127.0.0.1 www.clk4.com
127.0.0.1 www.contextualclicks.com
127.0.0.1 www.fastseeker.com
127.0.0.1 ads.ign.com
127.0.0.1 adserver.ign.com
127.0.0.1 t.ign.com
127.0.0.1 tracker.ign.com
127.0.0.1 adserver.snowball.com
127.0.0.1 polls.snowball.com
127.0.0.1 scripts.snowball.com
127.0.0.1 t.snowball.com
127.0.0.1 tracker.snowball.com
127.0.0.1 altnet.com
127.0.0.1 file.altnet.com
127.0.0.1 media.altnet.com
127.0.0.1 ts.altnet.com
127.0.0.1 tss.altnet.com
127.0.0.1 pm.altnet.com
127.0.0.1 www.altnet.com
127.0.0.1 www.altnetp2p.com
127.0.0.1 st.brilliantdigital.com
127.0.0.1 www.brilliantdigital.com
127.0.0.1 b3d.com
127.0.0.1 www.b3d.com
127.0.0.1 bde3d.com
127.0.0.1 xiti.com
127.0.0.1 loga.xiti.com
127.0.0.1 logc13.xiti.com
127.0.0.1 logi6.xiti.com
127.0.0.1 logi7.xiti.com
127.0.0.1 logv3.xiti.com
127.0.0.1 logv18.xiti.com
127.0.0.1 logv20.xiti.com
127.0.0.1 logp.xiti.com
127.0.0.1 trafic.xiti.com
127.0.0.1 www.xiti.com
127.0.0.1 adintelligence.net
127.0.0.1 acc.adintelligence.net
127.0.0.1 adchannel.adintelligence.net
127.0.0.1 creatives.adintelligence.net
127.0.0.1 www.adintelligence.net
127.0.0.1 www.contextplus.net
127.0.0.1 www.contextplus.com
127.0.0.1 adv.peopleonpage.com
127.0.0.1 app.peopleonpage.com
127.0.0.1 envolo.peopleonpage.com
127.0.0.1 img.peopleonpage.com
127.0.0.1 srv.peopleonpage.com
127.0.0.1 image.avenuea.com
127.0.0.1 www.avenuea.com
127.0.0.1 www.atdmt.com
127.0.0.1 click.atdmt.com
127.0.0.1 clk.atdmt.com
127.0.0.1 spd.atdmt.com
127.0.0.1 spe.atdmt.com
127.0.0.1 switch.atdmt.com
127.0.0.1 view.atdmt.com
127.0.0.1 atlasdmt.com
127.0.0.1 www.atlasdmt.com
127.0.0.1 www.avenueainc.com
127.0.0.1 active-alert-server.com
127.0.0.1 www.active-alert-server.com
127.0.0.1 amnv.net
127.0.0.1 www.amnv.net
127.0.0.1 avenuemedia.com
127.0.0.1 www.avenuemedia.com
127.0.0.1 cdn.climaxbucks.com
127.0.0.1 mt1.climaxbucks.com
127.0.0.1 mt23.climaxbucks.com
127.0.0.1 xbs.climaxbucks.com
127.0.0.1 www.climaxbucks.com
127.0.0.1 xbs.cocktailcash.com
127.0.0.1 cocktailcash.com
127.0.0.1 www.cocktailcash.com
127.0.0.1 help.internet-optimizer.com
127.0.0.1 www.lunasearch.com
127.0.0.1 movies-etc.com
127.0.0.1 cdn.movies-etc.com
127.0.0.1 www.movies-etc.com
127.0.0.1 www.yoogee.com
127.0.0.1 c.azjmp.com
127.0.0.1 images.azoogleads.com
127.0.0.1 www.azoogleads.com
127.0.0.1 www.giftfox.com
127.0.0.1 images.imgehost.com
127.0.0.1 c.qckjmp.com
127.0.0.1 google.begin2search.com
127.0.0.1 toolbar.begin2search.com
127.0.0.1 click2findnow.com
127.0.0.1 www.click2findnow.com
127.0.0.1 www.eaffiliateinc.com
127.0.0.1 hotwebsearch.com
127.0.0.1 www.hotwebsearch.com
127.0.0.1 www.toonxxxfantasies.com
127.0.0.1 worldanywhere.com
127.0.0.1 toolbar.worldanywhere.com
127.0.0.1 www.worldanywhere.com
127.0.0.1 adcounter.theglobeandmail.com
127.0.0.1 adrates.theglobeandmail.com
127.0.0.1 ads.globeandmail.com
127.0.0.1 ads1.theglobeandmail.com
127.0.0.1 visit.theglobeandmail.com
127.0.0.1 www1.theglobeandmail.com
127.0.0.1 adbot.com
127.0.0.1 w1.adbot.com
127.0.0.1 www.adbot.com
127.0.0.1 counter.bloke.com
127.0.0.1 www1.counter.bloke.com
127.0.0.1 www3.counter.bloke.com
127.0.0.1 www4.counter.bloke.com
127.0.0.1 www5.counter.bloke.com
127.0.0.1 www6.counter.bloke.com
127.0.0.1 www7.counter.bloke.com
127.0.0.1 counterbot.com
127.0.0.1 cb1.counterbot.com
127.0.0.1 ak.bluestreak.com
127.0.0.1 ca1.bluestreak.com
127.0.0.1 s0.bluestreak.com
127.0.0.1 s0b.bluestreak.com
127.0.0.1 s1.bluestreak.com
127.0.0.1 s2.bluestreak.com
127.0.0.1 s3.bluestreak.com
127.0.0.1 s4.bluestreak.com
127.0.0.1 s5.bluestreak.com
127.0.0.1 s6.bluestreak.com
127.0.0.1 s7.bluestreak.com
127.0.0.1 s8.bluestreak.com
127.0.0.1 www.bluestreak.com
127.0.0.1 download.bonzi.com
127.0.0.1 images.bonzi.com
127.0.0.1 www.bonzi.com
127.0.0.1 www.bonzibuddy.com
127.0.0.1 bravenet.com
127.0.0.1 adserv.bravenet.com
127.0.0.1 images.bravenet.com
127.0.0.1 linktrack.bravenet.com
127.0.0.1 pub1.bravenet.com
127.0.0.1 www.bravenet.com
127.0.0.1 www.belgiandip.com
127.0.0.1 www.fassia.net
127.0.0.1 flipperkeys.com
127.0.0.1 www.flipperkeys.com
127.0.0.1 www.illtemperedguppys.com
127.0.0.1 manipulatingtheicesurface.com
127.0.0.1 www.manipulatingtheicesurface.com
127.0.0.1 www.no-beba-el-agua.com
127.0.0.1 www2.undergroundlair.net
127.0.0.1 www.pshnw6510990nmo-34nue7700.net
127.0.0.1 burstmedia.com
127.0.0.1 web.burstmedia.com
127.0.0.1 roscoe.burstmedia.com
127.0.0.1 ads.burstnet.com
127.0.0.1 gifs.burstnet.com
127.0.0.1 sj.burstnet.com
127.0.0.1 te.burstnet.com
127.0.0.1 www.burstnet.com
127.0.0.1 www2.burstnet.com
127.0.0.1 www3.burstnet.com
127.0.0.1 www4.burstnet.com
127.0.0.1 www5.burstnet.com
127.0.0.1 www6.burstnet.com
127.0.0.1 www.burstnet.akadns.net
127.0.0.1 casalemedia.com
127.0.0.1 as.casalemedia.com
127.0.0.1 asg01.casalemedia.com
127.0.0.1 asg02.casalemedia.com
127.0.0.1 asg03.casalemedia.com
127.0.0.1 asg04.casalemedia.com
127.0.0.1 asg05.casalemedia.com
127.0.0.1 asg06.casalemedia.com
127.0.0.1 asg07.casalemedia.com
127.0.0.1 asg08.casalemedia.com
127.0.0.1 asg09.casalemedia.com
127.0.0.1 asg10.casalemedia.com
127.0.0.1 asg11.casalemedia.com
127.0.0.1 asg12.casalemedia.com
127.0.0.1 asg13.casalemedia.com
127.0.0.1 aslg01.casalemedia.com
127.0.0.1 aslg02.casalemedia.com
127.0.0.1 aslg03.casalemedia.com
127.0.0.1 aslg04.casalemedia.com
127.0.0.1 aslg05.casalemedia.com
127.0.0.1 aslg06.casalemedia.com
127.0.0.1 aslg07.casalemedia.com
127.0.0.1 aslg08.casalemedia.com
127.0.0.1 aslg09.casalemedia.com
127.0.0.1 aslg10.casalemedia.com
127.0.0.1 c.casalemedia.com
127.0.0.1 i.casalemedia.com
127.0.0.1 is.casalemedia.com
127.0.0.1 isg01.casalemedia.com
127.0.0.1 isg02.casalemedia.com
127.0.0.1 isg03.casalemedia.com
127.0.0.1 isg04.casalemedia.com
127.0.0.1 isg05.casalemedia.com
127.0.0.1 isg06.casalemedia.com
127.0.0.1 isg07.casalemedia.com
127.0.0.1 isg08.casalemedia.com
127.0.0.1 isg09.casalemedia.com
127.0.0.1 isg10.casalemedia.com
127.0.0.1 r.casalemedia.com
127.0.0.1 www.casalemedia.com
127.0.0.1 www.noadwarenow.com
127.0.0.1 active-max.com
127.0.0.1 search.active-max.com
127.0.0.1 www.active-max.com
127.0.0.1 allaboutsearching.com
127.0.0.1 www.allaboutsearching.com
127.0.0.1 amazingautossearch.com
127.0.0.1 www.amazingautossearch.com
127.0.0.1 contexualsearch.com
127.0.0.1 www.contexualsearch.com
127.0.0.1 www.dialup2.com
127.0.0.1 ecpm.com
127.0.0.1 www.ecpm.com
127.0.0.1 find-quick.com
127.0.0.1 www.find-quick.com
127.0.0.1 look-today.com
127.0.0.1 www.look-today.com
127.0.0.1 lop.com
127.0.0.1 ao.lop.com
127.0.0.1 ayb.lop.com
127.0.0.1 bins.lop.com
127.0.0.1 k17177.bins.lop.com
127.0.0.1 img.lop.com
127.0.0.1 sue.lop.com
127.0.0.1 www1.lop.com
127.0.0.1 www.lop.com
127.0.0.1 maxexp.com
127.0.0.1 www.mp3search.com
127.0.0.1 mysearchnow.com
127.0.0.1 search200.com
127.0.0.1 www.search200.com
127.0.0.1 search.mysearchnow.com
127.0.0.1 www.mysearchnow.com
127.0.0.1 netsearchsoft.com
127.0.0.1 www.netsearchsoft.com
127.0.0.1 omegasearch.com
127.0.0.1 www.omegasearch.com
127.0.0.1 prosearching.com
127.0.0.1 www.prosearching.com
127.0.0.1 www.rub.to
127.0.0.1 sbvr.com
127.0.0.1 www.sbvr.com
127.0.0.1 searchexe.com
127.0.0.1 www.searchexe.com
127.0.0.1 searchweb2.com
127.0.0.1 www.searchweb2.com
127.0.0.1 spawnet.com
127.0.0.1 www.spawnet.com
127.0.0.1 tefs.com
127.0.0.1 tfil.com
127.0.0.1 www.tfil.com
127.0.0.1 tdko.com
127.0.0.1 www.tdko.com
127.0.0.1 download.msgplus.net
127.0.0.1 files.msgplus.net
127.0.0.1 plugins.msgplus.net
127.0.0.1 www.msgplus.net
127.0.0.1 www.msgpluszone.com
127.0.0.1 www.patchou.com
127.0.0.1 clickxchange.com
127.0.0.1 caweb1.clickxchange.com
127.0.0.1 caweb2.clickxchange.com
127.0.0.1 www.clickxchange.com
127.0.0.1 public.americandaytrading.com
127.0.0.1 xml.blazefind.com
127.0.0.1 cdtnet.net
127.0.0.1 anne.cdtnet.net
127.0.0.1 caroline.cdtnet.net
127.0.0.1 redirect.flingstone.com
127.0.0.1 homepagecash.com
127.0.0.1 www.homepagecash.com
127.0.0.1 loudcash.com
127.0.0.1 partners.loudcash.com
127.0.0.1 www.loudcash.com
127.0.0.1 searchbarcash.com
127.0.0.1 searchbrowser.com
127.0.0.1 findwhatevernow.searchbrowser.com
127.0.0.1 skoobidoo.com
127.0.0.1 www.skoobidoo.com
127.0.0.1 bannerexchange.cjb.net
127.0.0.1 searchwww.com
127.0.0.1 vbs.searchwww.com
127.0.0.1 www.searchwww.com
127.0.0.1 dafinder.com
127.0.0.1 www2.dafinder.com
127.0.0.1 www3.dafinder.com
127.0.0.1 adult.getmoviesonline.com
127.0.0.1 www.getmoviesonline.com
127.0.0.1 ourlinklist.com
127.0.0.1 www.searchaccurate.com
127.0.0.1 ads.web.aol.com
127.0.0.1 affiliate.aol.com
127.0.0.1 aim.aol.com
127.0.0.1 dynamic.aol.com
127.0.0.1 free.aol.com
127.0.0.1 usaol.com
127.0.0.1 ar.atwola.com
127.0.0.1 pr.atwola.com
127.0.0.1 ads.newline.aol.com
127.0.0.1 p.specialoffers.aol.com
127.0.0.1 adremote.pathfinder.com
127.0.0.1 adremote.timeinc.net
127.0.0.1 aolwpnscom.112.2o7.net
127.0.0.1 aolwpnswhatsnew.112.2o7.net
127.0.0.1 adimg.cnet.com
127.0.0.1 remotead-internal.cnet.com
127.0.0.1 remotead.cnet.com
127.0.0.1 ads.com.com
127.0.0.1 adimg.com.com
127.0.0.1 adlog.com.com
127.0.0.1 cj.com
127.0.0.1 www.cj.com
127.0.0.1 www.commission-junction.com
127.0.0.1 qksrv.com
127.0.0.1 www.qksrv.net
127.0.0.1 www.qksz.net
127.0.0.1 secure.comodo.net
127.0.0.1 www.instantssl.com
127.0.0.1 trusttoolbar.com
127.0.0.1 www.trusttoolbar.com
127.0.0.1 commonname.com
127.0.0.1 www.commonname.com
127.0.0.1 commonnames.com
127.0.0.1 www.commonnames.com
127.0.0.1 xpsn.com
127.0.0.1 www.xpsn.com
127.0.0.1 mn104.coolsavings.com
127.0.0.1 www101.coolsavings.com
127.0.0.1 www102.coolsavings.com
127.0.0.1 www105.coolsavings.com
127.0.0.1 www108.coolsavings.com
127.0.0.1 www109.coolsavings.com
127.0.0.1 www113.coolsavings.com
127.0.0.1 coolwebsearch.com
127.0.0.1 stats.coolwebsearch.com
127.0.0.1 0websearch.com
127.0.0.1 1stpagehere.com
127.0.0.1 www.1stpagehere.com
127.0.0.1 a-search.biz
127.0.0.1 adasearch.com
127.0.0.1 www.adasearch.com
127.0.0.1 www.adulthyperlinks.com
127.0.0.1 www.alfa-search.com
127.0.0.1 www.clearsearch.net
127.0.0.1 www.coolfreehost.com
127.0.0.1 www.coolsearch.biz
127.0.0.1 www.crooder.com
127.0.0.1 www.enjoysearch.info
127.0.0.1 www.e-plus.cc
127.0.0.1 www.findloss.com
127.0.0.1 www.find-online.net
127.0.0.1 www.firstbookmark.com
127.0.0.1 www.globe-finder.net
127.0.0.1 www.global-finder.com
127.0.0.1 www.greg-search.com
127.0.0.1 www.heretofind.com
127.0.0.1 www.hotbookmark.com
127.0.0.1 icansearch.net
127.0.0.1 www.icansearch.net
127.0.0.1 www.i-search.us
127.0.0.1 www.ie-search.com
127.0.0.1 www.iefeadsl.com
127.0.0.1 www.luckysearch.net
127.0.0.1 lustler.com
127.0.0.1 www.lustler.com
127.0.0.1 www.makemesearch.com
127.0.0.1 www.martfinder.com
127.0.0.1 www.microsoit.com
127.0.0.1 404.msmn.com
127.0.0.1 search.msmn.com
127.0.0.1 gotosearch.msmn.com
127.0.0.1 www.myexexex.com
127.0.0.1 www.mywebsearch.net
127.0.0.1 ntsearch.com
127.0.0.1 best.omega-search.com
127.0.0.1 www.omega-search.com
127.0.0.1 www.payfortraffic.net
127.0.0.1 www.power-search.info
127.0.0.1 riviera.cc
127.0.0.1 opti.riviera.cc
127.0.0.1 www.runsearch.com
127.0.0.1 searchcentral.cc
127.0.0.1 searchdesire.com
127.0.0.1 www.search-dot.com
127.0.0.1 www.searchmeup.cc
127.0.0.1 searchpage.cc
127.0.0.1 www.smart-security.info
127.0.0.1 speed-search.biz
127.0.0.1 www.speed-search.biz
127.0.0.1 ssearch.biz
127.0.0.1 supersearch.com
127.0.0.1 roquvp.t.rack.cc
127.0.0.1 www.thebestse.com
127.0.0.1 www.the-exit.com
