Átjöttem csökkentet módból és SDFIX vírussal jött le és az avast leblokkolta! meg vmi olyat írt ki h a windows mappába egy fájlblokkolva van és mit utoljár mondtál h próbáljam meg letölteni abba a blokkolt mappába van. Most töröljem a vírusírtót és próbljam letölteni újból?

Hi

Nekem is lenne egy MSn vírusom ha tudnál segíteni az jó lenne.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:15:55, on 2008.07.21.
Platform: Windows XP Szervizcsomag 2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Hard Disk Sentinel\HDSentinel.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\wamp\wampmanager.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Paragon Software\Drive Backup 8.5 Professional\Net Burner Service\NetBurnerService.exe
C:\WINDOWS\System32\svchost.exe
c:\wamp\apache2\bin\httpd.exe
c:\wamp\mysql\bin\mysqld-nt.exe
C:\wamp\apache2\bin\httpd.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\totalcmd_7\TOTALCMD.EXE
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\utilman.exe
C:\Program Files\Outlook Express\msimn.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
D:\downloads\Firefox\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://jojatek.hu/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hivatkozások
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: IE to GetRight Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\System32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Hard Disk Sentinel] "C:\Program Files\Hard Disk Sentinel\HDSentinel.exe" /AUTORUN
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DU Meter] C:\WINDOWS\system32\DUMeter.exe
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Program Files\Mozilla Firefox\plugins\NPSWF32_FlashUtil.exe -p
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'HELYI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'HÁLÓZATI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: WampServer.lnk = C:\wamp\wampmanager.exe
O4 - Global Startup: AutoCAD indításgyorsító.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart17.exe
O4 - Global Startup: GetRight.lnk = C:\Program Files\GetRight\GetRight.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportálás Microsoft Excel formátumba - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{EE55ECC0-7E21-4143-875F-151B0D2D6638}: NameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{F2C3FF19-B55D-4CCF-8E4F-D03F5373A2A7}: NameServer = 192.168.2.1
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Net Burner iSCSI Service (NetBurnerService) - Paragon GmbH - C:\Program Files\Paragon Software\Drive Backup 8.5 Professional\Net Burner Service\NetBurnerService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\apache2\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\mysql\bin\mysqld-nt.exe

--
End of file - 7733 bytes

Az nem letezik de mindegy.Valamit nemjol csinalsz;
Tolds le a COMBOFIX programot es futasd nezd meg feljeb hogy kel csinalni,mar tobszor leirtam.es a logjat maj ted ide.

csökkentetmódbólt jöttem át mert nem jó úgy a net
de csökkentetbe próbáltam és úgy se jó le enterezem és kilép!!!!!nem csinál semmit!

Akor te lenel az elso akinek nemukszik,Egyaltalan hol vagy most a Windowsban vagy csokentet modban?/

A Cre

es hova teted az SDFIX programot.Tehat ide C:\ vagy beastad.C:\program files.??

az enter után nem csinál semmit!

Y...Y es nyomd meg az ENTER gombot.

Odáig megvan h megnyitom aRunthist és megvan ...y....y...de nem csinál utána semmit!

Te csak nepipaz semit,maj en ide irom ha keles pipazni:
Most letoltod ezt a programot:
http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
Feltelepited a C:\-re>pontosan ide.
Lemegy csokentet modba>kinyitod a SDFIX>mapat es 2x raklikelsza RUNTHISBAT masat nembabralsz,aztan beleegyezes ...Y....Y...
es megvarod a sken veget,mikor a program befejezi,megnyomsz akarmilyen bilentyut >evel a gep magatol restartol es a windowsban befejezi a skenr,Ad a monotora logot>REPORT.TXT eztet ide teszed.Ha nemlesz a monitoron akor az SDFIX>mapaban lesz.+ide teszel uj HiJack>logot is.

Bocsika én már ott elakadtam h katt a kis négyzetekbe!!!
Gondolom vmit ebböl kellene kivenem h mit kell pipálnom és mit nem:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:47:06, on 2008.07.21.
Platform: Windows XP Szervizcsomag 2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20815)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools\Daemon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Panasonic\PHOTOfunSTUDIO -viewer-\PhAutoRun.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
c:\program files\winamp toolbar\WinampTbServer.exe
C:\PROGRA~1\Crawler\Toolbar\CToolbar.exe
C:\Documents and Settings\Rendszergazda\Local Settings\Temporary Internet Files\Content.IE5\B2GC6J0H\HijackThis[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... p=aus&qkw=%s&tbid=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.live.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60327
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hivatkozások
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [Windows Services32] service.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools] "%ProgramFiles%\DAEMON Tools\Daemon.exe" -lang 1049
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'HELYI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'HELYI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'HÁLÓZATI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'HÁLÓZATI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: PHOTOfunSTUDIO -viewer-.lnk = C:\Program Files\Panasonic\PHOTOfunSTUDIO -viewer-\PhAutoRun.exe
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportálás a Microsoft Excel programba - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Küldés a OneNote programba - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Kül&dés a OneNote programba - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 8814 bytes

Udv;
It olvasd el hogy kel HiJack>programal logot csinalni es ted ide a loglyat:

http://forum.terminal.hu/viewtopic.php?t=35889

Sziasztok! Tegnap msn-en kaptam egy vírust vagyis unokatesóm de az én gépemen!kapot egy linket:
ez te vagy http://msnphotos.info/image.php?=selmecibia@hotmail.com
elfogadta :@ és a virus saját magát küldözgeti!! Kaptam már én is msnen vírust de azt ujratelepítéssel oldtam meg most meg nem nagyon szeretném újratelepíteni ha van más megoldás is.A gépekhez nem nagyon értek! Kérlek segítsetek! Előre is köszönöm

nem ezeket hagyd bekebe.

Még azt szeretném kérdezni, hogy az etc könyvtárban van még két hosts file,
hosts.msn; hosts.20071008-220839.backup - ezeket nem kell törölnöm?

oki.nincsen mit koszonod ez csak rutin,mar hamarab meglet volna de ma ez a forum lehetetlenul lassu.
Udv.

Köszönöm mégegyszer Stell!
Remélem viszonozhatom én vagy a sors a sok segítséged!
Üdv: Ákos

Ez egy kem program tartozeka:
Program Files\Spyware Nuker
Ha mar nincsen problem akor rendben van majd jelenkez h a meg a problem febna l.
udv

Látom hogy a real-time protection csak a professional változatban működik.
Azt meg nem találtam "ingyenes" megoldásban.
A PSHOOK11.SYS nincs ott, gondolom kitörölte.
Ez mi lenne egyébként?

Nem,nemuszaj hogy fuson realban,kapcsold ki.
Eztet amit talalt kitorolte??
C:\WINDOWS\SYSTEM32\DRIVERS\PSHOOK11.SYS
Nezd mega lemezen ha ot van e ha igen akor teszteld le a Virustotalon:

VIRUSTOTALu
Az eredmeny ted ide.

Lefutott, volt Adware és Malware is...
Hagyon a programot!
Ennek mindig kell futnia realtimeban?
Ezzel meg is volnánk?
Ha igen, hálás köszönet a fáradozásért!!!!


SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 07/20/2008 at 06:24 PM

Application Version : 4.15.1000

Core Rules Database Version : 3508
Trace Rules Database Version: 1499

Scan type : Complete Scan
Total Scan Time : 00:23:57

Memory items scanned : 391
Memory threats detected : 0
Registry items scanned : 6007
Registry threats detected : 0
File items scanned : 23221
File threats detected : 4

Adware.Tracking Cookie
C:\Documents and Settings\Ákos\Cookies\ákos@audit.median[1].txt
C:\Documents and Settings\Ákos\Cookies\ákos@adverticum[2].txt
C:\Documents and Settings\Ákos\Cookies\ákos@philips.112.2o7[1].txt
audit.median.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
ad.adverticum.net [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.adverticum.net [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.www.statsector.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
mystat.synch.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
mystat.synch.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
mystat.synch.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
mystat.synch.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
mystat.synch.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
ad.zanox.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
ad.zanox.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
counter.cnw.cz [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
counter.cnw.cz [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
counter.cnw.cz [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
bannerserver.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.a-stat.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
www.sexorg.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.sexorg.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.smartadserver.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.smartadserver.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.smartadserver.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.smartadserver.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.2o7.net [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.pandasoftware.112.2o7.net [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.2o7.net [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.revsci.net [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.revsci.net [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.revsci.net [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.revsci.net [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
media.adrevolver.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
ads3.qsoft.co.uk [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
pornserver.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
pornserver.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
zbox.zanox.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.stat.bikemag.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.stat.bikemag.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.imrworldwide.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.imrworldwide.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.nettraffic.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.nettraffic.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
1hu.cqcounter.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.realmedia.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.realmedia.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.adbrite.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.adbrite.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
adserver.mommo.hu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
www6.addfreestats.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.kontera.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.kontera.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.kontera.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.clickaider.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.tribalfusion.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.elkjop.112.2o7.net [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.tradedoubler.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.tradedoubler.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
ad.yieldmanager.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
ad.yieldmanager.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.statcounter.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
server.iad.liveperson.net [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
eas.apm.emediate.eu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
eas.apm.emediate.eu [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.questionmarket.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.questionmarket.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.bizrate.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.bizrate.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.bizrate.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
stats.handcoding.de [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
partners.webmasterplan.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
hu.2.cqcounter.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.casalemedia.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.casalemedia.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.casalemedia.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.casalemedia.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.casalemedia.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.indextools.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.bwincom.122.2o7.net [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
ads.revsci.net [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.xiti.com [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.ottogroup.112.2o7.net [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
www.zanox-affiliate.de [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.toplist.cz [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]
.nielsen.112.2o7.net [ C:\Documents and Settings\Ákos\Application Data\Mozilla\Firefox\Profiles\zl6rfwcb.default\cookies.txt ]

Malware.SpywareNuker
C:\WINDOWS\SYSTEM32\DRIVERS\PSHOOK11.SYS

Akor meg lefutatod a SAS-programot.Valahova mar irtam hogy kel vele dolgozni de leirom neked es ezt a programot hagyd is meg>Ingyenes:
Letoltod:a FREE verziot
http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE
Az ora melet a telepites utan megkene jeleni egy bogar ikonjanak>jobklik>kivalasztod>

Scan for Spyware, Adware, Malwareutana KLIK>
Scan Your Computer Bepipazod a lemezeided es bepotyozod igy:

Ha bevegzi a skent klik tovab Dalsi evel mindent kitorol amit talal.Ha eztet megcsinalod akor kiprobalni es irni.

Kitöröltem mindent annak megfelelően, ahogy írtad!
Nem fut a Spybot TEATimer...

Ok,ha bevan kapcsolva a Spybot TEAtimer pajza akor kapcsold ki es aztan torold le mindent a HOST-bol csak ez maradjon>igy nezen ki:


Es zard be aztan irjal ha meglesz.

Értem...
Az etc-ben van korábbi hosts is, ilyen nevekkel: hosts.msn; hosts.20071008-220839.backup - ezeket nem kell törölnöm?
Gondolom ezek backup-ok!?
A hosts tartalma:

# Copyright (c) 1993-1999 Microsoft Corp.
#
# Mintafájl a Microsoft TCP/IP for Windows-hoz.
#
# Ez a fájl IP címek és NT számítógépnevek (NetBIOS nevek) egymáshoz
# rendelésére szolgál. Minden egyes tételt külön sorba kell írni, először
# az IP címet, azt követően pedig a hozzá tartozó nevet. A cím és
# a név között legalább egy szóköz vagy tabulátor karakternek kell lennie.
#
# A # jel általában a megjegyzést tartalmazó sorokat jelöli, néhány
# kivételtől eltekintve (ezeket lásd alább).
#
# Példák:
#
# 102.54.94.97 rhino.acme.com # forráskiszolgáló
# 38.25.63.10 x.acme.com # x ügyfélállomás

