Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Help please

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Help please

Unread postby dmmiller360 » September 18th, 2007, 10:35 am

Hi,

I think I have downloaded a virus, I have run different virus scans and malware scans but nothing is getting rid of my problem.

Here is my problem, I can not get into any administrative files, can't get into the control panel or anything that has to do with changing any computer system files. The error message I get is " This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator". There is no system administrator for our system, it is the only system here, and I use to be able to access the control panel, ect...

Here is the log file.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:47:44 AM, on 9/18/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\ParetoLogic\Anti-Spyware\Pareto_AS.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe
C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\Program Files\Verizon Wireless\V CAST Music\V CAST Music Monitor.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\WINDOWS\system32\svchost.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54GSv2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\printer.exe
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ParetoLogic Anti-Spyware] "C:\Program Files\ParetoLogic\Anti-Spyware\Pareto_AS.exe" -NM -hidesplash
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8
O4 - HKCU\..\Run: [EasyLinkAdvisor] "C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" /startup
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: V CAST Music Monitor.lnk = C:\Program Files\Verizon Wireless\V CAST Music\V CAST Music Monitor.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: cflive.adpclaims.com
O16 - DPF: {40F8967E-34A6-474A-837A-CEC1E7DAC54C} - https://accounting.quickbooks.com/c1/v15.592/qboax9.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/share ... insctl.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 0061798468
O16 - DPF: {843EE768-3A97-455C-9076-741BA3AD7B62} (QuickBooks Online Edition Utilities Class v10) - https://accounting.quickbooks.com/c2/v1 ... boax10.cab
O16 - DPF: {A93D84FD-641F-43AE-B963-E6FA84BE7FE7} (LinkSys Content Update) - http://www.linksysfix.com/netcheck/67/i ... downls.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/share ... cgdmgr.cab
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -
O17 - HKLM\System\CCS\Services\Tcpip\..\{AA099E59-0FA8-450C-90AA-E02B3632F6EC}: NameServer = 192.168.1.1
O20 - AppInit_DLLs: C:\WINDOWS\system32\systems.txt
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: WUSB54GSv2SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe

--
End of file - 9490 bytes


Thank you,
Debra
dmmiller360
Active Member
 
Posts: 8
Joined: September 18th, 2007, 10:19 am
Advertisement
Register to Remove

Unread postby Navigator » September 18th, 2007, 9:40 pm

Hello Debra...welcome to Malware Removal!

The restrictions to your control panel etc. were probably placed on your system by the malware ...I will try my best to help you clean your system.

1. Open HijackThis, click Open Misc Tools
Click "Open Uninstall Manager"
Click "Save List" (generates uninstall_list.txt)
Click Save, copy and paste the results in your next post.

2. Please download SmitfraudFix (by S!Ri) to your Desktop.

Double-click SmitfraudFix.exe
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

**If the tool fails to launch from the Desktop, please move SmitfraudFix.exe directly to the root of the system drive (usually C:), and launch from there.


Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consulting/proc...processutil.htm


Post back with these two logs and we can try to fix the system...
User avatar
Navigator
MRU Honors Grad Emeritus
 
Posts: 1237
Joined: December 21st, 2005, 8:35 pm
Location: Missouri

Scan results

Unread postby dmmiller360 » September 19th, 2007, 8:57 am

Hi,

Here are the results.

Thank you,
Debra

Able2Extract Professional v4.0
Able2Extract v4.0
Adobe Flash Player ActiveX
Adobe Reader 7.0.8
ADP Training
a-squared Free 3.0
Banctec Service Agreement
BodyShop Office
Broadcom Management Programs
CardRd81
CCScore
ClientComm
ClientComm
Comp-Est
CR2
Dell Digital Jukebox Driver
Dell Driver Reset Tool
Dell Media Experience
Dell ResourceCD
Dell Support
DellSupport
Drivers Install For Linksys Easylink Advisor
eJuster Transfer
eJuster Transfer (C:\Program Files\EAC\)
ESSBrwr
ESSCDBK
ESScore
ESSgui
ESShelp
ESSini
ESSPCD
ESSPDock
ESSSONIC
ESSTOOLS
essvatgt
essvcpt
GdiplusUpgrade
Get High Speed Internet!
Google Toolbar for Internet Explorer
Google Toolbar for Internet Explorer
HijackThis 2.0.2
HLPPDOCK
Homestead SiteBuilder LPX
HP Extended Capabilities 5.3
HP Imaging Device Functions 5.3
HP Photosmart Essential
HP PSC & OfficeJet 5.3.B
HP Solution Center & Imaging Support Tools 5.3
HP Update
Intel(R) 537EP V9x DF PCI Modem
Intel(R) Extreme Graphics Driver
Internet Explorer Default Page
iTunes
J2SE Runtime Environment 5.0 Update 3
Jasc Paint Shop Photo Album
Java 2 Runtime Environment, SE v1.4.2_03
Java(TM) 6 Update 2
kgcbase
Kodak EasyShare software
KSU
L&H TTS3000 Español
L&H TTS3000 Français
Learn2 Player (Uninstall Only)
Lernout & Hauspie TruVoice American English TTS Engine
Lernout & Hauspie TruVoice for Microsoft Agent
LG USB Drivers
LimeWire 4.14.8
Linksys EasyLink Advisor 1.6 (0033)
Linksys Wireless-G USB Network Adapter
Logo Design Shop
Macromedia Shockwave Player
McAfee Personal Firewall Plus
McAfee SecurityCenter
McAfee VirusScan
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft Office 2000 Premium
Microsoft Office PowerPoint Viewer 2003
Microsoft Plus! Digital Media Edition Installer
Microsoft Plus! Photo Story 2 LE
Microsoft Publisher 2000 SR-1
Microsoft Text-to-Speech Engine 4.0 (English)
Modem Event Monitor
Modem Helper
Modem On Hold
MSN
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
NetZeroInstallers
Notifier
OfotoXMI
OTtBP
OTtBPSDK
PaintEx version 9.05
ParetoLogic Anti-Spyware
Pdf995
QuickTime
RealPlayer Basic
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB911565)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB883939)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB896688)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899588)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB903235)
Security Update for Windows XP (KB904706)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB905915)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB908531)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912812)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913433)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928090)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB929969)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931768)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933566)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB937143)
Security Update for Windows XP (KB938127)
Security Update for Windows XP (KB938829)
SFR
SFR2
SHASTA
Shoplink for Windows
SKIN0001
SKINXSDK
Sonic DLA
Sonic RecordNow!
Sonic Update Manager
Spybot - Search & Destroy
staticcr
Update for Windows XP (KB894391)
Update for Windows XP (KB896727)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB910437)
Update for Windows XP (KB911280)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Update for Windows XP (KB933360)
Update for Windows XP (KB936357)
Update for Windows XP (KB938828)
V CAST Music
VPRINTOL
WebEDU
Windows Installer 3.1 (KB893803)
Windows Installer 3.1 (KB893803)
Windows Media Format Runtime
Windows Media Player 10
Windows Media Player 10
Windows XP Hotfix - KB834707
Windows XP Hotfix - KB867282
Windows XP Hotfix - KB873333
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885250
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890047
Windows XP Hotfix - KB890175
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB890923
Windows XP Hotfix - KB891781
Windows XP Hotfix - KB893066
Windows XP Hotfix - KB893086
WIRELESS
WordPerfect Office 12
SSmitFraudFix v2.225

Scan done at 8:54:46.93, Wed 09/19/2007
Run from C:\Documents and Settings\Steven Kleber\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\ParetoLogic\Anti-Spyware\Pareto_AS.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\Program Files\Verizon Wireless\V CAST Music\V CAST Music Monitor.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\a-squared Free\a2service.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54GSv2.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\MI1933~1\Office\OUTLOOK.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\CSCRIPT.EXE

»»»»»»»»»»»»»»»»»»»»»»»» hosts

hosts file corrupted !

127.0.0.1 http://www.legal-at-spybot.info
127.0.0.1 legal-at-spybot.info

»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

C:\WINDOWS\system32\vtr???.dll FOUND !

»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Steven Kleber


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Steven Kleber\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\STEVEN~1\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"


»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\\WINDOWS\\system32\\systems.txt"


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: Broadcom 440x 10/100 Integrated Controller - Packet Scheduler Miniport
DNS Server Search Order: 192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{AA099E59-0FA8-450C-90AA-E02B3632F6EC}: NameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{AA099E59-0FA8-450C-90AA-E02B3632F6EC}: NameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{AA099E59-0FA8-450C-90AA-E02B3632F6EC}: NameServer=192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End
dmmiller360
Active Member
 
Posts: 8
Joined: September 18th, 2007, 10:19 am

Unread postby Navigator » September 19th, 2007, 2:47 pm

You are welcome... :D

1. You should print out these instructions, or copy them to a NotePad file for reading while in Safe Mode, because you will not be able to connect to the Internet to read from this site.

Next, please reboot your computer in Safe Mode by doing the following :
  • Restart your computer
  • After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
  • Instead of Windows loading as normal, a menu with options should appear;
  • Select the first option, to run Windows in Safe Mode, then press "Enter".
  • Choose your usual account.
Once in Safe Mode, double-click on SmitfraudFix.exe
Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.

You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".

The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows.
A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply.
The report can also be found at the root of the system drive, usually at C:\rapport.txt

2. Post back with the C:\rapport.txt file results and a new HJT log for me to review...
User avatar
Navigator
MRU Honors Grad Emeritus
 
Posts: 1237
Joined: December 21st, 2005, 8:35 pm
Location: Missouri

Log Files

Unread postby dmmiller360 » September 19th, 2007, 4:08 pm

Hi,

Here are the log files.

Thank you,
Debra

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:06:06 PM, on 9/19/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\ParetoLogic\Anti-Spyware\Pareto_AS.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\Program Files\Verizon Wireless\V CAST Music\V CAST Music Monitor.exe
C:\Program Files\a-squared Free\a2service.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54GSv2.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ParetoLogic Anti-Spyware] "C:\Program Files\ParetoLogic\Anti-Spyware\Pareto_AS.exe" -NM -hidesplash
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8
O4 - HKCU\..\Run: [EasyLinkAdvisor] "C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" /startup
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: V CAST Music Monitor.lnk = C:\Program Files\Verizon Wireless\V CAST Music\V CAST Music Monitor.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: cflive.adpclaims.com
O16 - DPF: {40F8967E-34A6-474A-837A-CEC1E7DAC54C} - https://accounting.quickbooks.com/c1/v15.592/qboax9.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/share ... insctl.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 0061798468
O16 - DPF: {843EE768-3A97-455C-9076-741BA3AD7B62} (QuickBooks Online Edition Utilities Class v10) - https://accounting.quickbooks.com/c2/v1 ... boax10.cab
O16 - DPF: {A93D84FD-641F-43AE-B963-E6FA84BE7FE7} (LinkSys Content Update) - http://www.linksysfix.com/netcheck/67/i ... downls.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/share ... cgdmgr.cab
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -
O17 - HKLM\System\CCS\Services\Tcpip\..\{AA099E59-0FA8-450C-90AA-E02B3632F6EC}: NameServer = 192.168.1.1
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: WUSB54GSv2SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe

--
End of file - 9457 bytes



SmitFraudFix v2.225

Scan done at 15:58:43.00, Wed 09/19/2007
Run from C:\Documents and Settings\Steven Kleber\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process