127.0.0.1 www.the-huns-yellow-pages.com
127.0.0.1 other.thenewsearch.com
127.0.0.1 www.thenewsearch.com
127.0.0.1 topfivesearch.com
127.0.0.1 www.topfivesearch.com
127.0.0.1 www.true-counter.com
127.0.0.1 win-eto.com
127.0.0.1 www.wow-access.com
127.0.0.1 adult.yellow-pages.ws
127.0.0.1 search.yellow-pages.ws
127.0.0.1 search-1.net
127.0.0.1 search-about.net
127.0.0.1 www.search-about.net
127.0.0.1 search-aid.com
127.0.0.1 search-click.com
127.0.0.1 www.search-click.com
127.0.0.1 search-company.com
127.0.0.1 www.search-company.com
127.0.0.1 search-direct.net
127.0.0.1 www.search-direct.net
127.0.0.1 www.search-and-find.net
127.0.0.1 audioseek.net
127.0.0.1 music-downloads.audioseek.net
127.0.0.1 www.audioseek.net
127.0.0.1 conspy.com
127.0.0.1 conf.conspy.com
127.0.0.1 www.conspy.com
127.0.0.1 hangoutspot.com
127.0.0.1 www.hangoutspot.com
127.0.0.1 conf.therealsearch.com
127.0.0.1 all-websearch.com
127.0.0.1 www.all-websearch.com
127.0.0.1 conyc.com
127.0.0.1 on-search.com
127.0.0.1 www.on-search.com
127.0.0.1 count.cc
127.0.0.1 js.count.cc
127.0.0.1 oz.msie.tv
127.0.0.1 th.msie.tv
127.0.0.1 vn.msie.tv
127.0.0.1 c1dcon.ewizard.cc
127.0.0.1 s12ds1.ewizard.cc
127.0.0.1 s1di.ewizard.cc
127.0.0.1 any-find.com
127.0.0.1 www.any-find.com
127.0.0.1 bizonio.com
127.0.0.1 www.bizonio.com
127.0.0.1 dubolom.com
127.0.0.1 www.dubolom.com
127.0.0.1 www.find4u.net
127.0.0.1 free-spy-cam.net
127.0.0.1 getthis4free.com
127.0.0.1 www.getthis4free.com
127.0.0.1 terra.hbison.com
127.0.0.1 hcworld.com
127.0.0.1 free.hcworld.com
127.0.0.1 terra.hcworld.com
127.0.0.1 klounada.com
127.0.0.1 www.klounada.com
127.0.0.1 my-find.com
127.0.0.1 www.my-find.com
127.0.0.1 mypoisk.com
127.0.0.1 mypoiskovik.com
127.0.0.1 www.mypoiskovik.com
127.0.0.1 quick-searcher.com
127.0.0.1 www.topotun.com
127.0.0.1 web-cams-chat.com
127.0.0.1 yourpoiskovik.com
127.0.0.1 www.yourpoiskovik.com
127.0.0.1 ls0.net
127.0.0.1 0cj.net
127.0.0.1 www.iwantsearch.com
127.0.0.1 6410.directwebsearch.net
127.0.0.1 7842.directwebsearch.net
127.0.0.1 dinamo.directwebsearch.net
127.0.0.1 dka.directwebsearch.net
127.0.0.1 get.directwebsearch.net
127.0.0.1 gkn.directwebsearch.net
127.0.0.1 mega.directwebsearch.net
127.0.0.1 realtime.directwebsearch.net
127.0.0.1 solar.directwebsearch.net
127.0.0.1 supacoopa.directwebsearch.net
127.0.0.1 weba.directwebsearch.net
127.0.0.1 woar.directwebsearch.net
127.0.0.1 zond.directwebsearch.net
127.0.0.1 blanksearch.biz
127.0.0.1 cashsearch.biz
127.0.0.1 greatsearch.biz
127.0.0.1 adult-friends-finder.net
127.0.0.1 www.coolsearcher.info
127.0.0.1 www.coolwebsearch.org
127.0.0.1 www.fdadfswr.com
127.0.0.1 www.searchcomplete.com
127.0.0.1 searchforge.com
127.0.0.1 www.searchforge.com
127.0.0.1 05p.com
127.0.0.1 www.05p.com
127.0.0.1 www.6o9.com
127.0.0.1 cc20foreva.com
127.0.0.1 171203.com
127.0.0.1 www.171203.com
127.0.0.1 www.356563.net
127.0.0.1 www.8ad.com
127.0.0.1 www.75tz.com
127.0.0.1 ad25.com
127.0.0.1 ad45.com
127.0.0.1 ad77.com
127.0.0.1 ad86.com
127.0.0.1 fine-search.net
127.0.0.1 www.fine-search.net
127.0.0.1 full-search.net
127.0.0.1 www.lookfor.cc
127.0.0.1 looking-for.cc
127.0.0.1 ww11.coolpage.cc
127.0.0.1 www.here4search.com
127.0.0.1 icanfindit.net
127.0.0.1 ww9.linklist.cc
127.0.0.1 www.linklist.cc
127.0.0.1 www.search-and-go.com
127.0.0.1 www.searchmeup.com
127.0.0.1 searchmeup.net
127.0.0.1 www.searchmeup.net
127.0.0.1 www.topsearch10.com
127.0.0.1 affiliates.umaxsearch.com
127.0.0.1 www.00hq.com
127.0.0.1 008k.com
127.0.0.1 www.008k.com
127.0.0.1 008i.com
127.0.0.1 www.008i.com
127.0.0.1 opsex.com
127.0.0.1 www.opsex.com
127.0.0.1 www.searchxp.com
127.0.0.1 t73.com
127.0.0.1 www.t73.com
127.0.0.1 www.v61.com
127.0.0.1 winshow.biz
127.0.0.1 www.winshow.biz
127.0.0.1 adscpm.com
127.0.0.1 www.adscpm.com
127.0.0.1 servedby.adscpm.com
127.0.0.1 www.freescratchandwin.com
127.0.0.1 free-scratch-cards.com
127.0.0.1 www.free-scratch-cards.com
127.0.0.1 fsc2k.com
127.0.0.1 www.fsc2k.com
127.0.0.1 newtopsites.com
127.0.0.1 servedby.newtopsites.com
127.0.0.1 www.newtopsites.com
127.0.0.1 frame.crazywinnings.com
127.0.0.1 pacman.crazywinnings.com
127.0.0.1 static.crazywinnings.com
127.0.0.1 update.topconverting.com
127.0.0.1 www.topconverting.com
127.0.0.1 www.adwareremovergold.com
127.0.0.1 www.datashreddergold.com
127.0.0.1 iquicksearch.net
127.0.0.1 www.iquicksearch.net
127.0.0.1 www.pcspeedbooster.com
127.0.0.1 seekio.com
127.0.0.1 www.sureseeker.com
127.0.0.1 botw.topbucks.com
127.0.0.1 cluster-03.topbucks.com
127.0.0.1 referral.topbucks.com
127.0.0.1 www.topcash.com
127.0.0.1 jcontent.bns1.net
127.0.0.1 www.bns1.net
127.0.0.1 www.bns2.net
127.0.0.1 cjt1.net
127.0.0.1 j800banners.cjt1.net
127.0.0.1 jadlogix.cjt1.net
127.0.0.1 jadtegrity.cjt1.net
127.0.0.1 jaimmedia.cjt1.net
127.0.0.1 javatar.cjt1.net
127.0.0.1 jbeet.cjt1.net
127.0.0.1 jbigpops.cjt1.net
127.0.0.1 jbouncetek.cjt1.net
127.0.0.1 jbravenet.cjt1.net
127.0.0.1 jcdcover.cjt1.net
127.0.0.1 jclickspring.cjt1.net
127.0.0.1 jcollegehumor.cjt1.net
127.0.0.1 jdownloadacc.cjt1.net
127.0.0.1 jedonkey.cjt1.net
127.0.0.1 jeuniverse.cjt1.net
127.0.0.1 jhot.cjt1.net
127.0.0.1 jicmedia.cjt1.net
127.0.0.1 jicq.cjt1.net
127.0.0.1 jieplugin.cjt1.net
127.0.0.1 jinternetoptimizer.cjt1.net
127.0.0.1 jmediabuy1.cjt1.net
127.0.0.1 jmediabuyad.cjt1.net
127.0.0.1 jmindset.cjt1.net
127.0.0.1 jmindsettest.cjt1.net
127.0.0.1 jnictech.cjt1.net
127.0.0.1 jpiolet.cjt1.net
127.0.0.1 jsanboxer.cjt1.net
127.0.0.1 jthedelfin.cjt1.net
127.0.0.1 jwarezp2p.cjt1.net
127.0.0.1 jwildmedia.cjt1.net
127.0.0.1 mediabuy-nic.cjt1.net
127.0.0.1 j.2004cms.com
127.0.0.1 www.cms1.net
127.0.0.1 www.cms2.net
127.0.0.1 ct.cydoor.com
127.0.0.1 jcms.cydoor.com
127.0.0.1 jbns2.cydoor.com
127.0.0.1 redirect.cydoor.com
127.0.0.1 www.cydoor.com
127.0.0.1 www.rgs1.net
127.0.0.1 www.rgs2.net
127.0.0.1 tpcms.topicks.com
127.0.0.1 www.topicks.com
127.0.0.1 search.media-search.net
127.0.0.1 www.media-search.net
127.0.0.1 search.scourweb.net
127.0.0.1 search.search-assist.net
127.0.0.1 search.searchduckie.net
127.0.0.1 search.searchenhancement.com
127.0.0.1 www.searchenhancement.com
127.0.0.1 search.search-exe.com
127.0.0.1 www.search-exe.com
127.0.0.1 search.sidebarsearch.com
127.0.0.1 www.windowenhancer.com
127.0.0.1 www.dealhelper.com
127.0.0.1 www.timesynchronize.com
127.0.0.1 www.weather7.com
127.0.0.1 directcoupons.com
127.0.0.1 directleads.com
127.0.0.1 track.directleads.com
127.0.0.1 ads.directstuff.com
127.0.0.1 directtrack.com
127.0.0.1 images.directtrack.com
127.0.0.1 offersquest.directtrack.com
127.0.0.1 www.directtrack.com
127.0.0.1 keywordmax.com
127.0.0.1 www.keywordmax.com
127.0.0.1 static.hitfarm.com
127.0.0.1 hightrafficads.com
127.0.0.1 toolbar.searchco.com
127.0.0.1 secure.404search.com
127.0.0.1 www.404search.com
127.0.0.1 adblaster2.info
127.0.0.1 www.adblaster2.info
127.0.0.1 www.navexcel.com
127.0.0.1 www.onwebmedia.com
127.0.0.1 thepowerstrip.com
127.0.0.1 searchant.com
127.0.0.1 app.searchant.com
127.0.0.1 www.searchant.com
127.0.0.1 searchingall.com
127.0.0.1 www.searchingall.com
127.0.0.1 ads.versaworks.net
127.0.0.1 www.verschk.com
127.0.0.1 dclk.net
127.0.0.1 doubleclick.net
127.0.0.1 ad.doubleclick.net
127.0.0.1 ad2.doubleclick.net
127.0.0.1 ad.ae.doubleclick.net
127.0.0.1 ad.au.doubleclick.net
127.0.0.1 ad.be.doubleclick.net
127.0.0.1 ad.br.doubleclick.net
127.0.0.1 ad.ca.doubleclick.net
127.0.0.1 ad.cl.doubleclick.net
127.0.0.1 ad.cn.doubleclick.net
127.0.0.1 ad.de.doubleclick.net
127.0.0.1 ad.dk.doubleclick.net
127.0.0.1 ad.es.doubleclick.net
127.0.0.1 ad.fi.doubleclick.net
127.0.0.1 ad.fr.doubleclick.net
127.0.0.1 ad.hu.doubleclick.net
127.0.0.1 ad.jp.doubleclick.net
127.0.0.1 ad.kr.doubleclick.net
127.0.0.1 ad.it.doubleclick.net
127.0.0.1 ad.nl.doubleclick.net
127.0.0.1 ad.no.doubleclick.net
127.0.0.1 ad.nz.doubleclick.net
127.0.0.1 ad.pl.doubleclick.net
127.0.0.1 ad.pt.doubleclick.net
127.0.0.1 ad.ru.doubleclick.net
127.0.0.1 ad.se.doubleclick.net
127.0.0.1 ad.terra.doubleclick.net
127.0.0.1 ad.tw.doubleclick.net
127.0.0.1 ad.uk.doubleclick.net
127.0.0.1 ad.us.doubleclick.net
127.0.0.1 ad.za.doubleclick.net
127.0.0.1 ad.n2434.doubleclick.net
127.0.0.1 de1.doubleclick.net
127.0.0.1 dfp.doubleclick.net
127.0.0.1 fr1.doubleclick.net
127.0.0.1 ir.doubleclick.net
127.0.0.1 iv.doubleclick.net
127.0.0.1 ln.doubleclick.net
127.0.0.1 m.doubleclick.net
127.0.0.1 m2.doubleclick.net
127.0.0.1 m3.doubleclick.net
127.0.0.1 mi.doubleclick.net
127.0.0.1 m.us.doubleclick.net
127.0.0.1 n479ad.doubleclick.net
127.0.0.1 optout.doubleclick.net
127.0.0.1 rd.intl.doubleclick.net
127.0.0.1 rd.kr.doubleclick.net
127.0.0.1 se1.doubleclick.net
127.0.0.1 sg1.doubleclick.net
127.0.0.1 uk1.doubleclick.net
127.0.0.1 doubleclick.ne.jp
127.0.0.1 www3.doubleclick.net
127.0.0.1 www.doubleclick.net
127.0.0.1 doubleclick.com
127.0.0.1 www2.doubleclick.com
127.0.0.1 www3.doubleclick.com
127.0.0.1 www.doubleclick.com
127.0.0.1 www.messagemedia.com
127.0.0.1 image.0mm.com
127.0.0.1 w3bldr.0mm.com
127.0.0.1 www.0mm.com
127.0.0.1 buy.rpts.net
127.0.0.1 dclkcorp.rpts.net
127.0.0.1 orbitz.rpts.net
127.0.0.1 doubleclick.shockwave.com
127.0.0.1 anon.doubleclick.speedera.net
127.0.0.1 searchsprint.subportal.com
127.0.0.1 searchsprint1.community.everyone.net
127.0.0.1 www.media-motor.com
127.0.0.1 logs.media-motor.net
127.0.0.1 mmm.media-motor.net
127.0.0.1 www.media-motor.net
127.0.0.1 tar.popuppers.com
127.0.0.1 logs.roings.com
127.0.0.1 cxoadfarm.dyndns.info
127.0.0.1 cxoads.dyndns.info
127.0.0.1 cxoreport.dnsalias.net
127.0.0.1 alfhilde.buttonware.net
127.0.0.1 www2.buttonware.net
127.0.0.1 www3.buttonware.net
127.0.0.1 www4.buttonware.net
127.0.0.1 www5.buttonware.net
127.0.0.1 www7.buttonware.net
127.0.0.1 www.webcelerator.com
127.0.0.1 t4c.eacceleration.com
127.0.0.1 dh02-001.eacceleration.com
127.0.0.1 dh02-002.eacceleration.com
127.0.0.1 dh02-003.eacceleration.com
127.0.0.1 dh02-004.eacceleration.com
127.0.0.1 dh02-005.eacceleration.com
127.0.0.1 dh02-006.eacceleration.com
127.0.0.1 dh02-009.eacceleration.com
127.0.0.1 dh02-010.eacceleration.com
127.0.0.1 www.eacceleration.com
127.0.0.1 www.eanthology.net
127.0.0.1 homepageware.com
127.0.0.1 www.homepageware.com
127.0.0.1 www.stop-sign.com
127.0.0.1 veloz.com
127.0.0.1 defender.veloz.com
127.0.0.1 raven.veloz.com
127.0.0.1 www.veloz.com
127.0.0.1 yourportal.com
127.0.0.1 lbvh2.ttsg.com
127.0.0.1 www.search-2003.com
127.0.0.1 www.sharempeg.com
127.0.0.1 einets.com
127.0.0.1 banner.einets.com
127.0.0.1 bs0.einets.com
127.0.0.1 bs1.einets.com
127.0.0.1 bs2.einets.com
127.0.0.1 bs3.einets.com
127.0.0.1 bs4.einets.com
127.0.0.1 bs5.einets.com
127.0.0.1 bs6.einets.com
127.0.0.1 bs7.einets.com
127.0.0.1 bs8.einets.com
127.0.0.1 bs9.einets.com
127.0.0.1 bs10.einets.com
127.0.0.1 elicanada.com
127.0.0.1 search-explorer.net
127.0.0.1 www.search-explorer.net
127.0.0.1 search-explorer.com
127.0.0.1 www.search-explorer.com
127.0.0.1 ads.enliven.com
127.0.0.1 effect001.enliven.com
127.0.0.1 enliven.com
127.0.0.1 www.enliven.com
127.0.0.1 cache.unicast.com
127.0.0.1 a853.xc.akamai.net
127.0.0.1 www.unicast.com
127.0.0.1 ads.euniverseads.com
127.0.0.1 media.euniverse.com
127.0.0.1 i.flowgo.com
127.0.0.1 www2.flowgo.com
127.0.0.1 search.grip.com
127.0.0.1 www.grip.com
127.0.0.1 infobeat.com
127.0.0.1 www.infobeat.com
127.0.0.1 popups.ad-logics.com
127.0.0.1 secure.keenvalue.com