127.0.0.1 localhost
# Start of entries inserted by Spybot - Search & Destroy
127.0.0.1 babe.the-killer.bz
127.0.0.1 www.babe.the-killer.bz
127.0.0.1 babe.k-lined.com
127.0.0.1 www.babe.k-lined.com
127.0.0.1 did.i-used.cc
127.0.0.1 www.did.i-used.cc
127.0.0.1 coolwwwsearch.com
127.0.0.1 www.coolwwwsearch.com
127.0.0.1 coolwebsearch.com
127.0.0.1 www.coolwebsearch.com
127.0.0.1 hi.studioaperto.net
127.0.0.1 www.hi.studioaperto.net
127.0.0.1 webbrowser.tv
127.0.0.1 www.webbrowser.tv
127.0.0.1 wazzupnet.com
127.0.0.1 www.wazzupnet.com
127.0.0.1 gueb.com
127.0.0.1 www.gueb.com
127.0.0.1 kabex.com
127.0.0.1 www.kabex.com
127.0.0.1 hityou.com
127.0.0.1 www.hityou.com
127.0.0.1 miosearch.com
127.0.0.1 www.miosearch.com
127.0.0.1 blue-elefant.com
127.0.0.1 www.blue-elefant.com
127.0.0.1 babeweb.de
127.0.0.1 www.babeweb.de
127.0.0.1 start-seite.com
127.0.0.1 www.start-seite.com
127.0.0.1 sexolymp.com
127.0.0.1 www.sexolymp.com
127.0.0.1 toriii.cc
127.0.0.1 www.toriii.cc
127.0.0.1 xtipp.de
127.0.0.1 www.xtipp.de
127.0.0.1 urawa.cool.ne.jp
127.0.0.1 777search.com
127.0.0.1 www.777search.com
127.0.0.1 ace-webmaster.com
127.0.0.1 www.ace-webmaster.com
127.0.0.1 aifind.info
127.0.0.1 www.aifind.info
127.0.0.1 amateurliveshow.com
127.0.0.1 www.amateurliveshow.com
127.0.0.1 anarchylolita.com
127.0.0.1 www.anarchylolita.com
127.0.0.1 anarchyporn.com
127.0.0.1 approvedlinks.com
127.0.0.1 www.approvedlinks.com
127.0.0.1 cantfind.com
127.0.0.1 www.cantfind.com
127.0.0.1 castingsamateur.com
127.0.0.1 www.castingsamateur.com
127.0.0.1 cyberrape.com
127.0.0.1 www.cyberrape.com
127.0.0.1 dialerclub.com
127.0.0.1 www.dialerclub.com
127.0.0.1 megago.com
127.0.0.1 exit.megago.com
127.0.0.1 www.megago.com
127.0.0.1 fastmetasearch.com
127.0.0.1 www.fastmetasearch.com
127.0.0.1 findwhatevernow.com
127.0.0.1 www.findwhatevernow.com
127.0.0.1 globesearch.com
127.0.0.1 www.globesearch.com
127.0.0.1 hotfreebies.com
127.0.0.1 www.hotfreebies.com
127.0.0.1 krankin.com
127.0.0.1 www.krankin.com
127.0.0.1 begin2search.com
127.0.0.1 www.begin2search.com
127.0.0.1 mainstreamdollars.com
127.0.0.1 www.mainstreamdollars.com
127.0.0.1 live.sex-explorer.com
127.0.0.1 www.live.sex-explorer.com
127.0.0.1 loveadot.com
127.0.0.1 www.loveadot.com
127.0.0.1 megaseek.net
127.0.0.1 www.megaseek.net
127.0.0.1 mixsearch.com
127.0.0.1 www.mixsearch.com
127.0.0.1 munky.com
127.0.0.1 www.munky.com
127.0.0.1 newtopsites.com
127.0.0.1 www.newtopsites.com
127.0.0.1 noblindlinks.com
127.0.0.1 www.noblindlinks.com
127.0.0.1 babenet.com
127.0.0.1 r.babenet.com
127.0.0.1 www.babenet.com
127.0.0.1 searchresult.net
127.0.0.1 www.searchresult.net
127.0.0.1 sexarena.org
127.0.0.1 www.sexarena.org
127.0.0.1 skeech.com
127.0.0.1 www.skeech.com
127.0.0.1 by.ru
127.0.0.1 www.by.ru
127.0.0.1 superwp.by.ru
127.0.0.1 sureseeker.com
127.0.0.1 www.sureseeker.com
127.0.0.1 wethere.com
127.0.0.1 www.wethere.com
127.0.0.1 wowsearch.org
127.0.0.1 www.wowsearch.org
127.0.0.1 xxx.com
127.0.0.1 www.xxx.com
127.0.0.1 art-xxx.com
127.0.0.1 websearch.com
127.0.0.1 www.websearch.com
127.0.0.1 firehunt.com
127.0.0.1 www.firehunt.com
127.0.0.1 partner23.firehunt.com
127.0.0.1 screensaver.it
127.0.0.1 www.screensaver.it
127.0.0.1 cliks.org
127.0.0.1 www.cliks.org
127.0.0.1 xads.cliks.org
127.0.0.1 xwebsearch.biz
127.0.0.1 www.xwebsearch.biz
127.0.0.1 znext.com
127.0.0.1 www.znext.com
127.0.0.1 rawtocash.net
127.0.0.1 www.rawtocash.net
127.0.0.1 7search.com
127.0.0.1 www.7search.com
127.0.0.1 zestyfind.com
127.0.0.1 www.zestyfind.com
127.0.0.1 ntcor.com
127.0.0.1 www.ntcor.com
127.0.0.1 dev.ntcor.com
127.0.0.1 xrenoder.com
127.0.0.1 www.xrenoder.com
127.0.0.1 search.xrenoder.com
127.0.0.1 allcybersearch.com
127.0.0.1 www.allcybersearch.com
127.0.0.1 tinybar.com
127.0.0.1 www.tinybar.com
127.0.0.1 topsite.us
127.0.0.1 www.topsite.us
127.0.0.1 topsites.us
127.0.0.1 www.topsites.us
127.0.0.1 topsitez.us
127.0.0.1 www.topsitez.us
127.0.0.1 true-counter.com
127.0.0.1 www.true-counter.com
127.0.0.1 out.true-counter.com
127.0.0.1 cnetadd.com
127.0.0.1 www.cnetadd.com
127.0.0.1 okmmm.com
127.0.0.1 www.okmmm.com
127.0.0.1 139mm.com
127.0.0.1 www.139mm.com
127.0.0.1 008k.com
127.0.0.1 www.008k.com
127.0.0.1 00hq.com
127.0.0.1 www.00hq.com
127.0.0.1 1-domains-registrations.com
127.0.0.1 www.1-domains-registrations.com
127.0.0.1 100sexlinks.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 1sexparty.com
127.0.0.1 www.1sexparty.com
127.0.0.1 1stpagehere.com
127.0.0.1 www.1stpagehere.com
127.0.0.1 2020search.com
127.0.0.1 www.2020search.com
127.0.0.1 24teen.com
127.0.0.1 www.24teen.com
127.0.0.1 36site.com
127.0.0.1 www.36site.com
127.0.0.1 4corn.net
127.0.0.1 www.4corn.net
127.0.0.1 777top.com
127.0.0.1 www.777top.com
127.0.0.1 8ad.com
127.0.0.1 www.8ad.com
127.0.0.1 aboutclicker.com
127.0.0.1 www.aboutclicker.com
127.0.0.1 abrp.net
127.0.0.1 www.abrp.net
127.0.0.1 accessthefuture.net
127.0.0.1 www.accessthefuture.net
127.0.0.1 acemedic.com
127.0.0.1 www.acemedic.com
127.0.0.1 actionbreastcancer.org
127.0.0.1 www.actionbreastcancer.org
127.0.0.1 activexupdate.com
127.0.0.1 www.activexupdate.com
127.0.0.1 adamsupportgroup.org
127.0.0.1 www.adamsupportgroup.org
127.0.0.1 adasearch.com
127.0.0.1 www.adasearch.com
127.0.0.1 adipics.com
127.0.0.1 www.adipics.com
127.0.0.1 adspics.com
127.0.0.1 www.adspics.com
127.0.0.1 adult-engine-search.com
127.0.0.1 www.adult-engine-search.com
127.0.0.1 adult-erotic-guide.net
127.0.0.1 www.adult-erotic-guide.net
127.0.0.1 adult-friends-finder.net
127.0.0.1 www.adult-friends-finder.net
127.0.0.1 adulthyperlinks.com
127.0.0.1 www.adulthyperlinks.com
127.0.0.1 adulttds.com
127.0.0.1 www.adulttds.com
127.0.0.1 exaccess.ru
127.0.0.1 www.exaccess.ru
127.0.0.1 advert.exaccess.ru
127.0.0.1 agentstudio.com
127.0.0.1 africaspromise.org
127.0.0.1 akril.com
127.0.0.1 alcatel.ws
127.0.0.1 alfa-search.com
127.0.0.1 all-inet.com
127.0.0.1 allabtcars.com
127.0.0.1 allabtjeeps.com
127.0.0.1 allhyperlinks.com
127.0.0.1 allinternetbusiness.com
127.0.0.1 almarvideos.com
127.0.0.1 amandamountains.com
127.0.0.1 amigeek.com
127.0.0.1 amisbusiness.com
127.0.0.1 analmovi.com
127.0.0.1 anin.org
127.0.0.1 annaromeo.com
127.0.0.1 antrocity.com
127.0.0.1 anything4health.com
127.0.0.1 apsua.com
127.0.0.1 aregay.com
127.0.0.1 arheo.com
127.0.0.1 arizonaweb.org
127.0.0.1 armitageinn.com
127.0.0.1 art-func.com
127.0.0.1 artachnid.com
127.0.0.1 asiankingkong.com
127.0.0.1 ass-gals.com
127.0.0.1 athenrye.com
127.0.0.1 avian-ads.com
127.0.0.1 ayakawamura.com
127.0.0.1 ayumitaniguchi.com
127.0.0.1 bannedhost.net
127.0.0.1 barbudafarms.com
127.0.0.1 barnandfence.com
127.0.0.1 batsearch.com
127.0.0.1 baygraphicsllc.com
127.0.0.1 bb-search.com
127.0.0.1 bbbsearch.com
127.0.0.1 bedhome.com
127.0.0.1 bediadance.com
127.0.0.1 bellabasketsfl.com
127.0.0.1 bernaolatwin.com
127.0.0.1 best-counter.com
127.0.0.1 best-hardpics.com
127.0.0.1 best-winning-casino.com
127.0.0.1 bestcrawler.com
127.0.0.1 bestfor.ru
127.0.0.1 bestporngate.com
127.0.0.1 bestxporno.com
127.0.0.1 blackjack-free.net
127.0.0.1 blender.xu.pl
127.0.0.1 bodaciousbabette.com
127.0.0.1 boobdoll.com
127.0.0.1 boobsandtits.com
127.0.0.1 boobsclub.com
127.0.0.1 boredlife.com
127.0.0.1 bowlofogumbo.com
127.0.0.1 bradcoem.org
127.0.0.1 brandiyoung.com
127.0.0.1 brookeburn.com
127.0.0.1 bucps.com
127.0.0.1 burgerkingbigscreen.com
127.0.0.1 buscards.net
127.0.0.1 bustyrussell.com
127.0.0.1 buttejazz.org
127.0.0.1 buyselldomain.net
127.0.0.1 calcioturris.com
127.0.0.1 canberracricketcoaching.com
127.0.0.1 candycantaloupes.com
127.0.0.1 careers.dulcineasystems.net
127.0.0.1 carsands.com
127.0.0.1 carsrentals.net
127.0.0.1 casino-gambling-1.net
127.0.0.1 casino-gambling-2.net
127.0.0.1 casino-onlines.net
127.0.0.1 casino.com.free.game.pogo.gratisdownloads.nl
127.0.0.1 casino2win.net
127.0.0.1 casinomidas.net
127.0.0.1 casinonline.net
127.0.0.1 catallogue.com
127.0.0.1 catsss.da.ru
127.0.0.1 caxa.ru
127.0.0.1 cclebali.org
127.0.0.1 ceewawires.org
127.0.0.1 certumgroup.com
127.0.0.1 chelancatering.com
127.0.0.1 childrenvilla.com
127.0.0.1 chips-4-free.com
127.0.0.1 chrisswasey.com
127.0.0.1 chriswallace.net
127.0.0.1 ckick4thumbs.com
127.0.0.1 clackamasliteraryreview.com
127.0.0.1 clearsearch.cc
127.0.0.1 clearsearch.net
127.0.0.1 clickaire.com
127.0.0.1 clickyestoenter.net
127.0.0.1 clrsch.com
127.0.0.1 cmtapestry.com
127.0.0.1 cool-homepage.co
127.0.0.1 cool-homepage.com
127.0.0.1 cool-search.net
127.0.0.1 cool-search.netfartpost.com
127.0.0.1 cool-web-search.com
127.0.0.1 coolfetishsite.com
127.0.0.1 coolfreehost.com
127.0.0.1 coolfreepage.com
127.0.0.1 coolfreepages.com
127.0.0.1 coolmoneysearch.com
127.0.0.1 coolpornsearch.com
127.0.0.1 coolsearcher.info
127.0.0.1 coolwebsearsh.com
127.0.0.1 copmtraine.com
127.0.0.1 couldnotfind.com
127.0.0.1 count-all.com
127.0.0.1 cracks.me.uk
127.0.0.1 creamedcutties.com
127.0.0.1 creditsearchonline.com
127.0.0.1 crestring.com
127.0.0.1 crooder.com
127.0.0.1 curvedspaces.com
127.0.0.1 cvs.jps.ru
127.0.0.1 cvsymphony.com
127.0.0.1 cydom.com
127.0.0.1 daily-gals.com
127.0.0.1 dancingbabycd.com
127.0.0.1 datanotary.com
127.0.0.1 datareco.com
127.0.0.1 davemarshall.org
127.0.0.1 dcfitusa.com
127.0.0.1 defaultsearch.net
127.0.0.1 desarrollocreativo.com
127.0.0.1 develip.com
127.0.0.1 dewis.spb.ru
127.0.0.1 dewis.us
127.0.0.1 df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0sf9fsd0a2t4ld.biz
127.0.0.1 dietpills4free.com
127.0.0.1 dietpussy.com
127.0.0.1 digistreamsa.com
127.0.0.1 dionforvalleycouncil.org
127.0.0.1 doctorwaldron.com
127.0.0.1 document-not-found.pornpic.org
127.0.0.1 doggyaction.com
127.0.0.1 domain-your-registration.com
127.0.0.1 domains-for-you-online.com
127.0.0.1 domains2003.net
127.0.0.1 domkrat.com
127.0.0.1 dp-host.com
127.0.0.1 dragqueen.gay-clan.com
127.0.0.1 drug-sources-exposed.com
127.0.0.1 drvvv.com
127.0.0.1 dutch-sex.com
127.0.0.1 dvdbank.org
127.0.0.1 e-localad.com
127.0.0.1 e-plus.cc
127.0.0.1 e-websitesolutions.com
127.0.0.1 eases.net
127.0.0.1 easy-search.net
127.0.0.1 easycategories.com
127.0.0.1 ecosrioplatenses.org
127.0.0.1 ecstasyporn.net
127.0.0.1 eikokoike.com
127.0.0.1 epornsex.com
127.0.0.1 euuu.com
127.0.0.1 evidence-detector.biz
127.0.0.1 evilspidercomics.com
127.0.0.1 ewebsearch.net
127.0.0.1 findloss.com
127.0.0.1 excellentsckin.com
127.0.0.1 extremeseek.net
127.0.0.1 f*ckdenniss.com
127.0.0.1 f*cknicepics.com
127.0.0.1 faithstevens.com
127.0.0.1 fantasiewelten.com
127.0.0.1 farmsteadbandb.com
127.0.0.1 fartpost.com
127.0.0.1 fastwebfinder.com
127.0.0.1 faxporn.com
127.0.0.1 fickenisgeil.de
127.0.0.1 finance-loans.com
127.0.0.1 find-itnow.com
127.0.0.1 find-uk-health.co.uk
127.0.0.1 find4u.net
127.0.0.1 findit-now.com
127.0.0.1 findthesite.com
127.0.0.1 findthewebsiteyouneed.com
127.0.0.1 www.findthewebsiteyouneed.com
127.0.0.1 fionasteel.com
127.0.0.1 firstbookmark.net
127.0.0.1 fitness-free.com
127.0.0.1 foodvacations.net
127.0.0.1 forex.jps.ru
127.0.0.1 forexcredit.com
127.0.0.1 forexcredit.ru
127.0.0.1 formingfusions.com
127.0.0.1 forsythfire.net
127.0.0.1 forthline.com
127.0.0.1 free-chipes.com
127.0.0.1 free-f*cking-video.com
127.0.0.1 free-hit.com
127.0.0.1 free-pics-and-movies.com
127.0.0.1 free-sex-movie-clips.net
127.0.0.1 free4porno.net
127.0.0.1 free64all.com
127.0.0.1 freebookmark.net
127.0.0.1 freebookmarks.net
127.0.0.1 freecategories.com
127.0.0.1 freecoolhost.com
127.0.0.1 freerbhost.com
127.0.0.1 freeshemalepics.net
127.0.0.1 freeyaho.com
127.0.0.1 freshseek.com
127.0.0.1 freshteensite.com
127.0.0.1 gabrielscott.com
127.0.0.1 galpostgirls.com
127.0.0.1 gals-for-free.com
127.0.0.1 gambling-online4you.com
127.0.0.1 gameterror.net
127.0.0.1 gay50.com
127.0.0.1 generalsmeltingofcanada.com
127.0.0.1 geteens.com
127.0.0.1 getpicshere.com
127.0.0.1 gimmezamore.com
127.0.0.1 gimnasiaer.com
127.0.0.1 girls-porn-life.com
127.0.0.1 glbdf.org
127.0.0.1 global-finder.com
127.0.0.1 globe-finder.cc
127.0.0.1 globe-finder.com
127.0.0.1 gocybersearch.com
127.0.0.1 golftennis.net
127.0.0.1 good-mortgages-calculator.com
127.0.0.1 good-mortgages.net
127.0.0.1 goodsexs.com
127.0.0.1 googlebar.jps.ru
127.0.0.1 googlf.com
127.0.0.1 gradforum.org
127.0.0.1 gratis-porn-movie.com
127.0.0.1 gratis-pornopics.com
127.0.0.1 guzzycats.com
127.0.0.1 gzphoenix.com
127.0.0.1 hallnetaccolade.com
127.0.0.1 hand-book.com
127.0.0.1 happyanal.com
127.0.0.1 hard-gals.com
127.0.0.1 hardbodytgp.com
127.0.0.1 hardcoreover.com
127.0.0.1 hardloved.com
127.0.0.1 hardwareseek.net
127.0.0.1 harukaigawa.com
127.0.0.1 hccsolanonapa.org
127.0.0.1 health-protein.com
127.0.0.1 hentai4u.net
127.0.0.1 here4search.com
127.0.0.1 heyrichy.com
127.0.0.1 hi-search.com
127.0.0.1 hiddenguides.com
127.0.0.1 hitlistlyrics.com
127.0.0.1 holidayautostr.com
127.0.0.1 homemortage.ws
127.0.0.1 hostssp.com
127.0.0.1 hot-cartoon-sex.anime.american-teens.net
127.0.0.1 hotbookmark.com
127.0.0.1 hotels-list.net
127.0.0.1 hotelxxxcams.com
127.0.0.1 hotpopup.com
127.0.0.1 hotsearchbox.com
127.0.0.1 hotsex-series.com
127.0.0.1 hotstartpage.com
127.0.0.1 hqsex.biz
127.0.0.1 hugeporn4u.net
127.0.0.1 hunacsa.com
127.0.0.1 hupacasath.com
127.0.0.1 hzsx.com
127.0.0.1 icansearch.net
127.0.0.1 idgsearch.com
127.0.0.1 ie-search.com
127.0.0.1 incestporngate.com
127.0.0.1 infodigger.net
127.0.0.1 infoglobus.com
127.0.0.1 inherhole.com
127.0.0.1 insertthiscock.com
127.0.0.1 insurance-flood.net
127.0.0.1 insuranceall.net
127.0.0.1 internetsearch.ru
127.0.0.1 ionichost.com
127.0.0.1 ionomist.com
127.0.0.1 ipsex.net
127.0.0.1 itsanal.com
127.0.0.1 itseasy.us
127.0.0.1 iweb-commerce.com
127.0.0.1 iwebland.com
127.0.0.1 jeannineoldfield.com
127.0.0.1 jethomepage.com
127.0.0.1 jetseeker.com
127.0.0.1 jmhgallery.org
127.0.0.1 joannelatham.com
127.0.0.1 judin.ru
127.0.0.1 junkysex.com
127.0.0.1 karleyt.narod.ru
127.0.0.1 kathisomers.com
127.0.0.1 kazaa-lite.ws
127.0.0.1 keithgreenpro.com
127.0.0.1 kenmccaul.com
127.0.0.1 kilosex.com
127.0.0.1 kimhines.com
127.0.0.1 kinoru.com
127.0.0.1 ksdspups.org
127.0.0.1 landrape.com
127.0.0.1 lauraroebuck.com
127.0.0.1 leannalovelace.com
127.0.0.1 lesobank.ru
127.0.0.1 libertyonlinehosting.com
127.0.0.1 lingerie-mania.com
127.0.0.1 lisamatthew.com
127.0.0.1 liveholio.com
127.0.0.1 livenewspaper.com
127.0.0.1 louiseleeds.com
127.0.0.1 love-pix.com
127.0.0.1 lovelas.com
127.0.0.1 lovelysearch.com
127.0.0.1 low-taxes.com
127.0.0.1 luckysearch.net
127.0.0.1 lunitaweb.net
127.0.0.1 lustful-porno.com
127.0.0.1 mackinnonsbrook.org
127.0.0.1 madfinder.com
127.0.0.1 madisonmoons.com
127.0.0.1 madisonoilco.com
127.0.0.1 madonalive.com
127.0.0.1 majuozawa.com
127.0.0.1 makin-do.com
127.0.0.1 male4free.com
127.0.0.1 map-quest.org
127.0.0.1 marilynchamber.com
127.0.0.1 martfinder.com
127.0.0.1 massearch.com
127.0.0.1 matetrava.com
127.0.0.1 mature50.com
127.0.0.1 matureporngate.com
127.0.0.1 maxdzines.com
127.0.0.1 mcgeeforlabor.com
127.0.0.1 mdstunisie.org
127.0.0.1 medicare-insurance.net
127.0.0.1 medicare-supplemental.com
127.0.0.1 mega-dating-tips.com
127.0.0.1 megumikanzaki.com
127.0.0.1 meshalynn.com
127.0.0.1 meta-adult.com
127.0.0.1 meta-casino.com
127.0.0.1 meta-mobile.com
127.0.0.1 meta-porn.com
127.0.0.1 metafora.ru
127.0.0.1 metapoisk.ru
127.0.0.1 michiyonakajima.com
127.0.0.1 miconsultamedica.com
127.0.0.1 mikasakamoto.com
127.0.0.1 mikoni.com
127.0.0.1 militarygods.porn4porn.net
127.0.0.1 millennialpeople.org
127.0.0.1 mipham.org
127.0.0.1 missingcommand.com
127.0.0.1 mommykiss.com
127.0.0.1 moneyhunters.com
127.0.0.1 montgomeryhospitalanesthesia.com
127.0.0.1 morflot.com
127.0.0.1 mortgage-debt.net
127.0.0.1 mortismaximus.com
127.0.0.1 moscowwhores.com
127.0.0.1 moviecategories.com
127.0.0.1 mp3-pix.com