»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 babe.the-killer.bz
127.0.0.1 http://www.babe.the-killer.bz
127.0.0.1 babe.k-lined.com
127.0.0.1 http://www.babe.k-lined.com
127.0.0.1 did.i-used.cc
127.0.0.1 http://www.did.i-used.cc
127.0.0.1 coolwwwsearch.com
127.0.0.1 http://www.coolwwwsearch.com
127.0.0.1 coolwebsearch.com
127.0.0.1 http://www.coolwebsearch.com
127.0.0.1 hi.studioaperto.net
127.0.0.1 http://www.hi.studioaperto.net
127.0.0.1 webbrowser.tv
127.0.0.1 http://www.webbrowser.tv
127.0.0.1 wazzupnet.com
127.0.0.1 http://www.wazzupnet.com
127.0.0.1 gueb.com
127.0.0.1 http://www.gueb.com
127.0.0.1 kabex.com
127.0.0.1 http://www.kabex.com
127.0.0.1 hityou.com
127.0.0.1 http://www.hityou.com
127.0.0.1 miosearch.com
127.0.0.1 http://www.miosearch.com
127.0.0.1 blue-elefant.com
127.0.0.1 http://www.blue-elefant.com
127.0.0.1 babeweb.de
127.0.0.1 http://www.babeweb.de
127.0.0.1 start-seite.com
127.0.0.1 http://www.start-seite.com
127.0.0.1 sexolymp.com
127.0.0.1 http://www.sexolymp.com
127.0.0.1 toriii.cc
127.0.0.1 http://www.toriii.cc
127.0.0.1 xtipp.de
127.0.0.1 http://www.xtipp.de
127.0.0.1 urawa.cool.ne.jp
127.0.0.1 777search.com
127.0.0.1 http://www.777search.com
127.0.0.1 ace-webmaster.com
127.0.0.1 http://www.ace-webmaster.com
127.0.0.1 aifind.info
127.0.0.1 http://www.aifind.info
127.0.0.1 amateurliveshow.com
127.0.0.1 http://www.amateurliveshow.com
127.0.0.1 anarchylolita.com
127.0.0.1 http://www.anarchylolita.com
127.0.0.1 anarchyporn.com
127.0.0.1 approvedlinks.com
127.0.0.1 http://www.approvedlinks.com
127.0.0.1 cantfind.com
127.0.0.1 http://www.cantfind.com
127.0.0.1 castingsamateur.com
127.0.0.1 http://www.castingsamateur.com
127.0.0.1 cyberrape.com
127.0.0.1 http://www.cyberrape.com
127.0.0.1 dialerclub.com
127.0.0.1 http://www.dialerclub.com
127.0.0.1 megago.com
127.0.0.1 exit.megago.com
127.0.0.1 http://www.megago.com
127.0.0.1 fastmetasearch.com
127.0.0.1 http://www.fastmetasearch.com
127.0.0.1 findwhatevernow.com
127.0.0.1 http://www.findwhatevernow.com
127.0.0.1 globesearch.com
127.0.0.1 http://www.globesearch.com
127.0.0.1 hotfreebies.com
127.0.0.1 http://www.hotfreebies.com
127.0.0.1 krankin.com
127.0.0.1 http://www.krankin.com
127.0.0.1 begin2search.com
127.0.0.1 http://www.begin2search.com
127.0.0.1 mainstreamdollars.com
127.0.0.1 http://www.mainstreamdollars.com
127.0.0.1 live.sex-explorer.com
127.0.0.1 http://www.live.sex-explorer.com
127.0.0.1 loveadot.com
127.0.0.1 http://www.loveadot.com
127.0.0.1 megaseek.net
127.0.0.1 http://www.megaseek.net
127.0.0.1 mixsearch.com
127.0.0.1 http://www.mixsearch.com
127.0.0.1 munky.com
127.0.0.1 http://www.munky.com
127.0.0.1 newtopsites.com
127.0.0.1 http://www.newtopsites.com
127.0.0.1 noblindlinks.com
127.0.0.1 http://www.noblindlinks.com
127.0.0.1 babenet.com
127.0.0.1 r.babenet.com
127.0.0.1 http://www.babenet.com
127.0.0.1 searchresult.net
127.0.0.1 http://www.searchresult.net
127.0.0.1 sexarena.org
127.0.0.1 http://www.sexarena.org
127.0.0.1 skeech.com
127.0.0.1 http://www.skeech.com
127.0.0.1 by.ru
127.0.0.1 http://www.by.ru
127.0.0.1 superwp.by.ru
127.0.0.1 sureseeker.com
127.0.0.1 http://www.sureseeker.com
127.0.0.1 wethere.com
127.0.0.1 http://www.wethere.com
127.0.0.1 wowsearch.org
127.0.0.1 http://www.wowsearch.org
127.0.0.1 xxx.com
127.0.0.1 http://www.xxx.com
127.0.0.1 art-xxx.com
127.0.0.1 websearch.com
127.0.0.1 http://www.websearch.com
127.0.0.1 firehunt.com
127.0.0.1 http://www.firehunt.com
127.0.0.1 partner23.firehunt.com
127.0.0.1 screensaver.it
127.0.0.1 http://www.screensaver.it
127.0.0.1 cliks.org
127.0.0.1 http://www.cliks.org
127.0.0.1 xads.cliks.org
127.0.0.1 xwebsearch.biz
127.0.0.1 http://www.xwebsearch.biz
127.0.0.1 znext.com
127.0.0.1 http://www.znext.com
127.0.0.1 rawtocash.net
127.0.0.1 http://www.rawtocash.net
127.0.0.1 7search.com
127.0.0.1 http://www.7search.com
127.0.0.1 zestyfind.com
127.0.0.1 http://www.zestyfind.com
127.0.0.1 ntcor.com
127.0.0.1 http://www.ntcor.com
127.0.0.1 dev.ntcor.com
127.0.0.1 xrenoder.com
127.0.0.1 http://www.xrenoder.com
127.0.0.1 search.xrenoder.com
127.0.0.1 allcybersearch.com
127.0.0.1 http://www.allcybersearch.com
127.0.0.1 tinybar.com
127.0.0.1 http://www.tinybar.com
127.0.0.1 topsite.us
127.0.0.1 http://www.topsite.us
127.0.0.1 topsites.us
127.0.0.1 http://www.topsites.us
127.0.0.1 topsitez.us
127.0.0.1 http://www.topsitez.us
127.0.0.1 true-counter.com
127.0.0.1 http://www.true-counter.com
127.0.0.1 out.true-counter.com
127.0.0.1 cnetadd.com
127.0.0.1 http://www.cnetadd.com
127.0.0.1 okmmm.com
127.0.0.1 http://www.okmmm.com
127.0.0.1 139mm.com
127.0.0.1 http://www.139mm.com
127.0.0.1 008k.com
127.0.0.1 http://www.008k.com
127.0.0.1 00hq.com
127.0.0.1 http://www.00hq.com
127.0.0.1 1-domains-registrations.com
127.0.0.1 http://www.1-domains-registrations.com
127.0.0.1 100sexlinks.com
127.0.0.1 http://www.100sexlinks.com
127.0.0.1 1sexparty.com
127.0.0.1 http://www.1sexparty.com
127.0.0.1 1stpagehere.com
127.0.0.1 http://www.1stpagehere.com
127.0.0.1 2020search.com
127.0.0.1 http://www.2020search.com
127.0.0.1 24teen.com
127.0.0.1 http://www.24teen.com
127.0.0.1 36site.com
127.0.0.1 http://www.36site.com
127.0.0.1 4corn.net
127.0.0.1 http://www.4corn.net
127.0.0.1 777top.com
127.0.0.1 http://www.777top.com
127.0.0.1 8ad.com
127.0.0.1 http://www.8ad.com
127.0.0.1 aboutclicker.com
127.0.0.1 http://www.aboutclicker.com
127.0.0.1 abrp.net
127.0.0.1 http://www.abrp.net
127.0.0.1 accessthefuture.net
127.0.0.1 http://www.accessthefuture.net
127.0.0.1 acemedic.com
127.0.0.1 http://www.acemedic.com
127.0.0.1 actionbreastcancer.org
127.0.0.1 http://www.actionbreastcancer.org
127.0.0.1 activexupdate.com
127.0.0.1 http://www.activexupdate.com
127.0.0.1 adamsupportgroup.org
127.0.0.1 http://www.adamsupportgroup.org
127.0.0.1 adasearch.com
127.0.0.1 http://www.adasearch.com
127.0.0.1 adipics.com
127.0.0.1 http://www.adipics.com
127.0.0.1 adspics.com
127.0.0.1 http://www.adspics.com
127.0.0.1 adult-engine-search.com
127.0.0.1 http://www.adult-engine-search.com
127.0.0.1 adult-erotic-guide.net
127.0.0.1 http://www.adult-erotic-guide.net
127.0.0.1 adult-friends-finder.net
127.0.0.1 http://www.adult-friends-finder.net
127.0.0.1 adulthyperlinks.com
127.0.0.1 http://www.adulthyperlinks.com
127.0.0.1 adulttds.com
127.0.0.1 http://www.adulttds.com
127.0.0.1 exaccess.ru
127.0.0.1 http://www.exaccess.ru
127.0.0.1 advert.exaccess.ru
127.0.0.1 agentstudio.com
127.0.0.1 africaspromise.org
127.0.0.1 akril.com
127.0.0.1 alcatel.ws
127.0.0.1 alfa-search.com
127.0.0.1 all-inet.com
127.0.0.1 allabtcars.com
127.0.0.1 allabtjeeps.com
127.0.0.1 allhyperlinks.com
127.0.0.1 allinternetbusiness.com
127.0.0.1 almarvideos.com
127.0.0.1 amandamountains.com
127.0.0.1 amigeek.com
127.0.0.1 amisbusiness.com
127.0.0.1 analmovi.com
127.0.0.1 anin.org
127.0.0.1 annaromeo.com
127.0.0.1 antrocity.com
127.0.0.1 anything4health.com
127.0.0.1 apsua.com
127.0.0.1 aregay.com
127.0.0.1 arheo.com
127.0.0.1 arizonaweb.org
127.0.0.1 armitageinn.com
127.0.0.1 art-func.com
127.0.0.1 artachnid.com
127.0.0.1 asiankingkong.com
127.0.0.1 ass-gals.com
127.0.0.1 athenrye.com
127.0.0.1 avian-ads.com
127.0.0.1 ayakawamura.com
127.0.0.1 ayumitaniguchi.com
127.0.0.1 bannedhost.net
127.0.0.1 barbudafarms.com
127.0.0.1 barnandfence.com
127.0.0.1 batsearch.com
127.0.0.1 baygraphicsllc.com
127.0.0.1 bb-search.com
127.0.0.1 bbbsearch.com
127.0.0.1 bedhome.com
127.0.0.1 bediadance.com
127.0.0.1 bellabasketsfl.com
127.0.0.1 bernaolatwin.com
127.0.0.1 best-counter.com
127.0.0.1 best-hardpics.com
127.0.0.1 best-winning-casino.com
127.0.0.1 bestcrawler.com
127.0.0.1 bestfor.ru
127.0.0.1 bestporngate.com
127.0.0.1 bestxporno.com
127.0.0.1 blackjack-free.net
127.0.0.1 blender.xu.pl
127.0.0.1 bodaciousbabette.com
127.0.0.1 boobdoll.com
127.0.0.1 boobsandtits.com
127.0.0.1 boobsclub.com
127.0.0.1 boredlife.com
127.0.0.1 bowlofogumbo.com
127.0.0.1 bradcoem.org
127.0.0.1 brandiyoung.com
127.0.0.1 brookeburn.com
127.0.0.1 bucps.com
127.0.0.1 burgerkingbigscreen.com
127.0.0.1 buscards.net
127.0.0.1 bustyrussell.com
127.0.0.1 buttejazz.org
127.0.0.1 buyselldomain.net
127.0.0.1 calcioturris.com
127.0.0.1 canberracricketcoaching.com
127.0.0.1 candycantaloupes.com
127.0.0.1 careers.dulcineasystems.net
127.0.0.1 carsands.com
127.0.0.1 carsrentals.net
127.0.0.1 casino-gambling-1.net
127.0.0.1 casino-gambling-2.net
127.0.0.1 casino-onlines.net
127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
127.0.0.1 casino2win.net
127.0.0.1 casinomidas.net
127.0.0.1 casinonline.net
127.0.0.1 catallogue.com
127.0.0.1 catsss.da.ru
127.0.0.1 caxa.ru
127.0.0.1 cclebali.org
127.0.0.1 ceewawires.org
127.0.0.1 certumgroup.com
127.0.0.1 chelancatering.com
127.0.0.1 childrenvilla.com
127.0.0.1 chips-4-free.com
127.0.0.1 chrisswasey.com
127.0.0.1 chriswallace.net
127.0.0.1 ckick4thumbs.com
127.0.0.1 clackamasliteraryreview.com
127.0.0.1 clearsearch.cc
127.0.0.1 clearsearch.net
127.0.0.1 clickaire.com
127.0.0.1 clickyestoenter.net
127.0.0.1 clrsch.com
127.0.0.1 cmtapestry.com
127.0.0.1 cool-homepage.co
127.0.0.1 cool-homepage.com
127.0.0.1 cool-search.net
127.0.0.1 cool-search.netfartpost.com
127.0.0.1 cool-web-search.com
127.0.0.1 coolfetishsite.com
127.0.0.1 coolfreehost.com
127.0.0.1 coolfreepage.com
127.0.0.1 coolfreepages.com
127.0.0.1 coolmoneysearch.com
127.0.0.1 coolpornsearch.com
127.0.0.1 coolsearcher.info
127.0.0.1 coolwebsearsh.com
127.0.0.1 copmtraine.com
127.0.0.1 couldnotfind.com
127.0.0.1 count-all.com
127.0.0.1 cracks.me.uk
127.0.0.1 creamedcutties.com
127.0.0.1 creditsearchonline.com
127.0.0.1 crestring.com
127.0.0.1 crooder.com
127.0.0.1 curvedspaces.com
127.0.0.1 cvs.jps.ru
127.0.0.1 cvsymphony.com
127.0.0.1 cydom.com
127.0.0.1 daily-gals.com
127.0.0.1 dancingbabycd.com
127.0.0.1 datanotary.com
127.0.0.1 datareco.com
127.0.0.1 davemarshall.org
127.0.0.1 dcfitusa.com
127.0.0.1 defaultsearch.net
127.0.0.1 desarrollocreativo.com
127.0.0.1 develip.com
127.0.0.1 dewis.spb.ru
127.0.0.1 dewis.us
127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
127.0.0.1 dietpills4free.com
127.0.0.1 dietpussy.com
127.0.0.1 digistreamsa.com
127.0.0.1 dionforvalleycouncil.org
127.0.0.1 doctorwaldron.com
127.0.0.1 document-not-found.pornpic.org
127.0.0.1 doggyaction.com
127.0.0.1 domain-your-registration.com
127.0.0.1 domains-for-you-online.com
127.0.0.1 domains2003.net
127.0.0.1 domkrat.com
127.0.0.1 dp-host.com
127.0.0.1 dragqueen.gay-clan.com
127.0.0.1 drug-sources-exposed.com
127.0.0.1 drvvv.com
127.0.0.1 dutch-sex.com
127.0.0.1 dvdbank.org
127.0.0.1 e-localad.com
127.0.0.1 e-plus.cc
127.0.0.1 e-websitesolutions.com
127.0.0.1 eases.net
127.0.0.1 easy-search.net
127.0.0.1 easycategories.com
127.0.0.1 ecosrioplatenses.org
127.0.0.1 ecstasyporn.net
127.0.0.1 eikokoike.com
127.0.0.1 epornsex.com
127.0.0.1 euuu.com
127.0.0.1 evidence-detector.biz
127.0.0.1 evilspidercomics.com
127.0.0.1 ewebsearch.net
127.0.0.1 findloss.com
127.0.0.1 excellentsckin.com
127.0.0.1 extremeseek.net
127.0.0.1 f*ckdenniss.com
127.0.0.1 f*cknicepics.com
127.0.0.1 faithstevens.com
127.0.0.1 fantasiewelten.com
127.0.0.1 farmsteadbandb.com
127.0.0.1 fartpost.com
127.0.0.1 fastwebfinder.com
127.0.0.1 faxporn.com
127.0.0.1 fickenisgeil.de
127.0.0.1 finance-loans.com
127.0.0.1 find-itnow.com
127.0.0.1 find-uk-health.co.uk
127.0.0.1 find4u.net
127.0.0.1 findit-now.com
127.0.0.1 findthesite.com