127.0.0.1 www.mycoolscreen.com
127.0.0.1 search.perfectnav.com
127.0.0.1 sirsearch.com
127.0.0.1 www.sirsearch.com
127.0.0.1 thunderdownloads.com
127.0.0.1 update2.thunderdownloads.com
127.0.0.1 www.thunderdownloads.com
127.0.0.1 eventuresnv.com
127.0.0.1 scripts.eventuresnv.com
127.0.0.1 www.eventuresnv.com
127.0.0.1 direct.simpletraffic.com
127.0.0.1 track.qidion.com
127.0.0.1 devcnt.rapidblaster.com
127.0.0.1 gay.rapidblaster.com
127.0.0.1 dlsearchbar.com
127.0.0.1 download.dlsearchbar.com
127.0.0.1 track.dlsearchbar.com
127.0.0.1 search.findwhatevernow.com
127.0.0.1 www.findwhatevernow.com
127.0.0.1 smartdownloader.com
127.0.0.1 www.bargain-buddy.net
127.0.0.1 www.bestoftheweb.cc
127.0.0.1 www.brainfox.com
127.0.0.1 results.cafefind.net
127.0.0.1 www.cashbackbuddy.com
127.0.0.1 www.dealbandit.com
127.0.0.1 www.exactadvertising.com
127.0.0.1 www.exactsearch.net
127.0.0.1 adp.ikena.com
127.0.0.1 searchbandit.net
127.0.0.1 extreme-dm.com
127.0.0.1 reports.extreme-dm.com
127.0.0.1 t.extreme-dm.com
127.0.0.1 t0.extreme-dm.com
127.0.0.1 t1.extreme-dm.com
127.0.0.1 u0.extreme-dm.com
127.0.0.1 u.extreme-dm.com
127.0.0.1 u1.extreme-dm.com
127.0.0.1 v.extreme-dm.com
127.0.0.1 v0.extreme-dm.com
127.0.0.1 v1.extreme-dm.com
127.0.0.1 w0.extreme-dm.com
127.0.0.1 w1.extreme-dm.com
127.0.0.1 x3.extreme-dm.com
127.0.0.1 y.extreme-dm.com
127.0.0.1 y0.extreme-dm.com
127.0.0.1 y1.extreme-dm.com
127.0.0.1 z.extreme-dm.com
127.0.0.1 z0.extreme-dm.com
127.0.0.1 z1.extreme-dm.com
127.0.0.1 www.adultfriendsearch.com
127.0.0.1 logo.affiliatebot.com
127.0.0.1 link.affiliatebot.com
127.0.0.1 affiliate.friendsearch.com
127.0.0.1 dating.friendsearch.com
127.0.0.1 partner.friendsearch.com
127.0.0.1 www.friendsearch.com
127.0.0.1 ads.free-banners.com
127.0.0.1 affiliate.free-banners.com
127.0.0.1 home.free-banners.com
127.0.0.1 www.free-banners.com
127.0.0.1 ads.freevisits.com
127.0.0.1 search.hotplugins.com
127.0.0.1 www.hotplugins.com
127.0.0.1 a.as-eu.falkag.net
127.0.0.1 data.as-eu.falkag.net
127.0.0.1 a.as-us.falkag.net
127.0.0.1 b.as-us.falkag.net
127.0.0.1 c.as-us.falkag.net
127.0.0.1 e.as-us.falkag.net
127.0.0.1 s.as-us.falkag.net
127.0.0.1 sel.as-us.falkag.net
127.0.0.1 f.as-eu.falkag.net
127.0.0.1 red01.as-eu.falkag.net
127.0.0.1 as1.falkag.de
127.0.0.1 www.falkag.de
127.0.0.1 ad1.adsolution.de
127.0.0.1 falk.speedera.net
127.0.0.1 falk2.speedera.net
127.0.0.1 adserver.com
127.0.0.1 asm3.z1.adserver.com
127.0.0.1 z1.adserver.com
127.0.0.1 www.adserver.com
127.0.0.1 fastclick.com
127.0.0.1 www.fastclick.com
127.0.0.1 code.fastclick.net
127.0.0.1 images.fastclick.net
127.0.0.1 media.fastclick.net
127.0.0.1 media1.fastclick.net
127.0.0.1 media2.fastclick.net
127.0.0.1 media3.fastclick.net
127.0.0.1 media4.fastclick.net
127.0.0.1 media5.fastclick.net
127.0.0.1 media6.fastclick.net
127.0.0.1 media7.fastclick.net
127.0.0.1 media8.fastclick.net
127.0.0.1 media9.fastclick.net
127.0.0.1 media10.fastclick.net
127.0.0.1 media11.fastclick.net
127.0.0.1 media12.fastclick.net
127.0.0.1 media13.fastclick.net
127.0.0.1 media14.fastclick.net
127.0.0.1 media15.fastclick.net
127.0.0.1 media16.fastclick.net
127.0.0.1 media17.fastclick.net
127.0.0.1 media18.fastclick.net
127.0.0.1 media19.fastclick.net
127.0.0.1 media20.fastclick.net
127.0.0.1 media21.fastclick.net
127.0.0.1 media22.fastclick.net
127.0.0.1 media23.fastclick.net
127.0.0.1 media24.fastclick.net
127.0.0.1 media25.fastclick.net
127.0.0.1 media26.fastclick.net
127.0.0.1 media27.fastclick.net
127.0.0.1 media28.fastclick.net
127.0.0.1 media29.fastclick.net
127.0.0.1 media30.fastclick.net
127.0.0.1 media31.fastclick.net
127.0.0.1 media32.fastclick.net
127.0.0.1 media47.fastclick.net
127.0.0.1 media71.fastclick.net
127.0.0.1 media73.fastclick.net
127.0.0.1 media79.fastclick.net
127.0.0.1 media87.fastclick.net
127.0.0.1 media97.fastclick.net
127.0.0.1 fastclick.com.edgesuite.net
127.0.0.1 metacount.com
127.0.0.1 ns1.metacount.com
127.0.0.1 stats.metacount.com
127.0.0.1 www.metacount.com
127.0.0.1 firehunt.com
127.0.0.1 static.firehunt.com
127.0.0.1 partnerns1.firehunt.com
127.0.0.1 partnerns2.firehunt.com
127.0.0.1 partnerns3.firehunt.com
127.0.0.1 partnerns4.firehunt.com
127.0.0.1 partnerns5.firehunt.com
127.0.0.1 partnerns6.firehunt.com
127.0.0.1 partnerns7.firehunt.com
127.0.0.1 partnerns8.firehunt.com
127.0.0.1 partnerns9.firehunt.com
127.0.0.1 partnerns10.firehunt.com
127.0.0.1 partnerns11.firehunt.com
127.0.0.1 partnerns12.firehunt.com
127.0.0.1 partnerns13.firehunt.com
127.0.0.1 partnerns14.firehunt.com
127.0.0.1 partnerns15.firehunt.com
127.0.0.1 partnerns16.firehunt.com
127.0.0.1 www.firehunt.com
127.0.0.1 partner11.firehunt.com
127.0.0.1 partner47.firehunt.com
127.0.0.1 huntbar.com
127.0.0.1 search.huntbar.com
127.0.0.1 adserver.trafficsyndicate.com
127.0.0.1 distribution.trafficsyndicate.com
127.0.0.1 search.trafficsyndicate.com
127.0.0.1 xml.trafficsyndicate.com
127.0.0.1 xml2.trafficsyndicate.com
127.0.0.1 www.trafficsyndicate.com
127.0.0.1 is1.crawler.com
127.0.0.1 mb.crawler.com
127.0.0.1 is1.websearch.com
127.0.0.1 is2.websearch.com
127.0.0.1 ranking.websearch.com
127.0.0.1 rs.websearch.com
127.0.0.1 focalex.com
127.0.0.1 img.focalex.com
127.0.0.1 load.focalex.com
127.0.0.1 rd.focalex.com
127.0.0.1 tafbar.focalex.com
127.0.0.1 tafmaster-p.focalex.com
127.0.0.1 tafmaster-s.focalex.com
127.0.0.1 tafmaster-t.focalex.com
127.0.0.1 tafmaster-v.focalex.com
127.0.0.1 tafmaster-v2.focalex.com
127.0.0.1 tafmaster-v3.focalex.com
127.0.0.1 tafmaster-v4.focalex.com
127.0.0.1 tafmaster-v5.focalex.com
127.0.0.1 tafmaster-v6.focalex.com
127.0.0.1 tafmaster-v7.focalex.com
127.0.0.1 tafmaster-v8.focalex.com
127.0.0.1 tafmaster-v9.focalex.com
127.0.0.1 tafmaster-v10.focalex.com
127.0.0.1 tafmaster-v11.focalex.com
127.0.0.1 s.tafbar.com
127.0.0.1 www.tafbar.com
127.0.0.1 tafmaster.com
127.0.0.1 www.tafmaster.com
127.0.0.1 downloadware.net
127.0.0.1 fordaleltd.com
127.0.0.1 config.fordaleltd.com
127.0.0.1 www.fordaleltd.com
127.0.0.1 friendcards.com
127.0.0.1 www.friendcards.com
127.0.0.1 friendfinder.com
127.0.0.1 ads.friendfinder.com
127.0.0.1 graphics.friendfinder.com
127.0.0.1 www.friendsgreetings.com
127.0.0.1 graphics.nicecards.com
127.0.0.1 www.nicecards.com
127.0.0.1 content.dashbar.com
127.0.0.1 www.dashbar.com
127.0.0.1 www.date-manager.com
127.0.0.1 www.gator.com
127.0.0.1 www.gatorcorporation.com
127.0.0.1 www.gatoradvertisinginformationnetwork.com
127.0.0.1 bannerserver.gator.com
127.0.0.1 bg.gator.com
127.0.0.1 bi.gator.com
127.0.0.1 coupons.gator.com
127.0.0.1 gator29.gator.com
127.0.0.1 gatorcme.gator.com
127.0.0.1 gatortime.gator.com
127.0.0.1 gbs.gator.com
127.0.0.1 gi.gator.com
127.0.0.1 gs.gator.com
127.0.0.1 images.gator.com
127.0.0.1 map.gator.com
127.0.0.1 rs.gator.com
127.0.0.1 patchserver.gator.com
127.0.0.1 patchserver2.gator.com
127.0.0.1 regserver.gator.com
127.0.0.1 scriptserver.gator.com
127.0.0.1 search.gator.com
127.0.0.1 ss.gator.com
127.0.0.1 ssbackup.gator.com
127.0.0.1 trickle.gator.com
127.0.0.1 updateserver.gator.com
127.0.0.1 web.balance.gator.com
127.0.0.1 xmlsearch.gator.com
127.0.0.1 xmlsearch.balance.gator.com
127.0.0.1 www.offercompanion.com
127.0.0.1 www.precision-time.com
127.0.0.1 results.searchscout.com
127.0.0.1 www.tgcsearch.com
127.0.0.1 bannermaster.geektech.com
127.0.0.1 www.boxfrog.com
127.0.0.1 pageload2.babenet.com
127.0.0.1 affiliate.getspace.com
127.0.0.1 enter.hypercount.com
127.0.0.1 hypercount.com
127.0.0.1 www.hypercount.com
127.0.0.1 123count.com
127.0.0.1 www.123count.com
127.0.0.1 www.123stat.com
127.0.0.1 web-stat.com
127.0.0.1 server3.web-stat.com
127.0.0.1 www.web-stat.com
127.0.0.1 dev.gohip.com
127.0.0.1 foundry.gohip.com
127.0.0.1 previewstage.gohip.com
127.0.0.1 search.gohip.com
127.0.0.1 stage.gohip.com
127.0.0.1 stats.gohip.com
127.0.0.1 wmservera.gohip.com
127.0.0.1 gohip.com
127.0.0.1 www.gohip.com
127.0.0.1 Ad.go.com
127.0.0.1 adimages.go.com
127.0.0.1 3ps.go.com
127.0.0.1 ehg-espn.hitbox.com
127.0.0.1 ngads.go.com
127.0.0.1 x.go.com
127.0.0.1 ad.infoseek.com
127.0.0.1 adsatt.abcnews.starwave.com
127.0.0.1 adsatt.espn.starwave.com
127.0.0.1 adwords.google.com
127.0.0.1 pagead.googlesyndication.com
127.0.0.1 pagead2.googlesyndication.com
127.0.0.1 adservices.google.com
127.0.0.1 www.googleadservices.com
127.0.0.1 apps5.oingo.com
127.0.0.1 greenhorse.com
127.0.0.1 www.greenhorse.com
127.0.0.1 tickerbar.info
127.0.0.1 graphics.tickerbar.info
127.0.0.1 hitbox.com
127.0.0.1 ai.hitbox.com
127.0.0.1 aibg.hitbox.com
127.0.0.1 counter.hitbox.com
127.0.0.1 ehg.hitbox.com
127.0.0.1 evwr.hitbox.com
127.0.0.1 get.hitbox.com
127.0.0.1 hg1.hitbox.com
127.0.0.1 hitboxcentral.com
127.0.0.1 ias.hitbox.com
127.0.0.1 ibg.hitbox.com
127.0.0.1 js1.hitbox.com
127.0.0.1 phg.hitbox.com
127.0.0.1 resources.hitbox.com
127.0.0.1 rd1.hitbox.com
127.0.0.1 sitesearch.hitbox.com
127.0.0.1 stats.hitbox.com
127.0.0.1 tools.hitbox.com
127.0.0.1 tools2.hitbox.com
127.0.0.1 vwr1.hitbox.com
127.0.0.1 vwr2.hitbox.com
127.0.0.1 vwr3.hitbox.com
127.0.0.1 w1.hitbox.com
127.0.0.1 w2.hitbox.com
127.0.0.1 w3.hitbox.com
127.0.0.1 w4.hitbox.com
127.0.0.1 w5.hitbox.com
127.0.0.1 w6.hitbox.com
127.0.0.1 w7.hitbox.com
127.0.0.1 w8.hitbox.com
127.0.0.1 w9.hitbox.com
127.0.0.1 w10.hitbox.com
127.0.0.1 w11.hitbox.com
127.0.0.1 w12.hitbox.com
127.0.0.1 w13.hitbox.com
127.0.0.1 w14.hitbox.com
127.0.0.1 w15.hitbox.com
127.0.0.1 w16.hitbox.com
127.0.0.1 w17.hitbox.com
127.0.0.1 w18.hitbox.com
127.0.0.1 w19.hitbox.com
127.0.0.1 w20.hitbox.com
127.0.0.1 w21.hitbox.com
127.0.0.1 w22.hitbox.com
127.0.0.1 w23.hitbox.com
127.0.0.1 w24.hitbox.com
127.0.0.1 w25.hitbox.com
127.0.0.1 w26.hitbox.com
127.0.0.1 w27.hitbox.com
127.0.0.1 w28.hitbox.com
127.0.0.1 w29.hitbox.com
127.0.0.1 w30.hitbox.com
127.0.0.1 w31.hitbox.com
127.0.0.1 w32.hitbox.com
127.0.0.1 w33.hitbox.com
127.0.0.1 w101.hitbox.com
127.0.0.1 ww2.hitbox.com
127.0.0.1 ww3.hitbox.com
127.0.0.1 wwa.hitbox.com
127.0.0.1 wwb.hitbox.com
127.0.0.1 wwc.hitbox.com
127.0.0.1 wwd.hitbox.com
127.0.0.1 www.hitbox.com
127.0.0.1 hitexchange.net
127.0.0.1 gif.hitexchange.net
127.0.0.1 img.hitexchange.net
127.0.0.1 www.hitexchange.net
127.0.0.1 ns1.hitx.net
127.0.0.1 www.hitx.net
127.0.0.1 stats.homestead.com
127.0.0.1 track.homestead.com
127.0.0.1 track2.homestead.com
127.0.0.1 hotbar.com
127.0.0.1 adopt.hotbar.com
127.0.0.1 ads.hotbar.com
127.0.0.1 cs.hotbar.com
127.0.0.1 dynamic.hotbar.com
127.0.0.1 dynmenu.hotbar.com
127.0.0.1 license.hotbar.com
127.0.0.1 promos.hotbar.com
127.0.0.1 puv.hotbar.com
127.0.0.1 reports.hotbar.com
127.0.0.1 searchdisp.hotbar.com
127.0.0.1 skins.hotbar.com
127.0.0.1 tooltips.hotbar.com
127.0.0.1 updates.hotbar.com
127.0.0.1 vip-farm1.hotbar.com
127.0.0.1 vip-farm2.hotbar.com
127.0.0.1 vip-farm1v.hotbar.com
127.0.0.1 vip-farm2v.hotbar.com
127.0.0.1 vip-farm5v.hotbar.com
127.0.0.1 vip-farm31v.hotbar.com
127.0.0.1 www.hotbar.com
127.0.0.1 resultsmaster.com
127.0.0.1 www.resultsmaster.com
127.0.0.1 ad.hotlog.ru
127.0.0.1 click.hotlog.ru
127.0.0.1 globalstats.hotlog.ru
127.0.0.1 hit.hotlog.ru
127.0.0.1 hit1.hotlog.ru
127.0.0.1 hit2.hotlog.ru
127.0.0.1 hit3.hotlog.ru
127.0.0.1 hit4.hotlog.ru
127.0.0.1 hit5.hotlog.ru
127.0.0.1 hit6.hotlog.ru
127.0.0.1 hit7.hotlog.ru
127.0.0.1 hit8.hotlog.ru
127.0.0.1 hit9.hotlog.ru
127.0.0.1 www1.hotlog.ru
127.0.0.1 www2.hotlog.ru
127.0.0.1 www3.hotlog.ru
127.0.0