127.0.0.1 mrtg.jps.ru
127.0.0.1 msn-info.net
127.0.0.1 multipussy.com
127.0.0.1 mundopolar.com
127.0.0.1 mustv.com
127.0.0.1 mywebsearch.net
127.0.0.1 nativehardcore.com
127.0.0.1 naturalspy.com
127.0.0.1 nbasportsbook.net
127.0.0.1 needf*cknow.com
127.0.0.1 nellyslyrics.com
127.0.0.1 nepgyan.com
127.0.0.1 nesrecords.com
127.0.0.1 netshastra.net
127.0.0.1 nettime.ru
127.0.0.1 nettracker.jps.ru
127.0.0.1 netyellowpages.info
127.0.0.1 new-incest.com
127.0.0.1 newcategories.com
127.0.0.1 newcracks.com
127.0.0.1 newcracks.net
127.0.0.1 newlife-lajolla.com
127.0.0.1 newsexgate.com
127.0.0.1 newtonsracks.com
127.0.0.1 newxpics.com
127.0.0.1 nhlsportsbook.net
127.0.0.1 niagaracapital.com
127.0.0.1 niche-tv.com
127.0.0.1 nmrba.com
127.0.0.1 nocalories.net
127.0.0.1 nocensor.com
127.0.0.1 ormandcompany.com
127.0.0.1 nsbabes.com
127.0.0.1 nuclearwitness.org
127.0.0.1 nursemania.com
127.0.0.1 nvntour.com
127.0.0.1 nvphall.org
127.0.0.1 oborot.com
127.0.0.1 ocalalivestockmarket.com
127.0.0.1 ocsff.com
127.0.0.1 oeatlanta.com
127.0.0.1 oharrowsearch.com
127.0.0.1 ok-search.com
127.0.0.1 okulta.com
127.0.0.1 omegabrains.net
127.0.0.1 online-casino-1.net
127.0.0.1 online-casino-bonus.info
127.0.0.1 online-casinos-x.com
127.0.0.1 online-winning.net
127.0.0.1 onlineserverz.com
127.0.0.1 onlinetradings.net
127.0.0.1 onlycunt.com
127.0.0.1 onlyinsured.com
127.0.0.1 operanabuco.com
127.0.0.1 opsex.com
127.0.0.1 oregoncharters.org
127.0.0.1 otrlives.com
127.0.0.1 ozawamadoka.com
127.0.0.1 paigesummer.com
127.0.0.1 pamelacollections.com
127.0.0.1 panamcup.com
127.0.0.1 pantygirls4u.com
127.0.0.1 pantyhoserealm.com
127.0.0.1 pantyplace.com
127.0.0.1 pastubes.com
127.0.0.1 paulapage.com
127.0.0.1 paulhoover.com
127.0.0.1 payfortraffic.net
127.0.0.1 pedo.ws
127.0.0.1 people.1gb.ru
127.0.0.1 pervertbot.com
127.0.0.1 pharma-diet-pills.com
127.0.0.1 pharmacy2003.com
127.0.0.1 pharmalocator.com
127.0.0.1 phendimetrazine-tenuate-adipex.com
127.0.0.1 pics-videos.com
127.0.0.1 picsdir.com
127.0.0.1 picsforbucks.com
127.0.0.1 picsofseductiveladies.com
127.0.0.1 pills-birth-control.com
127.0.0.1 pillsmall.com
127.0.0.1 pilotronix.com
127.0.0.1 pixpox.com
127.0.0.1 planemusic.com
127.0.0.1 poiska.net
127.0.0.1 poker-casino-free.com
127.0.0.1 poker-games-free.net
127.0.0.1 polradiologia.com
127.0.0.1 pooi.net
127.0.0.1 porn-teacher.com
127.0.0.1 porncamz.com
127.0.0.1 pornfree.info
127.0.0.1 pornnightdreams.com
127.0.0.1 pornokopec.com
127.0.0.1 porntetris.com
127.0.0.1 porntwist.com
127.0.0.1 powerwebsearch.com
127.0.0.1 prblitz.com
127.0.0.1 pretypics.com
127.0.0.1 pribalt.com
127.0.0.1 privacy-support.biz
127.0.0.1 privateporn.net
127.0.0.1 prostactive.com
127.0.0.1 prostol.com
127.0.0.1 protect-yourself.biz
127.0.0.1 prsainlandempire.org
127.0.0.1 put-your-link-here.com
127.0.0.1 pyrocorp.com
127.0.0.1 quick-search.ws
127.0.0.1 quiksearchgenealogy.com
127.0.0.1 radfrall.org
127.0.0.1 ramgo.com
127.0.0.1 ranafrog.ne
127.0.0.1 rapegate.com
127.0.0.1 redbudbmx.com
127.0.0.1 refinance-help.com
127.0.0.1 removeearthkeepers.org
127.0.0.1 rightfinder.net
127.0.0.1 robbsproshop.com
127.0.0.1 robertferencz.com
127.0.0.1 rotocasters.com
127.0.0.1 royalsearch.net
127.0.0.1 runsearch.com
127.0.0.1 russiansponsor.com
127.0.0.1 russogay.com
127.0.0.1 s2.exocrew.com
127.0.0.1 sacitylife.com
127.0.0.1 samplegals.com
127.0.0.1 satisf*cktion.net
127.0.0.1 sbssurvivor.com
127.0.0.1 scarypix.com
127.0.0.1 sccdnet.com
127.0.0.1 schoolforest.com
127.0.0.1 search-1.net
127.0.0.1 search-2003.com
127.0.0.1 search-about.net
127.0.0.1 search-hawk.com
127.0.0.1 search-log.com
127.0.0.1 search-meta.com
127.0.0.1 search-safe.com
127.0.0.1 search.psn.cn
127.0.0.1 searchadultweb.com
127.0.0.1 searchbutler.com
127.0.0.1 searchbuttler.com
127.0.0.1 searchbutler.org
127.0.0.1 searchcomplete.com
127.0.0.1 searchdesire.com
127.0.0.1 searchdot.net
127.0.0.1 searchexpander.com
127.0.0.1 searchfastnet.com
127.0.0.1 searchforge.com
127.0.0.1 searching-the-net.com
127.0.0.1 searchmeta.md
127.0.0.1 searchmeta.net
127.0.0.1 searchmeta.ru
127.0.0.1 searchmeta.webhost.ru
127.0.0.1 searchnow.ws
127.0.0.1 searchonfly.com
127.0.0.1 searchv.com
127.0.0.1 searchxl.com
127.0.0.1 searchxp.com
127.0.0.1 sebot.com
127.0.0.1 securenp.org
127.0.0.1 security-warning.biz
127.0.0.1 seehardcore.com
127.0.0.1 seekwell.net
127.0.0.1 selfbookmark.com
127.0.0.1 selfbookmark.info
127.0.0.1 selfbookmark.net
127.0.0.1 sex.free4porno.net
127.0.0.1 sex-coach.com
127.0.0.1 sex-festival.com
127.0.0.1 sex-video-galleries.com
127.0.0.1 sexgalleries4all.com
127.0.0.1 sexmoviesnet.com
127.0.0.1 sexpatriot.net
127.0.0.1 sexy18.cc
127.0.0.1 sexycat.adult-host.org
127.0.0.1 sfbayfolkboats.com
127.0.0.1 sgirls.net
127.0.0.1 sharempeg.com
127.0.0.1 shopcards.net
127.0.0.1 shopknights.com
127.0.0.1 sic02.com
127.0.0.1 sintrader.com
127.0.0.1 site1.ru
127.0.0.1 sites-in-web.com
127.0.0.1 sitevictoria.com
127.0.0.1 sixroads.com
127.0.0.1 skakalka.ru
127.0.0.1 slawsearch.com
127.0.0.1 slotch.com
127.0.0.1 slotchbar.com
127.0.0.1 smartsumo.com
127.0.0.1 smutarchive.net
127.0.0.1 solongas.com
127.0.0.1 sonomaevents.com
127.0.0.1 spermatrix.com
127.0.0.1 sportbooks-free4you.com
127.0.0.1 spros.com
127.0.0.1 spyass.com
127.0.0.1 spyorgy.net
127.0.0.1 staceyowens.com
127.0.0.1 stacistaxx.com
127.0.0.1 stacystaxx.com
127.0.0.1 start-space.com
127.0.0.1 steamycock.com
127.0.0.1 sterva.com
127.0.0.1 stevecashdollar.com
127.0.0.1 stop-tracking.biz
127.0.0.1 stopvotefraud.com
127.0.0.1 stopxxxpics.com
127.0.0.1 strekoza.com
127.0.0.1 stuffstore.com
127.0.0.1 styleclickink.com
127.0.0.1 summercollins.com
127.0.0.1 summitcross.com
127.0.0.1 super-spider.com
127.0.0.1 super-websearch.com
127.0.0.1 supersexmachine.com
127.0.0.1 superwebsearch.com
127.0.0.1 supret.com
127.0.0.1 suzannebrecht.com
127.0.0.1 sweeteenz.com
127.0.0.1 tacil.org
127.0.0.1 tangounion.com
127.0.0.1 tastethemusic.com
127.0.0.1 tax-refund4you.com
127.0.0.1 tech-jobs.ws
127.0.0.1 technology-related.com
127.0.0.1 teen-biz.com
127.0.0.1 teen-pic-post.com
127.0.0.1 teenpornosex.com
127.0.0.1 teens4free.net
127.0.0.1 teensact.com
127.0.0.1 teensgate.com
127.0.0.1 teensguru.com
127.0.0.1 teenswamp.com
127.0.0.1 testosterone-birth-control.com
127.0.0.1 the-exit.com
127.0.0.1 the-huns-yellow-pages.com
127.0.0.1 thefakejournal.com
127.0.0.1 thehuy.net
127.0.0.1 theproxy.org
127.0.0.1 therealsearch.com
127.0.0.1 thesten.com
127.0.0.1 thornleygroup.com
127.0.0.1 tings.org
127.0.0.1 tit-x.com
127.0.0.1 titanvision.com
127.0.0.1 titsianna.com
127.0.0.1 toddhayes.com
127.0.0.1 toon-comics.com
127.0.0.1 tooncomics.com
127.0.0.1 topsearcher.com
127.0.0.1 trafficback.com
127.0.0.1 trafficswitcher.com
127.0.0.1 travel.picture-posters.com
127.0.0.1 true-portal.com
127.0.0.1 trytechnical.com
127.0.0.1 ufindall.click-now.net
127.0.0.1 umaxsearch.com
127.0.0.1 une-autre-france.com
127.0.0.1 unigays.com
127.0.0.1 unipages.cc
127.0.0.1 up2you.ru
127.0.0.1 urlstat.com
127.0.0.1 urlstat.ru
127.0.0.1 uralitel.ru
127.0.0.1 ursie.net
127.0.0.1 utahsweet.com
127.0.0.1 utopicportal.com
127.0.0.1 uusocialjustice.org
127.0.0.1 v61.com
127.0.0.1 vaginpics.com
127.0.0.1 valmyers.com
127.0.0.1 vegas-free.com
127.0.0.1 vegbuy.com
127.0.0.1 veloventures.com
127.0.0.1 verzila.com
127.0.0.1 victoriaadam.com
127.0.0.1 videocategories.com
127.0.0.1 vitamins-for-each.com
127.0.0.1 votehowe.org
127.0.0.1 vxebony.com
127.0.0.1 wakeupdick.com
127.0.0.1 warnomore.org
127.0.0.1 watersport-specialties.com
127.0.0.1 web-homepage.net
127.0.0.1 web-search.tk
127.0.0.1 webcoolsearch.com
127.0.0.1 websearchdot.com
127.0.0.1 weekend-movies.com
127.0.0.1 wetpornostars.com
127.0.0.1 whatsyoursearch.com
127.0.0.1 white-pages.ws
127.0.0.1 whittierblvd.com
127.0.0.1 win-in-casino.com
127.0.0.1 wiresearch.com
127.0.0.1 wolfpacracing.com
127.0.0.1 wordlist.jps.ru
127.0.0.1 wpc2001.org
127.0.0.1 wspzone.sexpornonline.com
127.0.0.1 wwwbet.net
127.0.0.1 wwwbetting.net
127.0.0.1 wwwpokergames.com
127.0.0.1 wwwpokerplayers.com
127.0.0.1 wwwroulette.net
127.0.0.1 x-library.com
127.0.0.1 x-webdesign.com
127.0.0.1 xcomics4u.com
127.0.0.1 xic-bs.com
127.0.0.1 xldr.com
127.0.0.1 xp18.com
127.0.0.1 xrenosearch.com
127.0.0.1 xtragay.com
127.0.0.1 xu.xu.pl
127.0.0.1 xxxcategories.com
127.0.0.1 xxxemailxxx.com
127.0.0.1 y-e-l-l-o-w.com
127.0.0.1 yellow500.com
127.0.0.1 yezol.com
127.0.0.1 you-search.com
127.0.0.1 you-search.com.ru
127.0.0.1 youfindall.com
127.0.0.1 youfindall.net
127.0.0.1 your-prescriptions.net
127.0.0.1 yourbookmarks.info
127.0.0.1 yourbookmarks.ws
127.0.0.1 ypir.com
127.0.0.1 ysa-info.net
127.0.0.1 yukohamano.com
127.0.0.1 ywebsearch.info
127.0.0.1 zapros.com
127.0.0.1 zesearch.com
127.0.0.1 ziportal.com
127.0.0.1 zipportal.com
127.0.0.1 zoneoffreeporn.com
127.0.0.1 zoomegasite.com
127.0.0.1 zvimigdal.com
127.0.0.1 zyban-zocor-levitra.com
127.0.0.1 t.rack.cc
127.0.0.1 omega-search.com
127.0.0.1 cool-xxx.net
127.0.0.1 revolto3.da.ru
127.0.0.1 dating-search.net
127.0.0.1 linksummary.com
127.0.0.1 duolaimi.net
127.0.0.1 ez-searching.com
127.0.0.1 freehqmovies.com
127.0.0.1 xzoomy.com
127.0.0.1 freescratchandwin.com
127.0.0.1 globalwebsearch.com
127.0.0.1 www.gocybersearch.com
127.0.0.1 mayancasino.com
127.0.0.1 www.hastalavista.com
127.0.0.1 www.free-popup-killer.com
127.0.0.1 www.digitalfan.com
127.0.0.1 google123.web1000.com
127.0.0.1 search.ieplugin.com
127.0.0.1 i-lookup.com
127.0.0.1 spidersearch.com
127.0.0.1 istarthere.com
127.0.0.1 xxxtoolbar.com
127.0.0.1 www.seekporn.org
127.0.0.1 17-plus.com
127.0.0.1 lolita4all1.xrensmagpost.com
127.0.0.1 mafiapics.com
127.0.0.1 www.teenmonster.com
127.0.0.1 ie.marketdart.com
127.0.0.1 masterbar.com
127.0.0.1 search.netzany.co
127.0.0.1 only-virgins.com
127.0.0.1 passthison.com
127.0.0.1 blondetgp.com
127.0.0.1 prolivation.com
127.0.0.1 server-au.imrworldwide.com
127.0.0.1 rocketsearch.com
127.0.0.1 roar.com
127.0.0.1 searchaccurate.com
127.0.0.1 searchalot.com
127.0.0.1 searchandbrowse.com
127.0.0.1 gtawarehouse.com
127.0.0.1 startium.com
127.0.0.1 searchandclick.com
127.0.0.1 searchby.net
127.0.0.1 searchdot.com
127.0.0.1 search-exe.com
127.0.0.1 secret-crush.com
127.0.0.1 seekseek.com
127.0.0.1 sexarena.com
127.0.0.1 sexocean.play-lolita.com
127.0.0.1 startsurfing.com
127.0.0.1 srng.net
127.0.0.1 apps.webservicehost.com
127.0.0.1 search.shopnav.com
127.0.0.1 wish7.com
127.0.0.1 www.supersexpass.com
127.0.0.1 surferbar.com
127.0.0.1 xlola.underagehost.com
127.0.0.1 hotlolitas.underagehost.com
127.0.0.1 loading-lolita.com
127.0.0.1 www.xupiter.com
127.0.0.1 xjupiter.com
127.0.0.1 www.xjupiter.com
127.0.0.1 www.browserwise.com
127.0.0.1 sqwire.com
127.0.0.1 orbitexplorer.com
127.0.0.1 searchcentrix.com
127.0.0.1 categories.mygeek.com
127.0.0.1 web-entrance.co
127.0.0.1 whazit.com
127.0.0.1 windowenhancer.com
127.0.0.1 buz.ru
127.0.0.1 iwon.com
127.0.0.1 www.bonzi.com
127.0.0.1 featured-results.com
127.0.0.1 searchmadesafe.net
127.0.0.1 quicklaunch.com
127.0.0.1 www.cashsurfers.com
127.0.0.1 lop.com
127.0.0.1 tjdo.com
127.0.0.1 ebav.com
127.0.0.1 ebgo.com
127.0.0.1 ebaw.com
127.0.0.1 ebkb.com
127.0.0.1 ebmu.com
127.0.0.1 ecmp.com
127.0.0.1 edhq.com
127.0.0.1 edty.com
127.0.0.1 sbee.com
127.0.0.1 aavc.com
127.0.0.1 acjp.com
127.0.0.1 ecmh.com
127.0.0.1 emch.com
127.0.0.1 ecpm.com
127.0.0.1 wabu.com
127.0.0.1 wabq.com
127.0.0.1 ebch.com
127.0.0.1 ebdv.com
127.0.0.1 ebdw.com
127.0.0.1 ebjp.com
127.0.0.1 ebkn.com
127.0.0.1 ebky.com
127.0.0.1 eblv.com
127.0.0.1 wbkb.com
127.0.0.1 ebvr.com
127.0.0.1 ecwz.com
127.0.0.1 ecyb.com
127.0.0.1 eduy.com
127.0.0.1 eeev.com
127.0.0.1 farse.com
127.0.0.1 ibmx.com
127.0.0.1 icwb.com
127.0.0.1 icwo.com
127.0.0.1 icwp.com
127.0.0.1 iddh.com
127.0.0.1 idhh.com
127.0.0.1 ifiz.com
127.0.0.1 iguu.com
127.0.0.1 samz.com
127.0.0.1 saoe.com
127.0.0.1 sbjr.com
127.0.0.1 sbnl.com
127.0.0.1 sbnt.com
127.0.0.1 sbvr.com
127.0.0.1 scbm.com
127.0.0.1 sckr.com
127.0.0.1 scrk.com
127.0.0.1 sdry.com
127.0.0.1 seld.com
127.0.0.1 sfux.com
127.0.0.1 sheat.com
127.0.0.1 sipo.com
127.0.0.1 smds.com
127.0.0.1 srib.com
127.0.0.1 srox.com
127.0.0.1 srsf.com
127.0.0.1 ssaw.com
127.0.0.1 ssby.com
127.0.0.1 surj.com
127.0.0.1 tbvg.com
127.0.0.1 tdak.com
127.0.0.1 tdmy.com
127.0.0.1 tefs.com
127.0.0.1 tfil.com
127.0.0.1 tjar.com
127.0.0.1 tjaw.com
127.0.0.1 tjgo.com
127.0.0.1 tjem.com
127.0.0.1 torc.com
127.0.0.1 wfix.com
127.0.0.1 wflu.com
127.0.0.1 tdko.com
127.0.0.1 thko.com
127.0.0.1 H24413.tfil.com
127.0.0.1 germany.rub.to
127.0.0.1 search.rub.to
127.0.0.1 unitedstates.rub.to
127.0.0.1 www.commonname.com
127.0.0.1 www.ezcybersearch.com
127.0.0.1 www.jethomepage.com
127.0.0.1 www.gohip.com
127.0.0.1 hotbar.com
127.0.0.1 www.huntbar.com
127.0.0.1 search.imiserver.com
127.0.0.1 infospace.com/blsrch.dp.toolbar
127.0.0.1 searchenhancement.com
127.0.0.1 newtonknows.com
127.0.0.1 search-explorer.net
127.0.0.1 searchsquire.com
127.0.0.1 secondpower.com
127.0.0.1 2ndpower.com
127.0.0.1 searchgateway.net
127.0.0.1 worldusa.com
127.0.0.1 www.topsearcher.com
127.0.0.1 smutserver.com
127.0.0.1 searchmeup.com
127.0.0.1 cameup.com
127.0.0.1 kliksearch.com
127.0.0.1 realphx.com
127.0.0.1 blazefind.com
127.0.0.1 zoofil.com
127.0.0.1 terafinder.com
127.0.0.1 008i.com
127.0.0.1 171203.com
127.0.0.1 39-93.com
127.0.0.1 adult-personal.us
127.0.0.1 cashsearch.biz
127.0.0.1 cl55.biz
127.0.0.1 dailyteenspic.com
127.0.0.1 dialer2004.com
127.0.0.1 digital-pornography.com
127.0.0.1 eager-sex.com
127.0.0.1 ergosites.com
127.0.0.1 freecj.com
127.0.0.1 greg-search.com
127.0.0.1 incest-host.com
127.0.0.1 ironcarteam.com
127.0.0.1 is-best.com
127.0.0.1 killerpornstars.com
127.0.0.1 lollitop.com
127.0.0.1 love-host.com
127.0.0.1 myexexex.com
127.0.0.1 my-finder.com
127.0.0.1 onlineclick.net
127.0.0.1 onlysex.ws
127.0.0.1 regfreeze.com
127.0.0.1 ruworld.com
127.0.0.1 selltraffic.biz
127.0.0.1 sexunique.net
127.0.0.1 sinpussy.com
127.0.0.1 teenhost.net
127.0.0.1 ultraload.net
127.0.0.1 vse-moe.biz
127.0.0.1 xsex.ws
127.0.0.1 75tz.com
127.0.0.1 iefeadsl.com
127.0.0.1 rf104.com
127.0.0.1 www.v61.com
127.0.0.1 ads.centralmedia.ws
127.0.0.1 c.centralmedia.ws
127.0.0.1 count.cc
127.0.0.1 topx.cc
127.0.0.1 sidefind.com
127.0.0.1 thenewsearch.com
127.0.0.1 new-search.net
127.0.0.1 x-google.net
127.0.0.1 adultgambling.org
127.0.0.1 bitchesonline.net
127.0.0.1 girls4rent.net
127.0.0.1 usefullsoft.net
127.0.0.1 livegambling.com
127.0.0.1 adultsgames.net
127.0.0.1 easyantispy.com
127.0.0.1 spybotremover.net
127.0.0.1 winprotect.net
127.0.0.1 funny-girls.com
127.0.0.1 winmsn.com
127.0.0.1 oneclicksearches.com
127.0.0.1 bestweblinks.com
127.0.0.1 iqsearch.net
127.0.0.1 dumpserv.com
127.0.0.1 helpyoursearch.com
127.0.0.1 sgrunt.biz
127.0.0.1 yeak.net
127.0.0.1 u45.cx
127.0.0.1 u46.cx
127.0.0.1 u47.cc
127.0.0.1 u48.cc
127.0.0.1 sfonditalia.biz
127.0.0.1 realarea.biz
127.0.0.1 archiviosex.net
127.0.0.1 agava.com
127.0.0.1 agava.ru
127.0.0.1 hut1.ru
127.0.0.1 hu15.ru
127.0.0.1 winfixer.com
127.0.0.1 3721.com
127.0.0.1 easysearchingtips.com
127.0.0.1 fine-search.net
127.0.0.1 noproblemsurf.com
127.0.0.1 pcspyremover.com
127.0.0.1 search-motor.com
127.0.0.1 searchwhatuwant.com
127.0.0.1 ad25.com
127.0.0.1 ad45.com
127.0.0.1 ad77.com
127.0.0.1 ad86.com
127.0.0.1 full-search.net
127.0.0.1 go2-search.com
127.0.0.1 onemoresearch.net
127.0.0.1 search-777.com
127.0.0.1 search-to-find.com
127.0.0.1 search-what.net
127.0.0.1 winshow.biz
127.0.0.1 lookfor.cc
127.0.0.1 looking-for.cc
127.0.0.1 tgp-4-you.com
127.0.0.1 veryeasysearch.com
127.0.0.1 010402.com
127.0.0.1 20x2p.com
127.0.0.1 db105.com
127.0.0.1 ga31.com
127.0.0.1 mpeg-look.com
127.0.0.1 n-udd.com
127.0.0.1 p-uud.com
127.0.0.1 porn-screen.com
127.0.0.1 rb37.com