127.0.0.1 findthewebsiteyouneed.com
127.0.0.1 http://www.findthewebsiteyouneed.com
127.0.0.1 fionasteel.com
127.0.0.1 firstbookmark.net
127.0.0.1 fitness-free.com
127.0.0.1 foodvacations.net
127.0.0.1 forex.jps.ru
127.0.0.1 forexcredit.com
127.0.0.1 forexcredit.ru
127.0.0.1 formingfusions.com
127.0.0.1 forsythfire.net
127.0.0.1 forthline.com
127.0.0.1 free-chipes.com
127.0.0.1 free-f*cking-video.com
127.0.0.1 free-hit.com
127.0.0.1 free-pics-and-movies.com
127.0.0.1 free-sex-movie-clips.net
127.0.0.1 free4porno.net
127.0.0.1 free64all.com
127.0.0.1 freebookmark.net
127.0.0.1 freebookmarks.net
127.0.0.1 freecategories.com
127.0.0.1 freecoolhost.com
127.0.0.1 freerbhost.com
127.0.0.1 freeshemalepics.net
127.0.0.1 freeyaho.com
127.0.0.1 freshseek.com
127.0.0.1 freshteensite.com
127.0.0.1 gabrielscott.com
127.0.0.1 galpostgirls.com
127.0.0.1 gals-for-free.com
127.0.0.1 gambling-online4you.com
127.0.0.1 gameterror.net
127.0.0.1 gay50.com
127.0.0.1 generalsmeltingofcanada.com
127.0.0.1 geteens.com
127.0.0.1 getpicshere.com
127.0.0.1 gimmezamore.com
127.0.0.1 gimnasiaer.com
127.0.0.1 girls-porn-life.com
127.0.0.1 glbdf.org
127.0.0.1 global-finder.com
127.0.0.1 globe-finder.cc
127.0.0.1 globe-finder.com
127.0.0.1 gocybersearch.com
127.0.0.1 golftennis.net
127.0.0.1 good-mortgages-calculator.com
127.0.0.1 good-mortgages.net
127.0.0.1 goodsexs.com
127.0.0.1 googlebar.jps.ru
127.0.0.1 googlf.com
127.0.0.1 gradforum.org
127.0.0.1 gratis-porn-movie.com
127.0.0.1 gratis-pornopics.com
127.0.0.1 guzzycats.com
127.0.0.1 gzphoenix.com
127.0.0.1 hallnetaccolade.com
127.0.0.1 hand-book.com
127.0.0.1 happyanal.com
127.0.0.1 hard-gals.com
127.0.0.1 hardbodytgp.com
127.0.0.1 hardcoreover.com
127.0.0.1 hardloved.com
127.0.0.1 hardwareseek.net
127.0.0.1 harukaigawa.com
127.0.0.1 hccsolanonapa.org
127.0.0.1 health-protein.com
127.0.0.1 hentai4u.net
127.0.0.1 here4search.com
127.0.0.1 heyrichy.com
127.0.0.1 hi-search.com
127.0.0.1 hiddenguides.com
127.0.0.1 hitlistlyrics.com
127.0.0.1 holidayautostr.com
127.0.0.1 homemortage.ws
127.0.0.1 hostssp.com
127.0.0.1 hot-cartoon-sex.anime.american-teens.net
127.0.0.1 hotbookmark.com
127.0.0.1 hotels-list.net
127.0.0.1 hotelxxxcams.com
127.0.0.1 hotpopup.com
127.0.0.1 hotsearchbox.com
127.0.0.1 hotsex-series.com
127.0.0.1 hotstartpage.com
127.0.0.1 hqsex.biz
127.0.0.1 hugeporn4u.net
127.0.0.1 hunacsa.com
127.0.0.1 hupacasath.com
127.0.0.1 hzsx.com
127.0.0.1 icansearch.net
127.0.0.1 idgsearch.com
127.0.0.1 ie-search.com
127.0.0.1 incestporngate.com
127.0.0.1 infodigger.net
127.0.0.1 infoglobus.com
127.0.0.1 inherhole.com
127.0.0.1 insertthiscock.com
127.0.0.1 insurance-flood.net
127.0.0.1 insuranceall.net
127.0.0.1 internetsearch.ru
127.0.0.1 ionichost.com
127.0.0.1 ionomist.com
127.0.0.1 ipsex.net
127.0.0.1 itsanal.com
127.0.0.1 itseasy.us
127.0.0.1 iweb-commerce.com
127.0.0.1 iwebland.com
127.0.0.1 jeannineoldfield.com
127.0.0.1 jethomepage.com
127.0.0.1 jetseeker.com
127.0.0.1 jmhgallery.org
127.0.0.1 joannelatham.com
127.0.0.1 judin.ru
127.0.0.1 junkysex.com
127.0.0.1 karleyt.narod.ru
127.0.0.1 kathisomers.com
127.0.0.1 kazaa-lite.ws
127.0.0.1 keithgreenpro.com
127.0.0.1 kenmccaul.com
127.0.0.1 kilosex.com
127.0.0.1 kimhines.com
127.0.0.1 kinoru.com
127.0.0.1 ksdspups.org
127.0.0.1 landrape.com
127.0.0.1 lauraroebuck.com
127.0.0.1 leannalovelace.com
127.0.0.1 lesobank.ru
127.0.0.1 libertyonlinehosting.com
127.0.0.1 lingerie-mania.com
127.0.0.1 lisamatthew.com
127.0.0.1 liveholio.com
127.0.0.1 livenewspaper.com
127.0.0.1 louiseleeds.com
127.0.0.1 love-pix.com
127.0.0.1 lovelas.com
127.0.0.1 lovelysearch.com
127.0.0.1 low-taxes.com
127.0.0.1 luckysearch.net
127.0.0.1 lunitaweb.net
127.0.0.1 lustful-porno.com
127.0.0.1 mackinnonsbrook.org
127.0.0.1 madfinder.com
127.0.0.1 madisonmoons.com
127.0.0.1 madisonoilco.com
127.0.0.1 madonalive.com
127.0.0.1 majuozawa.com
127.0.0.1 makin-do.com
127.0.0.1 male4free.com
127.0.0.1 map-quest.org
127.0.0.1 marilynchamber.com
127.0.0.1 martfinder.com
127.0.0.1 massearch.com
127.0.0.1 matetrava.com
127.0.0.1 mature50.com
127.0.0.1 matureporngate.com
127.0.0.1 maxdzines.com
127.0.0.1 mcgeeforlabor.com
127.0.0.1 mdstunisie.org
127.0.0.1 medicare-insurance.net
127.0.0.1 medicare-supplemental.com
127.0.0.1 mega-dating-tips.com
127.0.0.1 megumikanzaki.com
127.0.0.1 meshalynn.com
127.0.0.1 meta-adult.com
127.0.0.1 meta-casino.com
127.0.0.1 meta-mobile.com
127.0.0.1 meta-porn.com
127.0.0.1 metafora.ru
127.0.0.1 metapoisk.ru
127.0.0.1 michiyonakajima.com
127.0.0.1 miconsultamedica.com
127.0.0.1 mikasakamoto.com
127.0.0.1 mikoni.com
127.0.0.1 militarygods.porn4porn.net
127.0.0.1 millennialpeople.org
127.0.0.1 mipham.org
127.0.0.1 missingcommand.com
127.0.0.1 mommykiss.com
127.0.0.1 moneyhunters.com
127.0.0.1 montgomeryhospitalanesthesia.com
127.0.0.1 morflot.com
127.0.0.1 mortgage-debt.net
127.0.0.1 mortismaximus.com
127.0.0.1 moscowwhores.com
127.0.0.1 moviecategories.com
127.0.0.1 mp3-pix.com
127.0.0.1 mrtg.jps.ru
127.0.0.1 msn-info.net
127.0.0.1 multipussy.com
127.0.0.1 mundopolar.com
127.0.0.1 mustv.com
127.0.0.1 mywebsearch.net
127.0.0.1 nativehardcore.com
127.0.0.1 naturalspy.com
127.0.0.1 nbasportsbook.net
127.0.0.1 needf*cknow.com
127.0.0.1 nellyslyrics.com
127.0.0.1 nepgyan.com
127.0.0.1 nesrecords.com
127.0.0.1 netshastra.net
127.0.0.1 nettime.ru
127.0.0.1 nettracker.jps.ru
127.0.0.1 netyellowpages.info
127.0.0.1 new-incest.com
127.0.0.1 newcategories.com
127.0.0.1 newcracks.com
127.0.0.1 newcracks.net
127.0.0.1 newlife-lajolla.com
127.0.0.1 newsexgate.com
127.0.0.1 newtonsracks.com
127.0.0.1 newxpics.com
127.0.0.1 nhlsportsbook.net
127.0.0.1 niagaracapital.com
127.0.0.1 niche-tv.com
127.0.0.1 nmrba.com
127.0.0.1 nocalories.net
127.0.0.1 nocensor.com
127.0.0.1 ormandcompany.com
127.0.0.1 nsbabes.com
127.0.0.1 nuclearwitness.org
127.0.0.1 nursemania.com
127.0.0.1 nvntour.com
127.0.0.1 nvphall.org
127.0.0.1 oborot.com
127.0.0.1 ocalalivestockmarket.com
127.0.0.1 ocsff.com
127.0.0.1 oeatlanta.com
127.0.0.1 oharrowsearch.com
127.0.0.1 ok-search.com
127.0.0.1 okulta.com
127.0.0.1 omegabrains.net
127.0.0.1 online-casino-1.net
127.0.0.1 online-casino-bonus.info
127.0.0.1 online-casinos-x.com
127.0.0.1 online-winning.net
127.0.0.1 onlineserverz.com
127.0.0.1 onlinetradings.net
127.0.0.1 onlycunt.com
127.0.0.1 onlyinsured.com
127.0.0.1 operanabuco.com
127.0.0.1 opsex.com
127.0.0.1 oregoncharters.org
127.0.0.1 otrlives.com
127.0.0.1 ozawamadoka.com
127.0.0.1 paigesummer.com
127.0.0.1 pamelacollections.com
127.0.0.1 panamcup.com
127.0.0.1 pantygirls4u.com
127.0.0.1 pantyhoserealm.com
127.0.0.1 pantyplace.com
127.0.0.1 pastubes.com
127.0.0.1 paulapage.com
127.0.0.1 paulhoover.com
127.0.0.1 payfortraffic.net
127.0.0.1 pedo.ws
127.0.0.1 people.1gb.ru
127.0.0.1 pervertbot.com
127.0.0.1 pharma-diet-pills.com
127.0.0.1 pharmacy2003.com
127.0.0.1 pharmalocator.com
127.0.0.1 phendimetrazine-tenuate-adipex.com
127.0.0.1 pics-videos.com
127.0.0.1 picsdir.com
127.0.0.1 picsforbucks.com
127.0.0.1 picsofseductiveladies.com
127.0.0.1 pills-birth-control.com
127.0.0.1 pillsmall.com
127.0.0.1 pilotronix.com
127.0.0.1 pixpox.com
127.0.0.1 planemusic.com
127.0.0.1 poiska.net
127.0.0.1 poker-casino-free.com
127.0.0.1 poker-games-free.net
127.0.0.1 polradiologia.com
127.0.0.1 pooi.net
127.0.0.1 porn-teacher.com
127.0.0.1 porncamz.com
127.0.0.1 pornfree.info
127.0.0.1 pornnightdreams.com
127.0.0.1 pornokopec.com
127.0.0.1 porntetris.com
127.0.0.1 porntwist.com
127.0.0.1 powerwebsearch.com
127.0.0.1 prblitz.com
127.0.0.1 pretypics.com
127.0.0.1 pribalt.com
127.0.0.1 privacy-support.biz
127.0.0.1 privateporn.net
127.0.0.1 prostactive.com
127.0.0.1 prostol.com
127.0.0.1 protect-yourself.biz
127.0.0.1 prsainlandempire.org
127.0.0.1 put-your-link-here.com
127.0.0.1 pyrocorp.com
127.0.0.1 quick-search.ws
127.0.0.1 quiksearchgenealogy.com
127.0.0.1 radfrall.org
127.0.0.1 ramgo.com
127.0.0.1 ranafrog.ne
127.0.0.1 rapegate.com
127.0.0.1 redbudbmx.com
127.0.0.1 refinance-help.com
127.0.0.1 removeearthkeepers.org
127.0.0.1 rightfinder.net
127.0.0.1 robbsproshop.com
127.0.0.1 robertferencz.com
127.0.0.1 rotocasters.com
127.0.0.1 royalsearch.net
127.0.0.1 runsearch.com
127.0.0.1 russiansponsor.com
127.0.0.1 russogay.com
127.0.0.1 s2.exocrew.com
127.0.0.1 sacitylife.com
127.0.0.1 samplegals.com
127.0.0.1 satisf*cktion.net
127.0.0.1 sbssurvivor.com
127.0.0.1 scarypix.com
127.0.0.1 sccdnet.com
127.0.0.1 schoolforest.com
127.0.0.1 search-1.net
127.0.0.1 search-2003.com
127.0.0.1 search-about.net
127.0.0.1 search-hawk.com
127.0.0.1 search-log.com
127.0.0.1 search-meta.com
127.0.0.1 search-safe.com
127.0.0.1 search.psn.cn
127.0.0.1 searchadultweb.com
127.0.0.1 searchbutler.com
127.0.0.1 searchbuttler.com
127.0.0.1 searchbutler.org
127.0.0.1 searchcomplete.com
127.0.0.1 searchdesire.com
127.0.0.1 searchdot.net
127.0.0.1 searchexpander.com
127.0.0.1 searchfastnet.com
127.0.0.1 searchforge.com
127.0.0.1 searching-the-net.com
127.0.0.1 searchmeta.md
127.0.0.1 searchmeta.net
127.0.0.1 searchmeta.ru
127.0.0.1 searchmeta.webhost.ru
127.0.0.1 searchnow.ws
127.0.0.1 searchonfly.com
127.0.0.1 searchv.com
127.0.0.1 searchxl.com
127.0.0.1 searchxp.com
127.0.0.1 sebot.com
127.0.0.1 securenp.org
127.0.0.1 security-warning.biz
127.0.0.1 seehardcore.com
127.0.0.1 seekwell.net
127.0.0.1 selfbookmark.com
127.0.0.1 selfbookmark.info
127.0.0.1 selfbookmark.net
127.0.0.1 sex.free4porno.net
127.0.0.1 sex-coach.com
127.0.0.1 sex-festival.com
127.0.0.1 sex-video-galleries.com
127.0.0.1 sexgalleries4all.com
127.0.0.1 sexmoviesnet.com
127.0.0.1 sexpatriot.net
127.0.0.1 sexy18.cc
127.0.0.1 sexycat.adult-host.org
127.0.0.1 sfbayfolkboats.com
127.0.0.1 sgirls.net
127.0.0.1 sharempeg.com
127.0.0.1 shopcards.net
127.0.0.1 shopknights.com
127.0.0.1 sic02.com
127.0.0.1 sintrader.com
127.0.0.1 site1.ru
127.0.0.1 sites-in-web.com
127.0.0.1 sitevictoria.com
127.0.0.1 sixroads.com
127.0.0.1 skakalka.ru
127.0.0.1 slawsearch.com
127.0.0.1 slotch.com
127.0.0.1 slotchbar.com
127.0.0.1 smartsumo.com
127.0.0.1 smutarchive.net
127.0.0.1 solongas.com
127.0.0.1 sonomaevents.com
127.0.0.1 spermatrix.com
127.0.0.1 sportbooks-free4you.com
127.0.0.1 spros.com
127.0.0.1 spyass.com
127.0.0.1 spyorgy.net
127.0.0.1 staceyowens.com
127.0.0.1 stacistaxx.com
127.0.0.1 stacystaxx.com
127.0.0.1 start-space.com
127.0.0.1 steamycock.com
127.0.0.1 sterva.com
127.0.0.1 stevecashdollar.com
127.0.0.1 stop-tracking.biz
127.0.0.1 stopvotefraud.com
127.0.0.1 stopxxxpics.com
127.0.0.1 strekoza.com
127.0.0.1 stuffstore.com
127.0.0.1 styleclickink.com
127.0.0.1 summercollins.com
127.0.0.1 summitcross.com
127.0.0.1 super-spider.com
127.0.0.1 super-websearch.com
127.0.0.1 supersexmachine.com
127.0.0.1 superwebsearch.com
127.0.0.1 supret.com
127.0.0.1 suzannebrecht.com
127.0.0.1 sweeteenz.com
127.0.0.1 tacil.org
127.0.0.1 tangounion.com
127.0.0.1 tastethemusic.com
127.0.0.1 tax-refund4you.com
127.0.0.1 tech-jobs.ws
127.0.0.1 technology-related.com
127.0.0.1 teen-biz.com
127.0.0.1 teen-pic-post.com
127.0.0.1 teenpornosex.com
127.0.0.1 teens4free.net
127.0.0.1 teensact.com
127.0.0.1 teensgate.com
127.0.0.1 teensguru.com
127.0.0.1 teenswamp.com
127.0.0.1 testosterone-birth-control.com
127.0.0.1 the-exit.com
127.0.0.1 the-huns-yellow-pages.com
127.0.0.1 thefakejournal.com
127.0.0.1 thehuy.net
127.0.0.1 theproxy.org
127.0.0.1 therealsearch.com