#7 builder2818

builder2818
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:02:43 PM

Posted 26 February 2007 - 05:50 AM

.0.1 www3.hotlog.ru
127.0.0.1 www4.hotlog.ru
127.0.0.1 www.hotlog.ru
127.0.0.1 hyperbanner.net
127.0.0.1 ads.hyperbanner.net
127.0.0.1 ads10.hyperbanner.net
127.0.0.1 ads11.hyperbanner.net
127.0.0.1 ads12.hyperbanner.net
127.0.0.1 ads13.hyperbanner.net
127.0.0.1 ads14.hyperbanner.net
127.0.0.1 ads15.hyperbanner.net
127.0.0.1 ads16.hyperbanner.net
127.0.0.1 ads17.hyperbanner.net
127.0.0.1 ads18.hyperbanner.net
127.0.0.1 ads19.hyperbanner.net
127.0.0.1 ads20.hyperbanner.net
127.0.0.1 siterank.hypermart.net
127.0.0.1 spms.hyperbanner.net
127.0.0.1 ads05.bpath.com
127.0.0.1 ads06.bpath.com
127.0.0.1 ads07.bpath.com
127.0.0.1 ads08.bpath.com
127.0.0.1 ads09.bpath.com
127.0.0.1 ads10.bpath.com
127.0.0.1 ads12.bpath.com
127.0.0.1 ads13.bpath.com
127.0.0.1 ads14.bpath.com
127.0.0.1 ads15.bpath.com
127.0.0.1 ads16.bpath.com
127.0.0.1 ads17.bpath.com
127.0.0.1 ads18.bpath.com
127.0.0.1 ads19.bpath.com
127.0.0.1 ads20.bpath.com
127.0.0.1 ads21.bpath.com
127.0.0.1 ads22.bpath.com
127.0.0.1 ads23.bpath.com
127.0.0.1 ads24.bpath.com
127.0.0.1 ads25.bpath.com
127.0.0.1 ads26.bpath.com
127.0.0.1 ads27.bpath.com
127.0.0.1 ads28.bpath.com
127.0.0.1 ads29.bpath.com
127.0.0.1 australia.bpath.com
127.0.0.1 spms.bpath.com
127.0.0.1 usa.bpath.com
127.0.0.1 www.bpath.com
127.0.0.1 auto.isearch.com
127.0.0.1 www.isearch.com
127.0.0.1 cftrack.idownload.com
127.0.0.1 secure.idownload.com
127.0.0.1 www.idownload.com
127.0.0.1 www.popupblocker.com
127.0.0.1 spywareavenger.com
127.0.0.1 in.spywareavenger.com
127.0.0.1 www.spywareavenger.com
127.0.0.1 cftrack.uninstaller.com
127.0.0.1 www.uninstaller.com
127.0.0.1 www.virushunter.com
127.0.0.1 www.wmkiller.com
127.0.0.1 ieplugin.com
127.0.0.1 badurl.ieplugin.com
127.0.0.1 sysupdate.ieplugin.com
127.0.0.1 wwa.ieplugin.com
127.0.0.1 wwd.ieplugin.com
127.0.0.1 ww2.ieplugin.com
127.0.0.1 ww3.ieplugin.com
127.0.0.1 www.ieplugin.com
127.0.0.1 almightysearch.com
127.0.0.1 www.almightysearch.com
127.0.0.1 www.ignkeywords.com
127.0.0.1 www.igetnet.com
127.0.0.1 code.ignphrases.com
127.0.0.1 www.ignphrases.com
127.0.0.1 plugusin4cash.com
127.0.0.1 www.plugusin4cash.com
127.0.0.1 www.qcksearch.com
127.0.0.1 rspsearch.com
127.0.0.1 www.rspsearch.com
127.0.0.1 measurement.redsheriff.com
127.0.0.1 www.redsheriff.it
127.0.0.1 www.redsheriff.com
127.0.0.1 www.redsheriff.com.au
127.0.0.1 www.RedSheRRif.com
127.0.0.1 devfw.imrworldwide.com
127.0.0.1 lycos-eu.imrworldwide.com
127.0.0.1 ninemsn.imrworldwide.com
127.0.0.1 secure-au.imrworldwide.com
127.0.0.1 secure-jp.imrworldwide.com
127.0.0.1 secure-uk.imrworldwide.com
127.0.0.1 secure-us.imrworldwide.com
127.0.0.1 secure-za.imrworldwide.com
127.0.0.1 server-au.imrworldwide.com
127.0.0.1 server-br.imrworldwide.com
127.0.0.1 server-by.imrworldwide.com
127.0.0.1 secure-cn.imrworldwide.com
127.0.0.1 server-de.imrworldwide.com
127.0.0.1 server-dk.imrworldwide.com
127.0.0.1 server-ee.imrworldwide.com
127.0.0.1 server-fi.imrworldwide.com
127.0.0.1 server-it.imrworldwide.com
127.0.0.1 server-jp.imrworldwide.com
127.0.0.1 server-lv.imrworldwide.com
127.0.0.1 server-lt.imrworldwide.com
127.0.0.1 server-no.imrworldwide.com
127.0.0.1 server-nz.imrworldwide.com
127.0.0.1 server-oslo.imrworldwide.com
127.0.0.1 server-pl.imrworldwide.com
127.0.0.1 server-se.imrworldwide.com
127.0.0.1 server-sg.imrworldwide.com
127.0.0.1 server-uk.imrworldwide.com
127.0.0.1 server-us.imrworldwide.com
127.0.0.1 survey1-au.imrworldwide.com
127.0.0.1 telstra.imrworldwide.com
127.0.0.1 www.imrworldwide.com
127.0.0.1 inet-traffic.com
127.0.0.1 banner1.inet-traffic.com
127.0.0.1 phplive.inet-traffic.com
127.0.0.1 www.inet-traffic.com
127.0.0.1 news.searchit.com
127.0.0.1 www.searchit.com
127.0.0.1 browseraid.com
127.0.0.1 pops.browseraid.com
127.0.0.1 updates.browseraid.com
127.0.0.1 www.browseraid.com
127.0.0.1 browserpal.com
127.0.0.1 www.browserpal.com
127.0.0.1 featured-results.com
127.0.0.1 www.usercount.com
127.0.0.1 quickcrawler.com
127.0.0.1 search.quickcrawler.com
127.0.0.1 www.quickcrawler.com
127.0.0.1 www.quicklaunch.com
127.0.0.1 startium.com
127.0.0.1 search.startium.com
127.0.0.1 www.startium.com
127.0.0.1 search.dogpile.com
127.0.0.1 www.dogpile.com
127.0.0.1 click.go2net.com
127.0.0.1 clickit.go2net.com
127.0.0.1 images.go2net.com
127.0.0.1 bigclicks.com
127.0.0.1 search.bigclicks.com
127.0.0.1 www.bigclicks.com
127.0.0.1 exitfuel.com
127.0.0.1 ifcol.exitfuel.com
127.0.0.1 join.exitfuel.com
127.0.0.1 nitrous.exitfuel.com
127.0.0.1 www.exitfuel.com
127.0.0.1 link.exitdirect.com
127.0.0.1 www.exitdirect.com
127.0.0.1 internetfuel.com
127.0.0.1 addev.internetfuel.com
127.0.0.1 adserv1.internetfuel.com
127.0.0.1 adserv2.internetfuel.com
127.0.0.1 adserv3.internetfuel.com
127.0.0.1 adserv4.internetfuel.com
127.0.0.1 adserv5.internetfuel.com
127.0.0.1 adserv6.internetfuel.com
127.0.0.1 banserv.internetfuel.com
127.0.0.1 download.internetfuel.com
127.0.0.1 turbo.internetfuel.com
127.0.0.1 searchfuel.com
127.0.0.1 search.searchfuel.com
127.0.0.1 wwwdev.searchfuel.com
127.0.0.1 404errorpage.com
127.0.0.1 www.404errorpage.com
127.0.0.1 search.winnings.com
127.0.0.1 chewbacca.cybereps.com
127.0.0.1 ds.cybereps.com
127.0.0.1 images.cybereps.com
127.0.0.1 www.cybereps.com
127.0.0.1 yoda.cybereps.com
127.0.0.1 pluto.adcycle.com
127.0.0.1 www.adcycle.com
127.0.0.1 www.exchange-it.com
127.0.0.1 media.exchange-it.com
127.0.0.1 popunder.com
127.0.0.1 media.popunder.com
127.0.0.1 www.popunder.com
127.0.0.1 download.funwebproducts.com
127.0.0.1 www.funwebproducts.com
127.0.0.1 c4.iwon.com
127.0.0.1 cc.iwon.com
127.0.0.1 docs1.iwon.com
127.0.0.1 efc.iwon.com
127.0.0.1 home.iwon.com
127.0.0.1 image.i1img.com
127.0.0.1 i1img.com
127.0.0.1 my.iwon.com
127.0.0.1 plus.iwon.com
127.0.0.1 prizemachine.games.iwon.com
127.0.0.1 search.iwon.com
127.0.0.1 searchassistant.iwon.com
127.0.0.1 www1.iwon.com
127.0.0.1 image.imgfarm.com
127.0.0.1 bar.mytotalsearch.com
127.0.0.1 www.mytotalsearch.com
127.0.0.1 mn.myquicksearch.com
127.0.0.1 mr.myquicksearch.com
127.0.0.1 www.myquicksearch.com
127.0.0.1 c4.maxserving.com
127.0.0.1 help.mysearch.com
127.0.0.1 mywebsearch.com
127.0.0.1 bar.mywebsearch.com
127.0.0.1 www.mywebsearch.com
127.0.0.1 www.casinopalazzo.com
127.0.0.1 resellerstats.payoutpal.com
127.0.0.1 www.payoutpal.com
127.0.0.1 pointroll.com
127.0.0.1 ads.pointroll.com
127.0.0.1 media.pointroll.com
127.0.0.1 mirror.pointroll.com
127.0.0.1 speed.pointroll.com
127.0.0.1 track.pointroll.com
127.0.0.1 www.pointroll.com
127.0.0.1 chat.ezula.com
127.0.0.1 app.ezula.com
127.0.0.1 www.ezula.com
127.0.0.1 kabanga.com
127.0.0.1 www.browservillage.com
127.0.0.1 banners.kanoodle.com
127.0.0.1 safe.kanoodle.com
127.0.0.1 webmail.kanoodle.com
127.0.0.1 www.kanoodle.com
127.0.0.1 kazaa.com
127.0.0.1 www.kazaa.com
127.0.0.1 desktop.kazaa.com
127.0.0.1 update.kazaa.com
127.0.0.1 kazaa.adserver.co.il
127.0.0.1 goi.com
127.0.0.1 nav.goi.com
127.0.0.1 nav.hitq.com
127.0.0.1 hitq.com
127.0.0.1 server1.adsrve.com
127.0.0.1 server2.adsrve.com
127.0.0.1 server3.adsrve.com
127.0.0.1 www.adsrve.com
127.0.0.1 turbodownload.net
127.0.0.1 www.turbodownload.net
127.0.0.1 db0.net-filter.com
127.0.0.1 db2.net-filter.com
127.0.0.1 db3.net-filter.com
127.0.0.1 db4.net-filter.com
127.0.0.1 db5.net-filter.com
127.0.0.1 db6.net-filter.com
127.0.0.1 db7.net-filter.com
127.0.0.1 sitestats.com
127.0.0.1 db0.sitestats.com
127.0.0.1 db1.sitestats.com
127.0.0.1 db2.sitestats.com
127.0.0.1 db3.sitestats.com
127.0.0.1 db4.sitestats.com
127.0.0.1 db5.sitestats.com
127.0.0.1 db6.sitestats.com
127.0.0.1 db7.sitestats.com
127.0.0.1 www.sitestats.com
127.0.0.1 www.aadserver.net
127.0.0.1 medialoads.com
127.0.0.1 config.medialoads.com
127.0.0.1 dldw.medialoads.com
127.0.0.1 dldwb1.medialoads.com
127.0.0.1 mp.medialoads.com
127.0.0.1 www.medialoads.com
127.0.0.1 www.satellitepop.com
127.0.0.1 smartpops.com
127.0.0.1 ad.linksynergy.com
127.0.0.1 click.linksynergy.com
127.0.0.1 ssl.linksynergy.com
127.0.0.1 www.linkshare.com
127.0.0.1 ad1.lbe.ru
127.0.0.1 host1.list.ru
127.0.0.1 host3.list.ru
127.0.0.1 host4.list.ru
127.0.0.1 host7.list.ru
127.0.0.1 host11.list.ru
127.0.0.1 host12.list.ru
127.0.0.1 host13.list.ru
127.0.0.1 host14.list.ru
127.0.0.1 top.list.ru
127.0.0.1 list.ru
127.0.0.1 livestat.com
127.0.0.1 jmm.livestat.com
127.0.0.1 www.livestat.com
127.0.0.1 www.livetechnology.com
127.0.0.1 active.macromedia.com
127.0.0.1 download.macromedia.com
127.0.0.1 sdc.shockwave.com
127.0.0.1 macromedia.speedera.net
127.0.0.1 www.getmirar.com
127.0.0.1 awbeta.net-nucleus.com
127.0.0.1 www.net-nucleus.com
127.0.0.1 apps.deskwizz.com
127.0.0.1 letsgofind.com
127.0.0.1 www.letsgofind.com
127.0.0.1 media.top-banners.com
127.0.0.1 www.ugosearch.com
127.0.0.1 www.freespywarescan.org
127.0.0.1 www.searchgateway.net
127.0.0.1 www.secure-processingcenter.com
127.0.0.1 www.showbehind.com
127.0.0.1 www.spywarebegone.com
127.0.0.1 www.worldusa.com
127.0.0.1 ad.linkexchange.com
127.0.0.1 fastcounter.linkexchange.com
127.0.0.1 leader.linkexchange.com
127.0.0.1 image.linkexchange.com
127.0.0.1 linkexchange.com
127.0.0.1 www.linkexchange.com
127.0.0.1 listbot.com
127.0.0.1 fastcounter.bcentral.com
127.0.0.1 fcstats.bcentral.com
127.0.0.1 keywords.bcentral.com
127.0.0.1 revenue.bcentral.com
127.0.0.1 submitit.bcentral.com
127.0.0.1 ulogin.bcentral.com
127.0.0.1 c.mii.instacontent.net
127.0.0.1 cserver.mii.instacontent.net
127.0.0.1 p.mii.instacontent.net
127.0.0.1 pdownload.mii.instacontent.net
127.0.0.1 pserver.mii.instacontent.net
127.0.0.1 mailwiper.com
127.0.0.1 mail.mailwiper.com
127.0.0.1 www.mailwiper.com
127.0.0.1 spydeleter.com
127.0.0.1 www.spydeleter.com
127.0.0.1 venus.jraun.com
127.0.0.1 karmajunction.com
127.0.0.1 www.karmamedia.com
127.0.0.1 marketdart.com
127.0.0.1 www.marketdart.com
127.0.0.1 marketscore.com
127.0.0.1 oss-survey.marketscore.com
127.0.0.1 proxycfg.marketscore.com
127.0.0.1 proxyhttp.netsetter.com
127.0.0.1 proxy.ia2.marketscore.com
127.0.0.1 proxy.ia3.marketscore.com
127.0.0.1 proxy.ia4.marketscore.com
127.0.0.1 proxy.or3.marketscore.com
127.0.0.1 proxy.or4.marketscore.com
127.0.0.1 proxy.sj3.marketscore.com
127.0.0.1 proxy.sj4.marketscore.com
127.0.0.1 www.marketscore.com
127.0.0.1 proxycfg.netsetter.com
127.0.0.1 proxycfg.wip.netsetter.com
127.0.0.1 c.moreover.com
127.0.0.1 d.moreover.com
127.0.0.1 i.moreover.com
127.0.0.1 p.moreover.com
127.0.0.1 w.moreover.com
127.0.0.1 webmaster.moreover.com
127.0.0.1 wap.moreover.com
127.0.0.1 www.moreover.com
127.0.0.1 musiccity.streamcastnetworks.com
127.0.0.1 ads.musiccity.com
127.0.0.1 dbcventures.com
127.0.0.1 easytoolbar.com
127.0.0.1 ads.expedia.com
127.0.0.1 ads.msn.com
127.0.0.1 ads.eu.msn.com
127.0.0.1 ads.ninemsn.com.au
127.0.0.1 arc2.msn.com
127.0.0.1 arc3.msn.com
127.0.0.1 arc9.msn.com
127.0.0.1 di.image.eshop.msn.com
127.0.0.1 eshopxml.msn.com
127.0.0.1 h.msn.com
127.0.0.1 image.eshop.msn.com
127.0.0.1 popup.msn.com
127.0.0.1 rmads.msn.com
127.0.0.1 rmads.eu.msn.com
127.0.0.1 famulus.msnbc.com
127.0.0.1 global.msads.net
127.0.0.1 mycomputer.com
127.0.0.1 123counter.mycomputer.com
127.0.0.1 bannerexchange.mycomputer.com
127.0.0.1 counter.mycomputer.com
127.0.0.1 enterprise.mycomputer.com
127.0.0.1 phoenix-mc-adrunner.mycomputer.com
127.0.0.1 siteminer.mycomputer.com
127.0.0.1 autobytel.112.2o7.net
127.0.0.1 gpaper123.112.2O7.net
127.0.0.1 gpaper158.112.2O7.net
127.0.0.1 omniture.112.2o7.net
127.0.0.1 vintacom.112.2o7.net
127.0.0.1 beta.superstats.com
127.0.0.1 chart.superstats.com
127.0.0.1 code.superstats.com
127.0.0.1 enterprise.superstats.com
127.0.0.1 media.superstats.com
127.0.0.1 stats.superstats.com
127.0.0.1 v2.superstats.com
127.0.0.1 clearsearch.com
127.0.0.1 www.clearsearch.com
127.0.0.1 wdc.15x.net
127.0.0.1 ws1.15x.net
127.0.0.1 ws2.15x.net
127.0.0.1 webtrendslive.com
127.0.0.1 statse.webtrendslive.com
127.0.0.1 statse.webtrendslive.netiq.akadns.net
127.0.0.1 dcs.wtlive.com
127.0.0.1 dcs.wtlive.netiq.akadns.net
127.0.0.1 www.webtrends.net
127.0.0.1 www.netiq.com
127.0.0.1 clicz.com
127.0.0.1 cz2.clickzs.com
127.0.0.1 cz3.clickzs.com
127.0.0.1 cz4.clickzs.com
127.0.0.1 cz5.clickzs.com
127.0.0.1 cz6.clickzs.com
127.0.0.1 cz7.clickzs.com
127.0.0.1 cz8.clickzs.com
127.0.0.1 cz9.clickzs.com
127.0.0.1 js3.clickzs.com
127.0.0.1 js6.clickzs.com
127.0.0.1 js7.clickzs.com
127.0.0.1 js8.clickzs.com
127.0.0.1 www.clicz.com
127.0.0.1 nedstat.net
127.0.0.1 be.nedstat.net
127.0.0.1 es.nedstat.net
127.0.0.1 uk.nedstat.net
127.0.0.1 nedstat.nl
127.0.0.1 nedstat.s0.nl
127.0.0.1 www.nedstat.nl
127.0.0.1 nedstatbasic.net
127.0.0.1 m1.nedstatbasic.net
127.0.0.1 nl.viewstat.nedstatbasic.net
127.0.0.1 v1.nedstatbasic.net
127.0.0.1 www.nedstatbasic.net
127.0.0.1 nl.nedstatpro.net
127.0.0.1 uk.nedstatpro.net
127.0.0.1 www.nedstat.co.uk
127.0.0.1 sitestat.com
127.0.0.1 be.sitestat.com
127.0.0.1 fr.sitestat.com
127.0.0.1 int.sitestat.com
127.0.0.1 nl.sitestat.com
127.0.0.1 uk.sitestat.com
127.0.0.1 www.nedstat.com
127.0.0.1 nbasic.sitestat.net
127.0.0.1 de.sitestat.nedstat.net
127.0.0.1 ads.ads360.com
127.0.0.1 adserver.ads360.com
127.0.0.1 adserv2.ads360.com
127.0.0.1 adserv3.ads360.com
127.0.0.1 adserv4.ads360.com
127.0.0.1 banners.ads360.com
127.0.0.1 creatives.ads360.com
127.0.0.1 dynaserv.ads360.com
127.0.0.1 stats.ads360.com
127.0.0.1 nytbglobe.112.2O7.net
127.0.0.1 adserver.anm.co.uk
127.0.0.1 ads.mm.ap.org
127.0.0.1 q.azcentral.com
127.0.0.1 ads.belointeractive.com
127.0.0.1 ads.bloomberg.com
127.0.0.1 rmedia.boston.com
127.0.0.1 te.boston.com
127.0.0.1 ads.businessweek.com
127.0.0.1 te.businessweek.com
127.0.0.1 te.chicagotribune.com
127.0.0.1 ads4.clearchannel.com
127.0.0.1 adtrack.cimedia.net
127.0.0.1 realaudio.cimedia.net
127.0.0.1 te.ctnow.com
127.0.0.1 te.dailypress.com
127.0.0.1 gcirm.gannett-tv.com
127.0.0.1 te.greenwichtime.com
127.0.0.1 ads.indystar.com
127.0.0.1 te.latimes.com
127.0.0.1 ads.madison.com
127.0.0.1 te.mcall.com
127.0.0.1 te.newsday.com
127.0.0.1 adserver.news.com.au
127.0.0.1 www2.northjersey.com
127.0.0.1 ads.nwsource.com