127.0.0.1 t058.com
127.0.0.1 u-239.com
127.0.0.1 v-224.com
127.0.0.1 trackhits.cc
127.0.0.1 tracktraff.cc
127.0.0.1 power-cleaner.com
127.0.0.1 yoursitebar.com
127.0.0.1 ysbweb.com
127.0.0.1 www.ysbweb.com
127.0.0.1 installcash.com
127.0.0.1 toolbarcash.com
127.0.0.1 enjoywebsurf.com
127.0.0.1 msnguard.cc
127.0.0.1 searchclick.cc
127.0.0.1 havy.biz
127.0.0.1 ewizard.cc
127.0.0.1 4klm.com
127.0.0.1 camup.net
127.0.0.1 bdsmlibrary.net
127.0.0.1 n-glx.s-redirect.com
127.0.0.1 aaasexypics.com
127.0.0.1 allforadult.com
127.0.0.1 autoescrowpay.com
127.0.0.1 awmcash.biz
127.0.0.1 awmdabest.com
127.0.0.1 buldog-stats.com
127.0.0.1 counter.sexmaniack.com
127.0.0.1 fregat.drocherway.com
127.0.0.1 greg-tut.com
127.0.0.1 iframe.biz
127.0.0.1 megapornix.com
127.0.0.1 newiframe.biz
127.0.0.1 nylonsexy.com
127.0.0.1 pizdato.biz
127.0.0.1 sexfiles.nu
127.0.0.1 slutmania.biz
127.0.0.1 sp2fucked.biz
127.0.0.1 toolbarpartner.com
127.0.0.1 vesbiz.biz
127.0.0.1 virgin-tgp.net
127.0.0.1 vparivalka.com
127.0.0.1 x.full-tgp.net
127.0.0.1 toolbar.cc
127.0.0.1 himen.biz
127.0.0.1 msupdater.net
127.0.0.1 www.msupdater.net
127.0.0.1 1800searchonline.com
127.0.0.1 www.1800searchonline.com
127.0.0.1 1stsearchportal.com
127.0.0.1 www.1stsearchportal.com
127.0.0.1 24-7searching-and-more.com
127.0.0.1 www.24-7searching-and-more.com
127.0.0.1 971searchbox.com
127.0.0.1 www.971searchbox.com
127.0.0.1 aaawebfinder.com
127.0.0.1 www.aaawebfinder.com
127.0.0.1 ampmsearch.com
127.0.0.1 www.ampmsearch.com
127.0.0.1 clickhere4search.com
127.0.0.1 www.clickhere4search.com
127.0.0.1 clicktomakeasearch.com
127.0.0.1 www.clicktomakeasearch.com
127.0.0.1 directsearchzone.com
127.0.0.1 www.directsearchzone.com
127.0.0.1 easysearch4you.com
127.0.0.1 www.easysearch4you.com
127.0.0.1 enterthesearch.com
127.0.0.1 www.enterthesearch.com
127.0.0.1 esearch2005.com
127.0.0.1 www.esearch2005.com
127.0.0.1 eza1netsearch.com
127.0.0.1 www.eza1netsearch.com
127.0.0.1 ezwebsearching.com
127.0.0.1 www.ezwebsearching.com
127.0.0.1 globalefinder.com
127.0.0.1 www.globalefinder.com
127.0.0.1 go2realsearch.com
127.0.0.1 www.go2realsearch.com
127.0.0.1 myseachexplorer.com
127.0.0.1 www.myseachexplorer.com
127.0.0.1 quicksearch360.com
127.0.0.1 www.quicksearch360.com
127.0.0.1 s1s1s1search.com
127.0.0.1 www.s1s1s1search.com
127.0.0.1 search101online.com
127.0.0.1 www.search101online.com
127.0.0.1 search123forme.com
127.0.0.1 www.search123forme.com
127.0.0.1 search345quest.com
127.0.0.1 www.search345quest.com
127.0.0.1 searchmiracle.com
127.0.0.1 www.searchmiracle.com
127.0.0.1 searchtheworld4you.com
127.0.0.1 www.searchtheworld4you.com
127.0.0.1 searchwebzone.com
127.0.0.1 www.searchwebzone.com
127.0.0.1 seektheglobe.com
127.0.0.1 www.seektheglobe.com
127.0.0.1 sitesearchcentral.com
127.0.0.1 www.sitesearchcentral.com
127.0.0.1 the818search-co.com
127.0.0.1 www.the818search-co.com
127.0.0.1 type2find.com
127.0.0.1 www.type2find.com
127.0.0.1 xosearchox.com
127.0.0.1 www.xosearchox.com
127.0.0.1 yoursearchspace.com
127.0.0.1 www.yoursearchspace.com
127.0.0.1 httpwwwads.com
127.0.0.1 www.httpwwwads.com
127.0.0.1 adshttp.com
127.0.0.1 www.adshttp.com
127.0.0.1 adsonwww.com
127.0.0.1 www.adsonwww.com
127.0.0.1 dnaads.com
127.0.0.1 www.dnaads.com
127.0.0.1 marketengines.com
127.0.0.1 www.marketengines.com
127.0.0.1 ad-w-a-r-e.com
127.0.0.1 www.ad-w-a-r-e.com
127.0.0.1 a-d-w-a-r-e.com
127.0.0.1 www.a-d-w-a-r-e.com
127.0.0.1 securityindex.net
127.0.0.1 www.securityindex.net
127.0.0.1 sexpicsporn.com
127.0.0.1 www.sexpicsporn.com
127.0.0.1 free-spybot.com
127.0.0.1 www.free-spybot.com
127.0.0.1 cashengines.com
127.0.0.1 www.cashengines.com
127.0.0.1 microsoftantispyware.net
127.0.0.1 www.microsoftantispyware.net
127.0.0.1 mircosoftantispy.com
127.0.0.1 www.mircosoftantispy.com
127.0.0.1 msantispy.com
127.0.0.1 www.msantispy.com
127.0.0.1 netspyprotector.com
127.0.0.1 www.netspyprotector.com
127.0.0.1 avforce.com
127.0.0.1 www.avforce.com
127.0.0.1 savehits.com
127.0.0.1 www.savehits.com
127.0.0.1 saveli.com
127.0.0.1 www.saveli.com
127.0.0.1 metastop.com
127.0.0.1 www.metastop.com
127.0.0.1 perlink.biz
127.0.0.1 www.perlink.biz
127.0.0.1 highdialer.com
127.0.0.1 www.highdialer.com
127.0.0.1 online-more.com
127.0.0.1 www.online-more.com
127.0.0.1 www.syserrors.com
127.0.0.1 www.vcodec.com
127.0.0.1 toolbartraff.biz
127.0.0.1 www.toolbartraff.biz
127.0.0.1 pcadprotector.cc
127.0.0.1 www.pcadprotector.cc
127.0.0.1 airtleworld.com
127.0.0.1 www.airtleworld.com
127.0.0.1 domaincar.com
127.0.0.1 www.domaincar.com
127.0.0.1 worldray.com
127.0.0.1 www.worldray.com
127.0.0.1 www5.worldray.com
127.0.0.1 www6.worldray.com
127.0.0.1 www.spytrooper.com
127.0.0.1 spytrooper.com
127.0.0.1 dl.ad-ware.cc
127.0.0.1 ad-ware.cc
127.0.0.1 downloads.adaware.cc
127.0.0.1 adaware.cc
127.0.0.1 hitscount.net
127.0.0.1 count.hitscount.net
127.0.0.1 fined.biz
127.0.0.1 de.ag
127.0.0.1 games.de.ag
127.0.0.1 www.games.de.ag
127.0.0.1 little-download.net
127.0.0.1 www.little-download.net
127.0.0.1 little-help.com
127.0.0.1 www.little-help.com
127.0.0.1 www.spyaxe.net
127.0.0.1 www.spyaxe.com
127.0.0.1 www.spyaxe.biz
127.0.0.1 www.malwarewipe.com
127.0.0.1 dl.malwarewipe.com
127.0.0.1 www.malwarewipeupdate.com
127.0.0.1 unionseek.com
127.0.0.1 www.unionseek.com
127.0.0.1 sirh0t.blackhats.tc
127.0.0.1 blackhats.tc
127.0.0.1 www.blackhats.tc
127.0.0.1 ritztours.com
127.0.0.1 www.ritztours.com
127.0.0.1 flashflashmx.3322.org
127.0.0.1 3322.org
127.0.0.1 www.3322.org
127.0.0.1 jupitersatellites.biz
127.0.0.1 www.jupitersatellites.biz
127.0.0.1 yops.biz
127.0.0.1 www.yops.biz
127.0.0.1 goldengr.hypermart.net
127.0.0.1 web-nexus.net
127.0.0.1 safe-sales.biz
127.0.0.1 www.safe-sales.biz
127.0.0.1 jerrynews.com
127.0.0.1 www.jerrynews.com
127.0.0.1 Teslaplus.com
127.0.0.1 www.Teslaplus.com
127.0.0.1 WorldAntiSpy.com
127.0.0.1 www.WorldAntiSpy.com
127.0.0.1 www.securitycaution.com
127.0.0.1 securitycaution.com
127.0.0.1 adservs.com
127.0.0.1 csx.adservs.com
127.0.0.1 www.csx.adservs.com
127.0.0.1 toolbarbest.biz
127.0.0.1 www.toolbarbest.biz
127.0.0.1 game4all.biz
127.0.0.1 www.game4all.biz
127.0.0.1 game4all.biz/adv/018
127.0.0.1 www.game4all.biz/adv/018
127.0.0.1 wm.kannylizaciya.info
127.0.0.1 www.wm.kannylizaciya.info
127.0.0.1 wm.buhartes.info
127.0.0.1 www.wm.buhartes.info
127.0.0.1 login.fric.cn
127.0.0.1 www.login.fric.cn
127.0.0.1 xsremover.com
127.0.0.1 www.xsremover.com
127.0.0.1 spydeface.com
127.0.0.1 www.spydeface.com
127.0.0.1 alfacleaner.com
127.0.0.1 www.alfacleaner.com
127.0.0.1 innovagest2000.com
127.0.0.1 www.innovagest2000.com
127.0.0.1 www.thespyguard.com
127.0.0.1 thespyguard.com
127.0.0.1 www.adwarepunisher.com
127.0.0.1 adwarepunisher.com
127.0.0.1 www.spyiblock.com
127.0.0.1 spyiblock.com
127.0.0.1 www.uvu-channel.com
127.0.0.1 uvu-channel.com
127.0.0.1 www.hachimitsu-lemon.com
127.0.0.1 hachimitsu-lemon.com
127.0.0.1 SEARCHTOFIND.NET
127.0.0.1 www.SEARCHTOFIND.NET
127.0.0.1 www.pestrap.com
127.0.0.1 pestrap.com
127.0.0.1 uptodatesecurity.com
127.0.0.1 www.uptodatesecurity.com
127.0.0.1 thinstall.abetterinternet.com
127.0.0.1 www.3abetterinternet.com
127.0.0.1 download.abetterinternet.com
127.0.0.1 www.abetterinternet.com
127.0.0.1 qmex.psyche-evolution.com
127.0.0.1 www.qmex.psyche-evolution.com
127.0.0.1 core.psyche-evolution.com
127.0.0.1 www.core.psyche-evolution.com
127.0.0.1 1stantivirus.com
127.0.0.1 www.1stantivirus.com
127.0.0.1 scanandrepair.com
127.0.0.1 www.scanandrepair.com
127.0.0.1 uydsiygeds.com
127.0.0.1 www.uydsiygeds.com
127.0.0.1 pesttrap.com
127.0.0.1 www.pesttrap.com
127.0.0.1 adwarebazooka.com
127.0.0.1 get.adwarebazooka.com
127.0.0.1 www.adwarebazooka.com
127.0.0.1 kliksoftware.com
127.0.0.1 www.kliksoftware.com
127.0.0.1 hitvirus.com
127.0.0.1 get.hitvirus.com
127.0.0.1 www.hitvirus.com
127.0.0.1 promo.dollarrevenue.com
127.0.0.1 www.promo.dollarrevenue.com
127.0.0.1 maxifile.com
127.0.0.1 www.maxifile.com
127.0.0.1 targetsaver.com
127.0.0.1 www.targetsaver.com
127.0.0.1 dl.targetsaver.com
127.0.0.1 www.dl.targetsaver.com
127.0.0.1 nonameforthisdomain.com
127.0.0.1 www.nonameforthisdomain.com
127.0.0.1 hypoteches.com
127.0.0.1 www.hypoteches.com
127.0.0.1 www.earthllnk.net
127.0.0.1 earthllnk.net
127.0.0.1 hostance.net
127.0.0.1 www.hostance.net
127.0.0.1 my-dedik-one.com
127.0.0.1 www.my-dedik-one.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 6sek.com
127.0.0.1 www.6sek.com
127.0.0.1 cashdeluxe.net
127.0.0.1 www.cashdeluxe.net
127.0.0.1 stats.cashdeluxe.net
127.0.0.1 www.stats.cashdeluxe.net
127.0.0.1 www.2006ooo.com
127.0.0.1 www.spyware-stop.com
127.0.0.1 spyware-stop.com
127.0.0.1 www.SpyShield.org
127.0.0.1 SpyShield.org
127.0.0.1 utils.winfixer.com
127.0.0.1 www.utils.winfixer.com
127.0.0.1 toolbarbucks.biz
127.0.0.1 www.toolbarbucks.biz
127.0.0.1 derklaif.biz
127.0.0.1 www.derklaif.biz
127.0.0.1 www.v-codec.com
127.0.0.1 v-codec.com
127.0.0.1 www.emediacodec.com
127.0.0.1 emediacodec.com
127.0.0.1 www.popentertain.com
127.0.0.1 popentertain.com
127.0.0.1 softwareprofit.com
127.0.0.1 www.softwareprofit.com
127.0.0.1 de.winantivirus.com
127.0.0.1 download.winantivirus.com
127.0.0.1 winantivirus.com
127.0.0.1 www.winantivirus.com
127.0.0.1 offers.bullseye-network.com
127.0.0.1 www.offers.bullseye-network.com
127.0.0.1 bullseye-network.com
127.0.0.1 www.bullseye-network.com
127.0.0.1 sponsor2.ucmore.com
127.0.0.1 www.sponsor2.ucmore.com
127.0.0.1 apps.deskwizz
127.0.0.1 www.apps.deskwizz
127.0.0.1 hostthesky.com
127.0.0.1 www.hostthesky.com
127.0.0.1 dbdecicated.com
127.0.0.1 www.dbdecicated.com
127.0.0.1 readagreement.net
127.0.0.1 www.readagreement.net
127.0.0.1 gl.secdep.info
127.0.0.1 www.gl.secdep.info
127.0.0.1 spyfalcon.com
127.0.0.1 www.spyfalcon.com
127.0.0.1 spyfalconupdate.com
127.0.0.1 www.spyfalconupdate.com
127.0.0.1 spy-shield.com
127.0.0.1 www.spy-shield.com
127.0.0.1 winnanny.com
127.0.0.1 www.winnanny.com
127.0.0.1 winsoftware.com
127.0.0.1 www.winsoftware.com
127.0.0.1 winfirewall.com
127.0.0.1 www.winfirewall.com
127.0.0.1 winantispyware.com
127.0.0.1 www.winantispyware.com
127.0.0.1 udefender.com
127.0.0.1 www.udefender.com
127.0.0.1 bravesentry.com
127.0.0.1 www.bravesentry.com
127.0.0.1 content.dollarrevenue.com
127.0.0.1 www.content.dollarrevenue.com
127.0.0.1 toolbar.azebar.com
127.0.0.1 www.toolbar.azebar.com
127.0.0.1 traffsale1.biz
127.0.0.1 www.traffsale1.biz
127.0.0.1 spywaredisinfector.com
127.0.0.1 www.spywaredisinfector.com
127.0.0.1 SpyCut.com
127.0.0.1 www.SpyCut.com
127.0.0.1 almanah.biz
127.0.0.1 www.almanah.biz
127.0.0.1 antispydns.biz
127.0.0.1 www.antispydns.biz
127.0.0.1 spyaxeupdate.com
127.0.0.1 www.spyaxeupdate.com
127.0.0.1 malwarewipesupport.com
127.0.0.1 www.malwarewipesupport.com
127.0.0.1 remedyantispy.com
127.0.0.1 www.remedyantispy.com
127.0.0.1 systemstable.com
127.0.0.1 www.systemstable.com
127.0.0.1 whoisprivacyprotect.com
127.0.0.1 www.whoisprivacyprotect.com
127.0.0.1 prime.webhancer.com
127.0.0.1 www.prime.webhancer.com
127.0.0.1 webhancer.com
127.0.0.1 www.webhancer.com
127.0.0.1 dr.webhancer.com
127.0.0.1 www.dr.webhancer.com
127.0.0.1 dr2.webhancer.com
127.0.0.1 www.dr2.webhancer.com
127.0.0.1 www.onli-ne.com
127.0.0.1 spycontra.com
127.0.0.1 www.spycontra.com
127.0.0.1 anti-virus-pro.com
127.0.0.1 www.anti-virus-pro.com
127.0.0.1 check.jupitersatellites.biz
127.0.0.1 www.check.jupitersatellites.biz
127.0.0.1 necessaryupdates.com
127.0.0.1 www.necessaryupdates.com
127.0.0.1 bestworldgirls-for-u.net
127.0.0.1 www.bestworldgirls-for-u.net
127.0.0.1 stejax.pl
127.0.0.1 www.stejax.pl
127.0.0.1 kitehosting.com
127.0.0.1 www.kitehosting.com
127.0.0.1 ware2006.com
127.0.0.1 www.ware2006.com
127.0.0.1 filestore.com
127.0.0.1 www.filestore.com
127.0.0.1 systemupdates.net
127.0.0.1 www.systemupdates.net
127.0.0.1 logs.vapochille.com
127.0.0.1 www.logs.vapochille.com
127.0.0.1 goldenfreehost.com
127.0.0.1 www.goldenfreehost.com
127.0.0.1 todaywarnings.com
127.0.0.1 www.todaywarnings.com
127.0.0.1 spywarequake.com
127.0.0.1 spywarequake.info
127.0.0.1 www.spywarequake.info
127.0.0.1 www.spywarequake.com
127.0.0.1 download2.spywarequake.com
127.0.0.1 download3.spywarequake.com
127.0.0.1 download4.spywarequake.com
127.0.0.1 download5.spywarequake.com
127.0.0.1 download7.spywarequake.com
127.0.0.1 download8.spywarequake.com
127.0.0.1 download9.spywarequake.com
127.0.0.1 download10.spywarequake.com
127.0.0.1 download11.spywarequake.com
127.0.0.1 download12.spywarequake.com
127.0.0.1 download13.spywarequake.com
127.0.0.1 download15.spywarequake.com
127.0.0.1 updates.spywarequake.com
127.0.0.1 urgentsystemupdate.com
127.0.0.1 www.urgentsystemupdate.com
127.0.0.1 dl2.spywarestrike.com
127.0.0.1 dl3.spywarestrike.com
127.0.0.1 dl4.spywarestrike.com
127.0.0.1 dl5.spywarestrike.com
127.0.0.1 dl6.spywarestrike.com
127.0.0.1 dl7.spywarestrike.com
127.0.0.1 dl8.spywarestrike.com
127.0.0.1 nospywaresoft.com
127.0.0.1 spywarestrike.com
127.0.0.1 www.nospywaresoft.com
127.0.0.1 www.spywarestrike.com
127.0.0.1 spyaxesupport.com
127.0.0.1 www.spyaxesupport.com
127.0.0.1 download3.spyaxe.com
127.0.0.1 download4.spyaxe.com
127.0.0.1 download5.spyaxe.com
127.0.0.1 download6.spyaxe.com
127.0.0.1 dl2.spyfalcon.com
127.0.0.1 dl3.spyfalcon.com
127.0.0.1 dl4.spyfalcon.com
127.0.0.1 dl5.spyfalcon.com
127.0.0.1 dl9.spyfalcon.com
127.0.0.1 dl10.spyfalcon.com
127.0.0.1 dl16.spyfalcon.com
127.0.0.1 www.sgrunt.biz
127.0.0.1 traffbest.biz
127.0.0.1 www.traffbest.biz
127.0.0.1 securityfeature.com
127.0.0.1 www.securityfeature.com
127.0.0.1 pimasoft.com
127.0.0.1 www.pimasoft.com
127.0.0.1 blackhawksoftware.com
127.0.0.1 www.blackhawksoftware.com
127.0.0.1 spy-sniper.com
127.0.0.1 www.spy-sniper.com
127.0.0.1 safetydefender.com
127.0.0.1 www.safetydefender.com
127.0.0.1 securitywarnings.net
127.0.0.1 www.securitywarnings.net
127.0.0.1 urgentsystemupdate.biz
127.0.0.1 www.urgentsystemupdate.biz
127.0.0.1 antispylab.com
127.0.0.1 www.antispylab.com
127.0.0.1 spywaresheriff.com
127.0.0.1 www.spywaresheriff.com
127.0.0.1 allmegabucks.com
127.0.0.1 www.allmegabucks.com
127.0.0.1 rizalof.com
127.0.0.1 www.rizalof.com
127.0.0.1 rc.rizalof.com
127.0.0.1 media-codec.com
127.0.0.1 www.media-codec.com
127.0.0.1 SpywareScraper.com
127.0.0.1 www.SpywareScraper.com
127.0.0.1 crystalysmedia.com
127.0.0.1 www.crystalysmedia.com
127.0.0.1 180solutions.com
127.0.0.1 cts.180solutions.com
127.0.0.1 bis.180solutions.com
127.0.0.1 downloads.180solutions.com
127.0.0.1 uploads.180solutions.com
127.0.0.1 installs.180solutions.com
127.0.0.1 config.180solutions.com
127.0.0.1 ping.180solutions.com
127.0.0.1 tv.180solutions.com
127.0.0.1 nowhere.180solutions.com
127.0.0.1 www.180solutions.com
127.0.0.1 180searchassistant.com
127.0.0.1 www.180searchassistant.com
127.0.0.1 theguardservices.com
127.0.0.1 www.theguardservices.com
127.0.0.1 securitybulletin.net
127.0.0.1 www.securitybulletin.net
127.0.0.1 www.supernet.speedserv.com
127.0.0.1 spyonthis.net
127.0.0.1 download.spyonthis.net
127.0.0.1 www.spyonthis.net
127.0.0.1 hijack-this.net
127.0.0.1 www.hijack-this.net
127.0.0.1 errorsafe.com
127.0.0.1 de.errorsafe.com
127.0.0.1 download.errorsafe.com
127.0.0.1 www.errorsafe.com
127.0.0.1 amaena.com
127.0.0.1 trial.updates.winsoftware.com
127.0.0.1 instlog.winfixer.com
127.0.0.1 winfixer2006.com
127.0.0.1 www.winfixer2006.com
127.0.0.1 webtopsecurity.com
127.0.0.1 www.webtopsecurity.com
127.0.0.1 traff5all.biz
127.0.0.1 www.traff5all.biz
127.0.0.1 1-extreme.biz
127.0.0.1 www.1-extreme.biz
127.0.0.1 download.bravesentry.com
127.0.0.1 www.download.bravesentry.com
127.0.0.1 evko.biz
127.0.0.1 www.evko.biz
127.0.0.1 lavasoftupdate.com
127.0.0.1 www.lavasoftupdate.com