127.0.0.1 thesten.com
127.0.0.1 thornleygroup.com
127.0.0.1 tings.org
127.0.0.1 tit-x.com
127.0.0.1 titanvision.com
127.0.0.1 titsianna.com
127.0.0.1 toddhayes.com
127.0.0.1 toon-comics.com
127.0.0.1 tooncomics.com
127.0.0.1 topsearcher.com
127.0.0.1 trafficback.com
127.0.0.1 trafficswitcher.com
127.0.0.1 travel.picture-posters.com
127.0.0.1 true-portal.com
127.0.0.1 trytechnical.com
127.0.0.1 ufindall.click-now.net
127.0.0.1 umaxsearch.com
127.0.0.1 une-autre-france.com
127.0.0.1 unigays.com
127.0.0.1 unipages.cc
127.0.0.1 up2you.ru
127.0.0.1 urlstat.com
127.0.0.1 urlstat.ru
127.0.0.1 uralitel.ru
127.0.0.1 ursie.net
127.0.0.1 utahsweet.com
127.0.0.1 utopicportal.com
127.0.0.1 uusocialjustice.org
127.0.0.1 v61.com
127.0.0.1 vaginpics.com
127.0.0.1 valmyers.com
127.0.0.1 vegas-free.com
127.0.0.1 vegbuy.com
127.0.0.1 veloventures.com
127.0.0.1 verzila.com
127.0.0.1 victoriaadam.com
127.0.0.1 videocategories.com
127.0.0.1 vitamins-for-each.com
127.0.0.1 votehowe.org
127.0.0.1 vxebony.com
127.0.0.1 wakeupdick.com
127.0.0.1 warnomore.org
127.0.0.1 watersport-specialties.com
127.0.0.1 web-homepage.net
127.0.0.1 web-search.tk
127.0.0.1 webcoolsearch.com
127.0.0.1 websearchdot.com
127.0.0.1 weekend-movies.com
127.0.0.1 wetpornostars.com
127.0.0.1 whatsyoursearch.com
127.0.0.1 white-pages.ws
127.0.0.1 whittierblvd.com
127.0.0.1 win-in-casino.com
127.0.0.1 wiresearch.com
127.0.0.1 wolfpacracing.com
127.0.0.1 wordlist.jps.ru
127.0.0.1 wpc2001.org
127.0.0.1 wspzone.sexpornonline.com
127.0.0.1 wwwbet.net
127.0.0.1 wwwbetting.net
127.0.0.1 wwwpokergames.com
127.0.0.1 wwwpokerplayers.com
127.0.0.1 wwwroulette.net
127.0.0.1 x-library.com
127.0.0.1 x-webdesign.com
127.0.0.1 xcomics4u.com
127.0.0.1 xic-bs.com
127.0.0.1 xldr.com
127.0.0.1 xp18.com
127.0.0.1 xrenosearch.com
127.0.0.1 xtragay.com
127.0.0.1 xu.xu.pl
127.0.0.1 xxxcategories.com
127.0.0.1 xxxemailxxx.com
127.0.0.1 y-e-l-l-o-w.com
127.0.0.1 yellow500.com
127.0.0.1 yezol.com
127.0.0.1 you-search.com
127.0.0.1 you-search.com.ru
127.0.0.1 youfindall.com
127.0.0.1 youfindall.net
127.0.0.1 your-prescriptions.net
127.0.0.1 yourbookmarks.info
127.0.0.1 yourbookmarks.ws
127.0.0.1 ypir.com
127.0.0.1 ysa-info.net
127.0.0.1 yukohamano.com
127.0.0.1 ywebsearch.info
127.0.0.1 zapros.com
127.0.0.1 zesearch.com
127.0.0.1 ziportal.com
127.0.0.1 zipportal.com
127.0.0.1 zoneoffreeporn.com
127.0.0.1 zoomegasite.com
127.0.0.1 zvimigdal.com
127.0.0.1 zyban-zocor-levitra.com
127.0.0.1 t.rack.cc
127.0.0.1 omega-search.com
127.0.0.1 cool-xxx.net
127.0.0.1 revolto3.da.ru
127.0.0.1 dating-search.net
127.0.0.1 linksummary.com
127.0.0.1 duolaimi.net
127.0.0.1 ez-searching.com
127.0.0.1 freehqmovies.com
127.0.0.1 xzoomy.com
127.0.0.1 freescratchandwin.com
127.0.0.1 globalwebsearch.com
127.0.0.1 http://www.gocybersearch.com
127.0.0.1 mayancasino.com
127.0.0.1 http://www.hastalavista.com
127.0.0.1 http://www.free-popup-killer.com
127.0.0.1 http://www.digitalfan.com
127.0.0.1 google123.web1000.com
127.0.0.1 search.ieplugin.com
127.0.0.1 i-lookup.com
127.0.0.1 spidersearch.com
127.0.0.1 istarthere.com
127.0.0.1 xxxtoolbar.com
127.0.0.1 http://www.seekporn.org
127.0.0.1 17-plus.com
127.0.0.1 lolita4all1.xrensmagpost.com
127.0.0.1 mafiapics.com
127.0.0.1 http://www.teenmonster.com
127.0.0.1 ie.marketdart.com
127.0.0.1 masterbar.com
127.0.0.1 search.netzany.co
127.0.0.1 only-virgins.com
127.0.0.1 passthison.com
127.0.0.1 blondetgp.com
127.0.0.1 prolivation.com
127.0.0.1 server-au.imrworldwide.com
127.0.0.1 rocketsearch.com
127.0.0.1 roar.com
127.0.0.1 searchaccurate.com
127.0.0.1 searchalot.com
127.0.0.1 searchandbrowse.com
127.0.0.1 gtawarehouse.com
127.0.0.1 startium.com
127.0.0.1 searchandclick.com
127.0.0.1 searchby.net
127.0.0.1 searchdot.com
127.0.0.1 search-exe.com
127.0.0.1 secret-crush.com
127.0.0.1 seekseek.com
127.0.0.1 sexarena.com
127.0.0.1 sexocean.play-lolita.com
127.0.0.1 startsurfing.com
127.0.0.1 srng.net
127.0.0.1 apps.webservicehost.com
127.0.0.1 search.shopnav.com
127.0.0.1 wish7.com
127.0.0.1 http://www.supersexpass.com
127.0.0.1 surferbar.com
127.0.0.1 xlola.underagehost.com
127.0.0.1 hotlolitas.underagehost.com
127.0.0.1 loading-lolita.com
127.0.0.1 http://www.xupiter.com
127.0.0.1 xjupiter.com
127.0.0.1 http://www.xjupiter.com
127.0.0.1 http://www.browserwise.com
127.0.0.1 sqwire.com
127.0.0.1 orbitexplorer.com
127.0.0.1 searchcentrix.com
127.0.0.1 categories.mygeek.com
127.0.0.1 web-entrance.co
127.0.0.1 whazit.com
127.0.0.1 windowenhancer.com
127.0.0.1 buz.ru
127.0.0.1 iwon.com
127.0.0.1 http://www.bonzi.com
127.0.0.1 featured-results.com
127.0.0.1 searchmadesafe.net
127.0.0.1 quicklaunch.com
127.0.0.1 http://www.cashsurfers.com
127.0.0.1 lop.com
127.0.0.1 tjdo.com
127.0.0.1 ebav.com
127.0.0.1 ebgo.com
127.0.0.1 ebaw.com
127.0.0.1 ebkb.com
127.0.0.1 ebmu.com
127.0.0.1 ecmp.com
127.0.0.1 edhq.com
127.0.0.1 edty.com
127.0.0.1 sbee.com
127.0.0.1 aavc.com
127.0.0.1 acjp.com
127.0.0.1 ecmh.com
127.0.0.1 emch.com
127.0.0.1 ecpm.com
127.0.0.1 wabu.com
127.0.0.1 wabq.com
127.0.0.1 ebch.com
127.0.0.1 ebdv.com
127.0.0.1 ebdw.com
127.0.0.1 ebjp.com
127.0.0.1 ebkn.com
127.0.0.1 ebky.com
127.0.0.1 eblv.com
127.0.0.1 wbkb.com
127.0.0.1 ebvr.com
127.0.0.1 ecwz.com
127.0.0.1 ecyb.com
127.0.0.1 eduy.com
127.0.0.1 eeev.com
127.0.0.1 farse.com
127.0.0.1 ibmx.com
127.0.0.1 icwb.com
127.0.0.1 icwo.com
127.0.0.1 icwp.com
127.0.0.1 iddh.com
127.0.0.1 idhh.com
127.0.0.1 ifiz.com
127.0.0.1 iguu.com
127.0.0.1 samz.com
127.0.0.1 saoe.com
127.0.0.1 sbjr.com
127.0.0.1 sbnl.com
127.0.0.1 sbnt.com
127.0.0.1 sbvr.com
127.0.0.1 scbm.com
127.0.0.1 sckr.com
127.0.0.1 scrk.com
127.0.0.1 sdry.com
127.0.0.1 seld.com
127.0.0.1 sfux.com
127.0.0.1 sheat.com
127.0.0.1 sipo.com
127.0.0.1 smds.com
127.0.0.1 srib.com
127.0.0.1 srox.com
127.0.0.1 srsf.com
127.0.0.1 ssaw.com
127.0.0.1 ssby.com
127.0.0.1 surj.com
127.0.0.1 tbvg.com
127.0.0.1 tdak.com
127.0.0.1 tdmy.com
127.0.0.1 tefs.com
127.0.0.1 tfil.com
127.0.0.1 tjar.com
127.0.0.1 tjaw.com
127.0.0.1 tjgo.com
127.0.0.1 tjem.com
127.0.0.1 torc.com
127.0.0.1 wfix.com
127.0.0.1 wflu.com
127.0.0.1 tdko.com
127.0.0.1 thko.com
127.0.0.1 H24413.tfil.com
127.0.0.1 germany.rub.to
127.0.0.1 search.rub.to
127.0.0.1 unitedstates.rub.to
127.0.0.1 http://www.commonname.com
127.0.0.1 http://www.ezcybersearch.com
127.0.0.1 http://www.jethomepage.com
127.0.0.1 http://www.gohip.com
127.0.0.1 hotbar.com
127.0.0.1 http://www.huntbar.com
127.0.0.1 search.imiserver.com
127.0.0.1 infospace.com/blsrch.dp.toolbar
127.0.0.1 searchenhancement.com
127.0.0.1 newtonknows.com
127.0.0.1 search-explorer.net
127.0.0.1 searchsquire.com
127.0.0.1 secondpower.com
127.0.0.1 2ndpower.com
127.0.0.1 searchgateway.net
127.0.0.1 worldusa.com
127.0.0.1 http://www.topsearcher.com
127.0.0.1 smutserver.com
127.0.0.1 searchmeup.com
127.0.0.1 cameup.com
127.0.0.1 kliksearch.com
127.0.0.1 realphx.com
127.0.0.1 blazefind.com
127.0.0.1 zoofil.com
127.0.0.1 terafinder.com
127.0.0.1 008i.com
127.0.0.1 171203.com
127.0.0.1 39-93.com
127.0.0.1 adult-personal.us
127.0.0.1 cashsearch.biz
127.0.0.1 cl55.biz
127.0.0.1 dailyteenspic.com
127.0.0.1 dialer2004.com
127.0.0.1 digital-pornography.com
127.0.0.1 eager-sex.com
127.0.0.1 ergosites.com
127.0.0.1 freecj.com
127.0.0.1 greg-search.com
127.0.0.1 incest-host.com
127.0.0.1 ironcarteam.com
127.0.0.1 is-best.com
127.0.0.1 killerpornstars.com
127.0.0.1 lollitop.com
127.0.0.1 love-host.com
127.0.0.1 myexexex.com
127.0.0.1 my-finder.com
127.0.0.1 onlineclick.net
127.0.0.1 onlysex.ws
127.0.0.1 regfreeze.com
127.0.0.1 ruworld.com
127.0.0.1 selltraffic.biz
127.0.0.1 sexunique.net
127.0.0.1 sinpussy.com
127.0.0.1 teenhost.net
127.0.0.1 ultraload.net
127.0.0.1 vse-moe.biz
127.0.0.1 xsex.ws
127.0.0.1 75tz.com
127.0.0.1 iefeadsl.com
127.0.0.1 rf104.com
127.0.0.1 http://www.v61.com
127.0.0.1 ads.centralmedia.ws
127.0.0.1 c.centralmedia.ws
127.0.0.1 count.cc
127.0.0.1 topx.cc
127.0.0.1 sidefind.com
127.0.0.1 thenewsearch.com
127.0.0.1 new-search.net
127.0.0.1 x-google.net
127.0.0.1 adultgambling.org
127.0.0.1 bitchesonline.net
127.0.0.1 girls4rent.net
127.0.0.1 usefullsoft.net
127.0.0.1 livegambling.com
127.0.0.1 adultsgames.net
127.0.0.1 easyantispy.com
127.0.0.1 spybotremover.net
127.0.0.1 winprotect.net
127.0.0.1 funny-girls.com
127.0.0.1 winmsn.com
127.0.0.1 oneclicksearches.com
127.0.0.1 bestweblinks.com
127.0.0.1 iqsearch.net
127.0.0.1 dumpserv.com
127.0.0.1 helpyoursearch.com
127.0.0.1 sgrunt.biz
127.0.0.1 yeak.net
127.0.0.1 u45.cx
127.0.0.1 u46.cx
127.0.0.1 u47.cc
127.0.0.1 u48.cc
127.0.0.1 sfonditalia.biz
127.0.0.1 realarea.biz
127.0.0.1 archiviosex.net
127.0.0.1 agava.com
127.0.0.1 agava.ru
127.0.0.1 hut1.ru
127.0.0.1 hu15.ru
127.0.0.1 winfixer.com
127.0.0.1 3721.com
127.0.0.1 easysearchingtips.com
127.0.0.1 fine-search.net
127.0.0.1 noproblemsurf.com
127.0.0.1 pcspyremover.com
127.0.0.1 search-motor.com
127.0.0.1 searchwhatuwant.com
127.0.0.1 ad25.com
127.0.0.1 ad45.com
127.0.0.1 ad77.com
127.0.0.1 ad86.com
127.0.0.1 full-search.net
127.0.0.1 go2-search.com
127.0.0.1 onemoresearch.net
127.0.0.1 search-777.com
127.0.0.1 search-to-find.com
127.0.0.1 search-what.net
127.0.0.1 winshow.biz
127.0.0.1 lookfor.cc
127.0.0.1 looking-for.cc
127.0.0.1 tgp-4-you.com
127.0.0.1 veryeasysearch.com
127.0.0.1 010402.com
127.0.0.1 20x2p.com
127.0.0.1 db105.com
127.0.0.1 ga31.com
127.0.0.1 mpeg-look.com
127.0.0.1 n-udd.com
127.0.0.1 p-uud.com
127.0.0.1 porn-screen.com
127.0.0.1 rb37.com
127.0.0.1 t058.com
127.0.0.1 u-239.com
127.0.0.1 v-224.com
127.0.0.1 trackhits.cc
127.0.0.1 tracktraff.cc
127.0.0.1 power-cleaner.com
127.0.0.1 yoursitebar.com
127.0.0.1 ysbweb.com
127.0.0.1 http://www.ysbweb.com
127.0.0.1 installcash.com
127.0.0.1 toolbarcash.com
127.0.0.1 enjoywebsurf.com
127.0.0.1 msnguard.cc
127.0.0.1 searchclick.cc
127.0.0.1 havy.biz
127.0.0.1 ewizard.cc
127.0.0.1 4klm.com
127.0.0.1 camup.net
127.0.0.1 bdsmlibrary.net
127.0.0.1 n-glx.s-redirect.com
127.0.0.1 aaasexypics.com
127.0.0.1 allforadult.com
127.0.0.1 autoescrowpay.com
127.0.0.1 awmcash.biz
127.0.0.1 awmdabest.com
127.0.0.1 buldog-stats.com
127.0.0.1 counter.sexmaniack.com
127.0.0.1 fregat.drocherway.com
127.0.0.1 greg-tut.com
127.0.0.1 iframe.biz
127.0.0.1 megapornix.com
127.0.0.1 newiframe.biz
127.0.0.1 nylonsexy.com
127.0.0.1 pizdato.biz
127.0.0.1 sexfiles.nu
127.0.0.1 slutmania.biz
127.0.0.1 sp2fucked.biz
127.0.0.1 toolbarpartner.com
127.0.0.1 vesbiz.biz
127.0.0.1 virgin-tgp.net
127.0.0.1 vparivalka.com
127.0.0.1 x.full-tgp.net
127.0.0.1 toolbar.cc
127.0.0.1 himen.biz
127.0.0.1 msupdater.net
127.0.0.1 http://www.msupdater.net
127.0.0.1 1800searchonline.com
127.0.0.1 http://www.1800searchonline.com
127.0.0.1 1stsearchportal.com
127.0.0.1 http://www.1stsearchportal.com
127.0.0.1 24-7searching-and-more.com
127.0.0.1 http://www.24-7searching-and-more.com
127.0.0.1 971searchbox.com
127.0.0.1 http://www.971searchbox.com
127.0.0.1 aaawebfinder.com
127.0.0.1 http://www.aaawebfinder.com
127.0.0.1 ampmsearch.com
127.0.0.1 http://www.ampmsearch.com
127.0.0.1 clickhere4search.com
127.0.0.1 http://www.clickhere4search.com
127.0.0.1 clicktomakeasearch.com
127.0.0.1 http://www.clicktomakeasearch.com
127.0.0.1 directsearchzone.com
127.0.0.1 http://www.directsearchzone.com
127.0.0.1 easysearch4you.com
127.0.0.1 http://www.easysearch4you.com
127.0.0.1 enterthesearch.com
127.0.0.1 http://www.enterthesearch.com
127.0.0.1 esearch2005.com