127.0.0.1 ads.nypost.com
127.0.0.1 ads.nytimes.com
127.0.0.1 nyttechnology.112.2O7.net
127.0.0.1 te.orlandosentinel.com
127.0.0.1 ads.pilotonline.com
127.0.0.1 q.pni.com
127.0.0.1 ads.realcities.com
127.0.0.1 krd.realcities.com
127.0.0.1 ads.roanoke.com
127.0.0.1 ads.seattletimes.com
127.0.0.1 ads1.sptimes.com
127.0.0.1 te.sunspot.net
127.0.0.1 a3.suntimes.com
127.0.0.1 te.stamfordadvocate.com
127.0.0.1 te.sun-sentinel.com
127.0.0.1 ads.telegraph.co.uk
127.0.0.1 adcreative.tribuneinteractive.com
127.0.0.1 adserver.trb.com
127.0.0.1 adserver.tribuneinteractive.com
127.0.0.1 ad.usatoday.com
127.0.0.1 ads.usatoday.com
127.0.0.1 c.usatoday.com
127.0.0.1 viewer.usatoday.com
127.0.0.1 info.browserdirect.net
127.0.0.1 www.elevonsearch.com
127.0.0.1 search.findsall.info
127.0.0.1 find.greatsearch.info
127.0.0.1 result.goodsearch.info
127.0.0.1 www.esearchandfind.org
127.0.0.1 www.mysearchnet.org
127.0.0.1 www.new.chat.new.net
127.0.0.1 eps.new.search.new.net
127.0.0.1 client.newdotnet.net
127.0.0.1 upgrade.newdotnet.net
127.0.0.1 www.newdotnet.com
127.0.0.1 www.onestepsearch.net
127.0.0.1 www.onestepsearch.biz
127.0.0.1 pjn.qsrch.net
127.0.0.1 search.qsrch.net
127.0.0.1 bgw.qsrch.com
127.0.0.1 hp.qsrch.com
127.0.0.1 moniker.qsrch.com
127.0.0.1 newnet.qsrch.com
127.0.0.1 regfly.qsrch.com
127.0.0.1 rg.qsrch.com
127.0.0.1 worldwide.qsrch.com
127.0.0.1 www.qsrch.com
127.0.0.1 qtbc.qsrch.info
127.0.0.1 upgrade.qsrch.info
127.0.0.1 data.quicksearches.net
127.0.0.1 find.reliableresults.info
127.0.0.1 web.yoursearchfinder.com
127.0.0.1 windowpatch.info
127.0.0.1 windowpatch.net
127.0.0.1 ad.searchsquire.com
127.0.0.1 search.searchsquire.com
127.0.0.1 download.opistat.com
127.0.0.1 premeter.opistat.com
127.0.0.1 server.opistat.com
127.0.0.1 srv-fr.opistat.com
127.0.0.1 uk.opistat.com
127.0.0.1 uk2.opistat.com
127.0.0.1 www.opistat.com
127.0.0.1 sites.sexxx-direct.com
127.0.0.1 www.sexxx-direct.com
127.0.0.1 cmhtml.overture.com
127.0.0.1 ctxtads.overture.com
127.0.0.1 html.overture.com
127.0.0.1 inventory.overture.com
127.0.0.1 redir.overture.com
127.0.0.1 www3.overture.com
127.0.0.1 www5.overture.com
127.0.0.1 www6.overture.com
127.0.0.1 www7.overture.com
127.0.0.1 www8.overture.com
127.0.0.1 www20.overture.com
127.0.0.1 www21.overture.com
127.0.0.1 overture.reporting.net
127.0.0.1 www.pixpox.com
127.0.0.1 ads.1stblaze.com
127.0.0.1 counter.1stblaze.com
127.0.0.1 www.1stblaze.com
127.0.0.1 js.domainsponsor.com
127.0.0.1 landing.domainsponsor.com
127.0.0.1 search.domainsponsor.com
127.0.0.1 www.domainsponsor.com
127.0.0.1 www.gtawarehouse.com
127.0.0.1 staging.inboxrewards.com
127.0.0.1 inboxrewards.com
127.0.0.1 www.inboxrewards.com
127.0.0.1 search.information.com
127.0.0.1 ads.linksponsor.com
127.0.0.1 stats.linksponsor.com
127.0.0.1 track.newslettersponsor.com
127.0.0.1 www.newslettersponsor.com
127.0.0.1 oversee.net
127.0.0.1 beta.oversee.net
127.0.0.1 darin.eq5.oversee.net
127.0.0.1 domainsponsor.oversee.net
127.0.0.1 sponsormatch.oversee.net
127.0.0.1 ads.popupsponsor.com
127.0.0.1 admin.popupsponsor.com
127.0.0.1 console.popupsponsor.com
127.0.0.1 count.popupsponsor.com
127.0.0.1 i.popupsponsor.com
127.0.0.1 mediatrack.popupsponsor.com
127.0.0.1 view.popupsponsor.com
127.0.0.1 www.popupsponsor.com
127.0.0.1 proredirect.com
127.0.0.1 www.proredirect.com
127.0.0.1 revenue.net
127.0.0.1 ads.revenue.net
127.0.0.1 ads1.revenue.net
127.0.0.1 ads2.revenue.net
127.0.0.1 mediatrack.revenue.net
127.0.0.1 view.revenue.net
127.0.0.1 www.revenue.net
127.0.0.1 domainimages.targetwords.com
127.0.0.1 domainimages2.targetwords.com
127.0.0.1 domainlanding.targetwords.com
127.0.0.1 ie.targetwords.com
127.0.0.1 images.targetwords.com
127.0.0.1 impress.targetwords.com
127.0.0.1 search.targetwords.com
127.0.0.1 targetwords.com
127.0.0.1 www.targetwords.com
127.0.0.1 ie.twrds.com
127.0.0.1 windowpatch.com
127.0.0.1 www.windowpatch.com
127.0.0.1 hastalavista.com
127.0.0.1 www.hastalavista.com
127.0.0.1 www.judysearch.com
127.0.0.1 wowsearch.org
127.0.0.1 safesearch.com
127.0.0.1 www.safesearch.com
127.0.0.1 linksummary.com
127.0.0.1 demon1.linksummary.com
127.0.0.1 demon2.linksummary.com
127.0.0.1 redirect.linksummary.com
127.0.0.1 searchbar.linksummary.com
127.0.0.1 www.linksummary.com
127.0.0.1 click.findthewebsiteyouneed.com
127.0.0.1 1.adbrite.com
127.0.0.1 2.adbrite.com
127.0.0.1 3.adbrite.com
127.0.0.1 1.marketbanker.com
127.0.0.1 2.marketbanker.com
127.0.0.1 3.marketbanker.com
127.0.0.1 www.alibabanet.net
127.0.0.1 maximuncash.com
127.0.0.1 www.maximuncash.com
127.0.0.1 abacus.netster.com
127.0.0.1 about.netster.com
127.0.0.1 addtosite.netster.com
127.0.0.1 customize.netster.com
127.0.0.1 hardy.netster.com
127.0.0.1 home.netster.com
127.0.0.1 in.netster.com
127.0.0.1 laurel.netster.com
127.0.0.1 mail.netster.com
127.0.0.1 main.netster.com
127.0.0.1 maps.netster.com
127.0.0.1 netster.xmlsearch.findwhat.com
127.0.0.1 ns1.netster.net
127.0.0.1 search.netster.com
127.0.0.1 travel.netster.com
127.0.0.1 yo.netster.com
127.0.0.1 cu.clickspring.net
127.0.0.1 pisces.clickspring.net
127.0.0.1 www.jimmysurf.com
127.0.0.1 www2.jimmysurf.com
127.0.0.1 ucbill.com
127.0.0.1 www.ucbill.com
127.0.0.1 www.lyricsdomain.com
127.0.0.1 buddylinks.net
127.0.0.1 origin.buddylinks.net
127.0.0.1 www.buddylinks.net
127.0.0.1 www.clkoptimizer.com
127.0.0.1 www.qoolaid.com
127.0.0.1 qoologic.com
127.0.0.1 adsrv.qoologic.com
127.0.0.1 www.qoologic.com
127.0.0.1 ad.rambler.ru
127.0.0.1 ad2.rambler.ru
127.0.0.1 counter.rambler.ru
127.0.0.1 images.rambler.ru
127.0.0.1 top100.rambler.ru
127.0.0.1 outwar.com
127.0.0.1 ads.rampidads.com
127.0.0.1 gallery.rampid.com
127.0.0.1 www.rampidads.com
127.0.0.1 banner.clickfinders.com
127.0.0.1 images.clickfinders.com
127.0.0.1 search.clickfinders.com
127.0.0.1 tracking.clickfinders.com
127.0.0.1 tracker.clickfinders.com
127.0.0.1 www.clickfinders.com
127.0.0.1 realnetworks.com
127.0.0.1 ad.realmedia.co.kr
127.0.0.1 realmedia.com
127.0.0.1 adv.247realmedia.com
127.0.0.1 247realmedia.com
127.0.0.1 icover.realmedia.com
127.0.0.1 mserv1.realmedia.com
127.0.0.1 network.realmedia.com
127.0.0.1 oad.realmedia.com
127.0.0.1 oas-central.realmedia.com
127.0.0.1 retaildirect.realmedia.com
127.0.0.1 va04.247media.com
127.0.0.1 realmedia-a800.d4p.net
127.0.0.1 ads.realmedia.ro
127.0.0.1 realtracker.com
127.0.0.1 adserver1.realtracker.com
127.0.0.1 adserver2.realtracker.com
127.0.0.1 business.realtracker.com
127.0.0.1 free.realtracker.com
127.0.0.1 layout1.realtracker.com
127.0.0.1 project2.realtracker.com
127.0.0.1 talkcity.realtracker.com
127.0.0.1 tpl1.realtracker.com
127.0.0.1 tpl2.realtracker.com
127.0.0.1 web1.realtracker.com
127.0.0.1 web2.realtracker.com
127.0.0.1 web3.realtracker.com
127.0.0.1 web4.realtracker.com
127.0.0.1 free1.usa.realtracker.com
127.0.0.1 www.realtracker.com
127.0.0.1 free1.realtrackernl.com
127.0.0.1 free.realtrackernl.com
127.0.0.1 11.rtcode.com
127.0.0.1 www.nethit-free.nl
127.0.0.1 i.real.com
127.0.0.1 realguide.real.com
127.0.0.1 chillout.real.com
127.0.0.1 outpost.real.com
127.0.0.1 take5.real.com
127.0.0.1 www.realld.com
127.0.0.1 conf.redswoosh.com
127.0.0.1 edn.redswoosh.com
127.0.0.1 install.redswoosh.com
127.0.0.1 www.redswoosh.com
127.0.0.1 conf.redswoosh.net
127.0.0.1 edn.redswoosh.net
127.0.0.1 els.redswoosh.net
127.0.0.1 install.redswoosh.net
127.0.0.1 www.redswoosh.net
127.0.0.1 a.rn11.com
127.0.0.1 e.rn11.com
127.0.0.1 i.rn11.com
127.0.0.1 img.rn11.com
127.0.0.1 rn11.com
127.0.0.1 www.rn11.com
127.0.0.1 internetwasher.com
127.0.0.1 alerts.internetwasher.com
127.0.0.1 download.internetwasher.com
127.0.0.1 download-ak.internetwasher.com
127.0.0.1 www.internetwasher.com
127.0.0.1 alerts.systemsoap.com
127.0.0.1 download-ak.systemsoap.com
127.0.0.1 e.systemsoap.com
127.0.0.1 secure.systemsoap.com
127.0.0.1 www.systemsoap.com
127.0.0.1 ba2.systemsoap.net
127.0.0.1 secure.systemsoap.net
127.0.0.1 es.1clickspyclean.com
127.0.0.1 www.malwhere.com
127.0.0.1 www.mynetprotector.com
127.0.0.1 www.scumware-remover.org
127.0.0.1 www.smartestsearch.com
127.0.0.1 www.softbulldog.com
127.0.0.1 www.spyassassin.com
127.0.0.1 lsjmp.com
127.0.0.1 www.pmstats.com
127.0.0.1 www.postalmanager.com
127.0.0.1 http.edge.ru4.com
127.0.0.1 http1.edge.ru4.com
127.0.0.1 http2.edge.ru4.com
127.0.0.1 http3.edge.ru4.com
127.0.0.1 http4.edge.ru4.com
127.0.0.1 http5.edge.ru4.com
127.0.0.1 http6.edge.ru4.com
127.0.0.1 http7.edge.ru4.com
127.0.0.1 http8.edge.ru4.com
127.0.0.1 http9.edge.ru4.com
127.0.0.1 http10.edge.ru4.com
127.0.0.1 http201.edge.ru4.com
127.0.0.1 http300.edge.ru4.com
127.0.0.1 http300.content.ru4.com
127.0.0.1 vpdc.ru4.com
127.0.0.1 ad-flow.com
127.0.0.1 ads.ad-flow.com
127.0.0.1 content.ad-flow.com
127.0.0.1 images.ad-flow.com
127.0.0.1 net.ad-flow.com
127.0.0.1 hotels.sidestep.com
127.0.0.1 www.sidestep.com
127.0.0.1 ads.sitemeter.com
127.0.0.1 sitemeter.com
127.0.0.1 sm2.sitemeter.com
127.0.0.1 sm3.sitemeter.com
127.0.0.1 sm4.sitemeter.com
127.0.0.1 sm5.sitemeter.com
127.0.0.1 sm6.sitemeter.com
127.0.0.1 sm7.sitemeter.com
127.0.0.1 sm8.sitemeter.com
127.0.0.1 sm9.sitemeter.com
127.0.0.1 s10.sitemeter.com
127.0.0.1 s11.sitemeter.com
127.0.0.1 s12.sitemeter.com
127.0.0.1 s13.sitemeter.com
127.0.0.1 s14.sitemeter.com
127.0.0.1 s15.sitemeter.com
127.0.0.1 www.sitemeter.com
127.0.0.1 www.jetpad.com
127.0.0.1 dlkw.drsnsrch.com
127.0.0.1 kw.drsnsrch.com
127.0.0.1 search2.drsnsrch.com
127.0.0.1 shopnav.com
127.0.0.1 apps.shopnav.com
127.0.0.1 soda.shopnav.com
127.0.0.1 www.shopnav.com
127.0.0.1 srng.net
127.0.0.1 aboutwebservices.com
127.0.0.1 sitetracker.com
127.0.0.1 www.sitetracker.com
127.0.0.1 www2a.sitetracker.com
127.0.0.1 free-stats.i8.com
127.0.0.1 site-stats.i8.com
127.0.0.1 free-counter.5u.com
127.0.0.1 hit-counter.5u.com
127.0.0.1 web-counter.5u.com
127.0.0.1 freestats.com
127.0.0.1 banner.freeservers.com
127.0.0.1 adtegrity.spinbox.net
127.0.0.1 ia.spinbox.net
127.0.0.1 netcomm.spinbox.net
127.0.0.1 spin.spinbox.net
127.0.0.1 vsii.spinbox.net
127.0.0.1 www.spinbox.net
127.0.0.1 www.banner-server-usa-english.com
127.0.0.1 downloads.default-homepage-network.com
127.0.0.1 si1.default-homepage-network.com
127.0.0.1 server274.passthison.com
127.0.0.1 www.passthison.com
127.0.0.1 www.smartbotpro.net
127.0.0.1 bluehavenmedia.com
127.0.0.1 www.bluehavenmedia.com
127.0.0.1 download.bulletproofsoft.com
127.0.0.1 www.bulletproofsoft.com
127.0.0.1 bigbrother.gigatechsoftware.com
127.0.0.1 download.gigatechsoftware.com
127.0.0.1 www.gigatechsoftware.com
127.0.0.1 www.greasycow.com
127.0.0.1 softwareds.com
127.0.0.1 download.softwareds.com
127.0.0.1 www.softwareds.com
127.0.0.1 www.porn-gizmo.com
127.0.0.1 www.topeleven.net
127.0.0.1 ads.osdn.com
127.0.0.1 sfads.osdn.com
127.0.0.1 images-aud-pg.osdn.com
127.0.0.1 images-aud.freshmeat.net
127.0.0.1 images-aud.slashdot.org
127.0.0.1 images-aud.sourceforge.net
127.0.0.1 imgserv.adbutler.com
127.0.0.1 adrotator.com
127.0.0.1 www.adrotator.com
127.0.0.1 www.sparkimg.com
127.0.0.1 counter.sparklit.com
127.0.0.1 vote.sparklit.com
127.0.0.1 webpoll.sparklit.com
127.0.0.1 ads.downloadaccelerator.com
127.0.0.1 search.downloadaccelerator.com
127.0.0.1 update.downloadaccelerator.com
127.0.0.1 webmaster.downloadaccelerator.com
127.0.0.1 downloadaccelerator.net
127.0.0.1 lidan.com
127.0.0.1 www.speedbit.com
127.0.0.1 redir.speedbit.com
127.0.0.1 ad4.speedbit.com
127.0.0.1 ad7.speedbit.com
127.0.0.1 ads1.speedbit.com
127.0.0.1 ads2.speedbit.com
127.0.0.1 ads3.speedbit.com
127.0.0.1 ads4.speedbit.com
127.0.0.1 ads7.speedbit.com
127.0.0.1 ads8.speedbit.com
127.0.0.1 ads9.speedbit.com
127.0.0.1 ads10.speedbit.com
127.0.0.1 download1.speedbit.com
127.0.0.1 download2.speedbit.com
127.0.0.1 download3.speedbit.com
127.0.0.1 images.speedbit.com
127.0.0.1 mirrorsearch.speedbit.com
127.0.0.1 www3.speedbit.com
127.0.0.1 spylog.com
127.0.0.1 banners.spylog.com
127.0.0.1 gstats.spylog.com
127.0.0.1 hits.spylog.com
127.0.0.1 my.spylog.com
127.0.0.1 stats.spylog.com
127.0.0.1 www.spylog.com
127.0.0.1 spylog.ru
127.0.0.1 dir.spylog.ru
127.0.0.1 dir1.spylog.ru
127.0.0.1 gs.spylog.ru
127.0.0.1 info.spylog.ru
127.0.0.1 present.spylog.ru
127.0.0.1 www.spylog.ru
127.0.0.1 counter.aport.ru
127.0.0.1 download.spywarelabs.com
127.0.0.1 install.spywarelabs.com
127.0.0.1 spywarelabs.fileburst.com
127.0.0.1 xml.spywarelabs.com
127.0.0.1 www.spywarelabs.com
127.0.0.1 www.achtungachtung.com
127.0.0.1 adserv.net
127.0.0.1 adtrak.net
127.0.0.1 ugl.adtrak.net
127.0.0.1 www.adtrak.net
127.0.0.1 allclicks.com
127.0.0.1 www.allclicks.com
127.0.0.1 atoque.com
127.0.0.1 www.atoque.com
127.0.0.1 bulkclicks.com
127.0.0.1 cashpile.com
127.0.0.1 www.cgistorehouse.com
127.0.0.1 www.clickhereforcellphones.com
127.0.0.1 www.clickheretofind.com
127.0.0.1 clickthrunet.net
127.0.0.1 ads.clickthru.net
127.0.0.1 clickthru.net
127.0.0.1 icon.clickthru.net
127.0.0.1 clickthrutraffic.com
127.0.0.1 www.clickthrutraffic.com
127.0.0.1 mojosearch.com
127.0.0.1 www.mojosearch.com
127.0.0.1 popuptraffic.com
127.0.0.1 media.popuptraffic.com
127.0.0.1 media2.popuptraffic.com
127.0.0.1 stats.popuptraffic.com
127.0.0.1 www.popuptraffic.com
127.0.0.1 searchtraffic.com
127.0.0.1 www.searchtraffic.com
127.0.0.1 www.standardinternet.com
127.0.0.1 www.stopannoyingpopups.com
127.0.0.1 sictalk.com
127.0.0.1 www.textlinks.com
127.0.0.1 tunders.com
127.0.0.1 search.turbofind.com
127.0.0.1 www.turbofind.com
127.0.0.1 go.startnow.com
127.0.0.1 minisearch.startnow.com
127.0.0.1 nav.startnow.com
127.0.0.1 search.startnow.com
127.0.0.1 srch.startnow.com
127.0.0.1 www.startnow.com
127.0.0.1 admin.startsurfing.com
127.0.0.1 download.startsurfing.com
127.0.0.1 rev.startsurfing.com
127.0.0.1 search.startsurfing.com
127.0.0.1 www.startsurfing.com
127.0.0.1 cometcursors.com
127.0.0.1 www.cometcursors.com
127.0.0.1 cometsystems.com
127.0.0.1 christmascursors.cometsystems.com
127.0.0.1 cometcursor.cometsystems.com
127.0.0.1 cometzone.cometsystems.com
127.0.0.1 content.cometsystems.com
127.0.0.1 download.cometsystems.com
127.0.0.1 f2.cometsystems.com
127.0.0.1 files.cc.cometsystems.com
127.0.0.1 files.cometsystems.com
127.0.0.1 mcc-fd.cometsystems.com