127.0.0.1 download.secureyournet.biz
127.0.0.1 www.download.secureyournet.biz
127.0.0.1 secureyournet.biz
127.0.0.1 www.secureyournet.biz
127.0.0.1 windupdates.com
127.0.0.1 asdbiz.biz
127.0.0.1 www.asdbiz.biz
127.0.0.1 spywarelabs.com
127.0.0.1 www.spywarelabs.com
127.0.0.1 traffweb1.biz
127.0.0.1 www.traffweb1.biz
127.0.0.1 newtoolbar.biz
127.0.0.1 www.newtoolbar.biz
127.0.0.1 buytraff.biz
127.0.0.1 www.buytraff.biz
127.0.0.1 safetyuptodate.com
127.0.0.1 www.safetyuptodate.com
127.0.0.1 crazywinnings.com
127.0.0.1 frame.crazywinnings.com
127.0.0.1 www.crazywinnings.com
127.0.0.1 topconverting.com
127.0.0.1 www.topconverting.com
127.0.0.1 casalemedia.com
127.0.0.1 b.casalemedia.com
127.0.0.1 www.casalemedia.com
127.0.0.1 addictivetechnologies.com
127.0.0.1 www.addictivetechnologies.com
127.0.0.1 addictivetechnologies.net
127.0.0.1 www.addictivetechnologies.net
127.0.0.1 admin2cash.biz
127.0.0.1 www.admin2cash.biz
127.0.0.1 advcash.biz
127.0.0.1 www.advcash.biz
127.0.0.1 all4internet.com
127.0.0.1 www.all4internet.com
127.0.0.1 bettersearch.biz
127.0.0.1 www.bettersearch.biz
127.0.0.1 c4tdownload.com
127.0.0.1 www.c4tdownload.com
127.0.0.1 clickspring.net
127.0.0.1 www.clickspring.net
127.0.0.1 contentmatch.net
127.0.0.1 www.contentmatch.net
127.0.0.1 dialer-shop.com
127.0.0.1 www.dialer-shop.com
127.0.0.1 dialoff.com
127.0.0.1 www.dialoff.com
127.0.0.1 energy-factor.com
127.0.0.1 www.energy-factor.com
127.0.0.1 hardcorefantasyland.com
127.0.0.1 www.hardcorefantasyland.com
127.0.0.1 hardfootballbabes.com
127.0.0.1 www.hardfootballbabes.com
127.0.0.1 linkautomatici.com
127.0.0.1 www.linkautomatici.com
127.0.0.1 master69.biz
127.0.0.1 www.master69.biz
127.0.0.1 master70.biz
127.0.0.1 www.master70.biz
127.0.0.1 master71.biz
127.0.0.1 www.master71.biz
127.0.0.1 mcdial.biz
127.0.0.1 www.mcdial.biz
127.0.0.1 mt-download.com
127.0.0.1 www.mt-download.com
127.0.0.1 my-teensex.com
127.0.0.1 overpro.com
127.0.0.1 private-dialer.biz
127.0.0.1 private-iframe.biz
127.0.0.1 redfunny.com
127.0.0.1 scoobidoo.com
127.0.0.1 skoobidoo.com
127.0.0.1 sexvideopro.com
127.0.0.1 storage-tasp.com
127.0.0.1 xbeta69.com
127.0.0.1 securityuptodate.net
127.0.0.1 www.securityuptodate.net
127.0.0.1 troonety.biz
127.0.0.1 www.troonety.biz
127.0.0.1 zurrusco.com
127.0.0.1 www.zurrusco.com
127.0.0.1 breenten.biz
127.0.0.1 www.breenten.biz
127.0.0.1 votreenton.biz
127.0.0.1 www.votreenton.biz
127.0.0.1 ozonung.biz
127.0.0.1 www.ozonung.biz
127.0.0.1 digikeygen.com
127.0.0.1 www.digikeygen.com
127.0.0.1 5starvideos.com
127.0.0.1 www.5starvideos.com
127.0.0.1 moviereality.com
127.0.0.1 www.moviereality.com
127.0.0.1 perfectedsecurity.com
127.0.0.1 www.perfectedsecurity.com
127.0.0.1 securityprecaution.net
127.0.0.1 www.securityprecaution.net
127.0.0.1 securityupdatesite.com
127.0.0.1 www.securityupdatesite.com
127.0.0.1 dns-look-up.com
127.0.0.1 www.dns-look-up.com
127.0.0.1 search200.com
127.0.0.1 www.search200.com
127.0.0.1 404dns.com
127.0.0.1 www.404dns.com
127.0.0.1 mcboo.com
127.0.0.1 dr.mcboo.com
127.0.0.1 www.mcboo.com
127.0.0.1 appealcircuit.com
127.0.0.1 www.appealcircuit.com
127.0.0.1 balotierra.com
127.0.0.1 www.balotierra.com
127.0.0.1 oldflock.com
127.0.0.1 www.oldflock.com
127.0.0.1 pornmagpass.com
127.0.0.1 www.pornmagpass.com
127.0.0.1 dailypornmag.com
127.0.0.1 www.dailypornmag.com
127.0.0.1 babespornmag.com
127.0.0.1 www.babespornmag.com
127.0.0.1 teenspornmag.com
127.0.0.1 www.teenspornmag.com
127.0.0.1 maturespornmag.com
127.0.0.1 www.maturespornmag.com
127.0.0.1 hardcorepornmag.com
127.0.0.1 www.hardcorepornmag.com
127.0.0.1 gayspornmag.com
127.0.0.1 www.gayspornmag.com
127.0.0.1 topsecuritysite.net
127.0.0.1 www.topsecuritysite.net
127.0.0.1 bestsafetyguide.net
127.0.0.1 www.bestsafetyguide.net
127.0.0.1 searchweb2.com
127.0.0.1 www.searchweb2.com
127.0.0.1 www.lop.com
127.0.0.1 vidscodec.com
127.0.0.1 www.vidscodec.com
127.0.0.1 newvidscodec.net
127.0.0.1 www.newvidscodec.net
127.0.0.1 media-codec.net
127.0.0.1 www.media-codec.net
127.0.0.1 mediacodec.net
127.0.0.1 www.mediacodec.net
127.0.0.1 imediacodec.com
127.0.0.1 www.imediacodec.com
127.0.0.1 emcodec.com
127.0.0.1 www.emcodec.com
127.0.0.1 vicodec.com
127.0.0.1 www.vicodec.com
127.0.0.1 xpasswordmanager.com
127.0.0.1 www.xpasswordmanager.com
127.0.0.1 cracks4all.com
127.0.0.1 www.cracks4all.com
127.0.0.1 media-motor.net
127.0.0.1 mmm.media-motor.net
127.0.0.1 bins.media-motor.net
127.0.0.1 bins2.media-motor.net
127.0.0.1 logs.media-motor.net
127.0.0.1 mmohsix.com
127.0.0.1 www.mmohsix.com
127.0.0.1 pops.mmohsix.com
127.0.0.1 megalocast.net
127.0.0.1 js.megalocast.net
127.0.0.1 www.megalocast.net
127.0.0.1 dl.web-nexus.net
127.0.0.1 movies-etc.com
127.0.0.1 cdn.movies-etc.com
127.0.0.1 cdn2.movies-etc.com
127.0.0.1 internet-optimizer.com
127.0.0.1 www.internet-optimizer.com
127.0.0.1 888.com
127.0.0.1 www.888.com
127.0.0.1 images.888.com
127.0.0.1 surfsidekick.com
127.0.0.1 www.surfsidekick.com
127.0.0.1 sdl.surfsidekick.com
127.0.0.1 kmpads.com
127.0.0.1 www.kmpads.com
127.0.0.1 ads.kmpads.com
127.0.0.1 zipcodec.com
127.0.0.1 www.zipcodec.com
127.0.0.1 ibankis.org
127.0.0.1 www.ibankis.org
127.0.0.1 adwarefinder.com
127.0.0.1 www.adwarefinder.com
127.0.0.1 nbcsearch.com
127.0.0.1 www.nbcsearch.com
127.0.0.1 TBCODE.COM
127.0.0.1 www.TBCODE.COM
127.0.0.1 1987324.com
127.0.0.1 www.1987324.com
127.0.0.1 www.archiviosex.net
127.0.0.1 sysnetsecurity.com
127.0.0.1 www.sysnetsecurity.com
127.0.0.1 sysnetsecurity.net
127.0.0.1 www.sysnetsecurity.net
127.0.0.1 error404site.com
127.0.0.1 www.error404site.com
127.0.0.1 error404site.net
127.0.0.1 www.error404site.net
127.0.0.1 wm.vother.info
127.0.0.1 www.wm.vother.info
127.0.0.1 vother.info
127.0.0.1 www.vother.info
127.0.0.1 wm.komforochka.info
127.0.0.1 www.wm.komforochka.info
127.0.0.1 komforochka.info
127.0.0.1 www.komforochka.info
127.0.0.1 hervam.com
127.0.0.1 www.hervam.com
127.0.0.1 www.nunah.info
127.0.0.1 nunah.info
127.0.0.1 www.searchmeup.com
127.0.0.1 www.searchcolours.com
127.0.0.1 searchcolours.com
127.0.0.1 brodbfm.net
127.0.0.1 www.brodbfm.net
127.0.0.1 easybestdeals.com
127.0.0.1 www.easybestdeals.com
127.0.0.1 spywareno.com
127.0.0.1 www.spywareno.com
127.0.0.1 spyheal.com
127.0.0.1 www.spyheal.com
127.0.0.1 www.streamxs.ws
127.0.0.1 streamxs.ws
127.0.0.1 asta-killer.com
127.0.0.1 newmediaidea.com
127.0.0.1 www.newmediaidea.com
127.0.0.1 syssecuritysite.net
127.0.0.1 www.syssecuritysite.net
127.0.0.1 aulde.net
127.0.0.1 www.aulde.net
127.0.0.1 searchdrive.info
127.0.0.1 wwwsearchdrive.info
127.0.0.1 download.bardownload.com
127.0.0.1 www.download.bardownload.com
127.0.0.1 bardownload.com
127.0.0.1 www.bardownload.com
127.0.0.1 intcodec.com
127.0.0.1 www.intcodec.com
127.0.0.1 newupdates.lzio.com
127.0.0.1 uptofind.com
127.0.0.1 www.uptofind.com
127.0.0.1 homelandnetwork.COM
127.0.0.1 www.homelandnetwork.COM
127.0.0.1 getmirar.com
127.0.0.1 mirarsearch.com
127.0.0.1 net-nucleus.com
127.0.0.1 zenotecnico.com
127.0.0.1 www.zenotecnico.com
127.0.0.1 zenotecnico2.com
127.0.0.1 www.zenotecnico2.com
127.0.0.1 surfaccuracy.com
127.0.0.1 www.surfaccuracy.com
127.0.0.1 cache.surfaccuracy.com
127.0.0.1 www.cache.surfaccuracy.com
127.0.0.1 www.the.007guard.com
127.0.0.1 the.007guard.com
127.0.0.1 install.007guard.com
127.0.0.1 www.install.007guard.com
127.0.0.1 007guard.com
127.0.0.1 www.007guard.com
127.0.0.1 feeds.2search.com
127.0.0.1 www.feeds.2search.com
127.0.0.1 2search.com
127.0.0.1 www.2search.com
127.0.0.1 feeds2.2search.org
127.0.0.1 www.feeds2.2search.org
127.0.0.1 2search.org
127.0.0.1 www.2search.org
127.0.0.1 zangocash.com
127.0.0.1 www.zangocash.com
127.0.0.1 static.zangocash.com
127.0.0.1 www.static.zangocash.com
127.0.0.1 public.zangocash.com
127.0.0.1 www.public.zangocash.com
127.0.0.1 code.ignphrases.com
127.0.0.1 www.ignphrases.com
127.0.0.1 ignphrases.com
127.0.0.1 www.igetnet.com
127.0.0.1 igetnet.com
127.0.0.1 www.topbrowsing.com
127.0.0.1 topbrowsing.com
127.0.0.1 www.download.jupitersatellites.biz
127.0.0.1 download.jupitersatellites.biz
127.0.0.1 voghp.com
127.0.0.1 www.voghp.com
127.0.0.1 zhmbscwdgk.biz
127.0.0.1 www.zhmbscwdgk.biz
127.0.0.1 zabywjwzlr.biz.biz
127.0.0.1 www.zabywjwzlr.biz.biz
127.0.0.1 i-femdom.com
127.0.0.1 www.i-femdom.com
127.0.0.1 buy-find.info
127.0.0.1 www.buy-find.info
127.0.0.1 searche.info
127.0.0.1 www.searche.info
127.0.0.1 easy-pharmacy.info
127.0.0.1 www.easy-pharmacy.info
127.0.0.1 good-casino.net
127.0.0.1 www.good-casino.net
127.0.0.1 busysearch.net
127.0.0.1 www.busysearch.net
127.0.0.1 1001-search.info
127.0.0.1 www.1001-search.info
127.0.0.1 24-7pharmacy.info
127.0.0.1 www.24-7pharmacy.info
127.0.0.1 dating-galaxy.info
127.0.0.1 www.dating-galaxy.info
127.0.0.1 spyware-best.com
127.0.0.1 www.spyware-best.com
127.0.0.1 easyspyware.com
127.0.0.1 www.easyspyware.com
127.0.0.1 best-spyware.info
127.0.0.1 www.best-spyware.info
127.0.0.1 anyofus.com
127.0.0.1 www.anyofus.com
127.0.0.1 specialoems.com
127.0.0.1 www.specialoems.com
127.0.0.1 svideocodec.com
127.0.0.1 www.svideocodec.com
127.0.0.1 getpornmag.com
127.0.0.1 www.getpornmag.com
127.0.0.1 animepornmag.com
127.0.0.1 www.animepornmag.com
127.0.0.1 syssecuritypage.com
127.0.0.1 www.syssecuritypage.com
127.0.0.1 safetyhomepage.com
127.0.0.1 www.safetyhomepage.com
127.0.0.1 CashUnlim.com
127.0.0.1 www.CashUnlim.com
127.0.0.1 www.legal-at-spybot.info
127.0.0.1 legal-at-spybot.info
127.0.0.1 bdsmpornmag.com
127.0.0.1 www.bdsmpornmag.com
127.0.0.1 ebonypornmag.com
127.0.0.1 www.ebonypornmag.com
127.0.0.1 nylonporn.com
127.0.0.1 www.nylonporn.com
127.0.0.1 uniformpornmag.com
127.0.0.1 www.uniformpornmag.com
127.0.0.1 maturepornmag.com
127.0.0.1 www.maturepornmag.com
127.0.0.1 pornstarspornmag.com
127.0.0.1 www.pornstarspornmag.com
127.0.0.1 shemalepornmag.com
127.0.0.1 www.shemalepornmag.com
127.0.0.1 lesbianpornmag.com
127.0.0.1 www.lesbianpornmag.com
127.0.0.1 dailytoolbar.com
127.0.0.1 www.dailytoolbar.com
127.0.0.1 maturetoolbar.com
127.0.0.1 www.maturetoolbar.com
127.0.0.1 asiantoolbar.com
127.0.0.1 www.asiantoolbar.com
127.0.0.1 www.ac66.cn
127.0.0.1 ac66.cn
127.0.0.1 mir.100888290cs.com
127.0.0.1 woool.100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 100888290cs.com
127.0.0.1 ert0003.e76.163ns.com
127.0.0.1 www.163ns.com
127.0.0.1 163ns.com
127.0.0.1 www.chenshijituan.com
127.0.0.1 chenshijituan.com
127.0.0.1 www.u7u.cn
127.0.0.1 u7u.cn
127.0.0.1 www.wg581.com
127.0.0.1 wg581.com
127.0.0.1 jhzjyj.bigwww.com
127.0.0.1 www.bigwww.com
127.0.0.1 bigwww.com
127.0.0.1 www.132.com
127.0.0.1 132.com
127.0.0.1 www.163.com
127.0.0.1 163.com
127.0.0.1 www.tzxsj.com
127.0.0.1 tzxsj.com
127.0.0.1 www.q36.cn
127.0.0.1 q36.cn
127.0.0.1 down.136136.net
127.0.0.1 www.136136.net
127.0.0.1 136136.net
127.0.0.1 s59.cnzz.com
127.0.0.1 www.cnzz.com
127.0.0.1 cnzz.com
127.0.0.1 ulink13.dudu.com
127.0.0.1 ulink7.dudu.com
127.0.0.1 www.dudu.com
127.0.0.1 dudu.com
127.0.0.1 dcdl.dmcast.com
127.0.0.1 www.dmcast.com
127.0.0.1 dcww.dmcast.com
127.0.0.1 ibm.dmcast.com
127.0.0.1 dmcast.com
127.0.0.1 worldtostart.com
127.0.0.1 www.worldtostart.com
127.0.0.1 deskbar.worldtostart.com
127.0.0.1 www.deskbar.worldtostart.com
127.0.0.1 www.dotcomtoolbar.com
127.0.0.1 dotcomtoolbar.com
127.0.0.1 search.findthewebsiteyouneed.com
127.0.0.1 www.search.findthewebsiteyouneed.com
127.0.0.1 easywww.info
127.0.0.1 www.easywww.info
127.0.0.1 f1organizer.com
127.0.0.1 www.f1organizer.com
127.0.0.1 gamehouse.com
127.0.0.1 www.gamehouse.com
127.0.0.1 regnow.com
127.0.0.1 www.regnow.com
127.0.0.1 totalvelocity.com
127.0.0.1 www.totalvelocity.com
127.0.0.1 webnetinfo.net
127.0.0.1 www.webnetinfo.net
127.0.0.1 srfgate.com
127.0.0.1 www.srfgate.com
127.0.0.1 infport.com
127.0.0.1 www.infport.com
127.0.0.1 instafinder.com
127.0.0.1 www.instafinder.com
127.0.0.1 megasearchbar.com
127.0.0.1 www.megasearchbar.com
127.0.0.1 ccecaedbebfcaf.com
127.0.0.1 www.ccecaedbebfcaf.com
127.0.0.1 pcodec.com
127.0.0.1 www.pcodec.com
127.0.0.1 lightspeedsearch.net
127.0.0.1 www.lightspeedsearch.net
127.0.0.1 websopot.com
127.0.0.1 www.websopot.com
127.0.0.1 superbgirlz.com
127.0.0.1 asdeykuddq.com
127.0.0.1 asidseiupc.com
127.0.0.1 fjsynebcod.com
127.0.0.1 qiudheadsd.com
127.0.0.1 www.superbgirlz.com
127.0.0.1 www.asdeykuddq.com
127.0.0.1 www.asidseiupc.com
127.0.0.1 www.fjsynebcod.com
127.0.0.1 www.qiudheadsd.com
127.0.0.1 www.trackhits.cc
127.0.0.1 resultplacement.com
127.0.0.1 www.resultplacement.com
127.0.0.1 smartprotect.info
127.0.0.1 www.smartprotect.info
127.0.0.1 best-voyeur.info
127.0.0.1 www.best-voyeur.info
127.0.0.1 Search-Daily.com
127.0.0.1 www.Search-Daily.com
127.0.0.1 yahabags.com
127.0.0.1 www.yahabags.com
127.0.0.1 www.freecat.biz
127.0.0.1 freecat.biz
127.0.0.1 www.beebappyy.biz
127.0.0.1 beebappyy.biz
127.0.0.1 costrike.com
127.0.0.1 www.costrike.com
127.0.0.1 tgpie.com
127.0.0.1 www.tgpie.com
127.0.0.1 searcher.tgpie.com
127.0.0.1 www.searcher.tgpie.com
127.0.0.1 seproger.com
127.0.0.1 www.seproger.com
127.0.0.1 anysn.seproger.com
127.0.0.1 www.anysn.seproger.com
127.0.0.1 thereall.realfet.com
127.0.0.1 www.thereall.realfet.com
127.0.0.1 greatbahamas.com
127.0.0.1 www.greatbahamas.com
127.0.0.1 fn777.greatbahamas.com
127.0.0.1 www.fn777.greatbahamas.com
127.0.0.1 sef516.greatbahamas.com
127.0.0.1 www.sef516.greatbahamas.com
127.0.0.1 rich777.greatbahamas.com
127.0.0.1 www.rich777.greatbahamas.com
127.0.0.1 rng650.greatbahamas.com
127.0.0.1 www.rng650.greatbahamas.com
127.0.0.1 realm.superbahamas.com
127.0.0.1 www.realm.superbahamas.com
127.0.0.1 enhance.com
127.0.0.1 www.enhance.com
127.0.0.1 c.enhance.com
127.0.0.1 www.c.enhance.com
127.0.0.1 adservices1.enhance.com
127.0.0.1 www.adservices1.enhance.com
127.0.0.1 traffic-ssl1.com
127.0.0.1 www.traffic-ssl1.com
127.0.0.1 traffic-acc.com
127.0.0.1 www.traffic-acc.com
127.0.0.1 filetretporn.com
127.0.0.1 www.filetretporn.com
127.0.0.1 uncj.filetretporn.com
127.0.0.1 www.uncj.filetretporn.com
127.0.0.1 rzvonporn.com
127.0.0.1 www.rzvonporn.com
127.0.0.1 theaimonline.com
127.0.0.1 www.theaimonline.com
127.0.0.1 bm.theaimonline.com
127.0.0.1 www.bm.theaimonline.com
127.0.0.1 kqzyfj.com
127.0.0.1 www.kqzyfj.com
127.0.0.1 apmebf.com
127.0.0.1 www.apmebf.com
127.0.0.1 emjcd.com
127.0.0.1 www.emjcd.com
127.0.0.1 upspiral.com
127.0.0.1 www.upspiral.com
127.0.0.1 lovezest.com
127.0.0.1 www.lovezest.com
127.0.0.1 maxysize.com
127.0.0.1 www.maxysize.com
127.0.0.1 camouflageclothingonline.net
127.0.0.1 www.camouflageclothingonline.net
127.0.0.1 getfound.com
127.0.0.1 www.getfound.com
127.0.0.1 search.getfound.com
127.0.0.1 www.search.getfound.com
127.0.0.1 searchfeed.com
127.0.0.1 www.searchfeed.com
127.0.0.1 netster.com
127.0.0.1 www.netster.com
127.0.0.1 ireit.com
127.0.0.1 www.ireit.com
127.0.0.1 content.ireit.com
127.0.0.1 www.content.ireit.com
127.0.0.1 toseeka.com
127.0.0.1 www.toseeka.com
127.0.0.1 zcodec.com
127.0.0.1 www.zcodec.com
127.0.0.1 strcodec.com
127.0.0.1 www.strcodec.com
127.0.0.1 uglyphotos.net
127.0.0.1 www.uglyphotos.net
127.0.0.1 imcodec.com
127.0.0.1 www.imcodec.com
127.0.0.1 softcodec.com
127.0.0.1 www.softcodec.com
127.0.0.1 dvdcodec.net
127.0.0.1 www.dvdcodec.net
127.0.0.1 playercodec.net
127.0.0.1 www.playercodec.net
127.0.0.1 lightcodec.com
127.0.0.1 www.lightcodec.com
127.0.0.1 winmediacodec.com
127.0.0.1 www.winmediacodec.com
127.0.0.1 videoscodec.com
127.0.0.1 www.videoscodec.com
127.0.0.1 mmcodec.com
127.0.0.1 www.mmcodec.com
127.0.0.1 xpassgenerator.com
127.0.0.1 www.xpassgenerator.com
127.0.0.1 mypornmagpass.com
127.0.0.1 www.mypornmagpass.com
127.0.0.1 searchbee.net
127.0.0.1 www.searchbee.net
127.0.0.1 warez.com
127.0.0.1 www.warez.com
127.0.0.1 srv.warez.com
127.0.0.1 pro