127.0.0.1 http://www.esearch2005.com
127.0.0.1 eza1netsearch.com
127.0.0.1 http://www.eza1netsearch.com
127.0.0.1 ezwebsearching.com
127.0.0.1 http://www.ezwebsearching.com
127.0.0.1 globalefinder.com
127.0.0.1 http://www.globalefinder.com
127.0.0.1 go2realsearch.com
127.0.0.1 http://www.go2realsearch.com
127.0.0.1 myseachexplorer.com
127.0.0.1 http://www.myseachexplorer.com
127.0.0.1 quicksearch360.com
127.0.0.1 http://www.quicksearch360.com
127.0.0.1 s1s1s1search.com
127.0.0.1 http://www.s1s1s1search.com
127.0.0.1 search101online.com
127.0.0.1 http://www.search101online.com
127.0.0.1 search123forme.com
127.0.0.1 http://www.search123forme.com
127.0.0.1 search345quest.com
127.0.0.1 http://www.search345quest.com
127.0.0.1 searchmiracle.com
127.0.0.1 http://www.searchmiracle.com
127.0.0.1 searchtheworld4you.com
127.0.0.1 http://www.searchtheworld4you.com
127.0.0.1 searchwebzone.com
127.0.0.1 http://www.searchwebzone.com
127.0.0.1 seektheglobe.com
127.0.0.1 http://www.seektheglobe.com
127.0.0.1 sitesearchcentral.com
127.0.0.1 http://www.sitesearchcentral.com
127.0.0.1 the818search-co.com
127.0.0.1 http://www.the818search-co.com
127.0.0.1 type2find.com
127.0.0.1 http://www.type2find.com
127.0.0.1 xosearchox.com
127.0.0.1 http://www.xosearchox.com
127.0.0.1 yoursearchspace.com
127.0.0.1 http://www.yoursearchspace.com
127.0.0.1 httpwwwads.com
127.0.0.1 http://www.httpwwwads.com
127.0.0.1 adshttp.com
127.0.0.1 http://www.adshttp.com
127.0.0.1 adsonwww.com
127.0.0.1 http://www.adsonwww.com
127.0.0.1 dnaads.com
127.0.0.1 http://www.dnaads.com
127.0.0.1 marketengines.com
127.0.0.1 http://www.marketengines.com
127.0.0.1 ad-w-a-r-e.com
127.0.0.1 http://www.ad-w-a-r-e.com
127.0.0.1 a-d-w-a-r-e.com
127.0.0.1 http://www.a-d-w-a-r-e.com
127.0.0.1 securityindex.net
127.0.0.1 http://www.securityindex.net
127.0.0.1 sexpicsporn.com
127.0.0.1 http://www.sexpicsporn.com
127.0.0.1 free-spybot.com
127.0.0.1 http://www.free-spybot.com
127.0.0.1 cashengines.com
127.0.0.1 http://www.cashengines.com
127.0.0.1 microsoftantispyware.net
127.0.0.1 http://www.microsoftantispyware.net
127.0.0.1 mircosoftantispy.com
127.0.0.1 http://www.mircosoftantispy.com
127.0.0.1 msantispy.com
127.0.0.1 http://www.msantispy.com
127.0.0.1 netspyprotector.com
127.0.0.1 http://www.netspyprotector.com
127.0.0.1 avforce.com
127.0.0.1 http://www.avforce.com
127.0.0.1 savehits.com
127.0.0.1 http://www.savehits.com
127.0.0.1 saveli.com
127.0.0.1 http://www.saveli.com
127.0.0.1 metastop.com
127.0.0.1 http://www.metastop.com
127.0.0.1 perlink.biz
127.0.0.1 http://www.perlink.biz
127.0.0.1 highdialer.com
127.0.0.1 http://www.highdialer.com
127.0.0.1 online-more.com
127.0.0.1 http://www.online-more.com
127.0.0.1 http://www.syserrors.com
127.0.0.1 http://www.vcodec.com
127.0.0.1 toolbartraff.biz
127.0.0.1 http://www.toolbartraff.biz
127.0.0.1 pcadprotector.cc
127.0.0.1 http://www.pcadprotector.cc
127.0.0.1 airtleworld.com
127.0.0.1 http://www.airtleworld.com
127.0.0.1 domaincar.com
127.0.0.1 http://www.domaincar.com
127.0.0.1 worldray.com
127.0.0.1 http://www.worldray.com
127.0.0.1 www5.worldray.com
127.0.0.1 www6.worldray.com
127.0.0.1 http://www.spytrooper.com
127.0.0.1 spytrooper.com
127.0.0.1 dl.ad-ware.cc
127.0.0.1 ad-ware.cc
127.0.0.1 downloads.adaware.cc
127.0.0.1 adaware.cc
127.0.0.1 hitscount.net
127.0.0.1 count.hitscount.net
127.0.0.1 fined.biz
127.0.0.1 de.ag
127.0.0.1 games.de.ag
127.0.0.1 http://www.games.de.ag
127.0.0.1 little-download.net
127.0.0.1 http://www.little-download.net
127.0.0.1 little-help.com
127.0.0.1 http://www.little-help.com
127.0.0.1 http://www.spyaxe.net
127.0.0.1 http://www.spyaxe.com
127.0.0.1 http://www.spyaxe.biz
127.0.0.1 http://www.malwarewipe.com
127.0.0.1 dl.malwarewipe.com
127.0.0.1 http://www.malwarewipeupdate.com
127.0.0.1 unionseek.com
127.0.0.1 http://www.unionseek.com
127.0.0.1 sirh0t.blackhats.tc
127.0.0.1 blackhats.tc
127.0.0.1 http://www.blackhats.tc
127.0.0.1 ritztours.com
127.0.0.1 http://www.ritztours.com
127.0.0.1 flashflashmx.3322.org
127.0.0.1 3322.org
127.0.0.1 http://www.3322.org
127.0.0.1 jupitersatellites.biz
127.0.0.1 http://www.jupitersatellites.biz
127.0.0.1 yops.biz
127.0.0.1 http://www.yops.biz
127.0.0.1 goldengr.hypermart.net
127.0.0.1 web-nexus.net
127.0.0.1 safe-sales.biz
127.0.0.1 http://www.safe-sales.biz
127.0.0.1 jerrynews.com
127.0.0.1 http://www.jerrynews.com
127.0.0.1 Teslaplus.com
127.0.0.1 http://www.Teslaplus.com
127.0.0.1 WorldAntiSpy.com
127.0.0.1 http://www.WorldAntiSpy.com
127.0.0.1 http://www.securitycaution.com
127.0.0.1 securitycaution.com
127.0.0.1 adservs.com
127.0.0.1 csx.adservs.com
127.0.0.1 http://www.csx.adservs.com
127.0.0.1 toolbarbest.biz
127.0.0.1 http://www.toolbarbest.biz
127.0.0.1 game4all.biz
127.0.0.1 http://www.game4all.biz
127.0.0.1 game4all.biz/adv/018
127.0.0.1 http://www.game4all.biz/adv/018
127.0.0.1 wm.kannylizaciya.info
127.0.0.1 http://www.wm.kannylizaciya.info
127.0.0.1 wm.buhartes.info
127.0.0.1 http://www.wm.buhartes.info
127.0.0.1 login.fric.cn
127.0.0.1 http://www.login.fric.cn
127.0.0.1 xsremover.com
127.0.0.1 http://www.xsremover.com
127.0.0.1 spydeface.com
127.0.0.1 http://www.spydeface.com
127.0.0.1 alfacleaner.com
127.0.0.1 http://www.alfacleaner.com
127.0.0.1 innovagest2000.com
127.0.0.1 http://www.innovagest2000.com
127.0.0.1 http://www.thespyguard.com
127.0.0.1 thespyguard.com
127.0.0.1 http://www.adwarepunisher.com
127.0.0.1 adwarepunisher.com
127.0.0.1 http://www.spyiblock.com
127.0.0.1 spyiblock.com
127.0.0.1 http://www.uvu-channel.com
127.0.0.1 uvu-channel.com
127.0.0.1 http://www.hachimitsu-lemon.com
127.0.0.1 hachimitsu-lemon.com
127.0.0.1 SEARCHTOFIND.NET
127.0.0.1 http://www.SEARCHTOFIND.NET
127.0.0.1 http://www.pestrap.com
127.0.0.1 pestrap.com
127.0.0.1 uptodatesecurity.com
127.0.0.1 http://www.uptodatesecurity.com
127.0.0.1 thinstall.abetterinternet.com
127.0.0.1 http://www.3abetterinternet.com
127.0.0.1 download.abetterinternet.com
127.0.0.1 http://www.abetterinternet.com
127.0.0.1 qmex.psyche-evolution.com
127.0.0.1 http://www.qmex.psyche-evolution.com
127.0.0.1 core.psyche-evolution.com
127.0.0.1 http://www.core.psyche-evolution.com
127.0.0.1 1stantivirus.com
127.0.0.1 http://www.1stantivirus.com
127.0.0.1 scanandrepair.com
127.0.0.1 http://www.scanandrepair.com
127.0.0.1 uydsiygeds.com
127.0.0.1 http://www.uydsiygeds.com
127.0.0.1 pesttrap.com
127.0.0.1 http://www.pesttrap.com
127.0.0.1 adwarebazooka.com
127.0.0.1 get.adwarebazooka.com
127.0.0.1 http://www.adwarebazooka.com
127.0.0.1 kliksoftware.com
127.0.0.1 http://www.kliksoftware.com
127.0.0.1 hitvirus.com
127.0.0.1 get.hitvirus.com
127.0.0.1 http://www.hitvirus.com
127.0.0.1 promo.dollarrevenue.com
127.0.0.1 http://www.promo.dollarrevenue.com
127.0.0.1 maxifile.com
127.0.0.1 http://www.maxifile.com
127.0.0.1 targetsaver.com
127.0.0.1 http://www.targetsaver.com
127.0.0.1 dl.targetsaver.com
127.0.0.1 http://www.dl.targetsaver.com
127.0.0.1 nonameforthisdomain.com
127.0.0.1 http://www.nonameforthisdomain.com
127.0.0.1 hypoteches.com
127.0.0.1 http://www.hypoteches.com
127.0.0.1 http://www.earthllnk.net
127.0.0.1 earthllnk.net
127.0.0.1 hostance.net
127.0.0.1 http://www.hostance.net
127.0.0.1 my-dedik-one.com
127.0.0.1 http://www.my-dedik-one.com
127.0.0.1 10sek.com
127.0.0.1 http://www.10sek.com
127.0.0.1 6sek.com
127.0.0.1 http://www.6sek.com
127.0.0.1 cashdeluxe.net
127.0.0.1 http://www.cashdeluxe.net
127.0.0.1 stats.cashdeluxe.net
127.0.0.1 http://www.stats.cashdeluxe.net
127.0.0.1 http://www.2006ooo.com
127.0.0.1 http://www.spyware-stop.com
127.0.0.1 spyware-stop.com
127.0.0.1 http://www.SpyShield.org
127.0.0.1 SpyShield.org
127.0.0.1 utils.winfixer.com
127.0.0.1 http://www.utils.winfixer.com
127.0.0.1 toolbarbucks.biz
127.0.0.1 http://www.toolbarbucks.biz
127.0.0.1 derklaif.biz
127.0.0.1 http://www.derklaif.biz
127.0.0.1 http://www.v-codec.com
127.0.0.1 v-codec.com
127.0.0.1 http://www.emediacodec.com
127.0.0.1 emediacodec.com
127.0.0.1 http://www.popentertain.com
127.0.0.1 popentertain.com
127.0.0.1 softwareprofit.com
127.0.0.1 http://www.softwareprofit.com
127.0.0.1 de.winantivirus.com
127.0.0.1 download.winantivirus.com
127.0.0.1 winantivirus.com
127.0.0.1 http://www.winantivirus.com
127.0.0.1 offers.bullseye-network.com
127.0.0.1 http://www.offers.bullseye-network.com
127.0.0.1 bullseye-network.com
127.0.0.1 http://www.bullseye-network.com
127.0.0.1 sponsor2.ucmore.com
127.0.0.1 http://www.sponsor2.ucmore.com
127.0.0.1 apps.deskwizz
127.0.0.1 http://www.apps.deskwizz
127.0.0.1 hostthesky.com
127.0.0.1 http://www.hostthesky.com
127.0.0.1 dbdecicated.com
127.0.0.1 http://www.dbdecicated.com
127.0.0.1 readagreement.net
127.0.0.1 http://www.readagreement.net
127.0.0.1 gl.secdep.info
127.0.0.1 http://www.gl.secdep.info
127.0.0.1 spyfalcon.com
127.0.0.1 http://www.spyfalcon.com
127.0.0.1 spyfalconupdate.com
127.0.0.1 http://www.spyfalconupdate.com
127.0.0.1 spy-shield.com
127.0.0.1 http://www.spy-shield.com
127.0.0.1 winnanny.com
127.0.0.1 http://www.winnanny.com
127.0.0.1 winsoftware.com
127.0.0.1 http://www.winsoftware.com
127.0.0.1 winfirewall.com
127.0.0.1 http://www.winfirewall.com
127.0.0.1 winantispyware.com
127.0.0.1 http://www.winantispyware.com
127.0.0.1 udefender.com
127.0.0.1 http://www.udefender.com
127.0.0.1 bravesentry.com
127.0.0.1 http://www.bravesentry.com
127.0.0.1 content.dollarrevenue.com
127.0.0.1 http://www.content.dollarrevenue.com
127.0.0.1 toolbar.azebar.com
127.0.0.1 http://www.toolbar.azebar.com
127.0.0.1 traffsale1.biz
127.0.0.1 http://www.traffsale1.biz
127.0.0.1 spywaredisinfector.com
127.0.0.1 http://www.spywaredisinfector.com
127.0.0.1 SpyCut.com
127.0.0.1 http://www.SpyCut.com
127.0.0.1 almanah.biz
127.0.0.1 http://www.almanah.biz
127.0.0.1 antispydns.biz
127.0.0.1 http://www.antispydns.biz
127.0.0.1 spyaxeupdate.com
127.0.0.1 http://www.spyaxeupdate.com
127.0.0.1 malwarewipesupport.com
127.0.0.1 http://www.malwarewipesupport.com
127.0.0.1 remedyantispy.com
127.0.0.1 http://www.remedyantispy.com
127.0.0.1 systemstable.com
127.0.0.1 http://www.systemstable.com
127.0.0.1 whoisprivacyprotect.com
127.0.0.1 http://www.whoisprivacyprotect.com
127.0.0.1 prime.webhancer.com
127.0.0.1 http://www.prime.webhancer.com
127.0.0.1 webhancer.com
127.0.0.1 http://www.webhancer.com
127.0.0.1 dr.webhancer.com
127.0.0.1 http://www.dr.webhancer.com
127.0.0.1 dr2.webhancer.com
127.0.0.1 http://www.dr2.webhancer.com
127.0.0.1 http://www.onli-ne.com
127.0.0.1 spycontra.com
127.0.0.1 http://www.spycontra.com
127.0.0.1 anti-virus-pro.com
127.0.0.1 http://www.anti-virus-pro.com
127.0.0.1 check.jupitersatellites.biz
127.0.0.1 http://www.check.jupitersatellites.biz
127.0.0.1 necessaryupdates.com
127.0.0.1 http://www.necessaryupdates.com
127.0.0.1 bestworldgirls-for-u.net
127.0.0.1 http://www.bestworldgirls-for-u.net
127.0.0.1 stejax.pl
127.0.0.1 http://www.stejax.pl
127.0.0.1 kitehosting.com
127.0.0.1 http://www.kitehosting.com
127.0.0.1 ware2006.com
127.0.0.1 http://www.ware2006.com
127.0.0.1 filestore.com
127.0.0.1 http://www.filestore.com
127.0.0.1 systemupdates.net
127.0.0.1 http://www.systemupdates.net
127.0.0.1 logs.vapochille.com
127.0.0.1 http://www.logs.vapochille.com
127.0.0.1 goldenfreehost.com
127.0.0.1 http://www.goldenfreehost.com
127.0.0.1 todaywarnings.com
127.0.0.1 http://www.todaywarnings.com
127.0.0.1 spywarequake.com