127.0.0.1 rd.yn.cometsystems.com
127.0.0.1 search2.cometsystems.com
127.0.0.1 webmail.cometsystems.com
127.0.0.1 cometzone.com
127.0.0.1 www.addrive.com
127.0.0.1 bluezipper.com
127.0.0.1 hpu.bluezipper.com
127.0.0.1 www.bluezipper.com
127.0.0.1 exceip.com
127.0.0.1 www.freeslide.com
127.0.0.1 jdaf.com
127.0.0.1 sbx1.com
127.0.0.1 jp1.sb01.com
127.0.0.1 sbase30.com
127.0.0.1 mx253.sb03.com
127.0.0.1 lc.squarepath.com
127.0.0.1 subscriberbase.com
127.0.0.1 www.weeklysurveys.com
127.0.0.1 targetnet.com
127.0.0.1 adpulse.ads.targetnet.com
127.0.0.1 fad-404.mtl4.targetnet.com
127.0.0.1 fad-407.mtl4.targetnet.com
127.0.0.1 fad-410.mtl4.targetnet.com
127.0.0.1 fad-1103.nyc1.targetnet.com
127.0.0.1 fad-1104.nyc1.targetnet.com
127.0.0.1 fad-1106.nyc1.targetnet.com
127.0.0.1 fad-1105.nyc1.targetnet.com
127.0.0.1 focusin.ads.targetnet.com
127.0.0.1 www.targetnet.com
127.0.0.1 focusin.com
127.0.0.1 www-401.focusin.com
127.0.0.1 www.focusin.com
127.0.0.1 ads.mamma.com
127.0.0.1 delfinproject.com
127.0.0.1 content.delfinproject.com
127.0.0.1 www.pgate-basic.com
127.0.0.1 ads.centralmedia.ws
127.0.0.1 c.centralmedia.ws
127.0.0.1 www.centralmedia.ws
127.0.0.1 www.memorymeter.com
127.0.0.1 www.totalvelocity.com
127.0.0.1 zsearchresults.com
127.0.0.1 zsearchtoolbar.com
127.0.0.1 www.zsearchtoolbar.com
127.0.0.1 tradedoubler.com
127.0.0.1 impfr.tradedoubler.com
127.0.0.1 impgb.tradedoubler.com
127.0.0.1 impit.tradedoubler.com
127.0.0.1 impse.tradedoubler.com
127.0.0.1 tracker.tradedoubler.com
127.0.0.1 mainentrypoint.com
127.0.0.1 in.mainentrypoint.com
127.0.0.1 lz.mainentrypoint.com
127.0.0.1 secure.mainentrypoint.com
127.0.0.1 vad.mainentrypoint.com
127.0.0.1 ftp.clicktracking.info
127.0.0.1 ez-searching.com
127.0.0.1 www.ez-searching.com
127.0.0.1 www.findology.com
127.0.0.1 findology.mail.everyone.net
127.0.0.1 www.special-t-travel.com
127.0.0.1 congratulations.travelengine.net
127.0.0.1 www.travelengine.net
127.0.0.1 www.trekblue.com
127.0.0.1 crossroad.trekdata.com
127.0.0.1 linktracker.angelfire.com
127.0.0.1 icache.getrelevant.com
127.0.0.1 ads.lycos.com
127.0.0.1 cm8.lycos.com
127.0.0.1 guestworld.tripod.lycos.com
127.0.0.1 ads.tripod.lycos.co.uk
127.0.0.1 oreo.matchmaker.com
127.0.0.1 ads.tripod.com
127.0.0.1 ads1.tripod.com
127.0.0.1 build.tripod.com
127.0.0.1 linktracker.tripod.com
127.0.0.1 nedstat.tripod.com
127.0.0.1 titan.guestworld.tripod.lycos.com
127.0.0.1 www.twistedhumor.com
127.0.0.1 www.crazydrinks.com
127.0.0.1 www.em5000.com
127.0.0.1 www.rankyou.com
127.0.0.1 www.wayweird.com
127.0.0.1 www.all2save.com
127.0.0.1 includes.all2save.com
127.0.0.1 andr.com
127.0.0.1 www.andr.com
127.0.0.1 bigsexvideos.com
127.0.0.1 www.bigsexvideos.com
127.0.0.1 duolaimi.net
127.0.0.1 www.duolaimi.net
127.0.0.1 eimg.com
127.0.0.1 www.eimg.com
127.0.0.1 glintbill.com
127.0.0.1 www.glintbill.com
127.0.0.1 gorefer.com
127.0.0.1 www.gorefer.com
127.0.0.1 hotqueens.com
127.0.0.1 banners.hotqueens.com
127.0.0.1 pix.hotqueens.com
127.0.0.1 www.hotqueens.com
127.0.0.1 www.loading-lolita.com
127.0.0.1 www.loveadot.com
127.0.0.1 mycpworld.com
127.0.0.1 www.mycpworld.com
127.0.0.1 mysearches.com
127.0.0.1 www.mysearches.com
127.0.0.1 mysearchstart.com
127.0.0.1 www.mysearchstart.com
127.0.0.1 quickfindit.net
127.0.0.1 www.quickfindit.net
127.0.0.1 searching.net
127.0.0.1 www.searching.net
127.0.0.1 searchscavenger.com
127.0.0.1 www.searchscavenger.com
127.0.0.1 www.sexarena.com
127.0.0.1 startingsearch.com
127.0.0.1 www.startingsearch.com
127.0.0.1 www.ultsearch.com
127.0.0.1 ultimatesearch.com
127.0.0.1 www.ultimatesearch.com
127.0.0.1 www.xjupiter.com
127.0.0.1 clear-search.com
127.0.0.1 r2.clrsch.com
127.0.0.1 status.clrsch.com
127.0.0.1 www.clrsch.com
127.0.0.1 clr-sch.com
127.0.0.1 sds.qckads.com
127.0.0.1 status.qckads.com
127.0.0.1 ads.bfast.com
127.0.0.1 bst.bfast.com
127.0.0.1 service.bfast.com
127.0.0.1 service2.bfast.com
127.0.0.1 www.yourcontrolpanel.com
127.0.0.1 befree.webdialogs.com
127.0.0.1 search123.com
127.0.0.1 click.search123.com
127.0.0.1 cgi.search123.com
127.0.0.1 partners.search123.com
127.0.0.1 www.search123.com
127.0.0.1 clickagents.com
127.0.0.1 ads.clickagents.com
127.0.0.1 st.clickagents.com
127.0.0.1 www.clickagents.com
127.0.0.1 mediaplex.com
127.0.0.1 adfarm.mediaplex.com
127.0.0.1 adfarm.snv.mediaplex.com
127.0.0.1 img.mediaplex.com
127.0.0.1 img-iad.mediaplex.com
127.0.0.1 img-cdn.mediaplex.com
127.0.0.1 img-snv.mediaplex.com
127.0.0.1 mimg-snv.mediaplex.com
127.0.0.1 mojofarm.mediaplex.com
127.0.0.1 mojoworks.mediaplex.com
127.0.0.1 www.mediaplex.com
127.0.0.1 valueclick.com
127.0.0.1 adclst03.valueclick.com
127.0.0.1 js.valueclick.com
127.0.0.1 kansas.valueclick.com
127.0.0.1 lbrain.valueclick.com
127.0.0.1 lbrain.la.valueclick.com
127.0.0.1 intra.valueclick.com
127.0.0.1 oz.valueclick.com
127.0.0.1 st.valueclick.com
127.0.0.1 st.la.valueclick.com
127.0.0.1 www.valueclick.com
127.0.0.1 ads.123m.valueclick.net
127.0.0.1 ads.6fig.valueclick.net
127.0.0.1 ads.baby.valueclick.net
127.0.0.1 ads.big.valueclick.net
127.0.0.1 ads.hdn.valueclick.net
127.0.0.1 ads.hlwd.valueclick.net
127.0.0.1 ads.hnet.valueclick.net
127.0.0.1 ads.huma.valueclick.net
127.0.0.1 ads.mb.valueclick.net
127.0.0.1 ads.pg.valueclick.net
127.0.0.1 ads.smm.valueclick.net
127.0.0.1 ads.pas.valueclick.net
127.0.0.1 ads.qcns.valueclick.net
127.0.0.1 ads.usta.valueclick.net
127.0.0.1 compnet.us.intellitxt.com
127.0.0.1 devshed.us.intellitxt.com
127.0.0.1 examnotes.us.intellitxt.com
127.0.0.1 experts.us.intellitxt.com
127.0.0.1 forbes.us.intellitxt.com
127.0.0.1 icentric.us.intellitxt.com
127.0.0.1 lmcd.us.intellitxt.com
127.0.0.1 rydium.us.intellitxt.com
127.0.0.1 toms.us.intellitxt.com
127.0.0.1 tribal.us.intellitxt.com
127.0.0.1 vibrantmedia.com
127.0.0.1 itxt.vibrantmedia.com
127.0.0.1 usads.vibrantmedia.com
127.0.0.1 usnews.vibrantmedia.com
127.0.0.1 www.vibrantmedia.com
127.0.0.1 toolbar.gograph.com
127.0.0.1 categories.mygeek.com
127.0.0.1 tp.mygeek.com
127.0.0.1 xmlsearch.mygeek.com
127.0.0.1 if.searchcentrix.com
127.0.0.1 search-o-matic2000.com
127.0.0.1 www.search-o-matic2000.com
127.0.0.1 vmn.net
127.0.0.1 seek4freetoolbar.mygeek.com
127.0.0.1 toolbar.pickoftheweb.com
127.0.0.1 updates.desktop.ak-networks.com
127.0.0.1 ads3.virtumundo.com
127.0.0.1 ads4.virtumundo.com
127.0.0.1 dyn.virtumundo.com
127.0.0.1 pchi-vtrk.virtumundo.com
127.0.0.1 privacy.virtumundo.com
127.0.0.1 vtrack.virtumundo.com
127.0.0.1 vmadmin.com
127.0.0.1 www.webhancer.com
127.0.0.1 a1.webhancer.com
127.0.0.1 d.webhancer.com
127.0.0.1 d2.webhancer.com
127.0.0.1 d3.webhancer.com
127.0.0.1 download.webhancer.com
127.0.0.1 dr1.webhancer.com
127.0.0.1 dr2.webhancer.com
127.0.0.1 prime.webhancer.com
127.0.0.1 reports.webhancer.com
127.0.0.1 server.webhancer.com
127.0.0.1 update.webhancer.com
127.0.0.1 b1-v2-bell.webhancer.com
127.0.0.1 vr1-v1.webhancer.com
127.0.0.1 vws-1.webhancer.com
127.0.0.1 www.realenduser.com
127.0.0.1 bannerco-op.com
127.0.0.1 bannersgomlm.com
127.0.0.1 www.bannersgomlm.com
127.0.0.1 bannersgomlm.buildreferrals.com
127.0.0.1 websidestory.com
127.0.0.1 support.websidestory.com
127.0.0.1 www.websidestory.com
127.0.0.1 statmarket.com
127.0.0.1 stats.statmarket.com
127.0.0.1 webconnect.net
127.0.0.1 wexchange.webconnect.net
127.0.0.1 remote.webconnect.net
127.0.0.1 reporting.webconnect.net
127.0.0.1 secure.webconnect.net
127.0.0.1 www.webconnect.net
127.0.0.1 www.worldata.com
127.0.0.1 a1964.g.akamai.net
127.0.0.1 akapp.whenu.com
127.0.0.1 akdwl.whenu.com
127.0.0.1 akweb.whenu.com
127.0.0.1 app.whenu.com
127.0.0.1 bidtxt.whenu.com
127.0.0.1 chromium.whenu.com
127.0.0.1 download.whenu.com
127.0.0.1 mercury.whenu.com
127.0.0.1 spweather.whenu.com
127.0.0.1 spweb.whenu.com
127.0.0.1 tin.whenu.com
127.0.0.1 titanium.whenu.com
127.0.0.1 web.whenu.com
127.0.0.1 weather.whenu.com
127.0.0.1 zinc.whenu.com
127.0.0.1 whenushop.whenu.com
127.0.0.1 www.whenu.com
127.0.0.1 getweathercast.com
127.0.0.1 pricebandit.com
127.0.0.1 www.pricebandit.com
127.0.0.1 www.whenushop.com
127.0.0.1 www.whenu.com.edgesuite.net
127.0.0.1 app.whenu.speedera.net
127.0.0.1 weather.whenu.speedera.net
127.0.0.1 web.whenu.speedera.net
127.0.0.1 whenusearch.com
127.0.0.1 www.whenusearch.com
127.0.0.1 www.ads234.com
127.0.0.1 www.midaddle.com
127.0.0.1 origin.statblaster.com
127.0.0.1 data.overpro.com
127.0.0.1 www.overpro.com
127.0.0.1 www.wildarcade.com
127.0.0.1 aimgames.wildtangent.com
127.0.0.1 aiminstaller.wildtangent.com
127.0.0.1 download.wildtangent.com
127.0.0.1 dl.dna.wildtangent.com
127.0.0.1 register.wildtangent.com
127.0.0.1 updaterservice.wildtangent.com
127.0.0.1 lycos.com.org
127.0.0.1 orbitcycle.com
127.0.0.1 banners.orbitcycle.com
127.0.0.1 shagorgag.orbitcycle.com
127.0.0.1 www.orbitcycle.com
127.0.0.1 wish7.com
127.0.0.1 www.wish7.com
127.0.0.1 your.wishbone.com
127.0.0.1 wapd.wishbone.com
127.0.0.1 www.wishbone.com
127.0.0.1 yeah.com
127.0.0.1 www.yeah.com
127.0.0.1 www.your.com
127.0.0.1 ads3.wunderground.com
127.0.0.1 ads.wunderground.com
127.0.0.1 as5000.wunderground.com
127.0.0.1 server.as5000.com
127.0.0.1 server2.as5000.com
127.0.0.1 ads.x10.com
127.0.0.1 contest.x10.com
127.0.0.1 control.x10.com
127.0.0.1 graphics.x10.com
127.0.0.1 images.x10.com
127.0.0.1 reports.x10.com
127.0.0.1 software.x10.com
127.0.0.1 store.x10.com
127.0.0.1 x10-beta.com
127.0.0.1 x10.com
127.0.0.1 www.x10.com
127.0.0.1 pic.geocities.com
127.0.0.1 visit.geocities.com
127.0.0.1 hostingprod.com
127.0.0.1 www.clicksor.com
127.0.0.1 www.infinityads.com
127.0.0.1 multipops.com
127.0.0.1 www1.multipops.com
127.0.0.1 www.multipops.com
127.0.0.1 gopopup.com
127.0.0.1 www.gopopup.com
127.0.0.1 paypopup.com
127.0.0.1 central.paypopup.com
127.0.0.1 central2.paypopup.com
127.0.0.1 www1.paypopup.com
127.0.0.1 www2.paypopup.com
127.0.0.1 www3.paypopup.com
127.0.0.1 www4.paypopup.com
127.0.0.1 www5.paypopup.com
127.0.0.1 www6.paypopup.com
127.0.0.1 www7.paypopup.com
127.0.0.1 www8.paypopup.com
127.0.0.1 www10.paypopup.com
127.0.0.1 www.paypopup.com
127.0.0.1 popinads.com
127.0.0.1 www.popinads.com
127.0.0.1 ads.zdnet.com
127.0.0.1 newads.cmpnet.com
127.0.0.1 datapop.cmpnet.com
127.0.0.1 cookies.cmpnet.com
127.0.0.1 com.com
127.0.0.1 ads.techtv.com
127.0.0.1 zedo.com
127.0.0.1 ads.zedo.com
127.0.0.1 c1.zedo.com
127.0.0.1 c2.zedo.com
127.0.0.1 c3.zedo.com
127.0.0.1 c4.zedo.com
127.0.0.1 c5.zedo.com
127.0.0.1 c6.zedo.com
127.0.0.1 c7.zedo.com
127.0.0.1 g.zedo.com
127.0.0.1 l1.zedo.com
127.0.0.1 l5.zedo.com
127.0.0.1 simg.zedo.com
127.0.0.1 xads.zedo.com
127.0.0.1 www.zedo.com
127.0.0.1 adserver.affiliatemg.com
127.0.0.1 secure.billingnow.com
127.0.0.1 www.buysmarter.com
127.0.0.1 genericscanner.com
127.0.0.1 www.genericscanner.com
127.0.0.1 stats1.iad1.gigaisp.net
127.0.0.1 locator.imagesrvr.com
127.0.0.1 innovativemarketing.com
127.0.0.1 www.innovativemarketing.com
127.0.0.1 internetantispy.com
127.0.0.1 www.internetantispy.com
127.0.0.1 www.kazaaplatinum.com
127.0.0.1 www.mp3u.com
127.0.0.1 ns2.iad1.nssrv.com
127.0.0.1 www.popupguard.com
127.0.0.1 stats1.reliablestats.com
127.0.0.1 www.stopguard.com
127.0.0.1 supportcs.com
127.0.0.1 ads.softwareoutfit.com
127.0.0.1 vantagesoftware.com
127.0.0.1 www.vantagesoftware.com
127.0.0.1 http.edge.vru4.com
127.0.0.1 winfirewall.com
127.0.0.1 www.winfirewall.com
127.0.0.1 www.winpopupguard.com
127.0.0.1 ads.offeroptimizer.com
127.0.0.1 reports.offeroptimizer.com
127.0.0.1 xadso.offeroptimizer.com
127.0.0.1 ximages.offeroptimizer.com
127.0.0.1 xlime.offeroptimizer.com
127.0.0.1 www.offeroptimizer.com
127.0.0.1 belt.abetterinternet.com
127.0.0.1 s.abetterinternet.com
127.0.0.1 thinstall.abetterinternet.com
127.0.0.1 www.abetterinternet.com
127.0.0.1 www.cleangetaway.biz
127.0.0.1 cr.stop-popup-ads-now.com
127.0.0.1 update.stop-popup-ads-now.com
127.0.0.1 1000funnyvideos.com
127.0.0.1 www.1000funnyvideos.com
127.0.0.1 www.aadcom.com
127.0.0.1 addictivetechnologies.net
127.0.0.1 www.acustat.com
127.0.0.1 at-games.com
127.0.0.1 www.at-games.com
127.0.0.1 www.mindsetinteractive.com
127.0.0.1 www.mindseti.com
127.0.0.1 banners.netpalgames.com
127.0.0.1 www.netpalgames.com
127.0.0.1 www.netpalnow.com
127.0.0.1 www.netpaloffers.net
127.0.0.1 internal.vx2.cc
127.0.0.1 mail.vx2.cc
127.0.0.1 transctl.vx2.cc
127.0.0.1 transctl-dev.vx2.cc
127.0.0.1 ns1.vx2.cc
127.0.0.1 ns2.vx2.cc
127.0.0.1 z1.vx2.cc
127.0.0.1 www.enconfidence.com
127.0.0.1 www.ileadmedia.com
127.0.0.1 a-d-w-a-r-e.com
127.0.0.1 www.a-d-w-a-r-e.com
127.0.0.1 ad-w-a-r-e.com
127.0.0.1 www.ad-w-a-r-e.com
127.0.0.1 kudd.com
127.0.0.1 www.kudd.com
127.0.0.1 www.look2me1.com
127.0.0.1 www.look2me2.com
127.0.0.1 www.look2me4.com
127.0.0.1 www.lovetraffic.com
127.0.0.1 nictechnetworks.com
127.0.0.1 www.nictechnetworks.com
127.0.0.1 similarsingles.com
127.0.0.1 www.similarsingles.com
127.0.0.1 datastorm.biz
127.0.0.1 www.datastorm.biz
127.0.0.1 www.kazanon.com
127.0.0.1 www.messagebroadcaster.net
127.0.0.1 odysseusmarketing.com
127.0.0.1 www.odysseusmarketing.com
127.0.0.1 searchassistant.net
127.0.0.1 cassandra.searchassistant.net
127.0.0.1 www.searchassistant.net
127.0.0.1 spywarehelp.net
127.0.0.1 www.spywarehelp.net
127.0.0.1 www.world-portal.com
127.0.0.1 clickalchemy.com
127.0.0.1 checkin.clickalchemy.com
127.0.0.1 grandstreetinteractive.com
127.0.0.1 badurl.grandstreetinteractive.com
127.0.0.1 sysupdate.grandstreetinteractive.com
127.0.0.1 www.grandstreetinteractive.com
127.0.0.1 www.ipinsight.com
127.0.0.1 download.ipinsight.net
127.0.0.1 sentrymon.ipinsight.net
127.0.0.1 server.ipinsight.net
127.0.0.1 www.ipinsight.net
127.0.0.1 drk.localnrd.com
127.0.0.1 www.mypanicbutton.com
127.0.0.1 www.mypctuneup.com
127.0.0.1 www.searchrabbit.com
127.0.0.1 thinkingmedia.net
127.0.0.1 www.thinkingmedia.net
127.0.0.1 680180.net
127.0.0.1 update.680180.net
127.0.0.1 www.680180.net
127.0.0.1 www.aimphuck.com
127.0.0.1 bundleware.com
127.0.0.1 spotresults.com
127.0.0.1 www.spotresults.com
127.0.0.1 www.websearch24.com
127.0.0.1 www.adultoweb.com
127.0.0.1 www.bloiscom.net
127.0.0.1 www.crackedearth.com
127.0.0.1 dialeraccess.com
127.0.0.1 dialercom.com
127.0.0.1 www.dialercom.com