pldaul eztet:

Ezek elteritenek mas oldalakra.[rejtet trojak>reklamok,stb]
na mostan megtalalod eztet:
C:\Windows\System32\driver\etc\host>kinyitod a notepadal es a tartalmat ted ide.

Itt a FixIEDef log-ja.
Megmondanád mit látsz belőle?
Illetve ez az FixIED mit is csinál?

********************************************************************************
* *
* FixIEDef Log *
* Version 1.5.1.5999 *
* *
********************************************************************************

Created at 16:36:52 on Sunday, July 20, 2008

Time Zone :

Logged On User : Ákos

Operating System : Microsoft Windows XP Professional Szervizcsomag 3
OS Version : 5.1.2600
System Langauge : Hungarian
Keyboard Layout : Hungarian
Processor : X86 AMD Athlon(tm) 64 Processor 3500+

System Drive : C:\
Windows Directory : C:\WINDOWS
System Directory : C:\WINDOWS\system32

Total Physical Memory : 1048048 KB
Free Physical Memory : 515676 KB
Total Virtual Memory : 2097024 KB
Free Virtual Memory : 2014236 KB

Boot State : Normal boot

--------------------------------------------------------------------------------

!!! Files that have been deleted !!!

C:\WINDOWS\WLXPGSS.SCR
C:\WINDOWS\system32\_nvidia_xxx_.log
C:\WINDOWS\system32\drv1.dll
C:\WINDOWS\system32\drv2.dll
C:\WINDOWS\system32\drvc.dll
C:\WINDOWS\system32\nmp.log

--------------------------------------------------------------------------------

!!! Directories that have been removed !!!

No malicious directories to be removed

--------------------------------------------------------------------------------

!!! Registry entries that have been removed !!!

No malicious Registry entries found

================================================================================

All Done

ShadowPuterDude

Safe Surfing!!!

KryL
akor renben van en is ezt akartam javasolni de sajnos nemtudom mi van evel a Forumal ugy lelasult hogy ez nem normalis.
Es nincsen mit koszonod:
Ok,Eloszor hasznald ezt a programoT:

csakoska
[

Kedves stell a gondjaim mególdodtak.

Boot.init alap helyzetere visszasikerült raknom és minden remekül ment a virusirtásban és agép rendberakását követően gyorsabb és job let köszi szépen ha gondom lesz hozzád fordulok. thx nagyon

Rendben Stell várok!
Egyébként minden elismerésem, nagyon ott vagy!!!

na a tune up mér vagy egy hónapja nincs is a gépemen

hm,ez igen csunya boot.ini.
Szed le a geprol a Tuneup-utilitest.Aztan majd visza rakod.Restart es ujra mutasd meh a Boot.ini.
Enek igy kene kineznie:

Az enyem igy van.
Most igen lasan megy ez a Terminal forum server hat lekapcsolom magam,mert ez idegesit engem.

hm,ez igen csunya boot.ini.
Szed le a geprol a Tuneup-utilitest.Aztan majd visza rakod.Restart es ujra mutasd meh a Boot.ini.
Enek igy kene kineznie:

Az enyem igy van.
Most igen lasan megy ez a Terminal forum server hat lekapcsolom magam,mert ez idegesit engem.

[boot loader]

timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional - magyar" /noexecute=alwaysoff /nopae /fastdetect /bootlogo /TUTag=ATH61P /Kernel=TUKernel.exe
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional - magyar (TuneUp Backup)" /noexecute=alwaysoff /nopae /fastdetect /bootlogo /noguiboot /TUTag=ATH61P-BAK

KryL
Start>jobklik sajat gep>tulajdonsag>pontositani>it van 3-gomb bealitas>klikaz alsora>itt lesz egy gomb>javitani...a joboldalon a kozepe korol>klik>it van a boot.ini>a tartalmat masold ide:



csakoska
Segitek varj egy csopet.

Kedves Stell!
Ha tudsz kérlek segíts!
MSN-em küldözget ilyen tartalmú üzenetet:
http://hotdealzz.com

Annyit már megtettem, hogy HJack-et futtattam, csatolom a log-ot.
Segítséged előre is köszi!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:41:56, on 2008.07.20.
Platform: Windows XP Szervizcsomag 3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Hard Disk Sentinel\HDSentinel.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\LClock\lclock.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Stardock\ThinkDesk\Multiplicity\MULTISRV32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\ImgBurn\ImgBurn.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Documents and Settings\Ákos\Asztal\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.iwiw.hu/pages/user/login.jsp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hivatkozások
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live bejelentkezési segítség - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [MAT] C:\WINDOWS\apppatch\ptlsinst.exe /1
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Hard Disk Sentinel] C:\Program Files\Hard Disk Sentinel\HDSentinel.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LClock] C:\Program Files\LClock\lclock.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SRS Audio Sandbox] "C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe" /hideme
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'HELYI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'HÁLÓZATI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - .DEFAULT User Startup: CamTrack.lnk = C:\Program Files\DigitalPeers\CamTrack\camtrack.exe (User 'Default user')
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O8 - Extra context menu item: E&xportálás a Microsoft Excel programba - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Küldés blogba - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Küldés blogba a Windows Live Writer programmal - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Küldés a OneNote programba - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Kül&dés a OneNote programba - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/200 ... plugin.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 2433160421
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs:
O20 - Winlogon Notify: Multi - C:\Program Files\Stardock\ThinkDesk\Multiplicity\MultiWin32.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Stardock Multiplicity (Multiplicity) - Unknown owner - C:\Program Files\Stardock\ThinkDesk\Multiplicity\MULTISRV32.EXE
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Pml Driver HPZ12 - Unknown owner - C:\WINDOWS\system32\HPZipm12.exe (file missing)
O23 - Service: Acronis Try And Decide Service (TryAndDecideService) - Unknown owner - C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe

--
End of file - 8430 bytes

tom sok mindent kérek mnár
amikor elinditom a windowst két partició közül választhatok
1. windows xp professional magyar
2.windows professional magyar <tuneup becup>

a másodikat sehogy se tudom eltüntetni és mind a kettőn ugyan az jön be

Ok,ez rendben van,it arol van szo hogy mijen a geped,tehat CPU,RAM,
es menyi program,szolgaltats fut automatikusan a Windowsal.Mert ez igen lasitsa a Windows betolteset.
Csinaljal DEFRAGOT=Torezedes javitas,vagy igy valahogy van magyarull Tehat Tisztara Pucolni a CCleaneral.Torezedes javitas,es meglatod,mert ha keves a CPU>mondjuk valami 500Mhz RAM=128>akor job nemis lesz.

csak ezt a txt találtam az asztalon miután elinditottam és lement

tartalma .
Stealth MBR rootkit detector 0.2.4 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
kernel: MBR read successfully
user & kernel MBR OK

hol keressem ?

Ok.
Mivel hogy elvanak szaporodva a Boot virusok.eloszor futasd le ezta programot es a logjat ted ide:
http://www2.gmer.net/mbr/mbr.exe
Tedaz asztalra>futasd .

na lassan megcsinálom ok koszi szépen ha gond van irok neked :d

lenne még valami amikor elinditom a gépem lassan tölti be a dolgokat pl tűzfal,hálozatikártya és igy több idő be is telik csatlakoznom a netre

ok
Eztet fixeld le a hiJackal:
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
Start>futatas masold be combofix /u ok..a combofix letelepitodik.
Pucold ki a CCleaneral es ha kel akor visza rakhatod a symantec programot:
Es ha minden renben akor keszen vagyunk.

ComboFix 08-07-18.5 - Rendszergazda 2008-07-19 21:53:39.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1038.18.205 [GMT 2:00]
Running from: C:\Documents and Settings\Rendszergazda\Asztal\ComboFix.exe
Command switches used :: C:\Documents and Settings\Rendszergazda\Asztal\CFScript.txt
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE ::
C:\WINDOWS\java\Packages\LNN33DNB.ZIP
C:\WINDOWS\system32\drivers\ntndis.Vsys
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\Symantec
C:\Program Files\Symantec\Norton PartitionMagic 8.0\About.pqg
C:\Program Files\Symantec\Norton PartitionMagic 8.0\af.cmd
C:\Program Files\Symantec\Norton PartitionMagic 8.0\BTIniNt.exe
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOCS\PM8.PDF
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOCS\PM8Flash.exe
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOCS\PM8Quick.PDF
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\BTIni.exe
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\FSIMAGE.EXE
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\FSIMAGE.OVL
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\FSIMAGE.RTC
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\MOUSE.COM
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\MOUSE.INI
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\partinfo.exe
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\PMHELP.DAT
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\PQBOOT.EXE
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\PQBOOTX.EXE
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\PQDATA.002
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\PQMAGIC.EXE
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\PQMAGIC.OVL
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\PQMAGIC.PIF
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\PQMAGIC.PQG
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\PQPB.RTC
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\PTEDIT.EXE
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\SNUTIL.EXE
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\WRPROG.EXE
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DOS\zABOUT.PQG
C:\Program Files\Symantec\Norton PartitionMagic 8.0\DrvMap.exe
C:\Program Files\Symantec\Norton PartitionMagic 8.0\INETWH32.dll
C:\Program Files\Symantec\Norton PartitionMagic 8.0\License.txt
C:\Program Files\Symantec\Norton PartitionMagic 8.0\MASTER.CNT
C:\Program Files\Symantec\Norton PartitionMagic 8.0\PartIn.exe
C:\Program Files\Symantec\Norton PartitionMagic 8.0\PartIn9x.exe
C:\Program Files\Symantec\Norton PartitionMagic 8.0\PartInNT.exe
C:\Program Files\Symantec\Norton PartitionMagic 8.0\pe07.dll
C:\Program Files\Symantec\Norton PartitionMagic 8.0\pe09.dll
C:\Program Files\Symantec\Norton PartitionMagic 8.0\pe0A.dll
C:\Program Files\Symantec\Norton PartitionMagic 8.0\pe0C.dll
C:\Program Files\Symantec\Norton PartitionMagic 8.0\pe10.dll
C:\Program Files\Symantec\Norton PartitionMagic 8.0\PeAbout.pqg
C:\Program Files\Symantec\Norton PartitionMagic 8.0\Pesp.pqg
C:\Program Files\Symantec\Norton PartitionMagic 8.0\pm.cnt
C:\Program Files\Symantec\Norton PartitionMagic 8.0\PM.HLP
C:\Program Files\Symantec\Norton PartitionMagic 8.0\PMagic.exe
C:\Program Files\Symantec\Norton PartitionMagic 8.0\PMagic9x.exe
C:\Program Files\Symantec\Norton PartitionMagic 8.0\PMAGICB.PIF
C:\Program Files\Symantec\Norton PartitionMagic 8.0\PMagicNT.exe
C:\Program Files\Symantec\Norton PartitionMagic 8.0\PMREGIST.URL
C:\Program Files\Symantec\Norton PartitionMagic 8.0\Pqboot32.exe
C:\Program Files\Symantec\Norton PartitionMagic 8.0\pqbw.exe
C:\Program Files\Symantec\Norton PartitionMagic 8.0\pqbw.rtc
C:\Program Files\Symantec\Norton PartitionMagic 8.0\pqbw07.dll
C:\Program Files\Symantec\Norton PartitionMagic 8.0\pqbw09.dll
C:\Program Files\Symantec\Norton PartitionMagic 8.0\pqbw0A.dll
C:\Program Files\Symantec\Norton PartitionMagic 8.0\pqbw0C.dll
C:\Program Files\Symantec\Norton PartitionMagic 8.0\pqbw10.dll
C:\Program Files\Symantec\Norton PartitionMagic 8.0\pqbw11.dll
C:\Program Files\Symantec\Norton PartitionMagic 8.0\PQBWAbout.pqg
C:\Program Files\Symantec\Norton PartitionMagic 8.0\PQLAUNCH.EXE
C:\Program Files\Symantec\Norton PartitionMagic 8.0\PQPB.RTC
C:\Program Files\Symantec\Norton PartitionMagic 8.0\PqPe.exe
C:\Program Files\Symantec\Norton PartitionMagic 8.0\pqpe.rtc
C:\Program Files\Symantec\Norton PartitionMagic 8.0\pqpe9x.exe
C:\Program Files\Symantec\Norton PartitionMagic 8.0\pqpeNT.exe
C:\Program Files\Symantec\Norton PartitionMagic 8.0\PQVXD.vxd
C:\Program Files\Symantec\Norton PartitionMagic 8.0\PTEDIT32.EXE
C:\Program Files\Symantec\Norton PartitionMagic 8.0\Readme.TXT
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\data1.cab
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\data1.hdr
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\data2.cab
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\AUTOEXE2.BAT
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\AUTOEXEC.BAT
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\CHKDSK.EXE
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\COMMAND.COM
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\CONFIG.SYS
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\CONFIG9x.SYS
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\DISPLAY.SYS
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\EGA.CPI
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\EMM386.EXE
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\FDISK.COM
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\FLOPPY.EXE
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\FLOPPY9x.EXE
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\FLOPPYME.EXE
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\HIMEM.SYS
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\IBMBIO.COM
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\IBMDOS.COM
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\KEYB.COM
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\LABEL.PIF
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\MODE.COM
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\MYDOS.SYS
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\NWCDEX.EXE
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\PMHELP.DAT
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\PTEDIT32.EXE
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\DOSYSTEM\WEBPAGE.URL
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\engine32.cab
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\layout.bin
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\pqFeatur.dll
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\PQPB.RTC
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\pqpe.rtc
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\Setup.bmp
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\setup.exe
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\setup.ibt
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\setup.ini
C:\Program Files\Symantec\Norton PartitionMagic 8.0\RESCUEME\setup.inx
C:\Program Files\Symantec\Norton PartitionMagic 8.0\ROBOEX32.DLL
C:\Program Files\Symantec\Norton PartitionMagic 8.0\Splash.pqg
C:\Program Files\Symantec\Norton PartitionMagic 8.0\UNICODE.FNT
C:\Program Files\Symantec\Norton PartitionMagic 8.0\WEBPAGE.URL
C:\WINDOWS\java\Packages\LNN33DNB.ZIP
C:\WINDOWS\system32\drivers\ntndis.Vsys

.
((((((((((((((((((((((((( Files Created from 2008-06-19 to 2008-07-19 )))))))))))))))))))))))))))))))
.