127.0.0.1 spywarequake.info
127.0.0.1 http://www.spywarequake.info
127.0.0.1 http://www.spywarequake.com
127.0.0.1 download2.spywarequake.com
127.0.0.1 download3.spywarequake.com
127.0.0.1 download4.spywarequake.com
127.0.0.1 download5.spywarequake.com
127.0.0.1 download7.spywarequake.com
127.0.0.1 download8.spywarequake.com
127.0.0.1 download9.spywarequake.com
127.0.0.1 download10.spywarequake.com
127.0.0.1 download11.spywarequake.com
127.0.0.1 download12.spywarequake.com
127.0.0.1 download13.spywarequake.com
127.0.0.1 download15.spywarequake.com
127.0.0.1 updates.spywarequake.com
127.0.0.1 urgentsystemupdate.com
127.0.0.1 http://www.urgentsystemupdate.com
127.0.0.1 dl2.spywarestrike.com
127.0.0.1 dl3.spywarestrike.com
127.0.0.1 dl4.spywarestrike.com
127.0.0.1 dl5.spywarestrike.com
127.0.0.1 dl6.spywarestrike.com
127.0.0.1 dl7.spywarestrike.com
127.0.0.1 dl8.spywarestrike.com
127.0.0.1 nospywaresoft.com
127.0.0.1 spywarestrike.com
127.0.0.1 http://www.nospywaresoft.com
127.0.0.1 http://www.spywarestrike.com
127.0.0.1 spyaxesupport.com
127.0.0.1 http://www.spyaxesupport.com
127.0.0.1 download3.spyaxe.com
127.0.0.1 download4.spyaxe.com
127.0.0.1 download5.spyaxe.com
127.0.0.1 download6.spyaxe.com
127.0.0.1 dl2.spyfalcon.com
127.0.0.1 dl3.spyfalcon.com
127.0.0.1 dl4.spyfalcon.com
127.0.0.1 dl5.spyfalcon.com
127.0.0.1 dl9.spyfalcon.com
127.0.0.1 dl10.spyfalcon.com
127.0.0.1 dl16.spyfalcon.com
127.0.0.1 http://www.sgrunt.biz
127.0.0.1 traffbest.biz
127.0.0.1 http://www.traffbest.biz
127.0.0.1 securityfeature.com
127.0.0.1 http://www.securityfeature.com
127.0.0.1 pimasoft.com
127.0.0.1 http://www.pimasoft.com
127.0.0.1 blackhawksoftware.com
127.0.0.1 http://www.blackhawksoftware.com
127.0.0.1 spy-sniper.com
127.0.0.1 http://www.spy-sniper.com
127.0.0.1 safetydefender.com
127.0.0.1 http://www.safetydefender.com
127.0.0.1 securitywarnings.net
127.0.0.1 http://www.securitywarnings.net
127.0.0.1 urgentsystemupdate.biz
127.0.0.1 http://www.urgentsystemupdate.biz
127.0.0.1 antispylab.com
127.0.0.1 http://www.antispylab.com
127.0.0.1 spywaresheriff.com
127.0.0.1 http://www.spywaresheriff.com
127.0.0.1 allmegabucks.com
127.0.0.1 http://www.allmegabucks.com
127.0.0.1 rizalof.com
127.0.0.1 http://www.rizalof.com
127.0.0.1 rc.rizalof.com
127.0.0.1 media-codec.com
127.0.0.1 http://www.media-codec.com
127.0.0.1 SpywareScraper.com
127.0.0.1 http://www.SpywareScraper.com
127.0.0.1 crystalysmedia.com
127.0.0.1 http://www.crystalysmedia.com
127.0.0.1 180solutions.com
127.0.0.1 cts.180solutions.com
127.0.0.1 bis.180solutions.com
127.0.0.1 downloads.180solutions.com
127.0.0.1 uploads.180solutions.com
127.0.0.1 installs.180solutions.com
127.0.0.1 config.180solutions.com
127.0.0.1 ping.180solutions.com
127.0.0.1 tv.180solutions.com
127.0.0.1 nowhere.180solutions.com
127.0.0.1 http://www.180solutions.com
127.0.0.1 180searchassistant.com
127.0.0.1 http://www.180searchassistant.com
127.0.0.1 theguardservices.com
127.0.0.1 http://www.theguardservices.com
127.0.0.1 securitybulletin.net
127.0.0.1 http://www.securitybulletin.net
127.0.0.1 http://www.supernet.speedserv.com
127.0.0.1 spyonthis.net
127.0.0.1 download.spyonthis.net
127.0.0.1 http://www.spyonthis.net
127.0.0.1 hijack-this.net
127.0.0.1 http://www.hijack-this.net
127.0.0.1 errorsafe.com
127.0.0.1 de.errorsafe.com
127.0.0.1 download.errorsafe.com
127.0.0.1 http://www.errorsafe.com
127.0.0.1 amaena.com
127.0.0.1 trial.updates.winsoftware.com
127.0.0.1 instlog.winfixer.com
127.0.0.1 winfixer2006.com
127.0.0.1 http://www.winfixer2006.com
127.0.0.1 webtopsecurity.com
127.0.0.1 http://www.webtopsecurity.com
127.0.0.1 traff5all.biz
127.0.0.1 http://www.traff5all.biz
127.0.0.1 1-extreme.biz
127.0.0.1 http://www.1-extreme.biz
127.0.0.1 download.bravesentry.com
127.0.0.1 http://www.download.bravesentry.com
127.0.0.1 evko.biz
127.0.0.1 http://www.evko.biz
127.0.0.1 lavasoftupdate.com
127.0.0.1 http://www.lavasoftupdate.com
127.0.0.1 download.secureyournet.biz
127.0.0.1 http://www.download.secureyournet.biz
127.0.0.1 secureyournet.biz
127.0.0.1 http://www.secureyournet.biz
127.0.0.1 windupdates.com
127.0.0.1 asdbiz.biz
127.0.0.1 http://www.asdbiz.biz
127.0.0.1 spywarelabs.com
127.0.0.1 http://www.spywarelabs.com
127.0.0.1 traffweb1.biz
127.0.0.1 http://www.traffweb1.biz
127.0.0.1 newtoolbar.biz
127.0.0.1 http://www.newtoolbar.biz
127.0.0.1 buytraff.biz
127.0.0.1 http://www.buytraff.biz
127.0.0.1 safetyuptodate.com
127.0.0.1 http://www.safetyuptodate.com
127.0.0.1 crazywinnings.com
127.0.0.1 frame.crazywinnings.com
127.0.0.1 http://www.crazywinnings.com
127.0.0.1 topconverting.com
127.0.0.1 http://www.topconverting.com
127.0.0.1 casalemedia.com
127.0.0.1 b.casalemedia.com
127.0.0.1 http://www.casalemedia.com
127.0.0.1 addictivetechnologies.com
127.0.0.1 http://www.addictivetechnologies.com
127.0.0.1 addictivetechnologies.net
127.0.0.1 http://www.addictivetechnologies.net
127.0.0.1 admin2cash.biz
127.0.0.1 http://www.admin2cash.biz
127.0.0.1 advcash.biz
127.0.0.1 http://www.advcash.biz
127.0.0.1 all4internet.com
127.0.0.1 http://www.all4internet.com
127.0.0.1 bettersearch.biz
127.0.0.1 http://www.bettersearch.biz
127.0.0.1 c4tdownload.com
127.0.0.1 http://www.c4tdownload.com
127.0.0.1 clickspring.net
127.0.0.1 http://www.clickspring.net
127.0.0.1 contentmatch.net
127.0.0.1 http://www.contentmatch.net
127.0.0.1 dialer-shop.com
127.0.0.1 http://www.dialer-shop.com
127.0.0.1 dialoff.com
127.0.0.1 http://www.dialoff.com
127.0.0.1 energy-factor.com
127.0.0.1 http://www.energy-factor.com
127.0.0.1 hardcorefantasyland.com
127.0.0.1 http://www.hardcorefantasyland.com
127.0.0.1 hardfootballbabes.com
127.0.0.1 http://www.hardfootballbabes.com
127.0.0.1 linkautomatici.com
127.0.0.1 http://www.linkautomatici.com
127.0.0.1 master69.biz
127.0.0.1 http://www.master69.biz
127.0.0.1 master70.biz
127.0.0.1 http://www.master70.biz
127.0.0.1 master71.biz
127.0.0.1 http://www.master71.biz
127.0.0.1 mcdial.biz
127.0.0.1 http://www.mcdial.biz
127.0.0.1 mt-download.com
127.0.0.1 http://www.mt-download.com
127.0.0.1 my-teensex.com
127.0.0.1 overpro.com
127.0.0.1 private-dialer.biz
127.0.0.1 private-iframe.biz
127.0.0.1 redfunny.com
127.0.0.1 scoobidoo.com
127.0.0.1 skoobidoo.com
127.0.0.1 sexvideopro.com
127.0.0.1 storage-tasp.com
127.0.0.1 xbeta69.com
127.0.0.1 securityuptodate.net
127.0.0.1 http://www.securityuptodate.net
127.0.0.1 troonety.biz
127.0.0.1 http://www.troonety.biz
127.0.0.1 zurrusco.com
127.0.0.1 http://www.zurrusco.com
127.0.0.1 breenten.biz
127.0.0.1 http://www.breenten.biz
127.0.0.1 votreenton.biz
127.0.0.1 http://www.votreenton.biz
127.0.0.1 ozonung.biz
127.0.0.1 http://www.ozonung.biz
127.0.0.1 digikeygen.com
127.0.0.1 http://www.digikeygen.com
127.0.0.1 5starvideos.com
127.0.0.1 http://www.5starvideos.com
127.0.0.1 moviereality.com
127.0.0.1 http://www.moviereality.com
127.0.0.1 perfectedsecurity.com
127.0.0.1 http://www.perfectedsecurity.com
127.0.0.1 securityprecaution.net
127.0.0.1 http://www.securityprecaution.net
127.0.0.1 securityupdatesite.com
127.0.0.1 http://www.securityupdatesite.com
127.0.0.1 dns-look-up.com
127.0.0.1 http://www.dns-look-up.com
127.0.0.1 search200.com
127.0.0.1 http://www.search200.com
127.0.0.1 404dns.com
127.0.0.1 http://www.404dns.com
127.0.0.1 mcboo.com
127.0.0.1 dr.mcboo.com
127.0.0.1 http://www.mcboo.com
127.0.0.1 appealcircuit.com
127.0.0.1 http://www.appealcircuit.com
127.0.0.1 balotierra.com
127.0.0.1 http://www.balotierra.com
127.0.0.1 oldflock.com
127.0.0.1 http://www.oldflock.com
127.0.0.1 pornmagpass.com
127.0.0.1 http://www.pornmagpass.com
127.0.0.1 dailypornmag.com
127.0.0.1 http://www.dailypornmag.com
127.0.0.1 babespornmag.com
127.0.0.1 http://www.babespornmag.com
127.0.0.1 teenspornmag.com
127.0.0.1 http://www.teenspornmag.com
127.0.0.1 maturespornmag.com
127.0.0.1 http://www.maturespornmag.com
127.0.0.1 hardcorepornmag.com
127.0.0.1 http://www.hardcorepornmag.com
127.0.0.1 gayspornmag.com
127.0.0.1 http://www.gayspornmag.com
127.0.0.1 topsecuritysite.net
127.0.0.1 http://www.topsecuritysite.net
127.0.0.1 bestsafetyguide.net
127.0.0.1 http://www.bestsafetyguide.net
127.0.0.1 searchweb2.com
127.0.0.1 http://www.searchweb2.com
127.0.0.1 http://www.lop.com
127.0.0.1 vidscodec.com
127.0.0.1 http://www.vidscodec.com
127.0.0.1 newvidscodec.net
127.0.0.1 http://www.newvidscodec.net
127.0.0.1 media-codec.net
127.0.0.1 http://www.media-codec.net
127.0.0.1 mediacodec.net
127.0.0.1 http://www.mediacodec.net
127.0.0.1 imediacodec.com
127.0.0.1 http://www.imediacodec.com
127.0.0.1 emcodec.com
127.0.0.1 http://www.emcodec.com
127.0.0.1 vicodec.com
127.0.0.1 http://www.vicodec.com
127.0.0.1 xpasswordmanager.com
127.0.0.1 http://www.xpasswordmanager.com
127.0.0.1 cracks4all.com
127.0.0.1 http://www.cracks4all.com
127.0.0.1 media-motor.net
127.0.0.1 mmm.media-motor.net
127.0.0.1 bins.media-motor.net
127.0.0.1 bins2.media-motor.net
127.0.0.1 logs.media-motor.net
127.0.0.1 mmohsix.com
127.0.0.1 http://www.mmohsix.com
127.0.0.1 pops.mmohsix.com
127.0.0.1 megalocast.net
127.0.0.1 js.megalocast.net
127.0.0.1 http://www.megalocast.net
127.0.0.1 dl.web-nexus.net
127.0.0.1 movies-etc.com
127.0.0.1 cdn.movies-etc.com
127.0.0.1 cdn2.movies-etc.com
127.0.0.1 internet-optimizer.com
127.0.0.1 http://www.internet-optimizer.com
127.0.0.1 888.com
127.0.0.1 http://www.888.com
127.0.0.1 images.888.com
127.0.0.1 surfsidekick.com
127.0.0.1 http://www.surfsidekick.com
127.0.0.1 sdl.surfsidekick.com
127.0.0.1 kmpads.com
127.0.0.1 http://www.kmpads.com
127.0.0.1 ads.kmpads.com
127.0.0.1 zipcodec.com
127.0.0.1 http://www.zipcodec.com
127.0.0.1 ibankis.org
127.0.0.1 http://www.ibankis.org
127.0.0.1 adwarefinder.com
127.0.0.1 http://www.adwarefinder.com
127.0.0.1 nbcsearch.com
127.0.0.1 http://www.nbcsearch.com
127.0.0.1 TBCODE.COM
127.0.0.1 http://www.TBCODE.COM
127.0.0.1 1987324.com
127.0.0.1 http://www.1987324.com
127.0.0.1 http://www.archiviosex.net
127.0.0.1 sysnetsecurity.com
127.0.0.1 http://www.sysnetsecurity.com
127.0.0.1 sysnetsecurity.net
127.0.0.1 http://www.sysnetsecurity.net
127.0.0.1 error404site.com
127.0.0.1 http://www.error404site.com
127.0.0.1 error404site.net
127.0.0.1 http://www.error404site.net
127.0.0.1 wm.vother.info
127.0.0.1 http://www.wm.vother.info
127.0.0.1 vother.info
127.0.0.1 http://www.vother.info
127.0.0.1 wm.komforochka.info
127.0.0.1 http://www.wm.komforochka.info
127.0.0.1 komforochka.info
127.0.0.1 http://www.komforochka.info
127.0.0.1 hervam.com
127.0.0.1 http://www.hervam.com
127.0.0.1 http://www.nunah.info
127.0.0.1 nunah.info
127.0.0.1 http://www.searchmeup.com
127.0.0.1 http://www.searchcolours.com
127.0.0.1 searchcolours.com
127.0.0.1 brodbfm.net
127.0.0.1 http://www.brodbfm.net
127.0.0.1 easybestdeals.com
127.0.0.1 http://www.easybestdeals.com
127.0.0.1 spywareno.com
127.0.0.1 http://www.spywareno.com
127.0.0.1 spyheal.com
127.0.0.1 http://www.spyheal.com
127.0.0.1 http://www.streamxs.ws
127.0.0.1 streamxs.ws
127.0.0.1 asta-killer.com
127.0.0.1 newmediaidea.com
127.0.0.1 http://www.newmediaidea.com
127.0.0.1 syssecuritysite.net
127.0.0.1 http://www.syssecuritysite.net
127.0.0.1 aulde.net
127.0.0.1 http://www.aulde.net
127.0.0.1 searchdrive.info
127.0.0.1 wwwsearchdrive.info
127.0.0.1 download.bardownload.com
127.0.0.1 http://www.download.bardownload.com
127.0.0.1 bardownload.com
127.0.
dmmiller360
Active Member
 