127.0.0.1 dialerclub.com
127.0.0.1 www.dialerfactory.com
127.0.0.1 www.ebs-ag.com
127.0.0.1 www.eingang69.de
127.0.0.1 www.e-sexcash.com
127.0.0.1 software.global-netcom.de
127.0.0.1 www.goindirect.nu
127.0.0.1 secure.goodthinxx.com
127.0.0.1 www.holistyc.com
127.0.0.1 www.humorcash.com
127.0.0.1 www.humorcash.nl
127.0.0.1 www.ics900.com
127.0.0.1 66-128-204-6.rev.intercom.com
127.0.0.1 www.ip-tool.com
127.0.0.1 econnect.libereco.net
127.0.0.1 faq.mainpean.de
127.0.0.1 voicecall.mainpean.de
127.0.0.1 www.masterdialer.de
127.0.0.1 www.mediapay.de
127.0.0.1 www.netcom.net.uk
127.0.0.1 www.netmails.com
127.0.0.1 www.netpond.com
127.0.0.1 content.netvenda.com
127.0.0.1 www.netvenda.com
127.0.0.1 www.pluginaccess.com
127.0.0.1 stream.pussyharem.com
127.0.0.1 01.sharedsource.org
127.0.0.1 05.sharedsource.org
127.0.0.1 09.sharedsource.org
127.0.0.1 17.sharedsource.org
127.0.0.1 18.sharedsource.org
127.0.0.1 19.sharedsource.org
127.0.0.1 20.sharedsource.org
127.0.0.1 22.sharedsource.org
127.0.0.1 www.sharedsource.org
127.0.0.1 install.stardialer.de
127.0.0.1 stat.trafficadvance.net
127.0.0.1 cmi.ibill.com
127.0.0.1 secure.ibill.com
127.0.0.1 online-dialer.com
127.0.0.1 download.online-dialer.com
127.0.0.1 0190-dialer.com
127.0.0.1 download1.0190-dialer.com
127.0.0.1 download2.0190-dialer.com
127.0.0.1 download1.0190-dialers.com
127.0.0.1 download2.0190-dialers.com
127.0.0.1 www.accessplugin.com
127.0.0.1 connect.andlotsmore.com
127.0.0.1 www.crontel.com
127.0.0.1 diallerplugin.com
127.0.0.1 www.diallerplugin.com
127.0.0.1 ebony.andlotsmore.com
127.0.0.1 ebonyplugin.com
127.0.0.1 www.ebonyplugin.com
127.0.0.1 entryplugin.com
127.0.0.1 www.entryplugin.com
127.0.0.1 gaming.gamesplayground.com
127.0.0.1 gayplugin.com
127.0.0.1 www.gayplugin.com
127.0.0.1 great.andlotsmore.com
127.0.0.1 greatplugin.com
127.0.0.1 www.greatplugin.com
127.0.0.1 logoplugin.com
127.0.0.1 www.logoplugin.com
127.0.0.1 membersplugin.com
127.0.0.1 www.membersplugin.com
127.0.0.1 quickplugin.com
127.0.0.1 www.quickplugin.com
127.0.0.1 sexyplugin.com
127.0.0.1 www.sexyplugin.com
127.0.0.1 www.thebestplugin.com
127.0.0.1 webcam.andlotsmore.com
127.0.0.1 www.andlotsmore.com
127.0.0.1 scripts.downloadv3.com
127.0.0.1 fr4-scripts.downloadv3.com
127.0.0.1 usa-scripts.downloadv3.com
127.0.0.1 mirrors.egwn.net
127.0.0.1 pubvideo.egwn.net
127.0.0.1 pubvideo.us2.egwn.net
127.0.0.1 server02.us2.egwn.net
127.0.0.1 www.e-group.org
127.0.0.1 forum.electronic-group.com
127.0.0.1 legal.electronic-group.com
127.0.0.1 redirect01.fr4.egwn.net
127.0.0.1 www.ispdialer.com
127.0.0.1 media.rapid-pass.net
127.0.0.1 iclicks.net
127.0.0.1 www.iclicks.net
127.0.0.1 www9.megapornbucks.com
127.0.0.1 www.megapornbucks.com
127.0.0.1 megaporn.cf.mtreexxx.net
127.0.0.1 ams-download.nocreditcard.com
127.0.0.1 ams-download.nocreditcardgay.com
127.0.0.1 banners.nocreditcardgay.com
127.0.0.1 instant-access.nocreditcardgay.com
127.0.0.1 download.nocreditcardgay.com
127.0.0.1 network.nocreditcardgay.com
127.0.0.1 usa-network.nocreditcardgay.com
127.0.0.1 www.nocreditcardgay.com
127.0.0.1 banners.nocreditcard.com
127.0.0.1 download.nocreditcard.com
127.0.0.1 fr4-network.nocreditcard.com
127.0.0.1 usa-network.nocreditcard.com
127.0.0.1 webmaster.nocreditcard.com
127.0.0.1 fr4-download.nocreditcard.net
127.0.0.1 instant-access.nocreditcard.net
127.0.0.1 network.nocreditcard.net
127.0.0.1 www.nocreditcard.net
127.0.0.1 instant-access.sex-explorer.com
127.0.0.1 live.sex-explorer.com
127.0.0.1 lives.sex-explorer.com
127.0.0.1 network.strip-player.com
127.0.0.1 fr4-download.strip-player.com
127.0.0.1 fr4-download.stripplayer.com
127.0.0.1 download.stripplayer.com
127.0.0.1 usa-download.stripplayer.com
127.0.0.1 network.stripplayer.com
127.0.0.1 webmaster.stripplayer.com
127.0.0.1 www.strip-player.com
127.0.0.1 mediacharger.com
127.0.0.1 devfast.mediacharger.com
127.0.0.1 download.mediacharger.com
127.0.0.1 www.pml.mediacharger.com
127.0.0.1 join.movienetworks.com
127.0.0.1 www.movienetworks.com
127.0.0.1 popcorn.net
127.0.0.1 join.popcorn.net
127.0.0.1 mp3.popcorn.net
127.0.0.1 www.real-tens.com
127.0.0.1 members.swimsuitnetwork.com
127.0.0.1 www.swimsuitnetwork.com
127.0.0.1 www.dialeradmin.com
127.0.0.1 directplugin.com
127.0.0.1 go-in-now.com
127.0.0.1 goinnow.com
127.0.0.1 www.goinnow.com
127.0.0.1 movie-browser.com
127.0.0.1 www.movie-browser.com
127.0.0.1 statsbank.com
127.0.0.1 images.tibsystems.com
127.0.0.1 stats.tibsystems.com
127.0.0.1 sg1.tibsystems.com
127.0.0.1 us-sg1.tibsystems.com
127.0.0.1 www.tibsystems.com
127.0.0.1 aakro.nl
127.0.0.1 counter.adultcheck.com
127.0.0.1 adserver.adultfriendfinder.com
127.0.0.1 banners.adultfriendfinder.com
127.0.0.1 guest.adultfriendfinder.com
127.0.0.1 banners.asiafriendfinder.com
127.0.0.1 www.adultbrowser.com
127.0.0.1 adultlinksco.com
127.0.0.1 www.adultlinksco.com
127.0.0.1 dn.adzerver.com
127.0.0.1 temp.adzerver.com
127.0.0.1 ctc.amateurpages.com
127.0.0.1 ads.asexstories.com
127.0.0.1 clicks.asianamateurpages.com
127.0.0.1 images.atweb.com
127.0.0.1 www.1adexchange.com
127.0.0.1 www.anne.cc
127.0.0.1 banners.babylon-x.com
127.0.0.1 blacksnake.com
127.0.0.1 cashcount.com
127.0.0.1 www.cashcount.com
127.0.0.1 cashclicks.com
127.0.0.1 www.cashclicks.com
127.0.0.1 stats.cashring.com
127.0.0.1 cashtour.com
127.0.0.1 www.cashtour.com
127.0.0.1 refer.ccbill.com
127.0.0.1 button.clickability.com
127.0.0.1 apps.clickcash.com
127.0.0.1 www.clickcash.com
127.0.0.1 counter4all.dk
127.0.0.1 banner-exchange.directbanners.com
127.0.0.1 clicks.equantum.com
127.0.0.1 www.exitmoney.com
127.0.0.1 ad.erasercash.com
127.0.0.1 www.erasercash.com
127.0.0.1 www.exitforcash.com
127.0.0.1 adult.exitreturn.com
127.0.0.1 adserv.exxxit.com
127.0.0.1 freexxxplace.com
127.0.0.1 freeticketcash.com
127.0.0.1 adserver.friendfinder.com
127.0.0.1 banners.friendfinder.com
127.0.0.1 e89.friendfinder.com
127.0.0.1 frontpagecash.com
127.0.0.1 www.frontpagecash.com
127.0.0.1 www.fpctraffic.com
127.0.0.1 fpctraffic2.com
127.0.0.1 www.fpctraffic2.com
127.0.0.1 c.fsx.com
127.0.0.1 gaysexswap.com
127.0.0.1 cgi.gaysexswap.com
127.0.0.1 arsconsole.global-intermedia.com
127.0.0.1 feeds.global-intermedia.com
127.0.0.1 www.hornyhits.biz
127.0.0.1 adcluster.humaniq.com
127.0.0.1 exitstitial.infospacehosting.net
127.0.0.1 banners.internetsexprovider.com
127.0.0.1 server2.internetdump.com
127.0.0.1 asians.join4free.com
127.0.0.1 join4free.com
127.0.0.1 banners.largecash.com
127.0.0.1 www.M27Power.com
127.0.0.1 adult.master-tv.net
127.0.0.1 www1.massivepass.com
127.0.0.1 mass-traffic.com
127.0.0.1 www.megacounter.de
127.0.0.1 resources.maxcash.com
127.0.0.1 stats.maximumcash.com
127.0.0.1 www.maximumcash.com
127.0.0.1 ad.naked-celebs.com
127.0.0.1 clicks.nastydollars.com
127.0.0.1 grab.nastydollars.com
127.0.0.1 www.nzads.net.nz
127.0.0.1 www.okmmm.com
127.0.0.1 onlysex.ws
127.0.0.1 oxcash.com
127.0.0.1 clicks2.oxcash.com
127.0.0.1 popup.oxcash.com
127.0.0.1 track.oxcash.com
127.0.0.1 paycounter.com
127.0.0.1 images1.paycounter.com
127.0.0.1 in.paycounter.com
127.0.0.1 stats.paycounter.com
127.0.0.1 www.paycounter.com
127.0.0.1 pinkcount.com
127.0.0.1 www.pinkcount.com
127.0.0.1 www.pinkyellow.com
127.0.0.1 banners.playboystore.com
127.0.0.1 c.porngraph.com
127.0.0.1 www.prostol.com
127.0.0.1 purebleep.com
127.0.0.1 ads.purebleep.com
127.0.0.1 stats1.pussypayments.com
127.0.0.1 banners.pythonvideo.com
127.0.0.1 banners2.pythonvideo.com
127.0.0.1 tracker.pythonvideo.com
127.0.0.1 www.rawtocash.net
127.0.0.1 exit.sellyourexit.com
127.0.0.1 www.sellyourexit.com
127.0.0.1 ct.sexadnet.com
127.0.0.1 stats.sexcheck.com
127.0.0.1 hits.sexcites.com
127.0.0.1 adv.sexcounter.com
127.0.0.1 cs.sexcounter.com
127.0.0.1 www.sexhit.com
127.0.0.1 members.sexroulette.com
127.0.0.1 www.sex-true.com
127.0.0.1 ads.sexplanets.com
127.0.0.1 ads.sexspaces.com
127.0.0.1 sexswap.com
127.0.0.1 cgi.sexswap.com
127.0.0.1 cgi.sexswap2.com
127.0.0.1 cgi.sexswap2000.com
127.0.0.1 hestia.sextrail.com
127.0.0.1 codice.shinystat.it
127.0.0.1 link.siccash.com
127.0.0.1 www.silvercash.com
127.0.0.1 click.silvercash.com
127.0.0.1 exit.silvercash.com
127.0.0.1 stats.smartbucks.com
127.0.0.1 ds.starmedia.com
127.0.0.1 sexyque.com
127.0.0.1 stickylist.com
127.0.0.1 supersexpass.com
127.0.0.1 lstat.susanin.com
127.0.0.1 more.teens3.com
127.0.0.1 pics.teens3.com
127.0.0.1 www.teens3.com
127.0.0.1 www.thehun.net
127.0.0.1 stats.trafficasap.com
127.0.0.1 www.trafficstandard.com
127.0.0.1 trickys.com
127.0.0.1 banners.truecash.com
127.0.0.1 streaming.tv69.com
127.0.0.1 freecounter.unms.com
127.0.0.1 hit1.vioclicks.com
127.0.0.1 view1.vioclicks.com
127.0.0.1 www.web-exit.com
127.0.0.1 programs.wegcash.com
127.0.0.1 ads.xbiz.com
127.0.0.1 xlocator.com
127.0.0.1 counter.xxxcool.com
127.0.0.1 www.xxx-exits.com
127.0.0.1 www.anal-oral.net
127.0.0.1 xrenoder.com
127.0.0.1 cj.xrenoder.com
127.0.0.1 cons.xrenoder.com
127.0.0.1 scripts.xrenoder.com
127.0.0.1 xrenosearch.com
127.0.0.1 www.xrenosearch.com
127.0.0.1 www.z69.com
127.0.0.1 www.ziportal.com
127.0.0.1 www.700k.com
127.0.0.1 clicks.adultplex.com
127.0.0.1 images.adultplex.com
127.0.0.1 stats.adultplex.com
127.0.0.1 signup.adultplex.com
127.0.0.1 www.mythumbz.com
127.0.0.1 www.animetoolbar.com
127.0.0.1 authorizedsearchagents.com
127.0.0.1 www.bdsmtoolbar.com
127.0.0.1 www.bigtitstoolbar.com
127.0.0.1 www.dailytoolbar.com
127.0.0.1 www.ebonytoolbar.com
127.0.0.1 ebtmarketing.com
127.0.0.1 www.ebtmarketing.com
127.0.0.1 www.fetishtoolbar.com
127.0.0.1 www.gayxxxtoolbar.com
127.0.0.1 www.hardcoretoolbar.com
127.0.0.1 www.maturetoolbar.com
127.0.0.1 nichetoolbars.com
127.0.0.1 www.nichetoolbars.com
127.0.0.1 www.shemaletoolbar.com
127.0.0.1 www.twinktoolbar.com
127.0.0.1 ads.adultcash.com
127.0.0.1 home.adultcash.com
127.0.0.1 www.crazyprotocol.com
127.0.0.1 www.traffichog.com
127.0.0.1 cgi.sexlist.com
127.0.0.1 vis.sexlist.com
127.0.0.1 lobby.sexlist.com
127.0.0.1 xit.sexlist.com
127.0.0.1 thecounter.com
127.0.0.1 c1.thecounter.com
127.0.0.1 c2.thecounter.com
127.0.0.1 c3.thecounter.com
127.0.0.1 www.TheCounter.com
127.0.0.1 couldnotfind.com
127.0.0.1 www.couldnotfind.com
127.0.0.1 advertising.gammae.com
127.0.0.1 hourly.gammae.com
127.0.0.1 php.gammae.com
127.0.0.1 isearchtech.com
127.0.0.1 power-cleaner.com
127.0.0.1 www.power-cleaner.com
127.0.0.1 sidefind.com
127.0.0.1 www.sidefind.com
127.0.0.1 adult.slotch.com
127.0.0.1 www.slotch.com
127.0.0.1 www.slotchbar.com
127.0.0.1 xxxtoolbar.com
127.0.0.1 www.xxxtoolbar.com
127.0.0.1 amateur.xxxcounter.com
127.0.0.1 c1.xxxcounter.com
127.0.0.1 c2.xxxcounter.com
127.0.0.1 c3.xxxcounter.com
127.0.0.1 free.xxxcounter.com
127.0.0.1 grafix.xxxcounter.com
127.0.0.1 mature.xxxcounter.com
127.0.0.1 other.xxxcounter.com
127.0.0.1 rr1.xxxcounter.com
127.0.0.1 rr2.xxxcounter.com
127.0.0.1 rr3.xxxcounter.com
127.0.0.1 rr4.xxxcounter.com
127.0.0.1 rr5.xxxcounter.com
127.0.0.1 exit.xpays.com
127.0.0.1 www.xpays.com
127.0.0.1 adrevservice.com
127.0.0.1 adult.adrevservice.com
127.0.0.1 www.adrevservice.com
127.0.0.1 www.adultrevenueservice.com
127.0.0.1 clicktraq.mtree.com
127.0.0.1 dyntraq.mtree.com
127.0.0.1 mt1.mtree.com
127.0.0.1 mt2.mtree.com
127.0.0.1 mt19.mtree.com
127.0.0.1 mt20.mtree.com
127.0.0.1 mt21.mtree.com
127.0.0.1 mt22.mtree.com
127.0.0.1 mt23.mtree.com
127.0.0.1 mt31.mtree.com
127.0.0.1 mt32.mtree.com
127.0.0.1 mt33.mtree.com
127.0.0.1 mt34.mtree.com
127.0.0.1 mt37.mtree.com
127.0.0.1 mt44.mtree.com
127.0.0.1 mt78.mtree.com
127.0.0.1 mt90.mtree.com
127.0.0.1 mt94.mtree.com
127.0.0.1 mt111.mtree.com
127.0.0.1 mt112.mtree.com
127.0.0.1 mt113.mtree.com
127.0.0.1 mt123.mtree.com
127.0.0.1 porn.mtree.com
127.0.0.1 psy.mtree.com
127.0.0.1 ss.mtree.com
127.0.0.1 the.mtree.com
127.0.0.1 wm.mtree.com
127.0.0.1 mtreexxx.net
127.0.0.1 freelivesex.cf.mtreexxx.net
127.0.0.1 freeticketcash.cf.mtreexxx.net
127.0.0.1 join4free.cf.mtreexxx.net
127.0.0.1 image2000.mtreexxx.net
127.0.0.1 xxx.mtreexxx.net
127.0.0.1 www7.mtreexxx.net
127.0.0.1 www.mtreexxx.net
127.0.0.1 www.mtreexxx.nl
127.0.0.1 banners.outster.com
127.0.0.1 c1.outster.com
127.0.0.1 c2.outster.com
127.0.0.1 links.outster.com
127.0.0.1 misc.outster.com
127.0.0.1 start.outster.com
127.0.0.1 stats.outster.com
127.0.0.1 aphrodite.porntrack.com
127.0.0.1 stats1.porntrack.com
127.0.0.1 stats3.porntrack.com
127.0.0.1 sextracker.com
127.0.0.1 the.sextracker.com
127.0.0.1 adserver.sextracker.com
127.0.0.1 banners.sextracker.com
127.0.0.1 cbird.sextracker.com
127.0.0.1 cbird6.sextracker.com
127.0.0.1 counter1.sextracker.com
127.0.0.1 counter2.sextracker.com
127.0.0.1 counter3.sextracker.com
127.0.0.1 counter4.sextracker.com
127.0.0.1 counter5.sextracker.com
127.0.0.1 counter6.sextracker.com
127.0.0.1 counter7.sextracker.com
127.0.0.1 counter8.sextracker.com
127.0.0.1 counter9.sextracker.com
127.0.0.1 counter10.sextracker.com
127.0.0.1 counter11.sextracker.com
127.0.0.1 counter12.sextracker.com
127.0.0.1 counter13.sextracker.com
127.0.0.1 counter14.sextracker.com
127.0.0.1 counter15.sextracker.com
127.0.0.1 counter16.sextracker.com
127.0.0.1 clit.sextracker.com
127.0.0.1 clit1.sextracker.com
127.0.0.1 clit2.sextracker.com
127.0.0.1 clit3.sextracker.com
127.0.0.1 clit4.sextracker.com
127.0.0.1 clit5.sextracker.com
127.0.0.1 clit6.sextracker.com
127.0.0.1 clit7.sextracker.com
127.0.0.1 clit8.sextracker.com
127.0.0.1 clit9.sextracker.com
127.0.0.1 clit10.sextracker.com
127.0.0.1 clit11.sextracker.com
127.0.0.1 clit12.sextracker.com
127.0.0.1 clit13.sextracker.com
127.0.0.1 clit14.sextracker.com
127.0.0.1 clit15.sextracker.com
127.0.0.1 graphics1.sextracker.com
127.0.0.1 graphics2.sextracker.com
127.0.0.1 hosting.sextracker.com
127.0.0.1 links.sextracker.com
127.0.0.1 mau.sextracker.com
127.0.0.1 stat1.sextracker.com
127.0.0.1 start.sextracker.com
127.0.0.1 stx.sextracker.com
127.0.0.1 stx1.sextracker.com
127.0.0.1 stx2.sextracker.com
127.0.0.1 stx3.sextracker.com
127.0.0.1 stx4.sextracker.com
127.0.0.1 stx5.sextracker.com
127.0.0.1 stx6.sextracker.com
127.0.0.1 stx7.sextracker.com
127.0.0.1 stx8.sextracker.com
127.0.0.1 stx9.sextracker.com
127.0.0.1 stx10.sextracker.c

#8 builder2818

builder2818
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:02:43 PM

Posted 26 February 2007 - 05:51 AM

the smartfraudfix txt file is so big. here is the rest of it.

127.0.0.1 stx10.sextracker.com
127.0.0.1 stx11.sextracker.com
127.0.0.1 stx12.sextracker.com
127.0.0.1 stx13.sextracker.com
127.0.0.1 stx14.sextracker.com
127.0.0.1 stx15.sextracker.com
127.0.0.1 stxbans.sextracker.com
127.0.0.1 webmasters.sextracker.com
127.0.0.1 stx.banners.sextracker.com
127.0.0.1 wm.banners.sextracker.com
127.0.0.1 track.adultdialersolution.com
127.0.0.1 adultrevenueservice.com
127.0.0.1 counter.adultrevenueservice.com
127.0.0.1 stats.adultrevenueservice.com
127.0.0.1 banners.leadingedgecash.com
127.0.0.1 www.leadingedgecash.com
127.0.0.1 www.albiondrugs.com
127.0.0.1 adshooter.com
127.0.0.1 www.adshooter.com
127.0.0.1 www.customersupporthelp.com

»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

C:\WINDOWS\.protected Deleted
C:\DOCUME~1\User\STARTM~1\Programs\Startup\.protected Deleted
C:\DOCUME~1\ALLUSE~1\STARTM~1\Programs\Startup\.protected Deleted

»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

#9 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:04:43 AM

Posted 26 February 2007 - 08:54 AM

Hello,

Yes, the smitfraudfix log looks so long since the contents of your hosts file is displayed in it as well. All above malwaresites are blocked, which is good.

Anyway, looking a lot better here, but we are not finished yet..

* Start HijackThis, close all open windows leaving only HijackThis running. Place a check against each of the following:

O2 - BHO: (no name) - {1859A5B4-7811-4FE1-B557-740A480AA83C} - C:\WINDOWS\system32\oppnn.dll (file missing)
O2 - BHO: (no name) - {614FF1F1-34E1-458B-9D26-9E9870BF3FCD} - C:\WINDOWS\system32\byvwv.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll (file missing)
O2 - BHO: (no name) - {E03C740E-BB24-4d3c-B92A-6F84DE1DD99C} - C:\WINDOWS\system32\uuwldpoc.dll (file missing)
O2 - BHO: (no name) - {ED72B5A7-562D-4639-93A0-45CE3643CF0D} - C:\WINDOWS\system32\yayvstu.dll (file missing)
O20 - Winlogon Notify: byvwv - C:\WINDOWS\system32\byvwv.dll (file missing)
O20 - Winlogon Notify: oppnn - C:\WINDOWS\system32\oppnn.dll (file missing)
O20 - Winlogon Notify: winzjc32 - winzjc32.dll (file missing)
O20 - Winlogon Notify: yayvstu - yayvstu.dll (file missing)


* Click on Fix Checked when finished and exit HijackThis.
Make sure your Internet Explorer is closed when you click Fix Checked!

Please set your system to show all files.
Click Start.
Open My Computer.
Select the Tools menu and click Folder Options.
Select the View Tab. Under the Hidden files and folders heading, select Show hidden files and folders.
Uncheck: Hide file extensions for known file types
Uncheck the Hide protected operating system files (recommended) option.
Click Yes to confirm.
Click OK.

Please hide your hidden files and folders afterwards again, when we are done with this thread and your problems are solved, because above instructions to set your system to show all files, unhide legit files and folders as well.
And I don't want you to delete them because they may look suspicious. To hide them again, just perform the above instructions in the opposite way.


Delete next folders and files:

C:\VundoFix Backups <== folder
C:\WINDOWS\system32\dwahimg.dll
C:\WINDOWS\system32\zqgndnb.dll
C:\WINDOWS\system32\pqqss.bak1
C:\Program Files\Common Files\WinAntiSpyware 2006 <== folder
C:\Program Files\Common Files\{04708DED-0954-3081-1002-02020821003d} <== folder
C:\WINDOWS\system32\hfclzpf.dll
C:\WINDOWS\system32\gthfjmd.dll
C:\WINDOWS\system32\vwvyb.ini2
C:\Documents and Settings\User\Application Data\WinAntiSpyware 2006 <== folder
C:\WINDOWS\system32\vwvyb.bak1
C:\WINDOWS\system32\omynywh.dll
C:\WINDOWS\system32\ekuefub.dll

Next folders that you have to remove is a bit more advanced. This because they may look like legit folders, so it's important you don't delete the legitimate folder here instead. That's why I will also add the time/date when these folders are modified/created.
Also, it's important that you don't use the search function, but actually browse to the folders to delete them, because the searchfunction may display the legit folders instead.
To find out what date/time they have, rightclick the folder and choose properties.

Delete next folders:

C:\Program Files\Common Files\??sks <== this folder, will most probably look like tasks and is created/modifed 2007-02-25 22:49:04. Do NOT delete the C:\Windows\Tasks folder!!

C:\Program Files\?asks <== this folder, will most probably look like tasks and is created/modifed 2007-02-25 15:47:09. Do NOT delete the C:\Windows\Tasks folder!!

C:\WINDOWS\system32\??stem32 <== this folder, will most probably look like system32. Be carefull here, this is NOT the legit system32 folder. This bogus folder is present IN the system32-folder, so really make sure that you don't try to delete the legit system32-folder!!
The date/time is 2007-02-25 17:59:17

* Open notepad and copy and paste next present in the quotebox below in it:
(don't forget to copy and paste REGEDIT4)

REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{ED72B5A7-562D-4639-93A0-45CE3643CF0D}"=-

[-HKEY_CLASSES_ROOT\CLSID\{ED72B5A7-562D-4639-93A0-45CE3643CF0D}]

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

Save this as fix.reg Choose to save as *all files and place it on your desktop.
It should look like this: Posted Image
Doubleclick on it and when it asks you if you want to merge the contents to the registry, click yes/ok.
(In case you are unsure how to create a reg file, take a look here with screenshots.)

Your version of Java is outdated and needs to be updated to take advantage of fixes that have eliminated security vulnerabilities.
Updating Java:
  • Download the latest version of Java Runtime Environment (JRE) 6.0.
  • Scroll down to where it says "Java Runtime Environment (JRE) 6".
  • Click the "Download" button to the right.
  • Check the box that says: "Accept License Agreement".
  • The page will refresh.
  • Click on the link to download Windows Offline Installation, Multi-language and save to your desktop.
  • Close any programs you may have running - especially your web browser.
  • Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
  • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
    - Examples of older versions in Add or Remove Programs:
    • Java 2 Runtime Environment, SE v1.4.2
    • J2SE Runtime Environment 5.0
    • J2SE Runtime Environment 5.0 Update 6
  • Click the Remove or Change/Remove button.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on jre-6-windows-i586.exe to install the newest version.
* Clean your Cache and Cookies in IE:
  • Close all instances of Outlook Express and Internet Explorer
  • Go to Control Panel > Internet Options > General tab
  • Under Browsing History, click "Delete".
  • Click "Delete Files", "Delete cookies" and "Delete history"
  • Click Close below.
* Clean your Cache and Cookies in Firefox (In case you also have Firefox installed):
  • Go to Tools > Options.
  • Click Privacy in the menu..
  • Click the Clear now button below.. A new window will popup what to clear.
  • Select all and click the Clear button again.
  • Click OK to close the Options window
* Clean other Temporary files + Recycle bin
  • Go to start > run and type: cleanmgr and click ok.
  • Let it scan your system for files to remove.
  • Make sure Temporary Files, Temporary Internet Files, and Recycle Bin are the only things checked.
  • Press OK to remove them.
Post a new Hijackthislog in your next reply.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#10 builder2818

builder2818
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:02:43 PM

Posted 27 February 2007 - 06:04 AM

Hello,
things are starting to look alot better on my comp now. The only thing I couldn't do on your list was to update my Java runtime because theie website was temporarily offline for maintenance. Is it ok if I just keep trying to get the download and follow that instruction when I get the chance?

But anyway, here is the latest HiJackthis logfile:

Logfile of HijackThis v1.99.1
Scan saved at 10:01:54 PM, on 27/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
C:\Program Files\HijackThis\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [SynTPLpr] "C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
O4 - HKLM\..\Run: [SynTPEnh] "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] "C:\PROGRA~1\SYMNET~1\SNDMon.exe" /Consumer
O4 - HKLM\..\Run: [EPSON PictureMate 500] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9TE.EXE /P21 "EPSON PictureMate 500" /O6 "USB002" /M "PictureMate 500"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SNM] C:\Program Files\SpyNoMore\SNM.exe /startup
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Secreset.lnk = C:\WINDOWS\system32\config\secreset.bat
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by106fd.bay106.hotmail.msn.com/resources/MsnPUpld.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

regards
Luke

#11 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:04:43 AM

Posted 27 February 2007 - 07:38 AM

Hi,

Your Hijackthislog looks clean again.

The only thing I couldn't do on your list was to update my Java runtime because theie website was temporarily offline for maintenance. Is it ok if I just keep trying to get the download and follow that instruction when I get the chance?

Yes, just try it later again. :thumbsup:

Please read my Prevention page with lots of info and tips how to prevent this in the future.
And if you want to improve speed/system performance after malware removal, take a look here.

Happy Surfing again!
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#12 builder2818

builder2818
  • Topic Starter

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:02:43 PM

Posted 27 February 2007 - 02:09 PM

Hello,
Thanks for everything, my comp is working great now, i have also noticed an increase in its speed when operating it.

I read your links on how to protect in the future, very interesting there is alot of stuff i didn't know about.

Regards
Luke

#13 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:04:43 AM

Posted 27 February 2007 - 02:13 PM

You're most welcome. :thumbsup:
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.

#14 miekiemoes

miekiemoes

    Malware Killer Dog


  • Malware Response Team
  • 19,420 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Belgium
  • Local time:04:43 AM

Posted 01 March 2007 - 07:50 PM

Since this issue appears resolved ... this Topic is closed.
If you need this topic reopened for continuations of existing problems, please request this by sending me a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.
AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! My computer is slow---My Blog---Follow me on Twitter.
My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!
Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users