2008-07-19 14:34 . 2008-07-19 14:34 <DIR> d-------- C:\Program Files\Trend Micro
2008-07-18 21:06 . 2008-07-18 21:06 <DIR> d-------- C:\Program Files\SatelliteTVforPC
2008-07-18 21:05 . 2008-07-18 21:06 <DIR> d-------- C:\WINDOWS\uninstall\Satellite TV for PC Elite
2008-07-18 21:05 . 2008-07-18 21:05 <DIR> d-------- C:\WINDOWS\uninstall
2008-07-18 21:02 . 2008-07-18 21:02 <DIR> d-------- C:\Documents and Settings\Rendszergazda\Application Data\JLC's Software
2008-07-18 12:49 . 2008-07-18 13:07 261 --a------ C:\WINDOWS\WPE PRO.INI
2008-07-18 08:39 . 2008-07-18 08:39 5,120 --a------ C:\WINDOWS\system32\BReWErS.dll
2008-07-18 08:33 . 2008-07-18 08:33 <DIR> d-------- C:\Program Files\LucasArts
2008-07-18 07:45 . 2008-07-18 07:45 <DIR> d-------- C:\Program Files\Common Files\Panda Software
2008-07-18 07:45 . 2008-07-18 07:42 178,872 --a------ C:\WINDOWS\system32\drivers\PavProc.sys
2008-07-18 07:45 . 2008-07-18 07:42 38,968 --a------ C:\WINDOWS\system32\drivers\ShlDrv51.sys
2008-07-18 07:31 . 2008-07-18 07:31 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\sentinel
2008-07-18 07:30 . 2008-07-18 07:46 <DIR> d-------- C:\WINDOWS\system32\PAV
2008-07-18 07:30 . 2008-07-18 07:30 <DIR> d-------- C:\Program Files\Panda Security
2008-07-18 07:30 . 2007-09-28 13:24 83,896 --a------ C:\WINDOWS\system32\drivers\pavdrv51.sys
2008-07-18 07:30 . 2007-03-15 18:38 54,832 --a------ C:\WINDOWS\system32\pavcpl.cpl
2008-07-18 07:30 . 2007-02-15 20:02 50,736 --a------ C:\WINDOWS\system32\avldr.dll
2008-07-18 07:30 . 2008-07-18 07:30 248 --a------ C:\WINDOWS\system32\PavCPL.dat
2008-07-17 15:21 . 2008-07-17 15:23 930,901 --a------ C:\WINDOWS\unins000.dat
2008-07-17 15:21 . 2008-07-17 15:19 694,135 --a------ C:\WINDOWS\unins000.exe
2008-07-17 15:20 . 2008-07-17 15:21 <DIR> d-------- C:\Program Files\MaNGOS
2008-07-17 13:32 . 2008-07-17 13:32 <DIR> d-------- C:\Program Files\CheatLand
2008-07-14 08:46 . 2008-07-17 20:33 <DIR> d-------- C:\Program Files\EA Sports
2008-07-13 06:50 . 2008-07-13 06:50 952 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys
2008-07-03 10:49 . 2008-07-03 10:49 <DIR> d-------- C:\Documents and Settings\Rendszergazda\Application Data\Corel
2008-07-03 10:48 . 2008-07-03 10:48 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\InstallShield
2008-07-03 10:46 . 2008-07-03 10:46 <DIR> d-------- C:\Program Files\Corel
2008-07-03 10:46 . 2008-07-03 10:46 <DIR> d-------- C:\Program Files\Common Files\Corel
2008-06-27 07:51 . 2008-06-27 07:51 16,760 --a------ C:\Documents and Settings\Rendszergazda\Application Data\GDIPFONTCACHEV1.DAT
2008-06-26 22:10 . 2008-06-26 22:10 42,320 --a------ C:\WINDOWS\system32\xfcodec.dll
2008-06-25 12:26 . 2008-06-25 12:27 <DIR> d-------- C:\WINDOWS\ShellNew

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-19 20:05 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\utorrent
2008-07-19 18:50 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-07-19 18:50 107,832 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
2008-07-19 13:27 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\Free Download Manager
2008-07-19 13:21 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\Xfire
2008-07-18 06:45 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-07-13 17:46 --------- d-----w C:\Program Files\Xfire
2008-07-12 05:00 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\LimeWire
2008-07-03 08:48 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-06-12 15:03 --------- d-----w C:\Program Files\Common Files\Blizzard Entertainment
2008-06-12 13:07 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-06-12 12:15 --------- d-----w C:\Program Files\Common Files\Download Manager
2008-06-11 16:07 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\PacificPoker
2008-06-11 13:08 --------- d-----w C:\Program Files\Free Download Manager
2008-06-11 13:08 --------- d-----w C:\Documents and Settings\All Users\Application Data\FreeDownloadManager.ORG
2008-06-11 10:16 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\Uniblue
2008-06-11 10:11 --------- d-----w C:\Program Files\CCleaner
2008-06-10 12:30 --------- d-----w C:\Program Files\FlashGet
2008-06-07 14:45 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe
2008-06-05 14:41 --------- d-----w C:\Program Files\Ventrilo Mix
2008-06-02 15:50 --------- d-----w C:\Program Files\DivX
2008-06-02 15:38 --------- d-----w C:\Program Files\DAEMON Tools Litee
2008-06-02 15:37 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\DAEMON Tools
2008-06-02 15:32 716,272 ----a-w C:\WINDOWS\system32\drivers\sptd.sys
2008-05-27 14:47 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\Hamachi
2008-05-27 12:34 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\Petroglyph
2008-05-27 12:17 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2008-05-27 11:43 --------- d-----w C:\Program Files\SystemRequirementsLab
2008-05-27 11:43 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\SystemRequirementsLab
2008-05-25 18:42 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\Command & Conquer 3 Tiberium Wars
2008-05-25 17:38 17,480 ----a-w C:\WINDOWS\system32\drivers\hamachi.sys
2008-05-25 17:26 127,488 ----a-w C:\WINDOWS\system32\nzMedia.dll
2008-05-24 18:33 --------- d-----w C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2008-05-23 16:24 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-05-21 14:27 --------- d-----w C:\Program Files\GameSpy Arcade
2008-05-21 11:06 163,644 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
2008-05-20 11:21 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-05-20 11:19 --------- d-----w C:\Program Files\Windows Live
2008-05-20 11:19 --------- d-----w C:\Program Files\LimeWire
2008-05-19 15:22 2,320,512 ----a-w C:\WINDOWS\system32\TUKernel.exe
2008-05-19 15:11 --------- d-----w C:\Program Files\Common Files\AVSMedia
2008-05-15 16:19 73,216 ----a-w C:\WINDOWS\ST6UNST.EXE
2008-05-15 16:19 286,720 ------w C:\WINDOWS\Setup1.exe
2008-05-13 01:51 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2008-05-13 01:51 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
2007-12-30 19:12 4 ----a-w C:\Program Files\DAEMON Tools Lite
.

------- Sigcheck -------

2006-11-14 14:00 359808 de891ad282e856acfd40990094a63b6f C:\WINDOWS\system32\drivers\tcpip.sys
.
((((((((((((((((((((((((((((( snapshot@2008-07-19_15.41.28.32 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-07-16 08:26:21 5,120 ----a-r C:\WINDOWS\Installer\{789289CA-F73A-4A16-A331-54D498CE069F}\Icon789289CA.exe
+ 2008-07-19 13:58:17 5,120 ----a-r C:\WINDOWS\Installer\{789289CA-F73A-4A16-A331-54D498CE069F}\Icon789289CA.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2006-11-14 14:00 15360]
"uTorrent"="C:\Program Files\uTorrent\uTorrent.exe" [2008-05-14 14:17 219952]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Litee\daemon.exe" [2008-01-17 18:51 486856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Active Captions"="C:\WINDOWS\activecaptions.exe" [2006-11-14 14:00 337408]
"AllSnap"="C:\WINDOWS\allsnap.exe" [2006-11-14 14:00 81920]
"MakeFolder"="C:\WINDOWS\makefolder.exe" [2006-11-14 14:00 69632]
"Smapp"="C:\Program Files\Analog Devices\SoundMAX\SMTray.exe" [2002-11-08 15:50 98304]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-06-28 21:05 344064]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2005-08-11 16:30 249856]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2005-08-11 16:30 81920]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-11-14 14:00 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 1 (0x1)
"ForceCopyAclwithFile"= 0 (0x0)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 1 (0x1)
"ForceCopyAclwithFile"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="C:\\WINDOWS\\system32\\logonui.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avldr]
2007-02-15 20:02 50736 C:\WINDOWS\system32\avldr.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.XFR1"= xfcodec.dll
"msacm.ac3filter"= ac3filter.acm

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Sunbelt Software\\Personal Firewall 4\\kpf4gui.exe"=
"C:\\Program Files\\Xfire\\xfire.exe"=
"C:\\Program Files\\Activision\\Call of Duty 2\\CoD2MP_s.exe"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"C:\\totalcmd\\TOTALCMD.EXE"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\GameSpy Arcade\\Aphex.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\WINDOWS\\system32\\dpnsvr.exe"=
"G:\\Program Files\\Hamachi\\hamachi.exe"=
"C:\\Program Files\\MaNGOS\\v6296\\diskw\\usr\\local\\mysql\\bin\\mysqld-nt.exe"=
"C:\\Program Files\\MaNGOS\\v6296\\diskw\\usr\\local\\Apache2\\bin\\Apache.exe"=

R1 fwdrv;Firewall Driver;C:\WINDOWS\system32\drivers\fwdrv.sys [2005-12-15 18:13]
R1 khips;Kerio HIPS Driver;C:\WINDOWS\system32\drivers\khips.sys [2005-12-15 18:01]
R1 ShldDrv;Panda File Shield Driver;C:\WINDOWS\system32\DRIVERS\ShlDrv51.sys [2008-07-18 07:42]
R2 PavProc;Panda Process Protection Driver;C:\WINDOWS\system32\DRIVERS\PavProc.sys [2008-07-18 07:42]
S2 {09BB444F-B2E2-4009-BAF2-7B727681223E};BuddyVM;g:\Program Files\VMLaunch\BuddyVM.sys []

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d7c7ca28-1f1f-11dd-baca-000c6e494af0}]
\Shell\AutoRun\command - F:\Launcher.exe
.
Contents of the 'Scheduled Tasks' folder
"2008-07-18 15:15:01 C:\WINDOWS\Tasks\1-Click Maintenance.job"
- C:\Program Files\TuneUp Utilities 2008\OneClick.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-19 22:05:09
Windows 5.1.2600 Szervizcsomag 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\PAVSRV51.EXE
C:\Program Files\Panda Security\Panda Antivirus 2008\AVENGINE.EXE
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\PsCtrlS.exe
C:\Program Files\Common Files\Panda Software\PavShld\PavPrSrv.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\PsImSvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\ApVxdWin.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\WebProxy.exe
C:\WINDOWS\system32\wbem\wmiadap.exe
.
**************************************************************************
.
Completion time: 2008-07-19 22:11:04 - machine was rebooted
ComboFix-quarantined-files.txt 2008-07-19 20:10:44
ComboFix2.txt 2008-07-19 13:42:54

Pre-Run: 4,216,299,520 bájt szabad
Post-Run: 4,183,379,968 b jt szabad

319


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:14:20, on 2008.07.19.
Platform: Windows XP Szervizcsomag 2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\pavsrv51.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\AVENGINE.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\activecaptions.exe
C:\WINDOWS\allsnap.exe
C:\WINDOWS\makefolder.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\DAEMON Tools Litee\daemon.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\PsCtrls.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\PsImSvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\ApvxdWin.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\WebProxy.exe
\?\C:\WINDOWS\system32\WBEM\WMIADAP.EXE
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startlap.hu/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hivatkozások
R3 - URLSearchHook: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O4 - HKLM\..\Run: [Active Captions] "C:\WINDOWS\activecaptions.exe"
O4 - HKLM\..\Run: [AllSnap] "C:\WINDOWS\allsnap.exe"
O4 - HKLM\..\Run: [MakeFolder] "C:\WINDOWS\makefolder.exe" /s
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Litee\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'HELYI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'HÁLÓZATI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Az összes letöltése Free Download Managerrel - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xportálás Microsoft Excel formátumba - res://C:\PROGRA~1\Microsoft Office\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Kijelölés letöltése Free Download Managerrel - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Letöltés a FlashGet-tel - C:\PROGRA~1\FlashGet\jc_link.htm
O8 - Extra context menu item: Letöltés Free Download Managerrel - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Minden letöltése a FlashGet-tel - C:\PROGRA~1\FlashGet\jc_all.htm
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: Video letöltése a Free Download Manager-rel - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 0490184296
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0BCBD1BD-10F0-4A43-93E0-3A76DB0DA659}: NameServer = 193.110.57.4 193.110.56.8
O17 - HKLM\System\CS1\Services\Tcpip\..\{0BCBD1BD-10F0-4A43-93E0-3A76DB0DA659}: NameServer = 193.110.57.4 193.110.56.8
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
O23 - Service: Panda Software Controller - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus 2008\PsCtrls.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus 2008\pavsrv51.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus 2008\PsImSvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 8278 bytes

Kinyitod a Notepadot>Start>futatas>beirod notepad
Es bekopirozod a piros textet

Mostan>a notepadon elso full>ballfelsosarokban>4-sor>lementenni mint....
A txt-hejet beteszed eztett>CFScript.txt<alatta bealitod >minden mapak<
legfelull>asztall i<klik gomb letenni.Es mostan megcsinalod eztett:

A combofix maga elindul es lehet hogy restartol es befejezi a scent.Amit majd ad ted ide Es az uj HijackThis logjat ted ide OK

Antivírus Verzió Utolsó frissítés Eredmény
AhnLab-V3 2008.7.17.0 2008.07.18 -
AntiVir 7.8.1.11 2008.07.19 -
Authentium 5.1.0.4 2008.07.19 -
Avast 4.8.1195.0 2008.07.19 -
AVG 8.0.0.130 2008.07.19 -
BitDefender 7.2 2008.07.19 -
CAT-QuickHeal 9.50 2008.07.18 -
ClamAV 0.93.1 2008.07.19 -
DrWeb 4.44.0.09170 2008.07.19 -
eSafe 7.0.17.0 2008.07.17 -
eTrust-Vet 31.6.5966 2008.07.18 -
Ewido 4.0 2008.07.19 -
F-Prot 4.4.4.56 2008.07.18 -
F-Secure 7.60.13501.0 2008.07.19 -
Fortinet 3.14.0.0 2008.07.19 -
GData 2.0.7306.1023 2008.07.19 -
Ikarus T3.1.1.34.0 2008.07.19 -
Kaspersky 7.0.0.125 2008.07.19 -
McAfee 5342 2008.07.18 -
Microsoft 1.3704 2008.07.19 -
NOD32v2 3281 2008.07.18 -
Norman 5.80.02 2008.07.18 -
Panda 9.0.0.4 2008.07.19 -
Prevx1 V2 2008.07.19 -
Rising 20.53.52.00 2008.07.19 -
Sophos 4.31.0 2008.07.19 -
Sunbelt 3.1.1536.1 2008.07.18 -
Symantec 10 2008.07.19 -
TheHacker 6.2.96.384 2008.07.19 -
TrendMicro 8.700.0.1004 2008.07.18 -
VBA32 3.12.8.1 2008.07.19 -
VirusBuster 4.5.11.0 2008.07.19 -
Webwasher-Gateway 6.6.2 2008.07.19 -
További információ
File size: 69632 bytes
MD5...: b44513be4b2164423515451cdde8eaf8
SHA1..: ac2f3ef3d1359e1a8b94a1ecf8d55c61d3071760
SHA256: 43bac96e6ef61b55de3e5250fa0af7cca901cae8f701b18ac1e8062118f00314
SHA512: 91804213a6fcfc55a6d89824615c1742ff7f5791312666128dc962ec3f31e717
da58553a2e3b2f0e17a6a2bff2e505913a4af258f83c468eee34d33ce051f053
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x4044e2
timedatestamp.....: 0x414e4153 (Mon Sep 20 02:32:51 2004)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x85fc 0x9000 6.21 bad70e1e44932adfab2a26ec280b5b07
.rdata 0xa000 0x3884 0x4000 4.05 502ed62a6ae8848c8bcb6680b05452e4
.data 0xe000 0x2db8 0x1000 1.79 69002ba6fe1d4dcf2675e9f89c52aab5
.rsrc 0x11000 0x1966 0x2000 3.00 071c423decdbf41245debf4c42ed68f8

( 6 imports )
> KERNEL32.dll: lstrcpyW, lstrcpynW, GetLocalTime, HeapAlloc, GetProcessHeap, CloseHandle, VirtualFreeEx, MultiByteToWideChar, ReadProcessMemory, VirtualAllocEx, OpenProcess, SetLastError, GetCurrentProcessId, lstrcmpiW, WaitForSingleObject, CreateRemoteThread, WriteProcessMemory, GetProcAddress, GetModuleHandleW, GetTickCount, CreateDirectoryW, LocalFree, OutputDebugStringW, FormatMessageW, GetLastError, CreateMutexW, SetProcessWorkingSetSize, GetCurrentProcess, LoadLibraryW, GetSystemDirectoryW, ExitProcess, GetVersionExW, ReleaseMutex, FreeLibrary, GetPrivateProfileStringW, WritePrivateProfileStringW, GetModuleFileNameW, LCMapStringA, GetOEMCP, GetACP, lstrcmpW, HeapSize, GetCPInfo, GetLocaleInfoA, GetSystemInfo, VirtualProtect, SetStdHandle, HeapReAlloc, VirtualAlloc, LoadLibraryA, GetStringTypeW, WideCharToMultiByte, GetStringTypeA, SetFilePointer, GetSystemTimeAsFileTime, GetCurrentThreadId, QueryPerformanceCounter, VirtualFree, HeapCreate, HeapDestroy, GetStartupInfoA, GetFileType, SetHandleCount, GetCommandLineW, GetCommandLineA, LCMapStringW, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, UnhandledExceptionFilter, GetModuleFileNameA, GetStdHandle, WriteFile, TerminateProcess, VirtualQuery, InterlockedExchange, GetVersionExA, GetStartupInfoW, GetModuleHandleA, lstrlenW, GetDateFormatW, GetTimeFormatW, lstrcatW, HeapFree, FindFirstFileW, FindNextFileW, RtlUnwind, FlushFileBuffers, FindClose
> USER32.dll: IsDlgButtonChecked, GetParent, MapVirtualKeyW, GetKeyNameTextW, GetWindowRect, GetDlgItemTextW, EndDialog, SetFocus, DestroyIcon, GetDlgItem, SetDlgItemTextW, DestroyWindow, GetCursorPos, GetTopWindow, SetActiveWindow, GetForegroundWindow, DialogBoxParamW, LoadMenuW, GetSubMenu, TrackPopupMenuEx, DestroyMenu, PostQuitMessage, MessageBoxW, GetDesktopWindow, DefWindowProcW, LoadStringW, FindWindowW, PostMessageW, LoadIconW, LoadCursorW, RegisterClassExW, CreateWindowExW, GetMessageW, TranslateMessage, DispatchMessageW, UnregisterHotKey, RegisterHotKey, SendInput, EnumChildWindows, GetClassNameW, GetWindowThreadProcessId, SendMessageW, SetForegroundWindow
> ADVAPI32.dll: RegCreateKeyExW, RegSetValueExW, RegDeleteValueW, RegOpenKeyExW, RegQueryValueExW, RegCloseKey
> SHELL32.dll: ShellAboutW, SHGetSpecialFolderPathW, ShellExecuteW, SHGetPathFromIDListW, Shell_NotifyIconW
> COMCTL32.dll: -
> SHLWAPI.dll: PathFindFileNameW

( 0 exports )

Antivírus Verzió Utolsó frissítés Eredmény
AhnLab-V3 2008.7.17.0 2008.07.18 Win32/IRCBot.worm.variant
AntiVir 7.8.1.11 2008.07.19 Worm/ForBot.31916.A
Authentium 5.1.0.4 2008.07.19 W32/Sdbot.SUN
Avast 4.8.1195.0 2008.07.19 Win32:SdBot-3458
AVG 8.0.0.130 2008.07.19 Agent.ONP
BitDefender 7.2 2008.07.19 Backdoor.Sdbot.AQP
CAT-QuickHeal 9.50 2008.07.18 Backdoor.SdBot.aqp
ClamAV 0.93.1 2008.07.19 Trojan.SdBot-5977
DrWeb 4.44.0.09170 2008.07.19 BackDoor.IRC.Evil
eSafe 7.0.17.0 2008.07.17 Win32.SdBot.aqp
eTrust-Vet 31.6.5966 2008.07.18 Win32/Rotisbot
Ewido 4.0 2008.07.19 Backdoor.SdBot.aqp
F-Prot 4.4.4.56 2008.07.18 W32/Sdbot.SUN
F-Secure 7.60.13501.0 2008.07.19 Backdoor.Win32.SdBot.aqp
Fortinet 3.14.0.0 2008.07.19 W32/SDBot.AQP!tr.bdr
GData 2.0.7306.1023 2008.07.19 Backdoor.Win32.SdBot.aqp
Ikarus T3.1.1.34.0 2008.07.19 Backdoor.Win32.SdBot.aqp
Kaspersky 7.0.0.125 2008.07.19 Backdoor.Win32.SdBot.aqp
McAfee 5342 2008.07.18 W32/Sdbot.worm
Microsoft 1.3704 2008.07.19 VirTool:WinNT/Rootkitdrv.AA
NOD32v2 3281 2008.07.18 Win32/IRCBot.SE
Norman 5.80.02 2008.07.18 W32/SDBot.ACEK
Panda 9.0.0.4 2008.07.19 W32/Sdbot.JEE.worm
Prevx1 V2 2008.07.19 Malicious Software
Rising 20.53.52.00 2008.07.19 Backdoor.SdBot.pog
Sophos 4.31.0 2008.07.19 Troj/RKProc-F
Sunbelt 3.1.1536.1 2008.07.18 -
Symantec 10 2008.07.19 Hacktool.Rootkit
TheHacker 6.2.96.384 2008.07.19 Backdoor/SdBot.aqp
TrendMicro 8.700.0.1004 2008.07.18 BKDR_SDBOT.RV
VBA32 3.12.8.1 2008.07.19 Backdoor.Win32.SdBot.aqp
VirusBuster 4.5.11.0 2008.07.19 Rootkit.Agent.M
Webwasher-Gateway 6.6.2 2008.07.19 Worm.ForBot.31916.A
További információ
File size: 4864 bytes
MD5...: 6b5fe575a6bf660767864a8a1b2b94ce
SHA1..: 5b2a95ea4efd7b4f46ebdc586451f05b1bb6800d
SHA256: 90028186b9f22058c0cbcdeaecc4933ab351f8d04de0dc1c51c921a7fe9b91ba
SHA512: 561eb9c0e76c54eb7e4fa64026c62ce78a34980aee465362047fe1a1dcdddf84
17542833361401dc7424afce0d7d4f7eb13fc87c34fc0dc64feedb5b46644ea8
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x10812
timedatestamp.....: 0x44271923 (Sun Mar 26 22:43:47 2006)
machinetype.......: 0x14c (I386)

( 6 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x300 0x6da 0x700 6.13 51dc5976abf1381cee206cbce15ee30a
.rdata 0xa00 0xd9 0x100 3.78 9f22492502f554ffd46ad479cd2452f3
.data 0xb00 0x70 0x80 1.37 ae315b05bdd37031f22b661446e3ca42
INIT 0xb80 0x20a 0x280 4.34 9a4631717bf99d6a67a6f0658f0adb79
.rsrc 0xe00 0x3c8 0x400 3.24 e272f087f84e7dde0052c0c921202953
.reloc 0x1200 0xd2 0x100 4.36 00b4aa2637de5aebf4fb717db4838a0e

( 2 imports )
> ntoskrnl.exe: wcsncmp, ZwClose, ObfDereferenceObject, ObReferenceObjectByHandle, ObOpenObjectByName, RtlInitUnicodeString, MmIsAddressValid, KeServiceDescriptorTable, IoDeleteSymbolicLink, NtBuildNumber, IoCreateSymbolicLink, IoCreateDevice, _except_handler3, MmUserProbeAddress, IofCompleteRequest, RtlCompareMemory
> HAL.dll: KfLowerIrql, KfRaiseIrql

( 0 exports )
Prevx info: http://info.prevx.com/aboutprogramtext. ... 00A9ACFEC0

A(z) BReWErS.dll_ állomány feltöltve: 2008.07.19 20:26:10 (CET)
Pillanatnyi állapot: Feltöltés ... sorbanállás várakozás vizsgálat befejeződött NEM TALÁLHATÓ LEÁLLT
Eredmény: 1/33 (3.04%)
Szerver információk betöltése...
A feltöltött állomány a ___.-ik a várakozási listán.
Becsült induló időpont ___ és ___ között.
Ne zárja be az ablakot, amíg az állomány feltöltése be nem fejeződik!
A feltöltött állomány vizsgálata közben a víruskereső motor leállt. Néhány másodperc múlva újból megkíséreljük a vizsgálatot.
Ha a várakozási idő esetleg hosszabb lenne öt percnél, kérjük töltse fel a vizsgálandó állományt újra!
A feltöltött állomány vizsgálata folyamatban,
az eredmény hamarosan megjelenik.
Formázott Formázott
Eredmény nyomtatása Eredmény nyomtatása
Az ön által küldött állomány nem létezik, vagy a rendelkezésre álló időkeret lejárt.
A szolgáltatás jelenleg szünetel, az Ön által feltöltött állomány ellenőrzésre vár ( a . helyen), egy későbbi időpontban.

Várjon a weboldal válaszára (automatikusan frissülni fog) vagy gépelje be az e-mail címét a lenti űrlapba és kattintson a "Jóváhagy" gombra, ekkor a rendszer a vizsgálat végeztével elküldi majd az eredményt.
E-mail:

Antivírus Verzió Utolsó frissítés Eredmény
AhnLab-V3 2008.7.17.0 2008.07.18 -
AntiVir 7.8.1.11 2008.07.19 -
Authentium 5.1.0.4 2008.07.19 -
Avast 4.8.1195.0 2008.07.19 -
AVG 8.0.0.130 2008.07.19 -
BitDefender 7.2 2008.07.19 -
CAT-QuickHeal 9.50 2008.07.18 -
ClamAV 0.93.1 2008.07.19 -
DrWeb 4.44.0.09170 2008.07.19 -
eSafe 7.0.17.0 2008.07.17 -
eTrust-Vet 31.6.5966 2008.07.18 -
Ewido 4.0 2008.07.19 -
F-Prot 4.4.4.56 2008.07.18 -
F-Secure 7.60.13501.0 2008.07.19 -
Fortinet 3.14.0.0 2008.07.19 -
GData 2.0.7306.1023 2008.07.19 -
Ikarus T3.1.1.34.0 2008.07.19 -
Kaspersky 7.0.0.125 2008.07.19 -
McAfee 5342 2008.07.18 -
Microsoft 1.3704 2008.07.19 -
NOD32v2 3281 2008.07.18 -
Norman 5.80.02 2008.07.18 -
Panda 9.0.0.4 2008.07.19 Suspicious file
Prevx1 V2 2008.07.19 -
Rising 20.53.52.00 2008.07.19 -
Sophos 4.31.0 2008.07.19 -
Sunbelt 3.1.1536.1 2008.07.18 -
Symantec 10 2008.07.19 -
TheHacker 6.2.96.384 2008.07.19 -
TrendMicro 8.700.0.1004 2008.07.18 -
VBA32 3.12.8.1 2008.07.19 -
VirusBuster 4.5.11.0 2008.07.19 -
Webwasher-Gateway 6.6.2 2008.07.19 -
További információ
File size: 5120 bytes
MD5...: d8a6220a717bba626f0679eba629a90a
SHA1..: da41cad31ac123d2b7aa876deb32241fb4b4f69c
SHA256: c58bbe945a55843dfff02511f8b43a5c3a3b290c9b8e572f30d3d58f1e49260f
SHA512: 1f580bd3bf7268d5d2ad7a24f0262a9ca5b695bc5baa10e5510c86a862d801b0
571e8f1ccfe8cff3160908103e3f93a8055c3bf17fbf313149670318dfef82bf
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x39001000
timedatestamp.....: 0x4847e7aa (Thu Jun 05 13:18:34 2008)
machinetype.......: 0x14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x758 0x800 5.30 21c32e0b913d2181269861b551826c95
.bss 0x2000 0x18 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.rdata 0x3000 0x282 0x400 3.25 2555f60a671c8e09cddb1017f45a5a3a
.data 0x4000 0xb7 0x200 1.30 396b9175f87e9a94ff20f255bfa35c29
.reloc 0x5000 0x124 0x200 3.80 7bc80ecb78af676a6d88c0bea7d6b6ed

( 2 imports )
> user32.dll: TranslateMessage, SetTimer, KillTimer, GetWindowThreadProcessId, GetMessageA, GetAsyncKeyState, FindWindowA, DispatchMessageA
> kernel32.dll: CloseHandle, lstrcmpiA, WriteProcessMemory, ReadProcessMemory, OpenProcess, Module32Next, Module32First, CreateToolhelp32Snapshot, CreateThread, Beep

( 2 exports )
IUTS, MNBC

Importante FIGYELEM: VirusTotal a Hispasec Sistemas ingyenesen biztosított szolgáltatása. Semminemű garanciát nem vállalunk ennek a szolgáltatásnak az elérhetőségére és folyamatosságára. Bár a több, különféle víruskereső motornak köszönhetően a felismerési arány kiemelkedő, ezek az eredmények együttesen SEM GARANTÁLJÁK, hogy egy adott állomány valóban ártalmatlan. Pillanatnyilag nem létezik olyan technikai megoldás, amely 100 százalékos biztonsággal képes lenne kimutatni a vírusokat és más kártevőket..

Bocs de mindig valami kozbe jon ezert lasan megy a szorakozas
Elmegy a Virus totalra es leteszteled ezeket:
VIRUSTOTALu



Klik gomb>Prochazet>megtalalod az elsot a lemezen klik kuldes megvarod az eredmenyt es ide teszed>es kuldod a kovetkezot es igy tovab.

ComboFix 08-07-18.5 - Rendszergazda 2008-07-19 15:30:32.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1250.1.1038.18.294 [GMT 2:00]
Running from: C:\Documents and Settings\Rendszergazda\Asztal\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\msssc.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_ntndis


((((((((((((((((((((((((( Files Created from 2008-06-19 to 2008-07-19 )))))))))))))))))))))))))))))))
.

2008-07-19 14:34 . 2008-07-19 14:34 <DIR> d-------- C:\Program Files\Trend Micro
2008-07-18 21:06 . 2008-07-18 21:06 <DIR> d-------- C:\Program Files\SatelliteTVforPC
2008-07-18 21:05 . 2008-07-18 21:06 <DIR> d-------- C:\WINDOWS\uninstall\Satellite TV for PC Elite
2008-07-18 21:05 . 2008-07-18 21:05 <DIR> d-------- C:\WINDOWS\uninstall
2008-07-18 21:02 . 2008-07-18 21:02 <DIR> d-------- C:\Documents and Settings\Rendszergazda\Application Data\JLC's Software
2008-07-18 12:49 . 2008-07-18 13:07 261 --a------ C:\WINDOWS\WPE PRO.INI
2008-07-18 08:39 . 2008-07-18 08:39 5,120 --a------ C:\WINDOWS\system32\BReWErS.dll
2008-07-18 08:33 . 2008-07-18 08:33 <DIR> d-------- C:\Program Files\LucasArts
2008-07-18 07:45 . 2008-07-18 07:45 <DIR> d-------- C:\Program Files\Common Files\Panda Software
2008-07-18 07:45 . 2008-07-18 07:42 178,872 --a------ C:\WINDOWS\system32\drivers\PavProc.sys
2008-07-18 07:45 . 2008-07-18 07:42 38,968 --a------ C:\WINDOWS\system32\drivers\ShlDrv51.sys
2008-07-18 07:31 . 2008-07-18 07:31 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\sentinel
2008-07-18 07:30 . 2008-07-18 07:46 <DIR> d-------- C:\WINDOWS\system32\PAV
2008-07-18 07:30 . 2008-07-18 07:30 <DIR> d-------- C:\Program Files\Panda Security
2008-07-18 07:30 . 2007-09-28 13:24 83,896 --a------ C:\WINDOWS\system32\drivers\pavdrv51.sys
2008-07-18 07:30 . 2007-03-15 18:38 54,832 --a------ C:\WINDOWS\system32\pavcpl.cpl
2008-07-18 07:30 . 2007-02-15 20:02 50,736 --a------ C:\WINDOWS\system32\avldr.dll
2008-07-18 07:30 . 2008-07-18 07:30 248 --a------ C:\WINDOWS\system32\PavCPL.dat
2008-07-17 15:21 . 2008-07-17 15:23 930,901 --a------ C:\WINDOWS\unins000.dat
2008-07-17 15:21 . 2008-07-17 15:19 694,135 --a------ C:\WINDOWS\unins000.exe
2008-07-17 15:20 . 2008-07-17 15:21 <DIR> d-------- C:\Program Files\MaNGOS
2008-07-17 13:32 . 2008-07-17 13:32 <DIR> d-------- C:\Program Files\CheatLand
2008-07-17 10:59 . 2008-07-17 10:59 4,864 --a------ C:\WINDOWS\system32\drivers\ntndis.Vsys
2008-07-14 08:46 . 2008-07-17 20:33 <DIR> d-------- C:\Program Files\EA Sports
2008-07-13 06:50 . 2008-07-13 06:50 952 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys
2008-07-03 10:49 . 2008-07-03 10:49 <DIR> d-------- C:\Documents and Settings\Rendszergazda\Application Data\Corel
2008-07-03 10:48 . 2008-07-03 10:48 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\InstallShield
2008-07-03 10:46 . 2008-07-03 10:46 <DIR> d-------- C:\Program Files\Corel
2008-07-03 10:46 . 2008-07-03 10:46 <DIR> d-------- C:\Program Files\Common Files\Corel
2008-06-27 07:51 . 2008-06-27 07:51 16,760 --a------ C:\Documents and Settings\Rendszergazda\Application Data\GDIPFONTCACHEV1.DAT
2008-06-26 22:10 . 2008-06-26 22:10 42,320 --a------ C:\WINDOWS\system32\xfcodec.dll
2008-06-25 12:26 . 2008-06-25 12:27 <DIR> d-------- C:\WINDOWS\ShellNew

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-07-19 13:39 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\utorrent
2008-07-19 13:27 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\Free Download Manager
2008-07-19 13:21 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\Xfire
2008-07-18 17:35 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys
2008-07-18 17:35 107,832 ----a-w C:\WINDOWS\system32\PnkBstrB.exe
2008-07-18 06:45 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-07-13 17:46 --------- d-----w C:\Program Files\Xfire
2008-07-12 05:00 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\LimeWire
2008-07-03 08:48 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-06-12 15:03 --------- d-----w C:\Program Files\Common Files\Blizzard Entertainment
2008-06-12 13:07 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-06-12 12:15 --------- d-----w C:\Program Files\Common Files\Download Manager
2008-06-11 16:07 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\PacificPoker
2008-06-11 13:08 --------- d-----w C:\Program Files\Free Download Manager
2008-06-11 13:08 --------- d-----w C:\Documents and Settings\All Users\Application Data\FreeDownloadManager.ORG
2008-06-11 10:16 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\Uniblue
2008-06-11 10:11 --------- d-----w C:\Program Files\CCleaner
2008-06-10 12:30 --------- d-----w C:\Program Files\FlashGet
2008-06-07 14:45 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe
2008-06-05 14:41 --------- d-----w C:\Program Files\Ventrilo Mix
2008-06-02 15:50 --------- d-----w C:\Program Files\DivX
2008-06-02 15:38 --------- d-----w C:\Program Files\DAEMON Tools Litee
2008-06-02 15:37 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\DAEMON Tools
2008-06-02 15:32 716,272 ----a-w C:\WINDOWS\system32\drivers\sptd.sys
2008-05-27 14:47 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\Hamachi
2008-05-27 12:34 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\Petroglyph
2008-05-27 12:17 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2008-05-27 11:43 --------- d-----w C:\Program Files\SystemRequirementsLab
2008-05-27 11:43 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\SystemRequirementsLab
2008-05-25 18:42 --------- d-----w C:\Documents and Settings\Rendszergazda\Application Data\Command & Conquer 3 Tiberium Wars
2008-05-25 17:38 17,480 ----a-w C:\WINDOWS\system32\drivers\hamachi.sys
2008-05-25 17:26 127,488 ----a-w C:\WINDOWS\system32\nzMedia.dll
2008-05-24 18:33 --------- d-----w C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2008-05-23 17:05 --------- d-----w C:\Program Files\Symantec
2008-05-23 16:24 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-05-21 14:27 --------- d-----w C:\Program Files\GameSpy Arcade
2008-05-21 11:06 163,644 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
2008-05-20 11:21 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-05-20 11:19 --------- d-----w C:\Program Files\Windows Live
2008-05-20 11:19 --------- d-----w C:\Program Files\LimeWire
2008-05-19 15:22 2,320,512 ----a-w C:\WINDOWS\system32\TUKernel.exe
2008-05-19 15:11 --------- d-----w C:\Program Files\Common Files\AVSMedia
2008-05-15 16:19 73,216 ----a-w C:\WINDOWS\ST6UNST.EXE
2008-05-15 16:19 286,720 ------w C:\WINDOWS\Setup1.exe
2008-05-13 01:51 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2008-05-13 01:51 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
2008-05-11 06:04 155,995 ----a-w C:\WINDOWS\java\Packages\LNN33DNB.ZIP
2007-12-30 19:12 4 ----a-w C:\Program Files\DAEMON Tools Lite
.

------- Sigcheck -------

2006-11-14 14:00 359808 de891ad282e856acfd40990094a63b6f C:\WINDOWS\system32\drivers\tcpip.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2006-11-14 14:00 15360]
"uTorrent"="C:\Program Files\uTorrent\uTorrent.exe" [2008-05-14 14:17 219952]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Litee\daemon.exe" [2008-01-17 18:51 486856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Active Captions"="C:\WINDOWS\activecaptions.exe" [2006-11-14 14:00 337408]
"AllSnap"="C:\WINDOWS\allsnap.exe" [2006-11-14 14:00 81920]
"MakeFolder"="C:\WINDOWS\makefolder.exe" [2006-11-14 14:00 69632]
"Smapp"="C:\Program Files\Analog Devices\SoundMAX\SMTray.exe" [2002-11-08 15:50 98304]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-06-28 21:05 344064]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2005-08-11 16:30 249856]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2005-08-11 16:30 81920]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-11-14 14:00 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 1 (0x1)
"ForceCopyAclwithFile"= 0 (0x0)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 1 (0x1)
"ForceCopyAclwithFile"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="C:\\WINDOWS\\system32\\logonui.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avldr]
2007-02-15 20:02 50736 C:\WINDOWS\system32\avldr.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.XFR1"= xfcodec.dll
"msacm.ac3filter"= ac3filter.acm

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Sunbelt Software\\Personal Firewall 4\\kpf4gui.exe"=
"C:\\Program Files\\Xfire\\xfire.exe"=
"C:\\Program Files\\Activision\\Call of Duty 2\\CoD2MP_s.exe"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"C:\\totalcmd\\TOTALCMD.EXE"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Program Files\\GameSpy Arcade\\Aphex.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\WINDOWS\\system32\\dpnsvr.exe"=
"G:\\Program Files\\Hamachi\\hamachi.exe"=
"C:\\Program Files\\MaNGOS\\v6296\\diskw\\usr\\local\\mysql\\bin\\mysqld-nt.exe"=
"C:\\Program Files\\MaNGOS\\v6296\\diskw\\usr\\local\\Apache2\\bin\\Apache.exe"=

R1 fwdrv;Firewall Driver;C:\WINDOWS\system32\drivers\fwdrv.sys [2005-12-15 18:13]
R1 khips;Kerio HIPS Driver;C:\WINDOWS\system32\drivers\khips.sys [2005-12-15 18:01]
R1 ShldDrv;Panda File Shield Driver;C:\WINDOWS\system32\DRIVERS\ShlDrv51.sys [2008-07-18 07:42]
R2 PavProc;Panda Process Protection Driver;C:\WINDOWS\system32\DRIVERS\PavProc.sys [2008-07-18 07:42]
S2 {09BB444F-B2E2-4009-BAF2-7B727681223E};BuddyVM;g:\Program Files\VMLaunch\BuddyVM.sys []

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d7c7ca28-1f1f-11dd-baca-000c6e494af0}]
\Shell\AutoRun\command - F:\Launcher.exe
.
Contents of the 'Scheduled Tasks' folder
"2008-07-18 15:15:01 C:\WINDOWS\Tasks\1-Click Maintenance.job"
- C:\Program Files\TuneUp Utilities 2008\OneClick.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-19 15:38:51
Windows 5.1.2600 Szervizcsomag 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\PAVSRV51.EXE
C:\Program Files\Panda Security\Panda Antivirus 2008\AVENGINE.EXE
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\PsCtrlS.exe
C:\Program Files\Common Files\Panda Software\PavShld\PavPrSrv.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\PsImSvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\ApVxdWin.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\WebProxy.exe
.
**************************************************************************
.
Completion time: 2008-07-19 15:42:50 - machine was rebooted
ComboFix-quarantined-files.txt 2008-07-19 13:42:36

Pre-Run: 4,066,516,992 bájt szabad
Post-Run: 4,095,528,960 b jt szabad

205



a hj....

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:52:48, on 2008.07.19.
Platform: Windows XP Szervizcsomag 2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\pavsrv51.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\AVENGINE.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\activecaptions.exe
C:\WINDOWS\allsnap.exe
C:\WINDOWS\makefolder.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\DAEMON Tools Litee\daemon.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\PsCtrls.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\PsImSvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\ApvxdWin.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\WebProxy.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startlap.hu/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hivatkozások
R3 - URLSearchHook: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O4 - HKLM\..\Run: [Active Captions] "C:\WINDOWS\activecaptions.exe"
O4 - HKLM\..\Run: [AllSnap] "C:\WINDOWS\allsnap.exe"
O4 - HKLM\..\Run: [MakeFolder] "C:\WINDOWS\makefolder.exe" /s
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Litee\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'HELYI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'HÁLÓZATI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Az összes letöltése Free Download Managerrel - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xportálás Microsoft Excel formátumba - res://C:\PROGRA~1\Microsoft Office\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Kijelölés letöltése Free Download Managerrel - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Letöltés a FlashGet-tel - C:\PROGRA~1\FlashGet\jc_link.htm
O8 - Extra context menu item: Letöltés Free Download Managerrel - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Minden letöltése a FlashGet-tel - C:\PROGRA~1\FlashGet\jc_all.htm
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: Video letöltése a Free Download Manager-rel - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 0490184296
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0BCBD1BD-10F0-4A43-93E0-3A76DB0DA659}: NameServer = 193.110.57.4 193.110.56.8
O17 - HKLM\System\CS1\Services\Tcpip\..\{0BCBD1BD-10F0-4A43-93E0-3A76DB0DA659}: NameServer = 193.110.57.4 193.110.56.8
O17 - HKLM\System\CS2\Services\Tcpip\..\{0BCBD1BD-10F0-4A43-93E0-3A76DB0DA659}: NameServer = 193.110.57.4 193.110.56.8
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
O23 - Service: Panda Software Controller - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus 2008\PsCtrls.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus 2008\pavsrv51.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus 2008\PsImSvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 8357 bytes