Posts: 8
Joined: September 18th, 2007, 10:19 am

Unread postby Navigator » September 19th, 2007, 5:11 pm

the smitfraudfix log (C:\rapport.txt) got cut off...you may need multiply replies to fit it all if it is large....
User avatar
Navigator
MRU Honors Grad Emeritus
 
Posts: 1237
Joined: December 21st, 2005, 8:35 pm
Location: Missouri

Smithfraudfix log - rest of log

Unread postby dmmiller360 » September 20th, 2007, 9:01 am

Hi,

Sorry about that, here's the rest of the log.

127.0.0.1 http://www.download.bardownload.com
127.0.0.1 bardownload.com
127.0.0.1 http://www.bardownload.com
127.0.0.1 intcodec.com
127.0.0.1 http://www.intcodec.com
127.0.0.1 newupdates.lzio.com
127.0.0.1 uptofind.com
127.0.0.1 http://www.uptofind.com
127.0.0.1 homelandnetwork.COM
127.0.0.1 http://www.homelandnetwork.COM
127.0.0.1 getmirar.com
127.0.0.1 mirarsearch.com
127.0.0.1 net-nucleus.com
127.0.0.1 zenotecnico.com
127.0.0.1 http://www.zenotecnico.com
127.0.0.1 zenotecnico2.com
127.0.0.1 http://www.zenotecnico2.com
127.0.0.1 surfaccuracy.com
127.0.0.1 http://www.surfaccuracy.com
127.0.0.1 cache.surfaccuracy.com
127.0.0.1 http://www.cache.surfaccuracy.com
127.0.0.1 http://www.the.007guard.com
127.0.0.1 the.007guard.com
127.0.0.1 install.007guard.com
127.0.0.1 http://www.install.007guard.com
127.0.0.1 007guard.com
127.0.0.1 http://www.007guard.com
127.0.0.1 feeds.2search.com
127.0.0.1 http://www.feeds.2search.com
127.0.0.1 2search.com
127.0.0.1 http://www.2search.com
127.0.0.1 feeds2.2search.org
127.0.0.1 http://www.feeds2.2search.org
127.0.0.1 2search.org
127.0.0.1 http://www.2search.org
127.0.0.1 zangocash.com
127.0.0.1 http://www.zangocash.com
127.0.0.1 static.zangocash.com
127.0.0.1 http://www.static.zangocash.com
127.0.0.1 public.zangocash.com
127.0.0.1 http://www.public.zangocash.com
127.0.0.1 code.ignphrases.com
127.0.0.1 http://www.ignphrases.com
127.0.0.1 ignphrases.com
127.0.0.1 http://www.igetnet.com
127.0.0.1 igetnet.com
127.0.0.1 http://www.topbrowsing.com
127.0.0.1 topbrowsing.com
127.0.0.1 http://www.download.jupitersatellites.biz
127.0.0.1 download.jupitersatellites.biz
127.0.0.1 voghp.com
127.0.0.1 http://www.voghp.com
127.0.0.1 zhmbscwdgk.biz
127.0.0.1 http://www.zhmbscwdgk.biz
127.0.0.1 zabywjwzlr.biz.biz
127.0.0.1 http://www.zabywjwzlr.biz.biz
127.0.0.1 i-femdom.com
127.0.0.1 http://www.i-femdom.com
127.0.0.1 buy-find.info
127.0.0.1 http://www.buy-find.info
127.0.0.1 searche.info
127.0.0.1 http://www.searche.info
127.0.0.1 easy-pharmacy.info
127.0.0.1 http://www.easy-pharmacy.info
127.0.0.1 good-casino.net
127.0.0.1 http://www.good-casino.net
127.0.0.1 busysearch.net
127.0.0.1 http://www.busysearch.net
127.0.0.1 1001-search.info
127.0.0.1 http://www.1001-search.info
127.0.0.1 24-7pharmacy.info
127.0.0.1 http://www.24-7pharmacy.info
127.0.0.1 dating-galaxy.info
127.0.0.1 http://www.dating-galaxy.info
127.0.0.1 spyware-best.com
127.0.0.1 http://www.spyware-best.com
127.0.0.1 easyspyware.com
127.0.0.1 http://www.easyspyware.com
127.0.0.1 best-spyware.info
127.0.0.1 http://www.best-spyware.info
127.0.0.1 anyofus.com
127.0.0.1 http://www.anyofus.com
127.0.0.1 specialoems.com
127.0.0.1 http://www.specialoems.com
127.0.0.1 svideocodec.com
127.0.0.1 http://www.svideocodec.com
127.0.0.1 getpornmag.com
127.0.0.1 http://www.getpornmag.com
127.0.0.1 animepornmag.com
127.0.0.1 http://www.animepornmag.com
127.0.0.1 syssecuritypage.com
127.0.0.1 http://www.syssecuritypage.com
127.0.0.1 safetyhomepage.com
127.0.0.1 http://www.safetyhomepage.com
127.0.0.1 CashUnlim.com
127.0.0.1 http://www.CashUnlim.com
127.0.0.1 bdsmpornmag.com
127.0.0.1 http://www.bdsmpornmag.com
127.0.0.1 ebonypornmag.com
127.0.0.1 http://www.ebonypornmag.com
127.0.0.1 nylonporn.com
127.0.0.1 http://www.nylonporn.com
127.0.0.1 uniformpornmag.com
127.0.0.1 http://www.uniformpornmag.com
127.0.0.1 maturepornmag.com
127.0.0.1 http://www.maturepornmag.com
127.0.0.1 pornstarspornmag.com
127.0.0.1 http://www.pornstarspornmag.com
127.0.0.1 shemalepornmag.com
127.0.0.1 http://www.shemalepornmag.com
127.0.0.1 lesbianpornmag.com
127.0.0.1 http://www.lesbianpornmag.com
127.0.0.1 dailytoolbar.com
127.0.0.1 http://www.dailytoolbar.com
127.0.0.1 maturetoolbar.com
127.0.0.1 http://www.maturetoolbar.com
127.0.0.1 asiantoolbar.com
127.0.0.1 http://www.asiantoolbar.com
127.0.0.1 http://www.ac66.cn
127.0.0.1 ac66.cn
127.0.0.1 mir.100888290cs.com
127.0.0.1 woool.100888290cs.com
127.0.0.1 http://www.100888290cs.com
127.0.0.1 100888290cs.com
127.0.0.1 ert0003.e76.163ns.com
127.0.0.1 http://www.163ns.com
127.0.0.1 163ns.com
127.0.0.1 http://www.chenshijituan.com
127.0.0.1 chenshijituan.com
127.0.0.1 http://www.u7u.cn
127.0.0.1 u7u.cn
127.0.0.1 http://www.wg581.com
127.0.0.1 wg581.com
127.0.0.1 jhzjyj.bigwww.com
127.0.0.1 http://www.bigwww.com
127.0.0.1 bigwww.com
127.0.0.1 http://www.132.com
127.0.0.1 132.com
127.0.0.1 http://www.163.com
127.0.0.1 163.com
127.0.0.1 http://www.tzxsj.com
127.0.0.1 tzxsj.com
127.0.0.1 http://www.q36.cn
127.0.0.1 q36.cn
127.0.0.1 down.136136.net
127.0.0.1 http://www.136136.net
127.0.0.1 136136.net
127.0.0.1 s59.cnzz.com
127.0.0.1 http://www.cnzz.com
127.0.0.1 cnzz.com
127.0.0.1 ulink13.dudu.com
127.0.0.1 ulink7.dudu.com
127.0.0.1 http://www.dudu.com
127.0.0.1 dudu.com
127.0.0.1 dcdl.dmcast.com
127.0.0.1 http://www.dmcast.com
127.0.0.1 dcww.dmcast.com
127.0.0.1 ibm.dmcast.com
127.0.0.1 dmcast.com
127.0.0.1 worldtostart.com
127.0.0.1 http://www.worldtostart.com
127.0.0.1 deskbar.worldtostart.com
127.0.0.1 http://www.deskbar.worldtostart.com
127.0.0.1 http://www.dotcomtoolbar.com
127.0.0.1 dotcomtoolbar.com
127.0.0.1 search.findthewebsiteyouneed.com
127.0.0.1 http://www.search.findthewebsiteyouneed.com
127.0.0.1 easywww.info
127.0.0.1 http://www.easywww.info
127.0.0.1 f1organizer.com
127.0.0.1 http://www.f1organizer.com
127.0.0.1 gamehouse.com
127.0.0.1 http://www.gamehouse.com
127.0.0.1 regnow.com
127.0.0.1 http://www.regnow.com
127.0.0.1 totalvelocity.com
127.0.0.1 http://www.totalvelocity.com
127.0.0.1 webnetinfo.net
127.0.0.1 http://www.webnetinfo.net
127.0.0.1 srfgate.com
127.0.0.1 http://www.srfgate.com
127.0.0.1 infport.com
127.0.0.1 http://www.infport.com
127.0.0.1 instafinder.com
127.0.0.1 http://www.instafinder.com
127.0.0.1 megasearchbar.com
127.0.0.1 http://www.megasearchbar.com
127.0.0.1 ccecaedbebfcaf.com
127.0.0.1 http://www.ccecaedbebfcaf.com
127.0.0.1 pcodec.com
127.0.0.1 http://www.pcodec.com
127.0.0.1 lightspeedsearch.net
127.0.0.1 http://www.lightspeedsearch.net
127.0.0.1 websopot.com
127.0.0.1 http://www.websopot.com
127.0.0.1 superbgirlz.com
127.0.0.1 asdeykuddq.com
127.0.0.1 asidseiupc.com
127.0.0.1 fjsynebcod.com
127.0.0.1 qiudheadsd.com
127.0.0.1 http://www.superbgirlz.com
127.0.0.1 http://www.asdeykuddq.com
127.0.0.1 http://www.asidseiupc.com
127.0.0.1 http://www.fjsynebcod.com
127.0.0.1 http://www.qiudheadsd.com
127.0.0.1 http://www.trackhits.cc
127.0.0.1 resultplacement.com
127.0.0.1 http://www.resultplacement.com
127.0.0.1 smartprotect.info
127.0.0.1 http://www.smartprotect.info
127.0.0.1 best-voyeur.info
127.0.0.1 http://www.best-voyeur.info
127.0.0.1 Search-Daily.com
127.0.0.1 http://www.Search-Daily.com
127.0.0.1 yahabags.com
127.0.0.1 http://www.yahabags.com
127.0.0.1 http://www.freecat.biz
127.0.0.1 freecat.biz
127.0.0.1 http://www.beebappyy.biz
127.0.0.1 beebappyy.biz
127.0.0.1 costrike.com
127.0.0.1 http://www.costrike.com
127.0.0.1 tgpie.com
127.0.0.1 http://www.tgpie.com
127.0.0.1 searcher.tgpie.com
127.0.0.1 http://www.searcher.tgpie.com
127.0.0.1 seproger.com
127.0.0.1 http://www.seproger.com
127.0.0.1 anysn.seproger.com
127.0.0.1 http://www.anysn.seproger.com
127.0.0.1 thereall.realfet.com
127.0.0.1 http://www.thereall.realfet.com
127.0.0.1 greatbahamas.com
127.0.0.1 http://www.greatbahamas.com
127.0.0.1 fn777.greatbahamas.com
127.0.0.1 http://www.fn777.greatbahamas.com
127.0.0.1 sef516.greatbahamas.com
127.0.0.1 http://www.sef516.greatbahamas.com
127.0.0.1 rich777.greatbahamas.com
127.0.0.1 http://www.rich777.greatbahamas.com
127.0.0.1 rng650.greatbahamas.com
127.0.0.1 http://www.rng650.greatbahamas.com
127.0.0.1 realm.superbahamas.com
127.0.0.1 http://www.realm.superbahamas.com
127.0.0.1 enhance.com
127.0.0.1 http://www.enhance.com
127.0.0.1 c.enhance.com
127.0.0.1 http://www.c.enhance.com
127.0.0.1 adservices1.enhance.com
127.0.0.1 http://www.adservices1.enhance.com
127.0.0.1 traffic-ssl1.com
127.0.0.1 http://www.traffic-ssl1.com
127.0.0.1 traffic-acc.com
127.0.0.1 http://www.traffic-acc.com
127.0.0.1 filetretporn.com
127.0.0.1 http://www.filetretporn.com
127.0.0.1 uncj.filetretporn.com
127.0.0.1 http://www.uncj.filetretporn.com
127.0.0.1 rzvonporn.com
127.0.0.1 http://www.rzvonporn.com
127.0.0.1 theaimonline.com
127.0.0.1 http://www.theaimonline.com
127.0.0.1 bm.theaimonline.com
127.0.0.1 http://www.bm.theaimonline.com
127.0.0.1 kqzyfj.com
127.0.0.1 http://www.kqzyfj.com
127.0.0.1 apmebf.com
127.0.0.1 http://www.apmebf.com
127.0.0.1 emjcd.com
127.0.0.1 http://www.emjcd.com
127.0.0.1 upspiral.com
127.0.0.1 http://www.upspiral.com
127.0.0.1 lovezest.com
127.0.0.1 http://www.lovezest.com
127.0.0.1 maxysize.com
127.0.0.1 http://www.maxysize.com
127.0.0.1 camouflageclothingonline.net
127.0.0.1 http://www.camouflageclothingonline.net
127.0.0.1 getfound.com
127.0.0.1 http://www.getfound.com
127.0.0.1 search.getfound.com
127.0.0.1 http://www.search.getfound.com
127.0.0.1 searchfeed.com
127.0.0.1 http://www.searchfeed.com
127.0.0.1 netster.com
127.0.0.1 http://www.netster.com
127.0.0.1 ireit.com
127.0.0.1 http://www.ireit.com
127.0.0.1 content.ireit.com
127.0.0.1 http://www.content.ireit.com
127.0.0.1 toseeka.com
127.0.0.1 http://www.toseeka.com
127.0.0.1 zcodec.com
127.0.0.1 http://www.zcodec.com
127.0.0.1 strcodec.com
127.0.0.1 http://www.strcodec.com
127.0.0.1 uglyphotos.net
127.0.0.1 http://www.uglyphotos.net
127.0.0.1 imcodec.com
127.0.0.1 http://www.imcodec.com
127.0.0.1 softcodec.com
127.0.0.1 http://www.softcodec.com
127.0.0.1 dvdcodec.net
127.0.0.1 http://www.dvdcodec.net
127.0.0.1 playercodec.net
127.0.0.1 http://www.playercodec.net
127.0.0.1 lightcodec.com
127.0.0.1 http://www.lightcodec.com
127.0.0.1 winmediacodec.com
127.0.0.1 http://www.winmediacodec.com
127.0.0.1 videoscodec.com
127.0.0.1 http://www.videoscodec.com
127.0.0.1 mmcodec.com
127.0.0.1 http://www.mmcodec.com
127.0.0.1 xpassgenerator.com
127.0.0.1 http://www.xpassgenerator.com
127.0.0.1 mypornmagpass.com
127.0.0.1 http://www.mypornmagpass.com
127.0.0.1 searchbee.net
127.0.0.1 http://www.searchbee.net
127.0.0.1 warez.com
127.0.0.1 http://www.warez.com
127.0.0.1 srv.warez.com
127.0.0.1 prosearching.com
127.0.0.1 http://www.prosearching.com
127.0.0.1 zelaznyworld.com
127.0.0.1 http://www.zelaznyworld.com
127.0.0.1 mabou.org
127.0.0.1 net.mabou.org
127.0.0.1 http://www.mabou.org
127.0.0.1 infectedkernel.com
127.0.0.1 http://www.infectedkernel.com
127.0.0.1 qippi.com
127.0.0.1 http://www.qippi.com

»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

C:\WINDOWS\system32\vtr???.dll Deleted

»»»»»»»»»»»»»»»»»»»»»»»» DNS

HKLM\SYSTEM\CCS\Services\Tcpip\..\{AA099E59-0FA8-450C-90AA-E02B3632F6EC}: NameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{AA099E59-0FA8-450C-90AA-E02B3632F6EC}: NameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{AA099E59-0FA8-450C-90AA-E02B3632F6EC}: NameServer=192.168.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» End
dmmiller360
Active Member
 
Posts: 8
Joined: September 18th, 2007, 10:19 am

Unread postby Navigator » September 20th, 2007, 10:52 pm

Sorry for the delay, my 'real' job is interfering...I'll be back with you shortly...
User avatar
Navigator
MRU Honors Grad Emeritus
 
Posts: 1237
Joined: December 21st, 2005, 8:35 pm
Location: Missouri

Unread postby Navigator » September 20th, 2007, 11:43 pm

OK...let's keep going:

1. Download and Run AVG Anti-Spyware:

Download the trial version of AVG Anti-Spyware from here and install it. When the program has been installed, and you click the Finish button, AVG Anti-Spyware will open. Do not run a scan yet.

If the program does not automatically update itself during installation, or you are unsure whether it has done so, please do the following:
  • Click the Update icon at the top and under Manual Update click the Start update button.
  • The program will either update or inform you that no update was available.
  • It is essential that you get the update - keep trying until successful. (Note: If you have problems getting the update, you can download an installer for the full database from here (save it on your desktop). Once you have downloaded the installer, make sure that AVG Anti-Spyware is closed and then double-click on avgas-signatures-full-current.exe to install the database).
Please set up the program as follows:
  • Click the Shield icon at the top and under Resident shield is... click active. This should now change to inactive.
  • Click the Update icon and untick the automatic update option.
  • Click on Scanner on the toolbar.
  • Click on the Settings tab.
    • Under How to act? - make sure that Quarantine is selected.
    • Under How to scan? - All checkboxes should be ticked.
    • Under Possibly unwanted software - All checkboxes should be ticked.
    • Under Reports - Select Do not automatically generate reports.
    • Under What to scan? - Select Scan every file.

    Close AVG for now, we will use it later.

2. Please download ATF Cleaner by Atribune.
This program is for XP and Windows 2000 only

Save it to your desktop, we will use it a bit later.

3. Please re-open HiJackThis and choose scan only. Check the boxes next to all the entries listed below.


O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O15 - Trusted Zone: cflive.adpclaims.com
O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -


Now close all windows other than HiJackThis, then click Fix Checked.

Reboot into safe mode by restarting your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode.

4. Double-click ATF-Cleaner.exe to run the program.
    Under Main choose: Select All
    Click the Empty Selected button.
If you use Firefox browser
    Click Firefox at the top and choose: Select All
    Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browser
    Click Opera at the top and choose: Select All
    Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.

5. Close all open windows, and start AVG Scanner
  • Click on Scanner on the toolbar.
  • Click on Complete System Scan to start the scan process.
  • Let the program scan your computer.
  • When the scan has finished, follow the instructions below:
    • Make sure that Set all elements to: shows Quarantine
    • Important: Click on the Apply all Actions button (*** This must done before saving the report ***)
    • When the program has finished, it will display the message All actions have been applied.
    • Then click the Save Scan Report button.
    • Click the Save Report as button.
    • Save the report to your Desktop.
  • Right-click the AVG Tray Icon and select Exit.

Reboot your computer into normal Windows.

6. I see you have the latest Java Version on your system (1.6u2)...we need to remove ALL older versions of Java as their presence on your system is a security risk:

    Remove older Java Versions:
    • Close any programs you may have running - especially your web browser.
    • Go to Start >> Control Panel double-click on Add/Remove Programs and remove all older versions of Java...(anything OTHER THAN 1.6 u2)
    • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
    • Click the Remove or Change/Remove button.
    • Repeat as many times as necessary to remove each of the outdated Java versions.
    • Reboot your computer once all olde Java components are removed.


7. Please post the contents of the AVG report and a new HJT log in your reply, and let me know what problems you are having with your computer if any.
User avatar
Navigator
MRU Honors Grad Emeritus
 
Posts: 1237
Joined: December 21st, 2005, 8:35 pm
Location: Missouri

Logs

Unread postby dmmiller360 » September 24th, 2007, 11:59 am

Here is the Hijack this log.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:57:12 AM, on 9/24/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\ParetoLogic\Anti-Spyware\Pareto_AS.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\Program Files\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Verizon Wireless\V CAST Music\V CAST Music Monitor.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WUSB54GSv2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\MI1933~1\Office\OUTLOOK.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ParetoLogic Anti-Spyware] "C:\Program Files\ParetoLogic\Anti-Spyware\Pareto_AS.exe" -NM -hidesplash
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8
O4 - HKCU\..\Run: [EasyLinkAdvisor] "C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe" /startup
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: V CAST Music Monitor.lnk = C:\Program Files\Verizon Wireless\V CAST Music\V CAST Music Monitor.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {40F8967E-34A6-474A-837A-CEC1E7DAC54C} - https://accounting.quickbooks.com/c1/v15.592/qboax9.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/share ... insctl.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 0061798468
O16 - DPF: {843EE768-3A97-455C-9076-741BA3AD7B62} (QuickBooks Online Edition Utilities Class v10) - https://accounting.quickbooks.com/c2/v1 ... boax10.cab
O16 - DPF: {A93D84FD-641F-43AE-B963-E6FA84BE7FE7} (LinkSys Content Update) - http://www.linksysfix.com/netcheck/67/i ... downls.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) - http://download.mcafee.com/molbin/share ... cgdmgr.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{AA099E59-0FA8-450C-90AA-E02B3632F6EC}: NameServer = 192.168.1.1
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: WUSB54GSv2SVC - GEMTEKS - C:\Program Files\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe

--
End of file - 9071 bytes
dmmiller360
Active Member
 
Posts: 8
Joined: September 18th, 2007, 10:19 am

Here is the AVG report

Unread postby dmmiller360 » September 24th, 2007, 12:00 pm

AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 10:55:24 AM 9/24/2007

+ Scan result:



Nothing found.



::Report end
dmmiller360
Active Member
 
Posts: 8
Joined: September 18th, 2007, 10:19 am

One other problem

Unread postby dmmiller360 » September 24th, 2007, 12:02 pm

Hi,

Here is only one problem that I know that I'm having. That is getting into internet options in Explorer, I get the same error code, but I can get into control panel now.

Thank you,
Debra
dmmiller360
Active Member
 
Posts: 8
Joined: September 18th, 2007, 10:19 am

Re: One other problem

Unread postby Navigator » September 24th, 2007, 8:06 pm

dmmiller360 wrote:Hi,

Here is only one problem that I know that I'm having. That is getting into internet options in Explorer, I get the same error code, but I can get into control panel now.

Thank you,
Debra


Hey Debra...you are welcome. Everything looks fine with the HJT log and AVG scan.

Regarding the internet options error in IE, can you give me the exact error message or code? Is it:

This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator
?

Can you confirm this for me?
User avatar
Navigator
MRU Honors Grad Emeritus
 
Posts: 1237
Joined: December 21st, 2005, 8:35 pm
Location: Missouri

Error Message

Unread postby dmmiller360 » September 25th, 2007, 10:12 am

Yes,

That is the error message I am getting.

Thank you,
Debra
dmmiller360
Active Member
 
Posts: 8
Joined: September 18th, 2007, 10:19 am

Re: Error Message

Unread postby Navigator » September 25th, 2007, 2:11 pm

dmmiller360 wrote:Yes,

That is the error message I am getting.

Thank you,
Debra


OK...let's try this:

Go to this site: http://www.dougknox.com/

On the panel of choices on the left, choose Win XP Fixes

On the next page that comes up, in the center columns, scroll down to Fix Internet Options Restriction....select that option and follow the instructions on the next page that comes up by saving and running the .vbs script.

Let me know if this fixes the internet options restriction problem.
User avatar
Navigator
MRU Honors Grad Emeritus
 
Posts: 1237
Joined: December 21st, 2005, 8:35 pm
Location: Missouri
Advertisement
Register to Remove

Next

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 277 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware